# Top

**URL:** https://discuss.elastic.co/top.md?page=382&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 383

---

## [Grok filter if \[type\]](https://discuss.elastic.co/t/grok-filter-if-type/69430)

<div class="topic-metadata">

**Author:** [@ariceELK](https://discuss.elastic.co/u/ariceELK)\
**Replies:** 4\
**Last updated:** [December 19, 2016, 12:40pm UTC](https://discuss.elastic.co/t/grok-filter-if-type/69430 "2016-12-19T12:40:01Z")

</div>

Hi, Were using logstash 5.1.1 adn cannot get the if statement to work in the the filter: filter { if \[type\] == "log" { grok { patterns\_dir =\> \["/opt/grok/patterns"\] match =\> { "message" =\> \[ Grok …

---

## [How to create drop down box with filter options for query on custom visualisation?](https://discuss.elastic.co/t/how-to-create-drop-down-box-with-filter-options-for-query-on-custom-visualisation/184590)

<div class="topic-metadata">

**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\
**Replies:** 3\
**Last updated:** [June 11, 2019, 2:34pm UTC](https://discuss.elastic.co/t/how-to-create-drop-down-box-with-filter-options-for-query-on-custom-visualisation/184590 "2019-06-11T14:34:12Z")

</div>

I have written a custom visualisation for Kibana 6.5, which has its own custom request and response handlers. It queries elasticsearch and returns all the data for the chosen time period in its raw format. My issue is th…

---

## [Error :Current license is non-compliant for JDBC](https://discuss.elastic.co/t/error-current-license-is-non-compliant-for-jdbc/193290)

<div class="topic-metadata">

**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\
**Replies:** 5\
**Last updated:** [August 2, 2019, 3:00pm UTC](https://discuss.elastic.co/t/error-current-license-is-non-compliant-for-jdbc/193290 "2019-08-02T15:00:07Z")

</div>

why this error is coming please reply . is elastic search is paid service? if this is open source then why showing this error. Note:-i am trying to run through jdbc conn.

---

## [Plans to Support System Firewall Management?](https://discuss.elastic.co/t/plans-to-support-system-firewall-management/308388)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 0\
**Last updated:** [June 28, 2022, 6:38pm UTC](https://discuss.elastic.co/t/plans-to-support-system-firewall-management/308388 "2022-06-28T18:38:30Z")

</div>

Hi All, I was wondering if there are any plans to be able support the management of system firewalls via Endpoint Security/Elastic Agent? Context, if I want to have system level firewall rules, I currently need to mana…

---

## [Visualising field values as count metric in Kibana](https://discuss.elastic.co/t/visualising-field-values-as-count-metric-in-kibana/95103)

<div class="topic-metadata">

**Author:** [@ravick](https://discuss.elastic.co/u/ravick)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 1:30am UTC](https://discuss.elastic.co/t/visualising-field-values-as-count-metric-in-kibana/95103 "2017-08-01T01:30:26Z")

</div>

Hi All, I have already imported json results of to my index and I would like to visualise and plot the json results to take the Count from the field “doc\_count”:3467 and assign that to the respective country field. I ha…

---

## [키바나에서 엘라스틱 서치에 있는 인덱스 데이터를 어떻게 받고, 웹에 띄우나요?](https://discuss.elastic.co/t/topic/93483)

<div class="topic-metadata">

**Author:** [@WooDaeKyun](https://discuss.elastic.co/u/WooDaeKyun)\
**Replies:** 5\
**Last updated:** [August 4, 2017, 4:57am UTC](https://discuss.elastic.co/t/topic/93483 "2017-08-04T04:57:25Z")

</div>

키바나에서 엘라스틱 서치에 있는 인덱스 데이터를 어떻게 받고, 웹에 띄우나요? 터미널로 logstash/bin/logstash -f ./logstash.conf 한다든지 키바나를 실행해서 엘라스틱서치로 만들어 놓은 인덱스를 찾아서 활성화한다든지 그런걸 말하는게 아니고요 ELK가 오픈 소스잖아요. 키바나 폴더 내 또는 엘라스틱 서치 폴더 내에 있는 소스코드(js, 배쉬) 파일 통해서 알…

---

## [Event Correlation on ELK](https://discuss.elastic.co/t/event-correlation-on-elk/194362)

<div class="topic-metadata">

**Author:** [@alperensoydan](https://discuss.elastic.co/u/alperensoydan)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 12:07pm UTC](https://discuss.elastic.co/t/event-correlation-on-elk/194362 "2019-08-26T12:07:08Z")

</div>

Hello, I installed ELK as a SIEM and It works nicely. There is only one problem is that correlation of different events and it does not come default within ELK. According to my researches, Logstash filters work for this…

---

## [Index only created if sincedb\_path = /dev/null](https://discuss.elastic.co/t/index-only-created-if-sincedb-path-dev-null/164657)

<div class="topic-metadata">

**Author:** [@wholzgruber](https://discuss.elastic.co/u/wholzgruber)\
**Replies:** 2\
**Last updated:** [January 21, 2019, 2:24pm UTC](https://discuss.elastic.co/t/index-only-created-if-sincedb-path-dev-null/164657 "2019-01-21T14:24:44Z")

</div>

Dear Community, I need your help regarding following issue. I´m parsing a couple of log files from a honeywell system. Those 68 log files are quite small (about 600kb until 22mb) and have timestamps from 2014 until no…

---

## [How to define a new geo\_shape field using Painless](https://discuss.elastic.co/t/how-to-define-a-new-geo-shape-field-using-painless/88161)

<div class="topic-metadata">

**Author:** [@raposa](https://discuss.elastic.co/u/raposa)\
**Replies:** 7\
**Last updated:** [June 7, 2017, 4:16am UTC](https://discuss.elastic.co/t/how-to-define-a-new-geo-shape-field-using-painless/88161 "2017-06-07T04:16:15Z")

</div>

I have two float fields that represent a latitude and longitude. I want to perform an \_update\_by\_query and add a new geo\_shape field to each document using the values from the lat/lon fields. It works easily enough for…

---

## [Cluster in Red status: what about write & delete operations?](https://discuss.elastic.co/t/cluster-in-red-status-what-about-write-delete-operations/58678)

<div class="topic-metadata">

**Author:** [@steccami](https://discuss.elastic.co/u/steccami)\
**Replies:** 2\
**Last updated:** [August 24, 2016, 8:12am UTC](https://discuss.elastic.co/t/cluster-in-red-status-what-about-write-delete-operations/58678 "2016-08-24T08:12:57Z")

</div>

Hi there. We have a cluster running ES v2.3.1 on N physical servers. After a node failure, the cluster keeps working on the remaining N-1 machines and the cluster status turns RED because some indices with replica 0 lost…

---

## [Filebeat and journald?](https://discuss.elastic.co/t/filebeat-and-journald/49978)

<div class="topic-metadata">

**Author:** [@Devnull](https://discuss.elastic.co/u/Devnull)\
**Replies:** 2\
**Last updated:** [May 17, 2016, 10:52am UTC](https://discuss.elastic.co/t/filebeat-and-journald/49978 "2016-05-17T10:52:03Z")

</div>

Hi, I've recently been upgrading a few Ubuntu Servers to 16.04LTS and I notice they've been shifting towards systemd and its associated journald for logging. Does anything special need to be done with Filebeat (or in…

---

## [How to read json file as input and index the data using elasticsearch as output?](https://discuss.elastic.co/t/how-to-read-json-file-as-input-and-index-the-data-using-elasticsearch-as-output/79997)

<div class="topic-metadata">

**Author:** [@Sowji\_Sowjanya](https://discuss.elastic.co/u/Sowji_Sowjanya)\
**Replies:** 1\
**Last updated:** [March 27, 2017, 7:32am UTC](https://discuss.elastic.co/t/how-to-read-json-file-as-input-and-index-the-data-using-elasticsearch-as-output/79997 "2017-03-27T07:32:16Z")

</div>

Hi, I have a file having Json data. I have an index "company" and document-type as "employee" present in my local elasticsearch server. I am unable to index the data from the file and send it to elasticsearch server. …

---

## [ElasticSearch Restoration - How to overwrite existing datas](https://discuss.elastic.co/t/elasticsearch-restoration-how-to-overwrite-existing-datas/162134)

<div class="topic-metadata">

**Author:** [@genseb](https://discuss.elastic.co/u/genseb)\
**Replies:** 1\
**Last updated:** [December 26, 2018, 4:30pm UTC](https://discuss.elastic.co/t/elasticsearch-restoration-how-to-overwrite-existing-datas/162134 "2018-12-26T16:30:51Z")

</div>

Hi, Process a backup using curl -XPUT "http://localhost:9200/\_snapshot/s3\_repository/snap1?wait\_for\_completion=true" command. When I try to restore this backup, I'm encountering following issue: {"error":{"root\_cause"…

---

## [SUM of two fields?](https://discuss.elastic.co/t/sum-of-two-fields/83958)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 1\
**Last updated:** [April 28, 2017, 8:00am UTC](https://discuss.elastic.co/t/sum-of-two-fields/83958 "2017-04-28T08:00:21Z")

</div>

Hello, I've got a metric with two metrics, SUM field A and SUM field B. I would like to add another metric that contains the SUM of field A and field B but this data is not in ES (Kibana would need to generate it from …

---

## [Security error with beats\_system account and Filebeat with system module](https://discuss.elastic.co/t/security-error-with-beats-system-account-and-filebeat-with-system-module/146822)

<div class="topic-metadata">

**Author:** [@itblaked](https://discuss.elastic.co/u/itblaked)\
**Replies:** 3\
**Last updated:** [September 3, 2018, 2:47am UTC](https://discuss.elastic.co/t/security-error-with-beats-system-account-and-filebeat-with-system-module/146822 "2018-09-03T02:47:48Z")

</div>

Hey, I'm encountering an error which indicates that the builtin beats\_system user account doesn't have enough permissions in the ES cluster to perform a particular task, though it works when I test with a superuser acco…

---

## [How to mirror official ElasticStack repo?](https://discuss.elastic.co/t/how-to-mirror-official-elasticstack-repo/64411)

<div class="topic-metadata">

**Author:** [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Replies:** 2\
**Last updated:** [October 31, 2016, 9:04am UTC](https://discuss.elastic.co/t/how-to-mirror-official-elasticstack-repo/64411 "2016-10-31T09:04:23Z")

</div>

ElasticStack repo is so slow in China, so I need a mirror repo. But I don't know how to mirror from official repo. Is there any ways like rsync or ftp for mirroring?

---

## [Rotating ES Logs](https://discuss.elastic.co/t/rotating-es-logs/57297)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 1\
**Last updated:** [August 5, 2016, 6:08am UTC](https://discuss.elastic.co/t/rotating-es-logs/57297 "2016-08-05T06:08:27Z")

</div>

Hey all, My ES logs are growing quite large on a daily basis. I understand that ES uses log4j for log rotation. But unfortunately I don't know enough about it to rotate my logs as needed. Currently ES logs can grow up…

---

## [JDBC does not create .logstash\_jdbc\_last\_run](https://discuss.elastic.co/t/jdbc-does-not-create-logstash-jdbc-last-run/37334)

<div class="topic-metadata">

**Author:** [@aviv.ratzon](https://discuss.elastic.co/u/aviv.ratzon)\
**Replies:** 0\
**Last updated:** [December 16, 2015, 9:56am UTC](https://discuss.elastic.co/t/jdbc-does-not-create-logstash-jdbc-last-run/37334 "2015-12-16T09:56:00Z")

</div>

Everything worked OK, until I made some change I guess. I tried everything - different computer, different conf, redownloading the logstash and the plugin. It just won't create the file. I tried specifying another path …

---

## [OSS repo is not working](https://discuss.elastic.co/t/oss-repo-is-not-working/226730)

<div class="topic-metadata">

**Author:** [@jovan](https://discuss.elastic.co/u/jovan)\
**Replies:** 7\
**Last updated:** [April 9, 2020, 6:48am UTC](https://discuss.elastic.co/t/oss-repo-is-not-working/226730 "2020-04-09T06:48:39Z")

</div>

Hi team, I wanted to report that OSS repo is not working properly, it has non oss packages instead of oss packages: https://artifacts.elastic.co/packages/oss-7.x/yum We need it, as we use the OSS packages through repo…

---

## [How can I parse array of objects using Logstash?](https://discuss.elastic.co/t/how-can-i-parse-array-of-objects-using-logstash/228640)

<div class="topic-metadata">

**Author:** [@cezar996](https://discuss.elastic.co/u/cezar996)\
**Replies:** 6\
**Last updated:** [April 21, 2020, 3:31pm UTC](https://discuss.elastic.co/t/how-can-i-parse-array-of-objects-using-logstash/228640 "2020-04-21T15:31:53Z")

</div>

Hello everybody! Does anybody knows how can I parse an array of objects of this type: \[{name:Cezar, age:23}, {name:Leon, age:22}, {name:Steven, age:33}\]. Every object should be an event in Discovery Section. Please take…

---

## [ElasticSearch SerializationError exception using Python API](https://discuss.elastic.co/t/elasticsearch-serializationerror-exception-using-python-api/82838)

<div class="topic-metadata">

**Author:** [@dtrizna](https://discuss.elastic.co/u/dtrizna)\
**Replies:** 1\
**Last updated:** [April 20, 2017, 11:38am UTC](https://discuss.elastic.co/t/elasticsearch-serializationerror-exception-using-python-api/82838 "2017-04-20T11:38:36Z")

</div>

Hi, community! It looks like that I can't get with this case by my own. Looked through similar topics here, on Stack Overflow and over the google, but.. I'm trying to update some specific document within ES (in fact, i…

---

## [Case-insensitive search of a substring in many (or all) fields](https://discuss.elastic.co/t/case-insensitive-search-of-a-substring-in-many-or-all-fields/227650)

<div class="topic-metadata">

**Author:** [@jfschaff](https://discuss.elastic.co/u/jfschaff)\
**Replies:** 7\
**Last updated:** [April 13, 2020, 1:17am UTC](https://discuss.elastic.co/t/case-insensitive-search-of-a-substring-in-many-or-all-fields/227650 "2020-04-13T01:17:10Z")

</div>

Hi everyone, I'm new to Elasticsearch, and have been playing with the query language and reading the doc lately. And I find it hard to construct the right query for my need... I have simple documents, with only a few t…

---

## [How to implement pagination using java](https://discuss.elastic.co/t/how-to-implement-pagination-using-java/246018)

<div class="topic-metadata">

**Author:** [@abhishek\_chaturvedi](https://discuss.elastic.co/u/abhishek_chaturvedi)\
**Replies:** 4\
**Last updated:** [August 24, 2020, 6:59am UTC](https://discuss.elastic.co/t/how-to-implement-pagination-using-java/246018 "2020-08-24T06:59:32Z")

</div>

Hi All, Could someone guide me with some code snippet on writing pagination logic using ES java rest high level client api. Below is my service code: @Override public List getResponses(ZonedDateTime startDate, ZonedDa…

---

## [Проблемы с ram](https://discuss.elastic.co/t/ram/33534)

<div class="topic-metadata">

**Author:** [@Fess](https://discuss.elastic.co/u/Fess)\
**Replies:** 6\
**Last updated:** [February 2, 2016, 3:43pm UTC](https://discuss.elastic.co/t/ram/33534 "2016-02-02T15:43:20Z")

</div>

Здравствуйте, при заливки данных в elastic возникли проблемы следующего типа. Elastic полностью съедает всю оперативную память на нодах с данными. Это происходит, когда в индексе более 150 миллионов документов и индекс д…

---

## [Elastic.slack.com](https://discuss.elastic.co/t/elastic-slack-com/93021)

<div class="topic-metadata">

**Author:** [@zeves095](https://discuss.elastic.co/u/zeves095)\
**Replies:** 5\
**Last updated:** [July 17, 2017, 9:08pm UTC](https://discuss.elastic.co/t/elastic-slack-com/93021 "2017-07-17T21:08:31Z")

</div>

how to login to elastic.slack.com ? (it's necessary or @elastic.co mail or guest account)

---

## [Recommendation for large synonym file](https://discuss.elastic.co/t/recommendation-for-large-synonym-file/42740)

<div class="topic-metadata">

**Author:** [@timpb](https://discuss.elastic.co/u/timpb)\
**Replies:** 7\
**Last updated:** [February 26, 2016, 5:09pm UTC](https://discuss.elastic.co/t/recommendation-for-large-synonym-file/42740 "2016-02-26T17:09:48Z")

</div>

Hi all, I am looking into the synonym token filter and the Elasticsearch documentation recommends that when you work with large synonym datasets you should set the synonyms\_path to a file over inserting synonyms direct…

---

## [Value too large to output (365 bytes)](https://discuss.elastic.co/t/value-too-large-to-output-365-bytes/138413)

<div class="topic-metadata">

**Author:** [@Toni\_Riera](https://discuss.elastic.co/u/Toni_Riera)\
**Replies:** 4\
**Last updated:** [July 5, 2018, 2:09pm UTC](https://discuss.elastic.co/t/value-too-large-to-output-365-bytes/138413 "2018-07-05T14:09:15Z")

</div>

Good Afternoon, I finally presented my final grade work with ELK, and i'm quite happy of the results. By the way, we're adding new features when it talks to data analysis and painting graphics. One of the problems that…

---

## [Timezone in range query builder for epoch timestamp](https://discuss.elastic.co/t/timezone-in-range-query-builder-for-epoch-timestamp/111940)

<div class="topic-metadata">

**Author:** [@jpmiitian](https://discuss.elastic.co/u/jpmiitian)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 4:36pm UTC](https://discuss.elastic.co/t/timezone-in-range-query-builder-for-epoch-timestamp/111940 "2018-01-04T16:36:28Z")

</div>

Hi I have timestamp field in the ES Doc which has epoch timestamp UTC \[long value\]. Ques : How can I retrieve data in other time zone from the epoch timestamps in ES. As we have support in DateHistogramAggregatio…

---

## [Logstash IPV4 bind issue](https://discuss.elastic.co/t/logstash-ipv4-bind-issue/271303)

<div class="topic-metadata">

**Author:** [@edvrfn](https://discuss.elastic.co/u/edvrfn)\
**Replies:** 6\
**Last updated:** [April 28, 2021, 9:09pm UTC](https://discuss.elastic.co/t/logstash-ipv4-bind-issue/271303 "2021-04-28T21:09:52Z")

</div>

I have stopped/disabled firewalld and restarted logstash/Elasticsearch services but netstat only shows them listening only on IPv6. Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address …

---

## [How to connect mysql database by logstash?](https://discuss.elastic.co/t/how-to-connect-mysql-database-by-logstash/61004)

<div class="topic-metadata">

**Author:** [@ajay\_shanker](https://discuss.elastic.co/u/ajay_shanker)\
**Replies:** 2\
**Last updated:** [September 21, 2016, 4:20am UTC](https://discuss.elastic.co/t/how-to-connect-mysql-database-by-logstash/61004 "2016-09-21T04:20:53Z")

</div>

step 1.I installed logstash in c drive and create a simple-out.conf file with this code # file: simple-out.conf input { jdbc { # Postgres jdbc connection string to our database, mydb …

---

## [Kibana: \["error","elasticsearch","data"\],"pid":35607,"message":"\[status\_exception\]: error while executing search"}](https://discuss.elastic.co/t/kibana-error-elasticsearch-data-pid-35607-message-status-exception-error-while-executing-search/259055)

<div class="topic-metadata">

**Author:** [@Somesh\_ng](https://discuss.elastic.co/u/Somesh_ng)\
**Replies:** 1\
**Last updated:** [December 23, 2020, 6:20pm UTC](https://discuss.elastic.co/t/kibana-error-elasticsearch-data-pid-35607-message-status-exception-error-while-executing-search/259055 "2020-12-23T18:20:51Z")

</div>

I'm getting below error while trying to search data from the kibana dashboard. Attaching the UI screenshot. { "request": {}, "response": {}, "body": { "statusCode": 400, "error": "Bad Request", "…

---

## [Elasticsearch 7.4 unable to read truststore file](https://discuss.elastic.co/t/elasticsearch-7-4-unable-to-read-truststore-file/236504)

<div class="topic-metadata">

**Author:** [@bytemedwb](https://discuss.elastic.co/u/bytemedwb)\
**Replies:** 3\
**Last updated:** [June 11, 2020, 3:17pm UTC](https://discuss.elastic.co/t/elasticsearch-7-4-unable-to-read-truststore-file/236504 "2020-06-11T15:17:15Z")

</div>

All: I am having the same error as described in this post: In my log file I get the following: Caused by: org.elasticsearch.ElasticsearchException: failed to initialize SSL TrustManager - access to read truststore fi…

---

## [Elastic-agent 7.10.0 install error](https://discuss.elastic.co/t/elastic-agent-7-10-0-install-error/255368)

<div class="topic-metadata">

**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\
**Replies:** 6\
**Last updated:** [December 8, 2020, 10:02pm UTC](https://discuss.elastic.co/t/elastic-agent-7-10-0-install-error/255368 "2020-12-08T22:02:38Z")

</div>

I have tried this on a couple different GCP instances with the same error below ffoti@ep-test-gcp-debian:~$ sudo rpm -vi elastic-agent-7.10.0-x86\_64.rpm sudo: rpm: command not found ffoti@ep-test-gcp-debian:~$ curl -L …

---

## [\[Solved\] Filebeat on Raspberry Pi?](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099)

<div class="topic-metadata">

**Author:** [@andig](https://discuss.elastic.co/u/andig)\
**Replies:** 6\
**Last updated:** [December 22, 2017, 7:32am UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099 "2017-12-22T07:32:59Z")

</div>

I'm new to ELK and have problems getting started. I got: ELK stack installed on nas via docker filebeat compiled from source on mac via docker image and scp'ed to raspberry beats git cloned to Raspberry Did it this wa…

---

## [How to get elaticsearch access logs](https://discuss.elastic.co/t/how-to-get-elaticsearch-access-logs/72024)

<div class="topic-metadata">

**Author:** [@rajraja](https://discuss.elastic.co/u/rajraja)\
**Replies:** 1\
**Last updated:** [January 18, 2017, 3:02pm UTC](https://discuss.elastic.co/t/how-to-get-elaticsearch-access-logs/72024 "2017-01-18T15:02:30Z")

</div>

Hi Team, I am using elaticsearch 5.1.1 I would like to track my elasticsearch access logs. I tried with Shield but it is not supported for ES 5.X. Please give some suggestions how to get my elasticsearch access logs in…

---

## [NEST 7 Against ES 8 Compatibility Mode Question](https://discuss.elastic.co/t/nest-7-against-es-8-compatibility-mode-question/345726)

<div class="topic-metadata">

**Author:** [@Sarah\_McQueary](https://discuss.elastic.co/u/Sarah_McQueary)\
**Replies:** 3\
**Last updated:** [October 26, 2023, 1:24pm UTC](https://discuss.elastic.co/t/nest-7-against-es-8-compatibility-mode-question/345726 "2023-10-26T13:24:16Z")

</div>

@stephenb Hello. We are in the process of upgrading ES to 8.x. Our code is still using NEST 7.x. We have been testing using NEST 7.x against ES 8.x and do not see any issues so far. We have tried with compatibly mode "t…

---

## [Problems Installing plugin on debian](https://discuss.elastic.co/t/problems-installing-plugin-on-debian/86206)

<div class="topic-metadata">

**Author:** [@sindrehi](https://discuss.elastic.co/u/sindrehi)\
**Replies:** 4\
**Last updated:** [May 18, 2017, 8:38am UTC](https://discuss.elastic.co/t/problems-installing-plugin-on-debian/86206 "2017-05-18T08:38:54Z")

</div>

Hi, I've installed elasticsearch on a debian server. Now I try to install some plugins but have no luck. What I've tried is sudo bin/plugin --install ingest-attachment sudo bin/plugin --install elasticsearch/ingest-at…

---

## [\[allocate\_stale\_primary\] primary is already assigned](https://discuss.elastic.co/t/allocate-stale-primary-primary-is-already-assigned/142995)

<div class="topic-metadata">

**Author:** [@jethroft](https://discuss.elastic.co/u/jethroft)\
**Replies:** 6\
**Last updated:** [August 6, 2018, 7:30pm UTC](https://discuss.elastic.co/t/allocate-stale-primary-primary-is-already-assigned/142995 "2018-08-06T19:30:33Z")

</div>

My ES 5.6.3 cluster is yellow: administrator@srv4-sv:~$ curl -XGET 'localhost:9200/\_cluster/health?pretty' { "cluster\_name" : "redacted", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 15, "numb…

---

## [Kibana 7.17.23/8.15.0 Security Updates (ESA-2024-32, ESA-2024-33)](https://discuss.elastic.co/t/kibana-7-17-23-8-15-0-security-updates-esa-2024-32-esa-2024-33/373548)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [January 23, 2025, 5:52am UTC](https://discuss.elastic.co/t/kibana-7-17-23-8-15-0-security-updates-esa-2024-32-esa-2024-33/373548 "2025-01-23T05:52:11Z")

</div>

Kibana allocation of resources without limits or throttling leads to crash (ESA-2024-33) An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api…

---

## [How to keep ElasticSearch in sync with a database using LogStash](https://discuss.elastic.co/t/how-to-keep-elasticsearch-in-sync-with-a-database-using-logstash/66717)

<div class="topic-metadata">

**Author:** [@Erates](https://discuss.elastic.co/u/Erates)\
**Replies:** 3\
**Last updated:** [December 13, 2016, 6:52am UTC](https://discuss.elastic.co/t/how-to-keep-elasticsearch-in-sync-with-a-database-using-logstash/66717 "2016-12-13T06:52:50Z")

</div>

Hi, I'm relatively new to Logstash, and even though I've browsed the web for a few days now, I can not seem to find out how my problem should be handled. I have a database with roughly 35 million records. Every minut…

---

## [Upgrade from 4.0 to 4.1](https://discuss.elastic.co/t/upgrade-from-4-0-to-4-1/29045)

<div class="topic-metadata">

**Author:** [@cburkins](https://discuss.elastic.co/u/cburkins)\
**Replies:** 4\
**Last updated:** [September 10, 2015, 8:29pm UTC](https://discuss.elastic.co/t/upgrade-from-4-0-to-4-1/29045 "2015-09-10T20:29:49Z")

</div>

I'd like to upgrade from Kibana 4.0 to Kibana 4.1 I'm doing this so that I can then export/import my dashboards to another instance. I can't seem to find any instructions on how to perform this upgrade. Can someone…

---

## [Kibana 6.3-Region Map could not retieve manifest](https://discuss.elastic.co/t/kibana-6-3-region-map-could-not-retieve-manifest/141226)

<div class="topic-metadata">

**Author:** [@fug](https://discuss.elastic.co/u/fug)\
**Replies:** 5\
**Last updated:** [July 23, 2018, 5:55pm UTC](https://discuss.elastic.co/t/kibana-6-3-region-map-could-not-retieve-manifest/141226 "2018-07-23T17:55:24Z")

</div>

When trying to create a 'Region Map' visualization I receive the following and no map is displayed: Region map: Could not retrieve manifest from the tile service: status -1 Searching blogs a call out to elastic maps se…

---

## [Certificate doesn't match any of the subject alternative names](https://discuss.elastic.co/t/certificate-doesnt-match-any-of-the-subject-alternative-names/298091)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 2\
**Last updated:** [March 8, 2022, 1:20am UTC](https://discuss.elastic.co/t/certificate-doesnt-match-any-of-the-subject-alternative-names/298091 "2022-03-08T01:20:38Z")

</div>

Since update to ELK 8 there is following problem: \[2022-02-23T23:18:41,619\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Failed to perform request {:message=\>"Certificate for \<elasticsearch\> doesn't match any of the sub…

---

## [Random node disconnects - Java.io.IOException: Connection timed out](https://discuss.elastic.co/t/random-node-disconnects-java-io-ioexception-connection-timed-out/33151)

<div class="topic-metadata">

**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\
**Replies:** 1\
**Last updated:** [October 28, 2015, 2:38pm UTC](https://discuss.elastic.co/t/random-node-disconnects-java-io-ioexception-connection-timed-out/33151 "2015-10-28T14:38:35Z")

</div>

EDIT 3: Solution TLDR \[:smile:\] : I found a way to finally solve this. This blog post describes it very well. My linux kernel has a bug with the network scatter/gather functionality. Turning this off solves this issue…

---

## [How to test performance of filebeat](https://discuss.elastic.co/t/how-to-test-performance-of-filebeat/57130)

<div class="topic-metadata">

**Author:** [@Nipun\_Ahuja](https://discuss.elastic.co/u/Nipun_Ahuja)\
**Replies:** 2\
**Last updated:** [August 8, 2016, 12:56pm UTC](https://discuss.elastic.co/t/how-to-test-performance-of-filebeat/57130 "2016-08-08T12:56:44Z")

</div>

Hi Everyone, I am new to the ELK Stack. I wanted to know if we could test the performance of filebeat. I am developing a system that would have a huge amount of logs generated within a short amount of time. Therefore, …

---

## [CreateIndex Pattern Error (forbidden)](https://discuss.elastic.co/t/createindex-pattern-error-forbidden/216404)

<div class="topic-metadata">

**Author:** [@Barancan\_GENC](https://discuss.elastic.co/u/Barancan_GENC)\
**Replies:** 3\
**Last updated:** [January 28, 2020, 2:50pm UTC](https://discuss.elastic.co/t/createindex-pattern-error-forbidden/216404 "2020-01-28T14:50:03Z")

</div>

Hi, I tried to install elasticsearch and kibana, I installed successfully but when i create index pattern i got this error "forbidden", why i got this error. I searched a lot of source of elk but i cant find any soluti…

---

## [Parent-child performance issue](https://discuss.elastic.co/t/parent-child-performance-issue/47635)

<div class="topic-metadata">

**Author:** [@xam](https://discuss.elastic.co/u/xam)\
**Replies:** 6\
**Last updated:** [April 18, 2016, 3:00pm UTC](https://discuss.elastic.co/t/parent-child-performance-issue/47635 "2016-04-18T15:00:16Z")

</div>

Hi, I run some performance tests on parent-child queries. I have very bigggg parent documents and very small child documents, with different update cycles (that is why I use parent/child instead of nested documents). T…

---

## [Is it possible to minimize the log size?](https://discuss.elastic.co/t/is-it-possible-to-minimize-the-log-size/29912)

<div class="topic-metadata">

**Author:** [@sarala.muralikrishna](https://discuss.elastic.co/u/sarala.muralikrishna)\
**Replies:** 7\
**Last updated:** [October 13, 2015, 7:44am UTC](https://discuss.elastic.co/t/is-it-possible-to-minimize-the-log-size/29912 "2015-10-13T07:44:17Z")

</div>

I want to limit the size of elastic search log file and make it circular by giving the size

---

## [Kibana 8.10.1 Security Update](https://discuss.elastic.co/t/kibana-8-10-1-security-update/343287)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 0\
**Last updated:** [September 18, 2023, 5:53pm UTC](https://discuss.elastic.co/t/kibana-8-10-1-security-update/343287 "2023-09-18T17:53:06Z")

</div>

Kibana Insertion of Sensitive Information into Log File (ESA-2023-17) An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana ve…

---

## [Fastest way to retrieve all ids in an index?](https://discuss.elastic.co/t/fastest-way-to-retrieve-all-ids-in-an-index/180955)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 2\
**Last updated:** [May 14, 2019, 11:06am UTC](https://discuss.elastic.co/t/fastest-way-to-retrieve-all-ids-in-an-index/180955 "2019-05-14T11:06:21Z")

</div>

I have an index which has around 300 million documents. What is the fastest recommended way to retrieve all the documentIDs from the index? Currently I am using the below python script for doing a scan and scroll to ret…

[Previous page](https://discuss.elastic.co/top.md?page=381&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=383&per_page=50&period=all)
