# Top **URL:** https://discuss.elastic.co/top.md?page=164&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 165 --- ## [\[Ann\] Elasticsearch Word Decompound Plugin](https://discuss.elastic.co/t/ann-elasticsearch-word-decompound-plugin/9773)
**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\ **Replies:** 10\ **Last updated:** [January 9, 2013, 8:33pm UTC](https://discuss.elastic.co/t/ann-elasticsearch-word-decompound-plugin/9773 "2013-01-09T20:33:39Z")
Hi, in my spare time this evening, while I'm still wrangling with some NLP plugins (Stanford , UIMA, OpenNLP), and eagerly awaiting Lucene 4, I reworked a Compact Patricia Trie implementation of Chris Biemann for … --- ## [Aging strategy described in the ES website's "Retiring Data" document isn't working for me](https://discuss.elastic.co/t/aging-strategy-described-in-the-es-websites-retiring-data-document-isnt-working-for-me/21410)
**Author:** [@Steve\_Johnson](https://discuss.elastic.co/u/Steve_Johnson)\ **Replies:** 11\ **Last updated:** [January 1, 2015, 11:47pm UTC](https://discuss.elastic.co/t/aging-strategy-described-in-the-es-websites-retiring-data-document-isnt-working-for-me/21410 "2015-01-01T23:47:02Z")
Greetings, I'm setting up a fresh cluster of two machines on AWS to serve as a ELK log server stack. I've imported 4 months worth of log data to play with on the new cluster. I'm trying to reproduce the behav… --- ## [Geoip no longer working](https://discuss.elastic.co/t/geoip-no-longer-working/42417)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 10\ **Last updated:** [February 24, 2016, 1:50pm UTC](https://discuss.elastic.co/t/geoip-no-longer-working/42417 "2016-02-24T13:50:22Z")
Hi, all. Reecently, I moved from logstash-forwarder to filebeat on my linux nodes. Prior to the change, I had geoip working well. This is the stanza in logstash-forwarder.conf which, along with the input and filter c… --- ## [Large data migration failure](https://discuss.elastic.co/t/large-data-migration-failure/246901)
**Author:** [@chen\_steven](https://discuss.elastic.co/u/chen_steven)\ **Replies:** 13\ **Last updated:** [September 9, 2020, 8:20pm UTC](https://discuss.elastic.co/t/large-data-migration-failure/246901 "2020-09-09T20:20:01Z")
Background: I need to migrate my data from 1 cloud service provider to another, and I pick the solution of add new nodes in current cluster, wait for data copy and rebalance and separate them into 2 clusters. But after… --- ## [Select columns in a Date Histogram visualization chart](https://discuss.elastic.co/t/select-columns-in-a-date-histogram-visualization-chart/267149)
**Author:** [@Arieh\_Tal](https://discuss.elastic.co/u/Arieh_Tal)\ **Replies:** 11\ **Last updated:** [March 27, 2021, 1:05pm UTC](https://discuss.elastic.co/t/select-columns-in-a-date-histogram-visualization-chart/267149 "2021-03-27T13:05:53Z")
I want to select some columns of the following date histogram based on date range e.g 18:00 daily Added: The columns represent the sum of documents per 6 hour interval See required result below Thanks, Arieh Tal … --- ## [An error in Logstash with Beats tagged](https://discuss.elastic.co/t/an-error-in-logstash-with-beats-tagged/128506)
**Author:** [@Roshan\_r](https://discuss.elastic.co/u/Roshan_r)\ **Replies:** 17\ **Last updated:** [April 18, 2018, 2:05pm UTC](https://discuss.elastic.co/t/an-error-in-logstash-with-beats-tagged/128506 "2018-04-18T14:05:07Z")
Im getting an error in logstash but it comes from Beats , i guess looking at the logs. \[\[main\]\ **Author:** [@Eric\_Sites](https://discuss.elastic.co/u/Eric_Sites)\ **Replies:** 14\ **Last updated:** [June 23, 2014, 8:23pm UTC](https://discuss.elastic.co/t/0-90-2--update-or--bulk-update-causing-nullpointerexception-in-logs-and-i-start-losing-shards/13061 "2014-06-23T20:23:47Z") I am getting java.lang.NullPointerException exception in my ElasticSearch cluster logs when I am doing a \_bulk update or just an \_update. I am sending a lot of data to my clusters. After I get this error I lose a sh… --- ## [Kibana DDOS dashboard - Detailed dashboard](https://discuss.elastic.co/t/kibana-ddos-dashboard-detailed-dashboard/276182)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 10\ **Last updated:** [June 24, 2021, 4:10am UTC](https://discuss.elastic.co/t/kibana-ddos-dashboard-detailed-dashboard/276182 "2021-06-24T04:10:19Z")
I'm finding it a little challenging in developing dashboards beyond a line and pie chart. Looking for advice from kibana experts who can guide me towards resources or personal tips and tricks. Given the python script, d… --- ## [Connect kibana to Elasticsearch after changes made](https://discuss.elastic.co/t/connect-kibana-to-elasticsearch-after-changes-made/325518)
**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\ **Replies:** 16\ **Last updated:** [February 15, 2023, 4:00pm UTC](https://discuss.elastic.co/t/connect-kibana-to-elasticsearch-after-changes-made/325518 "2023-02-15T16:00:15Z")
Hello! My kibana doesnt talk to Elasticsearch after changes are made in elasticsearch config Some history: installed ELK on one host and filebeat on another one. Started elasticsearch, started kibana, started logsta… --- ## [Cron job for purging disk space](https://discuss.elastic.co/t/cron-job-for-purging-disk-space/73125)
**Author:** [@Shadowraze](https://discuss.elastic.co/u/Shadowraze)\ **Replies:** 9\ **Last updated:** [March 2, 2017, 4:57pm UTC](https://discuss.elastic.co/t/cron-job-for-purging-disk-space/73125 "2017-03-02T16:57:38Z")
So I decided to use elastic curator for this, that's my action.yml http://pastebin.com/kRL3q9cq. I'm not sure that I clearly understand what merging will do. I think my curator action file should delete old indices and m… --- ## [Limiting queries from elasticsearch service side](https://discuss.elastic.co/t/limiting-queries-from-elasticsearch-service-side/296557)
**Author:** [@LukoJy](https://discuss.elastic.co/u/LukoJy)\ **Replies:** 10\ **Last updated:** [February 14, 2022, 9:40am UTC](https://discuss.elastic.co/t/limiting-queries-from-elasticsearch-service-side/296557 "2022-02-14T09:40:24Z")
Hello, I would like to know if there is a way to limit incoming queries from the Elasticsearch service side, for example, restrict total hits, size, or searched shards to a specific value? In our environment, different… --- ## [How to do automation of "index,type,id" before actual json data in elastic search](https://discuss.elastic.co/t/how-to-do-automation-of-index-type-id-before-actual-json-data-in-elastic-search/76532)
**Author:** [@Gurram\_Vinay](https://discuss.elastic.co/u/Gurram_Vinay)\ **Replies:** 10\ **Last updated:** [March 3, 2017, 8:39am UTC](https://discuss.elastic.co/t/how-to-do-automation-of-index-type-id-before-actual-json-data-in-elastic-search/76532 "2017-03-03T08:39:15Z")
Hello , I have a doubt at "index,type,id" for elastic search. I had a data and converted in json and seen code below like "index,type,id" of each&every data. How can I actually do it? I've checked some tutorials and c… --- ## [How to extract rows with logstash](https://discuss.elastic.co/t/how-to-extract-rows-with-logstash/106236)
**Author:** [@citanionarrei](https://discuss.elastic.co/u/citanionarrei)\ **Replies:** 11\ **Last updated:** [November 6, 2017, 6:06pm UTC](https://discuss.elastic.co/t/how-to-extract-rows-with-logstash/106236 "2017-11-06T18:06:09Z")
hi i have this log file 2017-06-08 12:10:12,924 | INFO | nager-plugin-out | ExtraDataServices | 302 - 2017-06-08 12:10:12,925 | DEBUG | nager-plugin-out | deleteByExample | 285 - 2017-06-08 12:10:12,925 | DEBU… --- ## [How Can I increase ES's indexing Data speed?Bulk can't achieve it!](https://discuss.elastic.co/t/how-can-i-increase-ess-indexing-data-speed-bulk-cant-achieve-it/37196)
**Author:** [@LDA-MAN](https://discuss.elastic.co/u/LDA-MAN)\ **Replies:** 11\ **Last updated:** [December 15, 2015, 11:01am UTC](https://discuss.elastic.co/t/how-can-i-increase-ess-indexing-data-speed-bulk-cant-achieve-it/37196 "2015-12-15T11:01:26Z")
i use bulkIndex or BulkProcessor Index Data ,and with 5 thread! my data are one milion items and 700M; this takes two hours to index! i think it's too long,how can better it ? how can i index faster? --- ## [Custom \_source compression / compaction to reduce disk usage](https://discuss.elastic.co/t/custom--source-compression-compaction-to-reduce-disk-usage/21258)
**Author:** [@Eran\_Duchan](https://discuss.elastic.co/u/Eran_Duchan)\ **Replies:** 12\ **Last updated:** [December 18, 2014, 9:26am UTC](https://discuss.elastic.co/t/custom--source-compression-compaction-to-reduce-disk-usage/21258 "2014-12-18T09:26:35Z")
Hi list, We are dumping about 100M ~3KB documents a day into ElasticSearch 1.4.1 and indexing all fields (of which there are a few dozen). From a read perspective we perform dynamic queries which may return many r… --- ## [NO machine learning button in kibana, 6.0 containers](https://discuss.elastic.co/t/no-machine-learning-button-in-kibana-6-0-containers/108622)
**Author:** [@gosha1128](https://discuss.elastic.co/u/gosha1128)\ **Replies:** 9\ **Last updated:** [November 22, 2017, 4:25am UTC](https://discuss.elastic.co/t/no-machine-learning-button-in-kibana-6-0-containers/108622 "2017-11-22T04:25:11Z")
Hey, i'm new to elastic search but mostly everything is good ! I'm am trying to evaluate anomaly detection, but I don't see the ML button in kibana. I have both 6.0 elastic search and kibana containers running and talk… --- ## [Metricbeat docker module appears to be leaking file descriptor when metricset cpu, diskio, memory, or network is enabled](https://discuss.elastic.co/t/metricbeat-docker-module-appears-to-be-leaking-file-descriptor-when-metricset-cpu-diskio-memory-or-network-is-enabled/264772)
**Author:** [@jmcclure](https://discuss.elastic.co/u/jmcclure)\ **Replies:** 9\ **Last updated:** [February 24, 2021, 10:57pm UTC](https://discuss.elastic.co/t/metricbeat-docker-module-appears-to-be-leaking-file-descriptor-when-metricset-cpu-diskio-memory-or-network-is-enabled/264772 "2021-02-24T22:57:13Z")
Environment Metricbeat oss: 7.10.2 Elasticsearch oss: 7.10.2 Docker Engine: 18.09.0 Docker API: 1.39 (minimum version 1.12) OS: CentOS 7.6.1810 Hi, My deployment is on Linux with Docker, where Elasticsearch runs as a… --- ## [Could not able to use geo\_ip in logstash 2.4](https://discuss.elastic.co/t/could-not-able-to-use-geo-ip-in-logstash-2-4/63689)
**Author:** [@Kim\_Daniel](https://discuss.elastic.co/u/Kim_Daniel)\ **Replies:** 10\ **Last updated:** [October 26, 2016, 11:06am UTC](https://discuss.elastic.co/t/could-not-able-to-use-geo-ip-in-logstash-2-4/63689 "2016-10-26T11:06:54Z")
hi all, I'm trying to use geoip from apache access log with logstash 2.4, elasticsearch 2.4, kibna 4.6. my logstash filter is... input { file { path =\> "/var/log/httpd/access\_log" type =\> "apache" … --- ## [Kibana configure alert based upon dynamic value](https://discuss.elastic.co/t/kibana-configure-alert-based-upon-dynamic-value/326132)
**Author:** [@Raj4](https://discuss.elastic.co/u/Raj4)\ **Replies:** 9\ **Last updated:** [March 4, 2023, 3:15am UTC](https://discuss.elastic.co/t/kibana-configure-alert-based-upon-dynamic-value/326132 "2023-03-04T03:15:35Z")
Hello All, I am new to Kibana, I need to achieve the below. Please advise. I am using formula to calculate one column data, I want to alert only if the calculated column value is greater than 5% difference. Example: … --- ## [CDI injected/managed TransportClient fails in ElasticSearch 5.3](https://discuss.elastic.co/t/cdi-injected-managed-transportclient-fails-in-elasticsearch-5-3/81666)
**Author:** [@etay2000](https://discuss.elastic.co/u/etay2000)\ **Replies:** 9\ **Last updated:** [April 18, 2017, 2:50am UTC](https://discuss.elastic.co/t/cdi-injected-managed-transportclient-fails-in-elasticsearch-5-3/81666 "2017-04-18T02:50:09Z")
Is using CDI to inject and manage the creation of TransportClient instances supported in 5.3? In 5.2.2 I was able to use a CDI producer method to @Inject a PreBuiltTransportClient instance with no issues. As of 5.3 this … --- ## [Bulk Update operation on multi field type and search](https://discuss.elastic.co/t/bulk-update-operation-on-multi-field-type-and-search/319143)
**Author:** [@Sagar\_Viradiya](https://discuss.elastic.co/u/Sagar_Viradiya)\ **Replies:** 17\ **Last updated:** [November 29, 2022, 5:51am UTC](https://discuss.elastic.co/t/bulk-update-operation-on-multi-field-type-and-search/319143 "2022-11-29T05:51:51Z")
Previously we had mapping in index\_1 Index. { "properties": { "offer\_id":{ "type":long, "fields": { "keyword": { "type": "text" } … --- ## [Kibana Service won't start after 7.8 -\> 7.10 Upgrade](https://discuss.elastic.co/t/kibana-service-wont-start-after-7-8-7-10-upgrade/258866)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 9\ **Last updated:** [December 18, 2020, 3:40pm UTC](https://discuss.elastic.co/t/kibana-service-wont-start-after-7-8-7-10-upgrade/258866 "2020-12-18T15:40:18Z")
My Cluster: 3x CentOS 7 Elasticsearch 7.10 Logstash 7.10 Kibana 7.10 Filebeat 7.10 So i just upgraded my Cluster to version 7.10 Everything works fine (even Elasticsearch after messing with jvm.options a bit), but… --- ## [Received an event that has a different character encoding than you configured - Logstash CPU](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured-logstash-cpu/361297)
**Author:** [@amaljoy](https://discuss.elastic.co/u/amaljoy)\ **Replies:** 9\ **Last updated:** [August 12, 2024, 6:42am UTC](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured-logstash-cpu/361297 "2024-08-12T06:42:35Z")
Hi Guys, I received an unknown event from the syslog server. Received an event that has a different character encoding than you configured. {:text=\>"\\\\xC0\\\\u0014\\\\u00009\\\\u00008\\\\u0000\\\\x88\\\\u0000\\\\x87\\\\xC0\\\\u0019\\\\u0… --- ## [Java Rest client builder method throwing error for using HttpClientConfigCallback() method](https://discuss.elastic.co/t/java-rest-client-builder-method-throwing-error-for-using-httpclientconfigcallback-method/247558)
**Author:** [@soumrock123](https://discuss.elastic.co/u/soumrock123)\ **Replies:** 9\ **Last updated:** [September 5, 2020, 1:11pm UTC](https://discuss.elastic.co/t/java-rest-client-builder-method-throwing-error-for-using-httpclientconfigcallback-method/247558 "2020-09-05T13:11:14Z")
I am trying to set up an Elasticsearch high level rest client to connect with an already set up ES cluster via Http Host setup and regular credential authentication. I am setting this up to ingest data from my local syst… --- ## [Access for private repositories](https://discuss.elastic.co/t/access-for-private-repositories/208400)
**Author:** [@mma1](https://discuss.elastic.co/u/mma1)\ **Replies:** 14\ **Last updated:** [November 20, 2019, 5:05pm UTC](https://discuss.elastic.co/t/access-for-private-repositories/208400 "2019-11-20T17:05:44Z")
I have rally running via docker using existing Elastic clusters. I am trying to make my own custom tracks and I cannot get rally to git clone my private github repository. If I use ssh git, it fails with: 2019-11-18 22:… --- ## [APM Server upgradation to 7.17.6 is consuming more resources](https://discuss.elastic.co/t/apm-server-upgradation-to-7-17-6-is-consuming-more-resources/319266)
**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\ **Replies:** 17\ **Last updated:** [February 10, 2023, 1:47am UTC](https://discuss.elastic.co/t/apm-server-upgradation-to-7-17-6-is-consuming-more-resources/319266 "2023-02-10T01:47:53Z")
Hi Elastic Fans... I am in the process of upgrading ElasticAPMServer from 7.14.2 to 7.17.6 Things were working as expected in 7.14.2. To avoid vulnerability checks, we upgraded to 7.16.6 APMServer is managed by operat… --- ## [Terms splits up my data](https://discuss.elastic.co/t/terms-splits-up-my-data/55807)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 9\ **Last updated:** [July 19, 2016, 9:23pm UTC](https://discuss.elastic.co/t/terms-splits-up-my-data/55807 "2016-07-19T21:23:08Z")
When using terms , the kibana 3 splits up my data into chunks. How can i get rid of this. Example : I have a key field with value "drdvd/win10/x64/829243-b21.wim" . When using terms to filter out the key with the r… --- ## [Campo Geolocalização no Elastic como String](https://discuss.elastic.co/t/campo-geolocalizacao-no-elastic-como-string/247117)
**Author:** [@correa.wlan](https://discuss.elastic.co/u/correa.wlan)\ **Replies:** 12\ **Last updated:** [September 1, 2020, 5:55pm UTC](https://discuss.elastic.co/t/campo-geolocalizacao-no-elastic-como-string/247117 "2020-09-01T17:55:51Z")
Bom dia a todos, estou tentando converter o campo "Localizacao" no Elastic através do kibana mais não estou tendo sucesso, alguém pode me dar uma força pra eu entender onde estou errando. Segue parametros de envio no Lo… --- ## [Need advise on an Kafka-ELK cluster and Logstash settings to improve indexing rate](https://discuss.elastic.co/t/need-advise-on-an-kafka-elk-cluster-and-logstash-settings-to-improve-indexing-rate/140114)
**Author:** [@anon24174512](https://discuss.elastic.co/u/anon24174512)\ **Replies:** 11\ **Last updated:** [July 16, 2018, 1:55pm UTC](https://discuss.elastic.co/t/need-advise-on-an-kafka-elk-cluster-and-logstash-settings-to-improve-indexing-rate/140114 "2018-07-16T13:55:52Z")
Dear all, I am trying to build an ELK cluster together with Kafka to get the best indexing rate in Elasticsearch. Following the description of my cluster hardware and configuration below : is the architecture correct … --- ## [Problem searching Filebeat netflow module logs](https://discuss.elastic.co/t/problem-searching-filebeat-netflow-module-logs/249166)
**Author:** [@Sylancer](https://discuss.elastic.co/u/Sylancer)\ **Replies:** 14\ **Last updated:** [September 22, 2020, 4:19am UTC](https://discuss.elastic.co/t/problem-searching-filebeat-netflow-module-logs/249166 "2020-09-22T04:19:07Z")
I'm really sorry if this isn't the right tag for this, I'm just not sure where to start. I recently installed Filebeat, enabled the netflow module and pointed my Edgerouter X to my machine running the Elastic stack. I'm… --- ## [Split brain case?](https://discuss.elastic.co/t/split-brain-case/33147)
**Author:** [@zokratez](https://discuss.elastic.co/u/zokratez)\ **Replies:** 9\ **Last updated:** [October 28, 2015, 9:16pm UTC](https://discuss.elastic.co/t/split-brain-case/33147 "2015-10-28T21:16:44Z")
Hi there! I has 2 nodes cluster working well... But when I create a third node to prevent the split brain the logstash stoped work... I have 3 nodes: Belerian (8GB), Eglarest(4GB) and Gondolin(4GB). Each one is a ind… --- ## [Master not discovered yet](https://discuss.elastic.co/t/master-not-discovered-yet/307752)
**Author:** [@tamis-laan](https://discuss.elastic.co/u/tamis-laan)\ **Replies:** 13\ **Last updated:** [June 21, 2022, 2:41pm UTC](https://discuss.elastic.co/t/master-not-discovered-yet/307752 "2022-06-21T14:41:09Z")
I'm trying to build a docker swarm elasticsearch cluster and I have the following compose file: elastic: # image: elasticsearch:7.14.1 image: elasticsearch:7.6.2 hostname: elastic.{{.Task.Slot}} enviro… --- ## [All Shards failed to assign](https://discuss.elastic.co/t/all-shards-failed-to-assign/242075)
**Author:** [@Pradeep\_K\_S](https://discuss.elastic.co/u/Pradeep_K_S)\ **Replies:** 18\ **Last updated:** [July 29, 2020, 9:01am UTC](https://discuss.elastic.co/t/all-shards-failed-to-assign/242075 "2020-07-29T09:01:55Z")
Hi, I tried restoring EBS of Elastic search nodes from one cluster to another but after restoring the EBS nodes are running in EC2 but cluster health shows red. GET http://hostname/\_cluster/health?pretty { "cluster\_n… --- ## [Not entitled: component \[repository-s3\] after update from 8.17.4 to 8.18.0](https://discuss.elastic.co/t/not-entitled-component-repository-s3-after-update-from-8-17-4-to-8-18-0/377166)
**Author:** [@ATecha](https://discuss.elastic.co/u/ATecha)\ **Replies:** 11\ **Last updated:** [April 17, 2025, 10:54am UTC](https://discuss.elastic.co/t/not-entitled-component-repository-s3-after-update-from-8-17-4-to-8-18-0/377166 "2025-04-17T10:54:21Z")
Noticed this in the log after updating from 8.17.4 to the just-released 8.18.0. It occurred in the first startup, and any restart since. \[2025-04-15T14:44:04,795\]\[INFO \]\[o.e.n.Node \] \[node-0-dev\] Default … --- ## [Elasticsearch change state](https://discuss.elastic.co/t/elasticsearch-change-state/232937)
**Author:** [@khzied](https://discuss.elastic.co/u/khzied)\ **Replies:** 9\ **Last updated:** [May 17, 2020, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-change-state/232937 "2020-05-17T14:14:37Z")
Hello, I'm running Elasticsearch 5.6 and when my Cluster became yellow I have these logs In master: \[2020-05-15T14:50:57,908\]\[DEBUG\]\[o.e.a.a.c.n.s.TransportNodesStatsAction\] \[node-elasticsearch\_master\_02\] failed to ex… --- ## [How many master node should be in configuration](https://discuss.elastic.co/t/how-many-master-node-should-be-in-configuration/303198)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 16\ **Last updated:** [April 26, 2022, 8:44am UTC](https://discuss.elastic.co/t/how-many-master-node-should-be-in-configuration/303198 "2022-04-26T08:44:48Z")
Hi I've developed such configuration host1 2 x master node 3x data hot 9x data warm host2 2 x master node 3x data hot 9x data warm in the docker logs I don't see any suspicious but I can't set up a kibana\_system … --- ## [Подскажите, корректно ли такое функционирование gc.log](https://discuss.elastic.co/t/gc-log/211058)
**Author:** [@Vivaldy](https://discuss.elastic.co/u/Vivaldy)\ **Replies:** 13\ **Last updated:** [December 10, 2019, 8:54pm UTC](https://discuss.elastic.co/t/gc-log/211058 "2019-12-10T20:54:02Z")
В gc.log наблюдаю такую картину \[2019-12-09T07:04:18.772+0000\]\[23226\]\[gc\] Using Concurrent Mark Sweep \[2019-12-09T07:04:18.772+0000\]\[23226\]\[gc,heap,coops\] Heap address: 0x00000000c0000000, size: 1024 MB, Compressed Oop… --- ## [Error in template](https://discuss.elastic.co/t/error-in-template/87865)
**Author:** [@AadarshKumayan](https://discuss.elastic.co/u/AadarshKumayan)\ **Replies:** 13\ **Last updated:** [June 2, 2017, 7:10am UTC](https://discuss.elastic.co/t/error-in-template/87865 "2017-06-02T07:10:30Z")
Hi i have a problem , i am trying to run logsatsh it generaates the following error :message=\>"Error: Expected one of #, input, filter, output at line 34, column 1 (byte 855) after ", :level=\>:error} i have downloaded… --- ## [Logstash high CPU usage](https://discuss.elastic.co/t/logstash-high-cpu-usage/145497)
**Author:** [@mamta](https://discuss.elastic.co/u/mamta)\ **Replies:** 13\ **Last updated:** [August 23, 2018, 10:57am UTC](https://discuss.elastic.co/t/logstash-high-cpu-usage/145497 "2018-08-23T10:57:30Z")
Hi, I have installed ELK on redhat machine. ELK version is 5.6.8. I searched a lot on google and discuss elastic forum as well but not able to solve it. I have uploaded a screenshot of CPU usage. Logstash yaml file … --- ## [Elasticsearch Transfer Physical Files](https://discuss.elastic.co/t/elasticsearch-transfer-physical-files/77900)
**Author:** [@ericy](https://discuss.elastic.co/u/ericy)\ **Replies:** 13\ **Last updated:** [March 10, 2017, 8:53pm UTC](https://discuss.elastic.co/t/elasticsearch-transfer-physical-files/77900 "2017-03-10T20:53:11Z")
Hi, First time poster. I would like to know if I could use Elasticsearch to transfer a physical file, such as a Word document or a pdf, from the client to server? Any API and/or plug-in there are available to do this? … --- ## [How can i start the netflow module through the systemctl](https://discuss.elastic.co/t/how-can-i-start-the-netflow-module-through-the-systemctl/113162)
**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Replies:** 11\ **Last updated:** [December 26, 2017, 7:35am UTC](https://discuss.elastic.co/t/how-can-i-start-the-netflow-module-through-the-systemctl/113162 "2017-12-26T07:35:28Z")
Hi all, now i can start my netflow module in my logstash through the command line.But i'd like to start it by systemctl.But i failed. /usr/share/logstash/bin/logstash --modules netflow --setup -M netflow.var.input.udp.p… --- ## [Analyzing logs and document limit per shard](https://discuss.elastic.co/t/analyzing-logs-and-document-limit-per-shard/72411)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 10\ **Last updated:** [January 24, 2017, 9:09am UTC](https://discuss.elastic.co/t/analyzing-logs-and-document-limit-per-shard/72411 "2017-01-24T09:09:35Z")
Hello, I wast to store my log files in Elasticsearch for further analysis. But as far as I understand, there is a limit of 2bil of docs per shard. My application generates about 1 bil of log lines per day, so this l… --- ## [Cannot recover index - store.found: false](https://discuss.elastic.co/t/cannot-recover-index-store-found-false/223827)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 13\ **Last updated:** [March 17, 2020, 2:33pm UTC](https://discuss.elastic.co/t/cannot-recover-index-store-found-false/223827 "2020-03-17T14:33:24Z")
After a full cluster restart, some of my indices remained red. Among them a few had replicas... Cluster allocation explain API informs me that a pri 3 rep 1 index is missing its primary shard 0, on every node I get: … --- ## [Filebeat is unable to create custom index](https://discuss.elastic.co/t/filebeat-is-unable-to-create-custom-index/322755)
**Author:** [@AdityaKhajuria](https://discuss.elastic.co/u/AdityaKhajuria)\ **Replies:** 11\ **Last updated:** [January 11, 2023, 11:19am UTC](https://discuss.elastic.co/t/filebeat-is-unable-to-create-custom-index/322755 "2023-01-11T11:19:55Z")
Hi team, Im trying to create custom index with Filebeat and ive read the official docs and disabled the ilm (setup.ilm.enabled: false) and also configured the template name and pattern but now index template is getting … --- ## [Fleet managed Elastic Agent environment/deployment name? custom field?](https://discuss.elastic.co/t/fleet-managed-elastic-agent-environment-deployment-name-custom-field/282565)
**Author:** [@mohsen0](https://discuss.elastic.co/u/mohsen0)\ **Replies:** 11\ **Last updated:** [September 2, 2021, 3:59pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-environment-deployment-name-custom-field/282565 "2021-09-02T15:59:26Z")
Hi I was wondering if there is a way to pass parameters to elastic agents when enrolling happens, to differentiate logs pushed from different environments. On the other hand they are some configuration that can be set … --- ## [Unassigned shards and Elasticsearch health turns RED](https://discuss.elastic.co/t/unassigned-shards-and-elasticsearch-health-turns-red/207065)
**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\ **Replies:** 12\ **Last updated:** [November 8, 2019, 7:03pm UTC](https://discuss.elastic.co/t/unassigned-shards-and-elasticsearch-health-turns-red/207065 "2019-11-08T19:03:16Z")
Hi, I'm having a single node cluster architecture where my ELK is in a server (say servA) and Filebeat is in remote server. there are 2 remote servers say filebeat-A(fA) in serverB(sB) and filebeat-B(fB) in serverC(sC) … --- ## [Update stats](https://discuss.elastic.co/t/update-stats/110667)
**Author:** [@matw](https://discuss.elastic.co/u/matw)\ **Replies:** 9\ **Last updated:** [December 20, 2017, 9:10am UTC](https://discuss.elastic.co/t/update-stats/110667 "2017-12-20T09:10:18Z")
How can i find out how often documents were updated via the \_stats request? can't find it, so i'm guessing it could be the get.exists\_total value of the \_stats request since at every update there has to be a request wh… --- ## [Increasing number of Alerts for Detection Rules](https://discuss.elastic.co/t/increasing-number-of-alerts-for-detection-rules/357064)
**Author:** [@uhxqc](https://discuss.elastic.co/u/uhxqc)\ **Replies:** 17\ **Last updated:** [June 12, 2024, 1:14am UTC](https://discuss.elastic.co/t/increasing-number-of-alerts-for-detection-rules/357064 "2024-06-12T01:14:38Z")
Hello, I am currently using the open source version of Elastic. I have created a couple of Detection Rules. But the number of alerts I can create per rule is limited to 100. If my understanding is correct, the number o… --- ## [Connect filebeat to ELK](https://discuss.elastic.co/t/connect-filebeat-to-elk/319482)
**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\ **Replies:** 18\ **Last updated:** [November 27, 2022, 6:31pm UTC](https://discuss.elastic.co/t/connect-filebeat-to-elk/319482 "2022-11-27T18:31:05Z")
Hello! Could you provide link to connect filebeat to logstash ? jboss logs will be transmitted Thank you --- ## [Send raw logs to elastic server](https://discuss.elastic.co/t/send-raw-logs-to-elastic-server/321096)
**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\ **Replies:** 13\ **Last updated:** [December 14, 2022, 11:54am UTC](https://discuss.elastic.co/t/send-raw-logs-to-elastic-server/321096 "2022-12-14T11:54:36Z")
Hi I have 2 question about elastic 1-how can i send all files located in specific path with random name via filebeat like this: /var/log/app/serverlog.log /var/log/app/applog.log /var/log/app/exceptionlog.log ... t… [Previous page](https://discuss.elastic.co/top.md?page=163&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=165&per_page=50&period=all)