# Top **URL:** https://discuss.elastic.co/top.md?page=309&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 310 --- ## [Ruby exception occurred: undefined method \`\[\]' for nil:NilClass](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass/140630)
**Author:** [@Hanneu](https://discuss.elastic.co/u/Hanneu)\ **Replies:** 8\ **Last updated:** [July 20, 2018, 3:58pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass/140630 "2018-07-20T15:58:00Z")
Hello experts, I have been getting very many below error and warning messages. 1.) \[ERROR\]\[logstash.filters.ruby \] Ruby exception occurred: undefined method \`\[\]' for nil:NilClass 2.) \]\[WARN \]\[logstash.outputs.elast… --- ## [Calculate Percentage in Kibana](https://discuss.elastic.co/t/calculate-percentage-in-kibana/147518)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 4\ **Last updated:** [September 6, 2018, 6:07pm UTC](https://discuss.elastic.co/t/calculate-percentage-in-kibana/147518 "2018-09-06T18:07:27Z")
Can we calculate percentage in kibana. I have two fields. Count and count difference. I want to aggregate based on dept and calculate (count difference/count) \* 100 for the various dept buckets Please help me --- ## [Issue : Error decoding JSON: json: cannot unmarshal string into Go value of type map\[string\]interface {}](https://discuss.elastic.co/t/issue-error-decoding-json-json-cannot-unmarshal-string-into-go-value-of-type-map-string-interface/202293)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 6:50am UTC](https://discuss.elastic.co/t/issue-error-decoding-json-json-cannot-unmarshal-string-into-go-value-of-type-map-string-interface/202293 "2019-10-14T06:50:05Z")
Hi, i'm using the elk stack 7.1.1 with x-pack installed and i trying to parse json log into logstash and apply grok filter to it then im getting the following error Error decoding JSON: json: cannot unmarshal string i… --- ## [No cached mapping for this field / refresh of fields not working](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-refresh-of-fields-not-working/171821)
**Author:** [@Lowwa](https://discuss.elastic.co/u/Lowwa)\ **Replies:** 3\ **Last updated:** [March 12, 2019, 9:57am UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-refresh-of-fields-not-working/171821 "2019-03-12T09:57:37Z")
Hi, Any new fields added to my index are ignored by my index pattern. The fields list remain empty. I tried to refresh field list, to remove / add index pattern, to remove / re-create index... The fields are shown in … --- ## [How to check the specific version of plugin is installed?](https://discuss.elastic.co/t/how-to-check-the-specific-version-of-plugin-is-installed/57206)
**Author:** [@tmshn](https://discuss.elastic.co/u/tmshn)\ **Replies:** 3\ **Last updated:** [August 5, 2016, 3:19am UTC](https://discuss.elastic.co/t/how-to-check-the-specific-version-of-plugin-is-installed/57206 "2016-08-05T03:19:31Z")
Is there a good way to check the specific version of plugin is installed? (I'm writing Serverspec test to validate an ES cluster). For now, I'm doing $ bin/plugin list | grep ${plugin} but it doesn't show version. … --- ## [While using pipeline Error: Address already in use Exception](https://discuss.elastic.co/t/while-using-pipeline-error-address-already-in-use-exception/125039)
**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\ **Replies:** 7\ **Last updated:** [March 26, 2018, 5:54pm UTC](https://discuss.elastic.co/t/while-using-pipeline-error-address-already-in-use-exception/125039 "2018-03-26T17:54:30Z")
Hello Experts, when I was trying to run logstash using pipeline.yml I am running into below error. I don't find any logstash instance running \[root@localhost config\]# ps -ef | grep logstash root 26227 22729 0 09… --- ## [Trying to create watcher but getting payload is "ctx.payload.hits.total.value" : null](https://discuss.elastic.co/t/trying-to-create-watcher-but-getting-payload-is-ctx-payload-hits-total-value-null/224787)
**Author:** [@sundar\_elk](https://discuss.elastic.co/u/sundar_elk)\ **Replies:** 1\ **Last updated:** [March 24, 2020, 10:51am UTC](https://discuss.elastic.co/t/trying-to-create-watcher-but-getting-payload-is-ctx-payload-hits-total-value-null/224787 "2020-03-24T10:51:39Z")
Hi Team, I am trying to create a watcher for 1 error message but I get stuck. I have executed steps from elasticsearch document https://www.elastic.co/guide/en/elasticsearch/reference/current/watcher-getting-started.ht… --- ## [ECK Operator unable to verify basic license in OpenShift](https://discuss.elastic.co/t/eck-operator-unable-to-verify-basic-license-in-openshift/303423)
**Author:** [@RRGTHWAR](https://discuss.elastic.co/u/RRGTHWAR)\ **Replies:** 7\ **Last updated:** [May 11, 2022, 5:02am UTC](https://discuss.elastic.co/t/eck-operator-unable-to-verify-basic-license-in-openshift/303423 "2022-05-11T05:02:23Z")
Hello, I have the ECK Operator (2.1) running in OpenShift. Both Elasticsearch and Kibana are up and running properly with version 7.17.2, but the operator is stuck on trying to verify the (basic) license for Elasticsear… --- ## [How do I create multiple nodes on the same computer](https://discuss.elastic.co/t/how-do-i-create-multiple-nodes-on-the-same-computer/86839)
**Author:** [@schoffelman](https://discuss.elastic.co/u/schoffelman)\ **Replies:** 3\ **Last updated:** [May 24, 2017, 5:34pm UTC](https://discuss.elastic.co/t/how-do-i-create-multiple-nodes-on-the-same-computer/86839 "2017-05-24T17:34:37Z")
I currently have one node running on my machine, but I'm curious how I can get 3 nodes running. Does each node require a separate yml config file with the same cluster.name or is there a way to specify within the one ela… --- ## [BigDecimal support](https://discuss.elastic.co/t/bigdecimal-support/16040)
**Author:** [@mooky](https://discuss.elastic.co/u/mooky)\ **Replies:** 8\ **Last updated:** [May 7, 2014, 2:18pm UTC](https://discuss.elastic.co/t/bigdecimal-support/16040 "2014-05-07T14:18:51Z")
In financial services space, we almost never use float/double in our domain - we always use BigDecimal. In elastic, I would like to be able to index/store BigDecimal in a lossless manner (ie what I get back from \_… --- ## [Using CompletionSuggestionBuilder with context in Java](https://discuss.elastic.co/t/using-completionsuggestionbuilder-with-context-in-java/67015)
**Author:** [@Cosmin\_Marginean1](https://discuss.elastic.co/u/Cosmin_Marginean1)\ **Replies:** 0\ **Last updated:** [November 23, 2016, 4:49pm UTC](https://discuss.elastic.co/t/using-completionsuggestionbuilder-with-context-in-java/67015 "2016-11-23T16:49:00Z")
Hi guys I'm trying to use the CompletionSuggestionBuilder (context suggester) with the Java client (ES 5.0.1), and I'm struggling with adding contexts, and the API is not entirely clear on that. This is as far as I g… --- ## [JAVA\_HOME on Windows](https://discuss.elastic.co/t/java-home-on-windows/34961)
**Author:** [@mrwensveen](https://discuss.elastic.co/u/mrwensveen)\ **Replies:** 4\ **Last updated:** [January 25, 2017, 7:29pm UTC](https://discuss.elastic.co/t/java-home-on-windows/34961 "2017-01-25T19:29:48Z")
Hi. I'm running Elasticsearch on a Windows machine with just a JRE (no JDK installed). Since the JDK installer usually creates the JAVA\_HOME environment variable, I'm left without it. Since I don't want to set it manuall… --- ## [LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError: Got response code '403' contacting Elasticsearch at URL 'http://localhost:9200/logstash'](https://discuss.elastic.co/t/logstash-got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200-logstash/194951)
**Author:** [@Daniel6](https://discuss.elastic.co/u/Daniel6)\ **Replies:** 0\ **Last updated:** [August 13, 2019, 4:11am UTC](https://discuss.elastic.co/t/logstash-got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200-logstash/194951 "2019-08-13T04:11:47Z")
Hi, I recently set security to elasticsearch. I configure elasticsearch by this doc And configure logstash by this doc Here is my logstash.yml: xpack.monitoring.enabled: true xpack.monitoring.elasticsearch.username… --- ## [How to change the data type in Logstash](https://discuss.elastic.co/t/how-to-change-the-data-type-in-logstash/25255)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 7\ **Last updated:** [July 10, 2015, 7:55am UTC](https://discuss.elastic.co/t/how-to-change-the-data-type-in-logstash/25255 "2015-07-10T07:55:21Z")
Hi, I am indexing the CSV file using Logstash, default it index every field as string in elasticsearch. I want to change some field to Date type ,how can i do it in logstash ? --- ## [java.lang.UnsupportedOperationException on starting elasticsearch](https://discuss.elastic.co/t/java-lang-unsupportedoperationexception-on-starting-elasticsearch/64548)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [February 27, 2017, 12:10pm UTC](https://discuss.elastic.co/t/java-lang-unsupportedoperationexception-on-starting-elasticsearch/64548 "2017-02-27T12:10:24Z")
On my Linux, when I try to start elasticsearch, I am getting the following warning; \[2016-11-01T17:09:28,391\]\[WARN \]\[o.e.b.JNANatives \] unable to install syscall filter: java.lang.UnsupportedOperationException:… --- ## [What's the downside of making all data nodes master eligible](https://discuss.elastic.co/t/whats-the-downside-of-making-all-data-nodes-master-eligible/175495)
**Author:** [@riches](https://discuss.elastic.co/u/riches)\ **Replies:** 6\ **Last updated:** [April 9, 2019, 6:10pm UTC](https://discuss.elastic.co/t/whats-the-downside-of-making-all-data-nodes-master-eligible/175495 "2019-04-09T18:10:39Z")
I understand it's recommended to configure 3 dedicated master nodes. I'm curious what's the downside of making all N, N \> 3, nodes both data nodes and master eligible in practice? One I can think of is that the elected … --- ## [How can I encrypt the data stored in indexes?](https://discuss.elastic.co/t/how-can-i-encrypt-the-data-stored-in-indexes/315691)
**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\ **Replies:** 5\ **Last updated:** [October 4, 2022, 1:32pm UTC](https://discuss.elastic.co/t/how-can-i-encrypt-the-data-stored-in-indexes/315691 "2022-10-04T13:32:25Z")
Hi, I am developing my own external custom plugin in React. And I am planning to store personal information of customers and their inventory data as well in Elasticsearch, in addition to logging data. I am planning to … --- ## [Filebeat output configuration to TCP ports](https://discuss.elastic.co/t/filebeat-output-configuration-to-tcp-ports/70038)
**Author:** [@siddhardhk](https://discuss.elastic.co/u/siddhardhk)\ **Replies:** 7\ **Last updated:** [December 29, 2016, 2:42pm UTC](https://discuss.elastic.co/t/filebeat-output-configuration-to-tcp-ports/70038 "2016-12-29T14:42:05Z")
Hi, Recently i started working on log forwarding to Kibana / ES and Apache NiFi thru logstash-forwarder and i am successfully finished the same. But, i came to know logstash-forwarder is deprecated and Filebeat is rep… --- ## [Elasticsearch Result Size](https://discuss.elastic.co/t/elasticsearch-result-size/26180)
**Author:** [@Sivaprakash\_Shanmuga](https://discuss.elastic.co/u/Sivaprakash_Shanmuga)\ **Replies:** 1\ **Last updated:** [July 23, 2015, 10:39pm UTC](https://discuss.elastic.co/t/elasticsearch-result-size/26180 "2015-07-23T22:39:45Z")
Hi I'm using Python Library to integrate with Elasticsearch es = Elasticsearch(\[{'host': 'localhost', 'port': 9200}\]) res = es.search(index="college", doc\_type='people', body=doc) It returns only 10 records where a… --- ## [\[marvel.agent \] background thread had an uncaught exception ElasticsearchException\[failed to flush exporter bulks on today's index](https://discuss.elastic.co/t/marvel-agent-background-thread-had-an-uncaught-exception-elasticsearchexception-failed-to-flush-exporter-bulks-on-todays-index/77571)
**Author:** [@Jules\_Huang](https://discuss.elastic.co/u/Jules_Huang)\ **Replies:** 5\ **Last updated:** [March 7, 2017, 6:43pm UTC](https://discuss.elastic.co/t/marvel-agent-background-thread-had-an-uncaught-exception-elasticsearchexception-failed-to-flush-exporter-bulks-on-todays-index/77571 "2017-03-07T18:43:01Z")
I started with elasticsearch 1.6.0. To upgraded it to 5.2 based on the recommendation that I upgraded it to 2.4.4 first. As of now I am still at 2.4 with Kibana 4.6.4. I have one node PerfNode\_1 with the data migrated … --- ## [Multiple filters on Filter Aggregation](https://discuss.elastic.co/t/multiple-filters-on-filter-aggregation/141613)
**Author:** [@zivari](https://discuss.elastic.co/u/zivari)\ **Replies:** 3\ **Last updated:** [July 25, 2018, 4:02pm UTC](https://discuss.elastic.co/t/multiple-filters-on-filter-aggregation/141613 "2018-07-25T16:02:48Z")
Hey, Using ElasticSearch aggregation to aggregate data on my documents. so the aggregation request looks something like this { "query":{ "bool":{ "filter":\[ { "t… --- ## [Exiting: error connecting to Kibana: fail to get the Kibana version](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version/248526)
**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\ **Replies:** 4\ **Last updated:** [September 15, 2020, 9:27am UTC](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version/248526 "2020-09-15T09:27:07Z")
Hello, I am new to ELK,I am not able to load the dashboard into my kibana server, when i tried to load dashboard i am getting this error. please help me with this. my Metribeat.yml # This file is an example configura… --- ## [How can I use elasticdump to reindex an entire cluster?](https://discuss.elastic.co/t/how-can-i-use-elasticdump-to-reindex-an-entire-cluster/40162)
**Author:** [@PhaedrusTheGreek](https://discuss.elastic.co/u/PhaedrusTheGreek)\ **Replies:** 3\ **Last updated:** [January 27, 2016, 4:45pm UTC](https://discuss.elastic.co/t/how-can-i-use-elasticdump-to-reindex-an-entire-cluster/40162 "2016-01-27T16:45:50Z")
I love elasticdump! How can I use it to reindex my entire cluster? Also, if one giant file is too much, is there some script that I can run to split it out into multiple files? --- ## [java.net.SocketException: Connection reset](https://discuss.elastic.co/t/java-net-socketexception-connection-reset/85293)
**Author:** [@arul\_since1975](https://discuss.elastic.co/u/arul_since1975)\ **Replies:** 0\ **Last updated:** [May 10, 2017, 5:40pm UTC](https://discuss.elastic.co/t/java-net-socketexception-connection-reset/85293 "2017-05-10T17:40:14Z")
I am running into Connection Reset Exception. I was trying to send BULK Ingest containing 2110 documents in it and total size of message is 760KB. This message is sent to ElasticSearch through Kafka producer consumer mod… --- ## [java.lang.NoClassDefFoundError: org/elasticsearch/common/transport/TransportAddress](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-common-transport-transportaddress/103516)
**Author:** [@Canappeco](https://discuss.elastic.co/u/Canappeco)\ **Replies:** 6\ **Last updated:** [October 12, 2017, 3:13am UTC](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-common-transport-transportaddress/103516 "2017-10-12T03:13:03Z")
I am using mvn package to build a jar and want to run the main function in the jar. mvn package is successful, but when I run java -classpath ./target/socket-server-1.0-SNAPSHOT.jar cn.zmhappy.es.Demo, something bad happ… --- ## [Yellow Cluster Health from unassigned\_shards](https://discuss.elastic.co/t/yellow-cluster-health-from-unassigned-shards/106213)
**Author:** [@Staggerlee011](https://discuss.elastic.co/u/Staggerlee011)\ **Replies:** 8\ **Last updated:** [November 3, 2017, 3:33pm UTC](https://discuss.elastic.co/t/yellow-cluster-health-from-unassigned-shards/106213 "2017-11-03T15:33:51Z")
Hi, I have an yellow health cluster. We have gone through several phases to go green but none have worked so far. get \_cluster/health?pretty=true { "cluster\_name": "ElasticSearch", "status": "yellow", "timed\_out"… --- ## [How to create a new field using value from another field?](https://discuss.elastic.co/t/how-to-create-a-new-field-using-value-from-another-field/175885)
**Author:** [@Kagerou](https://discuss.elastic.co/u/Kagerou)\ **Replies:** 4\ **Last updated:** [April 8, 2019, 8:10pm UTC](https://discuss.elastic.co/t/how-to-create-a-new-field-using-value-from-another-field/175885 "2019-04-08T20:10:08Z")
I have json data that I'm using the Json filter on to turn into fields. I want to use the elapsed filter so I need the value of one of the fields to act as the start and end tag. Is there any filter that allows you to tu… --- ## [What is the best backup strategy for ELK stack?](https://discuss.elastic.co/t/what-is-the-best-backup-strategy-for-elk-stack/25146)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 4\ **Last updated:** [July 9, 2015, 4:42am UTC](https://discuss.elastic.co/t/what-is-the-best-backup-strategy-for-elk-stack/25146 "2015-07-09T04:42:57Z")
Hi Experts , Before moving things to the production I want to collect thoughts on ELK stack backup . Can you recommend or suggest some criteria's or methods best for backup . I have a question 1) one way which come… --- ## [Bulk index API back pressure](https://discuss.elastic.co/t/bulk-index-api-back-pressure/27094)
**Author:** [@Christopher\_Hunt](https://discuss.elastic.co/u/Christopher_Hunt)\ **Replies:** 8\ **Last updated:** [August 19, 2015, 12:55pm UTC](https://discuss.elastic.co/t/bulk-index-api-back-pressure/27094 "2015-08-19T12:55:28Z")
Hi there, We're using the bulk index REST api to insert and index new documents. Our configuration is that we have 3 ES instances running as 1 cluster and then n clients sending the bulk index request (where n can be, … --- ## [Not able to create a bulk api via curl](https://discuss.elastic.co/t/not-able-to-create-a-bulk-api-via-curl/113333)
**Author:** [@fillic2002](https://discuss.elastic.co/u/fillic2002)\ **Replies:** 6\ **Last updated:** [January 2, 2018, 10:34am UTC](https://discuss.elastic.co/t/not-able-to-create-a-bulk-api-via-curl/113333 "2018-01-02T10:34:22Z")
I am running this commond from curl on elasticsearch 6.0 version curl -XPOST "localhost:9200/shakespeare/doc/\_bulk?pretty" -H "Content-Type:application/json" -d @shakespeare.json Getting below error. "reason" : "The b… --- ## [Logstash.outputs.elasticsearch is trying to connect to another elasticsearch](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-is-trying-to-connect-to-another-elasticsearch/101526)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [October 7, 2017, 6:51pm UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-is-trying-to-connect-to-another-elasticsearch/101526 "2017-10-07T18:51:40Z")
I'm following Running Logstash on Docker | Logstash Reference \[5.X\] | Elastic here is my logstash's pipeline configuration: # cat ./usr/share/logstash/pipeline/test.conf input { beats { port =\> 5044 } } output… --- ## [Full list of headers for \_cat/indices](https://discuss.elastic.co/t/full-list-of-headers-for-cat-indices/103242)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 4\ **Last updated:** [October 9, 2017, 9:54pm UTC](https://discuss.elastic.co/t/full-list-of-headers-for-cat-indices/103242 "2017-10-09T21:54:56Z")
I was looking at the documentation for the \_cat/indices api (https://www.elastic.co/guide/en/elasticsearch/reference/current/cat-indices.html), and I see that the normal list of headers returned is: health status index … --- ## [How to restart Kibana](https://discuss.elastic.co/t/how-to-restart-kibana/24292)
**Author:** [@avramw](https://discuss.elastic.co/u/avramw)\ **Replies:** 3\ **Last updated:** [June 25, 2015, 5:29am UTC](https://discuss.elastic.co/t/how-to-restart-kibana/24292 "2015-06-25T05:29:20Z")
This is probably a very easy question. I'm running Kibana on a linux VM. I started Kibana with the following command so it won't exit when I kill my SSH session: sh kibana-4.0.1-linux-x64/bin/kibana \>\> /dev/null & Now … --- ## [Logstash output Indexname with old Date](https://discuss.elastic.co/t/logstash-output-indexname-with-old-date/123433)
**Author:** [@sumanbehara](https://discuss.elastic.co/u/sumanbehara)\ **Replies:** 5\ **Last updated:** [March 15, 2018, 5:02pm UTC](https://discuss.elastic.co/t/logstash-output-indexname-with-old-date/123433 "2018-03-15T17:02:36Z")
How to add in logstash output Index name as "logstash-old date" , not with timestamp. Current Date is working fine for me. how to convert 2016-05-23T10:42:04.370Z to normal date 2016-05-23 and use this date in logstash o… --- ## [Kibana.bat errors on Windows 10](https://discuss.elastic.co/t/kibana-bat-errors-on-windows-10/34233)
**Author:** [@PaulBrown](https://discuss.elastic.co/u/PaulBrown)\ **Replies:** 5\ **Last updated:** [December 17, 2015, 5:37pm UTC](https://discuss.elastic.co/t/kibana-bat-errors-on-windows-10/34233 "2015-12-17T17:37:34Z")
HI, I'm new to all this Elastic Search and Kibana technology but have started to look at it. I've downloaded and installed ElasticSearch-2.0.0 and that's working fine. To go with this I've downloaded Kibana-4.2.0-wi… --- ## [Processing log files while using logrotate](https://discuss.elastic.co/t/processing-log-files-while-using-logrotate/40174)
**Author:** [@rspangle1](https://discuss.elastic.co/u/rspangle1)\ **Replies:** 8\ **Last updated:** [July 26, 2016, 8:52am UTC](https://discuss.elastic.co/t/processing-log-files-while-using-logrotate/40174 "2016-07-26T08:52:33Z")
I was wondering what everybody's opinion is on processing log files read by logstash but need to be rotated using logrotate. It appears that the two don't work very well together. I'm trying to make sure we don't loose… --- ## [No Shard Available ActionException After upgrading my ELS to 2.34](https://discuss.elastic.co/t/no-shard-available-actionexception-after-upgrading-my-els-to-2-34/56619)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 5\ **Last updated:** [August 29, 2016, 6:25pm UTC](https://discuss.elastic.co/t/no-shard-available-actionexception-after-upgrading-my-els-to-2-34/56619 "2016-08-29T18:25:45Z")
After upgrading my elasticsearch , I tried to post some data into this. But getting the below error message and my ELS state went to RED. Log: \[2016-07-28 11:38:09,641\]\[DEBUG\]\[action.search \] \[hk-node-1\]… --- ## [Setting heap size in docker containers - can't get it to work](https://discuss.elastic.co/t/setting-heap-size-in-docker-containers-cant-get-it-to-work/181500)
**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Replies:** 3\ **Last updated:** [May 17, 2019, 3:01am UTC](https://discuss.elastic.co/t/setting-heap-size-in-docker-containers-cant-get-it-to-work/181500 "2019-05-17T03:01:42Z")
I'm at a loss as to how to configure the heap in docker containers. Nothing seems to work as I'd expect: Straightforward set to 2GB doesn't work: $ docker run -it -e "ES\_JAVA\_OPTS=-Xms2g -Xms2g" docker.elastic.co/elast… --- ## [Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/153470)
**Author:** [@Suat\_Bey](https://discuss.elastic.co/u/Suat_Bey)\ **Replies:** 7\ **Last updated:** [October 25, 2018, 11:04am UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/153470 "2018-10-25T11:04:05Z")
Hi, I have installed ELK just now. And I am trying to get the log file from my ELK machine. Kibana,Elastic and logstash works fine. But , somehow I am not able to get logs using filebeats. "Failed to start Filebeat sen… --- ## [InfluxDB input plugin for logstash](https://discuss.elastic.co/t/influxdb-input-plugin-for-logstash/107670)
**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\ **Replies:** 1\ **Last updated:** [November 22, 2017, 1:47pm UTC](https://discuss.elastic.co/t/influxdb-input-plugin-for-logstash/107670 "2017-11-22T13:47:10Z")
Hi, As there is a output plugin for influxDB in Logstash (https://www.elastic.co/guide/en/logstash/current/plugins-outputs-influxdb.html), but not able to see any input plugin for it. Could you please provide an way or… --- ## [Grok - Parsing a String with Spaces](https://discuss.elastic.co/t/grok-parsing-a-string-with-spaces/193855)
**Author:** [@jakecramer17](https://discuss.elastic.co/u/jakecramer17)\ **Replies:** 5\ **Last updated:** [August 5, 2019, 9:34pm UTC](https://discuss.elastic.co/t/grok-parsing-a-string-with-spaces/193855 "2019-08-05T21:34:21Z")
For a while I've been trying to parse a syslog input in Logstash. I've encountered something like this: 2019-08-05 08:55:15 - jcramer(string with user information) - Successfully updated profile (this is an example mea… --- ## [SSL between elastic nodes is failing](https://discuss.elastic.co/t/ssl-between-elastic-nodes-is-failing/91925)
**Author:** [@ravichoudhary](https://discuss.elastic.co/u/ravichoudhary)\ **Replies:** 3\ **Last updated:** [July 6, 2017, 7:12am UTC](https://discuss.elastic.co/t/ssl-between-elastic-nodes-is-failing/91925 "2017-07-06T07:12:56Z")
We have created a 6 node elastic 5.4 cluster with 3 master and 3 data nodes. We are using our org signed CA certificate to implement the TLS/SSL between nodes but it is giving error as "Caused by: sun.security.validator… --- ## [Convert nanocore to percentage](https://discuss.elastic.co/t/convert-nanocore-to-percentage/116538)
**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\ **Replies:** 5\ **Last updated:** [January 25, 2018, 9:34pm UTC](https://discuss.elastic.co/t/convert-nanocore-to-percentage/116538 "2018-01-25T21:34:39Z")
Is there any way to convert "kubernetes.container.memory.usage" from nanocore to percentage? or any term little bigger than nanocore? \[51%20AM\] Need to convert this from nanocore to percentage? Thanks, Kanthi. --- ## [Create a new index in elasticsearch for each log file by date](https://discuss.elastic.co/t/create-a-new-index-in-elasticsearch-for-each-log-file-by-date/63607)
**Author:** [@adhikz](https://discuss.elastic.co/u/adhikz)\ **Replies:** 7\ **Last updated:** [October 27, 2016, 1:38pm UTC](https://discuss.elastic.co/t/create-a-new-index-in-elasticsearch-for-each-log-file-by-date/63607 "2016-10-27T13:38:32Z")
Hi, I have managed to get my ELK stack up and ruining which filters logs using grok and passes data to elasticsearch and allows me to visualize in Kibana. Currently I have completed the above task by using one log fi… --- ## [Change GC log thresholds](https://discuss.elastic.co/t/change-gc-log-thresholds/155132)
**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\ **Replies:** 5\ **Last updated:** [November 8, 2018, 10:47am UTC](https://discuss.elastic.co/t/change-gc-log-thresholds/155132 "2018-11-08T10:47:05Z")
Greetings I am seeing a lot of lines in my Elasticsearch logs which look like this: \[2018-11-02T08:00:12,056\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[vie01a-clog-pesd-pe05\] \[gc\]\[24\] overhead, spent \[277ms\] collecting in t… --- ## [Any trick to avoid "Beats input: the pipeline is blocked, temporary refusing new connection."?](https://discuss.elastic.co/t/any-trick-to-avoid-beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection/48283)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 8\ **Last updated:** [July 17, 2016, 1:39pm UTC](https://discuss.elastic.co/t/any-trick-to-avoid-beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection/48283 "2016-07-17T13:39:22Z")
Hi, I see a few traces (in logstash.log) like below and wonder if there is a way to configure them away. The input to logstash from filebeat (not on same machines) should not cause congestion 383KBits/s (pure text stri… --- ## [Extracting hour from date field (scripted field)](https://discuss.elastic.co/t/extracting-hour-from-date-field-scripted-field/691)
**Author:** [@whittssg](https://discuss.elastic.co/u/whittssg)\ **Replies:** 5\ **Last updated:** [March 31, 2017, 3:02pm UTC](https://discuss.elastic.co/t/extracting-hour-from-date-field-scripted-field/691 "2017-03-31T15:02:24Z")
Hello, Is there a way to extract the hour from the timestamp field using a scripted field? I saw a blog post stating that this could be done a while back but it looks like it used groovy which is no longer supported.. … --- ## [FIlebeat from a Windows Network Share](https://discuss.elastic.co/t/filebeat-from-a-windows-network-share/36966)
**Author:** [@jamesleech](https://discuss.elastic.co/u/jamesleech)\ **Replies:** 7\ **Last updated:** [October 26, 2016, 11:54am UTC](https://discuss.elastic.co/t/filebeat-from-a-windows-network-share/36966 "2016-10-26T11:54:41Z")
Hi, Today I was trying to get FileBeat up and running. I have logstash, elasticsearch and kibana all setup but i'm new to FileBeat. Previously I had logstash running on an ubuntu VM, smb mounting windows shares, and… --- ## [Cannot figure out how to get data from \_source into Watch Output](https://discuss.elastic.co/t/cannot-figure-out-how-to-get-data-from--source-into-watch-output/86446)
**Author:** [@dodegaard](https://discuss.elastic.co/u/dodegaard)\ **Replies:** 8\ **Last updated:** [May 23, 2017, 6:21am UTC](https://discuss.elastic.co/t/cannot-figure-out-how-to-get-data-from--source-into-watch-output/86446 "2017-05-23T06:21:25Z")
I am having a challenge with obtaining data from my original source of the Alert to go in the output. I have used the extract and ctx.payload.hits.hits.0.\_source syntax that I have found on searching but no go. Can so… --- ## [Add field timestamp with current time](https://discuss.elastic.co/t/add-field-timestamp-with-current-time/59862)
**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\ **Replies:** 4\ **Last updated:** [September 6, 2016, 10:51am UTC](https://discuss.elastic.co/t/add-field-timestamp-with-current-time/59862 "2016-09-06T10:51:05Z")
I want to update timestamp to current time and date. So how do I add field timestamp with current date and time. And how to remove old timestamp. Thank you. [Previous page](https://discuss.elastic.co/top.md?page=308&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=310&per_page=50&period=all)