# Top **URL:** https://discuss.elastic.co/top.md?page=444&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 445 --- ## [Logstash pipeline continue on error?](https://discuss.elastic.co/t/logstash-pipeline-continue-on-error/108787)
**Author:** [@troy](https://discuss.elastic.co/u/troy)\ **Replies:** 3\ **Last updated:** [November 28, 2017, 7:43am UTC](https://discuss.elastic.co/t/logstash-pipeline-continue-on-error/108787 "2017-11-28T07:43:52Z")
We're running a logstash 6.0.0 instance w/ an http\_input plugin. The plugin expects to receive an array of objects. Some bad data made it to the instance last night that was an array w/ an integer in it instead of an obj… --- ## [Troubleshooting high load avg, low cpu, low I/O on a sizeable production cluster](https://discuss.elastic.co/t/troubleshooting-high-load-avg-low-cpu-low-i-o-on-a-sizeable-production-cluster/40287)
**Author:** [@elementalvoid](https://discuss.elastic.co/u/elementalvoid)\ **Replies:** 3\ **Last updated:** [February 16, 2016, 5:52pm UTC](https://discuss.elastic.co/t/troubleshooting-high-load-avg-low-cpu-low-i-o-on-a-sizeable-production-cluster/40287 "2016-02-16T17:52:20Z")
Hello all. I'm hoping someone is able to offer some help figuring out what's happening on my cluster. I'm seeing very high load average but relatively little CPU and I/O usage. We’re in the process of getting Marvel inst… --- ## [Uncaught IndexSizeError: Failed to execute 'getImageData' on 'CanvasRenderingContext2D': The source width is 0](https://discuss.elastic.co/t/uncaught-indexsizeerror-failed-to-execute-getimagedata-on-canvasrenderingcontext2d-the-source-width-is-0/174697)
**Author:** [@avocado](https://discuss.elastic.co/u/avocado)\ **Replies:** 2\ **Last updated:** [April 3, 2019, 1:33am UTC](https://discuss.elastic.co/t/uncaught-indexsizeerror-failed-to-execute-getimagedata-on-canvasrenderingcontext2d-the-source-width-is-0/174697 "2019-04-03T01:33:31Z")
I am getting an error when attempting to "Full Screen" individual Visualizations on my dashboards in Version 6.6. I've found several posts on this going back to 2018, any progress on a resolution would be most appreciate… --- ## [ELK + SonarQube](https://discuss.elastic.co/t/elk-sonarqube/127732)
**Author:** [@Anthony\_Fernando](https://discuss.elastic.co/u/Anthony_Fernando)\ **Replies:** 4\ **Last updated:** [May 1, 2018, 7:11am UTC](https://discuss.elastic.co/t/elk-sonarqube/127732 "2018-05-01T07:11:42Z")
Hi, I need help in creating an elasticsearch index using the data collected by Sonarqube. Need a bit of walk through for this. Is there a tool for collecting data and creating elasticsearch indexes by interacting with So… --- ## [Indexing custom fields from grok filter](https://discuss.elastic.co/t/indexing-custom-fields-from-grok-filter/59595)
**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\ **Replies:** 5\ **Last updated:** [September 2, 2016, 2:42pm UTC](https://discuss.elastic.co/t/indexing-custom-fields-from-grok-filter/59595 "2016-09-02T14:42:14Z")
Good morning / afternoon / evening, I've created a custom grok pattern and ran through the pattern debugging for the message to make sure the named captures are pulling correctly. I'm currently defining the following: … --- ## [Elastic search - group by query on array](https://discuss.elastic.co/t/elastic-search-group-by-query-on-array/18525)
**Author:** [@K\_Samanth\_Kumar\_Redd](https://discuss.elastic.co/u/K_Samanth_Kumar_Redd)\ **Replies:** 4\ **Last updated:** [October 30, 2014, 10:37am UTC](https://discuss.elastic.co/t/elastic-search-group-by-query-on-array/18525 "2014-10-30T10:37:00Z")
Hi, I am working on elasticsearch for last 2 months. It is really providing awesome searching capabilities, good json structure documents etc... Currently I am stuck up with the problem on How to write group by que… --- ## [Recovering from missing state .si file](https://discuss.elastic.co/t/recovering-from-missing-state-si-file/229744)
**Author:** [@samuel](https://discuss.elastic.co/u/samuel)\ **Replies:** 7\ **Last updated:** [May 1, 2020, 8:53am UTC](https://discuss.elastic.co/t/recovering-from-missing-state-si-file/229744 "2020-05-01T08:53:12Z")
Elasticsearch service has been terminated and fails to restart. The error returned is Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service"… --- ## [Multiple Pipelines using docker instance of logstash 6.2.4](https://discuss.elastic.co/t/multiple-pipelines-using-docker-instance-of-logstash-6-2-4/131546)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 3\ **Last updated:** [May 17, 2018, 12:07am UTC](https://discuss.elastic.co/t/multiple-pipelines-using-docker-instance-of-logstash-6-2-4/131546 "2018-05-17T00:07:26Z")
Using logstash docker image for 6.2.4, we are trying to run multiple pipelines. But it is not working. We always see "main" pipeline getting started. With exact same logstash.yml and pipeline.yml settings, the non-dock… --- ## [Filebeat ERR Connecting error publishing events (retrying) read tcp i/o timeout](https://discuss.elastic.co/t/filebeat-err-connecting-error-publishing-events-retrying-read-tcp-i-o-timeout/82368)
**Author:** [@Daniel\_Chen](https://discuss.elastic.co/u/Daniel_Chen)\ **Replies:** 4\ **Last updated:** [April 20, 2017, 9:33am UTC](https://discuss.elastic.co/t/filebeat-err-connecting-error-publishing-events-retrying-read-tcp-i-o-timeout/82368 "2017-04-20T09:33:03Z")
I have Filebeat 5.3.0 installed on one of my server filebeat.yml: filebeat: prospectors: - paths: - /home/jarvis/data/nginx-logs/\*.log input\_type: log document\_type: nginx-access … --- ## [Filebeat not starting as deamonset on Kuberneters](https://discuss.elastic.co/t/filebeat-not-starting-as-deamonset-on-kuberneters/119992)
**Author:** [@irina\_andronachi](https://discuss.elastic.co/u/irina_andronachi)\ **Replies:** 5\ **Last updated:** [February 19, 2018, 3:22pm UTC](https://discuss.elastic.co/t/filebeat-not-starting-as-deamonset-on-kuberneters/119992 "2018-02-19T15:22:29Z")
Hi, I configured a deamonset on a kubernetes cluster apiVersion: v1 items: apiVersion: extensions/v1beta1 kind: DaemonSet metadata: name: tracing-filebeat namespace: "" spec: template: metadata: labels: tra… --- ## [Unable to bulk upload the stats payload to the local cluster Kibana 7.3](https://discuss.elastic.co/t/unable-to-bulk-upload-the-stats-payload-to-the-local-cluster-kibana-7-3/196724)
**Author:** [@Mohamad-Sobhie](https://discuss.elastic.co/u/Mohamad-Sobhie)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 1:54pm UTC](https://discuss.elastic.co/t/unable-to-bulk-upload-the-stats-payload-to-the-local-cluster-kibana-7-3/196724 "2019-08-26T13:54:18Z")
Hey there, Kibana 7.3 I recieve this message when attempting to bulk : "tags":\["warning","monitoring","kibana-monitoring"\],"pid":1,"message":"Unable to bulk upload the stats payload to the local cluster"} Note that I… --- ## [Matching word inside message field](https://discuss.elastic.co/t/matching-word-inside-message-field/36843)
**Author:** [@Bernstein](https://discuss.elastic.co/u/Bernstein)\ **Replies:** 3\ **Last updated:** [December 10, 2015, 12:59pm UTC](https://discuss.elastic.co/t/matching-word-inside-message-field/36843 "2015-12-10T12:59:50Z")
Hi, Guys Just like many others i am quite new to ELK and have a question. My logstash recieves syslogs from pfsense firewall. I crated a grok filter that parses firewall events and extract all needed data from @message,… --- ## [Vega Sankey Blog Post Discussion](https://discuss.elastic.co/t/vega-sankey-blog-post-discussion/126167)
**Author:** [@nyuriks](https://discuss.elastic.co/u/nyuriks)\ **Replies:** 0\ **Last updated:** [March 30, 2018, 12:20am UTC](https://discuss.elastic.co/t/vega-sankey-blog-post-discussion/126167 "2018-03-30T00:20:46Z")
Click "reply" to discuss Vega Sankey blogpost. You can share your feedback, ask post-related questions, or demo your own similar graphs. Thanks! --- ## [Sub Queries In ElasticSearch](https://discuss.elastic.co/t/sub-queries-in-elasticsearch/51628)
**Author:** [@AjmiCh](https://discuss.elastic.co/u/AjmiCh)\ **Replies:** 6\ **Last updated:** [June 2, 2016, 10:30am UTC](https://discuss.elastic.co/t/sub-queries-in-elasticsearch/51628 "2016-06-02T10:30:12Z")
Hi, Is there a way on elasticsearch to do a subquery ? For example select id from index1 where id not in (select id from index2). Could you show me the equivalent query on ES ? Best regaards, --- ## [Logstash ERROR: Unable to retrieve license information from license server {:message=\>"Unrecognized SSL message, plaintext connection?"}](https://discuss.elastic.co/t/logstash-error-unable-to-retrieve-license-information-from-license-server-message-unrecognized-ssl-message-plaintext-connection/195219)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 8:50am UTC](https://discuss.elastic.co/t/logstash-error-unable-to-retrieve-license-information-from-license-server-message-unrecognized-ssl-message-plaintext-connection/195219 "2019-09-05T08:50:22Z")
Hi, I have a cluster consisting of 3 nodes and an installation of kibana and logstash, all to version 6.8.1. I followed the procedure to configure SSL, TLS and HTTPS certificates: The Elasticsearch nodes are workin… --- ## [Copy \`@timestamp\` in Logstash](https://discuss.elastic.co/t/copy-timestamp-in-logstash/139430)
**Author:** [@amomchilov](https://discuss.elastic.co/u/amomchilov)\ **Replies:** 2\ **Last updated:** [July 11, 2018, 6:25am UTC](https://discuss.elastic.co/t/copy-timestamp-in-logstash/139430 "2018-07-11T06:25:20Z")
I would like to preserve the @timestamp field prior to overwriting it from a date filter, so that I can know when a document was processed by logstash. I also tried using the copy filter, but that fails silently. mut… --- ## [Score based on Term Frequency alone](https://discuss.elastic.co/t/score-based-on-term-frequency-alone/83323)
**Author:** [@hey-arnold](https://discuss.elastic.co/u/hey-arnold)\ **Replies:** 1\ **Last updated:** [April 25, 2017, 11:04pm UTC](https://discuss.elastic.co/t/score-based-on-term-frequency-alone/83323 "2017-04-25T23:04:41Z")
i want to disable IDF, and maybe TF so that I just have a score based on how many terms are present from the given query. I've looked into solutions writing custom scripts, and playing around with the query, but these al… --- ## [Adding MS Teams connector to an alert](https://discuss.elastic.co/t/adding-ms-teams-connector-to-an-alert/278462)
**Author:** [@Kohlman](https://discuss.elastic.co/u/Kohlman)\ **Replies:** 4\ **Last updated:** [July 14, 2021, 6:47pm UTC](https://discuss.elastic.co/t/adding-ms-teams-connector-to-an-alert/278462 "2021-07-14T18:47:40Z")
I was able to create a connector of type Microsoft Teams. I expected to find documentation for how to configure a watcher where the action would be "teams" or something. The only thing I have found is for Webhook action W… --- ## [Huge performance degradation during bulk indexing](https://discuss.elastic.co/t/huge-performance-degradation-during-bulk-indexing/175924)
**Author:** [@cfeenstra67](https://discuss.elastic.co/u/cfeenstra67)\ **Replies:** 7\ **Last updated:** [April 18, 2019, 6:32pm UTC](https://discuss.elastic.co/t/huge-performance-degradation-during-bulk-indexing/175924 "2019-04-18T18:32:02Z")
Details about our usage: We use ElasticSearch purely as an aggregation engine. Aggregations are almost always done across a limited time range. We use a single index with about 200 million time-based documents totaling… --- ## [Logstash起動時のエラー](https://discuss.elastic.co/t/logstash/159275)
**Author:** [@tom1989](https://discuss.elastic.co/u/tom1989)\ **Replies:** 5\ **Last updated:** [December 7, 2018, 12:15am UTC](https://discuss.elastic.co/t/logstash/159275 "2018-12-07T00:15:20Z")
linux環境にlogstash,erasticsearch,kibanaの構築をしています。 logstash(tar.gz版)を設定後に起動コマンドを実行したところ下記エラーが出ます。 \[main\]Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error:(GemspecError) There was … --- ## [Endpoint Security 8.4.1 Security Update](https://discuss.elastic.co/t/endpoint-security-8-4-1-security-update/323753)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [January 23, 2023, 5:30pm UTC](https://discuss.elastic.co/t/endpoint-security-8-4-1-security-update/323753 "2023-01-23T17:30:33Z")
Elastic Endpoint Security Local Privilege Escalation issue (ESA-2022-14) An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their pr… --- ## [ELK + redis query](https://discuss.elastic.co/t/elk-redis-query/28870)
**Author:** [@knightsg](https://discuss.elastic.co/u/knightsg)\ **Replies:** 5\ **Last updated:** [September 14, 2015, 5:36pm UTC](https://discuss.elastic.co/t/elk-redis-query/28870 "2015-09-14T17:36:04Z")
Hi all, I've set up ELK on AWS in a fault-tolerant configuration (multi-AZ), and have been looking at integrating redis into the stack to ease the load on logstash, as is commonly recommended. However, it seems to me t… --- ## [Elastic-operator requests regularly time out](https://discuss.elastic.co/t/elastic-operator-requests-regularly-time-out/219096)
**Author:** [@simonjam](https://discuss.elastic.co/u/simonjam)\ **Replies:** 6\ **Last updated:** [February 15, 2020, 1:05am UTC](https://discuss.elastic.co/t/elastic-operator-requests-regularly-time-out/219096 "2020-02-15T01:05:33Z")
Hi, I'm using ECK on GKE. Almost every time I make any modifications (initial apply, edit) to the elasticsearch object, it times out. But only barely! If I increase the timeout, the command usually succeeds in 30.1s. Fo… --- ## [Filebeat reading json file](https://discuss.elastic.co/t/filebeat-reading-json-file/79257)
**Author:** [@garywoodfine](https://discuss.elastic.co/u/garywoodfine)\ **Replies:** 6\ **Last updated:** [March 30, 2017, 9:09am UTC](https://discuss.elastic.co/t/filebeat-reading-json-file/79257 "2017-03-30T09:09:33Z")
Hi Guys I am a total noob to ElasticStack and Filebeats. I have a custom log file in a JSON format, the app we are using will output an 1 entry per file as follows {"cuid":1,"Machine":"001","cuSize":0,"starttime":"20… --- ## [Dec 21st, 2019: \[EN\]\[Kibana\] Gain insights from large datasets with choropleth maps and Elastic maps](https://discuss.elastic.co/t/dec-21st-2019-en-kibana-gain-insights-from-large-datasets-with-choropleth-maps-and-elastic-maps/211814)
**Author:** [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Replies:** 0\ **Last updated:** [December 21, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2019-en-kibana-gain-insights-from-large-datasets-with-choropleth-maps-and-elastic-maps/211814 "2019-12-21T08:00:07Z")
"Get It Done" is a San Diego initiative to engage citizens in reporting non-emergency problems like potholes, missed garbage collection, and street light outages. Smart phone applications make reporting easy. The "Get It… --- ## [Rejected execution of org.elasticsearch.transport.TransportService](https://discuss.elastic.co/t/rejected-execution-of-org-elasticsearch-transport-transportservice/92195)
**Author:** [@sandy2428](https://discuss.elastic.co/u/sandy2428)\ **Replies:** 1\ **Last updated:** [July 12, 2017, 8:55am UTC](https://discuss.elastic.co/t/rejected-execution-of-org-elasticsearch-transport-transportservice/92195 "2017-07-12T08:55:35Z")
I am getting the below error in my environment. Initially td-agent to push the logs for some time, but getting the below after a moment. Any help is greatly helpful... Did a lot of research but couldnt find the solution … --- ## [Setting thread\_pool.index.size in es 5](https://discuss.elastic.co/t/setting-thread-pool-index-size-in-es-5/67161)
**Author:** [@mkstsph](https://discuss.elastic.co/u/mkstsph)\ **Replies:** 2\ **Last updated:** [November 28, 2016, 10:53am UTC](https://discuss.elastic.co/t/setting-thread-pool-index-size-in-es-5/67161 "2016-11-28T10:53:32Z")
Hi, I started using elasticsearch 5.0.1 I want to increase my index or bulk thread pool size in settings but i get the error Failed to parse value \[..\] for setting \[thread\_pool.index.size\] must be \<= ....; In documenta… --- ## [Setting index.mapper.dynamic was removed after version 6.0.0](https://discuss.elastic.co/t/setting-index-mapper-dynamic-was-removed-after-version-6-0-0/179776)
**Author:** [@sascha\_a](https://discuss.elastic.co/u/sascha_a)\ **Replies:** 3\ **Last updated:** [May 6, 2019, 5:36pm UTC](https://discuss.elastic.co/t/setting-index-mapper-dynamic-was-removed-after-version-6-0-0/179776 "2019-05-06T17:36:56Z")
Hello, we have trouble after elasticsearch 7.0.1 upgrade (from 6.7). The cluster itself exists since version 5.4 or even earlier always rolling upgrading. It always complains about: "Setting index.mapper.dynamic was … --- ## [Elastic Watcher Alert Failing (Memory & Cpu Usage)](https://discuss.elastic.co/t/elastic-watcher-alert-failing-memory-cpu-usage/40974)
**Author:** [@pgcr](https://discuss.elastic.co/u/pgcr)\ **Replies:** 7\ **Last updated:** [June 9, 2016, 10:31am UTC](https://discuss.elastic.co/t/elastic-watcher-alert-failing-memory-cpu-usage/40974 "2016-06-09T10:31:33Z")
I have been attempting to setup a watch using the template that can be found here: https://www.elastic.co/guide/en/watcher/current/watching-marvel-data.html Current setup: 1 master node with 2 backups; 3 data nodes (3 … --- ## [Pretty JSON format of recieved (dot separated) log data fields](https://discuss.elastic.co/t/pretty-json-format-of-recieved-dot-separated-log-data-fields/217796)
**Author:** [@Roman\_Konkol](https://discuss.elastic.co/u/Roman_Konkol)\ **Replies:** 3\ **Last updated:** [February 4, 2020, 10:06pm UTC](https://discuss.elastic.co/t/pretty-json-format-of-recieved-dot-separated-log-data-fields/217796 "2020-02-04T22:06:43Z")
Hi all, can you help me, please? I want to see my whole log entries in pretty JSON format on Kibana Discovery page. What I received from logstash: log entries with "dot case format" fields like: http.host, http.body,… --- ## [Application won't load when using UseAllElasticApm](https://discuss.elastic.co/t/application-wont-load-when-using-useallelasticapm/219336)
**Author:** [@poserdonut](https://discuss.elastic.co/u/poserdonut)\ **Replies:** 8\ **Last updated:** [February 20, 2020, 8:43pm UTC](https://discuss.elastic.co/t/application-wont-load-when-using-useallelasticapm/219336 "2020-02-20T20:43:18Z")
Hi! We are using apm-agent-dotnet 1.3 in a .NET Core 3.1.1 Web API with Entity Framework Core 3.1.1. When I add app.UseAllElasticApm(Configuration); and try to start the application it won't entirely load. It just hang… --- ## [Using Logstash to index MQTT from Mosquitto](https://discuss.elastic.co/t/using-logstash-to-index-mqtt-from-mosquitto/161181)
**Author:** [@stornian](https://discuss.elastic.co/u/stornian)\ **Replies:** 0\ **Last updated:** [December 17, 2018, 2:50pm UTC](https://discuss.elastic.co/t/using-logstash-to-index-mqtt-from-mosquitto/161181 "2018-12-17T14:50:45Z")
Hello, this is my first time to use MQTT. My goal is to use the mqtt input plugin (https://github.com/jurek7/logstash-input-mqtt) My logstash configuration is: I installed Mosquitto and run it with default settings. … --- ## [.StringIndexOutOfBoundsException: String index out of range: -1](https://discuss.elastic.co/t/stringindexoutofboundsexception-string-index-out-of-range-1/8490)
**Author:** [@ABC](https://discuss.elastic.co/u/ABC)\ **Replies:** 2\ **Last updated:** [July 24, 2012, 5:04pm UTC](https://discuss.elastic.co/t/stringindexoutofboundsexception-string-index-out-of-range-1/8490 "2012-07-24T17:04:08Z")
Hi, I am a newbie to elasticsearch. Does anyone know any reasons for this exception while indexing data. \*"Caused by: java.lang.StringIndexOutOfBoundsException: String index out of range: -1\* \* at java.… --- ## [Docker container randomly stopping with no error log](https://discuss.elastic.co/t/docker-container-randomly-stopping-with-no-error-log/307325)
**Author:** [@Kristan\_Uccello](https://discuss.elastic.co/u/Kristan_Uccello)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 1:26pm UTC](https://discuss.elastic.co/t/docker-container-randomly-stopping-with-no-error-log/307325 "2022-06-17T13:26:56Z")
I have setup a developer environment on my machine (Mac M1 Ultra). I am using the ARM docker images. I have blogged my full setup notes for my config: https://kuccello.medium.com/elastic-search-8-2-3-kibana-enterprise-se… --- ## [Processors drop\_event - no worky](https://discuss.elastic.co/t/processors-drop-event-no-worky/70970)
**Author:** [@panaman](https://discuss.elastic.co/u/panaman)\ **Replies:** 7\ **Last updated:** [January 12, 2017, 7:53pm UTC](https://discuss.elastic.co/t/processors-drop-event-no-worky/70970 "2017-01-12T19:53:25Z")
running metricbeat on centos7 package name = metricbeat-5.1.1-1.x86\_64 The documentation says to use processors: https://www.elastic.co/guide/en/beats/metricbeat/current/configuration-processors.html#conditions If I… --- ## [ThreadPoolExecutor overused](https://discuss.elastic.co/t/threadpoolexecutor-overused/45892)
**Author:** [@opendoc42](https://discuss.elastic.co/u/opendoc42)\ **Replies:** 7\ **Last updated:** [April 8, 2016, 6:59am UTC](https://discuss.elastic.co/t/threadpoolexecutor-overused/45892 "2016-04-08T06:59:09Z")
Hello everyone, we try to migrate our old cluster 1.4 to our new cluster 2.2.1. Currently, half of our web site use the new cluster and we encounter very big problems. here is the error: Caused by: EsRejectedExecut… --- ## [Windows Defrag cause node to become unresponsive?](https://discuss.elastic.co/t/windows-defrag-cause-node-to-become-unresponsive/75570)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 0\ **Last updated:** [February 17, 2017, 11:54pm UTC](https://discuss.elastic.co/t/windows-defrag-cause-node-to-become-unresponsive/75570 "2017-02-17T23:54:42Z")
I have been trying to track down an issue where we have nodes become unresponsive momentarily, causing the cluster to think they have left. I have assumed this to be a GC issue and have been trying to optimize to that e… --- ## [Logstash error "undefined method \`close' for nil:NilClass"](https://discuss.elastic.co/t/logstash-error-undefined-method-close-for-nil-nilclass/29784)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 6\ **Last updated:** [September 24, 2015, 2:04pm UTC](https://discuss.elastic.co/t/logstash-error-undefined-method-close-for-nil-nilclass/29784 "2015-09-24T14:04:31Z")
Hi , I was running logstash in windows environment and it was running fine , but when I was trying the same thing in Linux machine with same version of logstash (1.5.4) it is showing an error that The error reported is… --- ## [Logstash CSV Filter Using Unicode delimiter ( SOH )](https://discuss.elastic.co/t/logstash-csv-filter-using-unicode-delimiter-soh/32517)
**Author:** [@samnik60](https://discuss.elastic.co/u/samnik60)\ **Replies:** 4\ **Last updated:** [October 20, 2015, 12:34pm UTC](https://discuss.elastic.co/t/logstash-csv-filter-using-unicode-delimiter-soh/32517 "2015-10-20T12:34:05Z")
HI guys, I am trying to parse a CSV File which has a delimiter of (SOH) i.e Hexa value \\x01 ( unicode value \\u0001 ), but logstash csv filter seems to ignore the seperator mentioned . example filter{ csv{ … --- ## [Access denied to certs when starting Elasticsearch](https://discuss.elastic.co/t/access-denied-to-certs-when-starting-elasticsearch/210782)
**Author:** [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\ **Replies:** 2\ **Last updated:** [December 9, 2019, 4:42pm UTC](https://discuss.elastic.co/t/access-denied-to-certs-when-starting-elasticsearch/210782 "2019-12-09T16:42:58Z")
Hi Everybody, I'm experiencing some trouble when starting Elasticsearch: java.nio.file.AccessDeniedException: /etc/elasticsearch/certs/elastic-stack-ca.p12 The outcome of "ls -l": root@elk:/usr/share/elasticsearch# ls… --- ## [Question about precision in Elastic Search, Need to take the values till 18 to 20 decimals](https://discuss.elastic.co/t/question-about-precision-in-elastic-search-need-to-take-the-values-till-18-to-20-decimals/172531)
**Author:** [@Vishal\_Gupta1](https://discuss.elastic.co/u/Vishal_Gupta1)\ **Replies:** 7\ **Last updated:** [March 19, 2019, 1:55pm UTC](https://discuss.elastic.co/t/question-about-precision-in-elastic-search-need-to-take-the-values-till-18-to-20-decimals/172531 "2019-03-19T13:55:16Z")
Hi, I have been using Elastic Search V 6.6.4 for my project from last 6 months or so. However, after completing the product when we are doing the verification of the values , we can see there is a mismatch in values aft… --- ## [Hot to update single doc without id?](https://discuss.elastic.co/t/hot-to-update-single-doc-without-id/154087)
**Author:** [@john4](https://discuss.elastic.co/u/john4)\ **Replies:** 4\ **Last updated:** [October 27, 2018, 3:29pm UTC](https://discuss.elastic.co/t/hot-to-update-single-doc-without-id/154087 "2018-10-27T15:29:34Z")
Ok, this might sound strange but i can´t do that simple task: I just want to update one document which has an unique identifier. I don´t know the ID and don´t want to get the id first. Using '\_update\_by\_query' i get dow… --- ## [Logstash, split event from an xml file in multiples documents keeping information from root tags](https://discuss.elastic.co/t/logstash-split-event-from-an-xml-file-in-multiples-documents-keeping-information-from-root-tags/59801)
**Author:** [@Meenakshi07](https://discuss.elastic.co/u/Meenakshi07)\ **Replies:** 8\ **Last updated:** [September 5, 2016, 1:06pm UTC](https://discuss.elastic.co/t/logstash-split-event-from-an-xml-file-in-multiples-documents-keeping-information-from-root-tags/59801 "2016-09-05T13:06:58Z")
Parsing xml file via logstash. The documents should be parsed in a flattened structure. Example: \ \ \ \ \… --- ## [Lowercase id field](https://discuss.elastic.co/t/lowercase-id-field/4266)
**Author:** [@Mustafa\_Sener](https://discuss.elastic.co/u/Mustafa_Sener)\ **Replies:** 7\ **Last updated:** [April 22, 2011, 5:47am UTC](https://discuss.elastic.co/t/lowercase-id-field/4266 "2011-04-22T05:47:59Z")
Hi, In order to get a document with a known id we have to be careful about case sensitivity. This is problematic in some situations. However, if we convert all id field to lowercase this problem will be solved. We mo… --- ## [Possible to combine/flatten arrays using Painless?](https://discuss.elastic.co/t/possible-to-combine-flatten-arrays-using-painless/102494)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 3\ **Last updated:** [October 4, 2017, 2:31pm UTC](https://discuss.elastic.co/t/possible-to-combine-flatten-arrays-using-painless/102494 "2017-10-04T14:31:31Z")
Is it possible to flatten an array using Painless? I'm essentially looking for this Groovy flatten method in Painless. --- ## [Merge policy and segments count](https://discuss.elastic.co/t/merge-policy-and-segments-count/159927)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 7\ **Last updated:** [December 11, 2018, 5:57am UTC](https://discuss.elastic.co/t/merge-policy-and-segments-count/159927 "2018-12-11T05:57:41Z")
Hi Setting up 6.5.x cluster. So I need to index few million docs for this. I have disabled index refresh during initial indexing. All indices have 5 shards. Question: If doing inital indexing, without refresh, are the… --- ## [What is the proper syntax to use for this search please?](https://discuss.elastic.co/t/what-is-the-proper-syntax-to-use-for-this-search-please/155312)
**Author:** [@Wanderer](https://discuss.elastic.co/u/Wanderer)\ **Replies:** 1\ **Last updated:** [November 5, 2018, 2:07am UTC](https://discuss.elastic.co/t/what-is-the-proper-syntax-to-use-for-this-search-please/155312 "2018-11-05T02:07:56Z")
I've tried surrounding the text below with and "" but just get errors of: Discover: Expected ":", "\<", "\<=", "\>", "\>=", "and", "or", \[\\ \\t\\r\\n\] or end of input but "d" found. Discover: Expected "\*", "", \[\\ \\t\\r\\n\] or … --- ## [Unable to parse docker json-file](https://discuss.elastic.co/t/unable-to-parse-docker-json-file/112416)
**Author:** [@Asaf\_Shabat](https://discuss.elastic.co/u/Asaf_Shabat)\ **Replies:** 7\ **Last updated:** [January 4, 2018, 12:45pm UTC](https://discuss.elastic.co/t/unable-to-parse-docker-json-file/112416 "2018-01-04T12:45:39Z")
Hello, I'm trying to parse docker json-file output to Logstash using Filebeat and to break the message log into fields. Currently, this is what I can parse into Kibana: { "\_index": "filebeat-2017.12.19", "\_type": … --- ## [Disabling \_all field from Index](https://discuss.elastic.co/t/disabling--all-field-from-index/62394)
**Author:** [@abhishekanand100](https://discuss.elastic.co/u/abhishekanand100)\ **Replies:** 5\ **Last updated:** [May 20, 2017, 7:24am UTC](https://discuss.elastic.co/t/disabling--all-field-from-index/62394 "2017-05-20T07:24:59Z")
is it worth a shot to disable the \_all field and reindex all the data? We are seeing huge latencies while indexing/updating documents. Could this improve the performance? in our use case we do not query the \_all field… --- ## [How to handle TimeSeries Counters](https://discuss.elastic.co/t/how-to-handle-timeseries-counters/36028)
**Author:** [@bangert](https://discuss.elastic.co/u/bangert)\ **Replies:** 6\ **Last updated:** [January 24, 2017, 4:09pm UTC](https://discuss.elastic.co/t/how-to-handle-timeseries-counters/36028 "2017-01-24T16:09:20Z")
We plan on storing lots of SNMP Counter64 (basically a 64 bit increasing counter) in Elasticsearch. This data is collected from our network equipment, currently we are thinking of polling in 1 minute intervals. When pres… [Previous page](https://discuss.elastic.co/top.md?page=443&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=445&per_page=50&period=all)