# Top **URL:** https://discuss.elastic.co/top.md?page=383&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 384 --- ## [Calculate Difference between 2 Dates in Scipted Field](https://discuss.elastic.co/t/calculate-difference-between-2-dates-in-scipted-field/153129)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 3\ **Last updated:** [October 22, 2018, 9:11am UTC](https://discuss.elastic.co/t/calculate-difference-between-2-dates-in-scipted-field/153129 "2018-10-22T09:11:31Z")
Hi All, I am trying to create a new scripted field by calculating the difference(in seconds) between 2 date in the following format \` October 15th 2018, 22:15:27.823 The two fields I am using are start\_time and end\_… --- ## [Issue starting Elasticsearch on windows](https://discuss.elastic.co/t/issue-starting-elasticsearch-on-windows/40039)
**Author:** [@Ij888](https://discuss.elastic.co/u/Ij888)\ **Replies:** 8\ **Last updated:** [January 27, 2016, 8:17am UTC](https://discuss.elastic.co/t/issue-starting-elasticsearch-on-windows/40039 "2016-01-27T08:17:48Z")
elasticsearch cmd closes rapidly on double-clicking elasticsearch.bat. How can I please stop this and make it work as outlined in the elasticsearch docs? --- ## [Scripted field in kibana (count)](https://discuss.elastic.co/t/scripted-field-in-kibana-count/140647)
**Author:** [@Gokul\_15](https://discuss.elastic.co/u/Gokul_15)\ **Replies:** 7\ **Last updated:** [July 23, 2018, 4:37am UTC](https://discuss.elastic.co/t/scripted-field-in-kibana-count/140647 "2018-07-23T04:37:14Z")
how can i find the count of the string with some condition in scripted field ??? eg:doc\['gender'\].count.value=="male" i know this is wrong i need something concept like this --- ## [Difference between index and create in bulk API?](https://discuss.elastic.co/t/difference-between-index-and-create-in-bulk-api/6067)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 1\ **Last updated:** [December 5, 2011, 12:17pm UTC](https://discuss.elastic.co/t/difference-between-index-and-create-in-bulk-api/6067 "2011-12-05T12:17:59Z")
Hi I have read following reference guide http://www.elasticsearch.org/guide/reference/river/rabbitmq.html where bulk API format define as: { "index" : { "\_index" : "twitter", "\_type" : "tweet", "\_id" : "1" } } {… --- ## [Topbeat: FATAL: kernel too old](https://discuss.elastic.co/t/topbeat-fatal-kernel-too-old/35769)
**Author:** [@arul\_1440](https://discuss.elastic.co/u/arul_1440)\ **Replies:** 6\ **Last updated:** [November 21, 2016, 5:41pm UTC](https://discuss.elastic.co/t/topbeat-fatal-kernel-too-old/35769 "2016-11-21T17:41:26Z")
I am tying to install topbeat on RHEL 5.10 which is running on kernal version 2.6, but I get a sementation fault has kernal too old? bash-4.2# /etc/init.d/topbeat Usage: /etc/init.d/topbeat {start|stop|status|restart|… --- ## [org.apache.lucene.store.AlreadyClosedException: this IndexWriter is closed](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/264551)
**Author:** [@Farzad\_Ebrahimi](https://discuss.elastic.co/u/Farzad_Ebrahimi)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 12:45pm UTC](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/264551 "2021-02-17T12:45:34Z")
Hi, we are doing single large index creation via java program on single elasticsearch node. after few millions of documents, we faced to this error: org.apache.lucene.store.AlreadyClosedException: this IndexWriter… --- ## [Logstash ingestion performance for log management](https://discuss.elastic.co/t/logstash-ingestion-performance-for-log-management/217435)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 6\ **Last updated:** [February 10, 2020, 10:58am UTC](https://discuss.elastic.co/t/logstash-ingestion-performance-for-log-management/217435 "2020-02-10T10:58:54Z")
Hi guys, I have some issues with the performance of the ingestion of data into Elasticsearch through Logstash. My ingestion setup is the following: Data ingested are log lines read from file through Filebeat Log line… --- ## [Top N documents with multiple buckets](https://discuss.elastic.co/t/top-n-documents-with-multiple-buckets/28354)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 4\ **Last updated:** [September 17, 2015, 1:14pm UTC](https://discuss.elastic.co/t/top-n-documents-with-multiple-buckets/28354 "2015-09-17T13:14:18Z")
Hi. I'm trying to get the top N documents for a specific aggregation , but with multiple term buckets - or any other way to get the results. Basically , I have a documents with from.ip,from.hostname , to.ip,to.hostname… --- ## [Remove duplicate results in output of search](https://discuss.elastic.co/t/remove-duplicate-results-in-output-of-search/181691)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 4\ **Last updated:** [May 20, 2019, 3:58pm UTC](https://discuss.elastic.co/t/remove-duplicate-results-in-output-of-search/181691 "2019-05-20T15:58:23Z")
Hello, attached a picture of my current output search quarry. I am trying to search through all my logs and grab all the src\_ips from my Nginx server. They are located in a field called src\_ip. I am able to get just… --- ## [Create index pattern automatically](https://discuss.elastic.co/t/create-index-pattern-automatically/110767)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 4\ **Last updated:** [December 11, 2017, 9:40pm UTC](https://discuss.elastic.co/t/create-index-pattern-automatically/110767 "2017-12-11T21:40:29Z")
i have kibana 6.0 installed and am automating it via salt. Is there a way to automatically create the index patterns in kibana? thanks --- ## [Help constructing .NET NEST query](https://discuss.elastic.co/t/help-constructing-net-nest-query/152762)
**Author:** [@rpm1984](https://discuss.elastic.co/u/rpm1984)\ **Replies:** 6\ **Last updated:** [October 22, 2018, 10:24pm UTC](https://discuss.elastic.co/t/help-constructing-net-nest-query/152762 "2018-10-22T22:24:39Z")
Hi there, I'm using the NEST .NET client (6.3.1), and trying to compose a search query that is based on a number of (optional) parameters. Here's what i've got so far: var searchResponse = await \_client.SearchAsync\ **Author:** [@George\_Dimitropoulos](https://discuss.elastic.co/u/George_Dimitropoulos)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 8:40am UTC](https://discuss.elastic.co/t/multiple-kibana-instances-on-elasticsearch-cluster/305205 "2022-05-20T08:40:33Z") I have two kibana instances on version 8.1.2 . I installed the first one with rpm and for the second one I followed kibana dev guide and built an localized kibana in order to translate the UI to greek. I used to have… --- ## [Filebeat Apache Module Change Index Name](https://discuss.elastic.co/t/filebeat-apache-module-change-index-name/176955)
**Author:** [@Ryne\_Keel](https://discuss.elastic.co/u/Ryne_Keel)\ **Replies:** 5\ **Last updated:** [May 13, 2019, 9:05am UTC](https://discuss.elastic.co/t/filebeat-apache-module-change-index-name/176955 "2019-05-13T09:05:21Z")
Been having trouble getting the index to be created as a different index name than filebeat. #============================= Filebeat modules =============================== filebeat.config.modules: path: ${path.confi… --- ## [Configure Username and password](https://discuss.elastic.co/t/configure-username-and-password/328913)
**Author:** [@ANUBHAV\_GUPTA](https://discuss.elastic.co/u/ANUBHAV_GUPTA)\ **Replies:** 6\ **Last updated:** [March 31, 2023, 9:11am UTC](https://discuss.elastic.co/t/configure-username-and-password/328913 "2023-03-31T09:11:47Z")
How to configure the username and password while running elasticsearch in Docker without docker-compose. --- ## [Elastic Stack 6.1.2 and 5.6.6 security update](https://discuss.elastic.co/t/elastic-stack-6-1-2-and-5-6-6-security-update/115763)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 5:08pm UTC](https://discuss.elastic.co/t/elastic-stack-6-1-2-and-5-6-6-security-update/115763 "2018-01-16T17:08:35Z")
Logstash sensitive information disclosure issue (ESA-2018-01) When logging warnings regarding deprecated settings, Logstash could inadvertently log sensitive information. Affected Versions All versions before 6.1.2 an… --- ## [Visualize empty values in data table visualization](https://discuss.elastic.co/t/visualize-empty-values-in-data-table-visualization/169896)
**Author:** [@LucasD](https://discuss.elastic.co/u/LucasD)\ **Replies:** 4\ **Last updated:** [February 28, 2019, 4:27pm UTC](https://discuss.elastic.co/t/visualize-empty-values-in-data-table-visualization/169896 "2019-02-28T16:27:40Z")
I'm beginning with ELK and we're trying to create a table visualization that should display an "Expected Date" for a specific event. However, it is really common to have empty values for this field, and it would be extre… --- ## [Issue with specifying the correct buckets\_path](https://discuss.elastic.co/t/issue-with-specifying-the-correct-buckets-path/93950)
**Author:** [@Michael.Craig](https://discuss.elastic.co/u/Michael.Craig)\ **Replies:** 3\ **Last updated:** [July 20, 2017, 4:29pm UTC](https://discuss.elastic.co/t/issue-with-specifying-the-correct-buckets-path/93950 "2017-07-20T16:29:16Z")
Hello, I am trying to find the hourly maximum of a date\_histogram aggregation with an interval of 1 hour. I have looked at the documentation for pipeline aggregations, which is useful and interesting but I cannot corr… --- ## [Multiple Kibana instances for same ES cluster](https://discuss.elastic.co/t/multiple-kibana-instances-for-same-es-cluster/94909)
**Author:** [@elk\_user1](https://discuss.elastic.co/u/elk_user1)\ **Replies:** 3\ **Last updated:** [August 1, 2017, 5:28am UTC](https://discuss.elastic.co/t/multiple-kibana-instances-for-same-es-cluster/94909 "2017-08-01T05:28:34Z")
Hello, I am trying to configure Kibana on two nodes for same elasticsearch cluster. How does it really work? Cos I know that kibana stores all data on ES side. So will creating load balancer across two Kibana instances … --- ## [Proper way to force a Master Election after Split Brain occurs](https://discuss.elastic.co/t/proper-way-to-force-a-master-election-after-split-brain-occurs/33022)
**Author:** [@Markus\_Gibson](https://discuss.elastic.co/u/Markus_Gibson)\ **Replies:** 8\ **Last updated:** [October 27, 2015, 4:13pm UTC](https://discuss.elastic.co/t/proper-way-to-force-a-master-election-after-split-brain-occurs/33022 "2015-10-27T16:13:57Z")
I would like to know the proper way to correctly handle a split brain situation, I am constantly seeing only "failed to send join request to master" messages in an attempt to connect to a node that is no longer there. Th… --- ## [Elasticsearch docker images without X-Pack](https://discuss.elastic.co/t/elasticsearch-docker-images-without-x-pack/77014)
**Author:** [@EricLandry](https://discuss.elastic.co/u/EricLandry)\ **Replies:** 3\ **Last updated:** [March 1, 2017, 4:25pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-images-without-x-pack/77014 "2017-03-01T16:25:50Z")
I was using the Elasticsearch Docker image from Docker Hub, but that was recently deprecated in favor of Elastic's own Docker registry (which is fine). The problem is that Elastic seems to have included X-Pack in that im… --- ## [NGINX logs - Provided Grok expressions do not match field value](https://discuss.elastic.co/t/nginx-logs-provided-grok-expressions-do-not-match-field-value/128518)
**Author:** [@astropanic](https://discuss.elastic.co/u/astropanic)\ **Replies:** 6\ **Last updated:** [April 18, 2018, 2:16pm UTC](https://discuss.elastic.co/t/nginx-logs-provided-grok-expressions-do-not-match-field-value/128518 "2018-04-18T14:16:53Z")
I'm trying to write a grok filter for my nginx log. the filter: filter { if \[fileset\]\[module\] == "nginx" { if \[fileset\]\[name\] == "access" { grok { match =\> { "message" =\> '%{IPV4} - - \\\[%{HTTPDATE:t… --- ## [Elastic search service not running](https://discuss.elastic.co/t/elastic-search-service-not-running/35646)
**Author:** [@Krishnan\_V](https://discuss.elastic.co/u/Krishnan_V)\ **Replies:** 6\ **Last updated:** [April 6, 2016, 12:08pm UTC](https://discuss.elastic.co/t/elastic-search-service-not-running/35646 "2016-04-06T12:08:08Z")
Hi, I have installed the elastic search,logstatch and kibana using the below url. "https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04" But el… --- ## [PUT gzipped data into elasticsearch](https://discuss.elastic.co/t/put-gzipped-data-into-elasticsearch/22852)
**Author:** [@Marcel\_Matus](https://discuss.elastic.co/u/Marcel_Matus)\ **Replies:** 8\ **Last updated:** [March 25, 2015, 8:29pm UTC](https://discuss.elastic.co/t/put-gzipped-data-into-elasticsearch/22852 "2015-03-25T20:29:08Z")
Hi, some of our data are big ones (1 - 10 MB), and if there are milions of those, it causes us trouble in our internal network. We would like to compress these data in generation time, and send over the network to … --- ## [How can I get accurate unique count from elasticsearch?](https://discuss.elastic.co/t/how-can-i-get-accurate-unique-count-from-elasticsearch/83397)
**Author:** [@Lyncean\_Cura](https://discuss.elastic.co/u/Lyncean_Cura)\ **Replies:** 8\ **Last updated:** [April 24, 2017, 3:42pm UTC](https://discuss.elastic.co/t/how-can-i-get-accurate-unique-count-from-elasticsearch/83397 "2017-04-24T15:42:32Z")
I also used {"precision\_threshold": 1000} but still don't get the correct count. --- ## [New ELK Setup: Hardware and Disk Sizing?](https://discuss.elastic.co/t/new-elk-setup-hardware-and-disk-sizing/40618)
**Author:** [@thyfere](https://discuss.elastic.co/u/thyfere)\ **Replies:** 8\ **Last updated:** [February 3, 2016, 8:17am UTC](https://discuss.elastic.co/t/new-elk-setup-hardware-and-disk-sizing/40618 "2016-02-03T08:17:46Z")
Hi, I got a monster server from my management to build a ELK stack. They are not after highly available cluster. They are good with one server too. The following is the specs: Processor: Intel XEON 2.2Ghz (2 Processo… --- ## [How to output pretty json to stdout](https://discuss.elastic.co/t/how-to-output-pretty-json-to-stdout/151339)
**Author:** [@panthersquirrel](https://discuss.elastic.co/u/panthersquirrel)\ **Replies:** 2\ **Last updated:** [October 10, 2018, 12:32pm UTC](https://discuss.elastic.co/t/how-to-output-pretty-json-to-stdout/151339 "2018-10-10T12:32:45Z")
I can't seem to find out how to output my log as pretty json to stdout. The default rubydebug output in my opinion is excruciating to look at. For example, I want the following log to look like this when printed to stdou… --- ## [Can long grok filter line be extended into multiple lines?](https://discuss.elastic.co/t/can-long-grok-filter-line-be-extended-into-multiple-lines/54880)
**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\ **Replies:** 7\ **Last updated:** [July 7, 2016, 12:51am UTC](https://discuss.elastic.co/t/can-long-grok-filter-line-be-extended-into-multiple-lines/54880 "2016-07-07T00:51:23Z")
is there a continuation syntax - some of my filters are stretching beyond 150 characters - would be nice if that could be extended into second line ... Thanks, --- ## [ES 2.2: index\_not\_found\_exception \[logstash-\*\]](https://discuss.elastic.co/t/es-2-2-index-not-found-exception-logstash/42929)
**Author:** [@alecswan](https://discuss.elastic.co/u/alecswan)\ **Replies:** 4\ **Last updated:** [July 10, 2016, 10:48pm UTC](https://discuss.elastic.co/t/es-2-2-index-not-found-exception-logstash/42929 "2016-07-10T22:48:10Z")
Hello, I am using ES 2.2/Shield 2.2 and for some reason it fails to acknowledge that logstash-\* indexes exist. Theses are the indexes I currently have: curl -u admin 'localhost:9200/\_cat/indices?v' Enter host passwo… --- ## [APM Server - Error Connection Refused](https://discuss.elastic.co/t/apm-server-error-connection-refused/177119)
**Author:** [@rtpatel95](https://discuss.elastic.co/u/rtpatel95)\ **Replies:** 8\ **Last updated:** [April 25, 2019, 2:42pm UTC](https://discuss.elastic.co/t/apm-server-error-connection-refused/177119 "2019-04-25T14:42:39Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 6.7… --- ## [Embed query string into Markdown url](https://discuss.elastic.co/t/embed-query-string-into-markdown-url/102045)
**Author:** [@elkcurious](https://discuss.elastic.co/u/elkcurious)\ **Replies:** 8\ **Last updated:** [October 3, 2017, 1:47am UTC](https://discuss.elastic.co/t/embed-query-string-into-markdown-url/102045 "2017-10-03T01:47:06Z")
Hi, In Kibana 5.2, I have tried to use the Markdown widget/visualization to include a url to a dashboard. However, when I try to include a query string in the url the dashboard is still displayed without the query filt… --- ## [NEST API UpdateByQuery](https://discuss.elastic.co/t/nest-api-updatebyquery/128759)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 5\ **Last updated:** [May 1, 2018, 6:27pm UTC](https://discuss.elastic.co/t/nest-api-updatebyquery/128759 "2018-05-01T18:27:01Z")
Could someone KINDLY let us know what the syntax is using NEST when we want to do a partial update using the UpdateByQuery. We know you can only use scripts, but we have not a clue how to do this. Your assistance will … --- ## [Unable to fetch data from kibana collector](https://discuss.elastic.co/t/unable-to-fetch-data-from-kibana-collector/142196)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [August 9, 2018, 1:43pm UTC](https://discuss.elastic.co/t/unable-to-fetch-data-from-kibana-collector/142196 "2018-08-09T13:43:15Z")
I'm Running Kibana on Docker and seeing quite a lot following message in my logs: Unable to fetch data from kibana collector Please advise. --- ## [Usage of large amount of data on Elastic Search](https://discuss.elastic.co/t/usage-of-large-amount-of-data-on-elastic-search/244718)
**Author:** [@Erdi](https://discuss.elastic.co/u/Erdi)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 1:04pm UTC](https://discuss.elastic.co/t/usage-of-large-amount-of-data-on-elastic-search/244718 "2020-08-13T13:04:17Z")
Hello, I would like to ask a question related to usage of elasctic search. I wonder that What your experiences are when you are storing large amounts of data in Elastic Search? Do you suggest this usage for me? Did you … --- ## [Document\_missing\_exception on Upsert](https://discuss.elastic.co/t/document-missing-exception-on-upsert/78191)
**Author:** [@skilledDeveloper](https://discuss.elastic.co/u/skilledDeveloper)\ **Replies:** 0\ **Last updated:** [March 11, 2017, 1:58am UTC](https://discuss.elastic.co/t/document-missing-exception-on-upsert/78191 "2017-03-11T01:58:09Z")
I use bulk update and have set "doc\_as\_upsert": true However, SOMETIMES I get errors like this: "update": { "\_index": "artists", "\_type": "artist", "\_id": "fernanda-francis", "status"… --- ## [Document contains at least one immense term in field="errormsg.keyword" (whose UTF8 encoding is longer than the max length 32766](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-in-field-errormsg-keyword-whose-utf8-encoding-is-longer-than-the-max-length-32766/89171)
**Author:** [@baha1](https://discuss.elastic.co/u/baha1)\ **Replies:** 2\ **Last updated:** [June 14, 2017, 9:13am UTC](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-in-field-errormsg-keyword-whose-utf8-encoding-is-longer-than-the-max-length-32766/89171 "2017-06-14T09:13:56Z")
Hi there,i get this error when logstash try to write in elasticsearch.it create the index but there is no data available on elasticsearch. Document contains at least one immense term in field="errormsg.keyword" (whose … --- ## [Logs seem to be flowing OK but constant "connection reset by peer" errors in the filebeat log](https://discuss.elastic.co/t/logs-seem-to-be-flowing-ok-but-constant-connection-reset-by-peer-errors-in-the-filebeat-log/79518)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 7\ **Last updated:** [March 29, 2017, 3:59pm UTC](https://discuss.elastic.co/t/logs-seem-to-be-flowing-ok-but-constant-connection-reset-by-peer-errors-in-the-filebeat-log/79518 "2017-03-29T15:59:52Z")
filebeat 5.2.2 pertinent part of the config: ... output.logstash: hosts: \["ps-dev-elk.domain.com:5044"\] ssl.certificate\_authorities: \["/etc/pki/tls/certs/filebeat.crt"\] timeout: 30 ... logs seem to be flowing fine f… --- ## [How to reindex using date field in source index?](https://discuss.elastic.co/t/how-to-reindex-using-date-field-in-source-index/189371)
**Author:** [@praveengadugin1](https://discuss.elastic.co/u/praveengadugin1)\ **Replies:** 5\ **Last updated:** [July 8, 2019, 7:17pm UTC](https://discuss.elastic.co/t/how-to-reindex-using-date-field-in-source-index/189371 "2019-07-08T19:17:02Z")
I have a source index with 14 million docs (2.5 TB). Reindexing it all at once is destabilizing the cluster and it stops midway. there is no way of tracking the progress and resuming . So i would like to know how to rei… --- ## [Kibana service does not start with no error message (while /usr/share/bin/kibana/kibana does not have any problem)](https://discuss.elastic.co/t/kibana-service-does-not-start-with-no-error-message-while-usr-share-bin-kibana-kibana-does-not-have-any-problem/189809)
**Author:** [@patimothe](https://discuss.elastic.co/u/patimothe)\ **Replies:** 3\ **Last updated:** [August 1, 2019, 2:08pm UTC](https://discuss.elastic.co/t/kibana-service-does-not-start-with-no-error-message-while-usr-share-bin-kibana-kibana-does-not-have-any-problem/189809 "2019-08-01T14:08:04Z")
Hello, This morning my kibana service worked well but now without any apparent reason it stopped working, and no error message nor logs (path log is configured already) abd the error code that returns the command is 0 s… --- ## [Error from \_cat APIs stemming from one bad data node](https://discuss.elastic.co/t/error-from-cat-apis-stemming-from-one-bad-data-node/210919)
**Author:** [@nickcanz](https://discuss.elastic.co/u/nickcanz)\ **Replies:** 3\ **Last updated:** [December 9, 2019, 11:24pm UTC](https://discuss.elastic.co/t/error-from-cat-apis-stemming-from-one-bad-data-node/210919 "2019-12-09T23:24:54Z")
Elasticsearch cluster running 7.3.1. I was adding/removing some nodes to the cluster, but no other config changes took place. The \_cat/nodes API started returning an error from all nodes. Nothing in any of the log files … --- ## [Persisted queue never clearing](https://discuss.elastic.co/t/persisted-queue-never-clearing/73732)
**Author:** [@dachenbach](https://discuss.elastic.co/u/dachenbach)\ **Replies:** 0\ **Last updated:** [February 2, 2017, 5:58pm UTC](https://discuss.elastic.co/t/persisted-queue-never-clearing/73732 "2017-02-02T17:58:26Z")
I'm having an issue with persisted queues in logstash. After about a day of running, the persisted queue fills up to the max bytes and old page files are not being removed. I have inputs set up for beats and syslog and a… --- ## [How do we send output from logstash to cassandra instead of elasticsearch?](https://discuss.elastic.co/t/how-do-we-send-output-from-logstash-to-cassandra-instead-of-elasticsearch/98513)
**Author:** [@Joe\_Yang](https://discuss.elastic.co/u/Joe_Yang)\ **Replies:** 1\ **Last updated:** [August 28, 2017, 7:48am UTC](https://discuss.elastic.co/t/how-do-we-send-output-from-logstash-to-cassandra-instead-of-elasticsearch/98513 "2017-08-28T07:48:42Z")
we have configured the output from logstash to elasticsearch, however, we’d like to configure the output from logstash to cassandra for other purpose, any advice would be appreciated. --- ## [How to delete particular document from multiple indices in elasticsearch using python?](https://discuss.elastic.co/t/how-to-delete-particular-document-from-multiple-indices-in-elasticsearch-using-python/116584)
**Author:** [@akashtalole](https://discuss.elastic.co/u/akashtalole)\ **Replies:** 3\ **Last updated:** [January 24, 2018, 10:05am UTC](https://discuss.elastic.co/t/how-to-delete-particular-document-from-multiple-indices-in-elasticsearch-using-python/116584 "2018-01-24T10:05:22Z")
Here is sample document. { "\_index": "mqtt-index-2018.01.22", "\_type": "iot\_data", "\_id": "AHWewerdfdfdfdfRTRRfdfgf", "\_score": 1, "\_source": { "message": "{\\"datastream\_name\\": \\"teststream1\\", \\"value\\": 2, \\"context\\… --- ## [Filebeat for Windows DNS log](https://discuss.elastic.co/t/filebeat-for-windows-dns-log/133905)
**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\ **Replies:** 3\ **Last updated:** [June 1, 2018, 5:35pm UTC](https://discuss.elastic.co/t/filebeat-for-windows-dns-log/133905 "2018-06-01T17:35:33Z")
Hi everyone, I'm writing this topic to have some help, advices, tips about how to send correctly the dns logs on a windows domain controller. I'm a beginner in ELK stack and I have to ship log of DNS role (dhcp log late… --- ## [Elasticsearch 7.3.0 - AccessDeniedException: /usr/share/elasticsearch/data/nodes](https://discuss.elastic.co/t/elasticsearch-7-3-0-accessdeniedexception-usr-share-elasticsearch-data-nodes/195619)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 3\ **Last updated:** [August 19, 2019, 3:45pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-0-accessdeniedexception-usr-share-elasticsearch-data-nodes/195619 "2019-08-19T15:45:00Z")
Hello, I deployed elasticsearch on IBM IKS cluster but I see some java exception. Please let me know whether this is something with a specific version or different. The same version works fine on GKE. k version Client … --- ## [Fail to start the elasticsearch container in ubuntu 16.04](https://discuss.elastic.co/t/fail-to-start-the-elasticsearch-container-in-ubuntu-16-04/177312)
**Author:** [@Bubunia\_Patra](https://discuss.elastic.co/u/Bubunia_Patra)\ **Replies:** 8\ **Last updated:** [April 19, 2019, 5:29pm UTC](https://discuss.elastic.co/t/fail-to-start-the-elasticsearch-container-in-ubuntu-16-04/177312 "2019-04-19T17:29:40Z")
Hi all, I am installing the elastic search in my MAC laptop running Ubuntu 16.04. ES version I am trying to install is 5.6.10. Docker version 18.09.2, build 6247962 I have mounted my hostpath to container ES path for … --- ## [Elasticsearch and web server control panels using](https://discuss.elastic.co/t/elasticsearch-and-web-server-control-panels-using/52169)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 8\ **Last updated:** [June 16, 2016, 10:56am UTC](https://discuss.elastic.co/t/elasticsearch-and-web-server-control-panels-using/52169 "2016-06-16T10:56:06Z")
Hi, Can we use elasticsearch with web control panel on the server? For example, "vesta control panel" or "centos web panel" etc. I have ip adres on server and I installed ES 2.3.3. I connected with my ip adress ES. (… --- ## [Fetching data from elastic search using java code but performance is slow](https://discuss.elastic.co/t/fetching-data-from-elastic-search-using-java-code-but-performance-is-slow/101120)
**Author:** [@pravin1](https://discuss.elastic.co/u/pravin1)\ **Replies:** 7\ **Last updated:** [September 21, 2017, 4:38pm UTC](https://discuss.elastic.co/t/fetching-data-from-elastic-search-using-java-code-but-performance-is-slow/101120 "2017-09-21T16:38:51Z")
Hi, I implement below code for fetching data from Elastic Search, but performance is very slow. Please check below code and please improve the solution package com.cemciq.test; import java.io.BufferedInputStream; imp… --- ## [Change the shape of markdown](https://discuss.elastic.co/t/change-the-shape-of-markdown/176705)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 6\ **Last updated:** [April 23, 2019, 4:52pm UTC](https://discuss.elastic.co/t/change-the-shape-of-markdown/176705 "2019-04-23T16:52:45Z")
Hi I want to use markdown to show custom data on kibana probably in canvas or my dashboard. But I see it only in rectangular shape. Is there a way can change the shape to like the above in image. Or any shape. Do we h… --- ## [Elasticsearch-keystore](https://discuss.elastic.co/t/elasticsearch-keystore/142567)
**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\ **Replies:** 6\ **Last updated:** [August 2, 2018, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore/142567 "2018-08-02T12:52:11Z")
I am not sure if this is the correct forum so please forgive me if not. I am trying to wrap my head around the elasticsearch keystore. I set up some settings, I removed some settings, I added a new setting which I foun… --- ## [\[Kibana 7.2\] Insert local image on a markdown visualization](https://discuss.elastic.co/t/kibana-7-2-insert-local-image-on-a-markdown-visualization/192467)
**Author:** [@ea1987](https://discuss.elastic.co/u/ea1987)\ **Replies:** 3\ **Last updated:** [July 31, 2019, 5:13pm UTC](https://discuss.elastic.co/t/kibana-7-2-insert-local-image-on-a-markdown-visualization/192467 "2019-07-31T17:13:05Z")
Hi guys, can you please explain in me details how should I achieve this requirement? I searched in the forum, but I could find only some topics about previous Kibana 6.x version. Thank you very much! [Previous page](https://discuss.elastic.co/top.md?page=382&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=384&per_page=50&period=all)