# Top

**URL:** https://discuss.elastic.co/top.md?page=1534&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1535

---

## [Index recovered itself after I deleted the whole index](https://discuss.elastic.co/t/index-recovered-itself-after-i-deleted-the-whole-index/13008)

<div class="topic-metadata">

**Author:** [@xiaoliang\_tian](https://discuss.elastic.co/u/xiaoliang_tian)\
**Replies:** 8\
**Last updated:** [July 31, 2013, 7:07am UTC](https://discuss.elastic.co/t/index-recovered-itself-after-i-deleted-the-whole-index/13008 "2013-07-31T07:07:33Z")

</div>

after I insert 10000000 msg to an index,I delete it( use restFul api to delete whole index 15915 ),But this index recovered and still include some msgs.I use head to check msg in this index It shows: 15915 size…

---

## [Data of type java.util.GregorianCalendar cannot be used](https://discuss.elastic.co/t/data-of-type-java-util-gregoriancalendar-cannot-be-used/93573)

<div class="topic-metadata">

**Author:** [@SailLiao](https://discuss.elastic.co/u/SailLiao)\
**Replies:** 0\
**Last updated:** [July 18, 2017, 11:56am UTC](https://discuss.elastic.co/t/data-of-type-java-util-gregoriancalendar-cannot-be-used/93573 "2017-07-18T11:56:41Z")

</div>

i use pyspark read a parquet file from hdfs and i hive a column type is timstamp , when i write the DataFrame to es , there is an exception Data of type java.util.GregorianCalendar cannot be used but when i not use the t…

---

## [Kibana - Parse Out / Aggregate Total Values Scripted Code](https://discuss.elastic.co/t/kibana-parse-out-aggregate-total-values-scripted-code/272945)

<div class="topic-metadata">

**Author:** [@prohit](https://discuss.elastic.co/u/prohit)\
**Replies:** 6\
**Last updated:** [August 2, 2021, 11:49am UTC](https://discuss.elastic.co/t/kibana-parse-out-aggregate-total-values-scripted-code/272945 "2021-08-02T11:49:08Z")

</div>

Hi All, Need help in writing script painless code to parse out/aggregate the "hours worked" in below document. My Kibana Variable Document: \[{"Dateweeklycomments":"2020-04-09T00:00:00.000Z","Name":"Roger Benny","Role":…

---

## [How to push file from github to logstash](https://discuss.elastic.co/t/how-to-push-file-from-github-to-logstash/232844)

<div class="topic-metadata">

**Author:** [@dheeru11](https://discuss.elastic.co/u/dheeru11)\
**Replies:** 6\
**Last updated:** [May 18, 2020, 10:59am UTC](https://discuss.elastic.co/t/how-to-push-file-from-github-to-logstash/232844 "2020-05-18T10:59:06Z")

</div>

I have file which will be uploaded to github daily. I want push the same file to logstash. How can i do that ?

---

## [Csv filter plugin mapping problem](https://discuss.elastic.co/t/csv-filter-plugin-mapping-problem/216887)

<div class="topic-metadata">

**Author:** [@mhyager](https://discuss.elastic.co/u/mhyager)\
**Replies:** 6\
**Last updated:** [February 10, 2020, 4:21pm UTC](https://discuss.elastic.co/t/csv-filter-plugin-mapping-problem/216887 "2020-02-10T16:21:28Z")

</div>

Can somebody help me understand this error? \[2020-01-28T17:29:58,361\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[AMIENS\] \[llmlogs-2020.01-000001\]\[0\] failed to execute bulk item (index) index {\[llmlogs-2020.01-000001\]\[\_do…

---

## [Timelion Appears to be bucketing dates incorrectly](https://discuss.elastic.co/t/timelion-appears-to-be-bucketing-dates-incorrectly/184058)

<div class="topic-metadata">

**Author:** [@matt-catellier](https://discuss.elastic.co/u/matt-catellier)\
**Replies:** 6\
**Last updated:** [June 5, 2019, 4:48pm UTC](https://discuss.elastic.co/t/timelion-appears-to-be-bucketing-dates-incorrectly/184058 "2019-06-05T16:48:04Z")

</div>

Hey, I am working with elasticsearch:6.3.1 and /kibana-oss:6.1.0. I have been building app to record daily energy consumption for high-rise buildings. I am recording the date and value in a document with following for…

---

## [Not able to run logstash on RHEL server](https://discuss.elastic.co/t/not-able-to-run-logstash-on-rhel-server/121854)

<div class="topic-metadata">

**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\
**Replies:** 6\
**Last updated:** [March 1, 2018, 5:58am UTC](https://discuss.elastic.co/t/not-able-to-run-logstash-on-rhel-server/121854 "2018-03-01T05:58:17Z")

</div>

Hi, I have successfully installed logstash. I have also uploaded config file under "/etc/logstash/conf.d" and tried starting logstash with below command: \[root@localhost Softwares\]# sudo rpm -i logstash-6.0.0.rpm warni…

---

## [Value split is ":"](https://discuss.elastic.co/t/value-split-is/99123)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 6\
**Last updated:** [September 11, 2017, 12:58pm UTC](https://discuss.elastic.co/t/value-split-is/99123 "2017-09-11T12:58:26Z")

</div>

Hi, I have kv text with the value split “:”. In the text I also have some “:”. For example : (after the https.) Refferer(URI):https://wifiondemand.xfinity.com/wod/selfservice/?lang=en&ui\_style=light My filter looks …

---

## [Logstash output is not generating file with current date when timestamp field not available](https://discuss.elastic.co/t/logstash-output-is-not-generating-file-with-current-date-when-timestamp-field-not-available/301752)

<div class="topic-metadata">

**Author:** [@sagarpatel](https://discuss.elastic.co/u/sagarpatel)\
**Replies:** 2\
**Last updated:** [April 6, 2022, 1:03pm UTC](https://discuss.elastic.co/t/logstash-output-is-not-generating-file-with-current-date-when-timestamp-field-not-available/301752 "2022-04-06T13:03:04Z")

</div>

Hi, I am trying to create output file using logstash file output plugin but when @timestamp field is not available then it is not genearting file with current date. Below is working example where i have added date fil…

---

## [Filebeats 7.4.2/nomad OOM error](https://discuss.elastic.co/t/filebeats-7-4-2-nomad-oom-error/207407)

<div class="topic-metadata">

**Author:** [@djesrani](https://discuss.elastic.co/u/djesrani)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 5:15pm UTC](https://discuss.elastic.co/t/filebeats-7-4-2-nomad-oom-error/207407 "2019-11-13T17:15:13Z")

</div>

Hello all, I've been running into Out Of Memory/"task killed" issues deploying Filebeats and docker-gen into our production cluster. Nomad version is 0.9.4, Filebeats version is 7.4.2. Memory allocation to Filebeats b…

---

## [How to scrub data in Elasticsearch](https://discuss.elastic.co/t/how-to-scrub-data-in-elasticsearch/137888)

<div class="topic-metadata">

**Author:** [@\_kyllr](https://discuss.elastic.co/u/_kyllr)\
**Replies:** 2\
**Last updated:** [June 29, 2018, 5:48am UTC](https://discuss.elastic.co/t/how-to-scrub-data-in-elasticsearch/137888 "2018-06-29T05:48:02Z")

</div>

Is there any possible way to hide/encrypt users information? Data should not be deleted. It should be scrubbed and we should not be able to identify the actual user of these logs. Thanks!

---

## [Multiple network interfaces settings and X-PACK](https://discuss.elastic.co/t/multiple-network-interfaces-settings-and-x-pack/126585)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 2\
**Last updated:** [April 11, 2018, 1:09pm UTC](https://discuss.elastic.co/t/multiple-network-interfaces-settings-and-x-pack/126585 "2018-04-11T13:09:01Z")

</div>

Hello, I have a server with 2 network interfaces, one on a private network and the other on internet. On my private network, I have an elasticsearch cluster with X-PACK (ip-filtering). This cluster is not open on inter…

---

## [\-e doesn't work using logstash image from docker.elastic.co](https://discuss.elastic.co/t/e-doesnt-work-using-logstash-image-from-docker-elastic-co/87351)

<div class="topic-metadata">

**Author:** [@kinghuang](https://discuss.elastic.co/u/kinghuang)\
**Replies:** 2\
**Last updated:** [May 28, 2017, 2:37am UTC](https://discuss.elastic.co/t/e-doesnt-work-using-logstash-image-from-docker-elastic-co/87351 "2017-05-28T02:37:45Z")

</div>

I'm trying to switch from the logstash official image on Docker Hub to Elastic's registry, given the Docker Hub images won't be updated past June 20. But, the image provided by Elastic's registry doesn't seem to work pro…

---

## [OOM due to merge exception](https://discuss.elastic.co/t/oom-due-to-merge-exception/71484)

<div class="topic-metadata">

**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\
**Replies:** 2\
**Last updated:** [January 16, 2017, 5:19am UTC](https://discuss.elastic.co/t/oom-due-to-merge-exception/71484 "2017-01-16T05:19:12Z")

</div>

Hi all, we are using ES 1.3.7 cluster with 2 data only nodes , 2 master nodes, one data cum master node. last two days , we getting more OOM frequently due to merge exception. its is too confusing ,can anyone sugge…

---

## [Migration 1.4 vers 2.2 régression des performances](https://discuss.elastic.co/t/migration-1-4-vers-2-2-regression-des-performances/45907)

<div class="topic-metadata">

**Author:** [@Alex\_Alexandre](https://discuss.elastic.co/u/Alex_Alexandre)\
**Replies:** 2\
**Last updated:** [April 6, 2016, 8:35am UTC](https://discuss.elastic.co/t/migration-1-4-vers-2-2-regression-des-performances/45907 "2016-04-06T08:35:03Z")

</div>

Bonjour, Je ne sais pas trop si il y a des personnes qui ont constatés des problèmes de lenteurs en passant de la version 1.4 vers la 2.2. Mais ayant actuellement 2 clusters (le premier en ES 1.4 et l'autre en ES 2.2) de…

---

## [Error exists when elasticsearch 2.2.0 install bigdesk and elasticsearch-paramedic](https://discuss.elastic.co/t/error-exists-when-elasticsearch-2-2-0-install-bigdesk-and-elasticsearch-paramedic/43986)

<div class="topic-metadata">

**Author:** [@charley](https://discuss.elastic.co/u/charley)\
**Replies:** 2\
**Last updated:** [March 10, 2016, 8:09am UTC](https://discuss.elastic.co/t/error-exists-when-elasticsearch-2-2-0-install-bigdesk-and-elasticsearch-paramedic/43986 "2016-03-10T08:09:26Z")

</div>

hello all, I download and use elasticsearch 2.2.0. However, I find that with version 2.2.0, I failed to install bigdesk and elasticsearch-paramedic. I get the error: "NOTE: Unable to verify checksum for downloaded plu…

---

## [Basic math on numbers in elastic search](https://discuss.elastic.co/t/basic-math-on-numbers-in-elastic-search/40795)

<div class="topic-metadata">

**Author:** [@eric\_odell](https://discuss.elastic.co/u/eric_odell)\
**Replies:** 2\
**Last updated:** [February 10, 2016, 5:45pm UTC](https://discuss.elastic.co/t/basic-math-on-numbers-in-elastic-search/40795 "2016-02-10T17:45:48Z")

</div>

Would like to do simple math on aggregations of documents, eg collectd disk plugin has free and used integer values and would like to calculate: % disk free: free/(used+free) derivitive of disk usage to predict when…

---

## [Index not appearing in kibana via logstash](https://discuss.elastic.co/t/index-not-appearing-in-kibana-via-logstash/308178)

<div class="topic-metadata">

**Author:** [@bhatiac](https://discuss.elastic.co/u/bhatiac)\
**Replies:** 7\
**Last updated:** [July 5, 2022, 6:27am UTC](https://discuss.elastic.co/t/index-not-appearing-in-kibana-via-logstash/308178 "2022-07-05T06:27:31Z")

</div>

Hello, I am new to ELK, trying to read my application logs and wishing to show it on kibana dashboard for analysis purposes. Elasticsearch, kibana and logstash instances are up and running. While trying to see the newly…

---

## [Unable to Connect Logstash with Elastic](https://discuss.elastic.co/t/unable-to-connect-logstash-with-elastic/277723)

<div class="topic-metadata">

**Author:** [@iraed91](https://discuss.elastic.co/u/iraed91)\
**Replies:** 1\
**Last updated:** [July 6, 2021, 3:14am UTC](https://discuss.elastic.co/t/unable-to-connect-logstash-with-elastic/277723 "2021-07-06T03:14:41Z")

</div>

Hi All! I just enabled X-PACK on my elasticsearch and was able to do all required config for elastic and kibana. Now, I have logstash installed in another host and communicating to logstash over the internet on HTTPs pr…

---

## [ES Lookups](https://discuss.elastic.co/t/es-lookups/220276)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 7\
**Last updated:** [March 11, 2020, 11:14pm UTC](https://discuss.elastic.co/t/es-lookups/220276 "2020-03-11T23:14:29Z")

</div>

So, I'm back dealing with RRAS logs on Logstash/Elasticsearch, and seems I'm in a pickle. I'm using filter { elasticsearch, and debug shows it's working fine: \[2020-02-20T20:36:56,495\]\[DEBUG\]\[logstash.pipeline \]…

---

## [Is there a way to get the percentage (%) increase and rate of document growth?](https://discuss.elastic.co/t/is-there-a-way-to-get-the-percentage-increase-and-rate-of-document-growth/216877)

<div class="topic-metadata">

**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\
**Replies:** 1\
**Last updated:** [February 14, 2020, 7:56pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-the-percentage-increase-and-rate-of-document-growth/216877 "2020-02-14T19:56:11Z")

</div>

Hello, I have the following code to display the number of document over time in all my indexes: .es(q=\*, index=analytics-prod\*).mvavg(5).lines(width=1.5,stack=true,fill=4).label("analytics-prod").cusum(), .es(q=\*, inde…

---

## [Elasticsearch needed for 1 hour](https://discuss.elastic.co/t/elasticsearch-needed-for-1-hour/215807)

<div class="topic-metadata">

**Author:** [@royal\_man](https://discuss.elastic.co/u/royal_man)\
**Replies:** 7\
**Last updated:** [January 23, 2020, 3:43pm UTC](https://discuss.elastic.co/t/elasticsearch-needed-for-1-hour/215807 "2020-01-23T15:43:09Z")

</div>

I want to use elasticsearch only for 1 hour twice a day (I know specific time). The indexing can be done once per day anytime we want. Is there anyway I can design the system so that it can handle such request and not w…

---

## [Input OSINT feeds in kibana](https://discuss.elastic.co/t/input-osint-feeds-in-kibana/163209)

<div class="topic-metadata">

**Author:** [@bhuvan2099](https://discuss.elastic.co/u/bhuvan2099)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 1:52pm UTC](https://discuss.elastic.co/t/input-osint-feeds-in-kibana/163209 "2019-01-07T13:52:55Z")

</div>

Hi All, I'm new to the elk stack and still discovering it. I want the OSINT feeds to be available in my kibana instance. I believ the feeds can either used from a MISP instance or elsewhere. How do i achieve this? Than…

---

## [Logstash not receiving data](https://discuss.elastic.co/t/logstash-not-receiving-data/151865)

<div class="topic-metadata">

**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 2:48pm UTC](https://discuss.elastic.co/t/logstash-not-receiving-data/151865 "2018-10-10T14:48:08Z")

</div>

Can somebody please help me setup logstash? I am trying to send the event logs from windows server to logstash and then to elasticsearch. I installed Elasticsearch and Kibana successfully. Then i installed logstash and c…

---

## [Bulk index operation for multiple indices](https://discuss.elastic.co/t/bulk-index-operation-for-multiple-indices/120373)

<div class="topic-metadata">

**Author:** [@Phuong\_Hoang](https://discuss.elastic.co/u/Phuong_Hoang)\
**Replies:** 1\
**Last updated:** [February 19, 2018, 1:13pm UTC](https://discuss.elastic.co/t/bulk-index-operation-for-multiple-indices/120373 "2018-02-19T13:13:42Z")

</div>

I am using esrally version 0.9.1, elasticsearch version 6.1.3 After executing the custom track for multiple indices, I can index documents for only oci-vcn but not oci-user(testing with the existing es-cluster) How cou…

---

## [Is there a Elasticsearch 6.x changes listener?](https://discuss.elastic.co/t/is-there-a-elasticsearch-6-x-changes-listener/114414)

<div class="topic-metadata">

**Author:** [@wenkzz31](https://discuss.elastic.co/u/wenkzz31)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 9:16am UTC](https://discuss.elastic.co/t/is-there-a-elasticsearch-6-x-changes-listener/114414 "2018-01-12T09:16:16Z")

</div>

I've seen changes plugin that are available mostly on Elasticsearch versions 5.4 and below. Is there a way or plugin for Elasticsearch 6.x that I can track or save changes made in the index? I'm using the Java High Leve…

---

## [Possibility to automate export to csv from kibana](https://discuss.elastic.co/t/possibility-to-automate-export-to-csv-from-kibana/83210)

<div class="topic-metadata">

**Author:** [@s\_b92](https://discuss.elastic.co/u/s_b92)\
**Replies:** 1\
**Last updated:** [April 21, 2017, 1:29pm UTC](https://discuss.elastic.co/t/possibility-to-automate-export-to-csv-from-kibana/83210 "2017-04-21T13:29:08Z")

</div>

Is there a possibility to automate export from kibana to csv. In my example I download manually every day the data table sheet of my visualization as csv file. But I would be very happy when there is a possibility to aut…

---

## [Elasticsearch: OneToMany and ManyToOne not included in index](https://discuss.elastic.co/t/elasticsearch-onetomany-and-manytoone-not-included-in-index/8021)

<div class="topic-metadata">

**Author:** [@David\_3](https://discuss.elastic.co/u/David_3)\
**Replies:** 1\
**Last updated:** [June 11, 2012, 11:45am UTC](https://discuss.elastic.co/t/elasticsearch-onetomany-and-manytoone-not-included-in-index/8021 "2012-06-11T11:45:27Z")

</div>

I have three play models which I want to index using elastic search. The first model - model1 - includes a List of type model2 with the following JPA mapping: @OneToMany(cascade = {CascadeType.ALL}) The second mode…

---

## [Reindex corrupted index into a new copy](https://discuss.elastic.co/t/reindex-corrupted-index-into-a-new-copy/330765)

<div class="topic-metadata">

**Author:** [@rivermigue](https://discuss.elastic.co/u/rivermigue)\
**Replies:** 3\
**Last updated:** [May 1, 2023, 4:47pm UTC](https://discuss.elastic.co/t/reindex-corrupted-index-into-a-new-copy/330765 "2023-05-01T16:47:29Z")

</div>

Hello, Is it possible to reindex a corrupted index into a new copy accepting some data loss? I am trying to reindex a corrupted index with the following call: POST \_reindex { "source": { "index": "index001" }, "…

---

## [Index RED with Error This version of Lucene only supports indexes created with release 6.0 and later](https://discuss.elastic.co/t/index-red-with-error-this-version-of-lucene-only-supports-indexes-created-with-release-6-0-and-later/317975)

<div class="topic-metadata">

**Author:** [@vishalbhandari](https://discuss.elastic.co/u/vishalbhandari)\
**Replies:** 3\
**Last updated:** [November 3, 2022, 5:31am UTC](https://discuss.elastic.co/t/index-red-with-error-this-version-of-lucene-only-supports-indexes-created-with-release-6-0-and-later/317975 "2022-11-03T05:31:21Z")

</div>

Hi I have Elastic search version 7.16.3, in this one index is showing RED and when i tried recover it using CheckIndex command "java -cp lucene-core-8.10.1.jar -ea:org.apache.lucene… org.apache.lucene.index.CheckIndex C…

---

## [Alert: Large shard size](https://discuss.elastic.co/t/alert-large-shard-size/316184)

<div class="topic-metadata">

**Author:** [@Michele\_De\_Benedet](https://discuss.elastic.co/u/Michele_De_Benedet)\
**Replies:** 3\
**Last updated:** [October 11, 2022, 6:18am UTC](https://discuss.elastic.co/t/alert-large-shard-size/316184 "2022-10-11T06:18:39Z")

</div>

Hi, I am using Logstash to feed an index. Current index size is 60GB and I'm expecting it to grow to at most 100GB, so I set it to use 6 shards. Elasticsearch is ran on a single node. The status of the index in Kibana …

---

## [File beat log messages causing disk space to be full](https://discuss.elastic.co/t/file-beat-log-messages-causing-disk-space-to-be-full/310991)

<div class="topic-metadata">

**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\
**Replies:** 3\
**Last updated:** [August 4, 2022, 1:02pm UTC](https://discuss.elastic.co/t/file-beat-log-messages-causing-disk-space-to-be-full/310991 "2022-08-04T13:02:57Z")

</div>

Hello all, Hope someone had this issue before. Look like my /var/log/messages is getting really high since we have configured filebeat. The disk space is getting lower and almost 95% of this. How can I make sure that…

---

## [How to return the modified document with bulk update](https://discuss.elastic.co/t/how-to-return-the-modified-document-with-bulk-update/240758)

<div class="topic-metadata">

**Author:** [@Attila\_Nagy](https://discuss.elastic.co/u/Attila_Nagy)\
**Replies:** 0\
**Last updated:** [July 10, 2020, 8:09pm UTC](https://discuss.elastic.co/t/how-to-return-the-modified-document-with-bulk-update/240758 "2020-07-10T20:09:03Z")

</div>

Previously (not sure about the versions, but I can't see errors with 6.8) I could use the bulk API to update a doc and to get back the modified document with (snippet from actual code using the Python Elastic client): b…

---

## [Parallel execution for jdbc\_page\_size](https://discuss.elastic.co/t/parallel-execution-for-jdbc-page-size/197260)

<div class="topic-metadata">

**Author:** [@mrjayarajj](https://discuss.elastic.co/u/mrjayarajj)\
**Replies:** 3\
**Last updated:** [September 2, 2019, 8:30am UTC](https://discuss.elastic.co/t/parallel-execution-for-jdbc-page-size/197260 "2019-09-02T08:30:48Z")

</div>

is it possible to run the jdbc\_page\_size execution in parallel ? say if the count is 6K and jdbc\_page\_size is 1K, can we configure log stash to execute 6 parallel pagination ? also if it get 100K , can we have max para…

---

## [SQL Query Tracking](https://discuss.elastic.co/t/sql-query-tracking/179288)

<div class="topic-metadata">

**Author:** [@suikast42](https://discuss.elastic.co/u/suikast42)\
**Replies:** 3\
**Last updated:** [May 16, 2019, 8:05am UTC](https://discuss.elastic.co/t/sql-query-tracking/179288 "2019-05-16T08:05:13Z")

</div>

I am using the apm agent with a wildfly application server. The apm agent is only tracking the perpared statements of hibernate. But this one is not so useful for analysing the queries on the database for db performanc…

---

## [Logstash geoip filter no city name](https://discuss.elastic.co/t/logstash-geoip-filter-no-city-name/165182)

<div class="topic-metadata">

**Author:** [@Joel-Costamagna](https://discuss.elastic.co/u/Joel-Costamagna)\
**Replies:** 3\
**Last updated:** [January 22, 2019, 1:10pm UTC](https://discuss.elastic.co/t/logstash-geoip-filter-no-city-name/165182 "2019-01-22T13:10:32Z")

</div>

Hello, I try to use geoip for my source adresse, but sometimes it shows the correct city name, sometimes it shows a wrong location and there is no geoip.city\_name field. However if i look up the ip i the maxmind demo (h…

---

## [Connecting Filebeat to Azure Redis](https://discuss.elastic.co/t/connecting-filebeat-to-azure-redis/110909)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 3\
**Last updated:** [December 11, 2017, 8:01pm UTC](https://discuss.elastic.co/t/connecting-filebeat-to-azure-redis/110909 "2017-12-11T20:01:23Z")

</div>

I'm trying to use Filebeat to connect to Azure Redis. Filebeat version is 6.0, and azure redis (platform service) is version 3.2.7 as I see in azure. But, I'm not able to successfully ship any data to redis cache. Whe…

---

## [Confused about the "properties" and "fields" in my index template](https://discuss.elastic.co/t/confused-about-the-properties-and-fields-in-my-index-template/87502)

<div class="topic-metadata">

**Author:** [@red888](https://discuss.elastic.co/u/red888)\
**Replies:** 3\
**Last updated:** [May 30, 2017, 11:29pm UTC](https://discuss.elastic.co/t/confused-about-the-properties-and-fields-in-my-index-template/87502 "2017-05-30T23:29:48Z")

</div>

I used the default logstash template as a starting point and its working but Im confused about 2 things: { "template": "logstash-myindex\*", "settings": { "number\_of\_shards": 4, "number\_of\_replicas": 1 }, …

---

## [Role settings for logging user (Beats)](https://discuss.elastic.co/t/role-settings-for-logging-user-beats/71083)

<div class="topic-metadata">

**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\
**Replies:** 3\
**Last updated:** [January 11, 2017, 9:46am UTC](https://discuss.elastic.co/t/role-settings-for-logging-user-beats/71083 "2017-01-11T09:46:37Z")

</div>

I'm trying to configure our new cloud cluster (1e7502) and I would like to create a user that only has access to create indices and log data to them. Basically, for my FileBeat/MetricBeat/anyBeat agents. I created a new…

---

## ["Copy link" disappeared in 2.0?](https://discuss.elastic.co/t/copy-link-disappeared-in-2-0/33526)

<div class="topic-metadata">

**Author:** [@scaarup](https://discuss.elastic.co/u/scaarup)\
**Replies:** 3\
**Last updated:** [November 5, 2015, 3:09pm UTC](https://discuss.elastic.co/t/copy-link-disappeared-in-2-0/33526 "2015-11-05T15:09:27Z")

</div>

When I click on "Share Visualization" I normally have a "copy link to clipboard" button. This has disappeared in 2.0. Since the url is insanely long and splitted by a newline, this button was very handy. Where has i gone…

---

## [Data storage - Shard and replica size](https://discuss.elastic.co/t/data-storage-shard-and-replica-size/282816)

<div class="topic-metadata">

**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 1:55pm UTC](https://discuss.elastic.co/t/data-storage-shard-and-replica-size/282816 "2021-08-30T13:55:22Z")

</div>

I have a two node cluster with 600gb space between them on the data path. I'm setting a data stream where each index has 2 shards and one replica. Does the replica take same space as the main shards? Should I setup my da…

---

## [Multiple service name for apm for java webapps for single tomcat server](https://discuss.elastic.co/t/multiple-service-name-for-apm-for-java-webapps-for-single-tomcat-server/281792)

<div class="topic-metadata">

**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\
**Replies:** 4\
**Last updated:** [August 18, 2021, 12:40pm UTC](https://discuss.elastic.co/t/multiple-service-name-for-apm-for-java-webapps-for-single-tomcat-server/281792 "2021-08-18T12:40:23Z")

</div>

Hi, I am running multiple war files in single tomcat server. Had a doubt if we set the following property at tomcat level how will we differentiate at application level. set CATALINA\_OPTS=%CATALINA\_OPTS% -Delastic.apm…

---

## [Prospector ticker stopped](https://discuss.elastic.co/t/prospector-ticker-stopped/176309)

<div class="topic-metadata">

**Author:** [@Kalyan\_MB](https://discuss.elastic.co/u/Kalyan_MB)\
**Replies:** 4\
**Last updated:** [April 15, 2019, 1:58pm UTC](https://discuss.elastic.co/t/prospector-ticker-stopped/176309 "2019-04-15T13:58:47Z")

</div>

Hi, facing this problem.. 2019-04-03T20:42:54.626+0530 INFO log/harvester.go:216 Harvester started for file: /home/vankata/190\_APS\_QUALIFICATION/kalyan\_elk\_logs/free\_data\_11\_09\_02\_30.txt 2019-04-03T20:42:54.626+0530 I…

---

## [ES shuts down automatically](https://discuss.elastic.co/t/es-shuts-down-automatically/159716)

<div class="topic-metadata">

**Author:** [@Neeraj\_Pandey](https://discuss.elastic.co/u/Neeraj_Pandey)\
**Replies:** 4\
**Last updated:** [December 6, 2018, 2:39pm UTC](https://discuss.elastic.co/t/es-shuts-down-automatically/159716 "2018-12-06T14:39:58Z")

</div>

I have installed elasticsearch 6.5.2 and I when I start this it gets shut down automatically. Here is the log https://gist.github.com/np97190/9904ac644ff43787ede677a747d9824d I could not find the exact reason why is it…

---

## [Doc\_as\_upsert with some mistake](https://discuss.elastic.co/t/doc-as-upsert-with-some-mistake/154906)

<div class="topic-metadata">

**Author:** [@bulu](https://discuss.elastic.co/u/bulu)\
**Replies:** 4\
**Last updated:** [November 4, 2018, 1:17pm UTC](https://discuss.elastic.co/t/doc-as-upsert-with-some-mistake/154906 "2018-11-04T13:17:42Z")

</div>

elasticsearch { action =\> "update" # doc\_as\_upsert =\> "true" hosts =\> "192.168.88.63" index =\> "apps\_user\_list" retry\_on\_conflict =\> 1 document\_id =\> "uid%{user\_new\_id}" ups…

---

## [Deleting source logs after shipping](https://discuss.elastic.co/t/deleting-source-logs-after-shipping/91496)

<div class="topic-metadata">

**Author:** [@cdnnhicks](https://discuss.elastic.co/u/cdnnhicks)\
**Replies:** 4\
**Last updated:** [July 5, 2017, 5:46pm UTC](https://discuss.elastic.co/t/deleting-source-logs-after-shipping/91496 "2017-07-05T17:46:21Z")

</div>

Hi, First post here. I've just finished setting up my ELK stack and I've got a number of Windows servers forwarding their System, Application and Security logs. I'm looking to see if there's a way to delete the logs from…

---

## [Failed to indices:data/write/bulk\[s\] on replica because of Netty4TcpChannel / CompositeBytesReference more than 2GB](https://discuss.elastic.co/t/failed-to-indices-data-write-bulk-s-on-replica-because-of-netty4tcpchannel-compositebytesreference-more-than-2gb/349797)

<div class="topic-metadata">

**Author:** [@Martin\_Berlin](https://discuss.elastic.co/u/Martin_Berlin)\
**Replies:** 5\
**Last updated:** [December 22, 2023, 3:11pm UTC](https://discuss.elastic.co/t/failed-to-indices-data-write-bulk-s-on-replica-because-of-netty4tcpchannel-compositebytesreference-more-than-2gb/349797 "2023-12-22T15:11:59Z")

</div>

While Indexing to our Cluster sometimes this error occures turning the cluster in red & yellow state: One node is trying to "perform indices:data/write/bulk\[s\] on replica" on another node but fails because of "exception…

---

## [Track Queries with High Heap Usage](https://discuss.elastic.co/t/track-queries-with-high-heap-usage/302267)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 5\
**Last updated:** [April 14, 2022, 3:24am UTC](https://discuss.elastic.co/t/track-queries-with-high-heap-usage/302267 "2022-04-14T03:24:29Z")

</div>

Hi All, I was wondering the best way to track queries based on their Heap usage. Context: I've recently had to increase heap allocation (currently 20GB RAM - 18GB Heap, up from 10GB RAM - 8GB Heap) on coordinating node…

---

## [Read csv file automatically without using 'logstash -f'](https://discuss.elastic.co/t/read-csv-file-automatically-without-using-logstash-f/214298)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 5\
**Last updated:** [January 9, 2020, 7:09am UTC](https://discuss.elastic.co/t/read-csv-file-automatically-without-using-logstash-f/214298 "2020-01-09T07:09:19Z")

</div>

hello, i have a csv file that i view on kibana (i have already created an index), the problem is that every time i have to type the command 'logstash -f myfile.csv', I want to automate this task, that is to say that the…

---

## [Certificate added via GUI only distributed to 2 of 3 nodes](https://discuss.elastic.co/t/certificate-added-via-gui-only-distributed-to-2-of-3-nodes/195916)

<div class="topic-metadata">

**Author:** [@logger](https://discuss.elastic.co/u/logger)\
**Replies:** 5\
**Last updated:** [August 20, 2019, 2:36pm UTC](https://discuss.elastic.co/t/certificate-added-via-gui-only-distributed-to-2-of-3-nodes/195916 "2019-08-20T14:36:58Z")

</div>

Hi there, we have created a 3 node ECE Cluster. Almost everything is working fine. Except the certificates. We have created the pem as described in the documentation and uploaded it via the GUI in Platform -\> Settings …

[Previous page](https://discuss.elastic.co/top.md?page=1533&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1535&per_page=50&period=all)
