# Top **URL:** https://discuss.elastic.co/top.md?page=1550&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1551 --- ## [How to use logstash to collect docker logs cleanly](https://discuss.elastic.co/t/how-to-use-logstash-to-collect-docker-logs-cleanly/268548)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 6\ **Last updated:** [March 28, 2021, 2:10pm UTC](https://discuss.elastic.co/t/how-to-use-logstash-to-collect-docker-logs-cleanly/268548 "2021-03-28T14:10:19Z")
The default output of docker is in json format, which will contain many special characters (such as \\n \\r). The following log sample, I need to merge multiple lines and remove all \\n \\r. For "\\r \\n", should Line Feed a… --- ## [Any replacement of Kibana Iframe](https://discuss.elastic.co/t/any-replacement-of-kibana-iframe/147522)
**Author:** [@nandan\_bigdata](https://discuss.elastic.co/u/nandan_bigdata)\ **Replies:** 6\ **Last updated:** [September 6, 2018, 9:07am UTC](https://discuss.elastic.co/t/any-replacement-of-kibana-iframe/147522 "2018-09-06T09:07:21Z")
Hi all, I am using Kibana 6.3.1 version. Right now sharing Kibana Visualization with my personal website using Iframe method. But Iframe is kind of time consuming. It is taking around 10-15 seconds to load all visuali… --- ## [Non-aggregate workarounds](https://discuss.elastic.co/t/non-aggregate-workarounds/138815)
**Author:** [@nonaggregates-thanks](https://discuss.elastic.co/u/nonaggregates-thanks)\ **Replies:** 6\ **Last updated:** [July 10, 2018, 8:43pm UTC](https://discuss.elastic.co/t/non-aggregate-workarounds/138815 "2018-07-10T20:43:15Z")
so I've been having some pretty massive difficulty with this. Here is the json format of what im visualizing "properties": { "id" { "type" : "text" }, "nested\_map" : { "type" : "nested"} } where the nested… --- ## [Kibana Visualization: How to display long legend string?](https://discuss.elastic.co/t/kibana-visualization-how-to-display-long-legend-string/262230)
**Author:** [@AmS](https://discuss.elastic.co/u/AmS)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 1:23pm UTC](https://discuss.elastic.co/t/kibana-visualization-how-to-display-long-legend-string/262230 "2021-01-26T13:23:04Z")
Hello , I am using Kibana 7.10. I would like to display a long string in the legend in my visualization . I have always a truncated part of the string like "Long string to..." rather then "long string to display" Are… --- ## [Logstash crashing](https://discuss.elastic.co/t/logstash-crashing/259403)
**Author:** [@lquin1978](https://discuss.elastic.co/u/lquin1978)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 4:19pm UTC](https://discuss.elastic.co/t/logstash-crashing/259403 "2020-12-22T16:19:06Z")
We have just started getting the following error \[2020-12-22T15:57:08,056\]\[ERROR\]\[logstash.javapipeline \]\[main\] Pipeline worker error, the pipeline will be stopped {:pipeline\_id=\>"main", :error=\>"", :exception=\>Java:… --- ## [Filebeat 로그데이터 중복 문제](https://discuss.elastic.co/t/filebeat/146447)
**Author:** [@wonki](https://discuss.elastic.co/u/wonki)\ **Replies:** 1\ **Last updated:** [August 29, 2018, 2:54am UTC](https://discuss.elastic.co/t/filebeat/146447 "2018-08-29T02:54:46Z")
안녕하세요. tmplog라는 파일에 임시로 로그 데이터 두 줄을 넣어넣고 logstash 및 filebeat를 실행하면 정상적으로 인덱싱되어 ES에 데이터가 들어오는 것 까지는 정상적으로 작동하는데, logstash가 실행된 상태에서 tmplog를 열고 추가로 로그데이터 한 줄을 넣고 저장하면 이전에 ES에 들어간 로그 데이터까지 중복으로 다시 읽어서 ES에 저장됩니다. 즉, 원래대로라면… --- ## [Geoip processor not working with filebeat](https://discuss.elastic.co/t/geoip-processor-not-working-with-filebeat/141382)
**Author:** [@Raj2](https://discuss.elastic.co/u/Raj2)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 1:40pm UTC](https://discuss.elastic.co/t/geoip-processor-not-working-with-filebeat/141382 "2018-07-24T13:40:25Z")
I recently installed geoip plugin but I can not see my ip filed being processed in logs being indexed by filebeat. However when I manually try to index some document with same structure it is working fine. Do I need to… --- ## [Form cluster using multiple nodes from different machine](https://discuss.elastic.co/t/form-cluster-using-multiple-nodes-from-different-machine/123870)
**Author:** [@BleedCode](https://discuss.elastic.co/u/BleedCode)\ **Replies:** 1\ **Last updated:** [March 14, 2018, 9:59am UTC](https://discuss.elastic.co/t/form-cluster-using-multiple-nodes-from-different-machine/123870 "2018-03-14T09:59:47Z")
I am new to elastic-search and trying to create a cluster using nodes present in multiple different server. Node 1 gets started but in node 2 i get error as:not enough master nodes discovered. I read many blogs on same b… --- ## [Correct understanding of "aliases" in elasticsearch](https://discuss.elastic.co/t/correct-understanding-of-aliases-in-elasticsearch/318126)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 3\ **Last updated:** [November 5, 2022, 5:09pm UTC](https://discuss.elastic.co/t/correct-understanding-of-aliases-in-elasticsearch/318126 "2022-11-05T17:09:11Z")
Hello everyone, the question may be stupid, but I want to clarify: aliases in elasticsearch are essentially like links to one or more indexes or data streams, but recently during the creation of the ILM, I saw an error -… --- ## [Elastic: How to correct the auto generated mapping?](https://discuss.elastic.co/t/elastic-how-to-correct-the-auto-generated-mapping/305819)
**Author:** [@Gopala00](https://discuss.elastic.co/u/Gopala00)\ **Replies:** 3\ **Last updated:** [June 1, 2022, 6:08am UTC](https://discuss.elastic.co/t/elastic-how-to-correct-the-auto-generated-mapping/305819 "2022-06-01T06:08:53Z")
I'm using Elastic cloud hosted in Azure and use NEST for the client. I have a part of auto generated mapping that I need to change from "Bonus" : { "type" : "text", "fields" : { "keyword" : { … --- ## [Union two fields within Vega](https://discuss.elastic.co/t/union-two-fields-within-vega/296613)
**Author:** [@TUKTUK](https://discuss.elastic.co/u/TUKTUK)\ **Replies:** 3\ **Last updated:** [February 8, 2022, 8:00pm UTC](https://discuss.elastic.co/t/union-two-fields-within-vega/296613 "2022-02-08T20:00:44Z")
Hello together, I am looking for a way to union the elements of two different fields into one (new) array in Vega (If this is already possible in an Elastic Query that's also fine). It should be similar to a SQL-Statem… --- ## [Filebeat with event-hub-kafka output, pulish fails: client has run out of available brokers to talk to](https://discuss.elastic.co/t/filebeat-with-event-hub-kafka-output-pulish-fails-client-has-run-out-of-available-brokers-to-talk-to/276263)
**Author:** [@Klaus\_zhong](https://discuss.elastic.co/u/Klaus_zhong)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 11:54am UTC](https://discuss.elastic.co/t/filebeat-with-event-hub-kafka-output-pulish-fails-client-has-run-out-of-available-brokers-to-talk-to/276263 "2021-06-17T11:54:34Z")
Description I am using Filebeat to stream my log file to azure event hub and with the configuration as kafka output, the connection to host ip can be established (read from the log below), but when it try to publish topi… --- ## [Intersect documents with same id in two indices (5.6)](https://discuss.elastic.co/t/intersect-documents-with-same-id-in-two-indices-5-6/241321)
**Author:** [@AsafHirschfeld](https://discuss.elastic.co/u/AsafHirschfeld)\ **Replies:** 3\ **Last updated:** [July 16, 2020, 9:55am UTC](https://discuss.elastic.co/t/intersect-documents-with-same-id-in-two-indices-5-6/241321 "2020-07-16T09:55:37Z")
I have two indices with documents, each document assigned with a unique id. My goal is to find duplicate documents among the indices. Is there any sort of an intersection aggregation that i can make in order to determi… --- ## [Parsing CSV file with multiple key values in one line](https://discuss.elastic.co/t/parsing-csv-file-with-multiple-key-values-in-one-line/221959)
**Author:** [@david4](https://discuss.elastic.co/u/david4)\ **Replies:** 3\ **Last updated:** [March 5, 2020, 11:07pm UTC](https://discuss.elastic.co/t/parsing-csv-file-with-multiple-key-values-in-one-line/221959 "2020-03-05T23:07:38Z")
Hello, I'm new to the ELK stack and have been struggling to solve one problem. I'm trying to write a Logstash configuration to parse a log file of csv format as follow: "time\_stamp", 2020-02-28 16:35:16.048, "name", "D… --- ## [Unable to build packetbeat on macOS](https://discuss.elastic.co/t/unable-to-build-packetbeat-on-macos/175271)
**Author:** [@mikemadden42](https://discuss.elastic.co/u/mikemadden42)\ **Replies:** 3\ **Last updated:** [April 4, 2019, 5:23pm UTC](https://discuss.elastic.co/t/unable-to-build-packetbeat-on-macos/175271 "2019-04-04T17:23:20Z")
Is anyone else running into issues building packetbeat on macOS? I'm running into the following issue on the master & 7.0 branch. packetbeat(master): go version go version go1.12.1 darwin/amd64 packetbeat(master): mage… --- ## [Filebeat autodiscovery for docker seems to miss collecting logs of crashed containers](https://discuss.elastic.co/t/filebeat-autodiscovery-for-docker-seems-to-miss-collecting-logs-of-crashed-containers/159324)
**Author:** [@farodin91](https://discuss.elastic.co/u/farodin91)\ **Replies:** 3\ **Last updated:** [December 27, 2018, 2:48pm UTC](https://discuss.elastic.co/t/filebeat-autodiscovery-for-docker-seems-to-miss-collecting-logs-of-crashed-containers/159324 "2018-12-27T14:48:07Z")
Hi We are running a multi-node swarm. If services crashes and produces a log entry with the crash exception, these logs are not forward to our Logstash. Besides, we are able to see these logs with docker log. Version: … --- ## [How we can add extra field in SSH Login Attempt \[Filebeat System\] dashboard](https://discuss.elastic.co/t/how-we-can-add-extra-field-in-ssh-login-attempt-filebeat-system-dashboard/154569)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 3\ **Last updated:** [October 31, 2018, 4:14am UTC](https://discuss.elastic.co/t/how-we-can-add-extra-field-in-ssh-login-attempt-filebeat-system-dashboard/154569 "2018-10-31T04:14:35Z")
Hello Team, I am using ELK 6.4.0 and Beat (Filebeat). My architecture is Filebeat-\>Logstash-\>Elasticsearch-\>Kibana. I am sending my auth.log using filebeat but i am not using filebeat system module. Because Filebeat sy… --- ## [Elasticsearch input plugin index date](https://discuss.elastic.co/t/elasticsearch-input-plugin-index-date/145786)
**Author:** [@Scoyle](https://discuss.elastic.co/u/Scoyle)\ **Replies:** 3\ **Last updated:** [August 24, 2018, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-index-date/145786 "2018-08-24T14:14:57Z")
Hello, im trying to get the elasticsearch input plugin to look at the previous days index. it seems to only like the wildcard or a full index name in the field. has anyone been able to change the date on the index for t… --- ## [ISO8601 in date filter](https://discuss.elastic.co/t/iso8601-in-date-filter/93976)
**Author:** [@Adam\_Szabo](https://discuss.elastic.co/u/Adam_Szabo)\ **Replies:** 0\ **Last updated:** [July 20, 2017, 3:37pm UTC](https://discuss.elastic.co/t/iso8601-in-date-filter/93976 "2017-07-20T15:37:32Z")
I'm pulling events in from a MariaDB database. The event that arrives to Elasticsearch looks like this: { "\_index": "test", "\_type": "logs", "\_id": "AV1gkQx-9-vDP\_XVWXk\_", "\_score": null, "\_source": { "@t… --- ## [Elasticsearch multiple filter query](https://discuss.elastic.co/t/elasticsearch-multiple-filter-query/85179)
**Author:** [@netaibiswas](https://discuss.elastic.co/u/netaibiswas)\ **Replies:** 3\ **Last updated:** [May 10, 2017, 6:58am UTC](https://discuss.elastic.co/t/elasticsearch-multiple-filter-query/85179 "2017-05-10T06:58:34Z")
Hi, I am new to elastic search and evaluating it for one of the project. Currently I am using a windows system and using web browser retrieving data. I have multiple fields, two of them are “month” and “day”. So while … --- ## [Should I remove my original time stamp field in favor of @timestamp?](https://discuss.elastic.co/t/should-i-remove-my-original-time-stamp-field-in-favor-of-timestamp/77939)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 0\ **Last updated:** [March 9, 2017, 6:33am UTC](https://discuss.elastic.co/t/should-i-remove-my-original-time-stamp-field-in-favor-of-timestamp/77939 "2017-03-09T06:33:44Z")
About this question This question: Spans two forum categories—Elasticsearch and Logstash—but I could select only one. Is a copy, with some rewording, of two comments I recently added to the closed elastic/logstash GitH… --- ## [Elasticsearch Timezone error?](https://discuss.elastic.co/t/elasticsearch-timezone-error/75881)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 3\ **Last updated:** [February 22, 2017, 5:19pm UTC](https://discuss.elastic.co/t/elasticsearch-timezone-error/75881 "2017-02-22T17:19:41Z")
In my mapping i defined "Time": { "type": "date", "format": "strict\_date\_optional\_time||epoch\_millis" When i used the following query "range": { "Time": { … --- ## [Not able to visualize \_type field](https://discuss.elastic.co/t/not-able-to-visualize--type-field/71479)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 3\ **Last updated:** [February 3, 2017, 9:15pm UTC](https://discuss.elastic.co/t/not-able-to-visualize--type-field/71479 "2017-02-03T21:15:36Z")
Hi, I can see the \_type field in the Discover Tab. But, I am not able to make any visualizations on it. I can see that it is not indexed. But, we need to create visualizations on it, as our index will be containing d… --- ## [Indices stuck in Relocating state after a new node joins the cluster](https://discuss.elastic.co/t/indices-stuck-in-relocating-state-after-a-new-node-joins-the-cluster/38468)
**Author:** [@Sumesh\_Agarwal](https://discuss.elastic.co/u/Sumesh_Agarwal)\ **Replies:** 0\ **Last updated:** [January 6, 2016, 6:23am UTC](https://discuss.elastic.co/t/indices-stuck-in-relocating-state-after-a-new-node-joins-the-cluster/38468 "2016-01-06T06:23:29Z")
A little about the setup - I have a three node (m4.large) cluster, each node with an attached EBS volume (latency is not a big problem at present). The cluster seems to be pretty stable. A couple of months ago, I nee… --- ## [Only count matches once](https://discuss.elastic.co/t/only-count-matches-once/13935)
**Author:** [@David\_Squires](https://discuss.elastic.co/u/David_Squires)\ **Replies:** 3\ **Last updated:** [October 14, 2013, 1:46am UTC](https://discuss.elastic.co/t/only-count-matches-once/13935 "2013-10-14T01:46:40Z")
Hello, I've tried a few different analyzers thinking that the stop words were causing the results to be poor, but now it seems that it's a result of the same token being matched multiple times, being given more we… --- ## [Version Incompatibility Logstash and Opensearch service Elastic](https://discuss.elastic.co/t/version-incompatibility-logstash-and-opensearch-service-elastic/324928)
**Author:** [@cgcats](https://discuss.elastic.co/u/cgcats)\ **Replies:** 2\ **Last updated:** [February 7, 2023, 5:34pm UTC](https://discuss.elastic.co/t/version-incompatibility-logstash-and-opensearch-service-elastic/324928 "2023-02-07T17:34:32Z")
I am trying to bring up logstash in kubernetes using the v7.16.1 chart and connecting to v7.4 elasticsearch that is an aws opensearch service. According to the compatibility matrix, this should be fine. but I am seeing t… --- ## [Pinned Filters](https://discuss.elastic.co/t/pinned-filters/244929)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 7:56pm UTC](https://discuss.elastic.co/t/pinned-filters/244929 "2020-08-13T19:56:33Z")
I have a dashboard that I call from a URL passing some \_q filters to it. This dashboard also has links to go other pages. however the filter wont stay. I understand that this filter is not pinned and may have something t… --- ## [How to give different weights to exact, phonetic and fuzzy queries?](https://discuss.elastic.co/t/how-to-give-different-weights-to-exact-phonetic-and-fuzzy-queries/224365)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 2\ **Last updated:** [March 22, 2020, 9:37am UTC](https://discuss.elastic.co/t/how-to-give-different-weights-to-exact-phonetic-and-fuzzy-queries/224365 "2020-03-22T09:37:59Z")
Hi, So currently I am using the following query: { "\_source": \[ "title", "bench", "id\_", "court", "date" \], "size": 15, "from": 0, "query": { "bool": … --- ## [Timelion legend out of plot area](https://discuss.elastic.co/t/timelion-legend-out-of-plot-area/176222)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 2\ **Last updated:** [April 10, 2019, 1:29pm UTC](https://discuss.elastic.co/t/timelion-legend-out-of-plot-area/176222 "2019-04-10T13:29:52Z")
What if instead of this: Is there a way to make the legend use that upper space? Kinda like this (sorry for my poor Paint skills) I know that upper area is part of the graph because it activates the time bar that a… --- ## [No influencers found and nothing highlighted on single metric viewer](https://discuss.elastic.co/t/no-influencers-found-and-nothing-highlighted-on-single-metric-viewer/141015)
**Author:** [@vgvadim](https://discuss.elastic.co/u/vgvadim)\ **Replies:** 2\ **Last updated:** [July 31, 2018, 3:57pm UTC](https://discuss.elastic.co/t/no-influencers-found-and-nothing-highlighted-on-single-metric-viewer/141015 "2018-07-31T15:57:45Z")
Hi guys, I need help to get started with Kibana's machine learning functionality and it looks like I miss something important. Basically, I have historical data with two known issues: For the first issue, there was n… --- ## [Run multiple Elastic search instance in Linux environment](https://discuss.elastic.co/t/run-multiple-elastic-search-instance-in-linux-environment/110433)
**Author:** [@sstest](https://discuss.elastic.co/u/sstest)\ **Replies:** 2\ **Last updated:** [December 6, 2017, 1:23am UTC](https://discuss.elastic.co/t/run-multiple-elastic-search-instance-in-linux-environment/110433 "2017-12-06T01:23:24Z")
Hi, Is it possible to run 2 Elasticsearch instances like ES-2.x and ES-6 in parallel in the same Linux server as RPM installation. My concern is - if we install it as Linux RPM then the new one will override the existin… --- ## [NodeClient and org.elasticsearch.cluster.ClusterStateListener](https://discuss.elastic.co/t/nodeclient-and-org-elasticsearch-cluster-clusterstatelistener/40582)
**Author:** [@bbrutman](https://discuss.elastic.co/u/bbrutman)\ **Replies:** 2\ **Last updated:** [February 3, 2016, 8:16am UTC](https://discuss.elastic.co/t/nodeclient-and-org-elasticsearch-cluster-clusterstatelistener/40582 "2016-02-03T08:16:15Z")
Hi, We are doing a rolling index and would like to know on the NodeClient that the new index has been added. Is it possible to listen to an event that would indicate a new index creation? Thanks! --- ## [Delimiter error when using Logstash File Input Plugin. Files not ingested fully](https://discuss.elastic.co/t/delimiter-error-when-using-logstash-file-input-plugin-files-not-ingested-fully/160683)
**Author:** [@dx123](https://discuss.elastic.co/u/dx123)\ **Replies:** 0\ **Last updated:** [December 13, 2018, 7:52am UTC](https://discuss.elastic.co/t/delimiter-error-when-using-logstash-file-input-plugin-files-not-ingested-fully/160683 "2018-12-13T07:52:08Z")
I'm using the Logstash File Input Plugin to ingest a a file but I am receiving this error: \[\[main\]\ **Author:** [@ramyach](https://discuss.elastic.co/u/ramyach)\ **Replies:** 0\ **Last updated:** [March 14, 2017, 2:03pm UTC](https://discuss.elastic.co/t/failed-to-execute-on-node-remotetransportexception/78533 "2017-03-14T14:03:22Z") It appears that since yesterday our site has not been able to communicate with elastic cloud. Site logs have the below exception System.Collections.Generic.KeyNotFoundExceptionThe given key was not present in the dicti… --- ## [Wildcard and phrase\_prefix in \_all field by multi\_match query](https://discuss.elastic.co/t/wildcard-and-phrase-prefix-in--all-field-by-multi-match-query/57476)
**Author:** [@trex](https://discuss.elastic.co/u/trex)\ **Replies:** 0\ **Last updated:** [August 8, 2016, 12:40pm UTC](https://discuss.elastic.co/t/wildcard-and-phrase-prefix-in--all-field-by-multi-match-query/57476 "2016-08-08T12:40:41Z")
I want to match both by wildcard and phrase\_prefix in the \_all field. But the queries below don't work for me. {'query': {'multi\_match': {'query': 'demen\*', 'type': 'phrase\_prefix', 'fields': \['\_all'\]}}} {'query': {'… --- ## [APM Agent | Java Application on Windows](https://discuss.elastic.co/t/apm-agent-java-application-on-windows/321290)
**Author:** [@srii](https://discuss.elastic.co/u/srii)\ **Replies:** 5\ **Last updated:** [January 9, 2023, 4:52pm UTC](https://discuss.elastic.co/t/apm-agent-java-application-on-windows/321290 "2023-01-09T16:52:35Z")
I've set up an ELK stack on Docker which I primarily use for ingestion and analysis of logs produced by a Java application. The logs are fed to ES by LogStash (file input) which works well. I have also added --javaagent … --- ## [Don't get doc count after setting ilm](https://discuss.elastic.co/t/dont-get-doc-count-after-setting-ilm/264117)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 5\ **Last updated:** [February 17, 2021, 10:25am UTC](https://discuss.elastic.co/t/dont-get-doc-count-after-setting-ilm/264117 "2021-02-17T10:25:06Z")
I am using two indices each index is pointed to ilm. below is the index setting for two indices "index": { "lifecycle": { "name": "packetbeat\_flow", "rollover\_alias": "log-pb-flow" }, "number\_o… --- ## [Obtaining a list of filtered document properties](https://discuss.elastic.co/t/obtaining-a-list-of-filtered-document-properties/238829)
**Author:** [@alcalin](https://discuss.elastic.co/u/alcalin)\ **Replies:** 5\ **Last updated:** [June 30, 2020, 9:02am UTC](https://discuss.elastic.co/t/obtaining-a-list-of-filtered-document-properties/238829 "2020-06-30T09:02:12Z")
Hello, I have the following index mappings: { "mappings": { "properties": { "library": { "type": "keyword" }, "books": { "properties": { … --- ## [TypeError: can't convert Hash into String](https://discuss.elastic.co/t/typeerror-cant-convert-hash-into-string/194869)
**Author:** [@YanivT](https://discuss.elastic.co/u/YanivT)\ **Replies:** 5\ **Last updated:** [August 12, 2019, 3:17pm UTC](https://discuss.elastic.co/t/typeerror-cant-convert-hash-into-string/194869 "2019-08-12T15:17:40Z")
\[2019-08-12T10:57:09,072\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>#\, :backtrace=\>\["org/jruby/RubyString.java:4462:in include?'", "(eval):6774:ini… --- ## [Problem getting multiline json document into ES](https://discuss.elastic.co/t/problem-getting-multiline-json-document-into-es/194350)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 5\ **Last updated:** [August 8, 2019, 6:56am UTC](https://discuss.elastic.co/t/problem-getting-multiline-json-document-into-es/194350 "2019-08-08T06:56:04Z")
Hi, i am producing a valid json document from get-aduser username | convertto-json | out-file file.json I am then sending that file to ES using filebeat, however in ES it is ingesting the document, one document per line… --- ## [Nested documents performance anomaly](https://discuss.elastic.co/t/nested-documents-performance-anomaly/176774)
**Author:** [@roiwexler](https://discuss.elastic.co/u/roiwexler)\ **Replies:** 5\ **Last updated:** [May 6, 2019, 10:05am UTC](https://discuss.elastic.co/t/nested-documents-performance-anomaly/176774 "2019-05-06T10:05:30Z")
Hi, we're at the process of testing Es vs Solr for its indexing speed which is very impotent to our application. we've witnessed strange behavior that we wish to understand before using it. when we indexed 1M docs it … --- ## [ES Plugin to log rest requests](https://discuss.elastic.co/t/es-plugin-to-log-rest-requests/162836)
**Author:** [@saikettewary](https://discuss.elastic.co/u/saikettewary)\ **Replies:** 5\ **Last updated:** [January 9, 2019, 3:36pm UTC](https://discuss.elastic.co/t/es-plugin-to-log-rest-requests/162836 "2019-01-09T15:36:39Z")
Hi, I have a plugin that logs all rest requests . Currently this is implemented using getRestHandlerWrapper with my plugins RestHandler. What is other way i can achieve the same without using getRestHandlerWrapper as … --- ## [Cluster configuration and time based index](https://discuss.elastic.co/t/cluster-configuration-and-time-based-index/58816)
**Author:** [@rajkumar3v](https://discuss.elastic.co/u/rajkumar3v)\ **Replies:** 5\ **Last updated:** [August 25, 2016, 8:58pm UTC](https://discuss.elastic.co/t/cluster-configuration-and-time-based-index/58816 "2016-08-25T20:58:59Z")
Hi guys i have 2 querys, I am implementing Elastic cluster which will have 3 data node, 1 primary master node & 1 node for both client & secondary master. while pushing the data to cluster whether i have to specify … --- ## [Adding millions of documents, performance decay](https://discuss.elastic.co/t/adding-millions-of-documents-performance-decay/9902)
**Author:** [@Fabio\_Pezzoni](https://discuss.elastic.co/u/Fabio_Pezzoni)\ **Replies:** 5\ **Last updated:** [December 4, 2012, 1:57pm UTC](https://discuss.elastic.co/t/adding-millions-of-documents-performance-decay/9902 "2012-12-04T13:57:02Z")
Adding millions of documents, performance decay. Hi, I'm new to ElasticSearch and I'm trying to transfer a database of several millions of JSON documents to a Lucene index through ES. Currently we can use just … --- ## [Watcher which tries 2 times before alerting](https://discuss.elastic.co/t/watcher-which-tries-2-times-before-alerting/293128)
**Author:** [@Dimitri2](https://discuss.elastic.co/u/Dimitri2)\ **Replies:** 4\ **Last updated:** [January 7, 2022, 1:08pm UTC](https://discuss.elastic.co/t/watcher-which-tries-2-times-before-alerting/293128 "2022-01-07T13:08:45Z")
Hello everyone, I'm new to Elastic and I'm having trouble. I'm trying to get my Watcher to not return an alert right away but wait a moment to confirm or deny the problem. So instead of sending an alert directly, I wa… --- ## [.NET Agent Public API question: user.name?](https://discuss.elastic.co/t/net-agent-public-api-question-user-name/278661)
**Author:** [@DR4296](https://discuss.elastic.co/u/DR4296)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 12:59pm UTC](https://discuss.elastic.co/t/net-agent-public-api-question-user-name/278661 "2021-07-14T12:59:05Z")
Greetings All I have a Desktop Win32 application that I added Elastic APM logging to a few months back, using the Public API of the .NET Agent. At the time, I added the creation of a Transaction.Labels\["username"\] to r… --- ## [Constant Garbage Collecting](https://discuss.elastic.co/t/constant-garbage-collecting/276180)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 4\ **Last updated:** [June 16, 2021, 8:43pm UTC](https://discuss.elastic.co/t/constant-garbage-collecting/276180 "2021-06-16T20:43:22Z")
I am getting a constant stream of garbage collection logs in my cluster.log of the type shown below: \[2021-06-16T13:33:31,031\]\[WARN\] \[o.e.m.j.JvmGcMonitorService\] \[hot-data.domain.com\] \[gc\] \[255\] overhead, spent \[1.8s… --- ## [Logstash and JAVA plugins](https://discuss.elastic.co/t/logstash-and-java-plugins/251008)
**Author:** [@David\_Kennedy](https://discuss.elastic.co/u/David_Kennedy)\ **Replies:** 4\ **Last updated:** [October 5, 2020, 3:12pm UTC](https://discuss.elastic.co/t/logstash-and-java-plugins/251008 "2020-10-05T15:12:35Z")
Wondering if someone would be able to give me a hand. I'm trying to compile a java filter. I've followed the instructions here: https://github.com/logstash-plugins/logstash-filter-java\_filter\_example but get this: \[2… --- ## [Performance difference 1 node vs 3 nodes](https://discuss.elastic.co/t/performance-difference-1-node-vs-3-nodes/118994)
**Author:** [@arcaya](https://discuss.elastic.co/u/arcaya)\ **Replies:** 4\ **Last updated:** [February 8, 2018, 12:24pm UTC](https://discuss.elastic.co/t/performance-difference-1-node-vs-3-nodes/118994 "2018-02-08T12:24:15Z")
Hi, I am trying to know which would be the performance improvement of running a 3 node cluster over a 1 node cluster. In order to do this, I have installed esrally and run this way esrally --distribution-version=6.0.… --- ## [Elastic 2.3.4. Node Startup Quiet Failure](https://discuss.elastic.co/t/elastic-2-3-4-node-startup-quiet-failure/117092)
**Author:** [@deppi](https://discuss.elastic.co/u/deppi)\ **Replies:** 4\ **Last updated:** [January 25, 2018, 7:18pm UTC](https://discuss.elastic.co/t/elastic-2-3-4-node-startup-quiet-failure/117092 "2018-01-25T19:18:50Z")
We are using a 5 node cluster hosted in Google Cloud (Ubuntu 16.04 LTS) and we noticed that one of the node's disk space was at 90%+ so we shut down the node with: sudo service elasticsearch stop Then stopping the inst… [Previous page](https://discuss.elastic.co/top.md?page=1549&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1551&per_page=50&period=all)