# Top

**URL:** https://discuss.elastic.co/top.md?page=517&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 518

---

## [Optional fields in custom index template](https://discuss.elastic.co/t/optional-fields-in-custom-index-template/229869)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 2:10am UTC](https://discuss.elastic.co/t/optional-fields-in-custom-index-template/229869 "2020-04-27T02:10:55Z")

</div>

Hi, Im consuming events from logstash to elastic, I have created an index template for it, Every document will have ONE of this three fields, so if a document has "uptime\_seconds" the other fields will be empty, So I was…

---

## [How to monitor java threads and ActiveMQ](https://discuss.elastic.co/t/how-to-monitor-java-threads-and-activemq/99087)

<div class="topic-metadata">

**Author:** [@vinay\_garg](https://discuss.elastic.co/u/vinay_garg)\
**Replies:** 6\
**Last updated:** [September 16, 2017, 5:25am UTC](https://discuss.elastic.co/t/how-to-monitor-java-threads-and-activemq/99087 "2017-09-16T05:25:36Z")

</div>

Hi Team, Currently i’m using Kibana,Elasticsearch,Logstash 5.5.2. Can any suggest how can i monitor ActiveMQ and threads by ELK? I have multiple routes in my fuse environment. I have to monitor each route threads using…

---

## [Elasticsearch process using ~100% of CPU](https://discuss.elastic.co/t/elasticsearch-process-using-100-of-cpu/46980)

<div class="topic-metadata">

**Author:** [@Paul\_Cardy](https://discuss.elastic.co/u/Paul_Cardy)\
**Replies:** 6\
**Last updated:** [April 30, 2016, 1:28am UTC](https://discuss.elastic.co/t/elasticsearch-process-using-100-of-cpu/46980 "2016-04-30T01:28:00Z")

</div>

I've had an issue with CPU usage for some time now on a 2.1.0 then 2.1.1 cluster with one node. The service seems to take up almost 100% cpu time despite there being no activity on the cluster (i.e., kibana and logstash …

---

## [Elastic Stack 7.7.1 and 6.8.10 Security Update](https://discuss.elastic.co/t/elastic-stack-7-7-1-and-6-8-10-security-update/235573)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [June 3, 2020, 2:16pm UTC](https://discuss.elastic.co/t/elastic-stack-7-7-1-and-6-8-10-security-update/235573 "2020-06-03T14:16:42Z")

</div>

Kibana cross site scripting (XSS) issue (ESA-2020-08) The TSVB visualization in Kibana contains a stored XSS flaw. An attacker who is able to edit or create a TSVB visualization could allow the attacker to obtain sensit…

---

## [Encrypt Translog or completely disable it?](https://discuss.elastic.co/t/encrypt-translog-or-completely-disable-it/142533)

<div class="topic-metadata">

**Author:** [@nukarak](https://discuss.elastic.co/u/nukarak)\
**Replies:** 5\
**Last updated:** [August 2, 2018, 8:03am UTC](https://discuss.elastic.co/t/encrypt-translog-or-completely-disable-it/142533 "2018-08-02T08:03:41Z")

</div>

Hi all, is there a possibility to disable the Translog ? I guess that not. And if we would like to encrypt the Translog, how could we proceed ? In an earlier version of ES, the Translog was using a TransLog - store th…

---

## [Indices:admin/template/put is a "cluster" action?](https://discuss.elastic.co/t/indices-admin-template-put-is-a-cluster-action/67262)

<div class="topic-metadata">

**Author:** [@amiryesh](https://discuss.elastic.co/u/amiryesh)\
**Replies:** 1\
**Last updated:** [December 5, 2016, 7:49pm UTC](https://discuss.elastic.co/t/indices-admin-template-put-is-a-cluster-action/67262 "2016-12-05T19:49:39Z")

</div>

Hello, I am trying to use the default "readwrite" role, I am performing a put-index-template operation, and get the error: action \[indices:admin/template/put\] is unauthorized for user \[readwrite\] As the message st…

---

## [Grok pattern with forward slashes result in grokfailure](https://discuss.elastic.co/t/grok-pattern-with-forward-slashes-result-in-grokfailure/143362)

<div class="topic-metadata">

**Author:** [@jmcazaux](https://discuss.elastic.co/u/jmcazaux)\
**Replies:** 4\
**Last updated:** [August 8, 2018, 11:49am UTC](https://discuss.elastic.co/t/grok-pattern-with-forward-slashes-result-in-grokfailure/143362 "2018-08-08T11:49:20Z")

</div>

Hi there, I am trying to extract path components from a "path-like" string and it fails with grokfailure. I have been banding my head on walls for houyrs with this. It works in "Grok Debugger", but fails in Logstash. M…

---

## [Term aggrigation with partition not working](https://discuss.elastic.co/t/term-aggrigation-with-partition-not-working/123533)

<div class="topic-metadata">

**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\
**Replies:** 7\
**Last updated:** [March 12, 2018, 5:22pm UTC](https://discuss.elastic.co/t/term-aggrigation-with-partition-not-working/123533 "2018-03-12T17:22:26Z")

</div>

when I am running the below query the partition is not working the query executes but the partition filter dose not work. I really don't know where am I going wrong. Can any one help me with this ? { "query": { "boo…

---

## [Building an ERP with Elasticsearch. Am I crazy?](https://discuss.elastic.co/t/building-an-erp-with-elasticsearch-am-i-crazy/19452)

<div class="topic-metadata">

**Author:** [@Raphael\_Waldmann](https://discuss.elastic.co/u/Raphael_Waldmann)\
**Replies:** 7\
**Last updated:** [April 11, 2015, 12:02am UTC](https://discuss.elastic.co/t/building-an-erp-with-elasticsearch-am-i-crazy/19452 "2015-04-11T00:02:50Z")

</div>

Hi, First I would like to thanks all of you for Elastic. I am thinking in use it in a ERP that I am building. What do you think about this? Am I crazy? Has someone face this? I really don't think that I am comfy…

---

## [No data in simple vega lite visualization](https://discuss.elastic.co/t/no-data-in-simple-vega-lite-visualization/231273)

<div class="topic-metadata">

**Author:** [@zonas27](https://discuss.elastic.co/u/zonas27)\
**Replies:** 4\
**Last updated:** [May 6, 2020, 2:01pm UTC](https://discuss.elastic.co/t/no-data-in-simple-vega-lite-visualization/231273 "2020-05-06T14:01:05Z")

</div>

Hello, I've been using elastic search/kibana for a couple of months, but I'm very new to vega visualization. I have a simple script like this : { $schema: https://vega.github.io/schema/vega-lite/v2.json t…

---

## [Unable to start Filebeat due to YAML config issue](https://discuss.elastic.co/t/unable-to-start-filebeat-due-to-yaml-config-issue/75875)

<div class="topic-metadata">

**Author:** [@ohk](https://discuss.elastic.co/u/ohk)\
**Replies:** 2\
**Last updated:** [February 21, 2017, 3:47pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat-due-to-yaml-config-issue/75875 "2017-02-21T15:47:48Z")

</div>

Hi I have this Filebeat configuration : - input\_type: log # Paths that should be crawled and fetched. Glob based paths. paths: - /home/ohk/data/nginx.log document\_type: nginx #line 22 multiline.pattern: \["^…

---

## [Group by only for the latest date in pie](https://discuss.elastic.co/t/group-by-only-for-the-latest-date-in-pie/56354)

<div class="topic-metadata">

**Author:** [@Andy\_Fan](https://discuss.elastic.co/u/Andy_Fan)\
**Replies:** 8\
**Last updated:** [August 2, 2016, 4:05am UTC](https://discuss.elastic.co/t/group-by-only-for-the-latest-date-in-pie/56354 "2016-08-02T04:05:36Z")

</div>

I have the following data. |date |cluster\_name|database\_name|table\_name|table\_size |2016-05-12|X|DB1|table1|100 |2016-05-12|X|DB1|table2|200 |2016-05-12|X|DB1|table3|700 |2016-05-13|X|DB1|table1|100 |2016-05-13|X|DB1…

---

## [Issue with 7.14 ES query failed: java.io.IOException: ElasticsearchException\[Invalid or missing build flavor \[oss\]\]](https://discuss.elastic.co/t/issue-with-7-14-es-query-failed-java-io-ioexception-elasticsearchexception-invalid-or-missing-build-flavor-oss/281396)

<div class="topic-metadata">

**Author:** [@elastic-sss](https://discuss.elastic.co/u/elastic-sss)\
**Replies:** 3\
**Last updated:** [August 13, 2021, 10:01pm UTC](https://discuss.elastic.co/t/issue-with-7-14-es-query-failed-java-io-ioexception-elasticsearchexception-invalid-or-missing-build-flavor-oss/281396 "2021-08-13T22:01:03Z")

</div>

Hi, My queries are working fine with ES 7.13.4 but when I upgraded to 7.14.0 I get this error ""class java.lang.IllegalStateException:ES query failed: java.io.IOException: ElasticsearchException\[Invalid or missing build…

---

## [Grok pattern Help](https://discuss.elastic.co/t/grok-pattern-help/29729)

<div class="topic-metadata">

**Author:** [@Didier](https://discuss.elastic.co/u/Didier)\
**Replies:** 3\
**Last updated:** [September 22, 2015, 7:01pm UTC](https://discuss.elastic.co/t/grok-pattern-help/29729 "2015-09-22T19:01:54Z")

</div>

Hello, I would need some help in generating a Grok pattern. I have the following log file. The lines alternate between a line with a timestamp and a message and another line with the log level and another message: Au…

---

## [PostgreSQL + Elasticsearch synchronization](https://discuss.elastic.co/t/postgresql-elasticsearch-synchronization/100530)

<div class="topic-metadata">

**Author:** [@rrader](https://discuss.elastic.co/u/rrader)\
**Replies:** 1\
**Last updated:** [September 14, 2017, 12:32pm UTC](https://discuss.elastic.co/t/postgresql-elasticsearch-synchronization/100530 "2017-09-14T12:32:44Z")

</div>

WE use Java and in application we write, modify and delete data in PostgreSQL. How to synchronize data between PostgreSQL and Elasticsearch? so, they will have same data.

---

## [Beats\_input\_raw\_event](https://discuss.elastic.co/t/beats-input-raw-event/130391)

<div class="topic-metadata">

**Author:** [@nabha](https://discuss.elastic.co/u/nabha)\
**Replies:** 6\
**Last updated:** [May 8, 2018, 10:46am UTC](https://discuss.elastic.co/t/beats-input-raw-event/130391 "2018-05-08T10:46:23Z")

</div>

I am trying to fetch a .json file through filebeat to send logs to logstash. But it throws an error as " "tags" =\> \[ \[0\] "beats\_input\_raw\_event" \]" My filebeat.yml has following configuration: filebeat.prospectors: …

---

## [Index twitter data with coordinates geo\_point parse exception](https://discuss.elastic.co/t/index-twitter-data-with-coordinates-geo-point-parse-exception/109259)

<div class="topic-metadata">

**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Replies:** 8\
**Last updated:** [November 29, 2017, 2:07pm UTC](https://discuss.elastic.co/t/index-twitter-data-with-coordinates-geo-point-parse-exception/109259 "2017-11-29T14:07:58Z")

</div>

Hello, I'm trying to index some twitter data without success because of the coordinates field that I want to use as geo\_point. Here is my template: Here is a document: When I run steps to delete index, replace …

---

## [Api key & error](https://discuss.elastic.co/t/api-key-error/243873)

<div class="topic-metadata">

**Author:** [@maxxitutti](https://discuss.elastic.co/u/maxxitutti)\
**Replies:** 5\
**Last updated:** [August 19, 2020, 11:11am UTC](https://discuss.elastic.co/t/api-key-error/243873 "2020-08-19T11:11:48Z")

</div>

Hello . i am new with elk sollution co forgive me :). i want to run my first beat on my remote machine ... from the begining i want to deploy api-key for my auditbeat. according to documentation https://www.elastic.co…

---

## [Elasticsearch Service on Microsoft Azure is here!](https://discuss.elastic.co/t/elasticsearch-service-on-microsoft-azure-is-here/197957)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [September 4, 2019, 12:05am UTC](https://discuss.elastic.co/t/elasticsearch-service-on-microsoft-azure-is-here/197957 "2019-09-04T00:05:41Z")

</div>

Elasticsearch Service on Microsoft Azure is here! We are happy to announce that the Elasticsearch Service on Elastic Cloud now supports deployments on Microsoft Azure. Get a free trial here. Deploy hosted Elasticsearch …

---

## [High CPU on Bulk requests](https://discuss.elastic.co/t/high-cpu-on-bulk-requests/39969)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 6\
**Last updated:** [January 24, 2016, 9:47pm UTC](https://discuss.elastic.co/t/high-cpu-on-bulk-requests/39969 "2016-01-24T21:47:00Z")

</div>

Hi, We have 3 ES servers in a cluster, each with 52GB RAM and 8 Cores. Each server has 4 local SSD disks attached to it. ES version is 1.5.2 We are using bulk inserts through logstash with flush\_size of 2000. The s…

---

## [Metricbeat 7.5.1 Kubernetes Daemonset 400 Bad Request](https://discuss.elastic.co/t/metricbeat-7-5-1-kubernetes-daemonset-400-bad-request/216099)

<div class="topic-metadata">

**Author:** [@diegomolina](https://discuss.elastic.co/u/diegomolina)\
**Replies:** 5\
**Last updated:** [January 23, 2020, 2:36pm UTC](https://discuss.elastic.co/t/metricbeat-7-5-1-kubernetes-daemonset-400-bad-request/216099 "2020-01-23T14:36:05Z")

</div>

Hello, new user here. I recently deployed ECK on my own server with kubeadm (currently I'm just testing, so I have only one master node where I also schedule pods), using the ECK operator pattern and the quickstart guide…

---

## [MSSQL Use cases for elasticsearch stack?](https://discuss.elastic.co/t/mssql-use-cases-for-elasticsearch-stack/107303)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 7\
**Last updated:** [November 13, 2017, 6:10pm UTC](https://discuss.elastic.co/t/mssql-use-cases-for-elasticsearch-stack/107303 "2017-11-13T18:10:06Z")

</div>

Hi Guys, Can someone please elaborate what could be use cases for MS-SQL? OR Database in general? I mean what kind of dashboards can be created our SQL data? TIA

---

## [ELK storing data and reading from database](https://discuss.elastic.co/t/elk-storing-data-and-reading-from-database/64073)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 3\
**Last updated:** [October 26, 2016, 11:40pm UTC](https://discuss.elastic.co/t/elk-storing-data-and-reading-from-database/64073 "2016-10-26T23:40:49Z")

</div>

Hi There, I currently have ELK setup with redis being the messaging queue in the setup. My question is if I receive 10 log files from 10 different servers, how far back can I go..and if I go back in time..do I also nee…

---

## [Converting Date Type To String Type](https://discuss.elastic.co/t/converting-date-type-to-string-type/47514)

<div class="topic-metadata">

**Author:** [@saba\_soltani](https://discuss.elastic.co/u/saba_soltani)\
**Replies:** 6\
**Last updated:** [April 15, 2016, 10:56pm UTC](https://discuss.elastic.co/t/converting-date-type-to-string-type/47514 "2016-04-15T22:56:35Z")

</div>

Hi, In my dataset, there is a field which type is date with "dddd" format (Day of Week). Can I create a scripted field in kibana which contains the value of this field but in the form of string? For example : The d…

---

## [Alerting throws "node \[es-client1\] does not have the \[remote\_cluster\_client\] role"](https://discuss.elastic.co/t/alerting-throws-node-es-client1-does-not-have-the-remote-cluster-client-role/267073)

<div class="topic-metadata">

**Author:** [@hrak](https://discuss.elastic.co/u/hrak)\
**Replies:** 3\
**Last updated:** [April 6, 2021, 1:15pm UTC](https://discuss.elastic.co/t/alerting-throws-node-es-client1-does-not-have-the-remote-cluster-client-role/267073 "2021-04-06T13:15:34Z")

</div>

Hi all, My cluster consists of the following nodes: 2x coordinating node (empty node.roles) 3x master (node.roles = \['master'\]) 5x data (node.roles = \['data', 'ingest', 'ml', 'transform'\]) I have recently upgraded f…

---

## [I cant start up Elastic search](https://discuss.elastic.co/t/i-cant-start-up-elastic-search/253348)

<div class="topic-metadata">

**Author:** [@Fisnik\_Myrtezaj](https://discuss.elastic.co/u/Fisnik_Myrtezaj)\
**Replies:** 8\
**Last updated:** [October 30, 2020, 8:07am UTC](https://discuss.elastic.co/t/i-cant-start-up-elastic-search/253348 "2020-10-30T08:07:44Z")

</div>

When i try startup the elasticsearch i get this error : ./bin/elasticsearch-env: line 77: /volume1/web/elasticsearch/jdk/bin/java: cannot execute binary file: Exec format error im using Linux nas synology

---

## [Not seeing Packetbeat info (no packetbeat data in Elasticsearch) for 5.0 Alpha 4](https://discuss.elastic.co/t/not-seeing-packetbeat-info-no-packetbeat-data-in-elasticsearch-for-5-0-alpha-4/55583)

<div class="topic-metadata">

**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\
**Replies:** 8\
**Last updated:** [July 15, 2016, 10:27am UTC](https://discuss.elastic.co/t/not-seeing-packetbeat-info-no-packetbeat-data-in-elasticsearch-for-5-0-alpha-4/55583 "2016-07-15T10:27:17Z")

</div>

I went through the newest Docs to install the Alpha 4 stack, and was just trying to populate it with some data. ES 5.0-4 works Kibana 5.0-4 works Filebeat 5.0-4 works But when I tried to install Packetbeat, everythin…

---

## [Adding new master nodes to old cluster](https://discuss.elastic.co/t/adding-new-master-nodes-to-old-cluster/155887)

<div class="topic-metadata">

**Author:** [@saif](https://discuss.elastic.co/u/saif)\
**Replies:** 7\
**Last updated:** [November 20, 2018, 1:04pm UTC](https://discuss.elastic.co/t/adding-new-master-nodes-to-old-cluster/155887 "2018-11-20T13:04:27Z")

</div>

I have a production cluster with 4 master+Data node under X-pack Plat licence We planning to split master and data node role, so i will add 3 master only node and set the master/data node to data node only so my ques…

---

## [Node.js Application Fail to Connect Elasticsearch](https://discuss.elastic.co/t/node-js-application-fail-to-connect-elasticsearch/348223)

<div class="topic-metadata">

**Author:** [@Burak\_Karatay](https://discuss.elastic.co/u/Burak_Karatay)\
**Replies:** 5\
**Last updated:** [December 4, 2023, 11:50am UTC](https://discuss.elastic.co/t/node-js-application-fail-to-connect-elasticsearch/348223 "2023-12-04T11:50:27Z")

</div>

I have very simple Node.js Application to connect my local Elasticsearch engine, when I try to use Kibana, I can connect after provide user and email but when I try to send ping from my Node.js app It gives following err…

---

## [Can't get log level in filebeat](https://discuss.elastic.co/t/cant-get-log-level-in-filebeat/136450)

<div class="topic-metadata">

**Author:** [@xdholy](https://discuss.elastic.co/u/xdholy)\
**Replies:** 5\
**Last updated:** [June 20, 2018, 10:21am UTC](https://discuss.elastic.co/t/cant-get-log-level-in-filebeat/136450 "2018-06-20T10:21:25Z")

</div>

Hi, in our project we store all our logs in one log file with the log pattern: timestamp-server-id-loglevel-program-module-... I set up a filebeat-logstash-es stream and i want to apply different grok patterns to diffe…

---

## [More than one document with the same \_id](https://discuss.elastic.co/t/more-than-one-document-with-the-same-id/175220)

<div class="topic-metadata">

**Author:** [@zvonimir](https://discuss.elastic.co/u/zvonimir)\
**Replies:** 8\
**Last updated:** [April 4, 2019, 8:29am UTC](https://discuss.elastic.co/t/more-than-one-document-with-the-same-id/175220 "2019-04-04T08:29:38Z")

</div>

Hello. I have encountered strange issue on ES 5.6.4 and Java 8. Multiple documents with the same \_id and some with missing \_version are result when using scripted\_upsert to insert and merge multiple events into single d…

---

## [Using Multiline Codec and Grok to collect similar lines](https://discuss.elastic.co/t/using-multiline-codec-and-grok-to-collect-similar-lines/39041)

<div class="topic-metadata">

**Author:** [@krobi64](https://discuss.elastic.co/u/krobi64)\
**Replies:** 6\
**Last updated:** [January 15, 2016, 10:21pm UTC](https://discuss.elastic.co/t/using-multiline-codec-and-grok-to-collect-similar-lines/39041 "2016-01-15T22:21:41Z")

</div>

Hi, I'm trying to parse HTTP logs, and I want to collect all of the request headers into a single field. I've used the multiline codec to put all of the lines of a single HTTP request/response into a single message. I…

---

## [Plugin to delete index data after some time interval](https://discuss.elastic.co/t/plugin-to-delete-index-data-after-some-time-interval/37430)

<div class="topic-metadata">

**Author:** [@ushadatt](https://discuss.elastic.co/u/ushadatt)\
**Replies:** 6\
**Last updated:** [December 19, 2015, 5:41am UTC](https://discuss.elastic.co/t/plugin-to-delete-index-data-after-some-time-interval/37430 "2015-12-19T05:41:32Z")

</div>

I want to delete my index's data which exceeds time limit of 30 days, not the index. Is there any plugin available for it? or if not, how to do the same?

---

## [Average text field length](https://discuss.elastic.co/t/average-text-field-length/170534)

<div class="topic-metadata">

**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\
**Replies:** 3\
**Last updated:** [March 2, 2019, 12:01pm UTC](https://discuss.elastic.co/t/average-text-field-length/170534 "2019-03-02T12:01:27Z")

</div>

Hi, is there way to get the average length of a text field? I got "Fielddata is disabled on text fields by default" exception when I try to use avg aggregation. In the following query, "reason" is a text field type. …

---

## [Count of values on array field on visualization](https://discuss.elastic.co/t/count-of-values-on-array-field-on-visualization/72501)

<div class="topic-metadata">

**Author:** [@111126](https://discuss.elastic.co/u/111126)\
**Replies:** 3\
**Last updated:** [January 26, 2017, 7:26am UTC](https://discuss.elastic.co/t/count-of-values-on-array-field-on-visualization/72501 "2017-01-26T07:26:24Z")

</div>

Hello. I have the next field "purchasePlanRowItem\_okei\_code": \[ "168", "168", "168", "168", "168", "168", "876" \], This is array. When I create pie chart visualization, I turn Split Slices, Aggregation - T…

---

## [ERROR: Multiple ES-Hadoop versions detected](https://discuss.elastic.co/t/error-multiple-es-hadoop-versions-detected/59220)

<div class="topic-metadata">

**Author:** [@OmarBarac](https://discuss.elastic.co/u/OmarBarac)\
**Replies:** 3\
**Last updated:** [September 1, 2016, 8:26am UTC](https://discuss.elastic.co/t/error-multiple-es-hadoop-versions-detected/59220 "2016-09-01T08:26:48Z")

</div>

Hi, We are using Hadoop with elasticsearch on a cluster of 5 nodes and we are using : CDH 5.8.0, eastic search 2.3.5 and elasticsearch-hadoop-2.3.4. We created a table on elastic search using hive and it worked and we …

---

## [Unable to rename host to \[host\]\[name\]](https://discuss.elastic.co/t/unable-to-rename-host-to-host-name/227824)

<div class="topic-metadata">

**Author:** [@boyhittscar](https://discuss.elastic.co/u/boyhittscar)\
**Replies:** 4\
**Last updated:** [April 16, 2020, 5:05pm UTC](https://discuss.elastic.co/t/unable-to-rename-host-to-host-name/227824 "2020-04-16T17:05:17Z")

</div>

Hello - I feel like this should be easy, and I'm not really sure why this isn't working. I have the following data host: MYPC endpoint\_type: computer To follow ECS, I'm attempting to do a mutate and rename /nest the…

---

## [ElasticSearch high CPU on merge threads](https://discuss.elastic.co/t/elasticsearch-high-cpu-on-merge-threads/46415)

<div class="topic-metadata">

**Author:** [@razafinr](https://discuss.elastic.co/u/razafinr)\
**Replies:** 7\
**Last updated:** [April 6, 2016, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-on-merge-threads/46415 "2016-04-06T13:33:42Z")

</div>

Hi, I am doing a bulk indexing every 10 minutes using logstash to send data to ElasticSearch. For almost 20 days everything went OK, but today I am getting the following issue: ElasticSearch is using very high CPU ,…

---

## [How to configure logstash to send data to Elasticsearch cluster in 6.2](https://discuss.elastic.co/t/how-to-configure-logstash-to-send-data-to-elasticsearch-cluster-in-6-2/134869)

<div class="topic-metadata">

**Author:** [@Shailesh\_Vaidya](https://discuss.elastic.co/u/Shailesh_Vaidya)\
**Replies:** 3\
**Last updated:** [June 7, 2018, 7:00am UTC](https://discuss.elastic.co/t/how-to-configure-logstash-to-send-data-to-elasticsearch-cluster-in-6-2/134869 "2018-06-07T07:00:21Z")

</div>

Hello, I have setup elasticsearch cluster with two node. I need to use this as high availability cluster. Currently logstash is sending data to master node and it gets replicate to slave node. However if Master node go…

---

## [ElasticSearch configuration for Version: 5.2.0](https://discuss.elastic.co/t/elasticsearch-configuration-for-version-5-2-0/75249)

<div class="topic-metadata">

**Author:** [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\
**Replies:** 6\
**Last updated:** [February 15, 2017, 9:22pm UTC](https://discuss.elastic.co/t/elasticsearch-configuration-for-version-5-2-0/75249 "2017-02-15T21:22:50Z")

</div>

Hi Team I installed elastic search-5.2.0 version On elasticsearch.yml i tried to open network.host on 0:0:0:0. Elastic search is failing here. Can anyone help me here. It worked for older version. ------------------…

---

## [Parsing a long json line with filebeat to logstash](https://discuss.elastic.co/t/parsing-a-long-json-line-with-filebeat-to-logstash/145231)

<div class="topic-metadata">

**Author:** [@Gab\_Ubi](https://discuss.elastic.co/u/Gab_Ubi)\
**Replies:** 5\
**Last updated:** [August 27, 2018, 7:07pm UTC](https://discuss.elastic.co/t/parsing-a-long-json-line-with-filebeat-to-logstash/145231 "2018-08-27T19:07:37Z")

</div>

Hi all, Im trying to parse a big json line into logstash. The json is an array of multpiple object. I'd like each object to be an event and each value to be a field. This is my filebeat config: filebeat.inputs: - typ…

---

## [Can logstash push data into Hadoop?](https://discuss.elastic.co/t/can-logstash-push-data-into-hadoop/32961)

<div class="topic-metadata">

**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\
**Replies:** 8\
**Last updated:** [November 2, 2015, 1:07pm UTC](https://discuss.elastic.co/t/can-logstash-push-data-into-hadoop/32961 "2015-11-02T13:07:48Z")

</div>

Simple question as per the subject line. I need to push data from my source into Hadoop. Can this be done? If yes which supported output plugin could be used?

---

## [Store location is not shared between node](https://discuss.elastic.co/t/store-location-is-not-shared-between-node/21967)

<div class="topic-metadata">

**Author:** [@Andre\_Hansel](https://discuss.elastic.co/u/Andre_Hansel)\
**Replies:** 8\
**Last updated:** [February 5, 2015, 6:06am UTC](https://discuss.elastic.co/t/store-location-is-not-shared-between-node/21967 "2015-02-05T06:06:59Z")

</div>

I'm trying to set up a snapshot repository to get a consistent backup (in order to use elasticsearch as primary data store). When I try to create the repository, I get an error 500: error: "RemoteTransportException…

---

## [Index creation based on file name](https://discuss.elastic.co/t/index-creation-based-on-file-name/101307)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 3\
**Last updated:** [September 21, 2017, 4:36pm UTC](https://discuss.elastic.co/t/index-creation-based-on-file-name/101307 "2017-09-21T16:36:46Z")

</div>

Hi All i want to create dynamic index based on the file name -- currently my input part is - input { file { path =\> "E:\\Local\_Elasticsearch\\logstashv5\\datafiles/\*.csv" start\_position =\> "beginning" } } and my …

---

## [ES's handling of negative queries](https://discuss.elastic.co/t/ess-handling-of-negative-queries/3214)

<div class="topic-metadata">

**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\
**Replies:** 3\
**Last updated:** [August 13, 2010, 9:47am UTC](https://discuss.elastic.co/t/ess-handling-of-negative-queries/3214 "2010-08-13T09:47:16Z")

</div>

Hi, I've been really surprised at how ES correctly handles negative queries when passed in through a query\_string, in most cases. There are tons of discussions out there with lucene and negative operations that e…

---

## [Logstash conditional in output](https://discuss.elastic.co/t/logstash-conditional-in-output/101897)

<div class="topic-metadata">

**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\
**Replies:** 5\
**Last updated:** [September 29, 2017, 1:29pm UTC](https://discuss.elastic.co/t/logstash-conditional-in-output/101897 "2017-09-29T13:29:34Z")

</div>

Hi, I wanted to know if it is possible to carry out an action based on a conditional in the output section of my logstash configuration file. I am parsing a file into CSV format and want to add a header. I do this by ad…

---

## [Jdbc\_static: Getting a sql syntax error I did'nt write](https://discuss.elastic.co/t/jdbc-static-getting-a-sql-syntax-error-i-didnt-write/187844)

<div class="topic-metadata">

**Author:** [@ErikWarming](https://discuss.elastic.co/u/ErikWarming)\
**Replies:** 6\
**Last updated:** [July 5, 2019, 2:53pm UTC](https://discuss.elastic.co/t/jdbc-static-getting-a-sql-syntax-error-i-didnt-write/187844 "2019-07-05T14:53:38Z")

</div>

With logstash I am trying to Extract some tables, Transform them locally on the logstash mashine, and then Load the result to Elasticsearch. The reason for this solution is due to very limited computing power on the sour…

---

## [Log stash not connecting to Elasticsearch](https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263)

<div class="topic-metadata">

**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\
**Replies:** 4\
**Last updated:** [June 16, 2022, 7:01am UTC](https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263 "2022-06-16T07:01:36Z")

</div>

Hi Team, my log stash is unable to connect Elastic search. Telnet is working fine but log stash pipeline is not able to create connection with Elasticsearch. input { stdin{} } output { elasticsearch { hosts =\> …

---

## [Failed to authenticate user \[kibana\]](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana/104986)

<div class="topic-metadata">

**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\
**Replies:** 2\
**Last updated:** [October 24, 2017, 8:41am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana/104986 "2017-10-24T08:41:30Z")

</div>

Hello all, I copied the data from one elastic server to new elastic server facing the authentication issue . \[2017-10-23T22:06:55,326\]\[WARN \]\[o.e.x.s.a.AuthenticationService\] \[Z4Il9\_V\] An unexpected error occurred …

---

## [Failed to transform sample model.Sample](https://discuss.elastic.co/t/failed-to-transform-sample-model-sample/249962)

<div class="topic-metadata">

**Author:** [@OrangeDog](https://discuss.elastic.co/u/OrangeDog)\
**Replies:** 7\
**Last updated:** [September 29, 2020, 2:06pm UTC](https://discuss.elastic.co/t/failed-to-transform-sample-model-sample/249962 "2020-09-29T14:06:33Z")

</div>

Kibana version: 7.9.2 Elasticsearch version: 7.9.2 APM Server version: 7.9.2 APM Agent language and version: Java 1.18.0 Browser version: N/A Original install method (e.g. download page, yum, deb, from source, etc.)…

[Previous page](https://discuss.elastic.co/top.md?page=516&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=518&per_page=50&period=all)
