# Top

**URL:** https://discuss.elastic.co/top.md?page=159&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 160

---

## [Error 7024 windows 10 pro](https://discuss.elastic.co/t/error-7024-windows-10-pro/313812)

<div class="topic-metadata">

**Author:** [@David\_Dudi\_Hefer](https://discuss.elastic.co/u/David_Dudi_Hefer)\
**Replies:** 15\
**Last updated:** [September 15, 2022, 5:41am UTC](https://discuss.elastic.co/t/error-7024-windows-10-pro/313812 "2022-09-15T05:41:39Z")

</div>

The Elasticsearch 7.16.3 (elasticsearch-service-x64) service terminated with the following service-specific error: Incorrect function. can't browse localhost:9200 please help !!

---

## [Max spans happened in Hikari-pool connection addr thred](https://discuss.elastic.co/t/max-spans-happened-in-hikari-pool-connection-addr-thred/287145)

<div class="topic-metadata">

**Author:** [@fido](https://discuss.elastic.co/u/fido)\
**Replies:** 13\
**Last updated:** [October 25, 2021, 11:04am UTC](https://discuss.elastic.co/t/max-spans-happened-in-hikari-pool-connection-addr-thred/287145 "2021-10-25T11:04:50Z")

</div>

Hi，I am having trouble using Hikari connection pool with java APM agent. I meet Transaction Max spans warnning, when it happend at a transaction has more than spanLimited spans, which i set is 500. Then i found it happe…

---

## [Calculations between 2 Kibana hits on the @timestamp parameter](https://discuss.elastic.co/t/calculations-between-2-kibana-hits-on-the-timestamp-parameter/255958)

<div class="topic-metadata">

**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\
**Replies:** 11\
**Last updated:** [December 1, 2020, 10:43am UTC](https://discuss.elastic.co/t/calculations-between-2-kibana-hits-on-the-timestamp-parameter/255958 "2020-12-01T10:43:40Z")

</div>

Hello everyone, Here is the context : In Kibana, I have 2 hits, let's say A and B. The hit B is an "answer" of the hit A and will then be received after the creation of hit A (after a few seconds up to a few days). Hit…

---

## [JVM segmentation fault in logstash 6.2.0 while building rake artifacts:rpm in Docker Container](https://discuss.elastic.co/t/jvm-segmentation-fault-in-logstash-6-2-0-while-building-rake-artifacts-rpm-in-docker-container/121401)

<div class="topic-metadata">

**Author:** [@Sandeep\_Sarkar](https://discuss.elastic.co/u/Sandeep_Sarkar)\
**Replies:** 11\
**Last updated:** [March 9, 2018, 4:14am UTC](https://discuss.elastic.co/t/jvm-segmentation-fault-in-logstash-6-2-0-while-building-rake-artifacts-rpm-in-docker-container/121401 "2018-03-09T04:14:58Z")

</div>

Hi @all, I was trying to build logstash 6.2.0 from source and I am getting segmentation fault. My system information is as follows: Linux el7uek.x86\_64. openjdk 1.8.0\_151. jruby version 9.1.15.0 When I am trying to b…

---

## [Do I need the JDBC driver](https://discuss.elastic.co/t/do-i-need-the-jdbc-driver/19707)

<div class="topic-metadata">

**Author:** [@James\_3](https://discuss.elastic.co/u/James_3)\
**Replies:** 20\
**Last updated:** [September 13, 2014, 12:13am UTC](https://discuss.elastic.co/t/do-i-need-the-jdbc-driver/19707 "2014-09-13T00:13:49Z")

</div>

Hi, I'm setting up a system where I have a main SQL database which is synced with elasticsearch. My plan is to use the main PHP library for elasticsearch. I was going to have a cron run every thirty minuets to…

---

## [We have cluster of 4 nodes, where 2 nodes are master and data and other 2 nodes are data nodes, the configuration was working fine since 2 yrs, today we have to restart the cluster and since then we are getting master not discovered exception](https://discuss.elastic.co/t/we-have-cluster-of-4-nodes-where-2-nodes-are-master-and-data-and-other-2-nodes-are-data-nodes-the-configuration-was-working-fine-since-2-yrs-today-we-have-to-restart-the-cluster-and-since-then-we-are-getting-master-not-discovered-exception/340122)

<div class="topic-metadata">

**Author:** [@vishnu\_ishpujani](https://discuss.elastic.co/u/vishnu_ishpujani)\
**Replies:** 25\
**Last updated:** [August 11, 2023, 2:41am UTC](https://discuss.elastic.co/t/we-have-cluster-of-4-nodes-where-2-nodes-are-master-and-data-and-other-2-nodes-are-data-nodes-the-configuration-was-working-fine-since-2-yrs-today-we-have-to-restart-the-cluster-and-since-then-we-are-getting-master-not-discovered-exception/340122 "2023-08-11T02:41:53Z")

</div>

Please fine attached the logs for master 1 and master 2 \[2023-08-04T20:42:56,086\]\[WARN \]\[r.suppressed \] \[ES-Master-2\] path: /\_license, params: {human=false} org.elasticsearch.discovery.MasterNotDiscoveredExc…

---

## [Elasticsearch Java Client Transport Client Exception](https://discuss.elastic.co/t/elasticsearch-java-client-transport-client-exception/118283)

<div class="topic-metadata">

**Author:** [@Jeffrey\_Blayney](https://discuss.elastic.co/u/Jeffrey_Blayney)\
**Replies:** 9\
**Last updated:** [February 8, 2018, 11:09pm UTC](https://discuss.elastic.co/t/elasticsearch-java-client-transport-client-exception/118283 "2018-02-08T23:09:50Z")

</div>

Hello! I'm trying to get the Elasticsearch Java SDK TransportClient Initialized, and I'm getting the following exception: rg.springframework.web.util.NestedServletException: Handler dispatch failed; nested exception is…

---

## [Doc(), source() and "stored" property](https://discuss.elastic.co/t/doc-source-and-stored-property/7894)

<div class="topic-metadata">

**Author:** [@Vadim\_Voituk](https://discuss.elastic.co/u/Vadim_Voituk)\
**Replies:** 9\
**Last updated:** [October 2, 2015, 3:54pm UTC](https://discuss.elastic.co/t/doc-source-and-stored-property/7894 "2015-10-02T15:54:14Z")

</div>

Hello, I have an index of middle-size documents (100Kb of index size/document). Each of these document have number of "filterable" values. Let's call it "rules list". Almost each query doing filtering using this …

---

## [Node.JS WS and APM Server](https://discuss.elastic.co/t/node-js-ws-and-apm-server/305817)

<div class="topic-metadata">

**Author:** [@forbiddenera](https://discuss.elastic.co/u/forbiddenera)\
**Replies:** 11\
**Last updated:** [June 2, 2022, 3:40pm UTC](https://discuss.elastic.co/t/node-js-ws-and-apm-server/305817 "2022-06-02T15:40:05Z")

</div>

So, it's entirely possible that my ws version is 'too new' (as the docs currently say up to 8.0.0) but I'm not seeing any ws stuff instrumented. Express seems to be working though. Also, what would it take to add functi…

---

## [JDBC\_Static Filter](https://discuss.elastic.co/t/jdbc-static-filter/266162)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 11\
**Last updated:** [March 8, 2021, 9:32pm UTC](https://discuss.elastic.co/t/jdbc-static-filter/266162 "2021-03-08T21:32:17Z")

</div>

I am pulling data from a database that has fields populated with numeric values. I need to perform subsequent lookups to additional tables to convert the numeric value to a named value. Since I'll be doing this frequen…

---

## [Problem installing logstash-filter-cipher](https://discuss.elastic.co/t/problem-installing-logstash-filter-cipher/76599)

<div class="topic-metadata">

**Author:** [@Vittorio](https://discuss.elastic.co/u/Vittorio)\
**Replies:** 12\
**Last updated:** [March 6, 2017, 2:56pm UTC](https://discuss.elastic.co/t/problem-installing-logstash-filter-cipher/76599 "2017-03-06T14:56:32Z")

</div>

Hi all, I'm trying to install chiper filter but unfortunately I'm gettin this error: bin/logstash-plugin install logstash-filter-cipher Validating logstash-filter-cipher Installing logstash-filter-cipher Plugin versi…

---

## [Ssl.verification\_mode options for Filebeat 5.6](https://discuss.elastic.co/t/ssl-verification-mode-options-for-filebeat-5-6/242978)

<div class="topic-metadata">

**Author:** [@alarka](https://discuss.elastic.co/u/alarka)\
**Replies:** 9\
**Last updated:** [July 29, 2020, 7:44pm UTC](https://discuss.elastic.co/t/ssl-verification-mode-options-for-filebeat-5-6/242978 "2020-07-29T19:44:22Z")

</div>

As per Filebeat 7.8, https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html ssl.verification\_mode has 3 options: "full", "certificate" and "none". For Filebeat 5.6, I do not see the opti…

---

## [Shard allocation based on shard size](https://discuss.elastic.co/t/shard-allocation-based-on-shard-size/257817)

<div class="topic-metadata">

**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\
**Replies:** 13\
**Last updated:** [December 21, 2020, 8:38am UTC](https://discuss.elastic.co/t/shard-allocation-based-on-shard-size/257817 "2020-12-21T08:38:30Z")

</div>

Hi, I was wondering if there is an option to include shard size in the shard allocation decision process. The Disk-based shard allocation settings and the number of shards/node works, and most of or shards are 50G in s…

---

## [ElasticSearch losing documents](https://discuss.elastic.co/t/elasticsearch-losing-documents/325185)

<div class="topic-metadata">

**Author:** [@apelk](https://discuss.elastic.co/u/apelk)\
**Replies:** 12\
**Last updated:** [February 17, 2023, 4:42am UTC](https://discuss.elastic.co/t/elasticsearch-losing-documents/325185 "2023-02-17T04:42:32Z")

</div>

Using ELK 7.8. We have a Logstash pipeline from JDBC database to Elasticsearch. Using persisted queues and DLQ. We lose about 1% of the documents we send to Elasticsearch. We have enabled TRACE on Elasticsearch and t…

---

## [Divide Should query into two parts and combine them with and logic](https://discuss.elastic.co/t/divide-should-query-into-two-parts-and-combine-them-with-and-logic/240120)

<div class="topic-metadata">

**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\
**Replies:** 12\
**Last updated:** [July 7, 2020, 1:03pm UTC](https://discuss.elastic.co/t/divide-should-query-into-two-parts-and-combine-them-with-and-logic/240120 "2020-07-07T13:03:44Z")

</div>

GET INDEX/\_search { "query": { "bool": { "must": \[ { "nested": { "path": "categories", "query": { "terms": { "categories.id": \[ …

---

## [Starting ES with TLS options](https://discuss.elastic.co/t/starting-es-with-tls-options/199468)

<div class="topic-metadata">

**Author:** [@NewmazN24](https://discuss.elastic.co/u/NewmazN24)\
**Replies:** 12\
**Last updated:** [September 16, 2019, 9:23pm UTC](https://discuss.elastic.co/t/starting-es-with-tls-options/199468 "2019-09-16T21:23:07Z")

</div>

Fresh install, I didn't modify any of my file except elasticsearch.yml. I do not know what I need to do, did wrong. Java is installed as well. Addon to ES yaml xpack.security.enabled: true xpack.security.transport.ss…

---

## [\_grokparsefailure but it works fine in dubugger](https://discuss.elastic.co/t/grokparsefailure-but-it-works-fine-in-dubugger/125233)

<div class="topic-metadata">

**Author:** [@miovinelli](https://discuss.elastic.co/u/miovinelli)\
**Replies:** 19\
**Last updated:** [March 23, 2018, 2:53pm UTC](https://discuss.elastic.co/t/grokparsefailure-but-it-works-fine-in-dubugger/125233 "2018-03-23T14:53:19Z")

</div>

Hi all, there is a strange situation cause my pattern works fine in grokdebug.herokuapp.com and also in a debugger offered by X-Pack, but at runtime ingestion events are tagged with "\_grokparsefailure" and I don't under…

---

## [Syncing large amount of data from mysql to elasticsearch](https://discuss.elastic.co/t/syncing-large-amount-of-data-from-mysql-to-elasticsearch/180505)

<div class="topic-metadata">

**Author:** [@Jose\_Tom](https://discuss.elastic.co/u/Jose_Tom)\
**Replies:** 9\
**Last updated:** [May 26, 2019, 9:53am UTC](https://discuss.elastic.co/t/syncing-large-amount-of-data-from-mysql-to-elasticsearch/180505 "2019-05-26T09:53:03Z")

</div>

Hi All, I am fairly new to elasticsearch. We have a large amount of data in multiple databases (mainly mysql). I need to move them to elasticsearch with either a parent child approach or nested approach. The requirement …

---

## [LogStash Error](https://discuss.elastic.co/t/logstash-error/288444)

<div class="topic-metadata">

**Author:** [@John\_snow](https://discuss.elastic.co/u/John_snow)\
**Replies:** 18\
**Last updated:** [November 15, 2021, 7:30pm UTC](https://discuss.elastic.co/t/logstash-error/288444 "2021-11-15T19:30:37Z")

</div>

Hi Team, I'm getting exception=\>#\<RuntimeError: Invalid FieldReference: whenever i have any value like below in my event. 'some.value\[1\]' My Conf filw looks like input { sqs { access\_key\_id =\> …

---

## [ES Cluster status with no data nodes](https://discuss.elastic.co/t/es-cluster-status-with-no-data-nodes/289089)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 13\
**Last updated:** [November 13, 2021, 7:31am UTC](https://discuss.elastic.co/t/es-cluster-status-with-no-data-nodes/289089 "2021-11-13T07:31:23Z")

</div>

Hey there, if I start a cluster with 3 nodes from scratch without any DATA nodes, is there a way to mark immediately it with YELLOW status?

---

## [Utilisation de variable d'environnement pour les paramètres de logstash](https://discuss.elastic.co/t/utilisation-de-variable-denvironnement-pour-les-parametres-de-logstash/243661)

<div class="topic-metadata">

**Author:** [@penalva](https://discuss.elastic.co/u/penalva)\
**Replies:** 13\
**Last updated:** [August 31, 2020, 9:04am UTC](https://discuss.elastic.co/t/utilisation-de-variable-denvironnement-pour-les-parametres-de-logstash/243661 "2020-08-31T09:04:26Z")

</div>

Bonjour, je souhaite pouvoir déployer logstash pour une communauté d'utilisateurs. Aujourd'hui, la commande logstash nécessite de positionner correctement les variables data.path et path.log sur la ligne de commande, c…

---

## [Sysmon kibana integration](https://discuss.elastic.co/t/sysmon-kibana-integration/191541)

<div class="topic-metadata">

**Author:** [@bilge](https://discuss.elastic.co/u/bilge)\
**Replies:** 9\
**Last updated:** [July 24, 2019, 6:31am UTC](https://discuss.elastic.co/t/sysmon-kibana-integration/191541 "2019-07-24T06:31:29Z")

</div>

Hi, I'm trying to send sysmon logs to kibana. I've managed to visualize Kibana. But the schema is not displayed properly. Therefore, I cannot filter. Would you help if I need to create a schema for sysmon in the Kibana …

---

## [ES java api: how to handle connectivity problems?](https://discuss.elastic.co/t/es-java-api-how-to-handle-connectivity-problems/20980)

<div class="topic-metadata">

**Author:** [@msbreuer](https://discuss.elastic.co/u/msbreuer)\
**Replies:** 9\
**Last updated:** [December 1, 2014, 10:47pm UTC](https://discuss.elastic.co/t/es-java-api-how-to-handle-connectivity-problems/20980 "2014-12-01T22:47:01Z")

</div>

While testing how to handle es-cluster connectivity issues I ran into a serious problem. The java api node client is connected and then the ES server is killed. The application hangs in some bulkRequest, but this cal…

---

## [Elastic search document access based control and vector search](https://discuss.elastic.co/t/elastic-search-document-access-based-control-and-vector-search/357023)

<div class="topic-metadata">

**Author:** [@anuj99](https://discuss.elastic.co/u/anuj99)\
**Replies:** 12\
**Last updated:** [April 16, 2024, 9:33am UTC](https://discuss.elastic.co/t/elastic-search-document-access-based-control-and-vector-search/357023 "2024-04-16T09:33:29Z")

</div>

Following is my use case to store data in Elasticsearch for workspace search connecting different data sources. Text from file is chunked and stored in different document used to vector and keyword search chunk. Howeve…

---

## [Elasticsearch 1.1.0 - Optimize broken?](https://discuss.elastic.co/t/elasticsearch-1-1-0-optimize-broken/16790)

<div class="topic-metadata">

**Author:** [@chuck](https://discuss.elastic.co/u/chuck)\
**Replies:** 28\
**Last updated:** [May 13, 2014, 7:45pm UTC](https://discuss.elastic.co/t/elasticsearch-1-1-0-optimize-broken/16790 "2014-05-13T19:45:01Z")

</div>

Hi All, I've recently upgraded to Elasticsearch 1.1.0. I've got a 4 node cluster, each with 64G of ram, with 24G allocated to Elasticsearch on each. I've batch loaded approximately 86 million documents into a single…

---

## [How to use more than 10 filters without having a error message](https://discuss.elastic.co/t/how-to-use-more-than-10-filters-without-having-a-error-message/79919)

<div class="topic-metadata">

**Author:** [@Tijot](https://discuss.elastic.co/u/Tijot)\
**Replies:** 9\
**Last updated:** [April 7, 2017, 7:10am UTC](https://discuss.elastic.co/t/how-to-use-more-than-10-filters-without-having-a-error-message/79919 "2017-04-07T07:10:35Z")

</div>

Helle everyone, Since one week, im stucked! please come and save me!! :disappointed\_relieved:-( I am trying to initiate a new dashboard and the results that i want to display is a result that i can obtain with the a…

---

## [Newbie question, installed everything, but getting blank page](https://discuss.elastic.co/t/newbie-question-installed-everything-but-getting-blank-page/14921)

<div class="topic-metadata">

**Author:** [@corpengineer](https://discuss.elastic.co/u/corpengineer)\
**Replies:** 14\
**Last updated:** [February 18, 2014, 7:00pm UTC](https://discuss.elastic.co/t/newbie-question-installed-everything-but-getting-blank-page/14921 "2014-02-18T19:00:23Z")

</div>

Hello there: I have current versions of Elasticsearch, Logstash, and Kibana 3 installed on CentOS 6.5 . But when I pull up a browser, I get a black header with text 'dashboard.current.title', and the rest of the…

---

## [Error Machine Learning Job in Elastic Cloud Enterprise "autodetect"](https://discuss.elastic.co/t/error-machine-learning-job-in-elastic-cloud-enterprise-autodetect/260165)

<div class="topic-metadata">

**Author:** [@pedro.andrade](https://discuss.elastic.co/u/pedro.andrade)\
**Replies:** 12\
**Last updated:** [January 13, 2021, 3:54pm UTC](https://discuss.elastic.co/t/error-machine-learning-job-in-elastic-cloud-enterprise-autodetect/260165 "2021-01-13T15:54:51Z")

</div>

I get an error creating the most basic machine learning job. In kibana it says "datafeed-teste\_2 failed to start. Unexpected job state \[failed\] while waiting for job to be opened." Im using Elastic Cloud Enterprise (2.…

---

## [Help with nested datatype mapping](https://discuss.elastic.co/t/help-with-nested-datatype-mapping/89818)

<div class="topic-metadata">

**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\
**Replies:** 17\
**Last updated:** [June 22, 2017, 9:59am UTC](https://discuss.elastic.co/t/help-with-nested-datatype-mapping/89818 "2017-06-22T09:59:29Z")

</div>

Hi, I'm having problems with the schema for a nested datatype. So far, I have the following: "mappings": { "note": { "\_all": { "enabled": false }, "properties": { "user\_id": { "type": "long" }, …

---

## [Rollover Indeces using Logstash and Elastic](https://discuss.elastic.co/t/rollover-indeces-using-logstash-and-elastic/243362)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 13\
**Last updated:** [August 23, 2020, 10:52pm UTC](https://discuss.elastic.co/t/rollover-indeces-using-logstash-and-elastic/243362 "2020-08-23T22:52:14Z")

</div>

Hi guys, I have following use case: I want to create new index every day, therefore my logstash output configuraiton looks as this: output { elasticsearch { index =\> "metricbeat-linux-vms-%{+YYYY.MM.dd}" I also ha…

---

## [Filebeat send logs to different port](https://discuss.elastic.co/t/filebeat-send-logs-to-different-port/335729)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 9\
**Last updated:** [June 14, 2023, 8:40pm UTC](https://discuss.elastic.co/t/filebeat-send-logs-to-different-port/335729 "2023-06-14T20:40:51Z")

</div>

Hi there, i have a question according to the title of this topic. if i have 8 logstash, then i config the filebeat to send the logs to 4 logstash using port 5045 and 5090 to another 4 logstash. is it possible? if yes, …

---

## [Ingest attachment plugin not analysing some html files](https://discuss.elastic.co/t/ingest-attachment-plugin-not-analysing-some-html-files/121777)

<div class="topic-metadata">

**Author:** [@aniket\_savanand](https://discuss.elastic.co/u/aniket_savanand)\
**Replies:** 14\
**Last updated:** [March 2, 2018, 1:02am UTC](https://discuss.elastic.co/t/ingest-attachment-plugin-not-analysing-some-html-files/121777 "2018-03-02T01:02:44Z")

</div>

Hi I'm using elasticsearch ingest attachment plugin to ingest HTML files into the Elasticsearch 6.1.3. Whenever I am seeing contents of my attachment, some HTML files are getting parsed(removing html tag and all) but so…

---

## [Urgent Help Installing Kibana!](https://discuss.elastic.co/t/urgent-help-installing-kibana/79476)

<div class="topic-metadata">

**Author:** [@safasalwan](https://discuss.elastic.co/u/safasalwan)\
**Replies:** 14\
**Last updated:** [April 3, 2017, 1:00pm UTC](https://discuss.elastic.co/t/urgent-help-installing-kibana/79476 "2017-04-03T13:00:31Z")

</div>

Hello everyone, I need your help please. I'm trying to install kibana to test something (will mention it below) on my laptop. I cannot access http://localhost:5601. It fails to load. I also get this when I try to run…

---

## [Filebeat not receiving logs and error in logstash](https://discuss.elastic.co/t/filebeat-not-receiving-logs-and-error-in-logstash/240653)

<div class="topic-metadata">

**Author:** [@Sai\_Avinash\_Duddupud](https://discuss.elastic.co/u/Sai_Avinash_Duddupud)\
**Replies:** 12\
**Last updated:** [July 12, 2020, 4:07pm UTC](https://discuss.elastic.co/t/filebeat-not-receiving-logs-and-error-in-logstash/240653 "2020-07-12T16:07:52Z")

</div>

I am trying to setup filebeat and logstash on my server1 and send data to elasticsearch located on server2 and visualize it using kibana. Following are filebeat logs and when i run filebeat test output it showed the res…

---

## [Automatically visualize data on kibana from input?](https://discuss.elastic.co/t/automatically-visualize-data-on-kibana-from-input/271613)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 14\
**Last updated:** [May 11, 2021, 7:41pm UTC](https://discuss.elastic.co/t/automatically-visualize-data-on-kibana-from-input/271613 "2021-05-11T19:41:03Z")

</div>

I'm wondering if there's a way to automatically visualize data on KIBANA. ? My logstash will receive frequent new inputs, and i need to know if there's way to automatically create dashboards ? may be a way to define in…

---

## [Weird Log Output](https://discuss.elastic.co/t/weird-log-output/139312)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 14\
**Last updated:** [July 13, 2018, 8:40pm UTC](https://discuss.elastic.co/t/weird-log-output/139312 "2018-07-13T20:40:52Z")

</div>

I am getting a weird log output and it seems to be an issue with grok Here is a sample of the logs: July 10th 2018, 09:31:00.427 type:random\_logs @timestamp:July 10th 2018, 09:31:00.427 tags:grokparsefailure host:10.1…

---

## [Search query is slow and first query always takes too much time](https://discuss.elastic.co/t/search-query-is-slow-and-first-query-always-takes-too-much-time/253652)

<div class="topic-metadata">

**Author:** [@Code\_Wizard](https://discuss.elastic.co/u/Code_Wizard)\
**Replies:** 9\
**Last updated:** [October 30, 2020, 12:31pm UTC](https://discuss.elastic.co/t/search-query-is-slow-and-first-query-always-takes-too-much-time/253652 "2020-10-30T12:31:02Z")

</div>

Hi, search queries are slow when i do should match with multiple search terms and also for matching nested documents, basically it is taking 7-10 sec for first query and 5-6 sec later on due to elasticsearch cache, but…

---

## [Some logs not being ingested from LS to ES](https://discuss.elastic.co/t/some-logs-not-being-ingested-from-ls-to-es/100147)

<div class="topic-metadata">

**Author:** [@theflakes](https://discuss.elastic.co/u/theflakes)\
**Replies:** 11\
**Last updated:** [September 12, 2017, 10:54pm UTC](https://discuss.elastic.co/t/some-logs-not-being-ingested-from-ls-to-es/100147 "2017-09-12T22:54:24Z")

</div>

Some logs from the same LS instance are not being imported into ES. I see the following notification in ES when sending just the problem logs to ES; "the indices which match this index pattern don't contain any time fie…

---

## [Beautifying the awslamda nested logs Using Logstash in Kibana](https://discuss.elastic.co/t/beautifying-the-awslamda-nested-logs-using-logstash-in-kibana/358261)

<div class="topic-metadata">

**Author:** [@Suman\_ISMT](https://discuss.elastic.co/u/Suman_ISMT)\
**Replies:** 40\
**Last updated:** [May 2, 2024, 8:07pm UTC](https://discuss.elastic.co/t/beautifying-the-awslamda-nested-logs-using-logstash-in-kibana/358261 "2024-05-02T20:07:54Z")

</div>

Hello Community, I am using the following Logstash configuration to monitor the aws serverless logs using elasticsearch and visualize it in kibana. The configuration is working no issue on that. input { cloudwatch\_lo…

---

## [Kibana Message Parse](https://discuss.elastic.co/t/kibana-message-parse/339976)

<div class="topic-metadata">

**Author:** [@Kumbum](https://discuss.elastic.co/u/Kumbum)\
**Replies:** 10\
**Last updated:** [August 7, 2023, 3:09pm UTC](https://discuss.elastic.co/t/kibana-message-parse/339976 "2023-08-07T15:09:21Z")

</div>

I have a custom log file in a source machine and it comes as a single-line log through "message" attribute to the Dashboard message = \<INFO/ERROR/FATAL, etc\>, , , , , , I want this message gets split as below. messag…

---

## [Threat Intel filebeat module](https://discuss.elastic.co/t/threat-intel-filebeat-module/283979)

<div class="topic-metadata">

**Author:** [@SiRVaNdO](https://discuss.elastic.co/u/SiRVaNdO)\
**Replies:** 9\
**Last updated:** [October 15, 2021, 10:50am UTC](https://discuss.elastic.co/t/threat-intel-filebeat-module/283979 "2021-10-15T10:50:08Z")

</div>

Hello everyone, I installed a filebeat with the threat intel module and it's importing threat intel data to the Elasticsearch. When I visit the feeds dashboards all is working properly. The problem comes when I tried t…

---

## [Cluster provision and benchmark stalls using Rally](https://discuss.elastic.co/t/cluster-provision-and-benchmark-stalls-using-rally/223231)

<div class="topic-metadata">

**Author:** [@ven100](https://discuss.elastic.co/u/ven100)\
**Replies:** 20\
**Last updated:** [March 17, 2020, 4:15am UTC](https://discuss.elastic.co/t/cluster-provision-and-benchmark-stalls-using-rally/223231 "2020-03-17T04:15:29Z")

</div>

Following the cluster benchmarking as per the Rally 1.4 documentation.I have three Virtual machines Coordinator is 10.156.129.118 (vm-1) Target are 10.156.129.121 (vm-2) and 10.156.129.169 (vm-4) On Coordinator: elas…

---

## [Elasticsearch going down in cordinator node because of JVM heap space issue](https://discuss.elastic.co/t/elasticsearch-going-down-in-cordinator-node-because-of-jvm-heap-space-issue/212945)

<div class="topic-metadata">

**Author:** [@Stephy\_Jacob](https://discuss.elastic.co/u/Stephy_Jacob)\
**Replies:** 11\
**Last updated:** [December 26, 2019, 8:37am UTC](https://discuss.elastic.co/t/elasticsearch-going-down-in-cordinator-node-because-of-jvm-heap-space-issue/212945 "2019-12-26T08:37:22Z")

</div>

Hi, We have a 11 node ES cluster in AWS cloud, version ES 6.6.2, which is performing intensive bulk ingestion with very minimum search queries. PFB node configuration Node Type Instance type JVM configured 1 Master, D…

---

## [Bulk delete in elasticsearch](https://discuss.elastic.co/t/bulk-delete-in-elasticsearch/228826)

<div class="topic-metadata">

**Author:** [@A\_google\_user](https://discuss.elastic.co/u/A_google_user)\
**Replies:** 10\
**Last updated:** [April 22, 2020, 11:19am UTC](https://discuss.elastic.co/t/bulk-delete-in-elasticsearch/228826 "2020-04-22T11:19:21Z")

</div>

If I have a list of ids can I bulk delete those documents with ids?

---

## [Facets resulting in objects instead of primitive types](https://discuss.elastic.co/t/facets-resulting-in-objects-instead-of-primitive-types/227)

<div class="topic-metadata">

**Author:** [@sjtuner](https://discuss.elastic.co/u/sjtuner)\
**Replies:** 11\
**Last updated:** [June 4, 2015, 6:21pm UTC](https://discuss.elastic.co/t/facets-resulting-in-objects-instead-of-primitive-types/227 "2015-06-04T18:21:44Z")

</div>

Hi fellows I checked this forum and stackoverflow but couldn't find a matching discussion while thinking this must arise to someone before already. So I'd be happy for any help. Let's come to the point: I want to per…

---

## [Deploy Fleet server using API](https://discuss.elastic.co/t/deploy-fleet-server-using-api/326951)

<div class="topic-metadata">

**Author:** [@krzychohoho](https://discuss.elastic.co/u/krzychohoho)\
**Replies:** 9\
**Last updated:** [March 15, 2023, 3:55pm UTC](https://discuss.elastic.co/t/deploy-fleet-server-using-api/326951 "2023-03-15T15:55:56Z")

</div>

Hi, I am trying to create fully automated script for SIEM deployment. There is one issue. I am not able to install fleet server. I want it to be fully automated no UI interaction. So first i need to create policy using …

---

## [Kibana https digicert](https://discuss.elastic.co/t/kibana-https-digicert/185800)

<div class="topic-metadata">

**Author:** [@amin.nugroho](https://discuss.elastic.co/u/amin.nugroho)\
**Replies:** 9\
**Last updated:** [June 17, 2019, 1:02am UTC](https://discuss.elastic.co/t/kibana-https-digicert/185800 "2019-06-17T01:02:43Z")

</div>

Hi, My company domain has a wildcard ssl certificate from digicert. Is there a way to use it with kibana so that kibana will be accessed via https? I have followed this: https://www.elastic.co/guide/en/kibana/6.6/conf…

---

## [Help, trying to get force directed vega graph working](https://discuss.elastic.co/t/help-trying-to-get-force-directed-vega-graph-working/285716)

<div class="topic-metadata">

**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\
**Replies:** 12\
**Last updated:** [October 13, 2021, 3:35pm UTC](https://discuss.elastic.co/t/help-trying-to-get-force-directed-vega-graph-working/285716 "2021-10-13T15:35:31Z")

</div>

Hello All, I am trying to get a force directed graph working with my data in ES and vega, Here is a pastebin link to my vega code because its too long to post here. When I look at the dat with the VEGA\_DEBUG on the co…

---

## [Compound Must Matches Not Working for Me](https://discuss.elastic.co/t/compound-must-matches-not-working-for-me/146226)

<div class="topic-metadata">

**Author:** [@Douglas\_McQuilken](https://discuss.elastic.co/u/Douglas_McQuilken)\
**Replies:** 9\
**Last updated:** [August 30, 2018, 12:11pm UTC](https://discuss.elastic.co/t/compound-must-matches-not-working-for-me/146226 "2018-08-30T12:11:28Z")

</div>

Everything works fine until I insert a second match statement with a MUST, see below. NOTE: Either individual MUST statement works as expected but in combination... Parses correctly BUT always returns zero hits. Assis…

---

## [Elastic search 7.0.0 geo\_shape performance](https://discuss.elastic.co/t/elastic-search-7-0-0-geo-shape-performance/184717)

<div class="topic-metadata">

**Author:** [@joel.ortin](https://discuss.elastic.co/u/joel.ortin)\
**Replies:** 12\
**Last updated:** [June 19, 2019, 1:45pm UTC](https://discuss.elastic.co/t/elastic-search-7-0-0-geo-shape-performance/184717 "2019-06-19T13:45:03Z")

</div>

Hi, We have now migrated to ES 7.0.0 from 6.4.0 and we removed the tree and precision values from geo\_shape field: "area": {"type": "geo\_shape", "tree": "quadtree", "precision": "2km"} =\> "area": {"type": "geo\_shape"} …

[Previous page](https://discuss.elastic.co/top.md?page=158&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=160&per_page=50&period=all)
