# Top

**URL:** https://discuss.elastic.co/top.md?page=465&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 466

---

## [ElesticSearch REST HTTP request through redirected URL](https://discuss.elastic.co/t/elesticsearch-rest-http-request-through-redirected-url/227478)

<div class="topic-metadata">

**Author:** [@pierremazieres](https://discuss.elastic.co/u/pierremazieres)\
**Replies:** 2\
**Last updated:** [April 10, 2020, 1:09pm UTC](https://discuss.elastic.co/t/elesticsearch-rest-http-request-through-redirected-url/227478 "2020-04-10T13:09:16Z")

</div>

Hello, I am asking community help because I have some trouble requesting an ElasticSearch database with a special redirected URL. Can you please give an hand on this ? Thank you very much. First, let's start with a f…

---

## [ERROR: Too Many Requests - rejected execution of org.elasticsearch.transport.TransportService on EsThreadPoolExecutor](https://discuss.elastic.co/t/error-too-many-requests-rejected-execution-of-org-elasticsearch-transport-transportservice-on-esthreadpoolexecutor/82541)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 2\
**Last updated:** [April 17, 2017, 8:17am UTC](https://discuss.elastic.co/t/error-too-many-requests-rejected-execution-of-org-elasticsearch-transport-transportservice-on-esthreadpoolexecutor/82541 "2017-04-17T08:17:01Z")

</div>

during peak time once a day i may have +3000 clients indexing documents using NEST client and i see lot of connection fails with these errors. are both related? how can increase resources to avoid this? just have one no…

---

## [No uri handler found for method XDELETE](https://discuss.elastic.co/t/no-uri-handler-found-for-method-xdelete/40202)

<div class="topic-metadata">

**Author:** [@Sreevatsa\_Vadiraj](https://discuss.elastic.co/u/Sreevatsa_Vadiraj)\
**Replies:** 2\
**Last updated:** [January 27, 2016, 9:42am UTC](https://discuss.elastic.co/t/no-uri-handler-found-for-method-xdelete/40202 "2016-01-27T09:42:12Z")

</div>

i have used logstash to fetch data from mysql to elasticsearch in the index:det and type:contact. when i type, curl -XGET 'localhoost:9200/det/contact' ,it gives this error: No uri handler found for index:det and met…

---

## [Noeuds, Shards, Réplique dans elasticsearh](https://discuss.elastic.co/t/noeuds-shards-replique-dans-elasticsearh/65233)

<div class="topic-metadata">

**Author:** [@vacknov](https://discuss.elastic.co/u/vacknov)\
**Replies:** 3\
**Last updated:** [November 8, 2016, 1:57pm UTC](https://discuss.elastic.co/t/noeuds-shards-replique-dans-elasticsearh/65233 "2016-11-08T13:57:15Z")

</div>

Bonjour, Je viens de commencer avec elasticsearch. Mon premier noeud est fonctionnel avec un index. Ce que je ne comprends pas jusqu'ici c'est la notion de sharding et même de réplication propre à elasticsearch. D…

---

## [Kibana does not show nested fields for discover or visualization](https://discuss.elastic.co/t/kibana-does-not-show-nested-fields-for-discover-or-visualization/27004)

<div class="topic-metadata">

**Author:** [@pavan\_bkv](https://discuss.elastic.co/u/pavan_bkv)\
**Replies:** 3\
**Last updated:** [August 12, 2015, 9:52pm UTC](https://discuss.elastic.co/t/kibana-does-not-show-nested-fields-for-discover-or-visualization/27004 "2015-08-12T21:52:13Z")

</div>

I have gathered ES index and node stats using logstash EXEC input and outputting that to another ES cluster. My kibana is sitting on top of the cluster to monitor the stats. I see all the nested fields in Kibana but I ca…

---

## [How to Parse App Log from Apache nifi](https://discuss.elastic.co/t/how-to-parse-app-log-from-apache-nifi/95015)

<div class="topic-metadata">

**Author:** [@john5634](https://discuss.elastic.co/u/john5634)\
**Replies:** 1\
**Last updated:** [July 28, 2017, 10:54pm UTC](https://discuss.elastic.co/t/how-to-parse-app-log-from-apache-nifi/95015 "2017-07-28T22:54:05Z")

</div>

We are trying to get the first 3 fields from a text app log file 2017-07-28 11:40:00,256 WARN \[Timer-Driven Process Thread-7\] o.a.h.c.protocol.ResponseProcessCookies Invalid cookie header: "set-cookie: guest\_id=v1%3A150…

---

## [Kibana as a service in linux](https://discuss.elastic.co/t/kibana-as-a-service-in-linux/61996)

<div class="topic-metadata">

**Author:** [@gperez](https://discuss.elastic.co/u/gperez)\
**Replies:** 4\
**Last updated:** [March 17, 2017, 5:33pm UTC](https://discuss.elastic.co/t/kibana-as-a-service-in-linux/61996 "2017-03-17T17:33:16Z")

</div>

Hi. I installed ELK stack in linux (manjaro). Everything looks good except for kibana service. systemctl status kibana ● kibana.service - Kibana - dashboard for Elasticsearch Loaded: loaded (/usr/lib/systemd/system/…

---

## [Display a date in a Markdown widget?](https://discuss.elastic.co/t/display-a-date-in-a-markdown-widget/180965)

<div class="topic-metadata">

**Author:** [@gbarnett](https://discuss.elastic.co/u/gbarnett)\
**Replies:** 7\
**Last updated:** [May 16, 2019, 5:12pm UTC](https://discuss.elastic.co/t/display-a-date-in-a-markdown-widget/180965 "2019-05-16T17:12:59Z")

</div>

I have a SQL query associated with my Canvas Markdown widget that returns a single value that is a date. I'm struggling to see how to display this date in a Markdown widget. {{MyDate}} doesn't display anything, even th…

---

## [SSL - "no cipher suites in common"](https://discuss.elastic.co/t/ssl-no-cipher-suites-in-common/47685)

<div class="topic-metadata">

**Author:** [@CamHart](https://discuss.elastic.co/u/CamHart)\
**Replies:** 2\
**Last updated:** [April 18, 2016, 8:50pm UTC](https://discuss.elastic.co/t/ssl-no-cipher-suites-in-common/47685 "2016-04-18T20:50:00Z")

</div>

I'm relatively new to setting up SSL. I have my jks keystore file (generated using letsencrypt--see below). sudo su yum install git git clone https://github.com/letsencrypt/letsencrypt cd letsencrypt ./letsencrypt-aut…

---

## [How can I disable elasticsearch from boot auto start](https://discuss.elastic.co/t/how-can-i-disable-elasticsearch-from-boot-auto-start/201717)

<div class="topic-metadata">

**Author:** [@Abdul\_Rahuman](https://discuss.elastic.co/u/Abdul_Rahuman)\
**Replies:** 6\
**Last updated:** [October 3, 2019, 4:03am UTC](https://discuss.elastic.co/t/how-can-i-disable-elasticsearch-from-boot-auto-start/201717 "2019-10-03T04:03:08Z")

</div>

Hi everyone I would like to know how to disable auto start elasticsearch i'm using ubuntu 18.04 and my elasticsearch is running on docker .. I should control my elasticsearch on docker manually not automatically wheneve…

---

## [Filebeat - multiline: Ingest XML's without line feed at end of file](https://discuss.elastic.co/t/filebeat-multiline-ingest-xmls-without-line-feed-at-end-of-file/99021)

<div class="topic-metadata">

**Author:** [@cvanhalt](https://discuss.elastic.co/u/cvanhalt)\
**Replies:** 6\
**Last updated:** [September 18, 2017, 3:22pm UTC](https://discuss.elastic.co/t/filebeat-multiline-ingest-xmls-without-line-feed-at-end-of-file/99021 "2017-09-18T15:22:59Z")

</div>

I want to ingest XML files to the ELK-Stack. I want one event per XML file. These XML files end without line feed, thus filebeat’s multiline codec never forwards the last line of the XML to Logstash. Because of this Logs…

---

## [Add a new field based on a regex capturing group](https://discuss.elastic.co/t/add-a-new-field-based-on-a-regex-capturing-group/28107)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 1\
**Last updated:** [August 26, 2015, 1:50pm UTC](https://discuss.elastic.co/t/add-a-new-field-based-on-a-regex-capturing-group/28107 "2015-08-26T13:50:18Z")

</div>

The logstash events have path field with a value like: /var/log/my-app\_1-2015-08-26.0.log I want a filter that can take the path field and create a new field with just the my-app\_1 part of the path string My attempt …

---

## [Filebeat multiline ignores line if the newline doesn't exist](https://discuss.elastic.co/t/filebeat-multiline-ignores-line-if-the-newline-doesnt-exist/46098)

<div class="topic-metadata">

**Author:** [@danielmotaleite](https://discuss.elastic.co/u/danielmotaleite)\
**Replies:** 3\
**Last updated:** [April 4, 2016, 3:50pm UTC](https://discuss.elastic.co/t/filebeat-multiline-ignores-line-if-the-newline-doesnt-exist/46098 "2016-04-04T15:50:03Z")

</div>

Using filebeat 1.1.2, i have a log event that have 3 lines and starts with the date, but the last line have no newline character. After 5 seconds, filebeat sends the 2 first lines of the event... after 10 minutes i get t…

---

## [OutOfMemory Exceptions during bulk insert](https://discuss.elastic.co/t/outofmemory-exceptions-during-bulk-insert/10093)

<div class="topic-metadata">

**Author:** [@james\_lewis](https://discuss.elastic.co/u/james_lewis)\
**Replies:** 8\
**Last updated:** [December 19, 2012, 9:43am UTC](https://discuss.elastic.co/t/outofmemory-exceptions-during-bulk-insert/10093 "2012-12-19T09:43:33Z")

</div>

Hi, I'm having a problem when performing bulk inserts into elasticsearch. The short story is, I'm inserting batches of about 100,000 documents (70mb) about once every 1.5 minutes and after about 10million documents …

---

## [Error starting Elasticsearch '/var/log/elasticsearch/gc.log': Permission denied](https://discuss.elastic.co/t/error-starting-elasticsearch-var-log-elasticsearch-gc-log-permission-denied/218475)

<div class="topic-metadata">

**Author:** [@ecofintech](https://discuss.elastic.co/u/ecofintech)\
**Replies:** 1\
**Last updated:** [February 10, 2020, 11:05pm UTC](https://discuss.elastic.co/t/error-starting-elasticsearch-var-log-elasticsearch-gc-log-permission-denied/218475 "2020-02-10T23:05:51Z")

</div>

Hello to everyone in the Elastic community. I am having a problem with Elasticsearch after last upgrade to 7.5.2 and installing a plugin. It stopped working and I cannot fix the issue. it seems a problems with permissio…

---

## [Watcher Reports Fail after Certificate Installation](https://discuss.elastic.co/t/watcher-reports-fail-after-certificate-installation/116934)

<div class="topic-metadata">

**Author:** [@ccampbell](https://discuss.elastic.co/u/ccampbell)\
**Replies:** 5\
**Last updated:** [February 8, 2018, 2:47pm UTC](https://discuss.elastic.co/t/watcher-reports-fail-after-certificate-installation/116934 "2018-02-08T14:47:02Z")

</div>

I have a Elasticsearch / Kibana installation at 5.4.1. We had a Watcher report configured to generate a PDF report on a daily basis that worked well until installing a certificate into Elasticsearch (to configure monitor…

---

## [Kibana4 -\> Elasticsearch API using Javascript](https://discuss.elastic.co/t/kibana4-elasticsearch-api-using-javascript/26028)

<div class="topic-metadata">

**Author:** [@SNAFUdowser](https://discuss.elastic.co/u/SNAFUdowser)\
**Replies:** 5\
**Last updated:** [July 28, 2015, 9:03pm UTC](https://discuss.elastic.co/t/kibana4-elasticsearch-api-using-javascript/26028 "2015-07-28T21:03:30Z")

</div>

What I want: In Kibana, make a custom query in Javascript to produce a JSON response containing information like this: "hits": { "total": 8888229, "max\_score": null, "hits": \[ { "\_index": "…

---

## [Problem to install delete-by-query plugin](https://discuss.elastic.co/t/problem-to-install-delete-by-query-plugin/100086)

<div class="topic-metadata">

**Author:** [@joao](https://discuss.elastic.co/u/joao)\
**Replies:** 4\
**Last updated:** [September 12, 2017, 12:02pm UTC](https://discuss.elastic.co/t/problem-to-install-delete-by-query-plugin/100086 "2017-09-12T12:02:36Z")

</div>

Hello, I've a problem to install the delete-by-query plugin. When I try to install the plugin the elasticsearch returns this message: \[root@homologacaoes bin\]# ./elasticsearch-plugin install delete-by-query A tool for…

---

## [Transform single hit into multiple documents with Index action](https://discuss.elastic.co/t/transform-single-hit-into-multiple-documents-with-index-action/145010)

<div class="topic-metadata">

**Author:** [@hardbap](https://discuss.elastic.co/u/hardbap)\
**Replies:** 7\
**Last updated:** [August 23, 2018, 3:03pm UTC](https://discuss.elastic.co/t/transform-single-hit-into-multiple-documents-with-index-action/145010 "2018-08-23T15:03:29Z")

</div>

I'd like to take the hits from the watch and insert each as a new document into a second index. But instead I'm getting a single document (with three timestamps). Reading the docs I know this is supported but I can't fi…

---

## [Advanced filtering for aggregations](https://discuss.elastic.co/t/advanced-filtering-for-aggregations/213320)

<div class="topic-metadata">

**Author:** [@Allard\_Poldermans](https://discuss.elastic.co/u/Allard_Poldermans)\
**Replies:** 3\
**Last updated:** [December 30, 2019, 4:11pm UTC](https://discuss.elastic.co/t/advanced-filtering-for-aggregations/213320 "2019-12-30T16:11:22Z")

</div>

I have an index containing OrderLines in Elastic Search which contains customer name, product name, price. My objective is to create a visualization (datalist) and aggregate by Customer Name, and find the totals for all…

---

## [Kibana dashbord trading candle](https://discuss.elastic.co/t/kibana-dashbord-trading-candle/255600)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 8\
**Last updated:** [November 17, 2020, 1:58pm UTC](https://discuss.elastic.co/t/kibana-dashbord-trading-candle/255600 "2020-11-17T13:58:24Z")

</div>

Hello, giving this example data, Is It possible to make trading candle in kibana? Maybe using timelion? {'crypto.candle.close': '16746.10000000', 'crypto.candle.closeTime': '2020-11-16T22:59:59Z', 'crypto.candle.h…

---

## [Logstash-plugin Installation Error](https://discuss.elastic.co/t/logstash-plugin-installation-error/103928)

<div class="topic-metadata">

**Author:** [@Terry\_Yeo](https://discuss.elastic.co/u/Terry_Yeo)\
**Replies:** 0\
**Last updated:** [October 13, 2017, 4:10pm UTC](https://discuss.elastic.co/t/logstash-plugin-installation-error/103928 "2017-10-13T16:10:36Z")

</div>

I tried to install the google pubsub input and elasticsearch output plugins after I install the logstash, however, it raised out the following error: Error Bundler::InstallError, retrying 1/10 An error occurred while in…

---

## [High system load on one node in three node cluster](https://discuss.elastic.co/t/high-system-load-on-one-node-in-three-node-cluster/239552)

<div class="topic-metadata">

**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\
**Replies:** 6\
**Last updated:** [July 6, 2020, 5:12pm UTC](https://discuss.elastic.co/t/high-system-load-on-one-node-in-three-node-cluster/239552 "2020-07-06T17:12:33Z")

</div>

Hello, I'll detail my cluster specs first Versions: All servers use CentOS 8 and Elasticstack 7.6.1 Logstash nodes: LOGSTASH-BEATS (used for sending beats data to Elasticsearch) LOGSTASH-SYSLOG (used for sending vari…

---

## [Problem with colon ':' in fieldname. Where can I find naming guidelines?](https://discuss.elastic.co/t/problem-with-colon-in-fieldname-where-can-i-find-naming-guidelines/5437)

<div class="topic-metadata">

**Author:** [@vinhphu1711](https://discuss.elastic.co/u/vinhphu1711)\
**Replies:** 7\
**Last updated:** [September 23, 2011, 11:19pm UTC](https://discuss.elastic.co/t/problem-with-colon-in-fieldname-where-can-i-find-naming-guidelines/5437 "2011-09-23T23:19:44Z")

</div>

Hi, Firstly, many thanks to Kimchy for very cool stuff. I have a small (hopefully not silly) question. We attempted to use colon in a field name. Nothing strange happened until we tried to pass that field name to "fi…

---

## [Logstash Date filter default timezone](https://discuss.elastic.co/t/logstash-date-filter-default-timezone/27293)

<div class="topic-metadata">

**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\
**Replies:** 4\
**Last updated:** [August 13, 2015, 8:52pm UTC](https://discuss.elastic.co/t/logstash-date-filter-default-timezone/27293 "2015-08-13T20:52:03Z")

</div>

Hi, Following is the timezone setting documentation for Logstash Date filter. What is meant by platform default in the description? Does it mean the timezone of the server on which the Logstash is running? Timezone …

---

## [Missing results from search](https://discuss.elastic.co/t/missing-results-from-search/107521)

<div class="topic-metadata">

**Author:** [@Aurelien\_3](https://discuss.elastic.co/u/Aurelien_3)\
**Replies:** 6\
**Last updated:** [November 16, 2017, 5:12pm UTC](https://discuss.elastic.co/t/missing-results-from-search/107521 "2017-11-16T17:12:16Z")

</div>

Hello all, As I've scaled my cluster and the size of my data, I'm very much wondering how ES handles the search ! I'm still stuck on ES 1.7.2 (difficult to handle migration to a more recent version), on 6 servers with …

---

## [Can't find my ES logs](https://discuss.elastic.co/t/cant-find-my-es-logs/14017)

<div class="topic-metadata">

**Author:** [@thealy](https://discuss.elastic.co/u/thealy)\
**Replies:** 7\
**Last updated:** [October 21, 2013, 10:07pm UTC](https://discuss.elastic.co/t/cant-find-my-es-logs/14017 "2013-10-21T22:07:43Z")

</div>

New guy running ES 0.90.3 on RedHat, with 7 nodes. But on all my RedHat nodes, which are running fine apparently, there are no logs being written in the directory specified in elasticsearch.yml by path.logs: /ela…

---

## [Filebeat conditional output logstash](https://discuss.elastic.co/t/filebeat-conditional-output-logstash/128756)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 3\
**Last updated:** [April 23, 2018, 9:38am UTC](https://discuss.elastic.co/t/filebeat-conditional-output-logstash/128756 "2018-04-23T09:38:43Z")

</div>

Filebeat 6.2 I am using filebeat to pick up two files and send them to two different logstash endpoints. My config looks like: --- filebeat.prospectors: - type: log enabled: true paths: - path/to/log1.log m…

---

## [How to group similar messages on a chart](https://discuss.elastic.co/t/how-to-group-similar-messages-on-a-chart/155080)

<div class="topic-metadata">

**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\
**Replies:** 2\
**Last updated:** [November 5, 2018, 12:28pm UTC](https://discuss.elastic.co/t/how-to-group-similar-messages-on-a-chart/155080 "2018-11-05T12:28:45Z")

</div>

Hi. We are sending our application logs directly to elasticsearch and visualizing them in some graphs. But some log messages are about the same thing, just some parts are different. So we need to group this messages by t…

---

## [HA/redundancy on Logstash when pulling data](https://discuss.elastic.co/t/ha-redundancy-on-logstash-when-pulling-data/295754)

<div class="topic-metadata">

**Author:** [@jdswifty](https://discuss.elastic.co/u/jdswifty)\
**Replies:** 2\
**Last updated:** [February 8, 2022, 2:17pm UTC](https://discuss.elastic.co/t/ha-redundancy-on-logstash-when-pulling-data/295754 "2022-02-08T14:17:17Z")

</div>

Looking to see how others might have approached this topic in the past. For examples sake I have 2 logstash nodes running in a hot/cold standby mode that run the exact same (centrally managed) pipelines that pull data f…

---

## [java.lang.IllegalArgumentException: no accounts of type \[email\] configured. Please set up an account using the \[xpack.notification.email\] settings](https://discuss.elastic.co/t/java-lang-illegalargumentexception-no-accounts-of-type-email-configured-please-set-up-an-account-using-the-xpack-notification-email-settings/123798)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 7\
**Last updated:** [April 12, 2018, 3:28pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-no-accounts-of-type-email-configured-please-set-up-an-account-using-the-xpack-notification-email-settings/123798 "2018-04-12T15:28:09Z")

</div>

I followed Email Action | X-Pack for the Elastic Stack \[6.2\] | Elastic, yet keep getting following error: esd4 | \[2018-03-13T19:24:15,542\]\[ERROR\]\[o.e.x.w.a.e.ExecutableEmailAction\] \[esd4\] failed to execute …

---

## [Cannot manage nested fields](https://discuss.elastic.co/t/cannot-manage-nested-fields/88293)

<div class="topic-metadata">

**Author:** [@Nikolay\_Petrov](https://discuss.elastic.co/u/Nikolay_Petrov)\
**Replies:** 8\
**Last updated:** [June 8, 2017, 2:02pm UTC](https://discuss.elastic.co/t/cannot-manage-nested-fields/88293 "2017-06-08T14:02:47Z")

</div>

Hi, could you please help to understand why removing of nested fields from 'grok' and 'mutate' is not working in my case, or how to remove them properly via filter settings, or any well know best practices regarding thi…

---

## [Unable to get mysql stats using packet beats](https://discuss.elastic.co/t/unable-to-get-mysql-stats-using-packet-beats/29719)

<div class="topic-metadata">

**Author:** [@tarunsapra](https://discuss.elastic.co/u/tarunsapra)\
**Replies:** 8\
**Last updated:** [September 22, 2015, 11:26am UTC](https://discuss.elastic.co/t/unable-to-get-mysql-stats-using-packet-beats/29719 "2015-09-22T11:26:07Z")

</div>

I can't seem to get packet beat shipper to send mysql stats to ES. I went through this thread - https://discuss.elastic.co/t/unable-to-get-mysql-performance-in-packetbeat/1450 and tried the following steps https://d…

---

## [NoSuchMethodError: org.elasticsearch.action.search.SearchResponse.fromXContent](https://discuss.elastic.co/t/nosuchmethoderror-org-elasticsearch-action-search-searchresponse-fromxcontent/144146)

<div class="topic-metadata">

**Author:** [@Vladimir\_Fedotov](https://discuss.elastic.co/u/Vladimir_Fedotov)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 9:22am UTC](https://discuss.elastic.co/t/nosuchmethoderror-org-elasticsearch-action-search-searchresponse-fromxcontent/144146 "2018-08-17T09:22:07Z")

</div>

Hello, I'm trying to use the high level API like this: final CredentialsProvider credentialsProvider = new BasicCredentialsProvider(); credentialsProvider.setCredentials(AuthScope.ANY, new UsernamePa…

---

## [Logstash adds extra new line characters](https://discuss.elastic.co/t/logstash-adds-extra-new-line-characters/60660)

<div class="topic-metadata">

**Author:** [@andreys](https://discuss.elastic.co/u/andreys)\
**Replies:** 6\
**Last updated:** [November 16, 2016, 4:47pm UTC](https://discuss.elastic.co/t/logstash-adds-extra-new-line-characters/60660 "2016-11-16T16:47:46Z")

</div>

I am using next configuration file input { stdin { codec =\> multiline { pattern =\> "%{APEX\_TIMESTAMP}" negate =\> true what =\> "previous" } } } filter { grok { patterns\_dir =\> \["/etc/…

---

## [Terms Aggregation in kibana Visualization - keyword field not found](https://discuss.elastic.co/t/terms-aggregation-in-kibana-visualization-keyword-field-not-found/115693)

<div class="topic-metadata">

**Author:** [@nampord](https://discuss.elastic.co/u/nampord)\
**Replies:** 2\
**Last updated:** [January 18, 2018, 10:57am UTC](https://discuss.elastic.co/t/terms-aggregation-in-kibana-visualization-keyword-field-not-found/115693 "2018-01-18T10:57:42Z")

</div>

Hi when defining a mapping as PUT spl { "mappings": { "spl": { "properties": { "list": { "type": "keyword" } } } } } The fields selection in the visualization / aggreg…

---

## [Is there an approximate release date for 2.0](https://discuss.elastic.co/t/is-there-an-approximate-release-date-for-2-0/1571)

<div class="topic-metadata">

**Author:** [@roytmana](https://discuss.elastic.co/u/roytmana)\
**Replies:** 2\
**Last updated:** [July 15, 2015, 11:36am UTC](https://discuss.elastic.co/t/is-there-an-approximate-release-date-for-2-0/1571 "2015-07-15T11:36:15Z")

</div>

I wonder if there are any target date for 2.0 release. even a ballpark would be very useful

---

## [Failed to start logstash - invalid dictionary format for translate plugin](https://discuss.elastic.co/t/failed-to-start-logstash-invalid-dictionary-format-for-translate-plugin/49088)

<div class="topic-metadata">

**Author:** [@thomas.dotreppe](https://discuss.elastic.co/u/thomas.dotreppe)\
**Replies:** 4\
**Last updated:** [May 9, 2016, 3:32pm UTC](https://discuss.elastic.co/t/failed-to-start-logstash-invalid-dictionary-format-for-translate-plugin/49088 "2016-05-09T15:32:38Z")

</div>

I'm using translate to convert protocols ID (and other stuff) to a name. The configuration for this piece look like: translate { field =\> "protoid" destination =\> "proto" fallback =\> "Unassigned" d…

---

## [Couldn't Activate Monitoring in 6.3](https://discuss.elastic.co/t/couldnt-activate-monitoring-in-6-3/136131)

<div class="topic-metadata">

**Author:** [@michaelm14](https://discuss.elastic.co/u/michaelm14)\
**Replies:** 1\
**Last updated:** [June 15, 2018, 7:27pm UTC](https://discuss.elastic.co/t/couldnt-activate-monitoring-in-6-3/136131 "2018-06-15T19:27:15Z")

</div>

Following a 6.1 to 6.3 upgrade, monitoring within Kibana now shows an error message: "We couldn't activate monitoring" I've added the following two lines to my Elasticsearch.yml: xpack.monitoring.enabled: true xpack.…

---

## [Set Kibana Memory](https://discuss.elastic.co/t/set-kibana-memory/335472)

<div class="topic-metadata">

**Author:** [@kaismax](https://discuss.elastic.co/u/kaismax)\
**Replies:** 4\
**Last updated:** [June 7, 2023, 7:54pm UTC](https://discuss.elastic.co/t/set-kibana-memory/335472 "2023-06-07T19:54:57Z")

</div>

in kibana 7.17.7, How I can set the Memory for kibana, I edited node.options and set to --max-old-space-size=8192 but when i go "stack monitoring", i found that kibana still showing under "Memory Usage :1.9 GB / 4.0 GB"

---

## [Delete By Query (Dry Run)](https://discuss.elastic.co/t/delete-by-query-dry-run/71308)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 2\
**Last updated:** [January 12, 2017, 2:58pm UTC](https://discuss.elastic.co/t/delete-by-query-dry-run/71308 "2017-01-12T14:58:00Z")

</div>

I was looking to remove some bad fields from my documents and like this functionality but I don't see a dry run, test type option that would report back number of documents that would have been affected https://www.ela…

---

## [Node with zero shards fails to start with error "Node is started with node.data=false, but has shard data"](https://discuss.elastic.co/t/node-with-zero-shards-fails-to-start-with-error-node-is-started-with-node-data-false-but-has-shard-data/205450)

<div class="topic-metadata">

**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\
**Replies:** 3\
**Last updated:** [October 28, 2019, 2:35pm UTC](https://discuss.elastic.co/t/node-with-zero-shards-fails-to-start-with-error-node-is-started-with-node-data-false-but-has-shard-data/205450 "2019-10-28T14:35:10Z")

</div>

I'm trying to remove the data role from one node by first excluding the node from shard allocation with: PUT \_cluster/settings { "transient" : { "cluster.routing.allocation.exclude.\_name" : "node-001" } } When …

---

## [Creating brand new index gets index already exists exception](https://discuss.elastic.co/t/creating-brand-new-index-gets-index-already-exists-exception/13321)

<div class="topic-metadata">

**Author:** [@Tinou\_Bao](https://discuss.elastic.co/u/Tinou_Bao)\
**Replies:** 3\
**Last updated:** [August 25, 2013, 9:58pm UTC](https://discuss.elastic.co/t/creating-brand-new-index-gets-index-already-exists-exception/13321 "2013-08-25T21:58:54Z")

</div>

What I've noticed is after my cluster (0.19.12) has been running for a few days, trying to create a brand new index fails with an index already exists exception. This is a brand new index, with a different, unique na…

---

## [Safely shutting down logstash on AWS auto-scaling group](https://discuss.elastic.co/t/safely-shutting-down-logstash-on-aws-auto-scaling-group/34528)

<div class="topic-metadata">

**Author:** [@jelliott](https://discuss.elastic.co/u/jelliott)\
**Replies:** 0\
**Last updated:** [November 13, 2015, 4:11pm UTC](https://discuss.elastic.co/t/safely-shutting-down-logstash-on-aws-auto-scaling-group/34528 "2015-11-13T16:11:34Z")

</div>

I thought I'd share some work I've done on getting logstash to work better with AWS auto-scaling groups. This should generalize to anyone who has their logstash server(s) automatically stop / reboot for any reason. Th…

---

## [Remove Subfield using ruby](https://discuss.elastic.co/t/remove-subfield-using-ruby/225055)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 5\
**Last updated:** [April 2, 2020, 4:09pm UTC](https://discuss.elastic.co/t/remove-subfield-using-ruby/225055 "2020-04-02T16:09:55Z")

</div>

Anyone knows how to remove the attachment.documentcharacteristic field? using logstash ruby. Here the json data

---

## [Memory usage (Lucene Memory)](https://discuss.elastic.co/t/memory-usage-lucene-memory/29961)

<div class="topic-metadata">

**Author:** [@pavang6](https://discuss.elastic.co/u/pavang6)\
**Replies:** 6\
**Last updated:** [September 25, 2015, 5:33am UTC](https://discuss.elastic.co/t/memory-usage-lucene-memory/29961 "2015-09-25T05:33:56Z")

</div>

Hi , We have two node cluster each node has 32gb memory. One of the node(Master and data node) is using around 85% memory and the other node (only data) is using around 80% memory. On the both the nodes MAX heap size i…

---

## [How to extract a message JSON value using JSON Input under Kibana Visualization](https://discuss.elastic.co/t/how-to-extract-a-message-json-value-using-json-input-under-kibana-visualization/233690)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 3\
**Last updated:** [May 25, 2020, 3:36pm UTC](https://discuss.elastic.co/t/how-to-extract-a-message-json-value-using-json-input-under-kibana-visualization/233690 "2020-05-25T15:36:34Z")

</div>

Below is the message that is captured in my logs and, as of no values/fields are getting extracted. {"browser":"Edge","id":766415199,"status":"SessionCreated"} Can I use JSON Input under Kibana visualization to extract…

---

## [Custom Visualisation - Specify OnClick event handler](https://discuss.elastic.co/t/custom-visualisation-specify-onclick-event-handler/54294)

<div class="topic-metadata">

**Author:** [@mclarkeNICE](https://discuss.elastic.co/u/mclarkeNICE)\
**Replies:** 4\
**Last updated:** [June 13, 2017, 8:13pm UTC](https://discuss.elastic.co/t/custom-visualisation-specify-onclick-event-handler/54294 "2017-06-13T20:13:10Z")

</div>

Greetings Kibana community! I am attempting to determine the "proper" way to specify what happens when the a user clicks a bar in the histogram visualisation. I pulled out the source code and noted the VislibVisType o…

---

## [Logstash not listening to 5044](https://discuss.elastic.co/t/logstash-not-listening-to-5044/277432)

<div class="topic-metadata">

**Author:** [@azid](https://discuss.elastic.co/u/azid)\
**Replies:** 2\
**Last updated:** [July 1, 2021, 4:21am UTC](https://discuss.elastic.co/t/logstash-not-listening-to-5044/277432 "2021-07-01T04:21:54Z")

</div>

Hi Im new to ELK, when I try to transfert data filebeat -\>logstash I got my logstash not listening to port 5044 any help would be appreciated Pipeline : input { beats { port =\> 5044 } } filter { gro…

---

## [Using ElasticSearch as a Object Cache](https://discuss.elastic.co/t/using-elasticsearch-as-a-object-cache/9939)

<div class="topic-metadata">

**Author:** [@Andy\_3](https://discuss.elastic.co/u/Andy_3)\
**Replies:** 2\
**Last updated:** [December 5, 2012, 1:01am UTC](https://discuss.elastic.co/t/using-elasticsearch-as-a-object-cache/9939 "2012-12-05T01:01:27Z")

</div>

We use ElasticSearch to supplement our large legacy DB, and the search features are nice. However we also just need a fast object cache. I'm curious anyone else use ElasticSearch as a cache, like as a replacement…

[Previous page](https://discuss.elastic.co/top.md?page=464&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=466&per_page=50&period=all)
