# Top **URL:** https://discuss.elastic.co/top.md?page=549&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 550 --- ## [클러스터 구성시 node끼리 발견을 못하는 경우 해결방법](https://discuss.elastic.co/t/node/190313)
**Author:** [@e9ac683d8419af836157](https://discuss.elastic.co/u/e9ac683d8419af836157)\ **Replies:** 1\ **Last updated:** [July 17, 2019, 8:10am UTC](https://discuss.elastic.co/t/node/190313 "2019-07-17T08:10:23Z")
클라우드 서버에 3개의 머신을 생성 후 각가 el7.2 버전을 설치하였습니다. el실행 후 각 노드끼리 발견하지 못하고 클러스터 구성이 안됩니다. 저는 각 노드들이 9031 포트를 통해 통신하길 바랍니다. 확인된 사항 각 서버에서 telnet을 통한 포트 오픈 netstate 명령어로 해당 포트로 listen 중 ( tcp6 으로 만되어있는데 이게 문제일수도 ? ) 네트워크 관련… --- ## [CSV file indexed to %{\[@metadata\] instead of target](https://discuss.elastic.co/t/csv-file-indexed-to-metadata-instead-of-target/95957)
**Author:** [@bulsac](https://discuss.elastic.co/u/bulsac)\ **Replies:** 7\ **Last updated:** [August 8, 2017, 5:18am UTC](https://discuss.elastic.co/t/csv-file-indexed-to-metadata-instead-of-target/95957 "2017-08-08T05:18:41Z")
I am attempting to ingest a CSV file using logstash into an elasticsearch index that I have pre-defined using a PUT request. It appears that logstash is ingesting the CSV file not into the intended elasticsearch index, b… --- ## [Improving search speed for 100 million queries](https://discuss.elastic.co/t/improving-search-speed-for-100-million-queries/5067)
**Author:** [@Uli\_Kohler](https://discuss.elastic.co/u/Uli_Kohler)\ **Replies:** 7\ **Last updated:** [August 8, 2011, 8:34am UTC](https://discuss.elastic.co/t/improving-search-speed-for-100-million-queries/5067 "2011-08-08T08:34:24Z")
Hi, I'm currently trying to index about 1 billion small document with ElasticSearch 0.17.1 on a 21-node dedicated cluster. Each one contains a text fragment and doesn't have to be stored (I'm only interested in the I… --- ## [Monitoring Logstash with metricbeat: Error connection refused](https://discuss.elastic.co/t/monitoring-logstash-with-metricbeat-error-connection-refused/256760)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 2\ **Last updated:** [November 30, 2020, 8:28am UTC](https://discuss.elastic.co/t/monitoring-logstash-with-metricbeat-error-connection-refused/256760 "2020-11-30T08:28:28Z")
Hello, I am trying to monitor my Logstash node using metricbeat, but I am getting these errors: Error fetching data for metricset logstash.node: error making http request: Get "https://X.X.X.X:9600/\_node": dial tcp X.X.… --- ## [Parsing firewall logs in logstash](https://discuss.elastic.co/t/parsing-firewall-logs-in-logstash/212786)
**Author:** [@heinrich](https://discuss.elastic.co/u/heinrich)\ **Replies:** 6\ **Last updated:** [December 23, 2019, 9:45pm UTC](https://discuss.elastic.co/t/parsing-firewall-logs-in-logstash/212786 "2019-12-23T21:45:44Z")
Hi all, I'm struggling parsing sophos utm firewall logs to extract data from the message field from filebeat. I'm new to grok and kv filters and require some help please. After some digging i have come across suggestion… --- ## [Average on Kibana Timelion with two values or parameter](https://discuss.elastic.co/t/average-on-kibana-timelion-with-two-values-or-parameter/88361)
**Author:** [@shreyanshu\_pare](https://discuss.elastic.co/u/shreyanshu_pare)\ **Replies:** 6\ **Last updated:** [June 6, 2017, 1:42pm UTC](https://discuss.elastic.co/t/average-on-kibana-timelion-with-two-values-or-parameter/88361 "2017-06-06T13:42:41Z")
I have json { ExchangeName:BITFINEX, CurrencyPair:ETHBTC ,MachineTime:June 5th 2017, 15:59:53.883, BidPrice:0.094 ,BidSize:22.935, AskPrice:0.094 ,AskSize:20.01, LastPrice:0.094 } In timelion i want to find an avera… --- ## [Elasticsearch sizing: Number of nodes, RAM needed](https://discuss.elastic.co/t/elasticsearch-sizing-number-of-nodes-ram-needed/177186)
**Author:** [@thangld](https://discuss.elastic.co/u/thangld)\ **Replies:** 2\ **Last updated:** [April 17, 2019, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-sizing-number-of-nodes-ram-needed/177186 "2019-04-17T10:30:39Z")
I am trying to build an ES cluster to handle storing and searching event logs from security devices with following requirements: 25000 EPS, 1000 bytes/event, using hot/warm architecture with 4 days of hot and 90 days of … --- ## [Problems connecting an ec2 instances with logstash on to the elastic cloud](https://discuss.elastic.co/t/problems-connecting-an-ec2-instances-with-logstash-on-to-the-elastic-cloud/220865)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 8\ **Last updated:** [February 27, 2020, 12:25pm UTC](https://discuss.elastic.co/t/problems-connecting-an-ec2-instances-with-logstash-on-to-the-elastic-cloud/220865 "2020-02-27T12:25:39Z")
Hello there, In need of some help, have newly come around the realm of AWS and the Elastic Cloud set up(s). Have recently set up and configured an Logstash agent in an ec2 instance. On the output of this, I would like … --- ## [Multiple core cpu](https://discuss.elastic.co/t/multiple-core-cpu/113648)
**Author:** [@hoang2117](https://discuss.elastic.co/u/hoang2117)\ **Replies:** 5\ **Last updated:** [December 31, 2017, 4:33pm UTC](https://discuss.elastic.co/t/multiple-core-cpu/113648 "2017-12-31T16:33:34Z")
I have problems with multiple cpu cores use. My server have 12cores and available everytime, but on the peak time it be stuck because Elasticserach cannot use more than one core. I check process by top command and see … --- ## [Returning Distinct Values in a query](https://discuss.elastic.co/t/returning-distinct-values-in-a-query/197361)
**Author:** [@jsariasgeek](https://discuss.elastic.co/u/jsariasgeek)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 1:34am UTC](https://discuss.elastic.co/t/returning-distinct-values-in-a-query/197361 "2019-08-30T01:34:42Z")
Hi there, I have the next elasticsearch query and I need to know how to get only distinct results for certain fields. (Like an sql distinct: SELECT DISTINCT column1 , column2, ... FROM table\_name :wink: Here is my … --- ## [Kibana Status](https://discuss.elastic.co/t/kibana-status/129254)
**Author:** [@Fatemeh](https://discuss.elastic.co/u/Fatemeh)\ **Replies:** 7\ **Last updated:** [April 24, 2018, 11:41am UTC](https://discuss.elastic.co/t/kibana-status/129254 "2018-04-24T11:41:35Z")
Hello, i have recently installed elasticsearch and kibana and logstash but i have the red status in Kibana, can someone help me with this? \[image\] --- ## [Connection Failed Issue](https://discuss.elastic.co/t/connection-failed-issue/947)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 7\ **Last updated:** [June 1, 2015, 2:17pm UTC](https://discuss.elastic.co/t/connection-failed-issue/947 "2015-06-01T14:17:21Z")
Hi All, I upgraded elasticsearch servers from 1.4.2 to 1.5.2 recently and got noticed that kibana 3.1.2 working fine with es 1.5.2 added following property. http.cors.enabled: true http.cors.allow-origin: "/.… --- ## [Elasticsearch using huge amount of processes](https://discuss.elastic.co/t/elasticsearch-using-huge-amount-of-processes/13531)
**Author:** [@Oliver1](https://discuss.elastic.co/u/Oliver1)\ **Replies:** 7\ **Last updated:** [March 26, 2015, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-using-huge-amount-of-processes/13531 "2015-03-26T08:10:40Z")
Hello, we send logfiles (catalina.out) with logstash (version 1.1.13-flatjar) using multiline{} to our elasticsearch server (version 0.90.2). After several hours elasticsearch crashes because of not having eno… --- ## [ES vs. Lucene memory](https://discuss.elastic.co/t/es-vs-lucene-memory/20959)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 7\ **Last updated:** [February 26, 2015, 8:12pm UTC](https://discuss.elastic.co/t/es-vs-lucene-memory/20959 "2015-02-26T20:12:15Z")
I've read the recommendations for ES\_HEAP\_SIZE which basically state to set -Xms and -Xmx to 50% physical RAM. It says the rest should be left for Lucene to use (OS filesystem caching). But I'm confused on how Lu… --- ## [Filebeat Failed to publish events](https://discuss.elastic.co/t/filebeat-failed-to-publish-events/191010)
**Author:** [@jayshi1985](https://discuss.elastic.co/u/jayshi1985)\ **Replies:** 6\ **Last updated:** [July 22, 2019, 11:25am UTC](https://discuss.elastic.co/t/filebeat-failed-to-publish-events/191010 "2019-07-22T11:25:20Z")
CentOS release 6.6 (Final) filebeat-6.6.1-linux-x86\_64.tar.gz filebeat config: type: log # Change to true to enable this input configuration. enabled: true # Paths that should be crawled and fetched. Glob bas… --- ## [Elasticsearch not working in Wildfly 10 after upgrading to 2.1.1](https://discuss.elastic.co/t/elasticsearch-not-working-in-wildfly-10-after-upgrading-to-2-1-1/39896)
**Author:** [@PhilippC](https://discuss.elastic.co/u/PhilippC)\ **Replies:** 6\ **Last updated:** [January 25, 2016, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-not-working-in-wildfly-10-after-upgrading-to-2-1-1/39896 "2016-01-25T08:40:36Z")
I am working on a Java EE 7 WebApplication (running in wildfly 10) using an embedded Elasticsearch. After upgrading to elasticsearch 2.1.1 searching is not working anymore. (indexing seems to work) Dependencies that wor… --- ## [Encountering 'Name must match one or more data streams, indices, or index aliases' error when creating a data view in Kibana 8 Discover section](https://discuss.elastic.co/t/encountering-name-must-match-one-or-more-data-streams-indices-or-index-aliases-error-when-creating-a-data-view-in-kibana-8-discover-section/339589)
**Author:** [@abntkpi](https://discuss.elastic.co/u/abntkpi)\ **Replies:** 4\ **Last updated:** [August 16, 2023, 11:51am UTC](https://discuss.elastic.co/t/encountering-name-must-match-one-or-more-data-streams-indices-or-index-aliases-error-when-creating-a-data-view-in-kibana-8-discover-section/339589 "2023-08-16T11:51:52Z")
Hello, hope you're doing well. When I try to create a data view in the Discover section of Kibana 8, I encounter the following error message for any index pattern I write in the index pattern field: "Name must match on… --- ## [Configuring Metricbeat Oracle Module](https://discuss.elastic.co/t/configuring-metricbeat-oracle-module/231198)
**Author:** [@rakesh15](https://discuss.elastic.co/u/rakesh15)\ **Replies:** 6\ **Last updated:** [May 7, 2020, 11:48am UTC](https://discuss.elastic.co/t/configuring-metricbeat-oracle-module/231198 "2020-05-07T11:48:55Z")
Hi, I'm trying to configure Metricbeat Oracle Module on my system but getting logon denied error upon starting Metricbeat. Error Message: 2020-05-05T16:45:30.988Z INFO module/wrapper.go:259 Error fetching … --- ## [JDBC SQL server error, TSL](https://discuss.elastic.co/t/jdbc-sql-server-error-tsl/235094)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [June 1, 2020, 12:31am UTC](https://discuss.elastic.co/t/jdbc-sql-server-error-tsl/235094 "2020-06-01T00:31:43Z")
Hi im getting this error in logstash 7.6.1 when using JDBC driver The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: \\"The server selected protocol ve… --- ## [How to use "SQL(ROW\_NUMBER())" as same as for ElasticSearch Query using C#?](https://discuss.elastic.co/t/how-to-use-sql-row-number-as-same-as-for-elasticsearch-query-using-c/97346)
**Author:** [@Ashish\_Christian](https://discuss.elastic.co/u/Ashish_Christian)\ **Replies:** 3\ **Last updated:** [September 8, 2017, 12:02pm UTC](https://discuss.elastic.co/t/how-to-use-sql-row-number-as-same-as-for-elasticsearch-query-using-c/97346 "2017-09-08T12:02:06Z")
We have implemented ElasticSearch in our product. Our experience with the ElasticSearch is really great and interesting. We are likely to use more and more in our website, but facing some issues in Development. We have … --- ## [How to create a child type when its parent type is already exist in Elasticsearch 2.X?](https://discuss.elastic.co/t/how-to-create-a-child-type-when-its-parent-type-is-already-exist-in-elasticsearch-2-x/48114)
**Author:** [@yuemaoxing](https://discuss.elastic.co/u/yuemaoxing)\ **Replies:** 4\ **Last updated:** [April 26, 2016, 2:08am UTC](https://discuss.elastic.co/t/how-to-create-a-child-type-when-its-parent-type-is-already-exist-in-elasticsearch-2-x/48114 "2016-04-26T02:08:15Z")
I know parent/child has been rewritten in ES2.X, and the mapping for the parent type can be added at the same time as the mapping for the child type, but cannot be added before the child type. But I think it's not logi… --- ## [Elasticsearch Error "Event loop shutdown"](https://discuss.elastic.co/t/elasticsearch-error-event-loop-shutdown/245329)
**Author:** [@nguacon90](https://discuss.elastic.co/u/nguacon90)\ **Replies:** 4\ **Last updated:** [August 18, 2020, 3:20am UTC](https://discuss.elastic.co/t/elasticsearch-error-event-loop-shutdown/245329 "2020-08-18T03:20:07Z")
Hi All, I'm using elastic search with information as following: { "name": "3KOuo1W", "cluster\_name": "common-cluster", "cluster\_uuid": "H9IcVILhROqC76KMneIxlA", "version": { "number": "5.5.3", … --- ## [Failed to execute fetch phase SearchContextMissingException](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-searchcontextmissingexception/135590)
**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\ **Replies:** 7\ **Last updated:** [June 15, 2018, 2:29pm UTC](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-searchcontextmissingexception/135590 "2018-06-15T14:29:19Z")
Hello, We are constantly seeing below errors in elasticsearch log file. We want to know what could be the root cause of this problem and how to prevent these type of errors? \[2018-06-12T19:03:21,239\]\[DEBUG\]\[o.e.a.s.Tra… --- ## [Kibana - SESSSION\_EXPIRED right after login](https://discuss.elastic.co/t/kibana-sesssion-expired-right-after-login/90061)
**Author:** [@Benjamin\_Dahon](https://discuss.elastic.co/u/Benjamin_Dahon)\ **Replies:** 6\ **Last updated:** [June 21, 2017, 12:51pm UTC](https://discuss.elastic.co/t/kibana-sesssion-expired-right-after-login/90061 "2017-06-21T12:51:51Z")
I have a kibana cluster up and running with xpack security enabled. Whenever I try to login, I see the homepage being displayed and right after a redirect happens (in js) to the login page again with the "Your session ha… --- ## [Trying to understand how to get stacked bar charts](https://discuss.elastic.co/t/trying-to-understand-how-to-get-stacked-bar-charts/161413)
**Author:** [@swright-eti](https://discuss.elastic.co/u/swright-eti)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 6:51pm UTC](https://discuss.elastic.co/t/trying-to-understand-how-to-get-stacked-bar-charts/161413 "2018-12-19T18:51:39Z")
I have data ingested from logs. There is a "log\_level" field for each message with possible values of \["INFO", "WARNING", "ERROR"\] I want a bar chart that shows the count of each log level in hourly intervals. So I shou… --- ## [Red health status](https://discuss.elastic.co/t/red-health-status/103989)
**Author:** [@Joozty](https://discuss.elastic.co/u/Joozty)\ **Replies:** 5\ **Last updated:** [October 14, 2017, 7:08pm UTC](https://discuss.elastic.co/t/red-health-status/103989 "2017-10-14T19:08:40Z")
My index has red health status and I don't know why. It cannot be becouse of disk space. I have more than 20TB avalaible. My index settings: { "my\_index": { "settings": { "index"… --- ## [Too long values](https://discuss.elastic.co/t/too-long-values/48884)
**Author:** [@Boris\_Borshevsky](https://discuss.elastic.co/u/Boris_Borshevsky)\ **Replies:** 4\ **Last updated:** [May 2, 2016, 11:48am UTC](https://discuss.elastic.co/t/too-long-values/48884 "2016-05-02T11:48:13Z")
Hi, I'm using elasticsearch 1.6. while trying to make an aggregation query I've noticed i have a pretty large glitch in my results, after some investigation, I've seen that when the of the aggregation is too long (not su… --- ## [Elasticsearch - Encountered a retryable error. Will Retry with exponential backoff](https://discuss.elastic.co/t/elasticsearch-encountered-a-retryable-error-will-retry-with-exponential-backoff/111646)
**Author:** [@kdivecha](https://discuss.elastic.co/u/kdivecha)\ **Replies:** 0\ **Last updated:** [December 13, 2017, 8:47pm UTC](https://discuss.elastic.co/t/elasticsearch-encountered-a-retryable-error-will-retry-with-exponential-backoff/111646 "2017-12-13T20:47:50Z")
I keep seeing the following error in logs, still loads all the data, just wondering what might be causing it. I am ingesting into ES via ELB on AWS, running multiple logstash threads on a dedicated instance. \[ERROR\] 201… --- ## [NodeJS Version](https://discuss.elastic.co/t/nodejs-version/342048)
**Author:** [@kfarr](https://discuss.elastic.co/u/kfarr)\ **Replies:** 1\ **Last updated:** [September 1, 2023, 10:03am UTC](https://discuss.elastic.co/t/nodejs-version/342048 "2023-09-01T10:03:57Z")
Would like NodeJS to be updated in Kibana v7.17 to 16.20.2 or later due to its vulnerability --- ## [Kibana Get Top 10 in Table Not Accurate](https://discuss.elastic.co/t/kibana-get-top-10-in-table-not-accurate/52294)
**Author:** [@ivanandrianto95](https://discuss.elastic.co/u/ivanandrianto95)\ **Replies:** 1\ **Last updated:** [June 9, 2016, 3:11pm UTC](https://discuss.elastic.co/t/kibana-get-top-10-in-table-not-accurate/52294 "2016-06-09T15:11:25Z")
I need to display top 10 request in tablet using Kibana. If I choose Split Rows with Aggregation: terms, Field: request.raw, Order by: metric: Count, Order: descending, and size: 10, it will select only 10 rows (not the … --- ## [ElastiSearch consuming above 90% RAM memory continuously](https://discuss.elastic.co/t/elastisearch-consuming-above-90-ram-memory-continuously/345812)
**Author:** [@Rajesh123](https://discuss.elastic.co/u/Rajesh123)\ **Replies:** 3\ **Last updated:** [November 2, 2023, 6:31pm UTC](https://discuss.elastic.co/t/elastisearch-consuming-above-90-ram-memory-continuously/345812 "2023-11-02T18:31:11Z")
Hello, Elastic Search continuously occupying above 90% . Total RAM : 108 GB JVM: 32 GB ( 28Gb used out of 32GB) Single Node Elastic search. Could you please suggest/help how to reduce the RAM usage. Thanks in adva… --- ## [Logstash Output wrong - Error in visualization \[esaggs\] \> "field" is a required parameter](https://discuss.elastic.co/t/logstash-output-wrong-error-in-visualization-esaggs-field-is-a-required-parameter/215412)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 3\ **Last updated:** [January 18, 2020, 2:56pm UTC](https://discuss.elastic.co/t/logstash-output-wrong-error-in-visualization-esaggs-field-is-a-required-parameter/215412 "2020-01-18T14:56:48Z")
Hi, I recieve in Kibana the following error: "\[esaggs\] \> Saved "field" parameter is now invalid. Please select a new field." In logstash log i see also: \[2020-01-17T06:10:41,665\]\[WARN \]\[logstash.outputs.elasticsearc… --- ## [How to configure multiple ingest pipelines on filebeat to load data in elastic cloud](https://discuss.elastic.co/t/how-to-configure-multiple-ingest-pipelines-on-filebeat-to-load-data-in-elastic-cloud/270290)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 4\ **Last updated:** [April 16, 2021, 1:39pm UTC](https://discuss.elastic.co/t/how-to-configure-multiple-ingest-pipelines-on-filebeat-to-load-data-in-elastic-cloud/270290 "2021-04-16T13:39:30Z")
Hi, I am running filebeat to ingest logging data from kubernetes. I am having various applications for which I have set different pipelines. How can I configure filebeat to be able to use multiple pipelines. Thanks in … --- ## [Failed to parse date field with format strict\_date\_optional\_time||epoch\_millis](https://discuss.elastic.co/t/failed-to-parse-date-field-with-format-strict-date-optional-time-epoch-millis/333734)
**Author:** [@Sachinda](https://discuss.elastic.co/u/Sachinda)\ **Replies:** 1\ **Last updated:** [May 18, 2023, 9:08am UTC](https://discuss.elastic.co/t/failed-to-parse-date-field-with-format-strict-date-optional-time-epoch-millis/333734 "2023-05-18T09:08:02Z")
Hi All, We are observing the following error in the Logstash serves only for the 2023.05.09 logs. This issue is not occurring in other date indexes. so we can see the 2023.05.08 and 2023.05.10 logs are available on the … --- ## [Creating repository and snapshot in Windows](https://discuss.elastic.co/t/creating-repository-and-snapshot-in-windows/162187)
**Author:** [@c95mbq](https://discuss.elastic.co/u/c95mbq)\ **Replies:** 7\ **Last updated:** [January 1, 2019, 10:30pm UTC](https://discuss.elastic.co/t/creating-repository-and-snapshot-in-windows/162187 "2019-01-01T22:30:29Z")
Hi, Almost embarrassed to ask this but how on earth do I create a repository and take a snapshot for a single node running on windows? I thought I had previously done this but my notes are obviously wrong as what I thou… --- ## [Logstash grok timestamp from message: issue with multiple timestamp format](https://discuss.elastic.co/t/logstash-grok-timestamp-from-message-issue-with-multiple-timestamp-format/25717)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 1\ **Last updated:** [July 16, 2015, 11:50am UTC](https://discuss.elastic.co/t/logstash-grok-timestamp-from-message-issue-with-multiple-timestamp-format/25717 "2015-07-16T11:50:13Z")
Hi I am taking out timestamp field from message and setting it as eventTime as new field. below is the code I am using. grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:eventTime}" } } date { match =\>… --- ## [Changing the legend names](https://discuss.elastic.co/t/changing-the-legend-names/24422)
**Author:** [@Lucky](https://discuss.elastic.co/u/Lucky)\ **Replies:** 1\ **Last updated:** [June 28, 2015, 1:47pm UTC](https://discuss.elastic.co/t/changing-the-legend-names/24422 "2015-06-28T13:47:44Z")
Hi, Is there anyway to change the names of the legends in the visualization in kibana 3 Thank you. --- ## [Reindex to add geo\_point mapping](https://discuss.elastic.co/t/reindex-to-add-geo-point-mapping/202052)
**Author:** [@jbrowe](https://discuss.elastic.co/u/jbrowe)\ **Replies:** 3\ **Last updated:** [October 3, 2019, 5:12pm UTC](https://discuss.elastic.co/t/reindex-to-add-geo-point-mapping/202052 "2019-10-03T17:12:29Z")
I have a CSV file from a standalone application with the following header: fid, owner, location.lat, location.lon I use the CSV import functionality in Kibana to acquire and index the data. Using the Kibana developer t… --- ## [Delete logs in elasticsearch with multiple queries](https://discuss.elastic.co/t/delete-logs-in-elasticsearch-with-multiple-queries/81517)
**Author:** [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)\ **Replies:** 3\ **Last updated:** [April 6, 2017, 5:52pm UTC](https://discuss.elastic.co/t/delete-logs-in-elasticsearch-with-multiple-queries/81517 "2017-04-06T17:52:45Z")
I want to delete logs in elasticsearch based on query with multiple terms. E.g. Delete all logs with "tags: local AND message: info". The log which contain both of them in respective fields, only those are to be delete… --- ## [JNA not found & failed to install template](https://discuss.elastic.co/t/jna-not-found-failed-to-install-template/28176)
**Author:** [@TramsWang](https://discuss.elastic.co/u/TramsWang)\ **Replies:** 3\ **Last updated:** [September 18, 2015, 2:16am UTC](https://discuss.elastic.co/t/jna-not-found-failed-to-install-template/28176 "2015-09-18T02:16:00Z")
Hello everyone, I'm new to logstash and I'm learning to write configuration files. As the example goes: input { stdin { } } filter { grok { match =\> { "message" =\> "%{COMBINEDAPACHELOG}" } } date { matc… --- ## [How can I visualize the duration of an event?](https://discuss.elastic.co/t/how-can-i-visualize-the-duration-of-an-event/177338)
**Author:** [@Kagerou](https://discuss.elastic.co/u/Kagerou)\ **Replies:** 4\ **Last updated:** [April 22, 2019, 8:42pm UTC](https://discuss.elastic.co/t/how-can-i-visualize-the-duration-of-an-event/177338 "2019-04-22T20:42:03Z")
I have a few devices that periodically send data to elasticsearch. If the devices send data that indicates them as offline I have an elapsed\_filter that waits until it sends data indicating it is online again. I end up w… --- ## [Is repository-s3 plugin fixed in 6.3?](https://discuss.elastic.co/t/is-repository-s3-plugin-fixed-in-6-3/135997)
**Author:** [@windowsrefund\_refund](https://discuss.elastic.co/u/windowsrefund_refund)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 6:19pm UTC](https://discuss.elastic.co/t/is-repository-s3-plugin-fixed-in-6-3/135997 "2018-06-27T18:19:48Z")
Running 6.2.4 here and repository-s3 plugin is not allowing me to create a repository despite the fact I have used the new elasticsearch-keystore binary to create both s3.client.default.access\_key and s3.client.default.s… --- ## [How to split count based on field entry in visualization?](https://discuss.elastic.co/t/how-to-split-count-based-on-field-entry-in-visualization/83366)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [April 24, 2017, 10:56pm UTC](https://discuss.elastic.co/t/how-to-split-count-based-on-field-entry-in-visualization/83366 "2017-04-24T22:56:12Z")
Hi, I am using ELK GA 5.0.0. I am trying to create a visualization like below; The picture represents count of logs with user\_id having values USER\_1 and USER\_2 in separate graphs, and X-Axis having date histogram da… --- ## [\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or co mmand line options are specified](https://discuss.elastic.co/t/logstash-config-source-multilocal-ignoring-the-pipelines-yml-file-because-modules-or-co-mmand-line-options-are-specified/300852)
**Author:** [@lug-gh](https://discuss.elastic.co/u/lug-gh)\ **Replies:** 6\ **Last updated:** [March 29, 2022, 1:23pm UTC](https://discuss.elastic.co/t/logstash-config-source-multilocal-ignoring-the-pipelines-yml-file-because-modules-or-co-mmand-line-options-are-specified/300852 "2022-03-29T13:23:34Z")
Hi, I wan't to use multiple pipelines, but after some testing I noticed the pipelines.yml won't be loaded. I searched the web and found it's ignored when you specify -f or -e (Multiple Pipelines | Logstash Reference \[8.1… --- ## [Get data from different servers with PATH command in logstash?](https://discuss.elastic.co/t/get-data-from-different-servers-with-path-command-in-logstash/85641)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 8\ **Last updated:** [May 15, 2017, 1:10pm UTC](https://discuss.elastic.co/t/get-data-from-different-servers-with-path-command-in-logstash/85641 "2017-05-15T13:10:22Z")
Hi, I have my ES cluster in 3 nodes(i.e.Each node in each VM) , i had enabled the slowlogs in all the node and keep slowlogs in the PATH: /var/es/slowlogs.log . So , what i had did is i writtten a logstash script to p… --- ## [Syslog grok patterns and pipeline performance](https://discuss.elastic.co/t/syslog-grok-patterns-and-pipeline-performance/74386)
**Author:** [@imperatives](https://discuss.elastic.co/u/imperatives)\ **Replies:** 3\ **Last updated:** [February 8, 2017, 4:35pm UTC](https://discuss.elastic.co/t/syslog-grok-patterns-and-pipeline-performance/74386 "2017-02-08T16:35:46Z")
I've been working with RHEL syslogs (/var/log/secure and /var/log/message) that are being shipped to Logstash via Filebeat. I created grok patterns for each of the relevant log lines and create an additional field with … --- ## [How to connect local kibana with AWS elasticsearch, what should be the settings in kibana.yml?](https://discuss.elastic.co/t/how-to-connect-local-kibana-with-aws-elasticsearch-what-should-be-the-settings-in-kibana-yml/203620)
**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 12:32pm UTC](https://discuss.elastic.co/t/how-to-connect-local-kibana-with-aws-elasticsearch-what-should-be-the-settings-in-kibana-yml/203620 "2019-10-15T12:32:19Z")
Hello, I have an elasticsearch instance on AWS, below are the sample details of the same. amazon\_es{ hosts =\> "https://search-vijay-test1-uwjuyejkuydjkdukdukkiu.us-east-3.es.amazonaws.com:443" ssl =\> true … --- ## [Display aggregated counter value per interval](https://discuss.elastic.co/t/display-aggregated-counter-value-per-interval/272333)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 8\ **Last updated:** [June 7, 2021, 1:34pm UTC](https://discuss.elastic.co/t/display-aggregated-counter-value-per-interval/272333 "2021-06-07T13:34:33Z")
I have two counters for open and closes issues, something like this: timpestamp: epoch\_mill1, total: 2000, open: 200, closed: 1800 timpestamp: epoch\_mill2, total: 2200, open: 250, closed: 1950 timpestamp: epoch\_mill3, t… --- ## [Problem with ElasticSearch "Error injecting constructor, java.lang.NoSuchFieldError: LUCENE\_36"](https://discuss.elastic.co/t/problem-with-elasticsearch-error-injecting-constructor-java-lang-nosuchfielderror-lucene-36/10902)
**Author:** [@yahia](https://discuss.elastic.co/u/yahia)\ **Replies:** 8\ **Last updated:** [February 26, 2013, 3:38pm UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-error-injecting-constructor-java-lang-nosuchfielderror-lucene-36/10902 "2013-02-26T15:38:54Z")
I used apache SORL in my project and I would like to migrate NOW to elastic search, but I encountered a problem during initialization of a Node "node = nodeBuilder().clusterName("elasticsearch").node();" the server… --- ## [Sequel::DatabaseConnectionError: Java::JavaSql::SQLException: Access denied for user ''@'localhost' (using password: NO)](https://discuss.elastic.co/t/sequel-databaseconnectionerror-java-javasql-sqlexception-access-denied-for-user-localhost-using-password-no/83713)
**Author:** [@shadowmaster63](https://discuss.elastic.co/u/shadowmaster63)\ **Replies:** 7\ **Last updated:** [May 2, 2017, 8:46am UTC](https://discuss.elastic.co/t/sequel-databaseconnectionerror-java-javasql-sqlexception-access-denied-for-user-localhost-using-password-no/83713 "2017-05-02T08:46:44Z")
If jdbc\_password\_filepath replace jdbc\_password no problem. logstash 5.3.1 Ubuntu 14.04.5 LTS \[2017-04-26T16:44:34,676\]\[INFO \]\[logstash.outputs.elasticsearch\] Running health check to see if an Elasticsearch connecti… [Previous page](https://discuss.elastic.co/top.md?page=548&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=550&per_page=50&period=all)