# Top **URL:** https://discuss.elastic.co/top.md?page=196&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 197 --- ## [Indexes are keep increasing after traffic towards elastic has stoped](https://discuss.elastic.co/t/indexes-are-keep-increasing-after-traffic-towards-elastic-has-stoped/281183)
**Author:** [@John\_Xanthopoulos](https://discuss.elastic.co/u/John_Xanthopoulos)\ **Replies:** 19\ **Last updated:** [August 23, 2021, 6:40am UTC](https://discuss.elastic.co/t/indexes-are-keep-increasing-after-traffic-towards-elastic-has-stoped/281183 "2021-08-23T06:40:31Z")
After having performed a test with indexing rate of ~30000/sec for couple of hours we noticed the following behavior. After Fluentd has stopped sending data to elasticsearch, four some time there is an ammount of documen… --- ## [Won't start runner: monitor ID user-center is configured for multiple monitors! IDs must be unique values](https://discuss.elastic.co/t/wont-start-runner-monitor-id-user-center-is-configured-for-multiple-monitors-ids-must-be-unique-values/200961)
**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\ **Replies:** 9\ **Last updated:** [October 8, 2019, 3:20am UTC](https://discuss.elastic.co/t/wont-start-runner-monitor-id-user-center-is-configured-for-multiple-monitors-ids-must-be-unique-values/200961 "2019-10-08T03:20:08Z")
i have changed my question when i restart my application in k8s , i found error message in heartbeat log won't start runner: monitor ID user-center is configured for multiple monitors! IDs must be unique values. What… --- ## [Sorting fields for Visualize Pie](https://discuss.elastic.co/t/sorting-fields-for-visualize-pie/149240)
**Author:** [@awp-sirius](https://discuss.elastic.co/u/awp-sirius)\ **Replies:** 12\ **Last updated:** [September 25, 2018, 6:57am UTC](https://discuss.elastic.co/t/sorting-fields-for-visualize-pie/149240 "2018-09-25T06:57:59Z")
Hello. I have a field "UserId" in the logs When the user is not authorized his id is 0 I want to create a Visualize Pie where there are two parts: one log with UserId==0, in the other all others Tell me how to do th… --- ## [Logstash TCP Input Codecs](https://discuss.elastic.co/t/logstash-tcp-input-codecs/350517)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 10\ **Last updated:** [January 11, 2024, 11:09pm UTC](https://discuss.elastic.co/t/logstash-tcp-input-codecs/350517 "2024-01-11T23:09:15Z")
Is there a place to undestand exactly what format each of the TCP input codecs are meant to cover? (line vs json vs plain vs cef). I have a situation of a new log source (Sophos firewall). Must use TLS so syslog input i… --- ## [Split filebeat log with a variable length and create multiple events group by a field](https://discuss.elastic.co/t/split-filebeat-log-with-a-variable-length-and-create-multiple-events-group-by-a-field/269630)
**Author:** [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\ **Replies:** 13\ **Last updated:** [April 9, 2021, 4:54pm UTC](https://discuss.elastic.co/t/split-filebeat-log-with-a-variable-length-and-create-multiple-events-group-by-a-field/269630 "2021-04-09T16:54:36Z")
Hi. I'm trying to parse the information from a log line with this format. 2021 Mar 30 00:45:01;1617075901;user1,gw11,0;user1,gw22,5;user2,gw33,2;user2;gw43,3 I'm using dissect to format the first part of the log, with… --- ## [Logstash Data not visible on coordinate map](https://discuss.elastic.co/t/logstash-data-not-visible-on-coordinate-map/137104)
**Author:** [@Venkatesan\_S\_Venkate](https://discuss.elastic.co/u/Venkatesan_S_Venkate)\ **Replies:** 16\ **Last updated:** [June 23, 2018, 10:25am UTC](https://discuss.elastic.co/t/logstash-data-not-visible-on-coordinate-map/137104 "2018-06-23T10:25:43Z")
I created the .conf file and executed through the log stash. It filters using the geo ip. It creates the data according to requirement. When I open Kibana and try to visualise in the coordinate map it is not visible ev… --- ## [Help on ---- remote server bulk load](https://discuss.elastic.co/t/help-on-remote-server-bulk-load/11445)
**Author:** [@mohammad\_rafi\_g](https://discuss.elastic.co/u/mohammad_rafi_g)\ **Replies:** 16\ **Last updated:** [May 27, 2013, 1:57pm UTC](https://discuss.elastic.co/t/help-on-remote-server-bulk-load/11445 "2013-05-27T13:57:46Z")
Hi to all. Subject: how to load bulk documents on our server machine\[my company server ip add is like xxx.xxx.x.251 \] from my local system\[my ip add add is xxx.xxx.x.182\]. actually… --- ## [Designing our log analytics solution - Few queries](https://discuss.elastic.co/t/designing-our-log-analytics-solution-few-queries/94645)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 9\ **Last updated:** [August 1, 2017, 10:16am UTC](https://discuss.elastic.co/t/designing-our-log-analytics-solution-few-queries/94645 "2017-08-01T10:16:31Z")
Hi, I have just started playing around with ELK to develop our log analytics solution. I had a few questions regarding the best practices so that I don't make any bad choice to begin with. This tool will analyze vario… --- ## [Threshold rule can't group by with source.ip but only with source.ip.keyword](https://discuss.elastic.co/t/threshold-rule-cant-group-by-with-source-ip-but-only-with-source-ip-keyword/317761)
**Author:** [@Simone\_Calo](https://discuss.elastic.co/u/Simone_Calo)\ **Replies:** 10\ **Last updated:** [November 8, 2022, 11:35am UTC](https://discuss.elastic.co/t/threshold-rule-cant-group-by-with-source-ip-but-only-with-source-ip-keyword/317761 "2022-11-08T11:35:36Z")
My problem consists in defining a threshold rule in the group by field. I can only enter source.ip.keyword and not source.ip. The consequence of this is that the rule fails every time with the following error: Bu… --- ## [Multiple Types within an Index](https://discuss.elastic.co/t/multiple-types-within-an-index/10230)
**Author:** [@Paulo\_Tioseco](https://discuss.elastic.co/u/Paulo_Tioseco)\ **Replies:** 13\ **Last updated:** [March 5, 2014, 5:12pm UTC](https://discuss.elastic.co/t/multiple-types-within-an-index/10230 "2014-03-05T17:12:39Z")
Hi All! I'm just learning Elasticsearch and currently going through the guide, it seems like you can create multiple types within an index. What is the use case of having multiple types within an index? Is it … --- ## [Returning substring in a GET request](https://discuss.elastic.co/t/returning-substring-in-a-get-request/11056)
**Author:** [@Anurag](https://discuss.elastic.co/u/Anurag)\ **Replies:** 11\ **Last updated:** [January 3, 2014, 5:02pm UTC](https://discuss.elastic.co/t/returning-substring-in-a-get-request/11056 "2014-01-03T17:02:37Z")
Hi! I was wondering if there was a way to return a substring (with offset & count) on a field in a GET request? The problem I am hitting is, I have the ID of the document, but I only want to retrieve N number of byt… --- ## [Elasticsearch error in running service JAVA error](https://discuss.elastic.co/t/elasticsearch-error-in-running-service-java-error/342782)
**Author:** [@1337](https://discuss.elastic.co/u/1337)\ **Replies:** 15\ **Last updated:** [September 15, 2023, 4:51am UTC](https://discuss.elastic.co/t/elasticsearch-error-in-running-service-java-error/342782 "2023-09-15T04:51:26Z")
systemctl status elasticsearch × elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Tue 2… --- ## [Ingested Pipelines](https://discuss.elastic.co/t/ingested-pipelines/259037)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 15\ **Last updated:** [December 17, 2020, 10:47pm UTC](https://discuss.elastic.co/t/ingested-pipelines/259037 "2020-12-17T22:47:57Z")
Hi! I've updated Elastic Stack and now I have an error and I don't know how to manage it. Before I was using ingested pipelines and everything was just fine and now when I want to use them again I get this error Cause… --- ## [Number of documents in an index](https://discuss.elastic.co/t/number-of-documents-in-an-index/44562)
**Author:** [@hgfxng](https://discuss.elastic.co/u/hgfxng)\ **Replies:** 10\ **Last updated:** [March 21, 2016, 4:03pm UTC](https://discuss.elastic.co/t/number-of-documents-in-an-index/44562 "2016-03-21T16:03:34Z")
Hi, I'm doing some load testing and I found something strange on ElasticSearch (2.2.0). I feed a single index with 104.690.000 documents. This index has only 2 shards. When I check the output of /\_cat/indices, I ge… --- ## [Multiline codec in filter](https://discuss.elastic.co/t/multiline-codec-in-filter/256520)
**Author:** [@shani](https://discuss.elastic.co/u/shani)\ **Replies:** 9\ **Last updated:** [November 24, 2020, 7:47pm UTC](https://discuss.elastic.co/t/multiline-codec-in-filter/256520 "2020-11-24T19:47:41Z")
Can I use a multiline codec in the filter? I've more than 10k+ files of 3 different patterns logs pattern on S3 bucket that will be fetched using input plugin. One log pattern requires a multiline codec before start pa… --- ## [File beat High Availability to avoid data loss and avoid duplicates records](https://discuss.elastic.co/t/file-beat-high-availability-to-avoid-data-loss-and-avoid-duplicates-records/349358)
**Author:** [@amjad](https://discuss.elastic.co/u/amjad)\ **Replies:** 11\ **Last updated:** [January 8, 2024, 12:32pm UTC](https://discuss.elastic.co/t/file-beat-high-availability-to-avoid-data-loss-and-avoid-duplicates-records/349358 "2024-01-08T12:32:39Z")
Dear Elastic Community, My main concern is to ensure high availability, avoiding duplicated results. Is it possible to have two Filebeats in two different server to cover for each other in case one of them fails, ensuri… --- ## [Cluster status turn yellow everyday morning 8:00](https://discuss.elastic.co/t/cluster-status-turn-yellow-everyday-morning-8-00/268036)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 17\ **Last updated:** [March 24, 2021, 3:10am UTC](https://discuss.elastic.co/t/cluster-status-turn-yellow-everyday-morning-8-00/268036 "2021-03-24T03:10:29Z")
ES version: 6.3.0 I get the pending tasks and thread pool status, here is the info: { "tasks": \[ { "insert\_order": 327314, "priority": "URGENT", "source": "create-index \[… --- ## [Massive performance drop for certain queries in ES9 compared to ES8](https://discuss.elastic.co/t/massive-performance-drop-for-certain-queries-in-es9-compared-to-es8/383393)
**Author:** [@msh](https://discuss.elastic.co/u/msh)\ **Replies:** 16\ **Last updated:** [December 2, 2025, 12:49pm UTC](https://discuss.elastic.co/t/massive-performance-drop-for-certain-queries-in-es9-compared-to-es8/383393 "2025-12-02T12:49:32Z")
We discovered a massive performance drop after migration to ES 9 for certain queries with aggregations. Our mapping an be seen here: INGe/inge\_es\_connector/src/main/resources/es\_index\_items.json at spring6 · MPDL/INGe ·… --- ## [Elastic APM - Plotting traceID start and end timestamps](https://discuss.elastic.co/t/elastic-apm-plotting-traceid-start-and-end-timestamps/338703)
**Author:** [@sangramreddy](https://discuss.elastic.co/u/sangramreddy)\ **Replies:** 10\ **Last updated:** [July 19, 2023, 2:55am UTC](https://discuss.elastic.co/t/elastic-apm-plotting-traceid-start-and-end-timestamps/338703 "2023-07-19T02:55:06Z")
We have bunch of applications through which a trace ID passes. We would like to calculate total time taken by the trace and plot them. Elastic APM UI doesn't show this information out of the box for asynchronous applica… --- ## [ElasticSearch DAU and MAU](https://discuss.elastic.co/t/elasticsearch-dau-and-mau/260405)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 9\ **Last updated:** [January 8, 2021, 6:34am UTC](https://discuss.elastic.co/t/elasticsearch-dau-and-mau/260405 "2021-01-08T06:34:24Z")
Hello Team In Kibana Visualisation Dashboard , we have option to get charts for DAU and MAU. I would like to check the query used by Kibana in background to get the data. My purpose is to get the query and use it in C… --- ## [ELK stack in windows 11](https://discuss.elastic.co/t/elk-stack-in-windows-11/330832)
**Author:** [@Sardor](https://discuss.elastic.co/u/Sardor)\ **Replies:** 15\ **Last updated:** [April 26, 2023, 1:11pm UTC](https://discuss.elastic.co/t/elk-stack-in-windows-11/330832 "2023-04-26T13:11:08Z")
I tried to install ELK stack, Elasticsearch, Logstash, Kibana. Elasticsearch and Kibana run succesfully, but logstash returned some exceptions. How can I fix it? This is last logs from logstash : \[2023-04-26T16:45:34,3… --- ## [Visualize in Kibana](https://discuss.elastic.co/t/visualize-in-kibana/94895)
**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\ **Replies:** 9\ **Last updated:** [August 11, 2017, 11:32am UTC](https://discuss.elastic.co/t/visualize-in-kibana/94895 "2017-08-11T11:32:08Z")
Hi Kibana team. I’m newbie at ELK stack, i just installed and run a first step and now i have a question: Is it possible to visualize the data by specify time everyday? for example i want to check hits log from 10-11h … --- ## [Error in initing input Filebeat](https://discuss.elastic.co/t/error-in-initing-input-filebeat/163840)
**Author:** [@Sripal](https://discuss.elastic.co/u/Sripal)\ **Replies:** 11\ **Last updated:** [January 22, 2019, 6:43am UTC](https://discuss.elastic.co/t/error-in-initing-input-filebeat/163840 "2019-01-22T06:43:41Z")
Dear All, Please help me to solve this issue Error bash-4.2$ ./filebeat test config -c filebeat.yml Config OK bash-4.2$ ./filebeat Exiting: Error in initing input: can not convert 'string' into 'bool' accessing 'fi… --- ## [Field count v. performance](https://discuss.elastic.co/t/field-count-v-performance/355439)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 10\ **Last updated:** [March 18, 2024, 8:50pm UTC](https://discuss.elastic.co/t/field-count-v-performance/355439 "2024-03-18T20:50:22Z")
Is indexing speed affected by the total number of fields in an index? I understand there are costs from a few areas: cluster state size disk efficiency Lucene resources And the "Mappings limit settings" doc says many… --- ## [Sample Threat Intel Module Filebeat.YML File that you can share?](https://discuss.elastic.co/t/sample-threat-intel-module-filebeat-yml-file-that-you-can-share/283071)
**Author:** [@tanner8302](https://discuss.elastic.co/u/tanner8302)\ **Replies:** 10\ **Last updated:** [September 3, 2021, 1:53pm UTC](https://discuss.elastic.co/t/sample-threat-intel-module-filebeat-yml-file-that-you-can-share/283071 "2021-09-03T13:53:36Z")
Has anyone got the Threat Feed in elastic working? If so could you share your filebeat.yml sample so that I can refer to it. I cannot get filebeat to start using the module samples provided by elastic. --- ## [Where should I move proxy nodes in ECE?](https://discuss.elastic.co/t/where-should-i-move-proxy-nodes-in-ece/193860)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 10\ **Last updated:** [August 6, 2019, 4:07pm UTC](https://discuss.elastic.co/t/where-should-i-move-proxy-nodes-in-ece/193860 "2019-08-06T16:07:17Z")
I just noticed Kibana was kind of slow in my current deployment, and I wasn't sure why. Maybe, I should have moved proxy nodes from coordinators to allocators. Any thoughts? If I don't want to deploy a dedicate node/s f… --- ## [Unassigned Shards](https://discuss.elastic.co/t/unassigned-shards/4552)
**Author:** [@Engagor](https://discuss.elastic.co/u/Engagor)\ **Replies:** 10\ **Last updated:** [June 4, 2011, 4:33pm UTC](https://discuss.elastic.co/t/unassigned-shards/4552 "2011-06-04T16:33:33Z")
Hi, After restarting a cluster, we see a very slow recovery of the shards. Custer health: { "active\_primary\_shards": 173, "active\_shards": 173, "cluster\_name": "engagor", "initializing\_shards":… --- ## [Fingerprint option in logstash filter not working properly?](https://discuss.elastic.co/t/fingerprint-option-in-logstash-filter-not-working-properly/295115)
**Author:** [@Anjali\_Kushwaha](https://discuss.elastic.co/u/Anjali_Kushwaha)\ **Replies:** 9\ **Last updated:** [January 24, 2022, 5:39am UTC](https://discuss.elastic.co/t/fingerprint-option-in-logstash-filter-not-working-properly/295115 "2022-01-24T05:39:37Z")
I have used below code but its only inserting one record to ES . filter { fingerprint { target =\> "document\_id" method =\> "SHA256" key =\> "9ced3827c6a1c9dafac6da9abac41386ba1038ac95b3a865a0951bc2e948c58c" … --- ## [Using drop to filter messages](https://discuss.elastic.co/t/using-drop-to-filter-messages/306158)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 10\ **Last updated:** [June 7, 2022, 1:24pm UTC](https://discuss.elastic.co/t/using-drop-to-filter-messages/306158 "2022-06-07T13:24:16Z")
Hi All, I am using grok filter to parse messages coming into Logstash from filebeat. We have ELK 7.6.2 stack. I need to filter out and process "only" the following message(s) in the gc log as follows. Note that pretty… --- ## [Current date jdbc plugin](https://discuss.elastic.co/t/current-date-jdbc-plugin/279154)
**Author:** [@Jakub\_Kaczmarek](https://discuss.elastic.co/u/Jakub_Kaczmarek)\ **Replies:** 9\ **Last updated:** [July 27, 2021, 4:12pm UTC](https://discuss.elastic.co/t/current-date-jdbc-plugin/279154 "2021-07-27T16:12:38Z")
Hi, is it possible to filter query inside jdbc input by CURRENT\_DATE? I have the following config: input { jdbc { statement =\> "SELECT userId, timestamp FROM users;" schedule =\> "\* \* \* \* \*" tags … --- ## [Snapshot creation to external fs runs into open file limit](https://discuss.elastic.co/t/snapshot-creation-to-external-fs-runs-into-open-file-limit/297132)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 11\ **Last updated:** [February 15, 2022, 2:51pm UTC](https://discuss.elastic.co/t/snapshot-creation-to-external-fs-runs-into-open-file-limit/297132 "2022-02-15T14:51:20Z")
Hi Elastic 7.16 How can I limit open file descriptors while creating snapshots..? My issue is, the external file share (hpe storeonce nfs share), we are using where to put our snapshots, it has open file handle limit.… --- ## [Couchdb\_changes gives Invalid FieldReference error when parsing couchdb which hosts couchapp](https://discuss.elastic.co/t/couchdb-changes-gives-invalid-fieldreference-error-when-parsing-couchdb-which-hosts-couchapp/214685)
**Author:** [@Raymond\_Tsang](https://discuss.elastic.co/u/Raymond_Tsang)\ **Replies:** 11\ **Last updated:** [January 17, 2020, 4:59pm UTC](https://discuss.elastic.co/t/couchdb-changes-gives-invalid-fieldreference-error-when-parsing-couchdb-which-hosts-couchapp/214685 "2020-01-17T16:59:58Z")
Here is the log: Jan 10 16:45:25 Andromeda logstash\[12489\]: \[2020-01-10T16:45:25,081\]\[INFO \]\[logstash.inputs.couchdbchanges\]\[main\] Connecting to CouchDB \_changes stream at: {:host=\>"localhost", :port=\>"5984", :db=\>"mate… --- ## [ES 1.3.4 scrolling never ends](https://discuss.elastic.co/t/es-1-3-4-scrolling-never-ends/20578)
**Author:** [@Yarden\_Bar](https://discuss.elastic.co/u/Yarden_Bar)\ **Replies:** 9\ **Last updated:** [November 12, 2014, 6:30pm UTC](https://discuss.elastic.co/t/es-1-3-4-scrolling-never-ends/20578 "2014-11-12T18:30:49Z")
Hi all, I'm encountering a strange behavior when executing a search-scroll on a single node of ES-1.3.4 with Java client. The scenario is as follows: 1. Start a single node of version 1.3.4 2. Add snaps… --- ## [Elastic Search query building logic](https://discuss.elastic.co/t/elastic-search-query-building-logic/156693)
**Author:** [@W.anjum](https://discuss.elastic.co/u/W.anjum)\ **Replies:** 12\ **Last updated:** [December 7, 2018, 1:58pm UTC](https://discuss.elastic.co/t/elastic-search-query-building-logic/156693 "2018-12-07T13:58:23Z")
I am working on building a report based on indexed documents. Following is the scenario of the report: Status field that contains two types of values (ERROR, OK) Destination field containing all the destination pho… --- ## [Adding GeoIP pipeline to APM data](https://discuss.elastic.co/t/adding-geoip-pipeline-to-apm-data/332035)
**Author:** [@Scott\_Chapman1](https://discuss.elastic.co/u/Scott_Chapman1)\ **Replies:** 15\ **Last updated:** [May 2, 2023, 7:02pm UTC](https://discuss.elastic.co/t/adding-geoip-pipeline-to-apm-data/332035 "2023-05-02T19:02:27Z")
Hi, We're essentially on ES 8.7 and I've interested on adding Geo Location data to our APM data from our Java application. I did see what I think is an old post that talked about it, but I suspect that a new mechanism w… --- ## [Group Element through query to use in Vega visualisation](https://discuss.elastic.co/t/group-element-through-query-to-use-in-vega-visualisation/270389)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 15\ **Last updated:** [April 21, 2021, 4:12pm UTC](https://discuss.elastic.co/t/group-element-through-query-to-use-in-vega-visualisation/270389 "2021-04-21T16:12:41Z")
Hi, I'm currently learning about query and stuffs. In order to do so I aim to have a vega visualisation that would allow me to visualise a per process memory usage. So far, i managed to do it using both Lens and TSVB.… --- ## [Data view in Kibana with the latest timestamp version of a datastream](https://discuss.elastic.co/t/data-view-in-kibana-with-the-latest-timestamp-version-of-a-datastream/345177)
**Author:** [@Mubolio](https://discuss.elastic.co/u/Mubolio)\ **Replies:** 11\ **Last updated:** [November 2, 2023, 1:34pm UTC](https://discuss.elastic.co/t/data-view-in-kibana-with-the-latest-timestamp-version-of-a-datastream/345177 "2023-11-02T13:34:41Z")
Hello, I have a datastream that it is often being updated, for some graphs I use the full data stream for visualizations, for example, doing histograms with the @timestamp field. But for other cases I would like to do g… --- ## [Disk utilisation behaviour when using a custom scoring script](https://discuss.elastic.co/t/disk-utilisation-behaviour-when-using-a-custom-scoring-script/74075)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 11\ **Last updated:** [February 7, 2017, 11:29am UTC](https://discuss.elastic.co/t/disk-utilisation-behaviour-when-using-a-custom-scoring-script/74075 "2017-02-07T11:29:36Z")
I have a custom native scoring script that is O(n) complexity. It takes a parameter, being a hash. It calculates a score for each document based on the euclidean distance between the hash parameter and the hash in the do… --- ## [Elasticsearch-reset-password returns error code 69](https://discuss.elastic.co/t/elasticsearch-reset-password-returns-error-code-69/373477)
**Author:** [@jimou](https://discuss.elastic.co/u/jimou)\ **Replies:** 14\ **Last updated:** [January 24, 2025, 12:44pm UTC](https://discuss.elastic.co/t/elasticsearch-reset-password-returns-error-code-69/373477 "2025-01-24T12:44:38Z")
I have installed elasticsearch-8.15.3-1.x86\_64 by following Install Elasticsearch with RPM | Elasticsearch Guide \[8.17\] | Elastic and I verified it is installed properly by $ sudo curl --cacert /etc/elasticsearch/certs… --- ## [Geojson loading error](https://discuss.elastic.co/t/geojson-loading-error/235137)
**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\ **Replies:** 11\ **Last updated:** [June 5, 2020, 8:43pm UTC](https://discuss.elastic.co/t/geojson-loading-error/235137 "2020-06-05T20:43:11Z")
Hello I've tried several times to load a geojson file into a index through Kibana import system. It gives me the preview of the polygons, creates a index, but the it returns me an error "Error performing fetch: Request… --- ## [Logstash stops getting events once in 3 days](https://discuss.elastic.co/t/logstash-stops-getting-events-once-in-3-days/274490)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 10\ **Last updated:** [June 7, 2021, 5:11pm UTC](https://discuss.elastic.co/t/logstash-stops-getting-events-once-in-3-days/274490 "2021-06-07T17:11:40Z")
We are using Logstash 7.4.2. Once in 3-4 days, Logstash stops processing events and its not parsing new events till we restart the service. We see only below error in log , :body=\>"{"error":{"root\_cause":\[{"type":"actio… --- ## [Make a chart field clickable + action](https://discuss.elastic.co/t/make-a-chart-field-clickable-action/307178)
**Author:** [@Marouene\_dakhlaoui](https://discuss.elastic.co/u/Marouene_dakhlaoui)\ **Replies:** 14\ **Last updated:** [June 17, 2022, 3:11pm UTC](https://discuss.elastic.co/t/make-a-chart-field-clickable-action/307178 "2022-06-17T15:11:29Z")
Hello, I currently have this simple table visualization created on Kibana.\* I would like to make it so that when I click on a path it opens up a popup to my local PC accessing the image in the path. As I am a new us… --- ## [Metricbeat Autodiscover Redis Module No Data](https://discuss.elastic.co/t/metricbeat-autodiscover-redis-module-no-data/214670)
**Author:** [@pooch](https://discuss.elastic.co/u/pooch)\ **Replies:** 11\ **Last updated:** [January 17, 2020, 8:38pm UTC](https://discuss.elastic.co/t/metricbeat-autodiscover-redis-module-no-data/214670 "2020-01-17T20:38:38Z")
For some reason I cannot pick up redis data using autodiscover for metricbeat. Auto discover for nginx is working just fine. I am running out of troubleshooting ideas. k8s version 1.14.6 metricbeats conf snip metricbe… --- ## [ES snapshots](https://discuss.elastic.co/t/es-snapshots/1281)
**Author:** [@it2](https://discuss.elastic.co/u/it2)\ **Replies:** 10\ **Last updated:** [May 28, 2015, 6:46am UTC](https://discuss.elastic.co/t/es-snapshots/1281 "2015-05-28T06:46:44Z")
Hello there! I have cluster with ES 1.3.8, kibana3 and Logstash 1.5.0 on board. I also have a remote space for snapshots. It's mounted by sshfs for whole cluster. but when I starting up a snapshot, my cluster is stopping… --- ## [How to split linux and windows data in two different indexes](https://discuss.elastic.co/t/how-to-split-linux-and-windows-data-in-two-different-indexes/143697)
**Author:** [@gabberoid](https://discuss.elastic.co/u/gabberoid)\ **Replies:** 9\ **Last updated:** [August 9, 2018, 2:49pm UTC](https://discuss.elastic.co/t/how-to-split-linux-and-windows-data-in-two-different-indexes/143697 "2018-08-09T14:49:50Z")
Hi. I created two conf file in /etc/logstash/conf.d for two hosts: Linux hosts with filebeat and windows hosts with winlogbeat. In output part I wrote two dofferent indexes in pattern: "linux-%{+YYYY.MM.dd}" and "windo… --- ## [Elasticsearch moving node out of cluster](https://discuss.elastic.co/t/elasticsearch-moving-node-out-of-cluster/254653)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 18\ **Last updated:** [November 10, 2020, 7:13am UTC](https://discuss.elastic.co/t/elasticsearch-moving-node-out-of-cluster/254653 "2020-11-10T07:13:08Z")
Hi I have a cluster by name "as\_elasticsearch" and I have deleted a node from that cluster as below curl -XPUT P.P.P.P:9200/\_cluster/settings -H 'Content-Type: application/json' -d '{ "transient" :{ "cluster.routing.… --- ## [Long gc pause happened on es1.7.0 plus jdk8u40](https://discuss.elastic.co/t/long-gc-pause-happened-on-es1-7-0-plus-jdk8u40/31949)
**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Replies:** 14\ **Last updated:** [October 14, 2015, 6:10pm UTC](https://discuss.elastic.co/t/long-gc-pause-happened-on-es1-7-0-plus-jdk8u40/31949 "2015-10-14T18:10:40Z")
22042 2015-10-10T10:36:44.751+0800: 1954567.631: \[GC (Allocation Failure) 1954567.631: \[ParNew: 1606667K-\>41270K(1763584 K), 1221.6222148 secs\] 5895406K-\>4332232K(16581312K), 1221.6230128 secs\] \[Times: user=11780.20… --- ## [Kibana Server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/281884)
**Author:** [@jaskaran](https://discuss.elastic.co/u/jaskaran)\ **Replies:** 17\ **Last updated:** [August 26, 2021, 2:25pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/281884 "2021-08-26T14:25:08Z")
Hi All, I have Kibana and Elasticserach running on one server, everything was working fine from last 1 year and just from past few weeks elasticserach is keep crashing, and now i am not able to access Kibana at all. Bel… --- ## [Significance of @timestamp in Index Patterns](https://discuss.elastic.co/t/significance-of-timestamp-in-index-patterns/370982)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 10\ **Last updated:** [November 23, 2024, 10:33pm UTC](https://discuss.elastic.co/t/significance-of-timestamp-in-index-patterns/370982 "2024-11-23T22:33:54Z")
Hi All, What is the significance of @timestamp field that populates by default in all indices in Kibana? I ask this question as this time differs with the recvdTime field that is set in the application and gets displ… --- ## [mTLS under basic license](https://discuss.elastic.co/t/mtls-under-basic-license/313375)
**Author:** [@Rohit\_Shrivastava](https://discuss.elastic.co/u/Rohit_Shrivastava)\ **Replies:** 10\ **Last updated:** [September 5, 2022, 2:09pm UTC](https://discuss.elastic.co/t/mtls-under-basic-license/313375 "2022-09-05T14:09:29Z")
Hi I am trying to setup mTLS and using basic license. However not able to understand how should I grant access to kibana CN? My goal is to create cert for kibana and use mTLS between elasticsearch and kibana. But for t… [Previous page](https://discuss.elastic.co/top.md?page=195&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=197&per_page=50&period=all)