# Top **URL:** https://discuss.elastic.co/top.md?page=505&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 506 --- ## [An exception caught while applying mutate filter - Could not set field 'log' on object '' to value '...'](https://discuss.elastic.co/t/an-exception-caught-while-applying-mutate-filter-could-not-set-field-log-on-object-to-value/244583)
**Author:** [@Yuval\_Khalifa](https://discuss.elastic.co/u/Yuval_Khalifa)\ **Replies:** 5\ **Last updated:** [August 11, 2020, 4:02pm UTC](https://discuss.elastic.co/t/an-exception-caught-while-applying-mutate-filter-could-not-set-field-log-on-object-to-value/244583 "2020-08-11T16:02:03Z")
Hi, I'm getting the following error message in Logstash logs: \[2020-08-11T15:07:11,248\]\[WARN \]\[logstash.filters.mutate \]\[main\]\[51aae80b265c32978f64e0aace0ece634a29ae2a08ef228095111afd72bfdd0b\] Exception caught while a… --- ## [Kibana 7.x dark mode](https://discuss.elastic.co/t/kibana-7-x-dark-mode/183428)
**Author:** [@fragatina](https://discuss.elastic.co/u/fragatina)\ **Replies:** 2\ **Last updated:** [May 31, 2019, 2:12am UTC](https://discuss.elastic.co/t/kibana-7-x-dark-mode/183428 "2019-05-31T02:12:12Z")
Is there a way to set kibana dark mode using an API? (The equivalent of flipping the 'dark mode' switch on Management \> Advanced settings) Thanks in advance! --- ## [Logstash Output Not Working For File Input](https://discuss.elastic.co/t/logstash-output-not-working-for-file-input/27618)
**Author:** [@rholloway](https://discuss.elastic.co/u/rholloway)\ **Replies:** 5\ **Last updated:** [August 21, 2015, 10:40pm UTC](https://discuss.elastic.co/t/logstash-output-not-working-for-file-input/27618 "2015-08-21T22:40:02Z")
Been poking around for the past few hours trying to get this working but no luck. I have a simple file input and simple stdout output (alongside a redis output, but let's ignore for now). I'll toss out that I've alread… --- ## [Elasticsearch Kibana ECONNRESET/socket hang up](https://discuss.elastic.co/t/elasticsearch-kibana-econnreset-socket-hang-up/130096)
**Author:** [@hadi](https://discuss.elastic.co/u/hadi)\ **Replies:** 6\ **Last updated:** [May 1, 2018, 8:27am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-econnreset-socket-hang-up/130096 "2018-05-01T08:27:54Z")
Hi, I am seeing this page and I am not sure what causes it. Please let me know if you have any idea what can be the reason? \[11111111111111111a\] Kibana is pointing to the same machine that is hosted on. cat /etc/kiba… --- ## [Elasticsearch SQL retrieve more than 1000](https://discuss.elastic.co/t/elasticsearch-sql-retrieve-more-than-1000/250614)
**Author:** [@ananya\_ramesh](https://discuss.elastic.co/u/ananya_ramesh)\ **Replies:** 1\ **Last updated:** [October 2, 2020, 9:38am UTC](https://discuss.elastic.co/t/elasticsearch-sql-retrieve-more-than-1000/250614 "2020-10-02T09:38:02Z")
Implementing SQL query in Elasticsearch, not able to extract records more than 1000 in spite of LIMIT \> 1000. Tried "index.mapping.total\_fields.limit": 5000 , but did not help. POST \_sql?format=txt { "query": "SELECT… --- ## [How fix “Failed to import index-pattern”](https://discuss.elastic.co/t/how-fix-failed-to-import-index-pattern/199020)
**Author:** [@111209](https://discuss.elastic.co/u/111209)\ **Replies:** 7\ **Last updated:** [September 13, 2019, 12:50pm UTC](https://discuss.elastic.co/t/how-fix-failed-to-import-index-pattern/199020 "2019-09-13T12:50:25Z")
When i\`m try setup metricbeat dashboard i get error. i run this command: // metricbeat setup --dashboards and got this error: metricbeat setup --dashboards Loading dashboards (Kibana must be running and reachable) Ex… --- ## [How to handle ElasticSearch RestHighLevelClient exceptions properly?](https://discuss.elastic.co/t/how-to-handle-elasticsearch-resthighlevelclient-exceptions-properly/129502)
**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\ **Replies:** 1\ **Last updated:** [May 2, 2018, 7:21pm UTC](https://discuss.elastic.co/t/how-to-handle-elasticsearch-resthighlevelclient-exceptions-properly/129502 "2018-05-02T19:21:53Z")
What is the proper way to handle Exceptions when dealing with the ElasticSearch RestHighLevelClient introduced in 5.0? I am currently working with 6.1. There have been some discussions on whether to use checked or unche… --- ## [Unix\_ms time to date](https://discuss.elastic.co/t/unix-ms-time-to-date/220262)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [February 21, 2020, 3:36pm UTC](https://discuss.elastic.co/t/unix-ms-time-to-date/220262 "2020-02-21T15:36:11Z")
I have date\_time = 1582225804228 which is Thursday, February 20, 2020 1:10:04.228 when I use following filter it convert that to 2020-02-20T19:10:04.228Z ( which is UTC) time format But I also want another field creat… --- ## [Cannot convert lambda expression to type 'PostData' because it is not a delegate type](https://discuss.elastic.co/t/cannot-convert-lambda-expression-to-type-postdata-because-it-is-not-a-delegate-type/138724)
**Author:** [@StephM](https://discuss.elastic.co/u/StephM)\ **Replies:** 6\ **Last updated:** [July 12, 2018, 1:18am UTC](https://discuss.elastic.co/t/cannot-convert-lambda-expression-to-type-postdata-because-it-is-not-a-delegate-type/138724 "2018-07-12T01:18:44Z")
I have this code in my .net core app var searchResponse = client.Search\(s =\> s .From(0) .Size(10) .Query(q =\> q .Match(m =\> m .Field(f =\> f.FirstName) .Query("Martijn") ) ) ); which I… --- ## [Logstash Kafka-Input plugin not using the values supplied in \`bootstrap\_servers\` for connecting to Kafka Broker](https://discuss.elastic.co/t/logstash-kafka-input-plugin-not-using-the-values-supplied-in-bootstrap-servers-for-connecting-to-kafka-broker/193358)
**Author:** [@thomjs](https://discuss.elastic.co/u/thomjs)\ **Replies:** 2\ **Last updated:** [August 1, 2019, 4:06pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-not-using-the-values-supplied-in-bootstrap-servers-for-connecting-to-kafka-broker/193358 "2019-08-01T16:06:12Z")
Elastic Stack Version: 7.2.0 Kafka Version: 5.0.1 Using docker-compose to deploy Elastic Stack, with Kafka sitting on a remote system which is reachable via direct IP (192.168.0.2) In the logstash.conf file we have: i… --- ## [Unable to start Kibana process](https://discuss.elastic.co/t/unable-to-start-kibana-process/82668)
**Author:** [@rosso7](https://discuss.elastic.co/u/rosso7)\ **Replies:** 7\ **Last updated:** [April 20, 2017, 9:43am UTC](https://discuss.elastic.co/t/unable-to-start-kibana-process/82668 "2017-04-20T09:43:57Z")
I am trying to install kibana using rpm kibana-4.5.0-1.x86\_64.rpm. However when i try to start the Kibana process, i am getting below prompt Starting kibana....... unable to start process kibana. To check the reason i… --- ## [SSL communication between Filebeat and Kafka](https://discuss.elastic.co/t/ssl-communication-between-filebeat-and-kafka/138303)
**Author:** [@SubashKunjupillai](https://discuss.elastic.co/u/SubashKunjupillai)\ **Replies:** 5\ **Last updated:** [July 7, 2018, 4:06pm UTC](https://discuss.elastic.co/t/ssl-communication-between-filebeat-and-kafka/138303 "2018-07-07T16:06:21Z")
Hi All, We have a cluster where we have 2-way SSL authentication enabled in Kafka. Also we have log management setup in the same cluster like FileBeat --\> Kafka --\> Logstash --\> ElasticSearch --\> Kibana. Now since SSL… --- ## [Can't select timestamp field in Kibana](https://discuss.elastic.co/t/cant-select-timestamp-field-in-kibana/125803)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 5\ **Last updated:** [March 28, 2018, 4:17pm UTC](https://discuss.elastic.co/t/cant-select-timestamp-field-in-kibana/125803 "2018-03-28T16:17:32Z")
I noticed that Kibana only shows the first 45-ish date fields in an index pattern in the dropdown box when you're adding a new index pattern. However, my ES index has more than 45 date fields, and the one I need to set a… --- ## [Filebeat High Memory and CPU usage](https://discuss.elastic.co/t/filebeat-high-memory-and-cpu-usage/167624)
**Author:** [@Raul](https://discuss.elastic.co/u/Raul)\ **Replies:** 1\ **Last updated:** [February 14, 2019, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-high-memory-and-cpu-usage/167624 "2019-02-14T12:46:07Z")
Hello, I have an issue with memory and CPU consumption when starting filebeat. I have a log folder with over 100 files of around 100Mb each. I am not interest in all the files, as not all of them are current, so I have s… --- ## [ElasticSearch plugin for newrelic](https://discuss.elastic.co/t/elasticsearch-plugin-for-newrelic/11298)
**Author:** [@Vinicius\_Carvalho](https://discuss.elastic.co/u/Vinicius_Carvalho)\ **Replies:** 6\ **Last updated:** [May 28, 2013, 2:26pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-for-newrelic/11298 "2013-05-28T14:26:48Z")
Hi there. I'm finishing an elasticsearch to collect metrics from ES (using nodestats) and send to newrelic. Bigdesk is awesome, but we needed to have historical data, SPM is also fantastic, but would mean another cos… --- ## [X-pack exception | failed to load plugin](https://discuss.elastic.co/t/x-pack-exception-failed-to-load-plugin/97104)
**Author:** [@groot](https://discuss.elastic.co/u/groot)\ **Replies:** 5\ **Last updated:** [August 17, 2017, 7:06am UTC](https://discuss.elastic.co/t/x-pack-exception-failed-to-load-plugin/97104 "2017-08-17T07:06:22Z")
Hi , I have installed a new elasticsearch from scratch and configured and running . after the configuration I have installed the x-pack when it finished I’ve tried to run it but I got this exception : \[2017-08-15T16:1… --- ## [Wildcard and Fuzzy query together](https://discuss.elastic.co/t/wildcard-and-fuzzy-query-together/148699)
**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\ **Replies:** 4\ **Last updated:** [October 9, 2018, 2:21pm UTC](https://discuss.elastic.co/t/wildcard-and-fuzzy-query-together/148699 "2018-10-09T14:21:05Z")
Hello everyone, I am trying to design a query in which, I can use wildcard and Fuzzy query together. According to me, query\_string is used for wildcard searches and multi\_match can be used for fuzziness. I want a que… --- ## [Insert Nested object for indexing in elasticsearch using Java API](https://discuss.elastic.co/t/insert-nested-object-for-indexing-in-elasticsearch-using-java-api/99648)
**Author:** [@Pritom\_Ahmed](https://discuss.elastic.co/u/Pritom_Ahmed)\ **Replies:** 1\ **Last updated:** [September 9, 2017, 2:27pm UTC](https://discuss.elastic.co/t/insert-nested-object-for-indexing-in-elasticsearch-using-java-api/99648 "2017-09-09T14:27:57Z")
Hi, I have the following two classes. public class Authors implements Serializable { private String name; private String surname; private int numberOfArticles; } public class Blog implements Serializable {… --- ## [Aggregate results over multiple indices](https://discuss.elastic.co/t/aggregate-results-over-multiple-indices/19112)
**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\ **Replies:** 1\ **Last updated:** [August 6, 2014, 8:50am UTC](https://discuss.elastic.co/t/aggregate-results-over-multiple-indices/19112 "2014-08-06T08:50:33Z")
Hi, If I have three different indices with the same schema mapping for a type, can I use the SearchRequestBuilder (or any other class) to simultaneously query all three indices and have ElasticSearch perform aggre… --- ## [No such file or directory - tmp](https://discuss.elastic.co/t/no-such-file-or-directory-tmp/25835)
**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\ **Replies:** 6\ **Last updated:** [July 20, 2015, 9:35pm UTC](https://discuss.elastic.co/t/no-such-file-or-directory-tmp/25835 "2015-07-20T21:35:28Z")
Hi, Logstash is installed in read & execute only folder. I am trying to execute logstash with elasticsearch input plugin. My configuration: input { elasticsearch { host =\> "xx.xx.xx.xx" … --- ## [Filebeat Grok pattern for access log](https://discuss.elastic.co/t/filebeat-grok-pattern-for-access-log/345455)
**Author:** [@tucker](https://discuss.elastic.co/u/tucker)\ **Replies:** 5\ **Last updated:** [October 20, 2023, 6:52pm UTC](https://discuss.elastic.co/t/filebeat-grok-pattern-for-access-log/345455 "2023-10-20T18:52:15Z")
Hi, I have an access log for which I am trying to write a Grok pattern but in the filebeat log, I always see "Provided Grok expressions do not match field value:". The log entries look like: \[20/Oct/2023:09:52:33 +000… --- ## [Changing the shard size](https://discuss.elastic.co/t/changing-the-shard-size/267359)
**Author:** [@sagar\_rao](https://discuss.elastic.co/u/sagar_rao)\ **Replies:** 7\ **Last updated:** [March 18, 2021, 12:48pm UTC](https://discuss.elastic.co/t/changing-the-shard-size/267359 "2021-03-18T12:48:16Z")
Hi, I have Aws elastic search cluster with two nodes. The data is being pushed from fluentd to elastic search. By default all the indexs have 5 primary shards and 1 replica. And i want to resize the no of primary shard… --- ## [Kibana -\> Maps: Unable to find EMS tile configuration for id: road\_map](https://discuss.elastic.co/t/kibana-maps-unable-to-find-ems-tile-configuration-for-id-road-map/174137)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 7\ **Last updated:** [March 27, 2019, 10:29pm UTC](https://discuss.elastic.co/t/kibana-maps-unable-to-find-ems-tile-configuration-for-id-road-map/174137 "2019-03-27T22:29:10Z")
Hi Centos 7.6 Kibana & elasticsearch 6.7.0 From Kibana -\> Maps -\> Create Map, this is what happens: (there is no map, and only thing that I can see, is this error: Unable to find EMS tile configuration for id: road\_… --- ## [Logstash input udp drops?](https://discuss.elastic.co/t/logstash-input-udp-drops/65046)
**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\ **Replies:** 8\ **Last updated:** [November 7, 2016, 11:14am UTC](https://discuss.elastic.co/t/logstash-input-udp-drops/65046 "2016-11-07T11:14:36Z")
How do I find if packets are dropped from my input udp queue or not ? input { udp { port =\> 5514 type =\> "pa-traffic" queue\_size =\> 8000 # default 2000 } } --- ## [Can't find Stack Management \> Security \> Users](https://discuss.elastic.co/t/cant-find-stack-management-security-users/248360)
**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 9:41pm UTC](https://discuss.elastic.co/t/cant-find-stack-management-security-users/248360 "2020-09-11T21:41:42Z")
Hi, I'm trying to add some users in kibana, but I can't find the place to do it. I have installed the 7.9.1 version and is using the basic license. I've followed the guide: https://www.elastic.co/guide/en/elasticsearc… --- ## [Please validate mutiple GROK filter](https://discuss.elastic.co/t/please-validate-mutiple-grok-filter/127738)
**Author:** [@rakeshroshan](https://discuss.elastic.co/u/rakeshroshan)\ **Replies:** 3\ **Last updated:** [April 12, 2018, 12:16pm UTC](https://discuss.elastic.co/t/please-validate-mutiple-grok-filter/127738 "2018-04-12T12:16:33Z")
I Mentioned logstash-simple.conf file. Please validate logstash-simple conf file, whether imultiple GROK filters in correct format or not ? In case if it is wrong please mention the correct format. Thanks in Advance. in… --- ## [Logstash filter 관련 질문입니다](https://discuss.elastic.co/t/logstash-filter/100307)
**Author:** [@cfcabc077428519b87a8](https://discuss.elastic.co/u/cfcabc077428519b87a8)\ **Replies:** 2\ **Last updated:** [September 15, 2017, 8:37am UTC](https://discuss.elastic.co/t/logstash-filter/100307 "2017-09-15T08:37:25Z")
현재 키바나에서 검색되는 데이터의 형식은 이러합니다. { "\_index": "ggg", "\_type": "log", "\_id": "AV55PAZJZmaqPQPklyRh", "\_version": 1, "\_score": null, "\_source": { "date": "201709120590", "geoip": {}, "offset": 338, … --- ## [X-Pack not supported on windows?](https://discuss.elastic.co/t/x-pack-not-supported-on-windows/93656)
**Author:** [@ny2359](https://discuss.elastic.co/u/ny2359)\ **Replies:** 6\ **Last updated:** [July 21, 2017, 7:09am UTC](https://discuss.elastic.co/t/x-pack-not-supported-on-windows/93656 "2017-07-21T07:09:52Z")
\[2017-07-18T13:25:39,910\]\[DEBUG\]\[o.e.a.ActionModule \] Using REST wrapper f rom plugin org.elasticsearch.xpack.XPackPlugin \[2017-07-18T13:25:41,747\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[\] uncaught e… --- ## [The client is unable to verify that the server is Elasticsearch due security privileges on the server side](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-security-privileges-on-the-server-side/319015)
**Author:** [@Vasuji](https://discuss.elastic.co/u/Vasuji)\ **Replies:** 4\ **Last updated:** [November 17, 2022, 8:23pm UTC](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-security-privileges-on-the-server-side/319015 "2022-11-17T20:23:05Z")
Why am I getting this error in my Mac with Elasticsearch 8.5.1 running in Docker and Jupyter notebook is supposed to communicate with Elasticsearch through port 9200? The client is unable to verify that the server is El… --- ## [String concatenation](https://discuss.elastic.co/t/string-concatenation/190703)
**Author:** [@smathew](https://discuss.elastic.co/u/smathew)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 1:06pm UTC](https://discuss.elastic.co/t/string-concatenation/190703 "2019-07-18T13:06:10Z")
hello all, I have three string fields and am trying to concatenate. I tried scripting field but it was throwing error. doc\['message.keyword'\].value +doc\[process.keyword'\].value also, tried to create a bucket aggregatio… --- ## [Discover JSON missing \_source field](https://discuss.elastic.co/t/discover-json-missing-source-field/268922)
**Author:** [@frebri](https://discuss.elastic.co/u/frebri)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 4:01pm UTC](https://discuss.elastic.co/t/discover-json-missing-source-field/268922 "2021-03-31T16:01:47Z")
Hi, We reinstalled Kibana and Elastic with 7.12 and are accustomed to look at certain documents through just pure json, since it has a specific order and grouping. After the upgrade, the JSON tab seems to "pretty print"… --- ## [X-Pack security TLS/SSL not working with own certificates](https://discuss.elastic.co/t/x-pack-security-tls-ssl-not-working-with-own-certificates/151794)
**Author:** [@Niels](https://discuss.elastic.co/u/Niels)\ **Replies:** 4\ **Last updated:** [October 17, 2018, 6:23am UTC](https://discuss.elastic.co/t/x-pack-security-tls-ssl-not-working-with-own-certificates/151794 "2018-10-17T06:23:40Z")
I recently configured my elastic cluster on ssl, with the ssl-tool from elastic this was working fine. Now I want to change the keys with keys from our own CA. And here I got stuck on the error below. Allthough the Erro… --- ## [Pre-aggregate docs on indexing](https://discuss.elastic.co/t/pre-aggregate-docs-on-indexing/101663)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 5\ **Last updated:** [September 27, 2017, 12:13pm UTC](https://discuss.elastic.co/t/pre-aggregate-docs-on-indexing/101663 "2017-09-27T12:13:53Z")
Hi, We are currently indexing around 1B docs/day which is becoming very inefficient when searching. A suggested solution was to index every document in to its 1m, 1h, 1d intervals (Aggregated) so when searching, we can… --- ## [How to run elasticsearch with yarn?](https://discuss.elastic.co/t/how-to-run-elasticsearch-with-yarn/658)
**Author:** [@JulianZhang](https://discuss.elastic.co/u/JulianZhang)\ **Replies:** 5\ **Last updated:** [May 16, 2015, 9:38am UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-with-yarn/658 "2015-05-16T09:38:22Z")
My hadoop version is 2.5.0 Follow the guide http://www.elastic.co/guide/en/elasticsearch/hadoop/2.1.Beta/ey-usage.html I had down load the elasticsearh-hadoop-2.1.0beta4.zip. I run the hadoop jar elasticsearh-yarn… --- ## [Forward syslogs to another siem](https://discuss.elastic.co/t/forward-syslogs-to-another-siem/173045)
**Author:** [@bambam](https://discuss.elastic.co/u/bambam)\ **Replies:** 6\ **Last updated:** [March 21, 2019, 4:29pm UTC](https://discuss.elastic.co/t/forward-syslogs-to-another-siem/173045 "2019-03-21T16:29:28Z")
I have several machines that use filebeats to send syslog messages to the SIEM. I'd like to send these logs to another external machine besides the local machine. How can I do this? --- ## [Elasticsearch 8.5.1 does not start - “java.security.AccessControlException: access denied”](https://discuss.elastic.co/t/elasticsearch-8-5-1-does-not-start-java-security-accesscontrolexception-access-denied/319969)
**Author:** [@hrQAQ](https://discuss.elastic.co/u/hrQAQ)\ **Replies:** 3\ **Last updated:** [November 29, 2022, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-8-5-1-does-not-start-java-security-accesscontrolexception-access-denied/319969 "2022-11-29T07:43:18Z")
Hi, I meet problem while starting elasticsearch. When I start elasticsearch it generates a java.security.AccessControlException: access denied The error log and my elasticsearch.yml are list as follow. Environment OS:… --- ## [How to access doc values of a nested array inside a script?](https://discuss.elastic.co/t/how-to-access-doc-values-of-a-nested-array-inside-a-script/37829)
**Author:** [@brunomiranda](https://discuss.elastic.co/u/brunomiranda)\ **Replies:** 3\ **Last updated:** [September 23, 2016, 3:38am UTC](https://discuss.elastic.co/t/how-to-access-doc-values-of-a-nested-array-inside-a-script/37829 "2016-09-23T03:38:35Z")
I am using Elasticsearch 1.7 Given the following index, how would I select proper item in the nested array and access one of it's values? The purpose here is to use it inside the value inside a script\_score. # Creat… --- ## [Unable to find usable node.js executable](https://discuss.elastic.co/t/unable-to-find-usable-node-js-executable/88738)
**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\ **Replies:** 4\ **Last updated:** [June 15, 2017, 1:12pm UTC](https://discuss.elastic.co/t/unable-to-find-usable-node-js-executable/88738 "2017-06-15T13:12:31Z")
Hello, Recently started working with the stack. i am running the most recent versions of ELK. When I try to get Kibana running it gives me this prompt \[root@as-linuxdev bin\]# sudo /opt/ELK/vendor/kibanafiles/bin/kiban… --- ## [Redistribute documents with custom routing and reindex API](https://discuss.elastic.co/t/redistribute-documents-with-custom-routing-and-reindex-api/68059)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 1\ **Last updated:** [December 5, 2016, 4:21pm UTC](https://discuss.elastic.co/t/redistribute-documents-with-custom-routing-and-reindex-api/68059 "2016-12-05T16:21:29Z")
I have an index with 3 shards, with default routing. Now, I want to use a custom route (let says field "userID"). How can I use \_reindex API to achieve this? Thanks you, PS: I saw there is a routing options for r… --- ## [Multiple elastic search in kibana](https://discuss.elastic.co/t/multiple-elastic-search-in-kibana/287176)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 2\ **Last updated:** [October 20, 2021, 11:49pm UTC](https://discuss.elastic.co/t/multiple-elastic-search-in-kibana/287176 "2021-10-20T23:49:56Z")
I have two Elasticsearch running and single kibana I want to point both to single kibana kibana.yml elasticsearch.hosts: \["http://localhost:9200","http://localhost:9201"\] any other changes to made? --- ## [How to connect Kibana to a cluster](https://discuss.elastic.co/t/how-to-connect-kibana-to-a-cluster/82115)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 2\ **Last updated:** [April 18, 2017, 6:30am UTC](https://discuss.elastic.co/t/how-to-connect-kibana-to-a-cluster/82115 "2017-04-18T06:30:26Z")
Hi everyone, From what I saw in this manual to connect to a cluster of 3 ES nodes (one master and two data) from Kibana. I need to create another ES on the Kibana VM that is not master and not data. Two questions: 1… --- ## [ES 5.2 : Java client hangs on new PreBuiltTransportClient](https://discuss.elastic.co/t/es-5-2-java-client-hangs-on-new-prebuilttransportclient/74395)
**Author:** [@educ](https://discuss.elastic.co/u/educ)\ **Replies:** 5\ **Last updated:** [February 16, 2017, 2:56pm UTC](https://discuss.elastic.co/t/es-5-2-java-client-hangs-on-new-prebuilttransportclient/74395 "2017-02-16T14:56:14Z")
I have an instance ES 5.2 local. I tried connect to the ES node using TransportClient but not sucess. The java client hangs on this command: TransportClient client = new PreBuiltTransportClient Here is the code … --- ## [Schedule job for elasticsearch](https://discuss.elastic.co/t/schedule-job-for-elasticsearch/108079)
**Author:** [@prabhu\_pandurangan](https://discuss.elastic.co/u/prabhu_pandurangan)\ **Replies:** 3\ **Last updated:** [November 17, 2017, 4:10pm UTC](https://discuss.elastic.co/t/schedule-job-for-elasticsearch/108079 "2017-11-17T16:10:57Z")
Hi Team i would like to setup schedule job for elasticsearch input plugin? how to do it? --- ## [Environment Variable](https://discuss.elastic.co/t/environment-variable/109330)
**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\ **Replies:** 7\ **Last updated:** [November 29, 2017, 7:57pm UTC](https://discuss.elastic.co/t/environment-variable/109330 "2017-11-29T19:57:51Z")
Hi All, I am trying to make the configuration automate through environment variable described below https://www.elastic.co/guide/en/beats/libbeat/6.0/config-file-format-env-vars.html but same is not working . please… --- ## [Field reference syntax](https://discuss.elastic.co/t/field-reference-syntax/25589)
**Author:** [@eeveaud](https://discuss.elastic.co/u/eeveaud)\ **Replies:** 3\ **Last updated:** [July 15, 2015, 9:45am UTC](https://discuss.elastic.co/t/field-reference-syntax/25589 "2015-07-15T09:45:35Z")
when using the field reference syntax, is the "resolution" of the value associated to a specific field performed by LS or it is performed at plugin level ? for one of our specific needs we have to develop a filter plu… --- ## [ElasticSearch Bulk indexing is not scaling](https://discuss.elastic.co/t/elasticsearch-bulk-indexing-is-not-scaling/39388)
**Author:** [@paul\_nibin](https://discuss.elastic.co/u/paul_nibin)\ **Replies:** 6\ **Last updated:** [January 17, 2016, 9:47am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-indexing-is-not-scaling/39388 "2016-01-17T09:47:25Z")
Hi All, I have set up a single node elastic search in a 16 core, 32g machine. I have given 16g as the ES\_HEAP\_SIZE. I am using ES 1.7.1. I have another application which is sending metric information to elastic searc… --- ## [ESTestCase RuntimeException when running with Gradle- jar hell in test classpath](https://discuss.elastic.co/t/estestcase-runtimeexception-when-running-with-gradle-jar-hell-in-test-classpath/119777)
**Author:** [@dominik.safaric](https://discuss.elastic.co/u/dominik.safaric)\ **Replies:** 8\ **Last updated:** [February 22, 2018, 11:34am UTC](https://discuss.elastic.co/t/estestcase-runtimeexception-when-running-with-gradle-jar-hell-in-test-classpath/119777 "2018-02-22T11:34:58Z")
I've been trying to run my ElasticSearch plugin unit tests (extending the ESTestcase class) using the following command ./gradlew, but unfortunately I keep getting the following exception: Gradle Test Executor 1 finishe… --- ## [Logstash-output-syslog questions / improvements for central log hub towards other SIEM/Compliancy tool](https://discuss.elastic.co/t/logstash-output-syslog-questions-improvements-for-central-log-hub-towards-other-siem-compliancy-tool/84882)
**Author:** [@arnold79](https://discuss.elastic.co/u/arnold79)\ **Replies:** 8\ **Last updated:** [May 12, 2017, 2:13pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-questions-improvements-for-central-log-hub-towards-other-siem-compliancy-tool/84882 "2017-05-12T14:13:55Z")
Hi All, Currently working on a project to replace a syslog-ng product ( balabit) in front of a SIEM solution, which centrally receives all messages and if needed forwards that unique event towards the SIEM in the comp… --- ## [Gsub replace backslash with forward slash](https://discuss.elastic.co/t/gsub-replace-backslash-with-forward-slash/233322)
**Author:** [@sjivan](https://discuss.elastic.co/u/sjivan)\ **Replies:** 2\ **Last updated:** [May 19, 2020, 6:11pm UTC](https://discuss.elastic.co/t/gsub-replace-backslash-with-forward-slash/233322 "2020-05-19T18:11:55Z")
Hi, I'm trying to replace a forward slash to back slash using gsub but can't get it to work. I've tried gsub =\> \["message", "/", "\\\\"\] and gsub =\> \["message", "/", "\\"\] The above fails with a parse error. and gsub … --- ## [\[FATAL\]\[logstash.runner \] Logstash could not be started because there is already another instance using the configured data directory. If you wish to run multiple instances, you must change the "path.data" setting](https://discuss.elastic.co/t/fatal-logstash-runner-logstash-could-not-be-started-because-there-is-already-another-instance-using-the-configured-data-directory-if-you-wish-to-run-multiple-instances-you-must-change-the-path-data-setting/139362)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 1\ **Last updated:** [July 10, 2018, 2:21pm UTC](https://discuss.elastic.co/t/fatal-logstash-runner-logstash-could-not-be-started-because-there-is-already-another-instance-using-the-configured-data-directory-if-you-wish-to-run-multiple-instances-you-must-change-the-path-data-setting/139362 "2018-07-10T14:21:29Z")
Hello; I try to run two pipelines together but When I launch my pipelines with the command : bin/logstash --path.settings /etc/logstash I've got this error : \[FATAL\]\[logstash.runner \] Logstash could not be started be… [Previous page](https://discuss.elastic.co/top.md?page=504&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=506&per_page=50&period=all)