# Top **URL:** https://discuss.elastic.co/top.md?page=528&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 529 --- ## [Elastic + Kibana Server Specs Recommendation](https://discuss.elastic.co/t/elastic-kibana-server-specs-recommendation/19263)
**Author:** [@AK1](https://discuss.elastic.co/u/AK1)\ **Replies:** 2\ **Last updated:** [August 17, 2014, 11:49am UTC](https://discuss.elastic.co/t/elastic-kibana-server-specs-recommendation/19263 "2014-08-17T11:49:52Z")
Hi, I recently launched ELK and I'm receiving about 3,000,000 - 8,000,000 docs per day (~ 5GB) I'm running on AWS on a small server, and after a week of data collection the system becomes very very slow, mainly w… --- ## [Filebeat Incompatibility with Opensearch](https://discuss.elastic.co/t/filebeat-incompatibility-with-opensearch/320757)
**Author:** [@Anish\_Mittal](https://discuss.elastic.co/u/Anish_Mittal)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 6:19pm UTC](https://discuss.elastic.co/t/filebeat-incompatibility-with-opensearch/320757 "2022-12-20T18:19:09Z")
I have spent almost 4 days on filebeat and opensearch. I have used Filebeat \[7.0.0, 8.5.2, 6.0.0\] and Opensearch 2.4.0. But getting the error: "pipeline/output.go:100 Failed to connect to backoff(elasticsearch(http://lo… --- ## [Best way to manage missing data of date type while using bulk to inject data into elasticsearch](https://discuss.elastic.co/t/best-way-to-manage-missing-data-of-date-type-while-using-bulk-to-inject-data-into-elasticsearch/194398)
**Author:** [@Saurabh\_Sharma\_IIT](https://discuss.elastic.co/u/Saurabh_Sharma_IIT)\ **Replies:** 3\ **Last updated:** [August 11, 2019, 8:09am UTC](https://discuss.elastic.co/t/best-way-to-manage-missing-data-of-date-type-while-using-bulk-to-inject-data-into-elasticsearch/194398 "2019-08-11T08:09:59Z")
Hi, I am trying to inject csv file into elasticsearch. I have a row named "starttime". In this columns some rows are missing. I have converted this to datetime format using pandas to\_datetime. Now when I inject this data… --- ## [Query randomly returns empty and right results](https://discuss.elastic.co/t/query-randomly-returns-empty-and-right-results/174673)
**Author:** [@Andrey\_Tomilin](https://discuss.elastic.co/u/Andrey_Tomilin)\ **Replies:** 3\ **Last updated:** [March 31, 2019, 2:31pm UTC](https://discuss.elastic.co/t/query-randomly-returns-empty-and-right-results/174673 "2019-03-31T14:31:09Z")
Elasticsearch 5.6.5. 2 data nodes + 1 index node and 2 shards for each index. For the same query http://localhost:9200/indexname-2019.03/\_search?q=\_id:1990868144 Every time I run it I get different result: First time… --- ## [marvelプラグインが起因してか、CPUが増えております。](https://discuss.elastic.co/t/marvel-cpu/40823)
**Author:** [@hase\_gawa](https://discuss.elastic.co/u/hase_gawa)\ **Replies:** 8\ **Last updated:** [February 9, 2016, 5:42am UTC](https://discuss.elastic.co/t/marvel-cpu/40823 "2016-02-09T05:42:18Z")
昨日程からMACがうなっており、原因探る中で、marvelプラグインが起因しての問題のような気がします。 参照URL https://github.com/elastic/elasticsearch/issues/4288 ただ、これに対して、どのように対処してあげればよいのかわからず困っております。 elasticsearch stop といったことも、そもそもそのようなコマンドがない？ためできませんでした。 ela… --- ## [Decoding gzip response body from Packetbeat](https://discuss.elastic.co/t/decoding-gzip-response-body-from-packetbeat/132579)
**Author:** [@lusid](https://discuss.elastic.co/u/lusid)\ **Replies:** 0\ **Last updated:** [May 19, 2018, 8:40pm UTC](https://discuss.elastic.co/t/decoding-gzip-response-body-from-packetbeat/132579 "2018-05-19T20:40:11Z")
Hello everyone, This has been driving me crazy lately, so any help that can be provided would be HUGELY appreciated. I am using Packetbeat to monitor the requests/responses into/out of Elasticsearch client nodes using … --- ## [Logstash not getting "message" from log file input](https://discuss.elastic.co/t/logstash-not-getting-message-from-log-file-input/29333)
**Author:** [@Jtc](https://discuss.elastic.co/u/Jtc)\ **Replies:** 6\ **Last updated:** [September 16, 2015, 3:52pm UTC](https://discuss.elastic.co/t/logstash-not-getting-message-from-log-file-input/29333 "2015-09-16T15:52:01Z")
If I start Logstash with -f /etc/logstash/conf.d then one of my conf files (windowslogs.conf; whose job it is to read and parse Windows log files forwarded by NXlog on Windows hosts) does not work. Logstash recognizes t… --- ## [Full body response to elasticsearch](https://discuss.elastic.co/t/full-body-response-to-elasticsearch/199973)
**Author:** [@coachbjork](https://discuss.elastic.co/u/coachbjork)\ **Replies:** 7\ **Last updated:** [November 10, 2019, 9:00pm UTC](https://discuss.elastic.co/t/full-body-response-to-elasticsearch/199973 "2019-11-10T21:00:10Z")
I am trying to figure out how to index the full body response into elastics using Heartbeat. I found this: https://discuss.elastic.co/t/send-body-response-to-elastic/188516 And it is now solved, but seems to only be du… --- ## [When does @timestamp get added?](https://discuss.elastic.co/t/when-does-timestamp-get-added/129844)
**Author:** [@aidofitz](https://discuss.elastic.co/u/aidofitz)\ **Replies:** 1\ **Last updated:** [May 4, 2018, 11:52am UTC](https://discuss.elastic.co/t/when-does-timestamp-get-added/129844 "2018-05-04T11:52:22Z")
Hi, I've got a logstash pipeline taking events from a HTTP poller input to an ES output, configured with persistent queue. The incoming events do not contain an @timestamp field, and we don't add one at any point in the… --- ## [Elastick search goes down](https://discuss.elastic.co/t/elastick-search-goes-down/89060)
**Author:** [@manojrai](https://discuss.elastic.co/u/manojrai)\ **Replies:** 7\ **Last updated:** [June 12, 2017, 7:26pm UTC](https://discuss.elastic.co/t/elastick-search-goes-down/89060 "2017-06-12T19:26:10Z")
Hi Team, The elastic serach went down with the following error . \[2017-06-12T07:29:36,351\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[vhelp-prd-es1\] fatal error in thread \[elasticsearch\[\]\[bulk\]\[T#2\]\], exit… --- ## [Roles required to create logs](https://discuss.elastic.co/t/roles-required-to-create-logs/211917)
**Author:** [@Matthew\_Petrie](https://discuss.elastic.co/u/Matthew_Petrie)\ **Replies:** 5\ **Last updated:** [December 21, 2019, 4:38pm UTC](https://discuss.elastic.co/t/roles-required-to-create-logs/211917 "2019-12-21T16:38:47Z")
I'm using the Node.js logger winston and winston-elasticsearch to send logs to Elastic Cloud (uses https://www.npmjs.com/package/@elastic/elasticsearch under the hood) and am using basic authentication (username & passwo… --- ## [Kibana 4 behind reverse proxy with URL "directory" prefix](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-with-url-directory-prefix/27227)
**Author:** [@ecweaver](https://discuss.elastic.co/u/ecweaver)\ **Replies:** 2\ **Last updated:** [August 12, 2015, 3:43pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-with-url-directory-prefix/27227 "2015-08-12T15:43:44Z")
We have to run Kibana 4 behind a reverse proxy, using Apache, due to Single-Sign-On requirements. I have set up a reverse-proxy for the prefix k4/ to proxy out to localhost:5601. The URLs come back without the prefix, … --- ## [Kibana 4 change discover settings (quick count)](https://discuss.elastic.co/t/kibana-4-change-discover-settings-quick-count/41306)
**Author:** [@jonatanzafar59](https://discuss.elastic.co/u/jonatanzafar59)\ **Replies:** 3\ **Last updated:** [February 9, 2016, 7:35pm UTC](https://discuss.elastic.co/t/kibana-4-change-discover-settings-quick-count/41306 "2016-02-09T19:35:18Z")
Hi! In Kibana 4, when I heat discover I get a default quick count of 500 documents. How can this value be changed? --- ## [Exact phrase match with special characters '.' and ':'](https://discuss.elastic.co/t/exact-phrase-match-with-special-characters-and/134402)
**Author:** [@Santhosh\_ic](https://discuss.elastic.co/u/Santhosh_ic)\ **Replies:** 2\ **Last updated:** [June 6, 2018, 9:37am UTC](https://discuss.elastic.co/t/exact-phrase-match-with-special-characters-and/134402 "2018-06-06T09:37:08Z")
Hi, I want to match "command. Id:", exactly in 'Message'. I have tried this, { "query": { "match\_phrase": { "Message": { "query": "command. id:", "slop": 0 } } } } However, this matches "Command ID" and "com… --- ## [MultiMatch Over Different Field Types Fails](https://discuss.elastic.co/t/multimatch-over-different-field-types-fails/141875)
**Author:** [@eskrew](https://discuss.elastic.co/u/eskrew)\ **Replies:** 5\ **Last updated:** [July 27, 2018, 3:48pm UTC](https://discuss.elastic.co/t/multimatch-over-different-field-types-fails/141875 "2018-07-27T15:48:31Z")
If you have both number and string fields and you try and multimatch it , it will fail on the low level call. I am not sure if it fails on converting the string to the int for comparision or what. I assumed it would igno… --- ## [How to sync delete operation from relation db to ES](https://discuss.elastic.co/t/how-to-sync-delete-operation-from-relation-db-to-es/40327)
**Author:** [@Gary\_Wu](https://discuss.elastic.co/u/Gary_Wu)\ **Replies:** 5\ **Last updated:** [March 17, 2016, 11:31am UTC](https://discuss.elastic.co/t/how-to-sync-delete-operation-from-relation-db-to-es/40327 "2016-03-17T11:31:46Z")
Hello all. I am researching on how to sync relation database to elastic search using EsRDD. I found the EsRDD doesn't support delete operation from previous conversation in this forum. I encounter a problem, if a row i… --- ## [Can I increase/decrease nodes with auto scaling on AWS?](https://discuss.elastic.co/t/can-i-increase-decrease-nodes-with-auto-scaling-on-aws/67443)
**Author:** [@tigerby](https://discuss.elastic.co/u/tigerby)\ **Replies:** 1\ **Last updated:** [November 30, 2016, 5:32am UTC](https://discuss.elastic.co/t/can-i-increase-decrease-nodes-with-auto-scaling-on-aws/67443 "2016-11-30T05:32:43Z")
Sometimes, So many quering requests are come to My Elasticsearch cluster. then, CPU usage peaks to 100% every nodes. It is usually 20~30%. In this case, each request takes too long, so I causes some timeout problem to … --- ## [Wildcard search on analyzed field](https://discuss.elastic.co/t/wildcard-search-on-analyzed-field/12101)
**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\ **Replies:** 3\ **Last updated:** [May 27, 2013, 9:03am UTC](https://discuss.elastic.co/t/wildcard-search-on-analyzed-field/12101 "2013-05-27T09:03:28Z")
Hi All, We would like to enable wildcard search on analyzed field. As per my level of understanding, if analyzed is true, then wildcard search would not work. Please suggest some ways to achieve above usecase.… --- ## [Filter vs query](https://discuss.elastic.co/t/filter-vs-query/317297)
**Author:** [@Ismet](https://discuss.elastic.co/u/Ismet)\ **Replies:** 1\ **Last updated:** [October 24, 2022, 12:20pm UTC](https://discuss.elastic.co/t/filter-vs-query/317297 "2022-10-24T12:20:52Z")
Hi, can we use only filter without query and can we use query string with wildcard in filter. What are benefits of using only filter and using query string + filter? There is example of using only filter. Is this code o… --- ## [Kibana visualization request body](https://discuss.elastic.co/t/kibana-visualization-request-body/129914)
**Author:** [@sayali\_kadam](https://discuss.elastic.co/u/sayali_kadam)\ **Replies:** 2\ **Last updated:** [May 1, 2018, 12:49pm UTC](https://discuss.elastic.co/t/kibana-visualization-request-body/129914 "2018-05-01T12:49:16Z")
I want to fetch a request body associated with kibana visualization programatically, so is there API present for it? --- ## [ETL with logstash](https://discuss.elastic.co/t/etl-with-logstash/92979)
**Author:** [@sanketshinde](https://discuss.elastic.co/u/sanketshinde)\ **Replies:** 2\ **Last updated:** [July 14, 2017, 12:29pm UTC](https://discuss.elastic.co/t/etl-with-logstash/92979 "2017-07-14T12:29:09Z")
I am trying to implement an ETL using Logstash. The ETL is between two instances of ES DB, from a remote server to a localhost. I want to get the max of a field "endTime" from the documents in my localhost. I want to the… --- ## [Default value of the type field](https://discuss.elastic.co/t/default-value-of-the-type-field/119280)
**Author:** [@snuffkin](https://discuss.elastic.co/u/snuffkin)\ **Replies:** 2\ **Last updated:** [February 17, 2018, 4:46am UTC](https://discuss.elastic.co/t/default-value-of-the-type-field/119280 "2018-02-17T04:46:40Z")
Elasticsearch Reference says "The preferred type name is \_doc". https://www.elastic.co/guide/en/elasticsearch/reference/current/removal-of-types.html#\_schedule\_for\_removal\_of\_mapping\_types But, logstash-output-elastics… --- ## [起動時に突然killされるようになりました。](https://discuss.elastic.co/t/kill/181541)
**Author:** [@6f14f6d3449152ab0d18](https://discuss.elastic.co/u/6f14f6d3449152ab0d18)\ **Replies:** 5\ **Last updated:** [May 17, 2019, 11:09am UTC](https://discuss.elastic.co/t/kill/181541 "2019-05-17T11:09:35Z")
すみません。 私は営業企画部門に所属しておりまして、 的を得ない質問をしてしまうかもしれないのですが。 昨日まで可動していたelasticsearchが突然止まってしまい、 再起動を行おうとすると起動の工程で突然killedされてしまいます。 起動の工程でのkilledの箇所も毎回異なっており、 \[2019-05-17T17:10:13,005\]\[INFO \]\[o.e.h.n.Netty4HttpServerTranspor… --- ## [Minimum should match percentage not returning desired results](https://discuss.elastic.co/t/minimum-should-match-percentage-not-returning-desired-results/176723)
**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\ **Replies:** 5\ **Last updated:** [April 13, 2019, 10:45am UTC](https://discuss.elastic.co/t/minimum-should-match-percentage-not-returning-desired-results/176723 "2019-04-13T10:45:21Z")
I am looking at a weird behavior while doing a multimatch query with minimum\_should\_match percentage. Giving a sample use case, while searching for New York in multimatch query and then giving minimum\_should\_match as 90%… --- ## [Scheduled csv reports to email](https://discuss.elastic.co/t/scheduled-csv-reports-to-email/246884)
**Author:** [@amit\_ahuja1](https://discuss.elastic.co/u/amit_ahuja1)\ **Replies:** 7\ **Last updated:** [August 30, 2020, 5:45pm UTC](https://discuss.elastic.co/t/scheduled-csv-reports-to-email/246884 "2020-08-30T17:45:37Z")
Hello All, I am new to the elk stack and I was working with splunk earlier where we could create csv reports scheduled to email boxes at regular intervals. I am looking similar thing in ELK stack. I discovered watcher … --- ## [Kibana search events where value of a field matches another fields value in the same event?](https://discuss.elastic.co/t/kibana-search-events-where-value-of-a-field-matches-another-fields-value-in-the-same-event/287074)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 2\ **Last updated:** [October 20, 2021, 11:13am UTC](https://discuss.elastic.co/t/kibana-search-events-where-value-of-a-field-matches-another-fields-value-in-the-same-event/287074 "2021-10-20T11:13:16Z")
Hi, is it somehow possible to search in kibana either via KQL or Lucene syntax for a field that has the same value as another field in the same event? i.e. assume I've a user.name and user.target.name where some events… --- ## [Get All Hits from index](https://discuss.elastic.co/t/get-all-hits-from-index/95376)
**Author:** [@baha1](https://discuss.elastic.co/u/baha1)\ **Replies:** 2\ **Last updated:** [August 1, 2017, 5:15pm UTC](https://discuss.elastic.co/t/get-all-hits-from-index/95376 "2017-08-01T17:15:02Z")
Hi there, How can i get All the hits i have in my index from url. i used to use like that:http: //localhost:9200/errors/\_search?size=50. but i don’t a specific size.i want all:the bigger size. Thanks for help. --- ## [Vega network map](https://discuss.elastic.co/t/vega-network-map/143170)
**Author:** [@1fe60245fe160bc0f8ab](https://discuss.elastic.co/u/1fe60245fe160bc0f8ab)\ **Replies:** 4\ **Last updated:** [August 31, 2018, 7:10pm UTC](https://discuss.elastic.co/t/vega-network-map/143170 "2018-08-31T19:10:48Z")
Hi all, During the last few days I've been trying to create a network visualization similar to vega's airport connections map (https://vega.github.io/vega/examples/airport-connections/) that will show me the amount of t… --- ## [Elasticsearch.esplugin - ES Gradle Build Tools: integTestRunner failing](https://discuss.elastic.co/t/elasticsearch-esplugin-es-gradle-build-tools-integtestrunner-failing/168899)
**Author:** [@Thales\_Valias](https://discuss.elastic.co/u/Thales_Valias)\ **Replies:** 3\ **Last updated:** [March 8, 2019, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-esplugin-es-gradle-build-tools-integtestrunner-failing/168899 "2019-03-08T11:10:29Z")
Context: I'm trying to implement an ES Ingest Processor plugin through this cookiecutter template: GitHub - spinscale/cookiecutter-elasticsearch-ingest-processor: A cookiecutter template for an elasticsearch ingest proc… --- ## [Load multiple csv files and update existing index](https://discuss.elastic.co/t/load-multiple-csv-files-and-update-existing-index/202324)
**Author:** [@myrtod](https://discuss.elastic.co/u/myrtod)\ **Replies:** 6\ **Last updated:** [October 4, 2019, 2:27pm UTC](https://discuss.elastic.co/t/load-multiple-csv-files-and-update-existing-index/202324 "2019-10-04T14:27:24Z")
Hi, I am trying to create a "master table" in elastic, using logstash, where many csv files will be merged according to a common column named 'A'. Given the mapping of the index, can I insert each csv and update the uni… --- ## [Whats the status of Elasticsearch and G1GC?](https://discuss.elastic.co/t/whats-the-status-of-elasticsearch-and-g1gc/111656)
**Author:** [@Zuhaib\_Siddique](https://discuss.elastic.co/u/Zuhaib_Siddique)\ **Replies:** 1\ **Last updated:** [December 13, 2017, 11:04pm UTC](https://discuss.elastic.co/t/whats-the-status-of-elasticsearch-and-g1gc/111656 "2017-12-13T23:04:12Z")
We are seeing hourly GC pauses on our cluster (seems to be on old). Looking at the old Java tickets it seems the issue has been addressed tho the warning on the Lucene page about G1GC and Lucene still remains. Comment… --- ## [How to set the tls part in the filebeat.yml....alway wrong](https://discuss.elastic.co/t/how-to-set-the-tls-part-in-the-filebeat-yml-alway-wrong/67070)
**Author:** [@houfan](https://discuss.elastic.co/u/houfan)\ **Replies:** 4\ **Last updated:** [December 5, 2016, 2:14am UTC](https://discuss.elastic.co/t/how-to-set-the-tls-part-in-the-filebeat-yml-alway-wrong/67070 "2016-12-05T02:14:29Z")
here is my console output: and this setting in /etc/hosts did't work........... here is my filebeat.yml (on|in) 192.168.147.129: here is my logstash.conf (on|in) 192.168.147.128: here is the command I get the… --- ## [Problem with searching binary data](https://discuss.elastic.co/t/problem-with-searching-binary-data/43616)
**Author:** [@Jayant](https://discuss.elastic.co/u/Jayant)\ **Replies:** 7\ **Last updated:** [March 7, 2016, 9:28pm UTC](https://discuss.elastic.co/t/problem-with-searching-binary-data/43616 "2016-03-07T21:28:16Z")
Hi I am new to ES, I am trying to store binary values such as 00001111 by converting them with Base64 encoding into ES. Steps I did to put the data into ES \`PUT /my\_store2 { "mappings" : { "products" : { … --- ## [Formatting @timestamp in Canvas](https://discuss.elastic.co/t/formatting-timestamp-in-canvas/203084)
**Author:** [@bkleynbok](https://discuss.elastic.co/u/bkleynbok)\ **Replies:** 3\ **Last updated:** [October 11, 2019, 6:36pm UTC](https://discuss.elastic.co/t/formatting-timestamp-in-canvas/203084 "2019-10-11T18:36:14Z")
In ELK Stack 7.3 using Kibana and Canvas. So the issue I discovered in formatting @timestamp into a date time. This is the original message : {"@timestamp":"2019-10-08T16:35:14.455Z","hostname":"MYHost2","ip":"2.2.2.2… --- ## [Nest: Bulk insert and timeout](https://discuss.elastic.co/t/nest-bulk-insert-and-timeout/60641)
**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\ **Replies:** 2\ **Last updated:** [September 16, 2016, 1:37pm UTC](https://discuss.elastic.co/t/nest-bulk-insert-and-timeout/60641 "2016-09-16T13:37:22Z")
Hi guys, We are using new server with 24 cores, RAID 5, 64 GB RAM Have about 70 indices and trying to write data to it using bulk insert(batch size 5k per index) But sometimes we have timeouts: Invalid NEST response… --- ## [Issue: Elasticsearch pods are running into crashloopbackoff because of inject-process-manager container](https://discuss.elastic.co/t/issue-elasticsearch-pods-are-running-into-crashloopbackoff-because-of-inject-process-manager-container/185382)
**Author:** [@Batchu](https://discuss.elastic.co/u/Batchu)\ **Replies:** 5\ **Last updated:** [June 13, 2019, 6:24am UTC](https://discuss.elastic.co/t/issue-elasticsearch-pods-are-running-into-crashloopbackoff-because-of-inject-process-manager-container/185382 "2019-06-13T06:24:08Z")
What did you do? I just freshly installed an Elastic stack on Kubernetes in following tutorial: https://www.elastic.co/guide/en/cloud-on-k8s/current/index.html So I have an elasticsearch cluster of three nodes (test… --- ## [ElasticSearch Size Recommendation](https://discuss.elastic.co/t/elasticsearch-size-recommendation/80774)
**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\ **Replies:** 6\ **Last updated:** [March 31, 2017, 5:56pm UTC](https://discuss.elastic.co/t/elasticsearch-size-recommendation/80774 "2017-03-31T17:56:07Z")
TLDR: what specs are appropriate for client, data, and master nodes when ingesting 250GB/day? Hi All, I've been tasked with building out an ELK Stack as my company would like to move away from Splunk. We've already beg… --- ## [7.2.0 - kubernetes - why trying to start as root?](https://discuss.elastic.co/t/7-2-0-kubernetes-why-trying-to-start-as-root/190457)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [July 16, 2019, 2:47pm UTC](https://discuss.elastic.co/t/7-2-0-kubernetes-why-trying-to-start-as-root/190457 "2019-07-16T14:47:39Z")
I have a problem running kibana 7.2.0 in kubernetes. Here is my yaml: apiVersion: apps/v1 kind: Deployment metadata: name: poc-kibana labels: cluster: poc spec: selector: matchLabels: app: kibana … --- ## [Changing cluster name on 2-node cluster causes IndexMissingException](https://discuss.elastic.co/t/changing-cluster-name-on-2-node-cluster-causes-indexmissingexception/12079)
**Author:** [@Brian\_Phunk\_Gadoury](https://discuss.elastic.co/u/Brian_Phunk_Gadoury)\ **Replies:** 3\ **Last updated:** [May 22, 2013, 8:08pm UTC](https://discuss.elastic.co/t/changing-cluster-name-on-2-node-cluster-causes-indexmissingexception/12079 "2013-05-22T20:08:12Z")
Steps to reproduce: 1. Create a 2-node cluster 2. Create a new index 3. Add one doc to the index 4. Take cluster down using Nodes Shutdown API 5. Change cluster.name in elasticsearch.yml on both nod… --- ## [Langdetect plugin 2.0.0.0 for Elasticsearch 2.0.0](https://discuss.elastic.co/t/langdetect-plugin-2-0-0-0-for-elasticsearch-2-0-0/34470)
**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\ **Replies:** 7\ **Last updated:** [April 11, 2016, 7:34pm UTC](https://discuss.elastic.co/t/langdetect-plugin-2-0-0-0-for-elasticsearch-2-0-0/34470 "2016-04-11T19:34:39Z")
Hi, a new version 2.0.0.0 of my langdetect plugin has been released. It is now compatible to Elasticsearch 2.0.0. Also, an example has been added to demonstrate how to retrieve detected language codes from the inde… --- ## [Extremely high load for the ElasticSearch for 1.7.2 and 2.1](https://discuss.elastic.co/t/extremely-high-load-for-the-elasticsearch-for-1-7-2-and-2-1/35815)
**Author:** [@Lephix\_Long](https://discuss.elastic.co/u/Lephix_Long)\ **Replies:** 7\ **Last updated:** [December 4, 2015, 1:31am UTC](https://discuss.elastic.co/t/extremely-high-load-for-the-elasticsearch-for-1-7-2-and-2-1/35815 "2015-12-04T01:31:35Z")
Recently I encountered a strange situation. I use ES for storing Nginx logs. I use my own codes to pull logs from Kafka and push them to ES. The index speed is about 10K to 20K per seconds. It works very well for save… --- ## [Number of pending tasks grows infinitely after cluster crash](https://discuss.elastic.co/t/number-of-pending-tasks-grows-infinitely-after-cluster-crash/67797)
**Author:** [@boogie](https://discuss.elastic.co/u/boogie)\ **Replies:** 5\ **Last updated:** [December 5, 2016, 8:20pm UTC](https://discuss.elastic.co/t/number-of-pending-tasks-grows-infinitely-after-cluster-crash/67797 "2016-12-05T20:20:34Z")
Our cluster consists of 17 nodes: 16 data-nodes, 2 of which are also masters, and a dedicated master. Due to the human error the cluster suffered an almost simultaneous restart of 2 of 3 master nodes. Since we have disco… --- ## [Filebeat-god stopped](https://discuss.elastic.co/t/filebeat-god-stopped/139291)
**Author:** [@nandan\_bigdata](https://discuss.elastic.co/u/nandan_bigdata)\ **Replies:** 2\ **Last updated:** [July 11, 2018, 2:23am UTC](https://discuss.elastic.co/t/filebeat-god-stopped/139291 "2018-07-11T02:23:39Z")
Hello All, I am using filebeat to access one simple log file. filebeat.yml :- filebeat.inputs: type: log enabled: true paths: - /var/log/nandan.log output.elasticsearch: hosts: \["10.10.1.5:9200"\] nandan.log f… --- ## [Logstash keystore encoding error](https://discuss.elastic.co/t/logstash-keystore-encoding-error/193135)
**Author:** [@tombar](https://discuss.elastic.co/u/tombar)\ **Replies:** 4\ **Last updated:** [August 1, 2019, 7:14am UTC](https://discuss.elastic.co/t/logstash-keystore-encoding-error/193135 "2019-08-01T07:14:17Z")
I try to set up a password protected Logstash keystore. It works when I run Logstash from the command line (as root, with set environment variable for the keystore), but when running as a systemd service (installed from … --- ## [How to update an existing es document and add a new value received from logstash event, to the existing array field at es at indexing time](https://discuss.elastic.co/t/how-to-update-an-existing-es-document-and-add-a-new-value-received-from-logstash-event-to-the-existing-array-field-at-es-at-indexing-time/238112)
**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\ **Replies:** 6\ **Last updated:** [June 23, 2020, 5:12pm UTC](https://discuss.elastic.co/t/how-to-update-an-existing-es-document-and-add-a-new-value-received-from-logstash-event-to-the-existing-array-field-at-es-at-indexing-time/238112 "2020-06-23T17:12:46Z")
Hello guys, I am running logstash with es as output and my logstash input looks like this: Date time \[some-fields\] country\_name city\_name sample input values=\> 22-06-2020 02:19:27 \[some-fields\] US NewYork 22-06-202… --- ## [Elasticsearch connection refused](https://discuss.elastic.co/t/elasticsearch-connection-refused/67435)
**Author:** [@roiyax](https://discuss.elastic.co/u/roiyax)\ **Replies:** 6\ **Last updated:** [November 29, 2016, 7:18am UTC](https://discuss.elastic.co/t/elasticsearch-connection-refused/67435 "2016-11-29T07:18:49Z")
Hi, I have a problem in my ELK setup with below log messages. {:timestamp=\>"2016-11-28T21:10:22.958000+1100", :message=\>"Attempted to send a bulk request to Elasticsearch configured at '\[\\"http://localhost:9200\\"\]', bu… --- ## [JMS input getting an error JMS Consumer Died](https://discuss.elastic.co/t/jms-input-getting-an-error-jms-consumer-died/181877)
**Author:** [@bigster](https://discuss.elastic.co/u/bigster)\ **Replies:** 8\ **Last updated:** [May 23, 2019, 11:26am UTC](https://discuss.elastic.co/t/jms-input-getting-an-error-jms-consumer-died/181877 "2019-05-23T11:26:03Z")
Hi all, I've got a JMS input in my logstash config getting messages from a IBM MQ and i'm getting this error: JMS Consumer died {:exception=\>com.ibm.msg.client.jms.DetailedMessageEOFException: JMSWMQ2002: Failed to get… --- ## [Slow Index create](https://discuss.elastic.co/t/slow-index-create/204862)
**Author:** [@gintek](https://discuss.elastic.co/u/gintek)\ **Replies:** 7\ **Last updated:** [October 24, 2019, 12:47pm UTC](https://discuss.elastic.co/t/slow-index-create/204862 "2019-10-24T12:47:26Z")
Hi, We are struggling with ES performance issue, we have daily indexes and minute or two after midnight our cluster is unavailable. Logstash indexer reports time out, after around 10 min everything back to normal. we tr… --- ## [Downgrade from 7.14 to 7.13.4](https://discuss.elastic.co/t/downgrade-from-7-14-to-7-13-4/280460)
**Author:** [@JSieminski](https://discuss.elastic.co/u/JSieminski)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 9:37pm UTC](https://discuss.elastic.co/t/downgrade-from-7-14-to-7-13-4/280460 "2021-08-04T21:37:55Z")
I see a lot of people asking about downgrades and it seems to be not supported. I was in the process of updating my nodes from 7.7 to 7.13.4 and I wasn't putting the actual version of elastic when doing my update. As a r… --- ## [How to delete logs from elasticsearch automatically](https://discuss.elastic.co/t/how-to-delete-logs-from-elasticsearch-automatically/284078)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 4\ **Last updated:** [September 28, 2021, 6:58am UTC](https://discuss.elastic.co/t/how-to-delete-logs-from-elasticsearch-automatically/284078 "2021-09-28T06:58:45Z")
HI Experts, We are using Elasticsearch 7.9 . We need to purge automatically the logs that we persist in Elasticsearch index based on a frequency/date I need a proper guide for that. thanks, Sriguruvel. [Previous page](https://discuss.elastic.co/top.md?page=527&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=529&per_page=50&period=all)