# Top

**URL:** https://discuss.elastic.co/top.md?page=1652&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1653

---

## [Painless list collect](https://discuss.elastic.co/t/painless-list-collect/107378)

<div class="topic-metadata">

**Author:** [@Conall\_Prendergast](https://discuss.elastic.co/u/Conall_Prendergast)\
**Replies:** 1\
**Last updated:** [November 15, 2017, 7:26am UTC](https://discuss.elastic.co/t/painless-list-collect/107378 "2017-11-15T07:26:57Z")

</div>

Hi, I am trying to do a script transform in painless, and am following an example I found here regarding list.collect syntax. My painless script is: "transform" : { "script" : "return ctx.payload.hits.ag…

---

## [Logstash-5.0.0.deb not installing correctly on Raspbian 8](https://discuss.elastic.co/t/logstash-5-0-0-deb-not-installing-correctly-on-raspbian-8/65427)

<div class="topic-metadata">

**Author:** [@dom1](https://discuss.elastic.co/u/dom1)\
**Replies:** 1\
**Last updated:** [November 9, 2016, 1:21pm UTC](https://discuss.elastic.co/t/logstash-5-0-0-deb-not-installing-correctly-on-raspbian-8/65427 "2016-11-09T13:21:50Z")

</div>

Hi, I'm trying to get logstash installed on my Rpi. I got an error at installation and when running "sudo dpkg-reconfigure logstash". The error is the following : Using provided startup.options file: /etc/logstash/sta…

---

## [Logstash fails at logstash-filter-cipher plugin](https://discuss.elastic.co/t/logstash-fails-at-logstash-filter-cipher-plugin/63176)

<div class="topic-metadata">

**Author:** [@anandpathak](https://discuss.elastic.co/u/anandpathak)\
**Replies:** 1\
**Last updated:** [October 18, 2016, 6:01am UTC](https://discuss.elastic.co/t/logstash-fails-at-logstash-filter-cipher-plugin/63176 "2016-10-18T06:01:05Z")

</div>

Hi, I am using logstash : 2.2.4 and logstash-filter-cipher : 2.0.5 on linux ubuntu 14.04. I am taking input from kafka and filtering it with cipher plugin where I am decrypting message which is encrypted using aes-128-…

---

## [Elastic search cluster throwing error](https://discuss.elastic.co/t/elastic-search-cluster-throwing-error/62269)

<div class="topic-metadata">

**Author:** [@Lijo\_Mathew](https://discuss.elastic.co/u/Lijo_Mathew)\
**Replies:** 1\
**Last updated:** [October 5, 2016, 6:00pm UTC](https://discuss.elastic.co/t/elastic-search-cluster-throwing-error/62269 "2016-10-05T18:00:35Z")

</div>

My Elastic search cluster which was working fine till yesterday suddenly started throwing "failed send ping to" errors. Full error : \[2016-10-05 01:45:29,394\]\[WARN \]\[discovery.zen.ping.unicast\] \[Niles Van Roekel\] \[1\] …

---

## [Logstash Through DMZ](https://discuss.elastic.co/t/logstash-through-dmz/43136)

<div class="topic-metadata">

**Author:** [@keith.moffat](https://discuss.elastic.co/u/keith.moffat)\
**Replies:** 1\
**Last updated:** [March 1, 2016, 9:16pm UTC](https://discuss.elastic.co/t/logstash-through-dmz/43136 "2016-03-01T21:16:02Z")

</div>

Hello, I am new to this community and might have a newbie question. I built an ELK server that lives on the internal network, filebeats is working fine on the client servers who live internally. but I cant get it to w…

---

## [Newb Grok parsing failures, teach me how to fish?](https://discuss.elastic.co/t/newb-grok-parsing-failures-teach-me-how-to-fish/42758)

<div class="topic-metadata">

**Author:** [@batfasturd](https://discuss.elastic.co/u/batfasturd)\
**Replies:** 1\
**Last updated:** [February 26, 2016, 5:47pm UTC](https://discuss.elastic.co/t/newb-grok-parsing-failures-teach-me-how-to-fish/42758 "2016-02-26T17:47:18Z")

</div>

Ok, I am fighting with a logfile that I really need to parse from my Radiator server. My problem is that it does not output in a "standard" format and can change. I just want to scan and pull values into fields as it fin…

---

## [Strange (partly wrong?) numbers in results](https://discuss.elastic.co/t/strange-partly-wrong-numbers-in-results/38163)

<div class="topic-metadata">

**Author:** [@moonwhaler](https://discuss.elastic.co/u/moonwhaler)\
**Replies:** 1\
**Last updated:** [December 30, 2015, 7:23pm UTC](https://discuss.elastic.co/t/strange-partly-wrong-numbers-in-results/38163 "2015-12-30T19:23:44Z")

</div>

Hello there! I'm using Kibana for some time now, testing a few a its analyzing features in our business environment which is based a lot on logistics and parcels. That being said, I tried to get an overview of shipped …

---

## [Alternative outputs to run alongside Elasticsearch](https://discuss.elastic.co/t/alternative-outputs-to-run-alongside-elasticsearch/1594)

<div class="topic-metadata">

**Author:** [@scottatron](https://discuss.elastic.co/u/scottatron)\
**Replies:** 1\
**Last updated:** [June 1, 2015, 6:32am UTC](https://discuss.elastic.co/t/alternative-outputs-to-run-alongside-elasticsearch/1594 "2015-06-01T06:32:13Z")

</div>

We have 300-400 machines piping a volume of roughly 20 million log messages a day through our ELK stack. We’ve recently had some stability issues and taken the opportunity to upgrade all the components and explore some…

---

## ["upgrade Assistant" is not visible under "management tab"](https://discuss.elastic.co/t/upgrade-assistant-is-not-visible-under-management-tab/324055)

<div class="topic-metadata">

**Author:** [@shahulyousuf](https://discuss.elastic.co/u/shahulyousuf)\
**Replies:** 2\
**Last updated:** [January 27, 2023, 6:18pm UTC](https://discuss.elastic.co/t/upgrade-assistant-is-not-visible-under-management-tab/324055 "2023-01-27T18:18:38Z")

</div>

Hey, I'm new to elasticsearch, I have installed elasticsearch 8.5.2 in single node and configured Kibana. Now I'm trying to upgrade to 8.6.1 through upgrade assistant as elastic user but cant find the upgrade assistant…

---

## [Kibana Container Please run next command \`npm update caniuse-lite browserslist](https://discuss.elastic.co/t/kibana-container-please-run-next-command-npm-update-caniuse-lite-browserslist/273387)

<div class="topic-metadata">

**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\
**Replies:** 2\
**Last updated:** [May 20, 2021, 7:02am UTC](https://discuss.elastic.co/t/kibana-container-please-run-next-command-npm-update-caniuse-lite-browserslist/273387 "2021-05-20T07:02:14Z")

</div>

Hi All, i have issue with kibana container here is the logs of kibana mohd@master-node:~$ docker container logs fe5fe4f19954 {"type":"log","@timestamp":"2021-05-19T05:48:05Z","tags":\["info","optimize"\],"pid":1,"message…

---

## [Filebeat index is getting created but with 0 documents](https://discuss.elastic.co/t/filebeat-index-is-getting-created-but-with-0-documents/259667)

<div class="topic-metadata">

**Author:** [@anujaggarwal](https://discuss.elastic.co/u/anujaggarwal)\
**Replies:** 2\
**Last updated:** [December 30, 2020, 4:49pm UTC](https://discuss.elastic.co/t/filebeat-index-is-getting-created-but-with-0-documents/259667 "2020-12-30T16:49:57Z")

</div>

Hi I am trying to index my custom log file using filebeat. I am successfully running filebeat with pre-built modules like mysql, nginx etc. But when I actually try to use it with my application specific log file, index …

---

## [Document size limit](https://discuss.elastic.co/t/document-size-limit/198289)

<div class="topic-metadata">

**Author:** [@KBuev](https://discuss.elastic.co/u/KBuev)\
**Replies:** 2\
**Last updated:** [September 27, 2019, 9:54am UTC](https://discuss.elastic.co/t/document-size-limit/198289 "2019-09-27T09:54:03Z")

</div>

Hi, all. Is there any way to get around the 102400 bytes document size limit in self-managed App Search? We're trying to use App Search to build a search solution for an internal knowledge base and the default limit is…

---

## [Spark Structured Streaming timeseries indices](https://discuss.elastic.co/t/spark-structured-streaming-timeseries-indices/189869)

<div class="topic-metadata">

**Author:** [@danielyahn](https://discuss.elastic.co/u/danielyahn)\
**Replies:** 2\
**Last updated:** [July 11, 2019, 7:09pm UTC](https://discuss.elastic.co/t/spark-structured-streaming-timeseries-indices/189869 "2019-07-11T19:09:53Z")

</div>

I have a follow up question to https://discuss.elastic.co/t/spark-structured-streaming-elasticsearch-sink-index-name/152449/4 James said, "As christian has mentioned above, ES-Hadoop will not create an index name using …

---

## [Questions about Elastic Cloud on AWS marketplace](https://discuss.elastic.co/t/questions-about-elastic-cloud-on-aws-marketplace/106851)

<div class="topic-metadata">

**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\
**Replies:** 2\
**Last updated:** [November 16, 2017, 10:27am UTC](https://discuss.elastic.co/t/questions-about-elastic-cloud-on-aws-marketplace/106851 "2017-11-16T10:27:09Z")

</div>

HI - I'm looking into using elastic could on the AWS marketplace - really excited about the option. A few questions. The are pricing differences for US-small/medium/large - but I'm not sure what that means - how do I k…

---

## [Filebeat loadbalancer logstash scalability](https://discuss.elastic.co/t/filebeat-loadbalancer-logstash-scalability/95204)

<div class="topic-metadata">

**Author:** [@abhiroyg](https://discuss.elastic.co/u/abhiroyg)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 7:36am UTC](https://discuss.elastic.co/t/filebeat-loadbalancer-logstash-scalability/95204 "2017-08-01T07:36:30Z")

</div>

Hi, If I use Filebeat internal loadbalancer, and say I want to add a new logstash node. I would have to take down all my filebeat instances and then change the configuration and start them up, right ? Is there another w…

---

## [How to convert timestamp in logstash](https://discuss.elastic.co/t/how-to-convert-timestamp-in-logstash/89350)

<div class="topic-metadata">

**Author:** [@viki](https://discuss.elastic.co/u/viki)\
**Replies:** 2\
**Last updated:** [June 15, 2017, 4:28am UTC](https://discuss.elastic.co/t/how-to-convert-timestamp-in-logstash/89350 "2017-06-15T04:28:23Z")

</div>

Hi, I'm new for logstash. I have a "time" field which has a value "2017-06-13 08:08:18,647" . I need convert "time" field value as "2017-06-13 08:08:18" Thanks in Advance

---

## [Indexes at work Packetbeat](https://discuss.elastic.co/t/indexes-at-work-packetbeat/79424)

<div class="topic-metadata">

**Author:** [@korsdecaying](https://discuss.elastic.co/u/korsdecaying)\
**Replies:** 2\
**Last updated:** [March 21, 2017, 3:51pm UTC](https://discuss.elastic.co/t/indexes-at-work-packetbeat/79424 "2017-03-21T15:51:08Z")

</div>

How to understand in which the index writes a packetbeat. Why so many indexes were created and how to make everything be written in one. Kibina defines the packetbeat- \* and outputs the information only for 12.03.2017

---

## [Send beat logs from client to ELK server](https://discuss.elastic.co/t/send-beat-logs-from-client-to-elk-server/50796)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan](https://discuss.elastic.co/u/Kennedy_Kan)\
**Replies:** 2\
**Last updated:** [May 25, 2016, 9:59am UTC](https://discuss.elastic.co/t/send-beat-logs-from-client-to-elk-server/50796 "2016-05-25T09:59:30Z")

</div>

I have three machines 1. RedHAT (ELK Server) 2. MS Server 2012 R2 3. Ubuntu I have setup ELK on the REDHAT server. Then I have set up topbeat and packetbeat in all machines. I have changed the topbeat.yml and packet.y…

---

## [Kv filter: a number added in the beginning of the field](https://discuss.elastic.co/t/kv-filter-a-number-added-in-the-beginning-of-the-field/42266)

<div class="topic-metadata">

**Author:** [@taraka16](https://discuss.elastic.co/u/taraka16)\
**Replies:** 2\
**Last updated:** [February 23, 2016, 1:04pm UTC](https://discuss.elastic.co/t/kv-filter-a-number-added-in-the-beginning-of-the-field/42266 "2016-02-23T13:04:17Z")

</div>

This is my conf file: input { file { start\_position =\> "beginning" path =\> \[ "/home/taraka/Projects/neonion/logs/\*.log" \] type =\> "syslog" } } filter{ multiline { pattern =\> "\\\[\\#\\|\\d{4}" n…

---

## [Client.prepareGet() vs client.get()](https://discuss.elastic.co/t/client-prepareget-vs-client-get/6200)

<div class="topic-metadata">

**Author:** [@dawi](https://discuss.elastic.co/u/dawi)\
**Replies:** 2\
**Last updated:** [December 21, 2011, 7:54am UTC](https://discuss.elastic.co/t/client-prepareget-vs-client-get/6200 "2011-12-21T07:54:03Z")

</div>

Hi together, the interface org.elasticsearch.client.Client provides methods to execute requests (e.g. index(), delete(), get(), ...) and it also provides prepare methods which return builder instances which can be use…

---

## [Logstash output Elastic upsert](https://discuss.elastic.co/t/logstash-output-elastic-upsert/341549)

<div class="topic-metadata">

**Author:** [@mathur7vidit](https://discuss.elastic.co/u/mathur7vidit)\
**Replies:** 6\
**Last updated:** [September 8, 2023, 11:08am UTC](https://discuss.elastic.co/t/logstash-output-elastic-upsert/341549 "2023-09-08T11:08:55Z")

</div>

Hi Team, i am looking for clarity on logstash's Elasticsearch output attribute docs\_as\_upsert and action =\> update. Now for this action to work properly and update the existing document, does the document should be on …

---

## [How to add suggestion inside term query in DSL](https://discuss.elastic.co/t/how-to-add-suggestion-inside-term-query-in-dsl/309893)

<div class="topic-metadata">

**Author:** [@sim\_elastic](https://discuss.elastic.co/u/sim_elastic)\
**Replies:** 6\
**Last updated:** [July 20, 2022, 8:51am UTC](https://discuss.elastic.co/t/how-to-add-suggestion-inside-term-query-in-dsl/309893 "2022-07-20T08:51:06Z")

</div>

My DOc is below \[ {'id':1, 'name': 'sachin messi', 'description': 'football@football.com', 'type': 'football', 'var':'sports'}, {'id':2, 'name': 'lionel messi', 'description': 'messi@fifa.com','type': 'soccer','var':'sp…

---

## [Kibana alert generation](https://discuss.elastic.co/t/kibana-alert-generation/132034)

<div class="topic-metadata">

**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\
**Replies:** 6\
**Last updated:** [May 16, 2018, 7:48am UTC](https://discuss.elastic.co/t/kibana-alert-generation/132034 "2018-05-16T07:48:00Z")

</div>

Can We generate an alert by reading the log file if any error comes or displayed in kibana an alert mail can be send thorough kibana by viewing the log.

---

## [How to boosting a term using java API?](https://discuss.elastic.co/t/how-to-boosting-a-term-using-java-api/5311)

<div class="topic-metadata">

**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\
**Replies:** 6\
**Last updated:** [September 6, 2011, 7:36am UTC](https://discuss.elastic.co/t/how-to-boosting-a-term-using-java-api/5311 "2011-09-06T07:36:44Z")

</div>

Hi I want to increase a significancy for some terms in the query.i am using following code for search: SearchResponse searchResponse = client.prepareSearch(indexName) .setSearchType(SearchType.DEFAULT).se…

---

## [Strict execution ordering of Logstash output plugins](https://discuss.elastic.co/t/strict-execution-ordering-of-logstash-output-plugins/317048)

<div class="topic-metadata">

**Author:** [@gordonjlee](https://discuss.elastic.co/u/gordonjlee)\
**Replies:** 5\
**Last updated:** [October 20, 2022, 10:49pm UTC](https://discuss.elastic.co/t/strict-execution-ordering-of-logstash-output-plugins/317048 "2022-10-20T22:49:13Z")

</div>

I have 2 outputs from a Logstash instance, one output to Elasticsearch and one output to a Kafka topic that is consumed by a homegrown ms. In practice, I have seen instances where the ms consuming the Kafka topic receiv…

---

## [Kibana 7.17.0 install on ubuntu 16.04 - Error - Index out of range](https://discuss.elastic.co/t/kibana-7-17-0-install-on-ubuntu-16-04-error-index-out-of-range/296437)

<div class="topic-metadata">

**Author:** [@VRaovic](https://discuss.elastic.co/u/VRaovic)\
**Replies:** 5\
**Last updated:** [February 12, 2022, 3:04pm UTC](https://discuss.elastic.co/t/kibana-7-17-0-install-on-ubuntu-16-04-error-index-out-of-range/296437 "2022-02-12T15:04:51Z")

</div>

Hi, We are having problem to install Kibana on Ubuntu 16.04 image which runs under OpenStack. Elasticsearch 7.17.0 is installed and runs, but we are having problem to install Kibana: Setting up kibana (7.17.0) ... n…

---

## [Kibana Stack Managent Built-In Alerts Missing](https://discuss.elastic.co/t/kibana-stack-managent-built-in-alerts-missing/280088)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 5\
**Last updated:** [August 19, 2021, 5:02pm UTC](https://discuss.elastic.co/t/kibana-stack-managent-built-in-alerts-missing/280088 "2021-08-19T17:02:37Z")

</div>

We are in the process of migrating to a new cluster, and I noticed on the new cluster that Stack Monitoring in Kibana is missing the default alert rules in the Space I would like to configure Actions for them. I do see t…

---

## [Exception while openig kibana filebeat dashboard](https://discuss.elastic.co/t/exception-while-openig-kibana-filebeat-dashboard/247630)

<div class="topic-metadata">

**Author:** [@shikran](https://discuss.elastic.co/u/shikran)\
**Replies:** 5\
**Last updated:** [September 7, 2020, 7:06am UTC](https://discuss.elastic.co/t/exception-while-openig-kibana-filebeat-dashboard/247630 "2020-09-07T07:06:24Z")

</div>

i and newbie to Elasticsearh and have configured elasticsearch + kibana on a windows server and it was perfectly working fine for last few days. Today when i tried to open kibana dashboard for winlogbeat and filebeat, …

---

## [Unassigned shards on elasticloud system indexes with 0 replica settings](https://discuss.elastic.co/t/unassigned-shards-on-elasticloud-system-indexes-with-0-replica-settings/221612)

<div class="topic-metadata">

**Author:** [@MagicNotElastic](https://discuss.elastic.co/u/MagicNotElastic)\
**Replies:** 5\
**Last updated:** [March 2, 2020, 10:07am UTC](https://discuss.elastic.co/t/unassigned-shards-on-elasticloud-system-indexes-with-0-replica-settings/221612 "2020-03-02T10:07:39Z")

</div>

Using 1 node with number\_of\_replicas": "0", all beats indexes working properly, except system: .monitoring-kibana .watcher-history .watches It seem, that all system indexes have unassigned replicas, but all my settin…

---

## [Elastic APM GeoIP Pipeline on cloud service](https://discuss.elastic.co/t/elastic-apm-geoip-pipeline-on-cloud-service/179838)

<div class="topic-metadata">

**Author:** [@ariel\_k](https://discuss.elastic.co/u/ariel_k)\
**Replies:** 5\
**Last updated:** [May 8, 2019, 3:49am UTC](https://discuss.elastic.co/t/elastic-apm-geoip-pipeline-on-cloud-service/179838 "2019-05-08T03:49:15Z")

</div>

Kibana version: 7 Elasticsearch version:7 APM Server version:7 APM Agent language and version:RUM/js Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and version:cloud: \*\*F…

---

## [Elasticsearch throw error on mappings](https://discuss.elastic.co/t/elasticsearch-throw-error-on-mappings/143232)

<div class="topic-metadata">

**Author:** [@cjaiwenwen](https://discuss.elastic.co/u/cjaiwenwen)\
**Replies:** 5\
**Last updated:** [August 7, 2018, 5:55am UTC](https://discuss.elastic.co/t/elasticsearch-throw-error-on-mappings/143232 "2018-08-07T05:55:40Z")

</div>

Hi Team I am running on Elasticsearch 6.3, i am generate some geo-data from my script to elasticsearch through Elasticsearch python API. my geo-point mapping according to https://www.elastic.co/guide/en/elasticsearch/r…

---

## [How long do we have to retain the old data in X-Pack?](https://discuss.elastic.co/t/how-long-do-we-have-to-retain-the-old-data-in-x-pack/104832)

<div class="topic-metadata">

**Author:** [@Arun\_Raj](https://discuss.elastic.co/u/Arun_Raj)\
**Replies:** 5\
**Last updated:** [October 24, 2017, 5:51am UTC](https://discuss.elastic.co/t/how-long-do-we-have-to-retain-the-old-data-in-x-pack/104832 "2017-10-24T05:51:45Z")

</div>

Hi Everyone I 'm new to X-pack ML while experimenting I came across a doubt - I ve feed one month data into X-pack for ML and the system would identified the pattern and calculated the probability, and it would able to …

---

## [No Alerts in Winlogbeat](https://discuss.elastic.co/t/no-alerts-in-winlogbeat/328698)

<div class="topic-metadata">

**Author:** [@Shaakxuur](https://discuss.elastic.co/u/Shaakxuur)\
**Replies:** 3\
**Last updated:** [April 3, 2023, 10:15am UTC](https://discuss.elastic.co/t/no-alerts-in-winlogbeat/328698 "2023-04-03T10:15:06Z")

</div>

Hi there I´m trying to run Winlogbeat. I installed everything but I can´t see any alerts. It seem that it isn´t possible for me to find the problem :frowning: Elasticsearch, Kibana and Winlogbeat are running without …

---

## [Logstash S3 input](https://discuss.elastic.co/t/logstash-s3-input/304118)

<div class="topic-metadata">

**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\
**Replies:** 3\
**Last updated:** [May 9, 2022, 7:34am UTC](https://discuss.elastic.co/t/logstash-s3-input/304118 "2022-05-09T07:34:07Z")

</div>

Hi there, I'm trying to use the logstash S3 input plugin to fetch logs from S3 bucket. This is my input s3 { id =\> "terminal\_app" access\_key\_id =\> "${access\_key\_id}" secret\_access\_key =\> "${secret\_access\_k…

---

## [ElasticSearch cannot perform large searches when the index is being updated](https://discuss.elastic.co/t/elasticsearch-cannot-perform-large-searches-when-the-index-is-being-updated/193240)

<div class="topic-metadata">

**Author:** [@jpgklassen](https://discuss.elastic.co/u/jpgklassen)\
**Replies:** 3\
**Last updated:** [August 25, 2019, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-cannot-perform-large-searches-when-the-index-is-being-updated/193240 "2019-08-25T09:13:10Z")

</div>

My server has a MongoDB database, ElasticSearch, Monstache (keeps the MongoDB database and ElasticSearch index in sync), and a Node.js REST API running at the same time. Users are conducting searches via a web app. The w…

---

## [Elasticsearch logs showing delete index?](https://discuss.elastic.co/t/elasticsearch-logs-showing-delete-index/195981)

<div class="topic-metadata">

**Author:** [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)\
**Replies:** 0\
**Last updated:** [August 20, 2019, 5:50pm UTC](https://discuss.elastic.co/t/elasticsearch-logs-showing-delete-index/195981 "2019-08-20T17:50:23Z")

</div>

Hi , We have integrated elasticsearch with Magento2 using smile/elasticsuite. When I check logs of elasticsearch in every few minutes it shows me logs like below \[2019-08-20T17:47:22,008\]\[INFO \]\[o.e.c.m.MetaDataDelet…

---

## [Elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"http://199.192.23.237:9200/", :error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :Connection refused (Connection refused)"](https://discuss.elastic.co/t/elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-url-http-199-192-23-237-9200-error-type-logstash-hostunreachableerror-connection-refused-connection-refused/187720)

<div class="topic-metadata">

**Author:** [@nere\_Rasolo](https://discuss.elastic.co/u/nere_Rasolo)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 5:44am UTC](https://discuss.elastic.co/t/elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-url-http-199-192-23-237-9200-error-type-logstash-hostunreachableerror-connection-refused-connection-refused/187720 "2019-06-27T05:44:36Z")

</div>

\-I use openJdk 1.8 \*-Elasticsearch 6.8.1+Logstash 6.8.1+mysql \* \*-My file elasticsearch/elasticsearch.yml : \* cluster.name: mamaison node.name: server1.bonjour path.data: /var/lib/elasticsearch path.logs: /var/lo…

---

## [Did number of replicas effect ES memory utilization](https://discuss.elastic.co/t/did-number-of-replicas-effect-es-memory-utilization/91184)

<div class="topic-metadata">

**Author:** [@Eli\_Revach](https://discuss.elastic.co/u/Eli_Revach)\
**Replies:** 3\
**Last updated:** [June 29, 2017, 10:08am UTC](https://discuss.elastic.co/t/did-number-of-replicas-effect-es-memory-utilization/91184 "2017-06-29T10:08:34Z")

</div>

Hi , We are facing Old GC's from time to time , i like to know if the amount of replica's has a direct impact on the ES memory utilization (looks to me that the answer is yes ) ? bottom line , if it can increase…

---

## [Log et utilisation des index](https://discuss.elastic.co/t/log-et-utilisation-des-index/60714)

<div class="topic-metadata">

**Author:** [@NicolasSearch](https://discuss.elastic.co/u/NicolasSearch)\
**Replies:** 3\
**Last updated:** [September 19, 2016, 1:49pm UTC](https://discuss.elastic.co/t/log-et-utilisation-des-index/60714 "2016-09-19T13:49:14Z")

</div>

Bonjour, je souhaite mettre en place ElasticSearch pour le stockage des logs. Par défaut en utilisant LogStash, un index est crée par jour, est-ce que c'est la bonne méthode, ou est-ce qu'il vaut mieux regrouper les logs…

---

## [How to troubleshoot LS](https://discuss.elastic.co/t/how-to-troubleshoot-ls/40786)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [February 2, 2016, 9:15pm UTC](https://discuss.elastic.co/t/how-to-troubleshoot-ls/40786 "2016-02-02T21:15:17Z")

</div>

Hi Experts, I am using LS 1.5.4 , and I want to troubleshoot LS. Can anyone tell me where I find error logs for Logstash. I do not see it the way kibana or ES save it's app logs in the directory . please suggest. T…

---

## [Dasboards with no config options](https://discuss.elastic.co/t/dasboards-with-no-config-options/35983)

<div class="topic-metadata">

**Author:** [@juerkan](https://discuss.elastic.co/u/juerkan)\
**Replies:** 3\
**Last updated:** [December 2, 2015, 2:25pm UTC](https://discuss.elastic.co/t/dasboards-with-no-config-options/35983 "2015-12-02T14:25:20Z")

</div>

Hi Our customer Service Agents want to use kibana dasboards. We don't want that a Agent can Chance Anything in the dashboard (except the 'time') Is this possible? Thx Juergen

---

## [Data Stream not found in Data Views](https://discuss.elastic.co/t/data-stream-not-found-in-data-views/317222)

<div class="topic-metadata">

**Author:** [@sakib3833](https://discuss.elastic.co/u/sakib3833)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 2:22pm UTC](https://discuss.elastic.co/t/data-stream-not-found-in-data-views/317222 "2022-10-27T14:22:55Z")

</div>

I use Microsoft Defender Endpoint integration to collect logs. The agent installed perfectly and the other ID and secret key put accordingly. In the Index management section it shows that it creates Data Stream. But…

---

## [Kibanaでの描画時に他のindexの内容を利用して集計する方法](https://discuss.elastic.co/t/kibana-index/249929)

<div class="topic-metadata">

**Author:** [@sck\_345](https://discuss.elastic.co/u/sck_345)\
**Replies:** 1\
**Last updated:** [September 30, 2020, 11:15am UTC](https://discuss.elastic.co/t/kibana-index/249929 "2020-09-30T11:15:16Z")

</div>

初心者のため、質問内容がおかしかったら申し訳ありません。 あるindexの内容を集計してグラフを描画したいのですが、 目標に対する割合を合わせてDataTableなどで描画したいと考えています。 indexA：生ログ indexB：indexAに含まれる項目ごとの目標値 indexA category | cost A1| 100 A2| 200 A1| 250 A3| 150 indexB category | cos…

---

## [Dashboard Display order](https://discuss.elastic.co/t/dashboard-display-order/234596)

<div class="topic-metadata">

**Author:** [@LJB999](https://discuss.elastic.co/u/LJB999)\
**Replies:** 1\
**Last updated:** [June 5, 2020, 11:06am UTC](https://discuss.elastic.co/t/dashboard-display-order/234596 "2020-06-05T11:06:49Z")

</div>

When I click on the "dashboard" icon on the left menu all the dashboards titles display in random order. Is it possible to predefine the sort order? Name does not work, any idea what they are sorted by as default so I c…

---

## [NoSuchFileException while restoring snapshot](https://discuss.elastic.co/t/nosuchfileexception-while-restoring-snapshot/118339)

<div class="topic-metadata">

**Author:** [@kartik\_batheja](https://discuss.elastic.co/u/kartik_batheja)\
**Replies:** 1\
**Last updated:** [February 5, 2018, 5:30am UTC](https://discuss.elastic.co/t/nosuchfileexception-while-restoring-snapshot/118339 "2018-02-05T05:30:13Z")

</div>

Hi all, I am trying to work on snapshots and restore on ES 5.6 I was having a similar issue on my cluster. I am using a 5 node cluster with 1 master and 5 datanodes. While restoring I am getting nosuchfileexception. …

---

## [Creating a custom index for filebeat](https://discuss.elastic.co/t/creating-a-custom-index-for-filebeat/107509)

<div class="topic-metadata">

**Author:** [@Widget](https://discuss.elastic.co/u/Widget)\
**Replies:** 1\
**Last updated:** [November 15, 2017, 2:01am UTC](https://discuss.elastic.co/t/creating-a-custom-index-for-filebeat/107509 "2017-11-15T02:01:25Z")

</div>

Hi Team, I would like to log from filebeat to one a custom index. I would like to set filebeat to log filebeat-division1-\* to logstash from one server and filebeat-division2-\* from another server. Then set access to t…

---

## [Kinesis Stream Output Not working](https://discuss.elastic.co/t/kinesis-stream-output-not-working/90049)

<div class="topic-metadata">

**Author:** [@Amir\_Gilad](https://discuss.elastic.co/u/Amir_Gilad)\
**Replies:** 1\
**Last updated:** [June 20, 2017, 9:38am UTC](https://discuss.elastic.co/t/kinesis-stream-output-not-working/90049 "2017-06-20T09:38:49Z")

</div>

Hi, I'm trying to use the Kinesis Stream Output Filter. I've found it here: Kinesis Stream Output FIlter Git This is the output section from my .conf file: ##########################################################…

---

## [Suddenly all index removed](https://discuss.elastic.co/t/suddenly-all-index-removed/72253)

<div class="topic-metadata">

**Author:** [@Aravinthan\_Asokan](https://discuss.elastic.co/u/Aravinthan_Asokan)\
**Replies:** 1\
**Last updated:** [January 20, 2017, 3:54am UTC](https://discuss.elastic.co/t/suddenly-all-index-removed/72253 "2017-01-20T03:54:31Z")

</div>

I am using ES for more than 1 year. Suddenly all indexes removed automatically. Is it due to storage memory limit or any other issue?

---

## [How to set kibana proxy url under iis manager](https://discuss.elastic.co/t/how-to-set-kibana-proxy-url-under-iis-manager/55721)

<div class="topic-metadata">

**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\
**Replies:** 1\
**Last updated:** [July 20, 2016, 3:24pm UTC](https://discuss.elastic.co/t/how-to-set-kibana-proxy-url-under-iis-manager/55721 "2016-07-20T15:24:22Z")

</div>

I have tried following this link https://www.ulyaoth.net/resources/tutorial-install-logstash-and-kibana-on-a-windows-server.34/ But I could'nt set the proxy url for kibana. Can anyone help me out? I had 2 nodes which…

---

## [How to access parent JSON object in Kibana?](https://discuss.elastic.co/t/how-to-access-parent-json-object-in-kibana/53790)

<div class="topic-metadata">

**Author:** [@keya](https://discuss.elastic.co/u/keya)\
**Replies:** 1\
**Last updated:** [June 23, 2016, 4:23pm UTC](https://discuss.elastic.co/t/how-to-access-parent-json-object-in-kibana/53790 "2016-06-23T16:23:18Z")

</div>

Hi, I have a JSON objects in my logs and I want to view the parent object as a whole instead of all subfields separately. How can I view that in KIbana? Example: This is a sample message form the logs: Note: the object…

[Previous page](https://discuss.elastic.co/top.md?page=1651&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1653&per_page=50&period=all)
