# Top

**URL:** https://discuss.elastic.co/top.md?page=689&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 690

---

## [Logstash starts but doesn’t do anything](https://discuss.elastic.co/t/logstash-starts-but-doesn-t-do-anything/291637)

<div class="topic-metadata">

**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\
**Replies:** 4\
**Last updated:** [December 14, 2021, 2:06pm UTC](https://discuss.elastic.co/t/logstash-starts-but-doesn-t-do-anything/291637 "2021-12-14T14:06:51Z")

</div>

Im trying to get some data in my logstash but my service doesn't seem to work properly. When I check my logstash status I get the following: ● logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.se…

---

## [Optimize elasticsearch segment merge](https://discuss.elastic.co/t/optimize-elasticsearch-segment-merge/226327)

<div class="topic-metadata">

**Author:** [@quweiyu](https://discuss.elastic.co/u/quweiyu)\
**Replies:** 4\
**Last updated:** [April 3, 2020, 11:54am UTC](https://discuss.elastic.co/t/optimize-elasticsearch-segment-merge/226327 "2020-04-03T11:54:44Z")

</div>

All, We are running an elasticsearch load (48K documents / mins with elasticsearch 6.5) for 24 hours. There are 32 active main shards for each 8 hours (no replica shard). Here is what we see, Load runs well at the beg…

---

## [Logstash Grok Filter \_tags vs \_fields](https://discuss.elastic.co/t/logstash-grok-filter--tags-vs--fields/75026)

<div class="topic-metadata">

**Author:** [@spravn789](https://discuss.elastic.co/u/spravn789)\
**Replies:** 4\
**Last updated:** [February 17, 2017, 1:19pm UTC](https://discuss.elastic.co/t/logstash-grok-filter--tags-vs--fields/75026 "2017-02-17T13:19:38Z")

</div>

Dear All, Have few queries as follows, Requirement is to remove the tag/field Bwpayload and to add message, program and path as tags in case of grokparsefailure. i am confused about either to use remove\_tag or remov…

---

## [Setting up elasticsearch and kibana behind a single AWS application load balancer (on http)](https://discuss.elastic.co/t/setting-up-elasticsearch-and-kibana-behind-a-single-aws-application-load-balancer-on-http/243541)

<div class="topic-metadata">

**Author:** [@Deepak\_Atrey](https://discuss.elastic.co/u/Deepak_Atrey)\
**Replies:** 2\
**Last updated:** [August 12, 2020, 5:03pm UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-and-kibana-behind-a-single-aws-application-load-balancer-on-http/243541 "2020-08-12T17:03:24Z")

</div>

Hi Experts, I am setting up the elasticsearch and kibana on amazon ECS cluster. I am able to run the elasticsearch and kibana from official docker images (v7.8.1) on Ec2 nodes. I have configured the elasticsearch targ…

---

## [Java API Highlighting](https://discuss.elastic.co/t/java-api-highlighting/20591)

<div class="topic-metadata">

**Author:** [@William\_Bowen](https://discuss.elastic.co/u/William_Bowen)\
**Replies:** 1\
**Last updated:** [April 20, 2017, 11:53am UTC](https://discuss.elastic.co/t/java-api-highlighting/20591 "2017-04-20T11:53:03Z")

</div>

I'm new to Elasticsearch and I have two questions. I've done quite a bit of Google searching and looked at the Elasticsearch tests for guidance, but I'm not getting the desired result. I'm querying an Elasticsearc…

---

## [Packetbeat: Disable request parameters from http request to Elasticsearch](https://discuss.elastic.co/t/packetbeat-disable-request-parameters-from-http-request-to-elasticsearch/52295)

<div class="topic-metadata">

**Author:** [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\
**Replies:** 7\
**Last updated:** [June 16, 2016, 3:02am UTC](https://discuss.elastic.co/t/packetbeat-disable-request-parameters-from-http-request-to-elasticsearch/52295 "2016-06-16T03:02:59Z")

</div>

Dear Team, May I request some to guide on how to configure packetbeat to avoid packetbeat pushing request(GET/POST) parameters to elasticsearch servers. this makes the payload huge. Look forward to the response. Re…

---

## [CSV Reporting Truncating Results in 7.15.x](https://discuss.elastic.co/t/csv-reporting-truncating-results-in-7-15-x/288142)

<div class="topic-metadata">

**Author:** [@skoldrh](https://discuss.elastic.co/u/skoldrh)\
**Replies:** 5\
**Last updated:** [December 20, 2021, 8:13am UTC](https://discuss.elastic.co/t/csv-reporting-truncating-results-in-7-15-x/288142 "2021-12-20T08:13:27Z")

</div>

Using Elastic Kibana 7.13.3 (and previous versions) I was able to Save and Share/CSV reports with a maximum size of around 500 MBs (We have a Security requirement to archive off logs from Windows (WinLogBeat), Linux (Fil…

---

## [Pyspark Dataframe Save Error](https://discuss.elastic.co/t/pyspark-dataframe-save-error/98277)

<div class="topic-metadata">

**Author:** [@David\_Latham](https://discuss.elastic.co/u/David_Latham)\
**Replies:** 3\
**Last updated:** [September 7, 2017, 7:19pm UTC](https://discuss.elastic.co/t/pyspark-dataframe-save-error/98277 "2017-09-07T19:19:01Z")

</div>

i’m running spark 1.5 and used es-hadoop 2.4 to connect to ES 2.1.1 server. reads and writes worked fine. after upgrading ES to 5.3.1 and downloading es-hadoop 5.3.1 (spark is still at 1.5) the reads work fine, but when …

---

## [Is @version filed created by Elasticsearch or Logstash?](https://discuss.elastic.co/t/is-version-filed-created-by-elasticsearch-or-logstash/113599)

<div class="topic-metadata">

**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\
**Replies:** 2\
**Last updated:** [January 2, 2018, 8:58am UTC](https://discuss.elastic.co/t/is-version-filed-created-by-elasticsearch-or-logstash/113599 "2018-01-02T08:58:10Z")

</div>

Hello all, I'm trying to fix as many issues I can in my Elastic Stack setup before upgrading to version 6. One thing I would like to sort out are conflicting Index Patterns. In one of my clusters I have a conflict for @…

---

## [Getting exception from ES cluster](https://discuss.elastic.co/t/getting-exception-from-es-cluster/31769)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 2\
**Last updated:** [March 11, 2016, 10:13pm UTC](https://discuss.elastic.co/t/getting-exception-from-es-cluster/31769 "2016-03-11T22:13:17Z")

</div>

Hi , I have two node cluster both nodes are master and data enabled.I am getting following exception from nodes please suggest me why it is happening. each node have heap size of 6 GB. I am using ES version : 1.5.…

---

## [Ingest pipeline: \_id generation](https://discuss.elastic.co/t/ingest-pipeline-id-generation/149189)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 4\
**Last updated:** [September 21, 2018, 9:28am UTC](https://discuss.elastic.co/t/ingest-pipeline-id-generation/149189 "2018-09-21T09:28:33Z")

</div>

is it safe to generate doc IDs in a pipeline as following: { "script": { "ignore\_failure": false, "lang": "painless", "source": "ctx.\_id = 'prfx-'.concat(ctx.message.hashCode().toString())" }…

---

## [Filebeat crashing repeatedly with out of error on first use](https://discuss.elastic.co/t/filebeat-crashing-repeatedly-with-out-of-error-on-first-use/67354)

<div class="topic-metadata">

**Author:** [@RicharddeJong](https://discuss.elastic.co/u/RicharddeJong)\
**Replies:** 4\
**Last updated:** [November 28, 2016, 11:14pm UTC](https://discuss.elastic.co/t/filebeat-crashing-repeatedly-with-out-of-error-on-first-use/67354 "2016-11-28T23:14:00Z")

</div>

Hi, I have a fresh ELK stack based on the containers from Elastic. I am using Filebeat to send logs to it. I have Filebeat monitor all files in /var/log. When it first tries to read all those files and send them to Lo…

---

## [Report Generation issue in from Kibana Visualize](https://discuss.elastic.co/t/report-generation-issue-in-from-kibana-visualize/269322)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 8\
**Last updated:** [April 13, 2021, 3:26pm UTC](https://discuss.elastic.co/t/report-generation-issue-in-from-kibana-visualize/269322 "2021-04-13T15:26:32Z")

</div>

Hello, I want send the report with event count of each devices in last 24 hours by email. I have created new visualization by aggregating with src.ip feild. When i am downloading the report as PDF, full infromation is n…

---

## [Elastic-agent : endpoint-security.sock no such file or directory](https://discuss.elastic.co/t/elastic-agent-endpoint-security-sock-no-such-file-or-directory/292293)

<div class="topic-metadata">

**Author:** [@Lnood5](https://discuss.elastic.co/u/Lnood5)\
**Replies:** 3\
**Last updated:** [December 22, 2021, 4:08pm UTC](https://discuss.elastic.co/t/elastic-agent-endpoint-security-sock-no-such-file-or-directory/292293 "2021-12-22T16:08:41Z")

</div>

Hello, I work with self-managed stack v7.16.1 I have a probleme with endpoint security deployment elastic-agent diagnostics give for endpoint this error: elastic-agent diagnostics \* name: endpoint-security …

---

## [How to assign a series to a different scale or y-axis when using 'split series'?](https://discuss.elastic.co/t/how-to-assign-a-series-to-a-different-scale-or-y-axis-when-using-split-series/181225)

<div class="topic-metadata">

**Author:** [@Sakib\_Rahman](https://discuss.elastic.co/u/Sakib_Rahman)\
**Replies:** 3\
**Last updated:** [May 15, 2019, 9:34pm UTC](https://discuss.elastic.co/t/how-to-assign-a-series-to-a-different-scale-or-y-axis-when-using-split-series/181225 "2019-05-15T21:34:09Z")

</div>

How do I assign a series to a different scale or y axis? I split my series but one of the series has a considerably lower count than the other. Is there any way to create a different y-axis and then assign the second se…

---

## [Java API: How to sort scrolled response by document ID](https://discuss.elastic.co/t/java-api-how-to-sort-scrolled-response-by-document-id/65655)

<div class="topic-metadata">

**Author:** [@mcelaya](https://discuss.elastic.co/u/mcelaya)\
**Replies:** 3\
**Last updated:** [November 18, 2016, 11:40am UTC](https://discuss.elastic.co/t/java-api-how-to-sort-scrolled-response-by-document-id/65655 "2016-11-18T11:40:39Z")

</div>

Hi all, I'm currently developing (libraries' version is 2.3.3) a data validator that tries to ensure the data in our database matches the documents in ES (every field for each document) for a period of time. This coul…

---

## [Lens: Top values bar diagram with percentage](https://discuss.elastic.co/t/lens-top-values-bar-diagram-with-percentage/303591)

<div class="topic-metadata">

**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\
**Replies:** 5\
**Last updated:** [May 2, 2022, 5:09pm UTC](https://discuss.elastic.co/t/lens-top-values-bar-diagram-with-percentage/303591 "2022-05-02T17:09:35Z")

</div>

I would like to be able to see percentages for each bar in a bar graph for top values, just like a donut chart displays it. Is this planned to be added in the future or is the donut chart my only option if I want percent…

---

## [Systemd restarts logstash when using jdbc input](https://discuss.elastic.co/t/systemd-restarts-logstash-when-using-jdbc-input/109952)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 5\
**Last updated:** [December 2, 2017, 9:34pm UTC](https://discuss.elastic.co/t/systemd-restarts-logstash-when-using-jdbc-input/109952 "2017-12-02T21:34:36Z")

</div>

Not sure if I've configured something wrong since this is my first time working with JDBC. I am trying to import a large database into Elasticsearch using Logstash and the logstash-input-jdbc plugin. Here is my pipeline: …

---

## [Access denied while opening Stack-Monitoring on Kibana 7.8](https://discuss.elastic.co/t/access-denied-while-opening-stack-monitoring-on-kibana-7-8/239947)

<div class="topic-metadata">

**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\
**Replies:** 7\
**Last updated:** [July 6, 2020, 5:37pm UTC](https://discuss.elastic.co/t/access-denied-while-opening-stack-monitoring-on-kibana-7-8/239947 "2020-07-06T17:37:55Z")

</div>

Stack Intro: I'm running ELK-Stack 7.8 with 3 Cluster-Nodes Enabled XPack security in elasticsearch yml "xpack.security.enabled: true" and also enabled SSL/TLS on Transport and HTTP with below conf: xpack.security.tran…

---

## [Two timezones in JSON log](https://discuss.elastic.co/t/two-timezones-in-json-log/116877)

<div class="topic-metadata">

**Author:** [@davidsoler95](https://discuss.elastic.co/u/davidsoler95)\
**Replies:** 7\
**Last updated:** [January 25, 2018, 9:19am UTC](https://discuss.elastic.co/t/two-timezones-in-json-log/116877 "2018-01-25T09:19:58Z")

</div>

Hi, New doubt... We are using Filebeat \> ElasticSearch \> Kibana 5.6.4 to visualize JSON log files like... {"@timestamp":"2018-01-21T23:50:18.000Z","EMP":"ARA","INST":"PRI","TIPO":"T2","MSG":"\*\*\* FPS COV: \[PCW\](E 14661…

---

## [Kafka -\> Logstash -\> ES ..... using avro\_schema\_registry plugin & decorate\_events & mutate = Fail. I would like to get Key info into ES using Mutate](https://discuss.elastic.co/t/kafka-logstash-es-using-avro-schema-registry-plugin-decorate-events-mutate-fail-i-would-like-to-get-key-info-into-es-using-mutate/146916)

<div class="topic-metadata">

**Author:** [@Robert\_Duffy](https://discuss.elastic.co/u/Robert_Duffy)\
**Replies:** 1\
**Last updated:** [September 20, 2018, 10:27pm UTC](https://discuss.elastic.co/t/kafka-logstash-es-using-avro-schema-registry-plugin-decorate-events-mutate-fail-i-would-like-to-get-key-info-into-es-using-mutate/146916 "2018-09-20T22:27:17Z")

</div>

I am not having success with the following: Kafka Input (both key & body avro schema are in schema registry) I would like to pull fields from they Key and combine with the body and output to ES. decorate\_events=true, …

---

## [Headache with RestHighLevelClient and bulkprocessor](https://discuss.elastic.co/t/headache-with-resthighlevelclient-and-bulkprocessor/106072)

<div class="topic-metadata">

**Author:** [@Derrick](https://discuss.elastic.co/u/Derrick)\
**Replies:** 2\
**Last updated:** [November 13, 2017, 4:17pm UTC](https://discuss.elastic.co/t/headache-with-resthighlevelclient-and-bulkprocessor/106072 "2017-11-13T16:17:41Z")

</div>

BulkProcessor.Builder builder = BulkProcessor.builder(client::bulkAsync, new BulkProcessorListener()); this line is complaining The target type of this expression must be a functional interface the error is this part:…

---

## [Logstash doesn't receive syslog](https://discuss.elastic.co/t/logstash-doesnt-receive-syslog/89409)

<div class="topic-metadata">

**Author:** [@Pippo](https://discuss.elastic.co/u/Pippo)\
**Replies:** 2\
**Last updated:** [June 15, 2017, 8:03am UTC](https://discuss.elastic.co/t/logstash-doesnt-receive-syslog/89409 "2017-06-15T08:03:41Z")

</div>

Hi, I'm setting up Logstash to receive syslog, but it seems Logstash doesn't receive anything. I can monitor Logstash in Elasticsearch, and I see I have no received/sent events : I'm running ELK on Docker. Here i…

---

## [Logstash is failing with response code 403 trying to publish events to closed filebeat indexes](https://discuss.elastic.co/t/logstash-is-failing-with-response-code-403-trying-to-publish-events-to-closed-filebeat-indexes/112839)

<div class="topic-metadata">

**Author:** [@Yuri\_Sibirski](https://discuss.elastic.co/u/Yuri_Sibirski)\
**Replies:** 1\
**Last updated:** [December 21, 2017, 7:33pm UTC](https://discuss.elastic.co/t/logstash-is-failing-with-response-code-403-trying-to-publish-events-to-closed-filebeat-indexes/112839 "2017-12-21T19:33:19Z")

</div>

Dear ELK specialists, for some reason i am seeing my logstash is failing with response code 403 by trying to publish events into closed indexes. Here are some entries from logstash-plain.log. Do you have any idea why it …

---

## [Rollup index date\_histogram issue](https://discuss.elastic.co/t/rollup-index-date-histogram-issue/181766)

<div class="topic-metadata">

**Author:** [@DustyMeg](https://discuss.elastic.co/u/DustyMeg)\
**Replies:** 6\
**Last updated:** [June 10, 2019, 8:43am UTC](https://discuss.elastic.co/t/rollup-index-date-histogram-issue/181766 "2019-06-10T08:43:43Z")

</div>

Hi, Getting the following error when trying to Visualize a count on the Y Axis and Date Histogram of type field @timestamp with an interval of 60m on the X AxIs over Today. Rollup search error: \[illegal\_argument\_except…

---

## [Erreur de connexion entre elasticsearch et spring boot application](https://discuss.elastic.co/t/erreur-de-connexion-entre-elasticsearch-et-spring-boot-application/83394)

<div class="topic-metadata">

**Author:** [@zegdene](https://discuss.elastic.co/u/zegdene)\
**Replies:** 6\
**Last updated:** [April 25, 2017, 7:58am UTC](https://discuss.elastic.co/t/erreur-de-connexion-entre-elasticsearch-et-spring-boot-application/83394 "2017-04-25T07:58:19Z")

</div>

Bonjour, je suis débutante en elasticsearch, j'ai installée elasticsearch et je souhaite faire des requête avec mon application spring boot , le probleme que la connexion entre l'application et elasticsearch est échouée…

---

## [Problem with heap space overusage](https://discuss.elastic.co/t/problem-with-heap-space-overusage/20828)

<div class="topic-metadata">

**Author:** [@tetlika](https://discuss.elastic.co/u/tetlika)\
**Replies:** 6\
**Last updated:** [December 8, 2014, 1:17am UTC](https://discuss.elastic.co/t/problem-with-heap-space-overusage/20828 "2014-12-08T01:17:15Z")

</div>

hi, we have 6 servers and 14 shards in cluster, the index size 26GB, we have 1 replica so total size is 52GB, and ES v1.4.0, java version "1.7.0\_65" we use servers with RAM of 14GB (m3.xlarge), and heap is set to…

---

## [Filebeat decode\_xml processor missing](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915)

<div class="topic-metadata">

**Author:** [@Francisco\_Peralta\_Gu](https://discuss.elastic.co/u/Francisco_Peralta_Gu)\
**Replies:** 5\
**Last updated:** [April 26, 2021, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915 "2021-04-26T16:03:43Z")

</div>

Hi. I'm facing issues trying to configure decode\_xml processor in filebeat version 7.11. The error is the following: Failed to start crawler: starting input failed: Error while initializing input: the processor ac…

---

## [ELasticsearch unassigned node removal](https://discuss.elastic.co/t/elasticsearch-unassigned-node-removal/131206)

<div class="topic-metadata">

**Author:** [@Dazith\_Kj](https://discuss.elastic.co/u/Dazith_Kj)\
**Replies:** 5\
**Last updated:** [May 10, 2018, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-unassigned-node-removal/131206 "2018-05-10T09:30:51Z")

</div>

HI All, I have configured an elastic search cluster with one node. But After I started the cluster with the single node. I am seeing an unassigned node. Please help me to sort this off. NOTE: This ES cluster only havin…

---

## [Elasticsearch wont start with X-Pack plug-in on Windows](https://discuss.elastic.co/t/elasticsearch-wont-start-with-x-pack-plug-in-on-windows/124256)

<div class="topic-metadata">

**Author:** [@HarryCrosby](https://discuss.elastic.co/u/HarryCrosby)\
**Replies:** 5\
**Last updated:** [March 16, 2018, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-with-x-pack-plug-in-on-windows/124256 "2018-03-16T13:24:53Z")

</div>

Hi, I'm tyring to configure X-Pack in Elasticsearch 6.2.2 on Windows x86 64 bit and I'm following these instructions: https://www.elastic.co/guide/en/elasticsearch/reference/6.2/installing-xpack-es.html At step 6, wh…

---

## [Specify index when using elasticsearch logstash filter](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928)

<div class="topic-metadata">

**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\
**Replies:** 5\
**Last updated:** [January 19, 2018, 3:26am UTC](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928 "2018-01-19T03:26:01Z")

</div>

Is it possible to specify an Index when I use the elasticsearch logstash filter? I can't possibly let it search through everything. My google searches did not bring me any further, since googling for something with the…

---

## [How to turn off the color marking in the log?](https://discuss.elastic.co/t/how-to-turn-off-the-color-marking-in-the-log/288897)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 2\
**Last updated:** [November 25, 2021, 1:06am UTC](https://discuss.elastic.co/t/how-to-turn-off-the-color-marking-in-the-log/288897 "2021-11-25T01:06:29Z")

</div>

There are many color marks in the logs collected from filebeat, which greatly affects the structure of the log. Is there any way to close it? Can I only change the log level from INFO to WARN?

---

## [Synonym dictionaries of person names](https://discuss.elastic.co/t/synonym-dictionaries-of-person-names/21892)

<div class="topic-metadata">

**Author:** [@davidbkemp](https://discuss.elastic.co/u/davidbkemp)\
**Replies:** 2\
**Last updated:** [February 2, 2015, 7:26am UTC](https://discuss.elastic.co/t/synonym-dictionaries-of-person-names/21892 "2015-02-02T07:26:36Z")

</div>

I am looking for synonym dictionaries of person names that I can use with the Elasticsearch synonym analyser. e.g. dictionaries that map "Ted" to "Edward", and "Bill" to "William". I am curious to know what others ar…

---

## [ENOTDIR error when manually installing Marvel](https://discuss.elastic.co/t/enotdir-error-when-manually-installing-marvel/52000)

<div class="topic-metadata">

**Author:** [@dal](https://discuss.elastic.co/u/dal)\
**Replies:** 8\
**Last updated:** [June 7, 2016, 1:25pm UTC](https://discuss.elastic.co/t/enotdir-error-when-manually-installing-marvel/52000 "2016-06-07T13:25:42Z")

</div>

I am trying to manually install Marvel through Kibana but regardless of what syntax I use I get a ENOTDIR error: $bin/kibana plugin --install marvel --url file:/home1/isuser/Desktop/up/marvel-2.3.3.tar.gz Installing …

---

## [Elasticsearch 7.17.4 crashes without an error message, while indexing large chunks of data on Windows](https://discuss.elastic.co/t/elasticsearch-7-17-4-crashes-without-an-error-message-while-indexing-large-chunks-of-data-on-windows/314690)

<div class="topic-metadata">

**Author:** [@simon137](https://discuss.elastic.co/u/simon137)\
**Replies:** 7\
**Last updated:** [October 11, 2022, 7:38am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-4-crashes-without-an-error-message-while-indexing-large-chunks-of-data-on-windows/314690 "2022-10-11T07:38:34Z")

</div>

Hello, I tried multiple java heap configurations for both logstash and elasticsearch, and also using a persisted queue (with space up to 40gb) instead of a memory queue, but it's always the same: If I take a large chun…

---

## [Timestamp between now and now-24h](https://discuss.elastic.co/t/timestamp-between-now-and-now-24h/190739)

<div class="topic-metadata">

**Author:** [@Digital](https://discuss.elastic.co/u/Digital)\
**Replies:** 7\
**Last updated:** [July 19, 2019, 5:17am UTC](https://discuss.elastic.co/t/timestamp-between-now-and-now-24h/190739 "2019-07-19T05:17:00Z")

</div>

Hello, Currently I used a curl to get the data on one index. But now I would like to receive the data between now, now-24h. However I receive only 10 data :confused: when I see the same time rang on Kibana I can see a …

---

## [Certificate without IP-Address for node-to-node communication](https://discuss.elastic.co/t/certificate-without-ip-address-for-node-to-node-communication/117032)

<div class="topic-metadata">

**Author:** [@jupp](https://discuss.elastic.co/u/jupp)\
**Replies:** 4\
**Last updated:** [January 30, 2018, 7:47pm UTC](https://discuss.elastic.co/t/certificate-without-ip-address-for-node-to-node-communication/117032 "2018-01-30T19:47:09Z")

</div>

Hi Folks, is it possible to leave the IP in the SAN for node-to-node communication. We want to verify only based on the DNS of the Server. I ask because we won't Change our Certificate when the ip-adress changes (think…

---

## [Apache solr to index kibana](https://discuss.elastic.co/t/apache-solr-to-index-kibana/52643)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 4\
**Last updated:** [June 15, 2016, 1:00pm UTC](https://discuss.elastic.co/t/apache-solr-to-index-kibana/52643 "2016-06-15T13:00:43Z")

</div>

Hi, I am trying to feed Apache solr data (in JSON format) to display in kibana. is it possible to do that? If i take this approach, then I would have to skip on Elasticsearch since ES and Solr are both indexing tools.

---

## [Pass Requset Body to Http\_Poller](https://discuss.elastic.co/t/pass-requset-body-to-http-poller/46180)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 4\
**Last updated:** [April 4, 2016, 5:32pm UTC](https://discuss.elastic.co/t/pass-requset-body-to-http-poller/46180 "2016-04-04T17:32:43Z")

</div>

I am able to connect to my services using http\_poller for all the GET services. I have some POST service to monitor which accepts a json body Input - { "AreaCode": "111", "CountryCode" : "01", "Number": "1231231" } …

---

## [How to increase ignore above limit of a field in a elastic index?](https://discuss.elastic.co/t/how-to-increase-ignore-above-limit-of-a-field-in-a-elastic-index/79397)

<div class="topic-metadata">

**Author:** [@sabyasachi\_mallick](https://discuss.elastic.co/u/sabyasachi_mallick)\
**Replies:** 1\
**Last updated:** [March 21, 2017, 11:55am UTC](https://discuss.elastic.co/t/how-to-increase-ignore-above-limit-of-a-field-in-a-elastic-index/79397 "2017-03-21T11:55:34Z")

</div>

i have a field named "description " in a index in elastic. "description":{"type":"string","norms":{"enabled":false},"fielddata":{"format":"disabled"},"fields":{"raw":{"type":"string","index":"not\_analyzed","ignore\_above"…

---

## [Combine different logs in one data table](https://discuss.elastic.co/t/combine-different-logs-in-one-data-table/130993)

<div class="topic-metadata">

**Author:** [@SunGirl](https://discuss.elastic.co/u/SunGirl)\
**Replies:** 5\
**Last updated:** [June 7, 2018, 8:37pm UTC](https://discuss.elastic.co/t/combine-different-logs-in-one-data-table/130993 "2018-06-07T20:37:50Z")

</div>

Hi! I have 2 different source logs with several common fields, e.g. field1 and field2, other fields are different. How can I join all fields from these different sources in one index by field1 and field2 in a data table…

---

## [Array intersection metric](https://discuss.elastic.co/t/array-intersection-metric/127117)

<div class="topic-metadata">

**Author:** [@alepuccetti](https://discuss.elastic.co/u/alepuccetti)\
**Replies:** 5\
**Last updated:** [April 27, 2018, 7:57am UTC](https://discuss.elastic.co/t/array-intersection-metric/127117 "2018-04-27T07:57:32Z")

</div>

Hi everyone, I use a filter query to select document only match certain ids in a lit. I would like to get back as metric the number of ids that matched that document but if I use cardinality aggregation I get the cardin…

---

## [Simple logstash HTTP poller](https://discuss.elastic.co/t/simple-logstash-http-poller/48052)

<div class="topic-metadata">

**Author:** [@Amit\_Kulkarni](https://discuss.elastic.co/u/Amit_Kulkarni)\
**Replies:** 5\
**Last updated:** [April 23, 2016, 6:41pm UTC](https://discuss.elastic.co/t/simple-logstash-http-poller/48052 "2016-04-23T18:41:42Z")

</div>

Hello, Can someone give me a simple HTTP poller config to check the 200 response on my URL. with a filter to check response output. I tried creating config but its not working . Thanks in Advance

---

## [How can I monitor MSSQL database server using Elastic search](https://discuss.elastic.co/t/how-can-i-monitor-mssql-database-server-using-elastic-search/174111)

<div class="topic-metadata">

**Author:** [@Mith](https://discuss.elastic.co/u/Mith)\
**Replies:** 3\
**Last updated:** [March 28, 2019, 8:13am UTC](https://discuss.elastic.co/t/how-can-i-monitor-mssql-database-server-using-elastic-search/174111 "2019-03-28T08:13:33Z")

</div>

Hi All, I'm new to ELK. I've installed Elasticsearch and Kibana. It's running fine. I want to monitor MSSQL database using Elastichsearch. Please help me understand how this can be achieved. Can this be done using fil…

---

## [Logstash 6.2.1 - unable to install unbundled filter plugin](https://discuss.elastic.co/t/logstash-6-2-1-unable-to-install-unbundled-filter-plugin/119292)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 3\
**Last updated:** [February 9, 2018, 9:10pm UTC](https://discuss.elastic.co/t/logstash-6-2-1-unable-to-install-unbundled-filter-plugin/119292 "2018-02-09T21:10:18Z")

</div>

Hi Team, I am trying to install an unbundled logstash plugin, namely logstash-filter-age. I've exported both http\_proxy and https\_proxy and verified that I can connect to the internet and ran this command to try to ins…

---

## [Multiple Fields Authorization](https://discuss.elastic.co/t/multiple-fields-authorization/89912)

<div class="topic-metadata">

**Author:** [@hfakar](https://discuss.elastic.co/u/hfakar)\
**Replies:** 8\
**Last updated:** [June 23, 2017, 6:57am UTC](https://discuss.elastic.co/t/multiple-fields-authorization/89912 "2017-06-23T06:57:30Z")

</div>

On the authorization about document level security we use the query: "match\_phrase": {"component":"BİLGİ GÜVENLİĞİ MÜDÜRLÜĞÜ"} How do I get the response for like multiple components? I tried: "match\_phrase": {"component…

---

## [Watcher webhooks and a 400 error](https://discuss.elastic.co/t/watcher-webhooks-and-a-400-error/2181)

<div class="topic-metadata">

**Author:** [@mattgolding](https://discuss.elastic.co/u/mattgolding)\
**Replies:** 3\
**Last updated:** [June 9, 2015, 10:39pm UTC](https://discuss.elastic.co/t/watcher-webhooks-and-a-400-error/2181 "2015-06-09T22:39:23Z")

</div>

I have created a watcher and it is running as expected except for the action. I continue to get a http 400 error for the request. Is there a good way to debug this? Fiddler doesn't pick up this request. If I execute …

---

## [Elastic Search Architecture at petabyte scale](https://discuss.elastic.co/t/elastic-search-architecture-at-petabyte-scale/14115)

<div class="topic-metadata">

**Author:** [@Milad\_Fatenejad](https://discuss.elastic.co/u/Milad_Fatenejad)\
**Replies:** 3\
**Last updated:** [October 26, 2013, 4:17pm UTC](https://discuss.elastic.co/t/elastic-search-architecture-at-petabyte-scale/14115 "2013-10-26T16:17:24Z")

</div>

Hello: We have a very large document archive (multipetabyte) and are considering leveraging elastic search to provide more elastic indexing/search capabilities. We archive large amounts of data every day, so I was c…

---

## [Two Http\_poller inputs with access token](https://discuss.elastic.co/t/two-http-poller-inputs-with-access-token/298939)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 7\
**Last updated:** [March 7, 2022, 5:51pm UTC](https://discuss.elastic.co/t/two-http-poller-inputs-with-access-token/298939 "2022-03-07T17:51:03Z")

</div>

Hello! I am trying to get data from an api that needs to be accessed using a token that we get from another api. How can I pass this access token to get the data from the other api? I had thought of doing something si…

---

## [Failed to parse mapping \[\_default\_\]: Mapping definition for \[error\] has unsupported parameters](https://discuss.elastic.co/t/failed-to-parse-mapping--default--mapping-definition-for-error-has-unsupported-parameters/98259)

<div class="topic-metadata">

**Author:** [@ianseyer](https://discuss.elastic.co/u/ianseyer)\
**Replies:** 4\
**Last updated:** [August 29, 2017, 8:57pm UTC](https://discuss.elastic.co/t/failed-to-parse-mapping--default--mapping-definition-for-error-has-unsupported-parameters/98259 "2017-08-29T20:57:49Z")

</div>

I am using a lightly customized installation of all 6.0.0-beta1 beats. However, When attempting to start them, they all spew this error: 2017/08/22 19:58:16.455956 client.go:465: WARN Can not index event (status=400):…

[Previous page](https://discuss.elastic.co/top.md?page=688&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=690&per_page=50&period=all)
