# Top **URL:** https://discuss.elastic.co/top.md?page=732&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 733 --- ## [Time out executing grok](https://discuss.elastic.co/t/time-out-executing-grok/149232)
**Author:** [@qloun](https://discuss.elastic.co/u/qloun)\ **Replies:** 4\ **Last updated:** [September 20, 2018, 8:53am UTC](https://discuss.elastic.co/t/time-out-executing-grok/149232 "2018-09-20T08:53:40Z")
Hello, I have problem with getting timeout executing grok. what I have learn that the value exceed limit. the error " Timeout executing grok against 'message' with value 'Value too large to output (1006 bytes)! First 255… --- ## [Logstash Output to Elasticsearch Timezone](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-timezone/94296)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 4\ **Last updated:** [July 26, 2017, 8:17am UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-timezone/94296 "2017-07-26T08:17:08Z")
This is my output snippet. output { elasticsearch { hosts =\> "localhost" index =\> "logstash-%{+YYYY.MM.dd}" } stdout { codec =\> rubydebug } } On my index, I got the index of the next day. So i don have 2 in… --- ## [How Attachments or file storage and searching is handled in Elasticsearch](https://discuss.elastic.co/t/how-attachments-or-file-storage-and-searching-is-handled-in-elasticsearch/241246)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 6\ **Last updated:** [July 16, 2020, 10:32am UTC](https://discuss.elastic.co/t/how-attachments-or-file-storage-and-searching-is-handled-in-elasticsearch/241246 "2020-07-16T10:32:41Z")
Hello Team, Could you please help me understand How Attachments or files like (pdf/text files/doc) are stored in elasticsearch and how the content and inverted index managed for searching. tried searching the document… --- ## [Need help with dates using the Data Visualizer](https://discuss.elastic.co/t/need-help-with-dates-using-the-data-visualizer/184562)
**Author:** [@Oscar73](https://discuss.elastic.co/u/Oscar73)\ **Replies:** 6\ **Last updated:** [June 13, 2019, 11:05am UTC](https://discuss.elastic.co/t/need-help-with-dates-using-the-data-visualizer/184562 "2019-06-13T11:05:36Z")
Hi, I'm trying to import a CSV file into my Kibana (6.7.2) using the Data Visualizer tool inside the Machine Learning tab, under a index pattern already created. But when it comes to see its content, I have two … --- ## [Can packetbeat send pcap to http end point?](https://discuss.elastic.co/t/can-packetbeat-send-pcap-to-http-end-point/93191)
**Author:** [@sandman](https://discuss.elastic.co/u/sandman)\ **Replies:** 6\ **Last updated:** [July 19, 2017, 6:03pm UTC](https://discuss.elastic.co/t/can-packetbeat-send-pcap-to-http-end-point/93191 "2017-07-19T18:03:31Z")
My use case in short: I want to run packetbeat on one of my servers and pipe the pcap directly into snort. How can this be done? Details: I want to use packetbeat to just capture packets as they are (I dont care mu… --- ## [Excluding an indice in mapping template](https://discuss.elastic.co/t/excluding-an-indice-in-mapping-template/119707)
**Author:** [@cappy](https://discuss.elastic.co/u/cappy)\ **Replies:** 3\ **Last updated:** [February 18, 2018, 9:26pm UTC](https://discuss.elastic.co/t/excluding-an-indice-in-mapping-template/119707 "2018-02-18T21:26:59Z")
Hi, I was wondering if there was a way to exclude an indice from using a mapping template? For example, I have the following indices: logstash-firewall-%{DATE} logstash-beats-%{DATE} logstash-syslog-%{DATE} I want t… --- ## [Mapreduce json indexing](https://discuss.elastic.co/t/mapreduce-json-indexing/49778)
**Author:** [@fede](https://discuss.elastic.co/u/fede)\ **Replies:** 3\ **Last updated:** [May 12, 2016, 10:17am UTC](https://discuss.elastic.co/t/mapreduce-json-indexing/49778 "2016-05-12T10:17:47Z")
I'm trying to index some data using elasticsearch-mapreduce 2.3.1, my input are Avro files that I then convert to JSON documents and I'm getting this error: Error: org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: Fo… --- ## [Transform on fields of a nested object](https://discuss.elastic.co/t/transform-on-fields-of-a-nested-object/236986)
**Author:** [@sharad\_khandelwal1](https://discuss.elastic.co/u/sharad_khandelwal1)\ **Replies:** 5\ **Last updated:** [June 17, 2020, 1:45pm UTC](https://discuss.elastic.co/t/transform-on-fields-of-a-nested-object/236986 "2020-06-17T13:45:47Z")
Does transform support group by on nested fields? I was trying to group by on a field of a nested object but no results appear in the preview. --- ## [Data set difference between fields on different indexes](https://discuss.elastic.co/t/data-set-difference-between-fields-on-different-indexes/160015)
**Author:** [@nandrik](https://discuss.elastic.co/u/nandrik)\ **Replies:** 5\ **Last updated:** [December 13, 2018, 5:38pm UTC](https://discuss.elastic.co/t/data-set-difference-between-fields-on-different-indexes/160015 "2018-12-13T17:38:36Z")
Hi, per my previous post, I ended up creating two separate indexes (Index 1, Index 2) sharing one common field dstIP. I'd like now, let's say on an hourly basis, to get a list of all the IP addresses that exist in Index… --- ## [Closing and reopening index](https://discuss.elastic.co/t/closing-and-reopening-index/111037)
**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\ **Replies:** 2\ **Last updated:** [December 20, 2017, 10:02am UTC](https://discuss.elastic.co/t/closing-and-reopening-index/111037 "2017-12-20T10:02:02Z")
Hi, What are the pros and cons of closing and reopening of an index.I am using this for updating my synonyms file. Will it have any impact on performance perspective of cluster.I have gone through below link.But didn't … --- ## [1.3.4/Java : how can I parse a ClusterState object from its XContent representation?](https://discuss.elastic.co/t/1-3-4-java-how-can-i-parse-a-clusterstate-object-from-its-xcontent-representation/31779)
**Author:** [@mrec](https://discuss.elastic.co/u/mrec)\ **Replies:** 5\ **Last updated:** [October 8, 2015, 3:58pm UTC](https://discuss.elastic.co/t/1-3-4-java-how-can-i-parse-a-clusterstate-object-from-its-xcontent-representation/31779 "2015-10-08T15:58:02Z")
Newbie here. I want to be able to take a ClusterState retrieved as usual via ClusterAdminClient, serialize it to a human-readable file via toXContent then recreate it at a later date from that file. Serializing is straig… --- ## [Filebeat to kafka: Failed to connect to broker](https://discuss.elastic.co/t/filebeat-to-kafka-failed-to-connect-to-broker/236440)
**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\ **Replies:** 4\ **Last updated:** [June 11, 2020, 3:29am UTC](https://discuss.elastic.co/t/filebeat-to-kafka-failed-to-connect-to-broker/236440 "2020-06-11T03:29:28Z")
environment : kafka 2.11 (installed via ambari) filebeat 7.4.2 (windows) according this source since it was installed via ambari i should use port 6667 here is my filebeat.conf filebeat.inputs: - type: log p… --- ## [Cant able to find csv reports in kibana](https://discuss.elastic.co/t/cant-able-to-find-csv-reports-in-kibana/223771)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 4\ **Last updated:** [April 1, 2020, 5:22am UTC](https://discuss.elastic.co/t/cant-able-to-find-csv-reports-in-kibana/223771 "2020-04-01T05:22:04Z")
Hi, i am using kibana of version 7.1.1 with x-pack enaled, Still I'm not able to generate csv reports. In the share section i am able to see only permalinks and not csv report. Please help me solve it. --- ## [Watcher failed to send e-mail( via kibana)](https://discuss.elastic.co/t/watcher-failed-to-send-e-mail-via-kibana/208744)
**Author:** [@elktester](https://discuss.elastic.co/u/elktester)\ **Replies:** 4\ **Last updated:** [November 21, 2019, 11:30am UTC](https://discuss.elastic.co/t/watcher-failed-to-send-e-mail-via-kibana/208744 "2019-11-21T11:30:04Z")
Hello! well, i'm new to elasticsearch, and i'm trying to configure elasticsearch to receive alerts, so for that i use the configuration below, but I couldn't send a test email, and everytime the following msg is displ… --- ## [Count the number of occurrences for each status only considering the last registred status - Table visualization](https://discuss.elastic.co/t/count-the-number-of-occurrences-for-each-status-only-considering-the-last-registred-status-table-visualization/190362)
**Author:** [@Augusto\_Calado\_Bueno](https://discuss.elastic.co/u/Augusto_Calado_Bueno)\ **Replies:** 4\ **Last updated:** [July 18, 2019, 11:43am UTC](https://discuss.elastic.co/t/count-the-number-of-occurrences-for-each-status-only-considering-the-last-registred-status-table-visualization/190362 "2019-07-18T11:43:15Z")
Hi there! Could you help me with a question, please? I have an application that sends logs to elasticsearch to log and track the status of a purchase. Example: {"idcode": "a1", "order\_status":"approved","timestamp": 1… --- ## [Logstash Netflow module remote setup ERROR](https://discuss.elastic.co/t/logstash-netflow-module-remote-setup-error/152265)
**Author:** [@Oleksiy\_Himranov](https://discuss.elastic.co/u/Oleksiy_Himranov)\ **Replies:** 1\ **Last updated:** [October 16, 2018, 3:13pm UTC](https://discuss.elastic.co/t/logstash-netflow-module-remote-setup-error/152265 "2018-10-16T15:13:14Z")
\# /usr/share/logstash/bin/logstash --modules netflow --setup -M "netflow.var.input.udp.port=9996" -M "netflow.var.elasticsearch.hosts=http://192.168.0.133:9200" -M "netflow.var.kibana.host=192.168.0.135:5601" -M "netflow… --- ## [Logstash optimization](https://discuss.elastic.co/t/logstash-optimization/41540)
**Author:** [@aaroy428](https://discuss.elastic.co/u/aaroy428)\ **Replies:** 1\ **Last updated:** [February 11, 2016, 8:42pm UTC](https://discuss.elastic.co/t/logstash-optimization/41540 "2016-02-11T20:42:41Z")
When running on a dedicated server for logstash can we improve the logstash performance by increasing the nice value to 0 in the /etc/init.d/logstash startup script. Is there any os optimization possible to speed up logs… --- ## [Elasticsearch off-heap memory](https://discuss.elastic.co/t/elasticsearch-off-heap-memory/86416)
**Author:** [@SteelCrow](https://discuss.elastic.co/u/SteelCrow)\ **Replies:** 3\ **Last updated:** [May 19, 2017, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-off-heap-memory/86416 "2017-05-19T13:44:58Z")
Hi, guys! I have some problem with memory consumption, I jope you will help me with it. OS: RHEL 7.3 Elasticsearch 5.4 RAM: 8GB (real 7.6GB) Clear install of EL Nothing in index Nothing else run on machine Nothing re… --- ## [Logstash security best practices: keystore, monitoring, ssl\_verification\_mode](https://discuss.elastic.co/t/logstash-security-best-practices-keystore-monitoring-ssl-verification-mode/365166)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 2\ **Last updated:** [August 22, 2024, 3:58pm UTC](https://discuss.elastic.co/t/logstash-security-best-practices-keystore-monitoring-ssl-verification-mode/365166 "2024-08-22T15:58:30Z")
hello ! can you guys please guide me to the best security practices to secure the communication between Logstash and elasticsearch (logstash configuration (logstash.yml) and its pipelines in the conf.d) here is my curr… --- ## [Detection Rule Error](https://discuss.elastic.co/t/detection-rule-error/252856)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 5\ **Last updated:** [October 27, 2020, 5:04am UTC](https://discuss.elastic.co/t/detection-rule-error/252856 "2020-10-27T05:04:26Z")
Hi, I'm running the 7.9.2 version of the stack in a hot-warm cluster architecture. When defining a very simple detection rule on my space called "siem" I get the following error intermittently. One execution succeed an… --- ## [\[7.4.1\] Problem histogram "unable to retrieve max and min values..."](https://discuss.elastic.co/t/7-4-1-problem-histogram-unable-to-retrieve-max-and-min-values/207659)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 5\ **Last updated:** [November 18, 2019, 9:15am UTC](https://discuss.elastic.co/t/7-4-1-problem-histogram-unable-to-retrieve-max-and-min-values/207659 "2019-11-18T09:15:18Z")
Hi there, I'm having some problems creating a histogram in Kibana 7.4.1. It is very simple, splitting the X-axis over a long field totalLatency. The "error" returned is Unable to retrieve max and min values to auto-sc… --- ## [Sum duration activties](https://discuss.elastic.co/t/sum-duration-activties/40294)
**Author:** [@TJarriault](https://discuss.elastic.co/u/TJarriault)\ **Replies:** 5\ **Last updated:** [January 29, 2016, 11:12pm UTC](https://discuss.elastic.co/t/sum-duration-activties/40294 "2016-01-29T23:12:01Z")
Hi, Is it possible to create a chart to track users activity (with entries elasticsearch, time filed AAAAMMJJ HH:MM:SS =\> filed 1 : begin connection, filed 2 : end connection) ? Regards, Tony --- ## [Save & Re-use searches/visualizations/dashboards](https://discuss.elastic.co/t/save-re-use-searches-visualizations-dashboards/2292)
**Author:** [@laughingblade](https://discuss.elastic.co/u/laughingblade)\ **Replies:** 5\ **Last updated:** [June 11, 2015, 11:17am UTC](https://discuss.elastic.co/t/save-re-use-searches-visualizations-dashboards/2292 "2015-06-11T11:17:20Z")
Hi, (KIbana 4) I'm running the ELK stack locally on Ubuntu by simply unpacking into the user's ~/opt folder and then e.g. bin/kibana, per the basic instructions in the various elastic.io guides. My use case is anal… --- ## [How to index data from s3 into elasticsearch?](https://discuss.elastic.co/t/how-to-index-data-from-s3-into-elasticsearch/22737)
**Author:** [@saipa](https://discuss.elastic.co/u/saipa)\ **Replies:** 1\ **Last updated:** [March 18, 2015, 4:40pm UTC](https://discuss.elastic.co/t/how-to-index-data-from-s3-into-elasticsearch/22737 "2015-03-18T16:40:19Z")
What is the easiest way to get data out of s3 and into elasticsearch for a simple JSON file? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from… --- ## [Duplicate Data in two indexes](https://discuss.elastic.co/t/duplicate-data-in-two-indexes/36869)
**Author:** [@Gurveer\_Singh](https://discuss.elastic.co/u/Gurveer_Singh)\ **Replies:** 4\ **Last updated:** [December 31, 2015, 12:37pm UTC](https://discuss.elastic.co/t/duplicate-data-in-two-indexes/36869 "2015-12-31T12:37:36Z")
Hi, I am using logstash version 1.4.2 I configure logstash to store data in elasticsearch in a manual index name "xyz" and I am using following template for this index. { "template" : "xyz-", "settings" : { "index… --- ## [Splitting Array](https://discuss.elastic.co/t/splitting-array/36187)
**Author:** [@vikas.saini](https://discuss.elastic.co/u/vikas.saini)\ **Replies:** 4\ **Last updated:** [December 3, 2015, 9:25am UTC](https://discuss.elastic.co/t/splitting-array/36187 "2015-12-03T09:25:11Z")
I have an array like "myarray":\[{"name":"alice"},{"age":14}\] and i want to split it and put values as in "dataclass": { "fields":{ "name":"alice", "age":14 } } --- ## [Elastic query to fetch multiple docs from multiple indexes based on input(multiple param)](https://discuss.elastic.co/t/elastic-query-to-fetch-multiple-docs-from-multiple-indexes-based-on-input-multiple-param/110829)
**Author:** [@skodari](https://discuss.elastic.co/u/skodari)\ **Replies:** 8\ **Last updated:** [December 14, 2017, 11:57am UTC](https://discuss.elastic.co/t/elastic-query-to-fetch-multiple-docs-from-multiple-indexes-based-on-input-multiple-param/110829 "2017-12-14T11:57:13Z")
Hi Team, Need an elastic query to fetch multiple docs from multiple indexes based on input. If I have given two fields as input, It needs verify both indexes and fetch the docs, or if at least one match should fetch th… --- ## [BoolFilterBuilder does not merge multiple must-Clauses into array, but BoolQueryBuilder does](https://discuss.elastic.co/t/boolfilterbuilder-does-not-merge-multiple-must-clauses-into-array-but-boolquerybuilder-does/7051)
**Author:** [@Hachmaninow](https://discuss.elastic.co/u/Hachmaninow)\ **Replies:** 8\ **Last updated:** [April 4, 2013, 3:42pm UTC](https://discuss.elastic.co/t/boolfilterbuilder-does-not-merge-multiple-must-clauses-into-array-but-boolquerybuilder-does/7051 "2013-04-04T15:42:50Z")
Hey everybody, during my experiments with elasticsearch I've found differing behaviour using the Java-API-Builders for BoolFilters and BoolQueries. When I try to add multiple must clauses to both of them, the Boo… --- ## [Search across types with same field but different analyzers](https://discuss.elastic.co/t/search-across-types-with-same-field-but-different-analyzers/8361)
**Author:** [@Jorn\_Kottmann](https://discuss.elastic.co/u/Jorn_Kottmann)\ **Replies:** 8\ **Last updated:** [July 13, 2012, 8:50am UTC](https://discuss.elastic.co/t/search-across-types-with-same-field-but-different-analyzers/8361 "2012-07-13T08:50:25Z")
Hi all, I found a couple of posts about multilingual indexing. In them it was recommended to either use one index per language or use a field per language. I am currently looking into a system where they defined … --- ## [Separate tenant data within a single index in a multi tenant application](https://discuss.elastic.co/t/separate-tenant-data-within-a-single-index-in-a-multi-tenant-application/76647)
**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\ **Replies:** 2\ **Last updated:** [February 27, 2017, 4:57pm UTC](https://discuss.elastic.co/t/separate-tenant-data-within-a-single-index-in-a-multi-tenant-application/76647 "2017-02-27T16:57:16Z")
Hi, I have a multi tenant application and all customers data needs to be indexed. I went through the following articles to come up with a good strategy for this. For us there is a strict requirement customer data … --- ## [Update By Query - performance](https://discuss.elastic.co/t/update-by-query-performance/82889)
**Author:** [@Grzegorz\_Wilaszek](https://discuss.elastic.co/u/Grzegorz_Wilaszek)\ **Replies:** 0\ **Last updated:** [April 19, 2017, 1:05pm UTC](https://discuss.elastic.co/t/update-by-query-performance/82889 "2017-04-19T13:05:40Z")
We're using Update By Query API for instant bulk updates in Elasticsearch 2.4.4, but it's performing quite slow - in worst cases even a few minutes per one update request. What is expected performance of Update By Query? … --- ## [Synonyms in a production environment](https://discuss.elastic.co/t/synonyms-in-a-production-environment/51295)
**Author:** [@byronvoorbach](https://discuss.elastic.co/u/byronvoorbach)\ **Replies:** 0\ **Last updated:** [May 30, 2016, 9:19am UTC](https://discuss.elastic.co/t/synonyms-in-a-production-environment/51295 "2016-05-30T09:19:28Z")
Hi all, I'm working with one of our customers on implementing Elasticsearch as a replacement for their current search solution in their E-Commerce website. One of the features of the engine is that it must be able to h… --- ## [Usage of colons in search](https://discuss.elastic.co/t/usage-of-colons-in-search/9089)
**Author:** [@Robin\_Verlangen](https://discuss.elastic.co/u/Robin_Verlangen)\ **Replies:** 6\ **Last updated:** [September 21, 2012, 5:54pm UTC](https://discuss.elastic.co/t/usage-of-colons-in-search/9089 "2012-09-21T17:54:40Z")
Hi there, We found out that when we use colons ":" in our search, that it seems to break? We searched for a time, like "09:22:50" and the request kept pending. Is this a common issue, or did we do something wrong? … --- ## [Searching for multiple hyphenated terms](https://discuss.elastic.co/t/searching-for-multiple-hyphenated-terms/89997)
**Author:** [@lrietze](https://discuss.elastic.co/u/lrietze)\ **Replies:** 5\ **Last updated:** [June 20, 2017, 9:07pm UTC](https://discuss.elastic.co/t/searching-for-multiple-hyphenated-terms/89997 "2017-06-20T21:07:00Z")
Hi all, I am new to the ELK stack, and am in need of some help with querying with Elasticsearch. In essence what I am trying to do is perform a query like such: select \* from source where (message = abc-def OR def-gh… --- ## [Metric visualization conditional color change](https://discuss.elastic.co/t/metric-visualization-conditional-color-change/141674)
**Author:** [@d\_s](https://discuss.elastic.co/u/d_s)\ **Replies:** 2\ **Last updated:** [July 26, 2018, 9:21pm UTC](https://discuss.elastic.co/t/metric-visualization-conditional-color-change/141674 "2018-07-26T21:21:42Z")
Hello! I was attempting to follow along with this Conditional color change in Metric Widget in an attempt to re-create the metric that changes colors depending on what range the value is in. However, when I look at the … --- ## [Error: Failed to decrypt report job data. Please re-generate this report](https://discuss.elastic.co/t/error-failed-to-decrypt-report-job-data-please-re-generate-this-report/101303)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [September 22, 2017, 4:12am UTC](https://discuss.elastic.co/t/error-failed-to-decrypt-report-job-data-please-re-generate-this-report/101303 "2017-09-22T04:12:36Z")
Seeing the following error when the Report is being generated. What is causing this error? Using 5.4.3 ELK and X-Pack. Error: Failed to decrypt report job data. Please re-generate this report. --- ## [更新直後の検索クエリの結果が不整合になる](https://discuss.elastic.co/t/topic/141865)
**Author:** [@Skane](https://discuss.elastic.co/u/Skane)\ **Replies:** 4\ **Last updated:** [July 30, 2018, 4:41am UTC](https://discuss.elastic.co/t/topic/141865 "2018-07-30T04:41:39Z")
Elasticsearchにノード数4、シャード数8、レプリカ1で設定されたIndexに対して、以下のような現象が発生しました。 ■事象 APIで新しい上記のIndexにドキュメントを作成し更新 \_searchクエリから検索を行い結果を取得。1のドキュメントも結果に含まれている \_searchクエリから検索を行い結果を取得。1のドキュメントが結果に含まれず \_searchクエリから検索を行い結果を取得。1のドキュメントも結果に含ま… --- ## [Multiple Filebeat.yml for achieving different tasks](https://discuss.elastic.co/t/multiple-filebeat-yml-for-achieving-different-tasks/146573)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 3\ **Last updated:** [August 29, 2018, 10:37pm UTC](https://discuss.elastic.co/t/multiple-filebeat-yml-for-achieving-different-tasks/146573 "2018-08-29T22:37:36Z")
Suppose I have two different task to fulfill using filebeat. Is there any issues to make two different filebeat.yml for two different tasks? Its much cleaner and keeps the code separate. --- ## [Connection error when using a domain in python client to connect the elasticsearch](https://discuss.elastic.co/t/connection-error-when-using-a-domain-in-python-client-to-connect-the-elasticsearch/244650)
**Author:** [@Tristan\_D](https://discuss.elastic.co/u/Tristan_D)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 7:08am UTC](https://discuss.elastic.co/t/connection-error-when-using-a-domain-in-python-client-to-connect-the-elasticsearch/244650 "2020-08-12T07:08:30Z")
I can't connect to the es with the direct ip:9200, so I use a domain. The domain is mapping to es\_ip:9200. It's fine when I use curl command to test the connection. curl ai-xiaov-async.vivo.com.cn/\_cat/indices But in … --- ## [Hot nodes full](https://discuss.elastic.co/t/hot-nodes-full/318693)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 8\ **Last updated:** [November 25, 2022, 2:52pm UTC](https://discuss.elastic.co/t/hot-nodes-full/318693 "2022-11-25T14:52:24Z")
Hey Peeps, I have a theoretical question. What happens when you have nodes split by tiers - hot, warm, cold, and you have the indices managed by ILM. In case the hot nodes get filled up to the frozen watermark, would yo… --- ## [LOGSTASH and REDIS input - connection refused from redis](https://discuss.elastic.co/t/logstash-and-redis-input-connection-refused-from-redis/49315)
**Author:** [@sin](https://discuss.elastic.co/u/sin)\ **Replies:** 2\ **Last updated:** [May 6, 2016, 9:06am UTC](https://discuss.elastic.co/t/logstash-and-redis-input-connection-refused-from-redis/49315 "2016-05-06T09:06:52Z")
Hello, Here's my set-up: I'm running 1 vagrant vbox containing ELK, and another vagrant vbox containing a redis machine. On my local machine I'm running a website with a service that sends data to the redis machin… --- ## [Multiline XML processing using logstash](https://discuss.elastic.co/t/multiline-xml-processing-using-logstash/113915)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 6\ **Last updated:** [January 5, 2018, 9:18pm UTC](https://discuss.elastic.co/t/multiline-xml-processing-using-logstash/113915 "2018-01-05T21:18:27Z")
I have multi line XML to process more than 1000 lines. I am generating single message out of it. When using Logstash 2.4 multiline filter plugin was working perfectly. But as its been deprecated in 6.1. Therefore modi… --- ## [Error index.lifecycle.rollover\_alias does not pointto index](https://discuss.elastic.co/t/error-index-lifecycle-rollover-alias-does-not-pointto-index/220788)
**Author:** [@lbouquinUniv](https://discuss.elastic.co/u/lbouquinUniv)\ **Replies:** 3\ **Last updated:** [February 26, 2020, 9:12am UTC](https://discuss.elastic.co/t/error-index-lifecycle-rollover-alias-does-not-pointto-index/220788 "2020-02-26T09:12:29Z")
Hello? I have a problem with Elasticsearch 6.8. I've try to create rollover but I have an error. type" : "illegal\_argument\_exception", "reason" : "index.lifecycle.rollover\_alias \[test-alias-rollover\] does not point t… --- ## [Can filebeat load non .log file into elasticsearch/logstash?](https://discuss.elastic.co/t/can-filebeat-load-non-log-file-into-elasticsearch-logstash/107048)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 3\ **Last updated:** [November 13, 2017, 5:16pm UTC](https://discuss.elastic.co/t/can-filebeat-load-non-log-file-into-elasticsearch-logstash/107048 "2017-11-13T17:16:05Z")
Hi there. I try to load some files from filebeat -\> logstash -\> elasticsearch -\> kibana. The thing is that the files I'm trying to load are not .log files, but files without any extension. the filebeat.yml is: filebe… --- ## [APM and Jira](https://discuss.elastic.co/t/apm-and-jira/158057)
**Author:** [@struct](https://discuss.elastic.co/u/struct)\ **Replies:** 4\ **Last updated:** [November 26, 2018, 7:36am UTC](https://discuss.elastic.co/t/apm-and-jira/158057 "2018-11-26T07:36:31Z")
I'm in need to test the APM of Jira system. I deployed a fresh version of Jira and APM server. I'm getting different variations of errors. since Jira runs on Tomcat, I have placed in setenv.sh the following this guide. … --- ## [Logstash from Mongo To Elastic - Array Problem](https://discuss.elastic.co/t/logstash-from-mongo-to-elastic-array-problem/124340)
**Author:** [@Pierpaolo\_Rai](https://discuss.elastic.co/u/Pierpaolo_Rai)\ **Replies:** 4\ **Last updated:** [March 17, 2018, 9:32am UTC](https://discuss.elastic.co/t/logstash-from-mongo-to-elastic-array-problem/124340 "2018-03-17T09:32:08Z")
Hello guys, I'm running Logstash to sync my ElasticSearch with my MongoDB operation. I used the mongdb plugin to read from mongo, this is my initial config file: input { mongodb { uri =\> 'mongodb://localhost:27017/db… --- ## [ECK with Openshift oauth](https://discuss.elastic.co/t/eck-with-openshift-oauth/224459)
**Author:** [@Mastana\_Guru](https://discuss.elastic.co/u/Mastana_Guru)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 6:01pm UTC](https://discuss.elastic.co/t/eck-with-openshift-oauth/224459 "2021-05-26T18:01:15Z")
I have successfully installed ECK operator in openshift. Now I am trying to add openshift oauth proxy to kibana, so that users can be authenticated with ldap. Created a SA, but when deploy kibana with oaauth-proxy runnin… --- ## [Clustering ElasticSearch in "local" mode](https://discuss.elastic.co/t/clustering-elasticsearch-in-local-mode/9158)
**Author:** [@Michael\_Smolyak](https://discuss.elastic.co/u/Michael_Smolyak)\ **Replies:** 5\ **Last updated:** [September 28, 2012, 12:28am UTC](https://discuss.elastic.co/t/clustering-elasticsearch-in-local-mode/9158 "2012-09-28T00:28:29Z")
ElasticSearch Java API documentation describes the "local" mode of operation ( http://www.elasticsearch.org/guide/reference/java-api/client.html) where the ES server runs in the same JVM as the parent process. We ar… --- ## [Configuring SSL with Letsencrypt and sym links](https://discuss.elastic.co/t/configuring-ssl-with-letsencrypt-and-sym-links/289241)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 8\ **Last updated:** [November 21, 2021, 8:30pm UTC](https://discuss.elastic.co/t/configuring-ssl-with-letsencrypt-and-sym-links/289241 "2021-11-21T20:30:47Z")
I am setting up and Elasticsearch server on a system that uses letsencrypt certificates. The certificates and keys live under /etc/letsencrypt. There are several applications that need to access those key and rather th… --- ## [Zabbix output to logstash](https://discuss.elastic.co/t/zabbix-output-to-logstash/88401)
**Author:** [@shrwn](https://discuss.elastic.co/u/shrwn)\ **Replies:** 3\ **Last updated:** [June 6, 2017, 4:33pm UTC](https://discuss.elastic.co/t/zabbix-output-to-logstash/88401 "2017-06-06T16:33:00Z")
Hi, we have multiple node servers that are connecting with master server through logstash. Zabbix agent is installed on almost all nodes. Can i use zabbix to send data to logstash? If so, how can i do that? Is ther… [Previous page](https://discuss.elastic.co/top.md?page=731&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=733&per_page=50&period=all)