# Top **URL:** https://discuss.elastic.co/top.md?page=733&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 734 --- ## [Use \_source fields from other index for highlighting](https://discuss.elastic.co/t/use--source-fields-from-other-index-for-highlighting/28081)
**Author:** [@xam](https://discuss.elastic.co/u/xam)\ **Replies:** 8\ **Last updated:** [August 31, 2015, 7:28am UTC](https://discuss.elastic.co/t/use--source-fields-from-other-index-for-highlighting/28081 "2015-08-31T07:28:48Z")
Hi, I have documents that are grouped in families. I need the possibility to search at the document level and at the family level. That is why I think I need two indexes : the first one will map my source document to a… --- ## [Host.hostname field bug](https://discuss.elastic.co/t/host-hostname-field-bug/188219)
**Author:** [@Chinedum\_Nwuzor](https://discuss.elastic.co/u/Chinedum_Nwuzor)\ **Replies:** 6\ **Last updated:** [July 1, 2019, 3:55pm UTC](https://discuss.elastic.co/t/host-hostname-field-bug/188219 "2019-07-01T15:55:44Z")
Can anyone please help resolve this? --- ## [Logstash Hangs due to overload](https://discuss.elastic.co/t/logstash-hangs-due-to-overload/151215)
**Author:** [@Vignesh\_Kalaimani](https://discuss.elastic.co/u/Vignesh_Kalaimani)\ **Replies:** 6\ **Last updated:** [October 10, 2018, 10:48am UTC](https://discuss.elastic.co/t/logstash-hangs-due-to-overload/151215 "2018-10-10T10:48:31Z")
I have a Filebeat -\> Logstash -\> Elasticsearch setup where filebeat reads local log from VM and sends it to Logstash which in-turn indexes the log to Elasticsearch. The above setup worked well for a small environment. B… --- ## [Different index output using ingest pipeline](https://discuss.elastic.co/t/different-index-output-using-ingest-pipeline/286325)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 7\ **Last updated:** [October 11, 2021, 5:57am UTC](https://discuss.elastic.co/t/different-index-output-using-ingest-pipeline/286325 "2021-10-11T05:57:43Z")
Hello, I'm trying to use ingest pipeline to get different index output. Here's my case: I have fluentd to hit input on Elasticsearch, fluentd make index input on Elasticsearch named as "app-write", I want to filter from… --- ## [Unable to use es.index.read.missing.as.empty with spark sql](https://discuss.elastic.co/t/unable-to-use-es-index-read-missing-as-empty-with-spark-sql/120326)
**Author:** [@bjet007](https://discuss.elastic.co/u/bjet007)\ **Replies:** 4\ **Last updated:** [March 9, 2018, 10:51am UTC](https://discuss.elastic.co/t/unable-to-use-es-index-read-missing-as-empty-with-spark-sql/120326 "2018-03-09T10:51:21Z")
I'm trying to read data with spark in elasticsearch on indexe that could not exist, since my index has a date pattern. Since it's expected in my situation I only want an empty dataset. Is there a way to do it? I'm using… --- ## [Getting bad request(400) error during \_search of Dashboard](https://discuss.elastic.co/t/getting-bad-request-400-error-during-search-of-dashboard/127990)
**Author:** [@naveenk](https://discuss.elastic.co/u/naveenk)\ **Replies:** 2\ **Last updated:** [April 14, 2018, 12:51am UTC](https://discuss.elastic.co/t/getting-bad-request-400-error-during-search-of-dashboard/127990 "2018-04-14T00:51:54Z")
I am getting Bad request whenever try to view dashboard in kibana. When dig more, I observed following things. I will get this error only when elastic.url is accessed through proxy When i executed same query through PO… --- ## [Read Oracle Database Table Data vi Logstash to insert into ElasticSearch](https://discuss.elastic.co/t/read-oracle-database-table-data-vi-logstash-to-insert-into-elasticsearch/323717)
**Author:** [@SP003](https://discuss.elastic.co/u/SP003)\ **Replies:** 3\ **Last updated:** [February 1, 2023, 11:32am UTC](https://discuss.elastic.co/t/read-oracle-database-table-data-vi-logstash-to-insert-into-elasticsearch/323717 "2023-02-01T11:32:17Z")
Dear all, I am trying to connect with table from Oracle Database, and read records through logstash, and then to insert into Elastic search. And the same I want to do in a Linux system. So far I understood that I have … --- ## [Kibanaのダッシュボード画面でグラフが自動更新されない](https://discuss.elastic.co/t/kibana/221138)
**Author:** [@horikoshi](https://discuss.elastic.co/u/horikoshi)\ **Replies:** 3\ **Last updated:** [March 5, 2020, 2:21am UTC](https://discuss.elastic.co/t/kibana/221138 "2020-03-05T02:21:47Z")
お世話になります。 ダッシュボード画面でグラフの自動更新がされず、Refreshボタンを押さないと、更新されません。 原因と解決の糸口を見つけたく、投稿させていただきました。 環境情報 ・サーバー AWSのEC2(Amazon Linux2) ・プロダクト Elasticsearch7.6.0, Kibana7.6.0 ・環境 ESとKibanaが同一サーバー内で稼働 ・ブラウザ Google Chrome80.0.398… --- ## [Command to add a user/password on Elastic search](https://discuss.elastic.co/t/command-to-add-a-user-password-on-elastic-search/87165)
**Author:** [@Vinuja1](https://discuss.elastic.co/u/Vinuja1)\ **Replies:** 3\ **Last updated:** [May 26, 2017, 12:58pm UTC](https://discuss.elastic.co/t/command-to-add-a-user-password-on-elastic-search/87165 "2017-05-26T12:58:12Z")
In order to ass a new user/password on my elasticsearch, I need to execute the following line : \\ curl -XPUT -u elastic 'localhost:9200/\_xpack/security/user/elastic/\_password' -H "Content-Type: application/json" -d '{ "p… --- ## [@timestamp conflicts with existing mapping in eleasticsearch 2.1.0](https://discuss.elastic.co/t/timestamp-conflicts-with-existing-mapping-in-eleasticsearch-2-1-0/38544)
**Author:** [@inderjeet26](https://discuss.elastic.co/u/inderjeet26)\ **Replies:** 3\ **Last updated:** [January 7, 2016, 5:46pm UTC](https://discuss.elastic.co/t/timestamp-conflicts-with-existing-mapping-in-eleasticsearch-2-1-0/38544 "2016-01-07T17:46:53Z")
I am having this same issue in production. We have already have data in the indexes when we upgraded from Elasticsearch 1.6 to 2.1.0. Now when trying to add the new types in the already existing indexes, there is the … --- ## [ML Jobs Permissions](https://discuss.elastic.co/t/ml-jobs-permissions/229578)
**Author:** [@KoettingSimon](https://discuss.elastic.co/u/KoettingSimon)\ **Replies:** 5\ **Last updated:** [May 19, 2020, 11:22am UTC](https://discuss.elastic.co/t/ml-jobs-permissions/229578 "2020-05-19T11:22:52Z")
Hi All, Im playing arround with the ML-Feature of the Elastic Stack. We use our Stack with multiple Kibana Spaces/Indicies. So person A has access to Index A and Space A, person B has access to Index B and Space B and… --- ## [Elasticsearch does not work with network.host 0.0.0.0](https://discuss.elastic.co/t/elasticsearch-does-not-work-with-network-host-0-0-0-0/228162)
**Author:** [@wiktort](https://discuss.elastic.co/u/wiktort)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-work-with-network-host-0-0-0-0/228162 "2020-04-16T12:27:18Z")
I have been trying to set up a test version of a website on a different server. The website uses React, Strapi, Postgres, Nginx and Elasticsearch. All of them are working, but the website is stuck on a loader. I do no… --- ## [Bearer Tokens and Elasticsearch API](https://discuss.elastic.co/t/bearer-tokens-and-elasticsearch-api/166702)
**Author:** [@JamesNotJamez](https://discuss.elastic.co/u/JamesNotJamez)\ **Replies:** 2\ **Last updated:** [February 1, 2019, 2:02pm UTC](https://discuss.elastic.co/t/bearer-tokens-and-elasticsearch-api/166702 "2019-02-01T14:02:54Z")
Hi, Through the ECE ui there is the option of API console on each cluster which sends a request like this https://\:12443/api/v0.1/regions/ece-region/clusters/b5fa10fc95c940fdb85c3f2f800f0dae/proxy/\_cluster/\_se… --- ## [Parsing Json Logs](https://discuss.elastic.co/t/parsing-json-logs/125837)
**Author:** [@Gert\_Humphris](https://discuss.elastic.co/u/Gert_Humphris)\ **Replies:** 2\ **Last updated:** [March 28, 2018, 8:44pm UTC](https://discuss.elastic.co/t/parsing-json-logs/125837 "2018-03-28T20:44:17Z")
Hi Guys I'm new to Elastic and have been searching lots to try and find an answer. I have a multiline JSON that I'm trying to create a single event for. The Json looks like this: { "SourceInfo": "C:\\\\Modules\\… --- ## [Cannot configure SSL connection between Filebeat and Logstash](https://discuss.elastic.co/t/cannot-configure-ssl-connection-between-filebeat-and-logstash/53039)
**Author:** [@Sully1](https://discuss.elastic.co/u/Sully1)\ **Replies:** 2\ **Last updated:** [June 22, 2016, 2:16pm UTC](https://discuss.elastic.co/t/cannot-configure-ssl-connection-between-filebeat-and-logstash/53039 "2016-06-22T14:16:44Z")
I'm having trouble configuring the SSL connection between the Filebeat client (Windows 2012 R2) and the Logstash server (RH7). Filebeat and Logstash communicates just find when I set ssl to 'false' in the beats config f… --- ## [Configuring number of primary shards](https://discuss.elastic.co/t/configuring-number-of-primary-shards/11839)
**Author:** [@vinod\_eligeti](https://discuss.elastic.co/u/vinod_eligeti)\ **Replies:** 2\ **Last updated:** [May 8, 2013, 11:03pm UTC](https://discuss.elastic.co/t/configuring-number-of-primary-shards/11839 "2013-05-08T23:03:16Z")
I was going through "To Infinity and Beyond" video where it mentions the number of primary shards ( but default is 5) cannot be changed however, the number of replica shards can? I want to confirm whether that is … --- ## [Upgrade to Kibana 7.11 results in 'Unexpected token \< in JSON at position 0' for eaggs](https://discuss.elastic.co/t/upgrade-to-kibana-7-11-results-in-unexpected-token-in-json-at-position-0-for-eaggs/264707)
**Author:** [@commandline](https://discuss.elastic.co/u/commandline)\ **Replies:** 6\ **Last updated:** [February 22, 2021, 1:53pm UTC](https://discuss.elastic.co/t/upgrade-to-kibana-7-11-results-in-unexpected-token-in-json-at-position-0-for-eaggs/264707 "2021-02-22T13:53:16Z")
Following an upgrade to 7.11 for elasticsearch and kibana there now appear many Error states on dashboard panels. Inspect shows the response for the request to be { “message”: “Unexpected token \< in JSON at position 0… --- ## [Manually Moving Replica Shard To Node](https://discuss.elastic.co/t/manually-moving-replica-shard-to-node/240789)
**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\ **Replies:** 6\ **Last updated:** [July 13, 2020, 6:43am UTC](https://discuss.elastic.co/t/manually-moving-replica-shard-to-node/240789 "2020-07-13T06:43:45Z")
My goal is to have dedicated nodes for primary and replica shards. As far as I know, this is not supported/guaranteed out of the box but I'd be happy to do it manually if someone could point me out to a way to move a rep… --- ## [Logstash not populating .raw values](https://discuss.elastic.co/t/logstash-not-populating-raw-values/56333)
**Author:** [@john.miles](https://discuss.elastic.co/u/john.miles)\ **Replies:** 6\ **Last updated:** [July 27, 2016, 2:27am UTC](https://discuss.elastic.co/t/logstash-not-populating-raw-values/56333 "2016-07-27T02:27:43Z")
I have filebeat set up to ship my nginx logs over to logstash and logstash is updating my indices with the log data. I am using the logstash-\* template (though my index is called logstash-appname-prod-web-access-logs-YY… --- ## [Ingest data directly from Google Cloud Storage into Elastic using Google](https://discuss.elastic.co/t/ingest-data-directly-from-google-cloud-storage-into-elastic-using-google/325769)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 8\ **Last updated:** [February 21, 2023, 6:32am UTC](https://discuss.elastic.co/t/ingest-data-directly-from-google-cloud-storage-into-elastic-using-google/325769 "2023-02-21T06:32:49Z")
Hi, I was reading this article and read this line: Currently, CSV file format is supported and we’ll be adding support for JSON soon. I know that it doesn't mean "the next day" but after 17 months, I checked and sti… --- ## [When to clear es cache?](https://discuss.elastic.co/t/when-to-clear-es-cache/325428)
**Author:** [@elastic-db-user](https://discuss.elastic.co/u/elastic-db-user)\ **Replies:** 8\ **Last updated:** [February 15, 2023, 2:59pm UTC](https://discuss.elastic.co/t/when-to-clear-es-cache/325428 "2023-02-15T14:59:45Z")
Is it a good idea to proactively clear all cache with a daily cron job to avoid any circuit breaker or any other memory related issues? Api calls from app to Elasticsearch are the same query e.g. count, histogram, get, … --- ## [Cluster state update taking more than 10 seconds warnings](https://discuss.elastic.co/t/cluster-state-update-taking-more-than-10-seconds-warnings/243768)
**Author:** [@luiz.ooliveira](https://discuss.elastic.co/u/luiz.ooliveira)\ **Replies:** 7\ **Last updated:** [August 7, 2020, 2:47pm UTC](https://discuss.elastic.co/t/cluster-state-update-taking-more-than-10-seconds-warnings/243768 "2020-08-07T14:47:59Z")
Hi, I'm getting the following warning every time I update a cluster setting: took \[10.6s\], which is over \[10s\], to compute cluster state update for \[update-settings\] Is there any way to identify where it is taking mor… --- ## [CPU at 99% - Need help understanding hot\_threads ! pls](https://discuss.elastic.co/t/cpu-at-99-need-help-understanding-hot-threads-pls/42171)
**Author:** [@Camilo\_Sierra](https://discuss.elastic.co/u/Camilo_Sierra)\ **Replies:** 7\ **Last updated:** [February 19, 2016, 4:06pm UTC](https://discuss.elastic.co/t/cpu-at-99-need-help-understanding-hot-threads-pls/42171 "2016-02-19T16:06:14Z")
85.2% (426.1ms out of 500ms) cpu usage by thread 'elasticsearch\[Data 1-hot\]\[bulk\]\[T#1\]' 3/10 snapshots sharing following 19 elements org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractField… --- ## [Reloading elasticsearch.yml on ELK Stack](https://discuss.elastic.co/t/reloading-elasticsearch-yml-on-elk-stack/178649)
**Author:** [@Johnnie843](https://discuss.elastic.co/u/Johnnie843)\ **Replies:** 1\ **Last updated:** [April 26, 2019, 3:24pm UTC](https://discuss.elastic.co/t/reloading-elasticsearch-yml-on-elk-stack/178649 "2019-04-26T15:24:06Z")
I made a change to my configuration on the elastic search side of the ELK stack. What is the proper sequence of events to reload the configuration without causing issues to the stack? Far as downtime, I need to keep it m… --- ## [Parent/child "where parent exists" query](https://discuss.elastic.co/t/parent-child-where-parent-exists-query/15384)
**Author:** [@Thomas\_Bolis](https://discuss.elastic.co/u/Thomas_Bolis)\ **Replies:** 3\ **Last updated:** [January 24, 2014, 10:10am UTC](https://discuss.elastic.co/t/parent-child-where-parent-exists-query/15384 "2014-01-24T10:10:18Z")
Hi, I have been working with a parent child schema creation and I was wondering if there is a way to perform a search in children documents with the query "where parent exists" and get only those documents. I can i… --- ## [Auto refresh not working as expected after upgrade from 6.4 to 6.5](https://discuss.elastic.co/t/auto-refresh-not-working-as-expected-after-upgrade-from-6-4-to-6-5/157534)
**Author:** [@PeterSkarmyr](https://discuss.elastic.co/u/PeterSkarmyr)\ **Replies:** 4\ **Last updated:** [November 21, 2018, 7:49am UTC](https://discuss.elastic.co/t/auto-refresh-not-working-as-expected-after-upgrade-from-6-4-to-6-5/157534 "2018-11-21T07:49:18Z")
After upgrading from 6.4 to 6.5 I have been having issues with auto refresh. After reloading any page, auto refresh can appear to be on, but I have to turn it off and on again to make it work. To reproduce: Go to a da… --- ## [No\_shard\_available\_action\_exception](https://discuss.elastic.co/t/no-shard-available-action-exception/370412)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 1\ **Last updated:** [November 12, 2024, 9:17pm UTC](https://discuss.elastic.co/t/no-shard-available-action-exception/370412 "2024-11-12T21:17:51Z")
Hello My test server is generating an error which does not allow me to continue with the ingestion, it is a single server, in it is all the ELK solution. initially this is the error message With this I find the … --- ## [Logstash JSON parsing of @timestamp](https://discuss.elastic.co/t/logstash-json-parsing-of-timestamp/142476)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 4\ **Last updated:** [August 1, 2018, 4:03pm UTC](https://discuss.elastic.co/t/logstash-json-parsing-of-timestamp/142476 "2018-08-01T16:03:14Z")
The docs for the logstrash JSON plugin say: If the parsed data contains a @timestamp field, we will try to use it for the event’s @timestamp, if the parsing fails, the field will be renamed to \_@timestamp and the event… --- ## [Logstash going to sleep without pulling files](https://discuss.elastic.co/t/logstash-going-to-sleep-without-pulling-files/110864)
**Author:** [@Shreya\_Chatterjee](https://discuss.elastic.co/u/Shreya_Chatterjee)\ **Replies:** 4\ **Last updated:** [December 9, 2017, 9:54am UTC](https://discuss.elastic.co/t/logstash-going-to-sleep-without-pulling-files/110864 "2017-12-09T09:54:40Z")
log file excerpt: 2017-11-06 11:54:43,333; \[LOG\_LEVEL=ALWAYS, CMPNT\_NM=com.fmr.ifeb.alayer.cache.ehcache.ApplicationCacheImpl, MESSAGE=Initialized cache named 'oscarJdbcDaxCache'\] filebeat.yml --- filebeat.prospector… --- ## [Can Packetbeat be configured to use Npcap by default?](https://discuss.elastic.co/t/can-packetbeat-be-configured-to-use-npcap-by-default/86166)
**Author:** [@Bobby](https://discuss.elastic.co/u/Bobby)\ **Replies:** 4\ **Last updated:** [May 19, 2017, 7:24pm UTC](https://discuss.elastic.co/t/can-packetbeat-be-configured-to-use-npcap-by-default/86166 "2017-05-19T19:24:14Z")
In this part of Packetbeat's FAQ section, Npcap is mentioned to be an alternative to WinPcap. I tried running Packetbeat after installing Npcap, but still hit the error "The program can't start because wpcap.dll is missi… --- ## [NoRouteToHostException when one of the ES instance rebuild in cluster](https://discuss.elastic.co/t/noroutetohostexception-when-one-of-the-es-instance-rebuild-in-cluster/78590)
**Author:** [@Neni](https://discuss.elastic.co/u/Neni)\ **Replies:** 4\ **Last updated:** [March 16, 2017, 3:08pm UTC](https://discuss.elastic.co/t/noroutetohostexception-when-one-of-the-es-instance-rebuild-in-cluster/78590 "2017-03-16T15:08:03Z")
could you please reply with fix for below error ES version 2.1 code to connect to ES final Settings settings = Settings.settingsBuilder().put("cluster.name", clusterName).put("client.transport.sniff", true).build(); … --- ## [ECK Storage Recommendations](https://discuss.elastic.co/t/eck-storage-recommendations/237430)
**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\ **Replies:** 5\ **Last updated:** [March 13, 2021, 5:26pm UTC](https://discuss.elastic.co/t/eck-storage-recommendations/237430 "2021-03-13T17:26:19Z")
Dear All, We are planning to deploy storage sol on ECK cluster, internal build k8s platform. Storage solution provided by our team does not support dynamic provisioning currently. So we are left with following approach… --- ## [Logstash log4j2 plugins installation](https://discuss.elastic.co/t/logstash-log4j2-plugins-installation/133839)
**Author:** [@Ankita\_Ghate](https://discuss.elastic.co/u/Ankita_Ghate)\ **Replies:** 6\ **Last updated:** [June 13, 2018, 11:03am UTC](https://discuss.elastic.co/t/logstash-log4j2-plugins-installation/133839 "2018-06-13T11:03:59Z")
while starting logstash, I am getting below error, 83\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"6.2.2"} \[2018-05-30T09:14:47,157\]\[INFO \]\[logstash.agent \] Successfully started … --- ## [Problem with \_cat/indices, \_cat/nodes, \_cat/allocation with Elasticsearch6.0.1](https://discuss.elastic.co/t/problem-with-cat-indices-cat-nodes-cat-allocation-with-elasticsearch6-0-1/111370)
**Author:** [@Louise](https://discuss.elastic.co/u/Louise)\ **Replies:** 2\ **Last updated:** [December 12, 2017, 3:47pm UTC](https://discuss.elastic.co/t/problem-with-cat-indices-cat-nodes-cat-allocation-with-elasticsearch6-0-1/111370 "2017-12-12T15:47:13Z")
Hello, I have just migrated to elasticsearch 6.0.1 (I was using 5.6.5 before). I have some problem with cat API as when I : GET /\_cat/allocation?v GET /\_cat/indices?v GET /\_cat/nodes I receive this message { "error"… --- ## [Elastic Search - JavaEsSpark read is slow](https://discuss.elastic.co/t/elastic-search-javaesspark-read-is-slow/63143)
**Author:** [@sukumar](https://discuss.elastic.co/u/sukumar)\ **Replies:** 7\ **Last updated:** [October 18, 2016, 6:29pm UTC](https://discuss.elastic.co/t/elastic-search-javaesspark-read-is-slow/63143 "2016-10-18T18:29:15Z")
I am using spark 1.4.1 and trying to read from the elasticsearch , its taking 1600 ms but when I tried to retrieve the same query using SENSE ,its taking just 3 ms. Can anyone help me to improve the query performance ? … --- ## [Kibana server is not ready yet - kibana 7.6.2 - New Install](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-kibana-7-6-2-new-install/227840)
**Author:** [@surfd4wg](https://discuss.elastic.co/u/surfd4wg)\ **Replies:** 8\ **Last updated:** [April 14, 2020, 8:43pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-kibana-7-6-2-new-install/227840 "2020-04-14T20:43:13Z")
This is from localhost:9200. { "name" : "rex-VirtualBox", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "na", "version" : { "number" : "7.6.2", "build\_flavor" : "default", "build\_type" : "deb", "build\_hash"… --- ## [Synonym analysis before or after Stemmer?](https://discuss.elastic.co/t/synonym-analysis-before-or-after-stemmer/134347)
**Author:** [@foobarbaz](https://discuss.elastic.co/u/foobarbaz)\ **Replies:** 2\ **Last updated:** [June 4, 2018, 2:08am UTC](https://discuss.elastic.co/t/synonym-analysis-before-or-after-stemmer/134347 "2018-06-04T02:08:16Z")
Hi! Could someone clear up if synonym analysis should happen before or after a stemmer? Use wordnet style as noted in docs: { "settings": { "index" : { "analysis" : { "filter" :… --- ## [Split event into multiple different messages](https://discuss.elastic.co/t/split-event-into-multiple-different-messages/137659)
**Author:** [@jvolpi](https://discuss.elastic.co/u/jvolpi)\ **Replies:** 4\ **Last updated:** [June 29, 2018, 6:50pm UTC](https://discuss.elastic.co/t/split-event-into-multiple-different-messages/137659 "2018-06-29T18:50:12Z")
Hi everyone Is there a way to split an event into multiple messages, and send them to elasticsearh? The problem is the event cannot be splitted in a automatic way using plugins, because the data isn't exactly structure… --- ## [Logstash csv - date and file format](https://discuss.elastic.co/t/logstash-csv-date-and-file-format/75083)
**Author:** [@cthomps](https://discuss.elastic.co/u/cthomps)\ **Replies:** 4\ **Last updated:** [February 15, 2017, 12:43pm UTC](https://discuss.elastic.co/t/logstash-csv-date-and-file-format/75083 "2017-02-15T12:43:37Z")
I'm having trouble getting my timestamp field from csv file into the @timestamp in ES. I have tried the timestamp field a few different ways, trying to stay in a standard if possible. In the debug logs i see an error… --- ## [ILM Policy poll interval](https://discuss.elastic.co/t/ilm-policy-poll-interval/243211)
**Author:** [@hemanth49841](https://discuss.elastic.co/u/hemanth49841)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 5:22pm UTC](https://discuss.elastic.co/t/ilm-policy-poll-interval/243211 "2020-08-03T17:22:44Z")
Hi all, In our project environment, we have changed the Cluster ILM poll interval from default (10m) to "1s". Does we face anyindices performance related issues on clusters ? Note : Our cluster size is 3 node. Also ne… --- ## [Weird timeouts with transport client after re-indexing](https://discuss.elastic.co/t/weird-timeouts-with-transport-client-after-re-indexing/93865)
**Author:** [@Manasvini\_Nandakumar](https://discuss.elastic.co/u/Manasvini_Nandakumar)\ **Replies:** 5\ **Last updated:** [July 20, 2017, 6:40am UTC](https://discuss.elastic.co/t/weird-timeouts-with-transport-client-after-re-indexing/93865 "2017-07-20T06:40:34Z")
Hi everyone, We have a pretty limiting issue with our elasticsearch cluster. We have 3 master nodes, 3 data nodes and 2 client nodes in our cluster. Our code creates time based indexes every half an hour. This is meant t… --- ## [Should I consider Elastic as primary storage for data I want to search through?](https://discuss.elastic.co/t/should-i-consider-elastic-as-primary-storage-for-data-i-want-to-search-through/51014)
**Author:** [@lessless](https://discuss.elastic.co/u/lessless)\ **Replies:** 5\ **Last updated:** [May 26, 2016, 6:41am UTC](https://discuss.elastic.co/t/should-i-consider-elastic-as-primary-storage-for-data-i-want-to-search-through/51014 "2016-05-26T06:41:18Z")
Hello, this is my literally first experience with Elastic and I want to make sure that there will bo no decision that I'll regret about later. The question is: is it advised (possible, recommended) to use Elastic as… --- ## [Cluster does not send data to slave](https://discuss.elastic.co/t/cluster-does-not-send-data-to-slave/35061)
**Author:** [@MikeC](https://discuss.elastic.co/u/MikeC)\ **Replies:** 5\ **Last updated:** [January 6, 2016, 7:15am UTC](https://discuss.elastic.co/t/cluster-does-not-send-data-to-slave/35061 "2016-01-06T07:15:06Z")
Hi all, i've setup a cluster with two nodes and the slave does not receive any data. The master finds the slave and vice versa, but the slave reports back \[2015-11-19 13:42:56,540\]\[DEBUG\]\[action.admin.indices.stat… --- ## [OutOfMemory exception after few hours of indexing](https://discuss.elastic.co/t/outofmemory-exception-after-few-hours-of-indexing/11527)
**Author:** [@Amit\_Bh](https://discuss.elastic.co/u/Amit_Bh)\ **Replies:** 5\ **Last updated:** [April 17, 2013, 7:54pm UTC](https://discuss.elastic.co/t/outofmemory-exception-after-few-hours-of-indexing/11527 "2013-04-17T19:54:22Z")
Hi, We have an issue in production that the ES process getting OutOfMemory error and stop working. The error occur after we index about 6 million documents out of 12 million we have in the DB. The document size i… --- ## [Securing Elastic Search single node](https://discuss.elastic.co/t/securing-elastic-search-single-node/198069)
**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 5:35pm UTC](https://discuss.elastic.co/t/securing-elastic-search-single-node/198069 "2019-09-09T17:35:39Z")
I have a single node Elastic Search 6.4, and trying to see if I can add some security on it, like adding a user/password. Trying to follow this guide here I also have Kibana installed. But I do not see Management-\>User… --- ## [TSVB table : Group by multiple fields](https://discuss.elastic.co/t/tsvb-table-group-by-multiple-fields/240007)
**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\ **Replies:** 2\ **Last updated:** [July 6, 2020, 1:44pm UTC](https://discuss.elastic.co/t/tsvb-table-group-by-multiple-fields/240007 "2020-07-06T13:44:03Z")
Hello! I would like to use TSVB to make a data table that sums a value for multiple groups as in the picture? Is it possible? Thank you, elisavet --- ## [Logstash v5.6.3 won't start if debug logging is on](https://discuss.elastic.co/t/logstash-v5-6-3-wont-start-if-debug-logging-is-on/103817)
**Author:** [@sgladkovich](https://discuss.elastic.co/u/sgladkovich)\ **Replies:** 2\ **Last updated:** [October 13, 2017, 8:12am UTC](https://discuss.elastic.co/t/logstash-v5-6-3-wont-start-if-debug-logging-is-on/103817 "2017-10-13T08:12:55Z")
Hello, I am running Logstash on Ubuntu 14.04 in AWS. Here are my config details: $ grep -E -v '^#|^$' /etc/logstash/logstash.yml node.name: logstash path.data: /var/lib/logstash path.config: /etc/logstash/conf.d confi… --- ## [File output plugin permission denied](https://discuss.elastic.co/t/file-output-plugin-permission-denied/55211)
**Author:** [@asoong-94](https://discuss.elastic.co/u/asoong-94)\ **Replies:** 2\ **Last updated:** [July 11, 2016, 11:27pm UTC](https://discuss.elastic.co/t/file-output-plugin-permission-denied/55211 "2016-07-11T23:27:25Z")
This is my output configuration, right now i am just using grok to parse out IP and a WORD input {stdin {} } filter { grok { match =\> {"message" =\> "%{IP:user\_ip} %{WORD:computer\_name}"} } } output { file { … --- ## [Watcher payload json array access](https://discuss.elastic.co/t/watcher-payload-json-array-access/157840)
**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\ **Replies:** 3\ **Last updated:** [November 28, 2018, 10:31am UTC](https://discuss.elastic.co/t/watcher-payload-json-array-access/157840 "2018-11-28T10:31:43Z")
Hi There, I have created an advances watch/alert in Watcher, Kibana UI. I have an input which returns a payload that contains an array. I would like to access a specific field of all the elements in that array and add i… --- ## [APM server not creating separate indices](https://discuss.elastic.co/t/apm-server-not-creating-separate-indices/212142)
**Author:** [@sharry007](https://discuss.elastic.co/u/sharry007)\ **Replies:** 6\ **Last updated:** [December 19, 2019, 2:01pm UTC](https://discuss.elastic.co/t/apm-server-not-creating-separate-indices/212142 "2019-12-19T14:01:26Z")
Kibana version: 7.4.0 Elasticsearch version: 7.4.0 APM Server version: 7.4.0 Upgraded from other version: From 6.7.1 I upgraded elastic stack and APM server to 7.4.0. I installed APM server from deb package. Earlier … [Previous page](https://discuss.elastic.co/top.md?page=732&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=734&per_page=50&period=all)