# Top

**URL:** https://discuss.elastic.co/top.md?page=366&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 367

---

## [Time filter not displaying](https://discuss.elastic.co/t/time-filter-not-displaying/41195)

<div class="topic-metadata">

**Author:** [@Ned](https://discuss.elastic.co/u/Ned)\
**Replies:** 4\
**Last updated:** [February 9, 2016, 2:27pm UTC](https://discuss.elastic.co/t/time-filter-not-displaying/41195 "2016-02-09T14:27:09Z")

</div>

Hey guys, I'm an ELK Stack noob. My company is running it in 3 different environments. Versions: Kibana 4.1.1, Elasticsearch 1.7.1, Logstash 1.4.2. For whatever reason the Dev environment has stopped displaying in the …

---

## [Elastic Stack 6.8.4 security update](https://discuss.elastic.co/t/elastic-stack-6-8-4-security-update/204908)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 4:02pm UTC](https://discuss.elastic.co/t/elastic-stack-6-8-4-security-update/204908 "2019-10-23T16:02:28Z")

</div>

Elasticsearch username disclosure flaw (ESA-2019-13) A username disclosure flaw was found in Elasticsearch’s API Key service. An unauthenticated attacker could send a specially crafted request and determine if a usernam…

---

## [How to create a dashboard to monitor CPU and memory usage of Kubernetes cluster?](https://discuss.elastic.co/t/how-to-create-a-dashboard-to-monitor-cpu-and-memory-usage-of-kubernetes-cluster/308402)

<div class="topic-metadata">

**Author:** [@Nimit\_Batham](https://discuss.elastic.co/u/Nimit_Batham)\
**Replies:** 8\
**Last updated:** [July 5, 2022, 4:49pm UTC](https://discuss.elastic.co/t/how-to-create-a-dashboard-to-monitor-cpu-and-memory-usage-of-kubernetes-cluster/308402 "2022-07-05T16:49:19Z")

</div>

How to create a dashboard to monitor CPU and memory usage of Kubernetes cluster?

---

## [Add field by reindexing](https://discuss.elastic.co/t/add-field-by-reindexing/108466)

<div class="topic-metadata">

**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\
**Replies:** 7\
**Last updated:** [November 28, 2017, 7:37am UTC](https://discuss.elastic.co/t/add-field-by-reindexing/108466 "2017-11-28T07:37:57Z")

</div>

How do I add a field to my index? I wanted a day of week field for my dashboard in Kibana. I was able to add it in Logstash, but need to reindex to add it to past documents? I've read over the documentation but it doesn'…

---

## [Extract substring of a log line](https://discuss.elastic.co/t/extract-substring-of-a-log-line/94788)

<div class="topic-metadata">

**Author:** [@DFrant](https://discuss.elastic.co/u/DFrant)\
**Replies:** 2\
**Last updated:** [July 28, 2017, 10:28am UTC](https://discuss.elastic.co/t/extract-substring-of-a-log-line/94788 "2017-07-28T10:28:24Z")

</div>

Hello, I have some logs lines wich are only one string, for example : 01999918000170702135929%WS%00000000000070030819078820913135929050000080RRN0002W900500000000C0000000000000500024464063100100 03081907882 300 R00 I…

---

## [Finding all documents with duplicate properties](https://discuss.elastic.co/t/finding-all-documents-with-duplicate-properties/125279)

<div class="topic-metadata">

**Author:** [@lauraerinmann](https://discuss.elastic.co/u/lauraerinmann)\
**Replies:** 5\
**Last updated:** [March 26, 2018, 6:51pm UTC](https://discuss.elastic.co/t/finding-all-documents-with-duplicate-properties/125279 "2018-03-26T18:51:35Z")

</div>

I have to find every document in Elasticsearch that has duplicate properties. My mapping looks something like this: "type": { "properties": { "thisProperty": { "properties" :…

---

## [SSL between Filebeat and Logstash using .p12](https://discuss.elastic.co/t/ssl-between-filebeat-and-logstash-using-p12/127500)

<div class="topic-metadata">

**Author:** [@jordyd](https://discuss.elastic.co/u/jordyd)\
**Replies:** 7\
**Last updated:** [April 11, 2018, 1:39pm UTC](https://discuss.elastic.co/t/ssl-between-filebeat-and-logstash-using-p12/127500 "2018-04-11T13:39:34Z")

</div>

Following the documenation (https://www.elastic.co/guide/en/beats/filebeat/6.1/configuring-ssl-logstash.html) it shows how to configure Filebeat and Logstash. But when reading the documenation for creating certificates u…

---

## [Full text searching performance (compare to mysql)](https://discuss.elastic.co/t/full-text-searching-performance-compare-to-mysql/46570)

<div class="topic-metadata">

**Author:** [@Ashwani\_Kumar](https://discuss.elastic.co/u/Ashwani_Kumar)\
**Replies:** 7\
**Last updated:** [April 11, 2016, 11:28pm UTC](https://discuss.elastic.co/t/full-text-searching-performance-compare-to-mysql/46570 "2016-04-11T23:28:11Z")

</div>

I am trying to use elasticsearching over mysql as my searching is slow, so i am just making demo and i am finding mysql performing better. But i doubt if i am do something wrong Till now what i have done:- localho…

---

## [Load balancing with ERR : Failed to publish events caused by: write tcp](https://discuss.elastic.co/t/load-balancing-with-err-failed-to-publish-events-caused-by-write-tcp/76585)

<div class="topic-metadata">

**Author:** [@Suin\_You](https://discuss.elastic.co/u/Suin_You)\
**Replies:** 4\
**Last updated:** [February 28, 2017, 4:20pm UTC](https://discuss.elastic.co/t/load-balancing-with-err-failed-to-publish-events-caused-by-write-tcp/76585 "2017-02-28T16:20:33Z")

</div>

I got the error message from filebeat. 2017-02-27T16:12:07+09:00 ERR Failed to publish events caused by: write tcp clientIP:44036-\>HostIP1:5044: write: connection reset by peer 2017-02-27T16:12:07+09:00 INFO Error publ…

---

## [Base64 decode](https://discuss.elastic.co/t/base64-decode/186564)

<div class="topic-metadata">

**Author:** [@bkasrai](https://discuss.elastic.co/u/bkasrai)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 1:47pm UTC](https://discuss.elastic.co/t/base64-decode/186564 "2019-06-20T13:47:55Z")

</div>

Hello all, I am working on something I have never worked on before and I really do not know where to go from here and I am hoping someone might have some direction for me to attempt trying to get this parsed to Elastics…

---

## [Show DB Query variables](https://discuss.elastic.co/t/show-db-query-variables/173741)

<div class="topic-metadata">

**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\
**Replies:** 3\
**Last updated:** [March 25, 2019, 2:13pm UTC](https://discuss.elastic.co/t/show-db-query-variables/173741 "2019-03-25T14:13:47Z")

</div>

Hi, is it possible to get the used value of a DB-Query-Span? I see this span in my transactions: select REVISION\_ID, JOURNAL\_ID, PRODUCER\_ID, REVISION\_DATA from CL\_J\_JOURNAL where REVISION\_ID \> ? order by REVISION\_ID …

---

## [Visualising rate of change of a field](https://discuss.elastic.co/t/visualising-rate-of-change-of-a-field/2683)

<div class="topic-metadata">

**Author:** [@martin\_goldstone](https://discuss.elastic.co/u/martin_goldstone)\
**Replies:** 8\
**Last updated:** [May 11, 2016, 9:16am UTC](https://discuss.elastic.co/t/visualising-rate-of-change-of-a-field/2683 "2016-05-11T09:16:06Z")

</div>

I'm just getting started with ELK, and we're wanting to use Kibana to visualise the performance of some of our servers. In the first instance, I'm trying to put some network usage data in using collectd on a few server…

---

## [Winlogbeat and Logstash Input Codec](https://discuss.elastic.co/t/winlogbeat-and-logstash-input-codec/42527)

<div class="topic-metadata">

**Author:** [@cord\_thomas](https://discuss.elastic.co/u/cord_thomas)\
**Replies:** 4\
**Last updated:** [February 24, 2016, 12:30am UTC](https://discuss.elastic.co/t/winlogbeat-and-logstash-input-codec/42527 "2016-02-24T00:30:03Z")

</div>

We are evaluating ELK as a distributed monitoring system. I have installed ELK and have some syslogs shipping from various systems. I have just tried installing winlogbeat 1.1.1 on a Windows 8 VM in Parallels. Logst…

---

## [Mapping dense\_vector type via NEST](https://discuss.elastic.co/t/mapping-dense-vector-type-via-nest/224635)

<div class="topic-metadata">

**Author:** [@mbd2506](https://discuss.elastic.co/u/mbd2506)\
**Replies:** 0\
**Last updated:** [March 23, 2020, 9:49am UTC](https://discuss.elastic.co/t/mapping-dense-vector-type-via-nest/224635 "2020-03-23T09:49:29Z")

</div>

How we can mapping property of dense\_vector type via NEST? Thanks.

---

## [Storing APM data in custom/specific indices](https://discuss.elastic.co/t/storing-apm-data-in-custom-specific-indices/246381)

<div class="topic-metadata">

**Author:** [@axw](https://discuss.elastic.co/u/axw)\
**Replies:** 2\
**Last updated:** [January 26, 2023, 9:51am UTC](https://discuss.elastic.co/t/storing-apm-data-in-custom-specific-indices/246381 "2023-01-26T09:51:51Z")

</div>

If you'd like to split your APM indices by the service, you can use the advice from this topic. You can change the index name by setting either output.elasticsearch.index or output.elasticsearch.indices. These configura…

---

## [Check status/progress of long running ElasticSearch queries?](https://discuss.elastic.co/t/check-status-progress-of-long-running-elasticsearch-queries/129441)

<div class="topic-metadata">

**Author:** [@davout](https://discuss.elastic.co/u/davout)\
**Replies:** 1\
**Last updated:** [April 25, 2018, 10:08am UTC](https://discuss.elastic.co/t/check-status-progress-of-long-running-elasticsearch-queries/129441 "2018-04-25T10:08:49Z")

</div>

I'm an ElasticSearch newbie, and assessing this tech for possible use on a very large database search requirement. It is highly likely that some of the searches on this database will have a long query elapsed time. I w…

---

## [What is in Segments Memory?](https://discuss.elastic.co/t/what-is-in-segments-memory/61651)

<div class="topic-metadata">

**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\
**Replies:** 1\
**Last updated:** [September 30, 2016, 6:28am UTC](https://discuss.elastic.co/t/what-is-in-segments-memory/61651 "2016-09-30T06:28:42Z")

</div>

What is in segments memory? GET \_stats/?pretty&human { "segments" : { "count" : 160, "memory" : "24.5gb", } ... } I thought segments were stored as files, cached by the OS, and did not reside in ES's hea…

---

## [How can I use multi\_match and partial keyword](https://discuss.elastic.co/t/how-can-i-use-multi-match-and-partial-keyword/15034)

<div class="topic-metadata">

**Author:** [@Nikolay\_Chankov](https://discuss.elastic.co/u/Nikolay_Chankov)\
**Replies:** 5\
**Last updated:** [December 28, 2013, 9:21am UTC](https://discuss.elastic.co/t/how-can-i-use-multi-match-and-partial-keyword/15034 "2013-12-28T09:21:55Z")

</div>

I refined my query to the following: curl -XGET 'http://localhost:9200/venues,events,offers,users/\_search?pretty=true' -d ' { "query" : { "indices" : { "…

---

## [How to escape the double quotes and \\r of csv field from longstash](https://discuss.elastic.co/t/how-to-escape-the-double-quotes-and-r-of-csv-field-from-longstash/55884)

<div class="topic-metadata">

**Author:** [@AnantPatil](https://discuss.elastic.co/u/AnantPatil)\
**Replies:** 2\
**Last updated:** [July 19, 2016, 4:03pm UTC](https://discuss.elastic.co/t/how-to-escape-the-double-quotes-and-r-of-csv-field-from-longstash/55884 "2016-07-19T16:03:28Z")

</div>

My csv data is like this: S2\_CR\_Browse\_iPhone\_T22\_Click “Cruise&Stay" link from cruise menu,1393,101,46 Error in Logstash command: My Logstash Filter section: filter { if(\[message\]=~"sampler\_label" or \[message\]=~"…

---

## [Kibana Unknown Field Type](https://discuss.elastic.co/t/kibana-unknown-field-type/202851)

<div class="topic-metadata">

**Author:** [@Junebee](https://discuss.elastic.co/u/Junebee)\
**Replies:** 1\
**Last updated:** [October 9, 2019, 11:02pm UTC](https://discuss.elastic.co/t/kibana-unknown-field-type/202851 "2019-10-09T23:02:27Z")

</div>

There is a field (\_path) in my Kibana Discovery tab which shows up as unknown type (?) yet it is listed in my dynamic template mapping as "keyword". Everything else in the template works great. The data in \_path is sim…

---

## [FS is not full, but ES reports: java.io.IOException: Disk quota exceeded](https://discuss.elastic.co/t/fs-is-not-full-but-es-reports-java-io-ioexception-disk-quota-exceeded/89840)

<div class="topic-metadata">

**Author:** [@PavelP](https://discuss.elastic.co/u/PavelP)\
**Replies:** 6\
**Last updated:** [June 19, 2017, 7:24am UTC](https://discuss.elastic.co/t/fs-is-not-full-but-es-reports-java-io-ioexception-disk-quota-exceeded/89840 "2017-06-19T07:24:38Z")

</div>

Hi! We have 3 nodes ES cluster running in docker swarm (on three EC2 instances in AWS). Docker image: docker.elastic.co/elasticsearch/elasticsearch:5.4.0 And we mount host directory (located on AWS Elastic File System)…

---

## [Problems with synonyms in Elastic 6.2](https://discuss.elastic.co/t/problems-with-synonyms-in-elastic-6-2/118820)

<div class="topic-metadata">

**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\
**Replies:** 3\
**Last updated:** [February 12, 2018, 8:49am UTC](https://discuss.elastic.co/t/problems-with-synonyms-in-elastic-6-2/118820 "2018-02-12T08:49:38Z")

</div>

I have an index in ES 5.6 that I want to move to ES 6.2, but I have some problems when trying to create this index in ES 6.2. { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", …

---

## [Download CSV permission?](https://discuss.elastic.co/t/download-csv-permission/230443)

<div class="topic-metadata">

**Author:** [@jpigott](https://discuss.elastic.co/u/jpigott)\
**Replies:** 2\
**Last updated:** [April 29, 2020, 11:31pm UTC](https://discuss.elastic.co/t/download-csv-permission/230443 "2020-04-29T23:31:24Z")

</div>

I have given a user dashboard access to Kibana and have a visualization of the discovery detail data that they visualize. There is an option export the data to CSV. The users get an error when downloading the CSV. What p…

---

## [Deploy ECK with local storage](https://discuss.elastic.co/t/deploy-eck-with-local-storage/234086)

<div class="topic-metadata">

**Author:** [@Virajsl](https://discuss.elastic.co/u/Virajsl)\
**Replies:** 4\
**Last updated:** [June 8, 2020, 12:16pm UTC](https://discuss.elastic.co/t/deploy-eck-with-local-storage/234086 "2020-06-08T12:16:30Z")

</div>

I am trying to deploy eck. My storage is in local disk. I wanted to create 3 master node cluster to begin with. My problem is do I need to create persistent volume and persistent volume claim for each master ? This is …

---

## [Sending headers to kibana](https://discuss.elastic.co/t/sending-headers-to-kibana/112641)

<div class="topic-metadata">

**Author:** [@Akshay\_Tiwari](https://discuss.elastic.co/u/Akshay_Tiwari)\
**Replies:** 6\
**Last updated:** [December 22, 2017, 1:23pm UTC](https://discuss.elastic.co/t/sending-headers-to-kibana/112641 "2017-12-22T13:23:39Z")

</div>

Hi, I am trying to send headers using HTTP request to kibana which is embedded in an iFrame on my UI. Ideally, kibana must receive it and pass it to the proxy I have created for elastic query and return the requested in…

---

## [\[Solved\] ELK - Logstash not processing data](https://discuss.elastic.co/t/solved-elk-logstash-not-processing-data/107318)

<div class="topic-metadata">

**Author:** [@Adam\_Black](https://discuss.elastic.co/u/Adam_Black)\
**Replies:** 6\
**Last updated:** [November 13, 2017, 12:32am UTC](https://discuss.elastic.co/t/solved-elk-logstash-not-processing-data/107318 "2017-11-13T00:32:29Z")

</div>

for starters, please excuse me if I am not posting the correct details or in the correct format. If there is anything I need to post, please let me know. History: I was running security onion and upgraded to their Alph…

---

## [\[ERROR\]logstash.pipeline - the trustAnchors parameter must be non-empty](https://discuss.elastic.co/t/error-logstash-pipeline-the-trustanchors-parameter-must-be-non-empty/192485)

<div class="topic-metadata">

**Author:** [@victor\_ide](https://discuss.elastic.co/u/victor_ide)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 2:34pm UTC](https://discuss.elastic.co/t/error-logstash-pipeline-the-trustanchors-parameter-must-be-non-empty/192485 "2019-07-29T14:34:52Z")

</div>

Hey guys, I'm trying to create different indexes based on a field added using the processors. So in the winlogbeat file I added the fields: processors: add\_tags: tags: \[internal, lab\] target: "environment" And I'…

---

## [Processing IIS logs in filebeat - regxp? documentation?](https://discuss.elastic.co/t/processing-iis-logs-in-filebeat-regxp-documentation/42244)

<div class="topic-metadata">

**Author:** [@plonka2000](https://discuss.elastic.co/u/plonka2000)\
**Replies:** 6\
**Last updated:** [March 2, 2016, 9:22pm UTC](https://discuss.elastic.co/t/processing-iis-logs-in-filebeat-regxp-documentation/42244 "2016-03-02T21:22:52Z")

</div>

Hi all, I've been trying to find a functional method to process IIS logs and send them to elasticsearch without using Logstash. I have seen mention of using regxp to pre-process inputs, and I'm trying to develop patt…

---

## [Limit CPU/Memory usage in Auditbeat & Filebeats , version 7.9.0](https://discuss.elastic.co/t/limit-cpu-memory-usage-in-auditbeat-filebeats-version-7-9-0/248231)

<div class="topic-metadata">

**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\
**Replies:** 7\
**Last updated:** [September 17, 2020, 1:23pm UTC](https://discuss.elastic.co/t/limit-cpu-memory-usage-in-auditbeat-filebeats-version-7-9-0/248231 "2020-09-17T13:23:10Z")

</div>

Hi Team, We are seeing that auditbeat service is using lot of memory in our VM's , we suspect that when elasticsearch cluster is down its taking more memory in auditbeat to buffer the data. Could you please let me know …

---

## [How to takes elasticsearch backup on closed indexes in a clustered environment](https://discuss.elastic.co/t/how-to-takes-elasticsearch-backup-on-closed-indexes-in-a-clustered-environment/190635)

<div class="topic-metadata">

**Author:** [@krishanr](https://discuss.elastic.co/u/krishanr)\
**Replies:** 3\
**Last updated:** [July 16, 2019, 6:30am UTC](https://discuss.elastic.co/t/how-to-takes-elasticsearch-backup-on-closed-indexes-in-a-clustered-environment/190635 "2019-07-16T06:30:23Z")

</div>

I've configured 3-node clustered ELK nodes and also configured snapshot feature. But I need to take a backup of closed indexes. Re-open & take a snapshot is not practical. Is there another way to do this?

---

## [Line chart for standard deviation in Kibana](https://discuss.elastic.co/t/line-chart-for-standard-deviation-in-kibana/31517)

<div class="topic-metadata">

**Author:** [@Asad\_Rehman](https://discuss.elastic.co/u/Asad_Rehman)\
**Replies:** 2\
**Last updated:** [January 27, 2016, 7:59pm UTC](https://discuss.elastic.co/t/line-chart-for-standard-deviation-in-kibana/31517 "2016-01-27T19:59:07Z")

</div>

Hi All, I am developing an application which uses Kibana to analyze and visualize our data. All other charts are going good but in the line chart which shows standard deviation, I get three separate lines, one for uppe…

---

## [Native controller process has stopped - no new native processes can be started](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/184721)

<div class="topic-metadata">

**Author:** [@YoussefH](https://discuss.elastic.co/u/YoussefH)\
**Replies:** 5\
**Last updated:** [June 7, 2019, 11:42am UTC](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/184721 "2019-06-07T11:42:01Z")

</div>

Hello, I have an problem concerned the elasticsearch starting, when we go to the elasticsearch service for forced their startup, an error message is displayed and the startup is failed, for this i used the cmd console …

---

## [error\[EPERM\]Operation not permitted](https://discuss.elastic.co/t/error-eperm-operation-not-permitted/136482)

<div class="topic-metadata">

**Author:** [@Yong\_Rhee](https://discuss.elastic.co/u/Yong_Rhee)\
**Replies:** 6\
**Last updated:** [June 22, 2018, 12:24pm UTC](https://discuss.elastic.co/t/error-eperm-operation-not-permitted/136482 "2018-06-22T12:24:38Z")

</div>

Hello, After reinstalled Kibana and Elasticsearch, things are not easy for me now. This is Window 10 machine and both are 6.3.0 I installed Elasticsearch with msi file and did Kibana with zip file and unzip. I got Aut…

---

## [Unable to access Elasticsearch 6.3.1 outside server](https://discuss.elastic.co/t/unable-to-access-elasticsearch-6-3-1-outside-server/140667)

<div class="topic-metadata">

**Author:** [@Ravi\_Kumar1](https://discuss.elastic.co/u/Ravi_Kumar1)\
**Replies:** 7\
**Last updated:** [July 27, 2018, 11:18am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-6-3-1-outside-server/140667 "2018-07-27T11:18:27Z")

</div>

Hi, I have Elasticsearch 6.3.1 installed on Digitalocean droplet running Ubuntu 14.04.5 LTS. I am able to curl Elasticsearch on localhost, but unable to access it from outside network. Here is the snapshot of my netst…

---

## [Elastic and Kibana 8.1.0 via Docker Compose](https://discuss.elastic.co/t/elastic-and-kibana-8-1-0-via-docker-compose/299907)

<div class="topic-metadata">

**Author:** [@st11x](https://discuss.elastic.co/u/st11x)\
**Replies:** 5\
**Last updated:** [March 19, 2022, 1:45am UTC](https://discuss.elastic.co/t/elastic-and-kibana-8-1-0-via-docker-compose/299907 "2022-03-19T01:45:05Z")

</div>

With 8.1.0, security is enabled by default and a SSL certificate is generated for localhost. I have this docker compose file. elastic: image: elasticsearch:8.1.0 ports: - 9200:9200 - 9300:9300 e…

---

## [Logstash: NoMethodError: method \`\>=' for nil:NilClass](https://discuss.elastic.co/t/logstash-nomethoderror-method-for-nil-nilclass/52622)

<div class="topic-metadata">

**Author:** [@sen](https://discuss.elastic.co/u/sen)\
**Replies:** 3\
**Last updated:** [June 14, 2016, 8:45am UTC](https://discuss.elastic.co/t/logstash-nomethoderror-method-for-nil-nilclass/52622 "2016-06-14T08:45:59Z")

</div>

Hello everyone, Here is my configuration file: input { stdin { } file { path =\> \["myfile.json"\] type =\> "bytel" codec =\> "json" } } filter { if \[log\]\[Frequency\] != \[\] { if …

---

## [How to keep 2 clusters in sync](https://discuss.elastic.co/t/how-to-keep-2-clusters-in-sync/262084)

<div class="topic-metadata">

**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\
**Replies:** 5\
**Last updated:** [January 28, 2021, 8:38pm UTC](https://discuss.elastic.co/t/how-to-keep-2-clusters-in-sync/262084 "2021-01-28T20:38:06Z")

</div>

We are in process of creating an ES cluster in GCP and our old cluster in AWS. I have used es reindex api https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-reindex.html to copy data from old aws clust…

---

## [Logstash is not capturing data from file beat](https://discuss.elastic.co/t/logstash-is-not-capturing-data-from-file-beat/127312)

<div class="topic-metadata">

**Author:** [@Nagu\_R\_Pujari](https://discuss.elastic.co/u/Nagu_R_Pujari)\
**Replies:** 6\
**Last updated:** [April 10, 2018, 12:00pm UTC](https://discuss.elastic.co/t/logstash-is-not-capturing-data-from-file-beat/127312 "2018-04-10T12:00:21Z")

</div>

\[2018-04-09T16:57:23,836\]\[INFO \]\[org.logstash.beats.BeatsHandler\] \[local: 192.168.36.198:5044, remote: 192.168.36.37:47240\] Handling exception: org.logstash.beats.BeatsParser$InvalidFrameProtocolException: Invalid Frame …

---

## [\[Resolved\]Failed to index by helpers.bulk](https://discuss.elastic.co/t/resolved-failed-to-index-by-helpers-bulk/197296)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 9:53am UTC](https://discuss.elastic.co/t/resolved-failed-to-index-by-helpers-bulk/197296 "2019-08-29T09:53:32Z")

</div>

Hi team, below is the python code. from elasticsearch import helpers,Elasticsearch import csv es = Elasticsearch() with open('testcase0801.csv') as f: reader = csv.DictReader(f) helpers.bulk(es,reader,index='t…

---

## [Date format error with "epoch\_millis||epoch\_second"](https://discuss.elastic.co/t/date-format-error-with-epoch-millis-epoch-second/101135)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 9:33am UTC](https://discuss.elastic.co/t/date-format-error-with-epoch-millis-epoch-second/101135 "2017-09-20T09:33:14Z")

</div>

Hi all.... Here i am trying to define mapping for a field which stores epoch date values in it. PUT my\_index11 { "mappings": { "my\_type": { "properties": { "date": { "type": "date", …

---

## [How to create a custom time range for Last Month in kibana](https://discuss.elastic.co/t/how-to-create-a-custom-time-range-for-last-month-in-kibana/166740)

<div class="topic-metadata">

**Author:** [@Shripal](https://discuss.elastic.co/u/Shripal)\
**Replies:** 2\
**Last updated:** [March 1, 2019, 4:46pm UTC](https://discuss.elastic.co/t/how-to-create-a-custom-time-range-for-last-month-in-kibana/166740 "2019-03-01T16:46:56Z")

</div>

Hi all, I am trying to make a custom time range to be added in the 'Quick' section of time range in kibana. I want to make a quick time range field called 'Last Month'. This is the expression that I added in the adva…

---

## [CPU Management of Logstash](https://discuss.elastic.co/t/cpu-management-of-logstash/99487)

<div class="topic-metadata">

**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\
**Replies:** 6\
**Last updated:** [September 14, 2017, 4:17pm UTC](https://discuss.elastic.co/t/cpu-management-of-logstash/99487 "2017-09-14T16:17:50Z")

</div>

I noticed that in the logstash.yml file there is a field called pipeline.workers and you can specify the amount of workers that will work in parallel. The number defaults to the host’s CPU cores. My question is whether …

---

## [BulkProcessor: Cannot send more than 5 concurrent requests](https://discuss.elastic.co/t/bulkprocessor-cannot-send-more-than-5-concurrent-requests/107216)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 1\
**Last updated:** [June 15, 2018, 5:09pm UTC](https://discuss.elastic.co/t/bulkprocessor-cannot-send-more-than-5-concurrent-requests/107216 "2018-06-15T17:09:01Z")

</div>

new BulkProcessor.Builder(esClient.getHighLevelClient()::bulkAsync, listener, threadPool) .setBulkActions(3000) .setBulkSize(7) .setConcurrentRequests(6) .s…

---

## [Problem with conditional in output definition](https://discuss.elastic.co/t/problem-with-conditional-in-output-definition/74302)

<div class="topic-metadata">

**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\
**Replies:** 1\
**Last updated:** [February 8, 2017, 11:05am UTC](https://discuss.elastic.co/t/problem-with-conditional-in-output-definition/74302 "2017-02-08T11:05:42Z")

</div>

I started experimenting with metricbeat and wanted the data in the index that the sample dashboards expect, so I tried settting the index conditionally on the input type. logstash complains that it is an invalid configur…

---

## [Dealing with slow \_msearch calls](https://discuss.elastic.co/t/dealing-with-slow--msearch-calls/32183)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 5\
**Last updated:** [September 29, 2016, 9:02am UTC](https://discuss.elastic.co/t/dealing-with-slow--msearch-calls/32183 "2016-09-29T09:02:53Z")

</div>

Hi, Kibana 4.x seems to send requests from Dashboard in a single \_msearch call. When one has a lot of data in Elasticsearch this could result in timeouts. How do others deal with this, other than increasing connectio…

---

## [Elasticsearch not updating any data with no error](https://discuss.elastic.co/t/elasticsearch-not-updating-any-data-with-no-error/287177)

<div class="topic-metadata">

**Author:** [@APic](https://discuss.elastic.co/u/APic)\
**Replies:** 7\
**Last updated:** [October 26, 2021, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-not-updating-any-data-with-no-error/287177 "2021-10-26T11:59:58Z")

</div>

Hello, in Elasticsearch 6.6.2 i'm having this weird problem where elastic stops performing any modification to data. Any UPDATE/INDEX/DELETE operation returns OK result but data never change in indexes. I see no errors…

---

## [How to change index mapping?](https://discuss.elastic.co/t/how-to-change-index-mapping/230997)

<div class="topic-metadata">

**Author:** [@DeepakBishi](https://discuss.elastic.co/u/DeepakBishi)\
**Replies:** 1\
**Last updated:** [May 4, 2020, 9:55pm UTC](https://discuss.elastic.co/t/how-to-change-index-mapping/230997 "2020-05-04T21:55:49Z")

</div>

Hi, I am using ELK of version 6.4.3 I want to changes a field mapping. Can someone help me with the api in dev tools to change. My goal is to change the ignore\_above value of message field. Below is the mapping of one…

---

## [Sourceloader - No configuration found in the configured sources error in logstash](https://discuss.elastic.co/t/sourceloader-no-configuration-found-in-the-configured-sources-error-in-logstash/112789)

<div class="topic-metadata">

**Author:** [@vaidehi9039](https://discuss.elastic.co/u/vaidehi9039)\
**Replies:** 3\
**Last updated:** [January 12, 2018, 6:14am UTC](https://discuss.elastic.co/t/sourceloader-no-configuration-found-in-the-configured-sources-error-in-logstash/112789 "2018-01-12T06:14:24Z")

</div>

Continuing the discussion from Logstash 6.0.0 Command Line error:

---

## [Java API synchronous vs asynchronous?](https://discuss.elastic.co/t/java-api-synchronous-vs-asynchronous/16985)

<div class="topic-metadata">

**Author:** [@echin1999\_2](https://discuss.elastic.co/u/echin1999_2)\
**Replies:** 7\
**Last updated:** [December 5, 2014, 7:25pm UTC](https://discuss.elastic.co/t/java-api-synchronous-vs-asynchronous/16985 "2014-12-05T19:25:05Z")

</div>

Hi. I'm adding to my elasticSearch database (v. 0.90) an object via this java call. \*IndexResponse response = \_client.prepareIndex(SomeIndex, SomeType, SomeId).setSource(SomeJSON).execute().actionGet();\* If…

---

## [Recomendacion en integracion al Stack ELK](https://discuss.elastic.co/t/recomendacion-en-integracion-al-stack-elk/58392)

<div class="topic-metadata">

**Author:** [@rodher](https://discuss.elastic.co/u/rodher)\
**Replies:** 1\
**Last updated:** [August 19, 2016, 11:45am UTC](https://discuss.elastic.co/t/recomendacion-en-integracion-al-stack-elk/58392 "2016-08-19T11:45:24Z")

</div>

Hola a tod@s !! Actualmente me encuentro trabajando sobre ELK, integrando Elasticsearch, Logstash y KIbana con sistemas generadores de logs. Para algunos escenarios puntuales también incorporo Filebeat y Kafka. Me g…

[Previous page](https://discuss.elastic.co/top.md?page=365&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=367&per_page=50&period=all)
