# Top

**URL:** https://discuss.elastic.co/top.md?page=1636&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1637

---

## [HDFS setup issues](https://discuss.elastic.co/t/hdfs-setup-issues/8713)

<div class="topic-metadata">

**Author:** [@Praveen\_Kariyanahall](https://discuss.elastic.co/u/Praveen_Kariyanahall)\
**Replies:** 3\
**Last updated:** [August 13, 2012, 7:01pm UTC](https://discuss.elastic.co/t/hdfs-setup-issues/8713 "2012-08-13T19:01:17Z")

</div>

Installed hadoop plugin. But I now see that elastic search is not bound to port 9200. Any idea why? Before I added gateway commands, all was working fine, before I changed gateway from local to hdfs. Here is the …

---

## [Kibana 8.19.17 fails to start after upgrade with FATAL Error \[ERR\_REQUIRE\_ESM\] in @elastic/charts](https://discuss.elastic.co/t/kibana-8-19-17-fails-to-start-after-upgrade-with-fatal-error-err-require-esm-in-elastic-charts/387406)

<div class="topic-metadata">

**Author:** [@JPPereira](https://discuss.elastic.co/u/JPPereira)\
**Replies:** 4\
**Last updated:** [July 7, 2026, 4:07pm UTC](https://discuss.elastic.co/t/kibana-8-19-17-fails-to-start-after-upgrade-with-fatal-error-err-require-esm-in-elastic-charts/387406 "2026-07-07T16:07:51Z")

</div>

Hi everyone, I am experiencing a crash loop with Kibana version 8.19.17 after upgrade on Rocky Linux 9.8 (Kernel 5.14). The service starts but crashes and restarts every ~20 seconds. Error Logs Here is the fatal error …

---

## [Is there another way to import template at boot?](https://discuss.elastic.co/t/is-there-another-way-to-import-template-at-boot/301544)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 4\
**Last updated:** [April 15, 2022, 10:35am UTC](https://discuss.elastic.co/t/is-there-another-way-to-import-template-at-boot/301544 "2022-04-15T10:35:06Z")

</div>

Hey there, I am configuring several Beats with a custom mapping. I would just to know if there is another way to load custom template (setup.template.\*) at startup or I must use the fields.yml file. I mean, if I have hu…

---

## [Reduce Bulk rejections](https://discuss.elastic.co/t/reduce-bulk-rejections/281782)

<div class="topic-metadata">

**Author:** [@Praveen\_Atluri](https://discuss.elastic.co/u/Praveen_Atluri)\
**Replies:** 4\
**Last updated:** [August 18, 2021, 9:39pm UTC](https://discuss.elastic.co/t/reduce-bulk-rejections/281782 "2021-08-18T21:39:31Z")

</div>

Hi, I am performing load testing on a 150 data node elasticsearch cluster (i3.2x AWS instances) so the write thread pool size is 8 and queue size is 200. I am indexing into ES using 20 ecs tasks and each ecs task is us…

---

## [Configuration filebeat plusieurs inputs avec plusieurs ilm](https://discuss.elastic.co/t/configuration-filebeat-plusieurs-inputs-avec-plusieurs-ilm/271645)

<div class="topic-metadata">

**Author:** [@Vincent001](https://discuss.elastic.co/u/Vincent001)\
**Replies:** 4\
**Last updated:** [April 30, 2021, 11:31am UTC](https://discuss.elastic.co/t/configuration-filebeat-plusieurs-inputs-avec-plusieurs-ilm/271645 "2021-04-30T11:31:10Z")

</div>

Bonjour, J'utilise filebeat avec la solution elastic cloud. Dans la configuration j'ai plusieurs fichier de log (\*\* fichierA.log fichierB.log fichierC.txt\*\*) qui sont scannés avec plusieurs pipelines différentes. Mais…

---

## [Heartbeat tag information](https://discuss.elastic.co/t/heartbeat-tag-information/229702)

<div class="topic-metadata">

**Author:** [@sheldonh](https://discuss.elastic.co/u/sheldonh)\
**Replies:** 4\
**Last updated:** [April 28, 2020, 9:19pm UTC](https://discuss.elastic.co/t/heartbeat-tag-information/229702 "2020-04-28T21:19:52Z")

</div>

I don't see any tags for filtering or grouping in heartbeats after configuring 100+ agents. I coded a snippet in the install script that pulls the ec2 tags and appends as yaml values. This is the format I used. Most of t…

---

## [Not able to loop and read key value pairs in logstash](https://discuss.elastic.co/t/not-able-to-loop-and-read-key-value-pairs-in-logstash/144338)

<div class="topic-metadata">

**Author:** [@Sahaya\_Agnel](https://discuss.elastic.co/u/Sahaya_Agnel)\
**Replies:** 4\
**Last updated:** [August 19, 2018, 4:22pm UTC](https://discuss.elastic.co/t/not-able-to-loop-and-read-key-value-pairs-in-logstash/144338 "2018-08-19T16:22:10Z")

</div>

Hi, Below is the JSON content that i want to process and read all the 'amount' and sum those values based on the business logic in the Logstash config file. Can you please help ? "ClientSalaryData": { "person\_salary\_i…

---

## [BulkWriteErrorHandler (6.2) - write failed documents to HDFS](https://discuss.elastic.co/t/bulkwriteerrorhandler-6-2-write-failed-documents-to-hdfs/126282)

<div class="topic-metadata">

**Author:** [@dr\_work](https://discuss.elastic.co/u/dr_work)\
**Replies:** 4\
**Last updated:** [April 3, 2018, 6:48pm UTC](https://discuss.elastic.co/t/bulkwriteerrorhandler-6-2-write-failed-documents-to-hdfs/126282 "2018-04-03T18:48:37Z")

</div>

In version 6.2, ErrorHandler functionality was added and it allows to add custom Bulk Error Handlers. In the documentation, the example shows how to write failed documents to a file using BufferedWriter/OutputStream. I…

---

## [Logstash output to es](https://discuss.elastic.co/t/logstash-output-to-es/121274)

<div class="topic-metadata">

**Author:** [@David9](https://discuss.elastic.co/u/David9)\
**Replies:** 4\
**Last updated:** [February 23, 2018, 9:53pm UTC](https://discuss.elastic.co/t/logstash-output-to-es/121274 "2018-02-23T21:53:03Z")

</div>

New user of ES Cloud and logstash. I'm told this is where to post such questions... config is below, nothing's happening (no new data arrives in es). index has been created with mapping. any suggestions? i'm assumin…

---

## [Query slowdown from 2.4 -\> 6.1](https://discuss.elastic.co/t/query-slowdown-from-2-4-6-1/114967)

<div class="topic-metadata">

**Author:** [@tmandke](https://discuss.elastic.co/u/tmandke)\
**Replies:** 4\
**Last updated:** [January 12, 2018, 9:24am UTC](https://discuss.elastic.co/t/query-slowdown-from-2-4-6-1/114967 "2018-01-12T09:24:47Z")

</div>

The following query slows down 5x when we switched from ES 2.4 to 6.1 { "profile": true, "query": { "bool": { "must": \[ { "multi\_match": { "query": "abcd", "fields…

---

## [Hook one elasticsearch with another ES using logstash](https://discuss.elastic.co/t/hook-one-elasticsearch-with-another-es-using-logstash/95308)

<div class="topic-metadata">

**Author:** [@sujeetKumar](https://discuss.elastic.co/u/sujeetKumar)\
**Replies:** 4\
**Last updated:** [August 11, 2017, 11:12am UTC](https://discuss.elastic.co/t/hook-one-elasticsearch-with-another-es-using-logstash/95308 "2017-08-11T11:12:59Z")

</div>

Is there any way we can hook an index from one Elasticsearch to another. input { elasticsearch { index =\> "student\_details" hosts =\> \[“http://localhost:9200”\] } } filter { date { match =\> \[ “joinDate”, “UNIX\_MS”…

---

## [Unable to create Filebeat index](https://discuss.elastic.co/t/unable-to-create-filebeat-index/76935)

<div class="topic-metadata">

**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\
**Replies:** 4\
**Last updated:** [March 1, 2017, 5:52pm UTC](https://discuss.elastic.co/t/unable-to-create-filebeat-index/76935 "2017-03-01T17:52:46Z")

</div>

Im unable to index filebeat into kibana. Please help in indexing filebeat into kibana.

---

## [Cant install phonetic 2.7.0](https://discuss.elastic.co/t/cant-install-phonetic-2-7-0/74974)

<div class="topic-metadata">

**Author:** [@111155](https://discuss.elastic.co/u/111155)\
**Replies:** 4\
**Last updated:** [February 14, 2017, 9:34am UTC](https://discuss.elastic.co/t/cant-install-phonetic-2-7-0/74974 "2017-02-14T09:34:51Z")

</div>

Hello! I got a problem with installing plugin analysis-phonetic v2.7.0. When i try to install: plugin install elasticsearch/elasticsearch-analysis-phonetic/2.7.0 Got error: -\> Installing elasticsearch/elasticsearch-analy…

---

## [How to update the elasticsearch Document which is indexed?](https://discuss.elastic.co/t/how-to-update-the-elasticsearch-document-which-is-indexed/45569)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 4\
**Last updated:** [March 28, 2016, 8:18pm UTC](https://discuss.elastic.co/t/how-to-update-the-elasticsearch-document-which-is-indexed/45569 "2016-03-28T20:18:00Z")

</div>

I need help regarding update the elastic search document.

---

## [The maxiunm fields support in auditbeat](https://discuss.elastic.co/t/the-maxiunm-fields-support-in-auditbeat/321205)

<div class="topic-metadata">

**Author:** [@masonlu2014](https://discuss.elastic.co/u/masonlu2014)\
**Replies:** 0\
**Last updated:** [December 14, 2022, 10:23am UTC](https://discuss.elastic.co/t/the-maxiunm-fields-support-in-auditbeat/321205 "2022-12-14T10:23:48Z")

</div>

hello team, may i know what the biggest length can be support in auditbeat ? as i tested, it looks like auditbeat truncated the fields vaule here when it long enough for example, when i enter a super long fake curl co…

---

## [Trying to use Synthetics but it shows an error on enrollment](https://discuss.elastic.co/t/trying-to-use-synthetics-but-it-shows-an-error-on-enrollment/337915)

<div class="topic-metadata">

**Author:** [@igorhodan](https://discuss.elastic.co/u/igorhodan)\
**Replies:** 1\
**Last updated:** [July 24, 2023, 1:34pm UTC](https://discuss.elastic.co/t/trying-to-use-synthetics-but-it-shows-an-error-on-enrollment/337915 "2023-07-24T13:34:03Z")

</div>

Hello, I am trying to use the complete agent as recommended by the docs, for use the browser synthetics, according this post: Also i have alredy everything configured fine and working, without issues, but its a normal…

---

## [Custom mapping in apm index](https://discuss.elastic.co/t/custom-mapping-in-apm-index/261988)

<div class="topic-metadata">

**Author:** [@Smrithin\_N\_S](https://discuss.elastic.co/u/Smrithin_N_S)\
**Replies:** 1\
**Last updated:** [January 23, 2021, 8:04pm UTC](https://discuss.elastic.co/t/custom-mapping-in-apm-index/261988 "2021-01-23T20:04:46Z")

</div>

I have a deployment in cloud elastic using for apm: apm metrics are being pushed from Nodejs(fastify framwork). I need to add a custom property mapping to the transaction index. I am able to add the mapping using PUT …

---

## [Custom Input within Filebeat?](https://discuss.elastic.co/t/custom-input-within-filebeat/181453)

<div class="topic-metadata">

**Author:** [@thebenwaters](https://discuss.elastic.co/u/thebenwaters)\
**Replies:** 1\
**Last updated:** [May 16, 2019, 7:27pm UTC](https://discuss.elastic.co/t/custom-input-within-filebeat/181453 "2019-05-16T19:27:05Z")

</div>

I'm trying to create a beat for Okta. https://github.com/forter/oktabeat The only issue is it has to be pull and there's no way to track state. I wanted to try and hijack off of Filebeat's registar to be able to track…

---

## [Logstash input Odata /API stream](https://discuss.elastic.co/t/logstash-input-odata-api-stream/152120)

<div class="topic-metadata">

**Author:** [@jawahar](https://discuss.elastic.co/u/jawahar)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 1:01pm UTC](https://discuss.elastic.co/t/logstash-input-odata-api-stream/152120 "2018-10-22T13:01:44Z")

</div>

I want to use logstach to bring in data from a public OData site or even via a public API. Like the NYC 311 service requests data stream do I use an HTTP input, how do I specify the API call to the csv data https://da…

---

## [View surrounding documents allow filter](https://discuss.elastic.co/t/view-surrounding-documents-allow-filter/91829)

<div class="topic-metadata">

**Author:** [@Ryan\_Qian](https://discuss.elastic.co/u/Ryan_Qian)\
**Replies:** 1\
**Last updated:** [July 5, 2017, 7:31am UTC](https://discuss.elastic.co/t/view-surrounding-documents-allow-filter/91829 "2017-07-05T07:31:32Z")

</div>

https://www.elastic.co/guide/en/kibana/5.x/document-context.html I see the document show here have filter, but my kibana 5.4.3 don't. which version should I use?

---

## [Time range for url field populated with current dashboard value](https://discuss.elastic.co/t/time-range-for-url-field-populated-with-current-dashboard-value/72971)

<div class="topic-metadata">

**Author:** [@Larry\_Schrader](https://discuss.elastic.co/u/Larry_Schrader)\
**Replies:** 1\
**Last updated:** [January 27, 2017, 1:20pm UTC](https://discuss.elastic.co/t/time-range-for-url-field-populated-with-current-dashboard-value/72971 "2017-01-27T13:20:32Z")

</div>

I am using a field formatter to create a "drill down" URL for a field that uses the {{value}} as part of the query within the formatted URL. I copy the URL for a dashboard with a place holder query to create the formatt…

---

## [Marvel duplicate cluster entries](https://discuss.elastic.co/t/marvel-duplicate-cluster-entries/63708)

<div class="topic-metadata">

**Author:** [@gpestana](https://discuss.elastic.co/u/gpestana)\
**Replies:** 1\
**Last updated:** [October 24, 2016, 10:53pm UTC](https://discuss.elastic.co/t/marvel-duplicate-cluster-entries/63708 "2016-10-24T22:53:37Z")

</div>

All of a sudden, Marvel started to monitor 2 cluster with the same name. How can I delete the data from one cluster? I think I could use the delete by query, but if the clusters' names are the same (say clusterA), how ca…

---

## [I am also not able to view the saved dashboard images in Kibana 4 . Is there any folder where it is stored?](https://discuss.elastic.co/t/i-am-also-not-able-to-view-the-saved-dashboard-images-in-kibana-4-is-there-any-folder-where-it-is-stored/25575)

<div class="topic-metadata">

**Author:** [@Surbhi\_Agarwal](https://discuss.elastic.co/u/Surbhi_Agarwal)\
**Replies:** 1\
**Last updated:** [July 16, 2015, 5:03am UTC](https://discuss.elastic.co/t/i-am-also-not-able-to-view-the-saved-dashboard-images-in-kibana-4-is-there-any-folder-where-it-is-stored/25575 "2015-07-16T05:03:46Z")

</div>

Continuing the discussion from Who out there is still using Kibana 3?: Continuing the discussion from Who out there is still using Kibana 3?:

---

## [Problems connecting with other nodes](https://discuss.elastic.co/t/problems-connecting-with-other-nodes/11439)

<div class="topic-metadata">

**Author:** [@VegHead](https://discuss.elastic.co/u/VegHead)\
**Replies:** 1\
**Last updated:** [April 4, 2013, 7:01am UTC](https://discuss.elastic.co/t/problems-connecting-with-other-nodes/11439 "2013-04-04T07:01:31Z")

</div>

I'm stumped. I'm sure I've got something misconfigured, but I can't figure it out. I am trying to setup a new cluster of two nodes running 0.20.6 on EC2. The EC2 Discovery phase works in that it finds the other po…

---

## [Add total row in Canvas Datatable](https://discuss.elastic.co/t/add-total-row-in-canvas-datatable/315144)

<div class="topic-metadata">

**Author:** [@Chiaaa](https://discuss.elastic.co/u/Chiaaa)\
**Replies:** 2\
**Last updated:** [September 27, 2022, 8:35am UTC](https://discuss.elastic.co/t/add-total-row-in-canvas-datatable/315144 "2022-09-27T08:35:36Z")

</div>

Hi everyone, I have a question: I need to add a line with totals on my Canvas datatable. It's possibile ? I created in Canvas a table with ES SQL Query and I cannot import Table object from Kibana, because in Canvas I…

---

## [Elastic ITSM Connector shows CORS error](https://discuss.elastic.co/t/elastic-itsm-connector-shows-cors-error/296230)

<div class="topic-metadata">

**Author:** [@pindropviolence](https://discuss.elastic.co/u/pindropviolence)\
**Replies:** 2\
**Last updated:** [February 8, 2022, 1:08pm UTC](https://discuss.elastic.co/t/elastic-itsm-connector-shows-cors-error/296230 "2022-02-08T13:08:03Z")

</div>

Hello Folks, I have tried to configured Elastic ITSM connector in Kb instance, i get CORS error when i try to create a new connection or add a connection to a rule. When I disabled CORS on browser level , I was able to …

---

## [Ignore TF/IDF in a complex query](https://discuss.elastic.co/t/ignore-tf-idf-in-a-complex-query/137446)

<div class="topic-metadata">

**Author:** [@LONGMAN](https://discuss.elastic.co/u/LONGMAN)\
**Replies:** 2\
**Last updated:** [July 5, 2018, 12:20pm UTC](https://discuss.elastic.co/t/ignore-tf-idf-in-a-complex-query/137446 "2018-07-05T12:20:28Z")

</div>

I want to ignore TF/IDF in a complex query. I tried to create custom similarity script script, but no result. Also, this article is useless for me: https://www.elastic.co/guide/en/elasticsearch/guide/master/ignoring-tf…

---

## [Logstash does not receive logs from Filebeat on another machine](https://discuss.elastic.co/t/logstash-does-not-receive-logs-from-filebeat-on-another-machine/132951)

<div class="topic-metadata">

**Author:** [@koko191](https://discuss.elastic.co/u/koko191)\
**Replies:** 2\
**Last updated:** [May 23, 2018, 9:18am UTC](https://discuss.elastic.co/t/logstash-does-not-receive-logs-from-filebeat-on-another-machine/132951 "2018-05-23T09:18:19Z")

</div>

This is a dummy setup for me to play with the Elastic stack before getting into the production environment. My setup: I'm running two Ubuntu 16.04 VMs using VirtualBox. These two instances have been configured to commu…

---

## [Getting ruby exception](https://discuss.elastic.co/t/getting-ruby-exception/130636)

<div class="topic-metadata">

**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\
**Replies:** 2\
**Last updated:** [May 4, 2018, 4:43pm UTC](https://discuss.elastic.co/t/getting-ruby-exception/130636 "2018-05-04T16:43:39Z")

</div>

Hi, I am getting error: SyntaxError: (ruby filter code):3: syntax error, unexpected tIDENTIFIER logInfo = event.get('wmcode').split('.').last I am using below filter: ruby {…

---

## [Logstash/eleasticsearch - geoip failed to parse from lat long](https://discuss.elastic.co/t/logstash-eleasticsearch-geoip-failed-to-parse-from-lat-long/111797)

<div class="topic-metadata">

**Author:** [@ajwillo](https://discuss.elastic.co/u/ajwillo)\
**Replies:** 2\
**Last updated:** [December 18, 2017, 7:09pm UTC](https://discuss.elastic.co/t/logstash-eleasticsearch-geoip-failed-to-parse-from-lat-long/111797 "2017-12-18T19:09:01Z")

</div>

I'm using elastic search 6 and logstash 6. I have added the filter below: input { udp { port =\> 9996 codec =\> netflow { versions =\> \[5, 9\] } type =\> netflow tags =\> "checkpoint-flow" } ud…

---

## [Different Logs to Different ELK Stacks](https://discuss.elastic.co/t/different-logs-to-different-elk-stacks/102289)

<div class="topic-metadata">

**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\
**Replies:** 2\
**Last updated:** [September 29, 2017, 8:36pm UTC](https://discuss.elastic.co/t/different-logs-to-different-elk-stacks/102289 "2017-09-29T20:36:53Z")

</div>

Is it possible to configure an instance of Winlogbeat to send different logs to different elk stacks? If no, how would such be accomplished? Would that require the installation of multiple instances of Winlogbeat on serv…

---

## [Does Rally support benchmarking partial updates (doc\_as\_upsert)](https://discuss.elastic.co/t/does-rally-support-benchmarking-partial-updates-doc-as-upsert/101081)

<div class="topic-metadata">

**Author:** [@Zixuan\_Liu](https://discuss.elastic.co/u/Zixuan_Liu)\
**Replies:** 2\
**Last updated:** [September 25, 2017, 8:27pm UTC](https://discuss.elastic.co/t/does-rally-support-benchmarking-partial-updates-doc-as-upsert/101081 "2017-09-25T20:27:53Z")

</div>

Hi team, I have a use case where I need to do partial updates to a document. Example POST /index/mapping/1/\_update { "doc" : { "name" : "A", }, "doc\_as\_upsert" : true } POST /index/mapping/1/\_update { "doc" :…

---

## [Problem in creation of certgen in silent mode](https://discuss.elastic.co/t/problem-in-creation-of-certgen-in-silent-mode/86791)

<div class="topic-metadata">

**Author:** [@thiru7](https://discuss.elastic.co/u/thiru7)\
**Replies:** 2\
**Last updated:** [May 24, 2017, 4:48am UTC](https://discuss.elastic.co/t/problem-in-creation-of-certgen-in-silent-mode/86791 "2017-05-24T04:48:34Z")

</div>

Hi I'm trying to generate SSL certificates for ELK -5.4.0 using x-pack in silent mode, but it prompting file name to enter, can anybody please help on this to work it out without any prompts (My ref: https://www.elast…

---

## [Getting an error when starting ES](https://discuss.elastic.co/t/getting-an-error-when-starting-es/49338)

<div class="topic-metadata">

**Author:** [@armish](https://discuss.elastic.co/u/armish)\
**Replies:** 2\
**Last updated:** [May 2, 2017, 5:39am UTC](https://discuss.elastic.co/t/getting-an-error-when-starting-es/49338 "2017-05-02T05:39:37Z")

</div>

Error: Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch System: Redhat Java: 1.8 ES: 2.3.2 JAVA\_HOME & PATH set correctly Command: /bin/elasticsearch -d

---

## [Bug on search zone auto-completion](https://discuss.elastic.co/t/bug-on-search-zone-auto-completion/57817)

<div class="topic-metadata">

**Author:** [@fdlprod](https://discuss.elastic.co/u/fdlprod)\
**Replies:** 2\
**Last updated:** [August 22, 2016, 3:05pm UTC](https://discuss.elastic.co/t/bug-on-search-zone-auto-completion/57817 "2016-08-22T15:05:40Z")

</div>

Hi, with chrome or IE when you type several search, then you can no delete or update it... very annoying... but if you change a cSS it work again...

---

## [Configからのtemplatesのロードは廃止？](https://discuss.elastic.co/t/config-templates/50786)

<div class="topic-metadata">

**Author:** [@mats116](https://discuss.elastic.co/u/mats116)\
**Replies:** 2\
**Last updated:** [May 25, 2016, 3:52am UTC](https://discuss.elastic.co/t/config-templates/50786 "2016-05-25T03:52:15Z")

</div>

elasticsearchを1.7.5から2.3.3にアップデートする際に気づいたのですが、/etc/elasticsearch/templates/配下にtemplateを配置しているとロードされる機能は廃止になったのでしょうか？ Change Logを見ても該当箇所がみつからず気になったいます。 （APIから対応できるので問題は無いのですが）

---

## [GeoIP - can't get it working](https://discuss.elastic.co/t/geoip-cant-get-it-working/41635)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 2\
**Last updated:** [February 13, 2016, 4:09pm UTC](https://discuss.elastic.co/t/geoip-cant-get-it-working/41635 "2016-02-13T16:09:22Z")

</div>

Hi all, I've followed this tutorial on how to add GeoIP to LS: DO GeoIP I've setup my apache logs to output JSON to Logstash. It's working pretty well. And since I added the json codec to the beats plugin, the lo…

---

## [Logstash multiline with incrementation](https://discuss.elastic.co/t/logstash-multiline-with-incrementation/40338)

<div class="topic-metadata">

**Author:** [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)\
**Replies:** 2\
**Last updated:** [January 29, 2016, 10:49am UTC](https://discuss.elastic.co/t/logstash-multiline-with-incrementation/40338 "2016-01-29T10:49:24Z")

</div>

Hi everyone, I'm working on log files and I have a little problem, this is an example of my logs : 192.168.0.1(localhost) (user1) file1 192.168.0.2(localhost) (user2) file2 file3 file2 - read only A new line is…

---

## [Assigning, or just Deleting shards](https://discuss.elastic.co/t/assigning-or-just-deleting-shards/22951)

<div class="topic-metadata">

**Author:** [@asrozar](https://discuss.elastic.co/u/asrozar)\
**Replies:** 2\
**Last updated:** [March 31, 2015, 1:46am UTC](https://discuss.elastic.co/t/assigning-or-just-deleting-shards/22951 "2015-03-31T01:46:46Z")

</div>

I have an elasticsearch host (single) that has a few hundred unassigned shards. curl -XGET 'http://localhost:9200/\_cluster/health?pretty=true' { "cluster\_name" : "elasticsearch", "status" : "red", "timed\_o…

---

## [JMX plugin guidance](https://discuss.elastic.co/t/jmx-plugin-guidance/136233)

<div class="topic-metadata">

**Author:** [@hburnswell](https://discuss.elastic.co/u/hburnswell)\
**Replies:** 8\
**Last updated:** [June 20, 2018, 11:20pm UTC](https://discuss.elastic.co/t/jmx-plugin-guidance/136233 "2018-06-20T23:20:32Z")

</div>

All, I'm looking for some guidance on using the JMX input plugin to gather multiple JMX streams. Ideally I was thinking to create unique indexes for each JMX stream by using: if "spefic tag" in \[tags\] {..} However,…

---

## [Use ELK stack for Jenkins Metrics Data visualization](https://discuss.elastic.co/t/use-elk-stack-for-jenkins-metrics-data-visualization/107430)

<div class="topic-metadata">

**Author:** [@Shailesh\_Vaidya](https://discuss.elastic.co/u/Shailesh_Vaidya)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 4:11pm UTC](https://discuss.elastic.co/t/use-elk-stack-for-jenkins-metrics-data-visualization/107430 "2017-11-13T16:11:10Z")

</div>

Hello, I am newbie in ELK and I am trying to use ELK stack for Jenkins data visualization. I am planning to use Jenkins remote API https://wiki.jenkins.io/display/JENKINS/Remote+access+API for fetching data. Could you …

---

## [Pagination - calculating the page number](https://discuss.elastic.co/t/pagination-calculating-the-page-number/775)

<div class="topic-metadata">

**Author:** [@bbehling](https://discuss.elastic.co/u/bbehling)\
**Replies:** 0\
**Last updated:** [May 15, 2015, 9:33pm UTC](https://discuss.elastic.co/t/pagination-calculating-the-page-number/775 "2015-05-15T21:33:38Z")

</div>

Hello. I posted this over at the old mailing list, but thought I'd try here and the new forum as well.... I have issue where I'm retying to calculate the page number of a given record. I can do this using a script fiel…

---

## [Show only time with out date](https://discuss.elastic.co/t/show-only-time-with-out-date/345059)

<div class="topic-metadata">

**Author:** [@naveed786.shaik](https://discuss.elastic.co/u/naveed786.shaik)\
**Replies:** 7\
**Last updated:** [November 3, 2023, 11:10pm UTC](https://discuss.elastic.co/t/show-only-time-with-out-date/345059 "2023-11-03T23:10:49Z")

</div>

Hi All, Need a help with Kibana dashboard , I could see the customization for date and time, in version 8.6.0 of the dashboard. I am trying to get indexed data with only time where need to exclude date. Please suggest …

---

## [Elasticsearch: Nested JSON object parsing and aggregation](https://discuss.elastic.co/t/elasticsearch-nested-json-object-parsing-and-aggregation/311340)

<div class="topic-metadata">

**Author:** [@Josh\_Thatcher](https://discuss.elastic.co/u/Josh_Thatcher)\
**Replies:** 1\
**Last updated:** [August 4, 2022, 6:12am UTC](https://discuss.elastic.co/t/elasticsearch-nested-json-object-parsing-and-aggregation/311340 "2022-08-04T06:12:33Z")

</div>

I am currently working on a project that takes GitLab Security Scanner artifacts, curls the JSON artifact files to ElasticSearch, and then visualizes certain information from said artifacts. In this scenario, I am trying…

---

## [時々 SERVICE\_UNAVAILABLE/2/no master が発生](https://discuss.elastic.co/t/service-unavailable-2-no-master/240625)

<div class="topic-metadata">

**Author:** [@chinone](https://discuss.elastic.co/u/chinone)\
**Replies:** 1\
**Last updated:** [July 15, 2020, 8:21am UTC](https://discuss.elastic.co/t/service-unavailable-2-no-master/240625 "2020-07-15T08:21:09Z")

</div>

Fluentd と Elasticsearch(v2.3.1)を利用しています。 通常は問題なく稼働しているのですが、約10分に一回、以下のエラー（SERVICE\_UNAVAILABLE/2/no master）がエラーログに表示されます。 マスターノードは正常に動いており、マスターの変更はおこっておりません。 どのような問題がおこっており、どうすれば解決できるでしょうか？ 2020-07-10 03:22:07 +0900 \[…

---

## [Grok parsefailure](https://discuss.elastic.co/t/grok-parsefailure/230398)

<div class="topic-metadata">

**Author:** [@GedeoN](https://discuss.elastic.co/u/GedeoN)\
**Replies:** 7\
**Last updated:** [May 5, 2020, 9:06am UTC](https://discuss.elastic.co/t/grok-parsefailure/230398 "2020-05-05T09:06:06Z")

</div>

Hi experts, I have a new problem, and this time, i don't think i can resolve it myself. I'm trying to parse a little message like that: 2020-02-12 13:52:04.15 spid4s Execution of SSIS\_HOTFIX\_INSTALL.SQL completed…

---

## [Automate deletion of indices in aws elasticcluster](https://discuss.elastic.co/t/automate-deletion-of-indices-in-aws-elasticcluster/181682)

<div class="topic-metadata">

**Author:** [@Shubham\_Yadav1](https://discuss.elastic.co/u/Shubham_Yadav1)\
**Replies:** 7\
**Last updated:** [June 2, 2019, 1:00pm UTC](https://discuss.elastic.co/t/automate-deletion-of-indices-in-aws-elasticcluster/181682 "2019-06-02T13:00:55Z")

</div>

I have 3 questions: how to automate deletion of indices stored in aws\_es: I am using an aws\_elasticsearch to store data where each index is created everyday based on the time stamp they have. I am using -%{+YYYY.MM.d…

---

## [Elasticsearch 9200 and 9300](https://discuss.elastic.co/t/elasticsearch-9200-and-9300/162599)

<div class="topic-metadata">

**Author:** [@jack\_liang](https://discuss.elastic.co/u/jack_liang)\
**Replies:** 1\
**Last updated:** [January 2, 2019, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-9200-and-9300/162599 "2019-01-02T07:26:02Z")

</div>

9200 is restful api， 9300 is java api now，I don't know which one to choose. 9200 can do more than 9300 for example，9200 can use "\_cat/indices"，but 9300 can not but my project is use java， i use both 9200 port and 93…

---

## [How to export and import kibana dashboards for prod deployment](https://discuss.elastic.co/t/how-to-export-and-import-kibana-dashboards-for-prod-deployment/150306)

<div class="topic-metadata">

**Author:** [@Goyal.vikas87](https://discuss.elastic.co/u/Goyal.vikas87)\
**Replies:** 1\
**Last updated:** [September 28, 2018, 1:29pm UTC](https://discuss.elastic.co/t/how-to-export-and-import-kibana-dashboards-for-prod-deployment/150306 "2018-09-28T13:29:35Z")

</div>

Please suggest how I can export and import kibana dashboards including all dependencies like dashboard ad, visualization, index patterns, searches etc in one go. It is not good practice to manually create anything in pr…

---

## [Logstash - UNEXPECTED POOL ERROR](https://discuss.elastic.co/t/logstash-unexpected-pool-error/121524)

<div class="topic-metadata">

**Author:** [@przemolb](https://discuss.elastic.co/u/przemolb)\
**Replies:** 1\
**Last updated:** [February 26, 2018, 5:33pm UTC](https://discuss.elastic.co/t/logstash-unexpected-pool-error/121524 "2018-02-26T17:33:22Z")

</div>

\[2018-02-26T16:28:52,669\]\[WARN \]\[logstash.outputs.elasticsearch\] UNEXPECTED POOL ERROR {:e=\>#\<LogStash::Outputs::ElasticSearch::HttpClient::Pool::NoConnectionAvailableError: No Available connections\>} \[2018-02-26T16:28:5…

[Previous page](https://discuss.elastic.co/top.md?page=1635&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1637&per_page=50&period=all)
