# Top

**URL:** https://discuss.elastic.co/top.md?page=157&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 158

---

## [Not able to configure Alerts in Kibana](https://discuss.elastic.co/t/not-able-to-configure-alerts-in-kibana/248765)

<div class="topic-metadata">

**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\
**Replies:** 10\
**Last updated:** [September 16, 2020, 9:04am UTC](https://discuss.elastic.co/t/not-able-to-configure-alerts-in-kibana/248765 "2020-09-16T09:04:44Z")

</div>

Hi, Can someone please help me to enable Alerts and Action option in Kibana as showing Additional setup required, I tried few settings but didn't work. If anyone can provide me the configuration which needs to be chang…

---

## [What type is the "port" field in Heartbeat output?](https://discuss.elastic.co/t/what-type-is-the-port-field-in-heartbeat-output/108586)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 13\
**Last updated:** [November 30, 2017, 3:09am UTC](https://discuss.elastic.co/t/what-type-is-the-port-field-in-heartbeat-output/108586 "2017-11-30T03:09:21Z")

</div>

I think what I'm seeing is that (1) for a type HTTP monitor with the port specified in the "urls" the "port" field in the Elasticsearch document is a string (2) for a type TCP monitor with the port specified in the "po…

---

## [Startup issues with ES 1.3.5](https://discuss.elastic.co/t/startup-issues-with-es-1-3-5/21068)

<div class="topic-metadata">

**Author:** [@Jeff\_Keller](https://discuss.elastic.co/u/Jeff_Keller)\
**Replies:** 21\
**Last updated:** [December 29, 2014, 3:26pm UTC](https://discuss.elastic.co/t/startup-issues-with-es-1-3-5/21068 "2014-12-29T15:26:52Z")

</div>

ES Version: 1.3.5 OS: Ubuntu 14.04.1 LTS Machine: 2 Intel(R) Xeon(R) CPU E5-2670 v2 @ 2.50GHz, 8 GB RAM at AWS master (ip-10-0-1-18), 2 data nodes (ip-10-0-1-19, ip-10-0-1-20) \*After upgrading from ES …

---

## [Correlation/updation of document score on timestamp, during query time in kibana search](https://discuss.elastic.co/t/correlation-updation-of-document-score-on-timestamp-during-query-time-in-kibana-search/88421)

<div class="topic-metadata">

**Author:** [@Rahul\_Lao](https://discuss.elastic.co/u/Rahul_Lao)\
**Replies:** 11\
**Last updated:** [June 13, 2017, 1:38pm UTC](https://discuss.elastic.co/t/correlation-updation-of-document-score-on-timestamp-during-query-time-in-kibana-search/88421 "2017-06-13T13:38:00Z")

</div>

Hello, In Kibana say i am able to populate data using a Tile Map as heat map. Consider below few lines of data that I index in elastic search 3078.48,-96.7991,33.0579,148.39,109.44,0.0,a808c4,,false,1.496753069E9,2…

---

## [Dynamic xpath creation by parsing fields in Xml filter](https://discuss.elastic.co/t/dynamic-xpath-creation-by-parsing-fields-in-xml-filter/163363)

<div class="topic-metadata">

**Author:** [@TEJASWI\_CHUNDURI](https://discuss.elastic.co/u/TEJASWI_CHUNDURI)\
**Replies:** 15\
**Last updated:** [January 8, 2019, 7:09pm UTC](https://discuss.elastic.co/t/dynamic-xpath-creation-by-parsing-fields-in-xml-filter/163363 "2019-01-08T19:09:45Z")

</div>

Below is the sample xml \<xml-content\> \<url-group\> \<item id="-971421122"\> \<name\>http://10.115.88.123:88/category/view\</name\> \</item\> \</url-group\> \<issue-group total="1"\> \<item id="-5287023434033995264…

---

## [Jira Connector EMail and API-Token](https://discuss.elastic.co/t/jira-connector-email-and-api-token/240329)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 17\
**Last updated:** [October 7, 2020, 9:53am UTC](https://discuss.elastic.co/t/jira-connector-email-and-api-token/240329 "2020-10-07T09:53:09Z")

</div>

Hi, to create a Jira connector in Alerts and Actions, Email and API token are required fields. I can't find any information, how to configure this in Jira. Do I have to define an application in Jira ? But no email is ne…

---

## [Difference between enable Module and fetching logs directly](https://discuss.elastic.co/t/difference-between-enable-module-and-fetching-logs-directly/274177)

<div class="topic-metadata">

**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\
**Replies:** 14\
**Last updated:** [June 8, 2021, 3:33pm UTC](https://discuss.elastic.co/t/difference-between-enable-module-and-fetching-logs-directly/274177 "2021-06-08T15:33:57Z")

</div>

Hi, I've recently enabled the IIS Module on filebeat. Once the module enabled and configured, i've looked at the IIS Filebeat dashboard. unfortunately there was no data to see. After some research, i've found this webs…

---

## [Winlogbeat speeding up clocks on windows servers by 1 second every minute](https://discuss.elastic.co/t/winlogbeat-speeding-up-clocks-on-windows-servers-by-1-second-every-minute/135175)

<div class="topic-metadata">

**Author:** [@Darren\_Stokes](https://discuss.elastic.co/u/Darren_Stokes)\
**Replies:** 14\
**Last updated:** [June 18, 2018, 2:03pm UTC](https://discuss.elastic.co/t/winlogbeat-speeding-up-clocks-on-windows-servers-by-1-second-every-minute/135175 "2018-06-18T14:03:25Z")

</div>

Today I started to run winlogbeat on a number of Windows 2008 R2 servers and was succesfully transferring windows eventlogs to my elk stack without any problems. We ran into a problem later on in the day with time acros…

---

## [Error when running kibana 7.5.1 - built\_assets/dlls not found](https://discuss.elastic.co/t/error-when-running-kibana-7-5-1-built-assets-dlls-not-found/222087)

<div class="topic-metadata">

**Author:** [@rokubato](https://discuss.elastic.co/u/rokubato)\
**Replies:** 12\
**Last updated:** [March 16, 2020, 3:20pm UTC](https://discuss.elastic.co/t/error-when-running-kibana-7-5-1-built-assets-dlls-not-found/222087 "2020-03-16T15:20:59Z")

</div>

Hi, I'm using Kibana 7.5.1 and install it using "yarn kbn bootstrap" and running it using "yarn start". It runs OK and works fine (BTW I am using yarn 1.21.1 and node 10.15.2) The issue is when I run it using ./bin/ki…

---

## [Использование файлов из output path, для восстановления удаленного индекса](https://discuss.elastic.co/t/output-path/210727)

<div class="topic-metadata">

**Author:** [@alex.tregub](https://discuss.elastic.co/u/alex.tregub)\
**Replies:** 9\
**Last updated:** [December 12, 2019, 4:28pm UTC](https://discuss.elastic.co/t/output-path/210727 "2019-12-12T16:28:54Z")

</div>

Здравствуйте! Случайно был удален индекс, который не бэкапился. Но все данные, которые отправлялись в эластик, в этот индекс, так же писались в файлы, с помощью конструкции в logstash: output { ... file { path =\> "/…

---

## [How to create a virutalization based on filter](https://discuss.elastic.co/t/how-to-create-a-virutalization-based-on-filter/33150)

<div class="topic-metadata">

**Author:** [@SureshSala](https://discuss.elastic.co/u/SureshSala)\
**Replies:** 9\
**Last updated:** [October 31, 2015, 11:34am UTC](https://discuss.elastic.co/t/how-to-create-a-virutalization-based-on-filter/33150 "2015-10-31T11:34:06Z")

</div>

I have add hostname in all the logs, I want create a dashboard which shows No.of logs per hostname.

---

## [Multiple patterns regrouping in one line index](https://discuss.elastic.co/t/multiple-patterns-regrouping-in-one-line-index/131073)

<div class="topic-metadata">

**Author:** [@Hamza\_Dhahri](https://discuss.elastic.co/u/Hamza_Dhahri)\
**Replies:** 17\
**Last updated:** [May 11, 2018, 3:29pm UTC](https://discuss.elastic.co/t/multiple-patterns-regrouping-in-one-line-index/131073 "2018-05-11T15:29:41Z")

</div>

\< 2018-02-07T10:42:02,831 \[ ExtractDwhData\] \[INFO \] Solife :: Tools :: DWH :: ITK DWH - version : 2.6.0-SNAPSHOT - build #265 on 2018-01-04 08:22:32 2018-02-07T10:42:02,832 \[ ExtractDwhData\] \[INFO \] Starting DWH Data Ex…

---

## [Macos M1 Ventura 13.0.1 Elastic agent install fail](https://discuss.elastic.co/t/macos-m1-ventura-13-0-1-elastic-agent-install-fail/319262)

<div class="topic-metadata">

**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\
**Replies:** 9\
**Last updated:** [December 28, 2022, 5:27pm UTC](https://discuss.elastic.co/t/macos-m1-ventura-13-0-1-elastic-agent-install-fail/319262 "2022-12-28T17:27:57Z")

</div>

I installed the elastic agent on macos Ventura 13.0.1 using the command line and the installation failed showing： panic: getwd: invalid argument goroutine 1 \[running\]: github.com/elastic/elastic-agent/internal/pkg/age…

---

## [Shard failure, RemoteTransportException \[search/phase/fetch/id\]... IllegalArgumentException](https://discuss.elastic.co/t/shard-failure-remotetransportexception-search-phase-fetch-id-illegalargumentexception/10269)

<div class="topic-metadata">

**Author:** [@Ignacio\_Zendejas](https://discuss.elastic.co/u/Ignacio_Zendejas)\
**Replies:** 9\
**Last updated:** [January 10, 2013, 3:31am UTC](https://discuss.elastic.co/t/shard-failure-remotetransportexception-search-phase-fetch-id-illegalargumentexception/10269 "2013-01-10T03:31:17Z")

</div>

Hi - When doing searches against an index, we get shard failures as shown in the query result below. {"took" : 118, "timed\_out" : false, "\_shards" : { "total" : 32, "successful" : 31, "failed…

---

## [Fail to start Kibana 7.16.2](https://discuss.elastic.co/t/fail-to-start-kibana-7-16-2/293698)

<div class="topic-metadata">

**Author:** [@chilo](https://discuss.elastic.co/u/chilo)\
**Replies:** 10\
**Last updated:** [January 26, 2022, 12:08am UTC](https://discuss.elastic.co/t/fail-to-start-kibana-7-16-2/293698 "2022-01-26T00:08:28Z")

</div>

I have Elasticsearch and kibana running on version 7.9.2 for a very long time without issues. Lately, when I started to deploy Elasticsearch and kibana 7.16.2, I see the 403 error below: {"type":"log","@timestamp":"20…

---

## [Could not add document](https://discuss.elastic.co/t/could-not-add-document/260023)

<div class="topic-metadata">

**Author:** [@cdwmhcc](https://discuss.elastic.co/u/cdwmhcc)\
**Replies:** 14\
**Last updated:** [January 8, 2021, 12:07am UTC](https://discuss.elastic.co/t/could-not-add-document/260023 "2021-01-08T00:07:21Z")

</div>

https://streamable.com/x9svr1

---

## [In-between Query for IP data type](https://discuss.elastic.co/t/in-between-query-for-ip-data-type/242882)

<div class="topic-metadata">

**Author:** [@shankarlogs](https://discuss.elastic.co/u/shankarlogs)\
**Replies:** 12\
**Last updated:** [July 30, 2020, 9:19am UTC](https://discuss.elastic.co/t/in-between-query-for-ip-data-type/242882 "2020-07-30T09:19:14Z")

</div>

I need to understand how to create in-between query for IP datatype. I need a specific example for IPv6 addresses

---

## [Can I install ELastic Search twice as a windows service?](https://discuss.elastic.co/t/can-i-install-elastic-search-twice-as-a-windows-service/280022)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 10\
**Last updated:** [August 8, 2021, 3:22pm UTC](https://discuss.elastic.co/t/can-i-install-elastic-search-twice-as-a-windows-service/280022 "2021-08-08T15:22:00Z")

</div>

For reasons that may be uninteresting to many, I find myself needing to run two instances of ElasticSearch on the same Windows machine. I have unzipped the 7.13.4 archive into two separate directories and set them up and…

---

## [How to implement proximity search in app search](https://discuss.elastic.co/t/how-to-implement-proximity-search-in-app-search/203966)

<div class="topic-metadata">

**Author:** [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)\
**Replies:** 10\
**Last updated:** [October 28, 2019, 11:12am UTC](https://discuss.elastic.co/t/how-to-implement-proximity-search-in-app-search/203966 "2019-10-28T11:12:21Z")

</div>

How to implement proximity search in app search?

---

## [\[search\_phase\_execution\_exception Caused by: es\_rejected\_execution\_exception: rejected execution](https://discuss.elastic.co/t/search-phase-execution-exception-caused-by-es-rejected-execution-exception-rejected-execution/342081)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 9\
**Last updated:** [September 14, 2023, 4:39pm UTC](https://discuss.elastic.co/t/search-phase-execution-exception-caused-by-es-rejected-execution-exception-rejected-execution/342081 "2023-09-14T16:39:55Z")

</div>

I am using grafana k6 stress tool to generate some load in elastic and sooner or later i always get this error es\_rejected\_execution\_exception. All are search operations to get 30 docs. On small indices of 20-30mb it …

---

## [Time difference in kibana](https://discuss.elastic.co/t/time-difference-in-kibana/131217)

<div class="topic-metadata">

**Author:** [@Eran\_Mor](https://discuss.elastic.co/u/Eran_Mor)\
**Replies:** 9\
**Last updated:** [May 14, 2018, 8:07pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217 "2018-05-14T20:07:19Z")

</div>

Hello, I have 2 elastic search clusters serving 4 environment. 2 environments are hosted in PST and 2 environments are hosted in Sydney AU time zone. 3 of the environment are pointed to first cluster and 1 to a differ…

---

## [Data Loss](https://discuss.elastic.co/t/data-loss/15741)

<div class="topic-metadata">

**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Replies:** 26\
**Last updated:** [February 14, 2014, 8:53pm UTC](https://discuss.elastic.co/t/data-loss/15741 "2014-02-14T20:53:53Z")

</div>

I've read some blogs and some email groups where users have indicated they have had data loss. In some cases user is able to recover using the source. I am wondering what are the common reasons this could happen due to…

---

## [Inconsistent responses from aggregations (ES1.0.0RC1)](https://discuss.elastic.co/t/inconsistent-responses-from-aggregations-es1-0-0rc1/15528)

<div class="topic-metadata">

**Author:** [@thanodnl](https://discuss.elastic.co/u/thanodnl)\
**Replies:** 26\
**Last updated:** [February 7, 2014, 1:17pm UTC](https://discuss.elastic.co/t/inconsistent-responses-from-aggregations-es1-0-0rc1/15528 "2014-02-07T13:17:19Z")

</div>

Hi, I am tinkering with elasticsearch 1.0.0RC1 for a bit. Especially the part of aggregations. When looking closer to the responses of the aggregations I noticed the numbers fluctuated all the time. I have an i…

---

## [Conditional topics not work: since document\_type is deprecated, how to use %{\[type\]} in kafka ouput?](https://discuss.elastic.co/t/conditional-topics-not-work-since-document-type-is-deprecated-how-to-use-type-in-kafka-ouput/109499)

<div class="topic-metadata">

**Author:** [@oldcodeoberyn](https://discuss.elastic.co/u/oldcodeoberyn)\
**Replies:** 9\
**Last updated:** [December 19, 2017, 3:06pm UTC](https://discuss.elastic.co/t/conditional-topics-not-work-since-document-type-is-deprecated-how-to-use-type-in-kafka-ouput/109499 "2017-12-19T15:06:20Z")

</div>

anyway, this %{\[type\]} is still valid in the filebeat 6.0.0 docs. but it is not working in program. and when I use fields it is also not working for topics, e.g: filebeat.prospectors: ... fields: log\_topic: test1 ..…

---

## [Unable to install multi-node cluster - Skipping security auto configuration because this node is configured to bootstrap or to join a multi-node cluster, which is not supported., with exit code 80](https://discuss.elastic.co/t/unable-to-install-multi-node-cluster-skipping-security-auto-configuration-because-this-node-is-configured-to-bootstrap-or-to-join-a-multi-node-cluster-which-is-not-supported-with-exit-code-80/358229)

<div class="topic-metadata">

**Author:** [@jimmycricket](https://discuss.elastic.co/u/jimmycricket)\
**Replies:** 15\
**Last updated:** [May 9, 2024, 5:26pm UTC](https://discuss.elastic.co/t/unable-to-install-multi-node-cluster-skipping-security-auto-configuration-because-this-node-is-configured-to-bootstrap-or-to-join-a-multi-node-cluster-which-is-not-supported-with-exit-code-80/358229 "2024-05-09T17:26:40Z")

</div>

I am trying to perform the initial installation of a two node Elasticsearch cluster. This is on Ubuntu 22.04 with Elasticsearch version 8.13 installed via RPM. This is the contents of the file /etc/elasticsearch/elastic…

---

## [How to send data via Logstash](https://discuss.elastic.co/t/how-to-send-data-via-logstash/289947)

<div class="topic-metadata">

**Author:** [@smam](https://discuss.elastic.co/u/smam)\
**Replies:** 10\
**Last updated:** [November 30, 2021, 9:30am UTC](https://discuss.elastic.co/t/how-to-send-data-via-logstash/289947 "2021-11-30T09:30:13Z")

</div>

Hello, yes. This should be very common but I cannot send data to Elasticsearch-or I cannot find it there. Either way I am haven trouble using the data. What I am doing: Filebeat sends a collection of Log-Files to Logst…

---

## [Migration Plugin - How to change dynamic setting?](https://discuss.elastic.co/t/migration-plugin-how-to-change-dynamic-setting/85335)

<div class="topic-metadata">

**Author:** [@german23](https://discuss.elastic.co/u/german23)\
**Replies:** 9\
**Last updated:** [May 12, 2017, 8:48am UTC](https://discuss.elastic.co/t/migration-plugin-how-to-change-dynamic-setting/85335 "2017-05-12T08:48:14Z")

</div>

Hello, as we currently planning our upgrade from 2.4 to 5.x, we run into some kind of problem regarding our old indices. Index settings Replaced settings index.translog.flush\_threshold\_ops has been replaced by index.…

---

## [Unable to open Kibana 5.6.15 GUI](https://discuss.elastic.co/t/unable-to-open-kibana-5-6-15-gui/190283)

<div class="topic-metadata">

**Author:** [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\
**Replies:** 11\
**Last updated:** [July 13, 2019, 7:45pm UTC](https://discuss.elastic.co/t/unable-to-open-kibana-5-6-15-gui/190283 "2019-07-13T19:45:02Z")

</div>

Ihave installed ELK 5.6.15 & x-pack 5.6.15. After installation ,kibana GUI is not accessible. Below are the trace log in Kibana.log file. I have "xpack.security.audit.enabled" set to false explicitly in kibana.yml but…

---

## [Logstash-\* unable to fetch mapping in kibana](https://discuss.elastic.co/t/logstash-unable-to-fetch-mapping-in-kibana/103593)

<div class="topic-metadata">

**Author:** [@maddie0726](https://discuss.elastic.co/u/maddie0726)\
**Replies:** 11\
**Last updated:** [October 18, 2017, 4:47pm UTC](https://discuss.elastic.co/t/logstash-unable-to-fetch-mapping-in-kibana/103593 "2017-10-18T16:47:10Z")

</div>

I have Logstash Kibana and Elasticsearch (all version 5.6.2) configured and running on Windows Server 2012 R2, running through a remote desktop connection. I am working on my logstash config file to read data from a .txt…

---

## [Hot reload during Kibans plugin Dec?](https://discuss.elastic.co/t/hot-reload-during-kibans-plugin-dec/224541)

<div class="topic-metadata">

**Author:** [@tiburon\_security](https://discuss.elastic.co/u/tiburon_security)\
**Replies:** 12\
**Last updated:** [March 27, 2020, 8:49am UTC](https://discuss.elastic.co/t/hot-reload-during-kibans-plugin-dec/224541 "2020-03-27T08:49:11Z")

</div>

Hi all - is there a way to make the front-end / react hot reload during plugin development? Using the elastic & Kibans Dev environment hot reload only appears to work when the API portions of the project are modified, bu…

---

## [Scaling Logstash](https://discuss.elastic.co/t/scaling-logstash/90158)

<div class="topic-metadata">

**Author:** [@Rory](https://discuss.elastic.co/u/Rory)\
**Replies:** 9\
**Last updated:** [June 22, 2017, 8:40pm UTC](https://discuss.elastic.co/t/scaling-logstash/90158 "2017-06-22T20:40:30Z")

</div>

Hi All, We have a system where we have to rebuild an index every night which has 300 Million documents. Our source of truth is SQL Server and every night we want to build a new index. Our document size is about 2-3 KB.…

---

## [How to determine if one of master gone from cluster?](https://discuss.elastic.co/t/how-to-determine-if-one-of-master-gone-from-cluster/241171)

<div class="topic-metadata">

**Author:** [@byumov](https://discuss.elastic.co/u/byumov)\
**Replies:** 12\
**Last updated:** [July 27, 2020, 9:08am UTC](https://discuss.elastic.co/t/how-to-determine-if-one-of-master-gone-from-cluster/241171 "2020-07-27T09:08:35Z")

</div>

Hi! I have a clean and simple installation os ES: 9 nodes: 6 data and 3 masters(without data). I want to determine situation when one of masters gone for some reason(power off). How I can do it on 7 ES? I looked at /\_…

---

## [Double documents?](https://discuss.elastic.co/t/double-documents/248991)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 13\
**Last updated:** [October 1, 2020, 10:56am UTC](https://discuss.elastic.co/t/double-documents/248991 "2020-10-01T10:56:48Z")

</div>

Hi, For some reason, all documents end up twice in my indexes. and I do not have the slightest idea why... I mean... Even the doc\_id seems the same. Consider these 2: Both exactly the same. When I log this on the a…

---

## [Encoding issue depending on how logstash is started](https://discuss.elastic.co/t/encoding-issue-depending-on-how-logstash-is-started/317136)

<div class="topic-metadata">

**Author:** [@simon137](https://discuss.elastic.co/u/simon137)\
**Replies:** 10\
**Last updated:** [October 21, 2022, 9:32am UTC](https://discuss.elastic.co/t/encoding-issue-depending-on-how-logstash-is-started/317136 "2022-10-21T09:32:14Z")

</div>

Hello, I have two windows maschines, one is a Windows Server and one is a Standard Windows Desktop PC, both have the same elasticsearch (8.4.3) and the same logstash (8.4.3) installed with the same configuration and the…

---

## [Executing a command from Elasticsearch/kibana](https://discuss.elastic.co/t/executing-a-command-from-elasticsearch-kibana/275920)

<div class="topic-metadata">

**Author:** [@T1330](https://discuss.elastic.co/u/T1330)\
**Replies:** 10\
**Last updated:** [June 15, 2021, 10:08pm UTC](https://discuss.elastic.co/t/executing-a-command-from-elasticsearch-kibana/275920 "2021-06-15T22:08:16Z")

</div>

Could you please have any example that executing a command from Elasticsearch to another server etc. i.e. moving from file "C:/aaa/a111.txt" to "C:/bbb/a111.txt" or displaying a pop-up by command Elasticsearch-kibana …

---

## [Losing a session in a Canvas](https://discuss.elastic.co/t/losing-a-session-in-a-canvas/216095)

<div class="topic-metadata">

**Author:** [@Dennis\_Rietvink](https://discuss.elastic.co/u/Dennis_Rietvink)\
**Replies:** 9\
**Last updated:** [January 28, 2020, 3:53pm UTC](https://discuss.elastic.co/t/losing-a-session-in-a-canvas/216095 "2020-01-28T15:53:56Z")

</div>

Our Kibana has a canvas screen showing the uptime of various infrastructure components. Access to the portal is attained through single sign on handled by Keycloak OIDC. When we minimize the screen or go to other tabs an…

---

## [Use environment variable to control output](https://discuss.elastic.co/t/use-environment-variable-to-control-output/185052)

<div class="topic-metadata">

**Author:** [@nobound](https://discuss.elastic.co/u/nobound)\
**Replies:** 9\
**Last updated:** [June 11, 2019, 4:45pm UTC](https://discuss.elastic.co/t/use-environment-variable-to-control-output/185052 "2019-06-11T16:45:47Z")

</div>

Hi, From the logstash.conf, I want to control the output based on the environment variable. I have tried the following, but it does not work. I find the use of the environment variable is not consistent throughout the c…

---

## [Elastic cannot restore incremental snapshot in new cluster](https://discuss.elastic.co/t/elastic-cannot-restore-incremental-snapshot-in-new-cluster/268052)

<div class="topic-metadata">

**Author:** [@Adrian\_Birladeanu](https://discuss.elastic.co/u/Adrian_Birladeanu)\
**Replies:** 14\
**Last updated:** [March 25, 2021, 9:41am UTC](https://discuss.elastic.co/t/elastic-cannot-restore-incremental-snapshot-in-new-cluster/268052 "2021-03-25T09:41:27Z")

</div>

Hello. I have created an s3 repository and created a full snapshot and several incremental snapshots (though the data didn't change since the full snapshot was taken. I'm still working on the development infrastructure).…

---

## [Limiting Segment Memory Consumption](https://discuss.elastic.co/t/limiting-segment-memory-consumption/47319)

<div class="topic-metadata">

**Author:** [@atul](https://discuss.elastic.co/u/atul)\
**Replies:** 9\
**Last updated:** [April 14, 2016, 4:28am UTC](https://discuss.elastic.co/t/limiting-segment-memory-consumption/47319 "2016-04-14T04:28:21Z")

</div>

We have been running under constant memory pressure on our ES nodes. Upon analyzing it appears that segment is consuming more than 50% of the available heap. Is there a way to configure the amount of memory that can be u…

---

## [ES-5.2.1 server is continuously getting dead](https://discuss.elastic.co/t/es-5-2-1-server-is-continuously-getting-dead/75695)

<div class="topic-metadata">

**Author:** [@Yashpal\_Singh](https://discuss.elastic.co/u/Yashpal_Singh)\
**Replies:** 10\
**Last updated:** [March 8, 2017, 7:24am UTC](https://discuss.elastic.co/t/es-5-2-1-server-is-continuously-getting-dead/75695 "2017-03-08T07:24:41Z")

</div>

LOGS \[2017-02-20T08:55:20,322\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[abc\] fatal error in thread \[elasticsearch\[abc\]\[search\]\[T#7\]\], exiting java.lang.StackOverflowError: null at org.apache.lucene.…

---

## [Filebeat AWS Module S3 input error queueURL is not in format](https://discuss.elastic.co/t/filebeat-aws-module-s3-input-error-queueurl-is-not-in-format/261850)

<div class="topic-metadata">

**Author:** [@cjm3625](https://discuss.elastic.co/u/cjm3625)\
**Replies:** 9\
**Last updated:** [April 29, 2021, 12:41am UTC](https://discuss.elastic.co/t/filebeat-aws-module-s3-input-error-queueurl-is-not-in-format/261850 "2021-04-29T00:41:17Z")

</div>

Trying to use filebeat to monitor my AWS resources in ISO environment. It looks like the AWS standard endpoint is hard coded. my filebeat.yml filebeat.inputs: - type: s3 queue\_url: https://sqs.us-iso-east-1.c2s.ic.go…

---

## [Logstash elastic search output with very big JSON is not outputting](https://discuss.elastic.co/t/logstash-elastic-search-output-with-very-big-json-is-not-outputting/101632)

<div class="topic-metadata">

**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\
**Replies:** 12\
**Last updated:** [September 26, 2017, 5:39pm UTC](https://discuss.elastic.co/t/logstash-elastic-search-output-with-very-big-json-is-not-outputting/101632 "2017-09-26T17:39:56Z")

</div>

Hi, I have very big nested json (22KB) which I am trying to output to elastic search but it's not outputting. Output to file works as expected. I tried with small json which works. Is there any limitation on json filter…

---

## [Combined index like database(RDBMS)？](https://discuss.elastic.co/t/combined-index-like-database-rdbms/93262)

<div class="topic-metadata">

**Author:** [@ginger](https://discuss.elastic.co/u/ginger)\
**Replies:** 11\
**Last updated:** [July 26, 2017, 1:34am UTC](https://discuss.elastic.co/t/combined-index-like-database-rdbms/93262 "2017-07-26T01:34:24Z")

</div>

Hi. I am testing es to analysis user data. I load a day's data of 1 million users into es. The common query pattern is using date histogram aggregation to analysis one user's data. I encounter performance problem when u…

---

## [Problems with tcp connections](https://discuss.elastic.co/t/problems-with-tcp-connections/5885)

<div class="topic-metadata">

**Author:** [@darkyoung](https://discuss.elastic.co/u/darkyoung)\
**Replies:** 10\
**Last updated:** [November 20, 2011, 8:16am UTC](https://discuss.elastic.co/t/problems-with-tcp-connections/5885 "2011-11-20T08:16:36Z")

</div>

Hi I have two servers running an elasticsearch cluster as our website's search engine. And use Elastica as our php client. At beginning, the queries are sent directly to ES but the servers are very unstable an…

---

## [Java agent TRACE log error](https://discuss.elastic.co/t/java-agent-trace-log-error/192688)

<div class="topic-metadata">

**Author:** [@kin122](https://discuss.elastic.co/u/kin122)\
**Replies:** 16\
**Last updated:** [August 2, 2019, 12:47pm UTC](https://discuss.elastic.co/t/java-agent-trace-log-error/192688 "2019-08-02T12:47:22Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version:7.0.0 …

---

## [Problem with filebeat](https://discuss.elastic.co/t/problem-with-filebeat/346913)

<div class="topic-metadata">

**Author:** [@miladmohabati](https://discuss.elastic.co/u/miladmohabati)\
**Replies:** 20\
**Last updated:** [November 16, 2023, 2:34pm UTC](https://discuss.elastic.co/t/problem-with-filebeat/346913 "2023-11-16T14:34:38Z")

</div>

Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at http://localhost:9200: Get "http://localhost:9200": EOF\]

---

## [Unhealthy - (DEGRADED) Applied policy - Failure enabling network events; current state is disabled](https://discuss.elastic.co/t/unhealthy-degraded-applied-policy-failure-enabling-network-events-current-state-is-disabled/344477)

<div class="topic-metadata">

**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\
**Replies:** 13\
**Last updated:** [October 13, 2023, 9:41pm UTC](https://discuss.elastic.co/t/unhealthy-degraded-applied-policy-failure-enabling-network-events-current-state-is-disabled/344477 "2023-10-13T21:41:26Z")

</div>

Elastic-agent v8.10.2 deployed on Fedora 37, has been running for months without issue. Noticed today that it's flagged as unhealthy. The same agent version and policy have been and are working fine on CentOS, Ubuntu etc…

---

## [Help| setup cluster on same mac](https://discuss.elastic.co/t/help-setup-cluster-on-same-mac/173806)

<div class="topic-metadata">

**Author:** [@vijaykriishna](https://discuss.elastic.co/u/vijaykriishna)\
**Replies:** 11\
**Last updated:** [March 27, 2019, 5:08pm UTC](https://discuss.elastic.co/t/help-setup-cluster-on-same-mac/173806 "2019-03-27T17:08:14Z")

</div>

Hello I want to set up cluster on the same machine I use for development purpose. After going though earlier posts, I found that setting node.max\_local\_storage\_nodes property with \>1 creates those many number of nodes l…

---

## [Parent/child sort](https://discuss.elastic.co/t/parent-child-sort/13466)

<div class="topic-metadata">

**Author:** [@Max\_Seleznev](https://discuss.elastic.co/u/Max_Seleznev)\
**Replies:** 11\
**Last updated:** [September 6, 2013, 8:00pm UTC](https://discuss.elastic.co/t/parent-child-sort/13466 "2013-09-06T20:00:12Z")

</div>

can you help me, how i can use correct sort for childs i have query but sort does not work, I know that the field is not correctly specified in the sorting, but how to specify the correctly for sorting for childs …

---

## [Elasticsearch.service craches (Active: failed) every 1,2 days](https://discuss.elastic.co/t/elasticsearch-service-craches-active-failed-every-1-2-days/325373)

<div class="topic-metadata">

**Author:** [@Ziad\_Khater](https://discuss.elastic.co/u/Ziad_Khater)\
**Replies:** 12\
**Last updated:** [February 15, 2023, 12:42pm UTC](https://discuss.elastic.co/t/elasticsearch-service-craches-active-failed-every-1-2-days/325373 "2023-02-15T12:42:09Z")

</div>

Hi Team, every 1,2 days elasticsearch.service failed on my ubunto machine. It has all memory/disk resources it needs. I'll attach logs here and below is the failed status of elasticsearch. ===========================…

[Previous page](https://discuss.elastic.co/top.md?page=156&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=158&per_page=50&period=all)
