# Top

**URL:** https://discuss.elastic.co/top.md?page=380&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 381

---

## [Writing a custom scoring plugin](https://discuss.elastic.co/t/writing-a-custom-scoring-plugin/19576)

<div class="topic-metadata">

**Author:** [@Srinivasan\_Ramaswamy](https://discuss.elastic.co/u/Srinivasan_Ramaswamy)\
**Replies:** 7\
**Last updated:** [May 12, 2017, 4:08pm UTC](https://discuss.elastic.co/t/writing-a-custom-scoring-plugin/19576 "2017-05-12T16:08:55Z")

</div>

I am trying to write a custom scoring plugin that will let me provide some extra data that is not in the index (through an external service) and do customized ranking. I would ideally like to custom score all the doc…

---

## [Pass multiple conditions as an array to drop\_event](https://discuss.elastic.co/t/pass-multiple-conditions-as-an-array-to-drop-event/221502)

<div class="topic-metadata">

**Author:** [@jibsonline](https://discuss.elastic.co/u/jibsonline)\
**Replies:** 8\
**Last updated:** [March 5, 2020, 4:50pm UTC](https://discuss.elastic.co/t/pass-multiple-conditions-as-an-array-to-drop-event/221502 "2020-03-05T16:50:06Z")

</div>

Hi, I am trying to pass multiple values as an array to drop\_event This works processors: - drop\_event: when: contains: message: "Starting Session" But I have multipl…

---

## [How to show the password of the elastic built-in superuser elastic?](https://discuss.elastic.co/t/how-to-show-the-password-of-the-elastic-built-in-superuser-elastic/310485)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 6\
**Last updated:** [July 25, 2022, 9:53am UTC](https://discuss.elastic.co/t/how-to-show-the-password-of-the-elastic-built-in-superuser-elastic/310485 "2022-07-25T09:53:11Z")

</div>

how to show the password of the elastic built-in superuser elastic? the pass was given when you installed elasticsearch

---

## [Error Connecting Logstash to Found Elasticsearch](https://discuss.elastic.co/t/error-connecting-logstash-to-found-elasticsearch/25207)

<div class="topic-metadata">

**Author:** [@ScottLawrenceLawson](https://discuss.elastic.co/u/ScottLawrenceLawson)\
**Replies:** 8\
**Last updated:** [July 10, 2015, 5:13am UTC](https://discuss.elastic.co/t/error-connecting-logstash-to-found-elasticsearch/25207 "2015-07-10T05:13:07Z")

</div>

I am a total newbie to ELK stack and am following along with this tutorial (https://www.found.no/foundation/analyzing-weblogs-with-elasticsearch/) on my Win7 Laptop. I installed all bits and got LS working with the basic…

---

## [Unable to allocate index](https://discuss.elastic.co/t/unable-to-allocate-index/203653)

<div class="topic-metadata">

**Author:** [@Merlin\_Nunez](https://discuss.elastic.co/u/Merlin_Nunez)\
**Replies:** 7\
**Last updated:** [October 17, 2019, 12:02pm UTC](https://discuss.elastic.co/t/unable-to-allocate-index/203653 "2019-10-17T12:02:15Z")

</div>

Hi All, I´veen facing issue with an elasticsearch cluster, that first out of the blue, and later after a restart failed to allocate an index. The cluser has a single node atm and replication is disabled. When I check …

---

## [How to siparate message string to fields?](https://discuss.elastic.co/t/how-to-siparate-message-string-to-fields/166586)

<div class="topic-metadata">

**Author:** [@Sergejs\_Kuznecovs](https://discuss.elastic.co/u/Sergejs_Kuznecovs)\
**Replies:** 7\
**Last updated:** [February 11, 2019, 8:09pm UTC](https://discuss.elastic.co/t/how-to-siparate-message-string-to-fields/166586 "2019-02-11T20:09:14Z")

</div>

Hi! I need a help. I imported csv file using filebeat to the kibana. after that created in management -\> index pattern. Now I have field message where written all my strings from file. How can I get from message string …

---

## [Handling Null Values](https://discuss.elastic.co/t/handling-null-values/107867)

<div class="topic-metadata">

**Author:** [@sidra\_89](https://discuss.elastic.co/u/sidra_89)\
**Replies:** 6\
**Last updated:** [November 16, 2017, 8:58am UTC](https://discuss.elastic.co/t/handling-null-values/107867 "2017-11-16T08:58:15Z")

</div>

Hi .. i want to search where the field value is either equal to null or have some value like suppose if the field name is brand\_name then i want to get record where brand\_name is either equal to null (null means no val…

---

## [Query for counting docs in all indices](https://discuss.elastic.co/t/query-for-counting-docs-in-all-indices/149236)

<div class="topic-metadata">

**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\
**Replies:** 8\
**Last updated:** [September 20, 2018, 10:59am UTC](https://discuss.elastic.co/t/query-for-counting-docs-in-all-indices/149236 "2018-09-20T10:59:23Z")

</div>

I need a query that counts all docs in all indices. I have found and read the \_count API, but GET /\_all/\_count for example only gives the number of documents in all indices together. If I substitude \_all with an index n…

---

## [Node stopped and kicked out of cluster](https://discuss.elastic.co/t/node-stopped-and-kicked-out-of-cluster/76205)

<div class="topic-metadata">

**Author:** [@Akarshit\_Wal](https://discuss.elastic.co/u/Akarshit_Wal)\
**Replies:** 4\
**Last updated:** [February 24, 2017, 9:49pm UTC](https://discuss.elastic.co/t/node-stopped-and-kicked-out-of-cluster/76205 "2017-02-24T21:49:05Z")

</div>

In a cluster of 3 nodes 1 node was automatically stopped and kicked out of the cluster. When I checked the log file this is what the exception was - \[2017-02-23T04:15:57,244\]\[ERROR\]\[i.n.u.c.D.rejectedExecution\] F…

---

## [Default value in Elastic mapping](https://discuss.elastic.co/t/default-value-in-elastic-mapping/81965)

<div class="topic-metadata">

**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\
**Replies:** 5\
**Last updated:** [April 19, 2017, 4:58am UTC](https://discuss.elastic.co/t/default-value-in-elastic-mapping/81965 "2017-04-19T04:58:29Z")

</div>

Hello All, Any idea if we can set some default value to particular field, while defining the mapping for an index. For example I have a log which writes to 10 lines (not necessarily in same order) and identified with r…

---

## [Java application using BulkProcessing hangs if elasticsearch hangs](https://discuss.elastic.co/t/java-application-using-bulkprocessing-hangs-if-elasticsearch-hangs/36960)

<div class="topic-metadata">

**Author:** [@paul\_nibin](https://discuss.elastic.co/u/paul_nibin)\
**Replies:** 8\
**Last updated:** [September 16, 2016, 3:47am UTC](https://discuss.elastic.co/t/java-application-using-bulkprocessing-hangs-if-elasticsearch-hangs/36960 "2016-09-16T03:47:47Z")

</div>

Using ES 1.7.1 as the server and TransportClient in java application. Java application hangs after some time and becomes unresponsive. We are indexing data using bulk API. In application there are 256 worker threads. J…

---

## [What is the difference between query\_string and multi-match for querying docs?](https://discuss.elastic.co/t/what-is-the-difference-between-query-string-and-multi-match-for-querying-docs/15566)

<div class="topic-metadata">

**Author:** [@dark\_shadow](https://discuss.elastic.co/u/dark_shadow)\
**Replies:** 4\
**Last updated:** [February 4, 2014, 11:32am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-query-string-and-multi-match-for-querying-docs/15566 "2014-02-04T11:32:30Z")

</div>

Hi, Can anyone please tell me a detailed difference between these two queries. I studied the documentation but not able to figure out the difference between two. Can anyone please explain it with some examples in …

---

## [How To Create Custom Query Parser As a Plugin?](https://discuss.elastic.co/t/how-to-create-custom-query-parser-as-a-plugin/38588)

<div class="topic-metadata">

**Author:** [@aditya.lukman](https://discuss.elastic.co/u/aditya.lukman)\
**Replies:** 7\
**Last updated:** [January 11, 2016, 8:29am UTC](https://discuss.elastic.co/t/how-to-create-custom-query-parser-as-a-plugin/38588 "2016-01-11T08:29:57Z")

</div>

Hai, i want to create custom query parser in elasticsearch 2.1.0, how register my parser to elastic as a plugin ? i try add method onModule in FooPlugin class public void onModule(IndicesModule indicesModule) { …

---

## [FATAL Error: EACCES: permission denied, open '/etc/kibana/certs/vm1.local.crt'](https://discuss.elastic.co/t/fatal-error-eacces-permission-denied-open-etc-kibana-certs-vm1-local-crt/189178)

<div class="topic-metadata">

**Author:** [@mhsh64](https://discuss.elastic.co/u/mhsh64)\
**Replies:** 3\
**Last updated:** [July 8, 2019, 1:09pm UTC](https://discuss.elastic.co/t/fatal-error-eacces-permission-denied-open-etc-kibana-certs-vm1-local-crt/189178 "2019-07-08T13:09:45Z")

</div>

Hello. I get the following after configuring kibana.yml to use certificate: FATAL Error: EACCES: permission denied, open '/etc/kibana/certs/vm1.local.crt' Below are permissions: \[root@vm1 certs\]# ls -l /etc/kibana/ …

---

## [Logstash Bulk Indexing](https://discuss.elastic.co/t/logstash-bulk-indexing/153924)

<div class="topic-metadata">

**Author:** [@Panda8](https://discuss.elastic.co/u/Panda8)\
**Replies:** 6\
**Last updated:** [October 25, 2018, 8:54am UTC](https://discuss.elastic.co/t/logstash-bulk-indexing/153924 "2018-10-25T08:54:50Z")

</div>

Hello Community, I am new to Logstash and I was looking through the Logstash documentation for support of Bulk Indexing in elasticsearch output plugin. I got one config "bulk\_path" related to this. But I am unable to un…

---

## [Error when adding node into cluster - Failed to send join request to master](https://discuss.elastic.co/t/error-when-adding-node-into-cluster-failed-to-send-join-request-to-master/55414)

<div class="topic-metadata">

**Author:** [@sattu531](https://discuss.elastic.co/u/sattu531)\
**Replies:** 5\
**Last updated:** [July 13, 2016, 2:55pm UTC](https://discuss.elastic.co/t/error-when-adding-node-into-cluster-failed-to-send-join-request-to-master/55414 "2016-07-13T14:55:29Z")

</div>

Hi, I am creating multiple nodes under one cluster. before to set up ES on production Server, i m doing it on my local machine- Got tar file of ES and unzipped it and put same in two directorories(D1,D2) and also install…

---

## [How to delete old indices automatically in elasticsearch](https://discuss.elastic.co/t/how-to-delete-old-indices-automatically-in-elasticsearch/293643)

<div class="topic-metadata">

**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\
**Replies:** 2\
**Last updated:** [January 6, 2022, 1:10pm UTC](https://discuss.elastic.co/t/how-to-delete-old-indices-automatically-in-elasticsearch/293643 "2022-01-06T13:10:34Z")

</div>

Hi i need clear solution how can i delete the old indices data automatically after a period of time.thank you

---

## [I'm Getting Master Not Discovered Exception On Remote Server](https://discuss.elastic.co/t/im-getting-master-not-discovered-exception-on-remote-server/188508)

<div class="topic-metadata">

**Author:** [@emrealtan](https://discuss.elastic.co/u/emrealtan)\
**Replies:** 7\
**Last updated:** [July 9, 2019, 7:08am UTC](https://discuss.elastic.co/t/im-getting-master-not-discovered-exception-on-remote-server/188508 "2019-07-09T07:08:18Z")

</div>

I'm trying to configure Elastic Search on one of our remote servers. I've installed it with .msi setup file (v7.1.1) and configured the firewall for 9200 and 9300 ports. When I set network.publish\_host to server ip it g…

---

## [Sum of True (Boolean Field)](https://discuss.elastic.co/t/sum-of-true-boolean-field/89418)

<div class="topic-metadata">

**Author:** [@Vinuja1](https://discuss.elastic.co/u/Vinuja1)\
**Replies:** 8\
**Last updated:** [June 16, 2017, 8:19pm UTC](https://discuss.elastic.co/t/sum-of-true-boolean-field/89418 "2017-06-16T20:19:34Z")

</div>

Hello everyone, In order to use Extended Metric and create a hit ratio, I need to count the number of True (boolean field). I have looked at scripted fields and mapping to convert my boolean to a number field and then …

---

## [\[.monitoring-logstash\] Pipeline terminated {"pipeline.id"=\>".monitoring-logstash"}](https://discuss.elastic.co/t/monitoring-logstash-pipeline-terminated-pipeline-id-monitoring-logstash/264619)

<div class="topic-metadata">

**Author:** [@grillo](https://discuss.elastic.co/u/grillo)\
**Replies:** 4\
**Last updated:** [February 18, 2021, 7:47pm UTC](https://discuss.elastic.co/t/monitoring-logstash-pipeline-terminated-pipeline-id-monitoring-logstash/264619 "2021-02-18T19:47:30Z")

</div>

Hello everyone, I have a cluster of four nodes running - secured with certificates. I have followed the tutorials to include a logstash to the cluster. At the moment I don't even use /conf.d/\* configuration files to all…

---

## [Visualization to show Timeline events](https://discuss.elastic.co/t/visualization-to-show-timeline-events/190695)

<div class="topic-metadata">

**Author:** [@Hoan\_Le](https://discuss.elastic.co/u/Hoan_Le)\
**Replies:** 5\
**Last updated:** [July 20, 2019, 3:50am UTC](https://discuss.elastic.co/t/visualization-to-show-timeline-events/190695 "2019-07-20T03:50:11Z")

</div>

Hello all I'm trying to find the way to display a sequence of events graphically like this Any help ? Thanks!

---

## [\[resolved\] Delete\_by\_query using elasticsearch-py](https://discuss.elastic.co/t/resolved-delete-by-query-using-elasticsearch-py/52782)

<div class="topic-metadata">

**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\
**Replies:** 5\
**Last updated:** [August 11, 2016, 9:44am UTC](https://discuss.elastic.co/t/resolved-delete-by-query-using-elasticsearch-py/52782 "2016-08-11T09:44:34Z")

</div>

Hello Guys, I tried delete\_by\_query using using Python , because I need automation some task in my ELK cluster. Now I'm using a simple script in bash with the following code: #!/bin/bash /usr/bin/curl -X…

---

## [How to create Elasticsearch docker container, create indexes and seed data in one step?](https://discuss.elastic.co/t/how-to-create-elasticsearch-docker-container-create-indexes-and-seed-data-in-one-step/167561)

<div class="topic-metadata">

**Author:** [@rpm1984](https://discuss.elastic.co/u/rpm1984)\
**Replies:** 3\
**Last updated:** [February 8, 2019, 10:39am UTC](https://discuss.elastic.co/t/how-to-create-elasticsearch-docker-container-create-indexes-and-seed-data-in-one-step/167561 "2019-02-08T10:39:25Z")

</div>

Hi there! So i'm using the Elasticsearch docker image to develop locally. Works great. Now what i'd like to do as part of a docker-compose script is to: Create an instance of Elasticsearch via docker image Create ind…

---

## [Using kibana behind a load balancer](https://discuss.elastic.co/t/using-kibana-behind-a-load-balancer/60733)

<div class="topic-metadata">

**Author:** [@Francisco\_Lopez](https://discuss.elastic.co/u/Francisco_Lopez)\
**Replies:** 1\
**Last updated:** [September 16, 2016, 5:48pm UTC](https://discuss.elastic.co/t/using-kibana-behind-a-load-balancer/60733 "2016-09-16T17:48:04Z")

</div>

I currently have a cluster of 3 boxes running ELK, and they work fine if hit individually. However, when I group them behind the a load balancer I'm getting: Courier Fetch Error: unhandled error Error: Bad Request a…

---

## [Elasticsearch 5.1.1 update thread\_pool setting](https://discuss.elastic.co/t/elasticsearch-5-1-1-update-thread-pool-setting/70562)

<div class="topic-metadata">

**Author:** [@junior\_h](https://discuss.elastic.co/u/junior_h)\
**Replies:** 5\
**Last updated:** [January 5, 2017, 2:26pm UTC](https://discuss.elastic.co/t/elasticsearch-5-1-1-update-thread-pool-setting/70562 "2017-01-05T14:26:51Z")

</div>

Hi, I've run cluster of ES 1.5 & ES 2.4 in production and ES 5.1.1 in stagging. On ES 5.1.1, I'm failed to update thread\_pool with query like: ================= curl -XPUT localhost:9200/\_cluster/settings -d ' { "…

---

## [\[SOLVED\]Logstash configuration problem identification](https://discuss.elastic.co/t/solved-logstash-configuration-problem-identification/146739)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 1\
**Last updated:** [August 30, 2018, 3:53pm UTC](https://discuss.elastic.co/t/solved-logstash-configuration-problem-identification/146739 "2018-08-30T15:53:40Z")

</div>

Hello . I cannot figure out the problem in this configuration I have created: I get error: \[2018-08-30T17:43:41,301\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Crea…

---

## [Duplicate documents in paginated query results](https://discuss.elastic.co/t/duplicate-documents-in-paginated-query-results/2094)

<div class="topic-metadata">

**Author:** [@Barak\_Cohen](https://discuss.elastic.co/u/Barak_Cohen)\
**Replies:** 3\
**Last updated:** [June 17, 2016, 4:58am UTC](https://discuss.elastic.co/t/duplicate-documents-in-paginated-query-results/2094 "2016-06-17T04:58:12Z")

</div>

Hi We've recently started witnessing duplicated results in our search results when paginating. We're running ES 1.5.0 on a 5 node cluster (1 primary + 2 replicas per shard). Using a simple bash line I'm sending 5 pag…

---

## [Getting "UnavailableShardsException" sometimes only](https://discuss.elastic.co/t/getting-unavailableshardsexception-sometimes-only/49063)

<div class="topic-metadata">

**Author:** [@K\_Samanth\_Kumar\_Redd](https://discuss.elastic.co/u/K_Samanth_Kumar_Redd)\
**Replies:** 7\
**Last updated:** [August 11, 2016, 3:26pm UTC](https://discuss.elastic.co/t/getting-unavailableshardsexception-sometimes-only/49063 "2016-08-11T15:26:42Z")

</div>

Hi, I am creating elasticsearch index using java with elasticsearch-2.2.0 version. I am stuckup with an exception: "UnavailableShardsException" I am using BULK API to create my index. Some times the index is being crea…

---

## [Elastic Stack 6.1.3 and 5.6.7 security update](https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [January 30, 2018, 6:21pm UTC](https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683 "2018-01-30T18:21:47Z")

</div>

Kibana incomplete fix for ESA-2017-23 (ESA-2018-03) The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login…

---

## [Was the elasticsearch-php repository deleted?](https://discuss.elastic.co/t/was-the-elasticsearch-php-repository-deleted/369723)

<div class="topic-metadata">

**Author:** [@d0tt](https://discuss.elastic.co/u/d0tt)\
**Replies:** 5\
**Last updated:** [October 29, 2024, 3:29pm UTC](https://discuss.elastic.co/t/was-the-elasticsearch-php-repository-deleted/369723 "2024-10-29T15:29:58Z")

</div>

https://github.com/elastic/elasticsearch-php returns 404, our builds are failing etc.. Accident or what is going on? :smiley:

---

## [KIBANA : String Length based Filter to my documents](https://discuss.elastic.co/t/kibana-string-length-based-filter-to-my-documents/242927)

<div class="topic-metadata">

**Author:** [@Nivas\_Sundar](https://discuss.elastic.co/u/Nivas_Sundar)\
**Replies:** 6\
**Last updated:** [August 1, 2020, 6:38am UTC](https://discuss.elastic.co/t/kibana-string-length-based-filter-to-my-documents/242927 "2020-08-01T06:38:08Z")

</div>

I need to Get the Length of a String datatype value and exclude the documents which have more than 4 characters using Elastic search custom query. I tried below query and didn't work. NO LUCK ! Could anyone help . { "q…

---

## [Copy data of one index into other index](https://discuss.elastic.co/t/copy-data-of-one-index-into-other-index/13358)

<div class="topic-metadata">

**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\
**Replies:** 4\
**Last updated:** [August 29, 2013, 5:06am UTC](https://discuss.elastic.co/t/copy-data-of-one-index-into-other-index/13358 "2013-08-29T05:06:01Z")

</div>

Hi All, I have two indexes(lets say tweetindex, tweetindex1) with same mapping and same index type. I am copying all shards of first index into second index directly. For copying shards i am copying shards direct…

---

## [Help for painless iterate nested fields](https://discuss.elastic.co/t/help-for-painless-iterate-nested-fields/162394)

<div class="topic-metadata">

**Author:** [@Sky\_Iprd](https://discuss.elastic.co/u/Sky_Iprd)\
**Replies:** 3\
**Last updated:** [January 24, 2019, 4:17pm UTC](https://discuss.elastic.co/t/help-for-painless-iterate-nested-fields/162394 "2019-01-24T16:17:44Z")

</div>

This is my query, I have try few of them ( below ) trying to iterate the nested fields for compare the profit between 2017 and 2018 year. How can I iterate the nested fields ? Please help in advance... 1.for (int i=0; i\<…

---

## [Kafka Integration Between Filebeat and Logstash](https://discuss.elastic.co/t/kafka-integration-between-filebeat-and-logstash/110799)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 7\
**Last updated:** [December 12, 2017, 12:07pm UTC](https://discuss.elastic.co/t/kafka-integration-between-filebeat-and-logstash/110799 "2017-12-12T12:07:48Z")

</div>

Hi All, I want to integrate KAFKA between Filebeat and Logstash . My ELK stack is ready but to have more stability , i need this . Please help me in configuring the same . If anyone has DOCS for the same , Please do…

---

## [Error while running logstash config file](https://discuss.elastic.co/t/error-while-running-logstash-config-file/51360)

<div class="topic-metadata">

**Author:** [@cwp](https://discuss.elastic.co/u/cwp)\
**Replies:** 2\
**Last updated:** [May 31, 2016, 3:39am UTC](https://discuss.elastic.co/t/error-while-running-logstash-config-file/51360 "2016-05-31T03:39:18Z")

</div>

I am new to Kibana and want to import data from Excel. I was told to get Logstash and create a config file (Below is the file). When executing I get this error message. Please advise Thanks bin/logstash agent -f logstas…

---

## [Hardware requirement in ELK](https://discuss.elastic.co/t/hardware-requirement-in-elk/63872)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 2\
**Last updated:** [October 26, 2016, 10:31am UTC](https://discuss.elastic.co/t/hardware-requirement-in-elk/63872 "2016-10-26T10:31:12Z")

</div>

Hi All, Its been a few months we are using the ELK stack and its pretty amazing.We do planning to get commercial plugins which is seems to be awesome. So we thought we could implement with Production.By seeing some …

---

## [Logstash conf problem](https://discuss.elastic.co/t/logstash-conf-problem/47397)

<div class="topic-metadata">

**Author:** [@Jpuch](https://discuss.elastic.co/u/Jpuch)\
**Replies:** 4\
**Last updated:** [September 2, 2016, 8:30pm UTC](https://discuss.elastic.co/t/logstash-conf-problem/47397 "2016-09-02T20:30:10Z")

</div>

Hi, I have a problem with logstash, when i add a grok filter, logstash seem to stop sending data to ES or kibana. My data come by udp protocol on port 514 here is my filter conf file (the ELK system is working fin…

---

## [Failed to determine the health of the cluster](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/325290)

<div class="topic-metadata">

**Author:** [@goodeejay](https://discuss.elastic.co/u/goodeejay)\
**Replies:** 1\
**Last updated:** [February 10, 2023, 8:56pm UTC](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/325290 "2023-02-10T20:56:57Z")

</div>

Hello, I've been trying to generate enrollment token for kibana with: sudo /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s "kibana" But I'm getting an error, the last line says: ERROR: Failed to …

---

## [JDBC tracking a string column for unique ingestion](https://discuss.elastic.co/t/jdbc-tracking-a-string-column-for-unique-ingestion/108662)

<div class="topic-metadata">

**Author:** [@ericohtake](https://discuss.elastic.co/u/ericohtake)\
**Replies:** 8\
**Last updated:** [November 22, 2017, 1:07pm UTC](https://discuss.elastic.co/t/jdbc-tracking-a-string-column-for-unique-ingestion/108662 "2017-11-22T13:07:43Z")

</div>

I'm trying to ingest just new rows from our database (existent rows never change), but I'm facing some problems on keeping track of what have been already ingested. This fact causes data duplication when sent to ES. I'm…

---

## [Elastic Search and Logstash for SNMP](https://discuss.elastic.co/t/elastic-search-and-logstash-for-snmp/39089)

<div class="topic-metadata">

**Author:** [@Jansi](https://discuss.elastic.co/u/Jansi)\
**Replies:** 3\
**Last updated:** [January 14, 2016, 7:24am UTC](https://discuss.elastic.co/t/elastic-search-and-logstash-for-snmp/39089 "2016-01-14T07:24:23Z")

</div>

Hi, I have collected the SNMP from router in Cent OS using Logstash also imported those into ES. Now I need a clarification on this. I have to separate MIB name and value from received message. also have to do som…

---

## [How to use Filebeat with a custom index and pattern](https://discuss.elastic.co/t/how-to-use-filebeat-with-a-custom-index-and-pattern/194730)

<div class="topic-metadata">

**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\
**Replies:** 3\
**Last updated:** [August 15, 2019, 10:37am UTC](https://discuss.elastic.co/t/how-to-use-filebeat-with-a-custom-index-and-pattern/194730 "2019-08-15T10:37:41Z")

</div>

I am using Filebeat for supported log formats and using the default index settings and mappings etc.. This is great.. Now i also want to send a custom JSON log file, also using Filebeat, but want to send it into it's o…

---

## [How to configure the publish address of elasticsearch 5.0 with CLI flags](https://discuss.elastic.co/t/how-to-configure-the-publish-address-of-elasticsearch-5-0-with-cli-flags/74884)

<div class="topic-metadata">

**Author:** [@fvosberg](https://discuss.elastic.co/u/fvosberg)\
**Replies:** 2\
**Last updated:** [February 17, 2017, 8:04pm UTC](https://discuss.elastic.co/t/how-to-configure-the-publish-address-of-elasticsearch-5-0-with-cli-flags/74884 "2017-02-17T20:04:10Z")

</div>

I've used elasticsearch 2.0 with start up flags to configure the publish\_addres. I need the publish address to be configured, because I want to start elasticsearch in a docker container and access it from outside. So the…

---

## [Kibana not starting. \[.kibana\_task\_manager\] Action failed with 'Request timed out'](https://discuss.elastic.co/t/kibana-not-starting-kibana-task-manager-action-failed-with-request-timed-out/317898)

<div class="topic-metadata">

**Author:** [@rkimera](https://discuss.elastic.co/u/rkimera)\
**Replies:** 7\
**Last updated:** [November 5, 2022, 11:31am UTC](https://discuss.elastic.co/t/kibana-not-starting-kibana-task-manager-action-failed-with-request-timed-out/317898 "2022-11-05T11:31:58Z")

</div>

I am able to run the elasticsearch server at port 9200. But this kibana server is failing to start throwing an error. I have downgraded to version 7. x.x from 8. x.x but still get the same error. I am using a Mac os. \</…

---

## [When should we set pipeline.workers to 1?](https://discuss.elastic.co/t/when-should-we-set-pipeline-workers-to-1/222072)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 7\
**Last updated:** [March 4, 2020, 6:45pm UTC](https://discuss.elastic.co/t/when-should-we-set-pipeline-workers-to-1/222072 "2020-03-04T18:45:55Z")

</div>

Hi, I have read (but cant find where and what) that in some conditions pipeline.workers should be set to 1 or else the information is not processed in the right order. My configuration in conf.d is to have several file…

---

## [Ruby exception undefined method \`each'](https://discuss.elastic.co/t/ruby-exception-undefined-method-each/158727)

<div class="topic-metadata">

**Author:** [@Elango-mas](https://discuss.elastic.co/u/Elango-mas)\
**Replies:** 3\
**Last updated:** [December 11, 2018, 6:55am UTC](https://discuss.elastic.co/t/ruby-exception-undefined-method-each/158727 "2018-12-11T06:55:05Z")

</div>

i have to check the list of values h=\[2,3,7,12\] in below array details { a= \[1,2,3,4\] , b=\[5,6,7,8\] , c=\[9,10\] , d=\[11,12,13\] } and have to create a new array as below details\_new { a=\[2,3\] , b=\[7\], d=\[12\] } I am usi…

---

## [Master election - got Failed To Commit Cluster State Exception](https://discuss.elastic.co/t/master-election-got-failed-to-commit-cluster-state-exception/240821)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 5\
**Last updated:** [July 12, 2020, 8:22am UTC](https://discuss.elastic.co/t/master-election-got-failed-to-commit-cluster-state-exception/240821 "2020-07-12T08:22:20Z")

</div>

We are working with Elastic 7.2.1. Elastic master (node-2) had a long GC pause. \[2020-06-30T07:30:11.778+0000\]\[3665\]\[gc \] GC(248) Pause Young (Allocation Failure) 222M-\>86M(494M) 32547.255ms \[2020-06-30T07:30:11.778+00…

---

## [Is there a way to merge two indices](https://discuss.elastic.co/t/is-there-a-way-to-merge-two-indices/315980)

<div class="topic-metadata">

**Author:** [@Dedsec0](https://discuss.elastic.co/u/Dedsec0)\
**Replies:** 1\
**Last updated:** [October 6, 2022, 4:17pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-merge-two-indices/315980 "2022-10-06T16:17:50Z")

</div>

Hi, I want to merge two indices( index 1, index 2) and make as one index( index 3), For instance : let say, I have index 1 and index 2 have matching fields like ... index 1 :(doc count 1) { "operation": "add", "ti…

---

## [Could not locate that index-pattern (id: false), click here to re-create it](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-false-click-here-to-re-create-it/138816)

<div class="topic-metadata">

**Author:** [@Preethi](https://discuss.elastic.co/u/Preethi)\
**Replies:** 7\
**Last updated:** [August 2, 2018, 12:38pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-false-click-here-to-re-create-it/138816 "2018-08-02T12:38:24Z")

</div>

Hi, Could anyone check why this error encounters while creating an index-pattern in Kibana. Provided the index got created in ES. This index is created from a .log file. Kibana lists down the index from ES. But when c…

---

## [Unable to setup authentication using x-pack](https://discuss.elastic.co/t/unable-to-setup-authentication-using-x-pack/82585)

<div class="topic-metadata">

**Author:** [@praveen133t](https://discuss.elastic.co/u/praveen133t)\
**Replies:** 5\
**Last updated:** [April 18, 2017, 10:19pm UTC](https://discuss.elastic.co/t/unable-to-setup-authentication-using-x-pack/82585 "2017-04-18T22:19:23Z")

</div>

I have setup the ELK stack and also installed x-pack plugin. I then created a new user. Now whenever I run the following command it gives me this response. curl -u adminuser:password -XGET http://localhost:9200 {"er…

---

## [Change Elasticsearch data store path](https://discuss.elastic.co/t/change-elasticsearch-data-store-path/65686)

<div class="topic-metadata">

**Author:** [@manojvenkat](https://discuss.elastic.co/u/manojvenkat)\
**Replies:** 2\
**Last updated:** [November 10, 2016, 3:49pm UTC](https://discuss.elastic.co/t/change-elasticsearch-data-store-path/65686 "2016-11-10T15:49:10Z")

</div>

Hi All, I am using Elasticsearch 2.4 and I wanted to store the elastic search index files in different location I specify. I changed the path.data: /apps/opt/elasticsearch in elasticsearch.yml. But I am not seeing th…

[Previous page](https://discuss.elastic.co/top.md?page=379&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=381&per_page=50&period=all)
