# Top **URL:** https://discuss.elastic.co/top.md?page=174&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 175 --- ## [Kibana server is not ready yet and curl: (52) Empty reply from server](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-and-curl-52-empty-reply-from-server/358047)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 12\ **Last updated:** [April 30, 2024, 12:04pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-and-curl-52-empty-reply-from-server/358047 "2024-04-30T12:04:11Z")
Hello Im getting these two error messages Kibana server is not ready yet This one appears when I am going to the Kibana page. I checked that all services are up and running so that is OK. I ran a curl -XGET 'localho… --- ## [Unable to install elasticsearch in RHEL 7 due to polkit error](https://discuss.elastic.co/t/unable-to-install-elasticsearch-in-rhel-7-due-to-polkit-error/249845)
**Author:** [@aknraj](https://discuss.elastic.co/u/aknraj)\ **Replies:** 12\ **Last updated:** [October 6, 2020, 4:26pm UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-in-rhel-7-due-to-polkit-error/249845 "2020-10-06T16:26:21Z")
Trying to install elasticsearch in RHEL 7, but it has been failed with polkit error (please refer below for the detailed error) - I tried to reinstall and also with full permissions on the file as recommended in other to… --- ## [Data frame analytics on scripted fields ML possible?](https://discuss.elastic.co/t/data-frame-analytics-on-scripted-fields-ml-possible/285504)
**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\ **Replies:** 17\ **Last updated:** [October 25, 2021, 5:17pm UTC](https://discuss.elastic.co/t/data-frame-analytics-on-scripted-fields-ml-possible/285504 "2021-10-25T17:17:23Z")
I am currently playing around with Machine learning on Kibana and I successfully learned how to use Anomaly detection to use scripted fields by editing the JSON. Now I want to use data frame analytics specifically curre… --- ## [\_jsonparsefailure with filebeat and logstash](https://discuss.elastic.co/t/jsonparsefailure-with-filebeat-and-logstash/322356)
**Author:** [@Lynow](https://discuss.elastic.co/u/Lynow)\ **Replies:** 10\ **Last updated:** [January 3, 2023, 1:43pm UTC](https://discuss.elastic.co/t/jsonparsefailure-with-filebeat-and-logstash/322356 "2023-01-03T13:43:08Z")
Hello, I use Filebeat to fetch data from Wazuh (HIDS) and send alerts to Logstash. Then Logstash sends its data to ES and everything usually works fine. However, sometimes after being away for a few days, I look on Ki… --- ## [Problems with winlogbeat](https://discuss.elastic.co/t/problems-with-winlogbeat/119436)
**Author:** [@gaudi71240](https://discuss.elastic.co/u/gaudi71240)\ **Replies:** 10\ **Last updated:** [February 12, 2018, 10:46am UTC](https://discuss.elastic.co/t/problems-with-winlogbeat/119436 "2018-02-12T10:46:10Z")
Hello i have install ELK Stack in version 6.2 with centos when i want to send the logs of my windows server it goes this way at logstash service logs : 2018-02-09T10:20:40+01:00 ERR Failed to publish events: client is… --- ## [Elasticsearch 2.3.3 encountered outofmemory](https://discuss.elastic.co/t/elasticsearch-2-3-3-encountered-outofmemory/56255)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 10\ **Last updated:** [July 25, 2016, 8:55am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-3-encountered-outofmemory/56255 "2016-07-25T08:55:51Z")
Hi, we run 4 elk nodes in cluter using jre 1.8.0.77,logstash 2.3.2,elasticsearch 2.3.2 ,kibana 4.5.1.and there are totally about more than three hundred client server transfering linux log,windows event log and iis log… --- ## [Query side synonyms and boosts](https://discuss.elastic.co/t/query-side-synonyms-and-boosts/7624)
**Author:** [@my3sons](https://discuss.elastic.co/u/my3sons)\ **Replies:** 10\ **Last updated:** [June 7, 2016, 4:59am UTC](https://discuss.elastic.co/t/query-side-synonyms-and-boosts/7624 "2016-06-07T04:59:09Z")
Hello, While doing some testing with query side synonyms and boosts, I am noticing that the boosts do not seem to be honored for synonym derived keywords. For example, if I have defined a boost when the keyword is "… --- ## [Winlogbeats not exporitng event.id or xml data](https://discuss.elastic.co/t/winlogbeats-not-exporitng-event-id-or-xml-data/135051)
**Author:** [@valbizures](https://discuss.elastic.co/u/valbizures)\ **Replies:** 9\ **Last updated:** [June 8, 2018, 10:25pm UTC](https://discuss.elastic.co/t/winlogbeats-not-exporitng-event-id-or-xml-data/135051 "2018-06-08T22:25:25Z")
I have events from a server being sent to logstash, but no eventids or xml data is being passed. Below are examples of the winlogbeats config and the logs I'm getting. It's sending all events, but information I would ne… --- ## [CaptureTransaction not showing all spans in webflux project](https://discuss.elastic.co/t/capturetransaction-not-showing-all-spans-in-webflux-project/314279)
**Author:** [@gfan8w](https://discuss.elastic.co/u/gfan8w)\ **Replies:** 11\ **Last updated:** [September 20, 2022, 3:23am UTC](https://discuss.elastic.co/t/capturetransaction-not-showing-all-spans-in-webflux-project/314279 "2022-09-20T03:23:23Z")
I have a sample application, it is a WebFlux SpringBoot application (SpringBoot version=2.5.3, WebFlux version=5.3.9) embedded an Elastic APM agent (version=1.28.0). Start the Spring WebFlux app: mvn spring-boot:run -Ds… --- ## [Unable to upload file using EuiFilePicker](https://discuss.elastic.co/t/unable-to-upload-file-using-euifilepicker/271955)
**Author:** [@praveer](https://discuss.elastic.co/u/praveer)\ **Replies:** 11\ **Last updated:** [May 24, 2021, 2:34pm UTC](https://discuss.elastic.co/t/unable-to-upload-file-using-euifilepicker/271955 "2021-05-24T14:34:28Z")
Hi Team, I have created a custom plugin and i have a requirement to upload file to server. I am trying to do it using EuiFilePicker. API which I am using to upload file is accepting data in form-data format. Below is my… --- ## [This site is inaccsessible kibana](https://discuss.elastic.co/t/this-site-is-inaccsessible-kibana/303163)
**Author:** [@Abderraouf\_ZAYEN](https://discuss.elastic.co/u/Abderraouf_ZAYEN)\ **Replies:** 10\ **Last updated:** [May 12, 2022, 11:02am UTC](https://discuss.elastic.co/t/this-site-is-inaccsessible-kibana/303163 "2022-05-12T11:02:29Z")
Hi, systemctl status kibana & systemctl status Elasticsearch & systemctl status logstash & systemctl status filebeat all active (running) . my problem in browser localhost:9200 it works but localhost:5601 didn't work (… --- ## [Synonym Token Filter questions](https://discuss.elastic.co/t/synonym-token-filter-questions/196705)
**Author:** [@jjarthur](https://discuss.elastic.co/u/jjarthur)\ **Replies:** 9\ **Last updated:** [August 29, 2019, 5:04am UTC](https://discuss.elastic.co/t/synonym-token-filter-questions/196705 "2019-08-29T05:04:43Z")
I am attempting to implement synonyms into my search and ran into a couple of questions. Firstly, I have a synonyms.txt file with the following mappings: foo, bar, baz When "baz" is queried in elasticsearch, it corr… --- ## [MergeException due to illegal state in PerFieldPostingsFormat es 6.3.0](https://discuss.elastic.co/t/mergeexception-due-to-illegal-state-in-perfieldpostingsformat-es-6-3-0/138650)
**Author:** [@bdelbosc](https://discuss.elastic.co/u/bdelbosc)\ **Replies:** 9\ **Last updated:** [July 11, 2018, 12:06pm UTC](https://discuss.elastic.co/t/mergeexception-due-to-illegal-state-in-perfieldpostingsformat-es-6-3-0/138650 "2018-07-11T12:06:44Z")
Greetings, I have a complex integration test that is failing systematically since we upgraded the Elasticsearch cluster to 6.3.0 (Lucene 7.3.1). The exact same test using an Elasticsearch cluster in version 6.2.4 (Luce… --- ## [Locale automatically being set in date filter](https://discuss.elastic.co/t/locale-automatically-being-set-in-date-filter/41050)
**Author:** [@punit\_naik1](https://discuss.elastic.co/u/punit_naik1)\ **Replies:** 9\ **Last updated:** [February 5, 2016, 12:43pm UTC](https://discuss.elastic.co/t/locale-automatically-being-set-in-date-filter/41050 "2016-02-05T12:43:53Z")
I have a timestamp in my log and its already in the timezone that I want. But when I apply a date filter to it to convert it into a timestamp, it automatically is converted into my local time which I don't want because i… --- ## [Filebeat 6.3.2 syslogs are not logging to elastcisearch](https://discuss.elastic.co/t/filebeat-6-3-2-syslogs-are-not-logging-to-elastcisearch/149490)
**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\ **Replies:** 14\ **Last updated:** [October 2, 2018, 8:34pm UTC](https://discuss.elastic.co/t/filebeat-6-3-2-syslogs-are-not-logging-to-elastcisearch/149490 "2018-10-02T20:34:55Z")
System module is enabled, but syslogs are logging with 7hrs delay. Adjusted var.convert\_timezone: true in /etc/filebeat/modules.d/system.yml, still no luck. Can someone take a look into it. /etc/filebeat/modules.d/syste… --- ## [Kibana fails to start](https://discuss.elastic.co/t/kibana-fails-to-start/364771)
**Author:** [@UMUT\_CAN\_ARGUN](https://discuss.elastic.co/u/UMUT_CAN_ARGUN)\ **Replies:** 9\ **Last updated:** [August 15, 2024, 12:20pm UTC](https://discuss.elastic.co/t/kibana-fails-to-start/364771 "2024-08-15T12:20:56Z")
The cmd stucks at this stage: Kibana is currently running with legacy OpenSSL providers enabled! For details and instructions on how to disable see https://www.elastic.co/guide/en/kibana/8.14/production.html#openssl-leg… --- ## [Help with doing "Join"](https://discuss.elastic.co/t/help-with-doing-join/99524)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 11\ **Last updated:** [September 12, 2017, 5:47am UTC](https://discuss.elastic.co/t/help-with-doing-join/99524 "2017-09-12T05:47:23Z")
Hi, I saw the ES explenation to do “JOIN” in ES, but I am confused and I think I have a complicated case, so will be happy for more help. First I will lay out my problem: I have about 5 logs that represent 5 stages in… --- ## [How does loadbalancing and "talking to a cluster" work?](https://discuss.elastic.co/t/how-does-loadbalancing-and-talking-to-a-cluster-work/237253)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 14\ **Last updated:** [June 16, 2020, 10:48pm UTC](https://discuss.elastic.co/t/how-does-loadbalancing-and-talking-to-a-cluster-work/237253 "2020-06-16T22:48:31Z")
Hi, I have learned a lot about clusteres in the past 2 weeks but one thing which I dont get the hang of is how to talk to the cluster. What i mean is that I have a Redis Database and I would like to ingest data into a H… --- ## [TIme series Visual builder : How to do Math calculations betweent the output of two series?](https://discuss.elastic.co/t/time-series-visual-builder-how-to-do-math-calculations-betweent-the-output-of-two-series/264414)
**Author:** [@Harpreet\_Singh](https://discuss.elastic.co/u/Harpreet_Singh)\ **Replies:** 9\ **Last updated:** [February 22, 2021, 11:14am UTC](https://discuss.elastic.co/t/time-series-visual-builder-how-to-do-math-calculations-betweent-the-output-of-two-series/264414 "2021-02-22T11:14:46Z")
Hi Team, I am using Time series visual builder: Top N Chart, i am in a scenario where i am doing Math calculation in 5 different series. See below Screenshot: Pic 1: Final Chart Pic 2: Different time series i have cho… --- ## [Do I have to worry about an MVEL attack?](https://discuss.elastic.co/t/do-i-have-to-worry-about-an-mvel-attack/10247)
**Author:** [@chris\_harrington](https://discuss.elastic.co/u/chris_harrington)\ **Replies:** 9\ **Last updated:** [January 8, 2013, 4:28pm UTC](https://discuss.elastic.co/t/do-i-have-to-worry-about-an-mvel-attack/10247 "2013-01-08T16:28:26Z")
If I take in a string variable from a client that will be inserted (or used for updating) a field in ES using MVEL, is it possible for someone to attack my data with some form of escaped String? eg (I hope my exam… --- ## [Pinned query limit of 100 configurable?](https://discuss.elastic.co/t/pinned-query-limit-of-100-configurable/239667)
**Author:** [@Karl\_Kevilus](https://discuss.elastic.co/u/Karl_Kevilus)\ **Replies:** 12\ **Last updated:** [July 2, 2020, 8:11pm UTC](https://discuss.elastic.co/t/pinned-query-limit-of-100-configurable/239667 "2020-07-02T20:11:23Z")
How can I configure the maximum # of items returned in a 'pinned query'? I'm getting the following error: "caused\_by": { "type": "x\_content\_parse\_exception", "reason": "Failed to build \[pinned\] after l… --- ## [Pulled OpenDistro ELasticsearch image but it is not running from inside a docker](https://discuss.elastic.co/t/pulled-opendistro-elasticsearch-image-but-it-is-not-running-from-inside-a-docker/232863)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 12\ **Last updated:** [May 20, 2020, 8:51am UTC](https://discuss.elastic.co/t/pulled-opendistro-elasticsearch-image-but-it-is-not-running-from-inside-a-docker/232863 "2020-05-20T08:51:16Z")
I am trying to test how open distro's elasticsearch works when I pull its image and run it. But when I do the curl command from inside the conatiner with container's ip, ELasticsearch isnt reachable. Any idea what to do… --- ## [Unable to upgrade Fleet Server past 8.5.3](https://discuss.elastic.co/t/unable-to-upgrade-fleet-server-past-8-5-3/344941)
**Author:** [@Vestyn](https://discuss.elastic.co/u/Vestyn)\ **Replies:** 16\ **Last updated:** [November 15, 2023, 8:43pm UTC](https://discuss.elastic.co/t/unable-to-upgrade-fleet-server-past-8-5-3/344941 "2023-11-15T20:43:49Z")
I've been stuck trying to upgrade our Fleet Server past version 8.5.3. Every time I push the update manually (via curl) or through Kibana, I get some random errors (see below) and it reverts back to 8.5.3. For clarificat… --- ## [Logstash error after configuring ssl in the logstash.conf](https://discuss.elastic.co/t/logstash-error-after-configuring-ssl-in-the-logstash-conf/242262)
**Author:** [@Matish\_Bhuyan](https://discuss.elastic.co/u/Matish_Bhuyan)\ **Replies:** 9\ **Last updated:** [July 23, 2020, 7:39pm UTC](https://discuss.elastic.co/t/logstash-error-after-configuring-ssl-in-the-logstash-conf/242262 "2020-07-23T19:39:59Z")
Hi All , I have configured my elk stack to use ssl settings and after the change in Kibana and elasticsearch i have updated the logstash configuration , I am able to connect to my elasticsearch cluster from logstash as… --- ## [Could not locate that index-pattern-field (id: iis.access.response\_code)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-iis-access-response-code/162750)
**Author:** [@hoanguyen195](https://discuss.elastic.co/u/hoanguyen195)\ **Replies:** 15\ **Last updated:** [January 9, 2019, 6:31am UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-iis-access-response-code/162750 "2019-01-09T06:31:53Z")
Hi I have the error when setup dashboard Filebeat And i run GET \_cat/indices here my discover --- ## [X-pack Single metric job](https://discuss.elastic.co/t/x-pack-single-metric-job/166669)
**Author:** [@Sanriya\_Krimzn](https://discuss.elastic.co/u/Sanriya_Krimzn)\ **Replies:** 18\ **Last updated:** [March 20, 2019, 9:52am UTC](https://discuss.elastic.co/t/x-pack-single-metric-job/166669 "2019-03-20T09:52:23Z")
Hi, Anyone there? Can anyone explain whats the math behind calculation of actual value which is responsible for anomaly score calculation? I read the theory but I need to understand math/algorith behind it. Because I… --- ## [Two Logstash Instances - Windows](https://discuss.elastic.co/t/two-logstash-instances-windows/50724)
**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\ **Replies:** 9\ **Last updated:** [May 28, 2016, 6:13am UTC](https://discuss.elastic.co/t/two-logstash-instances-windows/50724 "2016-05-28T06:13:58Z")
Hi, I'm trying to run two instances of Logstash 1.5.0 on W2012 server. Getting:- Error: Exception thrown by the agent : java.rmi.server.ExportException: Port already in use: 9010; nested exception is: java.net.… --- ## [What is the largest size that one node can hold?](https://discuss.elastic.co/t/what-is-the-largest-size-that-one-node-can-hold/370851)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 38\ **Last updated:** [November 25, 2024, 6:05am UTC](https://discuss.elastic.co/t/what-is-the-largest-size-that-one-node-can-hold/370851 "2024-11-25T06:05:04Z")
Hello I have a lot of data and I want to store it in elasticsearch What is the largest size that one node can hold? --- ## [Regarding creating index pattern for .txt log files](https://discuss.elastic.co/t/regarding-creating-index-pattern-for-txt-log-files/175979)
**Author:** [@Kalyan\_MB](https://discuss.elastic.co/u/Kalyan_MB)\ **Replies:** 11\ **Last updated:** [April 10, 2019, 7:00am UTC](https://discuss.elastic.co/t/regarding-creating-index-pattern-for-txt-log-files/175979 "2019-04-10T07:00:58Z")
Hello, i have below requirement to achieve can anyone help me with this? 1.Need to scan performance logs from a directory(client), and parse them to ELK stack(server) create index patterns using lostash.conf file fo… --- ## [Scaling of cardinality sub-aggregation](https://discuss.elastic.co/t/scaling-of-cardinality-sub-aggregation/320264)
**Author:** [@astrodi](https://discuss.elastic.co/u/astrodi)\ **Replies:** 16\ **Last updated:** [January 19, 2023, 7:20am UTC](https://discuss.elastic.co/t/scaling-of-cardinality-sub-aggregation/320264 "2023-01-19T07:20:55Z")
Hello there, as continuation of this discussion thread, what other options are there in Elasticsearch to scale aggregation? I have experimented with: adding client nodes (didn't help for big result-set) playing wit… --- ## [How to speed up query searching on text on an index with 50M+ documents?](https://discuss.elastic.co/t/how-to-speed-up-query-searching-on-text-on-an-index-with-50m-documents/232329)
**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\ **Replies:** 12\ **Last updated:** [June 1, 2020, 10:02pm UTC](https://discuss.elastic.co/t/how-to-speed-up-query-searching-on-text-on-an-index-with-50m-documents/232329 "2020-06-01T22:02:34Z")
Hi everyone. I have an index that has roughly 60 million documents in it with more being added to it daily (about half a million every 2-3 months). The field that will be searched in the index is a text field that can … --- ## [Messages from gelf input not ending-up in ES](https://discuss.elastic.co/t/messages-from-gelf-input-not-ending-up-in-es/156291)
**Author:** [@plex1030](https://discuss.elastic.co/u/plex1030)\ **Replies:** 12\ **Last updated:** [November 14, 2018, 10:17am UTC](https://discuss.elastic.co/t/messages-from-gelf-input-not-ending-up-in-es/156291 "2018-11-14T10:17:02Z")
Hi, I was hoping to use the gelf input plugin to receive messages and put them into ES. This is my config: input { gelf { port =\> 12201 type =\> gelf host =\> "0.0.0.0" } } ... output { file { … --- ## [Line chart and data table in kibana show different numbers](https://discuss.elastic.co/t/line-chart-and-data-table-in-kibana-show-different-numbers/155417)
**Author:** [@ilanas](https://discuss.elastic.co/u/ilanas)\ **Replies:** 13\ **Last updated:** [November 6, 2018, 4:12pm UTC](https://discuss.elastic.co/t/line-chart-and-data-table-in-kibana-show-different-numbers/155417 "2018-11-06T16:12:48Z")
This post is the same as 'Kibana: Data Table and Line Chart have different numbers'. I have the same issue and i don't know how solve this issue. I'm using kibana 6.2.2. Thanks --- ## [Dataparse failure using csv filter](https://discuss.elastic.co/t/dataparse-failure-using-csv-filter/37177)
**Author:** [@RustyWilson](https://discuss.elastic.co/u/RustyWilson)\ **Replies:** 13\ **Last updated:** [December 14, 2015, 10:32pm UTC](https://discuss.elastic.co/t/dataparse-failure-using-csv-filter/37177 "2015-12-14T22:32:54Z")
Thanks in advance. Lots of info to follow... I've been fighting this for quite sometime, and I've been unable to locate any other topics that relate specifically to this problem. First, here's a summary of the issue… --- ## [Curator - DeleteSnapshots - Not fully functional](https://discuss.elastic.co/t/curator-deletesnapshots-not-fully-functional/134710)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 12\ **Last updated:** [June 7, 2018, 9:45pm UTC](https://discuss.elastic.co/t/curator-deletesnapshots-not-fully-functional/134710 "2018-06-07T21:45:32Z")
Environment: Curator 5.5.1, Elastic Search 6.2.1 Trying to use delete\_snapshots actions using curator, but it fails with below error always 2018-06-05 23:26:03,003 DEBUG curator.utils iterate\_filter… --- ## [Erreur d'importation avec logstash sous linux](https://discuss.elastic.co/t/erreur-dimportation-avec-logstash-sous-linux/233427)
**Author:** [@Katia](https://discuss.elastic.co/u/Katia)\ **Replies:** 19\ **Last updated:** [May 28, 2020, 12:37am UTC](https://discuss.elastic.co/t/erreur-dimportation-avec-logstash-sous-linux/233427 "2020-05-28T00:37:04Z")
Bonjour, J'importe mes logs avec logstash vers elasticserach, ça marche bien en local ( sous windows). Mais pas sous linux, j'ai pleins d'erreurs et je ne sais pas pourquoi! j'ai remarqué que le dans fichier.txt , s'… --- ## [Using bucket aggregation on IPs not giving expected results](https://discuss.elastic.co/t/using-bucket-aggregation-on-ips-not-giving-expected-results/100165)
**Author:** [@Sambit\_Kabi](https://discuss.elastic.co/u/Sambit_Kabi)\ **Replies:** 11\ **Last updated:** [September 14, 2017, 2:26pm UTC](https://discuss.elastic.co/t/using-bucket-aggregation-on-ips-not-giving-expected-results/100165 "2017-09-14T14:26:15Z")
\[image\] Hello, I am trying to search for documents containing an IP which falls under a range. As specified in the image the docs have IP 192.168.255.100 which falls under the mask: 192.168.0.0/24. But the result that … --- ## [Logstsh elastic search struggling](https://discuss.elastic.co/t/logstsh-elastic-search-struggling/41807)
**Author:** [@bubu.senapati](https://discuss.elastic.co/u/bubu.senapati)\ **Replies:** 9\ **Last updated:** [March 18, 2016, 6:55am UTC](https://discuss.elastic.co/t/logstsh-elastic-search-struggling/41807 "2016-03-18T06:55:57Z")
Hi Magnus, I have an ELK stack deployed in production. Its just a single node Log files from various servers (webserver and application server) are pumped to Elastic search through logstash. Suddenly with doubled traff… --- ## [Filebeat: failed to parse field \[user\_agent.version\] of type \[date\]](https://discuss.elastic.co/t/filebeat-failed-to-parse-field-user-agent-version-of-type-date/327124)
**Author:** [@mevan](https://discuss.elastic.co/u/mevan)\ **Replies:** 12\ **Last updated:** [March 7, 2023, 2:43pm UTC](https://discuss.elastic.co/t/filebeat-failed-to-parse-field-user-agent-version-of-type-date/327124 "2023-03-07T14:43:29Z")
This begins as a filebeat issue but I think it's now a matter of elasticsearch index. I'm seeing repeated messages like this in our logging. I can see this is related to the nginx module but I'm unsure how to go about f… --- ## [Filebeat dashboards broken for 6.0](https://discuss.elastic.co/t/filebeat-dashboards-broken-for-6-0/112535)
**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\ **Replies:** 12\ **Last updated:** [January 4, 2018, 12:29am UTC](https://discuss.elastic.co/t/filebeat-dashboards-broken-for-6-0/112535 "2018-01-04T00:29:50Z")
Looks like there are several visualizations that need to have the .keyword value appended to them. Is this a known issue? Doesn't look like there's a 6.0 folder yet so that's my guess. --- ## [Percolator throws INTERNAL\_SERVER\_ERROR on irrelevant field](https://discuss.elastic.co/t/percolator-throws-internal-server-error-on-irrelevant-field/55311)
**Author:** [@javierco](https://discuss.elastic.co/u/javierco)\ **Replies:** 11\ **Last updated:** [July 20, 2016, 12:36pm UTC](https://discuss.elastic.co/t/percolator-throws-internal-server-error-on-irrelevant-field/55311 "2016-07-20T12:36:50Z")
Hello, I just upgraded from version 1.4.4 to 2.3.3 and I'm having an issue with the percolator: Before, we used to send the percolator requests using the \_mpercolate endpoint for an existing document as follows: curl… --- ## [\[7.0.1\] New Circuitbreaker - Segment bigger than heap. Should this break?](https://discuss.elastic.co/t/7-0-1-new-circuitbreaker-segment-bigger-than-heap-should-this-break/195455)
**Author:** [@gna](https://discuss.elastic.co/u/gna)\ **Replies:** 9\ **Last updated:** [August 30, 2019, 9:02am UTC](https://discuss.elastic.co/t/7-0-1-new-circuitbreaker-segment-bigger-than-heap-should-this-break/195455 "2019-08-30T09:02:16Z")
Dear developers, I'm wondering how the new circuit breaker is supposed to work in relation to shard size. I see this circuitbreaker in my logs: \[2019-08-15T18:12:09,472\]\[WARN \]\[o.e.i.c.IndicesClusterStateService\] \[mes… --- ## [Logstash Converting Base64 IP to Decimal IP](https://discuss.elastic.co/t/logstash-converting-base64-ip-to-decimal-ip/286153)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 19\ **Last updated:** [October 12, 2021, 3:07pm UTC](https://discuss.elastic.co/t/logstash-converting-base64-ip-to-decimal-ip/286153 "2021-10-12T15:07:49Z")
Hello, I'm trying to convert a base64 IP into a decimal IP. I saw that Logstash Ruby filter plugin can assist with this by parsing the message field, but is there a way to do this for just an IP field? --- ## [Most efficient query for counting](https://discuss.elastic.co/t/most-efficient-query-for-counting/11928)
**Author:** [@David\_MZ](https://discuss.elastic.co/u/David_MZ)\ **Replies:** 9\ **Last updated:** [May 14, 2013, 7:43am UTC](https://discuss.elastic.co/t/most-efficient-query-for-counting/11928 "2013-05-14T07:43:14Z")
I have a 180 million records index, the only queries that I need to do online are counting queries, over ranges and terms, there are no analyzed fields. What is the most efficient query I can use, I have a machine… --- ## [Долгий реиндекс неотсортированных данных](https://discuss.elastic.co/t/topic/286603)
**Author:** [@Aliaksandr](https://discuss.elastic.co/u/Aliaksandr)\ **Replies:** 13\ **Last updated:** [October 15, 2021, 5:35pm UTC](https://discuss.elastic.co/t/topic/286603 "2021-10-15T17:35:22Z")
Добрый день. Имеется около 120 млн объектов, которые нужно проиндексировать. Отправляю объекты на реиндекс предварительно отсортировав (по полю id типа guid), реиндекс занимает около 8 часов. Отправляю эти же объеты н… --- ## [415 error when uploading ndjson to kibana](https://discuss.elastic.co/t/415-error-when-uploading-ndjson-to-kibana/328455)
**Author:** [@amesl](https://discuss.elastic.co/u/amesl)\ **Replies:** 10\ **Last updated:** [March 29, 2023, 3:00pm UTC](https://discuss.elastic.co/t/415-error-when-uploading-ndjson-to-kibana/328455 "2023-03-29T15:00:13Z")
I need to upload an ndjson dashboard file to the kibana endpoint in Java. The below command is successful with the ndjson files: curl -X POST api/saved\_objects/\_import?overwrite=true -H "kbn-xsrf: true" --form file=@fil… --- ## [Delete all mappings](https://discuss.elastic.co/t/delete-all-mappings/57455)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 10\ **Last updated:** [August 8, 2016, 8:44pm UTC](https://discuss.elastic.co/t/delete-all-mappings/57455 "2016-08-08T20:44:05Z")
Hello, How can I delete all mapping with type name "accessLog" and "someField" has type "string" under that mapping in whole ES data? br, Sunil --- ## [Issues with starting elasticsearch](https://discuss.elastic.co/t/issues-with-starting-elasticsearch/223913)
**Author:** [@ankitagarwal10k](https://discuss.elastic.co/u/ankitagarwal10k)\ **Replies:** 14\ **Last updated:** [March 17, 2020, 12:30pm UTC](https://discuss.elastic.co/t/issues-with-starting-elasticsearch/223913 "2020-03-17T12:30:57Z")
When I am trying to start the elasticsearch, i am getting the below logs: \[2020-03-17T16:41:33,633\]\[WARN \]\[i.n.u.i.MacAddressUtil \] \[elasticsearch-node-1\] Failed to find a usable hardware address from the network int… --- ## [How Set Cluster Name for HighLevel Rest Client](https://discuss.elastic.co/t/how-set-cluster-name-for-highlevel-rest-client/284794)
**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\ **Replies:** 11\ **Last updated:** [September 22, 2021, 9:03am UTC](https://discuss.elastic.co/t/how-set-cluster-name-for-highlevel-rest-client/284794 "2021-09-22T09:03:41Z")
Hi , I am using 7.3.2 version of Elasticsearch ,here I am using HighLevel Rest Client , here how can I set the clustername for which I have changed the default "Elasticsearch" . 1.Do I need to change the cluster Name … --- ## [Mysql database monitoring](https://discuss.elastic.co/t/mysql-database-monitoring/266761)
**Author:** [@jonsacri](https://discuss.elastic.co/u/jonsacri)\ **Replies:** 13\ **Last updated:** [March 26, 2021, 9:54am UTC](https://discuss.elastic.co/t/mysql-database-monitoring/266761 "2021-03-26T09:54:15Z")
colleagues to be able to monitor a database which are the permissions that the user must have. and which table is the one that should have these permissions in my SQL [Previous page](https://discuss.elastic.co/top.md?page=173&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=175&per_page=50&period=all)