# Top **URL:** https://discuss.elastic.co/top.md?page=192&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 193 --- ## [What is the best way to ship logs from one Logstash to another Logstash?](https://discuss.elastic.co/t/what-is-the-best-way-to-ship-logs-from-one-logstash-to-another-logstash/120359)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 9\ **Last updated:** [March 1, 2018, 10:10pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-ship-logs-from-one-logstash-to-another-logstash/120359 "2018-03-01T22:10:33Z")
Hi, What would be the best way to ship logs from one Logstash to another instance of Logstash? I am currently using http input and http output plugins. However, I am not sure if all the logs are being shipped without an… --- ## [Heatmap sorting working in Visualisation Editor but not in Dashboard](https://discuss.elastic.co/t/heatmap-sorting-working-in-visualisation-editor-but-not-in-dashboard/273814)
**Author:** [@mkostros](https://discuss.elastic.co/u/mkostros)\ **Replies:** 11\ **Last updated:** [June 2, 2021, 7:37am UTC](https://discuss.elastic.co/t/heatmap-sorting-working-in-visualisation-editor-but-not-in-dashboard/273814 "2021-06-02T07:37:25Z")
Hello We want to create event dashboard, which would shown, how many log events came in Day of Week and Hour of day. We have created dynamic fields for DayOfWeek and HourOfDay (number format). Which are then used in he… --- ## [Increasing shards and then nodes](https://discuss.elastic.co/t/increasing-shards-and-then-nodes/3810)
**Author:** [@Lee\_Parker](https://discuss.elastic.co/u/Lee_Parker)\ **Replies:** 11\ **Last updated:** [January 20, 2011, 5:59pm UTC](https://discuss.elastic.co/t/increasing-shards-and-then-nodes/3810 "2011-01-20T17:59:49Z")
We have been using elastic search within our production environment for a few months now. I have discovered that I didn't properly plan for the amount of data in the index and find myself in need of increasing the num… --- ## [Kibana Monitoring Issue and Sharding Problem](https://discuss.elastic.co/t/kibana-monitoring-issue-and-sharding-problem/271219)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 13\ **Last updated:** [May 8, 2021, 8:36am UTC](https://discuss.elastic.co/t/kibana-monitoring-issue-and-sharding-problem/271219 "2021-05-08T08:36:37Z")
Hi there I have 2 problems which is probably related to each other: I have a basic cluster with 2 nodes of data. But my status is always "Yellow" and these 2nodes can not divide the primary shards and replicas: So I … --- ## [This is why?](https://discuss.elastic.co/t/this-is-why/91594)
**Author:** [@qin](https://discuss.elastic.co/u/qin)\ **Replies:** 13\ **Last updated:** [July 4, 2017, 7:54am UTC](https://discuss.elastic.co/t/this-is-why/91594 "2017-07-04T07:54:08Z")
POST /index\_name/\_search { "from": 0, "size": 100, "query": { "bool": { "should": \[ { "match": { "shop\_name": "麦吉之源" } }, { "ma… --- ## [Disk Usage problem](https://discuss.elastic.co/t/disk-usage-problem/313543)
**Author:** [@Medel](https://discuss.elastic.co/u/Medel)\ **Replies:** 14\ **Last updated:** [September 2, 2022, 12:20pm UTC](https://discuss.elastic.co/t/disk-usage-problem/313543 "2022-09-02T12:20:48Z")
Hello! I have a strange issue in my elasticsearch cluster So I have 3 nodes, and each node server has 300gb disk space on it But it showed that only 20gb is available. How I can add more space to the nodes? --- ## [Querying in Kibana Discover Timesout](https://discuss.elastic.co/t/querying-in-kibana-discover-timesout/256817)
**Author:** [@Ganesh\_Sharma](https://discuss.elastic.co/u/Ganesh_Sharma)\ **Replies:** 14\ **Last updated:** [December 9, 2020, 11:07am UTC](https://discuss.elastic.co/t/querying-in-kibana-discover-timesout/256817 "2020-12-09T11:07:48Z")
Guys I have been trying to deploy ELK cluster using ELK Operator method for Azure AKS from here. However after I deploy ELK and access Kibana and add Filebeat index creation I am unable to query anything in the Discover… --- ## [Does not capture ICMP traffic](https://discuss.elastic.co/t/does-not-capture-icmp-traffic/80036)
**Author:** [@korsdecaying](https://discuss.elastic.co/u/korsdecaying)\ **Replies:** 9\ **Last updated:** [March 30, 2017, 8:24am UTC](https://discuss.elastic.co/t/does-not-capture-icmp-traffic/80036 "2017-03-30T08:24:46Z")
DNS traffic is displayed in Kiban, and ICMP is not present # /etc/packetbeat/packetbeat.yml packetbeat.interfaces.device: 1 packetbeat.protocols.dns: ports: \[53\] include\_authorities: true include\_additio… --- ## [Why my Logstash is consuming more than 80% of CPU?](https://discuss.elastic.co/t/why-my-logstash-is-consuming-more-than-80-of-cpu/77640)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 9\ **Last updated:** [March 7, 2017, 2:19pm UTC](https://discuss.elastic.co/t/why-my-logstash-is-consuming-more-than-80-of-cpu/77640 "2017-03-07T14:19:57Z")
Hi, I use ELK GA 5.0.0. I have 2 Logstash instances in my Linux box. Both of them are designed to consume from Kafka. One logstash consume from a Kafka topic while the other Logstash consume from 3 other Kafka topics. … --- ## [BroadcastShardOperationFailedException](https://discuss.elastic.co/t/broadcastshardoperationfailedexception/3422)
**Author:** [@John\_Chang](https://discuss.elastic.co/u/John_Chang)\ **Replies:** 12\ **Last updated:** [October 8, 2010, 8:08pm UTC](https://discuss.elastic.co/t/broadcastshardoperationfailedexception/3422 "2010-10-08T20:08:14Z")
I am getting a BroadcastShardOperationFailedException when I do a GET against my cluster of two: { \* count: 0 \* - \_shards: { o total: 5 o successful: 3 … --- ## [Ingestion pipeline milliseconds](https://discuss.elastic.co/t/ingestion-pipeline-milliseconds/275967)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 10\ **Last updated:** [June 16, 2021, 10:51am UTC](https://discuss.elastic.co/t/ingestion-pipeline-milliseconds/275967 "2021-06-16T10:51:26Z")
Hi, is it possible to add, via ingestion pipeline, the current timestamp, but, in milliseconds? (Unix time) Thanks --- ## [Stdout rubydebug not outputting to file](https://discuss.elastic.co/t/stdout-rubydebug-not-outputting-to-file/251296)
**Author:** [@elasticus3r](https://discuss.elastic.co/u/elasticus3r)\ **Replies:** 11\ **Last updated:** [October 9, 2020, 12:10pm UTC](https://discuss.elastic.co/t/stdout-rubydebug-not-outputting-to-file/251296 "2020-10-09T12:10:48Z")
Hello, I have got an nginx output with the stdout configured at the bottom as: output { if \[service\] == "nginx" and "\_grokparsefailure" in \[tags\] { elasticsearch { user =\> "user" password =\> "password" … --- ## [Load Balance Output to both hot nodes](https://discuss.elastic.co/t/load-balance-output-to-both-hot-nodes/350415)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 13\ **Last updated:** [January 9, 2024, 5:53pm UTC](https://discuss.elastic.co/t/load-balance-output-to-both-hot-nodes/350415 "2024-01-09T17:53:30Z")
I have two hot nodes in my cluster. I currently just have on node in the Outputs. Can I just add the 2nd node to the list of outputs? --- ## [FileBeat loses 10 seconds of logs on rotation](https://discuss.elastic.co/t/filebeat-loses-10-seconds-of-logs-on-rotation/282227)
**Author:** [@jj12341](https://discuss.elastic.co/u/jj12341)\ **Replies:** 9\ **Last updated:** [August 27, 2021, 1:56pm UTC](https://discuss.elastic.co/t/filebeat-loses-10-seconds-of-logs-on-rotation/282227 "2021-08-27T13:56:52Z")
Hi! My FileBeat is losing 10 seconds of approximately logs. Obviously the problem is in the rotation of the files, but I can not find the correct option so that these logs are not lost. The Rotation of Logs performs Lo… --- ## [Is Elasticsearch going to sleep after some hours?](https://discuss.elastic.co/t/is-elasticsearch-going-to-sleep-after-some-hours/272035)
**Author:** [@JdKock](https://discuss.elastic.co/u/JdKock)\ **Replies:** 9\ **Last updated:** [May 4, 2021, 8:20am UTC](https://discuss.elastic.co/t/is-elasticsearch-going-to-sleep-after-some-hours/272035 "2021-05-04T08:20:34Z")
We are using Elasticsearch (v7.3.2) for our search solution and we use a Java API to get the search results from Elasticsearch. This is working fine. In the Test environment we are not using Elasticsearch everyday. What… --- ## [\[APM-agent-go\] Some Error occurred while calling apmsql/conn.go's finishSpan method](https://discuss.elastic.co/t/apm-agent-go-some-error-occurred-while-calling-apmsql-conn-gos-finishspan-method/159333)
**Author:** [@Barry\_Zhong](https://discuss.elastic.co/u/Barry_Zhong)\ **Replies:** 11\ **Last updated:** [December 10, 2018, 7:43am UTC](https://discuss.elastic.co/t/apm-agent-go-some-error-occurred-while-calling-apmsql-conn-gos-finishspan-method/159333 "2018-12-10T07:43:37Z")
I am using the 1.0 release of apm-agent-go on our project at test environments. And there are some errors of same type occur sometime as following: { "library\_frame": true, "exclude\_from\_grouping": false, "filenam… --- ## [If conditional " in " doesn't work, but " == " does? I need the "in" conditional to work!](https://discuss.elastic.co/t/if-conditional-in-doesnt-work-but-does-i-need-the-in-conditional-to-work/125441)
**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\ **Replies:** 9\ **Last updated:** [April 11, 2018, 1:57pm UTC](https://discuss.elastic.co/t/if-conditional-in-doesnt-work-but-does-i-need-the-in-conditional-to-work/125441 "2018-04-11T13:57:22Z")
In my logstash .conf, filter section when I use "==" it works, but when I replace with "in" it doesn't. Further down in the script, I do use "in" with multiple values, and none of them work either. Am I missing something… --- ## [Unable to connect to Elasticsearch with X-Pack enabled](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-with-x-pack-enabled/137023)
**Author:** [@hitesh-inbetween](https://discuss.elastic.co/u/hitesh-inbetween)\ **Replies:** 10\ **Last updated:** [July 19, 2018, 9:07pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-with-x-pack-enabled/137023 "2018-07-19T21:07:12Z")
Hi I am using Elasticsearch version 6.2.4. After enabling xpack security, I am unable to connect my transport client to elasticsearch TransportClient transportClient1 = new PreBuiltXPackTransportClient( Se… --- ## [Migration from ES 1.3.4 to ES 1.5.x](https://discuss.elastic.co/t/migration-from-es-1-3-4-to-es-1-5-x/32001)
**Author:** [@nguafogu78](https://discuss.elastic.co/u/nguafogu78)\ **Replies:** 13\ **Last updated:** [November 4, 2015, 1:10pm UTC](https://discuss.elastic.co/t/migration-from-es-1-3-4-to-es-1-5-x/32001 "2015-11-04T13:10:25Z")
Hi, Currently, I got a ES cluster with datas on 1.3.4 version and I want to migrate them on a 1.5.x cluster. How do I proceed ? --- ## [Problems with bootstrapping my 2-node cluster. Master node not found](https://discuss.elastic.co/t/problems-with-bootstrapping-my-2-node-cluster-master-node-not-found/216464)
**Author:** [@paul4](https://discuss.elastic.co/u/paul4)\ **Replies:** 9\ **Last updated:** [January 27, 2020, 2:10pm UTC](https://discuss.elastic.co/t/problems-with-bootstrapping-my-2-node-cluster-master-node-not-found/216464 "2020-01-27T14:10:41Z")
Hi all, I googled and searched these forums extenisvely, but unfortunately still no luck with this. I try to bootstrap a new cluster, based on Docker and ElasticSearch 7.5.0 . I keep getting the error: "master not dis… --- ## [Custom Cloudwatch Metrics](https://discuss.elastic.co/t/custom-cloudwatch-metrics/221324)
**Author:** [@AddChickpeas](https://discuss.elastic.co/u/AddChickpeas)\ **Replies:** 12\ **Last updated:** [February 28, 2020, 9:55pm UTC](https://discuss.elastic.co/t/custom-cloudwatch-metrics/221324 "2020-02-28T21:55:07Z")
Hello, Using v7.6.0 I'm attempting to collect some custom metrics using metricbeat, but not having any luck. I have tried pretty much every combination of the below possible - module: aws period: 60s access\_key\_i… --- ## [Items that should have equal score don't, could someone help me understand?](https://discuss.elastic.co/t/items-that-should-have-equal-score-dont-could-someone-help-me-understand/65990)
**Author:** [@DougFolksy](https://discuss.elastic.co/u/DougFolksy)\ **Replies:** 15\ **Last updated:** [November 14, 2016, 4:05pm UTC](https://discuss.elastic.co/t/items-that-should-have-equal-score-dont-could-someone-help-me-understand/65990 "2016-11-14T16:05:21Z")
Hi -- I have a query that searches for items in a certain subcategory that should (not must) have been tagged with a certain tag. The items also have a listed\_at field. If the query finds no items that have the desired t… --- ## [Template mapping dosen't work](https://discuss.elastic.co/t/template-mapping-dosent-work/131130)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 11\ **Last updated:** [May 9, 2018, 8:57pm UTC](https://discuss.elastic.co/t/template-mapping-dosent-work/131130 "2018-05-09T20:57:32Z")
I'm trying to convert latitude and longitude to geo\_point location in order to use it a map visulaztion. this is my configuration: input{ file{ path=\>"C:\\Users\\Ahmed\\Desktop\\311\_Service\_Requests\_from\_2015.csv" … --- ## [Need Help Tuning ES for Large Data](https://discuss.elastic.co/t/need-help-tuning-es-for-large-data/91207)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 11\ **Last updated:** [August 1, 2017, 5:52am UTC](https://discuss.elastic.co/t/need-help-tuning-es-for-large-data/91207 "2017-08-01T05:52:56Z")
Hello Everyone, I have a relatively large data where we use a custom python script to ingest data using the bulk API. These are AWS Cloudtrail data for over 200 AWS Accounts aggregated in single s3 bucket. This has bee… --- ## [Find current event logs](https://discuss.elastic.co/t/find-current-event-logs/236349)
**Author:** [@Joshua\_Tetteh\_Ocanse](https://discuss.elastic.co/u/Joshua_Tetteh_Ocanse)\ **Replies:** 10\ **Last updated:** [June 12, 2020, 1:56pm UTC](https://discuss.elastic.co/t/find-current-event-logs/236349 "2020-06-12T13:56:00Z")
Hello I have set of log documents categorized with event-ids which is string in form of timestamp. I want to find the document with the earliest timestamp so I can always visualize the current set of logs. This is wha… --- ## [Request Timeout after 30000ms | kibana 4 error](https://discuss.elastic.co/t/request-timeout-after-30000ms-kibana-4-error/146892)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 10\ **Last updated:** [September 6, 2018, 5:54pm UTC](https://discuss.elastic.co/t/request-timeout-after-30000ms-kibana-4-error/146892 "2018-09-06T17:54:47Z")
when i click on indices tab on Kibana settings Menu, i am getting "Request Timeout after 30000ms " error. someone please help and advise how can i increase the value. I am using elastic/kibana version 4. --- ## [How to use nested JSON fields to search for content and drop it](https://discuss.elastic.co/t/how-to-use-nested-json-fields-to-search-for-content-and-drop-it/278576)
**Author:** [@Alex\_Pilon](https://discuss.elastic.co/u/Alex_Pilon)\ **Replies:** 11\ **Last updated:** [July 13, 2021, 7:13pm UTC](https://discuss.elastic.co/t/how-to-use-nested-json-fields-to-search-for-content-and-drop-it/278576 "2021-07-13T19:13:28Z")
Hi all, Been stuck on this since yesterday, and now I'm at a loss. Basically: Using the Azure EventHub input plugin, I'm ingesting Azure logs from various sources, one of the being Azure SQL Audit logs, which are all i… --- ## [Metricbeat AWS Module](https://discuss.elastic.co/t/metricbeat-aws-module/229715)
**Author:** [@leogoldim](https://discuss.elastic.co/u/leogoldim)\ **Replies:** 11\ **Last updated:** [May 4, 2020, 6:30pm UTC](https://discuss.elastic.co/t/metricbeat-aws-module/229715 "2020-05-04T18:30:18Z")
Hi everybody, I'm trying to test the Metricbeat with AWS module, but my CloudWatch metrics aren't sent to the ELK stack. Following are my AWS module config: metricbeat.modules: - module: aws period: 12h #credential… --- ## [Circuit Breaker Exception](https://discuss.elastic.co/t/circuit-breaker-exception/293737)
**Author:** [@Suresh\_Ghatuwa](https://discuss.elastic.co/u/Suresh_Ghatuwa)\ **Replies:** 9\ **Last updated:** [January 10, 2022, 9:00am UTC](https://discuss.elastic.co/t/circuit-breaker-exception/293737 "2022-01-10T09:00:50Z")
I am working on ES Circuit Breaker implementation. I got circuit breaker exception if heavy terms aggregation. But if multiple es query with less JVM usage than limit is executed, then we got Out Of Memory exception. Qu… --- ## [How to read XML logs](https://discuss.elastic.co/t/how-to-read-xml-logs/104664)
**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\ **Replies:** 9\ **Last updated:** [October 25, 2017, 12:05pm UTC](https://discuss.elastic.co/t/how-to-read-xml-logs/104664 "2017-10-25T12:05:53Z")
Hi team, My log file is "|" separated but two fields contains XML data. please let me know how can i read this. --- ## [Elastic Search Connector Fails on ca\_certs config when running in Docker](https://discuss.elastic.co/t/elastic-search-connector-fails-on-ca-certs-config-when-running-in-docker/358996)
**Author:** [@Matt\_Crysler](https://discuss.elastic.co/u/Matt_Crysler)\ **Replies:** 13\ **Last updated:** [May 10, 2024, 9:38am UTC](https://discuss.elastic.co/t/elastic-search-connector-fails-on-ca-certs-config-when-running-in-docker/358996 "2024-05-10T09:38:54Z")
Rather than retype the entire issue, the following topic is exactly what I am running into with no resolution. I have tried everything with no luck! Can someone PLEASE respond with something that has worked for them? Tha… --- ## [Creat multiple index pattern](https://discuss.elastic.co/t/creat-multiple-index-pattern/137279)
**Author:** [@kimfut](https://discuss.elastic.co/u/kimfut)\ **Replies:** 14\ **Last updated:** [July 13, 2018, 11:32am UTC](https://discuss.elastic.co/t/creat-multiple-index-pattern/137279 "2018-07-13T11:32:19Z")
hello every one , i am trying to make an config to creat a multiple index pattern with logstash , i am using filebeat also , principally i have two types of file , each type locate in separate folder so there is my fi… --- ## [How to create if conditional statement in logstash config file](https://discuss.elastic.co/t/how-to-create-if-conditional-statement-in-logstash-config-file/153118)
**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\ **Replies:** 11\ **Last updated:** [October 19, 2018, 7:53am UTC](https://discuss.elastic.co/t/how-to-create-if-conditional-statement-in-logstash-config-file/153118 "2018-10-19T07:53:56Z")
Hi, how to select the mysql query in elasticsearch config file based on if condition statement? --- ## [Elasticsearch not showing correct count of documents in index](https://discuss.elastic.co/t/elasticsearch-not-showing-correct-count-of-documents-in-index/330986)
**Author:** [@Taby](https://discuss.elastic.co/u/Taby)\ **Replies:** 9\ **Last updated:** [May 16, 2023, 10:08am UTC](https://discuss.elastic.co/t/elasticsearch-not-showing-correct-count-of-documents-in-index/330986 "2023-05-16T10:08:28Z")
Hi. Our Java 8 based application is sending an input data of total 17061816 documents to elasticsearch 7.17.4 to index these documents. However, after all indexing is completed, the curl \_count is showing a total of 168… --- ## [Bootstrap monitoring process did not exit as expected - Again](https://discuss.elastic.co/t/bootstrap-monitoring-process-did-not-exit-as-expected-again/215228)
**Author:** [@lcarr](https://discuss.elastic.co/u/lcarr)\ **Replies:** 9\ **Last updated:** [January 17, 2020, 6:25pm UTC](https://discuss.elastic.co/t/bootstrap-monitoring-process-did-not-exit-as-expected-again/215228 "2020-01-17T18:25:47Z")
I am asking to reopen this ticket. I need some kind of resolution on how to fix it. I have 7 deployments to do in the next 6 months. I had no issues with doing the install on Centos 7 but when I tried in RHEL 7.5 Maip… --- ## [Filebeat reading file even after not mentioning it in filebeat.yml](https://discuss.elastic.co/t/filebeat-reading-file-even-after-not-mentioning-it-in-filebeat-yml/94098)
**Author:** [@NITIN-BHAISARE](https://discuss.elastic.co/u/NITIN-BHAISARE)\ **Replies:** 9\ **Last updated:** [July 21, 2017, 2:23pm UTC](https://discuss.elastic.co/t/filebeat-reading-file-even-after-not-mentioning-it-in-filebeat-yml/94098 "2017-07-21T14:23:19Z")
Hello, I have a file which is not mentioned in the filebeat.yml but i can still see that opened by filebeat in lsof -c filebeat output. anyone any idea about what is happening here?? Thanks, Nitin --- ## [\_grokparsefailure but it work on grok debugger](https://discuss.elastic.co/t/grokparsefailure-but-it-work-on-grok-debugger/138127)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 18\ **Last updated:** [July 2, 2018, 2:20pm UTC](https://discuss.elastic.co/t/grokparsefailure-but-it-work-on-grok-debugger/138127 "2018-07-02T14:20:51Z")
Hello everybody, I use logstash to grok logs line. For exemple one of these lines is : INFO;0000;000003;\* /data/EDT/batchs/files/logs/WKF998MT-20180621-20180621-1301.log \* I use a first grok to cut in 3 field this eve… --- ## [Customize graph data paramters](https://discuss.elastic.co/t/customize-graph-data-paramters/222519)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 20\ **Last updated:** [March 25, 2020, 6:49pm UTC](https://discuss.elastic.co/t/customize-graph-data-paramters/222519 "2020-03-25T18:49:16Z")
Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s… --- ## [ES 7.5.0 not starting when remote cluster is down](https://discuss.elastic.co/t/es-7-5-0-not-starting-when-remote-cluster-is-down/217691)
**Author:** [@JPedroM](https://discuss.elastic.co/u/JPedroM)\ **Replies:** 9\ **Last updated:** [February 4, 2020, 10:56am UTC](https://discuss.elastic.co/t/es-7-5-0-not-starting-when-remote-cluster-is-down/217691 "2020-02-04T10:56:02Z")
Hey, Was able to setup a remote cluster in one of my ES instances. After this instance was up and the connection to remote established I shut down the remote instance. The connection has been lost but after the start of… --- ## [Detach node from a cluster in docker](https://discuss.elastic.co/t/detach-node-from-a-cluster-in-docker/270896)
**Author:** [@bentleg1](https://discuss.elastic.co/u/bentleg1)\ **Replies:** 10\ **Last updated:** [April 23, 2021, 1:26pm UTC](https://discuss.elastic.co/t/detach-node-from-a-cluster-in-docker/270896 "2021-04-23T13:26:51Z")
Hello everyone! I have a little question about the elasticsearch-node tool: Is it possible to use it in any way to detach a node from a cluster that exists in a docker container? So far the tool throws an exception tha… --- ## [Unable to upgrade the elastic search and kibana to lastet 8.5.1 version](https://discuss.elastic.co/t/unable-to-upgrade-the-elastic-search-and-kibana-to-lastet-8-5-1-version/321971)
**Author:** [@MahithaSarala](https://discuss.elastic.co/u/MahithaSarala)\ **Replies:** 12\ **Last updated:** [January 2, 2023, 9:14pm UTC](https://discuss.elastic.co/t/unable-to-upgrade-the-elastic-search-and-kibana-to-lastet-8-5-1-version/321971 "2023-01-02T21:14:03Z")
Hi Team, We have installed Elastic serach and kibana setup using helm charts , The current version is 7.17.3 . On checking in artifacthub.io we have referred to the following elastic and kibana latest versions for upgr… --- ## [Hello I want to create pie chart in kibana 7.6](https://discuss.elastic.co/t/hello-i-want-to-create-pie-chart-in-kibana-7-6/222398)
**Author:** [@Sahana1](https://discuss.elastic.co/u/Sahana1)\ **Replies:** 9\ **Last updated:** [March 9, 2020, 4:22am UTC](https://discuss.elastic.co/t/hello-i-want-to-create-pie-chart-in-kibana-7-6/222398 "2020-03-09T04:22:17Z")
1.I have data in my CSV file which is in the attached file format 2.when i create the pie chart all the it shows as in the below uploaded picture 2 3. actually i want to have my pie chart as shown in the below uploa… --- ## [Elasticsearch 6.8.6 pending\_tasks grows after 24 hours](https://discuss.elastic.co/t/elasticsearch-6-8-6-pending-tasks-grows-after-24-hours/226269)
**Author:** [@Chris\_Denneen](https://discuss.elastic.co/u/Chris_Denneen)\ **Replies:** 12\ **Last updated:** [April 3, 2020, 4:06pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-6-pending-tasks-grows-after-24-hours/226269 "2020-04-03T16:06:54Z")
CentOS 7.7 Elasticsearch 6.8.6 OpenJDK Runtime Environment (build 1.8.0\_242-b08) # curl -s localhost:9200/\_cluster/health?pretty { "cluster\_name" : "dev-gi-logging", "status" : "green", "time… --- ## [Azure Module - Multiple event hubs?](https://discuss.elastic.co/t/azure-module-multiple-event-hubs/303850)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 11\ **Last updated:** [May 9, 2022, 12:57pm UTC](https://discuss.elastic.co/t/azure-module-multiple-event-hubs/303850 "2022-05-09T12:57:26Z")
Can't seem to find a solution for this. Here's the situation: I am setting up a PoC environment, which has two Azure event hubs configured to input Azure AD data (which themselves are coming from separate environments)… --- ## [Elasticsearch cluster performance tuning](https://discuss.elastic.co/t/elasticsearch-cluster-performance-tuning/236812)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 11\ **Last updated:** [June 24, 2020, 3:54am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-performance-tuning/236812 "2020-06-24T03:54:14Z")
Hi, Following an error I got in Kibana and the following posts How can I optimise and tune the elastic cluster? Elasticsearch/Kibana version are 7.6.2 I have 5 nodes in the cluster, all run on a CentOS 7 VMs 28G … --- ## [Slow handling of documents when large text in a field](https://discuss.elastic.co/t/slow-handling-of-documents-when-large-text-in-a-field/302679)
**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\ **Replies:** 10\ **Last updated:** [April 20, 2022, 2:45pm UTC](https://discuss.elastic.co/t/slow-handling-of-documents-when-large-text-in-a-field/302679 "2022-04-20T14:45:03Z")
Hi, We have problems when handling for documents with large content in a single field. We have index with mapping like this: "mappings" : { "properties" : { "properties" : { "name" : { "type" : "te… --- ## [Data Type to specify exact tokens to index](https://discuss.elastic.co/t/data-type-to-specify-exact-tokens-to-index/195637)
**Author:** [@robmartin11](https://discuss.elastic.co/u/robmartin11)\ **Replies:** 13\ **Last updated:** [September 25, 2019, 8:57am UTC](https://discuss.elastic.co/t/data-type-to-specify-exact-tokens-to-index/195637 "2019-09-25T08:57:36Z")
Is there any way to index content by specifying the exact tokens to index? For example: PUT /index/type/1 { “content”: “Some content to index”, “tokens”: \[ { “value”: “data” “start”: 5, “end”: 11 } \] } … --- ## [Is @timestamp in kibana from filebeat or logstash?](https://discuss.elastic.co/t/is-timestamp-in-kibana-from-filebeat-or-logstash/326836)
**Author:** [@LongKang\_Fan](https://discuss.elastic.co/u/LongKang_Fan)\ **Replies:** 9\ **Last updated:** [March 3, 2023, 3:11am UTC](https://discuss.elastic.co/t/is-timestamp-in-kibana-from-filebeat-or-logstash/326836 "2023-03-03T03:11:22Z")
So the thing is I have filebeat that ship the log file to logstash then to the elasticsearch cluster. And I created the data view the get the messages on the discover page. I wonder where this @timestamp field comes from… --- ## [How to convert yyyyMMddHHmmssSSSZ string into timestamp](https://discuss.elastic.co/t/how-to-convert-yyyymmddhhmmsssssz-string-into-timestamp/168596)
**Author:** [@priya08](https://discuss.elastic.co/u/priya08)\ **Replies:** 9\ **Last updated:** [February 20, 2019, 1:24pm UTC](https://discuss.elastic.co/t/how-to-convert-yyyymmddhhmmsssssz-string-into-timestamp/168596 "2019-02-20T13:24:19Z")
Hi , I want to convert date string yyyyMMddHHmmssSSSZ to timezone , I have tried with date { match =\> \["datetime", "YYYYMMddHHmmssSSS" \] target =\> "datetime" } but i am getting \_dateparsefailure in tags. How to co… --- ## [Csv parse failure](https://discuss.elastic.co/t/csv-parse-failure/333049)
**Author:** [@Hanni](https://discuss.elastic.co/u/Hanni)\ **Replies:** 9\ **Last updated:** [May 16, 2023, 2:45pm UTC](https://discuss.elastic.co/t/csv-parse-failure/333049 "2023-05-16T14:45:10Z")
Hello, I'm trying to parse a CSV file with Logstash, but I'm encountering a CSV parse failure. Can you please help me? [Previous page](https://discuss.elastic.co/top.md?page=191&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=193&per_page=50&period=all)