# Top **URL:** https://discuss.elastic.co/top.md?page=306&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 307 --- ## [Elasticsearch failed Search rejected due to missing shards \[\[.kibana\_task\_manager\_7.17.7\_001\]\[0\]\]](https://discuss.elastic.co/t/elasticsearch-failed-search-rejected-due-to-missing-shards-kibana-task-manager-7-17-7-001-0/340192)
**Author:** [@johnashish](https://discuss.elastic.co/u/johnashish)\ **Replies:** 7\ **Last updated:** [August 9, 2023, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-search-rejected-due-to-missing-shards-kibana-task-manager-7-17-7-001-0/340192 "2023-08-09T13:42:03Z")
Hello, Current Conf - Version - Elasticsearch| Kibana - 7.17.3 2 Node Cluster Recently i am facing lot of trouble to keep the cluster in healthy state. The error which i am facing is - Caused by: org.elasticsearch… --- ## [Kibana - How to query where time is greater than 5 PM](https://discuss.elastic.co/t/kibana-how-to-query-where-time-is-greater-than-5-pm/80377)
**Author:** [@nhawthorne](https://discuss.elastic.co/u/nhawthorne)\ **Replies:** 1\ **Last updated:** [March 28, 2017, 11:07pm UTC](https://discuss.elastic.co/t/kibana-how-to-query-where-time-is-greater-than-5-pm/80377 "2017-03-28T23:07:17Z")
I'm currently filtering for a specific date range...let's say date:\[2016-04-01T00:00:00 TO 2016-05-01T00:00:00\]. How do I query for records within this range where the time is greater than 5 PM? Thanks! --- ## [Can't get text on a START\_OBJECT at 1:330](https://discuss.elastic.co/t/cant-get-text-on-a-start-object-at-1-330/142131)
**Author:** [@klokkie](https://discuss.elastic.co/u/klokkie)\ **Replies:** 5\ **Last updated:** [July 30, 2018, 2:51pm UTC](https://discuss.elastic.co/t/cant-get-text-on-a-start-object-at-1-330/142131 "2018-07-30T14:51:17Z")
Hi I am taking over from a colleague but I don't have any experience yet with logstash and filters (still learning :)) Hopefully someone can help me. Customer is doing this: sends a json message. without tag it is ok… --- ## [How can I send large JSON file (6 GB) to Elasticsearch using bulk API?](https://discuss.elastic.co/t/how-can-i-send-large-json-file-6-gb-to-elasticsearch-using-bulk-api/228712)
**Author:** [@cezar996](https://discuss.elastic.co/u/cezar996)\ **Replies:** 4\ **Last updated:** [April 20, 2020, 8:04am UTC](https://discuss.elastic.co/t/how-can-i-send-large-json-file-6-gb-to-elasticsearch-using-bulk-api/228712 "2020-04-20T08:04:09Z")
Hello everybody! I have problems since a few days ago, when I try to send a large JSON file (aprox. 6 GB) to Elasticsearch using Bulk API. Before putting this question I have documented a lot and I saw there are two pos… --- ## [Can't install elastic as a windows service](https://discuss.elastic.co/t/cant-install-elastic-as-a-windows-service/233131)
**Author:** [@Mahdieh\_Hosseini](https://discuss.elastic.co/u/Mahdieh_Hosseini)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 2:52am UTC](https://discuss.elastic.co/t/cant-install-elastic-as-a-windows-service/233131 "2020-05-20T02:52:27Z")
I'm trying to install ElasticSearch 7.7.0 on my windows server 2016 64bit. First I downloaded the zip version, running elasticsearch.bat from CMD, everything is ok. Then I create a service using this instruction. It cre… --- ## [Kibana logging destination](https://discuss.elastic.co/t/kibana-logging-destination/95855)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 6\ **Last updated:** [August 5, 2017, 6:10am UTC](https://discuss.elastic.co/t/kibana-logging-destination/95855 "2017-08-05T06:10:55Z")
How to make the kibana log file a daily rolling one. #logging.dest: stdout logging.dest: /project/kibana/logs/kibana-log.txt --- ## [Copy Visualizations in Kibana 6](https://discuss.elastic.co/t/copy-visualizations-in-kibana-6/116662)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 1\ **Last updated:** [January 23, 2018, 12:03pm UTC](https://discuss.elastic.co/t/copy-visualizations-in-kibana-6/116662 "2018-01-23T12:03:19Z")
Copying visualizations in Kibana 6 has become difficult if not impossible. Formerly (v5) you could simply export a Viz, change the id and re-import. This no longer works. It's reproducible on any visualization of ours: … --- ## [Kibana JSON Input Aggregation Query](https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501)
**Author:** [@Mark\_Vervuurt](https://discuss.elastic.co/u/Mark_Vervuurt)\ **Replies:** 4\ **Last updated:** [October 14, 2015, 8:46am UTC](https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501 "2015-10-14T08:46:22Z")
Hi Friends, I have created a Pie Chart in Kibana with JSON Input and it generates the following request. Could somebody explain what this query is doing on the aggregation part? I seem that have an aggregation 'line\_… --- ## [Elk-Create New Index-Indices](https://discuss.elastic.co/t/elk-create-new-index-indices/37280)
**Author:** [@ssampati](https://discuss.elastic.co/u/ssampati)\ **Replies:** 7\ **Last updated:** [February 19, 2016, 5:07pm UTC](https://discuss.elastic.co/t/elk-create-new-index-indices/37280 "2016-02-19T17:07:21Z")
im running elk instance, im trying to create a new indices other than the default logstash\* indice. need help on how to create. --- ## [How to use multiple term filters](https://discuss.elastic.co/t/how-to-use-multiple-term-filters/218927)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 9:16am UTC](https://discuss.elastic.co/t/how-to-use-multiple-term-filters/218927 "2020-02-12T09:16:06Z")
Hi, I am using the below DSL query: { "\_source": \[ "title", "bench", "court", "id\_", "verdict" \], "size": 10, "query": { "bool": { "mus… --- ## [Kibana: random error "Request Timeout after 30000ms"](https://discuss.elastic.co/t/kibana-random-error-request-timeout-after-30000ms/73105)
**Author:** [@simonlucalandi](https://discuss.elastic.co/u/simonlucalandi)\ **Replies:** 3\ **Last updated:** [January 30, 2017, 1:55pm UTC](https://discuss.elastic.co/t/kibana-random-error-request-timeout-after-30000ms/73105 "2017-01-30T13:55:45Z")
Hello. I run kibana + elasticsearch in a small production environment, and I get this error "Request Timeout after 30000ms" every few query run. I'm opening a thread here in elasticsearch forum because my guess is that t… --- ## [\_msearch vs \_search](https://discuss.elastic.co/t/-msearch-vs--search/85983)
**Author:** [@venkata\_sreekanth\_bh](https://discuss.elastic.co/u/venkata_sreekanth_bh)\ **Replies:** 4\ **Last updated:** [May 25, 2017, 5:56pm UTC](https://discuss.elastic.co/t/-msearch-vs--search/85983 "2017-05-25T17:56:08Z")
Lets say a bunch of users/applications are sending bulk search request and an another bunch single search queries. How would elastic search behave in this situation? Which queries would get priority ? Would response time… --- ## [Can filebeat be configured to output dynamic file names?](https://discuss.elastic.co/t/can-filebeat-be-configured-to-output-dynamic-file-names/68615)
**Author:** [@kklemmick](https://discuss.elastic.co/u/kklemmick)\ **Replies:** 4\ **Last updated:** [December 13, 2016, 10:34am UTC](https://discuss.elastic.co/t/can-filebeat-be-configured-to-output-dynamic-file-names/68615 "2016-12-13T10:34:23Z")
I suspect the answer to this is that "filebeat can't do that", but figured I'd ask anyway in case I'm missing some feature. What I'm trying to do is harvest docker container logs and redirect them to different files ba… --- ## [\_forcemerge not doing anything](https://discuss.elastic.co/t/forcemerge-not-doing-anything/232310)
**Author:** [@wrossmann](https://discuss.elastic.co/u/wrossmann)\ **Replies:** 2\ **Last updated:** [May 12, 2020, 8:25pm UTC](https://discuss.elastic.co/t/forcemerge-not-doing-anything/232310 "2020-05-12T20:25:44Z")
I recently had a process go a bit nuts and add a lot of junk documents to some of my indices. It's not the first time that this has happened, and I have a cleanup script that runs /\_delete\_by\_query and then \_forcemerge?o… --- ## [Getting 403 error connecting Logstash to ElasticSearch](https://discuss.elastic.co/t/getting-403-error-connecting-logstash-to-elasticsearch/236750)
**Author:** [@ozonshak](https://discuss.elastic.co/u/ozonshak)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 4:47pm UTC](https://discuss.elastic.co/t/getting-403-error-connecting-logstash-to-elasticsearch/236750 "2020-06-11T16:47:58Z")
Hello. I'm attempting to connect Logstash to ElasticSearch in a secure manner for the first time. I'm following the instructions here: https://www.elastic.co/guide/en/logstash/current/ls-security.html I keep getting … --- ## [Beats 1.2.3 released](https://discuss.elastic.co/t/beats-1-2-3-released/50361)
**Author:** [@tudor](https://discuss.elastic.co/u/tudor)\ **Replies:** 0\ **Last updated:** [May 18, 2016, 4:09pm UTC](https://discuss.elastic.co/t/beats-1-2-3-released/50361 "2016-05-18T16:09:46Z")
Hi, we're happy to announce the Beats 1.2.3 patch release: https://www.elastic.co/blog/beats-1-2-3-released --- ## [413 Request Entity Too Large - kibana error](https://discuss.elastic.co/t/413-request-entity-too-large-kibana-error/209399)
**Author:** [@aveek](https://discuss.elastic.co/u/aveek)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 4:13pm UTC](https://discuss.elastic.co/t/413-request-entity-too-large-kibana-error/209399 "2019-11-26T16:13:55Z")
Hi , Elastic Stack version: 7.2.0 We are using logstash to parse data and create custom fields. We rely on dynamic mapping to auto detect the new fields and add them to the index template. We have more than 1000 new fi… --- ## [Brute Force Detection Rule](https://discuss.elastic.co/t/brute-force-detection-rule/271713)
**Author:** [@filip.wozniak](https://discuss.elastic.co/u/filip.wozniak)\ **Replies:** 3\ **Last updated:** [May 6, 2021, 11:00pm UTC](https://discuss.elastic.co/t/brute-force-detection-rule/271713 "2021-05-06T23:00:32Z")
Greetings! I'm using WinlogBeats with configured Sysmon. I want to write my own rule: If any user in last 5 minutes failed to login 5 times, Detection should trigger. So I tried this: This is threshold rule, but I… --- ## [Setting up Elasticsearch on a virtual machine](https://discuss.elastic.co/t/setting-up-elasticsearch-on-a-virtual-machine/108849)
**Author:** [@Sylvain\_Attoumani](https://discuss.elastic.co/u/Sylvain_Attoumani)\ **Replies:** 6\ **Last updated:** [November 23, 2017, 9:57am UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-on-a-virtual-machine/108849 "2017-11-23T09:57:46Z")
Hello everybody. I'm working with a virtual machine using vagrant and try to setting up Elasticsearch on this VM. But when i run bin/elasticsearch it's using 127.0.0.1 wich is not the localhost of my virtual machine. I'… --- ## [Combine wildcard and exact match](https://discuss.elastic.co/t/combine-wildcard-and-exact-match/135678)
**Author:** [@Anand\_V](https://discuss.elastic.co/u/Anand_V)\ **Replies:** 5\ **Last updated:** [June 13, 2018, 12:49pm UTC](https://discuss.elastic.co/t/combine-wildcard-and-exact-match/135678 "2018-06-13T12:49:37Z")
I am new to querying in elasticsearch. I am trying to match a field with wildcard and a few more fields with exact match. I am not able to form a proper query. Can someone help me? --- ## [Curl access to elasticsearch](https://discuss.elastic.co/t/curl-access-to-elasticsearch/131144)
**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\ **Replies:** 6\ **Last updated:** [May 10, 2018, 7:36am UTC](https://discuss.elastic.co/t/curl-access-to-elasticsearch/131144 "2018-05-10T07:36:51Z")
C:\\Users\>curl -H "Content-Type: application/json" -XGET "http://local host:9200/logstash-pc-(2018-05-09)/\_search?pretty" -d "{"query":{"match":{"MSG": "Test3"}}}" { "error" : { "root\_cause" : \[ { "type" : "json\_pa… --- ## [How to extract a value from a JSON string painless](https://discuss.elastic.co/t/how-to-extract-a-value-from-a-json-string-painless/121136)
**Author:** [@saranyav](https://discuss.elastic.co/u/saranyav)\ **Replies:** 3\ **Last updated:** [February 23, 2018, 4:16pm UTC](https://discuss.elastic.co/t/how-to-extract-a-value-from-a-json-string-painless/121136 "2018-02-23T16:16:00Z")
Hello, I have a document where a field request.content comes in as a JSON string. In which I need to parse the Primary Email value in a scripted field using painless scripting. I am new to painless scripting, can anyon… --- ## [How to get current open shards?](https://discuss.elastic.co/t/how-to-get-current-open-shards/197528)
**Author:** [@Dmitry1](https://discuss.elastic.co/u/Dmitry1)\ **Replies:** 3\ **Last updated:** [August 30, 2019, 2:55pm UTC](https://discuss.elastic.co/t/how-to-get-current-open-shards/197528 "2019-08-30T14:55:58Z")
Hello, can't find where I can to see current open shards ? I want to make monitoring to avoid cases like this: this cluster currently has \[999\]/\[1000\] maximum shards open I can get maximum limit - max\_shards\_per\_node … --- ## [Filtered wildcard query](https://discuss.elastic.co/t/filtered-wildcard-query/143259)
**Author:** [@cleaner](https://discuss.elastic.co/u/cleaner)\ **Replies:** 5\ **Last updated:** [August 8, 2018, 8:33am UTC](https://discuss.elastic.co/t/filtered-wildcard-query/143259 "2018-08-08T08:33:30Z")
Hi, I need your help/advice to increase performance of wildcard query. The same question was here Performance of filtered wildcard queries , but is closed now. We have to use wildcard for data that is filtered by cus… --- ## [Gantt Chart timeline issue with Vega visualization](https://discuss.elastic.co/t/gantt-chart-timeline-issue-with-vega-visualization/153686)
**Author:** [@mailg](https://discuss.elastic.co/u/mailg)\ **Replies:** 1\ **Last updated:** [October 24, 2018, 3:11pm UTC](https://discuss.elastic.co/t/gantt-chart-timeline-issue-with-vega-visualization/153686 "2018-10-24T15:11:04Z")
Hello all, I'm trying to create a gantt chart using vega but I'm facing issue to get what I want... Here is my code : { $schema: https://vega.github.io/schema/vega-lite/v2.json title: Gantt test data: { … --- ## [Filebeat Error: ERR Failed to publish events caused by: read tcp i/o timeout](https://discuss.elastic.co/t/filebeat-error-err-failed-to-publish-events-caused-by-read-tcp-i-o-timeout/68023)
**Author:** [@jinal.shah](https://discuss.elastic.co/u/jinal.shah)\ **Replies:** 3\ **Last updated:** [December 6, 2016, 9:44am UTC](https://discuss.elastic.co/t/filebeat-error-err-failed-to-publish-events-caused-by-read-tcp-i-o-timeout/68023 "2016-12-06T09:44:05Z")
Hello I recently upgraded to filebeat v5 (and the rest of the ELK components). However, I am now seeing the following error on filebeat when shipping the logs across: 2016-12-05T10:42:05Z ERR Failed to publish events… --- ## [\[ES v7.5.1\] Speed up snapshot restore from GCS Snapshot Repository](https://discuss.elastic.co/t/es-v7-5-1-speed-up-snapshot-restore-from-gcs-snapshot-repository/278974)
**Author:** [@amitsh728](https://discuss.elastic.co/u/amitsh728)\ **Replies:** 8\ **Last updated:** [July 21, 2021, 5:54am UTC](https://discuss.elastic.co/t/es-v7-5-1-speed-up-snapshot-restore-from-gcs-snapshot-repository/278974 "2021-07-21T05:54:44Z")
Hello, We are trying to speed up our snapshot restoration speed in our ES cluster hosted on GCP Compute instances. TL;DR: Current Performance: 56 MBps per data node Infra Capable of 500 MBps We want to improve our re… --- ## [How to convert a json format string to json object using painless script kibana](https://discuss.elastic.co/t/how-to-convert-a-json-format-string-to-json-object-using-painless-script-kibana/210684)
**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\ **Replies:** 5\ **Last updated:** [December 6, 2019, 8:24am UTC](https://discuss.elastic.co/t/how-to-convert-a-json-format-string-to-json-object-using-painless-script-kibana/210684 "2019-12-06T08:24:54Z")
This in my input:- "bitstreamData": { "bitstream": "{"Virtual Account Number Verification OUT":\[{"Client Code":"LEND","Virtual Account Number":"","Transaction Amount":200000,"UTR number":"\*\*\*\*\*\*\*","Status":"Reject","Se… --- ## [Kibana "server.host" parameter won't work with hostname](https://discuss.elastic.co/t/kibana-server-host-parameter-wont-work-with-hostname/156112)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 7\ **Last updated:** [November 19, 2018, 4:36pm UTC](https://discuss.elastic.co/t/kibana-server-host-parameter-wont-work-with-hostname/156112 "2018-11-19T16:36:55Z")
Hi Elastic,kibana 6.4.3 Centos 7.5 I am having problem with server.host parameter. It just won't work with hostname. server.host: "someHostname.domain.com" or server.host: "someHostname" Works with IP for exampl… --- ## [No default index pattern?](https://discuss.elastic.co/t/no-default-index-pattern/111291)
**Author:** [@LeotisBuchanan](https://discuss.elastic.co/u/LeotisBuchanan)\ **Replies:** 6\ **Last updated:** [December 13, 2017, 10:34pm UTC](https://discuss.elastic.co/t/no-default-index-pattern/111291 "2017-12-13T22:34:57Z")
Hi, I am going through the elastic search tutorial for elastic search 6. I ingested the logstash-tutorial.log data into elasticsearch. If I query elastic search using GET /\_cat/indices, I get the following responses: ye… --- ## [Elasticsearch : Curl -X GET “localhost:9200” gives “Network Error (dns\_unresolved\_hostname)”](https://discuss.elastic.co/t/elasticsearch-curl-x-get-localhost-9200-gives-network-error-dns-unresolved-hostname/184942)
**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\ **Replies:** 7\ **Last updated:** [June 11, 2019, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-curl-x-get-localhost-9200-gives-network-error-dns-unresolved-hostname/184942 "2019-06-11T10:14:40Z")
I have installed as .tar.gz using wget and chown-ed the elasticsearch folder as a xyz user and xyzgrp group . I did run the es using ./bin/elasticsearch and it ran fine with no errors. then I curl-ed, curl -X GET "loca… --- ## [Where is the index saved on disk?](https://discuss.elastic.co/t/where-is-the-index-saved-on-disk/297968)
**Author:** [@jordane95](https://discuss.elastic.co/u/jordane95)\ **Replies:** 5\ **Last updated:** [February 24, 2022, 9:26am UTC](https://discuss.elastic.co/t/where-is-the-index-saved-on-disk/297968 "2022-02-24T09:26:08Z")
Hello, I recently used the python toolkit elasticsearch to build a IR system on my server. May I know the path where the index is saved on my disk? Thank you! --- ## [Deprecation: Deprecated big difference between max\_gram and min\_gram in NGram](https://discuss.elastic.co/t/deprecation-deprecated-big-difference-between-max-gram-and-min-gram-in-ngram/122969)
**Author:** [@jzlang](https://discuss.elastic.co/u/jzlang)\ **Replies:** 6\ **Last updated:** [March 22, 2018, 4:40pm UTC](https://discuss.elastic.co/t/deprecation-deprecated-big-difference-between-max-gram-and-min-gram-in-ngram/122969 "2018-03-22T16:40:24Z")
We have a use case where we have to search a field (displayName) whose value can contain multiple words. For instance - "displayName":"Once Upon a Midnight Dreary" We have a requirement that auto complete functionality … --- ## [Scroll vs pagination using from/size](https://discuss.elastic.co/t/scroll-vs-pagination-using-from-size/16938)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 6\ **Last updated:** [April 11, 2014, 4:02pm UTC](https://discuss.elastic.co/t/scroll-vs-pagination-using-from-size/16938 "2014-04-11T16:02:04Z")
I am trying to understand the Pros and Cons of using scroll vs from/size for pagination? Scroll document advises against using it for real time users but it doesn't say why. Also, what are the disadvantages of using… --- ## [Character encoding problems Filebeat & Logstash](https://discuss.elastic.co/t/character-encoding-problems-filebeat-logstash/150353)
**Author:** [@keysersozee](https://discuss.elastic.co/u/keysersozee)\ **Replies:** 2\ **Last updated:** [October 11, 2018, 1:58pm UTC](https://discuss.elastic.co/t/character-encoding-problems-filebeat-logstash/150353 "2018-10-11T13:58:05Z")
Hello, I've read many topics in about this problem but it's still not resolved for me. I have a fileabeat 6.2.2 installed on Windows, it will send logs logs to a Logstash 6.2.2 installed on Linux. This my filebeat con… --- ## [Unable to load Kibana Dashboards via MetricBeat](https://discuss.elastic.co/t/unable-to-load-kibana-dashboards-via-metricbeat/166712)
**Author:** [@mark.penner](https://discuss.elastic.co/u/mark.penner)\ **Replies:** 8\ **Last updated:** [February 12, 2019, 12:00am UTC](https://discuss.elastic.co/t/unable-to-load-kibana-dashboards-via-metricbeat/166712 "2019-02-12T00:00:01Z")
Hi, I am running Metricbeat6.5.4 in a Docker container on DCOS. I have been able to send all "Metrics" logs to Elastic search and then to Kibana (v6) successfully. The issue i am having is when setting the "setup.dashb… --- ## [Path.data and path.repo difference](https://discuss.elastic.co/t/path-data-and-path-repo-difference/228106)
**Author:** [@Shubham](https://discuss.elastic.co/u/Shubham)\ **Replies:** 4\ **Last updated:** [April 15, 2020, 12:28pm UTC](https://discuss.elastic.co/t/path-data-and-path-repo-difference/228106 "2020-04-15T12:28:43Z")
I am trying to take backup of ES indices in my two nodes cluster. Getting error like : the store \[/user/home/esbackup\] is not shared between this node \[data node\] and the master node or that permissions on the store don'… --- ## [Kibana time-out errors](https://discuss.elastic.co/t/kibana-time-out-errors/255479)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 9:45am UTC](https://discuss.elastic.co/t/kibana-time-out-errors/255479 "2020-11-25T09:45:29Z")
Hello, I am testing ELasticsearch to deploy it in production cluster. The first days it was working perfectly, and then I began having trouble when I try to search logs using Kibana, and the response was taking a long t… --- ## [Bulk indexing errors out (only 3 document)](https://discuss.elastic.co/t/bulk-indexing-errors-out-only-3-document/122599)
**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\ **Replies:** 7\ **Last updated:** [March 6, 2018, 1:02am UTC](https://discuss.elastic.co/t/bulk-indexing-errors-out-only-3-document/122599 "2018-03-06T01:02:14Z")
New to ELK stack. Trying to explore bulk indexing. I tried this command from Kibana. I get Validation Failed error. I didn't make this up. I got it from elastick.co site for practice. { "error": { "root\_cause": \[ … --- ## [How to run multiple logstash instances on the same machine?](https://discuss.elastic.co/t/how-to-run-multiple-logstash-instances-on-the-same-machine/51460)
**Author:** [@esamudio](https://discuss.elastic.co/u/esamudio)\ **Replies:** 8\ **Last updated:** [January 16, 2017, 8:02am UTC](https://discuss.elastic.co/t/how-to-run-multiple-logstash-instances-on-the-same-machine/51460 "2017-01-16T08:02:03Z")
I want to run multiple logstash configurations on the same machine using different config files. As far as I know, if I put multiple config files in the /etc/logstash/conf.d/ directory, it will simply append the .conf fi… --- ## [Another unable to create index pattern or delete index pattern when index has been deleted](https://discuss.elastic.co/t/another-unable-to-create-index-pattern-or-delete-index-pattern-when-index-has-been-deleted/158042)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 7\ **Last updated:** [November 27, 2018, 11:02am UTC](https://discuss.elastic.co/t/another-unable-to-create-index-pattern-or-delete-index-pattern-when-index-has-been-deleted/158042 "2018-11-27T11:02:36Z")
In my home lab, I am running 6.2.2 of Elasticsearch, Logstash and Kibana all on a single machine. I really only had three logs or so going into it, pfsense, windows, and bro and three index patterns. But after I added … --- ## [On-premise pricing?](https://discuss.elastic.co/t/on-premise-pricing/324183)
**Author:** [@johber](https://discuss.elastic.co/u/johber)\ **Replies:** 6\ **Last updated:** [January 29, 2023, 8:28pm UTC](https://discuss.elastic.co/t/on-premise-pricing/324183 "2023-01-29T20:28:38Z")
Hello, I'm developing a public e-commerce site. Can it use a self hosted Elasticsearch instance for free, without violating the new license model? --- ## [Exporting Indexed Data](https://discuss.elastic.co/t/exporting-indexed-data/196969)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 5\ **Last updated:** [August 28, 2019, 2:49pm UTC](https://discuss.elastic.co/t/exporting-indexed-data/196969 "2019-08-28T14:49:57Z")
I am trying to export approximately 100 million indexed events to txt files but having a hard time finding out how to do so. Since I can't get the Elasticsearch input filter to work in Logstash (secured cluster, open ti… --- ## [Failed to read pipelines yaml file](https://discuss.elastic.co/t/failed-to-read-pipelines-yaml-file/170794)
**Author:** [@wikedeye](https://discuss.elastic.co/u/wikedeye)\ **Replies:** 4\ **Last updated:** [March 5, 2019, 12:41am UTC](https://discuss.elastic.co/t/failed-to-read-pipelines-yaml-file/170794 "2019-03-05T00:41:52Z")
I am sorry if this is an easy problem to fix. I have been trying to figure out what is wrong for a while and unfortunately I do not have enough experience with linux to understand some of what I see as solutions. I am … --- ## [Elasticsearchの動作推奨スペックについて](https://discuss.elastic.co/t/elasticsearch/115220)
**Author:** [@joho](https://discuss.elastic.co/u/joho)\ **Replies:** 2\ **Last updated:** [February 5, 2018, 1:15am UTC](https://discuss.elastic.co/t/elasticsearch/115220 "2018-02-05T01:15:12Z")
Elasticsearch、Logstash、Kibanaを同一のサーバに導入するにあたり、 推奨されるスペックはあるのでしょうか？ 取り込むログ量により変動するとは思いますが、 どの程度のログが適切か不明ですが、 1億件程度のwebアクセスログを取り込みたいと考えております。 インデックスは、1日単位で分けようと考えております。 ver6.1.1を動作させるサーバの CPUや、メモリや、ディスク容量や、IOPSで どの… --- ## [Dec 25th, 2023: \[EN\] How to investigate a Malicious Alert for Threat Hunting in Elastic Security](https://discuss.elastic.co/t/dec-25th-2023-en-how-to-investigate-a-malicious-alert-for-threat-hunting-in-elastic-security/347618)
**Author:** [@Tanisha\_L\_Turner](https://discuss.elastic.co/u/Tanisha_L_Turner)\ **Replies:** 0\ **Last updated:** [December 25, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-25th-2023-en-how-to-investigate-a-malicious-alert-for-threat-hunting-in-elastic-security/347618 "2023-12-25T08:00:27Z")
Introduction When investigating malicious alerts in Elastic Security, it is essential to determine the type of malicious activity that is detected from an alert for response and remediation. There are many methods to pe… --- ## [Time filter as X-Axis?](https://discuss.elastic.co/t/time-filter-as-x-axis/27588)
**Author:** [@Jakauppila](https://discuss.elastic.co/u/Jakauppila)\ **Replies:** 1\ **Last updated:** [August 18, 2015, 6:30pm UTC](https://discuss.elastic.co/t/time-filter-as-x-axis/27588 "2015-08-18T18:30:31Z")
Currently on Kibana 4.1.1, I am attempting to visualize some ticket data. I have an opened date and a closed date. I want to have a bar graph that shows the number of open and closed tickets for a particular date. Is it … --- ## [Non-zero metrics in the last 30s- Filebeat](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s-filebeat/127223)
**Author:** [@Pruthvi\_Lokasani](https://discuss.elastic.co/u/Pruthvi_Lokasani)\ **Replies:** 7\ **Last updated:** [April 11, 2018, 4:36pm UTC](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s-filebeat/127223 "2018-04-11T16:36:08Z")
I am trying to pass my IIS logs to logstach using Filebeat and My logs are not showing in kibna . When I checked By Filebeat Log Below is the message it showing |2018-04-08T18:13:14.324Z|INFO|\[monitoring\]|log/log.go:1… --- ## [Grok filter: check if field exists](https://discuss.elastic.co/t/grok-filter-check-if-field-exists/132103)
**Author:** [@Alessio\_Frabotta](https://discuss.elastic.co/u/Alessio_Frabotta)\ **Replies:** 4\ **Last updated:** [May 28, 2018, 2:08pm UTC](https://discuss.elastic.co/t/grok-filter-check-if-field-exists/132103 "2018-05-28T14:08:29Z")
I have a log message with this structure: "message" =\> "{ "@timestamp":"201856T12:54:33.347+02:00", "thread":"main", "logger\_name":"org.elasticsearch.bootstrap", "level":"WARN", "message":"JNA no… --- ## [Xpack and Logstas: Elasticsearch Unreachable: \[http://localhost:9200/\]](https://discuss.elastic.co/t/xpack-and-logstas-elasticsearch-unreachable-http-localhost-9200/109048)
**Author:** [@saad](https://discuss.elastic.co/u/saad)\ **Replies:** 6\ **Last updated:** [November 27, 2017, 12:24pm UTC](https://discuss.elastic.co/t/xpack-and-logstas-elasticsearch-unreachable-http-localhost-9200/109048 "2017-11-27T12:24:15Z")
Hi I installed x-pack on logstash. logstash was running successfully before x-pack. After installation of x-pack, I disable seucirty in elasticseach and logstash by using below command in .yml file xpack.security.enabl… [Previous page](https://discuss.elastic.co/top.md?page=305&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=307&per_page=50&period=all)