# Top **URL:** https://discuss.elastic.co/top.md?page=562&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 563 --- ## [File System Cache Vs JVM](https://discuss.elastic.co/t/file-system-cache-vs-jvm/189057)
**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\ **Replies:** 5\ **Last updated:** [July 6, 2019, 4:47pm UTC](https://discuss.elastic.co/t/file-system-cache-vs-jvm/189057 "2019-07-06T16:47:40Z")
Hi, Can anyone explain me the difference between File System Cache and JVM Memory and how it affects in searching speed performance ?? --- ## ["cannot restore index \[source\] because it cannot be upgraded" error when restoring from 1.7.4 to 2.0.1](https://discuss.elastic.co/t/cannot-restore-index-source-because-it-cannot-be-upgraded-error-when-restoring-from-1-7-4-to-2-0-1/72837)
**Author:** [@markcitizen](https://discuss.elastic.co/u/markcitizen)\ **Replies:** 5\ **Last updated:** [January 31, 2017, 7:23pm UTC](https://discuss.elastic.co/t/cannot-restore-index-source-because-it-cannot-be-upgraded-error-when-restoring-from-1-7-4-to-2-0-1/72837 "2017-01-31T19:23:53Z")
Hello, Could someone help solve this problem? ES documentation says: "A snapshot of an index created in 1.x can be restored to 2.x." However when trying to restore an index I'm getting the following error: {"err… --- ## [Invalid license found, requires a basic or a valid trial license](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license/199042)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 8\ **Last updated:** [October 3, 2019, 9:07am UTC](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license/199042 "2019-10-03T09:07:33Z")
Hi, I was tried to add a new node on my ELK cluster but i had this error from metricbeat output . elasticsearch: http://itkvmxh01.emea.nsn-net.net:9200... parse url... OK connection... parse host... OK dns lookup..… --- ## [Kibana Backward compatibility](https://discuss.elastic.co/t/kibana-backward-compatibility/25926)
**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\ **Replies:** 3\ **Last updated:** [July 21, 2015, 1:45pm UTC](https://discuss.elastic.co/t/kibana-backward-compatibility/25926 "2015-07-21T13:45:25Z")
Are the Kibana 4.1.1 dashboards compatible with previous versions of Kibana? I think the new charts aren't but what about the charts that use the same features as previous versions? And, is the last version of Kibana com… --- ## [Too many open files but nofile set to 256000](https://discuss.elastic.co/t/too-many-open-files-but-nofile-set-to-256000/8847)
**Author:** [@Marietta](https://discuss.elastic.co/u/Marietta)\ **Replies:** 8\ **Last updated:** [November 16, 2012, 7:54am UTC](https://discuss.elastic.co/t/too-many-open-files-but-nofile-set-to-256000/8847 "2012-11-16T07:54:15Z")
I am sure this must be obvious, but I am missing it. I have cranked the number of open files in /etc/security/limits.conf to 256000 for soft and hard. Elasticsearch confirms when loading that nofile=256000 Afte… --- ## [Filebeat too many open files Error](https://discuss.elastic.co/t/filebeat-too-many-open-files-error/46118)
**Author:** [@Sumantha\_Kannantha](https://discuss.elastic.co/u/Sumantha_Kannantha)\ **Replies:** 2\ **Last updated:** [April 4, 2016, 9:16am UTC](https://discuss.elastic.co/t/filebeat-too-many-open-files-error/46118 "2016-04-04T09:16:15Z")
I have installed latest version of filebeat (Version: 1.2.0). I am getting below error in /var/log/messages /usr/bin/filebeat\[22662\]: log.go:103: Stop Harvesting. Unexpected file opening error: open /opt/mount1/sa-st… --- ## [Unindexed fields cannot be search](https://discuss.elastic.co/t/unindexed-fields-cannot-be-search/210322)
**Author:** [@kashyap](https://discuss.elastic.co/u/kashyap)\ **Replies:** 1\ **Last updated:** [December 6, 2019, 1:31pm UTC](https://discuss.elastic.co/t/unindexed-fields-cannot-be-search/210322 "2019-12-06T13:31:44Z")
I have a Json object in the following format. I cannot aggregate or search for the data inside the position loop: i.e x,y &z cannot be searched in kibana. Could you please help with the indexing/mapping issue? sample\_… --- ## [Multi value multi level hierarchical facets using App Search](https://discuss.elastic.co/t/multi-value-multi-level-hierarchical-facets-using-app-search/194805)
**Author:** [@abhishek.haith](https://discuss.elastic.co/u/abhishek.haith)\ **Replies:** 6\ **Last updated:** [August 15, 2019, 11:03am UTC](https://discuss.elastic.co/t/multi-value-multi-level-hierarchical-facets-using-app-search/194805 "2019-08-15T11:03:39Z")
I have a form where user can select their favorite food. Options like below - Options Vegetables - Tomato - Pumpkin - Carrot Fruits - Apple - Banana - Orange Meats and Poultry - Lean meats - Beef - Lamb … --- ## [How to get daily new index?](https://discuss.elastic.co/t/how-to-get-daily-new-index/179496)
**Author:** [@frankm](https://discuss.elastic.co/u/frankm)\ **Replies:** 3\ **Last updated:** [May 8, 2019, 1:11pm UTC](https://discuss.elastic.co/t/how-to-get-daily-new-index/179496 "2019-05-08T13:11:31Z")
Hi, for my Index I would like to get every day a new one name\_date like my\_index\_190503. With Logstast it works out of the box. But how to realize it with a own index? Can I create a index out of my C# -code? Or is it p… --- ## [How to read JSON input sent to Http input plugin in filter section](https://discuss.elastic.co/t/how-to-read-json-input-sent-to-http-input-plugin-in-filter-section/118090)
**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\ **Replies:** 3\ **Last updated:** [February 2, 2018, 7:19am UTC](https://discuss.elastic.co/t/how-to-read-json-input-sent-to-http-input-plugin-in-filter-section/118090 "2018-02-02T07:19:35Z")
Hi, I have sample http input plugin and posting json data to this plugin. I want to copy the json body into another field in order to standardize the output format. Invalid jsons are going into message field. I followed … --- ## [Log4j2 to Kibana](https://discuss.elastic.co/t/log4j2-to-kibana/42063)
**Author:** [@bilguuna](https://discuss.elastic.co/u/bilguuna)\ **Replies:** 3\ **Last updated:** [February 18, 2016, 7:31pm UTC](https://discuss.elastic.co/t/log4j2-to-kibana/42063 "2016-02-18T19:31:19Z")
Hello, I am using Log4j2 to export the log fie to JSON format. Some of the lines are: { "timeMillis" : 1455729263723, "thread" : "main", "level" : "INFO", "loggerName" : "org.eclipse.jetty.util.log", "mes… --- ## [Snapshot compress not compressing?](https://discuss.elastic.co/t/snapshot-compress-not-compressing/19650)
**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\ **Replies:** 3\ **Last updated:** [September 9, 2014, 4:20am UTC](https://discuss.elastic.co/t/snapshot-compress-not-compressing/19650 "2014-09-09T04:20:14Z")
I am playing around with snapshot/restore and have a local 1.3.2 cluster running on Mac OS X with 894MB of index data. I have registered a backup repository like so (straight from the docs): curl -XPUT 'http://l… --- ## [Org.elasticsearch.common.jackson.JsonParseException: Illegal unquoted character ((CTRL-CHAR,](https://discuss.elastic.co/t/org-elasticsearch-common-jackson-jsonparseexception-illegal-unquoted-character-ctrl-char/7548)
**Author:** [@fatih](https://discuss.elastic.co/u/fatih)\ **Replies:** 0\ **Last updated:** [May 3, 2012, 12:08pm UTC](https://discuss.elastic.co/t/org-elasticsearch-common-jackson-jsonparseexception-illegal-unquoted-character-ctrl-char/7548 "2012-05-03T12:08:58Z")
Hey guys, thanks for your effort. I've just began to work with elasticsearch since a couple of days ago and i had handled with some exceptions but one. Anytime i try to index some files i get this exception: … --- ## [Marvel: Error 400 Bad Request: \[index\_not\_found\_exception\] no such index, with: {"index":"\[.marvel-es-1-\*\]"}](https://discuss.elastic.co/t/marvel-error-400-bad-request-index-not-found-exception-no-such-index-with-index-marvel-es-1/52720)
**Author:** [@Kiran\_Reddy](https://discuss.elastic.co/u/Kiran_Reddy)\ **Replies:** 1\ **Last updated:** [June 14, 2016, 4:55pm UTC](https://discuss.elastic.co/t/marvel-error-400-bad-request-index-not-found-exception-no-such-index-with-index-marvel-es-1/52720 "2016-06-14T16:55:54Z")
Hi all, First of all i am new to elastic search and therefore this might be a silly mistake on my side if so, I apologize before hand. I am getting the below error when ever i try to access the marvel plugin on kibana. … --- ## [Clear text password in Elasticsearch, logstash, kibana and Beats](https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487)
**Author:** [@DineshTripathi](https://discuss.elastic.co/u/DineshTripathi)\ **Replies:** 4\ **Last updated:** [January 12, 2019, 3:29pm UTC](https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487 "2019-01-12T15:29:16Z")
How we can encrypt the clear text password in different components config files? I see few doc talking about adding those setting in keystore but not very clear. Can someone guide? --- ## [Understanding doc\_values](https://discuss.elastic.co/t/understanding-doc-values/90318)
**Author:** [@misomij](https://discuss.elastic.co/u/misomij)\ **Replies:** 4\ **Last updated:** [June 30, 2017, 7:50am UTC](https://discuss.elastic.co/t/understanding-doc-values/90318 "2017-06-30T07:50:06Z")
Hi all, I read the documentation about doc\_values and I'm trying to apply it in es 2.4.5 In my understanding I can enable doc\_values and disable fielddata on a not\_analyzed string and be able to do aggregations on it. … --- ## [Marvel issue](https://discuss.elastic.co/t/marvel-issue/42058)
**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\ **Replies:** 6\ **Last updated:** [March 3, 2016, 10:51pm UTC](https://discuss.elastic.co/t/marvel-issue/42058 "2016-03-03T22:51:17Z")
Had marvel working fine but now when I navigate to marvel in kibana, I see two greyed out clusters (should be one) and I see this error repeat over and over in the logs: \[2016-02-17 17:34:56,587\]\[DEBUG\]\[action.search.t… --- ## [Omit Zero Score Results From Filtered Query?](https://discuss.elastic.co/t/omit-zero-score-results-from-filtered-query/218224)
**Author:** [@codyspeck](https://discuss.elastic.co/u/codyspeck)\ **Replies:** 2\ **Last updated:** [February 11, 2020, 3:15pm UTC](https://discuss.elastic.co/t/omit-zero-score-results-from-filtered-query/218224 "2020-02-11T15:15:19Z")
Is it possible to omit results with a zero score when doing a filtered query? Take the following query for example: GET demo/\_search?pretty { "query": { "bool": { "should": { "match": { "part\_number": { … --- ## [Elastic search bulk request API - Is the 'order' of document writing guaranteed](https://discuss.elastic.co/t/elastic-search-bulk-request-api-is-the-order-of-document-writing-guaranteed/208055)
**Author:** [@atanupanda](https://discuss.elastic.co/u/atanupanda)\ **Replies:** 5\ **Last updated:** [November 21, 2019, 10:51am UTC](https://discuss.elastic.co/t/elastic-search-bulk-request-api-is-the-order-of-document-writing-guaranteed/208055 "2019-11-21T10:51:24Z")
Hi Team, We are using bulk request API to write bulk documents into elastic search DB. As per the API documentation, we are adding documents one after another (i.e. in sequential order ) and after that we are calling ei… --- ## [Logs in Logstash / archive](https://discuss.elastic.co/t/logs-in-logstash-archive/205640)
**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\ **Replies:** 5\ **Last updated:** [October 30, 2019, 12:24pm UTC](https://discuss.elastic.co/t/logs-in-logstash-archive/205640 "2019-10-30T12:24:00Z")
Hello, Im new in elastic. I would like to know, for how long the logs are "active " in logstash. Can I archive them, if yes how? Thank you --- ## [Elasticsearch does not load ES\_PATH\_CONF or any values that are present in sysconfig](https://discuss.elastic.co/t/elasticsearch-does-not-load-es-path-conf-or-any-values-that-are-present-in-sysconfig/311411)
**Author:** [@nightwatch92](https://discuss.elastic.co/u/nightwatch92)\ **Replies:** 2\ **Last updated:** [August 16, 2022, 1:16pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-load-es-path-conf-or-any-values-that-are-present-in-sysconfig/311411 "2022-08-16T13:16:07Z")
Hi, ES version: 8.3.3 OS: CENTOS 8 We are using packages to distribute our config files in custom directory for the ES service. We can't replace /etc/sysconfig/elasticsearch, because it is owned by the elasticsearch p… --- ## [The Network Adapter could not establish the connection](https://discuss.elastic.co/t/the-network-adapter-could-not-establish-the-connection/299885)
**Author:** [@felipeneto04](https://discuss.elastic.co/u/felipeneto04)\ **Replies:** 4\ **Last updated:** [March 16, 2022, 10:58pm UTC](https://discuss.elastic.co/t/the-network-adapter-could-not-establish-the-connection/299885 "2022-03-16T22:58:36Z")
I'm new here and also to logstash. I'm having trouble trying to connect. I have several branches spread across Brazil, I get data from each one through a VPN connection, and I use a .sh scheduled in CRON to call the sc… --- ## [Logstash File input Observation](https://discuss.elastic.co/t/logstash-file-input-observation/37139)
**Author:** [@PKD](https://discuss.elastic.co/u/PKD)\ **Replies:** 4\ **Last updated:** [December 15, 2015, 9:51am UTC](https://discuss.elastic.co/t/logstash-file-input-observation/37139 "2015-12-15T09:51:35Z")
Hi all, We have configured logstash with file input to scan files from specified directory and index into elastic search. We have provided the following path for file input : /var/log/varnish/varnish-access\*.log Varn… --- ## [Topbeat Kibana Dashboard Index not working](https://discuss.elastic.co/t/topbeat-kibana-dashboard-index-not-working/41550)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 8\ **Last updated:** [June 2, 2016, 9:41pm UTC](https://discuss.elastic.co/t/topbeat-kibana-dashboard-index-not-working/41550 "2016-06-02T21:41:05Z")
hey all, I'm trying to get the example beats dashboards working in Kibana. These are the ones I'm hoping to work with: Beats Dashboards So I followed the instructions here: Getting Started with Beats And I trie… --- ## [Elastic APM agent for Ruby 2.9.0 security update](https://discuss.elastic.co/t/elastic-apm-agent-for-ruby-2-9-0-security-update/192960)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [July 30, 2019, 6:11pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-for-ruby-2-9-0-security-update/192960 "2019-07-30T18:11:36Z")
Elastic APM agent for Ruby client authentication flaw (ESA-2019-08) A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via th… --- ## [Kibana dataview namespace](https://discuss.elastic.co/t/kibana-dataview-namespace/317475)
**Author:** [@dms6978](https://discuss.elastic.co/u/dms6978)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 10:54am UTC](https://discuss.elastic.co/t/kibana-dataview-namespace/317475 "2022-10-26T10:54:16Z")
There is "namespace" properties of the data\_view object when create Data Views. (doc: Create data view API | Kibana Guide \[master\] | Elastic) curl -X POST "kibanahost:port/api/data\_views/data\_view" -H 'kbn-xsrf: true' … --- ## [SSL Handshake Exception: Empty Client Certificate Chain](https://discuss.elastic.co/t/ssl-handshake-exception-empty-client-certificate-chain/362158)
**Author:** [@Teddy\_Bear](https://discuss.elastic.co/u/Teddy_Bear)\ **Replies:** 1\ **Last updated:** [June 28, 2024, 6:26am UTC](https://discuss.elastic.co/t/ssl-handshake-exception-empty-client-certificate-chain/362158 "2024-06-28T06:26:50Z")
Hello, I’m currently working on a task to test a secure connection between Archiving and Elasticsearch. Following the command: curl -k https://\:\/\_security/\_authenticate However, I’m encountering an issue wi… --- ## [X-Pack is not supported and Machine Learning is not available for \[linux-s390x\]](https://discuss.elastic.co/t/x-pack-is-not-supported-and-machine-learning-is-not-available-for-linux-s390x/146625)
**Author:** [@chakravarthy\_G](https://discuss.elastic.co/u/chakravarthy_G)\ **Replies:** 7\ **Last updated:** [October 23, 2018, 3:17pm UTC](https://discuss.elastic.co/t/x-pack-is-not-supported-and-machine-learning-is-not-available-for-linux-s390x/146625 "2018-10-23T15:17:48Z")
According to this, ml wont be suppored if we use 32 bit JVM ,but I am using 64 bit machine and JVM (OpenJDK 64-Bit Server VM (build 10.0.2-adoptopenjdk+13, mixed mode)) , but still getting the same exception while s… --- ## [How to use custom fields from filebeat in logstash?](https://discuss.elastic.co/t/how-to-use-custom-fields-from-filebeat-in-logstash/148708)
**Author:** [@AlonKerem](https://discuss.elastic.co/u/AlonKerem)\ **Replies:** 1\ **Last updated:** [September 16, 2018, 5:24am UTC](https://discuss.elastic.co/t/how-to-use-custom-fields-from-filebeat-in-logstash/148708 "2018-09-16T05:24:42Z")
hi everyone, new to logstash (about 100 hours in), i have 2 servers that are running filebeat, one of them is called x and the other is y, in the configuration of x there is this (filebeat.yml - only releveant lines ar… --- ## [Beats - x509: certificate signed by unknown authority](https://discuss.elastic.co/t/beats-x509-certificate-signed-by-unknown-authority/153988)
**Author:** [@Oliver\_Hough](https://discuss.elastic.co/u/Oliver_Hough)\ **Replies:** 2\ **Last updated:** [November 9, 2018, 11:11am UTC](https://discuss.elastic.co/t/beats-x509-certificate-signed-by-unknown-authority/153988 "2018-11-09T11:11:32Z")
I am getting x509: certificate signed by unknown authority in Metricbeat logs while trying to ship to Logstash. On the same host though, Filebeat is able to ship logs successfully to the same Logstash server using the sa… --- ## [Garbage Collection Not Working](https://discuss.elastic.co/t/garbage-collection-not-working/197173)
**Author:** [@stevenkrawczyk](https://discuss.elastic.co/u/stevenkrawczyk)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 6:01am UTC](https://discuss.elastic.co/t/garbage-collection-not-working/197173 "2019-09-10T06:01:20Z")
Hi, We have a 4 node cluster with "heap\_size": "29500m", and we're consistently seeing heap usage go over 80% for hours, reaching up to 99%, and no garbage collection takes place. Does anyone know why GC would not be ta… --- ## [Fielddata is disabled on text fields by default. Alternatively use a keyword field instead](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-alternatively-use-a-keyword-field-instead/160553)
**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\ **Replies:** 4\ **Last updated:** [December 13, 2018, 9:23am UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-alternatively-use-a-keyword-field-instead/160553 "2018-12-13T09:23:22Z")
Does this mean that I need to make changes in some json file ? Actually, I have installed metricbeat along with its default dashboard. Now, when I load dashboard using one of the default dashboards of metricbeat I get e… --- ## [Kibana visualization for creating custom bar graph](https://discuss.elastic.co/t/kibana-visualization-for-creating-custom-bar-graph/73954)
**Author:** [@GautamP](https://discuss.elastic.co/u/GautamP)\ **Replies:** 6\ **Last updated:** [February 9, 2017, 8:45am UTC](https://discuss.elastic.co/t/kibana-visualization-for-creating-custom-bar-graph/73954 "2017-02-09T08:45:44Z")
Hi all, I have a log file containing a series of jobs along with start and end time for each job. I have parsed the log file using logstash and converted the start and end times into timestamp fields. In order to calcu… --- ## [Filtering based on \_index in kibana dashboard](https://discuss.elastic.co/t/filtering-based-on-index-in-kibana-dashboard/160170)
**Author:** [@BlueSpirit](https://discuss.elastic.co/u/BlueSpirit)\ **Replies:** 5\ **Last updated:** [December 14, 2018, 9:10am UTC](https://discuss.elastic.co/t/filtering-based-on-index-in-kibana-dashboard/160170 "2018-12-14T09:10:50Z")
I have multiple visualizations added to a dashboard. All visualizations use an index pattern 'raw\_request\*'. Now my data comes in different indices like 'raw\_requests\_p1' and 'raw\_requests\_p2'. So, in dashboard, I appl… --- ## ["watcher\_state" : "starting",](https://discuss.elastic.co/t/watcher-state-starting/1165)
**Author:** [@Amit\_Kumar\_Srivastav](https://discuss.elastic.co/u/Amit_Kumar_Srivastav)\ **Replies:** 7\ **Last updated:** [May 26, 2015, 11:19am UTC](https://discuss.elastic.co/t/watcher-state-starting/1165 "2015-05-26T11:19:15Z")
Hello Team, i have followed the startup guide to install watcher plugin using the following command. bin/plugin -i elasticsearch/watcher/ (used the beta key as given in mail) Plugin got installed successfully but i… --- ## [Keeping only latest "Date Histogram" aggregation in a datatable](https://discuss.elastic.co/t/keeping-only-latest-date-histogram-aggregation-in-a-datatable/117842)
**Author:** [@anthony-o](https://discuss.elastic.co/u/anthony-o)\ **Replies:** 4\ **Last updated:** [February 9, 2018, 10:22am UTC](https://discuss.elastic.co/t/keeping-only-latest-date-histogram-aggregation-in-a-datatable/117842 "2018-02-09T10:22:29Z")
Here is my index structure: type, times. The type field can be either "error" or "valid". I would like to have the following datatable: +--------------------+--------------------------+--------------+ | @timestamp per… --- ## [How to pass ruby variable to logstash field?](https://discuss.elastic.co/t/how-to-pass-ruby-variable-to-logstash-field/80664)
**Author:** [@laptop\_data](https://discuss.elastic.co/u/laptop_data)\ **Replies:** 4\ **Last updated:** [March 30, 2017, 12:57pm UTC](https://discuss.elastic.co/t/how-to-pass-ruby-variable-to-logstash-field/80664 "2017-03-30T12:57:16Z")
Hi, I'm using ruby filter in my logstash conf file where it will produce some output into a variable which is json data, so that i will filter that data using json filter. But the problem is i can't able to pass that var… --- ## [Does Heartbeat Support Data Stream?](https://discuss.elastic.co/t/does-heartbeat-support-data-stream/288602)
**Author:** [@Ray\_Lin](https://discuss.elastic.co/u/Ray_Lin)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 4:00pm UTC](https://discuss.elastic.co/t/does-heartbeat-support-data-stream/288602 "2021-11-08T16:00:46Z")
Hi Team, I want to use data stream instead of ILM to manage the data from Heartbeat. But it seems the document didn't mention related setting about data stream. Does Heartbeat supports data stream? --- ## [Logstash服务启动报错](https://discuss.elastic.co/t/logstash/66831)
**Author:** [@yinsl](https://discuss.elastic.co/u/yinsl)\ **Replies:** 1\ **Last updated:** [November 22, 2016, 9:58am UTC](https://discuss.elastic.co/t/logstash/66831 "2016-11-22T09:58:43Z")
\[2016-11-22T16:57:41,430\]\[INFO \]\[org.logstash.beats.Server\] Starting server on port: 4560 \[2016-11-22T16:57:41,431\]\[WARN \]\[io.netty.channel.AbstractChannel\] Force-closing a channel whose registration task was not accepte… --- ## [ELK documentation in PDF or equivalent format for offline viewing?](https://discuss.elastic.co/t/elk-documentation-in-pdf-or-equivalent-format-for-offline-viewing/67455)
**Author:** [@amit\_saxena](https://discuss.elastic.co/u/amit_saxena)\ **Replies:** 2\ **Last updated:** [December 9, 2016, 10:51am UTC](https://discuss.elastic.co/t/elk-documentation-in-pdf-or-equivalent-format-for-offline-viewing/67455 "2016-12-09T10:51:49Z")
Hi all, Is ELK documentation available in PDF format for offline download and viewing ? I have started learning ELK stack and joined this community as a new user. While going through the documentation, I found that … --- ## [Proxy protocol support for logstash? (ELB and HAProxy for inbound failover)](https://discuss.elastic.co/t/proxy-protocol-support-for-logstash-elb-and-haproxy-for-inbound-failover/38117)
**Author:** [@nneul](https://discuss.elastic.co/u/nneul)\ **Replies:** 5\ **Last updated:** [January 5, 2016, 2:35pm UTC](https://discuss.elastic.co/t/proxy-protocol-support-for-logstash-elb-and-haproxy-for-inbound-failover/38117 "2016-01-05T14:35:36Z")
Is there any way to get proxy protocol support for logstash so that the indexer can see the originating IP/host for the connections if you have logstash sitting behind ELB or HAProxy? --- ## [Delete all indices with specific pre-fix using JAVA APIs](https://discuss.elastic.co/t/delete-all-indices-with-specific-pre-fix-using-java-apis/102738)
**Author:** [@hitesh-inbetween](https://discuss.elastic.co/u/hitesh-inbetween)\ **Replies:** 6\ **Last updated:** [October 5, 2017, 9:14am UTC](https://discuss.elastic.co/t/delete-all-indices-with-specific-pre-fix-using-java-apis/102738 "2017-10-05T09:14:26Z")
Hi all, Does anyone know how to perform curl -XDELETE "http://localhost:9200/test\_\*;" via JAVA APIs? I found the way to delete a particular index, but I have multiple indices with a particular prefix and a special ev… --- ## [Unified Highlighter is too slow](https://discuss.elastic.co/t/unified-highlighter-is-too-slow/133814)
**Author:** [@aslamy1](https://discuss.elastic.co/u/aslamy1)\ **Replies:** 8\ **Last updated:** [May 30, 2018, 2:49pm UTC](https://discuss.elastic.co/t/unified-highlighter-is-too-slow/133814 "2018-05-30T14:49:13Z")
Hi ! When I use Unified Highlighter it takes about 20-22 sec to retrieve the result but when I change it to fvh highlighter it takes about 2-3 sec. Why does elasticsearch recommend unified highlighter and has it as def… --- ## [How to parse json from message field](https://discuss.elastic.co/t/how-to-parse-json-from-message-field/350769)
**Author:** [@wrender1](https://discuss.elastic.co/u/wrender1)\ **Replies:** 3\ **Last updated:** [January 11, 2024, 9:59pm UTC](https://discuss.elastic.co/t/how-to-parse-json-from-message-field/350769 "2024-01-11T21:59:07Z")
Hello, I'm looking for help with parsing json data out of a log field. I'm using the elastic agent standalone in Kubernetes and not sure how to configure it for this. I believe the filebeat portion of the elastic agent … --- ## [Running multiple filebeat instances](https://discuss.elastic.co/t/running-multiple-filebeat-instances/48995)
**Author:** [@reinier](https://discuss.elastic.co/u/reinier)\ **Replies:** 2\ **Last updated:** [May 2, 2016, 11:55pm UTC](https://discuss.elastic.co/t/running-multiple-filebeat-instances/48995 "2016-05-02T23:55:36Z")
Hi, I am currently using Filebeat to send both NGINX and Syslog towards an ELK stack, which works perfectly. Nice! Now I am trying to add OSSEC to the equation. The OSSEC files are in JSON format, while the other logs … --- ## [Filebeat not able to send logs to Elastic](https://discuss.elastic.co/t/filebeat-not-able-to-send-logs-to-elastic/178627)
**Author:** [@parsu](https://discuss.elastic.co/u/parsu)\ **Replies:** 5\ **Last updated:** [April 30, 2019, 10:52am UTC](https://discuss.elastic.co/t/filebeat-not-able-to-send-logs-to-elastic/178627 "2019-04-30T10:52:52Z")
Hi, I am trying to send data to elastic search using filebeat. I started my elastic search and then filebeat. I am getting the bellow message OS: Ubuntu 16.04 Filebeat version: filebeat-7.0.0 ElasticSearch version: … --- ## [Filebeat (v6.2.3) complaining about ES plugins (v6.2.3) missing](https://discuss.elastic.co/t/filebeat-v6-2-3-complaining-about-es-plugins-v6-2-3-missing/125038)
**Author:** [@cmo23](https://discuss.elastic.co/u/cmo23)\ **Replies:** 5\ **Last updated:** [March 23, 2018, 5:24pm UTC](https://discuss.elastic.co/t/filebeat-v6-2-3-complaining-about-es-plugins-v6-2-3-missing/125038 "2018-03-23T17:24:47Z")
2018-03-21T16:45:48.131Z ERROR pipeline/output.go:74 Failed to connect: Connection marked as failed because the onConnect callback failed: Error loading pipeline for fileset nginx/access: This module requires the followi… --- ## [Filebeat CEF Module](https://discuss.elastic.co/t/filebeat-cef-module/206094)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 8\ **Last updated:** [November 5, 2019, 10:45pm UTC](https://discuss.elastic.co/t/filebeat-cef-module/206094 "2019-11-05T22:45:26Z")
We've been trying to create a pipeline for logs from a security tool using the recently released CEF module, but we've been getting an error about the log format and its parsing. The tool would pull its logs via an API … --- ## [Logstash apache access referrer value parsing](https://discuss.elastic.co/t/logstash-apache-access-referrer-value-parsing/51474)
**Author:** [@bhawanaus](https://discuss.elastic.co/u/bhawanaus)\ **Replies:** 3\ **Last updated:** [June 1, 2016, 3:38am UTC](https://discuss.elastic.co/t/logstash-apache-access-referrer-value-parsing/51474 "2016-06-01T03:38:15Z")
Hello, I'm trying to create visualization on Kibana based upon referrer value from apache logs. Below is a sample log from apache access logs. 127.0.0.1 - - \[20/May/2016:00:00:14 +0000\] "GET /secure/queue/handleQueue… --- ## [Help with "bool" and "prefix" query in url](https://discuss.elastic.co/t/help-with-bool-and-prefix-query-in-url/5034)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 7\ **Last updated:** [August 2, 2012, 1:42am UTC](https://discuss.elastic.co/t/help-with-bool-and-prefix-query-in-url/5034 "2012-08-02T01:42:42Z")
Hi, should a query specified by a "json" body also be able to be sent via the url only? E.g. this query works fine: curl -XGET 'localhost:9200/\_search?pretty=yes' -d '{query: {bool: {must: \[{term: {"context": "examp… [Previous page](https://discuss.elastic.co/top.md?page=561&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=563&per_page=50&period=all)