# Top **URL:** https://discuss.elastic.co/top.md?page=197&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 198 --- ## [Initialize counter in logstash and replace the '%{\[message\]\[0\]}'?](https://discuss.elastic.co/t/initialize-counter-in-logstash-and-replace-the-message-0/304912)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 9\ **Last updated:** [May 17, 2022, 4:28pm UTC](https://discuss.elastic.co/t/initialize-counter-in-logstash-and-replace-the-message-0/304912 "2022-05-17T16:28:12Z")
Hi, after doing the split filter, so my message was an array ok, so %{\[message\]\[0\]} %{\[message\]\[1\]} ... that gives me their value fine. now I have an array of length 30 for example and I start the condition if {} examp… --- ## [Elastic ingest node load not balanced with pipeline](https://discuss.elastic.co/t/elastic-ingest-node-load-not-balanced-with-pipeline/301894)
**Author:** [@ss\_22](https://discuss.elastic.co/u/ss_22)\ **Replies:** 9\ **Last updated:** [April 19, 2022, 4:33pm UTC](https://discuss.elastic.co/t/elastic-ingest-node-load-not-balanced-with-pipeline/301894 "2022-04-19T16:33:41Z")
Hi, I have a ECK cluster with 6 data/ingest nodes. I also have an ingest node pipeline deployed and processing logs from Filebeat. While it is running I noticed only one node being utilized near 100% CPU where the other… --- ## [Logstash only reads files at startup](https://discuss.elastic.co/t/logstash-only-reads-files-at-startup/258224)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 10\ **Last updated:** [December 15, 2020, 7:22am UTC](https://discuss.elastic.co/t/logstash-only-reads-files-at-startup/258224 "2020-12-15T07:22:54Z")
Hello there, if got a problem with logstash reading files. In generall my input, filter and output is working. The files are generated and copied to the correct path, every hour but logstash doesn't read them, only on (… --- ## [Snmp input plugin doesn't show any activity when configuring snmpv3](https://discuss.elastic.co/t/snmp-input-plugin-doesnt-show-any-activity-when-configuring-snmpv3/158886)
**Author:** [@olivier974](https://discuss.elastic.co/u/olivier974)\ **Replies:** 9\ **Last updated:** [November 30, 2018, 3:25pm UTC](https://discuss.elastic.co/t/snmp-input-plugin-doesnt-show-any-activity-when-configuring-snmpv3/158886 "2018-11-30T15:25:58Z")
Hi all, I'm trying to get the snmp input plugin work using SNMPv3 and, if the plugin doesn't show any error on start up, It doesn't retreive any information either. I'm using logstash 6.5 with the following configurati… --- ## [Update ES2 to ES6 , it is very slowly when we reindex , there have any batter suggest for reindex?](https://discuss.elastic.co/t/update-es2-to-es6-it-is-very-slowly-when-we-reindex-there-have-any-batter-suggest-for-reindex/145745)
**Author:** [@showmeall](https://discuss.elastic.co/u/showmeall)\ **Replies:** 9\ **Last updated:** [August 24, 2018, 11:50am UTC](https://discuss.elastic.co/t/update-es2-to-es6-it-is-very-slowly-when-we-reindex-there-have-any-batter-suggest-for-reindex/145745 "2018-08-24T11:50:55Z")
update ES2 to ES6 , it is very slowly when we reindex , there have any batter suggest for reindex? we have two type in ES2 , and have 10T datas; we want update it to ES6 ; it is very slowly when we reindex each type in… --- ## [Need lots of Help with ELK](https://discuss.elastic.co/t/need-lots-of-help-with-elk/58528)
**Author:** [@Nimrod\_levy](https://discuss.elastic.co/u/Nimrod_levy)\ **Replies:** 9\ **Last updated:** [August 22, 2016, 6:48am UTC](https://discuss.elastic.co/t/need-lots-of-help-with-elk/58528 "2016-08-22T06:48:24Z")
Hi all, I am new to ELK, I have a system that collect system logs from appx 150 servers, all send syslog to one machine: its users 16 cores and 32gb of memory - networking running on a bond with 2 nics. its running on … --- ## [Logstash ConcurrentModificationException: null](https://discuss.elastic.co/t/logstash-concurrentmodificationexception-null/278759)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 10\ **Last updated:** [July 24, 2021, 5:53am UTC](https://discuss.elastic.co/t/logstash-concurrentmodificationexception-null/278759 "2021-07-24T05:53:22Z")
Hi, has anyone encountered this issue? Logstash instances keep restarting after a while with this error: \[2021-07-14T14:35:23,972\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>java.lang.Illeg… --- ## [Kibana bar chart doesn't work for filters aggregation](https://discuss.elastic.co/t/kibana-bar-chart-doesnt-work-for-filters-aggregation/263633)
**Author:** [@elster](https://discuss.elastic.co/u/elster)\ **Replies:** 10\ **Last updated:** [February 12, 2021, 9:31am UTC](https://discuss.elastic.co/t/kibana-bar-chart-doesnt-work-for-filters-aggregation/263633 "2021-02-12T09:31:00Z")
Dear experts, I created several Vega (lite) barcharts using this code: { $schema: https://vega.github.io/schema/vega-lite/v2.json title: Login Method Distribution data: { url: { } format: {property: "aggr… --- ## [Last run reflect in db is possible or not?](https://discuss.elastic.co/t/last-run-reflect-in-db-is-possible-or-not/138895)
**Author:** [@Gokul\_15](https://discuss.elastic.co/u/Gokul_15)\ **Replies:** 10\ **Last updated:** [July 6, 2018, 1:27pm UTC](https://discuss.elastic.co/t/last-run-reflect-in-db-is-possible-or-not/138895 "2018-07-06T13:27:12Z")
i have created config file in that i have coded such that for every 2mins my db is called ,it works perfectly... and i have have column name "date(TImestamp) in db : eg:2018-07-06 11:11:19.754371", i have to overwrite … --- ## [The default\_operator=AND not working with multi queries in elasticsearch](https://discuss.elastic.co/t/the-default-operator-and-not-working-with-multi-queries-in-elasticsearch/284151)
**Author:** [@Drsaud](https://discuss.elastic.co/u/Drsaud)\ **Replies:** 11\ **Last updated:** [September 15, 2021, 12:06pm UTC](https://discuss.elastic.co/t/the-default-operator-and-not-working-with-multi-queries-in-elasticsearch/284151 "2021-09-15T12:06:04Z")
I want to search for 2 queries in different fields using elasticsearch like this: http://localhost:9200/ncar\_index/ncar/\_search?q=approvetool:مرسوم ملكي AND category:الأنظمة&size=100&sort=date:desc&default\_operator=AND … --- ## [Kibana 6.8 crashes](https://discuss.elastic.co/t/kibana-6-8-crashes/199010)
**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\ **Replies:** 9\ **Last updated:** [October 17, 2019, 11:49pm UTC](https://discuss.elastic.co/t/kibana-6-8-crashes/199010 "2019-10-17T23:49:09Z")
Hi all, We are currently using Kibana 6.8 with basics license. And we are seeing Kibana crashes periodically. I am looking at the kiban.stdout log file and I am guessing is that related to the health check? Here are pa… --- ## [Strip\_HTML on indexing does not store results?](https://discuss.elastic.co/t/strip-html-on-indexing-does-not-store-results/4577)
**Author:** [@phobos182](https://discuss.elastic.co/u/phobos182)\ **Replies:** 9\ **Last updated:** [June 13, 2011, 7:43am UTC](https://discuss.elastic.co/t/strip-html-on-indexing-does-not-store-results/4577 "2011-06-13T07:43:48Z")
Here is a copy of my analyzer which includes the strip\_html character filter. When retrieving documents from a field stored with this analyzer, it looks like the HTML codes are still in the document. Does the strip\_html … --- ## [ELK 7.12.1 version ssl and tsl certificate issue](https://discuss.elastic.co/t/elk-7-12-1-version-ssl-and-tsl-certificate-issue/319411)
**Author:** [@Yog](https://discuss.elastic.co/u/Yog)\ **Replies:** 14\ **Last updated:** [November 29, 2022, 6:47pm UTC](https://discuss.elastic.co/t/elk-7-12-1-version-ssl-and-tsl-certificate-issue/319411 "2022-11-29T18:47:12Z")
I have 3 nodes , in that 1 is master node and 2 are child node , while enable ssl and tsl certificate i am getting an error : below is the error. at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.j… --- ## [ELK source tar balls](https://discuss.elastic.co/t/elk-source-tar-balls/16155)
**Author:** [@Tomasz\_Kloczko](https://discuss.elastic.co/u/Tomasz_Kloczko)\ **Replies:** 14\ **Last updated:** [March 6, 2014, 5:10pm UTC](https://discuss.elastic.co/t/elk-source-tar-balls/16155 "2014-03-06T17:10:40Z")
Hi, On http://www.elasticsearch.org/overview/elkdownloads/ I see only binary packages and tar balls with jar files. Q: Where I can find source code ELK tar balls and for example rpm spec files used on build noa… --- ## [Log Filtration Issue with Filebeat and Logstash Configuration](https://discuss.elastic.co/t/log-filtration-issue-with-filebeat-and-logstash-configuration/340609)
**Author:** [@Priyaansh\_Dwivedi](https://discuss.elastic.co/u/Priyaansh_Dwivedi)\ **Replies:** 18\ **Last updated:** [August 16, 2023, 6:02am UTC](https://discuss.elastic.co/t/log-filtration-issue-with-filebeat-and-logstash-configuration/340609 "2023-08-16T06:02:59Z")
Hello everyone, I'm using Filebeat to send three different logs to Logstash, where I'm applying parsing through filters. In the parsing process, I've taken into consideration the logs that are visible in the observation… --- ## [No logs for current timestamp shown in Disover tab](https://discuss.elastic.co/t/no-logs-for-current-timestamp-shown-in-disover-tab/355018)
**Author:** [@Ravi\_Pattar](https://discuss.elastic.co/u/Ravi_Pattar)\ **Replies:** 23\ **Last updated:** [March 15, 2024, 3:06pm UTC](https://discuss.elastic.co/t/no-logs-for-current-timestamp-shown-in-disover-tab/355018 "2024-03-15T15:06:04Z")
Hello, Most recently the security feature (xpack.security) was enabled and the changes were only in the elasticsearch.yml and kibana.yml. Because of this change it was possible to have the authentication while accessing… --- ## [Fix x-axis in Kibana 7.13.2](https://discuss.elastic.co/t/fix-x-axis-in-kibana-7-13-2/277918)
**Author:** [@ANKITA\_SAHA](https://discuss.elastic.co/u/ANKITA_SAHA)\ **Replies:** 10\ **Last updated:** [July 7, 2021, 5:28pm UTC](https://discuss.elastic.co/t/fix-x-axis-in-kibana-7-13-2/277918 "2021-07-07T17:28:04Z")
Hi i m new to kibana! I want help in making the x-axis static. I have two columns "no.of errors" and "hours". I have no.of errors in y-axis and in x-axis is hours . When i try to filter my data my x-axis gets filtered … --- ## [Split XML](https://discuss.elastic.co/t/split-xml/204949)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 12\ **Last updated:** [October 24, 2019, 4:14pm UTC](https://discuss.elastic.co/t/split-xml/204949 "2019-10-24T16:14:44Z")
I have an XML doc being sent to a logstash server/ELK server. This is the portion of the xml I'm trying to work with: \\\ \\\OMXEOC0\\\\\\100\\\\\\00E4\\\ \\\ \\\ **Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\ **Replies:** 11\ **Last updated:** [July 9, 2019, 7:01am UTC](https://discuss.elastic.co/t/kibana-timeouts-shard-failed-errors/189021 "2019-07-09T07:01:31Z") Hi Elastic search cluster details - 3x Master only nodes 3x Data nodes - 8GB Ram 8CPUs 1x Coordinator Node - 8GB Ram - 6GB Heap Heap size - 20GB Documents - 401,859,738 Indicies - 249 Primary Shard - 745 - 3 per… --- ## [Return ouput instead of using a hard true or false | Watcher](https://discuss.elastic.co/t/return-ouput-instead-of-using-a-hard-true-or-false-watcher/195942)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 12\ **Last updated:** [August 21, 2019, 1:42pm UTC](https://discuss.elastic.co/t/return-ouput-instead-of-using-a-hard-true-or-false-watcher/195942 "2019-08-21T13:42:23Z")
Hi all, Is there a way I can return my new array "list" instead of hard coding true? I know they both will come to the same outcome, however, I'm trying my best to not hard code anything which isn't necessary // Watch… --- ## [Multiple match in Grok filter logstash is not working](https://discuss.elastic.co/t/multiple-match-in-grok-filter-logstash-is-not-working/215874)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 14\ **Last updated:** [January 22, 2020, 11:24am UTC](https://discuss.elastic.co/t/multiple-match-in-grok-filter-logstash-is-not-working/215874 "2020-01-22T11:24:09Z")
Hello , My Grok filter looks like below grok { match =\> \["message","%{WORD:ACT\_SV\_NAME}%{SPACE}%{WORD:ACT\_CC\_Alias}%{SPACE}%{WORD:ACT\_CG\_ALIAS}%{SPACE}%{WORD:ACT\_Running\_Status}%{SPACE}%{GREEDYDATA:ACT\_OM\_Session}","… --- ## [Scatter plot with data from an index using drop down box to choose axes](https://discuss.elastic.co/t/scatter-plot-with-data-from-an-index-using-drop-down-box-to-choose-axes/195521)
**Author:** [@Nirajan](https://discuss.elastic.co/u/Nirajan)\ **Replies:** 14\ **Last updated:** [September 20, 2019, 9:40am UTC](https://discuss.elastic.co/t/scatter-plot-with-data-from-an-index-using-drop-down-box-to-choose-axes/195521 "2019-09-20T09:40:52Z")
Hello, Can anyone provide me any ideas to plot scatter plot with the data from an index? Without using drop down box (combo box), i am able to plot it. But when i want to change the axes to different index fields using… --- ## [High Availablity on Elastic Search](https://discuss.elastic.co/t/high-availablity-on-elastic-search/145199)
**Author:** [@amit.patra](https://discuss.elastic.co/u/amit.patra)\ **Replies:** 14\ **Last updated:** [August 23, 2018, 6:19pm UTC](https://discuss.elastic.co/t/high-availablity-on-elastic-search/145199 "2018-08-23T18:19:55Z")
Hi , I have installed and configured Elastic-search (Multi Node) Cluster on RHEL 6.9. Master : 192.168.2.79 Data-Node1 : 192.168.2.80 Data-Node2 : 192.168.2.81 How I make ES high available ?? Question 1 : If Data n… --- ## [Elasticsearch ILM Deleting an index is just a logical drop, but the index can still be used. Will it eventually be physically deleted](https://discuss.elastic.co/t/elasticsearch-ilm-deleting-an-index-is-just-a-logical-drop-but-the-index-can-still-be-used-will-it-eventually-be-physically-deleted/276071)
**Author:** [@liuliugang](https://discuss.elastic.co/u/liuliugang)\ **Replies:** 16\ **Last updated:** [June 17, 2021, 3:16am UTC](https://discuss.elastic.co/t/elasticsearch-ilm-deleting-an-index-is-just-a-logical-drop-but-the-index-can-still-be-used-will-it-eventually-be-physically-deleted/276071 "2021-06-17T03:16:23Z")
View index lifecycle management in Kibana The current phase is Delete and the current action is Complete thanks --- ## [MongoDB Native Connector in Enterprise Search](https://discuss.elastic.co/t/mongodb-native-connector-in-enterprise-search/322961)
**Author:** [@m.hanna](https://discuss.elastic.co/u/m.hanna)\ **Replies:** 9\ **Last updated:** [January 24, 2023, 2:23pm UTC](https://discuss.elastic.co/t/mongodb-native-connector-in-enterprise-search/322961 "2023-01-24T14:23:25Z")
I am trying to configure the MongoDB Connector in Enterprise Search to see if we can pull MongoDB collections into Elasticsearch Indices. I have Elasticsearch 8.6.0, Kibana 8.6.0, Enterprise Search 8.6.0, and MongoDB 6.0… --- ## [High performance](https://discuss.elastic.co/t/high-performance/267737)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 13\ **Last updated:** [March 29, 2021, 1:51pm UTC](https://discuss.elastic.co/t/high-performance/267737 "2021-03-29T13:51:54Z")
How can I increace high performance of ES? Is this possible to do high performance cluster? or cluster give me "only" data security / availability? Most important for me is not data stored in ES, but abiliti doing querie… --- ## [ML multi metric split filed only have keywork](https://discuss.elastic.co/t/ml-multi-metric-split-filed-only-have-keywork/280888)
**Author:** [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\ **Replies:** 12\ **Last updated:** [August 13, 2021, 9:38am UTC](https://discuss.elastic.co/t/ml-multi-metric-split-filed-only-have-keywork/280888 "2021-08-13T09:38:37Z")
I'm just a beginner of ML so I didn't know why this happened in my ELK. I want to create new job in multi metric so I following those step Pick "Fail login" search index Then pick multi metric -\> time range "use ful… --- ## [Recommended Hardware Specs & Sharding\\Index Strategy](https://discuss.elastic.co/t/recommended-hardware-specs-sharding-index-strategy/13151)
**Author:** [@David\_Arata](https://discuss.elastic.co/u/David_Arata)\ **Replies:** 12\ **Last updated:** [July 3, 2014, 12:04pm UTC](https://discuss.elastic.co/t/recommended-hardware-specs-sharding-index-strategy/13151 "2014-07-03T12:04:41Z")
Hi there, I am new to ElasticSearch and Lucene and have been prototyping my business case with a single node both locally and in AWS. I want to move to the next step and start building out an ES cluster in AWS. On… --- ## [Date\_histogram buckets not as expected](https://discuss.elastic.co/t/date-histogram-buckets-not-as-expected/76864)
**Author:** [@TanvirSidhu](https://discuss.elastic.co/u/TanvirSidhu)\ **Replies:** 9\ **Last updated:** [March 2, 2017, 7:02pm UTC](https://discuss.elastic.co/t/date-histogram-buckets-not-as-expected/76864 "2017-03-02T19:02:09Z")
So, I have a query for a date\_histogram for which, if I set the interval to 1d, the response is: "aggregations": { "received": { "buckets": \[ { "key\_as\_string": "2017-01-11T00… --- ## [Caused by: java.io.StreamCorruptedException: invalid internal transport message format, got (0,0,0,28);](https://discuss.elastic.co/t/caused-by-java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-0-0-0-28/311071)
**Author:** [@kingjianle](https://discuss.elastic.co/u/kingjianle)\ **Replies:** 11\ **Last updated:** [August 2, 2022, 3:22am UTC](https://discuss.elastic.co/t/caused-by-java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-0-0-0-28/311071 "2022-08-02T03:22:59Z")
Elasticsearch version (6.8.0): Plugins installed: \[elasticsearch-analysis-ik\]6.8.0 JVM version (java version "1.8.0\_333"): OS version (uname -a if on a Unix-like system):Linux localhost.localdomain 3.10.0-1160.el7.x86… --- ## [Monitoring Web Server Metrics training: issue to connect to kibana](https://discuss.elastic.co/t/monitoring-web-server-metrics-training-issue-to-connect-to-kibana/177049)
**Author:** [@Thibaut\_M](https://discuss.elastic.co/u/Thibaut_M)\ **Replies:** 11\ **Last updated:** [April 17, 2019, 1:03pm UTC](https://discuss.elastic.co/t/monitoring-web-server-metrics-training-issue-to-connect-to-kibana/177049 "2019-04-17T13:03:33Z")
Hello, I follow the course " Monitoring Web Server Metrics" but i can't connect to Kibana and therefore cannot pursue the Lab and training. I'm blocked in Lab 2 question 3. Could yo help me to setup Kibana. I don't kno… --- ## [ElasticSearch + Cassandra](https://discuss.elastic.co/t/elasticsearch-cassandra/4188)
**Author:** [@Drew\_Kutcharian](https://discuss.elastic.co/u/Drew_Kutcharian)\ **Replies:** 11\ **Last updated:** [April 6, 2011, 11:42pm UTC](https://discuss.elastic.co/t/elasticsearch-cassandra/4188 "2011-04-06T23:42:07Z")
Hi Everyone, Has anyone done/attempted to integrate ElasticSearch with Cassandra like was described at http://www.elasticsearch.org/blog/2010/02/25/nosql\_yessearch.html ? I don't mean using Cassandra as a Gateway… --- ## [Update to apm-server 7.9 increased my APM doc count (a Lot!)](https://discuss.elastic.co/t/update-to-apm-server-7-9-increased-my-apm-doc-count-a-lot/247791)
**Author:** [@Rodrigo\_Jimenez](https://discuss.elastic.co/u/Rodrigo_Jimenez)\ **Replies:** 13\ **Last updated:** [September 21, 2020, 1:28pm UTC](https://discuss.elastic.co/t/update-to-apm-server-7-9-increased-my-apm-doc-count-a-lot/247791 "2020-09-21T13:28:23Z")
Hi!, I've been using APM with elastic for some months now. Everything's is fine so far but about 2 weeks ago I updated from 7.5 to 7.9. I noticed since then that the amount of documents in my apm\* indices has grown, a lo… --- ## [Elastic APM IIS Universal Profiler for both .NET Core and .NET Framework](https://discuss.elastic.co/t/elastic-apm-iis-universal-profiler-for-both-net-core-and-net-framework/355981)
**Author:** [@onurcan](https://discuss.elastic.co/u/onurcan)\ **Replies:** 9\ **Last updated:** [March 28, 2024, 8:12am UTC](https://discuss.elastic.co/t/elastic-apm-iis-universal-profiler-for-both-net-core-and-net-framework/355981 "2024-03-28T08:12:34Z")
Hi, I have a specific case that I'm not sure how to move forward. In short, I'm trying to integrate Elastic APM to IIS as a universal profiler using Windows system environments. There're more than one applications runn… --- ## [How to extract the time stamp from](https://discuss.elastic.co/t/how-to-extract-the-time-stamp-from/348741)
**Author:** [@pero](https://discuss.elastic.co/u/pero)\ **Replies:** 20\ **Last updated:** [January 10, 2024, 5:24pm UTC](https://discuss.elastic.co/t/how-to-extract-the-time-stamp-from/348741 "2024-01-10T17:24:43Z")
Hi All, Please I need help on how to extract the timestamp from "type=SYSCALL msg=audit(1701877882.123:5786893): " in the below code using grok filter { "\_index": "auditbeat-2023.12.06", "\_type": "\_doc", "\_id": "… --- ## [Logstash 5.6.8 two outputs error](https://discuss.elastic.co/t/logstash-5-6-8-two-outputs-error/127561)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 14\ **Last updated:** [April 11, 2018, 8:45am UTC](https://discuss.elastic.co/t/logstash-5-6-8-two-outputs-error/127561 "2018-04-11T08:45:23Z")
output have two. one is output to es one is output to tcp (logstash is tcp client). when the tcp server is down ,but the es is online .can't bulk data into es why? and how slove it? --- ## [Unable to do cross cluster replication , Please help here](https://discuss.elastic.co/t/unable-to-do-cross-cluster-replication-please-help-here/328345)
**Author:** [@JayaPavani\_Pathakota](https://discuss.elastic.co/u/JayaPavani_Pathakota)\ **Replies:** 10\ **Last updated:** [March 24, 2023, 6:28am UTC](https://discuss.elastic.co/t/unable-to-do-cross-cluster-replication-please-help-here/328345 "2023-03-24T06:28:14Z")
I created two clusters in 2 data centers and I am trying to do cross cluster replication , in one of the cluster I configured leader index and in the other I did the remote configuration pointing to the cluster of leader… --- ## [Migration from OpenSearch1.1 to Elasticsearch7.18 using logstash](https://discuss.elastic.co/t/migration-from-opensearch1-1-to-elasticsearch7-18-using-logstash/343535)
**Author:** [@gaurav\_jain](https://discuss.elastic.co/u/gaurav_jain)\ **Replies:** 12\ **Last updated:** [October 5, 2023, 9:19pm UTC](https://discuss.elastic.co/t/migration-from-opensearch1-1-to-elasticsearch7-18-using-logstash/343535 "2023-10-05T21:19:25Z")
Hi Experts, I am trying to migrate my Opensearch cluster version 1.1 to elastic cloud 7.18. I have created a logstash pipeline for the same who's configuration looks like this : input { opensearch { hosts … --- ## [Logstash and Ruby](https://discuss.elastic.co/t/logstash-and-ruby/138555)
**Author:** [@dersoi](https://discuss.elastic.co/u/dersoi)\ **Replies:** 10\ **Last updated:** [July 10, 2018, 3:30pm UTC](https://discuss.elastic.co/t/logstash-and-ruby/138555 "2018-07-10T15:30:56Z")
Hello, I am trying to integrate a Ruby script into Logstash, but I am having a hard time... Basically, I have a field which I want to modify in Ruby and then give back to Logstash. What I'm having a hard time with is th… --- ## [Elasticsearch Cluster Performance Tuning Help required](https://discuss.elastic.co/t/elasticsearch-cluster-performance-tuning-help-required/157867)
**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\ **Replies:** 14\ **Last updated:** [December 2, 2018, 5:28am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-performance-tuning-help-required/157867 "2018-12-02T05:28:43Z")
Hi All, I have 3 nodes elastic cluster each node assigned with 1Tb hard disk, 15GB Ram and 4 CPU Elastic version using is 6.3.0. At the moment I have 3,304,624,313 documents using 2.1 TB disk space This data is colle… --- ## [Upgrading elk stack without stopping services using docker](https://discuss.elastic.co/t/upgrading-elk-stack-without-stopping-services-using-docker/245257)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 11\ **Last updated:** [August 18, 2020, 7:12am UTC](https://discuss.elastic.co/t/upgrading-elk-stack-without-stopping-services-using-docker/245257 "2020-08-18T07:12:21Z")
I have elk stack running on docker now the question is i want to upgrade to 7.8 version.Is there any way to upgrade the images of elk stack without stopping container ? --- ## [Problems with SCORE on Anomaly Detection JOB](https://discuss.elastic.co/t/problems-with-score-on-anomaly-detection-job/338600)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 10\ **Last updated:** [August 17, 2023, 8:32am UTC](https://discuss.elastic.co/t/problems-with-score-on-anomaly-detection-job/338600 "2023-08-17T08:32:38Z")
hi! I have this behavior The typical value was 18.3 and the Actual vale was 0. The anomaly score is too low and I should had received an anomaly alert but the score was wrong, so the alert was not fired. I also… --- ## [Can we index incremental data for files using FSCrawler?](https://discuss.elastic.co/t/can-we-index-incremental-data-for-files-using-fscrawler/193031)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 11\ **Last updated:** [August 2, 2019, 8:10am UTC](https://discuss.elastic.co/t/can-we-index-incremental-data-for-files-using-fscrawler/193031 "2019-08-02T08:10:19Z")
Hello, Currently i am using url parameter from .settings.yaml file. in url i have mentioned the path of the drive from which files are getting indexed. if any new file is added into the file system and if i want to ind… --- ## [POST a bulk to elasticsearch from datatables output](https://discuss.elastic.co/t/post-a-bulk-to-elasticsearch-from-datatables-output/161628)
**Author:** [@prajogo.atmaja](https://discuss.elastic.co/u/prajogo.atmaja)\ **Replies:** 10\ **Last updated:** [December 20, 2018, 9:04pm UTC](https://discuss.elastic.co/t/post-a-bulk-to-elasticsearch-from-datatables-output/161628 "2018-12-20T21:04:56Z")
Hello, I just installed elasticsearch today. I downloaded some stock market data from an exchange using curl and saved them as a json. I'm having trouble with uploading the json files to the elasticsearch. I'm trying to … --- ## [Increase track data with for range statement,but meet java.lang.ClassCastException](https://discuss.elastic.co/t/increase-track-data-with-for-range-statement-but-meet-java-lang-classcastexception/173885)
**Author:** [@Kevins\_Si](https://discuss.elastic.co/u/Kevins_Si)\ **Replies:** 9\ **Last updated:** [March 28, 2019, 2:34pm UTC](https://discuss.elastic.co/t/increase-track-data-with-for-range-statement-but-meet-java-lang-classcastexception/173885 "2019-03-28T14:34:47Z")
when do increase data with exists data, add for range statements,meet Execption when run rally test. ClassCastException as follow: warn 2019-03-26T14:32:20.001Z path: /geonames, params: {index=geonames} java.lang.Class… --- ## [Changing Maps Services to Openstreet maps](https://discuss.elastic.co/t/changing-maps-services-to-openstreet-maps/66606)
**Author:** [@TastyData](https://discuss.elastic.co/u/TastyData)\ **Replies:** 9\ **Last updated:** [November 21, 2016, 11:21pm UTC](https://discuss.elastic.co/t/changing-maps-services-to-openstreet-maps/66606 "2016-11-21T23:21:32Z")
In the previous version of Elasticsearch we were able to modify the scr/public/index.js file and use Openstreet maps, however we don't find the file anymore. (As described here: https://github.com/elastic/kibana/issues/… --- ## [Can role be picked from yml and user from API](https://discuss.elastic.co/t/can-role-be-picked-from-yml-and-user-from-api/188968)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 12\ **Last updated:** [July 9, 2019, 6:02am UTC](https://discuss.elastic.co/t/can-role-be-picked-from-yml-and-user-from-api/188968 "2019-07-09T06:02:05Z")
I am creating a user via curl and assigning a it a role which is defined in roles.yml. Is that a valid way of assigning roles? Do I have to create roles via curl also? --- ## [Logstash creates page file size that reaches its limit causing other pages to not be created](https://discuss.elastic.co/t/logstash-creates-page-file-size-that-reaches-its-limit-causing-other-pages-to-not-be-created/352200)
**Author:** [@tcapp24](https://discuss.elastic.co/u/tcapp24)\ **Replies:** 11\ **Last updated:** [February 1, 2024, 8:46pm UTC](https://discuss.elastic.co/t/logstash-creates-page-file-size-that-reaches-its-limit-causing-other-pages-to-not-be-created/352200 "2024-02-01T20:46:29Z")
We 're currently running Logstash 7.17.8 using a docker container on a Linux VM. We have run into an issue where Logstash creates page.0 which quickly fills up and reaches its queue.page\_capacity of 256mb. Once it reach… --- ## [Index deleted when putMapping is used twice](https://discuss.elastic.co/t/index-deleted-when-putmapping-is-used-twice/5654)
**Author:** [@Alexandre](https://discuss.elastic.co/u/Alexandre)\ **Replies:** 14\ **Last updated:** [October 24, 2011, 11:38am UTC](https://discuss.elastic.co/t/index-deleted-when-putmapping-is-used-twice/5654 "2011-10-24T11:38:18Z")
Hi ! I am developping a small library that integrates Morphia (MongoDB) and ElasticSearch using the ES java API. During application startup I use Annotated Entities to generate the ES index Mapping. Everything… --- ## [Elastic Index data](https://discuss.elastic.co/t/elastic-index-data/246011)
**Author:** [@daviddavid](https://discuss.elastic.co/u/daviddavid)\ **Replies:** 10\ **Last updated:** [August 26, 2020, 6:48pm UTC](https://discuss.elastic.co/t/elastic-index-data/246011 "2020-08-26T18:48:01Z")
I am trying to save data in to table which has relational mapping to another table. Using a spring java jpa project. When the tables are updated with data it works fine but the elastic indexes are not updated with mappe… [Previous page](https://discuss.elastic.co/top.md?page=196&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=198&per_page=50&period=all)