# Top **URL:** https://discuss.elastic.co/top.md?page=220&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 221 --- ## [Get added documents immedately](https://discuss.elastic.co/t/get-added-documents-immedately/231463)
**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\ **Replies:** 12\ **Last updated:** [May 7, 2020, 11:04am UTC](https://discuss.elastic.co/t/get-added-documents-immedately/231463 "2020-05-07T11:04:34Z")
Hi everyone. I have an application that stores documents to the elasticsearch. Also, I have another web application and I want to show added documents to the elasticsearch immediately in a page (similar to a socket bet… --- ## [Help - Custom GeoIP Target / Updating Template/Index](https://discuss.elastic.co/t/help-custom-geoip-target-updating-template-index/255874)
**Author:** [@marcasino](https://discuss.elastic.co/u/marcasino)\ **Replies:** 9\ **Last updated:** [November 24, 2020, 10:48am UTC](https://discuss.elastic.co/t/help-custom-geoip-target-updating-template-index/255874 "2020-11-24T10:48:05Z")
Hi, I'm a beginner and have been trying to use the geoip function in logstash to allow me to visualise the IP addresses being blocked by my home firewall. However, I've now run into the problem that a number of people … --- ## [Keep other visualizations unchanged in a Kibana dashboard](https://discuss.elastic.co/t/keep-other-visualizations-unchanged-in-a-kibana-dashboard/186503)
**Author:** [@Nirajan](https://discuss.elastic.co/u/Nirajan)\ **Replies:** 9\ **Last updated:** [July 15, 2019, 6:17pm UTC](https://discuss.elastic.co/t/keep-other-visualizations-unchanged-in-a-kibana-dashboard/186503 "2019-07-15T18:17:21Z")
Hello Everyone, I would like to ask if it is possible to keep some visualizations unchanged or keep the values as it is in a dashboard (with few visualizations) after clicking on a pie chart? I have created a dashboard… --- ## [Cluster with packetbeat](https://discuss.elastic.co/t/cluster-with-packetbeat/330929)
**Author:** [@elastic\_user4](https://discuss.elastic.co/u/elastic_user4)\ **Replies:** 16\ **Last updated:** [May 2, 2023, 10:21am UTC](https://discuss.elastic.co/t/cluster-with-packetbeat/330929 "2023-05-02T10:21:24Z")
Hello, I'm trying to form a cluster and in this cluster I want to add several nodes and install packtbeat on each node. But when I do that, the data sent from packtbeat is shared across the entire cluster. Is there any w… --- ## [Boolean query with nested document](https://discuss.elastic.co/t/boolean-query-with-nested-document/7920)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 10\ **Last updated:** [June 7, 2012, 2:52pm UTC](https://discuss.elastic.co/t/boolean-query-with-nested-document/7920 "2012-06-07T14:52:54Z")
Currently to search nested fields I do something like: Is it possible to somehow say "fields.MRSSN1" instead of listing out the complete Path like "setModel.forms.forms.fields"? curl -XGET 'http://dslg1:9200/form… --- ## [Elasticsearch-head – new GUI up on GitHub](https://discuss.elastic.co/t/elasticsearch-head-new-gui-up-on-github/3785)
**Author:** [@Paul\_Smith](https://discuss.elastic.co/u/Paul_Smith)\ **Replies:** 11\ **Last updated:** [January 17, 2011, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-head-new-gui-up-on-github/3785 "2011-01-17T10:13:03Z")
Hi, just thought I'd pass on some info, one our our intrepid UI engineers at Aconex is building for us a useful in house tool to combine with our upcoming use of Flume-\>ElasticSearch, and we've licensed it under ASL 2.… --- ## [XML PARSED](https://discuss.elastic.co/t/xml-parsed/176903)
**Author:** [@Diego\_Gutierrez](https://discuss.elastic.co/u/Diego_Gutierrez)\ **Replies:** 13\ **Last updated:** [April 17, 2019, 2:21pm UTC](https://discuss.elastic.co/t/xml-parsed/176903 "2019-04-17T14:21:39Z")
\#ISSUE LOGSTASH PARSE XML Hi, I've a problem parsing xml response from API (http\_poller). I receive a weird xml response and idk how I can parse it. My file.conf is this: The API response is(postman image): I want… --- ## [Suspect GC sync'ed between nodes cause simultaneous performance hit](https://discuss.elastic.co/t/suspect-gc-synced-between-nodes-cause-simultaneous-performance-hit/4093)
**Author:** [@David\_Taylor](https://discuss.elastic.co/u/David_Taylor)\ **Replies:** 13\ **Last updated:** [March 16, 2011, 6:03am UTC](https://discuss.elastic.co/t/suspect-gc-synced-between-nodes-cause-simultaneous-performance-hit/4093 "2011-03-16T06:03:52Z")
Hi there, We're noticing occasional slow-downs in New Relic, with transactions slowed by waiting on elastic search. According to our monitoring, garbage collection appears to be spiking at the time of the slow-down… --- ## [Extracting string from log path](https://discuss.elastic.co/t/extracting-string-from-log-path/284748)
**Author:** [@Bkumar](https://discuss.elastic.co/u/Bkumar)\ **Replies:** 9\ **Last updated:** [September 22, 2021, 6:30pm UTC](https://discuss.elastic.co/t/extracting-string-from-log-path/284748 "2021-09-22T18:30:59Z")
Hi, As per requirement, i can't put the tag to filebeat to filter log path at logstash end. So only option left with me to filter the log path on the basis of string. Here is the sample log path- /opt/tomcat/instances… --- ## [Reducing number of shards in 6.5 ES](https://discuss.elastic.co/t/reducing-number-of-shards-in-6-5-es/245709)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 12\ **Last updated:** [August 26, 2020, 5:17am UTC](https://discuss.elastic.co/t/reducing-number-of-shards-in-6-5-es/245709 "2020-08-26T05:17:13Z")
I tried to reduce number of shards in ES 6.5 version from default(5) to 1 using 'PUT \_template/temp\_new1 { "index\_patterns" : \["test1-\*"\], "settings" : { "number\_of\_shards" : 1, "number\_of\_replicas" : 1 } }' It … --- ## [Latest download of Canvas for v6.6?](https://discuss.elastic.co/t/latest-download-of-canvas-for-v6-6/171823)
**Author:** [@Codeseer](https://discuss.elastic.co/u/Codeseer)\ **Replies:** 11\ **Last updated:** [March 11, 2019, 6:43pm UTC](https://discuss.elastic.co/t/latest-download-of-canvas-for-v6-6/171823 "2019-03-11T18:43:46Z")
Hi I am trying to find the latest link for Canvas that works with Kibana v6.6 but the Getting Started page does not seem to have a link. https://www.elastic.co/guide/en/kibana/current/canvas-getting-started.html The la… --- ## [Failed to get my heatbeat.yml to be used](https://discuss.elastic.co/t/failed-to-get-my-heatbeat-yml-to-be-used/255827)
**Author:** [@Fredrik\_Cronholm](https://discuss.elastic.co/u/Fredrik_Cronholm)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 2:05pm UTC](https://discuss.elastic.co/t/failed-to-get-my-heatbeat-yml-to-be-used/255827 "2020-12-03T14:05:55Z")
Hi! Tried it, but the pings (actually received to my clud instance) were to the default heartbeat.yml (2 http 2 icmp) inside the container (I believe that is what happened). In examples\\docker\\heartbeat.docker.yml: h… --- ## [Ingest with FSCrawler and open the file from path.real value](https://discuss.elastic.co/t/ingest-with-fscrawler-and-open-the-file-from-path-real-value/234227)
**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\ **Replies:** 10\ **Last updated:** [May 27, 2020, 2:23am UTC](https://discuss.elastic.co/t/ingest-with-fscrawler-and-open-the-file-from-path-real-value/234227 "2020-05-27T02:23:58Z")
Hi @dadoonet, i think i will direct the question to you since this is on FSCrawler. Am i able to set anything in the settings of FSCrawler to enable myself to be able to open the file that i ingested from the path.real … --- ## [Need help on grok filter](https://discuss.elastic.co/t/need-help-on-grok-filter/134575)
**Author:** [@retxedue](https://discuss.elastic.co/u/retxedue)\ **Replies:** 15\ **Last updated:** [June 25, 2018, 7:37am UTC](https://discuss.elastic.co/t/need-help-on-grok-filter/134575 "2018-06-25T07:37:46Z")
Hi guys, i would like to ask if what is the correct filter using grok syntax for below output sample.out hostname:server1.sgdc.company.net|ipaddress:1XX.XX.XXX.XX|status:ACTIVE hostname:server2.sgdc.company.net|ipadd… --- ## [Move Elastic Search from C: to D:](https://discuss.elastic.co/t/move-elastic-search-from-c-to-d/317051)
**Author:** [@inemer](https://discuss.elastic.co/u/inemer)\ **Replies:** 12\ **Last updated:** [November 4, 2022, 9:24am UTC](https://discuss.elastic.co/t/move-elastic-search-from-c-to-d/317051 "2022-11-04T09:24:31Z")
I was asking to research if it possible moving current installation of Kibana from C: drive to D: drive on our server. And if this possible is there Standard Operation Procedure (SOP) with description what step need to b… --- ## [Is the nodes load a criteria for shard allocation?](https://discuss.elastic.co/t/is-the-nodes-load-a-criteria-for-shard-allocation/352170)
**Author:** [@voharunado](https://discuss.elastic.co/u/voharunado)\ **Replies:** 17\ **Last updated:** [February 6, 2024, 12:06pm UTC](https://discuss.elastic.co/t/is-the-nodes-load-a-criteria-for-shard-allocation/352170 "2024-02-06T12:06:38Z")
Hi, I would like to know if Elasticsearch is taking the load of the nodes to decide how to reballance shards? I have seen cluster.routing.allocation.balance.write\_load in the documentation, but I'm not sure how that wor… --- ## [Count of Words (Text Based Search) Using Facets](https://discuss.elastic.co/t/count-of-words-text-based-search-using-facets/15441)
**Author:** [@Hiro\_Gangwani](https://discuss.elastic.co/u/Hiro_Gangwani)\ **Replies:** 9\ **Last updated:** [February 13, 2014, 3:08pm UTC](https://discuss.elastic.co/t/count-of-words-text-based-search-using-facets/15441 "2014-02-13T15:08:51Z")
Hi, We are indexing PDF, Word document in ES using attachment as type. Text based search is implemented using QueryBuilder and field query.Is it possible to get the count of words as defined in the search criteria f… --- ## [Logstash parsing same contents again and again](https://discuss.elastic.co/t/logstash-parsing-same-contents-again-and-again/126306)
**Author:** [@xsallowed](https://discuss.elastic.co/u/xsallowed)\ **Replies:** 10\ **Last updated:** [April 1, 2018, 4:46am UTC](https://discuss.elastic.co/t/logstash-parsing-same-contents-again-and-again/126306 "2018-04-01T04:46:15Z")
Hi All, I am having a weird problem. Logstash is parsing and indexing same contents of a file over and again after a certain time period. Sincedb\_path is note created. and if i let logstash run for days it the number of… --- ## [Shard Optimization - Size vs. Count](https://discuss.elastic.co/t/shard-optimization-size-vs-count/355822)
**Author:** [@algo](https://discuss.elastic.co/u/algo)\ **Replies:** 12\ **Last updated:** [March 20, 2024, 7:22pm UTC](https://discuss.elastic.co/t/shard-optimization-size-vs-count/355822 "2024-03-20T19:22:01Z")
Hi, We are looking to optimize the search rate and snapshot rate for two of our large indices. While we are exploring hardware improvements (I know the recommendation is to use locally attached SSDs), I am hoping to dis… --- ## [About elastic search .monitoring indexes 6.2.0](https://discuss.elastic.co/t/about-elastic-search-monitoring-indexes-6-2-0/155591)
**Author:** [@ortal\_pinhas](https://discuss.elastic.co/u/ortal_pinhas)\ **Replies:** 12\ **Last updated:** [November 8, 2018, 9:58am UTC](https://discuss.elastic.co/t/about-elastic-search-monitoring-indexes-6-2-0/155591 "2018-11-08T09:58:28Z")
hi, good evening, I wanted to know if the following scenario is a valid scenario from elastic search side. lets say i installed elastic search secure cluster by using xpack-\> .monitoring indexes created. now on same e… --- ## [REST Security Surface Area and Hardening ElasticSearch Installs](https://discuss.elastic.co/t/rest-security-surface-area-and-hardening-elasticsearch-installs/10858)
**Author:** [@Darren\_Rush](https://discuss.elastic.co/u/Darren_Rush)\ **Replies:** 9\ **Last updated:** [October 31, 2013, 3:25pm UTC](https://discuss.elastic.co/t/rest-security-surface-area-and-hardening-elasticsearch-installs/10858 "2013-10-31T15:25:46Z")
Now that ES is in the big leagues, I'd like to re-open a discussion about security, hardening and operational issues. Specifically, the position up until this point on security and authentication of any kind has bee… --- ## [8 node setup , 2 nodes not joining the cluster](https://discuss.elastic.co/t/8-node-setup-2-nodes-not-joining-the-cluster/311806)
**Author:** [@jeevan\_hedge](https://discuss.elastic.co/u/jeevan_hedge)\ **Replies:** 15\ **Last updated:** [August 17, 2022, 9:08am UTC](https://discuss.elastic.co/t/8-node-setup-2-nodes-not-joining-the-cluster/311806 "2022-08-17T09:08:50Z")
we are running 2 instances of elasticsearch (6.6.1 version) in 4 nodes forming 8 nodes cluster setup. When we check the cluster health , the output showing only 6 nodes. 2 nodes are not joining the cluster . and we see … --- ## [Official .NET client](https://discuss.elastic.co/t/official-net-client/14066)
**Author:** [@lasseschou](https://discuss.elastic.co/u/lasseschou)\ **Replies:** 11\ **Last updated:** [February 24, 2014, 11:08am UTC](https://discuss.elastic.co/t/official-net-client/14066 "2014-02-24T11:08:30Z")
Hi, According to your September blog post, http://www.elasticsearch.org/blog/unleash-the-clients-ruby-python-php-perl/, more official clients will be added "in the future". Have you got any concrete plans on r… --- ## [Insert hidden metadata in text?](https://discuss.elastic.co/t/insert-hidden-metadata-in-text/9936)
**Author:** [@A\_Zed](https://discuss.elastic.co/u/A_Zed)\ **Replies:** 13\ **Last updated:** [December 5, 2012, 8:12pm UTC](https://discuss.elastic.co/t/insert-hidden-metadata-in-text/9936 "2012-12-05T20:12:59Z")
Is it possible to insert some hidden metadata inside the text, so that it is not indexed; but retrieved in response to a query? I would like to annotate the text I'm indexing with some tags which I don't want index… --- ## [Query on Source only snapshot](https://discuss.elastic.co/t/query-on-source-only-snapshot/242919)
**Author:** [@jijo.john](https://discuss.elastic.co/u/jijo.john)\ **Replies:** 11\ **Last updated:** [August 11, 2020, 10:10am UTC](https://discuss.elastic.co/t/query-on-source-only-snapshot/242919 "2020-08-11T10:10:33Z")
Hello Team, I am currently testing snapshot and restore process in elasticsearch. After restoring a source only snapshot from s3 , it is not showing any doc counts and storage size. do we need to do any thing here to st… --- ## [Geo-polygon query inside ingest pipeline](https://discuss.elastic.co/t/geo-polygon-query-inside-ingest-pipeline/274886)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 9\ **Last updated:** [June 10, 2021, 12:00pm UTC](https://discuss.elastic.co/t/geo-polygon-query-inside-ingest-pipeline/274886 "2021-06-10T12:00:45Z")
Hey, I want to use the Geo-polygon query (Geo-polygon query | Elasticsearch Guide \[7.13\] | Elastic) inside an ingest pipeline and I've been thinking how to do it - as there is no query processor and the example for the … --- ## [Data is not coming through in Elastic](https://discuss.elastic.co/t/data-is-not-coming-through-in-elastic/365296)
**Author:** [@alexvp](https://discuss.elastic.co/u/alexvp)\ **Replies:** 10\ **Last updated:** [August 22, 2024, 9:22am UTC](https://discuss.elastic.co/t/data-is-not-coming-through-in-elastic/365296 "2024-08-22T09:22:51Z")
Hello, I am running the Elastic stack in docker desktop. This if the flow my data goes through : Filebeats -\> Logstash -\> Elastic However, when logstash is sending data to elastic I dont see any indexes being created… --- ## [How can create index name automatically by filebeat?](https://discuss.elastic.co/t/how-can-create-index-name-automatically-by-filebeat/361344)
**Author:** [@alex\_zolat](https://discuss.elastic.co/u/alex_zolat)\ **Replies:** 12\ **Last updated:** [June 13, 2024, 12:07pm UTC](https://discuss.elastic.co/t/how-can-create-index-name-automatically-by-filebeat/361344 "2024-06-13T12:07:26Z")
My filebeat is working now want to know how can config it to create it index automatically with hostname ? my configuration is such as folllow : ###################### Filebeat Configuration Example ###################… --- ## [What is the correct setup needed for remote cluster?](https://discuss.elastic.co/t/what-is-the-correct-setup-needed-for-remote-cluster/167099)
**Author:** [@nikhil.k](https://discuss.elastic.co/u/nikhil.k)\ **Replies:** 11\ **Last updated:** [February 6, 2019, 8:42am UTC](https://discuss.elastic.co/t/what-is-the-correct-setup-needed-for-remote-cluster/167099 "2019-02-06T08:42:25Z")
Hi Everyone, Elasticsearch version - 6.4.1 Can we have the remote cluster with two nodes which are present in the same cluster (i.e node1 (active master node) and node2 in cluster (cluster name: cluster1))? The reason… --- ## [Unable to import ndjson file into kibana bashboard using API](https://discuss.elastic.co/t/unable-to-import-ndjson-file-into-kibana-bashboard-using-api/360670)
**Author:** [@koushii](https://discuss.elastic.co/u/koushii)\ **Replies:** 9\ **Last updated:** [June 3, 2024, 6:47am UTC](https://discuss.elastic.co/t/unable-to-import-ndjson-file-into-kibana-bashboard-using-api/360670 "2024-06-03T06:47:55Z")
Hey Everyone, I'm stuck at a point of importing dashboard(ndjson) file which I exported into kibana using API. I've tried below commands as per AWS Official documentation. curl -X POST https://\/\_plugin/kib… --- ## [Elasticsearch river for postgres](https://discuss.elastic.co/t/elasticsearch-river-for-postgres/18322)
**Author:** [@Jorge\_von\_Rudno](https://discuss.elastic.co/u/Jorge_von_Rudno)\ **Replies:** 9\ **Last updated:** [June 26, 2014, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-river-for-postgres/18322 "2014-06-26T12:52:22Z")
Dear colleagues, I just start to work with ES and after read the documentation, I am trying to load the data from my postgres db. To do this I found that the plugin river jdbc should be work for this purpose. Aft… --- ## [Fleet giving error | unable to initialize fleet](https://discuss.elastic.co/t/fleet-giving-error-unable-to-initialize-fleet/326337)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 10\ **Last updated:** [March 31, 2023, 9:48am UTC](https://discuss.elastic.co/t/fleet-giving-error-unable-to-initialize-fleet/326337 "2023-03-31T09:48:00Z")
getting this error sometimes in FLEET resource\_already\_exists\_exception: \[resource\_already\_exists\_exception\] reason: task with id {endpoint.metadata\_current-default-8.6.1} already exist --- ## [Nothing under Security will load all of a sudden](https://discuss.elastic.co/t/nothing-under-security-will-load-all-of-a-sudden/287948)
**Author:** [@plaroche0](https://discuss.elastic.co/u/plaroche0)\ **Replies:** 10\ **Last updated:** [December 10, 2021, 12:50am UTC](https://discuss.elastic.co/t/nothing-under-security-will-load-all-of-a-sudden/287948 "2021-12-10T00:50:02Z")
All of a sudden nothing will load under the Security section of our Elastic instance. Everything else works fine. If I try to use anything under Security I just get the elastic logo. I have no idea where to begin troub… --- ## [Regarding path.real](https://discuss.elastic.co/t/regarding-path-real/236853)
**Author:** [@galvin1234](https://discuss.elastic.co/u/galvin1234)\ **Replies:** 10\ **Last updated:** [June 26, 2020, 8:59am UTC](https://discuss.elastic.co/t/regarding-path-real/236853 "2020-06-26T08:59:00Z")
Hi I am using ElasticSearch and FSCrawler together. I have indexed a document directory with default of FSCrawler settings, no template applied no filter applied. simple standard configuration only. I have a simple que… --- ## [Geohash graph](https://discuss.elastic.co/t/geohash-graph/132837)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 10\ **Last updated:** [May 25, 2018, 4:35pm UTC](https://discuss.elastic.co/t/geohash-graph/132837 "2018-05-25T16:35:29Z")
I m planning to create a graph to visualize the relation between different cabs pickups location in Nyc city. so i choosed the index named "green" (for green cabs) and the field pickup\_location (which is type is geohas… --- ## [Install Elastic Search](https://discuss.elastic.co/t/install-elastic-search/342320)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 14\ **Last updated:** [September 7, 2023, 11:39am UTC](https://discuss.elastic.co/t/install-elastic-search/342320 "2023-09-07T11:39:54Z")
Hi Team, I had a requirement to create elasticsearch cluster with three nodes . I had install the elasticsearch binaries on these three nodes individually and updated the elasticsearch.yml file with node information bu… --- ## [Kibana "Error in visualization: Request times out after 30000ms"](https://discuss.elastic.co/t/kibana-error-in-visualization-request-times-out-after-30000ms/201001)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 9\ **Last updated:** [October 7, 2019, 7:02am UTC](https://discuss.elastic.co/t/kibana-error-in-visualization-request-times-out-after-30000ms/201001 "2019-10-07T07:02:52Z")
I am using 7.3.1 and I keep getting "Error in visualizatio: Request times out after 30000ms" which is a major blocker to make it into production use. I have increased Elasticsearch JVM Options to "-Xms5g -Xmx5g" but to n… --- ## [Pipeline question](https://discuss.elastic.co/t/pipeline-question/286494)
**Author:** [@Worlock](https://discuss.elastic.co/u/Worlock)\ **Replies:** 13\ **Last updated:** [October 13, 2021, 1:00pm UTC](https://discuss.elastic.co/t/pipeline-question/286494 "2021-10-13T13:00:10Z")
Hi all, I have a field in my index that is named "Severity". The values can be either 2, 1 or 0. I want to rename those values to Critical, Warning or Informational. I looked into pipelines and also read the documentat… --- ## [Closing (Connection reset by peer) keeps being logged on logstash logs](https://discuss.elastic.co/t/closing-connection-reset-by-peer-keeps-being-logged-on-logstash-logs/311992)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 9\ **Last updated:** [August 29, 2022, 9:23am UTC](https://discuss.elastic.co/t/closing-connection-reset-by-peer-keeps-being-logged-on-logstash-logs/311992 "2022-08-29T09:23:37Z")
Hello, Since i upgraded my two logstash instances from 7.16.3 to 8.3.1 i am seeing the appearence of the above logs: Does someone know why this could be happening? I didnt had these INFO logs before on the previous … --- ## [Extracting and mapping fields from event.original in Trend Micro Vision One Integration](https://discuss.elastic.co/t/extracting-and-mapping-fields-from-event-original-in-trend-micro-vision-one-integration/371206)
**Author:** [@cyberm](https://discuss.elastic.co/u/cyberm)\ **Replies:** 12\ **Last updated:** [December 6, 2024, 3:16pm UTC](https://discuss.elastic.co/t/extracting-and-mapping-fields-from-event-original-in-trend-micro-vision-one-integration/371206 "2024-12-06T15:16:06Z")
Hi everyone, I’m trying to properly configure the Vision One integration in Kibana to collect and manage logs. Here’s what I’ve done so far: I’ve set up the Vision One integration in Kibana. I’ve configured the policy… --- ## [Version 7.1.1 Corrupted translog After a power failure](https://discuss.elastic.co/t/version-7-1-1-corrupted-translog-after-a-power-failure/205968)
**Author:** [@panxuelin](https://discuss.elastic.co/u/panxuelin)\ **Replies:** 12\ **Last updated:** [October 31, 2019, 7:10am UTC](https://discuss.elastic.co/t/version-7-1-1-corrupted-translog-after-a-power-failure/205968 "2019-10-31T07:10:11Z")
Translog has become corrupted and why would this happen. Can close system file cache fix the Problem Completely? "unassigned\_info": { "reason": "ALLOCATION\_FAILED", "at": "2019-10-09T07:08:10.690Z", "failed\_attempts"… --- ## [Logtash Giving : : Expected one of #, input, filter, output at line 1, column 1 (byte 1) Error in syntax checking](https://discuss.elastic.co/t/logtash-giving-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-error-in-syntax-checking/300987)
**Author:** [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\ **Replies:** 14\ **Last updated:** [March 29, 2022, 7:54pm UTC](https://discuss.elastic.co/t/logtash-giving-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-error-in-syntax-checking/300987 "2022-03-29T19:54:03Z")
\[WARN \] 2022-03-29 15:12:27.166 \[LogStash::Runner\] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified \[FATAL\] 2022-03-29 15:12:27.560 \[LogStash::Runner\] runner - The giv… --- ## [Windows two Node Cluster stuck on tring to determine master](https://discuss.elastic.co/t/windows-two-node-cluster-stuck-on-tring-to-determine-master/350691)
**Author:** [@bytelink](https://discuss.elastic.co/u/bytelink)\ **Replies:** 11\ **Last updated:** [January 11, 2024, 1:28pm UTC](https://discuss.elastic.co/t/windows-two-node-cluster-stuck-on-tring-to-determine-master/350691 "2024-01-11T13:28:07Z")
I have been trying to install a new two node cluster on two windows servers and no matter what I have tried I get a situation where the two nodes do not seem to be able to determine which should be the master. I have tr… --- ## [Elasticsearch in RKE in running status but not active](https://discuss.elastic.co/t/elasticsearch-in-rke-in-running-status-but-not-active/335655)
**Author:** [@Mhvrke](https://discuss.elastic.co/u/Mhvrke)\ **Replies:** 10\ **Last updated:** [June 10, 2023, 6:10am UTC](https://discuss.elastic.co/t/elasticsearch-in-rke-in-running-status-but-not-active/335655 "2023-06-10T06:10:38Z")
Hi! I need help with the following escenario: I’m running Elasticsearch in cluster mode in 3 worker nodes in RKE. Suddenly stopped from working and Kibana went down as Elasticsearch presents 503 error service unavailable… --- ## [Find the cause of document deletes](https://discuss.elastic.co/t/find-the-cause-of-document-deletes/156743)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 10\ **Last updated:** [November 19, 2018, 3:02pm UTC](https://discuss.elastic.co/t/find-the-cause-of-document-deletes/156743 "2018-11-19T15:02:53Z")
In an elasticsearch 5.x cluster, the team is using day-wise indices and deleting indices that are older than 150 days. However, GET \_cat/indices shows that document deletions are happening for each of the day-wise indice… --- ## [Date\_histogram: Unknown time-zone ID: Europe/Kyiv](https://discuss.elastic.co/t/date-histogram-unknown-time-zone-id-europe-kyiv/349188)
**Author:** [@Inbal](https://discuss.elastic.co/u/Inbal)\ **Replies:** 9\ **Last updated:** [December 12, 2023, 8:15pm UTC](https://discuss.elastic.co/t/date-histogram-unknown-time-zone-id-europe-kyiv/349188 "2023-12-12T20:15:57Z")
Hey, I have a es search with aggregations which contains date\_histogram with time\_zone parameter. When I'm choosing "Europe/Kyiv" as time\_zone I'm getting the following error reason: "Unknown time-zone ID: Europe/Kyiv"… --- ## [Problem with Attachment-Plugin and Highlighting](https://discuss.elastic.co/t/problem-with-attachment-plugin-and-highlighting/13591)
**Author:** [@maximilian\_brodhun](https://discuss.elastic.co/u/maximilian_brodhun)\ **Replies:** 13\ **Last updated:** [September 17, 2013, 8:52am UTC](https://discuss.elastic.co/t/problem-with-attachment-plugin-and-highlighting/13591 "2013-09-17T08:52:01Z")
Hello dear all, I didn't find much about this topic so I don't how good it is known. I have an index where I store text in a field of the type attachement. The normal search is working really good! But If I use… --- ## [Replication basics](https://discuss.elastic.co/t/replication-basics/6343)
**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\ **Replies:** 13\ **Last updated:** [January 17, 2012, 9:35am UTC](https://discuss.elastic.co/t/replication-basics/6343 "2012-01-17T09:35:58Z")
Hey guys. I'm running an instance of ES on 2 different hosts. If I want to have their data synchronized automatically, do I just do the following? 1) In each host's ES config file, disable discovery.zen.ping.multi… --- ## [Index Policies Never Rollover to the Defined Index Life-cycle Policy](https://discuss.elastic.co/t/index-policies-never-rollover-to-the-defined-index-life-cycle-policy/266146)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 10\ **Last updated:** [March 5, 2021, 7:17pm UTC](https://discuss.elastic.co/t/index-policies-never-rollover-to-the-defined-index-life-cycle-policy/266146 "2021-03-05T19:17:25Z")
No matter what how I edit the index policies. The indexes never roll over to Warm tier. My indexes just goes straight from hot to delete. Even though my index policy says the following: PUT \_ilm/policy/filebeat { "po… --- ## [Querying data using script query with lang=expression for remainder operation](https://discuss.elastic.co/t/querying-data-using-script-query-with-lang-expression-for-remainder-operation/325895)
**Author:** [@Rachana\_Maniyar](https://discuss.elastic.co/u/Rachana_Maniyar)\ **Replies:** 16\ **Last updated:** [February 25, 2023, 7:20am UTC](https://discuss.elastic.co/t/querying-data-using-script-query-with-lang-expression-for-remainder-operation/325895 "2023-02-25T07:20:25Z")
hi Folks, We store a field of type "long" in elastic which has value of this nature = 9048716794795431 Need to retrieve these records based on modulus expression. So the query looks like this query: {'query': {'bool':… [Previous page](https://discuss.elastic.co/top.md?page=219&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=221&per_page=50&period=all)