# Top **URL:** https://discuss.elastic.co/top.md?page=565&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 566 --- ## [Debug custom elasticsearch plugin in Intellij](https://discuss.elastic.co/t/debug-custom-elasticsearch-plugin-in-intellij/197145)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 7\ **Last updated:** [August 29, 2019, 12:28pm UTC](https://discuss.elastic.co/t/debug-custom-elasticsearch-plugin-in-intellij/197145 "2019-08-29T12:28:51Z")
I have gone through this blog and I am able to debug elasticsearch code in Intellij. Can someone let me know how can I debug a custom plugin code in Intellij now? I have gone through this post and tried to run elasticse… --- ## [Different primary and replica shard size](https://discuss.elastic.co/t/different-primary-and-replica-shard-size/187331)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 7\ **Last updated:** [July 1, 2019, 1:49pm UTC](https://discuss.elastic.co/t/different-primary-and-replica-shard-size/187331 "2019-07-01T13:49:37Z")
I am using ES 7.1.1. I have one shard in each index and two replicas. I am using bulkProcessor to insert data. We never update or delete docs. Cluster: 3master, 3data, 2coord Problem: The size of data in primary sha… --- ## [Filebeat agent seems to die/exit when a log file its watching rotates](https://discuss.elastic.co/t/filebeat-agent-seems-to-die-exit-when-a-log-file-its-watching-rotates/126133)
**Author:** [@cmo23](https://discuss.elastic.co/u/cmo23)\ **Replies:** 7\ **Last updated:** [April 4, 2018, 4:06pm UTC](https://discuss.elastic.co/t/filebeat-agent-seems-to-die-exit-when-a-log-file-its-watching-rotates/126133 "2018-04-04T16:06:37Z")
I'm probably doing something obviously wrong here, in a nutshell is there anything special you need to do to handle log rotation of the logs being shipped by filebeat? i would have thought it'd be smart enough to handle… --- ## [X-PACK 5.6.3out put time out when collecting data how to change the time of collecting data. ES 5.6.3](https://discuss.elastic.co/t/x-pack-5-6-3out-put-time-out-when-collecting-data-how-to-change-the-time-of-collecting-data-es-5-6-3/105992)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 7\ **Last updated:** [November 6, 2017, 7:11am UTC](https://discuss.elastic.co/t/x-pack-5-6-3out-put-time-out-when-collecting-data-how-to-change-the-time-of-collecting-data-es-5-6-3/105992 "2017-11-06T07:11:36Z")
\[2017-11-01T07:46:50,053\]\[ERROR\]\[o.e.x.m.c.i.IndexStatsCollector\] \[xxxxxxxxxxxxxxxxxxxxx\] collector \[index-stats\] timed out when collecting data \[2017-11-01T07:50:19,540\]\[ERROR\]\[o.e.x.m.c.i.IndexStatsCollector\] \[xxxxxxxx… --- ## [Filebeat timestamp processor parsing incorrectly](https://discuss.elastic.co/t/filebeat-timestamp-processor-parsing-incorrectly/246586)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 4\ **Last updated:** [August 27, 2020, 11:09am UTC](https://discuss.elastic.co/t/filebeat-timestamp-processor-parsing-incorrectly/246586 "2020-08-27T11:09:56Z")
Filebeat timestamp processor is unable to parse timestamp as expected. Log file - 26/Aug/2020:08:00:30 +0100 26/Aug/2020:08:02:30 +0100 Filebeat config - filebeat.inputs: - type: log paths: … --- ## [Elasticsearch plugin development : Customising existing REST endpoints](https://discuss.elastic.co/t/elasticsearch-plugin-development-customising-existing-rest-endpoints/31316)
**Author:** [@0x777](https://discuss.elastic.co/u/0x777)\ **Replies:** 0\ **Last updated:** [September 29, 2015, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-development-customising-existing-rest-endpoints/31316 "2015-09-29T09:03:24Z")
Consider a scenario where every request to elasticsearch's HTTP endpoints has additional header information (set by an upstream server). I would like to use the header information in a request and some global configurati… --- ## [MalformedCSVError: Illegal quoting in line 1](https://discuss.elastic.co/t/malformedcsverror-illegal-quoting-in-line-1/264048)
**Author:** [@checknew](https://discuss.elastic.co/u/checknew)\ **Replies:** 5\ **Last updated:** [February 12, 2021, 8:07pm UTC](https://discuss.elastic.co/t/malformedcsverror-illegal-quoting-in-line-1/264048 "2021-02-12T20:07:27Z")
Hi all, I am seeing WARNING messages when csv is pushed to logstash, I want to eliminate the WARNING messages, any help appreciated: Sample csv: 20185656,2021-02-01 17:52:47,2021-02-01 18:23:15,"Hi Test2, this is ch… --- ## [Missing modules.path](https://discuss.elastic.co/t/missing-modules-path/132161)
**Author:** [@Invictus](https://discuss.elastic.co/u/Invictus)\ **Replies:** 3\ **Last updated:** [May 25, 2018, 9:02am UTC](https://discuss.elastic.co/t/missing-modules-path/132161 "2018-05-25T09:02:42Z")
hi members, as already pointed out in that request it seems necessary to enable healthcheck inside the container. So I tried to set the following commands in the container with these errors. \[root@c1c93cf2f46d metri… --- ## [Filter working on ubuntu but not on windows; mysterious "\\r"](https://discuss.elastic.co/t/filter-working-on-ubuntu-but-not-on-windows-mysterious-r/44268)
**Author:** [@pat7](https://discuss.elastic.co/u/pat7)\ **Replies:** 4\ **Last updated:** [March 15, 2016, 9:49am UTC](https://discuss.elastic.co/t/filter-working-on-ubuntu-but-not-on-windows-mysterious-r/44268 "2016-03-15T09:49:17Z")
Hi, i have a working elastic stack linux setup for evaulation but I wanted to try out Windows 7 as server as well.. Because I have to backfill a lot of logs, I have to change the timestamp with the filter date to the rea… --- ## [How do you tag by multiple source IPs?](https://discuss.elastic.co/t/how-do-you-tag-by-multiple-source-ips/202917)
**Author:** [@meatwad](https://discuss.elastic.co/u/meatwad)\ **Replies:** 7\ **Last updated:** [October 10, 2019, 8:53pm UTC](https://discuss.elastic.co/t/how-do-you-tag-by-multiple-source-ips/202917 "2019-10-10T20:53:26Z")
Hi, I'm transitioning to logstash from an rsyslog config that ingests logs from a list of network devices (routers, switches, firewalls), then does something based on the source IP. Here's an abbreviated example: if … --- ## [Snapshot to S3 via corporate proxy](https://discuss.elastic.co/t/snapshot-to-s3-via-corporate-proxy/36431)
**Author:** [@gromit](https://discuss.elastic.co/u/gromit)\ **Replies:** 7\ **Last updated:** [December 6, 2015, 7:13am UTC](https://discuss.elastic.co/t/snapshot-to-s3-via-corporate-proxy/36431 "2015-12-06T07:13:24Z")
I would like to use an S3 repository for snapshots, but access is via a corporate HTTP proxy that requires authentication. Currently I'm using a shared file system repository and then using proxychains with S3cmd to send… --- ## [Warning: Journal has been rotated since unit was started](https://discuss.elastic.co/t/warning-journal-has-been-rotated-since-unit-was-started/283131)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 4\ **Last updated:** [September 3, 2021, 9:56am UTC](https://discuss.elastic.co/t/warning-journal-has-been-rotated-since-unit-was-started/283131 "2021-09-03T09:56:02Z")
hi everyone, i need help. i have a warning at my kibana "elastic did not load properly..." after that i check mu elasticsearch's server. i check the status. it's running so well but there's a warning "journal has been … --- ## [Geoip.ip and private ip file](https://discuss.elastic.co/t/geoip-ip-and-private-ip-file/72301)
**Author:** [@Grenouille06](https://discuss.elastic.co/u/Grenouille06)\ **Replies:** 3\ **Last updated:** [January 26, 2017, 1:47pm UTC](https://discuss.elastic.co/t/geoip-ip-and-private-ip-file/72301 "2017-01-26T13:47:06Z")
Hi, I want to try geoip functionnalities. I import with ELK logs from many active directory controllers. I want to match IP from that logs with a personal file. For example 10.12.x.x =\> research floor 1 or 10.15.x.x -\> … --- ## [Change "path.repo" value in settings without restarting cluster - is it possible?](https://discuss.elastic.co/t/change-path-repo-value-in-settings-without-restarting-cluster-is-it-possible/185073)
**Author:** [@Yury\_Kozlov](https://discuss.elastic.co/u/Yury_Kozlov)\ **Replies:** 5\ **Last updated:** [June 11, 2019, 12:22pm UTC](https://discuss.elastic.co/t/change-path-repo-value-in-settings-without-restarting-cluster-is-it-possible/185073 "2019-06-11T12:22:08Z")
Hi, is it possible to change "path.repo" value in settings without restarting cluster ? I'd like to change our backups location without playing around with availability of any node. We use Elastic 6.8.0 on Windows. Th… --- ## [Array field in event](https://discuss.elastic.co/t/array-field-in-event/68475)
**Author:** [@kahndor](https://discuss.elastic.co/u/kahndor)\ **Replies:** 5\ **Last updated:** [December 9, 2016, 5:06pm UTC](https://discuss.elastic.co/t/array-field-in-event/68475 "2016-12-09T17:06:05Z")
I have an event that has many fields. These fields need to be arrays with other fields. Here is an example of what I want: "//ip//dst" : \[ { "type" : "ipv4", "value" : "192.168.1.2", "vis" : "U&FOUO" … --- ## [Change Date format in kibana](https://discuss.elastic.co/t/change-date-format-in-kibana/185764)
**Author:** [@A\_google\_user](https://discuss.elastic.co/u/A_google_user)\ **Replies:** 1\ **Last updated:** [June 21, 2019, 1:20pm UTC](https://discuss.elastic.co/t/change-date-format-in-kibana/185764 "2019-06-21T13:20:00Z")
I have data in which date format is in epoch format(milli second). Now I want to filter data on that field. How can I make this possible ? Is there any feature or mapping or plug in, by which data gets stored in date fo… --- ## [Checksum confirmation during kibana installation for rpm](https://discuss.elastic.co/t/checksum-confirmation-during-kibana-installation-for-rpm/320425)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [December 28, 2022, 1:28am UTC](https://discuss.elastic.co/t/checksum-confirmation-during-kibana-installation-for-rpm/320425 "2022-12-28T01:28:35Z")
Hello . Walking through the document and came up with below thought. NIT though. Kibana doc suggest user to MANUALLY to compare checksum ,where elasticsearch doc do this automatically in shasum command . I thought it … --- ## [X-pack PreBuiltXPackTransportClient occurs NoNodeAvailableException](https://discuss.elastic.co/t/x-pack-prebuiltxpacktransportclient-occurs-nonodeavailableexception/73999)
**Author:** [@lks21c](https://discuss.elastic.co/u/lks21c)\ **Replies:** 8\ **Last updated:** [February 7, 2017, 5:46am UTC](https://discuss.elastic.co/t/x-pack-prebuiltxpacktransportclient-occurs-nonodeavailableexception/73999 "2017-02-07T05:46:00Z")
Hi, I'm using ES 5.1.1 with Kibana 5.1.1. I planned to setup x-pack on both ES and Kibana to use authentication. What I've configured setting is below. ======================== org.elasticsearch.client … --- ## [JDBC\_Streaming informations](https://discuss.elastic.co/t/jdbc-streaming-informations/112489)
**Author:** [@AH\_M7](https://discuss.elastic.co/u/AH_M7)\ **Replies:** 6\ **Last updated:** [December 21, 2017, 5:33pm UTC](https://discuss.elastic.co/t/jdbc-streaming-informations/112489 "2017-12-21T17:33:56Z")
Hi, I'm actually working on a Logstash demo. The idea is simple : I use the Kafka Input Method to read my String (message) AND i'm trying to do a SQL query with the JDBC\_Streaming filter (if possible not with ruby\_co… --- ## [Kibana permission denied, open '/etc/kibana/kibana.yml'](https://discuss.elastic.co/t/kibana-permission-denied-open-etc-kibana-kibana-yml/276821)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 4\ **Last updated:** [June 24, 2021, 6:43am UTC](https://discuss.elastic.co/t/kibana-permission-denied-open-etc-kibana-kibana-yml/276821 "2021-06-24T06:43:53Z")
I have Kibana installed under the sudo user. As I try to run /usr/share/kibana/bin/kibana -c /etc/kibana/kibana.yml I get an error: Error: EACCES: permission denied, open '/etc/kibana/kibana.yml' kibana.yml chmod i… --- ## [Logstash logstash-jdbc-input queries (mapping and type)](https://discuss.elastic.co/t/logstash-logstash-jdbc-input-queries-mapping-and-type/26224)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 4\ **Last updated:** [July 29, 2015, 8:03pm UTC](https://discuss.elastic.co/t/logstash-logstash-jdbc-input-queries-mapping-and-type/26224 "2015-07-29T20:03:05Z")
hi , I have some queries about logstash-input-jdbc 1) how to specify the type : lets us suppose I have already a mapping available for index . Lets say type is "mydata". If i talk about csv filter in Logstash it has … --- ## [Search Filter for nested json array](https://discuss.elastic.co/t/search-filter-for-nested-json-array/11110)
**Author:** [@Tamar\_Fraenkel](https://discuss.elastic.co/u/Tamar_Fraenkel)\ **Replies:** 4\ **Last updated:** [March 13, 2013, 1:12pm UTC](https://discuss.elastic.co/t/search-filter-for-nested-json-array/11110 "2013-03-13T13:12:32Z")
Hi! I am a newbie to elasticsearch. I have a json document with the following structure { - id: "45f9f13c-5234-4a72-8a08-3863deed3755", - title: "My Title", - text: "My Text", - article: { … --- ## [O365 connectors within Teams will be deprecated and notifications from this service will stop](https://discuss.elastic.co/t/o365-connectors-within-teams-will-be-deprecated-and-notifications-from-this-service-will-stop/363240)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 1\ **Last updated:** [August 13, 2024, 8:43am UTC](https://discuss.elastic.co/t/o365-connectors-within-teams-will-be-deprecated-and-notifications-from-this-service-will-stop/363240 "2024-08-13T08:43:32Z")
Action Required: O365 connectors within Teams will be deprecated and notifications from this service will stop. Learn more about the timing and how the Workflows app provides a more flexible and secure experience. If you… --- ## [After & before pagination](https://discuss.elastic.co/t/after-before-pagination/127495)
**Author:** [@rrader](https://discuss.elastic.co/u/rrader)\ **Replies:** 3\ **Last updated:** [April 10, 2018, 6:42pm UTC](https://discuss.elastic.co/t/after-before-pagination/127495 "2018-04-10T18:42:19Z")
From facebook api: before : This is the cursor that points to the start of the page of data that has been returned. after : This is the cursor that points to the end of the page of data that has been returned. in Elas… --- ## [Kibana case sensitive search?](https://discuss.elastic.co/t/kibana-case-sensitive-search/317788)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [December 25, 2022, 2:18pm UTC](https://discuss.elastic.co/t/kibana-case-sensitive-search/317788 "2022-12-25T14:18:05Z")
kibana case sensitive search? i try but is not have operator base on dashboard --- ## [Elasticsearch not returning hits for multi-valued field](https://discuss.elastic.co/t/elasticsearch-not-returning-hits-for-multi-valued-field/26912)
**Author:** [@pferrel](https://discuss.elastic.co/u/pferrel)\ **Replies:** 5\ **Last updated:** [August 7, 2015, 9:43am UTC](https://discuss.elastic.co/t/elasticsearch-not-returning-hits-for-multi-valued-field/26912 "2015-08-07T09:43:01Z")
I am using Elasticsearch with no modifications whatsoever. This means the mappings, norms, and analyzed/not\_analyzed are all default config. I have a very small data set of two items for experimentation purposes (trying … --- ## [Logstash Patterns - Firewalls - Best Place to Find it](https://discuss.elastic.co/t/logstash-patterns-firewalls-best-place-to-find-it/239107)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 4\ **Last updated:** [July 16, 2020, 8:15pm UTC](https://discuss.elastic.co/t/logstash-patterns-firewalls-best-place-to-find-it/239107 "2020-07-16T20:15:43Z")
My use case is Cisco ASA firewall logs but I think these questions apply more broadly. I am trying do the parsing of Cisco ASA logs in logstash, not using Filebeat. I'd like to not reinvent the wheel so where can I f… --- ## [OS Support Matrix](https://discuss.elastic.co/t/os-support-matrix/179701)
**Author:** [@hanso](https://discuss.elastic.co/u/hanso)\ **Replies:** 4\ **Last updated:** [May 7, 2019, 10:19am UTC](https://discuss.elastic.co/t/os-support-matrix/179701 "2019-05-07T10:19:52Z")
Hi there. Could someone point me to a OS support matrix? I cannot find it anywhere. I have looked at elastic.co, the forums as well as the GitHub site. I am looking for confirmation that there is a version of Winlogbea… --- ## [7.6.0 on Windows: Netflow and Syslog are not being captured by Filebeat](https://discuss.elastic.co/t/7-6-0-on-windows-netflow-and-syslog-are-not-being-captured-by-filebeat/219736)
**Author:** [@c1jt](https://discuss.elastic.co/u/c1jt)\ **Replies:** 5\ **Last updated:** [February 26, 2020, 10:14am UTC](https://discuss.elastic.co/t/7-6-0-on-windows-netflow-and-syslog-are-not-being-captured-by-filebeat/219736 "2020-02-26T10:14:21Z")
Hello! I'm looking for help on a small Docker-ised ELK instance, my filebeat inplementation isn't recognising any netflow packets from the firewalls. I have two firewalls passing Netflow v5 (Sophos XG) and v9 (Cisco ASA… --- ## [CORS problem in Kibana Map](https://discuss.elastic.co/t/cors-problem-in-kibana-map/193710)
**Author:** [@Daniel6](https://discuss.elastic.co/u/Daniel6)\ **Replies:** 6\ **Last updated:** [August 8, 2019, 8:06am UTC](https://discuss.elastic.co/t/cors-problem-in-kibana-map/193710 "2019-08-08T08:06:27Z")
Hi, I run ELK on liunx (CetnOS7) server in intranet environment. Because of intranet environment, all original Map in Kibana not work. So I want to use custom map in Kibana. I download map geojson file form https://e… --- ## [Facing EsHadoopIllegalStateException when reading from a ES cluster](https://discuss.elastic.co/t/facing-eshadoopillegalstateexception-when-reading-from-a-es-cluster/25269)
**Author:** [@Puneet\_Jaiswal](https://discuss.elastic.co/u/Puneet_Jaiswal)\ **Replies:** 2\ **Last updated:** [July 14, 2015, 10:49pm UTC](https://discuss.elastic.co/t/facing-eshadoopillegalstateexception-when-reading-from-a-es-cluster/25269 "2015-07-14T22:49:01Z")
Hi, I am running this code with versions: elasticsearch 1.5.2 spark 1.4 es-hadoop 2.2.0.BUILD-SNAPSHOT import org.apache.spark.SparkConf; import org.apache.spark.api.java.JavaSparkContext; import org.apache.spark.s… --- ## [Elasticsearch 5.6.3 font problem](https://discuss.elastic.co/t/elasticsearch-5-6-3-font-problem/104836)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 3\ **Last updated:** [October 29, 2017, 12:49pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-3-font-problem/104836 "2017-10-29T12:49:52Z")
Hi Plugins installed: ingest-attachment Centos 7.4 I have installed elasticsearch 5.6.3 to development, and while we are pumping documents into it, we are getting the following errors/warnings in log. Elasticsearch i… --- ## [Query\_string in 5.1 is case sensitive](https://discuss.elastic.co/t/query-string-in-5-1-is-case-sensitive/78886)
**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\ **Replies:** 8\ **Last updated:** [March 17, 2017, 1:24pm UTC](https://discuss.elastic.co/t/query-string-in-5-1-is-case-sensitive/78886 "2017-03-17T13:24:17Z")
Hi There, I am using AWS ElasticSearch Service. at first i had version "2.3". when using "query\_string to search for a field as follows. even authorlast name starts with uppercase "S" , but it is mapped to lowercase as… --- ## [ElasticSearch push mechanism](https://discuss.elastic.co/t/elasticsearch-push-mechanism/27373)
**Author:** [@Ashish\_Mukherjee](https://discuss.elastic.co/u/Ashish_Mukherjee)\ **Replies:** 0\ **Last updated:** [August 14, 2015, 7:00am UTC](https://discuss.elastic.co/t/elasticsearch-push-mechanism/27373 "2015-08-14T07:00:55Z")
Hello, I have a scenario where my ElasticSearch index is being updated very frequently (nearly every second). I would like to implement a push-based mechanism to stream the latest data to the client (Browser). I was co… --- ## [ELK + Filebeat](https://discuss.elastic.co/t/elk-filebeat/121397)
**Author:** [@adelfattal](https://discuss.elastic.co/u/adelfattal)\ **Replies:** 7\ **Last updated:** [March 8, 2018, 4:37am UTC](https://discuss.elastic.co/t/elk-filebeat/121397 "2018-03-08T04:37:56Z")
Hello, I am a University student and my project is on the ELK Stack and I have followed the implementation on your Website from Elastic Search, Kibana and Logstash. I understood that I have to send from my servers the … --- ## [How to do exact match with elasticsearch Chinese analysis plugin?](https://discuss.elastic.co/t/how-to-do-exact-match-with-elasticsearch-chinese-analysis-plugin/6386)
**Author:** [@hau](https://discuss.elastic.co/u/hau)\ **Replies:** 7\ **Last updated:** [January 19, 2012, 4:33am UTC](https://discuss.elastic.co/t/how-to-do-exact-match-with-elasticsearch-chinese-analysis-plugin/6386 "2012-01-19T04:33:25Z")
I was using the elasticsearch-analysis-smartcn plugin to perform full text search in Chinese. I had a activerecord model Article which has a string content and many tags. Tags could be written in Chinese and I wa… --- ## [Not enough active copies to meet write consistency of \[QUORUM\] (have 2, needed 3)](https://discuss.elastic.co/t/not-enough-active-copies-to-meet-write-consistency-of-quorum-have-2-needed-3/59980)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 1\ **Last updated:** [September 7, 2016, 5:49pm UTC](https://discuss.elastic.co/t/not-enough-active-copies-to-meet-write-consistency-of-quorum-have-2-needed-3/59980 "2016-09-07T17:49:14Z")
I am using Elasticsearch 1.7.x, and am getting this error ERROR: 503 RemoteTransportException\[\[secondary\]\[inet\[/172.31.0.203:9300\]\]\[indices:data/write/bulk\[s\]\]\]; nested: UnavailableShardsException\[\[pulse20160225\_22474… --- ## [Elasticsearch 7.x closed indices retain shards](https://discuss.elastic.co/t/elasticsearch-7-x-closed-indices-retain-shards/187969)
**Author:** [@trenta](https://discuss.elastic.co/u/trenta)\ **Replies:** 5\ **Last updated:** [June 28, 2019, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-7-x-closed-indices-retain-shards/187969 "2019-06-28T06:16:58Z")
Prior to version 7, when I closed an index it would release any shards that were used and turn the status of that index to black. Since version 7 when I close an index it is labeled as closed but still has a green statu… --- ## [ECE 2.0.1 Unable to upload Letsencrypt TLS certificate](https://discuss.elastic.co/t/ece-2-0-1-unable-to-upload-letsencrypt-tls-certificate/158802)
**Author:** [@cmoi](https://discuss.elastic.co/u/cmoi)\ **Replies:** 5\ **Last updated:** [November 30, 2018, 2:59pm UTC](https://discuss.elastic.co/t/ece-2-0-1-unable-to-upload-letsencrypt-tls-certificate/158802 "2018-11-30T14:59:36Z")
Hi, I am unable to install a certificate signed by Letsencrypt as a TLS certificate neither for Proxy or Cloud UI and get this error: Certificate chain was invalid \[Path does not chain with any of the trust anchors\] C… --- ## [Elasticsearch 5.1.x bootstrap check failed heap size](https://discuss.elastic.co/t/elasticsearch-5-1-x-bootstrap-check-failed-heap-size/71386)
**Author:** [@mudim](https://discuss.elastic.co/u/mudim)\ **Replies:** 3\ **Last updated:** [January 12, 2017, 3:34pm UTC](https://discuss.elastic.co/t/elasticsearch-5-1-x-bootstrap-check-failed-heap-size/71386 "2017-01-12T15:34:39Z")
Hi, Am running into issues trying to get my ES cluster up and running when on non-local host settings. Getting bootstrap failures with initial heap size \[33554432\] not equal to maximum heap size \[524288000\]; this can ca… --- ## [Stuck with timezone issue in logstash JDBC input](https://discuss.elastic.co/t/stuck-with-timezone-issue-in-logstash-jdbc-input/236707)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 6\ **Last updated:** [June 18, 2020, 6:10am UTC](https://discuss.elastic.co/t/stuck-with-timezone-issue-in-logstash-jdbc-input/236707 "2020-06-18T06:10:21Z")
I am a bit lost here. Situation: Some transaction happens in Sydney. And the record is stored in SQL database. The time stored is in UTC. 5 mins later, we pull that data using Logstash JDBC input. Kibana pulls up and … --- ## [Pod container logs stop randomly](https://discuss.elastic.co/t/pod-container-logs-stop-randomly/325632)
**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\ **Replies:** 5\ **Last updated:** [April 10, 2023, 5:20pm UTC](https://discuss.elastic.co/t/pod-container-logs-stop-randomly/325632 "2023-04-10T17:20:23Z")
Since upgrading to 8.6.1 (from 8.5.x), I'm finding that logs that are supposed to be collected via the Kubernetes Integration for an elastic agent in Fleet mode are stopping completely and randomly (as far as I can see). … --- ## [Condition compare - aggregations](https://discuss.elastic.co/t/condition-compare-aggregations/154702)
**Author:** [@Amanda](https://discuss.elastic.co/u/Amanda)\ **Replies:** 4\ **Last updated:** [November 12, 2018, 3:13pm UTC](https://discuss.elastic.co/t/condition-compare-aggregations/154702 "2018-11-12T15:13:41Z")
Can we compare two different aggregations when using condition - compare struct? Example: "condition": { "compare" : { "ctx.payload.aggregations.top\_number1.buckets" : { "eq" : "{{ctx.payload.aggregations.top\_number2.… --- ## [Error when indexing using elasticsearch\_dsl library in python](https://discuss.elastic.co/t/error-when-indexing-using-elasticsearch-dsl-library-in-python/131212)
**Author:** [@Ammar\_Khan](https://discuss.elastic.co/u/Ammar_Khan)\ **Replies:** 0\ **Last updated:** [May 9, 2018, 5:44pm UTC](https://discuss.elastic.co/t/error-when-indexing-using-elasticsearch-dsl-library-in-python/131212 "2018-05-09T17:44:20Z")
Hello everyone! I am working in django, a python framework. I am having an error while I am indexing my data. The error is just related when I insert Nested type when defining a doctype. I have the following models: c… --- ## [How to define X and Y coordinates](https://discuss.elastic.co/t/how-to-define-x-and-y-coordinates/91081)
**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\ **Replies:** 6\ **Last updated:** [July 2, 2017, 10:25am UTC](https://discuss.elastic.co/t/how-to-define-x-and-y-coordinates/91081 "2017-07-02T10:25:15Z")
I need to define geopoint using X and Y coordinates instead of using lat and lon. --- ## [How logstash receive multiple topics from kafka](https://discuss.elastic.co/t/how-logstash-receive-multiple-topics-from-kafka/237605)
**Author:** [@Lan\_Lynn](https://discuss.elastic.co/u/Lan_Lynn)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 6:51am UTC](https://discuss.elastic.co/t/how-logstash-receive-multiple-topics-from-kafka/237605 "2020-06-19T06:51:47Z")
I'm trying to use logstash to receive data from kafka. I'm having this configurations in Kafka below, two topics and one groupID. "DeviceTopic": "device", //Topic for device-gruoped messages "TaskTopic": "task", //Top… --- ## [2 clusters versus 1 big cluster?](https://discuss.elastic.co/t/2-clusters-versus-1-big-cluster/16481)
**Author:** [@Brad\_Jordan\_2](https://discuss.elastic.co/u/Brad_Jordan_2)\ **Replies:** 5\ **Last updated:** [March 24, 2014, 3:36pm UTC](https://discuss.elastic.co/t/2-clusters-versus-1-big-cluster/16481 "2014-03-24T15:36:47Z")
Hey all, I have 30 machines to build my ES cluster. I am going to need to build 2000 indexes with 14400 shards total. Should I build two clusters or one? I have a multi customer data set. 65% of the customers ha… --- ## [Why query\_string doesn't honor the usual precedence rules?](https://discuss.elastic.co/t/why-query-string-doesnt-honor-the-usual-precedence-rules/248779)
**Author:** [@android.kc](https://discuss.elastic.co/u/android.kc)\ **Replies:** 3\ **Last updated:** [September 18, 2020, 4:36pm UTC](https://discuss.elastic.co/t/why-query-string-doesnt-honor-the-usual-precedence-rules/248779 "2020-09-18T16:36:25Z")
Can anyone please explain why I got all different results in the following query\_string queries (all are the same except the parentheses) A OR B AND C (A OR B) AND C A OR (B AND C) The index only has the thre… --- ## [Bar chart date histogram - set x axis to yyyy-MM](https://discuss.elastic.co/t/bar-chart-date-histogram-set-x-axis-to-yyyy-mm/55391)
**Author:** [@Oferkes](https://discuss.elastic.co/u/Oferkes)\ **Replies:** 1\ **Last updated:** [July 13, 2016, 6:24pm UTC](https://discuss.elastic.co/t/bar-chart-date-histogram-set-x-axis-to-yyyy-mm/55391 "2016-07-13T18:24:17Z")
Hi, i have a document with date field of format: yyyy-MM-DD HH:mm:SS. i want to present the data in Bar chart, with date histogram in x axis, but i want to bucket my docs per month of year: yyyy-MM. i tried to condifu… --- ## [Winlogbeat not creating index in Elastic Search](https://discuss.elastic.co/t/winlogbeat-not-creating-index-in-elastic-search/85658)
**Author:** [@ONeil](https://discuss.elastic.co/u/ONeil)\ **Replies:** 6\ **Last updated:** [May 25, 2017, 2:15am UTC](https://discuss.elastic.co/t/winlogbeat-not-creating-index-in-elastic-search/85658 "2017-05-25T02:15:36Z")
I've configured winlogbeat already and I'm trying to get it to populate records in elasticsearch. This is the error I'm getting when I try to check if elastic search has created an index for winlogbeat. Mind you I'm new … [Previous page](https://discuss.elastic.co/top.md?page=564&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=566&per_page=50&period=all)