# Top

**URL:** https://discuss.elastic.co/top.md?page=349&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 350

---

## [Hibernate Search integrating with Elasticsearch](https://discuss.elastic.co/t/hibernate-search-integrating-with-elasticsearch/44721)

<div class="topic-metadata">

**Author:** [@Sanne](https://discuss.elastic.co/u/Sanne)\
**Replies:** 0\
**Last updated:** [March 17, 2016, 2:55pm UTC](https://discuss.elastic.co/t/hibernate-search-integrating-with-elasticsearch/44721 "2016-03-17T14:55:49Z")

</div>

Hello all, the Hibernate Search team has many years of experience integrating Hibernate ORM (JPA) applications with Apache Lucene, and we're now working to make this popular engine to integrate with Elasticsearch, as a…

---

## [Bootstrap checks failed due to memory is not locked](https://discuss.elastic.co/t/bootstrap-checks-failed-due-to-memory-is-not-locked/89178)

<div class="topic-metadata">

**Author:** [@chenmu](https://discuss.elastic.co/u/chenmu)\
**Replies:** 4\
**Last updated:** [July 12, 2017, 8:52am UTC](https://discuss.elastic.co/t/bootstrap-checks-failed-due-to-memory-is-not-locked/89178 "2017-07-12T08:52:41Z")

</div>

I’m running elasticsearch image (buiding on centOS 7) on k8s and have the "bootstrap.memory\_lock: true" in elasticsearch.yml file. I added the following lines in /etc/security/limits.conf file esuser soft …

---

## [Get data for time range window](https://discuss.elastic.co/t/get-data-for-time-range-window/68904)

<div class="topic-metadata">

**Author:** [@Martin\_Duris](https://discuss.elastic.co/u/Martin_Duris)\
**Replies:** 4\
**Last updated:** [December 14, 2016, 8:44am UTC](https://discuss.elastic.co/t/get-data-for-time-range-window/68904 "2016-12-14T08:44:05Z")

</div>

Hi, lets have simple login data (@timestamp, id of user). This data we have for one month. Can i create table / bar graph where will be count of logins (per day) for all month BUT only during 14:00 - 18:00. something…

---

## [Logstash.confに引数渡してlogstash起動](https://discuss.elastic.co/t/logstash-conf-logstash/41152)

<div class="topic-metadata">

**Author:** [@aurantiacus](https://discuss.elastic.co/u/aurantiacus)\
**Replies:** 6\
**Last updated:** [March 3, 2016, 7:34am UTC](https://discuss.elastic.co/t/logstash-conf-logstash/41152 "2016-03-03T07:34:36Z")

</div>

皆さん、こんにちは。 タイトルの通りlogstashのconfigファイルに引数を渡して filterプラグインを制御、実行したいと考えています。 コマンドライン又は別の方法でconfファイルへ引数を渡すことは可能なのでしょうか？ 可能であれば引数の渡し方とconfファイル内の記述例をご提示いただければ嬉しく思います。 例ですが、現在は下記のようにconfを指定し、logstashを起動しています。 bin\\logstash…

---

## [CRIT Exiting: Error importing Kibana dashboards: fail to import the dashboards in Kibana](https://discuss.elastic.co/t/crit-exiting-error-importing-kibana-dashboards-fail-to-import-the-dashboards-in-kibana/108956)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [November 24, 2017, 3:10pm UTC](https://discuss.elastic.co/t/crit-exiting-error-importing-kibana-dashboards-fail-to-import-the-dashboards-in-kibana/108956 "2017-11-24T15:10:14Z")

</div>

I'm trying to import dashboards into Kibana and getting following: root@suey:/usr/share/metricbeat/bin# ./metricbeat -c /etc/metricbeat/metricbeat.yml setup -e 2017/11/24 03:47:30.504575 beat.go:426: INFO Home path: \[…

---

## [Threshold Rule for Detecting Brute force Attacks](https://discuss.elastic.co/t/threshold-rule-for-detecting-brute-force-attacks/245866)

<div class="topic-metadata">

**Author:** [@Ameer\_Mukadam](https://discuss.elastic.co/u/Ameer_Mukadam)\
**Replies:** 6\
**Last updated:** [October 7, 2020, 9:20pm UTC](https://discuss.elastic.co/t/threshold-rule-for-detecting-brute-force-attacks/245866 "2020-10-07T21:20:48Z")

</div>

Hi, with the release of 7.9 I tried creating a threshold rule for detecting and alerting Windows Brute Force Attacks. The query is Event.code 4625 and the threshold field is host.name greater than equal to 5. But the ru…

---

## [Compare two datasets](https://discuss.elastic.co/t/compare-two-datasets/129006)

<div class="topic-metadata">

**Author:** [@counterf](https://discuss.elastic.co/u/counterf)\
**Replies:** 6\
**Last updated:** [April 23, 2018, 11:40am UTC](https://discuss.elastic.co/t/compare-two-datasets/129006 "2018-04-23T11:40:52Z")

</div>

Hello, I have a list containing millions of malicious IP addresses, and I am using ELK to get and analyze data from multiple firewalls. I received millions of logs per days from the firewall and my malicious IP address…

---

## [Java API update index](https://discuss.elastic.co/t/java-api-update-index/308928)

<div class="topic-metadata">

**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\
**Replies:** 2\
**Last updated:** [July 6, 2022, 9:18pm UTC](https://discuss.elastic.co/t/java-api-update-index/308928 "2022-07-06T21:18:43Z")

</div>

HI everyone, I want to add a new field to a document already indexed. I find this in the documentation: curl -X POST "localhost:9200/home2/\_update/Y\_vIvoEB3cv\_8tuHzt7j?pretty" -H 'Content-Type: application/json' -d' { …

---

## [This site can't be reached](https://discuss.elastic.co/t/this-site-cant-be-reached/131874)

<div class="topic-metadata">

**Author:** [@yks](https://discuss.elastic.co/u/yks)\
**Replies:** 5\
**Last updated:** [May 17, 2018, 5:45am UTC](https://discuss.elastic.co/t/this-site-cant-be-reached/131874 "2018-05-17T05:45:43Z")

</div>

Cannot connect to "127.0.0.1:5061" using Chrome browser. Received the above error "This site can't be reached" and 127.0.0.1 refused to be connect. Below is the kibana.yml file \> # Kibana is served by a back end s…

---

## [Please explain how to perform a bulk update with partials using UpdateMany](https://discuss.elastic.co/t/please-explain-how-to-perform-a-bulk-update-with-partials-using-updatemany/183873)

<div class="topic-metadata">

**Author:** [@mFriemann](https://discuss.elastic.co/u/mFriemann)\
**Replies:** 3\
**Last updated:** [June 4, 2019, 1:20am UTC](https://discuss.elastic.co/t/please-explain-how-to-perform-a-bulk-update-with-partials-using-updatemany/183873 "2019-06-04T01:20:41Z")

</div>

I am really surprised by the lack of documentation for the NEST client. I am using NEST 6.6.0. I have an array of partial documents (anonymous objects) -- each includes an id field and the fields that I want to update. …

---

## [Visualizing a JSON array as datatable](https://discuss.elastic.co/t/visualizing-a-json-array-as-datatable/129384)

<div class="topic-metadata">

**Author:** [@Dominik\_Deren](https://discuss.elastic.co/u/Dominik_Deren)\
**Replies:** 4\
**Last updated:** [April 25, 2018, 11:16pm UTC](https://discuss.elastic.co/t/visualizing-a-json-array-as-datatable/129384 "2018-04-25T23:16:53Z")

</div>

Hey, I'm wondering if it is possible to convert a JSON array into a Datatable visualization and it on a dashboard. I'm building a monitoring dashboard for an application, and as one of the elements of the dashboard, I w…

---

## [Kibana is not able to fetch data from kibana collector](https://discuss.elastic.co/t/kibana-is-not-able-to-fetch-data-from-kibana-collector/154981)

<div class="topic-metadata">

**Author:** [@godfather7](https://discuss.elastic.co/u/godfather7)\
**Replies:** 5\
**Last updated:** [November 14, 2018, 10:33am UTC](https://discuss.elastic.co/t/kibana-is-not-able-to-fetch-data-from-kibana-collector/154981 "2018-11-14T10:33:23Z")

</div>

Kibana is not able to fetch data from kibana collector error is showing uo whenever i am starting kibana through cmd. The image error in the cmd is

---

## [Unable to run SQL query on multi fields using Elastic Search v. 7.3](https://discuss.elastic.co/t/unable-to-run-sql-query-on-multi-fields-using-elastic-search-v-7-3/222321)

<div class="topic-metadata">

**Author:** [@Prince.Tyagi](https://discuss.elastic.co/u/Prince.Tyagi)\
**Replies:** 3\
**Last updated:** [March 6, 2020, 11:43am UTC](https://discuss.elastic.co/t/unable-to-run-sql-query-on-multi-fields-using-elastic-search-v-7-3/222321 "2020-03-06T11:43:46Z")

</div>

Hi Team, I am getting below error while executing elasticsearch SQL query for translating it to elastic query on multifield: { \* "error": { \* "root\_cause": \[ \* { \* "type": "verification\_exception", \*…

---

## [Indexing on SSD vs HDD hardisk](https://discuss.elastic.co/t/indexing-on-ssd-vs-hdd-hardisk/136620)

<div class="topic-metadata">

**Author:** [@Tahir\_Ahmad](https://discuss.elastic.co/u/Tahir_Ahmad)\
**Replies:** 7\
**Last updated:** [June 20, 2018, 2:20pm UTC](https://discuss.elastic.co/t/indexing-on-ssd-vs-hdd-hardisk/136620 "2018-06-20T14:20:02Z")

</div>

I am indexing a csv file on a Dell system(Ubuntu 16) with HDD hardisk and it takes 3 hours to index it. However I also indexed the same csv file on Macpro with SSD hardisk and it took 15 minutes to index the same. Is thi…

---

## [DiskThresholdMonitor low disk watermark \[85%\] exceeded replicas will not be assigned to this node](https://discuss.elastic.co/t/diskthresholdmonitor-low-disk-watermark-85-exceeded-replicas-will-not-be-assigned-to-this-node/80913)

<div class="topic-metadata">

**Author:** [@Bob\_Metelsky](https://discuss.elastic.co/u/Bob_Metelsky)\
**Replies:** 1\
**Last updated:** [April 2, 2017, 4:06am UTC](https://discuss.elastic.co/t/diskthresholdmonitor-low-disk-watermark-85-exceeded-replicas-will-not-be-assigned-to-this-node/80913 "2017-04-02T04:06:46Z")

</div>

I have 4 nodes running 5.3 with x-pack & ssl I notice this \[INFO\] on only one of the node which has 147GB that's the smallest disk in the custer - the other nodes have 400+ GB \[2017-04-01T23:15:26,555\]\[INFO \]\[o.e.c.r.…

---

## [RFC-5424 log parsing](https://discuss.elastic.co/t/rfc-5424-log-parsing/286129)

<div class="topic-metadata">

**Author:** [@Sunflower](https://discuss.elastic.co/u/Sunflower)\
**Replies:** 6\
**Last updated:** [October 11, 2021, 10:59am UTC](https://discuss.elastic.co/t/rfc-5424-log-parsing/286129 "2021-10-11T10:59:10Z")

</div>

Hi, I have logs that I'm sending to Logstash from SentinelOne in an RFC-5424 format(this is the way they called it) that I wasn't sure how to handle. I began by dividing the fields using Grok and now my issue is how to…

---

## [Persistence explained](https://discuss.elastic.co/t/persistence-explained/5355)

<div class="topic-metadata">

**Author:** [@Steff](https://discuss.elastic.co/u/Steff)\
**Replies:** 6\
**Last updated:** [September 13, 2011, 10:15am UTC](https://discuss.elastic.co/t/persistence-explained/5355 "2011-09-13T10:15:25Z")

</div>

Extracted from http://groups.google.com/group/elasticsearch/browse\_thread/thread/cbd2cc71c407e435 Reading about persistence in ES I have a hard time figuring out exactly how and when it works - node-local stora…

---

## [APM Server transport error (503): Unexpected APM Server response](https://discuss.elastic.co/t/apm-server-transport-error-503-unexpected-apm-server-response/217273)

<div class="topic-metadata">

**Author:** [@meiyuan](https://discuss.elastic.co/u/meiyuan)\
**Replies:** 7\
**Last updated:** [February 7, 2020, 8:56pm UTC](https://discuss.elastic.co/t/apm-server-transport-error-503-unexpected-apm-server-response/217273 "2020-02-07T20:56:21Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.0.…

---

## [Internal Server Error at Fetch.\_callee3$](https://discuss.elastic.co/t/internal-server-error-at-fetch-callee3/239298)

<div class="topic-metadata">

**Author:** [@Alvaro\_Sanz](https://discuss.elastic.co/u/Alvaro_Sanz)\
**Replies:** 0\
**Last updated:** [June 30, 2020, 12:37pm UTC](https://discuss.elastic.co/t/internal-server-error-at-fetch-callee3/239298 "2020-06-30T12:37:06Z")

</div>

Hello, The following error keeps appearing and I dont know why it is happening. I am not cabable to find anything online that can help me with this issue: Error: Internal Server Error at Fetch.\_callee3$ (https://ki…

---

## [Lots of Beats input: The circuit breaker has detected a slowdown or stall in the pipeline](https://discuss.elastic.co/t/lots-of-beats-input-the-circuit-breaker-has-detected-a-slowdown-or-stall-in-the-pipeline/52310)

<div class="topic-metadata">

**Author:** [@MikeC](https://discuss.elastic.co/u/MikeC)\
**Replies:** 5\
**Last updated:** [June 10, 2016, 11:06am UTC](https://discuss.elastic.co/t/lots-of-beats-input-the-circuit-breaker-has-detected-a-slowdown-or-stall-in-the-pipeline/52310 "2016-06-10T11:06:56Z")

</div>

Hi, my setup is filebeat -\> logstash(localhost) -\> elasticsearch (remote host) and im expiriencing a lot of missing packages from filebeat. The filebeat logs report back 2016-06-09T10:34:00+01:00 INFO backoff retry:…

---

## [How solve "GET unknown route" from APM Java?](https://discuss.elastic.co/t/how-solve-get-unknown-route-from-apm-java/209364)

<div class="topic-metadata">

**Author:** [@dancristian](https://discuss.elastic.co/u/dancristian)\
**Replies:** 1\
**Last updated:** [November 26, 2019, 11:17am UTC](https://discuss.elastic.co/t/how-solve-get-unknown-route-from-apm-java/209364 "2019-11-26T11:17:30Z")

</div>

Kibana version: 7.4.0 Elasticsearch version: 7.4.0 APM Server version: 7.4.0 APM Agent language and version: APM Agent 1.7.0 Browser version: Chrome 78.0.3904 Original install method (e.g. download page, yum, d…

---

## [Why are some shards unassigned even though there are empty nodes?](https://discuss.elastic.co/t/why-are-some-shards-unassigned-even-though-there-are-empty-nodes/68399)

<div class="topic-metadata">

**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\
**Replies:** 4\
**Last updated:** [December 8, 2016, 9:08am UTC](https://discuss.elastic.co/t/why-are-some-shards-unassigned-even-though-there-are-empty-nodes/68399 "2016-12-08T09:08:02Z")

</div>

Hello Looking today at my elasticsearch cluster (2.4.2) I found out that there are unallocated shards. There seems to be a pattern: \[enter image description here\] It looks like the shards which are on eu2 are not a…

---

## [ERROR: Unable to create an enrollment token. Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificateociated certificate is a CA certificate](https://discuss.elastic.co/t/error-unable-to-create-an-enrollment-token-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificateociated-certificate-is-a-ca-certificate/311045)

<div class="topic-metadata">

**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\
**Replies:** 2\
**Last updated:** [August 2, 2022, 7:10am UTC](https://discuss.elastic.co/t/error-unable-to-create-an-enrollment-token-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificateociated-certificate-is-a-ca-certificate/311045 "2022-08-02T07:10:24Z")

</div>

I have installed the elasticsearch and configure the all certificated as mentioned in document but when i tried to generate a token it give the error. However i have already added the Keystore by using the command './b…

---

## [Dec 2nd, 2025: \[EN\] Normalizing numbers during analysis](https://discuss.elastic.co/t/dec-2nd-2025-en-normalizing-numbers-during-analysis/383512)

<div class="topic-metadata">

**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Replies:** 0\
**Last updated:** [December 2, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-2nd-2025-en-normalizing-numbers-during-analysis/383512 "2025-12-02T08:00:29Z")

</div>

Normalizing numbers in the analysis chain A common question in full text search is how to deal with numbers. In the base case you could fully extract them and query them as real numbers within a range, but in many cas…

---

## [How to install Filebeat on a ARM based SBC (eg. Raspberry Pi 3)](https://discuss.elastic.co/t/how-to-install-filebeat-on-a-arm-based-sbc-eg-raspberry-pi-3/103670)

<div class="topic-metadata">

**Author:** [@Peter\_Poulsen](https://discuss.elastic.co/u/Peter_Poulsen)\
**Replies:** 4\
**Last updated:** [October 12, 2017, 5:14pm UTC](https://discuss.elastic.co/t/how-to-install-filebeat-on-a-arm-based-sbc-eg-raspberry-pi-3/103670 "2017-10-12T17:14:09Z")

</div>

I have read through several threads, forums, and guides. But have not succeded in getting filebeat running on a arm based single board computer. This link do not seem to work anymore: https://beats-nightlies.s3.amazona…

---

## [Dec 2nd, 2018: \[JP\]\[Elasticsearch\] Analyze UIプラグインでAnalyzerの動きを理解する](https://discuss.elastic.co/t/dec-2nd-2018-jp-elasticsearch-analyze-ui-analyzer/158286)

<div class="topic-metadata">

**Author:** [@johtani](https://discuss.elastic.co/u/johtani)\
**Replies:** 0\
**Last updated:** [December 2, 2018, 12:00am UTC](https://discuss.elastic.co/t/dec-2nd-2018-jp-elasticsearch-analyze-ui-analyzer/158286 "2018-12-02T00:00:01Z")

</div>

Analyzerの動きを理解することが、Elasticsearchの検索をよりよくする、検索にヒットしない理由を解析する近道だったりします。 素晴らしいことに、Elasticsearchには\_analyze APIという便利なAPIが存在します。 既存のAnalyzerやカスタムAnalyzer（自分で定義したAnalyzer）を使用して、入力した文字列がどのようにTokenizeされて、転置インデックスのキーなるかというのを見るこ…

---

## [Using NEST how can I build up a search query](https://discuss.elastic.co/t/using-nest-how-can-i-build-up-a-search-query/125161)

<div class="topic-metadata">

**Author:** [@jchannon](https://discuss.elastic.co/u/jchannon)\
**Replies:** 2\
**Last updated:** [March 23, 2018, 12:38am UTC](https://discuss.elastic.co/t/using-nest-how-can-i-build-up-a-search-query/125161 "2018-03-23T00:38:34Z")

</div>

I am trying to use the NEST APIs to execute a search. In my logic of building this up with the fluent api I need to do a conditional check and so far I have this however I believe my assignment will be getting overwritt…

---

## [Kibana Can not start](https://discuss.elastic.co/t/kibana-can-not-start/179681)

<div class="topic-metadata">

**Author:** [@Akide\_Liu](https://discuss.elastic.co/u/Akide_Liu)\
**Replies:** 3\
**Last updated:** [May 6, 2019, 3:26am UTC](https://discuss.elastic.co/t/kibana-can-not-start/179681 "2019-05-06T03:26:35Z")

</div>

Kibana can not start after once system reboot. kibana log attached bellow: {"type":"log","@timestamp":"2019-05-03T21:02:08Z","tags":\["warning","stats-collection"\],"pid":393,"message":"Unable to fetch data from visualiz…

---

## [How to assign \_id field to a document field on create Or fetch the highest document id in a index](https://discuss.elastic.co/t/how-to-assign--id-field-to-a-document-field-on-create-or-fetch-the-highest-document-id-in-a-index/100561)

<div class="topic-metadata">

**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\
**Replies:** 3\
**Last updated:** [September 15, 2017, 7:54am UTC](https://discuss.elastic.co/t/how-to-assign--id-field-to-a-document-field-on-create-or-fetch-the-highest-document-id-in-a-index/100561 "2017-09-15T07:54:50Z")

</div>

Hi, Is there a way for me to assign the \_id that is created when I create a document in Elasticsearch directly to a field in my document when its getting created? I am currently trying to find the max \_id of the docume…

---

## [Http module: "invalid character '\<' looking for beginning of value"](https://discuss.elastic.co/t/http-module-invalid-character-looking-for-beginning-of-value/148082)

<div class="topic-metadata">

**Author:** [@MarkusB](https://discuss.elastic.co/u/MarkusB)\
**Replies:** 8\
**Last updated:** [September 27, 2018, 10:36am UTC](https://discuss.elastic.co/t/http-module-invalid-character-looking-for-beginning-of-value/148082 "2018-09-27T10:36:25Z")

</div>

Hi all, My first steps with Elastic, so maybe a dumb question. Running 6.4.0 with Metricbeat http module polling a SmartMeter. Test with Google Chrome: http://192.168.13.50:8080/xml/json.php?mode=infomin JSON Reply o…

---

## [Failing to PUT in an Index Template](https://discuss.elastic.co/t/failing-to-put-in-an-index-template/140563)

<div class="topic-metadata">

**Author:** [@Spitza\_Spitza](https://discuss.elastic.co/u/Spitza_Spitza)\
**Replies:** 2\
**Last updated:** [July 23, 2018, 11:40am UTC](https://discuss.elastic.co/t/failing-to-put-in-an-index-template/140563 "2018-07-23T11:40:34Z")

</div>

Using version 6.3. I tried to update /\_template/logstash with "index.number\_of\_replicas": "0" So I took the one I have now { "logstash": { "order": 0, "version": 60001, "index\_patterns": \[ "logsta…

---

## [How can I change the font color in Metric Visualization](https://discuss.elastic.co/t/how-can-i-change-the-font-color-in-metric-visualization/94053)

<div class="topic-metadata">

**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\
**Replies:** 4\
**Last updated:** [July 21, 2017, 5:50pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-font-color-in-metric-visualization/94053 "2017-07-21T17:50:53Z")

</div>

I want to change the Font colour as font type in Metric visualisation.

---

## [Dec 1st, 2022: \[PT\] Elastic Agent 101](https://discuss.elastic.co/t/dec-1st-2022-pt-elastic-agent-101/319992)

<div class="topic-metadata">

**Author:** [@AndersonQ](https://discuss.elastic.co/u/AndersonQ)\
**Replies:** 0\
**Last updated:** [December 1, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2022-pt-elastic-agent-101/319992 "2022-12-01T08:00:30Z")

</div>

Este artigo também está disponível em inglês. Primeiro, o que é o Elastic Agent? Elatic Agent é uma forma única e unificada de adicionar monitoramento para logs, métricas e outros tipos de dados em um host. Ele tam…

---

## [Hostname/IP does not match certificate's altnames](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificates-altnames/312777)

<div class="topic-metadata">

**Author:** [@it\_dev](https://discuss.elastic.co/u/it_dev)\
**Replies:** 2\
**Last updated:** [August 28, 2022, 6:02am UTC](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificates-altnames/312777 "2022-08-28T06:02:58Z")

</div>

I have installed ELK 8 stack fresh. If I change server's IP address, Kibana says: Kibana server is not ready yet. I looked up in the log file, it says: Unable to retrieve version information from Elasticsearch nodes. …

---

## [Logstash sometimes sends duplicate entry to ES](https://discuss.elastic.co/t/logstash-sometimes-sends-duplicate-entry-to-es/93618)

<div class="topic-metadata">

**Author:** [@fozboz](https://discuss.elastic.co/u/fozboz)\
**Replies:** 7\
**Last updated:** [July 20, 2017, 2:06pm UTC](https://discuss.elastic.co/t/logstash-sometimes-sends-duplicate-entry-to-es/93618 "2017-07-20T14:06:26Z")

</div>

Hi there, I have a Metricbeat configured to send Beats to a single Logstash host, which in turn sends to an ES cluster. Metricbeat config: metricbeat.modules: #------------------------------- System Module --------…

---

## [How to reduce the memory usage of filebeat](https://discuss.elastic.co/t/how-to-reduce-the-memory-usage-of-filebeat/283401)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 6\
**Last updated:** [September 6, 2021, 6:05am UTC](https://discuss.elastic.co/t/how-to-reduce-the-memory-usage-of-filebeat/283401 "2021-09-06T06:05:20Z")

</div>

I am using filebeat to collect log files. I'm using filebeat to collect log files, and on one of my servers, filebeat's memory usage is high. I would like to limit the memory usage of filebeat. I have set up queue.mem …

---

## [Copy Data from ClusterOld to ClusterNew into the same index](https://discuss.elastic.co/t/copy-data-from-clusterold-to-clusternew-into-the-same-index/28005)

<div class="topic-metadata">

**Author:** [@Stesig](https://discuss.elastic.co/u/Stesig)\
**Replies:** 6\
**Last updated:** [August 26, 2015, 6:41am UTC](https://discuss.elastic.co/t/copy-data-from-clusterold-to-clusternew-into-the-same-index/28005 "2015-08-26T06:41:18Z")

</div>

Hi, I have 2 ES-clusters with the same index-structure. I want merge data from cluster1 into cluster2 (same index). I wrote a small java programm to do this work using Transport Client API and it works for a small amo…

---

## [Error with JDK](https://discuss.elastic.co/t/error-with-jdk/137984)

<div class="topic-metadata">

**Author:** [@sunil1](https://discuss.elastic.co/u/sunil1)\
**Replies:** 7\
**Last updated:** [July 2, 2018, 12:31pm UTC](https://discuss.elastic.co/t/error-with-jdk/137984 "2018-07-02T12:31:29Z")

</div>

OpenJDK 64-Bit Server VM warning: If the number of processors is expected to increase from one, then you should configure the number of parallel GC threads appropriately using -XX:ParallelGCThreads=N OpenJDK 64-Bit Serv…

---

## [NetworkError when attempting to fetch resource](https://discuss.elastic.co/t/networkerror-when-attempting-to-fetch-resource/277150)

<div class="topic-metadata">

**Author:** [@iliya](https://discuss.elastic.co/u/iliya)\
**Replies:** 8\
**Last updated:** [August 17, 2021, 7:47am UTC](https://discuss.elastic.co/t/networkerror-when-attempting-to-fetch-resource/277150 "2021-08-17T07:47:26Z")

</div>

Hi Kibana version : 7.10.2 Elasticsearch version : 7.10.2 Browser version :Firefox 89.0.2 \*\*Original install method: from manjaro repository When I put in "http://localhost:5601/app/kibana/" in firefox, occur below …

---

## [Canvas - Graph legend position](https://discuss.elastic.co/t/canvas-graph-legend-position/201765)

<div class="topic-metadata">

**Author:** [@cesarlino](https://discuss.elastic.co/u/cesarlino)\
**Replies:** 4\
**Last updated:** [October 9, 2019, 7:45am UTC](https://discuss.elastic.co/t/canvas-graph-legend-position/201765 "2019-10-09T07:45:07Z")

</div>

Hi, When I create a visualization there is an option of move leave the legend on the side or at the bottom. Any option selected would take the legend out of the graph area. However, the same does not happen when I creat…

---

## [Query with track\_total\_hits:true faster than track\_total\_hits:false](https://discuss.elastic.co/t/query-with-track-total-hits-true-faster-than-track-total-hits-false/356291)

<div class="topic-metadata">

**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Replies:** 6\
**Last updated:** [March 28, 2024, 3:09pm UTC](https://discuss.elastic.co/t/query-with-track-total-hits-true-faster-than-track-total-hits-false/356291 "2024-03-28T15:09:25Z")

</div>

Hey, I have a query that is actually twice as fast when tracking total hits (setting track\_total\_hits: true or adding an aggregation), than as running it with track\_total\_hits:false - which is contradictory to the idea …

---

## [Logstash file for parsing JSON data](https://discuss.elastic.co/t/logstash-file-for-parsing-json-data/88570)

<div class="topic-metadata">

**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\
**Replies:** 5\
**Last updated:** [June 8, 2017, 11:42am UTC](https://discuss.elastic.co/t/logstash-file-for-parsing-json-data/88570 "2017-06-08T11:42:25Z")

</div>

I want to parse the below-given JSON data through logstash and load it to the KIbana Data {"PhoneNumber":{"0":27817768541},"TimeStamp":{"0":1471433451000},"ncalls":{"0":20}} can anyone help me with the logstash co…

---

## [TestContainers elasticsearch testing module 0.1-SNAPSHOT](https://discuss.elastic.co/t/testcontainers-elasticsearch-testing-module-0-1-snapshot/117373)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [January 28, 2018, 3:53pm UTC](https://discuss.elastic.co/t/testcontainers-elasticsearch-testing-module-0-1-snapshot/117373 "2018-01-28T15:53:51Z")

</div>

Heya I'm pleased to announce that I just published a preview version of the "TestContainers elasticsearch testing module" It's a Testcontainers module for elasticsearch. Note that it's based on the official Docker im…

---

## [How to filter data from Filebeats in Logstash](https://discuss.elastic.co/t/how-to-filter-data-from-filebeats-in-logstash/36579)

<div class="topic-metadata">

**Author:** [@msmolyak](https://discuss.elastic.co/u/msmolyak)\
**Replies:** 5\
**Last updated:** [December 9, 2015, 7:24am UTC](https://discuss.elastic.co/t/how-to-filter-data-from-filebeats-in-logstash/36579 "2015-12-09T07:24:57Z")

</div>

I am designing an ELK stack with ElasticSearch, Logstash and Kibana installed on a dedicated server and Filebeats installed on all the machine generating log files. Sounds like a standard setup. My question is how to …

---

## [Elasticsearch 6.2 - Composite Bucket Aggregation with Sum Bucket Aggregation and Pipeline Aggregations](https://discuss.elastic.co/t/elasticsearch-6-2-composite-bucket-aggregation-with-sum-bucket-aggregation-and-pipeline-aggregations/142658)

<div class="topic-metadata">

**Author:** [@BrobaFett](https://discuss.elastic.co/u/BrobaFett)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 4:56pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-composite-bucket-aggregation-with-sum-bucket-aggregation-and-pipeline-aggregations/142658 "2018-08-02T16:56:27Z")

</div>

Hi, I wanted to confirm if this feature is unavailable as of 6.2. Currently, I am able to create buckets according to my sources using the Composite Bucket Aggregation. I then run several sub-aggregations (Sum Metric A…

---

## [Shards unassigned for .kibana\_task\_manager index in cluster](https://discuss.elastic.co/t/shards-unassigned-for-kibana-task-manager-index-in-cluster/254147)

<div class="topic-metadata">

**Author:** [@guest123](https://discuss.elastic.co/u/guest123)\
**Replies:** 3\
**Last updated:** [November 4, 2020, 12:26pm UTC](https://discuss.elastic.co/t/shards-unassigned-for-kibana-task-manager-index-in-cluster/254147 "2020-11-04T12:26:58Z")

</div>

Hi, running 3 nodes cluster in prod workload, having problem with .kibana\_task\_manager index in red state, ran cluster/allocation api came to know 2 of the shards unassigned here is the response. for workaround this ca…

---

## [Could not push logs to Elasticsearch cluster](https://discuss.elastic.co/t/could-not-push-logs-to-elasticsearch-cluster/169177)

<div class="topic-metadata">

**Author:** [@masa](https://discuss.elastic.co/u/masa)\
**Replies:** 6\
**Last updated:** [March 8, 2019, 3:17am UTC](https://discuss.elastic.co/t/could-not-push-logs-to-elasticsearch-cluster/169177 "2019-03-08T03:17:23Z")

</div>

Elasticsearch 6.6 と td-agent 3.3.0 を使用しています。 td-agent から大量のデータを elasticsearch へ送信した際に、途中で elasticsearch にデータが登録できなくなりました。 td-agent のログには、以下のようなワーニングが出力されています。 elasticsearch から接続がリセットされているようです。 どのようにチューニングをしたら正常にデータを受信で…

---

## [Python script update by query elasticsearch doesn't work](https://discuss.elastic.co/t/python-script-update-by-query-elasticsearch-doesnt-work/199334)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 3\
**Last updated:** [September 13, 2019, 12:45am UTC](https://discuss.elastic.co/t/python-script-update-by-query-elasticsearch-doesnt-work/199334 "2019-09-13T00:45:36Z")

</div>

My python script fails at performing the following operation which is what I found in here: \[https://stackoverflow.com/questions/42489340/elastisearch-update-by-query\] def execute\_es\_update\_query(self, i): t1 = { …

---

## [Elasticsearch2jsonschema: generate JSON Schema from Elasticsearch mappings](https://discuss.elastic.co/t/elasticsearch2jsonschema-generate-json-schema-from-elasticsearch-mappings/142070)

<div class="topic-metadata">

**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\
**Replies:** 0\
**Last updated:** [July 29, 2018, 5:06pm UTC](https://discuss.elastic.co/t/elasticsearch2jsonschema-generate-json-schema-from-elasticsearch-mappings/142070 "2018-07-29T17:06:36Z")

</div>

Hi, I needed to generate JSON Schema form Elasticsearch mappings, I could not find anything, so I created this little script that worked wonderfully. Maybe it is of some use for somebody else: elasticsearch2jsonschema:…

---

## [How do I send a custom metric from within my code?](https://discuss.elastic.co/t/how-do-i-send-a-custom-metric-from-within-my-code/230689)

<div class="topic-metadata">

**Author:** [@michielvoo](https://discuss.elastic.co/u/michielvoo)\
**Replies:** 4\
**Last updated:** [May 1, 2020, 3:56pm UTC](https://discuss.elastic.co/t/how-do-i-send-a-custom-metric-from-within-my-code/230689 "2020-05-01T15:56:11Z")

</div>

I am in the process of understanding the Elastic product suite, and I don't fully understand 'Metrics'. I know I can send structured log events to Elasticsearch, and I can search and filter on specific fields that I adde…

[Previous page](https://discuss.elastic.co/top.md?page=348&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=350&per_page=50&period=all)
