# Top

**URL:** https://discuss.elastic.co/top.md?page=211&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 212

---

## [What is wrong with my JSON file? Why this is not being parsed?](https://discuss.elastic.co/t/what-is-wrong-with-my-json-file-why-this-is-not-being-parsed/163026)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 12\
**Last updated:** [January 5, 2019, 8:43am UTC](https://discuss.elastic.co/t/what-is-wrong-with-my-json-file-why-this-is-not-being-parsed/163026 "2019-01-05T08:43:59Z")

</div>

Hi team, I am writing my logs in json file and and input filter is json directly but those are being parsed correctly in elasticsearch? Any clue what I am missing here? Here is my json file {"org\_name": "google.com", …

---

## [Dangling links error](https://discuss.elastic.co/t/dangling-links-error/245601)

<div class="topic-metadata">

**Author:** [@keraghu](https://discuss.elastic.co/u/keraghu)\
**Replies:** 11\
**Last updated:** [August 31, 2020, 5:55pm UTC](https://discuss.elastic.co/t/dangling-links-error/245601 "2020-08-31T17:55:23Z")

</div>

Hi We have elastic search setup on docker swarm. The elastic search data nodes automatically restarted, but all the nodes did not up and running, then, we did manual retstart ( portainer) But now we are getting an da…

---

## [Logstash cannot connect to Elasticsearch](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch/356307)

<div class="topic-metadata">

**Author:** [@fclmkz](https://discuss.elastic.co/u/fclmkz)\
**Replies:** 13\
**Last updated:** [March 28, 2024, 6:51am UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch/356307 "2024-03-28T06:51:42Z")

</div>

Logstash cannot connect to Elasticsearch Logstash version is 8.12.2. Elasticsearch version the same. JVM: 21.0.2 when I launch logstash i get this message: Mar 27 16:42:07 elk.kaztoll.kz logstash\[9567\]: \[2024-03-27T1…

---

## [Aliases and indices on demand](https://discuss.elastic.co/t/aliases-and-indices-on-demand/298625)

<div class="topic-metadata">

**Author:** [@Metheny](https://discuss.elastic.co/u/Metheny)\
**Replies:** 10\
**Last updated:** [April 3, 2022, 1:08pm UTC](https://discuss.elastic.co/t/aliases-and-indices-on-demand/298625 "2022-04-03T13:08:08Z")

</div>

We have many indices in our system, and we're following the general guideline to create indices only on demand. We're also starting to use aliases to allow for rollover and for background data migrations (using the inde…

---

## [Pls help me: i insert log to elasticsearch, but it use too much memory, how to solve it?thanks](https://discuss.elastic.co/t/pls-help-me-i-insert-log-to-elasticsearch-but-it-use-too-much-memory-how-to-solve-it-thanks/15140)

<div class="topic-metadata">

**Author:** [@xjj210130](https://discuss.elastic.co/u/xjj210130)\
**Replies:** 15\
**Last updated:** [January 9, 2014, 10:49am UTC](https://discuss.elastic.co/t/pls-help-me-i-insert-log-to-elasticsearch-but-it-use-too-much-memory-how-to-solve-it-thanks/15140 "2014-01-09T10:49:30Z")

</div>

Dear all: I insert 10000 logs to elasticsearch, each log is about 2M, and there are about 3000 keys and values. when i insert about 20000, it used about 30G memory, and then elasticsearch is very slow, and …

---

## [Elastic Search configuration](https://discuss.elastic.co/t/elastic-search-configuration/23611)

<div class="topic-metadata">

**Author:** [@Hardik\_Dobariya](https://discuss.elastic.co/u/Hardik_Dobariya)\
**Replies:** 11\
**Last updated:** [May 13, 2015, 8:21am UTC](https://discuss.elastic.co/t/elastic-search-configuration/23611 "2015-05-13T08:21:51Z")

</div>

Please let me know if below elastic server configuration is feasible or not. Total 1 cluster with 3 nodes having 5 shards and 1 replica with multiple indices having total around 100 million data ,sizing 1tb and s…

---

## [Choosing Shards and Replica's configuration values](https://discuss.elastic.co/t/choosing-shards-and-replicas-configuration-values/3374)

<div class="topic-metadata">

**Author:** [@Paul\_Smith](https://discuss.elastic.co/u/Paul_Smith)\
**Replies:** 10\
**Last updated:** [January 25, 2011, 9:27pm UTC](https://discuss.elastic.co/t/choosing-shards-and-replicas-configuration-values/3374 "2011-01-25T21:27:03Z")

</div>

I may have missed it in the documentation, but I'm trying to work out in my own mind what I'd choose for the # Shards and # replicas if we migrated over our home grown lucene service. right now we don't actually have …

---

## [Difference between today's sales and yesterday's sales](https://discuss.elastic.co/t/difference-between-todays-sales-and-yesterdays-sales/308223)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 9\
**Last updated:** [July 6, 2022, 4:54pm UTC](https://discuss.elastic.co/t/difference-between-todays-sales-and-yesterdays-sales/308223 "2022-07-06T16:54:41Z")

</div>

We want to calculate the difference between today's sales and yesterday's sales. How can this be done with a Kibana Painless script within the Kibana user interface? Thanks..

---

## [After Updating Logstash to 7.7 from 7.6 regex isn't working the same](https://discuss.elastic.co/t/after-updating-logstash-to-7-7-from-7-6-regex-isnt-working-the-same/234012)

<div class="topic-metadata">

**Author:** [@chrisdm](https://discuss.elastic.co/u/chrisdm)\
**Replies:** 9\
**Last updated:** [May 26, 2020, 2:47am UTC](https://discuss.elastic.co/t/after-updating-logstash-to-7-7-from-7-6-regex-isnt-working-the-same/234012 "2020-05-26T02:47:46Z")

</div>

I recently updated to Logstash 7.7 from 7.6, after this update the following is occurring: A typical log line looks like this: 2019-10-02T04:00:09.254Z - ^\[\[32minfo^\[\[39m: Activity:content-finish 35692 When processing…

---

## [(ES 0.90.1) Cannot connect to elasticsearch cluster after a node is removed](https://discuss.elastic.co/t/es-0-90-1-cannot-connect-to-elasticsearch-cluster-after-a-node-is-removed/16343)

<div class="topic-metadata">

**Author:** [@deer](https://discuss.elastic.co/u/deer)\
**Replies:** 9\
**Last updated:** [March 14, 2014, 10:16am UTC](https://discuss.elastic.co/t/es-0-90-1-cannot-connect-to-elasticsearch-cluster-after-a-node-is-removed/16343 "2014-03-14T10:16:13Z")

</div>

Hi All, This is the log for the case. The node 10.1.4.196 is removed at 14:08 due to machine reboot, the client keeps trying to connect to the elasticsearch cluster but fails. Master Node : \[2014-03-08 14:08:…

---

## [ElasticSearch lucene queries VERSUS ElasticSearch query string](https://discuss.elastic.co/t/elasticsearch-lucene-queries-versus-elasticsearch-query-string/10453)

<div class="topic-metadata">

**Author:** [@john\_2](https://discuss.elastic.co/u/john_2)\
**Replies:** 9\
**Last updated:** [January 31, 2013, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-lucene-queries-versus-elasticsearch-query-string/10453 "2013-01-31T09:03:24Z")

</div>

Hi, I tried running Elastic search queries, in the Lucene-query format and also in the query string format. I found that the lucene queries were considerably faster than the query-string queries, approx. 4 times …

---

## [Need to define different index name](https://discuss.elastic.co/t/need-to-define-different-index-name/186451)

<div class="topic-metadata">

**Author:** [@Nishant\_Hurnekar](https://discuss.elastic.co/u/Nishant_Hurnekar)\
**Replies:** 12\
**Last updated:** [June 27, 2019, 1:59pm UTC](https://discuss.elastic.co/t/need-to-define-different-index-name/186451 "2019-06-27T13:59:40Z")

</div>

I am running with ELK cluster 5.6.16. My system as below Filebeat --\> Logstash --\> Elasticsearch (3 server in cluster) --\> KIbana I have few servers where many web vhosts are configured. From that server, I have con…

---

## [Indexing is getting slower and slower as it progresses](https://discuss.elastic.co/t/indexing-is-getting-slower-and-slower-as-it-progresses/371802)

<div class="topic-metadata">

**Author:** [@Raja95](https://discuss.elastic.co/u/Raja95)\
**Replies:** 30\
**Last updated:** [December 20, 2024, 4:25pm UTC](https://discuss.elastic.co/t/indexing-is-getting-slower-and-slower-as-it-progresses/371802 "2024-12-20T16:25:33Z")

</div>

I am trying to index 114mil rows of data with 150mil attachments from a PeopleSoft application to ES 6.1 (due to compatibility with PeopleSoft, can't upgrade to higher versions). Elastic Configuration: A single node (C…

---

## [Translog don't decrease quickly enough](https://discuss.elastic.co/t/translog-dont-decrease-quickly-enough/211807)

<div class="topic-metadata">

**Author:** [@Dou](https://discuss.elastic.co/u/Dou)\
**Replies:** 9\
**Last updated:** [December 18, 2019, 12:18pm UTC](https://discuss.elastic.co/t/translog-dont-decrease-quickly-enough/211807 "2019-12-18T12:18:55Z")

</div>

Hi, I'm currently upgrading from elastic 5.x to 7.x I'm now on 6.8.5 I have create some new indices with reindex by extracting document from previous one to split doc by \_type ( to keep only one type per index ) Eac…

---

## [How to set query params 'from' and 'size' in latest java api 8.11](https://discuss.elastic.co/t/how-to-set-query-params-from-and-size-in-latest-java-api-8-11/352162)

<div class="topic-metadata">

**Author:** [@Darth\_vader\_22](https://discuss.elastic.co/u/Darth_vader_22)\
**Replies:** 9\
**Last updated:** [January 31, 2024, 1:58pm UTC](https://discuss.elastic.co/t/how-to-set-query-params-from-and-size-in-latest-java-api-8-11/352162 "2024-01-31T13:58:38Z")

</div>

Hello, i'm trying to send a request with a specific from and size parameters , by default there are set to ( from=0 , size=10) . here's a snippet of my code where i construct my search query Query query = NativeQuery.…

---

## [Logstash configuration](https://discuss.elastic.co/t/logstash-configuration/295423)

<div class="topic-metadata">

**Author:** [@puneet\_makhija](https://discuss.elastic.co/u/puneet_makhija)\
**Replies:** 12\
**Last updated:** [January 27, 2022, 4:26pm UTC](https://discuss.elastic.co/t/logstash-configuration/295423 "2022-01-27T16:26:22Z")

</div>

Hello everyone, I am stuck in log stash configuration here below is my configuration please let me know what is wrong in this configuration # Sample Logstash configuration for creating a simple # Beats -\> Logstash -\> …

---

## [Kibana filter window](https://discuss.elastic.co/t/kibana-filter-window/283522)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 12\
**Last updated:** [September 10, 2021, 7:48am UTC](https://discuss.elastic.co/t/kibana-filter-window/283522 "2021-09-10T07:48:32Z")

</div>

Hi, In kibana (currently 7.14.1) we often use the filter window when working on the 'discover' pages. One chooses the concerning field, the operator and then in the past in the past the value field had a dropdown whi…

---

## [Elasticsearch & Kibana Audit logs](https://discuss.elastic.co/t/elasticsearch-kibana-audit-logs/319151)

<div class="topic-metadata">

**Author:** [@syed0510](https://discuss.elastic.co/u/syed0510)\
**Replies:** 11\
**Last updated:** [November 21, 2022, 5:47am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-audit-logs/319151 "2022-11-21T05:47:37Z")

</div>

Hi Team, Elasticsearch audit logs is taking 20 gb size everyday. Can you please help me to minimize the size of audit log file. Regards, Syed

---

## [Google Cloud Storage Repository Plugin - "state" : "PARTIAL"](https://discuss.elastic.co/t/google-cloud-storage-repository-plugin-state-partial/127225)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 10\
**Last updated:** [April 9, 2018, 4:40pm UTC](https://discuss.elastic.co/t/google-cloud-storage-repository-plugin-state-partial/127225 "2018-04-09T16:40:53Z")

</div>

Hello, I'm using Elastic (6.2.2) Stack w/ Google Cloud Storage Repository Plugin | Elasticsearch Plugins and Integrations. I keep getting "PARTIAL" instead of "SUCCESS" state of my snapshot: # time curl --silent --hea…

---

## [One line per year with monthly buckets in line chart](https://discuss.elastic.co/t/one-line-per-year-with-monthly-buckets-in-line-chart/321294)

<div class="topic-metadata">

**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\
**Replies:** 13\
**Last updated:** [December 15, 2022, 5:41pm UTC](https://discuss.elastic.co/t/one-line-per-year-with-monthly-buckets-in-line-chart/321294 "2022-12-15T17:41:47Z")

</div>

Hello, i have a line chart with a date histogram with monthly buckets on the horizontal axis. And a proportion of two cumulative sums on the vertical axis. Is there a way to overlay all years to have only a single y…

---

## [Does the server support streaming?](https://discuss.elastic.co/t/does-the-server-support-streaming/15148)

<div class="topic-metadata">

**Author:** [@Ryan\_Pedela](https://discuss.elastic.co/u/Ryan_Pedela)\
**Replies:** 9\
**Last updated:** [March 12, 2014, 3:27am UTC](https://discuss.elastic.co/t/does-the-server-support-streaming/15148 "2014-03-12T03:27:26Z")

</div>

Let's say I have a million documents I want to index. I am aware that you can index 100 documents at a time or 1000 at a time using the bulk API. However I could also write my HTTP client to stream all one million d…

---

## [Setting up Elastic search on Windows 11 machine](https://discuss.elastic.co/t/setting-up-elastic-search-on-windows-11-machine/361904)

<div class="topic-metadata">

**Author:** [@shreedaddy](https://discuss.elastic.co/u/shreedaddy)\
**Replies:** 10\
**Last updated:** [June 27, 2024, 12:33pm UTC](https://discuss.elastic.co/t/setting-up-elastic-search-on-windows-11-machine/361904 "2024-06-27T12:33:50Z")

</div>

I am trying to setup Elastic search on Windows 11 machine. Following instructions as outlined in: Setup, Run & Debug Elasticsearch Source Code in IntelliJ IDEA | Elastic Blog & CONTRIBUTING.md. After importing the proj…

---

## [A strange behavior we've encountered on our ELK](https://discuss.elastic.co/t/a-strange-behavior-weve-encountered-on-our-elk/22069)

<div class="topic-metadata">

**Author:** [@Yuval\_Khalifa](https://discuss.elastic.co/u/Yuval_Khalifa)\
**Replies:** 14\
**Last updated:** [February 15, 2015, 4:37am UTC](https://discuss.elastic.co/t/a-strange-behavior-weve-encountered-on-our-elk/22069 "2015-02-15T04:37:27Z")

</div>

Hi, We just installed an ELK server and configured the logstash configuration to match the data that we send to it and until last month it seems to be working fine but since then we see very strange behavior in th…

---

## [Who uses ES in production?](https://discuss.elastic.co/t/who-uses-es-in-production/4095)

<div class="topic-metadata">

**Author:** [@dpilato](https://discuss.elastic.co/u/dpilato)\
**Replies:** 12\
**Last updated:** [March 16, 2011, 7:35pm UTC](https://discuss.elastic.co/t/who-uses-es-in-production/4095 "2011-03-16T19:35:45Z")

</div>

Hello ;-) I would like to know if someone uses Elastic Search in production environment. If possible also to give me a feedback about the number of document indexed. It will be very useful for IT manag…

---

## [AWS metricbeat unable to load data in kibana](https://discuss.elastic.co/t/aws-metricbeat-unable-to-load-data-in-kibana/283416)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 9\
**Last updated:** [September 13, 2021, 12:19pm UTC](https://discuss.elastic.co/t/aws-metricbeat-unable-to-load-data-in-kibana/283416 "2021-09-13T12:19:00Z")

</div>

Hi , I am using metricbeat 7.14. IAM policy given for AWS billing and AWS.yml config file is as follows as stated in AWS billing metricset | Metricbeat Reference \[7.16\] | Elastic Step I followed to start aws and flo…

---

## [Kibana 3 index settings](https://discuss.elastic.co/t/kibana-3-index-settings/15076)

<div class="topic-metadata">

**Author:** [@spezam](https://discuss.elastic.co/u/spezam)\
**Replies:** 14\
**Last updated:** [February 28, 2014, 7:38pm UTC](https://discuss.elastic.co/t/kibana-3-index-settings/15076 "2014-02-28T19:38:22Z")

</div>

Hello, in Kibana 3 is possible to set from the dashboard settings, the index settings. I'm using for this a day based timestamping, with an index pattern such as \[dc1\_logstash-\]YYYY.MM.DD Now, we added a new data…

---

## [Indexing of HTML Column in an MS SQL Server 2014 database](https://discuss.elastic.co/t/indexing-of-html-column-in-an-ms-sql-server-2014-database/22314)

<div class="topic-metadata">

**Author:** [@Jiri\_Pik](https://discuss.elastic.co/u/Jiri_Pik)\
**Replies:** 13\
**Last updated:** [February 23, 2015, 4:19pm UTC](https://discuss.elastic.co/t/indexing-of-html-column-in-an-ms-sql-server-2014-database/22314 "2015-02-23T16:19:14Z")

</div>

I need to index a HTML column (nvarchar(MAX)) in a MS SQL Server database. I have set up a JDBC river https://github.com/jprante/elasticsearch-river-jdbc and the database is indexed. Using "settings":{ …

---

## [Different number of nodes/replicas/shards doesnt change performance](https://discuss.elastic.co/t/different-number-of-nodes-replicas-shards-doesnt-change-performance/57082)

<div class="topic-metadata">

**Author:** [@esoes](https://discuss.elastic.co/u/esoes)\
**Replies:** 9\
**Last updated:** [August 8, 2016, 1:55pm UTC](https://discuss.elastic.co/t/different-number-of-nodes-replicas-shards-doesnt-change-performance/57082 "2016-08-08T13:55:22Z")

</div>

I have tested my ES instance with 1-3 nodes, 3-5 shards, 1-2 replicas, performance is still the same. I am sending messages with 15 threads using single index or bulk with python script using http://elasticsearch-py.read…

---

## [My elasticsearch is not running with error code 128](https://discuss.elastic.co/t/my-elasticsearch-is-not-running-with-error-code-128/327892)

<div class="topic-metadata">

**Author:** [@Terry\_2018](https://discuss.elastic.co/u/Terry_2018)\
**Replies:** 9\
**Last updated:** [March 20, 2023, 6:54pm UTC](https://discuss.elastic.co/t/my-elasticsearch-is-not-running-with-error-code-128/327892 "2023-03-20T18:54:02Z")

</div>

Hi. I'm using Elasticsearch 8.6.2 on Ubuntu 22.04. Since a few days ago, my elastic is not running. Please help me. The system output is below. dev@logserver:~$ sudo systemctl status elasticsearch × elasticsearch.se…

---

## [Can't start elastic elasticsearch-8.9.0](https://discuss.elastic.co/t/cant-start-elastic-elasticsearch-8-9-0/339299)

<div class="topic-metadata">

**Author:** [@choilee](https://discuss.elastic.co/u/choilee)\
**Replies:** 10\
**Last updated:** [July 27, 2023, 10:00am UTC](https://discuss.elastic.co/t/cant-start-elastic-elasticsearch-8-9-0/339299 "2023-07-27T10:00:10Z")

</div>

I installed elasticsearch-8.9.0 on root account in centos 7 But couldn't start. i use this command "systemctl start elasticsearch.service" And i couldn't find any wrong Permission....help please...ㅠㅠ Jul 26 20:06:43 S…

---

## [Trouble configuring agent server](https://discuss.elastic.co/t/trouble-configuring-agent-server/197970)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 11\
**Last updated:** [September 9, 2019, 8:43am UTC](https://discuss.elastic.co/t/trouble-configuring-agent-server/197970 "2019-09-09T08:43:04Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.1.…

---

## [To control the log flows in kibana end through logstash config](https://discuss.elastic.co/t/to-control-the-log-flows-in-kibana-end-through-logstash-config/310499)

<div class="topic-metadata">

**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\
**Replies:** 16\
**Last updated:** [August 10, 2022, 8:57am UTC](https://discuss.elastic.co/t/to-control-the-log-flows-in-kibana-end-through-logstash-config/310499 "2022-08-10T08:57:32Z")

</div>

HI team, We have getting the huge logs when application team doing the Performance testing. At that time, Our cluster is not stable due to unable to handle the huge much of load. Could you please help us to control the…

---

## [Why ES node starts recovering all the data from other nodes after reboot?](https://discuss.elastic.co/t/why-es-node-starts-recovering-all-the-data-from-other-nodes-after-reboot/20881)

<div class="topic-metadata">

**Author:** [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)\
**Replies:** 16\
**Last updated:** [November 24, 2014, 6:53pm UTC](https://discuss.elastic.co/t/why-es-node-starts-recovering-all-the-data-from-other-nodes-after-reboot/20881 "2014-11-24T18:53:28Z")

</div>

I work on an experimental cluster of ES nodes running on Windows Server machines. Once in a while we have a need to reboot machines. The initial state - cluster is green and well balanced. One machine is gracefully t…

---

## [How to convert the Logstash message to fileds](https://discuss.elastic.co/t/how-to-convert-the-logstash-message-to-fileds/337910)

<div class="topic-metadata">

**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\
**Replies:** 15\
**Last updated:** [July 11, 2023, 9:17pm UTC](https://discuss.elastic.co/t/how-to-convert-the-logstash-message-to-fileds/337910 "2023-07-11T21:17:00Z")

</div>

Hi, I am using Logstash as a syslog server which sends data to elastic. here is the output. @timestampJul 7, 2023 @ 11:30:12.520@version1 hostname10.11.12.13 message {"proxyname":"test-123-abc","revision":"8","latency…

---

## [Need help with grok filtering](https://discuss.elastic.co/t/need-help-with-grok-filtering/142596)

<div class="topic-metadata">

**Author:** [@Victor\_Musa](https://discuss.elastic.co/u/Victor_Musa)\
**Replies:** 15\
**Last updated:** [August 8, 2018, 6:00pm UTC](https://discuss.elastic.co/t/need-help-with-grok-filtering/142596 "2018-08-08T18:00:40Z")

</div>

Hello everyone im working for several few days on loggind the f5 Big Data with Elk but the parsing of log its not working at all on logstash with Grok (and i don't find the patterns necesary for this), how would you matc…

---

## [Search first in one field and if not return result, search in all document](https://discuss.elastic.co/t/search-first-in-one-field-and-if-not-return-result-search-in-all-document/284047)

<div class="topic-metadata">

**Author:** [@castano\_guill](https://discuss.elastic.co/u/castano_guill)\
**Replies:** 9\
**Last updated:** [September 17, 2021, 10:54am UTC](https://discuss.elastic.co/t/search-first-in-one-field-and-if-not-return-result-search-in-all-document/284047 "2021-09-17T10:54:35Z")

</div>

Hello, I´m new in the community. Currently I ingest PDF documents to an index in elastic, in those documents I add custom fields of various information (state, short way of referring to it, etc, ..) I want to change m…

---

## [Logstash on Unix can't read Windows created Files](https://discuss.elastic.co/t/logstash-on-unix-cant-read-windows-created-files/130889)

<div class="topic-metadata">

**Author:** [@AloysiusParedes](https://discuss.elastic.co/u/AloysiusParedes)\
**Replies:** 9\
**Last updated:** [May 8, 2018, 5:53pm UTC](https://discuss.elastic.co/t/logstash-on-unix-cant-read-windows-created-files/130889 "2018-05-08T17:53:30Z")

</div>

Running Logstash as a service in a Linux Machine. Trying to send files from a mounted folder location (files created in Windows Environment). It seems that Logstash can't parse any files that were created in Windows, but…

---

## [Reindex API - Reference doc](https://discuss.elastic.co/t/reindex-api-reference-doc/103140)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 10\
**Last updated:** [October 8, 2017, 10:22am UTC](https://discuss.elastic.co/t/reindex-api-reference-doc/103140 "2017-10-08T10:22:46Z")

</div>

Hi, I'm trying to use the Reindex API to update an existing document, but I can't seem to find how to increment the value of the existing field with the value of the new document.

---

## [CPU Usage of elasticsearch process is almost 400% while doing performance Testing](https://discuss.elastic.co/t/cpu-usage-of-elasticsearch-process-is-almost-400-while-doing-performance-testing/14804)

<div class="topic-metadata">

**Author:** [@jsbonline2006](https://discuss.elastic.co/u/jsbonline2006)\
**Replies:** 9\
**Last updated:** [December 12, 2013, 10:25am UTC](https://discuss.elastic.co/t/cpu-usage-of-elasticsearch-process-is-almost-400-while-doing-performance-testing/14804 "2013-12-12T10:25:54Z")

</div>

Hi Team, I have following Setup of elastic search: ES Version: elasticsearch-0.90.7 I have one Index having 20k crawled web links. Machine Details: OS Version: Linux 2.6.32-300.4.1.el5uek Hardware: 6 x Intel(…

---

## [Analyzers and JSON](https://discuss.elastic.co/t/analyzers-and-json/22622)

<div class="topic-metadata">

**Author:** [@Austin\_Harmon](https://discuss.elastic.co/u/Austin_Harmon)\
**Replies:** 15\
**Last updated:** [March 13, 2015, 9:30pm UTC](https://discuss.elastic.co/t/analyzers-and-json/22622 "2015-03-13T21:30:50Z")

</div>

Hello, I'm trying to get an understand of the how to have full text search on the document and have the body of the document be considered during search. I understand how to do the mapping and use analyzers but wh…

---

## [Elastic search stops recording data after reaching a certain count](https://discuss.elastic.co/t/elastic-search-stops-recording-data-after-reaching-a-certain-count/123847)

<div class="topic-metadata">

**Author:** [@sunilkumar](https://discuss.elastic.co/u/sunilkumar)\
**Replies:** 12\
**Last updated:** [March 15, 2018, 8:17am UTC](https://discuss.elastic.co/t/elastic-search-stops-recording-data-after-reaching-a-certain-count/123847 "2018-03-15T08:17:04Z")

</div>

In Elasticsearch data is added till a certain count and then it stops processing after that point.

---

## [JSON input field](https://discuss.elastic.co/t/json-input-field/217007)

<div class="topic-metadata">

**Author:** [@Mbt\_Mbt](https://discuss.elastic.co/u/Mbt_Mbt)\
**Replies:** 13\
**Last updated:** [January 30, 2020, 1:23pm UTC](https://discuss.elastic.co/t/json-input-field/217007 "2020-01-30T13:23:32Z")

</div>

Good afternoon, I am trying to save the information contained in a field in independent fields for later analysis in kibana. I have tried actions of the json target, source plugin ... but I don't get any positive result…

---

## [Configuring and debugging anonmyous access to Elasticsearch](https://discuss.elastic.co/t/configuring-and-debugging-anonmyous-access-to-elasticsearch/306116)

<div class="topic-metadata">

**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\
**Replies:** 9\
**Last updated:** [June 14, 2022, 2:11pm UTC](https://discuss.elastic.co/t/configuring-and-debugging-anonmyous-access-to-elasticsearch/306116 "2022-06-14T14:11:21Z")

</div>

Hi everyone, I'm trying to configure our ES instance so that anonymous users can index documents (but not modify existing docs). Here's what I did: Enabled security xpack.security.enabled: true Configured a custom r…

---

## [Endpoint capability restriction error](https://discuss.elastic.co/t/endpoint-capability-restriction-error/281610)

<div class="topic-metadata">

**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\
**Replies:** 9\
**Last updated:** [August 30, 2021, 3:41pm UTC](https://discuss.elastic.co/t/endpoint-capability-restriction-error/281610 "2021-08-30T15:41:22Z")

</div>

We are on a 7.14 stack with 7.14 agent running. I'm seeing an error below which I've never seen before. It causes the Agent state to be degraded. I'm a bit unclear on the capability restriction 'I deny(\*) portion of the…

---

## [Cannot access to localhost but node has started](https://discuss.elastic.co/t/cannot-access-to-localhost-but-node-has-started/230492)

<div class="topic-metadata">

**Author:** [@yummycake](https://discuss.elastic.co/u/yummycake)\
**Replies:** 9\
**Last updated:** [May 3, 2020, 6:16am UTC](https://discuss.elastic.co/t/cannot-access-to-localhost-but-node-has-started/230492 "2020-05-03T06:16:39Z")

</div>

Cannot access to localhost to check Elasticsearch status Have already tried switching off the firewall. Still the same result. Currently running in docker in WS 2016 server. Elasticsearch 7.6.2. Here is the log \[2020-…

---

## [Port 80 is already in use. Another instance of Kibana may be running](https://discuss.elastic.co/t/port-80-is-already-in-use-another-instance-of-kibana-may-be-running/343939)

<div class="topic-metadata">

**Author:** [@Nghia\_D\_ng](https://discuss.elastic.co/u/Nghia_D_ng)\
**Replies:** 11\
**Last updated:** [October 4, 2023, 12:35pm UTC](https://discuss.elastic.co/t/port-80-is-already-in-use-another-instance-of-kibana-may-be-running/343939 "2023-10-04T12:35:11Z")

</div>

Hi team, I'm having problems with kibana Currently I have kibana configured with port 80 and displaying the web interface normally. But when I change to kibana's default port, I get an error and no longer display the w…

---

## [2 Node cluster hanging while bulk indexing and adding types](https://discuss.elastic.co/t/2-node-cluster-hanging-while-bulk-indexing-and-adding-types/6211)

<div class="topic-metadata">

**Author:** [@Greg\_Brown](https://discuss.elastic.co/u/Greg_Brown)\
**Replies:** 12\
**Last updated:** [January 11, 2012, 8:38pm UTC](https://discuss.elastic.co/t/2-node-cluster-hanging-while-bulk-indexing-and-adding-types/6211 "2012-01-11T20:38:17Z")

</div>

Hi, We're trying to index a few million responses to many (10000+) forms. We're creating a separate type for each form since they can have different fields. So each form is associated with a type named form- . I…

---

## [Shards getting bigger with updates (same number of documents)](https://discuss.elastic.co/t/shards-getting-bigger-with-updates-same-number-of-documents/264329)

<div class="topic-metadata">

**Author:** [@marcineq](https://discuss.elastic.co/u/marcineq)\
**Replies:** 13\
**Last updated:** [February 16, 2021, 8:42am UTC](https://discuss.elastic.co/t/shards-getting-bigger-with-updates-same-number-of-documents/264329 "2021-02-16T08:42:23Z")

</div>

Hi all I have a ES 7 cluster of couple of EC2 instances, the index has 6 shards and each shard has 2 replicas (so 1+2 x 6 = 18 shards for an index). When I create the index each shard size is around 25-30gb and we hold …

---

## [GeoIP issue on logstash conf file](https://discuss.elastic.co/t/geoip-issue-on-logstash-conf-file/354047)

<div class="topic-metadata">

**Author:** [@kriti\_dabas](https://discuss.elastic.co/u/kriti_dabas)\
**Replies:** 19\
**Last updated:** [February 25, 2024, 2:49pm UTC](https://discuss.elastic.co/t/geoip-issue-on-logstash-conf-file/354047 "2024-02-25T14:49:04Z")

</div>

\[ERROR\]\[logstash.filters.geoip \] Invalid setting for geoip filter plugin: filter { geoip { # This setting must be a path # File does not exist or cannot be opened ./usr/share/logstash/GeoLite2-City.m…

---

## [Reindex data is multiplying docs](https://discuss.elastic.co/t/reindex-data-is-multiplying-docs/296920)

<div class="topic-metadata">

**Author:** [@cris](https://discuss.elastic.co/u/cris)\
**Replies:** 13\
**Last updated:** [February 16, 2022, 12:21am UTC](https://discuss.elastic.co/t/reindex-data-is-multiplying-docs/296920 "2022-02-16T00:21:19Z")

</div>

Hello community! I am working with logstash to reindex some data, I have a problem when I run logstash.service the documents increase a lot in the new index, in the original index I have 3000 documents and I expect like…

[Previous page](https://discuss.elastic.co/top.md?page=210&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=212&per_page=50&period=all)
