# Top **URL:** https://discuss.elastic.co/top.md?page=1673&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1674 --- ## [Not stable some time](https://discuss.elastic.co/t/not-stable-some-time/6876)
**Author:** [@darkyoung](https://discuss.elastic.co/u/darkyoung)\ **Replies:** 4\ **Last updated:** [August 24, 2012, 3:40pm UTC](https://discuss.elastic.co/t/not-stable-some-time/6876 "2012-08-24T15:40:14Z")
Hi, I'm using php client Elastica to communicate with ES, and I have two nodes running ES 0.18.7. Some time the php client will get "Operation timed out" Exception, and the load average raised. I checked the… --- ## [Unable to run localhost:9200](https://discuss.elastic.co/t/unable-to-run-localhost-9200/300656)
**Author:** [@sureshaws](https://discuss.elastic.co/u/sureshaws)\ **Replies:** 3\ **Last updated:** [March 25, 2022, 8:14am UTC](https://discuss.elastic.co/t/unable-to-run-localhost-9200/300656 "2022-03-25T08:14:10Z")
Installed elastic but do not see localhost:9200 loading # ====================Preformatted text==== Elasticsearch Configuration ========================= # # NOTE: Elasticsearch comes with reasonable defaults for most s… --- ## [Elasticsearch: On premise restore snapshot from aws s3](https://discuss.elastic.co/t/elasticsearch-on-premise-restore-snapshot-from-aws-s3/271773)
**Author:** [@Mohammad\_Azizieh](https://discuss.elastic.co/u/Mohammad_Azizieh)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 3:20pm UTC](https://discuss.elastic.co/t/elasticsearch-on-premise-restore-snapshot-from-aws-s3/271773 "2021-04-30T15:20:54Z")
This could sound pretty straightforward. However, I've spent days looking in the web for a method where I can migrate snapshot from aws s3 to on premise elasticsearch cluster. All the docs I've found mentioning how to a… --- ## [Run custom tracks get type error](https://discuss.elastic.co/t/run-custom-tracks-get-type-error/271520)
**Author:** [@GITnewfish](https://discuss.elastic.co/u/GITnewfish)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 9:21am UTC](https://discuss.elastic.co/t/run-custom-tracks-get-type-error/271520 "2021-04-30T09:21:05Z")
When I run custom tracks ,I got type error. I can't figure out, need help! Thanks! esrally version: esrally 1.4.1 es version: 6.4.0 my custom track: {% import "rally.helpers" as rally with context %} { "version": 2… --- ## [\[auditbeats\]\[beats\] File permissions for file output not working](https://discuss.elastic.co/t/auditbeats-beats-file-permissions-for-file-output-not-working/219661)
**Author:** [@tomrade](https://discuss.elastic.co/u/tomrade)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 3:21pm UTC](https://discuss.elastic.co/t/auditbeats-beats-file-permissions-for-file-output-not-working/219661 "2020-02-18T15:21:12Z")
In the file output we can specify a permission string for the files. I use auditbeat and although I set the string to "0644". The created file is still "0600" when I "ls" this. file, ive not be able to change this ive t… --- ## [Ingestion through coordinate node](https://discuss.elastic.co/t/ingestion-through-coordinate-node/201152)
**Author:** [@Anikesh\_Paul](https://discuss.elastic.co/u/Anikesh_Paul)\ **Replies:** 3\ **Last updated:** [September 26, 2019, 1:51pm UTC](https://discuss.elastic.co/t/ingestion-through-coordinate-node/201152 "2019-09-26T13:51:17Z")
I'm trying to ingest 1.5 PB of data into elastic search. My question is, if I ingest data directly through co-ordinate nodes instead of using data nodes, what will be the consequences and how it will affect the performan… --- ## [Defining IDs and routing keys for documents in custom workloads in Rally](https://discuss.elastic.co/t/defining-ids-and-routing-keys-for-documents-in-custom-workloads-in-rally/184186)
**Author:** [@luisrpp](https://discuss.elastic.co/u/luisrpp)\ **Replies:** 3\ **Last updated:** [June 5, 2019, 1:57pm UTC](https://discuss.elastic.co/t/defining-ids-and-routing-keys-for-documents-in-custom-workloads-in-rally/184186 "2019-06-05T13:57:41Z")
Hi, It seems that there was a way to create a custom track with an index operation to load documents in ES with custom IDs and routing keys, as described in the following post: As this is not valid for rally's curren… --- ## [System.OutOfMemoryException on Bulk Insert](https://discuss.elastic.co/t/system-outofmemoryexception-on-bulk-insert/143865)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 3\ **Last updated:** [August 14, 2018, 12:49am UTC](https://discuss.elastic.co/t/system-outofmemoryexception-on-bulk-insert/143865 "2018-08-14T00:49:54Z")
Hi While bulk insert data into elastic search, I am getting System.OutOfMemoryException. Each object is little large, if the number of properties in object is less then data getting inserted. (C# coding) Is there any… --- ## [Logstash: \_dateparsefailure](https://discuss.elastic.co/t/logstash-dateparsefailure/115235)
**Author:** [@trelo](https://discuss.elastic.co/u/trelo)\ **Replies:** 3\ **Last updated:** [January 21, 2018, 12:12pm UTC](https://discuss.elastic.co/t/logstash-dateparsefailure/115235 "2018-01-21T12:12:21Z")
Hello, I'm unsuccessfully struggling with \_dateparsefailure issue. While debugging everything works fine, but in Elastic every document comes with \_dateparsefailure tag. Here is piece of conf: ..... ruby { cod… --- ## [Regex is not working for sensitive data search](https://discuss.elastic.co/t/regex-is-not-working-for-sensitive-data-search/95428)
**Author:** [@pshepherd45](https://discuss.elastic.co/u/pshepherd45)\ **Replies:** 3\ **Last updated:** [August 10, 2017, 9:31pm UTC](https://discuss.elastic.co/t/regex-is-not-working-for-sensitive-data-search/95428 "2017-08-10T21:31:13Z")
Hi, My application logs contain strings like the following: password=password123 &password=password123 %26password%3Dpassword123 %2526password%253Dpassword123 I’m trying to get an exact match for these strings usin… --- ## [Filterable Search Boxes](https://discuss.elastic.co/t/filterable-search-boxes/46607)
**Author:** [@SecurityN00b](https://discuss.elastic.co/u/SecurityN00b)\ **Replies:** 3\ **Last updated:** [April 6, 2016, 11:17pm UTC](https://discuss.elastic.co/t/filterable-search-boxes/46607 "2016-04-06T23:17:50Z")
I have indexed our firewall syslogs. I am wondering if it's possible to create a dashboard with text boxes that would apply filters. For example, there would be src\_IP, dst\_IP, src\_Port, dst\_Port, etc.... boxes that wo… --- ## [Need help on LogStash encryption](https://discuss.elastic.co/t/need-help-on-logstash-encryption/25341)
**Author:** [@Giri\_Sgs](https://discuss.elastic.co/u/Giri_Sgs)\ **Replies:** 3\ **Last updated:** [July 12, 2015, 8:29am UTC](https://discuss.elastic.co/t/need-help-on-logstash-encryption/25341 "2015-07-12T08:29:43Z")
Hi Friends, Is there any way to read public keys from a keyserver & encrypt messages in logstash. I am not getting how to read key form keyserver.... any suggestions please ...... Thanks --- ## [Proximity and phrases search fast-vector-highlighter vs. highlighter + exposing highlighter](https://discuss.elastic.co/t/proximity-and-phrases-search-fast-vector-highlighter-vs-highlighter-exposing-highlighter/5394)
**Author:** [@Tomislav\_Poljak](https://discuss.elastic.co/u/Tomislav_Poljak)\ **Replies:** 3\ **Last updated:** [May 29, 2012, 9:02pm UTC](https://discuss.elastic.co/t/proximity-and-phrases-search-fast-vector-highlighter-vs-highlighter-exposing-highlighter/5394 "2012-05-29T21:02:00Z")
Hi, here https://gist.github.com/1222046 is a bug reconstruction for highlighting issues with fast-vector-highlighter in cases of proximity search and exact phrases searching (when exact phrases contain stop words). … --- ## [How does elastic react with x-pack crack](https://discuss.elastic.co/t/how-does-elastic-react-with-x-pack-crack/338503)
**Author:** [@Ernest\_Dong](https://discuss.elastic.co/u/Ernest_Dong)\ **Replies:** 1\ **Last updated:** [July 17, 2023, 8:13am UTC](https://discuss.elastic.co/t/how-does-elastic-react-with-x-pack-crack/338503 "2023-07-17T08:13:55Z")
I'm researching on ESTC stock and wondering how does elastic react with x-pack crack? If SMB modifies Elastic code and builds it on-premise, it seems ESTC will lost much revenue --- ## [Unable to visualize span.http.response.status\_code](https://discuss.elastic.co/t/unable-to-visualize-span-http-response-status-code/246522)
**Author:** [@adamS](https://discuss.elastic.co/u/adamS)\ **Replies:** 1\ **Last updated:** [August 27, 2020, 4:34pm UTC](https://discuss.elastic.co/t/unable-to-visualize-span-http-response-status-code/246522 "2020-08-27T16:34:09Z")
I'm unable to use the span.http.response.status\_code field (or any of the span.http fields) on APM span documents when building a custom visualization. I can see the info I want in Discover, but it says that it is type … --- ## [Importing the filebeat dashboards into Kibana](https://discuss.elastic.co/t/importing-the-filebeat-dashboards-into-kibana/171315)
**Author:** [@albgus](https://discuss.elastic.co/u/albgus)\ **Replies:** 1\ **Last updated:** [March 8, 2019, 3:59pm UTC](https://discuss.elastic.co/t/importing-the-filebeat-dashboards-into-kibana/171315 "2019-03-08T15:59:22Z")
Hello, I would like to import the pre-made dashboards of filebeat into Kibana, but using another index name. Is there any way to import the JSON files that are distributed with filebeat manually? I can't seem to find an… --- ## [Difference in Primary and Replica Shards](https://discuss.elastic.co/t/difference-in-primary-and-replica-shards/152167)
**Author:** [@Sagar\_Arora](https://discuss.elastic.co/u/Sagar_Arora)\ **Replies:** 1\ **Last updated:** [October 12, 2018, 4:37pm UTC](https://discuss.elastic.co/t/difference-in-primary-and-replica-shards/152167 "2018-10-12T16:37:07Z")
Stack Details: ElasticSearch/logstash/kibana/X-pack Version : 6.2.3 Cluster Details : 3 Master node , 4 Hot data node , 1 Warm data node Master Node Conf : Master Node : cluster.name:ELK node.name: ELK-ES7 path.… --- ## [How to find the length of a field](https://discuss.elastic.co/t/how-to-find-the-length-of-a-field/151377)
**Author:** [@Harvinder\_Singh](https://discuss.elastic.co/u/Harvinder_Singh)\ **Replies:** 1\ **Last updated:** [October 8, 2018, 3:50am UTC](https://discuss.elastic.co/t/how-to-find-the-length-of-a-field/151377 "2018-10-08T03:50:20Z")
I have an index with a field DataAscii of type string. I would like to plot the length of this field in timeline. One option is to use scripted field. I have tried with following, but it does seems to be working doc\['Da… --- ## [Check if elasticsearch nodes are alive on startup using nest](https://discuss.elastic.co/t/check-if-elasticsearch-nodes-are-alive-on-startup-using-nest/99905)
**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\ **Replies:** 1\ **Last updated:** [September 9, 2017, 11:38pm UTC](https://discuss.elastic.co/t/check-if-elasticsearch-nodes-are-alive-on-startup-using-nest/99905 "2017-09-09T23:38:41Z")
Hi, I'm using Nest 5.x as a part of an application to communicate with ES. When my application starts up, the following code is executed List\ nodes = new List\(); nodes.AddRange(config.Nodes.Select(nodeUri … --- ## [(Docker) how to run ES on a docker hoster?](https://discuss.elastic.co/t/docker-how-to-run-es-on-a-docker-hoster/73857)
**Author:** [@thinking23487](https://discuss.elastic.co/u/thinking23487)\ **Replies:** 1\ **Last updated:** [February 3, 2017, 3:49pm UTC](https://discuss.elastic.co/t/docker-how-to-run-es-on-a-docker-hoster/73857 "2017-02-03T15:49:03Z")
Hi all, i'm trying to run ES on a docker hosting service provider and have the problem that the container doesnt start cause of bootstrap checks: \[2017-02-03T13:10:31,019\]\[INFO \]\[o.e.t.TransportService \] \[dkejAzL\] pu… --- ## [Ошибка с сортировкой в Elasticsearch](https://discuss.elastic.co/t/elasticsearch/67234)
**Author:** [@Unique-no-spaces](https://discuss.elastic.co/u/Unique-no-spaces)\ **Replies:** 1\ **Last updated:** [November 28, 2016, 3:33pm UTC](https://discuss.elastic.co/t/elasticsearch/67234 "2016-11-28T15:33:29Z")
Здравствуйте. Перенес сайт с Elasticsearch на другой сервер. Запустил создание индекса: curl -XPUT 'localhost:9200/tissura\_products\_en?pretty' Но на страницах использующих Elasticsearch выходит ошибка: { "error"… --- ## [Rescore and track\_scores](https://discuss.elastic.co/t/rescore-and-track-scores/11871)
**Author:** [@Meidan](https://discuss.elastic.co/u/Meidan)\ **Replies:** 1\ **Last updated:** [July 28, 2014, 10:40am UTC](https://discuss.elastic.co/t/rescore-and-track-scores/11871 "2014-07-28T10:40:22Z")
Hi, Has anyone been able to use query rescoring and sort by a field other then the score? Whenever I add the sort, I get a constant score of 1 to all documents, even when adding track\_scores. Thanks. -- Y… --- ## [After upgrade from 8.2.2 to 8.5.3 elasticsearch.bat works just fine but the elasticsearch-service.bat start fails](https://discuss.elastic.co/t/after-upgrade-from-8-2-2-to-8-5-3-elasticsearch-bat-works-just-fine-but-the-elasticsearch-service-bat-start-fails/322167)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 4:59pm UTC](https://discuss.elastic.co/t/after-upgrade-from-8-2-2-to-8-5-3-elasticsearch-bat-works-just-fine-but-the-elasticsearch-service-bat-start-fails/322167 "2023-01-18T16:59:53Z")
Hi! After upgrade from 8.2.2 to 8.5.3 elasticsearch.bat works just fine but the elasticsearch-service.bat start fails with the following error log: \[2022-12-29 16:51:55\] \[debug\] ( prunsrv.c:1994) \[ 8136\] Apache Commons… --- ## [Unable to create webhook action with path parameter](https://discuss.elastic.co/t/unable-to-create-webhook-action-with-path-parameter/309204)
**Author:** [@Vivek\_Kumar1](https://discuss.elastic.co/u/Vivek_Kumar1)\ **Replies:** 2\ **Last updated:** [July 18, 2022, 1:32pm UTC](https://discuss.elastic.co/t/unable-to-create-webhook-action-with-path-parameter/309204 "2022-07-18T13:32:35Z")
Hi, I want to create a connector for opsgienie, which will close the alert once it will be recovered. Opsgenie allows to close alerts by the alias, Alert API. So how do I mention the id or alias in the URL? What will… --- ## [Logstash CSV Output all fields are not working](https://discuss.elastic.co/t/logstash-csv-output-all-fields-are-not-working/282985)
**Author:** [@yogicd](https://discuss.elastic.co/u/yogicd)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 5:55am UTC](https://discuss.elastic.co/t/logstash-csv-output-all-fields-are-not-working/282985 "2021-09-02T05:55:32Z")
Hello, I am testing to get the all the data in .CSV file and unable to get the all the fields and nested in the.CSV file,My config file as below input { stdin {} beats { port =\> 5044 } } output { csv { #fields … --- ## [Metricbeat reports an error for unconfigured auto discovery hints in Kubernetes and ECK](https://discuss.elastic.co/t/metricbeat-reports-an-error-for-unconfigured-auto-discovery-hints-in-kubernetes-and-eck/274793)
**Author:** [@Ahmad\_Al-Masry](https://discuss.elastic.co/u/Ahmad_Al-Masry)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 12:29pm UTC](https://discuss.elastic.co/t/metricbeat-reports-an-error-for-unconfigured-auto-discovery-hints-in-kubernetes-and-eck/274793 "2021-06-14T12:29:01Z")
We are using hints based auto discovery for metricteat 7.13.0 on ECK 1.6.0, we keep geeting this error: ERROR \[autodiscover\] autodiscover/autodiscover.go:212 Auto discover config check failed for config '{ "metricsets… --- ## [Kibana Alerts and Actions don't send e-mail](https://discuss.elastic.co/t/kibana-alerts-and-actions-dont-send-e-mail/237936)
**Author:** [@leogoldim](https://discuss.elastic.co/u/leogoldim)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 1:16pm UTC](https://discuss.elastic.co/t/kibana-alerts-and-actions-dont-send-e-mail/237936 "2020-07-13T13:16:32Z")
Hi all, I'm using Elastic Cloud and the Heartbeat to monitor some applications. My monitoring works fine, but the alerts don't work. I've created an Connector to use Gmail to send e-mail, but I realized that the userna… --- ## [Elasticsearch Cluster (Mixed OS)](https://discuss.elastic.co/t/elasticsearch-cluster-mixed-os/231452)
**Author:** [@111305](https://discuss.elastic.co/u/111305)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 11:00pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-mixed-os/231452 "2020-06-02T23:00:28Z")
Hi, I'm plan to config 3-node Elasticsearch cluster as below. node 1 : master-node (OS : Windows) node 2 : data - node1 (OS : :Linux) node 3 : data - node 2 (OS : Linux) Is it possible to configure between differe… --- ## [Auth0とのOpen ID Connectの設定](https://discuss.elastic.co/t/auth0-open-id-connect/221835)
**Author:** [@nidcode](https://discuss.elastic.co/u/nidcode)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 10:42am UTC](https://discuss.elastic.co/t/auth0-open-id-connect/221835 "2020-03-03T10:42:32Z")
Elastic Cloud (Ver7.5) にてAuth0をOPにしてOIDCの設定をしています。 https://www.elastic.co/guide/en/cloud/current/ec-secure-clusters-oidc.html 上記URLを参考にしながら設定したのですが、IDトークンの検証で以下のエラーが出てしまいます。 Authentication to realm oidc1 failed - Fail… --- ## [Is there a docker image for elasticsearch OSS version?](https://discuss.elastic.co/t/is-there-a-docker-image-for-elasticsearch-oss-version/201299)
**Author:** [@cooldude30](https://discuss.elastic.co/u/cooldude30)\ **Replies:** 2\ **Last updated:** [October 4, 2019, 9:43pm UTC](https://discuss.elastic.co/t/is-there-a-docker-image-for-elasticsearch-oss-version/201299 "2019-10-04T21:43:14Z")
Is there a docker image for elasticsearch OSS version? If yes, can someone please provide the link for the same. I was not able to find one after my half an hour search. --- ## [Implementing ElasticSearch with CS-CART](https://discuss.elastic.co/t/implementing-elasticsearch-with-cs-cart/153943)
**Author:** [@Admin\_Hack](https://discuss.elastic.co/u/Admin_Hack)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 8:30am UTC](https://discuss.elastic.co/t/implementing-elasticsearch-with-cs-cart/153943 "2018-10-25T08:30:27Z")
I have Elasticsearch up and running at my localhost:9200 . How can i implement it in my cs-cart project ?? need help please... is there any config file where i need to make config changes??? @spinscale @Christian\_Dahlqv… --- ## [KIbana filter by aggrgation on y axis](https://discuss.elastic.co/t/kibana-filter-by-aggrgation-on-y-axis/147033)
**Author:** [@Ambuj\_Jauhari](https://discuss.elastic.co/u/Ambuj_Jauhari)\ **Replies:** 2\ **Last updated:** [September 5, 2018, 1:48am UTC](https://discuss.elastic.co/t/kibana-filter-by-aggrgation-on-y-axis/147033 "2018-09-05T01:48:43Z")
I have been exploring elastic search and kibana. Simple aggregations are working fine. I am stuck at plotting the below scenario I have a document with 3 fields as below and some sample entries processId , process ver… --- ## [Elasticsearch / kibana wrong epoch date indexing](https://discuss.elastic.co/t/elasticsearch-kibana-wrong-epoch-date-indexing/129921)
**Author:** [@mehrdad22](https://discuss.elastic.co/u/mehrdad22)\ **Replies:** 2\ **Last updated:** [April 29, 2018, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-wrong-epoch-date-indexing/129921 "2018-04-29T05:14:13Z")
the elastichsearch or kibana is goeing wrong date from epoch index. the date value is: 1495956650 (human date: GMT: Sunday, May 28, 2017 7:30:50 AM) but... when indexing this record into elasticsearch with below mappi… --- ## [Stagger pings within a monitor](https://discuss.elastic.co/t/stagger-pings-within-a-monitor/96693)
**Author:** [@packland](https://discuss.elastic.co/u/packland)\ **Replies:** 2\ **Last updated:** [August 18, 2017, 4:01am UTC](https://discuss.elastic.co/t/stagger-pings-within-a-monitor/96693 "2017-08-18T04:01:29Z")
I’m just wondering if there is functionality for staggering all of the ping requests within a heartbeat monitor so that they do not occur at the same time. i.e. would it be possible to arrange 1000 or so requests to be … --- ## [Jump out of filter to output](https://discuss.elastic.co/t/jump-out-of-filter-to-output/86490)
**Author:** [@Jaxon\_Kochel](https://discuss.elastic.co/u/Jaxon_Kochel)\ **Replies:** 2\ **Last updated:** [May 22, 2017, 1:11pm UTC](https://discuss.elastic.co/t/jump-out-of-filter-to-output/86490 "2017-05-22T13:11:56Z")
Is there any way to jump out of the filter straight to output? I'm having an issue with log files with very similar names being picked up by multiple path =~, and its breaking my logging. is there anyway to jump out of t… --- ## [ネスト構造でのマッピングの作成方法](https://discuss.elastic.co/t/topic/68116)
**Author:** [@E1astic](https://discuss.elastic.co/u/E1astic)\ **Replies:** 2\ **Last updated:** [December 7, 2016, 9:19am UTC](https://discuss.elastic.co/t/topic/68116 "2016-12-07T09:19:23Z")
elastic searchではindex作成時にmappingも作成されるはずですが eventData:{ level: 6, class:"上級者" } eventData:{ level: 6, money:1000 } 上のような構造についてはどのようにmappingsを作成すればよいでしょうか？ eventDataにはどのようなデータがくるかわかなないので、 index作成時にmappin… --- ## [Can filebeat decode embedded json string in a particular field](https://discuss.elastic.co/t/can-filebeat-decode-embedded-json-string-in-a-particular-field/59097)
**Author:** [@yanjun](https://discuss.elastic.co/u/yanjun)\ **Replies:** 2\ **Last updated:** [August 28, 2016, 4:18am UTC](https://discuss.elastic.co/t/can-filebeat-decode-embedded-json-string-in-a-particular-field/59097 "2016-08-28T04:18:31Z")
We have docker json-file logger produces this kind of log messages (docker meta data removed) {"log":"{\\"test\\":\\"test\\"}"} Is it possible to configure filebeat5.0 to also decode the string inside "log"? Or we have to … --- ## [Logstash Grok pattern](https://discuss.elastic.co/t/logstash-grok-pattern/49068)
**Author:** [@James\_Hamilton](https://discuss.elastic.co/u/James_Hamilton)\ **Replies:** 2\ **Last updated:** [May 5, 2016, 5:15pm UTC](https://discuss.elastic.co/t/logstash-grok-pattern/49068 "2016-05-05T17:15:40Z")
I have the following log entry and grok pattern below, using the multiline filter in logstash. It works on http://grokconstructor.appspot.com/ but not when I use logstash. WCCOAui (5), 2016.04.12 10:10:37.630, CTR… --- ## [Data too large for tiny index in Kibana](https://discuss.elastic.co/t/data-too-large-for-tiny-index-in-kibana/45694)
**Author:** [@steinmr](https://discuss.elastic.co/u/steinmr)\ **Replies:** 2\ **Last updated:** [March 30, 2016, 7:11am UTC](https://discuss.elastic.co/t/data-too-large-for-tiny-index-in-kibana/45694 "2016-03-30T07:11:17Z")
I have a tiny index (400kB) that I try to do "Discover" on in Kibana. It gives me the error: Data too large, data for \[TimestampUtc\] would be larger than limit of \[2508954009/2.3gb\]\] How can this be? I'm currently incr… --- ## [Help with using Grok to parse these three log formats](https://discuss.elastic.co/t/help-with-using-grok-to-parse-these-three-log-formats/329107)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 8\ **Last updated:** [April 2, 2023, 10:37pm UTC](https://discuss.elastic.co/t/help-with-using-grok-to-parse-these-three-log-formats/329107 "2023-04-02T22:37:55Z")
Hi I am experienced with Dissect but not Grok. I think I need to use Grok here because the log format varies between the logs, so dissect will only work on one format, not all three: Case 1: 2023-03-31 00:01:24,366 INF… --- ## [\_ingest on one cluster to index in another](https://discuss.elastic.co/t/ingest-on-one-cluster-to-index-in-another/157883)
**Author:** [@DidierB](https://discuss.elastic.co/u/DidierB)\ **Replies:** 8\ **Last updated:** [November 22, 2018, 4:25pm UTC](https://discuss.elastic.co/t/ingest-on-one-cluster-to-index-in-another/157883 "2018-11-22T16:25:38Z")
For some reason I will not mention here, I need to do document /\_ingestion in an Elasticsearch cluster (only the data transformation) and index the transformed document in another cluster. Is it possible to tell an inges… --- ## [Java capture overloaded method](https://discuss.elastic.co/t/java-capture-overloaded-method/318434)
**Author:** [@APandey](https://discuss.elastic.co/u/APandey)\ **Replies:** 6\ **Last updated:** [November 10, 2022, 1:51pm UTC](https://discuss.elastic.co/t/java-capture-overloaded-method/318434 "2022-11-10T13:51:03Z")
Hello everyone, I want to understand whether we can capture overloaded methods. We want to find which overloaded method was called with number of arguments and their type so we can use it for further correlation. --- ## [Useragent information](https://discuss.elastic.co/t/useragent-information/277786)
**Author:** [@111401](https://discuss.elastic.co/u/111401)\ **Replies:** 6\ **Last updated:** [July 19, 2021, 8:56am UTC](https://discuss.elastic.co/t/useragent-information/277786 "2021-07-19T08:56:04Z")
Hi, i had parsed netflow via filebeat 7.7.0 and send it to logstash 7.6.2 then elasticsearch 7.6.2, but i see the agent field is only about filebeat, not the client device information. "agent" =\> { "i… --- ## [Is there any configuration that can maintain the green status for .security-7 index always?](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 6\ **Last updated:** [July 28, 2020, 9:14am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834 "2020-07-28T09:14:18Z")
Is there any configuration that can maintain the green status for .security-7 index always? --- ## [Need Help Regarding design multivalue column field in elasticsearch from river](https://discuss.elastic.co/t/need-help-regarding-design-multivalue-column-field-in-elasticsearch-from-river/20088)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 6\ **Last updated:** [October 8, 2014, 3:09pm UTC](https://discuss.elastic.co/t/need-help-regarding-design-multivalue-column-field-in-elasticsearch-from-river/20088 "2014-10-08T15:09:19Z")
Hi All, I have a scenario like, I need to build an index with four fields (Generic Description,GenericId ,GroupNo, List of Catalogsids ). Here is sample example of mysql table. Generic Description … --- ## [How to parse haproxy logs using logstash and filebeat](https://discuss.elastic.co/t/how-to-parse-haproxy-logs-using-logstash-and-filebeat/241487)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 1\ **Last updated:** [July 17, 2020, 12:23pm UTC](https://discuss.elastic.co/t/how-to-parse-haproxy-logs-using-logstash-and-filebeat/241487 "2020-07-17T12:23:47Z")
I have setup logstash and filebeat on my ECK stack so in kibana/elasticsearch i can view logs from kubernetes. I followed this article to set this up https://medium.com/@raphaeldelio/deploy-logstash-and-filebeat-on-kuber… --- ## [Timestamp Range Not Working vs. Date Format Range Working](https://discuss.elastic.co/t/timestamp-range-not-working-vs-date-format-range-working/200909)
**Author:** [@RAMichel](https://discuss.elastic.co/u/RAMichel)\ **Replies:** 1\ **Last updated:** [September 25, 2019, 12:27pm UTC](https://discuss.elastic.co/t/timestamp-range-not-working-vs-date-format-range-working/200909 "2019-09-25T12:27:07Z")
Hopefully this makes sense. I have a document with two fields storing the same data, but one is in an epoch\_millis timestamp format, and the other is in a readable format. The mapping for these two fields is: "latest\_da… --- ## [ElasticSearch 7.3 ClusterFormationFailureHelper master not discovered yet, this n ode has not previously joined a bootstrapped (v7+) cluster, and this node must discover master-eligible nodes](https://discuss.elastic.co/t/elasticsearch-7-3-clusterformationfailurehelper-master-not-discovered-yet-this-n-ode-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes/199680)
**Author:** [@alxdaly](https://discuss.elastic.co/u/alxdaly)\ **Replies:** 1\ **Last updated:** [September 16, 2019, 3:11pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-clusterformationfailurehelper-master-not-discovered-yet-this-n-ode-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes/199680 "2019-09-16T15:11:10Z")
I'm trying to setup 2 nodes using the same instance on a single server. I've been trying to base this on how our ElasticSearch 5.x server was configured but for the most recent version. When trying to start up each insta… --- ## [Unable to filter for Nested property with Ingest pipeline processor query](https://discuss.elastic.co/t/unable-to-filter-for-nested-property-with-ingest-pipeline-processor-query/179680)
**Author:** [@naman](https://discuss.elastic.co/u/naman)\ **Replies:** 1\ **Last updated:** [May 5, 2019, 5:33pm UTC](https://discuss.elastic.co/t/unable-to-filter-for-nested-property-with-ingest-pipeline-processor-query/179680 "2019-05-05T17:33:56Z")
Getting bad request - "The remote server returned an error: (400) Bad Request.. Call: Status code 400 from: POST /infilesearch-v1/es\_file/\_search?typed\_keys=true. ServerError: Type: search\_phase\_execution\_exception Reaso… --- ## [Unable to save changes to Kibana Dashboards 503 error](https://discuss.elastic.co/t/unable-to-save-changes-to-kibana-dashboards-503-error/177466)
**Author:** [@robp21751](https://discuss.elastic.co/u/robp21751)\ **Replies:** 1\ **Last updated:** [April 19, 2019, 9:12pm UTC](https://discuss.elastic.co/t/unable-to-save-changes-to-kibana-dashboards-503-error/177466 "2019-04-19T21:12:38Z")
I am able to save the dashboard if I create a new one, but not if I try to save changes to an existing Dashboard. I get the error below in the log "message":"POST /api/saved\_objects/dashboard/bc8dd500-61d9-11e9-9c3e-3ff… [Previous page](https://discuss.elastic.co/top.md?page=1672&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1674&per_page=50&period=all)