# Top

**URL:** https://discuss.elastic.co/top.md?page=711&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 712

---

## [How to visualize JSON array in Kibana](https://discuss.elastic.co/t/how-to-visualize-json-array-in-kibana/145260)

<div class="topic-metadata">

**Author:** [@obaid](https://discuss.elastic.co/u/obaid)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 9:12pm UTC](https://discuss.elastic.co/t/how-to-visualize-json-array-in-kibana/145260 "2018-08-21T21:12:26Z")

</div>

Context: I have my application logs on ELK, where JSON API response looks like: Response 1: { "rules" : \[ {"name" : "R1", "value" : "Y"}, {"name" : "R2", "value" : "Y"}, {"name" : "R…

---

## [Ignore lines which are not JSON in log file using Filebeat](https://discuss.elastic.co/t/ignore-lines-which-are-not-json-in-log-file-using-filebeat/187154)

<div class="topic-metadata">

**Author:** [@Jitendra\_Kumhar](https://discuss.elastic.co/u/Jitendra_Kumhar)\
**Replies:** 3\
**Last updated:** [June 25, 2019, 7:48am UTC](https://discuss.elastic.co/t/ignore-lines-which-are-not-json-in-log-file-using-filebeat/187154 "2019-06-25T07:48:57Z")

</div>

Sample log file { "name": "Meowsy", "species" : "cat", "foods": { "likes": \["tuna", "catnip"\], "dislikes": \["ham", "zucchini"\] } } another line next line So I want filebeat to ignore 2nd and 3rd line and send only 1s…

---

## [How to move log-files to another location after it is processed by Logstash and sent to ElasticSearch](https://discuss.elastic.co/t/how-to-move-log-files-to-another-location-after-it-is-processed-by-logstash-and-sent-to-elasticsearch/73459)

<div class="topic-metadata">

**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\
**Replies:** 3\
**Last updated:** [February 2, 2017, 6:52am UTC](https://discuss.elastic.co/t/how-to-move-log-files-to-another-location-after-it-is-processed-by-logstash-and-sent-to-elasticsearch/73459 "2017-02-02T06:52:47Z")

</div>

Hi, I am processing multiple log-files from a folder using logstash and sending the data to ES. Now, I want to move a file to other location once the processing is done. How to do this?

---

## [Huge memory leaks caused by ElasticSearch](https://discuss.elastic.co/t/huge-memory-leaks-caused-by-elasticsearch/35353)

<div class="topic-metadata">

**Author:** [@Matt\_Hintzke](https://discuss.elastic.co/u/Matt_Hintzke)\
**Replies:** 3\
**Last updated:** [November 24, 2015, 7:53pm UTC](https://discuss.elastic.co/t/huge-memory-leaks-caused-by-elasticsearch/35353 "2015-11-24T19:53:18Z")

</div>

I have recently taken on the task of managing our existing ES index and in doing so had to alter the index in a way to allow sorting on certain fields. Ever since my updates to the index mapping and an increase in total…

---

## [Unable to start kibana.service](https://discuss.elastic.co/t/unable-to-start-kibana-service/207489)

<div class="topic-metadata">

**Author:** [@Praveen\_Yallala](https://discuss.elastic.co/u/Praveen_Yallala)\
**Replies:** 6\
**Last updated:** [November 21, 2019, 9:14am UTC](https://discuss.elastic.co/t/unable-to-start-kibana-service/207489 "2019-11-21T09:14:45Z")

</div>

I have installed Kibana and elastic search in Linux (RHEL). I am able to run both kibana and elastic search manually. I want to start the service. Unfortunately, I am unable to find kibana.service file anywhere. I have t…

---

## [Rest High level client initialization, What are the ports needed](https://discuss.elastic.co/t/rest-high-level-client-initialization-what-are-the-ports-needed/140033)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 1\
**Last updated:** [July 16, 2018, 1:37am UTC](https://discuss.elastic.co/t/rest-high-level-client-initialization-what-are-the-ports-needed/140033 "2018-07-16T01:37:59Z")

</div>

RestHighLevelClient client = new RestHighLevelClient( RestClient.builder( new HttpHost("localhost", 9200, "http"), new HttpHost("localhost", 9201, "http"))); Link to High level cl…

---

## [Disk usage difference between data nodes](https://discuss.elastic.co/t/disk-usage-difference-between-data-nodes/275798)

<div class="topic-metadata">

**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\
**Replies:** 5\
**Last updated:** [July 6, 2021, 2:40pm UTC](https://discuss.elastic.co/t/disk-usage-difference-between-data-nodes/275798 "2021-07-06T14:40:33Z")

</div>

Hello, we have a pretty big cluster (26 data nodes, almost 100TB), and I have a question about the disk usage distribution across data nodes. I know that Elasticsearch takes to consideration the equality between number…

---

## [Allowing multiple mappings in Elastic Search 6](https://discuss.elastic.co/t/allowing-multiple-mappings-in-elastic-search-6/262864)

<div class="topic-metadata">

**Author:** [@Jack4](https://discuss.elastic.co/u/Jack4)\
**Replies:** 5\
**Last updated:** [February 1, 2021, 8:14pm UTC](https://discuss.elastic.co/t/allowing-multiple-mappings-in-elastic-search-6/262864 "2021-02-01T20:14:44Z")

</div>

Hi All, I am upgrading from Elastic 5.6.16 to 6.8.13 and it's complaining about "Rejecting mapping update to...as the final mapping would have more than 1 type" Without switching to single mapping, is there a workarou…

---

## [Daily index maintenance](https://discuss.elastic.co/t/daily-index-maintenance/130902)

<div class="topic-metadata">

**Author:** [@ankitachow](https://discuss.elastic.co/u/ankitachow)\
**Replies:** 5\
**Last updated:** [May 11, 2018, 6:30am UTC](https://discuss.elastic.co/t/daily-index-maintenance/130902 "2018-05-11T06:30:10Z")

</div>

Hi, In my current application, I'm rolling over data with a doc limit. I'm planning to implement the logic of creating daily indices in my platform. I would like to know how would daily index affect below parameters: …

---

## [Filebeat Memory Leakage Investigation](https://discuss.elastic.co/t/filebeat-memory-leakage-investigation/83012)

<div class="topic-metadata">

**Author:** [@ademmers](https://discuss.elastic.co/u/ademmers)\
**Replies:** 5\
**Last updated:** [April 20, 2017, 11:28am UTC](https://discuss.elastic.co/t/filebeat-memory-leakage-investigation/83012 "2017-04-20T11:28:28Z")

</div>

Hi, Filebeat version 5.2.0 OS: Centos 6.6 and 7.2 Configuration (cfr second post) On our production environment I'm investigating memory leaking in the filebeat process. I've gotten so far to deduce (using go tool p…

---

## [Data Table creation with Filters](https://discuss.elastic.co/t/data-table-creation-with-filters/212570)

<div class="topic-metadata">

**Author:** [@Shyamcharan](https://discuss.elastic.co/u/Shyamcharan)\
**Replies:** 4\
**Last updated:** [January 28, 2020, 11:50am UTC](https://discuss.elastic.co/t/data-table-creation-with-filters/212570 "2020-01-28T11:50:23Z")

</div>

Hi, I am new user in Kibana. I wanted to create a data-table with almost 7 or 8 columns and 5000+ rows of data. I need to apply few filters as well on that data. Is it possible to create this kind of visualization in ki…

---

## [Update multi field inner value using script processor](https://discuss.elastic.co/t/update-multi-field-inner-value-using-script-processor/85652)

<div class="topic-metadata">

**Author:** [@nrmohta](https://discuss.elastic.co/u/nrmohta)\
**Replies:** 0\
**Last updated:** [May 13, 2017, 6:57pm UTC](https://discuss.elastic.co/t/update-multi-field-inner-value-using-script-processor/85652 "2017-05-13T18:57:36Z")

</div>

Hi We want to update multi field type field using ingest node script processor. For example - PUT /test\_index { "mappings": { "blogpost": { "properties": { "comments": { "type": "nested"…

---

## [Fields not appearing in Metrics -\> Sum -\> Field drop-down](https://discuss.elastic.co/t/fields-not-appearing-in-metrics-sum-field-drop-down/195372)

<div class="topic-metadata">

**Author:** [@penguinairlines](https://discuss.elastic.co/u/penguinairlines)\
**Replies:** 3\
**Last updated:** [August 25, 2019, 11:30pm UTC](https://discuss.elastic.co/t/fields-not-appearing-in-metrics-sum-field-drop-down/195372 "2019-08-25T23:30:50Z")

</div>

I have a new index for which I'm trying to create my first dashboard, but I cannot select any of my fields! The only field I can see is log.offset. I am specifically expecting to see a field called rx\_bytes or rx\_byte…

---

## [Search Query for excluding a combination of characters and numbers](https://discuss.elastic.co/t/search-query-for-excluding-a-combination-of-characters-and-numbers/146914)

<div class="topic-metadata">

**Author:** [@vshankara](https://discuss.elastic.co/u/vshankara)\
**Replies:** 3\
**Last updated:** [September 4, 2018, 7:15pm UTC](https://discuss.elastic.co/t/search-query-for-excluding-a-combination-of-characters-and-numbers/146914 "2018-09-04T19:15:13Z")

</div>

I have a requirement to query for user information but need to exclude a combination of alphabatical characters and numbers. I could easily do this in a regex but not sure on lucene syntax For eg: need to exclude abc123…

---

## [Accuracy issue of aggregation results](https://discuss.elastic.co/t/accuracy-issue-of-aggregation-results/19823)

<div class="topic-metadata">

**Author:** [@Yifan\_Wang](https://discuss.elastic.co/u/Yifan_Wang)\
**Replies:** 3\
**Last updated:** [December 17, 2014, 10:24pm UTC](https://discuss.elastic.co/t/accuracy-issue-of-aggregation-results/19823 "2014-12-17T22:24:57Z")

</div>

It seems to be a common problem that the top N results returned from an aggregation query is inaccurate due to uneven distribution of matching documents on different shards, because ES will collect top N buckets from…

---

## [Automatically closing indices older than 2 days](https://discuss.elastic.co/t/automatically-closing-indices-older-than-2-days/11317)

<div class="topic-metadata">

**Author:** [@Vikram\_Shankar](https://discuss.elastic.co/u/Vikram_Shankar)\
**Replies:** 3\
**Last updated:** [March 28, 2013, 11:08am UTC](https://discuss.elastic.co/t/automatically-closing-indices-older-than-2-days/11317 "2013-03-28T11:08:44Z")

</div>

Hi, I am trying to add a cron job that will automatically close indices older than 2 days(to free up RAM,not enough RAM on nodes ) Here is a brief snippet of the script (in $indexName i have extracted the inde…

---

## [Filebeat config error while configtest](https://discuss.elastic.co/t/filebeat-config-error-while-configtest/90602)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 1\
**Last updated:** [June 23, 2017, 10:25am UTC](https://discuss.elastic.co/t/filebeat-config-error-while-configtest/90602 "2017-06-23T10:25:23Z")

</div>

root@dev01:/usr/share/filebeat/bin# ./filebeat -configtest -e filebeat2017/06/23 09:06:57.152936 beat.go:339: CRIT Exiting: error loading config file: stat filebeat.yml: no such file or directory Exiting: error loading c…

---

## [Ignore\_throttled parameter is deprecated](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated/291224)

<div class="topic-metadata">

**Author:** [@SirConius](https://discuss.elastic.co/u/SirConius)\
**Replies:** 2\
**Last updated:** [December 9, 2021, 9:00am UTC](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated/291224 "2021-12-09T09:00:43Z")

</div>

I've updated my Elasticsearch installation from 7.15.2 to 7.16, but when I open a dashboard I'm greeted with the following Warning: I looked in the deprecated log file before updating and this wasn't in there and I ha…

---

## [Finding errors while inserting data into hbase through hive](https://discuss.elastic.co/t/finding-errors-while-inserting-data-into-hbase-through-hive/25006)

<div class="topic-metadata">

**Author:** [@Balu\_Dhanu](https://discuss.elastic.co/u/Balu_Dhanu)\
**Replies:** 2\
**Last updated:** [November 21, 2015, 10:24am UTC](https://discuss.elastic.co/t/finding-errors-while-inserting-data-into-hbase-through-hive/25006 "2015-11-21T10:24:18Z")

</div>

insert overwrite table 2014data select Symbol,Series,Day\_Mon\_Year,Prev\_Close,Open\_Price,High\_Price,Low\_Price,Last\_Price,Close\_Price,Average\_Price,Total\_Traded\_Quantity,Turnover\_in\_Lacs,No\_of\_Trades,Deliverable\_Qty,Percen…

---

## [Metricbeat doesn't recognize the process](https://discuss.elastic.co/t/metricbeat-doesnt-recognize-the-process/263176)

<div class="topic-metadata">

**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\
**Replies:** 8\
**Last updated:** [March 10, 2021, 9:51pm UTC](https://discuss.elastic.co/t/metricbeat-doesnt-recognize-the-process/263176 "2021-03-10T21:51:10Z")

</div>

HI, I have configured metricbeat to check the process status. I have noticed that it doesn't get the process info sometimes even if the process was running. It is possible that the process was not active some times bu…

---

## [Failed to construct kafka producer](https://discuss.elastic.co/t/failed-to-construct-kafka-producer/76195)

<div class="topic-metadata">

**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\
**Replies:** 0\
**Last updated:** [February 23, 2017, 10:44am UTC](https://discuss.elastic.co/t/failed-to-construct-kafka-producer/76195 "2017-02-23T10:44:27Z")

</div>

with Logstash 5.2, I'm testing sending data to kafka (using Kerberos). Below is the kakfa confiugration: kafka { bootstrap\_servers =\> "xxx" jaas\_path =\> "/usr/hdp/current/kafka-broker/config/kafka\_c…

---

## [How to login screen change in kibana 7.13.0?](https://discuss.elastic.co/t/how-to-login-screen-change-in-kibana-7-13-0/274950)

<div class="topic-metadata">

**Author:** [@111480](https://discuss.elastic.co/u/111480)\
**Replies:** 4\
**Last updated:** [July 15, 2021, 6:03am UTC](https://discuss.elastic.co/t/how-to-login-screen-change-in-kibana-7-13-0/274950 "2021-07-15T06:03:01Z")

</div>

how to login screen change in kibana 7.13.0? I tried following the above link 7.10.0 guide, but I couldn't change the elastic logo on the login page. How can I change the login page screen logo? I would appreciate i…

---

## [Service Map not linking services](https://discuss.elastic.co/t/service-map-not-linking-services/262096)

<div class="topic-metadata">

**Author:** [@jhai](https://discuss.elastic.co/u/jhai)\
**Replies:** 4\
**Last updated:** [February 6, 2021, 7:31pm UTC](https://discuss.elastic.co/t/service-map-not-linking-services/262096 "2021-02-06T19:31:39Z")

</div>

Kibana version: 7.9 Elasticsearch version: 7.9 APM Server version: 7.10 APM Agent language and version: Elastic.Apm.AspNetCore 1.7.1 Browser version: Chrome 87 Original install method (e.g. download page, yum, deb, …

---

## [Adding indices to New Spaces - not able to](https://discuss.elastic.co/t/adding-indices-to-new-spaces-not-able-to/256014)

<div class="topic-metadata">

**Author:** [@lnxjenn](https://discuss.elastic.co/u/lnxjenn)\
**Replies:** 4\
**Last updated:** [November 23, 2020, 1:28pm UTC](https://discuss.elastic.co/t/adding-indices-to-new-spaces-not-able-to/256014 "2020-11-23T13:28:16Z")

</div>

I am creating new spaces for grouping our users together with their appropriate feeds. But I cannot see the feeds within the new space, when i try to add them into the Index Patterns. Now, as a user in the default space…

---

## [Transport error 429](https://discuss.elastic.co/t/transport-error-429/327528)

<div class="topic-metadata">

**Author:** [@Susendiran](https://discuss.elastic.co/u/Susendiran)\
**Replies:** 5\
**Last updated:** [March 13, 2023, 10:48am UTC](https://discuss.elastic.co/t/transport-error-429/327528 "2023-03-13T10:48:31Z")

</div>

Hi Team, We are getting elasticsearch exceptions - transport error 429 while providing es.search command using python pandas for some large set of data(upto 13-15k records). It's showing the limit is more than the thres…

---

## [Issue on user dropdown menu](https://discuss.elastic.co/t/issue-on-user-dropdown-menu/54516)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 5\
**Last updated:** [July 22, 2016, 8:10am UTC](https://discuss.elastic.co/t/issue-on-user-dropdown-menu/54516 "2016-07-22T08:10:56Z")

</div>

When I'm clicking on my profile icon, I'm getting this:

---

## [Logs from logstash indexer produce abnormal spam](https://discuss.elastic.co/t/logs-from-logstash-indexer-produce-abnormal-spam/37935)

<div class="topic-metadata">

**Author:** [@szemlyanoy](https://discuss.elastic.co/u/szemlyanoy)\
**Replies:** 5\
**Last updated:** [January 18, 2016, 8:07pm UTC](https://discuss.elastic.co/t/logs-from-logstash-indexer-produce-abnormal-spam/37935 "2016-01-18T20:07:12Z")

</div>

Dear community, Logstash version 1.5.6 Problem: I have some logstash configs populated cross the fleet as well as on logatash indexer itself. When I simulate error from any agent, event is processed, stored in ES and…

---

## [Query String Query Performance Issue when using ~ operator - ES 1.6](https://discuss.elastic.co/t/query-string-query-performance-issue-when-using-operator-es-1-6/25126)

<div class="topic-metadata">

**Author:** [@effoeffi](https://discuss.elastic.co/u/effoeffi)\
**Replies:** 6\
**Last updated:** [July 22, 2015, 7:22am UTC](https://discuss.elastic.co/t/query-string-query-performance-issue-when-using-operator-es-1-6/25126 "2015-07-22T07:22:16Z")

</div>

Hello, When running a query like: POST /my-index/\_search { "from" : 0, "size" : 5, "query" : { "query\_string" : { "fields" : \["field1","field2",...,"fieldn"\], "query" : "flight~", "use\_dis…

---

## [Filter cache invalidation](https://discuss.elastic.co/t/filter-cache-invalidation/17490)

<div class="topic-metadata">

**Author:** [@Gabe\_Gorelick\_Feldma](https://discuss.elastic.co/u/Gabe_Gorelick_Feldma)\
**Replies:** 7\
**Last updated:** [May 13, 2014, 10:09pm UTC](https://discuss.elastic.co/t/filter-cache-invalidation/17490 "2014-05-13T22:09:19Z")

</div>

Does elasticsearch invalidate your filter caches automatically after a write? The only documentation I've found on filter cache invalidation (besides time-based expiry) is on \`indices.cache.filter.terms.expire\_afte…

---

## [Apache Pulsar input output plugin](https://discuss.elastic.co/t/apache-pulsar-input-output-plugin/201058)

<div class="topic-metadata">

**Author:** [@Lucas\_Dehandschutter](https://discuss.elastic.co/u/Lucas_Dehandschutter)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 5:00am UTC](https://discuss.elastic.co/t/apache-pulsar-input-output-plugin/201058 "2019-10-16T05:00:16Z")

</div>

Hello, Are there any plan for a apache pulsar Input / output plugin? Best regards

---

## [Hello, Help for Error : An unexpected error occurred! {:error=\>#\<LogStash::Error: Don't know how to handle](https://discuss.elastic.co/t/hello-help-for-error-an-unexpected-error-occurred-error-logstash-dont-know-how-to-handle/259787)

<div class="topic-metadata">

**Author:** [@Muhammad\_Firdaus](https://discuss.elastic.co/u/Muhammad_Firdaus)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 3:11pm UTC](https://discuss.elastic.co/t/hello-help-for-error-an-unexpected-error-occurred-error-logstash-dont-know-how-to-handle/259787 "2020-12-29T15:11:51Z")

</div>

Get Error when starting up Logstash \[2020-12-29T16:08:40,925\]\[ERROR\]\[logstash.agent \] An exception happened when converging configuration {:exception=\>LogStash::Error, :message=\>"Don't know how to handle Java:…

---

## [Custom datatype in mappin](https://discuss.elastic.co/t/custom-datatype-in-mappin/39634)

<div class="topic-metadata">

**Author:** [@jamynier](https://discuss.elastic.co/u/jamynier)\
**Replies:** 1\
**Last updated:** [January 21, 2016, 1:27am UTC](https://discuss.elastic.co/t/custom-datatype-in-mappin/39634 "2016-01-21T01:27:18Z")

</div>

I first post my question/feature request on https://github.com/elastic/elasticsearch/issues/14341 but did not get a satisfactory answer. I haven't found a way to create a custom datatype to reuse in mapping definition…

---

## [Elasticsearch/Kibana Unknown Deployment](https://discuss.elastic.co/t/elasticsearch-kibana-unknown-deployment/180697)

<div class="topic-metadata">

**Author:** [@max17](https://discuss.elastic.co/u/max17)\
**Replies:** 1\
**Last updated:** [June 5, 2019, 1:34pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-unknown-deployment/180697 "2019-06-05T13:34:00Z")

</div>

Hi, I am using elasticsearch cloud and I've been provided a long URL of kibana i.e. - https://5e765d3c21d84e8f8d6bd362d8bf6564.us-central1.gcp.cloud.es.io:9243 I have configured the DNS routing in my GCP cloudDNS for …

---

## [Unassigned primary and replica shards in marvel indexes](https://discuss.elastic.co/t/unassigned-primary-and-replica-shards-in-marvel-indexes/31942)

<div class="topic-metadata">

**Author:** [@dash](https://discuss.elastic.co/u/dash)\
**Replies:** 4\
**Last updated:** [October 11, 2015, 12:21am UTC](https://discuss.elastic.co/t/unassigned-primary-and-replica-shards-in-marvel-indexes/31942 "2015-10-11T00:21:19Z")

</div>

I use ES-1.7.2. I started the cluster 3-4 days back and have not restarted the cluster at all. After couple of days, Marvel stopped working. When I investigate, I saw some of the primary and replica shards are not assign…

---

## [Compute TF/IDF across indexes](https://discuss.elastic.co/t/compute-tf-idf-across-indexes/16016)

<div class="topic-metadata">

**Author:** [@luizgpsantos](https://discuss.elastic.co/u/luizgpsantos)\
**Replies:** 4\
**Last updated:** [February 26, 2014, 1:53pm UTC](https://discuss.elastic.co/t/compute-tf-idf-across-indexes/16016 "2014-02-26T13:53:08Z")

</div>

Hi, I'm trying to search across multiple indexes and I couldn't understand the result of the TF/TDF function. I didn't expect for the indexes where the term is more frequent to get penalized. Here follows an exam…

---

## [ES 5.1.1- Using slices with the reindex from remote](https://discuss.elastic.co/t/es-5-1-1-using-slices-with-the-reindex-from-remote/70089)

<div class="topic-metadata">

**Author:** [@benregn](https://discuss.elastic.co/u/benregn)\
**Replies:** 5\
**Last updated:** [December 28, 2016, 2:13pm UTC](https://discuss.elastic.co/t/es-5-1-1-using-slices-with-the-reindex-from-remote/70089 "2016-12-28T14:13:21Z")

</div>

I'm testing a 1.7.5 migration to 5.1 using the reindex-from-remote upgrade path. I tried to use automatic slicing with the Reindex API. curl -XPOST localhost:9200/\_reindex?slices=24 -d '{ "source": { "inde…

---

## [How to Check whether the data has been loaded into Elastic Search or Not?](https://discuss.elastic.co/t/how-to-check-whether-the-data-has-been-loaded-into-elastic-search-or-not/122640)

<div class="topic-metadata">

**Author:** [@bpk](https://discuss.elastic.co/u/bpk)\
**Replies:** 2\
**Last updated:** [March 7, 2018, 7:00am UTC](https://discuss.elastic.co/t/how-to-check-whether-the-data-has-been-loaded-into-elastic-search-or-not/122640 "2018-03-07T07:00:34Z")

</div>

I have loaded the csv into Logstash and fed into Elastic Search. Now how can I check or see the data, which I have loaded ? One way is connecting the datasource to Grafana, we can find. Is there any other way to see ?

---

## [Logstash - selectively applying filter](https://discuss.elastic.co/t/logstash-selectively-applying-filter/102226)

<div class="topic-metadata">

**Author:** [@rs\_ela](https://discuss.elastic.co/u/rs_ela)\
**Replies:** 6\
**Last updated:** [September 30, 2017, 1:19pm UTC](https://discuss.elastic.co/t/logstash-selectively-applying-filter/102226 "2017-09-30T13:19:29Z")

</div>

Hi there I am sending logs from my nginx instance to ELK via Filebeat. The problem is that nginx access logs are json, but error logs are not and Logstash reports a lot of parsing errors which then swamp the log file on…

---

## [Esrally got "The benchmark ended already during warmup" when running custom track](https://discuss.elastic.co/t/esrally-got-the-benchmark-ended-already-during-warmup-when-running-custom-track/186076)

<div class="topic-metadata">

**Author:** [@jackgzj](https://discuss.elastic.co/u/jackgzj)\
**Replies:** 8\
**Last updated:** [June 19, 2019, 3:04am UTC](https://discuss.elastic.co/t/esrally-got-the-benchmark-ended-already-during-warmup-when-running-custom-track/186076 "2019-06-19T03:04:44Z")

</div>

I am running a custom track on esrally 1.1.0. My custom index is like: { "mappings": { "\_default\_": { "\_all": { "enabled": false }, "\_field\_names": { "enabled": fals…

---

## [Elasticsearch version and plugin compatibility](https://discuss.elastic.co/t/elasticsearch-version-and-plugin-compatibility/48932)

<div class="topic-metadata">

**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\
**Replies:** 3\
**Last updated:** [May 2, 2016, 3:00pm UTC](https://discuss.elastic.co/t/elasticsearch-version-and-plugin-compatibility/48932 "2016-05-02T15:00:32Z")

</div>

What is the compatibility between a certain elasticsearch version and plugins made for similar versions? A specific example - let's say I have a plugin made for elasticsearch 2.3.1 installed and working. Then there is …

---

## [ES filling up the 'old' GC pool](https://discuss.elastic.co/t/es-filling-up-the-old-gc-pool/20788)

<div class="topic-metadata">

**Author:** [@Wilfred\_Hughes](https://discuss.elastic.co/u/Wilfred_Hughes)\
**Replies:** 3\
**Last updated:** [November 19, 2014, 9:32am UTC](https://discuss.elastic.co/t/es-filling-up-the-old-gc-pool/20788 "2014-11-19T09:32:23Z")

</div>

Hi all We're running a three node elasticsearch cluster (two data nodes, one dataless) and using it to store data from logstash. Every week or two, we see the following message in the elasticsearch logs: \[24.8…

---

## [I can´t find the metric index pattern and I have installed metricbeat](https://discuss.elastic.co/t/i-can-t-find-the-metric-index-pattern-and-i-have-installed-metricbeat/140167)

<div class="topic-metadata">

**Author:** [@Diego\_Moreno](https://discuss.elastic.co/u/Diego_Moreno)\
**Replies:** 7\
**Last updated:** [July 18, 2018, 10:01pm UTC](https://discuss.elastic.co/t/i-can-t-find-the-metric-index-pattern-and-i-have-installed-metricbeat/140167 "2018-07-18T22:01:24Z")

</div>

---

## [Canvas essql Data Table query to select most recent records given a condition](https://discuss.elastic.co/t/canvas-essql-data-table-query-to-select-most-recent-records-given-a-condition/214339)

<div class="topic-metadata">

**Author:** [@jjfromnh](https://discuss.elastic.co/u/jjfromnh)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 3:59am UTC](https://discuss.elastic.co/t/canvas-essql-data-table-query-to-select-most-recent-records-given-a-condition/214339 "2020-01-09T03:59:23Z")

</div>

Greetings, I need some help crafting a query to populate an employee status board using a Canvas Data Table. The index (prox-reader-\*) is receiving logs from a badge reader which sends events when an employee badges-in…

---

## [Metrics for the Logstash persistent queue](https://discuss.elastic.co/t/metrics-for-the-logstash-persistent-queue/197064)

<div class="topic-metadata">

**Author:** [@Luigi\_Clemente](https://discuss.elastic.co/u/Luigi_Clemente)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 1:34pm UTC](https://discuss.elastic.co/t/metrics-for-the-logstash-persistent-queue/197064 "2019-08-28T13:34:34Z")

</div>

Hi all I am trying to implement a cluster of Logstash nodes in AWS using Autoscaling group. I cannot find a clear, reliable metric in the Logstash API that can tell me if the Logstash persistent queue is completely empt…

---

## [Scroll context exceeding 500](https://discuss.elastic.co/t/scroll-context-exceeding-500/302641)

<div class="topic-metadata">

**Author:** [@Abi\_Blista](https://discuss.elastic.co/u/Abi_Blista)\
**Replies:** 1\
**Last updated:** [April 18, 2022, 8:01pm UTC](https://discuss.elastic.co/t/scroll-context-exceeding-500/302641 "2022-04-18T20:01:33Z")

</div>

Im using python to pull large data from ES. When I tried to pull the data, Im getting this partucular issue scroll context exceeding 500. is there way to resolve this issue

---

## [Forcing Logstash to use TLS 1\_2](https://discuss.elastic.co/t/forcing-logstash-to-use-tls-1-2/195869)

<div class="topic-metadata">

**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\
**Replies:** 3\
**Last updated:** [August 20, 2019, 12:23pm UTC](https://discuss.elastic.co/t/forcing-logstash-to-use-tls-1-2/195869 "2019-08-20T12:23:02Z")

</div>

Hi! Is it possible to force Logstash (TCP\_INPUT) into using TLS v.1.2 only? Beats Input is actually using 1\_2 but sadly my TCP input is using 1.0, 1.1 and 1.2. Also, while starting Logstash I see: ssl.enabled.pr…

---

## [Refresh index patterns doesn´t seem all fields](https://discuss.elastic.co/t/refresh-index-patterns-doesn-t-seem-all-fields/125181)

<div class="topic-metadata">

**Author:** [@Raul\_Uria](https://discuss.elastic.co/u/Raul_Uria)\
**Replies:** 3\
**Last updated:** [March 26, 2018, 9:20am UTC](https://discuss.elastic.co/t/refresh-index-patterns-doesn-t-seem-all-fields/125181 "2018-03-26T09:20:35Z")

</div>

Hi, we´re trying to visualize some monitoring (x-PACK) data with kibana visualizations directly. .monitoring\* indices have a lot of fields, when refreshing index patterns not all of them are detected, just 309, so we c…

---

## [Logstash NSQ support](https://discuss.elastic.co/t/logstash-nsq-support/24269)

<div class="topic-metadata">

**Author:** [@mschn](https://discuss.elastic.co/u/mschn)\
**Replies:** 3\
**Last updated:** [October 3, 2016, 9:39am UTC](https://discuss.elastic.co/t/logstash-nsq-support/24269 "2016-10-03T09:39:46Z")

</div>

Hello, I just read the new Blog about Kafka integration, thats really nice! Are there any plans to integrate support also for nsq.io ?

---

## [SAML with Onelogin](https://discuss.elastic.co/t/saml-with-onelogin/203524)

<div class="topic-metadata">

**Author:** [@jakobant](https://discuss.elastic.co/u/jakobant)\
**Replies:** 5\
**Last updated:** [October 15, 2019, 10:12pm UTC](https://discuss.elastic.co/t/saml-with-onelogin/203524 "2019-10-15T22:12:23Z")

</div>

I am currently trying to get SAML auth working with OneLogin . Version : Elastic Cloud Cluster 7.4 {"statusCode":401,"error":"Unauthorized","message":"\[security\_exception\] unable to authenticate user \[\<unauthenticated…

---

## [@timestamp to unix epoch conversion in Logstash 7.0.1](https://discuss.elastic.co/t/timestamp-to-unix-epoch-conversion-in-logstash-7-0-1/181142)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 5\
**Last updated:** [May 15, 2019, 1:05pm UTC](https://discuss.elastic.co/t/timestamp-to-unix-epoch-conversion-in-logstash-7-0-1/181142 "2019-05-15T13:05:51Z")

</div>

Hello! I am attempting to convert @timestamp to unix epoch. When running in a online parser: https://repl.it/repls/FlatPristineEmulation it does what it supposed to do. My test configuration: input {stdin { }} fi…

[Previous page](https://discuss.elastic.co/top.md?page=710&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=712&per_page=50&period=all)
