# Top

**URL:** https://discuss.elastic.co/top.md?page=627&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 628

---

## [Logstash undefined local variable](https://discuss.elastic.co/t/logstash-undefined-local-variable/135243)

<div class="topic-metadata">

**Author:** [@camjoex](https://discuss.elastic.co/u/camjoex)\
**Replies:** 3\
**Last updated:** [June 10, 2018, 10:42pm UTC](https://discuss.elastic.co/t/logstash-undefined-local-variable/135243 "2018-06-10T22:42:27Z")

</div>

Hello I'm trying to transform timestamp to specific format YYYY-MM and occured some trouble. I want to convert timestamp date to format YYYY-MM in specific string crea. Here my test echo "1524227744"|logstash -e 'fil…

---

## [Netflow Setup Broken?](https://discuss.elastic.co/t/netflow-setup-broken/108024)

<div class="topic-metadata">

**Author:** [@Hank42](https://discuss.elastic.co/u/Hank42)\
**Replies:** 2\
**Last updated:** [November 18, 2017, 10:11pm UTC](https://discuss.elastic.co/t/netflow-setup-broken/108024 "2017-11-18T22:11:29Z")

</div>

Succesfully configured logstash 5.6 with netflow setup for remote Kibana and remote Elasticsearch server as follows: bin/logstash --path.settings /etc/logstash --modules netflow --setup -M netflow.var.input.udp.port=7…

---

## [Stopping watch service, reason \[shutdown initiated\]](https://discuss.elastic.co/t/stopping-watch-service-reason-shutdown-initiated/304902)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 4\
**Last updated:** [May 21, 2022, 1:01am UTC](https://discuss.elastic.co/t/stopping-watch-service-reason-shutdown-initiated/304902 "2022-05-21T01:01:25Z")

</div>

{"@timestamp":"2022-05-17T07:20:24.445Z", "log.level": "INFO", "message":"license mode is \[basic\], currently licensed security realms are \[reserved/reserved,file/default\_file,native/default\_native\]", "ecs.version": "1.2.…

---

## [Accessing nested fields in ruby filter for math](https://discuss.elastic.co/t/accessing-nested-fields-in-ruby-filter-for-math/255740)

<div class="topic-metadata">

**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Replies:** 4\
**Last updated:** [November 17, 2020, 7:30pm UTC](https://discuss.elastic.co/t/accessing-nested-fields-in-ruby-filter-for-math/255740 "2020-11-17T19:30:54Z")

</div>

Hello, I am having issues with this bit of code where I am trying to add 3 nested fields together and place them in a new nested field. here is my bit of ruby code ruby { code =\> "event.set('\[device\]\[disconnect\]\[dura…

---

## [Field missing in Elasticsearch/kibana](https://discuss.elastic.co/t/field-missing-in-elasticsearch-kibana/60381)

<div class="topic-metadata">

**Author:** [@trenzalore](https://discuss.elastic.co/u/trenzalore)\
**Replies:** 4\
**Last updated:** [September 14, 2016, 7:25am UTC](https://discuss.elastic.co/t/field-missing-in-elasticsearch-kibana/60381 "2016-09-14T07:25:12Z")

</div>

Hi ! So I made a huge logstash config for my wifi hotspots. I managed to create nearly all the filters but I have a problem with one of them. I receive this log: \<134\>1 1473769601.251850936 APVDA001 flows allow src…

---

## [Report logged in user stats in kibana](https://discuss.elastic.co/t/report-logged-in-user-stats-in-kibana/28532)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 4\
**Last updated:** [September 3, 2015, 6:02pm UTC](https://discuss.elastic.co/t/report-logged-in-user-stats-in-kibana/28532 "2015-09-03T18:02:28Z")

</div>

Hi, I've been asked to integrate our logstash setup with LDAP authentication. So I think I'll need to add shield to our 3 ES nodes. Logstash lives on the first ES node. Can someone please confirm if I need to use shie…

---

## [Combining tokenizers](https://discuss.elastic.co/t/combining-tokenizers/13398)

<div class="topic-metadata">

**Author:** [@Maciej\_Dziardziel](https://discuss.elastic.co/u/Maciej_Dziardziel)\
**Replies:** 2\
**Last updated:** [August 31, 2013, 7:02pm UTC](https://discuss.elastic.co/t/combining-tokenizers/13398 "2013-08-31T19:02:31Z")

</div>

Is there way to combine lists of tokenizers? Say that I'd like to generate "by product", "by-product" and "byproduct" from "by Product". I can configure tokenizers to generate every variant, but not all of them at once. …

---

## [Is it possible to add multiple outputs for elastic agents?](https://discuss.elastic.co/t/is-it-possible-to-add-multiple-outputs-for-elastic-agents/316891)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 5\
**Last updated:** [October 20, 2022, 4:20am UTC](https://discuss.elastic.co/t/is-it-possible-to-add-multiple-outputs-for-elastic-agents/316891 "2022-10-20T04:20:29Z")

</div>

We have 3 elasticsearch nodes and a client node. node 1, node 2, node 3 The current output of elastic agent is node 1. If the node 1 goes down is there a way for elastic agent to automatically sent its output to node 2…

---

## [Operation not permitted \<= New Beat](https://discuss.elastic.co/t/operation-not-permitted-new-beat/147459)

<div class="topic-metadata">

**Author:** [@kmacew](https://discuss.elastic.co/u/kmacew)\
**Replies:** 5\
**Last updated:** [September 7, 2018, 6:46pm UTC](https://discuss.elastic.co/t/operation-not-permitted-new-beat/147459 "2018-09-07T18:46:04Z")

</div>

Hi I followed tutorial how to create new beat (https://www.elastic.co/guide/en/beats/devguide/current/new-beat.html). With tutorial I didn't have much problems. Since trying to add some logic to new beat I encountered s…

---

## [Multiple processors with same name - add\_tags](https://discuss.elastic.co/t/multiple-processors-with-same-name-add-tags/184060)

<div class="topic-metadata">

**Author:** [@jepe](https://discuss.elastic.co/u/jepe)\
**Replies:** 2\
**Last updated:** [June 4, 2019, 8:16pm UTC](https://discuss.elastic.co/t/multiple-processors-with-same-name-add-tags/184060 "2019-06-04T20:16:27Z")

</div>

Hello, is it possible to create configuration with multiple processors, using same processor name, but different conditions? I\`d like to add tags for specific log files, like all \*.log files must be tagged as "log" but…

---

## [Elasticsearch pod stuck in CrashLoopBackOff](https://discuss.elastic.co/t/elasticsearch-pod-stuck-in-crashloopbackoff/250752)

<div class="topic-metadata">

**Author:** [@mr-davidc](https://discuss.elastic.co/u/mr-davidc)\
**Replies:** 4\
**Last updated:** [October 3, 2020, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-pod-stuck-in-crashloopbackoff/250752 "2020-10-03T15:31:01Z")

</div>

Hi all, So to outline the problem, there is a StatefulSet which specifies ES 7.4 as the container image for a set of 3 pods. 2/3 of these pods are running perfectly fine on version 7.4 however the last of the pods has s…

---

## [The error rate is 100%](https://discuss.elastic.co/t/the-error-rate-is-100/102117)

<div class="topic-metadata">

**Author:** [@luolinsun](https://discuss.elastic.co/u/luolinsun)\
**Replies:** 4\
**Last updated:** [October 16, 2017, 3:02pm UTC](https://discuss.elastic.co/t/the-error-rate-is-100/102117 "2017-10-16T15:02:00Z")

</div>

I use the geonames and the challenge is append-no-conflicts-index-only. the command: ./esrally race --offline --track=geonames --pipeline=benchmark-only --target-hosts=10.202.7.169:9200,10.202.7.170:9200,10.202.7.171:92…

---

## [Issue when adding data to ES index from Hive External Table](https://discuss.elastic.co/t/issue-when-adding-data-to-es-index-from-hive-external-table/52270)

<div class="topic-metadata">

**Author:** [@Gaitonde](https://discuss.elastic.co/u/Gaitonde)\
**Replies:** 1\
**Last updated:** [June 9, 2016, 6:17pm UTC](https://discuss.elastic.co/t/issue-when-adding-data-to-es-index-from-hive-external-table/52270 "2016-06-09T18:17:41Z")

</div>

I am trying to create Elastic search index using external table in Hive. Drop table hdce.ESExt\_movies;\_ CREATE EXTERNAL TABLE hdce.ESExt\_movies (\_ tsepoch bigint ,\_ moviename string)\_ STORED BY 'org.elasticsearch.hado…

---

## [Bucket selector in sub aggregation or cardinality aggregation](https://discuss.elastic.co/t/bucket-selector-in-sub-aggregation-or-cardinality-aggregation/193060)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 5\
**Last updated:** [July 31, 2019, 12:00pm UTC](https://discuss.elastic.co/t/bucket-selector-in-sub-aggregation-or-cardinality-aggregation/193060 "2019-07-31T12:00:58Z")

</div>

Hi guys I have this query GET /my\_index3/\_search { "size": 0, "aggs": { "num1": { "terms": { "field": "num1.keyword", "order" : { "\_count" : "desc" } }, "aggs": { "count…

---

## [APM Server transport error (ECONNRESET): socket hang up](https://discuss.elastic.co/t/apm-server-transport-error-econnreset-socket-hang-up/321165)

<div class="topic-metadata">

**Author:** [@kvaga](https://discuss.elastic.co/u/kvaga)\
**Replies:** 6\
**Last updated:** [December 23, 2022, 6:35am UTC](https://discuss.elastic.co/t/apm-server-transport-error-econnreset-socket-hang-up/321165 "2022-12-23T06:35:54Z")

</div>

we are developing node.js app (in k8s), logs stored in ELK Stack 8.3.3 in attempt to configure APM with Node.js Agent (elastic-apm-node - npm) get error APM Server transport error (ECONNRESET): socket hang up

---

## [Script field aggregation](https://discuss.elastic.co/t/script-field-aggregation/37710)

<div class="topic-metadata">

**Author:** [@Pawel\_Rog](https://discuss.elastic.co/u/Pawel_Rog)\
**Replies:** 2\
**Last updated:** [December 21, 2015, 9:57pm UTC](https://discuss.elastic.co/t/script-field-aggregation/37710 "2015-12-21T21:57:28Z")

</div>

I cannot find any information about this so I'm posting this topic. Is it possible to run terms, sum or avg aggregations on field which was created using script\_fields feature?

---

## [Logstash Kafka Output plugins not working on Windows](https://discuss.elastic.co/t/logstash-kafka-output-plugins-not-working-on-windows/25253)

<div class="topic-metadata">

**Author:** [@zhoufwind](https://discuss.elastic.co/u/zhoufwind)\
**Replies:** 2\
**Last updated:** [July 11, 2015, 6:17am UTC](https://discuss.elastic.co/t/logstash-kafka-output-plugins-not-working-on-windows/25253 "2015-07-11T06:17:00Z")

</div>

Hi folks, Kafka output plugin is working perfectly on Linux but it seems not working correctly on Windows, not sure how to debug it. When I make test on Linux, it's working fine: Linux(CentOS6.5/ jdk-8u45/ kafka\_2.10…

---

## [\[Heartbeat\] clarify “context deadline exceeds” further](https://discuss.elastic.co/t/heartbeat-clarify-context-deadline-exceeds-further/274305)

<div class="topic-metadata">

**Author:** [@lowry](https://discuss.elastic.co/u/lowry)\
**Replies:** 3\
**Last updated:** [June 25, 2021, 2:36am UTC](https://discuss.elastic.co/t/heartbeat-clarify-context-deadline-exceeds-further/274305 "2021-06-25T02:36:18Z")

</div>

It is learned that Heartbeat employs Golang context to manage the session to do the http check, Getting “context deadline exceeds” error message while accessing a target timeout. However, there’re 2 different cases woul…

---

## [Index size tradoff, hourly vs daily](https://discuss.elastic.co/t/index-size-tradoff-hourly-vs-daily/80542)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 3\
**Last updated:** [March 30, 2017, 5:13am UTC](https://discuss.elastic.co/t/index-size-tradoff-hourly-vs-daily/80542 "2017-03-30T05:13:39Z")

</div>

We are creating a daily index right now, with a replica (5 shards). As of right now, we are pulling in around 20GB an hour of info. So if we let this ride all day, we are looking at some pretty hefty index sizes. I'…

---

## [Graph that fills in time in between events](https://discuss.elastic.co/t/graph-that-fills-in-time-in-between-events/28210)

<div class="topic-metadata">

**Author:** [@Tim\_Acorda](https://discuss.elastic.co/u/Tim_Acorda)\
**Replies:** 3\
**Last updated:** [October 6, 2015, 3:38am UTC](https://discuss.elastic.co/t/graph-that-fills-in-time-in-between-events/28210 "2015-10-06T03:38:07Z")

</div>

I have two separate events and would love a graph that gives me a bar as wide as the difference between the two events. Is this something achievable in kibana? The two events are "out of sync", and "re-sync", and this …

---

## [How to get kubernetes node labels with metricbeat?](https://discuss.elastic.co/t/how-to-get-kubernetes-node-labels-with-metricbeat/220667)

<div class="topic-metadata">

**Author:** [@Federico\_Bevione](https://discuss.elastic.co/u/Federico_Bevione)\
**Replies:** 6\
**Last updated:** [March 5, 2020, 11:46am UTC](https://discuss.elastic.co/t/how-to-get-kubernetes-node-labels-with-metricbeat/220667 "2020-03-05T11:46:19Z")

</div>

Hi there, I'm trying to enrich node, or state\_node metrics of kubernetes module with k8s node labels but without any luck. I'm using metricbeat 7.6.0. My configuration is the following for the daemonset metricbeat.mo…

---

## [Elasticsearch is not starting and likely root cause is ZipException: invalid distance too far back](https://discuss.elastic.co/t/elasticsearch-is-not-starting-and-likely-root-cause-is-zipexception-invalid-distance-too-far-back/43408)

<div class="topic-metadata">

**Author:** [@nik](https://discuss.elastic.co/u/nik)\
**Replies:** 5\
**Last updated:** [March 3, 2016, 4:47pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting-and-likely-root-cause-is-zipexception-invalid-distance-too-far-back/43408 "2016-03-03T16:47:17Z")

</div>

After a system reboot my elasticsearch is not starting. This is my elasticsearch log file: \[2016-03-03 17:58:51,710\]\[INFO \]\[node \] \[Katherine Reynolds\] version\[2.2.0\], pid\[1507\], build\[8ff36d1/2…

---

## [D3.js](https://discuss.elastic.co/t/d3-js/106828)

<div class="topic-metadata">

**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\
**Replies:** 2\
**Last updated:** [November 9, 2017, 4:20am UTC](https://discuss.elastic.co/t/d3-js/106828 "2017-11-09T04:20:46Z")

</div>

Hello Team, Anyone can tell me how to integrate D3.js charts or D3.js with kibana? what's a process of their to integrate with kibana and how to used in kibana. Thanks..

---

## [How to convert elasticsearch index creation date to normal date format](https://discuss.elastic.co/t/how-to-convert-elasticsearch-index-creation-date-to-normal-date-format/284417)

<div class="topic-metadata">

**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\
**Replies:** 1\
**Last updated:** [September 16, 2021, 9:14pm UTC](https://discuss.elastic.co/t/how-to-convert-elasticsearch-index-creation-date-to-normal-date-format/284417 "2021-09-16T21:14:39Z")

</div>

Hi, Index creation date: 'creation\_date': '1631169602514' how to convert this into a readable format?using python? What is this datetime format? Thank You!

---

## [Transfer es index from dev environment to PROD](https://discuss.elastic.co/t/transfer-es-index-from-dev-environment-to-prod/49104)

<div class="topic-metadata">

**Author:** [@subbu.nv](https://discuss.elastic.co/u/subbu.nv)\
**Replies:** 6\
**Last updated:** [May 11, 2016, 7:05am UTC](https://discuss.elastic.co/t/transfer-es-index-from-dev-environment-to-prod/49104 "2016-05-11T07:05:50Z")

</div>

current i am indexing 100GB of data in dev instance for testing. can i transfer this index to PROD and achieve the same search capabilities. please advise.

---

## [Grok filter pattern for nginx to parse request body](https://discuss.elastic.co/t/grok-filter-pattern-for-nginx-to-parse-request-body/244898)

<div class="topic-metadata">

**Author:** [@Santu](https://discuss.elastic.co/u/Santu)\
**Replies:** 4\
**Last updated:** [August 14, 2020, 7:24am UTC](https://discuss.elastic.co/t/grok-filter-pattern-for-nginx-to-parse-request-body/244898 "2020-08-14T07:24:09Z")

</div>

Hi, i'm trying to parse the request body with logstash grok pattern for nginx generated logs. below is my grok pattern- "%{WORD:req\_body}" and i get the parsed field like below- "req\_body" : "req\_body", "@version"…

---

## [Wild Card search for a URL not working](https://discuss.elastic.co/t/wild-card-search-for-a-url-not-working/44281)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 4\
**Last updated:** [March 15, 2016, 4:16am UTC](https://discuss.elastic.co/t/wild-card-search-for-a-url-not-working/44281 "2016-03-15T04:16:56Z")

</div>

I have this URL: http://myserver1:443/MyWebService/api/customer/{id}/getTime/{ value1} i.e. http://myserver1:443/MyWebService/api/customer/123/getTime/350, http://myserver1:443/MyWebService/api/customer/456/getTime…

---

## [Kibana -\> Security -\> elastic rules space issue](https://discuss.elastic.co/t/kibana-security-elastic-rules-space-issue/301861)

<div class="topic-metadata">

**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\
**Replies:** 4\
**Last updated:** [May 20, 2022, 9:19am UTC](https://discuss.elastic.co/t/kibana-security-elastic-rules-space-issue/301861 "2022-05-20T09:19:27Z")

</div>

Hello Experts, I need some more insight on .siem-security index creation by kibana. We have created 3 spaces in kibana and enabled the same Security -\> elastic rules under all 3 spaces (eg: Whitespace Padding in Proces…

---

## [How to change field-type in ELK from string to numeric/long?](https://discuss.elastic.co/t/how-to-change-field-type-in-elk-from-string-to-numeric-long/303665)

<div class="topic-metadata">

**Author:** [@Next\_generation](https://discuss.elastic.co/u/Next_generation)\
**Replies:** 8\
**Last updated:** [May 3, 2022, 11:37am UTC](https://discuss.elastic.co/t/how-to-change-field-type-in-elk-from-string-to-numeric-long/303665 "2022-05-03T11:37:01Z")

</div>

For haproxy tc, tw, tr, tq are written in Type string but long I created a new index (I took it from another index mapping) and in the Dev Tools ELK console I entered ELK verison: 7.16.2 How fix it? Thanks a lot

---

## [Deleted .tasks Index; Will that create a problem?](https://discuss.elastic.co/t/deleted-tasks-index-will-that-create-a-problem/170598)

<div class="topic-metadata">

**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 6:39pm UTC](https://discuss.elastic.co/t/deleted-tasks-index-will-that-create-a-problem/170598 "2019-03-08T18:39:44Z")

</div>

The " 7.0 Upgrade Assistant" was complaining about the .tasks index which was created in an older version 5.4 or around there. I assumed it was one of those system indexes that, if deleted, would be automatically recrea…

---

## [How to generate custom score and explanation](https://discuss.elastic.co/t/how-to-generate-custom-score-and-explanation/108412)

<div class="topic-metadata">

**Author:** [@smay](https://discuss.elastic.co/u/smay)\
**Replies:** 1\
**Last updated:** [November 20, 2017, 5:33pm UTC](https://discuss.elastic.co/t/how-to-generate-custom-score-and-explanation/108412 "2017-11-20T17:33:45Z")

</div>

Hi, i am looking for a way to generate new fields/scores on each search result and am lost whether this is possible at all: Given a document and a query i want to (re)score the documents based on parameters (for exampl…

---

## [Managing large indices](https://discuss.elastic.co/t/managing-large-indices/313596)

<div class="topic-metadata">

**Author:** [@sssamant](https://discuss.elastic.co/u/sssamant)\
**Replies:** 5\
**Last updated:** [September 4, 2022, 3:15am UTC](https://discuss.elastic.co/t/managing-large-indices/313596 "2022-09-04T03:15:24Z")

</div>

I have question about how to manage large indices. The use case is this customer want to keep the data till 10 years for read and now the issue is this our index is keep growing and its size about 4 tb now and we are see…

---

## ["type": "illegal\_argument\_exception", "reason": "\[field\_sort\] unknown field \[title\], parser not found"](https://discuss.elastic.co/t/type-illegal-argument-exception-reason-field-sort-unknown-field-title-parser-not-found/110681)

<div class="topic-metadata">

**Author:** [@psksatish](https://discuss.elastic.co/u/psksatish)\
**Replies:** 1\
**Last updated:** [December 7, 2017, 2:37pm UTC](https://discuss.elastic.co/t/type-illegal-argument-exception-reason-field-sort-unknown-field-title-parser-not-found/110681 "2017-12-07T14:37:03Z")

</div>

{ "query":{ "bool": { "must": { "bool": { "should": \[ { "range": { "createdOn": { "gte": "1481049000000", "lte": "1512671399000" } } } \], "must\_not": \[ { "match": { "deleteFlag": "1" } } \] } }, "f…

---

## [Bulk management of Roles and Role mapping](https://discuss.elastic.co/t/bulk-management-of-roles-and-role-mapping/26954)

<div class="topic-metadata">

**Author:** [@pranavburnwal](https://discuss.elastic.co/u/pranavburnwal)\
**Replies:** 7\
**Last updated:** [October 13, 2016, 8:10pm UTC](https://discuss.elastic.co/t/bulk-management-of-roles-and-role-mapping/26954 "2016-10-13T20:10:10Z")

</div>

Hi, I have a scenario in which i have a big list of roles and appropriate role mappings. This will get problematic to manage all from just two files. Moreover managing users and groups in role-mappings is also challen…

---

## [Discovery configuration changes in 7.x](https://discuss.elastic.co/t/discovery-configuration-changes-in-7-x/260522)

<div class="topic-metadata">

**Author:** [@srikanth\_k](https://discuss.elastic.co/u/srikanth_k)\
**Replies:** 6\
**Last updated:** [January 13, 2021, 9:33am UTC](https://discuss.elastic.co/t/discovery-configuration-changes-in-7-x/260522 "2021-01-13T09:33:18Z")

</div>

Before an upgrade to 7.x, why is it required to set the below value discovery.zen.ping.unicast.hosts ? " After the cluster forms successfully for the first time, remove the cluster.initial\_master\_nodes setting from eac…

---

## [Difference between "filebeat setup" and "filebeat --setup"](https://discuss.elastic.co/t/difference-between-filebeat-setup-and-filebeat-setup/117307)

<div class="topic-metadata">

**Author:** [@NiceGuyIT](https://discuss.elastic.co/u/NiceGuyIT)\
**Replies:** 6\
**Last updated:** [February 5, 2018, 3:32pm UTC](https://discuss.elastic.co/t/difference-between-filebeat-setup-and-filebeat-setup/117307 "2018-02-05T15:32:00Z")

</div>

According to the docs, filebeat setup is the same as filebeat --setup except that filebeat --setup keeps running while filebeat setup runs the setup and exits. filebeat setup Sets up the initial environment, including…

---

## [Connection Refused](https://discuss.elastic.co/t/connection-refused/7354)

<div class="topic-metadata">

**Author:** [@newsgroup](https://discuss.elastic.co/u/newsgroup)\
**Replies:** 6\
**Last updated:** [April 19, 2012, 1:31pm UTC](https://discuss.elastic.co/t/connection-refused/7354 "2012-04-19T13:31:31Z")

</div>

I'm getting the following errors: \[2012-04-16 13:17:31,897\]\[INFO \]\[discovery.zen \] \[app2-uk- example-com\] failed to send join request to master \[\[app2-prod-example- com\]\[T8eeWM5xTJ-cJw6FhF5Qxg\]\[inet\[/172.…

---

## [Target of repeat operator is not specified vCenter pattner](https://discuss.elastic.co/t/target-of-repeat-operator-is-not-specified-vcenter-pattner/60296)

<div class="topic-metadata">

**Author:** [@Felix\_Kutscher](https://discuss.elastic.co/u/Felix_Kutscher)\
**Replies:** 4\
**Last updated:** [September 13, 2016, 2:30pm UTC](https://discuss.elastic.co/t/target-of-repeat-operator-is-not-specified-vcenter-pattner/60296 "2016-09-13T14:30:38Z")

</div>

Hello, I use the the pattners from http://everythingshouldbevirtual.com/logstash-vcsa-6-0 Now I get a Syntax error with this pattner. logstash-2.3.4-1 Syntax error in the given pattern \<%{INT:syslog\_pri}\>%{SYSLOGTIM…

---

## [Kibana vs. Power BI](https://discuss.elastic.co/t/kibana-vs-power-bi/295240)

<div class="topic-metadata">

**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\
**Replies:** 3\
**Last updated:** [January 24, 2022, 5:33pm UTC](https://discuss.elastic.co/t/kibana-vs-power-bi/295240 "2022-01-24T17:33:52Z")

</div>

I have a use-case where end users need to be able to quickly and easily view data stored in a MS SQL database for devices, systems and hardware/software assets they own. This would just be a read-only dashboard where the…

---

## [ML: difference between partition\_field\_name and by\_field\_name in a population job?](https://discuss.elastic.co/t/ml-difference-between-partition-field-name-and-by-field-name-in-a-population-job/287792)

<div class="topic-metadata">

**Author:** [@shabnam](https://discuss.elastic.co/u/shabnam)\
**Replies:** 8\
**Last updated:** [November 9, 2021, 7:29am UTC](https://discuss.elastic.co/t/ml-difference-between-partition-field-name-and-by-field-name-in-a-population-job/287792 "2021-11-09T07:29:35Z")

</div>

Hi, I want to know the difference of this two ml advance jobs: a. func(x), by\_field(y), over\_field(z), partition\_field(-) b. func(x), by\_field(-), over\_field(z), partition\_field(y) , two tests performed: I created…

---

## [Conditional on file input plugin](https://discuss.elastic.co/t/conditional-on-file-input-plugin/26339)

<div class="topic-metadata">

**Author:** [@martbhell](https://discuss.elastic.co/u/martbhell)\
**Replies:** 3\
**Last updated:** [July 27, 2015, 6:05pm UTC](https://discuss.elastic.co/t/conditional-on-file-input-plugin/26339 "2015-07-27T18:05:38Z")

</div>

Hello! Goal: Have one logstash config for many hosts with only file inputs, except on one or few of them don't read this one type of logs. Basically I would like to have something like: input { if \[hostname\] != "…

---

## [Java Client - Error Handling](https://discuss.elastic.co/t/java-client-error-handling/17926)

<div class="topic-metadata">

**Author:** [@Nir\_Dothan](https://discuss.elastic.co/u/Nir_Dothan)\
**Replies:** 3\
**Last updated:** [June 5, 2014, 3:41pm UTC](https://discuss.elastic.co/t/java-client-error-handling/17926 "2014-06-05T15:41:21Z")

</div>

I'm not sure how to handle errors when using the java client. How do I grammatically know if my connection was successful, or if indexing of a document succeeded? In Rest we have the http result code, but in java, I…

---

## [Unable to replace @timestamp with some other field in logstash](https://discuss.elastic.co/t/unable-to-replace-timestamp-with-some-other-field-in-logstash/97425)

<div class="topic-metadata">

**Author:** [@shraddha1](https://discuss.elastic.co/u/shraddha1)\
**Replies:** 5\
**Last updated:** [August 22, 2017, 2:08pm UTC](https://discuss.elastic.co/t/unable-to-replace-timestamp-with-some-other-field-in-logstash/97425 "2017-08-22T14:08:36Z")

</div>

I want to map @timestamp value with some other field. I referred your answers online but could not resolve the issue. I have converted string to date and want this date to be reflected in @timestamp. but no luck. Below…

---

## [Disable index rotation in logstash](https://discuss.elastic.co/t/disable-index-rotation-in-logstash/28988)

<div class="topic-metadata">

**Author:** [@Hayder\_Abbass](https://discuss.elastic.co/u/Hayder_Abbass)\
**Replies:** 5\
**Last updated:** [September 10, 2015, 10:03am UTC](https://discuss.elastic.co/t/disable-index-rotation-in-logstash/28988 "2015-09-10T10:03:26Z")

</div>

Hello, By default, logstash create indices in the format logstash-YYYY.MM.DD, which essentially creates one index per day. Is it possible to disable this feature and force logstash to push data to a specific index name…

---

## [Java.lang.UnsupportedClassVersionError: org/elasticsearch/ElasticsearchException : Unsupported major.minor version 51.0](https://discuss.elastic.co/t/java-lang-unsupportedclassversionerror-org-elasticsearch-elasticsearchexception-unsupported-major-minor-version-51-0/22938)

<div class="topic-metadata">

**Author:** [@Vijayakumari\_B\_N](https://discuss.elastic.co/u/Vijayakumari_B_N)\
**Replies:** 2\
**Last updated:** [March 27, 2015, 8:20am UTC](https://discuss.elastic.co/t/java-lang-unsupportedclassversionerror-org-elasticsearch-elasticsearchexception-unsupported-major-minor-version-51-0/22938 "2015-03-27T08:20:52Z")

</div>

Hi, I have jdk1.7.0\_75 in linux and elasticsearch server 1.4.1, but while starting my jboss server i am getting below exception. I am able to run elasticsearch server using same version. Any body knows what is jav…

---

## [Eliminating \_grokparsefailure](https://discuss.elastic.co/t/eliminating--grokparsefailure/40033)

<div class="topic-metadata">

**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\
**Replies:** 4\
**Last updated:** [January 27, 2016, 4:13pm UTC](https://discuss.elastic.co/t/eliminating--grokparsefailure/40033 "2016-01-27T16:13:34Z")

</div>

Hello, all. I've been working on setting up my ELK stack for about the past two weeks. I must admit that I've cobbled together my instance based on various posts, how-to's, etc. Because of that, my configuration is p…

---

## ["component": "o.e.d.SeedHostsResolver" - "message": "failed to resolve host \[es-master-1\]", Elastic Search v. 7.5.0](https://discuss.elastic.co/t/component-o-e-d-seedhostsresolver-message-failed-to-resolve-host-es-master-1-elastic-search-v-7-5-0/211790)

<div class="topic-metadata">

**Author:** [@tmarinov](https://discuss.elastic.co/u/tmarinov)\
**Replies:** 1\
**Last updated:** [December 13, 2019, 3:14pm UTC](https://discuss.elastic.co/t/component-o-e-d-seedhostsresolver-message-failed-to-resolve-host-es-master-1-elastic-search-v-7-5-0/211790 "2019-12-13T15:14:23Z")

</div>

All, I started dealing with ES and kubernetes and currently trying to create two master nodes. I am sorry for the long post below, but couldn't find a way to attache the files with the error log message and my k8s yaml.…

---

## [3 Node Cluster With Nodes Out of Sync](https://discuss.elastic.co/t/3-node-cluster-with-nodes-out-of-sync/20941)

<div class="topic-metadata">

**Author:** [@Yosi\_Haran](https://discuss.elastic.co/u/Yosi_Haran)\
**Replies:** 7\
**Last updated:** [November 26, 2014, 9:42am UTC](https://discuss.elastic.co/t/3-node-cluster-with-nodes-out-of-sync/20941 "2014-11-26T09:42:58Z")

</div>

Hi Guys, We are running a 3 node cluster, and each node returns a different number of documents when issued a direct HTTP "\_count" call. The cluster holds about 150K documents and the differences range from 30~50…

---

## [Hibernate Search with Elasticsearch](https://discuss.elastic.co/t/hibernate-search-with-elasticsearch/12402)

<div class="topic-metadata">

**Author:** [@Zoran\_Jeremic](https://discuss.elastic.co/u/Zoran_Jeremic)\
**Replies:** 7\
**Last updated:** [June 14, 2013, 5:12pm UTC](https://discuss.elastic.co/t/hibernate-search-with-elasticsearch/12402 "2013-06-14T17:12:48Z")

</div>

Hi, I have a project that uses Lucene, Tika and Hibernate search to index and search text, documents, web pages and Hibernate entities. I wanted to migrate to Elasticsearch and replace Lucene, but to keep Hibernat…

---

## [Elasticsearch stuck applyingchanges and reconciliation ended with failed predicates](https://discuss.elastic.co/t/elasticsearch-stuck-applyingchanges-and-reconciliation-ended-with-failed-predicates/268954)

<div class="topic-metadata">

**Author:** [@fozzylyon](https://discuss.elastic.co/u/fozzylyon)\
**Replies:** 3\
**Last updated:** [April 8, 2021, 5:04pm UTC](https://discuss.elastic.co/t/elasticsearch-stuck-applyingchanges-and-reconciliation-ended-with-failed-predicates/268954 "2021-04-08T17:04:28Z")

</div>

ECK 1.0.1 k8s 1.16.9 The ECK operator's been stellar. But I ran into trouble deploying node resource and count changes at the same time. In one cluster, it seems to have worked as expected, but in another the elastic…

[Previous page](https://discuss.elastic.co/top.md?page=626&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=628&per_page=50&period=all)
