# Top

**URL:** https://discuss.elastic.co/top.md?page=1520&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1521

---

## [How to add nodes to cluster through source code](https://discuss.elastic.co/t/how-to-add-nodes-to-cluster-through-source-code/173716)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 5\
**Last updated:** [April 22, 2019, 9:51am UTC](https://discuss.elastic.co/t/how-to-add-nodes-to-cluster-through-source-code/173716 "2019-04-22T09:51:21Z")

</div>

I want to add a node to my cluster(currently single node),but i want to add a node through source code. Which file i should look into.

---

## [Kibana/elastic search - Fetching search data](https://discuss.elastic.co/t/kibana-elastic-search-fetching-search-data/139993)

<div class="topic-metadata">

**Author:** [@rgarg](https://discuss.elastic.co/u/rgarg)\
**Replies:** 5\
**Last updated:** [July 14, 2018, 6:17am UTC](https://discuss.elastic.co/t/kibana-elastic-search-fetching-search-data/139993 "2018-07-14T06:17:38Z")

</div>

Kibana version 6.2.2 I am trying to export my dashboard using POST API call from an external server. Is there a way I can achieve that? The tool only shows me curl command using GET. Here is what i am want to perform …

---

## [Elastic 6.2 and logstash](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900)

<div class="topic-metadata">

**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\
**Replies:** 5\
**Last updated:** [February 9, 2018, 1:23am UTC](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900 "2018-02-09T01:23:14Z")

</div>

After getting frustrated with very very simple configuration (Elastic node hangs (i think) ) i installed 6.2 version of ES , Kibana and Logstash. ES is running in debug mode. Logstash has debug on for following. "logs…

---

## [Forced Shardawareness question](https://discuss.elastic.co/t/forced-shardawareness-question/118195)

<div class="topic-metadata">

**Author:** [@ludovic\_jerome](https://discuss.elastic.co/u/ludovic_jerome)\
**Replies:** 5\
**Last updated:** [February 6, 2018, 10:20am UTC](https://discuss.elastic.co/t/forced-shardawareness-question/118195 "2018-02-06T10:20:07Z")

</div>

Hello, I am testing the forced shard awareness configuration following this section https://www.elastic.co/guide/en/elasticsearch/reference/current/allocation-awareness.html. Please see below my setup: 3 dedicated ma…

---

## [Kibana Can't store an async search response larger than?](https://discuss.elastic.co/t/kibana-cant-store-an-async-search-response-larger-than/316677)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 0\
**Last updated:** [October 15, 2022, 9:53am UTC](https://discuss.elastic.co/t/kibana-cant-store-an-async-search-response-larger-than/316677 "2022-10-15T09:53:13Z")

</div>

Can't store an async search response larger than \[10485760\] bytes. This limit can be set by changing the \[search.max\_async\_search\_response\_size\] setting.

---

## [Logstash filter if \[type\] condition ignored](https://discuss.elastic.co/t/logstash-filter-if-type-condition-ignored/96016)

<div class="topic-metadata">

**Author:** [@Architha](https://discuss.elastic.co/u/Architha)\
**Replies:** 0\
**Last updated:** [August 6, 2017, 12:30pm UTC](https://discuss.elastic.co/t/logstash-filter-if-type-condition-ignored/96016 "2017-08-06T12:30:27Z")

</div>

Hi All, I need to run multiple logstash config files on a single instance, for which i need to use, in each config file types. Each config file must have a different type or else the config files will step on each other…

---

## [Adding Elasticsearch Node to a Cluster](https://discuss.elastic.co/t/adding-elasticsearch-node-to-a-cluster/356680)

<div class="topic-metadata">

**Author:** [@sravan\_kaheti](https://discuss.elastic.co/u/sravan_kaheti)\
**Replies:** 7\
**Last updated:** [April 4, 2024, 7:43am UTC](https://discuss.elastic.co/t/adding-elasticsearch-node-to-a-cluster/356680 "2024-04-04T07:43:27Z")

</div>

Hi Team , I have a Elasticsearch cluster of 25 nodes , which is lets say belongs subnet-a and all nodes i have configured/added to cluster using ./elasticsearch-create-enrollment-token -s node and then reconfigure comma…

---

## [Moving from daily to weekly indices, advice needed](https://discuss.elastic.co/t/moving-from-daily-to-weekly-indices-advice-needed/263710)

<div class="topic-metadata">

**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 12:52pm UTC](https://discuss.elastic.co/t/moving-from-daily-to-weekly-indices-advice-needed/263710 "2021-02-09T12:52:29Z")

</div>

After running into the 1000/1000 shards issue, I need to reduce the number of shards in use preferably without needing to remove to many old indices. Currently the configuration is set to daily indices, so we decided to …

---

## [Using urlparam in an Elasticsearch SQL query in Kibana Canvas](https://discuss.elastic.co/t/using-urlparam-in-an-elasticsearch-sql-query-in-kibana-canvas/204816)

<div class="topic-metadata">

**Author:** [@Sahiru\_Gunawardene](https://discuss.elastic.co/u/Sahiru_Gunawardene)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 12:29pm UTC](https://discuss.elastic.co/t/using-urlparam-in-an-elasticsearch-sql-query-in-kibana-canvas/204816 "2019-10-23T12:29:55Z")

</div>

How would I use the value received from a urlparam in an Elasticsearch SQL query? For example: I need to use the urlparam in an Elasticsearch SQL query which is used to retrieve data used to populate a datatable so I w…

---

## [Logstashのoutput.httpのproxyに動的に設定したい](https://discuss.elastic.co/t/logstash-output-http-proxy/191619)

<div class="topic-metadata">

**Author:** [@devdevdev](https://discuss.elastic.co/u/devdevdev)\
**Replies:** 1\
**Last updated:** [August 6, 2019, 5:40am UTC](https://discuss.elastic.co/t/logstash-output-http-proxy/191619 "2019-08-06T05:40:42Z")

</div>

logstashのoutput.httpにあるproxyをconfを変更せずに外部から動的に変更したいと考えています。 現在以下設定で試したのですがエラーが発生して上手くいきません。 良い方法はないでしょうか？ よろしくお願いいたします。 input { stdin{} } filter { environment { add\_metadata\_from\_env =\> {"proxysrv" =\> "Proxy…

---

## [Enable groovy scripts on ES6.5.4](https://discuss.elastic.co/t/enable-groovy-scripts-on-es6-5-4/172921)

<div class="topic-metadata">

**Author:** [@hichMEN](https://discuss.elastic.co/u/hichMEN)\
**Replies:** 1\
**Last updated:** [March 19, 2019, 9:14am UTC](https://discuss.elastic.co/t/enable-groovy-scripts-on-es6-5-4/172921 "2019-03-19T09:14:47Z")

</div>

I would execute a groovy script, so I added the properties: script.inline: true script.indexed: true and script.allowed\_types: inline script.allowed\_contexts: search, update But I got the following exception: java…

---

## [Calculate reindexing time for large index of data](https://discuss.elastic.co/t/calculate-reindexing-time-for-large-index-of-data/104447)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 1\
**Last updated:** [October 18, 2017, 7:17pm UTC](https://discuss.elastic.co/t/calculate-reindexing-time-for-large-index-of-data/104447 "2017-10-18T19:17:14Z")

</div>

Is there any ways to calculate how much time would it take to reindex index , that store 37 GB of data and has 180,000,000 documents in it?

---

## [Kibana Error in Console tab...illegal\_argument\_exception](https://discuss.elastic.co/t/kibana-error-in-console-tab-illegal-argument-exception/97954)

<div class="topic-metadata">

**Author:** [@sudi\_2611](https://discuss.elastic.co/u/sudi_2611)\
**Replies:** 1\
**Last updated:** [August 23, 2017, 12:22am UTC](https://discuss.elastic.co/t/kibana-error-in-console-tab-illegal-argument-exception/97954 "2017-08-23T00:22:31Z")

</div>

"error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Trying to query 1315 shards, which is over the limit of 1000. This limit exists because querying many shards at the …

---

## [Elasticsearch Multiple Instances of Master Node on same machine](https://discuss.elastic.co/t/elasticsearch-multiple-instances-of-master-node-on-same-machine/93909)

<div class="topic-metadata">

**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\
**Replies:** 1\
**Last updated:** [July 20, 2017, 5:45pm UTC](https://discuss.elastic.co/t/elasticsearch-multiple-instances-of-master-node-on-same-machine/93909 "2017-07-20T17:45:50Z")

</div>

Hello, I am using an instance of Elasticsearch currently wherein I have separate machines for data nodes & master node, and everything is working fine. Now, I plan to create another instance of Elasticsearch on a dif…

---

## [Saved "field" parameter is now invalid. Please select a new field. Discover: "field" is a required parameter](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field-discover-field-is-a-required-parameter/85476)

<div class="topic-metadata">

**Author:** [@bobby259](https://discuss.elastic.co/u/bobby259)\
**Replies:** 1\
**Last updated:** [May 11, 2017, 9:03pm UTC](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field-discover-field-is-a-required-parameter/85476 "2017-05-11T21:03:05Z")

</div>

I have upgraded Kibana from 2.3 to 5.3 and when I created the indexes I started to see this error. Saved "field" parameter is now invalid. Please select a new field. Discover: "field" is a required parameter TypeErro…

---

## [Troubleshooting CPU load when idle](https://discuss.elastic.co/t/troubleshooting-cpu-load-when-idle/84326)

<div class="topic-metadata">

**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\
**Replies:** 1\
**Last updated:** [May 3, 2017, 8:28pm UTC](https://discuss.elastic.co/t/troubleshooting-cpu-load-when-idle/84326 "2017-05-03T20:28:36Z")

</div>

I'm running two single node ES cluster: one for pre-production and one for development. In my monitoring and stats system I've mentioned that since the update to 5.3.1 the pre-production system's power usage went up. I'v…

---

## [Is the transport Java API open source too?](https://discuss.elastic.co/t/is-the-transport-java-api-open-source-too/68312)

<div class="topic-metadata">

**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\
**Replies:** 7\
**Last updated:** [December 13, 2016, 10:21am UTC](https://discuss.elastic.co/t/is-the-transport-java-api-open-source-too/68312 "2016-12-13T10:21:07Z")

</div>

I'm trying to find the source for the transport client I use in my java app. Where is it located in github? Edit: Looks like when I'm pulling in TransportClient from maven I'm really pulling down, Elasticsearch.jar f…

---

## [Max expansion in text queries](https://discuss.elastic.co/t/max-expansion-in-text-queries/6538)

<div class="topic-metadata">

**Author:** [@Alexander\_Reelsen](https://discuss.elastic.co/u/Alexander_Reelsen)\
**Replies:** 1\
**Last updated:** [February 1, 2012, 9:33am UTC](https://discuss.elastic.co/t/max-expansion-in-text-queries/6538 "2012-02-01T09:33:38Z")

</div>

Hi there, I have got a question about the max\_expansions parameter in text queries. According to the documentation the parameter only applies for text phrase prefix queries and has a different meaning in text querie…

---

## [Kibana Dev Tools Console won't load in Safari](https://discuss.elastic.co/t/kibana-dev-tools-console-wont-load-in-safari/252612)

<div class="topic-metadata">

**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\
**Replies:** 2\
**Last updated:** [October 19, 2020, 9:22pm UTC](https://discuss.elastic.co/t/kibana-dev-tools-console-wont-load-in-safari/252612 "2020-10-19T21:22:44Z")

</div>

I've had an issue plaguing me through several of the recent minor releases of Kibana. I can't load the Dev Tools Console in Safari. I always get a not-especially-helpful error message "Cannot load Console. Try reloading …

---

## [Vega Brush zoom doesn't work](https://discuss.elastic.co/t/vega-brush-zoom-doesnt-work/242291)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 2\
**Last updated:** [July 23, 2020, 3:58pm UTC](https://discuss.elastic.co/t/vega-brush-zoom-doesnt-work/242291 "2020-07-23T15:58:35Z")

</div>

Hi, I am trying to create an interactive vega graph which is zoomable. I have the brush and everything but it doesn't zoom in on the other graph. I oriented myself on this. My vega code: { "$schema": "https://vega.…

---

## [Format numbers with color and decimal places in metric aggregation](https://discuss.elastic.co/t/format-numbers-with-color-and-decimal-places-in-metric-aggregation/221703)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 2\
**Last updated:** [March 24, 2020, 12:58pm UTC](https://discuss.elastic.co/t/format-numbers-with-color-and-decimal-places-in-metric-aggregation/221703 "2020-03-24T12:58:16Z")

</div>

Hi, I have a metric that i sotore with 2 decimal places, it is a number between 0 and 100 representing a percentage. Then i have a table visualization in kibana showing that number with the top hit aggregation. I want t…

---

## [Is there any way to see what caused a change in Template settings?](https://discuss.elastic.co/t/is-there-any-way-to-see-what-caused-a-change-in-template-settings/214503)

<div class="topic-metadata">

**Author:** [@cwilliams](https://discuss.elastic.co/u/cwilliams)\
**Replies:** 2\
**Last updated:** [January 10, 2020, 9:22pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-see-what-caused-a-change-in-template-settings/214503 "2020-01-10T21:22:55Z")

</div>

I have a 4-node cluster running version 5.6.6 where a template setting accidentally got changed and I am wondering if there are any logs, etc. that I can use to identify what happened. The specific change was the number\_…

---

## [Elasticsearch internal password rules](https://discuss.elastic.co/t/elasticsearch-internal-password-rules/191431)

<div class="topic-metadata">

**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 12:03pm UTC](https://discuss.elastic.co/t/elasticsearch-internal-password-rules/191431 "2019-07-22T12:03:29Z")

</div>

Hello, Is there any setup that can be used to define rules for internal user password, for example Minimum length Minimul Capital Letter Minimum special caracter ?

---

## [Disaster Recovery - Azure Site Recovery?](https://discuss.elastic.co/t/disaster-recovery-azure-site-recovery/162893)

<div class="topic-metadata">

**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\
**Replies:** 2\
**Last updated:** [January 4, 2019, 6:42pm UTC](https://discuss.elastic.co/t/disaster-recovery-azure-site-recovery/162893 "2019-01-04T18:42:24Z")

</div>

Anyone tried solution like the one mentioned @ https://azure.microsoft.com/en-us/blog/asr-managed-disks-between-azure-regions/ for DR strategy? If not, anyone in this forum tried backup/restore solutions that work for di…

---

## [Metricbeat Windows Perfmon Module Inconsistent Metric Intervals](https://discuss.elastic.co/t/metricbeat-windows-perfmon-module-inconsistent-metric-intervals/138021)

<div class="topic-metadata">

**Author:** [@chuhuethaoattv](https://discuss.elastic.co/u/chuhuethaoattv)\
**Replies:** 2\
**Last updated:** [July 10, 2018, 6:16pm UTC](https://discuss.elastic.co/t/metricbeat-windows-perfmon-module-inconsistent-metric-intervals/138021 "2018-07-10T18:16:42Z")

</div>

Hello, I am using metricbeat to monitor a Windows box, and I have noticed that Windows Permon metrics is not consistent. I have it configured to every 60s, but I am noticing that there are gaps in the data in elasticsea…

---

## [How can I easily convert logstash filters with grok to ingest pipelines?](https://discuss.elastic.co/t/how-can-i-easily-convert-logstash-filters-with-grok-to-ingest-pipelines/119704)

<div class="topic-metadata">

**Author:** [@ujjain](https://discuss.elastic.co/u/ujjain)\
**Replies:** 2\
**Last updated:** [February 15, 2018, 6:17am UTC](https://discuss.elastic.co/t/how-can-i-easily-convert-logstash-filters-with-grok-to-ingest-pipelines/119704 "2018-02-15T06:17:49Z")

</div>

Logstash has ingest-convert.sh to convert ingest pipelines to Logstash, but I'd like to convert the other way around. I have the 23-Tomcat-filters and grok\_patterns file. Is there any smart way that would save me time …

---

## [Multi nested documents in logstash aggregation](https://discuss.elastic.co/t/multi-nested-documents-in-logstash-aggregation/107597)

<div class="topic-metadata">

**Author:** [@ahmadhattab](https://discuss.elastic.co/u/ahmadhattab)\
**Replies:** 2\
**Last updated:** [December 12, 2017, 11:34am UTC](https://discuss.elastic.co/t/multi-nested-documents-in-logstash-aggregation/107597 "2017-12-12T11:34:20Z")

</div>

Hello, I have 3 tables: users posts comments I made a left join query to get users then posts then comments like this: SELECT users.id as user\_id, users.name as user\_name, posts.id as post\_id, posts.title as post\_ti…

---

## [How to detect when the input data is finished](https://discuss.elastic.co/t/how-to-detect-when-the-input-data-is-finished/54945)

<div class="topic-metadata">

**Author:** [@Ben\_Ryan](https://discuss.elastic.co/u/Ben_Ryan)\
**Replies:** 2\
**Last updated:** [July 8, 2016, 5:26am UTC](https://discuss.elastic.co/t/how-to-detect-when-the-input-data-is-finished/54945 "2016-07-08T05:26:40Z")

</div>

I am using Logstash from the cmd line with file input and using cat to push new data to the input file. I need to be able to detect when the input is finished so that I can kill the Logstash instance.

---

## [Logstash -Using Schedular with JDBC Input plugin results in Ram being locked for scheduler and high CPU usage](https://discuss.elastic.co/t/logstash-using-schedular-with-jdbc-input-plugin-results-in-ram-being-locked-for-scheduler-and-high-cpu-usage/53200)

<div class="topic-metadata">

**Author:** [@amitpalsaluja](https://discuss.elastic.co/u/amitpalsaluja)\
**Replies:** 2\
**Last updated:** [June 19, 2016, 1:41pm UTC](https://discuss.elastic.co/t/logstash-using-schedular-with-jdbc-input-plugin-results-in-ram-being-locked-for-scheduler-and-high-cpu-usage/53200 "2016-06-19T13:41:11Z")

</div>

Hi , Using JDBC Input plugin with Schedule option , results in a. RAM(around 150+ MB) being Locked for the process. b. High CPU Usage. Version details logstash-2.2.0

---

## [Marvel Agent Ignoring settings and writing locally](https://discuss.elastic.co/t/marvel-agent-ignoring-settings-and-writing-locally/44579)

<div class="topic-metadata">

**Author:** [@flyingrabbit](https://discuss.elastic.co/u/flyingrabbit)\
**Replies:** 2\
**Last updated:** [March 17, 2016, 1:54pm UTC](https://discuss.elastic.co/t/marvel-agent-ignoring-settings-and-writing-locally/44579 "2016-03-17T13:54:09Z")

</div>

Hi All, Thanks for any advice anyone can give on this issue! My setting for Marvel agent in my production cluster is marvel.agent.exporters id1: type: http host: \["http://MonitoringNodeName:9200/" I can get to h…

---

## [Jenkins metrics using metricbeat](https://discuss.elastic.co/t/jenkins-metrics-using-metricbeat/318508)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 8\
**Last updated:** [November 9, 2022, 1:12pm UTC](https://discuss.elastic.co/t/jenkins-metrics-using-metricbeat/318508 "2022-11-09T13:12:52Z")

</div>

Hi, I've installed metricbeat on jenkins server and configured the elasticsearch output and kibana dashboards in metricbeat.yml. After starting metricbeat i am getting too many entries in the dashboard page of elk serve…

---

## [Do I need to generate a cert?](https://discuss.elastic.co/t/do-i-need-to-generate-a-cert/286773)

<div class="topic-metadata">

**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\
**Replies:** 8\
**Last updated:** [October 21, 2021, 7:23pm UTC](https://discuss.elastic.co/t/do-i-need-to-generate-a-cert/286773 "2021-10-21T19:23:03Z")

</div>

I have successfully configured minimal security in my environment and am now moving on to Basic, so that I can use fleet and SIEM. Version of Elastic I am using is 7.13.4, on a RHEL 8.0 server. I only have 1 Elasticsea…

---

## [Impact of setting max\_inner\_result\_window at index level](https://discuss.elastic.co/t/impact-of-setting-max-inner-result-window-at-index-level/273128)

<div class="topic-metadata">

**Author:** [@surabhi11](https://discuss.elastic.co/u/surabhi11)\
**Replies:** 0\
**Last updated:** [May 17, 2021, 6:20am UTC](https://discuss.elastic.co/t/impact-of-setting-max-inner-result-window-at-index-level/273128 "2021-05-17T06:20:02Z")

</div>

Hi, We have a user index and it has recipients (nested object). Since recipients are saved in User domain as nested object, so in order to pull the recipients data with pagination we are using inner\_hits query in respe…

---

## [No handlers could be found for logger "curator.actions.snapshot"](https://discuss.elastic.co/t/no-handlers-could-be-found-for-logger-curator-actions-snapshot/206947)

<div class="topic-metadata">

**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\
**Replies:** 3\
**Last updated:** [November 13, 2019, 1:40pm UTC](https://discuss.elastic.co/t/no-handlers-could-be-found-for-logger-curator-actions-snapshot/206947 "2019-11-13T13:40:51Z")

</div>

Hi I am getting following error while I run a python script and the script failed to create the snapshot. How can I fix this No handlers could be found for logger "curator.actions.snapshot" NOTE: The python script use…

---

## [Filebeat -\> Logstash Connection ISSUE](https://discuss.elastic.co/t/filebeat-logstash-connection-issue/190181)

<div class="topic-metadata">

**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\
**Replies:** 8\
**Last updated:** [July 16, 2019, 6:16am UTC](https://discuss.elastic.co/t/filebeat-logstash-connection-issue/190181 "2019-07-16T06:16:03Z")

</div>

My ELK is in a server of xyzcorp.com of IP 16.xxx.xxx.xxx and filebeat is in xyz.com of IP 16.aaa.aaa.aaa Both are in different domains but in same intranet umbrella. In filebeat.yml, I'm enabling the output.logstas…

---

## [Filebeat strips last characters of JSON](https://discuss.elastic.co/t/filebeat-strips-last-characters-of-json/139894)

<div class="topic-metadata">

**Author:** [@Sander\_Ma](https://discuss.elastic.co/u/Sander_Ma)\
**Replies:** 3\
**Last updated:** [July 15, 2018, 8:11am UTC](https://discuss.elastic.co/t/filebeat-strips-last-characters-of-json/139894 "2018-07-15T08:11:35Z")

</div>

Hi all, I have a strange problem parsing a JSON-ish file. We log in a JSON format where a multiline string can be added in a Message field. TLDR; Filebeat doesn't send the last two }} of the file for some reason. So…

---

## [Support for JSON arrays in Metricbeat HTTP Module](https://discuss.elastic.co/t/support-for-json-arrays-in-metricbeat-http-module/129659)

<div class="topic-metadata">

**Author:** [@BennyInc](https://discuss.elastic.co/u/BennyInc)\
**Replies:** 3\
**Last updated:** [April 26, 2018, 9:19pm UTC](https://discuss.elastic.co/t/support-for-json-arrays-in-metricbeat-http-module/129659 "2018-04-26T21:19:22Z")

</div>

Continuing the discussion from Configuring multiple paths in http module: In the old discussion I explained my usecase, which is gathering metrics from IBM Liberty. Yesterday I downloaded a 6.3 Snapshot to test the new…

---

## [Logstash Kafka Input Plugin Throws Errors missing class name (\`org.apache.kafka.clients.consumer.ConsumerConfig')](https://discuss.elastic.co/t/logstash-kafka-input-plugin-throws-errors-missing-class-name-org-apache-kafka-clients-consumer-consumerconfig/105128)

<div class="topic-metadata">

**Author:** [@Randall\_Svancara](https://discuss.elastic.co/u/Randall_Svancara)\
**Replies:** 3\
**Last updated:** [October 24, 2017, 10:22pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-throws-errors-missing-class-name-org-apache-kafka-clients-consumer-consumerconfig/105128 "2017-10-24T22:22:27Z")

</div>

I would really like to use this input plug-in but in the time I have spent futzing around with it I could of written something in GoLang.....The problem is that no matter what I do the plugin does not load: Version: …

---

## [V6.0.0-beta2 http module mapping trouble](https://discuss.elastic.co/t/v6-0-0-beta2-http-module-mapping-trouble/99703)

<div class="topic-metadata">

**Author:** [@Sylvain\_Mougenot](https://discuss.elastic.co/u/Sylvain_Mougenot)\
**Replies:** 3\
**Last updated:** [September 7, 2017, 10:35am UTC](https://discuss.elastic.co/t/v6-0-0-beta2-http-module-mapping-trouble/99703 "2017-09-07T10:35:40Z")

</div>

I’m trying to collect metrics from Dorpwizard metrics. Those are exposed by the REST API as Json. I tryed dropwizard module for metrics but it seams not to fetch any datas. Then switched to http module for metrics but…

---

## [Run a filter that checks for values in previous records](https://discuss.elastic.co/t/run-a-filter-that-checks-for-values-in-previous-records/90663)

<div class="topic-metadata">

**Author:** [@Tejas\_Ghutukade](https://discuss.elastic.co/u/Tejas_Ghutukade)\
**Replies:** 3\
**Last updated:** [June 23, 2017, 8:20pm UTC](https://discuss.elastic.co/t/run-a-filter-that-checks-for-values-in-previous-records/90663 "2017-06-23T20:20:39Z")

</div>

Hi, i am passing a csv file to lagstach with records of timestamp and processing time. i want to create a fliter that checks if the current timestamp lies within the timestamp and processing time of any of the previous…

---

## [Ruby Filter change in 5](https://discuss.elastic.co/t/ruby-filter-change-in-5/66437)

<div class="topic-metadata">

**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\
**Replies:** 3\
**Last updated:** [November 19, 2016, 2:29pm UTC](https://discuss.elastic.co/t/ruby-filter-change-in-5/66437 "2016-11-19T14:29:24Z")

</div>

Hi, I have been using a Ruby filter for some of by information, however since I have upgraded to 5 these no longer work. I have tried to understand exactly what changes under https://www.elastic.co/guide/en/logstash/5.x/…

---

## [How i could do this?](https://discuss.elastic.co/t/how-i-could-do-this/50794)

<div class="topic-metadata">

**Author:** [@ikerena](https://discuss.elastic.co/u/ikerena)\
**Replies:** 3\
**Last updated:** [May 25, 2016, 4:13pm UTC](https://discuss.elastic.co/t/how-i-could-do-this/50794 "2016-05-25T16:13:54Z")

</div>

hello, i have a table in a database with information about infections in all the hosts of this network, and i have another table with the inventory. i wanna have the average of each (infected host of one type)/(total hos…

---

## [Server requirement](https://discuss.elastic.co/t/server-requirement/32608)

<div class="topic-metadata">

**Author:** [@billiblu](https://discuss.elastic.co/u/billiblu)\
**Replies:** 3\
**Last updated:** [April 11, 2016, 9:11pm UTC](https://discuss.elastic.co/t/server-requirement/32608 "2016-04-11T21:11:31Z")

</div>

Hi, I am new on elasticsearch and I would like to use elastic for indexing 10k - 50k documents (Files with metadata). Anyone have experience for hardware requirement to handeling this volume of documents? How many GB o…

---

## [How to scale input data when use logstash](https://discuss.elastic.co/t/how-to-scale-input-data-when-use-logstash/39199)

<div class="topic-metadata">

**Author:** [@NgocPham](https://discuss.elastic.co/u/NgocPham)\
**Replies:** 3\
**Last updated:** [January 14, 2016, 6:29pm UTC](https://discuss.elastic.co/t/how-to-scale-input-data-when-use-logstash/39199 "2016-01-14T18:29:26Z")

</div>

Hi . Im newbie in elasticsearch and logstash. And I have some question . Please help me \[:slightly\_smiling:\] Im trying input data from postgres database into elasticsearch. I config and it running ok. But now i want sc…

---

## [Pointing output.conf to a custom added template](https://discuss.elastic.co/t/pointing-output-conf-to-a-custom-added-template/1589)

<div class="topic-metadata">

**Author:** [@bobkabir](https://discuss.elastic.co/u/bobkabir)\
**Replies:** 3\
**Last updated:** [May 31, 2015, 2:05am UTC](https://discuss.elastic.co/t/pointing-output-conf-to-a-custom-added-template/1589 "2015-05-31T02:05:58Z")

</div>

i created a new index template in elasticsearch, which is just a copy-paste of the default logstash template except i renamed it x\_logs and put "template" : "x\_logs-\*" my output.conf has this if \[type\] == x\_logs { elas…

---

## [Slow elasticsearch search performance](https://discuss.elastic.co/t/slow-elasticsearch-search-performance/347902)

<div class="topic-metadata">

**Author:** [@habibkka1234](https://discuss.elastic.co/u/habibkka1234)\
**Replies:** 4\
**Last updated:** [November 26, 2023, 4:37pm UTC](https://discuss.elastic.co/t/slow-elasticsearch-search-performance/347902 "2023-11-26T16:37:02Z")

</div>

i have a eck operator based Elasticsearch cluster with 4 nodes - each with 6 cpu cores and 16 gb ram configured on eck operator. Note: Configured ILM with alias, and have 3 index already created when max size is great…

---

## [Uptime and Elastic Agent ID links?](https://discuss.elastic.co/t/uptime-and-elastic-agent-id-links/288937)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 4\
**Last updated:** [December 15, 2021, 5:08pm UTC](https://discuss.elastic.co/t/uptime-and-elastic-agent-id-links/288937 "2021-12-15T17:08:33Z")

</div>

Is is possible to link an existing monitor to a agent that is enrolled in fleet? When you go to Uptime then metrics explorer you get a nice overlay but clicking view in Uptime ends with the main Uptime page and not the …

---

## [Corrupted Kibana Saved Object](https://discuss.elastic.co/t/corrupted-kibana-saved-object/283521)

<div class="topic-metadata">

**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 5:27am UTC](https://discuss.elastic.co/t/corrupted-kibana-saved-object/283521 "2021-09-08T05:27:43Z")

</div>

Hey, Can anyone please tell me how to check the corrupted saved object of kibana? Context: I'm intended to upgrade kibana. If any kibana saved object is corrupt then upgrade fails, so its workaround is to manually find …

---

## [Logstash Ruby Script - Access Fields While Avoiding Concurrency Issues](https://discuss.elastic.co/t/logstash-ruby-script-access-fields-while-avoiding-concurrency-issues/280956)

<div class="topic-metadata">

**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\
**Replies:** 4\
**Last updated:** [August 11, 2021, 9:43am UTC](https://discuss.elastic.co/t/logstash-ruby-script-access-fields-while-avoiding-concurrency-issues/280956 "2021-08-11T09:43:27Z")

</div>

I have a CSV file and what im trying to do is after filtering a bit the data, to output them in a another csv file but i have to check that im not writing SAME info. So i have a Ruby script to check for if a KEY is alrea…

---

## [Packetbeat duplicated HTTP events in Kubernetes Cluster](https://discuss.elastic.co/t/packetbeat-duplicated-http-events-in-kubernetes-cluster/246374)

<div class="topic-metadata">

**Author:** [@mathiascg](https://discuss.elastic.co/u/mathiascg)\
**Replies:** 4\
**Last updated:** [August 28, 2020, 10:53pm UTC](https://discuss.elastic.co/t/packetbeat-duplicated-http-events-in-kubernetes-cluster/246374 "2020-08-28T22:53:28Z")

</div>

Hi, we are experiencing a similar issue as in this post. Configuration: packetbeat.ignore\_outgoing: true setup.dashboards.enabled: true setup.template.enabled: true setup.template.name: "packetbeat" setup.template.p…

[Previous page](https://discuss.elastic.co/top.md?page=1519&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1521&per_page=50&period=all)
