# Top **URL:** https://discuss.elastic.co/top.md?page=714&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 715 --- ## [Kibana quits every day](https://discuss.elastic.co/t/kibana-quits-every-day/38392)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 3\ **Last updated:** [January 5, 2016, 5:42pm UTC](https://discuss.elastic.co/t/kibana-quits-every-day/38392 "2016-01-05T17:42:26Z")
Hello, I am running kibana with nohup since I did not find a better way to start it as a service but it keeps exiting every day without any errors. Is there another way to start it without needing to restart it every d… --- ## [Failing to get filebeat with suricata module to work](https://discuss.elastic.co/t/failing-to-get-filebeat-with-suricata-module-to-work/314835)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 7\ **Last updated:** [September 22, 2022, 5:14am UTC](https://discuss.elastic.co/t/failing-to-get-filebeat-with-suricata-module-to-work/314835 "2022-09-22T05:14:29Z")
I have installed filebeat (7.17.1) on an ubuntu system. Run the setup stuff and loaded the dashboards into kibana. I have also "enabled" the suricata module, first by simply adding the appropriate stuff into /etc/fileb… --- ## [Pie chart with list](https://discuss.elastic.co/t/pie-chart-with-list/294342)
**Author:** [@cris](https://discuss.elastic.co/u/cris)\ **Replies:** 7\ **Last updated:** [January 17, 2022, 5:23pm UTC](https://discuss.elastic.co/t/pie-chart-with-list/294342 "2022-01-17T17:23:18Z")
Hi my friends I'm very new on kibana. I want to create a pie chart with a field who contains a list, like this: \[passed, passed, passed, passed, failed, failed, failed, passed, passed, passed, passed, passed, passed, pa… --- ## [Logstash FATAL error when cannot connect to elasticsearch - v6.2.3](https://discuss.elastic.co/t/logstash-fatal-error-when-cannot-connect-to-elasticsearch-v6-2-3/129377)
**Author:** [@sunny12](https://discuss.elastic.co/u/sunny12)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 6:47pm UTC](https://discuss.elastic.co/t/logstash-fatal-error-when-cannot-connect-to-elasticsearch-v6-2-3/129377 "2018-05-02T18:47:32Z")
Hi there, Thanking in advance for any replies!! Symptom: If logstash cannot connect to elasticsearch, logstash has a fatal error and shutdown completely. Expected behavior: If cannot connect to elasticsearch, or ther… --- ## [Beat's Central Management - Error initializing output: output type undefined](https://discuss.elastic.co/t/beats-central-management-error-initializing-output-output-type-undefined/167495)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [February 22, 2019, 5:30am UTC](https://discuss.elastic.co/t/beats-central-management-error-initializing-output-output-type-undefined/167495 "2019-02-22T05:30:26Z")
Hello World! I'm trying to follow: Beats central management | Metricbeat Reference \[6.6\] | Elastic How central management works | Metricbeat Reference \[6.6\] | Elastic Enroll Beats in central management | Metricbeat R… --- ## [Using filebeat container with shared volume from another container](https://discuss.elastic.co/t/using-filebeat-container-with-shared-volume-from-another-container/239824)
**Author:** [@mzdev](https://discuss.elastic.co/u/mzdev)\ **Replies:** 4\ **Last updated:** [July 8, 2020, 2:17pm UTC](https://discuss.elastic.co/t/using-filebeat-container-with-shared-volume-from-another-container/239824 "2020-07-08T14:17:19Z")
Hello there, a quick question, we have an app that is using filebeat to ship logs, currently we're installing the filebeat package on the container itself, but due to a redesign we're toying with the idea of removing the… --- ## [Id lookup](https://discuss.elastic.co/t/id-lookup/25830)
**Author:** [@heuschrecke](https://discuss.elastic.co/u/heuschrecke)\ **Replies:** 3\ **Last updated:** [July 18, 2015, 6:17pm UTC](https://discuss.elastic.co/t/id-lookup/25830 "2015-07-18T18:17:17Z")
Currently we log only ids in our statistics cluster, is there a way to resolve die ids by lookup in an other Index? Currently we see only the ids in every aggregation charts ;-( Cheers Michael --- ## [Add a timestamp from the log line in filebeat](https://discuss.elastic.co/t/add-a-timestamp-from-the-log-line-in-filebeat/171511)
**Author:** [@Janjko](https://discuss.elastic.co/u/Janjko)\ **Replies:** 2\ **Last updated:** [March 9, 2019, 4:56pm UTC](https://discuss.elastic.co/t/add-a-timestamp-from-the-log-line-in-filebeat/171511 "2019-03-09T16:56:13Z")
I made an app that uses Nlog to log into a file. Then I added the functionality within the app to download Filebeat and ship the logs to a central Elastic Stack. I thought about Nlog.Target.Elasticsearch, but I like the … --- ## [Question about creating a link to document in Kibana](https://discuss.elastic.co/t/question-about-creating-a-link-to-document-in-kibana/132335)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 1\ **Last updated:** [May 17, 2018, 7:50pm UTC](https://discuss.elastic.co/t/question-about-creating-a-link-to-document-in-kibana/132335 "2018-05-17T19:50:08Z")
Regarding the discussion below and the creation of a link directly to a document. So I have created a link that works going to a specific document based on the 'share' capability in Kibana (note that the index is spec… --- ## [Multiple path.data and stripping](https://discuss.elastic.co/t/multiple-path-data-and-stripping/9976)
**Author:** [@Kubes](https://discuss.elastic.co/u/Kubes)\ **Replies:** 6\ **Last updated:** [December 7, 2012, 6:33pm UTC](https://discuss.elastic.co/t/multiple-path-data-and-stripping/9976 "2012-12-07T18:33:02Z")
All, 1) If one adds additional devices post to a running server will es balance (move) the existing index to "even" out the drives (both space and io)? 2) Can indexes be moved to a new drive? Thanks -- --- ## [Winlogbeat is not accpeting .crt and .key](https://discuss.elastic.co/t/winlogbeat-is-not-accpeting-crt-and-key/247636)
**Author:** [@Rahul\_Dankhara](https://discuss.elastic.co/u/Rahul_Dankhara)\ **Replies:** 0\ **Last updated:** [September 5, 2020, 3:01pm UTC](https://discuss.elastic.co/t/winlogbeat-is-not-accpeting-crt-and-key/247636 "2020-09-05T15:01:46Z")
I am using .crt and .key for authentication of filebeat with logstash. Which is working perfectly fine. I am using the same certificates for winlogbeat and it is not working as expected. Followed this doc to create .ca… --- ## [Malformed date value? But the date and the template match](https://discuss.elastic.co/t/malformed-date-value-but-the-date-and-the-template-match/39488)
**Author:** [@Christopher\_Curzon](https://discuss.elastic.co/u/Christopher_Curzon)\ **Replies:** 4\ **Last updated:** [January 19, 2016, 4:11pm UTC](https://discuss.elastic.co/t/malformed-date-value-but-the-date-and-the-template-match/39488 "2016-01-19T16:11:25Z")
CSV data looks like his 220364000,2015-09-04 11:04:23,Under way using engine,65.5000000,-53.5114983 Mapping to create index a009 was created this way. $ curl -XPUT 'http://10.30.90.5:9200/a009' -d '{ "mappings":… --- ## [So seriously, what permissions do beats need?](https://discuss.elastic.co/t/so-seriously-what-permissions-do-beats-need/238958)
**Author:** [@sej7278](https://discuss.elastic.co/u/sej7278)\ **Replies:** 8\ **Last updated:** [June 30, 2020, 10:31am UTC](https://discuss.elastic.co/t/so-seriously-what-permissions-do-beats-need/238958 "2020-06-30T10:31:42Z")
So contrary to the docs even this lot doesn't work: POST /\_security/api\_key { "name": "{beat\_default\_index\_prefix}\_localhost", "role\_descriptors": { "{beat\_default\_index\_prefix}\_writer": { "cluster": \["mon… --- ## [I think my heap is sized right but searches are still super slow](https://discuss.elastic.co/t/i-think-my-heap-is-sized-right-but-searches-are-still-super-slow/83914)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 8\ **Last updated:** [May 1, 2017, 3:09pm UTC](https://discuss.elastic.co/t/i-think-my-heap-is-sized-right-but-searches-are-still-super-slow/83914 "2017-05-01T15:09:40Z")
The config on my nodes is: Running version 5.3.0 of ES,Logstash, and Kibana 8 CPUs 250gig SSD drives They have 40 Gigs of RAM I allocated 16 gigs to the heap 5 ES nodes Index configured for 5 shards, 1 replica avg shar… --- ## [Index-level TTL -- how do we track this feature request?](https://discuss.elastic.co/t/index-level-ttl-how-do-we-track-this-feature-request/37775)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 8\ **Last updated:** [February 3, 2016, 11:29pm UTC](https://discuss.elastic.co/t/index-level-ttl-how-do-we-track-this-feature-request/37775 "2016-02-03T23:29:23Z")
Hi -- I understand there is a feature request for index-level TTL. My question is, how do I track that feature request? Thanks, Casie --- ## [How to customize kibana logo](https://discuss.elastic.co/t/how-to-customize-kibana-logo/226882)
**Author:** [@lokmanopt](https://discuss.elastic.co/u/lokmanopt)\ **Replies:** 5\ **Last updated:** [April 27, 2020, 11:45pm UTC](https://discuss.elastic.co/t/how-to-customize-kibana-logo/226882 "2020-04-27T23:45:44Z")
Dear Concern, Hope you are very well, I would like to inform you that, I want to some customize in kibana login page like Login Logo, as well as icon as per my requirement. I have attached a screenshot. Please check a… --- ## [German Number Format in Kibana](https://discuss.elastic.co/t/german-number-format-in-kibana/39205)
**Author:** [@kaib](https://discuss.elastic.co/u/kaib)\ **Replies:** 5\ **Last updated:** [February 3, 2017, 10:06am UTC](https://discuss.elastic.co/t/german-number-format-in-kibana/39205 "2017-02-03T10:06:03Z")
Hi Kibana Folks, is there currently a way to change the englisch number format to a german one? Bsp: Eng: 1,000.00 -\> Ger: 1.000,0 ?? best regards, kai --- ## [Curator for a 3 nodes cluster](https://discuss.elastic.co/t/curator-for-a-3-nodes-cluster/60168)
**Author:** [@trenzalore](https://discuss.elastic.co/u/trenzalore)\ **Replies:** 5\ **Last updated:** [September 9, 2016, 9:26pm UTC](https://discuss.elastic.co/t/curator-for-a-3-nodes-cluster/60168 "2016-09-09T21:26:37Z")
Hi ! I would like to use curator to deleta some indices in my cluster. My cluster is composed of 3 data nodes and 1 client node. My question is: in the config file, which hosts should I write ? only one is enough or … --- ## [Google Charts with data from Elasticsearch?](https://discuss.elastic.co/t/google-charts-with-data-from-elasticsearch/11407)
**Author:** [@OffensivelyBad\_2](https://discuss.elastic.co/u/OffensivelyBad_2)\ **Replies:** 5\ **Last updated:** [April 3, 2013, 12:36pm UTC](https://discuss.elastic.co/t/google-charts-with-data-from-elasticsearch/11407 "2013-04-03T12:36:16Z")
Let me preface this topic by saying that I'm a noob to Elasticsearch and Google Charts. I'm testing some visualizations utilizing Google Charts and up until this point I've been using: google.visualization.arrayT… --- ## [Split-Brain Detection](https://discuss.elastic.co/t/split-brain-detection/5140)
**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\ **Replies:** 5\ **Last updated:** [August 13, 2011, 7:55pm UTC](https://discuss.elastic.co/t/split-brain-detection/5140 "2011-08-13T19:55:16Z")
\*Background\* We embed elasticsearch into our web application, and then let Amazon EC2 control the startup or teardown of our server instances based on load metrics. The exact same web app is used across all instan… --- ## [Elasticsearch java API client trackTotalHits](https://discuss.elastic.co/t/elasticsearch-java-api-client-tracktotalhits/341935)
**Author:** [@hld942614](https://discuss.elastic.co/u/hld942614)\ **Replies:** 2\ **Last updated:** [August 30, 2023, 5:46am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-tracktotalhits/341935 "2023-08-30T05:46:06Z")
I am trying to search my data and expect to get all data，but I can't get more than 10000 result，so I try to use trackTotalHits ，can someone tell me how to use it? try { ElasticsearchClient client = elasticsearchConfi… --- ## [Logstash output pretty json file?](https://discuss.elastic.co/t/logstash-output-pretty-json-file/196520)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 2:10pm UTC](https://discuss.elastic.co/t/logstash-output-pretty-json-file/196520 "2019-08-23T14:10:33Z")
Hi, I know, that I can use json\_lines codec for file output to generate a one json line per event. Is there also a possibility to create a pretty json file as file output which is easier readable for humans? Thanks, A… --- ## [ES SQL Query in Canvas Returning Unexpected Value](https://discuss.elastic.co/t/es-sql-query-in-canvas-returning-unexpected-value/190841)
**Author:** [@thegrockq](https://discuss.elastic.co/u/thegrockq)\ **Replies:** 7\ **Last updated:** [July 24, 2019, 5:03pm UTC](https://discuss.elastic.co/t/es-sql-query-in-canvas-returning-unexpected-value/190841 "2019-07-24T17:03:40Z")
I'm attempting to calculate the sum of disk space used by specific log types and present them in a metric element in Canvas. For example, Winlogbeat: 3.8 TB, DNS: 2.8 TB, etc. I've written a SQL query that returns the e… --- ## [Query\_string breaks search term on space even when keyword tokenizer is used](https://discuss.elastic.co/t/query-string-breaks-search-term-on-space-even-when-keyword-tokenizer-is-used/152535)
**Author:** [@tomekit](https://discuss.elastic.co/u/tomekit)\ **Replies:** 1\ **Last updated:** [October 18, 2018, 2:26pm UTC](https://discuss.elastic.co/t/query-string-breaks-search-term-on-space-even-when-keyword-tokenizer-is-used/152535 "2018-10-18T14:26:45Z")
I am using keyword tokenizer for one of my name fields. "analyzer": { "lowercase\_keyword\_analyzer": { "filter": \[ "lowercase" \], "tokeni… --- ## [How to build graph using elasticsearch data](https://discuss.elastic.co/t/how-to-build-graph-using-elasticsearch-data/100865)
**Author:** [@babu.ganesh0708](https://discuss.elastic.co/u/babu.ganesh0708)\ **Replies:** 7\ **Last updated:** [September 18, 2017, 1:16pm UTC](https://discuss.elastic.co/t/how-to-build-graph-using-elasticsearch-data/100865 "2017-09-18T13:16:56Z")
Hi All, We are building log analytics applicaton in which we are using Graylog & Elasticsearch. Since I have installed Elasticsearch but somehow I want to take the data from elasticsearch and created some graphs with th… --- ## [Logstash is not outputing the data to elasticsearch](https://discuss.elastic.co/t/logstash-is-not-outputing-the-data-to-elasticsearch/55574)
**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\ **Replies:** 7\ **Last updated:** [July 25, 2016, 12:35pm UTC](https://discuss.elastic.co/t/logstash-is-not-outputing-the-data-to-elasticsearch/55574 "2016-07-25T12:35:39Z")
io/console not supported; tty will not be manipulated Settings: Default pipeline workers: 4 ←\[31mConnection refused: connect {:class=\>"Manticore::SocketException", :level=\>:error}←\[0m Pipeline main started ===========\>\>… --- ## [Filebeat data path already locked](https://discuss.elastic.co/t/filebeat-data-path-already-locked/240559)
**Author:** [@Imad\_Bouchakour](https://discuss.elastic.co/u/Imad_Bouchakour)\ **Replies:** 2\ **Last updated:** [July 10, 2020, 7:16am UTC](https://discuss.elastic.co/t/filebeat-data-path-already-locked/240559 "2020-07-10T07:16:08Z")
Hi, how to fix ? ERROR instance/beat.go:958 Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data). Exiting: data path already locked by … --- ## [Need help removing square brackets from field name in JSON input](https://discuss.elastic.co/t/need-help-removing-square-brackets-from-field-name-in-json-input/182351)
**Author:** [@devdua](https://discuss.elastic.co/u/devdua)\ **Replies:** 3\ **Last updated:** [May 24, 2019, 1:35pm UTC](https://discuss.elastic.co/t/need-help-removing-square-brackets-from-field-name-in-json-input/182351 "2019-05-24T13:35:52Z")
This is a sample of the log that's causing parse error - { "output": "11:08:30.411631274: Warning Sensitive file opened for reading by non-trusted program (user=root program=cat command=cat \\/etc\\/shadow file=\\/etc\\/s… --- ## [DSL Query: LIKE Condition of SQL](https://discuss.elastic.co/t/dsl-query-like-condition-of-sql/91193)
**Author:** [@aj.murciah](https://discuss.elastic.co/u/aj.murciah)\ **Replies:** 3\ **Last updated:** [June 29, 2017, 6:24pm UTC](https://discuss.elastic.co/t/dsl-query-like-condition-of-sql/91193 "2017-06-29T18:24:51Z")
Hi Basically I need to perform a search similar to LIKE condition in SQL. Ex. Index.ColumnA LIKE Index.ColumnX In other words I need to verify if ColumnA contains or match with Column B. It's important mention that i… --- ## [Several applications sharing the same cluster](https://discuss.elastic.co/t/several-applications-sharing-the-same-cluster/44535)
**Author:** [@jvskriubakken](https://discuss.elastic.co/u/jvskriubakken)\ **Replies:** 3\ **Last updated:** [March 29, 2016, 10:46am UTC](https://discuss.elastic.co/t/several-applications-sharing-the-same-cluster/44535 "2016-03-29T10:46:35Z")
Hi! We have just started to use Elasticsearch at my work - and in at least two applications and possibly three in the future. We are going to host the cluster (or clusters) our selves, and a question which has then ar… --- ## [CorruptIndexException missing .si file](https://discuss.elastic.co/t/corruptindexexception-missing-si-file/236994)
**Author:** [@keduadoi](https://discuss.elastic.co/u/keduadoi)\ **Replies:** 4\ **Last updated:** [June 14, 2020, 10:20am UTC](https://discuss.elastic.co/t/corruptindexexception-missing-si-file/236994 "2020-06-14T10:20:44Z")
Our cluster has 3 nodes, primary shards are about 10K, and replica = 1. The cluster had worked normally until 1 cluster showed error message: \[root@server2014 ~\]# uncaught exception in thread \[main\] ElasticsearchExcept… --- ## [Geo\_shape and unsupported validation\_method : IGNORE\_MALFORMED](https://discuss.elastic.co/t/geo-shape-and-unsupported-validation-method-ignore-malformed/79887)
**Author:** [@daviddd](https://discuss.elastic.co/u/daviddd)\ **Replies:** 6\ **Last updated:** [March 25, 2017, 5:37am UTC](https://discuss.elastic.co/t/geo-shape-and-unsupported-validation-method-ignore-malformed/79887 "2017-03-25T05:37:43Z")
Dear All, I'm using ES 5.2 I would need to specify a field where the BBOX could be wrong, e.g. I could have -180.0000001, ideally wrong BBOX could not be indexed. Reading https://www.elastic.co/guide/en/elasticsear… --- ## ["Too many dynamic script compilations" When using int literals](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-when-using-int-literals/124835)
**Author:** [@neoform](https://discuss.elastic.co/u/neoform)\ **Replies:** 5\ **Last updated:** [March 21, 2018, 4:52pm UTC](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-when-using-int-literals/124835 "2018-03-21T16:52:26Z")
Too many dynamic script compilations within, max: \[75/5m\]; please use indexed, or scripts with parameters instead; this limit can be changed by the \[script.max\_compilations\_rate\] The script I'm using has hardcoded int… --- ## [Dotnet 6.0 log level setting](https://discuss.elastic.co/t/dotnet-6-0-log-level-setting/315258)
**Author:** [@Simonjanzon](https://discuss.elastic.co/u/Simonjanzon)\ **Replies:** 8\ **Last updated:** [October 13, 2022, 10:42pm UTC](https://discuss.elastic.co/t/dotnet-6-0-log-level-setting/315258 "2022-10-13T22:42:38Z")
APM Agent language and version: dotnet, Elastic.Apm.NetCoreAll version 1.17.0 Browser version: N/A Original install method (e.g. download page, yum, deb, from source, etc.) and version: N/A Fresh install or upgraded … --- ## [Duplicate index](https://discuss.elastic.co/t/duplicate-index/141816)
**Author:** [@elasticprof](https://discuss.elastic.co/u/elasticprof)\ **Replies:** 8\ **Last updated:** [August 15, 2018, 12:02pm UTC](https://discuss.elastic.co/t/duplicate-index/141816 "2018-08-15T12:02:10Z")
Is it possible to have same name for 2 indices, in one of our environments it created 3 indices with the same name. Is this possible, if not can you please give some idea what could have been went wrong --- ## [Topbeat monitor specific java process](https://discuss.elastic.co/t/topbeat-monitor-specific-java-process/65594)
**Author:** [@mrunalgosar](https://discuss.elastic.co/u/mrunalgosar)\ **Replies:** 3\ **Last updated:** [November 11, 2016, 12:03pm UTC](https://discuss.elastic.co/t/topbeat-monitor-specific-java-process/65594 "2016-11-11T12:03:35Z")
Hi I would like to use topbeat to monitor certain specific java processes. For example: If i set procs: \["java"\] Then it is showing me all the processes running as java. But in my use case on that server there are mu… --- ## [Filebeat process holding deleted files](https://discuss.elastic.co/t/filebeat-process-holding-deleted-files/43967)
**Author:** [@slickrick](https://discuss.elastic.co/u/slickrick)\ **Replies:** 3\ **Last updated:** [May 13, 2016, 1:40pm UTC](https://discuss.elastic.co/t/filebeat-process-holding-deleted-files/43967 "2016-05-13T13:40:21Z")
There was alert regarding disk space on our filebeat server \[root@filebeat3 ~\]# df -h Filesystem Size Used Avail Use% Mounted on /dev/vda1 … --- ## [Gracefully shutdown logstash](https://discuss.elastic.co/t/gracefully-shutdown-logstash/40132)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 3\ **Last updated:** [January 27, 2016, 8:53am UTC](https://discuss.elastic.co/t/gracefully-shutdown-logstash/40132 "2016-01-27T08:53:14Z")
Hi, How can i gracefully shutdown Logstash without losing any events that it might still be processing? Basically what i want is to stop the input from processing and then wait until all events that are already under… --- ## [Query\_string performance issue](https://discuss.elastic.co/t/query-string-performance-issue/86818)
**Author:** [@baltendo](https://discuss.elastic.co/u/baltendo)\ **Replies:** 4\ **Last updated:** [July 20, 2017, 1:54pm UTC](https://discuss.elastic.co/t/query-string-performance-issue/86818 "2017-07-20T13:54:24Z")
Hi! Initially I posted this issue in Kibana but I was asked to post it here as well: Kibana: https://discuss.elastic.co/t/query-string-performance/86808?u=baltendo We recently upgraded Elasticsearch and Kibana from 5… --- ## [Logstashのproxy設定について](https://discuss.elastic.co/t/logstash-proxy/38949)
**Author:** [@aurantiacus](https://discuss.elastic.co/u/aurantiacus)\ **Replies:** 4\ **Last updated:** [January 14, 2016, 6:36am UTC](https://discuss.elastic.co/t/logstash-proxy/38949 "2016-01-14T06:36:10Z")
こんにちは。 proxy環境化でのlogstash(lumberjack)の設定を教えてください。 現在 (A)logstash(1.5.4)==Internet==(B)logstash(1.5.4)=(C)Elasticsearch(1.7.1)=(D)kibana(4) (A)はwindows7～10 ※複数PC (B～D)はWindowsServer2008R2 ※1台 という構成で、ログの収集を行っています。 … --- ## [Difference Between Term and Composite Aggregation](https://discuss.elastic.co/t/difference-between-term-and-composite-aggregation/184096)
**Author:** [@Shivendra\_Singh](https://discuss.elastic.co/u/Shivendra_Singh)\ **Replies:** 1\ **Last updated:** [June 4, 2019, 7:01am UTC](https://discuss.elastic.co/t/difference-between-term-and-composite-aggregation/184096 "2019-06-04T07:01:42Z")
I am new to elastic search. Please correct my understanding related to Term and Composite aggregation- Using Term aggregation, we can write GROUP BY query of SQL. But the problem arises if there are multiple shards then… --- ## [Socket hangs up while running Timelion](https://discuss.elastic.co/t/socket-hangs-up-while-running-timelion/97396)
**Author:** [@sreejithps303](https://discuss.elastic.co/u/sreejithps303)\ **Replies:** 7\ **Last updated:** [September 1, 2017, 9:56am UTC](https://discuss.elastic.co/t/socket-hangs-up-while-running-timelion/97396 "2017-09-01T09:56:40Z")
Hi , I am getting socket hangs up error in kibana while running timelion visualisations.Elasticsearch load also increasing drastically. I have tried the below things. set thread\_pool.search.size: 20 and thread\_pool.se… --- ## [Panic error](https://discuss.elastic.co/t/panic-error/81600)
**Author:** [@AndreAga](https://discuss.elastic.co/u/AndreAga)\ **Replies:** 7\ **Last updated:** [April 18, 2017, 2:03pm UTC](https://discuss.elastic.co/t/panic-error/81600 "2017-04-18T14:03:16Z")
Hi, I receive the following panic error: 2017/04/07 11:35:58.534945 outputs.go:108: INFO Activated elasticsearch as output plugin. 2017/04/07 11:35:58.535113 publish.go:295: INFO Publisher name: weblogic 2017/04/07 11:… --- ## [How to compare double type filed in logstash output](https://discuss.elastic.co/t/how-to-compare-double-type-filed-in-logstash-output/56519)
**Author:** [@vandana\_sethi](https://discuss.elastic.co/u/vandana_sethi)\ **Replies:** 7\ **Last updated:** [July 28, 2016, 8:44am UTC](https://discuss.elastic.co/t/how-to-compare-double-type-filed-in-logstash-output/56519 "2016-07-28T08:44:33Z")
I want to compare two fields both are double type which I checked using this url http://localhost:9200/logstash-\*/\_mapping?pretty and I wrote like this in my logstash config file if \[field1\] \> \[field2\] { email { … --- ## [How can we ensure Data Encrypted?](https://discuss.elastic.co/t/how-can-we-ensure-data-encrypted/42131)
**Author:** [@jayaram](https://discuss.elastic.co/u/jayaram)\ **Replies:** 5\ **Last updated:** [February 26, 2016, 11:57am UTC](https://discuss.elastic.co/t/how-can-we-ensure-data-encrypted/42131 "2016-02-26T11:57:25Z")
Hello, I have installed Shield in Elasticsearch, data pushing through logstash. How can we ensure the data is encrypted in Elasticsearch. could you please give the steps to check.. all possible ways.. --- ## [Alphabetically sort name field](https://discuss.elastic.co/t/alphabetically-sort-name-field/276505)
**Author:** [@gautamz07](https://discuss.elastic.co/u/gautamz07)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 5:26pm UTC](https://discuss.elastic.co/t/alphabetically-sort-name-field/276505 "2021-06-28T17:26:13Z")
I have the following definition for the name field "name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } }, How do i sort this alphabetically ? I am tr… --- ## [\[logstash.outputs.elasticsearch\] Marking url as dead. Elasticsearch Unreachable: \[Manticore::SocketTimeout\] Read timed out. LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-marking-url-as-dead-elasticsearch-unreachable-manticore-sockettimeout-read-timed-out-logstash-hostunreachableerror/227059)
**Author:** [@m\_vibin](https://discuss.elastic.co/u/m_vibin)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 7:39am UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-marking-url-as-dead-elasticsearch-unreachable-manticore-sockettimeout-read-timed-out-logstash-hostunreachableerror/227059 "2020-04-22T07:39:27Z")
Hello Team, We built a new Elastic cluster with 3 masters and 2 data nodes with 2 logstash nodes. On the logstash nodes, we are seeing these errors when pushing the logs. It disconnects from the Elastic cluster and con… --- ## [Multi match query with custom analyzer and 'and' operator](https://discuss.elastic.co/t/multi-match-query-with-custom-analyzer-and-and-operator/200919)
**Author:** [@jlp1](https://discuss.elastic.co/u/jlp1)\ **Replies:** 2\ **Last updated:** [September 27, 2019, 7:00am UTC](https://discuss.elastic.co/t/multi-match-query-with-custom-analyzer-and-and-operator/200919 "2019-09-27T07:00:08Z")
My use case is to search against address fields with non ASCII characters insensitive. Here is my mapping: PUT test { "settings": { "analysis": { "filter": { "ascii\_folding": { "type": "as… --- ## [Minimum master nodes in ES cluster](https://discuss.elastic.co/t/minimum-master-nodes-in-es-cluster/153283)
**Author:** [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)\ **Replies:** 8\ **Last updated:** [October 21, 2018, 1:48pm UTC](https://discuss.elastic.co/t/minimum-master-nodes-in-es-cluster/153283 "2018-10-21T13:48:13Z")
I have a ES cluster with nodes across data-centres with 1 coordinator node and 3 master+data nodes in each DC. I have 2 questions here: Is it any harm in using nodes which are acting as both master and data? For minim… --- ## [Assistance regarding optimizing an Elasticsearch cluster for analytics](https://discuss.elastic.co/t/assistance-regarding-optimizing-an-elasticsearch-cluster-for-analytics/28796)
**Author:** [@iravid](https://discuss.elastic.co/u/iravid)\ **Replies:** 8\ **Last updated:** [September 8, 2015, 12:26pm UTC](https://discuss.elastic.co/t/assistance-regarding-optimizing-an-elasticsearch-cluster-for-analytics/28796 "2015-09-08T12:26:54Z")
Hey everyone, writing in to ask for advice regarding scaling an Elasticsearch cluster being used for analytics. That is - aggregations only, no searches. The TL;DR is we're seeing high CPU usage during a cardinality aggr… [Previous page](https://discuss.elastic.co/top.md?page=713&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=715&per_page=50&period=all)