# Top

**URL:** https://discuss.elastic.co/top.md?page=1603&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1604

---

## [SSL Error when using SSL with TCP output plugin](https://discuss.elastic.co/t/ssl-error-when-using-ssl-with-tcp-output-plugin/181277)

<div class="topic-metadata">

**Author:** [@Tieis](https://discuss.elastic.co/u/Tieis)\
**Replies:** 1\
**Last updated:** [May 21, 2019, 4:14pm UTC](https://discuss.elastic.co/t/ssl-error-when-using-ssl-with-tcp-output-plugin/181277 "2019-05-21T16:14:30Z")

</div>

Hi, I'm trying to use ssl for tcp output plugin for logstash. The workflow goes to a nginx-proxy ssl termination point for logstash that will forward the logs to a logstash pod that takes in tcp input. My output part f…

---

## [Cluster unstable. Communication problem within cluster](https://discuss.elastic.co/t/cluster-unstable-communication-problem-within-cluster/181633)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 1\
**Last updated:** [May 21, 2019, 1:27pm UTC](https://discuss.elastic.co/t/cluster-unstable-communication-problem-within-cluster/181633 "2019-05-21T13:27:31Z")

</div>

Hi, I have a 5 node elasticsearch cluster (7.0.0). Nodes randomly leave the cluster and join back. This is happening with most of the nodes. The logs on the nodes look something like this: failed to connect to node {m…

---

## [Drill down charts in kibana 6.5](https://discuss.elastic.co/t/drill-down-charts-in-kibana-6-5/163759)

<div class="topic-metadata">

**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\
**Replies:** 1\
**Last updated:** [January 10, 2019, 2:55pm UTC](https://discuss.elastic.co/t/drill-down-charts-in-kibana-6-5/163759 "2019-01-10T14:55:26Z")

</div>

I was wondering if there is a way to make a drill down chart on kibana 6.5. is this feature added on kibana 6.5?

---

## [Filebeat Consume High Amount of Memory](https://discuss.elastic.co/t/filebeat-consume-high-amount-of-memory/152929)

<div class="topic-metadata">

**Author:** [@fiq](https://discuss.elastic.co/u/fiq)\
**Replies:** 1\
**Last updated:** [October 18, 2018, 10:26pm UTC](https://discuss.elastic.co/t/filebeat-consume-high-amount-of-memory/152929 "2018-10-18T22:26:08Z")

</div>

Hi, Filebeat on one of our machine is consuming high amount of memory. Our filebeat configuration is like this below : - type: log paths: - /var/log/fmw/app/portal/portal-api.log include\_lines: \['^\\d{4}-\\d{2}-…

---

## [X-pack generate printable pdf with security enabled problem](https://discuss.elastic.co/t/x-pack-generate-printable-pdf-with-security-enabled-problem/83439)

<div class="topic-metadata">

**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\
**Replies:** 1\
**Last updated:** [April 24, 2017, 5:52pm UTC](https://discuss.elastic.co/t/x-pack-generate-printable-pdf-with-security-enabled-problem/83439 "2017-04-24T17:52:26Z")

</div>

Hello there, Using version 5.1.2. Getting the error: "There was an error generating your report for the "irlh3\_System\_Dashboard" dashboard: Max attempts reached (3)." My kibana.yml reporting configuration is: server…

---

## [Searching subdirectories](https://discuss.elastic.co/t/searching-subdirectories/64648)

<div class="topic-metadata">

**Author:** [@Sankar\_Sundaresan](https://discuss.elastic.co/u/Sankar_Sundaresan)\
**Replies:** 1\
**Last updated:** [November 2, 2016, 9:21am UTC](https://discuss.elastic.co/t/searching-subdirectories/64648 "2016-11-02T09:21:39Z")

</div>

I am trying to setup filebeat to collect all the files within a folder. Here is the folder structure Main ├───subdir1A │ ├───subdir1B | │ ├───subdir1C | | | ├───file1 | | | ├───file2 | | | …

---

## [Dashboard with document list](https://discuss.elastic.co/t/dashboard-with-document-list/40897)

<div class="topic-metadata">

**Author:** [@enp](https://discuss.elastic.co/u/enp)\
**Replies:** 1\
**Last updated:** [February 8, 2016, 9:21pm UTC](https://discuss.elastic.co/t/dashboard-with-document-list/40897 "2016-02-08T21:21:15Z")

</div>

Hi, Is it possible to create dashboard (bar or pie for example) which will allow to click on element and see not only count or percent, but even document list (or at least some of them) selected for this element? So, I…

---

## [Symbolic link to logstash.log file not working](https://discuss.elastic.co/t/symbolic-link-to-logstash-log-file-not-working/40500)

<div class="topic-metadata">

**Author:** [@trekr5](https://discuss.elastic.co/u/trekr5)\
**Replies:** 1\
**Last updated:** [January 30, 2016, 3:08pm UTC](https://discuss.elastic.co/t/symbolic-link-to-logstash-log-file-not-working/40500 "2016-01-30T15:08:05Z")

</div>

Hello, I'm hoping someone can help me with this issue. I've installed logstash 1.5.4 on an amazon linux box and everything works fine. Because this runs in production, the log file /var/log/logstash.log tends to fill…

---

## [Cannot launch kibana 4.2](https://discuss.elastic.co/t/cannot-launch-kibana-4-2/34133)

<div class="topic-metadata">

**Author:** [@comdiv](https://discuss.elastic.co/u/comdiv)\
**Replies:** 1\
**Last updated:** [November 9, 2015, 9:12am UTC](https://discuss.elastic.co/t/cannot-launch-kibana-4-2/34133 "2015-11-09T09:12:59Z")

</div>

Every time i start kibana.exe it aborted with following error C:\\kibana\\bin\>kibana.bat module.js:338 throw err; ^ Error: Cannot find module 'C:\\kibana\\src\\cli' at Function.Module.\_resolveFilename (mod…

---

## [How to add a field/value from a previuos log](https://discuss.elastic.co/t/how-to-add-a-field-value-from-a-previuos-log/29423)

<div class="topic-metadata">

**Author:** [@danygor](https://discuss.elastic.co/u/danygor)\
**Replies:** 1\
**Last updated:** [September 18, 2015, 10:53am UTC](https://discuss.elastic.co/t/how-to-add-a-field-value-from-a-previuos-log/29423 "2015-09-18T10:53:44Z")

</div>

Hi all, I am using ELK to store and search logs and I need some sort of aggregation over logs that are somehow correlated. My use case is as follows: Log #1 contains field A and field B Log #2 contains field B and f…

---

## [Watcher Cluster Health](https://discuss.elastic.co/t/watcher-cluster-health/27867)

<div class="topic-metadata">

**Author:** [@mmack000](https://discuss.elastic.co/u/mmack000)\
**Replies:** 1\
**Last updated:** [August 22, 2015, 7:56am UTC](https://discuss.elastic.co/t/watcher-cluster-health/27867 "2015-08-22T07:56:14Z")

</div>

I'm using the example cluster health watch to monitor if cluster goes into yellow state. I'm following watch is failing to execute. Any help would be appreciated. Other watches are working correctly. PUT watcher/wat…

---

## [Logstashh : Got error to send bulk of actions to elasticsearch server at xx.xx.xxx](https://discuss.elastic.co/t/logstashh-got-error-to-send-bulk-of-actions-to-elasticsearch-server-at-xx-xx-xxx/26037)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [July 23, 2015, 1:20am UTC](https://discuss.elastic.co/t/logstashh-got-error-to-send-bulk-of-actions-to-elasticsearch-server-at-xx-xx-xxx/26037 "2015-07-23T01:20:04Z")

</div>

Hi, I was facing low disk watermark issue on ES. I dont know solution of this, So I deleted old indexes and restarted the cluster. Then Logstash indexer started giving error {:timestamp=\>"2015-07-22T03:00:15.380000+0300…

---

## [Move Data from One index to Another Cluster Index](https://discuss.elastic.co/t/move-data-from-one-index-to-another-cluster-index/22277)

<div class="topic-metadata">

**Author:** [@Amay\_Patil](https://discuss.elastic.co/u/Amay_Patil)\
**Replies:** 1\
**Last updated:** [February 19, 2015, 10:51pm UTC](https://discuss.elastic.co/t/move-data-from-one-index-to-another-cluster-index/22277 "2015-02-19T22:51:20Z")

</div>

How can one move data from One index in a server to another Index in another Server. I know reindexing moves data into another index in the same cluster. How can it be done in Python ? Ap -- You received…

---

## [Aggregation using part of a timestamp field](https://discuss.elastic.co/t/aggregation-using-part-of-a-timestamp-field/307858)

<div class="topic-metadata">

**Author:** [@mo-ezzat](https://discuss.elastic.co/u/mo-ezzat)\
**Replies:** 4\
**Last updated:** [June 23, 2022, 7:53am UTC](https://discuss.elastic.co/t/aggregation-using-part-of-a-timestamp-field/307858 "2022-06-23T07:53:51Z")

</div>

Hello, I'm trying to make an aggregation using a field in the a timestamp format as "dateTimeReceived" : "2022-04-04T08:35:50.5566113Z" but I just want to use the date part, so I tried using the visualization on kib…

---

## [Kerberos, LDAP - Kibana](https://discuss.elastic.co/t/kerberos-ldap-kibana/200011)

<div class="topic-metadata">

**Author:** [@ivanavi](https://discuss.elastic.co/u/ivanavi)\
**Replies:** 4\
**Last updated:** [September 24, 2019, 8:52pm UTC](https://discuss.elastic.co/t/kerberos-ldap-kibana/200011 "2019-09-24T20:52:25Z")

</div>

Hello, is it possible to configure Kerberos for authentication and use AD/LDAP for authorization (user group membership is read from LDAP for assigning roles? When will be Kibana - Kerberos feature available? Thanks.

---

## [Get results with distance filter](https://discuss.elastic.co/t/get-results-with-distance-filter/152245)

<div class="topic-metadata">

**Author:** [@elastic\_mostafa](https://discuss.elastic.co/u/elastic_mostafa)\
**Replies:** 4\
**Last updated:** [October 18, 2018, 6:41am UTC](https://discuss.elastic.co/t/get-results-with-distance-filter/152245 "2018-10-18T06:41:46Z")

</div>

Hello , I would like to get the results where coordinates are less than 15 km from this point for example: \[35.3,-2.5\] but I have this error : no \[query\] registered for \[station\_location\] my request is : here the r…

---

## [How to access the fields of arrays of Object in Pianless Script](https://discuss.elastic.co/t/how-to-access-the-fields-of-arrays-of-object-in-pianless-script/120453)

<div class="topic-metadata">

**Author:** [@rakhirajpoot18](https://discuss.elastic.co/u/rakhirajpoot18)\
**Replies:** 4\
**Last updated:** [February 21, 2018, 10:00pm UTC](https://discuss.elastic.co/t/how-to-access-the-fields-of-arrays-of-object-in-pianless-script/120453 "2018-02-21T22:00:27Z")

</div>

I am using this script double new\_offer\_price = doc\['offer\_price'\].value; boolean deal\_type\_check = true; if (doc.containsKey('flash\_deal\_es')) { for (int i = 0; i \< doc\['flash\_deal\_es'\].length; i++) { if (params.pl…

---

## [Get Index name based on Aliases](https://discuss.elastic.co/t/get-index-name-based-on-aliases/119793)

<div class="topic-metadata">

**Author:** [@Akib\_Ali](https://discuss.elastic.co/u/Akib_Ali)\
**Replies:** 4\
**Last updated:** [February 14, 2018, 1:07pm UTC](https://discuss.elastic.co/t/get-index-name-based-on-aliases/119793 "2018-02-14T13:07:07Z")

</div>

I have index which has multiple aliases names. And now i want to get all the index names which contain some given aliases names. Example: Index\_name: test Aliases name: a1,a2,a3 Index\_name: test2 Aliases name: a1,a3 …

---

## [Cant able to connect SQL server in windows 7](https://discuss.elastic.co/t/cant-able-to-connect-sql-server-in-windows-7/107004)

<div class="topic-metadata">

**Author:** [@divik](https://discuss.elastic.co/u/divik)\
**Replies:** 4\
**Last updated:** [November 15, 2017, 3:45am UTC](https://discuss.elastic.co/t/cant-able-to-connect-sql-server-in-windows-7/107004 "2017-11-15T03:45:40Z")

</div>

I'm very new to elasticsearch and i configured and i got C:\\elasticsearch-5.6.3\\elasticsearch-jdbc-2.3.3.1\\bin\>mssql-simple-example.bat { "elasticsearch" : { "cluster" : "elasticsearch", "host" : " …

---

## [How to get the ouput](https://discuss.elastic.co/t/how-to-get-the-ouput/60389)

<div class="topic-metadata">

**Author:** [@sweta](https://discuss.elastic.co/u/sweta)\
**Replies:** 4\
**Last updated:** [September 15, 2016, 5:49am UTC](https://discuss.elastic.co/t/how-to-get-the-ouput/60389 "2016-09-15T05:49:22Z")

</div>

can any one tell me why i am not getting the output.I am very new in this technology and started learning it from last week i dont know what is the problem and how i can solve this problem.

---

## [Why range filter in Elasticsearch takes much more CPU then full text search?](https://discuss.elastic.co/t/why-range-filter-in-elasticsearch-takes-much-more-cpu-then-full-text-search/32636)

<div class="topic-metadata">

**Author:** [@un1t](https://discuss.elastic.co/u/un1t)\
**Replies:** 4\
**Last updated:** [October 21, 2015, 2:55pm UTC](https://discuss.elastic.co/t/why-range-filter-in-elasticsearch-takes-much-more-cpu-then-full-text-search/32636 "2015-10-21T14:55:13Z")

</div>

I have a Filtred Query. I first case I user full text search: { 'query': {'filtered': {'filter': {'bool': {'must': \[{'term': {'status': 4}}\]}}, 'query': {'bool': {'should': \[{'match': {'name': {'o…

---

## [HTTP Headers response Logstash http filter](https://discuss.elastic.co/t/http-headers-response-logstash-http-filter/318652)

<div class="topic-metadata">

**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\
**Replies:** 0\
**Last updated:** [November 10, 2022, 12:08pm UTC](https://discuss.elastic.co/t/http-headers-response-logstash-http-filter/318652 "2022-11-10T12:08:54Z")

</div>

Hello! I am trying to use logstash's http filter to get some data from apis. One of the most important values is received as a header and yet logstash is not showing me all the headers. Including those that have the sa…

---

## [EQL: Get only one match (no overlap)](https://discuss.elastic.co/t/eql-get-only-one-match-no-overlap/315014)

<div class="topic-metadata">

**Author:** [@miela](https://discuss.elastic.co/u/miela)\
**Replies:** 0\
**Last updated:** [September 23, 2022, 12:34pm UTC](https://discuss.elastic.co/t/eql-get-only-one-match-no-overlap/315014 "2022-09-23T12:34:10Z")

</div>

Hi Let's consider that we have the following event sequence: A, A, A, C, A, B, B, B now I want a EQL query that matches exactly one A, B sequence, the A, B selection can be arbitrary, i.e., the following are, for inst…

---

## [Hearthbeat dashboard](https://discuss.elastic.co/t/hearthbeat-dashboard/126721)

<div class="topic-metadata">

**Author:** [@Ninoslav](https://discuss.elastic.co/u/Ninoslav)\
**Replies:** 5\
**Last updated:** [April 4, 2018, 2:50pm UTC](https://discuss.elastic.co/t/hearthbeat-dashboard/126721 "2018-04-04T14:50:33Z")

</div>

Hi gys, In my current setup, i have 2 CPU-s, 8GB RAM, no cluster. I have installed hearthbeat packet, to monitor the system performance of my Elastic stack, but when i try to load dashboard i get an error: The reques…

---

## [Parser for multiple line file](https://discuss.elastic.co/t/parser-for-multiple-line-file/60555)

<div class="topic-metadata">

**Author:** [@rodher](https://discuss.elastic.co/u/rodher)\
**Replies:** 5\
**Last updated:** [September 17, 2016, 5:35pm UTC](https://discuss.elastic.co/t/parser-for-multiple-line-file/60555 "2016-09-17T17:35:51Z")

</div>

Hello experts! I have the following scenario: I have a logfile with differente and multiple line log. There are at least 3 structures inside the file I have done the grok parser, but when I execute in logstash, It do…

---

## [How to get additional information added by filebeat in the output of logstash](https://discuss.elastic.co/t/how-to-get-additional-information-added-by-filebeat-in-the-output-of-logstash/250903)

<div class="topic-metadata">

**Author:** [@linhonghui](https://discuss.elastic.co/u/linhonghui)\
**Replies:** 2\
**Last updated:** [October 5, 2020, 12:54am UTC](https://discuss.elastic.co/t/how-to-get-additional-information-added-by-filebeat-in-the-output-of-logstash/250903 "2020-10-05T00:54:30Z")

</div>

Hi I added additional information by fields option in filebeat configuration to identify application name, 'app\_id', such as, filebeat.inputs: - type: log enabled: true fields: app\_id: crawler\_164 ...... output…

---

## [Elasticsearchのクラスター再起動後、index templateが消失する](https://discuss.elastic.co/t/elasticsearch-index-template/229007)

<div class="topic-metadata">

**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\
**Replies:** 2\
**Last updated:** [May 18, 2020, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-index-template/229007 "2020-05-18T12:24:34Z")

</div>

Kubernetesを使って、Elasticseachのクラスター(Masterノード3台、dateノード3台)をデプロイしています。 クラスターの全6台を再起動後、index templateを確認するとすべて消失しています。 そのため、再起動後、index templateを再作成しています。 原因と対処、回避策などありましたらご教示をお願いします。 Elasticseachのバージョン 6.5.4

---

## [TSVB Annotations New Line Character](https://discuss.elastic.co/t/tsvb-annotations-new-line-character/231769)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 2\
**Last updated:** [May 11, 2020, 6:03pm UTC](https://discuss.elastic.co/t/tsvb-annotations-new-line-character/231769 "2020-05-11T18:03:30Z")

</div>

I'd like to put each field and it's value on a separate line on the line graph, is that possible, what is the character to use to make that happen? For example: Exit Code: {{session.exit\_code}} Username: {{user.name}} …

---

## [How to safely do k8s node maintenance](https://discuss.elastic.co/t/how-to-safely-do-k8s-node-maintenance/230292)

<div class="topic-metadata">

**Author:** [@FingerLiu](https://discuss.elastic.co/u/FingerLiu)\
**Replies:** 2\
**Last updated:** [May 6, 2020, 9:22am UTC](https://discuss.elastic.co/t/how-to-safely-do-k8s-node-maintenance/230292 "2020-05-06T09:22:51Z")

</div>

In case we want to delete one k8s node, what should we do to safely delete/replace ES nodes on that k8s node. We are on bare metal cluster, and using local disk as storage class. From what I try, the following manual s…

---

## [Encountered a retryable error](https://discuss.elastic.co/t/encountered-a-retryable-error/214078)

<div class="topic-metadata">

**Author:** [@Avlise](https://discuss.elastic.co/u/Avlise)\
**Replies:** 2\
**Last updated:** [January 7, 2020, 3:32pm UTC](https://discuss.elastic.co/t/encountered-a-retryable-error/214078 "2020-01-07T15:32:16Z")

</div>

Hi everybody, We are currently facing a performance problem with our logs. Sometimes we have some delay in the arrival of the logs, i've checked the logs to identify the problem. This is the message : \[2020-01-07T15:3…

---

## [Issue while running fscrawler on Linux](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-linux/202586)

<div class="topic-metadata">

**Author:** [@shreyasht](https://discuss.elastic.co/u/shreyasht)\
**Replies:** 2\
**Last updated:** [October 9, 2019, 2:55am UTC](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-linux/202586 "2019-10-09T02:55:32Z")

</div>

Hello I am getting below exception while running fscrawler on linux. I wish the error was little more descriptive. I am using java 8 and fscrawler-es7-2.7 bin/fscrawler test Exception in thread "main" java.lang.Number…

---

## [Fields don't appear as expected](https://discuss.elastic.co/t/fields-dont-appear-as-expected/172953)

<div class="topic-metadata">

**Author:** [@gorzek](https://discuss.elastic.co/u/gorzek)\
**Replies:** 2\
**Last updated:** [March 21, 2019, 10:53am UTC](https://discuss.elastic.co/t/fields-dont-appear-as-expected/172953 "2019-03-21T10:53:58Z")

</div>

I have a stack installed in Kubernetes that is as follows: Elasticsearch 6.6.1 Fluent-Bit 1.0.4 Kibana 6.6.1 Kubernetes metadata (as a JSON object containing fields like "pod\_name" and "host") is passed in to Kibana, …

---

## [How to set up a watcher for the status of beats](https://discuss.elastic.co/t/how-to-set-up-a-watcher-for-the-status-of-beats/168260)

<div class="topic-metadata">

**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\
**Replies:** 2\
**Last updated:** [February 14, 2019, 11:56am UTC](https://discuss.elastic.co/t/how-to-set-up-a-watcher-for-the-status-of-beats/168260 "2019-02-14T11:56:50Z")

</div>

Hello We have Filebeat, Metricbeat, Packetbeat, and Auditbeat all enabled across multiple servers. I am stumped as to how to set up a watcher that alerts me if a beat in a specific server goes down. I've looked at Cen…

---

## [Elasticsearch master node was suddenly down](https://discuss.elastic.co/t/elasticsearch-master-node-was-suddenly-down/148252)

<div class="topic-metadata">

**Author:** [@wyukawa](https://discuss.elastic.co/u/wyukawa)\
**Replies:** 2\
**Last updated:** [September 12, 2018, 3:47am UTC](https://discuss.elastic.co/t/elasticsearch-master-node-was-suddenly-down/148252 "2018-09-12T03:47:42Z")

</div>

move from https://github.com/elastic/elasticsearch/issues/33618 We have three master nodes and one of them was suddenly down but there is no meaningful log. I guess ExitOnOutOfMemoryError worked. Elasticsearch version…

---

## [How to send syslogs to logstash](https://discuss.elastic.co/t/how-to-send-syslogs-to-logstash/93244)

<div class="topic-metadata">

**Author:** [@red888](https://discuss.elastic.co/u/red888)\
**Replies:** 2\
**Last updated:** [July 17, 2017, 5:35am UTC](https://discuss.elastic.co/t/how-to-send-syslogs-to-logstash/93244 "2017-07-17T05:35:45Z")

</div>

I want to send syslog data to logstash. I'm trying to do this with the beats Syslog Output Plugin. filebeat config: filebeat: prospectors: - paths: - /var/log/messages - /var/log/audit/…

---

## [Garbage collection not kicking in - Heap is growing to 98%](https://discuss.elastic.co/t/garbage-collection-not-kicking-in-heap-is-growing-to-98/87838)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 2\
**Last updated:** [June 1, 2017, 5:12am UTC](https://discuss.elastic.co/t/garbage-collection-not-kicking-in-heap-is-growing-to-98/87838 "2017-06-01T05:12:59Z")

</div>

Hi, I have a single node ES 2.3.2 cluster with 6G Heap running on Redhat 6.x machine. I am indexing docs using bulk api. Using curl 50 parallel bulk requests are hitting ES and each of size 12MB-15MB approx. after inde…

---

## [Delayed allocation & rolling upgrade](https://discuss.elastic.co/t/delayed-allocation-rolling-upgrade/87356)

<div class="topic-metadata">

**Author:** [@Charles.w](https://discuss.elastic.co/u/Charles.w)\
**Replies:** 2\
**Last updated:** [May 28, 2017, 8:23am UTC](https://discuss.elastic.co/t/delayed-allocation-rolling-upgrade/87356 "2017-05-28T08:23:04Z")

</div>

Hi, When upgrading an ES 5.x cluster to a newer version, the rolling restart procedure states that you should : (stop indexing new data to speed up recovery) disable shard allocation to prevent elasticsearch from re…

---

## [Install curator problem](https://discuss.elastic.co/t/install-curator-problem/81208)

<div class="topic-metadata">

**Author:** [@Ximeng\_Zhao](https://discuss.elastic.co/u/Ximeng_Zhao)\
**Replies:** 2\
**Last updated:** [April 4, 2017, 8:50pm UTC](https://discuss.elastic.co/t/install-curator-problem/81208 "2017-04-04T20:50:07Z")

</div>

Hello, I tried to install elastic curator 4.2.6 on my ec2, but after typing \< pip install elasticsearch-curator \>, it showed the error like below: Collecting elasticsearch-curator Using cached elasticsearch-curator…

---

## [Removing fields for certain outputs](https://discuss.elastic.co/t/removing-fields-for-certain-outputs/38171)

<div class="topic-metadata">

**Author:** [@kerneldemon](https://discuss.elastic.co/u/kerneldemon)\
**Replies:** 2\
**Last updated:** [December 30, 2015, 12:39pm UTC](https://discuss.elastic.co/t/removing-fields-for-certain-outputs/38171 "2015-12-30T12:39:30Z")

</div>

Hi there I want to process certain log data using logstash and then pipe it to multiple outputs. The data I wish to process always contains sensitive fields that I wish to send to some of the outputs and remove for oth…

---

## [Increase data capacity](https://discuss.elastic.co/t/increase-data-capacity/24913)

<div class="topic-metadata">

**Author:** [@Danny\_Sokolovski](https://discuss.elastic.co/u/Danny_Sokolovski)\
**Replies:** 2\
**Last updated:** [July 5, 2015, 9:05pm UTC](https://discuss.elastic.co/t/increase-data-capacity/24913 "2015-07-05T21:05:12Z")

</div>

Hi, I have a 200GB disk attached to the ES server in a 5 servers cluster they are all using %50 . I now need to add more space what are my options ? i don't want to use LVM to expand disk & from what i saw i think the …

---

## [How to parse a few log files](https://discuss.elastic.co/t/how-to-parse-a-few-log-files/2282)

<div class="topic-metadata">

**Author:** [@MrAV](https://discuss.elastic.co/u/MrAV)\
**Replies:** 2\
**Last updated:** [June 11, 2015, 11:12am UTC](https://discuss.elastic.co/t/how-to-parse-a-few-log-files/2282 "2015-06-11T11:12:44Z")

</div>

Hi, I'm trying to parse a two log files. Unfortunately, at Logstash output I've seen that only first log file (events.log) has been parsed and output do not contain any data from the second log-file algotw.log. Please…

---

## [Refresh Index not visible](https://discuss.elastic.co/t/refresh-index-not-visible/273421)

<div class="topic-metadata">

**Author:** [@wickerman](https://discuss.elastic.co/u/wickerman)\
**Replies:** 3\
**Last updated:** [May 19, 2021, 2:47pm UTC](https://discuss.elastic.co/t/refresh-index-not-visible/273421 "2021-05-19T14:47:50Z")

</div>

Hello, I've been using ELK for almost a year now. Great Journey! Currently, I can't seem to see the refresh option in Kibana after opening the index. Only the delete icon is visible. Any ideas, on what caused this or…

---

## [Low performance on bulk insert with custom mapping](https://discuss.elastic.co/t/low-performance-on-bulk-insert-with-custom-mapping/154899)

<div class="topic-metadata">

**Author:** [@0011001011](https://discuss.elastic.co/u/0011001011)\
**Replies:** 8\
**Last updated:** [November 5, 2018, 9:28am UTC](https://discuss.elastic.co/t/low-performance-on-bulk-insert-with-custom-mapping/154899 "2018-11-05T09:28:52Z")

</div>

Hi all, I encountered a strange problem with ES 6.2.4. I try to bulk insert data into my ES nodes, which run fine, but which is also slow (~10s per 1000 insert). I run it on 4go of RAM, the CPU is used at ~24%, with 3 …

---

## [Нужна помощь в написании запроса](https://discuss.elastic.co/t/topic/122718)

<div class="topic-metadata">

**Author:** [@Igor\_Tulashvili](https://discuss.elastic.co/u/Igor_Tulashvili)\
**Replies:** 3\
**Last updated:** [March 6, 2018, 6:04pm UTC](https://discuss.elastic.co/t/topic/122718 "2018-03-06T18:04:05Z")

</div>

Пытаюсь организовать поиск товаров на сайте. Есть 3 поля joxi.ru/Bv29eohGoQ5g2G , это название товара, описание товара, и дополнительная информация куда собираются различные характеристики товара. Например нужно органи…

---

## [Unable to view https://demo.elastic.co/ dashboards](https://discuss.elastic.co/t/unable-to-view-https-demo-elastic-co-dashboards/119229)

<div class="topic-metadata">

**Author:** [@annk](https://discuss.elastic.co/u/annk)\
**Replies:** 3\
**Last updated:** [February 12, 2018, 4:29pm UTC](https://discuss.elastic.co/t/unable-to-view-https-demo-elastic-co-dashboards/119229 "2018-02-12T16:29:54Z")

</div>

I was able to checkout all demo dashboards few days ago , its not working at the moment. I am getting this info line : Index Patterns: In order to visualize and explore data in Kibana, you'll need to create an index pa…

---

## [Filebeat reads the complete log file from start](https://discuss.elastic.co/t/filebeat-reads-the-complete-log-file-from-start/118629)

<div class="topic-metadata">

**Author:** [@Punit\_Bangade](https://discuss.elastic.co/u/Punit_Bangade)\
**Replies:** 3\
**Last updated:** [February 8, 2018, 11:21am UTC](https://discuss.elastic.co/t/filebeat-reads-the-complete-log-file-from-start/118629 "2018-02-08T11:21:00Z")

</div>

Hello, I am using filebeat version 5.6.0,in my log file location I am copying log files from remote machine.If the file already exist in my local directory i am replacing it with newer one after some time interval. But…

---

## [How do gauges and ranges work?](https://discuss.elastic.co/t/how-do-gauges-and-ranges-work/116797)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 3\
**Last updated:** [January 25, 2018, 3:02pm UTC](https://discuss.elastic.co/t/how-do-gauges-and-ranges-work/116797 "2018-01-25T15:02:42Z")

</div>

Hi, The gauge and range option are making no sense to me and there is nothing in the Docs that explains how this is supposed to work. Lets say my metric is the SUM of data usage, so I get something like 30MB or whateve…

---

## [No error for permission if symlinks involved in paths for filebeat](https://discuss.elastic.co/t/no-error-for-permission-if-symlinks-involved-in-paths-for-filebeat/100984)

<div class="topic-metadata">

**Author:** [@raazeev64](https://discuss.elastic.co/u/raazeev64)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 1:48pm UTC](https://discuss.elastic.co/t/no-error-for-permission-if-symlinks-involved-in-paths-for-filebeat/100984 "2017-09-19T13:48:09Z")

</div>

I tried to run filebeat to monitor a path that involved a symlink. symlink: /var/log/current -\> /var/log/version1 paths: /var/log/current/logs/abc.log Actual file location: /var/log/version1/logs/abc.log T…

---

## [New X-Pack Installation](https://discuss.elastic.co/t/new-x-pack-installation/92346)

<div class="topic-metadata">

**Author:** [@waterwalker23](https://discuss.elastic.co/u/waterwalker23)\
**Replies:** 3\
**Last updated:** [July 20, 2017, 3:29am UTC](https://discuss.elastic.co/t/new-x-pack-installation/92346 "2017-07-20T03:29:19Z")

</div>

All, I'm brand new to ELK. I got it up and running on a linux installation and currently I have one windows server sending it's logs to elasticsearch. I decided to install the X-Pack and since doing that logs are not…

---

## [Jax-rs rest api using stored template](https://discuss.elastic.co/t/jax-rs-rest-api-using-stored-template/70682)

<div class="topic-metadata">

**Author:** [@chnoe](https://discuss.elastic.co/u/chnoe)\
**Replies:** 3\
**Last updated:** [January 6, 2017, 10:17am UTC](https://discuss.elastic.co/t/jax-rs-rest-api-using-stored-template/70682 "2017-01-06T10:17:55Z")

</div>

Hi, I'm trying to figure how I can create a jax-rs REST call to search elastic search using a stored template. for the moment I'm doing a POST , using the http body to put the data in. Somehting like this : POST http…

[Previous page](https://discuss.elastic.co/top.md?page=1602&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1604&per_page=50&period=all)
