# Top **URL:** https://discuss.elastic.co/top.md?page=310&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 311 --- ## [Reached open files limit](https://discuss.elastic.co/t/reached-open-files-limit/43113)
**Author:** [@abraham](https://discuss.elastic.co/u/abraham)\ **Replies:** 4\ **Last updated:** [July 19, 2016, 3:55pm UTC](https://discuss.elastic.co/t/reached-open-files-limit/43113 "2016-07-19T15:55:58Z")
Hi, I am new to ELK stack. I have been working on it for a while and it was working fine and suddenly the logs stopped loading into kibana dashboard and when i checked the log files in the logstash log file i am getting … --- ## [Counting the number of buckets matching certain criteria](https://discuss.elastic.co/t/counting-the-number-of-buckets-matching-certain-criteria/60708)
**Author:** [@david\_](https://discuss.elastic.co/u/david_)\ **Replies:** 2\ **Last updated:** [September 19, 2016, 11:22am UTC](https://discuss.elastic.co/t/counting-the-number-of-buckets-matching-certain-criteria/60708 "2016-09-19T11:22:41Z")
Hi, I am searching for a way to count the number of buckets matching a certain criterion. Contrary to https://discuss.elastic.co/t/aggregegation-buckets-count/21270 the cardinality aggregation does not work in my case. … --- ## [Unable to build Logstash 2.2.0 on ARM 64](https://discuss.elastic.co/t/unable-to-build-logstash-2-2-0-on-arm-64/42651)
**Author:** [@nbhoyar](https://discuss.elastic.co/u/nbhoyar)\ **Replies:** 2\ **Last updated:** [March 3, 2016, 11:25pm UTC](https://discuss.elastic.co/t/unable-to-build-logstash-2-2-0-on-arm-64/42651 "2016-03-03T23:25:49Z")
I tried running Logstash 2.2.0 on ARM architecture (aarch64) system (w/ Fedora 22) but I am getting the following error: \[root@arm-01 logstash-2.2.0\]# bin/logstash agent -f logstash\_json.conf io/console not supported;… --- ## [Mapper Parsing Exception for field with date data that I want to index as a string](https://discuss.elastic.co/t/mapper-parsing-exception-for-field-with-date-data-that-i-want-to-index-as-a-string/73033)
**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\ **Replies:** 5\ **Last updated:** [January 27, 2017, 7:25pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-for-field-with-date-data-that-i-want-to-index-as-a-string/73033 "2017-01-27T19:25:43Z")
In some of my logs, I get a message body that is just a large json object. In some of those json objects, I have a field coming in that has data in the format of YYYY/MM/DD E.g. "param\_TRANSACTION\_STRINGTEST"=\>"2017/0… --- ## [Starting elasticsearch, PolicyKit authentication error](https://discuss.elastic.co/t/starting-elasticsearch-policykit-authentication-error/65060)
**Author:** [@skeer](https://discuss.elastic.co/u/skeer)\ **Replies:** 7\ **Last updated:** [November 18, 2016, 2:41pm UTC](https://discuss.elastic.co/t/starting-elasticsearch-policykit-authentication-error/65060 "2016-11-18T14:41:25Z")
I've had a few posts here already, but to cover the bases I'm trying to setup teh ELK stack on a fresh CentOS 7 minimal VM. I've been following the official guide: https://www.elastic.co/guide/en/elastic-stack/current/i… --- ## [Elastic-agent: Error dialing x509: certificate signed by unknown authority](https://discuss.elastic.co/t/elastic-agent-error-dialing-x509-certificate-signed-by-unknown-authority/315675)
**Author:** [@enigmatic](https://discuss.elastic.co/u/enigmatic)\ **Replies:** 5\ **Last updated:** [October 14, 2022, 12:41pm UTC](https://discuss.elastic.co/t/elastic-agent-error-dialing-x509-certificate-signed-by-unknown-authority/315675 "2022-10-14T12:41:41Z")
Hi All, Hope you can help wit the following. I installed Elasticsearch and Kibana version 8.4. both are up and running. I'm trying to install Fleet to manage the elastic-agents, how ever i hit a road block. the elast… --- ## [What is the default password for elasticsearch 8 alpha2](https://discuss.elastic.co/t/what-is-the-default-password-for-elasticsearch-8-alpha2/286119)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 2\ **Last updated:** [October 7, 2021, 11:40am UTC](https://discuss.elastic.co/t/what-is-the-default-password-for-elasticsearch-8-alpha2/286119 "2021-10-07T11:40:03Z")
Hi, I am trying Elasticsearch 8 alpha release 2 version in docker container. can anyone provide me the default password/doc on this. Thanks found myself.. posting with variable like docker run --rm -d -e ELASTIC\_P… --- ## [Elastic-agent stopped working after adding new integration](https://discuss.elastic.co/t/elastic-agent-stopped-working-after-adding-new-integration/275670)
**Author:** [@bravo](https://discuss.elastic.co/u/bravo)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 11:49am UTC](https://discuss.elastic.co/t/elastic-agent-stopped-working-after-adding-new-integration/275670 "2021-06-14T11:49:40Z")
First of all thank you very much for providing ES Fleet, its so helpful for our small team to manage and monitor nodes easily. We have 20 nodes with elastic-agent and all are working fine except one. In NODE1 elastic-ag… --- ## [Rename index name](https://discuss.elastic.co/t/rename-index-name/94303)
**Author:** [@natsudragoneye](https://discuss.elastic.co/u/natsudragoneye)\ **Replies:** 3\ **Last updated:** [July 25, 2017, 2:03pm UTC](https://discuss.elastic.co/t/rename-index-name/94303 "2017-07-25T14:03:33Z")
I rebuilding a index. When I finish the rebuilding, I need to rename it. How can i do that using NEST v5.4? Thanks in advance! EDIT! You can check the solution here: SOLUTION --- ## [Elastic Vs Splunk - Query Feature comparison - Join, Pipe(|), Table, dedup, eval, chart, rex](https://discuss.elastic.co/t/elastic-vs-splunk-query-feature-comparison-join-pipe-table-dedup-eval-chart-rex/23552)
**Author:** [@mgarg](https://discuss.elastic.co/u/mgarg)\ **Replies:** 2\ **Last updated:** [November 17, 2015, 11:19pm UTC](https://discuss.elastic.co/t/elastic-vs-splunk-query-feature-comparison-join-pipe-table-dedup-eval-chart-rex/23552 "2015-11-17T23:19:04Z")
I have recently switched from Splunk to Elastic in a pursuit to explore open source platform for performing descriptive analytics on my log data. Until now, based on a few elastic query tutorials, I found that the E… --- ## [Rule exception in SIEM Kibana 7.12](https://discuss.elastic.co/t/rule-exception-in-siem-kibana-7-12/272072)
**Author:** [@dsgamr](https://discuss.elastic.co/u/dsgamr)\ **Replies:** 1\ **Last updated:** [May 4, 2021, 11:38pm UTC](https://discuss.elastic.co/t/rule-exception-in-siem-kibana-7-12/272072 "2021-05-04T23:38:22Z")
Hi, One of build in rules - Whoami Process Activity - generates a lot of false positives in my environment so I tried to add exception to the rule. Problem is that to do it properly one has to use wildcards which doesn… --- ## [Elasticsearch dead but pid file exists](https://discuss.elastic.co/t/elasticsearch-dead-but-pid-file-exists/19344)
**Author:** [@shriyansh\_jain](https://discuss.elastic.co/u/shriyansh_jain)\ **Replies:** 7\ **Last updated:** [August 19, 2014, 6:31pm UTC](https://discuss.elastic.co/t/elasticsearch-dead-but-pid-file-exists/19344 "2014-08-19T18:31:27Z")
Hi, While trying to check the elasticsearch status, I am getting the message elasticsearch dead but pid file exists. How can I restart my services.? Thank you, Shriyansh -- You received this message bec… --- ## [Removing elements from an array in a document](https://discuss.elastic.co/t/removing-elements-from-an-array-in-a-document/10156)
**Author:** [@Jayant\_Kerai](https://discuss.elastic.co/u/Jayant_Kerai)\ **Replies:** 2\ **Last updated:** [December 22, 2012, 12:25pm UTC](https://discuss.elastic.co/t/removing-elements-from-an-array-in-a-document/10156 "2012-12-22T12:25:32Z")
Hi, I'm very new to ES and am evaluating it for my search needs http://www.elasticsearch.org/guide/reference/api/update.html shows how to add elements to an array in an existing indexed document. curl -XPOST 'lo… --- ## ["Unable to connect to Elasticsearch. Error: \[resource\_already\_exists\_exception\]" after upgrade ELK](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-resource-already-exists-exception-after-upgrade-elk/249998)
**Author:** [@bognad](https://discuss.elastic.co/u/bognad)\ **Replies:** 3\ **Last updated:** [September 28, 2020, 8:50am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-resource-already-exists-exception-after-upgrade-elk/249998 "2020-09-28T08:50:18Z")
Hi! I am upgrade ELK from 7.2 to 7.9.1. Kibana is unable to connect to ES After upgrade kibana had two indexes: curl https://localhost:9200/\_cat/indices/\*?v&s=index health status index … --- ## [What is the equivalent to a lookup table in Kibana?](https://discuss.elastic.co/t/what-is-the-equivalent-to-a-lookup-table-in-kibana/109151)
**Author:** [@thelonestargeek](https://discuss.elastic.co/u/thelonestargeek)\ **Replies:** 5\ **Last updated:** [November 28, 2017, 11:28pm UTC](https://discuss.elastic.co/t/what-is-the-equivalent-to-a-lookup-table-in-kibana/109151 "2017-11-28T23:28:33Z")
I have a lot of experience with Splunk and I am trying to understand the equivalent concepts in ELK. Is there a lookup table option/ concept (similar to: http://docs.splunk.com/Documentation/Splunk/7.0.0/Knowledge/Addfie… --- ## [Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id/296138)
**Author:** [@jeromeat](https://discuss.elastic.co/u/jeromeat)\ **Replies:** 5\ **Last updated:** [February 3, 2022, 3:07pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id/296138 "2022-02-03T15:07:51Z")
I'm currently trying to use Input http\_poller to make an API call to a site to pull some data. However I keep getting the following error: Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id… --- ## [Filebeat windows service not starting](https://discuss.elastic.co/t/filebeat-windows-service-not-starting/152475)
**Author:** [@sthambir](https://discuss.elastic.co/u/sthambir)\ **Replies:** 8\ **Last updated:** [October 24, 2018, 10:53am UTC](https://discuss.elastic.co/t/filebeat-windows-service-not-starting/152475 "2018-10-24T10:53:43Z")
Hi, I can run filebeat on foreground and send logs to logstash (both version 6.3). However, it wouldn't start as a windows service. Logstash successfully runs as a windows service. If I use 'Start-Service' command for … --- ## [Requests per second](https://discuss.elastic.co/t/requests-per-second/20971)
**Author:** [@Ernesto\_Reig](https://discuss.elastic.co/u/Ernesto_Reig)\ **Replies:** 3\ **Last updated:** [November 27, 2014, 1:14pm UTC](https://discuss.elastic.co/t/requests-per-second/20971 "2014-11-27T13:14:33Z")
Hello, I don´t really know how to measure the number of requests per second made to Elasticsearch cluster. I would like to know specifically the number of search requests per second. If I am not wrong, the stat "qu… --- ## [Https endpoint for LB healthcheck](https://discuss.elastic.co/t/https-endpoint-for-lb-healthcheck/157641)
**Author:** [@ronchav](https://discuss.elastic.co/u/ronchav)\ **Replies:** 5\ **Last updated:** [December 5, 2018, 4:00am UTC](https://discuss.elastic.co/t/https-endpoint-for-lb-healthcheck/157641 "2018-12-05T04:00:01Z")
Hi, What is the recommended api endpoint in Kibana for my LB to conduc healthcheck at defined interval via https connection? --- ## [Elasticsearch: Replicating Google's Double Quote Exact Match Query](https://discuss.elastic.co/t/elasticsearch-replicating-googles-double-quote-exact-match-query/97027)
**Author:** [@net](https://discuss.elastic.co/u/net)\ **Replies:** 6\ **Last updated:** [August 15, 2017, 1:37pm UTC](https://discuss.elastic.co/t/elasticsearch-replicating-googles-double-quote-exact-match-query/97027 "2017-08-15T13:37:46Z")
In google when you put double quotes around a phrase it does an exact match. I see in elasticsearch how I can do an exact match on a given field. But I don’t see how I can do an exact match over all the fields. How can… --- ## [Slow first request on an index after a short amount of time](https://discuss.elastic.co/t/slow-first-request-on-an-index-after-a-short-amount-of-time/219292)
**Author:** [@Spencer\_Uresk](https://discuss.elastic.co/u/Spencer_Uresk)\ **Replies:** 5\ **Last updated:** [February 14, 2020, 7:28pm UTC](https://discuss.elastic.co/t/slow-first-request-on-an-index-after-a-short-amount-of-time/219292 "2020-02-14T19:28:48Z")
We are having a really weird performance issue with our ES cluster, and I've run out of things to check so I thought I'd see if anyone has run into anything similar or has ideas for further debugging. Our symptom is thi… --- ## [Difference between timestamp](https://discuss.elastic.co/t/difference-between-timestamp/115265)
**Author:** [@Robert\_Naccache](https://discuss.elastic.co/u/Robert_Naccache)\ **Replies:** 2\ **Last updated:** [January 15, 2018, 11:58am UTC](https://discuss.elastic.co/t/difference-between-timestamp/115265 "2018-01-15T11:58:34Z")
Hi, I've been struggling with this for a couple of days. I'm importing from elasticsearch to elasticsearch. In Elasticsearch i have data in the from of: jobid: 1000 buisnessevent: getjob alerteventtime: 2018-01-11T… --- ## [Getting all the distinct values of a field](https://discuss.elastic.co/t/getting-all-the-distinct-values-of-a-field/6437)
**Author:** [@ElasticUsers](https://discuss.elastic.co/u/ElasticUsers)\ **Replies:** 3\ **Last updated:** [May 4, 2017, 8:44am UTC](https://discuss.elastic.co/t/getting-all-the-distinct-values-of-a-field/6437 "2017-05-04T08:44:20Z")
Hi Team, One of our use cases is to get all the distinct values of a particular field. For e. g. if we are querying against Oracle database we can execute below query : select distinct column\_name from table\_na… --- ## [Query to group by multiple fields](https://discuss.elastic.co/t/query-to-group-by-multiple-fields/155986)
**Author:** [@balumurari1](https://discuss.elastic.co/u/balumurari1)\ **Replies:** 3\ **Last updated:** [November 16, 2018, 11:47am UTC](https://discuss.elastic.co/t/query-to-group-by-multiple-fields/155986 "2018-11-16T11:47:57Z")
Hello, Lets us assume that i have customers information with city , state. Now i want to Group Customer By State, by City. can anyone help me to form query with the multiple fields? if it is only for state, the query… --- ## [Cannot find module 'babel-register'](https://discuss.elastic.co/t/cannot-find-module-babel-register/137016)
**Author:** [@goochjs](https://discuss.elastic.co/u/goochjs)\ **Replies:** 7\ **Last updated:** [June 26, 2018, 8:03am UTC](https://discuss.elastic.co/t/cannot-find-module-babel-register/137016 "2018-06-26T08:03:52Z")
Hi, I'm trying to install Kibana 6.3.0 on a Windows Server 2012 R2 VM. I've successfully had it working on my Windows 7 laptop but the same (easy) steps get the following error when I run kibana.bat: PS D:\\elk\\kibana-… --- ## [Thread pool queue size is not updating in elasticsearch 5.x](https://discuss.elastic.co/t/thread-pool-queue-size-is-not-updating-in-elasticsearch-5-x/92741)
**Author:** [@murman](https://discuss.elastic.co/u/murman)\ **Replies:** 1\ **Last updated:** [July 14, 2017, 6:43am UTC](https://discuss.elastic.co/t/thread-pool-queue-size-is-not-updating-in-elasticsearch-5-x/92741 "2017-07-14T06:43:43Z")
Hi, I'm setting up elasticsearch 5.4.2 version, i'm trying to configure thread pool queue size in elasticsearch.yml file. I'm using below properties in elasticsearch.yml file: thread\_pool.bulk.queue\_size: 5000 Afte… --- ## [Parsing and applying regex in kibana](https://discuss.elastic.co/t/parsing-and-applying-regex-in-kibana/60368)
**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\ **Replies:** 4\ **Last updated:** [October 4, 2016, 1:31pm UTC](https://discuss.elastic.co/t/parsing-and-applying-regex-in-kibana/60368 "2016-10-04T13:31:00Z")
Hi, I want to extract details from the message field of linux data in kibana and not using the filter plugin of logstash. How can we do this? --- ## [Error decoding JSON: invalid character '.' looking for beginning of value](https://discuss.elastic.co/t/error-decoding-json-invalid-character-looking-for-beginning-of-value/148172)
**Author:** [@jlavallet](https://discuss.elastic.co/u/jlavallet)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 1:50pm UTC](https://discuss.elastic.co/t/error-decoding-json-invalid-character-looking-for-beginning-of-value/148172 "2018-09-14T13:50:36Z")
My logs include JSON objects containing decimal type numeric values. Those values begin with a "." and not "0." as it appears the Filebeat JSON parser is expecting. The JSON parser complains about this by reporting the f… --- ## [Http output for filebeat?](https://discuss.elastic.co/t/http-output-for-filebeat/62137)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 7\ **Last updated:** [October 19, 2016, 11:09am UTC](https://discuss.elastic.co/t/http-output-for-filebeat/62137 "2016-10-19T11:09:01Z")
Hello, We have some need where we need to send logs from FB to datapower. We cant send filebeat output directly to ES or logstash. Our LS and ES components are inside secure zone. Some clients are outside secure zone, wh… --- ## [Unable to start Logstash: Encountered a retryable error. Will Retry with exponential backoff](https://discuss.elastic.co/t/unable-to-start-logstash-encountered-a-retryable-error-will-retry-with-exponential-backoff/130347)
**Author:** [@betty](https://discuss.elastic.co/u/betty)\ **Replies:** 0\ **Last updated:** [May 3, 2018, 1:56am UTC](https://discuss.elastic.co/t/unable-to-start-logstash-encountered-a-retryable-error-will-retry-with-exponential-backoff/130347 "2018-05-03T01:56:46Z")
Hi, Logstash version: 6.1.2 ES version: 6.1.2 I am using Logstash to transferring data to Elasticsearch. After starting logstash it just keeps giving logs like below: \[2018-05-02T18:48:56,892\]\[ERROR\]\[logstash.output… --- ## [Dec 8th, 2017: \[CN\]\[Elasticsearch\] 使用 reindex API 迁移数据到 6.x 集群](https://discuss.elastic.co/t/dec-8th-2017-cn-elasticsearch-reindex-api-6-x/110257)
**Author:** [@medcl.net](https://discuss.elastic.co/u/medcl.net)\ **Replies:** 0\ **Last updated:** [December 7, 2017, 1:00pm UTC](https://discuss.elastic.co/t/dec-8th-2017-cn-elasticsearch-reindex-api-6-x/110257 "2017-12-07T13:00:15Z")
Elastic Stack 6.0 已经正式发布了，包含了很多激动人心的特性，相信有一些特性也是你非常感兴趣的，所以要不要考虑升级到最新的 6.0 版本呢？ 关于版本升级，有很多种办法可以做到，这次 Advent 活动的第一篇，Mark Walkom 已有提及。原地升级固然速度很快，但是索引格式还是旧格式，数据结构依然还是旧的，无法应用新的特性，故无法发挥新版本的威力， 迁移任务 所以今天我就来说说如果使用 reindex API … --- ## [Grok Pattern for Apache Access logs (facing \_grokparsefailure error)](https://discuss.elastic.co/t/grok-pattern-for-apache-access-logs-facing--grokparsefailure-error/100796)
**Author:** [@pkshara](https://discuss.elastic.co/u/pkshara)\ **Replies:** 4\ **Last updated:** [September 18, 2017, 4:35am UTC](https://discuss.elastic.co/t/grok-pattern-for-apache-access-logs-facing--grokparsefailure-error/100796 "2017-09-18T04:35:16Z")
Code input { file { path =\> "/data/Ops\_analytics\_EBS/oracle\_ebs\_eu/j201s648/access\_log.1476316800" start\_position =\> "beginning" type =\> "apache\_access" } } filter { grok { match =\> {'message'=\>'%{IP:clientip… --- ## [Transport Client VS REST Client](https://discuss.elastic.co/t/transport-client-vs-rest-client/13936)
**Author:** [@paul1](https://discuss.elastic.co/u/paul1)\ **Replies:** 3\ **Last updated:** [October 14, 2013, 7:12am UTC](https://discuss.elastic.co/t/transport-client-vs-rest-client/13936 "2013-10-14T07:12:09Z")
Hi , I have started using elastic search , i have very basic question . After Installing and running elastic search the server can be accessed in two ways. REST client i.e. using curl which listens at 9200 Tran… --- ## ["\[ignore\_throttled\] parameter is deprecated because frozen indices have been deprecated](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated-because-frozen-indices-have-been-deprecated/299144)
**Author:** [@Archana\_Punia](https://discuss.elastic.co/u/Archana_Punia)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 7:53am UTC](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated-because-frozen-indices-have-been-deprecated/299144 "2022-03-10T07:53:55Z")
Continuing the discussion from Ignore\_throttled parameter is deprecated: Hi, I upgrade my ES and Kibana version to 7.16.3 from 7.15.0 and post upgrading, this warning is showing on my kibana continuously. Can you let m… --- ## [Elastic search using more RAM](https://discuss.elastic.co/t/elastic-search-using-more-ram/138144)
**Author:** [@arvindan\_ta](https://discuss.elastic.co/u/arvindan_ta)\ **Replies:** 7\ **Last updated:** [July 2, 2018, 4:10pm UTC](https://discuss.elastic.co/t/elastic-search-using-more-ram/138144 "2018-07-02T16:10:37Z")
Hi , I am using a 26 GB Ram machine . And I have allocated 8gb as heap size . I have some data in mongodb and am doing a bulk api request to put the data from mongo to elastic search . When I do this operation , I see… --- ## [\[Solved\] Illegal State - START\_ARRAY](https://discuss.elastic.co/t/solved-illegal-state-start-array/69420)
**Author:** [@Lee\_Gee](https://discuss.elastic.co/u/Lee_Gee)\ **Replies:** 3\ **Last updated:** [December 19, 2016, 11:11am UTC](https://discuss.elastic.co/t/solved-illegal-state-start-array/69420 "2016-12-19T11:11:56Z")
Running the latest ES and Node.js client, the below query produces an error "illegal\_state\_exception", "Can't get text on a START\_ARRAY at 1:80", although the query seems to conform to the docs: https://www.elastic.co/… --- ## [Logstash jdbc input for multi fields and nested objects](https://discuss.elastic.co/t/logstash-jdbc-input-for-multi-fields-and-nested-objects/27020)
**Author:** [@vijay116](https://discuss.elastic.co/u/vijay116)\ **Replies:** 1\ **Last updated:** [August 14, 2015, 8:04pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-for-multi-fields-and-nested-objects/27020 "2015-08-14T20:04:24Z")
Does the plugin support both cases? I had issue with both. For examples with the mapping { "consumer": { "properties": { "name": { "type": "string", "fields": { "raw": { "type": "string", … --- ## [Parse Json data wrapped in "message" into event fields](https://discuss.elastic.co/t/parse-json-data-wrapped-in-message-into-event-fields/40072)
**Author:** [@sara](https://discuss.elastic.co/u/sara)\ **Replies:** 5\ **Last updated:** [February 3, 2016, 7:03am UTC](https://discuss.elastic.co/t/parse-json-data-wrapped-in-message-into-event-fields/40072 "2016-02-03T07:03:01Z")
the issue is that the log in json format, sent from filebeat to logstash, the json data got wrapped in the message field and cannot be parsed into event fields. I have read a lot of posts on the similar issue over this w… --- ## [Terms Aggregation performance high cardinality](https://discuss.elastic.co/t/terms-aggregation-performance-high-cardinality/26639)
**Author:** [@Roman\_Margolis](https://discuss.elastic.co/u/Roman_Margolis)\ **Replies:** 7\ **Last updated:** [October 23, 2015, 5:43pm UTC](https://discuss.elastic.co/t/terms-aggregation-performance-high-cardinality/26639 "2015-10-23T17:43:18Z")
I'm hoping for some clarifications for query performance in elastic 1.5.2 I observed recently. I have a string field with high cardinality (approx 200,000,000). I observed that if I use a simple terms aggregation with … --- ## [Monitoring logstash with port 9600](https://discuss.elastic.co/t/monitoring-logstash-with-port-9600/133807)
**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\ **Replies:** 4\ **Last updated:** [May 31, 2018, 1:58pm UTC](https://discuss.elastic.co/t/monitoring-logstash-with-port-9600/133807 "2018-05-31T13:58:56Z")
Hi, I am running logstash 5.6.4 and I have set http.port: 9600-9700 in my logstash.yml configuration file. On the logstash server, all is fine $ telnet 127.0.0.1 9600 Trying 127.0.0.1... Connected to 127.0.0.1. … --- ## [\[ERROR\]OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/error-openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/201092)
**Author:** [@valentine-dev](https://discuss.elastic.co/u/valentine-dev)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 7:21am UTC](https://discuss.elastic.co/t/error-openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/201092 "2019-09-26T07:21:18Z")
I just set up a GKE ES cluster with 3 master eligible nodes, 3 data nodes, and 2 coordinator nodes. I haven't created any index yet. Following is the logging from Stackdriver: \[2019-09-24 23:01:24.158 PDT\] OpenJDK 64… --- ## [Hardware requirement for elasticsearch](https://discuss.elastic.co/t/hardware-requirement-for-elasticsearch/161280)
**Author:** [@Nusrath](https://discuss.elastic.co/u/Nusrath)\ **Replies:** 5\ **Last updated:** [December 19, 2018, 12:42pm UTC](https://discuss.elastic.co/t/hardware-requirement-for-elasticsearch/161280 "2018-12-19T12:42:31Z")
I'm trying to setup elasticsearch cluster. I will get maximum of 20TB of data. So what will be hardware required to set up ElasticSearch 6.x and kibana 6.x Which is better Elastic search category –Open source/ Gold/Pl… --- ## [Default Password Not Working](https://discuss.elastic.co/t/default-password-not-working/87317)
**Author:** [@bjmaynard01](https://discuss.elastic.co/u/bjmaynard01)\ **Replies:** 1\ **Last updated:** [May 29, 2017, 2:39am UTC](https://discuss.elastic.co/t/default-password-not-working/87317 "2017-05-29T02:39:36Z")
Hi all, I am running into an issue on a newly installed cluster running elasticsearch 5.4. After installing x-pack on a node and restarting the service, I am attempting to change the password, but the default that is pre… --- ## [Kibana Timezone settings](https://discuss.elastic.co/t/kibana-timezone-settings/71793)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 4\ **Last updated:** [January 19, 2017, 1:21am UTC](https://discuss.elastic.co/t/kibana-timezone-settings/71793 "2017-01-19T01:21:43Z")
I am using logstash 5.1 streaming mysql data to elasticsearch 5.1, kibana 5 and this is my logstash code: input { jdbc { jdbc\_driver\_library =\> "./mysql-connector-java-5.1.36.jar" jdbc\_driver\_class =\> "com.m… --- ## [Field Mapping using Wildcards - Newbie Question](https://discuss.elastic.co/t/field-mapping-using-wildcards-newbie-question/76300)
**Author:** [@lukes](https://discuss.elastic.co/u/lukes)\ **Replies:** 5\ **Last updated:** [February 24, 2017, 5:57pm UTC](https://discuss.elastic.co/t/field-mapping-using-wildcards-newbie-question/76300 "2017-02-24T17:57:43Z")
Hi Experts, Is it possible to have wildcard type fields mapping ? What i mean is, like in SOLR we can define dynamicFields mapping saying map \*\_txt\_en to text\_en (convention i am trying to use is "fieldName\_type\_langu… --- ## [Exiting: Index management requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/276274)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 5\ **Last updated:** [July 19, 2021, 7:57am UTC](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/276274 "2021-07-19T07:57:08Z")
While running filebeat setup -e I'm getting this error. Can anyone help me? @Marius\_Iversen 2021-06-17T01:04:54.187-0700 INFO instance/beat.go:665 Home path: \[/usr/share/filebeat\] Config path: \[/etc/filebeat\] Data path… --- ## [Kibana: Unable to connect to Elasticsearch at http://localhost:9200, elasticsearch](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch-at-http-localhost-9200-elasticsearch/105357)
**Author:** [@scarletin\_s](https://discuss.elastic.co/u/scarletin_s)\ **Replies:** 6\ **Last updated:** [October 29, 2017, 7:53pm UTC](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch-at-http-localhost-9200-elasticsearch/105357 "2017-10-29T19:53:12Z")
hi , im kinda new with elasticsearch, i used to work with Version 5.5 but as i upgraded elastic and kibana to 5.6.3 encountered this issue, my elasticsearch is up and working but kibana reports this error \[Screenshot f… --- ## [List Unassigned shards by index by node](https://discuss.elastic.co/t/list-unassigned-shards-by-index-by-node/12560)
**Author:** [@Amit](https://discuss.elastic.co/u/Amit)\ **Replies:** 3\ **Last updated:** [October 13, 2014, 11:18am UTC](https://discuss.elastic.co/t/list-unassigned-shards-by-index-by-node/12560 "2014-10-13T11:18:34Z")
Hi All, I have looked through to find out any api available to list down the unassigned shards. Currently the cluster health api only list the number of unassigned shards. { "cluster\_name" : "elasticsearch", … --- ## [RestHighLevelClient SocketTimeoutException](https://discuss.elastic.co/t/resthighlevelclient-sockettimeoutexception/202443)
**Author:** [@zharenkov](https://discuss.elastic.co/u/zharenkov)\ **Replies:** 0\ **Last updated:** [October 6, 2019, 10:27am UTC](https://discuss.elastic.co/t/resthighlevelclient-sockettimeoutexception/202443 "2019-10-06T10:27:10Z")
I've got ES cluster on Azure, and communicate with it from Spring Boot app using elasticsearch RestHighLevelClient. The bean in spring is the follow @Bean public RestHighLevelClient elasticsearchRestClient() { Cred… --- ## [Remote access through SSH](https://discuss.elastic.co/t/remote-access-through-ssh/18991)
**Author:** [@Chia\_Eng\_Chang](https://discuss.elastic.co/u/Chia_Eng_Chang)\ **Replies:** 8\ **Last updated:** [August 1, 2014, 9:16am UTC](https://discuss.elastic.co/t/remote-access-through-ssh/18991 "2014-08-01T09:16:20Z")
About the HTTP API, I wonder if I want to remote access a cluster on SSH server, what should I include in my http rest command: example as mapping: curl -XGET ' http://localhost:9200/ index /\_mapping/ type… [Previous page](https://discuss.elastic.co/top.md?page=309&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=311&per_page=50&period=all)