# Top

**URL:** https://discuss.elastic.co/top.md?page=300&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 301

---

## [Kibana error "Kibana server is not ready yet"](https://discuss.elastic.co/t/kibana-error-kibana-server-is-not-ready-yet/206324)

<div class="topic-metadata">

**Author:** [@HyunLee](https://discuss.elastic.co/u/HyunLee)\
**Replies:** 1\
**Last updated:** [November 19, 2019, 9:19am UTC](https://discuss.elastic.co/t/kibana-error-kibana-server-is-not-ready-yet/206324 "2019-11-19T09:19:05Z")

</div>

Hello guys. I got "Kibana server is not ready yet" message while setting ELK-stack. This is my second trial but got this again, and I even couldn’t get any clue on this yet. Elasticsearch and kibana version is 7.3.2 an…

---

## [Query for the fields which is non empty](https://discuss.elastic.co/t/query-for-the-fields-which-is-non-empty/345764)

<div class="topic-metadata">

**Author:** [@Manasa4](https://discuss.elastic.co/u/Manasa4)\
**Replies:** 5\
**Last updated:** [November 4, 2023, 6:27pm UTC](https://discuss.elastic.co/t/query-for-the-fields-which-is-non-empty/345764 "2023-11-04T18:27:32Z")

</div>

Hi Team, I'm reaching out query that I have, I want a query which returns the field with any random value inside it and filter out the empty records. For eg: In my case, I have a FileContent.content field and it has va…

---

## [Flattened fields with query\_string and wildcards](https://discuss.elastic.co/t/flattened-fields-with-query-string-and-wildcards/303400)

<div class="topic-metadata">

**Author:** [@dor](https://discuss.elastic.co/u/dor)\
**Replies:** 0\
**Last updated:** [April 27, 2022, 12:29pm UTC](https://discuss.elastic.co/t/flattened-fields-with-query-string-and-wildcards/303400 "2022-04-27T12:29:46Z")

</div>

Hi, I'm using Elasticsearch 8, and I'm having weird behaviors with flattened fields and query strings with wildcards. Let's have this test index: PUT test\_index { "mappings": { "properties": { "flattened\_f…

---

## [Create index fails with shard\_acknowledged = false](https://discuss.elastic.co/t/create-index-fails-with-shard-acknowledged-false/117640)

<div class="topic-metadata">

**Author:** [@m.hashemian](https://discuss.elastic.co/u/m.hashemian)\
**Replies:** 2\
**Last updated:** [January 30, 2018, 5:58pm UTC](https://discuss.elastic.co/t/create-index-fails-with-shard-acknowledged-false/117640 "2018-01-30T17:58:25Z")

</div>

Hi, I'm using elastic 6.1 on CentOS 7. The server is a bit slow. When I try to create an index using this command: curl -XPUT 'localhost:9200/user\_activity?pretty' -H 'Content-Type: application/json' -d' { "setting…

---

## [NXLog Best Practices and Multiple Log Inputs](https://discuss.elastic.co/t/nxlog-best-practices-and-multiple-log-inputs/61872)

<div class="topic-metadata">

**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\
**Replies:** 8\
**Last updated:** [October 4, 2016, 4:48pm UTC](https://discuss.elastic.co/t/nxlog-best-practices-and-multiple-log-inputs/61872 "2016-10-04T16:48:28Z")

</div>

Has anyone seen a best practices for how to configure NXLog? Im looking for recommendations on the best way to configure CPU and memory buffers, Inputs, Outputs, Routes, ect. Also we will have multiple Input log files …

---

## [How to set multiple filter conditions in a Nested Object](https://discuss.elastic.co/t/how-to-set-multiple-filter-conditions-in-a-nested-object/141146)

<div class="topic-metadata">

**Author:** [@abeltodev](https://discuss.elastic.co/u/abeltodev)\
**Replies:** 6\
**Last updated:** [July 23, 2018, 8:44pm UTC](https://discuss.elastic.co/t/how-to-set-multiple-filter-conditions-in-a-nested-object/141146 "2018-07-23T20:44:10Z")

</div>

Hi, I have an object with multiple nested objects. Like this: { "\_source" : { 'title': 'blabla', "languages":\[ {"id":2,"name":"English","slug":"English","level":"0","mandatory":"false"}, {"id":…

---

## [Elastic search \_id uuid format](https://discuss.elastic.co/t/elastic-search--id-uuid-format/28801)

<div class="topic-metadata">

**Author:** [@eprst](https://discuss.elastic.co/u/eprst)\
**Replies:** 5\
**Last updated:** [March 23, 2016, 2:55pm UTC](https://discuss.elastic.co/t/elastic-search--id-uuid-format/28801 "2016-03-23T14:55:26Z")

</div>

I can add document with id which is formated like xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx. but when i create new document without setting up id it will be like xx-xxxxxxxxxxxxxxxxx. how can i configure elasticsearch to cr…

---

## [How to manage large config files](https://discuss.elastic.co/t/how-to-manage-large-config-files/34263)

<div class="topic-metadata">

**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\
**Replies:** 8\
**Last updated:** [October 7, 2016, 6:27pm UTC](https://discuss.elastic.co/t/how-to-manage-large-config-files/34263 "2016-10-07T18:27:27Z")

</div>

As I continue to test logstash I want to make it easier to read and edit. Meaning that my config file is getting t0o large because I am pulling logs of many types each having their own unique way of being parsed. So is t…

---

## [How do I check if Logstash is receiving logs from filebeat?](https://discuss.elastic.co/t/how-do-i-check-if-logstash-is-receiving-logs-from-filebeat/165652)

<div class="topic-metadata">

**Author:** [@CG3](https://discuss.elastic.co/u/CG3)\
**Replies:** 2\
**Last updated:** [January 28, 2019, 8:11pm UTC](https://discuss.elastic.co/t/how-do-i-check-if-logstash-is-receiving-logs-from-filebeat/165652 "2019-01-28T20:11:47Z")

</div>

I have an elastic cluster using logstash as the receiver of data. I have several windows machines collecting logs with filebeat and sending to logstash to view in kibana. This is working fine. I now need to add a Linu…

---

## [How can convert field to int, float](https://discuss.elastic.co/t/how-can-convert-field-to-int-float/49702)

<div class="topic-metadata">

**Author:** [@cmorell](https://discuss.elastic.co/u/cmorell)\
**Replies:** 7\
**Last updated:** [February 17, 2017, 7:37pm UTC](https://discuss.elastic.co/t/how-can-convert-field-to-int-float/49702 "2017-02-17T19:37:31Z")

</div>

Hello, I'm starting to use ELK, but I have a problem to convert fields... always, all the fields types are string. Here an example of log line: 2016-05-10 19:44:37 123 12 199 and here logstash config file: in…

---

## [Elasticsearch DSL written in Rust](https://discuss.elastic.co/t/elasticsearch-dsl-written-in-rust/287448)

<div class="topic-metadata">

**Author:** [@buinauskas\_evaldas](https://discuss.elastic.co/u/buinauskas_evaldas)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 3:29am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-written-in-rust/287448 "2021-10-25T03:29:07Z")

</div>

Good day, I'd like to shamelessly promote GitHub - vinted/elasticsearch-dsl-rs: Strongly typed Elasticsearch DSL written in Rust, it's Elasticsearch DSL written in Rust. It supports most of the queries, a couple of aggre…

---

## [How can I check if an object is empty?](https://discuss.elastic.co/t/how-can-i-check-if-an-object-is-empty/76380)

<div class="topic-metadata">

**Author:** [@Jean\_Helou](https://discuss.elastic.co/u/Jean_Helou)\
**Replies:** 5\
**Last updated:** [February 24, 2017, 4:25pm UTC](https://discuss.elastic.co/t/how-can-i-check-if-an-object-is-empty/76380 "2017-02-24T16:25:14Z")

</div>

I manipulate http requests. my event structure looks like { "http\_body":{ "raw":"..." } } I detect the content type of the requests and when it's application/json, I parse the http\_body as json and endup with …

---

## [No \[query\] registered for \[filtered\]](https://discuss.elastic.co/t/no-query-registered-for-filtered/64635)

<div class="topic-metadata">

**Author:** [@AndyB](https://discuss.elastic.co/u/AndyB)\
**Replies:** 1\
**Last updated:** [November 1, 2016, 9:06pm UTC](https://discuss.elastic.co/t/no-query-registered-for-filtered/64635 "2016-11-01T21:06:05Z")

</div>

My code was running fine on ElasticSearch v2x. But upgrading to ElasticSearch v5.0.0 I get the following error when I output the results: PHP { "error" : { "root\_cause" : \[ { "type" : "parsing\_exce…

---

## [Filebeat repeatedly sending old entries in log file](https://discuss.elastic.co/t/filebeat-repeatedly-sending-old-entries-in-log-file/55796)

<div class="topic-metadata">

**Author:** [@jmtrachy](https://discuss.elastic.co/u/jmtrachy)\
**Replies:** 2\
**Last updated:** [July 20, 2016, 2:25am UTC](https://discuss.elastic.co/t/filebeat-repeatedly-sending-old-entries-in-log-file/55796 "2016-07-20T02:25:38Z")

</div>

Hello - just started using filebeat in a very simple setup and am seeing some odd behavior. My configuration is as follows: filebeat: prospectors: - paths: - /usr/src/app/\*.log input\_type: l…

---

## [Beats can not connect to Logstash](https://discuss.elastic.co/t/beats-can-not-connect-to-logstash/224502)

<div class="topic-metadata">

**Author:** [@namesv](https://discuss.elastic.co/u/namesv)\
**Replies:** 3\
**Last updated:** [March 23, 2020, 5:53am UTC](https://discuss.elastic.co/t/beats-can-not-connect-to-logstash/224502 "2020-03-23T05:53:28Z")

</div>

Hi, I've been struggling to connect my filebeat to logstash in order to harvest the logs on node machines. Below is my error/ log from Logstash sudo /usr/share/logstash/bin/logstash -f ~/1phase2.conf --config.reload.a…

---

## [Logstash failing on InvalidFrameProtocolException: Invalid Frame Type, received: 69/84](https://discuss.elastic.co/t/logstash-failing-on-invalidframeprotocolexception-invalid-frame-type-received-69-84/175423)

<div class="topic-metadata">

**Author:** [@Tharun](https://discuss.elastic.co/u/Tharun)\
**Replies:** 7\
**Last updated:** [April 5, 2019, 12:52am UTC](https://discuss.elastic.co/t/logstash-failing-on-invalidframeprotocolexception-invalid-frame-type-received-69-84/175423 "2019-04-05T00:52:03Z")

</div>

Hello, Using logstash version 6.5.4 and filebeats version 6.4.2. Sometimes logstash is going down because of this, but couldn't find any misconfiguration that is causing this issue, can someone please help me out on th…

---

## [Kibana 8.11.1 Security Update (ESA-2023-25)](https://discuss.elastic.co/t/kibana-8-11-1-security-update-esa-2023-25/347149)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 2\
**Last updated:** [November 17, 2023, 3:18am UTC](https://discuss.elastic.co/t/kibana-8-11-1-security-update-esa-2023-25/347149 "2023-11-17T03:18:11Z")

</div>

Kibana Insertion of Sensitive Information into Log File (ESA-2023-25) An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana …

---

## [Parsing different syslog date formats](https://discuss.elastic.co/t/parsing-different-syslog-date-formats/63431)

<div class="topic-metadata">

**Author:** [@pixelrebel](https://discuss.elastic.co/u/pixelrebel)\
**Replies:** 4\
**Last updated:** [October 20, 2016, 7:13am UTC](https://discuss.elastic.co/t/parsing-different-syslog-date-formats/63431 "2016-10-20T07:13:21Z")

</div>

I have two types of timestamps coming into my logstash syslog input: SYSLOGTIMESTAMP - "Oct 19 11:29:00" TIMESTAMP\_ISO8601 - "2016-10-19T18:31:52.519Z" My grok below works for both: grok { …

---

## [How to use parallel\_bulk function](https://discuss.elastic.co/t/how-to-use-parallel-bulk-function/181741)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 6\
**Last updated:** [May 20, 2019, 7:46am UTC](https://discuss.elastic.co/t/how-to-use-parallel-bulk-function/181741 "2019-05-20T07:46:32Z")

</div>

I have a document to be indexed to elastic search , it is 200 MB file ,so i want to use parallel bulk.. file is in this format. \[{},{},{},{}\] basically it is an array of objects. but when i try to index using paralle…

---

## [No connection could be made because the target machine actively refused](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused/84175)

<div class="topic-metadata">

**Author:** [@Fryette](https://discuss.elastic.co/u/Fryette)\
**Replies:** 6\
**Last updated:** [May 5, 2017, 7:45pm UTC](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused/84175 "2017-05-05T19:45:48Z")

</div>

I have an issue I tried to use elasticsearch, but have an issue Invalid NEST response built from a unsuccessful low level call on PUT: /mytweetindex/tweet/1 Audit trail of this API call: - \[1\] BadRequest: Node: h…

---

## [Long messages not displayed](https://discuss.elastic.co/t/long-messages-not-displayed/138922)

<div class="topic-metadata">

**Author:** [@zizou](https://discuss.elastic.co/u/zizou)\
**Replies:** 6\
**Last updated:** [July 6, 2018, 3:09pm UTC](https://discuss.elastic.co/t/long-messages-not-displayed/138922 "2018-07-06T15:09:53Z")

</div>

Hi All, I Have problem when I try to display long message 1000 caractere in kibana. I use a data table so, some message is display but the long message wasn't display. Do you know if it have a limit caractere to displ…

---

## [Gantt Visualization Using Vega](https://discuss.elastic.co/t/gantt-visualization-using-vega/136532)

<div class="topic-metadata">

**Author:** [@maseca](https://discuss.elastic.co/u/maseca)\
**Replies:** 6\
**Last updated:** [June 20, 2018, 8:00pm UTC](https://discuss.elastic.co/t/gantt-visualization-using-vega/136532 "2018-06-20T20:00:23Z")

</div>

I know that this is possible, but I'm having serious difficulties getting what I want to display. My data has a "start\_time" and an "end\_time" field, and I just want to do a match\_all query and plug those fields in as…

---

## [How to avoid "failed to find nested object under path" when searching over many indexes?](https://discuss.elastic.co/t/how-to-avoid-failed-to-find-nested-object-under-path-when-searching-over-many-indexes/7804)

<div class="topic-metadata">

**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\
**Replies:** 5\
**Last updated:** [November 16, 2012, 8:41am UTC](https://discuss.elastic.co/t/how-to-avoid-failed-to-find-nested-object-under-path-when-searching-over-many-indexes/7804 "2012-11-16T08:41:18Z")

</div>

Hi, is it possible to search on indexes that have no nested objects in the mapping when searching with a nested query over many indexes? I get the following error message "failed to find nested object under pat…

---

## [How to change the DASHBOARD background color to BLACK in kibana 7.0.1 version](https://discuss.elastic.co/t/how-to-change-the-dashboard-background-color-to-black-in-kibana-7-0-1-version/181926)

<div class="topic-metadata">

**Author:** [@Karthik\_Kanna](https://discuss.elastic.co/u/Karthik_Kanna)\
**Replies:** 1\
**Last updated:** [May 21, 2019, 5:14pm UTC](https://discuss.elastic.co/t/how-to-change-the-dashboard-background-color-to-black-in-kibana-7-0-1-version/181926 "2019-05-21T17:14:26Z")

</div>

Hi everyone, I am using the Kibana 7.0.1 and I want to change the dashboard background color to BLACK , but I cannot find this option on UI. Is there any way to do this ? Thanks!

---

## [Creating a temporary variable in logstash](https://discuss.elastic.co/t/creating-a-temporary-variable-in-logstash/107820)

<div class="topic-metadata">

**Author:** [@joconner](https://discuss.elastic.co/u/joconner)\
**Replies:** 3\
**Last updated:** [November 15, 2017, 8:27pm UTC](https://discuss.elastic.co/t/creating-a-temporary-variable-in-logstash/107820 "2017-11-15T20:27:32Z")

</div>

As I experiment with logstash, I have tried to create temporary variables to hold data that I hope to later use to use in an add\_field statement. However, I often see configuration errors when I try to do this. How does…

---

## [Delete is real-time or not?](https://discuss.elastic.co/t/delete-is-real-time-or-not/182290)

<div class="topic-metadata">

**Author:** [@artelk](https://discuss.elastic.co/u/artelk)\
**Replies:** 6\
**Last updated:** [May 22, 2019, 6:04pm UTC](https://discuss.elastic.co/t/delete-is-real-time-or-not/182290 "2019-05-22T18:04:12Z")

</div>

Is it possible that after Delete operation executed the object can be still searchable (can be returned from Search and Get operations) for some period of time? Delete operation has optional refresh parameter: https://…

---

## [Crawling web sites and indexing the extracted content](https://discuss.elastic.co/t/crawling-web-sites-and-indexing-the-extracted-content/3545)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 7\
**Last updated:** [July 13, 2011, 10:42am UTC](https://discuss.elastic.co/t/crawling-web-sites-and-indexing-the-extracted-content/3545 "2011-07-13T10:42:11Z")

</div>

Hi, does anybody have any experience crawling web content and indexing it with Elastic Search? I need to crawl relatively small number of web pages from few internet domain and extract some content from these web…

---

## [SSL: routines:OPENSSL\_internal:WRONG\_VERSION\_NUMBER](https://discuss.elastic.co/t/ssl-routineswrong-version-number/158019)

<div class="topic-metadata">

**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Replies:** 2\
**Last updated:** [November 26, 2018, 7:00am UTC](https://discuss.elastic.co/t/ssl-routineswrong-version-number/158019 "2018-11-26T07:00:34Z")

</div>

I just restarted elasticsearch service and everything has stopped working. Below is the output that I get for : curl -XGET 'http://localhost:9200/filebeat-\*/\_search?pretty' Connection refused Connection refused Descr…

---

## [Flatten json array in Logstash](https://discuss.elastic.co/t/flatten-json-array-in-logstash/399)

<div class="topic-metadata">

**Author:** [@rmoff](https://discuss.elastic.co/u/rmoff)\
**Replies:** 7\
**Last updated:** [February 8, 2017, 8:52am UTC](https://discuss.elastic.co/t/flatten-json-array-in-logstash/399 "2017-02-08T08:52:17Z")

</div>

Is there a way to flatten a json array in Logstash? Use-case is twitter input plugin, wanting to make array data usable in Kibana, c.f. https://discuss.elastic.co/t/show-images-from-urls-in-data/337/4?u=rmoff thanks.

---

## [Elastic Stack and GDPR (reloaded)](https://discuss.elastic.co/t/elastic-stack-and-gdpr-reloaded/121121)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 3\
**Last updated:** [March 2, 2018, 1:15pm UTC](https://discuss.elastic.co/t/elastic-stack-and-gdpr-reloaded/121121 "2018-03-02T13:15:43Z")

</div>

Since the topic is closed, I'm continuing the discussion from General Data Protection Regulation (GDPR) because I believe it can be of general interest (especially given the timing): First of all thank you @sihil for br…

---

## [Best way to index multiple languages](https://discuss.elastic.co/t/best-way-to-index-multiple-languages/6410)

<div class="topic-metadata">

**Author:** [@Alexandre](https://discuss.elastic.co/u/Alexandre)\
**Replies:** 8\
**Last updated:** [January 24, 2012, 3:49am UTC](https://discuss.elastic.co/t/best-way-to-index-multiple-languages/6410 "2012-01-24T03:49:02Z")

</div>

Hi, I am trying to figure out gow to index the following in ES. I have documents representing location names (geonames.org). Each document has a category such as Airport, restaurant, river, beach etc .. I have t…

---

## [Avro Schema convert to Elasticsearch mapping](https://discuss.elastic.co/t/avro-schema-convert-to-elasticsearch-mapping/122438)

<div class="topic-metadata">

**Author:** [@happyprg](https://discuss.elastic.co/u/happyprg)\
**Replies:** 4\
**Last updated:** [March 22, 2018, 9:23am UTC](https://discuss.elastic.co/t/avro-schema-convert-to-elasticsearch-mapping/122438 "2018-03-22T09:23:25Z")

</div>

I saw the below issue on this forum So I made this project for solving it. It has two features. First, you can load Avro schema using Registry API Secondly, you can convert Avro schema to Elasticsearch Mapping …

---

## [Unable to read from standard input; is standard input open and a tty attached?](https://discuss.elastic.co/t/unable-to-read-from-standard-input-is-standard-input-open-and-a-tty-attached/138449)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 8\
**Last updated:** [July 9, 2018, 3:41am UTC](https://discuss.elastic.co/t/unable-to-read-from-standard-input-is-standard-input-open-and-a-tty-attached/138449 "2018-07-09T03:41:18Z")

</div>

while trying to follow Install Elasticsearch with Docker | Elasticsearch Reference and stumble upon following issue using elasticsearch-plugin (A tool for managing installed elasticsearch plugins). docker run - manually…

---

## [Too\_many\_requests (429)](https://discuss.elastic.co/t/too-many-requests-429/104724)

<div class="topic-metadata">

**Author:** [@hungl99](https://discuss.elastic.co/u/hungl99)\
**Replies:** 3\
**Last updated:** [October 23, 2017, 3:06pm UTC](https://discuss.elastic.co/t/too-many-requests-429/104724 "2017-10-23T15:06:29Z")

</div>

I observed these errors from the filebeat log. 2017-10-20T10:50:59-04:00 INFO Template already exists and will not be overwritten. 2017-10-20T10:50:59-04:00 ERR Failed to perform any bulk index operations: 429 Too Many…

---

## [Kibana 4 start up is failing with error "Service Unavailable"](https://discuss.elastic.co/t/kibana-4-start-up-is-failing-with-error-service-unavailable/26809)

<div class="topic-metadata">

**Author:** [@Kuldip\_Madnani](https://discuss.elastic.co/u/Kuldip_Madnani)\
**Replies:** 5\
**Last updated:** [December 7, 2015, 11:47pm UTC](https://discuss.elastic.co/t/kibana-4-start-up-is-failing-with-error-service-unavailable/26809 "2015-12-07T23:47:18Z")

</div>

I am trying to start Kibana as a service on RHEL 6 but am facing with these error in logs: {"name":"Kibana","hostname":"zllt3949","pid":119501,"level":50,"err":{"message":"Service Unavailable","name":"Error","stack":"Er…

---

## [Filebeat status failed . Please help](https://discuss.elastic.co/t/filebeat-status-failed-please-help/90132)

<div class="topic-metadata">

**Author:** [@manojkal](https://discuss.elastic.co/u/manojkal)\
**Replies:** 5\
**Last updated:** [June 20, 2017, 11:25pm UTC](https://discuss.elastic.co/t/filebeat-status-failed-please-help/90132 "2017-06-20T23:25:34Z")

</div>

filebeat.yml filebeat: prospectors: - input\_type: log paths: - /var/log/\*.log registry\_file: /var/lib/filebeat/registry output.elasticsearch: hosts: \["10.8.20.138:80/es"\] output: logstash: ho…

---

## [Elasticsearch - Too many open files](https://discuss.elastic.co/t/elasticsearch-too-many-open-files/44303)

<div class="topic-metadata">

**Author:** [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)\
**Replies:** 3\
**Last updated:** [March 18, 2016, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-too-many-open-files/44303 "2016-03-18T08:22:52Z")

</div>

Hello Elasticusers, I have an issue with Elasticsearch, to begin this is my Elasticsearch cluster configuration : 3 nodes with 8Gb of RAM Mounted disk to store data, logs, snapshots... (400Gb) For the data, I have cu…

---

## [Possability to use ELK-Stack for SNMP Monitoring like PRTG, CheckMK](https://discuss.elastic.co/t/possability-to-use-elk-stack-for-snmp-monitoring-like-prtg-checkmk/334073)

<div class="topic-metadata">

**Author:** [@tweak19](https://discuss.elastic.co/u/tweak19)\
**Replies:** 0\
**Last updated:** [May 23, 2023, 5:49am UTC](https://discuss.elastic.co/t/possability-to-use-elk-stack-for-snmp-monitoring-like-prtg-checkmk/334073 "2023-05-23T05:49:21Z")

</div>

Hi, I would like to ask if there is a way to use ELK stack for SNMP polling of a large number of different devices with different SNMP v3 settings and different OIDs. The idea behind this is that I would have a system …

---

## [\_node/stats - duration\_in\_millis vs queue\_push\_duration\_in\_millis](https://discuss.elastic.co/t/-node-stats-duration-in-millis-vs-queue-push-duration-in-millis/90000)

<div class="topic-metadata">

**Author:** [@bhatch](https://discuss.elastic.co/u/bhatch)\
**Replies:** 3\
**Last updated:** [June 21, 2017, 8:35am UTC](https://discuss.elastic.co/t/-node-stats-duration-in-millis-vs-queue-push-duration-in-millis/90000 "2017-06-21T08:35:37Z")

</div>

We recently upgraded Logstash to 5.4.1 and have been having some performance issues. In order to try drilling down into what is going on I have been drilling into the node stats API. However not all of the fields are wel…

---

## [How to reduce the doc\_count\_error\_upper\_bound and sum\_other\_doc\_count during aggregation to improve accuracy](https://discuss.elastic.co/t/how-to-reduce-the-doc-count-error-upper-bound-and-sum-other-doc-count-during-aggregation-to-improve-accuracy/80302)

<div class="topic-metadata">

**Author:** [@pulaksahoo94](https://discuss.elastic.co/u/pulaksahoo94)\
**Replies:** 0\
**Last updated:** [March 28, 2017, 1:09pm UTC](https://discuss.elastic.co/t/how-to-reduce-the-doc-count-error-upper-bound-and-sum-other-doc-count-during-aggregation-to-improve-accuracy/80302 "2017-03-28T13:09:48Z")

</div>

how to reduce the doc\_count\_error\_upper\_bound and sum\_other\_doc\_count during aggregation to improve accuracy?

---

## [SQL connection exception continuing in Logstash](https://discuss.elastic.co/t/sql-connection-exception-continuing-in-logstash/74641)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 0\
**Last updated:** [February 10, 2017, 11:12am UTC](https://discuss.elastic.co/t/sql-connection-exception-continuing-in-logstash/74641 "2017-02-10T11:12:24Z")

</div>

Hi, I am using jdbc input in Logstash, to fetch log entries from two different postgres tables. The queries are scheduled o run every hour, which fetched new nows only. Today, I am getting no entries in my elasticsearc…

---

## [Logstash failing after installing x-pack, elastic stack 6](https://discuss.elastic.co/t/logstash-failing-after-installing-x-pack-elastic-stack-6/112826)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 7:31pm UTC](https://discuss.elastic.co/t/logstash-failing-after-installing-x-pack-elastic-stack-6/112826 "2018-01-10T19:31:41Z")

</div>

Hi everyone! I try to add to my Elastic stack 6 x-pack, on my CenOS7 VM. Everything worked fine before x-pack was installed. I followed closely this manual: Installing X-Pack | X-Pack for the Elastic Stack \[6.2\] | Ela…

---

## [How to store results temporarily or use a subquery](https://discuss.elastic.co/t/how-to-store-results-temporarily-or-use-a-subquery/106341)

<div class="topic-metadata">

**Author:** [@Dulanjan\_Katuwawela](https://discuss.elastic.co/u/Dulanjan_Katuwawela)\
**Replies:** 5\
**Last updated:** [November 7, 2017, 4:18pm UTC](https://discuss.elastic.co/t/how-to-store-results-temporarily-or-use-a-subquery/106341 "2017-11-07T16:18:03Z")

</div>

So I did search for use of subqueries but most posts are from several years back, so reposting to make sure there's no feature that's come up recently. If I have a query that results in a million IDs, how do I query aga…

---

## [Backup repository missing exception](https://discuss.elastic.co/t/backup-repository-missing-exception/136538)

<div class="topic-metadata">

**Author:** [@mohammedEssabri](https://discuss.elastic.co/u/mohammedEssabri)\
**Replies:** 7\
**Last updated:** [July 5, 2018, 3:23pm UTC](https://discuss.elastic.co/t/backup-repository-missing-exception/136538 "2018-07-05T15:23:08Z")

</div>

Hi Elasticsearch Team, After redeploying Elasticsearch 1.7 in our server, data has been removed. and when we use \_snapshot api to restore created backup using: curl -X GET "localhost:9200/\_snapshot/test\_backup" it sh…

---

## [Invalid configuration for xpack.security.transport.ssl](https://discuss.elastic.co/t/invalid-configuration-for-xpack-security-transport-ssl/297989)

<div class="topic-metadata">

**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\
**Replies:** 5\
**Last updated:** [March 1, 2022, 4:12am UTC](https://discuss.elastic.co/t/invalid-configuration-for-xpack-security-transport-ssl/297989 "2022-03-01T04:12:05Z")

</div>

We tried to update to ES 8.0 deb package. ES refused to start with an error \[2022-02-23T09:10:15,109\]\[ERROR\]\[o.e.b.Bootstrap \] \[mon\] Exception org.elasticsearch.ElasticsearchSecurityException: invalid configura…

---

## [This version of Kibana requires Elasticsearch v6.1.3 on all nodes](https://discuss.elastic.co/t/this-version-of-kibana-requires-elasticsearch-v6-1-3-on-all-nodes/118664)

<div class="topic-metadata">

**Author:** [@saineshwar\_bageri](https://discuss.elastic.co/u/saineshwar_bageri)\
**Replies:** 4\
**Last updated:** [February 6, 2018, 2:38pm UTC](https://discuss.elastic.co/t/this-version-of-kibana-requires-elasticsearch-v6-1-3-on-all-nodes/118664 "2018-02-06T14:38:19Z")

</div>

This version of Kibana requires Elasticsearch v6.1.3 on all nodes. I found the following incompatible nodes in your cluster: v6.0.0 @ 127.0.0.1:9200 (127.0.0.1) This version of Elasticsearch is 6.0.0 \[image\]

---

## [Downloading large amount of logs as CSV using Kibana/Eland](https://discuss.elastic.co/t/downloading-large-amount-of-logs-as-csv-using-kibana-eland/343768)

<div class="topic-metadata">

**Author:** [@xynobob](https://discuss.elastic.co/u/xynobob)\
**Replies:** 8\
**Last updated:** [September 27, 2023, 2:04pm UTC](https://discuss.elastic.co/t/downloading-large-amount-of-logs-as-csv-using-kibana-eland/343768 "2023-09-27T14:04:31Z")

</div>

Hi, I am using Elastic Cloud and am trying to download a large among of logs (over 800 million lines of logs, over span of a few months) as CSV. However when I tried downloading from Discover \> Share \> Generate CSV, it d…

---

## [ERR " write: broken pipe"](https://discuss.elastic.co/t/err-write-broken-pipe/115071)

<div class="topic-metadata">

**Author:** [@hidogs](https://discuss.elastic.co/u/hidogs)\
**Replies:** 8\
**Last updated:** [January 23, 2018, 7:42pm UTC](https://discuss.elastic.co/t/err-write-broken-pipe/115071 "2018-01-23T19:42:40Z")

</div>

Publish event to logstash. Error info: 2018/01/11 11:24:03.470328 async.go:235: ERR Failed to publish events caused by: write tcp 127.0.0.1:57017-\>127.0.0.1:5044: write: broken pipe 2018/01/11 11:24:04.471483 output.g…

---

## [Issue with combining synonyms and compound words](https://discuss.elastic.co/t/issue-with-combining-synonyms-and-compound-words/123758)

<div class="topic-metadata">

**Author:** [@derk](https://discuss.elastic.co/u/derk)\
**Replies:** 0\
**Last updated:** [March 13, 2018, 3:08pm UTC](https://discuss.elastic.co/t/issue-with-combining-synonyms-and-compound-words/123758 "2018-03-13T15:08:01Z")

</div>

I'm trying to combine a synonym token filter and a decompound word token filter. To create the index, I used something similar to the following. PUT /test\_index { "settings": { "index": { "analysis": { …

---

## [Memory usage per index](https://discuss.elastic.co/t/memory-usage-per-index/14537)

<div class="topic-metadata">

**Author:** [@Ivan\_Babrou](https://discuss.elastic.co/u/Ivan_Babrou)\
**Replies:** 8\
**Last updated:** [January 3, 2014, 9:09am UTC](https://discuss.elastic.co/t/memory-usage-per-index/14537 "2014-01-03T09:09:12Z")

</div>

We have 2 machines with 16gb of ram and 13gb are given to jvm. We have 90 indices (5 shards, 1 replica), one for a day of data, 500gb of data on each node. 20% of memory is for field cache and 5% is for filter cache.…

[Previous page](https://discuss.elastic.co/top.md?page=299&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=301&per_page=50&period=all)
