# Top **URL:** https://discuss.elastic.co/top.md?page=423&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 424 --- ## [Mmapfs vs niofs?](https://discuss.elastic.co/t/mmapfs-vs-niofs/27965)
**Author:** [@lokeshhctm](https://discuss.elastic.co/u/lokeshhctm)\ **Replies:** 2\ **Last updated:** [August 25, 2015, 8:23am UTC](https://discuss.elastic.co/t/mmapfs-vs-niofs/27965 "2015-08-25T08:23:17Z")
How can we increase virtual memory on linux? But if use mmapfs, how it works? In case we have 100 indexes and each of size like 2-3 GB. In case we have memory up to like 20 GB and in such case will elasticsearch handle, … --- ## [Indexing is going on very slowly](https://discuss.elastic.co/t/indexing-is-going-on-very-slowly/28335)
**Author:** [@siddharth\_gupta](https://discuss.elastic.co/u/siddharth_gupta)\ **Replies:** 8\ **Last updated:** [September 7, 2015, 4:04am UTC](https://discuss.elastic.co/t/indexing-is-going-on-very-slowly/28335 "2015-09-07T04:04:33Z")
Hello, I am trying to index 2 lakhs documents (On an average size of a single document is :40 kB) on a remote cluster inside our LAN network Currently I am using Transport Client to connect to the remote cluster throug… --- ## [Facing error in query](https://discuss.elastic.co/t/facing-error-in-query/181520)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 6\ **Last updated:** [May 27, 2019, 10:25am UTC](https://discuss.elastic.co/t/facing-error-in-query/181520 "2019-05-27T10:25:06Z")
Hello, When I am running a query in elasticsearch I am facing a error #! Deprecation: returning default values for missing document values is deprecated. Set system property '-Des.scripting.exception\_for\_missing\_value=… --- ## [Count distinct value by date](https://discuss.elastic.co/t/count-distinct-value-by-date/12343)
**Author:** [@shammes](https://discuss.elastic.co/u/shammes)\ **Replies:** 5\ **Last updated:** [June 12, 2013, 11:49am UTC](https://discuss.elastic.co/t/count-distinct-value-by-date/12343 "2013-06-12T11:49:36Z")
I use ElasticSearch for statistical purposes and have recently switched from MySQL to ElasticSearch. My table looks as follows: datetime | unique\_identifier | some more fields... ----------------------------------… --- ## [Index delete acknowledgement](https://discuss.elastic.co/t/index-delete-acknowledgement/10112)
**Author:** [@krispyjala](https://discuss.elastic.co/u/krispyjala)\ **Replies:** 4\ **Last updated:** [December 20, 2012, 12:47am UTC](https://discuss.elastic.co/t/index-delete-acknowledgement/10112 "2012-12-20T00:47:02Z")
I just deleted an index via java, and it seems to not have return acknowledgement. When curling using command line, it returns {"ok":true,"acknowledged":false}. Does this mean the index is really deleted? What d… --- ## [Microsecond dates?](https://discuss.elastic.co/t/microsecond-dates/8952)
**Author:** [@Mark\_Hinkle](https://discuss.elastic.co/u/Mark_Hinkle)\ **Replies:** 4\ **Last updated:** [September 8, 2012, 12:58am UTC](https://discuss.elastic.co/t/microsecond-dates/8952 "2012-09-08T00:58:01Z")
Question regarding "date" type precision - is milliseconds the highest date resolution? This post (http://elasticsearch-users.115913.n3.nabble.com/Sorting-on-a-date-field-td1873287.html#none) says "The \`date\` type … --- ## [SQL like query in ELasticsearch with AND OR](https://discuss.elastic.co/t/sql-like-query-in-elasticsearch-with-and-or/121319)
**Author:** [@bhowmick.pb](https://discuss.elastic.co/u/bhowmick.pb)\ **Replies:** 1\ **Last updated:** [March 2, 2018, 10:36pm UTC](https://discuss.elastic.co/t/sql-like-query-in-elasticsearch-with-and-or/121319 "2018-03-02T22:36:03Z")
Hi I am still playing around with elasticsearch(V6.1.3) and found it amazing but still struglling.I can do single term query search easily and code follows for my setup: from elasticsearch import Elasticsearch es = … --- ## [Firewall and other questions](https://discuss.elastic.co/t/firewall-and-other-questions/4237)
**Author:** [@David\_B](https://discuss.elastic.co/u/David_B)\ **Replies:** 2\ **Last updated:** [April 15, 2011, 10:24am UTC](https://discuss.elastic.co/t/firewall-and-other-questions/4237 "2011-04-15T10:24:46Z")
Hi We're just testing elasticsearch and it is amazing. We've set it up so that we have all ports closed except for port 80 and port 9300, and are reverse proxying with basic http authentication to port 9200 on ea… --- ## [Getting "Kibana server is not ready yet" when running from docker](https://discuss.elastic.co/t/getting-kibana-server-is-not-ready-yet-when-running-from-docker/305345)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 8\ **Last updated:** [May 23, 2022, 12:08pm UTC](https://discuss.elastic.co/t/getting-kibana-server-is-not-ready-yet-when-running-from-docker/305345 "2022-05-23T12:08:17Z")
I'm trying to run elasticsearch and kibana via dockers, and I'm getting errors with kibana . I'm using elasticsearch and kibana version 7.6.2 and Ubuntu 18.04.6 LTS I run elasticsearch with the following command: dock… --- ## [LDAP auth and groups](https://discuss.elastic.co/t/ldap-auth-and-groups/25045)
**Author:** [@keekz](https://discuss.elastic.co/u/keekz)\ **Replies:** 6\ **Last updated:** [July 8, 2015, 4:13pm UTC](https://discuss.elastic.co/t/ldap-auth-and-groups/25045 "2015-07-08T16:13:22Z")
I seem to be having some difficulty with the ldap auth configuration of Shield. I'm able to successfully auth, but Shield appears to be seeing only a subset of LDAP groups available to the user. Here's the Shield confi… --- ## [How to delete index and schedule data in logstash config file](https://discuss.elastic.co/t/how-to-delete-index-and-schedule-data-in-logstash-config-file/153844)
**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\ **Replies:** 5\ **Last updated:** [October 25, 2018, 6:55am UTC](https://discuss.elastic.co/t/how-to-delete-index-and-schedule-data-in-logstash-config-file/153844 "2018-10-25T06:55:17Z")
Hi I have scheduled my data in logstash config file it's working fine but the duplicate data will come in index. so i tried to delete the index first and then update the data but it's not working that is config file is … --- ## [Unable to generate report TypeError: FieldFormat is not a constructor](https://discuss.elastic.co/t/unable-to-generate-report-typeerror-fieldformat-is-not-a-constructor/164276)
**Author:** [@Shripal](https://discuss.elastic.co/u/Shripal)\ **Replies:** 1\ **Last updated:** [January 17, 2019, 11:24am UTC](https://discuss.elastic.co/t/unable-to-generate-report-typeerror-fieldformat-is-not-a-constructor/164276 "2019-01-17T11:24:19Z")
Hello All, So I've created a Discover Saved object. When I try to export it into a CSV format report, it throws an error stating: Unable to generate report TypeError: FieldFormat is not a constructor This saved obj… --- ## [High "took" time but low query time](https://discuss.elastic.co/t/high-took-time-but-low-query-time/241668)
**Author:** [@tawik](https://discuss.elastic.co/u/tawik)\ **Replies:** 5\ **Last updated:** [July 22, 2020, 4:20am UTC](https://discuss.elastic.co/t/high-took-time-but-low-query-time/241668 "2020-07-22T04:20:31Z")
Hello, We are trying to identify the source of high latency in our searches to our Elasticsearch cluster. Elasticsearch returns one field called "took" which is the time a request takes within ES (i.e. discounting time … --- ## [Can I run multiple Elasticsearch instances in one server?](https://discuss.elastic.co/t/can-i-run-multiple-elasticsearch-instances-in-one-server/321230)
**Author:** [@Lakshmi\_Kumari](https://discuss.elastic.co/u/Lakshmi_Kumari)\ **Replies:** 3\ **Last updated:** [December 14, 2022, 5:50pm UTC](https://discuss.elastic.co/t/can-i-run-multiple-elasticsearch-instances-in-one-server/321230 "2022-12-14T17:50:50Z")
Can I run multiple Elasticsearch instances in one server? -If yes, How can I install 2 Elasticsearch instances in a single Linux server. I am aware if we use "yum install" will be installed without any issue. Thanks i… --- ## [Sorting a string field numerically in elasticsearch](https://discuss.elastic.co/t/sorting-a-string-field-numerically-in-elasticsearch/161781)
**Author:** [@Nam](https://discuss.elastic.co/u/Nam)\ **Replies:** 3\ **Last updated:** [December 24, 2018, 2:14pm UTC](https://discuss.elastic.co/t/sorting-a-string-field-numerically-in-elasticsearch/161781 "2018-12-24T14:14:30Z")
Hi guys. When sorting on a field that's a string, strings that contain numbers aren't sorted properly. For example, with these documents with type: string: { login\_id: "1" } { login\_id: "1A" } { login\_id: "1B" } { … --- ## [Logstash assign key value pair into each variables](https://discuss.elastic.co/t/logstash-assign-key-value-pair-into-each-variables/86583)
**Author:** [@vallikkv](https://discuss.elastic.co/u/vallikkv)\ **Replies:** 8\ **Last updated:** [May 23, 2017, 7:21am UTC](https://discuss.elastic.co/t/logstash-assign-key-value-pair-into-each-variables/86583 "2017-05-23T07:21:05Z")
Hello All, I'm 3 day new to log stash and during this learning process, I tried to filter the unstructured log which contains key & value pairs and want to assign each values to variables. Unstructured log: 017-04-… --- ## [Logstash Ruby Parse CSV and Validate Its Fields](https://discuss.elastic.co/t/logstash-ruby-parse-csv-and-validate-its-fields/99643)
**Author:** [@Robert.S](https://discuss.elastic.co/u/Robert.S)\ **Replies:** 6\ **Last updated:** [September 12, 2017, 6:46pm UTC](https://discuss.elastic.co/t/logstash-ruby-parse-csv-and-validate-its-fields/99643 "2017-09-12T18:46:31Z")
Hello, I am trying to monitor a directory, parse csv files, and validate some of the fields’ values. I thought I could do the following but failed. Any suggestion? I am open for alternatives… input { file { path =\> … --- ## [Enriching logs with data from Elasticsearch (logstash-filter-elasticsearch)](https://discuss.elastic.co/t/enriching-logs-with-data-from-elasticsearch-logstash-filter-elasticsearch/81325)
**Author:** [@matejzero](https://discuss.elastic.co/u/matejzero)\ **Replies:** 3\ **Last updated:** [April 5, 2017, 8:07pm UTC](https://discuss.elastic.co/t/enriching-logs-with-data-from-elasticsearch-logstash-filter-elasticsearch/81325 "2017-04-05T20:07:49Z")
Hello, we are trying to enrich out firewall/router logs with custom geoip data (such as coordinates, client info, internal client ID,...), which we have saved in a dedicated index on our ES cluster. I'm currently tr… --- ## [Where to change location of the logstash log file](https://discuss.elastic.co/t/where-to-change-location-of-the-logstash-log-file/56190)
**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\ **Replies:** 4\ **Last updated:** [July 22, 2016, 5:41pm UTC](https://discuss.elastic.co/t/where-to-change-location-of-the-logstash-log-file/56190 "2016-07-22T17:41:18Z")
can't find the way to change default location for logstash log file. Thanks. --- ## [Increase Size Limit of logs](https://discuss.elastic.co/t/increase-size-limit-of-logs/80496)
**Author:** [@AlecBruns](https://discuss.elastic.co/u/AlecBruns)\ **Replies:** 5\ **Last updated:** [April 11, 2017, 7:17pm UTC](https://discuss.elastic.co/t/increase-size-limit-of-logs/80496 "2017-04-11T19:17:08Z")
Hey there, Is it possible to increase the size limit of incoming logs to logstash? I am using filebeat but logstash will break up large logs which then makes the grok filter unable to parse it. I am trying to log some … --- ## [Redis-logstash-elasticsearch](https://discuss.elastic.co/t/redis-logstash-elasticsearch/28307)
**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\ **Replies:** 2\ **Last updated:** [August 30, 2015, 8:40pm UTC](https://discuss.elastic.co/t/redis-logstash-elasticsearch/28307 "2015-08-30T20:40:25Z")
hi everybody, since i'm new to elasticsearch and logstash i wanted to ask what some of you would consider as best practice to get data via logstash from redis to elasticsearch. we have a sorted timeset in redis with… --- ## [Async replication deprecated](https://discuss.elastic.co/t/async-replication-deprecated/25355)
**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\ **Replies:** 6\ **Last updated:** [July 12, 2015, 4:03am UTC](https://discuss.elastic.co/t/async-replication-deprecated/25355 "2015-07-12T04:03:02Z")
Hello Elastic Search experts, If anyone could help to confirm, it will be great, https://github.com/elastic/elasticsearch/issues/10114? thanks in advance, Lin --- ## [Filebeat is not sending logs to logstash](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-logstash/255855)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 12:48pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-logstash/255855 "2020-11-19T12:48:58Z")
I'm trying to read Tomcat logfiles with filebeat, send them to logstash, format them and forward them to elasticsearch. Problem: I'm pretty sure the logs never reach logstash, because they don't apper at stdout version… --- ## [Packetbeats all wifi Traffic Analysis](https://discuss.elastic.co/t/packetbeats-all-wifi-traffic-analysis/42884)
**Author:** [@tyler\_burge](https://discuss.elastic.co/u/tyler_burge)\ **Replies:** 7\ **Last updated:** [September 18, 2016, 9:42pm UTC](https://discuss.elastic.co/t/packetbeats-all-wifi-traffic-analysis/42884 "2016-09-18T21:42:04Z")
I am trying to get Packetbeats to log all wifi traffic. I see traffic that is broadcast but not traffic from other hosts like my cellphone trying to access an http page. How can I enable packetbeats in promiscious mode… --- ## [Elastic sizing](https://discuss.elastic.co/t/elastic-sizing/107339)
**Author:** [@sesaravanan](https://discuss.elastic.co/u/sesaravanan)\ **Replies:** 7\ **Last updated:** [November 16, 2017, 8:27am UTC](https://discuss.elastic.co/t/elastic-sizing/107339 "2017-11-16T08:27:04Z")
Hi, Architecture 1: I had designed an elastic architecture for 1GB daily incoming data with 365 days retention period. 3 - Master nodes with 8 CPU and 32GB RAM with 50 GB disk space per node. 8 - Data nodes with 8 C… --- ## [Multiple parameter in a query in URI request](https://discuss.elastic.co/t/multiple-parameter-in-a-query-in-uri-request/10411)
**Author:** [@Jimi\_Parekh](https://discuss.elastic.co/u/Jimi_Parekh)\ **Replies:** 3\ **Last updated:** [January 18, 2013, 9:11pm UTC](https://discuss.elastic.co/t/multiple-parameter-in-a-query-in-uri-request/10411 "2013-01-18T21:11:04Z")
Hi, I am searching an already existing index. I am using below curl request which is working fine: curl -XGET 'http://logstash:9200/\_search?q=user:myname' Now I want to add another parameters address:myaddress… --- ## [How to overwrite docs with same id?](https://discuss.elastic.co/t/how-to-overwrite-docs-with-same-id/14384)
**Author:** [@project2501](https://discuss.elastic.co/u/project2501)\ **Replies:** 4\ **Last updated:** [November 13, 2013, 9:40pm UTC](https://discuss.elastic.co/t/how-to-overwrite-docs-with-same-id/14384 "2013-11-13T21:40:51Z")
Hi, I notice I cannot store a document and control the \_id field. It gives an error. I read that I need to 'enable' storing \_id? That is very odd. I want to store a bunch of documents. And then I want to update… --- ## [How to increase max file descriptors in elasticsearch](https://discuss.elastic.co/t/how-to-increase-max-file-descriptors-in-elasticsearch/58520)
**Author:** [@sudarshan](https://discuss.elastic.co/u/sudarshan)\ **Replies:** 2\ **Last updated:** [August 22, 2016, 2:08am UTC](https://discuss.elastic.co/t/how-to-increase-max-file-descriptors-in-elasticsearch/58520 "2016-08-22T02:08:08Z")
max file descriptors \[4096\] for elasticsearch process likely too low, consider increasing to at least \[65536\]---I am getting this warning.. I have added MAX\_OPEN\_FILES=65536 in bin/elasticsearch file...but I am unable… --- ## [Output with index got error](https://discuss.elastic.co/t/output-with-index-got-error/142873)
**Author:** [@cythwell](https://discuss.elastic.co/u/cythwell)\ **Replies:** 8\ **Last updated:** [August 7, 2018, 7:06am UTC](https://discuss.elastic.co/t/output-with-index-got-error/142873 "2018-08-07T07:06:13Z")
I am using filebeat to collect nginx log and sent to ealsticsearch. when config output.elasticsearch.index as : index: "onwards" , everything is fine, and kibana can catch the message. But when I change "onwards"… --- ## [Ingest pipeline errors and "on\_failure"](https://discuss.elastic.co/t/ingest-pipeline-errors-and-on-failure/75315)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 5\ **Last updated:** [February 21, 2017, 12:22pm UTC](https://discuss.elastic.co/t/ingest-pipeline-errors-and-on-failure/75315 "2017-02-21T12:22:58Z")
Hello, I am storing log file where there is an IP field, which can be either ip address or "-". I want to store the value in field of type "ip" and assign "null" value when log line contains "-". My mapping: "ip": { … --- ## [SearchParseException\[Unknown key for a VALUE\_STRING](https://discuss.elastic.co/t/searchparseexception-unknown-key-for-a-value-string/36161)
**Author:** [@moncky](https://discuss.elastic.co/u/moncky)\ **Replies:** 2\ **Last updated:** [December 2, 2015, 1:57pm UTC](https://discuss.elastic.co/t/searchparseexception-unknown-key-for-a-value-string/36161 "2015-12-02T13:57:42Z")
Hi all, I am running Kibana 4.1.3 and ES 2.1.0 and feeding logs into ES with logstash. Everything was working fine till I upgraded yesterday. I removed the .kibana index and when configued the index pattern in the … --- ## [Failed to obtain in-memory shard lock](https://discuss.elastic.co/t/failed-to-obtain-in-memory-shard-lock/267477)
**Author:** [@nishant\_jain](https://discuss.elastic.co/u/nishant_jain)\ **Replies:** 4\ **Last updated:** [March 17, 2021, 12:36pm UTC](https://discuss.elastic.co/t/failed-to-obtain-in-memory-shard-lock/267477 "2021-03-17T12:36:48Z")
I am using elastic search 7.10.2 in kubernetes but I get ShardLockObtainFailedException at random moments but mostly when there are some search or index operation is going on. the log is following: Data node {"type":… --- ## [Elasticsearch Resource requirements](https://discuss.elastic.co/t/elasticsearch-resource-requirements/163215)
**Author:** [@Ali\_Reza\_Akbarian](https://discuss.elastic.co/u/Ali_Reza_Akbarian)\ **Replies:** 3\ **Last updated:** [January 9, 2019, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-resource-requirements/163215 "2019-01-09T09:41:18Z")
Hi , We are a small business and we currently provide payment services to 60,000 users. We use Elasticsearch to search our logs. Our current resources for using elasticsearch are as follows : 3 elasticsearch master no… --- ## [Comparison of int/long and float/double types](https://discuss.elastic.co/t/comparison-of-int-long-and-float-double-types/20420)
**Author:** [@Tim\_S](https://discuss.elastic.co/u/Tim_S)\ **Replies:** 3\ **Last updated:** [October 24, 2014, 3:04pm UTC](https://discuss.elastic.co/t/comparison-of-int-long-and-float-double-types/20420 "2014-10-24T15:04:10Z")
I get the impression that using the 'long' type instead of 'integer' would use more disk space and degrade search performance (similary for double instead of float), but there's nothing in the documentation to back t… --- ## [Composite aggregation buckets total count](https://discuss.elastic.co/t/composite-aggregation-buckets-total-count/137156)
**Author:** [@gogua](https://discuss.elastic.co/u/gogua)\ **Replies:** 1\ **Last updated:** [June 26, 2018, 6:57pm UTC](https://discuss.elastic.co/t/composite-aggregation-buckets-total-count/137156 "2018-06-26T18:57:16Z")
hi, how to count buckets total, when i have the following ES query "size": 0, "aggs": { "buckets": { "composite": { "size": 20, "sources": \[ {"age": {"terms": {"fiel… --- ## [Java Logs patterns](https://discuss.elastic.co/t/java-logs-patterns/102996)
**Author:** [@mbvelo](https://discuss.elastic.co/u/mbvelo)\ **Replies:** 6\ **Last updated:** [October 6, 2017, 1:16pm UTC](https://discuss.elastic.co/t/java-logs-patterns/102996 "2017-10-06T13:16:40Z")
please advice - is this format correct to review structured java log? input { beats { port =\>5044 } } output { elasticsearch { hosts =\> "localhost:9200" manage\_template =\> false index =\> \["NUMBER:thread", "me… --- ## [Add host name field](https://discuss.elastic.co/t/add-host-name-field/234044)
**Author:** [@ahiyaz](https://discuss.elastic.co/u/ahiyaz)\ **Replies:** 4\ **Last updated:** [May 26, 2020, 8:12am UTC](https://discuss.elastic.co/t/add-host-name-field/234044 "2020-05-26T08:12:46Z")
hi im shipping sflow data to Logz.io using logstash. due to multi-sites architecture im trying to add hostname (agent hostname) filed to my data that sent from my logstash but with no success. ive tried to add it to d… --- ## [Watcher Version conflict exception in Elasticsearch](https://discuss.elastic.co/t/watcher-version-conflict-exception-in-elasticsearch/38570)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 7\ **Last updated:** [January 14, 2016, 8:51am UTC](https://discuss.elastic.co/t/watcher-version-conflict-exception-in-elasticsearch/38570 "2016-01-14T08:51:29Z")
Hi All, I am having an ES cluster with 3 master nodes, 3 data nodes & 1 client node with ES version 1.7.3. I configured watcher for alerts mail notifications. I am getting email based on the status of the cluster healt… --- ## [\[Kibana\]: Nested child fields can not be visualized in discovery and be used like a filter aggregation](https://discuss.elastic.co/t/kibana-nested-child-fields-can-not-be-visualized-in-discovery-and-be-used-like-a-filter-aggregation/218739)
**Author:** [@AlekssM](https://discuss.elastic.co/u/AlekssM)\ **Replies:** 6\ **Last updated:** [February 14, 2020, 12:30pm UTC](https://discuss.elastic.co/t/kibana-nested-child-fields-can-not-be-visualized-in-discovery-and-be-used-like-a-filter-aggregation/218739 "2020-02-14T12:30:56Z")
Hello, Could you please give me an advice on how to be able to visualize and count field which is in the child doc and it is type: nested. I have seen several questions since '15 but no workarounds for this specific is… --- ## [Convert unix time to date](https://discuss.elastic.co/t/convert-unix-time-to-date/128638)
**Author:** [@linsie](https://discuss.elastic.co/u/linsie)\ **Replies:** 3\ **Last updated:** [April 19, 2018, 4:05pm UTC](https://discuss.elastic.co/t/convert-unix-time-to-date/128638 "2018-04-19T16:05:59Z")
logstash version : 2.4.1 unix time : 1522092794000 date : 2018-04-10 hello everyone, I want to convert the unix time to date , so how can I do this with date filter ? Thanks so much ! --- ## [Logstash使用fingerprint插件去重复出现问题](https://discuss.elastic.co/t/logstash-fingerprint/42327)
**Author:** [@jiangzhifang](https://discuss.elastic.co/u/jiangzhifang)\ **Replies:** 3\ **Last updated:** [March 27, 2016, 2:17am UTC](https://discuss.elastic.co/t/logstash-fingerprint/42327 "2016-03-27T02:17:06Z")
我是新手，可能有些细节描述不清楚，请大家耐心看完。我的测试环境如下： 1)elasticsearch版本2.2.0，安装目录/opt/elasticsearch 2)logstash版本2.2.2，安装目录/opt/logstash 3)测试文件为/tmp/test\_file，内容只有一行 {"b":{"b1":0.0}} 4)logstash的配置文件内容 input { file { path =\> \["/tmp/t… --- ## [Logstash unrecognized service](https://discuss.elastic.co/t/logstash-unrecognized-service/119839)
**Author:** [@motts](https://discuss.elastic.co/u/motts)\ **Replies:** 4\ **Last updated:** [February 14, 2018, 9:11pm UTC](https://discuss.elastic.co/t/logstash-unrecognized-service/119839 "2018-02-14T21:11:48Z")
Hello there, I am working on upgrading Elastic from 2.4 to 5.6. Elasticsearch and Kibana seem to be fine, but when I installed LogStash, I can no longer seem to start logstash. When I try 'service logstash status' I ge… --- ## [Error indexing using xml plugin](https://discuss.elastic.co/t/error-indexing-using-xml-plugin/223774)
**Author:** [@fionamacd](https://discuss.elastic.co/u/fionamacd)\ **Replies:** 7\ **Last updated:** [March 16, 2020, 7:49pm UTC](https://discuss.elastic.co/t/error-indexing-using-xml-plugin/223774 "2020-03-16T19:49:45Z")
Hi, logstash 6.8.3 ES 6.3 I am getting constant errors in my logstash log about mapping an xml field: Mar 16 13:09:04 ip-10-152-3-140 logstash\[16367\]: \[2020-03-16T13:09:04,614\]\[WARN \]\[logstash.outputs.elasticsearch\] … --- ## [Disk space per node in for ES cluster is not balanced across the nodes](https://discuss.elastic.co/t/disk-space-per-node-in-for-es-cluster-is-not-balanced-across-the-nodes/155459)
**Author:** [@Akshay\_Deshpande](https://discuss.elastic.co/u/Akshay_Deshpande)\ **Replies:** 3\ **Last updated:** [November 5, 2018, 10:35pm UTC](https://discuss.elastic.co/t/disk-space-per-node-in-for-es-cluster-is-not-balanced-across-the-nodes/155459 "2018-11-05T22:35:26Z")
I have a ES cluster with a large amount of nodes. There are thousands of shards. The indices are time based. The data is ingested during work-week, almost 24x7. The problem I am facing is some of the nodes in cluster… --- ## [Why is Kibana unable to aggregate non-indexed fields that have doc\_values=True?](https://discuss.elastic.co/t/why-is-kibana-unable-to-aggregate-non-indexed-fields-that-have-doc-values-true/67879)
**Author:** [@leom](https://discuss.elastic.co/u/leom)\ **Replies:** 4\ **Last updated:** [December 13, 2016, 5:02pm UTC](https://discuss.elastic.co/t/why-is-kibana-unable-to-aggregate-non-indexed-fields-that-have-doc-values-true/67879 "2016-12-13T17:02:02Z")
I have an index with a field, F, that has the following mapping: "mapping": { "type": "double", "doc\_values": True, "index": False … --- ## [Logstash Error 403](https://discuss.elastic.co/t/logstash-error-403/167917)
**Author:** [@danivanrock](https://discuss.elastic.co/u/danivanrock)\ **Replies:** 8\ **Last updated:** [February 12, 2019, 6:19pm UTC](https://discuss.elastic.co/t/logstash-error-403/167917 "2019-02-12T18:19:33Z")
Hi everyone Logstash keeps crashing with 403 error, I know this error its caused by no available space on disk, on that moment I had 30 Gb, now I attached 100 Gb on disk and keeps crashing I tried removing Logstash, in… --- ## [Elasticsearch 6.2.4: how to get distinct values from multiple fields from ordered documents?](https://discuss.elastic.co/t/elasticsearch-6-2-4-how-to-get-distinct-values-from-multiple-fields-from-ordered-documents/155358)
**Author:** [@betty](https://discuss.elastic.co/u/betty)\ **Replies:** 8\ **Last updated:** [November 7, 2018, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-4-how-to-get-distinct-values-from-multiple-fields-from-ordered-documents/155358 "2018-11-07T09:23:29Z")
Below are the documents like: { "name": "Micheal", "title": "appliaction engeneer", "age": 30, "interest": "java", "manager": "Amily" }, { "name": "Georgiana", "title": "appliaction engeneer"… --- ## [Reindex to change the name of multiple fields](https://discuss.elastic.co/t/reindex-to-change-the-name-of-multiple-fields/89131)
**Author:** [@enod](https://discuss.elastic.co/u/enod)\ **Replies:** 3\ **Last updated:** [June 13, 2017, 3:15am UTC](https://discuss.elastic.co/t/reindex-to-change-the-name-of-multiple-fields/89131 "2017-06-13T03:15:01Z")
Hi, As title says, is it possible to Reindex to change the name of multiple fields? Instruction shown here is only for single field. Thanks! --- ## [Renew auto generated http certificates](https://discuss.elastic.co/t/renew-auto-generated-http-certificates/362929)
**Author:** [@Shaoranlaos](https://discuss.elastic.co/u/Shaoranlaos)\ **Replies:** 6\ **Last updated:** [June 5, 2025, 4:23am UTC](https://discuss.elastic.co/t/renew-auto-generated-http-certificates/362929 "2025-06-05T04:23:18Z")
Hello, can anyone help me how to renew the http certificates of the elasticsearch nodes in a autoconfigured on-prem cluster? The current ones were generated automatically from the enrollment process / at startup of the… --- ## [Creating template : Validation Failed: 1: template is missing;](https://discuss.elastic.co/t/creating-template-validation-failed-1-template-is-missing/119663)
**Author:** [@yoavsradware](https://discuss.elastic.co/u/yoavsradware)\ **Replies:** 2\ **Last updated:** [February 13, 2018, 3:43pm UTC](https://discuss.elastic.co/t/creating-template-validation-failed-1-template-is-missing/119663 "2018-02-13T15:43:00Z")
Hi all I am new to ES , I am trying to create a basic template so when I am creating and indx start with the prefix ff\* it will have my mapping for example ff-first-index ff1-second-index will have the same index I d… [Previous page](https://discuss.elastic.co/top.md?page=422&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=424&per_page=50&period=all)