# Top

**URL:** https://discuss.elastic.co/top.md?page=190&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 191

---

## [Another Logstash Json Filter](https://discuss.elastic.co/t/another-logstash-json-filter/176586)

<div class="topic-metadata">

**Author:** [@Mrde](https://discuss.elastic.co/u/Mrde)\
**Replies:** 9\
**Last updated:** [April 16, 2019, 2:39pm UTC](https://discuss.elastic.co/t/another-logstash-json-filter/176586 "2019-04-16T14:39:58Z")

</div>

Hello, Sorry to add another topic on this subject but even by reading many posts about this, i didn't succeed to solve my issue : Time to learn from community :slight\_smile: Here is an exemple of json input that i don'…

---

## [Logstash with snmp does not run for multiple 'GET' requests](https://discuss.elastic.co/t/logstash-with-snmp-does-not-run-for-multiple-get-requests/284300)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 10\
**Last updated:** [September 16, 2021, 7:42pm UTC](https://discuss.elastic.co/t/logstash-with-snmp-does-not-run-for-multiple-get-requests/284300 "2021-09-16T19:42:53Z")

</div>

Good morning everyone, I have a problem when running my configuration file in logstash, it does not show me the metrics that I am requesting with the GET method, I've been doing some tests and I realized that when I try…

---

## [Filebeat cannot create custom index - even when ilm is disabled](https://discuss.elastic.co/t/filebeat-cannot-create-custom-index-even-when-ilm-is-disabled/317688)

<div class="topic-metadata">

**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\
**Replies:** 14\
**Last updated:** [November 2, 2022, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-cannot-create-custom-index-even-when-ilm-is-disabled/317688 "2022-11-02T12:46:17Z")

</div>

Hi Team, I would like to ask for help as I cannot create custom index even when setup.ilm.enabled: is set to false. Below is my filebeat config. Thanks. setup.ilm.enabled: false setup.template.enabled: true setup.te…

---

## [Java API - Not able to create more than 309 indices](https://discuss.elastic.co/t/java-api-not-able-to-create-more-than-309-indices/92778)

<div class="topic-metadata">

**Author:** [@Phili](https://discuss.elastic.co/u/Phili)\
**Replies:** 12\
**Last updated:** [July 13, 2017, 10:46am UTC](https://discuss.elastic.co/t/java-api-not-able-to-create-more-than-309-indices/92778 "2017-07-13T10:46:11Z")

</div>

I am experimenting with many indices being created on a (currently) single node cluster. I have a simple Junit Test that creates indices (with different names of course) inside a for-loop. CreateIndexResponse cr = th…

---

## [Help reindexing to new index](https://discuss.elastic.co/t/help-reindexing-to-new-index/259932)

<div class="topic-metadata">

**Author:** [@jtillman2020](https://discuss.elastic.co/u/jtillman2020)\
**Replies:** 9\
**Last updated:** [December 31, 2020, 9:48pm UTC](https://discuss.elastic.co/t/help-reindexing-to-new-index/259932 "2020-12-31T21:48:54Z")

</div>

I have a logstash .conf file whos outputs originally look like this: if "PAN-OS\_config" in \[tags\] { elasticsearch { index =\> "config" hosts =\> \["localhost:9200"\] } This created indexes in Elasti…

---

## [APM agent telling jps is not installed, though it is](https://discuss.elastic.co/t/apm-agent-telling-jps-is-not-installed-though-it-is/245891)

<div class="topic-metadata">

**Author:** [@sbienert](https://discuss.elastic.co/u/sbienert)\
**Replies:** 9\
**Last updated:** [September 7, 2020, 7:50am UTC](https://discuss.elastic.co/t/apm-agent-telling-jps-is-not-installed-though-it-is/245891 "2020-09-07T07:50:13Z")

</div>

Hello, I am trying to run the APM agent 1.17.0-standalone.jar on an Ubuntu 16.04.7 LTS machine with OpenJDK version 1.8.0\_265. When I execute the command java -jar apm-agent-attach-1.17.0-standalone.jar -i '/opt/appli…

---

## [Elastic APM latest Java agent does't not work on Tomcat 7](https://discuss.elastic.co/t/elastic-apm-latest-java-agent-doest-not-work-on-tomcat-7/245112)

<div class="topic-metadata">

**Author:** [@smakers](https://discuss.elastic.co/u/smakers)\
**Replies:** 9\
**Last updated:** [August 19, 2020, 9:48am UTC](https://discuss.elastic.co/t/elastic-apm-latest-java-agent-doest-not-work-on-tomcat-7/245112 "2020-08-19T09:48:39Z")

</div>

Hi I've followed an elastic document which is to configure agent JAVA in APM. in final steps when tomcat has been restarted then I can see Catalina.out file only shows the below result. unfortunately, my application als…

---

## [Java 8, elasticsearch, and MVEL](https://discuss.elastic.co/t/java-8-elasticsearch-and-mvel/16683)

<div class="topic-metadata">

**Author:** [@Paul\_Sanwald\_2](https://discuss.elastic.co/u/Paul_Sanwald_2)\
**Replies:** 9\
**Last updated:** [May 16, 2014, 8:37pm UTC](https://discuss.elastic.co/t/java-8-elasticsearch-and-mvel/16683 "2014-05-16T20:37:53Z")

</div>

I've been testing ES with java 8, and everything is working fantastic, with the exception of MVEL, which is fairly broken. I've looked on the MVEL mailing lists, and on github issues, and there's not a lot of activit…

---

## [Index not deleting according ilm policy](https://discuss.elastic.co/t/index-not-deleting-according-ilm-policy/276265)

<div class="topic-metadata">

**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\
**Replies:** 11\
**Last updated:** [July 1, 2021, 10:30am UTC](https://discuss.elastic.co/t/index-not-deleting-according-ilm-policy/276265 "2021-07-01T10:30:04Z")

</div>

Hi, I created an ILM policy and applied to system index (.monitoring-es-7-2021.06.10). But index is not deleting after ILM time. It is showing error. illegal\_argument\_exception: setting \[index.lifecycle.rollover\_alia…

---

## [High thread count with rest client](https://discuss.elastic.co/t/high-thread-count-with-rest-client/335801)

<div class="topic-metadata">

**Author:** [@Tukaram](https://discuss.elastic.co/u/Tukaram)\
**Replies:** 13\
**Last updated:** [June 22, 2023, 12:52pm UTC](https://discuss.elastic.co/t/high-thread-count-with-rest-client/335801 "2023-06-22T12:52:08Z")

</div>

Hi, I am using 7.17.3 stack for elastic. Low level Elasticsearch rest client is from 7.15.2 I see very high waiting thread count when I build the client for each request and do that in try block so it gets auto closed…

---

## [JVMs tab empty for most services](https://discuss.elastic.co/t/jvms-tab-empty-for-most-services/289955)

<div class="topic-metadata">

**Author:** [@coynef](https://discuss.elastic.co/u/coynef)\
**Replies:** 9\
**Last updated:** [December 21, 2021, 9:39am UTC](https://discuss.elastic.co/t/jvms-tab-empty-for-most-services/289955 "2021-12-21T09:39:28Z")

</div>

Kibana version: 7.10.1 Elasticsearch version: 7.10.1 APM Server version: 7.10.1 APM Agent language and version: 1.26 Description of the problem including expected versus actual behavior. Please include screenshots (i…

---

## [Performance Filebeat 5.0 vs 5.4](https://discuss.elastic.co/t/performance-filebeat-5-0-vs-5-4/87927)

<div class="topic-metadata">

**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\
**Replies:** 9\
**Last updated:** [June 19, 2017, 7:27am UTC](https://discuss.elastic.co/t/performance-filebeat-5-0-vs-5-4/87927 "2017-06-19T07:27:21Z")

</div>

Hi, I have filebeat 5.0 installed and running. I am testing the upgrade of Filebeat to release 5.4 Service is Windows Server, The filebeat accesses the log files using Shares on Windows. While comparing the performan…

---

## [Logstash output](https://discuss.elastic.co/t/logstash-output/113392)

<div class="topic-metadata">

**Author:** [@anjali](https://discuss.elastic.co/u/anjali)\
**Replies:** 10\
**Last updated:** [December 29, 2017, 6:29am UTC](https://discuss.elastic.co/t/logstash-output/113392 "2017-12-29T06:29:32Z")

</div>

Hello, I am new to the ELK stack. I have installed logstash stdout output plugin. Can someone tell me where I can see the output of logstash? (Because I am parsing the message in logstash but it is not showing in Kibana…

---

## [Best way to store 2 data sources with 1 linked field (document\_type OR new index)?](https://discuss.elastic.co/t/best-way-to-store-2-data-sources-with-1-linked-field-document-type-or-new-index/158661)

<div class="topic-metadata">

**Author:** [@nandrik](https://discuss.elastic.co/u/nandrik)\
**Replies:** 11\
**Last updated:** [November 30, 2018, 7:25am UTC](https://discuss.elastic.co/t/best-way-to-store-2-data-sources-with-1-linked-field-document-type-or-new-index/158661 "2018-11-30T07:25:47Z")

</div>

Hi, I've read the blog post on Index Vs. Type but I find it hard to understand what's better in my case. I have a certain application's log files and a great majority of the log lines mention a few remote IP addresses …

---

## [Help needed for reading Logs](https://discuss.elastic.co/t/help-needed-for-reading-logs/65959)

<div class="topic-metadata">

**Author:** [@Haribaskar](https://discuss.elastic.co/u/Haribaskar)\
**Replies:** 9\
**Last updated:** [November 18, 2016, 7:11am UTC](https://discuss.elastic.co/t/help-needed-for-reading-logs/65959 "2016-11-18T07:11:51Z")

</div>

Hi there, Could someone guide me on how to use pipeline(|) as separator for the Logs. I tried gsub. But everytime I use gsub, it says non ascii character found in the log. Any help would be appreciated.. Regards, Hari

---

## [Dealing with spam in this forum](https://discuss.elastic.co/t/dealing-with-spam-in-this-forum/18422)

<div class="topic-metadata">

**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\
**Replies:** 16\
**Last updated:** [March 14, 2015, 1:36am UTC](https://discuss.elastic.co/t/dealing-with-spam-in-this-forum/18422 "2015-03-14T01:36:24Z")

</div>

Hi all Recently we've had a few spam emails that have made it through Google's filters, and there have been a calls for us to change to a moderate-first-post policy. I am reluctant to adopt this policy for the f…

---

## [Test Harness for ElasticSearch](https://discuss.elastic.co/t/test-harness-for-elasticsearch/6841)

<div class="topic-metadata">

**Author:** [@pulkitsinghal](https://discuss.elastic.co/u/pulkitsinghal)\
**Replies:** 9\
**Last updated:** [March 8, 2012, 9:27am UTC](https://discuss.elastic.co/t/test-harness-for-elasticsearch/6841 "2012-03-08T09:27:33Z")

</div>

Is there any generic test harness available for configuring and running different types of queries with concurrent users against our own datasets? I want to check with the community at large before I start rolling my …

---

## [Dropdown filter is freezed](https://discuss.elastic.co/t/dropdown-filter-is-freezed/319752)

<div class="topic-metadata">

**Author:** [@Gianluca\_De\_Pasquale](https://discuss.elastic.co/u/Gianluca_De_Pasquale)\
**Replies:** 12\
**Last updated:** [January 5, 2023, 8:15am UTC](https://discuss.elastic.co/t/dropdown-filter-is-freezed/319752 "2023-01-05T08:15:56Z")

</div>

Hi team, I don't know why, but quite often my dropdown list filter in Kibana Canvas freezes and I m not able at all at selecting any item from it. Moreover, I can't succeeded in selecting with my mouse other elements (f…

---

## [Multiple entries for single file in sincedb](https://discuss.elastic.co/t/multiple-entries-for-single-file-in-sincedb/252438)

<div class="topic-metadata">

**Author:** [@chandramouli\_sriniva](https://discuss.elastic.co/u/chandramouli_sriniva)\
**Replies:** 14\
**Last updated:** [October 20, 2020, 9:29pm UTC](https://discuss.elastic.co/t/multiple-entries-for-single-file-in-sincedb/252438 "2020-10-20T21:29:21Z")

</div>

Hi, I read a single file from server(C:/Users/xx.log - its a rotating log file daily) and route to kafka. In a single sincedb file, we see multiple entries like below. Is this valid. we see dupes on Kafka topic. Is it …

---

## [Strange dashboard behavior](https://discuss.elastic.co/t/strange-dashboard-behavior/127494)

<div class="topic-metadata">

**Author:** [@roketyyang](https://discuss.elastic.co/u/roketyyang)\
**Replies:** 10\
**Last updated:** [April 23, 2018, 2:03am UTC](https://discuss.elastic.co/t/strange-dashboard-behavior/127494 "2018-04-23T02:03:29Z")

</div>

In pie chart, "info" is lost: \[1523368397469\] when I remove line char, "info" is show in pie chart: \[1523368474853\]

---

## [Convert String to date and compare it](https://discuss.elastic.co/t/convert-string-to-date-and-compare-it/311394)

<div class="topic-metadata">

**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\
**Replies:** 9\
**Last updated:** [August 7, 2022, 4:41pm UTC](https://discuss.elastic.co/t/convert-string-to-date-and-compare-it/311394 "2022-08-07T16:41:14Z")

</div>

Hi, I have two fields and I want to compare it field1: 20220720091723 field2: 07/20/22 09:17 I want to compare it so i don't know if i should convert to date then compare and how or can someone please tell me what i …

---

## [Elastic APM- apm-agent-attach-cli.jar: Stop collecting metrics through apm cli](https://discuss.elastic.co/t/elastic-apm-apm-agent-attach-cli-jar-stop-collecting-metrics-through-apm-cli/345592)

<div class="topic-metadata">

**Author:** [@vamshigottam](https://discuss.elastic.co/u/vamshigottam)\
**Replies:** 9\
**Last updated:** [October 30, 2023, 3:01pm UTC](https://discuss.elastic.co/t/elastic-apm-apm-agent-attach-cli-jar-stop-collecting-metrics-through-apm-cli/345592 "2023-10-30T15:01:01Z")

</div>

We are capturing the application metrics with elastic APM agent using apm-agent-attach-cli.jar which attaches to the running JVM's without making any changes to the code or JVM startup. This is working fine without any …

---

## [Elasticsearch 8.9.1 indexing bottleneck on i3.2xlarge and d3.2xlarge nodes in EKS using ECK](https://discuss.elastic.co/t/elasticsearch-8-9-1-indexing-bottleneck-on-i3-2xlarge-and-d3-2xlarge-nodes-in-eks-using-eck/342001)

<div class="topic-metadata">

**Author:** [@Chris\_Austin](https://discuss.elastic.co/u/Chris_Austin)\
**Replies:** 10\
**Last updated:** [October 2, 2023, 8:09pm UTC](https://discuss.elastic.co/t/elasticsearch-8-9-1-indexing-bottleneck-on-i3-2xlarge-and-d3-2xlarge-nodes-in-eks-using-eck/342001 "2023-10-02T20:09:08Z")

</div>

Last May I asked a similar question about performance in 7.17.10, but ran out of things to try and the discussion was auto-closed due to inactivity. I'll avoid repeating the same context info from that post (the initial …

---

## [How does Filebeat Redis module work for Slow Logs?](https://discuss.elastic.co/t/how-does-filebeat-redis-module-work-for-slow-logs/211028)

<div class="topic-metadata">

**Author:** [@dandago](https://discuss.elastic.co/u/dandago)\
**Replies:** 10\
**Last updated:** [December 13, 2019, 1:48pm UTC](https://discuss.elastic.co/t/how-does-filebeat-redis-module-work-for-slow-logs/211028 "2019-12-13T13:48:26Z")

</div>

The configuration file of the Redis module for Filebeat seems to support normal logs (from the Redis server's log file) and slowlogs (from the API)... see: I can understand how the logs are picked up from the log file…

---

## [Incorrect geo\_shape results in both es6.x and 7.x](https://discuss.elastic.co/t/incorrect-geo-shape-results-in-both-es6-x-and-7-x/195386)

<div class="topic-metadata">

**Author:** [@nickoneill](https://discuss.elastic.co/u/nickoneill)\
**Replies:** 14\
**Last updated:** [August 18, 2019, 5:47pm UTC](https://discuss.elastic.co/t/incorrect-geo-shape-results-in-both-es6-x-and-7-x/195386 "2019-08-18T17:47:22Z")

</div>

I'm still seeing the same incorrect shape query behavior that I saw back to ES 1.7 after starting fresh on es 6.7 and 7.x (hosted by elastic.co). Here is the relevant data: Documents with WKT shape data for NY and CT st…

---

## [Elastic Search 5.1.1 - How to fetch all documents that contains/ startswith operator on a field in ElasticSearch](https://discuss.elastic.co/t/elastic-search-5-1-1-how-to-fetch-all-documents-that-contains-startswith-operator-on-a-field-in-elasticsearch/266945)

<div class="topic-metadata">

**Author:** [@HS161148](https://discuss.elastic.co/u/HS161148)\
**Replies:** 9\
**Last updated:** [March 29, 2021, 3:06pm UTC](https://discuss.elastic.co/t/elastic-search-5-1-1-how-to-fetch-all-documents-that-contains-startswith-operator-on-a-field-in-elasticsearch/266945 "2021-03-29T15:06:59Z")

</div>

How to fetch all documents that contains/ startswith with value on a field in ElasticSearch.

---

## [Filebeat Autodiscover gives fatal error: concurrent map iteration and map write](https://discuss.elastic.co/t/filebeat-autodiscover-gives-fatal-error-concurrent-map-iteration-and-map-write/145296)

<div class="topic-metadata">

**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\
**Replies:** 9\
**Last updated:** [August 30, 2018, 5:43pm UTC](https://discuss.elastic.co/t/filebeat-autodiscover-gives-fatal-error-concurrent-map-iteration-and-map-write/145296 "2018-08-30T17:43:46Z")

</div>

Using the official filebeat docker image form elastic, I get fatal error: concurrent map iteration and map write (detailed logs included below) when using the filebeat.autodiscover in the config file. However, I cannot r…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/355176)

<div class="topic-metadata">

**Author:** [@AKASH\_AT](https://discuss.elastic.co/u/AKASH_AT)\
**Replies:** 12\
**Last updated:** [March 13, 2024, 11:49am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/355176 "2024-03-13T11:49:47Z")

</div>

Hi, When i tried to access the kibana GUI i got this as output "Kibana server is not ready yet." Here is the kibana log for the reference {"service":{"node":{"roles":\["background\_tasks","ui"\]}},"ecs":{"version":"8.6.1…

---

## [Want to create monitoring indices for only 7 days](https://discuss.elastic.co/t/want-to-create-monitoring-indices-for-only-7-days/343605)

<div class="topic-metadata">

**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\
**Replies:** 10\
**Last updated:** [September 22, 2023, 5:08pm UTC](https://discuss.elastic.co/t/want-to-create-monitoring-indices-for-only-7-days/343605 "2023-09-22T17:08:53Z")

</div>

Hello, I am monitoring my logstash instance through metricbeat monitoring. I want to configure monitoring setting as such that only 7 days monitoring indices is created in my cluster in order to monitor for only 7 days…

---

## [Template for elastic indexing](https://discuss.elastic.co/t/template-for-elastic-indexing/81433)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 10\
**Last updated:** [April 14, 2017, 9:16am UTC](https://discuss.elastic.co/t/template-for-elastic-indexing/81433 "2017-04-14T09:16:38Z")

</div>

Hello I being created template to increase performance of indexing (and gain of space). Where i can put not analyze string type ? (text & keyword from ES 5.x). The best will be not analyze all text field i think. …

---

## [Facet-Search property/property-value](https://discuss.elastic.co/t/facet-search-property-property-value/6097)

<div class="topic-metadata">

**Author:** [@maik](https://discuss.elastic.co/u/maik)\
**Replies:** 18\
**Last updated:** [November 1, 2012, 10:40am UTC](https://discuss.elastic.co/t/facet-search-property-property-value/6097 "2012-11-01T10:40:18Z")

</div>

Hi, I'm evaluating es for our ecommerce enivironment and ran in a problem: I want to use es with its facet search for building the frontend filters. For example: The user could browse some usb sticks and filter al…

---

## [Install ECE on premise and then use hydrid infrastructure](https://discuss.elastic.co/t/install-ece-on-premise-and-then-use-hydrid-infrastructure/231716)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 10\
**Last updated:** [May 11, 2020, 4:32pm UTC](https://discuss.elastic.co/t/install-ece-on-premise-and-then-use-hydrid-infrastructure/231716 "2020-05-11T16:32:57Z")

</div>

hi guys, I'm trying to explore this new functionality to understand if it could help me to decrease infrastructure costs (against bare-metal or virtual machines). I saw that I can install ECE on premise, so I can insta…

---

## [Indexing speed slowdown](https://discuss.elastic.co/t/indexing-speed-slowdown/101288)

<div class="topic-metadata">

**Author:** [@philv](https://discuss.elastic.co/u/philv)\
**Replies:** 11\
**Last updated:** [September 21, 2017, 3:24pm UTC](https://discuss.elastic.co/t/indexing-speed-slowdown/101288 "2017-09-21T15:24:42Z")

</div>

I've noticed a slowdown in indexing speed going from esv 2.3 to 5.5.0. It's early days, I have no precise figures and there are a tonne of other things that may differ, but my first thought was that it may be a change I…

---

## [ElasticSearch WARN after installing kibana](https://discuss.elastic.co/t/elasticsearch-warn-after-installing-kibana/268428)

<div class="topic-metadata">

**Author:** [@kylesu](https://discuss.elastic.co/u/kylesu)\
**Replies:** 10\
**Last updated:** [April 2, 2021, 9:07am UTC](https://discuss.elastic.co/t/elasticsearch-warn-after-installing-kibana/268428 "2021-04-02T09:07:47Z")

</div>

After installing kibana,when i operate(GET/POST/DELETE and so on) Elastic Search with High Level Rest Clinet comes up this warning: Each request comes up with one warning,i have 500 millions documents to process every …

---

## [Pivot the field using csv data in LS](https://discuss.elastic.co/t/pivot-the-field-using-csv-data-in-ls/192539)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 10\
**Last updated:** [July 31, 2019, 2:26am UTC](https://discuss.elastic.co/t/pivot-the-field-using-csv-data-in-ls/192539 "2019-07-31T02:26:58Z")

</div>

Hi All I have a csv data like this Object#,Type,Count A001,P0,5 A002,P1,3 A003,P0,4 A005,P1,2 A006,P2,2 I need to output in this below format, i tried with ruby filter, but not sure which gem to use exactly Plea…

---

## ["Index Patterns" is broken in 6.5](https://discuss.elastic.co/t/index-patterns-is-broken-in-6-5/158024)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 10\
**Last updated:** [November 26, 2018, 1:14pm UTC](https://discuss.elastic.co/t/index-patterns-is-broken-in-6-5/158024 "2018-11-26T13:14:54Z")

</div>

Hello, Whenever I try to navigate through Management -\> Index Patterns (w/ 6.5.0 and 6.5.1), only single "default index" is shown, I cannot add, remove any of patterns and I can only refresh default one. Please advise. …

---

## [Elasticsearch query problem](https://discuss.elastic.co/t/elasticsearch-query-problem/192383)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 9\
**Last updated:** [July 31, 2019, 11:17am UTC](https://discuss.elastic.co/t/elasticsearch-query-problem/192383 "2019-07-31T11:17:12Z")

</div>

Hi guys! I've got a problem with definition of query in elasticsearch. I've got two types of messages: Jul 23 09:24:16 mmr mmr-core\[5147\]: Aweg3AOMTs\_1563866656876839.mt processMTMessage() #12798 realtime: 5.684 ms …

---

## [Prioritized a master node in ES cluster](https://discuss.elastic.co/t/prioritized-a-master-node-in-es-cluster/333350)

<div class="topic-metadata">

**Author:** [@ahmed.emad](https://discuss.elastic.co/u/ahmed.emad)\
**Replies:** 13\
**Last updated:** [May 14, 2023, 2:25pm UTC](https://discuss.elastic.co/t/prioritized-a-master-node-in-es-cluster/333350 "2023-05-14T14:25:22Z")

</div>

Hello, My ES Cluster contains 3 Master nodes (node-1, node-2, node-3), and nodes have a priority (99,98,97) in order so when node-1 goes down it elects node-2 as the new master node this is good till now, but when node-…

---

## [RemoteTransportException](https://discuss.elastic.co/t/remotetransportexception/324083)

<div class="topic-metadata">

**Author:** [@Abhinav\_Raj](https://discuss.elastic.co/u/Abhinav_Raj)\
**Replies:** 11\
**Last updated:** [January 31, 2023, 6:09am UTC](https://discuss.elastic.co/t/remotetransportexception/324083 "2023-01-31T06:09:58Z")

</div>

Hi , what is this error saying. I am getting it multiple times . org.elasticsearch.transport.RemoteTransportException: \[indices:data/read/search\[phase/query\]\] Caused by: org.elasticsearch.search.query.QueryPhaseExecuti…

---

## [\[DEBUG\]\[action.admin.cluster.health\] when i try to create a cluster on 2.4.0 ElasticSearch](https://discuss.elastic.co/t/debug-action-admin-cluster-health-when-i-try-to-create-a-cluster-on-2-4-0-elasticsearch/141672)

<div class="topic-metadata">

**Author:** [@Rodrigo\_Mtz](https://discuss.elastic.co/u/Rodrigo_Mtz)\
**Replies:** 14\
**Last updated:** [July 26, 2018, 5:11pm UTC](https://discuss.elastic.co/t/debug-action-admin-cluster-health-when-i-try-to-create-a-cluster-on-2-4-0-elasticsearch/141672 "2018-07-26T17:11:48Z")

</div>

Hi i have an issue when i try to create a cluster with 2 nodes here is the first configuration file: ---------------------------------- Cluster ----------------------------------- Use a descriptive name for your clust…

---

## [New elasticsearch installation broke after Fedor update](https://discuss.elastic.co/t/new-elasticsearch-installation-broke-after-fedor-update/301569)

<div class="topic-metadata">

**Author:** [@moby](https://discuss.elastic.co/u/moby)\
**Replies:** 10\
**Last updated:** [April 5, 2022, 10:37pm UTC](https://discuss.elastic.co/t/new-elasticsearch-installation-broke-after-fedor-update/301569 "2022-04-05T22:37:59Z")

</div>

Hello, I have installed the latest version of Fedora desktop and was able to install Elasticsearch and kibana via the DNF package manager. I was able to bring up Kibana and login. Shutdown the computer. A few days late…

---

## [ES 5.0 new installation question](https://discuss.elastic.co/t/es-5-0-new-installation-question/65405)

<div class="topic-metadata">

**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\
**Replies:** 10\
**Last updated:** [November 10, 2016, 3:22pm UTC](https://discuss.elastic.co/t/es-5-0-new-installation-question/65405 "2016-11-10T15:22:43Z")

</div>

After getting less-than-desired results trying to upgrade my ELK stack to version 5.0, I thought I'd start fresh, and create a brand new ELK 5.0 node. I have reused some config files (e.g. elasticsearch.yml, kibana.yml,…

---

## [Transform time-based event logs](https://discuss.elastic.co/t/transform-time-based-event-logs/224484)

<div class="topic-metadata">

**Author:** [@jpchev](https://discuss.elastic.co/u/jpchev)\
**Replies:** 10\
**Last updated:** [March 30, 2020, 6:14am UTC](https://discuss.elastic.co/t/transform-time-based-event-logs/224484 "2020-03-30T06:14:26Z")

</div>

Hello, I'd like to import raw logs from an application where I have time-based events reporting the change of items' state. I'd like to get a transformation on data where each point in time reports the latest known st…

---

## [NoClassDefFoundError InternalLoggerFactory on tomcat start](https://discuss.elastic.co/t/noclassdeffounderror-internalloggerfactory-on-tomcat-start/150296)

<div class="topic-metadata">

**Author:** [@Anjana\_Surendrababu](https://discuss.elastic.co/u/Anjana_Surendrababu)\
**Replies:** 10\
**Last updated:** [October 4, 2018, 10:52am UTC](https://discuss.elastic.co/t/noclassdeffounderror-internalloggerfactory-on-tomcat-start/150296 "2018-10-04T10:52:48Z")

</div>

My project was using a very old version of elasticsearch (1.7.1). I am trying to upgrade it to 6.4.0 Following are the jars I added newly. elasticsearch-6.4.0.jar elasticsearch-core-6.4.0.jar elasticsearch-x-conten…

---

## [Write slow on elastic cluster](https://discuss.elastic.co/t/write-slow-on-elastic-cluster/276622)

<div class="topic-metadata">

**Author:** [@Sunil\_Chand](https://discuss.elastic.co/u/Sunil_Chand)\
**Replies:** 11\
**Last updated:** [June 23, 2021, 4:18pm UTC](https://discuss.elastic.co/t/write-slow-on-elastic-cluster/276622 "2021-06-23T16:18:36Z")

</div>

Hi All One of clusters has the following specs 8 nodes (8 data and 5 master eligible) each with 15GB heap space running on servers with 32GB of RAM. Elasticsearch version 7.6.2 on linux each node has 8 TB of space a…

---

## [Breaking Change: Majore gateway refactoring, and improved throttling](https://discuss.elastic.co/t/breaking-change-majore-gateway-refactoring-and-improved-throttling/3245)

<div class="topic-metadata">

**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\
**Replies:** 19\
**Last updated:** [August 29, 2010, 1:07pm UTC](https://discuss.elastic.co/t/breaking-change-majore-gateway-refactoring-and-improved-throttling/3245 "2010-08-29T13:07:48Z")

</div>

Hi, I am going to push (pretty soon) a major rewrite of the gateway module and improved throttling support. The gateway change is a breaking change, meaning that new version will not be able to recover from a 0.…

---

## [Problems with "filtered"](https://discuss.elastic.co/t/problems-with-filtered/3898)

<div class="topic-metadata">

**Author:** [@Pascal\_P\_Pochet](https://discuss.elastic.co/u/Pascal_P_Pochet)\
**Replies:** 21\
**Last updated:** [February 13, 2011, 9:59pm UTC](https://discuss.elastic.co/t/problems-with-filtered/3898 "2011-02-13T21:59:42Z")

</div>

ES 0.14.3 The following syntax "works" (no syntax error but result is wrong, 0 when it should be 3) on \_count curl -s -XGET 'http://localhost:9200/INDEX/TYPE/\_search?pretty=true' - d '{ "filtered" : { …

---

## [Error while upgrading 0.19.8 to 0.20.2 java.io.StreamCorruptedException: invalid internal transport message format](https://discuss.elastic.co/t/error-while-upgrading-0-19-8-to-0-20-2-java-io-streamcorruptedexception-invalid-internal-transport-message-format/10553)

<div class="topic-metadata">

**Author:** [@sbbagal](https://discuss.elastic.co/u/sbbagal)\
**Replies:** 18\
**Last updated:** [February 4, 2013, 1:30pm UTC](https://discuss.elastic.co/t/error-while-upgrading-0-19-8-to-0-20-2-java-io-streamcorruptedexception-invalid-internal-transport-message-format/10553 "2013-02-04T13:30:26Z")

</div>

Hi , I recently upgrade my elasticsearch cluster from 0.19.8 to 0.20.2 it started normally and no any log error . But when i configure it with scrutmydocs-0.2.0 it gives error java.io.StreamCorruptedException: invali…

---

## [Monitor Tomcat services using Beats](https://discuss.elastic.co/t/monitor-tomcat-services-using-beats/194222)

<div class="topic-metadata">

**Author:** [@Tinkerbell](https://discuss.elastic.co/u/Tinkerbell)\
**Replies:** 9\
**Last updated:** [August 9, 2019, 9:11am UTC](https://discuss.elastic.co/t/monitor-tomcat-services-using-beats/194222 "2019-08-09T09:11:18Z")

</div>

I am using Beats-\>ElasticSearch-\>Kibana for viewing the metrics. Now I need to monitor the webapplications that are deployed on a tomcat server. How can we achieve this? Please help.

---

## [Yet another OOME: Java heap space thread :S](https://discuss.elastic.co/t/yet-another-oome-java-heap-space-thread-s/18984)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 12\
**Last updated:** [September 22, 2015, 4:06pm UTC](https://discuss.elastic.co/t/yet-another-oome-java-heap-space-thread-s/18984 "2015-09-22T16:06:34Z")

</div>

Hi everyone, First off, apologies for the thread. I know OOME discussions are somewhat overdone in the group, but I need to reach out for some help for this one. I have a 2 node development cluster in EC2 on c3.4…

[Previous page](https://discuss.elastic.co/top.md?page=189&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=191&per_page=50&period=all)
