# Top **URL:** https://discuss.elastic.co/top.md?page=1513&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1514 --- ## [Elasticsearch not handle autodiscover after master node down](https://discuss.elastic.co/t/elasticsearch-not-handle-autodiscover-after-master-node-down/191546)
**Author:** [@rizkan\_abadi](https://discuss.elastic.co/u/rizkan_abadi)\ **Replies:** 1\ **Last updated:** [July 22, 2019, 4:58am UTC](https://discuss.elastic.co/t/elasticsearch-not-handle-autodiscover-after-master-node-down/191546 "2019-07-22T04:58:56Z")
Node1 cluster.name: trinix-cluster node.name: es-node-01 node.data: true node.master: true cluster.initial\_master\_nodes: es-node-01 es-node-02 indices.memory.index\_buffer\_size: 1gb indices.fielddata.cache.size: 1… --- ## [Joda date time](https://discuss.elastic.co/t/joda-date-time/186653)
**Author:** [@saranjeet](https://discuss.elastic.co/u/saranjeet)\ **Replies:** 1\ **Last updated:** [June 20, 2019, 10:22am UTC](https://discuss.elastic.co/t/joda-date-time/186653 "2019-06-20T10:22:31Z")
{ "from": 0, "size": 10000, "query": { "bool": { "must": \[ { "match\_all": { "boost": 1 } }, { "bool": { "must": \[ … --- ## [Searching numeric keyword in text string](https://discuss.elastic.co/t/searching-numeric-keyword-in-text-string/145668)
**Author:** [@Neha\_Gupta](https://discuss.elastic.co/u/Neha_Gupta)\ **Replies:** 1\ **Last updated:** [August 24, 2018, 4:39pm UTC](https://discuss.elastic.co/t/searching-numeric-keyword-in-text-string/145668 "2018-08-24T16:39:25Z")
Hi, Am trying to search on numeric or special character on text string, but its not able to search. I have created tokenizer something like below, when i analyze tokens i can see numeric or special character tokens as … --- ## [Is the execution order guaranteed in a single\_bulk request?](https://discuss.elastic.co/t/is-the-execution-order-guaranteed-in-a-single-bulk-request/100412)
**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\ **Replies:** 1\ **Last updated:** [September 13, 2017, 8:35pm UTC](https://discuss.elastic.co/t/is-the-execution-order-guaranteed-in-a-single-bulk-request/100412 "2017-09-13T20:35:39Z")
Continuing the discussion from Are bulk index operations serialized?: Is this also true for several elements of one \_bulk command? If my request (one request) has action A, then B and then C (in this order) don't I hav… --- ## [Ошибка index\_closed\_exception](https://discuss.elastic.co/t/index-closed-exception/94327)
**Author:** [@shark85](https://discuss.elastic.co/u/shark85)\ **Replies:** 1\ **Last updated:** [July 24, 2017, 6:58pm UTC](https://discuss.elastic.co/t/index-closed-exception/94327 "2017-07-24T18:58:24Z")
Добрый день, периодически закрывается индекс и при обращении к индексу в ответ приходит ошибка: "error":{"root\_cause":\[{"type":"index\_closed\_exception","reason":"closed","index":"name"}\],"type":"index\_closed\_exception… --- ## [Jdbc-streaming filter plugin seems not working properly](https://discuss.elastic.co/t/jdbc-streaming-filter-plugin-seems-not-working-properly/93022)
**Author:** [@Blue\_Moon](https://discuss.elastic.co/u/Blue_Moon)\ **Replies:** 1\ **Last updated:** [July 21, 2017, 8:38am UTC](https://discuss.elastic.co/t/jdbc-streaming-filter-plugin-seems-not-working-properly/93022 "2017-07-21T08:38:12Z")
I want to fetch data from sqldb and want to prapared a nested json array structure input{ jdbc { jdbc\_connection\_string =\> "jdbc:sqlserver://testserver;databaseName=TEST\_DEV;user=me;password=secret;" jdbc\_user … --- ## [Logstash and codec =\> "Windows-1251" bug?](https://discuss.elastic.co/t/logstash-and-codec-windows-1251-bug/69798)
**Author:** [@LiVong](https://discuss.elastic.co/u/LiVong)\ **Replies:** 1\ **Last updated:** [December 23, 2016, 12:15pm UTC](https://discuss.elastic.co/t/logstash-and-codec-windows-1251-bug/69798 "2016-12-23T12:15:52Z")
Good time of the day. Try to configure ELK for some system, where parsing logs throw filebeat and recive some problem. I am new in ELK, so may be I am just make some stupid mistake. I have some logs in Windows-1251 en… --- ## [Logstash GeoIP filter (Tile map)](https://discuss.elastic.co/t/logstash-geoip-filter-tile-map/52463)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 1\ **Last updated:** [June 11, 2016, 6:41am UTC](https://discuss.elastic.co/t/logstash-geoip-filter-tile-map/52463 "2016-06-11T06:41:09Z")
Hi, I am trying to use GeoIP filter to display geographical location of IP addresses. I followed this tutorial https://www.digitalocean.com/community/tutorials/how-to-map-user-location-with-geoip-and-elk-elasticsearch-lo… --- ## [Conjunction of queries](https://discuss.elastic.co/t/conjunction-of-queries/7242)
**Author:** [@android](https://discuss.elastic.co/u/android)\ **Replies:** 1\ **Last updated:** [April 8, 2012, 5:58pm UTC](https://discuss.elastic.co/t/conjunction-of-queries/7242 "2012-04-08T17:58:59Z")
Hey guys, I have a query in the form : ((field1:a OR field2:i\*) AND (f5:x OR f6:y OR)) OR test:y I know I can do this with query string, but if the value to query has 'or' or 'and' as it's prefix, it returns al… --- ## [How to pass variable from Logstash filter into ruby parameter](https://discuss.elastic.co/t/how-to-pass-variable-from-logstash-filter-into-ruby-parameter/334438)
**Author:** [@Jirka\_Liska](https://discuss.elastic.co/u/Jirka_Liska)\ **Replies:** 4\ **Last updated:** [May 28, 2023, 3:59pm UTC](https://discuss.elastic.co/t/how-to-pass-variable-from-logstash-filter-into-ruby-parameter/334438 "2023-05-28T15:59:27Z")
Hi I'm trying to create a variable which holds information from input file path. I'm able to do so for example for creating index in Kibana but I'm unable to pass this variable into ruby /plugin/ code. Anyone knows what… --- ## [Rally create-track limit document count](https://discuss.elastic.co/t/rally-create-track-limit-document-count/279916)
**Author:** [@mots](https://discuss.elastic.co/u/mots)\ **Replies:** 4\ **Last updated:** [August 3, 2021, 4:10pm UTC](https://discuss.elastic.co/t/rally-create-track-limit-document-count/279916 "2021-08-03T16:10:59Z")
I am able to create a custom track following these instructions. But the target index I am using has over 5 mil documents. It's taking too long to create the custom track and I don't even need that many documents to run… --- ## [MultiSearch API](https://discuss.elastic.co/t/multisearch-api/121207)
**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\ **Replies:** 4\ **Last updated:** [February 28, 2018, 8:48am UTC](https://discuss.elastic.co/t/multisearch-api/121207 "2018-02-28T08:48:43Z")
Hi, How do I use multisearch api in my java program through my LowLevelRest client and HighLEvel Rest Client?? I have referred the documentation but can't understand much of it! --- ## [CreateIndexRequestBuilder and mappings from JSON (Java)](https://discuss.elastic.co/t/createindexrequestbuilder-and-mappings-from-json-java/5590)
**Author:** [@Jeremie\_BORDIER1](https://discuss.elastic.co/u/Jeremie_BORDIER1)\ **Replies:** 4\ **Last updated:** [October 14, 2011, 1:18pm UTC](https://discuss.elastic.co/t/createindexrequestbuilder-and-mappings-from-json-java/5590 "2011-10-14T13:18:55Z")
Hi, I would like to create my indexes from a template stored in a JSON file using the CreateIndexRequestBuilder class (Java). Unfortunately, it seems that the CreateIndexRequestBuilder object misses a method .sou… --- ## [Failed to start elasticsearch service](https://discuss.elastic.co/t/failed-to-start-elasticsearch-service/67062)
**Author:** [@aniketpatil](https://discuss.elastic.co/u/aniketpatil)\ **Replies:** 0\ **Last updated:** [November 24, 2016, 7:41am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-service/67062 "2016-11-24T07:41:57Z")
I am having issue when starting elasticsearch service. Service is installed properly. Sharing console code. D:\\Softwares\\Elastic\_Project\\elasticsearch-5.0.0\\bin\>elasticsearch-service install Installing service : … --- ## [Missing index setting in the new Java Client](https://discuss.elastic.co/t/missing-index-setting-in-the-new-java-client/294739)
**Author:** [@jdrossl](https://discuss.elastic.co/u/jdrossl)\ **Replies:** 6\ **Last updated:** [January 21, 2022, 2:19pm UTC](https://discuss.elastic.co/t/missing-index-setting-in-the-new-java-client/294739 "2022-01-21T14:19:06Z")
Hi everyone! I'm working on a migration from the RHLC to the new Java Client and most of it went fine but it seems like there is a whole section missing for Index Settings (index.mapping.\*) is this intentional or someth… --- ## [Analyze on text field](https://discuss.elastic.co/t/analyze-on-text-field/131452)
**Author:** [@Prashant\_Mishra](https://discuss.elastic.co/u/Prashant_Mishra)\ **Replies:** 6\ **Last updated:** [May 16, 2018, 12:25am UTC](https://discuss.elastic.co/t/analyze-on-text-field/131452 "2018-05-16T00:25:08Z")
https://www.elastic.co/guide/en/elasticsearch/client/javascript-api/current/api-reference.html#api-msearch I creating index using Bulk api from the above API references. where my type has a field with text which contain… --- ## [Re-index previous heartbeat data in ES through logstash processing](https://discuss.elastic.co/t/re-index-previous-heartbeat-data-in-es-through-logstash-processing/240739)
**Author:** [@paolinux](https://discuss.elastic.co/u/paolinux)\ **Replies:** 2\ **Last updated:** [July 10, 2020, 7:40pm UTC](https://discuss.elastic.co/t/re-index-previous-heartbeat-data-in-es-through-logstash-processing/240739 "2020-07-10T19:40:02Z")
Hi all, I know that the error described in this post has already been discussed but actually I could not find a solution yet. What I have been trying to accomplish it to have Logstash 7.6.2 read a bunch of JSON documen… --- ## [Elasticsearch Partial Snapshot](https://discuss.elastic.co/t/elasticsearch-partial-snapshot/222289)
**Author:** [@Bkelly](https://discuss.elastic.co/u/Bkelly)\ **Replies:** 2\ **Last updated:** [March 6, 2020, 2:07pm UTC](https://discuss.elastic.co/t/elasticsearch-partial-snapshot/222289 "2020-03-06T14:07:17Z")
Hi Im running into an issue with snapshotting one of my elasticsearch clusters. I have snapshot the cluster weekly , however I got a PARTIAL snapshot last time . 199/200 indices passed. one of the indices failed with… --- ## [How to add filter in "query suggestion" feature](https://discuss.elastic.co/t/how-to-add-filter-in-query-suggestion-feature/216112)
**Author:** [@viphuangwei](https://discuss.elastic.co/u/viphuangwei)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 8:50pm UTC](https://discuss.elastic.co/t/how-to-add-filter-in-query-suggestion-feature/216112 "2020-01-23T20:50:07Z")
Hi There, Is that possible to add additional filters in the "query suggestion". e.g. There is an index: { jobID: string, jobTitle: string, user: string, ......... } We select "jobTitle" this field as a sugge… --- ## [\[Discussion\] Comparison between Visual Builder (Time Series), Line Chart and Timelion Chart](https://discuss.elastic.co/t/discussion-comparison-between-visual-builder-time-series-line-chart-and-timelion-chart/185783)
**Author:** [@Zany](https://discuss.elastic.co/u/Zany)\ **Replies:** 2\ **Last updated:** [June 25, 2019, 2:03am UTC](https://discuss.elastic.co/t/discussion-comparison-between-visual-builder-time-series-line-chart-and-timelion-chart/185783 "2019-06-25T02:03:08Z")
In Visualize Mode, Visual Builder (Time Series), Line Chart and Timelion Chart are available to the users for building time-series visualizations. As I am new to Kibana, I would like to welcome the community to share vie… --- ## [Unable to start Elasticsearch 7.0 on Windows 10](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-0-on-windows-10/176858)
**Author:** [@dantonag](https://discuss.elastic.co/u/dantonag)\ **Replies:** 2\ **Last updated:** [April 15, 2019, 8:46am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-0-on-windows-10/176858 "2019-04-15T08:46:49Z")
Hello, when starting Elasticsearch on my machine, I get this error. Already tried to disable the antivirus, but with no luck: C:\\Program Files\\Elastic\\Elasticsearch\\7.0.0\\bin\>elasticsearch.exe \[2019-04-15T10:23:24,555… --- ## [Watcher with external html template](https://discuss.elastic.co/t/watcher-with-external-html-template/168056)
**Author:** [@Gidmark](https://discuss.elastic.co/u/Gidmark)\ **Replies:** 2\ **Last updated:** [February 13, 2019, 6:18am UTC](https://discuss.elastic.co/t/watcher-with-external-html-template/168056 "2019-02-13T06:18:21Z")
I have a fairly basic question. I have a watcher, I load a html template using a http input. I want to use this template (which contains mustache syntax) in my action. Is it possible? At the moment I just get the html wi… --- ## [Production cluster doesn't show up in Kibana on monitoring cluster](https://discuss.elastic.co/t/production-cluster-doesnt-show-up-in-kibana-on-monitoring-cluster/151125)
**Author:** [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\ **Replies:** 2\ **Last updated:** [October 13, 2018, 5:28pm UTC](https://discuss.elastic.co/t/production-cluster-doesnt-show-up-in-kibana-on-monitoring-cluster/151125 "2018-10-13T17:28:01Z")
Hi I have a production cluster called "elastic1" with 4 nodes (version 6.3.1). It's been running for a few months. I also have built a cluster called "elastic2" (1 node only, version 6.4.2) to collect monitoring data. … --- ## [Uncaught TypeError: Cannot read property 'length' of undefined](https://discuss.elastic.co/t/uncaught-typeerror-cannot-read-property-length-of-undefined/126227)
**Author:** [@ajitkaurav](https://discuss.elastic.co/u/ajitkaurav)\ **Replies:** 2\ **Last updated:** [April 2, 2018, 1:59pm UTC](https://discuss.elastic.co/t/uncaught-typeerror-cannot-read-property-length-of-undefined/126227 "2018-04-02T13:59:54Z")
I've embedded several dashboards in a webpage in tabs. I've so far embedded a total of 10 iframes for 10 different dashboards. Usually the first iframe loads pretty quickly, but the rest of the iframes show an error. I h… --- ## [Logstash stops processing input on malformed JSON line](https://discuss.elastic.co/t/logstash-stops-processing-input-on-malformed-json-line/77662)
**Author:** [@Firass\_Gzayil](https://discuss.elastic.co/u/Firass_Gzayil)\ **Replies:** 2\ **Last updated:** [March 9, 2017, 1:16pm UTC](https://discuss.elastic.co/t/logstash-stops-processing-input-on-malformed-json-line/77662 "2017-03-09T13:16:45Z")
Hello! I have logstash 5.2.2 reading files containing data in JSON format. When logstash encounters a malformed line it throws error and stops processing the whole input config: input { file { path =\> "c:/programdata/m… --- ## [Data disparity between Kibana and database](https://discuss.elastic.co/t/data-disparity-between-kibana-and-database/40227)
**Author:** [@karlisson](https://discuss.elastic.co/u/karlisson)\ **Replies:** 2\ **Last updated:** [January 28, 2016, 10:33am UTC](https://discuss.elastic.co/t/data-disparity-between-kibana-and-database/40227 "2016-01-28T10:33:19Z")
Hello! I'm using packetbeat with pf\_ring to gather data from Mysql INSERT's and index it in ES, showing on Kibana. pf\_ring works on a machine which has 20k packets per second and in total sums 280GB per day. It is an… --- ## [Discover view with no "massage" field](https://discuss.elastic.co/t/discover-view-with-no-massage-field/28681)
**Author:** [@Seva\_Feldman](https://discuss.elastic.co/u/Seva_Feldman)\ **Replies:** 2\ **Last updated:** [September 11, 2015, 2:17am UTC](https://discuss.elastic.co/t/discover-view-with-no-massage-field/28681 "2015-09-11T02:17:37Z")
Hi Folks, We have few duplicate data fields we want to remove from events. One of them message. If I'm removing "message" using logstash mutate, Kibana doesn't show those event in Discover tab at all. Any suggestion… --- ## [\[Book\] "Mastering ElasticSearch" Review](https://discuss.elastic.co/t/book-mastering-elasticsearch-review/15996)
**Author:** [@Alberto\_Paro\_2](https://discuss.elastic.co/u/Alberto_Paro_2)\ **Replies:** 2\ **Last updated:** [February 25, 2014, 7:39pm UTC](https://discuss.elastic.co/t/book-mastering-elasticsearch-review/15996 "2014-02-25T19:39:54Z")
Hello everyone, in this weekend I’ve had the pleasure to read “Mastering ElasticSearch” (http://www.packtpub.com/mastering-elasticsearch-querying-and-data-handling/book) of Rafał Kuć. Everyone, who is in Lucene/Solr/El… --- ## [Authentication of \[elastic\] was terminated by realm \[reserved\]](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/268307)
**Author:** [@Divyanshu\_Tyagi](https://discuss.elastic.co/u/Divyanshu_Tyagi)\ **Replies:** 3\ **Last updated:** [April 5, 2021, 5:51am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/268307 "2021-04-05T05:51:01Z")
My ELK stack is udpated with same version Elasticsearch version 7.11.1 logstash version 7.11.1 filebeat version 7.11.1 And in elasticsearch.log only thing i am seeing is \[INFO \]\[o.e.x.s.a.AuthenticationService\] \[inlxd… --- ## [How to define order of stacked values in TSVB?](https://discuss.elastic.co/t/how-to-define-order-of-stacked-values-in-tsvb/226358)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 9:46am UTC](https://discuss.elastic.co/t/how-to-define-order-of-stacked-values-in-tsvb/226358 "2020-04-06T09:46:09Z")
Hi, I've setup a new dev system of elastic stack. Currently Version 7.5.1. I imported a space and it's saved object from previous kibana version 7.4.2. When I open the dashboard TSVB looks different. the order of the… --- ## [Puzzled about message: Configuring TLS will be required to apply a Gold or Platinum license when security is enabled](https://discuss.elastic.co/t/puzzled-about-message-configuring-tls-will-be-required-to-apply-a-gold-or-platinum-license-when-security-is-enabled/130520)
**Author:** [@mlemartien](https://discuss.elastic.co/u/mlemartien)\ **Replies:** 3\ **Last updated:** [May 8, 2018, 6:17pm UTC](https://discuss.elastic.co/t/puzzled-about-message-configuring-tls-will-be-required-to-apply-a-gold-or-platinum-license-when-security-is-enabled/130520 "2018-05-08T18:17:38Z")
Hi, I am trying Elasticsearch and Kibana 6.2.4 with X-Pack. I have successfully configured TLS at all levels (node, kibana to cluster, browser to Kibana). I am puzzled by the cluster alert that remains visible in Kiban… --- ## [Issue migrating watchers to latest](https://discuss.elastic.co/t/issue-migrating-watchers-to-latest/103866)
**Author:** [@varun\_kumar2](https://discuss.elastic.co/u/varun_kumar2)\ **Replies:** 3\ **Last updated:** [October 13, 2017, 12:57pm UTC](https://discuss.elastic.co/t/issue-migrating-watchers-to-latest/103866 "2017-10-13T12:57:12Z")
I am trying to migrate my watcher to the latest elastic search Xpack Here is my condition script "condition": { "script": { "inline": "def sf = new SimpleDateFormat('yyyy-MM-dd');ctx.vars.from = sf.parse(new Date())… --- ## [Having problem to load a text file that contain DATE fields using logstash](https://discuss.elastic.co/t/having-problem-to-load-a-text-file-that-contain-date-fields-using-logstash/63668)
**Author:** [@yoavb](https://discuss.elastic.co/u/yoavb)\ **Replies:** 3\ **Last updated:** [October 28, 2016, 11:09am UTC](https://discuss.elastic.co/t/having-problem-to-load-a-text-file-that-contain-date-fields-using-logstash/63668 "2016-10-28T11:09:04Z")
Hi, I am totaly new to the ELK world. I have tried to load a text file that contain several date fields using logstash. I have tried to configure the field START\_DATE and END\_DATE to use the following format : DD/MM/YY… --- ## [Server and client errors, when connecting to Elasticsearch](https://discuss.elastic.co/t/server-and-client-errors-when-connecting-to-elasticsearch/49703)
**Author:** [@Tim\_Washington](https://discuss.elastic.co/u/Tim_Washington)\ **Replies:** 3\ **Last updated:** [May 10, 2016, 10:33pm UTC](https://discuss.elastic.co/t/server-and-client-errors-when-connecting-to-elasticsearch/49703 "2016-05-10T22:33:04Z")
Hi there, I'm running elasticsearch "stable 2.1.1, HEAD". When running ./bin/elasticsearch, everything's fine until I try to to connect to it. Using the stream "someindex/ledger" and key "somekey", I get the below ser… --- ## [How to add field for the duration of a session?](https://discuss.elastic.co/t/how-to-add-field-for-the-duration-of-a-session/916)
**Author:** [@yeroc](https://discuss.elastic.co/u/yeroc)\ **Replies:** 3\ **Last updated:** [May 19, 2015, 8:14pm UTC](https://discuss.elastic.co/t/how-to-add-field-for-the-duration-of-a-session/916 "2015-05-19T20:14:41Z")
We have some logs where some critical information (such as username) is logged once at the beginning of a user's session (these are web applicaiton logs) and we'd like to associate this information in a field for all the… --- ## [Deleting field from mapping](https://discuss.elastic.co/t/deleting-field-from-mapping/14646)
**Author:** [@AlexC](https://discuss.elastic.co/u/AlexC)\ **Replies:** 8\ **Last updated:** [December 4, 2013, 2:54pm UTC](https://discuss.elastic.co/t/deleting-field-from-mapping/14646 "2013-12-04T14:54:57Z")
Just wondering if the API supports deleting a field from a mapping. When a mapping is updated, the new definition is merged with the existing one, which makes me believe there is no support for deleting an existing f… --- ## [DEBUG level error question](https://discuss.elastic.co/t/debug-level-error-question/5674)
**Author:** [@Paul\_Smith](https://discuss.elastic.co/u/Paul_Smith)\ **Replies:** 8\ **Last updated:** [October 27, 2011, 11:38pm UTC](https://discuss.elastic.co/t/debug-level-error-question/5674 "2011-10-27T23:38:20Z")
While issuing a \_scan call, I see these stack traces logged at DEBUG level on my client: 5843 \[New I/O client worker #1-2\] DEBUG org.elasticsearch.action.search.type - \[Captain Savage\] \[25\] Failed to execute quer… --- ## [Best practices: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large, data for \[\\]](https://discuss.elastic.co/t/best-practices-transporterror-429-circuit-breaking-exception-parent-data-too-large-data-for-transport-request/224177)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 0\ **Last updated:** [March 18, 2020, 7:24pm UTC](https://discuss.elastic.co/t/best-practices-transporterror-429-circuit-breaking-exception-parent-data-too-large-data-for-transport-request/224177 "2020-03-18T19:24:06Z")
Hi! With time, an error occurs more and more often on my server: elasticsearch.exceptions.TransportError: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large, data for \[\\] woul… --- ## [Why can't metric UI use apm metric data?](https://discuss.elastic.co/t/why-cant-metric-ui-use-apm-metric-data/286290)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 7\ **Last updated:** [October 11, 2021, 3:51am UTC](https://discuss.elastic.co/t/why-cant-metric-ui-use-apm-metric-data/286290 "2021-10-11T03:51:58Z")
I did not deploy metricbeat. I saw that the apm agent collects some basic indicators (CPU, memory) of the system, I set the Metrics indices to "apm-\*-metric-\*", but the page did not show the results. Is there something w… --- ## [39m tweets on two nodes requires 11tb on S3?](https://discuss.elastic.co/t/39m-tweets-on-two-nodes-requires-11tb-on-s3/3625)
**Author:** [@Kenneth\_Loafman\_2](https://discuss.elastic.co/u/Kenneth_Loafman_2)\ **Replies:** 7\ **Last updated:** [December 5, 2010, 8:16pm UTC](https://discuss.elastic.co/t/39m-tweets-on-two-nodes-requires-11tb-on-s3/3625 "2010-12-05T20:16:38Z")
Hi, ES 0.11.0-SNAPSHOT has been running solid for a couple of months with an S3 Gateway, but there's a serious problem. Status shows that there are 39m docs with a store size of 50.5 GB, see https://gist.github.com… --- ## [Logging not working with Kibana 7.14.1](https://discuss.elastic.co/t/logging-not-working-with-kibana-7-14-1/283624)
**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\ **Replies:** 1\ **Last updated:** [September 14, 2021, 2:43pm UTC](https://discuss.elastic.co/t/logging-not-working-with-kibana-7-14-1/283624 "2021-09-14T14:43:05Z")
In my kibana.yml I have given the following. But I don't see kibana logs being written to the path I defined logging: root: level: all appenders: rolling-file: type: rolling-file fileName: /apps… --- ## [Filebeat multiline pattern for PHP stack trace](https://discuss.elastic.co/t/filebeat-multiline-pattern-for-php-stack-trace/281003)
**Author:** [@Thessis940](https://discuss.elastic.co/u/Thessis940)\ **Replies:** 1\ **Last updated:** [August 19, 2021, 8:38am UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-for-php-stack-trace/281003 "2021-08-19T08:38:06Z")
I am trying to import the PHP FPM logs into an ELK stack. For this I use the filebeat to read the files. Before sending this data to logstash, the multiline log entries should be merged. For this I built this filebeat c… --- ## [How to aggregate nested fields with null values?](https://discuss.elastic.co/t/how-to-aggregate-nested-fields-with-null-values/199536)
**Author:** [@Doronpt](https://discuss.elastic.co/u/Doronpt)\ **Replies:** 1\ **Last updated:** [September 15, 2019, 1:12pm UTC](https://discuss.elastic.co/t/how-to-aggregate-nested-fields-with-null-values/199536 "2019-09-15T13:12:21Z")
Hi, I'm having trouble aggregating my nested data, maybe you can help. I'll simplify the problem, I've a nested field that looks like: PUT test/doc/\_mapping { "properties": { "fields": { "type" : "n… --- ## [What does Logstash responds with when it back pressures Filebeat?](https://discuss.elastic.co/t/what-does-logstash-responds-with-when-it-back-pressures-filebeat/163381)
**Author:** [@xojima](https://discuss.elastic.co/u/xojima)\ **Replies:** 1\ **Last updated:** [January 8, 2019, 3:18pm UTC](https://discuss.elastic.co/t/what-does-logstash-responds-with-when-it-back-pressures-filebeat/163381 "2019-01-08T15:18:46Z")
We recently dropped Redis from our ELK pipeline and started sending logs directly using the beats input from Filebeat (6.1.3) to two Logstash instances(5.6.2) with persistent queues and loadbalance set to true. However w… --- ## [Some Issue in sql query with elasticsearch database](https://discuss.elastic.co/t/some-issue-in-sql-query-with-elasticsearch-database/114283)
**Author:** [@Devanshu\_Sharma](https://discuss.elastic.co/u/Devanshu_Sharma)\ **Replies:** 1\ **Last updated:** [January 6, 2018, 7:52pm UTC](https://discuss.elastic.co/t/some-issue-in-sql-query-with-elasticsearch-database/114283 "2018-01-06T19:52:17Z")
if i have run any sql query without column name space then It is successfully run. If i have run any sql query have space in column name that time it showing sql parse error. Example 1. without space in column name tha… --- ## [How does Shield integrate with Kibana 4?](https://discuss.elastic.co/t/how-does-shield-integrate-with-kibana-4/104)
**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\ **Replies:** 1\ **Last updated:** [June 11, 2015, 9:14am UTC](https://discuss.elastic.co/t/how-does-shield-integrate-with-kibana-4/104 "2015-06-11T09:14:01Z")
Authentication Kibana 4 uses HTTP Basic Authentication to authenticate to Elasticsearch with Shield. For convenience, Shield includes a default role for use with Kibana 4 (http://www.elasticsearch.org/guide/en/shield/c… --- ## [Multi-tenant Kibana 3](https://discuss.elastic.co/t/multi-tenant-kibana-3/1486)
**Author:** [@rugger74](https://discuss.elastic.co/u/rugger74)\ **Replies:** 1\ **Last updated:** [May 29, 2015, 2:28am UTC](https://discuss.elastic.co/t/multi-tenant-kibana-3/1486 "2015-05-29T02:28:14Z")
I am trying to set up a multi tenant instance of kibana 3 on the same server using httpd. I am basically installing kibana into separate directories for each tenant and defining a different kibana index for each. This wo… --- ## [.NET Core NLog correlation not showing when using Auto Instrumentation (Profiler) or Zero code change (startup hook)](https://discuss.elastic.co/t/net-core-nlog-correlation-not-showing-when-using-auto-instrumentation-profiler-or-zero-code-change-startup-hook/319089)
**Author:** [@karpediemnow](https://discuss.elastic.co/u/karpediemnow)\ **Replies:** 5\ **Last updated:** [January 16, 2023, 2:51pm UTC](https://discuss.elastic.co/t/net-core-nlog-correlation-not-showing-when-using-auto-instrumentation-profiler-or-zero-code-change-startup-hook/319089 "2023-01-16T14:51:41Z")
HI, following the documentation about Log correlation ( Link ) I have added the Elastic.Apm.NLog.dll and the following entries into NLog.config file but the ElasticApmTraceId and ElasticApmTransactionId are not sho… --- ## [Metricbeat setup overwrite Elastic Agent built in UI (Dashboard and Visualization)](https://discuss.elastic.co/t/metricbeat-setup-overwrite-elastic-agent-built-in-ui-dashboard-and-visualization/254235)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 5\ **Last updated:** [November 6, 2020, 8:11am UTC](https://discuss.elastic.co/t/metricbeat-setup-overwrite-elastic-agent-built-in-ui-dashboard-and-visualization/254235 "2020-11-06T08:11:09Z")
Hi all, I have an issue during elastic agent evaluation in Elastic Cloud 7.9.3 (Managed EC). I can successfully setup agent on several machines (Windows and Linux) with system and endpoint-security integrations. Data is… --- ## [SQL Query with "NOT IN" keyword replacement in ES](https://discuss.elastic.co/t/sql-query-with-not-in-keyword-replacement-in-es/158455)
**Author:** [@W.anjum](https://discuss.elastic.co/u/W.anjum)\ **Replies:** 5\ **Last updated:** [December 5, 2018, 10:23am UTC](https://discuss.elastic.co/t/sql-query-with-not-in-keyword-replacement-in-es/158455 "2018-12-05T10:23:09Z")
I need to filter results from my indices based on this scenario: Select \* from TblName where status='ERROR' not in (select \* from TbleName where status='OK' ) I am unable to get desired results using must, must not etc… [Previous page](https://discuss.elastic.co/top.md?page=1512&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1514&per_page=50&period=all)