# Top **URL:** https://discuss.elastic.co/top.md?page=440&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 441 --- ## [\[WARN \]\[logstash.outputs.elasticsearch\] Failed action. {:status=\>400, :action=\>\["index",](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-failed-action-status-400-action-index/85175)
**Author:** [@shaonbean](https://discuss.elastic.co/u/shaonbean)\ **Replies:** 3\ **Last updated:** [May 26, 2017, 7:31am UTC](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-failed-action-status-400-action-index/85175 "2017-05-26T07:31:43Z")
logstash error \[2017-05-10T08:50:56,328\]\[WARN \]\[logstash.outputs.elasticsearch\] Failed action. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"filebeat-aniutv-access-2017.05.10", :\_type=\>"aniutv-access", :\_routin… --- ## [Filebeat not publishing to logstash](https://discuss.elastic.co/t/filebeat-not-publishing-to-logstash/60468)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 5\ **Last updated:** [October 3, 2016, 7:33am UTC](https://discuss.elastic.co/t/filebeat-not-publishing-to-logstash/60468 "2016-10-03T07:33:31Z")
hi there i have filebeat alpha 5.0 when i try to publish it directly to elasticsearch everythin works fine but when i change the output to logstash no data is comming through and i get the following errors 2016-09-14T… --- ## [How to get latest entry for all users](https://discuss.elastic.co/t/how-to-get-latest-entry-for-all-users/29222)
**Author:** [@ankmathur14](https://discuss.elastic.co/u/ankmathur14)\ **Replies:** 3\ **Last updated:** [September 15, 2015, 3:57pm UTC](https://discuss.elastic.co/t/how-to-get-latest-entry-for-all-users/29222 "2015-09-15T15:57:59Z")
I am using elasticsearch as database and kibana 4.0 for view analytics. What query to use to search for latest client status in kibana 4 discover page. Below is my input data Documents in kibana: {ClientIP:10.10.10.1… --- ## [Kibana set up windows service (6.2.1)](https://discuss.elastic.co/t/kibana-set-up-windows-service-6-2-1/120183)
**Author:** [@ezmani](https://discuss.elastic.co/u/ezmani)\ **Replies:** 1\ **Last updated:** [February 16, 2018, 6:09pm UTC](https://discuss.elastic.co/t/kibana-set-up-windows-service-6-2-1/120183 "2018-02-16T18:09:20Z")
Hello there, We are using version Elastic/Kibana version 6.2.1. Elastic service has a nice service installer to create the service. Kibana currently doesn't have one. However we were able to create a service using the N… --- ## [Filebeat: send fail; Error publishing events (retrying): read tcp 10.13.37.73:49990-\>10.13.37.99:5044: i/o timeout](https://discuss.elastic.co/t/filebeat-send-fail-error-publishing-events-retrying-read-tcp-10-13-37-73-49990-10-13-37-99-5044-i-o-timeout/55769)
**Author:** [@Ruoyu\_Chen](https://discuss.elastic.co/u/Ruoyu_Chen)\ **Replies:** 5\ **Last updated:** [July 25, 2016, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-send-fail-error-publishing-events-retrying-read-tcp-10-13-37-73-49990-10-13-37-99-5044-i-o-timeout/55769 "2016-07-25T13:14:12Z")
Hello! I am new to ELKStack. Somebody else have installed Logstash, Elasticsearch on the logstash server and filebeat on another server. But there is a problem remain and I responsible of solving it. The problem seems … --- ## [Objects in arrays are not well supported](https://discuss.elastic.co/t/objects-in-arrays-are-not-well-supported/122470)
**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\ **Replies:** 2\ **Last updated:** [March 9, 2018, 8:43am UTC](https://discuss.elastic.co/t/objects-in-arrays-are-not-well-supported/122470 "2018-03-09T08:43:56Z")
The document structure is something as below, then I saw a warning message on kibana UI: "Objects in arrays are not well supported". I wonder what's the impacts? Thanks! { "field1": "value1", "field2": "value2", "… --- ## [Data型データに対して、特定時間帯を検索する方法について](https://discuss.elastic.co/t/data/81792)
**Author:** [@analogm](https://discuss.elastic.co/u/analogm)\ **Replies:** 2\ **Last updated:** [April 11, 2017, 7:32am UTC](https://discuss.elastic.co/t/data/81792 "2017-04-11T07:32:29Z")
夜間（22:00-06:00）や昼間（08:00-17:00）などのように、時間帯を絞った毎日の検索をしたうえで各種グラフを作成を考えております。 毎日の全時間帯を集約したグラフはよく話題に上がりますが、毎日の特定時間帯だけをグラフにしたいです。 Cut&Try繰り返しても、うまくいかず。 皆様のお知恵を貸してください。 登録するIndexは一種類。logstash-yyyy-MM-dd などのように、時間ごとのindex作成は… --- ## [Search with colon or Dash](https://discuss.elastic.co/t/search-with-colon-or-dash/90713)
**Author:** [@byjg](https://discuss.elastic.co/u/byjg)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 8:25pm UTC](https://discuss.elastic.co/t/search-with-colon-or-dash/90713 "2017-06-26T20:25:10Z")
Hi, I am using Kibana for store my logs but I when search fields with colon ( : ) or dash ( - ) I have unexpected results. Follow some examples: Search for the full text WORKS: objectId: "this.is.full.text:cate… --- ## [Filebeat cannot find /etc/filebeat/filebeat.yml on Windows server](https://discuss.elastic.co/t/filebeat-cannot-find-etc-filebeat-filebeat-yml-on-windows-server/34439)
**Author:** [@TheWinterWizard](https://discuss.elastic.co/u/TheWinterWizard)\ **Replies:** 7\ **Last updated:** [December 2, 2015, 4:10pm UTC](https://discuss.elastic.co/t/filebeat-cannot-find-etc-filebeat-filebeat-yml-on-windows-server/34439 "2015-12-02T16:10:28Z")
I've been banging my head against this for a while now, and no matter what I do (installing from .zip, running from .exe release, or running from what go get brings me), I'm unable to even execute filebeat.exe because it… --- ## [Exclude file from being processed](https://discuss.elastic.co/t/exclude-file-from-being-processed/150778)
**Author:** [@bdobsonca](https://discuss.elastic.co/u/bdobsonca)\ **Replies:** 5\ **Last updated:** [October 4, 2018, 9:23am UTC](https://discuss.elastic.co/t/exclude-file-from-being-processed/150778 "2018-10-04T09:23:05Z")
Hello, I have /var/log/elasticsearch/gc.log.0.current currently flooding my logs. I would like to know the best way to exclude this? I am running Filebeats 6.4.2. I have tried: exclude\_files with the following: \['\\.cur… --- ## [Master Node gradually moves to Out Of Memory Exception](https://discuss.elastic.co/t/master-node-gradually-moves-to-out-of-memory-exception/102344)
**Author:** [@corona](https://discuss.elastic.co/u/corona)\ **Replies:** 5\ **Last updated:** [October 3, 2017, 5:26am UTC](https://discuss.elastic.co/t/master-node-gradually-moves-to-out-of-memory-exception/102344 "2017-10-03T05:26:23Z")
Hello, We are currently running version 2.4.0, with 20 nodes in the cluster containing ~49,000 shards with ~17TB of data. I'm consistently seeing an issue where it seems like the master node gradually runs out of heap … --- ## [Map Visualization in Tutorial Does not work](https://discuss.elastic.co/t/map-visualization-in-tutorial-does-not-work/25755)
**Author:** [@ScottLawrenceLawson](https://discuss.elastic.co/u/ScottLawrenceLawson)\ **Replies:** 5\ **Last updated:** [July 28, 2015, 6:08pm UTC](https://discuss.elastic.co/t/map-visualization-in-tutorial-does-not-work/25755 "2015-07-28T18:08:05Z")
I have gone through this tutorial using Elasticsearch and kibana 4 on Found in the cloud: https://www.elastic.co/guide/en/kibana/current/tutorial-visualizing.html I have everything working except the map visualization … --- ## [Update to a document with strict dynamic mapping index problem](https://discuss.elastic.co/t/update-to-a-document-with-strict-dynamic-mapping-index-problem/44712)
**Author:** [@MarkOStewart](https://discuss.elastic.co/u/MarkOStewart)\ **Replies:** 2\ **Last updated:** [March 17, 2016, 7:07pm UTC](https://discuss.elastic.co/t/update-to-a-document-with-strict-dynamic-mapping-index-problem/44712 "2016-03-17T19:07:46Z")
I am trying to update a record as a username was misspelled. I need to do something similar to change Steward to Stewart on a lastname field. I have dynamic = strict and i cannot figure out how to update this lastname r… --- ## [Custom WMS map server](https://discuss.elastic.co/t/custom-wms-map-server/36795)
**Author:** [@Sherlock](https://discuss.elastic.co/u/Sherlock)\ **Replies:** 0\ **Last updated:** [December 9, 2015, 8:30pm UTC](https://discuss.elastic.co/t/custom-wms-map-server/36795 "2015-12-09T20:30:07Z")
I'm looking to buildout an ELK stack that does not require internet access. I'd like to display maps for visualizations but it appears that while the latest Kibana support custom WMS servers there hasn't been any docume… --- ## [Elasticsearch MultiNode Cluster Configuration](https://discuss.elastic.co/t/elasticsearch-multinode-cluster-configuration/120883)
**Author:** [@Hassan\_Shaitou](https://discuss.elastic.co/u/Hassan_Shaitou)\ **Replies:** 6\ **Last updated:** [February 22, 2018, 8:13am UTC](https://discuss.elastic.co/t/elasticsearch-multinode-cluster-configuration/120883 "2018-02-22T08:13:02Z")
I have two nodes I want one to act as a master(master node) the second to act as a slave(data node): master node configuration: cluster.name: twist node.master: true node.data: false node.name: 192.168.237.131 discover… --- ## [Filebeat and Metricbeat get Error 401 Unauthorized](https://discuss.elastic.co/t/filebeat-and-metricbeat-get-error-401-unauthorized/328200)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 7\ **Last updated:** [March 24, 2023, 1:10pm UTC](https://discuss.elastic.co/t/filebeat-and-metricbeat-get-error-401-unauthorized/328200 "2023-03-24T13:10:20Z")
I recently upgraded from ELK Stack 7.9.3 to 7.17.9. Everything is working great except that Filebeat and Metricbeat will not connect to Elasticsearch anymore unless they are installed on the same server. I get errors lik… --- ## [Kibana gets wrong timezone from my browser](https://discuss.elastic.co/t/kibana-gets-wrong-timezone-from-my-browser/220207)
**Author:** [@juanarmentia](https://discuss.elastic.co/u/juanarmentia)\ **Replies:** 5\ **Last updated:** [February 21, 2020, 8:24am UTC](https://discuss.elastic.co/t/kibana-gets-wrong-timezone-from-my-browser/220207 "2020-02-21T08:24:50Z")
Hi, I have a deployment in Elastic Cloud (7.6) and Kibana doesn't get the correct timezone from by browser. I have to configure it to "Europe/Madrid" instead of "Browser", because if not, the dates I see are 1 hour out … --- ## [Reindexing production environment handling live updates?](https://discuss.elastic.co/t/reindexing-production-environment-handling-live-updates/59210)
**Author:** [@Prannoy\_Mittal](https://discuss.elastic.co/u/Prannoy_Mittal)\ **Replies:** 3\ **Last updated:** [September 1, 2016, 9:22am UTC](https://discuss.elastic.co/t/reindexing-production-environment-handling-live-updates/59210 "2016-09-01T09:22:24Z")
Hi , I have gone through link for reindexing with zero downtime. There is no information for handling live updates going on into old index. Solution thought were: Queue updated and deletes and update new index … --- ## [Java REST client, GZIP compressed request](https://discuss.elastic.co/t/java-rest-client-gzip-compressed-request/98350)
**Author:** [@mbedna](https://discuss.elastic.co/u/mbedna)\ **Replies:** 0\ **Last updated:** [August 25, 2017, 8:40am UTC](https://discuss.elastic.co/t/java-rest-client-gzip-compressed-request/98350 "2017-08-25T08:40:50Z")
Is sending GZIP compressed request supported in Java REST Client? When I set header: HttpHeaders.CONTENT\_ENCODING, “gzip” and compress input json by using GZIPOutputStream I get below message: io.netty.handler.codec.co… --- ## [Force new master?](https://discuss.elastic.co/t/force-new-master/8467)
**Author:** [@Tim\_J](https://discuss.elastic.co/u/Tim_J)\ **Replies:** 1\ **Last updated:** [July 19, 2012, 8:19pm UTC](https://discuss.elastic.co/t/force-new-master/8467 "2012-07-19T20:19:08Z")
Hey folks, Is there any way to force the election of a new master? I've run into a few situations where I need to make changes to all nodes in my cluster, either to update a plugin or to update configuration and … --- ## [How to provide default values in case of grok parse failure?](https://discuss.elastic.co/t/how-to-provide-default-values-in-case-of-grok-parse-failure/117737)
**Author:** [@jainbhavya53](https://discuss.elastic.co/u/jainbhavya53)\ **Replies:** 5\ **Last updated:** [January 31, 2018, 8:18am UTC](https://discuss.elastic.co/t/how-to-provide-default-values-in-case-of-grok-parse-failure/117737 "2018-01-31T08:18:44Z")
I am using grok for parsing logs.My requirement is to set default value for any missing string field as null and for any integer field as 0. Sample logs are as follows:-- Jan 23 12:16:52 \[10.10.10.10\] \<13\> 10.11.12.13 … --- ## [(java) I don’t know why this error occurs \[Validation Failed: 1: no requests added\]](https://discuss.elastic.co/t/java-i-don-t-know-why-this-error-occurs-validation-failed-1-no-requests-added/157952)
**Author:** [@ksb304](https://discuss.elastic.co/u/ksb304)\ **Replies:** 2\ **Last updated:** [December 17, 2018, 2:25pm UTC](https://discuss.elastic.co/t/java-i-don-t-know-why-this-error-occurs-validation-failed-1-no-requests-added/157952 "2018-12-17T14:25:18Z")
simple code (java) public void run(){ int count = 0; BulkRequest buklRequest = new BulkRequest(); while(rs.next()){ IndexRequest indexRequest = new IndexRequest(index, type, id); bukl… --- ## [Kibana not showing updated logs from elasticsearch](https://discuss.elastic.co/t/kibana-not-showing-updated-logs-from-elasticsearch/96521)
**Author:** [@P\_Kumar](https://discuss.elastic.co/u/P_Kumar)\ **Replies:** 4\ **Last updated:** [August 10, 2017, 6:42pm UTC](https://discuss.elastic.co/t/kibana-not-showing-updated-logs-from-elasticsearch/96521 "2017-08-10T18:42:35Z")
Why my kibana not showing updated logs from elastic search . logstash pushing logs to elastic search and index also creating but it is not updating in every dynamically in kibana GUI. --- ## [Three questions about master/data node failover](https://discuss.elastic.co/t/three-questions-about-master-data-node-failover/58941)
**Author:** [@ivten](https://discuss.elastic.co/u/ivten)\ **Replies:** 8\ **Last updated:** [August 27, 2016, 7:02am UTC](https://discuss.elastic.co/t/three-questions-about-master-data-node-failover/58941 "2016-08-27T07:02:24Z")
Hi, can you answer the following three questions about master/data node failover? If the master goes down and one of the master eligible data nodes becomes the new master, then will this new master continue to funct… --- ## [Aggregating on an Array of Objects](https://discuss.elastic.co/t/aggregating-on-an-array-of-objects/53973)
**Author:** [@rolandino](https://discuss.elastic.co/u/rolandino)\ **Replies:** 2\ **Last updated:** [June 29, 2016, 7:46am UTC](https://discuss.elastic.co/t/aggregating-on-an-array-of-objects/53973 "2016-06-29T07:46:28Z")
Wonder if anyone can help. I've got the following mapping: curl -XPOST localhost:9200/test\_index -d '{ "mappings": { "test\_type" : { "dynamic": "strict", "properties": { … --- ## [Navigation from one dashboard to another dashboard](https://discuss.elastic.co/t/navigation-from-one-dashboard-to-another-dashboard/151981)
**Author:** [@gsantoshkumar](https://discuss.elastic.co/u/gsantoshkumar)\ **Replies:** 3\ **Last updated:** [October 11, 2018, 12:38pm UTC](https://discuss.elastic.co/t/navigation-from-one-dashboard-to-another-dashboard/151981 "2018-10-11T12:38:27Z")
Hi, I have the requirement like, Need to display master page when login to kibana. The page has details and if click on filed has to navigate to a particular dashboard. From the dashboard to again click on will navig… --- ## [Indexing date field in elasticsearch](https://discuss.elastic.co/t/indexing-date-field-in-elasticsearch/207383)
**Author:** [@RITZ\_VERMA](https://discuss.elastic.co/u/RITZ_VERMA)\ **Replies:** 5\ **Last updated:** [November 14, 2019, 12:15am UTC](https://discuss.elastic.co/t/indexing-date-field-in-elasticsearch/207383 "2019-11-14T00:15:11Z")
i have applied following mapping in my index PUT prince2/ { "mappings": { "properties": { "account\_id": { "type": "long" }, "created\_at": { "type": "date" }, "email": { "type": "text", "fields": { "keyword"… --- ## [How to read JSON files stored in HDFS via Logstash](https://discuss.elastic.co/t/how-to-read-json-files-stored-in-hdfs-via-logstash/46954)
**Author:** [@gowthamsadasivam](https://discuss.elastic.co/u/gowthamsadasivam)\ **Replies:** 3\ **Last updated:** [February 21, 2017, 5:52pm UTC](https://discuss.elastic.co/t/how-to-read-json-files-stored-in-hdfs-via-logstash/46954 "2017-02-21T17:52:30Z")
I have my data (JSON Files) stored in HDFS and would like to push these data to ElasticSearch. I have seen output plugin for HDFS but not any input plugin. Is there a way to read the HDFS files via Logstash? or any other… --- ## [Can't get rid of warning "this node is locked into cluster UUID but \[cluster.initial\_master\_nodes\] is set to \[Z56EEW81\]; remove this setting to avoid possible data loss caused by subsequent cluster bootstrap attempts"](https://discuss.elastic.co/t/cant-get-rid-of-warning-this-node-is-locked-into-cluster-uuid-but-cluster-initial-master-nodes-is-set-to-z56eew81-remove-this-setting-to-avoid-possible-data-loss-caused-by-subsequent-cluster-bootstrap-attempts/335889)
**Author:** [@CodeTradition](https://discuss.elastic.co/u/CodeTradition)\ **Replies:** 4\ **Last updated:** [June 15, 2023, 1:57pm UTC](https://discuss.elastic.co/t/cant-get-rid-of-warning-this-node-is-locked-into-cluster-uuid-but-cluster-initial-master-nodes-is-set-to-z56eew81-remove-this-setting-to-avoid-possible-data-loss-caused-by-subsequent-cluster-bootstrap-attempts/335889 "2023-06-15T13:57:15Z")
Hello all, I am using Elasticsearch v8.8.0 on a Windows Server 2019. Below is my Elasticsearch configuration file "elasticsearch.yml" : cluster.name: MyCOMPANY-R7 node.name: ${HOSTNAME} node.roles : \[master, data, ing… --- ## [How to combine results from 2 elasticsearch indexes with different layouts](https://discuss.elastic.co/t/how-to-combine-results-from-2-elasticsearch-indexes-with-different-layouts/293659)
**Author:** [@jan499](https://discuss.elastic.co/u/jan499)\ **Replies:** 2\ **Last updated:** [January 7, 2022, 3:22pm UTC](https://discuss.elastic.co/t/how-to-combine-results-from-2-elasticsearch-indexes-with-different-layouts/293659 "2022-01-07T15:22:29Z")
We have an Elasticsearch with 2 different indexes. In one index there is a field called physical\_location which contains a lat en lon subfield. in the other index there is a field called program\_run.geolocation with the … --- ## [Bulk Insertion and Aliasing](https://discuss.elastic.co/t/bulk-insertion-and-aliasing/10624)
**Author:** [@james\_lewis](https://discuss.elastic.co/u/james_lewis)\ **Replies:** 5\ **Last updated:** [February 5, 2013, 2:34pm UTC](https://discuss.elastic.co/t/bulk-insertion-and-aliasing/10624 "2013-02-05T14:34:17Z")
Hi guys, I need to do a bulk insert into a cluster but I want to use aliases. Is there any way? I'll be using aliases to route all users data to the same shared when inserting - I think that's the most important… --- ## [Offcice 365 with beat?](https://discuss.elastic.co/t/offcice-365-with-beat/95267)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 5\ **Last updated:** [August 2, 2017, 3:01am UTC](https://discuss.elastic.co/t/offcice-365-with-beat/95267 "2017-08-02T03:01:13Z")
Can i get audit log form office 365 with awesome beat? Maybeat O365beat :smiley: Or have any solution for this case. Thanks :smiley: --- ## [Failed to parse mapping \[doc\]: Mapping definition for \[error\] has unsupported parameters](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-mapping-definition-for-error-has-unsupported-parameters/109797)
**Author:** [@quanta84](https://discuss.elastic.co/u/quanta84)\ **Replies:** 2\ **Last updated:** [December 5, 2017, 7:32am UTC](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-mapping-definition-for-error-has-unsupported-parameters/109797 "2017-12-05T07:32:52Z")
I have just upgraded filebeat from 5.6.4 to 6.0.0 and logs are being flooded with: 2017/11/30 16:24:23.327596 client.go:465: WARN Can not index event (status=400): {"type":"mapper\_parsing\_exception","reason":"Failed to… --- ## [Rename a field value in Kibana](https://discuss.elastic.co/t/rename-a-field-value-in-kibana/35505)
**Author:** [@mathews.lintu](https://discuss.elastic.co/u/mathews.lintu)\ **Replies:** 4\ **Last updated:** [November 26, 2015, 12:55am UTC](https://discuss.elastic.co/t/rename-a-field-value-in-kibana/35505 "2015-11-26T00:55:42Z")
I have a use case where there are certain values in a field and I want to basically rename them to something that I want. Example Field Name Appliance\_IPAddress=10.100.100.100 , On the dashboard display for a table or … --- ## [Sorting by score range and date](https://discuss.elastic.co/t/sorting-by-score-range-and-date/13838)
**Author:** [@cliveholloway](https://discuss.elastic.co/u/cliveholloway)\ **Replies:** 2\ **Last updated:** [October 4, 2013, 7:00pm UTC](https://discuss.elastic.co/t/sorting-by-score-range-and-date/13838 "2013-10-04T19:00:58Z")
I've been trying to break results up into two groups: - those with a score over 0.5 - those with a score under 0.5 and then sort each of these sections by date, descending. I've tried multiple approaches, but c… --- ## [Fail to join publication failed](https://discuss.elastic.co/t/fail-to-join-publication-failed/183831)
**Author:** [@Yeghia\_Gurunian](https://discuss.elastic.co/u/Yeghia_Gurunian)\ **Replies:** 5\ **Last updated:** [June 3, 2019, 2:56am UTC](https://discuss.elastic.co/t/fail-to-join-publication-failed/183831 "2019-06-03T02:56:34Z")
\[DESKTOP-QCIS6S4\] failed to join {DESKTOP-QCIS6S4}{ixwcp6LQRW6z8BtIKcQdEw}{TBrVz1oESRm8d-2VOm7yvQ}{127.0.0.1}{127.0.0.1:9300}{ml.machine\_memory=68521037824, xpack.installed=true, ml.max\_open\_jobs=20} with JoinRequest{sou… --- ## [LogStash ConfigurationError](https://discuss.elastic.co/t/logstash-configurationerror/156004)
**Author:** [@aruntracer](https://discuss.elastic.co/u/aruntracer)\ **Replies:** 7\ **Last updated:** [November 27, 2018, 10:19am UTC](https://discuss.elastic.co/t/logstash-configurationerror/156004 "2018-11-27T10:19:39Z")
Log.conf 1524206424.034 19395 207.96.0.0 TCP\_MISS/304 15363 GET http://elastic.co/android-chrome-192x192.gif - DIRECT/10.0.5.120 - 1524206424.145 106 207.96.0.0 TCP\_HIT/200 68247 GET http://elastic.co/guide/en/log… --- ## [Priority field in filter](https://discuss.elastic.co/t/priority-field-in-filter/22057)
**Author:** [@tao\_hiko](https://discuss.elastic.co/u/tao_hiko)\ **Replies:** 6\ **Last updated:** [February 10, 2015, 8:47am UTC](https://discuss.elastic.co/t/priority-field-in-filter/22057 "2015-02-10T08:47:46Z")
I'm a newbie of ES but I have a question below is my document {"id" : 1, "title" : "Mr", "firstname" : "Money" , "lastname" : "Gold"} {"id" : 2, "title" : "Mr", "firstname" : "Silver" , "lastname" : "Money} {"id" : 3… --- ## [How to customize format of date histogram in Kibana table visualization](https://discuss.elastic.co/t/how-to-customize-format-of-date-histogram-in-kibana-table-visualization/82817)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [April 20, 2017, 8:07am UTC](https://discuss.elastic.co/t/how-to-customize-format-of-date-histogram-in-kibana-table-visualization/82817 "2017-04-20T08:07:54Z")
Hi, I am using ELK GA 5.0.0. I have made a table visualization and selected Split Rows -\> Aggregation -\> Date Histogram and set Interval -\> Daily. In my table, dates are coming like; April 8th 2017, 00:00:00.000 Apri… --- ## [\[HTTP-Module\] json: cannot unmarshal object into Go value of type \[\]common.MapStr](https://discuss.elastic.co/t/http-module-json-cannot-unmarshal-object-into-go-value-of-type-common-mapstr/179757)
**Author:** [@PeterPain](https://discuss.elastic.co/u/PeterPain)\ **Replies:** 3\ **Last updated:** [May 7, 2019, 8:43am UTC](https://discuss.elastic.co/t/http-module-json-cannot-unmarshal-object-into-go-value-of-type-common-mapstr/179757 "2019-05-07T08:43:07Z")
Hey there. Trying to pull data from a device which supports http protocol and has the option to query for different parameters in JSON-Format. Because the device puts the data in an array i have json.is\_array enabled. … --- ## [Error importing Kibana dashboards: fail to import the dashboards in Kibana:](https://discuss.elastic.co/t/error-importing-kibana-dashboards-fail-to-import-the-dashboards-in-kibana/316015)
**Author:** [@Joao\_Malebo](https://discuss.elastic.co/u/Joao_Malebo)\ **Replies:** 6\ **Last updated:** [February 15, 2023, 4:16am UTC](https://discuss.elastic.co/t/error-importing-kibana-dashboards-fail-to-import-the-dashboards-in-kibana/316015 "2023-02-15T04:16:07Z")
I'm having errors when running the command to check the version information. To load dashboards when Logstash is enabled, you need to disable Logstash output and enable Elasticsearch output: Follow the command and error… --- ## [Query with special characters](https://discuss.elastic.co/t/query-with-special-characters/16818)
**Author:** [@Josep\_Floriach\_Vento](https://discuss.elastic.co/u/Josep_Floriach_Vento)\ **Replies:** 4\ **Last updated:** [April 8, 2014, 7:30am UTC](https://discuss.elastic.co/t/query-with-special-characters/16818 "2014-04-08T07:30:38Z")
Hi guys, First of all, sorry for possible mistakes with my english (it's not my native language) I'm trying to do a query in a existent index. The field I want to filter is Id\_Peticion, which has values like "… --- ## [Using Java High Level Rest client does not auto-retry Bulk requests](https://discuss.elastic.co/t/using-java-high-level-rest-client-does-not-auto-retry-bulk-requests/121724)
**Author:** [@jdewald](https://discuss.elastic.co/u/jdewald)\ **Replies:** 2\ **Last updated:** [March 2, 2018, 5:03pm UTC](https://discuss.elastic.co/t/using-java-high-level-rest-client-does-not-auto-retry-bulk-requests/121724 "2018-03-02T17:03:56Z")
This is possibly an intentional change, but there is an inconsistency in behavior when switching to using the Java High Level Rest client from the TransportClient in the case of handling of Bulk requests. Description of… --- ## [Bulk insert with Spark causes org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes failed](https://discuss.elastic.co/t/bulk-insert-with-spark-causes-org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes-failed/337631)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 6\ **Last updated:** [July 6, 2023, 3:17pm UTC](https://discuss.elastic.co/t/bulk-insert-with-spark-causes-org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes-failed/337631 "2023-07-06T15:17:06Z")
Hi all, I am having trouble with writing to a 5-node Elasticsearch cluster with Spark. Some basic details about the cluster: 5 nodes 6TB of disk 5x28 GB of RAM (half is Heap) 5x6 CPU Allocated 140 shards for the relev… --- ## [Is ElasticSearch meant for long term storage of large datasets?](https://discuss.elastic.co/t/is-elasticsearch-meant-for-long-term-storage-of-large-datasets/220477)
**Author:** [@Basman](https://discuss.elastic.co/u/Basman)\ **Replies:** 2\ **Last updated:** [February 22, 2020, 1:34pm UTC](https://discuss.elastic.co/t/is-elasticsearch-meant-for-long-term-storage-of-large-datasets/220477 "2020-02-22T13:34:16Z")
I have users that all have hundreds of GB’s of documents (pdf, word, etc). I want to use Elastic with the ingest-attachment plugin to make the plaintext contents of these documents searchable. It’s unlikely these documen… --- ## [Search performance - Scaling options Horizontally vs Vertically](https://discuss.elastic.co/t/search-performance-scaling-options-horizontally-vs-vertically/19828)
**Author:** [@pavan\_bkv](https://discuss.elastic.co/u/pavan_bkv)\ **Replies:** 5\ **Last updated:** [September 25, 2014, 10:08pm UTC](https://discuss.elastic.co/t/search-performance-scaling-options-horizontally-vs-vertically/19828 "2014-09-25T22:08:42Z")
I have observed that elastic search defaults the search thread pool to 3 X #of CPUs and even if you increase this to a fix # it does not really help as the threads start sharing the CPU cycles. Does this mean tha… --- ## [Hardware requirement for logstash](https://discuss.elastic.co/t/hardware-requirement-for-logstash/213831)
**Author:** [@Jayanth\_S\_N](https://discuss.elastic.co/u/Jayanth_S_N)\ **Replies:** 2\ **Last updated:** [January 6, 2020, 11:22pm UTC](https://discuss.elastic.co/t/hardware-requirement-for-logstash/213831 "2020-01-06T23:22:39Z")
What will be the best suitable hardware configuration for logstash, we are reading the data from Apache Kafka and adding a few filters in logstash config file on the different sources of data and then data will be sent t… --- ## [How to loop through nested field in painless script](https://discuss.elastic.co/t/how-to-loop-through-nested-field-in-painless-script/288695)
**Author:** [@Agnivesh\_Sharma](https://discuss.elastic.co/u/Agnivesh_Sharma)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 8:44pm UTC](https://discuss.elastic.co/t/how-to-loop-through-nested-field-in-painless-script/288695 "2021-11-09T20:44:01Z")
I have following nested type mapping: "visitor\_data": { "type": "nested", "dynamic": "false", "properties": { "checkin\_time": { "type": "date", … --- ## [Logstash 6.6.0 is sending Error: No such file or directory - C:/dev/null Exception: Errno::ENOENT](https://discuss.elastic.co/t/logstash-6-6-0-is-sending-error-no-such-file-or-directory-c-dev-null-exception-errno-enoent/166405)
**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\ **Replies:** 5\ **Last updated:** [January 31, 2019, 2:20pm UTC](https://discuss.elastic.co/t/logstash-6-6-0-is-sending-error-no-such-file-or-directory-c-dev-null-exception-errno-enoent/166405 "2019-01-31T14:20:24Z")
Hi! I was trying to upgrade Logstash from version 6.2.4 to 6.6.0. I'm using windows 10 Logstash Version 6.2.4 runs fine and send my data to elasticsearch, but trying to do the same thing with version 6.6.0, using the … --- ## [Improve logstash starting time?](https://discuss.elastic.co/t/improve-logstash-starting-time/103016)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [October 6, 2017, 4:21pm UTC](https://discuss.elastic.co/t/improve-logstash-starting-time/103016 "2017-10-06T16:21:45Z")
Hi, I know, it is not the hardware logstash is designed for, but hopefully you have some idea which might help me. I am running a nextcloud instance an would like to visualize server's logs (nextcloud, apache, metrics)… [Previous page](https://discuss.elastic.co/top.md?page=439&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=441&per_page=50&period=all)