# Top

**URL:** https://discuss.elastic.co/top.md?page=417&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 418

---

## [FileBeat not harvesting logs](https://discuss.elastic.co/t/filebeat-not-harvesting-logs/109854)

<div class="topic-metadata">

**Author:** [@david2](https://discuss.elastic.co/u/david2)\
**Replies:** 4\
**Last updated:** [December 4, 2017, 2:15am UTC](https://discuss.elastic.co/t/filebeat-not-harvesting-logs/109854 "2017-12-04T02:15:39Z")

</div>

Hi, I am using filebeat and in particular the apache module to send the logs to ElasticSearch and it doesn't appear that the logs are being sent to ElasticSearch and are not appearing in Kibana. I have followed this pa…

---

## [Add header row to CSV output](https://discuss.elastic.co/t/add-header-row-to-csv-output/50563)

<div class="topic-metadata">

**Author:** [@astickler](https://discuss.elastic.co/u/astickler)\
**Replies:** 4\
**Last updated:** [March 31, 2017, 2:38pm UTC](https://discuss.elastic.co/t/add-header-row-to-csv-output/50563 "2017-03-31T14:38:29Z")

</div>

Hi, I need to create date-specific CSV files with logstash, but can't see how to write a header row. Is this even possible? Thanks, Andrew

---

## [Zero Downtime Reindexing](https://discuss.elastic.co/t/zero-downtime-reindexing/15885)

<div class="topic-metadata">

**Author:** [@Andrew\_Kane](https://discuss.elastic.co/u/Andrew_Kane)\
**Replies:** 8\
**Last updated:** [May 1, 2014, 10:19pm UTC](https://discuss.elastic.co/t/zero-downtime-reindexing/15885 "2014-05-01T22:19:19Z")

</div>

Hi, I've followed the documentation for zero-downtime mapping changes and it works great. http://www.elasticsearch.org/blog/changing-mapping-with-zero-downtime/ However, there is a (pretty big) race condition …

---

## [Filebeat stopped sending logs in realtime](https://discuss.elastic.co/t/filebeat-stopped-sending-logs-in-realtime/154125)

<div class="topic-metadata">

**Author:** [@Napsty](https://discuss.elastic.co/u/Napsty)\
**Replies:** 7\
**Last updated:** [November 9, 2018, 10:30am UTC](https://discuss.elastic.co/t/filebeat-stopped-sending-logs-in-realtime/154125 "2018-11-09T10:30:48Z")

</div>

I briefly mentioned this problem to Carlos Pérez at the OSSummit this week and he suggested to post my problem here. Since a couple of weeks we have a problem on a particular host (a VM) that Only parts of the logs ar…

---

## [Date range not working as expected between Elasticsearch 7.17 and Elasticsearch 8.6](https://discuss.elastic.co/t/date-range-not-working-as-expected-between-elasticsearch-7-17-and-elasticsearch-8-6/328825)

<div class="topic-metadata">

**Author:** [@MarynaCherniavska](https://discuss.elastic.co/u/MarynaCherniavska)\
**Replies:** 3\
**Last updated:** [March 31, 2023, 8:50am UTC](https://discuss.elastic.co/t/date-range-not-working-as-expected-between-elasticsearch-7-17-and-elasticsearch-8-6/328825 "2023-03-31T08:50:08Z")

</div>

We're exploring a move from (self-managed) Elasticsearch 7.17 to Elasticsearch 8.6. Some of the tests on the application fail if we switch. We traced the failure to an inconsistency between the results on the range using…

---

## [Filebeat.yml can not convert String into Object](https://discuss.elastic.co/t/filebeat-yml-can-not-convert-string-into-object/163502)

<div class="topic-metadata">

**Author:** [@matanos](https://discuss.elastic.co/u/matanos)\
**Replies:** 3\
**Last updated:** [January 9, 2019, 11:12am UTC](https://discuss.elastic.co/t/filebeat-yml-can-not-convert-string-into-object/163502 "2019-01-09T11:12:23Z")

</div>

aI'm adding by the config file. I've used the filebeat -e -c /etc/filebeat/filebeat.yml command to debug Omitted some comments to dodge the max char count . filebeat.prospectors: Each - is a prospector. Most options…

---

## [Query to ignore fields with empty content](https://discuss.elastic.co/t/query-to-ignore-fields-with-empty-content/156756)

<div class="topic-metadata">

**Author:** [@Pradeep\_ES](https://discuss.elastic.co/u/Pradeep_ES)\
**Replies:** 6\
**Last updated:** [December 11, 2018, 7:45pm UTC](https://discuss.elastic.co/t/query-to-ignore-fields-with-empty-content/156756 "2018-12-11T19:45:59Z")

</div>

I have the following requirements a) Show suggestions if a query has hits in both query\_terms and trigger\_terms b) Show suggestions if a query has hits in query\_terms and trigger\_terms is an empty array with no content …

---

## [Http output plugin json\_batch format to Http input plugin](https://discuss.elastic.co/t/http-output-plugin-json-batch-format-to-http-input-plugin/127462)

<div class="topic-metadata">

**Author:** [@Aceman87](https://discuss.elastic.co/u/Aceman87)\
**Replies:** 8\
**Last updated:** [May 3, 2018, 8:25am UTC](https://discuss.elastic.co/t/http-output-plugin-json-batch-format-to-http-input-plugin/127462 "2018-05-03T08:25:00Z")

</div>

In the documentation there is an alternative to send output through the Http output plugin with the "json\_batch" format. It states: If json\_batch, each batch of events received by this output will be placed into a sing…

---

## [Native controller process has stopped : no new native processes can be started](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/214077)

<div class="topic-metadata">

**Author:** [@StepBat](https://discuss.elastic.co/u/StepBat)\
**Replies:** 5\
**Last updated:** [January 13, 2020, 6:10pm UTC](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/214077 "2020-01-13T18:10:19Z")

</div>

Hello support I need your help in order to fix a crash of elasticsearch just after the starting with the message 'Native controller process has stopped - no new native processes can be started" Elasticsearch is started…

---

## [How to customize the kibana heatmap by x\_coord and y\_coord labels](https://discuss.elastic.co/t/how-to-customize-the-kibana-heatmap-by-x-coord-and-y-coord-labels/135448)

<div class="topic-metadata">

**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\
**Replies:** 4\
**Last updated:** [June 12, 2018, 10:24am UTC](https://discuss.elastic.co/t/how-to-customize-the-kibana-heatmap-by-x-coord-and-y-coord-labels/135448 "2018-06-12T10:24:11Z")

</div>

Hi the kibana experts, the heatmap (even all the basic type vislib type visualizations) doesn't support to sort the x/y labels in the chart based on my understanding. the terms in the buckets actually only reflect the …

---

## [Not authorized to use Reporting](https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631)

<div class="topic-metadata">

**Author:** [@Kaabo](https://discuss.elastic.co/u/Kaabo)\
**Replies:** 4\
**Last updated:** [September 29, 2016, 10:07am UTC](https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631 "2016-09-29T10:07:49Z")

</div>

Hi, I am trying to use Reporting -plugin with Shield on my Win10. My versions are: Elasticsearch: 2.4.0 Kibana: 4.6.1 Reporting: 2.4.1 After multiple attempts I still get the error: “Reporting: Error 403 Forbidde…

---

## [Sharing Dashboard via iFrame fails to login](https://discuss.elastic.co/t/sharing-dashboard-via-iframe-fails-to-login/295639)

<div class="topic-metadata">

**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\
**Replies:** 4\
**Last updated:** [January 28, 2022, 1:03pm UTC](https://discuss.elastic.co/t/sharing-dashboard-via-iframe-fails-to-login/295639 "2022-01-28T13:03:35Z")

</div>

Hello All, I was looking at trying to share access to my Dashboard via the provided iFrame code, and when I place the iFrame into my html page it its my kibana instance but... it fails to let me log in and see my dashbo…

---

## [Geo distance query order by distance](https://discuss.elastic.co/t/geo-distance-query-order-by-distance/159066)

<div class="topic-metadata">

**Author:** [@michaelnguyen](https://discuss.elastic.co/u/michaelnguyen)\
**Replies:** 1\
**Last updated:** [December 3, 2018, 6:40am UTC](https://discuss.elastic.co/t/geo-distance-query-order-by-distance/159066 "2018-12-03T06:40:20Z")

</div>

I can search geo point that within distance raidus (e.g. \< 10 km) with Geo Distance Query(https://www.elastic.co/guide/en/elasticsearch/reference/6.5/query-dsl-geo-distance-query.html#query-dsl-geo-distance-query). I wa…

---

## [Random function in Painless?](https://discuss.elastic.co/t/random-function-in-painless/70280)

<div class="topic-metadata">

**Author:** [@Dom-nik](https://discuss.elastic.co/u/Dom-nik)\
**Replies:** 3\
**Last updated:** [August 24, 2023, 6:25am UTC](https://discuss.elastic.co/t/random-function-in-painless/70280 "2023-08-24T06:25:09Z")

</div>

Hello, What is the way to genereate a random value in Painless? Being able to draw one value from a set would be particularly great - I want to use it to add a new field to my mock data and I need a possibility to add…

---

## [Failing starting due to transport layer exception](https://discuss.elastic.co/t/failing-starting-due-to-transport-layer-exception/11578)

<div class="topic-metadata">

**Author:** [@lcxlcx](https://discuss.elastic.co/u/lcxlcx)\
**Replies:** 8\
**Last updated:** [April 16, 2013, 1:39pm UTC](https://discuss.elastic.co/t/failing-starting-due-to-transport-layer-exception/11578 "2013-04-16T13:39:10Z")

</div>

Version : 0.20.5 I have installed ES as usual, everything works well except that it issue an exception during starting, but it still could work. log snippt : exception caught on transport layer \[\[id: 0x6d33e2…

---

## [Log the User and Query submited thru Kibana](https://discuss.elastic.co/t/log-the-user-and-query-submited-thru-kibana/86675)

<div class="topic-metadata">

**Author:** [@pserrao](https://discuss.elastic.co/u/pserrao)\
**Replies:** 0\
**Last updated:** [May 22, 2017, 1:33pm UTC](https://discuss.elastic.co/t/log-the-user-and-query-submited-thru-kibana/86675 "2017-05-22T13:33:52Z")

</div>

I am using Kibana and Elastic versions 5.4.0 with X-Pack enabled. For auditing purposes I need to log the User and the Query submitted to ES thru the Kibana Interface, but I was unable to perform this task. I have …

---

## [Synthetic monitoring Timeout 30 seconds](https://discuss.elastic.co/t/synthetic-monitoring-timeout-30-seconds/314367)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [September 14, 2022, 9:41pm UTC](https://discuss.elastic.co/t/synthetic-monitoring-timeout-30-seconds/314367 "2022-09-14T21:41:43Z")

</div>

Hi, Im new to Synthetic monitoring, after a month of good results, a couple of days ago the status of some of the monitors started to fail, with the error: Error message page.goto: Timeout 30000ms exceeded. The inlin…

---

## [Need clatification on "TransportException"](https://discuss.elastic.co/t/need-clatification-on-transportexception/24015)

<div class="topic-metadata">

**Author:** [@subramaniajeeva](https://discuss.elastic.co/u/subramaniajeeva)\
**Replies:** 4\
**Last updated:** [March 15, 2016, 1:36pm UTC](https://discuss.elastic.co/t/need-clatification-on-transportexception/24015 "2016-03-15T13:36:37Z")

</div>

I'm writing a elastic search wrapper for our application. I'm doing disruptive testing by taking a node down and similar things, so that I can do retry on the basis of the exception type. I'm getting TransportException…

---

## [Cannot access environment variables](https://discuss.elastic.co/t/cannot-access-environment-variables/288928)

<div class="topic-metadata">

**Author:** [@tofubeats](https://discuss.elastic.co/u/tofubeats)\
**Replies:** 7\
**Last updated:** [November 15, 2021, 6:15pm UTC](https://discuss.elastic.co/t/cannot-access-environment-variables/288928 "2021-11-15T18:15:16Z")

</div>

Hi, My config is really simple, I'm just trying to get a simple envornment variable to be accessed and used by a Logstash pipeline. It looks like this: input{ file { path =\> "${test}" } } filter {} output {…

---

## [Clickable link for any string field](https://discuss.elastic.co/t/clickable-link-for-any-string-field/113746)

<div class="topic-metadata">

**Author:** [@Souciance\_Eqdam\_Rash](https://discuss.elastic.co/u/Souciance_Eqdam_Rash)\
**Replies:** 7\
**Last updated:** [January 9, 2018, 11:02pm UTC](https://discuss.elastic.co/t/clickable-link-for-any-string-field/113746 "2018-01-09T23:02:03Z")

</div>

Hello, First of all, thanks for some really awesome products. We are using EK to centralise our logs from our integration plattform and it has done wonders as to what insights we can now provide to business. We sometim…

---

## [Manually delete old logs/indices in ELK 7.3.0](https://discuss.elastic.co/t/manually-delete-old-logs-indices-in-elk-7-3-0/227981)

<div class="topic-metadata">

**Author:** [@mohamed.samir](https://discuss.elastic.co/u/mohamed.samir)\
**Replies:** 5\
**Last updated:** [April 26, 2020, 6:46am UTC](https://discuss.elastic.co/t/manually-delete-old-logs-indices-in-elk-7-3-0/227981 "2020-04-26T06:46:12Z")

</div>

please, how to delete old logs/indices or in ELK 7.3 before i used to use curl -GET http://localhost:9200/\_cat/indices to see old indices and delete it manually using curl -XDELETE http://localhost:9200/logstash-2020…

---

## [Mapper\_parsing\_exception & failed to parse](https://discuss.elastic.co/t/mapper-parsing-exception-failed-to-parse/120540)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [February 21, 2018, 3:43pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-failed-to-parse/120540 "2018-02-21T15:43:15Z")

</div>

I'm trying to use Json filter plugin | Logstash Reference: filter { json { skip\_on\_invalid\_json =\> true source =\> "message" } } logstash log - getting bombarded with similar messages: logstash11 | \[2018-0…

---

## [Mapping multiple date formats](https://discuss.elastic.co/t/mapping-multiple-date-formats/4490)

<div class="topic-metadata">

**Author:** [@searchersteve](https://discuss.elastic.co/u/searchersteve)\
**Replies:** 1\
**Last updated:** [May 28, 2011, 10:24am UTC](https://discuss.elastic.co/t/mapping-multiple-date-formats/4490 "2011-05-28T10:24:51Z")

</div>

In creating a \_mapping, I am using the || operator to allow for indexing multiple formats in a date field. I am following procedures described here in the guide. My problem: The order in which I list the formats matters.…

---

## [Permanent password for elasticsearch on kubernetes](https://discuss.elastic.co/t/permanent-password-for-elasticsearch-on-kubernetes/296419)

<div class="topic-metadata">

**Author:** [@hasanaki](https://discuss.elastic.co/u/hasanaki)\
**Replies:** 4\
**Last updated:** [February 11, 2022, 12:13pm UTC](https://discuss.elastic.co/t/permanent-password-for-elasticsearch-on-kubernetes/296419 "2022-02-11T12:13:58Z")

</div>

hi, problem: I create secret.yml, I want Kibana and Elastic to use it. but Elasticsearch can not apply the password from secret.yml and i have to set password whit elasticsearch-setup-password interactive. so each time…

---

## [5 node cluster architecture recommendations](https://discuss.elastic.co/t/5-node-cluster-architecture-recommendations/46736)

<div class="topic-metadata">

**Author:** [@sipazzo](https://discuss.elastic.co/u/sipazzo)\
**Replies:** 6\
**Last updated:** [April 8, 2016, 4:46pm UTC](https://discuss.elastic.co/t/5-node-cluster-architecture-recommendations/46736 "2016-04-08T16:46:38Z")

</div>

I know I have seen similar questions and am still struggling to figure out the best way to architect a 5 node cluster. This is for geo-spatial data and we expect very heavy indexing, roughly 200gb of data in 9 indexes, q…

---

## [Logs Not displaying in kibana while using newly created index but displaying when using default logstash-\*](https://discuss.elastic.co/t/logs-not-displaying-in-kibana-while-using-newly-created-index-but-displaying-when-using-default-logstash/99729)

<div class="topic-metadata">

**Author:** [@fazi347](https://discuss.elastic.co/u/fazi347)\
**Replies:** 8\
**Last updated:** [September 8, 2017, 5:35am UTC](https://discuss.elastic.co/t/logs-not-displaying-in-kibana-while-using-newly-created-index-but-displaying-when-using-default-logstash/99729 "2017-09-08T05:35:33Z")

</div>

Hi, i am configured server with fluentd, elasticsearch and kibana to ship logs to server from client node and display in kibana. When i am configuring kibana index using default logstash-\* index logs are displaying in …

---

## [How can I ingest PDF and words files and extract keywords of these documents?](https://discuss.elastic.co/t/how-can-i-ingest-pdf-and-words-files-and-extract-keywords-of-these-documents/133194)

<div class="topic-metadata">

**Author:** [@Akimbo](https://discuss.elastic.co/u/Akimbo)\
**Replies:** 7\
**Last updated:** [May 29, 2018, 9:59am UTC](https://discuss.elastic.co/t/how-can-i-ingest-pdf-and-words-files-and-extract-keywords-of-these-documents/133194 "2018-05-29T09:59:58Z")

</div>

Hi all, Currently, I use FSCrawler to ingest files (PDF, words). All files are indexed in ES. Now, I want to do a search engine which uses Elasticsearch and looks like Google search engine. The first step of the search …

---

## [Connect Mysql to elastic search](https://discuss.elastic.co/t/connect-mysql-to-elastic-search/22944)

<div class="topic-metadata">

**Author:** [@Sanu\_Vimal](https://discuss.elastic.co/u/Sanu_Vimal)\
**Replies:** 3\
**Last updated:** [April 6, 2015, 7:59am UTC](https://discuss.elastic.co/t/connect-mysql-to-elastic-search/22944 "2015-04-06T07:59:45Z")

</div>

Hi Please get me some solution to connect elastic search to my table data in mysql. I have installed the river jdbc plugin and have put in the mysql jar file within the plugin /jdbc folder. I do not know how to …

---

## [How to concatenate two fields in logstash?](https://discuss.elastic.co/t/how-to-concatenate-two-fields-in-logstash/285455)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 12:13pm UTC](https://discuss.elastic.co/t/how-to-concatenate-two-fields-in-logstash/285455 "2021-09-29T12:13:35Z")

</div>

I have json format data. I want to concatenate firstName and LastName. I have tried by using mutate filter filter{ mutate { add\_field =\> { "Full Name" =\> "%{FirstName}%{LastName}" } …

---

## [Ability to alert when no data is being recieved](https://discuss.elastic.co/t/ability-to-alert-when-no-data-is-being-recieved/120443)

<div class="topic-metadata">

**Author:** [@peter1992](https://discuss.elastic.co/u/peter1992)\
**Replies:** 5\
**Last updated:** [February 20, 2018, 1:19pm UTC](https://discuss.elastic.co/t/ability-to-alert-when-no-data-is-being-recieved/120443 "2018-02-20T13:19:12Z")

</div>

In Watcher is it possible to create an alert that informs us when there is no data being collected regardless is logstash is running or not

---

## [Should I reimport data after updating synonyms file](https://discuss.elastic.co/t/should-i-reimport-data-after-updating-synonyms-file/63560)

<div class="topic-metadata">

**Author:** [@vincent2easy](https://discuss.elastic.co/u/vincent2easy)\
**Replies:** 5\
**Last updated:** [October 24, 2016, 6:39am UTC](https://discuss.elastic.co/t/should-i-reimport-data-after-updating-synonyms-file/63560 "2016-10-24T06:39:33Z")

</div>

Hi All, I was wondering, If I update the synonyms files, do I need to reload the data into ES? Because I have tried to only restart ES after updating synonyms files, but it does not work. If it is so, do you have any m…

---

## [Exiting: Registry file path must be a file. /usr/share/filebeat/data/registry is a directory](https://discuss.elastic.co/t/exiting-registry-file-path-must-be-a-file-usr-share-filebeat-data-registry-is-a-directory/182894)

<div class="topic-metadata">

**Author:** [@Maurya\_M](https://discuss.elastic.co/u/Maurya_M)\
**Replies:** 3\
**Last updated:** [May 28, 2019, 4:54am UTC](https://discuss.elastic.co/t/exiting-registry-file-path-must-be-a-file-usr-share-filebeat-data-registry-is-a-directory/182894 "2019-05-28T04:54:31Z")

</div>

Hi, I am try to match the various compatible version listed here : https://www.elastic.co/support/matrix#matrix\_compatibility, but when i use 6.8.0, i am getting this error in my filebeat daemonset, any idea how to fix …

---

## [Getting error INVALID\_FETCH\_SESSION\_EPOCH in logstash still](https://discuss.elastic.co/t/getting-error-invalid-fetch-session-epoch-in-logstash-still/153352)

<div class="topic-metadata">

**Author:** [@nickytd](https://discuss.elastic.co/u/nickytd)\
**Replies:** 0\
**Last updated:** [October 22, 2018, 8:59am UTC](https://discuss.elastic.co/t/getting-error-invalid-fetch-session-epoch-in-logstash-still/153352 "2018-10-22T08:59:38Z")

</div>

Hi Occasionally log stash Kafka consumer produces \[INFO \]\[org.apache.kafka.clients.FetchSessionHandler\] \[Consumer clientId=elk-logstash-indexer-69bb94c58-4x7q8-4, groupId=containers\] Node 1 was unable to process the fe…

---

## [JVM Memory details using metricbeat](https://discuss.elastic.co/t/jvm-memory-details-using-metricbeat/159868)

<div class="topic-metadata">

**Author:** [@460](https://discuss.elastic.co/u/460)\
**Replies:** 7\
**Last updated:** [December 18, 2018, 7:57am UTC](https://discuss.elastic.co/t/jvm-memory-details-using-metricbeat/159868 "2018-12-18T07:57:45Z")

</div>

Is it possible to get the JVM Memory details using metricbeat in 6.4.0

---

## [Oracle Data into Elastic](https://discuss.elastic.co/t/oracle-data-into-elastic/286719)

<div class="topic-metadata">

**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Replies:** 3\
**Last updated:** [October 14, 2021, 1:12pm UTC](https://discuss.elastic.co/t/oracle-data-into-elastic/286719 "2021-10-14T13:12:56Z")

</div>

Hi, I have been butting my head against a brick wall for over a week now trying to get the jdbc driver working in logstash, and have rethought the approach for getting data out of Oracle. I am currently trying to protot…

---

## [Clean up field mappings](https://discuss.elastic.co/t/clean-up-field-mappings/83203)

<div class="topic-metadata">

**Author:** [@mortenberg80](https://discuss.elastic.co/u/mortenberg80)\
**Replies:** 4\
**Last updated:** [April 28, 2017, 11:21am UTC](https://discuss.elastic.co/t/clean-up-field-mappings/83203 "2017-04-28T11:21:30Z")

</div>

Hi. We have an ELK-stack for our centralized logging, and we keep logs for about 3 weeks. We use dynamic mapping and over time our field list has grown quite big. Currently the index has over 2000 fields defined. At …

---

## [Clean old indexes automatically in elasticsearch](https://discuss.elastic.co/t/clean-old-indexes-automatically-in-elasticsearch/323551)

<div class="topic-metadata">

**Author:** [@Joao\_Malebo](https://discuss.elastic.co/u/Joao_Malebo)\
**Replies:** 5\
**Last updated:** [January 20, 2023, 4:38pm UTC](https://discuss.elastic.co/t/clean-old-indexes-automatically-in-elasticsearch/323551 "2023-01-20T16:38:05Z")

</div>

Hello friends, I'm having problems with the storage where elasticsearch is installed... I'm constantly having a full disk. What can I do to delete or clean up old indexes?

---

## [Why we need to scroll to see next records in Discover table of kibana?](https://discuss.elastic.co/t/why-we-need-to-scroll-to-see-next-records-in-discover-table-of-kibana/38844)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 6\
**Last updated:** [January 12, 2016, 6:50pm UTC](https://discuss.elastic.co/t/why-we-need-to-scroll-to-see-next-records-in-discover-table-of-kibana/38844 "2016-01-12T18:50:34Z")

</div>

Hi Experts , I want to know what is the logic behind scrolling in the discover page of Kibana. Actually query returns 7000 hits but on the page I only get 50 records . Next records will only appears if I scroll the pa…

---

## [Не приходят логи](https://discuss.elastic.co/t/topic/203057)

<div class="topic-metadata">

**Author:** [@beren](https://discuss.elastic.co/u/beren)\
**Replies:** 7\
**Last updated:** [October 11, 2019, 5:06pm UTC](https://discuss.elastic.co/t/topic/203057 "2019-10-11T17:06:40Z")

</div>

Всем привет. Пытаюсь связать filebeat с ELK 7.4 Создаю в /etc/logstash/conf.d/postfix.conf input { beats { port =\> 5044 } } output { elasticsearch { hosts =\> "localhost:9200" …

---

## [REDIS configuration](https://discuss.elastic.co/t/redis-configuration/51432)

<div class="topic-metadata">

**Author:** [@Sandhya\_Rathinapandi](https://discuss.elastic.co/u/Sandhya_Rathinapandi)\
**Replies:** 8\
**Last updated:** [June 2, 2016, 9:02am UTC](https://discuss.elastic.co/t/redis-configuration/51432 "2016-06-02T09:02:48Z")

</div>

I am trying to restrict the redis access to only few ip's My configurations below: bind 10.xx.xx.xx1 10.xx.xx.xx2 protected-mode yes And I am getting the error: Creating Server TCP listening socket 10.xx.xx.xx1…

---

## [Ingestion of CEF by syslog](https://discuss.elastic.co/t/ingestion-of-cef-by-syslog/199811)

<div class="topic-metadata">

**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\
**Replies:** 0\
**Last updated:** [September 17, 2019, 11:13am UTC](https://discuss.elastic.co/t/ingestion-of-cef-by-syslog/199811 "2019-09-17T11:13:07Z")

</div>

Hi I'm trying to configure logstash to ingest CEF file that I received by rsyslog and stored in a file in json format. I configure my logstash and the logstash.conf is like this (I try to implement ECS schema and in th…

---

## [Cluster recovery inside K8s](https://discuss.elastic.co/t/cluster-recovery-inside-k8s/213641)

<div class="topic-metadata">

**Author:** [@pbecot01](https://discuss.elastic.co/u/pbecot01)\
**Replies:** 5\
**Last updated:** [January 3, 2020, 4:06pm UTC](https://discuss.elastic.co/t/cluster-recovery-inside-k8s/213641 "2020-01-03T16:06:47Z")

</div>

Hi all! Spent the last month or so playing with elastic stack for my side project site. Its just a flask/react app with virtually 0 traffic, so nothing particularly fancy, but I like playing with new tech. So am deployin…

---

## [Java API for Graph](https://discuss.elastic.co/t/java-api-for-graph/48076)

<div class="topic-metadata">

**Author:** [@sharad\_khandelwal1](https://discuss.elastic.co/u/sharad_khandelwal1)\
**Replies:** 7\
**Last updated:** [February 7, 2017, 9:48am UTC](https://discuss.elastic.co/t/java-api-for-graph/48076 "2017-02-07T09:48:24Z")

</div>

Does the current Java ES 2.3 API support graph or we need to use something like JEST ?

---

## [Error connecting to Elasticsearch messages while starting filebeat](https://discuss.elastic.co/t/error-connecting-to-elasticsearch-messages-while-starting-filebeat/205806)

<div class="topic-metadata">

**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\
**Replies:** 4\
**Last updated:** [October 30, 2019, 11:12am UTC](https://discuss.elastic.co/t/error-connecting-to-elasticsearch-messages-while-starting-filebeat/205806 "2019-10-30T11:12:21Z")

</div>

Dear All, my instance details are Kibana version: 7.4.1 Elasticsearch version: 7.4.1 \*\*filebeat version \*\* 7.4.1 APM Agent language and version: NA Logstash version 7.4.1-1 From my clients, I can telnet to…

---

## [Boost the first word in a multi-word query](https://discuss.elastic.co/t/boost-the-first-word-in-a-multi-word-query/19406)

<div class="topic-metadata">

**Author:** [@Jeremy\_3](https://discuss.elastic.co/u/Jeremy_3)\
**Replies:** 7\
**Last updated:** [August 25, 2014, 8:55am UTC](https://discuss.elastic.co/t/boost-the-first-word-in-a-multi-word-query/19406 "2014-08-25T08:55:51Z")

</div>

In case of a multi-word query, is there a way to boost the first terms of the query? For example, in the following query: GET /my\_index/my\_type/\_search { "query": { "match": { "title": "…

---

## [Scripted field to calculate duration](https://discuss.elastic.co/t/scripted-field-to-calculate-duration/245222)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 8\
**Last updated:** [August 18, 2020, 8:43am UTC](https://discuss.elastic.co/t/scripted-field-to-calculate-duration/245222 "2020-08-18T08:43:58Z")

</div>

Hi , i try to create a new scripted field by calculating the difference(in minutes) between 2 dates in the following format : bookingStatus.confirmed :Jan 5, 2020 @ 11:30:00.000 bookingStatus.wating :Jan 5, 2020 @ 09:…

---

## [How can I identify back pressure in logstash](https://discuss.elastic.co/t/how-can-i-identify-back-pressure-in-logstash/157581)

<div class="topic-metadata">

**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Replies:** 0\
**Last updated:** [November 20, 2018, 4:04pm UTC](https://discuss.elastic.co/t/how-can-i-identify-back-pressure-in-logstash/157581 "2018-11-20T16:04:40Z")

</div>

Hi, we are trying to create some alerting in elasticsearch side which would notify us when logstash puts back pressure on inputs and stops accepting data. we are currently using three types of inputs: beats, tcp and htt…

---

## [Kibana Index configuration](https://discuss.elastic.co/t/kibana-index-configuration/37663)

<div class="topic-metadata">

**Author:** [@Santhosh\_Varala](https://discuss.elastic.co/u/Santhosh_Varala)\
**Replies:** 7\
**Last updated:** [May 28, 2016, 6:39pm UTC](https://discuss.elastic.co/t/kibana-index-configuration/37663 "2016-05-28T18:39:20Z")

</div>

All, How can we configuration an index without using the Settings UI programmatically in Kibana? If there is way please let us know how it can be done. I need a use case for which settings module is not exposed. so i…

---

## [Error while running search templates on ES 5.2.0 Unknown key for a VALUE\_STRING in \[id\]](https://discuss.elastic.co/t/error-while-running-search-templates-on-es-5-2-0-unknown-key-for-a-value-string-in-id/75330)

<div class="topic-metadata">

**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\
**Replies:** 3\
**Last updated:** [February 17, 2017, 10:09am UTC](https://discuss.elastic.co/t/error-while-running-search-templates-on-es-5-2-0-unknown-key-for-a-value-string-in-id/75330 "2017-02-17T10:09:39Z")

</div>

Hello, I am trying to run searches using searchtemplates following are the commands i am executing curl -XPUT 'localhost:9200/test/' -d '{"settings":{"index":{"number\_of\_shards":1,"number\_of\_replicas":0}}}' curl -X…

---

## [Windows 10 File input hangs \[SOLVED\]](https://discuss.elastic.co/t/windows-10-file-input-hangs-solved/31462)

<div class="topic-metadata">

**Author:** [@IGarvin](https://discuss.elastic.co/u/IGarvin)\
**Replies:** 8\
**Last updated:** [October 2, 2015, 9:22am UTC](https://discuss.elastic.co/t/windows-10-file-input-hangs-solved/31462 "2015-10-02T09:22:30Z")

</div>

Running in virtual test environment on Windows 10. Looked at all sorts of topics on this only to find all solutions (often just how to type the file path) are coming up unsuccessful. Behavior is Logstash hangs on "Logsta…

[Previous page](https://discuss.elastic.co/top.md?page=416&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=418&per_page=50&period=all)
