# Top **URL:** https://discuss.elastic.co/top.md?page=364&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 365 --- ## [An unshaded joda-time classes in elasticsearch-2.1.1.jar](https://discuss.elastic.co/t/an-unshaded-joda-time-classes-in-elasticsearch-2-1-1-jar/38943)
**Author:** [@dynamicscope](https://discuss.elastic.co/u/dynamicscope)\ **Replies:** 6\ **Last updated:** [February 10, 2016, 7:42pm UTC](https://discuss.elastic.co/t/an-unshaded-joda-time-classes-in-elasticsearch-2-1-1-jar/38943 "2016-02-10T19:42:25Z")
It looks like there is an unshaded joda-time classes in elasticsearch-2.1.1.jar. The following is my build.sbt. name := "MyApp" version := "1.0" scalaVersion := "2.10.6" val sparkVers = "1.5.1" resolvers ++= Seq( "T… --- ## [What is bulk.rejected?](https://discuss.elastic.co/t/what-is-bulk-rejected/34341)
**Author:** [@Jeferson\_Martins](https://discuss.elastic.co/u/Jeferson_Martins)\ **Replies:** 7\ **Last updated:** [March 27, 2017, 1:25pm UTC](https://discuss.elastic.co/t/what-is-bulk-rejected/34341 "2017-03-27T13:25:28Z")
I found this URL but I don't understand bulk.rejected information: URL: localhost:9200/\_cat/thread\_pool?v&h=name,host,bulk.active,bulk.rejected,bulk.completed,bulk.queue,bulk.queueSize What is this and how can I res… --- ## [Elasticsearch vs IBM watson](https://discuss.elastic.co/t/elasticsearch-vs-ibm-watson/68887)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 1\ **Last updated:** [December 13, 2016, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-ibm-watson/68887 "2016-12-13T16:13:55Z")
Hi, Can anyone comment on ELK stack vs IBM watson? br, Sunil --- ## [Integrating SQL database with Kibana](https://discuss.elastic.co/t/integrating-sql-database-with-kibana/154972)
**Author:** [@karan\_gupta](https://discuss.elastic.co/u/karan_gupta)\ **Replies:** 1\ **Last updated:** [November 1, 2018, 7:39am UTC](https://discuss.elastic.co/t/integrating-sql-database-with-kibana/154972 "2018-11-01T07:39:16Z")
Want to connect SQL Database with Kibana. Kindly provide a Stepwise description. I have found this solution, which involves first connecting SQL with Elasticsearch. Any other solution?? --- ## [Dec 24th, 2022: \[FR\] Définissez vos propres facettes avec les sources Custom dans Workplace Search](https://discuss.elastic.co/t/dec-24th-2022-fr-definissez-vos-propres-facettes-avec-les-sources-custom-dans-workplace-search/318641)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [December 24, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-24th-2022-fr-definissez-vos-propres-facettes-avec-les-sources-custom-dans-workplace-search/318641 "2022-12-24T08:00:55Z")
This article is also available in english. Workplace Search fournit un moyen sympa et facile pour rechercher dans tous les documents que vous pouvez avoir dans votre entreprise/entité. Vous pouvez ainsi chercher dep… --- ## [Term vs match query on keyword field](https://discuss.elastic.co/t/term-vs-match-query-on-keyword-field/65892)
**Author:** [@davidbkemp](https://discuss.elastic.co/u/davidbkemp)\ **Replies:** 1\ **Last updated:** [November 13, 2016, 2:56am UTC](https://discuss.elastic.co/t/term-vs-match-query-on-keyword-field/65892 "2016-11-13T02:56:54Z")
I believe that a filter containing a term or match query on a keyword (not analysed) field should give the same results regardless of whether I use "term" or "match". Is one more efficient than the other? eg. is a term … --- ## [The instance rejected the connection](https://discuss.elastic.co/t/the-instance-rejected-the-connection/307722)
**Author:** [@Ventsislav\_Kyorovski](https://discuss.elastic.co/u/Ventsislav_Kyorovski)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 7:08am UTC](https://discuss.elastic.co/t/the-instance-rejected-the-connection/307722 "2022-06-21T07:08:54Z")
Hello everyone, We use Elastic Cloud hosted on GCP, our production cluster is 1.41 TB storage, 32 GB RAM, 8 vCPU split in 2 zones. We have a Java application which uses the ES as a database and yesterday, when we hit 2… --- ## [Encrypted Index](https://discuss.elastic.co/t/encrypted-index/51023)
**Author:** [@NiFiTweets](https://discuss.elastic.co/u/NiFiTweets)\ **Replies:** 6\ **Last updated:** [February 9, 2017, 4:45am UTC](https://discuss.elastic.co/t/encrypted-index/51023 "2017-02-09T04:45:55Z")
I have a scenario where i have confidential data saved as employee records/financial records shouldn't be accessible to one another, unless they have the key to access it. Can this be achieved with ES? 1)I am looking … --- ## [Extracting from Bind 9 log files](https://discuss.elastic.co/t/extracting-from-bind-9-log-files/75744)
**Author:** [@HeadScratcher](https://discuss.elastic.co/u/HeadScratcher)\ **Replies:** 7\ **Last updated:** [February 23, 2017, 11:35am UTC](https://discuss.elastic.co/t/extracting-from-bind-9-log-files/75744 "2017-02-23T11:35:24Z")
So I've been basically testing and experimenting with the whole ELK and i'm impressed with its versatility and already have a few things being displayed from various data sources which pleases my boss and my team quite n… --- ## [Why does translog phase during index recovery take so long?](https://discuss.elastic.co/t/why-does-translog-phase-during-index-recovery-take-so-long/55562)
**Author:** [@Melanie\_Zamora](https://discuss.elastic.co/u/Melanie_Zamora)\ **Replies:** 7\ **Last updated:** [July 25, 2016, 8:18pm UTC](https://discuss.elastic.co/t/why-does-translog-phase-during-index-recovery-take-so-long/55562 "2016-07-25T20:18:54Z")
Hi guys, Yesterday I had to restart my cluster. Afterwards, my one index, "atlas20160713" was stuck in INITIALIZING phase for hours. When I went to look at why it was taking so long, I saw that it was in the translog p… --- ## [Unknown key for a START\_ARRAY in \[query\]](https://discuss.elastic.co/t/unknown-key-for-a-start-array-in-query/173989)
**Author:** [@hughplatform](https://discuss.elastic.co/u/hughplatform)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 11:07pm UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-array-in-query/173989 "2019-03-26T23:07:00Z")
My GET request is returning an error response to my query. Can't figure out what's wrong with my DSL. Error: { "error": { "root\_cause": \[ { "type": "parsing\_exception", "reason": "Un… --- ## [Curator: Failed to verify all nodes have repository access](https://discuss.elastic.co/t/curator-failed-to-verify-all-nodes-have-repository-access/31910)
**Author:** [@pierre.vocat](https://discuss.elastic.co/u/pierre.vocat)\ **Replies:** 7\ **Last updated:** [October 15, 2015, 6:01pm UTC](https://discuss.elastic.co/t/curator-failed-to-verify-all-nodes-have-repository-access/31910 "2015-10-15T18:01:36Z")
Hello, I'm having a few issues when trying to create snapshots using curator. When I run the POST http://localhost:9200/\_snapshot/curator-production-dashboards/\_verify?pretty and get a list of nodes that are failing … --- ## [Metricbeat : Certificate signed by unknow authority](https://discuss.elastic.co/t/metricbeat-certificate-signed-by-unknow-authority/288391)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 3\ **Last updated:** [November 19, 2021, 1:51am UTC](https://discuss.elastic.co/t/metricbeat-certificate-signed-by-unknow-authority/288391 "2021-11-19T01:51:08Z")
Hi, I have a metricbeat on debian. It has been a week since the metricbeat service stopped sending data. The cause: ERROR \[esclientleg\] transport/logging.go:37 Error dialing x509: certificate signed by unknown authorit… --- ## ["failed shard on node... ...Data too large, data for \[\\] would be" only for 3 most recent .monitoring-es indices](https://discuss.elastic.co/t/failed-shard-on-node-data-too-large-data-for-transport-request-would-be-only-for-3-most-recent-monitoring-es-indices/218827)
**Author:** [@mattsdevop](https://discuss.elastic.co/u/mattsdevop)\ **Replies:** 8\ **Last updated:** [February 27, 2020, 7:40pm UTC](https://discuss.elastic.co/t/failed-shard-on-node-data-too-large-data-for-transport-request-would-be-only-for-3-most-recent-monitoring-es-indices/218827 "2020-02-27T19:40:41Z")
Looking for some direction with this unique issue in our production cluster. Hoping that @HenningAndersen @dadoonet @Christian\_Dahlqvist and/or @Armin\_Braun might be able to poke in here and offer feedback. Details/beha… --- ## [Change colors for Visualization charts](https://discuss.elastic.co/t/change-colors-for-visualization-charts/40249)
**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\ **Replies:** 2\ **Last updated:** [January 28, 2016, 7:12am UTC](https://discuss.elastic.co/t/change-colors-for-visualization-charts/40249 "2016-01-28T07:12:25Z")
Hi , Can I change the colors for Visualization charts? It wasn't possible to do it according to the answer you gave a few months ago. Is there a new version of Kibana with this option ? BR, Chen --- ## [Understanding "es.input.max.docs.per.partition" configuration](https://discuss.elastic.co/t/understanding-es-input-max-docs-per-partition-configuration/154045)
**Author:** [@Swapnil\_Nawale](https://discuss.elastic.co/u/Swapnil_Nawale)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 8:42pm UTC](https://discuss.elastic.co/t/understanding-es-input-max-docs-per-partition-configuration/154045 "2018-10-25T20:42:19Z")
I am using elasticsearch-hadoop 5.6.2 to read from the elasticsearch 5.6.1 indices and aliases with Spark 2.3. The ES indices are configured to have 5 primary and 1 replica shards. In my case, the RDD returned by JavaEs… --- ## [Formatting Timelion values as percentage](https://discuss.elastic.co/t/formatting-timelion-values-as-percentage/76074)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 4\ **Last updated:** [February 23, 2017, 9:13am UTC](https://discuss.elastic.co/t/formatting-timelion-values-as-percentage/76074 "2017-02-23T09:13:16Z")
I have a Timelion chart that is showing MetricBeat data, so I would like the system.cpu.user.pct for example, to be formatted as a percentage, not a 0-1 value. Is there any way to format values in Timelion? The docume… --- ## [Ignore a string from logstash from grok pattern](https://discuss.elastic.co/t/ignore-a-string-from-logstash-from-grok-pattern/209561)
**Author:** [@whoatemyjam](https://discuss.elastic.co/u/whoatemyjam)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 6:55pm UTC](https://discuss.elastic.co/t/ignore-a-string-from-logstash-from-grok-pattern/209561 "2019-11-26T18:55:22Z")
hi from a log file like this 2019-11-22 13:02:01 INFO sometext:999 \[applicationId=xxxxx\] \[version=xxxx\] \[hostname=hostname.domain\] \[logmessage=all went well\] can we remove the "sometext" and just show value of 999… --- ## [How to handle many indices?](https://discuss.elastic.co/t/how-to-handle-many-indices/102803)
**Author:** [@wyukawa](https://discuss.elastic.co/u/wyukawa)\ **Replies:** 7\ **Last updated:** [October 5, 2017, 10:37am UTC](https://discuss.elastic.co/t/how-to-handle-many-indices/102803 "2017-10-05T10:37:49Z")
Hello, I'm using Elasticsearch 5.6.2 which has 16 nodes and more than 800 indices and 20,000 shards. If I change configuration and restart elasticsearch, the following log continues for a long time(more than 2 hours) … --- ## [Help Using Python to Load Data into ES](https://discuss.elastic.co/t/help-using-python-to-load-data-into-es/198134)
**Author:** [@beezit](https://discuss.elastic.co/u/beezit)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 8:45pm UTC](https://discuss.elastic.co/t/help-using-python-to-load-data-into-es/198134 "2019-09-09T20:45:29Z")
I am having some issues getting the following python script to load data into ElasticSearch, can someone please guide me. Here is my python script. My goal is to use python to load this into ElastiSearch and also view … --- ## [Is there a way to get all visualizations in kibana using curl](https://discuss.elastic.co/t/is-there-a-way-to-get-all-visualizations-in-kibana-using-curl/100723)
**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\ **Replies:** 8\ **Last updated:** [September 25, 2017, 8:48pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-all-visualizations-in-kibana-using-curl/100723 "2017-09-25T20:48:50Z")
I need to get the list of all visualizations present in kibana. Is there a curl command to do that? For example, curl -v http://localhost:9200/.kibana/visualisation --- ## [Error 1053: “The service did not respond in a timely fashion” when attempting to start winlogbeat service with MSI package](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service-with-msi-package/255802)
**Author:** [@mackov83](https://discuss.elastic.co/u/mackov83)\ **Replies:** 4\ **Last updated:** [November 18, 2020, 3:08pm UTC](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service-with-msi-package/255802 "2020-11-18T15:08:05Z")
I have just started working with Winlogbeat as a forwarder to Graylog (Logstash). I was able to get this working perfectly fine with the .zip file. In order to simplify the deployment, I wanted to use the .msi file, and… --- ## [Can't visualize GeoIP locations on a coordinate map](https://discuss.elastic.co/t/cant-visualize-geoip-locations-on-a-coordinate-map/121934)
**Author:** [@timkoers](https://discuss.elastic.co/u/timkoers)\ **Replies:** 8\ **Last updated:** [March 27, 2018, 4:18pm UTC](https://discuss.elastic.co/t/cant-visualize-geoip-locations-on-a-coordinate-map/121934 "2018-03-27T16:18:01Z")
A few months ago I wanted to implement Bro-IDS with Kibana. Since I didn't know much about both, I followed this tutorial: https://medium.com/@utham/bro-elk-stack-integration-part-3-4fe02b5ff519 Everything worked, exce… --- ## [Impact of multiple concurrent scroll API on ElasticSearch](https://discuss.elastic.co/t/impact-of-multiple-concurrent-scroll-api-on-elasticsearch/206805)
**Author:** [@avinash9999](https://discuss.elastic.co/u/avinash9999)\ **Replies:** 2\ **Last updated:** [November 12, 2019, 12:01pm UTC](https://discuss.elastic.co/t/impact-of-multiple-concurrent-scroll-api-on-elasticsearch/206805 "2019-11-12T12:01:01Z")
I am using a large number of search API(using scroll = '1m') to search documents from it Average no of requests per minute = 500 Average time of hit = 100 ms Sometimes when hits are at peak I started getting error … --- ## [Listening on multiple (but not all) interfaces?](https://discuss.elastic.co/t/listening-on-multiple-but-not-all-interfaces/66139)
**Author:** [@gyre](https://discuss.elastic.co/u/gyre)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 12:17am UTC](https://discuss.elastic.co/t/listening-on-multiple-but-not-all-interfaces/66139 "2016-11-16T00:17:58Z")
Folks, is it possible to listen on more than one, but not all interfaces on Linux? I've tried naming the interfaces as an array... as a comma or space separated list. Neither works. At the moment, I'm running multipl… --- ## [Object mapping for \[data.value\] tried to parse field \[value\] as object, but found a concrete value](https://discuss.elastic.co/t/object-mapping-for-data-value-tried-to-parse-field-value-as-object-but-found-a-concrete-value/314867)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 2\ **Last updated:** [September 23, 2022, 5:44am UTC](https://discuss.elastic.co/t/object-mapping-for-data-value-tried-to-parse-field-value-as-object-but-found-a-concrete-value/314867 "2022-09-23T05:44:03Z")
Hi, I'm trying to read log files from s3 bucket, but for some log lines I'm getting the below error \[WARN \] 2022-09-21 10:43:42.756 \[\[main\]\>worker0\] elasticsearch - Could not index event to Elasticsearch. {:status=\>4… --- ## [Courier Fetch: 33 of 893 shards failed](https://discuss.elastic.co/t/courier-fetch-33-of-893-shards-failed/26412)
**Author:** [@daks](https://discuss.elastic.co/u/daks)\ **Replies:** 5\ **Last updated:** [July 29, 2015, 12:08pm UTC](https://discuss.elastic.co/t/courier-fetch-33-of-893-shards-failed/26412 "2015-07-29T12:08:55Z")
Hello, I'm running a small ElasticSearch cluster (2 data nodes, 1 master node with no data) in which I inject logs with Logstash. I use Kibana 4.0.1. I got daily indexes with 3 shards and 1 replica. All was fine unti… --- ## [ES 5.X - Primary and replica shards not in sync](https://discuss.elastic.co/t/es-5-x-primary-and-replica-shards-not-in-sync/101561)
**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\ **Replies:** 7\ **Last updated:** [October 4, 2017, 10:17am UTC](https://discuss.elastic.co/t/es-5-x-primary-and-replica-shards-not-in-sync/101561 "2017-10-04T10:17:19Z")
Hi, Recently we upgraded our Production clusters to ES 5.x We are observing in several cases where the number of documents in primary and secondary are out of sync. Especially, primary shards in this case had lesser do… --- ## [Disable/hide management plugin kibana 5](https://discuss.elastic.co/t/disable-hide-management-plugin-kibana-5/72763)
**Author:** [@oranciog](https://discuss.elastic.co/u/oranciog)\ **Replies:** 2\ **Last updated:** [January 26, 2017, 10:20am UTC](https://discuss.elastic.co/t/disable-hide-management-plugin-kibana-5/72763 "2017-01-26T10:20:59Z")
Hello! I want to disable/hide the management plugin from kibana 5. In Kibana 4, there was a variable from yml file called 'bundled\_plugin\_ids' that allowed to disable some plugins. But in kibana 5, I don't see any suc… --- ## [Logstash output to Prometheus](https://discuss.elastic.co/t/logstash-output-to-prometheus/300686)
**Author:** [@Stephy\_Jacob](https://discuss.elastic.co/u/Stephy_Jacob)\ **Replies:** 3\ **Last updated:** [March 27, 2022, 4:15pm UTC](https://discuss.elastic.co/t/logstash-output-to-prometheus/300686 "2022-03-27T16:15:15Z")
Hi, Could you please confirm whether we can send output of Logstash to Prometheus --- ## [Data Streams vs "Traditionally" Elastic Indexes](https://discuss.elastic.co/t/data-streams-vs-traditionally-elastic-indexes/313980)
**Author:** [@huowen](https://discuss.elastic.co/u/huowen)\ **Replies:** 6\ **Last updated:** [September 12, 2022, 3:03pm UTC](https://discuss.elastic.co/t/data-streams-vs-traditionally-elastic-indexes/313980 "2022-09-12T15:03:21Z")
I have recently upgraded my ELK stack and deployed in a kubernetes cluster and wanted to optimise the way I'm using it. Use Case: Many developer teams push their logs to a logstash pipeline which then outputs into elas… --- ## ["Failed to read or upgrade local state, exiting..." when starting ES instance](https://discuss.elastic.co/t/failed-to-read-or-upgrade-local-state-exiting-when-starting-es-instance/162330)
**Author:** [@Valentin\_Courtois](https://discuss.elastic.co/u/Valentin_Courtois)\ **Replies:** 5\ **Last updated:** [January 3, 2019, 10:53am UTC](https://discuss.elastic.co/t/failed-to-read-or-upgrade-local-state-exiting-when-starting-es-instance/162330 "2019-01-03T10:53:25Z")
Hello, I'm developing a kibana plugin, without my ES instance I'm completely dead. Yesterday ES instance would start normally, but today it doesn't work for some reason. Error logs are: \> \[2018-12-28T10:38:41,715\]\[ERR… --- ## [Exchange Message Tracking](https://discuss.elastic.co/t/exchange-message-tracking/89164)
**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\ **Replies:** 3\ **Last updated:** [June 13, 2017, 11:04am UTC](https://discuss.elastic.co/t/exchange-message-tracking/89164 "2017-06-13T11:04:02Z")
Hi, I've been following this tutorial to get Exchange Message Tracking logs into an ELK stack on Windows (https://elijahpaul.co.uk/analysing-exchange-2013-message-tracking-logs-using-elk-elasticsearch-logstash-kibana/). … --- ## [Kibana Upgrade to 7.8 : FATAL CLI ERROR Error: ENOENT: no such file or directory](https://discuss.elastic.co/t/kibana-upgrade-to-7-8-fatal-cli-error-error-enoent-no-such-file-or-directory/239885)
**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\ **Replies:** 6\ **Last updated:** [July 21, 2020, 7:52pm UTC](https://discuss.elastic.co/t/kibana-upgrade-to-7-8-fatal-cli-error-error-enoent-no-such-file-or-directory/239885 "2020-07-21T19:52:41Z")
Upgraded from 7.7 to 7.8 elasticsearch works fine but kibana shows me this error : FATAL CLI ERROR Error: ENOENT: no such file or directory, open '/usr/share/kibana/config/kibana.yml' at Object.openSync (fs.js:443:3) … --- ## [How can we modify the document's \_id?](https://discuss.elastic.co/t/how-can-we-modify-the-documents--id/15868)
**Author:** [@Ivan\_Ji](https://discuss.elastic.co/u/Ivan_Ji)\ **Replies:** 1\ **Last updated:** [February 18, 2014, 7:46pm UTC](https://discuss.elastic.co/t/how-can-we-modify-the-documents--id/15868 "2014-02-18T19:46:18Z")
Hi all, Assume I insert a new document with the desired value to be its \_id, which means I don't need to find the document first when I need to modify its field. But if the \_id is designed by the document's prope… --- ## [Reindex from remote (AWS Service)](https://discuss.elastic.co/t/reindex-from-remote-aws-service/82616)
**Author:** [@danilo.akamine](https://discuss.elastic.co/u/danilo.akamine)\ **Replies:** 7\ **Last updated:** [April 18, 2017, 3:33am UTC](https://discuss.elastic.co/t/reindex-from-remote-aws-service/82616 "2017-04-18T03:33:54Z")
I'm running a Amazon Elasticsearch Service 5.1 (last version available there). I'd like to reindex my documents from a remote server, but I can't do this on AWS because I can't modify the elasticsearch.yml file. AWS Elas… --- ## [Reindex vs Split index speeds](https://discuss.elastic.co/t/reindex-vs-split-index-speeds/320779)
**Author:** [@Daithi\_O\_Conchobhair](https://discuss.elastic.co/u/Daithi_O_Conchobhair)\ **Replies:** 8\ **Last updated:** [December 9, 2022, 1:23pm UTC](https://discuss.elastic.co/t/reindex-vs-split-index-speeds/320779 "2022-12-09T13:23:46Z")
Hi there, I have a relatively large index, 1.1TB, which currently has one shard due to a misconfiguration. I would like to keep my shard size around 50GB. I have two options I guess Split the index into a new index wi… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/285402)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 6\ **Last updated:** [October 5, 2021, 5:47pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/285402 "2021-10-05T17:47:05Z")
I am slowly making headway with my installation of ELK Stack 7.13.4. I was at one point unable to connect and was showing a block, which turned out to be firewalls on the Red Hat Linux 8 operating systems. I have allow… --- ## [ElasticSearch installation stopped at indices into cluster\_state](https://discuss.elastic.co/t/elasticsearch-installation-stopped-at-indices-into-cluster-state/153333)
**Author:** [@minn](https://discuss.elastic.co/u/minn)\ **Replies:** 8\ **Last updated:** [October 22, 2018, 8:28am UTC](https://discuss.elastic.co/t/elasticsearch-installation-stopped-at-indices-into-cluster-state/153333 "2018-10-22T08:28:21Z")
I am facing same issue like (https://github.com/elastic/elasticsearch/issues/33075), any suggestion? $ ./elasticsearch \[2018-10-22T07:14:57,429\]\[INFO \]\[o.e.n.Node \] \[\] initializing ... \[2018-10-22T07:14:… --- ## [Watcher condition with aggregation](https://discuss.elastic.co/t/watcher-condition-with-aggregation/225758)
**Author:** [@18visions](https://discuss.elastic.co/u/18visions)\ **Replies:** 6\ **Last updated:** [May 6, 2020, 1:14am UTC](https://discuss.elastic.co/t/watcher-condition-with-aggregation/225758 "2020-05-06T01:14:03Z")
Hello, I'm trying to create a watcher alert when any rabbitmq queue exceeds X amount. My query returns the results I'm looking for, but the conditional usually throws a null pointer exception. Any help is appreciated! … --- ## [Kibana Search for greater than or Less than values in string type Field](https://discuss.elastic.co/t/kibana-search-for-greater-than-or-less-than-values-in-string-type-field/168339)
**Author:** [@Suhas\_K](https://discuss.elastic.co/u/Suhas_K)\ **Replies:** 5\ **Last updated:** [February 20, 2019, 1:21am UTC](https://discuss.elastic.co/t/kibana-search-for-greater-than-or-less-than-values-in-string-type-field/168339 "2019-02-20T01:21:12Z")
Hi, I have a document which has information related to Methodlogger. My log line looks like this \[TIMESTAMP\] \[LOG\_TYPE\] \[MESSAGE\] Timestamp, Log\_type, Message are different fields in a single document . The message … --- ## [Manual marvel plugin install not working](https://discuss.elastic.co/t/manual-marvel-plugin-install-not-working/34848)
**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\ **Replies:** 6\ **Last updated:** [November 23, 2015, 4:32pm UTC](https://discuss.elastic.co/t/manual-marvel-plugin-install-not-working/34848 "2015-11-23T16:32:28Z")
When I run: ./bin/plugin -i elasticsearch/marvel/latest I get: ERROR: unknown command \[-i\]. Use \[-h\] option to list available commands When I try: ./bin/plugin install elasticsearch/marvel/latest I get: -\> Ins… --- ## [Job for elasticsearch.service failed because the control process exited with error code- VPS CentOs 7 Linux](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-vps-centos-7-linux/210056)
**Author:** [@balu\_thomas](https://discuss.elastic.co/u/balu_thomas)\ **Replies:** 3\ **Last updated:** [December 3, 2019, 7:24pm UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-vps-centos-7-linux/210056 "2019-12-03T19:24:55Z")
\[root@--217-28 Packages\]# systemctl status elasticsearch.service -l ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: fail… --- ## [Getting Error on sc.esRDD on Scala11 version of Spark](https://discuss.elastic.co/t/getting-error-on-sc-esrdd-on-scala11-version-of-spark/24892)
**Author:** [@deepakas](https://discuss.elastic.co/u/deepakas)\ **Replies:** 6\ **Last updated:** [October 13, 2016, 5:08pm UTC](https://discuss.elastic.co/t/getting-error-on-sc-esrdd-on-scala11-version-of-spark/24892 "2016-10-13T17:08:42Z")
I am getting error while using es-hadoop with spark on scala11. It works with the spark-shell binaries I have with scala10 This line generates the error. val esRDD = sc.esRDD("realtimeanalytics/events") This works fi… --- ## [Date Format UTC in Elastic Search Query](https://discuss.elastic.co/t/date-format-utc-in-elastic-search-query/113903)
**Author:** [@rakesh1](https://discuss.elastic.co/u/rakesh1)\ **Replies:** 2\ **Last updated:** [January 5, 2018, 11:09am UTC](https://discuss.elastic.co/t/date-format-utc-in-elastic-search-query/113903 "2018-01-05T11:09:03Z")
Hi , Section of my elastic search query - "bool": { "must\_not": { "range": { "lastsynctoes\_date": { "gte": "now/d", "lte": "now/d" } } }, ... } This works well, however, picks up the server date time (UTC) w… --- ## [Filebeat re-opens a harvester for a inactive file](https://discuss.elastic.co/t/filebeat-re-opens-a-harvester-for-a-inactive-file/84903)
**Author:** [@sameer\_srivastava](https://discuss.elastic.co/u/sameer_srivastava)\ **Replies:** 6\ **Last updated:** [June 5, 2017, 5:02pm UTC](https://discuss.elastic.co/t/filebeat-re-opens-a-harvester-for-a-inactive-file/84903 "2017-06-05T17:02:51Z")
We are using filebeat on windows 7 to send logs to kafka. Filebeat version used is 5.2.2. Filebeat.yml has config similar to following - paths: - somepath\\\*.txt input\_type: log document\_typ… --- ## [Calculate time with "ctx.execution\_time"](https://discuss.elastic.co/t/calculate-time-with-ctx-execution-time/87332)
**Author:** [@foxfire881](https://discuss.elastic.co/u/foxfire881)\ **Replies:** 2\ **Last updated:** [May 29, 2017, 11:05am UTC](https://discuss.elastic.co/t/calculate-time-with-ctx-execution-time/87332 "2017-05-29T11:05:37Z")
Hi everyone，I want to subtract 7 days from "ctx.execution\_time" and transform it to a string, so my "transform" is as this: "transform": { "script": { "inline": "ctx.metadata.t1 = ctx.execution\_time.minusD… --- ## [Failed to put mappings on indices](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices/82871)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 2\ **Last updated:** [April 20, 2017, 11:00am UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices/82871 "2017-04-20T11:00:24Z")
Hi have installed ELK 5.2.2 in a docker container (openjdk:8-jre) running on an Ubuntu host. It runs nice without errors in logs. I save the container images and load them on Alpine host with no internet connection. W… --- ## [Discover - sort on custom fields](https://discuss.elastic.co/t/discover-sort-on-custom-fields/140367)
**Author:** [@stefan4](https://discuss.elastic.co/u/stefan4)\ **Replies:** 4\ **Last updated:** [July 18, 2018, 7:53am UTC](https://discuss.elastic.co/t/discover-sort-on-custom-fields/140367 "2018-07-18T07:53:14Z")
Hi, have searched a bit here already. I found many similar questions but no answers. I hope to not annoy by asking: How can I configure the default sorting fields and order in Discover? To make my point, I could basica… --- ## [You are using a deprecated config setting "document\_type" set in elasticsearch](https://discuss.elastic.co/t/you-are-using-a-deprecated-config-setting-document-type-set-in-elasticsearch/184826)
**Author:** [@madcon](https://discuss.elastic.co/u/madcon)\ **Replies:** 3\ **Last updated:** [June 19, 2019, 5:50am UTC](https://discuss.elastic.co/t/you-are-using-a-deprecated-config-setting-document-type-set-in-elasticsearch/184826 "2019-06-19T05:50:54Z")
Hello All, Fairly new to ELK stack I did encountered the following warning below during my setup. /\[WARN \]\[logstash.outputs.elasticsearch\] You are using a deprecated config setting "document\_type" set in elasticsearch.… [Previous page](https://discuss.elastic.co/top.md?page=363&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=365&per_page=50&period=all)