# Top **URL:** https://discuss.elastic.co/top.md?page=163&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 164 --- ## [Unknown target specified: setup](https://discuss.elastic.co/t/unknown-target-specified-setup/160713)
**Author:** [@fillic2002](https://discuss.elastic.co/u/fillic2002)\ **Replies:** 9\ **Last updated:** [January 5, 2019, 2:00am UTC](https://discuss.elastic.co/t/unknown-target-specified-setup/160713 "2019-01-05T02:00:40Z")
Hi There, I am trying to create a custom beat and getting below mentioned error while running "make setup" command. ref: https://www.elastic.co/guide/en/beats/devguide/current/setting-up-beat.html "Unknown target speci… --- ## [Exact phrase match - city names example](https://discuss.elastic.co/t/exact-phrase-match-city-names-example/8108)
**Author:** [@Greg\_Silin](https://discuss.elastic.co/u/Greg_Silin)\ **Replies:** 9\ **Last updated:** [February 27, 2014, 3:14pm UTC](https://discuss.elastic.co/t/exact-phrase-match-city-names-example/8108 "2014-02-27T15:14:42Z")
Hi, One of our fields in the index stores city names, and we need to ensure that the term is matched exactly. So if we have "san francisco" indexed, we need to ensure that \*only\* the term "san francisco" matches; "… --- ## [Snapshot & Restore : 6.2 version](https://discuss.elastic.co/t/snapshot-restore-6-2-version/166622)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 10\ **Last updated:** [February 21, 2019, 6:03pm UTC](https://discuss.elastic.co/t/snapshot-restore-6-2-version/166622 "2019-02-21T18:03:09Z")
Couple of questions: is there any webinar for snapshot and restore ? Is it possible to change the name of the indices while restoring ? --- ## [Setup output to Elasticsearch through Centralized Management](https://discuss.elastic.co/t/setup-output-to-elasticsearch-through-centralized-management/157881)
**Author:** [@mladen](https://discuss.elastic.co/u/mladen)\ **Replies:** 16\ **Last updated:** [November 26, 2018, 2:24pm UTC](https://discuss.elastic.co/t/setup-output-to-elasticsearch-through-centralized-management/157881 "2018-11-26T14:24:29Z")
Hello, could you please help me to setup Elasticsearch output. I managed to enroll my metricbeat agent but I don't get any information from agent. As you can see I have created tag razvoj\_metricbeat: And this is my … --- ## [Unexplained failure java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/unexplained-failure-java-lang-outofmemoryerror-java-heap-space/270100)
**Author:** [@Bertram\_van\_de\_Ven](https://discuss.elastic.co/u/Bertram_van_de_Ven)\ **Replies:** 14\ **Last updated:** [April 23, 2021, 8:37am UTC](https://discuss.elastic.co/t/unexplained-failure-java-lang-outofmemoryerror-java-heap-space/270100 "2021-04-23T08:37:20Z")
Dear, We've encounter 'random' out of memory errors that we can't explain. When we see the error occur we don't see an increase of Heap, system load, CPU or I/O. So I don't know where to search for the explanation why t… --- ## [Index Lifecycle Management rolleover not happening properly](https://discuss.elastic.co/t/index-lifecycle-management-rolleover-not-happening-properly/251771)
**Author:** [@amiya-santra](https://discuss.elastic.co/u/amiya-santra)\ **Replies:** 17\ **Last updated:** [October 16, 2020, 9:00am UTC](https://discuss.elastic.co/t/index-lifecycle-management-rolleover-not-happening-properly/251771 "2020-10-16T09:00:38Z")
I have manually configured ILM. After creating policies and telling my indices to use them, they all complain with errors like this: issue: rollover index have 0 doc PUT \_ilm/policy/new\_policy { "policy": { "pha… --- ## [Fleet-server and filebeats in one elastic-agent](https://discuss.elastic.co/t/fleet-server-and-filebeats-in-one-elastic-agent/281355)
**Author:** [@tkarczewski](https://discuss.elastic.co/u/tkarczewski)\ **Replies:** 11\ **Last updated:** [August 17, 2021, 6:42pm UTC](https://discuss.elastic.co/t/fleet-server-and-filebeats-in-one-elastic-agent/281355 "2021-08-17T18:42:39Z")
Hi, How to use one elastic-agent on host where elastic stack is deployed to be as fleet server and filebeat collecting udp syslog messages? I red that elastic agent can be use for fleet server and data collection simult… --- ## [Scripted field add a value of 1 for every match](https://discuss.elastic.co/t/scripted-field-add-a-value-of-1-for-every-match/257746)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 15\ **Last updated:** [December 18, 2020, 8:06pm UTC](https://discuss.elastic.co/t/scripted-field-add-a-value-of-1-for-every-match/257746 "2020-12-18T20:06:33Z")
Hello, New to the Elastic Stack and trying to get familiar with it. I'm not sure if this should be done on the ingest pipeline or visualization (I haven't had luck on either) but attempting to solve this with a scripte… --- ## [Can't divide two fields when querying an index](https://discuss.elastic.co/t/cant-divide-two-fields-when-querying-an-index/280264)
**Author:** [@Luis\_P](https://discuss.elastic.co/u/Luis_P)\ **Replies:** 9\ **Last updated:** [August 3, 2021, 11:59am UTC](https://discuss.elastic.co/t/cant-divide-two-fields-when-querying-an-index/280264 "2021-08-03T11:59:17Z")
Hello, I'm new to Elasticsearch and Kibana and I've been trying to create a watcher that alerts me when the free disk space ratio is lower than a defined value. I believe I've managed to build a working watcher however, … --- ## [Search Within the Body of documents](https://discuss.elastic.co/t/search-within-the-body-of-documents/183764)
**Author:** [@sgwillett](https://discuss.elastic.co/u/sgwillett)\ **Replies:** 9\ **Last updated:** [September 25, 2019, 3:02pm UTC](https://discuss.elastic.co/t/search-within-the-body-of-documents/183764 "2019-09-25T15:02:57Z")
This version doesn't seem to be able to access the content of the body. Is the connector to dropbox or a configuration within elasticsearch necessary? --- ## [Reroute API](https://discuss.elastic.co/t/reroute-api/316832)
**Author:** [@wijamw](https://discuss.elastic.co/u/wijamw)\ **Replies:** 20\ **Last updated:** [October 31, 2022, 11:55pm UTC](https://discuss.elastic.co/t/reroute-api/316832 "2022-10-31T23:55:13Z")
I tried to move indices from one node to another using reroute API but I had the following error. type: illegal\_argument\_exception reason: "can't move from node-1 to node-2, , since its not allowed, reason: .. \[NO(the n… --- ## [Failed Action](https://discuss.elastic.co/t/failed-action/74433)
**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\ **Replies:** 10\ **Last updated:** [March 6, 2017, 3:30pm UTC](https://discuss.elastic.co/t/failed-action/74433 "2017-03-06T15:30:44Z")
Last night I upgraded my Elasticsearch data nodes from 4 CPUs to 8 CPUs and now I am getting these errors from my Logstash shippers. Please help!!!!! \[2017-02-08T15:31:14,344\]\[WARN \]\[logstash.outputs.elasticsearch\] Fai… --- ## [How to take the snaphsot in Es](https://discuss.elastic.co/t/how-to-take-the-snaphsot-in-es/150293)
**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\ **Replies:** 12\ **Last updated:** [September 28, 2018, 7:51am UTC](https://discuss.elastic.co/t/how-to-take-the-snaphsot-in-es/150293 "2018-09-28T07:51:19Z")
Hi Team, I need to take the snapshot of one index , i have confgiured in elasticsearch.yml like this path.repo: \["/home/tf-java4/Desktop/esbackup"\] while creating repository facing this exception , can anyone help me … --- ## [Elastic SIEM & OpenCTI Integration](https://discuss.elastic.co/t/elastic-siem-opencti-integration/379082)
**Author:** [@Vishag\_Learning](https://discuss.elastic.co/u/Vishag_Learning)\ **Replies:** 12\ **Last updated:** [June 20, 2025, 10:25am UTC](https://discuss.elastic.co/t/elastic-siem-opencti-integration/379082 "2025-06-20T10:25:08Z")
Priority : High I’m currently working on integrating OpenCTI with Elastic SIEM. But when I look for documents, I get different guidance from OpenCTI and Elsatic(Providing both links below). I'm confused and stuck due to… --- ## [Aggregate filter plugin session duration](https://discuss.elastic.co/t/aggregate-filter-plugin-session-duration/278099)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 13\ **Last updated:** [July 13, 2021, 1:51pm UTC](https://discuss.elastic.co/t/aggregate-filter-plugin-session-duration/278099 "2021-07-13T13:51:28Z")
Hello, Reviewing ways to calculate session duration and using transforms I was able to calculate session duration by finding the min and max time between timestamps. This is fine except in cases where there is no uniqu… --- ## [Помогите пожалуйста разобраться с агрегациями](https://discuss.elastic.co/t/topic/125629)
**Author:** [@vasina](https://discuss.elastic.co/u/vasina)\ **Replies:** 13\ **Last updated:** [March 26, 2018, 4:43pm UTC](https://discuss.elastic.co/t/topic/125629 "2018-03-26T16:43:06Z")
Здравствуйте! Предположим, у нас есть пачка джейсонов. Каждый джейсон - пользователь, кол-во вещей и некоторая другая информация. Подобные джейсоны для каждого пользователя мы получаем каждый час и иногда для конкретног… --- ## [Mongodb/logstash connect error](https://discuss.elastic.co/t/mongodb-logstash-connect-error/328799)
**Author:** [@jskang](https://discuss.elastic.co/u/jskang)\ **Replies:** 18\ **Last updated:** [April 4, 2023, 9:57am UTC](https://discuss.elastic.co/t/mongodb-logstash-connect-error/328799 "2023-04-04T09:57:48Z")
This is an error message when running logstash. error message: Using bundled JDK: /home/admin/lg-862/jdk Sending Logstash logs to /home/admin/lg-862/logs which is now configured via log4j2.properties \[2023-03-29T18:2… --- ## [Splitting json file](https://discuss.elastic.co/t/splitting-json-file/303488)
**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\ **Replies:** 10\ **Last updated:** [April 29, 2022, 8:35am UTC](https://discuss.elastic.co/t/splitting-json-file/303488 "2022-04-29T08:35:43Z")
Hi I am totally new in logstash, and i am having some issues when splitting a json file. My file is super easy { "data": \[ { "name": "name1" }, { "name": "name2" … --- ## [Unable to log into embedded Kibana anonymously](https://discuss.elastic.co/t/unable-to-log-into-embedded-kibana-anonymously/291797)
**Author:** [@Arrick](https://discuss.elastic.co/u/Arrick)\ **Replies:** 10\ **Last updated:** [January 12, 2022, 7:59am UTC](https://discuss.elastic.co/t/unable-to-log-into-embedded-kibana-anonymously/291797 "2022-01-12T07:59:26Z")
I tried to embed Kibana into a webpage but was unable to login as they kept bringing me back to the login page. So I decided to take a different approach and allow user to log in anonymously. I create an API-Key and li… --- ## [Trying to create a watcher for 1 url](https://discuss.elastic.co/t/trying-to-create-a-watcher-for-1-url/223660)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 10\ **Last updated:** [March 20, 2020, 1:18pm UTC](https://discuss.elastic.co/t/trying-to-create-a-watcher-for-1-url/223660 "2020-03-20T13:18:17Z")
Hi team, I am using heartbeat to monitor some url's. I am trying to create a watcher alert for 1 specific url but I get stuck. Here is my code: { "trigger": { "schedule": { "interval": "1m" } }, "i… --- ## [Logstash crashing](https://discuss.elastic.co/t/logstash-crashing/69408)
**Author:** [@Karl\_Trasschaert](https://discuss.elastic.co/u/Karl_Trasschaert)\ **Replies:** 9\ **Last updated:** [December 19, 2016, 5:57pm UTC](https://discuss.elastic.co/t/logstash-crashing/69408 "2016-12-19T17:57:22Z")
Hi, I have regulary my logstash server crashing. Sometimes after a few restart it works again but alwais crash after a fex hours. As i'm not a king in linux/logstash can you help me to find out what's wrong ? Here is… --- ## [All in one on ubuntu64 OS Raspberry Pi 4 4G fails at elastic-operator](https://discuss.elastic.co/t/all-in-one-on-ubuntu64-os-raspberry-pi-4-4g-fails-at-elastic-operator/255733)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 11\ **Last updated:** [July 5, 2021, 7:48am UTC](https://discuss.elastic.co/t/all-in-one-on-ubuntu64-os-raspberry-pi-4-4g-fails-at-elastic-operator/255733 "2021-07-05T07:48:41Z")
I have been looking into this for some time. I created ELK which worked quite well on my Macbook Pro. It was using the Docker for Desktop installed kubernetes instance. After I add the all-in-one yaml and launch my fi… --- ## [Catching all lines between two lines (two lines included)](https://discuss.elastic.co/t/catching-all-lines-between-two-lines-two-lines-included/63150)
**Author:** [@Houss](https://discuss.elastic.co/u/Houss)\ **Replies:** 11\ **Last updated:** [October 24, 2016, 4:47am UTC](https://discuss.elastic.co/t/catching-all-lines-between-two-lines-two-lines-included/63150 "2016-10-24T04:47:29Z")
Hello, I have not found a way to do this with multiline. Basically what I want to do is take all lines between two specific lines, and make a single message out of it. Example : Line I don't want Line I don't want L… --- ## [Documents are no longer saved after high disk watermark exceeded on an elasticsearch cluster](https://discuss.elastic.co/t/documents-are-no-longer-saved-after-high-disk-watermark-exceeded-on-an-elasticsearch-cluster/313975)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 9\ **Last updated:** [September 19, 2022, 2:53pm UTC](https://discuss.elastic.co/t/documents-are-no-longer-saved-after-high-disk-watermark-exceeded-on-an-elasticsearch-cluster/313975 "2022-09-19T14:53:28Z")
Hi everyone, I have a question about how load balance work on an elasticsearch servers cluster. The cluster is composed by : 4 "master, data" nodes, 2 "data" nodes 1 "coordinator" node The warning "high disk waterma… --- ## [Setting up 3 Nodes Cluster in Single Machine](https://discuss.elastic.co/t/setting-up-3-nodes-cluster-in-single-machine/196817)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 14\ **Last updated:** [August 29, 2019, 8:01am UTC](https://discuss.elastic.co/t/setting-up-3-nodes-cluster-in-single-machine/196817 "2019-08-29T08:01:01Z")
Hi, I am trying to setup 3 nodes cluster in my computer with 3 different paths Here is the elasticsearch configuration Node 1 : cluster.name: newcluster node.name: node-4 path.data: C:\\ELK Node1\\elasticsearch-7.2.1-w… --- ## [Significant\_text sorting](https://discuss.elastic.co/t/significant-text-sorting/186463)
**Author:** [@slovan9](https://discuss.elastic.co/u/slovan9)\ **Replies:** 14\ **Last updated:** [June 25, 2019, 9:00am UTC](https://discuss.elastic.co/t/significant-text-sorting/186463 "2019-06-25T09:00:41Z")
Hello, Im new to Elasticsearch and I cannot solve following issue. I used sampler and significant\_text aggregations to find most popular words in my dataset and it worked very well. However, I would like to order the c… --- ## [Elasticsearch query shows more count than it has](https://discuss.elastic.co/t/elasticsearch-query-shows-more-count-than-it-has/190897)
**Author:** [@Ahmet\_Kartal](https://discuss.elastic.co/u/Ahmet_Kartal)\ **Replies:** 9\ **Last updated:** [July 17, 2019, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-query-shows-more-count-than-it-has/190897 "2019-07-17T12:06:28Z")
In one of my field I have "xr" data and "xra","xrb","xrc" separetely. When I make query of the count of "xr" it says I have 4 data. But I expect from elasticsearch to say 1. What do I need to change? --- ## [Understanding Heap Usage for Indexing and Updating](https://discuss.elastic.co/t/understanding-heap-usage-for-indexing-and-updating/14670)
**Author:** [@vaidik](https://discuss.elastic.co/u/vaidik)\ **Replies:** 9\ **Last updated:** [July 6, 2016, 3:04pm UTC](https://discuss.elastic.co/t/understanding-heap-usage-for-indexing-and-updating/14670 "2016-07-06T15:04:26Z")
Hi, Following is the document structure of the document I am indexing in ES. { "key1": "val1", "key2": "val2", ... "keyN": "valN", "array1": \[ , \], "array2": \[ {… --- ## [Can't connect to Elasticsearch at \:9200 - Logs don't show any errors](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-at-publicip-9200-logs-dont-show-any-errors/315920)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 12\ **Last updated:** [October 6, 2022, 1:53pm UTC](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-at-publicip-9200-logs-dont-show-any-errors/315920 "2022-10-06T13:53:02Z")
This worked, thanks. I am running into a different issue. Elasticsearch status says it's active, but I can't connect at http://:9200. My elasticsearch logs doesn't show any issue. This is the yaml file which was working… --- ## [Please help me to deal with geo\_point in ES 2.1 and logstash 2.1. I am unable to set mapping of location as I use to do in old version using \_river](https://discuss.elastic.co/t/please-help-me-to-deal-with-geo-point-in-es-2-1-and-logstash-2-1-i-am-unable-to-set-mapping-of-location-as-i-use-to-do-in-old-version-using--river/39872)
**Author:** [@mrizwan](https://discuss.elastic.co/u/mrizwan)\ **Replies:** 14\ **Last updated:** [February 9, 2016, 8:22am UTC](https://discuss.elastic.co/t/please-help-me-to-deal-with-geo-point-in-es-2-1-and-logstash-2-1-i-am-unable-to-set-mapping-of-location-as-i-use-to-do-in-old-version-using--river/39872 "2016-02-09T08:22:38Z")
I used ES old versions with \_river to fetch data. For location i do following in mapping "Location": {"type": "geo\_point"}, and my data set , i return location.lat and location.lon. I am unable to set type geo\_p… --- ## [Filebeat v7.14.0 Error in Loading Pipeline](https://discuss.elastic.co/t/filebeat-v7-14-0-error-in-loading-pipeline/283407)
**Author:** [@Mary\_Cane\_Bandohan](https://discuss.elastic.co/u/Mary_Cane_Bandohan)\ **Replies:** 9\ **Last updated:** [September 11, 2021, 12:11am UTC](https://discuss.elastic.co/t/filebeat-v7-14-0-error-in-loading-pipeline/283407 "2021-09-11T00:11:58Z")
Can someone please help us troubleshoot the error we're having after installing Filebeat version 7.14.0 in our CentOS server? We have disabled ILM in the filebeat.yml file. Our Elasticsearch and Kibana versions are cur… --- ## [Couchbase + elasticsearch](https://discuss.elastic.co/t/couchbase-elasticsearch/13211)
**Author:** [@G\_Maheswar\_reddy](https://discuss.elastic.co/u/G_Maheswar_reddy)\ **Replies:** 20\ **Last updated:** [August 20, 2013, 12:02pm UTC](https://discuss.elastic.co/t/couchbase-elasticsearch/13211 "2013-08-20T12:02:03Z")
Hi , I followed this Steps in this link http://blog.couchbase.com/couchbase-and-full-text-search-couchbase-transport-elastic-search in couchbase xdcr i am getting following error while adding cluster Att… --- ## [Wsdl in logstash input file](https://discuss.elastic.co/t/wsdl-in-logstash-input-file/137248)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 9\ **Last updated:** [June 26, 2018, 5:01pm UTC](https://discuss.elastic.co/t/wsdl-in-logstash-input-file/137248 "2018-06-26T17:01:10Z")
Hey Guys, I have been trying to fetch data from BMC Remedy using logstash http poller method, as i was not able to get the restapi's but managed to get a wsdl link, the link was working properly when i test using soap U… --- ## [Xml filter on nested element](https://discuss.elastic.co/t/xml-filter-on-nested-element/266619)
**Author:** [@StashLogs](https://discuss.elastic.co/u/StashLogs)\ **Replies:** 11\ **Last updated:** [March 11, 2021, 2:06pm UTC](https://discuss.elastic.co/t/xml-filter-on-nested-element/266619 "2021-03-11T14:06:12Z")
Hello, I am using the jdbc streaming plugin to add a new field to a record. This new field is an array of objects ( history ) as seen below: record: { id: "1", someXMLField: \, hi… --- ## [Is elasticsearch support subscription required to enable SSL](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630)
**Author:** [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Replies:** 10\ **Last updated:** [June 9, 2017, 7:56am UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630 "2017-06-09T07:56:00Z")
I would like to secure communication between my client app and elasticsearch. I would also like to do the same for elasticsearch's inter-node communication. Question: Do I need to purchase elasticsearch's support subsc… --- ## [What could make a healthy ES5.3.1 cluster go OOM & unresponsive INSTANTLY?](https://discuss.elastic.co/t/what-could-make-a-healthy-es5-3-1-cluster-go-oom-unresponsive-instantly/84730)
**Author:** [@Dominik\_Raute](https://discuss.elastic.co/u/Dominik_Raute)\ **Replies:** 9\ **Last updated:** [May 9, 2017, 5:25pm UTC](https://discuss.elastic.co/t/what-could-make-a-healthy-es5-3-1-cluster-go-oom-unresponsive-instantly/84730 "2017-05-09T17:25:22Z")
Does anybody here have a clue what could make a well-dimensioned (3x28G/8C) production ES 5.3 cluster that's completely happily chugging along for hours at maybe 20% load (50/50 mix of indexing and mixed queries, classic… --- ## [Logstash file plugin](https://discuss.elastic.co/t/logstash-file-plugin/56267)
**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Replies:** 12\ **Last updated:** [July 25, 2016, 9:58am UTC](https://discuss.elastic.co/t/logstash-file-plugin/56267 "2016-07-25T09:58:29Z")
I am using file Output plugin to store parsed events, is there any option to clear that file for every 24hr? Below is the Example: output { if ( \[status\] =~ "Invalid credentials" ) and "throttled" not in \[tags\] { f… --- ## [Elastic Search max\_num\_segments in forcemerge](https://discuss.elastic.co/t/elastic-search-max-num-segments-in-forcemerge/127472)
**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\ **Replies:** 14\ **Last updated:** [April 16, 2018, 12:54pm UTC](https://discuss.elastic.co/t/elastic-search-max-num-segments-in-forcemerge/127472 "2018-04-16T12:54:45Z")
Hi, I am currently using ES v6.1.2. I have an index of size 1.3 tb consisting of 16 shards (8 primaries). The primary shard size amounts to around 700GB. I am planning to perform a forcemerge operation on the index. … --- ## [How to change the default type](https://discuss.elastic.co/t/how-to-change-the-default-type/125318)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 9\ **Last updated:** [March 23, 2018, 10:23am UTC](https://discuss.elastic.co/t/how-to-change-the-default-type/125318 "2018-03-23T10:23:43Z")
Hi everyone, when I index the flow data to ES, the IPV4\_SRC\_ADDR and IPV4\_DST\_ADDR are string type, and I want to change it to ip type. this is the mapping config: PUT /\_template/logstash { "index\_patterns": "logstash… --- ## [New Plugin: logstash-filter-augment - Enhance your events from external data files](https://discuss.elastic.co/t/new-plugin-logstash-filter-augment-enhance-your-events-from-external-data-files/72062)
**Author:** [@Adam\_Caldwell](https://discuss.elastic.co/u/Adam_Caldwell)\ **Replies:** 9\ **Last updated:** [February 6, 2017, 4:17pm UTC](https://discuss.elastic.co/t/new-plugin-logstash-filter-augment-enhance-your-events-from-external-data-files/72062 "2017-02-06T16:17:16Z")
I wrote a plugin that people here might find useful. Given a CSV/JSON/YML file with structured data, add fields to your event based on a lookup into that file. The use-case I had for it was to do geocoding based on ac… --- ## [Elasticsearch Snapshot](https://discuss.elastic.co/t/elasticsearch-snapshot/254907)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 13\ **Last updated:** [November 11, 2020, 6:43pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot/254907 "2020-11-11T18:43:23Z")
Im using Snapshot Lifecycle Mgmt to create nightly snapshots. My questions are I saw this comes under Basic license. But I got confused when I saw XPACK tag in SLM page. Please clarify Since this will be daily snap… --- ## [Client node is frequently getting out from cluster](https://discuss.elastic.co/t/client-node-is-frequently-getting-out-from-cluster/243415)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 13\ **Last updated:** [August 2, 2020, 9:24am UTC](https://discuss.elastic.co/t/client-node-is-frequently-getting-out-from-cluster/243415 "2020-08-02T09:24:20Z")
Hi All, Greetings !! I am new to ELK. and below is my setup. Total 9 nodes (6 data node + 2 client node + 1 Management Node) Every 12 - 20 mins my both client node are getting out from cluster and its getting joined … --- ## [Pipeline Delay 7.9](https://discuss.elastic.co/t/pipeline-delay-7-9/249148)
**Author:** [@AleksandrN](https://discuss.elastic.co/u/AleksandrN)\ **Replies:** 10\ **Last updated:** [September 21, 2020, 5:44pm UTC](https://discuss.elastic.co/t/pipeline-delay-7-9/249148 "2020-09-21T17:44:51Z")
Hello everyone, I have such work bench: 3 nodes of Elastic 1 node of Logstash 1 node of Kibana 1 Winlogbeat agent The Winlogbeat agent ships logs from the Windows machine, that collecting logs from all of my company… --- ## [Elasticsearch Installation 8.4](https://discuss.elastic.co/t/elasticsearch-installation-8-4/313601)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 9\ **Last updated:** [September 13, 2022, 5:42pm UTC](https://discuss.elastic.co/t/elasticsearch-installation-8-4/313601 "2022-09-13T17:42:19Z")
Hi Team, I am trying to install elasticsearch-8.4 version on a centos vm. The steps i followed are: Java Installation Creating a repo file Install Elasticsearch Start ES Note: i have not made any changes in yml file.… --- ## [Indexer failures - ES rejected execution exception](https://discuss.elastic.co/t/indexer-failures-es-rejected-execution-exception/242805)
**Author:** [@Tafsir\_Alam](https://discuss.elastic.co/u/Tafsir_Alam)\ **Replies:** 9\ **Last updated:** [August 10, 2020, 8:25am UTC](https://discuss.elastic.co/t/indexer-failures-es-rejected-execution-exception/242805 "2020-08-10T08:25:21Z")
Hi, I am continuously getting Indexer failures errors on my Graylog web-UI console. This is the error: {"type":"es\_rejected\_execution\_exception","reason":"rejected execution of processing of \[1574940\]\[indices:data/writ… --- ## [FSCrawler, qui crash elasticsearch](https://discuss.elastic.co/t/fscrawler-qui-crash-elasticsearch/172759)
**Author:** [@Jean-Marc](https://discuss.elastic.co/u/Jean-Marc)\ **Replies:** 11\ **Last updated:** [March 26, 2019, 2:37pm UTC](https://discuss.elastic.co/t/fscrawler-qui-crash-elasticsearch/172759 "2019-03-26T14:37:49Z")
Bonjour, je suis un étudiant qui travaille sur l'indexation des docs. En effet, j’ai une installation d’elastic avec 3 nœuds et auxquels j’ai tous donné une ram de 750 m, Quand j’essaie d’indexer avec Fscrawler un fil… --- ## [\[bug\] big decimal value losed precision](https://discuss.elastic.co/t/bug-big-decimal-value-losed-precision/253105)
**Author:** [@vpzlin](https://discuss.elastic.co/u/vpzlin)\ **Replies:** 10\ **Last updated:** [October 28, 2020, 2:09am UTC](https://discuss.elastic.co/t/bug-big-decimal-value-losed-precision/253105 "2020-10-28T02:09:56Z")
Hello, ES team! There is a precision losing problem when I'm using java client of ElasticSearch. Will you fix this bug recently? We do need a big decimal in developing financial system. Thanks very much! \[Development… --- ## [Tips for setting new ES indices and cluster](https://discuss.elastic.co/t/tips-for-setting-new-es-indices-and-cluster/173207)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 21\ **Last updated:** [March 24, 2019, 1:23pm UTC](https://discuss.elastic.co/t/tips-for-setting-new-es-indices-and-cluster/173207 "2019-03-24T13:23:45Z")
I'm setting up new ES 6.5.4 in cluster containing 6 data nodes. Each node has 16 CPU and heap 8 GB. Here's the conf: \[root@data01~\]# curl -XGET 'https://localhost:9201/\_cat/nodes?v' ip heap.percent ram.per… --- ## [ElasticSearch multi-threading and the Java EE specifications](https://discuss.elastic.co/t/elasticsearch-multi-threading-and-the-java-ee-specifications/19665)
**Author:** [@Tasha](https://discuss.elastic.co/u/Tasha)\ **Replies:** 9\ **Last updated:** [September 9, 2014, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-multi-threading-and-the-java-ee-specifications/19665 "2014-09-09T15:36:18Z")
Hi all, As you know, ElasticSearch relies a lot on multi-threading. I'm currently using ES in a Java EE 6 application (using the node client as pure client node) and the Java EE specifications state… --- ## [Occasional Index Management timeout](https://discuss.elastic.co/t/occasional-index-management-timeout/273969)
**Author:** [@ethompson](https://discuss.elastic.co/u/ethompson)\ **Replies:** 10\ **Last updated:** [June 3, 2021, 7:18pm UTC](https://discuss.elastic.co/t/occasional-index-management-timeout/273969 "2021-06-03T19:18:11Z")
Occasionally (generally at least once per day) when attempting to access data in Kibana, I'll get a strange series of timeouts. I generally first notice it because Discover view gets an error saying "Error: Could not loc… [Previous page](https://discuss.elastic.co/top.md?page=162&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=164&per_page=50&period=all)