# Top **URL:** https://discuss.elastic.co/top.md?page=412&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 413 --- ## [Storing RabbitMQ Logs in ELK](https://discuss.elastic.co/t/storing-rabbitmq-logs-in-elk/126686)
**Author:** [@mils](https://discuss.elastic.co/u/mils)\ **Replies:** 4\ **Last updated:** [April 12, 2018, 6:36am UTC](https://discuss.elastic.co/t/storing-rabbitmq-logs-in-elk/126686 "2018-04-12T06:36:31Z")
Hi, I have been using ELK for about six months now, and it's been great so far. I'm on logstash version 6.2.3. RabbitMQ makes up the heart of my distributed system (RabbitMQ is itself distributed), and as such it is ve… --- ## [Understanding HEAP Usage with heavy bulk indexing](https://discuss.elastic.co/t/understanding-heap-usage-with-heavy-bulk-indexing/27355)
**Author:** [@diranged](https://discuss.elastic.co/u/diranged)\ **Replies:** 7\ **Last updated:** [August 20, 2015, 11:18pm UTC](https://discuss.elastic.co/t/understanding-heap-usage-with-heavy-bulk-indexing/27355 "2015-08-20T23:18:24Z")
We have a reasonably large ES cluster and we're struggling to understand our Java HEAP usage. Over the last few weeks, nearly every single day during our heaviest bulk indexing period we are seeing JVM garbage collection… --- ## [Logstash s3 input with iam role](https://discuss.elastic.co/t/logstash-s3-input-with-iam-role/97986)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 4\ **Last updated:** [August 24, 2017, 10:38pm UTC](https://discuss.elastic.co/t/logstash-s3-input-with-iam-role/97986 "2017-08-24T22:38:19Z")
Hi , I am trying to use logstash s3 input plugin to process cloudtrail data. My configuration is all OK but as i am running this logstash on prem, my access to s3 bucket is via a IAM role. I cannot get access and secret… --- ## [Kibana 9.0.6, 9.1.3 Security Update (ESA-2025-13)](https://discuss.elastic.co/t/kibana-9-0-6-9-1-3-security-update-esa-2025-13/381426)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [August 28, 2025, 3:35pm UTC](https://discuss.elastic.co/t/kibana-9-0-6-9-1-3-security-update-esa-2025-13/381426 "2025-08-28T15:35:08Z")
Kibana privilege escalation via reporting\_user role (ESA-2025-13) Incorrect authorization in Kibana can lead to privilege escalation via the built-in reporting\_user role which incorrectly has the ability to access all K… --- ## [Kibana visualization to calculate percentage](https://discuss.elastic.co/t/kibana-visualization-to-calculate-percentage/278553)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 6\ **Last updated:** [July 13, 2021, 4:44pm UTC](https://discuss.elastic.co/t/kibana-visualization-to-calculate-percentage/278553 "2021-07-13T16:44:44Z")
All, I am trying to calculate percentage based on hits with filter query for example index=test and status=disconnected - disconnected\_hits index=test total\_hits percentage = disconnected\_hits/total\_hits \* 100 f… --- ## [Request contains unrecognized parameters for Search API](https://discuss.elastic.co/t/request-contains-unrecognized-parameters-for-search-api/325139)
**Author:** [@Abhilash\_Kumar](https://discuss.elastic.co/u/Abhilash_Kumar)\ **Replies:** 8\ **Last updated:** [February 14, 2023, 6:08am UTC](https://discuss.elastic.co/t/request-contains-unrecognized-parameters-for-search-api/325139 "2023-02-14T06:08:17Z")
Hi folks, In our project, when we are trying to query ES Search API we are getting the below error { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", … --- ## [How to query document for field to be null](https://discuss.elastic.co/t/how-to-query-document-for-field-to-be-null/13196)
**Author:** [@Hiro\_Gangwani](https://discuss.elastic.co/u/Hiro_Gangwani)\ **Replies:** 4\ **Last updated:** [August 13, 2013, 11:15am UTC](https://discuss.elastic.co/t/how-to-query-document-for-field-to-be-null/13196 "2013-08-13T11:15:18Z")
Dear Team, I want to query document for field to be null using Java API. I am using BoolQueryBuilder class and making conditions using QueryBuilders. Here is example listed below. SQL Query : select id,name,sal… --- ## [Parameterized dashboards](https://discuss.elastic.co/t/parameterized-dashboards/51786)
**Author:** [@Developer](https://discuss.elastic.co/u/Developer)\ **Replies:** 4\ **Last updated:** [February 18, 2017, 3:22pm UTC](https://discuss.elastic.co/t/parameterized-dashboards/51786 "2017-02-18T15:22:05Z")
Hi I have about 10 different visualizations in my Kibana and 5 elasticseach indexes, each of them contains a very very big scope of documents with the same structure (They were separated for more quick search). So, I… --- ## [Logstash 2.2.0 \> elasticsearch output connectivity issue](https://discuss.elastic.co/t/logstash-2-2-0-elasticsearch-output-connectivity-issue/41534)
**Author:** [@Sijo\_C](https://discuss.elastic.co/u/Sijo_C)\ **Replies:** 4\ **Last updated:** [February 12, 2016, 3:53pm UTC](https://discuss.elastic.co/t/logstash-2-2-0-elasticsearch-output-connectivity-issue/41534 "2016-02-12T15:53:50Z")
I have filebeat,logstash 2.2.0, ES 2.1.0 working in dev. Strange connectivity issue when moving to prod: ES cluster behind an elb (aws vpc), no TLS "curl prod-elb-xxx:9200" works from my logstash box (in datacenter)… --- ## [Logstash multiple tcp inputs with different ports](https://discuss.elastic.co/t/logstash-multiple-tcp-inputs-with-different-ports/61911)
**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\ **Replies:** 1\ **Last updated:** [September 30, 2016, 10:39am UTC](https://discuss.elastic.co/t/logstash-multiple-tcp-inputs-with-different-ports/61911 "2016-09-30T10:39:12Z")
Hi, Is it possible to use 2 tcp ports in the input of the logstash for different types? input { tcp{ port =\> 5000 type =\> "syslog" } … --- ## [Logstash won't start: permission problem?](https://discuss.elastic.co/t/logstash-wont-start-permission-problem/106886)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 5\ **Last updated:** [November 9, 2017, 9:40pm UTC](https://discuss.elastic.co/t/logstash-wont-start-permission-problem/106886 "2017-11-09T21:40:40Z")
I have updated to ELK 5.4.6 now I get the following error when starting Logstash? Is this a permission problem? Any ideas where I have to search? \[2017-11-08T15:44:24,340\]\[FATAL\]\[logstash.runner \] An unexpecte… --- ## [Bulk write to ES | best practices](https://discuss.elastic.co/t/bulk-write-to-es-best-practices/25223)
**Author:** [@Piyush\_Goyal](https://discuss.elastic.co/u/Piyush_Goyal)\ **Replies:** 3\ **Last updated:** [July 15, 2015, 7:54pm UTC](https://discuss.elastic.co/t/bulk-write-to-es-best-practices/25223 "2015-07-15T19:54:20Z")
Hi Costin, Just wanted to check with you on the best configuration for bulk update. I went through previously asked questions at: https://groups.google.com/forum/#!msg/elasticsearch/Zi\_0RsgHvnU/gXADeboVvbAJ FYI: El… --- ## [Error Outputting data to kafka](https://discuss.elastic.co/t/error-outputting-data-to-kafka/43192)
**Author:** [@naiktej13](https://discuss.elastic.co/u/naiktej13)\ **Replies:** 7\ **Last updated:** [June 30, 2016, 4:07am UTC](https://discuss.elastic.co/t/error-outputting-data-to-kafka/43192 "2016-06-30T04:07:43Z")
I want to publish my script data to kafka cluster using logstash. For that I configured logstash on centOS hear is the config file i wrote: input { exec { command =\> "python /home/elastic/test.p… --- ## [Setting up User Authentication](https://discuss.elastic.co/t/setting-up-user-authentication/169902)
**Author:** [@manoj\_faria](https://discuss.elastic.co/u/manoj_faria)\ **Replies:** 5\ **Last updated:** [February 27, 2019, 1:56am UTC](https://discuss.elastic.co/t/setting-up-user-authentication/169902 "2019-02-27T01:56:17Z")
Hi - I am setting up user authentication on a docker based cluster (single node elasticsearch and a single kibana container at the moment)....per the documentation listed here: https://www.elastic.co/guide/en/x-pack/cu… --- ## [Multiple configs in /etc/filebeat/\*.yml](https://discuss.elastic.co/t/multiple-configs-in-etc-filebeat-yml/63876)
**Author:** [@jvdm](https://discuss.elastic.co/u/jvdm)\ **Replies:** 5\ **Last updated:** [October 26, 2016, 8:34pm UTC](https://discuss.elastic.co/t/multiple-configs-in-etc-filebeat-yml/63876 "2016-10-26T20:34:08Z")
Greetings all, I'm trying to use multiple config files located in /etc/filebeat. The default config is stored as filebeat.yml, with additional configs stored as $service.yml. I've verified that all the configs are wor… --- ## [Search pattern with a forward slash](https://discuss.elastic.co/t/search-pattern-with-a-forward-slash/17028)
**Author:** [@felix07059](https://discuss.elastic.co/u/felix07059)\ **Replies:** 1\ **Last updated:** [April 15, 2014, 3:18pm UTC](https://discuss.elastic.co/t/search-pattern-with-a-forward-slash/17028 "2014-04-15T15:18:23Z")
Hi, I have a set of data setting in elasticsearch, like {"symbol":"AUD/USD"},{"symbol":"HKD/USD"},{"symbol":"AUD/EUR"}... I would like to search for "AUD/USD". So the search query string will be "{ "bool":{ "mu… --- ## [Prepare SearchRequest for exact search on multiple fields \[Java\]](https://discuss.elastic.co/t/prepare-searchrequest-for-exact-search-on-multiple-fields-java/166909)
**Author:** [@ravi089](https://discuss.elastic.co/u/ravi089)\ **Replies:** 7\ **Last updated:** [February 4, 2019, 12:04pm UTC](https://discuss.elastic.co/t/prepare-searchrequest-for-exact-search-on-multiple-fields-java/166909 "2019-02-04T12:04:49Z")
I want to form a search request for exact match on multiple fields. Now match query returns all matches whereas term query does the search on inverted index. SearchRequest searchRequest = new SearchRequest(ES\_INDEX); … --- ## [Received message from unsupported version: \[2.0.0\] minimal compatible version is: \[6.8.0\]](https://discuss.elastic.co/t/received-message-from-unsupported-version-2-0-0-minimal-compatible-version-is-6-8-0/211895)
**Author:** [@sg70](https://discuss.elastic.co/u/sg70)\ **Replies:** 8\ **Last updated:** [January 5, 2020, 7:55pm UTC](https://discuss.elastic.co/t/received-message-from-unsupported-version-2-0-0-minimal-compatible-version-is-6-8-0/211895 "2020-01-05T19:55:08Z")
Iam trying to integrate ElasticSearch with Microsoft SQL Server 2016 and I get this error : java.lang.IllegalStateException: Received message from unsupported version: \[2.0.0\] minimal compatible version is: \[6.8.0\] … --- ## [Heap settings for 128GB (RAM) server](https://discuss.elastic.co/t/heap-settings-for-128gb-ram-server/126846)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 5\ **Last updated:** [April 5, 2018, 8:11am UTC](https://discuss.elastic.co/t/heap-settings-for-128gb-ram-server/126846 "2018-04-05T08:11:21Z")
What is the recommended RAM settings for 32 core 128 GB RAM. I do understand that it shouldn't be more than 30GB to make sure is below the JVM cutoff for compressed object pointers. --- ## [Configure JDBC input with SSL connection for MySQL](https://discuss.elastic.co/t/configure-jdbc-input-with-ssl-connection-for-mysql/103069)
**Author:** [@Devang\_Gaglani](https://discuss.elastic.co/u/Devang_Gaglani)\ **Replies:** 5\ **Last updated:** [October 11, 2017, 5:13am UTC](https://discuss.elastic.co/t/configure-jdbc-input-with-ssl-connection-for-mysql/103069 "2017-10-11T05:13:48Z")
I want to connect to MySQL database for collecting logs in logstash. But database is having secured connection. How do I set SSL in JDBC input plugin of logstash for MySQL database? --- ## [Logstash grok parse error parsing log file](https://discuss.elastic.co/t/logstash-grok-parse-error-parsing-log-file/49016)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 3\ **Last updated:** [May 4, 2016, 5:35pm UTC](https://discuss.elastic.co/t/logstash-grok-parse-error-parsing-log-file/49016 "2016-05-04T17:35:16Z")
Hello, i try to parse my log and get these values looks like interfaces =\> PP/0/P1/CPU0 timestamp =\> 2016-05-03 19:37:08.879 message =\> mp\[1051\]: %ROUTING-MP-5-INIT\_PEER\_UP\_DOWN : MP peer down: 1.2.3.4 : recei… --- ## [Script params via Logstash, is it possible?](https://discuss.elastic.co/t/script-params-via-logstash-is-it-possible/226586)
**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\ **Replies:** 7\ **Last updated:** [April 17, 2020, 7:48pm UTC](https://discuss.elastic.co/t/script-params-via-logstash-is-it-possible/226586 "2020-04-17T19:48:52Z")
Is it possible to send 'params' to a stored script in Elasticsearch from Logstash, or do I have to use a script defined inline or as a file in Logstash in order to define a 'params' block for the script? --- ## [How to run elastic from memory?](https://discuss.elastic.co/t/how-to-run-elastic-from-memory/11061)
**Author:** [@shlomivaknin](https://discuss.elastic.co/u/shlomivaknin)\ **Replies:** 6\ **Last updated:** [March 11, 2013, 1:12pm UTC](https://discuss.elastic.co/t/how-to-run-elastic-from-memory/11061 "2013-03-11T13:12:25Z")
Hey, I have an index about 200gb large, which is read-only. My machine has about 300gb in ram, and i would like to have my index fully in memory. if i just use index.store.type = "memory" in my index settings, the… --- ## [Different dashboard from multiple indexes for different project logs](https://discuss.elastic.co/t/different-dashboard-from-multiple-indexes-for-different-project-logs/195300)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 5\ **Last updated:** [August 16, 2019, 7:14am UTC](https://discuss.elastic.co/t/different-dashboard-from-multiple-indexes-for-different-project-logs/195300 "2019-08-16T07:14:27Z")
Hi, Use case : Multiple project logs file Kibana : Each project log files is stored as one index like project1 index is index1 , project2 index project2 I am new to ELK stack , Need advise do I need to create multipl… --- ## [Rabbitmq connection error](https://discuss.elastic.co/t/rabbitmq-connection-error/135052)
**Author:** [@JeMunos](https://discuss.elastic.co/u/JeMunos)\ **Replies:** 5\ **Last updated:** [June 21, 2018, 4:50am UTC](https://discuss.elastic.co/t/rabbitmq-connection-error/135052 "2018-06-21T04:50:18Z")
I'm trying to connect logstash to my AMP for Endpoints streaming event server hosted by Cisco. I had to do a little juggling to get the proper user/pw and the correct URL. But I have them now. I have tested them using a… --- ## [Issue with elasticsearch update 5.0.0-alpha5](https://discuss.elastic.co/t/issue-with-elasticsearch-update-5-0-0-alpha5/71963)
**Author:** [@ll75006](https://discuss.elastic.co/u/ll75006)\ **Replies:** 5\ **Last updated:** [January 18, 2017, 10:50am UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-update-5-0-0-alpha5/71963 "2017-01-18T10:50:04Z")
Hello everyone, I have some issue using elasticsearch communication with my java app org.elasticsearch.transport.NodeDisconnectedException: \[\]\[x.x.x.x:9300\]\[cluster:monitor/nodes/liveness\] disconnected 2017-01-18 1… --- ## [Winlogbeat issues shipping to Logstash](https://discuss.elastic.co/t/winlogbeat-issues-shipping-to-logstash/50557)
**Author:** [@thekrazy](https://discuss.elastic.co/u/thekrazy)\ **Replies:** 8\ **Last updated:** [May 22, 2016, 1:48pm UTC](https://discuss.elastic.co/t/winlogbeat-issues-shipping-to-logstash/50557 "2016-05-22T13:48:34Z")
I'm having trouble shipping logs from my client server to my ELK stack server. My client server winlogbeat.yml is: winlogbeat: registry\_file: C:/ProgramData/winlogbeat/.winlogbeat.yml event\_logs: - name: Ap… --- ## [ES and SAN](https://discuss.elastic.co/t/es-and-san/25708)
**Author:** [@saif](https://discuss.elastic.co/u/saif)\ **Replies:** 6\ **Last updated:** [July 17, 2015, 1:10pm UTC](https://discuss.elastic.co/t/es-and-san/25708 "2015-07-17T13:10:44Z")
Hello, I wanted to know if we can use ES and SAN storage or to use the local Disqus they are the right solution based on your experience please ? Best regards --- ## [What is the meaning of throttle\_time\_in\_millis?](https://discuss.elastic.co/t/what-is-the-meaning-of-throttle-time-in-millis/16128)
**Author:** [@Isaac\_Hazan](https://discuss.elastic.co/u/Isaac_Hazan)\ **Replies:** 4\ **Last updated:** [March 4, 2014, 4:08pm UTC](https://discuss.elastic.co/t/what-is-the-meaning-of-throttle-time-in-millis/16128 "2014-03-04T16:08:47Z")
I created an index in a 4 nodes Elasticsearch cluster. I added about 3.5 M documents using the java Elasticsearch API. When asking for the stats i get a very high number in throttle\_time\_in\_millis as follows: { … --- ## [How to take beats inputs in multiple codecs in logstash](https://discuss.elastic.co/t/how-to-take-beats-inputs-in-multiple-codecs-in-logstash/60633)
**Author:** [@Bret\_Wortman](https://discuss.elastic.co/u/Bret_Wortman)\ **Replies:** 7\ **Last updated:** [September 20, 2016, 12:37pm UTC](https://discuss.elastic.co/t/how-to-take-beats-inputs-in-multiple-codecs-in-logstash/60633 "2016-09-20T12:37:56Z")
I've got a set of systems that I'll be deploying filebeats to, and I need it to monitor some text sources (like /var/log/secure) and some json sources (JSON-ified Apache logs). I've got the following on the filebeats s… --- ## [How to calculate difference between to cumulative sums?](https://discuss.elastic.co/t/how-to-calculate-difference-between-to-cumulative-sums/107812)
**Author:** [@MrRedAmber](https://discuss.elastic.co/u/MrRedAmber)\ **Replies:** 2\ **Last updated:** [November 16, 2017, 4:45pm UTC](https://discuss.elastic.co/t/how-to-calculate-difference-between-to-cumulative-sums/107812 "2017-11-16T16:45:59Z")
So in my project I have mock bank account transaction data and I'm trying to calculate the difference between two cumulative sums. I don't know if I'm going about this the right way but what I'm doing is for each day in … --- ## [Logstash end up with cluster\_block\_exception and is frequently occuring](https://discuss.elastic.co/t/logstash-end-up-with-cluster-block-exception-and-is-frequently-occuring/174342)
**Author:** [@Kaunya](https://discuss.elastic.co/u/Kaunya)\ **Replies:** 5\ **Last updated:** [March 29, 2019, 5:41am UTC](https://discuss.elastic.co/t/logstash-end-up-with-cluster-block-exception-and-is-frequently-occuring/174342 "2019-03-29T05:41:39Z")
Hi, We setup trial version of ELK stack (6.6.2) ( with 2 nodes of logstash, 3 nodes of Elastic cluster, 1 node of Kibana) and configure to flow messages from our Firewalls =\> Logstash =\> Elastic Search =\> Kibana. logst… --- ## [Kibana Discover: unknown error](https://discuss.elastic.co/t/kibana-discover-unknown-error/58430)
**Author:** [@111127](https://discuss.elastic.co/u/111127)\ **Replies:** 5\ **Last updated:** [August 23, 2016, 12:38pm UTC](https://discuss.elastic.co/t/kibana-discover-unknown-error/58430 "2016-08-23T12:38:40Z")
I'm useing ELK fllow -filebeat-1.2.3-1.x86\_64 -logstash-2.3.4-1.noarch -kibana-4.5.4-1.x86\_64 When discover in kibana- tab is chosen, "Discover: unknown error" is indicated. It's as follows whether it's detailed inform… --- ## [Add Execption for special character from json log](https://discuss.elastic.co/t/add-execption-for-special-character-from-json-log/54285)
**Author:** [@infinitetutts](https://discuss.elastic.co/u/infinitetutts)\ **Replies:** 5\ **Last updated:** [July 4, 2016, 1:59pm UTC](https://discuss.elastic.co/t/add-execption-for-special-character-from-json-log/54285 "2016-07-04T13:59:37Z")
Hey Guys, I have been having a few frustrating days trying to crack this. I please need a solution either to fix the Ruby code or another method to add an exception for the escape character which is '\\\\x'. Logstash fi… --- ## [Elastic search authentiation Invalid NEST response built from a unsuccessful low level call](https://discuss.elastic.co/t/elastic-search-authentiation-invalid-nest-response-built-from-a-unsuccessful-low-level-call/198312)
**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\ **Replies:** 6\ **Last updated:** [September 6, 2019, 8:06am UTC](https://discuss.elastic.co/t/elastic-search-authentiation-invalid-nest-response-built-from-a-unsuccessful-low-level-call/198312 "2019-09-06T08:06:18Z")
public ElasticClient EsClient() { var nodes = new Uri { new Uri($"{\_config.ElasticUrl}"), }; var connectionPool = new StaticConnectionPool(nodes); var connectionSettings = new ConnectionSettings(co… --- ## [How to Query the data between 2 different timestamp](https://discuss.elastic.co/t/how-to-query-the-data-between-2-different-timestamp/276150)
**Author:** [@Kannan\_V](https://discuss.elastic.co/u/Kannan_V)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 11:40am UTC](https://discuss.elastic.co/t/how-to-query-the-data-between-2-different-timestamp/276150 "2021-06-17T11:40:49Z")
Hi, How to query the data between 2 different timestamps? We have a data. I am able to query through Kibana Discover tab. But i am not able to query through devTools or Curl command. Following is my devtool command G… --- ## [Querying Multiple Index in Kibana](https://discuss.elastic.co/t/querying-multiple-index-in-kibana/69608)
**Author:** [@aravindhan87](https://discuss.elastic.co/u/aravindhan87)\ **Replies:** 2\ **Last updated:** [December 20, 2016, 9:20pm UTC](https://discuss.elastic.co/t/querying-multiple-index-in-kibana/69608 "2016-12-20T21:20:01Z")
Hi, I want to combine 2 indexes with unique names and query it in Kibana. Here is my scenario. Index1: abc\_applogs\_index Index2 : xyz\_applogs\_index Both the index captures totally different sets of records,. I am… --- ## [Logstash monitoring data not showing in Stack Monitoring](https://discuss.elastic.co/t/logstash-monitoring-data-not-showing-in-stack-monitoring/256920)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 1\ **Last updated:** [November 28, 2020, 11:05pm UTC](https://discuss.elastic.co/t/logstash-monitoring-data-not-showing-in-stack-monitoring/256920 "2020-11-28T23:05:28Z")
Hello, I'm not managing to get my Logstash metrics to be shown in Kibana's Stack Monitoring UI: Even though it looks like Metricbeat is sending events to the cluster: GET .monitoring-logstash-7-mb-2020.11.27/\_search… --- ## [Is the Version 6.3 yet available?](https://discuss.elastic.co/t/is-the-version-6-3-yet-available/122009)
**Author:** [@Adren](https://discuss.elastic.co/u/Adren)\ **Replies:** 7\ **Last updated:** [April 4, 2018, 5:28am UTC](https://discuss.elastic.co/t/is-the-version-6-3-yet-available/122009 "2018-04-04T05:28:10Z")
I've read this morning that the new version was coming out, I was wondering if the version 6.3.0 of the elastic suite is out ? https://www.elastic.co/downloads/elasticsearch =\> we can download 6.2.2 only Regards. --- ## [Difference between primary node and replica node](https://discuss.elastic.co/t/difference-between-primary-node-and-replica-node/97366)
**Author:** [@Tushar\_Sharma1](https://discuss.elastic.co/u/Tushar_Sharma1)\ **Replies:** 7\ **Last updated:** [August 17, 2017, 11:35am UTC](https://discuss.elastic.co/t/difference-between-primary-node-and-replica-node/97366 "2017-08-17T11:35:21Z")
difference between primary-replica node and primary -replica shards ?. as mention on page link given below: https://www.elastic.co/cloud/as-a-service/pricing --- ## [Logstash memory use keeps increasing linearly over time](https://discuss.elastic.co/t/logstash-memory-use-keeps-increasing-linearly-over-time/250927)
**Author:** [@SHINRA](https://discuss.elastic.co/u/SHINRA)\ **Replies:** 6\ **Last updated:** [October 8, 2020, 4:43am UTC](https://discuss.elastic.co/t/logstash-memory-use-keeps-increasing-linearly-over-time/250927 "2020-10-08T04:43:04Z")
I have a logstash pipelines that runs tasks every day on a fixed time using the http input. Each task completes executing (from input of first pipeline to outputs of the last one) within few minutes. Rest of the day i… --- ## [Index first element in array](https://discuss.elastic.co/t/index-first-element-in-array/11867)
**Author:** [@thesuaves22](https://discuss.elastic.co/u/thesuaves22)\ **Replies:** 6\ **Last updated:** [May 8, 2013, 8:19pm UTC](https://discuss.elastic.co/t/index-first-element-in-array/11867 "2013-05-08T20:19:53Z")
Hello, I'm using ElasticSearch 0.20.6 and trying to index the first element in an array as a multi\_field type. I need to query for the first item in an array, and this is the only way I could come up with: Anal… --- ## [Mutate/remove fields with dot caracters](https://discuss.elastic.co/t/mutate-remove-fields-with-dot-caracters/91970)
**Author:** [@Romain\_Pelissier](https://discuss.elastic.co/u/Romain_Pelissier)\ **Replies:** 5\ **Last updated:** [July 12, 2017, 10:43am UTC](https://discuss.elastic.co/t/mutate-remove-fields-with-dot-caracters/91970 "2017-07-12T10:43:30Z")
Hi all! We use the input cef codec because we have some arcsight connectors that we want to send their events to our ELK platform. CEF is cool but we would like to remove a lot ot fields that are not necessary for the da… --- ## [Output plugin IBM Qradar](https://discuss.elastic.co/t/output-plugin-ibm-qradar/162695)
**Author:** [@raffutz85](https://discuss.elastic.co/u/raffutz85)\ **Replies:** 3\ **Last updated:** [January 7, 2019, 5:43pm UTC](https://discuss.elastic.co/t/output-plugin-ibm-qradar/162695 "2019-01-07T17:43:48Z")
Good morning, I'm planning to use logstash to aggregate, filter and enrich logs from different log sources like syslog (proxy, firewall and AV) but also Microsoft Windows (WEC with agent for sending logs to the LogStash)… --- ## [Inconsistent search results](https://discuss.elastic.co/t/inconsistent-search-results/6154)
**Author:** [@colinsurprenant](https://discuss.elastic.co/u/colinsurprenant)\ **Replies:** 7\ **Last updated:** [December 16, 2011, 3:43pm UTC](https://discuss.elastic.co/t/inconsistent-search-results/6154 "2011-12-16T15:43:50Z")
Hi, I am seeing inconsistent search results for the same query. My cluster is a 7 nodes 0.18.5, 6x http+data, 1x http only. On one specific index configured as 1 shard and 5 replicas, when I search using a very… --- ## [Compiling Filebeat difficulties (Resolved)](https://discuss.elastic.co/t/compiling-filebeat-difficulties-resolved/38684)
**Author:** [@arahael](https://discuss.elastic.co/u/arahael)\ **Replies:** 6\ **Last updated:** [January 12, 2016, 12:31am UTC](https://discuss.elastic.co/t/compiling-filebeat-difficulties-resolved/38684 "2016-01-12T00:31:35Z")
I need to have multiline support, which seems to be implemented in master and backported to the 1.1 branch, however is not yet released. I was hoping to be able to compile this on mac os x, but I can't seem to find any… --- ## [Logstash stops processing after some time](https://discuss.elastic.co/t/logstash-stops-processing-after-some-time/153111)
**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\ **Replies:** 3\ **Last updated:** [October 22, 2018, 10:28am UTC](https://discuss.elastic.co/t/logstash-stops-processing-after-some-time/153111 "2018-10-22T10:28:05Z")
Hi, In our stack, we have 12 logstash nodes. They work very fine when we restart all of them. After some time some nodes stop accepting data and some keeps going and processing. This way all of the nodes are getting dow… --- ## [Can I disable or remove dashboard "Add a filter +"? I don't want users to see/use it when sharing dashboard with iframe in my app](https://discuss.elastic.co/t/can-i-disable-or-remove-dashboard-add-a-filter-i-dont-want-users-to-see-use-it-when-sharing-dashboard-with-iframe-in-my-app/120905)
**Author:** [@pavelmay](https://discuss.elastic.co/u/pavelmay)\ **Replies:** 3\ **Last updated:** [February 22, 2018, 6:06pm UTC](https://discuss.elastic.co/t/can-i-disable-or-remove-dashboard-add-a-filter-i-dont-want-users-to-see-use-it-when-sharing-dashboard-with-iframe-in-my-app/120905 "2018-02-22T18:06:29Z")
\[Kibana%20Dashboard%20Add%20Filter\] --- ## [Python Elasticsearch aggregated query](https://discuss.elastic.co/t/python-elasticsearch-aggregated-query/291998)
**Author:** [@Sederfo](https://discuss.elastic.co/u/Sederfo)\ **Replies:** 5\ **Last updated:** [December 15, 2021, 3:59pm UTC](https://discuss.elastic.co/t/python-elasticsearch-aggregated-query/291998 "2021-12-15T15:59:16Z")
I am struggling to get an aggregated response based on a query... for example, in Kibana visualization, after creating a table with the aggregations and query I need, I can view the request by going inside the visualizat… --- ## [High cpu usage by worker thread](https://discuss.elastic.co/t/high-cpu-usage-by-worker-thread/28810)
**Author:** [@Ashish\_Goswami](https://discuss.elastic.co/u/Ashish_Goswami)\ **Replies:** 7\ **Last updated:** [September 9, 2015, 9:58am UTC](https://discuss.elastic.co/t/high-cpu-usage-by-worker-thread/28810 "2015-09-09T09:58:28Z")
I am trying to parse some logs by logstash which is reading logs directly from a log file. While starting logstash using bin/logstash -f logstash cpu usage go high(up to 80%). After some time logstash cpu become stable.… [Previous page](https://discuss.elastic.co/top.md?page=411&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=413&per_page=50&period=all)