# Top

**URL:** https://discuss.elastic.co/top.md?page=1541&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1542

---

## [Mutiple xml file with same fields (How to handle?) any suggestion](https://discuss.elastic.co/t/mutiple-xml-file-with-same-fields-how-to-handle-any-suggestion/24061)

<div class="topic-metadata">

**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\
**Replies:** 3\
**Last updated:** [June 23, 2015, 10:55am UTC](https://discuss.elastic.co/t/mutiple-xml-file-with-same-fields-how-to-handle-any-suggestion/24061 "2015-06-23T10:55:01Z")

</div>

xml { xpath =\> \[ "/response/data/median/firstView/visualComplete/text()","FV\_visualComplete", "/response/data/median/firstView/lastVisualChange/text()","FV\_lastVisualChange", "/response/data/median/firstView/loadTim…

---

## [Bulk insert error?](https://discuss.elastic.co/t/bulk-insert-error/4078)

<div class="topic-metadata">

**Author:** [@Matt\_Paul\_2](https://discuss.elastic.co/u/Matt_Paul_2)\
**Replies:** 3\
**Last updated:** [March 11, 2011, 3:34pm UTC](https://discuss.elastic.co/t/bulk-insert-error/4078 "2011-03-11T15:34:03Z")

</div>

All, I'm getting a strange error (this is from the elasticsearch log, I just get the out of bounds error back via the REST interface) when doing a number of large bulk inserts, any idea on what might possibly be cau…

---

## [How to get and filter transactions based on response header Content-Length](https://discuss.elastic.co/t/how-to-get-and-filter-transactions-based-on-response-header-content-length/353894)

<div class="topic-metadata">

**Author:** [@bukajsytlos](https://discuss.elastic.co/u/bukajsytlos)\
**Replies:** 6\
**Last updated:** [March 5, 2024, 8:05am UTC](https://discuss.elastic.co/t/how-to-get-and-filter-transactions-based-on-response-header-content-length/353894 "2024-03-05T08:05:41Z")

</div>

Essentially the topic. We would like to search for responses based on size of the responses. From what I understand, this header is not logged by default. Even if they would we would have to add them to index like Conf…

---

## [Import CSV date format time difference](https://discuss.elastic.co/t/import-csv-date-format-time-difference/316907)

<div class="topic-metadata">

**Author:** [@Julian\_Tang](https://discuss.elastic.co/u/Julian_Tang)\
**Replies:** 6\
**Last updated:** [October 18, 2022, 9:50pm UTC](https://discuss.elastic.co/t/import-csv-date-format-time-difference/316907 "2022-10-18T21:50:00Z")

</div>

Hi I try to import a CSV file in logstash. but I have problem, the csv file first is date and time, I use separator to "timestamp", but it + 8 hours (my time zone is +8) so I how to set time don't +8 ? input { file…

---

## [Any setting in CSV filter to disable auto datatype conversion and keep everything in string?](https://discuss.elastic.co/t/any-setting-in-csv-filter-to-disable-auto-datatype-conversion-and-keep-everything-in-string/299163)

<div class="topic-metadata">

**Author:** [@pinehk](https://discuss.elastic.co/u/pinehk)\
**Replies:** 6\
**Last updated:** [March 9, 2022, 6:59am UTC](https://discuss.elastic.co/t/any-setting-in-csv-filter-to-disable-auto-datatype-conversion-and-keep-everything-in-string/299163 "2022-03-09T06:59:42Z")

</div>

In both version 7.x and 8, with a very simple csv filter configuration below, for no reason some fields are mapped as "date". In the documentation, there is a switch "convert" that we can customize datatype conversion fr…

---

## [Data Correction](https://discuss.elastic.co/t/data-correction/260256)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 6\
**Last updated:** [January 13, 2021, 4:55pm UTC](https://discuss.elastic.co/t/data-correction/260256 "2021-01-13T16:55:26Z")

</div>

I have an index that is comprised of two separate data dumps. Upon further analysis, it was discovered that one of those seems to have had a 1hr shift. This has been partially rectified by using offsets with the visual…

---

## [Roll Over index in Elastic search](https://discuss.elastic.co/t/roll-over-index-in-elastic-search/163532)

<div class="topic-metadata">

**Author:** [@dilipgupta](https://discuss.elastic.co/u/dilipgupta)\
**Replies:** 6\
**Last updated:** [January 11, 2019, 12:13pm UTC](https://discuss.elastic.co/t/roll-over-index-in-elastic-search/163532 "2019-01-11T12:13:05Z")

</div>

Hi Team, We have requirement to load data from Hadoop to elastic search index through Spark Job. The condition for index to be rolled over is number of document. Below are the sample example i am doing for achievein…

---

## [Problem when migrate to 1.0](https://discuss.elastic.co/t/problem-when-migrate-to-1-0/15798)

<div class="topic-metadata">

**Author:** [@Aamir\_Khan](https://discuss.elastic.co/u/Aamir_Khan)\
**Replies:** 6\
**Last updated:** [February 17, 2014, 11:07am UTC](https://discuss.elastic.co/t/problem-when-migrate-to-1-0/15798 "2014-02-17T11:07:06Z")

</div>

Hi, I yesterday moved my our cluster which have single node from 09.11 to 1.0 and I am getting following message from elasticsearch log \[2014-02-14 11:14:40,528\]\[WARN \]\[transport.netty \] \[mipLoggingCent…

---

## [Issue Connecting Python to Elasticsearch in Docker Environment](https://discuss.elastic.co/t/issue-connecting-python-to-elasticsearch-in-docker-environment/361507)

<div class="topic-metadata">

**Author:** [@Julia\_Campolim](https://discuss.elastic.co/u/Julia_Campolim)\
**Replies:** 2\
**Last updated:** [June 17, 2024, 11:44pm UTC](https://discuss.elastic.co/t/issue-connecting-python-to-elasticsearch-in-docker-environment/361507 "2024-06-17T23:44:58Z")

</div>

Hi, I need help. I'm working on a college project where I need to use Elasticsearch and Kibana, and access them through Docker. Here is my problem: I created the Docker setup (using docker-compose) following the steps …

---

## [Elastic Agent : AWS CloudWatch Fleet Integration Fail with RequestCanceledError](https://discuss.elastic.co/t/elastic-agent-aws-cloudwatch-fleet-integration-fail-with-requestcancelederror/310380)

<div class="topic-metadata">

**Author:** [@davide.lilliu](https://discuss.elastic.co/u/davide.lilliu)\
**Replies:** 2\
**Last updated:** [July 22, 2022, 1:30pm UTC](https://discuss.elastic.co/t/elastic-agent-aws-cloudwatch-fleet-integration-fail-with-requestcancelederror/310380 "2022-07-22T13:30:19Z")

</div>

Hi, i'm trying to set up an AWS integration to bring Lambda log group. I'm already using the AWS integration to have some metrics, so a don't think is a credential problem. I followed this guide AWS | Elastic Documenta…

---

## [Cannot run bin/elasticsearch](https://discuss.elastic.co/t/cannot-run-bin-elasticsearch/302821)

<div class="topic-metadata">

**Author:** [@FARIDUN\_ISMAILOV](https://discuss.elastic.co/u/FARIDUN_ISMAILOV)\
**Replies:** 2\
**Last updated:** [April 21, 2022, 9:32am UTC](https://discuss.elastic.co/t/cannot-run-bin-elasticsearch/302821 "2022-04-21T09:32:47Z")

</div>

bin/elasticsearch Exception in thread "main" java.lang.NullPointerException: Cannot invoke "org.apache.logging.log4j.core.config.AbstractConfiguration.getLoggerContext()" because the return value of "java.util.List.get(…

---

## [Warning and Error Messages - Kibana Dashboard](https://discuss.elastic.co/t/warning-and-error-messages-kibana-dashboard/301397)

<div class="topic-metadata">

**Author:** [@TS-021](https://discuss.elastic.co/u/TS-021)\
**Replies:** 2\
**Last updated:** [April 19, 2022, 3:40pm UTC](https://discuss.elastic.co/t/warning-and-error-messages-kibana-dashboard/301397 "2022-04-19T15:40:55Z")

</div>

Hi, I am running T-Pot via AWS and included with T-Pot is Kibana. Every time I launch the Kibana dashboard I get the following messages - Message 1: Configuration missing server.publicBaseUrl is missing and should b…

---

## [Adding iframe (grafana) into Kibana](https://discuss.elastic.co/t/adding-iframe-grafana-into-kibana/249160)

<div class="topic-metadata">

**Author:** [@asharm60](https://discuss.elastic.co/u/asharm60)\
**Replies:** 2\
**Last updated:** [September 24, 2020, 2:57am UTC](https://discuss.elastic.co/t/adding-iframe-grafana-into-kibana/249160 "2020-09-24T02:57:35Z")

</div>

How to do embedding (grafana view) into kibana ? Is there any way to do this ?

---

## [Filter Ratio issues](https://discuss.elastic.co/t/filter-ratio-issues/235304)

<div class="topic-metadata">

**Author:** [@spaolik](https://discuss.elastic.co/u/spaolik)\
**Replies:** 2\
**Last updated:** [June 4, 2020, 1:29pm UTC](https://discuss.elastic.co/t/filter-ratio-issues/235304 "2020-06-04T13:29:44Z")

</div>

Hello, I'm using Kibana 7.5.2 and I'm facing some issues using the Filter Ratio. WHat I'm trying to achieve is to have 2 bars in a time series, showing Total number of Partners vs Total number of "interested" partners …

---

## [Kibana - TSBV - Auto scale Y-Axis](https://discuss.elastic.co/t/kibana-tsbv-auto-scale-y-axis/208514)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 2\
**Last updated:** [November 19, 2019, 3:29pm UTC](https://discuss.elastic.co/t/kibana-tsbv-auto-scale-y-axis/208514 "2019-11-19T15:29:34Z")

</div>

Hi there, Thanks in advance for your time I've been told Timelion is being phased-out by TSBV so I'm starting to use it in order to reproduce what I was used to do with Timelion. I'm already quite surprised as it seem…

---

## [Disk I/O for master-only node?](https://discuss.elastic.co/t/disk-i-o-for-master-only-node/149365)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [September 21, 2018, 7:41am UTC](https://discuss.elastic.co/t/disk-i-o-for-master-only-node/149365 "2018-09-21T07:41:41Z")

</div>

Hello. I would like to get advice for hardware requirements for dedicated-master node with es v 6.3.2. This is my first time setting up dediciated master-node so I appreciate if I could get advice. I have read below …

---

## [Date Filter Configuration Error Help Required](https://discuss.elastic.co/t/date-filter-configuration-error-help-required/147951)

<div class="topic-metadata">

**Author:** [@JKCode](https://discuss.elastic.co/u/JKCode)\
**Replies:** 2\
**Last updated:** [September 11, 2018, 3:52am UTC](https://discuss.elastic.co/t/date-filter-configuration-error-help-required/147951 "2018-09-11T03:52:22Z")

</div>

Hi All, Version ELK Stack 6.4 / Windows 10 / zip downloads Trying to ingest data from csv file into elasticsearch 6.4. Want to parse the csv data columns containing dates in specific format with Logstash date filter p…

---

## [How to Upgrade ElasticSearch v2.1.0 to v5.2.2?](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-v2-1-0-to-v5-2-2/78648)

<div class="topic-metadata">

**Author:** [@kishore419](https://discuss.elastic.co/u/kishore419)\
**Replies:** 2\
**Last updated:** [April 12, 2017, 3:55am UTC](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-v2-1-0-to-v5-2-2/78648 "2017-04-12T03:55:27Z")

</div>

we are using elasticserach v2.1.0 on production server(centos 7, 64bit). we need to upgrade to v5.2.2. i don't see any upgrade scripts from elasticsearch website or other sources. i have followed ElasticSearch Upgrade do…

---

## [Issues in startup kibana](https://discuss.elastic.co/t/issues-in-startup-kibana/77408)

<div class="topic-metadata">

**Author:** [@ggp](https://discuss.elastic.co/u/ggp)\
**Replies:** 2\
**Last updated:** [March 5, 2017, 3:28pm UTC](https://discuss.elastic.co/t/issues-in-startup-kibana/77408 "2017-03-05T15:28:01Z")

</div>

we started configuring ES in production environment and i see below exception in the ES logs when i start kibana, I followed similar installation procedure like i did in lower environments not sure what the issue is \[2…

---

## [Can visualisation plugins adjust query parameters?](https://discuss.elastic.co/t/can-visualisation-plugins-adjust-query-parameters/64340)

<div class="topic-metadata">

**Author:** [@cheloftus](https://discuss.elastic.co/u/cheloftus)\
**Replies:** 2\
**Last updated:** [November 3, 2016, 8:00pm UTC](https://discuss.elastic.co/t/can-visualisation-plugins-adjust-query-parameters/64340 "2016-11-03T20:00:05Z")

</div>

I am writing a visualisation plugin in which I would like to have a button to fetch more buckets for the aggregation. I would also like to add a button to flip between Ascending/Descending order. Is it possible for vis…

---

## [Search results order varies each time in Elasticsearch](https://discuss.elastic.co/t/search-results-order-varies-each-time-in-elasticsearch/63755)

<div class="topic-metadata">

**Author:** [@banu](https://discuss.elastic.co/u/banu)\
**Replies:** 2\
**Last updated:** [October 26, 2016, 9:52am UTC](https://discuss.elastic.co/t/search-results-order-varies-each-time-in-elasticsearch/63755 "2016-10-26T09:52:54Z")

</div>

We have 200k records. When running search query for the first time with size: 500 I am getting results in doc-1, doc-2, doc-3. But when I run the same search query for the second time I am getting the order changed to do…

---

## [How to close logstash using batch file command](https://discuss.elastic.co/t/how-to-close-logstash-using-batch-file-command/60053)

<div class="topic-metadata">

**Author:** [@Lucifer\_hbp](https://discuss.elastic.co/u/Lucifer_hbp)\
**Replies:** 2\
**Last updated:** [September 8, 2016, 12:25pm UTC](https://discuss.elastic.co/t/how-to-close-logstash-using-batch-file-command/60053 "2016-09-08T12:25:39Z")

</div>

Hi again :slight\_smile: i would be glad if someone could provide helpful suggestion! Logstash version : 2.3.2 I have written a batch file that start the logstash and starts reading config file. Following is the batch…

---

## [How are CVE's handle by the community and disseminated?](https://discuss.elastic.co/t/how-are-cves-handle-by-the-community-and-disseminated/52932)

<div class="topic-metadata">

**Author:** [@Peter\_Portante](https://discuss.elastic.co/u/Peter_Portante)\
**Replies:** 2\
**Last updated:** [June 16, 2016, 2:45am UTC](https://discuss.elastic.co/t/how-are-cves-handle-by-the-community-and-disseminated/52932 "2016-06-16T02:45:14Z")

</div>

Hi Folks, I recently saw a post from Debian Security Announce \[1\] talking about "The project no longer releases information on fixed security issues which allow back-porting them to released versions of Debian and acti…

---

## [After a cluster restart, both primary and replica shards become unallocated after a long time](https://discuss.elastic.co/t/after-a-cluster-restart-both-primary-and-replica-shards-become-unallocated-after-a-long-time/42717)

<div class="topic-metadata">

**Author:** [@whzcl](https://discuss.elastic.co/u/whzcl)\
**Replies:** 2\
**Last updated:** [February 26, 2016, 5:33am UTC](https://discuss.elastic.co/t/after-a-cluster-restart-both-primary-and-replica-shards-become-unallocated-after-a-long-time/42717 "2016-02-26T05:33:21Z")

</div>

Version: 1.5.2 Data size: 60GB Shard number: 30 primary, 30 replica These values are default. gateway.recover\_after\_nodes gateway.recover\_after\_time gateway.expected\_nodes Description: We have 12 nodes: 3 master n…

---

## [Upgrading from 8.x to 9.x with \_source disabled](https://discuss.elastic.co/t/upgrading-from-8-x-to-9-x-with-source-disabled/375388)

<div class="topic-metadata">

**Author:** [@kpachar](https://discuss.elastic.co/u/kpachar)\
**Replies:** 5\
**Last updated:** [March 5, 2025, 3:23am UTC](https://discuss.elastic.co/t/upgrading-from-8-x-to-9-x-with-source-disabled/375388 "2025-03-05T03:23:28Z")

</div>

Hello, I am exploring disabling \_source for some of my indices. The documentation has warnings about doing that. One specific line in the warnings is not very clear to me: "The ability to reindex from one Elasticse…

---

## [Filebeat OSS 7.7.0 not able to connect AWS Elasticsearch Service 7.7.0](https://discuss.elastic.co/t/filebeat-oss-7-7-0-not-able-to-connect-aws-elasticsearch-service-7-7-0/252275)

<div class="topic-metadata">

**Author:** [@Jigar\_Patel1](https://discuss.elastic.co/u/Jigar_Patel1)\
**Replies:** 5\
**Last updated:** [November 18, 2020, 6:30am UTC](https://discuss.elastic.co/t/filebeat-oss-7-7-0-not-able-to-connect-aws-elasticsearch-service-7-7-0/252275 "2020-11-18T06:30:54Z")

</div>

I am using EC2 VM to send logs to AWS Elasticsearch Service 7.7.0. EC2 instance and Elastic Service can communicate via same VPC. But, filebeat OSS 7.7.0 not able to connect to Elasticsearch service 7.7.0. Any suggestin…

---

## [Fields repeating same values](https://discuss.elastic.co/t/fields-repeating-same-values/155558)

<div class="topic-metadata">

**Author:** [@vvn84](https://discuss.elastic.co/u/vvn84)\
**Replies:** 5\
**Last updated:** [November 6, 2018, 4:31pm UTC](https://discuss.elastic.co/t/fields-repeating-same-values/155558 "2018-11-06T16:31:31Z")

</div>

I have three indices which are sent across from Logstash to Elasticsearch. The logs are of the same format. The difference being they come from different servers and are received at different ports on logstash. The grok …

---

## [Elasticsearch Search Threads not making sense](https://discuss.elastic.co/t/elasticsearch-search-threads-not-making-sense/117699)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 5\
**Last updated:** [February 2, 2018, 8:56pm UTC](https://discuss.elastic.co/t/elasticsearch-search-threads-not-making-sense/117699 "2018-02-02T20:56:40Z")

</div>

So, I am seeing interesting metrics that don't really make much sense to me. Given I'm using the datadog integration that tells me these details, but they seem accurate with everything else so I have confidence in the nu…

---

## [What all are the possible problems if I don't give keyword mapping to my text type?](https://discuss.elastic.co/t/what-all-are-the-possible-problems-if-i-dont-give-keyword-mapping-to-my-text-type/109723)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 5\
**Last updated:** [November 30, 2017, 10:57am UTC](https://discuss.elastic.co/t/what-all-are-the-possible-problems-if-i-dont-give-keyword-mapping-to-my-text-type/109723 "2017-11-30T10:57:39Z")

</div>

Hi, I have a mapping like below; PUT \_template/my\_template { "index\_patterns": \["mylogs\*"\], "mappings": { "doc": { "properties": { . . . "long\_text\_field\_1": { "type": "text"…

---

## [Distributors vs raid0](https://discuss.elastic.co/t/distributors-vs-raid0/21789)

<div class="topic-metadata">

**Author:** [@Shaun\_Senecal](https://discuss.elastic.co/u/Shaun_Senecal)\
**Replies:** 5\
**Last updated:** [January 23, 2015, 10:27pm UTC](https://discuss.elastic.co/t/distributors-vs-raid0/21789 "2015-01-23T22:27:31Z")

</div>

What is the advantage of using ElasticSearch's distributors (JBOD) over using raid0? As far as I can tell, if I lose a drive in either case I lose the whole node until the data can be recovered. Is the distributor sm…

---

## [Threads hanging on BooleanScorer.score with 100% cpu](https://discuss.elastic.co/t/threads-hanging-on-booleanscorer-score-with-100-cpu/14023)

<div class="topic-metadata">

**Author:** [@Josh\_Canfield](https://discuss.elastic.co/u/Josh_Canfield)\
**Replies:** 8\
**Last updated:** [October 23, 2013, 11:28pm UTC](https://discuss.elastic.co/t/threads-hanging-on-booleanscorer-score-with-100-cpu/14023 "2013-10-23T23:28:34Z")

</div>

I'm slowly losing processors as elasticsearch threads hang on org.apache.lucene.search.BooleanScorer.score(BooleanScorer.java:278) It happens with "search\_type=dfs\_query\_then\_fetch" and without. \* \* I'm running v…

---

## [Index has exceeded \[xxx\] - maximum allowed to be analyzed for highlighting](https://discuss.elastic.co/t/index-has-exceeded-xxx-maximum-allowed-to-be-analyzed-for-highlighting/199303)

<div class="topic-metadata">

**Author:** [@oobi89](https://discuss.elastic.co/u/oobi89)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 5:59pm UTC](https://discuss.elastic.co/t/index-has-exceeded-xxx-maximum-allowed-to-be-analyzed-for-highlighting/199303 "2019-09-12T17:59:48Z")

</div>

Hello, I've came across strange problem when trying to get postgresql logs using Filebeats to elasticsearch and displaying it using kibana. I've previously asked about it on kibana forum but I've been told to ask here. …

---

## [Dec 17th, 2018: \[FR\]\[Elastic Stack\] Indexer facilement les slow logs d'Elasticsearch avec Filebeat](https://discuss.elastic.co/t/dec-17th-2018-fr-elastic-stack-indexer-facilement-les-slow-logs-delasticsearch-avec-filebeat/160395)

<div class="topic-metadata">

**Author:** [@lio](https://discuss.elastic.co/u/lio)\
**Replies:** 0\
**Last updated:** [December 17, 2018, 12:00am UTC](https://discuss.elastic.co/t/dec-17th-2018-fr-elastic-stack-indexer-facilement-les-slow-logs-delasticsearch-avec-filebeat/160395 "2018-12-17T00:00:04Z")

</div>

Une bonne façon d'optimiser l'utilisation d'un cluster Elasticsearch et de s'assurer que les requêtes de recherche sont le plus efficace possibles. En effet, des requêtes de recherche rapide utilisent les ressources du c…

---

## [Documentation: "Search concurrency and parallelism"](https://discuss.elastic.co/t/documentation-search-concurrency-and-parallelism/161430)

<div class="topic-metadata">

**Author:** [@AlexisWilke](https://discuss.elastic.co/u/AlexisWilke)\
**Replies:** 0\
**Last updated:** [December 19, 2018, 1:37am UTC](https://discuss.elastic.co/t/documentation-search-concurrency-and-parallelism/161430 "2018-12-19T01:37:06Z")

</div>

I read the documentation about the concurrency and parallelism in a few places, such as this one: Where the max\_concurrent\_shard\_requests is define like so: The request parameter max\_concurrent\_shard\_requests can be…

---

## [How to maintaining My Android Application Logs In Log stash](https://discuss.elastic.co/t/how-to-maintaining-my-android-application-logs-in-log-stash/142202)

<div class="topic-metadata">

**Author:** [@Ramprasath\_Selvam](https://discuss.elastic.co/u/Ramprasath_Selvam)\
**Replies:** 0\
**Last updated:** [July 30, 2018, 2:56pm UTC](https://discuss.elastic.co/t/how-to-maintaining-my-android-application-logs-in-log-stash/142202 "2018-07-30T14:56:25Z")

</div>

I'm Developing a one Android application, how to maintaining Logs in Logstash.

---

## [DBG Harvester for file is still running + Solution](https://discuss.elastic.co/t/dbg-harvester-for-file-is-still-running-solution/104223)

<div class="topic-metadata">

**Author:** [@jinojoseph](https://discuss.elastic.co/u/jinojoseph)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 10:29am UTC](https://discuss.elastic.co/t/dbg-harvester-for-file-is-still-running-solution/104223 "2017-10-17T10:29:30Z")

</div>

I had been getting the error like below in my filebeat log: 2017-10-17T04:35:19-05:00 DBG Check file for harvesting: /var/log/secure 2017-10-17T04:35:19-05:00 DBG Update existing file for harvesting: /var/log/secure,…

---

## [Nested Inner Hits sorting](https://discuss.elastic.co/t/nested-inner-hits-sorting/60365)

<div class="topic-metadata">

**Author:** [@souad](https://discuss.elastic.co/u/souad)\
**Replies:** 0\
**Last updated:** [September 13, 2016, 10:09am UTC](https://discuss.elastic.co/t/nested-inner-hits-sorting/60365 "2016-09-13T10:09:42Z")

</div>

According to documentation (https://www.elastic.co/guide/en/elasticsearch/reference/current/search-request-inner-hits.html#nested-inner-hits), inner hits returned can be sorted, and default sorting is score. I have a doc…

---

## [Error: Encountered non-2xx HTTP code 400](https://discuss.elastic.co/t/error-encountered-non-2xx-http-code-400/356378)

<div class="topic-metadata">

**Author:** [@syfwork](https://discuss.elastic.co/u/syfwork)\
**Replies:** 7\
**Last updated:** [April 2, 2024, 2:49am UTC](https://discuss.elastic.co/t/error-encountered-non-2xx-http-code-400/356378 "2024-04-02T02:49:27Z")

</div>

Hi, I'm using the HTTP output plugin to delete some documents by query. Here's my config file: input { jdbc { jdbc\_driver\_library =\> "/root/infr/logstash-8.12.2/connector/mysql-connector-j-8.3.0.jar" jdbc\_dr…

---

## [Upstream prematurely closed connection while connecting to Kibana](https://discuss.elastic.co/t/upstream-prematurely-closed-connection-while-connecting-to-kibana/329056)

<div class="topic-metadata">

**Author:** [@Ravi\_Prakash1](https://discuss.elastic.co/u/Ravi_Prakash1)\
**Replies:** 1\
**Last updated:** [April 2, 2023, 2:26pm UTC](https://discuss.elastic.co/t/upstream-prematurely-closed-connection-while-connecting-to-kibana/329056 "2023-04-02T14:26:03Z")

</div>

Hello , Need some help with issue which we are facing while connecting to Kibana via Nginx using proxy\_pass. We are using ECK operator on Openshift ( Elasticsearch (ECK) Operator 2.6.2 provided by Elastic ) . While d…

---

## [Elastic APM Java Agent JMX](https://discuss.elastic.co/t/elastic-apm-java-agent-jmx/308527)

<div class="topic-metadata">

**Author:** [@aravind0910](https://discuss.elastic.co/u/aravind0910)\
**Replies:** 1\
**Last updated:** [June 30, 2022, 7:18am UTC](https://discuss.elastic.co/t/elastic-apm-java-agent-jmx/308527 "2022-06-30T07:18:52Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Error](https://discuss.elastic.co/t/error/279225)

<div class="topic-metadata">

**Author:** [@TusharGarg](https://discuss.elastic.co/u/TusharGarg)\
**Replies:** 7\
**Last updated:** [July 26, 2021, 11:12pm UTC](https://discuss.elastic.co/t/error/279225 "2021-07-26T23:12:09Z")

</div>

C:\\Program Files\\Filebeat\> .\\filebeat.exe setup Start-Service filebeat Index setup finished. Loading dashboards (Kibana must be running and reachable) Exiting: error connecting to Kibana: fail to get the Kibana ver…

---

## [Get rid of message: ... waiting for elected master node... to setup local exporter... (does it have x-pack installed?)](https://discuss.elastic.co/t/get-rid-of-message-waiting-for-elected-master-node-to-setup-local-exporter-does-it-have-x-pack-installed/277999)

<div class="topic-metadata">

**Author:** [@Dyanne\_Ostlind](https://discuss.elastic.co/u/Dyanne_Ostlind)\
**Replies:** 1\
**Last updated:** [July 7, 2021, 12:28pm UTC](https://discuss.elastic.co/t/get-rid-of-message-waiting-for-elected-master-node-to-setup-local-exporter-does-it-have-x-pack-installed/277999 "2021-07-07T12:28:36Z")

</div>

How do I shut off this message? I'm using the fully open-source version of ES 7.5.2: \[2020-02-20T00:22:18,086\]\[INFO \]\[o.e.x.m.e.l.LocalExporter\] \[coordinator6\] waiting for elected master node \[{master1}{68sPQmYrRdW60YXS…

---

## [Mapper\_parsing\_exception, hashicorp vault audit, "error" in inner json](https://discuss.elastic.co/t/mapper-parsing-exception-hashicorp-vault-audit-error-in-inner-json/165119)

<div class="topic-metadata">

**Author:** [@mkohns](https://discuss.elastic.co/u/mkohns)\
**Replies:** 1\
**Last updated:** [January 22, 2019, 3:30pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-hashicorp-vault-audit-error-in-inner-json/165119 "2019-01-22T15:30:47Z")

</div>

Hi! Following Setup: -\> Docker 18.09 -\> Filebeat 6.4.1 running in container with docker sock mounted -\> Hashicorp Vault running in container with audit enabled -\> extract from filebeat.yml ... filebeat.autodiscover…

---

## [Can someone please suggest better way here?](https://discuss.elastic.co/t/can-someone-please-suggest-better-way-here/120093)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 7\
**Last updated:** [February 18, 2018, 9:22pm UTC](https://discuss.elastic.co/t/can-someone-please-suggest-better-way-here/120093 "2018-02-18T21:22:34Z")

</div>

Hi Guys, I have two locations and soon multiples will be added. Since elastic stack by default does not have multitenanacy I am planning to install multiple logstash instances at every location which eventually will gat…

---

## [Forgerock integration with Kibana for authentication and authorization](https://discuss.elastic.co/t/forgerock-integration-with-kibana-for-authentication-and-authorization/81944)

<div class="topic-metadata">

**Author:** [@Satya](https://discuss.elastic.co/u/Satya)\
**Replies:** 1\
**Last updated:** [April 11, 2017, 10:35am UTC](https://discuss.elastic.co/t/forgerock-integration-with-kibana-for-authentication-and-authorization/81944 "2017-04-11T10:35:12Z")

</div>

HI, I have a requirement to use Forgerock's openAM for authentication and authorization purpose. Can you please tell me can we integrate forgerock with kibana for authentication and authorization purpose. THanks Satya

---

## [Spark-shell sc.esRDD fails with error: unrecognized parameter: \[\_local\]](https://discuss.elastic.co/t/spark-shell-sc-esrdd-fails-with-error-unrecognized-parameter--local/68351)

<div class="topic-metadata">

**Author:** [@Apratim\_Sharma](https://discuss.elastic.co/u/Apratim_Sharma)\
**Replies:** 1\
**Last updated:** [December 7, 2016, 9:58pm UTC](https://discuss.elastic.co/t/spark-shell-sc-esrdd-fails-with-error-unrecognized-parameter--local/68351 "2016-12-07T21:58:14Z")

</div>

I am using elasticsearch-spark-13\_2.10-5.0.0-beta1.jar for spark 1.6 and elasticsearch version 5.0.2 I am trying the very basic code: val lpiRDD = sc.esRDD("sdp/lpi") lpiRDD.count And getting following error Caus…

---

## [Query time field extraction and pattern capture token filter](https://discuss.elastic.co/t/query-time-field-extraction-and-pattern-capture-token-filter/43790)

<div class="topic-metadata">

**Author:** [@michelecappelletti](https://discuss.elastic.co/u/michelecappelletti)\
**Replies:** 1\
**Last updated:** [March 8, 2016, 3:23pm UTC](https://discuss.elastic.co/t/query-time-field-extraction-and-pattern-capture-token-filter/43790 "2016-03-08T15:23:54Z")

</div>

Hi, I've found that elasticsearch doesn't support query time field extraction, like splunk for example..: sourcetype=\* POST| rex field=\_raw "\\"POST (?\<url\>.\*) HTTP\\/1\\.1\\" (?\<status\_code\>\[0-9\]+) (?\<body\_size\>\[0-9\]+) (?\<r…

---

## [Pulling data from HDFS to elasticsearch](https://discuss.elastic.co/t/pulling-data-from-hdfs-to-elasticsearch/43544)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 1\
**Last updated:** [March 8, 2016, 7:38am UTC](https://discuss.elastic.co/t/pulling-data-from-hdfs-to-elasticsearch/43544 "2016-03-08T07:38:31Z")

</div>

Hi everyone, How do i read data from HDFS..then send them to elasticsearch and display on kibana dashboard? I know there is a connector in ES-hadoop which works bidirectionally to to send data out/recieve....but my que…

---

## [Parent/Child Self Referencing documents](https://discuss.elastic.co/t/parent-child-self-referencing-documents/10929)

<div class="topic-metadata">

**Author:** [@Andrew\_Ochsner](https://discuss.elastic.co/u/Andrew_Ochsner)\
**Replies:** 1\
**Last updated:** [February 27, 2013, 8:13pm UTC](https://discuss.elastic.co/t/parent-child-self-referencing-documents/10929 "2013-02-27T20:13:46Z")

</div>

Hello: We are going to start indexing transaction/activity information and these can be nested within each other (like a stack frame). So activity A is the parent of activity B & C etc. Is there any support (or …

---

## [Elasticsearch getting failed with error 56](https://discuss.elastic.co/t/elasticsearch-getting-failed-with-error-56/7266)

<div class="topic-metadata">

**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\
**Replies:** 1\
**Last updated:** [April 11, 2012, 9:26am UTC](https://discuss.elastic.co/t/elasticsearch-getting-failed-with-error-56/7266 "2012-04-11T09:26:34Z")

</div>

Hi, we are using elasticsearch 0.18,it was working fine, but recently I am facing unknown error 56 again and again, on finding its details, this error is for "Failure with receiving network data." and…

[Previous page](https://discuss.elastic.co/top.md?page=1540&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1542&per_page=50&period=all)