# Top **URL:** https://discuss.elastic.co/top.md?page=321&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 322 --- ## [Term aggregation size 0](https://discuss.elastic.co/t/term-aggregation-size-0/64278)
**Author:** [@il.bert](https://discuss.elastic.co/u/il.bert)\ **Replies:** 4\ **Last updated:** [October 28, 2016, 2:32pm UTC](https://discuss.elastic.co/t/term-aggregation-size-0/64278 "2016-10-28T14:32:03Z")
Hi, from ES5 now terms aggregation with size 0 are not supported anymore, see here Sadly I was using it A LOT in kibana dashboard what's a good practice now? here it says that a small size may get wrong result thu… --- ## [Convert @timestamp to epoch](https://discuss.elastic.co/t/convert-timestamp-to-epoch/64522)
**Author:** [@rivaanbechan](https://discuss.elastic.co/u/rivaanbechan)\ **Replies:** 4\ **Last updated:** [February 20, 2017, 1:34pm UTC](https://discuss.elastic.co/t/convert-timestamp-to-epoch/64522 "2017-02-20T13:34:41Z")
Hi, I need to convert @timestamp to epoch and add this new field to the event. So far I can only add a new field with the content of "@timestamp". filter { mutate { add\_field =\> \["epochtime", "%{@ti… --- ## [Finding out cause of circuit breaking exception (Data too large)](https://discuss.elastic.co/t/finding-out-cause-of-circuit-breaking-exception-data-too-large/351217)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 4\ **Last updated:** [December 4, 2024, 9:36pm UTC](https://discuss.elastic.co/t/finding-out-cause-of-circuit-breaking-exception-data-too-large/351217 "2024-12-04T21:36:25Z")
Hi, I'm getting the error below occasionally, and I'm trying to find the cause of it so I can try to resolve it. circuit\_breaking\_exception: \[parent\] Data too large, data for \[\\] would be \[32620387928/30.3… --- ## [Although installing logstash, I get "logstash: unrecognized service"](https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 4\ **Last updated:** [March 6, 2017, 1:16pm UTC](https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282 "2017-03-06T13:16:28Z")
Since I will need to install a logstash with out internet I downloaded the rpm (for version 5.2.0) and wrote "rpm -i ..." without running yum install. LogStash was installed, also after writing a test.conf I was able to … --- ## [Not able to Run Logstash .Conf file in ELK 5.4 (Current) Version](https://discuss.elastic.co/t/not-able-to-run-logstash-conf-file-in-elk-5-4-current-version/90476)
**Author:** [@Pandiyan\_M](https://discuss.elastic.co/u/Pandiyan_M)\ **Replies:** 4\ **Last updated:** [June 26, 2017, 7:23am UTC](https://discuss.elastic.co/t/not-able-to-run-logstash-conf-file-in-elk-5-4-current-version/90476 "2017-06-26T07:23:57Z")
Hi, I have prepared logstash.conf under/etc/logstash/conf.d/filelog.conf as below input { file { path =\> "/var/log/file.log" codec =\> json start\_position =\> "beginning" } } filter{ grok { … --- ## [Logstash.conf location in Windows](https://discuss.elastic.co/t/logstash-conf-location-in-windows/86142)
**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\ **Replies:** 5\ **Last updated:** [May 19, 2017, 3:26pm UTC](https://discuss.elastic.co/t/logstash-conf-location-in-windows/86142 "2017-05-19T15:26:55Z")
Hi, Have just started with ELK and following a couple of guides have got it working (I think). I am moving on to the next step of monitoring Exchange traffic and following this guide (it uses an older version) https:/… --- ## [Editing Font Size](https://discuss.elastic.co/t/editing-font-size/132786)
**Author:** [@Dhanashree](https://discuss.elastic.co/u/Dhanashree)\ **Replies:** 4\ **Last updated:** [June 1, 2018, 6:35am UTC](https://discuss.elastic.co/t/editing-font-size/132786 "2018-06-01T06:35:14Z")
How can i change font size of labels in visualization in kibana 6.2.2. --- ## [How to cancel search using the Task Management API](https://discuss.elastic.co/t/how-to-cancel-search-using-the-task-management-api/73842)
**Author:** [@jfwm2](https://discuss.elastic.co/u/jfwm2)\ **Replies:** 4\ **Last updated:** [February 6, 2017, 1:09pm UTC](https://discuss.elastic.co/t/how-to-cancel-search-using-the-task-management-api/73842 "2017-02-06T13:09:29Z")
I would like to cancel a long running search tasks using the Task Management API, but when I try to cancel such a task, I obtain the following error message: { "node\_failures" : \[ { "type" : "failed\_nod… --- ## [Remove part of message string in logstash config](https://discuss.elastic.co/t/remove-part-of-message-string-in-logstash-config/194913)
**Author:** [@rohitg](https://discuss.elastic.co/u/rohitg)\ **Replies:** 5\ **Last updated:** [August 13, 2019, 11:19pm UTC](https://discuss.elastic.co/t/remove-part-of-message-string-in-logstash-config/194913 "2019-08-13T23:19:36Z")
Hi, I have a string like - 123RGT78.XY.ABD.COM I need only 123RGT78 from this string and want to remove everything coming after the first dot (.) How to achieve this. filter { mutate { gsub =\> \["message", "\] } } --- ## [FATAL Error: Optimizations failure](https://discuss.elastic.co/t/fatal-error-optimizations-failure/156777)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 8\ **Last updated:** [November 28, 2018, 3:21pm UTC](https://discuss.elastic.co/t/fatal-error-optimizations-failure/156777 "2018-11-28T15:21:11Z")
I tried to start Kibana 6.5.0, yet got following error: kibana-mr-custom | {"type":"log","@timestamp":"2018-11-15T03:27:35Z","tags":\["info","optimize"\],"pid":1,"message":"Optimizing and caching bundles for stateSessionS… --- ## [Failed to parse field \[host\] of type \[text\] .. can't get text on a START\_OBJECT at 1:974](https://discuss.elastic.co/t/failed-to-parse-field-host-of-type-text-cant-get-text-on-a-start-object-at-1-974/235221)
**Author:** [@mskadu](https://discuss.elastic.co/u/mskadu)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 12:30pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-host-of-type-text-cant-get-text-on-a-start-object-at-1-974/235221 "2020-06-02T12:30:31Z")
My first question on this forum, so apologies for missing to post any detail. If I can also take this opportunity to say a big hello to everyone from a newbie to the world of Elastic Stack! :slight\_smile: I have a CSV … --- ## [Drop the complete message containing specific strings](https://discuss.elastic.co/t/drop-the-complete-message-containing-specific-strings/197799)
**Author:** [@Klaus.Lucas](https://discuss.elastic.co/u/Klaus.Lucas)\ **Replies:** 8\ **Last updated:** [September 5, 2019, 12:40pm UTC](https://discuss.elastic.co/t/drop-the-complete-message-containing-specific-strings/197799 "2019-09-05T12:40:43Z")
Hello, I have the following definition to drop messages from a log file containing strings and text: input { file { path =\> "/opt/mapr/logs/cldb.log" tags =\> "mapr\_cldb" codec =\> plain {charset =\> "ISO-8859-1"} } … --- ## [Convert String to Date field within Kibana](https://discuss.elastic.co/t/convert-string-to-date-field-within-kibana/94518)
**Author:** [@brhawtho](https://discuss.elastic.co/u/brhawtho)\ **Replies:** 2\ **Last updated:** [July 26, 2017, 11:39am UTC](https://discuss.elastic.co/t/convert-string-to-date-field-within-kibana/94518 "2017-07-26T11:39:40Z")
Hey all, I'm looking to add a new date field to sort by within Kibana. Currently, messages are sorted based on the default @timestamp, but I would like to be able to sort on an additional field. The date I am passing i… --- ## [How do we get logstash to process a gzip file as input?](https://discuss.elastic.co/t/how-do-we-get-logstash-to-process-a-gzip-file-as-input/270934)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 1:49pm UTC](https://discuss.elastic.co/t/how-do-we-get-logstash-to-process-a-gzip-file-as-input/270934 "2021-04-22T13:49:47Z")
I have trouble getting logstash to process gzip file . i have installed the gzip codec and referenced it in the code as well . During execution , logstash says " Error: not in gzip format" even the file is gzip . This ex… --- ## [COVID-19 Maps and ELK](https://discuss.elastic.co/t/covid-19-maps-and-elk/224741)
**Author:** [@carlos.cilleruelo](https://discuss.elastic.co/u/carlos.cilleruelo)\ **Replies:** 4\ **Last updated:** [March 30, 2020, 3:55pm UTC](https://discuss.elastic.co/t/covid-19-maps-and-elk/224741 "2020-03-30T15:55:36Z")
Hi there, My partner David Moreno and I have been working in some visualizations with Kibana about COVID-19. A lot of people are using Arcgis because they are giving free licenses and space during the outbreak to some o… --- ## [Proposal for a formal solution to embedding kibana without double authentication](https://discuss.elastic.co/t/proposal-for-a-formal-solution-to-embedding-kibana-without-double-authentication/249215)
**Author:** [@franco-martin](https://discuss.elastic.co/u/franco-martin)\ **Replies:** 1\ **Last updated:** [October 12, 2020, 10:32am UTC](https://discuss.elastic.co/t/proposal-for-a-formal-solution-to-embedding-kibana-without-double-authentication/249215 "2020-10-12T10:32:29Z")
The problem You have a corporate site where you want to embed your kibana dashboard. Your users log in to your corporate website with user and password and when they go to see the dashboard, the iframe requires them to l… --- ## [Calculating indexing rate programmatically](https://discuss.elastic.co/t/calculating-indexing-rate-programmatically/261701)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 2:59am UTC](https://discuss.elastic.co/t/calculating-indexing-rate-programmatically/261701 "2021-02-09T02:59:59Z")
The indices tab in Kibana Monitoring UI shows the indexing rate: Can anyone guide me on how can I get that programatically using API? Based on this thread as well as this, it seems I can do the following: GET /.mon… --- ## [SearchRequestBuilder.setNoFields in ES 5](https://discuss.elastic.co/t/searchrequestbuilder-setnofields-in-es-5/78543)
**Author:** [@elastic\_boston](https://discuss.elastic.co/u/elastic_boston)\ **Replies:** 0\ **Last updated:** [March 14, 2017, 3:01pm UTC](https://discuss.elastic.co/t/searchrequestbuilder-setnofields-in-es-5/78543 "2017-03-14T15:01:04Z")
In ES1, there was an API call as (new SearchRequestBuilder).setNoFields(); which 'Sets no fields to be loaded, resulting in only id and type to be returned per field.' Is there a corresponding method in ES5 please? --- ## [Cosine Similarity ElasticSearch](https://discuss.elastic.co/t/cosine-similarity-elasticsearch/18897)
**Author:** [@RickDast](https://discuss.elastic.co/u/RickDast)\ **Replies:** 4\ **Last updated:** [August 1, 2014, 12:07pm UTC](https://discuss.elastic.co/t/cosine-similarity-elasticsearch/18897 "2014-08-01T12:07:39Z")
Hi, I'm using elasticsearch to index documents and then, with an other document, I score similarity using the "more\_like\_this" query. Just two questions: Does the "more\_like\_this" query use cosine similarity … --- ## [Create Vertical Bar Chart with 2 bars for each day](https://discuss.elastic.co/t/create-vertical-bar-chart-with-2-bars-for-each-day/50714)
**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\ **Replies:** 4\ **Last updated:** [October 25, 2016, 12:22am UTC](https://discuss.elastic.co/t/create-vertical-bar-chart-with-2-bars-for-each-day/50714 "2016-10-25T00:22:29Z")
Hi , I have the following fields in my Index: rb\_commits git\_commits Time I want to create a Vertical Bar Chart that will show me 2 different lines for each day , one for the rb\_commits and one for the git\_commits … --- ## [Login is currently disabled. Administrators should consult the Kibana logs for more details](https://discuss.elastic.co/t/login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/118828)
**Author:** [@Phoeniciak](https://discuss.elastic.co/u/Phoeniciak)\ **Replies:** 7\ **Last updated:** [February 28, 2018, 7:59am UTC](https://discuss.elastic.co/t/login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/118828 "2018-02-28T07:59:34Z")
Hello, after installed x-pack in elasticsearch and kibana, I start both. And I arrived on this error \[Screenshot%20at%202018-02-07%2012%3A28%3A07\]. There is kibana's logs. log \[11:13:58.020\] \[info\]\[status\]\[plugin:kiban… --- ## [ES 5.2 fails to start with setting "index.number\_of\_shards: 2" in elasticsearch.yml](https://discuss.elastic.co/t/es-5-2-fails-to-start-with-setting-index-number-of-shards-2-in-elasticsearch-yml/83654)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 6\ **Last updated:** [May 2, 2017, 1:11pm UTC](https://discuss.elastic.co/t/es-5-2-fails-to-start-with-setting-index-number-of-shards-2-in-elasticsearch-yml/83654 "2017-05-02T13:11:29Z")
HI, I would like to set number of shards into 2 but when i define that in elasticsearch.yml facing error. Can anyone help me to set it on exact file. I want to set number of shards: 2 and number of replica:1 which file… --- ## [Logstash if condition](https://discuss.elastic.co/t/logstash-if-condition/32075)
**Author:** [@schilwan](https://discuss.elastic.co/u/schilwan)\ **Replies:** 5\ **Last updated:** [October 13, 2015, 1:39pm UTC](https://discuss.elastic.co/t/logstash-if-condition/32075 "2015-10-13T13:39:16Z")
I have some data that comes in and using the ipaddress to get hold of geo details using geoip. What I found is my add\_field adds the field below if it finds a region for example "region\_name": "CA", although if one d… --- ## [Kibana UI not working](https://discuss.elastic.co/t/kibana-ui-not-working/76707)
**Author:** [@ab-agni](https://discuss.elastic.co/u/ab-agni)\ **Replies:** 7\ **Last updated:** [February 28, 2017, 4:39am UTC](https://discuss.elastic.co/t/kibana-ui-not-working/76707 "2017-02-28T04:39:45Z")
I am running filebeats, elastic and kibana from same vm on AWS. I have elastic showing updates from filebeats. However Kibana wont show UI. I have opened all access thru the security group on EC2, but it doesnt work, I c… --- ## [Extract File Name from source](https://discuss.elastic.co/t/extract-file-name-from-source/73288)
**Author:** [@sde](https://discuss.elastic.co/u/sde)\ **Replies:** 2\ **Last updated:** [January 31, 2017, 7:27am UTC](https://discuss.elastic.co/t/extract-file-name-from-source/73288 "2017-01-31T07:27:33Z")
Hello, I am trying to read log file using Filebeat from an application server and write to a remote directory using Logstash. I am not able to extract the filename from the source field. Need help to extract the file… --- ## [Structured Streaming - "Failed to find data source: es"](https://discuss.elastic.co/t/structured-streaming-failed-to-find-data-source-es/112144)
**Author:** [@polomarcus](https://discuss.elastic.co/u/polomarcus)\ **Replies:** 3\ **Last updated:** [December 20, 2017, 4:46am UTC](https://discuss.elastic.co/t/structured-streaming-failed-to-find-data-source-es/112144 "2017-12-20T04:46:52Z")
Hi, I am writing a code example for Structured streaming and elasticsearch-hadoop 6.1.0 and I encounter this error Failed to find data source: es. Would someone know why ? .format("es") My complete code example is ava… --- ## [What is adjust\_pure\_negative?](https://discuss.elastic.co/t/what-is-adjust-pure-negative/209187)
**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\ **Replies:** 5\ **Last updated:** [November 25, 2019, 10:41am UTC](https://discuss.elastic.co/t/what-is-adjust-pure-negative/209187 "2019-11-25T10:41:00Z")
Can someone please explain what does "adjust\_pure\_negative" do exactly. I couldn't find any documentation regarding on this. I'm using Elasticsearch 6.8.2 version. --- ## [Status 503 in elasticsearch](https://discuss.elastic.co/t/status-503-in-elasticsearch/59560)
**Author:** [@sridevibaskaran](https://discuss.elastic.co/u/sridevibaskaran)\ **Replies:** 5\ **Last updated:** [September 1, 2016, 4:22pm UTC](https://discuss.elastic.co/t/status-503-in-elasticsearch/59560 "2016-09-01T16:22:10Z")
I get the status 503 error when running the elasticsearch. It was working fine till yesterday, suddenly i am getting this error now. { status: 503, name: "My First Node", cluster\_name: "Mycluster1", version: { n… --- ## [Upgrade to Elastic 8.0.0 (Windows Zip package)](https://discuss.elastic.co/t/upgrade-to-elastic-8-0-0-windows-zip-package/297816)
**Author:** [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\ **Replies:** 6\ **Last updated:** [April 11, 2022, 11:46am UTC](https://discuss.elastic.co/t/upgrade-to-elastic-8-0-0-windows-zip-package/297816 "2022-04-11T11:46:22Z")
Error “… will not overwrite keystore …, because this incurs changing the file owner” Verbose at org.elasticsearch.common.settings.KeyStoreWrapper.save(KeyStoreWrapper.java:608) at org.elasticsearch.common.settings.Key… --- ## [Active Directory logs and mapping to ECS (I am stumped)](https://discuss.elastic.co/t/active-directory-logs-and-mapping-to-ecs-i-am-stumped/203321)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 6\ **Last updated:** [October 14, 2019, 5:18pm UTC](https://discuss.elastic.co/t/active-directory-logs-and-mapping-to-ecs-i-am-stumped/203321 "2019-10-14T17:18:12Z")
Hello guys/girls, Need some words of wisdom on ECS and on Active Directory logs. I am currently logging a Windows server 2012 Domain controller and used to flowing guide (provided by ElasticSearch) - https://www.elast… --- ## [How to POST JSON array to Elastic Search](https://discuss.elastic.co/t/how-to-post-json-array-to-elastic-search/54851)
**Author:** [@vasumathy](https://discuss.elastic.co/u/vasumathy)\ **Replies:** 6\ **Last updated:** [April 4, 2017, 10:02am UTC](https://discuss.elastic.co/t/how-to-post-json-array-to-elastic-search/54851 "2017-04-04T10:02:14Z")
I am trying to do a curl call to post my JSON to Elastic search. My JSON file has the following data. \[ { name1:val1, name2:val2 }, { name1:val3, name2:val4 } \] Since the JSON star… --- ## [How to make query output data format in 1 string](https://discuss.elastic.co/t/how-to-make-query-output-data-format-in-1-string/104159)
**Author:** [@Joyce\_Feng](https://discuss.elastic.co/u/Joyce_Feng)\ **Replies:** 8\ **Last updated:** [October 17, 2017, 4:27pm UTC](https://discuss.elastic.co/t/how-to-make-query-output-data-format-in-1-string/104159 "2017-10-17T16:27:26Z")
In ES2.2, the output source is 1 single line/string: "hits" : \[ { "\_index" : "ise", "\_type" : "contextrepo", "\_id" : "da:d8:54:41:ee:23", "\_score" : 1.0, "\_source":{"AuthenticationMethod":"Wired","AuthorizationPol… --- ## [No space left on device](https://discuss.elastic.co/t/no-space-left-on-device/248400)
**Author:** [@Sarang\_Dharmapurikar](https://discuss.elastic.co/u/Sarang_Dharmapurikar)\ **Replies:** 2\ **Last updated:** [September 12, 2020, 5:01am UTC](https://discuss.elastic.co/t/no-space-left-on-device/248400 "2020-09-12T05:01:54Z")
Hi folks, I'm using elasticsearch docker image but unable to run it on my Mac. It used to be fine. $ docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.… --- ## [Filebeat-\>logstash connection reset by peer](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/72290)
**Author:** [@Bizzelicious](https://discuss.elastic.co/u/Bizzelicious)\ **Replies:** 4\ **Last updated:** [January 23, 2017, 11:23am UTC](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/72290 "2017-01-23T11:23:51Z")
Hi! I have several Filebeat containers (one filebeat container per host) in my infrastructure sending logs to three Logstash containers, located on one instance each. Filebeat is configured to Load balance between thos… --- ## [Aggregate APM metrics to another index](https://discuss.elastic.co/t/aggregate-apm-metrics-to-another-index/288654)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 6:50pm UTC](https://discuss.elastic.co/t/aggregate-apm-metrics-to-another-index/288654 "2021-11-08T18:50:49Z")
I created a SaaS application and I'm using APM to track metrics (both server side Java and client side Angular). APM is an incredible tool and it tracks very well. I track transactions and spans, but spans are useful fo… --- ## [How to use a script field inside Aggregate?](https://discuss.elastic.co/t/how-to-use-a-script-field-inside-aggregate/191190)
**Author:** [@StarLancer](https://discuss.elastic.co/u/StarLancer)\ **Replies:** 2\ **Last updated:** [August 19, 2019, 10:50am UTC](https://discuss.elastic.co/t/how-to-use-a-script-field-inside-aggregate/191190 "2019-08-19T10:50:23Z")
Hi! I want to use script fields inside Aggregate, I wrote this query: GET test/\_search { "size":0, "query": { "bool": { "filter": \[ { "term": { "eventType": 5 } }, { "range": { "createdDate": { "gte": "20… --- ## [Elasticsearch high CPU usage and stalling](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-and-stalling/62786)
**Author:** [@ndarkness](https://discuss.elastic.co/u/ndarkness)\ **Replies:** 1\ **Last updated:** [October 12, 2016, 8:15am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-and-stalling/62786 "2016-10-12T08:15:50Z")
Hello, I am facing an issue with Elasticsearch, I see how it goes till 176% CPU usage in my server, so I was wondering whether this is a bug in this release or in the stack itself. It does not happen inmediatelly bu… --- ## [What is the process to index the .txt and .log files into elasticsearch](https://discuss.elastic.co/t/what-is-the-process-to-index-the-txt-and-log-files-into-elasticsearch/25415)
**Author:** [@Ashok](https://discuss.elastic.co/u/Ashok)\ **Replies:** 4\ **Last updated:** [July 13, 2015, 8:36am UTC](https://discuss.elastic.co/t/what-is-the-process-to-index-the-txt-and-log-files-into-elasticsearch/25415 "2015-07-13T08:36:41Z")
Hi, I am getting following error when i run the command curl -XPOST "localhost:9203/mylog/\_bulk?pretty" --data-binary @D:/LOGS/log123.txt { "error" : "ElasticsearchParseException\[Failed to derive xcontent from org.el… --- ## [Logstash file input not working](https://discuss.elastic.co/t/logstash-file-input-not-working/82843)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 7\ **Last updated:** [April 21, 2017, 10:17am UTC](https://discuss.elastic.co/t/logstash-file-input-not-working/82843 "2017-04-21T10:17:03Z")
Hello, I have a question. Before i used filebeat to send logs to logstash. I decided (to better performance) to delete filebeat. Now i use file input in logstash : file { path =\> "/home/cra\_elk/\*" type =\> … --- ## [Logstast startup issue](https://discuss.elastic.co/t/logstast-startup-issue/41771)
**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\ **Replies:** 3\ **Last updated:** [February 16, 2016, 3:20am UTC](https://discuss.elastic.co/t/logstast-startup-issue/41771 "2016-02-16T03:20:25Z")
We are getting the below exception while starting the logstash agent. Any one can help me please? LoadError: Could not load FFI Provider: (NotImplementedError) FFI not available: null See http://jira.codehaus.org/browse… --- ## [Elasticsearch 6 painless query exception](https://discuss.elastic.co/t/elasticsearch-6-painless-query-exception/135588)
**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\ **Replies:** 7\ **Last updated:** [June 15, 2018, 3:41pm UTC](https://discuss.elastic.co/t/elasticsearch-6-painless-query-exception/135588 "2018-06-15T15:41:57Z")
I am using Elasticsearch 6.2 which uses painless for the inline scripting. One of the fields in my doc has mapping: "gap\_days": {"type": "integer"} And I have a painless script for search and the few lines are: int ga… --- ## [Count documents in a index](https://discuss.elastic.co/t/count-documents-in-a-index/53904)
**Author:** [@Fryder](https://discuss.elastic.co/u/Fryder)\ **Replies:** 1\ **Last updated:** [June 24, 2016, 8:34pm UTC](https://discuss.elastic.co/t/count-documents-in-a-index/53904 "2016-06-24T20:34:17Z")
Hello Guru's, i want to know how many indices are present and how many documents are present in each index.(not including nested documents) also need to know if there is any indexing going on this index(like index re… --- ## [Logstash - how to overwrite document instead of creating new ones](https://discuss.elastic.co/t/logstash-how-to-overwrite-document-instead-of-creating-new-ones/191456)
**Author:** [@mickey\_lubs](https://discuss.elastic.co/u/mickey_lubs)\ **Replies:** 5\ **Last updated:** [July 21, 2019, 10:39pm UTC](https://discuss.elastic.co/t/logstash-how-to-overwrite-document-instead-of-creating-new-ones/191456 "2019-07-21T22:39:50Z")
Hi Guys, I need help. I have got db2 logstash pipeline which runs a query at intervals. The problem is everytime it runs the query, it creates a new document with same data which fills up my index with duplicate data. H… --- ## [Recommendation to use search after instead of scrolling](https://discuss.elastic.co/t/recommendation-to-use-search-after-instead-of-scrolling/268293)
**Author:** [@prelator](https://discuss.elastic.co/u/prelator)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 9:58am UTC](https://discuss.elastic.co/t/recommendation-to-use-search-after-instead-of-scrolling/268293 "2021-03-25T09:58:20Z")
Hello everybody If you want to read an index completely, you can read in the documentation that the search after function should be used from 10,000 documents (instead of scroll). We have now tested this and unfortunat… --- ## [🎉 Elastic Stack 7.16 released](https://discuss.elastic.co/t/elastic-stack-7-16-released/291163)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [December 7, 2021, 9:43pm UTC](https://discuss.elastic.co/t/elastic-stack-7-16-released/291163 "2021-12-07T21:43:43Z")
New in Elastic 7.16 Drive results that matter, faster, with new integrations for third-party tools and services and CI/CD pipeline integrations. Elastic 7.16 streamlines the process of getting any type of data, from any … --- ## [Kibana Read only dashboard](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 6\ **Last updated:** [January 20, 2020, 1:28pm UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792 "2020-01-20T13:28:03Z")
Hi , I am using ELK 7.1.0 community edition . Would like to enable read only dashboard for the users , Is this feature available in community edition ? I am aware that it's available in ELK Enterprise edition . Than… --- ## [Indices not showing on index pattern](https://discuss.elastic.co/t/indices-not-showing-on-index-pattern/224781)
**Author:** [@jdcruz](https://discuss.elastic.co/u/jdcruz)\ **Replies:** 8\ **Last updated:** [March 26, 2020, 7:00am UTC](https://discuss.elastic.co/t/indices-not-showing-on-index-pattern/224781 "2020-03-26T07:00:03Z")
Hi All, Indices not showing on index pattern. !\[Screen Shot 2020-03-24 at 3.31.36 PM|690x295\](upload://60XZcdDzmbgqOdusMfy0TKUjau.png) docker-compose.yml config ################### version: "3" services: elasticse… --- ## [There are no ingest nodes in this cluster, unable to forward request to an ingest node](https://discuss.elastic.co/t/there-are-no-ingest-nodes-in-this-cluster-unable-to-forward-request-to-an-ingest-node/279740)
**Author:** [@nitin194](https://discuss.elastic.co/u/nitin194)\ **Replies:** 6\ **Last updated:** [July 29, 2021, 8:21am UTC](https://discuss.elastic.co/t/there-are-no-ingest-nodes-in-this-cluster-unable-to-forward-request-to-an-ingest-node/279740 "2021-07-29T08:21:26Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [What is the maximum query length in the request body for the rest API of elasticsearch](https://discuss.elastic.co/t/what-is-the-maximum-query-length-in-the-request-body-for-the-rest-api-of-elasticsearch/139083)
**Author:** [@Jingyan](https://discuss.elastic.co/u/Jingyan)\ **Replies:** 1\ **Last updated:** [July 9, 2018, 6:46am UTC](https://discuss.elastic.co/t/what-is-the-maximum-query-length-in-the-request-body-for-the-rest-api-of-elasticsearch/139083 "2018-07-09T06:46:01Z")
I want to use query DSL to query data against elasticsearch, the request like following: GET /index\_test/\_search {"size":5000,"timeout":"500ms","query":{"range":{"@timestamp":{"from":1530768660540,"to":1530769620540,"i… --- ## [Filebeat only goes to one of the Logstash Servers that is behind an ELB](https://discuss.elastic.co/t/filebeat-only-goes-to-one-of-the-logstash-servers-that-is-behind-an-elb/48875)
**Author:** [@gcherneski](https://discuss.elastic.co/u/gcherneski)\ **Replies:** 8\ **Last updated:** [May 9, 2016, 7:15pm UTC](https://discuss.elastic.co/t/filebeat-only-goes-to-one-of-the-logstash-servers-that-is-behind-an-elb/48875 "2016-05-09T19:15:32Z")
I have the following test scenario: Filebeat --\> AWS ELB --\> (2) Logstash servers. Both logstash servers have the exact same configuration. The log output from a single Filebeat server only hit one of the Logstash serve… [Previous page](https://discuss.elastic.co/top.md?page=320&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=322&per_page=50&period=all)