# Top **URL:** https://discuss.elastic.co/top.md?page=577&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 578 --- ## [5.1.1: Discover error](https://discuss.elastic.co/t/5-1-1-discover-error/70940)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 5\ **Last updated:** [January 12, 2017, 11:21am UTC](https://discuss.elastic.co/t/5-1-1-discover-error/70940 "2017-01-12T11:21:00Z")
Hi, I'm getting errors in kibana after configuring against new elasticsearch 5.1.1 cluster: Saved "field" parameter is now invalid. Please select a new field. Discover: "field" is a required parameter The only data be… --- ## [Logstash unacceptable code point error](https://discuss.elastic.co/t/logstash-unacceptable-code-point-error/201073)
**Author:** [@mrstone](https://discuss.elastic.co/u/mrstone)\ **Replies:** 0\ **Last updated:** [September 25, 2019, 2:50pm UTC](https://discuss.elastic.co/t/logstash-unacceptable-code-point-error/201073 "2019-09-25T14:50:55Z")
Hi We had a period, when number of our Logstash scripts refused to run. The error reported in the log file was as follows: Pipeline aborted due to error {:pipeline\_id=\>"xxxxx", :exception=\>#\ **Author:** [@Peter\_Boer](https://discuss.elastic.co/u/Peter_Boer)\ **Replies:** 2\ **Last updated:** [January 26, 2018, 4:17pm UTC](https://discuss.elastic.co/t/500-internal-server-error-while-using-reporting/117204 "2018-01-26T16:17:17Z") I am running a 3 node cluster with 1 kibana instance on node 1. While node 2 is master. Monitoring works and my whole clusterhealth is green When generating a report in Kibana I get this error message: Reporting: Error… --- ## [Visualizing log files in table](https://discuss.elastic.co/t/visualizing-log-files-in-table/175848)
**Author:** [@akshatsa](https://discuss.elastic.co/u/akshatsa)\ **Replies:** 7\ **Last updated:** [April 11, 2019, 4:58pm UTC](https://discuss.elastic.co/t/visualizing-log-files-in-table/175848 "2019-04-11T16:58:24Z")
Hi, I have created one table from logs in Discover which looks fine. Now In the table , we have one field "instance\_id" which is an integer. I need to create a table which will show records corresponding to only maximum … --- ## [Indices don't have primary shards while trying to take a snapshot](https://discuss.elastic.co/t/indices-dont-have-primary-shards-while-trying-to-take-a-snapshot/168812)
**Author:** [@muthualagappan](https://discuss.elastic.co/u/muthualagappan)\ **Replies:** 1\ **Last updated:** [February 18, 2019, 12:00pm UTC](https://discuss.elastic.co/t/indices-dont-have-primary-shards-while-trying-to-take-a-snapshot/168812 "2019-02-18T12:00:45Z")
Hi Team, We have a old elasticsearch cluster running on 1.4.5. We wanted to take a snapshot of the data and delete the cluster. But we have some issues. While taking the snapshot, we get the status as FAILED. "state" … --- ## [Elasticsearch Not\_analyzed and analyzed](https://discuss.elastic.co/t/elasticsearch-not-analyzed-and-analyzed/40465)
**Author:** [@userguy](https://discuss.elastic.co/u/userguy)\ **Replies:** 5\ **Last updated:** [January 30, 2016, 8:35am UTC](https://discuss.elastic.co/t/elasticsearch-not-analyzed-and-analyzed/40465 "2016-01-30T08:35:57Z")
Hello For certain requirement i have made all the index not\_analyzed { "template": "\*", "mappings": { "default": { "dynamic\_templates": \[ { "my\_template": { "… --- ## [Keep getting Socket hang up](https://discuss.elastic.co/t/keep-getting-socket-hang-up/296245)
**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 7:09pm UTC](https://discuss.elastic.co/t/keep-getting-socket-hang-up/296245 "2022-02-22T19:09:56Z")
I keep getting socket hang up. I have all hosts accessible from each other.Telnet works. Still end up with socket hang up and econnreset {"type":"log","@timestamp":"2022-02-04T01:40:36Z","tags":\["error","elasticsearch"… --- ## [Thread\_pools increase value](https://discuss.elastic.co/t/thread-pools-increase-value/80295)
**Author:** [@cfifua](https://discuss.elastic.co/u/cfifua)\ **Replies:** 3\ **Last updated:** [March 28, 2017, 2:56pm UTC](https://discuss.elastic.co/t/thread-pools-increase-value/80295 "2017-03-28T14:56:24Z")
Hello! I am getting an errors: Caused by: org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution of org.elasticsearch.transport.TcpTransport$RequestHandler@670e2606 on EsThreadPoolExe… --- ## [One of my nginx access log report "\_jsonparsefailure" after add to elk?](https://discuss.elastic.co/t/one-of-my-nginx-access-log-report--jsonparsefailure-after-add-to-elk/94196)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 6\ **Last updated:** [July 26, 2017, 9:00am UTC](https://discuss.elastic.co/t/one-of-my-nginx-access-log-report--jsonparsefailure-after-add-to-elk/94196 "2017-07-26T09:00:46Z")
Here is one piece of my nginx access log: {"@timestamp":"2017-07-22T17:14:23+08:00","host":"117.119.33.237","clientip":"182.246.61.241","remote\_user":"-","request":"GET /s?slot=-1933190001&cb=jsonpCallback\_37×ta… --- ## [How to get all matches for a grok pattern in a multiline message](https://discuss.elastic.co/t/how-to-get-all-matches-for-a-grok-pattern-in-a-multiline-message/181)
**Author:** [@markus](https://discuss.elastic.co/u/markus)\ **Replies:** 4\ **Last updated:** [May 29, 2015, 9:13am UTC](https://discuss.elastic.co/t/how-to-get-all-matches-for-a-grok-pattern-in-a-multiline-message/181 "2015-05-29T09:13:47Z")
Hi, I am having a multiline log format that consists of an XML document with a very deep message structure. All elements in the data structure can have a child element called Message containing a value attribute like so: … --- ## [Error: Could not find or load main class Warning:](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-warning/212358)
**Author:** [@Suniel](https://discuss.elastic.co/u/Suniel)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 8:54am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-warning/212358 "2019-12-27T08:54:40Z")
Whenever I am trying to start elasticserach from windows command prompt. I am getting following error. Error: Could not find or load main class Warning: I installed elasticsearch from .MSI installation file. --- ## [Winlogbeat 5.0 mapper\_parsing\_exception from Elasticsearch](https://discuss.elastic.co/t/winlogbeat-5-0-mapper-parsing-exception-from-elasticsearch/57223)
**Author:** [@rhyse](https://discuss.elastic.co/u/rhyse)\ **Replies:** 7\ **Last updated:** [August 4, 2016, 3:54pm UTC](https://discuss.elastic.co/t/winlogbeat-5-0-mapper-parsing-exception-from-elasticsearch/57223 "2016-08-04T15:54:46Z")
Hi I am using Winlogbeat 5.0.0-alpha4 and am having trouble reading in the following event log Log Name: Application Source: Group Policy Local Users and Groups Date: 04/08/2016 14:08:22 Event ID… --- ## [Graylog logs directed to Elastic SIEM](https://discuss.elastic.co/t/graylog-logs-directed-to-elastic-siem/234750)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 5\ **Last updated:** [June 1, 2020, 12:32pm UTC](https://discuss.elastic.co/t/graylog-logs-directed-to-elastic-siem/234750 "2020-06-01T12:32:14Z")
Hi people, I have a Graylog server fulfilled of a lot of network and host logs. On the other hand, I have a new Elastic SIEM 7.7 implementation and some servers with different beats that point to it. But I have to dire… --- ## [Can't index from logstash to Elasticsearch using ILM](https://discuss.elastic.co/t/cant-index-from-logstash-to-elasticsearch-using-ilm/215536)
**Author:** [@anirudhra10](https://discuss.elastic.co/u/anirudhra10)\ **Replies:** 5\ **Last updated:** [February 5, 2020, 6:55pm UTC](https://discuss.elastic.co/t/cant-index-from-logstash-to-elasticsearch-using-ilm/215536 "2020-02-05T18:55:08Z")
Hi Logstash support team, I am trying to configure the output section of logstash to send logs to the right index based on the type of log by using ILM. Here is the relevant logstash conf section: if \[type\] == "usprod… --- ## [Retrying failed action with response code](https://discuss.elastic.co/t/retrying-failed-action-with-response-code/137551)
**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\ **Replies:** 3\ **Last updated:** [June 27, 2018, 9:19am UTC](https://discuss.elastic.co/t/retrying-failed-action-with-response-code/137551 "2018-06-27T09:19:43Z")
logstash error log:retrying failed action with response code --- ## [Set Logdate as @timestamp using logstash](https://discuss.elastic.co/t/set-logdate-as-timestamp-using-logstash/175204)
**Author:** [@Vaibhav\_Thapliyal](https://discuss.elastic.co/u/Vaibhav_Thapliyal)\ **Replies:** 6\ **Last updated:** [April 3, 2019, 7:32pm UTC](https://discuss.elastic.co/t/set-logdate-as-timestamp-using-logstash/175204 "2019-04-03T19:32:12Z")
Hi Everyone, I am trying to parse a nginx log file and want to set logdate as @timestamp. I am using the date filter plugin for this. Here's a sample date from my log file: 03/Apr/2019:16:33:03 +0530 The date plugin … --- ## [Nested object in sort](https://discuss.elastic.co/t/nested-object-in-sort/121003)
**Author:** [@vicariouskp](https://discuss.elastic.co/u/vicariouskp)\ **Replies:** 0\ **Last updated:** [February 22, 2018, 7:49am UTC](https://discuss.elastic.co/t/nested-object-in-sort/121003 "2018-02-22T07:49:12Z")
Hello, I'm trying to write in c# using Nest 6.0 version code provided here: https://www.elastic.co/guide/en/elasticsearch/reference/current/search-request-sort.html POST /\_search { "query" : { "term" : { "produ… --- ## [Troubleshooting with machine learning](https://discuss.elastic.co/t/troubleshooting-with-machine-learning/94910)
**Author:** [@echai0](https://discuss.elastic.co/u/echai0)\ **Replies:** 8\ **Last updated:** [August 2, 2017, 6:38am UTC](https://discuss.elastic.co/t/troubleshooting-with-machine-learning/94910 "2017-08-02T06:38:36Z")
Hello, I'm a newbie who is learning machine learning of x-pack. I have a trouble with machine learning as I wrote!\[1|690x385\] My goal is creating a single metric job. (Machine learning-\> create a new job -\> create a s… --- ## [Help with initial Logstash configuration](https://discuss.elastic.co/t/help-with-initial-logstash-configuration/25549)
**Author:** [@garresmi](https://discuss.elastic.co/u/garresmi)\ **Replies:** 8\ **Last updated:** [July 17, 2015, 7:26pm UTC](https://discuss.elastic.co/t/help-with-initial-logstash-configuration/25549 "2015-07-17T19:26:07Z")
Hi everyone, I'm trying to spin up an ELK stack on a CentOS 7 server. I got everything installed correctly (as far as I know). However, when I go to my Kibana Dashboard, It won't let me declare an index pattern. I follow… --- ## [Change default timepicker to today](https://discuss.elastic.co/t/change-default-timepicker-to-today/108428)
**Author:** [@maddie0726](https://discuss.elastic.co/u/maddie0726)\ **Replies:** 7\ **Last updated:** [November 20, 2017, 5:32pm UTC](https://discuss.elastic.co/t/change-default-timepicker-to-today/108428 "2017-11-20T17:32:38Z")
Hi all, I have Kibana 5.6.2 up and running, I just need to set the default timepicker to today and the auto-refresh interval to 5 seconds. I can't find anything that has the correct syntax and I feel like I've tried eve… --- ## [Swap usage on Elastic Search Node](https://discuss.elastic.co/t/swap-usage-on-elastic-search-node/53984)
**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\ **Replies:** 7\ **Last updated:** [June 29, 2016, 8:08am UTC](https://discuss.elastic.co/t/swap-usage-on-elastic-search-node/53984 "2016-06-29T08:08:20Z")
ES Version : 1.7 Java Version : 1.7.0\_45-b18 Os : Linux 2.6.18-406.el5 #1 SMP Wed Jun 3 05:51:45 EDT 2015 x86\_64 x86\_64 x86\_64 GNU/Linux ES Cluster : 5 Nodes 300 millions documents per day 3 billion documents in clust… --- ## [How to install logstash 5 in Centos 6 X64\_86](https://discuss.elastic.co/t/how-to-install-logstash-5-in-centos-6-x64-86/64225)
**Author:** [@xiehaitang](https://discuss.elastic.co/u/xiehaitang)\ **Replies:** 3\ **Last updated:** [October 28, 2016, 2:27am UTC](https://discuss.elastic.co/t/how-to-install-logstash-5-in-centos-6-x64-86/64225 "2016-10-28T02:27:42Z")
How to install logstash 5 in Centos 6 X64\_86 --- ## [Elasticsearch in a federated mode](https://discuss.elastic.co/t/elasticsearch-in-a-federated-mode/6847)
**Author:** [@ajan](https://discuss.elastic.co/u/ajan)\ **Replies:** 3\ **Last updated:** [March 2, 2012, 5:17pm UTC](https://discuss.elastic.co/t/elasticsearch-in-a-federated-mode/6847 "2012-03-02T17:17:41Z")
I have a requirement to analyze on how elasticsearch be used in federation. Let me try to explain; Lets say, as a part of a big enterprise, I have a ES cluster - ES001 with 3 nodes, using the default configuratio… --- ## [High Memory usage even after setting heap memory size](https://discuss.elastic.co/t/high-memory-usage-even-after-setting-heap-memory-size/94023)
**Author:** [@mayur.buragohain](https://discuss.elastic.co/u/mayur.buragohain)\ **Replies:** 4\ **Last updated:** [July 21, 2017, 6:31am UTC](https://discuss.elastic.co/t/high-memory-usage-even-after-setting-heap-memory-size/94023 "2017-07-21T06:31:01Z")
I have two 2 clusters with 2 nodes each having 4 cores and 16GB RAM. Index A( cluster 1) is created with ES 2.4.4 and has about 600GB data across 3 shards. Index B( cluster 2) is created with ES 5.5.0 and has 6 shards. … --- ## [Visualize: Unknown error](https://discuss.elastic.co/t/visualize-unknown-error/55167)
**Author:** [@ESchouten](https://discuss.elastic.co/u/ESchouten)\ **Replies:** 6\ **Last updated:** [April 3, 2017, 8:15am UTC](https://discuss.elastic.co/t/visualize-unknown-error/55167 "2017-04-03T08:15:50Z")
I am encountering the following error when accessing Kibana via safari frequently: When visiting the website via Chrome on Windows, however, I haven't been able to reproduce this. Any idea what is causing this proble… --- ## [Verification\_exception Error during Rule Execution](https://discuss.elastic.co/t/verification-exception-error-during-rule-execution/275781)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 6:02pm UTC](https://discuss.elastic.co/t/verification-exception-error-during-rule-execution/275781 "2021-07-16T18:02:43Z")
Hi there, I am facing a particular error regarding many pre-built Elastic rules. Once they were activated, many of them start failing when executing - with the error: An error occurred during rule execution: message: "v… --- ## [No indices match pattern "winlogbeat-\*"](https://discuss.elastic.co/t/no-indices-match-pattern-winlogbeat/205001)
**Author:** [@Rmodi](https://discuss.elastic.co/u/Rmodi)\ **Replies:** 3\ **Last updated:** [October 24, 2019, 9:48pm UTC](https://discuss.elastic.co/t/no-indices-match-pattern-winlogbeat/205001 "2019-10-24T21:48:12Z")
Hi, I have configured elasticsearch, logstash and kibana in Server Cent OS which IP is (10.200.14.36) and both working perfectly. Also, with filebeat in another Client Cent OS machine, I can able to get index and logs … --- ## [JVM Memory Always at 50% and Above](https://discuss.elastic.co/t/jvm-memory-always-at-50-and-above/121365)
**Author:** [@rajivchodisetti](https://discuss.elastic.co/u/rajivchodisetti)\ **Replies:** 7\ **Last updated:** [February 27, 2018, 5:31pm UTC](https://discuss.elastic.co/t/jvm-memory-always-at-50-and-above/121365 "2018-02-27T17:31:37Z")
\[35%20AM\] Hi, We have a 3 master and 6 Data Node ES setup, where data node is of config 30 GB RAM and 8 Core and where 16GB RAM is allocated for heap and rest for file system cache (i.e Lucene index caching) We use ES… --- ## [\_cat/indices docs.count does not match indice \_count - why?](https://discuss.elastic.co/t/-cat-indices-docs-count-does-not-match-indice--count-why/49966)
**Author:** [@vandamo](https://discuss.elastic.co/u/vandamo)\ **Replies:** 1\ **Last updated:** [June 1, 2016, 7:33am UTC](https://discuss.elastic.co/t/-cat-indices-docs-count-does-not-match-indice--count-why/49966 "2016-06-01T07:33:27Z")
Hi, I'm currently migrating our indices from Elasticsearch 1.x to ElasticSearch 2.3.1. I had to do it due to many of our even fields containing dots, so being exposed to the related breaking change, so scripted the migra… --- ## [Elasticsearch Unreachable!](https://discuss.elastic.co/t/elasticsearch-unreachable/223168)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 6\ **Last updated:** [March 12, 2020, 2:06pm UTC](https://discuss.elastic.co/t/elasticsearch-unreachable/223168 "2020-03-12T14:06:58Z")
Hi, i am getting below error, after enable firewall on the logstash server. 2020-03-11T15:46:14,189\]\[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:u… --- ## [Filebeat keeps open files forever](https://discuss.elastic.co/t/filebeat-keeps-open-files-forever/65548)
**Author:** [@Srinivas\_Chamarthi](https://discuss.elastic.co/u/Srinivas_Chamarthi)\ **Replies:** 8\ **Last updated:** [December 5, 2016, 3:39pm UTC](https://discuss.elastic.co/t/filebeat-keeps-open-files-forever/65548 "2016-12-05T15:39:30Z")
Hi, I have a similar issue like this and I have upgraded to latest version 5.0 to see if the issue goes away but I still see the same issue. below is the configuration and few debug lines where it mentions the file … --- ## [Change name of fields or Alias](https://discuss.elastic.co/t/change-name-of-fields-or-alias/91959)
**Author:** [@xavi23](https://discuss.elastic.co/u/xavi23)\ **Replies:** 1\ **Last updated:** [July 5, 2017, 7:41pm UTC](https://discuss.elastic.co/t/change-name-of-fields-or-alias/91959 "2017-07-05T19:41:56Z")
Hello, I have on eproblem when I create a dashboard with some visualizers. I have a complex name fields in my index based of standard FHIR (standard of how the information must be structured). field name example: i… --- ## [Using ? to display a ratio of two queries or other advanced calculations](https://discuss.elastic.co/t/using-to-display-a-ratio-of-two-queries-or-other-advanced-calculations/135163)
**Author:** [@topel](https://discuss.elastic.co/u/topel)\ **Replies:** 4\ **Last updated:** [June 14, 2018, 2:18pm UTC](https://discuss.elastic.co/t/using-to-display-a-ratio-of-two-queries-or-other-advanced-calculations/135163 "2018-06-14T14:18:12Z")
I have been struggling to find a visualization solution that fits my company's needs. I do not only need to visualize time series data but also need to be able to do calculations "vertically" across all the data at one p… --- ## [Sort by \_timestamp not working](https://discuss.elastic.co/t/sort-by--timestamp-not-working/10380)
**Author:** [@vinh](https://discuss.elastic.co/u/vinh)\ **Replies:** 4\ **Last updated:** [January 18, 2013, 5:56pm UTC](https://discuss.elastic.co/t/sort-by--timestamp-not-working/10380 "2013-01-18T17:56:34Z")
Hi, I have a simple query and am trying to sort by "\_timestamp", but it doesn't appear to work. Neither does sorting by the "\_id" field. But, sorting works for other fields whose names don't begin with an underscore. … --- ## [Role has manage\_index\_templates, but getting error "action \[indices:admin/mappings/get\] is unauthorized for user"](https://discuss.elastic.co/t/role-has-manage-index-templates-but-getting-error-action-indices-admin-mappings-get-is-unauthorized-for-user/118391)
**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 8:42pm UTC](https://discuss.elastic.co/t/role-has-manage-index-templates-but-getting-error-action-indices-admin-mappings-get-is-unauthorized-for-user/118391 "2018-02-12T20:42:46Z")
Hi. I'm creating a second Kibana on hosted elasticsearch (cloud.elastic.co). The second kibana role has "all" privilege on her .kibana\_2 index, and cluster privileges "monitor" and "manage\_index\_templates". Still, she ge… --- ## [Elasticsearch service getting failed when /tmp is mounted no exec](https://discuss.elastic.co/t/elasticsearch-service-getting-failed-when-tmp-is-mounted-no-exec/256104)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 3\ **Last updated:** [November 24, 2020, 6:51am UTC](https://discuss.elastic.co/t/elasticsearch-service-getting-failed-when-tmp-is-mounted-no-exec/256104 "2020-11-24T06:51:44Z")
Hi Team, elasticsearch service is getting failed when /tmp is mounted with noexec, when try to remount it with exec , service is getting started. Is below link still valid or there is parmenent solution or workaround ? … --- ## [ES 6 sparse docs and index.mapping.total\_fields.limit](https://discuss.elastic.co/t/es-6-sparse-docs-and-index-mapping-total-fields-limit/93196)
**Author:** [@felixbarny](https://discuss.elastic.co/u/felixbarny)\ **Replies:** 5\ **Last updated:** [July 25, 2017, 1:55pm UTC](https://discuss.elastic.co/t/es-6-sparse-docs-and-index-mapping-total-fields-limit/93196 "2017-07-25T13:55:12Z")
I'm currently trying to understand how to map http request parameters into Elasticsearch. Ideally, I'd have one field per query parameter parameters: foo: "bar" baz: "qux" q: "search query" This would allow m… --- ## [Problems upload xml and json files in data visualizer](https://discuss.elastic.co/t/problems-upload-xml-and-json-files-in-data-visualizer/202308)
**Author:** [@alvarolopez](https://discuss.elastic.co/u/alvarolopez)\ **Replies:** 6\ **Last updated:** [October 9, 2019, 3:15pm UTC](https://discuss.elastic.co/t/problems-upload-xml-and-json-files-in-data-visualizer/202308 "2019-10-09T15:15:14Z")
Hi everyone. I am Alvaro, a telecomunication student who is working a litle bit with kibana in the cloud to learn more about elasticsearch. Now, I am trying to upload two diferent files (one is xml and the other is jso… --- ## [Query regarding http.max\_content\_length](https://discuss.elastic.co/t/query-regarding-http-max-content-length/185422)
**Author:** [@akhisar](https://discuss.elastic.co/u/akhisar)\ **Replies:** 5\ **Last updated:** [June 24, 2019, 3:26pm UTC](https://discuss.elastic.co/t/query-regarding-http-max-content-length/185422 "2019-06-24T15:26:11Z")
Hello Experts, I would like to know on what all nodes(client/master/data) should I enable the settings for http.max\_content\_length on elasticsearch.yml file. --- ## [Max number of ingestion threads with Ingest Node?](https://discuss.elastic.co/t/max-number-of-ingestion-threads-with-ingest-node/54380)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 5\ **Last updated:** [July 1, 2016, 8:56am UTC](https://discuss.elastic.co/t/max-number-of-ingestion-threads-with-ingest-node/54380 "2016-07-01T08:56:03Z")
First of all, I am very excited about this Ingest Node feature, as this is exactly what i need, as logstash is looking too costly just for parsing the logs sent by filebeat and push to Elasticsearch in F-E-L-K Stack. But… --- ## [Index in red, UNASSIGNED PRIMARY\_FAILED](https://discuss.elastic.co/t/index-in-red-unassigned-primary-failed/89520)
**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\ **Replies:** 2\ **Last updated:** [June 19, 2017, 11:25am UTC](https://discuss.elastic.co/t/index-in-red-unassigned-primary-failed/89520 "2017-06-19T11:25:32Z")
I am using elasticsearch 5.4.0. One of my index is in red state and I have no idea how to fix it. \_cat/shards/logstash-ngccapplogs-2017.06.08-1?v&h=index,shard,prirep,state,unassigned.reason index … --- ## [How many shards and indexes per node can I have?](https://discuss.elastic.co/t/how-many-shards-and-indexes-per-node-can-i-have/35573)
**Author:** [@gun146](https://discuss.elastic.co/u/gun146)\ **Replies:** 1\ **Last updated:** [November 27, 2015, 5:32am UTC](https://discuss.elastic.co/t/how-many-shards-and-indexes-per-node-can-i-have/35573 "2015-11-27T05:32:08Z")
I have about 70 million docs in index on a single node. Does it make any sense to split index on 24 shards if server cpu has 24 cores? I'm not sure if queries are executed in parallel by many shards on the same node. A… --- ## [RGB Color search](https://discuss.elastic.co/t/rgb-color-search/13987)
**Author:** [@dantuff](https://discuss.elastic.co/u/dantuff)\ **Replies:** 7\ **Last updated:** [October 18, 2013, 1:18pm UTC](https://discuss.elastic.co/t/rgb-color-search/13987 "2013-10-18T13:18:23Z")
I have RGB color values stored in my index. color: \[ { red: 50 green: 73 blue: 93 }\] I need to be able to find documents in the index that are the the closest color to the RGB values in a request… --- ## [Kibana4.1.1 Matrix report](https://discuss.elastic.co/t/kibana4-1-1-matrix-report/28549)
**Author:** [@sureshadapa](https://discuss.elastic.co/u/sureshadapa)\ **Replies:** 8\ **Last updated:** [September 29, 2015, 5:01am UTC](https://discuss.elastic.co/t/kibana4-1-1-matrix-report/28549 "2015-09-29T05:01:04Z")
Hello, I am having below data in DB insert into FOCUSTRPF(id,FOCUSTIER) VALUES(1,'4-Low'); insert into FOCUSTRPF(id,FOCUSTIER) VALUES(2,'4-Low'); insert into FOCUSTRPF(id,FOCUSTIER) VALUES(3,'5-Very Low'); insert into F… --- ## [Add Field With Logsstah If It Does Not Exist](https://discuss.elastic.co/t/add-field-with-logsstah-if-it-does-not-exist/168285)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 1\ **Last updated:** [February 13, 2019, 8:44pm UTC](https://discuss.elastic.co/t/add-field-with-logsstah-if-it-does-not-exist/168285 "2019-02-13T20:44:30Z")
We send log data to Logstash through Winlogbeat, and we add a field to the data. fields: campus: mu We want the Logstash filter to add the field “campus” and set the value to null or unknown if the field does not exis… --- ## [ELK integration with ITSM](https://discuss.elastic.co/t/elk-integration-with-itsm/128876)
**Author:** [@Gayu\_Ravi](https://discuss.elastic.co/u/Gayu_Ravi)\ **Replies:** 5\ **Last updated:** [May 2, 2018, 9:39am UTC](https://discuss.elastic.co/t/elk-integration-with-itsm/128876 "2018-05-02T09:39:18Z")
Hi I want to integrate my ITSM tool like JIRA,BMC remedy,ServiceNow with ELK to load my ticket info. In Splunk few connectors are there for this integration. Does any similar connectors available in ELK? Anyother idea t… --- ## [Fresh logstash 5.2 install gives log4j warnings and no logging from plugins](https://discuss.elastic.co/t/fresh-logstash-5-2-install-gives-log4j-warnings-and-no-logging-from-plugins/75530)
**Author:** [@Carlos\_Alexandre](https://discuss.elastic.co/u/Carlos_Alexandre)\ **Replies:** 5\ **Last updated:** [February 22, 2017, 3:04pm UTC](https://discuss.elastic.co/t/fresh-logstash-5-2-install-gives-log4j-warnings-and-no-logging-from-plugins/75530 "2017-02-22T15:04:44Z")
I just downloaded the new logstash version (5.2.1), and after starting it I noticed a warning message saying that log4j needs to be initialized properly. I also noticed that plugins like kafka, beats, etc, were not emitt… --- ## [Newbie: logstash not talking to elasticsearch](https://discuss.elastic.co/t/newbie-logstash-not-talking-to-elasticsearch/26291)
**Author:** [@creepwood](https://discuss.elastic.co/u/creepwood)\ **Replies:** 5\ **Last updated:** [July 26, 2015, 4:12pm UTC](https://discuss.elastic.co/t/newbie-logstash-not-talking-to-elasticsearch/26291 "2015-07-26T16:12:12Z")
I'm been struggling for three days more or less to get pfsense logs into elasticsearch. I'm running debian jessie on a VM. pfsense is running real. I did the easy config in pfsense, setting up IP local IP and port 514. I… --- ## [If field contains uppercase search](https://discuss.elastic.co/t/if-field-contains-uppercase-search/139638)
**Author:** [@Jeff\_Bursik](https://discuss.elastic.co/u/Jeff_Bursik)\ **Replies:** 4\ **Last updated:** [July 13, 2018, 8:43am UTC](https://discuss.elastic.co/t/if-field-contains-uppercase-search/139638 "2018-07-13T08:43:25Z")
Is there a way to determine if the field's value contains any upper case? For example, I have 2 documents with field name. Doc1 = { name: jeff }. Doc2 = { name = Jeff}. I only want Doc2 returned since the "J" is capi… --- ## [Removal of official Freenode IRC channels](https://discuss.elastic.co/t/removal-of-official-freenode-irc-channels/276603)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [June 22, 2021, 4:44am UTC](https://discuss.elastic.co/t/removal-of-official-freenode-irc-channels/276603 "2021-06-22T04:44:26Z")
Folks, If you've been around the Elastic Stack for a few years, you likely would have come across our IRC channels that used to exist on Freenode. Unfortunately, the Freenode admins recently deleted all auth and channel… [Previous page](https://discuss.elastic.co/top.md?page=576&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=578&per_page=50&period=all)