# Top **URL:** https://discuss.elastic.co/top.md?page=743&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 744 --- ## [Delete data stream and all it's index](https://discuss.elastic.co/t/delete-data-stream-and-all-its-index/340085)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [August 7, 2023, 3:03pm UTC](https://discuss.elastic.co/t/delete-data-stream-and-all-its-index/340085 "2023-08-07T15:03:12Z")
I have a test data stream. it works fine. But now I am trying to delete it and I can't When I do delete via command or via GUI it recreates it self DELETE /\_data\_stream/msyos1-log I can't delete index template as wel… --- ## [Reporting generation vs timeout](https://discuss.elastic.co/t/reporting-generation-vs-timeout/208853)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 8\ **Last updated:** [November 28, 2019, 12:26pm UTC](https://discuss.elastic.co/t/reporting-generation-vs-timeout/208853 "2019-11-28T12:26:26Z")
Got a Kibana 7.4.2 instance behind a HAproxy which fails to generate PDF reports and wondering howto debug this issue further. Seeing this in my kibana log: {"type":"log","@timestamp":"2019-11-21T09:56:37Z","tags":\["r… --- ## [Monitoring Request Failed](https://discuss.elastic.co/t/monitoring-request-failed/259628)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 7:44am UTC](https://discuss.elastic.co/t/monitoring-request-failed/259628 "2021-01-05T07:44:51Z")
Hi everyone, I using kibana and elasticsearch verison 7.4.2 . When I set the time interval between 1-15 minutes in the Kibana Stack Monitoring panel, I get the error 'Monitoring Request Failed: Unable to find the clust… --- ## [ElasticSearch NEST - all fields are NULL](https://discuss.elastic.co/t/elasticsearch-nest-all-fields-are-null/221754)
**Author:** [@Julius\_Kukonenko](https://discuss.elastic.co/u/Julius_Kukonenko)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-nest-all-fields-are-null/221754 "2020-03-03T07:43:37Z")
I'm trying to retrieve data from elastic search with NEST. Everything would be good, but NEST all fields return null. However, in debug mode I see that it counts the documents correctly but not showing the value of field… --- ## [Set root for json codec](https://discuss.elastic.co/t/set-root-for-json-codec/185906)
**Author:** [@Nate\_McCallum](https://discuss.elastic.co/u/Nate_McCallum)\ **Replies:** 6\ **Last updated:** [June 17, 2019, 5:33pm UTC](https://discuss.elastic.co/t/set-root-for-json-codec/185906 "2019-06-17T17:33:09Z")
Using the json\_codec on input I get all my fields parsed at the root level. I like to specify a name for the subfield for the items. So right now with { "a" : "b", "c" : "d" } to get a = b and c = d. I'd like to get myn… --- ## [Templates don't persist after service restart](https://discuss.elastic.co/t/templates-dont-persist-after-service-restart/99633)
**Author:** [@dmtd](https://discuss.elastic.co/u/dmtd)\ **Replies:** 6\ **Last updated:** [October 6, 2017, 8:06pm UTC](https://discuss.elastic.co/t/templates-dont-persist-after-service-restart/99633 "2017-10-06T20:06:25Z")
So I’m trying to set templates while elasticsearch is not available to the rest of the network, and then restart elasticsearch in a mode that is available to the rest of the network. When elasticsearch is restarted, the … --- ## [Elasticsearch run as a service dies on first request](https://discuss.elastic.co/t/elasticsearch-run-as-a-service-dies-on-first-request/20545)
**Author:** [@TealFawn](https://discuss.elastic.co/u/TealFawn)\ **Replies:** 6\ **Last updated:** [November 3, 2014, 9:33pm UTC](https://discuss.elastic.co/t/elasticsearch-run-as-a-service-dies-on-first-request/20545 "2014-11-03T21:33:15Z")
I'm running elasticsearch on Centos using the \*serivce elasticsearch start. \*The service happily stays running until it receives its first request causing it to die. \*service elasticsearch status\* returns elasti… --- ## [Kibana Sizing Guide?](https://discuss.elastic.co/t/kibana-sizing-guide/296395)
**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 4:44am UTC](https://discuss.elastic.co/t/kibana-sizing-guide/296395 "2022-02-07T04:44:51Z")
Hello, I am attempting to create a sizing estimate and did not find specific guidance for Kibana, could anyone clarify if there is an official guide? As of now, I am considering this setup to be a single machine: 4 CPU… --- ## [From filebeat.template.json to fields.yml](https://discuss.elastic.co/t/from-filebeat-template-json-to-fields-yml/130791)
**Author:** [@\_kyllr](https://discuss.elastic.co/u/_kyllr)\ **Replies:** 4\ **Last updated:** [May 8, 2018, 11:42am UTC](https://discuss.elastic.co/t/from-filebeat-template-json-to-fields-yml/130791 "2018-05-08T11:42:27Z")
Hi, We're about to upgrade filebeat 5.5.2 to filebeat 6.2.2 But then the default index template were changed from .json file to .yml file My question is, how could I put the below json to yml format for us to be able… --- ## [Completion Suggester on existing index and fields](https://discuss.elastic.co/t/completion-suggester-on-existing-index-and-fields/17008)
**Author:** [@AnthonyNystrom](https://discuss.elastic.co/u/AnthonyNystrom)\ **Replies:** 4\ **Last updated:** [April 22, 2014, 6:39pm UTC](https://discuss.elastic.co/t/completion-suggester-on-existing-index-and-fields/17008 "2014-04-22T18:39:41Z")
Is there anyway to suggest field mappings on an existing index's fields? Rather than having to create the suggestions manually? For example: Existing index field: domains I would like to use that field for sug… --- ## [Logstash.filters.csv :exception=\>#\}](https://discuss.elastic.co/t/logstash-filters-csv-exception-runtimeerror-invalid-fieldreference/175791)
**Author:** [@Zeal0us](https://discuss.elastic.co/u/Zeal0us)\ **Replies:** 5\ **Last updated:** [April 9, 2019, 12:14pm UTC](https://discuss.elastic.co/t/logstash-filters-csv-exception-runtimeerror-invalid-fieldreference/175791 "2019-04-09T12:14:24Z")
Getting lines like this: \[2019-04-08T08:13:50,464\]\[WARN \]\[logstash.filters.csv \] Error parsing csv {:field=\>"message", :source=\>"", :exception=\>#\} when trying to parse so… --- ## [How can i pull data from hive to logstash](https://discuss.elastic.co/t/how-can-i-pull-data-from-hive-to-logstash/95703)
**Author:** [@sesaravanan](https://discuss.elastic.co/u/sesaravanan)\ **Replies:** 5\ **Last updated:** [August 4, 2017, 5:32am UTC](https://discuss.elastic.co/t/how-can-i-pull-data-from-hive-to-logstash/95703 "2017-08-04T05:32:04Z")
Hi, I’m very new to Logstash. I have access to read data from database, so I decided to pull data from a remote database to logstash. The data size will be minimum 1TB per day. How can i do capacity planning in terms o… --- ## [Plugin installation on elasticsearch version 5.x](https://discuss.elastic.co/t/plugin-installation-on-elasticsearch-version-5-x/69252)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 5\ **Last updated:** [December 19, 2016, 7:53am UTC](https://discuss.elastic.co/t/plugin-installation-on-elasticsearch-version-5-x/69252 "2016-12-19T07:53:30Z")
Hi Team, Please help me on installing and configuring elasticsearch-head plugin on elasticsearch version 5.x. Thanks, Gayathri --- ## [Change kibana index patterns to upgraded dashboards](https://discuss.elastic.co/t/change-kibana-index-patterns-to-upgraded-dashboards/219523)
**Author:** [@zakthan](https://discuss.elastic.co/u/zakthan)\ **Replies:** 2\ **Last updated:** [February 17, 2020, 10:48pm UTC](https://discuss.elastic.co/t/change-kibana-index-patterns-to-upgraded-dashboards/219523 "2020-02-17T22:48:21Z")
Does anybody know how can I migrate my old kibana saved objects from version 6.84 to version 7.5.1? Actually I used to have some index patterns from filebeat6\* filebeat indices and now that I have upgraded to 7\* filebe… --- ## [..request retries exceeded max retry timeout \[30000\]](https://discuss.elastic.co/t/request-retries-exceeded-max-retry-timeout-30000/124007)
**Author:** [@juanaramis](https://discuss.elastic.co/u/juanaramis)\ **Replies:** 2\ **Last updated:** [March 16, 2018, 8:12pm UTC](https://discuss.elastic.co/t/request-retries-exceeded-max-retry-timeout-30000/124007 "2018-03-16T20:12:48Z")
Hi team, I'm receiving this error: org.elasticsearch.common.util.concurrent.UncategorizedExecutionException: Failed execution at org.elasticsearch.action.support.AdapterActionFuture.rethrowExecutionException(AdapterAc… --- ## [Filebeat + Netflow error: "bind: cannot assign requested address"](https://discuss.elastic.co/t/filebeat-netflow-error-bind-cannot-assign-requested-address/228479)
**Author:** [@Minh\_Ti\_n\_Tr\_n](https://discuss.elastic.co/u/Minh_Ti_n_Tr_n)\ **Replies:** 3\ **Last updated:** [April 20, 2020, 2:53am UTC](https://discuss.elastic.co/t/filebeat-netflow-error-bind-cannot-assign-requested-address/228479 "2020-04-20T02:53:03Z")
Dear all, I config filebeat and netflow ( softflowd on pfsense ) but I got issue. Any solution for that? Thanks systemctl status filebeat -l ● filebeat.service - Filebeat sends log files to Logstash or directly to Ela… --- ## [Insert data into Elasticsearch from Hive in real-time](https://discuss.elastic.co/t/insert-data-into-elasticsearch-from-hive-in-real-time/47442)
**Author:** [@hamdi-charef](https://discuss.elastic.co/u/hamdi-charef)\ **Replies:** 3\ **Last updated:** [May 10, 2016, 8:18am UTC](https://discuss.elastic.co/t/insert-data-into-elasticsearch-from-hive-in-real-time/47442 "2016-05-10T08:18:13Z")
Hi, I'm asking about a case in wich to insert real time into Elasticsearch from Hive, My case is: i have created the external table and inserted existed data Hive into Elasticsearch, All thing work fine,now for example i… --- ## [Logstash outputs kafka - KafkaProducer.send() failed](https://discuss.elastic.co/t/logstash-outputs-kafka-kafkaproducer-send-failed/115696)
**Author:** [@elkuserh](https://discuss.elastic.co/u/elkuserh)\ **Replies:** 1\ **Last updated:** [January 18, 2018, 10:03am UTC](https://discuss.elastic.co/t/logstash-outputs-kafka-kafkaproducer-send-failed/115696 "2018-01-18T10:03:52Z")
We have a logstash config, which is used to send data to a Kafka broker. The logstash config is as follows: input { … --- ## [ConfigurationError Expected one of #, {, } at line 13, column 121](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658)
**Author:** [@yuganshu4042](https://discuss.elastic.co/u/yuganshu4042)\ **Replies:** 8\ **Last updated:** [January 12, 2018, 6:26am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658 "2018-01-12T06:26:43Z")
/\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*Filtered Data need to send on elasticSearch \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*/ 15:33:43.214 \[tomcat-http--1\] DEBUG com.txxixxd.cc.gatx.rePoinx - POSRequest {"enterpriseId":"5a4dd83a6c085324048fbbd1","storeId":"4042","… --- ## [Monitor logstash missing data](https://discuss.elastic.co/t/monitor-logstash-missing-data/273277)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 6\ **Last updated:** [May 19, 2021, 9:32am UTC](https://discuss.elastic.co/t/monitor-logstash-missing-data/273277 "2021-05-19T09:32:23Z")
Hi, I setup a pipeline in logstash for getting data from sql db by jdbc connector and insert into elastic search index on daily basis. I setup cron time and sync pipeline with sql db on a date field. My problem is: H… --- ## [Group by date aggregation on day by day?](https://discuss.elastic.co/t/group-by-date-aggregation-on-day-by-day/230703)
**Author:** [@Ramesh\_Kumar](https://discuss.elastic.co/u/Ramesh_Kumar)\ **Replies:** 6\ **Last updated:** [May 1, 2020, 6:57pm UTC](https://discuss.elastic.co/t/group-by-date-aggregation-on-day-by-day/230703 "2020-05-01T18:57:19Z")
{ "size": 0, "aggs" : { "group\_by\_day" : { "date\_histogram" : { "field" : "date\_inserted", "interval": "day" } } } } --- ## [ELK 5.5 : Winlogbeats no Messages displayed form ForwardedEvents](https://discuss.elastic.co/t/elk-5-5-winlogbeats-no-messages-displayed-form-forwardedevents/93170)
**Author:** [@prott8gf](https://discuss.elastic.co/u/prott8gf)\ **Replies:** 6\ **Last updated:** [July 24, 2017, 1:08pm UTC](https://discuss.elastic.co/t/elk-5-5-winlogbeats-no-messages-displayed-form-forwardedevents/93170 "2017-07-24T13:08:44Z")
Hi, I cannot see any messages of ForwardedEvents (WinlogBeats 5.5) in the WebUI. Setup: Many Remote Servers \<-\> Windows Log Subscription \<-\> One Windows Server Log Collector (Winlogbeats) \<-\> ELK Stak Server Messa… --- ## [SSD vs HDD performance? on ssd search takes 100ms on hdd 3000-6000ms](https://discuss.elastic.co/t/ssd-vs-hdd-performance-on-ssd-search-takes-100ms-on-hdd-3000-6000ms/332377)
**Author:** [@Eduard\_mart](https://discuss.elastic.co/u/Eduard_mart)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 6:01am UTC](https://discuss.elastic.co/t/ssd-vs-hdd-performance-on-ssd-search-takes-100ms-on-hdd-3000-6000ms/332377 "2023-05-03T06:01:08Z")
SSD vs HDD performance? on SSD search takes 100ms on HDD 3000-6000ms Is it possible to optimize performance on HDD? 130 millions of entries. 150gb of text. One server. Tried different amount of shards and nodes (usi… --- ## [Adding ML charts to a dashboard](https://discuss.elastic.co/t/adding-ml-charts-to-a-dashboard/221747)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 8:45am UTC](https://discuss.elastic.co/t/adding-ml-charts-to-a-dashboard/221747 "2020-03-04T08:45:45Z")
Hi Is it possible to add ML charts (with anomalies and bounds) to a custom dashboard? --- ## [Strict and fuzzy searching in ES](https://discuss.elastic.co/t/strict-and-fuzzy-searching-in-es/117482)
**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\ **Replies:** 4\ **Last updated:** [January 30, 2018, 8:34am UTC](https://discuss.elastic.co/t/strict-and-fuzzy-searching-in-es/117482 "2018-01-30T08:34:59Z")
Here muy json: { "office": "office 52", "header": "some test" } I have such Java code: BoolQueryBuilder bqb = QueryBuilders.boolQuery(); if (esLogRequest.getHeader() != null) { bqb.filter(Query… --- ## [How to use Multiline codec and Json at the same time in a config file?](https://discuss.elastic.co/t/how-to-use-multiline-codec-and-json-at-the-same-time-in-a-config-file/85692)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 4\ **Last updated:** [May 15, 2017, 2:58pm UTC](https://discuss.elastic.co/t/how-to-use-multiline-codec-and-json-at-the-same-time-in-a-config-file/85692 "2017-05-15T14:58:55Z")
Hi, I have logs in the following format, { "Name": "xxx", "Profession": "Developer", "Designation": "Senior", "StartDate": "20170317", "Salary": "xxxx" } { "Name": "xxx", "Profession": "Programmer", "Designatio… --- ## [\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Marking url as dead](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-main-marking-url-as-dead/257752)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 2\ **Last updated:** [December 6, 2020, 10:01am UTC](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-main-marking-url-as-dead/257752 "2020-12-06T10:01:49Z")
What can I do in these situations? because the logs go up, but they don't appear in the kibana. \[2020-12-05T20:11:29,881\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Marking url as dead. Last error: \[LogStash::Outputs:… --- ## [IntakeV2ReportingEventHandler - Failed to handle event of type METRICS with this error: access denied](https://discuss.elastic.co/t/intakev2reportingeventhandler-failed-to-handle-event-of-type-metrics-with-this-error-access-denied/241762)
**Author:** [@rgantyala](https://discuss.elastic.co/u/rgantyala)\ **Replies:** 3\ **Last updated:** [July 21, 2020, 10:09pm UTC](https://discuss.elastic.co/t/intakev2reportingeventhandler-failed-to-handle-event-of-type-metrics-with-this-error-access-denied/241762 "2020-07-21T22:09:55Z")
Installed Elastic, APM Server, and Kibana 7.8 version on Mac. Using all default configurations for APM Server. APM Server is listening on 8200 port. The curl http://localhost:8200 is returning successfully. curl 127.0.… --- ## [フィールドの特定部分の文字列毎にログ件数をグラフ化する方法](https://discuss.elastic.co/t/topic/184929)
**Author:** [@masa](https://discuss.elastic.co/u/masa)\ **Replies:** 3\ **Last updated:** [June 10, 2019, 8:05am UTC](https://discuss.elastic.co/t/topic/184929 "2019-06-10T08:05:56Z")
Elasticsearchに以下のようなsyslogのデータを取り込んでいます。 "message"フィールドの中のname=xxxxx毎のsyslog件数の推移を示す線グラフを作成したいと考えています。 name=xxxxxには、以下のname=HTTP:DOS:ASTERISK-UPGRD-2以外にも様々な名称のsyslogが出力されています。 このように、フィールドの特定部分の文字列毎のログの件数をグラフ化することは可能でし… --- ## [Container is to small to render the visulization](https://discuss.elastic.co/t/container-is-to-small-to-render-the-visulization/94307)
**Author:** [@swatititame](https://discuss.elastic.co/u/swatititame)\ **Replies:** 3\ **Last updated:** [July 25, 2017, 4:30pm UTC](https://discuss.elastic.co/t/container-is-to-small-to-render-the-visulization/94307 "2017-07-25T16:30:08Z")
Hi, I am using kibana 4.5.5.I have crated 14 visualization and 3 dashboard,Each dashbaord contains 4,5,5 visualization .While loading I am getting This container is too small to render visualization and loading takes t… --- ## [Filebeat and ingest node error](https://discuss.elastic.co/t/filebeat-and-ingest-node-error/85108)
**Author:** [@Marcello\_A](https://discuss.elastic.co/u/Marcello_A)\ **Replies:** 2\ **Last updated:** [May 10, 2017, 7:33am UTC](https://discuss.elastic.co/t/filebeat-and-ingest-node-error/85108 "2017-05-10T07:33:35Z")
Hi All, I installed the latest filebeat 5.4.0 on a CentOS 7 server and i tried to parse the auditd file with the specific module and i redirect the output to an elasticsearch 5.4.0 instance. I noticed an error fro filebe… --- ## [Is access to Elasticsearch / Elastic Cloud restricted for Belarus?](https://discuss.elastic.co/t/is-access-to-elasticsearch-elastic-cloud-restricted-for-belarus/300784)
**Author:** [@Sleepy\_Panda](https://discuss.elastic.co/u/Sleepy_Panda)\ **Replies:** 2\ **Last updated:** [March 31, 2022, 5:37am UTC](https://discuss.elastic.co/t/is-access-to-elasticsearch-elastic-cloud-restricted-for-belarus/300784 "2022-03-31T05:37:03Z")
Is access to Elasticsearch restricted for Belarus? I can't pull the Docker image: docker pull docker.elastic.co/elasticsearch/elasticsearch:8.1.1 leads to The Amazon CloudFront distribution is configured to block acces… --- ## [Elasticsearch cluster config requirement for graylog setup](https://discuss.elastic.co/t/elasticsearch-cluster-config-requirement-for-graylog-setup/23833)
**Author:** [@Nilesh\_Date](https://discuss.elastic.co/u/Nilesh_Date)\ **Replies:** 2\ **Last updated:** [June 18, 2015, 12:36pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-config-requirement-for-graylog-setup/23833 "2015-06-18T12:36:52Z")
Hi , I will be configuring graylog cluster in my oragization which will have elasticsearch cluster in it. I would like to know the configuration required for my elasticsearch cluster . I will be having 3 nodes in ES cl… --- ## [Configure AWS Log Group Subscriptions without Triggers in Functionbeat.yml file](https://discuss.elastic.co/t/configure-aws-log-group-subscriptions-without-triggers-in-functionbeat-yml-file/228169)
**Author:** [@PhilipMortiboy](https://discuss.elastic.co/u/PhilipMortiboy)\ **Replies:** 3\ **Last updated:** [April 17, 2020, 11:42am UTC](https://discuss.elastic.co/t/configure-aws-log-group-subscriptions-without-triggers-in-functionbeat-yml-file/228169 "2020-04-17T11:42:39Z")
We're attempting to configure a Functionbeat that subscribes to multiple CloudWatch Log Groups across our stacks. These stacks are created dynamically through independent CI/CD pipelines, so we'd like the responsibility … --- ## [ElasticDiagnostic tool issue when running](https://discuss.elastic.co/t/elasticdiagnostic-tool-issue-when-running/194860)
**Author:** [@sridharreddy1994](https://discuss.elastic.co/u/sridharreddy1994)\ **Replies:** 4\ **Last updated:** [August 12, 2019, 7:17pm UTC](https://discuss.elastic.co/t/elasticdiagnostic-tool-issue-when-running/194860 "2019-08-12T19:17:05Z")
Hi , I am running elasticdiagnostic tool and facing this issue ,Can someone help? support-diagnostics-7.0.8\]$ ./diagnostics.sh --host \*\*\*\*\* --port 9200 -u elastic -p --ssl --noVerify Using /usr/bin/java as Java Runtim… --- ## [Filebeat not harvesting files from subdirectories](https://discuss.elastic.co/t/filebeat-not-harvesting-files-from-subdirectories/121109)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 4\ **Last updated:** [March 6, 2018, 5:17am UTC](https://discuss.elastic.co/t/filebeat-not-harvesting-files-from-subdirectories/121109 "2018-03-06T05:17:55Z")
Good Afternoon All, I have filebeat set up to harvest files in the log directory of an application and the application developers just changed the logging format to include sub-directories containing client specific inf… --- ## [Error on S3 plugin accessing ELB logs - Logstash version 5](https://discuss.elastic.co/t/error-on-s3-plugin-accessing-elb-logs-logstash-version-5/67663)
**Author:** [@Jimmy\_Etimos](https://discuss.elastic.co/u/Jimmy_Etimos)\ **Replies:** 4\ **Last updated:** [December 1, 2016, 4:50am UTC](https://discuss.elastic.co/t/error-on-s3-plugin-accessing-elb-logs-logstash-version-5/67663 "2016-12-01T04:50:56Z")
I am getting the following error while trying to read ELB logs from an S3 bucket. The instance running logstash is in same region a bucket and booted with a role that gives it full S3 access. Error: can't convert nil i… --- ## [Merge throttling is preventing heavy bulk indexing (ES 1.7.5)](https://discuss.elastic.co/t/merge-throttling-is-preventing-heavy-bulk-indexing-es-1-7-5/44337)
**Author:** [@unknownunknown](https://discuss.elastic.co/u/unknownunknown)\ **Replies:** 4\ **Last updated:** [March 28, 2016, 4:19pm UTC](https://discuss.elastic.co/t/merge-throttling-is-preventing-heavy-bulk-indexing-es-1-7-5/44337 "2016-03-28T16:19:17Z")
I'm using elastic 1.7.5. My use case includes a single well provisioned server with two ES instances running on it. I am indexing events for near real-time search and aggregation. There are no updates or deletes. Events … --- ## [Highlight from child](https://discuss.elastic.co/t/highlight-from-child/31932)
**Author:** [@Fei\_Yao](https://discuss.elastic.co/u/Fei_Yao)\ **Replies:** 4\ **Last updated:** [November 4, 2015, 4:08pm UTC](https://discuss.elastic.co/t/highlight-from-child/31932 "2015-11-04T16:08:38Z")
I have a parent-child relationship. I'm able to search out the parent using "has\_child" filter or query. Question is how can I get the highlight from the child? Thanks --- ## [Spring boot can't ship metrics to Logstash with http post](https://discuss.elastic.co/t/spring-boot-cant-ship-metrics-to-logstash-with-http-post/163320)
**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\ **Replies:** 3\ **Last updated:** [January 14, 2019, 4:19am UTC](https://discuss.elastic.co/t/spring-boot-cant-ship-metrics-to-logstash-with-http-post/163320 "2019-01-14T04:19:06Z")
Hi Elastic Folks, Recently we have a case to send spring boot metrics to ES, our java developers have deployed the spring boot app with micrometer library(https://micrometer.io/). basically, with micrometer library, spr… --- ## [How to recover a failed data node in Production cluster?](https://discuss.elastic.co/t/how-to-recover-a-failed-data-node-in-production-cluster/76547)
**Author:** [@ImdotnetJunkie](https://discuss.elastic.co/u/ImdotnetJunkie)\ **Replies:** 8\ **Last updated:** [February 27, 2017, 4:28am UTC](https://discuss.elastic.co/t/how-to-recover-a-failed-data-node-in-production-cluster/76547 "2017-02-27T04:28:12Z")
What steps must to be performed to recover a failed node in a cluster? --- ## [Logstash.config not working](https://discuss.elastic.co/t/logstash-config-not-working/95696)
**Author:** [@abhishek\_chaturvedi](https://discuss.elastic.co/u/abhishek_chaturvedi)\ **Replies:** 6\ **Last updated:** [August 4, 2017, 5:30am UTC](https://discuss.elastic.co/t/logstash-config-not-working/95696 "2017-08-04T05:30:39Z")
My logstash.conf file and mysql-connector-java-5.1.38.jar both are in F:\\Software\\logstash-5.5.1\\logstash-5.5.1\\bin location Getting below error while running conf file in cmd : F:\\Software\\logstash-5.5.1\\logstash-5.5.… --- ## [Elasticsearch multi path and RAID-0](https://discuss.elastic.co/t/elasticsearch-multi-path-and-raid-0/135254)
**Author:** [@svarup](https://discuss.elastic.co/u/svarup)\ **Replies:** 5\ **Last updated:** [June 14, 2018, 1:11pm UTC](https://discuss.elastic.co/t/elasticsearch-multi-path-and-raid-0/135254 "2018-06-14T13:11:17Z")
ElasticSearch give one option to add multiple data path so my question is, is it beneficial to give multiple path that are configured in RAID-0 Ex: path.data: /mnt/md0, /mnt/md1 are the path we use in elasticsearch.yml… --- ## [Aggregation for count values on boolean](https://discuss.elastic.co/t/aggregation-for-count-values-on-boolean/104762)
**Author:** [@StefanGl](https://discuss.elastic.co/u/StefanGl)\ **Replies:** 1\ **Last updated:** [October 21, 2017, 3:07pm UTC](https://discuss.elastic.co/t/aggregation-for-count-values-on-boolean/104762 "2017-10-21T15:07:59Z")
Hello, I have 100 documents with an boolean field, 80 docs are true, 20 are false. How can I return only the "true" ones in an aggregation? I'm looking for an aggregation similar to this sql: SELECT count(\*) FROM doc… --- ## [Pie chart custom label](https://discuss.elastic.co/t/pie-chart-custom-label/79617)
**Author:** [@emanuele](https://discuss.elastic.co/u/emanuele)\ **Replies:** 1\ **Last updated:** [March 22, 2017, 7:16pm UTC](https://discuss.elastic.co/t/pie-chart-custom-label/79617 "2017-03-22T19:16:22Z")
I created a pie chart and set the custom label but tooltip not use that. Have you suggestion? Thanks --- ## [What is the best way for huge bulk file indexing?](https://discuss.elastic.co/t/what-is-the-best-way-for-huge-bulk-file-indexing/6074)
**Author:** [@ko526so](https://discuss.elastic.co/u/ko526so)\ **Replies:** 7\ **Last updated:** [December 8, 2011, 12:01am UTC](https://discuss.elastic.co/t/what-is-the-best-way-for-huge-bulk-file-indexing/6074 "2011-12-08T00:01:23Z")
I have to index huge volume of data frequently for research purpose. 60,000,000 docs are one of my recent task for indexing. Fortunately, the size of docs is very small, so the total size of bulk index file for 60 M … --- ## [Visual builder filter](https://discuss.elastic.co/t/visual-builder-filter/157282)
**Author:** [@Ruthvik\_Sai](https://discuss.elastic.co/u/Ruthvik_Sai)\ **Replies:** 2\ **Last updated:** [November 20, 2018, 6:00am UTC](https://discuss.elastic.co/t/visual-builder-filter/157282 "2018-11-20T06:00:54Z")
Panel filter for visual builder not working. what can be done? I am filtering using the event as mentioned... --- ## [Backup 2.4.3.2 to restore 5.1.26](https://discuss.elastic.co/t/backup-2-4-3-2-to-restore-5-1-26/110724)
**Author:** [@ghanshyam](https://discuss.elastic.co/u/ghanshyam)\ **Replies:** 3\ **Last updated:** [December 8, 2017, 8:37am UTC](https://discuss.elastic.co/t/backup-2-4-3-2-to-restore-5-1-26/110724 "2017-12-08T08:37:36Z")
I have some query, please help me to understand. what i did: I have Dev cluster running 2.4.2.3 and I took a backup. I have another QA cluster running 2.4.2.3. QA cluster has only four indices with few documents. Now … --- ## [Payload: filters and counts result](https://discuss.elastic.co/t/payload-filters-and-counts-result/146763)
**Author:** [@mdavi](https://discuss.elastic.co/u/mdavi)\ **Replies:** 4\ **Last updated:** [September 3, 2018, 4:06pm UTC](https://discuss.elastic.co/t/payload-filters-and-counts-result/146763 "2018-09-03T16:06:52Z")
Hi everyone, I'm trying to develop a simple watcher to count the number of the errors and warnings, through reading my application log. Everything works well but i'm not able to recognise, which are errors and which ar… --- ## [Multiple prospector path](https://discuss.elastic.co/t/multiple-prospector-path/64271)
**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\ **Replies:** 4\ **Last updated:** [November 2, 2016, 10:16am UTC](https://discuss.elastic.co/t/multiple-prospector-path/64271 "2016-11-02T10:16:34Z")
Hey, i want to use 2 prospectors, filebeal.yml is working perfect with just one; However, if i uncomment the 2nd prospector, the filebeat fails to start: After some trial and error i figured out that if i change … [Previous page](https://discuss.elastic.co/top.md?page=742&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=744&per_page=50&period=all)