# Top **URL:** https://discuss.elastic.co/top.md?page=1676&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1677 --- ## [Elastic Cluster](https://discuss.elastic.co/t/elastic-cluster/101774)
**Author:** [@Natalia\_Queiroz](https://discuss.elastic.co/u/Natalia_Queiroz)\ **Replies:** 3\ **Last updated:** [September 26, 2017, 6:34am UTC](https://discuss.elastic.co/t/elastic-cluster/101774 "2017-09-26T06:34:34Z")
Hi group, I have the follow cenario: 1 node master, 2 data nodes and 1 client node (kibana+logstash) and a few questions. Regarding the elasticsearch.yml configuration, should I need to configure an initial list of nod… --- ## [Drop "final" flow events](https://discuss.elastic.co/t/drop-final-flow-events/85596)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [May 12, 2017, 6:44pm UTC](https://discuss.elastic.co/t/drop-final-flow-events/85596 "2017-05-12T18:44:42Z")
Hi, I'm trying to use a processor to drop events when "final" = false (I have flows enabled). I've tried these processors: - drop\_event.when.equals.final: \["false"\] - drop\_event.when.equals.final: false - drop\_event.w… --- ## [Developing a batch file to run elasticsearch query](https://discuss.elastic.co/t/developing-a-batch-file-to-run-elasticsearch-query/60256)
**Author:** [@Varun\_Breja](https://discuss.elastic.co/u/Varun_Breja)\ **Replies:** 3\ **Last updated:** [September 12, 2016, 9:56am UTC](https://discuss.elastic.co/t/developing-a-batch-file-to-run-elasticsearch-query/60256 "2016-09-12T09:56:00Z")
Hi Team, I am a newcomer in ElasticSearch and trying to develop a batch file in Java. I have two parts of my question: Part-1: The functionality of this batch will be to run a query like the below: POST /test/\_se… --- ## [ES data loss on index deletion](https://discuss.elastic.co/t/es-data-loss-on-index-deletion/12387)
**Author:** [@Anand\_Nalya](https://discuss.elastic.co/u/Anand_Nalya)\ **Replies:** 3\ **Last updated:** [June 17, 2013, 6:06am UTC](https://discuss.elastic.co/t/es-data-loss-on-index-deletion/12387 "2013-06-17T06:06:43Z")
Hi, I had around 70G of data across 40 indices in ES, I delete 36 of these indices using REST api (curl call). after that the 2 node cluster died and I was not able to restart the cluster. I had to delete the data… --- ## [FLT working , MLT not working](https://discuss.elastic.co/t/flt-working-mlt-not-working/11829)
**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\ **Replies:** 8\ **Last updated:** [May 8, 2013, 6:43am UTC](https://discuss.elastic.co/t/flt-working-mlt-not-working/11829 "2013-05-08T06:43:44Z")
Hi , I am creating a document using this - #!/bin/bash curl -XPOST 'http://localhost:9200/dedupe/events' -d '{ "Events" : \[ { "Event" : "In india we have to try hard to cop up with the living conditio… --- ## [Custom Scorer and Custom Analyzer](https://discuss.elastic.co/t/custom-scorer-and-custom-analyzer/6301)
**Author:** [@Scott\_Decker](https://discuss.elastic.co/u/Scott_Decker)\ **Replies:** 8\ **Last updated:** [March 25, 2013, 10:41pm UTC](https://discuss.elastic.co/t/custom-scorer-and-custom-analyzer/6301 "2013-03-25T22:41:02Z")
Hey All, I had searched in the groups here for this info, but it was always "ping me to get info" =) How do we go about inserting a custom scorer into elastic search (insert our own Similarity java object) How d… --- ## [2 nodes but shows 1 directory](https://discuss.elastic.co/t/2-nodes-but-shows-1-directory/7749)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 8\ **Last updated:** [May 18, 2012, 7:42pm UTC](https://discuss.elastic.co/t/2-nodes-but-shows-1-directory/7749 "2012-05-18T19:42:50Z")
I have 2 nodes cluster but under nodes directory I see only one node. It's something like: I thought I'll see 0 and 1 since I have 2 nodes in the cluster? # ls -ltr nodes/ total 4 drwxr-xr-x 3 root root 40… --- ## [Error when using autodiscovery](https://discuss.elastic.co/t/error-when-using-autodiscovery/172875)
**Author:** [@tomriley](https://discuss.elastic.co/u/tomriley)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 11:50pm UTC](https://discuss.elastic.co/t/error-when-using-autodiscovery/172875 "2019-03-18T23:50:51Z")
We are looking to use autodiscovery with Filebeat in Kubernetes to make it possible to configure Filebeat on a pod by pod basis, as it is intended. However, when enabling we are swamped with Error creating runner from c… --- ## [Node is not available for scroll request](https://discuss.elastic.co/t/node-is-not-available-for-scroll-request/18876)
**Author:** [@Stanislav\_Starcha](https://discuss.elastic.co/u/Stanislav_Starcha)\ **Replies:** 0\ **Last updated:** [July 24, 2014, 6:29pm UTC](https://discuss.elastic.co/t/node-is-not-available-for-scroll-request/18876 "2014-07-24T18:29:12Z")
Hi, The problem: Scroll scan does not return all data. The problem is not permanent, elasticsearch might return 100% of data or only 50% and it never throws an exception. A good indicator of the problem is "\_shard… --- ## [Vectorizing documents - very slow](https://discuss.elastic.co/t/vectorizing-documents-very-slow/327710)
**Author:** [@Cole\_Crawford](https://discuss.elastic.co/u/Cole_Crawford)\ **Replies:** 4\ **Last updated:** [March 16, 2023, 12:07pm UTC](https://discuss.elastic.co/t/vectorizing-documents-very-slow/327710 "2023-03-16T12:07:36Z")
I am trying to create an NLP pipeline using Charangan/MedBERT · Hugging Face. Ingesting documents with this model and an ES ML pipeline is running very slowly: With a dockerized setup on my local machine with 10GB of RAM… --- ## [Row encoding and autosize makes chart not appear](https://discuss.elastic.co/t/row-encoding-and-autosize-makes-chart-not-appear/274229)
**Author:** [@es\_net](https://discuss.elastic.co/u/es_net)\ **Replies:** 4\ **Last updated:** [June 1, 2021, 10:39am UTC](https://discuss.elastic.co/t/row-encoding-and-autosize-makes-chart-not-appear/274229 "2021-06-01T10:39:12Z")
Hi, I am attempting to make charts similar to Faceting a Plot into a Trellis Plot | Vega-Lite with multiple rows of charts, split using the row encoding. (The link above should go to the section titled ' Row Facet (with… --- ## [How to find Retention Rate of users in kibana](https://discuss.elastic.co/t/how-to-find-retention-rate-of-users-in-kibana/258705)
**Author:** [@dharanesh](https://discuss.elastic.co/u/dharanesh)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 4:23am UTC](https://discuss.elastic.co/t/how-to-find-retention-rate-of-users-in-kibana/258705 "2020-12-17T04:23:01Z")
How to create a chart in kibana to represent Retention Rate. --- ## [Elasticsearch Server requirements](https://discuss.elastic.co/t/elasticsearch-server-requirements/209871)
**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\ **Replies:** 4\ **Last updated:** [November 29, 2019, 11:56am UTC](https://discuss.elastic.co/t/elasticsearch-server-requirements/209871 "2019-11-29T11:56:14Z")
Hello, I have a lot of "strange"questions about the elasticsearch requirements for server. I want to use Elasticsearch for ELK Stack.The application produces around 4 GB a day. So that is not so many datas. The fir… --- ## [Integration framework for Jersey app?](https://discuss.elastic.co/t/integration-framework-for-jersey-app/10952)
**Author:** [@timrobertson100](https://discuss.elastic.co/u/timrobertson100)\ **Replies:** 4\ **Last updated:** [February 28, 2013, 7:37pm UTC](https://discuss.elastic.co/t/integration-framework-for-jersey-app/10952 "2013-02-28T19:37:53Z")
Hi all, I have a simple RESTful application (Jersey, Guice, MyBATIS) and would like to add search support using ES (previously we've used SOLR). My app is all Guice wired, and I was thinking I would do a method … --- ## [How do I setup different retentions](https://discuss.elastic.co/t/how-do-i-setup-different-retentions/289359)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 3\ **Last updated:** [November 16, 2021, 10:36pm UTC](https://discuss.elastic.co/t/how-do-i-setup-different-retentions/289359 "2021-11-16T22:36:24Z")
We are currently using Curator to delete specific indicies at 30, 60 and 90 days. We have added 2 warm and 2 cold nodes to our cluster and still want to be able to do the same retention with ILM. Right now we just have a… --- ## [Elastic query takes over 1 minute due to time spent in "HighlightPhase"](https://discuss.elastic.co/t/elastic-query-takes-over-1-minute-due-to-time-spent-in-highlightphase/344344)
**Author:** [@David\_Avant](https://discuss.elastic.co/u/David_Avant)\ **Replies:** 5\ **Last updated:** [October 4, 2023, 7:26pm UTC](https://discuss.elastic.co/t/elastic-query-takes-over-1-minute-due-to-time-spent-in-highlightphase/344344 "2023-10-04T19:26:59Z")
Some elastic queries are slow, taking more than a minute to execute. The query input is simple: just a single, numeric account identifier (i.e. "123456789"). The query takes 68 seconds to execute and returns 6 hits. T… --- ## [Kibana Ingest Pipeline Parsing exception](https://discuss.elastic.co/t/kibana-ingest-pipeline-parsing-exception/134115)
**Author:** [@murali\_nutakkivikjuv](https://discuss.elastic.co/u/murali_nutakkivikjuv)\ **Replies:** 5\ **Last updated:** [June 4, 2018, 8:30pm UTC](https://discuss.elastic.co/t/kibana-ingest-pipeline-parsing-exception/134115 "2018-06-04T20:30:45Z")
I'm trying to ingest an HTTP log through file beat into kibana Pipeline and getting the parse error. The Grok Pattern worked well with grok debugger but the same pattern failed when I attempt to ingest through kibana pip… --- ## [Unanalyzed string vs long on es 5.0](https://discuss.elastic.co/t/unanalyzed-string-vs-long-on-es-5-0/65544)
**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\ **Replies:** 5\ **Last updated:** [November 11, 2016, 4:53pm UTC](https://discuss.elastic.co/t/unanalyzed-string-vs-long-on-es-5-0/65544 "2016-11-11T16:53:07Z")
All my rows in my table have a unique integer + unique slug (unchangable). Is it a lot better to index a numeric field compared to string (based on changes on es 5)? String is more readable when debugging, but if it… --- ## [Kibana monitor data display nothing](https://discuss.elastic.co/t/kibana-monitor-data-display-nothing/301760)
**Author:** [@GaiserChan](https://discuss.elastic.co/u/GaiserChan)\ **Replies:** 7\ **Last updated:** [April 7, 2022, 9:51am UTC](https://discuss.elastic.co/t/kibana-monitor-data-display-nothing/301760 "2022-04-07T09:51:09Z")
i have these index data such as ".monitoring-es-7\*" ".monitoring-kibana-7\*"... but kibana monitoring show message "we couldn\`t activate monitoring" i check F12 in chrome found /api/monitoring/v1/clusters response empt… --- ## [Check if a field exists](https://discuss.elastic.co/t/check-if-a-field-exists/284545)
**Author:** [@zeoiioze](https://discuss.elastic.co/u/zeoiioze)\ **Replies:** 1\ **Last updated:** [September 18, 2021, 4:25pm UTC](https://discuss.elastic.co/t/check-if-a-field-exists/284545 "2021-09-18T16:25:50Z")
I'm using nested fields and a field name in the nested field name, as you can see below (example) : \[doc\]\[vegetables\]\[%{\[tmp\_data\]\[vegetable\_name\]}\]\[number\] The field above is getting created, but now, I want in anot… --- ## [APM Java agent for Micronaut applications?](https://discuss.elastic.co/t/apm-java-agent-for-micronaut-applications/239384)
**Author:** [@seanleblanc](https://discuss.elastic.co/u/seanleblanc)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 6:31am UTC](https://discuss.elastic.co/t/apm-java-agent-for-micronaut-applications/239384 "2020-07-16T06:31:30Z")
We've tried to add the agent to a Micronaut application and we get a stack trace on startup (and application fails to run). Is this a known problem? -XX:InitialHeapSize=536870912 -XX:MaxHeapSize=3221225472 -XX:+PrintCom… --- ## [I need to fetch all document but this query only return 10 documents. I'm checking through postman](https://discuss.elastic.co/t/i-need-to-fetch-all-document-but-this-query-only-return-10-documents-im-checking-through-postman/229574)
**Author:** [@Ramesh\_Kumar](https://discuss.elastic.co/u/Ramesh_Kumar)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 7:10am UTC](https://discuss.elastic.co/t/i-need-to-fetch-all-document-but-this-query-only-return-10-documents-im-checking-through-postman/229574 "2020-04-24T07:10:09Z")
{ "query": { "match\_all": {} } } --- ## [Filebeat log folder is not created anymore](https://discuss.elastic.co/t/filebeat-log-folder-is-not-created-anymore/214269)
**Author:** [@Flaviu](https://discuss.elastic.co/u/Flaviu)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 4:43pm UTC](https://discuss.elastic.co/t/filebeat-log-folder-is-not-created-anymore/214269 "2020-01-08T16:43:26Z")
I have installed filebeat 7.5.1 on a new server, and I realized that the folder in which I want filebeat to save his own logs is not created anymore. This was working in the previous version. I am doing something wrong o… --- ## [Simply push json -\> elasticsearch](https://discuss.elastic.co/t/simply-push-json-elasticsearch/190981)
**Author:** [@AaronNBrock](https://discuss.elastic.co/u/AaronNBrock)\ **Replies:** 1\ **Last updated:** [July 17, 2019, 12:33pm UTC](https://discuss.elastic.co/t/simply-push-json-elasticsearch/190981 "2019-07-17T12:33:48Z")
I have a simple application that logs to a file in single complete json strings. Example /tmp/my.log { "user": "bob", "event":"speak", "message":"Hello, world!" } { "user": "bill", "event":"sleep", "duration":8 } I'd… --- ## [Differentiate between sections within a single log file](https://discuss.elastic.co/t/differentiate-between-sections-within-a-single-log-file/168478)
**Author:** [@Abhilash\_B](https://discuss.elastic.co/u/Abhilash_B)\ **Replies:** 7\ **Last updated:** [February 16, 2019, 7:34pm UTC](https://discuss.elastic.co/t/differentiate-between-sections-within-a-single-log-file/168478 "2019-02-16T19:34:42Z")
Hey, I have a log file which looks like this. Its basically a tab separated text file with a few lines of metadata text. I would want to extract "TIME" only as part of metadata field. For other tab separated lines, I wo… --- ## [Visualization and dashboards are not save after upgrade to 6.5](https://discuss.elastic.co/t/visualization-and-dashboards-are-not-save-after-upgrade-to-6-5/161916)
**Author:** [@shlomi](https://discuss.elastic.co/u/shlomi)\ **Replies:** 1\ **Last updated:** [December 24, 2018, 9:13am UTC](https://discuss.elastic.co/t/visualization-and-dashboards-are-not-save-after-upgrade-to-6-5/161916 "2018-12-24T09:13:16Z")
Hi, After upgrating elastic and kibana to ver 6.5 all visualization and dashboards cant be saved when pressing "save" in kibana an error display in the left buttom of the screen that the element cant be save. When we c… --- ## [Elasticsearch Watcher - convert the milliseconds-since-the-epoch value back into a string](https://discuss.elastic.co/t/elasticsearch-watcher-convert-the-milliseconds-since-the-epoch-value-back-into-a-string/154000)
**Author:** [@Kathir\_J](https://discuss.elastic.co/u/Kathir_J)\ **Replies:** 1\ **Last updated:** [October 25, 2018, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-watcher-convert-the-milliseconds-since-the-epoch-value-back-into-a-string/154000 "2018-10-25T12:57:07Z")
Hi, I am currently trying with watcher for anomalies. Here is my text field which gets notified in slack. "text": "Machine Learning Results - Object cache size is going to exceed threshold limit.\\n Anomalies:\\n{{#ctx.… --- ## [Logstash errors while executing ruby code (Ruby exception occurred: allocator undefined for Floa)](https://discuss.elastic.co/t/logstash-errors-while-executing-ruby-code-ruby-exception-occurred-allocator-undefined-for-floa/151939)
**Author:** [@Dawn\_Okem](https://discuss.elastic.co/u/Dawn_Okem)\ **Replies:** 1\ **Last updated:** [October 11, 2018, 11:07pm UTC](https://discuss.elastic.co/t/logstash-errors-while-executing-ruby-code-ruby-exception-occurred-allocator-undefined-for-floa/151939 "2018-10-11T23:07:26Z")
Was trying to execute below code. but logstash keeps spitting an error out. if \[received\_at\] and \[sent\_at\] { ruby { init =\> "require 'time'" code =\> " received\_by\_finacle = (Time.parse(event.get('received\_at').… --- ## [German Umlauts not shown correctly](https://discuss.elastic.co/t/german-umlauts-not-shown-correctly/133020)
**Author:** [@Tempy](https://discuss.elastic.co/u/Tempy)\ **Replies:** 1\ **Last updated:** [May 23, 2018, 4:31pm UTC](https://discuss.elastic.co/t/german-umlauts-not-shown-correctly/133020 "2018-05-23T16:31:06Z")
Hello. I use Filebeat to send logs to Logstash which forwards them to Elasticsearch and then to Kibana. The logs appearing in Kibana are not presented correctly as certain characters (umlauts) are replaced with a quest… --- ## [Need validation of localhost:9200](https://discuss.elastic.co/t/need-validation-of-localhost-9200/109503)
**Author:** [@chenfan](https://discuss.elastic.co/u/chenfan)\ **Replies:** 1\ **Last updated:** [November 29, 2017, 10:38am UTC](https://discuss.elastic.co/t/need-validation-of-localhost-9200/109503 "2017-11-29T10:38:16Z")
help! when i curl localhost:9200 need validation i user /usr/share/elasticsearch/bin/elasticsearch-keystore create ==\>a keystore.seed i don't load the corresponding configuration to elasticsearch.yml i don't know ho… --- ## [Logstash X-Pack is using deprecated feature](https://discuss.elastic.co/t/logstash-x-pack-is-using-deprecated-feature/108304)
**Author:** [@outcoldman](https://discuss.elastic.co/u/outcoldman)\ **Replies:** 1\ **Last updated:** [November 20, 2017, 4:39pm UTC](https://discuss.elastic.co/t/logstash-x-pack-is-using-deprecated-feature/108304 "2017-11-20T16:39:43Z")
Logstash is reporting \[2017-11-20T01:04:57,970\]\[WARN \]\[logstash.outputs.elasticsearch\] You are using a deprecated config setting "document\_type" set in elasticsearch. Deprecated settings will continue to work, but are s… --- ## [Not able to connect to hive with logstash input](https://discuss.elastic.co/t/not-able-to-connect-to-hive-with-logstash-input/104046)
**Author:** [@Navinder](https://discuss.elastic.co/u/Navinder)\ **Replies:** 1\ **Last updated:** [October 17, 2017, 6:28am UTC](https://discuss.elastic.co/t/not-able-to-connect-to-hive-with-logstash-input/104046 "2017-10-17T06:28:20Z")
Hi I am using below input in logstash. input { jdbc { jdbc\_driver\_library =\> "home/app/hive-jdbc-2.0.0.jar" jdbc\_driver\_class =\> "org.apache.hive.jdbc.HiveDriver" jdbc\_connection\_string =\> "jdbc:hive2://xxxxxxx:10000/d… --- ## [Basic license with seperate monitoring cluster](https://discuss.elastic.co/t/basic-license-with-seperate-monitoring-cluster/67546)
**Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\ **Replies:** 1\ **Last updated:** [November 29, 2016, 9:21pm UTC](https://discuss.elastic.co/t/basic-license-with-seperate-monitoring-cluster/67546 "2016-11-29T21:21:52Z")
Hi, With marvel on 2.4.X I could run a separate monitoring cluster and have my main cluster send metrics to that cluster. I did not monitor the monitoring cluster so I would only be monitoring the main cluster. I've … --- ## [Kibana authentcation with LDAP](https://discuss.elastic.co/t/kibana-authentcation-with-ldap/51394)
**Author:** [@ivanandrianto95](https://discuss.elastic.co/u/ivanandrianto95)\ **Replies:** 1\ **Last updated:** [May 31, 2016, 2:45pm UTC](https://discuss.elastic.co/t/kibana-authentcation-with-ldap/51394 "2016-05-31T14:45:12Z")
I read this tutorial https://www.elastic.co/guide/en/shield/current/kibana.html and found that it's possible to use LDAP for authentication. But I din't know how to do it. Please explain me or give example about how to i… --- ## [Elasticsearch 2.2.x vs Grafana 2.6.x](https://discuss.elastic.co/t/elasticsearch-2-2-x-vs-grafana-2-6-x/44746)
**Author:** [@Marcello\_A](https://discuss.elastic.co/u/Marcello_A)\ **Replies:** 1\ **Last updated:** [March 17, 2016, 11:01pm UTC](https://discuss.elastic.co/t/elasticsearch-2-2-x-vs-grafana-2-6-x/44746 "2016-03-17T23:01:51Z")
Hi All, we have installed on our staging environment a stack composed by Logstash 2.2.x, Elasticsearch 2.2.x and we tried to add as monitoring dashboard a new version of Grafana 2.6.0 in parallel with Kibana 4.4.3. Th… --- ## [Deploying elasticsearch as WAR](https://discuss.elastic.co/t/deploying-elasticsearch-as-war/936)
**Author:** [@raylite3](https://discuss.elastic.co/u/raylite3)\ **Replies:** 1\ **Last updated:** [May 20, 2015, 7:43am UTC](https://discuss.elastic.co/t/deploying-elasticsearch-as-war/936 "2015-05-20T07:43:18Z")
Hello, I am using the elasticsearch-transport-wares plugin to deploy Elasticsearch as a WAR. Does anyone know if this will continue to be a valid way to deploy Elasticsearch? I ask because there have been recent changes … --- ## [Inconsistent results when aggregate by field from array](https://discuss.elastic.co/t/inconsistent-results-when-aggregate-by-field-from-array/22976)
**Author:** [@yana2301](https://discuss.elastic.co/u/yana2301)\ **Replies:** 1\ **Last updated:** [April 14, 2015, 4:46pm UTC](https://discuss.elastic.co/t/inconsistent-results-when-aggregate-by-field-from-array/22976 "2015-04-14T16:46:10Z")
Hi All, I have array of objects in each document in index. I want to group by and retrieve stats based on fields from this array. But stats is calculated based on sum of all values in this array. Could you pleas… --- ## [Problem with synonym token filter](https://discuss.elastic.co/t/problem-with-synonym-token-filter/10801)
**Author:** [@Rajesh\_Tarle](https://discuss.elastic.co/u/Rajesh_Tarle)\ **Replies:** 7\ **Last updated:** [February 27, 2013, 3:35pm UTC](https://discuss.elastic.co/t/problem-with-synonym-token-filter/10801 "2013-02-27T15:35:06Z")
Hi I am newbie with elastic search.i need to use synonym filter to meet my requirement. my used mapping details and synonym text file on : https://gist.github.com/rajesh07/4985901 Requirement: -----------… --- ## [\[org.logstash.execution.ShutdownWatcherExt\] - Logstash seems to be stuck!](https://discuss.elastic.co/t/org-logstash-execution-shutdownwatcherext-logstash-seems-to-be-stuck/234335)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 12:42pm UTC](https://discuss.elastic.co/t/org-logstash-execution-shutdownwatcherext-logstash-seems-to-be-stuck/234335 "2020-05-26T12:42:21Z")
Hello all, Setup is Logstash (7.7.0) agent on AWS linux instance - using s3 input and Elasticsearch output in confs. Elastic Cloud (7.7.0) Logstash seems to be running and all but then when it comes to seeing the dat… --- ## [{"error":"Incorrect HTTP method for uri \[/\_plugin/HQ\] and method \[GET\], allowed: \[POST\]","status":405}](https://discuss.elastic.co/t/error-incorrect-http-method-for-uri-plugin-hq-and-method-get-allowed-post-status-405/146288)
**Author:** [@anwarshahtarn](https://discuss.elastic.co/u/anwarshahtarn)\ **Replies:** 0\ **Last updated:** [August 28, 2018, 8:18am UTC](https://discuss.elastic.co/t/error-incorrect-http-method-for-uri-plugin-hq-and-method-get-allowed-post-status-405/146288 "2018-08-28T08:18:17Z")
How to install plugin HQ --- ## [Snapshot & Restore Performance](https://discuss.elastic.co/t/snapshot-restore-performance/22591)
**Author:** [@mark\_2](https://discuss.elastic.co/u/mark_2)\ **Replies:** 0\ **Last updated:** [March 10, 2015, 12:34am UTC](https://discuss.elastic.co/t/snapshot-restore-performance/22591 "2015-03-10T00:34:56Z")
I recently have been testing the S3 snapshot and restore performance. I'm able to pull down ~25GB across all 4 data nodes in 10 mins on a restore. On a given node, I seem to be only getting about 70-80 MBit/s, CPU … --- ## [Vega-Lite condition in Kibana unexpected behaviour](https://discuss.elastic.co/t/vega-lite-condition-in-kibana-unexpected-behaviour/306014)
**Author:** [@monicakp](https://discuss.elastic.co/u/monicakp)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 11:15am UTC](https://discuss.elastic.co/t/vega-lite-condition-in-kibana-unexpected-behaviour/306014 "2022-06-01T11:15:19Z")
Hi. I'm creating a custom visualization using Vega-Lite in Kibana. I have one rectangle per document in my index, and based on a field (flag) in the document color the box either red or green. However, I've come across… --- ## [ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch(http://elasticsearch:9200)): 401 Unauthorized](https://discuss.elastic.co/t/error-pipeline-output-go-100-failed-to-connect-to-backoff-elasticsearch-http-elasticsearch-9200-401-unauthorized/305687)
**Author:** [@kosmylo](https://discuss.elastic.co/u/kosmylo)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 11:13am UTC](https://discuss.elastic.co/t/error-pipeline-output-go-100-failed-to-connect-to-backoff-elasticsearch-http-elasticsearch-9200-401-unauthorized/305687 "2022-05-26T11:13:39Z")
I have an express app with nginx that writes the web access logs through filebeat/logstash/Elasticsearch/kibana. I wanted to add packetbeat to this pipeline. The docker-compose is the following: packetbeat: build: … --- ## [Elasticsearch memory issue?](https://discuss.elastic.co/t/elasticsearch-memory-issue/295449)
**Author:** [@catadetest](https://discuss.elastic.co/u/catadetest)\ **Replies:** 2\ **Last updated:** [January 27, 2022, 7:13am UTC](https://discuss.elastic.co/t/elasticsearch-memory-issue/295449 "2022-01-27T07:13:41Z")
Hi everyone, As my manager told me we should expect more traffic in the following days, I would like to be prepared with the Elasticsearch servers performance. So I did the following investigation: Verified my load /… --- ## [Not able to give "unknown" field name in grok filter](https://discuss.elastic.co/t/not-able-to-give-unknown-field-name-in-grok-filter/235198)
**Author:** [@sakthiskv](https://discuss.elastic.co/u/sakthiskv)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 8:40am UTC](https://discuss.elastic.co/t/not-able-to-give-unknown-field-name-in-grok-filter/235198 "2020-06-02T08:40:59Z")
Hai, i am using logstash IMAP server to read messages from mail and put it into ES. I am able to read mails from Gmail and getting mail attachments also. i have to apply some filter to that attachments field. but that… --- ## [Index a file line by line in logstash](https://discuss.elastic.co/t/index-a-file-line-by-line-in-logstash/188048)
**Author:** [@Ashish\_Ranjan](https://discuss.elastic.co/u/Ashish_Ranjan)\ **Replies:** 2\ **Last updated:** [July 1, 2019, 5:23am UTC](https://discuss.elastic.co/t/index-a-file-line-by-line-in-logstash/188048 "2019-07-01T05:23:52Z")
I am using logstash to ingest multiple application logs into elasticsearch. I have setup the filter to ingest logs which are working fine. For one application I need to index the log file line by line, without any mappi… --- ## [Rename or Change Available Fields](https://discuss.elastic.co/t/rename-or-change-available-fields/188035)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 2\ **Last updated:** [June 28, 2019, 2:50pm UTC](https://discuss.elastic.co/t/rename-or-change-available-fields/188035 "2019-06-28T14:50:38Z")
Hi, How do I rename an available field? So for example we pull logs from GCP and use a json filter before outputting it to elasticsearch. The message field shows an event named "bytes\_sent" but in Kibana under Availabl… --- ## [Count Occurrence Of Value](https://discuss.elastic.co/t/count-occurrence-of-value/184551)
**Author:** [@dkelsen](https://discuss.elastic.co/u/dkelsen)\ **Replies:** 2\ **Last updated:** [June 7, 2019, 1:19pm UTC](https://discuss.elastic.co/t/count-occurrence-of-value/184551 "2019-06-07T13:19:12Z")
Hi, I'm trying to figure out how to get the total number of occurrences of a certain value in an index. I've tried using Value Count Aggregation, but that doesn't seem to work. "\_source" : { "category" : \[ … --- ## [Invalid Frame error](https://discuss.elastic.co/t/invalid-frame-error/169813)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 2\ **Last updated:** [February 26, 2019, 5:15am UTC](https://discuss.elastic.co/t/invalid-frame-error/169813 "2019-02-26T05:15:53Z")
Whenever I am trying to import logs using filebeat on the same server (logstash) I am getting error as: \[INFO \] 2019-02-25 16:59:35.337 \[defaultEventExecutorGroup-4-1\] BeatsHandler - \[local: 10.11.109.7:5044, remote: 10… --- ## [Logstash Configuration with custom patterns](https://discuss.elastic.co/t/logstash-configuration-with-custom-patterns/141352)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 2\ **Last updated:** [July 24, 2018, 10:25am UTC](https://discuss.elastic.co/t/logstash-configuration-with-custom-patterns/141352 "2018-07-24T10:25:13Z")
I want to read application specific logs especially for exception. So i created a "patterns" folder in config folder and added the patterns and the file looks like : #Extra patterns for grok EISLOGFORMAT %{TIMESTAMP\_IS… [Previous page](https://discuss.elastic.co/top.md?page=1675&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1677&per_page=50&period=all)