# Top

**URL:** https://discuss.elastic.co/top.md?page=156&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 157

---

## [Not able to connect to App search from Python script](https://discuss.elastic.co/t/not-able-to-connect-to-app-search-from-python-script/230579)

<div class="topic-metadata">

**Author:** [@rishelini](https://discuss.elastic.co/u/rishelini)\
**Replies:** 10\
**Last updated:** [May 6, 2020, 8:20am UTC](https://discuss.elastic.co/t/not-able-to-connect-to-app-search-from-python-script/230579 "2020-05-06T08:20:59Z")

</div>

Hello! We have a problem connecting to our App Search engine from python using the elastic\_app\_search library. After creating a client instance with our proper credentials the server is rejecting to output anything. For…

---

## [Logstash grok pattern for ping](https://discuss.elastic.co/t/logstash-grok-pattern-for-ping/125821)

<div class="topic-metadata">

**Author:** [@geokal](https://discuss.elastic.co/u/geokal)\
**Replies:** 11\
**Last updated:** [April 3, 2018, 12:09pm UTC](https://discuss.elastic.co/t/logstash-grok-pattern-for-ping/125821 "2018-04-03T12:09:03Z")

</div>

Hi everybody, have this sample from a log: Tue Mar 27 06:51:48 2018 PING www.google.com (172.217.169.100) 56(84) bytes of data. 64 bytes from sof02s31-in-f4.1e100.net (172.217.169.100): icmp\_seq=1 ttl=128 time=17…

---

## [Performance tuning ES for in-memory](https://discuss.elastic.co/t/performance-tuning-es-for-in-memory/17136)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 14\
**Last updated:** [April 27, 2014, 6:37am UTC](https://discuss.elastic.co/t/performance-tuning-es-for-in-memory/17136 "2014-04-27T06:37:14Z")

</div>

Hi I downloaded the latest ES 1.1.1 I have a 200GB RAM with 2 x 8 cores hyper threaded. "32" cores total machine 1.6T of disk space. I start elastic search as follows... ./elasticsearch -Xms100g -Xmx100g -Des.…

---

## [Want to elasticsearch sql select the decimal column output more decimal place](https://discuss.elastic.co/t/want-to-elasticsearch-sql-select-the-decimal-column-output-more-decimal-place/158274)

<div class="topic-metadata">

**Author:** [@zxc654951](https://discuss.elastic.co/u/zxc654951)\
**Replies:** 11\
**Last updated:** [December 7, 2018, 1:22am UTC](https://discuss.elastic.co/t/want-to-elasticsearch-sql-select-the-decimal-column-output-more-decimal-place/158274 "2018-12-07T01:22:15Z")

</div>

I am using elastic 6.4, and using /\_xpack/sql to output some columns. Due to use order by command, have to average number columns that output just have 1 decimal place. In my case, I use my local vbox with ubuntu 18.04…

---

## [Metricbeat elasticsearch-xpack not reliably sending data to monitoring cluster](https://discuss.elastic.co/t/metricbeat-elasticsearch-xpack-not-reliably-sending-data-to-monitoring-cluster/275842)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 14\
**Last updated:** [June 18, 2021, 10:51am UTC](https://discuss.elastic.co/t/metricbeat-elasticsearch-xpack-not-reliably-sending-data-to-monitoring-cluster/275842 "2021-06-18T10:51:47Z")

</div>

I've installed metricbeat to ship monitoring metrics from my elastic cluster to a separate cluster, but from what I can see, despite the period of collection being 10s, it's hardly ever sending any actual data: Does …

---

## [\[7.5\] There was an error retrieving the index pattern](https://discuss.elastic.co/t/7-5-there-was-an-error-retrieving-the-index-pattern/210742)

<div class="topic-metadata">

**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\
**Replies:** 10\
**Last updated:** [January 7, 2020, 9:37pm UTC](https://discuss.elastic.co/t/7-5-there-was-an-error-retrieving-the-index-pattern/210742 "2020-01-07T21:37:08Z")

</div>

I just updated to 7.4.0 -\> 7.5.0 and in uptime I now see below the query bar the warning There was an error retrieving the index pattern But I can see all 100+ monitors and can filter on location. But the query bar …

---

## [Cannot set password for new user Kibana ECK 7.4.2](https://discuss.elastic.co/t/cannot-set-password-for-new-user-kibana-eck-7-4-2/207437)

<div class="topic-metadata">

**Author:** [@oaaraya](https://discuss.elastic.co/u/oaaraya)\
**Replies:** 10\
**Last updated:** [November 13, 2019, 9:13pm UTC](https://discuss.elastic.co/t/cannot-set-password-for-new-user-kibana-eck-7-4-2/207437 "2019-11-13T21:13:49Z")

</div>

Brand new cluster running on kubernetes ECK 7.4.2, open up Kibana log in as elastic user, create a new user, log out and cannot log in with wrong password. I've tried the obvious, deleted the user, changed the password …

---

## [Multiple Pipelines throwing errors when enabled](https://discuss.elastic.co/t/multiple-pipelines-throwing-errors-when-enabled/291858)

<div class="topic-metadata">

**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\
**Replies:** 9\
**Last updated:** [December 14, 2021, 8:28pm UTC](https://discuss.elastic.co/t/multiple-pipelines-throwing-errors-when-enabled/291858 "2021-12-14T20:28:15Z")

</div>

Good Afternoon Elastic Peeps; I have been working with configuring and employing multiple pipelines in my ELK stack. I have implemented ELK 7.13.4 and when I use a simple syslog pipeline I am able to gather the informa…

---

## [Configure PKI authentication for Elasticsearch 7.7](https://discuss.elastic.co/t/configure-pki-authentication-for-elasticsearch-7-7/318686)

<div class="topic-metadata">

**Author:** [@samhagin](https://discuss.elastic.co/u/samhagin)\
**Replies:** 12\
**Last updated:** [December 13, 2022, 8:45pm UTC](https://discuss.elastic.co/t/configure-pki-authentication-for-elasticsearch-7-7/318686 "2022-12-13T20:45:56Z")

</div>

This guide Elasticsearch Security: Configure TLS/SSL & PKI Authentication | Elastic Blog shows how to configure PKI for Elasticsearch version 6.5 however this doesn't work for version 7.7.0 ( the version I'm currently us…

---

## ["delimiter" field behaving weirdly with \\n char for the line codec with UTF-16](https://discuss.elastic.co/t/delimiter-field-behaving-weirdly-with-n-char-for-the-line-codec-with-utf-16/186341)

<div class="topic-metadata">

**Author:** [@res260](https://discuss.elastic.co/u/res260)\
**Replies:** 12\
**Last updated:** [June 18, 2019, 9:21pm UTC](https://discuss.elastic.co/t/delimiter-field-behaving-weirdly-with-n-char-for-the-line-codec-with-utf-16/186341 "2019-06-18T21:21:20Z")

</div>

Hi, I’m trying to parse UTF-16-encoded (with BOM), CRLF newlines CSV data from a TCP input, but I cant get it to be parsed correctly. In my .conf file: input { tcp { port =\> 5008 type =\> "csv" codec =\> line { …

---

## [Not able to send email alert from elastic cloud](https://discuss.elastic.co/t/not-able-to-send-email-alert-from-elastic-cloud/107514)

<div class="topic-metadata">

**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\
**Replies:** 13\
**Last updated:** [November 16, 2017, 10:36am UTC](https://discuss.elastic.co/t/not-able-to-send-email-alert-from-elastic-cloud/107514 "2017-11-16T10:36:41Z")

</div>

I am using below console command to send email to my official mail id. I am using simple command : if any any port is down, it should send e-mail. PUT \_xpack/watcher/watch/heartbeat { "trigger": { "schedule": { …

---

## [Loading of index settings template from file in config/templates](https://discuss.elastic.co/t/loading-of-index-settings-template-from-file-in-config-templates/9582)

<div class="topic-metadata">

**Author:** [@Serg\_Pilipenko](https://discuss.elastic.co/u/Serg_Pilipenko)\
**Replies:** 13\
**Last updated:** [April 24, 2013, 1:02pm UTC](https://discuss.elastic.co/t/loading-of-index-settings-template-from-file-in-config-templates/9582 "2013-04-24T13:02:04Z")

</div>

Hi! Have anybody tried to load index settings template from file in config/templates like described here http://www.elasticsearch.org/guide/reference/api/admin-indices-templates.html? I'm using v19.10 and it works f…

---

## [Fscrawler doesn't seem to index against Includes](https://discuss.elastic.co/t/fscrawler-doesnt-seem-to-index-against-includes/105587)

<div class="topic-metadata">

**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\
**Replies:** 9\
**Last updated:** [October 30, 2017, 3:57pm UTC](https://discuss.elastic.co/t/fscrawler-doesnt-seem-to-index-against-includes/105587 "2017-10-30T15:57:57Z")

</div>

here is my \_settings file. Basically I'm trying to create an index that includes only files of the types on the includes line. After it finishes, if I go to Kibana and query the index nothing is returned: { "name" : …

---

## [Can ELSER be used with languages other than English](https://discuss.elastic.co/t/can-elser-be-used-with-languages-other-than-english/351186)

<div class="topic-metadata">

**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\
**Replies:** 11\
**Last updated:** [January 25, 2024, 1:02pm UTC](https://discuss.elastic.co/t/can-elser-be-used-with-languages-other-than-english/351186 "2024-01-25T13:02:19Z")

</div>

Hello, I'm posting to gather insights about ELSER's language capabilities, particularly its support for languages other than English. My interest lies in understanding how well ELSER handles the following languages: D…

---

## [8.1.1 Cannot display Logstash pipeline in monitoring UI](https://discuss.elastic.co/t/8-1-1-cannot-display-logstash-pipeline-in-monitoring-ui/300554)

<div class="topic-metadata">

**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\
**Replies:** 17\
**Last updated:** [April 4, 2022, 10:54am UTC](https://discuss.elastic.co/t/8-1-1-cannot-display-logstash-pipeline-in-monitoring-ui/300554 "2022-04-04T10:54:29Z")

</div>

I have migrated the Elastic stack from 7.17.1 to 8.1.1. After the upgrade everything works fine, except the Kibana monitoring logstash pipeline viewer UI. stack monitoring \> logstash \> pipelines pipeline main points…

---

## [Multi if condition on filter aggregation](https://discuss.elastic.co/t/multi-if-condition-on-filter-aggregation/279495)

<div class="topic-metadata">

**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\
**Replies:** 10\
**Last updated:** [July 26, 2021, 1:56pm UTC](https://discuss.elastic.co/t/multi-if-condition-on-filter-aggregation/279495 "2021-07-26T13:56:03Z")

</div>

Hi guys. I hope somebody can help to understand this problem I am having while trying to aggregate a field based on multi if condition. I have a field named message in which I have multiple events coming to. for exampl…

---

## [Read logs stored using Enterprise Semantic Logging format](https://discuss.elastic.co/t/read-logs-stored-using-enterprise-semantic-logging-format/46449)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 9\
**Last updated:** [April 7, 2016, 5:45am UTC](https://discuss.elastic.co/t/read-logs-stored-using-enterprise-semantic-logging-format/46449 "2016-04-07T05:45:14Z")

</div>

We are using Semantic Logging mechanism to log our service request and response in physical files. Is there a existing GROK Pattern to pull my logs in a good way ? OR Any other efficient way to read these logs? Event…

---

## [Trigger In elastic search](https://discuss.elastic.co/t/trigger-in-elastic-search/281458)

<div class="topic-metadata">

**Author:** [@ashurajchandra](https://discuss.elastic.co/u/ashurajchandra)\
**Replies:** 20\
**Last updated:** [August 16, 2021, 10:41am UTC](https://discuss.elastic.co/t/trigger-in-elastic-search/281458 "2021-08-16T10:41:38Z")

</div>

I'm working in startup and I got the task of writing trigger for error logs , but not when i'm using PUT \_watcher/watch/diagnostic\_monitor { "metadata" : { "color" : "red" }, "trigger" : { "schedule" : {…

---

## [Having issues parsing time in CEF](https://discuss.elastic.co/t/having-issues-parsing-time-in-cef/291072)

<div class="topic-metadata">

**Author:** [@harwinds](https://discuss.elastic.co/u/harwinds)\
**Replies:** 15\
**Last updated:** [October 24, 2023, 8:54pm UTC](https://discuss.elastic.co/t/having-issues-parsing-time-in-cef/291072 "2023-10-24T20:54:58Z")

</div>

Hi all, I'm ingesting ExtraHop Reveal X https://www.extrahop.com/products/security/ logs using Fleet Managed Elastic Agent Integration "CEF" using the SYSLOG input over UDP. Most of the fields are being extracted corre…

---

## [Unable to add geo\_point mapping with sub lat/lon properties](https://discuss.elastic.co/t/unable-to-add-geo-point-mapping-with-sub-lat-lon-properties/194941)

<div class="topic-metadata">

**Author:** [@r0bot85](https://discuss.elastic.co/u/r0bot85)\
**Replies:** 9\
**Last updated:** [August 19, 2019, 3:46pm UTC](https://discuss.elastic.co/t/unable-to-add-geo-point-mapping-with-sub-lat-lon-properties/194941 "2019-08-19T15:46:36Z")

</div>

Hello, Hopefully this is an easy answer but not a stupid question. I am fairly new to the Elastick Stack in general but learning my way around. I am attempting to get a Coordinate Map visualization using the GeoIP data…

---

## [APM tracing with ZUUL (Netflix OSS)](https://discuss.elastic.co/t/apm-tracing-with-zuul-netflix-oss/198838)

<div class="topic-metadata">

**Author:** [@pabloborh](https://discuss.elastic.co/u/pabloborh)\
**Replies:** 11\
**Last updated:** [September 16, 2019, 11:48am UTC](https://discuss.elastic.co/t/apm-tracing-with-zuul-netflix-oss/198838 "2019-09-16T11:48:03Z")

</div>

Kibana version: 7.0.1 Elasticsearch version: 7.0.1 APM Server version: 7.0.1 APM Agent language and version: apm agent 1.7.0 on java 10 I have some micro-services with netflix OSS service. When I use ZUUL the APM ca…

---

## [Issue with Ruby and logstash-input-imap](https://discuss.elastic.co/t/issue-with-ruby-and-logstash-input-imap/134935)

<div class="topic-metadata">

**Author:** [@Alexa](https://discuss.elastic.co/u/Alexa)\
**Replies:** 10\
**Last updated:** [June 7, 2018, 1:33pm UTC](https://discuss.elastic.co/t/issue-with-ruby-and-logstash-input-imap/134935 "2018-06-07T13:33:35Z")

</div>

Afer configuring the impa plugin on logstash and running the following command: bin/logstash -f email\_log.conf --path.data /var/lib/logstash/imap --config.reload.automatic I get the following error: \[ERROR\] 2018-06-06…

---

## [Moving applications logs to Elastic Observability](https://discuss.elastic.co/t/moving-applications-logs-to-elastic-observability/305409)

<div class="topic-metadata">

**Author:** [@michael\_kot](https://discuss.elastic.co/u/michael_kot)\
**Replies:** 15\
**Last updated:** [August 17, 2022, 9:00am UTC](https://discuss.elastic.co/t/moving-applications-logs-to-elastic-observability/305409 "2022-08-17T09:00:13Z")

</div>

Hello, Our team is developing a product - an application for e-commerce. This application has logs that are stored in the file system and displayed in the admin panel of this application. So any admin user can go to th…

---

## [Kibana output port not accepted in filebeat.yml](https://discuss.elastic.co/t/kibana-output-port-not-accepted-in-filebeat-yml/206865)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 14\
**Last updated:** [November 11, 2019, 8:45am UTC](https://discuss.elastic.co/t/kibana-output-port-not-accepted-in-filebeat-yml/206865 "2019-11-11T08:45:11Z")

</div>

I am trying to use filebeats to ingest logs and send them to Kibana. Here is my filebeat.yml file filebeat: inputs: - paths: - /home/mehak/Downloads/Dispatcher-ExtTicketId-24748775/Dispstcher-ExtTicketId-24748775/lo…

---

## [Lucene 4.0](https://discuss.elastic.co/t/lucene-4-0/9319)

<div class="topic-metadata">

**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\
**Replies:** 25\
**Last updated:** [March 6, 2013, 11:50am UTC](https://discuss.elastic.co/t/lucene-4-0/9319 "2013-03-06T11:50:14Z")

</div>

Heya fellows, Lucene 4.0 is out the door, wanted to update you all about how we plan to upgrade to it on elasticsearch. The plan is to first release 0.20 version still using Lucene 3.6.x, this should happen in the…

---

## [Kibana 7.17 dashboard URL in iframe sid cookie getting rejected by browser](https://discuss.elastic.co/t/kibana-7-17-dashboard-url-in-iframe-sid-cookie-getting-rejected-by-browser/303523)

<div class="topic-metadata">

**Author:** [@homesh\_joshi](https://discuss.elastic.co/u/homesh_joshi)\
**Replies:** 9\
**Last updated:** [May 12, 2022, 6:16am UTC](https://discuss.elastic.co/t/kibana-7-17-dashboard-url-in-iframe-sid-cookie-getting-rejected-by-browser/303523 "2022-05-12T06:16:21Z")

</div>

Hi, I am trying to embed kibana dashboard in to another URL. My kibana URL is dashboard.example.com My other URL is reports.example.com (SSL enabled) My kibana is behind apache reverse proxy ( SSL is enabled only on…

---

## [Possbile Kibana bug for Logstash monitoring](https://discuss.elastic.co/t/possbile-kibana-bug-for-logstash-monitoring/81166)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 12\
**Last updated:** [April 11, 2017, 9:14pm UTC](https://discuss.elastic.co/t/possbile-kibana-bug-for-logstash-monitoring/81166 "2017-04-11T21:14:24Z")

</div>

I noticed that the Monitoring page for Logstash seems to have datas that are not a proper sum of the values of the individual nodes. I have attached screenshots. We are running 4 Logstash nodes, and they should be seei…

---

## [Workplace Search finds all documents only based on their metadata, not based on their content](https://discuss.elastic.co/t/workplace-search-finds-all-documents-only-based-on-their-metadata-not-based-on-their-content/255314)

<div class="topic-metadata">

**Author:** [@SloMot](https://discuss.elastic.co/u/SloMot)\
**Replies:** 11\
**Last updated:** [February 13, 2021, 2:31pm UTC](https://discuss.elastic.co/t/workplace-search-finds-all-documents-only-based-on-their-metadata-not-based-on-their-content/255314 "2021-02-13T14:31:39Z")

</div>

Hi, I´m new to Elastic and started a test in the Elastic Cloud with Workplace Search in combination with MS OneDrive. The goal is to use full text search on PDF and office files (DOCX, PPTX, XLSX). The installation on …

---

## [How to Install multiple logstash on different computer?](https://discuss.elastic.co/t/how-to-install-multiple-logstash-on-different-computer/157832)

<div class="topic-metadata">

**Author:** [@aabababba](https://discuss.elastic.co/u/aabababba)\
**Replies:** 14\
**Last updated:** [November 26, 2018, 9:42am UTC](https://discuss.elastic.co/t/how-to-install-multiple-logstash-on-different-computer/157832 "2018-11-26T09:42:32Z")

</div>

all the filebeat client out put to multiple logstash,then all the logstash out put to one elasticsearch?

---

## [Use common field to filter 2 indexes](https://discuss.elastic.co/t/use-common-field-to-filter-2-indexes/277677)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 10\
**Last updated:** [July 17, 2021, 5:44pm UTC](https://discuss.elastic.co/t/use-common-field-to-filter-2-indexes/277677 "2021-07-17T17:44:11Z")

</div>

I'm new to Lens and this is what I'm hoping to accomplish I have one index that contains transaction request information from clients and another index that contains the transaction response information for those client…

---

## [How to upgrade my ElasticSearch](https://discuss.elastic.co/t/how-to-upgrade-my-elasticsearch/242036)

<div class="topic-metadata">

**Author:** [@Felipe](https://discuss.elastic.co/u/Felipe)\
**Replies:** 11\
**Last updated:** [July 24, 2020, 1:08am UTC](https://discuss.elastic.co/t/how-to-upgrade-my-elasticsearch/242036 "2020-07-24T01:08:31Z")

</div>

Hey gus, hope everybody is doing good! I'm having a problem to upgrade my ES cluster and i'm really lost on how many nodes do i need, their role, their hardware. Right now, i have 2 nodes which one of them is Master Dat…

---

## [Errors in metric beat log](https://discuss.elastic.co/t/errors-in-metric-beat-log/147918)

<div class="topic-metadata">

**Author:** [@Ihjaz](https://discuss.elastic.co/u/Ihjaz)\
**Replies:** 11\
**Last updated:** [September 14, 2018, 11:48am UTC](https://discuss.elastic.co/t/errors-in-metric-beat-log/147918 "2018-09-14T11:48:59Z")

</div>

Hi, I'm running Metricbeat 6.2.2-1 on RHEL 7.5 with the following kernel version. # uname -r -v 3.10.0-862.11.6.el7.x86\_64 #1 SMP Fri Aug 10 16:55:11 UTC 2018 I'm seeing the below errors in metricbeat log. 2018-09-0…

---

## [Elastic does not see the difference between phrases in search](https://discuss.elastic.co/t/elastic-does-not-see-the-difference-between-phrases-in-search/142032)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 11\
**Last updated:** [July 29, 2018, 6:19pm UTC](https://discuss.elastic.co/t/elastic-does-not-see-the-difference-between-phrases-in-search/142032 "2018-07-29T18:19:49Z")

</div>

I search for "akg b 6200" and it returns record with "ghj b 7876", "nma b987"... and so on. Searching engine works in this product?

---

## [Grok pattern works but not applied on Kibana](https://discuss.elastic.co/t/grok-pattern-works-but-not-applied-on-kibana/218752)

<div class="topic-metadata">

**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\
**Replies:** 10\
**Last updated:** [February 17, 2020, 9:04am UTC](https://discuss.elastic.co/t/grok-pattern-works-but-not-applied-on-kibana/218752 "2020-02-17T09:04:22Z")

</div>

Hello, I have an issue I try to fix for a couple of days, without success. I need to grok the message field (they don't have the same syntax) from my Kibana but it fails. I created my grok filter, which works on Grok …

---

## [gitIgnore for storing test elasticsearch instance in git](https://discuss.elastic.co/t/gitignore-for-storing-test-elasticsearch-instance-in-git/71888)

<div class="topic-metadata">

**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\
**Replies:** 15\
**Last updated:** [January 18, 2017, 11:14pm UTC](https://discuss.elastic.co/t/gitignore-for-storing-test-elasticsearch-instance-in-git/71888 "2017-01-18T23:14:29Z")

</div>

I have a copy of elasticsearch in my project where I spin it up run tests and shut it down. I'm wonder what would be some good things to put into the gitignore so I don't store logs and other things. Thanks, Jonatha…

---

## [6.5.0 JVM Crash](https://discuss.elastic.co/t/6-5-0-jvm-crash/161620)

<div class="topic-metadata">

**Author:** [@bitva77](https://discuss.elastic.co/u/bitva77)\
**Replies:** 9\
**Last updated:** [January 21, 2019, 12:43am UTC](https://discuss.elastic.co/t/6-5-0-jvm-crash/161620 "2019-01-21T00:43:49Z")

</div>

Hi. Running Elasticsearch 6.5.0 in Docker. Been upgrading our environment and so replacing Elastic servers. Everything was going fine until one of our servers started JVM crashing. Here's the JVM output: https://gis…

---

## [How to prevent duplicate and has null value documents with fingerprint](https://discuss.elastic.co/t/how-to-prevent-duplicate-and-has-null-value-documents-with-fingerprint/278150)

<div class="topic-metadata">

**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\
**Replies:** 16\
**Last updated:** [July 13, 2021, 10:33am UTC](https://discuss.elastic.co/t/how-to-prevent-duplicate-and-has-null-value-documents-with-fingerprint/278150 "2021-07-13T10:33:20Z")

</div>

my csv file =\> name,surname,age,email,phone Harry,Potter,18,NULL,NULL Harry,Potter,NULL,harrypotter@gmail.com,+955555555 Harry,Potter,NULL,harrypotter@gmail.com,NULL Harry,Potter,NULL,NULL,+955555555 When I want to dete…

---

## [Elastic ML job errors](https://discuss.elastic.co/t/elastic-ml-job-errors/295244)

<div class="topic-metadata">

**Author:** [@stefan.elser](https://discuss.elastic.co/u/stefan.elser)\
**Replies:** 9\
**Last updated:** [February 3, 2022, 11:10pm UTC](https://discuss.elastic.co/t/elastic-ml-job-errors/295244 "2022-02-03T23:10:38Z")

</div>

Hi! I'm new here - working with my team to explore the ML offerings in a trial license and I'm running into some errors and questions. Can Anomaly Detection model output be viewed and used in Kibana visualizations? I …

---

## [Change AppSearch Query](https://discuss.elastic.co/t/change-appsearch-query/268413)

<div class="topic-metadata">

**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Replies:** 9\
**Last updated:** [April 22, 2021, 10:09am UTC](https://discuss.elastic.co/t/change-appsearch-query/268413 "2021-04-22T10:09:33Z")

</div>

Hello I am using Appsearch to power search for an application, I know that App search take care of the mapping & analyzer, and also the search query, when doing some inspection, i could see the kind of the search query …

---

## [Logstash: input file plugin and tcp plugins](https://discuss.elastic.co/t/logstash-input-file-plugin-and-tcp-plugins/273058)

<div class="topic-metadata">

**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\
**Replies:** 31\
**Last updated:** [May 20, 2021, 7:13pm UTC](https://discuss.elastic.co/t/logstash-input-file-plugin-and-tcp-plugins/273058 "2021-05-20T19:13:40Z")

</div>

I have 4 pipelines. 3 using tcp plugin and 1 using file plugin. pipeline with input file plugin works fine independently, but when i add 3 other tcp plugin pipeline, the input file plugin pipeline stops running (after s…

---

## [Elasticsearch returns different values from DSL and SQL query](https://discuss.elastic.co/t/elasticsearch-returns-different-values-from-dsl-and-sql-query/259984)

<div class="topic-metadata">

**Author:** [@pkshara](https://discuss.elastic.co/u/pkshara)\
**Replies:** 9\
**Last updated:** [January 11, 2021, 10:53am UTC](https://discuss.elastic.co/t/elasticsearch-returns-different-values-from-dsl-and-sql-query/259984 "2021-01-11T10:53:18Z")

</div>

I am trying to query index using dsl and sql method, while comparing the results i found that the values are different.Below are the query and required details. DSL query and result SQL query and result Result f…

---

## [Integration sophos Firewall with elastic](https://discuss.elastic.co/t/integration-sophos-firewall-with-elastic/329454)

<div class="topic-metadata">

**Author:** [@Ahmad\_Shrateh](https://discuss.elastic.co/u/Ahmad_Shrateh)\
**Replies:** 10\
**Last updated:** [April 9, 2023, 1:17pm UTC](https://discuss.elastic.co/t/integration-sophos-firewall-with-elastic/329454 "2023-04-09T13:17:26Z")

</div>

Dear there. Im trying to connect sophos firewall with elastic but i don't receive any logs. Im deployed an agent with sophos integration, and i followed the instructions on the elastic, i add my firewall ip instead …

---

## [ECE RAM to Storage Ratio with Restful API](https://discuss.elastic.co/t/ece-ram-to-storage-ratio-with-restful-api/181706)

<div class="topic-metadata">

**Author:** [@apaulsen](https://discuss.elastic.co/u/apaulsen)\
**Replies:** 10\
**Last updated:** [June 4, 2019, 7:04am UTC](https://discuss.elastic.co/t/ece-ram-to-storage-ratio-with-restful-api/181706 "2019-06-04T07:04:13Z")

</div>

Hi, my question was partly answered already in https://discuss.elastic.co/t/ece-ram-to-storage-ratio/101878 Adding this in advanced configuration via UI it works fine "overrides": { "quota": { "fs\_multiplier":…

---

## [How to read a file from JMETER in node.js and index into elasticsearch?](https://discuss.elastic.co/t/how-to-read-a-file-from-jmeter-in-node-js-and-index-into-elasticsearch/55401)

<div class="topic-metadata">

**Author:** [@jeevan\_jeevanreddy](https://discuss.elastic.co/u/jeevan_jeevanreddy)\
**Replies:** 10\
**Last updated:** [July 14, 2016, 6:58am UTC](https://discuss.elastic.co/t/how-to-read-a-file-from-jmeter-in-node-js-and-index-into-elasticsearch/55401 "2016-07-14T06:58:24Z")

</div>

I am using node.js to index a file into elasticsearch. i am trying to give input as a file from jmeter? i.e.., as req.file but it giving output as undefined. can anyone specify the better solution?

---

## [Elasticsearch service not running after downgrade from 7.16.2 to old version 6.4.2](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666)

<div class="topic-metadata">

**Author:** [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Replies:** 14\
**Last updated:** [February 21, 2022, 4:34pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666 "2022-02-21T16:34:05Z")

</div>

Hi Everyone, We were trying to upgrade our Elasticsearch from the 6.4.2 version to 7.16.2 due to log4j vulnerability but after the upgrade directly from 6.4.2 to 7.16.2 the Elasticsearch service was not running so we tr…

---

## [Logstash enable ssl to connect ElasticSearch but cannot run logstash and get error](https://discuss.elastic.co/t/logstash-enable-ssl-to-connect-elasticsearch-but-cannot-run-logstash-and-get-error/226037)

<div class="topic-metadata">

**Author:** [@chauncy1](https://discuss.elastic.co/u/chauncy1)\
**Replies:** 12\
**Last updated:** [April 2, 2020, 8:53am UTC](https://discuss.elastic.co/t/logstash-enable-ssl-to-connect-elasticsearch-but-cannot-run-logstash-and-get-error/226037 "2020-04-02T08:53:49Z")

</div>

Hi， I have configured the x\_pack of ElasticSearch and SSL of ElasticSearch and Kibana. But when I try to config logstash to connect ElasticSearch with SSL, I got some error. Version: Logstash7.3.2, ElasticSearch7.3.2,…

---

## [Syslog Output only transferring the "message" field](https://discuss.elastic.co/t/syslog-output-only-transferring-the-message-field/353396)

<div class="topic-metadata">

**Author:** [@Grimlock](https://discuss.elastic.co/u/Grimlock)\
**Replies:** 15\
**Last updated:** [January 31, 2025, 8:31pm UTC](https://discuss.elastic.co/t/syslog-output-only-transferring-the-message-field/353396 "2025-01-31T20:31:37Z")

</div>

Hi, I am using the Syslog Output plugin to transfer data to another host: syslog { host =\> "IP" port =\> Port } However, the target host only receives the content of the message fields. My input looks like this: …

---

## [@timestamp in kibana doesn’t match browser time(local time)](https://discuss.elastic.co/t/timestamp-in-kibana-doesn-t-match-browser-time-local-time/120976)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 15\
**Last updated:** [February 22, 2018, 4:20pm UTC](https://discuss.elastic.co/t/timestamp-in-kibana-doesn-t-match-browser-time-local-time/120976 "2018-02-22T16:20:42Z")

</div>

Hi everyone, I input netflow data to ES through nprobe(a netflow collector), but I found that the @timestamp doesn't match the browser time. It stays on 2018/1/20 for example January 20st 2018, 16:46:00.000 . I think t…

---

## [A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/251913)

<div class="topic-metadata">

**Author:** [@sukumar.koganti](https://discuss.elastic.co/u/sukumar.koganti)\
**Replies:** 12\
**Last updated:** [October 14, 2020, 5:20pm UTC](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/251913 "2020-10-14T17:20:08Z")

</div>

Hi Team, I am trying to read my Sql Server table from the DB and here is my .conf file, when i am trying to read the table through logstash i am getting the below error. input { jdbc { jdbc\_driver\_library =\> "C:/Pr…

---

## [Not able to compare two loops in a chain query](https://discuss.elastic.co/t/not-able-to-compare-two-loops-in-a-chain-query/135488)

<div class="topic-metadata">

**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\
**Replies:** 12\
**Last updated:** [June 22, 2018, 2:04pm UTC](https://discuss.elastic.co/t/not-able-to-compare-two-loops-in-a-chain-query/135488 "2018-06-22T14:04:47Z")

</div>

Hi i am trying to achieve below I have two different index and i want to compare two fields values using loop and get result if any of the IP address value matches for example :- Index 1: threatintel fields :- 1. in…

[Previous page](https://discuss.elastic.co/top.md?page=155&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=157&per_page=50&period=all)
