# Top

**URL:** https://discuss.elastic.co/top.md?page=1500&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1501

---

## [Sum up multi Vega graphs in one](https://discuss.elastic.co/t/sum-up-multi-vega-graphs-in-one/266867)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 5\
**Last updated:** [March 11, 2021, 3:41pm UTC](https://discuss.elastic.co/t/sum-up-multi-vega-graphs-in-one/266867 "2021-03-11T15:41:00Z")

</div>

Hi all, I've done several Vega Timeline visualizations and now I want all of them to be summarized in a one single diagram instead of individually and with different colors, like this example her: here are a few of m…

---

## [Cluster elasticsearch on basic license](https://discuss.elastic.co/t/cluster-elasticsearch-on-basic-license/206733)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 5\
**Last updated:** [November 7, 2019, 6:13am UTC](https://discuss.elastic.co/t/cluster-elasticsearch-on-basic-license/206733 "2019-11-07T06:13:26Z")

</div>

Hi, I have 1 elasticsearch node, I've installed another node in another DC. Now I wanna have a cluster between 2 node so data can be HA. Based on documentations I've added this config (on master): cluster.name: mycluste…

---

## [Read logs from Remove Linux sever using Logstash or File beat](https://discuss.elastic.co/t/read-logs-from-remove-linux-sever-using-logstash-or-file-beat/96501)

<div class="topic-metadata">

**Author:** [@Leela\_Kodali](https://discuss.elastic.co/u/Leela_Kodali)\
**Replies:** 5\
**Last updated:** [August 11, 2017, 5:59am UTC](https://discuss.elastic.co/t/read-logs-from-remove-linux-sever-using-logstash-or-file-beat/96501 "2017-08-11T05:59:41Z")

</div>

HI, can you please help me on how to read log file on different Linux box, i have ELK and Filebeat installed on one Linux box i am trying to read log file from different Linux box. Here is my Filebeat config file: (He…

---

## [Question About Dynamic Mappings and Multi-Field-Type](https://discuss.elastic.co/t/question-about-dynamic-mappings-and-multi-field-type/5830)

<div class="topic-metadata">

**Author:** [@LORDs\_diakonos](https://discuss.elastic.co/u/LORDs_diakonos)\
**Replies:** 5\
**Last updated:** [November 10, 2011, 8:26pm UTC](https://discuss.elastic.co/t/question-about-dynamic-mappings-and-multi-field-type/5830 "2011-11-10T20:26:01Z")

</div>

I am having issues sorting because I am using the WhiteSpace Analyzer and my field data is "Some Title" I get why it does work org.elasticsearch.index.field.data.strings.StringFieldDataType $1@164146a7\>\]: Query Fai…

---

## [What is the maximum dimensionality of a vector field?](https://discuss.elastic.co/t/what-is-the-maximum-dimensionality-of-a-vector-field/342159)

<div class="topic-metadata">

**Author:** [@panivan99pl](https://discuss.elastic.co/u/panivan99pl)\
**Replies:** 1\
**Last updated:** [September 3, 2023, 3:16pm UTC](https://discuss.elastic.co/t/what-is-the-maximum-dimensionality-of-a-vector-field/342159 "2023-09-03T15:16:40Z")

</div>

What is the maximum dimensionality of a vector field ? I am using elastik version 8.9.1 The documentation says that the maximum vector size is 1000, but if you set the index: False property, the dimensionality can be u…

---

## [java.lang.OutOfMemoryError: Java heap space in Logstash](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-in-logstash/260596)

<div class="topic-metadata">

**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\
**Replies:** 1\
**Last updated:** [January 11, 2021, 12:13am UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-in-logstash/260596 "2021-01-11T00:13:43Z")

</div>

I have too many configuration files. I run these files together via pipelines.yml. I use these types of settings likewise below; - pipeline.id: pipeline1 path.config: "path\_to\_pipeline1" - pipeline.id: pipeline2 pat…

---

## [Unable to create index and insert data?](https://discuss.elastic.co/t/unable-to-create-index-and-insert-data/166286)

<div class="topic-metadata">

**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\
**Replies:** 1\
**Last updated:** [February 8, 2019, 9:18am UTC](https://discuss.elastic.co/t/unable-to-create-index-and-insert-data/166286 "2019-02-08T09:18:34Z")

</div>

hey Guys , I am trying to index data from hive into elasticsearch , however when i ran the below query , there is no error and index is not created in elasticsearch. create external table es\_names\_text (employeeid int,…

---

## [Filebeat 6.2 error: write: connection reset by peer](https://discuss.elastic.co/t/filebeat-6-2-error-write-connection-reset-by-peer/129418)

<div class="topic-metadata">

**Author:** [@molly](https://discuss.elastic.co/u/molly)\
**Replies:** 1\
**Last updated:** [April 25, 2018, 8:25am UTC](https://discuss.elastic.co/t/filebeat-6-2-error-write-connection-reset-by-peer/129418 "2018-04-25T08:25:32Z")

</div>

2018-04-26T14:52:04.978+0800 ERROR logstash/async.go:235 Failed to publish events caused by: write tcp 192.168.40.132:55375-\>192.168.40.129:5044: write: connection reset by peer 2018-04-26T14:52:05.994+0800 ERROR pipeli…

---

## [Multiline probelm with Syslog+log4js combination](https://discuss.elastic.co/t/multiline-probelm-with-syslog-log4js-combination/47478)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [April 17, 2016, 6:15am UTC](https://discuss.elastic.co/t/multiline-probelm-with-syslog-log4js-combination/47478 "2016-04-17T06:15:37Z")

</div>

Logging pattern configured in log4js.json is below: "appenders": \[ { "type" : "logLevelFilter", "level" : "INFO", "appender": { "…

---

## [Copy To: Order and Whitespace Separation](https://discuss.elastic.co/t/copy-to-order-and-whitespace-separation/27202)

<div class="topic-metadata">

**Author:** [@drjz](https://discuss.elastic.co/u/drjz)\
**Replies:** 1\
**Last updated:** [August 11, 2015, 4:37pm UTC](https://discuss.elastic.co/t/copy-to-order-and-whitespace-separation/27202 "2015-08-11T16:37:20Z")

</div>

I have 2 fields: FirstName and SurName, which I want to concatenate during index time by a single whitespace. I wonder whether it is possible to merge the value of both fields to a single field with Elasticsearch? Or doe…

---

## [Improved stemming for Arabic](https://discuss.elastic.co/t/improved-stemming-for-arabic/17172)

<div class="topic-metadata">

**Author:** [@angella](https://discuss.elastic.co/u/angella)\
**Replies:** 1\
**Last updated:** [April 24, 2014, 11:18am UTC](https://discuss.elastic.co/t/improved-stemming-for-arabic/17172 "2014-04-24T11:18:27Z")

</div>

Hello everyone, I'm trying to improve stemming for Arabic language. We already use elasticsearch stemmer for Arabic, but it is still not good enough to make all our stemmer tests pass. I spent few days wondering th…

---

## [Enterprise Search not working](https://discuss.elastic.co/t/enterprise-search-not-working/330691)

<div class="topic-metadata">

**Author:** [@neil.maffitt](https://discuss.elastic.co/u/neil.maffitt)\
**Replies:** 3\
**Last updated:** [April 27, 2023, 12:56pm UTC](https://discuss.elastic.co/t/enterprise-search-not-working/330691 "2023-04-27T12:56:58Z")

</div>

I have Elastic Search 8.6.2 working and can log into kibana web UI 8.6.2 but I can't get Enterprise Search 8.6.2 to work. Seeing this in the app-server.log it make mention of localhost:5601 which I coming from kibana b…

---

## [Logstash doesn't automatically collect all Zeek fields without grok pattern](https://discuss.elastic.co/t/logstash-doesnt-automatically-collect-all-zeek-fields-without-grok-pattern/269613)

<div class="topic-metadata">

**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\
**Replies:** 3\
**Last updated:** [April 13, 2021, 6:01pm UTC](https://discuss.elastic.co/t/logstash-doesnt-automatically-collect-all-zeek-fields-without-grok-pattern/269613 "2021-04-13T18:01:49Z")

</div>

Hi, Is there a setting I need to provide in order to enable the automatically collection of all the Zeek's log fields? I can collect the fields message only through a grok filter. My assumption is that logstash is smar…

---

## [Setting a base path for s3 repositories in the Elasticsearch user settings](https://discuss.elastic.co/t/setting-a-base-path-for-s3-repositories-in-the-elasticsearch-user-settings/265268)

<div class="topic-metadata">

**Author:** [@jhegarty](https://discuss.elastic.co/u/jhegarty)\
**Replies:** 3\
**Last updated:** [February 24, 2021, 5:03pm UTC](https://discuss.elastic.co/t/setting-a-base-path-for-s3-repositories-in-the-elasticsearch-user-settings/265268 "2021-02-24T17:03:10Z")

</div>

Is there some way to set a repository base path for s3 in an Elasticsearch deployment's user settings? I'm getting bootloop errors when we try that though setting repositories.s3.base\_path in the user settings - (Reposit…

---

## [Logstash停止時にステータスがfailedになる](https://discuss.elastic.co/t/logstash-failed/241418)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 0\
**Last updated:** [July 16, 2020, 8:34am UTC](https://discuss.elastic.co/t/logstash-failed/241418 "2020-07-16T08:34:40Z")

</div>

logstash停止時に、statusがfailedになる事象が発生しています。バージョンは7.8を使用しておりますが、100％の確率で発生します # systemctl stop logstash # systemctl status logstash ● logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.service; disa…

---

## [Audit partage de fichier](https://discuss.elastic.co/t/audit-partage-de-fichier/224389)

<div class="topic-metadata">

**Author:** [@david\_oliver](https://discuss.elastic.co/u/david_oliver)\
**Replies:** 8\
**Last updated:** [March 20, 2020, 4:23pm UTC](https://discuss.elastic.co/t/audit-partage-de-fichier/224389 "2020-03-20T16:23:13Z")

</div>

Bonjour, J'ai un serveur de fichier j aimerai auditer qui a fais quoi : ajout, modification et suppression. j ai activé les audits file system et file share, je recois bien les log dans kibana avec winlogbeat et elasti…

---

## [Max disk size used for single ES node](https://discuss.elastic.co/t/max-disk-size-used-for-single-es-node/208261)

<div class="topic-metadata">

**Author:** [@ragnar1290](https://discuss.elastic.co/u/ragnar1290)\
**Replies:** 3\
**Last updated:** [December 10, 2019, 9:27am UTC](https://discuss.elastic.co/t/max-disk-size-used-for-single-es-node/208261 "2019-12-10T09:27:24Z")

</div>

Hi Team, Currently, we have a 3TB data node, my question is do we have any restriction regarding disk size on ES node. And what would be the consequences of creating nodes with larger disks?

---

## [How to show count values for two x-axis buckets in line charts?](https://discuss.elastic.co/t/how-to-show-count-values-for-two-x-axis-buckets-in-line-charts/167903)

<div class="topic-metadata">

**Author:** [@sudhakar\_katakara](https://discuss.elastic.co/u/sudhakar_katakara)\
**Replies:** 3\
**Last updated:** [February 20, 2019, 1:25am UTC](https://discuss.elastic.co/t/how-to-show-count-values-for-two-x-axis-buckets-in-line-charts/167903 "2019-02-20T01:25:09Z")

</div>

We are inserting records in one elastalertic search index(test\_elastalert1) and applying elastalert rules and formulas to find matched records and trigger email for matched ones. These matched records are inserted into o…

---

## [Circuit Breaking Exception](https://discuss.elastic.co/t/circuit-breaking-exception/148555)

<div class="topic-metadata">

**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\
**Replies:** 3\
**Last updated:** [September 14, 2018, 6:34am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/148555 "2018-09-14T06:34:03Z")

</div>

I have recently migrated the cluster from 2.4 to 6.3.0 and I am getting circuit breaking exception every few hours on the nodes Cluster details - Data nodes : 13 Master nodes : 3 Query nodes : 3 We aren't using this…

---

## [Resume reading Logstash](https://discuss.elastic.co/t/resume-reading-logstash/115021)

<div class="topic-metadata">

**Author:** [@Andualem\_Tilahun](https://discuss.elastic.co/u/Andualem_Tilahun)\
**Replies:** 3\
**Last updated:** [January 11, 2018, 11:40pm UTC](https://discuss.elastic.co/t/resume-reading-logstash/115021 "2018-01-11T23:40:40Z")

</div>

i am using a logstash server to read a data from my log file but suddenly my computer restart. i want the logstash server to start up Automatic when the computer start's and to resume reading where it stopped (not from t…

---

## [No new data shown in Kibana](https://discuss.elastic.co/t/no-new-data-shown-in-kibana/85438)

<div class="topic-metadata">

**Author:** [@OurGiant](https://discuss.elastic.co/u/OurGiant)\
**Replies:** 3\
**Last updated:** [May 11, 2017, 5:31pm UTC](https://discuss.elastic.co/t/no-new-data-shown-in-kibana/85438 "2017-05-11T17:31:53Z")

</div>

first: I'm sure this topic comes up frequently but all my searching has been fruitless. I cannot seem to get Kibana to reflect what is in my indices. Forget live (15 minutes) data, I can't even get it to show the curr…

---

## [Elasticsearch Logs this exception](https://discuss.elastic.co/t/elasticsearch-logs-this-exception/28990)

<div class="topic-metadata">

**Author:** [@Kiran\_Sriharsha](https://discuss.elastic.co/u/Kiran_Sriharsha)\
**Replies:** 3\
**Last updated:** [September 10, 2015, 10:30pm UTC](https://discuss.elastic.co/t/elasticsearch-logs-this-exception/28990 "2015-09-10T22:30:08Z")

</div>

Hi We are using ES and River-mongodb. Both versions are old (1.1.1 and 2.0.2). We will update them soon. Can someone explain this below log message. \[2015-09-10 05:25:01,017\]\[DEBUG\]\[action.search.type \] \[ela…

---

## [Changing Merge Policy And Optimization](https://discuss.elastic.co/t/changing-merge-policy-and-optimization/11679)

<div class="topic-metadata">

**Author:** [@tarang\_dawer](https://discuss.elastic.co/u/tarang_dawer)\
**Replies:** 3\
**Last updated:** [May 1, 2013, 10:11pm UTC](https://discuss.elastic.co/t/changing-merge-policy-and-optimization/11679 "2013-05-01T22:11:43Z")

</div>

Hi All I indexed some data in elasticsearch and have a index of around 18 Gb , with 10 Shards for the index, with 0 replicas and using the default "tiered" merge policy. I issued a Optimize command , the number of se…

---

## [Crawling web content](https://discuss.elastic.co/t/crawling-web-content/10814)

<div class="topic-metadata">

**Author:** [@yahia](https://discuss.elastic.co/u/yahia)\
**Replies:** 3\
**Last updated:** [February 21, 2013, 8:05am UTC](https://discuss.elastic.co/t/crawling-web-content/10814 "2013-02-21T08:05:46Z")

</div>

does anybody have any experience crawling web content and indexing it with Elastic Search? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from…

---

## [How to send span stack trace with elastic/apm-agent-php?](https://discuss.elastic.co/t/how-to-send-span-stack-trace-with-elastic-apm-agent-php/252297)

<div class="topic-metadata">

**Author:** [@GHostlyFOX](https://discuss.elastic.co/u/GHostlyFOX)\
**Replies:** 4\
**Last updated:** [October 19, 2020, 10:09am UTC](https://discuss.elastic.co/t/how-to-send-span-stack-trace-with-elastic-apm-agent-php/252297 "2020-10-19T10:09:56Z")

</div>

How to send span stack trace with elastic/apm-agent-php ?

---

## [Default/other index pattern goes missing after some time, need to be created again,](https://discuss.elastic.co/t/default-other-index-pattern-goes-missing-after-some-time-need-to-be-created-again/206925)

<div class="topic-metadata">

**Author:** [@Parvatayya\_Malimath](https://discuss.elastic.co/u/Parvatayya_Malimath)\
**Replies:** 4\
**Last updated:** [November 8, 2019, 8:02am UTC](https://discuss.elastic.co/t/default-other-index-pattern-goes-missing-after-some-time-need-to-be-created-again/206925 "2019-11-08T08:02:34Z")

</div>

Hi The default and other index patterns goes missing after a certain period of time. I am not sure why. Version: 6.4.2. advise

---

## [Parsing JSON error Logstash](https://discuss.elastic.co/t/parsing-json-error-logstash/137207)

<div class="topic-metadata">

**Author:** [@SuperK\_1860](https://discuss.elastic.co/u/SuperK_1860)\
**Replies:** 4\
**Last updated:** [June 25, 2018, 8:15am UTC](https://discuss.elastic.co/t/parsing-json-error-logstash/137207 "2018-06-25T08:15:42Z")

</div>

Hi all I am trying to import a JSON file but I get the following error. filter { json { # This setting must be a string # Expected string, got \["followUpDate", "dateOfBirth", "medical.dateFinalised", "medical.dateOf…

---

## [Watcher alert for matching multiple fields in same index](https://discuss.elastic.co/t/watcher-alert-for-matching-multiple-fields-in-same-index/273690)

<div class="topic-metadata">

**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\
**Replies:** 2\
**Last updated:** [June 1, 2021, 9:17pm UTC](https://discuss.elastic.co/t/watcher-alert-for-matching-multiple-fields-in-same-index/273690 "2021-06-01T21:17:32Z")

</div>

Hello, I am trying to match multiple fields in a single index for my watcher alert and having some difficulties doing that. My watcher looks like: { "trigger": { "schedule": { "interval": "15m" } }, …

---

## [Metricbeat setup for multiple hosts](https://discuss.elastic.co/t/metricbeat-setup-for-multiple-hosts/272345)

<div class="topic-metadata">

**Author:** [@vharabor](https://discuss.elastic.co/u/vharabor)\
**Replies:** 2\
**Last updated:** [May 7, 2021, 4:47pm UTC](https://discuss.elastic.co/t/metricbeat-setup-for-multiple-hosts/272345 "2021-05-07T16:47:24Z")

</div>

I have an Elastic deployment and it was very straightforward to setup metricbeat and get a dashboard for our docker containers. I'm looking to do the same for another Elastic deployment that is shared for two environmen…

---

## [Fuzzy Hostname/FQDN Semantics](https://discuss.elastic.co/t/fuzzy-hostname-fqdn-semantics/224368)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 2\
**Last updated:** [March 24, 2020, 8:17am UTC](https://discuss.elastic.co/t/fuzzy-hostname-fqdn-semantics/224368 "2020-03-24T08:17:13Z")

</div>

Hello, I'm normalizing hostnames and host name fields across multiple data sources and indices for security use cases. I'm struggling to find a consistent use of the Hostname/domain fields in ECS. Consider the use cas…

---

## [APM not showing data in Kibana when running app through gunicorn wsgi](https://discuss.elastic.co/t/apm-not-showing-data-in-kibana-when-running-app-through-gunicorn-wsgi/206372)

<div class="topic-metadata">

**Author:** [@umarriqbal](https://discuss.elastic.co/u/umarriqbal)\
**Replies:** 2\
**Last updated:** [November 11, 2019, 11:16pm UTC](https://discuss.elastic.co/t/apm-not-showing-data-in-kibana-when-running-app-through-gunicorn-wsgi/206372 "2019-11-11T23:16:37Z")

</div>

No data is being shown in Kibana UI or APM server logs if I run the app in production using gunicorn WSGI but if I run it through command line with the same settings, it works fine. Kibana version: 7.4.1 Elasticsearch …

---

## [Error on the Logs page in Kibana on Elastic cloud hosted on AWS](https://discuss.elastic.co/t/error-on-the-logs-page-in-kibana-on-elastic-cloud-hosted-on-aws/169261)

<div class="topic-metadata">

**Author:** [@ajazam1](https://discuss.elastic.co/u/ajazam1)\
**Replies:** 2\
**Last updated:** [February 21, 2019, 9:26am UTC](https://discuss.elastic.co/t/error-on-the-logs-page-in-kibana-on-elastic-cloud-hosted-on-aws/169261 "2019-02-21T09:26:06Z")

</div>

We are using the Elastic Cloud hosted solution on AWS at version 6.6.1. We are using filebeats 6.6.0 and the IIS module to parse IIS 10 logs into Elastic Search. When we look at the logs page we are seeing many failed …

---

## [Only connect to rabbitmq user username 'guest' and vhost '/'](https://discuss.elastic.co/t/only-connect-to-rabbitmq-user-username-guest-and-vhost/153563)

<div class="topic-metadata">

**Author:** [@Jenyow](https://discuss.elastic.co/u/Jenyow)\
**Replies:** 2\
**Last updated:** [October 24, 2018, 3:21am UTC](https://discuss.elastic.co/t/only-connect-to-rabbitmq-user-username-guest-and-vhost/153563 "2018-10-24T03:21:59Z")

</div>

Logstash version: 6.4.2 RabbitMQ version: 3.7.7 My rabbitmq input configuration and rabbitmq users is below: input { rabbitmq { type =\>"log" host =\> "127.0.0.1" port =\> 5682 vhost =\> "/" user =\> "guest" passw…

---

## [Running a Ruby external script to enrich event](https://discuss.elastic.co/t/running-a-ruby-external-script-to-enrich-event/117067)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 2\
**Last updated:** [January 26, 2018, 7:09am UTC](https://discuss.elastic.co/t/running-a-ruby-external-script-to-enrich-event/117067 "2018-01-26T07:09:47Z")

</div>

Hi All, I need to add some field in the events I'm processing with information about the country a phone number belogns to. So, I'm parsing ok the phone numbers in the events and I want to run ruby code in order to add…

---

## [Sorting with has\_child function\_score - illegal argument exception, variable is not found](https://discuss.elastic.co/t/sorting-with-has-child-function-score-illegal-argument-exception-variable-is-not-found/95072)

<div class="topic-metadata">

**Author:** [@tcollinsworth](https://discuss.elastic.co/u/tcollinsworth)\
**Replies:** 2\
**Last updated:** [July 31, 2017, 1:23pm UTC](https://discuss.elastic.co/t/sorting-with-has-child-function-score-illegal-argument-exception-variable-is-not-found/95072 "2017-07-31T13:23:01Z")

</div>

Elasticsearch 5.5.1 (out-of-the box/stock) Example nearly identical to the Elasticsearch 5.5 docs here. The only difference is the child doc index type name and the property name. Copy and paste the following curl com…

---

## [Date Parsing the wrong Day](https://discuss.elastic.co/t/date-parsing-the-wrong-day/91434)

<div class="topic-metadata">

**Author:** [@Lukas\_Tilch](https://discuss.elastic.co/u/Lukas_Tilch)\
**Replies:** 2\
**Last updated:** [July 3, 2017, 9:00am UTC](https://discuss.elastic.co/t/date-parsing-the-wrong-day/91434 "2017-07-03T09:00:12Z")

</div>

Hello, I have a rather unexpected problem with Logstashs Date filter. I want to parse the Date 2017.05.30 with the YYYY.MM.dd I expected it to be parsed as 2017-05-30T00:00:00.000Z Instead it looks like this 2017-05-29…

---

## [Filebeat 5.0 - Logstash 5.0 communication issue on Windows Server 2012 R2](https://discuss.elastic.co/t/filebeat-5-0-logstash-5-0-communication-issue-on-windows-server-2012-r2/81490)

<div class="topic-metadata">

**Author:** [@cyberwhiz](https://discuss.elastic.co/u/cyberwhiz)\
**Replies:** 2\
**Last updated:** [April 8, 2017, 11:23pm UTC](https://discuss.elastic.co/t/filebeat-5-0-logstash-5-0-communication-issue-on-windows-server-2012-r2/81490 "2017-04-08T23:23:26Z")

</div>

Hi there, I think I've tried every combination I can think of over the past days and am at my wits end. So any hints / tips will be greatly appreciated. Environment: \* The whole stack is installed on a single machin…

---

## [Monitor.jvm WARN message?](https://discuss.elastic.co/t/monitor-jvm-warn-message/59404)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 2\
**Last updated:** [August 31, 2016, 9:28am UTC](https://discuss.elastic.co/t/monitor-jvm-warn-message/59404 "2016-08-31T09:28:29Z")

</div>

Hi, can anybody please explain me the meaning of this WARN message. The problem is, ES cluster is not allocating any shards. \[2016-08-31 11:51:46,993\]\[WARN \]\[monitor.jvm \] \[sit-master-data-node-0\] \[gc\]\[yo…

---

## [Pull data from Twitter(particular hashtag)](https://discuss.elastic.co/t/pull-data-from-twitter-particular-hashtag/27271)

<div class="topic-metadata">

**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\
**Replies:** 2\
**Last updated:** [March 30, 2016, 12:07pm UTC](https://discuss.elastic.co/t/pull-data-from-twitter-particular-hashtag/27271 "2016-03-30T12:07:51Z")

</div>

Hi All, I am using logstash to pull data from twitter to elasticsearch. Below is my config file. input { twitter { add\_field =\> consumer\_key =\> "xxxxxxxxxxxxxxxxx" consumer\_secret =\> "xxxxxxxxxxxxxxxxxx" …

---

## [Elasticsearch no disk space available](https://discuss.elastic.co/t/elasticsearch-no-disk-space-available/33466)

<div class="topic-metadata">

**Author:** [@Isaac\_Hazan](https://discuss.elastic.co/u/Isaac_Hazan)\
**Replies:** 2\
**Last updated:** [November 1, 2015, 8:12pm UTC](https://discuss.elastic.co/t/elasticsearch-no-disk-space-available/33466 "2015-11-01T20:12:23Z")

</div>

I have a 3 nodes Elasticsearch cluster that exhausted the disk space in each node. Each node is an EC2 instance. The cluster is now completely irresponsive. What solutions do I have to free up space? Would adding a n…

---

## [GEO Bound Query Parsing](https://discuss.elastic.co/t/geo-bound-query-parsing/26142)

<div class="topic-metadata">

**Author:** [@Sivaprakash\_Shanmuga](https://discuss.elastic.co/u/Sivaprakash_Shanmuga)\
**Replies:** 2\
**Last updated:** [July 23, 2015, 10:59am UTC](https://discuss.elastic.co/t/geo-bound-query-parsing/26142 "2015-07-23T10:59:54Z")

</div>

Hi Im trying to search GEO Location along with other terms in AND condition, but the below query throws QueryParsingException\[\[myproperty\] failed to find geo\_point field "filtered": { "filter": { "and": \[ { "…

---

## [\[ANNOUNCEMENT\] - spring-elasticsearch 6.0 released](https://discuss.elastic.co/t/announcement-spring-elasticsearch-6-0-released/119135)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [February 8, 2018, 10:32pm UTC](https://discuss.elastic.co/t/announcement-spring-elasticsearch-6-0-released/119135 "2018-02-08T22:32:27Z")

</div>

The spring-elasticsearch team is pleased to announce the spring-elasticsearch-6.0 release! Spring factories for Elasticsearch Usage Add this library to you project: \<dependency\> \<groupId\>fr.pilato.spring\</groupId\> …

---

## [Data retention](https://discuss.elastic.co/t/data-retention/347129)

<div class="topic-metadata">

**Author:** [@admin365](https://discuss.elastic.co/u/admin365)\
**Replies:** 7\
**Last updated:** [November 15, 2023, 1:15pm UTC](https://discuss.elastic.co/t/data-retention/347129 "2023-11-15T13:15:15Z")

</div>

Hello! I've successfully configured a Debian-based Elasticsearch cluster with three nodes. Everything is functioning well. Currently, I need guidance on activating a data retention period of three months. Can you provid…

---

## [\`block in converge\_state' when setting up output to gelf host](https://discuss.elastic.co/t/block-in-converge-state-when-setting-up-output-to-gelf-host/314862)

<div class="topic-metadata">

**Author:** [@Heffie](https://discuss.elastic.co/u/Heffie)\
**Replies:** 1\
**Last updated:** [September 22, 2022, 8:14am UTC](https://discuss.elastic.co/t/block-in-converge-state-when-setting-up-output-to-gelf-host/314862 "2022-09-22T08:14:33Z")

</div>

Hi, Im getting this error: \[2022-09-21T11:32:55,738\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>#\<LogStash::Error: Don't know how to handle Java::JavaLang::IllegalStateExceptionforPipeline…

---

## [Log4j vulnerability threat impact on Elasticsearch and Logstash versions below 5](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140)

<div class="topic-metadata">

**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\
**Replies:** 1\
**Last updated:** [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140 "2021-12-19T23:12:53Z")

</div>

Can anyone please confirm whether Elasticsearch and Logstash versions below 5 are also impacted with Log4j vulnerability threat ?

---

## [How to do settting "is\_write\_index": true for alias in curator action](https://discuss.elastic.co/t/how-to-do-settting-is-write-index-true-for-alias-in-curator-action/228464)

<div class="topic-metadata">

**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\
**Replies:** 1\
**Last updated:** [April 17, 2020, 6:20pm UTC](https://discuss.elastic.co/t/how-to-do-settting-is-write-index-true-for-alias-in-curator-action/228464 "2020-04-17T18:20:25Z")

</div>

my use case is to rollover indices in every 4 hours .so i use curator for define alias and rollover for indices. so new indices is created but in new indices no data is written by logstash into it. by exploring i foun…

---

## [JMX input filter, howto construct right query](https://discuss.elastic.co/t/jmx-input-filter-howto-construct-right-query/36929)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 1\
**Last updated:** [December 11, 2015, 1:08pm UTC](https://discuss.elastic.co/t/jmx-input-filter-howto-construct-right-query/36929 "2015-12-11T13:08:28Z")

</div>

So I've got a jconsole on a cassandra 2.0 cluster and can see metrics like o.a.c.m.ThreadPools.request.RequestResponseStage.\*Tasks cassandra wiki says (note ThreadPool in singular): o.a.c.m:type=ThreadPool,path=(type)…

---

## [What can go wrong in ES cluster without replicas](https://discuss.elastic.co/t/what-can-go-wrong-in-es-cluster-without-replicas/335595)

<div class="topic-metadata">

**Author:** [@Don\_Boscow](https://discuss.elastic.co/u/Don_Boscow)\
**Replies:** 6\
**Last updated:** [June 9, 2023, 9:19am UTC](https://discuss.elastic.co/t/what-can-go-wrong-in-es-cluster-without-replicas/335595 "2023-06-09T09:19:03Z")

</div>

Hi, the typical paradigm in ES is that sharding involves replica nodes, which serve two main purposes - act as a backup, so that in case one shard or one node is down, its replica continues to provide the same data until…

---

## [Fleet-Server Certificate issue](https://discuss.elastic.co/t/fleet-server-certificate-issue/328635)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 6\
**Last updated:** [April 3, 2023, 8:51am UTC](https://discuss.elastic.co/t/fleet-server-certificate-issue/328635 "2023-04-03T08:51:22Z")

</div>

Hi Community, xpack.security.enabled: true xpack.security.enrollment.enabled: true # Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents xpack.security.http.ssl.enabled: true xpack.se…

---

## [Elastic Cloud and Typescript?](https://discuss.elastic.co/t/elastic-cloud-and-typescript/317692)

<div class="topic-metadata">

**Author:** [@Troy\_Farrell](https://discuss.elastic.co/u/Troy_Farrell)\
**Replies:** 6\
**Last updated:** [January 31, 2023, 3:10pm UTC](https://discuss.elastic.co/t/elastic-cloud-and-typescript/317692 "2023-01-31T15:10:11Z")

</div>

Hi all, we are investigating the use of Elastic Cloud and additionally the use of App Search. Our journey so far has been a bit bumpy, and I'm looking for opinions from folks already using the services in production. I…

[Previous page](https://discuss.elastic.co/top.md?page=1499&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1501&per_page=50&period=all)
