# Top **URL:** https://discuss.elastic.co/top.md?page=1484&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1485 --- ## [Tooltip cutoff when widget is on side of screen](https://discuss.elastic.co/t/tooltip-cutoff-when-widget-is-on-side-of-screen/51568)
**Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\ **Replies:** 2\ **Last updated:** [June 1, 2016, 9:21pm UTC](https://discuss.elastic.co/t/tooltip-cutoff-when-widget-is-on-side-of-screen/51568 "2016-06-01T21:21:15Z")
I've noticed that when using widgets on the the left side of the dashboard the text is cutoff as the tooltip box does not factor in widget location. --- ## [JMSAppender used on Logstash 2.3.4 and Elasticsearch 2.3.4](https://discuss.elastic.co/t/jmsappender-used-on-logstash-2-3-4-and-elasticsearch-2-3-4/292127)
**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/jmsappender-used-on-logstash-2-3-4-and-elasticsearch-2-3-4/292127 "2021-12-19T23:12:02Z")
Can anyone confirm whether JMSAppender is used in Logstash 2.3.4 and Elasticsearch 2.3.4 ? --- ## [Setting up admin user credentials for Kibana](https://discuss.elastic.co/t/setting-up-admin-user-credentials-for-kibana/271617)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 10:33am UTC](https://discuss.elastic.co/t/setting-up-admin-user-credentials-for-kibana/271617 "2021-04-29T10:33:55Z")
I am trying to impose basic security on my Elasticstack specifically user authentication for Kibana. I enabled xpack security by adding the following configurations in elasticsearch.yml file: xpack.security.enabled: tru… --- ## [RDS -\> (Logstash) -\> Elasticsearch の取り込みができない](https://discuss.elastic.co/t/rds-logstash-elasticsearch/225406)
**Author:** [@sogaoh](https://discuss.elastic.co/u/sogaoh)\ **Replies:** 1\ **Last updated:** [March 27, 2020, 3:11pm UTC](https://discuss.elastic.co/t/rds-logstash-elasticsearch/225406 "2020-03-27T15:11:49Z")
バージョン： logstash:7.6.1 ( https://hub.docker.com/\_/logstash?tab=tags ) Logstash Pipeline を利用した AWS RDS (MySQL 5.7.12) からの AWS Elasticsearch(7.1) へのデータ流し込みでつまづいてしまっています。 おそらく該当のテーブルに geometry型のカラムがあるためではないかと思い、以下２点を試したので… --- ## [Ingest Attachment processor pipeline for arrays, without storing base64 data](https://discuss.elastic.co/t/ingest-attachment-processor-pipeline-for-arrays-without-storing-base64-data/214473)
**Author:** [@floors](https://discuss.elastic.co/u/floors)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 8:04am UTC](https://discuss.elastic.co/t/ingest-attachment-processor-pipeline-for-arrays-without-storing-base64-data/214473 "2020-01-10T08:04:01Z")
Hello, How can I index multiple attachments within one document, as explained in https://www.elastic.co/guide/en/elasticsearch/plugins/7.5/ingest-attachment-with-arrays.html , but without storing the base64 data? My i… --- ## [Logstash Remove Nested Dynamic-named fields](https://discuss.elastic.co/t/logstash-remove-nested-dynamic-named-fields/201619)
**Author:** [@Jsoini](https://discuss.elastic.co/u/Jsoini)\ **Replies:** 1\ **Last updated:** [September 30, 2019, 2:07pm UTC](https://discuss.elastic.co/t/logstash-remove-nested-dynamic-named-fields/201619 "2019-09-30T14:07:41Z")
Hello. I have a problem with a Logstash pipeline, which is getting events from Filebeat containers running on Kubernetes. The problem is, that some of the events will have fields that have dynamically generated names o… --- ## [If statements within a visualisation](https://discuss.elastic.co/t/if-statements-within-a-visualisation/194570)
**Author:** [@Darren\_Whitfield](https://discuss.elastic.co/u/Darren_Whitfield)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 9:13am UTC](https://discuss.elastic.co/t/if-statements-within-a-visualisation/194570 "2019-08-09T09:13:18Z")
Hi, Im pretty new to kibana and wanting some advice on a visualisation i am creating. I am creating a basic Pie chard with a count of a field in my data structure (whitepaperNameParent). I want to add some extra comple… --- ## [Can not start esrally after installed](https://discuss.elastic.co/t/can-not-start-esrally-after-installed/118593)
**Author:** [@imqishi](https://discuss.elastic.co/u/imqishi)\ **Replies:** 1\ **Last updated:** [February 6, 2018, 10:23am UTC](https://discuss.elastic.co/t/can-not-start-esrally-after-installed/118593 "2018-02-06T10:23:58Z")
After installed I try to run it but there's some errors... \[root@NETLOGS ~\]# esrally configure \_\_\_\_ \_\_\_\_ / \_\_ \\\_\_\_\_ \_/ / /\_ \_\_ / /\_/ / \_\_ \`/ / / / / / / \_, \_/ /\_/ / / / /\_/ / /\_/ |\_|\\\_\_,\_/\_/\_/\\\_\_, / … --- ## [Logstash-tcp TLS not terminating correctly](https://discuss.elastic.co/t/logstash-tcp-tls-not-terminating-correctly/93201)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 1\ **Last updated:** [July 14, 2017, 2:10pm UTC](https://discuss.elastic.co/t/logstash-tcp-tls-not-terminating-correctly/93201 "2017-07-14T14:10:14Z")
Hello, so I use two listeners on my logstash setup. Beats and TCP (using the plugin). Beats works fine over TLS \* ALPN, server did not agree to a protocol \> GET / HTTP/1.1 \> Host: logstash01.xx:5044 \> User-Agent: c… --- ## [Elasticsearch output workers for logstash 5.1](https://discuss.elastic.co/t/elasticsearch-output-workers-for-logstash-5-1/68638)
**Author:** [@rpuserh](https://discuss.elastic.co/u/rpuserh)\ **Replies:** 1\ **Last updated:** [December 12, 2016, 4:36am UTC](https://discuss.elastic.co/t/elasticsearch-output-workers-for-logstash-5-1/68638 "2016-12-12T04:36:01Z")
Hi, I want to open multiple connection to elastcsearch I used before workers =\> num but now it giving error. I found in documentation this workers Value type is string Default value is 1 Output workers are no lo… --- ## [Update\_by\_query taking a partial document](https://discuss.elastic.co/t/update-by-query-taking-a-partial-document/65940)
**Author:** [@Rob\_Bygrave](https://discuss.elastic.co/u/Rob_Bygrave)\ **Replies:** 1\ **Last updated:** [November 14, 2016, 10:39am UTC](https://discuss.elastic.co/t/update-by-query-taking-a-partial-document/65940 "2016-11-14T10:39:47Z")
Hi, I'm looking to use update\_by\_query with something like: { "script": { "inline": "ctx.\_source.customer.name='Rob'; ctx.\_source.customer.billingAddress.line1='42 foo way'; ctx.\_source.customer.billingAddress.line… --- ## [CPU from Windows](https://discuss.elastic.co/t/cpu-from-windows/54952)
**Author:** [@qutach](https://discuss.elastic.co/u/qutach)\ **Replies:** 1\ **Last updated:** [July 7, 2016, 2:15pm UTC](https://discuss.elastic.co/t/cpu-from-windows/54952 "2016-07-07T14:15:01Z")
Hi, I'm trying to save CPU metric to elastic with using Topbeat. Is there any filed that match the "CPU % Utilization" from Task Manger (also same value as "% Processor Time" from Performance Monitor)? What I have fou… --- ## [Error in loading rules to Elastalert](https://discuss.elastic.co/t/error-in-loading-rules-to-elastalert/199817)
**Author:** [@Maheswari](https://discuss.elastic.co/u/Maheswari)\ **Replies:** 0\ **Last updated:** [September 17, 2019, 12:11pm UTC](https://discuss.elastic.co/t/error-in-loading-rules-to-elastalert/199817 "2019-09-17T12:11:50Z")
I am try to get alerts using elastalert feature. I have used the following command elastalert --verbose --config /temp/elastalert/config.yaml.example Here is the following output INFO:elastalert:Starting up INFO:… --- ## [GC (Allocation Failure)](https://discuss.elastic.co/t/gc-allocation-failure/179744)
**Author:** [@hemantkhokhar](https://discuss.elastic.co/u/hemantkhokhar)\ **Replies:** 3\ **Last updated:** [May 7, 2019, 10:35am UTC](https://discuss.elastic.co/t/gc-allocation-failure/179744 "2019-05-07T10:35:14Z")
while i am getting below logs then kiban not showing logs ...need help. 10014.695: \[GC (Allocation Failure) 1531122K-\>1258470K(4160256K), 0.0214068 secs\] 10015.756: \[GC (Allocation Failure) 1531110K-\>1258425K(4160256… --- ## [Shrink API and Relocation of Shards](https://discuss.elastic.co/t/shrink-api-and-relocation-of-shards/146509)
**Author:** [@Edouard\_Fazenda](https://discuss.elastic.co/u/Edouard_Fazenda)\ **Replies:** 3\ **Last updated:** [September 3, 2018, 1:56pm UTC](https://discuss.elastic.co/t/shrink-api-and-relocation-of-shards/146509 "2018-09-03T13:56:07Z")
Dear Community, I am in the process of performing a shrink on indices in order to reduce the number of shards from 5 to 1 , i choose to test on my cluster on 1 index named "logstash-ssh-\*' So i followed the documentat… --- ## [Machine learning: Duration of "Open/Active" Event?](https://discuss.elastic.co/t/machine-learning-duration-of-open-active-event/119388)
**Author:** [@StephenOTT](https://discuss.elastic.co/u/StephenOTT)\ **Replies:** 3\ **Last updated:** [February 14, 2018, 12:27am UTC](https://discuss.elastic.co/t/machine-learning-duration-of-open-active-event/119388 "2018-02-14T00:27:16Z")
Looking at a use case where there is a Open and Close event. The Event shares the same ID, so the Close is a document update to the original Open document in ES. Is there a function in the ML engine to detect when the … --- ## [Geohash with packetbeat and logstash](https://discuss.elastic.co/t/geohash-with-packetbeat-and-logstash/53136)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 3\ **Last updated:** [June 18, 2016, 6:43am UTC](https://discuss.elastic.co/t/geohash-with-packetbeat-and-logstash/53136 "2016-06-18T06:43:10Z")
I have used packetbeat and logstash to read data and have downloaded the geolitecity.dat, but I could still not make any tile map in kibana as it still limits me to the option of client location as the geohash even I hav… --- ## [Upgrade to 1.7.1 or say with 1.6.x?](https://discuss.elastic.co/t/upgrade-to-1-7-1-or-say-with-1-6-x/26760)
**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\ **Replies:** 3\ **Last updated:** [August 3, 2015, 11:40pm UTC](https://discuss.elastic.co/t/upgrade-to-1-7-1-or-say-with-1-6-x/26760 "2015-08-03T23:40:37Z")
We have a new cluster, all nodes are running 1.6.1. I'm planning on updating to 1.6.2 this week. Is there any benefit to updating to 1.7.1 i.e. jumping track from 1.6 to 1.7 ? --- ## [Kibana Lens Dashboard Link Broken 404 Dashboard Not Found](https://discuss.elastic.co/t/kibana-lens-dashboard-link-broken-404-dashboard-not-found/350980)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 5\ **Last updated:** [January 16, 2024, 9:59pm UTC](https://discuss.elastic.co/t/kibana-lens-dashboard-link-broken-404-dashboard-not-found/350980 "2024-01-16T21:59:27Z")
Note: It may be necessary to check the user permissions first. TL/DR 1. (Hamburger Menu) --\> Stack Management --\> Saved Objects 2. Select the dashboard and Export 3. Open with Notepad++, CTRL +F, change the Search Mo… --- ## [Can't "SETUP" Packet beat](https://discuss.elastic.co/t/cant-setup-packet-beat/222029)
**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\ **Replies:** 5\ **Last updated:** [March 9, 2020, 12:57pm UTC](https://discuss.elastic.co/t/cant-setup-packet-beat/222029 "2020-03-09T12:57:24Z")
After running elasticsearch and kibana behind reverse proxy via nginx i am getting following error # packetbeat --path.config /etc/packetbeat/ setup Overwriting ILM policy is disabled. Set \`setup.ilm.overwrite:true\` for… --- ## [How to embed existing dashboard in custom kibana plugin](https://discuss.elastic.co/t/how-to-embed-existing-dashboard-in-custom-kibana-plugin/296030)
**Author:** [@Shreeya\_Rajguru](https://discuss.elastic.co/u/Shreeya_Rajguru)\ **Replies:** 6\ **Last updated:** [February 9, 2022, 6:34am UTC](https://discuss.elastic.co/t/how-to-embed-existing-dashboard-in-custom-kibana-plugin/296030 "2022-02-09T06:34:07Z")
Hi, Is there a way to embed the existing kibana dashboards in custom plugin? I have referred the dashboard embeddable example plugin code - Embeddables plugin | Kibana Guide \[master\] | Elastic but this doesn't seem to… --- ## [SIGTERM on master](https://discuss.elastic.co/t/sigterm-on-master/191157)
**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\ **Replies:** 6\ **Last updated:** [July 19, 2019, 5:38am UTC](https://discuss.elastic.co/t/sigterm-on-master/191157 "2019-07-19T05:38:54Z")
Would a SIGTERM on master handle automatic exclusion from voting configuration --- ## [How to read kernel log in logstash?](https://discuss.elastic.co/t/how-to-read-kernel-log-in-logstash/179177)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 6\ **Last updated:** [May 3, 2019, 6:45am UTC](https://discuss.elastic.co/t/how-to-read-kernel-log-in-logstash/179177 "2019-05-03T06:45:24Z")
Please help me to understand that how to read kernel logs using logstash in version 5.0 is there any input plugins ? --- ## [Unable to view fields in kibana](https://discuss.elastic.co/t/unable-to-view-fields-in-kibana/167579)
**Author:** [@Sripal](https://discuss.elastic.co/u/Sripal)\ **Replies:** 6\ **Last updated:** [February 12, 2019, 7:20am UTC](https://discuss.elastic.co/t/unable-to-view-fields-in-kibana/167579 "2019-02-12T07:20:03Z")
Hi All, I am unable to view the fields in kibana. For the time Jan 1 to 31 the following fields are visible But for the same index from Jan 2 14:54:00 to Jan 2 15:00:00, I am able to see the all fields err\_number e… --- ## [Error showing while displaying an old dashboard](https://discuss.elastic.co/t/error-showing-while-displaying-an-old-dashboard/120505)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 6\ **Last updated:** [February 20, 2018, 3:53pm UTC](https://discuss.elastic.co/t/error-showing-while-displaying-an-old-dashboard/120505 "2018-02-20T15:53:19Z")
Hello, I am getting the error in the screenshot, can anyone point me in the right direction to resolve this? It's a dashboard that worked from 5.6.x to 6.0 and nothing changed, aside from the ELK version (6.2.1) The er… --- ## [Csv output plugin - custom field](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [February 9, 2018, 4:14am UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744 "2018-02-09T04:14:26Z")
I'm following Csv output plugin | Logstash Reference \[6.1\] | Elastic and I have a question... How would I add extra field with my own text? Please advise. --- ## [Droping winlog.event\_data.LogonType: "3"](https://discuss.elastic.co/t/droping-winlog-event-data-logontype-3/231883)
**Author:** [@kubekpk](https://discuss.elastic.co/u/kubekpk)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 11:27am UTC](https://discuss.elastic.co/t/droping-winlog-event-data-logontype-3/231883 "2020-05-11T11:27:49Z")
Hello, Starting with ELK ,I'm trying to drop the following event without success winlog.event\_data.LogonType: "3" Can someone help? - name: Security ignore\_older: 24h event\_id: 4624, 4625, 7045, 4758, 4743, 4734, 4… --- ## ["Resource was created with older version of operator, will not take action" cause ES cluster pods to stuck](https://discuss.elastic.co/t/resource-was-created-with-older-version-of-operator-will-not-take-action-cause-es-cluster-pods-to-stuck/197381)
**Author:** [@sarjeet](https://discuss.elastic.co/u/sarjeet)\ **Replies:** 2\ **Last updated:** [August 29, 2019, 7:01pm UTC](https://discuss.elastic.co/t/resource-was-created-with-older-version-of-operator-will-not-take-action-cause-es-cluster-pods-to-stuck/197381 "2019-08-29T19:01:30Z")
I am facing an issue with the Elasticsearch (w/o kibana or apm) cluster deployment with the custom operator image compiled and built locally (using latest master without any changes) and tried to deploy a simple Elastics… --- ## [Filter in Time Series Visual Builder](https://discuss.elastic.co/t/filter-in-time-series-visual-builder/110525)
**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\ **Replies:** 2\ **Last updated:** [December 9, 2017, 5:47pm UTC](https://discuss.elastic.co/t/filter-in-time-series-visual-builder/110525 "2017-12-09T17:47:53Z")
HI ALL, I would like to know how it is possible to set or inherit a filter (because pinned in another view) in version 6.0 of Time Series Visual Builder Year. in version 5.5.2 Time Series Visual Builder Year inherited p… --- ## [Date filter fails to convert String value](https://discuss.elastic.co/t/date-filter-fails-to-convert-string-value/101258)
**Author:** [@glipinski](https://discuss.elastic.co/u/glipinski)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 8:38am UTC](https://discuss.elastic.co/t/date-filter-fails-to-convert-string-value/101258 "2017-09-25T08:38:24Z")
Hi, My logs are in xml format. I am using xml filter to parse them and select specific fields. One of the fields is Time xpath =\> \[" .//Time/text()", "timestamp"\] I want to use this filed as a base timestamp (the fi… --- ## [How the kibana Internationalization?](https://discuss.elastic.co/t/how-the-kibana-internationalization/43465)
**Author:** [@lester015](https://discuss.elastic.co/u/lester015)\ **Replies:** 2\ **Last updated:** [March 4, 2016, 8:36am UTC](https://discuss.elastic.co/t/how-the-kibana-internationalization/43465 "2016-03-04T08:36:11Z")
Hi everyone, I want the kibana Internationalization, the client want to see chinese on kibana. my kibana version is kibana-4.4.1-linux-x64. thanks! Levi --- ## [Deleting a parent document with no Child Documents](https://discuss.elastic.co/t/deleting-a-parent-document-with-no-child-documents/17690)
**Author:** [@Ishan\_Durugkar](https://discuss.elastic.co/u/Ishan_Durugkar)\ **Replies:** 2\ **Last updated:** [May 26, 2014, 6:02am UTC](https://discuss.elastic.co/t/deleting-a-parent-document-with-no-child-documents/17690 "2014-05-26T06:02:12Z")
Hi, I am new to elasticsearch. I was trying to create a parent-child mapping where the children would be frequently added and removed. Every Parent should have at least one child. What I want to do is, if a chil… --- ## [Data is already aggregated in logstash feed, how to create a Kibana UI on this aggregated metrics](https://discuss.elastic.co/t/data-is-already-aggregated-in-logstash-feed-how-to-create-a-kibana-ui-on-this-aggregated-metrics/225561)
**Author:** [@apdpsudx](https://discuss.elastic.co/u/apdpsudx)\ **Replies:** 8\ **Last updated:** [April 2, 2020, 2:16pm UTC](https://discuss.elastic.co/t/data-is-already-aggregated-in-logstash-feed-how-to-create-a-kibana-ui-on-this-aggregated-metrics/225561 "2020-04-02T14:16:04Z")
Hi All, I am a bit new to ELK and have been researching this for a bit, and most forums and links I found indicate this is not possible. Happy if there is a thread open/closed for me to review as well. Scenario: Run… --- ## [UDP input codec](https://discuss.elastic.co/t/udp-input-codec/313740)
**Author:** [@Laurent\_DEGEN](https://discuss.elastic.co/u/Laurent_DEGEN)\ **Replies:** 7\ **Last updated:** [September 9, 2022, 7:48am UTC](https://discuss.elastic.co/t/udp-input-codec/313740 "2022-09-09T07:48:54Z")
Hi, I have an NB-IOT sensor that outputs UDP packets containing some data. I used the default UDP input plugin and default plain codec but It does not decode the packet's UDP payload the way I want it to (headers work … --- ## [Query with more than one field](https://discuss.elastic.co/t/query-with-more-than-one-field/241509)
**Author:** [@schneider](https://discuss.elastic.co/u/schneider)\ **Replies:** 7\ **Last updated:** [July 23, 2020, 12:50pm UTC](https://discuss.elastic.co/t/query-with-more-than-one-field/241509 "2020-07-23T12:50:34Z")
Hello, i want the data witch : field "transacao" = " QuarantineTransac" and the field "assunto" = "qualquerassunto", but is retrieving data witch one OR another no the 2 at the same time { "query": { "boo… --- ## [複数フィールドをまたいだ検索について](https://discuss.elastic.co/t/topic/205821)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 12:55am UTC](https://discuss.elastic.co/t/topic/205821 "2019-10-31T00:55:13Z")
{ "query": { "multi\_match":{ "query":"マラソン 札幌", "type":"cross\_fields", "operator":"and", "fields":\["competition","city"\] }}, "explain":true } 上記のようにmulti\_matchを使用した複数フィールドをまたいだ検索の場合、 fieldsに設定したfieldに検索文に当ては… --- ## [Issue after upgrade from metricbeat 7.1.1 to 7.2.0](https://discuss.elastic.co/t/issue-after-upgrade-from-metricbeat-7-1-1-to-7-2-0/187878)
**Author:** [@ohardy](https://discuss.elastic.co/u/ohardy)\ **Replies:** 1\ **Last updated:** [July 1, 2019, 9:07am UTC](https://discuss.elastic.co/t/issue-after-upgrade-from-metricbeat-7-1-1-to-7-2-0/187878 "2019-07-01T09:07:25Z")
Hi, Before upgrade, I got records of type event.dataset='kubernetes.container' with kubernetes meta data added like labels, pod id, etc. After the upgrade, I lost kubernetes meta data. I change nothing, just upgraded … --- ## [Shards are not allocating to available node](https://discuss.elastic.co/t/shards-are-not-allocating-to-available-node/149487)
**Author:** [@Francisco\_Correia](https://discuss.elastic.co/u/Francisco_Correia)\ **Replies:** 1\ **Last updated:** [September 21, 2018, 9:47pm UTC](https://discuss.elastic.co/t/shards-are-not-allocating-to-available-node/149487 "2018-09-21T21:47:08Z")
Hi, I'm running an 1 node elastic search version 6.2.1 and I'm getting an error with several indexes that fails to be allocated. $ curl -s 'http://localhost:9200/\_cluster/health?pretty' { "cluster\_name": "docker-c… --- ## [Logstash in ece?](https://discuss.elastic.co/t/logstash-in-ece/77301)
**Author:** [@das-chick](https://discuss.elastic.co/u/das-chick)\ **Replies:** 1\ **Last updated:** [March 3, 2017, 6:53pm UTC](https://discuss.elastic.co/t/logstash-in-ece/77301 "2017-03-03T18:53:50Z")
Will it be possible, to get logstash instances managed in ece? --- ## [Meaning of ram.current in \_cat/nodes](https://discuss.elastic.co/t/meaning-of-ram-current-in--cat-nodes/60205)
**Author:** [@vin01](https://discuss.elastic.co/u/vin01)\ **Replies:** 1\ **Last updated:** [September 12, 2016, 8:38am UTC](https://discuss.elastic.co/t/meaning-of-ram-current-in--cat-nodes/60205 "2016-09-12T08:38:14Z")
In my elasticsearch cluster of 3 nodes, following is the memory usage as reported by \_cat/nodes/ : - name ram.current es01 61.9gb es02 62.5gb es03 52.4gb and following is the memory usage of elastics… --- ## [Logstash not creating ES indexes](https://discuss.elastic.co/t/logstash-not-creating-es-indexes/59154)
**Author:** [@harpax](https://discuss.elastic.co/u/harpax)\ **Replies:** 1\ **Last updated:** [August 29, 2016, 11:06am UTC](https://discuss.elastic.co/t/logstash-not-creating-es-indexes/59154 "2016-08-29T11:06:19Z")
Hi, I have made an update from ES 1.4.x and Logstash 1.4.x to the current release versions (2.3.x) on a 3 node cluster. My old data is still available and with a few changes to the logstash.conf (deprecated functions/o… --- ## [Cannot flush pipeline logstash hangs](https://discuss.elastic.co/t/cannot-flush-pipeline-logstash-hangs/48487)
**Author:** [@wmcdonald](https://discuss.elastic.co/u/wmcdonald)\ **Replies:** 1\ **Last updated:** [April 26, 2016, 10:58pm UTC](https://discuss.elastic.co/t/cannot-flush-pipeline-logstash-hangs/48487 "2016-04-26T22:58:55Z")
I am running logstash 2.3.1 on solaris 10 with java version "1.7.0\_55". $ bin/logstash -f config.txt -w 16 --log ./logs/logstash.log -vv It loads the config file fine, reads in a lot of data but then tries to put a flush… --- ## [Watcher recovery action](https://discuss.elastic.co/t/watcher-recovery-action/37498)
**Author:** [@Danny830x](https://discuss.elastic.co/u/Danny830x)\ **Replies:** 1\ **Last updated:** [December 21, 2015, 1:22pm UTC](https://discuss.elastic.co/t/watcher-recovery-action/37498 "2015-12-21T13:22:24Z")
I am using the following watch definition. It's pretty simple, just sends an email when the cluster is red: curl -XPUT 'http://localhost:9200/\_watcher/watch/cluster\_health\_watch' -d '{ "trigger" : { "schedule" : { "i… --- ## [Query Failed \[Failed to execute main query\] OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/query-failed-failed-to-execute-main-query-outofmemoryerror-java-heap-space/34596)
**Author:** [@ryodo](https://discuss.elastic.co/u/ryodo)\ **Replies:** 1\ **Last updated:** [November 14, 2015, 7:38pm UTC](https://discuss.elastic.co/t/query-failed-failed-to-execute-main-query-outofmemoryerror-java-heap-space/34596 "2015-11-14T19:38:43Z")
Hi i have data in elastic 80 M of data have 52 Go and i search in text with this query $json\_doc = '{ "query": { "query\_string": { "query": "\*' . $sujet . '\*… --- ## [Heap usage holds steady at max and GC does not run. Need to force restart the cluster](https://discuss.elastic.co/t/heap-usage-holds-steady-at-max-and-gc-does-not-run-need-to-force-restart-the-cluster/335176)
**Author:** [@Jorge\_Eguiguren](https://discuss.elastic.co/u/Jorge_Eguiguren)\ **Replies:** 4\ **Last updated:** [June 8, 2023, 11:53pm UTC](https://discuss.elastic.co/t/heap-usage-holds-steady-at-max-and-gc-does-not-run-need-to-force-restart-the-cluster/335176 "2023-06-08T23:53:39Z")
Cluster configuration: 3 Nodes GET \_nodes/\_all/jvm Elasticsearch version: 7.10.1 Java version: 15.0.1 gc\_collectors: \[ "G1 Young Generation", "G1 Old Generation"\] heap\_max\_in\_bytes: 30064771072 (30 GB) Circuit bre… --- ## [Exclude monitors that have a specific tag, but Alert still counts these monitors](https://discuss.elastic.co/t/exclude-monitors-that-have-a-specific-tag-but-alert-still-counts-these-monitors/249332)
**Author:** [@Mark\_Veenstra](https://discuss.elastic.co/u/Mark_Veenstra)\ **Replies:** 4\ **Last updated:** [September 29, 2020, 12:42pm UTC](https://discuss.elastic.co/t/exclude-monitors-that-have-a-specific-tag-but-alert-still-counts-these-monitors/249332 "2020-09-29T12:42:58Z")
I am trying to alert on monitors excluding monitors that have the tag no-alert. See the next configuration: Which shows it will be applied to 32 monitors. Which is correct there are 2 monitors that have that tag. So a… --- ## [Kibana search discover error](https://discuss.elastic.co/t/kibana-search-discover-error/230572)
**Author:** [@janmichae.reyes4](https://discuss.elastic.co/u/janmichae.reyes4)\ **Replies:** 4\ **Last updated:** [May 5, 2020, 12:48pm UTC](https://discuss.elastic.co/t/kibana-search-discover-error/230572 "2020-05-05T12:48:50Z")
Hi, Need your help on why i experienced this issue below? SyntaxError: Unexpected token u in JSON at position 0 at JSON.parse () at http://localhost:5601/bundles/commons.bundle.js:3:3378900 at http://localhost:5601/… --- ## [Upgrade es 6.2 to 6.3 and kibana doesn't work](https://discuss.elastic.co/t/upgrade-es-6-2-to-6-3-and-kibana-doesnt-work/199627)
**Author:** [@Bowen\_Liu](https://discuss.elastic.co/u/Bowen_Liu)\ **Replies:** 4\ **Last updated:** [September 17, 2019, 1:56am UTC](https://discuss.elastic.co/t/upgrade-es-6-2-to-6-3-and-kibana-doesnt-work/199627 "2019-09-17T01:56:16Z")
Hi, all. I managed to upgrade es from es 6.2.4 to 6.3.0 two days ago and I'm now starting to upgrade kibana too.But when I download kibana 6.3.0 and copy old config of kibana 6.2.4 to 6.3.0 and start kibana, it just can'… --- ## [Elasticsearch 7.0 can't bind to private address](https://discuss.elastic.co/t/elasticsearch-7-0-cant-bind-to-private-address/195353)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 4\ **Last updated:** [August 28, 2019, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-7-0-cant-bind-to-private-address/195353 "2019-08-28T10:37:55Z")
Hi! I've just set up two ES nodes on GCP VMs. However, I can't set up it in a way the two of those can discover each other by private IP and no requests for the public IP would be answered. The configuration on both nod… --- ## [Separate Query Aggregation Nodes from Data Nodes](https://discuss.elastic.co/t/separate-query-aggregation-nodes-from-data-nodes/168727)
**Author:** [@codeboy](https://discuss.elastic.co/u/codeboy)\ **Replies:** 4\ **Last updated:** [February 22, 2019, 4:43pm UTC](https://discuss.elastic.co/t/separate-query-aggregation-nodes-from-data-nodes/168727 "2019-02-22T16:43:19Z")
Is there a way to make the data ingest load separate from the query aggregation activity? My goal is to allocate some data nodes that can handle the ingest and low level query load. But for higher level aggregation for… [Previous page](https://discuss.elastic.co/top.md?page=1483&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1485&per_page=50&period=all)