# Top **URL:** https://discuss.elastic.co/top.md?page=1549&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1550 --- ## [Logstash can't send the data to elastic search](https://discuss.elastic.co/t/logstash-cant-send-the-data-to-elastic-search/104626)
**Author:** [@kenny123](https://discuss.elastic.co/u/kenny123)\ **Replies:** 3\ **Last updated:** [October 23, 2017, 8:02pm UTC](https://discuss.elastic.co/t/logstash-cant-send-the-data-to-elastic-search/104626 "2017-10-23T20:02:23Z")
Hi, Below is my logstash configuration: input { beats { port =\> 5044 } } filter { if \[type\] == "abc\_serverlog" { grok { match =\> { "message" =\> "(%{TIME:logtime}\\s+)?(%{WORD:loglevel}\\s+)?(\[%{DATA:class}\]\\s" } … --- ## [X-Pack License Expiring Tomorrow](https://discuss.elastic.co/t/x-pack-license-expiring-tomorrow/92297)
**Author:** [@bobby259](https://discuss.elastic.co/u/bobby259)\ **Replies:** 3\ **Last updated:** [July 7, 2017, 11:58pm UTC](https://discuss.elastic.co/t/x-pack-license-expiring-tomorrow/92297 "2017-07-07T23:58:59Z")
I have been using x-Pack trial so far and the trial is expiring tomorrow. Do I have to un-install the x-pack or just leave it like that until we get a license? We will be getting a license on a later date. How will my c… --- ## [Mixing terms and ranges in post\_filter](https://discuss.elastic.co/t/mixing-terms-and-ranges-in-post-filter/66056)
**Author:** [@midget2000x](https://discuss.elastic.co/u/midget2000x)\ **Replies:** 3\ **Last updated:** [November 15, 2016, 6:04pm UTC](https://discuss.elastic.co/t/mixing-terms-and-ranges-in-post-filter/66056 "2016-11-15T18:04:55Z")
I am trying to figure out how to apply multiple post\_filters (like when a user selects multiple facets/aggregations) "post\_filter": { "bool": { "must": \[ { "terms": { "category": \[ "Jewel… --- ## [How to compare the value of two fields?](https://discuss.elastic.co/t/how-to-compare-the-value-of-two-fields/50551)
**Author:** [@m.francia](https://discuss.elastic.co/u/m.francia)\ **Replies:** 0\ **Last updated:** [May 20, 2016, 11:23am UTC](https://discuss.elastic.co/t/how-to-compare-the-value-of-two-fields/50551 "2016-05-20T11:23:58Z")
Hi! I have two kinds of logs in ES (rtmp and apache), apache has clientip.raw and rtmp has ipclient.raw. The problem is: how can I see in my Kibana panel just the data that has this condition "ipclient=clientip" ? I tr… --- ## [Elasticsearch Java client async term query not working](https://discuss.elastic.co/t/elasticsearch-java-client-async-term-query-not-working/47084)
**Author:** [@g0c00l.g33k](https://discuss.elastic.co/u/g0c00l.g33k)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 8:50am UTC](https://discuss.elastic.co/t/elasticsearch-java-client-async-term-query-not-working/47084 "2016-04-12T08:50:19Z")
Hi all, I am trying to execute a term query from the elasticsearch java client and I am not getting any results. The code is as follows, final Client client = TransportClient.builder() .addPlugin(ShieldP… --- ## [ES has a lot of unassigned\_shards, failed to process cluster event, stuck in 503 error](https://discuss.elastic.co/t/es-has-a-lot-of-unassigned-shards-failed-to-process-cluster-event-stuck-in-503-error/27758)
**Author:** [@brant](https://discuss.elastic.co/u/brant)\ **Replies:** 3\ **Last updated:** [August 21, 2015, 11:07am UTC](https://discuss.elastic.co/t/es-has-a-lot-of-unassigned-shards-failed-to-process-cluster-event-stuck-in-503-error/27758 "2015-08-21T11:07:28Z")
curl -XGET 'http://127.0.0.1:9200/\_cluster/health?pretty=true' { "cluster\_name" : "es", "status" : "red", "timed\_out" : false, "number\_of\_nodes" : 23, "number\_of\_data\_nodes" : 20, "active\_primary\_shards" : 34… --- ## [Multiple documents with the same \_id](https://discuss.elastic.co/t/multiple-documents-with-the-same--id/24430)
**Author:** [@David\_Smith\_2](https://discuss.elastic.co/u/David_Smith_2)\ **Replies:** 3\ **Last updated:** [June 29, 2015, 7:04pm UTC](https://discuss.elastic.co/t/multiple-documents-with-the-same--id/24430 "2015-06-29T19:04:47Z")
We're using elasticsearch 1.4.0 and we index documents using bulk indexing from node client. We seem to be getting quite a few duplicates as elasticsearch doesn't seem to recognize that there are already documents wit… --- ## [ElasticSearch and Kibana Version Compability](https://discuss.elastic.co/t/elasticsearch-and-kibana-version-compability/353870)
**Author:** [@mukularora89](https://discuss.elastic.co/u/mukularora89)\ **Replies:** 2\ **Last updated:** [March 6, 2024, 9:27am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-version-compability/353870 "2024-03-06T09:27:53Z")
Hi, We have a requirement to update OS from CentOS7 to RHEL 9. Current ES version is 7.17.8. As per the matrix\_compatibility (link), Elasticsearch version 7.17.8 is supported on RHEL 9 while Kibana versions from 8.3.x i… --- ## [Logstash setup with Docker - \[exits after ~25s\]\[not able to find the problem\]](https://discuss.elastic.co/t/logstash-setup-with-docker-exits-after-25s-not-able-to-find-the-problem/281211)
**Author:** [@Jno\_Zrc](https://discuss.elastic.co/u/Jno_Zrc)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 5:01pm UTC](https://discuss.elastic.co/t/logstash-setup-with-docker-exits-after-25s-not-able-to-find-the-problem/281211 "2021-08-12T17:01:09Z")
Hi all, I'm trying to insert a large csv file in Elasticsearch using Logstash. I manage to make it work, but after a while testing some different mutate transformations it stopped working. I even tried a minimal confi… --- ## [Decode\_json\_fields with message field](https://discuss.elastic.co/t/decode-json-fields-with-message-field/243943)
**Author:** [@cnb3](https://discuss.elastic.co/u/cnb3)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 6:13pm UTC](https://discuss.elastic.co/t/decode-json-fields-with-message-field/243943 "2020-08-10T18:13:46Z")
I am running into a problem of trying to process decode\_json\_fields on the message field out of a cloudwatch event. I have this field populated with a json string generated in a lambda function using JSON.stringify(obj) … --- ## [Reset elasticsearch password](https://discuss.elastic.co/t/reset-elasticsearch-password/214281)
**Author:** [@talsantos](https://discuss.elastic.co/u/talsantos)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 5:53am UTC](https://discuss.elastic.co/t/reset-elasticsearch-password/214281 "2020-01-14T05:53:05Z")
Hi, I need to reset the password of elasticsearch because I don't know it. And the person who know it, doesn´t work at the company anymore. How can I reset the password? Thank you. Tânia --- ## [Could not index event to Elasticsearch 400](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-400/177459)
**Author:** [@nandha\_88](https://discuss.elastic.co/u/nandha_88)\ **Replies:** 2\ **Last updated:** [April 23, 2019, 4:40am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-400/177459 "2019-04-23T04:40:00Z")
Hi All, I have updated the filebeat and elk stack from 6.2.4 to 6.6.1 and ended up with the below error message in the logstash log. "\[2019-04-18T17:24:04,887\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index eve… --- ## [Logstash monitoring index is yellow in cluster](https://discuss.elastic.co/t/logstash-monitoring-index-is-yellow-in-cluster/160336)
**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\ **Replies:** 2\ **Last updated:** [December 11, 2018, 12:52pm UTC](https://discuss.elastic.co/t/logstash-monitoring-index-is-yellow-in-cluster/160336 "2018-12-11T12:52:23Z")
I'm using Elastic stack 6.5.2. I have currently two identical production indexes: 1x ES, 1x KB, 1LS (all Win based - single server) 2x ES, 1x KB 0LS (CentOS based - 2x server) This is because we are slowly moving to … --- ## [Problème de date affichiée dans Kibana via Logstash](https://discuss.elastic.co/t/probleme-de-date-affichiee-dans-kibana-via-logstash/131971)
**Author:** [@alicia1](https://discuss.elastic.co/u/alicia1)\ **Replies:** 2\ **Last updated:** [May 16, 2018, 9:55am UTC](https://discuss.elastic.co/t/probleme-de-date-affichiee-dans-kibana-via-logstash/131971 "2018-05-16T09:55:31Z")
Bonjour, Je rencontre actuellement un souci par rapport aux dates affichées dans Kibana qui a 2H de décalage par rapport à mes configurations dans Logstash. En effet, j'ai des fichiers de logs qui sont stockés dans le … --- ## [Remote reindexing time based indices](https://discuss.elastic.co/t/remote-reindexing-time-based-indices/80055)
**Author:** [@faxm0dem](https://discuss.elastic.co/u/faxm0dem)\ **Replies:** 2\ **Last updated:** [April 11, 2017, 4:36pm UTC](https://discuss.elastic.co/t/remote-reindexing-time-based-indices/80055 "2017-04-11T16:36:48Z")
Hi, I'm reindexing from a remote 1.7.3 cluster to a 5.2.0 one. I'd like to reindex all time based indices, without having to do it one at a time. I tried the example from the documentation and it works perfectly. Howev… --- ## [Removing \_source tag from results?](https://discuss.elastic.co/t/removing--source-tag-from-results/81347)
**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\ **Replies:** 2\ **Last updated:** [April 5, 2017, 5:56pm UTC](https://discuss.elastic.co/t/removing--source-tag-from-results/81347 "2017-04-05T17:56:01Z")
I'd like to minimize the query output that ES generates to the essentials only. To do this, I'm using filter\_query = hits.total,hits.hits.source.email,hits.hits.source.name. This works as expected, stripping fields like … --- ## [Kibana visualization time range fails in 4.4.1](https://discuss.elastic.co/t/kibana-visualization-time-range-fails-in-4-4-1/45099)
**Author:** [@EricK](https://discuss.elastic.co/u/EricK)\ **Replies:** 2\ **Last updated:** [March 24, 2016, 3:36pm UTC](https://discuss.elastic.co/t/kibana-visualization-time-range-fails-in-4-4-1/45099 "2016-03-24T15:36:36Z")
This time range fails in Kibana 4.4.1 while it worked in 4.1. What has changed? log.start:\[now-1d/d TO \*\] This is meant to provide all events from yesterday to now. This does not produce any results in 4.4.1 but work… --- ## [Refreshes happening due to the Update API](https://discuss.elastic.co/t/refreshes-happening-due-to-the-update-api/355423)
**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Replies:** 4\ **Last updated:** [March 18, 2024, 9:13am UTC](https://discuss.elastic.co/t/refreshes-happening-due-to-the-update-api/355423 "2024-03-18T09:13:53Z")
Hey, I have found a case where an unintended refresh happens, when you try to update a document, that has not been refreshed yet. Take the following example: DELETE test PUT test {"settings":{"refresh\_interval":"1h"}… --- ## [Log correlation with Log4j2 and AsyncLoggerContextSelector](https://discuss.elastic.co/t/log-correlation-with-log4j2-and-asyncloggercontextselector/330646)
**Author:** [@kelunik](https://discuss.elastic.co/u/kelunik)\ **Replies:** 5\ **Last updated:** [May 3, 2023, 12:31pm UTC](https://discuss.elastic.co/t/log-correlation-with-log4j2-and-asyncloggercontextselector/330646 "2023-05-03T12:31:57Z")
If I use async logging, the transaction.id and trace.id fields aren't set in the log messages. System.setProperty("log4j2.contextSelector", "org.apache.logging.log4j.core.async.AsyncLoggerContextSelector"); I'd like to… --- ## [How to get ctx.payload from Visualize Data Table ( nested aggregations )](https://discuss.elastic.co/t/how-to-get-ctx-payload-from-visualize-data-table-nested-aggregations/283836)
**Author:** [@hanase](https://discuss.elastic.co/u/hanase)\ **Replies:** 5\ **Last updated:** [September 24, 2021, 3:41am UTC](https://discuss.elastic.co/t/how-to-get-ctx-payload-from-visualize-data-table-nested-aggregations/283836 "2021-09-24T03:41:36Z")
Hi elastic community, I create a Visualize Data Table to filter some data, and got response what I expect. then I try to use watcher send alert message when buckets doc\_count greater then a value. what is the correc… --- ## [ILM Retry API not honoring timeouts](https://discuss.elastic.co/t/ilm-retry-api-not-honoring-timeouts/281772)
**Author:** [@Himanshu\_Mishra](https://discuss.elastic.co/u/Himanshu_Mishra)\ **Replies:** 5\ **Last updated:** [August 19, 2021, 7:10am UTC](https://discuss.elastic.co/t/ilm-retry-api-not-honoring-timeouts/281772 "2021-08-19T07:10:57Z")
I'm try to retry ILM steps for all indexes, using following command, however POST \*/\_ilm/retry { "timeout": "30m", "master\_timeout": "30m" } Still following error is thrown. Is there another param to override proce… --- ## [Active Alert](https://discuss.elastic.co/t/active-alert/70058)
**Author:** [@bini](https://discuss.elastic.co/u/bini)\ **Replies:** 5\ **Last updated:** [January 5, 2017, 6:17am UTC](https://discuss.elastic.co/t/active-alert/70058 "2017-01-05T06:17:16Z")
“Active Alerts” – something like “Username, coming in from IP x.y.z is consuming a high number of database connections.” Is this possible? please let me know --- ## [How to create a plugin to add a new text search capability?](https://discuss.elastic.co/t/how-to-create-a-plugin-to-add-a-new-text-search-capability/36668)
**Author:** [@rjprice72](https://discuss.elastic.co/u/rjprice72)\ **Replies:** 5\ **Last updated:** [December 9, 2015, 2:34pm UTC](https://discuss.elastic.co/t/how-to-create-a-plugin-to-add-a-new-text-search-capability/36668 "2015-12-09T14:34:46Z")
My team is looking to piggy-back a custom full text search capability into Elasticsearch 2.1 such that a user can run one query that utilizes the boolean, keyword and metadata queries of Elasticsearch and also include … --- ## [Synonyms file in a cluster](https://discuss.elastic.co/t/synonyms-file-in-a-cluster/11279)
**Author:** [@Chris\_Greening](https://discuss.elastic.co/u/Chris_Greening)\ **Replies:** 5\ **Last updated:** [March 25, 2013, 5:56pm UTC](https://discuss.elastic.co/t/synonyms-file-in-a-cluster/11279 "2013-03-25T17:56:58Z")
Hi All, I just wanted to check my understanding of how synonyms work with indexes in a cluster. Am I right in thinking that each cluster will need the same synonyms file? Will it matter if when a cluster is be… --- ## [Type: long fields show wrong values in kibana](https://discuss.elastic.co/t/type-long-fields-show-wrong-values-in-kibana/322154)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 7\ **Last updated:** [December 29, 2022, 2:13pm UTC](https://discuss.elastic.co/t/type-long-fields-show-wrong-values-in-kibana/322154 "2022-12-29T14:13:53Z")
Hello, I have noticed a problem with Kibana. Values with "type": "long" do not display correctly. For example let's take the value "1 671 607 837 241 650 688" displayed in Discover: This is wrong. When I swith to … --- ## [Configure SSL with organization provided certificates](https://discuss.elastic.co/t/configure-ssl-with-organization-provided-certificates/298160)
**Author:** [@discuss\_lipak](https://discuss.elastic.co/u/discuss_lipak)\ **Replies:** 1\ **Last updated:** [February 25, 2022, 11:37am UTC](https://discuss.elastic.co/t/configure-ssl-with-organization-provided-certificates/298160 "2022-02-25T11:37:08Z")
We are trying to configure security in Elasticsearch cluster with the instructions provided in the official documentation for 7,16,3 version. Our organization provides us with the certificates in .p12 format and truststo… --- ## [Filebeat failing to parse docker json-file logs](https://discuss.elastic.co/t/filebeat-failing-to-parse-docker-json-file-logs/297287)
**Author:** [@rectalogic](https://discuss.elastic.co/u/rectalogic)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 8:48pm UTC](https://discuss.elastic.co/t/filebeat-failing-to-parse-docker-json-file-logs/297287 "2022-02-15T20:48:35Z")
I'm using filebeat 7.12.0 to ingest docker logs using the container input. Log entries in the docker json-file format look like: {"log":"{\\"@timestamp\\":\\"2022-02-15T17:45:26.742Z\\",\\"log.level\\":\\"info\\",\\"message\\":\\"… --- ## [ECE install stuck](https://discuss.elastic.co/t/ece-install-stuck/243070)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 1\ **Last updated:** [August 6, 2020, 8:36am UTC](https://discuss.elastic.co/t/ece-install-stuck/243070 "2020-08-06T08:36:44Z")
Dear Team, My ECE installation is stuck for few hours at same state I am using centos 7.6, kernel 3.10.0-957.12.2.el7.x86\_64. I have followed all the installation steps. Elastic Cloud Enterprise Installer Start setti… --- ## [I am receiving master not discovered or elected yet](https://discuss.elastic.co/t/i-am-receiving-master-not-discovered-or-elected-yet/231712)
**Author:** [@nadimmansour90](https://discuss.elastic.co/u/nadimmansour90)\ **Replies:** 7\ **Last updated:** [May 10, 2020, 10:01pm UTC](https://discuss.elastic.co/t/i-am-receiving-master-not-discovered-or-elected-yet/231712 "2020-05-10T22:01:59Z")
I was trying to renew the node\_pem certificate for the nodes in the elasticsearch cluster and the cluster became unavailable in the logs i can see : \[master\_10.118.12.10\] master not discovered or elected yet, an electi… --- ## [Help understanding hot threads (CPU 100% for several hours)](https://discuss.elastic.co/t/help-understanding-hot-threads-cpu-100-for-several-hours/152069)
**Author:** [@carasel](https://discuss.elastic.co/u/carasel)\ **Replies:** 1\ **Last updated:** [October 15, 2018, 11:20am UTC](https://discuss.elastic.co/t/help-understanding-hot-threads-cpu-100-for-several-hours/152069 "2018-10-15T11:20:49Z")
I indexed a lot of data into my elasticsearch cluster several hours ago. The CPU utilization went to 100% while this was happening, but now that it has finished (about 3 hours ago) the CPU utilization is still 100%. I h… --- ## [Which Visualization works best for computing averages?](https://discuss.elastic.co/t/which-visualization-works-best-for-computing-averages/119140)
**Author:** [@tstapenhorst](https://discuss.elastic.co/u/tstapenhorst)\ **Replies:** 7\ **Last updated:** [February 9, 2018, 10:43pm UTC](https://discuss.elastic.co/t/which-visualization-works-best-for-computing-averages/119140 "2018-02-09T22:43:04Z")
Hello, I'm bring into Logstash student attendance data (Days Enrolled - EN, and Days Present - PR). I want to sum up all the EN days for every student at each school, sum up all PR days for every student at each school… --- ## [Partial Update and nested type performance](https://discuss.elastic.co/t/partial-update-and-nested-type-performance/110534)
**Author:** [@acchaulk](https://discuss.elastic.co/u/acchaulk)\ **Replies:** 1\ **Last updated:** [December 9, 2017, 1:36am UTC](https://discuss.elastic.co/t/partial-update-and-nested-type-performance/110534 "2017-12-09T01:36:46Z")
Is any performance advantage to do a scripted partial update for a nested field? The docs seem to indicate that "To update, add, or remove a nested object, we have to reindex the whole document". Other than sending a lar… --- ## [Simple parsing in logstash](https://discuss.elastic.co/t/simple-parsing-in-logstash/77531)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 7\ **Last updated:** [March 9, 2017, 12:57pm UTC](https://discuss.elastic.co/t/simple-parsing-in-logstash/77531 "2017-03-09T12:57:01Z")
Hey ! I have a question :slight\_smile: Imagine a log file that has different lines than : Nick,connect,11:00,appli1 Pablo,disconnect,, My pattern is %{WORD:name}\[;\]%{WORD:action}\[;\]%{DATA:time}\[;\]%{WORD:applic… --- ## [Yet another Error : java.lang.NoSuchFieldError: FAIL\_ON\_SYMBOL\_HASH\_OVERFLOW](https://discuss.elastic.co/t/yet-another-error-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow/62105)
**Author:** [@pradeepg26](https://discuss.elastic.co/u/pradeepg26)\ **Replies:** 1\ **Last updated:** [October 3, 2016, 8:58pm UTC](https://discuss.elastic.co/t/yet-another-error-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow/62105 "2016-10-03T20:58:37Z")
Hi All, I'm trying to run a Spark job that uses the Elasticsearch client directly (instead of using elasticsearch-hadoop jar). I'm running into the NoSuchFieldError that has been seen my others. I've followed the advic… --- ## [Не могу включить groovy](https://discuss.elastic.co/t/groovy/49836)
**Author:** [@MaxSeleznov](https://discuss.elastic.co/u/MaxSeleznov)\ **Replies:** 1\ **Last updated:** [May 16, 2016, 3:06pm UTC](https://discuss.elastic.co/t/groovy/49836 "2016-05-16T15:06:57Z")
пытаюсь добавить строку в elasticsearch.yml script.engine.groovy.inline.aggs: on но elasticsearch 5.0.0 alpha 2 не стартует , что я делаю не так? "reason": "scripts of type \[inline\], operation \[search\] and lang \[gro… --- ## [Elasticsearch-hadoop connector rest client](https://discuss.elastic.co/t/elasticsearch-hadoop-connector-rest-client/35771)
**Author:** [@George](https://discuss.elastic.co/u/George)\ **Replies:** 1\ **Last updated:** [December 8, 2015, 1:53pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-connector-rest-client/35771 "2015-12-08T13:53:09Z")
Hello @costin, Is it more advised to use rest client from elastichsearch-hadoop library for searching in elasticsearch instead of using the java client? Or let me put it this way, what advantages does rest client fro… --- ## [Time-Field Name Not Clearing After Delete and Recreate of Index](https://discuss.elastic.co/t/time-field-name-not-clearing-after-delete-and-recreate-of-index/25060)
**Author:** [@joshheil](https://discuss.elastic.co/u/joshheil)\ **Replies:** 1\ **Last updated:** [July 8, 2015, 5:52am UTC](https://discuss.elastic.co/t/time-field-name-not-clearing-after-delete-and-recreate-of-index/25060 "2015-07-08T05:52:14Z")
I'm fairly new to ELK and I'm working with a custom index in ES. I set the index in Kibana and selected the time-based field for one of the properties on the document, which returns 0 results. I have two questions here… --- ## [Missing Documents](https://discuss.elastic.co/t/missing-documents/19609)
**Author:** [@Luan\_Garrido](https://discuss.elastic.co/u/Luan_Garrido)\ **Replies:** 7\ **Last updated:** [September 5, 2014, 11:10am UTC](https://discuss.elastic.co/t/missing-documents/19609 "2014-09-05T11:10:09Z")
Hi all, Im new at here, and Im facing a problem. First of all, I need to say that I took a look before send this post, and I did not find the answer. Im using normally elastichsearch through JAVA API, and I indexe… --- ## [Logstash error after installing ssl](https://discuss.elastic.co/t/logstash-error-after-installing-ssl/254807)
**Author:** [@Cosmin\_Ciobanu](https://discuss.elastic.co/u/Cosmin_Ciobanu)\ **Replies:** 4\ **Last updated:** [November 11, 2020, 12:52am UTC](https://discuss.elastic.co/t/logstash-error-after-installing-ssl/254807 "2020-11-11T00:52:09Z")
\[ERROR\] 2020-11-09 10:08:12.337 \[\[main\]-pipeline-manager\] javapipeline - Pipeline error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@tlandelin](https://discuss.elastic.co/u/tlandelin)\ **Replies:** 4\ **Last updated:** [January 28, 2020, 12:37am UTC](https://discuss.elastic.co/t/indexing-speed-and-ssd-hardware/216720 "2020-01-28T00:37:32Z") In Tune for indexing speed | Elasticsearch Guide \[master\] | Elastic it says If indexing is I/O bound, you should investigate giving more memory to the filesystem cache (see above) or buying faster drives. In particular… --- ## [Elasticsearch unreachable error with logstash configuration](https://discuss.elastic.co/t/elasticsearch-unreachable-error-with-logstash-configuration/213043)
**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\ **Replies:** 4\ **Last updated:** [January 22, 2020, 9:12pm UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-error-with-logstash-configuration/213043 "2020-01-22T21:12:23Z")
I am getting error when I am trying to access elasticsearch from logstash configuration. elasticsearch and logstash version - 7.4.0 logstash configuration :- input{ } output { elasticsearch { hosts =\> \["icici-elk-… --- ## [Geo spatial query - Using NEST (version 7) to Query WKT Field](https://discuss.elastic.co/t/geo-spatial-query-using-nest-version-7-to-query-wkt-field/196673)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 4\ **Last updated:** [August 26, 2019, 2:43am UTC](https://discuss.elastic.co/t/geo-spatial-query-using-nest-version-7-to-query-wkt-field/196673 "2019-08-26T02:43:34Z")
We have an index with a GeoShape field that contains boundaries of counties in WKT format such as MULTIPOLYGON (((-9.50189821688122 51.6790656404768, -9.52975113548365 51.6846028881403, -9.49436480898325 51.700202086198… --- ## [Multiple ELK cluster output](https://discuss.elastic.co/t/multiple-elk-cluster-output/175810)
**Author:** [@Gidi\_Kalef](https://discuss.elastic.co/u/Gidi_Kalef)\ **Replies:** 4\ **Last updated:** [April 8, 2019, 2:13pm UTC](https://discuss.elastic.co/t/multiple-elk-cluster-output/175810 "2019-04-08T14:13:51Z")
Hi All, Is it possible to send to two ELK cluster by the following format: output { elasticsearch { hosts=\> \["node1","node2","node3"\] } elasticsearch { hosts=\> \["server1","server2","server3"\] } } Thank you alo… --- ## [Grok filter not filtering data](https://discuss.elastic.co/t/grok-filter-not-filtering-data/104442)
**Author:** [@maddie0726](https://discuss.elastic.co/u/maddie0726)\ **Replies:** 4\ **Last updated:** [October 18, 2017, 6:21pm UTC](https://discuss.elastic.co/t/grok-filter-not-filtering-data/104442 "2017-10-18T18:21:47Z")
I have Elasticsearch, Logstash and Kibana all versions 5.6.2 configured and running on Windows 2012 R2. Some sample data I am trying to parse is: (filtered for sensitive info) 2017-09-18 00:00:01 Local4.Debug 00.00.00.0… --- ## [How can i give two paths in the same input\_type with different document\_type?](https://discuss.elastic.co/t/how-can-i-give-two-paths-in-the-same-input-type-with-different-document-type/89091)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 4\ **Last updated:** [June 12, 2017, 7:55pm UTC](https://discuss.elastic.co/t/how-can-i-give-two-paths-in-the-same-input-type-with-different-document-type/89091 "2017-06-12T19:55:45Z")
Hi, How can i give two paths in one input\_type with different document\_type for each path. I tried it by giving like this: - input\_type: log paths: - F:\\logstash-2.4.0\\logstash-2.4.0\\bin\\samp.txt document\_typ… --- ## [Cardinality on Objects](https://discuss.elastic.co/t/cardinality-on-objects/82345)
**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\ **Replies:** 4\ **Last updated:** [April 19, 2017, 4:51pm UTC](https://discuss.elastic.co/t/cardinality-on-objects/82345 "2017-04-19T16:51:57Z")
How can I do a cardinality aggregation to count objects? I tried below and it does not work when trying to count the number of distinct addresses in my index. However, if I change employee.address.\* to employee.address.c… --- ## [Logstash 2.2.2 mutuate](https://discuss.elastic.co/t/logstash-2-2-2-mutuate/44060)
**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\ **Replies:** 4\ **Last updated:** [March 10, 2016, 11:02pm UTC](https://discuss.elastic.co/t/logstash-2-2-2-mutuate/44060 "2016-03-10T23:02:49Z")
I am running logstash 2.2.2 and I am trying to rename these 2 fields from my data and it does not take effect on the index. Please help Rename "Fashion&Beauty" to Fashion\_and\_Beauty "Business/Finance" to Business\_and\_F… --- ## [Scoring when query match a single field](https://discuss.elastic.co/t/scoring-when-query-match-a-single-field/11951)
**Author:** [@Sebastianpx](https://discuss.elastic.co/u/Sebastianpx)\ **Replies:** 4\ **Last updated:** [May 16, 2013, 2:46pm UTC](https://discuss.elastic.co/t/scoring-when-query-match-a-single-field/11951 "2013-05-16T14:46:28Z")
Hi ! I am currently indexing documents that represent a category page. This documents have different fields like "category" and "brand". Let's imagine a document A having category "Fashion" and no brand defined… --- ## [How to extract the time elapsed from a value of a field to another value of the same field](https://discuss.elastic.co/t/how-to-extract-the-time-elapsed-from-a-value-of-a-field-to-another-value-of-the-same-field/164375)
**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\ **Replies:** 8\ **Last updated:** [January 16, 2019, 8:27pm UTC](https://discuss.elastic.co/t/how-to-extract-the-time-elapsed-from-a-value-of-a-field-to-another-value-of-the-same-field/164375 "2019-01-16T20:27:08Z")
Hello! I have a workflow and I want to know how much time pass from a value to another! For example in the next image with the field "filters" I want to know how much time pass from the value "Creacion" to "Tienda" in t… --- ## [Smooth migration of ES 2.3 cluster to another data center](https://discuss.elastic.co/t/smooth-migration-of-es-2-3-cluster-to-another-data-center/276065)
**Author:** [@vfiset](https://discuss.elastic.co/u/vfiset)\ **Replies:** 6\ **Last updated:** [June 21, 2021, 5:46am UTC](https://discuss.elastic.co/t/smooth-migration-of-es-2-3-cluster-to-another-data-center/276065 "2021-06-21T05:46:28Z")
I have an ES 2.3 cluster of 6 nodes running in a data center holding ~60Gb of data. I wish to find the smoothest migration path with the least downtime possible to move the data over to a similar size cluster running on… [Previous page](https://discuss.elastic.co/top.md?page=1548&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1550&per_page=50&period=all)