# Top

**URL:** https://discuss.elastic.co/top.md?page=750&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 751

---

## [Metricbeat fsstat values are too high](https://discuss.elastic.co/t/metricbeat-fsstat-values-are-too-high/107453)

<div class="topic-metadata">

**Author:** [@vkurup](https://discuss.elastic.co/u/vkurup)\
**Replies:** 7\
**Last updated:** [November 30, 2017, 11:37pm UTC](https://discuss.elastic.co/t/metricbeat-fsstat-values-are-too-high/107453 "2017-11-30T23:37:31Z")

</div>

Hi, I'm new to the ELK stack and enjoying it so far. I'm running metricbeat on multiple servers and the fsstat.total\_size.total value is correct on all of them except for one server which happens to be the only one runni…

---

## [Kibana : internal server error](https://discuss.elastic.co/t/kibana-internal-server-error/267790)

<div class="topic-metadata">

**Author:** [@Salvatore\_Minervini](https://discuss.elastic.co/u/Salvatore_Minervini)\
**Replies:** 1\
**Last updated:** [March 19, 2021, 4:07pm UTC](https://discuss.elastic.co/t/kibana-internal-server-error/267790 "2021-03-19T16:07:32Z")

</div>

hi all, I'm new on kubernates and ELK and "i beg your pardon" if i wil lask something stupid, i googled a while for a solution but i found nothing so i decide to ask help.... in our configuration on kubernates, we hav…

---

## [Set a template\_name in Logstash output filter to send data elasticsearch](https://discuss.elastic.co/t/set-a-template-name-in-logstash-output-filter-to-send-data-elasticsearch/210233)

<div class="topic-metadata">

**Author:** [@aveek](https://discuss.elastic.co/u/aveek)\
**Replies:** 2\
**Last updated:** [December 3, 2019, 6:00pm UTC](https://discuss.elastic.co/t/set-a-template-name-in-logstash-output-filter-to-send-data-elasticsearch/210233 "2019-12-03T18:00:44Z")

</div>

Hi Guys, We am using Elastic Stack 7.2.0 . We have setup filebeat to ship data directly to elasticsearch but we have some application log files which requires special parsing. We are sending these logs from filebeat to …

---

## [Kibana don't find index id](https://discuss.elastic.co/t/kibana-dont-find-index-id/146156)

<div class="topic-metadata">

**Author:** [@sun\_changlong](https://discuss.elastic.co/u/sun_changlong)\
**Replies:** 4\
**Last updated:** [August 29, 2018, 1:49am UTC](https://discuss.elastic.co/t/kibana-dont-find-index-id/146156 "2018-08-29T01:49:00Z")

</div>

I added a new index and I can see the data of the corresponding index in elasticsearch. in the Kibana-\>Management -\> Kibana create a index pattern. but in discover ,Retrieving an error in the kibana interface。 the err…

---

## [Kibana how to filter out values of custom fields](https://discuss.elastic.co/t/kibana-how-to-filter-out-values-of-custom-fields/136779)

<div class="topic-metadata">

**Author:** [@motamedi791](https://discuss.elastic.co/u/motamedi791)\
**Replies:** 4\
**Last updated:** [June 21, 2018, 7:59pm UTC](https://discuss.elastic.co/t/kibana-how-to-filter-out-values-of-custom-fields/136779 "2018-06-21T19:59:05Z")

</div>

I have setup filebeat/elastic/kibana to monitor my logs. In Kibana's discover page, if I hover the mouse over default fields (message, @timestamp etc), it shows + and - buttons for enabling "filter for value" and "filte…

---

## [Json filter dropping messages](https://discuss.elastic.co/t/json-filter-dropping-messages/100144)

<div class="topic-metadata">

**Author:** [@ikirani](https://discuss.elastic.co/u/ikirani)\
**Replies:** 4\
**Last updated:** [September 13, 2017, 11:01pm UTC](https://discuss.elastic.co/t/json-filter-dropping-messages/100144 "2017-09-13T23:01:35Z")

</div>

I have a set of 100 json messages that i send through Logstash Json filter. Each and every time I see a variable number of messages persisted to output file, anywhere between 60 to 100. Things I've tried so far: Upgr…

---

## [Winlogbeat release](https://discuss.elastic.co/t/winlogbeat-release/39282)

<div class="topic-metadata">

**Author:** [@Philip\_Kobezak](https://discuss.elastic.co/u/Philip_Kobezak)\
**Replies:** 5\
**Last updated:** [February 2, 2016, 9:15pm UTC](https://discuss.elastic.co/t/winlogbeat-release/39282 "2016-02-02T21:15:22Z")

</div>

I believe I read somewhere that Winlogbeat will be released with Beats version 1.1, is that correct? If so, what does the timeline look like for 1.1?

---

## [What is the path to utilize BM25F with Elastic Search](https://discuss.elastic.co/t/what-is-the-path-to-utilize-bm25f-with-elastic-search/4326)

<div class="topic-metadata">

**Author:** [@conor](https://discuss.elastic.co/u/conor)\
**Replies:** 5\
**Last updated:** [May 3, 2011, 11:27pm UTC](https://discuss.elastic.co/t/what-is-the-path-to-utilize-bm25f-with-elastic-search/4326 "2011-05-03T23:27:38Z")

</div>

Hi, We are evaluating Elastic Search for a project. We require document retrieval based on the BM25F algorithm. This reference describe an integration of BM25/BM25F with Lucene: http://nlp.uned.es/~jperezi/Lucene…

---

## [Dealing with repeated upstream fields in a Nginx log](https://discuss.elastic.co/t/dealing-with-repeated-upstream-fields-in-a-nginx-log/91352)

<div class="topic-metadata">

**Author:** [@Simon\_Oxwell](https://discuss.elastic.co/u/Simon_Oxwell)\
**Replies:** 1\
**Last updated:** [July 25, 2017, 1:53am UTC](https://discuss.elastic.co/t/dealing-with-repeated-upstream-fields-in-a-nginx-log/91352 "2017-07-25T01:53:50Z")

</div>

Hi, I'm trying to parse Nginx logs where Nginx is acting as a front-side proxy to multiple upstream servers in such a way that a failure for one upstream server to respond will cause Nginx to try another server. As suc…

---

## [Ingest Attachment: Parse Error using NEST](https://discuss.elastic.co/t/ingest-attachment-parse-error-using-nest/84955)

<div class="topic-metadata">

**Author:** [@PierreFre](https://discuss.elastic.co/u/PierreFre)\
**Replies:** 6\
**Last updated:** [May 12, 2017, 9:10am UTC](https://discuss.elastic.co/t/ingest-attachment-parse-error-using-nest/84955 "2017-05-12T09:10:24Z")

</div>

I got the following error after execute my c#-code \`Preformatted text\`\[2017-05-08T17:34:15,135\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[-h4nwTK\] \[documents\]\[3\] failed to execute bulk item (index) BulkShardRequest \[\[d…

---

## [Arabic stemmer and synonymous](https://discuss.elastic.co/t/arabic-stemmer-and-synonymous/107122)

<div class="topic-metadata">

**Author:** [@Manal\_ALnef](https://discuss.elastic.co/u/Manal_ALnef)\
**Replies:** 3\
**Last updated:** [November 13, 2017, 8:28am UTC](https://discuss.elastic.co/t/arabic-stemmer-and-synonymous/107122 "2017-11-13T08:28:30Z")

</div>

Hello everyone, I am doing a comparison between Elasticsearch and Apache Solr in handling the Arabic language and I know that Solr use light 10 stemmer and doesn't have synonymous for Arabic, I see this answer " Elasti…

---

## [How to implment compound query in kibana](https://discuss.elastic.co/t/how-to-implment-compound-query-in-kibana/46396)

<div class="topic-metadata">

**Author:** [@Liu](https://discuss.elastic.co/u/Liu)\
**Replies:** 3\
**Last updated:** [April 6, 2016, 8:33pm UTC](https://discuss.elastic.co/t/how-to-implment-compound-query-in-kibana/46396 "2016-04-06T20:33:21Z")

</div>

I have two questions about kibana 4 based on the following scenario : we index our acceptance test into elasticsearch ,including: caseName, status(fail or success), and buildID ( means the times run the case) Question …

---

## [Elasticsearch Java Client does not return Cluster Settings](https://discuss.elastic.co/t/elasticsearch-java-client-does-not-return-cluster-settings/38773)

<div class="topic-metadata">

**Author:** [@riki](https://discuss.elastic.co/u/riki)\
**Replies:** 8\
**Last updated:** [January 10, 2016, 4:34am UTC](https://discuss.elastic.co/t/elasticsearch-java-client-does-not-return-cluster-settings/38773 "2016-01-10T04:34:26Z")

</div>

I would like to read the Cluster Settings using ES Java Client. I have tried the following code but it always returns an empty settings: \`Settings settings = client.admin().cluster().prepareState().execute().actionGet(…

---

## [Timelion: Show both current & previous date time while comparing data](https://discuss.elastic.co/t/timelion-show-both-current-previous-date-time-while-comparing-data/236276)

<div class="topic-metadata">

**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\
**Replies:** 7\
**Last updated:** [June 9, 2020, 12:34pm UTC](https://discuss.elastic.co/t/timelion-show-both-current-previous-date-time-while-comparing-data/236276 "2020-06-09T12:34:43Z")

</div>

Hello All, While comparing the current value with previous value, I am trying to display the current and previous time while hovering the mouse. Current data time is already displayed. Is there a way that i could displ…

---

## [Unable to Visualize Certain Nested Fields](https://discuss.elastic.co/t/unable-to-visualize-certain-nested-fields/204494)

<div class="topic-metadata">

**Author:** [@planetracer](https://discuss.elastic.co/u/planetracer)\
**Replies:** 7\
**Last updated:** [October 22, 2019, 2:37pm UTC](https://discuss.elastic.co/t/unable-to-visualize-certain-nested-fields/204494 "2019-10-22T14:37:29Z")

</div>

I have the following nested data in my index: But when I try to visualize it, it doesn't find it: I was wondering if I was doing something wrong? Is there a way to fix this?

---

## [Unmapped field in document not appearing in filter drop down](https://discuss.elastic.co/t/unmapped-field-in-document-not-appearing-in-filter-drop-down/295128)

<div class="topic-metadata">

**Author:** [@Tech\_solution](https://discuss.elastic.co/u/Tech_solution)\
**Replies:** 4\
**Last updated:** [January 23, 2022, 11:08pm UTC](https://discuss.elastic.co/t/unmapped-field-in-document-not-appearing-in-filter-drop-down/295128 "2022-01-23T23:08:58Z")

</div>

Hi, I am new to Kibana dashboard . The issue I came across is that I want to create a dashboard for an unmapped field while that field is not mapped in index ( it doesn't appear in drop down for filters or in the fields…

---

## [Visualize to count to document ingested for an index](https://discuss.elastic.co/t/visualize-to-count-to-document-ingested-for-an-index/165945)

<div class="topic-metadata">

**Author:** [@arvind297](https://discuss.elastic.co/u/arvind297)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 9:39am UTC](https://discuss.elastic.co/t/visualize-to-count-to-document-ingested-for-an-index/165945 "2019-01-29T09:39:27Z")

</div>

Hi, I am new to visualization and hoping someone could help me on the below request. I have a request to visualize the volume of the data ingested for index per day for example : index name logstash-index\* I have sel…

---

## [Imap plugin crashes logstash when there are attachments](https://discuss.elastic.co/t/imap-plugin-crashes-logstash-when-there-are-attachments/1420)

<div class="topic-metadata">

**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\
**Replies:** 4\
**Last updated:** [October 26, 2015, 9:46pm UTC](https://discuss.elastic.co/t/imap-plugin-crashes-logstash-when-there-are-attachments/1420 "2015-10-26T21:46:06Z")

</div>

My issue is the same as was reported about a year ago here: https://logstash.jira.com/browse/LOGSTASH-2080 logstash silently (other than the two below log entries) dies when it tries to read an e-mail with an attachm…

---

## [New Java API Client: Rewrite an UpdateRequest with Script Part](https://discuss.elastic.co/t/new-java-api-client-rewrite-an-updaterequest-with-script-part/310661)

<div class="topic-metadata">

**Author:** [@aga31432432](https://discuss.elastic.co/u/aga31432432)\
**Replies:** 1\
**Last updated:** [August 15, 2022, 5:12pm UTC](https://discuss.elastic.co/t/new-java-api-client-rewrite-an-updaterequest-with-script-part/310661 "2022-08-15T17:12:06Z")

</div>

Hello everyone, We need to migrate some code from the current Java High Level REST Client (HLRC) to the new Java API Client 7.7.15. I have this snippet of Kotlin code I need to rewrite using the new Java Client API: v…

---

## [Кодировка входных данных](https://discuss.elastic.co/t/topic/183463)

<div class="topic-metadata">

**Author:** [@GAV](https://discuss.elastic.co/u/GAV)\
**Replies:** 2\
**Last updated:** [May 30, 2019, 5:52am UTC](https://discuss.elastic.co/t/topic/183463 "2019-05-30T05:52:59Z")

</div>

Добрый день, коллеги!!! Проблема в кодировке входных данных не могу найти как принять нормально. Вот данные \\u0004j\\u0003\\xBD\\x8B\\xFC{\\u001A\\xBD\\e\\xE6,\\xAE\\xD70\\u000F\\xFCu\\x83\\u0019(\\u0006\\u0000\\u0000\\u0000\\u0003\\u000…

---

## [Filebeat with JSON, set root key](https://discuss.elastic.co/t/filebeat-with-json-set-root-key/131734)

<div class="topic-metadata">

**Author:** [@atze](https://discuss.elastic.co/u/atze)\
**Replies:** 2\
**Last updated:** [May 16, 2018, 8:19am UTC](https://discuss.elastic.co/t/filebeat-with-json-set-root-key/131734 "2018-05-16T08:19:18Z")

</div>

Hi, If you parse a JSON with filebeat and send it in elasticsearch, all root keys from the original json document will have the prefix json.\<fieldname\>. For example {"status":400} -\> {"json" : { "status" : 400}} Righ…

---

## [Constantly repeating error: A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/constantly-repeating-error-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/107104)

<div class="topic-metadata">

**Author:** [@ajstark123](https://discuss.elastic.co/u/ajstark123)\
**Replies:** 2\
**Last updated:** [November 16, 2017, 10:58am UTC](https://discuss.elastic.co/t/constantly-repeating-error-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/107104 "2017-11-16T10:58:01Z")

</div>

We are getting the following error in the logs. We run fine for about 40 minutes then we start to get the following errors. It is unclear as to what went wrong. \[2017-11-09T15:03:38,289\]\[INFO \]\[logstash.pipeline …

---

## [Loading a pcap file](https://discuss.elastic.co/t/loading-a-pcap-file/71524)

<div class="topic-metadata">

**Author:** [@PinXo](https://discuss.elastic.co/u/PinXo)\
**Replies:** 2\
**Last updated:** [January 16, 2017, 10:03am UTC](https://discuss.elastic.co/t/loading-a-pcap-file/71524 "2017-01-16T10:03:56Z")

</div>

I'm running packetbeat with my own pcap file. I have noticed that when I run it without options (just -I file.pcap) it works ok, with the corresponding delays. When I use -t flag (TopSpeed), i don't see any packet in t…

---

## [Incremental Snapshot details?](https://discuss.elastic.co/t/incremental-snapshot-details/97099)

<div class="topic-metadata">

**Author:** [@lantern77](https://discuss.elastic.co/u/lantern77)\
**Replies:** 5\
**Last updated:** [August 15, 2017, 2:56pm UTC](https://discuss.elastic.co/t/incremental-snapshot-details/97099 "2017-08-15T14:56:21Z")

</div>

Hey Guys, As the ElasticSearch documentation stated snapshots are incremental, https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-snapshots.html#\_snapshot meaning the snapshot will look for differ…

---

## [Unable to insert record using alias](https://discuss.elastic.co/t/unable-to-insert-record-using-alias/80529)

<div class="topic-metadata">

**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 5\
**Last updated:** [March 30, 2017, 5:57pm UTC](https://discuss.elastic.co/t/unable-to-insert-record-using-alias/80529 "2017-03-30T17:57:01Z")

</div>

Version: 2.4.1 Mode: 3 node cluster I have several indexes and one index holds an alias using which I can write the document into the index. When I try to insert record into an index, I am getting exception saying tha…

---

## [Filebeat error: File info is not identical with opened file](https://discuss.elastic.co/t/filebeat-error-file-info-is-not-identical-with-opened-file/75878)

<div class="topic-metadata">

**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\
**Replies:** 1\
**Last updated:** [February 23, 2017, 4:14pm UTC](https://discuss.elastic.co/t/filebeat-error-file-info-is-not-identical-with-opened-file/75878 "2017-02-23T16:14:12Z")

</div>

Hi trying to use fileebat to read some text files but getting the following error: Err: Error setting up harvester: Harvester setup failed. Unexpected file opening error: File info is not identical with opened file. Ab…

---

## [Pipelines.yml still ignored](https://discuss.elastic.co/t/pipelines-yml-still-ignored/117697)

<div class="topic-metadata">

**Author:** [@jamest23](https://discuss.elastic.co/u/jamest23)\
**Replies:** 3\
**Last updated:** [February 1, 2018, 4:46pm UTC](https://discuss.elastic.co/t/pipelines-yml-still-ignored/117697 "2018-02-01T16:46:09Z")

</div>

Greetings, I have populated the pipelines.yml file but it is not getting picked up. The goal being to separate the 2 pipelines i have running. When i put them both in the /etc/logstash/conf.d they collide and logstash…

---

## [Kibana on Linux Subsystem on Windows 10](https://discuss.elastic.co/t/kibana-on-linux-subsystem-on-windows-10/106989)

<div class="topic-metadata">

**Author:** [@Eric\_Yeh](https://discuss.elastic.co/u/Eric_Yeh)\
**Replies:** 3\
**Last updated:** [November 10, 2017, 4:02am UTC](https://discuss.elastic.co/t/kibana-on-linux-subsystem-on-windows-10/106989 "2017-11-10T04:02:03Z")

</div>

Hi, I have Kibana installed on LSW but I couldn't get it to start. There is no \[error\] on Kibana.stderr but this is printed everytime I start Kibana: chroot: cannot change root directory to /: Function not implemented …

---

## [Rejected execution during search](https://discuss.elastic.co/t/rejected-execution-during-search/130800)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [May 7, 2018, 8:43am UTC](https://discuss.elastic.co/t/rejected-execution-during-search/130800 "2018-05-07T08:43:11Z")

</div>

Hi all, I am running a single instance of elastic stack in version 6.2.3 on a single server (8 CPU, 128 GB RAM). When I am loading a complex kibana dashboard for 30 days I have following issues: kibana (where I quer…

---

## [Nginx k8s metrics](https://discuss.elastic.co/t/nginx-k8s-metrics/128690)

<div class="topic-metadata">

**Author:** [@aokhotnikov](https://discuss.elastic.co/u/aokhotnikov)\
**Replies:** 6\
**Last updated:** [April 22, 2018, 6:40am UTC](https://discuss.elastic.co/t/nginx-k8s-metrics/128690 "2018-04-22T06:40:53Z")

</div>

Hi Is there some option to configure metricbeat for collecting nginx-ingress metrics/stats installed on k8s. AFAIK nginx module just parses stub\_status response. Nginx can ship metrics in prometheus format or in json. E…

---

## [API showing incorrect data](https://discuss.elastic.co/t/api-showing-incorrect-data/73017)

<div class="topic-metadata">

**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\
**Replies:** 6\
**Last updated:** [January 31, 2017, 2:20pm UTC](https://discuss.elastic.co/t/api-showing-incorrect-data/73017 "2017-01-31T14:20:48Z")

</div>

Trying to check the heap max in bytes using http://localhost:9600/\_node/jvm?pretty=true works correctly which shows 8GB for me. Now when I try to see more detailed stats about the JVM with: http://localhost:9600/\_…

---

## [Cannot convert type of nested field](https://discuss.elastic.co/t/cannot-convert-type-of-nested-field/115768)

<div class="topic-metadata">

**Author:** [@leafarlins](https://discuss.elastic.co/u/leafarlins)\
**Replies:** 0\
**Last updated:** [January 16, 2018, 6:03pm UTC](https://discuss.elastic.co/t/cannot-convert-type-of-nested-field/115768 "2018-01-16T18:03:07Z")

</div>

Hi. I am trying to convert a field read by a json filter in logstash. I am used to convert fields from other sources, but with this nested field from a json log file, I cannot convert a quoted number string to a integer. …

---

## [High CPU usages](https://discuss.elastic.co/t/high-cpu-usages/24126)

<div class="topic-metadata">

**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\
**Replies:** 8\
**Last updated:** [June 24, 2015, 8:39am UTC](https://discuss.elastic.co/t/high-cpu-usages/24126 "2015-06-24T08:39:00Z")

</div>

I have elastisearch installed on my server size of the which is 10GB roughly, I have 16GB of RAM and 1TB of space. But still there are couple of strange issues that I am unable to understand about. I have dedicated …

---

## [All shards failed-yellow status](https://discuss.elastic.co/t/all-shards-failed-yellow-status/214919)

<div class="topic-metadata">

**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\
**Replies:** 4\
**Last updated:** [January 14, 2020, 11:16am UTC](https://discuss.elastic.co/t/all-shards-failed-yellow-status/214919 "2020-01-14T11:16:00Z")

</div>

ELK: version 6.6.2 Hi, my elasticsearch stopped working after couple weeks. Im monitoring cca 10 tomcat logs ondifferent servers. I run ELK with Logstash on same server(SINGLE NODE). In log there is still repeating: …

---

## [S3 input plugin - pull the files from only specific folder](https://discuss.elastic.co/t/s3-input-plugin-pull-the-files-from-only-specific-folder/131331)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 4\
**Last updated:** [May 14, 2018, 8:56am UTC](https://discuss.elastic.co/t/s3-input-plugin-pull-the-files-from-only-specific-folder/131331 "2018-05-14T08:56:34Z")

</div>

I want to index the files from S3 to elasticsearch. I am not able to see the option of specifying the folder in the bucket for s3 input plugin. Is there any option to mention only the specific path instead of pulling the…

---

## [Failed to encode event: unsupported float value: NaN](https://discuss.elastic.co/t/failed-to-encode-event-unsupported-float-value-nan/168666)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 7\
**Last updated:** [February 21, 2019, 6:59pm UTC](https://discuss.elastic.co/t/failed-to-encode-event-unsupported-float-value-nan/168666 "2019-02-21T18:59:40Z")

</div>

Hello World! I'm using Elastic stack 6.6.0 and I'm seeing following message in: /var/log/metricbeat/metricbeat 2019-02-16T04:20:27.500Z ERROR elasticsearch/client.go:376 Failed to encode event: unsupporte…

---

## [2 Inputs and 1 Output. Can we pass events from 1 input to other input](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 7\
**Last updated:** [August 23, 2017, 1:41pm UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883 "2017-08-23T13:41:56Z")

</div>

Hi All i Have created 2 conf files Conf1 : No problem in this conf file { input file.... } { output elasticsearch { index =\> "test1" …

---

## [My "need to restart filebeat for it to send logs" problem](https://discuss.elastic.co/t/my-need-to-restart-filebeat-for-it-to-send-logs-problem/63702)

<div class="topic-metadata">

**Author:** [@Houss](https://discuss.elastic.co/u/Houss)\
**Replies:** 7\
**Last updated:** [October 26, 2016, 3:41am UTC](https://discuss.elastic.co/t/my-need-to-restart-filebeat-for-it-to-send-logs-problem/63702 "2016-10-26T03:41:06Z")

</div>

Hello, I'm sorry because this have been brought up before, but none of the solutions seemed to apply to my case so I'm opening this topic. So basically, what happens is that filebeat sends logs after starting, but th…

---

## [Date range query using year](https://discuss.elastic.co/t/date-range-query-using-year/146160)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 3\
**Last updated:** [August 28, 2018, 6:03am UTC](https://discuss.elastic.co/t/date-range-query-using-year/146160 "2018-08-28T06:03:39Z")

</div>

Hi All, I need a date range query for which input will be only year, but in the response, it should contain all the documents within that year like. Find the below example, "startDate": { "type": "date", "format": …

---

## [Invalid target URI occurred while reading but such index/type exists](https://discuss.elastic.co/t/invalid-target-uri-occurred-while-reading-but-such-index-type-exists/25496)

<div class="topic-metadata">

**Author:** [@HeartSaVioR](https://discuss.elastic.co/u/HeartSaVioR)\
**Replies:** 3\
**Last updated:** [May 14, 2017, 4:41pm UTC](https://discuss.elastic.co/t/invalid-target-uri-occurred-while-reading-but-such-index-type-exists/25496 "2017-05-14T16:41:37Z")

</div>

I'm experimenting Spark App which reads whole ES documents from one index. (ES 1.2.1, Spark 1.3.0, elasticsearch-spark 2.1.0) During experimenting, logs notify me it fails to query to whole nodes. Please see below. \> …

---

## [Logstash output not sending data to Influxdb](https://discuss.elastic.co/t/logstash-output-not-sending-data-to-influxdb/138344)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 5\
**Last updated:** [July 5, 2018, 5:22am UTC](https://discuss.elastic.co/t/logstash-output-not-sending-data-to-influxdb/138344 "2018-07-05T05:22:51Z")

</div>

Hi All, I have installed metricbeat (Version 6.3.0) in my ubuntu machine and sending data to logstash output and I am running logstash (5.6.10 Version) to send metricbeat data to influxdb and below is my logstash confi…

---

## [Join indexes in Kibana](https://discuss.elastic.co/t/join-indexes-in-kibana/271885)

<div class="topic-metadata">

**Author:** [@Tulay](https://discuss.elastic.co/u/Tulay)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 6:37am UTC](https://discuss.elastic.co/t/join-indexes-in-kibana/271885 "2021-05-04T06:37:39Z")

</div>

How can we join two indexes , if we want to join by a specific field of each index in Kibana

---

## [Setting index.codec to best\_compression affects ElasticSearch's or Graylog's performance?](https://discuss.elastic.co/t/setting-index-codec-to-best-compression-affects-elasticsearchs-or-graylogs-performance/156046)

<div class="topic-metadata">

**Author:** [@Santhosh\_Sabarish\_KM](https://discuss.elastic.co/u/Santhosh_Sabarish_KM)\
**Replies:** 1\
**Last updated:** [November 9, 2018, 12:44pm UTC](https://discuss.elastic.co/t/setting-index-codec-to-best-compression-affects-elasticsearchs-or-graylogs-performance/156046 "2018-11-09T12:44:12Z")

</div>

We are using ElasticSearch, Graylog, and MongoDB for storing the application logs. The disk space utilization is growing day by day, although we use a retention mechanism we need to reduce it further. Will compressing th…

---

## [New Installation Kibana 500 Internal Server Error](https://discuss.elastic.co/t/new-installation-kibana-500-internal-server-error/252720)

<div class="topic-metadata">

**Author:** [@KNXLabGeek](https://discuss.elastic.co/u/KNXLabGeek)\
**Replies:** 4\
**Last updated:** [November 3, 2020, 4:28pm UTC](https://discuss.elastic.co/t/new-installation-kibana-500-internal-server-error/252720 "2020-11-03T16:28:56Z")

</div>

I am new to elastic search and having a problem narrowing down the issue. I have followed the install instructions verbatim and this is my 3rd attempt and after installing Kibana I hit the same issue. I am doing a new in…

---

## [Replace Whitespaces In Key's](https://discuss.elastic.co/t/replace-whitespaces-in-keys/184518)

<div class="topic-metadata">

**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\
**Replies:** 4\
**Last updated:** [June 6, 2019, 10:17am UTC](https://discuss.elastic.co/t/replace-whitespaces-in-keys/184518 "2019-06-06T10:17:04Z")

</div>

As we are now collecting access logs of our Checkpoint Firewalls, we are facing the issue of horrible inconsistent key values (so the name of the keys itself :wink: ). They are formated in different ways but I was able t…

---

## [不特定カラムに対して日付のフォーマットを指定する](https://discuss.elastic.co/t/topic/93676)

<div class="topic-metadata">

**Author:** [@pokotyamu](https://discuss.elastic.co/u/pokotyamu)\
**Replies:** 4\
**Last updated:** [July 20, 2017, 4:14am UTC](https://discuss.elastic.co/t/topic/93676 "2017-07-20T04:14:37Z")

</div>

お世話になっております。 以下のようなフォーマットの日付データを bulk api にて取り込むことを考えています。 {"index":{"\_index":"sample\_index","\_type":"sample\_type","\_id":"1"}} {"DATE1":"2017年07月13日"} {"index":{"\_index":"sample\_index","\_type":"sample\_type","\_id":"2…

---

## [Easiest Way to loadtest elk, especially querying ES?](https://discuss.elastic.co/t/easiest-way-to-loadtest-elk-especially-querying-es/82142)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 4\
**Last updated:** [April 14, 2017, 2:57pm UTC](https://discuss.elastic.co/t/easiest-way-to-loadtest-elk-especially-querying-es/82142 "2017-04-14T14:57:39Z")

</div>

Hi, we are running a single instance of ELK. All is running on the same server. Processing in logstash seems fast enough, because inserted data is shown up to date in kibana. But we have performance issues on queryin…

---

## [Short field type taking 4 bytes instead of 2](https://discuss.elastic.co/t/short-field-type-taking-4-bytes-instead-of-2/239809)

<div class="topic-metadata">

**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\
**Replies:** 5\
**Last updated:** [July 6, 2020, 8:04am UTC](https://discuss.elastic.co/t/short-field-type-taking-4-bytes-instead-of-2/239809 "2020-07-06T08:04:04Z")

</div>

Hello, Looking at the short field type, I see that the Fields created are based on the integer implementation: However, this means that a IntPoint is used when a short field is indexed. This leads to the short point …

---

## [Mapper\_parsing\_exception](https://discuss.elastic.co/t/mapper-parsing-exception/261871)

<div class="topic-metadata">

**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\
**Replies:** 3\
**Last updated:** [January 22, 2021, 10:05pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception/261871 "2021-01-22T22:05:01Z")

</div>

Hello Team, I have been getting this issue no matter what. I have applied mutate (convert,rename) json but still get the following issue. "reason"=\>"Could not dynamically add mapping for field \[app.kubernetes.io/name\].…

---

## [Time-based indices and automation in node.js](https://discuss.elastic.co/t/time-based-indices-and-automation-in-node-js/69079)

<div class="topic-metadata">

**Author:** [@kevinfez](https://discuss.elastic.co/u/kevinfez)\
**Replies:** 8\
**Last updated:** [December 16, 2016, 12:38am UTC](https://discuss.elastic.co/t/time-based-indices-and-automation-in-node-js/69079 "2016-12-16T00:38:24Z")

</div>

Hi, I'm new to the elasticsearch scene and have quite a lot of questions. First of all, my use case at the moment is pretty simple: when a user performs a "registration" action on my site, I want to add a document logg…

[Previous page](https://discuss.elastic.co/top.md?page=749&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=751&per_page=50&period=all)
