# Top **URL:** https://discuss.elastic.co/top.md?page=361&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 362 --- ## [ES design regarding duplicates across indexes](https://discuss.elastic.co/t/es-design-regarding-duplicates-across-indexes/117852)
**Author:** [@seanwang30](https://discuss.elastic.co/u/seanwang30)\ **Replies:** 8\ **Last updated:** [February 1, 2018, 8:23pm UTC](https://discuss.elastic.co/t/es-design-regarding-duplicates-across-indexes/117852 "2018-02-01T20:23:38Z")
Hi all: ES noob here. I'm using ES as our main storage but facing a dilemma. We store service data up to 36 hours, our first design is to make hourly indices, so the whole index could be deleted once it's expired. Each … --- ## [Move data from RRD(Round Robin Database) to Elasticsearch](https://discuss.elastic.co/t/move-data-from-rrd-round-robin-database-to-elasticsearch/63929)
**Author:** [@cb2015](https://discuss.elastic.co/u/cb2015)\ **Replies:** 3\ **Last updated:** [March 30, 2017, 2:00pm UTC](https://discuss.elastic.co/t/move-data-from-rrd-round-robin-database-to-elasticsearch/63929 "2017-03-30T14:00:53Z")
Hi Everyone, So I have been using Nagios/RRD for many years to collect/store data about my machines. I would like to be able to move some of this data over to elasticsearch so that I can do some analysis on it. Does… --- ## [Pipeline stalls and errors in logstash](https://discuss.elastic.co/t/pipeline-stalls-and-errors-in-logstash/41256)
**Author:** [@dan.henning](https://discuss.elastic.co/u/dan.henning)\ **Replies:** 3\ **Last updated:** [March 19, 2016, 4:59am UTC](https://discuss.elastic.co/t/pipeline-stalls-and-errors-in-logstash/41256 "2016-03-19T04:59:41Z")
We are currently testing out logstash, elastic search, kibana and filebeat to log some IIS log files, each thing can talk to each other correctly but when processing the logs in logstash to send to elastic search we get … --- ## [SOAP Request 415 error](https://discuss.elastic.co/t/soap-request-415-error/122877)
**Author:** [@rams134](https://discuss.elastic.co/u/rams134)\ **Replies:** 1\ **Last updated:** [March 8, 2018, 9:58pm UTC](https://discuss.elastic.co/t/soap-request-415-error/122877 "2018-03-08T21:58:57Z")
Hi , I am trying heartbeat feature for sending the soap request to listen the custom response. I am getting 415 exception. Kindly help . both .svc and ?wsl url's are showing same error. when i am running this wuth curl,… --- ## [How do I remove \_index, \_type, \_id and \_score from output?](https://discuss.elastic.co/t/how-do-i-remove--index--type--id-and--score-from-output/19601)
**Author:** [@Gerald\_DeConto](https://discuss.elastic.co/u/Gerald_DeConto)\ **Replies:** 3\ **Last updated:** [September 8, 2014, 2:02am UTC](https://discuss.elastic.co/t/how-do-i-remove--index--type--id-and--score-from-output/19601 "2014-09-08T02:02:47Z")
we process millions of search queries a day and are looking at adding elasticsearch to our toolbox However, I haven't found a way to turn off the following redundant fields from the output: \_index \_type \_… --- ## [Logstash not binding to port 5044](https://discuss.elastic.co/t/logstash-not-binding-to-port-5044/116557)
**Author:** [@JamesMcManus](https://discuss.elastic.co/u/JamesMcManus)\ **Replies:** 3\ **Last updated:** [January 25, 2018, 10:07am UTC](https://discuss.elastic.co/t/logstash-not-binding-to-port-5044/116557 "2018-01-25T10:07:01Z")
Hey everyone, Been fiddling around getting ELK stack running over the last couple days but have had issues getting other machines on the local network to send filebeat logs to logstash due to port 5044 not listening. I… --- ## [Returning 'null' or nothing from scripted fields](https://discuss.elastic.co/t/returning-null-or-nothing-from-scripted-fields/56476)
**Author:** [@AlexIoannides](https://discuss.elastic.co/u/AlexIoannides)\ **Replies:** 4\ **Last updated:** [August 1, 2016, 6:10pm UTC](https://discuss.elastic.co/t/returning-null-or-nothing-from-scripted-fields/56476 "2016-08-01T18:10:43Z")
Hello, I'd like to be able to return a 'null' from a scripted field defined in Kibana - e.g., my\_scripted\_field = doc\['field\_1'\].value != 0 ? doc\['field\_2'\].value : null The idea is that if field\_1 doesn't exist (==… --- ## [Haystack, the Search Relevance Conference, is coming to London on Oct 2nd 2018](https://discuss.elastic.co/t/haystack-the-search-relevance-conference-is-coming-to-london-on-oct-2nd-2018/145168)
**Author:** [@Charlie\_Hull](https://discuss.elastic.co/u/Charlie_Hull)\ **Replies:** 2\ **Last updated:** [September 17, 2018, 8:57am UTC](https://discuss.elastic.co/t/haystack-the-search-relevance-conference-is-coming-to-london-on-oct-2nd-2018/145168 "2018-09-17T08:57:39Z")
Hello, Following the successful (and sold out!) Haystack event in the USA earlier this year, we're bringing a special one-day Haystack conference to London on October 2nd: Speakers include Doug Turnbull, co-author o… --- ## [How to set my own field value as @timestamp](https://discuss.elastic.co/t/how-to-set-my-own-field-value-as-timestamp/77366)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 1\ **Last updated:** [March 3, 2017, 11:04pm UTC](https://discuss.elastic.co/t/how-to-set-my-own-field-value-as-timestamp/77366 "2017-03-03T23:04:28Z")
I am porting data from Mysql to Elasticsearch using logtash 5.2 I need to have a field named record\_time as the timestamp in Elasticsearch, I used date filter, and it does not work, and there is no warning. input { j… --- ## [Making API calls from Kibana in realtime](https://discuss.elastic.co/t/making-api-calls-from-kibana-in-realtime/227625)
**Author:** [@sminnakanti](https://discuss.elastic.co/u/sminnakanti)\ **Replies:** 6\ **Last updated:** [April 13, 2020, 2:27am UTC](https://discuss.elastic.co/t/making-api-calls-from-kibana-in-realtime/227625 "2020-04-13T02:27:20Z")
Hello, Hope everyone is doing great! This is Sri, i just started exploring ELK stack. I've following requirement, hope i can get inputs from the ELK experts on this. I'm working on the real time dashboard in Kibana. I… --- ## [Getting max value of a long field without losing precision](https://discuss.elastic.co/t/getting-max-value-of-a-long-field-without-losing-precision/92574)
**Author:** [@trejkaz](https://discuss.elastic.co/u/trejkaz)\ **Replies:** 6\ **Last updated:** [July 21, 2017, 6:08am UTC](https://discuss.elastic.co/t/getting-max-value-of-a-long-field-without-losing-precision/92574 "2017-07-21T06:08:07Z")
I want to get the maximum used ID from a field which stores incremental long IDs, but the max aggregation returns double. This has been brought up before... https://discuss.elastic.co/t/aggregation-sum-return-long-v… --- ## ["Too many open files in system" error from Elasticsearch](https://discuss.elastic.co/t/too-many-open-files-in-system-error-from-elasticsearch/193059)
**Author:** [@subha1](https://discuss.elastic.co/u/subha1)\ **Replies:** 1\ **Last updated:** [August 1, 2019, 10:15am UTC](https://discuss.elastic.co/t/too-many-open-files-in-system-error-from-elasticsearch/193059 "2019-08-01T10:15:35Z")
Hi, We are using Elastic search version 6.5.4 , and with 3 Master , 2 Data & 5 Client pods on a Kubernetes environment. We could see there are 155 unassigned shards , when checked , it shows the below error: \[root@cs… --- ## [Upgrade from 1.5 to 2.0: Pattern not defined](https://discuss.elastic.co/t/upgrade-from-1-5-to-2-0-pattern-not-defined/34312)
**Author:** [@LansK](https://discuss.elastic.co/u/LansK)\ **Replies:** 7\ **Last updated:** [July 29, 2016, 6:22pm UTC](https://discuss.elastic.co/t/upgrade-from-1-5-to-2-0-pattern-not-defined/34312 "2016-07-29T18:22:39Z")
I am upgrading from the 1.5 branch to 2.0. I am getting the following errors on startup: "Default settings used: Filter workers: 1 The error reported is: pattern %{HOST:thehost} not defined " I think %{HOST} is a … --- ## [Index\_not\_found\_exception](https://discuss.elastic.co/t/index-not-found-exception/91380)
**Author:** [@brian.sarandi](https://discuss.elastic.co/u/brian.sarandi)\ **Replies:** 1\ **Last updated:** [July 7, 2017, 7:13am UTC](https://discuss.elastic.co/t/index-not-found-exception/91380 "2017-07-07T07:13:27Z")
i am new to elasticsearch and i tried out the elastic cloud package with kibana i setup my filebeat in my windows 7 computer and i tried to load some log files to my elastic cluster but i got this error 2017-06-30T09… --- ## [Java agent](https://discuss.elastic.co/t/java-agent/110187)
**Author:** [@wassim.dhib](https://discuss.elastic.co/u/wassim.dhib)\ **Replies:** 8\ **Last updated:** [December 19, 2017, 6:52pm UTC](https://discuss.elastic.co/t/java-agent/110187 "2017-12-19T18:52:14Z")
Hi, I implemented a java agent which works very fine with the ELK Stack. The process is very simple : the agent writes performance traces on filesystem or over network a javascript agent (injected by the java agent) … --- ## [What is the best way to extract Syslog Fields with Beats Inputs](https://discuss.elastic.co/t/what-is-the-best-way-to-extract-syslog-fields-with-beats-inputs/44447)
**Author:** [@marius](https://discuss.elastic.co/u/marius)\ **Replies:** 3\ **Last updated:** [March 15, 2016, 8:15pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-extract-syslog-fields-with-beats-inputs/44447 "2016-03-15T20:15:24Z")
Hi, I setup ELK and Logstash with a Beats input: input { beats { port =\> 5044 ssl =\> false # ssl\_certificate =\> "/etc/pki/tls/certs/logstash-beats.crt" # ssl\_key =\> "/etc/pki/tls/private/logstash-beat… --- ## [Help using the Trim function](https://discuss.elastic.co/t/help-using-the-trim-function/163046)
**Author:** [@LoZio](https://discuss.elastic.co/u/LoZio)\ **Replies:** 7\ **Last updated:** [January 8, 2019, 7:42am UTC](https://discuss.elastic.co/t/help-using-the-trim-function/163046 "2019-01-08T07:42:01Z")
I thought it was a simple task, but I'm having a problem trying to trim a field. I have the City field in my index, it contains "MyCity", "blank\_spaceMyCity", "Mycityblank\_space" so I tried to apply the trim funcion in … --- ## [How to set indices.lifecycle.poll\_interval?](https://discuss.elastic.co/t/how-to-set-indices-lifecycle-poll-interval/289143)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 4\ **Last updated:** [November 15, 2021, 6:13pm UTC](https://discuss.elastic.co/t/how-to-set-indices-lifecycle-poll-interval/289143 "2021-11-15T18:13:36Z")
How to set indices.lifecycle.poll\_interval? Read that it a cluster level setting. Thanks and regards shini --- ## [Security and ACLs](https://discuss.elastic.co/t/security-and-acls/10945)
**Author:** [@Umit\_Seren](https://discuss.elastic.co/u/Umit_Seren)\ **Replies:** 3\ **Last updated:** [February 28, 2013, 3:46pm UTC](https://discuss.elastic.co/t/security-and-acls/10945 "2013-02-28T15:46:07Z")
My question is conceptually rather than technically. Let's assume following: - I have a PostgreSQL database that contains the data of my web-application. - I use the JDBC River to sync selected documents betw… --- ## [Filebeat and Timezones](https://discuss.elastic.co/t/filebeat-and-timezones/40168)
**Author:** [@yammy](https://discuss.elastic.co/u/yammy)\ **Replies:** 4\ **Last updated:** [January 27, 2016, 10:46pm UTC](https://discuss.elastic.co/t/filebeat-and-timezones/40168 "2016-01-27T22:46:53Z")
Full disclosure, just getting started with my first ELK stack setup... When I use Filebeat to forward syslogs I have some hosts in UTC and some in EST. Once they go into Elastic Search it assumes everything is in UTC … --- ## [Elasticsearchへのアクセス確認について](https://discuss.elastic.co/t/elasticsearch/81948)
**Author:** [@yossy](https://discuss.elastic.co/u/yossy)\ **Replies:** 4\ **Last updated:** [April 18, 2017, 6:00am UTC](https://discuss.elastic.co/t/elasticsearch/81948 "2017-04-18T06:00:38Z")
動作検証をする上で、Elasticsearch（各ノード）へのアクセスをログから確認したいと思っております。 ログの出力先ディレトリに、"クラスタ名\_access.log"というファイルがありますので、出力自体は可能だと考えておりますが、コンフィグでどのパラメータを設定すれば出力されるでしょうか？ また、パフォーマンステスト時に各ノード毎のアクセス数も確認したいのですが、こちらはKibanaで確認可能でしょうか？ --- ## [Calculate time difference between 2 lines in log file](https://discuss.elastic.co/t/calculate-time-difference-between-2-lines-in-log-file/173684)
**Author:** [@Thibaut\_M](https://discuss.elastic.co/u/Thibaut_M)\ **Replies:** 5\ **Last updated:** [March 26, 2019, 2:10pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-2-lines-in-log-file/173684 "2019-03-26T14:10:46Z")
Hi everyone, I retrived a log file that look like this : 2019-03-07 04:35:57.421 19EC | INFO ROOT: (Netto2600-Brutto2608)AllocatedBlockCount=0 2019-03-07 04:35:57.421 19EC | INFO ROOT: … --- ## [Elasticsearch on MacOS, not able to find plugin command](https://discuss.elastic.co/t/elasticsearch-on-macos-not-able-to-find-plugin-command/41098)
**Author:** [@vzgfu](https://discuss.elastic.co/u/vzgfu)\ **Replies:** 3\ **Last updated:** [May 25, 2017, 2:33pm UTC](https://discuss.elastic.co/t/elasticsearch-on-macos-not-able-to-find-plugin-command/41098 "2017-05-25T14:33:42Z")
I installed elasticsearch on my MacOS by using home-brew brew update brew install elasticsearch After installation, I checked the installed path cd /usr/local/Cellar/elasticsearch/2.2.0\_1/bin But I only find one co… --- ## [Kibana stuck on Elastic loading screen on Chrome](https://discuss.elastic.co/t/kibana-stuck-on-elastic-loading-screen-on-chrome/240504)
**Author:** [@NoNu](https://discuss.elastic.co/u/NoNu)\ **Replies:** 3\ **Last updated:** [July 26, 2020, 10:25pm UTC](https://discuss.elastic.co/t/kibana-stuck-on-elastic-loading-screen-on-chrome/240504 "2020-07-26T22:25:40Z")
I updated Chrome and now I can log into Kibana, but right after it gets stuck on the "Loading Elastic" screen. Chrome console has these errors: kibana#/discover:342 Refused to execute inline script because it violates t… --- ## [How to read .gz file using filebeat?](https://discuss.elastic.co/t/how-to-read-gz-file-using-filebeat/141754)
**Author:** [@sudhish\_op](https://discuss.elastic.co/u/sudhish_op)\ **Replies:** 4\ **Last updated:** [July 27, 2018, 3:21pm UTC](https://discuss.elastic.co/t/how-to-read-gz-file-using-filebeat/141754 "2018-07-27T15:21:11Z")
My setup is working fine and able to read log files. But not able to load .gz files . Please assist. --- ## [Elasticsearch substr()](https://discuss.elastic.co/t/elasticsearch-substr/67792)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 4\ **Last updated:** [December 2, 2016, 11:34am UTC](https://discuss.elastic.co/t/elasticsearch-substr/67792 "2016-12-02T11:34:26Z")
Hi, I want to use substr function for my field 'AlimTarihi' for example ALimTarihi = 2009-01-02 I want to take onlly ALimTarihi = 2009 My codes: GET titubb56k/ihale/\_search { "size":0, "query… --- ## [File beat multiline is not working for XML type of files](https://discuss.elastic.co/t/file-beat-multiline-is-not-working-for-xml-type-of-files/45067)
**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\ **Replies:** 8\ **Last updated:** [April 1, 2016, 11:37am UTC](https://discuss.elastic.co/t/file-beat-multiline-is-not-working-for-xml-type-of-files/45067 "2016-04-01T11:37:40Z")
Hi, I am using logstash 2.2.1 ,logstash-input beats-2.1.3 and filebeat 1.1.2 . I have some XML type of log files. I have written beats config. I am facing the following issue Issue 1: The xml log file multiline event… --- ## [2.1.0: NullPointerException, not sure where to start](https://discuss.elastic.co/t/2-1-0-nullpointerexception-not-sure-where-to-start/37419)
**Author:** [@cpsubrian](https://discuss.elastic.co/u/cpsubrian)\ **Replies:** 5\ **Last updated:** [December 18, 2015, 4:52pm UTC](https://discuss.elastic.co/t/2-1-0-nullpointerexception-not-sure-where-to-start/37419 "2015-12-18T16:52:52Z")
With elasticsearch 2.1.0 I'm getting the following errors across 4 of the 5 shards with a pretty simple search. From the error messaging alone I'm not even sure where to start. Command: curl -XGET http://localhost:… --- ## [Proper RegEx with Mutate\>GSub](https://discuss.elastic.co/t/proper-regex-with-mutate-gsub/229679)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 5:25pm UTC](https://discuss.elastic.co/t/proper-regex-with-mutate-gsub/229679 "2020-04-24T17:25:30Z")
Pulling what's left of my hair out trying to get this field to properly display. I have log data coming in from a firewall in key=value format. I'm using kv to parse all the fields out and I'm left with a field called \[… --- ## [How to sub-aggregate an array that contains another field?](https://discuss.elastic.co/t/how-to-sub-aggregate-an-array-that-contains-another-field/152155)
**Author:** [@veqryn](https://discuss.elastic.co/u/veqryn)\ **Replies:** 3\ **Last updated:** [October 13, 2018, 5:51pm UTC](https://discuss.elastic.co/t/how-to-sub-aggregate-an-array-that-contains-another-field/152155 "2018-10-13T17:51:02Z")
So I have data that looks roughly like this: { "tags": \[ "date=09/26/18", "member=Y", "type=newsletter", "type=call" \] } I am making use of the fields mapping to create two additional fields: tags.key tags.… --- ## [How to use multiple indexes on 5.4](https://discuss.elastic.co/t/how-to-use-multiple-indexes-on-5-4/90545)
**Author:** [@Lindsey](https://discuss.elastic.co/u/Lindsey)\ **Replies:** 3\ **Last updated:** [June 24, 2017, 11:38am UTC](https://discuss.elastic.co/t/how-to-use-multiple-indexes-on-5-4/90545 "2017-06-24T11:38:48Z")
Hello, My goal is to use multiple terms from two different indexes inside one graph. I was reading older posts from v4 and the best way to do this, was to rename the two indexes so they were similar and then use the wi… --- ## [Retrieve a specific field using Java API](https://discuss.elastic.co/t/retrieve-a-specific-field-using-java-api/6387)
**Author:** [@mp2893](https://discuss.elastic.co/u/mp2893)\ **Replies:** 5\ **Last updated:** [January 9, 2013, 11:26am UTC](https://discuss.elastic.co/t/retrieve-a-specific-field-using-java-api/6387 "2013-01-09T11:26:10Z")
Hi, I'm trying to retrieve a specific field of document using Java API. I am using the following code: ------------------------------------------------------------------------------------------------ GetResponse r… --- ## [How to set on x axis an time range by hour?](https://discuss.elastic.co/t/how-to-set-on-x-axis-an-time-range-by-hour/85257)
**Author:** [@erion](https://discuss.elastic.co/u/erion)\ **Replies:** 5\ **Last updated:** [May 29, 2017, 10:24am UTC](https://discuss.elastic.co/t/how-to-set-on-x-axis-an-time-range-by-hour/85257 "2017-05-29T10:24:27Z")
I want to set in interval by hour on axis x and a time range that count one month. i want to see two lines that show log in two different days in determinated hours .. this an example: on x axis an interval by hour but … --- ## [Java API - Update - Append to object array](https://discuss.elastic.co/t/java-api-update-append-to-object-array/11287)
**Author:** [@JayTee](https://discuss.elastic.co/u/JayTee)\ **Replies:** 5\ **Last updated:** [March 26, 2013, 11:17am UTC](https://discuss.elastic.co/t/java-api-update-append-to-object-array/11287 "2013-03-26T11:17:27Z")
Hello, I have some code in Java that adds a new document as follows... {"types":\[{"label":"key","value":"value"}\],"name":"Foobar"} This uses... IndexResponse response = client.prepareIndex("typesindex", "type") .set… --- ## [Error while getting memory usage: error retrieving process stats](https://discuss.elastic.co/t/error-while-getting-memory-usage-error-retrieving-process-stats/120638)
**Author:** [@muhammadrehansaeed](https://discuss.elastic.co/u/muhammadrehansaeed)\ **Replies:** 7\ **Last updated:** [February 21, 2018, 2:34pm UTC](https://discuss.elastic.co/t/error-while-getting-memory-usage-error-retrieving-process-stats/120638 "2018-02-21T14:34:39Z")
I get the following logs while running Metricbeat 6.2.1 on Docker Swarm. I am hosted on Docker for AWS which uses Moby Linux and that is based on Alpine if that helps. Is this a supported scenario? 2018-02-20T12:12:03.1… --- ## [Queries in Watcher](https://discuss.elastic.co/t/queries-in-watcher/33607)
**Author:** [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)\ **Replies:** 7\ **Last updated:** [November 12, 2015, 4:55pm UTC](https://discuss.elastic.co/t/queries-in-watcher/33607 "2015-11-12T16:55:01Z")
Hi there! I'm not yet well versed in Watcher and I was wondering something. If you look at Kibana you can query similar to SQL which grabs the specific data you need from Elasticsearch. For example: host = 178.62.17… --- ## [Dynamic date files input to Filebeat](https://discuss.elastic.co/t/dynamic-date-files-input-to-filebeat/188127)
**Author:** [@Dibyakanta](https://discuss.elastic.co/u/Dibyakanta)\ **Replies:** 7\ **Last updated:** [July 1, 2019, 4:20pm UTC](https://discuss.elastic.co/t/dynamic-date-files-input-to-filebeat/188127 "2019-07-01T16:20:07Z")
Hi, I need to exlude some log files which were created a day ago. Or else in simple words, I need to include only today's log file in Filebeat. In my path, I have log files named as user\_log.2019.06.29 and in that folde… --- ## [Logstash 特定データのみをフィールドに指定したい](https://discuss.elastic.co/t/logstash/200780)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [September 26, 2019, 12:20am UTC](https://discuss.elastic.co/t/logstash/200780 "2019-09-26T00:20:32Z")
Logstashのfilter句にて、 下記inputデータの「192.168.0.224」のみを「"client\_address" =\> "192.168.0.224"」のようにフィールドを指定したいです。 ▼inputデータ 1286536308.779 180 192.168.0.224 TCP\_MISS/200 411 GET http://liveupdate.symantecliveupdate.com/mini… --- ## [Caused by: java.lang.NoSuchFieldError: LUCENE\_4\_0\_0](https://discuss.elastic.co/t/caused-by-java-lang-nosuchfielderror-lucene-4-0-0/108517)
**Author:** [@vidyapati](https://discuss.elastic.co/u/vidyapati)\ **Replies:** 6\ **Last updated:** [November 21, 2017, 9:04am UTC](https://discuss.elastic.co/t/caused-by-java-lang-nosuchfielderror-lucene-4-0-0/108517 "2017-11-21T09:04:04Z")
Hi All, I am getting below error while using elastic search Caused by: java.lang.NoSuchFieldError: LUCENE\_4\_0\_0 I have below in POM \ \org.elasticsearch.client\ \transport\ **Author:** [@eddie1](https://discuss.elastic.co/u/eddie1)\ **Replies:** 3\ **Last updated:** [October 6, 2017, 9:08pm UTC](https://discuss.elastic.co/t/filebeat-apache2-configuration-help/100422 "2017-10-06T21:08:44Z") Hi, I'm new to the ELK stack and am trying to figure out how to configure filebeat+apache 2. I have the system doing some basic work such as syslog going from filebeat-\>logstash-\>ES, but I'm finding the documentation … --- ## [Trouble getting an new node added to a cluster](https://discuss.elastic.co/t/trouble-getting-an-new-node-added-to-a-cluster/234814)
**Author:** [@Andreas\_Falk](https://discuss.elastic.co/u/Andreas_Falk)\ **Replies:** 2\ **Last updated:** [June 8, 2020, 7:16pm UTC](https://discuss.elastic.co/t/trouble-getting-an-new-node-added-to-a-cluster/234814 "2020-06-08T19:16:00Z")
Hi, When trying to add the new node to the cluster it fails on bootstrapcheck. \[2020-05-28T20:05:45,054\]\[INFO \]\[o.e.t.TransportService \] \[log04\] publish\_address {192.168.2.194:9300}, bound\_addresses {192.168.2.194:93… --- ## [Sending log from filebeat to logstash error: Failed to publish events caused by: lumberjack protocol error](https://discuss.elastic.co/t/sending-log-from-filebeat-to-logstash-error-failed-to-publish-events-caused-by-lumberjack-protocol-error/204332)
**Author:** [@Sam](https://discuss.elastic.co/u/Sam)\ **Replies:** 5\ **Last updated:** [October 20, 2019, 2:35pm UTC](https://discuss.elastic.co/t/sending-log-from-filebeat-to-logstash-error-failed-to-publish-events-caused-by-lumberjack-protocol-error/204332 "2019-10-20T14:35:15Z")
Halo guys I'm new with ELK Stack I try to send IIS log from FileBeat to Logstash and further but it doesn't work. I get an error Failed to publish events caused by: lumberjack protocol error when start FileBeat (Logsta… --- ## [Geoip index mapping defaults to using logstash-\*](https://discuss.elastic.co/t/geoip-index-mapping-defaults-to-using-logstash/58981)
**Author:** [@christopher\_pax](https://discuss.elastic.co/u/christopher_pax)\ **Replies:** 7\ **Last updated:** [May 25, 2017, 9:39pm UTC](https://discuss.elastic.co/t/geoip-index-mapping-defaults-to-using-logstash/58981 "2017-05-25T21:39:48Z")
It seemes that when useing the geoip filter. It creates a mapping to convert the location to a geo\_point. But only for index's called logstash-\*. But I named my index's apache-\*. I have been trying to utilize the "temp… --- ## [Fatal port of kibana is already used](https://discuss.elastic.co/t/fatal-port-of-kibana-is-already-used/94611)
**Author:** [@marwa](https://discuss.elastic.co/u/marwa)\ **Replies:** 3\ **Last updated:** [July 26, 2017, 10:05am UTC](https://discuss.elastic.co/t/fatal-port-of-kibana-is-already-used/94611 "2017-07-26T10:05:43Z")
\[fatal\] Port 5601 is already in use. Another instance of Kibana may be running! this always happens with me when running kibana , there is an other instance that is running i tryed to kill the processus with kill -9 PID… --- ## [Adding fields to configuration file](https://discuss.elastic.co/t/adding-fields-to-configuration-file/215110)
**Author:** [@amin224](https://discuss.elastic.co/u/amin224)\ **Replies:** 7\ **Last updated:** [January 15, 2020, 11:30am UTC](https://discuss.elastic.co/t/adding-fields-to-configuration-file/215110 "2020-01-15T11:30:28Z")
Hi, I am running multiple java applications and creating logging files for each one, so i decided to use elastic stack for Centralised Log Management. My question is how can i add port and IP address fields to my index … --- ## [Logstash java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/logstash-java-lang-outofmemoryerror-java-heap-space/118708)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 3\ **Last updated:** [February 8, 2018, 5:05pm UTC](https://discuss.elastic.co/t/logstash-java-lang-outofmemoryerror-java-heap-space/118708 "2018-02-08T17:05:19Z")
I recently upgraded to logstash 6.1.3 and I am now getting Java Heap Space Out of Memory errors. I have 32 Gb of memory and I gave the jvm 16Gb. I did not have this error on the previous version of 6.0.1. Is this a bug… --- ## [Issues with logstash opening ports](https://discuss.elastic.co/t/issues-with-logstash-opening-ports/108250)
**Author:** [@1ntgr](https://discuss.elastic.co/u/1ntgr)\ **Replies:** 3\ **Last updated:** [November 20, 2017, 7:08pm UTC](https://discuss.elastic.co/t/issues-with-logstash-opening-ports/108250 "2017-11-20T19:08:54Z")
Hi everyone, I've done a bit of digging, but have not had much success. I am using v5.6.4 of ELK 1ntgr@elk:~$ /usr/share/logstash/bin/logstash --version logstash 5.6.4 1ntgr@elk:~$ /usr/share/kibana/bin/kibana --ver… --- ## [Merging Two Indexes](https://discuss.elastic.co/t/merging-two-indexes/8745)
**Author:** [@Sumit\_Guptaa](https://discuss.elastic.co/u/Sumit_Guptaa)\ **Replies:** 2\ **Last updated:** [August 15, 2012, 12:35pm UTC](https://discuss.elastic.co/t/merging-two-indexes/8745 "2012-08-15T12:35:32Z")
Hi all, Can anybody tell me how we can merge two indicies..is there any mechanism in ES for merging index ....any help would be highly appreciated....Thanx first index=\> {"message":"abc"} {"message""def"… --- ## [Embed Elastic Map in Webpage](https://discuss.elastic.co/t/embed-elastic-map-in-webpage/232577)
**Author:** [@Stimmot](https://discuss.elastic.co/u/Stimmot)\ **Replies:** 1\ **Last updated:** [May 14, 2020, 9:08am UTC](https://discuss.elastic.co/t/embed-elastic-map-in-webpage/232577 "2020-05-14T09:08:34Z")
Hey guys, I would like to embed a snippet of an Elastic Map into another website. Basically it should look something like an embedded google map snippet as seen here. Does anyone know if that's possible? Plus: Is there… --- ## [Multiple Kibana instance on the same server](https://discuss.elastic.co/t/multiple-kibana-instance-on-the-same-server/27522)
**Author:** [@theazyfa](https://discuss.elastic.co/u/theazyfa)\ **Replies:** 7\ **Last updated:** [September 26, 2016, 4:39am UTC](https://discuss.elastic.co/t/multiple-kibana-instance-on-the-same-server/27522 "2016-09-26T04:39:45Z")
Hello all, We have 3/4 applications generating data for Kibana. Each application have at least one dashboard with 10/12 visualizations... So, we have 4-6 Dashboards and a lot of visualization (more then 60) and it's v… [Previous page](https://discuss.elastic.co/top.md?page=360&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=362&per_page=50&period=all)