# Top

**URL:** https://discuss.elastic.co/top.md?page=267&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 268

---

## [Logstash convert string to integer](https://discuss.elastic.co/t/logstash-convert-string-to-integer/96325)

<div class="topic-metadata">

**Author:** [@bitesize](https://discuss.elastic.co/u/bitesize)\
**Replies:** 3\
**Last updated:** [August 8, 2017, 8:29pm UTC](https://discuss.elastic.co/t/logstash-convert-string-to-integer/96325 "2017-08-08T20:29:01Z")

</div>

I have json string array that I am decomposing into separate fields, such as: ’{“eventid”:1,“content”:\[“a”,“b”,“c”,“d”\]}' after adding some field names and remove\_field content. I get the following: { "@timestamp" =\> …

---

## [Configure Kibana for multiple ES servers/nodes](https://discuss.elastic.co/t/configure-kibana-for-multiple-es-servers-nodes/2431)

<div class="topic-metadata">

**Author:** [@saif](https://discuss.elastic.co/u/saif)\
**Replies:** 5\
**Last updated:** [November 22, 2016, 10:00pm UTC](https://discuss.elastic.co/t/configure-kibana-for-multiple-es-servers-nodes/2431 "2016-11-22T22:00:39Z")

</div>

hello how to configure Kibana for multiple ES servers/nodes in the same cluster '# The Elasticsearch instance to use for all your queries. elasticsearch\_url: "http://elastic01:9200" ? i want to add other node tha…

---

## [Query last one hour records](https://discuss.elastic.co/t/query-last-one-hour-records/45991)

<div class="topic-metadata">

**Author:** [@Vaibhav\_Khanduja](https://discuss.elastic.co/u/Vaibhav_Khanduja)\
**Replies:** 8\
**Last updated:** [April 1, 2016, 7:28pm UTC](https://discuss.elastic.co/t/query-last-one-hour-records/45991 "2016-04-01T19:28:36Z")

</div>

I am having serious trouble in querying last one hour records and my query with filter "gte" : "now-1h" does not result in any data. The time on my box is 1459456163 The data of time stamps are in range : 1459455…

---

## [How to grok using json filter](https://discuss.elastic.co/t/how-to-grok-using-json-filter/94261)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 4\
**Last updated:** [July 27, 2017, 1:52am UTC](https://discuss.elastic.co/t/how-to-grok-using-json-filter/94261 "2017-07-27T01:52:12Z")

</div>

Hi, I have json text (errorCode, errorMessage, etc...) in json text ("raw") and I need to grok this text. I assume I need to use the json filter for that. Any chance to get help how to do it? { "timestamp" : 1500…

---

## [Embed Kibana Dashboard or some chart in external portal](https://discuss.elastic.co/t/embed-kibana-dashboard-or-some-chart-in-external-portal/32476)

<div class="topic-metadata">

**Author:** [@ismael\_boumedien](https://discuss.elastic.co/u/ismael_boumedien)\
**Replies:** 7\
**Last updated:** [March 22, 2018, 11:26am UTC](https://discuss.elastic.co/t/embed-kibana-dashboard-or-some-chart-in-external-portal/32476 "2018-03-22T11:26:07Z")

</div>

Hi guys, I want to embed kibana dashboard or unless charts in another Board build with angular. I know that was possible with kibana 3. What about Kibana 4. Best regards Ismael

---

## [Best practices for indexing log data](https://discuss.elastic.co/t/best-practices-for-indexing-log-data/101891)

<div class="topic-metadata">

**Author:** [@noky](https://discuss.elastic.co/u/noky)\
**Replies:** 5\
**Last updated:** [September 27, 2017, 3:56pm UTC](https://discuss.elastic.co/t/best-practices-for-indexing-log-data/101891 "2017-09-27T15:56:17Z")

</div>

Hi, I'm new to the Elastic/ELK stack and am using it for log aggregation/analysis. Basically, the classic use case of using Filebeat to ship log files to Logstash and output the data to Elasticsearch. My main problem is…

---

## [Want to Count the Total Occurence of Field values](https://discuss.elastic.co/t/want-to-count-the-total-occurence-of-field-values/103648)

<div class="topic-metadata">

**Author:** [@aditya\_soni](https://discuss.elastic.co/u/aditya_soni)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 10:16am UTC](https://discuss.elastic.co/t/want-to-count-the-total-occurence-of-field-values/103648 "2017-10-12T10:16:36Z")

</div>

Hi all, I need to make a visualization in which i have to get a total count of a field occurence. For Ex.i had applied a metric count on terms Response Code field but i get individual Response Code counts i.e. 91=5 t…

---

## [How to add tags and add filter?](https://discuss.elastic.co/t/how-to-add-tags-and-add-filter/100105)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 5\
**Last updated:** [September 14, 2017, 5:31am UTC](https://discuss.elastic.co/t/how-to-add-tags-and-add-filter/100105 "2017-09-14T05:31:13Z")

</div>

Hi Guys, I have below kind of information and looking assistance from community for creating logstash filter and add tag like "malware" So that I am planning to start netflow on my devices and index the data and filter…

---

## [Elasticsearch is not starting owing to wrong file permission](https://discuss.elastic.co/t/elasticsearch-is-not-starting-owing-to-wrong-file-permission/118855)

<div class="topic-metadata">

**Author:** [@itspecialistsimon](https://discuss.elastic.co/u/itspecialistsimon)\
**Replies:** 3\
**Last updated:** [February 7, 2018, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting-owing-to-wrong-file-permission/118855 "2018-02-07T16:07:52Z")

</div>

Hi everyone, my Elasticsearch instance doesn't start. Here the logfile's extract: Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "/opt/cert/elastic-certificates.p12" "read") …

---

## [Easy arithmetic function byte to gigabyte](https://discuss.elastic.co/t/easy-arithmetic-function-byte-to-gigabyte/58870)

<div class="topic-metadata">

**Author:** [@bastianhoss](https://discuss.elastic.co/u/bastianhoss)\
**Replies:** 2\
**Last updated:** [August 25, 2016, 7:50pm UTC](https://discuss.elastic.co/t/easy-arithmetic-function-byte-to-gigabyte/58870 "2016-08-25T19:50:26Z")

</div>

Hey there, looking for an opportunity to calculate with a numberfiled in a visualization. My current need is: convert bytes in gigabyte only in the visiualization. The field needs to be in bytes. Thanks

---

## [Grok in filebeat?](https://discuss.elastic.co/t/grok-in-filebeat/66259)

<div class="topic-metadata">

**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\
**Replies:** 7\
**Last updated:** [November 29, 2016, 4:21am UTC](https://discuss.elastic.co/t/grok-in-filebeat/66259 "2016-11-29T04:21:38Z")

</div>

I would love to try out filebeat as a replacement for my current use of LogStash. I like the idea of running a Go program instead of a JVM. Replacing my use of the "file" input plugin to use filebeat would be easy for …

---

## [Dec 18th, 2017: \[KR\]\[Elasticsearch\] Sparse Doc Value가 부리는 마법](https://discuss.elastic.co/t/dec-18th-2017-kr-elasticsearch-sparse-doc-value/110988)

<div class="topic-metadata">

**Author:** [@kimjmin](https://discuss.elastic.co/u/kimjmin)\
**Replies:** 0\
**Last updated:** [December 10, 2017, 11:47pm UTC](https://discuss.elastic.co/t/dec-18th-2017-kr-elasticsearch-sparse-doc-value/110988 "2017-12-10T23:47:16Z")

</div>

6.0 에 추가된 기능 중에 Sparse Doc Value 가 있습니다. 간단하게 설명드리자면, Elasticsearch가 저장하는 Doc Value 는 기존에는 중간중간 비어있는 값이 있어도 값에 대한 저장 공간을 확보 하고 있었습니다. \[17\] 이것이 ES 6.0 (정확히는 Lucene 7) 으로 업그레이드 되면서 이 비어 있는 값들의 빈 공간을 모두 없애고 데이터를 압축할 수 있게 …

---

## [Painless String to Date](https://discuss.elastic.co/t/painless-string-to-date/87993)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 0\
**Last updated:** [June 1, 2017, 9:57pm UTC](https://discuss.elastic.co/t/painless-string-to-date/87993 "2017-06-01T21:57:24Z")

</div>

Hi, Trying to convert String to Date in Painless Painless Code: LocalDateTime.parse(item.to\_as\_string, DateTimeFormatter.ISO\_DATE) Resulting in following error: ScriptException\[runtime error\]; nested: DateTime…

---

## [How to convert a unix\_timestamp field to a new date field](https://discuss.elastic.co/t/how-to-convert-a-unix-timestamp-field-to-a-new-date-field/50966)

<div class="topic-metadata">

**Author:** [@changxy](https://discuss.elastic.co/u/changxy)\
**Replies:** 1\
**Last updated:** [May 26, 2016, 9:45pm UTC](https://discuss.elastic.co/t/how-to-convert-a-unix-timestamp-field-to-a-new-date-field/50966 "2016-05-26T21:45:32Z")

</div>

my json log is : { "fileid": 203936363, "timestamp": 1464187170, "pubTime": 1464172574, "reads": 111 } my current filter is: filter{ date { match =\> \[ "timestamp", "UNIX" \] } } now i wish copy the "pubTime…

---

## [Set fielddata=true error](https://discuss.elastic.co/t/set-fielddata-true-error/76376)

<div class="topic-metadata">

**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Replies:** 1\
**Last updated:** [February 24, 2017, 10:52am UTC](https://discuss.elastic.co/t/set-fielddata-true-error/76376 "2017-02-24T10:52:45Z")

</div>

After ES 5.0 upgrade we are getting the below error when we do sort in Kibana dashboards. Error: Fielddata is disabled on text fields by default. Set fielddata=true on \[user\_name\_terr\_grp\] in order to load fielddata in …

---

## [Dec 17th, 2023: \[EN\] Elasticsearch geospatial; go beyond OpenSearch](https://discuss.elastic.co/t/dec-17th-2023-en-elasticsearch-geospatial-go-beyond-opensearch/345512)

<div class="topic-metadata">

**Author:** [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\
**Replies:** 0\
**Last updated:** [December 17, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-17th-2023-en-elasticsearch-geospatial-go-beyond-opensearch/345512 "2023-12-17T08:00:10Z")

</div>

In 2021, OpenSearch and OpenSearch Dashboards began as a fork from Elasticsearch and Kibana. Although they share similar lineage, OpenSearch and OpenSearch Dashboards do not provide the same functionality. At the time…

---

## [Filebeat on Raspberry Pi](https://discuss.elastic.co/t/filebeat-on-raspberry-pi/113697)

<div class="topic-metadata">

**Author:** [@dm90](https://discuss.elastic.co/u/dm90)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 11:55pm UTC](https://discuss.elastic.co/t/filebeat-on-raspberry-pi/113697 "2018-01-05T23:55:14Z")

</div>

Continuing the discussion from How to install Filebeat on a ARM based SBC (eg. Raspberry Pi 3): @andrewkroh Provided easy steps to build an ARM binary for rpi. Consolidated into a shell script for easy execution. Test…

---

## [How to check a doc field exist while creating scripted field using painless](https://discuss.elastic.co/t/how-to-check-a-doc-field-exist-while-creating-scripted-field-using-painless/74355)

<div class="topic-metadata">

**Author:** [@kambiu](https://discuss.elastic.co/u/kambiu)\
**Replies:** 3\
**Last updated:** [May 26, 2017, 5:20pm UTC](https://discuss.elastic.co/t/how-to-check-a-doc-field-exist-while-creating-scripted-field-using-painless/74355 "2017-05-26T17:20:59Z")

</div>

if (doc.containsKey('fieldname') { return 0; } else { return 1; } The above code return compile error in kibana and ES 5.2.0. What is the correct syntax of painless to check if a field exists? My solution: Afte…

---

## [Cannot start Filebeat as Windows Service](https://discuss.elastic.co/t/cannot-start-filebeat-as-windows-service/142135)

<div class="topic-metadata">

**Author:** [@itamarm10](https://discuss.elastic.co/u/itamarm10)\
**Replies:** 2\
**Last updated:** [July 31, 2018, 6:22am UTC](https://discuss.elastic.co/t/cannot-start-filebeat-as-windows-service/142135 "2018-07-31T06:22:07Z")

</div>

Hello all, I’m using Filebeat 6.0.0 on several Windows servers running Windows Server 2012 R2 Standard to send logs to Logstash. They work great! However, last week we had IT issues on some of the servers (unexpected s…

---

## [CORS error when attempting to access Kibana/ElasticSearch URL](https://discuss.elastic.co/t/cors-error-when-attempting-to-access-kibana-elasticsearch-url/174201)

<div class="topic-metadata">

**Author:** [@Kehinde\_Owens](https://discuss.elastic.co/u/Kehinde_Owens)\
**Replies:** 0\
**Last updated:** [March 27, 2019, 8:29pm UTC](https://discuss.elastic.co/t/cors-error-when-attempting-to-access-kibana-elasticsearch-url/174201 "2019-03-27T20:29:17Z")

</div>

Hello, I'm dealing with an issue in which i'm trying to make a call to my Kibana URL from my localhost and it's being blocked. The error is Response to preflight request doesn't pass access control check: The value of …

---

## [Elastic Stack Pricing on Azure](https://discuss.elastic.co/t/elastic-stack-pricing-on-azure/130915)

<div class="topic-metadata">

**Author:** [@Bartho\_Bernsmann](https://discuss.elastic.co/u/Bartho_Bernsmann)\
**Replies:** 4\
**Last updated:** [May 21, 2018, 5:06pm UTC](https://discuss.elastic.co/t/elastic-stack-pricing-on-azure/130915 "2018-05-21T17:06:26Z")

</div>

Hello, Could you please tell me how the pricing model works on azure? I want to deploy an Elasticsearch machine on azure but I have no idea what the price is. https://azuremarketplace.microsoft.com/en-us/marketplace/a…

---

## [Elastic 7.17.9, 8.5.0 and 8.6.1 Security Update](https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [February 3, 2023, 2:30pm UTC](https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661 "2023-02-03T14:30:50Z")

</div>

Kibana authenticated Denial of Service issue (ESA-2023-02) A flaw(CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to to perform a request that crashes th…

---

## [Search for value NOT equal to something](https://discuss.elastic.co/t/search-for-value-not-equal-to-something/245132)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 1\
**Last updated:** [August 16, 2020, 12:22pm UTC](https://discuss.elastic.co/t/search-for-value-not-equal-to-something/245132 "2020-08-16T12:22:08Z")

</div>

In kibana, I want to see all results are the value of auditd.data.tty is NOT equal to (none). Is it possible to do such a query? Thanks ahead!

---

## [Aggregate "avg" throwing error "Unknown BaseAggregationBuilder "](https://discuss.elastic.co/t/aggregate-avg-throwing-error-unknown-baseaggregationbuilder/123136)

<div class="topic-metadata">

**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\
**Replies:** 2\
**Last updated:** [March 8, 2018, 9:41pm UTC](https://discuss.elastic.co/t/aggregate-avg-throwing-error-unknown-baseaggregationbuilder/123136 "2018-03-08T21:41:55Z")

</div>

Hello Good folks, This query is from a sample video tutorial. The sample is not Elasticsearch 6.0 version. I am not sure if this is something to do with the lastest version. Trying to find the average car price under e…

---

## [Host name does not match the certificate](https://discuss.elastic.co/t/host-name-does-not-match-the-certificate/186618)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 4\
**Last updated:** [July 9, 2019, 9:21am UTC](https://discuss.elastic.co/t/host-name-does-not-match-the-certificate/186618 "2019-07-09T09:21:06Z")

</div>

Hi everyone, I use command './bin/elasticsearch-certutil cert --ca-cert config/ca/ca.crt --ca-key config/ca/ca.key ' to create a p12 file. This file doesn't include any IP/Hostname information, so when I connect to ES …

---

## [Elastic Stack 5.4.1 and 5.3.3 Security updates](https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [June 1, 2017, 4:29pm UTC](https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952 "2017-06-01T16:29:34Z")

</div>

X-Pack 5.4.1 privilege escalation (ESA-2017-06) X-Pack 5.4.1 has been released which fixes a privilege escalation bug in the run\_as functionality. This bug prevents transitioning into the specified user specified in a …

---

## [Problem Missing authentication token for REST request](https://discuss.elastic.co/t/problem-missing-authentication-token-for-rest-request/119066)

<div class="topic-metadata">

**Author:** [@IvoGeel123](https://discuss.elastic.co/u/IvoGeel123)\
**Replies:** 3\
**Last updated:** [February 9, 2018, 8:00am UTC](https://discuss.elastic.co/t/problem-missing-authentication-token-for-rest-request/119066 "2018-02-09T08:00:04Z")

</div>

Hello everyone, I just started using ElasticSearch and Kibana and had great experiences so far. However, I just installed the X-pack and retrieved a 1-year basic license. When I tried to update the license to my ES an…

---

## [Shard request cache vs Node Query Cache](https://discuss.elastic.co/t/shard-request-cache-vs-node-query-cache/91046)

<div class="topic-metadata">

**Author:** [@ytzlax](https://discuss.elastic.co/u/ytzlax)\
**Replies:** 1\
**Last updated:** [June 30, 2017, 7:47am UTC](https://discuss.elastic.co/t/shard-request-cache-vs-node-query-cache/91046 "2017-06-30T07:47:22Z")

</div>

What the different between Shard request cache and Node Query Cache?

---

## [Dashboards - Best Practices and Thoughts for Elastic's Observability Team](https://discuss.elastic.co/t/dashboards-best-practices-and-thoughts-for-elastics-observability-team/326078)

<div class="topic-metadata">

**Author:** [@mgevans](https://discuss.elastic.co/u/mgevans)\
**Replies:** 1\
**Last updated:** [February 22, 2023, 12:07am UTC](https://discuss.elastic.co/t/dashboards-best-practices-and-thoughts-for-elastics-observability-team/326078 "2023-02-22T00:07:03Z")

</div>

//this article is written as part of a response to github issue on dashboards which is tracking what do to with time-series data on single digit wigets. Dashboards! Why do dashboards exist In Observability? Dashboards…

---

## [Kibana Transform\_Vis plugin for 8.x](https://discuss.elastic.co/t/kibana-transform-vis-plugin-for-8-x/344626)

<div class="topic-metadata">

**Author:** [@pchanas](https://discuss.elastic.co/u/pchanas)\
**Replies:** 3\
**Last updated:** [October 12, 2023, 8:56am UTC](https://discuss.elastic.co/t/kibana-transform-vis-plugin-for-8-x/344626 "2023-10-12T08:56:12Z")

</div>

Hi everybody, We have an extensive usage of the transform\_viz plugin firstly released by PhaedrusTheGreek and then maintained by \[gwintzer\] (GitHub - gwintzer/transform\_vis: Transform Visualization for Kibana). Has any…

---

## [Unable to resolve Gateway Timeout errors](https://discuss.elastic.co/t/unable-to-resolve-gateway-timeout-errors/25560)

<div class="topic-metadata">

**Author:** [@chromeriver\_tk](https://discuss.elastic.co/u/chromeriver_tk)\
**Replies:** 7\
**Last updated:** [March 3, 2017, 8:19pm UTC](https://discuss.elastic.co/t/unable-to-resolve-gateway-timeout-errors/25560 "2017-03-03T20:19:33Z")

</div>

At our organization, we have 7 primary shard Elastic Search servers serving a single Kibana frontend. I have set request\_timeout in the Kibana settings to 600000, and yet I still get these Kibana "Gateway Timeout" exce…

---

## [Exact match for string field](https://discuss.elastic.co/t/exact-match-for-string-field/230556)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 8\
**Last updated:** [May 7, 2020, 3:51am UTC](https://discuss.elastic.co/t/exact-match-for-string-field/230556 "2020-05-07T03:51:01Z")

</div>

Hello, Can anyone help me to find out how we can get exact search term match using query? I have two field in my index. contentid Title So if i provide full value for contentid and title in query so it should give m…

---

## [How to solve node lock error in elasticsearch?](https://discuss.elastic.co/t/how-to-solve-node-lock-error-in-elasticsearch/51650)

<div class="topic-metadata">

**Author:** [@Rajnikant](https://discuss.elastic.co/u/Rajnikant)\
**Replies:** 1\
**Last updated:** [June 2, 2016, 8:11am UTC](https://discuss.elastic.co/t/how-to-solve-node-lock-error-in-elasticsearch/51650 "2016-06-02T08:11:12Z")

</div>

Elasticsearch is successfully run but after get some response i got this type of error. "java.lang.IllegalStateException: Failed to obtain node lock, is the following location writable?: \[/media/amit/208B7C972F88BACC/…

---

## [Kibana service fails to start](https://discuss.elastic.co/t/kibana-service-fails-to-start/228766)

<div class="topic-metadata">

**Author:** [@syost](https://discuss.elastic.co/u/syost)\
**Replies:** 6\
**Last updated:** [April 20, 2020, 5:46am UTC](https://discuss.elastic.co/t/kibana-service-fails-to-start/228766 "2020-04-20T05:46:35Z")

</div>

I have installed Kibana as shown here. Installation was successful and so I began to configure it as shown here by setting the following... server.port: 5601 server.host: "localhost" elasticsearch.hosts: \["http://localh…

---

## [KQL query for fields with a value which is not \`-\`](https://discuss.elastic.co/t/kql-query-for-fields-with-a-value-which-is-not/318098)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 7\
**Last updated:** [November 8, 2022, 11:12am UTC](https://discuss.elastic.co/t/kql-query-for-fields-with-a-value-which-is-not/318098 "2022-11-08T11:12:08Z")

</div>

Kibana 7.17. I've got some indices where documents contain a field called username . Sometimes the value is a username, like bob or alice and often the value is -. What's a KQL query that will return documents where …

---

## [Number of documents in the index cannot exceed 2147483519](https://discuss.elastic.co/t/number-of-documents-in-the-index-cannot-exceed-2147483519/34008)

<div class="topic-metadata">

**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\
**Replies:** 0\
**Last updated:** [November 6, 2015, 3:57pm UTC](https://discuss.elastic.co/t/number-of-documents-in-the-index-cannot-exceed-2147483519/34008 "2015-11-06T15:57:04Z")

</div>

Hi, We have in all our documents "userid" fields that also used to make a routing and filtering, and looks like for some user we've reached maximum number of documents in one shard and now we can't index new documents fo…

---

## [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>"Elasticsearch Unreachable: \[http://localhost:9200/\]](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-httpclient-pool-hostunreachableerror-error-elasticsearch-unreachable-http-localhost-9200/118674)

<div class="topic-metadata">

**Author:** [@Shahnaz\_Shariff](https://discuss.elastic.co/u/Shahnaz_Shariff)\
**Replies:** 3\
**Last updated:** [February 21, 2018, 8:25am UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-httpclient-pool-hostunreachableerror-error-elasticsearch-unreachable-http-localhost-9200/118674 "2018-02-21T08:25:53Z")

</div>

I installed x-pack on elasticsearch, kibana, and logstash. Elasticsearch.yml bootstrap.memory\_lock: true transport.host: localhost transport.tcp.port: 9300 network.host: 0.0.0.0 http.port: 9200 xpack.ssl.keystore.path:…

---

## [How to increase the default size limit from 10000 to 1000000 in ElasticSearch](https://discuss.elastic.co/t/how-to-increase-the-default-size-limit-from-10000-to-1000000-in-elasticsearch/208807)

<div class="topic-metadata">

**Author:** [@chandu506](https://discuss.elastic.co/u/chandu506)\
**Replies:** 5\
**Last updated:** [November 22, 2019, 1:25pm UTC](https://discuss.elastic.co/t/how-to-increase-the-default-size-limit-from-10000-to-1000000-in-elasticsearch/208807 "2019-11-22T13:25:22Z")

</div>

How to increase the default size limit from 10000 to 1000000 in ElasticSearch

---

## [Elastic Stack 7.14.1 Security Update](https://discuss.elastic.co/t/elastic-stack-7-14-1-security-update/283077)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [September 1, 2021, 4:10pm UTC](https://discuss.elastic.co/t/elastic-stack-7-14-1-security-update/283077 "2021-09-01T16:10:55Z")

</div>

Kibana code execution issue (ESA-2021-21) It was discovered that a user with fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded i…

---

## [Elasticsearch process ended by code 137](https://discuss.elastic.co/t/elasticsearch-process-ended-by-code-137/345399)

<div class="topic-metadata">

**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\
**Replies:** 7\
**Last updated:** [October 19, 2023, 7:09pm UTC](https://discuss.elastic.co/t/elasticsearch-process-ended-by-code-137/345399 "2023-10-19T19:09:10Z")

</div>

Hi, When checking the error message for the termination of the Elasticsearch process, it was indicating that the process was terminated due to error 137, when consulting I saw that it indicates excessive memory consumpt…

---

## [Filebeat too many open files error when number of log files bigger than 1024](https://discuss.elastic.co/t/filebeat-too-many-open-files-error-when-number-of-log-files-bigger-than-1024/59518)

<div class="topic-metadata">

**Author:** [@vin](https://discuss.elastic.co/u/vin)\
**Replies:** 4\
**Last updated:** [September 8, 2016, 10:55am UTC](https://discuss.elastic.co/t/filebeat-too-many-open-files-error-when-number-of-log-files-bigger-than-1024/59518 "2016-09-08T10:55:26Z")

</div>

Filebeat Version : 1.2.3 OS: CentOS 7 (Docker) Error Msg: 2016-09-01T08:20:48Z ERR Stop Harvesting. Unexpected file opening error: open xxx: too many open files ulimit -a | grep "open files" open files …

---

## [Full pipeline Logstash with dead letter queue](https://discuss.elastic.co/t/full-pipeline-logstash-with-dead-letter-queue/239855)

<div class="topic-metadata">

**Author:** [@Altamir\_Dias](https://discuss.elastic.co/u/Altamir_Dias)\
**Replies:** 2\
**Last updated:** [July 7, 2020, 11:14pm UTC](https://discuss.elastic.co/t/full-pipeline-logstash-with-dead-letter-queue/239855 "2020-07-07T23:14:39Z")

</div>

Hello Guys, I have a pipeline in my ELK that get data from Kafka and send Elasticsearch. But I don't know how I can set the dead letter queue. My goal is every errors be send a topic called dlq+date. I tried several so…

---

## [\[ANNOUNCEMENT\] ingest-h3 plugin released](https://discuss.elastic.co/t/announcement-ingest-h3-plugin-released/205275)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 2:10pm UTC](https://discuss.elastic.co/t/announcement-ingest-h3-plugin-released/205275 "2019-10-25T14:10:05Z")

</div>

A new ingest processor plugin named ingest-h3 has been released. This plugin provides support for generating Uber H3 geo indexes from a given geo location point at given resolutions. Uber H3 is an hexagonal hierarchical …

---

## [Get all field names (keys) in an index](https://discuss.elastic.co/t/get-all-field-names-keys-in-an-index/54617)

<div class="topic-metadata">

**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\
**Replies:** 4\
**Last updated:** [July 4, 2016, 8:02am UTC](https://discuss.elastic.co/t/get-all-field-names-keys-in-an-index/54617 "2016-07-04T08:02:01Z")

</div>

In my GUI I want to show all the keys as suggestions. How can I get these keys from elasticsearch using (node js) elasticsearch npm

---

## [Filebeat configuration - ssl.verification\_mode: none doesn't work](https://discuss.elastic.co/t/filebeat-configuration-ssl-verification-mode-none-doesnt-work/166327)

<div class="topic-metadata">

**Author:** [@kacedn](https://discuss.elastic.co/u/kacedn)\
**Replies:** 4\
**Last updated:** [February 6, 2019, 12:36pm UTC](https://discuss.elastic.co/t/filebeat-configuration-ssl-verification-mode-none-doesnt-work/166327 "2019-02-06T12:36:02Z")

</div>

Hello Version of filebeat : 6.3.0 I don't understand why ssl.verification\_mode is ignored. In filebeat.yml, i am trying to configure ssl for ElasticSearchOutput. https://www.elastic.co/guide/en/beats/filebeat/current…

---

## [MapperParsingException: failed to parse](https://discuss.elastic.co/t/mapperparsingexception-failed-to-parse/26073)

<div class="topic-metadata">

**Author:** [@swethagaddam](https://discuss.elastic.co/u/swethagaddam)\
**Replies:** 1\
**Last updated:** [July 22, 2015, 12:29pm UTC](https://discuss.elastic.co/t/mapperparsingexception-failed-to-parse/26073 "2015-07-22T12:29:11Z")

</div>

I have been getting below error in my elasticsearch cluster. I am using ES 1.4.4 and logstash 1.4.2. Could anyone help in understanding the issue? The logstash grok parser is working fine and extracting the key:value pai…

---

## [Changing lat/lon from float to geo\_point](https://discuss.elastic.co/t/changing-lat-lon-from-float-to-geo-point/116067)

<div class="topic-metadata">

**Author:** [@jgwentworth](https://discuss.elastic.co/u/jgwentworth)\
**Replies:** 8\
**Last updated:** [January 19, 2018, 2:01pm UTC](https://discuss.elastic.co/t/changing-lat-lon-from-float-to-geo-point/116067 "2018-01-19T14:01:23Z")

</div>

When running GET myindex/\_mapping, I'm trying to use that same output to replace the mapping of lat/lon from datatype float to geo\_point with a put request. However, I'm getting the error: { "error": { "root\_cause": \[ …

---

## [Elastic Stack 7.9.3 and 6.8.13 Security Update](https://discuss.elastic.co/t/elastic-stack-7-9-3-and-6-8-13-security-update/253033)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [October 22, 2020, 3:34pm UTC](https://discuss.elastic.co/t/elastic-stack-7-9-3-and-6-8-13-security-update/253033 "2020-10-22T15:34:06Z")

</div>

Elasticsearch field disclosure flaw (ESA-2020-13) A document disclosure flaw was found in Elasticsearch when Document or Field Level Security is used. Search queries do not properly preserve security permissions when ex…

---

## [No Living Connections](https://discuss.elastic.co/t/no-living-connections/183480)

<div class="topic-metadata">

**Author:** [@Min\_Mah](https://discuss.elastic.co/u/Min_Mah)\
**Replies:** 4\
**Last updated:** [June 7, 2019, 7:18am UTC](https://discuss.elastic.co/t/no-living-connections/183480 "2019-06-07T07:18:34Z")

</div>

Hi i have an error. my system ES 7.1 Kibana 7.1 HTTPS my elasticsearch.yml # ---------------------------------- Network ----------------------------------- # # Set the bind address to a specific IP (IPv4 or IPv6): #…

---

## [Distributing primary shards?](https://discuss.elastic.co/t/distributing-primary-shards/67804)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 7\
**Last updated:** [December 2, 2016, 4:22pm UTC](https://discuss.elastic.co/t/distributing-primary-shards/67804 "2016-12-02T16:22:34Z")

</div>

Hey there! I have one particularly high throughput logging cluster which processes about 1tb of data per day. Most of that data goes into a single index with 25 shards (which exactly matches the number of nodes in the cl…

[Previous page](https://discuss.elastic.co/top.md?page=266&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=268&per_page=50&period=all)
