# Top

**URL:** https://discuss.elastic.co/top.md?page=699&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 700

---

## [Multiline Config Failing](https://discuss.elastic.co/t/multiline-config-failing/47078)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 6\
**Last updated:** [April 13, 2016, 12:07pm UTC](https://discuss.elastic.co/t/multiline-config-failing/47078 "2016-04-13T12:07:30Z")

</div>

Hi, My filebeat prospector config looks like this: filebeat: prospectors: - document\_type: cassandra input\_type: log paths: - /var/log/cassandra/\*.log - /var/log/cassandra…

---

## [Kafka ingest performance issues](https://discuss.elastic.co/t/kafka-ingest-performance-issues/193639)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 5\
**Last updated:** [August 6, 2019, 12:19pm UTC](https://discuss.elastic.co/t/kafka-ingest-performance-issues/193639 "2019-08-06T12:19:04Z")

</div>

Im sending all my beat\* data into kafka and reading it from there via logstash (running on kubernetes). I use kafka for lots of other purposes and I know we can read 1M records a second using a simple consumer. When I lo…

---

## [Parse 4 digit millisecond timestamp in correct format and then replace @timestamp with log\_timestamp](https://discuss.elastic.co/t/parse-4-digit-millisecond-timestamp-in-correct-format-and-then-replace-timestamp-with-log-timestamp/146906)

<div class="topic-metadata">

**Author:** [@simmi\_a](https://discuss.elastic.co/u/simmi_a)\
**Replies:** 5\
**Last updated:** [September 12, 2018, 8:04pm UTC](https://discuss.elastic.co/t/parse-4-digit-millisecond-timestamp-in-correct-format-and-then-replace-timestamp-with-log-timestamp/146906 "2018-09-12T20:04:35Z")

</div>

I have log time in 4 digit milliseconds 2018-08-30 22:44:34.1524 13273641624629889532273 Error Error saving Api Log data Tried this to parse it in correct time format but it doesn't work. I have to replace the @timesta…

---

## [Sudo bin/logstash -f /etc/logstash/conf.d/logstash.conf --path.settings /etc/logstash](https://discuss.elastic.co/t/sudo-bin-logstash-f-etc-logstash-conf-d-logstash-conf-path-settings-etc-logstash/147445)

<div class="topic-metadata">

**Author:** [@ElastiSid](https://discuss.elastic.co/u/ElastiSid)\
**Replies:** 5\
**Last updated:** [September 5, 2018, 11:02pm UTC](https://discuss.elastic.co/t/sudo-bin-logstash-f-etc-logstash-conf-d-logstash-conf-path-settings-etc-logstash/147445 "2018-09-05T23:02:19Z")

</div>

I am getting error. Logstash is not really working - Elasticsearch has no feed. Ubuntu 16.04 LTS, Java 1.8, ES 6., LS 6. /usr/share/logstash/bin$ ls -l total 68 -rwxr-xr-x 1 logstash logstash 152 Aug 17 17:21 benc…

---

## [Logstash input json splitted by newline "\\n"](https://discuss.elastic.co/t/logstash-input-json-splitted-by-newline-n/318146)

<div class="topic-metadata">

**Author:** [@dmrlixos](https://discuss.elastic.co/u/dmrlixos)\
**Replies:** 7\
**Last updated:** [November 9, 2022, 4:49pm UTC](https://discuss.elastic.co/t/logstash-input-json-splitted-by-newline-n/318146 "2022-11-09T16:49:45Z")

</div>

Hi I have a logstash pipeline running on tcp port 8080, that receive a log from another application. These application send logs with header "application/json;charset=UTF-8" and maybe send 1 json line or many json sppl…

---

## [Horizontal Bar Chart in Kibana 4](https://discuss.elastic.co/t/horizontal-bar-chart-in-kibana-4/48020)

<div class="topic-metadata">

**Author:** [@hirakj](https://discuss.elastic.co/u/hirakj)\
**Replies:** 2\
**Last updated:** [April 21, 2016, 6:45pm UTC](https://discuss.elastic.co/t/horizontal-bar-chart-in-kibana-4/48020 "2016-04-21T18:45:32Z")

</div>

Continuing the discussion from Horizontal Bar Chart in Kibana: Is there any way to create Horizontal Bar Chart in Kibana. Any Custom method available? Any Help or suggestion will much appreciated.

---

## [Dashboards are Failing Users for LDAP Users](https://discuss.elastic.co/t/dashboards-are-failing-users-for-ldap-users/131408)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 1\
**Last updated:** [May 11, 2018, 7:15am UTC](https://discuss.elastic.co/t/dashboards-are-failing-users-for-ldap-users/131408 "2018-05-11T07:15:41Z")

</div>

Hi, I installed x-pack across all the nodes on my ELK cluster, and also enabled Security with LDAP, and provided Kibana dashboard only roles for all the users in LDAP. When I login thru elastic user Id, Am able to see …

---

## [How to solve HTTP.\* jar problem?](https://discuss.elastic.co/t/how-to-solve-http-jar-problem/76340)

<div class="topic-metadata">

**Author:** [@2010](https://discuss.elastic.co/u/2010)\
**Replies:** 3\
**Last updated:** [March 18, 2017, 1:27pm UTC](https://discuss.elastic.co/t/how-to-solve-http-jar-problem/76340 "2017-03-18T13:27:26Z")

</div>

import: Servlet.service() for servlet \[spring\] in context with path \[/elearning-training\] threw exception \[Handler processing failed; nested exception is java.lang.NoSuchMethodError: org.apache.http.util.Asserts.check(ZL…

---

## [Migration from HLRC to Java API](https://discuss.elastic.co/t/migration-from-hlrc-to-java-api/300479)

<div class="topic-metadata">

**Author:** [@ivanqwam](https://discuss.elastic.co/u/ivanqwam)\
**Replies:** 6\
**Last updated:** [April 11, 2022, 11:59am UTC](https://discuss.elastic.co/t/migration-from-hlrc-to-java-api/300479 "2022-04-11T11:59:06Z")

</div>

In this page talking about migration https://www.elastic.co/guide/en/elasticsearch/client/java-api-client/current/migrate-hlrc.html I found this keep the existing code as-is and use the new Java API Client for new fe…

---

## [Unable to bind specific network interface to logstash](https://discuss.elastic.co/t/unable-to-bind-specific-network-interface-to-logstash/290556)

<div class="topic-metadata">

**Author:** [@hari97](https://discuss.elastic.co/u/hari97)\
**Replies:** 6\
**Last updated:** [November 30, 2021, 2:32pm UTC](https://discuss.elastic.co/t/unable-to-bind-specific-network-interface-to-logstash/290556 "2021-11-30T14:32:12Z")

</div>

I have two interfaces eth0 and eth2. Network traffic of systems reaching to eth2 interface. I have Logstash instance which was working good for network traffic of default network interface (eth0). My requirement is log…

---

## [Unable to use User Authentication in Elasticsearch and Elastic-App-Search](https://discuss.elastic.co/t/unable-to-use-user-authentication-in-elasticsearch-and-elastic-app-search/277531)

<div class="topic-metadata">

**Author:** [@shubamraina](https://discuss.elastic.co/u/shubamraina)\
**Replies:** 6\
**Last updated:** [July 2, 2021, 5:47pm UTC](https://discuss.elastic.co/t/unable-to-use-user-authentication-in-elasticsearch-and-elastic-app-search/277531 "2021-07-02T17:47:01Z")

</div>

I have installed Elasticsearch and Elastic-App-Search. Currently it is open to public(i.e: Anyone with the url can see the engines. I want to have User Authentication on the url so that it cannot be accessed by anyone. I…

---

## [Missing index pattern heartbeat-\*](https://discuss.elastic.co/t/missing-index-pattern-heartbeat/247394)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 6\
**Last updated:** [September 4, 2020, 9:08pm UTC](https://discuss.elastic.co/t/missing-index-pattern-heartbeat/247394 "2020-09-04T21:08:40Z")

</div>

Hi, I am using ELK 7.9. I have installed and confirmed working fine Winlogbeat, Packetbeat and Auditbeat. But regarding Heartbeat, apparently is working fine, as is communicating with Elasticsearch, but is the only beat…

---

## [KV Filtering data between square brackets](https://discuss.elastic.co/t/kv-filtering-data-between-square-brackets/126124)

<div class="topic-metadata">

**Author:** [@harinandan04](https://discuss.elastic.co/u/harinandan04)\
**Replies:** 6\
**Last updated:** [April 3, 2018, 4:41am UTC](https://discuss.elastic.co/t/kv-filtering-data-between-square-brackets/126124 "2018-04-03T04:41:29Z")

</div>

Hi, How can i parse data which has two layers of square brackets. Inner square brackets Outer square brackets I only want to consider outer square brackets data as key value pairs. Example : \[filename=0\_578cc\[R2\]…

---

## [Kibana shows 0 CPU usage if cgroups stats enabled](https://discuss.elastic.co/t/kibana-shows-0-cpu-usage-if-cgroups-stats-enabled/97239)

<div class="topic-metadata">

**Author:** [@vb4t](https://discuss.elastic.co/u/vb4t)\
**Replies:** 6\
**Last updated:** [August 23, 2017, 5:15am UTC](https://discuss.elastic.co/t/kibana-shows-0-cpu-usage-if-cgroups-stats-enabled/97239 "2017-08-23T05:15:32Z")

</div>

Hello. If I switch Kibana to cgroup stats with “xpack.monitoring.ui.container.elasticsearch.enabled: true” config, I see just 0% CPU usage for all elasticsearch nodes. Kibana, Logstash and Elasticsearch are running in do…

---

## [Jdbc input to close db connection](https://discuss.elastic.co/t/jdbc-input-to-close-db-connection/55689)

<div class="topic-metadata">

**Author:** [@Govind\_Raj](https://discuss.elastic.co/u/Govind_Raj)\
**Replies:** 0\
**Last updated:** [July 17, 2016, 11:32am UTC](https://discuss.elastic.co/t/jdbc-input-to-close-db-connection/55689 "2016-07-17T11:32:38Z")

</div>

Hi Team I am using Jdbc as my input in logstash configuration . our configs has a schedule of once in every hour. we want to ensure that that the dbconnections are closed after the read operation is completed. Is ther…

---

## [Deleting index to clear up storage](https://discuss.elastic.co/t/deleting-index-to-clear-up-storage/50325)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 2\
**Last updated:** [May 18, 2016, 10:55am UTC](https://discuss.elastic.co/t/deleting-index-to-clear-up-storage/50325 "2016-05-18T10:55:35Z")

</div>

I have an index called "logstash-events" which holds a few million log entries that are sent from network devices across the network, but a majority of them(90.45%) are useless. I filtered those out for the future, but…

---

## [Kibanaプラグインで FieldFormat is not a constructor エラー](https://discuss.elastic.co/t/kibana-fieldformat-is-not-a-constructor/105827)

<div class="topic-metadata">

**Author:** [@drumn](https://discuss.elastic.co/u/drumn)\
**Replies:** 7\
**Last updated:** [November 9, 2017, 5:24am UTC](https://discuss.elastic.co/t/kibana-fieldformat-is-not-a-constructor/105827 "2017-11-09T05:24:20Z")

</div>

お世話になっております。 kibana + ElasticSearch (6.0.0-rc1)でkibanaプラグインの開発を試みており、 こちらのサイトの記述を真似てvisualizeを表示しようとしています。 https://www.elastic.co/guide/en/kibana/master/development-embedding-visualizations.html ですが、実行時に「TypeError: F…

---

## [F5 logs not processing real time](https://discuss.elastic.co/t/f5-logs-not-processing-real-time/25044)

<div class="topic-metadata">

**Author:** [@Crista\_Shawler](https://discuss.elastic.co/u/Crista_Shawler)\
**Replies:** 7\
**Last updated:** [July 14, 2015, 5:40am UTC](https://discuss.elastic.co/t/f5-logs-not-processing-real-time/25044 "2015-07-14T05:40:41Z")

</div>

We are shipping all of our F5 logs to Redis and then into Elasticsearch but they seem to be getting backed up. We are seeing a delay of sometimes 4 hours or more. They continue to process and it seems to catchup over n…

---

## [How to configure SSL for logstash-input-tcp when running on windows?](https://discuss.elastic.co/t/how-to-configure-ssl-for-logstash-input-tcp-when-running-on-windows/85260)

<div class="topic-metadata">

**Author:** [@Tonni\_Hult](https://discuss.elastic.co/u/Tonni_Hult)\
**Replies:** 1\
**Last updated:** [May 12, 2017, 8:36am UTC](https://discuss.elastic.co/t/how-to-configure-ssl-for-logstash-input-tcp-when-running-on-windows/85260 "2017-05-12T08:36:50Z")

</div>

Hi I need help in getting the ssl configuration correct. We are running ELK on windows servers and are now sending the logs from nxlog to logstash over tcp, port 5000. Now we are switching over to ssl but I can't seem …

---

## [JAVA vs REST index existence check](https://discuss.elastic.co/t/java-vs-rest-index-existence-check/7370)

<div class="topic-metadata">

**Author:** [@Kosta](https://discuss.elastic.co/u/Kosta)\
**Replies:** 3\
**Last updated:** [April 19, 2012, 1:38pm UTC](https://discuss.elastic.co/t/java-vs-rest-index-existence-check/7370 "2012-04-19T13:38:58Z")

</div>

I have been reading the group for ways in which to check the existence of an index, and using the JAVA API, this seems to be the preferred method: client.admin().cluster().prepareHealth().setWaitForYellowStatus().ex…

---

## [Parsing XML file](https://discuss.elastic.co/t/parsing-xml-file/88854)

<div class="topic-metadata">

**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\
**Replies:** 2\
**Last updated:** [June 11, 2017, 8:19pm UTC](https://discuss.elastic.co/t/parsing-xml-file/88854 "2017-06-11T20:19:56Z")

</div>

Hi I am trying to parse this XML file to fetch all the \<item name="Software Application"\> \</item\> tag and the property inside them under \<category name="Software"\> \</category\> . I also need to count no of \<item name="S…

---

## [Monitoring other software repository download](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033)

<div class="topic-metadata">

**Author:** [@Rajasekaran\_Mari](https://discuss.elastic.co/u/Rajasekaran_Mari)\
**Replies:** 6\
**Last updated:** [February 23, 2017, 4:15pm UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033 "2017-02-23T16:15:19Z")

</div>

how to write a script to Attempts to download software from a location other than the cloud software repository. Beats

---

## [Unable to set "ssl true", "ssl\_certificate\_verification false" in logstash http output plugin](https://discuss.elastic.co/t/unable-to-set-ssl-true-ssl-certificate-verification-false-in-logstash-http-output-plugin/244764)

<div class="topic-metadata">

**Author:** [@bimanarajesh](https://discuss.elastic.co/u/bimanarajesh)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 5:54pm UTC](https://discuss.elastic.co/t/unable-to-set-ssl-true-ssl-certificate-verification-false-in-logstash-http-output-plugin/244764 "2020-08-12T17:54:03Z")

</div>

With http output plugin, I am not able to set ssl =\> true ssl\_certificate\_verification =\> false We are getting configuration error when we add the above configurations in http output Pls let us know how to enable ssl…

---

## [Can't get client nodes to join cluster after installing xpack, other nodes are joining fine](https://discuss.elastic.co/t/cant-get-client-nodes-to-join-cluster-after-installing-xpack-other-nodes-are-joining-fine/72822)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 1\
**Last updated:** [January 25, 2017, 11:54pm UTC](https://discuss.elastic.co/t/cant-get-client-nodes-to-join-cluster-after-installing-xpack-other-nodes-are-joining-fine/72822 "2017-01-25T23:54:25Z")

</div>

Hi! We have been using es 1.7.2 for a while, and have just stood up two new es 5.1.2 clusters (one main, and one monitoring). Had everything working without xpack. Then installed xpack into elasticsearch) on all the …

---

## [Vertical line in vertical bar chart, possible?](https://discuss.elastic.co/t/vertical-line-in-vertical-bar-chart-possible/265232)

<div class="topic-metadata">

**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\
**Replies:** 5\
**Last updated:** [February 25, 2021, 2:52pm UTC](https://discuss.elastic.co/t/vertical-line-in-vertical-bar-chart-possible/265232 "2021-02-25T14:52:38Z")

</div>

Hi, I created a vertical histogram bar chart. My Y-axis is count. X axis is histogram range of the field I am interested in. Is it possible to add vertical fixed value lines to this vertical bar chart? Or add a vertical …

---

## [Why disk read is high than disk write?](https://discuss.elastic.co/t/why-disk-read-is-high-than-disk-write/20574)

<div class="topic-metadata">

**Author:** [@11172](https://discuss.elastic.co/u/11172)\
**Replies:** 5\
**Last updated:** [November 5, 2014, 9:36am UTC](https://discuss.elastic.co/t/why-disk-read-is-high-than-disk-write/20574 "2014-11-05T09:36:05Z")

</div>

hi! my first question! if replica 0 bulk index, then disk read, write ratio same. but batch finish after... disk read is high than write. disk read = 10 X disk write... so cpu load is high, then batch index very …

---

## [Extracting brands in documents using keyword and shingles](https://discuss.elastic.co/t/extracting-brands-in-documents-using-keyword-and-shingles/91873)

<div class="topic-metadata">

**Author:** [@fhelje](https://discuss.elastic.co/u/fhelje)\
**Replies:** 8\
**Last updated:** [July 5, 2017, 3:21pm UTC](https://discuss.elastic.co/t/extracting-brands-in-documents-using-keyword-and-shingles/91873 "2017-07-05T15:21:19Z")

</div>

Hi, I'm trying to use elastic to find brands in documents. So my idea was to create a index containing brands and search with a text to find brands. So I tried this index and mapping: PUT brand { "settings": { …

---

## [BulkProcessor close function](https://discuss.elastic.co/t/bulkprocessor-close-function/17135)

<div class="topic-metadata">

**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\
**Replies:** 8\
**Last updated:** [April 23, 2014, 4:10pm UTC](https://discuss.elastic.co/t/bulkprocessor-close-function/17135 "2014-04-23T16:10:26Z")

</div>

bulkProcessor.close(); Does this also close the transportClient? When I follow up the above line with client.close(), I get no available exception. -- You received this message because you are subscribed to th…

---

## [Compress : true flag](https://discuss.elastic.co/t/compress-true-flag/4983)

<div class="topic-metadata">

**Author:** [@Anurag\_Phadke](https://discuss.elastic.co/u/Anurag_Phadke)\
**Replies:** 8\
**Last updated:** [April 20, 2012, 10:40pm UTC](https://discuss.elastic.co/t/compress-true-flag/4983 "2012-04-20T22:40:21Z")

</div>

Added the compress flag using the following: curl -XPUT localhost:9200/\_settings -d '{ "index" : { "\_source" : {"compress" : true} } }' However, there wasn't any significant difference in the si…

---

## [Elastic search crashes after start](https://discuss.elastic.co/t/elastic-search-crashes-after-start/169957)

<div class="topic-metadata">

**Author:** [@Anmari](https://discuss.elastic.co/u/Anmari)\
**Replies:** 4\
**Last updated:** [February 26, 2019, 2:15pm UTC](https://discuss.elastic.co/t/elastic-search-crashes-after-start/169957 "2019-02-26T14:15:46Z")

</div>

It seems that our server operator installes updates on 22.02 and since 23.02 no new logfils are written. Wehn trying to start ES it imidiatly crashes again. The elasticsearch.log gives the following hint.: \[2019-02-26T…

---

## [Add a filter only for a specific metric of a table](https://discuss.elastic.co/t/add-a-filter-only-for-a-specific-metric-of-a-table/54521)

<div class="topic-metadata">

**Author:** [@vinuja](https://discuss.elastic.co/u/vinuja)\
**Replies:** 4\
**Last updated:** [July 6, 2016, 7:53am UTC](https://discuss.elastic.co/t/add-a-filter-only-for-a-specific-metric-of-a-table/54521 "2016-07-06T07:53:46Z")

</div>

I have a system that returns Valid or Invalid Results from different hosts. In a table visualization, I would like to introduce 2 metrics: the count per host and the count of valid per host. So I create a Data table, wi…

---

## [ES 7.2.0 Master fails to join cluster](https://discuss.elastic.co/t/es-7-2-0-master-fails-to-join-cluster/191605)

<div class="topic-metadata">

**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 9:58am UTC](https://discuss.elastic.co/t/es-7-2-0-master-fails-to-join-cluster/191605 "2019-07-22T09:58:35Z")

</div>

I am using ES 7.2.0 cluster with 3 Masters and 2 Slaves. Bump into the following exception in the master node: {"type": "server", "timestamp": "2019-07-22T08:20:00,042+0000", "level": "WARN", "component": "o.e.c.c.Coord…

---

## [Is there a "Multi Count API" in ES](https://discuss.elastic.co/t/is-there-a-multi-count-api-in-es/109394)

<div class="topic-metadata">

**Author:** [@fpillo](https://discuss.elastic.co/u/fpillo)\
**Replies:** 2\
**Last updated:** [November 28, 2017, 1:27pm UTC](https://discuss.elastic.co/t/is-there-a-multi-count-api-in-es/109394 "2017-11-28T13:27:48Z")

</div>

Hello guys, I am new here and I have a simple question for you. Is there a multi count API en ES. I know we have the Count API and Multi Search API. Thanks!

---

## [Use Winlogbeat on UDP protocol](https://discuss.elastic.co/t/use-winlogbeat-on-udp-protocol/84297)

<div class="topic-metadata">

**Author:** [@ThierryMat](https://discuss.elastic.co/u/ThierryMat)\
**Replies:** 2\
**Last updated:** [May 3, 2017, 8:27am UTC](https://discuss.elastic.co/t/use-winlogbeat-on-udp-protocol/84297 "2017-05-03T08:27:34Z")

</div>

Hi, In advance, sorry for my bad english. In order to forward windows event logs to a logstash Server, i use WinlogBeat to do that. I would like to know how can i configure winlogbeat agent to push logs on UDP protocol f…

---

## [Elasticsearch solo vs Couchbase+Elasticsearch](https://discuss.elastic.co/t/elasticsearch-solo-vs-couchbase-elasticsearch/35785)

<div class="topic-metadata">

**Author:** [@esnosek](https://discuss.elastic.co/u/esnosek)\
**Replies:** 2\
**Last updated:** [January 12, 2016, 5:53pm UTC](https://discuss.elastic.co/t/elasticsearch-solo-vs-couchbase-elasticsearch/35785 "2016-01-12T17:53:05Z")

</div>

Let me describe the issue. Now I'm at the stage of architectural changes. I used to use Elasticsearch as aggregation and search tool, but now I'm thinking about use it as main DB. I read that there is not recommended …

---

## [Complete newbie, but need urgent cleanup](https://discuss.elastic.co/t/complete-newbie-but-need-urgent-cleanup/282802)

<div class="topic-metadata">

**Author:** [@TwanVeugelers](https://discuss.elastic.co/u/TwanVeugelers)\
**Replies:** 7\
**Last updated:** [September 2, 2021, 5:45am UTC](https://discuss.elastic.co/t/complete-newbie-but-need-urgent-cleanup/282802 "2021-09-02T05:45:41Z")

</div>

Hi. I have taken over the monitoring / elastic search from a colleague that left the company. I now see that our D drive is almost reaching its limits and will be full pretty shortly. I'm a full newbie and need to lea…

---

## [Autocomplete address search](https://discuss.elastic.co/t/autocomplete-address-search/304715)

<div class="topic-metadata">

**Author:** [@foobar2022](https://discuss.elastic.co/u/foobar2022)\
**Replies:** 6\
**Last updated:** [May 14, 2022, 5:42am UTC](https://discuss.elastic.co/t/autocomplete-address-search/304715 "2022-05-14T05:42:59Z")

</div>

Hi, I'm trying to build an index & query for address search autocomplete for City, State & Country. I have a structured data fields: City, State Country Full (a complete field that concatenates City State & Country, …

---

## [Out of Memory right after staring logstash](https://discuss.elastic.co/t/out-of-memory-right-after-staring-logstash/179568)

<div class="topic-metadata">

**Author:** [@halolk](https://discuss.elastic.co/u/halolk)\
**Replies:** 6\
**Last updated:** [May 8, 2019, 12:02am UTC](https://discuss.elastic.co/t/out-of-memory-right-after-staring-logstash/179568 "2019-05-08T00:02:22Z")

</div>

Hi guys, My company is running a logstash instance to ingest logs from customer by several input conf files, it crashed after about 1 day due to OOM, and then every time I try to start it again, it crash by OOM immediat…

---

## [Filebeat behavior](https://discuss.elastic.co/t/filebeat-behavior/55141)

<div class="topic-metadata">

**Author:** [@Jemli\_Fathi](https://discuss.elastic.co/u/Jemli_Fathi)\
**Replies:** 6\
**Last updated:** [July 22, 2016, 4:36pm UTC](https://discuss.elastic.co/t/filebeat-behavior/55141 "2016-07-22T16:36:18Z")

</div>

I have an XML file which is gonna be updated arbitrary by another program by appending new documents each time... This file also will be initialized every day by depopulating it. I configured filebeat to catch every X…

---

## [APM agent fails to connect to APM server](https://discuss.elastic.co/t/apm-agent-fails-to-connect-to-apm-server/297660)

<div class="topic-metadata">

**Author:** [@inbox.ex](https://discuss.elastic.co/u/inbox.ex)\
**Replies:** 2\
**Last updated:** [February 22, 2022, 3:13am UTC](https://discuss.elastic.co/t/apm-agent-fails-to-connect-to-apm-server/297660 "2022-02-22T03:13:15Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Docker packetbeat:6.0.1Operation not permitted](https://discuss.elastic.co/t/docker-packetbeat-6-0-1operation-not-permitted/110953)

<div class="topic-metadata">

**Author:** [@claflico](https://discuss.elastic.co/u/claflico)\
**Replies:** 2\
**Last updated:** [December 11, 2017, 3:30pm UTC](https://discuss.elastic.co/t/docker-packetbeat-6-0-1operation-not-permitted/110953 "2017-12-11T15:30:37Z")

</div>

Trying to run the packetbeat 6.0.1 container and getting an "Operation not permitted" error. docker run docker.elastic.co/beats/packetbeat:6.0.1 setup --template -E output.logstash.enabled=false -E 'output.elasticsearch…

---

## [Logstash doesn't start due to Charset issue](https://discuss.elastic.co/t/logstash-doesnt-start-due-to-charset-issue/237291)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 5\
**Last updated:** [June 22, 2020, 6:15am UTC](https://discuss.elastic.co/t/logstash-doesnt-start-due-to-charset-issue/237291 "2020-06-22T06:15:00Z")

</div>

hi all I installed logstash v. 6.6 on windows. my config file is as following: input { beats { port =\> 5044 } } output { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "my\_log" …

---

## [Metricbeat CPU percentage between 0 and 1](https://discuss.elastic.co/t/metricbeat-cpu-percentage-between-0-and-1/82712)

<div class="topic-metadata">

**Author:** [@GogLlundain](https://discuss.elastic.co/u/GogLlundain)\
**Replies:** 5\
**Last updated:** [April 19, 2017, 9:27am UTC](https://discuss.elastic.co/t/metricbeat-cpu-percentage-between-0-and-1/82712 "2017-04-19T09:27:35Z")

</div>

Hi there, Posting data to ElasticSearch via LogStash I get CPU values that range from 0 to 1. In the default template this is a scaled\_float, I haven't changed the template. When I look at discover or I visualise the d…

---

## [Issues with using repository-hdfs plug in for snapshot/restore operation](https://discuss.elastic.co/t/issues-with-using-repository-hdfs-plug-in-for-snapshot-restore-operation/18513)

<div class="topic-metadata">

**Author:** [@Jinyuan\_Zhou](https://discuss.elastic.co/u/Jinyuan_Zhou)\
**Replies:** 5\
**Last updated:** [November 22, 2014, 12:17am UTC](https://discuss.elastic.co/t/issues-with-using-repository-hdfs-plug-in-for-snapshot-restore-operation/18513 "2014-11-22T00:17:28Z")

</div>

I am using elasticsearch 1.2.1 and CDH 4.6. quick start vm. My ES server is installed on the same vm. I have one successful senario: I used light version and add the result and command \`hadoop classpath\` to ES\_CLAS…

---

## [Get function score value as fields](https://discuss.elastic.co/t/get-function-score-value-as-fields/28129)

<div class="topic-metadata">

**Author:** [@Mauricio\_Scheffer](https://discuss.elastic.co/u/Mauricio_Scheffer)\
**Replies:** 0\
**Last updated:** [August 26, 2015, 4:57pm UTC](https://discuss.elastic.co/t/get-function-score-value-as-fields/28129 "2015-08-26T16:57:29Z")

</div>

Hi, I'm looking for the equivalent of this Solr feature which allows me to get a function score value as a pseudo-field. I don't see anything similar in the documentation... Perhaps it's possible to call custom functio…

---

## ["Expected \[START\_OBJECT\] but found \[VALUE\_STRING\]"](https://discuss.elastic.co/t/expected-start-object-but-found-value-string/159558)

<div class="topic-metadata">

**Author:** [@Jrcnp](https://discuss.elastic.co/u/Jrcnp)\
**Replies:** 0\
**Last updated:** [December 5, 2018, 2:49pm UTC](https://discuss.elastic.co/t/expected-start-object-but-found-value-string/159558 "2018-12-05T14:49:09Z")

</div>

I'm really new to the logstash concept and it's use so the problems i'm dealing with, are probably really easy. I have a folder with json files where logstash is getting the info and sending it to elasticsearch. At this…

---

## [ES Benchmark for 2.4.5 and 1.5](https://discuss.elastic.co/t/es-benchmark-for-2-4-5-and-1-5/92764)

<div class="topic-metadata">

**Author:** [@Thennarasu\_Subramani](https://discuss.elastic.co/u/Thennarasu_Subramani)\
**Replies:** 8\
**Last updated:** [July 17, 2017, 7:34am UTC](https://discuss.elastic.co/t/es-benchmark-for-2-4-5-and-1-5/92764 "2017-07-17T07:34:04Z")

</div>

Hi All I want to take elastic search benchmark for 1.5 and 2.4.5 cluster,i am tring to use esrally,i dont know whether this esrally tool will support or not, can you please suggest me which tool i have to use? do u hav…

---

## [Import/Export elasticsearch users and roles](https://discuss.elastic.co/t/import-export-elasticsearch-users-and-roles/248805)

<div class="topic-metadata">

**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\
**Replies:** 2\
**Last updated:** [September 17, 2020, 5:55am UTC](https://discuss.elastic.co/t/import-export-elasticsearch-users-and-roles/248805 "2020-09-17T05:55:56Z")

</div>

Greetings, I have to backup user and roles from one server to another server. I am following the given method to achieve this. Take JSON dump of .security-7 index from source server. Re-index .security-7 index on dest…

---

## [Add alias to existing indices (and newly created indices) using Kibana UI](https://discuss.elastic.co/t/add-alias-to-existing-indices-and-newly-created-indices-using-kibana-ui/339147)

<div class="topic-metadata">

**Author:** [@shawnmin](https://discuss.elastic.co/u/shawnmin)\
**Replies:** 3\
**Last updated:** [July 29, 2023, 2:54am UTC](https://discuss.elastic.co/t/add-alias-to-existing-indices-and-newly-created-indices-using-kibana-ui/339147 "2023-07-29T02:54:27Z")

</div>

I've set up an EFK stack on my Kubernetes cluster. I want to automatically delete indices after certain days later (i.e., log retention and rotation), so I've created an index lifecycle policy. The policy's name is dele…

---

## [Caused by: org.apache.hadoop.hive.ql.metadata.HiveException: Hive Runtime Error while processing row {](https://discuss.elastic.co/t/caused-by-org-apache-hadoop-hive-ql-metadata-hiveexception-hive-runtime-error-while-processing-row/125281)

<div class="topic-metadata">

**Author:** [@naresh523](https://discuss.elastic.co/u/naresh523)\
**Replies:** 3\
**Last updated:** [March 23, 2018, 8:25pm UTC](https://discuss.elastic.co/t/caused-by-org-apache-hadoop-hive-ql-metadata-hiveexception-hive-runtime-error-while-processing-row/125281 "2018-03-23T20:25:30Z")

</div>

Table B has ~60millions records. Elastic Search Hive Insert into table A query from Table B; failed with below error. Caused by: org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check ne…

[Previous page](https://discuss.elastic.co/top.md?page=698&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=700&per_page=50&period=all)
