# Top **URL:** https://discuss.elastic.co/top.md?page=467&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 468 --- ## [Not able to run elasticsearch: elasticsearch dead but subsys locked](https://discuss.elastic.co/t/not-able-to-run-elasticsearch-elasticsearch-dead-but-subsys-locked/96640)
**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\ **Replies:** 1\ **Last updated:** [August 10, 2017, 6:24pm UTC](https://discuss.elastic.co/t/not-able-to-run-elasticsearch-elasticsearch-dead-but-subsys-locked/96640 "2017-08-10T18:24:35Z")
Hi, I installed elasticsearch 5.5.1. After installation , I was able to run it properly on linux machine. Just, I wanted to access it from my remote windows machine. So, I modified /etc/elasticsearch/elasticsearch.yml f… --- ## [How to Handle Publication Failures](https://discuss.elastic.co/t/how-to-handle-publication-failures/38753)
**Author:** [@robinpercy](https://discuss.elastic.co/u/robinpercy)\ **Replies:** 8\ **Last updated:** [January 14, 2016, 5:43pm UTC](https://discuss.elastic.co/t/how-to-handle-publication-failures/38753 "2016-01-14T17:43:19Z")
I'm writing a Beat to pull events from a message queue and publish them via libbeat. If an event fails to publish, I'd like to send it to a dead letter queue. However, from looking at the outputs/elasticsearch/client.go#… --- ## [Understanding Xms Xmx options](https://discuss.elastic.co/t/understanding-xms-xmx-options/4977)
**Author:** [@fucema](https://discuss.elastic.co/u/fucema)\ **Replies:** 3\ **Last updated:** [July 27, 2011, 5:08pm UTC](https://discuss.elastic.co/t/understanding-xms-xmx-options/4977 "2011-07-27T17:08:11Z")
I'm trying to better understand the memory options for Elastic Search. I was pretty confident until I looked at the process details recently. I start a node using this command: bin/elasticsearch -f -Xms5g -Xmx5g H… --- ## [Kafka to ElasticSearch](https://discuss.elastic.co/t/kafka-to-elasticsearch/21012)
**Author:** [@ES\_MacTalk](https://discuss.elastic.co/u/ES_MacTalk)\ **Replies:** 4\ **Last updated:** [May 26, 2015, 5:48am UTC](https://discuss.elastic.co/t/kafka-to-elasticsearch/21012 "2015-05-26T05:48:51Z")
Hi, We are trying to move data from a Kafka Topic to ElasticSearch.We are getting data in JSON format in the Kafka Topic.We are planning to move this data to Elastic Search and then finally visualize using kibana. We a… --- ## [Elasticsearch 6.1.0 Java API search issues](https://discuss.elastic.co/t/elasticsearch-6-1-0-java-api-search-issues/113581)
**Author:** [@Ajit\_Kumar](https://discuss.elastic.co/u/Ajit_Kumar)\ **Replies:** 5\ **Last updated:** [January 19, 2018, 1:53pm UTC](https://discuss.elastic.co/t/elasticsearch-6-1-0-java-api-search-issues/113581 "2018-01-19T13:53:21Z")
I am using ES - 6.1 and corresponding java version of the api. I was able to index the data using the java API. I validated this via kibana. All the mappings were correctly saved but an error comes up when I try to searc… --- ## [Update vs Index](https://discuss.elastic.co/t/update-vs-index/222243)
**Author:** [@Samyak\_Jain](https://discuss.elastic.co/u/Samyak_Jain)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 9:33am UTC](https://discuss.elastic.co/t/update-vs-index/222243 "2020-03-05T09:33:12Z")
Hi, I wanted to know that what is the performance difference between using update api and Index api. Currently in our existing implementation we fetch the document from elasticsearch and update the fields using Reflecti… --- ## [Logstash log4j2.properties configuration for logs rotation](https://discuss.elastic.co/t/logstash-log4j2-properties-configuration-for-logs-rotation/278616)
**Author:** [@Kshema](https://discuss.elastic.co/u/Kshema)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 2:37pm UTC](https://discuss.elastic.co/t/logstash-log4j2-properties-configuration-for-logs-rotation/278616 "2021-07-16T14:37:54Z")
In our application, Logstash plain log file - logstas-plain.log is getting converted to a zip file logstash-plain-\.log.gz each day. The zip files are getting piled up and causing a memory issue. Any help on config… --- ## [Cannot authenticate user through nginx authorization header](https://discuss.elastic.co/t/cannot-authenticate-user-through-nginx-authorization-header/208872)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 5\ **Last updated:** [November 22, 2019, 6:45am UTC](https://discuss.elastic.co/t/cannot-authenticate-user-through-nginx-authorization-header/208872 "2019-11-22T06:45:38Z")
Hi, I want to configure auto login when users hit kibana url. So i created a anonymous user with basic read privileges through API. I checked if the user got created by logging in. it works. but when i add authorization… --- ## [Kibana missing primary shards](https://discuss.elastic.co/t/kibana-missing-primary-shards/272522)
**Author:** [@Ben\_Tang](https://discuss.elastic.co/u/Ben_Tang)\ **Replies:** 7\ **Last updated:** [May 10, 2021, 1:44am UTC](https://discuss.elastic.co/t/kibana-missing-primary-shards/272522 "2021-05-10T01:44:28Z")
I have 2 Kibana nodes and the monitoring page keeps saying missing primary shard GET \_cluster/allocation/explain shows nothing to explain --- ## [Creating data table using group by like clause in Kibana?](https://discuss.elastic.co/t/creating-data-table-using-group-by-like-clause-in-kibana/63352)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 1\ **Last updated:** [October 19, 2016, 8:02pm UTC](https://discuss.elastic.co/t/creating-data-table-using-group-by-like-clause-in-kibana/63352 "2016-10-19T20:02:25Z")
I'm having a dataset fed from my database into an index which I created using logstash. I'm trying to create a table data visualization through Kibana for the data set available. I've got to create a table data in Kiban… --- ## [Grok parse error on custom apache log file](https://discuss.elastic.co/t/grok-parse-error-on-custom-apache-log-file/29703)
**Author:** [@dlb1001](https://discuss.elastic.co/u/dlb1001)\ **Replies:** 5\ **Last updated:** [September 21, 2015, 5:26pm UTC](https://discuss.elastic.co/t/grok-parse-error-on-custom-apache-log-file/29703 "2015-09-21T17:26:32Z")
Hello, I'm trying to set up a filter for a custom apache log. The log entry has two different types of lines, as below: www.bbb.aaa.mil 33.44.112.28 - - \[13/Sep/2015:04:02:37 -0400\] "HEAD /www/default.htm HTTP/1.… --- ## [Terms Aggregation with a Script not working](https://discuss.elastic.co/t/terms-aggregation-with-a-script-not-working/109154)
**Author:** [@PRussell](https://discuss.elastic.co/u/PRussell)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 2:30pm UTC](https://discuss.elastic.co/t/terms-aggregation-with-a-script-not-working/109154 "2017-11-27T14:30:14Z")
In the ES doc under Terms Aggregations, it gives the following on using a script to generate terms for Aggregations: Generating the terms using a script: GET /\_search { "aggs" : { "genres" : { "terms" : { "script"… --- ## [Firing aggregation on field having String as its data type](https://discuss.elastic.co/t/firing-aggregation-on-field-having-string-as-its-data-type/51543)
**Author:** [@Abhay](https://discuss.elastic.co/u/Abhay)\ **Replies:** 2\ **Last updated:** [June 1, 2016, 12:48pm UTC](https://discuss.elastic.co/t/firing-aggregation-on-field-having-string-as-its-data-type/51543 "2016-06-01T12:48:01Z")
I have a use case where I have to fire aggregation on a field having string as its data type. But that field contains numeric as well as alpha-numeric values. { "\_index": "website", "\_type": "b… --- ## [Query string query ngrams and wildcards or fuzziness or proximity searches](https://discuss.elastic.co/t/query-string-query-ngrams-and-wildcards-or-fuzziness-or-proximity-searches/108650)
**Author:** [@adyjayex](https://discuss.elastic.co/u/adyjayex)\ **Replies:** 6\ **Last updated:** [November 25, 2017, 4:51am UTC](https://discuss.elastic.co/t/query-string-query-ngrams-and-wildcards-or-fuzziness-or-proximity-searches/108650 "2017-11-25T04:51:44Z")
Hello, GIven the following analysis settings: "analysis": { "tokenizer": { "ngram\_tokenizer": { "type": "ngram", "min\_gram": 3, "max\_gram": 3, "token\_chars": \[\] … --- ## [Using essql query results a second query against another index](https://discuss.elastic.co/t/using-essql-query-results-a-second-query-against-another-index/327396)
**Author:** [@dreynolds](https://discuss.elastic.co/u/dreynolds)\ **Replies:** 2\ **Last updated:** [March 10, 2023, 6:42pm UTC](https://discuss.elastic.co/t/using-essql-query-results-a-second-query-against-another-index/327396 "2023-03-10T18:42:26Z")
In Canvas I'm attempting to query an index, return the results of a specific column, and then query another index with the results of the original query. An example would be two indices: Index 1: login\_activity; two fi… --- ## [Can't resolve \`ui/registry/vis\_types\` \[7.5\]](https://discuss.elastic.co/t/cant-resolve-ui-registry-vis-types-7-5/215056)
**Author:** [@J\_Gil](https://discuss.elastic.co/u/J_Gil)\ **Replies:** 4\ **Last updated:** [January 23, 2020, 3:27pm UTC](https://discuss.elastic.co/t/cant-resolve-ui-registry-vis-types-7-5/215056 "2020-01-23T15:27:37Z")
According to the current (7.5) documentation for "Developing Visualizations": import { VisFactoryProvider } from 'ui/vis/vis\_factory'; import { VisTypesRegistryProvider } from 'ui/registry/vis\_types'; However, after ge… --- ## [Logstash Output to Elasticsearch Alias using Rollover API](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-alias-using-rollover-api/149385)
**Author:** [@xmatt](https://discuss.elastic.co/u/xmatt)\ **Replies:** 2\ **Last updated:** [September 23, 2018, 6:14pm UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-alias-using-rollover-api/149385 "2018-09-23T18:14:10Z")
Hi there, I've spent several hours searching the wider internet, including a lot of the "elastic" docs and discussion topics but I still haven't been able to find a clear answer to my question. I intend to use an Index… --- ## [Bootstrap logstash 6.1.1 with Error ' sourceloader - No configuration found in the configured sources.'](https://discuss.elastic.co/t/bootstrap-logstash-6-1-1-with-error-sourceloader-no-configuration-found-in-the-configured-sources/112604)
**Author:** [@lovedebug](https://discuss.elastic.co/u/lovedebug)\ **Replies:** 2\ **Last updated:** [January 8, 2018, 3:26am UTC](https://discuss.elastic.co/t/bootstrap-logstash-6-1-1-with-error-sourceloader-no-configuration-found-in-the-configured-sources/112604 "2018-01-08T03:26:40Z")
Hi All I have run the logstash on win10 with multiple piplines and debug enabled. And i have got below errors. I have no idea about it as the debug info is not enough. Regards. \[2017-12-20T17:58:29,823\]\[DEBUG\]\[logs… --- ## [Best practice to ship logs from docker containers](https://discuss.elastic.co/t/best-practice-to-ship-logs-from-docker-containers/129615)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 5\ **Last updated:** [April 27, 2018, 9:24am UTC](https://discuss.elastic.co/t/best-practice-to-ship-logs-from-docker-containers/129615 "2018-04-27T09:24:18Z")
Hi there, Shortly I changed some applications to docker containers. Also running some components of elastic stack in docker now (logstash, kibana). So in general docker containers are logging to stdout, which I can see… --- ## [Connection failed to Elasticsearch: failed to authenticate user](https://discuss.elastic.co/t/connection-failed-to-elasticsearch-failed-to-authenticate-user/116650)
**Author:** [@Rym\_Guerbi\_Michaut](https://discuss.elastic.co/u/Rym_Guerbi_Michaut)\ **Replies:** 6\ **Last updated:** [January 23, 2018, 3:12pm UTC](https://discuss.elastic.co/t/connection-failed-to-elasticsearch-failed-to-authenticate-user/116650 "2018-01-23T15:12:29Z")
Hi there, After installing x-pack for Elasticsearch 6.1 and Logstash and even for Kibana, I'm facing some new problems. I cannot get connected to Elasticsearch. The error generated: \[2018-01-23T11:46:54,606\]\[INFO \]\[o… --- ## [Saving frequently used user favourite filters](https://discuss.elastic.co/t/saving-frequently-used-user-favourite-filters/236290)
**Author:** [@Viktor\_Markvardt](https://discuss.elastic.co/u/Viktor_Markvardt)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 7:53am UTC](https://discuss.elastic.co/t/saving-frequently-used-user-favourite-filters/236290 "2020-06-11T07:53:20Z")
Hi guys, How can I save a favourite filter like a drop-down list? (NOT a QUERY!) Are there any plugins for such purposes? --- ## [Match field to string in IF statement](https://discuss.elastic.co/t/match-field-to-string-in-if-statement/124956)
**Author:** [@No\_Executable](https://discuss.elastic.co/u/No_Executable)\ **Replies:** 1\ **Last updated:** [March 21, 2018, 10:45am UTC](https://discuss.elastic.co/t/match-field-to-string-in-if-statement/124956 "2018-03-21T10:45:22Z")
I am trying to push different log types through the same logstash config file. I have managed to get the log type from the path and filename into a separate field and now I want it to run different sets of configurations… --- ## [Is it possible to drive a kibana dashboard with custom filters?](https://discuss.elastic.co/t/is-it-possible-to-drive-a-kibana-dashboard-with-custom-filters/56049)
**Author:** [@soneymathew](https://discuss.elastic.co/u/soneymathew)\ **Replies:** 4\ **Last updated:** [August 2, 2016, 3:00am UTC](https://discuss.elastic.co/t/is-it-possible-to-drive-a-kibana-dashboard-with-custom-filters/56049 "2016-08-02T03:00:42Z")
Is it possible to drive a kibana dashboard with custom filters ? I mean like have a set of checkboxes which i can select/unselect to change the display results ? My example is this .. I want to create kibana dashboard w… --- ## [How to modify legend values of dashboards using Kibana 4](https://discuss.elastic.co/t/how-to-modify-legend-values-of-dashboards-using-kibana-4/25214)
**Author:** [@Aymen\_Zaghouani](https://discuss.elastic.co/u/Aymen_Zaghouani)\ **Replies:** 1\ **Last updated:** [July 9, 2015, 12:54pm UTC](https://discuss.elastic.co/t/how-to-modify-legend-values-of-dashboards-using-kibana-4/25214 "2015-07-09T12:54:11Z")
When I create a Filters and/or Ranges aggregations, the description shown in the visualisation automatically seems to default to the filter text or range. As this can potentially be a complex string containing field name… --- ## [Convert string field to json](https://discuss.elastic.co/t/convert-string-field-to-json/296478)
**Author:** [@rcts](https://discuss.elastic.co/u/rcts)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 2:04pm UTC](https://discuss.elastic.co/t/convert-string-field-to-json/296478 "2022-02-07T14:04:01Z")
Hi! I need to convert this "message" field to json, how? --- ## [Receiving UNEXPECTED POOL ERROR when using Logstash with Elastic Cloud](https://discuss.elastic.co/t/receiving-unexpected-pool-error-when-using-logstash-with-elastic-cloud/88136)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 3\ **Last updated:** [June 5, 2017, 1:22pm UTC](https://discuss.elastic.co/t/receiving-unexpected-pool-error-when-using-logstash-with-elastic-cloud/88136 "2017-06-05T13:22:14Z")
I'm trying to set up my test instance for Elastic Cloud so my team can make a presentation to our management team to help in the decision on whether or not to move to the cloud offering however I am having problems getti… --- ## [Jdbc connection](https://discuss.elastic.co/t/jdbc-connection/207118)
**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\ **Replies:** 6\ **Last updated:** [November 9, 2019, 3:30am UTC](https://discuss.elastic.co/t/jdbc-connection/207118 "2019-11-09T03:30:44Z")
How do we know which jar version to use with a particular version of java and logstash? --- ## [Bing API JSON - how to parse?](https://discuss.elastic.co/t/bing-api-json-how-to-parse/32621)
**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\ **Replies:** 8\ **Last updated:** [October 22, 2015, 6:42pm UTC](https://discuss.elastic.co/t/bing-api-json-how-to-parse/32621 "2015-10-22T18:42:49Z")
I am using the HTTP Poller to hit the Bing search API, which returns JSON. Unfortunately, it does not appear to be parsed correctly. (http://screencast.com/t/xCSAc7hd) It is just being returned as one log entry, as a si… --- ## [Remove\_field in csv filter section](https://discuss.elastic.co/t/remove-field-in-csv-filter-section/112683)
**Author:** [@Amouzigh\_Driss](https://discuss.elastic.co/u/Amouzigh_Driss)\ **Replies:** 6\ **Last updated:** [December 21, 2017, 12:33pm UTC](https://discuss.elastic.co/t/remove-field-in-csv-filter-section/112683 "2017-12-21T12:33:14Z")
Hello, I'm trying to remove "extra" fileds while parsing csv files (separator is ; ). My filter section is that one: filter { csv { separator =\> ";" source =\> message columns =\> \["ID","Value","Timestamp","DateA… --- ## [Logstash 8.11.1 Security Update (ESA-2023-26)](https://discuss.elastic.co/t/logstash-8-11-1-security-update-esa-2023-26/347191)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [November 15, 2023, 6:29am UTC](https://discuss.elastic.co/t/logstash-8-11-1-security-update-esa-2023-26/347191 "2023-11-15T06:29:05Z")
Logstash Insertion of Sensitive Information into Log File (ESA-2023-26) An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for t… --- ## [How to create multiple index from file beat log input in log-stash config](https://discuss.elastic.co/t/how-to-create-multiple-index-from-file-beat-log-input-in-log-stash-config/175144)
**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\ **Replies:** 8\ **Last updated:** [April 8, 2019, 5:32am UTC](https://discuss.elastic.co/t/how-to-create-multiple-index-from-file-beat-log-input-in-log-stash-config/175144 "2019-04-08T05:32:44Z")
How to configure multiple log files with different name in one logstash.conf instance. I am using below configuration , with single files it is working fine ,but multiple file with different index name doesn't work. Fi… --- ## ["mutate gsub" on each element of an array](https://discuss.elastic.co/t/mutate-gsub-on-each-element-of-an-array/46512)
**Author:** [@thorsten.niederkrome](https://discuss.elastic.co/u/thorsten.niederkrome)\ **Replies:** 1\ **Last updated:** [April 7, 2016, 2:35pm UTC](https://discuss.elastic.co/t/mutate-gsub-on-each-element-of-an-array/46512 "2016-04-07T14:35:54Z")
Hi, I'm pretty new to logstash and have a problem I'm not able to solve by trying or searching the web (didn't find any similar questions/solutions yet \[:frowning:\] ) I'm using logstash to extract MAC addresses from lo… --- ## ["Failed to derive xcontent" on REST bulk with ES 5.0](https://discuss.elastic.co/t/failed-to-derive-xcontent-on-rest-bulk-with-es-5-0/89007)
**Author:** [@echauchot](https://discuss.elastic.co/u/echauchot)\ **Replies:** 2\ **Last updated:** [June 12, 2017, 12:46pm UTC](https://discuss.elastic.co/t/failed-to-derive-xcontent-on-rest-bulk-with-es-5-0/89007 "2017-06-12T12:46:39Z")
Hi all, I'm migrating code from 2.4 to 5.0 and I'm facing an issue. The code bellow (that uses RestClient v 5.0.0) fails to execute the whole bulk and raises a java.lang.reflect.InvocationTargetException at sun.refl… --- ## [Creating logstash config file for csv with multiple date fields](https://discuss.elastic.co/t/creating-logstash-config-file-for-csv-with-multiple-date-fields/48315)
**Author:** [@PKA](https://discuss.elastic.co/u/PKA)\ **Replies:** 8\ **Last updated:** [April 27, 2016, 5:56am UTC](https://discuss.elastic.co/t/creating-logstash-config-file-for-csv-with-multiple-date-fields/48315 "2016-04-27T05:56:47Z")
I have a csv file (UTF-8), which I have stored as .txt. It has multiple date fields. I want to view the date field types in Kibana as well as 'dates'. However, I am always getting "Error parsing csv" message. Pls help. N… --- ## [ANN Search: ElasticSearch vs FAISS](https://discuss.elastic.co/t/ann-search-elasticsearch-vs-faiss/326653)
**Author:** [@r1ckC139](https://discuss.elastic.co/u/r1ckC139)\ **Replies:** 2\ **Last updated:** [February 28, 2023, 3:29pm UTC](https://discuss.elastic.co/t/ann-search-elasticsearch-vs-faiss/326653 "2023-02-28T15:29:54Z")
As i know, Elasticsearch 8.x support for knn search with hnsw index by default, so i try to compare elasticsearch vs faiss (hnsw index), i set both elasticsearch and faiss with same parameter (m=32, efconstruct=128, efs… --- ## [FileBeat not forwarding My IIS logs to elastic search](https://discuss.elastic.co/t/filebeat-not-forwarding-my-iis-logs-to-elastic-search/170972)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 6\ **Last updated:** [March 7, 2019, 3:34pm UTC](https://discuss.elastic.co/t/filebeat-not-forwarding-my-iis-logs-to-elastic-search/170972 "2019-03-07T15:34:28Z")
Hi Guys I am very new to Elastic stack. I am trying to setup a dashboard to monitor IIS logs. But the file beats is not working as expected. Here is my configuration. Installed Version:6.6.1 Kibana, Elastic Search, F… --- ## [Logstash : ERROR RollingFileManager](https://discuss.elastic.co/t/logstash-error-rollingfilemanager/209660)
**Author:** [@Nabil777](https://discuss.elastic.co/u/Nabil777)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 4:42pm UTC](https://discuss.elastic.co/t/logstash-error-rollingfilemanager/209660 "2019-11-27T16:42:32Z")
Hello, Logstash worked normally until this morning I don't understand why it doesn't work anymore here's the error parts of the logs, it seems that it's related to the log4j2.properties (wich i never modified) and some … --- ## [Customize ingest pipelines in Fleet / Elastic Agent](https://discuss.elastic.co/t/customize-ingest-pipelines-in-fleet-elastic-agent/260236)
**Author:** [@icious](https://discuss.elastic.co/u/icious)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 12:35pm UTC](https://discuss.elastic.co/t/customize-ingest-pipelines-in-fleet-elastic-agent/260236 "2021-01-08T12:35:06Z")
Hello, I was fiddling around with Elastic Agent and Fleet to integrate multiple log sources in the same agent, and I am getting "Provided Grok expressions do not match field value" error with Fortinet integration. Usin… --- ## [OCR Plugin](https://discuss.elastic.co/t/ocr-plugin/7223)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 5\ **Last updated:** [April 4, 2012, 10:21pm UTC](https://discuss.elastic.co/t/ocr-plugin/7223 "2012-04-04T22:21:24Z")
Hi there, Does anyone knows a nice OCR java library that I may use to add the OCR feature \[1\] to the attachment plugin ? Thanks \[1\] https://github.com/elasticsearch/elasticsearch-mapper-attachments/issues/10… --- ## [Unexpected error while indexing monitoring document elasticsearch](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-elasticsearch/120216)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 0\ **Last updated:** [February 16, 2018, 4:11pm UTC](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-elasticsearch/120216 "2018-02-16T16:11:34Z")
I open up Kibana and seeing following message: Login is currently disabled. Administrators should consult the Kibana logs for more details. in elasticsearch's log, I found following: elasticsearch | \[2018-02-16T16:0… --- ## [How to reduce recreation of ElasticClient (ASP.NET MVC C#)](https://discuss.elastic.co/t/how-to-reduce-recreation-of-elasticclient-asp-net-mvc-c/115216)
**Author:** [@nmathur](https://discuss.elastic.co/u/nmathur)\ **Replies:** 3\ **Last updated:** [January 15, 2018, 5:14am UTC](https://discuss.elastic.co/t/how-to-reduce-recreation-of-elasticclient-asp-net-mvc-c/115216 "2018-01-15T05:14:01Z")
Hello There, Please accept my apologies in advance for bad English. I do not have much knowledge of programming concepts and I am new to elasticsearch. Preparing a sample using Elasticsearch NEST in ASP.NET MVC C#. I … --- ## [Record originating IP of filebeats](https://discuss.elastic.co/t/record-originating-ip-of-filebeats/39151)
**Author:** [@tun0](https://discuss.elastic.co/u/tun0)\ **Replies:** 3\ **Last updated:** [January 17, 2016, 5:02pm UTC](https://discuss.elastic.co/t/record-originating-ip-of-filebeats/39151 "2016-01-17T17:02:37Z")
I currently have a fairly simple setup consisting of running several filebeat instances on various hosts, talking to a central logstash instance, which in turn talks to a ES cluster (6 nodes total, 1 also runs logstash).… --- ## [Replacing missing query](https://discuss.elastic.co/t/replacing-missing-query/70652)
**Author:** [@pewpewlasers](https://discuss.elastic.co/u/pewpewlasers)\ **Replies:** 4\ **Last updated:** [January 7, 2017, 2:25pm UTC](https://discuss.elastic.co/t/replacing-missing-query/70652 "2017-01-07T14:25:34Z")
I recently updated to the newer version of Elasticsearch and realized that the missing query is missing. I understand that you could use must\_not with exists. But for my particular scenario it isn't working. I have the f… --- ## [How to use "index.allocation.max\_retries"](https://discuss.elastic.co/t/how-to-use-index-allocation-max-retries/81894)
**Author:** [@ABChocolate](https://discuss.elastic.co/u/ABChocolate)\ **Replies:** 2\ **Last updated:** [April 18, 2017, 8:19am UTC](https://discuss.elastic.co/t/how-to-use-index-allocation-max-retries/81894 "2017-04-18T08:19:12Z")
Hi, How do I set "index.allocation.max.retries" ? (https://www.elastic.co/guide/en/elasticsearch/reference/5.0/cluster-reroute.html#\_retry\_failed\_shards) What is the time unit in seconds or minutes? Also, how do I … --- ## [Search with whitespace again](https://discuss.elastic.co/t/search-with-whitespace-again/7031)
**Author:** [@Alexander\_Sviridov](https://discuss.elastic.co/u/Alexander_Sviridov)\ **Replies:** 2\ **Last updated:** [March 17, 2012, 3:43pm UTC](https://discuss.elastic.co/t/search-with-whitespace-again/7031 "2012-03-17T15:43:03Z")
Hello! I've run into same problem as described in this post: http://elasticsearch-users.115913.n3.nabble.com/Search-with-white-space-td2574112.html Query just doesn't return anything if there are more than one searc… --- ## [Config.reload.automatic ignored on Logstash Docker container](https://discuss.elastic.co/t/config-reload-automatic-ignored-on-logstash-docker-container/166399)
**Author:** [@shirakaba](https://discuss.elastic.co/u/shirakaba)\ **Replies:** 1\ **Last updated:** [January 31, 2019, 8:20pm UTC](https://discuss.elastic.co/t/config-reload-automatic-ignored-on-logstash-docker-container/166399 "2019-01-31T20:20:22Z")
Setup Docker details Docker Desktop (Community) for Mac Version 2.0.0.2 (30215), engine 18.09.1 Image: docker.elastic.co/logstash/logstash:6.3.2. I'm using the https://github.com/deviantony/docker-elk repo to compose t… --- ## [Freeze Kibana 4 Dashboard display](https://discuss.elastic.co/t/freeze-kibana-4-dashboard-display/33155)
**Author:** [@Gilles](https://discuss.elastic.co/u/Gilles)\ **Replies:** 7\ **Last updated:** [March 2, 2016, 4:35pm UTC](https://discuss.elastic.co/t/freeze-kibana-4-dashboard-display/33155 "2016-03-02T16:35:33Z")
Hello, Is there a way to freeze the setting of a Kibana 4 Dashobard. Currently, whenever I save a Dashboard and reload it, the visualizations have moved around, in some none meaningful way. Attached the screenshot of t… --- ## [Lost shards and cluster state stays red](https://discuss.elastic.co/t/lost-shards-and-cluster-state-stays-red/9746)
**Author:** [@arta](https://discuss.elastic.co/u/arta)\ **Replies:** 2\ **Last updated:** [November 17, 2012, 7:53pm UTC](https://discuss.elastic.co/t/lost-shards-and-cluster-state-stays-red/9746 "2012-11-17T19:53:26Z")
I had a hardware trouble during ES was in yellow state. Some shards that were in the troubled disk were gone. It seems I lost some primary shards because it was in yellow state and some shards that were in the troubl… --- ## [\[Kibana 4\] Add threshold line to visualization](https://discuss.elastic.co/t/kibana-4-add-threshold-line-to-visualization/23402)
**Author:** [@Yarden\_Bar](https://discuss.elastic.co/u/Yarden_Bar)\ **Replies:** 3\ **Last updated:** [April 27, 2015, 8:48am UTC](https://discuss.elastic.co/t/kibana-4-add-threshold-line-to-visualization/23402 "2015-04-27T08:48:44Z")
Hi all, I'm sure I'm not the first one with this idea, but couldn't find anything on the net which resembles a solution. My goal is to have a horizontal line expressing a threshold level. The scenario in questions… --- ## [How to properly delete index?](https://discuss.elastic.co/t/how-to-properly-delete-index/247391)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 7\ **Last updated:** [September 7, 2020, 2:54pm UTC](https://discuss.elastic.co/t/how-to-properly-delete-index/247391 "2020-09-07T14:54:58Z")
Hi guys. I was very happy playing with my filebeat / netflow platform untill today. There was nothing to see and founded following message at log file: high disk watermark \[90%\] exceeded on \[NX79WFORStGfAdCq26XLaw\]\[ub… [Previous page](https://discuss.elastic.co/top.md?page=466&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=468&per_page=50&period=all)