# Top **URL:** https://discuss.elastic.co/top.md?page=618&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 619 --- ## [How to exclude duplicates in Aggregate filter?](https://discuss.elastic.co/t/how-to-exclude-duplicates-in-aggregate-filter/140939)
**Author:** [@Jevgenij](https://discuss.elastic.co/u/Jevgenij)\ **Replies:** 6\ **Last updated:** [August 1, 2018, 4:53pm UTC](https://discuss.elastic.co/t/how-to-exclude-duplicates-in-aggregate-filter/140939 "2018-08-01T16:53:00Z")
Hello! I'm fetching some data from db with multiple associated tables. My query: SELECT \`item\`.\`id\`, \`item\`.\`name\`, \`colour\`.\`name\` AS \`colour\`, \`material\`.\`name\` AS \`material\` FROM \`item\` LEFT JOIN \`item\_has\_colour\` … --- ## [Primary and replica shard allocation on a single node cluster](https://discuss.elastic.co/t/primary-and-replica-shard-allocation-on-a-single-node-cluster/89283)
**Author:** [@sandsbl](https://discuss.elastic.co/u/sandsbl)\ **Replies:** 1\ **Last updated:** [June 13, 2017, 11:20pm UTC](https://discuss.elastic.co/t/primary-and-replica-shard-allocation-on-a-single-node-cluster/89283 "2017-06-13T23:20:30Z")
I am planning to use Elasticsearch within a single-node cluster. The other servers on our network are tasked for different resource-intensive tasks so adding additional nodes may not be feasible. If I configure path.data … --- ## [Elasticsearch fails to start, no logs, (code=exited, status=1/FAILURE)](https://discuss.elastic.co/t/elasticsearch-fails-to-start-no-logs-code-exited-status-1-failure/190377)
**Author:** [@tanveermulla111](https://discuss.elastic.co/u/tanveermulla111)\ **Replies:** 4\ **Last updated:** [July 14, 2019, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-no-logs-code-exited-status-1-failure/190377 "2019-07-14T21:17:28Z")
systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Sun 2019… --- ## [Filebeat not parsing nginx when output is not to elastic](https://discuss.elastic.co/t/filebeat-not-parsing-nginx-when-output-is-not-to-elastic/168439)
**Author:** [@Barak\_Liato](https://discuss.elastic.co/u/Barak_Liato)\ **Replies:** 0\ **Last updated:** [February 14, 2019, 3:10pm UTC](https://discuss.elastic.co/t/filebeat-not-parsing-nginx-when-output-is-not-to-elastic/168439 "2019-02-14T15:10:47Z")
I am using filebeat in kubernetes to send logs to logstash. logstash pass the logs to elastic. When I output the logs from filebeat to elastic the nginx fields are being parsed. Example of a document when the filebeat … --- ## [Basic license functionalities](https://discuss.elastic.co/t/basic-license-functionalities/47145)
**Author:** [@lsilva](https://discuss.elastic.co/u/lsilva)\ **Replies:** 3\ **Last updated:** [April 13, 2016, 2:27pm UTC](https://discuss.elastic.co/t/basic-license-functionalities/47145 "2016-04-13T14:27:17Z")
Hi, When trying to upload a Basic license during the trial period (where the products are fully functional) I got this message: "graph":\["Graph will be disabled"\], "watcher":\["Watcher will be disabled"\], "shield"… --- ## [Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction,](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction/248284)
**Author:** [@AkatsukiPain](https://discuss.elastic.co/u/AkatsukiPain)\ **Replies:** 2\ **Last updated:** [September 14, 2020, 2:23am UTC](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction/248284 "2020-09-14T02:23:56Z")
I run logstash with these config, and there is error when running (Fresh install with kibana or elasticsearch): Could u guys help me check this issue? I have tried to find out the problem in some topics but not work … --- ## [External provisioner is not creating volume](https://discuss.elastic.co/t/external-provisioner-is-not-creating-volume/285762)
**Author:** [@HoseinGhanbari](https://discuss.elastic.co/u/HoseinGhanbari)\ **Replies:** 4\ **Last updated:** [October 4, 2021, 11:44am UTC](https://discuss.elastic.co/t/external-provisioner-is-not-creating-volume/285762 "2021-10-04T11:44:58Z")
Recently deployed a brand new ECK and Elasticsearch Cluster using the official quickstart guide. but my external provisioner which is a NFS server through custom StorageClass is not creating the volume for Elasticsearch … --- ## [How to remove full\_message or message from log under filter](https://discuss.elastic.co/t/how-to-remove-full-message-or-message-from-log-under-filter/210289)
**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\ **Replies:** 4\ **Last updated:** [December 3, 2019, 5:51am UTC](https://discuss.elastic.co/t/how-to-remove-full-message-or-message-from-log-under-filter/210289 "2019-12-03T05:51:30Z")
I need to remove full\_message or message field using logstash filter. Keep both these values increase the disk capacity. I tried following syntax under logstash filter. filter { grok { remove\_field =\> \["full\_mess… --- ## [Logstash Kafka input failed to parse JSON](https://discuss.elastic.co/t/logstash-kafka-input-failed-to-parse-json/51620)
**Author:** [@Hongwei\_Liu](https://discuss.elastic.co/u/Hongwei_Liu)\ **Replies:** 1\ **Last updated:** [June 9, 2016, 3:32am UTC](https://discuss.elastic.co/t/logstash-kafka-input-failed-to-parse-json/51620 "2016-06-09T03:32:28Z")
hi experts, i am using logstash to read data from kafka cluster and output to elasticsearch. but i encountered this error - in the message it contains hex characters, so failed to parse the json. {:timestamp=\>"2016-0… --- ## [Elasticsearch not showing filebeat index template](https://discuss.elastic.co/t/elasticsearch-not-showing-filebeat-index-template/134139)
**Author:** [@Meghna\_Mane](https://discuss.elastic.co/u/Meghna_Mane)\ **Replies:** 5\ **Last updated:** [June 1, 2018, 8:04am UTC](https://discuss.elastic.co/t/elasticsearch-not-showing-filebeat-index-template/134139 "2018-06-01T08:04:22Z")
Hi, I have just setup filebeat, ELK for prod. I have load filebeat manually using following command and it acknowledges true: curl -H 'Content-Type: application/json' -XPUT 'http://\:9200/\_template/filebeat' -d… --- ## [Can't parse boolean value](https://discuss.elastic.co/t/cant-parse-boolean-value/215273)
**Author:** [@Valentin\_Hirson](https://discuss.elastic.co/u/Valentin_Hirson)\ **Replies:** 2\ **Last updated:** [January 16, 2020, 10:14am UTC](https://discuss.elastic.co/t/cant-parse-boolean-value/215273 "2020-01-16T10:14:51Z")
Hello, I have got the following issue on my production environnement : 2020-01-15 16:26:54\] report.ERROR: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"failed to create query: { "terms" : { "spt\_t… --- ## [Get nested fields data with Painless scripting](https://discuss.elastic.co/t/get-nested-fields-data-with-painless-scripting/75851)
**Author:** [@nil](https://discuss.elastic.co/u/nil)\ **Replies:** 0\ **Last updated:** [February 21, 2017, 10:08am UTC](https://discuss.elastic.co/t/get-nested-fields-data-with-painless-scripting/75851 "2017-02-21T10:08:31Z")
I'm trying to access nested fields data through Painless inline scripting and can't seem to be able to get it to work. Without getting into too many details, the reason for this is that we have certain fields that sup… --- ## [Filebeat on local laptop does not talk to the Elasticsearch (also on local laptop) - dial tcp \[::1\]:9200: connect: cannot assign requested address](https://discuss.elastic.co/t/filebeat-on-local-laptop-does-not-talk-to-the-elasticsearch-also-on-local-laptop-dial-tcp-1-connect-cannot-assign-requested-address/317145)
**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\ **Replies:** 6\ **Last updated:** [October 24, 2022, 8:13pm UTC](https://discuss.elastic.co/t/filebeat-on-local-laptop-does-not-talk-to-the-elasticsearch-also-on-local-laptop-dial-tcp-1-connect-cannot-assign-requested-address/317145 "2022-10-24T20:13:24Z")
Hi, I am trying to setup Elsticsearch 8, Kibana and Filebeat 8 all on my local laptop, using this guide: I've got ES and Kibana running in Docker containers and communicating just fine. Next, I want to send events fr… --- ## [How to create Snapshot automatically?](https://discuss.elastic.co/t/how-to-create-snapshot-automatically/104353)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 6\ **Last updated:** [October 28, 2017, 3:07pm UTC](https://discuss.elastic.co/t/how-to-create-snapshot-automatically/104353 "2017-10-28T15:07:16Z")
Hello. Is it possible to create a Snapshot automatically? Thank you. --- ## [Error to setup Google Cloud Storage service auth](https://discuss.elastic.co/t/error-to-setup-google-cloud-storage-service-auth/142823)
**Author:** [@gutiago](https://discuss.elastic.co/u/gutiago)\ **Replies:** 1\ **Last updated:** [August 3, 2018, 1:20pm UTC](https://discuss.elastic.co/t/error-to-setup-google-cloud-storage-service-auth/142823 "2018-08-03T13:20:50Z")
Hello! I'm trying to configure the service auth of my Google Cloud bucket on Elasticsearch. My intention is to create a snapshot of my cluster in the bucket. I'm following this tutorial from the Elastic documentation. … --- ## [How Elasticsearch Working With Big Data?](https://discuss.elastic.co/t/how-elasticsearch-working-with-big-data/25432)
**Author:** [@tvlinh](https://discuss.elastic.co/u/tvlinh)\ **Replies:** 8\ **Last updated:** [July 15, 2015, 2:23am UTC](https://discuss.elastic.co/t/how-elasticsearch-working-with-big-data/25432 "2015-07-15T02:23:20Z")
Hi everyone, Can you explain me in detail how Elasticsearch working with Big Data? Elasticsearch mechanism when processing Big Data? I'm really really need information about Elasticsearch mechanism when its processin… --- ## [Querying scripted field is resulting an error](https://discuss.elastic.co/t/querying-scripted-field-is-resulting-an-error/131705)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 2\ **Last updated:** [May 15, 2018, 9:09am UTC](https://discuss.elastic.co/t/querying-scripted-field-is-resulting-an-error/131705 "2018-05-15T09:09:06Z")
Hi all.... Here I have created a scripted field for calculating Alarm duration, where i have conditions to calculate duration between two dates. here is my script . if(doc\['CLEARTIME'\].date.year != 1970) { return (… --- ## [\[solved\] Nxlog -\> logstash -\> elasticsearch](https://discuss.elastic.co/t/solved-nxlog-logstash-elasticsearch/50263)
**Author:** [@bbach](https://discuss.elastic.co/u/bbach)\ **Replies:** 5\ **Last updated:** [May 18, 2016, 4:09pm UTC](https://discuss.elastic.co/t/solved-nxlog-logstash-elasticsearch/50263 "2016-05-18T16:09:25Z")
Update: Really was a misunderstanding. Needed codec =\> rubydebug in my stdout output to see what I was expecting Of course this was all working but I upgraded -- sigh. ubuntu 14.04 nxlog-ce 2.7.1191 logstash 2.3.2 … --- ## [Curator - Not deleting indices](https://discuss.elastic.co/t/curator-not-deleting-indices/190037)
**Author:** [@cob](https://discuss.elastic.co/u/cob)\ **Replies:** 7\ **Last updated:** [July 12, 2019, 8:55am UTC](https://discuss.elastic.co/t/curator-not-deleting-indices/190037 "2019-07-12T08:55:19Z")
I'm trying to delete indices through curator that are older than 1 day. However, I'm running into issues when running Curator. I have the following Action-File.yml: actions: 1: action: delete\_indices descript… --- ## [Elasticsearch 中搜索不到Logstash同步过来的数据，这是为什么呢？](https://discuss.elastic.co/t/elasticsearch-logstash/123832)
**Author:** [@linqtosql](https://discuss.elastic.co/u/linqtosql)\ **Replies:** 1\ **Last updated:** [April 10, 2018, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-logstash/123832 "2018-04-10T09:23:49Z")
运行环境：windows server2008 R2 logstash：v6.2.1 elasticsearch：v6.2.1 我想通过logstash+elasticsearch做一个搜索服务，数据通过logstash从Mysql数据库同步到elasticsearch，我的logstash.conf文件内容如下： input { jdbc { jdbc\_connection\_string =\> "jdbc:mys… --- ## [Unable to get visualize data from postgres fusing metricbeat](https://discuss.elastic.co/t/unable-to-get-visualize-data-from-postgres-fusing-metricbeat/107760)
**Author:** [@Dinesh\_Senthil\_Kumar](https://discuss.elastic.co/u/Dinesh_Senthil_Kumar)\ **Replies:** 7\ **Last updated:** [November 29, 2017, 11:45am UTC](https://discuss.elastic.co/t/unable-to-get-visualize-data-from-postgres-fusing-metricbeat/107760 "2017-11-29T11:45:14Z")
Hi, i am using elk 5.6, i have installed elasticsearch and kibana successfully. i have configured metric beat , i am able to get all cpu metrics but am not gettign any metrics regrding postgres. while the metric beat… --- ## [Regarding reading the filebeat output to a file as input to logstash](https://discuss.elastic.co/t/regarding-reading-the-filebeat-output-to-a-file-as-input-to-logstash/48955)
**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\ **Replies:** 7\ **Last updated:** [May 4, 2016, 5:34am UTC](https://discuss.elastic.co/t/regarding-reading-the-filebeat-output-to-a-file-as-input-to-logstash/48955 "2016-05-04T05:34:00Z")
when we store filebeat data to logstash and apply filters and then ouput into a file & again pass file data as input to logstash and then to elasticsearch, all the fields will be merged into one field w. How can we … --- ## [Error setting up Filebeat on Windows](https://discuss.elastic.co/t/error-setting-up-filebeat-on-windows/42169)
**Author:** [@Vishesh](https://discuss.elastic.co/u/Vishesh)\ **Replies:** 3\ **Last updated:** [February 19, 2016, 5:20pm UTC](https://discuss.elastic.co/t/error-setting-up-filebeat-on-windows/42169 "2016-02-19T17:20:07Z")
After starting the service, I am constantly facing a connection error: SSL Client failed to connect with: dial tcp x.x.x.x:5044 No connection could be made because the target machine actively refused it. Here is my f… --- ## [Change the default time filter](https://discuss.elastic.co/t/change-the-default-time-filter/36001)
**Author:** [@Mohammed\_Abdul\_Khali](https://discuss.elastic.co/u/Mohammed_Abdul_Khali)\ **Replies:** 3\ **Last updated:** [December 1, 2015, 8:34am UTC](https://discuss.elastic.co/t/change-the-default-time-filter/36001 "2015-12-01T08:34:37Z")
Hi, The default time filter in Kibana is "Last 15 minutes" How can i set the default value to an absolute time? Is this possible? Also can i set a default dashboard for Kibana? Regards, Abdul --- ## [Kibana error: not allowed to use elastic user](https://discuss.elastic.co/t/kibana-error-not-allowed-to-use-elastic-user/304356)
**Author:** [@okopnik](https://discuss.elastic.co/u/okopnik)\ **Replies:** 1\ **Last updated:** [May 10, 2022, 11:15pm UTC](https://discuss.elastic.co/t/kibana-error-not-allowed-to-use-elastic-user/304356 "2022-05-10T23:15:18Z")
The error is: "\[config validation of \[Elasticsearch\].username\]: value of "elastic" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function"... I tried making a new us… --- ## [This version of Kibana requires Elasticsearch v5.4.0](https://discuss.elastic.co/t/this-version-of-kibana-requires-elasticsearch-v5-4-0/86090)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 1\ **Last updated:** [May 17, 2017, 11:32am UTC](https://discuss.elastic.co/t/this-version-of-kibana-requires-elasticsearch-v5-4-0/86090 "2017-05-17T11:32:10Z")
Hi, I did not upgrade the Kibana or ES to 5.4.0 (they are on 5.2.0), but I am getting the following error: This version of Kibana requires Elasticsearch v5.4.0 on all nodes. I found the following incompatible nodes … --- ## [Kibana upgrade from 7.12.0 to 7.13.1 is failing](https://discuss.elastic.co/t/kibana-upgrade-from-7-12-0-to-7-13-1-is-failing/275680)
**Author:** [@Vincent\_Uribe](https://discuss.elastic.co/u/Vincent_Uribe)\ **Replies:** 8\ **Last updated:** [June 16, 2021, 6:19am UTC](https://discuss.elastic.co/t/kibana-upgrade-from-7-12-0-to-7-13-1-is-failing/275680 "2021-06-16T06:19:01Z")
Hi, I have been trying to upgrade kibana for a few days ow and it does not work. I have the following error : {"type":"log","@timestamp":"2021-06-11T10:10:39+00:00","tags":\["info","savedobjects-service"\],"pid":27709,"m… --- ## [Sort aggregation on word frequency count instead of doc\_count](https://discuss.elastic.co/t/sort-aggregation-on-word-frequency-count-instead-of-doc-count/131300)
**Author:** [@randomuser](https://discuss.elastic.co/u/randomuser)\ **Replies:** 8\ **Last updated:** [May 14, 2018, 8:48am UTC](https://discuss.elastic.co/t/sort-aggregation-on-word-frequency-count-instead-of-doc-count/131300 "2018-05-14T08:48:26Z")
Hello, Is there a way to sort aggregation buckets based on word count instead of the default doc\_count? For example, a color field might contain: "red blue green table" "red red red red table" "blue yellow table" "… --- ## [Split series gets stacked in dashboard](https://discuss.elastic.co/t/split-series-gets-stacked-in-dashboard/91773)
**Author:** [@matfiz](https://discuss.elastic.co/u/matfiz)\ **Replies:** 5\ **Last updated:** [July 6, 2017, 10:57am UTC](https://discuss.elastic.co/t/split-series-gets-stacked-in-dashboard/91773 "2017-07-06T10:57:59Z")
I have created a vistualization with buckets split to charts (terms agg) and then split series (histogram agg on int year filed). When I see the visualization in Visualize, it looks ok. But when I add it to the dashboard… --- ## [Setting swapiness for linux servers](https://discuss.elastic.co/t/setting-swapiness-for-linux-servers/1323)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 5\ **Last updated:** [June 11, 2015, 7:20am UTC](https://discuss.elastic.co/t/setting-swapiness-for-linux-servers/1323 "2015-06-11T07:20:34Z")
Hi All, es suggesting to set vm.swapiness=1 .but when i checked in linux (redhat) swapiness contains default value is 60. so can we make this one as 1 please suggest me can we change 60 to 1 if we changed what is th… --- ## [How to connect to \`elasticsearch\` version \`8.x\` using \`API Key\` from \`logstash\`?](https://discuss.elastic.co/t/how-to-connect-to-elasticsearch-version-8-x-using-api-key-from-logstash/348612)
**Author:** [@pushanbhattacharya](https://discuss.elastic.co/u/pushanbhattacharya)\ **Replies:** 4\ **Last updated:** [December 5, 2023, 4:21pm UTC](https://discuss.elastic.co/t/how-to-connect-to-elasticsearch-version-8-x-using-api-key-from-logstash/348612 "2023-12-05T16:21:34Z")
Hi, I have been using ELK since last 5 years. My codebase is mostly for logstash where the input is a JDBC connection (DB) and after filtering output is the Elasticsearch cluster (for most of the cases). So far I was u… --- ## [Map connects to elastic.co when using local geoserver, and fails](https://discuss.elastic.co/t/map-connects-to-elastic-co-when-using-local-geoserver-and-fails/165459)
**Author:** [@Blackford](https://discuss.elastic.co/u/Blackford)\ **Replies:** 6\ **Last updated:** [February 5, 2019, 12:21pm UTC](https://discuss.elastic.co/t/map-connects-to-elastic-co-when-using-local-geoserver-and-fails/165459 "2019-02-05T12:21:09Z")
My deployment is network isolated, therefore all services are local. I have deployed geoserver to provide a base map layer for the coordinate map visualization. Using kibana 6.3.1 everything works fine. I add the local … --- ## [Concurrent Search in elasticsearch](https://discuss.elastic.co/t/concurrent-search-in-elasticsearch/54021)
**Author:** [@prashant](https://discuss.elastic.co/u/prashant)\ **Replies:** 6\ **Last updated:** [June 28, 2016, 5:24am UTC](https://discuss.elastic.co/t/concurrent-search-in-elasticsearch/54021 "2016-06-28T05:24:10Z")
Hello, I have been using ES for quite a few time now, but currently I am facing a huge performance issue while searching the ES DB. I have an Index with 5 shards, 5 nodes each of 32 Gb Ram and 16 cores CPU with SAN sto… --- ## [Dropped spans when the transaction has more than 500 spans(default), how is it decided to drop which spans?](https://discuss.elastic.co/t/dropped-spans-when-the-transaction-has-more-than-500-spans-default-how-is-it-decided-to-drop-which-spans/217338)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 1\ **Last updated:** [January 31, 2020, 12:10pm UTC](https://discuss.elastic.co/t/dropped-spans-when-the-transaction-has-more-than-500-spans-default-how-is-it-decided-to-drop-which-spans/217338 "2020-01-31T12:10:57Z")
Kibana version : 6.8 Elasticsearch version : 6.8 APM Server version : 6.8 APM Agent language and version : JavaAgent 1.9 Original install method (e.g. download page, yum, deb, from source, etc.) and version : downloa… --- ## [How to create this multiple line graph?](https://discuss.elastic.co/t/how-to-create-this-multiple-line-graph/135703)
**Author:** [@PhilippeCourtemanche](https://discuss.elastic.co/u/PhilippeCourtemanche)\ **Replies:** 3\ **Last updated:** [June 13, 2018, 2:44pm UTC](https://discuss.elastic.co/t/how-to-create-this-multiple-line-graph/135703 "2018-06-13T14:44:16Z")
This graph: \[multipleLineGraph\] Obtained using these two sql querries: \[sqlQuerries\] --- ## [Elastic to many open files](https://discuss.elastic.co/t/elastic-to-many-open-files/247616)
**Author:** [@akshay\_dindure1994](https://discuss.elastic.co/u/akshay_dindure1994)\ **Replies:** 5\ **Last updated:** [September 10, 2020, 4:27pm UTC](https://discuss.elastic.co/t/elastic-to-many-open-files/247616 "2020-09-10T16:27:07Z")
Hello Team I am facing some serious problems in elastic. I am getting below error in elastic logs /opt/SOME\_DIRECTORY\_NAME/elasticsearch/data/nodes/0/indices/7QRpS9mnSwCHPdBwaLUJag/3/translog/translog-53.ckp: Too many … --- ## [Rollback? ES 6?](https://discuss.elastic.co/t/rollback-es-6/85958)
**Author:** [@billnbell](https://discuss.elastic.co/u/billnbell)\ **Replies:** 2\ **Last updated:** [May 16, 2017, 11:16pm UTC](https://discuss.elastic.co/t/rollback-es-6/85958 "2017-05-16T23:16:39Z")
I read that ElasticSearch may never support rollback even though it has a tranlog. Why? There are some interesting use cases when using: begin\_tran() bunch of updates/inserts and possible rollback() commit\_tran(… --- ## [Make a copy of a document (index template)](https://discuss.elastic.co/t/make-a-copy-of-a-document-index-template/25187)
**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\ **Replies:** 2\ **Last updated:** [July 9, 2015, 4:53pm UTC](https://discuss.elastic.co/t/make-a-copy-of-a-document-index-template/25187 "2015-07-09T16:53:19Z")
Hi, I want to make a copy of a document. How can I do that? My main interest is to create a index template similar to logstash-.\* So, I would like to copy the template into another duplicate template. Can you please … --- ## [Restclient fails with concurrent.TimeoutException Exception](https://discuss.elastic.co/t/restclient-fails-with-concurrent-timeoutexception-exception/109736)
**Author:** [@vyas.radhakrishnan](https://discuss.elastic.co/u/vyas.radhakrishnan)\ **Replies:** 4\ **Last updated:** [December 7, 2017, 12:58pm UTC](https://discuss.elastic.co/t/restclient-fails-with-concurrent-timeoutexception-exception/109736 "2017-12-07T12:58:00Z")
Indexing is failing with following exception . I am using Elastic Search REST client 5.6.4 and Elastic Server 5.6.4. I saw a similar post , but no resolution given . can i get some pointers ? Caused by: java.util.concu… --- ## [Changing a term in a json to become the timestamp from filebeat](https://discuss.elastic.co/t/changing-a-term-in-a-json-to-become-the-timestamp-from-filebeat/75907)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 4\ **Last updated:** [March 5, 2017, 8:49am UTC](https://discuss.elastic.co/t/changing-a-term-in-a-json-to-become-the-timestamp-from-filebeat/75907 "2017-03-05T08:49:26Z")
Hi, My Filebeat is reading the time that the a log file is created as the timestamp. This is a problem since it does not read every message in the log with a unique time. What I am trying to do is to parse a json that … --- ## [Data stream indices not moving from frozen to delete state](https://discuss.elastic.co/t/data-stream-indices-not-moving-from-frozen-to-delete-state/304622)
**Author:** [@elastictor](https://discuss.elastic.co/u/elastictor)\ **Replies:** 7\ **Last updated:** [June 14, 2022, 12:27am UTC](https://discuss.elastic.co/t/data-stream-indices-not-moving-from-frozen-to-delete-state/304622 "2022-06-14T00:27:04Z")
I have created a data stream with ILM with phases ranging from Hot to Deleted. The backing indices are successfully moved into Frozen state but never continue into the Deleted phase. Why are the indices not moving to d… --- ## [Why is my Logstash startup so slow?](https://discuss.elastic.co/t/why-is-my-logstash-startup-so-slow/172572)
**Author:** [@G82EtHAjnY4U](https://discuss.elastic.co/u/G82EtHAjnY4U)\ **Replies:** 3\ **Last updated:** [March 15, 2019, 5:02pm UTC](https://discuss.elastic.co/t/why-is-my-logstash-startup-so-slow/172572 "2019-03-15T17:02:27Z")
I'm running Logstash 6.6.1 in a Docker container in a cloud computing environment (Heroku). There's a limit on app boot time on Heroku, which is problematic for me because Logstash sometimes takes up to 2 minutes to star… --- ## [Docker module doesn't send healthcheck info](https://discuss.elastic.co/t/docker-module-doesnt-send-healthcheck-info/122001)
**Author:** [@thomaskelder](https://discuss.elastic.co/u/thomaskelder)\ **Replies:** 5\ **Last updated:** [March 13, 2018, 7:14am UTC](https://discuss.elastic.co/t/docker-module-doesnt-send-healthcheck-info/122001 "2018-03-13T07:14:32Z")
Hi, I'm running metricbeat 6.2.2 using the official Docker image and have it configured to use the system and docker modules (see configuration below). I mapped the required volumes to /hostfs and my logstash is receivi… --- ## [Optional fields in grok pattern are not working](https://discuss.elastic.co/t/optional-fields-in-grok-pattern-are-not-working/51854)
**Author:** [@punu31090](https://discuss.elastic.co/u/punu31090)\ **Replies:** 1\ **Last updated:** [June 8, 2016, 6:07pm UTC](https://discuss.elastic.co/t/optional-fields-in-grok-pattern-are-not-working/51854 "2016-06-08T18:07:28Z")
Following are my log lines: Timestamp: 27-05-2016 13:25:17 Title:Customer.GetCustomer() Message: Searched Customers for number : 123 InnerException: An error has occurred StackTrace: An error has occurred Machine: PQR … --- ## [Kibana: Unable to retrieve version information from Elasticsearch nodes. error:0909006C:PEM](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-errorpem/298650)
**Author:** [@GB88](https://discuss.elastic.co/u/GB88)\ **Replies:** 4\ **Last updated:** [March 3, 2022, 11:19pm UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-errorpem/298650 "2022-03-03T23:19:01Z")
Hello, When starting Kibana, the log shows, amongst other info's, this Error: Unable to retrieve version information from Elasticsearch nodes. error:0909006C:PEM I'm able to browse to https://172.1.1.50:5601, and the … --- ## [EOFException while reading SequenceFile to restore ES](https://discuss.elastic.co/t/eofexception-while-reading-sequencefile-to-restore-es/38172)
**Author:** [@Aurelien\_3](https://discuss.elastic.co/u/Aurelien_3)\ **Replies:** 4\ **Last updated:** [January 8, 2016, 10:49am UTC](https://discuss.elastic.co/t/eofexception-while-reading-sequencefile-to-restore-es/38172 "2016-01-08T10:49:22Z")
Hi, I've been trying to backup an ES cluster and restore it using Hadoop and the hadoop ES library. I'm using ES 1.7.1. Because of the size of data and network speed, I did bucket the operation by date ranges. For s… --- ## [CVE-2021-45105 for ELK 7.10.2](https://discuss.elastic.co/t/cve-2021-45105-for-elk-7-10-2/292420)
**Author:** [@Ram\_N](https://discuss.elastic.co/u/Ram_N)\ **Replies:** 3\ **Last updated:** [December 20, 2021, 3:51am UTC](https://discuss.elastic.co/t/cve-2021-45105-for-elk-7-10-2/292420 "2021-12-20T03:51:35Z")
Hi Pertaining to 44228, we have deleted the vulnerable class as per ELK suggestion. For this new 45105, do we need to take any action ? I read default Elasticsearch, logstash, Kibana 7.10.2 are not vulnerable. Is that f… --- ## [Missing /config file and yml files after new installation](https://discuss.elastic.co/t/missing-config-file-and-yml-files-after-new-installation/138954)
**Author:** [@bamptini](https://discuss.elastic.co/u/bamptini)\ **Replies:** 3\ **Last updated:** [July 9, 2018, 8:22pm UTC](https://discuss.elastic.co/t/missing-config-file-and-yml-files-after-new-installation/138954 "2018-07-09T20:22:24Z")
Hi, I know very little about all this stuff. Im trying to learn form scratch and after a long drawn out day of installing the products logstash, elasticsearch and kibana. I am now stuck. Maybe this is not an issue but I… --- ## [Kibanas Multi-User?](https://discuss.elastic.co/t/kibanas-multi-user/44514)
**Author:** [@AFlohe](https://discuss.elastic.co/u/AFlohe)\ **Replies:** 1\ **Last updated:** [March 17, 2016, 7:21pm UTC](https://discuss.elastic.co/t/kibanas-multi-user/44514 "2016-03-17T19:21:09Z")
Hey guys, this is my first post here. We want to install the ELK-Stack for our centralized log-Management solution. One of our Requirements is that the GUI / the kibana user Interface is multitenant.... Do I have t… --- ## [Docker-compose persistence and scaling](https://discuss.elastic.co/t/docker-compose-persistence-and-scaling/90931)
**Author:** [@Nico-DF](https://discuss.elastic.co/u/Nico-DF)\ **Replies:** 1\ **Last updated:** [June 27, 2017, 8:57am UTC](https://discuss.elastic.co/t/docker-compose-persistence-and-scaling/90931 "2017-06-27T08:57:04Z")
Hi, I'm currently deploying the full stack on docker (each element is in a different container). As a first test, I ran one container of each, and it worked well. Using named volume I also add persistence to keep lo… [Previous page](https://discuss.elastic.co/top.md?page=617&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=619&per_page=50&period=all)