# Top

**URL:** https://discuss.elastic.co/top.md?page=362&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 363

---

## [U-umlaut search --\> indexing user name müller , search fails for müller but success for muller](https://discuss.elastic.co/t/u-umlaut-search-indexing-user-name-muller-search-fails-for-muller-but-success-for-muller/60317)

<div class="topic-metadata">

**Author:** [@rmsnandha](https://discuss.elastic.co/u/rmsnandha)\
**Replies:** 5\
**Last updated:** [September 16, 2016, 2:29pm UTC](https://discuss.elastic.co/t/u-umlaut-search-indexing-user-name-muller-search-fails-for-muller-but-success-for-muller/60317 "2016-09-16T14:29:47Z")

</div>

indexing user name müller , i am able to search by query muller , but when i query for müller .. it's not returning anything .. could you please help me on this below is my analyzer configuration. { "s…

---

## [Packetbeat - no way to discover failed TCP connection attempts](https://discuss.elastic.co/t/packetbeat-no-way-to-discover-failed-tcp-connection-attempts/72106)

<div class="topic-metadata">

**Author:** [@FlorinAndrei](https://discuss.elastic.co/u/FlorinAndrei)\
**Replies:** 6\
**Last updated:** [January 24, 2017, 2:08pm UTC](https://discuss.elastic.co/t/packetbeat-no-way-to-discover-failed-tcp-connection-attempts/72106 "2017-01-24T14:08:33Z")

</div>

This is a basic task that could easily be done with tcpdump and I was hoping to do it with packetbeat as well. Let's say a process on the current instance is trying to connect to an external endpoint on port 443. This …

---

## [Java::JavaLang::IllegalStateException\` for \`PipelineAction::Create\<main\>](https://discuss.elastic.co/t/java-illegalstateexception-for-pipelineaction-create-main/270034)

<div class="topic-metadata">

**Author:** [@prajawalkp](https://discuss.elastic.co/u/prajawalkp)\
**Replies:** 3\
**Last updated:** [April 13, 2021, 5:42pm UTC](https://discuss.elastic.co/t/java-illegalstateexception-for-pipelineaction-create-main/270034 "2021-04-13T17:42:40Z")

</div>

Hii, I am new to logstash and using logstash to syncup mysql with elasticsearch. But I can't get through this error. Please help. It is urgent. Using JAVA\_HOME defined java: /Library/Java/JavaVirtualMachines/jdk-15.…

---

## [Concatenating array objects in elasticsearch transform aggregations](https://discuss.elastic.co/t/concatenating-array-objects-in-elasticsearch-transform-aggregations/289980)

<div class="topic-metadata">

**Author:** [@kbirk](https://discuss.elastic.co/u/kbirk)\
**Replies:** 2\
**Last updated:** [November 25, 2021, 2:42pm UTC](https://discuss.elastic.co/t/concatenating-array-objects-in-elasticsearch-transform-aggregations/289980 "2021-11-25T14:42:12Z")

</div>

I'm currently using an Elasticsearch transform in order to "merge" similar documents. It works very well, however I've run into an issue attempting to concatenate fields that contain an array of objects. For example, I…

---

## [What is search context?](https://discuss.elastic.co/t/what-is-search-context/74014)

<div class="topic-metadata">

**Author:** [@Utkarsh\_Pyne](https://discuss.elastic.co/u/Utkarsh_Pyne)\
**Replies:** 6\
**Last updated:** [February 6, 2017, 12:43pm UTC](https://discuss.elastic.co/t/what-is-search-context/74014 "2017-02-06T12:43:01Z")

</div>

What is search context and how and when is it created ? Is there a good number beyond which if the number of search contexts go, it can be alarming ?

---

## [ELK stuck in Read Only mode](https://discuss.elastic.co/t/elk-stuck-in-read-only-mode/153478)

<div class="topic-metadata">

**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\
**Replies:** 3\
**Last updated:** [October 24, 2018, 7:34am UTC](https://discuss.elastic.co/t/elk-stuck-in-read-only-mode/153478 "2018-10-24T07:34:39Z")

</div>

I am posting this in Kibana, but honestly not sure where the problem lies. Every piece is version 6.4.2. Stack was working fine. My stack is configured as Beats\>Logstash\>Kibana? Honestly new so I am not sure what rol…

---

## [Installing plugins via proxy doesn't work (anymore)](https://discuss.elastic.co/t/installing-plugins-via-proxy-doesnt-work-anymore/61901)

<div class="topic-metadata">

**Author:** [@Roland\_L](https://discuss.elastic.co/u/Roland_L)\
**Replies:** 8\
**Last updated:** [November 28, 2016, 11:52am UTC](https://discuss.elastic.co/t/installing-plugins-via-proxy-doesnt-work-anymore/61901 "2016-11-28T11:52:12Z")

</div>

Hi, so I've been at this for over an hour now and I'm getting really desperate. I want to install the "license" plugin in my ES (for Kibana Reporting), but I'm unable to install the plugin through the corporate proxy. …

---

## [\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch/194883)

<div class="topic-metadata">

**Author:** [@SCL\_ADMIN](https://discuss.elastic.co/u/SCL_ADMIN)\
**Replies:** 5\
**Last updated:** [August 13, 2019, 3:15pm UTC](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch/194883 "2019-08-13T15:15:57Z")

</div>

I had a really large logstash.log file which filled up the hdd I deleted the file and restarted the service now I I get this Aug 12 16:54:13 SCL-SIEM-01 logstash\[3096\]: \[2019-08-12T16:54:13,127\]\[WARN \]\[logstash.outputs…

---

## [How do I create an ElasticSearch filter on two nested objects so that the results only includes documents that match both conditions](https://discuss.elastic.co/t/how-do-i-create-an-elasticsearch-filter-on-two-nested-objects-so-that-the-results-only-includes-documents-that-match-both-conditions/206656)

<div class="topic-metadata">

**Author:** [@fitterweb](https://discuss.elastic.co/u/fitterweb)\
**Replies:** 5\
**Last updated:** [November 8, 2019, 4:34pm UTC](https://discuss.elastic.co/t/how-do-i-create-an-elasticsearch-filter-on-two-nested-objects-so-that-the-results-only-includes-documents-that-match-both-conditions/206656 "2019-11-08T16:34:07Z")

</div>

How do I create an ElasticSearch filter query on nested objects so that the results match both? I have documents that include nested objects like the following: { "objectNumber": "1", "nestedObjects": \[ { …

---

## [Search history in Elasticsearch](https://discuss.elastic.co/t/search-history-in-elasticsearch/28338)

<div class="topic-metadata">

**Author:** [@xam](https://discuss.elastic.co/u/xam)\
**Replies:** 3\
**Last updated:** [February 18, 2016, 9:50am UTC](https://discuss.elastic.co/t/search-history-in-elasticsearch/28338 "2016-02-18T09:50:10Z")

</div>

Hi, Have someone ever tried to implement a "search history" on top of Elasticsearch (or are there existing open source solutions)? In fact, what I want to do is to implement a component that will store the search histo…

---

## [How to extract my Search Query result to Desktop](https://discuss.elastic.co/t/how-to-extract-my-search-query-result-to-desktop/173879)

<div class="topic-metadata">

**Author:** [@samyo](https://discuss.elastic.co/u/samyo)\
**Replies:** 6\
**Last updated:** [March 26, 2019, 2:36pm UTC](https://discuss.elastic.co/t/how-to-extract-my-search-query-result-to-desktop/173879 "2019-03-26T14:36:25Z")

</div>

Hello Folks, Can Sombody help me , how can i get the result(responses ) of my Search Query wich i wrote on "Kibana Dev Tools Console" into Desktop (Something like extract the Query Result), Example, GET test-2019.03.1…

---

## [Logstash not receiving any Logs](https://discuss.elastic.co/t/logstash-not-receiving-any-logs/120661)

<div class="topic-metadata">

**Author:** [@vamshi\_krishna](https://discuss.elastic.co/u/vamshi_krishna)\
**Replies:** 8\
**Last updated:** [February 22, 2018, 4:28pm UTC](https://discuss.elastic.co/t/logstash-not-receiving-any-logs/120661 "2018-02-22T16:28:38Z")

</div>

Hello, I have installed and configured Filebeat in Wind River Linux 5.0.1.4. And I have installed and configured ELK in Ubuntu 16.04. I am trying to access syslog from Wind River. Everything seems fine and all four con…

---

## [Logstash 2.2 :sql\_last\_value](https://discuss.elastic.co/t/logstash-2-2-sql-last-value/41942)

<div class="topic-metadata">

**Author:** [@alainc](https://discuss.elastic.co/u/alainc)\
**Replies:** 1\
**Last updated:** [February 16, 2016, 10:35pm UTC](https://discuss.elastic.co/t/logstash-2-2-sql-last-value/41942 "2016-02-16T22:35:43Z")

</div>

hi my input jdbc filter is like that file: simple-out.conf input { jdbc { jdbc\_driver\_library =\> "C:/elastic/logstash-2.2.1/bin/ojdbc14.jar" jdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver" …

---

## [Logstash output send rate](https://discuss.elastic.co/t/logstash-output-send-rate/76277)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 8\
**Last updated:** [February 28, 2017, 11:37am UTC](https://discuss.elastic.co/t/logstash-output-send-rate/76277 "2017-02-28T11:37:04Z")

</div>

Hi Elastic Team, Does Logstash have a feature that allows us to set how many events are sent to remotes, for example outputted to Elasticsearch, for every particular time interval? What we are trying to do is somethi…

---

## [Top Hits Aggregation: Paging](https://discuss.elastic.co/t/top-hits-aggregation-paging/27418)

<div class="topic-metadata">

**Author:** [@drjz](https://discuss.elastic.co/u/drjz)\
**Replies:** 1\
**Last updated:** [August 14, 2015, 9:01pm UTC](https://discuss.elastic.co/t/top-hits-aggregation-paging/27418 "2015-08-14T21:01:29Z")

</div>

Is it possible apply paging on the Top Hits Aggregation? I quote from the reference documentation: The top hits returned in each bucket are the result of running a light mini-query based on the original main query. Th…

---

## [Sudden unexplained increase in system load and read operations resulting in very slow indexing](https://discuss.elastic.co/t/sudden-unexplained-increase-in-system-load-and-read-operations-resulting-in-very-slow-indexing/292456)

<div class="topic-metadata">

**Author:** [@dd76](https://discuss.elastic.co/u/dd76)\
**Replies:** 0\
**Last updated:** [December 20, 2021, 11:40am UTC](https://discuss.elastic.co/t/sudden-unexplained-increase-in-system-load-and-read-operations-resulting-in-very-slow-indexing/292456 "2021-12-20T11:40:23Z")

</div>

We are running Elasticsearch 7.12.0 and have recently seen system load and read operations suddenly increase significantly on one data node despite there being no change to the number of query/index operations being exec…

---

## [Not eligible for data streams because config contains one or more settings that are not compatible with data streams: {"index"=\>"logstash-%{+YYYY.MM.dd}"}](https://discuss.elastic.co/t/not-eligible-for-data-streams-because-config-contains-one-or-more-settings-that-are-not-compatible-with-data-streams-index-logstash-yyyy-mm-dd/343803)

<div class="topic-metadata">

**Author:** [@Dinoo](https://discuss.elastic.co/u/Dinoo)\
**Replies:** 7\
**Last updated:** [September 26, 2023, 7:13pm UTC](https://discuss.elastic.co/t/not-eligible-for-data-streams-because-config-contains-one-or-more-settings-that-are-not-compatible-with-data-streams-index-logstash-yyyy-mm-dd/343803 "2023-09-26T19:13:13Z")

</div>

Hi, I am working on the ELK stack using Docker compose. I am following this tutorial: Getting started with the Elastic Stack and Docker-Compose | Elastic Blog. Everything works except Logstash. When I run docker-compose …

---

## [How to divide two Y-Axis in Kibana?](https://discuss.elastic.co/t/how-to-divide-two-y-axis-in-kibana/122808)

<div class="topic-metadata">

**Author:** [@Feng\_Mi](https://discuss.elastic.co/u/Feng_Mi)\
**Replies:** 7\
**Last updated:** [March 18, 2018, 2:46pm UTC](https://discuss.elastic.co/t/how-to-divide-two-y-axis-in-kibana/122808 "2018-03-18T14:46:28Z")

</div>

\[kibana\_qa\] I want use a new Y-Axis to divide the yellow and blue Y-Axis.

---

## ["operation primary term \[1\] is too old (current \[2\])"](https://discuss.elastic.co/t/operation-primary-term-1-is-too-old-current-2/294459)

<div class="topic-metadata">

**Author:** [@noactivation](https://discuss.elastic.co/u/noactivation)\
**Replies:** 2\
**Last updated:** [January 18, 2022, 6:14pm UTC](https://discuss.elastic.co/t/operation-primary-term-1-is-too-old-current-2/294459 "2022-01-18T18:14:27Z")

</div>

I'm novice with Elasticsearch, looking at some issues today. The company subject matter expert is in a different timezone where it is well-past business hours on a Friday night. This doesn't seem critical, so I'm not goi…

---

## [Marvel not showing any data](https://discuss.elastic.co/t/marvel-not-showing-any-data/44975)

<div class="topic-metadata">

**Author:** [@noemie](https://discuss.elastic.co/u/noemie)\
**Replies:** 8\
**Last updated:** [March 22, 2016, 1:23pm UTC](https://discuss.elastic.co/t/marvel-not-showing-any-data/44975 "2016-03-22T13:23:03Z")

</div>

Hello, I have a problem with Marvel. I installed it on the same machine than Elasticsearch, Logstash and Kibana. I have a single instance of Elasticsearch running and the node is both master and data. But I have this m…

---

## [List All Watches](https://discuss.elastic.co/t/list-all-watches/83223)

<div class="topic-metadata">

**Author:** [@banderson](https://discuss.elastic.co/u/banderson)\
**Replies:** 2\
**Last updated:** [April 21, 2017, 5:31pm UTC](https://discuss.elastic.co/t/list-all-watches/83223 "2017-04-21T17:31:38Z")

</div>

Is there any way to list all watches? I thought it would be simple, but I can't find any way to do it. I get results from GET \_xpack/watcher/watch/\<watch id\> and can get the basic stats with GET \_xpack/watcher/stats. Whe…

---

## [Failed to put mappings on indices:cannot be changed from type \[float\] to \[long\]](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-cannot-be-changed-from-type-float-to-long/67230)

<div class="topic-metadata">

**Author:** [@compasses](https://discuss.elastic.co/u/compasses)\
**Replies:** 7\
**Last updated:** [November 28, 2016, 11:02am UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-cannot-be-changed-from-type-float-to-long/67230 "2016-11-28T11:02:51Z")

</div>

sometimes we got such exception on ES log :\[customFields.ext\_default\_UDF104547548283008\] cannot be changed from type \[float\] to \[long\]. And these field were from user input, the data can be float or long, why ES will rai…

---

## [Kibana and Nginx](https://discuss.elastic.co/t/kibana-and-nginx/31964)

<div class="topic-metadata">

**Author:** [@DocMAX](https://discuss.elastic.co/u/DocMAX)\
**Replies:** 8\
**Last updated:** [May 18, 2016, 12:20pm UTC](https://discuss.elastic.co/t/kibana-and-nginx/31964 "2016-05-18T12:20:51Z")

</div>

hi, i can't proxy my kibana server. my config is location /kibana { rewrite ^/kibana/?(.\*)$ /$1 break; proxy\_pass http://app-v:5601; } and when i enter http://router/kibana i get Not Found The requested URL…

---

## [Logstash convert string field to number](https://discuss.elastic.co/t/logstash-convert-string-field-to-number/112023)

<div class="topic-metadata">

**Author:** [@Ravikumar\_G](https://discuss.elastic.co/u/Ravikumar_G)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 1:56pm UTC](https://discuss.elastic.co/t/logstash-convert-string-field-to-number/112023 "2017-12-18T13:56:38Z")

</div>

Hi I'm trying to ingest durationUs=786 into numeric value in elasticsearch but no luck tried using mutate but the events still shows as string so any help would be great if \[type\] == "pump" { grok { match =\> { "mess…

---

## [Import Json file by using Sense Interface](https://discuss.elastic.co/t/import-json-file-by-using-sense-interface/48398)

<div class="topic-metadata">

**Author:** [@saba\_soltani](https://discuss.elastic.co/u/saba_soltani)\
**Replies:** 5\
**Last updated:** [April 27, 2016, 5:34am UTC](https://discuss.elastic.co/t/import-json-file-by-using-sense-interface/48398 "2016-04-27T05:34:38Z")

</div>

Hi I'm new in elasticsearch. I have created a new index and defined its mapping . I want to import a json file from my computer into elasticsearch by using sense in order to analyze it in kibaba. How can I do it? Th…

---

## [Json\_parse\_exception - Unexpected character (''' (code 39)): was expecting double-quote to start field name](https://discuss.elastic.co/t/json-parse-exception-unexpected-character-code-39-was-expecting-double-quote-to-start-field-name/174284)

<div class="topic-metadata">

**Author:** [@waqashamid](https://discuss.elastic.co/u/waqashamid)\
**Replies:** 1\
**Last updated:** [April 8, 2019, 1:52am UTC](https://discuss.elastic.co/t/json-parse-exception-unexpected-character-code-39-was-expecting-double-quote-to-start-field-name/174284 "2019-04-08T01:52:25Z")

</div>

I have a curl request which is: curl -XGET "http://localhost:9200/\_search" -H 'Content-Type: application/json' -d' { "query": { "range": { "created": { "gte": "2016-01-01", "lte": "2018-01-01", "format": "yyyy-MM-dd" } …

---

## [Logstash is affected by Apache Log4j2 2.17.0 Vulnerability CVE-2021-44832?](https://discuss.elastic.co/t/logstash-is-affected-by-apache-log4j2-2-17-0-vulnerability-cve-2021-44832/293162)

<div class="topic-metadata">

**Author:** [@swxEmily](https://discuss.elastic.co/u/swxEmily)\
**Replies:** 3\
**Last updated:** [January 6, 2022, 2:08am UTC](https://discuss.elastic.co/t/logstash-is-affected-by-apache-log4j2-2-17-0-vulnerability-cve-2021-44832/293162 "2022-01-06T02:08:51Z")

</div>

Apache Log4j2 2.17.0 report a new Vulnerability CVE-2021-44832, is Logstash affected or not?

---

## [JNA temporary directory '/tmp' is not writable](https://discuss.elastic.co/t/jna-temporary-directory-tmp-is-not-writable/143413)

<div class="topic-metadata">

**Author:** [@robegome](https://discuss.elastic.co/u/robegome)\
**Replies:** 4\
**Last updated:** [August 9, 2018, 8:21pm UTC](https://discuss.elastic.co/t/jna-temporary-directory-tmp-is-not-writable/143413 "2018-08-09T20:21:18Z")

</div>

I am train to use this YML in a Oracle Container Cloud Service: version: 2 services: \_ elasticsearch:\_ \_ image: 'docker.elastic.co/elasticsearch/elasticsearch:6.3.2'\_ \_ ports:\_ \_ - '9200:9200/tcp'\_ \_ …

---

## [Accessing field of JSON Input](https://discuss.elastic.co/t/accessing-field-of-json-input/56068)

<div class="topic-metadata">

**Author:** [@Daniel\_Tebernum](https://discuss.elastic.co/u/Daniel_Tebernum)\
**Replies:** 2\
**Last updated:** [July 24, 2016, 10:36am UTC](https://discuss.elastic.co/t/accessing-field-of-json-input/56068 "2016-07-24T10:36:17Z")

</div>

Hello! I have a problem in accessing a json field. I've tried multiple solutions but had no success. What I've done: I have this config file: input { http { port =\> 5001 codec =\> "json" } } filter { …

---

## [Elastic-Agent installed, but not viewable in Security Hosts tab or logs in Kibana](https://discuss.elastic.co/t/elastic-agent-installed-but-not-viewable-in-security-hosts-tab-or-logs-in-kibana/298524)

<div class="topic-metadata">

**Author:** [@nodes](https://discuss.elastic.co/u/nodes)\
**Replies:** 8\
**Last updated:** [March 7, 2022, 5:31pm UTC](https://discuss.elastic.co/t/elastic-agent-installed-but-not-viewable-in-security-hosts-tab-or-logs-in-kibana/298524 "2022-03-07T17:31:19Z")

</div>

Hi all - So I've recently got the Elastic Stack setup and running. Decided to go install the Fleet Server, and then install a handful of Elastic-Agents on Windows Server(s) to gather some logs and metrics. From the lo…

---

## [Select fields for multiple outputs](https://discuss.elastic.co/t/select-fields-for-multiple-outputs/28531)

<div class="topic-metadata">

**Author:** [@dyermakov](https://discuss.elastic.co/u/dyermakov)\
**Replies:** 7\
**Last updated:** [September 4, 2015, 9:43am UTC](https://discuss.elastic.co/t/select-fields-for-multiple-outputs/28531 "2015-09-04T09:43:42Z")

</div>

Hi all! I have a config: input { rabbitmq { host =\> "x.x.x.x" port =\> 5672 vhost =\> "/" user =\> "guest" password =\> "guest" queue =\> "yyyy" durable =\> true codec =\> "es\_bulk" } } fil…

---

## [Logstash grok customized filter f5 big-ip](https://discuss.elastic.co/t/logstash-grok-customized-filter-f5-big-ip/79240)

<div class="topic-metadata">

**Author:** [@mostafa](https://discuss.elastic.co/u/mostafa)\
**Replies:** 5\
**Last updated:** [March 29, 2017, 11:49am UTC](https://discuss.elastic.co/t/logstash-grok-customized-filter-f5-big-ip/79240 "2017-03-29T11:49:57Z")

</div>

Dear All, I installed ELK to use it to log F5 big ip , it is receiving logs successfully and I can search within logs in kibana,search is working very fast compared to any syslog I worked with it. however, I cannot pa…

---

## [Loading Sample Dataset](https://discuss.elastic.co/t/loading-sample-dataset/80372)

<div class="topic-metadata">

**Author:** [@ozersubasi](https://discuss.elastic.co/u/ozersubasi)\
**Replies:** 6\
**Last updated:** [March 29, 2017, 8:25pm UTC](https://discuss.elastic.co/t/loading-sample-dataset/80372 "2017-03-29T20:25:51Z")

</div>

I have trouble for the load dataset. I have a json dataset and I wanna load on Elasticsearch 5.3 my json dataset is at C:/elk/elasticsearch/data/account.json I want to use this =\> and I use curl -H "Content-Type: appli…

---

## [Are there any C++ clients available for logstash?](https://discuss.elastic.co/t/are-there-any-c-clients-available-for-logstash/33645)

<div class="topic-metadata">

**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\
**Replies:** 3\
**Last updated:** [November 3, 2015, 3:31pm UTC](https://discuss.elastic.co/t/are-there-any-c-clients-available-for-logstash/33645 "2015-11-03T15:31:22Z")

</div>

I'm just now starting to look at what ELK can do for me. The code that I have to work with is C++ only. So the question now becomes: how do I get the data into logstash from C++? I found this posting about calling go f…

---

## [Error "String length exceeds the maximum length (5000000)" when transferring a large document to the attachment pipeline](https://discuss.elastic.co/t/error-string-length-exceeds-the-maximum-length-5000000-when-transferring-a-large-document-to-the-attachment-pipeline/345687)

<div class="topic-metadata">

**Author:** [@Vlad\_I](https://discuss.elastic.co/u/Vlad_I)\
**Replies:** 5\
**Last updated:** [November 8, 2023, 3:25am UTC](https://discuss.elastic.co/t/error-string-length-exceeds-the-maximum-length-5000000-when-transferring-a-large-document-to-the-attachment-pipeline/345687 "2023-11-08T03:25:44Z")

</div>

I'm using Elasticsearch 8.9.1 Using python, I send an 8MB xlsx document to the Elasticsearch index via attachment pipeline. But the error "String length (5046272) exceeds the maximum length (5000000)" appears. For exam…

---

## [Define Action in http output](https://discuss.elastic.co/t/define-action-in-http-output/59112)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 6\
**Last updated:** [August 28, 2016, 3:10pm UTC](https://discuss.elastic.co/t/define-action-in-http-output/59112 "2016-08-28T15:10:18Z")

</div>

How to define action in http output? Here is my http output file output { http { url =\> "https://xyz,com?WSDL" content\_type =\> "text/xml;charset=UTF-8" http\_method =\> "post" format =\> "message" messa…

---

## [Logstash Stuck at Pipeline Main Started](https://discuss.elastic.co/t/logstash-stuck-at-pipeline-main-started/56471)

<div class="topic-metadata">

**Author:** [@Deepak\_Patnaik](https://discuss.elastic.co/u/Deepak_Patnaik)\
**Replies:** 7\
**Last updated:** [July 27, 2016, 6:17am UTC](https://discuss.elastic.co/t/logstash-stuck-at-pipeline-main-started/56471 "2016-07-27T06:17:11Z")

</div>

Hi, I ran logstash to index an apache log file. It worked. After that I used an application log file. It also worked. Then all of a sudden when I try to re-execute the apache log file, logstash is stuck at 'Pipeline main…

---

## [Unable to lock JVM Memory](https://discuss.elastic.co/t/unable-to-lock-jvm-memory/33625)

<div class="topic-metadata">

**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\
**Replies:** 3\
**Last updated:** [November 3, 2015, 12:39pm UTC](https://discuss.elastic.co/t/unable-to-lock-jvm-memory/33625 "2015-11-03T12:39:14Z")

</div>

I updated to elasticsearch 2.0 and now I cannot restart the service: I get the following log messages. My yml config file has the bootstrap.mlockall: true line on it. \[2015-11-03 13:18:25,842\]\[WARN \]\[bootstrap …

---

## [Automated tests for Kibana UI](https://discuss.elastic.co/t/automated-tests-for-kibana-ui/28647)

<div class="topic-metadata">

**Author:** [@Koomar](https://discuss.elastic.co/u/Koomar)\
**Replies:** 6\
**Last updated:** [December 15, 2015, 5:56pm UTC](https://discuss.elastic.co/t/automated-tests-for-kibana-ui/28647 "2015-12-15T17:56:32Z")

</div>

Sup, guys. We are using Kibana in production to display several dashboards and we want to apply automated UI-testing for Kibana and I'm just wondering what tools are used by Elastic team to implement that kind of testing…

---

## [ReceiveTimeoutTransportException in logs](https://discuss.elastic.co/t/receivetimeouttransportexception-in-logs/19809)

<div class="topic-metadata">

**Author:** [@Abhishek\_Aggarwal](https://discuss.elastic.co/u/Abhishek_Aggarwal)\
**Replies:** 4\
**Last updated:** [September 16, 2014, 2:17pm UTC](https://discuss.elastic.co/t/receivetimeouttransportexception-in-logs/19809 "2014-09-16T14:17:55Z")

</div>

I am connecting to single instance of Elastic Search server remotely via Transport client. In my web application which makes use of Transport client, i am see following messages in the logs: I have checked, my n…

---

## [How to upgrade ES in Windows?](https://discuss.elastic.co/t/how-to-upgrade-es-in-windows/155271)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 2\
**Last updated:** [November 4, 2018, 1:20pm UTC](https://discuss.elastic.co/t/how-to-upgrade-es-in-windows/155271 "2018-11-04T13:20:34Z")

</div>

There is a manual https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-upgrade.html with some Disable shard allocation, Stop non-essential indexing, Shut down a single node... blah, blah, blah. But whe…

---

## [How many data nodes and master nodes in a cluster?](https://discuss.elastic.co/t/how-many-data-nodes-and-master-nodes-in-a-cluster/71158)

<div class="topic-metadata">

**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\
**Replies:** 3\
**Last updated:** [January 11, 2017, 12:08am UTC](https://discuss.elastic.co/t/how-many-data-nodes-and-master-nodes-in-a-cluster/71158 "2017-01-11T00:08:15Z")

</div>

How to decide the counts of master nodes and data nodes in cluaster

---

## [Painscript Script - cast String as Int?](https://discuss.elastic.co/t/painscript-script-cast-string-as-int/97034)

<div class="topic-metadata">

**Author:** [@daflookie](https://discuss.elastic.co/u/daflookie)\
**Replies:** 2\
**Last updated:** [August 15, 2017, 8:14pm UTC](https://discuss.elastic.co/t/painscript-script-cast-string-as-int/97034 "2017-08-15T20:14:20Z")

</div>

We have a mapping issue that will be addressed soon for a field that should be an int but is presently a string. All values in the index should cast cleanly. Anyhow, in a pinch I wanted to aggregate some data on the fi…

---

## [How to use the log tail feature in Kibana 6.5.4](https://discuss.elastic.co/t/how-to-use-the-log-tail-feature-in-kibana-6-5-4/163658)

<div class="topic-metadata">

**Author:** [@akhisar](https://discuss.elastic.co/u/akhisar)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 11:40am UTC](https://discuss.elastic.co/t/how-to-use-the-log-tail-feature-in-kibana-6-5-4/163658 "2019-01-29T11:40:58Z")

</div>

Hello All, I am using fluentd as my log shipper for kubernetes microservices. I have read that the new kibana version have the log tailing feature for viewing the changes in the logs. Can someone guide me how it can wor…

---

## [\[Kibana Table Visualisation\] Column: count how many times a field has a specific value](https://discuss.elastic.co/t/kibana-table-visualisation-column-count-how-many-times-a-field-has-a-specific-value/127294)

<div class="topic-metadata">

**Author:** [@schmittberger](https://discuss.elastic.co/u/schmittberger)\
**Replies:** 8\
**Last updated:** [April 19, 2018, 9:01am UTC](https://discuss.elastic.co/t/kibana-table-visualisation-column-count-how-many-times-a-field-has-a-specific-value/127294 "2018-04-19T09:01:01Z")

</div>

Hello, I am trying to create a table visualisation that shows statistics about REST-WS calls. Now I am stuck with showing a column where the number of calls that ended up in a specific result code (let's say 404) is show…

---

## [How to retrieve all the documents in which specified field has value?](https://discuss.elastic.co/t/how-to-retrieve-all-the-documents-in-which-specified-field-has-value/254)

<div class="topic-metadata">

**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\
**Replies:** 5\
**Last updated:** [May 7, 2015, 6:16am UTC](https://discuss.elastic.co/t/how-to-retrieve-all-the-documents-in-which-specified-field-has-value/254 "2015-05-07T06:16:15Z")

</div>

Solr provides this feature . field : \[ \* TO \* \] matches all documents with the field (from solr wiki http://wiki.apache.org/solr/SolrQuerySyntax)

---

## [Encountered a retryable error. Will Retry with exponential backoff code=\>400](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/197364)

<div class="topic-metadata">

**Author:** [@Thilak](https://discuss.elastic.co/u/Thilak)\
**Replies:** 4\
**Last updated:** [August 30, 2019, 4:39am UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/197364 "2019-08-30T04:39:21Z")

</div>

Hello I was using logstash 7.0.1 while running the below config file i was continuously getting retry-able error (400) input { elasticsearch { hosts =\> \["https://ful-elastic.com:443/\_bulk"\] user =\> "username" passw…

---

## [java.net.ConnectException: Connection Refused](https://discuss.elastic.co/t/java-net-connectexception-connection-refused/135803)

<div class="topic-metadata">

**Author:** [@anna10](https://discuss.elastic.co/u/anna10)\
**Replies:** 8\
**Last updated:** [June 14, 2018, 4:01pm UTC](https://discuss.elastic.co/t/java-net-connectexception-connection-refused/135803 "2018-06-14T16:01:08Z")

</div>

I am using the Java HighLevelRestClient to connect to my elastic instance hosted on AWS. I can make requests against the URL on postman and from my browser just fine, but when I use the client library I get a java.net.Co…

---

## [Parse JSON input into fields](https://discuss.elastic.co/t/parse-json-input-into-fields/120236)

<div class="topic-metadata">

**Author:** [@exceltior](https://discuss.elastic.co/u/exceltior)\
**Replies:** 4\
**Last updated:** [February 19, 2018, 11:14am UTC](https://discuss.elastic.co/t/parse-json-input-into-fields/120236 "2018-02-19T11:14:12Z")

</div>

Hi, I have been trying to turn a JSON blob keys, which I receive from input into data fields but I have been unsuccessful for some hours. JSON Blob fed to input { "timestamp": "\[16/Feb/2018:19:19:03 +0000\]", "@ver…

---

## [Logstash VS Filebeat](https://discuss.elastic.co/t/logstash-vs-filebeat/124988)

<div class="topic-metadata">

**Author:** [@Vigneshprasanna](https://discuss.elastic.co/u/Vigneshprasanna)\
**Replies:** 3\
**Last updated:** [March 22, 2018, 4:14am UTC](https://discuss.elastic.co/t/logstash-vs-filebeat/124988 "2018-03-22T04:14:37Z")

</div>

HI, I have a doubt why i should use a file beat ?? what is the use of file beat ?? when logstash is able to fetch to fetch the logs. let me describe a scenario i have an application running in the server (A) and its l…

[Previous page](https://discuss.elastic.co/top.md?page=361&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=363&per_page=50&period=all)
