# Top **URL:** https://discuss.elastic.co/top.md?page=1526&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1527 --- ## [Docker elasticsearch image is larger than the zip file](https://discuss.elastic.co/t/docker-elasticsearch-image-is-larger-than-the-zip-file/245949)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 3\ **Last updated:** [August 22, 2020, 8:04am UTC](https://discuss.elastic.co/t/docker-elasticsearch-image-is-larger-than-the-zip-file/245949 "2020-08-22T08:04:41Z")
what was the reason the docker image is bigger than ( almost 2X) the actual zip file . I couldn't get the docker file that was used to create docker image. Is there anyway to shrink it ? --- ## [How can I export data from index A and import it to index B?](https://discuss.elastic.co/t/how-can-i-export-data-from-index-a-and-import-it-to-index-b/212128)
**Author:** [@soniadailyview](https://discuss.elastic.co/u/soniadailyview)\ **Replies:** 3\ **Last updated:** [December 18, 2019, 8:47am UTC](https://discuss.elastic.co/t/how-can-i-export-data-from-index-a-and-import-it-to-index-b/212128 "2019-12-18T08:47:35Z")
Hi, I have the needs to backup data and dump data from production environment to stage. The size of one index is about 20G. I've tried using elasticsearch-dump but it is too slow. And I also try to use snapshot but h… --- ## [Maps with paths](https://discuss.elastic.co/t/maps-with-paths/206863)
**Author:** [@vishal\_M](https://discuss.elastic.co/u/vishal_M)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 10:08pm UTC](https://discuss.elastic.co/t/maps-with-paths/206863 "2019-11-07T22:08:45Z")
Hello Team, I want to display the world's map and place over it locations of clients who interact with a single server. I want to draw lines between the clients and server I also need to differentiate server and clien… --- ## [Upgrade of custom-image statefulset causes cluster-wide Readiness probe failed](https://discuss.elastic.co/t/upgrade-of-custom-image-statefulset-causes-cluster-wide-readiness-probe-failed/205952)
**Author:** [@Zorlack](https://discuss.elastic.co/u/Zorlack)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 5:11pm UTC](https://discuss.elastic.co/t/upgrade-of-custom-image-statefulset-causes-cluster-wide-readiness-probe-failed/205952 "2019-10-31T17:11:37Z")
Hello, I'm using ECK Operator 1.0.0-beta1 running on Rancher 2.0. I have a custom image for Elasticsearch which adds an off-cluster NFS share for snapshot backups. This capability works correctly, but when I go to upg… --- ## [Azure Repository Plugin access denied to elasticsearch.keystore](https://discuss.elastic.co/t/azure-repository-plugin-access-denied-to-elasticsearch-keystore/149904)
**Author:** [@brandonmichaelhunter](https://discuss.elastic.co/u/brandonmichaelhunter)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 7:40pm UTC](https://discuss.elastic.co/t/azure-repository-plugin-access-denied-to-elasticsearch-keystore/149904 "2018-09-27T19:40:44Z")
I've installed Azure Repository plugin into my 6.4 ES instance on my Ubuntu 16.04.5 LTS box which is hosted inside of a VM in Azure. I'm trying to perform backups and restores using a storage account I created in azure. … --- ## [Periodic CPU Spikes on all nodes](https://discuss.elastic.co/t/periodic-cpu-spikes-on-all-nodes/133716)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 3\ **Last updated:** [June 3, 2018, 9:55pm UTC](https://discuss.elastic.co/t/periodic-cpu-spikes-on-all-nodes/133716 "2018-06-03T21:55:57Z")
I’ve gotten some periodic CPU spikes on servers when there are no significant load. Restarting the servers doesn’t help. I have 4 nodes with 3 set to master-capable and one data node. When it spikes, all 4 servers run a… --- ## [Error with the key](https://discuss.elastic.co/t/error-with-the-key/127267)
**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\ **Replies:** 3\ **Last updated:** [April 9, 2018, 9:49am UTC](https://discuss.elastic.co/t/error-with-the-key/127267 "2018-04-09T09:49:42Z")
I want install filebeat on my server but when I write this command wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - I got this error : gpg: no valid OpenPGP data found. How resolve it… --- ## [Edit Metric visualization](https://discuss.elastic.co/t/edit-metric-visualization/118834)
**Author:** [@javiertec10](https://discuss.elastic.co/u/javiertec10)\ **Replies:** 3\ **Last updated:** [February 8, 2018, 1:55pm UTC](https://discuss.elastic.co/t/edit-metric-visualization/118834 "2018-02-08T13:55:55Z")
Hi all, I want to create something like this: \[imagen\] I'm using the "Metric" option but I want to know if is possible to edit the label format. Thanks! --- ## [Metricbeat 6.0.0 modules.d\\windows.yml - missing counter failure to start service](https://discuss.elastic.co/t/metricbeat-6-0-0-modules-d-windows-yml-missing-counter-failure-to-start-service/110569)
**Author:** [@KRasekhi](https://discuss.elastic.co/u/KRasekhi)\ **Replies:** 3\ **Last updated:** [December 12, 2017, 2:32am UTC](https://discuss.elastic.co/t/metricbeat-6-0-0-modules-d-windows-yml-missing-counter-failure-to-start-service/110569 "2017-12-12T02:32:56Z")
Hi, If you have a defined perfmon counter in here and it does not exist on the machine the agent fails to start. Is this intentional or a bug? Example - 2017-12-06T14:21:06-05:00 CRIT Exiting: 1 error: 1 error: initia… --- ## [Elastic search on windows server](https://discuss.elastic.co/t/elastic-search-on-windows-server/92085)
**Author:** [@Divya\_Sree](https://discuss.elastic.co/u/Divya_Sree)\ **Replies:** 3\ **Last updated:** [July 6, 2017, 1:23pm UTC](https://discuss.elastic.co/t/elastic-search-on-windows-server/92085 "2017-07-06T13:23:01Z")
Hi , I am trying to implement elastic search in windows server , is that possible. Please help me out. New to Elastic search. --- ## [ElasticSearch Cluster Set up on single machine](https://discuss.elastic.co/t/elasticsearch-cluster-set-up-on-single-machine/87516)
**Author:** [@Priyanka\_Talwaria](https://discuss.elastic.co/u/Priyanka_Talwaria)\ **Replies:** 3\ **Last updated:** [May 30, 2017, 11:00am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-set-up-on-single-machine/87516 "2017-05-30T11:00:11Z")
Can we two elastic search running on same machine on two different disks,so that if one of them crashes i'll be able to user other. If it is feasible how can I maintain my data and what will be the configuration settin… --- ## [Accessing "period" module config from inside a module](https://discuss.elastic.co/t/accessing-period-module-config-from-inside-a-module/85146)
**Author:** [@themanwithanrx7](https://discuss.elastic.co/u/themanwithanrx7)\ **Replies:** 3\ **Last updated:** [May 9, 2017, 8:22pm UTC](https://discuss.elastic.co/t/accessing-period-module-config-from-inside-a-module/85146 "2017-05-09T20:22:02Z")
Hello, I've been working on writing a few company-specific modules for metricbeat and have a question about the best way to access the config. I know that inside of the New func of a metricset module I can define a s… --- ## [Creation of the index .scripts ignore number\_of\_shards](https://discuss.elastic.co/t/creation-of-the-index-scripts-ignore-number-of-shards/52913)
**Author:** [@robert.volkmann](https://discuss.elastic.co/u/robert.volkmann)\ **Replies:** 3\ **Last updated:** [June 30, 2016, 7:16am UTC](https://discuss.elastic.co/t/creation-of-the-index-scripts-ignore-number-of-shards/52913 "2016-06-30T07:16:44Z")
Hi all, I have installed the latest version of elasticsearch (2.3.3) and configure my cluster with a number of shards greater than one. (elasticsearch.yml contains number\_of\_shards: 9) Now, if I create the index .sc… --- ## [Logstash 2.2.3 randomly stops forwarding logs to Elastic Search Node](https://discuss.elastic.co/t/logstash-2-2-3-randomly-stops-forwarding-logs-to-elastic-search-node/52078)
**Author:** [@Jamin\_Becker](https://discuss.elastic.co/u/Jamin_Becker)\ **Replies:** 3\ **Last updated:** [June 8, 2016, 1:19pm UTC](https://discuss.elastic.co/t/logstash-2-2-3-randomly-stops-forwarding-logs-to-elastic-search-node/52078 "2016-06-08T13:19:14Z")
Hi All, I have set up an cluster with 1 logstash collector and 1 elastic search node. I have my logstash listening on TCP/UDP syslog port 514, and forwarding all logs to my elastic-search node. Currently, my elastic-se… --- ## [How to make multiple lines of json file to single line json file](https://discuss.elastic.co/t/how-to-make-multiple-lines-of-json-file-to-single-line-json-file/343424)
**Author:** [@Narayan\_Rao](https://discuss.elastic.co/u/Narayan_Rao)\ **Replies:** 2\ **Last updated:** [September 21, 2023, 11:29am UTC](https://discuss.elastic.co/t/how-to-make-multiple-lines-of-json-file-to-single-line-json-file/343424 "2023-09-21T11:29:08Z")
I am having issue with multiple lines json file. With single line json file able to process the file with below configuration. logstash.conf input { beats{ port =\> "5044" codec =\> json } } filter { json… --- ## [Visualize 積み上げ縦棒グラフの作成方法](https://discuss.elastic.co/t/visualize/223279)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [March 16, 2020, 4:54am UTC](https://discuss.elastic.co/t/visualize/223279 "2020-03-16T04:54:17Z")
お世話になります。 Visualizeのbar chartsにて積み上げ縦棒グラフを作成したいのですが、 公式ドキュメント、discussを参照したところ作成方法が見つかりません。 bar chartsの作成方法について、ご教示お願い致します。 ▼イメージ id毎に月毎の件数を積み上げ表示 --- ## [Logstash is not reading logstash.conf file](https://discuss.elastic.co/t/logstash-is-not-reading-logstash-conf-file/152954)
**Author:** [@krajapraveen](https://discuss.elastic.co/u/krajapraveen)\ **Replies:** 2\ **Last updated:** [October 31, 2018, 3:54pm UTC](https://discuss.elastic.co/t/logstash-is-not-reading-logstash-conf-file/152954 "2018-10-31T15:54:47Z")
Hi I have installed Elastic Search, Logstash and Kibana on my windows laptop. Windows directory path to Kibana: C:\\Users\\rajapraveenk\\Downloads\\kibana-6.4.2-windows-x86\_64 Windows directory path to Logstash: C:\\Users… --- ## [How to transpose Xpack configuration from Java PreBuiltXPackTransportClient (old java client + Xpack) to RestHighLevelClient (new REST client + Xpack)?](https://discuss.elastic.co/t/how-to-transpose-xpack-configuration-from-java-prebuiltxpacktransportclient-old-java-client-xpack-to-resthighlevelclient-new-rest-client-xpack/134434)
**Author:** [@ivanqwam](https://discuss.elastic.co/u/ivanqwam)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 7:29am UTC](https://discuss.elastic.co/t/how-to-transpose-xpack-configuration-from-java-prebuiltxpacktransportclient-old-java-client-xpack-to-resthighlevelclient-new-rest-client-xpack/134434 "2018-06-05T07:29:51Z")
How to set up Xpack for the Java RestHighLevelClient ? For the PreBuiltXPackTransportClient (old java client + Xpack), I did the following which runs just fine: ses.log(null, "DEBUG", "QESHost\_elast… --- ## [Filebeat won't stop with SIGTERM if the --once flag is used,](https://discuss.elastic.co/t/filebeat-wont-stop-with-sigterm-if-the-once-flag-is-used/111009)
**Author:** [@Sheng\_Song](https://discuss.elastic.co/u/Sheng_Song)\ **Replies:** 2\ **Last updated:** [December 13, 2017, 8:22am UTC](https://discuss.elastic.co/t/filebeat-wont-stop-with-sigterm-if-the-once-flag-is-used/111009 "2017-12-13T08:22:35Z")
Hi, As described in title, my filebeat instance running with --once does not exit with SIGTERM. it does exit if without --once. Here is my simple yml: filebeat.prospectors: - input\_type: log paths: - /xxx close\_e… --- ## [\[elasticserach performance\] match query very slowly!](https://discuss.elastic.co/t/elasticserach-performance-match-query-very-slowly/100743)
**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\ **Replies:** 2\ **Last updated:** [September 27, 2017, 8:10am UTC](https://discuss.elastic.co/t/elasticserach-performance-match-query-very-slowly/100743 "2017-09-27T08:10:44Z")
Search the keyword "ladder" use matchQuery (java api) it will be very very very slowly! Time consuming as follows: { "took": 7778, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "failed": 0 }, … --- ## [Heartbeat to monitor beats services](https://discuss.elastic.co/t/heartbeat-to-monitor-beats-services/85826)
**Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\ **Replies:** 2\ **Last updated:** [May 15, 2017, 11:43pm UTC](https://discuss.elastic.co/t/heartbeat-to-monitor-beats-services/85826 "2017-05-15T23:43:46Z")
Hi, Is there a plan to use Heartbeat to monitor filebeat and metricbeat? I currently have 1,000+ servers running filebeat and metricbeat now and then the service stops. Currently I have powershell checking these servic… --- ## [Reading json file through logstash](https://discuss.elastic.co/t/reading-json-file-through-logstash/59995)
**Author:** [@saisn](https://discuss.elastic.co/u/saisn)\ **Replies:** 2\ **Last updated:** [September 22, 2016, 2:23pm UTC](https://discuss.elastic.co/t/reading-json-file-through-logstash/59995 "2016-09-22T14:23:45Z")
I have a json in the below format abc def{"DeviceId": "00D0","From": "LA","NotificationType": "Message","PublishTime": "2016-08-12T16:00:01.0995115+00:00",{"Version": "1.0","DeviceId": "00D0","From": "00D0"} how can … --- ## [Visualizing geo\_points on Kibana](https://discuss.elastic.co/t/visualizing-geo-points-on-kibana/42985)
**Author:** [@Croos](https://discuss.elastic.co/u/Croos)\ **Replies:** 2\ **Last updated:** [March 1, 2016, 8:46am UTC](https://discuss.elastic.co/t/visualizing-geo-points-on-kibana/42985 "2016-03-01T08:46:19Z")
No results found in visualization. I attached my screen shots. --- ## [Stuck with "re-syncing mappings with cluster state for types ..." after upgrade 0.90.9 to 1.4.2](https://discuss.elastic.co/t/stuck-with-re-syncing-mappings-with-cluster-state-for-types-after-upgrade-0-90-9-to-1-4-2/21713)
**Author:** [@Eike\_Dehling](https://discuss.elastic.co/u/Eike_Dehling)\ **Replies:** 2\ **Last updated:** [January 20, 2015, 11:54am UTC](https://discuss.elastic.co/t/stuck-with-re-syncing-mappings-with-cluster-state-for-types-after-upgrade-0-90-9-to-1-4-2/21713 "2015-01-20T11:54:21Z")
Hi List, we have recently upgraded our ES cluster (12 nodes, ~900GB data) from 0.90.9 to 1.4.2. We did a restart-upgrade, so backup data and then start the new ES version with the old data directories. Since th… --- ## [Can not connect to two different version clusters using transport client](https://discuss.elastic.co/t/can-not-connect-to-two-different-version-clusters-using-transport-client/14360)
**Author:** [@spancer\_ray](https://discuss.elastic.co/u/spancer_ray)\ **Replies:** 2\ **Last updated:** [November 14, 2013, 3:43am UTC](https://discuss.elastic.co/t/can-not-connect-to-two-different-version-clusters-using-transport-client/14360 "2013-11-14T03:43:20Z")
Hi Guys, I'm now using java transport client to connect two clusters in different versions. One is 0.90.0 (on remote server), the other is 1.0.0.Beta1 (set up on my local machine). And my client ES version is 0.90.0… --- ## [Snowflake to Elasticsearch](https://discuss.elastic.co/t/snowflake-to-elasticsearch/347543)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 8\ **Last updated:** [November 23, 2023, 8:14am UTC](https://discuss.elastic.co/t/snowflake-to-elasticsearch/347543 "2023-11-23T08:14:57Z")
Hi Team , We are trying to pull data from Snowflake database to Elasticsaerch via Logstash JDBC plugin Input Config: input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/logstash-core/lib/jars/snowflake-jd… --- ## [How to show the pipeline conf source filename of error in logs](https://discuss.elastic.co/t/how-to-show-the-pipeline-conf-source-filename-of-error-in-logs/302201)
**Author:** [@Mahf](https://discuss.elastic.co/u/Mahf)\ **Replies:** 8\ **Last updated:** [April 12, 2022, 4:52pm UTC](https://discuss.elastic.co/t/how-to-show-the-pipeline-conf-source-filename-of-error-in-logs/302201 "2022-04-12T16:52:19Z")
Hello, We have multiple logstash conf files that we run simultaneously, the problem is that when we have many errors come from several pipelines, so we can't tell which one is the source of the error, sometimes it's eas… --- ## [Not able to load text files into elastic search](https://discuss.elastic.co/t/not-able-to-load-text-files-into-elastic-search/153220)
**Author:** [@ruban7483](https://discuss.elastic.co/u/ruban7483)\ **Replies:** 8\ **Last updated:** [October 31, 2018, 10:17am UTC](https://discuss.elastic.co/t/not-able-to-load-text-files-into-elastic-search/153220 "2018-10-31T10:17:19Z")
I am new to elastic search. I have a code to load text files into elastic search. The text file has two columns and its not working. But the same code is working fine for single column. Please some one help me to fix thi… --- ## [Unique values - Terms aggregation or Wildcard query](https://discuss.elastic.co/t/unique-values-terms-aggregation-or-wildcard-query/96480)
**Author:** [@Nithin\_Chandy](https://discuss.elastic.co/u/Nithin_Chandy)\ **Replies:** 0\ **Last updated:** [August 9, 2017, 4:50pm UTC](https://discuss.elastic.co/t/unique-values-terms-aggregation-or-wildcard-query/96480 "2017-08-09T16:50:24Z")
What’s the best way to get all the unique terms for a field? Can use either terms aggregation or a wild card query (and then reduce it to unique terms at the application side)? { "query": { "wildcard" : { "t… --- ## [Odd problem withe "failed to parse" messages in logstash.log](https://discuss.elastic.co/t/odd-problem-withe-failed-to-parse-messages-in-logstash-log/34266)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 0\ **Last updated:** [November 10, 2015, 4:35pm UTC](https://discuss.elastic.co/t/odd-problem-withe-failed-to-parse-messages-in-logstash-log/34266 "2015-11-10T16:35:24Z")
I am using nxlog to pump Windows EventLogs to Logstash. It's filling my logs with warnings, but I can't work out why it's even complaining. It looks like it's a field I'm not even using. Part of the problem is that the… --- ## [Solr SearchComponent-like functionality?](https://discuss.elastic.co/t/solr-searchcomponent-like-functionality/5315)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 8\ **Last updated:** [April 23, 2014, 7:53pm UTC](https://discuss.elastic.co/t/solr-searchcomponent-like-functionality/5315 "2014-04-23T19:53:50Z")
Hello, A long time Solr user posted a good question about ES over on Sematext Blog, about an equivalent of Solr's SearchComponents in ES: http://blog.sematext.com/2010/05/03/elastic-search-distributed-lucene/#comm… --- ## [DocValues in ES 1.0.0.Beta1](https://discuss.elastic.co/t/docvalues-in-es-1-0-0-beta1/14496)
**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\ **Replies:** 8\ **Last updated:** [March 12, 2014, 2:18pm UTC](https://discuss.elastic.co/t/docvalues-in-es-1-0-0-beta1/14496 "2014-03-12T14:18:22Z")
Hi Can any one help me how to use doc\_values in Beta1 , also how to verify the same. I have the following settings in elasticsearch config directory. \*in elasticsearch.yml\* index.mapping.ignore\_malformed: fa… --- ## [Win32\_Service queries hanging](https://discuss.elastic.co/t/win32-service-queries-hanging/341133)
**Author:** [@\_bruno](https://discuss.elastic.co/u/_bruno)\ **Replies:** 4\ **Last updated:** [August 24, 2023, 3:16pm UTC](https://discuss.elastic.co/t/win32-service-queries-hanging/341133 "2023-08-24T15:16:30Z")
Environment: Windows version: Windows 10 21H2, fully patched Beats versions: 8.9.0, 8.9.1 (winlogbeat and filebeat) Steps to Reproduce: Install beats versions 8.9.0 or 8.9.1 as a windows service. Attempt to make a W… --- ## [Filtering syslog message](https://discuss.elastic.co/t/filtering-syslog-message/279877)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 4\ **Last updated:** [July 28, 2021, 8:18pm UTC](https://discuss.elastic.co/t/filtering-syslog-message/279877 "2021-07-28T20:18:19Z")
hello, I'm new to ELK and I'm trying to use logstash to consume logs from a syslog server I have, how do I extract the messages that arrive inside the message field? here is a log sample: "\<133\>Jul 28 09:59:11 10.128.x… --- ## [Receiving remote logs in logstash](https://discuss.elastic.co/t/receiving-remote-logs-in-logstash/240234)
**Author:** [@orlapa](https://discuss.elastic.co/u/orlapa)\ **Replies:** 4\ **Last updated:** [July 9, 2020, 5:36pm UTC](https://discuss.elastic.co/t/receiving-remote-logs-in-logstash/240234 "2020-07-09T17:36:23Z")
I have configured a HSM to send lodgs via TCP to logstash listening in pot 5004, but nothing arrive. I did a test with Rsyslog in port 514 and the logs arrive. Where should I focus the serach for error, the services are … --- ## [Zentity resolution leads to maxClauseCount queries](https://discuss.elastic.co/t/zentity-resolution-leads-to-maxclausecount-queries/221463)
**Author:** [@erewok](https://discuss.elastic.co/u/erewok)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 4:55pm UTC](https://discuss.elastic.co/t/zentity-resolution-leads-to-maxclausecount-queries/221463 "2020-03-04T16:55:49Z")
Hello, I started experimenting with the zentity plugin yesterday in order to see if we can use it to solve some of our entity resolution problems (instead of building our own custom software to do the same). I find tha… --- ## [Install curator, without root or internet access](https://discuss.elastic.co/t/install-curator-without-root-or-internet-access/176418)
**Author:** [@Parvatayya\_Malimath](https://discuss.elastic.co/u/Parvatayya_Malimath)\ **Replies:** 4\ **Last updated:** [April 12, 2019, 1:46pm UTC](https://discuss.elastic.co/t/install-curator-without-root-or-internet-access/176418 "2019-04-12T13:46:27Z")
Hi I have no internet access or root/sudo access on a vm and i badly need to have the curator for managing the indices. please help me with a tar ball (not the source code) or let me know a work around to keep the inde… --- ## [Don't know how to strat using ELK](https://discuss.elastic.co/t/dont-know-how-to-strat-using-elk/164682)
**Author:** [@rolive86](https://discuss.elastic.co/u/rolive86)\ **Replies:** 4\ **Last updated:** [January 23, 2019, 12:40am UTC](https://discuss.elastic.co/t/dont-know-how-to-strat-using-elk/164682 "2019-01-23T00:40:31Z")
Im kind of struggling with the ELK environment. I mount everything in a virtual box. I was able to set Elastic, Longstash and Kibana in a Linux distro. Im still failing in the index pattern creation and (obviously) und… --- ## [Elasticsearch 6.4.2 crashes after some time running perfectly fine](https://discuss.elastic.co/t/elasticsearch-6-4-2-crashes-after-some-time-running-perfectly-fine/155091)
**Author:** [@orivera](https://discuss.elastic.co/u/orivera)\ **Replies:** 4\ **Last updated:** [November 2, 2018, 12:46am UTC](https://discuss.elastic.co/t/elasticsearch-6-4-2-crashes-after-some-time-running-perfectly-fine/155091 "2018-11-02T00:46:09Z")
Elasticsearch dies after some time running perfectly fine, it leaves no entry in the elasticsearch error but there is JVM error which I uploaded here: https://gist.github.com/ofrivera/ece25bbd7d451c85241ca45517b6b85d Th… --- ## [Is it possible to index a file with a size of 26GB in elasticsearch?](https://discuss.elastic.co/t/is-it-possible-to-index-a-file-with-a-size-of-26gb-in-elasticsearch/129831)
**Author:** [@Michel\_Budimbu-Esuku](https://discuss.elastic.co/u/Michel_Budimbu-Esuku)\ **Replies:** 4\ **Last updated:** [April 30, 2018, 9:09am UTC](https://discuss.elastic.co/t/is-it-possible-to-index-a-file-with-a-size-of-26gb-in-elasticsearch/129831 "2018-04-30T09:09:36Z")
Hello everybody I have a mbox file with a size of 26 GB (this file is called bigFile.mbox). I want to index bigFile.mbox in Elasticsearch. How can I do ? Here's what I tried to put in place: 1.I started writing a pyt… --- ## [Why \`/\_cat/indices\` shows system indices?](https://discuss.elastic.co/t/why-cat-indices-shows-system-indices/337837)
**Author:** [@Mike\_Z](https://discuss.elastic.co/u/Mike_Z)\ **Replies:** 1\ **Last updated:** [July 6, 2023, 10:00pm UTC](https://discuss.elastic.co/t/why-cat-indices-shows-system-indices/337837 "2023-07-06T22:00:44Z")
The system indices have names starting with a dot, like .xxxxxx. And usually, the command GET \_cat/indices/\_all does not show the system indices, so they are hidden by default. For learning purposes, we recently went th… --- ## [\[ERROR\]\[logstash.agent\] "Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"input\\", \\"filter\\", \\"output\\" at line 1, column 1 (byte 1)"](https://discuss.elastic.co/t/error-logstash-agent-expected-one-of-t-r-n-input-filter-output-at-line-1-column-1-byte-1/269515)
**Author:** [@Eng.Lucy](https://discuss.elastic.co/u/Eng.Lucy)\ **Replies:** 1\ **Last updated:** [April 7, 2021, 8:04pm UTC](https://discuss.elastic.co/t/error-logstash-agent-expected-one-of-t-r-n-input-filter-output-at-line-1-column-1-byte-1/269515 "2021-04-07T20:04:35Z")
I run logstash in a Docker container and occurs a error: \`\`\[ERROR\]\[logstash.agent\] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :messa… --- ## [Max number of records in an Index](https://discuss.elastic.co/t/max-number-of-records-in-an-index/116984)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 1\ **Last updated:** [January 25, 2018, 9:12am UTC](https://discuss.elastic.co/t/max-number-of-records-in-an-index/116984 "2018-01-25T09:12:55Z")
Hi Is there any max limit of records(rows) in an index? Crores of data rows can I add to an index? Thanks Aneesh --- ## [Iniciación en ELK](https://discuss.elastic.co/t/iniciacion-en-elk/100982)
**Author:** [@btk](https://discuss.elastic.co/u/btk)\ **Replies:** 1\ **Last updated:** [September 19, 2017, 11:50am UTC](https://discuss.elastic.co/t/iniciacion-en-elk/100982 "2017-09-19T11:50:25Z")
Buenos días, ha caído en mis manos un proyecto de centralización de logs con ELK, existe algún manual completo o guía de referencia indispensable en el idioma de Cervantes que todo el mundo deba conocer? y/o alguna comun… --- ## [I need help in extracting specific value from json array field](https://discuss.elastic.co/t/i-need-help-in-extracting-specific-value-from-json-array-field/93751)
**Author:** [@ea1987](https://discuss.elastic.co/u/ea1987)\ **Replies:** 1\ **Last updated:** [July 19, 2017, 3:48pm UTC](https://discuss.elastic.co/t/i-need-help-in-extracting-specific-value-from-json-array-field/93751 "2017-07-19T15:48:54Z")
Hi guys, I'm working on a json log. I have extracted correctly json message from its entries and parsed it via json plugin in this way: grok { patterns\_dir =\> \["/home/elastic/ELASTIC\_55/logstash-5.5.0/config/patterns… --- ## [Reporting behind secured apache proxy](https://discuss.elastic.co/t/reporting-behind-secured-apache-proxy/71251)
**Author:** [@Borrelworst](https://discuss.elastic.co/u/Borrelworst)\ **Replies:** 1\ **Last updated:** [January 11, 2017, 5:20pm UTC](https://discuss.elastic.co/t/reporting-behind-secured-apache-proxy/71251 "2017-01-11T17:20:24Z")
Hi all, I try to configure the reporting function while using Kibana behind a secured apache proxy: This does not seem to work. I almost tried everything I can think of, I will explain my configuration: Apache is red… --- ## [Is it possible to connect logstash with elasticsearch master node?](https://discuss.elastic.co/t/is-it-possible-to-connect-logstash-with-elasticsearch-master-node/37115)
**Author:** [@jffifa](https://discuss.elastic.co/u/jffifa)\ **Replies:** 1\ **Last updated:** [December 15, 2015, 11:23am UTC](https://discuss.elastic.co/t/is-it-possible-to-connect-logstash-with-elasticsearch-master-node/37115 "2015-12-15T11:23:43Z")
When I read hints about elasticsearch output plugin I noticed that It is important to exclude dedicated master nodes from the hosts list to prevent LS from sending bulk requests to the master nodes. So this parameter s… --- ## [Kibana server is not ready yet and logstash 401 error](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-and-logstash-401-error/327247)
**Author:** [@Antony-m](https://discuss.elastic.co/u/Antony-m)\ **Replies:** 2\ **Last updated:** [March 20, 2023, 4:52am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-and-logstash-401-error/327247 "2023-03-20T04:52:41Z")
@adityasinghal26 @renangenova I'm new to the ELK stack I watched a youtube tutorial and setup the ELK in my local using docker, here the youtube video link This is my docker-compose.yml file version: '3.6' services: … --- ## [Elastic APM RUM JS Agent - Grouping http-request transactions](https://discuss.elastic.co/t/elastic-apm-rum-js-agent-grouping-http-request-transactions/215380)
**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\ **Replies:** 2\ **Last updated:** [January 17, 2020, 8:05pm UTC](https://discuss.elastic.co/t/elastic-apm-rum-js-agent-grouping-http-request-transactions/215380 "2020-01-17T20:05:53Z")
Kibana version : 7.4.0 Elasticsearch version : 7.4.0 APM Server version : 7.4.0 APM Agent language and version : @elastic/apm-rum-angular 0.4.0. Angular 8.2.14. Fresh install or upgraded from other version? Fresh … --- ## [Multiple logstash instance need to run on window 10](https://discuss.elastic.co/t/multiple-logstash-instance-need-to-run-on-window-10/214198)
**Author:** [@Pramod\_Thakur](https://discuss.elastic.co/u/Pramod_Thakur)\ **Replies:** 2\ **Last updated:** [January 9, 2020, 6:59am UTC](https://discuss.elastic.co/t/multiple-logstash-instance-need-to-run-on-window-10/214198 "2020-01-09T06:59:31Z")
Hi Folks, On my local machine logstash is working fine when I am running only one logstash pipeline, but when I am trying to run second logstash pipeline (config file) it says that Logstash could not be started becaus… [Previous page](https://discuss.elastic.co/top.md?page=1525&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1527&per_page=50&period=all)