# Top **URL:** https://discuss.elastic.co/top.md?page=698&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 699 --- ## [Calculate age from birthday (type: date)](https://discuss.elastic.co/t/calculate-age-from-birthday-type-date/6633)
**Author:** [@CBR](https://discuss.elastic.co/u/CBR)\ **Replies:** 3\ **Last updated:** [February 8, 2012, 11:56am UTC](https://discuss.elastic.co/t/calculate-age-from-birthday-type-date/6633 "2012-02-08T11:56:43Z")
Hello! As I think it's stupid to store the age itself, I need to know if and how it's possible to calculate the age from the stored birthday, to filter searchresults by the calculated age. \[…\] "dob":{ … --- ## [Installing ES](https://discuss.elastic.co/t/installing-es/91940)
**Author:** [@wldev](https://discuss.elastic.co/u/wldev)\ **Replies:** 6\ **Last updated:** [July 6, 2017, 7:53am UTC](https://discuss.elastic.co/t/installing-es/91940 "2017-07-06T07:53:51Z")
My previous post was flagged by @elyssaemrich (done for the truth not to hit surface anytime soon), but this only made more dedicated to write. And will write as many times as needed. To topic:: my machine is HP Blade … --- ## [Send json log file to logstash with logstash forwarder but see wrong log in kibana](https://discuss.elastic.co/t/send-json-log-file-to-logstash-with-logstash-forwarder-but-see-wrong-log-in-kibana/28487)
**Author:** [@soniaeli](https://discuss.elastic.co/u/soniaeli)\ **Replies:** 2\ **Last updated:** [September 2, 2015, 9:00am UTC](https://discuss.elastic.co/t/send-json-log-file-to-logstash-with-logstash-forwarder-but-see-wrong-log-in-kibana/28487 "2015-09-02T09:00:51Z")
I have an app that writes logs to a json file that named allapp.json, Each log entry is a JSON object. An example of it looks like the following: "{\\"timestamp\\":\\"2015-08-30 19:42:26.724\\",\\"MAC\_Address\\":\\"A8:7… --- ## [Failed to sync translog java.io.IOException: Input/output error](https://discuss.elastic.co/t/failed-to-sync-translog-java-io-ioexception-input-output-error/27951)
**Author:** [@ziv2081](https://discuss.elastic.co/u/ziv2081)\ **Replies:** 2\ **Last updated:** [August 25, 2015, 3:50pm UTC](https://discuss.elastic.co/t/failed-to-sync-translog-java-io-ioexception-input-output-error/27951 "2015-08-25T15:50:00Z")
Hey, I'm receiving this error quite often ( every 5-10 seconds) from my indices and even marvel index. From my indices when I bulk index 200-1000 documents from a single machine in a single thread. And from marvel… --- ## [How to delete .monitoring\*mb\* indices automatically after period of time?](https://discuss.elastic.co/t/how-to-delete-monitoring-mb-indices-automatically-after-period-of-time/264647)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 7\ **Last updated:** [February 19, 2021, 6:41am UTC](https://discuss.elastic.co/t/how-to-delete-monitoring-mb-indices-automatically-after-period-of-time/264647 "2021-02-19T06:41:33Z")
Hi, We are using Cloud Platinum subscription. We enabled Metricbeat monitoring on 21st of January. Seems like .monitoring indices (old and new) are deleted only after 1 month or not deleted at all. Can we control ret… --- ## [Kibana not working after install x-pack](https://discuss.elastic.co/t/kibana-not-working-after-install-x-pack/131435)
**Author:** [@hocul\_Kwak](https://discuss.elastic.co/u/hocul_Kwak)\ **Replies:** 7\ **Last updated:** [May 30, 2018, 4:26pm UTC](https://discuss.elastic.co/t/kibana-not-working-after-install-x-pack/131435 "2018-05-30T16:26:15Z")
When I try start kibana after install x-pack I get a following error, {"type":"error","@timestamp":"2018-05-10T19:28:18Z","tags":\["fatal"\],"pid":29046,"level":"fatal","error":{"message":"Cannot read property 'type' of … --- ## [Https://discuss.elastic.co/t/config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api/113361](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296)
**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\ **Replies:** 7\ **Last updated:** [May 7, 2018, 7:17pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296 "2018-05-07T19:17:03Z")
hello everybody ! please i need your help !! the index got put into a read only state for some other reason, i reverse this by : curl -XPUT -H "Content-Type: application/json" http://localhost:9200/.monitoring-\*/\_setti… --- ## [S3 Repository Plugin - curl: (52) Empty reply from server](https://discuss.elastic.co/t/s3-repository-plugin-curl-52-empty-reply-from-server/259447)
**Author:** [@bigbansal](https://discuss.elastic.co/u/bigbansal)\ **Replies:** 5\ **Last updated:** [January 6, 2021, 8:34am UTC](https://discuss.elastic.co/t/s3-repository-plugin-curl-52-empty-reply-from-server/259447 "2021-01-06T08:34:59Z")
Hi All, I am struggling to put data node's data to S3 Bucket and getting empty response from server. can u please suggest what could be the reason ? --elasticsearch.yml has path.repo: $s3\_Bucket/$s3\_Prefix/docroot --… --- ## [Functionbeat not finding default credentials](https://discuss.elastic.co/t/functionbeat-not-finding-default-credentials/222784)
**Author:** [@Patrice1](https://discuss.elastic.co/u/Patrice1)\ **Replies:** 5\ **Last updated:** [March 30, 2020, 1:13am UTC](https://discuss.elastic.co/t/functionbeat-not-finding-default-credentials/222784 "2020-03-30T01:13:24Z")
I followed the guide to connect cloudwatch logs to kibana. After adding in my credentials and configs, the beat is not able to deploy to S3. I have the IAM permissions described. I only get the following debugging logs: … --- ## [Unable to create multiple index in elastic from logstash](https://discuss.elastic.co/t/unable-to-create-multiple-index-in-elastic-from-logstash/127643)
**Author:** [@sauravsuman689](https://discuss.elastic.co/u/sauravsuman689)\ **Replies:** 8\ **Last updated:** [April 12, 2018, 2:32am UTC](https://discuss.elastic.co/t/unable-to-create-multiple-index-in-elastic-from-logstash/127643 "2018-04-12T02:32:06Z")
Hi, I am using filebeat-\>logstash-\>elastic-\>kibana I am unable to create multiple index in elastic . Please advise. One index is getting created but not both. Filebeat.yml is below filebeat.prospectors: type: log … --- ## [Elasticsearch Cluster Rebalance](https://discuss.elastic.co/t/elasticsearch-cluster-rebalance/184947)
**Author:** [@jigar4u2](https://discuss.elastic.co/u/jigar4u2)\ **Replies:** 1\ **Last updated:** [June 11, 2019, 7:07pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-rebalance/184947 "2019-06-11T19:07:24Z")
I have all indices has primary shards are going to node: data02 only after cluster restart, how can I rebalance cluster and how to make primary shards go to different node with default setting? ES is 5.6.3. Below is res… --- ## [Field type (Mapping) conflicts](https://discuss.elastic.co/t/field-type-mapping-conflicts/311967)
**Author:** [@ELKcgnuser](https://discuss.elastic.co/u/ELKcgnuser)\ **Replies:** 2\ **Last updated:** [August 12, 2022, 5:48pm UTC](https://discuss.elastic.co/t/field-type-mapping-conflicts/311967 "2022-08-12T17:48:38Z")
I got this error message: 4 fields are defined as several types (string, integer, etc) across the indices that match this pattern. You may still be able to use these conflict fields in parts of Kibana, but they will be … --- ## [Adding a new field from multiple fields and including a newline](https://discuss.elastic.co/t/adding-a-new-field-from-multiple-fields-and-including-a-newline/68418)
**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\ **Replies:** 2\ **Last updated:** [December 12, 2016, 4:06pm UTC](https://discuss.elastic.co/t/adding-a-new-field-from-multiple-fields-and-including-a-newline/68418 "2016-12-12T16:06:41Z")
I have an event with multiple fields and I want to create a new summary field with specific details but also want to add the newline character in that field. No matter what I try the add\_field option in mutate does not w… --- ## [Filter of date range in Kibana 4.1](https://discuss.elastic.co/t/filter-of-date-range-in-kibana-4-1/25727)
**Author:** [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)\ **Replies:** 2\ **Last updated:** [July 17, 2015, 7:46am UTC](https://discuss.elastic.co/t/filter-of-date-range-in-kibana-4-1/25727 "2015-07-17T07:46:46Z")
Hi everybody, I'm working with Elasticsearch and Kibana 4.1.1 and my question is : Is it possible to create a filter of date range in a dashboard? For exemple, I would want to have 3 filters at the top of the dashb… --- ## [Java Agent not visible in APM Server](https://discuss.elastic.co/t/java-agent-not-visible-in-apm-server/157360)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 6\ **Last updated:** [November 26, 2018, 2:08pm UTC](https://discuss.elastic.co/t/java-agent-not-visible-in-apm-server/157360 "2018-11-26T14:08:15Z")
Hi Guys I try to bring the Java Agent up and running but it won't work. In Kibana (APM tab) no agent is displayed. "You have correctly setup APM Server" "Data successfully received from one or more agents" PING… --- ## [To make a table showing top hosts doing big outbound data transfer](https://discuss.elastic.co/t/to-make-a-table-showing-top-hosts-doing-big-outbound-data-transfer/110756)
**Author:** [@learner](https://discuss.elastic.co/u/learner)\ **Replies:** 6\ **Last updated:** [January 10, 2018, 7:20pm UTC](https://discuss.elastic.co/t/to-make-a-table-showing-top-hosts-doing-big-outbound-data-transfer/110756 "2018-01-10T19:20:44Z")
I want to make a table or a graph that shows top hosts / IPs uploading a large amount of data transfer to the outside domains. Probably I want a table/metric that shows: Out\_Bytes Source IP addresses (of internal … --- ## [ES with shield LDAP can't use LDAP group but can login with LDAP user](https://discuss.elastic.co/t/es-with-shield-ldap-cant-use-ldap-group-but-can-login-with-ldap-user/54013)
**Author:** [@tingking23](https://discuss.elastic.co/u/tingking23)\ **Replies:** 6\ **Last updated:** [September 27, 2016, 1:52pm UTC](https://discuss.elastic.co/t/es-with-shield-ldap-cant-use-ldap-group-but-can-login-with-ldap-user/54013 "2016-09-27T13:52:22Z")
AS the topic name , i can't use LDAP group just can use LDAP user. this is my role\_mapping.yml: admin: - "cn=aaa,ou=groups,dc=company,dc=company" - "cn=bbb,ou=people,dc=company,dc=company" this is the elastic… --- ## [Alerts in kibana](https://discuss.elastic.co/t/alerts-in-kibana/298696)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 4\ **Last updated:** [March 7, 2022, 6:19am UTC](https://discuss.elastic.co/t/alerts-in-kibana/298696 "2022-03-07T06:19:14Z")
log \[10:06:16.242\] \[error\]\[alerting\]\[alerts\]\[plugins\]\[plugins\] Executing Alert "34af2110-24f6-11ec-8071-63a4b456f636" has resulted in Error: Unable to create alerts client because the Encrypted Saved Objects plugin is … --- ## [Can we apply filters on Controls visualization?](https://discuss.elastic.co/t/can-we-apply-filters-on-controls-visualization/233087)
**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 6:27pm UTC](https://discuss.elastic.co/t/can-we-apply-filters-on-controls-visualization/233087 "2020-05-26T18:27:12Z")
Hi guys, I want to apply filters on Controls visualization. I don't want to show the list of all the values we have, just the selected ones which I have applied as a filter on top of the visualization. But, that filter i… --- ## [Timestamp in GMT +0200](https://discuss.elastic.co/t/timestamp-in-gmt-0200/26713)
**Author:** [@simonrisberg](https://discuss.elastic.co/u/simonrisberg)\ **Replies:** 7\ **Last updated:** [August 5, 2015, 3:44pm UTC](https://discuss.elastic.co/t/timestamp-in-gmt-0200/26713 "2015-08-05T15:44:50Z")
Hi! You may have seen my previous thread about populating the standard @timestamp. I managed this although, the standard @timestamp shows the local time. So if the event in a log file says something was done at 13.00 the… --- ## [Logstash Performance Tuning](https://discuss.elastic.co/t/logstash-performance-tuning/238088)
**Author:** [@Jib\_Suwanachote](https://discuss.elastic.co/u/Jib_Suwanachote)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 3:48pm UTC](https://discuss.elastic.co/t/logstash-performance-tuning/238088 "2020-06-23T15:48:22Z")
Hi all Currently our team use logstash run over container with K8S cluster for purpose consume data from KAFKA messaging and push data to Elasticsearch .As we're testing performance not good enough. we're setup only 3… --- ## [Visualization showing memory usage and running applications](https://discuss.elastic.co/t/visualization-showing-memory-usage-and-running-applications/198106)
**Author:** [@Michal\_Skaryszewski](https://discuss.elastic.co/u/Michal_Skaryszewski)\ **Replies:** 3\ **Last updated:** [September 6, 2019, 12:32am UTC](https://discuss.elastic.co/t/visualization-showing-memory-usage-and-running-applications/198106 "2019-09-06T00:32:46Z")
Hi, is there any way to visualize memory usage and running processes/applications on the same chart? I am trying to present the correlation between applications and most memory. I could not find a convenient solution to… --- ## [Problem With timestamp and timezone](https://discuss.elastic.co/t/problem-with-timestamp-and-timezone/148622)
**Author:** [@Tiago\_Pinto](https://discuss.elastic.co/u/Tiago_Pinto)\ **Replies:** 3\ **Last updated:** [September 17, 2018, 2:55pm UTC](https://discuss.elastic.co/t/problem-with-timestamp-and-timezone/148622 "2018-09-17T14:55:56Z")
Hello all, I'm running into some problems when I'm trying to enrich data using input jdbc and filter jdbc\_streaming. This is my conf file input { jdbc { jdbc\_connection\_string =\> "connectionString" jdbc\_user =\> … --- ## [How would you query Elasticsearch to get ratios?](https://discuss.elastic.co/t/how-would-you-query-elasticsearch-to-get-ratios/1222)
**Author:** [@Asimov4](https://discuss.elastic.co/u/Asimov4)\ **Replies:** 3\ **Last updated:** [May 27, 2015, 5:20pm UTC](https://discuss.elastic.co/t/how-would-you-query-elasticsearch-to-get-ratios/1222 "2015-05-27T17:20:37Z")
My data in Elasticsearch looks like this: 1. I have documents that track the number of visits on our website for each page: { index: "visitindex" \_type: "visit", ip: "192.168.1.1", page: "index.html" } I have document… --- ## [Math in watcher condition part](https://discuss.elastic.co/t/math-in-watcher-condition-part/104663)
**Author:** [@Izek](https://discuss.elastic.co/u/Izek)\ **Replies:** 5\ **Last updated:** [October 24, 2017, 9:04am UTC](https://discuss.elastic.co/t/math-in-watcher-condition-part/104663 "2017-10-24T09:04:48Z")
I am try to do the calculate of the condition part in watcher. But I have no idea how to do it . For logstash monitoring index, there have a doc.logstash\_stats.events.in and doc.logstash\_stats.events.out. How could I … --- ## [Retiring old Elasticsearch indices](https://discuss.elastic.co/t/retiring-old-elasticsearch-indices/70691)
**Author:** [@rs\_ela](https://discuss.elastic.co/u/rs_ela)\ **Replies:** 5\ **Last updated:** [January 5, 2017, 3:53pm UTC](https://discuss.elastic.co/t/retiring-old-elasticsearch-indices/70691 "2017-01-05T15:53:52Z")
Hi all I'm curious about retiring old indices. As far as I know, by default Elasticsearch stores data forever. Question number one: is there any option to set in config files some period (four weeks, for example) after… --- ## [Multiple Select queries in Logstash JDBC Plugin](https://discuss.elastic.co/t/multiple-select-queries-in-logstash-jdbc-plugin/42329)
**Author:** [@sumit\_gupta\_sgt](https://discuss.elastic.co/u/sumit_gupta_sgt)\ **Replies:** 5\ **Last updated:** [February 23, 2016, 5:16am UTC](https://discuss.elastic.co/t/multiple-select-queries-in-logstash-jdbc-plugin/42329 "2016-02-23T05:16:11Z")
Hi All, I am trying to pull data from MYSQL.I am able to get Data from MYSQL. But i want fetch data one mysql table as one type in ES index like for Example: I have A,B, C tables in MYSQL i want to run Select \* on al… --- ## [Elasticsearch 5.0 SearchTemplate query Error](https://discuss.elastic.co/t/elasticsearch-5-0-searchtemplate-query-error/67001)
**Author:** [@banu](https://discuss.elastic.co/u/banu)\ **Replies:** 8\ **Last updated:** [November 25, 2016, 6:27am UTC](https://discuss.elastic.co/t/elasticsearch-5-0-searchtemplate-query-error/67001 "2016-11-25T06:27:51Z")
We are trying to use the search template and get the search results. Can anyone suggest a solution for this. Attached the error what we are getting package elastic5; . import java.net.InetAddress; import java.util.H… --- ## [QueryBuilder.add(BoolQueryBuilder) is undefined for the type](https://discuss.elastic.co/t/querybuilder-add-boolquerybuilder-is-undefined-for-the-type/116469)
**Author:** [@Master](https://discuss.elastic.co/u/Master)\ **Replies:** 4\ **Last updated:** [January 22, 2018, 11:47am UTC](https://discuss.elastic.co/t/querybuilder-add-boolquerybuilder-is-undefined-for-the-type/116469 "2018-01-22T11:47:57Z")
Getting this error "The method add(BoolQueryBuilder) is undefined for the type QueryBuilder " private void addAllSchoolFilters(QueryBuilder andQuery, SchoolSearchForm form) { if (form.hasAgeFilter()) { // actual code … --- ## [Elastic Stack 7.0.0-rc1 is here!](https://discuss.elastic.co/t/elastic-stack-7-0-0-rc1-is-here/174198)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 8:09pm UTC](https://discuss.elastic.co/t/elastic-stack-7-0-0-rc1-is-here/174198 "2019-03-27T20:09:26Z")
Elastic Stack 7.0.0-rc1 is here! Pour a fresh cup, lean in, and put the Elastic Stack 7.0.0-rc1 to the test — now also available on Elasticsearch Service (Elastic Cloud). Try the preview release and learn more from our b… --- ## [When indexing a VERY large text document (50 to 200MB) NEST throws WebException: The request was aborted: The request was canceled](https://discuss.elastic.co/t/when-indexing-a-very-large-text-document-50-to-200mb-nest-throws-webexception-the-request-was-aborted-the-request-was-canceled/101617)
**Author:** [@RajPwC](https://discuss.elastic.co/u/RajPwC)\ **Replies:** 6\ **Last updated:** [September 27, 2017, 4:55pm UTC](https://discuss.elastic.co/t/when-indexing-a-very-large-text-document-50-to-200mb-nest-throws-webexception-the-request-was-aborted-the-request-was-canceled/101617 "2017-09-27T16:55:01Z")
Hello, I have an ETL tool that transforms Office documents to text and indexes them into ElasticSearch. My documents sizes range very widely from a few kb to 500mb. When my document is very large, I get Web exceptions… --- ## [Sending logs to SIEMonster any platform](https://discuss.elastic.co/t/sending-logs-to-siemonster-any-platform/71583)
**Author:** [@mdavis00](https://discuss.elastic.co/u/mdavis00)\ **Replies:** 6\ **Last updated:** [January 23, 2017, 10:37am UTC](https://discuss.elastic.co/t/sending-logs-to-siemonster-any-platform/71583 "2017-01-23T10:37:31Z")
I cannot seem to get beats to send logs data from Windows, Linux or Mac. Has anyone used beats to get logs to SIEMonster? P.S. I'm new to beats and elastic as on a few days ago, sorry for my ignorance. --- ## [Elasticsearch-5.0.0-beta1 JAVA APINoNodeAvailableException](https://discuss.elastic.co/t/elasticsearch-5-0-0-beta1-java-apinonodeavailableexception/61348)
**Author:** [@VenkateshK](https://discuss.elastic.co/u/VenkateshK)\ **Replies:** 6\ **Last updated:** [December 9, 2016, 10:28am UTC](https://discuss.elastic.co/t/elasticsearch-5-0-0-beta1-java-apinonodeavailableexception/61348 "2016-12-09T10:28:59Z")
I downloaded Elasticsearch 5.0.0-beta1. I am trying to add documents through JAVA API. I always get exception when trying to run. Elasticsearch configuration cluster.name: cluster\_hostname node.name: node\_venkatesh… --- ## [Same document repeated in search results](https://discuss.elastic.co/t/same-document-repeated-in-search-results/15946)
**Author:** [@Pir\_Abdul\_Rasool\_Qur](https://discuss.elastic.co/u/Pir_Abdul_Rasool_Qur)\ **Replies:** 6\ **Last updated:** [February 22, 2014, 2:00pm UTC](https://discuss.elastic.co/t/same-document-repeated-in-search-results/15946 "2014-02-22T14:00:54Z")
Hi I am getting same document (with same "\_id") repeated more than once in search results. My query looks like POST http://XXXX:9200/\_search/ { "query": { "multi\_match" : { "field… --- ## [Elasticsearch: aggregation and select docs only having max value of field](https://discuss.elastic.co/t/elasticsearch-aggregation-and-select-docs-only-having-max-value-of-field/193197)
**Author:** [@Mihir\_Kothari](https://discuss.elastic.co/u/Mihir_Kothari)\ **Replies:** 2\ **Last updated:** [July 31, 2019, 8:45pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-and-select-docs-only-having-max-value-of-field/193197 "2019-07-31T20:45:35Z")
I am using elastic search 6.5. Basically, based on my query my index can return multiple documents, I need only those documents which has the max value for a particular field. E.g. { "query": { "bool": { … --- ## [Unable to stop Elasticsearch process](https://discuss.elastic.co/t/unable-to-stop-elasticsearch-process/12319)
**Author:** [@sai](https://discuss.elastic.co/u/sai)\ **Replies:** 2\ **Last updated:** [June 14, 2013, 3:45pm UTC](https://discuss.elastic.co/t/unable-to-stop-elasticsearch-process/12319 "2013-06-14T15:45:33Z")
Hi, I recently ran a query for searching 4 million records. My heapsize was only 1 GB and so I got an out of memory exception. I ran the query several times just to make sure. Later I decided to increase the heap … --- ## [MSExchange Management Event Log](https://discuss.elastic.co/t/msexchange-management-event-log/80719)
**Author:** [@wmcgilvery](https://discuss.elastic.co/u/wmcgilvery)\ **Replies:** 3\ **Last updated:** [March 31, 2017, 1:44pm UTC](https://discuss.elastic.co/t/msexchange-management-event-log/80719 "2017-03-31T13:44:20Z")
I have what appears to be a very simple question. I wish to add the MSExchange Management event log to the winlogbeat configuration file. get-eventlog shows it as MSExchange Management I added it as -name MSExcha… --- ## [Multiple Primaries of same index on same node in a cluster. Can I make one move?](https://discuss.elastic.co/t/multiple-primaries-of-same-index-on-same-node-in-a-cluster-can-i-make-one-move/8994)
**Author:** [@phill](https://discuss.elastic.co/u/phill)\ **Replies:** 3\ **Last updated:** [September 12, 2012, 10:17pm UTC](https://discuss.elastic.co/t/multiple-primaries-of-same-index-on-same-node-in-a-cluster-can-i-make-one-move/8994 "2012-09-12T22:17:10Z")
I have 4 nodes in my cluster. All settings are default. There is no extra shard allocation definitions. I have an index with 3 shards +2 replicas each, for a total of 9. I turned off one of the nodes and all were e… --- ## [Open closed index, inconsistent status](https://discuss.elastic.co/t/open-closed-index-inconsistent-status/219607)
**Author:** [@Miguel1](https://discuss.elastic.co/u/Miguel1)\ **Replies:** 5\ **Last updated:** [February 17, 2020, 2:53pm UTC](https://discuss.elastic.co/t/open-closed-index-inconsistent-status/219607 "2020-02-17T14:53:15Z")
Hi, folks! (my Elasticsearch version is 7.5.2) I have a closed index called "vpn-2019.52", a weekly vpn index and when I try to open it with: POST vpn-2019.52/\_open It timed out and reported nothing. After that I fou… --- ## [Kibana dashboard table without aggregation](https://discuss.elastic.co/t/kibana-dashboard-table-without-aggregation/287968)
**Author:** [@111505](https://discuss.elastic.co/u/111505)\ **Replies:** 5\ **Last updated:** [November 3, 2021, 4:54am UTC](https://discuss.elastic.co/t/kibana-dashboard-table-without-aggregation/287968 "2021-11-03T04:54:09Z")
Hello. I want to create a Data Table similar to Discover Tab in Kibana's Dashobard, but I can not find a way. Do not have a way to create a table that only shows Data without aggregation? --- ## [Problem with script in transform accessing an array](https://discuss.elastic.co/t/problem-with-script-in-transform-accessing-an-array/24043)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 5\ **Last updated:** [June 24, 2015, 11:09pm UTC](https://discuss.elastic.co/t/problem-with-script-in-transform-accessing-an-array/24043 "2015-06-24T23:09:31Z")
Hi, I want to return the length of an array in a transform script within the logging action. I am doing this: "actions": { "log": { "transform": { "script": "return \[total\_snapshots : ctx.payload.sn… --- ## [Configuration example of filebeat haproxy module](https://discuss.elastic.co/t/configuration-example-of-filebeat-haproxy-module/164372)
**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\ **Replies:** 2\ **Last updated:** [January 16, 2019, 5:52am UTC](https://discuss.elastic.co/t/configuration-example-of-filebeat-haproxy-module/164372 "2019-01-16T05:52:52Z")
I'm trying to get the filebeat haproxy module to work. I probably need one working example (or a list of what is required from all the dependencies) haproxy version 1.7.7 filebeat -version Flag --version has been … --- ## [Ansible Playbook Hangs on " Wait for elasticsearch to startup "](https://discuss.elastic.co/t/ansible-playbook-hangs-on-wait-for-elasticsearch-to-startup/78610)
**Author:** [@Traiano\_Welcome](https://discuss.elastic.co/u/Traiano_Welcome)\ **Replies:** 2\ **Last updated:** [March 15, 2017, 12:29pm UTC](https://discuss.elastic.co/t/ansible-playbook-hangs-on-wait-for-elasticsearch-to-startup/78610 "2017-03-15T12:29:44Z")
Hi, I'm trying to deploy a 3 node elasticsearch cluster to aws EC2 using the role here: Ansible runs the playbook with no error, until it hangs for minutes on this step: "TASK \[elasticsearch : Wait for elasticsear… --- ## [Logstash http output plugin customize building json array for batching](https://discuss.elastic.co/t/logstash-http-output-plugin-customize-building-json-array-for-batching/275535)
**Author:** [@RahulGS](https://discuss.elastic.co/u/RahulGS)\ **Replies:** 8\ **Last updated:** [June 15, 2021, 4:11am UTC](https://discuss.elastic.co/t/logstash-http-output-plugin-customize-building-json-array-for-batching/275535 "2021-06-15T04:11:17Z")
Hello , We have a pipeline running on logstash 6.6.2 with input(redis)-\>filter(ruby)-\>output(http) how do you batch http output using custom format ? we can't use format="json\_batch" because it will construct a simple… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/262091)
**Author:** [@jayanth\_m](https://discuss.elastic.co/u/jayanth_m)\ **Replies:** 8\ **Last updated:** [January 26, 2021, 3:09pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/262091 "2021-01-26T15:09:13Z")
Im getting Kibana server is not ready yet error when Opening Kibana dashboard After Looking into the logs, I observed below error: {"type":"log","@timestamp":"2021-01-25T11:11:14Z","tags":\["error","elasticsearch","data… --- ## [Kibana Server stop via Kill Process](https://discuss.elastic.co/t/kibana-server-stop-via-kill-process/170799)
**Author:** [@clouduser](https://discuss.elastic.co/u/clouduser)\ **Replies:** 3\ **Last updated:** [March 5, 2019, 8:54pm UTC](https://discuss.elastic.co/t/kibana-server-stop-via-kill-process/170799 "2019-03-05T20:54:51Z")
i modified the Kibana.yml and trying to restart the server. I dont have success in killing process here is PS-elf how do i kill kibana server and restart the kibana so it can pick new server.host value to connect with … --- ## [Extract last 2 characters of a given string](https://discuss.elastic.co/t/extract-last-2-characters-of-a-given-string/134587)
**Author:** [@kkrg](https://discuss.elastic.co/u/kkrg)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 11:40am UTC](https://discuss.elastic.co/t/extract-last-2-characters-of-a-given-string/134587 "2018-06-05T11:40:54Z")
Hello, I have a requirement to extract last 2 characters from a given string. Please let me know which logstash function I can use to achieve this. Thanks, Kiran --- ## [Packaging community beats](https://discuss.elastic.co/t/packaging-community-beats/61917)
**Author:** [@raboof](https://discuss.elastic.co/u/raboof)\ **Replies:** 6\ **Last updated:** [October 6, 2016, 2:48pm UTC](https://discuss.elastic.co/t/packaging-community-beats/61917 "2016-10-06T14:48:50Z")
Hello, I'm having some trouble getting 'make package' to work with my community beat. To rule out things specific to my beat, I've reproduced the problem with a freshly generated example beat. Below is a log of gener… --- ## [Parse 4 digit millisecond timestamp in correct format and then replace @timestamp with log\_timestamp](https://discuss.elastic.co/t/parse-4-digit-millisecond-timestamp-in-correct-format-and-then-replace-timestamp-with-log-timestamp/146906)
**Author:** [@simmi\_a](https://discuss.elastic.co/u/simmi_a)\ **Replies:** 5\ **Last updated:** [September 12, 2018, 8:04pm UTC](https://discuss.elastic.co/t/parse-4-digit-millisecond-timestamp-in-correct-format-and-then-replace-timestamp-with-log-timestamp/146906 "2018-09-12T20:04:35Z")
I have log time in 4 digit milliseconds 2018-08-30 22:44:34.1524 13273641624629889532273 Error Error saving Api Log data Tried this to parse it in correct time format but it doesn't work. I have to replace the @timesta… --- ## [Sudo bin/logstash -f /etc/logstash/conf.d/logstash.conf --path.settings /etc/logstash](https://discuss.elastic.co/t/sudo-bin-logstash-f-etc-logstash-conf-d-logstash-conf-path-settings-etc-logstash/147445)
**Author:** [@ElastiSid](https://discuss.elastic.co/u/ElastiSid)\ **Replies:** 5\ **Last updated:** [September 5, 2018, 11:02pm UTC](https://discuss.elastic.co/t/sudo-bin-logstash-f-etc-logstash-conf-d-logstash-conf-path-settings-etc-logstash/147445 "2018-09-05T23:02:19Z")
I am getting error. Logstash is not really working - Elasticsearch has no feed. Ubuntu 16.04 LTS, Java 1.8, ES 6., LS 6. /usr/share/logstash/bin$ ls -l total 68 -rwxr-xr-x 1 logstash logstash 152 Aug 17 17:21 benc… [Previous page](https://discuss.elastic.co/top.md?page=697&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=699&per_page=50&period=all)