# Top

**URL:** https://discuss.elastic.co/top.md?page=206&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 207

---

## [Garbage collector question](https://discuss.elastic.co/t/garbage-collector-question/124776)

<div class="topic-metadata">

**Author:** [@michbsd](https://discuss.elastic.co/u/michbsd)\
**Replies:** 12\
**Last updated:** [March 22, 2018, 10:18am UTC](https://discuss.elastic.co/t/garbage-collector-question/124776 "2018-03-22T10:18:43Z")

</div>

Nodes: 3 Indices: 142 Memory: 17GB / 45GB Total Shards: 1284 Documents: 442,160,568 Data: 578GB Version: 5.3.0 Since a few days I am seeing a lot of these messages in the logfile: \[2018-03-20T14:35:04,269\]\[INFO \]…

---

## [Logstash not consuming logs from filebeat](https://discuss.elastic.co/t/logstash-not-consuming-logs-from-filebeat/141992)

<div class="topic-metadata">

**Author:** [@happycampo](https://discuss.elastic.co/u/happycampo)\
**Replies:** 10\
**Last updated:** [July 31, 2018, 7:19pm UTC](https://discuss.elastic.co/t/logstash-not-consuming-logs-from-filebeat/141992 "2018-07-31T19:19:37Z")

</div>

I have looked over all the threads and still have not been able to figure this out. Here is the output from filebeat debug On the logstash server when I run tcpdump I can see that it is communicating. The logs are wor…

---

## [Kibana is not working](https://discuss.elastic.co/t/kibana-is-not-working/136986)

<div class="topic-metadata">

**Author:** [@mohammedEssabri](https://discuss.elastic.co/u/mohammedEssabri)\
**Replies:** 11\
**Last updated:** [July 4, 2018, 1:54pm UTC](https://discuss.elastic.co/t/kibana-is-not-working/136986 "2018-07-04T13:54:07Z")

</div>

Dear team, I'm a new user in Kibana and it is not working in my machine, it shows the following exception: \[license\]\[xpack\] license information from the X-Pack plugin could not be obtained from Elasticsearch for the \[d…

---

## [Can Rollover API / ILM be used to keep only x days data in an index at any point of time](https://discuss.elastic.co/t/can-rollover-api-ilm-be-used-to-keep-only-x-days-data-in-an-index-at-any-point-of-time/341410)

<div class="topic-metadata">

**Author:** [@Aditya1996](https://discuss.elastic.co/u/Aditya1996)\
**Replies:** 14\
**Last updated:** [August 23, 2023, 6:44pm UTC](https://discuss.elastic.co/t/can-rollover-api-ilm-be-used-to-keep-only-x-days-data-in-an-index-at-any-point-of-time/341410 "2023-08-23T18:44:02Z")

</div>

I have read a few threads regarding this question , Most of them suggest using DeleteBy Query as Rollover API seems to delete/move to other phase the indices and create the new ones based on given condition. I could not…

---

## [Elasticsearch 7.10 durability permanent](https://discuss.elastic.co/t/elasticsearch-7-10-durability-permanent/314875)

<div class="topic-metadata">

**Author:** [@Michael\_Sanchez](https://discuss.elastic.co/u/Michael_Sanchez)\
**Replies:** 14\
**Last updated:** [September 22, 2022, 6:45pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-durability-permanent/314875 "2022-09-22T18:45:11Z")

</div>

Hello team, My Elasticsearch cluster v7.10 has the following error: reason" : "\[parent\] Data too large, data for \[\<http\_request\>\] would be \[17110531128/15.9gb\], which is larger than the limit of \[16320875724/15.1gb\], r…

---

## [Discovery zen ping and password protected ES](https://discuss.elastic.co/t/discovery-zen-ping-and-password-protected-es/154483)

<div class="topic-metadata">

**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\
**Replies:** 13\
**Last updated:** [November 1, 2018, 1:44pm UTC](https://discuss.elastic.co/t/discovery-zen-ping-and-password-protected-es/154483 "2018-11-01T13:44:59Z")

</div>

Any idea how does this work with password protected ES nodes? I'm just about to test it but I need to make backups first :wink:

---

## [Logstash docker cannot log into elasticsearch docker](https://discuss.elastic.co/t/logstash-docker-cannot-log-into-elasticsearch-docker/328336)

<div class="topic-metadata">

**Author:** [@kpankhurst](https://discuss.elastic.co/u/kpankhurst)\
**Replies:** 10\
**Last updated:** [April 17, 2023, 2:25pm UTC](https://discuss.elastic.co/t/logstash-docker-cannot-log-into-elasticsearch-docker/328336 "2023-04-17T14:25:01Z")

</div>

I have 2 dockers set up as follows: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:8.6.0 volumes: - ./config/elasticsearch/esdata:/usr/share/elasticsearch/data - ./config/elast…

---

## [Remote node cluster join](https://discuss.elastic.co/t/remote-node-cluster-join/271488)

<div class="topic-metadata">

**Author:** [@Makss39](https://discuss.elastic.co/u/Makss39)\
**Replies:** 12\
**Last updated:** [April 29, 2021, 9:31am UTC](https://discuss.elastic.co/t/remote-node-cluster-join/271488 "2021-04-29T09:31:40Z")

</div>

Hi, I've a 3 node cluster on my local network, it works like a charm. I just want to add a 4th node, but on another nework. But i'm not able to perform the discovery, my local master is well discovered by the remote no…

---

## [Logstash output not the same as grok debugger](https://discuss.elastic.co/t/logstash-output-not-the-same-as-grok-debugger/175258)

<div class="topic-metadata">

**Author:** [@markov](https://discuss.elastic.co/u/markov)\
**Replies:** 12\
**Last updated:** [April 9, 2019, 12:24pm UTC](https://discuss.elastic.co/t/logstash-output-not-the-same-as-grok-debugger/175258 "2019-04-09T12:24:35Z")

</div>

hello guys, my grok debugger pattern output doesn't look like the logstash output in kibana!! any idea ! here is in kibana :

---

## [Странное поведение inner\_hits при работе с has\_child](https://discuss.elastic.co/t/inner-hits-has-child/164627)

<div class="topic-metadata">

**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\
**Replies:** 12\
**Last updated:** [January 18, 2019, 5:14am UTC](https://discuss.elastic.co/t/inner-hits-has-child/164627 "2019-01-18T05:14:09Z")

</div>

Здравствуйте! Подскажите, пожалуйста, я наткнулся на странное поведение при работе с has\_child запросом. Дело в том, что в некоторых запросах у меня оказывается пустым массив inner\_hits.hits. Например, в запросе ниже, п…

---

## [Compared to Solr (with Solr Cloud), what is the advantage(s) of Elasticsearch?](https://discuss.elastic.co/t/compared-to-solr-with-solr-cloud-what-is-the-advantage-s-of-elasticsearch/15012)

<div class="topic-metadata">

**Author:** [@Daniel\_Guo](https://discuss.elastic.co/u/Daniel_Guo)\
**Replies:** 9\
**Last updated:** [December 31, 2013, 7:42pm UTC](https://discuss.elastic.co/t/compared-to-solr-with-solr-cloud-what-is-the-advantage-s-of-elasticsearch/15012 "2013-12-31T19:42:27Z")

</div>

I never used Apache Solr before, and I'm trying ElasticSearch in my project. The document of ES is a little scarce, but I have to explain to my supervisor why I chose ES over Solr. As far as I know, Solr (with Solr…

---

## [Running out of heap memory Elasticsearch](https://discuss.elastic.co/t/running-out-of-heap-memory-elasticsearch/254848)

<div class="topic-metadata">

**Author:** [@yasir\_khatri](https://discuss.elastic.co/u/yasir_khatri)\
**Replies:** 14\
**Last updated:** [November 11, 2020, 6:28pm UTC](https://discuss.elastic.co/t/running-out-of-heap-memory-elasticsearch/254848 "2020-11-11T18:28:16Z")

</div>

We are using single node of elasticsearch with 24 gb of heap memory. The rollover size is 75gb with 2 shards per index therefore single shard size is roughly 37.5 gb. We need to archive 8 Tb of data out of which 2 Tb ha…

---

## [Mapping/boosting problem](https://discuss.elastic.co/t/mapping-boosting-problem/8573)

<div class="topic-metadata">

**Author:** [@Uli\_Schimpfle](https://discuss.elastic.co/u/Uli_Schimpfle)\
**Replies:** 14\
**Last updated:** [April 16, 2014, 12:05pm UTC](https://discuss.elastic.co/t/mapping-boosting-problem/8573 "2014-04-16T12:05:34Z")

</div>

Hi, I'm new to ElasticSearch/Lucene and I have a question about boosting. I created a mapping which defines a "\_boost" field and I also have a "boost" property for one field of my two fields. If I understand it …

---

## [Rally 7.9.2 is not supported?](https://discuss.elastic.co/t/rally-7-9-2-is-not-supported/306331)

<div class="topic-metadata">

**Author:** [@Gsqsf](https://discuss.elastic.co/u/Gsqsf)\
**Replies:** 9\
**Last updated:** [June 3, 2022, 2:40pm UTC](https://discuss.elastic.co/t/rally-7-9-2-is-not-supported/306331 "2022-06-03T14:40:13Z")

</div>

Elasticsearch.exceptions.UnsupportedProductError: The client noticed that the server is not a supported distribution of Elasticsearch The Elasticsearch server version is 7.9.2. Tagline is "You Know, for Search" build\_…

---

## [Slack Integration with ELK stack](https://discuss.elastic.co/t/slack-integration-with-elk-stack/340657)

<div class="topic-metadata">

**Author:** [@sanjeev1895](https://discuss.elastic.co/u/sanjeev1895)\
**Replies:** 10\
**Last updated:** [August 26, 2023, 2:02am UTC](https://discuss.elastic.co/t/slack-integration-with-elk-stack/340657 "2023-08-26T02:02:40Z")

</div>

Hi I have installed the ELK Stack 8.9.0 in AWS Ubuntu Instance. I was configured the elk stack and it's working fine. So, I want to integrate the slack with elk stack and send the alert to slack channel if any 500 statu…

---

## [Delete old back indexes from alias](https://discuss.elastic.co/t/delete-old-back-indexes-from-alias/342439)

<div class="topic-metadata">

**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\
**Replies:** 11\
**Last updated:** [September 7, 2023, 5:32pm UTC](https://discuss.elastic.co/t/delete-old-back-indexes-from-alias/342439 "2023-09-07T17:32:45Z")

</div>

Hello! I use data streams for store data. And I have data stream alias. How I can automatically delete back indexes older 7 days from alias?

---

## [Dashboard variables set dynamically from a query](https://discuss.elastic.co/t/dashboard-variables-set-dynamically-from-a-query/379507)

<div class="topic-metadata">

**Author:** [@tallakh](https://discuss.elastic.co/u/tallakh)\
**Replies:** 14\
**Last updated:** [September 17, 2025, 10:13am UTC](https://discuss.elastic.co/t/dashboard-variables-set-dynamically-from-a-query/379507 "2025-09-17T10:13:39Z")

</div>

Hi! I'm looking for a feature that I don't think is possible to do now, but I hope it will come in the future. We are using Kibana dashboards to get insights into our sales performance. I want to be able set a variable …

---

## [Is Logstash executing config sequentially](https://discuss.elastic.co/t/is-logstash-executing-config-sequentially/146642)

<div class="topic-metadata">

**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\
**Replies:** 13\
**Last updated:** [September 22, 2018, 11:11am UTC](https://discuss.elastic.co/t/is-logstash-executing-config-sequentially/146642 "2018-09-22T11:11:07Z")

</div>

Hi there. I have two Elasticsearch clusters so Logstash has two output definitions for every index in the way like this: if \[type\] == "iis" { elasticsearch { hosts =\> \["NODE1:9200", "NODE2:9200"\] index =\> "logstas…

---

## [MongoDB logs are not reflecting in kibana dashboard](https://discuss.elastic.co/t/mongodb-logs-are-not-reflecting-in-kibana-dashboard/248493)

<div class="topic-metadata">

**Author:** [@vijay\_venky](https://discuss.elastic.co/u/vijay_venky)\
**Replies:** 10\
**Last updated:** [September 14, 2020, 2:36pm UTC](https://discuss.elastic.co/t/mongodb-logs-are-not-reflecting-in-kibana-dashboard/248493 "2020-09-14T14:36:39Z")

</div>

MongoDB logs are not reflecting in kibana dashboard MetricBeat YAML file is configured correctly and mongo DB YAML module enabled mongodb.yml: Module: mongodb Docs: https://www.elastic.co/guide/en/beats/metricbeat/6.8…

---

## [Cassandra river plugin installation issue](https://discuss.elastic.co/t/cassandra-river-plugin-installation-issue/15138)

<div class="topic-metadata">

**Author:** [@shamsul\_haque](https://discuss.elastic.co/u/shamsul_haque)\
**Replies:** 10\
**Last updated:** [June 20, 2014, 7:48pm UTC](https://discuss.elastic.co/t/cassandra-river-plugin-installation-issue/15138 "2014-06-20T19:48:17Z")

</div>

I have downloaded river from: https://github.com/eBay/cassandra-river change the settings in file: CassandraRiver.java as per my Cassandra setting: if (riverSettings.settings().containsKey("cassandra")) { …

---

## [Syslog pipeline =\> \[host\] error in ElasticSearch](https://discuss.elastic.co/t/syslog-pipeline-host-error-in-elasticsearch/262657)

<div class="topic-metadata">

**Author:** [@expressionlibre](https://discuss.elastic.co/u/expressionlibre)\
**Replies:** 11\
**Last updated:** [February 3, 2021, 10:32am UTC](https://discuss.elastic.co/t/syslog-pipeline-host-error-in-elasticsearch/262657 "2021-02-03T10:32:07Z")

</div>

Hi, Sorry may be a newbie question but, I read lots of treads and examples on the net to setup syslog pipeline but I still cannot make my logstash pipeline to function in ES. platform : CentOS 8.3. Epel versions for …

---

## [Strange issue with bulk(?) interface](https://discuss.elastic.co/t/strange-issue-with-bulk-interface/168661)

<div class="topic-metadata">

**Author:** [@jrandombob](https://discuss.elastic.co/u/jrandombob)\
**Replies:** 11\
**Last updated:** [February 19, 2019, 9:54am UTC](https://discuss.elastic.co/t/strange-issue-with-bulk-interface/168661 "2019-02-19T09:54:29Z")

</div>

ElasticSearch 6.3.4 Logstash 6.6.0 I'm in the process of ingesting a large amount of data into an ES index (several billion records), there's a lot of duplication in my input dataset so the first block was imported to …

---

## [Search timeouts during indexing](https://discuss.elastic.co/t/search-timeouts-during-indexing/284153)

<div class="topic-metadata">

**Author:** [@Drept](https://discuss.elastic.co/u/Drept)\
**Replies:** 10\
**Last updated:** [September 15, 2021, 8:49am UTC](https://discuss.elastic.co/t/search-timeouts-during-indexing/284153 "2021-09-15T08:49:06Z")

</div>

I have an index of around 90 million documents in Elasticsearch. I manage it via django-elasticsearch-dsl. The settings are the following: number\_of\_shards: 1 number\_of\_replicas: 0 The mapping is: { "series" : { …

---

## [Logstash TCP Zero Windows](https://discuss.elastic.co/t/logstash-tcp-zero-windows/351178)

<div class="topic-metadata">

**Author:** [@SilasMuniz1](https://discuss.elastic.co/u/SilasMuniz1)\
**Replies:** 17\
**Last updated:** [February 20, 2024, 6:22pm UTC](https://discuss.elastic.co/t/logstash-tcp-zero-windows/351178 "2024-02-20T18:22:21Z")

</div>

Hi everyone, I am receiving TCP Zero Windowns in my tcpdumps. I saw in other topics that problem is resolved change pipeline.workes in pipeline file. I am using tcp input in logstash and this input doesn't accepted thi…

---

## [How to specify a default value for my field in grok pattern match](https://discuss.elastic.co/t/how-to-specify-a-default-value-for-my-field-in-grok-pattern-match/349310)

<div class="topic-metadata">

**Author:** [@ameeto17](https://discuss.elastic.co/u/ameeto17)\
**Replies:** 9\
**Last updated:** [December 15, 2023, 5:53am UTC](https://discuss.elastic.co/t/how-to-specify-a-default-value-for-my-field-in-grok-pattern-match/349310 "2023-12-15T05:53:26Z")

</div>

I have a pattern to match using GROK Dec 14 03:13:01 ppddc1kfep302 my-checker: Context SHA of VSP Logger Software da39a3ee5e6b4b0d3255bfef95601890afd80709 I have the format below for the match %{SYSLOGTIMESTAMP}%{SPAC…

---

## [XML on Elasticsearch](https://discuss.elastic.co/t/xml-on-elasticsearch/142601)

<div class="topic-metadata">

**Author:** [@Fram\_Souza](https://discuss.elastic.co/u/Fram_Souza)\
**Replies:** 9\
**Last updated:** [August 1, 2018, 5:50pm UTC](https://discuss.elastic.co/t/xml-on-elasticsearch/142601 "2018-08-01T17:50:48Z")

</div>

Hi Guys! I need index file XML on cluster Elasticsearch, following a flux: S3 -\> Logstash -\> Elasticsearch I read about xpath on xml filter, BUT my xml is very large then I don't get map all xml I need that each fiel…

---

## [Coordinating Nodes High Circuit Breaker Tripped Counts](https://discuss.elastic.co/t/coordinating-nodes-high-circuit-breaker-tripped-counts/344161)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 11\
**Last updated:** [November 3, 2023, 2:37am UTC](https://discuss.elastic.co/t/coordinating-nodes-high-circuit-breaker-tripped-counts/344161 "2023-11-03T02:37:24Z")

</div>

Hi All, I'm curious if anyone has any ideas on an issue I'm seeing. I have a cluster of 33 nodes, 3 of these nodes are coordinating only nodes that handle all requests. I've been noticing that these coordinating nodes…

---

## [Increase in container memory when pipelines reload in logstash](https://discuss.elastic.co/t/increase-in-container-memory-when-pipelines-reload-in-logstash/338738)

<div class="topic-metadata">

**Author:** [@Nikhitha\_Karennagari](https://discuss.elastic.co/u/Nikhitha_Karennagari)\
**Replies:** 11\
**Last updated:** [August 2, 2023, 9:24am UTC](https://discuss.elastic.co/t/increase-in-container-memory-when-pipelines-reload-in-logstash/338738 "2023-08-02T09:24:02Z")

</div>

We have a service for which certificate renewal happens for every half an hour. Whenever the certificate renewal happens , when the change is detected in the certificates, automatic reload happens in logstash and all the…

---

## [Elasticsearch can not started：failed to find global metadata](https://discuss.elastic.co/t/elasticsearch-can-not-started-failed-to-find-global-metadata/287037)

<div class="topic-metadata">

**Author:** [@wangdwcsd](https://discuss.elastic.co/u/wangdwcsd)\
**Replies:** 9\
**Last updated:** [October 19, 2021, 1:02am UTC](https://discuss.elastic.co/t/elasticsearch-can-not-started-failed-to-find-global-metadata/287037 "2021-10-19T01:02:15Z")

</div>

After the master node is restarted, it cannot be started. The following errors are always reported in the log，Is there any way to enable the Elasticsearch instance to load metadata？ error log： \[2021-10-19T02:32:17,262\]…

---

## [Logstash adding extra comma to tags](https://discuss.elastic.co/t/logstash-adding-extra-comma-to-tags/58863)

<div class="topic-metadata">

**Author:** [@Josh\_Reichardt](https://discuss.elastic.co/u/Josh_Reichardt)\
**Replies:** 9\
**Last updated:** [August 25, 2016, 7:01pm UTC](https://discuss.elastic.co/t/logstash-adding-extra-comma-to-tags/58863 "2016-08-25T19:01:37Z")

</div>

I just started seeing this issue, I'm not quite sure what's up. I switched one of my environments to use the logstash+tcp functionality that recently got added to the logspout-logstash forwarder and noticed that an extra…

---

## [Importing MySQL in ES](https://discuss.elastic.co/t/importing-mysql-in-es/115126)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 10\
**Last updated:** [January 15, 2018, 3:32pm UTC](https://discuss.elastic.co/t/importing-mysql-in-es/115126 "2018-01-15T15:32:54Z")

</div>

Hi, I'm trying to enrich data I have in ES with data I have in a MySQL database. I have a unique id for my ES documents that I can use to reference the data in the SQL db. My ES data has just a uniqueid and time, and the…

---

## [Poll: Indexing speed?](https://discuss.elastic.co/t/poll-indexing-speed/3231)

<div class="topic-metadata">

**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\
**Replies:** 10\
**Last updated:** [August 23, 2010, 2:15am UTC](https://discuss.elastic.co/t/poll-indexing-speed/3231 "2010-08-23T02:15:16Z")

</div>

Hi All, Was curious what kind of indexing speed people are getting? I know there are a lot of variables here, but the data should still be useful to derive some trends. Here is where I am at. Speed: 5000 docs/…

---

## [Filebeat-\>Kafka-\>Logstash-\>Elasticsearch fails for system.auth: "Provided Grok expressions do not match field value"](https://discuss.elastic.co/t/filebeat-kafka-logstash-elasticsearch-fails-for-system-auth-provided-grok-expressions-do-not-match-field-value/323068)

<div class="topic-metadata">

**Author:** [@brsolomon](https://discuss.elastic.co/u/brsolomon)\
**Replies:** 11\
**Last updated:** [January 13, 2023, 11:46am UTC](https://discuss.elastic.co/t/filebeat-kafka-logstash-elasticsearch-fails-for-system-auth-provided-grok-expressions-do-not-match-field-value/323068 "2023-01-13T11:46:31Z")

</div>

The ingest scenario below perplexingly fails for the Filebeat system module with the auth fileset with Provided Grok expressions do not match field value. It doesn't matter what the event is from /var/log/secure; every s…

---

## [Problem with alerts recovered](https://discuss.elastic.co/t/problem-with-alerts-recovered/362036)

<div class="topic-metadata">

**Author:** [@iTiago](https://discuss.elastic.co/u/iTiago)\
**Replies:** 9\
**Last updated:** [March 4, 2025, 9:21pm UTC](https://discuss.elastic.co/t/problem-with-alerts-recovered/362036 "2025-03-04T21:21:31Z")

</div>

Friends, I have a problem with the recovery of my alerts related to my monitors, before the alerts when they were activated and the ping went down were recovered without problem, but now it is different, the alert is act…

---

## [The unusual syslog from cisco](https://discuss.elastic.co/t/the-unusual-syslog-from-cisco/104470)

<div class="topic-metadata">

**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\
**Replies:** 9\
**Last updated:** [October 19, 2017, 7:54am UTC](https://discuss.elastic.co/t/the-unusual-syslog-from-cisco/104470 "2017-10-19T07:54:06Z")

</div>

We have some cisco devices , all of them have the same syslog configuration. The normal format should like: \<187\>11640: PH18L1\_CS29SW01: Oct 19 09:11:45.797 GMT: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/13, chang…

---

## [Can't read jounrald logs set within a folder about beats' input -\> paths](https://discuss.elastic.co/t/cant-read-jounrald-logs-set-within-a-folder-about-beats-input-paths/359759)

<div class="topic-metadata">

**Author:** [@huanghaiqing1](https://discuss.elastic.co/u/huanghaiqing1)\
**Replies:** 16\
**Last updated:** [May 28, 2024, 12:30pm UTC](https://discuss.elastic.co/t/cant-read-jounrald-logs-set-within-a-folder-about-beats-input-paths/359759 "2024-05-28T12:30:49Z")

</div>

Here we setup a journald log server and set a folder as filebeat's input paths. The output is elasticsearch. But filebeat can't crawl every jounal files within that folder. When we clearly define each journal file's path…

---

## [Logstash connectively issue to elasticsearch](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501)

<div class="topic-metadata">

**Author:** [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\
**Replies:** 14\
**Last updated:** [April 30, 2020, 11:35am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501 "2020-04-30T11:35:18Z")

</div>

\[2020-04-30T00:45:37,515\]\[ERROR\]\[logstash.outputs.elasticsearch\] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk"} \[2020-04-30T00:45:4…

---

## [Migrating off ElasticSearch as sole primary database for a relational business domain — anyone done this?](https://discuss.elastic.co/t/migrating-off-elasticsearch-as-sole-primary-database-for-a-relational-business-domain-anyone-done-this/386137)

<div class="topic-metadata">

**Author:** [@lets\_get\_relational](https://discuss.elastic.co/u/lets_get_relational)\
**Replies:** 13\
**Last updated:** [May 15, 2026, 12:34pm UTC](https://discuss.elastic.co/t/migrating-off-elasticsearch-as-sole-primary-database-for-a-relational-business-domain-anyone-done-this/386137 "2026-05-15T12:34:16Z")

</div>

\# Migrating off Elasticsearch as sole primary database for a relational business domain — anyone done this? I've inherited a ~6 year old production Django application where Elasticsearch is the only data store. Not "ES …

---

## [GC failing to reduce heap memory usage](https://discuss.elastic.co/t/gc-failing-to-reduce-heap-memory-usage/11590)

<div class="topic-metadata">

**Author:** [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\
**Replies:** 9\
**Last updated:** [April 18, 2013, 1:31pm UTC](https://discuss.elastic.co/t/gc-failing-to-reduce-heap-memory-usage/11590 "2013-04-18T13:31:42Z")

</div>

Hi all, I've a situation where ES fails to reduce the heap usage in ES. When this happens, the logs say something like http://pb.abhijeetr.com/OaaB Indexing hangs, CPU which generally is at around 300% gets stuck …

---

## [Gets and searches operations using only Java client API](https://discuss.elastic.co/t/gets-and-searches-operations-using-only-java-client-api/10602)

<div class="topic-metadata">

**Author:** [@JJack\_PL](https://discuss.elastic.co/u/JJack_PL)\
**Replies:** 10\
**Last updated:** [February 26, 2013, 3:48pm UTC](https://discuss.elastic.co/t/gets-and-searches-operations-using-only-java-client-api/10602 "2013-02-26T15:48:19Z")

</div>

When I use Java client by: Node node = nodeBuilder().node(); Client client = node.client(); and using this client to "get operation" like: GetResponse response = client.prepareGet("twitter", "tweet", "1") …

---

## [Accessing elastic search from a network](https://discuss.elastic.co/t/accessing-elastic-search-from-a-network/215116)

<div class="topic-metadata">

**Author:** [@fekade](https://discuss.elastic.co/u/fekade)\
**Replies:** 12\
**Last updated:** [January 16, 2020, 7:35am UTC](https://discuss.elastic.co/t/accessing-elastic-search-from-a-network/215116 "2020-01-16T07:35:43Z")

</div>

I configured Elasticsearch and kibana 7.5.1 in windows server 2016 and working successfully. I need to access elasticsearch from the network but I couldn't please any one have some idea. kibana is accessible from the n…

---

## [cURL does not download the Elastic Agent, only on one of our sites in Amsterdam (otherwise cURL works fine)](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837)

<div class="topic-metadata">

**Author:** [@SedonD](https://discuss.elastic.co/u/SedonD)\
**Replies:** 9\
**Last updated:** [June 26, 2023, 12:37pm UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837 "2023-06-26T12:37:39Z")

</div>

Hi there, Has anyone ever encountered this issue, if so we would appreciate some guidance? Thanks in advance, Br, SedonD ++++edit: What I have seen so far....(something like this) and/or

---

## [Logstash can not write date into elasticsearch after activating elastic security](https://discuss.elastic.co/t/logstash-can-not-write-date-into-elasticsearch-after-activating-elastic-security/185340)

<div class="topic-metadata">

**Author:** [@PolterFox](https://discuss.elastic.co/u/PolterFox)\
**Replies:** 11\
**Last updated:** [June 17, 2019, 1:04am UTC](https://discuss.elastic.co/t/logstash-can-not-write-date-into-elasticsearch-after-activating-elastic-security/185340 "2019-06-17T01:04:57Z")

</div>

Hey guys, I´ve a problem with logstash. After activating the stack security, logstash can not write into elasticsearch. I´ve followed the instructions in the install guide and created a logstash\_internal user which ha…

---

## [Setting path.data stops the EC2 stuff](https://discuss.elastic.co/t/setting-path-data-stops-the-ec2-stuff/15010)

<div class="topic-metadata">

**Author:** [@Steinar\_Bang](https://discuss.elastic.co/u/Steinar_Bang)\
**Replies:** 12\
**Last updated:** [December 30, 2013, 8:55pm UTC](https://discuss.elastic.co/t/setting-path-data-stops-the-ec2-stuff/15010 "2013-12-30T20:55:27Z")

</div>

Platform: ES 0.9.7 on Ubuntu 12.04 on AWS EC2 instance I now have the EC2 clustering stuff working on itself. What I'm trying to do now, is index on ephemeral storage (where I have space) and save the index to s3,…

---

## [Packetbeat filter](https://discuss.elastic.co/t/packetbeat-filter/275087)

<div class="topic-metadata">

**Author:** [@luweijun](https://discuss.elastic.co/u/luweijun)\
**Replies:** 11\
**Last updated:** [July 6, 2021, 4:07pm UTC](https://discuss.elastic.co/t/packetbeat-filter/275087 "2021-07-06T16:07:41Z")

</div>

How does packetbeat filter its own data packets sent to es, because the server itself sends data to es:9200 in the collected data. How to filter the information in this part.

---

## [All spans grouped into "ServletWrappingController"](https://discuss.elastic.co/t/all-spans-grouped-into-servletwrappingcontroller/253765)

<div class="topic-metadata">

**Author:** [@fuleow](https://discuss.elastic.co/u/fuleow)\
**Replies:** 11\
**Last updated:** [November 4, 2020, 7:30am UTC](https://discuss.elastic.co/t/all-spans-grouped-into-servletwrappingcontroller/253765 "2020-11-04T07:30:58Z")

</div>

We are instrumenting our Spring Boot services using the latest Elastic APM Agent and in Kibana the traces are all grouped by their parent spans. Unfortunately this makes almost all spans grouped under "ServletWrappingCon…

---

## [Throttling plugin not working with lot of messages](https://discuss.elastic.co/t/throttling-plugin-not-working-with-lot-of-messages/300360)

<div class="topic-metadata">

**Author:** [@elmar.vonlanthen](https://discuss.elastic.co/u/elmar.vonlanthen)\
**Replies:** 10\
**Last updated:** [April 11, 2022, 2:45pm UTC](https://discuss.elastic.co/t/throttling-plugin-not-working-with-lot-of-messages/300360 "2022-04-11T14:45:02Z")

</div>

Hi all We use the plugin logstash-filter-throttle to reduce the number of logs of a certain type to one message per 5 minutes, to use them for some kind of health messages. filter { if \[labels\]\[input\_type\] and \[l…

---

## [Getting issue during running a api command](https://discuss.elastic.co/t/getting-issue-during-running-a-api-command/290142)

<div class="topic-metadata">

**Author:** [@Linuxuser](https://discuss.elastic.co/u/Linuxuser)\
**Replies:** 10\
**Last updated:** [December 2, 2021, 1:44pm UTC](https://discuss.elastic.co/t/getting-issue-during-running-a-api-command/290142 "2021-12-02T13:44:10Z")

</div>

http://192.168.1.211:9000/api/sources?range=36000&size=5000 By running this command getting issue. "ElasticsearchException{message=Unable to perform search query\\n\\n\[parent\] Data too large, data for \[\<transport\_request\>…

---

## [Cannot see any output on my kibana dashboard](https://discuss.elastic.co/t/cannot-see-any-output-on-my-kibana-dashboard/149650)

<div class="topic-metadata">

**Author:** [@pramodchoudhari](https://discuss.elastic.co/u/pramodchoudhari)\
**Replies:** 15\
**Last updated:** [September 24, 2018, 11:54am UTC](https://discuss.elastic.co/t/cannot-see-any-output-on-my-kibana-dashboard/149650 "2018-09-24T11:54:10Z")

</div>

This is my logstash.conf file:- input { beats { port =\> 5044 } } filter { if \[fields\]\[log\_type\] == "syslog" { grok { match =\> { "message" =\> "(#!TOT:)?(320:)(%{NUMBER:st1}:)\*%{NUMBER:st2} %{NUMBER:s…

---

## [Index configuration](https://discuss.elastic.co/t/index-configuration/4491)

<div class="topic-metadata">

**Author:** [@Yannick](https://discuss.elastic.co/u/Yannick)\
**Replies:** 15\
**Last updated:** [June 6, 2011, 9:02pm UTC](https://discuss.elastic.co/t/index-configuration/4491 "2011-06-06T21:02:24Z")

</div>

I'm trying to set a default index configuration in config/elastisearch.yml but for some reason it doesn't seem to get picked up. Can somebody spot the error? The ES doesn't seem to show an error when loading. Here is th…

[Previous page](https://discuss.elastic.co/top.md?page=205&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=207&per_page=50&period=all)
