# Top **URL:** https://discuss.elastic.co/top.md?page=447&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 448 --- ## [How to add multiple grok pattern in one filter?](https://discuss.elastic.co/t/how-to-add-multiple-grok-pattern-in-one-filter/128622)
**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\ **Replies:** 5\ **Last updated:** [April 19, 2018, 10:23am UTC](https://discuss.elastic.co/t/how-to-add-multiple-grok-pattern-in-one-filter/128622 "2018-04-19T10:23:01Z")
Hi, My use case is to match one of the regex using multiple grok in one filter.Tried using multiple filter but not matching one of the pattern even though that pattern is present in input. Here is my filter filter { … --- ## [The task maps\_telemetry "Maps-maps\_telemetry" is not cancellable](https://discuss.elastic.co/t/the-task-maps-telemetry-maps-maps-telemetry-is-not-cancellable/171584)
**Author:** [@marastgoo](https://discuss.elastic.co/u/marastgoo)\ **Replies:** 3\ **Last updated:** [March 19, 2019, 7:32pm UTC](https://discuss.elastic.co/t/the-task-maps-telemetry-maps-maps-telemetry-is-not-cancellable/171584 "2019-03-19T19:32:20Z")
I want to try 6.7 branch but kibana stucks warning :" The task maps\_telemetry "Maps-maps\_telemetry" is not cancellable." server log \[05:51:34.075\] \[warning\]\[reporting\] Generating a random key for xpack.reporting.en… --- ## [Do multiple jdbc input run simultaneously or sequentially?](https://discuss.elastic.co/t/do-multiple-jdbc-input-run-simultaneously-or-sequentially/160197)
**Author:** [@keysersozee](https://discuss.elastic.co/u/keysersozee)\ **Replies:** 3\ **Last updated:** [December 20, 2018, 11:52pm UTC](https://discuss.elastic.co/t/do-multiple-jdbc-input-run-simultaneously-or-sequentially/160197 "2018-12-20T23:52:29Z")
Hello, I need to query multiple database instances and I wanted to know when defining multiple jdbc input plugins in just 1 pipeline is the exact same thing (technically) as defining multiple pipelines with 1 jdbc input… --- ## [Multi-threaded Bulk Indexing](https://discuss.elastic.co/t/multi-threaded-bulk-indexing/5651)
**Author:** [@Xavier\_Stevens](https://discuss.elastic.co/u/Xavier_Stevens)\ **Replies:** 7\ **Last updated:** [October 27, 2011, 6:55pm UTC](https://discuss.elastic.co/t/multi-threaded-bulk-indexing/5651 "2011-10-27T18:55:28Z")
I've been currently working on a multi-threaded process that where each thread is making bulk index requests. I'm using 8 worker threads where each one is submitting batches of 200 items each time (items are around 10… --- ## [Filebeat fields.yml](https://discuss.elastic.co/t/filebeat-fields-yml/171605)
**Author:** [@2ps](https://discuss.elastic.co/u/2ps)\ **Replies:** 3\ **Last updated:** [March 14, 2019, 11:46am UTC](https://discuss.elastic.co/t/filebeat-fields-yml/171605 "2019-03-14T11:46:26Z")
When specifying our fields.yml, I had several questions: How do we specify what should be the default time field for kibana? Is there any way to specify the moment.js format for the date field for kibana? What, if any,… --- ## [No data for query "exists": { "field": "event.original" }](https://discuss.elastic.co/t/no-data-for-query-exists-field-event-original/296355)
**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:13am UTC](https://discuss.elastic.co/t/no-data-for-query-exists-field-event-original/296355 "2022-02-07T04:13:46Z")
I'm sending web access logs from Nginx server to Elastic. Everything works. I can see all data in Kibana correctly: However, when I try to add "exists": { "field": "event.original" } I'm getting no data: What … --- ## [How to increase the number of values in kibana lens](https://discuss.elastic.co/t/how-to-increase-the-number-of-values-in-kibana-lens/259450)
**Author:** [@sungjin.kim](https://discuss.elastic.co/u/sungjin.kim)\ **Replies:** 2\ **Last updated:** [December 23, 2020, 9:51pm UTC](https://discuss.elastic.co/t/how-to-increase-the-number-of-values-in-kibana-lens/259450 "2020-12-23T21:51:21Z")
Hi folks, How to increase the number of values in kibana lens? in lens, the maximum of number of values is 20. I'd like to show all of data --- ## [ElascticSearch and Spark fails with 403(forbidden)](https://discuss.elastic.co/t/elascticsearch-and-spark-fails-with-403-forbidden/40185)
**Author:** [@tintin-74](https://discuss.elastic.co/u/tintin-74)\ **Replies:** 5\ **Last updated:** [January 29, 2016, 7:09pm UTC](https://discuss.elastic.co/t/elascticsearch-and-spark-fails-with-403-forbidden/40185 "2016-01-29T19:09:12Z")
Continuing the discussion from Basic Authentication with Spark fails with 403(forbidden): Hi I have the same issue (maybe), I noticed i get the log messages WARN HttpMethodDirector: Required credentials not avail… --- ## [Finding unique values of a field from the returned search results](https://discuss.elastic.co/t/finding-unique-values-of-a-field-from-the-returned-search-results/32752)
**Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\ **Replies:** 5\ **Last updated:** [October 29, 2015, 9:25pm UTC](https://discuss.elastic.co/t/finding-unique-values-of-a-field-from-the-returned-search-results/32752 "2015-10-29T21:25:29Z")
When I send a search request, I get a document of this format: { "\_index": "texts\_cluster", "\_type": "documents", "\_id": "5732", "\_score": 1.8980495, … --- ## [Timezone causing problem when doing a search query to an index!](https://discuss.elastic.co/t/timezone-causing-problem-when-doing-a-search-query-to-an-index/61077)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 6\ **Last updated:** [September 21, 2016, 10:59am UTC](https://discuss.elastic.co/t/timezone-causing-problem-when-doing-a-search-query-to-an-index/61077 "2016-09-21T10:59:53Z")
I'm trying to find out the results from a search query (ie: searching results for the given date range) of a particular index. So that I could get the results in a daily basis. This is the query : http://localhost:9200… --- ## [How to change field names in Kibana?](https://discuss.elastic.co/t/how-to-change-field-names-in-kibana/48745)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 3\ **Last updated:** [April 29, 2016, 1:50pm UTC](https://discuss.elastic.co/t/how-to-change-field-names-in-kibana/48745 "2016-04-29T13:50:03Z")
I am currently storing values directly to Elastic Search. When I search for the log, I get this in Kibana How can I change the field name from Payload\_session -\> SessionID. I know this can be achieved using logstash.… --- ## [\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"input\\", \\"filter\\", \\"output\\" at line](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-t-r-n-input-filter-output-at-line/336352)
**Author:** [@dropp.dev.hamidreza](https://discuss.elastic.co/u/dropp.dev.hamidreza)\ **Replies:** 6\ **Last updated:** [June 19, 2023, 7:36pm UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-t-r-n-input-filter-output-at-line/336352 "2023-06-19T19:36:41Z")
Hi, I'm trying to set up ELK stack with docker and docker compose and while setting up pipeline in logstash is gave me error in logstash container logs: \[INFO \]\[logstash.runner \] JVM bootstrap flags: \[-Xms4g, -… --- ## [Easticesearch：クラスタの負荷分散について](https://discuss.elastic.co/t/easticesearch/81547)
**Author:** [@yossy](https://discuss.elastic.co/u/yossy)\ **Replies:** 4\ **Last updated:** [April 11, 2017, 9:28am UTC](https://discuss.elastic.co/t/easticesearch/81547 "2017-04-11T09:28:25Z")
お世話になっております。 クラスタの環境を構築中ですが、負荷分散についてご意見頂きたいです。 下記のどちらかでクラスタを組もうとしておりますが、それぞれどういったメリット/デメリットがあるでしょうか？ 他の組み方もあるかもしれませんが、その場合は、合わせて他の方法を教えて頂けますと助かります。（当方がネットの記事を見ながら、参考にした構成です） ・2台のクラスタ構成（どちらもマスタノード） -\> アプリからマスタノード… --- ## [Auditbeat impacting system performance](https://discuss.elastic.co/t/auditbeat-impacting-system-performance/131290)
**Author:** [@nlh](https://discuss.elastic.co/u/nlh)\ **Replies:** 7\ **Last updated:** [May 18, 2018, 7:52am UTC](https://discuss.elastic.co/t/auditbeat-impacting-system-performance/131290 "2018-05-18T07:52:43Z")
Hi, could use some information on how auditbeat works so we can try and figure out where the limitation is that is dragging our system down. We are just using auditbeat to monitor 1 directory and 1 file (auditbeat.yml).… --- ## [Index postgreSQL to elasticsearch](https://discuss.elastic.co/t/index-postgresql-to-elasticsearch/25345)
**Author:** [@GG8](https://discuss.elastic.co/u/GG8)\ **Replies:** 5\ **Last updated:** [July 10, 2015, 8:25pm UTC](https://discuss.elastic.co/t/index-postgresql-to-elasticsearch/25345 "2015-07-10T20:25:58Z")
any tips on how to index postgreSQL to elasticsearch, i followed by installing https://github.com/jprante/elasticsearch-jdbc and see below error curl: (6) Couldn't resolve host 'id,date\_time,status,step… --- ## [Failed to execute bulk item (index) BulkShardRequest](https://discuss.elastic.co/t/failed-to-execute-bulk-item-index-bulkshardrequest/156321)
**Author:** [@Mark\_Rayhshtat](https://discuss.elastic.co/u/Mark_Rayhshtat)\ **Replies:** 2\ **Last updated:** [November 12, 2018, 8:20pm UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-index-bulkshardrequest/156321 "2018-11-12T20:20:43Z")
Hello all, I have error while parsing data to elasticserach. it's my template { "template": ".alertmanager-2\*", "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 1, "index.refresh\_interval": "10s", "ind… --- ## [Docker Filebeat can't connect to Docker bridge network despite ELK being able to](https://discuss.elastic.co/t/docker-filebeat-cant-connect-to-docker-bridge-network-despite-elk-being-able-to/146408)
**Author:** [@shirakaba](https://discuss.elastic.co/u/shirakaba)\ **Replies:** 2\ **Last updated:** [August 29, 2018, 8:57am UTC](https://discuss.elastic.co/t/docker-filebeat-cant-connect-to-docker-bridge-network-despite-elk-being-able-to/146408 "2018-08-29T08:57:08Z")
My setup I'm using a slight modification\* of the master branch of docker-elk via Docker for Ubuntu 16.04 v18.06.1-ce. The docker-elk repo is currently based on the Elastic stack v6.3.2, and specifically uses the followi… --- ## [Google like search](https://discuss.elastic.co/t/google-like-search/7050)
**Author:** [@alheim](https://discuss.elastic.co/u/alheim)\ **Replies:** 4\ **Last updated:** [March 28, 2012, 4:43pm UTC](https://discuss.elastic.co/t/google-like-search/7050 "2012-03-28T16:43:46Z")
Hi, I'm trying to implement the same kind of "natural" search query than google. I'm using query strings on fields analyzed with a stemmer filter. What is a good configuration of the query string to get the same… --- ## [How to Join 2 fields?](https://discuss.elastic.co/t/how-to-join-2-fields/147802)
**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\ **Replies:** 3\ **Last updated:** [September 14, 2018, 4:24am UTC](https://discuss.elastic.co/t/how-to-join-2-fields/147802 "2018-09-14T04:24:19Z")
So..lets say i want to see how many IP xxx.xxx.xxx.xxx attacks my server. And in that table also included the reputation of the IP. How i could do that in one table? So.. the table will look like this: | IP Address | … --- ## [Need help configuring ELK to receive logs from log4net/udpappender](https://discuss.elastic.co/t/need-help-configuring-elk-to-receive-logs-from-log4net-udpappender/88696)
**Author:** [@desai.amogh](https://discuss.elastic.co/u/desai.amogh)\ **Replies:** 3\ **Last updated:** [June 9, 2017, 12:09pm UTC](https://discuss.elastic.co/t/need-help-configuring-elk-to-receive-logs-from-log4net-udpappender/88696 "2017-06-09T12:09:37Z")
I have setup a UDP appender on a windows 7 machine with VSTS EnvLog.Config file. Also a ELK stack is installed on a centos 6.5 instance. here's my /etc/logstash/conf.d/logstash.conf input section input { u… --- ## [Updating the alerting for all rules with the API](https://discuss.elastic.co/t/updating-the-alerting-for-all-rules-with-the-api/303065)
**Author:** [@ARDiver86](https://discuss.elastic.co/u/ARDiver86)\ **Replies:** 0\ **Last updated:** [April 22, 2022, 11:20pm UTC](https://discuss.elastic.co/t/updating-the-alerting-for-all-rules-with-the-api/303065 "2022-04-22T23:20:02Z")
Since the ability to bulk edit rules and assign an action does not exist, how can I do this with the API? I've tried a few methods via the Kibana console under dev tools but cannot get any of the GET's to return data (li… --- ## [WARN kafka message: client/metadata found some partitions to be leaderless](https://discuss.elastic.co/t/warn-kafka-message-client-metadata-found-some-partitions-to-be-leaderless/113293)
**Author:** [@Abhijit\_Paul](https://discuss.elastic.co/u/Abhijit_Paul)\ **Replies:** 3\ **Last updated:** [January 5, 2018, 11:59am UTC](https://discuss.elastic.co/t/warn-kafka-message-client-metadata-found-some-partitions-to-be-leaderless/113293 "2018-01-05T11:59:53Z")
Hi All, I am unable to post a message from filebeat as an external producer (outside k8s cluster) to kafka-inside kubernetes cluster. The topic "test\_topic" is already created. Error from filebeat: 2017/12/27 09:26:0… --- ## [Docker Swarm and Elasticsearch](https://discuss.elastic.co/t/docker-swarm-and-elasticsearch/185774)
**Author:** [@zee.caniago](https://discuss.elastic.co/u/zee.caniago)\ **Replies:** 1\ **Last updated:** [June 17, 2019, 9:18am UTC](https://discuss.elastic.co/t/docker-swarm-and-elasticsearch/185774 "2019-06-17T09:18:28Z")
Hi, Is there an example I can follow to setup Elasticsearch running on Docker Swarm? I am able to run Elasticsearch with Docker-Compose (single node). However, I am having a hard time to make Elasticsearch working on Do… --- ## [Logstash losing connection to Elasticsearch](https://discuss.elastic.co/t/logstash-losing-connection-to-elasticsearch/33446)
**Author:** [@kelv1n](https://discuss.elastic.co/u/kelv1n)\ **Replies:** 7\ **Last updated:** [November 17, 2015, 9:28pm UTC](https://discuss.elastic.co/t/logstash-losing-connection-to-elasticsearch/33446 "2015-11-17T21:28:58Z")
Hi Guys I'm tried to setup a ELK cluster using the latest 2.0 releases, after a period of about 15-20 minutes it seems Logstash can no longer connect to Elasticsearch and the Logstash logs get flooded with the messages… --- ## [Custom filter in kibana discover](https://discuss.elastic.co/t/custom-filter-in-kibana-discover/111927)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 4\ **Last updated:** [December 18, 2017, 5:30am UTC](https://discuss.elastic.co/t/custom-filter-in-kibana-discover/111927 "2017-12-18T05:30:24Z")
Hello, I'd like to know how I can set up a custom query in kibana's discover. My requirement is basically with respect to netflow data that is being stored in the elstic db. I'd like to query: Show all netflow records … --- ## [Incorrect sum while aggregating in elasticsearch for one particular index](https://discuss.elastic.co/t/incorrect-sum-while-aggregating-in-elasticsearch-for-one-particular-index/29305)
**Author:** [@Aditya\_Patel](https://discuss.elastic.co/u/Aditya_Patel)\ **Replies:** 5\ **Last updated:** [September 15, 2015, 10:00am UTC](https://discuss.elastic.co/t/incorrect-sum-while-aggregating-in-elasticsearch-for-one-particular-index/29305 "2015-09-15T10:00:51Z")
Hi, @colings86 I am currently trying to aggregate a field in elasticsearch, on checking the sum. I think it's not giving me the correct answer. Following is my elasticsearch query: { "size": 0, "query":… --- ## [Failed to submit message: 'Connection to APM Server timed out (url: http://localhost:8200/intake/v2/events, timeout: 5 seconds)'](https://discuss.elastic.co/t/failed-to-submit-message-connection-to-apm-server-timed-out-url-http-localhost-8200-intake-v2-events-timeout-5-seconds/310835)
**Author:** [@Shaheen](https://discuss.elastic.co/u/Shaheen)\ **Replies:** 3\ **Last updated:** [July 29, 2022, 5:03am UTC](https://discuss.elastic.co/t/failed-to-submit-message-connection-to-apm-server-timed-out-url-http-localhost-8200-intake-v2-events-timeout-5-seconds/310835 "2022-07-29T05:03:20Z")
Kibana version:8.3.2 Elasticsearch version: elastic-apm==6.10.1 (Django==4.0.5) APM Server version:8.3.2 APM Agent language and version:Django==4.0.5 Browser version:Chrome Errors in browser console (if relevant): P… --- ## [How to create textbox and button in dashboard?](https://discuss.elastic.co/t/how-to-create-textbox-and-button-in-dashboard/110991)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 3\ **Last updated:** [December 12, 2017, 6:04am UTC](https://discuss.elastic.co/t/how-to-create-textbox-and-button-in-dashboard/110991 "2017-12-12T06:04:29Z")
hi! I would like to add MYREFID textbox in my dashboard which has few visualizations(pie,datatable,etc.) If I search with MYREFID, the whole dashboard must display the related results of MYREFID. How to pass the value… --- ## [Remote file collection (rsync, scp, ...)](https://discuss.elastic.co/t/remote-file-collection-rsync-scp/54063)
**Author:** [@echalmer](https://discuss.elastic.co/u/echalmer)\ **Replies:** 1\ **Last updated:** [June 28, 2016, 6:27am UTC](https://discuss.elastic.co/t/remote-file-collection-rsync-scp/54063 "2016-06-28T06:27:33Z")
I need to collect log files from a closed appliance. I cannot configure the appliance to send log events out with syslog. I cannot install software on the appliance. I can copy files from the appliance, e.g. with rsync o… --- ## [Elasticsearch Curator 5.4.0 supports Elasticsearch 6.0](https://discuss.elastic.co/t/elasticsearch-curator-5-4-0-supports-elasticsearch-6-0/107613)
**Author:** [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\ **Replies:** 0\ **Last updated:** [November 14, 2017, 7:41pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-5-4-0-supports-elasticsearch-6-0/107613 "2017-11-14T19:41:01Z")
Small announcement to add to today's release of Elasticsearch 6.0: Elasticsearch Curator 5.4.0 is out, and it supports Elasticsearch versions 5.x and 6.0. Release notes: https://github.com/elastic/curator/releases/tag/… --- ## [How to store array of IP?](https://discuss.elastic.co/t/how-to-store-array-of-ip/51461)
**Author:** [@esamudio](https://discuss.elastic.co/u/esamudio)\ **Replies:** 6\ **Last updated:** [June 2, 2016, 4:44pm UTC](https://discuss.elastic.co/t/how-to-store-array-of-ip/51461 "2016-06-02T16:44:20Z")
I have noticed that I'm unable to create an array of IP the same way I can create an array of either integers or strings as it doesn't seem to be recognized by default. Is there a way for me to create an array of IP? I… --- ## [X-pack licence cost](https://discuss.elastic.co/t/x-pack-licence-cost/90806)
**Author:** [@vinod\_hy](https://discuss.elastic.co/u/vinod_hy)\ **Replies:** 4\ **Last updated:** [July 6, 2017, 7:49am UTC](https://discuss.elastic.co/t/x-pack-licence-cost/90806 "2017-07-06T07:49:54Z")
Hi, I am using the trail version of x-pack for security. My licence will end soon and most of the security features wont work post licence expiry. I want to know the cost of licence. I think gold package would suit me … --- ## [Disable login in Kibana 5.3](https://discuss.elastic.co/t/disable-login-in-kibana-5-3/82998)
**Author:** [@pablosan](https://discuss.elastic.co/u/pablosan)\ **Replies:** 2\ **Last updated:** [April 20, 2017, 7:01pm UTC](https://discuss.elastic.co/t/disable-login-in-kibana-5-3/82998 "2017-04-20T19:01:02Z")
Hi, I have configured ELK with X-Pack and enabled the anonymous authentication. This allows me to access to Elasticsearch API without any issue, but when accessing through Kibana is asking for credentials, even giving … --- ## [Raise HTTP\_EXCEPTIONS.get(status\_code, TransportError)(status\_code, error\_message, additional\_info) elasticsearch.exceptions.TransportError: TransportError(406, 'Content-Type header \[\] is not supported')](https://discuss.elastic.co/t/raise-http-exceptions-get-status-code-transporterror-status-code-error-message-additional-info-elasticsearch-exceptions-transporterror-transporterror-406-content-type-header-is-not-supported/180379)
**Author:** [@idris](https://discuss.elastic.co/u/idris)\ **Replies:** 8\ **Last updated:** [May 13, 2019, 11:59am UTC](https://discuss.elastic.co/t/raise-http-exceptions-get-status-code-transporterror-status-code-error-message-additional-info-elasticsearch-exceptions-transporterror-transporterror-406-content-type-header-is-not-supported/180379 "2019-05-13T11:59:20Z")
GET /newsout/\_search?size=10000 \[status:406 request:0.004s\] Traceback (most recent call last): File "run.py", line 2, in from webapp import app File "/home/default/idr/portal/webapp/init.py", line 5, in import web… --- ## [Unassigned shards: NODE\_LEFT (Cloud)](https://discuss.elastic.co/t/unassigned-shards-node-left-cloud/260444)
**Author:** [@bogdan\_copocean](https://discuss.elastic.co/u/bogdan_copocean)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 7:47am UTC](https://discuss.elastic.co/t/unassigned-shards-node-left-cloud/260444 "2021-01-11T07:47:10Z")
Hello guys, I encountered a few problems with my Elasticsearch cluster (on cloud) and exactly, i have around 25 unassigned shards with the reason NODE\_LEFT and one with REPLICA\_ADDED (after I tried to add a replica). I… --- ## [Start the kibana failed](https://discuss.elastic.co/t/start-the-kibana-failed/40688)
**Author:** [@tianzongqi](https://discuss.elastic.co/u/tianzongqi)\ **Replies:** 3\ **Last updated:** [October 5, 2016, 10:54pm UTC](https://discuss.elastic.co/t/start-the-kibana-failed/40688 "2016-10-05T22:54:07Z")
when i started the kibana, some error print then failed. the error info is : log \[11:08:33.221\] \[info\]\[status\]\[plugin:kibana\] Status changed from uninitialized to green - Ready log \[11:08:33.256\] \[info\]\[sta… --- ## [Logstash jdbc plugin, connection timed out](https://discuss.elastic.co/t/logstash-jdbc-plugin-connection-timed-out/172629)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 7\ **Last updated:** [March 19, 2019, 8:48am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-connection-timed-out/172629 "2019-03-19T08:48:27Z")
hi all, I am using logstash jdbc plugin to load data from database, my jdbc conf is as following: input { jdbc { jdbc\_driver\_library =\> "sqljdbc42.jar" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServ… --- ## [ES 6.2.4 How to find out which nodes are offline](https://discuss.elastic.co/t/es-6-2-4-how-to-find-out-which-nodes-are-offline/134339)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 5\ **Last updated:** [June 4, 2018, 10:11am UTC](https://discuss.elastic.co/t/es-6-2-4-how-to-find-out-which-nodes-are-offline/134339 "2018-06-04T10:11:14Z")
Hi Team, What is the recommended way to find out which nodes in the cluster are offline using the rest API? In Kibana monitoring I can see which nodes are offline but I am not sure how Kibana actually determines that -… --- ## [How to retrieve all unique values from a given field](https://discuss.elastic.co/t/how-to-retrieve-all-unique-values-from-a-given-field/247312)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [September 3, 2020, 1:43am UTC](https://discuss.elastic.co/t/how-to-retrieve-all-unique-values-from-a-given-field/247312 "2020-09-03T01:43:37Z")
The quickest way to do this is to run a zero size, terms aggregation on the field. Using the Kibana sample log data set as an example, you would run; GET kibana\_sample\_data\_logs/\_search { "size": "0", "aggs": { … --- ## [How can I check if the "tags" array is empty?](https://discuss.elastic.co/t/how-can-i-check-if-the-tags-array-is-empty/27856)
**Author:** [@spynxo](https://discuss.elastic.co/u/spynxo)\ **Replies:** 2\ **Last updated:** [August 21, 2015, 8:09pm UTC](https://discuss.elastic.co/t/how-can-i-check-if-the-tags-array-is-empty/27856 "2015-08-21T20:09:39Z")
Hi All, How can I check if the "tags" array has any elements? I am adding and removing tags in my pipeline. At the end there are some messages that end up with an empty tags array ("tags" =\> \[\]). I will like to check i… --- ## [Filebeat: Select index based on prospector](https://discuss.elastic.co/t/filebeat-select-index-based-on-prospector/93691)
**Author:** [@Brian\_Topping](https://discuss.elastic.co/u/Brian_Topping)\ **Replies:** 1\ **Last updated:** [July 19, 2017, 1:59pm UTC](https://discuss.elastic.co/t/filebeat-select-index-based-on-prospector/93691 "2017-07-19T13:59:48Z")
I am trying to find the best way to set the index name based on the prospector that picked up the log entry. In general, I would like everything to default to index, then use indices for the specific changes as outlined … --- ## [Could filebeat support multipath for input and output separately?](https://discuss.elastic.co/t/could-filebeat-support-multipath-for-input-and-output-separately/50297)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 7\ **Last updated:** [May 19, 2016, 7:45am UTC](https://discuss.elastic.co/t/could-filebeat-support-multipath-for-input-and-output-separately/50297 "2016-05-19T07:45:52Z")
Hi anybody, I would like to capture some logs with totally different fields using filebeat on windows 2008 server,and then send logs to different index in elasticsearch. Could filebeat support multipath like this (i… --- ## [Cannot save Searches or visulation in kibana](https://discuss.elastic.co/t/cannot-save-searches-or-visulation-in-kibana/109821)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 2\ **Last updated:** [November 30, 2017, 10:08pm UTC](https://discuss.elastic.co/t/cannot-save-searches-or-visulation-in-kibana/109821 "2017-11-30T22:08:01Z")
When i try to save either a new search/visualization from discover/Visualize i get the follwoing error: Blocked by:\[FORBIDDEN/12/index read only / allow delete (api):: \[cluster\_block\_exception\] blocked by : \[FORBIDDEN/1… --- ## [Can Logstash pull gzipped files from s3](https://discuss.elastic.co/t/can-logstash-pull-gzipped-files-from-s3/116412)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 3\ **Last updated:** [January 24, 2018, 11:42pm UTC](https://discuss.elastic.co/t/can-logstash-pull-gzipped-files-from-s3/116412 "2018-01-24T23:42:16Z")
I have gzipped files on S3 I want to push into ES. there is an S3 input plugin: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-s3.html There is a gzip input plugin: https://www.elastic.co/guide/en/logs… --- ## [Logstash security\_exception, can't write to ES after installing X-pack](https://discuss.elastic.co/t/logstash-security-exception-cant-write-to-es-after-installing-x-pack/88973)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 2\ **Last updated:** [June 12, 2017, 10:30am UTC](https://discuss.elastic.co/t/logstash-security-exception-cant-write-to-es-after-installing-x-pack/88973 "2017-06-12T10:30:15Z")
As the title says, after installing X-pack logstash can't seem to authenticate with ES. \[2017-06-12T13:08:28,307\]\[ERROR\]\[logstash.outputs.elasticsearch\] Got a bad response code from server, but this code is not consid… --- ## [Logstash http\_poller input from server with self-signed SSL certificate](https://discuss.elastic.co/t/logstash-http-poller-input-from-server-with-self-signed-ssl-certificate/31407)
**Author:** [@vikbon](https://discuss.elastic.co/u/vikbon)\ **Replies:** 5\ **Last updated:** [September 30, 2015, 7:34pm UTC](https://discuss.elastic.co/t/logstash-http-poller-input-from-server-with-self-signed-ssl-certificate/31407 "2015-09-30T19:34:01Z")
Hi All, I’m new to Elasticsearch and attempting to configure logstash http\_poller input plugin to make api calls against a web server for performance data. Currently getting an “http\_request\_failure.error, handshake\_f… --- ## [How to check, if a hash is empty (no keys)](https://discuss.elastic.co/t/how-to-check-if-a-hash-is-empty-no-keys/93227)
**Author:** [@UnitedMarsupials](https://discuss.elastic.co/u/UnitedMarsupials)\ **Replies:** 4\ **Last updated:** [July 17, 2017, 1:55pm UTC](https://discuss.elastic.co/t/how-to-check-if-a-hash-is-empty-no-keys/93227 "2017-07-17T13:55:38Z")
I tried to use the same method as for arrays for a hash, that in our case could some times be empty: if \[geoip\] == \[\] { mutate { remove\_field =\> \["geoip"\] } } Unfortunately, the check i… --- ## [Exception in thread "main" java.lang.RuntimeException: don't run elasticsearch as root](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-runtimeexception-dont-run-elasticsearch-as-root/39754)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 2\ **Last updated:** [January 21, 2016, 12:31pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-runtimeexception-dont-run-elasticsearch-as-root/39754 "2016-01-21T12:31:48Z")
Hi, I'm using elasticsearch-2.1.1 in my linux red hat server(64 bit). When i'm trying to start my elasticsearch its thorough some error like this, Exception in thread "main" java.lang.RuntimeException: don't run elasti… --- ## [ES-Hadoop on HDInsight cluster](https://discuss.elastic.co/t/es-hadoop-on-hdinsight-cluster/92879)
**Author:** [@arc](https://discuss.elastic.co/u/arc)\ **Replies:** 7\ **Last updated:** [July 21, 2017, 9:46pm UTC](https://discuss.elastic.co/t/es-hadoop-on-hdinsight-cluster/92879 "2017-07-21T21:46:30Z")
I am running a hive job that reads data from azure blob (represented as a hive external table) and writes to elasticsearch via elasticsearch-hadoop-5.4.3.jar. Namely, the first line of my hive script is ADD JAR ./elasti… --- ## [Trouble with GeoIP mapping form logstash to elastic search](https://discuss.elastic.co/t/trouble-with-geoip-mapping-form-logstash-to-elastic-search/76045)
**Author:** [@cisaksen](https://discuss.elastic.co/u/cisaksen)\ **Replies:** 7\ **Last updated:** [February 24, 2017, 2:08am UTC](https://discuss.elastic.co/t/trouble-with-geoip-mapping-form-logstash-to-elastic-search/76045 "2017-02-24T02:08:38Z")
Brand new to this product, I have a nginx server send logs via filebeats, to logstash, which is working. I have the filter geoip which is also working as far as i can tell except that it appears that I'm missing somethi… [Previous page](https://discuss.elastic.co/top.md?page=446&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=448&per_page=50&period=all)