# Top **URL:** https://discuss.elastic.co/top.md?page=308&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 309 --- ## [Filebeat cannot send output to logstash](https://discuss.elastic.co/t/filebeat-cannot-send-output-to-logstash/188034)
**Author:** [@Dave\_Hafid](https://discuss.elastic.co/u/Dave_Hafid)\ **Replies:** 7\ **Last updated:** [July 10, 2019, 1:25pm UTC](https://discuss.elastic.co/t/filebeat-cannot-send-output-to-logstash/188034 "2019-07-10T13:25:04Z")
Dear ALL, iam trying to configure filebeat to send output to logstash, after running command filebeat setup i found this error message Exiting: Index management requested but the Elasticsearch output is not configured/… --- ## [Connection exception during geoip database \[ERROR\]\[o.e.i.g.GeoIpDownloader \]\[WUWVC0ASX02\]](https://discuss.elastic.co/t/connection-exception-during-geoip-database-error-o-e-i-g-geoipdownloader-wuwvc0asx02/318942)
**Author:** [@Kamil\_BdBelfort](https://discuss.elastic.co/u/Kamil_BdBelfort)\ **Replies:** 4\ **Last updated:** [November 18, 2022, 9:45am UTC](https://discuss.elastic.co/t/connection-exception-during-geoip-database-error-o-e-i-g-geoipdownloader-wuwvc0asx02/318942 "2022-11-18T09:45:36Z")
Hi there, I've downloaded the latest version of elasticsearch 8.5.1 and when I try to run it (bin\\elasticsearch.bat) I get this error: \[2022-11-15T01:08:55,761\]\[ERROR\]\[o.e.i.g.GeoIpDownloader \] \[WUWVC0ASX02\] exception… --- ## [Error since 7.4 upgrade - field expansion matches too many fields](https://discuss.elastic.co/t/error-since-7-4-upgrade-field-expansion-matches-too-many-fields/204087)
**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\ **Replies:** 1\ **Last updated:** [October 21, 2019, 1:47pm UTC](https://discuss.elastic.co/t/error-since-7-4-upgrade-field-expansion-matches-too-many-fields/204087 "2019-10-21T13:47:22Z")
Hi, Whenever i view any of my dashboards i get the below... How can i debug this? { "took": 48, "timed\_out": false, "\_shards": { "total": 188, "successful": 187, "skipped": 172, "failed": 1, "failures": \[ { "… --- ## [Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and "journalctl -xe" for details](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-elasticsearch-service-and-journalctl-xe-for-details/279405)
**Author:** [@scriptdil](https://discuss.elastic.co/u/scriptdil)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 3:51pm UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-elasticsearch-service-and-journalctl-xe-for-details/279405 "2021-07-22T15:51:37Z")
Hi i am new here. I have been trying to install Elastic search on a second server without success. I cant figure out what is wrong Error Message: Job for elasticsearch.service failed because the control process exited … --- ## [Can I hide legend from visualization?](https://discuss.elastic.co/t/can-i-hide-legend-from-visualization/258298)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 4:32pm UTC](https://discuss.elastic.co/t/can-i-hide-legend-from-visualization/258298 "2020-12-10T16:32:13Z")
Is there way to hide or remove legend from visualization? I am working on vertical bar.. --- ## [DISTINCT values DSL query](https://discuss.elastic.co/t/distinct-values-dsl-query/302715)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 3:05pm UTC](https://discuss.elastic.co/t/distinct-values-dsl-query/302715 "2022-04-20T15:05:32Z")
Hello, I've been reading a lot about this topic because I've seen it has been asked before but I can do it works yet. I am trying to get unique values from an index. I have something like this: id | app\_name | … --- ## [Graph application response time latency in milliseconds](https://discuss.elastic.co/t/graph-application-response-time-latency-in-milliseconds/71792)
**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\ **Replies:** 3\ **Last updated:** [January 18, 2017, 11:07pm UTC](https://discuss.elastic.co/t/graph-application-response-time-latency-in-milliseconds/71792 "2017-01-18T23:07:07Z")
We have financial application which works on FIX protocol . users Sends order and our application sends the response back within few milliseconds , application also generate the log with processing time of each order… --- ## [Logstash - data not loading](https://discuss.elastic.co/t/logstash-data-not-loading/126454)
**Author:** [@Yuvaraja\_kannan](https://discuss.elastic.co/u/Yuvaraja_kannan)\ **Replies:** 0\ **Last updated:** [April 2, 2018, 6:09pm UTC](https://discuss.elastic.co/t/logstash-data-not-loading/126454 "2018-04-02T18:09:07Z")
HI ALL, I am trying to load some sample data set to elasticsearch using logstash. But I am not sure if this is working, when i run my config file from command prompt ,log stash stops at this point and doesn't give any i… --- ## [Elasticstash single node via docker-compose](https://discuss.elastic.co/t/elasticstash-single-node-via-docker-compose/181720)
**Author:** [@jkimrey](https://discuss.elastic.co/u/jkimrey)\ **Replies:** 3\ **Last updated:** [May 21, 2019, 6:06am UTC](https://discuss.elastic.co/t/elasticstash-single-node-via-docker-compose/181720 "2019-05-21T06:06:30Z")
Hi. I'm trying to run Elasticsearch in a Docker container using a docker-compose. This is for non-production, so I'm trying to set the single node environment variable. Even though I'm setting it in my docker-compose,… --- ## [Bulkprocessor Indexing Timeout](https://discuss.elastic.co/t/bulkprocessor-indexing-timeout/73271)
**Author:** [@putkarsh](https://discuss.elastic.co/u/putkarsh)\ **Replies:** 1\ **Last updated:** [January 31, 2017, 5:45pm UTC](https://discuss.elastic.co/t/bulkprocessor-indexing-timeout/73271 "2017-01-31T17:45:45Z")
Each bulk request in the bulk processor waits over a semaphore whose max value is controlled by number of concurrent requests param given in the settings for the bulk processor. So lets say this value was configured to b… --- ## [Kibana is not working for public IP - throws FATAL { Error: listen EADDRNOTAVAIL](https://discuss.elastic.co/t/kibana-is-not-working-for-public-ip-throws-fatal-error-listen-eaddrnotavail/99945)
**Author:** [@Ritesh\_Sharma](https://discuss.elastic.co/u/Ritesh_Sharma)\ **Replies:** 5\ **Last updated:** [September 11, 2017, 9:26pm UTC](https://discuss.elastic.co/t/kibana-is-not-working-for-public-ip-throws-fatal-error-listen-eaddrnotavail/99945 "2017-09-11T21:26:05Z")
Hi People, I am trying to start my kibana on public ip ( say, some\_public\_ip) but unable to do so , getting following error. Kindly Help !! log \[18:15:33.233\] \[info\]\[status\]\[plugin:timelion@5.5.2\] Status changed fro… --- ## [Couldn't find any filter plugin named 'multiline' Error: NameError Name](https://discuss.elastic.co/t/couldnt-find-any-filter-plugin-named-multiline-error-nameerror-name/83843)
**Author:** [@manopmk](https://discuss.elastic.co/u/manopmk)\ **Replies:** 6\ **Last updated:** [April 28, 2017, 7:22am UTC](https://discuss.elastic.co/t/couldnt-find-any-filter-plugin-named-multiline-error-nameerror-name/83843 "2017-04-28T07:22:22Z")
Hi Buddy im using logstash 5.3.1 , im unable to use multiline in logstash of my version, help me out my conf input { file { path =\> \["/Users/Downloads/logs/\*.log"\] start\_position =\> "beginning" } } f… --- ## [How to solve red indices](https://discuss.elastic.co/t/how-to-solve-red-indices/45167)
**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\ **Replies:** 5\ **Last updated:** [March 23, 2016, 11:23pm UTC](https://discuss.elastic.co/t/how-to-solve-red-indices/45167 "2016-03-23T23:23:31Z")
How to diagnose and solve the red indices? { "cluster\_name": "clus\_1", "status": "red", "timed\_out": false, "number\_of\_nodes": 1, "number\_of\_data\_nodes": 1, "active\_primary\_shar… --- ## [ERROR: Skipping security auto configuration because it appears that the node is not starting up for the first time. The node might already be part of a cluster and this auto setup utility is designed to configure Security for new clusters only](https://discuss.elastic.co/t/error-skipping-security-auto-configuration-because-it-appears-that-the-node-is-not-starting-up-for-the-first-time-the-node-might-already-be-part-of-a-cluster-and-this-auto-setup-utility-is-designed-to-configure-security-for-new-clusters-only/300568)
**Author:** [@qili](https://discuss.elastic.co/u/qili)\ **Replies:** 3\ **Last updated:** [April 2, 2022, 6:41am UTC](https://discuss.elastic.co/t/error-skipping-security-auto-configuration-because-it-appears-that-the-node-is-not-starting-up-for-the-first-time-the-node-might-already-be-part-of-a-cluster-and-this-auto-setup-utility-is-designed-to-configure-security-for-new-clusters-only/300568 "2022-04-02T06:41:38Z")
why？ I use es8.1.1 mast node had Started ，but failed to join cluster from node mast node is ： --- ## [Why Oh Why Oh Why will Metricbeat failing to connect to elasticsearch?](https://discuss.elastic.co/t/why-oh-why-oh-why-will-metricbeat-failing-to-connect-to-elasticsearch/90870)
**Author:** [@twelsh37](https://discuss.elastic.co/u/twelsh37)\ **Replies:** 7\ **Last updated:** [June 26, 2017, 9:09pm UTC](https://discuss.elastic.co/t/why-oh-why-oh-why-will-metricbeat-failing-to-connect-to-elasticsearch/90870 "2017-06-26T21:09:11Z")
I have just installed elasticsearch, kibana and logstash. This is my first installation so please be kind. ES, Kibana, Logstash and metricbeat are all v5.4.2 OS Centos 6.9 metricbeat installed from RPM ES,Kibana, Logst… --- ## [Invalid\_index\_name\_exception](https://discuss.elastic.co/t/invalid-index-name-exception/64980)
**Author:** [@bkantu](https://discuss.elastic.co/u/bkantu)\ **Replies:** 5\ **Last updated:** [November 4, 2016, 9:07am UTC](https://discuss.elastic.co/t/invalid-index-name-exception/64980 "2016-11-04T09:07:10Z")
Hi All, I have installed and started both ElasticSearch and Kibana. If I do GET http://localhost:9200 from kibana,It is giving below response. { "error": { "root\_cause": \[ { "type": "invalid\_ind… --- ## [Timestamp range in elasticsearch](https://discuss.elastic.co/t/timestamp-range-in-elasticsearch/42482)
**Author:** [@lucifer](https://discuss.elastic.co/u/lucifer)\ **Replies:** 8\ **Last updated:** [February 26, 2016, 8:03pm UTC](https://discuss.elastic.co/t/timestamp-range-in-elasticsearch/42482 "2016-02-26T20:03:26Z")
While using ELK Stack for log analysis, there are 2 timestamps. One at which the log enters logstash, and one at which the log is actually generated. How can I apply range filter on the latter? --- ## [Display complete multiline message](https://discuss.elastic.co/t/display-complete-multiline-message/62856)
**Author:** [@gdkge](https://discuss.elastic.co/u/gdkge)\ **Replies:** 7\ **Last updated:** [October 24, 2016, 10:29pm UTC](https://discuss.elastic.co/t/display-complete-multiline-message/62856 "2016-10-24T22:29:08Z")
I have several multiline messages created by filebeat that are sent directly to Elasticsearch. When I do a discovery in Kibana, it is not showing the complete message, which the users would like to see on the Kibana das… --- ## [Cannot get Logstash to read in a file on Windows](https://discuss.elastic.co/t/cannot-get-logstash-to-read-in-a-file-on-windows/164728)
**Author:** [@MindfulMantis](https://discuss.elastic.co/u/MindfulMantis)\ **Replies:** 3\ **Last updated:** [January 28, 2019, 5:39pm UTC](https://discuss.elastic.co/t/cannot-get-logstash-to-read-in-a-file-on-windows/164728 "2019-01-28T17:39:14Z")
My colleague and I have both installed ELK using Bitnami and are both having issues getting Logstash to be able to successfully read an input file - we're hoping someone here may be able to spot an issue with our setup. … --- ## [Unable to setup filebeat dashboard for Kibana](https://discuss.elastic.co/t/unable-to-setup-filebeat-dashboard-for-kibana/228410)
**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\ **Replies:** 8\ **Last updated:** [April 17, 2020, 6:21pm UTC](https://discuss.elastic.co/t/unable-to-setup-filebeat-dashboard-for-kibana/228410 "2020-04-17T18:21:57Z")
I have set up elasticsearch , kibana and filebeat on the same CentOS VM. Both elasticsearch and kibana are running. Hostname of the CentOS VM is js-168-192.jetstream-cloud.org I am getting the below error when I run --\>… --- ## [Support for source\_ip\_fieldname in all network input plugins](https://discuss.elastic.co/t/support-for-source-ip-fieldname-in-all-network-input-plugins/161798)
**Author:** [@dss](https://discuss.elastic.co/u/dss)\ **Replies:** 0\ **Last updated:** [December 21, 2018, 7:34am UTC](https://discuss.elastic.co/t/support-for-source-ip-fieldname-in-all-network-input-plugins/161798 "2018-12-21T07:34:39Z")
The udp input plugin supports an option source\_ip\_fieldname with a default value of host and described as "the name of the field where the source IP address will be stored." I'd like to begin using ECS fields everywhere… --- ## [How to put Kibana 5.4.1 behind Apache proxy](https://discuss.elastic.co/t/how-to-put-kibana-5-4-1-behind-apache-proxy/89927)
**Author:** [@ppseal](https://discuss.elastic.co/u/ppseal)\ **Replies:** 5\ **Last updated:** [June 24, 2017, 8:53am UTC](https://discuss.elastic.co/t/how-to-put-kibana-5-4-1-behind-apache-proxy/89927 "2017-06-24T08:53:32Z")
Hi There, I have made the following changes but Apache is not redirecting to Kibana and Kibana is also still directly accessible via 5601 port. My change details below: Added following line in kibana.yml: erver.bas… --- ## [ElasticSearch Snapshot to S3](https://discuss.elastic.co/t/elasticsearch-snapshot-to-s3/129658)
**Author:** [@pratsy](https://discuss.elastic.co/u/pratsy)\ **Replies:** 4\ **Last updated:** [April 27, 2018, 8:44am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-to-s3/129658 "2018-04-27T08:44:32Z")
Hello Community, Not able to register new repository snapshot to S3. Request curl -XPUT 'http://localhost:9200/\_snapshot/s3\_repository?verify=false&pretty' -d' { "type": "s3", "settings": { "bucket": "\*\*\*", "regi… --- ## [ES- WARN \[gc\] \[young\]](https://discuss.elastic.co/t/es-warn-gc-young/84387)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 3\ **Last updated:** [May 4, 2017, 8:32pm UTC](https://discuss.elastic.co/t/es-warn-gc-young/84387 "2017-05-04T20:32:28Z")
Hi, I am getting below warning in one of my ES node. I have 3 node cluster with 16GB heap allocated to each. Can somebody explain the meaning of it? \[2017-05-03 11:50:40,203\]\[WARN \]\[monitor.jvm \] \[data-… --- ## [Timestamp grok pattern help](https://discuss.elastic.co/t/timestamp-grok-pattern-help/110393)
**Author:** [@Ravikumar\_G](https://discuss.elastic.co/u/Ravikumar_G)\ **Replies:** 7\ **Last updated:** [December 5, 2017, 9:08pm UTC](https://discuss.elastic.co/t/timestamp-grok-pattern-help/110393 "2017-12-05T21:08:00Z")
Hello, I'm trying to ingest timestamp with millisecond events but failing in kibana any help would be great actual log 2017-12-05T16:14:10.543997+00:00 ccdn-ats-tk-40405-02 pump4\[40837\]: Level=Error, subSystem=SESSION… --- ## [Handle 1 million inserts per second](https://discuss.elastic.co/t/handle-1-million-inserts-per-second/139387)
**Author:** [@hoey123](https://discuss.elastic.co/u/hoey123)\ **Replies:** 8\ **Last updated:** [July 11, 2018, 11:07am UTC](https://discuss.elastic.co/t/handle-1-million-inserts-per-second/139387 "2018-07-11T11:07:06Z")
we should implement really big data scenario with this features: input data is 1 million logs per second each log has almost 100 Bytes size we should retain data for 10 days system has 2,3 active users and they run may… --- ## [Elasticsearch support both case sensitive & insensitive](https://discuss.elastic.co/t/elasticsearch-support-both-case-sensitive-insensitive/215686)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 10:16am UTC](https://discuss.elastic.co/t/elasticsearch-support-both-case-sensitive-insensitive/215686 "2020-01-20T10:16:17Z")
Setup: Elasticsearch 6.3 I have an index that represents the products catalog. Every document contains one product's data. One of the fields called categories which is an array of strings - List of relevant categories… --- ## [Simple painless date different calculated field](https://discuss.elastic.co/t/simple-painless-date-different-calculated-field/109999)
**Author:** [@BrianBeaulieu](https://discuss.elastic.co/u/BrianBeaulieu)\ **Replies:** 1\ **Last updated:** [December 5, 2017, 12:36pm UTC](https://discuss.elastic.co/t/simple-painless-date-different-calculated-field/109999 "2017-12-05T12:36:48Z")
Should something like this work? doc\['timestamp'\].value - doc\['data.LOGON\_TIME'\].value; I've tried numerous variations. Setting variables. using a return statement. I basically just need to know how many milliseconds … --- ## [Does having multiple shards of an index on a single node provide any benefits?](https://discuss.elastic.co/t/does-having-multiple-shards-of-an-index-on-a-single-node-provide-any-benefits/210237)
**Author:** [@iandanforth](https://discuss.elastic.co/u/iandanforth)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 4:55pm UTC](https://discuss.elastic.co/t/does-having-multiple-shards-of-an-index-on-a-single-node-provide-any-benefits/210237 "2019-12-03T16:55:07Z")
I'm fairly new to ES so this may be a simple question. If I have a "cluster" of one node that has two indices on the node, is there any benefit to having number\_of\_shards greater than one? As I understand it this will s… --- ## [\]\[ERROR\]\[o.e.x.m.c.n.NodeStatsCollector\] \[es3\] collector \[node\_stats\] timed out when collecting data](https://discuss.elastic.co/t/error-o-e-x-m-c-n-nodestatscollector-es3-collector-node-stats-timed-out-when-collecting-data/132407)
**Author:** [@Rmond](https://discuss.elastic.co/u/Rmond)\ **Replies:** 7\ **Last updated:** [May 21, 2018, 8:38am UTC](https://discuss.elastic.co/t/error-o-e-x-m-c-n-nodestatscollector-es3-collector-node-stats-timed-out-when-collecting-data/132407 "2018-05-21T08:38:41Z")
always get the errors version ：6.2.2 \[2018-05-18T11:15:20,964\]\[ERROR\]\[o.e.x.m.c.n.NodeStatsCollector\] \[es3\] collector \[node\_stats\] timed out when collecting data \[2018-05-18T11:15:40,964\]\[ERROR\]\[o.e.x.m.c.n.NodeStatsCo… --- ## [Difference between primary store size and store size](https://discuss.elastic.co/t/difference-between-primary-store-size-and-store-size/24016)
**Author:** [@sagarshah1983](https://discuss.elastic.co/u/sagarshah1983)\ **Replies:** 1\ **Last updated:** [June 19, 2015, 11:35pm UTC](https://discuss.elastic.co/t/difference-between-primary-store-size-and-store-size/24016 "2015-06-19T23:35:19Z")
Hello everyone, I am using Elastic search 1.4.2. I am trying to analyze Elastic Search Space using \_cat/indices API. I see 2 different columns related to disk space, Store Size and Primary store size. I see that store si… --- ## [Multiple documents with same \_id](https://discuss.elastic.co/t/multiple-documents-with-same-id/108567)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 4\ **Last updated:** [November 21, 2017, 1:45pm UTC](https://discuss.elastic.co/t/multiple-documents-with-same-id/108567 "2017-11-21T13:45:08Z")
Hi, I am using single master, 2 data nodes for my cluster. (6shards, 1Replica) I also have routing specified while indexing documents. When i have indexed about 20Gb of documents, i can see multiple documents with sa… --- ## [Simple test showing that logstash port is reachable by filebeat](https://discuss.elastic.co/t/simple-test-showing-that-logstash-port-is-reachable-by-filebeat/55999)
**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\ **Replies:** 4\ **Last updated:** [July 20, 2016, 9:01pm UTC](https://discuss.elastic.co/t/simple-test-showing-that-logstash-port-is-reachable-by-filebeat/55999 "2016-07-20T21:01:45Z")
We are looking at larger number of filebeats installations in the production environments. One challenge is that in some cases logstash host:5044 is not reachable from the filebeat host. How do we check using curl (nc … --- ## [Logstash could not be started because there is already another instance using the configured data directory - Windows7](https://discuss.elastic.co/t/logstash-could-not-be-started-because-there-is-already-another-instance-using-the-configured-data-directory-windows7/137349)
**Author:** [@thoppaen](https://discuss.elastic.co/u/thoppaen)\ **Replies:** 7\ **Last updated:** [June 28, 2018, 11:08am UTC](https://discuss.elastic.co/t/logstash-could-not-be-started-because-there-is-already-another-instance-using-the-configured-data-directory-windows7/137349 "2018-06-28T11:08:16Z")
Hi, How do i kill multiple instances, i do not wish to run multiple instances of logstash, but however, it is getting created in the background! How do i kill it in windows 7. However, on changing the path.data in YML… --- ## [Metric / Visual Builder: how to configure the builder to aggregate the target data set](https://discuss.elastic.co/t/metric-visual-builder-how-to-configure-the-builder-to-aggregate-the-target-data-set/90160)
**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\ **Replies:** 4\ **Last updated:** [July 19, 2017, 7:59pm UTC](https://discuss.elastic.co/t/metric-visual-builder-how-to-configure-the-builder-to-aggregate-the-target-data-set/90160 "2017-07-19T19:59:50Z")
I am trying to create visualization using the Visual Builder introduced in Kibana 5.4. After I specify the target index, I have problems setting up the filter to get my target data. Does the panel filter under Panel Opti… --- ## [How to set log in kibana?](https://discuss.elastic.co/t/how-to-set-log-in-kibana/164120)
**Author:** [@minhua1983](https://discuss.elastic.co/u/minhua1983)\ **Replies:** 4\ **Last updated:** [January 15, 2019, 2:37am UTC](https://discuss.elastic.co/t/how-to-set-log-in-kibana/164120 "2019-01-15T02:37:39Z")
I installed kibana by default in windows 2008 r2 a few months ago. However, I did not see log folder under the kibana installation folder. I found that I could set config file as below in kibana.yml. logging.dest: std… --- ## [How to optimize Elasticsearch index data space](https://discuss.elastic.co/t/how-to-optimize-elasticsearch-index-data-space/67189)
**Author:** [@roopendra](https://discuss.elastic.co/u/roopendra)\ **Replies:** 6\ **Last updated:** [November 28, 2016, 4:54am UTC](https://discuss.elastic.co/t/how-to-optimize-elasticsearch-index-data-space/67189 "2016-11-28T04:54:36Z")
I am parsing Apache access log from Logstash and indexing it into a Elasticsearch index. I am also indexing geoip and agent fields. While indexing I observed elasticsearch index size is 6.7x bigger than the actual file s… --- ## [Io/console not supported when starting logstash 1.5.0 on Win 7](https://discuss.elastic.co/t/io-console-not-supported-when-starting-logstash-1-5-0-on-win-7/966)
**Author:** [@mobcdi](https://discuss.elastic.co/u/mobcdi)\ **Replies:** 8\ **Last updated:** [August 24, 2016, 9:25pm UTC](https://discuss.elastic.co/t/io-console-not-supported-when-starting-logstash-1-5-0-on-win-7/966 "2016-08-24T21:25:39Z")
I'm trying to get ELK setup on a Win 7 machine using Java 1.8 . I've got E and K and marvel running but I can't get logstash to startup. From a windows command console running with admin previlages on a folder on the d… --- ## [Import dashboards etc via command line](https://discuss.elastic.co/t/import-dashboards-etc-via-command-line/77830)
**Author:** [@Alistair\_Hardy](https://discuss.elastic.co/u/Alistair_Hardy)\ **Replies:** 5\ **Last updated:** [March 26, 2017, 7:33pm UTC](https://discuss.elastic.co/t/import-dashboards-etc-via-command-line/77830 "2017-03-26T19:33:49Z")
So we're looking into deploying the elastic stack on multiple, indipendant servers that are built using puppet. While I've got the Elastic stack installing, beats being installed and data going into elastic etc, I am yet… --- ## [Logstash is not listening on any port](https://discuss.elastic.co/t/logstash-is-not-listening-on-any-port/45088)
**Author:** [@guy.naftaly](https://discuss.elastic.co/u/guy.naftaly)\ **Replies:** 4\ **Last updated:** [January 30, 2017, 3:43pm UTC](https://discuss.elastic.co/t/logstash-is-not-listening-on-any-port/45088 "2017-01-30T15:43:43Z")
hello all, I installed Elasticsearch/Logstash/Kibana on CentOS 7 . Kibana and Elasticsearch works fine. Logstash version logstash-2.2 I have an issue with the Logstash – it is not listening on the input ports I created… --- ## [Forcemerge and merge policies](https://discuss.elastic.co/t/forcemerge-and-merge-policies/145532)
**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\ **Replies:** 4\ **Last updated:** [August 22, 2018, 12:13pm UTC](https://discuss.elastic.co/t/forcemerge-and-merge-policies/145532 "2018-08-22T12:13:14Z")
Hi In our current setup, we're scraping a site every day and indexing the results, basically overwriting the same data over and over again, every 24 hours. Since I know the index is going to be read-only for 24 hours a… --- ## [Is there any drawback of using best\_compression while indexing in Elasticsearch?](https://discuss.elastic.co/t/is-there-any-drawback-of-using-best-compression-while-indexing-in-elasticsearch/67842)
**Author:** [@roopendra](https://discuss.elastic.co/u/roopendra)\ **Replies:** 1\ **Last updated:** [December 2, 2016, 11:48am UTC](https://discuss.elastic.co/t/is-there-any-drawback-of-using-best-compression-while-indexing-in-elasticsearch/67842 "2016-12-02T11:48:00Z")
I am performing some test on tuning disk space for Elasticsearch index. I found some good tips to compress the elasticseach index size. Especially, If your use case is only show dashboard in Kibana. During these indexes … --- ## [Different size of disk space for cluster nodes](https://discuss.elastic.co/t/different-size-of-disk-space-for-cluster-nodes/115358)
**Author:** [@saad](https://discuss.elastic.co/u/saad)\ **Replies:** 1\ **Last updated:** [January 13, 2018, 8:07pm UTC](https://discuss.elastic.co/t/different-size-of-disk-space-for-cluster-nodes/115358 "2018-01-13T20:07:42Z")
If I make cluster with different disk space nodes for example 3 nodes one with 1TB and two with 512GB. and I did shards 3 and replica 1. How elasticsearch will distribute shards and replica on these different size nodes… --- ## [TCP Plugin Input Permission Denied](https://discuss.elastic.co/t/tcp-plugin-input-permission-denied/127722)
**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\ **Replies:** 5\ **Last updated:** [April 19, 2018, 1:15am UTC](https://discuss.elastic.co/t/tcp-plugin-input-permission-denied/127722 "2018-04-19T01:15:41Z")
So I have seen a variety of these errors on the forum but have not really been able to figure this out for my case. I am running Elastic stack on a Linux machine. When I try to start Logstash I get the following logs: \[… --- ## [Lucene query unique values](https://discuss.elastic.co/t/lucene-query-unique-values/229057)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 6\ **Last updated:** [April 24, 2020, 7:51am UTC](https://discuss.elastic.co/t/lucene-query-unique-values/229057 "2020-04-24T07:51:13Z")
Hi, I am working in Kibana Canvas and have a datatable with a Lucene query filter. Now, I only need a lucene query filter which only shows unique values. Does somebody know the syntax? --- ## [Changing the cluster name](https://discuss.elastic.co/t/changing-the-cluster-name/94626)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 5\ **Last updated:** [July 28, 2017, 6:44am UTC](https://discuss.elastic.co/t/changing-the-cluster-name/94626 "2017-07-28T06:44:12Z")
Elasticsearch version: 5.4.3 I have a single node elasticsearch server and already have few millions of documents indexed. I want to add another node and want to have it as two nodes cluster. While doing so I want to c… --- ## [Unable to update UI setting Request failed with status code: 403](https://discuss.elastic.co/t/unable-to-update-ui-setting-request-failed-with-status-code-403/201409)
**Author:** [@astrobalaji](https://discuss.elastic.co/u/astrobalaji)\ **Replies:** 3\ **Last updated:** [October 14, 2019, 9:54am UTC](https://discuss.elastic.co/t/unable-to-update-ui-setting-request-failed-with-status-code-403/201409 "2019-10-14T09:54:01Z")
Hi guys, I am not sure what I am doing wrong here. I am automatically updating user security roles also for the spaces through the kibana API. And when I login from one of those roles, I keep getting this error. Unable… --- ## [ERR Failed to connect: Connection marked as failed because the onConnect callback failed](https://discuss.elastic.co/t/err-failed-to-connect-connection-marked-as-failed-because-the-onconnect-callback-failed/109468)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [November 28, 2017, 9:09pm UTC](https://discuss.elastic.co/t/err-failed-to-connect-connection-marked-as-failed-because-the-onconnect-callback-failed/109468 "2017-11-28T21:09:43Z")
My environment: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.4 (Maipo) # rpm -q elasticsearch filebeat elasticsearch-6.0.0-1.noarch filebeat-6.0.0-1.x86\_64 # I keep getting following error ins… --- ## [Observer: timeout notification from cluster service. timeout setting \[1m\], time since start \[1m\]](https://discuss.elastic.co/t/observer-timeout-notification-from-cluster-service-timeout-setting-1m-time-since-start-1m/1676)
**Author:** [@ccrivelli](https://discuss.elastic.co/u/ccrivelli)\ **Replies:** 5\ **Last updated:** [December 8, 2015, 1:41am UTC](https://discuss.elastic.co/t/observer-timeout-notification-from-cluster-service-timeout-setting-1m-time-since-start-1m/1676 "2015-12-08T01:41:29Z")
Hi guys, is there someone able to clarify what does this Error mean? Can it potentially cause other problems? observer: timeout notification from cluster service. timeout setting \[1m\], time since start \[1m\] Thanks --- ## [Can we use split processor with painless scripting](https://discuss.elastic.co/t/can-we-use-split-processor-with-painless-scripting/98536)
**Author:** [@vinay\_garg](https://discuss.elastic.co/u/vinay_garg)\ **Replies:** 4\ **Last updated:** [August 29, 2017, 4:16am UTC](https://discuss.elastic.co/t/can-we-use-split-processor-with-painless-scripting/98536 "2017-08-29T04:16:23Z")
Hi, Can we use split processor with painless scripting as we can use in java or groovy? value of RequestIntime = "ReqestIn\_2017-08-21T12:10:10" def String request = doc\[‘RequestInTime’\].value; Seperator shoud be base… [Previous page](https://discuss.elastic.co/top.md?page=307&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=309&per_page=50&period=all)