# Top

**URL:** https://discuss.elastic.co/top.md?page=378&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 379

---

## [How do i connect to s3 and index files on s3](https://discuss.elastic.co/t/how-do-i-connect-to-s3-and-index-files-on-s3/22301)

<div class="topic-metadata">

**Author:** [@Siddartha\_Reddy\_2](https://discuss.elastic.co/u/Siddartha_Reddy_2)\
**Replies:** 6\
**Last updated:** [February 20, 2015, 8:55pm UTC](https://discuss.elastic.co/t/how-do-i-connect-to-s3-and-index-files-on-s3/22301 "2015-02-20T20:55:34Z")

</div>

Hi, I installed elastic search today, i am basically testing the es with one node. I am trying to configure the yml file, \*since the s3 gateway\* is deprecated where do i specify the bucket name? currently my conf…

---

## [Slow reindex operation on heavy index](https://discuss.elastic.co/t/slow-reindex-operation-on-heavy-index/198320)

<div class="topic-metadata">

**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\
**Replies:** 3\
**Last updated:** [September 8, 2019, 2:02am UTC](https://discuss.elastic.co/t/slow-reindex-operation-on-heavy-index/198320 "2019-09-08T02:02:05Z")

</div>

Hi all, How can I speed up a long running reindex operation ? This is being done from a source index of around 4.2TB with 16 shards each of around 300GB~ in a 10 data nodes clusters. Target index is 90 shards. I've se…

---

## [Distress: Elasticsearch does not start](https://discuss.elastic.co/t/distress-elasticsearch-does-not-start/152288)

<div class="topic-metadata">

**Author:** [@rsmoorthy](https://discuss.elastic.co/u/rsmoorthy)\
**Replies:** 3\
**Last updated:** [October 15, 2018, 8:04pm UTC](https://discuss.elastic.co/t/distress-elasticsearch-does-not-start/152288 "2018-10-15T20:04:43Z")

</div>

Current status: Elasticsearch (5.4.1) does not start, stays in Red. The log messages show the following error: \[2018-10-12T18:11:50,720\]\[WARN \]\[o.e.c.s.ClusterService \] \[5awoLm1\] failed to notify ClusterStateApplier …

---

## [Set \_id](https://discuss.elastic.co/t/set--id/2318)

<div class="topic-metadata">

**Author:** [@Baptiste\_Rochez](https://discuss.elastic.co/u/Baptiste_Rochez)\
**Replies:** 4\
**Last updated:** [June 10, 2015, 1:42pm UTC](https://discuss.elastic.co/t/set--id/2318 "2015-06-10T13:42:51Z")

</div>

Hello I would like to set the value of the \_id field (when i create a document) with the value of a specific field. It try this method https://www.elastic.co/guide/en/elasticsearch/reference/1.4/mapping-id-field.html w…

---

## [Embed kibana dashboard to external UI app](https://discuss.elastic.co/t/embed-kibana-dashboard-to-external-ui-app/213172)

<div class="topic-metadata">

**Author:** [@Narayanan](https://discuss.elastic.co/u/Narayanan)\
**Replies:** 4\
**Last updated:** [January 7, 2020, 6:48am UTC](https://discuss.elastic.co/t/embed-kibana-dashboard-to-external-ui-app/213172 "2020-01-07T06:48:37Z")

</div>

HI Elastic Team, We are in process of embedding kibana dashboard (elastic + kibana setup we created using Azure marketplace) into separate web application (which was developed in angular 7). This can be done by sharing …

---

## [License check warnings and logstash fails to work](https://discuss.elastic.co/t/license-check-warnings-and-logstash-fails-to-work/115783)

<div class="topic-metadata">

**Author:** [@GSCully](https://discuss.elastic.co/u/GSCully)\
**Replies:** 2\
**Last updated:** [January 16, 2018, 9:22pm UTC](https://discuss.elastic.co/t/license-check-warnings-and-logstash-fails-to-work/115783 "2018-01-16T21:22:58Z")

</div>

First off Logstash is not on the cluster it is a seperate vm, (Windows) After installing x-pack for monitoring I get an error spamming my console window, spamming th logs is this, \[logstash.licensechecker.licensereade…

---

## [Getting Failed Action error in logstash-plain.log](https://discuss.elastic.co/t/getting-failed-action-error-in-logstash-plain-log/102101)

<div class="topic-metadata">

**Author:** [@meaniljangra](https://discuss.elastic.co/u/meaniljangra)\
**Replies:** 8\
**Last updated:** [October 5, 2017, 8:12am UTC](https://discuss.elastic.co/t/getting-failed-action-error-in-logstash-plain-log/102101 "2017-10-05T08:12:35Z")

</div>

I am sending the logs to ELK server from different system using filebeat. I am getting only one line log information in Kibana. Other logs are not present. I am sending more than 100 lines of logs. When I checked logstas…

---

## [Indexing CSV data into elasticsearch](https://discuss.elastic.co/t/indexing-csv-data-into-elasticsearch/55871)

<div class="topic-metadata">

**Author:** [@Meenakshi07](https://discuss.elastic.co/u/Meenakshi07)\
**Replies:** 7\
**Last updated:** [February 13, 2017, 2:13pm UTC](https://discuss.elastic.co/t/indexing-csv-data-into-elasticsearch/55871 "2017-02-13T14:13:32Z")

</div>

I have tried the below code to import data from CSV into elasticsearch using logstash: input { file { path =\> \["D:\\test.csv"\] type =\> "csv" start\_position =\> "beginning" } } filter { c…

---

## [ERR Failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/err-failed-to-publish-events-temporary-bulk-send-failure/111265)

<div class="topic-metadata">

**Author:** [@Pan\_Wang](https://discuss.elastic.co/u/Pan_Wang)\
**Replies:** 5\
**Last updated:** [December 12, 2017, 9:40am UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-temporary-bulk-send-failure/111265 "2017-12-12T09:40:04Z")

</div>

filebeat version 6.0.1 Elasticsearch version 5.6.2 Filebeat has 40，Elasticsearch has 4. filebeat.yml: filebeat.registry\_file: /home/work/data/registry filebeat.config.prospectors: enabled: true path: configs/\*.y…

---

## [Max clause count exceeded 1024](https://discuss.elastic.co/t/max-clause-count-exceeded-1024/36478)

<div class="topic-metadata">

**Author:** [@ramanareddy438](https://discuss.elastic.co/u/ramanareddy438)\
**Replies:** 4\
**Last updated:** [December 7, 2015, 5:56am UTC](https://discuss.elastic.co/t/max-clause-count-exceeded-1024/36478 "2015-12-07T05:56:03Z")

</div>

I have more than 1024 clauses to match against a single field. If use terms query it is throwing max clauses count exceeded 1024. I thought of using bool query with multiple must terms to fetch all the documents that mat…

---

## [Elastic score as percentage](https://discuss.elastic.co/t/elastic-score-as-percentage/187252)

<div class="topic-metadata">

**Author:** [@Roobal\_Jindal](https://discuss.elastic.co/u/Roobal_Jindal)\
**Replies:** 0\
**Last updated:** [June 25, 2019, 7:26am UTC](https://discuss.elastic.co/t/elastic-score-as-percentage/187252 "2019-06-25T07:26:57Z")

</div>

Use case: We have thousands of user records in an index. We have configurable rules for searching users which defines user's attributes and their weightage. Lets say, Rule is having following fields with their boost/wei…

---

## [How to restart individual pipelines?](https://discuss.elastic.co/t/how-to-restart-individual-pipelines/155360)

<div class="topic-metadata">

**Author:** [@Kvin](https://discuss.elastic.co/u/Kvin)\
**Replies:** 0\
**Last updated:** [November 5, 2018, 8:38am UTC](https://discuss.elastic.co/t/how-to-restart-individual-pipelines/155360 "2018-11-05T08:38:56Z")

</div>

I'm using Logstash 6.3. I've set up the pipelines.yml file to have multiple pipelines within one Logstash instance. In our use case we have to change the configuration of each pipeline rather often. So far I just applie…

---

## [File is inactive: Closing because close\_inactive of 15m0s reached](https://discuss.elastic.co/t/file-is-inactive-closing-because-close-inactive-of-15m0s-reached/227885)

<div class="topic-metadata">

**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\
**Replies:** 2\
**Last updated:** [April 15, 2020, 2:46am UTC](https://discuss.elastic.co/t/file-is-inactive-closing-because-close-inactive-of-15m0s-reached/227885 "2020-04-15T02:46:44Z")

</div>

Hi Team, frequently fIlebeat is stopped suddenly and can see below error in logs. please help on this. File is inactive: Closing because close\_inactive of 5m0s reached 2020-04-14T02:56:12.960-0500 INFO log/harve…

---

## [Winlogbeat vs Filebeat](https://discuss.elastic.co/t/winlogbeat-vs-filebeat/225685)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 2\
**Last updated:** [March 31, 2020, 4:27pm UTC](https://discuss.elastic.co/t/winlogbeat-vs-filebeat/225685 "2020-03-31T16:27:54Z")

</div>

Hi, Filebeat and Winlogbeat seem to work similarly. Both beats seem to be able to process logs from Windows (in the case of Filebeats, it can also process logs from other OS). My questions would be: 1- Which beat is be…

---

## [Search - Attachment - Content](https://discuss.elastic.co/t/search-attachment-content/39559)

<div class="topic-metadata">

**Author:** [@Paco\_B](https://discuss.elastic.co/u/Paco_B)\
**Replies:** 8\
**Last updated:** [January 22, 2016, 6:40pm UTC](https://discuss.elastic.co/t/search-attachment-content/39559 "2016-01-22T18:40:02Z")

</div>

Hello, I want to search into attachment value but I don't get any outcome document (I tried to use other fields - no attachment field - and works properly). So, if I have the following document in Elastic Search: GET…

---

## [Why won't my Shards Assign?!](https://discuss.elastic.co/t/why-wont-my-shards-assign/158033)

<div class="topic-metadata">

**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\
**Replies:** 2\
**Last updated:** [November 23, 2018, 4:35pm UTC](https://discuss.elastic.co/t/why-wont-my-shards-assign/158033 "2018-11-23T16:35:49Z")

</div>

I have a cluster with two Graylog nodes and three elasticsearch nodes. I have 4 primaries and 1 replica per index. I have recently been testing resillience by running 'service elasticsearch stop' to stop one of the ES n…

---

## [Using painless split function in aggregation](https://discuss.elastic.co/t/using-painless-split-function-in-aggregation/153168)

<div class="topic-metadata">

**Author:** [@Mamadou\_Diop](https://discuss.elastic.co/u/Mamadou_Diop)\
**Replies:** 3\
**Last updated:** [October 22, 2018, 4:01pm UTC](https://discuss.elastic.co/t/using-painless-split-function-in-aggregation/153168 "2018-10-22T16:01:45Z")

</div>

Hello, I am trying to use the painless script split function in my AWS elasticsearch cluster but it does not seem to be working. I get "Unable to find dynamic method \[split\] with \[1\] arguments for class \[java.lang.Strin…

---

## [Cannot connect to Kibana on port 5601](https://discuss.elastic.co/t/cannot-connect-to-kibana-on-port-5601/163592)

<div class="topic-metadata">

**Author:** [@nomaxpi](https://discuss.elastic.co/u/nomaxpi)\
**Replies:** 3\
**Last updated:** [January 11, 2019, 6:30am UTC](https://discuss.elastic.co/t/cannot-connect-to-kibana-on-port-5601/163592 "2019-01-11T06:30:45Z")

</div>

Hi All, We are trying to evaluate Elastic Stack and I am having an issue getting to the management console in Kibana. I am following the getting started guide which says to install ElasticSearch first then Kibana. I hav…

---

## [What does "restricted indices" means in Security:Has privileges API?](https://discuss.elastic.co/t/what-does-restricted-indices-means-in-security-has-privileges-api/185175)

<div class="topic-metadata">

**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\
**Replies:** 7\
**Last updated:** [June 20, 2019, 3:03am UTC](https://discuss.elastic.co/t/what-does-restricted-indices-means-in-security-has-privileges-api/185175 "2019-06-20T03:03:03Z")

</div>

The document is here. What does "restricted indices" meas in "allow\_restricted\_indices" params?

---

## [Invalid\_type\_name\_exception error](https://discuss.elastic.co/t/invalid-type-name-exception-error/45974)

<div class="topic-metadata">

**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\
**Replies:** 3\
**Last updated:** [April 1, 2016, 12:06am UTC](https://discuss.elastic.co/t/invalid-type-name-exception-error/45974 "2016-04-01T00:06:04Z")

</div>

I seem to be getting an error when accessing my index. I will mention it has multiple types within a single index. I also want to say im using the latest kibana with the graph plugin. T 2016/03/31 17:21:46.266180 y.y.y…

---

## [Hearbeat and elasticsearch : x509: certificate signed by unknown authority](https://discuss.elastic.co/t/hearbeat-and-elasticsearch-x509-certificate-signed-by-unknown-authority/178865)

<div class="topic-metadata">

**Author:** [@meddreamer](https://discuss.elastic.co/u/meddreamer)\
**Replies:** 2\
**Last updated:** [April 29, 2019, 3:20pm UTC](https://discuss.elastic.co/t/hearbeat-and-elasticsearch-x509-certificate-signed-by-unknown-authority/178865 "2019-04-29T15:20:54Z")

</div>

Hi, I am trying to configure heartbeat with elasticsearch and kibana. I am using version 6.7.1 I am receiving this error: 2019-04-29T11:34:10.127+0300 ERROR instance/beat.go:906 Exiting: fail to create the Elasticse…

---

## [Elasticsearch throws Could not reserve enough space for object heap](https://discuss.elastic.co/t/elasticsearch-throws-could-not-reserve-enough-space-for-object-heap/15978)

<div class="topic-metadata">

**Author:** [@mehdi](https://discuss.elastic.co/u/mehdi)\
**Replies:** 7\
**Last updated:** [February 24, 2014, 6:36am UTC](https://discuss.elastic.co/t/elasticsearch-throws-could-not-reserve-enough-space-for-object-heap/15978 "2014-02-24T06:36:10Z")

</div>

Hi guys, It seems that Elasticsearch stops working this morning. When i launch : sudo service elasticsearch start, it says : \*Starting ElasticSearch Server Done\* But when i check the status, it gives me : \*el…

---

## [Issue with multiple outputs in filebeat](https://discuss.elastic.co/t/issue-with-multiple-outputs-in-filebeat/87939)

<div class="topic-metadata">

**Author:** [@Chaitra\_Ranganna](https://discuss.elastic.co/u/Chaitra_Ranganna)\
**Replies:** 2\
**Last updated:** [June 2, 2017, 3:41pm UTC](https://discuss.elastic.co/t/issue-with-multiple-outputs-in-filebeat/87939 "2017-06-02T15:41:23Z")

</div>

Hi , I am looking for an option to send logs to multiple outputs . I tried configuring multiple outputs, if all the out puts are reachable then logs are sent successfully. But if one of the output is not reachable, th…

---

## [Natural language processing with elastic search](https://discuss.elastic.co/t/natural-language-processing-with-elastic-search/87170)

<div class="topic-metadata">

**Author:** [@Ijaj\_Mulani](https://discuss.elastic.co/u/Ijaj_Mulani)\
**Replies:** 1\
**Last updated:** [May 26, 2017, 5:14am UTC](https://discuss.elastic.co/t/natural-language-processing-with-elastic-search/87170 "2017-05-26T05:14:47Z")

</div>

Hi, I wanted to integrate search functionality in my website. I am using elasticsearch for it, If user searches "Maruti suzkuki under 2 lac" then it has to search cars having brand name "Maruti Suzuki" and price under …

---

## [Changing field types](https://discuss.elastic.co/t/changing-field-types/24626)

<div class="topic-metadata">

**Author:** [@eacoimbra](https://discuss.elastic.co/u/eacoimbra)\
**Replies:** 8\
**Last updated:** [November 9, 2015, 8:48pm UTC](https://discuss.elastic.co/t/changing-field-types/24626 "2015-11-09T20:48:45Z")

</div>

Hi, I'm new to ELK and I am testing this solution for storing logs of servers and network assets. One of the collected logs is from an ASA-5520 and being structured through these grok patterns https://github.com/logs…

---

## [Max limit for number of search results](https://discuss.elastic.co/t/max-limit-for-number-of-search-results/329544)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [April 6, 2023, 7:29pm UTC](https://discuss.elastic.co/t/max-limit-for-number-of-search-results/329544 "2023-04-06T19:29:08Z")

</div>

What is the limit on number of search results by Elasticsearch? Is it 10,000? Which config parameter drives this count? Is it possible to export documents in terms of millions?

---

## [Iframe Embed Cross Origin Security Exception](https://discuss.elastic.co/t/iframe-embed-cross-origin-security-exception/101035)

<div class="topic-metadata">

**Author:** [@dixyantar](https://discuss.elastic.co/u/dixyantar)\
**Replies:** 6\
**Last updated:** [September 21, 2017, 6:59pm UTC](https://discuss.elastic.co/t/iframe-embed-cross-origin-security-exception/101035 "2017-09-21T18:59:45Z")

</div>

I have kibana hosted at xx.prod.mydomain.com. I am trying to use the embed share link in yy.stg.mydomain.com and localhost:8080 like this: \<iframe src="THE-KIBANA-SHARE-EMBED-URL" height="600" width="800"\>\</iframe\> …

---

## [How to manage multiple indexes with spring data elasticsearch](https://discuss.elastic.co/t/how-to-manage-multiple-indexes-with-spring-data-elasticsearch/57440)

<div class="topic-metadata">

**Author:** [@Sachin\_Shaju](https://discuss.elastic.co/u/Sachin_Shaju)\
**Replies:** 0\
**Last updated:** [August 8, 2016, 5:05am UTC](https://discuss.elastic.co/t/how-to-manage-multiple-indexes-with-spring-data-elasticsearch/57440 "2016-08-08T05:05:23Z")

</div>

In spring data elasticsearch one model class/entity represents or maps to an index and type. eg :- @Document(indexName = "myindex",type="mytype") public class DocumentModel { ...... } I have a use case in which …

---

## [Prioritize recent content by date](https://discuss.elastic.co/t/prioritize-recent-content-by-date/269483)

<div class="topic-metadata">

**Author:** [@Bott\_Radio\_Network](https://discuss.elastic.co/u/Bott_Radio_Network)\
**Replies:** 3\
**Last updated:** [April 16, 2021, 4:44pm UTC](https://discuss.elastic.co/t/prioritize-recent-content-by-date/269483 "2021-04-16T16:44:50Z")

</div>

Hi, I'm trying to make newer documents score higher in my search results, similar to this post How to prioritize more recent content? but I'm trying to do it in App Search. I added a proximity boost on the date field cen…

---

## [Getting hour value from @timestamp in a custom 'hour' field](https://discuss.elastic.co/t/getting-hour-value-from-timestamp-in-a-custom-hour-field/111168)

<div class="topic-metadata">

**Author:** [@EtienneDemers](https://discuss.elastic.co/u/EtienneDemers)\
**Replies:** 4\
**Last updated:** [January 12, 2018, 2:50pm UTC](https://discuss.elastic.co/t/getting-hour-value-from-timestamp-in-a-custom-hour-field/111168 "2018-01-12T14:50:09Z")

</div>

Hi all, I'm currently tring to get the hour of my document's timestamp in a custom 'hour' field. I did some research and found the following solution but the resulting value in the hour field is always 5 hour higher th…

---

## [No log4j2 configuration file found](https://discuss.elastic.co/t/no-log4j2-configuration-file-found/86543)

<div class="topic-metadata">

**Author:** [@froufrou2224](https://discuss.elastic.co/u/froufrou2224)\
**Replies:** 5\
**Last updated:** [May 23, 2017, 1:24pm UTC](https://discuss.elastic.co/t/no-log4j2-configuration-file-found/86543 "2017-05-23T13:24:27Z")

</div>

Hello, I tried to import a Maven Project on Eclipse, but there's problem. Eclipse sent me this : ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console. …

---

## [Wildcard Not Working as Expected](https://discuss.elastic.co/t/wildcard-not-working-as-expected/70489)

<div class="topic-metadata">

**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\
**Replies:** 3\
**Last updated:** [January 4, 2017, 7:28pm UTC](https://discuss.elastic.co/t/wildcard-not-working-as-expected/70489 "2017-01-04T19:28:54Z")

</div>

Why does this query work as expected: { "size": 100, "fields": \["document", "orgs.normalized"\], "query": { "query\_string" : { "query" : "orgs.normalized: UBER" } } } B…

---

## [APM Server with docker - Only POST requests are supported](https://discuss.elastic.co/t/apm-server-with-docker-only-post-requests-are-supported/178683)

<div class="topic-metadata">

**Author:** [@massilva](https://discuss.elastic.co/u/massilva)\
**Replies:** 1\
**Last updated:** [April 29, 2019, 1:24am UTC](https://discuss.elastic.co/t/apm-server-with-docker-only-post-requests-are-supported/178683 "2019-04-29T01:24:14Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.0…

---

## [Plot latency measure based on two time fields in an index](https://discuss.elastic.co/t/plot-latency-measure-based-on-two-time-fields-in-an-index/73244)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 2\
**Last updated:** [January 31, 2017, 3:23pm UTC](https://discuss.elastic.co/t/plot-latency-measure-based-on-two-time-fields-in-an-index/73244 "2017-01-31T15:23:57Z")

</div>

Hi All: I am not sure if this has been asked and answered (my searches have not returned results for this), So here goes : I have an index with a timestamp of when a document was persisted to the index as well as…

---

## [Filter field by length](https://discuss.elastic.co/t/filter-field-by-length/128745)

<div class="topic-metadata">

**Author:** [@tim99](https://discuss.elastic.co/u/tim99)\
**Replies:** 4\
**Last updated:** [April 20, 2018, 12:50pm UTC](https://discuss.elastic.co/t/filter-field-by-length/128745 "2018-04-20T12:50:37Z")

</div>

hi there, i tried to select data in condition to have only values with length \<= 4 in the feild "src". elasticsearch version : 6.2.3 kibana version : 6.2.3 that's my script : ( i'm working on kibana ) { "query": { …

---

## [Logstash can't run as non-privileged user logstash](https://discuss.elastic.co/t/logstash-cant-run-as-non-privileged-user-logstash/27535)

<div class="topic-metadata">

**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\
**Replies:** 2\
**Last updated:** [August 17, 2015, 9:04pm UTC](https://discuss.elastic.co/t/logstash-cant-run-as-non-privileged-user-logstash/27535 "2015-08-17T21:04:43Z")

</div>

Ubuntu 12.04 Logstash 1.5.3 Logstash launches, but does not forward log files as user 'logstash'. It can (I know, I know, this is Wrong Of Me) as user root. I am confused. (I will add that I've spent most of the la…

---

## [Multiple hosts output](https://discuss.elastic.co/t/multiple-hosts-output/66226)

<div class="topic-metadata">

**Author:** [@elastic-fan](https://discuss.elastic.co/u/elastic-fan)\
**Replies:** 6\
**Last updated:** [November 16, 2016, 12:26pm UTC](https://discuss.elastic.co/t/multiple-hosts-output/66226 "2016-11-16T12:26:16Z")

</div>

Hi, i have a local ES and also elastic cloud ES, the local ES dont have uid and pwd where as the elastic cloud ES has , how can i specify this in logstash output output { if \[type\] == "output" { elasticsear…

---

## [Elasticsearch master node having high memory pressure](https://discuss.elastic.co/t/elasticsearch-master-node-having-high-memory-pressure/205079)

<div class="topic-metadata">

**Author:** [@Komal\_Agarwal](https://discuss.elastic.co/u/Komal_Agarwal)\
**Replies:** 4\
**Last updated:** [October 25, 2019, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-master-node-having-high-memory-pressure/205079 "2019-10-25T06:16:17Z")

</div>

We have our elastic cluster set up in 3 zones right now. The current setup is: 6 data nodes - 2 in each zone - having 58GB RAM each 3 master nodes - 1 in each zone - having 8GB RAM each We are noticing that a master n…

---

## [Unable to start logstash configuration file](https://discuss.elastic.co/t/unable-to-start-logstash-configuration-file/218503)

<div class="topic-metadata">

**Author:** [@Charles\_Yuliansen](https://discuss.elastic.co/u/Charles_Yuliansen)\
**Replies:** 4\
**Last updated:** [February 10, 2020, 8:28am UTC](https://discuss.elastic.co/t/unable-to-start-logstash-configuration-file/218503 "2020-02-10T08:28:57Z")

</div>

this is my first time running logstash on container. Im running logstash on the same container elasticsearch + kibana. Its running on ubuntu. i run my conf file by using /usr/share/logstash/bin/logstash -f conf.d/logs…

---

## [Uninstall older versions of elasticsearch and kibana](https://discuss.elastic.co/t/uninstall-older-versions-of-elasticsearch-and-kibana/156868)

<div class="topic-metadata">

**Author:** [@ronyarmon](https://discuss.elastic.co/u/ronyarmon)\
**Replies:** 2\
**Last updated:** [November 18, 2018, 6:22am UTC](https://discuss.elastic.co/t/uninstall-older-versions-of-elasticsearch-and-kibana/156868 "2018-11-18T06:22:37Z")

</div>

Hello, I just installed elasticsearch and kibana 6.5 on Ubuntu 18.04.1 . Can you explain how to remove the older versions? (elasticsearch 6.4.2, kibana 6.4.3)

---

## [Encrypt / secure Database password in logstash.conf file](https://discuss.elastic.co/t/encrypt-secure-database-password-in-logstash-conf-file/210137)

<div class="topic-metadata">

**Author:** [@sampath1](https://discuss.elastic.co/u/sampath1)\
**Replies:** 5\
**Last updated:** [December 2, 2019, 11:02am UTC](https://discuss.elastic.co/t/encrypt-secure-database-password-in-logstash-conf-file/210137 "2019-12-02T11:02:39Z")

</div>

Hi, I am new to this Logstash. I don't want to specify plain text "username" and "password" in logstash.conf for the Database input plugin. Is there any way to do that? Is there any possible way to encrypt or hide the…

---

## [Send logs to AWS S3](https://discuss.elastic.co/t/send-logs-to-aws-s3/42914)

<div class="topic-metadata">

**Author:** [@babeesh](https://discuss.elastic.co/u/babeesh)\
**Replies:** 5\
**Last updated:** [March 11, 2016, 11:12pm UTC](https://discuss.elastic.co/t/send-logs-to-aws-s3/42914 "2016-03-11T23:12:30Z")

</div>

I have setup ELK on AWS EC2. and started sending logs to it. But after 1 week logserver stopped working due to less space on device. So I need to move the logs to S3 . But no idea of that. Please help me to start w…

---

## [Logstash doesn't create new indexes](https://discuss.elastic.co/t/logstash-doesnt-create-new-indexes/95047)

<div class="topic-metadata">

**Author:** [@Omoidashita](https://discuss.elastic.co/u/Omoidashita)\
**Replies:** 4\
**Last updated:** [July 29, 2017, 9:53pm UTC](https://discuss.elastic.co/t/logstash-doesnt-create-new-indexes/95047 "2017-07-29T21:53:45Z")

</div>

am a new user of ELK 5.5.1 (Elasticsearch, Logstash, Kibana). I am making a monitoring server using ELK with Ubuntu 16.4. I have for the moment two sources of data, Netflow from my rooter and Collectd from my server. P…

---

## [Grok multiple pattern and tag\_on\_failure for each pattern](https://discuss.elastic.co/t/grok-multiple-pattern-and-tag-on-failure-for-each-pattern/150816)

<div class="topic-metadata">

**Author:** [@sagark](https://discuss.elastic.co/u/sagark)\
**Replies:** 4\
**Last updated:** [October 5, 2018, 5:17pm UTC](https://discuss.elastic.co/t/grok-multiple-pattern-and-tag-on-failure-for-each-pattern/150816 "2018-10-05T17:17:38Z")

</div>

Hello, I am trying to use multiple grok pattern under single grok, but when any of the pattern matches, it should not add tag\_on\_failure. Or can I add tag\_on\_failure for each pattern? Configuration is as below: grok { …

---

## [Specify the number of decimal places on an aggregate average](https://discuss.elastic.co/t/specify-the-number-of-decimal-places-on-an-aggregate-average/92449)

<div class="topic-metadata">

**Author:** [@slarsendisney](https://discuss.elastic.co/u/slarsendisney)\
**Replies:** 4\
**Last updated:** [July 12, 2017, 11:59am UTC](https://discuss.elastic.co/t/specify-the-number-of-decimal-places-on-an-aggregate-average/92449 "2017-07-12T11:59:32Z")

</div>

Within my input on one of my watches I have : "aggs": { "e2e\_av\_time": { "avg": { "field" : "e2e\_time" } } (Note that e2e\_time is a long within my …

---

## [Java API - "Unable to parse response body for Response"at term suggestions query](https://discuss.elastic.co/t/java-api-unable-to-parse-response-body-for-response-at-term-suggestions-query/207255)

<div class="topic-metadata">

**Author:** [@gustavo.lei](https://discuss.elastic.co/u/gustavo.lei)\
**Replies:** 0\
**Last updated:** [November 10, 2019, 6:41pm UTC](https://discuss.elastic.co/t/java-api-unable-to-parse-response-body-for-response-at-term-suggestions-query/207255 "2019-11-10T18:41:04Z")

</div>

I'm trying to use implement Elasticsearch terms suggestions query using Java High Level Rest Client but going some issues. Some important information: I'm using jdk8 I'm using the latest version of java api (7.4) Any o…

---

## [How to post json query in Discover](https://discuss.elastic.co/t/how-to-post-json-query-in-discover/135580)

<div class="topic-metadata">

**Author:** [@gthang](https://discuss.elastic.co/u/gthang)\
**Replies:** 3\
**Last updated:** [June 13, 2018, 1:32pm UTC](https://discuss.elastic.co/t/how-to-post-json-query-in-discover/135580 "2018-06-13T13:32:35Z")

</div>

I have composed the following query in the dev tools, and when I try to copy the json portion after the search, I just get an error message. Any thoughts on how I should paste the query in the discover tool? Thanks, gt…

---

## [How to calculate the Percentage in Datatable](https://discuss.elastic.co/t/how-to-calculate-the-percentage-in-datatable/79252)

<div class="topic-metadata">

**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\
**Replies:** 2\
**Last updated:** [March 22, 2017, 10:07am UTC](https://discuss.elastic.co/t/how-to-calculate-the-percentage-in-datatable/79252 "2017-03-22T10:07:56Z")

</div>

As i am trying to calculate the percentage in Kibana 5.2.0 I am not able to see the percetage in the Metrics dropdown (able to see only Percentile and Percentile rank) Could you please help me out how to add percentage …

---

## [Logstash-jdbc-input Timezone issue](https://discuss.elastic.co/t/logstash-jdbc-input-timezone-issue/58783)

<div class="topic-metadata">

**Author:** [@slion](https://discuss.elastic.co/u/slion)\
**Replies:** 7\
**Last updated:** [April 12, 2017, 7:10pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-timezone-issue/58783 "2017-04-12T19:10:26Z")

</div>

When I use logstash-jdbc-input plugin to import data from Sql Server, the imported time is utc-based which is not same with my origin data. How to solve this? Second, the sql\_last\_value always logged in UTC timezone ei…

---

## [Performance issues with input-beats plugin](https://discuss.elastic.co/t/performance-issues-with-input-beats-plugin/37516)

<div class="topic-metadata">

**Author:** [@cooper6581](https://discuss.elastic.co/u/cooper6581)\
**Replies:** 5\
**Last updated:** [April 4, 2016, 11:13am UTC](https://discuss.elastic.co/t/performance-issues-with-input-beats-plugin/37516 "2016-04-04T11:13:52Z")

</div>

I'm running into strange performance issues with the input-beats plug-in. Logstash: 2.1.1 (duplicated on trunk yesterday FWiW) input-beats: 2.0.3 filebeat: 1.0.1 It seems like throughput it being bottle-necked by s…

[Previous page](https://discuss.elastic.co/top.md?page=377&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=379&per_page=50&period=all)