# Top **URL:** https://discuss.elastic.co/top.md?page=677&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 678 --- ## [Stackoverflow on Elasticsearch file indexation with ingest-attachment](https://discuss.elastic.co/t/stackoverflow-on-elasticsearch-file-indexation-with-ingest-attachment/253455)
**Author:** [@Mathulbrich](https://discuss.elastic.co/u/Mathulbrich)\ **Replies:** 7\ **Last updated:** [November 4, 2020, 8:11pm UTC](https://discuss.elastic.co/t/stackoverflow-on-elasticsearch-file-indexation-with-ingest-attachment/253455 "2020-11-04T20:11:59Z")
Hi, Our company recently had some connectivity issues with Elasticsearch. Suddenly, on some days of the week the cluster had RED status and in the logs the only information found was that the node had been disconnected. … --- ## [Index and docs created in Elastic Search , not visible in Discover](https://discuss.elastic.co/t/index-and-docs-created-in-elastic-search-not-visible-in-discover/113320)
**Author:** [@Bruno\_Seznec](https://discuss.elastic.co/u/Bruno_Seznec)\ **Replies:** 7\ **Last updated:** [December 28, 2017, 3:11pm UTC](https://discuss.elastic.co/t/index-and-docs-created-in-elastic-search-not-visible-in-discover/113320 "2017-12-28T15:11:57Z")
Hi, What is the check list to have an ES index displayable in Kibana ? I've done created index pattern, refresh, nothing in Discover menu Config PC win10 ES V6 installed as a service. Kibana V6 RC2 Thanks Rgds Bru… --- ## [Tribe node fails to launch due to missing hunspell](https://discuss.elastic.co/t/tribe-node-fails-to-launch-due-to-missing-hunspell/40497)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 7\ **Last updated:** [January 31, 2016, 9:45am UTC](https://discuss.elastic.co/t/tribe-node-fails-to-launch-due-to-missing-hunspell/40497 "2016-01-31T09:45:26Z")
Would really appricaite if someone could hint me as to why an attempt to launch a tribe node fails with ref. to non-existing hunspell. How to I find out why the tribe thinks it needs such, when none of the nodes in eith… --- ## [How do i enable logging for elasticsearch java client](https://discuss.elastic.co/t/how-do-i-enable-logging-for-elasticsearch-java-client/22655)
**Author:** [@Sunil](https://discuss.elastic.co/u/Sunil)\ **Replies:** 1\ **Last updated:** [March 13, 2015, 6:25pm UTC](https://discuss.elastic.co/t/how-do-i-enable-logging-for-elasticsearch-java-client/22655 "2015-03-13T18:25:08Z")
I built this standalone Java application that is connecting to elasticSearch using Transport client on my local machine. I am trying to figure out how to enable logging in it (This is to help me debug a wiered stre… --- ## [Kibana 6.4.1 start error on Linux](https://discuss.elastic.co/t/kibana-6-4-1-start-error-on-linux/153062)
**Author:** [@lemei](https://discuss.elastic.co/u/lemei)\ **Replies:** 2\ **Last updated:** [October 18, 2018, 7:15pm UTC](https://discuss.elastic.co/t/kibana-6-4-1-start-error-on-linux/153062 "2018-10-18T19:15:47Z")
Hi, I download kibana-6.4.1-darwin-x86\_64 and meet this issue when I tried to start it. ./bin/kibana: line 24: /opt/kibana-6.4.1-darwin-x86\_64/bin/../node/bin/node: cannot execute binary file: Exec format error ./bin/… --- ## [Stored logs and compression](https://discuss.elastic.co/t/stored-logs-and-compression/101294)
**Author:** [@sbampa](https://discuss.elastic.co/u/sbampa)\ **Replies:** 2\ **Last updated:** [September 21, 2017, 9:30am UTC](https://discuss.elastic.co/t/stored-logs-and-compression/101294 "2017-09-21T09:30:26Z")
Hi all, can someone help me with compression data in ES? I'm storing around 100 GB per day, with a retention of 90 days. I need to compress the data. Already set index.codec: best\_compression Some tips ?? --- ## [Cannot Start .\\elasticsearch.bat on windows](https://discuss.elastic.co/t/cannot-start-elasticsearch-bat-on-windows/315037)
**Author:** [@miawu8](https://discuss.elastic.co/u/miawu8)\ **Replies:** 4\ **Last updated:** [September 24, 2022, 5:17am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-bat-on-windows/315037 "2022-09-24T05:17:02Z")
Last month I installed V8.3.2 on windows 2022, everything was ok, but today I stop and deleted V8.3.2, and downloaded 8.4.2 from the official website, use the same config, the system reported an error and could not start… --- ## [Beats / Kibana custom format isn't supported](https://discuss.elastic.co/t/beats-kibana-custom-format-isnt-supported/83314)
**Author:** [@bouke](https://discuss.elastic.co/u/bouke)\ **Replies:** 1\ **Last updated:** [April 24, 2017, 9:53am UTC](https://discuss.elastic.co/t/beats-kibana-custom-format-isnt-supported/83314 "2017-04-24T09:53:42Z")
I'm experimenting with metricbeats on a raspberry pi. Set up using the nightly build seems to work fine, and data is being indexed correctly. However, loading the default dashboards and index pattern does not seem to w… --- ## [X-Pack Certgen - unable to set key password after creation](https://discuss.elastic.co/t/x-pack-certgen-unable-to-set-key-password-after-creation/104336)
**Author:** [@oysteila](https://discuss.elastic.co/u/oysteila)\ **Replies:** 8\ **Last updated:** [October 18, 2017, 2:13pm UTC](https://discuss.elastic.co/t/x-pack-certgen-unable-to-set-key-password-after-creation/104336 "2017-10-18T14:13:38Z")
I'm trying to set the key password for the CA I created, using this command: certgen --key ca.key --pass The command fails with the error message: "Option(s) \[key\] are unavailable given other options on the command l… --- ## [Cluster Setup Windows 2012 R2 VMs](https://discuss.elastic.co/t/cluster-setup-windows-2012-r2-vms/46258)
**Author:** [@abogomolov](https://discuss.elastic.co/u/abogomolov)\ **Replies:** 8\ **Last updated:** [April 5, 2016, 10:08pm UTC](https://discuss.elastic.co/t/cluster-setup-windows-2012-r2-vms/46258 "2016-04-05T22:08:35Z")
Hi, I'm new to ES. I'm trying to set up a 2 node cluster but after install on two separate VMs on the same network the two nodes do not see each other. Here is the output from the two VMs, also I was able to browse a d… --- ## [How to configure proxy setting for s3 repository plugins](https://discuss.elastic.co/t/how-to-configure-proxy-setting-for-s3-repository-plugins/137012)
**Author:** [@BKS089](https://discuss.elastic.co/u/BKS089)\ **Replies:** 3\ **Last updated:** [July 2, 2018, 1:06pm UTC](https://discuss.elastic.co/t/how-to-configure-proxy-setting-for-s3-repository-plugins/137012 "2018-07-02T13:06:09Z")
I have configured below setting echo "proxy.elasticsearch.internal" | ./elasticsearch-keystore add --stdin s3.client.default.proxy.host echo "3128" | ./elasticsearch-keystore add --stdin s3.client.default.proxy.por… --- ## [Create a drop down menu or list to display specific logs](https://discuss.elastic.co/t/create-a-drop-down-menu-or-list-to-display-specific-logs/102492)
**Author:** [@ashvita](https://discuss.elastic.co/u/ashvita)\ **Replies:** 3\ **Last updated:** [October 19, 2017, 7:19pm UTC](https://discuss.elastic.co/t/create-a-drop-down-menu-or-list-to-display-specific-logs/102492 "2017-10-19T19:19:52Z")
Hi, I receive logs from various different IPs. I want to create a dashboard where I can select the IP from drop down menu or create a list and then a time window to select which logs I want to see and from which IP. W… --- ## [Elasticsearch not able to identify the time field defined in Fluentd](https://discuss.elastic.co/t/elasticsearch-not-able-to-identify-the-time-field-defined-in-fluentd/272594)
**Author:** [@saurabh122](https://discuss.elastic.co/u/saurabh122)\ **Replies:** 6\ **Last updated:** [May 14, 2021, 3:49pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-identify-the-time-field-defined-in-fluentd/272594 "2021-05-14T15:49:40Z")
Issue: I have the logs getting logged into my log file and each log entry has the time information. The time field in the log is not getting recognized in Elasticssearch and hence I am not able to select this time inform… --- ## [How to give read only privileges in the Index management module?](https://discuss.elastic.co/t/how-to-give-read-only-privileges-in-the-index-management-module/247155)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 6\ **Last updated:** [September 16, 2020, 7:05am UTC](https://discuss.elastic.co/t/how-to-give-read-only-privileges-in-the-index-management-module/247155 "2020-09-16T07:05:05Z")
Hello, How can I give read-only permissions to the "Index Management" module? So users can search for indices, but not delete, freeze, flush, etc. The use case is, that I want to give users permission to create index … --- ## [Problem with logstash filter to parser logs from apache reverse proxy (Solved)](https://discuss.elastic.co/t/problem-with-logstash-filter-to-parser-logs-from-apache-reverse-proxy-solved/64380)
**Author:** [@Lonck](https://discuss.elastic.co/u/Lonck)\ **Replies:** 6\ **Last updated:** [October 31, 2016, 10:14pm UTC](https://discuss.elastic.co/t/problem-with-logstash-filter-to-parser-logs-from-apache-reverse-proxy-solved/64380 "2016-10-31T22:14:12Z")
Hi for all I have an Apache server with mod\_proxy enabled that makes the reverse proxy function. For each domain thare are 3 log files (in /var/log/apache2/) that records the access, errors and transfers. See the examp… --- ## [Logstash dies after about 8 hours](https://discuss.elastic.co/t/logstash-dies-after-about-8-hours/44931)
**Author:** [@snipervelli](https://discuss.elastic.co/u/snipervelli)\ **Replies:** 6\ **Last updated:** [March 24, 2016, 1:37am UTC](https://discuss.elastic.co/t/logstash-dies-after-about-8-hours/44931 "2016-03-24T01:37:21Z")
Hi everyone, I am new to ELK and i am running ELK on a centos 7 VM with about 16GB of Mem and 6virtual sockets with 2 per core. Logstash 2.2.2 Elasticsearch 2.2.1 and Kibana 4.4.2 are all on the latest versions. Everyt… --- ## [Kibana not starting fatal error is coming up](https://discuss.elastic.co/t/kibana-not-starting-fatal-error-is-coming-up/279390)
**Author:** [@0d153a83fd88577dba87](https://discuss.elastic.co/u/0d153a83fd88577dba87)\ **Replies:** 4\ **Last updated:** [July 22, 2021, 3:38pm UTC](https://discuss.elastic.co/t/kibana-not-starting-fatal-error-is-coming-up/279390 "2021-07-22T15:38:03Z")
log \[15:12:03.239\] \[fatal\]\[root\] Error: Cannot find module '../../../task\_manager/server' Require stack: - /etc/default/kibana-7.13.0-linux-x86\_64/x-pack/plugins/actions/server/cleanup\_failed\_executions/ensure\_schedule… --- ## [Kibana: NPM Permission Error at Start](https://discuss.elastic.co/t/kibana-npm-permission-error-at-start/89719)
**Author:** [@ccampbell](https://discuss.elastic.co/u/ccampbell)\ **Replies:** 4\ **Last updated:** [June 20, 2017, 12:57pm UTC](https://discuss.elastic.co/t/kibana-npm-permission-error-at-start/89719 "2017-06-20T12:57:24Z")
I've recently installed Kibana 5.4.1 on 3 new Windows 2012 R2 servers. On the first server, Kibana install went normally, I installed Kibana as a Windows service using NSSM, the service is functioning normally. On the o… --- ## [Login is currently disabled because the license could not be determined. Please check that Elasticsearch is running, then refresh this page](https://discuss.elastic.co/t/login-is-currently-disabled-because-the-license-could-not-be-determined-please-check-that-elasticsearch-is-running-then-refresh-this-page/77803)
**Author:** [@Steven\_Williams](https://discuss.elastic.co/u/Steven_Williams)\ **Replies:** 2\ **Last updated:** [March 8, 2017, 7:48pm UTC](https://discuss.elastic.co/t/login-is-currently-disabled-because-the-license-could-not-be-determined-please-check-that-elasticsearch-is-running-then-refresh-this-page/77803 "2017-03-08T19:48:15Z")
UPDATE 08-03-2017 11:38 I have now sorted the below issue. I had ES running on my internal IP (192.168...) I changed it to localhost, and restarted Kibana and ES, and it now works. I will leave the original issue bel… --- ## [Vizualize Netflow data in Kibana (used network trafic)](https://discuss.elastic.co/t/vizualize-netflow-data-in-kibana-used-network-trafic/287645)
**Author:** [@gmbynkrkrqz](https://discuss.elastic.co/u/gmbynkrkrqz)\ **Replies:** 3\ **Last updated:** [November 5, 2021, 8:03am UTC](https://discuss.elastic.co/t/vizualize-netflow-data-in-kibana-used-network-trafic/287645 "2021-11-05T08:03:18Z")
Hi, I would like to create a dashboard on Kibana using the OPNsense Netflow logs to vizualize the bandwith used per source IP. Here is my logstash config. input { # OPNsense netflow logs input udp { port =\> 1… --- ## [Make Logstash drop documents on 403](https://discuss.elastic.co/t/make-logstash-drop-documents-on-403/149977)
**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\ **Replies:** 8\ **Last updated:** [October 19, 2018, 5:24am UTC](https://discuss.elastic.co/t/make-logstash-drop-documents-on-403/149977 "2018-10-19T05:24:55Z")
Greetings Recently I started using forcemerge on my old indices. However, I found out that occasionally, Logstash writes into the older indices, increasing the segment count, so the curator has to merge them again on th… --- ## [Elasticsearch and Guice](https://discuss.elastic.co/t/elasticsearch-and-guice/57822)
**Author:** [@psynaps3](https://discuss.elastic.co/u/psynaps3)\ **Replies:** 3\ **Last updated:** [August 12, 2016, 7:27am UTC](https://discuss.elastic.co/t/elasticsearch-and-guice/57822 "2016-08-12T07:27:04Z")
Hi, Just wanted to know if elasticsearch is moving away from using Guice to wire dependencies? If yes, are there any discussion posts where I can read more about the reasons behind it? Thanks. --- ## [Custom time filter](https://discuss.elastic.co/t/custom-time-filter/1792)
**Author:** [@anoban](https://discuss.elastic.co/u/anoban)\ **Replies:** 3\ **Last updated:** [June 17, 2015, 3:42am UTC](https://discuss.elastic.co/t/custom-time-filter/1792 "2015-06-17T03:42:35Z")
Is it on the cards to be able to create custom time filters. For example I'd like to monitor services in a region for which a "day" means 8:30am - 6:30pm Another region would be 8.30am - 4.30 am the next day. Can th… --- ## [\[ConnectionError\]: unable to verify the first certificate](https://discuss.elastic.co/t/connectionerror-unable-to-verify-the-first-certificate/306708)
**Author:** [@Jaep](https://discuss.elastic.co/u/Jaep)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 7:19am UTC](https://discuss.elastic.co/t/connectionerror-unable-to-verify-the-first-certificate/306708 "2022-06-17T07:19:41Z")
I'm currently trying to setup kibana together with elasticSearch within the same docker-compose. In order to avoid any issue with the SSL certificates, I generated a "real" (not self signed) certificate that I'm using o… --- ## [Kibana throwing errors behind a load balancer](https://discuss.elastic.co/t/kibana-throwing-errors-behind-a-load-balancer/214567)
**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\ **Replies:** 2\ **Last updated:** [February 10, 2020, 9:20pm UTC](https://discuss.elastic.co/t/kibana-throwing-errors-behind-a-load-balancer/214567 "2020-02-10T21:20:00Z")
Hello, I have been having some issues where Kibana is throwing me "clear your session" errors User enter's Kibana, loads a dashboard, a few minutes pass, error occurs Setup: F5 hardware load balancer ----- --------- \> … --- ## [Best practice to track data loss when sending data to ElasticSeach](https://discuss.elastic.co/t/best-practice-to-track-data-loss-when-sending-data-to-elasticseach/126471)
**Author:** [@raychen11](https://discuss.elastic.co/u/raychen11)\ **Replies:** 4\ **Last updated:** [April 9, 2018, 5:14pm UTC](https://discuss.elastic.co/t/best-practice-to-track-data-loss-when-sending-data-to-elasticseach/126471 "2018-04-09T17:14:36Z")
Wondering if we have any suitable ways to check the data loss when sending data via Logstash to ElasticSearch endpoint. Ways I know check logstash.log file to see if any errors are there 1.1 Works but seems to need a… --- ## [Setup Elasticsearch SlowLog Alerts in Elastic Cloud](https://discuss.elastic.co/t/setup-elasticsearch-slowlog-alerts-in-elastic-cloud/283085)
**Author:** [@Stef\_Nestor](https://discuss.elastic.co/u/Stef_Nestor)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 4:38pm UTC](https://discuss.elastic.co/t/setup-elasticsearch-slowlog-alerts-in-elastic-cloud/283085 "2021-10-18T16:38:02Z")
Is there a way to setup email alerts for SlowLogs in Elasticsearch on Elastic Cloud? --- ## [Kibana 5.6 - Error importing Kibana dashboards: fail to get the Kibana version](https://discuss.elastic.co/t/kibana-5-6-error-importing-kibana-dashboards-fail-to-get-the-kibana-version/115365)
**Author:** [@jdambly](https://discuss.elastic.co/u/jdambly)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 2:19am UTC](https://discuss.elastic.co/t/kibana-5-6-error-importing-kibana-dashboards-fail-to-get-the-kibana-version/115365 "2018-01-17T02:19:48Z")
for some reason I cannot load the sample dashboard, and ideas on how I can fix this? I am using kibana 5.6 ansible@atlas01:~$ sudo /usr/share/auditbeat/bin/auditbeat setup -E setup.dashboards.kibana\_index=.kibana-5.x -E… --- ## [io.netty.util.concurrent.MultithreadEventExecutorGroup.newChild](https://discuss.elastic.co/t/io-netty-util-concurrent-multithreadeventexecutorgroup-newchild/80828)
**Author:** [@Aromadz](https://discuss.elastic.co/u/Aromadz)\ **Replies:** 1\ **Last updated:** [April 1, 2017, 7:19pm UTC](https://discuss.elastic.co/t/io-netty-util-concurrent-multithreadeventexecutorgroup-newchild/80828 "2017-04-01T19:19:35Z")
Hi. I am getting following error if I use datastax(Cassandra driver) with Elasticsearch Transport client. Does this have to do with race conditons ? Could you please provide some advice, solutions or documentations ? jav… --- ## [How to pass encrypted USerName and Password in Logstash](https://discuss.elastic.co/t/how-to-pass-encrypted-username-and-password-in-logstash/132771)
**Author:** [@Sekhar1](https://discuss.elastic.co/u/Sekhar1)\ **Replies:** 3\ **Last updated:** [May 22, 2018, 10:41am UTC](https://discuss.elastic.co/t/how-to-pass-encrypted-username-and-password-in-logstash/132771 "2018-05-22T10:41:37Z")
Elastic Search Version 6.0.0 Logstash version 6.0.0 logstash.conf file input { jdbc { jdbc\_connection\_string =\> "jdbc:postgresql://DbIP:port/DatabaseName" jdbc\_user =\> "dbuser" jdbc\_password =\> "dbpassword" jdbc\_… --- ## [How to do parallel filter search of 1M queries in minimal time?](https://discuss.elastic.co/t/how-to-do-parallel-filter-search-of-1m-queries-in-minimal-time/282023)
**Author:** [@elastic\_yogi](https://discuss.elastic.co/u/elastic_yogi)\ **Replies:** 5\ **Last updated:** [August 24, 2021, 8:43pm UTC](https://discuss.elastic.co/t/how-to-do-parallel-filter-search-of-1m-queries-in-minimal-time/282023 "2021-08-24T20:43:25Z")
Hi, I would like to search 1M filter queries in parallel in order to reduce the search time. This means a boolean query with 1M filter values, an no ordering is necessary. My index size is about 1GB, and I've stored ever… --- ## [Searching multiple index with different fields](https://discuss.elastic.co/t/searching-multiple-index-with-different-fields/173485)
**Author:** [@Omprakash\_Verma](https://discuss.elastic.co/u/Omprakash_Verma)\ **Replies:** 5\ **Last updated:** [March 26, 2019, 10:19am UTC](https://discuss.elastic.co/t/searching-multiple-index-with-different-fields/173485 "2019-03-26T10:19:08Z")
Hi, We are using ES and getting response properly for 1 index with search fields. I need suggestions of following : Problem : I have different objects like contact, account have records which is searchable by in accoun… --- ## [Cannot telnet the dedicated master nodes on port 9200 after configuration](https://discuss.elastic.co/t/cannot-telnet-the-dedicated-master-nodes-on-port-9200-after-configuration/62928)
**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\ **Replies:** 5\ **Last updated:** [October 14, 2016, 6:17am UTC](https://discuss.elastic.co/t/cannot-telnet-the-dedicated-master-nodes-on-port-9200-after-configuration/62928 "2016-10-14T06:17:50Z")
Hi, I want an architecture with three dedicated master node and 4 dedicated data node with one Load balance node (all in one cluster). For this I configured the the first dedicated master node node.data: false Whe… --- ## [Using a score threshold](https://discuss.elastic.co/t/using-a-score-threshold/3963)
**Author:** [@Rossini](https://discuss.elastic.co/u/Rossini)\ **Replies:** 5\ **Last updated:** [February 24, 2011, 1:54pm UTC](https://discuss.elastic.co/t/using-a-score-threshold/3963 "2011-02-24T13:54:00Z")
Hello Guys, I have a legacy system based on Solr 1.2 and trying to port it to ES. One of the features of the system is the possibility to create a "context" inside your index, a "context" is a search in the inde… --- ## [Make search bar persistent](https://discuss.elastic.co/t/make-search-bar-persistent/121065)
**Author:** [@nesretep](https://discuss.elastic.co/u/nesretep)\ **Replies:** 7\ **Last updated:** [March 8, 2018, 2:22pm UTC](https://discuss.elastic.co/t/make-search-bar-persistent/121065 "2018-03-08T14:22:27Z")
Hi there Here is another post concerning the need for a persistent search bar like the pinned filters when jumping from one dashboad to another dashboard. Am I really the only one in the world thinking that this would … --- ## [Kibana's stack-monitoring partly broken after stack upgrade from 7.13 to 7.15](https://discuss.elastic.co/t/kibanas-stack-monitoring-partly-broken-after-stack-upgrade-from-7-13-to-7-15/286183)
**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\ **Replies:** 8\ **Last updated:** [December 17, 2021, 9:54am UTC](https://discuss.elastic.co/t/kibanas-stack-monitoring-partly-broken-after-stack-upgrade-from-7-13-to-7-15/286183 "2021-12-17T09:54:36Z")
Hello. We upgraded our Elastic stack (Elasticsearch nodes, logstash, beats, kibana) from 7.13 to 7.15.0. Everything is working well except that in Kibana, Stack Monitoring (Cluster Overview) we are getting some weird ti… --- ## [Can't connect to ElasticSearch after X-pack install](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-after-x-pack-install/119062)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 8\ **Last updated:** [February 9, 2018, 2:57pm UTC](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-after-x-pack-install/119062 "2018-02-09T14:57:53Z")
Hello. I just follow steps to configure x-pack with Logstash (\[Installing X-pack In Logsatsh\])(Installing X-Pack in Logstash | Logstash Reference \[6.2\] | Elastic) But after this, my logstash pipeline doesn't work anymor… --- ## [Invalid format (illegal\_argument\_exception)](https://discuss.elastic.co/t/invalid-format-illegal-argument-exception/112422)
**Author:** [@Aman\_Verma1](https://discuss.elastic.co/u/Aman_Verma1)\ **Replies:** 1\ **Last updated:** [January 1, 2018, 3:10pm UTC](https://discuss.elastic.co/t/invalid-format-illegal-argument-exception/112422 "2018-01-01T15:10:40Z")
Can someone help me understand the underlying issue here. I am using kv filter to parse URL query parameters and pushing them to dynamically named indexes. input { beats { port =\> 5045 } } filter { grok { .… --- ## [If elseif else expression in conf - how to use many of them](https://discuss.elastic.co/t/if-elseif-else-expression-in-conf-how-to-use-many-of-them/165357)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 2\ **Last updated:** [January 23, 2019, 9:22am UTC](https://discuss.elastic.co/t/if-elseif-else-expression-in-conf-how-to-use-many-of-them/165357 "2019-01-23T09:22:38Z")
Hi all, question: I want to use many if blocks: is this statement ok or do I need always "else" to end the "if" expression? if "Resource" in \[Error\_Code\]{ mutate {add\_tag =\> "Recource"} } else if "State" in \[Err… --- ## [Sending data to elasticsearch with json file using CURL, meet records number limitation](https://discuss.elastic.co/t/sending-data-to-elasticsearch-with-json-file-using-curl-meet-records-number-limitation/106789)
**Author:** [@permanz](https://discuss.elastic.co/u/permanz)\ **Replies:** 2\ **Last updated:** [November 24, 2017, 10:18am UTC](https://discuss.elastic.co/t/sending-data-to-elasticsearch-with-json-file-using-curl-meet-records-number-limitation/106789 "2017-11-24T10:18:51Z")
Hi All, I want to using json file to send data to elasticsearch with curl, but got problem with limited records number in json file. Elasticsearch version: 5.6.2, Memory: 16G, Single node with 5 shards. using: curl -X… --- ## [How to translate the format from byte to MB/GB in Metricbeat?](https://discuss.elastic.co/t/how-to-translate-the-format-from-byte-to-mb-gb-in-metricbeat/68388)
**Author:** [@sitanxin](https://discuss.elastic.co/u/sitanxin)\ **Replies:** 2\ **Last updated:** [December 8, 2016, 2:50am UTC](https://discuss.elastic.co/t/how-to-translate-the-format-from-byte-to-mb-gb-in-metricbeat/68388 "2016-12-08T02:50:25Z")
Hi All, In metricbeat, we find there are too many byte format data. But we hope to display it in MB or GB, since the byte is too long and not good to show. Do you have any idea we should do? E.g.: system.memory.swap.… --- ## [Shard repeat to be UNASSIGNED](https://discuss.elastic.co/t/shard-repeat-to-be-unassigned/83975)
**Author:** [@Yong\_Zhang](https://discuss.elastic.co/u/Yong_Zhang)\ **Replies:** 4\ **Last updated:** [May 2, 2017, 4:45am UTC](https://discuss.elastic.co/t/shard-repeat-to-be-unassigned/83975 "2017-05-02T04:45:21Z")
I have the latest index devops-2017.04.28, but cluster health will turn into red status no more than 30 minutes since there're UNASSIGNED shards in this index, then I XDELETE index devops-2017.04.28, cluster state turns … --- ## [What is the difference between using "keyword" tokenizer and "not\_analyzed"](https://discuss.elastic.co/t/what-is-the-difference-between-using-keyword-tokenizer-and-not-analyzed/50870)
**Author:** [@photonic\_world\_2](https://discuss.elastic.co/u/photonic_world_2)\ **Replies:** 4\ **Last updated:** [May 26, 2016, 7:24pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-using-keyword-tokenizer-and-not-analyzed/50870 "2016-05-26T19:24:49Z")
Hi, What is the difference between using "keyword" tokenizer and "not\_analyzed" on the fields? Does either provider better performance in aggregations compared with the other if the field size is the same (for e.g:… --- ## [Using data in Elasticsearch database directly for machine learning](https://discuss.elastic.co/t/using-data-in-elasticsearch-database-directly-for-machine-learning/106456)
**Author:** [@anomalyml](https://discuss.elastic.co/u/anomalyml)\ **Replies:** 6\ **Last updated:** [November 7, 2017, 3:07pm UTC](https://discuss.elastic.co/t/using-data-in-elasticsearch-database-directly-for-machine-learning/106456 "2017-11-07T15:07:32Z")
Hi, I'm using the machine learning pack so far as below: I store the data to be analysed in a csv file format. I create required mappings using the console window in Kibana's 'Dev Tools' tab. I execute a custom script… --- ## [Création d'un id elasticsearch d'elements transféré dans logstash](https://discuss.elastic.co/t/creation-dun-id-elasticsearch-delements-transfere-dans-logstash/42828)
**Author:** [@OVS](https://discuss.elastic.co/u/OVS)\ **Replies:** 6\ **Last updated:** [March 3, 2016, 9:13am UTC](https://discuss.elastic.co/t/creation-dun-id-elasticsearch-delements-transfere-dans-logstash/42828 "2016-03-03T09:13:18Z")
Bonjour, Je suis entrain de monter en compétence sur ELK. je voudrais effectuer un traitement de log . voici le contexte : j'ai deux entrées contenant deux log (chaque log contient des centaines de lignes) ce que je so… --- ## [\[Logstash\] Insufficient memory for the Java Runtime Environment to continue](https://discuss.elastic.co/t/logstash-insufficient-memory-for-the-java-runtime-environment-to-continue/255084)
**Author:** [@Albertoares](https://discuss.elastic.co/u/Albertoares)\ **Replies:** 3\ **Last updated:** [November 18, 2020, 3:53pm UTC](https://discuss.elastic.co/t/logstash-insufficient-memory-for-the-java-runtime-environment-to-continue/255084 "2020-11-18T15:53:06Z")
Hi everyone, I have a hard time with logstash service. My server was set up to send filebeat to a kafka server and everything was fine until yesterday where I had the following error when debugging logstash: \` OpenJDK … --- ## [How to read XML format within a .log file](https://discuss.elastic.co/t/how-to-read-xml-format-within-a-log-file/119999)
**Author:** [@garcesdavid](https://discuss.elastic.co/u/garcesdavid)\ **Replies:** 3\ **Last updated:** [February 16, 2018, 7:24am UTC](https://discuss.elastic.co/t/how-to-read-xml-format-within-a-log-file/119999 "2018-02-16T07:24:37Z")
Hi all :slight\_smile: I have an app that writes XML format in a .log file per transaction it receive. So basically, this is the XML format: \ \
**Author:** [@L8apex32](https://discuss.elastic.co/u/L8apex32)\ **Replies:** 0\ **Last updated:** [May 19, 2016, 2:43pm UTC](https://discuss.elastic.co/t/allow-tab-as-separator-in-grok-patterns-file/50447 "2016-05-19T14:43:22Z") The current docs require a space to separate the symbol from the semantic in a grok patterns file. This makes the patterns file less readable than it could be. Can we consider changing the spec from " " to the equival… --- ## [Unable to get back into Watcher section of Kibana](https://discuss.elastic.co/t/unable-to-get-back-into-watcher-section-of-kibana/139974)
**Author:** [@Rob2](https://discuss.elastic.co/u/Rob2)\ **Replies:** 7\ **Last updated:** [July 19, 2018, 8:20am UTC](https://discuss.elastic.co/t/unable-to-get-back-into-watcher-section-of-kibana/139974 "2018-07-19T08:20:59Z")
I saved a change to an advanced watch (trying to add a Slack action) and now have a Watcher: Error 400 Bad Request: json argument must contain an actionJson.slack.message.to property error every time I click on Watcher… --- ## [Elasticsearch plugin installation error](https://discuss.elastic.co/t/elasticsearch-plugin-installation-error/96386)
**Author:** [@groot](https://discuss.elastic.co/u/groot)\ **Replies:** 1\ **Last updated:** [August 9, 2017, 7:33am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-installation-error/96386 "2017-08-09T07:33:36Z")
Hi , While I’m try to install a package such “license & shield” via command “bin/elasticsearch-plugin install” I’m getting error : ERROR: Unknown plugin license I tried to install the packed as written in your documen… [Previous page](https://discuss.elastic.co/top.md?page=676&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=678&per_page=50&period=all)