# Top

**URL:** https://discuss.elastic.co/top.md?page=357&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 358

---

## [Unable to fetch mapping. do you have indices matching the pattern error](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern-error/83517)

<div class="topic-metadata">

**Author:** [@sanjays](https://discuss.elastic.co/u/sanjays)\
**Replies:** 2\
**Last updated:** [April 28, 2017, 5:20pm UTC](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern-error/83517 "2017-04-28T17:20:53Z")

</div>

Hello, I am unable to configure an index pattern, experiencing following issue . verified index in elastic search \[root@elk ~\]# curl 'localhost:9200/\_cat/indices?v' health status index uuid …

---

## [Using a string value (multistate) as Y-Axis](https://discuss.elastic.co/t/using-a-string-value-multistate-as-y-axis/66120)

<div class="topic-metadata">

**Author:** [@Myllka](https://discuss.elastic.co/u/Myllka)\
**Replies:** 7\
**Last updated:** [December 13, 2016, 8:25pm UTC](https://discuss.elastic.co/t/using-a-string-value-multistate-as-y-axis/66120 "2016-12-13T20:25:50Z")

</div>

Hi everyone, I'm new at using Kibana and I need some help. I managed to create some graphics with my datas from Logstash/Elasticsearch (like how many of certain type of message by day), but I'm now stuck with one graph…

---

## [Loop through ctx.payload.hits.hits in transform](https://discuss.elastic.co/t/loop-through-ctx-payload-hits-hits-in-transform/115527)

<div class="topic-metadata">

**Author:** [@Steve\_Stevens](https://discuss.elastic.co/u/Steve_Stevens)\
**Replies:** 4\
**Last updated:** [February 7, 2018, 9:14am UTC](https://discuss.elastic.co/t/loop-through-ctx-payload-hits-hits-in-transform/115527 "2018-02-07T09:14:54Z")

</div>

Excuse the basic questions but I am new to the product and forum. I am attempting to build a watcher that parses a some of the hits messages and updates an index, but I feel my syntax is wrong. Unfortunately I only get …

---

## [Sorting based on a script calculated field value](https://discuss.elastic.co/t/sorting-based-on-a-script-calculated-field-value/7889)

<div class="topic-metadata">

**Author:** [@manoj\_2](https://discuss.elastic.co/u/manoj_2)\
**Replies:** 4\
**Last updated:** [April 11, 2014, 5:04pm UTC](https://discuss.elastic.co/t/sorting-based-on-a-script-calculated-field-value/7889 "2014-04-11T17:04:23Z")

</div>

Hi Kimchy, We want to introduce a feature to our product, I am interested to know if Scripting could do anything in this. We have a field which has a numeric value. I believe we can do math operations on a field u…

---

## [How to find the precise "reindex" by "\_tasks" API?](https://discuss.elastic.co/t/how-to-find-the-precise-reindex-by--tasks-api/56479)

<div class="topic-metadata">

**Author:** [@1222kkk](https://discuss.elastic.co/u/1222kkk)\
**Replies:** 6\
**Last updated:** [July 27, 2016, 12:57pm UTC](https://discuss.elastic.co/t/how-to-find-the-precise-reindex-by--tasks-api/56479 "2016-07-27T12:57:35Z")

</div>

many reindex operations may happened at the same time but the " /\_tasks/ " can not distinguish them may like this "tasks": { "N6P1aVclSEibQbEgKSoM4Q:580812": { "node": "N…

---

## [Metricbeat ERR Failed to publish events caused by: read tcp 127.0.0.1:56820-\>127.0.0.1:5044: i/o timeout](https://discuss.elastic.co/t/metricbeat-err-failed-to-publish-events-caused-by-read-tcp-127-0-0-1-56820-127-0-0-1-5044-i-o-timeout/85318)

<div class="topic-metadata">

**Author:** [@ritchierich](https://discuss.elastic.co/u/ritchierich)\
**Replies:** 5\
**Last updated:** [May 13, 2017, 4:49am UTC](https://discuss.elastic.co/t/metricbeat-err-failed-to-publish-events-caused-by-read-tcp-127-0-0-1-56820-127-0-0-1-5044-i-o-timeout/85318 "2017-05-13T04:49:34Z")

</div>

Getting the errors below from metricbeat to logstash. Versions: logstash 5.4.0 metricbeat version 5.4.0 (amd64), libbeat 5.4.0 Metricbeat Log: 2017-05-11T00:57:41Z ERR Failed to publish events caused by: read tcp…

---

## [How change/remove timestamp field](https://discuss.elastic.co/t/how-change-remove-timestamp-field/153807)

<div class="topic-metadata">

**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\
**Replies:** 3\
**Last updated:** [October 29, 2018, 12:05pm UTC](https://discuss.elastic.co/t/how-change-remove-timestamp-field/153807 "2018-10-29T12:05:45Z")

</div>

Any idea how can I: a) remove b) change field that has been defined as a timestamp? Thank you

---

## [Connection Refused Logstash & Filebeat](https://discuss.elastic.co/t/connection-refused-logstash-filebeat/145794)

<div class="topic-metadata">

**Author:** [@k.m.2013](https://discuss.elastic.co/u/k.m.2013)\
**Replies:** 6\
**Last updated:** [September 9, 2018, 8:39am UTC](https://discuss.elastic.co/t/connection-refused-logstash-filebeat/145794 "2018-09-09T08:39:23Z")

</div>

Hello! I am having an error adding a new environment to our ElasticSearch/Redis cluster. This is the error that I am receiving from /var/log/filebeat/filebeat //ERR Failed to connect: dial tcp x.x.x.x:5044: getsockopt…

---

## [Logstash.stdout large size?](https://discuss.elastic.co/t/logstash-stdout-large-size/24939)

<div class="topic-metadata">

**Author:** [@saif](https://discuss.elastic.co/u/saif)\
**Replies:** 5\
**Last updated:** [October 7, 2015, 5:25am UTC](https://discuss.elastic.co/t/logstash-stdout-large-size/24939 "2015-10-07T05:25:32Z")

</div>

hi im using logstash to send logs to redis but i don't understand wwey that logstash.stdout have this size what is the problem thank you ! :qw! lol

---

## [User can't create index, even with create\_index and create permissions](https://discuss.elastic.co/t/user-cant-create-index-even-with-create-index-and-create-permissions/78159)

<div class="topic-metadata">

**Author:** [@prodrg](https://discuss.elastic.co/u/prodrg)\
**Replies:** 1\
**Last updated:** [March 10, 2017, 4:01pm UTC](https://discuss.elastic.co/t/user-cant-create-index-even-with-create-index-and-create-permissions/78159 "2017-03-10T16:01:07Z")

</div>

Hello everybody. I had this issue before using Metricbeat. I created an user called metricbeat\_internal to write and read all the stuff related to that Beat and to make it visible on Kibana. So, I assigned two roles to…

---

## [Incrementing an integer field](https://discuss.elastic.co/t/incrementing-an-integer-field/6643)

<div class="topic-metadata">

**Author:** [@Frank\_LaRosa](https://discuss.elastic.co/u/Frank_LaRosa)\
**Replies:** 3\
**Last updated:** [February 8, 2012, 10:35pm UTC](https://discuss.elastic.co/t/incrementing-an-integer-field/6643 "2012-02-08T22:35:37Z")

</div>

Hi, Is there a more efficient way to increment an integer field besides reading the entire document, updating the number, and re-indexing the document? Thanks, Frank

---

## [Elastic RAM:Disk Ratio Minimum](https://discuss.elastic.co/t/elastic-ram-disk-ratio-minimum/132435)

<div class="topic-metadata">

**Author:** [@safhw91](https://discuss.elastic.co/u/safhw91)\
**Replies:** 4\
**Last updated:** [May 18, 2018, 11:14am UTC](https://discuss.elastic.co/t/elastic-ram-disk-ratio-minimum/132435 "2018-05-18T11:14:15Z")

</div>

Hello, I understand the optimum RAM:disk ratio is 1:24. Based on my own testing, I've used 1GB of RAM to support up to 77GB of data in Elastic's (based on Kibana's "store.size"). But that's a bad test since it crashed a…

---

## [Nested query with should clauses and filter](https://discuss.elastic.co/t/nested-query-with-should-clauses-and-filter/56730)

<div class="topic-metadata">

**Author:** [@jlp1](https://discuss.elastic.co/u/jlp1)\
**Replies:** 3\
**Last updated:** [August 1, 2016, 1:42pm UTC](https://discuss.elastic.co/t/nested-query-with-should-clauses-and-filter/56730 "2016-08-01T13:42:18Z")

</div>

I am using nested query with should clauses in elasticsearch 2.3.2 GET shop/customer/\_search { "from": 0, "size": 25, "query": { "bool": { "must": \[ { "nested": { …

---

## [Failed to load SSL configuration \[xpack.security.transport.ssl\] - cannot specify both \[keystore.secure\_password\] and \[keystore.password\]](https://discuss.elastic.co/t/failed-to-load-ssl-configuration-xpack-security-transport-ssl-cannot-specify-both-keystore-secure-password-and-keystore-password/352748)

<div class="topic-metadata">

**Author:** [@Karan37](https://discuss.elastic.co/u/Karan37)\
**Replies:** 2\
**Last updated:** [February 9, 2024, 4:55am UTC](https://discuss.elastic.co/t/failed-to-load-ssl-configuration-xpack-security-transport-ssl-cannot-specify-both-keystore-secure-password-and-keystore-password/352748 "2024-02-09T04:55:24Z")

</div>

when running the elasticsearch.bat command after generating the certificates with the password it is showing only this error "fatal exception while booting Elasticsearchorg.elasticsearch.ElasticsearchSecurityException: f…

---

## [Setup access dashboard per user](https://discuss.elastic.co/t/setup-access-dashboard-per-user/205497)

<div class="topic-metadata">

**Author:** [@martijndegroot](https://discuss.elastic.co/u/martijndegroot)\
**Replies:** 5\
**Last updated:** [October 30, 2019, 4:44pm UTC](https://discuss.elastic.co/t/setup-access-dashboard-per-user/205497 "2019-10-30T16:44:30Z")

</div>

Hi all,, We are running Elastic Cloud and latest version of Kibana. At this moment we are creating (in Kibana) new dashboards for different stakeholders. I would like to know how to setup the user rights and security …

---

## [Metricbeat WMI CPU usage](https://discuss.elastic.co/t/metricbeat-wmi-cpu-usage/69553)

<div class="topic-metadata">

**Author:** [@aalesh](https://discuss.elastic.co/u/aalesh)\
**Replies:** 7\
**Last updated:** [December 27, 2016, 11:39am UTC](https://discuss.elastic.co/t/metricbeat-wmi-cpu-usage/69553 "2016-12-27T11:39:38Z")

</div>

We want to use metricbeat to monitor processes on our Windows servers. The problem is that we have 200+ processes which seems to cause peformance issues: WmiPrvSE.exe consumes 90%+ of one CPU core. Metricbeat freezes …

---

## [Kibana Report & API 405 Error](https://discuss.elastic.co/t/kibana-report-api-405-error/67771)

<div class="topic-metadata">

**Author:** [@cmbrown](https://discuss.elastic.co/u/cmbrown)\
**Replies:** 3\
**Last updated:** [December 5, 2016, 4:56pm UTC](https://discuss.elastic.co/t/kibana-report-api-405-error/67771 "2016-12-05T16:56:45Z")

</div>

Hi I have Kibana 5 up and running with a single fairly simple dashboard. When I navigate to the generation URL, I am getting a 405 Error: {"statusCode":405,"error":"Method Not Allowed","message":"GET is not allowed"} …

---

## [Failed to install template logstash error](https://discuss.elastic.co/t/failed-to-install-template-logstash-error/176646)

<div class="topic-metadata">

**Author:** [@xabush](https://discuss.elastic.co/u/xabush)\
**Replies:** 4\
**Last updated:** [May 9, 2019, 8:29pm UTC](https://discuss.elastic.co/t/failed-to-install-template-logstash-error/176646 "2019-05-09T20:29:00Z")

</div>

I am trying to send data from MySQL to Elasticsearch using Logstash. However, after it starts Logstash fails with the following error: Failed to install template. {:message=\>"undefined method update' for nil:NilClass",…

---

## [JSON input filter for value](https://discuss.elastic.co/t/json-input-filter-for-value/155655)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [November 8, 2018, 4:33am UTC](https://discuss.elastic.co/t/json-input-filter-for-value/155655 "2018-11-08T04:33:33Z")

</div>

Hi, I've wrote this script to parse with a metric visualization but it doesn't work. I've tried reading the docs but couldn't find how to match values. { "script" : "doc\['int\_wan'\].value = wan1" }

---

## [Adding more fields from the nginx log file](https://discuss.elastic.co/t/adding-more-fields-from-the-nginx-log-file/104231)

<div class="topic-metadata">

**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\
**Replies:** 1\
**Last updated:** [October 18, 2017, 1:46am UTC](https://discuss.elastic.co/t/adding-more-fields-from-the-nginx-log-file/104231 "2017-10-18T01:46:38Z")

</div>

Hi, I'm using Filebeat with Kibana and Elastic 5.5.0 to get the nginx data from logs file and it's work well, but all the data from my nginx log file was not in Kibana. Here an example of my log file: 10.10.10.10 - -…

---

## [Aggregate Query in ElasticSearch / Lucene](https://discuss.elastic.co/t/aggregate-query-in-elasticsearch-lucene/6519)

<div class="topic-metadata">

**Author:** [@Raul\_Jr\_Martinez](https://discuss.elastic.co/u/Raul_Jr_Martinez)\
**Replies:** 5\
**Last updated:** [July 7, 2013, 9:02pm UTC](https://discuss.elastic.co/t/aggregate-query-in-elasticsearch-lucene/6519 "2013-07-07T21:02:32Z")

</div>

Hi, I work in a company that uses Endeca for search and we are heavily relying on aggregate queries (GROUP BY). Right now, is there an equivalent feature in ES or Lucene? Thanks Raul

---

## [ElasticSearch:Failed to execute phase \[dfs\], all shards failed](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-phase-dfs-all-shards-failed/58624)

<div class="topic-metadata">

**Author:** [@mars76](https://discuss.elastic.co/u/mars76)\
**Replies:** 1\
**Last updated:** [August 22, 2016, 10:50pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-phase-dfs-all-shards-failed/58624 "2016-08-22T22:50:04Z")

</div>

I am using elastic search 2.3.5 and when i started contacting it from my Java Code i am getting the following Exception: Failed to execute phase \[dfs\], all shards failedat org.elasticsearch.action.search.AbstractSearch…

---

## [Timezone in UTC causes wrong filename](https://discuss.elastic.co/t/timezone-in-utc-causes-wrong-filename/261480)

<div class="topic-metadata">

**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\
**Replies:** 3\
**Last updated:** [January 19, 2021, 10:23am UTC](https://discuss.elastic.co/t/timezone-in-utc-causes-wrong-filename/261480 "2021-01-19T10:23:23Z")

</div>

i have a logserver with logstash only. no elasticsearch nor kibana. all other servers are using filebeat to send log to the logserver. logstash writes to /var/log/logstash/appname.txt.%{+YYYY-MM-dd} after some processi…

---

## [Elasticsearch PHP client throwing exception “No alive nodes found in your cluster”](https://discuss.elastic.co/t/elasticsearch-php-client-throwing-exception-no-alive-nodes-found-in-your-cluster/77379)

<div class="topic-metadata">

**Author:** [@tomas\_jindal](https://discuss.elastic.co/u/tomas_jindal)\
**Replies:** 1\
**Last updated:** [March 4, 2017, 7:46am UTC](https://discuss.elastic.co/t/elasticsearch-php-client-throwing-exception-no-alive-nodes-found-in-your-cluster/77379 "2017-03-04T07:46:59Z")

</div>

I am start working with elastic search.I successfully install elastic search on my server(Different from application server).But When I try to call Elatic search from my Application server it gives an error Fatal error:…

---

## [Creating a case for an alert automatically](https://discuss.elastic.co/t/creating-a-case-for-an-alert-automatically/294686)

<div class="topic-metadata">

**Author:** [@subham](https://discuss.elastic.co/u/subham)\
**Replies:** 2\
**Last updated:** [January 27, 2022, 11:52am UTC](https://discuss.elastic.co/t/creating-a-case-for-an-alert-automatically/294686 "2022-01-27T11:52:25Z")

</div>

Hey Everyone, Can anyone please tell if there's a way to create a case for an alert automatically. So that we dont have to do it manually. Thanks

---

## [Unable to escape special characters for a query](https://discuss.elastic.co/t/unable-to-escape-special-characters-for-a-query/7278)

<div class="topic-metadata">

**Author:** [@JP\_Toto](https://discuss.elastic.co/u/JP_Toto)\
**Replies:** 3\
**Last updated:** [April 10, 2012, 11:11pm UTC](https://discuss.elastic.co/t/unable-to-escape-special-characters-for-a-query/7278 "2012-04-10T23:11:32Z")

</div>

Hi all! Sorry if this has been covered. I tried to do my searching first. I have the query: {"query":{"bool":{"must":\[{"term":{"SID":"3962"}},{"term":{"BI":"True"}},{"query\_string":{"default\_field":"TA","query":…

---

## [Filebeat not keeping up with logs](https://discuss.elastic.co/t/filebeat-not-keeping-up-with-logs/48980)

<div class="topic-metadata">

**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\
**Replies:** 7\
**Last updated:** [May 17, 2016, 11:02am UTC](https://discuss.elastic.co/t/filebeat-not-keeping-up-with-logs/48980 "2016-05-17T11:02:30Z")

</div>

config: filebeat: prospectors: - paths: - /apps/logs/All.log input\_type: log document\_type: prod scan\_frequency: 5s harvester\_buffer\_size: 32768 force\_close\_files: true …

---

## [Java.util.zip.ZipException](https://discuss.elastic.co/t/java-util-zip-zipexception/36427)

<div class="topic-metadata">

**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 8\
**Last updated:** [July 1, 2016, 2:05am UTC](https://discuss.elastic.co/t/java-util-zip-zipexception/36427 "2016-07-01T02:05:22Z")

</div>

Hi All, I am getting below exception while trying to bring up ES 2.1 Exception in thread "main" java.util.zip.ZipException: error in opening zip file at java.util.zip.ZipFile.open(Native Method) at java.util.zip.Z…

---

## [Nest Field no longer support MemberExpressions](https://discuss.elastic.co/t/nest-field-no-longer-support-memberexpressions/208656)

<div class="topic-metadata">

**Author:** [@slayme89](https://discuss.elastic.co/u/slayme89)\
**Replies:** 2\
**Last updated:** [November 25, 2019, 2:25pm UTC](https://discuss.elastic.co/t/nest-field-no-longer-support-memberexpressions/208656 "2019-11-25T14:25:50Z")

</div>

Hi there! We are a team that are currently migrating from a 6.4 to a new 7.4 Elastic cluster. While upgrading our application to use Nest 7.4 we found a breaking change that is not noted in the current documentation: M…

---

## [Searching Indexes based on Index Creation date](https://discuss.elastic.co/t/searching-indexes-based-on-index-creation-date/52684)

<div class="topic-metadata">

**Author:** [@ramkchirra](https://discuss.elastic.co/u/ramkchirra)\
**Replies:** 3\
**Last updated:** [June 14, 2016, 9:31am UTC](https://discuss.elastic.co/t/searching-indexes-based-on-index-creation-date/52684 "2016-06-14T09:31:26Z")

</div>

Hi, I have requirement of querying the ElasticSearch Indexes which are created prior to a given date. By using the Sense Plugin (Chrome Browser) for ElasticSearch , i am able to see the settings of the indexes which is …

---

## [InvalidFrameProtocolException: Invalid version of beats protocol: 10](https://discuss.elastic.co/t/invalidframeprotocolexception-invalid-version-of-beats-protocol-10/209716)

<div class="topic-metadata">

**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\
**Replies:** 0\
**Last updated:** [November 27, 2019, 3:19pm UTC](https://discuss.elastic.co/t/invalidframeprotocolexception-invalid-version-of-beats-protocol-10/209716 "2019-11-27T15:19:11Z")

</div>

I'm trying to send data from filebeat version 5.6.4 (amd64), libbeat 5.6.4 to Logstash 7.4.2. I've tested the configuration sending filebeat version 7.4.2 from another server and I can see the data flowing OK from fileb…

---

## [How to change max payload size on cloud Kibana](https://discuss.elastic.co/t/how-to-change-max-payload-size-on-cloud-kibana/264308)

<div class="topic-metadata">

**Author:** [@harmanpa](https://discuss.elastic.co/u/harmanpa)\
**Replies:** 4\
**Last updated:** [February 16, 2021, 7:11am UTC](https://discuss.elastic.co/t/how-to-change-max-payload-size-on-cloud-kibana/264308 "2021-02-16T07:11:59Z")

</div>

I am trying to use filebeat to send logs to elastic cloud, however on calling "filebeat setup" I get the following error: Response: {"statusCode":413,"error":"Request Entity Too Large","message":"Payload content length …

---

## [How to configure filebeat to read data from several paths using a path varible in it's configuration?](https://discuss.elastic.co/t/how-to-configure-filebeat-to-read-data-from-several-paths-using-a-path-varible-in-its-configuration/86355)

<div class="topic-metadata">

**Author:** [@Nisal\_Thiwanka](https://discuss.elastic.co/u/Nisal_Thiwanka)\
**Replies:** 5\
**Last updated:** [June 6, 2017, 8:27am UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-to-read-data-from-several-paths-using-a-path-varible-in-its-configuration/86355 "2017-06-06T08:27:46Z")

</div>

I need to configure filebeat to read log files from several locations and send them to logstash on user request. How can I do that?

---

## [“No alive nodes found in your cluster” message when using HTTPS endpoint in PHP API](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster-message-when-using-https-endpoint-in-php-api/33330)

<div class="topic-metadata">

**Author:** [@asanga](https://discuss.elastic.co/u/asanga)\
**Replies:** 2\
**Last updated:** [January 26, 2016, 3:35pm UTC](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster-message-when-using-https-endpoint-in-php-api/33330 "2016-01-26T15:35:57Z")

</div>

I'm using PHP client to connect to the found Elasticsearch server. Given below is the code I use to create the client $hosts = \[ 'https://username:password@xxxxxxxxxxxxxxxxxx.ap-southeast-2.aws.found.io:9243 …

---

## [Node xxx not part of the cluster Cluster \[elasticsearch\], ignoring](https://discuss.elastic.co/t/node-xxx-not-part-of-the-cluster-cluster-elasticsearch-ignoring/4514)

<div class="topic-metadata">

**Author:** [@Weiwei\_Wang](https://discuss.elastic.co/u/Weiwei_Wang)\
**Replies:** 2\
**Last updated:** [June 22, 2011, 9:20am UTC](https://discuss.elastic.co/t/node-xxx-not-part-of-the-cluster-cluster-elasticsearch-ignoring/4514 "2011-06-22T09:20:08Z")

</div>

I started two elasticsearch nodes on a remote machine with ip: 10.18.102.134 Then i connect it using TransportClient(java) from ip:10.18.106.36, then the console begins to print warnings as below: \[Payne, Frank\] …

---

## [Logstash cron schedule to run every 12 hours starting at certain time](https://discuss.elastic.co/t/logstash-cron-schedule-to-run-every-12-hours-starting-at-certain-time/142356)

<div class="topic-metadata">

**Author:** [@abhisheksimion](https://discuss.elastic.co/u/abhisheksimion)\
**Replies:** 3\
**Last updated:** [July 31, 2018, 12:16pm UTC](https://discuss.elastic.co/t/logstash-cron-schedule-to-run-every-12-hours-starting-at-certain-time/142356 "2018-07-31T12:16:31Z")

</div>

I am trying 0 1/12 \* \* \* cron expression but it only fires once a day. Below is 1 of my configuration. input { jdbc { jdbc\_connection\_string =\> "jdbc:redshift://xxx.us-west-2.redshift.amazonaws.com:5439/xxx" jdbc\_u…

---

## [Filebeat -getsockopt: connection refused](https://discuss.elastic.co/t/filebeat-getsockopt-connection-refused/91630)

<div class="topic-metadata">

**Author:** [@Pandiyan\_M](https://discuss.elastic.co/u/Pandiyan_M)\
**Replies:** 6\
**Last updated:** [July 5, 2017, 12:26pm UTC](https://discuss.elastic.co/t/filebeat-getsockopt-connection-refused/91630 "2017-07-05T12:26:44Z")

</div>

Hi, Here my filebeat.yml filebeat.prospectors: - input\_type: log document\_type: web\_log paths: - /var/log/web.log fields: log\_type: weblog fields\_under\_root: true - input\_type: log document\_type: e…

---

## [Elastic APM agent VS OpenTelemetry client](https://discuss.elastic.co/t/elastic-apm-agent-vs-opentelemetry-client/332903)

<div class="topic-metadata">

**Author:** [@AThomsen](https://discuss.elastic.co/u/AThomsen)\
**Replies:** 1\
**Last updated:** [May 9, 2023, 3:16pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-vs-opentelemetry-client/332903 "2023-05-09T15:16:26Z")

</div>

Now that Elastic Stack has native support for OpenTelemetry I guess there are (at least) two ways to do APM from a .Net application (the same question is probably valid for java and others as well). Using the Elastic A…

---

## [Enable Anonymous access in kibana](https://discuss.elastic.co/t/enable-anonymous-access-in-kibana/187558)

<div class="topic-metadata">

**Author:** [@Saurabh\_Sharma\_IIT](https://discuss.elastic.co/u/Saurabh_Sharma_IIT)\
**Replies:** 5\
**Last updated:** [July 4, 2019, 10:41am UTC](https://discuss.elastic.co/t/enable-anonymous-access-in-kibana/187558 "2019-07-04T10:41:52Z")

</div>

Hi, I have recently implemented security feature following this blog: I successfully implemented it and it is working fine. Now I would like to add anonymous access also to specific index. I found this article on an…

---

## [Elasticsearch Consuming Massive Memory](https://discuss.elastic.co/t/elasticsearch-consuming-massive-memory/226783)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [April 6, 2020, 10:58pm UTC](https://discuss.elastic.co/t/elasticsearch-consuming-massive-memory/226783 "2020-04-06T22:58:33Z")

</div>

Just curious as to what's going on here. jvm.options set to 20GB but this is what I see in Task Manager. Running Elasticsearch 7.6 on Server 2012 R2

---

## [How to uninstall logstash service?](https://discuss.elastic.co/t/how-to-uninstall-logstash-service/232660)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [May 17, 2020, 12:18pm UTC](https://discuss.elastic.co/t/how-to-uninstall-logstash-service/232660 "2020-05-17T12:18:29Z")

</div>

Hi, I have installed multiple instances of logstash on a single machine. Installation was done via system-install script provided with logstash package. Each instance has its own configuration folder. But how can I unin…

---

## [Uptime Tab says "No Data Available" when heartbeat-today index keeps incrementing](https://discuss.elastic.co/t/uptime-tab-says-no-data-available-when-heartbeat-today-index-keeps-incrementing/179160)

<div class="topic-metadata">

**Author:** [@phillhocking](https://discuss.elastic.co/u/phillhocking)\
**Replies:** 5\
**Last updated:** [May 16, 2019, 5:10am UTC](https://discuss.elastic.co/t/uptime-tab-says-no-data-available-when-heartbeat-today-index-keeps-incrementing/179160 "2019-05-16T05:10:28Z")

</div>

Hi Elastic friends! My Uptime app tab says "No uptime data available - Configure Heartbeat to start logging uptime data" but I have verified that heartbeat is shipping data at least according to \_cat/indices: It does…

---

## [Some questions with regards to index.translog.durability's interaction with replica shards](https://discuss.elastic.co/t/some-questions-with-regards-to-index-translog-durabilitys-interaction-with-replica-shards/118098)

<div class="topic-metadata">

**Author:** [@Wisgary](https://discuss.elastic.co/u/Wisgary)\
**Replies:** 4\
**Last updated:** [February 6, 2018, 3:23am UTC](https://discuss.elastic.co/t/some-questions-with-regards-to-index-translog-durabilitys-interaction-with-replica-shards/118098 "2018-02-06T03:23:18Z")

</div>

From documentation, I see "async" - fsync and commit in the background every sync\_interval. In the event of hardware failure, all acknowledged writes since the last automatic commit will be discarded. So a few questi…

---

## [Config file for multiple multiline patterns](https://discuss.elastic.co/t/config-file-for-multiple-multiline-patterns/98079)

<div class="topic-metadata">

**Author:** [@iamsaurabhrk](https://discuss.elastic.co/u/iamsaurabhrk)\
**Replies:** 8\
**Last updated:** [September 7, 2017, 9:00am UTC](https://discuss.elastic.co/t/config-file-for-multiple-multiline-patterns/98079 "2017-09-07T09:00:15Z")

</div>

I have installed logstash v5.5.0. I want to parse logs which have multiple multiline formats. I have logs in the following format: Fri 3/3/17 14:31:30: AbCdEueuq\_11111111111.PqrThr-4: TRACE : xx.xxx.xxx Administrator - …

---

## [Questions about dead letter queue](https://discuss.elastic.co/t/questions-about-dead-letter-queue/110798)

<div class="topic-metadata">

**Author:** [@system](https://discuss.elastic.co/u/system)\
**Replies:** 1\
**Last updated:** [December 15, 2017, 12:38pm UTC](https://discuss.elastic.co/t/questions-about-dead-letter-queue/110798 "2017-12-15T12:38:14Z")

</div>

Hi there, we've recently started looking into setting up a dead\_letter\_queue pipeline at Discourse but I had some questions which wasn't immediately clear from the documentation. Does the DLQ log files get deleted at …

---

## [Visualization - compare data in a time range over days/weeks/months](https://discuss.elastic.co/t/visualization-compare-data-in-a-time-range-over-days-weeks-months/34099)

<div class="topic-metadata">

**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\
**Replies:** 5\
**Last updated:** [July 21, 2016, 4:53am UTC](https://discuss.elastic.co/t/visualization-compare-data-in-a-time-range-over-days-weeks-months/34099 "2016-07-21T04:53:11Z")

</div>

Hi all, I'm using ELK to store and graph Netflow data. I've created some line charts such as Flow over time, throughput over time, packets over time. What I need is to be able to compare data in a time range over days,…

---

## [Update API timeout](https://discuss.elastic.co/t/update-api-timeout/152760)

<div class="topic-metadata">

**Author:** [@saramali](https://discuss.elastic.co/u/saramali)\
**Replies:** 5\
**Last updated:** [October 17, 2018, 7:48am UTC](https://discuss.elastic.co/t/update-api-timeout/152760 "2018-10-17T07:48:14Z")

</div>

I've written a logstash script in which it reads via read mode from a directory. The logs I am processing are from a POS and the driectory structrue is as such that the store name and the till number is in the path. Usin…

---

## [Remote Index Error: failed to process cluster event (put-mapping) within 30s](https://discuss.elastic.co/t/remote-index-error-failed-to-process-cluster-event-put-mapping-within-30s/72690)

<div class="topic-metadata">

**Author:** [@hailima](https://discuss.elastic.co/u/hailima)\
**Replies:** 2\
**Last updated:** [January 24, 2017, 9:06pm UTC](https://discuss.elastic.co/t/remote-index-error-failed-to-process-cluster-event-put-mapping-within-30s/72690 "2017-01-24T21:06:05Z")

</div>

I am doing remote reindex (API \_reindex) to migrate data from ES 1.4.4 to 5.1.1. From time to time, i got following errors: { "index": "nexttextindex", "type": "5db203a6d93f0dd29574a1fd…

---

## [Kibanaでの項目集計について](https://discuss.elastic.co/t/kibana/86058)

<div class="topic-metadata">

**Author:** [@111142](https://discuss.elastic.co/u/111142)\
**Replies:** 4\
**Last updated:** [May 19, 2017, 9:01am UTC](https://discuss.elastic.co/t/kibana/86058 "2017-05-19T09:01:10Z")

</div>

ログを集計しています。 ログには、項目A、項目B、項目Cとあり、内容は同じ様なデータが入っています。 この項目A,B,Cを足し込んで集計し、Visualizeする事は可能でしょうか？ ログ形式：日付 項目A 項目B 項目C 20170517 北海道 東京 名古屋 20170517 北海道 東京 大阪 20170517 青森 東京 名古屋 Visualizeのterm等で一つにしたい。 北海道 2 青森 1 東京 …

---

## [Elasticsearch -head chrome extension](https://discuss.elastic.co/t/elasticsearch-head-chrome-extension/155772)

<div class="topic-metadata">

**Author:** [@yolita43](https://discuss.elastic.co/u/yolita43)\
**Replies:** 3\
**Last updated:** [November 7, 2018, 10:42pm UTC](https://discuss.elastic.co/t/elasticsearch-head-chrome-extension/155772 "2018-11-07T22:42:50Z")

</div>

Hi, Can somebody tell me where i can fine some guide or examples on how to use elasticsearch head on chrome. thank you !!

[Previous page](https://discuss.elastic.co/top.md?page=356&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=358&per_page=50&period=all)
