# Top

**URL:** https://discuss.elastic.co/top.md?page=271&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 272

---

## [Parsing different date formats (difficult)](https://discuss.elastic.co/t/parsing-different-date-formats-difficult/138638)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 8\
**Last updated:** [July 5, 2018, 5:12pm UTC](https://discuss.elastic.co/t/parsing-different-date-formats-difficult/138638 "2018-07-05T17:12:46Z")

</div>

Hi all, I have two types of timestamps coming into my logstash input from different logfiles: \[6/13/18 8:11:25:022 CEST\] 2018-04-17T15:19:20.313 My grok below works for both: if \[fields\]\[log\_type\] == "p8\_server\_err…

---

## [Unable to retrieve license information from license server {:message=\>"No Available connections"}](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server-message-no-available-connections/302175)

<div class="topic-metadata">

**Author:** [@sahir](https://discuss.elastic.co/u/sahir)\
**Replies:** 7\
**Last updated:** [April 18, 2022, 7:07am UTC](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server-message-no-available-connections/302175 "2022-04-18T07:07:00Z")

</div>

Hello team, I'm new to Logstash when im trying to run a logstash i getting the error like this anyone can you please look on it. \[2022-04-11T19:19:07,223\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retriev…

---

## [Grok for parsing java Log](https://discuss.elastic.co/t/grok-for-parsing-java-log/43718)

<div class="topic-metadata">

**Author:** [@sankallada](https://discuss.elastic.co/u/sankallada)\
**Replies:** 8\
**Last updated:** [May 29, 2017, 5:48pm UTC](https://discuss.elastic.co/t/grok-for-parsing-java-log/43718 "2017-05-29T17:48:35Z")

</div>

Hi, I'm learning ELK for one of my upcoming implementation for the past few days. I have created a logstash conf which sends the data to my elasticsearch. With my logstash conf, I'm expecting a few fields to be added i…

---

## [What's the difference between "store" and "doc\_values" in field properties?](https://discuss.elastic.co/t/whats-the-difference-between-store-and-doc-values-in-field-properties/70045)

<div class="topic-metadata">

**Author:** [@ccclyt](https://discuss.elastic.co/u/ccclyt)\
**Replies:** 6\
**Last updated:** [December 27, 2016, 11:08am UTC](https://discuss.elastic.co/t/whats-the-difference-between-store-and-doc-values-in-field-properties/70045 "2016-12-27T11:08:36Z")

</div>

inverted index is used for terms to find the doc\_ids, doc\_values are used for doc\_ids to find values of a field, and will be serialized into the disk. However what about the property "store"? I just don't understand. b…

---

## [Sending azure\_event\_hub messages to elasticsearch](https://discuss.elastic.co/t/sending-azure-event-hub-messages-to-elasticsearch/167550)

<div class="topic-metadata">

**Author:** [@fringeadmin](https://discuss.elastic.co/u/fringeadmin)\
**Replies:** 6\
**Last updated:** [February 18, 2019, 4:33pm UTC](https://discuss.elastic.co/t/sending-azure-event-hub-messages-to-elasticsearch/167550 "2019-02-18T16:33:42Z")

</div>

I recently installed Elastic Stack for the first time using the steps at Digital Ocean. I then followed the steps at the Azure Event Hubs plugin page to link logstash to an Azure event hub. This seemed to go okay, but no…

---

## [Dec 17th, 2020: \[KR\] Elastic Cloud 에서 한글 형태소 분석기 사용하기](https://discuss.elastic.co/t/dec-17th-2020-kr-elastic-cloud/258379)

<div class="topic-metadata">

**Author:** [@kimjmin](https://discuss.elastic.co/u/kimjmin)\
**Replies:** 0\
**Last updated:** [December 17, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-17th-2020-kr-elastic-cloud/258379 "2020-12-17T08:00:00Z")

</div>

Elasticsearch 에서는 Elastic 에서 공식으로 제공하는 한글 형태소 분석기인 nori 를 사용할 수 있습니다. 한글은 띄어쓰기가 없는 복합어가 대다수이기 때문에 의도하지 않은 대로 분석이 되는 경우가 많아 nori 를 사용하기 위해서는 목적에 맞는 사용자 사전을 등록해야 할 때가 많습니다. nori\_tokenizer 에서는 사용자 사전을 텍스트 파일로 만들어 등록하거나 인덱스…

---

## [Is there a query filter for suffix?](https://discuss.elastic.co/t/is-there-a-query-filter-for-suffix/49680)

<div class="topic-metadata">

**Author:** [@beckerdo](https://discuss.elastic.co/u/beckerdo)\
**Replies:** 1\
**Last updated:** [May 10, 2016, 4:02pm UTC](https://discuss.elastic.co/t/is-there-a-query-filter-for-suffix/49680 "2016-05-10T16:02:47Z")

</div>

I have been reading about the term level queries at https://www.elastic.co/guide/en/elasticsearch/reference/current/term-level-queries.html The cardinaility of our aggregation buckets is very high and blows up in memor…

---

## [Failed to execute action : Logstash : Pipeline action create](https://discuss.elastic.co/t/failed-to-execute-action-logstash-pipeline-action-create/134843)

<div class="topic-metadata">

**Author:** [@irfanjs](https://discuss.elastic.co/u/irfanjs)\
**Replies:** 8\
**Last updated:** [June 7, 2018, 9:04am UTC](https://discuss.elastic.co/t/failed-to-execute-action-logstash-pipeline-action-create/134843 "2018-06-07T09:04:18Z")

</div>

hi, have following setup : CentOS 7 machine Logstash version : 6.2.4 elasticsearch version : 6.2.4-1 kibana : 6.2.4 all the services (logstash , kibana and elasticsearch we working fine ) . following file is a inp…

---

## [Deleting Filebeat Registry File](https://discuss.elastic.co/t/deleting-filebeat-registry-file/46112)

<div class="topic-metadata">

**Author:** [@billmurrin](https://discuss.elastic.co/u/billmurrin)\
**Replies:** 6\
**Last updated:** [April 12, 2016, 12:22am UTC](https://discuss.elastic.co/t/deleting-filebeat-registry-file/46112 "2016-04-12T00:22:05Z")

</div>

Is it safe to delete the FileBeat registry file? I see entries in there going back from when I first started running filebeat. This has been causing inode reuse issues where Filebeat keeps thinking I am reusing files. …

---

## [Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin'](https://discuss.elastic.co/t/response-to-preflight-request-doesnt-pass-access-control-check-no-access-control-allow-origin/82571)

<div class="topic-metadata">

**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\
**Replies:** 6\
**Last updated:** [April 20, 2017, 7:14am UTC](https://discuss.elastic.co/t/response-to-preflight-request-doesnt-pass-access-control-check-no-access-control-allow-origin/82571 "2017-04-20T07:14:33Z")

</div>

Hello there, I'm getting a failure for an Options pre-flight request: XMLHttpRequest cannot load https://tangotelecom.com:5601/app/kibana#/dashboard/irldf\_System\_Dashboard?…now-1d,mode:absolute,to:now))&\_a=(filters:!()…

---

## [Elasticsearch immediately stop after start](https://discuss.elastic.co/t/elasticsearch-immediately-stop-after-start/138341)

<div class="topic-metadata">

**Author:** [@mamta](https://discuss.elastic.co/u/mamta)\
**Replies:** 2\
**Last updated:** [July 12, 2018, 12:09pm UTC](https://discuss.elastic.co/t/elasticsearch-immediately-stop-after-start/138341 "2018-07-12T12:09:41Z")

</div>

I installed elasticsearch 5.6.8 on Redhat. I have started the elasticsearch by using systemctl start elasticsearch . After status change to running then it goes to the failure mode. I am sending you my elasticsearch log…

---

## [Kibana server.publicBaseUrl](https://discuss.elastic.co/t/kibana-server-publicbaseurl/293661)

<div class="topic-metadata">

**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\
**Replies:** 3\
**Last updated:** [January 7, 2022, 8:38am UTC](https://discuss.elastic.co/t/kibana-server-publicbaseurl/293661 "2022-01-07T08:38:27Z")

</div>

I am seeing this error on my Kibana I have several questions Where do I configure that setting? in kibana.yml ? in Elasticsearch.yml ? What should I set the setting to? Kibana.yml # File managed by Puppet. ---…

---

## [Filebeat can't talk to logstash with connection refused error](https://discuss.elastic.co/t/filebeat-cant-talk-to-logstash-with-connection-refused-error/56353)

<div class="topic-metadata">

**Author:** [@caoping](https://discuss.elastic.co/u/caoping)\
**Replies:** 4\
**Last updated:** [July 26, 2016, 6:46am UTC](https://discuss.elastic.co/t/filebeat-cant-talk-to-logstash-with-connection-refused-error/56353 "2016-07-26T06:46:00Z")

</div>

I installed & configured filebeat in host A, logstash in host B. I hope filebeat sending log data to logstash in host B. However, after starting filebeat and logstash, error at filebeat side occurred. Below is the error …

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/247526)

<div class="topic-metadata">

**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\
**Replies:** 6\
**Last updated:** [September 5, 2020, 3:48pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/247526 "2020-09-05T15:48:27Z")

</div>

Hey, I just install elasticsearch and kibana version 7.8.1. I am able to access elasticsearch through IP but when I try to access kibana through IP it says kibana server not ready yet. can someone help here below is el…

---

## [ShutdownWatcherExt The shutdown process appears to be stalled due to busy or blocked plugins without input entrace](https://discuss.elastic.co/t/shutdownwatcherext-the-shutdown-process-appears-to-be-stalled-due-to-busy-or-blocked-plugins-without-input-entrace/239343)

<div class="topic-metadata">

**Author:** [@ledoc](https://discuss.elastic.co/u/ledoc)\
**Replies:** 2\
**Last updated:** [July 2, 2020, 8:09am UTC](https://discuss.elastic.co/t/shutdownwatcherext-the-shutdown-process-appears-to-be-stalled-due-to-busy-or-blocked-plugins-without-input-entrace/239343 "2020-07-02T08:09:19Z")

</div>

Hello, I'm installing new stack elk for my stage env. Kibana, and ES are ok, but I have problem with logstash. Currently, I have no input on this env. no metricbeat started, no filebeat, nothing. I configured pipeline…

---

## [Fields are not shown in "Available fields" in KIbana](https://discuss.elastic.co/t/fields-are-not-shown-in-available-fields-in-kibana/226716)

<div class="topic-metadata">

**Author:** [@Manav\_Chopra](https://discuss.elastic.co/u/Manav_Chopra)\
**Replies:** 7\
**Last updated:** [April 7, 2020, 6:50pm UTC](https://discuss.elastic.co/t/fields-are-not-shown-in-available-fields-in-kibana/226716 "2020-04-07T18:50:39Z")

</div>

I have added fields i.e through mapping API and all the fields are shown on index management\> index pattern page But when I go to Discover tab, no new fields are shown there. Can you please tell what is the missing par…

---

## [Custom ukrainian analyzer](https://discuss.elastic.co/t/custom-ukrainian-analyzer/135635)

<div class="topic-metadata">

**Author:** [@cbley](https://discuss.elastic.co/u/cbley)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 7:43am UTC](https://discuss.elastic.co/t/custom-ukrainian-analyzer/135635 "2018-07-07T07:43:45Z")

</div>

Hi. I am trying to use the analyzer from the Ukrainian Analysis plugin with Elasticsearch 6.0.1. I cannot figure out how to integrate it with my html\_strip and word\_delimiter filters. { "settings": { "analysis":…

---

## [Sending @metadata from logstash to elastic search](https://discuss.elastic.co/t/sending-metadata-from-logstash-to-elastic-search/92890)

<div class="topic-metadata">

**Author:** [@darraghjones](https://discuss.elastic.co/u/darraghjones)\
**Replies:** 4\
**Last updated:** [July 17, 2017, 3:15pm UTC](https://discuss.elastic.co/t/sending-metadata-from-logstash-to-elastic-search/92890 "2017-07-17T15:15:08Z")

</div>

I've got the following logstash config, and I'm trying to send the RabbitMQ headers (which are stored in the @metadata field) to ElasticSearch input { rabbitmq { auto\_delete =\> false durable =\> fals…

---

## [The problem of a lot of deleted docs?](https://discuss.elastic.co/t/the-problem-of-a-lot-of-deleted-docs/63241)

<div class="topic-metadata">

**Author:** [@famoss](https://discuss.elastic.co/u/famoss)\
**Replies:** 7\
**Last updated:** [October 19, 2016, 9:08am UTC](https://discuss.elastic.co/t/the-problem-of-a-lot-of-deleted-docs/63241 "2016-10-19T09:08:42Z")

</div>

I need to delete docs frequent,but es only flags these as deleted.If there are a lot of deleted docs,the speed of query will lower?And has other problems?

---

## [Dec 5, 2018: \[EN\]\[Elastic App Search\] Quick and easy typeahead search with Elastic App Search](https://discuss.elastic.co/t/dec-5-2018-en-elastic-app-search-quick-and-easy-typeahead-search-with-elastic-app-search/159221)

<div class="topic-metadata">

**Author:** [@peterkimnyc](https://discuss.elastic.co/u/peterkimnyc)\
**Replies:** 0\
**Last updated:** [December 5, 2018, 12:00am UTC](https://discuss.elastic.co/t/dec-5-2018-en-elastic-app-search-quick-and-easy-typeahead-search-with-elastic-app-search/159221 "2018-12-05T00:00:14Z")

</div>

Elastic App Search is a Search Solution from Elastic that makes it easier for application developers to implement and manage core search functionality in their user-facing applications. There's no need to understand the …

---

## [Kibana plugin stuck at optimizing and caching browser bundles](https://discuss.elastic.co/t/kibana-plugin-stuck-at-optimizing-and-caching-browser-bundles/89819)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 2\
**Last updated:** [June 19, 2017, 1:24pm UTC](https://discuss.elastic.co/t/kibana-plugin-stuck-at-optimizing-and-caching-browser-bundles/89819 "2017-06-19T13:24:57Z")

</div>

Hi, Just performed an upgrade my my stack from 5.4.0 --\> 5.4.1. All went well except when I went to install the new upgraded version of kibana x-pack it has hung at optimizing and caching browser bundles. I have tried re…

---

## [Delete Index and How to free up disk space](https://discuss.elastic.co/t/delete-index-and-how-to-free-up-disk-space/100354)

<div class="topic-metadata">

**Author:** [@swlee](https://discuss.elastic.co/u/swlee)\
**Replies:** 8\
**Last updated:** [September 13, 2017, 1:48pm UTC](https://discuss.elastic.co/t/delete-index-and-how-to-free-up-disk-space/100354 "2017-09-13T13:48:58Z")

</div>

using elastic 5.3.0 i was delete indices because "high disk watermark \[90%\]" warn. but disk space did not free up yet there is no "\_optimze" method.. how to free up? please help

---

## [Kibana behind apache reverse proxy](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy/300454)

<div class="topic-metadata">

**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\
**Replies:** 3\
**Last updated:** [March 29, 2022, 9:37am UTC](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy/300454 "2022-03-29T09:37:35Z")

</div>

Hi I'm trying to get kibana working behind and apache reverse proxy. I already have it working, but there's one issue (for which I already have a workaround) but I need to know if it's a configuration issue or a bug. The…

---

## [413- Request too large exception](https://discuss.elastic.co/t/413-request-too-large-exception/101562)

<div class="topic-metadata">

**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\
**Replies:** 8\
**Last updated:** [March 31, 2018, 9:25am UTC](https://discuss.elastic.co/t/413-request-too-large-exception/101562 "2018-03-31T09:25:18Z")

</div>

Hi, In our regular indexing scenario when using Bulk index API we are constantly hitting into "HTTP Status Code - 413, Exception - System.Net.WebException: The remote server returned an error: (413) Request Entity Too L…

---

## [Everything you Always Wanted to Know about Filebeat \* But Were Afraid to Ask](https://discuss.elastic.co/t/everything-you-always-wanted-to-know-about-filebeat-but-were-afraid-to-ask/264323)

<div class="topic-metadata">

**Author:** [@riferrei](https://discuss.elastic.co/u/riferrei)\
**Replies:** 0\
**Last updated:** [February 15, 2021, 2:32pm UTC](https://discuss.elastic.co/t/everything-you-always-wanted-to-know-about-filebeat-but-were-afraid-to-ask/264323 "2021-02-15T14:32:57Z")

</div>

I just published in the community channel from Elastic an video that introduces Filebeat. If you want to understand more about this Beat and get yourself hands-on with this technology then it may be a 1 hour very well sp…

---

## [Elastic Agent vs Fluentd/Fluentbit](https://discuss.elastic.co/t/elastic-agent-vs-fluentd-fluentbit/276762)

<div class="topic-metadata">

**Author:** [@CyberWarriorBob](https://discuss.elastic.co/u/CyberWarriorBob)\
**Replies:** 0\
**Last updated:** [June 23, 2021, 9:31am UTC](https://discuss.elastic.co/t/elastic-agent-vs-fluentd-fluentbit/276762 "2021-06-23T09:31:23Z")

</div>

I am unsure if this is the right platform to ask this, but here it goes - I am trying to find out what are the differences between Elastic Agent and Fluentd/Fluentbit, I am trying to find out also if it worth the change…

---

## [User Authentication and xpack problem starting Elasticsearch](https://discuss.elastic.co/t/user-authentication-and-xpack-problem-starting-elasticsearch/62997)

<div class="topic-metadata">

**Author:** [@iantayrob](https://discuss.elastic.co/u/iantayrob)\
**Replies:** 6\
**Last updated:** [October 27, 2016, 9:25pm UTC](https://discuss.elastic.co/t/user-authentication-and-xpack-problem-starting-elasticsearch/62997 "2016-10-27T21:25:35Z")

</div>

I have re-booted my cluster, but when I try to cat my nodes I get the following error: {"error":{"root\_cause":\[{"type":"security\_exception","reason":"failed to authenticate user \[elastic\]","header":{"WWW-Authenticate":…

---

## [Kibana without the login form](https://discuss.elastic.co/t/kibana-without-the-login-form/65231)

<div class="topic-metadata">

**Author:** [@Tal\_Weiss](https://discuss.elastic.co/u/Tal_Weiss)\
**Replies:** 5\
**Last updated:** [November 9, 2016, 9:45am UTC](https://discuss.elastic.co/t/kibana-without-the-login-form/65231 "2016-11-09T09:45:03Z")

</div>

Hi all, I'm using the latest cloud. I'd like to serve Kibana dashboards to my clients. Is there a way to disable the login form? Auto-Login via the URL? I'm willing to proxy the dashboard - will that work? What good …

---

## [Filebeat running on Kubernetes connected to Elasticsearch using SSL](https://discuss.elastic.co/t/filebeat-running-on-kubernetes-connected-to-elasticsearch-using-ssl/279946)

<div class="topic-metadata">

**Author:** [@jllorente](https://discuss.elastic.co/u/jllorente)\
**Replies:** 0\
**Last updated:** [July 29, 2021, 7:30am UTC](https://discuss.elastic.co/t/filebeat-running-on-kubernetes-connected-to-elasticsearch-using-ssl/279946 "2021-07-29T07:30:54Z")

</div>

I would like to use filebeat on Kubernetes and connect it to a secured Elasticsearch server, using certificates. I did a search to find how to do this but only found an un-answered related question. After some test I go…

---

## [Courier fetch: N of N shards failed](https://discuss.elastic.co/t/courier-fetch-n-of-n-shards-failed/27814)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 7\
**Last updated:** [August 24, 2015, 4:02am UTC](https://discuss.elastic.co/t/courier-fetch-n-of-n-shards-failed/27814 "2015-08-24T04:02:19Z")

</div>

Hi All, I would like to divide 'ismb.miki.host.ram.usage" with an number in percentile I found an issue and follow that steps, and then create a scripted field as following Then I create a visualization by Metric…

---

## [Trying to create too many scroll contexts. Must be less than or equal to: \[500\]. This limit can be set by changing the \[search.max\_open\_scroll\_context\] setting](https://discuss.elastic.co/t/trying-to-create-too-many-scroll-contexts-must-be-less-than-or-equal-to-500-this-limit-can-be-set-by-changing-the-search-max-open-scroll-context-setting/208884)

<div class="topic-metadata">

**Author:** [@Gokulnath](https://discuss.elastic.co/u/Gokulnath)\
**Replies:** 5\
**Last updated:** [November 22, 2019, 6:54am UTC](https://discuss.elastic.co/t/trying-to-create-too-many-scroll-contexts-must-be-less-than-or-equal-to-500-this-limit-can-be-set-by-changing-the-search-max-open-scroll-context-setting/208884 "2019-11-22T06:54:53Z")

</div>

Hey Team, Greetings...I am new to elasticsearch. Im getting this error."Trying to create too many scroll contexts. Must be less than or equal to: \[500\]. This limit can be set by changing the \[search.max\_open\_scroll\_cont…

---

## [Null validation in logstash](https://discuss.elastic.co/t/null-validation-in-logstash/49456)

<div class="topic-metadata">

**Author:** [@baneshbanna](https://discuss.elastic.co/u/baneshbanna)\
**Replies:** 7\
**Last updated:** [May 7, 2016, 10:26pm UTC](https://discuss.elastic.co/t/null-validation-in-logstash/49456 "2016-05-07T22:26:55Z")

</div>

How to check null dates in logstash. Null validation in logstash. I added below configuration is it correct if\[datetime\]!='null' and \[datetime\]!='NULL'{

---

## [Get query is showing only 10 results while searching for a particular data](https://discuss.elastic.co/t/get-query-is-showing-only-10-results-while-searching-for-a-particular-data/88187)

<div class="topic-metadata">

**Author:** [@ajoealex](https://discuss.elastic.co/u/ajoealex)\
**Replies:** 2\
**Last updated:** [June 5, 2017, 4:31am UTC](https://discuss.elastic.co/t/get-query-is-showing-only-10-results-while-searching-for-a-particular-data/88187 "2017-06-05T04:31:01Z")

</div>

I have indexed my email and trying to get the values of all senders email address. I used Get exchangemails/email/\_search?\_source=sender This returns { "took": 3, "timed\_out": false, "\_shards": { "total": …

---

## [Error creating bean with name 'client'](https://discuss.elastic.co/t/error-creating-bean-with-name-client/82554)

<div class="topic-metadata">

**Author:** [@zegdene](https://discuss.elastic.co/u/zegdene)\
**Replies:** 7\
**Last updated:** [April 18, 2017, 1:42pm UTC](https://discuss.elastic.co/t/error-creating-bean-with-name-client/82554 "2017-04-18T13:42:32Z")

</div>

I was trying to integrate elastic search onto spring-boot application but I got this \*Error creating bean with name 'client' \*Exception, not sure what is going wrong as I could not find any similar trails before... Th…

---

## [Conditional IF in logstash's filter](https://discuss.elastic.co/t/conditional-if-in-logstashs-filter/85779)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 2\
**Last updated:** [May 17, 2017, 12:07pm UTC](https://discuss.elastic.co/t/conditional-if-in-logstashs-filter/85779 "2017-05-17T12:07:57Z")

</div>

Hello, i work on conditional filter in logstash. Currently it's not working :frowning: Here a few example of line in my file : 20170415020000;Nb\_RQ\_live-C-FWK-WRK-DM-2;server5;2 20170415020000;Nb\_RQ\_live-C-FWK-WR…

---

## [Indices not showing on Kibana](https://discuss.elastic.co/t/indices-not-showing-on-kibana/116849)

<div class="topic-metadata">

**Author:** [@User\_2\_Guest\_Incomin](https://discuss.elastic.co/u/User_2_Guest_Incomin)\
**Replies:** 7\
**Last updated:** [January 24, 2018, 11:44am UTC](https://discuss.elastic.co/t/indices-not-showing-on-kibana/116849 "2018-01-24T11:44:39Z")

</div>

Hello ppl, I'm working with some indices (index1 and index2), once I've created index1 and configured etc, I create the second one, without erros or problems, exept when I try to create it on Kibana App, \[imagen\] as y…

---

## [Bulk queue\_size](https://discuss.elastic.co/t/bulk-queue-size/50496)

<div class="topic-metadata">

**Author:** [@caddala](https://discuss.elastic.co/u/caddala)\
**Replies:** 8\
**Last updated:** [June 22, 2016, 8:46pm UTC](https://discuss.elastic.co/t/bulk-queue-size/50496 "2016-06-22T20:46:01Z")

</div>

We are using ES 1.7 in production with 3 nodes. We were planning to increase the bulk.queue\_size parameter to 100 instead of the default 50 and then I noticed this. Notice how the bulk.active, bulk.queue and bulk.rejecte…

---

## [Re-index aggregation ElasticSearch](https://discuss.elastic.co/t/re-index-aggregation-elasticsearch/75325)

<div class="topic-metadata">

**Author:** [@cfifua](https://discuss.elastic.co/u/cfifua)\
**Replies:** 1\
**Last updated:** [February 17, 2017, 8:16am UTC](https://discuss.elastic.co/t/re-index-aggregation-elasticsearch/75325 "2017-02-17T08:16:45Z")

</div>

Hey, I have an Elastic Search cluster with one index per day. I need to be able to query all the historical data, but storing it requires lots of space. Thus I'd like to aggregate old indices by some dimensions into ti…

---

## [Field Mapping index false vs true](https://discuss.elastic.co/t/field-mapping-index-false-vs-true/143991)

<div class="topic-metadata">

**Author:** [@west415](https://discuss.elastic.co/u/west415)\
**Replies:** 2\
**Last updated:** [August 12, 2018, 9:12pm UTC](https://discuss.elastic.co/t/field-mapping-index-false-vs-true/143991 "2018-08-12T21:12:48Z")

</div>

I am using Elastic 6.x... Is there any reason to not just go with the default of "index" : true for field mappings? There are some fields that I don't believe I will need to perform a search on so my thought is set ind…

---

## [GCLocker too often allocating 256 words](https://discuss.elastic.co/t/gclocker-too-often-allocating-256-words/323769)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 1\
**Last updated:** [January 24, 2023, 12:33am UTC](https://discuss.elastic.co/t/gclocker-too-often-allocating-256-words/323769 "2023-01-24T00:33:00Z")

</div>

How I can tune up config due to warning \[1154.233s\]\[warning\]\[gc,alloc\] \[npdb\_dns\]\>worker20: Retried waiting for GCLocker too often allocating 256 words \[1154.233s\]\[warning\]\[gc,alloc\] \[npdb\_network\]\>worker7: Retried wai…

---

## [Making Kibana faster](https://discuss.elastic.co/t/making-kibana-faster/90347)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 3\
**Last updated:** [June 30, 2017, 8:57pm UTC](https://discuss.elastic.co/t/making-kibana-faster/90347 "2017-06-30T20:57:02Z")

</div>

I'm surprised that I haven't been able to find much information on making Kibana run faster. So currently, my dashboards in Kibana are running very slow and I'm pretty sure it is on the kibana side of things. For my 8 …

---

## [Collector \[cluster-stats-collector\] timed out when collecting data](https://discuss.elastic.co/t/collector-cluster-stats-collector-timed-out-when-collecting-data/80568)

<div class="topic-metadata">

**Author:** [@wyukawa](https://discuss.elastic.co/u/wyukawa)\
**Replies:** 1\
**Last updated:** [April 25, 2017, 1:01am UTC](https://discuss.elastic.co/t/collector-cluster-stats-collector-timed-out-when-collecting-data/80568 "2017-04-25T01:01:23Z")

</div>

Hi I use Elasti Stack 5.3 with X-Pack Monitoring. I found the following error. \[2017-03-29T23:55:39,432\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[some host\] collector \[cluster-stats-collector\] timed out when collec…

---

## [Filebeat StartUp error](https://discuss.elastic.co/t/filebeat-startup-error/63477)

<div class="topic-metadata">

**Author:** [@manojvenkat](https://discuss.elastic.co/u/manojvenkat)\
**Replies:** 6\
**Last updated:** [October 21, 2016, 11:25am UTC](https://discuss.elastic.co/t/filebeat-startup-error/63477 "2016-10-21T11:25:09Z")

</div>

Dear All, I have installed Filebeat on my application server and have updated filebeat.yml to ship logs to logstash. When I run the command to start the filebeat I get below error. Please advice. filebeat.service - f…

---

## [Version Conflict Engine Exception - seqNo question](https://discuss.elastic.co/t/version-conflict-engine-exception-seqno-question/272930)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 1\
**Last updated:** [May 13, 2021, 5:11pm UTC](https://discuss.elastic.co/t/version-conflict-engine-exception-seqno-question/272930 "2021-05-13T17:11:49Z")

</div>

Hi All, I'm getting version\_conflict\_engine\_exception when doing an update by query in an index with one shard and no replicas. I do not understand well why is this situation happening. Is there any place in the doc …

---

## [Run Kibana as Windows Service](https://discuss.elastic.co/t/run-kibana-as-windows-service/36527)

<div class="topic-metadata">

**Author:** [@Landong.Zuo](https://discuss.elastic.co/u/Landong.Zuo)\
**Replies:** 6\
**Last updated:** [February 27, 2017, 11:30am UTC](https://discuss.elastic.co/t/run-kibana-as-windows-service/36527 "2017-02-27T11:30:28Z")

</div>

Hi, I've recently upgraded Kibana to 4.3.0 from 4.0.2 and set it up as a backend service for Windows 7 using the following command line: sc create "ElasticSearch-Kibana-4.3.0" binPath= "C:\\experiment\\kibana-4.3.0-win…

---

## [Locked/read only indices](https://discuss.elastic.co/t/locked-read-only-indices/144850)

<div class="topic-metadata">

**Author:** [@nkaenzig](https://discuss.elastic.co/u/nkaenzig)\
**Replies:** 7\
**Last updated:** [August 17, 2018, 9:02am UTC](https://discuss.elastic.co/t/locked-read-only-indices/144850 "2018-08-17T09:02:54Z")

</div>

When I try to change my visualizations in Kibana I get the following message: Visualization Editor: blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];: \[cluster\_block\_exception\] blocked by: \[FORBIDDEN/12/i…

---

## [Beats protocol](https://discuss.elastic.co/t/beats-protocol/54296)

<div class="topic-metadata">

**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\
**Replies:** 6\
**Last updated:** [July 12, 2016, 10:34am UTC](https://discuss.elastic.co/t/beats-protocol/54296 "2016-07-12T10:34:18Z")

</div>

what is the protocol used for beat input in logstash \[tcp or udp\]? Can I configure the protocol used i.e. TCP or UDP?

---

## [Multiple visualizations on a single graph](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 7\
**Last updated:** [December 24, 2015, 4:04pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719 "2015-12-24T16:04:35Z")

</div>

With Kibana 3 I could create a graph and have multiple, unrelated queries as shown below: Is there a way to achieve this with Kibana 4? Thank you.

---

## [Put JSON into elasticsearch?](https://discuss.elastic.co/t/put-json-into-elasticsearch/178971)

<div class="topic-metadata">

**Author:** [@Moxyze](https://discuss.elastic.co/u/Moxyze)\
**Replies:** 4\
**Last updated:** [April 29, 2019, 7:24pm UTC](https://discuss.elastic.co/t/put-json-into-elasticsearch/178971 "2019-04-29T19:24:43Z")

</div>

Hello! This topic may be a duplicate, but I couldn't find anything appropriate, so please bare with me on this one. So anyway, how do I import a JSON file into elasticsearch from command line? I was trying something …

---

## [Kibana throwing 500 Internal Server Error](https://discuss.elastic.co/t/kibana-throwing-500-internal-server-error/91287)

<div class="topic-metadata">

**Author:** [@parora236](https://discuss.elastic.co/u/parora236)\
**Replies:** 6\
**Last updated:** [July 6, 2017, 3:35pm UTC](https://discuss.elastic.co/t/kibana-throwing-500-internal-server-error/91287 "2017-07-06T15:35:16Z")

</div>

This morning I am seeing that Kibana URL is throwing 500 Internal Server Error: Mine is a single instance of Elastic Search and Kibana. I've restarted both the services but it is still not helping. Could someone recommen…

[Previous page](https://discuss.elastic.co/top.md?page=270&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=272&per_page=50&period=all)
