# Top

**URL:** https://discuss.elastic.co/top.md?page=509&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 510

---

## [After adding "elasticsearch - nofile 65536" still not enough threads are allocated](https://discuss.elastic.co/t/after-adding-elasticsearch-nofile-65536-still-not-enough-threads-are-allocated/74796)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 1\
**Last updated:** [February 12, 2017, 11:33am UTC](https://discuss.elastic.co/t/after-adding-elasticsearch-nofile-65536-still-not-enough-threads-are-allocated/74796 "2017-02-12T11:33:58Z")

</div>

Hi everyone, I am getting an error "max number of threads \[1024\] for user \[elasticsearch\] is too low, increase to at least \[2048\]" I opened this manual and tried the following: After trying: "sudo su ulimit -n 6553…

---

## [Elasticsearch to elasticsearch index transfer](https://discuss.elastic.co/t/elasticsearch-to-elasticsearch-index-transfer/131953)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 6\
**Last updated:** [May 16, 2018, 1:34pm UTC](https://discuss.elastic.co/t/elasticsearch-to-elasticsearch-index-transfer/131953 "2018-05-16T13:34:29Z")

</div>

I am trying to move an index from my development cluster to our production cluster via logstash. I am getting the below response in the logs that looks like a web response. The development has no security so I'm not real…

---

## [Kibana, Power Bi and Azure](https://discuss.elastic.co/t/kibana-power-bi-and-azure/210475)

<div class="topic-metadata">

**Author:** [@manikhokher](https://discuss.elastic.co/u/manikhokher)\
**Replies:** 1\
**Last updated:** [December 13, 2019, 12:17am UTC](https://discuss.elastic.co/t/kibana-power-bi-and-azure/210475 "2019-12-13T00:17:23Z")

</div>

Hey everyone. Actually my question is very specific and it is more related to ELK stack instead of specific component, Kibana. Im doing some POC and i came across ELK stack. I have explore Azure architecture and willing…

---

## [How connect logstash to elasticsearch cluster?](https://discuss.elastic.co/t/how-connect-logstash-to-elasticsearch-cluster/62608)

<div class="topic-metadata">

**Author:** [@Amin1](https://discuss.elastic.co/u/Amin1)\
**Replies:** 5\
**Last updated:** [October 10, 2016, 9:33am UTC](https://discuss.elastic.co/t/how-connect-logstash-to-elasticsearch-cluster/62608 "2016-10-10T09:33:42Z")

</div>

hi i use this scale to manage my log in medium network :slight\_smile: Source ----\>Logstash------\>Redis--------\>Logstash--------\> Elasticsearch cluster I have one Client Node, 3 Data -node, 1 master node. now i have fol…

---

## [Grok regex ignore characters in named capture group](https://discuss.elastic.co/t/grok-regex-ignore-characters-in-named-capture-group/57719)

<div class="topic-metadata">

**Author:** [@Tyngd\_Punkt](https://discuss.elastic.co/u/Tyngd_Punkt)\
**Replies:** 2\
**Last updated:** [August 11, 2016, 12:10pm UTC](https://discuss.elastic.co/t/grok-regex-ignore-characters-in-named-capture-group/57719 "2016-08-11T12:10:45Z")

</div>

I have a row of data being sent to logstash. The row can contain several IP addresses. However one ip address is always prefixed with IPv4: and i want to only capture this IP address so i have created this Grok regex: m…

---

## [How to get client ip address](https://discuss.elastic.co/t/how-to-get-client-ip-address/52111)

<div class="topic-metadata">

**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\
**Replies:** 1\
**Last updated:** [June 9, 2016, 12:07am UTC](https://discuss.elastic.co/t/how-to-get-client-ip-address/52111 "2016-06-09T00:07:05Z")

</div>

I had configured filebeat on client machines and logstash on central server. I want to log client ip as a field, so that i can filter the logs based on thier host ips, filebeat is logging hostname, but i need to log host…

---

## [Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data)](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat-please-make-sure-that-multiple-beats-are-not-sharing-the-same-data-path-path-data/313546)

<div class="topic-metadata">

**Author:** [@Sargu\_Xcode](https://discuss.elastic.co/u/Sargu_Xcode)\
**Replies:** 2\
**Last updated:** [September 6, 2022, 7:10am UTC](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat-please-make-sure-that-multiple-beats-are-not-sharing-the-same-data-path-path-data/313546 "2022-09-06T07:10:10Z")

</div>

hello everyone , i am new to ELK , was trying to setup ELK with Auditbeat to monitor linux auditd logs, but it seems to break. kibana is not showing desired output and when attempted to check i got this log . appreciate…

---

## [How to protect an ES cluster from searches that would kill it?](https://discuss.elastic.co/t/how-to-protect-an-es-cluster-from-searches-that-would-kill-it/25487)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 5\
**Last updated:** [July 14, 2015, 8:40pm UTC](https://discuss.elastic.co/t/how-to-protect-an-es-cluster-from-searches-that-would-kill-it/25487 "2015-07-14T20:40:28Z")

</div>

Unfortunately, this really happened to me in prod yesterday. It was ugly. I have a three tiered cluster with masters and clients and data nodes all separated. My 4 clients have these settings (among others) for a…

---

## [Cannot connect to the Elasticsearch cluster currently configured for Kibana after the upgrade to 6.4](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster-currently-configured-for-kibana-after-the-upgrade-to-6-4/148459)

<div class="topic-metadata">

**Author:** [@RFeidi](https://discuss.elastic.co/u/RFeidi)\
**Replies:** 2\
**Last updated:** [September 13, 2018, 4:15pm UTC](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster-currently-configured-for-kibana-after-the-upgrade-to-6-4/148459 "2018-09-13T16:15:50Z")

</div>

Hi Elastic Team, I did an upgrade of the Elastic cluster from the 6.3.2 to the 6.4, and then I cannot connect to the Elasticsearch cluster currently configured for Kibana. When I check the kibana logs , message error i…

---

## [Failed to create report](https://discuss.elastic.co/t/failed-to-create-report/306577)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 4\
**Last updated:** [July 1, 2022, 2:24pm UTC](https://discuss.elastic.co/t/failed-to-create-report/306577 "2022-07-01T14:24:28Z")

</div>

I am not able to create any type (pdf, png, or csv) of reports in Kibana. The error message just states, "Failed to create report. Reporting task runner has not been initialized!" I ran the reporting diagnostic tool whi…

---

## [Is there an alternative solution to terms "execution": "and" on ES 2.x?](https://discuss.elastic.co/t/is-there-an-alternative-solution-to-terms-execution-and-on-es-2-x/41089)

<div class="topic-metadata">

**Author:** [@luisrpp](https://discuss.elastic.co/u/luisrpp)\
**Replies:** 4\
**Last updated:** [February 5, 2016, 7:51pm UTC](https://discuss.elastic.co/t/is-there-an-alternative-solution-to-terms-execution-and-on-es-2-x/41089 "2016-02-05T19:51:18Z")

</div>

Given that I have following document in an index: PUT /test\_index/my\_type/1 { "id": 1, "my\_array": \["1", "2", "3", "4"\] } If I run the following query on ES 1.x, it gives me 0 total hits, as expected: POST…

---

## [Connect Kibana to remote Elasticsearch](https://discuss.elastic.co/t/connect-kibana-to-remote-elasticsearch/136900)

<div class="topic-metadata">

**Author:** [@mkorunoski](https://discuss.elastic.co/u/mkorunoski)\
**Replies:** 7\
**Last updated:** [July 22, 2018, 8:01pm UTC](https://discuss.elastic.co/t/connect-kibana-to-remote-elasticsearch/136900 "2018-07-22T20:01:41Z")

</div>

Hi everyone. I am beginner in using Elasticsearch, and Kibana for that matter. I am experiencing problem for which I am not able to find a solution. First of all, I have an Elasticsearch server with couple of indices, …

---

## [Unknown encoding name error](https://discuss.elastic.co/t/unknown-encoding-name-error/188182)

<div class="topic-metadata">

**Author:** [@magician.kim](https://discuss.elastic.co/u/magician.kim)\
**Replies:** 1\
**Last updated:** [June 30, 2019, 11:09am UTC](https://discuss.elastic.co/t/unknown-encoding-name-error/188182 "2019-06-30T11:09:23Z")

</div>

Hi, I'm using Logstash 7.2 When i use logstash anything, The error occurs like that... Where can I find this error ? And how can I fix it?

---

## [How can we use Math Aggregation in Kibana Visual Builder 6.7?](https://discuss.elastic.co/t/how-can-we-use-math-aggregation-in-kibana-visual-builder-6-7/175814)

<div class="topic-metadata">

**Author:** [@Sonam\_Verma](https://discuss.elastic.co/u/Sonam_Verma)\
**Replies:** 2\
**Last updated:** [April 9, 2019, 6:41am UTC](https://discuss.elastic.co/t/how-can-we-use-math-aggregation-in-kibana-visual-builder-6-7/175814 "2019-04-09T06:41:42Z")

</div>

I want to perform one calculation. I want to know about what should we provide in variables and how to access our existing fields in document?

---

## [Fluentd vs Logstash?](https://discuss.elastic.co/t/fluentd-vs-logstash/1658)

<div class="topic-metadata">

**Author:** [@Joshua\_P](https://discuss.elastic.co/u/Joshua_P)\
**Replies:** 1\
**Last updated:** [June 2, 2015, 3:49pm UTC](https://discuss.elastic.co/t/fluentd-vs-logstash/1658 "2015-06-02T15:49:07Z")

</div>

Hello! I know this is a board for Logstash, but I was hoping someone might have some experience with Fluentd and be able to talk about why you chose one over the other. We're evaluating logging solutions at our compan…

---

## [No handler found for uri when creating a mapping](https://discuss.elastic.co/t/no-handler-found-for-uri-when-creating-a-mapping/18147)

<div class="topic-metadata">

**Author:** [@Abhishek\_Mukherjee](https://discuss.elastic.co/u/Abhishek_Mukherjee)\
**Replies:** 1\
**Last updated:** [June 17, 2014, 5:25pm UTC](https://discuss.elastic.co/t/no-handler-found-for-uri-when-creating-a-mapping/18147 "2014-06-17T17:25:17Z")

</div>

Hi, I am following the ES Definitive guide. I am trying to create a mapping for an index and type as follows. curl -XPUT '192.168.1.103:9200/nxtxnlogs/transaction/' -d ' "mappings" : { "\_default\_" …

---

## [How to install/use x-pack on OSX Homebrew (OSS) version?](https://discuss.elastic.co/t/how-to-install-use-x-pack-on-osx-homebrew-oss-version/151478)

<div class="topic-metadata">

**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\
**Replies:** 5\
**Last updated:** [October 9, 2018, 3:18pm UTC](https://discuss.elastic.co/t/how-to-install-use-x-pack-on-osx-homebrew-oss-version/151478 "2018-10-09T15:18:14Z")

</div>

There was a discussion at \[6.3.0\] homebrew recipe about getting elasticsearch working again with homebrew - and it seems it's now working. It seems. The problem is that now that I installed the homebrew version (which…

---

## [Alternative to Fuzzy Search for pHash](https://discuss.elastic.co/t/alternative-to-fuzzy-search-for-phash/30075)

<div class="topic-metadata">

**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\
**Replies:** 5\
**Last updated:** [September 29, 2015, 6:23pm UTC](https://discuss.elastic.co/t/alternative-to-fuzzy-search-for-phash/30075 "2015-09-29T18:23:31Z")

</div>

Hello, I'm calculating image signatures as pHash, which look like this: 1110001001100111111100010000000001010011011000010010101011111011101000010001001101110001010100100110111110001011001000101110111101100101110011000111…

---

## [Unable to deploy functionbeat to s3 bucket](https://discuss.elastic.co/t/unable-to-deploy-functionbeat-to-s3-bucket/171371)

<div class="topic-metadata">

**Author:** [@Bhavani\_Ananth](https://discuss.elastic.co/u/Bhavani_Ananth)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 6:35pm UTC](https://discuss.elastic.co/t/unable-to-deploy-functionbeat-to-s3-bucket/171371 "2019-03-07T18:35:07Z")

</div>

Hello Team, I was experimenting with /functionbeat-7.0.0-beta1-linux-x86\_64. When I try to deploy I always get the error, 2019-03-07T18:20:44.997Z DEBUG \[aws.executor\] aws/executor.go:46 The executor is…

---

## [Take action when watch is back to normal (condition unmet)](https://discuss.elastic.co/t/take-action-when-watch-is-back-to-normal-condition-unmet/126297)

<div class="topic-metadata">

**Author:** [@Siping\_Wang](https://discuss.elastic.co/u/Siping_Wang)\
**Replies:** 1\
**Last updated:** [April 3, 2018, 7:08am UTC](https://discuss.elastic.co/t/take-action-when-watch-is-back-to-normal-condition-unmet/126297 "2018-04-03T07:08:32Z")

</div>

In our use case, we would like to notify our team when the watch is back to normal, namely the condition is no longer met. For example, we would like to be notified when the log has an error, but also when the error mess…

---

## [Parsing my Zyxel USG110 CEF syslog file](https://discuss.elastic.co/t/parsing-my-zyxel-usg110-cef-syslog-file/98714)

<div class="topic-metadata">

**Author:** [@dlex51](https://discuss.elastic.co/u/dlex51)\
**Replies:** 7\
**Last updated:** [September 6, 2017, 1:51pm UTC](https://discuss.elastic.co/t/parsing-my-zyxel-usg110-cef-syslog-file/98714 "2017-09-06T13:51:30Z")

</div>

Hello everybody, i’m new to ELK Stack, but with some exceptions everything worked (installation) like a charme. Now I’m trying to visualize my router logs with Kibana. Therefore i receive the syslogs from my router via…

---

## [Logstash output http from a curl command](https://discuss.elastic.co/t/logstash-output-http-from-a-curl-command/228389)

<div class="topic-metadata">

**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\
**Replies:** 2\
**Last updated:** [April 26, 2020, 2:53am UTC](https://discuss.elastic.co/t/logstash-output-http-from-a-curl-command/228389 "2020-04-26T02:53:23Z")

</div>

hi, i need to go from logstash to a web restAPI, i'm having trouble converting a curl command into the output { http {}} format. any suggestions would be appreciated.. there arent many examples.. This is the curl comman…

---

## [Filebeat 6.0 not loading the data file](https://discuss.elastic.co/t/filebeat-6-0-not-loading-the-data-file/108920)

<div class="topic-metadata">

**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\
**Replies:** 2\
**Last updated:** [November 24, 2017, 10:20am UTC](https://discuss.elastic.co/t/filebeat-6-0-not-loading-the-data-file/108920 "2017-11-24T10:20:22Z")

</div>

Hi I have recently downloaded a filbeat 6.0 and trying to load the json file . However filebeat Starts Successfully but do not load the json file to send data . Is there any extra setting I need to enable in order to a…

---

## [Where elasticsearch templates are stored?](https://discuss.elastic.co/t/where-elasticsearch-templates-are-stored/39518)

<div class="topic-metadata">

**Author:** [@Lakal\_Malimage](https://discuss.elastic.co/u/Lakal_Malimage)\
**Replies:** 3\
**Last updated:** [January 19, 2016, 5:17pm UTC](https://discuss.elastic.co/t/where-elasticsearch-templates-are-stored/39518 "2016-01-19T17:17:10Z")

</div>

I would like to know where the elasticsearch templates are stored?

---

## [Spans are sent after custom transaction is closed (Node.js APM agent)](https://discuss.elastic.co/t/spans-are-sent-after-custom-transaction-is-closed-node-js-apm-agent/164444)

<div class="topic-metadata">

**Author:** [@treble.snake](https://discuss.elastic.co/u/treble.snake)\
**Replies:** 8\
**Last updated:** [January 17, 2019, 1:54pm UTC](https://discuss.elastic.co/t/spans-are-sent-after-custom-transaction-is-closed-node-js-apm-agent/164444 "2019-01-17T13:54:21Z")

</div>

Hi, I'm trying to use APM in a small module and running into the following problem - I start and close a transaction manually, but spans (both custom and from instrumented MongoDB query) are sent after the transaction is…

---

## [Kibana : How to search a value in JSON field](https://discuss.elastic.co/t/kibana-how-to-search-a-value-in-json-field/350321)

<div class="topic-metadata">

**Author:** [@Aziza\_AJOUAOU](https://discuss.elastic.co/u/Aziza_AJOUAOU)\
**Replies:** 8\
**Last updated:** [January 9, 2024, 6:00pm UTC](https://discuss.elastic.co/t/kibana-how-to-search-a-value-in-json-field/350321 "2024-01-09T18:00:38Z")

</div>

Hello .I would like to searck in kibana all documents that contains this specific value Y100000005 . So , i tried in search bar : But Kibana dosen't return Any document! I have in kibana the document below (it con…

---

## [Logstash best practice](https://discuss.elastic.co/t/logstash-best-practice/85425)

<div class="topic-metadata">

**Author:** [@talial](https://discuss.elastic.co/u/talial)\
**Replies:** 8\
**Last updated:** [May 15, 2017, 8:05am UTC](https://discuss.elastic.co/t/logstash-best-practice/85425 "2017-05-15T08:05:38Z")

</div>

Hi, we have a 5 nodes elasticsearch cluster running 5.2.0, 2 of the nodes are configured as client nodes (data=false, master=false), 3 nodes are elasticsearch cluster (data=true, master=true) We want to install also l…

---

## [Unable to retrieve license information from license server](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server/304766)

<div class="topic-metadata">

**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\
**Replies:** 5\
**Last updated:** [June 20, 2022, 2:13pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server/304766 "2022-06-20T14:13:18Z")

</div>

Setting up a multi-node ELK 8.2 stack and hitting an issue I've not been able to sort out. The basics of Elasticsearch and Kibana are working, but Logstash doesn't want to connect to the one Elasticsearch machine I have.…

---

## [How to create custom search fields in Discover tab](https://discuss.elastic.co/t/how-to-create-custom-search-fields-in-discover-tab/2672)

<div class="topic-metadata">

**Author:** [@taus\_alti](https://discuss.elastic.co/u/taus_alti)\
**Replies:** 5\
**Last updated:** [June 30, 2015, 3:50am UTC](https://discuss.elastic.co/t/how-to-create-custom-search-fields-in-discover-tab/2672 "2015-06-30T03:50:12Z")

</div>

How to create custom search fields in Discover tab. I am using MongoDB river to push documents(application logs) from MongoDB to ES. I would intend to use Kibana as the front end tool. The default search that comes a…

---

## [Logstash: parsing AWS WAF log](https://discuss.elastic.co/t/logstash-parsing-aws-waf-log/195925)

<div class="topic-metadata">

**Author:** [@Igor\_Belyakov](https://discuss.elastic.co/u/Igor_Belyakov)\
**Replies:** 4\
**Last updated:** [August 20, 2019, 1:58pm UTC](https://discuss.elastic.co/t/logstash-parsing-aws-waf-log/195925 "2019-08-20T13:58:20Z")

</div>

Hi. Can i use HTTP filter (or other filter) to parse some fields from json AWS WAF logs from s3 bucket? logstash.conf: input{ s3 { bucket =\> "XXXX" access\_key\_id =\> "XXXX" secret\_access\_key =\> "XXXX" region =\> "XX…

---

## [Getting "Unable to revive connection" error when running bat file in Windows](https://discuss.elastic.co/t/getting-unable-to-revive-connection-error-when-running-bat-file-in-windows/24686)

<div class="topic-metadata">

**Author:** [@Mohan\_Kumar](https://discuss.elastic.co/u/Mohan_Kumar)\
**Replies:** 4\
**Last updated:** [July 3, 2015, 5:40am UTC](https://discuss.elastic.co/t/getting-unable-to-revive-connection-error-when-running-bat-file-in-windows/24686 "2015-07-03T05:40:13Z")

</div>

I am getting the below error while running bat file.. Can anybody help me on this? {"@timestamp":"2015-07-01T07:12:13.408Z","level":"error","node\_env":"\\"productio n\\"","error":"Request error, retrying -- connect ECONN…

---

## [Embed Kibana (v5.2) Visualization in iFrame X-Frame-Options](https://discuss.elastic.co/t/embed-kibana-v5-2-visualization-in-iframe-x-frame-options/95942)

<div class="topic-metadata">

**Author:** [@jdsalingerjr](https://discuss.elastic.co/u/jdsalingerjr)\
**Replies:** 1\
**Last updated:** [August 4, 2017, 7:04pm UTC](https://discuss.elastic.co/t/embed-kibana-v5-2-visualization-in-iframe-x-frame-options/95942 "2017-08-04T19:04:09Z")

</div>

I am trying to embed a Kibana Visualization into an external page using angular. I’ve looked at a number of different threads and none of them seem to answer what I am looking for: embedding-kibana-visulaization-using…

---

## [Find data with long when is null](https://discuss.elastic.co/t/find-data-with-long-when-is-null/135195)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 2\
**Last updated:** [June 8, 2018, 8:56pm UTC](https://discuss.elastic.co/t/find-data-with-long-when-is-null/135195 "2018-06-08T20:56:07Z")

</div>

How is possible find a data when a long value is null? I try to do this, but an error occurs: { "query":{ "bool":{ "must":\[ { "term":{ "account":123 …

---

## [File beat monitor only recent log files](https://discuss.elastic.co/t/file-beat-monitor-only-recent-log-files/52306)

<div class="topic-metadata">

**Author:** [@JohnnyS](https://discuss.elastic.co/u/JohnnyS)\
**Replies:** 8\
**Last updated:** [June 20, 2016, 10:20am UTC](https://discuss.elastic.co/t/file-beat-monitor-only-recent-log-files/52306 "2016-06-20T10:20:45Z")

</div>

I'm new with filebeat and want to know if it is possible to only monitor the log file of the day? LSB Version: :base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch Distributor ID: RedHatEnterpriseServer De…

---

## [How to remove a field from elastic search mapping?](https://discuss.elastic.co/t/how-to-remove-a-field-from-elastic-search-mapping/271691)

<div class="topic-metadata">

**Author:** [@vk98](https://discuss.elastic.co/u/vk98)\
**Replies:** 3\
**Last updated:** [April 30, 2021, 7:24am UTC](https://discuss.elastic.co/t/how-to-remove-a-field-from-elastic-search-mapping/271691 "2021-04-30T07:24:51Z")

</div>

I have added a field which is not actually required in elastic search. Now I want to get rid of it. Changing mapping or making a new one will reindex my whole data. Which is very huge and cant afford to do such thing. Ca…

---

## [Setup-Passwords script fails when ssl.keystore.password is not set](https://discuss.elastic.co/t/setup-passwords-script-fails-when-ssl-keystore-password-is-not-set/118350)

<div class="topic-metadata">

**Author:** [@jupp](https://discuss.elastic.co/u/jupp)\
**Replies:** 3\
**Last updated:** [February 7, 2018, 12:33am UTC](https://discuss.elastic.co/t/setup-passwords-script-fails-when-ssl-keystore-password-is-not-set/118350 "2018-02-07T00:33:56Z")

</div>

Hi All, i installed ES 6.1.3 with X-Pack. The Steps: generate CA (with the Certutil) generate certs for each node signed y the CA in a pkc12 keystore with a password set. copied Elasticsearch on each node (tar.…

---

## [Kibana 4 - can I edit filters?](https://discuss.elastic.co/t/kibana-4-can-i-edit-filters/2531)

<div class="topic-metadata">

**Author:** [@Sam\_Barham](https://discuss.elastic.co/u/Sam_Barham)\
**Replies:** 3\
**Last updated:** [February 27, 2017, 3:29am UTC](https://discuss.elastic.co/t/kibana-4-can-i-edit-filters/2531 "2017-02-27T03:29:55Z")

</div>

In kibana 3, I often filter for some value, then edit the filter to show exactly what I want. For example, I see there are lots of logs of the form "Saved branch : 1234", where the number is different each time. That h…

---

## [How to split a fluentd log data?](https://discuss.elastic.co/t/how-to-split-a-fluentd-log-data/83798)

<div class="topic-metadata">

**Author:** [@LmYjQ](https://discuss.elastic.co/u/LmYjQ)\
**Replies:** 5\
**Last updated:** [April 28, 2017, 1:33am UTC](https://discuss.elastic.co/t/how-to-split-a-fluentd-log-data/83798 "2017-04-28T01:33:51Z")

</div>

here is one of my fluentd log data 2017-04-23T16:20:31+08:00 cv.product.access.mobile {"race":"album","video\_id":43633036,"ip":"117.177.78.48","cdn":"cdn-web-qn.colorv.cn","act":"update","ad\_type":"AdExchange","agent":"M…

---

## [RestHighLevelClient error while performing request](https://discuss.elastic.co/t/resthighlevelclient-error-while-performing-request/164948)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 1\
**Last updated:** [January 25, 2019, 12:37pm UTC](https://discuss.elastic.co/t/resthighlevelclient-error-while-performing-request/164948 "2019-01-25T12:37:00Z")

</div>

I recently upgraded to es 6.2.4 and migrated the java client to use the RestHighLevelClient. I'm getting this error regularly performing a query on elasticsearch v6.2.4: java.lang.RuntimeException: error while performin…

---

## [Logstash using 100% of one CPU core](https://discuss.elastic.co/t/logstash-using-100-of-one-cpu-core/44200)

<div class="topic-metadata">

**Author:** [@ruda\_porto](https://discuss.elastic.co/u/ruda_porto)\
**Replies:** 4\
**Last updated:** [April 16, 2017, 6:49am UTC](https://discuss.elastic.co/t/logstash-using-100-of-one-cpu-core/44200 "2017-04-16T06:49:46Z")

</div>

Hi, I'm using Logstash to parse two log files and use multiline filter of then. I experienced high CPU usage (100% of one CPU core) but on my log a have only this message: tail -n40 -f /var/log/logstash/logstash.log …

---

## [Single Server Single Node vs Single Server Multiple Node](https://discuss.elastic.co/t/single-server-single-node-vs-single-server-multiple-node/324081)

<div class="topic-metadata">

**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\
**Replies:** 4\
**Last updated:** [January 27, 2023, 10:06am UTC](https://discuss.elastic.co/t/single-server-single-node-vs-single-server-multiple-node/324081 "2023-01-27T10:06:16Z")

</div>

As the title suggests, I wonder if it is better to configure a single node or multiple nodes when configuring a node on a single server. I understood that the reason for configuring multiple nodes can have the advantage…

---

## [Missing JVM Metrics with Opentelemetry](https://discuss.elastic.co/t/missing-jvm-metrics-with-opentelemetry/315099)

<div class="topic-metadata">

**Author:** [@zirota](https://discuss.elastic.co/u/zirota)\
**Replies:** 1\
**Last updated:** [September 26, 2022, 10:52am UTC](https://discuss.elastic.co/t/missing-jvm-metrics-with-opentelemetry/315099 "2022-09-26T10:52:48Z")

</div>

Kibana version: 8.3.3 Elasticsearch version: 8.3.3 APM Server version: 8.3.3 Opentelemetry java agent: 1.18.0 Steps to reproduce: Setup Elasticsearch, Kibana & APM server 8.3.3 Setup Opentelemetry collector to expo…

---

## [Unable to launch elasticsearch from bat file in windows](https://discuss.elastic.co/t/unable-to-launch-elasticsearch-from-bat-file-in-windows/210729)

<div class="topic-metadata">

**Author:** [@daredevvll](https://discuss.elastic.co/u/daredevvll)\
**Replies:** 4\
**Last updated:** [December 7, 2019, 10:16pm UTC](https://discuss.elastic.co/t/unable-to-launch-elasticsearch-from-bat-file-in-windows/210729 "2019-12-07T22:16:34Z")

</div>

Elasticsearch Version: 7.5.0 java version "1.8.0\_231" Java(TM) SE Runtime Environment (build 1.8.0\_231-b11) Java HotSpot(TM) 64-Bit Server VM (build 25.231-b11, mixed mode) Windows 10 Professional Trying to start el…

---

## [Moving a single snapshot from repo to a different machine?](https://discuss.elastic.co/t/moving-a-single-snapshot-from-repo-to-a-different-machine/82856)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 4\
**Last updated:** [April 19, 2017, 12:29pm UTC](https://discuss.elastic.co/t/moving-a-single-snapshot-from-repo-to-a-different-machine/82856 "2017-04-19T12:29:56Z")

</div>

Hi, I want to use snapshots to do a daily backup of our .kibana index. So I created a repo and created a few snapshots (snapshot\_1, snapshot\_2, snapshot\_3) Now I would like to export only the latest snapshot to anoth…

---

## [Problem setting up cluster with NAT address](https://discuss.elastic.co/t/problem-setting-up-cluster-with-nat-address/18152)

<div class="topic-metadata">

**Author:** [@pmartins](https://discuss.elastic.co/u/pmartins)\
**Replies:** 5\
**Last updated:** [June 18, 2014, 12:05pm UTC](https://discuss.elastic.co/t/problem-setting-up-cluster-with-nat-address/18152 "2014-06-18T12:05:45Z")

</div>

Hi, I'm having some problems setting up a 1.2.1 ES cluster. I have two nodes, each one in a different data center/network. One of the nodes is behind a NAT address, so I set network.publish\_host to de NAT addre…

---

## [What is Indexing Rate(/sec) signifies in ElasticSearch](https://discuss.elastic.co/t/what-is-indexing-rate-sec-signifies-in-elasticsearch/160526)

<div class="topic-metadata">

**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\
**Replies:** 1\
**Last updated:** [December 13, 2018, 2:46am UTC](https://discuss.elastic.co/t/what-is-indexing-rate-sec-signifies-in-elasticsearch/160526 "2018-12-13T02:46:43Z")

</div>

What is Indexing Rate(/sec) signifies in ElasticSearch? Whether it is number of document that is getting Indexed. Here 1 Document refers to 1 record in the input file?

---

## [Filebeats records skipped and out of order](https://discuss.elastic.co/t/filebeats-records-skipped-and-out-of-order/131992)

<div class="topic-metadata">

**Author:** [@pgf](https://discuss.elastic.co/u/pgf)\
**Replies:** 7\
**Last updated:** [May 16, 2018, 4:42pm UTC](https://discuss.elastic.co/t/filebeats-records-skipped-and-out-of-order/131992 "2018-05-16T16:42:55Z")

</div>

Hi, I am very new to this but I am trying to create what I thought was a very simple filberts configuration. The file I am reading is not a "normal" log file with timestamps and formatted fields. The first few lines look…

---

## [Kibana 6.3.0 failing after TLS setup](https://discuss.elastic.co/t/kibana-6-3-0-failing-after-tls-setup/140053)

<div class="topic-metadata">

**Author:** [@jemueldalino](https://discuss.elastic.co/u/jemueldalino)\
**Replies:** 6\
**Last updated:** [July 18, 2018, 11:14am UTC](https://discuss.elastic.co/t/kibana-6-3-0-failing-after-tls-setup/140053 "2018-07-18T11:14:14Z")

</div>

Hi, I'm in the process of setting up TLS for my ESCluster by following the steps mentioned here: https://www.elastic.co/guide/en/elasticsearch/reference/6.3/configuring-tls.html ES master and slaves are ok as evidence …

---

## [Jdbc: using statement\_filepath together with sql\_last\_value](https://discuss.elastic.co/t/jdbc-using-statement-filepath-together-with-sql-last-value/45748)

<div class="topic-metadata">

**Author:** [@titzi](https://discuss.elastic.co/u/titzi)\
**Replies:** 5\
**Last updated:** [September 20, 2016, 12:05pm UTC](https://discuss.elastic.co/t/jdbc-using-statement-filepath-together-with-sql-last-value/45748 "2016-09-20T12:05:34Z")

</div>

I want to use the jdbc plugin to sync data from MySQL to Elasticsearch. The MySQL query is quite long so I chose to put it in an external SQL file using the 'statement\_filepath' option in the Logstash config file. Now …

---

## [Size exceed s Integer.MAX\_VALUE](https://discuss.elastic.co/t/size-exceed-s-integer-max-value/31481)

<div class="topic-metadata">

**Author:** [@Philip\_K\_Adetiloye](https://discuss.elastic.co/u/Philip_K_Adetiloye)\
**Replies:** 5\
**Last updated:** [October 10, 2015, 11:53am UTC](https://discuss.elastic.co/t/size-exceed-s-integer-max-value/31481 "2015-10-10T11:53:25Z")

</div>

@costin I'm running Spark on yarn and hitting this error every time when I run against a big Elasticsearch index 15/09/30 17:57:21 ERROR shuffle.OneForOneBlockFetcher: Failed while starting block fetches java.lang.Ru…

[Previous page](https://discuss.elastic.co/top.md?page=508&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=510&per_page=50&period=all)
