# Top

**URL:** https://discuss.elastic.co/top.md?page=169&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 170

---

## [Kibana format issue](https://discuss.elastic.co/t/kibana-format-issue/85494)

<div class="topic-metadata">

**Author:** [@Steve\_1](https://discuss.elastic.co/u/Steve_1)\
**Replies:** 10\
**Last updated:** [May 19, 2017, 7:00pm UTC](https://discuss.elastic.co/t/kibana-format-issue/85494 "2017-05-19T19:00:04Z")

</div>

When I apply filter to the Line chart in Kibana, the filter value is displayed as a title at the axis but as two identical lines. How can I make it display only one line? E.g. "filter\_value:filters" metricbeat.yml met…

---

## [Timeout Exceptions (NoNodeAvailableException)?](https://discuss.elastic.co/t/timeout-exceptions-nonodeavailableexception/76549)

<div class="topic-metadata">

**Author:** [@teka](https://discuss.elastic.co/u/teka)\
**Replies:** 10\
**Last updated:** [March 1, 2017, 3:31pm UTC](https://discuss.elastic.co/t/timeout-exceptions-nonodeavailableexception/76549 "2017-03-01T15:31:27Z")

</div>

Hi, We are having a problem with timeouts and I was hoping someone could help. Thanks a lot in advance. Our cluster. ES 2.3.5, 10 machines (3 master nodes, 7 data nodes), most of them are running Ubuntu 14.04, settings…

---

## [Cluster red, unassigned shards, no response on writes](https://discuss.elastic.co/t/cluster-red-unassigned-shards-no-response-on-writes/322114)

<div class="topic-metadata">

**Author:** [@decibel83](https://discuss.elastic.co/u/decibel83)\
**Replies:** 16\
**Last updated:** [January 25, 2023, 2:41pm UTC](https://discuss.elastic.co/t/cluster-red-unassigned-shards-no-response-on-writes/322114 "2023-01-25T14:41:58Z")

</div>

Hi everyone, I'm dealing with a problem on Elasticsearch 7.17.5 (I've also tried to upgrade it to version 8 but I'm having the same problem with that version too) which is hanged, red status and unresponsive on any writ…

---

## [Re-balancing shard allocation](https://discuss.elastic.co/t/re-balancing-shard-allocation/132726)

<div class="topic-metadata">

**Author:** [@hamid\_bayat](https://discuss.elastic.co/u/hamid_bayat)\
**Replies:** 20\
**Last updated:** [May 23, 2018, 2:26pm UTC](https://discuss.elastic.co/t/re-balancing-shard-allocation/132726 "2018-05-23T14:26:01Z")

</div>

we have cluster with 100 node and our index name are base on date. with elastic default options, the situation is like this: the shard of index that begin with 2017-June are in first 10 node the shard of index that beg…

---

## [Archive index to gzip - cant decompressed](https://discuss.elastic.co/t/archive-index-to-gzip-cant-decompressed/160108)

<div class="topic-metadata">

**Author:** [@bmatoki](https://discuss.elastic.co/u/bmatoki)\
**Replies:** 10\
**Last updated:** [January 16, 2019, 9:02am UTC](https://discuss.elastic.co/t/archive-index-to-gzip-cant-decompressed/160108 "2019-01-16T09:02:06Z")

</div>

Hey all. im trying to archive logs every 1hour to gzip - its working and saving every 1 hour to gzip. while im trying to decompressed it via node js \\ linux \\ gunzip \\ cygnwin - got an error " Gzip outputting invalid…

---

## [How to calculate similarity between files, while i just index their url and metadata](https://discuss.elastic.co/t/how-to-calculate-similarity-between-files-while-i-just-index-their-url-and-metadata/189728)

<div class="topic-metadata">

**Author:** [@FeizNouri](https://discuss.elastic.co/u/FeizNouri)\
**Replies:** 14\
**Last updated:** [July 17, 2019, 2:13pm UTC](https://discuss.elastic.co/t/how-to-calculate-similarity-between-files-while-i-just-index-their-url-and-metadata/189728 "2019-07-17T14:13:51Z")

</div>

Hi, I'm using FSCrawler to index files to ES, nice solution BTW, but I don't want to index the content so I just index metadata and the URL, so far so good, and my final goal is to calculate the similarity between these…

---

## [AWS Ubuntu 18, ES 6.6.0, java couldn't find discovery-ec2 plugin](https://discuss.elastic.co/t/aws-ubuntu-18-es-6-6-0-java-couldnt-find-discovery-ec2-plugin/175536)

<div class="topic-metadata">

**Author:** [@kunj\_choksi](https://discuss.elastic.co/u/kunj_choksi)\
**Replies:** 16\
**Last updated:** [April 5, 2019, 12:15pm UTC](https://discuss.elastic.co/t/aws-ubuntu-18-es-6-6-0-java-couldnt-find-discovery-ec2-plugin/175536 "2019-04-05T12:15:14Z")

</div>

Hey, I have successfully installed ES. But JAVA is still not able to find the discovery-ec2 plugin. Am I missing any plugin or any configuration? below is my yml file cloud.aws.access\_key: ##### cloud.aws.secret\_key:…

---

## [BUG: Elasticsearch ignoring node.roles after upgrade from 7.6.1](https://discuss.elastic.co/t/bug-elasticsearch-ignoring-node-roles-after-upgrade-from-7-6-1/274465)

<div class="topic-metadata">

**Author:** [@mverbeek](https://discuss.elastic.co/u/mverbeek)\
**Replies:** 14\
**Last updated:** [June 3, 2021, 7:08am UTC](https://discuss.elastic.co/t/bug-elasticsearch-ignoring-node-roles-after-upgrade-from-7-6-1/274465 "2021-06-03T07:08:03Z")

</div>

Hello everyone, When upgrading from 7.6.1 to 7.10.2, I replaced the old node.master and node.data setting to the new node.roles setting. I changed 2 of the 5 data nodes to data\_cold only. But if the node has already bee…

---

## [Storage Nodes Also Using Logstash?](https://discuss.elastic.co/t/storage-nodes-also-using-logstash/66015)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 14\
**Last updated:** [November 18, 2016, 4:35pm UTC](https://discuss.elastic.co/t/storage-nodes-also-using-logstash/66015 "2016-11-18T16:35:34Z")

</div>

I was recently reviewing some of my logs being ingested -- some of them have a timestamp two weeks older than when they were finally ingested. To me, this indicates a two-week latency, likely in Logstash.. In order to…

---

## [Span#setLabel(String, Number) doesn't work](https://discuss.elastic.co/t/span-setlabel-string-number-doesnt-work/263283)

<div class="topic-metadata">

**Author:** [@dmitry\_first](https://discuss.elastic.co/u/dmitry_first)\
**Replies:** 9\
**Last updated:** [February 8, 2021, 11:59am UTC](https://discuss.elastic.co/t/span-setlabel-string-number-doesnt-work/263283 "2021-02-08T11:59:03Z")

</div>

APM Agent language and version: java and apm agent library = 1.20.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: gradle Description of the problem including expected versus act…

---

## [How to remove dynamical field?](https://discuss.elastic.co/t/how-to-remove-dynamical-field/46772)

<div class="topic-metadata">

**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\
**Replies:** 11\
**Last updated:** [April 12, 2016, 2:34pm UTC](https://discuss.elastic.co/t/how-to-remove-dynamical-field/46772 "2016-04-12T14:34:25Z")

</div>

i have got the log looks like this below. { "message" =\> "#, @varbind\_list=\[#, #\>, #, #\>\], @specific\_trap=1, @source\_ip=\\"10.10.10.13\\", @agent\_addr=#, @generic\_trap=6\>", "host" =\> "10.10.10.13", "@version" =\> "1", "@t…

---

## [Concealment of Beats](https://discuss.elastic.co/t/concealment-of-beats/132818)

<div class="topic-metadata">

**Author:** [@t03r1cht](https://discuss.elastic.co/u/t03r1cht)\
**Replies:** 15\
**Last updated:** [May 24, 2018, 1:52pm UTC](https://discuss.elastic.co/t/concealment-of-beats/132818 "2018-05-24T13:52:40Z")

</div>

Hi, I am currently deploying the Elastic Stack inside a honeynet for log data analysis of different honeypots. I'm using Beats to ship data directly from the honeypots to Logstash and Elasticsearch, however, I've found …

---

## [Logstash Sending Old Data to ES](https://discuss.elastic.co/t/logstash-sending-old-data-to-es/165974)

<div class="topic-metadata">

**Author:** [@Aralex](https://discuss.elastic.co/u/Aralex)\
**Replies:** 11\
**Last updated:** [January 28, 2019, 2:26pm UTC](https://discuss.elastic.co/t/logstash-sending-old-data-to-es/165974 "2019-01-28T14:26:38Z")

</div>

Hi, my pipeline consists of: filebeat -\> logstash -\> ES -\> kibana. I use it to read CSV files in a folder and index/mirror any changes or updates in real time on kibana. Problem 1: My test CSV file has 16 entries bus …

---

## [検索結果"\_shards"内の"skipped"の定義](https://discuss.elastic.co/t/shards-skipped/160154)

<div class="topic-metadata">

**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\
**Replies:** 9\
**Last updated:** [December 14, 2018, 8:44am UTC](https://discuss.elastic.co/t/shards-skipped/160154 "2018-12-14T08:44:52Z")

</div>

検索結果"\_shards"内の"skipped"ですが、どのような場合にカウントされるのか、定義が見当たらないようです。 { "took" : 5, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "skipped" : 0, \<============== こちらの定義について "failed" : 0 …

---

## [Logstash aggregate syslog entries](https://discuss.elastic.co/t/logstash-aggregate-syslog-entries/263783)

<div class="topic-metadata">

**Author:** [@Pablo\_Marques](https://discuss.elastic.co/u/Pablo_Marques)\
**Replies:** 12\
**Last updated:** [February 12, 2021, 8:08pm UTC](https://discuss.elastic.co/t/logstash-aggregate-syslog-entries/263783 "2021-02-12T20:08:25Z")

</div>

Hello I am getting syslogs from Clearpass servers and using logstash to ingest them into elasticsearch. Some of these messages are received on multiple syslog packets, but they are really the same (big) message. I am …

---

## [Create index mapping for dataset with large features](https://discuss.elastic.co/t/create-index-mapping-for-dataset-with-large-features/184830)

<div class="topic-metadata">

**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\
**Replies:** 12\
**Last updated:** [June 8, 2019, 12:34pm UTC](https://discuss.elastic.co/t/create-index-mapping-for-dataset-with-large-features/184830 "2019-06-08T12:34:50Z")

</div>

I am trying to bulk upload my data to ES but it ends up showing parsing exception. I want to create mapping for my index but the main problem is i have more than 70 columns in my dataset, for which specifying data type i…

---

## [\[Kibana Timelion\] - Cannot apply Dashboard filter on Timelion functions](https://discuss.elastic.co/t/kibana-timelion-cannot-apply-dashboard-filter-on-timelion-functions/241087)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 9\
**Last updated:** [August 21, 2020, 4:11pm UTC](https://discuss.elastic.co/t/kibana-timelion-cannot-apply-dashboard-filter-on-timelion-functions/241087 "2020-08-21T16:11:41Z")

</div>

Hi there, Thanks in advance for your help I have written a couple of timelion functions and all of them request the same index-pattern, they just differ by their q='' filter and metric. However, from a dashboard, wher…

---

## [Permission denied (os:windows)](https://discuss.elastic.co/t/permission-denied-os-windows/304923)

<div class="topic-metadata">

**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\
**Replies:** 14\
**Last updated:** [May 19, 2022, 9:33am UTC](https://discuss.elastic.co/t/permission-denied-os-windows/304923 "2022-05-19T09:33:48Z")

</div>

Am starting Elasticsearch like this cd elasticsearch/bin/elasticsearch.bat but am getting permission denied when am accessing one of my es documents through my API. am not understanding what's the issue here . Am usin…

---

## [Search Name match with specific Character and output comes in hierarchical Order](https://discuss.elastic.co/t/search-name-match-with-specific-character-and-output-comes-in-hierarchical-order/190902)

<div class="topic-metadata">

**Author:** [@nitesh313](https://discuss.elastic.co/u/nitesh313)\
**Replies:** 14\
**Last updated:** [July 18, 2019, 12:56pm UTC](https://discuss.elastic.co/t/search-name-match-with-specific-character-and-output-comes-in-hierarchical-order/190902 "2019-07-18T12:56:28Z")

</div>

Hello All, I am new in elasticsearch and straggle to get expected output and below is my query. Here i basically looking to get all Employee in "organization" index whose name start with "jo" and also the employee wh…

---

## [How to get selected log from filebeat index by python](https://discuss.elastic.co/t/how-to-get-selected-log-from-filebeat-index-by-python/194466)

<div class="topic-metadata">

**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\
**Replies:** 9\
**Last updated:** [August 14, 2019, 10:06am UTC](https://discuss.elastic.co/t/how-to-get-selected-log-from-filebeat-index-by-python/194466 "2019-08-14T10:06:23Z")

</div>

i am using python elasticsearch module to search filebeat log by using using keyword. same as i do in "Kibana Discover" but my search does not return anything. # make sure ES is up and running import requests res = requ…

---

## [Elastic search Reindex Count of Document not match](https://discuss.elastic.co/t/elastic-search-reindex-count-of-document-not-match/321898)

<div class="topic-metadata">

**Author:** [@Voon\_see\_hong](https://discuss.elastic.co/u/Voon_see_hong)\
**Replies:** 11\
**Last updated:** [December 27, 2022, 8:37am UTC](https://discuss.elastic.co/t/elastic-search-reindex-count-of-document-not-match/321898 "2022-12-27T08:37:00Z")

</div>

hi all, i face a weird situation here where i ran reindex POST \_reindex?wait\_for\_completion=false { "source": { "index": "stage-user" }, "conflicts": "proceed", "dest": {"index": "stage-user-test-v1", "op\_…

---

## [Temporary downtime during node migration (and order)](https://discuss.elastic.co/t/temporary-downtime-during-node-migration-and-order/231797)

<div class="topic-metadata">

**Author:** [@blacksmith](https://discuss.elastic.co/u/blacksmith)\
**Replies:** 14\
**Last updated:** [May 12, 2020, 9:15am UTC](https://discuss.elastic.co/t/temporary-downtime-during-node-migration-and-order/231797 "2020-05-12T09:15:15Z")

</div>

Hello! We have a 3-node cluster running ES 5.6.16 running in VMware VMs and we will soon migrate the nodes to another VMware-cluster. I'm planning to move it one node at a time, but how do I move it as efficiently as p…

---

## [Haproxy between clients and cluster](https://discuss.elastic.co/t/haproxy-between-clients-and-cluster/12199)

<div class="topic-metadata">

**Author:** [@Chad\_Kouse](https://discuss.elastic.co/u/Chad_Kouse)\
**Replies:** 9\
**Last updated:** [May 31, 2013, 9:47pm UTC](https://discuss.elastic.co/t/haproxy-between-clients-and-cluster/12199 "2013-05-31T21:47:21Z")

</div>

We are trying to use HAProxy to ensure that if a node fails it is removed from taking requests from our client. A problem we have run into with this approach is in the case where a node has incorrectly detected a fa…

---

## [Is it possible to parse the whole data to a filter?](https://discuss.elastic.co/t/is-it-possible-to-parse-the-whole-data-to-a-filter/78475)

<div class="topic-metadata">

**Author:** [@Vittorio](https://discuss.elastic.co/u/Vittorio)\
**Replies:** 13\
**Last updated:** [March 14, 2017, 2:24pm UTC](https://discuss.elastic.co/t/is-it-possible-to-parse-the-whole-data-to-a-filter/78475 "2017-03-14T14:24:29Z")

</div>

Hi all, Is it possible to give the whole data I'm reading from rabbitmq and give it to a filter(for example as source for cipher filter so that it will encrypt all of it) ?? Thanks!!!

---

## [High Rejections - bulk api](https://discuss.elastic.co/t/high-rejections-bulk-api/216204)

<div class="topic-metadata">

**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\
**Replies:** 9\
**Last updated:** [January 23, 2020, 4:44pm UTC](https://discuss.elastic.co/t/high-rejections-bulk-api/216204 "2020-01-23T16:44:57Z")

</div>

My elastic cluster:- version 7.2.0. 3 data nodes, 1 master node, 2 master+ingress nodes Problem: I could see too many rejections on data nodes. So there is data loss GET \_nodes/moss-eck-es-data-2/stats/thread\_pool?hu…

---

## [Kv filter has no support for this type of data](https://discuss.elastic.co/t/kv-filter-has-no-support-for-this-type-of-data/109868)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 9\
**Last updated:** [December 6, 2017, 6:39am UTC](https://discuss.elastic.co/t/kv-filter-has-no-support-for-this-type-of-data/109868 "2017-12-06T06:39:24Z")

</div>

Hi, I've got the following setup: Netflow -\> remote logstash -\> file -\> file transfer -\> server logstash -\> Elasticsearch. On the server logstash I'm trying to parse the netflow file but the log outputs kv filter has n…

---

## [Logs files multi line filter (ASCII)](https://discuss.elastic.co/t/logs-files-multi-line-filter-ascii/58970)

<div class="topic-metadata">

**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\
**Replies:** 11\
**Last updated:** [August 30, 2016, 7:46pm UTC](https://discuss.elastic.co/t/logs-files-multi-line-filter-ascii/58970 "2016-08-30T19:46:10Z")

</div>

HI, I would like to find out if logstash can process multiple lines that are below each other? Here is an example of a log: { 1=352621443221 2=3525945678 3=20140225132715 4=345 7=0 …

---

## [Unable to drop lines using drop filter of logstash](https://discuss.elastic.co/t/unable-to-drop-lines-using-drop-filter-of-logstash/179770)

<div class="topic-metadata">

**Author:** [@Suchismita\_Goswami](https://discuss.elastic.co/u/Suchismita_Goswami)\
**Replies:** 11\
**Last updated:** [May 9, 2019, 7:06am UTC](https://discuss.elastic.co/t/unable-to-drop-lines-using-drop-filter-of-logstash/179770 "2019-05-09T07:06:01Z")

</div>

Sample Log file: Started by user e\[8mha:////4JmSuRY+CFCKIu6RwHXiSXZDY4Huygv7JVrvzkfRI8zdAAAAmR+LCAAAAAAAAP9b85aBtbiIQTGjNKU4P08vOT+vOD8nVc83PyU1x6OyILUoJzMv2y+/JJUBAhiZGBgqihhk0NSjKDWzXb3RdlLBUSYGJk8GtpzUvPSSDB8G5tKinBI…

---

## [Single Event Not Parsed Correctly](https://discuss.elastic.co/t/single-event-not-parsed-correctly/117505)

<div class="topic-metadata">

**Author:** [@cappy](https://discuss.elastic.co/u/cappy)\
**Replies:** 10\
**Last updated:** [February 5, 2018, 1:46pm UTC](https://discuss.elastic.co/t/single-event-not-parsed-correctly/117505 "2018-02-05T13:46:38Z")

</div>

Hello, I currently have FB 5.6.5 running and performing multiline log matching for json with something like the following in filebeat.yml: multiline.pattern: '^{' multiline.negate: true multiline.match: after This mat…

---

## [Return the value of aggs in match query](https://discuss.elastic.co/t/return-the-value-of-aggs-in-match-query/176360)

<div class="topic-metadata">

**Author:** [@bhushan](https://discuss.elastic.co/u/bhushan)\
**Replies:** 14\
**Last updated:** [April 16, 2019, 4:24pm UTC](https://discuss.elastic.co/t/return-the-value-of-aggs-in-match-query/176360 "2019-04-16T16:24:33Z")

</div>

Hi, I want to return the value of aggs max in Match query. for eg. { "aggs" : { "max\_id" : { "max" : { "field" : "id" } } } } Value of above needs to be return in { "query": {"match": {"id": \<max\_id\>}} } Or i…

---

## [Cluster, 3 severs (with 3 nodes) and I need coordinating node](https://discuss.elastic.co/t/cluster-3-severs-with-3-nodes-and-i-need-coordinating-node/118079)

<div class="topic-metadata">

**Author:** [@Juanps2](https://discuss.elastic.co/u/Juanps2)\
**Replies:** 9\
**Last updated:** [February 8, 2018, 8:50am UTC](https://discuss.elastic.co/t/cluster-3-severs-with-3-nodes-and-i-need-coordinating-node/118079 "2018-02-08T08:50:10Z")

</div>

Hello. I'm preparing the production platform and I have some mistakes. Now I have available 3 servers working with 3 ES nodes, but I need a coordinating node due a load balancing. I prefer coordinating node than DNS rou…

---

## [Tiny issues with the .deb package on Ubuntu 12.04 LTS](https://discuss.elastic.co/t/tiny-issues-with-the-deb-package-on-ubuntu-12-04-lts/7559)

<div class="topic-metadata">

**Author:** [@Radu\_Gheorghe1](https://discuss.elastic.co/u/Radu_Gheorghe1)\
**Replies:** 20\
**Last updated:** [October 23, 2013, 12:18am UTC](https://discuss.elastic.co/t/tiny-issues-with-the-deb-package-on-ubuntu-12-04-lts/7559 "2013-10-23T00:18:23Z")

</div>

Hi, We currently use Elasticsearch 0.19.3 from the .deb package on the website. I would like to report a few niggles we got when turning to Ubuntu 12.04: 1. Elasticsearch doesn't work out-of-the box anymore: # /…

---

## [In filebeat processing json log files that does not need processing](https://discuss.elastic.co/t/in-filebeat-processing-json-log-files-that-does-not-need-processing/344146)

<div class="topic-metadata">

**Author:** [@gred7](https://discuss.elastic.co/u/gred7)\
**Replies:** 10\
**Last updated:** [September 30, 2023, 1:28pm UTC](https://discuss.elastic.co/t/in-filebeat-processing-json-log-files-that-does-not-need-processing/344146 "2023-09-30T13:28:49Z")

</div>

Hello Everybody, Hope somebody could answer my question. I have an app, that writes logs in json format, that are ALREADY prepared as message for elastic. one example of what I have in logs: {"@timestamp":"2023-09-2…

---

## [Elasticsearch 4.10.4" with kibanna fail](https://discuss.elastic.co/t/elasticsearch-4-10-4-with-kibanna-fail/65971)

<div class="topic-metadata">

**Author:** [@kinomakino](https://discuss.elastic.co/u/kinomakino)\
**Replies:** 11\
**Last updated:** [November 15, 2016, 9:56am UTC](https://discuss.elastic.co/t/elasticsearch-4-10-4-with-kibanna-fail/65971 "2016-11-15T09:56:43Z")

</div>

First of all thank you. I have an ES 4.10.4 running fine. I had a kibana 4.1.11 running and suddenly it stays in "starting". After much searching, I opted to try a new kibana on another server. When putting the address o…

---

## [Output filter, Elasticsearch & cloud instance](https://discuss.elastic.co/t/output-filter-elasticsearch-cloud-instance/310376)

<div class="topic-metadata">

**Author:** [@Mark\_Rodman](https://discuss.elastic.co/u/Mark_Rodman)\
**Replies:** 24\
**Last updated:** [July 23, 2022, 9:51am UTC](https://discuss.elastic.co/t/output-filter-elasticsearch-cloud-instance/310376 "2022-07-23T09:51:15Z")

</div>

Hi, Hope you are all well. I've been building a new Logstash pipeline and testing against a local instance of Elasticsearch on my network which is running fine without any security. The process has been pretty straigh…

---

## [Can you denormalize kafka topics in logstash before indexing to ES](https://discuss.elastic.co/t/can-you-denormalize-kafka-topics-in-logstash-before-indexing-to-es/186856)

<div class="topic-metadata">

**Author:** [@Aymen\_Ben\_Moussa](https://discuss.elastic.co/u/Aymen_Ben_Moussa)\
**Replies:** 12\
**Last updated:** [July 6, 2019, 8:03pm UTC](https://discuss.elastic.co/t/can-you-denormalize-kafka-topics-in-logstash-before-indexing-to-es/186856 "2019-07-06T20:03:54Z")

</div>

My question is if logstash is capable of denormalizing kafka topics

---

## [Cannot seem to get ingest pipelines to work, please help!](https://discuss.elastic.co/t/cannot-seem-to-get-ingest-pipelines-to-work-please-help/264259)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 11\
**Last updated:** [March 9, 2021, 3:16am UTC](https://discuss.elastic.co/t/cannot-seem-to-get-ingest-pipelines-to-work-please-help/264259 "2021-03-09T03:16:25Z")

</div>

I am trying to understand ES ingest pipelines and Filebeat. I am using version 7.11 ES and K and FB in docker containers. If I do not add the pipeline, I get the log lines in ES/K from FB, but they are not formatted …

---

## [IllegalAccessError: Module access](https://discuss.elastic.co/t/illegalaccesserror-module-access/249452)

<div class="topic-metadata">

**Author:** [@joames](https://discuss.elastic.co/u/joames)\
**Replies:** 13\
**Last updated:** [November 11, 2020, 6:29am UTC](https://discuss.elastic.co/t/illegalaccesserror-module-access/249452 "2020-11-11T06:29:36Z")

</div>

Hi, I tried upgrading our Java APM agent to version 1.18, but are getting a ton of error messages when booting up. The application is running in docker using image adoptopenjdk/openjdk11-openj9:jdk-11.0.1.13-alpine-sli…

---

## [Help with correct big config file characterization and output to multiple index's](https://discuss.elastic.co/t/help-with-correct-big-config-file-characterization-and-output-to-multiple-indexs/87366)

<div class="topic-metadata">

**Author:** [@sahar\_q](https://discuss.elastic.co/u/sahar_q)\
**Replies:** 13\
**Last updated:** [May 30, 2017, 7:00am UTC](https://discuss.elastic.co/t/help-with-correct-big-config-file-characterization-and-output-to-multiple-indexs/87366 "2017-05-30T07:00:39Z")

</div>

Hi guys, I want to know what is the best way to maintain a big configuration file. My plan is to get Different artifacts data through one port, apply filters to every artifact depending on what artifact it is and out…

---

## [How to drop spans with duration below 5ms](https://discuss.elastic.co/t/how-to-drop-spans-with-duration-below-5ms/186617)

<div class="topic-metadata">

**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\
**Replies:** 15\
**Last updated:** [June 28, 2019, 9:32am UTC](https://discuss.elastic.co/t/how-to-drop-spans-with-duration-below-5ms/186617 "2019-06-28T09:32:11Z")

</div>

Kibana version: 6.8 Elasticsearch version: 6.8 APM Server version: 6.8 APM Agent language and version: JavaAgent 1.7 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and ver…

---

## [Marvel shows empty dashboard](https://discuss.elastic.co/t/marvel-shows-empty-dashboard/15498)

<div class="topic-metadata">

**Author:** [@Ron\_Sher](https://discuss.elastic.co/u/Ron_Sher)\
**Replies:** 24\
**Last updated:** [February 28, 2014, 4:15pm UTC](https://discuss.elastic.co/t/marvel-shows-empty-dashboard/15498 "2014-02-28T16:15:39Z")

</div>

Hey, Just tried installing the plugin. Installation was easy (bin/plugin -i elasticsearch/marvel/latest followed by a restart) by then the plugin shows an empty dashboard. Am I missing something?\\ Thanks, Ro…

---

## [Storage on elastic search](https://discuss.elastic.co/t/storage-on-elastic-search/321996)

<div class="topic-metadata">

**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\
**Replies:** 13\
**Last updated:** [December 26, 2022, 11:44pm UTC](https://discuss.elastic.co/t/storage-on-elastic-search/321996 "2022-12-26T23:44:30Z")

</div>

Hi, I am trying to build a benchmark on how much storage likely needed for Elasticsearch, below are some stats whenever I sent new records from logstash to Elasticsearch. I checked in Elasticsearch after every interval,…

---

## [Problems while uploading Geojson data in Kibana Maps (Elastic Cloud)](https://discuss.elastic.co/t/problems-while-uploading-geojson-data-in-kibana-maps-elastic-cloud/228936)

<div class="topic-metadata">

**Author:** [@Pato\_Loza](https://discuss.elastic.co/u/Pato_Loza)\
**Replies:** 13\
**Last updated:** [April 22, 2020, 3:02pm UTC](https://discuss.elastic.co/t/problems-while-uploading-geojson-data-in-kibana-maps-elastic-cloud/228936 "2020-04-22T15:02:59Z")

</div>

Hi! First of all, thanks to anyone who can help me with this. I had some problems trying to add some GEOJSON data in Kibana Maps. The problems is that when I try to upload a file it keeps charging and charging but not…

---

## [Sizing for udp/tcp (syslog type)](https://discuss.elastic.co/t/sizing-for-udp-tcp-syslog-type/44528)

<div class="topic-metadata">

**Author:** [@miko370](https://discuss.elastic.co/u/miko370)\
**Replies:** 10\
**Last updated:** [March 23, 2016, 7:47am UTC](https://discuss.elastic.co/t/sizing-for-udp-tcp-syslog-type/44528 "2016-03-23T07:47:28Z")

</div>

Hi. Does anyone have any sizing knowledge and experience using tcp/udp input plugin for syslog messages?

---

## [How to change the data type values](https://discuss.elastic.co/t/how-to-change-the-data-type-values/130396)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 18\
**Last updated:** [May 3, 2018, 10:22am UTC](https://discuss.elastic.co/t/how-to-change-the-data-type-values/130396 "2018-05-03T10:22:24Z")

</div>

i have data like this is json file {\\"dataType\\":\\"System.Single\\",\\"host\\":\\"ssss\\",\\"name\\":\\"123/xxx\\",\\"123234\\":\\"333\\",\\"time\\":\\"2018/5/3 7:49:35\\",\\"value\\":\\"116.3047\\"} question: if the dataType is System.Si…

---

## [Async Background Search with .NET NEST Client](https://discuss.elastic.co/t/async-background-search-with-net-nest-client/323271)

<div class="topic-metadata">

**Author:** [@xef](https://discuss.elastic.co/u/xef)\
**Replies:** 12\
**Last updated:** [January 23, 2023, 6:25pm UTC](https://discuss.elastic.co/t/async-background-search-with-net-nest-client/323271 "2023-01-23T18:25:03Z")

</div>

How does one use the Elasticsearch Async Background search facility using the NEST Library. We cannot find any documentation on the syntax. Any help would be appreciated.

---

## [Missing "Upload Elastic Stack Pack" Option](https://discuss.elastic.co/t/missing-upload-elastic-stack-pack-option/89094)

<div class="topic-metadata">

**Author:** [@John\_Zimmerman](https://discuss.elastic.co/u/John_Zimmerman)\
**Replies:** 12\
**Last updated:** [June 13, 2017, 8:49pm UTC](https://discuss.elastic.co/t/missing-upload-elastic-stack-pack-option/89094 "2017-06-13T20:49:17Z")

</div>

Running ECE 1.0.0 on trial license. Trying to follow the directions to update to 5.4.1 using the cloud UI here: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-manage-elastic-stack.html#ece-manage-elastic-s…

---

## [Performance issues after upgrading ES and Nest to 5.4 from 1.7](https://discuss.elastic.co/t/performance-issues-after-upgrading-es-and-nest-to-5-4-from-1-7/89692)

<div class="topic-metadata">

**Author:** [@Barry\_Woods](https://discuss.elastic.co/u/Barry_Woods)\
**Replies:** 9\
**Last updated:** [June 30, 2017, 4:42am UTC](https://discuss.elastic.co/t/performance-issues-after-upgrading-es-and-nest-to-5-4-from-1-7/89692 "2017-06-30T04:42:29Z")

</div>

We have just upgraded from 1.7 to 5.4.1 and since the upgrade, we are seeing quite a big performance hit on some pages. I've been trying to diagnose the issue but I am coming up short currently and would like some help t…

---

## [FIlebeat Output Configuration Error](https://discuss.elastic.co/t/filebeat-output-configuration-error/366175)

<div class="topic-metadata">

**Author:** [@dfir](https://discuss.elastic.co/u/dfir)\
**Replies:** 26\
**Last updated:** [September 9, 2024, 10:51pm UTC](https://discuss.elastic.co/t/filebeat-output-configuration-error/366175 "2024-09-09T22:51:11Z")

</div>

HI All. I am using Elastic/Kibana/Filebeat version 8.15.1. I am setting up the filebeat modules.d\\system.yml file and trying to run it to ingest logs in a directory, but I am getting an error: "Exiting: no outputs are…

---

## [Elasticsearch | Very slow search](https://discuss.elastic.co/t/elasticsearch-very-slow-search/170368)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 14\
**Last updated:** [March 5, 2019, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-very-slow-search/170368 "2019-03-05T09:20:38Z")

</div>

Hi, I am benchmarking search speed using different parameters. One specific parameter used is copy\_to implementation. Scenario 1. Number of Fields : 10000 Documents indexed : 500 Indices : 10 Search on Indices : 10 …

[Previous page](https://discuss.elastic.co/top.md?page=168&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=170&per_page=50&period=all)
