# Top

**URL:** https://discuss.elastic.co/top.md?page=385&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 386

---

## [Proxyconnect tcp: tls: first record does not look like a TLS handshake metricbeat monitoring elasticsearch](https://discuss.elastic.co/t/proxyconnect-tcp-tls-first-record-does-not-look-like-a-tls-handshake-metricbeat-monitoring-elasticsearch/253567)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 3\
**Last updated:** [October 29, 2020, 5:54pm UTC](https://discuss.elastic.co/t/proxyconnect-tcp-tls-first-record-does-not-look-like-a-tls-handshake-metricbeat-monitoring-elasticsearch/253567 "2020-10-29T17:54:34Z")

</div>

Hello, I wanted to set up beats monitoring for my enviroment. But it does not work and I see this error in the logs. 2020-10-28T14:25:23.636+0100 INFO \[monitoring\] elasticsearch/elasticsearch.go:245 Failed to connect t…

---

## [Failed shard after OOMing, corrupt index](https://discuss.elastic.co/t/failed-shard-after-ooming-corrupt-index/155612)

<div class="topic-metadata">

**Author:** [@jtalmi](https://discuss.elastic.co/u/jtalmi)\
**Replies:** 5\
**Last updated:** [November 9, 2018, 3:44pm UTC](https://discuss.elastic.co/t/failed-shard-after-ooming-corrupt-index/155612 "2018-11-09T15:44:15Z")

</div>

My server took on too much load and crashed ES. After I retarted, my index showed up as corrupt. The output of the shard allocation explain API is here: curl -XGET localhost:9200/\_cluster/allocation/explain?pretty …

---

## [Failed to download database GeoLite2-City.mmdb](https://discuss.elastic.co/t/failed-to-download-database-geolite2-city-mmdb/308491)

<div class="topic-metadata">

**Author:** [@Ravi\_S1](https://discuss.elastic.co/u/Ravi_S1)\
**Replies:** 4\
**Last updated:** [June 30, 2022, 7:54am UTC](https://discuss.elastic.co/t/failed-to-download-database-geolite2-city-mmdb/308491 "2022-06-30T07:54:21Z")

</div>

{"type": "server", "timestamp": "2022-06-29T06:19:15,707Z", "level": "ERROR", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "elasticsearch-prod", "node.name": "elasticsearch-XXXXXXXXXXXXXXXXX", "message": "…

---

## [Import Error "expected START\_OBJECT or END\_OBJECT but found \[VALUE\_NUMBER\]"](https://discuss.elastic.co/t/import-error-expected-start-object-or-end-object-but-found-value-number/50041)

<div class="topic-metadata">

**Author:** [@fujitora](https://discuss.elastic.co/u/fujitora)\
**Replies:** 1\
**Last updated:** [May 14, 2016, 1:29pm UTC](https://discuss.elastic.co/t/import-error-expected-start-object-or-end-object-but-found-value-number/50041 "2016-05-14T13:29:44Z")

</div>

I want to import Mysql data into elasricsearch. But get an error in the middle of import. I running as rake task( model\_name.import ) after create index. rake aborted! Elasticsearch::Transport::Transport::Errors::Bad…

---

## [How to customize output format?](https://discuss.elastic.co/t/how-to-customize-output-format/53158)

<div class="topic-metadata">

**Author:** [@jiming](https://discuss.elastic.co/u/jiming)\
**Replies:** 8\
**Last updated:** [June 22, 2016, 3:39pm UTC](https://discuss.elastic.co/t/how-to-customize-output-format/53158 "2016-06-22T15:39:24Z")

</div>

Dear guys, I wanted to customize output format for filebeat, like logback or log4j does. Does filebeat support it? For example: "%m" means output origin message "%ip %m %t" means local ip, message and timestamp i…

---

## [Integrate APM for Android App](https://discuss.elastic.co/t/integrate-apm-for-android-app/149752)

<div class="topic-metadata">

**Author:** [@nandan\_bigdata](https://discuss.elastic.co/u/nandan_bigdata)\
**Replies:** 7\
**Last updated:** [October 11, 2018, 6:22am UTC](https://discuss.elastic.co/t/integrate-apm-for-android-app/149752 "2018-10-11T06:22:13Z")

</div>

Hi All, How to integrate APM with Android APP to monitor App user's activities. Currently my app is having 5+ millions users and I want to check how users are using my APP as well as monitor my APP performance. Thank…

---

## [How to install and run filebeats without root access - red hat](https://discuss.elastic.co/t/how-to-install-and-run-filebeats-without-root-access-red-hat/40494)

<div class="topic-metadata">

**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\
**Replies:** 2\
**Last updated:** [January 29, 2016, 5:14pm UTC](https://discuss.elastic.co/t/how-to-install-and-run-filebeats-without-root-access-red-hat/40494 "2016-01-29T17:14:49Z")

</div>

So I am trying to have my application log into logstash --\> elasticsearch as well as straight to elasticsearch. problem is, i do not have root access. This wasn't an issue with logshipper as i could run logstash instan…

---

## [Constant\_Score vs Bool Query](https://discuss.elastic.co/t/constant-score-vs-bool-query/48146)

<div class="topic-metadata">

**Author:** [@aboo](https://discuss.elastic.co/u/aboo)\
**Replies:** 2\
**Last updated:** [April 29, 2016, 12:20pm UTC](https://discuss.elastic.co/t/constant-score-vs-bool-query/48146 "2016-04-29T12:20:08Z")

</div>

Hi, i'm comparing the usage of Constant\_score against a bool query and i'm finding that the latter returns more results. I'm not interested in the scoring of results and hence that why i'm going via the constant score ro…

---

## [Update field with array of objects](https://discuss.elastic.co/t/update-field-with-array-of-objects/126157)

<div class="topic-metadata">

**Author:** [@net](https://discuss.elastic.co/u/net)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 8:52pm UTC](https://discuss.elastic.co/t/update-field-with-array-of-objects/126157 "2018-03-29T20:52:19Z")

</div>

Hi, I'm using the update api to try to update a field. This field has the mapping (below) that works and has allowed for values that look like this: \[{'customer': 'Joe', 'group': 'blah', 'name': 'abc'}, {'customer': 'J…

---

## [Elasticsearch.service file issue during upgrade to 6.1](https://discuss.elastic.co/t/elasticsearch-service-file-issue-during-upgrade-to-6-1/112225)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 6\
**Last updated:** [December 19, 2017, 2:09pm UTC](https://discuss.elastic.co/t/elasticsearch-service-file-issue-during-upgrade-to-6-1/112225 "2017-12-19T14:09:55Z")

</div>

I tried to install 6.1 on my cluster which was running originally on 5.6.3. I got the same error as here. What was new to me was this statement: Yet in the elasticsearch.service file itself this was mentioned. Specif…

---

## [Elastic Search is indexing date fields wrong (milliseconds instead of seconds)](https://discuss.elastic.co/t/elastic-search-is-indexing-date-fields-wrong-milliseconds-instead-of-seconds/41764)

<div class="topic-metadata">

**Author:** [@okozacz](https://discuss.elastic.co/u/okozacz)\
**Replies:** 6\
**Last updated:** [February 25, 2016, 5:45pm UTC](https://discuss.elastic.co/t/elastic-search-is-indexing-date-fields-wrong-milliseconds-instead-of-seconds/41764 "2016-02-25T17:45:55Z")

</div>

Hey folks! I have mapping defined as follows: PUT test1 { "settings": { "index.mapping.ignore\_malformed":true }, "mappings": { "supersonic": { "dynamic": "true", "properties": { "dat…

---

## [Max number of threads \[1024\] for user \[elasticsearch\] is too low](https://discuss.elastic.co/t/max-number-of-threads-1024-for-user-elasticsearch-is-too-low/95542)

<div class="topic-metadata">

**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\
**Replies:** 2\
**Last updated:** [August 4, 2017, 7:42am UTC](https://discuss.elastic.co/t/max-number-of-threads-1024-for-user-elasticsearch-is-too-low/95542 "2017-08-04T07:42:02Z")

</div>

I am using Centos and I start the elasticsearch as as service from root user . despite these settings I am still getting the warning of max number of threads too low. I have put the following lines in the /etc/security…

---

## [Cannot allocate memory error despite enough memory](https://discuss.elastic.co/t/cannot-allocate-memory-error-despite-enough-memory/95431)

<div class="topic-metadata">

**Author:** [@thefourtheye](https://discuss.elastic.co/u/thefourtheye)\
**Replies:** 5\
**Last updated:** [August 10, 2017, 7:09am UTC](https://discuss.elastic.co/t/cannot-allocate-memory-error-despite-enough-memory/95431 "2017-08-10T07:09:01Z")

</div>

My machine has a 24G RAM. $ free -h total used free shared buffers cached Mem: 23G 257M 23G 0B 12M 39M -/+ buffers/cache: 206M …

---

## [Kibana Error : Kibana should not be run as root. Use --allow-root to continue](https://discuss.elastic.co/t/kibana-error-kibana-should-not-be-run-as-root-use-allow-root-to-continue/197541)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 2\
**Last updated:** [September 1, 2019, 8:42am UTC](https://discuss.elastic.co/t/kibana-error-kibana-should-not-be-run-as-root-use-allow-root-to-continue/197541 "2019-09-01T08:42:33Z")

</div>

Hi All , After the installation of kibana 7.3.1 rpm (Cent Os) , when I am running the binary by command ./bin/kibana its showing an error messsage "Kibana should not be run as root. Use --allow-root to c…

---

## [Tableau + ElasticSearch](https://discuss.elastic.co/t/tableau-elasticsearch/27289)

<div class="topic-metadata">

**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\
**Replies:** 4\
**Last updated:** [January 12, 2017, 6:29am UTC](https://discuss.elastic.co/t/tableau-elasticsearch/27289 "2017-01-12T06:29:58Z")

</div>

Hello ElasticSearch experts, Wondering if there is some good solutions to pull data (query) from ElasticSearch to Tableau (client)? Thanks. regards, Lin

---

## [Cannot Parse Json response, looking for begining of values](https://discuss.elastic.co/t/cannot-parse-json-response-looking-for-begining-of-values/252632)

<div class="topic-metadata">

**Author:** [@Arsalan\_Shahid](https://discuss.elastic.co/u/Arsalan_Shahid)\
**Replies:** 6\
**Last updated:** [November 7, 2020, 6:05am UTC](https://discuss.elastic.co/t/cannot-parse-json-response-looking-for-begining-of-values/252632 "2020-11-07T06:05:51Z")

</div>

i am having a problem. i followed all instructions from elastic.co to install ELK Stack but when i run filebeat setup -e is show error: Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[er…

---

## [Kibana Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/292406)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 7\
**Last updated:** [December 25, 2021, 10:10am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/292406 "2021-12-25T10:10:11Z")

</div>

Hi all, I have a three member cluster version 7.16.1. my elasticsearch.yml config is as following: # ======================== Elasticsearch Configuration ========================= # # NOTE: Elasticsearch comes with re…

---

## [Elasticsearch appears to be down but isn't and status is green](https://discuss.elastic.co/t/elasticsearch-appears-to-be-down-but-isnt-and-status-is-green/118068)

<div class="topic-metadata">

**Author:** [@gungazoo](https://discuss.elastic.co/u/gungazoo)\
**Replies:** 4\
**Last updated:** [February 2, 2018, 11:08pm UTC](https://discuss.elastic.co/t/elasticsearch-appears-to-be-down-but-isnt-and-status-is-green/118068 "2018-02-02T23:08:42Z")

</div>

I recently upgraded from ELK 5.x to 6.1. It has been running fine. We have 12 data nodes -- six at each site and have one replica. We keep the logs for 30 days and have 11 billion documents using 15TB of storage. We …

---

## [Kibana : Is there a way to get dashboards from command line?](https://discuss.elastic.co/t/kibana-is-there-a-way-to-get-dashboards-from-command-line/48744)

<div class="topic-metadata">

**Author:** [@apt275](https://discuss.elastic.co/u/apt275)\
**Replies:** 2\
**Last updated:** [May 5, 2016, 6:15pm UTC](https://discuss.elastic.co/t/kibana-is-there-a-way-to-get-dashboards-from-command-line/48744 "2016-05-05T18:15:01Z")

</div>

In Kibana Settings/Objects menu, i can see all of my dashboards, charts and searches. I can choose to export one or more of them and then i get a JSON object representing that item. Is there a way to do this from com…

---

## [Logstash not creating index - json parse failure](https://discuss.elastic.co/t/logstash-not-creating-index-json-parse-failure/46860)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 3\
**Last updated:** [October 11, 2016, 4:53am UTC](https://discuss.elastic.co/t/logstash-not-creating-index-json-parse-failure/46860 "2016-10-11T04:53:35Z")

</div>

Hello, Suddenly logstash is not creating an index in ES. And I'm seeing errors like this in the debug output of logstash: JSON parse failure. Falling back to plain-text {:error=\>#\<LogStash::Json::ParserError: Unexpec…

---

## [Multiple filebeat input in logstash but how to create different set of index for them](https://discuss.elastic.co/t/multiple-filebeat-input-in-logstash-but-how-to-create-different-set-of-index-for-them/166358)

<div class="topic-metadata">

**Author:** [@MiddlewareTeam](https://discuss.elastic.co/u/MiddlewareTeam)\
**Replies:** 5\
**Last updated:** [February 1, 2019, 1:52pm UTC](https://discuss.elastic.co/t/multiple-filebeat-input-in-logstash-but-how-to-create-different-set-of-index-for-them/166358 "2019-02-01T13:52:15Z")

</div>

I have two set of environment consider as A and B. I have configured A env in logstash.conf and its working as expected but now I have to add B in the same file but I have to create different index for the A and B. How t…

---

## [Terms query slowing down at specific size](https://discuss.elastic.co/t/terms-query-slowing-down-at-specific-size/288005)

<div class="topic-metadata">

**Author:** [@PatrickB](https://discuss.elastic.co/u/PatrickB)\
**Replies:** 6\
**Last updated:** [November 3, 2021, 2:08pm UTC](https://discuss.elastic.co/t/terms-query-slowing-down-at-specific-size/288005 "2021-11-03T14:08:28Z")

</div>

Hi, we were noticing some odd query runtime behaviour, while investigating ways to improve our ES queries. We would like to ask you about some insights about that. Given the following mapping: { "settings": { ... …

---

## [Elasticsearch G1GC tuning](https://discuss.elastic.co/t/elasticsearch-g1gc-tuning/253964)

<div class="topic-metadata">

**Author:** [@James\_D](https://discuss.elastic.co/u/James_D)\
**Replies:** 5\
**Last updated:** [November 3, 2020, 8:20am UTC](https://discuss.elastic.co/t/elasticsearch-g1gc-tuning/253964 "2020-11-03T08:20:40Z")

</div>

We are trying to evaluate an Elasticsearch upgrade from 5.6 to 7.8 and are seeing some unexpected memory pressure on our test 7.8 cluster. Production Cluster: Elasticsearch 5.6 - 12 Nodes - 3 Hot 9 Warm - 64GB RAM, 31G…

---

## [Is jdbc river is going to expire? If yes then what is the alternative to connect the database](https://discuss.elastic.co/t/is-jdbc-river-is-going-to-expire-if-yes-then-what-is-the-alternative-to-connect-the-database/497)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 5\
**Last updated:** [June 5, 2015, 9:13pm UTC](https://discuss.elastic.co/t/is-jdbc-river-is-going-to-expire-if-yes-then-what-is-the-alternative-to-connect-the-database/497 "2015-06-05T21:13:43Z")

</div>

Is jdbc river is going to expire? If yes then what is the alternative to connect the database I want to connect to database like Oracle and fetch query from table, if jdbc river is going to expire, whats the alternativ…

---

## [\[ERROR\]\[org.logstash.beats.BeatsHandler\] Exception: not an SSL/TLS record](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289)

<div class="topic-metadata">

**Author:** [@r1chardp](https://discuss.elastic.co/u/r1chardp)\
**Replies:** 8\
**Last updated:** [February 3, 2017, 10:47pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289 "2017-02-03T22:47:03Z")

</div>

my logstash config: input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/logstash-forwarder.crt" ssl\_key =\> "/etc/pki/tls/private/logstash-forwarder.key" } } My filebeat c…

---

## [Correct elasticsearch for google like query](https://discuss.elastic.co/t/correct-elasticsearch-for-google-like-query/197680)

<div class="topic-metadata">

**Author:** [@pd\_tester](https://discuss.elastic.co/u/pd_tester)\
**Replies:** 6\
**Last updated:** [September 3, 2019, 5:21am UTC](https://discuss.elastic.co/t/correct-elasticsearch-for-google-like-query/197680 "2019-09-03T05:21:50Z")

</div>

Hi, Can I ask your recommendation on what query should I use for google-like search on documents. Also I need support for special characters. Whenever we use or if special characters are included, our query doesn't retu…

---

## [How to append new document to a nested field?](https://discuss.elastic.co/t/how-to-append-new-document-to-a-nested-field/96175)

<div class="topic-metadata">

**Author:** [@Red](https://discuss.elastic.co/u/Red)\
**Replies:** 6\
**Last updated:** [August 8, 2017, 7:15am UTC](https://discuss.elastic.co/t/how-to-append-new-document-to-a-nested-field/96175 "2017-08-08T07:15:00Z")

</div>

how to append new document to a nested field?

---

## [Best values for keep alive (search scroll api) and batch size (bulk api)](https://discuss.elastic.co/t/best-values-for-keep-alive-search-scroll-api-and-batch-size-bulk-api/109075)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 1\
**Last updated:** [November 29, 2017, 8:24pm UTC](https://discuss.elastic.co/t/best-values-for-keep-alive-search-scroll-api-and-batch-size-bulk-api/109075 "2017-11-29T20:24:31Z")

</div>

I need to reindex data in my ES index (150 million documents). I am going t use search and scroll API to get the data from old index it (I cannot use reindex API, because we have old ES version) and bulk API to copy it …

---

## [Elasticsearch watcher error for RANGE query](https://discuss.elastic.co/t/elasticsearch-watcher-error-for-range-query/70347)

<div class="topic-metadata">

**Author:** [@Dixon\_Almeida](https://discuss.elastic.co/u/Dixon_Almeida)\
**Replies:** 2\
**Last updated:** [January 3, 2017, 5:47am UTC](https://discuss.elastic.co/t/elasticsearch-watcher-error-for-range-query/70347 "2017-01-03T05:47:31Z")

</div>

hi everyone . It would be helpful if someone can help me with this PUT xpack/watcher/watch/logerror\_watch { "trigger": { "schedule": { "interval": "10s" } }, "input": { "search": { "reque…

---

## [Multiple outputs in the filebeats.yml to the logstash](https://discuss.elastic.co/t/multiple-outputs-in-the-filebeats-yml-to-the-logstash/208603)

<div class="topic-metadata">

**Author:** [@Thiago\_Paiva](https://discuss.elastic.co/u/Thiago_Paiva)\
**Replies:** 2\
**Last updated:** [November 20, 2019, 6:00pm UTC](https://discuss.elastic.co/t/multiple-outputs-in-the-filebeats-yml-to-the-logstash/208603 "2019-11-20T18:00:48Z")

</div>

Hello, I have the following setting in the filebeats.yml: Two conditions input for logs filebeat.inputs: - paths: - E: \\ log\_type1 \_ \*. Log fields\_under\_root: true fields: type: type1 - paths: - E: \\ …

---

## [Match regular expressions in match or match\_phrase queries](https://discuss.elastic.co/t/match-regular-expressions-in-match-or-match-phrase-queries/27509)

<div class="topic-metadata">

**Author:** [@dmccuk](https://discuss.elastic.co/u/dmccuk)\
**Replies:** 2\
**Last updated:** [August 17, 2015, 2:42pm UTC](https://discuss.elastic.co/t/match-regular-expressions-in-match-or-match-phrase-queries/27509 "2015-08-17T14:42:02Z")

</div>

Hi, I'm able to use "Match" queries to match single words and "match\_phrase" to match exactly on a complete string. This is great and working for 80% of the matches I'm looking for with Watcher/ES. The last 20% of th…

---

## [Kibana readiness probe failed: Got HttP code 000](https://discuss.elastic.co/t/kibana-readiness-probe-failed-got-http-code-000/236100)

<div class="topic-metadata">

**Author:** [@Marcel27](https://discuss.elastic.co/u/Marcel27)\
**Replies:** 3\
**Last updated:** [June 8, 2020, 12:38pm UTC](https://discuss.elastic.co/t/kibana-readiness-probe-failed-got-http-code-000/236100 "2020-06-08T12:38:57Z")

</div>

installed helm charts for ElasticSearch and Kibana versus 7.7.1 on miniKube. After changing "green" the "yellow" (clusterHealthCheckParams) the ES-pod the readiness probe of ES pod is ok. Kibana does not get ready: Re…

---

## [How xpack.license.self\_generated.type: basic setting is really working?](https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210)

<div class="topic-metadata">

**Author:** [@webofmars](https://discuss.elastic.co/u/webofmars)\
**Replies:** 3\
**Last updated:** [September 27, 2018, 4:09pm UTC](https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210 "2018-09-27T16:09:59Z")

</div>

Running a demo with ES 6.4.0 i have a strange feeling about how is handled the setting xpack.license.self\_generated.type: basic in elasticsearch.yml. My need is to have SSL (encryption in transit) and no certs authentic…

---

## [Exiting: error loading config file: config file ("/etc/apm-server/apm-server.yml") must be owned by the user identifier (uid=0) or root](https://discuss.elastic.co/t/exiting-error-loading-config-file-config-file-etc-apm-server-apm-server-yml-must-be-owned-by-the-user-identifier-uid-0-or-root/179824)

<div class="topic-metadata">

**Author:** [@meiyuan](https://discuss.elastic.co/u/meiyuan)\
**Replies:** 4\
**Last updated:** [May 7, 2019, 3:38pm UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-config-file-etc-apm-server-apm-server-yml-must-be-owned-by-the-user-identifier-uid-0-or-root/179824 "2019-05-07T15:38:25Z")

</div>

APM Server version: 7.0.0. APM Agent language and version: Node.js Original install method (e.g. download page, yum, deb, from source, etc.) and version: https://artifacts.elastic.co/downloads/apm-server/apm-server-7.…

---

## [The cluster often reports an error \[service\_unavailable / 2 / no master\]](https://discuss.elastic.co/t/the-cluster-often-reports-an-error-service-unavailable-2-no-master/227739)

<div class="topic-metadata">

**Author:** [@xujingrui](https://discuss.elastic.co/u/xujingrui)\
**Replies:** 2\
**Last updated:** [April 13, 2020, 8:47am UTC](https://discuss.elastic.co/t/the-cluster-often-reports-an-error-service-unavailable-2-no-master/227739 "2020-04-13T08:47:12Z")

</div>

HI! The \[service ﹣ unavailable / 2 / no master\] error message often occurs in the cluster master node. Have you ever encountered it? It will appear after running for a period of time. After an error is reported, you can…

---

## [How to strip white space from all fields in logstash](https://discuss.elastic.co/t/how-to-strip-white-space-from-all-fields-in-logstash/181255)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 5\
**Last updated:** [May 15, 2019, 8:51pm UTC](https://discuss.elastic.co/t/how-to-strip-white-space-from-all-fields-in-logstash/181255 "2019-05-15T20:51:26Z")

</div>

I am creating fields using grok match with position and resulting json fields contain white spaces. I need to trim the white space from all fields . input { stdin { } } filter { grok { match =\> { "message…

---

## [Curator - need help to delete old logs with timestamp](https://discuss.elastic.co/t/curator-need-help-to-delete-old-logs-with-timestamp/101058)

<div class="topic-metadata">

**Author:** [@DStorck](https://discuss.elastic.co/u/DStorck)\
**Replies:** 6\
**Last updated:** [September 21, 2017, 6:06pm UTC](https://discuss.elastic.co/t/curator-need-help-to-delete-old-logs-with-timestamp/101058 "2017-09-21T18:06:25Z")

</div>

I am trying to delete old logs using Curator in my Kubernetes Cluster. A sample ES log looks like this: "\_index" : "logstash-2017.09.19", "\_type" : "flb\_type", "\_id" : "sample\_id", "\_sco…

---

## [JDBC importer 2.0.0.0 for Elasticsearch 2.0.0](https://discuss.elastic.co/t/jdbc-importer-2-0-0-0-for-elasticsearch-2-0-0/33182)

<div class="topic-metadata">

**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\
**Replies:** 3\
**Last updated:** [November 6, 2015, 11:37am UTC](https://discuss.elastic.co/t/jdbc-importer-2-0-0-0-for-elasticsearch-2-0-0/33182 "2015-11-06T11:37:18Z")

</div>

Hi, a new major Elasticsearch release arrived finally, and here is the JDBC importer for it! JDBC importer 2.0.0.0 has been just released. There are no changes in functionality since the last release, the focus was…

---

## [Kibana: regex as index pattern](https://discuss.elastic.co/t/kibana-regex-as-index-pattern/92696)

<div class="topic-metadata">

**Author:** [@rogerxu](https://discuss.elastic.co/u/rogerxu)\
**Replies:** 1\
**Last updated:** [July 11, 2017, 6:37pm UTC](https://discuss.elastic.co/t/kibana-regex-as-index-pattern/92696 "2017-07-11T18:37:25Z")

</div>

Is it possible to use regex to define a Kibana index pattern? Many of my index names are UUID's, and I am not able to create an index pattern to match them other than "\*", which will of course include all the other non U…

---

## [7.4.0 Circuit breaking exceptions](https://discuss.elastic.co/t/7-4-0-circuit-breaking-exceptions/203063)

<div class="topic-metadata">

**Author:** [@MattJones](https://discuss.elastic.co/u/MattJones)\
**Replies:** 7\
**Last updated:** [November 19, 2019, 12:00pm UTC](https://discuss.elastic.co/t/7-4-0-circuit-breaking-exceptions/203063 "2019-11-19T12:00:27Z")

</div>

Hi, I'm seeing quite a few Circuit Breaking Exceptions happening in my cluster when indexing new data. I'm feeling a bit out of my depth here, so any advice is greatly appreciated!!! :slight\_smile: The errors: \[2019-1…

---

## [Delete logs](https://discuss.elastic.co/t/delete-logs/57316)

<div class="topic-metadata">

**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\
**Replies:** 6\
**Last updated:** [August 8, 2016, 3:13pm UTC](https://discuss.elastic.co/t/delete-logs/57316 "2016-08-08T15:13:03Z")

</div>

Hello, how to properly delete index, eg. winlogbeat-2016.06.30 on Windows ELK?

---

## [Custom authentication with Kibana + Shield](https://discuss.elastic.co/t/custom-authentication-with-kibana-shield/41197)

<div class="topic-metadata">

**Author:** [@nielsoncr](https://discuss.elastic.co/u/nielsoncr)\
**Replies:** 6\
**Last updated:** [May 3, 2017, 6:22pm UTC](https://discuss.elastic.co/t/custom-authentication-with-kibana-shield/41197 "2017-05-03T18:22:08Z")

</div>

I have a custom Shield plugin working with Elasticsearch that authenticates using a SAML token passed in the HTTP header. I want this authentication scheme work with Kibana as well. Kibana should deny access when the …

---

## [Kibana connecting to IPs not FQDN](https://discuss.elastic.co/t/kibana-connecting-to-ips-not-fqdn/204205)

<div class="topic-metadata">

**Author:** [@tpetersen](https://discuss.elastic.co/u/tpetersen)\
**Replies:** 8\
**Last updated:** [October 21, 2019, 1:26pm UTC](https://discuss.elastic.co/t/kibana-connecting-to-ips-not-fqdn/204205 "2019-10-21T13:26:14Z")

</div>

Hey there, Setting up some security on a test cluster here and it is driving me a bit nuts. I can see in my kibana log that it is doing this Line 1359: {"type":"log","@timestamp":"2019-10-18T10:01:31Z","tags":\["error…

---

## [Error when build Kibana from source code : Ineffective mark-compacts near heap limit Allocation failed - JavaScript heap out of memory](https://discuss.elastic.co/t/error-when-build-kibana-from-source-code-ineffective-mark-compacts-near-heap-limit-allocation-failed-javascript-heap-out-of-memory/192132)

<div class="topic-metadata">

**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\
**Replies:** 5\
**Last updated:** [July 29, 2019, 8:21pm UTC](https://discuss.elastic.co/t/error-when-build-kibana-from-source-code-ineffective-mark-compacts-near-heap-limit-allocation-failed-javascript-heap-out-of-memory/192132 "2019-07-29T20:21:05Z")

</div>

I am trying to build kibana branch 6.8 from source code with command node script/build.js --release And I saw below error at when about finish building. info \[ kibana \] Running optimizer │ debg Temporarily installin…

---

## [Kibana custom logo replace change](https://discuss.elastic.co/t/kibana-custom-logo-replace-change/103426)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 5\
**Last updated:** [October 17, 2017, 8:12am UTC](https://discuss.elastic.co/t/kibana-custom-logo-replace-change/103426 "2017-10-17T08:12:55Z")

</div>

I'm Running Kibana on Docker | Kibana User Guide \[5.6\] | Elastic. Is there an guide (preferably official) on how to change/replace Kibana's logo with custom logo? Can SVG logo be used? Please advise.

---

## [Elastic Cloud Enterprise (ECE) 3.8.2 and 4.0.2 Security Update (ESA-2025-21)](https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-2-and-4-0-2-security-update-esa-2025-21/382641)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [October 13, 2025, 1:44pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-2-and-4-0-2-security-update-esa-2025-21/382641 "2025-10-13T13:44:01Z")

</div>

Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine (ESA-2025-21) Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise (ECE) …

---

## [Configure an index pattern Issue](https://discuss.elastic.co/t/configure-an-index-pattern-issue/70540)

<div class="topic-metadata">

**Author:** [@sumit](https://discuss.elastic.co/u/sumit)\
**Replies:** 5\
**Last updated:** [January 5, 2017, 3:03pm UTC](https://discuss.elastic.co/t/configure-an-index-pattern-issue/70540 "2017-01-05T15:03:41Z")

</div>

Hi, I am new in ELK. I am using Kibana version: 5.1.1 in windows server 2012 and facing an issue "No default index pattern. You must select or create one to continue. ". Can any one help me out regarding the same.

---

## [\[field \[@timestamp\] doesn't exist\]](https://discuss.elastic.co/t/field-timestamp-doesnt-exist/46970)

<div class="topic-metadata">

**Author:** [@suhae](https://discuss.elastic.co/u/suhae)\
**Replies:** 3\
**Last updated:** [April 28, 2016, 8:52am UTC](https://discuss.elastic.co/t/field-timestamp-doesnt-exist/46970 "2016-04-28T08:52:09Z")

</div>

Hello all, i have a problem with Kibana about @timestamp. i insert log using logstash\_format and no error happen. yellow open logstash-2016.02.01 5 1 21 0 72.9kb 72.9kb yellow open…

---

## [How to read JSON file using logstash and convert String date format to Date time format](https://discuss.elastic.co/t/how-to-read-json-file-using-logstash-and-convert-string-date-format-to-date-time-format/103561)

<div class="topic-metadata">

**Author:** [@Vignesh\_Kumar](https://discuss.elastic.co/u/Vignesh_Kumar)\
**Replies:** 5\
**Last updated:** [October 12, 2017, 6:33am UTC](https://discuss.elastic.co/t/how-to-read-json-file-using-logstash-and-convert-string-date-format-to-date-time-format/103561 "2017-10-12T06:33:20Z")

</div>

The Input is like json, Need to get this "TimeStamp": "20170926110036" { "Properties": { "Client Name": "Chubb", "Portfolio": "Chubb-Transfer" }, "Capture": \[ { "CaptureGUID": "caa1f5ba-1e93-4926-b3ac-e30d0d9d4cb…

---

## [Starting and stopping elasticsearch without root privileges in linux centOS](https://discuss.elastic.co/t/starting-and-stopping-elasticsearch-without-root-privileges-in-linux-centos/130442)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 7\
**Last updated:** [May 6, 2018, 11:25am UTC](https://discuss.elastic.co/t/starting-and-stopping-elasticsearch-without-root-privileges-in-linux-centos/130442 "2018-05-06T11:25:03Z")

</div>

Hi. I want to install the ELK stack in a production machine that has CentOS on it. It dosen't have internet connection and I don't have root privileges . I can easly provid an install the ELK stack from manually delive…

[Previous page](https://discuss.elastic.co/top.md?page=384&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=386&per_page=50&period=all)
