# Top **URL:** https://discuss.elastic.co/top.md?page=770&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 771 --- ## [Remove 'field.keyword' from index](https://discuss.elastic.co/t/remove-field-keyword-from-index/239271)
**Author:** [@ajayraghuraj](https://discuss.elastic.co/u/ajayraghuraj)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 12:30pm UTC](https://discuss.elastic.co/t/remove-field-keyword-from-index/239271 "2020-06-30T12:30:26Z")
How do I remove 'field.keyword' from my index ? I should be able to see 'field' only here is my GET \_mapping output { "collectd-2020.06.29" : { "mappings" : { "doc" : { "properties" : { … --- ## [Identify filebeat input with tags and input type](https://discuss.elastic.co/t/identify-filebeat-input-with-tags-and-input-type/102288)
**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\ **Replies:** 1\ **Last updated:** [October 17, 2017, 5:44pm UTC](https://discuss.elastic.co/t/identify-filebeat-input-with-tags-and-input-type/102288 "2017-10-17T17:44:04Z")
HI, I am unsure of how to identify filebeat input both with tags and type input { beats { client\_inactivity\_timeout =\> 86400 port =\> 5044 type =\> "log" } } filter { if "vus" in \[tags\] {… --- ## [Create Alert from index data](https://discuss.elastic.co/t/create-alert-from-index-data/309745)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 4\ **Last updated:** [July 19, 2022, 7:19am UTC](https://discuss.elastic.co/t/create-alert-from-index-data/309745 "2022-07-19T07:19:50Z")
Hi i am using ES Cloud 7.15.1 i am getting log data from my website . now i want to write alert for that data , for example if status code =500 and error = xyz , send the email . i trying using alert from security… --- ## [Interested to contribute towards EUI for GSOC-2020](https://discuss.elastic.co/t/interested-to-contribute-towards-eui-for-gsoc-2020/220533)
**Author:** [@jayanthj737](https://discuss.elastic.co/u/jayanthj737)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 3:53pm UTC](https://discuss.elastic.co/t/interested-to-contribute-towards-eui-for-gsoc-2020/220533 "2020-02-24T15:53:32Z")
Really excited and looking forward towards open source environment. Please guide me through what is to be done and how to proceed. :slight\_smile: --- ## [Multiline codec with Docker log driver logs](https://discuss.elastic.co/t/multiline-codec-with-docker-log-driver-logs/159155)
**Author:** [@sgarap](https://discuss.elastic.co/u/sgarap)\ **Replies:** 3\ **Last updated:** [December 4, 2018, 2:15pm UTC](https://discuss.elastic.co/t/multiline-codec-with-docker-log-driver-logs/159155 "2018-12-04T14:15:28Z")
Hi, I am using logstash 6.5 and filebeat 6.5. I want to ship all docker container logs to logstash/elasticsearch. The docker container logs are formatted through JSON log driver and each line of stack trace is created a… --- ## [IP getting mapped as string](https://discuss.elastic.co/t/ip-getting-mapped-as-string/83587)
**Author:** [@abhi1](https://discuss.elastic.co/u/abhi1)\ **Replies:** 3\ **Last updated:** [May 5, 2017, 3:27pm UTC](https://discuss.elastic.co/t/ip-getting-mapped-as-string/83587 "2017-05-05T15:27:17Z")
Hi, I am new with ELK. I am trying to load a log file via logstash; my log file is in json format. I am able to load it in Elastic, however on closely looking i found out that the ip field is loaded as string instead … --- ## [Sorting on sum metric sub aggregation](https://discuss.elastic.co/t/sorting-on-sum-metric-sub-aggregation/74036)
**Author:** [@msd](https://discuss.elastic.co/u/msd)\ **Replies:** 3\ **Last updated:** [February 6, 2017, 8:30pm UTC](https://discuss.elastic.co/t/sorting-on-sum-metric-sub-aggregation/74036 "2017-02-06T20:30:41Z")
I have a terms aggregation and an sum metric sub aggregation. I am sorting on the sum metric sub aggregation by using "order" and specifying the sum metric sub aggregation name: "order" : { "SumMetricSubAggregationName… --- ## [Traffic Light Dashboard](https://discuss.elastic.co/t/traffic-light-dashboard/86844)
**Author:** [@Bondo](https://discuss.elastic.co/u/Bondo)\ **Replies:** 1\ **Last updated:** [May 23, 2017, 5:50pm UTC](https://discuss.elastic.co/t/traffic-light-dashboard/86844 "2017-05-23T17:50:36Z")
Is there a way to get a traffic light style visualization for a dashboard? --- ## [Inconveniente con el salto de linea](https://discuss.elastic.co/t/inconveniente-con-el-salto-de-linea/51196)
**Author:** [@CValor](https://discuss.elastic.co/u/CValor)\ **Replies:** 1\ **Last updated:** [July 4, 2016, 6:26pm UTC](https://discuss.elastic.co/t/inconveniente-con-el-salto-de-linea/51196 "2016-07-04T18:26:31Z")
Buenas, como menciona el asunto tengo problemas cuando estoy parseando un log en el siguiente formato: "May 19, 2016 7:15:42 PM com.sun.xml.ws.transport.http.HttpAdapter fixQuotesAroundSoapAction INFO: Received WS-I BP n… --- ## [Kibana 4.3.1 died with process out of memory](https://discuss.elastic.co/t/kibana-4-3-1-died-with-process-out-of-memory/42152)
**Author:** [@skynardo](https://discuss.elastic.co/u/skynardo)\ **Replies:** 1\ **Last updated:** [February 18, 2016, 3:45pm UTC](https://discuss.elastic.co/t/kibana-4-3-1-died-with-process-out-of-memory/42152 "2016-02-18T15:45:05Z")
I have a new ELK server running on RHEL 6 that I am starting to ramp up sending application log files to (approx 7Gb/day so far). I found that my Kibana server died yesterday with the following error in stderr: chroot: … --- ## [Can I set built-in users passwords in elasticsearch-keystore?](https://discuss.elastic.co/t/can-i-set-built-in-users-passwords-in-elasticsearch-keystore/197540)
**Author:** [@JanKowalik](https://discuss.elastic.co/u/JanKowalik)\ **Replies:** 2\ **Last updated:** [September 6, 2019, 2:54pm UTC](https://discuss.elastic.co/t/can-i-set-built-in-users-passwords-in-elasticsearch-keystore/197540 "2019-09-06T14:54:26Z")
Hi, Is it possible to set built-in user passwords in elasticsearch-keystore before ES starts up? I know one can set the bootstrap.password in the keystore but what about passwords for elastic, kibana and other built-in… --- ## [Log4j2 with Elasticsearch](https://discuss.elastic.co/t/log4j2-with-elasticsearch/79975)
**Author:** [@rajaram.p](https://discuss.elastic.co/u/rajaram.p)\ **Replies:** 2\ **Last updated:** [March 31, 2017, 9:25pm UTC](https://discuss.elastic.co/t/log4j2-with-elasticsearch/79975 "2017-03-31T21:25:00Z")
Is there a option to send logs directly from log4j2 to elasticsearch? If not what else the option? I beleive logstash is not supporting log4j2 as of now.. --- ## [Clustering with three nodes](https://discuss.elastic.co/t/clustering-with-three-nodes/82533)
**Author:** [@sayalee](https://discuss.elastic.co/u/sayalee)\ **Replies:** 7\ **Last updated:** [April 26, 2017, 11:29am UTC](https://discuss.elastic.co/t/clustering-with-three-nodes/82533 "2017-04-26T11:29:42Z")
Hi, I am trying to do clustering using 3 nodes with below configuration, but not able to achieve the desirable time required to push the logs to elasticsearch. Configuration used: Servers: UBUNTU 16.10 ELK version: 5.… --- ## [Issues configuring SSL TCP Syslog Collection - Palo Alto Integration](https://discuss.elastic.co/t/issues-configuring-ssl-tcp-syslog-collection-palo-alto-integration/339572)
**Author:** [@elasticnub](https://discuss.elastic.co/u/elasticnub)\ **Replies:** 8\ **Last updated:** [July 30, 2023, 6:01pm UTC](https://discuss.elastic.co/t/issues-configuring-ssl-tcp-syslog-collection-palo-alto-integration/339572 "2023-07-30T18:01:35Z")
I am new to the Elastic ecosystem and looking for assistance...trying to configure tcp SSL collection for palo logs from cortex datalake... this cert worked fine with our previous solution so I know nothing is wrong with… --- ## [Multiple events in the same input XML](https://discuss.elastic.co/t/multiple-events-in-the-same-input-xml/123325)
**Author:** [@S\_T](https://discuss.elastic.co/u/S_T)\ **Replies:** 8\ **Last updated:** [March 9, 2018, 9:49pm UTC](https://discuss.elastic.co/t/multiple-events-in-the-same-input-xml/123325 "2018-03-09T21:49:26Z")
After countless hours of trying, I'm about to give up and I'm posting here as a final shot. My goal is to index a XML file that contains multiple events on the same line, and I'm using Logstash to pre-process the XML fi… --- ## [Pipeline with id \[y\] does not exist](https://discuss.elastic.co/t/pipeline-with-id-y-does-not-exist/296625)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 4\ **Last updated:** [February 8, 2022, 5:53pm UTC](https://discuss.elastic.co/t/pipeline-with-id-y-does-not-exist/296625 "2022-02-08T17:53:29Z")
Hello, I've found multiple topics about this very issue however I don't really see a solution. I'm also having a little difficulty understanding it all as I'm fairly new at this. I have each of the ELK components runni… --- ## [Using groovy script within function\_score and access field payload](https://discuss.elastic.co/t/using-groovy-script-within-function-score-and-access-field-payload/28743)
**Author:** [@tpraizler](https://discuss.elastic.co/u/tpraizler)\ **Replies:** 4\ **Last updated:** [September 9, 2015, 3:15pm UTC](https://discuss.elastic.co/t/using-groovy-script-within-function-score-and-access-field-payload/28743 "2015-09-09T15:15:38Z")
I am trying to understand what is the best way to access the payload while using groovy script. I want to do something like this: sum = 0; categories = doc\['category'\].values; for (category in categories){ sum +=… --- ## [Cannot start logstash docker container](https://discuss.elastic.co/t/cannot-start-logstash-docker-container/364525)
**Author:** [@daverodgers](https://discuss.elastic.co/u/daverodgers)\ **Replies:** 2\ **Last updated:** [August 8, 2024, 9:04pm UTC](https://discuss.elastic.co/t/cannot-start-logstash-docker-container/364525 "2024-08-08T21:04:08Z")
Hi. I am trying to create a new ELK stack using docker compose. My ES and Kibana containers are running fine. However i am having issues with logstash. Originally it was starting using the docker compose file. But the … --- ## [Size limit in a query?](https://discuss.elastic.co/t/size-limit-in-a-query/204851)
**Author:** [@roy\_einhorn](https://discuss.elastic.co/u/roy_einhorn)\ **Replies:** 6\ **Last updated:** [October 24, 2019, 2:34pm UTC](https://discuss.elastic.co/t/size-limit-in-a-query/204851 "2019-10-24T14:34:33Z")
hi all , today i did a query in the dev tools in the visualize system, of course that the system gave me an error , when i try to make the same get request in the postman - i get great results , is there a size limit in … --- ## [How to deploy Kibana with preconfigured index pattern](https://discuss.elastic.co/t/how-to-deploy-kibana-with-preconfigured-index-pattern/161555)
**Author:** [@RussellBateman](https://discuss.elastic.co/u/RussellBateman)\ **Replies:** 6\ **Last updated:** [January 4, 2019, 2:12pm UTC](https://discuss.elastic.co/t/how-to-deploy-kibana-with-preconfigured-index-pattern/161555 "2019-01-04T14:12:27Z")
I'm trying to make the leap between developing and using ELK (plus Filebeat) to deploying it. I need to deploy Kibana in such a way as to have index pattern "filebeat-\*" already configured/resident in Kibana so that user… --- ## [TSVB Top hit does not show latest metric, inconsistent behaviour](https://discuss.elastic.co/t/tsvb-top-hit-does-not-show-latest-metric-inconsistent-behaviour/147567)
**Author:** [@dsads8a98d](https://discuss.elastic.co/u/dsads8a98d)\ **Replies:** 6\ **Last updated:** [September 6, 2018, 3:57pm UTC](https://discuss.elastic.co/t/tsvb-top-hit-does-not-show-latest-metric-inconsistent-behaviour/147567 "2018-09-06T15:57:06Z")
We have a TSVB metric using the top hit aggregation. The issue we are seeing is that the top hit is not always shown by the visualisation. If a new document that would match as a top hit enters Elasticsearch and we refre… --- ## [WMS of a local area in Kibana](https://discuss.elastic.co/t/wms-of-a-local-area-in-kibana/62135)
**Author:** [@FGutierres](https://discuss.elastic.co/u/FGutierres)\ **Replies:** 6\ **Last updated:** [October 14, 2016, 4:18pm UTC](https://discuss.elastic.co/t/wms-of-a-local-area-in-kibana/62135 "2016-10-14T16:18:08Z")
Hi all, If possible I need a urgent help. I created a WMS service (image/png) of a local area but in Kibana appears very small compared to geopoints. Is possible to adjust the visualization scheme of Kibana to obs… --- ## [Multicast removal](https://discuss.elastic.co/t/multicast-removal/40799)
**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\ **Replies:** 6\ **Last updated:** [February 4, 2016, 9:05am UTC](https://discuss.elastic.co/t/multicast-removal/40799 "2016-02-04T09:05:55Z")
I just learned So, on Linux, OpenJDK multicast implementation works fine, with IPv4, and also IPv6. Only on Mac OS X, multicast is broken (for ages, mostly because of crappy vendor support). The conclusion is to rem… --- ## [How to move from 3 node cluster to single node](https://discuss.elastic.co/t/how-to-move-from-3-node-cluster-to-single-node/351132)
**Author:** [@Mohammed\_Ahmed](https://discuss.elastic.co/u/Mohammed_Ahmed)\ **Replies:** 5\ **Last updated:** [January 16, 2024, 1:12pm UTC](https://discuss.elastic.co/t/how-to-move-from-3-node-cluster-to-single-node/351132 "2024-01-16T13:12:21Z")
i have a three node cluster below is the config cluster.name: hotels-autosuggest node.name: "es-autosuggest-3" path.logs: /var/log/elasticsearch path.data: /data/elasticsearch/data bootstrap.memory\_lock: true network.ho… --- ## [Obtain the elasticsearch client using RestClient for DELETE and SCROLLAPI](https://discuss.elastic.co/t/obtain-the-elasticsearch-client-using-restclient-for-delete-and-scrollapi/97261)
**Author:** [@Lbr1](https://discuss.elastic.co/u/Lbr1)\ **Replies:** 5\ **Last updated:** [August 25, 2017, 11:46am UTC](https://discuss.elastic.co/t/obtain-the-elasticsearch-client-using-restclient-for-delete-and-scrollapi/97261 "2017-08-25T11:46:55Z")
I’m using elasticsearch to save data coming from twitter. At this point I’m having difficulty deleting data from index and using the Scroll API because after reading about ways to do that, everyone uses the Client and I… --- ## [Shield and Java Transport Client](https://discuss.elastic.co/t/shield-and-java-transport-client/73653)
**Author:** [@gsb](https://discuss.elastic.co/u/gsb)\ **Replies:** 5\ **Last updated:** [February 3, 2017, 4:16pm UTC](https://discuss.elastic.co/t/shield-and-java-transport-client/73653 "2017-02-03T16:16:05Z")
When shield is integrated Java application (over transport layer) using elastic shield transport client, if user enables SSL in elastic shield , Is it mandatory to pass username/password also along with certificate infor… --- ## [Logstahs monitoring index no created](https://discuss.elastic.co/t/logstahs-monitoring-index-no-created/179446)
**Author:** [@Felipe\_Villalobos\_Fo](https://discuss.elastic.co/u/Felipe_Villalobos_Fo)\ **Replies:** 7\ **Last updated:** [May 9, 2019, 6:38am UTC](https://discuss.elastic.co/t/logstahs-monitoring-index-no-created/179446 "2019-05-09T06:38:56Z")
I'm having the same problem as the topic describe here. I can pipeline information with the output elasticsearch plugin, but the index for monitoring does not get created. My configuration for the monitoring is enabled… --- ## [How to parse my json logs as grok pattern in logstash's ".config" file](https://discuss.elastic.co/t/how-to-parse-my-json-logs-as-grok-pattern-in-logstashs-config-file/157915)
**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\ **Replies:** 2\ **Last updated:** [December 3, 2018, 8:37pm UTC](https://discuss.elastic.co/t/how-to-parse-my-json-logs-as-grok-pattern-in-logstashs-config-file/157915 "2018-12-03T20:37:28Z")
Hi, my log file looks like the following: {"version":"0","id":"37a685ca-2e11-6b2-85d5-f09101abc58cec7","detail-type":"GuardDuty Finding","source":"aws.guardduty","account":"\*\*\*\*\*\*1326","time":"2018-11-09T12:07:07Z","r… --- ## [Painless script for metric fields calculation](https://discuss.elastic.co/t/painless-script-for-metric-fields-calculation/76431)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 2\ **Last updated:** [February 26, 2017, 2:02am UTC](https://discuss.elastic.co/t/painless-script-for-metric-fields-calculation/76431 "2017-02-26T02:02:21Z")
Can I use painless script for the metric fields such as sum? I already have two metric fields: sum(field1) and sum(field2) I want to create data table in Kibana with one script field value = sum(field1) / sum(field2) Is … --- ## [Min score](https://discuss.elastic.co/t/min-score/80398)
**Author:** [@Greentea](https://discuss.elastic.co/u/Greentea)\ **Replies:** 3\ **Last updated:** [March 29, 2017, 8:49am UTC](https://discuss.elastic.co/t/min-score/80398 "2017-03-29T08:49:45Z")
Hi! I want to ask is it possible to use the highest score to calculate the min score? Just like the min score is equal to the half of the highest score? may be like "min\_score": max\_score/2 --- ## ["reason": "Unrecognized character escape '\['](https://discuss.elastic.co/t/reason-unrecognized-character-escape/155638)
**Author:** [@aabababba](https://discuss.elastic.co/u/aabababba)\ **Replies:** 2\ **Last updated:** [November 7, 2018, 1:53am UTC](https://discuss.elastic.co/t/reason-unrecognized-character-escape/155638 "2018-11-07T01:53:22Z")
anybody help... --- ## [Rally: Errror: Cannot update teams in /root/.rally/benchmarks/teams/default](https://discuss.elastic.co/t/rally-errror-cannot-update-teams-in-root-rally-benchmarks-teams-default/265332)
**Author:** [@LuisSchaefer](https://discuss.elastic.co/u/LuisSchaefer)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 11:38am UTC](https://discuss.elastic.co/t/rally-errror-cannot-update-teams-in-root-rally-benchmarks-teams-default/265332 "2021-02-24T11:38:30Z")
Hi guys, I use Rally 1.4.1, RHEL 7.9, offline. I didnt't find any similiar topic so I hope somebody could help me. Thanks Input: esrally --distribution-version=7.10.2 --track-path=/root/.rally/benchmarks/tracks/defa… --- ## [Disable scoring in Elastic Search and improve search performance](https://discuss.elastic.co/t/disable-scoring-in-elastic-search-and-improve-search-performance/74841)
**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\ **Replies:** 1\ **Last updated:** [February 13, 2017, 8:42am UTC](https://discuss.elastic.co/t/disable-scoring-in-elastic-search-and-improve-search-performance/74841 "2017-02-13T08:42:25Z")
Hello, I want to improve the speed and performance of my search queries. Currently, I am using filtered queries and also applying the "fuzziness" parameter on some of the fields in my index while searching. I have al… --- ## [Getting error like master not discovered or elected yet, an election requires at least 2 nodes](https://discuss.elastic.co/t/getting-error-like-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/227901)
**Author:** [@raj31391](https://discuss.elastic.co/u/raj31391)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 12:39pm UTC](https://discuss.elastic.co/t/getting-error-like-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/227901 "2020-04-14T12:39:45Z")
Getting below error while starting the elastic search node \[2020-04-14T16:53:34,444\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[node-1\] master not discovered or elected yet, an election requires at least 2 no… --- ## [Unable to add key-value pair to keystore from command-line](https://discuss.elastic.co/t/unable-to-add-key-value-pair-to-keystore-from-command-line/224941)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 4\ **Last updated:** [March 30, 2020, 11:34am UTC](https://discuss.elastic.co/t/unable-to-add-key-value-pair-to-keystore-from-command-line/224941 "2020-03-30T11:34:14Z")
In ES 6.8: I'm unable to add a key-value pair from command-line using keystore: /usr/share/elasticsearch/bin/elasticsearch-keystore add -E "foo=bar" ERROR: The setting name can not be null. What could I be missing? I… --- ## [Kibana not work, after elasticsearch cluster is red](https://discuss.elastic.co/t/kibana-not-work-after-elasticsearch-cluster-is-red/154277)
**Author:** [@jsyu32](https://discuss.elastic.co/u/jsyu32)\ **Replies:** 4\ **Last updated:** [October 30, 2018, 1:06pm UTC](https://discuss.elastic.co/t/kibana-not-work-after-elasticsearch-cluster-is-red/154277 "2018-10-30T13:06:26Z")
2 of 3 data nodes are down. The cluster turns red, and kibana doesn't work. How to fix it? --- ## [My stopwords filter is not working](https://discuss.elastic.co/t/my-stopwords-filter-is-not-working/7494)
**Author:** [@lyes\_zaiko](https://discuss.elastic.co/u/lyes_zaiko)\ **Replies:** 4\ **Last updated:** [April 30, 2012, 12:52pm UTC](https://discuss.elastic.co/t/my-stopwords-filter-is-not-working/7494 "2012-04-30T12:52:05Z")
Hi everybody, can someone tell me if the following custom analyzer definition is correct because the stopword filter seems to be not working? "analysis" : { "analyzer" : { "default-a… --- ## [How to align 2 lines of text in visual builder markdown](https://discuss.elastic.co/t/how-to-align-2-lines-of-text-in-visual-builder-markdown/154615)
**Author:** [@Susmitha\_Devathi](https://discuss.elastic.co/u/Susmitha_Devathi)\ **Replies:** 2\ **Last updated:** [October 31, 2018, 2:44am UTC](https://discuss.elastic.co/t/how-to-align-2-lines-of-text-in-visual-builder-markdown/154615 "2018-10-31T02:44:16Z")
Hi Team, I want to align 1 line of text in visual builder markdown to left and 2nd line to center. As shown in the image ,i want 1st line to be aligned to left and 2nd alignment to center. Could you please let me know… --- ## ["processor \[remove\] doesn't support one or more provided configuration parameters \[ignore\_missing\]](https://discuss.elastic.co/t/processor-remove-doesnt-support-one-or-more-provided-configuration-parameters-ignore-missing/147653)
**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\ **Replies:** 2\ **Last updated:** [September 7, 2018, 5:44am UTC](https://discuss.elastic.co/t/processor-remove-doesnt-support-one-or-more-provided-configuration-parameters-ignore-missing/147653 "2018-09-07T05:44:59Z")
I'm studying the ingest node and just write a simple pipeline, PUT \_ingest/pipeline/my-lab1 { "description": "to parse the filebeat message", "version": 101, "processors": \[ { "kv": { … --- ## [Kibana inline script](https://discuss.elastic.co/t/kibana-inline-script/245331)
**Author:** [@kinlee](https://discuss.elastic.co/u/kinlee)\ **Replies:** 6\ **Last updated:** [September 2, 2020, 1:00am UTC](https://discuss.elastic.co/t/kibana-inline-script/245331 "2020-09-02T01:00:09Z")
As per docu, it says "If you use Kibana, set script.allowed\_types to both or inline . Some Kibana features rely on inline scripts and do not function as expected if Elasticsearch does not allow inline scripts." wha… --- ## [Error parsing JSON content from Http](https://discuss.elastic.co/t/error-parsing-json-content-from-http/190069)
**Author:** [@SamDi](https://discuss.elastic.co/u/SamDi)\ **Replies:** 6\ **Last updated:** [July 15, 2019, 10:14am UTC](https://discuss.elastic.co/t/error-parsing-json-content-from-http/190069 "2019-07-15T10:14:08Z")
Hello to everybody. I am really noob on elastic stack and I am trying to import some json information with the HTTP input to Elasticsarch, but I recive a parse error: exception=\>#\ **Author:** [@fionamacd](https://discuss.elastic.co/u/fionamacd)\ **Replies:** 5\ **Last updated:** [October 22, 2018, 6:44pm UTC](https://discuss.elastic.co/t/logstash-insufficient-memory-for-java-runtime-environment/153460 "2018-10-22T18:44:33Z") After adding the filebeat agents on a number of servers I am seeing memory errors in Logstash - I was just trying to get the logstash version to make sure I had the current one and get this error: ubuntu@ip-10-152-3-25:… --- ## [Replace multiple value in a specified field](https://discuss.elastic.co/t/replace-multiple-value-in-a-specified-field/134780)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 5\ **Last updated:** [June 12, 2018, 6:59am UTC](https://discuss.elastic.co/t/replace-multiple-value-in-a-specified-field/134780 "2018-06-12T06:59:25Z")
Hi, I want to replace 6 to TCP and 17 to UDP in the PROTOCOL field. this is my logstash config: input{ tcp{ host =\> "163.19.X.X" port =\> 5510 codec =\> json … --- ## [How to disable Zen discovery in Elastic-search 5.5?](https://discuss.elastic.co/t/how-to-disable-zen-discovery-in-elastic-search-5-5/100994)
**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 5\ **Last updated:** [September 21, 2017, 7:47am UTC](https://discuss.elastic.co/t/how-to-disable-zen-discovery-in-elastic-search-5-5/100994 "2017-09-21T07:47:42Z")
As I am running multiple instances of elastic-search on the same server with different versions elasticsearch is trying to form a cluster for which it is searching for different nodes I Don't want that thing to happen so… --- ## [Best way to reindex very active index](https://discuss.elastic.co/t/best-way-to-reindex-very-active-index/84979)
**Author:** [@courtney](https://discuss.elastic.co/u/courtney)\ **Replies:** 3\ **Last updated:** [May 9, 2017, 11:13am UTC](https://discuss.elastic.co/t/best-way-to-reindex-very-active-index/84979 "2017-05-09T11:13:48Z")
When migrating to a new index, what's the best way to handle ensuring there's no differential between the two indexes and migrating aliases for zero downtime. So let's say we are adding 10k documents per second in an i… --- ## [How to run Logstash multiple instance](https://discuss.elastic.co/t/how-to-run-logstash-multiple-instance/46959)
**Author:** [@ggilat](https://discuss.elastic.co/u/ggilat)\ **Replies:** 8\ **Last updated:** [April 11, 2016, 9:23am UTC](https://discuss.elastic.co/t/how-to-run-logstash-multiple-instance/46959 "2016-04-11T09:23:01Z")
hello, in trying to run second logstash instance with a different config file (for syslog events) i'm getting this error: "Pipeline aborted due to error {:exception=\># how can i change the port so i want clash? t… --- ## [Tuning elasticsearch node client non-heap memory consumption](https://discuss.elastic.co/t/tuning-elasticsearch-node-client-non-heap-memory-consumption/21601)
**Author:** [@Itai\_Frenkel](https://discuss.elastic.co/u/Itai_Frenkel)\ **Replies:** 3\ **Last updated:** [January 13, 2015, 10:10pm UTC](https://discuss.elastic.co/t/tuning-elasticsearch-node-client-non-heap-memory-consumption/21601 "2015-01-13T22:10:33Z")
Hello, We are running a node client on each machine with small JVM heap -Xms384m -Xmx384m -Xss256k which is suitable for our use case. There are however another 285MB non-heap memory (676-389=285). How can this e… --- ## [Increasing ES search throughput](https://discuss.elastic.co/t/increasing-es-search-throughput/8750)
**Author:** [@sumitborar](https://discuss.elastic.co/u/sumitborar)\ **Replies:** 3\ **Last updated:** [August 22, 2012, 7:40pm UTC](https://discuss.elastic.co/t/increasing-es-search-throughput/8750 "2012-08-22T19:40:35Z")
I have 15 node cluster with 14 data nodes and 1 master node. We are indexing about 300M documents with 7 shards and 1 replica. Each node has 24G of RAM . Right now I am using mmapfs for index store and ES is using o… --- ## [Index Size is 4 times than a document size?](https://discuss.elastic.co/t/index-size-is-4-times-than-a-document-size/47272)
**Author:** [@vasa47](https://discuss.elastic.co/u/vasa47)\ **Replies:** 7\ **Last updated:** [April 19, 2016, 9:42am UTC](https://discuss.elastic.co/t/index-size-is-4-times-than-a-document-size/47272 "2016-04-19T09:42:49Z")
With this below setting and mapping I indexed a text file of 1.3MB and now my index size in data/clusters\_name/nodes/ size is almost 4 times. What is happening? what settings am I missing? "settings" : { … --- ## [Java elasticsearch-java-8.5.1 error on deserialisation of Instant Field](https://discuss.elastic.co/t/java-elasticsearch-java-8-5-1-error-on-deserialisation-of-instant-field/320681)
**Author:** [@Philip\_Bannon](https://discuss.elastic.co/u/Philip_Bannon)\ **Replies:** 1\ **Last updated:** [December 7, 2022, 12:36pm UTC](https://discuss.elastic.co/t/java-elasticsearch-java-8-5-1-error-on-deserialisation-of-instant-field/320681 "2022-12-07T12:36:17Z")
Hi, I have a Spring Boot app (Version 2.7.6) and I'm using the java API client elasticsearch-java-8.5.1. I'm doing a basic query but my object in ES contains an INSTANT value (see POJO below). When I perform the query I… [Previous page](https://discuss.elastic.co/top.md?page=769&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=771&per_page=50&period=all)