# Top **URL:** https://discuss.elastic.co/top.md?page=639&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 640 --- ## [Internet explorer has stopped working in kibana dashboard](https://discuss.elastic.co/t/internet-explorer-has-stopped-working-in-kibana-dashboard/91624)
**Author:** [@Riyazur\_Rahaman](https://discuss.elastic.co/u/Riyazur_Rahaman)\ **Replies:** 8\ **Last updated:** [July 6, 2017, 7:05am UTC](https://discuss.elastic.co/t/internet-explorer-has-stopped-working-in-kibana-dashboard/91624 "2017-07-06T07:05:21Z")
Hi, Whenever I am trying to change the time like last 30 days to 60 days in kibana dashboard getting popup like Internet explorer has stopped working and when I click on close button it is refreshing and showing the pa… --- ## [Configuring Proxy in HTTP OUT Plugin](https://discuss.elastic.co/t/configuring-proxy-in-http-out-plugin/194785)
**Author:** [@rameshpasunoori](https://discuss.elastic.co/u/rameshpasunoori)\ **Replies:** 3\ **Last updated:** [August 13, 2019, 12:59pm UTC](https://discuss.elastic.co/t/configuring-proxy-in-http-out-plugin/194785 "2019-08-13T12:59:34Z")
Version: 7.3 Operating System: Windows 10 Config File (if you have sensitive info, please remove it): I tried three options to configure proxy for http out plugin. All these are not working, Please provide some input. … --- ## [From Kibana devtools to Elasticsearch](https://discuss.elastic.co/t/from-kibana-devtools-to-elasticsearch/138215)
**Author:** [@yolo\_1900](https://discuss.elastic.co/u/yolo_1900)\ **Replies:** 3\ **Last updated:** [July 3, 2018, 10:04am UTC](https://discuss.elastic.co/t/from-kibana-devtools-to-elasticsearch/138215 "2018-07-03T10:04:53Z")
Hello everyone. I am very new to Elasticsearch and Kibana (in fact it is the first time I know the tools), so sorry for noob questions. I can login to my kibana website (my-company.cloud) using my username and password… --- ## [Logstash not outputting Heartbeat input](https://discuss.elastic.co/t/logstash-not-outputting-heartbeat-input/99875)
**Author:** [@londonx](https://discuss.elastic.co/u/londonx)\ **Replies:** 3\ **Last updated:** [October 5, 2017, 12:26pm UTC](https://discuss.elastic.co/t/logstash-not-outputting-heartbeat-input/99875 "2017-10-05T12:26:12Z")
Logstash 5.5.1 Heartbeat 5.5.2 & tried 6.0.0 beta2 logstash-plugin update logstash-input-beats Can not get logstash to forward heartbeat data to Elastic. Debug mode shows it receives the data but then does nothing wit… --- ## [Run kibana as a service](https://discuss.elastic.co/t/run-kibana-as-a-service/100000)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 7\ **Last updated:** [September 12, 2017, 3:47pm UTC](https://discuss.elastic.co/t/run-kibana-as-a-service/100000 "2017-09-12T15:47:36Z")
How to run kibana and elasticsearch as a service --- ## [Logstash crash on windows under high volume](https://discuss.elastic.co/t/logstash-crash-on-windows-under-high-volume/35076)
**Author:** [@arizonawayfarer](https://discuss.elastic.co/u/arizonawayfarer)\ **Replies:** 7\ **Last updated:** [November 23, 2015, 4:00pm UTC](https://discuss.elastic.co/t/logstash-crash-on-windows-under-high-volume/35076 "2015-11-23T16:00:06Z")
When logstash has eventlog inputs configured on systems that have a high volume of eventlog traffic it crashes after a relatively short period of time with the following dump: Peak volume appears to be about 150 eventlo… --- ## [How to replace log4j with logback](https://discuss.elastic.co/t/how-to-replace-log4j-with-logback/79544)
**Author:** [@iGetIT](https://discuss.elastic.co/u/iGetIT)\ **Replies:** 1\ **Last updated:** [March 22, 2017, 8:38am UTC](https://discuss.elastic.co/t/how-to-replace-log4j-with-logback/79544 "2017-03-22T08:38:25Z")
I'd like logback ! But I failed in my first time to test elasticsearch ! \ \org.slf4j\ \slf4j-api\ \1.7.21\ \ \ \<… --- ## [Filebeat doesn't catchup with suricata eve.json](https://discuss.elastic.co/t/filebeat-doesnt-catchup-with-suricata-eve-json/281153)
**Author:** [@3c2c2ff5](https://discuss.elastic.co/u/3c2c2ff5)\ **Replies:** 6\ **Last updated:** [August 12, 2021, 12:20pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-catchup-with-suricata-eve-json/281153 "2021-08-12T12:20:02Z")
Hello ELK community, I am fairly new to the subject ELK stack, I am trying to setup an IDS with suricata and ELK, the initial setup went pretty good, but I realized that the suricata events from eve.json are not getting… --- ## [Filebeat on centos8?](https://discuss.elastic.co/t/filebeat-on-centos8/224252)
**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\ **Replies:** 6\ **Last updated:** [March 20, 2020, 5:20pm UTC](https://discuss.elastic.co/t/filebeat-on-centos8/224252 "2020-03-20T17:20:48Z")
Hello, I'm trying to start filebeat on centos 8 server. My elk server is on 6.8.3 version. Here my test : filebeat 7.6.1 installed by rpm the config file is OK filebeat starts correctly but I don't see any log in e… --- ## [Using Filebeat with multiple indices and logstash](https://discuss.elastic.co/t/using-filebeat-with-multiple-indices-and-logstash/211490)
**Author:** [@JoeSmith](https://discuss.elastic.co/u/JoeSmith)\ **Replies:** 3\ **Last updated:** [December 16, 2019, 10:09am UTC](https://discuss.elastic.co/t/using-filebeat-with-multiple-indices-and-logstash/211490 "2019-12-16T10:09:39Z")
Hi everyone, i've got a logstash instance that has an beats input on 5044. Im now trying to send filebeat data to that instance (which is working fine on a single index). I'd like to have multiple indices depending on … --- ## [Slow cosine similarity script](https://discuss.elastic.co/t/slow-cosine-similarity-script/299496)
**Author:** [@adibaba](https://discuss.elastic.co/u/adibaba)\ **Replies:** 4\ **Last updated:** [April 1, 2022, 11:02pm UTC](https://discuss.elastic.co/t/slow-cosine-similarity-script/299496 "2022-04-01T23:02:22Z")
Hi, in a query, I am executing a cosine similarity script. It takes multiple seconds, but the top command shows CPU and memory usage of nearly zero. It looks like a configuration issue to me, but I can not figure out th… --- ## [Search queries showing wrong results](https://discuss.elastic.co/t/search-queries-showing-wrong-results/145082)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 4\ **Last updated:** [August 29, 2018, 2:11pm UTC](https://discuss.elastic.co/t/search-queries-showing-wrong-results/145082 "2018-08-29T14:11:44Z")
I saw in documentation that its better to have less indexes and created only 1 index for all my different types of JSON. I have a fields.log\_type which shows different types of services that generate the logs. When I m… --- ## [Attempting to compile filebeat in AIX](https://discuss.elastic.co/t/attempting-to-compile-filebeat-in-aix/143378)
**Author:** [@arlequin](https://discuss.elastic.co/u/arlequin)\ **Replies:** 4\ **Last updated:** [August 10, 2018, 1:20pm UTC](https://discuss.elastic.co/t/attempting-to-compile-filebeat-in-aix/143378 "2018-08-10T13:20:13Z")
Hello, I've been reading the entries in this forum regarding filebeat compilation using go (gccgo) in AIX. I am able to compile a hello-world.go program in AIX, dynamically or statically linked but no way to find a wor… --- ## [Add field to all documents of an index](https://discuss.elastic.co/t/add-field-to-all-documents-of-an-index/19572)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 2\ **Last updated:** [September 2, 2014, 7:17pm UTC](https://discuss.elastic.co/t/add-field-to-all-documents-of-an-index/19572 "2014-09-02T19:17:17Z")
Hi I need to add a new field (with a default) to all documents already indexed. I guess bulk update will do it? -- You received this message because you are subscribed to the Google Groups "elasticsearch" gro… --- ## [Saving Elasticsearch indices to drive spare drive so root drive willl not be full](https://discuss.elastic.co/t/saving-elasticsearch-indices-to-drive-spare-drive-so-root-drive-willl-not-be-full/61448)
**Author:** [@Ravikumar\_G](https://discuss.elastic.co/u/Ravikumar_G)\ **Replies:** 5\ **Last updated:** [September 25, 2016, 7:15am UTC](https://discuss.elastic.co/t/saving-elasticsearch-indices-to-drive-spare-drive-so-root-drive-willl-not-be-full/61448 "2016-09-25T07:15:36Z")
Hi, I have recently setup a ElasticSearch server which is running on Centos 7.2 which is dell 720 with 2 root drive configured in raid 1 mirrored 4tb x 12 configured in Raid with 45Tb which is /dev/sdb1 … --- ## [Direct buffer memory error intermittently while initializing ES Connection](https://discuss.elastic.co/t/direct-buffer-memory-error-intermittently-while-initializing-es-connection/59542)
**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\ **Replies:** 5\ **Last updated:** [September 6, 2016, 5:37pm UTC](https://discuss.elastic.co/t/direct-buffer-memory-error-intermittently-while-initializing-es-connection/59542 "2016-09-06T17:37:44Z")
Hi All, We are running 8 nodes Elasticsearch cluster(Version 1.5.2) with total 120 GB Heap Memory. We run a daemon after every 2 hours to derive some data, where we get intermittent(once in 6-7 days)issue while initial… --- ## [Timestamp is not parsing: grok](https://discuss.elastic.co/t/timestamp-is-not-parsing-grok/51188)
**Author:** [@shikha.agarwal1](https://discuss.elastic.co/u/shikha.agarwal1)\ **Replies:** 5\ **Last updated:** [May 31, 2016, 5:10pm UTC](https://discuss.elastic.co/t/timestamp-is-not-parsing-grok/51188 "2016-05-31T17:10:53Z")
I have flat file(jobs.log) which has below data 2016-05-25 17:52:11,467 \[INFO \] \[main\] \[FileName.java:50\] - Application: abc Rule: 123 Status: SUCCESS I want log time stamp to show in kibana, so I am trying to replace… --- ## [DSL query, fields not coming in same order in result](https://discuss.elastic.co/t/dsl-query-fields-not-coming-in-same-order-in-result/7907)
**Author:** [@sumitimes](https://discuss.elastic.co/u/sumitimes)\ **Replies:** 5\ **Last updated:** [June 10, 2012, 2:07pm UTC](https://discuss.elastic.co/t/dsl-query-fields-not-coming-in-same-order-in-result/7907 "2012-06-10T14:07:56Z")
I have a query like this the output expected is in order of fields specified. name (String) price (Double) year (Integer) but i am getting price year name so it is automatically getting sorted to pu… --- ## [OpenTelemetry agent ASP.NET export to APM-server not working](https://discuss.elastic.co/t/opentelemetry-agent-asp-net-export-to-apm-server-not-working/307189)
**Author:** [@michael6](https://discuss.elastic.co/u/michael6)\ **Replies:** 6\ **Last updated:** [June 15, 2022, 11:59am UTC](https://discuss.elastic.co/t/opentelemetry-agent-asp-net-export-to-apm-server-not-working/307189 "2022-06-15T11:59:40Z")
I'm trying to use OpenTelemetry to instrument a ASP.NET app and send the data to Elastic Cloud via the APM-server that comes with it. However I can't get the OpenTelemetry agent to send the data to elastic. Kibana versi… --- ## [Elastic Agent with ECK deployed stack - Fleet Manager problems](https://discuss.elastic.co/t/elastic-agent-with-eck-deployed-stack-fleet-manager-problems/246814)
**Author:** [@aguida79](https://discuss.elastic.co/u/aguida79)\ **Replies:** 6\ **Last updated:** [September 8, 2020, 11:54am UTC](https://discuss.elastic.co/t/elastic-agent-with-eck-deployed-stack-fleet-manager-problems/246814 "2020-09-08T11:54:41Z")
Hi, I'm trying to test the new Elastic Agent on a ECK deployed stack with security enabled, so Elastic Agent ca work with it. My yaml files: elasticsearch.yaml apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elastic… --- ## [Format bytes in templates pattern](https://discuss.elastic.co/t/format-bytes-in-templates-pattern/127211)
**Author:** [@zifou](https://discuss.elastic.co/u/zifou)\ **Replies:** 6\ **Last updated:** [April 9, 2018, 8:38am UTC](https://discuss.elastic.co/t/format-bytes-in-templates-pattern/127211 "2018-04-09T08:38:13Z")
Hi All, Can someone explain me how to add the format byte to my index template, because i need each day change each index to specify that OUT\_BYTES and IN\_BYTES is a byte field, here is my template. Another, all my new … --- ## [X-Pack on Elastic in the cloud](https://discuss.elastic.co/t/x-pack-on-elastic-in-the-cloud/66862)
**Author:** [@barry1](https://discuss.elastic.co/u/barry1)\ **Replies:** 6\ **Last updated:** [November 22, 2016, 3:16pm UTC](https://discuss.elastic.co/t/x-pack-on-elastic-in-the-cloud/66862 "2016-11-22T15:16:35Z")
I would like to test/use X-Pack on our Elastic cluster, but the plugin page says "Uploading plugins is only available with a premium subscription." Our account manager says it can be done using this Discuss forum? --- ## [Connection not established between logstash and filebeat](https://discuss.elastic.co/t/connection-not-established-between-logstash-and-filebeat/42168)
**Author:** [@Akash\_Katakam](https://discuss.elastic.co/u/Akash_Katakam)\ **Replies:** 6\ **Last updated:** [February 19, 2016, 7:55pm UTC](https://discuss.elastic.co/t/connection-not-established-between-logstash-and-filebeat/42168 "2016-02-19T19:55:44Z")
FIlebeat running on ubuntu 14.04 Elk is installed in windows 2008 server Logs are in ubuntu machine and i want to send my remote machine. my filebeat config and logstash configs are attached. input { beats { p… --- ## [Global fields not working](https://discuss.elastic.co/t/global-fields-not-working/62309)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 8\ **Last updated:** [October 13, 2016, 9:49pm UTC](https://discuss.elastic.co/t/global-fields-not-working/62309 "2016-10-13T21:49:52Z")
I am using this sample on filebeat.yml to set global fields for all prospectors but is not working, i just see on my docs local fields but not this global fields. I am using fb 5.0-beta1 shipper: fields\_under\_root: t… --- ## [Is increasing cluster max shards is the best way of managing indies](https://discuss.elastic.co/t/is-increasing-cluster-max-shards-is-the-best-way-of-managing-indies/195188)
**Author:** [@SCL\_ADMIN](https://discuss.elastic.co/u/SCL_ADMIN)\ **Replies:** 2\ **Last updated:** [August 16, 2019, 9:00am UTC](https://discuss.elastic.co/t/is-increasing-cluster-max-shards-is-the-best-way-of-managing-indies/195188 "2019-08-16T09:00:09Z")
Hello All Starting logstash gave this error: Aug 13 10:07:30 SCL-SIEM-01 logstash\[5784\]: \[2019-08-13T10:07:30,784\]\[WARN \]\[log stash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>4 00, :action… --- ## [Event correlation rule that compares fields between the two events](https://discuss.elastic.co/t/event-correlation-rule-that-compares-fields-between-the-two-events/295633)
**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\ **Replies:** 1\ **Last updated:** [February 3, 2022, 8:41pm UTC](https://discuss.elastic.co/t/event-correlation-rule-that-compares-fields-between-the-two-events/295633 "2022-02-03T20:41:47Z")
I am trying to create a rule that will determine if two VPN sessions were started for the same user from two different IP addresses without one session ending first. The problem I'm running into is that I can't figure … --- ## [Comparison between index size and doc source size](https://discuss.elastic.co/t/comparison-between-index-size-and-doc-source-size/328596)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 4\ **Last updated:** [March 27, 2023, 6:18pm UTC](https://discuss.elastic.co/t/comparison-between-index-size-and-doc-source-size/328596 "2023-03-27T18:18:20Z")
Hello, I have some questions regarding the mapper size plugin and how the size of the source of documents relate to the size of the index. So, I installed the mapper size plugin on a single-node Elasticsearch cluster, … --- ## [Store size 1,000 times the document byte size](https://discuss.elastic.co/t/store-size-1-000-times-the-document-byte-size/74258)
**Author:** [@bisoldi](https://discuss.elastic.co/u/bisoldi)\ **Replies:** 4\ **Last updated:** [February 9, 2017, 6:55pm UTC](https://discuss.elastic.co/t/store-size-1-000-times-the-document-byte-size/74258 "2017-02-09T18:55:23Z")
I am experiencing a roughly 1,000x increase in store.size over the document byte size. I've got a very simple mapping and I've compared my mapping to Elasticsearch's internal mapping and they are the same. So far, I h… --- ## [Older versions not available in apt repository](https://discuss.elastic.co/t/older-versions-not-available-in-apt-repository/68489)
**Author:** [@daveops](https://discuss.elastic.co/u/daveops)\ **Replies:** 4\ **Last updated:** [December 8, 2016, 11:20pm UTC](https://discuss.elastic.co/t/older-versions-not-available-in-apt-repository/68489 "2016-12-08T23:20:15Z")
With the release of 5.1.1 today, I found that the 5.0.2 packages are no longer available in the apt repositories. This has broken my builds because I'm pinning versions and it now fails to pull the version I have specifi… --- ## [Logstash tcp input doesn't work](https://discuss.elastic.co/t/logstash-tcp-input-doesnt-work/142134)
**Author:** [@hbceylan](https://discuss.elastic.co/u/hbceylan)\ **Replies:** 3\ **Last updated:** [July 31, 2018, 11:53am UTC](https://discuss.elastic.co/t/logstash-tcp-input-doesnt-work/142134 "2018-07-31T11:53:00Z")
Hi, I'm using logstash docker like below, but always say "Pipeline has terminated". What's the problem? docker run --name logstash -d -p 4560:4560 -p 4561:4561 --link elasticsearch:elasticsearch -v /opt/logstas… --- ## [Ngram behavior vs wildcard field type](https://discuss.elastic.co/t/ngram-behavior-vs-wildcard-field-type/302762)
**Author:** [@maratusa](https://discuss.elastic.co/u/maratusa)\ **Replies:** 7\ **Last updated:** [April 27, 2022, 4:45pm UTC](https://discuss.elastic.co/t/ngram-behavior-vs-wildcard-field-type/302762 "2022-04-27T16:45:33Z")
Hi, Please help me understand n-gram and wildcard field type behaviors. I am working on an application that offers a search by phone number. It will be a contain search. e.g. search for phone number containing "234890"… --- ## [Exclude file pattern not working correctly](https://discuss.elastic.co/t/exclude-file-pattern-not-working-correctly/145847)
**Author:** [@brjisc](https://discuss.elastic.co/u/brjisc)\ **Replies:** 1\ **Last updated:** [August 24, 2018, 5:50pm UTC](https://discuss.elastic.co/t/exclude-file-pattern-not-working-correctly/145847 "2018-08-24T17:50:06Z")
Hi, With this configuration: filebeat.inputs: type: log enabled: true paths: /tmp/cssd/\* exclude\_files: \['^error.+$','^.+error$','^bar.+','^.+error.+$','^.+.log.1','.\*.gz'\] Creating these files in the /tmp/c… --- ## [Analyzing a ratio of documents over time with Anomaly Detection](https://discuss.elastic.co/t/analyzing-a-ratio-of-documents-over-time-with-anomaly-detection/225255)
**Author:** [@richcollier](https://discuss.elastic.co/u/richcollier)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 5:33pm UTC](https://discuss.elastic.co/t/analyzing-a-ratio-of-documents-over-time-with-anomaly-detection/225255 "2020-03-26T17:33:32Z")
Although this idea has been around for a while - I've decided to document this technique because it recently came up in a discussion Problem statement: How to analyze the ratio of documents over time with Anomaly Detect… --- ## [Numeric value (18446744073709551615) out of range of long and Metric Beats](https://discuss.elastic.co/t/numeric-value-18446744073709551615-out-of-range-of-long-and-metric-beats/164229)
**Author:** [@snovak](https://discuss.elastic.co/u/snovak)\ **Replies:** 5\ **Last updated:** [February 8, 2019, 8:21pm UTC](https://discuss.elastic.co/t/numeric-value-18446744073709551615-out-of-range-of-long-and-metric-beats/164229 "2019-02-08T20:21:09Z")
I've found some other topics that I think match this issue but none of them are open for replies. It appears that we have had a MetricBeat submission that contained a value of -1, which has then caused the value to wrap… --- ## [Adding/removing master eligible nodes to/from existing cluster](https://discuss.elastic.co/t/adding-removing-master-eligible-nodes-to-from-existing-cluster/129890)
**Author:** [@laurentiusoica](https://discuss.elastic.co/u/laurentiusoica)\ **Replies:** 5\ **Last updated:** [April 30, 2018, 11:10pm UTC](https://discuss.elastic.co/t/adding-removing-master-eligible-nodes-to-from-existing-cluster/129890 "2018-04-30T23:10:46Z")
Hello, Considering an existing ES cluster with 3 master eligible nodes, what is the recommended steps to run in order to add 3 new master eligible nodes: add the nodes to the cluster and then update discovery.zen.mini… --- ## [Elastic map custom layer, picture as layer?](https://discuss.elastic.co/t/elastic-map-custom-layer-picture-as-layer/229638)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 2\ **Last updated:** [April 24, 2020, 1:39pm UTC](https://discuss.elastic.co/t/elastic-map-custom-layer-picture-as-layer/229638 "2020-04-24T13:39:56Z")
How can I add my own custom layer to elasticsearch map (image/vectormap)? Specifically I ahve a map of coverage of signal antenas and I want to update the map regularly / on daily basis and use it as bottom picture whe… --- ## [Index from pandas to Elastic Search Using BULK and Parallel BULK](https://discuss.elastic.co/t/index-from-pandas-to-elastic-search-using-bulk-and-parallel-bulk/176501)
**Author:** [@tanujsawant123](https://discuss.elastic.co/u/tanujsawant123)\ **Replies:** 2\ **Last updated:** [April 12, 2019, 4:54pm UTC](https://discuss.elastic.co/t/index-from-pandas-to-elastic-search-using-bulk-and-parallel-bulk/176501 "2019-04-12T16:54:03Z")
BELOW is my code and mapping to create a new index and load data from pandas to elastic. I have around 400K records with the potential to increase to 2 Millions. from elasticsearch.helpers import bulk , streaming\_bulk,… --- ## [Differences between Discover and Logs?](https://discuss.elastic.co/t/differences-between-discover-and-logs/161184)
**Author:** [@phr0gz](https://discuss.elastic.co/u/phr0gz)\ **Replies:** 4\ **Last updated:** [January 7, 2019, 4:15pm UTC](https://discuss.elastic.co/t/differences-between-discover-and-logs/161184 "2019-01-07T16:15:11Z")
Hello, The live stream feature seems really nice! But I'm a little bit confused about this functionality: It looks like the same as the "Discover" view...isn't it? We are already using the Elastic stack as a "big" far… --- ## [Jdbc input plugin, sql\_last\_value is always 0 (or 1 January 1970)](https://discuss.elastic.co/t/jdbc-input-plugin-sql-last-value-is-always-0-or-1-january-1970/116707)
**Author:** [@Mikhail](https://discuss.elastic.co/u/Mikhail)\ **Replies:** 1\ **Last updated:** [January 23, 2018, 6:39pm UTC](https://discuss.elastic.co/t/jdbc-input-plugin-sql-last-value-is-always-0-or-1-january-1970/116707 "2018-01-23T18:39:05Z")
Many hours are spent, many neurons are lost, a number of gray hairs are earned... All this in the battle with sql\_last\_value refreshment in .logstash\_jdbc\_last\_run file. My configuration: MS SQL Server database table -… --- ## [How to delete records of unassigned shards?](https://discuss.elastic.co/t/how-to-delete-records-of-unassigned-shards/53802)
**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\ **Replies:** 1\ **Last updated:** [June 23, 2016, 5:08pm UTC](https://discuss.elastic.co/t/how-to-delete-records-of-unassigned-shards/53802 "2016-06-23T17:08:09Z")
Hello All, My Elasticsearch cluster had a wobble. It's now back and all is well, except for having a bunch of shards being reported unassigned, those are indices that do not exist I believe. The cluster health is red… --- ## [Is there a faster way to upgrade ES?](https://discuss.elastic.co/t/is-there-a-faster-way-to-upgrade-es/26195)
**Author:** [@Daaku](https://discuss.elastic.co/u/Daaku)\ **Replies:** 5\ **Last updated:** [July 24, 2015, 11:26pm UTC](https://discuss.elastic.co/t/is-there-a-faster-way-to-upgrade-es/26195 "2015-07-24T23:26:42Z")
I have a few clusters with 150-200+ nodes (EC2 instances) running ES 1.3.2. Looking for a 'faster' way to upgrade these clusters to ES 1.5.2. Following recommendations for rolling upgrades may take me a few days. Can not… --- ## [Something want to know about logstash persisted queue](https://discuss.elastic.co/t/something-want-to-know-about-logstash-persisted-queue/109005)
**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\ **Replies:** 2\ **Last updated:** [November 29, 2017, 9:28am UTC](https://discuss.elastic.co/t/something-want-to-know-about-logstash-persisted-queue/109005 "2017-11-29T09:28:30Z")
Hi folks, Recently I checked the new version of Logstash, which is logstash 6.x, There are a new feature of queue based disk can instead of message broker like radis/rabbitMQ/kafaka etc.. My question is here: 1.If we… --- ## [Distributed Tracing question about how to implement](https://discuss.elastic.co/t/distributed-tracing-question-about-how-to-implement/204734)
**Author:** [@Ahchoo](https://discuss.elastic.co/u/Ahchoo)\ **Replies:** 7\ **Last updated:** [November 27, 2019, 9:08pm UTC](https://discuss.elastic.co/t/distributed-tracing-question-about-how-to-implement/204734 "2019-11-27T21:08:38Z")
Hello, I can't seem to get Distributed Tracing to work. Im starting to wonder if I don't understand Distributed Tracing correctly. In my frontend I am creating a Transaction and a few spans to cover some JS functions. … --- ## [How to count of nested inner\_hits documents?](https://discuss.elastic.co/t/how-to-count-of-nested-inner-hits-documents/139615)
**Author:** [@Approach](https://discuss.elastic.co/u/Approach)\ **Replies:** 1\ **Last updated:** [July 13, 2018, 10:51am UTC](https://discuss.elastic.co/t/how-to-count-of-nested-inner-hits-documents/139615 "2018-07-13T10:51:42Z")
Hi@all i have many companies and each company has many products. But how i get the count of all products. Query: GET /company/\_search { "from": 0, "size": 5, "\_source": false, "query": { … --- ## [Will filebeat be able read /dev/stdout and /dev/stderr?](https://discuss.elastic.co/t/will-filebeat-be-able-read-dev-stdout-and-dev-stderr/88880)
**Author:** [@skyrocknroll](https://discuss.elastic.co/u/skyrocknroll)\ **Replies:** 1\ **Last updated:** [June 10, 2017, 5:02pm UTC](https://discuss.elastic.co/t/will-filebeat-be-able-read-dev-stdout-and-dev-stderr/88880 "2017-06-10T17:02:21Z")
RUN ln -sf /dev/stdout /var/log/nginx/access.log \\ && ln -sf /dev/stderr /var/log/nginx/error.log I am using the above config to redirect nginx logs to stdout and stderr. In prospectors if i point to /dev/stdout & /de… --- ## [Windows 10 Install error](https://discuss.elastic.co/t/windows-10-install-error/39910)
**Author:** [@FRASER](https://discuss.elastic.co/u/FRASER)\ **Replies:** 7\ **Last updated:** [January 28, 2016, 7:33pm UTC](https://discuss.elastic.co/t/windows-10-install-error/39910 "2016-01-28T19:33:08Z")
Hi, When I run elasticsearch.bat I get the following error: Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch Thanks Fraser --- ## [Child node never connected if offline at startup of tribe](https://discuss.elastic.co/t/child-node-never-connected-if-offline-at-startup-of-tribe/27193)
**Author:** [@Espen\_Wang\_Andreasse](https://discuss.elastic.co/u/Espen_Wang_Andreasse)\ **Replies:** 7\ **Last updated:** [August 27, 2015, 10:27pm UTC](https://discuss.elastic.co/t/child-node-never-connected-if-offline-at-startup-of-tribe/27193 "2015-08-27T22:27:14Z")
Hi, Is it possible to get the tribe cluster/master to retry the initial connection to a child node/cluster, even after having established an connection to the rest of the tribe? If the child node/cluster is offline w… --- ## [Unable to Configure an index pattern](https://discuss.elastic.co/t/unable-to-configure-an-index-pattern/25017)
**Author:** [@Ashok](https://discuss.elastic.co/u/Ashok)\ **Replies:** 6\ **Last updated:** [July 8, 2015, 6:06am UTC](https://discuss.elastic.co/t/unable-to-configure-an-index-pattern/25017 "2015-07-08T06:06:43Z")
Hi, I am trying to Configure an index pattern in kibana.But as shown in screen shot unable to enter timestamp in text filed and my set up is done in windows --- ## [Synonym file support for ElasticSearch 5.x in AWS](https://discuss.elastic.co/t/synonym-file-support-for-elasticsearch-5-x-in-aws/105320)
**Author:** [@gautam\_gro](https://discuss.elastic.co/u/gautam_gro)\ **Replies:** 4\ **Last updated:** [October 26, 2017, 5:17am UTC](https://discuss.elastic.co/t/synonym-file-support-for-elasticsearch-5-x-in-aws/105320 "2017-10-26T05:17:06Z")
As we know, Elasticsearch supports synonyms through their synonym token filter, which expects a file of all the synonyms to be present at a particular location on the server filesystem. Is there a way I can configure th… --- ## [Logstash JSON parse error](https://discuss.elastic.co/t/logstash-json-parse-error/272533)
**Author:** [@Richard\_Phillips\_Roy](https://discuss.elastic.co/u/Richard_Phillips_Roy)\ **Replies:** 3\ **Last updated:** [May 11, 2021, 4:59pm UTC](https://discuss.elastic.co/t/logstash-json-parse-error/272533 "2021-05-11T16:59:49Z")
Hi, how do i fix this parsing error in logstash \[ERROR\] 2021-05-08 15:30:46.678 \[\[main\]\#\