# Top

**URL:** https://discuss.elastic.co/top.md?page=506&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 507

---

## [Kibana is not running on global IP](https://discuss.elastic.co/t/kibana-is-not-running-on-global-ip/247657)

<div class="topic-metadata">

**Author:** [@infected](https://discuss.elastic.co/u/infected)\
**Replies:** 2\
**Last updated:** [September 6, 2020, 11:59pm UTC](https://discuss.elastic.co/t/kibana-is-not-running-on-global-ip/247657 "2020-09-06T23:59:39Z")

</div>

I tried to run kibana on my global ip address. ・error messages log \[17:59:06.707\] \[info\]\[plugins-service\] Plugin "case" is disabled. log \[18:00:21.994\] \[fatal\]\[root\] { Error: listen EADDRNOTAVAIL: address not a…

---

## [How this elasticsearch input plugin works in logstash?](https://discuss.elastic.co/t/how-this-elasticsearch-input-plugin-works-in-logstash/259371)

<div class="topic-metadata">

**Author:** [@deshpas](https://discuss.elastic.co/u/deshpas)\
**Replies:** 3\
**Last updated:** [December 23, 2020, 3:58pm UTC](https://discuss.elastic.co/t/how-this-elasticsearch-input-plugin-works-in-logstash/259371 "2020-12-23T15:58:51Z")

</div>

I am trying to transfer data from one AWS ES cluster to another AWS ES cluster and in this case, i am going to use the schedule option to pull the data from input every time. I would like to understand how this elastic…

---

## [Fluentd authentication to Elasticsearch API via X-Pack](https://discuss.elastic.co/t/fluentd-authentication-to-elasticsearch-api-via-x-pack/138226)

<div class="topic-metadata">

**Author:** [@helper](https://discuss.elastic.co/u/helper)\
**Replies:** 2\
**Last updated:** [July 12, 2018, 9:43am UTC](https://discuss.elastic.co/t/fluentd-authentication-to-elasticsearch-api-via-x-pack/138226 "2018-07-12T09:43:31Z")

</div>

Please could some one suggest me, How do I configure FluentD authentication to Elasticsearch API after installation of X-Pack. Any documentation or examples will be ideal.

---

## [Pipeline aborted due to error help me](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-help-me/220838)

<div class="topic-metadata">

**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\
**Replies:** 7\
**Last updated:** [February 25, 2020, 4:43pm UTC](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-help-me/220838 "2020-02-25T16:43:16Z")

</div>

i'm working with logstash the current version 7.6 i have 44 columns , 4 of them are date but contains nothing i declared them as a data it's not accepted i didn't dclare them still not accepted ( cuz i know that it's …

---

## [How to compress data when write into es](https://discuss.elastic.co/t/how-to-compress-data-when-write-into-es/297371)

<div class="topic-metadata">

**Author:** [@dalei2019](https://discuss.elastic.co/u/dalei2019)\
**Replies:** 4\
**Last updated:** [February 17, 2022, 7:42am UTC](https://discuss.elastic.co/t/how-to-compress-data-when-write-into-es/297371 "2022-02-17T07:42:20Z")

</div>

Hi team, I want to build an ES cluster for services in other regions, so ES needs to be exposed to the public network. The amount of data transferred is 2 T /day , it's huge . So I expect to compress before writing in…

---

## [Log stash plugin update failed with connection error](https://discuss.elastic.co/t/log-stash-plugin-update-failed-with-connection-error/34675)

<div class="topic-metadata">

**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\
**Replies:** 4\
**Last updated:** [March 22, 2016, 11:51am UTC](https://discuss.elastic.co/t/log-stash-plugin-update-failed-with-connection-error/34675 "2016-03-22T11:51:06Z")

</div>

I have setup proxy and I can do curl/wget properly with the proxy. I have got both http and https proxy setup. I have also exported them to both lowercase and uppercase, e.g. https\_proxy and HTTPS\_PROXY. But still try…

---

## [Need help to setup basic HTTP authentication](https://discuss.elastic.co/t/need-help-to-setup-basic-http-authentication/8259)

<div class="topic-metadata">

**Author:** [@aps](https://discuss.elastic.co/u/aps)\
**Replies:** 8\
**Last updated:** [July 2, 2012, 12:49pm UTC](https://discuss.elastic.co/t/need-help-to-setup-basic-http-authentication/8259 "2012-07-02T12:49:30Z")

</div>

I m new in Elasticsearch, I want to implement Besic HTTP Authentication, I have downloaded the plugin but not able to implement. The readme files doesn't state how to implement it. Any help will be appreciated.

---

## [Marking and sending shard failed due to \[failed recovery\]](https://discuss.elastic.co/t/marking-and-sending-shard-failed-due-to-failed-recovery/2022)

<div class="topic-metadata">

**Author:** [@fernandomm](https://discuss.elastic.co/u/fernandomm)\
**Replies:** 3\
**Last updated:** [June 9, 2015, 12:32am UTC](https://discuss.elastic.co/t/marking-and-sending-shard-failed-due-to-failed-recovery/2022 "2015-06-09T00:32:46Z")

</div>

I'm testing ElasticSearch as a replacement for a big Mysql table ( over 1.3TB compressed ). While importing data I got the following error: \[2015-06-05 16:41:34,780\]\[WARN \]\[index.engine \] \[Venus Dee Milo\]…

---

## [Elastic Search server raise Exception:java.net.SocketException: Network is unreachable: no further information](https://discuss.elastic.co/t/elastic-search-server-raise-exception-java-net-socketexception-network-is-unreachable-no-further-information/14723)

<div class="topic-metadata">

**Author:** [@chengji18](https://discuss.elastic.co/u/chengji18)\
**Replies:** 3\
**Last updated:** [December 5, 2013, 10:08am UTC](https://discuss.elastic.co/t/elastic-search-server-raise-exception-java-net-socketexception-network-is-unreachable-no-further-information/14723 "2013-12-05T10:08:30Z")

</div>

When I try to run my Elasticsearch server, It give me an exception, normally it should be work, Implement: Location\>\>Elasticsearch\>\>elasticsearch-0.90.5\>\>bin\>\>elasticsearch.bat …

---

## [Filebeat 8.5.2 Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch](https://discuss.elastic.co/t/filebeat-8-5-2-failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/320268)

<div class="topic-metadata">

**Author:** [@ardue](https://discuss.elastic.co/u/ardue)\
**Replies:** 5\
**Last updated:** [December 2, 2022, 2:14pm UTC](https://discuss.elastic.co/t/filebeat-8-5-2-failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/320268 "2022-12-02T14:14:00Z")

</div>

Hello when I run filebeat I get this error: sudo service filebeat status filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Loaded: loaded (/lib/systemd/system/filebeat.service; …

---

## [Unable to update Elasticsearch license](https://discuss.elastic.co/t/unable-to-update-elasticsearch-license/35316)

<div class="topic-metadata">

**Author:** [@Dina](https://discuss.elastic.co/u/Dina)\
**Replies:** 7\
**Last updated:** [November 24, 2015, 10:28am UTC](https://discuss.elastic.co/t/unable-to-update-elasticsearch-license/35316 "2015-11-24T10:28:37Z")

</div>

the guide of Shield is out of date. The license is missing 'S' curl -XPUT -u admin 'http://:/\_license' -d @license.json But even after that the license status of the cluster didn't update to valid.

---

## [Logstash and Java 11](https://discuss.elastic.co/t/logstash-and-java-11/159570)

<div class="topic-metadata">

**Author:** [@gbourke](https://discuss.elastic.co/u/gbourke)\
**Replies:** 1\
**Last updated:** [December 6, 2018, 10:21am UTC](https://discuss.elastic.co/t/logstash-and-java-11/159570 "2018-12-06T10:21:34Z")

</div>

Hi, I'm looking for info on the plans to move Logstash to Java 11. The only thread I see is under Elasticsearch The support matrix referenced shows support for Java 11 will be part of Elastic 6.5.x Logstash shows n…

---

## [\[Solved\] Kibana 6.8.1 unable to connect to Elastic with xpack settings disabled](https://discuss.elastic.co/t/solved-kibana-6-8-1-unable-to-connect-to-elastic-with-xpack-settings-disabled/188158)

<div class="topic-metadata">

**Author:** [@Tiago\_Cruz](https://discuss.elastic.co/u/Tiago_Cruz)\
**Replies:** 8\
**Last updated:** [July 2, 2019, 1:35am UTC](https://discuss.elastic.co/t/solved-kibana-6-8-1-unable-to-connect-to-elastic-with-xpack-settings-disabled/188158 "2019-07-02T01:35:46Z")

</div>

Hello, I did the upgrade from ELK 5.6.4 to 6.8.1. The kibana use to work in the simple way as possible, without authentication. The ES cluster is already running with xpack.security.enabled: false in elasticsearch.yml:…

---

## [Dependencies don't show up in APM](https://discuss.elastic.co/t/dependencies-dont-show-up-in-apm/288244)

<div class="topic-metadata">

**Author:** [@Willie\_Abrams](https://discuss.elastic.co/u/Willie_Abrams)\
**Replies:** 5\
**Last updated:** [November 3, 2021, 11:15pm UTC](https://discuss.elastic.co/t/dependencies-dont-show-up-in-apm/288244 "2021-11-03T23:15:42Z")

</div>

I have an app running in Cloud Run that I am profiling with Elastic APM. I get transaction level data, all the normal APM stuff you see on the Overview page. Transactions are populated. I get Trace samples. I click on a …

---

## [Job for elasticsearch.service failed because the control process exited with error code](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code/246853)

<div class="topic-metadata">

**Author:** [@hamzakarim](https://discuss.elastic.co/u/hamzakarim)\
**Replies:** 2\
**Last updated:** [August 31, 2020, 5:03am UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code/246853 "2020-08-31T05:03:52Z")

</div>

I have newly installed the Elasticsearch-7.4.2-x86\_64.rpm with rmp from the link But when i start the service it gives the below error . sudo systemctl start elasticsearch.service Job for elasticsearch.service faile…

---

## [Can I delete the kibana\_task\_manager indices](https://discuss.elastic.co/t/can-i-delete-the-kibana-task-manager-indices/225445)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 1\
**Last updated:** [March 27, 2020, 5:04pm UTC](https://discuss.elastic.co/t/can-i-delete-the-kibana-task-manager-indices/225445 "2020-03-27T17:04:11Z")

</div>

It is not clear on what those index are storing (can see some maps and lens related documents) Is it possible to delete them to limit my shards? what would be the consequences?

---

## [Max size for getting data](https://discuss.elastic.co/t/max-size-for-getting-data/114851)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 7\
**Last updated:** [January 12, 2018, 5:46am UTC](https://discuss.elastic.co/t/max-size-for-getting-data/114851 "2018-01-12T05:46:18Z")

</div>

Hi What is the max size for getting data? get /pupil/\_search { "from": 0, "size": 10000, "query":{ "match\_all": {} } } I have more than 70…

---

## [\[solved\] \[kubernetes module\] unable to enable ssl](https://discuss.elastic.co/t/solved-kubernetes-module-unable-to-enable-ssl/124603)

<div class="topic-metadata">

**Author:** [@hamelg](https://discuss.elastic.co/u/hamelg)\
**Replies:** 6\
**Last updated:** [March 20, 2018, 9:45am UTC](https://discuss.elastic.co/t/solved-kubernetes-module-unable-to-enable-ssl/124603 "2018-03-20T09:45:33Z")

</div>

Hello according to the documentation, kubernetes module supports ssl connection \[1\]. But despite ssl setting enabled, it still talks http to the kubelet service. Any ideas ? \[1\] https://www.elastic.co/guide/en/beats/…

---

## [Elasticsearch python query does not display results](https://discuss.elastic.co/t/elasticsearch-python-query-does-not-display-results/236072)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 8\
**Last updated:** [June 7, 2020, 7:07am UTC](https://discuss.elastic.co/t/elasticsearch-python-query-does-not-display-results/236072 "2020-06-07T07:07:18Z")

</div>

Hello I am trying to query certain content using python query. Below is my code : from flask import Flask, render\_template, request from elasticsearch import Elasticsearch import os es = Elasticsearch( \['http://\*\*\*\*\*\*…

---

## [Kibana dashboard error ( field is a required parameter)](https://discuss.elastic.co/t/kibana-dashboard-error-field-is-a-required-parameter/136665)

<div class="topic-metadata">

**Author:** [@ryext](https://discuss.elastic.co/u/ryext)\
**Replies:** 3\
**Last updated:** [June 21, 2018, 5:47am UTC](https://discuss.elastic.co/t/kibana-dashboard-error-field-is-a-required-parameter/136665 "2018-06-21T05:47:02Z")

</div>

hello, before i start explaining i know that this error was submited before but the solutions didn't work for me and the details in the info are diffrent than other users my setup is : \*1 centos server runing elk log…

---

## [\[.kibana\_task\_manager\] Action failed with 'Request timed out'](https://discuss.elastic.co/t/kibana-task-manager-action-failed-with-request-timed-out/286389)

<div class="topic-metadata">

**Author:** [@DenisSermyagin](https://discuss.elastic.co/u/DenisSermyagin)\
**Replies:** 3\
**Last updated:** [October 11, 2021, 8:17pm UTC](https://discuss.elastic.co/t/kibana-task-manager-action-failed-with-request-timed-out/286389 "2021-10-11T20:17:49Z")

</div>

Hello! I have deployed Elasticsearch and kibana versions 7.13.4. I encountered this error: {"type":"log","@timestamp":"2021-10-11T15:41:58+00:00","tags":\["info","savedobjects-service"\],"pid":948,"message":"\[.kibana\_ta…

---

## [Encountered logstash error "Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"input\\", \\"filter\\", \\"output\\" at line 1, column 1 (byte 1)""](https://discuss.elastic.co/t/encountered-logstash-error-expected-one-of-t-r-n-input-filter-output-at-line-1-column-1-byte-1/336796)

<div class="topic-metadata">

**Author:** [@pdowma](https://discuss.elastic.co/u/pdowma)\
**Replies:** 1\
**Last updated:** [June 26, 2023, 1:40am UTC](https://discuss.elastic.co/t/encountered-logstash-error-expected-one-of-t-r-n-input-filter-output-at-line-1-column-1-byte-1/336796 "2023-06-26T01:40:23Z")

</div>

Problem: When setting up a Docker-based Elastic Stack (Elasticsearch, Logstash, and Kibana) environment. The Logstash service was not able to start correctly and reported the following error message: \[2023-06-23T16:41:…

---

## [Specifying analyzer for \_all field](https://discuss.elastic.co/t/specifying-analyzer-for--all-field/7105)

<div class="topic-metadata">

**Author:** [@Runar\_Myklebust\_2](https://discuss.elastic.co/u/Runar_Myklebust_2)\
**Replies:** 6\
**Last updated:** [March 28, 2012, 5:51am UTC](https://discuss.elastic.co/t/specifying-analyzer-for--all-field/7105 "2012-03-28T05:51:33Z")

</div>

Hi, Im having a bit of trouble to set the analyzer for the \_all - field to "keyword", and "not\_analyzed" isnt working either. In this gist, I have store data as showed, executes the query but I get no results. If I…

---

## [Reindex API performance](https://discuss.elastic.co/t/reindex-api-performance/52949)

<div class="topic-metadata">

**Author:** [@Marcin\_Kubica](https://discuss.elastic.co/u/Marcin_Kubica)\
**Replies:** 2\
**Last updated:** [June 17, 2016, 1:59pm UTC](https://discuss.elastic.co/t/reindex-api-performance/52949 "2016-06-17T13:59:12Z")

</div>

Hi, checking reindex api. Have 400GB index with 6 shards to play with and copying over with a changed template to have 20 shards. Got 16 nodes in a cluster and noticed with index set to 16 shards elastic was not distr…

---

## [Xfs filesystem](https://discuss.elastic.co/t/xfs-filesystem/6780)

<div class="topic-metadata">

**Author:** [@vpunski](https://discuss.elastic.co/u/vpunski)\
**Replies:** 1\
**Last updated:** [March 1, 2012, 5:43pm UTC](https://discuss.elastic.co/t/xfs-filesystem/6780 "2012-03-01T17:43:31Z")

</div>

Does anyone have experience using ElasticSearch on xfs file system? Any known pros and cons, tuning parameters for both ES and xfs? Thanks

---

## [My cluster keep dropping node and changing master "failed to writeCluster State"](https://discuss.elastic.co/t/my-cluster-keep-dropping-node-and-changing-master-failed-to-writecluster-state/297219)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 8\
**Last updated:** [February 17, 2022, 11:13am UTC](https://discuss.elastic.co/t/my-cluster-keep-dropping-node-and-changing-master-failed-to-writecluster-state/297219 "2022-02-17T11:13:45Z")

</div>

Hello, My cluster keep dropping one node randomly everytime, which made the stack instable, sometimes it takes more than 3 hours to rejoin that node and recover. My cluster compose of 4 nodes : 1 coordinator . 3 data…

---

## [Databricks + ElasticSearch setup](https://discuss.elastic.co/t/databricks-elasticsearch-setup/316578)

<div class="topic-metadata">

**Author:** [@protatopancake](https://discuss.elastic.co/u/protatopancake)\
**Replies:** 3\
**Last updated:** [October 13, 2022, 10:42pm UTC](https://discuss.elastic.co/t/databricks-elasticsearch-setup/316578 "2022-10-13T22:42:04Z")

</div>

First and foremost, apologies for the very simple question. Today is my first day using Elasticsearch. After doing some research I found I can use the tool via a Databricks cluster, which I'm moderately familiar with. I…

---

## [Kibana is running but can't access 5601 port](https://discuss.elastic.co/t/kibana-is-running-but-cant-access-5601-port/255272)

<div class="topic-metadata">

**Author:** [@spate141](https://discuss.elastic.co/u/spate141)\
**Replies:** 3\
**Last updated:** [November 13, 2020, 3:31am UTC](https://discuss.elastic.co/t/kibana-is-running-but-cant-access-5601-port/255272 "2020-11-13T03:31:30Z")

</div>

I'm trying to run the Kibana on 5601 port & seems like ES & Kibana service are running. But I can't access the Kibana portal or the 5601 port. Any suggestion? Elasticsearch: \> curl localhost:9200 { "name" : "node-1",…

---

## [Filebeat apache2 module](https://discuss.elastic.co/t/filebeat-apache2-module/82406)

<div class="topic-metadata">

**Author:** [@nbrys](https://discuss.elastic.co/u/nbrys)\
**Replies:** 3\
**Last updated:** [April 19, 2017, 1:03pm UTC](https://discuss.elastic.co/t/filebeat-apache2-module/82406 "2017-04-19T13:03:23Z")

</div>

I'm currently trying to send apache2 logs using filebeat to elasticsearch. I've got the following at the end of my filebeat.yml file: filebeat.modules: - module: apache2 access: var.paths = \["/var/log/a…

---

## [Oracle Audit Trail](https://discuss.elastic.co/t/oracle-audit-trail/89950)

<div class="topic-metadata">

**Author:** [@GambitK](https://discuss.elastic.co/u/GambitK)\
**Replies:** 7\
**Last updated:** [July 4, 2017, 2:31pm UTC](https://discuss.elastic.co/t/oracle-audit-trail/89950 "2017-07-04T14:31:08Z")

</div>

Hello, I'm trying to get oracle audit trail using logstash, what options I have that could help me achieve that. I wanted to use audit trail to OS but the columns sql\_bind, sql\_text are not written so I only have two o…

---

## [SQL to Lucene Query conversion](https://discuss.elastic.co/t/sql-to-lucene-query-conversion/11831)

<div class="topic-metadata">

**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\
**Replies:** 2\
**Last updated:** [October 3, 2014, 1:45am UTC](https://discuss.elastic.co/t/sql-to-lucene-query-conversion/11831 "2014-10-03T01:45:13Z")

</div>

Hi All, We are using Elastic Search, we want to expose our search service using SQL type inteface. Is any tool are available, which can convert SQL into lucene? For example: Input : select \* from tableName wh…

---

## [Unique filter in Data Table visualisation](https://discuss.elastic.co/t/unique-filter-in-data-table-visualisation/214306)

<div class="topic-metadata">

**Author:** [@ravnica1](https://discuss.elastic.co/u/ravnica1)\
**Replies:** 4\
**Last updated:** [January 10, 2020, 5:14pm UTC](https://discuss.elastic.co/t/unique-filter-in-data-table-visualisation/214306 "2020-01-10T17:14:20Z")

</div>

Hello Given the following set of documents: "eventType":"Added", "movieId":1, "user":"Jane.Blogs@gmail.com" "name":"Terminator", "userId":1, "eventDate":"01-01-2020" "eventType":"Viewed", "movieId":1, "user":"J…

---

## [Best way to backup the elastic search data(Entire Nodes Folder) from one machine to another machine?](https://discuss.elastic.co/t/best-way-to-backup-the-elastic-search-data-entire-nodes-folder-from-one-machine-to-another-machine/105049)

<div class="topic-metadata">

**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\
**Replies:** 3\
**Last updated:** [October 25, 2017, 6:06pm UTC](https://discuss.elastic.co/t/best-way-to-backup-the-elastic-search-data-entire-nodes-folder-from-one-machine-to-another-machine/105049 "2017-10-25T18:06:25Z")

</div>

Hi All, What is the best way to backup the entire data (/var/lib/elasticsearch/nodes) from one machine to another machine in elasticsearch 5.4.0 How to take the backup of entire node folder and restore it. Thanks

---

## [Elasticsearch 5.1.1 head plugin standalone server](https://discuss.elastic.co/t/elasticsearch-5-1-1-head-plugin-standalone-server/72087)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 3\
**Last updated:** [January 19, 2017, 6:28pm UTC](https://discuss.elastic.co/t/elasticsearch-5-1-1-head-plugin-standalone-server/72087 "2017-01-19T18:28:25Z")

</div>

Hi, I have migrated to ELK Stack 5. I have learned that site plugins are no longer supported in ELK 5. Hence, i tried to run Elasticsearch-head plugin as a standalone server by following the directions of below link.. …

---

## [How to migrate from postgresql to elasticsearch?](https://discuss.elastic.co/t/how-to-migrate-from-postgresql-to-elasticsearch/65166)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 3\
**Last updated:** [November 7, 2016, 6:49am UTC](https://discuss.elastic.co/t/how-to-migrate-from-postgresql-to-elasticsearch/65166 "2016-11-07T06:49:09Z")

</div>

I need help to migrate data from postgresql to elasticsearch.I need to implement project so that's why any clues. regards Kartheek Gummaluri

---

## [Unrecognized @timestamp value type=class org.jruby.RubyFloat](https://discuss.elastic.co/t/unrecognized-timestamp-value-type-class-org-jruby-rubyfloat/134371)

<div class="topic-metadata">

**Author:** [@Akash\_Kumar\_Dutta](https://discuss.elastic.co/u/Akash_Kumar_Dutta)\
**Replies:** 1\
**Last updated:** [June 4, 2018, 8:58am UTC](https://discuss.elastic.co/t/unrecognized-timestamp-value-type-class-org-jruby-rubyfloat/134371 "2018-06-04T08:58:32Z")

</div>

The configuration I am using for logstash is:- kafka { type =\> "docker-logs" codec =\> "json" bootstrap\_servers =\> "kafka-0.kafka-svc.ns-adutta.svc.cluster.local:9093,kafka-1.kafka-svc.ns-adutta.svc.cluster.l…

---

## [What's the @timestamp timezone from elasticsearch via curl query?](https://discuss.elastic.co/t/whats-the-timestamp-timezone-from-elasticsearch-via-curl-query/51859)

<div class="topic-metadata">

**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\
**Replies:** 4\
**Last updated:** [June 12, 2016, 8:53am UTC](https://discuss.elastic.co/t/whats-the-timestamp-timezone-from-elasticsearch-via-curl-query/51859 "2016-06-12T08:53:50Z")

</div>

hi all, 1.i know Kibana always adjusts the UTC time to the browser's timezone. but is the same as via curl to elasticsearch ? 2.Logstash generates indexes based on @timestamp with UTC time, if I want to get documen…

---

## [Number format in Canvas](https://discuss.elastic.co/t/number-format-in-canvas/208046)

<div class="topic-metadata">

**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\
**Replies:** 7\
**Last updated:** [December 2, 2019, 9:06pm UTC](https://discuss.elastic.co/t/number-format-in-canvas/208046 "2019-12-02T21:06:07Z")

</div>

I have a canvas visualisation made of a SQL query to count clicks on a site. This is some very high numbers. Can I format the column so instead of "100000" and "75000", it will be shown as "100.000" and "75.000"?

---

## [Not able to show real time data in KIBANA?](https://discuss.elastic.co/t/not-able-to-show-real-time-data-in-kibana/192402)

<div class="topic-metadata">

**Author:** [@SHiVA.M](https://discuss.elastic.co/u/SHiVA.M)\
**Replies:** 6\
**Last updated:** [August 7, 2019, 6:44am UTC](https://discuss.elastic.co/t/not-able-to-show-real-time-data-in-kibana/192402 "2019-08-07T06:44:24Z")

</div>

Hi All, I am new to ELK. i have log file which contains response time (numeric). ,groupid (numeric) ,and transaction id (eg AB0989). I have extracted them using grok pattern:: %{NUMBER:RESTIME:INT} %{NUMBER:GROUPID:IN…

---

## [How to see full logs](https://discuss.elastic.co/t/how-to-see-full-logs/170514)

<div class="topic-metadata">

**Author:** [@osykora](https://discuss.elastic.co/u/osykora)\
**Replies:** 5\
**Last updated:** [March 1, 2019, 3:03pm UTC](https://discuss.elastic.co/t/how-to-see-full-logs/170514 "2019-03-01T15:03:16Z")

</div>

Hello, when I check service logs in Kibana, I can see some errors with a truncated stack trace. I wonder whether there's a place where I could see those errors with full stack trace so that I can fix the issues easily. …

---

## [Setting number\_of\_shards but couldn't resolve host](https://discuss.elastic.co/t/setting-number-of-shards-but-couldnt-resolve-host/99399)

<div class="topic-metadata">

**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\
**Replies:** 7\
**Last updated:** [September 5, 2017, 10:53am UTC](https://discuss.elastic.co/t/setting-number-of-shards-but-couldnt-resolve-host/99399 "2017-09-05T10:53:22Z")

</div>

when I set the shards number, it throws such problem: curl -XPUT ‘l0.62.179.32:9200/my\_index/pretty’ -H ‘Content-Type: application/json’ -d’ { “settings”: { “number\_of\_shards” : 2, “number\_of\_replicas” : 0 } } ' …

---

## [Perform calculation on metric aggregation in visualization](https://discuss.elastic.co/t/perform-calculation-on-metric-aggregation-in-visualization/178932)

<div class="topic-metadata">

**Author:** [@sunny.batra](https://discuss.elastic.co/u/sunny.batra)\
**Replies:** 3\
**Last updated:** [April 29, 2019, 2:02pm UTC](https://discuss.elastic.co/t/perform-calculation-on-metric-aggregation-in-visualization/178932 "2019-04-29T14:02:15Z")

</div>

We have a requirement to calculate the overall TAT(turnaround time) of the system. In our application a package is flown from many modules sequentially and each module do some operations on the package and move forward. …

---

## [KIbana errors after upgrade from 6.6 to 6.7](https://discuss.elastic.co/t/kibana-errors-after-upgrade-from-6-6-to-6-7/175886)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 3\
**Last updated:** [April 9, 2019, 12:18am UTC](https://discuss.elastic.co/t/kibana-errors-after-upgrade-from-6-6-to-6-7/175886 "2019-04-09T00:18:34Z")

</div>

Hi I have upgraded successfully Elastic Search from 6.6 to 6.7. Then I upgraded Kibana from 6.6. to 6.7. But I see many errors in my logs. "All shards failed. " {"type":"error","@timestamp":"2019-04-08T16:17:29Z","tag…

---

## [Filebeat failed to publish events: client is not connected](https://discuss.elastic.co/t/filebeat-failed-to-publish-events-client-is-not-connected/215531)

<div class="topic-metadata">

**Author:** [@rnakam01](https://discuss.elastic.co/u/rnakam01)\
**Replies:** 2\
**Last updated:** [January 30, 2020, 2:34am UTC](https://discuss.elastic.co/t/filebeat-failed-to-publish-events-client-is-not-connected/215531 "2020-01-30T02:34:53Z")

</div>

executing sudo /opt/elkstack/filebeat/filebeat -e -c /opt/elkstack/filebeat/filebeat.yml -d "publish" Consistently get 2020-01-17T15:07:18.857-0800 ERROR logstash/async.go:256 Failed to publish events caused by: …

---

## [How to make filebeat ship logs in the same order as in the log file](https://discuss.elastic.co/t/how-to-make-filebeat-ship-logs-in-the-same-order-as-in-the-log-file/89402)

<div class="topic-metadata">

**Author:** [@pratheek\_k](https://discuss.elastic.co/u/pratheek_k)\
**Replies:** 2\
**Last updated:** [June 15, 2017, 3:25pm UTC](https://discuss.elastic.co/t/how-to-make-filebeat-ship-logs-in-the-same-order-as-in-the-log-file/89402 "2017-06-15T15:25:35Z")

</div>

I can see that filebeat is not shipping the logs in the same order to logstash as in the log file. So can i make filebeat to ship the logs in the same order as in the log file. Sorting it later in elasticsearch based on …

---

## [How to configure Filebeat to recognize ECS data](https://discuss.elastic.co/t/how-to-configure-filebeat-to-recognize-ecs-data/236550)

<div class="topic-metadata">

**Author:** [@Noxis](https://discuss.elastic.co/u/Noxis)\
**Replies:** 3\
**Last updated:** [June 12, 2020, 8:57am UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-to-recognize-ecs-data/236550 "2020-06-12T08:57:44Z")

</div>

Hello I have an Kibana Elastic Filebeat docker stack and I want to monitor the logs of some NodeJS microservices (that run in docker too). I discovered yesterday ecs-morgan-format and it seems to work well with morgan. …

---

## [Logstash converts integer value in scientific notation to float, causing mapping error in Elasticsearch](https://discuss.elastic.co/t/logstash-converts-integer-value-in-scientific-notation-to-float-causing-mapping-error-in-elasticsearch/253396)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 7\
**Last updated:** [October 30, 2020, 3:40am UTC](https://discuss.elastic.co/t/logstash-converts-integer-value-in-scientific-notation-to-float-causing-mapping-error-in-elasticsearch/253396 "2020-10-30T03:40:22Z")

</div>

Background Given the following input (these are snippets from the input JSON Lines): "MEMLIMIT Size":0 ... "MEMLIMIT Size":0.8590E+10 Logstash (I'm using 7.9.3) outputs: "MEMLIMIT Size" =\> 0 "MEMLIMIT Size" =\> 859000…

---

## [Remove Duplicate records](https://discuss.elastic.co/t/remove-duplicate-records/148013)

<div class="topic-metadata">

**Author:** [@djrondon](https://discuss.elastic.co/u/djrondon)\
**Replies:** 2\
**Last updated:** [September 10, 2018, 9:59pm UTC](https://discuss.elastic.co/t/remove-duplicate-records/148013 "2018-09-10T21:59:33Z")

</div>

Hi Folks, I'm using Kibana to extract records from Elastic Search. I'm using this query: GET processos/\_search/?size=100&pretty=true { "query": { "dis\_max": { "queries": \[ { "match": { "movimento.movimentoNacio…

---

## [Can not connect from different machine](https://discuss.elastic.co/t/can-not-connect-from-different-machine/88179)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 4\
**Last updated:** [June 5, 2017, 11:24pm UTC](https://discuss.elastic.co/t/can-not-connect-from-different-machine/88179 "2017-06-05T23:24:38Z")

</div>

From some reason after building new ES machine I am unable to connect to it from a different machine. 'While checking connection between machines using ping shows that they are connected Here is my yml: /# ========= ==…

---

## [Try using the -Djava.io.tmpdir= option to select an alternate temp location](https://discuss.elastic.co/t/try-using-the-djava-io-tmpdir-option-to-select-an-alternate-temp-location/111013)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 1\
**Last updated:** [December 15, 2017, 10:50am UTC](https://discuss.elastic.co/t/try-using-the-djava-io-tmpdir-option-to-select-an-alternate-temp-location/111013 "2017-12-15T10:50:15Z")

</div>

Hi, I notice some of my elasticsearch containers do cyclic restarts after long service. docker logs show the following: Version:1.0 StartHTML:0000000105 EndHTML:0000039235 StartFragment:0000037910 EndFragment:00000391…

[Previous page](https://discuss.elastic.co/top.md?page=505&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=507&per_page=50&period=all)
