# Top **URL:** https://discuss.elastic.co/top.md?page=77&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 78 --- ## [I can't retrieve all data from index](https://discuss.elastic.co/t/i-cant-retrieve-all-data-from-index/97070)
**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\ **Replies:** 14\ **Last updated:** [August 21, 2017, 10:57pm UTC](https://discuss.elastic.co/t/i-cant-retrieve-all-data-from-index/97070 "2017-08-21T22:57:26Z")
Hello, I need to retrieve all the data matching my query, they returned data exceed the default size for window which is 10000, How can i do it ? GET logstash-2017.08.04/\_search?scroll=5m { "query": { "matc… --- ## [ElasticSearch FIPS (BouncyCastle)](https://discuss.elastic.co/t/elasticsearch-fips-bouncycastle/303298)
**Author:** [@datencio](https://discuss.elastic.co/u/datencio)\ **Replies:** 11\ **Last updated:** [May 5, 2022, 1:19am UTC](https://discuss.elastic.co/t/elasticsearch-fips-bouncycastle/303298 "2022-05-05T01:19:50Z")
I am tasked with trying to get Elasticsearch working in FIPS mode. I know there is probably no experts on this topic in the forums but wanted to see if anyone could give me just a working solution. In my Elasticsearch.y… --- ## [Highlight whole sentence](https://discuss.elastic.co/t/highlight-whole-sentence/8838)
**Author:** [@Guram\_Kajaia](https://discuss.elastic.co/u/Guram_Kajaia)\ **Replies:** 10\ **Last updated:** [August 29, 2012, 6:23am UTC](https://discuss.elastic.co/t/highlight-whole-sentence/8838 "2012-08-29T06:23:27Z")
Hello guys. Please run this curl recreation. https://gist.github.com/3442578 As you can see, i'm search work 'elasticsearch' in text : ElasticSearch can be used to search all 1kind of documents. It provides a sc… --- ## [File Beat offset semantics](https://discuss.elastic.co/t/file-beat-offset-semantics/49678)
**Author:** [@Magnus\_Andersson](https://discuss.elastic.co/u/Magnus_Andersson)\ **Replies:** 9\ **Last updated:** [January 9, 2017, 6:23pm UTC](https://discuss.elastic.co/t/file-beat-offset-semantics/49678 "2017-01-09T18:23:46Z")
Hi The file beat offset value refers to the pointer of how much of the current log file have been read. My understanding of what happens i the following scenarios are: A log file is rotated (zipped) and archived -\>… --- ## [Kibana Plugin Development Issue on AWS ec2](https://discuss.elastic.co/t/kibana-plugin-development-issue-on-aws-ec2/258511)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 12\ **Last updated:** [December 17, 2020, 12:22am UTC](https://discuss.elastic.co/t/kibana-plugin-development-issue-on-aws-ec2/258511 "2020-12-17T00:22:42Z")
Hello, I am running the development environment on an AWS ec2 instance with 8GB of RAM, 25GB disk space and on AWS Linux 2. I have read somewhere that it this environment has issues running on the web. I was following… --- ## [How Logstash reads the same file name but with different content(keeps updating)?](https://discuss.elastic.co/t/how-logstash-reads-the-same-file-name-but-with-different-content-keeps-updating/89984)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 18\ **Last updated:** [July 12, 2017, 11:54am UTC](https://discuss.elastic.co/t/how-logstash-reads-the-same-file-name-but-with-different-content-keeps-updating/89984 "2017-07-12T11:54:40Z")
Hi, I am using logstash to read a log file. The file name reamins same but the content keeps changing for 1 hour(wipes off the previous logs and inserts new logs). But logstash is just reading last line of the file. He… --- ## [Logstash failing with large pretty JSON files](https://discuss.elastic.co/t/logstash-failing-with-large-pretty-json-files/176110)
**Author:** [@John\_Michael\_Burke](https://discuss.elastic.co/u/John_Michael_Burke)\ **Replies:** 9\ **Last updated:** [April 19, 2019, 4:28pm UTC](https://discuss.elastic.co/t/logstash-failing-with-large-pretty-json-files/176110 "2019-04-19T16:28:10Z")
I am getting a failure in my stack... Filebeats -\> Logstash (Filter JSON) -\> Elasticsearch. My JSON files are valid as I have checked on jsonlint.com (I get 'Valid JSON'). My JSON files are roughly ~1300 lines. I have a… --- ## [\[FATAL\]\[logstash.runner\]](https://discuss.elastic.co/t/fatal-logstash-runner/100416)
**Author:** [@19831d72452f0be1a755](https://discuss.elastic.co/u/19831d72452f0be1a755)\ **Replies:** 11\ **Last updated:** [September 13, 2017, 9:42pm UTC](https://discuss.elastic.co/t/fatal-logstash-runner/100416 "2017-09-13T21:42:13Z")
Hello. I'm using Logstash 5.5 Elastic 5.5 Kibana 5.5 X-Pack 5.5 logstash - ssl - elastic Here's the error: \[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>#\ **Author:** [@Ramky](https://discuss.elastic.co/u/Ramky)\ **Replies:** 11\ **Last updated:** [March 8, 2017, 1:30pm UTC](https://discuss.elastic.co/t/slow-indexing-rate/27206 "2017-03-08T13:30:52Z") I am trying to index json events with 16 string fields each and maximum EPS that i am able to index is 5k. These json events are fed to elasticsearch by traversing list of strings which are loaded from a file . Elastic S… --- ## [Flatting nested array in Json](https://discuss.elastic.co/t/flatting-nested-array-in-json/233066)
**Author:** [@Ullas7](https://discuss.elastic.co/u/Ullas7)\ **Replies:** 11\ **Last updated:** [May 19, 2020, 1:09pm UTC](https://discuss.elastic.co/t/flatting-nested-array-in-json/233066 "2020-05-19T13:09:19Z")
I have a Json something like this , I trying to flatten it before storing in Elasticsearch. all nested elements should be on level 1. I read about ruby script. I am new to ELK and ruby. someone can help me out? … --- ## [Multiple beats inputs](https://discuss.elastic.co/t/multiple-beats-inputs/33661)
**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\ **Replies:** 9\ **Last updated:** [November 5, 2015, 3:49pm UTC](https://discuss.elastic.co/t/multiple-beats-inputs/33661 "2015-11-05T15:49:01Z")
Hello all! I was curious if adding more beats inputs (and adding the additional ports to filebeat and loadbalance:true) would increase throughput of logstash? --- ## [Logstash wildcards / regex not working](https://discuss.elastic.co/t/logstash-wildcards-regex-not-working/164204)
**Author:** [@Blake\_2112](https://discuss.elastic.co/u/Blake_2112)\ **Replies:** 20\ **Last updated:** [January 30, 2019, 5:31pm UTC](https://discuss.elastic.co/t/logstash-wildcards-regex-not-working/164204 "2019-01-30T17:31:03Z")
No matter what I have tried I cannot seem to easily process files in a folder using a repeatable wildcard format. To start...there are no errors...just no processing as I am certain that logstash cannot find any files a… --- ## [Volume expansion](https://discuss.elastic.co/t/volume-expansion/258076)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 16\ **Last updated:** [January 7, 2021, 12:45pm UTC](https://discuss.elastic.co/t/volume-expansion/258076 "2021-01-07T12:45:18Z")
I was deploying elasticsearch cluster as statefulset. I upgraded elastic-operator to 1.3.0. I can see that volume expansion is supported for 1.3.0 release: But still I am seeing the old storage size. Is volume expan… --- ## [Timeout while indexing 1gb document](https://discuss.elastic.co/t/timeout-while-indexing-1gb-document/11954)
**Author:** [@JohnB1](https://discuss.elastic.co/u/JohnB1)\ **Replies:** 17\ **Last updated:** [May 16, 2013, 6:44pm UTC](https://discuss.elastic.co/t/timeout-while-indexing-1gb-document/11954 "2013-05-16T18:44:04Z")
Hello, I'm pretty new to elastic search and I was doing some load tests. One of the tests is to write a 1GB document which fails with the following error message: 14-May-2013 14:44:44 org.elasticsearch.plugins I… --- ## [Elastic Agent won't enroll](https://discuss.elastic.co/t/elastic-agent-wont-enroll/282212)
**Author:** [@greggailly](https://discuss.elastic.co/u/greggailly)\ **Replies:** 11\ **Last updated:** [September 9, 2021, 12:23pm UTC](https://discuss.elastic.co/t/elastic-agent-wont-enroll/282212 "2021-09-09T12:23:07Z")
Hi, We are having difficulties with some agents not enrolling properly into fleet especially on Windows machines. The setup seems to be ok as we can enroll from some servers. However on other servers when launching th… --- ## [Fetch million doc in seconds](https://discuss.elastic.co/t/fetch-million-doc-in-seconds/239611)
**Author:** [@saurabhbhatt](https://discuss.elastic.co/u/saurabhbhatt)\ **Replies:** 10\ **Last updated:** [July 6, 2020, 1:25pm UTC](https://discuss.elastic.co/t/fetch-million-doc-in-seconds/239611 "2020-07-06T13:25:00Z")
Hi, To give brief, I have an index "allreportingdataindex" (example) and it has over 7,50,000 records. Each document has about about 20 columns and about 15 columns with array values. The ES instance is installed on ser… --- ## [Run script from Logstash then fill new field with result](https://discuss.elastic.co/t/run-script-from-logstash-then-fill-new-field-with-result/91141)
**Author:** [@Bilanda](https://discuss.elastic.co/u/Bilanda)\ **Replies:** 9\ **Last updated:** [July 3, 2017, 6:04pm UTC](https://discuss.elastic.co/t/run-script-from-logstash-then-fill-new-field-with-result/91141 "2017-07-03T18:04:02Z")
Hello ! I'm completely new to the ELK stack, so sorry if my question looks quite stupid :slight\_smile: I'm trying to create a new field for Elasticsearch with Logstach by running a bash command. Explanations : … --- ## [A beat for RRD files? (or How to start a beat, by a go-newbie?)](https://discuss.elastic.co/t/a-beat-for-rrd-files-or-how-to-start-a-beat-by-a-go-newbie/51787)
**Author:** [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\ **Replies:** 9\ **Last updated:** [June 15, 2016, 1:01pm UTC](https://discuss.elastic.co/t/a-beat-for-rrd-files-or-how-to-start-a-beat-by-a-go-newbie/51787 "2016-06-15T13:01:56Z")
Hi there, I've been setting up an ELK stack to collect various metrics. Most of them will come from hosts where I can't afford installing Logstash, so I plan to use Beats. For logs, it's quite trivial, thanks to Fil… --- ## [Missing documents after a bulk index](https://discuss.elastic.co/t/missing-documents-after-a-bulk-index/7530)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 12\ **Last updated:** [August 9, 2014, 7:02am UTC](https://discuss.elastic.co/t/missing-documents-after-a-bulk-index/7530 "2014-08-09T07:02:47Z")
Just finished finished bulk indexing 36 million documents to a single node with 5 shards. However, there are only 30 million products in the index. The node stats are: docs": { "count": 30287500, "deleted": 0 }, … --- ## [Logstash 6.4.0 stuck on: Successfully started Logstash API endpoint {:port=\>9600}](https://discuss.elastic.co/t/logstash-6-4-0-stuck-on-successfully-started-logstash-api-endpoint-port-9600/177732)
**Author:** [@nomoneynoproblems](https://discuss.elastic.co/u/nomoneynoproblems)\ **Replies:** 9\ **Last updated:** [April 23, 2019, 10:59pm UTC](https://discuss.elastic.co/t/logstash-6-4-0-stuck-on-successfully-started-logstash-api-endpoint-port-9600/177732 "2019-04-23T22:59:06Z")
Hi, I use Jenkins to update two different indexes on one server with two different Logstash configuration scripts. A custom Python script ssh's into the server and starts Logstash with the appropriate yml config file an… --- ## [Grok filter for IIS no working](https://discuss.elastic.co/t/grok-filter-for-iis-no-working/164157)
**Author:** [@Carlos\_Bodini](https://discuss.elastic.co/u/Carlos_Bodini)\ **Replies:** 17\ **Last updated:** [January 23, 2019, 7:23pm UTC](https://discuss.elastic.co/t/grok-filter-for-iis-no-working/164157 "2019-01-23T19:23:35Z")
hey there, my grok filter for IIS logs is not working on logstash, however it worok on kibana debugger: input { beats { port =\> 5044 type =\> "log" port=\> 5044 type =\> "iis" } filter { if \[type\] == "iis" { grok… --- ## [Create a custom id](https://discuss.elastic.co/t/create-a-custom-id/119951)
**Author:** [@Nayaz\_JH](https://discuss.elastic.co/u/Nayaz_JH)\ **Replies:** 11\ **Last updated:** [February 15, 2018, 10:19am UTC](https://discuss.elastic.co/t/create-a-custom-id/119951 "2018-02-15T10:19:05Z")
"\_index": "access\_log", "\_type": "access\_logs", "\_id": "0udbmGEBevLW4jI4We7N", "\_score": 1, "\_source": { "@timestamp": "2018-02-15T07:26:18.252Z", "path": "V:/cc/7.7/mcs\_7\_indonesia\_dev/mpower/out/log/MessagingBrok… --- ## [OOM since 8.16.1 with openjdk23](https://discuss.elastic.co/t/oom-since-8-16-1-with-openjdk23/371395)
**Author:** [@ALIT](https://discuss.elastic.co/u/ALIT)\ **Replies:** 32\ **Last updated:** [May 2, 2025, 7:14am UTC](https://discuss.elastic.co/t/oom-since-8-16-1-with-openjdk23/371395 "2025-05-02T07:14:30Z")
Hi, after upgrading from 8.15.1 to 8.16.1, all machines in two of our four ES clusters are running out of Memory after 7-12 hours. Our current setup for all clusters is: System: Ubuntu 22 3 master 3 data nodes (64GB… --- ## [Link elasticsearch to S3](https://discuss.elastic.co/t/link-elasticsearch-to-s3/270713)
**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\ **Replies:** 11\ **Last updated:** [May 4, 2021, 1:53pm UTC](https://discuss.elastic.co/t/link-elasticsearch-to-s3/270713 "2021-05-04T13:53:29Z")
Hello, My goal is to link my graylog/elasticsearch server to aws S3 to send indexes After having already exchanged a lot on the elasticsearch forums, here is where I am: -On AWS, I created a bucket mysiem -I also cre… --- ## [.Net Core Agent not showing transactions](https://discuss.elastic.co/t/net-core-agent-not-showing-transactions/199129)
**Author:** [@apm\_user](https://discuss.elastic.co/u/apm_user)\ **Replies:** 9\ **Last updated:** [September 20, 2019, 8:12pm UTC](https://discuss.elastic.co/t/net-core-agent-not-showing-transactions/199129 "2019-09-20T20:12:16Z")
Kibana version: 6..8.0 Hi, I am trying to instrument a .net core web application using elastic and am running into some issues. I am able to see metric data ( cpu/ memory ) but am unable to see any transactions. I'm … --- ## [Lifecycle policies don't work](https://discuss.elastic.co/t/lifecycle-policies-dont-work/276218)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 13\ **Last updated:** [July 5, 2021, 11:40pm UTC](https://discuss.elastic.co/t/lifecycle-policies-dont-work/276218 "2021-07-05T23:40:49Z")
As per the title, ILM simply does not work, or at least it doesn't work according to what Kibana or the docs make you believe should work. I can create a lifecycle policy and attach a index but it will never roll over. … --- ## [Log stash - fetching data from file - not getting the output in the console](https://discuss.elastic.co/t/log-stash-fetching-data-from-file-not-getting-the-output-in-the-console/183455)
**Author:** [@ashokchinna](https://discuss.elastic.co/u/ashokchinna)\ **Replies:** 16\ **Last updated:** [June 19, 2019, 10:29pm UTC](https://discuss.elastic.co/t/log-stash-fetching-data-from-file-not-getting-the-output-in-the-console/183455 "2019-06-19T22:29:03Z")
I am trying to use the file as input source. But I am not getting the file content in the stdout. Command ./logstash -f ../conf/file.conf Configuration File #sample configuration 1 #file.conf input { file{ path… --- ## [Kibana Visualization Rounding Data](https://discuss.elastic.co/t/kibana-visualization-rounding-data/167477)
**Author:** [@brandonstephens922](https://discuss.elastic.co/u/brandonstephens922)\ **Replies:** 9\ **Last updated:** [February 16, 2019, 12:12am UTC](https://discuss.elastic.co/t/kibana-visualization-rounding-data/167477 "2019-02-16T00:12:34Z")
I am running into an issue trying to work with a field when trying to create a visualization. In summary, I have a log field that is a ratio. Example values below: .678534 -995849 .234752 When doing a unique count of… --- ## [APM Java Agent JMX Metrics for Springboot application (capture\_jmx\_metrics)](https://discuss.elastic.co/t/apm-java-agent-jmx-metrics-for-springboot-application-capture-jmx-metrics/202700)
**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\ **Replies:** 11\ **Last updated:** [October 21, 2019, 9:21am UTC](https://discuss.elastic.co/t/apm-java-agent-jmx-metrics-for-springboot-application-capture-jmx-metrics/202700 "2019-10-21T09:21:21Z")
Kibana version: 7.4.0 Elasticsearch version: 7.4.0 APM Server version: 7.4.0 APM Agent language and version: Java and 1.10.0 Trying to get metrics from JMX for Spring Boot microservice which is deployed in Kubernetes… --- ## [Curl: (7) failed to connect to localhost port 9200: connection refused using curl -X PUT "localhost:9200"](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused-using-curl-x-put-localhost-9200/175905)
**Author:** [@idris](https://discuss.elastic.co/u/idris)\ **Replies:** 9\ **Last updated:** [April 9, 2019, 7:47am UTC](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused-using-curl-x-put-localhost-9200/175905 "2019-04-09T07:47:08Z")
Need help guys! please I add mappings on Elasticsearch using this command line curl -X PUT "localhost:9200/newsout/\_mapping/test-type" -H 'Content-Type: application/json' -d' { "properties": { "author": { "type": "st… --- ## [ES cluster goes into red frequently](https://discuss.elastic.co/t/es-cluster-goes-into-red-frequently/206051)
**Author:** [@AKSHAY\_ARDAK](https://discuss.elastic.co/u/AKSHAY_ARDAK)\ **Replies:** 20\ **Last updated:** [November 1, 2019, 1:42pm UTC](https://discuss.elastic.co/t/es-cluster-goes-into-red-frequently/206051 "2019-11-01T13:42:39Z")
Current version of ES = 5.1.1 When the cluster goes into red state below are the logs Master server logs Caused by: org.elasticsearch.transport.NodeDisconnectedException: \[elsdata09\]\[10.10.0.102:9200\]\[cluster:monitor/… --- ## [Machine learning and firewall logs](https://discuss.elastic.co/t/machine-learning-and-firewall-logs/86372)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 10\ **Last updated:** [May 21, 2017, 2:14pm UTC](https://discuss.elastic.co/t/machine-learning-and-firewall-logs/86372 "2017-05-21T14:14:19Z")
hi is there a "how to" for applying ML to firewall logs etc. somewhere,. I checked the link in ML 5.4 posting and it seams it should be straight forward. however I might need more data - timewise ie firewall logs from … --- ## [Can't recieve filebeat logs via Logstash](https://discuss.elastic.co/t/cant-recieve-filebeat-logs-via-logstash/177893)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 15\ **Last updated:** [May 3, 2019, 4:37am UTC](https://discuss.elastic.co/t/cant-recieve-filebeat-logs-via-logstash/177893 "2019-05-03T04:37:28Z")
Hi, I have a problem with recieving logs via logstash from filebeat. I can recieve them directly to elasticsearch but not via Logastash. Logstash conf.d input file: input { beats { type =\> "filebeat" … --- ## [Logstash throwing error .Unexpected character (‘\<’ (code 60))](https://discuss.elastic.co/t/logstash-throwing-error-unexpected-character-code-60/195005)
**Author:** [@prabhat\_ranjan](https://discuss.elastic.co/u/prabhat_ranjan)\ **Replies:** 11\ **Last updated:** [August 21, 2019, 12:14pm UTC](https://discuss.elastic.co/t/logstash-throwing-error-unexpected-character-code-60/195005 "2019-08-21T12:14:58Z")
Hi team, I am using ELK on the cloud. Using filebeat to send data to logstash. Logstash sends to ES which pushes it in Kibana.It appears most of the data is properly parsed and sent to Kibana successfully. There are ins… --- ## [Get file name from index based on content search in index](https://discuss.elastic.co/t/get-file-name-from-index-based-on-content-search-in-index/241283)
**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\ **Replies:** 21\ **Last updated:** [July 15, 2020, 1:34pm UTC](https://discuss.elastic.co/t/get-file-name-from-index-based-on-content-search-in-index/241283 "2020-07-15T13:34:52Z")
Hi, Thanks in advance i have loaded pdf files into index, all the data in the pdf file is treated as content in index. now i want the file name based on the content search. suppose if i search for football in the co… --- ## [Performance Problems](https://discuss.elastic.co/t/performance-problems/348035)
**Author:** [@fgonzalez](https://discuss.elastic.co/u/fgonzalez)\ **Replies:** 27\ **Last updated:** [January 29, 2024, 1:34pm UTC](https://discuss.elastic.co/t/performance-problems/348035 "2024-01-29T13:34:47Z")
Good morning, I have several Elasticsearch clusters and they are giving me performance problems. I have located (I think) the problems but I need you to confirm if I am on the right track. Basic configuration normally … --- ## [Convert json to xml](https://discuss.elastic.co/t/convert-json-to-xml/103863)
**Author:** [@rm1890](https://discuss.elastic.co/u/rm1890)\ **Replies:** 16\ **Last updated:** [October 17, 2017, 11:56am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863 "2017-10-17T11:56:01Z")
hi all, I wonder if there is a way to convert json to xml. So, in my json data one of the fields has string type. It is actually xml content but represented as string in double quotes. Is there any best practice to conv… --- ## [Logstash conf file with not\_analyzed field](https://discuss.elastic.co/t/logstash-conf-file-with-not-analyzed-field/51902)
**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\ **Replies:** 11\ **Last updated:** [August 12, 2016, 2:01pm UTC](https://discuss.elastic.co/t/logstash-conf-file-with-not-analyzed-field/51902 "2016-08-12T14:01:20Z")
Hi , I want to load my Json file to the Elasticsearch and add i need that one of the fields will be not\_analyzed This is my conf file: input { file{ path =\> \["/root/scripts/vdm-server\_10-4\_parasoft\_103.json"\] type =\> … --- ## [How to use Elastic Search CA Cert with OpenTelemetry?](https://discuss.elastic.co/t/how-to-use-elastic-search-ca-cert-with-opentelemetry/345667)
**Author:** [@vsabado](https://discuss.elastic.co/u/vsabado)\ **Replies:** 21\ **Last updated:** [October 25, 2023, 3:59pm UTC](https://discuss.elastic.co/t/how-to-use-elastic-search-ca-cert-with-opentelemetry/345667 "2023-10-25T15:59:34Z")
I downloaded the CA Cert from my Elasticsearch cloud instance and put it in /usr/local/share/ca-certificates/. I then ran update-ca-certificates, which created a .pem file of my certificate under /etc/ssl/certs. I updat… --- ## [Invalid Config File](https://discuss.elastic.co/t/invalid-config-file/58859)
**Author:** [@kmk3173](https://discuss.elastic.co/u/kmk3173)\ **Replies:** 31\ **Last updated:** [August 26, 2016, 2:52pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859 "2016-08-26T14:52:54Z")
When I run --configtest I get the following error: Reason: Expected one of #, at line 45, column 4 after output { if \[type\] == "test2" { elasticsearch { hosts =\> "localhost:… --- ## [Unable to send data using FSCrawler to ElasticSearch](https://discuss.elastic.co/t/unable-to-send-data-using-fscrawler-to-elasticsearch/136738)
**Author:** [@sachinkarora](https://discuss.elastic.co/u/sachinkarora)\ **Replies:** 14\ **Last updated:** [July 9, 2018, 4:06am UTC](https://discuss.elastic.co/t/unable-to-send-data-using-fscrawler-to-elasticsearch/136738 "2018-07-09T04:06:35Z")
Hi, I am newbie to Elasticsearch, so please bear with me. I am trying to index documents (DOC/PDFs/PPT etc.) using FSCrawler. When i tried on a machine which FSCrawler hosted and ElasticSearch running on the same machi… --- ## [If conditional on nested field with IP address](https://discuss.elastic.co/t/if-conditional-on-nested-field-with-ip-address/224739)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 9\ **Last updated:** [March 24, 2020, 4:58pm UTC](https://discuss.elastic.co/t/if-conditional-on-nested-field-with-ip-address/224739 "2020-03-24T16:58:30Z")
I'm trying to create a simple if conditional on the host.name field if it matches an IP address. This is originating from a syslog source and is a static IP. I've tried == with quotes around the IP, escaping the octet do… --- ## [Issue running Filebeat for the first time](https://discuss.elastic.co/t/issue-running-filebeat-for-the-first-time/132406)
**Author:** [@staticfrost](https://discuss.elastic.co/u/staticfrost)\ **Replies:** 17\ **Last updated:** [May 21, 2018, 3:38am UTC](https://discuss.elastic.co/t/issue-running-filebeat-for-the-first-time/132406 "2018-05-21T03:38:48Z")
During filebeat setup this error occurs: It's correct, I'm not using xpack. ERROR instance/beat.go:667 Exiting: 1 error: Error checking if xpack is available: 401 Unauthorized: {"Message":"Your request: '/\_xpack' … --- ## [Cannot connect elasticsearch cluster with security](https://discuss.elastic.co/t/cannot-connect-elasticsearch-cluster-with-security/131751)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 12\ **Last updated:** [May 23, 2018, 3:00pm UTC](https://discuss.elastic.co/t/cannot-connect-elasticsearch-cluster-with-security/131751 "2018-05-23T15:00:14Z")
Hello, I have a docker-compose cluster of elasticsearch nodes that I have created with security enabled, following this how-to now I want to bind it to kibana. unfortunately, the port 5601 is quiet and I don't know why.… --- ## [Elasticsearch 6.7.0 status Yellow in Magento 2.3.1](https://discuss.elastic.co/t/elasticsearch-6-7-0-status-yellow-in-magento-2-3-1/175018)
**Author:** [@manue](https://discuss.elastic.co/u/manue)\ **Replies:** 16\ **Last updated:** [April 5, 2019, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-6-7-0-status-yellow-in-magento-2-3-1/175018 "2019-04-05T08:10:41Z")
I have an Ubuntu 18.04 system installed on a Digital Ocean server. I have installed the Magento 2.3.1 version. I have installed Java and Elasticsearch using the following commands: JAVA sudo add-apt-repository -y ppa:… --- ## [A new replication type: physical replication](https://discuss.elastic.co/t/a-new-replication-type-physical-replication/157296)
**Author:** [@djjsindy](https://discuss.elastic.co/u/djjsindy)\ **Replies:** 9\ **Last updated:** [December 6, 2018, 8:16am UTC](https://discuss.elastic.co/t/a-new-replication-type-physical-replication/157296 "2018-12-06T08:16:03Z")
I read this blog a few months ago ：http://blog.mikemccandless.com/2017/09/lucenes-near-real-time-segment-index.html ,There is indeed a very core case in my work that can be used for this function.I developed the functio… --- ## [Initial attempt at installing Elasticsearch not going well - Windows Server 2016](https://discuss.elastic.co/t/initial-attempt-at-installing-elasticsearch-not-going-well-windows-server-2016/164923)
**Author:** [@kamuzz](https://discuss.elastic.co/u/kamuzz)\ **Replies:** 13\ **Last updated:** [February 15, 2019, 1:03am UTC](https://discuss.elastic.co/t/initial-attempt-at-installing-elasticsearch-not-going-well-windows-server-2016/164923 "2019-02-15T01:03:32Z")
Am trying to perform my first install of Elasticsearch; and I can't get the service to start. We always put our OS and programs on one drive and then the bulk of the data on a second drive. So in this case Windows and … --- ## [Unassigned replication shards on elasticSearch 5.2\[is it a bug?\]](https://discuss.elastic.co/t/unassigned-replication-shards-on-elasticsearch-5-2-is-it-a-bug/173459)
**Author:** [@Adminstrator](https://discuss.elastic.co/u/Adminstrator)\ **Replies:** 21\ **Last updated:** [March 25, 2019, 10:06am UTC](https://discuss.elastic.co/t/unassigned-replication-shards-on-elasticsearch-5-2-is-it-a-bug/173459 "2019-03-25T10:06:30Z")
Hello, I have an elasticsearch cluster with 4 nodes, two process on each node(listen 8200 and 9200 port). Now I have a index with 8 shards and 1 replications. but the index always exsit an unassigned shard. Before ask … --- ## [Is it required to set MetaSpace Limit for ElasticSearch](https://discuss.elastic.co/t/is-it-required-to-set-metaspace-limit-for-elasticsearch/153109)
**Author:** [@jibsonline](https://discuss.elastic.co/u/jibsonline)\ **Replies:** 31\ **Last updated:** [October 19, 2018, 7:48am UTC](https://discuss.elastic.co/t/is-it-required-to-set-metaspace-limit-for-elasticsearch/153109 "2018-10-19T07:48:14Z")
Hi, My configuration: ES: 6.3.2 Java : 1.8.0\_171 CPU : 8 RAM : 16 GB Java Settings : -Xms12g -Xmx12g -XX:MaxMetaspaceSize=1g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatin… --- ## [Snapshot restore is very slow to get started](https://discuss.elastic.co/t/snapshot-restore-is-very-slow-to-get-started/225840)
**Author:** [@Guilherme\_Vieira](https://discuss.elastic.co/u/Guilherme_Vieira)\ **Replies:** 12\ **Last updated:** [April 1, 2020, 8:40am UTC](https://discuss.elastic.co/t/snapshot-restore-is-very-slow-to-get-started/225840 "2020-04-01T08:40:20Z")
I have been observing really slow start up times for restoring snapshots in elasticsearch. I am using graphana as a tool to monitor the cluster. As you can see the snapshot was started around 17:15 and only saw significa… [Previous page](https://discuss.elastic.co/top.md?page=76&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=78&per_page=50&period=all)