# Top **URL:** https://discuss.elastic.co/top.md?page=755&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 756 --- ## [How to change from red to green](https://discuss.elastic.co/t/how-to-change-from-red-to-green/49484)
**Author:** [@kartikvelastic](https://discuss.elastic.co/u/kartikvelastic)\ **Replies:** 1\ **Last updated:** [May 8, 2016, 5:46pm UTC](https://discuss.elastic.co/t/how-to-change-from-red-to-green/49484 "2016-05-08T17:46:17Z")
I am not sure what went wrong, kibana visualization works without issue, but here is the status of the cluster: and No errors in production.log on any of the data nodes. Restarted elasticsearch on data nodes wi… --- ## [Rename field with dynamic name](https://discuss.elastic.co/t/rename-field-with-dynamic-name/129273)
**Author:** [@jasonyates](https://discuss.elastic.co/u/jasonyates)\ **Replies:** 2\ **Last updated:** [April 24, 2018, 10:53am UTC](https://discuss.elastic.co/t/rename-field-with-dynamic-name/129273 "2018-04-24T10:53:46Z")
I'm ingesting snmptraps from a Cisco wireless LAN controller and some of the extracted field names have a partially dynamic value. One example is below. I need to rename the field below simply to cLApName as anything af… --- ## [Visualising a scripted field is giving me an "unsupported script value" error](https://discuss.elastic.co/t/visualising-a-scripted-field-is-giving-me-an-unsupported-script-value-error/102123)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 2\ **Last updated:** [September 28, 2017, 4:54pm UTC](https://discuss.elastic.co/t/visualising-a-scripted-field-is-giving-me-an-unsupported-script-value-error/102123 "2017-09-28T16:54:58Z")
Hi folks. I'm trying to extract a value from a queryString in a document, which may or may not be present, and when I try to display this value in a vis, I'm getting an "unsupported script value" error. My querystring i… --- ## [Getting date parsing exception for milliseconds in a query](https://discuss.elastic.co/t/getting-date-parsing-exception-for-milliseconds-in-a-query/42029)
**Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\ **Replies:** 2\ **Last updated:** [March 10, 2016, 9:33am UTC](https://discuss.elastic.co/t/getting-date-parsing-exception-for-milliseconds-in-a-query/42029 "2016-03-10T09:33:10Z")
I the settings of my index I have this field: "publishedDate": { "type": "date", "format": "yyyy-MM-dd'T'HH:mm:ssZ", "store": true } And in a query I use that field in a Decay function like: "gauss" : { "som… --- ## [Update by query and refresh](https://discuss.elastic.co/t/update-by-query-and-refresh/20334)
**Author:** [@Igor\_Kupczynski](https://discuss.elastic.co/u/Igor_Kupczynski)\ **Replies:** 2\ **Last updated:** [October 23, 2014, 2:52pm UTC](https://discuss.elastic.co/t/update-by-query-and-refresh/20334 "2014-10-23T14:52:32Z")
Hello, We use \_update\_by\_query plugin to bulk update the documents. In the tests we've hit an issue where not all the documents are updated because the index is may not be refreshed before we do \_update\_by\_query. … --- ## [Accessing AWS ElasticSearch Service v5.6 using Java High Level Rest Client v6.3.0](https://discuss.elastic.co/t/accessing-aws-elasticsearch-service-v5-6-using-java-high-level-rest-client-v6-3-0/119937)
**Author:** [@karthitv89](https://discuss.elastic.co/u/karthitv89)\ **Replies:** 5\ **Last updated:** [February 20, 2018, 4:41pm UTC](https://discuss.elastic.co/t/accessing-aws-elasticsearch-service-v5-6-using-java-high-level-rest-client-v6-3-0/119937 "2018-02-20T16:41:47Z")
I have an AWS ElasticSearch service with the version 5.6. I want to use Java - High Level Rest Client v6.3.0 to create indices and do all the crud operations. But as we know the structure of ES v5.6 and ES v6.3 are diffe… --- ## [Is there a way to map a date to milliseconds since epoch for Logstash?](https://discuss.elastic.co/t/is-there-a-way-to-map-a-date-to-milliseconds-since-epoch-for-logstash/67798)
**Author:** [@EuclideanSearch](https://discuss.elastic.co/u/EuclideanSearch)\ **Replies:** 5\ **Last updated:** [December 2, 2016, 8:25pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-map-a-date-to-milliseconds-since-epoch-for-logstash/67798 "2016-12-02T20:25:47Z")
Hi, I have a date field (timestmap) (ES type is date) in my current Elasticsearch cluster and, among other things, I want to use Logstash to create a field consisting of the milliseconds since epoch for the timestamp. … --- ## [Slow Shard Assignment](https://discuss.elastic.co/t/slow-shard-assignment/10271)
**Author:** [@kelaban](https://discuss.elastic.co/u/kelaban)\ **Replies:** 5\ **Last updated:** [January 14, 2013, 8:38pm UTC](https://discuss.elastic.co/t/slow-shard-assignment/10271 "2013-01-14T20:38:36Z")
I have a job that creates a new version on an index every morning then deletes the old version of the index when it is done. About 3/7 days per week this job fails. What I am observing is that sometimes when trying t… --- ## [APM and wildfly integration. Couldn't get response from APM agent](https://discuss.elastic.co/t/apm-and-wildfly-integration-couldnt-get-response-from-apm-agent/242521)
**Author:** [@catadetest](https://discuss.elastic.co/u/catadetest)\ **Replies:** 8\ **Last updated:** [July 27, 2020, 1:07pm UTC](https://discuss.elastic.co/t/apm-and-wildfly-integration-couldnt-get-response-from-apm-agent/242521 "2020-07-27T13:07:26Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Index recovery - speed difference in red -\> yellow vs yellow -\> green](https://discuss.elastic.co/t/index-recovery-speed-difference-in-red-yellow-vs-yellow-green/5362)
**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\ **Replies:** 8\ **Last updated:** [April 17, 2013, 3:08pm UTC](https://discuss.elastic.co/t/index-recovery-speed-difference-in-red-yellow-vs-yellow-green/5362 "2013-04-17T15:08:14Z")
Hey, When I've restarted my cluster, I've observed that I very quickly (a couple of minutes) get into the yellow state, while it takes much longer (a couple of hours) to get into the green state. I am using the l… --- ## [Elasticsearch not running on windows 10](https://discuss.elastic.co/t/elasticsearch-not-running-on-windows-10/132425)
**Author:** [@raman2.0](https://discuss.elastic.co/u/raman2.0)\ **Replies:** 4\ **Last updated:** [May 18, 2018, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-not-running-on-windows-10/132425 "2018-05-18T07:59:33Z")
Elasticsearch not running, showing: C:\\Users\\Applicate\\Downloads\\elasticsearch\\elasticsearch-6.2.4\>bin\\elasticsearch.bat \[2018-05-18T06:53:52,513\]\[INFO \]\[o.e.n.Node \] \[LAPTOP-12HF0A7H\] initializing ... \[… --- ## [Unable to retrieve version information from Elasticsearch nodes. unable to verify the first certificate](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/298371)
**Author:** [@shmelkin](https://discuss.elastic.co/u/shmelkin)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 12:54pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/298371 "2022-02-28T12:54:15Z")
I'm running a one node Elastic cluster with Elasticsearch and Kibana. The configuration worked before on an earlier version about a year ago, however, after Kibanas version automatically updated due to new container imag… --- ## [Sending logs from Logstash to ArcSight via Syslog CEF](https://discuss.elastic.co/t/sending-logs-from-logstash-to-arcsight-via-syslog-cef/170247)
**Author:** [@elic1997](https://discuss.elastic.co/u/elic1997)\ **Replies:** 2\ **Last updated:** [February 28, 2019, 9:18am UTC](https://discuss.elastic.co/t/sending-logs-from-logstash-to-arcsight-via-syslog-cef/170247 "2019-02-28T09:18:32Z")
Hello, I've configured my Logstash to send event to an ArcSight Connector via the syslog output plugin with cef codec. The data I receive looks like this: {"name": SERVER\_NAME} LOGSTASH\[\*\]: CEF:0|Elasticsearch|Logsta… --- ## [Best way to replace abbreviated words in a search (e.g. : "av" for "avenue")](https://discuss.elastic.co/t/best-way-to-replace-abbreviated-words-in-a-search-e-g-av-for-avenue/22330)
**Author:** [@cornet\_remi](https://discuss.elastic.co/u/cornet_remi)\ **Replies:** 2\ **Last updated:** [February 24, 2015, 7:52am UTC](https://discuss.elastic.co/t/best-way-to-replace-abbreviated-words-in-a-search-e-g-av-for-avenue/22330 "2015-02-24T07:52:37Z")
Hello everyone, I'm doing a REST application that allows users to search on addresses indexed in ElasticSearch. To increase its effectiveness, I have to find results on abbreviated words (eg : "str" for "street"… --- ## [Logstash show errors for new client in log: "javax.net.ssl.SSLHandshakeException: Received fatal alert: bad\_certificate"](https://discuss.elastic.co/t/logstash-show-errors-for-new-client-in-log-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/297118)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 10:40am UTC](https://discuss.elastic.co/t/logstash-show-errors-for-new-client-in-log-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/297118 "2022-02-14T10:40:31Z")
Dears, I need your support in case of configuration filebeat/logstash. filebeat 7.17.0 logstash 7.16.3 Previously, it was an ELK cluster in version 7.7.1 which I upgraded to version 7.16.3 Certificate preparation on… --- ## [Custom Rules not working](https://discuss.elastic.co/t/custom-rules-not-working/258421)
**Author:** [@Yuriy\_Tsarenko](https://discuss.elastic.co/u/Yuriy_Tsarenko)\ **Replies:** 7\ **Last updated:** [December 16, 2020, 3:27pm UTC](https://discuss.elastic.co/t/custom-rules-not-working/258421 "2020-12-16T15:27:01Z")
Hello team! If possible, you could help us with setting up custom rules for SIEM. We had the following problem: The main idea is to create a rule according to which we would receive notifications when someone from the… --- ## [Security Header](https://discuss.elastic.co/t/security-header/247167)
**Author:** [@champes](https://discuss.elastic.co/u/champes)\ **Replies:** 7\ **Last updated:** [September 3, 2020, 3:48am UTC](https://discuss.elastic.co/t/security-header/247167 "2020-09-03T03:48:21Z")
Any thoughts on how to configure the following HTTP secure headers: X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 ; includeSubDomains … --- ## [Font size on a Kibana Data Table](https://discuss.elastic.co/t/font-size-on-a-kibana-data-table/223516)
**Author:** [@LJB999](https://discuss.elastic.co/u/LJB999)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 2:55pm UTC](https://discuss.elastic.co/t/font-size-on-a-kibana-data-table/223516 "2020-03-13T14:55:57Z")
Hi is there any way to edit the font size on a Kibana Data Table? I can resize the actual data table when I edit the dashboard to make the whole table bigger or smaller but the text of the items in the table don't resiz… --- ## [How to reclaim disk space for an index?](https://discuss.elastic.co/t/how-to-reclaim-disk-space-for-an-index/146341)
**Author:** [@tigermarques](https://discuss.elastic.co/u/tigermarques)\ **Replies:** 1\ **Last updated:** [August 28, 2018, 1:45pm UTC](https://discuss.elastic.co/t/how-to-reclaim-disk-space-for-an-index/146341 "2018-08-28T13:45:24Z")
Hi, I'm starting a project with Elasticsearch (version 6.3.2), and I've got a disk which has a capacity of 100GB. I know that the disk has 40GB of free space, and the rest is occupied by Elasticsearch data (60GB). Howev… --- ## [Mapper parsing exception: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/mapper-parsing-exception-root-mapping-definition-has-unsupported-parameters/225449)
**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\ **Replies:** 5\ **Last updated:** [March 31, 2020, 2:07am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-root-mapping-definition-has-unsupported-parameters/225449 "2020-03-31T02:07:55Z")
PUT /ag2\_vehicle\_stats { "settings": { "number\_of\_shards": 1 }, "mappings": { "doc": { "properties": { "vin": { "type": "keyword" }, "error\_reported": { "type": "integer" }, "num\_records": { "type": "integ… --- ## [Logstash Replace timestamp from csv](https://discuss.elastic.co/t/logstash-replace-timestamp-from-csv/141188)
**Author:** [@logesh\_j](https://discuss.elastic.co/u/logesh_j)\ **Replies:** 5\ **Last updated:** [July 23, 2018, 4:07pm UTC](https://discuss.elastic.co/t/logstash-replace-timestamp-from-csv/141188 "2018-07-23T16:07:23Z")
I am try to replace the timestamp with the field from log file. But it is not getting updated. Getting Date parse error \_dateparsefailure and still not getting updated. Attached the config file for reference. Date in th… --- ## [Adding fortinet FortiGate firewall as agent to fleet](https://discuss.elastic.co/t/adding-fortinet-fortigate-firewall-as-agent-to-fleet/320362)
**Author:** [@Med2](https://discuss.elastic.co/u/Med2)\ **Replies:** 4\ **Last updated:** [December 2, 2022, 2:38pm UTC](https://discuss.elastic.co/t/adding-fortinet-fortigate-firewall-as-agent-to-fleet/320362 "2022-12-02T14:38:36Z")
Hi, I've installed an elastic agent server and added to it several windows machines and linux servers using the enrollment tokens. Now that I've added the "Fortinet FortiGate Firewall Logs" integration in kibana and af… --- ## [Kibana UI customization and changes in home page](https://discuss.elastic.co/t/kibana-ui-customization-and-changes-in-home-page/230960)
**Author:** [@Potter\_Ginny](https://discuss.elastic.co/u/Potter_Ginny)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 7:08am UTC](https://discuss.elastic.co/t/kibana-ui-customization-and-changes-in-home-page/230960 "2020-05-07T07:08:23Z")
Hello there, We updated the Kibana UI just by modifying some text to see if our changes will reflect, since we initially wanted to add more elements/ components on the home page such as more texts and links. In this sp… --- ## [Filebeat 7.4.0 issue](https://discuss.elastic.co/t/filebeat-7-4-0-issue/202680)
**Author:** [@mirketto82](https://discuss.elastic.co/u/mirketto82)\ **Replies:** 2\ **Last updated:** [October 9, 2019, 12:27pm UTC](https://discuss.elastic.co/t/filebeat-7-4-0-issue/202680 "2019-10-09T12:27:14Z")
hello today i updated the new filebeat with new version release 7.4.0. i configured the yml file but when i try this two commands: ./filebeat setup ./filebeat -e i received this error: bash: ./filebeat: cannot exec… --- ## [Logstash-7.0.1 Error](https://discuss.elastic.co/t/logstash-7-0-1-error/182568)
**Author:** [@Rizwan](https://discuss.elastic.co/u/Rizwan)\ **Replies:** 2\ **Last updated:** [May 25, 2019, 4:32am UTC](https://discuss.elastic.co/t/logstash-7-0-1-error/182568 "2019-05-25T04:32:10Z")
I am trying to execute this command logstash.bat -f sql.conf and I am getting below exception.. I am using logstash-7.0.1 Can someone help me!! Thanks in advance!! \[2019-05-24T01:08:42,080\]\[WARN \]\[logstash.config.sou… --- ## [Kibanaを動かすときのブラウザの前提条件](https://discuss.elastic.co/t/kibana/135862)
**Author:** [@tsukahara](https://discuss.elastic.co/u/tsukahara)\ **Replies:** 2\ **Last updated:** [June 19, 2018, 12:41am UTC](https://discuss.elastic.co/t/kibana/135862 "2018-06-19T00:41:54Z")
Kibanaを動かすときのブラウザの前提条件（しておくべき設定）を知りたいのですが、 情報ありますでしょうか。 InternetExplorerで Kibanaを表示するときに 「ツール」「インターネットオプション」「詳細設定」タブ 「DOM ストレージを有効にする」のチェックがないと Kibanaが立ち上がりませんでした（Loading Kibanaのまま画面が変わりません）。 同様に、Javascriptが無効化されてい… --- ## [In Kibana scripted field, return sum of two integer value](https://discuss.elastic.co/t/in-kibana-scripted-field-return-sum-of-two-integer-value/76762)
**Author:** [@Gurveer\_Singh](https://discuss.elastic.co/u/Gurveer_Singh)\ **Replies:** 2\ **Last updated:** [February 28, 2017, 1:52pm UTC](https://discuss.elastic.co/t/in-kibana-scripted-field-return-sum-of-two-integer-value/76762 "2017-02-28T13:52:10Z")
Hello, I am trying to sum two integer values as following, but I am getting compile error. I am not much familiar with painless syntax. if (doc\['allocated.raw'\].value == 'Physically') { int cpu = 0 cpu = doc\['to… --- ## [Nats.io "official" support as a move towards a distributed system](https://discuss.elastic.co/t/nats-io-official-support-as-a-move-towards-a-distributed-system/41727)
**Author:** [@molsznski](https://discuss.elastic.co/u/molsznski)\ **Replies:** 1\ **Last updated:** [February 15, 2016, 4:10pm UTC](https://discuss.elastic.co/t/nats-io-official-support-as-a-move-towards-a-distributed-system/41727 "2016-02-15T16:10:44Z")
Howdy Logstash community! I am curious. Are there are any plans to make a nats.io-input-plugin an official plugin for Logstash? Why is this important ? I believe that kafka, rmq, 0mq and inputs like that are of … --- ## [Installing Elasticsearch in Centos7 problem](https://discuss.elastic.co/t/installing-elasticsearch-in-centos7-problem/316497)
**Author:** [@MBekhit](https://discuss.elastic.co/u/MBekhit)\ **Replies:** 8\ **Last updated:** [October 14, 2022, 6:19am UTC](https://discuss.elastic.co/t/installing-elasticsearch-in-centos7-problem/316497 "2022-10-14T06:19:11Z")
Hi, I have this error when I want to install Elasticsearch in Centos 7 elasticsearch-7.17.6-x86\_64.rp FAILED https://artifacts.elastic.co/packages/7.x/yum/7.17.6/elasticsearch-… --- ## [Export Index and structure](https://discuss.elastic.co/t/export-index-and-structure/161700)
**Author:** [@Tom28](https://discuss.elastic.co/u/Tom28)\ **Replies:** 3\ **Last updated:** [December 20, 2018, 3:28pm UTC](https://discuss.elastic.co/t/export-index-and-structure/161700 "2018-12-20T15:28:15Z")
Hi I have currently a very old installation of Elasticsearch on a node with 3 indexes and maybe about 1000 documents. I have now installed a the newest version and would import all of the current environment to the new… --- ## [How to bulk update using PHP](https://discuss.elastic.co/t/how-to-bulk-update-using-php/140344)
**Author:** [@Shrimp-Fried-Rice](https://discuss.elastic.co/u/Shrimp-Fried-Rice)\ **Replies:** 0\ **Last updated:** [July 17, 2018, 2:29pm UTC](https://discuss.elastic.co/t/how-to-bulk-update-using-php/140344 "2018-07-17T14:29:31Z")
Hi all, i have followed this article https://www.elastic.co/guide/en/elasticsearch/client/php-api/current/\_indexing\_documents.html to bulk index documents., but now i want to update the 2 fields of 70% of documents.,… --- ## [Failover for indexing](https://discuss.elastic.co/t/failover-for-indexing/66624)
**Author:** [@limac](https://discuss.elastic.co/u/limac)\ **Replies:** 8\ **Last updated:** [November 21, 2016, 2:05pm UTC](https://discuss.elastic.co/t/failover-for-indexing/66624 "2016-11-21T14:05:41Z")
is there amy way to keeping indexing when one node down? --- ## [Analyzer settings for breaking up words on hyphens](https://discuss.elastic.co/t/analyzer-settings-for-breaking-up-words-on-hyphens/20446)
**Author:** [@Mike\_Topper1](https://discuss.elastic.co/u/Mike_Topper1)\ **Replies:** 3\ **Last updated:** [October 28, 2014, 12:57am UTC](https://discuss.elastic.co/t/analyzer-settings-for-breaking-up-words-on-hyphens/20446 "2014-10-28T00:57:07Z")
Hello, I have a field that is using the whitespace tokenizer, but I also want to tokenize on hyphens (-) like the standard analyzer does. I'm having trouble figuring out what additional custom settings I would have… --- ## [Facing problem in redeclaring rabbit\_mq exchange name](https://discuss.elastic.co/t/facing-problem-in-redeclaring-rabbit-mq-exchange-name/10755)
**Author:** [@C\_K\_R\_VIJAY\_Krishna](https://discuss.elastic.co/u/C_K_R_VIJAY_Krishna)\ **Replies:** 8\ **Last updated:** [February 21, 2013, 1:05pm UTC](https://discuss.elastic.co/t/facing-problem-in-redeclaring-rabbit-mq-exchange-name/10755 "2013-02-21T13:05:37Z")
Hi, I am new to elastic search. Please find below sample json format which is used to create index in elastic search by using rabbitmq-river plugin. In this code "vijay\_exg" exchange is already exists in rabbitmq … --- ## [Elastic search cluster behind azure public load balncer](https://discuss.elastic.co/t/elastic-search-cluster-behind-azure-public-load-balncer/22233)
**Author:** [@Subodh\_Patil](https://discuss.elastic.co/u/Subodh_Patil)\ **Replies:** 6\ **Last updated:** [February 24, 2015, 3:20am UTC](https://discuss.elastic.co/t/elastic-search-cluster-behind-azure-public-load-balncer/22233 "2015-02-24T03:20:50Z")
i am trying to setup ES cluster behind azure load balancer /cloud service. the cluster is 3 node with no specific data/client/master node settings. By default 2 nodes are elected as master and 1 as data node. … --- ## [Kibana set date filter to show last 30 days](https://discuss.elastic.co/t/kibana-set-date-filter-to-show-last-30-days/235908)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 2\ **Last updated:** [June 26, 2020, 5:53am UTC](https://discuss.elastic.co/t/kibana-set-date-filter-to-show-last-30-days/235908 "2020-06-26T05:53:40Z")
Hi , I have a query on how to apply date filter conditions. so i have an index where i have not set the default time filter. ( i selected i do not want to set a time filter option while creating index) since i have man… --- ## [Could not find path of jruby in](https://discuss.elastic.co/t/could-not-find-path-of-jruby-in/108963)
**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\ **Replies:** 2\ **Last updated:** [November 25, 2017, 6:36am UTC](https://discuss.elastic.co/t/could-not-find-path-of-jruby-in/108963 "2017-11-25T06:36:16Z")
Hello, I have an issue with logstash i am using logstash 6.0.0 and when i running the configuration file then its give some error like following: \[logstash\] help me to resolve this issue i am using windows server R2 2… --- ## [Stack Monitoring: Missing Logstash Pipeline Stats](https://discuss.elastic.co/t/stack-monitoring-missing-logstash-pipeline-stats/222958)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 7\ **Last updated:** [March 20, 2020, 3:34pm UTC](https://discuss.elastic.co/t/stack-monitoring-missing-logstash-pipeline-stats/222958 "2020-03-20T15:34:23Z")
We have a 10 Node Elasticsearch cluster and one single node "cluster" to store all metrics. Those metrics are collected by metricbeat. We ship data into this cluster mainly with logstash. Logstash stats are also gathered… --- ## [Match specific word in grok filter](https://discuss.elastic.co/t/match-specific-word-in-grok-filter/192299)
**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 7:43pm UTC](https://discuss.elastic.co/t/match-specific-word-in-grok-filter/192299 "2019-07-25T19:43:37Z")
I have a log message which is composed of multiple values joined by pipes. 20190615|4|method|userend|/test/value/123/1.1|500|2 mY grok filter: mutate { add\_field =\> { "\[@metadata\]\[copyOfMessage\]" =\>… --- ## [WARN Invalid response: Data too small to contain a valid length](https://discuss.elastic.co/t/warn-invalid-response-data-too-small-to-contain-a-valid-length/91654)
**Author:** [@Rajeev\_Singh](https://discuss.elastic.co/u/Rajeev_Singh)\ **Replies:** 7\ **Last updated:** [July 7, 2017, 1:55pm UTC](https://discuss.elastic.co/t/warn-invalid-response-data-too-small-to-contain-a-valid-length/91654 "2017-07-07T13:55:00Z")
WARN Invalid response: Data too small to contain a valid length What could be the cause of this warning as this packetbeat is deployed on a database which is constantly processing --- ## [ElasticSearch Synchronization on Cluster Server Setup](https://discuss.elastic.co/t/elasticsearch-synchronization-on-cluster-server-setup/43983)
**Author:** [@nitin](https://discuss.elastic.co/u/nitin)\ **Replies:** 4\ **Last updated:** [March 10, 2016, 11:14am UTC](https://discuss.elastic.co/t/elasticsearch-synchronization-on-cluster-server-setup/43983 "2016-03-10T11:14:52Z")
I am starting to implement elastic search in my project. The project is J2EE application deployed on Weblogic Clustered environment. Which means my java classes would be present at different locations/nodes in a cluster.… --- ## [How to join values from 2 different fields to one and manage it further?](https://discuss.elastic.co/t/how-to-join-values-from-2-different-fields-to-one-and-manage-it-further/303050)
**Author:** [@Stek\_new](https://discuss.elastic.co/u/Stek_new)\ **Replies:** 3\ **Last updated:** [April 26, 2022, 7:09pm UTC](https://discuss.elastic.co/t/how-to-join-values-from-2-different-fields-to-one-and-manage-it-further/303050 "2022-04-26T19:09:37Z")
Hello, I am curious if anybody faced the issue I have I have 5 documents with the following fields and values in table view: +++++++++++++++++++++++++++++++++ | src\_ch | tgt\_ch | extra\_field | ++++++++++++++++++++++++… --- ## [Elasticsearch:8.5.2 docker "access denied (\\"java.lang.RuntimePermission\\" \\"modifyThread\\")"](https://discuss.elastic.co/t/elasticsearch-8-5-2-docker-access-denied-java-lang-runtimepermission-modifythread/320409)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 6\ **Last updated:** [December 7, 2022, 3:16am UTC](https://discuss.elastic.co/t/elasticsearch-8-5-2-docker-access-denied-java-lang-runtimepermission-modifythread/320409 "2022-12-07T03:16:20Z")
{"@timestamp":"2022-12-03T09:13:59.279Z", "log.level":"ERROR", "message":"uncaught exception in thread \[process reaper (pid 117)\]", "ecs.version": "1.2.0","service.name":"ES\_ECS","event.dataset":"elasticsearch.server","p… --- ## [Ingest pipeline "Failed to parse content to map"](https://discuss.elastic.co/t/ingest-pipeline-failed-to-parse-content-to-map/276812)
**Author:** [@Louis1](https://discuss.elastic.co/u/Louis1)\ **Replies:** 6\ **Last updated:** [June 29, 2021, 2:05pm UTC](https://discuss.elastic.co/t/ingest-pipeline-failed-to-parse-content-to-map/276812 "2021-06-29T14:05:35Z")
Why is this log causing an error and what is the meaning of "Failed to parse content to map". I am pretty new to pipelines and ES in general so any help would be greatly appreciated: INPUT POST \_ingest/pipeline/\_simula… --- ## [Unable to find document on \_id in elasticsearch mongodb](https://discuss.elastic.co/t/unable-to-find-document-on--id-in-elasticsearch-mongodb/45071)
**Author:** [@Satyadeep\_Kumar](https://discuss.elastic.co/u/Satyadeep_Kumar)\ **Replies:** 6\ **Last updated:** [March 22, 2016, 9:03am UTC](https://discuss.elastic.co/t/unable-to-find-document-on--id-in-elasticsearch-mongodb/45071 "2016-03-22T09:03:28Z")
I am trying to lookup a mongodb document based on its \_id in elasticsearch using php-2.0 api of elasticsearch. It is giving me error \[2016-03-22 01:38:34,672\]\[DEBUG\]\[action.search.type \] \[Cameron Hodge\] \[smartjn\]… --- ## [Connect to mongodb using logstash Jdbc\_streaming filter plugin](https://discuss.elastic.co/t/connect-to-mongodb-using-logstash-jdbc-streaming-filter-plugin/242082)
**Author:** [@\_Rasitha\_Ariyarathna](https://discuss.elastic.co/u/_Rasitha_Ariyarathna)\ **Replies:** 2\ **Last updated:** [August 1, 2020, 1:47pm UTC](https://discuss.elastic.co/t/connect-to-mongodb-using-logstash-jdbc-streaming-filter-plugin/242082 "2020-08-01T13:47:03Z")
I'm trying to fetch data from mongodb using Jdbc\_streaming filter plugin in logstash in windows. I'm using mongo-java-driver-3.4.2.jar to connect to the database but, getting a error like this JavaSql::SQLException: N… --- ## ["Failed to flush outgoing items" Error with logstash-output-webhdfs plugin](https://discuss.elastic.co/t/failed-to-flush-outgoing-items-error-with-logstash-output-webhdfs-plugin/80601)
**Author:** [@jackhe](https://discuss.elastic.co/u/jackhe)\ **Replies:** 2\ **Last updated:** [April 1, 2017, 3:34am UTC](https://discuss.elastic.co/t/failed-to-flush-outgoing-items-error-with-logstash-output-webhdfs-plugin/80601 "2017-04-01T03:34:19Z")
Dear all, When I tried use logstash-output-webhdfs plugin to archive logs into hdfs, I met below error occasionly(not always). Does anyone know what happened and how to fix this ? Failed to flush outgoing items {:out… --- ## [Delete a document from an alias](https://discuss.elastic.co/t/delete-a-document-from-an-alias/55789)
**Author:** [@Stefano\_Ghisaura](https://discuss.elastic.co/u/Stefano_Ghisaura)\ **Replies:** 2\ **Last updated:** [July 19, 2016, 7:51am UTC](https://discuss.elastic.co/t/delete-a-document-from-an-alias/55789 "2016-07-19T07:51:48Z")
I have some indexes on an ElasticSearch cluster containing the same kind documents (i.e. with the same mapping) and I'm using some aliases for different purposes. Every month there's a Curator job which creates a new i… --- ## [Unique Constraint?](https://discuss.elastic.co/t/unique-constraint/11862)
**Author:** [@Ralph\_Trickey\_2](https://discuss.elastic.co/u/Ralph_Trickey_2)\ **Replies:** 2\ **Last updated:** [May 8, 2013, 4:07pm UTC](https://discuss.elastic.co/t/unique-constraint/11862 "2013-05-08T16:07:43Z")
I'm having problems understanding where I'm going wrong. I've set up a simple ES cluster and I am able to insert data fairly quickly using a simple program. I would like to be able to define a unique constraint (I… --- ## [Restore snapshot](https://discuss.elastic.co/t/restore-snapshot/224188)
**Author:** [@debasisc](https://discuss.elastic.co/u/debasisc)\ **Replies:** 8\ **Last updated:** [April 5, 2020, 11:55am UTC](https://discuss.elastic.co/t/restore-snapshot/224188 "2020-04-05T11:55:51Z")
I see this command in help site https://www.elastic.co/guide/en/elasticsearch/reference/current/snapshots-restore-snapshot.html POST /\_snapshot/my\_backup/snapshot\_1/\_restore But I am missing the prerequisite steps. H… [Previous page](https://discuss.elastic.co/top.md?page=754&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=756&per_page=50&period=all)