# Top

**URL:** https://discuss.elastic.co/top.md?page=1493&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1494

---

## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and this node must discover master-eligible nodes](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes/188706)

<div class="topic-metadata">

**Author:** [@gowsalai](https://discuss.elastic.co/u/gowsalai)\
**Replies:** 2\
**Last updated:** [July 8, 2019, 5:35am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes/188706 "2019-07-08T05:35:06Z")

</div>

Hi, We are getting the below error during eck operator (https://www.elastic.co/guide/en/cloud-on-k8s/0.8/k8s-quickstart.html) bring up with persistent volume. We don't see the issue without the persistent volume. boot…

---

## [Bar charts in kibana missing extended\_stats? (4.1 version)](https://discuss.elastic.co/t/bar-charts-in-kibana-missing-extended-stats-4-1-version/26798)

<div class="topic-metadata">

**Author:** [@tarunsapra](https://discuss.elastic.co/u/tarunsapra)\
**Replies:** 2\
**Last updated:** [August 11, 2015, 6:53am UTC](https://discuss.elastic.co/t/bar-charts-in-kibana-missing-extended-stats-4-1-version/26798 "2015-08-11T06:53:02Z")

</div>

Hi, I am using Kibana 4.1, and as per documentation - https://www.elastic.co/guide/en/kibana/current/vertical-bar-chart.html , i should be able to see the Standard\_deviation metric, but it's not there in the bar chart …

---

## [Best way to setup elastic search on its own server(s)](https://discuss.elastic.co/t/best-way-to-setup-elastic-search-on-its-own-server-s/10520)

<div class="topic-metadata">

**Author:** [@doug\_livesey](https://discuss.elastic.co/u/doug_livesey)\
**Replies:** 2\
**Last updated:** [January 29, 2013, 1:18pm UTC](https://discuss.elastic.co/t/best-way-to-setup-elastic-search-on-its-own-server-s/10520 "2013-01-29T13:18:48Z")

</div>

Hi -- I'll be looking to migrate elasticsearch off our application servers, soon, onto its own server or servers. I was wondering if there's any considered best practice for doing this? Would one instance on one serve…

---

## [Parsing Data in message field](https://discuss.elastic.co/t/parsing-data-in-message-field/356300)

<div class="topic-metadata">

**Author:** [@Sheperd403](https://discuss.elastic.co/u/Sheperd403)\
**Replies:** 1\
**Last updated:** [March 28, 2024, 6:29am UTC](https://discuss.elastic.co/t/parsing-data-in-message-field/356300 "2024-03-28T06:29:10Z")

</div>

I am quite new to Elastic altogether, namely elastic agent, so looking for some guidance! To further preface, I am calling this parsing, but based on what I am requesting, that may not be the correct term for what I am a…

---

## [\_reindex: Validation Failed: 1: id is too long, must be no longer than 512 bytes but was: 1012](https://discuss.elastic.co/t/reindex-validation-failed-1-id-is-too-long-must-be-no-longer-than-512-bytes-but-was-1012/117768)

<div class="topic-metadata">

**Author:** [@willsun5\_2000](https://discuss.elastic.co/u/willsun5_2000)\
**Replies:** 1\
**Last updated:** [February 3, 2018, 1:53pm UTC](https://discuss.elastic.co/t/reindex-validation-failed-1-id-is-too-long-must-be-no-longer-than-512-bytes-but-was-1012/117768 "2018-02-03T13:53:49Z")

</div>

This is an elasticsearch platform upgrade project, we are targeting to migrate legacy data which is collected in past 2 years from elasticsearch 1.5.\* to 6.1.. when I perform \_reindex to move the data, I got the follow…

---

## [Nginx for Kibana Iframe](https://discuss.elastic.co/t/nginx-for-kibana-iframe/115788)

<div class="topic-metadata">

**Author:** [@He\_Pamela](https://discuss.elastic.co/u/He_Pamela)\
**Replies:** 1\
**Last updated:** [January 16, 2018, 9:43pm UTC](https://discuss.elastic.co/t/nginx-for-kibana-iframe/115788 "2018-01-16T21:43:25Z")

</div>

Hi, How can I pass the credentials and authorization using Nginx or something different to get and Iframe and then embedded it in other page. Thanks.

---

## [Remove field \_source](https://discuss.elastic.co/t/remove-field--source/85932)

<div class="topic-metadata">

**Author:** [@Mouad\_Mimouni](https://discuss.elastic.co/u/Mouad_Mimouni)\
**Replies:** 1\
**Last updated:** [May 16, 2017, 3:13pm UTC](https://discuss.elastic.co/t/remove-field--source/85932 "2017-05-16T15:13:53Z")

</div>

Hello, I want to remove the \_source field pls Thanks

---

## [Update field based on regex results](https://discuss.elastic.co/t/update-field-based-on-regex-results/53056)

<div class="topic-metadata">

**Author:** [@TonyIT](https://discuss.elastic.co/u/TonyIT)\
**Replies:** 1\
**Last updated:** [June 18, 2016, 1:32am UTC](https://discuss.elastic.co/t/update-field-based-on-regex-results/53056 "2016-06-18T01:32:06Z")

</div>

Hello! I'm new to ElasticSearch, and i need to create a field based on a query result. More specific, i need to make a query search on a field that contains only a specific substring, then i need to estract from this fi…

---

## [Relationship between pipleline workers and Kafka/ES plugin workers](https://discuss.elastic.co/t/relationship-between-pipleline-workers-and-kafka-es-plugin-workers/46608)

<div class="topic-metadata">

**Author:** [@dr\_work](https://discuss.elastic.co/u/dr_work)\
**Replies:** 1\
**Last updated:** [April 13, 2016, 1:21am UTC](https://discuss.elastic.co/t/relationship-between-pipleline-workers-and-kafka-es-plugin-workers/46608 "2016-04-13T01:21:29Z")

</div>

For Logstash 2.3, what is the relationship between the number of pipeline workers (which by default is equal to the number of cores) and the following: Kafka output plugin parameter "workers". Elasticsearch output p…

---

## [How to contribute to edits on the website documentation](https://discuss.elastic.co/t/how-to-contribute-to-edits-on-the-website-documentation/300712)

<div class="topic-metadata">

**Author:** [@polarknight](https://discuss.elastic.co/u/polarknight)\
**Replies:** 6\
**Last updated:** [March 26, 2022, 1:55pm UTC](https://discuss.elastic.co/t/how-to-contribute-to-edits-on-the-website-documentation/300712 "2022-03-26T13:55:18Z")

</div>

Hi all, I hope this finds everyone well. I've been looking around but after, what I believe is incorrect as regards process, making a pull request for a documentation error on the elastic.co website for getting set up …

---

## [Split Brain Scenario](https://discuss.elastic.co/t/split-brain-scenario/180658)

<div class="topic-metadata">

**Author:** [@Ganesh999](https://discuss.elastic.co/u/Ganesh999)\
**Replies:** 6\
**Last updated:** [May 13, 2019, 4:17am UTC](https://discuss.elastic.co/t/split-brain-scenario/180658 "2019-05-13T04:17:04Z")

</div>

Hi, We currently experienced split brain scenario in elasticsearch. After it happened we reseted the cluster setting and added that node to the cluster and did the required setting like master eligible node to 3 and min…

---

## [Добавление синонимов через функцию](https://discuss.elastic.co/t/topic/150890)

<div class="topic-metadata">

**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\
**Replies:** 6\
**Last updated:** [October 4, 2018, 4:37am UTC](https://discuss.elastic.co/t/topic/150890 "2018-10-04T04:37:20Z")

</div>

Добрый день! Опишу сначала проблему: В наших документах иногда встречаются слова с замененными визуально похожими буквами, например, русская "а" и английская "а". Это создает проблемы во время поиска. Хотел индексирова…

---

## [Or query in ES](https://discuss.elastic.co/t/or-query-in-es/82158)

<div class="topic-metadata">

**Author:** [@E.Eric](https://discuss.elastic.co/u/E.Eric)\
**Replies:** 6\
**Last updated:** [April 12, 2017, 1:57pm UTC](https://discuss.elastic.co/t/or-query-in-es/82158 "2017-04-12T13:57:01Z")

</div>

Hello, Given a couple \<key,value\> I want to create a query to find documents where a nested field contains the couple \<key,value\> . The structure is like this: "f1":{ "key":"K1", "value","V1"}, "f2":{ "key":"K…

---

## [Add non existing settings in cluster settings in elasticsearch](https://discuss.elastic.co/t/add-non-existing-settings-in-cluster-settings-in-elasticsearch/22961)

<div class="topic-metadata">

**Author:** [@Ayman](https://discuss.elastic.co/u/Ayman)\
**Replies:** 6\
**Last updated:** [April 6, 2015, 10:03pm UTC](https://discuss.elastic.co/t/add-non-existing-settings-in-cluster-settings-in-elasticsearch/22961 "2015-04-06T22:03:01Z")

</div>

Hi there, Recently i have built elasticsearch with fluentd and Kibana and all is working fine, but we are facing high cpu load while performing search caused by java. I have 60 GB Ram and 16 processors and ea…

---

## [Data Ingestion From Cloud Firestore Into Elasticsearch](https://discuss.elastic.co/t/data-ingestion-from-cloud-firestore-into-elasticsearch/175865)

<div class="topic-metadata">

**Author:** [@Muhammad\_Ezzat](https://discuss.elastic.co/u/Muhammad_Ezzat)\
**Replies:** 0\
**Last updated:** [April 8, 2019, 3:02pm UTC](https://discuss.elastic.co/t/data-ingestion-from-cloud-firestore-into-elasticsearch/175865 "2019-04-08T15:02:08Z")

</div>

We are trying to ingest data from Cloud Firestore into Elasticsearch. We found this plugin - elasticstore - created by the community; it is very helpful, but it has a serious drawback. The following is a quotation from …

---

## [Kibana LDAP authentication via apache proxy](https://discuss.elastic.co/t/kibana-ldap-authentication-via-apache-proxy/312385)

<div class="topic-metadata">

**Author:** [@thirty2](https://discuss.elastic.co/u/thirty2)\
**Replies:** 4\
**Last updated:** [August 22, 2022, 7:27am UTC](https://discuss.elastic.co/t/kibana-ldap-authentication-via-apache-proxy/312385 "2022-08-22T07:27:57Z")

</div>

Hi, with xpack and TLS for elasticserach + kibana disable i can use ldap authentication via apache. I can login to kibana with my ldap account. Kibana config: server.port: 5601 server.host: "myhost" elasticsearch.hos…

---

## [Is it possible to auto increment documents as they are indexed?](https://discuss.elastic.co/t/is-it-possible-to-auto-increment-documents-as-they-are-indexed/300887)

<div class="topic-metadata">

**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\
**Replies:** 1\
**Last updated:** [March 28, 2022, 7:56pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auto-increment-documents-as-they-are-indexed/300887 "2022-03-28T19:56:48Z")

</div>

Context: I am using the bulk API to index several documents into an index I would like to auto increment a field, 'y', present in the documents, which would tally the order in which documents are indexed. (I know i…

---

## ["Azure Excessive Signin Logs by Azure Identity" unusable azure.signinlogs.identity](https://discuss.elastic.co/t/azure-excessive-signin-logs-by-azure-identity-unusable-azure-signinlogs-identity/269708)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 9:55pm UTC](https://discuss.elastic.co/t/azure-excessive-signin-logs-by-azure-identity-unusable-azure-signinlogs-identity/269708 "2021-04-12T21:55:03Z")

</div>

Hello, Just noticed that in the rule "Azure Excessive Signin Logs by Azure Identity" it seems impossible to display the field azure.signinlogs.identity, which is not very user friendly and a waste of time to lookup afte…

---

## [APM queue is full (output Kafka)](https://discuss.elastic.co/t/apm-queue-is-full-output-kafka/257382)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 4\
**Last updated:** [December 3, 2020, 5:33pm UTC](https://discuss.elastic.co/t/apm-queue-is-full-output-kafka/257382 "2020-12-03T17:33:10Z")

</div>

Hi, What can I do if the APM server (7.9.2) continuously logs 503 errors (queue is full)? I checked the tuning options but for many reasons my output isn't Elasticsearch but Kafka and I couldn't find any pointer that wo…

---

## [io.netty.buffer.PoolArena$HeapArena is biggest object es version is 5.2.0?](https://discuss.elastic.co/t/io-netty-buffer-poolarena-heaparena-is-biggest-object-es-version-is-5-2-0/183726)

<div class="topic-metadata">

**Author:** [@JIAFEI\_Jiang](https://discuss.elastic.co/u/JIAFEI_Jiang)\
**Replies:** 4\
**Last updated:** [June 3, 2019, 9:20am UTC](https://discuss.elastic.co/t/io-netty-buffer-poolarena-heaparena-is-biggest-object-es-version-is-5-2-0/183726 "2019-06-03T09:20:45Z")

</div>

---

## [Aggregation count problem](https://discuss.elastic.co/t/aggregation-count-problem/104976)

<div class="topic-metadata">

**Author:** [@mohammed\_cherif](https://discuss.elastic.co/u/mohammed_cherif)\
**Replies:** 4\
**Last updated:** [October 26, 2017, 5:56pm UTC](https://discuss.elastic.co/t/aggregation-count-problem/104976 "2017-10-26T17:56:32Z")

</div>

Hello, I want to display an indicator on kibana, but I can not do it. I explain the situation. I want to display "the total number of products whose thresholds exceeded the maximum of consumers' cuttof". we have a pro…

---

## [N00b: E on bro problem](https://discuss.elastic.co/t/n00b-e-on-bro-problem/78262)

<div class="topic-metadata">

**Author:** [@randy](https://discuss.elastic.co/u/randy)\
**Replies:** 4\
**Last updated:** [March 12, 2017, 9:05am UTC](https://discuss.elastic.co/t/n00b-e-on-bro-problem/78262 "2017-03-12T09:05:15Z")

</div>

ubuntu 16.04, following recipe in # /usr/share/logstash/bin/logstash -e output { stdout {} } WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the…

---

## [Data migration from solr to elastic?](https://discuss.elastic.co/t/data-migration-from-solr-to-elastic/34208)

<div class="topic-metadata">

**Author:** [@eprst](https://discuss.elastic.co/u/eprst)\
**Replies:** 4\
**Last updated:** [November 10, 2015, 10:00pm UTC](https://discuss.elastic.co/t/data-migration-from-solr-to-elastic/34208 "2015-11-10T22:00:42Z")

</div>

rivers are deprecated.what are other ways to migrate data from solr to elastic?

---

## [Metricbeat](https://discuss.elastic.co/t/metricbeat/285124)

<div class="topic-metadata">

**Author:** [@savan820](https://discuss.elastic.co/u/savan820)\
**Replies:** 5\
**Last updated:** [September 30, 2021, 5:31am UTC](https://discuss.elastic.co/t/metricbeat/285124 "2021-09-30T05:31:24Z")

</div>

couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at https://localhost:9200: Get "https://localhost:9200": x509: certificate signed by unknown authority\]

---

## [Last Valid Value of a Field in Scripted Fields](https://discuss.elastic.co/t/last-valid-value-of-a-field-in-scripted-fields/250918)

<div class="topic-metadata">

**Author:** [@Nastooh](https://discuss.elastic.co/u/Nastooh)\
**Replies:** 5\
**Last updated:** [October 5, 2020, 7:23pm UTC](https://discuss.elastic.co/t/last-valid-value-of-a-field-in-scripted-fields/250918 "2020-10-05T19:23:33Z")

</div>

Hi I need to perform math functions on fields with different timestamps. For example, current value of field x, qualified by its size and the last valid value of field y: if(doc\['x'\].size()\>0){ doc\['x'\].value+doc\['y'…

---

## [Calculate percentage for the fileds in time range](https://discuss.elastic.co/t/calculate-percentage-for-the-fileds-in-time-range/178261)

<div class="topic-metadata">

**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\
**Replies:** 5\
**Last updated:** [April 30, 2019, 9:24am UTC](https://discuss.elastic.co/t/calculate-percentage-for-the-fileds-in-time-range/178261 "2019-04-30T09:24:36Z")

</div>

Hi all I am having an index which contains @timestamp, Status, System, Subsystem... the Status has a value like 200, 400, 500 I would like to do a calculation every 5 mins \[Sum(Status) where Status:400\]/Sum(Status) …

---

## [Incorrect relevance score of documents](https://discuss.elastic.co/t/incorrect-relevance-score-of-documents/92364)

<div class="topic-metadata">

**Author:** [@gtulsyan](https://discuss.elastic.co/u/gtulsyan)\
**Replies:** 5\
**Last updated:** [July 8, 2017, 4:04pm UTC](https://discuss.elastic.co/t/incorrect-relevance-score-of-documents/92364 "2017-07-08T16:04:57Z")

</div>

Hi, I just started with the elastic search tutorial and was following the the documentation on full-text search from https://www.elastic.co/guide/en/elasticsearch/guide/current/\_full\_text\_search.html When I ran the same …

---

## [Different plugins in an unique visualize](https://discuss.elastic.co/t/different-plugins-in-an-unique-visualize/86650)

<div class="topic-metadata">

**Author:** [@forkyfor](https://discuss.elastic.co/u/forkyfor)\
**Replies:** 5\
**Last updated:** [May 22, 2017, 2:59pm UTC](https://discuss.elastic.co/t/different-plugins-in-an-unique-visualize/86650 "2017-05-22T14:59:00Z")

</div>

Hi, I need to show in a dashboard different plugins configured on ElasticSearch. But every time will be showed just one of them because they are configured in the same position of the dashboard and other ng-clicks will m…

---

## [How many nodes in es cluster and how much jvm memory of each nodes in esrally benchmark](https://discuss.elastic.co/t/how-many-nodes-in-es-cluster-and-how-much-jvm-memory-of-each-nodes-in-esrally-benchmark/212921)

<div class="topic-metadata">

**Author:** [@hyf\_bd](https://discuss.elastic.co/u/hyf_bd)\
**Replies:** 3\
**Last updated:** [January 7, 2020, 3:03pm UTC](https://discuss.elastic.co/t/how-many-nodes-in-es-cluster-and-how-much-jvm-memory-of-each-nodes-in-esrally-benchmark/212921 "2020-01-07T15:03:26Z")

</div>

in this web : https://elasticsearch-benchmarks.elastic.co/#tracks/pmc/nightly/default/30d there have add-4g-3nodes, add-4g and some other metric name. my question is: add-4g-3nodes: Is the cluster have three nodes,…

---

## [Beats setup fails with custom kibana\_index](https://discuss.elastic.co/t/beats-setup-fails-with-custom-kibana-index/202984)

<div class="topic-metadata">

**Author:** [@waraiotoko](https://discuss.elastic.co/u/waraiotoko)\
**Replies:** 0\
**Last updated:** [October 10, 2019, 9:01am UTC](https://discuss.elastic.co/t/beats-setup-fails-with-custom-kibana-index/202984 "2019-10-10T09:01:31Z")

</div>

When setting up a new secure stack I noticed that beat setup fails when all of these are true: xpack.security.enabled: true using setup user as described in Grant users access to secured resources | Metricbeat Referenc…

---

## [Watcher PDF/PNG auto-generated attached report broken when sending through email ( version 7.2)](https://discuss.elastic.co/t/watcher-pdf-png-auto-generated-attached-report-broken-when-sending-through-email-version-7-2/191510)

<div class="topic-metadata">

**Author:** [@tazzking](https://discuss.elastic.co/u/tazzking)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 7:28pm UTC](https://discuss.elastic.co/t/watcher-pdf-png-auto-generated-attached-report-broken-when-sending-through-email-version-7-2/191510 "2019-08-01T19:28:48Z")

</div>

Hello Everyone, I have configured the watcher to send email with dashboard preview attachment as PDF or PNG, it generate the report (can be found in Kibana report) and send the email. But somehow the email attachment ge…

---

## [Applying ingest node processors with a specific order](https://discuss.elastic.co/t/applying-ingest-node-processors-with-a-specific-order/125201)

<div class="topic-metadata">

**Author:** [@madou23](https://discuss.elastic.co/u/madou23)\
**Replies:** 3\
**Last updated:** [March 23, 2018, 8:28am UTC](https://discuss.elastic.co/t/applying-ingest-node-processors-with-a-specific-order/125201 "2018-03-23T08:28:32Z")

</div>

Hi all, I'm sending data from a csv file to elasticsearch via logstash and everything is ok but I have a problem on an ip address field that contains some different values that doesn't conform to ipv4 format so I'am usi…

---

## [Watcher's json query from Github](https://discuss.elastic.co/t/watchers-json-query-from-github/80937)

<div class="topic-metadata">

**Author:** [@smengr](https://discuss.elastic.co/u/smengr)\
**Replies:** 3\
**Last updated:** [April 3, 2017, 2:16am UTC](https://discuss.elastic.co/t/watchers-json-query-from-github/80937 "2017-04-03T02:16:09Z")

</div>

Hi Everyone! I want to have a tracking or logs of those who made modification in the queries. Is it possible to integrate watcher to github? what i wanted to happen is that every one watcher (json query) would be insid…

---

## [Kibana on tribe node](https://discuss.elastic.co/t/kibana-on-tribe-node/60567)

<div class="topic-metadata">

**Author:** [@obudiman](https://discuss.elastic.co/u/obudiman)\
**Replies:** 3\
**Last updated:** [September 19, 2016, 2:03am UTC](https://discuss.elastic.co/t/kibana-on-tribe-node/60567 "2016-09-19T02:03:28Z")

</div>

Hello, I'm trying to set up a kibana on a tribe node which should work across multiple ES clusters. We're running alpha5. I understand there's a limitation on the tribe node which would not allow any index creation f…

---

## [Debugging Query via logging / execution plan](https://discuss.elastic.co/t/debugging-query-via-logging-execution-plan/56487)

<div class="topic-metadata">

**Author:** [@Asaf\_Mesika](https://discuss.elastic.co/u/Asaf_Mesika)\
**Replies:** 3\
**Last updated:** [August 7, 2016, 5:14am UTC](https://discuss.elastic.co/t/debugging-query-via-logging-execution-plan/56487 "2016-08-07T05:14:34Z")

</div>

Hi, I was wondering whether Elasticsearch has a feature which enables debug logging per specific query, such you can tell what the node is doing only for a specific query. Also on that topic - is there a way to know…

---

## [Logstash slowlog for Elasticsearch output](https://discuss.elastic.co/t/logstash-slowlog-for-elasticsearch-output/119503)

<div class="topic-metadata">

**Author:** [@Jon\_D](https://discuss.elastic.co/u/Jon_D)\
**Replies:** 1\
**Last updated:** [March 5, 2018, 1:09pm UTC](https://discuss.elastic.co/t/logstash-slowlog-for-elasticsearch-output/119503 "2018-03-05T13:09:39Z")

</div>

Hello, I'm trying to get the slowlog to work in order to obtain more information about the bulk API requests from Logstash to Elasticsearch. I added this to my logstash.yml file : slowlog.threshold.warn: 2s slowlog.th…

---

## [Elasticsearch not creating index for the filebeat data](https://discuss.elastic.co/t/elasticsearch-not-creating-index-for-the-filebeat-data/105114)

<div class="topic-metadata">

**Author:** [@Jospaul](https://discuss.elastic.co/u/Jospaul)\
**Replies:** 1\
**Last updated:** [October 25, 2017, 8:08pm UTC](https://discuss.elastic.co/t/elasticsearch-not-creating-index-for-the-filebeat-data/105114 "2017-10-25T20:08:15Z")

</div>

I am trying to send some log files to elastic search directly using filebeat. I am not getting any errors in filebeat or elasticsearch. Below is the filebeat config: \[image\] filebeat log: 2017-10-24T13:39:05-05:00 I…

---

## [UNASSIGNED SHARDS and deleted indices coming back](https://discuss.elastic.co/t/unassigned-shards-and-deleted-indices-coming-back/77605)

<div class="topic-metadata">

**Author:** [@TomashO](https://discuss.elastic.co/u/TomashO)\
**Replies:** 1\
**Last updated:** [March 9, 2017, 1:30am UTC](https://discuss.elastic.co/t/unassigned-shards-and-deleted-indices-coming-back/77605 "2017-03-09T01:30:31Z")

</div>

Hi, I'm new to elasticsearch, so sorry if my question is trivial, but I don't know what should I do. I tried to delete a lot of old indices from ES (I have v5.0.1). I made it with queries like DELETE \*2014. It seemed to …

---

## [Nest a json object from csv](https://discuss.elastic.co/t/nest-a-json-object-from-csv/73361)

<div class="topic-metadata">

**Author:** [@Dan\_Harper](https://discuss.elastic.co/u/Dan_Harper)\
**Replies:** 1\
**Last updated:** [February 1, 2017, 8:41pm UTC](https://discuss.elastic.co/t/nest-a-json-object-from-csv/73361 "2017-02-01T20:41:05Z")

</div>

I have a csv which has a field called cart in it and although I can import correctly the cart field creates new fields in relation to the nested products inside the cart rather just a single cart field. 431| 2017-01-2…

---

## [Can you test if Filebeat can read from a file?](https://discuss.elastic.co/t/can-you-test-if-filebeat-can-read-from-a-file/62435)

<div class="topic-metadata">

**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\
**Replies:** 1\
**Last updated:** [October 6, 2016, 9:15pm UTC](https://discuss.elastic.co/t/can-you-test-if-filebeat-can-read-from-a-file/62435 "2016-10-06T21:15:27Z")

</div>

So I have Filebeat configured to check a few .log and a few .txt files. But no data is showing up in ElasticSearch. For testing purposes I reconfigured filebeat to output to a local file and no data is showing up within …

---

## [403 Error when using out-of-the-box ElasticSearch 5.0.0-alpha5](https://discuss.elastic.co/t/403-error-when-using-out-of-the-box-elasticsearch-5-0-0-alpha5/61332)

<div class="topic-metadata">

**Author:** [@thinkabout](https://discuss.elastic.co/u/thinkabout)\
**Replies:** 1\
**Last updated:** [September 23, 2016, 5:55am UTC](https://discuss.elastic.co/t/403-error-when-using-out-of-the-box-elasticsearch-5-0-0-alpha5/61332 "2016-09-23T05:55:04Z")

</div>

Hi, we're evaluating ElasticSearch and Kibana. I have recently downloaded elasticsearch-5.0.0-alpha5 and kibana-5.0.0-alpha5-windows-86. When performing a get operation authenticating with the default username\\pwd, I …

---

## [Parse json if json else leave as is](https://discuss.elastic.co/t/parse-json-if-json-else-leave-as-is/60586)

<div class="topic-metadata">

**Author:** [@arpan](https://discuss.elastic.co/u/arpan)\
**Replies:** 1\
**Last updated:** [September 17, 2016, 5:46pm UTC](https://discuss.elastic.co/t/parse-json-if-json-else-leave-as-is/60586 "2016-09-17T17:46:26Z")

</div>

I wanted the filter to parse a message as json if it is json, otherwise just let it be in the form it is. There wasn't a lot of documentation on the filter description page so I was not sure if this is the default behavi…

---

## [ElasticSearch - .NET NEST API building multiple aggregrations with object initialization API seems to create an incorrect request with nested aggregrations](https://discuss.elastic.co/t/elasticsearch-net-nest-api-building-multiple-aggregrations-with-object-initialization-api-seems-to-create-an-incorrect-request-with-nested-aggregrations/49748)

<div class="topic-metadata">

**Author:** [@Paul\_Harvey](https://discuss.elastic.co/u/Paul_Harvey)\
**Replies:** 1\
**Last updated:** [May 12, 2016, 12:49pm UTC](https://discuss.elastic.co/t/elasticsearch-net-nest-api-building-multiple-aggregrations-with-object-initialization-api-seems-to-create-an-incorrect-request-with-nested-aggregrations/49748 "2016-05-12T12:49:26Z")

</div>

I am building the components of an elastic search query dynamically, the query contains potentially multiple aggregations. .Net 4.5.2 Nest 2.3.1 Elasticsearch.Net 2.3.1 I can successfully add multiple aggregations by…

---

## ["Jar Hell" in Eclipse project that requires JBoss modules jars](https://discuss.elastic.co/t/jar-hell-in-eclipse-project-that-requires-jboss-modules-jars/41337)

<div class="topic-metadata">

**Author:** [@tbessie](https://discuss.elastic.co/u/tbessie)\
**Replies:** 1\
**Last updated:** [February 17, 2016, 11:29pm UTC](https://discuss.elastic.co/t/jar-hell-in-eclipse-project-that-requires-jboss-modules-jars/41337 "2016-02-17T23:29:29Z")

</div>

I'm having a problem similar to https://discuss.elastic.co/t/trivial-nodebuilder-java-code-resulting-in-jar-hell-error/34731/3 ... except that I'm getting conflicts between jars loaded from the eclipse project librarie…

---

## [Kibana 4.3 sending x-Forwarded-For:127.0.0.1 , even if i am not using any load balancer ,Is it a desired behavior](https://discuss.elastic.co/t/kibana-4-3-sending-x-forwarded-for-127-0-0-1-even-if-i-am-not-using-any-load-balancer-is-it-a-desired-behavior/37297)

<div class="topic-metadata">

**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\
**Replies:** 1\
**Last updated:** [December 17, 2015, 10:28pm UTC](https://discuss.elastic.co/t/kibana-4-3-sending-x-forwarded-for-127-0-0-1-even-if-i-am-not-using-any-load-balancer-is-it-a-desired-behavior/37297 "2015-12-17T22:28:11Z")

</div>

I am using Kibana 4.3.0 with ES 2.1 and I can see kibana is sending x-Forwarded-for : 127.0.0.1 in the request header to elasticsearch even though if i am not using any load balancer . Can you please confirm if its a des…

---

## [Tcp input problem](https://discuss.elastic.co/t/tcp-input-problem/35238)

<div class="topic-metadata">

**Author:** [@Ahmed\_Faik](https://discuss.elastic.co/u/Ahmed_Faik)\
**Replies:** 1\
**Last updated:** [November 22, 2015, 9:09pm UTC](https://discuss.elastic.co/t/tcp-input-problem/35238 "2015-11-22T21:09:46Z")

</div>

Hi every one, I try to receive data through TCP port from another pc to logstash, then save it in csv file output, the configure file which i write is: input { tcp { host =\> "192.168.0.188" port =\> "12397" } } …

---

## [Kafka-input](https://discuss.elastic.co/t/kafka-input/33668)

<div class="topic-metadata">

**Author:** [@vimalmpatel](https://discuss.elastic.co/u/vimalmpatel)\
**Replies:** 1\
**Last updated:** [November 4, 2015, 3:26am UTC](https://discuss.elastic.co/t/kafka-input/33668 "2015-11-04T03:26:55Z")

</div>

Hello i am using kakfa-input with stunnel stunnel config file fips = no \[broker1\] accept = 127.0.0.1:9195 connect = 10.25.37.3:9193 client = yes cert = /usr/local/etc/stunnel/kafka-cli-stunnel.pem \[broker2\] a…

---

## [Kibana integration: tracking filters, etc external to iframe](https://discuss.elastic.co/t/kibana-integration-tracking-filters-etc-external-to-iframe/30060)

<div class="topic-metadata">

**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\
**Replies:** 1\
**Last updated:** [September 27, 2015, 8:02pm UTC](https://discuss.elastic.co/t/kibana-integration-tracking-filters-etc-external-to-iframe/30060 "2015-09-27T20:02:37Z")

</div>

Hi Kibana users! I'm excited about my current project, because Elasticsearch and Kibana have proved to be exceptional tools. I have some analysis that happens external to these systems and I would like to present all…

---

## [Scripted fields and type conversion with Kibana4B3](https://discuss.elastic.co/t/scripted-fields-and-type-conversion-with-kibana4b3/21303)

<div class="topic-metadata">

**Author:** [@Jay\_Swan](https://discuss.elastic.co/u/Jay_Swan)\
**Replies:** 1\
**Last updated:** [December 18, 2014, 5:08am UTC](https://discuss.elastic.co/t/scripted-fields-and-type-conversion-with-kibana4b3/21303 "2014-12-18T05:08:22Z")

</div>

I just started playing with scripted fields in Kibana4 Beta3. I'm looking for guidance on how to do type conversions with the new scripted fields feature. Specifically, I have some ES fields that I've typed as "ip…

---

## [How to use Curator to manage old data and avoid running out of storage space?](https://discuss.elastic.co/t/how-to-use-curator-to-manage-old-data-and-avoid-running-out-of-storage-space/18982)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 1\
**Last updated:** [July 30, 2014, 9:33pm UTC](https://discuss.elastic.co/t/how-to-use-curator-to-manage-old-data-and-avoid-running-out-of-storage-space/18982 "2014-07-30T21:33:01Z")

</div>

I've been implementing an ELK stack for the past year or so. I had thought that we would have plenty of space, but recently added a log source that increased the number of log entries a day by around 30x. That prompt…

[Previous page](https://discuss.elastic.co/top.md?page=1492&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1494&per_page=50&period=all)
