# Top

**URL:** https://discuss.elastic.co/top.md?page=1503&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1504

---

## [Elasticsearch unable to parse date](https://discuss.elastic.co/t/elasticsearch-unable-to-parse-date/193206)

<div class="topic-metadata">

**Author:** [@Osama\_Tariq](https://discuss.elastic.co/u/Osama_Tariq)\
**Replies:** 4\
**Last updated:** [August 9, 2019, 1:11pm UTC](https://discuss.elastic.co/t/elasticsearch-unable-to-parse-date/193206 "2019-08-09T13:11:08Z")

</div>

Hi, I am getting following error on elasticsearch. Please help me to get rid off this error. I have hide the real ip info in below code. \[2019-07-31T22:37:58,459\]\[DEBUG\]\[o.e.a.b.TransportBulkAction\] \[IP ADDRESS\] failed …

---

## [How to replace @timestamp to the log files mentioned date?](https://discuss.elastic.co/t/how-to-replace-timestamp-to-the-log-files-mentioned-date/172306)

<div class="topic-metadata">

**Author:** [@Kharishma](https://discuss.elastic.co/u/Kharishma)\
**Replies:** 4\
**Last updated:** [March 14, 2019, 12:53pm UTC](https://discuss.elastic.co/t/how-to-replace-timestamp-to-the-log-files-mentioned-date/172306 "2019-03-14T12:53:28Z")

</div>

Hi, i have attached the configuration file. Can please help me out to copy the LOGTIME to @timestamp. input { beats { port =\> 5044 } } filter { grok{ match =\> {"message" =\> "%{TIMESTAMP\_ISO8601:LOGTIME}|%{WORD:L…

---

## [Java virtual memory usage](https://discuss.elastic.co/t/java-virtual-memory-usage/74556)

<div class="topic-metadata">

**Author:** [@John16](https://discuss.elastic.co/u/John16)\
**Replies:** 4\
**Last updated:** [February 10, 2017, 9:55am UTC](https://discuss.elastic.co/t/java-virtual-memory-usage/74556 "2017-02-10T09:55:08Z")

</div>

Hello, I setup ES cluster and started to load logs into it. Almost all parameters are in default except ES\_JAVA\_OPTS="-Xms10g -Xmx10g" I see that virtual memory usage of java process (which runs ES) constantly increa…

---

## [ElasticsearchParseException/NumberFormatException in scale/offset of decay function scoring](https://discuss.elastic.co/t/elasticsearchparseexception-numberformatexception-in-scale-offset-of-decay-function-scoring/1896)

<div class="topic-metadata">

**Author:** [@dtuck9](https://discuss.elastic.co/u/dtuck9)\
**Replies:** 4\
**Last updated:** [June 9, 2015, 11:16pm UTC](https://discuss.elastic.co/t/elasticsearchparseexception-numberformatexception-in-scale-offset-of-decay-function-scoring/1896 "2015-06-09T23:16:37Z")

</div>

Per the documentation for decay functions, I'm using the Date Format specified - e.g., 1M for 1 month, 1y for 1 year... I'm getting parse exceptions due to number format exception except for d for day and w for week. …

---

## [TCP connection limit of Elasticsearch](https://discuss.elastic.co/t/tcp-connection-limit-of-elasticsearch/271454)

<div class="topic-metadata">

**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\
**Replies:** 0\
**Last updated:** [April 28, 2021, 3:28am UTC](https://discuss.elastic.co/t/tcp-connection-limit-of-elasticsearch/271454 "2021-04-28T03:28:26Z")

</div>

We harvest logs on aws machines by filebeat. Filebeat on each machine push those log to local logstash nodes and then logstash nodes push the data to local Elasticsearch nodes. It seems to me that both logstash node and…

---

## [Reindexing from non-nested to nested](https://discuss.elastic.co/t/reindexing-from-non-nested-to-nested/121547)

<div class="topic-metadata">

**Author:** [@rishi\_upadhyay](https://discuss.elastic.co/u/rishi_upadhyay)\
**Replies:** 0\
**Last updated:** [February 26, 2018, 6:28pm UTC](https://discuss.elastic.co/t/reindexing-from-non-nested-to-nested/121547 "2018-02-26T18:28:06Z")

</div>

I created an elastic document with dynamic mapping. As by default elastic does not take the json array as nested but i wanted the mapping to be nested. As a solution i had to create a new index with mapping changes to n…

---

## [Is there something to Filter metrics on Lens?](https://discuss.elastic.co/t/is-there-something-to-filter-metrics-on-lens/312319)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 1\
**Last updated:** [August 18, 2022, 1:54pm UTC](https://discuss.elastic.co/t/is-there-something-to-filter-metrics-on-lens/312319 "2022-08-18T13:54:22Z")

</div>

I've been exploring some data on Lens and got to the point where negative values ended up showing up on my data, I just want to pick the ones with "1" on it. I know that in canvas a simple "WHERE" would work but I don't …

---

## [Range query is not working in elasticsearch JAVA Client API](https://discuss.elastic.co/t/range-query-is-not-working-in-elasticsearch-java-client-api/182954)

<div class="topic-metadata">

**Author:** [@Yamuna\_Mallikarjun](https://discuss.elastic.co/u/Yamuna_Mallikarjun)\
**Replies:** 1\
**Last updated:** [May 27, 2019, 7:30pm UTC](https://discuss.elastic.co/t/range-query-is-not-working-in-elasticsearch-java-client-api/182954 "2019-05-27T19:30:52Z")

</div>

Hello, I am using ES 6.6.0 version. I have two indices, both the indices have the fallowing field : "ts": { "type": "date" } able to query from one index and not from the other. If i execute the below query throug…

---

## [io.netty.handler.codec.compression.DecompressionException: Input is not in the GZIP format](https://discuss.elastic.co/t/io-netty-handler-codec-compression-decompressionexception-input-is-not-in-the-gzip-format/165514)

<div class="topic-metadata">

**Author:** [@xiaoyao](https://discuss.elastic.co/u/xiaoyao)\
**Replies:** 1\
**Last updated:** [January 24, 2019, 3:51am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-compression-decompressionexception-input-is-not-in-the-gzip-format/165514 "2019-01-24T03:51:10Z")

</div>

\[2019-01-24T10:04:40,406\]\[WARN \]\[o.e.h.n.Netty4HttpServerTransport\] \[HC-Elasticsearch-node02\_N\] caught exception while handling client http traffic, closing connection \[id: 0xbcdf3dcf, L:/es-ip:9200 ! R:/logstash-ip:5087…

---

## [Visualisations - Display records with zero count](https://discuss.elastic.co/t/visualisations-display-records-with-zero-count/151035)

<div class="topic-metadata">

**Author:** [@singhster](https://discuss.elastic.co/u/singhster)\
**Replies:** 1\
**Last updated:** [October 4, 2018, 11:33am UTC](https://discuss.elastic.co/t/visualisations-display-records-with-zero-count/151035 "2018-10-04T11:33:47Z")

</div>

I'm trying create a visualization and find IDs where there is a zero count over a given time period. For example, if we have data such as ID Date 1 01-OCT-2018 2 01-OCT-2018 1 02-OCT-2018 I'd like a v…

---

## [Settings in BulkProcessor (java)](https://discuss.elastic.co/t/settings-in-bulkprocessor-java/107527)

<div class="topic-metadata">

**Author:** [@gringogordo](https://discuss.elastic.co/u/gringogordo)\
**Replies:** 1\
**Last updated:** [November 14, 2017, 10:36am UTC](https://discuss.elastic.co/t/settings-in-bulkprocessor-java/107527 "2017-11-14T10:36:53Z")

</div>

Apologies this is a similar question to one I asked yesterday but I'm hoping I may have asked it in a slightly more focused way this time. Essentially I'm trying to understand the Settings Object that is required for th…

---

## [Refresh sync or async?](https://discuss.elastic.co/t/refresh-sync-or-async/99971)

<div class="topic-metadata">

**Author:** [@moren](https://discuss.elastic.co/u/moren)\
**Replies:** 1\
**Last updated:** [September 11, 2017, 12:55am UTC](https://discuss.elastic.co/t/refresh-sync-or-async/99971 "2017-09-11T00:55:18Z")

</div>

Hi, i don't understand how it should work. It doesn't matter what value the 'refresh' param have (true, wait\_for), but right after \_delete\_by\_query the search request get all the deleted documents. It's a bug or feature? …

---

## [Logstash Stop Working : Invalid netflow packet format](https://discuss.elastic.co/t/logstash-stop-working-invalid-netflow-packet-format/88598)

<div class="topic-metadata">

**Author:** [@Diyal](https://discuss.elastic.co/u/Diyal)\
**Replies:** 1\
**Last updated:** [June 19, 2017, 7:53am UTC](https://discuss.elastic.co/t/logstash-stop-working-invalid-netflow-packet-format/88598 "2017-06-19T07:53:36Z")

</div>

Hi all, I configured Logstash to collect netflow packet. Since few weeks ago, routinely Logstash stop directly when we receive Invalid netflow packet Configurations on device side about sending netflow packet for sp…

---

## [Guidance on monitoring queries](https://discuss.elastic.co/t/guidance-on-monitoring-queries/84566)

<div class="topic-metadata">

**Author:** [@MarkTierney](https://discuss.elastic.co/u/MarkTierney)\
**Replies:** 1\
**Last updated:** [May 5, 2017, 6:52pm UTC](https://discuss.elastic.co/t/guidance-on-monitoring-queries/84566 "2017-05-05T18:52:37Z")

</div>

Hi Folks, I am a newbie to Elasticsearch and am tasked with monitoring performance of the cluster as well as helping the other developers interpret the overall performance of the indexes. I am looking for guidance on …

---

## [Decorate\_events in Logstash 5 kafka input](https://discuss.elastic.co/t/decorate-events-in-logstash-5-kafka-input/57128)

<div class="topic-metadata">

**Author:** [@Tsury](https://discuss.elastic.co/u/Tsury)\
**Replies:** 1\
**Last updated:** [August 3, 2016, 6:08pm UTC](https://discuss.elastic.co/t/decorate-events-in-logstash-5-kafka-input/57128 "2016-08-03T18:08:26Z")

</div>

Was this setting removed? I can't seem to find it in the documentation and it causes a config error when used. I have a Kafka -\> Logstash -\>Elasticsearch setup and I would like to set the ES index according to the Kafka …

---

## [Stopping a cluster to balance shards when restarting a node](https://discuss.elastic.co/t/stopping-a-cluster-to-balance-shards-when-restarting-a-node/40406)

<div class="topic-metadata">

**Author:** [@anon45667325](https://discuss.elastic.co/u/anon45667325)\
**Replies:** 1\
**Last updated:** [January 29, 2016, 1:55am UTC](https://discuss.elastic.co/t/stopping-a-cluster-to-balance-shards-when-restarting-a-node/40406 "2016-01-29T01:55:45Z")

</div>

Hello, It seems that I cannot make my 1.6 Elasticsearch cluster not reassign shards when restarting a node from the cluster. When restarting a node, i'm disabled the shard allocation by changing cluster.routing.alloc…

---

## [Make all columns not analyzed when i give jdbc input by logstash](https://discuss.elastic.co/t/make-all-columns-not-analyzed-when-i-give-jdbc-input-by-logstash/27112)

<div class="topic-metadata">

**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\
**Replies:** 1\
**Last updated:** [August 10, 2015, 11:14pm UTC](https://discuss.elastic.co/t/make-all-columns-not-analyzed-when-i-give-jdbc-input-by-logstash/27112 "2015-08-10T23:14:10Z")

</div>

Hi All, I am using jdbc-input for logstash.By using this jdbc-input i am able to create index and i am able to load data into elastic search. But when i open this index in kibana to analyse getting issue that colu…

---

## [Elasticsearch Python](https://discuss.elastic.co/t/elasticsearch-python/296356)

<div class="topic-metadata">

**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\
**Replies:** 2\
**Last updated:** [February 7, 2022, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-python/296356 "2022-02-07T10:39:36Z")

</div>

Here is my code, from datetime import datetime from elasticsearch import Elasticsearch, helpers from pprint import pprint import json import time es = Elasticsearch(\['http://localhost:9200'\], http\_auth=('elastic', …

---

## [Best practice for JSON logging (e.g. timestamp processing)](https://discuss.elastic.co/t/best-practice-for-json-logging-e-g-timestamp-processing/284472)

<div class="topic-metadata">

**Author:** [@crazylogging](https://discuss.elastic.co/u/crazylogging)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 1:04am UTC](https://discuss.elastic.co/t/best-practice-for-json-logging-e-g-timestamp-processing/284472 "2021-09-21T01:04:59Z")

</div>

Hi, I'm quite new to the elastic stack so please excuse the question if it doesn't make any sense. I've got an application (let's call it JBoss) which runs in a docker container (all components in my scenario do so) an…

---

## [Documents not being replicated to replica shards](https://discuss.elastic.co/t/documents-not-being-replicated-to-replica-shards/268093)

<div class="topic-metadata">

**Author:** [@zeljko-bal](https://discuss.elastic.co/u/zeljko-bal)\
**Replies:** 2\
**Last updated:** [March 23, 2021, 1:46pm UTC](https://discuss.elastic.co/t/documents-not-being-replicated-to-replica-shards/268093 "2021-03-23T13:46:23Z")

</div>

Hi, I have a problem where for the same query executed multiple times, for some indices in my cluster, I get alternating different results (two sets of results alternating between each other with each subsequent request…

---

## [Kibana controls - date field](https://discuss.elastic.co/t/kibana-controls-date-field/223111)

<div class="topic-metadata">

**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 6:16am UTC](https://discuss.elastic.co/t/kibana-controls-date-field/223111 "2020-03-12T06:16:12Z")

</div>

Hi In Kibana visualization, for controls, i want a drop down of created date field. which is not getting displayed. I have a field created\_date with date format. I want a drop down with the created date values, so tha…

---

## [Elastic RUM JS agent not tracking client IP address](https://discuss.elastic.co/t/elastic-rum-js-agent-not-tracking-client-ip-address/208597)

<div class="topic-metadata">

**Author:** [@Kartheek\_Mannepalli](https://discuss.elastic.co/u/Kartheek_Mannepalli)\
**Replies:** 2\
**Last updated:** [November 20, 2019, 9:22pm UTC](https://discuss.elastic.co/t/elastic-rum-js-agent-not-tracking-client-ip-address/208597 "2019-11-20T21:22:35Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.4.…

---

## [Lucene Expressions: get ALL values from a Multi Value Field](https://discuss.elastic.co/t/lucene-expressions-get-all-values-from-a-multi-value-field/157640)

<div class="topic-metadata">

**Author:** [@seperman](https://discuss.elastic.co/u/seperman)\
**Replies:** 2\
**Last updated:** [November 24, 2018, 6:16am UTC](https://discuss.elastic.co/t/lucene-expressions-get-all-values-from-a-multi-value-field/157640 "2018-11-24T06:16:10Z")

</div>

Hello, How do I get all the values in a numeric multi value field in Lucene Expressions. It return the minimum value by default. And I can ask for mean or min or max but not ALL values. Basically I'm storing a vector a…

---

## [How to include Kibana Filter Bar in Custom Plugin?](https://discuss.elastic.co/t/how-to-include-kibana-filter-bar-in-custom-plugin/150658)

<div class="topic-metadata">

**Author:** [@tshoeb](https://discuss.elastic.co/u/tshoeb)\
**Replies:** 2\
**Last updated:** [October 2, 2018, 5:13pm UTC](https://discuss.elastic.co/t/how-to-include-kibana-filter-bar-in-custom-plugin/150658 "2018-10-02T17:13:35Z")

</div>

Hello, I am developing a kibana plugin of my own. The filter bar is not included in my plugin. My understanding is that all kibana elements should be available by default such as query search bar and time picker. But th…

---

## [Elasticsearch 6.2.4 only keep data for 2 months](https://discuss.elastic.co/t/elasticsearch-6-2-4-only-keep-data-for-2-months/132072)

<div class="topic-metadata">

**Author:** [@solo](https://discuss.elastic.co/u/solo)\
**Replies:** 2\
**Last updated:** [May 16, 2018, 9:17am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-4-only-keep-data-for-2-months/132072 "2018-05-16T09:17:56Z")

</div>

I have setup the following: \[txt log files\] -\> Filebeat -\> Logstash -\> Elasticsearch -\> Kibana Now I want to have Elasticsearch to keep log data for two months. How can I configure it? I cant see any property for it …

---

## [Avoiding multiple OR conditions in if statements logstash](https://discuss.elastic.co/t/avoiding-multiple-or-conditions-in-if-statements-logstash/128104)

<div class="topic-metadata">

**Author:** [@Ganesha\_Venkanna](https://discuss.elastic.co/u/Ganesha_Venkanna)\
**Replies:** 2\
**Last updated:** [April 16, 2018, 6:36am UTC](https://discuss.elastic.co/t/avoiding-multiple-or-conditions-in-if-statements-logstash/128104 "2018-04-16T06:36:49Z")

</div>

Hi, I am using the below code to parse only required lines from my logfile and ignore the others, though the code is working i want to avoid the multiple OR conditions,can the strings in the OR conditions be read from a…

---

## [Forced awareness + replica count](https://discuss.elastic.co/t/forced-awareness-replica-count/115351)

<div class="topic-metadata">

**Author:** [@priteshkp](https://discuss.elastic.co/u/priteshkp)\
**Replies:** 2\
**Last updated:** [January 25, 2018, 6:04am UTC](https://discuss.elastic.co/t/forced-awareness-replica-count/115351 "2018-01-25T06:04:06Z")

</div>

Using ES 6.1.0. I'm trying to understand what might be happening (either I'm doing something wrong or I'm misreading the documentation). I have a cluster where I have 2 physical machines. On each physical machine I la…

---

## [Unable to update X-pack licensing (Elastic version 5.0)](https://discuss.elastic.co/t/unable-to-update-x-pack-licensing-elastic-version-5-0/103804)

<div class="topic-metadata">

**Author:** [@rboorugu](https://discuss.elastic.co/u/rboorugu)\
**Replies:** 2\
**Last updated:** [October 13, 2017, 12:11pm UTC](https://discuss.elastic.co/t/unable-to-update-x-pack-licensing-elastic-version-5-0/103804 "2017-10-13T12:11:29Z")

</div>

I issue a command below to update xpack license (security, graph, watcher are disabled - i am just using monitoring) curl -XPUT 'http://localhost:9200/\_xpack/license?acknowledge=true' -H 'Content-Type: application/json'…

---

## [Applying conditionals to grok filter](https://discuss.elastic.co/t/applying-conditionals-to-grok-filter/89662)

<div class="topic-metadata">

**Author:** [@vinod\_hy](https://discuss.elastic.co/u/vinod_hy)\
**Replies:** 2\
**Last updated:** [June 16, 2017, 10:13am UTC](https://discuss.elastic.co/t/applying-conditionals-to-grok-filter/89662 "2017-06-16T10:13:22Z")

</div>

Hi All, I have log in the below format, 2017-06-08 19:05:56.222 loglevel=DEBUG,sysId=467,package=com.MyPackage1,class=MyClass.java,method="sendMessage",Id=679,message=Hello First Message. Below is my filter, filter{ …

---

## [Trying to optimize Elasticsearch cluster](https://discuss.elastic.co/t/trying-to-optimize-elasticsearch-cluster/72428)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 2\
**Last updated:** [January 23, 2017, 9:00am UTC](https://discuss.elastic.co/t/trying-to-optimize-elasticsearch-cluster/72428 "2017-01-23T09:00:42Z")

</div>

As our data has increased in size, we are having performance issues. I have been trying to determine the correct shard/node size, and I think we are way under powered. I have found some information on determining the c…

---

## [Some messages are jsonparsed when coming from redis](https://discuss.elastic.co/t/some-messages-are-jsonparsed-when-coming-from-redis/46358)

<div class="topic-metadata">

**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\
**Replies:** 2\
**Last updated:** [April 6, 2016, 10:11am UTC](https://discuss.elastic.co/t/some-messages-are-jsonparsed-when-coming-from-redis/46358 "2016-04-06T10:11:23Z")

</div>

Hi, I use Redis to connect a Logstash Shipper and Indexer instance. All my filter rules are in the Indexer save for one that adds a field called "shipper" with a value representing the hostname of the node this shipper…

---

## [Multiple Queries](https://discuss.elastic.co/t/multiple-queries/38706)

<div class="topic-metadata">

**Author:** [@billy6](https://discuss.elastic.co/u/billy6)\
**Replies:** 2\
**Last updated:** [January 10, 2016, 12:41am UTC](https://discuss.elastic.co/t/multiple-queries/38706 "2016-01-10T00:41:13Z")

</div>

Hello everybody! I would like to know if it is still imposible the use of multiple queries in Kibana4 or if this issue has been solved. we want to see logs from several logs and change this filters whenever wewant. W…

---

## [Initial Maven Repo](https://discuss.elastic.co/t/initial-maven-repo/2885)

<div class="topic-metadata">

**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\
**Replies:** 8\
**Last updated:** [April 16, 2010, 4:37pm UTC](https://discuss.elastic.co/t/initial-maven-repo/2885 "2010-04-16T16:37:02Z")

</div>

HI, There is a maven snapshot repo located here: http://oss.sonatype.org/content/repositories/snapshots/ that you can use. I have just pushed elasticsearch 0.6.0 SNAPSHOT there. When 0.6.0 will be released, the r…

---

## [Filebeat in docker, permission denied when trying to place registry on the host](https://discuss.elastic.co/t/filebeat-in-docker-permission-denied-when-trying-to-place-registry-on-the-host/339694)

<div class="topic-metadata">

**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\
**Replies:** 3\
**Last updated:** [August 8, 2023, 7:59am UTC](https://discuss.elastic.co/t/filebeat-in-docker-permission-denied-when-trying-to-place-registry-on-the-host/339694 "2023-08-08T07:59:55Z")

</div>

I would like to move the registry outside the filebeat folder, to be able to easy kill it. I have this config file: filebeat\_for\_dmarc: image: docker.elastic.co/beats/filebeat:${STACK\_VERSION} container\_name:…

---

## [Winlogbeat logs sent through logstash aren't parsed correctly](https://discuss.elastic.co/t/winlogbeat-logs-sent-through-logstash-arent-parsed-correctly/338076)

<div class="topic-metadata">

**Author:** [@dosterberg](https://discuss.elastic.co/u/dosterberg)\
**Replies:** 3\
**Last updated:** [July 11, 2023, 12:51pm UTC](https://discuss.elastic.co/t/winlogbeat-logs-sent-through-logstash-arent-parsed-correctly/338076 "2023-07-11T12:51:00Z")

</div>

Hi everyone! I'm new to ELK and have been enjoying very much working with it so far. I am currently evaluating ELK with Elastic Security as a SIEM in a test environment. I have tried sending both data from filebeat with …

---

## [Send clamav logs to elk](https://discuss.elastic.co/t/send-clamav-logs-to-elk/221483)

<div class="topic-metadata">

**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 8:04pm UTC](https://discuss.elastic.co/t/send-clamav-logs-to-elk/221483 "2020-02-28T20:04:56Z")

</div>

Hi there, I would like to send the scan logs from file c:\\program files\\clamav\\clamd.logs to elasticsearch and assign new index name like clamav-scans-\* The scan logs for clean file looks like Sat Feb 29 01:23:41 2020…

---

## [Heartbeat error DEBUG \[tcp\] tcp/task.go:58 check failed with: EOF](https://discuss.elastic.co/t/heartbeat-error-debug-tcp-tcp-task-go-58-check-failed-with-eof/174469)

<div class="topic-metadata">

**Author:** [@tarj](https://discuss.elastic.co/u/tarj)\
**Replies:** 3\
**Last updated:** [April 22, 2019, 5:35pm UTC](https://discuss.elastic.co/t/heartbeat-error-debug-tcp-tcp-task-go-58-check-failed-with-eof/174469 "2019-04-22T17:35:36Z")

</div>

Hello, I am trying to do heartbeat TCP check to my oracle database port. The database is up, but heartbeat is reporting is as down. Debug log is showing the below error: 2019-03-29T12:46:07.748+0800 DEBUG \[tcp\] …

---

## [Obtaining matching tokens with \_search](https://discuss.elastic.co/t/obtaining-matching-tokens-with-search/174647)

<div class="topic-metadata">

**Author:** [@fivo](https://discuss.elastic.co/u/fivo)\
**Replies:** 3\
**Last updated:** [April 2, 2019, 7:50am UTC](https://discuss.elastic.co/t/obtaining-matching-tokens-with-search/174647 "2019-04-02T07:50:52Z")

</div>

Suppose I have the following index: PUT test\_index { "settings": { "analysis": { "analyzer": { "my\_analyzer": { "tokenizer": "code\_tokenizer" } }, "tokenizer": { …

---

## [Node.js Monitoring](https://discuss.elastic.co/t/node-js-monitoring/149094)

<div class="topic-metadata">

**Author:** [@p-j](https://discuss.elastic.co/u/p-j)\
**Replies:** 3\
**Last updated:** [September 19, 2018, 11:44am UTC](https://discuss.elastic.co/t/node-js-monitoring/149094 "2018-09-19T11:44:21Z")

</div>

Hi there, We're happily using APM with our multiple Node.js apps, but we would really like to monitor Node metrics as well. A few data we'd like to see are: event loop delay cpu usage memory usage active event handle…

---

## [ML lab guide is outdated](https://discuss.elastic.co/t/ml-lab-guide-is-outdated/148821)

<div class="topic-metadata">

**Author:** [@Martin\_Cejka](https://discuss.elastic.co/u/Martin_Cejka)\
**Replies:** 3\
**Last updated:** [September 18, 2018, 10:40am UTC](https://discuss.elastic.co/t/ml-lab-guide-is-outdated/148821 "2018-09-18T10:40:11Z")

</div>

Hello, I started to take the X-Pack Machine learning e-learning class and the guide in attached file, X-Pack\_Machine\_Learning\_6.1, is outdated. It's available here: (https://training.elastic.co/login.html#/courses/7091/…

---

## [Issue with filebeat kafka output lz4 compression](https://discuss.elastic.co/t/issue-with-filebeat-kafka-output-lz4-compression/120427)

<div class="topic-metadata">

**Author:** [@prabin\_meitei](https://discuss.elastic.co/u/prabin_meitei)\
**Replies:** 3\
**Last updated:** [February 19, 2018, 5:53pm UTC](https://discuss.elastic.co/t/issue-with-filebeat-kafka-output-lz4-compression/120427 "2018-02-19T17:53:28Z")

</div>

I am trying to setup filebeat (6.2) with kafka output using lz4 compression, but always getting error as ERR Invalid kafka configuration: kafka: invalid configuration (lz4 compression requires Version \>= V0\_10\_0\_0) My …

---

## [Indexing without warmup stops 'early'](https://discuss.elastic.co/t/indexing-without-warmup-stops-early/104445)

<div class="topic-metadata">

**Author:** [@jki](https://discuss.elastic.co/u/jki)\
**Replies:** 3\
**Last updated:** [October 20, 2017, 6:35am UTC](https://discuss.elastic.co/t/indexing-without-warmup-stops-early/104445 "2017-10-20T06:35:24Z")

</div>

It appears that Rally settings for "iterations" and "bulk-size" interact in a way that is not documented: On the geonames challenge, changing the schedule for append-no-conflicts-index-only by: deleting "warmup-time-p…

---

## [Alternative to Array type in Kibana](https://discuss.elastic.co/t/alternative-to-array-type-in-kibana/97796)

<div class="topic-metadata">

**Author:** [@Huffs](https://discuss.elastic.co/u/Huffs)\
**Replies:** 3\
**Last updated:** [August 22, 2017, 2:43pm UTC](https://discuss.elastic.co/t/alternative-to-array-type-in-kibana/97796 "2017-08-22T14:43:17Z")

</div>

Hello everybody, Before everything, I´m sorry for my bad english. I´ll try to be clear and brief. I have a huge problem. I don´t know how can I do my mapping and show in Kibana the following things. Everyone has name,…

---

## [Wrong phrase in the http.response.phrase field](https://discuss.elastic.co/t/wrong-phrase-in-the-http-response-phrase-field/95182)

<div class="topic-metadata">

**Author:** [@KBuev](https://discuss.elastic.co/u/KBuev)\
**Replies:** 3\
**Last updated:** [August 1, 2017, 12:05pm UTC](https://discuss.elastic.co/t/wrong-phrase-in-the-http-response-phrase-field/95182 "2017-08-01T12:05:03Z")

</div>

Hi, It appears that Packetbeat 5.5.0 (the HTTP module) only gets the last word from HTTP status line when searching for the response phrase. HTTP/1.1 500 Internal Server Error turns into “Error” in the http.response.ph…

---

## [Packebeat: Unwanted 404 errors for styles, js like resources](https://discuss.elastic.co/t/packebeat-unwanted-404-errors-for-styles-js-like-resources/46243)

<div class="topic-metadata">

**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\
**Replies:** 3\
**Last updated:** [April 5, 2016, 9:25am UTC](https://discuss.elastic.co/t/packebeat-unwanted-404-errors-for-styles-js-like-resources/46243 "2016-04-05T09:25:38Z")

</div>

We are using Topbeat, and are able to successfully dashboard the info. But the 'HTTP codes for top queries' visualization is showing a lot of 404 errors for http request for resources like styles.css, jqu…

---

## [Will a rolling restart lose data?](https://discuss.elastic.co/t/will-a-rolling-restart-lose-data/2917)

<div class="topic-metadata">

**Author:** [@Grant\_Rodgers](https://discuss.elastic.co/u/Grant_Rodgers)\
**Replies:** 3\
**Last updated:** [May 10, 2010, 10:39am UTC](https://discuss.elastic.co/t/will-a-rolling-restart-lose-data/2917 "2010-05-10T10:39:57Z")

</div>

I've been looking at the docs and couldn't find the answer to this, so I thought I'd ask the list. Say I've changed the configuration of my elasticsearch cluster, and I want to restart every node to pick up the new …

---

## [APM nodejs agent Errors not Showing in Kibana](https://discuss.elastic.co/t/apm-nodejs-agent-errors-not-showing-in-kibana/287332)

<div class="topic-metadata">

**Author:** [@vamshi31](https://discuss.elastic.co/u/vamshi31)\
**Replies:** 4\
**Last updated:** [October 25, 2021, 4:04pm UTC](https://discuss.elastic.co/t/apm-nodejs-agent-errors-not-showing-in-kibana/287332 "2021-10-25T16:04:51Z")

</div>

// Add this to the VERY top of the first file loaded in your app var apm = require('elastic-apm-node').start({ // Override service name from package.json // Allowed characters: a-z, A-Z, 0-9, -, \_, and space serviceN…

---

## [PANW Integration - Timezone Offset Problem](https://discuss.elastic.co/t/panw-integration-timezone-offset-problem/282978)

<div class="topic-metadata">

**Author:** [@neil6323](https://discuss.elastic.co/u/neil6323)\
**Replies:** 4\
**Last updated:** [September 1, 2021, 10:09pm UTC](https://discuss.elastic.co/t/panw-integration-timezone-offset-problem/282978 "2021-09-01T22:09:26Z")

</div>

Elastic Cluster Version 7.14.0. I am using Elastic-Agent and the PANW integration to ingest Palo Alto Firewall logs. Once ingested the event times are incorrect by the equivalent of the timezone offset. I have found arti…

---

## [Found in Full-text search scenario，ES 7 slow than ES 5](https://discuss.elastic.co/t/found-in-full-text-search-scenario-es-7-slow-than-es-5/278065)

<div class="topic-metadata">

**Author:** [@zfaster](https://discuss.elastic.co/u/zfaster)\
**Replies:** 4\
**Last updated:** [July 16, 2021, 11:00am UTC](https://discuss.elastic.co/t/found-in-full-text-search-scenario-es-7-slow-than-es-5/278065 "2021-07-16T11:00:53Z")

</div>

Planning to upgrade from ES 5.6.7 to ES7.X,； During the test, the index data in ES5 was migrated to ES7, and performance comparison was performed in a specific scenario. It was found that the search time of ES7 decrease…

---

## [Date Field with Millis stored as double leading to error](https://discuss.elastic.co/t/date-field-with-millis-stored-as-double-leading-to-error/277519)

<div class="topic-metadata">

**Author:** [@Bertram](https://discuss.elastic.co/u/Bertram)\
**Replies:** 4\
**Last updated:** [July 9, 2021, 7:25am UTC](https://discuss.elastic.co/t/date-field-with-millis-stored-as-double-leading-to-error/277519 "2021-07-09T07:25:40Z")

</div>

Hey there, I recently got this strange problem in a new index: Basic info: Elasticsearch Version: 7.13.2 Nodes: 1 Node (localhost in Dev-Env) Middleware: \[Elasticsearch-PHP\] API-Wrapper The index got a date field a…

[Previous page](https://discuss.elastic.co/top.md?page=1502&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1504&per_page=50&period=all)
