# Top **URL:** https://discuss.elastic.co/top.md?page=304&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 305 --- ## [Where or how can I find raw logs on ELK?](https://discuss.elastic.co/t/where-or-how-can-i-find-raw-logs-on-elk/49375)
**Author:** [@nitesh](https://discuss.elastic.co/u/nitesh)\ **Replies:** 4\ **Last updated:** [May 6, 2016, 8:34am UTC](https://discuss.elastic.co/t/where-or-how-can-i-find-raw-logs-on-elk/49375 "2016-05-06T08:34:38Z")
Hello, I want to have raw log as they are on client machine. ELK is my server machine all Elasticsearch, Logstash and Kibana on same machine. Machine1 is my client machine sending logs through Filebeat. I will explai… --- ## [Filebeat and laravel logs](https://discuss.elastic.co/t/filebeat-and-laravel-logs/170295)
**Author:** [@belledota](https://discuss.elastic.co/u/belledota)\ **Replies:** 6\ **Last updated:** [March 1, 2019, 4:00pm UTC](https://discuss.elastic.co/t/filebeat-and-laravel-logs/170295 "2019-03-01T16:00:15Z")
Hello everyone. Can someone tell me how to set up laravel logs in filebeat (without logstash). In the picture i showed with arrows that i want the log to break: date to timestamp field, type in env field, error-type t… --- ## [ELK with MongoDB](https://discuss.elastic.co/t/elk-with-mongodb/79629)
**Author:** [@Raghav\_Garg](https://discuss.elastic.co/u/Raghav_Garg)\ **Replies:** 5\ **Last updated:** [March 24, 2017, 8:26am UTC](https://discuss.elastic.co/t/elk-with-mongodb/79629 "2017-03-24T08:26:16Z")
Hello all, We are running a project using Nodejs(loopback for api creation) and MongoDB as out database. We have around 1.4 - 2 million records. Now the real concern is the searching, it has become very slow. Most of the… --- ## [Ingest Pipeline - Check if a field exists](https://discuss.elastic.co/t/ingest-pipeline-check-if-a-field-exists/238040)
**Author:** [@sean\_wills](https://discuss.elastic.co/u/sean_wills)\ **Replies:** 1\ **Last updated:** [July 17, 2020, 9:07am UTC](https://discuss.elastic.co/t/ingest-pipeline-check-if-a-field-exists/238040 "2020-07-17T09:07:48Z")
Hello, I'm trying to do something that seems like it should be relatively simple, but I haven't been able to track down the correct syntax the documentation. I have a basic ingest pipeline which I want to use to referen… --- ## [How to print popular hour diagram in Kibana](https://discuss.elastic.co/t/how-to-print-popular-hour-diagram-in-kibana/64277)
**Author:** [@kay\_kay](https://discuss.elastic.co/u/kay_kay)\ **Replies:** 3\ **Last updated:** [October 31, 2016, 2:25pm UTC](https://discuss.elastic.co/t/how-to-print-popular-hour-diagram-in-kibana/64277 "2016-10-31T14:25:25Z")
I'd like to print a diagram which will show the most popular/unpopular visit time over working days. I.e. from monday till friday only for last months it should print a diagram with Y - amount of logs, X - 00-01h 01-02… --- ## [How to disable authentication in Kibana while still using SSL?](https://discuss.elastic.co/t/how-to-disable-authentication-in-kibana-while-still-using-ssl/82325)
**Author:** [@tylermac92](https://discuss.elastic.co/u/tylermac92)\ **Replies:** 5\ **Last updated:** [April 17, 2017, 8:52pm UTC](https://discuss.elastic.co/t/how-to-disable-authentication-in-kibana-while-still-using-ssl/82325 "2017-04-17T20:52:22Z")
Is it possible to disable the need to log in to Kibana, while still running the instance over HTTPS? We have our own means of authentication that any user trying to access must go through first, so there is no need for u… --- ## [Logging directly to elasticsearch](https://discuss.elastic.co/t/logging-directly-to-elasticsearch/163702)
**Author:** [@yash\_sachdeva](https://discuss.elastic.co/u/yash_sachdeva)\ **Replies:** 7\ **Last updated:** [January 10, 2019, 11:41am UTC](https://discuss.elastic.co/t/logging-directly-to-elasticsearch/163702 "2019-01-10T11:41:49Z")
Hi Team, I would like to send pre-formatted json logs directly to elastic search? I would like to avoid logstash/filebeat as I do not need any further parsing. Also, I see in a previous post you have recommended not to a… --- ## [Extract Month and Year from date field](https://discuss.elastic.co/t/extract-month-and-year-from-date-field/209090)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 7\ **Last updated:** [November 22, 2019, 6:17pm UTC](https://discuss.elastic.co/t/extract-month-and-year-from-date-field/209090 "2019-11-22T18:17:22Z")
I am trying to extract Month from date field. But following is actually extracting month from @timestamp and not from first input { generator { message =\> '{"first\_report": "2019-05-30 14:57:59.11"}' coun… --- ## [Kibana FATAL Error: \[elasticsearch.url\]: definition for this key is missing](https://discuss.elastic.co/t/kibana-fatal-error-elasticsearch-url-definition-for-this-key-is-missing/190087)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 7:33pm UTC](https://discuss.elastic.co/t/kibana-fatal-error-elasticsearch-url-definition-for-this-key-is-missing/190087 "2019-07-11T19:33:20Z")
Just upgraded a node from 6.8.1 to 7.2.0 and I'm getting the error message right after I start with journalctl that states Jul 11 14:10:30 dch1092ql5app kibana\[25880\]: FATAL Error: \[elasticsearch.url\]: definition for t… --- ## [Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED ip:9200](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-ip-9200/297338)
**Author:** [@devopshulk](https://discuss.elastic.co/u/devopshulk)\ **Replies:** 6\ **Last updated:** [February 17, 2022, 7:46am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-ip-9200/297338 "2022-02-17T07:46:09Z")
"message":"Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain","log":{"level":"ERROR","logger":"Elasticsearch-service"}, --- ## [Filebeat config for nginx logs](https://discuss.elastic.co/t/filebeat-config-for-nginx-logs/84540)
**Author:** [@aarishramesh](https://discuss.elastic.co/u/aarishramesh)\ **Replies:** 5\ **Last updated:** [May 15, 2017, 3:15pm UTC](https://discuss.elastic.co/t/filebeat-config-for-nginx-logs/84540 "2017-05-15T15:15:35Z")
I am trying to forward nginx access & error logs from nginx as different indices to logstash. Below is the filebeat.yml config filebeat.prospectors: # Each - is a prospector. Most options can be set at the prospector … --- ## [Average per day of week aggregation](https://discuss.elastic.co/t/average-per-day-of-week-aggregation/124132)
**Author:** [@atopalov](https://discuss.elastic.co/u/atopalov)\ **Replies:** 2\ **Last updated:** [March 20, 2018, 1:21pm UTC](https://discuss.elastic.co/t/average-per-day-of-week-aggregation/124132 "2018-03-20T13:21:12Z")
Hello, I have a message index with a 'date' and 'channelId' fields: POST message/\_doc { "channelId": "channel\_twitter", "date": "2018-03-08T14:01:23.385Z" } I need to create an aggregation that calculates the avera… --- ## [Filebeat config error: YAML config parsing failed](https://discuss.elastic.co/t/filebeat-config-error-yaml-config-parsing-failed/53519)
**Author:** [@dal](https://discuss.elastic.co/u/dal)\ **Replies:** 6\ **Last updated:** [June 21, 2016, 5:29pm UTC](https://discuss.elastic.co/t/filebeat-config-error-yaml-config-parsing-failed/53519 "2016-06-21T17:29:27Z")
Below is my filebeat configuration file. I am trying to test my config file. The only changes I made were adding the paths to the log, commenting out elastic search output and outputting to logstash. The ... represents t… --- ## [Kibana Error: 503 Service Unavailable](https://discuss.elastic.co/t/kibana-error-503-service-unavailable/199262)
**Author:** [@alesabat](https://discuss.elastic.co/u/alesabat)\ **Replies:** 2\ **Last updated:** [September 13, 2019, 2:54pm UTC](https://discuss.elastic.co/t/kibana-error-503-service-unavailable/199262 "2019-09-13T14:54:04Z")
Hi, I'm new with Kibana. Client asked me to solve this problem with Kibana. They can't reach web GUI, gettin 404 Not found error from nginx. I'm checking /var/log/messages, this is what I see: Sep 12 10:32:12 syslog k… --- ## [Reading the heading (1st line) of CSV file through logstash](https://discuss.elastic.co/t/reading-the-heading-1st-line-of-csv-file-through-logstash/108930)
**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\ **Replies:** 7\ **Last updated:** [November 26, 2017, 6:00pm UTC](https://discuss.elastic.co/t/reading-the-heading-1st-line-of-csv-file-through-logstash/108930 "2017-11-26T18:00:03Z")
HI, Eg: sample CSV file Incident ID,Status,Resolved By,Resolution Breached,Resolution Month,Resolution Date,Resolution Date & Time, IM02370568,Closed,GUNTURS2,FALSE,1,1/4/2016,1/4/2016 10:35 IM02370648,Closed,PRASADR6,… --- ## [Kibana server sizing?](https://discuss.elastic.co/t/kibana-server-sizing/82366)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [April 17, 2017, 5:51am UTC](https://discuss.elastic.co/t/kibana-server-sizing/82366 "2017-04-17T05:51:31Z")
Hello. I see lots of information about benchmarking results for logstash and elasticsearch. These are very useful when you do hardware sizing but how about kibana? Is there any hardware requirements for kibana? Als… --- ## [How to index an existing json file](https://discuss.elastic.co/t/how-to-index-an-existing-json-file/15134)
**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\ **Replies:** 8\ **Last updated:** [October 25, 2016, 2:16pm UTC](https://discuss.elastic.co/t/how-to-index-an-existing-json-file/15134 "2016-10-25T14:16:28Z")
Hi, I am just starting with ElasticSearch, I would like to know how to index a simple json document "books.json" that has the following in it: Where do I place the document? I placed it in root directory of elasti… --- ## [How to set elasticsearch user "elastic" password in Dockerfile](https://discuss.elastic.co/t/how-to-set-elasticsearch-user-elastic-password-in-dockerfile/226206)
**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\ **Replies:** 3\ **Last updated:** [April 2, 2020, 1:42pm UTC](https://discuss.elastic.co/t/how-to-set-elasticsearch-user-elastic-password-in-dockerfile/226206 "2020-04-02T13:42:54Z")
Hi, I am using Dockerfile for elasticsearch containerization where i am using elasticsearch.yml file to copy in /usr/share/elasticsearch/config/. How can i set user and password for the user elastic? --- ## [CPU utilization of the whole cluster spikes up to 100% suddenly](https://discuss.elastic.co/t/cpu-utilization-of-the-whole-cluster-spikes-up-to-100-suddenly/35511)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 5\ **Last updated:** [January 6, 2016, 5:57am UTC](https://discuss.elastic.co/t/cpu-utilization-of-the-whole-cluster-spikes-up-to-100-suddenly/35511 "2016-01-06T05:57:50Z")
We have a 4 node(all data nodes) m4.2xlarge cluster on AWS. We have around 15 million docs spread across 4 indices. Its a standard configuration 5 Primary, 1 replica. one of the index has 2 replicas. Normal CPU usage i… --- ## [Can't parse multiline logs with grok](https://discuss.elastic.co/t/cant-parse-multiline-logs-with-grok/130600)
**Author:** [@Petersiemens](https://discuss.elastic.co/u/Petersiemens)\ **Replies:** 3\ **Last updated:** [May 4, 2018, 11:22am UTC](https://discuss.elastic.co/t/cant-parse-multiline-logs-with-grok/130600 "2018-05-04T11:22:48Z")
Hi Team, i am currently trying to load Multiline-files with Logstash but for some reason i can't get more than the first line. I know that this topic has been discussed several times but all the solutions won't work in … --- ## [Doubt about System Module \[Filebeat\]](https://discuss.elastic.co/t/doubt-about-system-module-filebeat/238078)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 12:02pm UTC](https://discuss.elastic.co/t/doubt-about-system-module-filebeat/238078 "2020-06-23T12:02:00Z")
Hi, everyone I would like to know over which logs Module System is able to parse. In Filebeat Doc, it shows an example with auth.log and syslog. Is it possible to do it with logs as secure, messages, etc? From my poin… --- ## [Combining two events in one](https://discuss.elastic.co/t/combining-two-events-in-one/43336)
**Author:** [@vsadokhin](https://discuss.elastic.co/u/vsadokhin)\ **Replies:** 8\ **Last updated:** [June 1, 2017, 1:23am UTC](https://discuss.elastic.co/t/combining-two-events-in-one/43336 "2017-06-01T01:23:40Z")
Hello over there! I'm looking for a way to combine two logs into one event. Say I have log lines that look like: \[timestamp\] \[unique id\] \[some message\] ... // different format/type log messages goes here \[timestamp\]… --- ## [ElasticSearchIllegalArgumentException No field found for ... in mapping with types](https://discuss.elastic.co/t/elasticsearchillegalargumentexception-no-field-found-for-in-mapping-with-types/9420)
**Author:** [@dzintarsrerihs](https://discuss.elastic.co/u/dzintarsrerihs)\ **Replies:** 5\ **Last updated:** [January 11, 2016, 7:45am UTC](https://discuss.elastic.co/t/elasticsearchillegalargumentexception-no-field-found-for-in-mapping-with-types/9420 "2016-01-11T07:45:48Z")
Hello, I'm having trouble with custom score. I'm not sure what is causing this type of error. Could be something with mapping? I'm sure that nesting is fine at this point. Trouble is somehow related with doc\['pri… --- ## [ElasticSearch: RestHighLevelClient is getting timeout exception if client API is idle for some time](https://discuss.elastic.co/t/elasticsearch-resthighlevelclient-is-getting-timeout-exception-if-client-api-is-idle-for-some-time/255442)
**Author:** [@john\_jayaraj](https://discuss.elastic.co/u/john_jayaraj)\ **Replies:** 7\ **Last updated:** [November 18, 2020, 3:32pm UTC](https://discuss.elastic.co/t/elasticsearch-resthighlevelclient-is-getting-timeout-exception-if-client-api-is-idle-for-some-time/255442 "2020-11-18T15:32:45Z")
I have an REST API with spring boot and RestHighLevelClient to retrieve data from ELasticSearch(AWS-ElasticSearch) and this client API is deployed in OpenShift Container. normally this client API will respond back with… --- ## [Curl: (52) Empty reply from server When trying to restart cluster ( given user/password )](https://discuss.elastic.co/t/curl-52-empty-reply-from-server-when-trying-to-restart-cluster-given-user-password/260717)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 12:19pm UTC](https://discuss.elastic.co/t/curl-52-empty-reply-from-server-when-trying-to-restart-cluster-given-user-password/260717 "2021-01-11T12:19:22Z")
i try to restart the cluster with the put command as stated in the docs: curl -u "elastic:xxxxxxxxx" -k -X PUT "localhost:9200/\_cluster/settings?pretty" -H 'Content-Type: application/json' -d' { "persistent": { … --- ## [Beats in elastic-agent reporting "failed to connect to backoff"](https://discuss.elastic.co/t/beats-in-elastic-agent-reporting-failed-to-connect-to-backoff/299506)
**Author:** [@trudyc](https://discuss.elastic.co/u/trudyc)\ **Replies:** 5\ **Last updated:** [April 13, 2022, 5:16pm UTC](https://discuss.elastic.co/t/beats-in-elastic-agent-reporting-failed-to-connect-to-backoff/299506 "2022-04-13T17:16:47Z")
Apologies in advance if I ask ignorant questions, or don't provide all relevant info in my post. I'm not an expert sysadmin, or network admin, or security admin. I've inherited Elastic from a departed co-worker, and have… --- ## [413 Request Entity Too Large from sending data to ES through logstash?](https://discuss.elastic.co/t/413-request-entity-too-large-from-sending-data-to-es-through-logstash/88846)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 2\ **Last updated:** [June 10, 2017, 11:08am UTC](https://discuss.elastic.co/t/413-request-entity-too-large-from-sending-data-to-es-through-logstash/88846 "2017-06-10T11:08:48Z")
Hi, I am using filebeat(5.4.1) to send the logs to logstash(2.4.1) and doing some parsing there and sending the parsed data to ES(2.4.1). When i am sending larger requests to ES it is throwing error like this: Atte… --- ## [Enterprise ECE vs ECK](https://discuss.elastic.co/t/enterprise-ece-vs-eck/264484)
**Author:** [@jhegarty](https://discuss.elastic.co/u/jhegarty)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 8:47pm UTC](https://discuss.elastic.co/t/enterprise-ece-vs-eck/264484 "2021-02-16T20:47:43Z")
I'm part of a team investigating the possibility of moving our Elasticsearch instances onto ECK, but there are a couple questions we haven't been able to answer after reading the documentation. We're currently using ECE … --- ## [Using stacked bar charts](https://discuss.elastic.co/t/using-stacked-bar-charts/97541)
**Author:** [@sudhanva](https://discuss.elastic.co/u/sudhanva)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 6:11am UTC](https://discuss.elastic.co/t/using-stacked-bar-charts/97541 "2017-08-22T06:11:58Z")
I have data in JSON format like this in my elasticsearch: { "features": \[ { "feature": "A", "Yes": 19, "No": 0, "Maybe": 81 }, { … --- ## [Kibana https](https://discuss.elastic.co/t/kibana-https/64279)
**Author:** [@il.bert](https://discuss.elastic.co/u/il.bert)\ **Replies:** 6\ **Last updated:** [November 17, 2016, 4:10pm UTC](https://discuss.elastic.co/t/kibana-https/64279 "2016-11-17T16:10:09Z")
Hi everybody, I would like to set up kibana to be reachable via https, but I can't figure how In documentation I only found how to set elastic search to work in https What about kibana? is it possible? google is not help… --- ## [Custom Drop Down Filters](https://discuss.elastic.co/t/custom-drop-down-filters/18521)
**Author:** [@Hari\_2](https://discuss.elastic.co/u/Hari_2)\ **Replies:** 0\ **Last updated:** [July 8, 2014, 7:56am UTC](https://discuss.elastic.co/t/custom-drop-down-filters/18521 "2014-07-08T07:56:19Z")
Hello..I am trying to add custom filters similar to the existing time filter on top right corner of the Kibana dashboard. These filters make it easy to use by the end users of the dashboard. For example, gender field… --- ## [How to replace @timestamp with logtime?](https://discuss.elastic.co/t/how-to-replace-timestamp-with-logtime/118949)
**Author:** [@MichaelKutsenko](https://discuss.elastic.co/u/MichaelKutsenko)\ **Replies:** 3\ **Last updated:** [February 8, 2018, 7:32am UTC](https://discuss.elastic.co/t/how-to-replace-timestamp-with-logtime/118949 "2018-02-08T07:32:49Z")
I've read a lot of topics about this but I did not manage with this task. Please, help. I'm using filebeat, logstash, elasticsearch and kibana to show my logs. Client and server run on Ubuntu 16.04. When I try to replac… --- ## [How to map a dynamic map of key values?](https://discuss.elastic.co/t/how-to-map-a-dynamic-map-of-key-values/18030)
**Author:** [@Drew\_Kutcharian](https://discuss.elastic.co/u/Drew_Kutcharian)\ **Replies:** 2\ **Last updated:** [June 11, 2014, 5:10pm UTC](https://discuss.elastic.co/t/how-to-map-a-dynamic-map-of-key-values/18030 "2014-06-11T17:10:49Z")
Hey Guys, How can I map an arbitrary map of key/values in ES? My JSON looks like the following, where "name" and "age" are static but "attributes" is dynamic: { "name": "john", "age": 25, "attributes" : { … --- ## [Graph a ratio between two counts](https://discuss.elastic.co/t/graph-a-ratio-between-two-counts/29011)
**Author:** [@yoann](https://discuss.elastic.co/u/yoann)\ **Replies:** 7\ **Last updated:** [June 21, 2017, 12:05pm UTC](https://discuss.elastic.co/t/graph-a-ratio-between-two-counts/29011 "2017-06-21T12:05:30Z")
Hello, I would like to graph a ratio between two counts on the same index. For example, if we take the books dataset, count the ratio of American book out of all the expensive books (more than 10$) count(books wher… --- ## [Adding time in a query?](https://discuss.elastic.co/t/adding-time-in-a-query/881)
**Author:** [@obviouslygene](https://discuss.elastic.co/u/obviouslygene)\ **Replies:** 5\ **Last updated:** [June 2, 2015, 6:50am UTC](https://discuss.elastic.co/t/adding-time-in-a-query/881 "2015-06-02T06:50:06Z")
Hi, new to kibana here, so I was using splunk before and wanted to port my queries over. I was using the query as below. BATCH AND (succeeded OR failed) AND (start OR master) AND testsvr01 Is it possible to add a time fr… --- ## [Recent unsafe memory access operation in compiled Java code](https://discuss.elastic.co/t/recent-unsafe-memory-access-operation-in-compiled-java-code/41372)
**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\ **Replies:** 7\ **Last updated:** [February 16, 2016, 5:19am UTC](https://discuss.elastic.co/t/recent-unsafe-memory-access-operation-in-compiled-java-code/41372 "2016-02-16T05:19:49Z")
Hi , Today i have faced a new one in production servers.Can any one help to address the root cause, I am getting the following exception in production servers. 2016-02-10 11:12:52,734\]\[DEBUG\]\[action.search.type … --- ## [Downgrade Elastic Search](https://discuss.elastic.co/t/downgrade-elastic-search/289286)
**Author:** [@Y\_MN](https://discuss.elastic.co/u/Y_MN)\ **Replies:** 8\ **Last updated:** [November 29, 2021, 11:03am UTC](https://discuss.elastic.co/t/downgrade-elastic-search/289286 "2021-11-29T11:03:48Z")
I need to upgrade ES from 7.10.2 to 7.14.1, and if something goes wrong, can I automatically roll back to the previous version? --- ## [Filebeats not working](https://discuss.elastic.co/t/filebeats-not-working/54972)
**Author:** [@rocky4bmw](https://discuss.elastic.co/u/rocky4bmw)\ **Replies:** 8\ **Last updated:** [July 11, 2016, 2:05pm UTC](https://discuss.elastic.co/t/filebeats-not-working/54972 "2016-07-11T14:05:44Z")
@andrewkroh Step1: I have installed Elastic search 2.3 , Kibana 4.5, Logastash 2.3 and shield 2.3 on single server. created using esusers command line I have created one admin user with admin role and another user … --- ## [Response code 429](https://discuss.elastic.co/t/response-code-429/47390)
**Author:** [@dkota](https://discuss.elastic.co/u/dkota)\ **Replies:** 8\ **Last updated:** [February 28, 2017, 9:31am UTC](https://discuss.elastic.co/t/response-code-429/47390 "2017-02-28T09:31:57Z")
I have logstash 2.2.2 installed in my server. Getting the error "Retrying failed action with response code :429" on the logstash node. This means that the ES cluster is not able to keep up with the incoming requests, is… --- ## [Threadpool.search.queue\_size in ELK 5.\*.\*](https://discuss.elastic.co/t/threadpool-search-queue-size-in-elk-5/68391)
**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\ **Replies:** 3\ **Last updated:** [December 9, 2016, 5:03am UTC](https://discuss.elastic.co/t/threadpool-search-queue-size-in-elk-5/68391 "2016-12-09T05:03:32Z")
Hello guys in elasticsearch 2.3.4 i have problem with limit param : threadpool.search.queue\_size. By default , this size = 1000. then i change this param: i added next line to elasticsearch configuration file threadpoo… --- ## [Detected a 6.x and above cluster: the \`type\` event field won't be used to determine the document \_type {:es\_version=\>6}](https://discuss.elastic.co/t/detected-a-6-x-and-above-cluster-the-type-event-field-wont-be-used-to-determine-the-document-type-es-version-6/183471)
**Author:** [@shruti51](https://discuss.elastic.co/u/shruti51)\ **Replies:** 2\ **Last updated:** [June 12, 2019, 10:33am UTC](https://discuss.elastic.co/t/detected-a-6-x-and-above-cluster-the-type-event-field-wont-be-used-to-determine-the-document-type-es-version-6/183471 "2019-06-12T10:33:07Z")
Hi, I am trying to parse my logs via filebeat but getting the error: Detected a 6.x and above cluster: the type event field won't be used to determine the document \_type {:es\_version=\>6}. Please suggest how to resolv… --- ## [Logstash Forwarder replacement, Filebeat RC1 is out](https://discuss.elastic.co/t/logstash-forwarder-replacement-filebeat-rc1-is-out/33929)
**Author:** [@tbragin](https://discuss.elastic.co/u/tbragin)\ **Replies:** 0\ **Last updated:** [November 5, 2015, 10:19pm UTC](https://discuss.elastic.co/t/logstash-forwarder-replacement-filebeat-rc1-is-out/33929 "2015-11-05T22:19:27Z")
We are excited to announce the release of Filebeat-1.0.0-RC1! Filebeat is a replacement for Logstash Forwarder, build on top of extensible Beats platform! It brings greater stability, performance, platform support, and a… --- ## [Fastest way to index huge data in elastic](https://discuss.elastic.co/t/fastest-way-to-index-huge-data-in-elastic/152375)
**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\ **Replies:** 8\ **Last updated:** [October 14, 2018, 9:48am UTC](https://discuss.elastic.co/t/fastest-way-to-index-huge-data-in-elastic/152375 "2018-10-14T09:48:06Z")
I am asked to index more than 3\*10^12 documents in to elastic cluster, the cluster has 50 nodes with 40 cores, and 128G of memory. I was able to do it with \_bulk in python language (multi thread) but I could not reach m… --- ## [Groupby Unique values in Kibana KQL](https://discuss.elastic.co/t/groupby-unique-values-in-kibana-kql/289915)
**Author:** [@Hamzah](https://discuss.elastic.co/u/Hamzah)\ **Replies:** 3\ **Last updated:** [November 23, 2021, 2:33pm UTC](https://discuss.elastic.co/t/groupby-unique-values-in-kibana-kql/289915 "2021-11-23T14:33:10Z")
Hi, I was just wondering if we can use kibana KQL to groupby a certain field. Let say we applied a search in which we want to see who is trying to communicate with gooogel.com and we need to extract local IP address of … --- ## [ElasticSearchException: document missing](https://discuss.elastic.co/t/elasticsearchexception-document-missing/5986)
**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\ **Replies:** 6\ **Last updated:** [November 28, 2011, 4:48pm UTC](https://discuss.elastic.co/t/elasticsearchexception-document-missing/5986 "2011-11-28T16:48:58Z")
I'm getting strange exception. I'm getting it when running MLT query. But the reason is actualy not related to MLT. If I run search like http://localhost:9200/myind/post/5b92f025-3f7b-4429-8535-9a20efd55d8f I'm g… --- ## [Check whether a field exists in elasticsearch](https://discuss.elastic.co/t/check-whether-a-field-exists-in-elasticsearch/95723)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 1\ **Last updated:** [August 3, 2017, 2:10pm UTC](https://discuss.elastic.co/t/check-whether-a-field-exists-in-elasticsearch/95723 "2017-08-03T14:10:14Z")
I want to draw a timeseries graph in Timelion of Kibana. For example, below checks for documents which have rating equal to 5. .es(index='database', timefield='booking\_time', q='rating:5') I want to draw only those do… --- ## [CPU Usage \[Metricbeat System\] more than 100%](https://discuss.elastic.co/t/cpu-usage-metricbeat-system-more-than-100/134145)
**Author:** [@Unknown\_error](https://discuss.elastic.co/u/Unknown_error)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 4:37pm UTC](https://discuss.elastic.co/t/cpu-usage-metricbeat-system-more-than-100/134145 "2018-06-01T16:37:56Z")
Can someone explain this i using metricbeat but kibana dashboard show cpu usage more than 100%, I'm a novice with perfomance \[image\] this cpu&ram i provide to this server on hyper v \[image\] thanks for your answer, … --- ## [License information from the X-Pack plugin could not be obtained from Elasticsearch for the \[data\] cluster. \[security\_exception\] missing authentication credentials for REST request \[/\_xpack\]](https://discuss.elastic.co/t/license-information-from-the-x-pack-plugin-could-not-be-obtained-from-elasticsearch-for-the-data-cluster-security-exception-missing-authentication-credentials-for-rest-request-xpack/184382)
**Author:** [@KatiukOleg](https://discuss.elastic.co/u/KatiukOleg)\ **Replies:** 4\ **Last updated:** [June 6, 2019, 9:38am UTC](https://discuss.elastic.co/t/license-information-from-the-x-pack-plugin-could-not-be-obtained-from-elasticsearch-for-the-data-cluster-security-exception-missing-authentication-credentials-for-rest-request-xpack/184382 "2019-06-06T09:38:20Z")
Hi guys, I have some trouble with Elastic and Kibana. I launched them in Azure through Azure Kubernetes Service and was using standard (not oss) images for it. So, Elasticsearch is up and running. I configured passwords … --- ## [Logstash Update or Insert - logic for updating if existing](https://discuss.elastic.co/t/logstash-update-or-insert-logic-for-updating-if-existing/78189)
**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\ **Replies:** 3\ **Last updated:** [March 16, 2017, 3:49pm UTC](https://discuss.elastic.co/t/logstash-update-or-insert-logic-for-updating-if-existing/78189 "2017-03-16T15:49:24Z")
Hey guys, I am having a bit of an issue attempting to apply some logic to mimic a previous mysql functionality. The idea is that after parsing i create a unique id, Doc\_id of 3 fields concatenated. Then i query … --- ## [Elasticsearch crashes before it starts](https://discuss.elastic.co/t/elasticsearch-crashes-before-it-starts/180252)
**Author:** [@Sophivorus](https://discuss.elastic.co/u/Sophivorus)\ **Replies:** 6\ **Last updated:** [May 10, 2019, 8:41pm UTC](https://discuss.elastic.co/t/elasticsearch-crashes-before-it-starts/180252 "2019-05-10T20:41:01Z")
I'm trying to install Elasticsearch 6.5 on my DreamHost VPS running Ubuntu 14.04 (the "old" version of Elasticsearch is because I'm interested in installing a MediaWiki extension that requires it). I downloaded and extr… [Previous page](https://discuss.elastic.co/top.md?page=303&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=305&per_page=50&period=all)