# Top **URL:** https://discuss.elastic.co/top.md?page=584&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 585 --- ## [Fluentd performance is degraded](https://discuss.elastic.co/t/fluentd-performance-is-degraded/280060)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 3\ **Last updated:** [July 31, 2021, 6:05am UTC](https://discuss.elastic.co/t/fluentd-performance-is-degraded/280060 "2021-07-31T06:05:31Z")
In a deployment with elasticsearch 8.x, fluentd pod performance has been degraded and following log is printed whenever a new message is received and it is about to be delivered in elastic. warning: 299 Elasticsearch-7.… --- ## [Mongodb jdbc using in logstash](https://discuss.elastic.co/t/mongodb-jdbc-using-in-logstash/291311)
**Author:** [@peledev](https://discuss.elastic.co/u/peledev)\ **Replies:** 4\ **Last updated:** [December 15, 2021, 8:03am UTC](https://discuss.elastic.co/t/mongodb-jdbc-using-in-logstash/291311 "2021-12-15T08:03:58Z")
trying to write log from mongodb using jdbc see configuration file: input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/logstash-core/lib/jars/mongodb-driver-core-3.4.2.jar" jdbc\_driver\_class =\>… --- ## [Inconsistent Multiline Matches](https://discuss.elastic.co/t/inconsistent-multiline-matches/71369)
**Author:** [@stekin](https://discuss.elastic.co/u/stekin)\ **Replies:** 2\ **Last updated:** [January 18, 2017, 1:33pm UTC](https://discuss.elastic.co/t/inconsistent-multiline-matches/71369 "2017-01-18T13:33:43Z")
After days of trial and error I've found inconsistent RegEx pattern matches with filebeat that seem to work when tested elsewhere: golang and RegEx101 Filebeat configuration: filebeat: prospectors: - in… --- ## [Is elasticsearch, logstash impacted by opendJDK Vulnerability](https://discuss.elastic.co/t/is-elasticsearch-logstash-impacted-by-opendjdk-vulnerability/304423)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 11:30pm UTC](https://discuss.elastic.co/t/is-elasticsearch-logstash-impacted-by-opendjdk-vulnerability/304423 "2022-05-11T23:30:06Z")
is Elasticsearch and logstash got impacted by opendJDK vulnerability? CVE's The versions impacted are: OpenJDK 7 \<= 7u331 OpenJDK 8 \<= 8u322 OpenJDK 11.0.0 \<= 11.0.14 OpenJDK 13.0.0 \<= 13.0.10 OpenJDK 15.0.0 \<= … --- ## [ILM keeping rolling over the same old indexes daily](https://discuss.elastic.co/t/ilm-keeping-rolling-over-the-same-old-indexes-daily/252097)
**Author:** [@dobesv](https://discuss.elastic.co/u/dobesv)\ **Replies:** 7\ **Last updated:** [October 14, 2020, 8:27pm UTC](https://discuss.elastic.co/t/ilm-keeping-rolling-over-the-same-old-indexes-daily/252097 "2020-10-14T20:27:52Z")
Hi, I have fluentd pushing logs into elasticsearch with index names based on the date, e.g. logs.kubelet.YYYY.MM.DD and using index lifecycle management (ILM). I have set the ILM policy to roll over after 50GB or daily… --- ## [Run aggregation on collapsed result](https://discuss.elastic.co/t/run-aggregation-on-collapsed-result/308171)
**Author:** [@Nowrin\_Hossain](https://discuss.elastic.co/u/Nowrin_Hossain)\ **Replies:** 8\ **Last updated:** [July 4, 2022, 8:08am UTC](https://discuss.elastic.co/t/run-aggregation-on-collapsed-result/308171 "2022-07-04T08:08:42Z")
Hello, I have an issue that, first I need to collapse data by a field after sorting by another field then I need to perform some complex aggregation on that output. How to do that ? can anyone help ? --- ## [Id is too long, must be no longer than 512](https://discuss.elastic.co/t/id-is-too-long-must-be-no-longer-than-512/80643)
**Author:** [@idanhagai](https://discuss.elastic.co/u/idanhagai)\ **Replies:** 2\ **Last updated:** [March 30, 2017, 11:41am UTC](https://discuss.elastic.co/t/id-is-too-long-must-be-no-longer-than-512/80643 "2017-03-30T11:41:43Z")
"Validation Failed: 1: id is too long, must be no longer than 512 bytes but was: 635" Is there a way to bypass this limitation ? (I'm using elasticsearch 5.2) --- ## [Add static line for Horizontal bar chart](https://discuss.elastic.co/t/add-static-line-for-horizontal-bar-chart/262338)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 3\ **Last updated:** [February 2, 2021, 10:18am UTC](https://discuss.elastic.co/t/add-static-line-for-horizontal-bar-chart/262338 "2021-02-02T10:18:03Z")
Kibana version 6.7 We are trying to create a dashboard with a horizontal bar based on a field named duration of type number. We want to add a static line to show the Threshold of sorts for the entire series. We followe… --- ## [Migration of data from Elasticsearch to Databases (MongoDB, MySQL)](https://discuss.elastic.co/t/migration-of-data-from-elasticsearch-to-databases-mongodb-mysql/361669)
**Author:** [@Andy\_Cong](https://discuss.elastic.co/u/Andy_Cong)\ **Replies:** 7\ **Last updated:** [June 20, 2024, 4:18pm UTC](https://discuss.elastic.co/t/migration-of-data-from-elasticsearch-to-databases-mongodb-mysql/361669 "2024-06-20T16:18:54Z")
Brief Principle: The real-time incremental data is written to both the old and new storage engines (ES and DB). Then data from the old storage engine (ES) is migrated to the new storage engine (DB). After that finish, da… --- ## [Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/356664)
**Author:** [@Chadi\_SHWADA](https://discuss.elastic.co/u/Chadi_SHWADA)\ **Replies:** 1\ **Last updated:** [April 3, 2024, 1:02pm UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/356664 "2024-04-03T13:02:06Z")
I have two servers, one on which I install elasticsearch and kibana and the other on which json files are stored. I would like to send these files via filebeat to my other server on kibana to view the data. I install… --- ## [\\n символы заменить на пробел или табуляцию](https://discuss.elastic.co/t/n/106385)
**Author:** [@p0f1g1st](https://discuss.elastic.co/u/p0f1g1st)\ **Replies:** 6\ **Last updated:** [November 7, 2017, 7:18pm UTC](https://discuss.elastic.co/t/n/106385 "2017-11-07T19:18:08Z")
В logstash входят строки из файла, и при конкатенации (multiline) они склеиваются в 4 , но при этом разделение между ними - это нечто вроде СЛОВО\_ИЗ\_ПЕРВОЙ\_СТРОКИ\\nСЛОВО\_ИЗ\_ВТОРОЙ\_СТРОКИ. Как их разделить я не понимаю. В… --- ## [Marvel agent and index.mapper.dynamic: false](https://discuss.elastic.co/t/marvel-agent-and-index-mapper-dynamic-false/50969)
**Author:** [@f0x](https://discuss.elastic.co/u/f0x)\ **Replies:** 5\ **Last updated:** [September 5, 2016, 4:55pm UTC](https://discuss.elastic.co/t/marvel-agent-and-index-mapper-dynamic-false/50969 "2016-09-05T16:55:39Z")
Hello, I'm trying to upgrade to Marvel 2.3.3 with Elasticsearch 2.3.3 but marvel-agent seems not able to create its indices. These are the errors logs: \[2016-05-25 17:16:01,960\]\[ERROR\]\[marvel.agent \] \[APPS\]… --- ## [\[Elasticsearch 8.3\] Problem with the SSL encryption in the master node](https://discuss.elastic.co/t/elasticsearch-8-3-problem-with-the-ssl-encryption-in-the-master-node/311499)
**Author:** [@Medel](https://discuss.elastic.co/u/Medel)\ **Replies:** 3\ **Last updated:** [August 8, 2022, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-8-3-problem-with-the-ssl-encryption-in-the-master-node/311499 "2022-08-08T11:37:47Z")
Hello , I'm trying to configure a cluster of 3 nodes with SSL enabled, I first created the master node, then I managed to add the other 2 nodes with the enrollment token. The issue is when I try to query the master nod… --- ## [No cluster health with 2 nodes](https://discuss.elastic.co/t/no-cluster-health-with-2-nodes/66249)
**Author:** [@trenzalore](https://discuss.elastic.co/u/trenzalore)\ **Replies:** 3\ **Last updated:** [November 16, 2016, 2:28pm UTC](https://discuss.elastic.co/t/no-cluster-health-with-2-nodes/66249 "2016-11-16T14:28:39Z")
Hi ! I created a script to automate the installation of elasticsearch 5. It works fine. But now I have a problem with elasticsearch: I can't have the cluster health and I have several errors. first the elasticsearch… --- ## [:message=\>"Failed to send event to Redis"](https://discuss.elastic.co/t/message-failed-to-send-event-to-redis/41850)
**Author:** [@Shrawan\_Bhagwat](https://discuss.elastic.co/u/Shrawan_Bhagwat)\ **Replies:** 3\ **Last updated:** [March 4, 2016, 5:23pm UTC](https://discuss.elastic.co/t/message-failed-to-send-event-to-redis/41850 "2016-03-04T17:23:21Z")
Hi All, We are getting this error message in logstash logs: {:timestamp=\>"2016-02-16T13:31:05.697000+0530", :message=\>"Failed to send event to Redis", :event=\>#@accessors=#@store={"message"=\>"dhdieiidjpie", "@version"… --- ## [How to introduce delay in Logstash?](https://discuss.elastic.co/t/how-to-introduce-delay-in-logstash/126813)
**Author:** [@Arko](https://discuss.elastic.co/u/Arko)\ **Replies:** 4\ **Last updated:** [April 5, 2018, 6:45am UTC](https://discuss.elastic.co/t/how-to-introduce-delay-in-logstash/126813 "2018-04-05T06:45:37Z")
I have quite tipical architecture: Filebit -\> Logstash -\> Logstash -\> Elasticsearch First and second logstash makes some sql queries to database during its work (via plugin). But the problem is that I need introduce 1… --- ## [Elasticsearch Query String Query | Escaping double quotes](https://discuss.elastic.co/t/elasticsearch-query-string-query-escaping-double-quotes/173917)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 2\ **Last updated:** [March 27, 2019, 4:48pm UTC](https://discuss.elastic.co/t/elasticsearch-query-string-query-escaping-double-quotes/173917 "2019-03-27T16:48:48Z")
Hi, I am finding difficulties in searching over characters like double quotes using query string query. I have indexed a single document with the default standard analyzer. { "key" : " \\" " } My search query is : {… --- ## [Failed to parse \[date\]](https://discuss.elastic.co/t/failed-to-parse-date/130563)
**Author:** [@lcguy](https://discuss.elastic.co/u/lcguy)\ **Replies:** 5\ **Last updated:** [May 5, 2018, 10:26am UTC](https://discuss.elastic.co/t/failed-to-parse-date/130563 "2018-05-05T10:26:53Z")
I hope someone can guide me as for date parsing. Logstash config has below date format. date { match =\> \[ "@date", "yyyy-MM-dd HH:mm:ss Z" \] } But, I am getting below error... "status"=\>400, "error"=\>{"type"=\>"mapp… --- ## [Struggling here, grateful for any help](https://discuss.elastic.co/t/struggling-here-grateful-for-any-help/100123)
**Author:** [@lutonmad](https://discuss.elastic.co/u/lutonmad)\ **Replies:** 5\ **Last updated:** [September 14, 2017, 9:03pm UTC](https://discuss.elastic.co/t/struggling-here-grateful-for-any-help/100123 "2017-09-14T21:03:26Z")
Hi there, So I'm probably confusing myself here but I am trying to import logs from our Cloudflare instance into Elasticsearch, via a file that has many json entries and looks like the following (this is just a single l… --- ## [AggregationBuilders throws an error JsonGenerationException](https://discuss.elastic.co/t/aggregationbuilders-throws-an-error-jsongenerationexception/80090)
**Author:** [@aravindtga](https://discuss.elastic.co/u/aravindtga)\ **Replies:** 6\ **Last updated:** [March 28, 2017, 11:58am UTC](https://discuss.elastic.co/t/aggregationbuilders-throws-an-error-jsongenerationexception/80090 "2017-03-28T11:58:12Z")
I am using elasticsearch API (elasticsearch5.2.1.jar)to do the aggregation query as follows, StatsAggregationBuilder statAggBuild = AggregationBuilders.stats("agg").field("ipAddress"); This returns the follows except… --- ## [Logstash/ES date format issue](https://discuss.elastic.co/t/logstash-es-date-format-issue/33933)
**Author:** [@xtingray](https://discuss.elastic.co/u/xtingray)\ **Replies:** 6\ **Last updated:** [June 21, 2016, 8:24am UTC](https://discuss.elastic.co/t/logstash-es-date-format-issue/33933 "2016-06-21T08:24:43Z")
I have been playing with logstash filters, receiving log records with this format: 2015-11-05 17:37:01 This is a log message Using this filter: grok { match =\> { "message" =\> "%{DATE:date} %{TIME:time} %{GREE… --- ## [Getting Timeout after sometime](https://discuss.elastic.co/t/getting-timeout-after-sometime/347494)
**Author:** [@deepak\_Bahuguna](https://discuss.elastic.co/u/deepak_Bahuguna)\ **Replies:** 4\ **Last updated:** [November 23, 2023, 10:55am UTC](https://discuss.elastic.co/t/getting-timeout-after-sometime/347494 "2023-11-23T10:55:53Z")
HI Guys, I am new to Elastic, Kibana. I have downloaded the Elastic and Kibana then I run both and it worked fine. What is problem is after installing I have kept it opened in evening and when I see it morning it has sh… --- ## [Will Grok fail if the grok field does not exist?](https://discuss.elastic.co/t/will-grok-fail-if-the-grok-field-does-not-exist/58300)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 1\ **Last updated:** [August 18, 2016, 5:35pm UTC](https://discuss.elastic.co/t/will-grok-fail-if-the-grok-field-does-not-exist/58300 "2016-08-18T17:35:59Z")
Given that I have the following grok filter { grok { match =\> { "my\_abc" =\> "Duration: %{NUMBER:duration}" } } } Will grok fail if the my\_abc field does not exist in the message? Would it be necessary to check for… --- ## [Painless script to get date difference](https://discuss.elastic.co/t/painless-script-to-get-date-difference/223461)
**Author:** [@Purushoth\_Kumar](https://discuss.elastic.co/u/Purushoth_Kumar)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 8:51am UTC](https://discuss.elastic.co/t/painless-script-to-get-date-difference/223461 "2020-03-13T08:51:04Z")
Hi Team, I want to calculate time difference between two times (incident created time & incident updated time fields). I'm trying to create a scripted field for this...but getting error while loading. My scripts looks… --- ## [How to get index in kibana](https://discuss.elastic.co/t/how-to-get-index-in-kibana/95826)
**Author:** [@vivekpandey564](https://discuss.elastic.co/u/vivekpandey564)\ **Replies:** 1\ **Last updated:** [August 8, 2017, 1:41pm UTC](https://discuss.elastic.co/t/how-to-get-index-in-kibana/95826 "2017-08-08T13:41:37Z")
Hi Below is my logstash.conf file input { file { add\_field =\> \[ "host", "my-dev-host" \] path =\> "D:\\JHipster\_Demo\\logFile.2017-08-04.log" codec =\> "plain" } } filter { grok { match =\> \[ “path”, “(?logFi… --- ## [Pagination and limit max number of pages](https://discuss.elastic.co/t/pagination-and-limit-max-number-of-pages/127096)
**Author:** [@rrader](https://discuss.elastic.co/u/rrader)\ **Replies:** 3\ **Last updated:** [April 7, 2018, 8:43am UTC](https://discuss.elastic.co/t/pagination-and-limit-max-number-of-pages/127096 "2018-04-07T08:43:21Z")
We want to filter products, by search term, category, price, location, and a few more. In Elasticsearch deep paging is problematic, but if we limit to 20 items per page and max number of pages to 100, will be this ok? h… --- ## [Problem in Running kibana as non-root user in Docker](https://discuss.elastic.co/t/problem-in-running-kibana-as-non-root-user-in-docker/109933)
**Author:** [@Diksha\_Rawat](https://discuss.elastic.co/u/Diksha_Rawat)\ **Replies:** 3\ **Last updated:** [December 7, 2017, 5:28pm UTC](https://discuss.elastic.co/t/problem-in-running-kibana-as-non-root-user-in-docker/109933 "2017-12-07T17:28:26Z")
I am trying to run Kibana 5.5.1 as non-root user in docker. Container is starting but i am getting error as \[kibana\_error\] Is there any way i can run my Kibana container as non-root user. My user is kibanauser. I am … --- ## [JSON parsing and Payload injection](https://discuss.elastic.co/t/json-parsing-and-payload-injection/13445)
**Author:** [@Aurelien\_3](https://discuss.elastic.co/u/Aurelien_3)\ **Replies:** 2\ **Last updated:** [September 6, 2013, 2:46pm UTC](https://discuss.elastic.co/t/json-parsing-and-payload-injection/13445 "2013-09-06T14:46:59Z")
Hi ESearchers, I'm investigating into elastic search in order to inject payload information associated to each word. One interesting idea would be to use the JSON to inject objects holding the data and payload dat… --- ## [Heartbeat on elastic agent](https://discuss.elastic.co/t/heartbeat-on-elastic-agent/309570)
**Author:** [@lineconnect](https://discuss.elastic.co/u/lineconnect)\ **Replies:** 4\ **Last updated:** [July 19, 2022, 6:29am UTC](https://discuss.elastic.co/t/heartbeat-on-elastic-agent/309570 "2022-07-19T06:29:28Z")
Hi there, we're using EFK in k8s and beats for a while now and want to migrate our beats to elastic agent. I've setup the agents to use the fleet server and i'm also able to configure the inputs trough Kibana. But i'm… --- ## [Need to setup cpu,memory,disk dashboards in kibana](https://discuss.elastic.co/t/need-to-setup-cpu-memory-disk-dashboards-in-kibana/263295)
**Author:** [@charanteja](https://discuss.elastic.co/u/charanteja)\ **Replies:** 6\ **Last updated:** [February 12, 2021, 6:17am UTC](https://discuss.elastic.co/t/need-to-setup-cpu-memory-disk-dashboards-in-kibana/263295 "2021-02-12T06:17:29Z")
I am fairly new to ELK and going thru dis portal is kind of helping me a little bit. I saw you are active and knowledgable in ELK. Could you help me in setting my visualization so I could set up the dashboards for my ne… --- ## [ELK Stack Setup to Receive Beats from Magento](https://discuss.elastic.co/t/elk-stack-setup-to-receive-beats-from-magento/143380)
**Author:** [@imranvirk](https://discuss.elastic.co/u/imranvirk)\ **Replies:** 6\ **Last updated:** [August 8, 2018, 5:52am UTC](https://discuss.elastic.co/t/elk-stack-setup-to-receive-beats-from-magento/143380 "2018-08-08T05:52:03Z")
I have 2 droplets configured in my DO project: ELK Stack Magento eCommerce platform on a LAMP Stack Both instances are up and running, with all services setup. However, I am having an issue with my Magento server, wh… --- ## [No known master node, scheduling a retry после рестарта ноды](https://discuss.elastic.co/t/no-known-master-node-scheduling-a-retry/74173)
**Author:** [@11116](https://discuss.elastic.co/u/11116)\ **Replies:** 7\ **Last updated:** [February 8, 2017, 8:38am UTC](https://discuss.elastic.co/t/no-known-master-node-scheduling-a-retry/74173 "2017-02-08T08:38:22Z")
Здравствуйте! У меня есть кластер из трех нод. Работает он стабильно, но при рестарте одной из трех нод кластера стабильно получаю такое в логах: \[2017-02-07T10:47:46,977\]\[INFO \]\[o.e.n.Node \] \[Shinra t… --- ## [Scripted field on Aggregated value](https://discuss.elastic.co/t/scripted-field-on-aggregated-value/87157)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 2\ **Last updated:** [May 30, 2017, 1:36pm UTC](https://discuss.elastic.co/t/scripted-field-on-aggregated-value/87157 "2017-05-30T13:36:55Z")
Scripted fields can work on a field or set of fields in the document. I would like to create scripted field on aggregated value. Say, I have terms aggregation of fieldA with count metric. I would like to create anot… --- ## [Regex with "interval" flag enabled to filter private-ip-addresses](https://discuss.elastic.co/t/regex-with-interval-flag-enabled-to-filter-private-ip-addresses/280826)
**Author:** [@jnair](https://discuss.elastic.co/u/jnair)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 3:37pm UTC](https://discuss.elastic.co/t/regex-with-interval-flag-enabled-to-filter-private-ip-addresses/280826 "2021-08-09T15:37:21Z")
In the kibana visualization query interface, in the "Add filter -\> Edit as Query DSL" editor, I am using the below "REGEX" filter queries with the "INTERVAL" flag set, to filter the Private-IP addresses. I did check the … --- ## [Filter by \_score in aggregation](https://discuss.elastic.co/t/filter-by-score-in-aggregation/112881)
**Author:** [@Luke\_Gilson](https://discuss.elastic.co/u/Luke_Gilson)\ **Replies:** 0\ **Last updated:** [December 21, 2017, 7:03pm UTC](https://discuss.elastic.co/t/filter-by-score-in-aggregation/112881 "2017-12-21T19:03:37Z")
ES Version: 2.3 elasticsearch-py: 2.3.0 Currently, I am using the min\_score attribute to remove the lower cruft of search results. e.g.: { "query": {"filtered": { "query": {"bool": { "must": {"… --- ## [Filebeat 6.2 and Windows](https://discuss.elastic.co/t/filebeat-6-2-and-windows/119318)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 6\ **Last updated:** [February 14, 2018, 2:07pm UTC](https://discuss.elastic.co/t/filebeat-6-2-and-windows/119318 "2018-02-14T14:07:45Z")
I recently upgraded my stack to 6.2 from 5.7.1, and struggled to get Filebeat working. On my Linux hosts, I had to upgrade to Filebeat-6.2, as well as to create a new Filebeat index based on Filebeat-6.2 in my Elastic h… --- ## [Resend old logs from filebeat to logstash](https://discuss.elastic.co/t/resend-old-logs-from-filebeat-to-logstash/172402)
**Author:** [@Arthur19](https://discuss.elastic.co/u/Arthur19)\ **Replies:** 2\ **Last updated:** [March 15, 2019, 5:45pm UTC](https://discuss.elastic.co/t/resend-old-logs-from-filebeat-to-logstash/172402 "2019-03-15T17:45:15Z")
Hi, Thanks in advance for your help. I would like to reload some logs to customize additional fields. I have noticed that registry file in filebeat configuration keeps track of the files already picked. However, if I re… --- ## [Design Considerations](https://discuss.elastic.co/t/design-considerations/51695)
**Author:** [@SWD](https://discuss.elastic.co/u/SWD)\ **Replies:** 1\ **Last updated:** [June 3, 2016, 2:25am UTC](https://discuss.elastic.co/t/design-considerations/51695 "2016-06-03T02:25:51Z")
Hi there, I've just finished a POC piece to show the benefits of using the ELK stack to aggregate logs from our applications. Now that we have some traction for the project i need to design this with a global mindset… --- ## [My monitoring Indexes are very large, what are best practices?](https://discuss.elastic.co/t/my-monitoring-indexes-are-very-large-what-are-best-practices/74423)
**Author:** [@Jbrar](https://discuss.elastic.co/u/Jbrar)\ **Replies:** 2\ **Last updated:** [February 8, 2017, 9:35pm UTC](https://discuss.elastic.co/t/my-monitoring-indexes-are-very-large-what-are-best-practices/74423 "2017-02-08T21:35:54Z")
I have a similar issue as to what was raised in https://discuss.elastic.co/t/how-to-change-indexing-frequency-of-x-pack-monitoring-plugin/65954 that my .monitoring indexes are disproportionately large in comparison to my… --- ## [Kibana Crashes Periodically](https://discuss.elastic.co/t/kibana-crashes-periodically/186497)
**Author:** [@jleezer](https://discuss.elastic.co/u/jleezer)\ **Replies:** 8\ **Last updated:** [June 19, 2019, 3:31pm UTC](https://discuss.elastic.co/t/kibana-crashes-periodically/186497 "2019-06-19T15:31:01Z")
Hello, I'm seeing an issue where Kibana periodically crashes. OS: CentOS Linux release 7.6 Kibana/ES Version: 6.6.2, Base Version Checking in the logs it appears that Kibana might be restarting itself periodically at… --- ## [Gracefully Stopping Logstash & Avoiding kill-9](https://discuss.elastic.co/t/gracefully-stopping-logstash-avoiding-kill-9/1197)
**Author:** [@David\_Kleiner](https://discuss.elastic.co/u/David_Kleiner)\ **Replies:** 4\ **Last updated:** [May 25, 2015, 12:05am UTC](https://discuss.elastic.co/t/gracefully-stopping-logstash-avoiding-kill-9/1197 "2015-05-25T00:05:42Z")
Hello, Once in a while I need to restart logstash. I use SV for service management. Here's what happens: \[woot@log04 elasticsearch\]$ sudo sv stop /etc/service/backend-indexnode\* timeout: run: /etc/service/backend-ind… --- ## [Logstash Error 413](https://discuss.elastic.co/t/logstash-error-413/216055)
**Author:** [@bhargav\_bharat](https://discuss.elastic.co/u/bhargav_bharat)\ **Replies:** 2\ **Last updated:** [January 22, 2020, 9:44pm UTC](https://discuss.elastic.co/t/logstash-error-413/216055 "2020-01-22T21:44:30Z")
Hello, I am facing below mentioned error and logstash stop sending log to elasticsearch and communication also broken. ########################################################### Jan 22 10:21:33 logstash\_agent logstas… --- ## [How to get a page from elasticsearch where from parameter is greater than 10000](https://discuss.elastic.co/t/how-to-get-a-page-from-elasticsearch-where-from-parameter-is-greater-than-10000/113732)
**Author:** [@Adarsh\_Bajpai](https://discuss.elastic.co/u/Adarsh_Bajpai)\ **Replies:** 7\ **Last updated:** [January 2, 2018, 12:32pm UTC](https://discuss.elastic.co/t/how-to-get-a-page-from-elasticsearch-where-from-parameter-is-greater-than-10000/113732 "2018-01-02T12:32:27Z")
Hi All, In our application, we have a listing of elasticsearch data, the data is rendered with pagination. Users can click on any page to get listing of that particular page. After upgrade to 5.6, we are not able to ge… --- ## [Document ID conventions](https://discuss.elastic.co/t/document-id-conventions/5636)
**Author:** [@Mauri](https://discuss.elastic.co/u/Mauri)\ **Replies:** 2\ **Last updated:** [October 19, 2011, 12:34am UTC](https://discuss.elastic.co/t/document-id-conventions/5636 "2011-10-19T00:34:36Z")
Hello, I have not used ES before and am having trouble finding any guidelines on what constitutes a valid document ID (that follows the type in index and get operations). The examples in the guide use numbers while… --- ## [HTTPS Client Certificate Only Authentication \[ES 6.8\] \[NEST\] \[SSL/TLS\]](https://discuss.elastic.co/t/https-client-certificate-only-authentication-es-6-8-nest-ssl-tls/187218)
**Author:** [@mqb](https://discuss.elastic.co/u/mqb)\ **Replies:** 4\ **Last updated:** [July 1, 2019, 2:42am UTC](https://discuss.elastic.co/t/https-client-certificate-only-authentication-es-6-8-nest-ssl-tls/187218 "2019-07-01T02:42:01Z")
Is it possible to authenticate with only a self-signed certificate (without basic auth) via NEST 6.x client to an Elasticsearch 6.8 cluster that has SSL/TLS enabled? If so, what are the requirements (ie. subscription lev… --- ## [Dropping logs in logstash](https://discuss.elastic.co/t/dropping-logs-in-logstash/80665)
**Author:** [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)\ **Replies:** 4\ **Last updated:** [March 31, 2017, 6:40am UTC](https://discuss.elastic.co/t/dropping-logs-in-logstash/80665 "2017-03-31T06:40:36Z")
Is there any way where i can discard some logs from a log file in case, they match certain query? for example, i have a log file test-sample.log which has these logs: 1. abc failed due to something 2. warning is genera… --- ## [Searching with multiple values - JAVA](https://discuss.elastic.co/t/searching-with-multiple-values-java/43937)
**Author:** [@issam](https://discuss.elastic.co/u/issam)\ **Replies:** 4\ **Last updated:** [March 11, 2016, 2:18pm UTC](https://discuss.elastic.co/t/searching-with-multiple-values-java/43937 "2016-03-11T14:18:58Z")
Hello, I have to search on the indexes already created with multiple values in a given field, but I always get nothing in the result Can you tell please if it is ok with the following code (I use elasticsearch Java A… --- ## [Multiple disks on same node - shard allocation](https://discuss.elastic.co/t/multiple-disks-on-same-node-shard-allocation/227590)
**Author:** [@ItamarBenjamin](https://discuss.elastic.co/u/ItamarBenjamin)\ **Replies:** 3\ **Last updated:** [April 11, 2020, 4:22pm UTC](https://discuss.elastic.co/t/multiple-disks-on-same-node-shard-allocation/227590 "2020-04-11T16:22:34Z")
Hi, I have a cluster with 10 data nodes. some data nodes have multiple disks with different sizes (running on-prem, have to do with what i'm given). During the night my main index got locked due to 'flood stage disk wa… --- ## [Heartbeat startup error](https://discuss.elastic.co/t/heartbeat-startup-error/184973)
**Author:** [@andre\_b](https://discuss.elastic.co/u/andre_b)\ **Replies:** 3\ **Last updated:** [July 3, 2019, 7:53am UTC](https://discuss.elastic.co/t/heartbeat-startup-error/184973 "2019-07-03T07:53:10Z")
Hi all, I'm trying to configure heartbeat-elastic without success. When I try to start the service I get this error: ● heartbeat-elastic.service - Ping remote services for availability and log results to Elasticsearch … --- ## [Monitor all http requests](https://discuss.elastic.co/t/monitor-all-http-requests/81976)
**Author:** [@nikosd23](https://discuss.elastic.co/u/nikosd23)\ **Replies:** 3\ **Last updated:** [April 14, 2017, 5:42am UTC](https://discuss.elastic.co/t/monitor-all-http-requests/81976 "2017-04-14T05:42:51Z")
Hello, We want to monitor all http requests to our cluster. We have enabled kibana monitoring. Is there documentation about this? A use would be to check the the client is using preemptive auth and doesn't issue dupli… [Previous page](https://discuss.elastic.co/top.md?page=583&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=585&per_page=50&period=all)