# Top **URL:** https://discuss.elastic.co/top.md?page=453&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 454 --- ## [Large number of indexes for multi-tenant product](https://discuss.elastic.co/t/large-number-of-indexes-for-multi-tenant-product/22699)
**Author:** [@Richard\_Blaylock](https://discuss.elastic.co/u/Richard_Blaylock)\ **Replies:** 3\ **Last updated:** [August 2, 2015, 2:40pm UTC](https://discuss.elastic.co/t/large-number-of-indexes-for-multi-tenant-product/22699 "2015-08-02T14:40:14Z")
Hi all, We have a multi-tenant product and are leaning towards dynamically creating (and deleting) various indexes relevant to a tenant at runtime: as a tenant is created, so are that tenant's indexes. When a ten… --- ## [Help visualizing simple data in a line chart](https://discuss.elastic.co/t/help-visualizing-simple-data-in-a-line-chart/27064)
**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Replies:** 7\ **Last updated:** [August 13, 2015, 7:20pm UTC](https://discuss.elastic.co/t/help-visualizing-simple-data-in-a-line-chart/27064 "2015-08-13T19:20:15Z")
I'm a novice to Kibana. I have just installed the product and I can access it from my browser. I have registered my index: sprint and I can see some of the data in the Discover tab in Kibana (4.1.1-Win). The data t… --- ## [Kibana Timelion: how to query a specific value expression with space](https://discuss.elastic.co/t/kibana-timelion-how-to-query-a-specific-value-expression-with-space/131327)
**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\ **Replies:** 5\ **Last updated:** [May 10, 2018, 7:47pm UTC](https://discuss.elastic.co/t/kibana-timelion-how-to-query-a-specific-value-expression-with-space/131327 "2018-05-10T19:47:35Z")
Hello, I am on Kibana 6.2.4 and I couldn't get the following Timelion visualization working right. .es(index="bug\_elk\_prod", timefield="open\_date", q="(found\_in\_rv: 'AGM 9.0') AND (target\_rv:PARENT)").label("Found in A… --- ## [Elasticsearch Oracle Java dependency](https://discuss.elastic.co/t/elasticsearch-oracle-java-dependency/69639)
**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\ **Replies:** 6\ **Last updated:** [December 21, 2016, 3:12pm UTC](https://discuss.elastic.co/t/elasticsearch-oracle-java-dependency/69639 "2016-12-21T15:12:53Z")
We’ve been asked to get back with details on whether Elasticsearch is using any of the licensed components Oracle, other then the pure JRE, which is actually free. I’m trying to see if there is any forum report at the … --- ## [Since Logstash 2.1.1 I am seeing the error 'undefined method close for #\ **Author:** [@jamtur01](https://discuss.elastic.co/u/jamtur01)\ **Replies:** 6\ **Last updated:** [January 20, 2016, 4:08pm UTC](https://discuss.elastic.co/t/since-logstash-2-1-1-i-am-seeing-the-error-undefined-method-close-for-manticore-client-when-ls-starts/36943 "2016-01-20T16:08:24Z") Since i upgraded to Logstash 2.1.1 I am seeing the following when LS starts: {:timestamp=\>"2015-12-11T06:01:55.371000+0000", :message=\>"undefined method close' for #", :class=\>"NoMethodError", :backtrace=\>\["/opt/logsta… --- ## [Mutate gsub json with backslash](https://discuss.elastic.co/t/mutate-gsub-json-with-backslash/176981)
**Author:** [@stash2logs](https://discuss.elastic.co/u/stash2logs)\ **Replies:** 5\ **Last updated:** [April 16, 2019, 12:30pm UTC](https://discuss.elastic.co/t/mutate-gsub-json-with-backslash/176981 "2019-04-16T12:30:06Z")
{\\n"protocol":"HTTP/1.1",\\n"remote\_addr":"127.0.0.1"} I have the follwing json message and I'm looking to use the mutate gsub filter to do two things: 1 - remove the \\n 2 - remove the \\ (backslashes) Ideally i would … --- ## [Elastic Agent - Memory Usage](https://discuss.elastic.co/t/elastic-agent-memory-usage/294463)
**Author:** [@Huber](https://discuss.elastic.co/u/Huber)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 11:45pm UTC](https://discuss.elastic.co/t/elastic-agent-memory-usage/294463 "2022-01-14T23:45:42Z")
Hello, Is it normal that Elastic Agent utilizes around 500MB of ram on Windows 10 Endpoint Version 7.16.3 I have disabled for test Detection/Protection in the Policy. I have disabled all events collection DNS, Netwo… --- ## [Fuzziness not work with bool\_prefix multi\_match (search-as-you-type)](https://discuss.elastic.co/t/fuzziness-not-work-with-bool-prefix-multi-match-search-as-you-type/229602)
**Author:** [@andrewbien](https://discuss.elastic.co/u/andrewbien)\ **Replies:** 4\ **Last updated:** [April 24, 2020, 3:59pm UTC](https://discuss.elastic.co/t/fuzziness-not-work-with-bool-prefix-multi-match-search-as-you-type/229602 "2020-04-24T15:59:20Z")
Hi everyone. I struggling with a problem is that fuzziness not work with multi\_match bool\_prefix query , but I found on document that fuzziness option was supported: https://www.elastic.co/guide/en/elasticsearch/refere… --- ## [Elasticsearch did not respond with license information](https://discuss.elastic.co/t/elasticsearch-did-not-respond-with-license-information/194192)
**Author:** [@Sohan\_J](https://discuss.elastic.co/u/Sohan_J)\ **Replies:** 4\ **Last updated:** [August 8, 2019, 5:26am UTC](https://discuss.elastic.co/t/elasticsearch-did-not-respond-with-license-information/194192 "2019-08-08T05:26:34Z")
My ES yml file: ---------------------------------- Cluster ----------------------------------- Use a descriptive name for your cluster: cluster.name: test-app-cluster ------------------------------------ Node ------… --- ## [Using index template to read a field as date](https://discuss.elastic.co/t/using-index-template-to-read-a-field-as-date/145322)
**Author:** [@Jonathan\_Tan](https://discuss.elastic.co/u/Jonathan_Tan)\ **Replies:** 4\ **Last updated:** [August 22, 2018, 12:30pm UTC](https://discuss.elastic.co/t/using-index-template-to-read-a-field-as-date/145322 "2018-08-22T12:30:59Z")
Hi, I'm attempting to take a JSON-based log, and use Filebeat to stick it directly into Elasticsearch. I'm trying - at this point - not to include Logstash yet, AND also attempting to get a better understanding of what … --- ## [Reindex API and wait-for-completion task return](https://discuss.elastic.co/t/reindex-api-and-wait-for-completion-task-return/63547)
**Author:** [@Isaias\_Barroso](https://discuss.elastic.co/u/Isaias_Barroso)\ **Replies:** 2\ **Last updated:** [October 20, 2016, 9:32pm UTC](https://discuss.elastic.co/t/reindex-api-and-wait-for-completion-task-return/63547 "2016-10-20T21:32:13Z")
Hi all. I've read on document API for Reindex (5.x) that if I pass ?wait-for-completion=false for \_reindex as URL parameter a task will be returned to be used for get status. If the request contains wait\_for\_completi… --- ## [How to pull data data from 2 kafka topics using logstash and index the data in two separate index in elasticsearch](https://discuss.elastic.co/t/how-to-pull-data-data-from-2-kafka-topics-using-logstash-and-index-the-data-in-two-separate-index-in-elasticsearch/114977)
**Author:** [@kamalbeg](https://discuss.elastic.co/u/kamalbeg)\ **Replies:** 2\ **Last updated:** [January 12, 2018, 5:51pm UTC](https://discuss.elastic.co/t/how-to-pull-data-data-from-2-kafka-topics-using-logstash-and-index-the-data-in-two-separate-index-in-elasticsearch/114977 "2018-01-12T17:51:55Z")
I have a question regarding Kafka. I have create two topics called first\_topic and second\_topic I have a logstash-kafka.conf file input { kafka { bootstrap\_servers =\> "servera:9092" topics =\> \["first\_topic"\] } } o… --- ## [Translate multiple fields in an event](https://discuss.elastic.co/t/translate-multiple-fields-in-an-event/78502)
**Author:** [@tsangdl](https://discuss.elastic.co/u/tsangdl)\ **Replies:** 4\ **Last updated:** [March 16, 2017, 4:35am UTC](https://discuss.elastic.co/t/translate-multiple-fields-in-an-event/78502 "2017-03-16T04:35:29Z")
Hi, I have events going into logstash. Each event has a number of fields two of which I would like to translate The fields are customer\_id and integrator\_id. I would like to add fields customer\_name and integrator\_name… --- ## [Elasticsearch 3 node cluster failing if master is down second time](https://discuss.elastic.co/t/elasticsearch-3-node-cluster-failing-if-master-is-down-second-time/87348)
**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\ **Replies:** 8\ **Last updated:** [May 28, 2017, 8:53pm UTC](https://discuss.elastic.co/t/elasticsearch-3-node-cluster-failing-if-master-is-down-second-time/87348 "2017-05-28T20:53:31Z")
I have a 3 node cluster and wanted to know the best possible configuration of elastic search. Below is the configuration I have tried. Server 1,2,3 node.name : node1 \[ node2, node3 \] node.master: true node.data: true … --- ## [Elasticsearch Logstash importing very large JSON files](https://discuss.elastic.co/t/elasticsearch-logstash-importing-very-large-json-files/37015)
**Author:** [@bgow](https://discuss.elastic.co/u/bgow)\ **Replies:** 3\ **Last updated:** [April 4, 2017, 8:29am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-importing-very-large-json-files/37015 "2017-04-04T08:29:36Z")
I'm trying to import some very large JSON files (up to 80GB / file) into Elasticsearch and have tried a couple different approaches but neither is giving me an efficient working solution: 1) Using the BULK API - I rece… --- ## [Logs that do not match the Filter with IF statement](https://discuss.elastic.co/t/logs-that-do-not-match-the-filter-with-if-statement/44247)
**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\ **Replies:** 5\ **Last updated:** [March 14, 2016, 6:44pm UTC](https://discuss.elastic.co/t/logs-that-do-not-match-the-filter-with-if-statement/44247 "2016-03-14T18:44:59Z")
I have different filters for different fields in the messages and separate them with if statements. Now I have been trying to add one final section where none of the logs match and try to filter these through generic fie… --- ## [Best elasticsearch architecture for multi-site](https://discuss.elastic.co/t/best-elasticsearch-architecture-for-multi-site/24200)
**Author:** [@vhj](https://discuss.elastic.co/u/vhj)\ **Replies:** 3\ **Last updated:** [June 26, 2015, 8:52am UTC](https://discuss.elastic.co/t/best-elasticsearch-architecture-for-multi-site/24200 "2015-06-26T08:52:47Z")
Hi, The definitive guide specifically advises against having a cluster spanning more than one data center, and certainly not across continents. What then is the best architecture for solutions that use elasticsearch … --- ## [Add\_resource\_metadata.namespace.include\_annotations doesn't work anymore in 7.10.x?](https://discuss.elastic.co/t/add-resource-metadata-namespace-include-annotations-doesnt-work-anymore-in-7-10-x/261878)
**Author:** [@lobachpavel](https://discuss.elastic.co/u/lobachpavel)\ **Replies:** 1\ **Last updated:** [February 8, 2021, 11:59am UTC](https://discuss.elastic.co/t/add-resource-metadata-namespace-include-annotations-doesnt-work-anymore-in-7-10-x/261878 "2021-02-08T11:59:14Z")
While migrating from filebeat 7.6.0 to 7.10.x we discovered that we can not pull kubernetes namespace annotations into events anymore , here is the minimal example config: filebeat.yml: | filebeat.autodisc… --- ## [Kibana data directory](https://discuss.elastic.co/t/kibana-data-directory/168393)
**Author:** [@stuartdsmith](https://discuss.elastic.co/u/stuartdsmith)\ **Replies:** 5\ **Last updated:** [March 19, 2019, 4:51pm UTC](https://discuss.elastic.co/t/kibana-data-directory/168393 "2019-03-19T16:51:02Z")
I'd like to change our kibana data directory - which I understand can be achieved by setting path.data. This means kibana now looks for the keystore in this directory. However kibana-keystore.bat create still creates t… --- ## [Agent stuck on "Updating" when enrolling](https://discuss.elastic.co/t/agent-stuck-on-updating-when-enrolling/277703)
**Author:** [@greggailly](https://discuss.elastic.co/u/greggailly)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 11:26am UTC](https://discuss.elastic.co/t/agent-stuck-on-updating-when-enrolling/277703 "2021-07-06T11:26:18Z")
Hi everybody, After updating our stack to version 7.13.2 we have been experiencing problems when trying to enroll agents to Fleet. Since fleet-server was introduced we added it to our stack and behind our reverse proxy… --- ## [Timelion plugin installation](https://discuss.elastic.co/t/timelion-plugin-installation/51232)
**Author:** [@snuids](https://discuss.elastic.co/u/snuids)\ **Replies:** 5\ **Last updated:** [July 20, 2016, 7:04pm UTC](https://discuss.elastic.co/t/timelion-plugin-installation/51232 "2016-07-20T19:04:52Z")
Hi, I was not able to install the timelion plugin in Kibana. I checked with multiple Kibana versions and multiple Operating systems. On a Mac, I get: snuids@AMAMBookPro2 /Developer/Applications/ElasticSearch/kiban… --- ## [Install Elasticsearch on Plesk](https://discuss.elastic.co/t/install-elasticsearch-on-plesk/199279)
**Author:** [@Mike\_Fritzsche](https://discuss.elastic.co/u/Mike_Fritzsche)\ **Replies:** 2\ **Last updated:** [September 12, 2019, 10:33pm UTC](https://discuss.elastic.co/t/install-elasticsearch-on-plesk/199279 "2019-09-12T22:33:58Z")
Hi NG, I want to install Elasticsearch 6.8\* on my Ubuntu server under Plesk. What is the way to install without conflicts? Thanks --- ## [Elasticsearch install error: dpkg: error processing package elasticsearch (--install)](https://discuss.elastic.co/t/elasticsearch-install-error-dpkg-error-processing-package-elasticsearch-install/185098)
**Author:** [@Janith](https://discuss.elastic.co/u/Janith)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 11:25am UTC](https://discuss.elastic.co/t/elasticsearch-install-error-dpkg-error-processing-package-elasticsearch-install/185098 "2019-06-13T11:25:54Z")
After removing the existing elasticsearch version 6. I got an error in installing elasticsearch version 7. Here is the error message: #dpkg -i elasticsearch-7.1.1-amd64.deb (Reading database ... 113568 files and direc… --- ## [Deleting Old Monitoring Indices](https://discuss.elastic.co/t/deleting-old-monitoring-indices/90987)
**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\ **Replies:** 2\ **Last updated:** [June 28, 2017, 10:36am UTC](https://discuss.elastic.co/t/deleting-old-monitoring-indices/90987 "2017-06-28T10:36:52Z")
With reference to the following post: I've noticed today that my monitoring cluster (single node) isn't deleting any old indices. I haven't changed any of the default settings ad I now find myself with indices going ba… --- ## [I want to know why the indices.id\_field\_data.enabled configuration is turned off by default](https://discuss.elastic.co/t/i-want-to-know-why-the-indices-id-field-data-enabled-configuration-is-turned-off-by-default/339338)
**Author:** [@Kurt\_Rudolph](https://discuss.elastic.co/u/Kurt_Rudolph)\ **Replies:** 1\ **Last updated:** [July 26, 2023, 5:50pm UTC](https://discuss.elastic.co/t/i-want-to-know-why-the-indices-id-field-data-enabled-configuration-is-turned-off-by-default/339338 "2023-07-26T17:50:36Z")
This topic got automatically closed without an answer I want to know why the indices.id\_field\_data.enabled configuration is turned off by default I'm evaluating the impacts of upgrading from v7 -\> v8 and found an issue… --- ## [Read error looking for ack: read tcp x.x.x.x:8080 i/o timeout](https://discuss.elastic.co/t/read-error-looking-for-ack-read-tcp-x-x-x-x-8080-i-o-timeout/24226)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 7\ **Last updated:** [June 29, 2015, 7:51am UTC](https://discuss.elastic.co/t/read-error-looking-for-ack-read-tcp-x-x-x-x-8080-i-o-timeout/24226 "2015-06-29T07:51:39Z")
I'm getting this error message on Logstash-Forwarder. Since the logs are not sent to Logstash-Server. I have cross verified the Network connection. There is no blocking / Disturbance in Network \[ Firewall, Server iptable… --- ## [使用RestHighLevelClient时单个索引速度很慢](https://discuss.elastic.co/t/resthighlevelclient/170293)
**Author:** [@PearceDuan](https://discuss.elastic.co/u/PearceDuan)\ **Replies:** 2\ **Last updated:** [March 15, 2019, 7:19am UTC](https://discuss.elastic.co/t/resthighlevelclient/170293 "2019-03-15T07:19:31Z")
Elastic版本： 6.6.1 本地（4核,16G）运行单个节点的ES（启动时参数基本都是默认的），同时使用RestHighLevelClient循环写入1000条（每条\<1K）数据，无论是SyncIndex，还是AsyncIndex，发现耗时50s左右，相当于每秒才写入20条 问题： 不考虑bulk操作，这种速度是否正常（感觉太慢）？有没有优化办法？ --- ## [Jira Alert in Watcher](https://discuss.elastic.co/t/jira-alert-in-watcher/33877)
**Author:** [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)\ **Replies:** 7\ **Last updated:** [April 12, 2016, 7:03pm UTC](https://discuss.elastic.co/t/jira-alert-in-watcher/33877 "2016-04-12T19:03:36Z")
The product page of Watcher mentions the option to alert Jira. Get Notified the Way You Want Easily set up email alerts when incidents occur, or integrate Watcher into your existing monitoring infrastructure via webho… --- ## [Cannot use non-grouped column error. How to get around this?](https://discuss.elastic.co/t/cannot-use-non-grouped-column-error-how-to-get-around-this/208579)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 4\ **Last updated:** [November 20, 2019, 10:16pm UTC](https://discuss.elastic.co/t/cannot-use-non-grouped-column-error-how-to-get-around-this/208579 "2019-11-20T22:16:43Z")
I'm running the following SQL command as shown below. This command looks at all row between the respective start and date and find the MAX of the TotalCPULoadMIPS field for each day. If i remove the "@timestamp" the SQL… --- ## [Logstash Ruby exceptions](https://discuss.elastic.co/t/logstash-ruby-exceptions/37391)
**Author:** [@Omer\_Uludag](https://discuss.elastic.co/u/Omer_Uludag)\ **Replies:** 4\ **Last updated:** [December 16, 2015, 7:25pm UTC](https://discuss.elastic.co/t/logstash-ruby-exceptions/37391 "2015-12-16T19:25:56Z")
Hello together, I have the following Logstash pipeline: input { file { path =\> "/test/home.w10\_vinfo-sg-war.log.\*" start\_position =\> "beginning" exclude =\> "\*.gz" exclude =\> "\*.snappy" } } filter{ xml { … --- ## [error=\>Worker loop initialization error, "Missing Filter End Vertex"](https://discuss.elastic.co/t/error-worker-loop-initialization-error-missing-filter-end-vertex/232928)
**Author:** [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\ **Replies:** 3\ **Last updated:** [May 17, 2020, 10:25am UTC](https://discuss.elastic.co/t/error-worker-loop-initialization-error-missing-filter-end-vertex/232928 "2020-05-17T10:25:13Z")
Hi there, Run the latest version of Logstash in Kube here. logstash crashes when starting due to pipline problem. apiVersion: v1 kind: ConfigMap metadata: name: sample-logstash-configmap namespace: elastic-monitoring … --- ## [Error - Manticore::SocketException: Connection refused](https://discuss.elastic.co/t/error-manticore-socketexception-connection-refused/46475)
**Author:** [@Pradyumna\_Joshi](https://discuss.elastic.co/u/Pradyumna_Joshi)\ **Replies:** 1\ **Last updated:** [April 6, 2016, 6:48am UTC](https://discuss.elastic.co/t/error-manticore-socketexception-connection-refused/46475 "2016-04-06T06:48:50Z")
I am trying to parse Bro IDS logs using ELK stack and getting this error: Connection refused {:class=\>"Manticore::SocketException", :level=\>:error} Connection refused {:class=\>"Manticore::SocketException", :level=\>:err… --- ## [Which index(element) of an array are the ones that matched in highlight search results?](https://discuss.elastic.co/t/which-index-element-of-an-array-are-the-ones-that-matched-in-highlight-search-results/74019)
**Author:** [@jjsuway](https://discuss.elastic.co/u/jjsuway)\ **Replies:** 2\ **Last updated:** [February 7, 2017, 4:51am UTC](https://discuss.elastic.co/t/which-index-element-of-an-array-are-the-ones-that-matched-in-highlight-search-results/74019 "2017-02-07T04:51:29Z")
Which index(element) of an array are the ones that matched in highlight search results ? I'm using the elasticsearch.js of the elasticsearch 5.1.1 . The data item is as follows: { "data" : \[{ "gra… --- ## [Index pattern not returning results](https://discuss.elastic.co/t/index-pattern-not-returning-results/123629)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 8\ **Last updated:** [March 14, 2018, 8:26pm UTC](https://discuss.elastic.co/t/index-pattern-not-returning-results/123629 "2018-03-14T20:26:29Z")
We have a couple time series indexes that have some overlap in name that require a more-complex-than-standard index pattern in order to target a specific index. For example we have an index called this-is-my-index-2018.0… --- ## [Extract a subfield value to display on Kibana](https://discuss.elastic.co/t/extract-a-subfield-value-to-display-on-kibana/125800)
**Author:** [@arun3](https://discuss.elastic.co/u/arun3)\ **Replies:** 5\ **Last updated:** [March 28, 2018, 7:30am UTC](https://discuss.elastic.co/t/extract-a-subfield-value-to-display-on-kibana/125800 "2018-03-28T07:30:04Z")
Hi, Below is the content of a field say "Field1" when we do Discover with an index on Kibana dashboard. I want to extract value of a particular subfield like Request Size or Request IP or any other and visualize on Kib… --- ## [Difference between Hits and Hits(total)](https://discuss.elastic.co/t/difference-between-hits-and-hits-total/326798)
**Author:** [@joerg55](https://discuss.elastic.co/u/joerg55)\ **Replies:** 2\ **Last updated:** [March 2, 2023, 9:18am UTC](https://discuss.elastic.co/t/difference-between-hits-and-hits-total/326798 "2023-03-02T09:18:56Z")
Hi at all, I'm new here and am trying to create a few charts with vega-lite. With some help from here some bars are to be seen. But I have a problem with the amount of records wich are given from the request. Although m… --- ## [Exiting: Error while initializing input: can not convert 'string' into 'bool' accessing 'filebeat.inputs.0.enabled' (source:'/etc/filebeat/filebeat.yml')](https://discuss.elastic.co/t/exiting-error-while-initializing-input-can-not-convert-string-into-bool-accessing-filebeat-inputs-0-enabled-source-etc-filebeat-filebeat-yml/182841)
**Author:** [@iiqq8888](https://discuss.elastic.co/u/iiqq8888)\ **Replies:** 3\ **Last updated:** [May 27, 2019, 9:47am UTC](https://discuss.elastic.co/t/exiting-error-while-initializing-input-can-not-convert-string-into-bool-accessing-filebeat-inputs-0-enabled-source-etc-filebeat-filebeat-yml/182841 "2019-05-27T09:47:47Z")
Hi All I am new ELK user, and I install Elasticsearch 7.1,Kibana 7.1,Filebeat 7.1 in Redhat 6.8 by vmware. I use default config of elasticsearch.yml ,kibana. filebeat.yml below configuration file. #==================… --- ## [Kibana - Request Timeout after 30000ms at /usr/share/kibana/node\_modules/elasticsearch/src/lib/transport.js:355:15](https://discuss.elastic.co/t/kibana-request-timeout-after-30000ms-at-usr-share-kibana-node-modules-elasticsearch-src-lib-transport-js15/184436)
**Author:** [@Kamil\_Stars](https://discuss.elastic.co/u/Kamil_Stars)\ **Replies:** 2\ **Last updated:** [June 6, 2019, 6:12am UTC](https://discuss.elastic.co/t/kibana-request-timeout-after-30000ms-at-usr-share-kibana-node-modules-elasticsearch-src-lib-transport-js15/184436 "2019-06-06T06:12:30Z")
Fresh installment of Kibana (On redhat 7.6 (64bit) via yum) starts, but is restarting every minute. Before it restarted every 5 seconds, but i fixed it after changing /etc/fstab to allow noexec on /var cause it is needed… --- ## [ElasticSearch InnerHits Java API causing NPE](https://discuss.elastic.co/t/elasticsearch-innerhits-java-api-causing-npe/25532)
**Author:** [@bevans88](https://discuss.elastic.co/u/bevans88)\ **Replies:** 4\ **Last updated:** [July 15, 2015, 9:54am UTC](https://discuss.elastic.co/t/elasticsearch-innerhits-java-api-causing-npe/25532 "2015-07-15T09:54:17Z")
I'm currently using the InnerHits API (In Java) to return some child documents, and it appears that the documents being returned fail to have a shard set on the SearchHit (Not the Inner document SearchHits, but the docum… --- ## [How to solve java.lang.NoSuchFieldError: LUCENE\_5\_2\_1](https://discuss.elastic.co/t/how-to-solve-java-lang-nosuchfielderror-lucene-5-2-1/142076)
**Author:** [@PinkBoxerZ](https://discuss.elastic.co/u/PinkBoxerZ)\ **Replies:** 6\ **Last updated:** [July 30, 2018, 8:31am UTC](https://discuss.elastic.co/t/how-to-solve-java-lang-nosuchfielderror-lucene-5-2-1/142076 "2018-07-30T08:31:20Z")
So I'm running elasticsearch 6.3.1 under a maven project with no other dependencies than \ \org.elasticsearch.client\ \transport\ \6.3.1\ **Author:** [@Shivanshu\_Bagga](https://discuss.elastic.co/u/Shivanshu_Bagga)\ **Replies:** 5\ **Last updated:** [December 28, 2017, 3:12pm UTC](https://discuss.elastic.co/t/encrypt-secure-elasticsearchs-password-in-logstash-conf-file/112549 "2017-12-28T15:12:50Z") I'm using x-pack to secure ELK stack , I don't want to specify plain text "username" and "password" in logstash.conf for elasticsearch output plugin. Is there any way to do that? output { elasticsearch { hosts =\> "ho… --- ## [Elasticsearch 6.7.0 Homebrew install macOS 10.14.4 fails to run ERROR: Cluster name \[elasticsearch\_nathan\] subdirectory exists in data paths](https://discuss.elastic.co/t/elasticsearch-6-7-0-homebrew-install-macos-10-14-4-fails-to-run-error-cluster-name-elasticsearch-nathan-subdirectory-exists-in-data-paths/174747)
**Author:** [@Nathan\_Sowatskey](https://discuss.elastic.co/u/Nathan_Sowatskey)\ **Replies:** 3\ **Last updated:** [April 1, 2019, 10:08am UTC](https://discuss.elastic.co/t/elasticsearch-6-7-0-homebrew-install-macos-10-14-4-fails-to-run-error-cluster-name-elasticsearch-nathan-subdirectory-exists-in-data-paths/174747 "2019-04-01T10:08:19Z")
I have installed ES on an iMac with macOS 10.14.4, then tried to run it. That failed as shown below. I was expecting this to run as is, as previous installs have run without any configuration required. This is the first … --- ## [Watcher alert on buckets data](https://discuss.elastic.co/t/watcher-alert-on-buckets-data/105041)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 4\ **Last updated:** [October 25, 2017, 11:40am UTC](https://discuss.elastic.co/t/watcher-alert-on-buckets-data/105041 "2017-10-25T11:40:26Z")
Hello all, Sorry if my question is "too basic", but I'm stuck. I'm implementing a prototype in order to detect fraudulent phone calls. I have made a query that given a time interval, returns the total duration of all … --- ## [SocketTimeoutException while retrieving or inserting data into Elastic Search by using Rest High Level Client](https://discuss.elastic.co/t/sockettimeoutexception-while-retrieving-or-inserting-data-into-elastic-search-by-using-rest-high-level-client/191943)
**Author:** [@iAshwinK](https://discuss.elastic.co/u/iAshwinK)\ **Replies:** 1\ **Last updated:** [July 24, 2019, 4:40am UTC](https://discuss.elastic.co/t/sockettimeoutexception-while-retrieving-or-inserting-data-into-elastic-search-by-using-rest-high-level-client/191943 "2019-07-24T04:40:46Z")
I'm facing SocketTimeoutException while retrieving/inserting data from/to elastic. This is happening when there are around 10-30 request/second. These requests are combination of get/put. Here is my elastic configuratio… --- ## [KIbana "Kibana server is not ready yet" -- routing disabled during upgrade](https://discuss.elastic.co/t/kibana-kibana-server-is-not-ready-yet-routing-disabled-during-upgrade/257245)
**Author:** [@OntheHighSeas](https://discuss.elastic.co/u/OntheHighSeas)\ **Replies:** 6\ **Last updated:** [January 26, 2021, 2:50pm UTC](https://discuss.elastic.co/t/kibana-kibana-server-is-not-ready-yet-routing-disabled-during-upgrade/257245 "2021-01-26T14:50:53Z")
Hi. So I think I made the mistake of upgrading to v7.10 Kibana with my cluster routing disabled, and as a result Kibana is stuck migrating. It's constantly producing log messages along the line of; \["info", "savedobj… --- ## [Custom aggregation and script inside of Kibana](https://discuss.elastic.co/t/custom-aggregation-and-script-inside-of-kibana/56817)
**Author:** [@clioharp](https://discuss.elastic.co/u/clioharp)\ **Replies:** 2\ **Last updated:** [August 2, 2016, 8:09am UTC](https://discuss.elastic.co/t/custom-aggregation-and-script-inside-of-kibana/56817 "2016-08-02T08:09:10Z")
Hi all, I'm working on an aggregation for an API management tool and we'd like to see how many requests per user each app using our API tool uses. I've written the code already as an ElasticSearch query but I can't fig… --- ## [Metricbeat CPU information is wrong](https://discuss.elastic.co/t/metricbeat-cpu-information-is-wrong/131390)
**Author:** [@lserranov](https://discuss.elastic.co/u/lserranov)\ **Replies:** 3\ **Last updated:** [May 17, 2018, 8:24pm UTC](https://discuss.elastic.co/t/metricbeat-cpu-information-is-wrong/131390 "2018-05-17T20:24:13Z")
Hello, I'm playing with ELK/Beats to learn and see what is out there. I deployed metricbeat and I can confirm that data is making its way to ELK (In particular I send info to logstash). I'm in kibana UI and I see infor… --- ## [Parsing csv file which has some field/column containing separator as values](https://discuss.elastic.co/t/parsing-csv-file-which-has-some-field-column-containing-separator-as-values/60768)
**Author:** [@Immortal](https://discuss.elastic.co/u/Immortal)\ **Replies:** 3\ **Last updated:** [September 20, 2016, 6:02am UTC](https://discuss.elastic.co/t/parsing-csv-file-which-has-some-field-column-containing-separator-as-values/60768 "2016-09-20T06:02:59Z")
I have following type of entries in csv file: 16 , 5 , 53 , Logging/LoggingError , 2, error while opening file "a,b,c,d": , 10.10.4.219 , serviceA I am trying to parse it using csv pluging as follows: csv { co… --- ## [Filebeat Consumes High CPU:](https://discuss.elastic.co/t/filebeat-consumes-high-cpu/127000)
**Author:** [@Kareny](https://discuss.elastic.co/u/Kareny)\ **Replies:** 4\ **Last updated:** [April 13, 2018, 7:03am UTC](https://discuss.elastic.co/t/filebeat-consumes-high-cpu/127000 "2018-04-13T07:03:34Z")
Hi, I'm using filebeat to watch some bro logs. But the filebeat turns out to consume 60% cpu to catch up with new logs with speed of 8k to 10k eps. Here's my filebeat config: filebeat: prospectors: - close\_inactiv… --- ## [Error while starting Logstash](https://discuss.elastic.co/t/error-while-starting-logstash/105268)
**Author:** [@yoga-sara](https://discuss.elastic.co/u/yoga-sara)\ **Replies:** 3\ **Last updated:** [October 26, 2017, 7:55am UTC](https://discuss.elastic.co/t/error-while-starting-logstash/105268 "2017-10-26T07:55:07Z")
Hello, I'm having ELK 5.6.2.My environment like below, FileBeat(Machine A) =\> Logstash (Machine B) =\> Elasticsearch (Machine B) =\> Kibana (Machine B) I have configured Logstash as output. #--------------------------… [Previous page](https://discuss.elastic.co/top.md?page=452&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=454&per_page=50&period=all)