# Top **URL:** https://discuss.elastic.co/top.md?page=777&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 778 --- ## [Kafka Consumer cluster that can read dynamic topics and bulk index the data](https://discuss.elastic.co/t/kafka-consumer-cluster-that-can-read-dynamic-topics-and-bulk-index-the-data/29295)
**Author:** [@Ramky](https://discuss.elastic.co/u/Ramky)\ **Replies:** 4\ **Last updated:** [September 16, 2015, 10:01am UTC](https://discuss.elastic.co/t/kafka-consumer-cluster-that-can-read-dynamic-topics-and-bulk-index-the-data/29295 "2015-09-16T10:01:48Z")
I need to build scalable Kafka consumer cluster, which reads data from dynamically added Kafka topics and bulk index the data to Elastic-search. At present,i developed a java consumer client jar which reads data from giv… --- ## [Index "failed to merge"](https://discuss.elastic.co/t/index-failed-to-merge/5661)
**Author:** [@Kenneth\_Loafman](https://discuss.elastic.co/u/Kenneth_Loafman)\ **Replies:** 4\ **Last updated:** [October 24, 2011, 11:30am UTC](https://discuss.elastic.co/t/index-failed-to-merge/5661 "2011-10-24T11:30:33Z")
Hi, We're got the following problem on the 15th: \[2011-10-15 16:10:19,023\]\[WARN \]\[index.merge.scheduler \] \[Rand, Daniel\] \[co0181ca0607\]\[0\] failed to merge org.apache.lucene.index.CorruptIndexException: docs out … --- ## [Can I put the label value outside the vertical bar?](https://discuss.elastic.co/t/can-i-put-the-label-value-outside-the-vertical-bar/282077)
**Author:** [@El\_busc](https://discuss.elastic.co/u/El_busc)\ **Replies:** 5\ **Last updated:** [August 24, 2021, 1:52pm UTC](https://discuss.elastic.co/t/can-i-put-the-label-value-outside-the-vertical-bar/282077 "2021-08-24T13:52:16Z")
Hello in previous versions of kibana it was possible to choose where the bar label would be, but in the current version I'm not able to do that, is there any way to put the label value above the bar and would it be possi… --- ## [Kibana visualizationのidについて](https://discuss.elastic.co/t/kibana-visualization-id/91610)
**Author:** [@mikeda](https://discuss.elastic.co/u/mikeda)\ **Replies:** 5\ **Last updated:** [July 4, 2017, 5:12am UTC](https://discuss.elastic.co/t/kibana-visualization-id/91610 "2017-07-04T05:12:42Z")
kibana/elasticsearch 5.4.1を使用しています。 (質問1) kibanaにおいて、visualizeした各オブジェクトには、 固有の\_idが動的に割り振られるかと思います。 動的に割当てられる\_idを、初めからユニークなidを指定してオブジェクトを作成することはできないのでしょうか? (質問2) この\_idを、別のユニークなidに変更してもよいのでしょうか? 具体的には、 1. \[Management… --- ## [Elastic search default values for a field](https://discuss.elastic.co/t/elastic-search-default-values-for-a-field/81406)
**Author:** [@Shushant\_Arora](https://discuss.elastic.co/u/Shushant_Arora)\ **Replies:** 1\ **Last updated:** [April 6, 2017, 7:32am UTC](https://discuss.elastic.co/t/elastic-search-default-values-for-a-field/81406 "2017-04-06T07:32:06Z")
Hi Is it possible to assign default values for a field , when a document does not have that field treat it as default assigned and process. This is different from null\_value where we need to explicitly set null for a… --- ## [How to page for terms aggs?](https://discuss.elastic.co/t/how-to-page-for-terms-aggs/50635)
**Author:** [@changxy](https://discuss.elastic.co/u/changxy)\ **Replies:** 2\ **Last updated:** [May 23, 2016, 3:11am UTC](https://discuss.elastic.co/t/how-to-page-for-terms-aggs/50635 "2016-05-23T03:11:02Z")
my request like this: GET \_search { "query": { "bool": { "must": \[ { "match": { "class": "Article" } }, { "match\_phrase": { "title": "happy" } } \] } }, "size": 0, "aggs": { "removefileiddup": { "te… --- ## [We couldn't log you in. Please try again](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929)
**Author:** [@daniel\_quiroz](https://discuss.elastic.co/u/daniel_quiroz)\ **Replies:** 6\ **Last updated:** [August 18, 2023, 4:50pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929 "2023-08-18T16:50:13Z")
Hi Everyone, I'm install elastic and kibana on Centos 7. They was working but when I restart the server, the services now print "We couldn't log you in. Please try again." in Kibana's login. I look the service status a… --- ## [Is it possible to define a node Hot and warm?](https://discuss.elastic.co/t/is-it-possible-to-define-a-node-hot-and-warm/231171)
**Author:** [@Kwiskas](https://discuss.elastic.co/u/Kwiskas)\ **Replies:** 6\ **Last updated:** [May 7, 2020, 7:19am UTC](https://discuss.elastic.co/t/is-it-possible-to-define-a-node-hot-and-warm/231171 "2020-05-07T07:19:55Z")
Hello On my company we have 3 data nodes connected on a master node I need to define a lifecycle policy But to do so I need to define which node is hot, warm, and cold my question: can I define a node with several ty… --- ## [IndexSizeError: Index or size is negative or greater than the allowed amount](https://discuss.elastic.co/t/indexsizeerror-index-or-size-is-negative-or-greater-than-the-allowed-amount/164378)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 3\ **Last updated:** [January 17, 2019, 3:53am UTC](https://discuss.elastic.co/t/indexsizeerror-index-or-size-is-negative-or-greater-than-the-allowed-amount/164378 "2019-01-17T03:53:10Z")
Kibana user keeps on getting following "Something went wrong" message: IndexSizeError: Index or size is negative or greater than the allowed amount ... tried to "clear your session" and also tried with different brow… --- ## [Managing Elastic Search - Is Curl the only way?](https://discuss.elastic.co/t/managing-elastic-search-is-curl-the-only-way/121299)
**Author:** [@Mike2](https://discuss.elastic.co/u/Mike2)\ **Replies:** 3\ **Last updated:** [February 24, 2018, 11:35am UTC](https://discuss.elastic.co/t/managing-elastic-search-is-curl-the-only-way/121299 "2018-02-24T11:35:25Z")
Hi - I'm a beginner using ELK, and as a beginner, I imported some logs that ended up having numeric fields imported as text. So, I fixed the log stash process to convert those correctly, and now my indices are conflicte… --- ## [How do large organizations manage beats deployment?](https://discuss.elastic.co/t/how-do-large-organizations-manage-beats-deployment/51044)
**Author:** [@fetchmelogs](https://discuss.elastic.co/u/fetchmelogs)\ **Replies:** 3\ **Last updated:** [June 3, 2016, 12:35pm UTC](https://discuss.elastic.co/t/how-do-large-organizations-manage-beats-deployment/51044 "2016-06-03T12:35:11Z")
Suppose I had to deploy Winlogbeat to 100 Windows servers and 1000 Windows workstations ; what is the best way to proceed with deploying winlogbeat to all these end-points? Suppose I had to make a change to the config… --- ## [How to Turn OFF analyzed for one field in the logstash-\* index](https://discuss.elastic.co/t/how-to-turn-off-analyzed-for-one-field-in-the-logstash-index/52155)
**Author:** [@dkspace](https://discuss.elastic.co/u/dkspace)\ **Replies:** 2\ **Last updated:** [June 27, 2016, 10:42am UTC](https://discuss.elastic.co/t/how-to-turn-off-analyzed-for-one-field-in-the-logstash-index/52155 "2016-06-27T10:42:12Z")
Dear colleagues. i have Kibana Elasticsearch fluentd. i import data via syslog (logstash format) and i see all new fields have option analysed On. But i not need it : top 10 and etc diagram is going by separated words fr… --- ## [Elasticsearch에서 인덱싱된 문서의 특정 필드의 analyze된 결과를 보는 방법이 있을까요?](https://discuss.elastic.co/t/elasticsearch-analyze/162884)
**Author:** [@AnKyoung](https://discuss.elastic.co/u/AnKyoung)\ **Replies:** 4\ **Last updated:** [January 7, 2019, 12:37am UTC](https://discuss.elastic.co/t/elasticsearch-analyze/162884 "2019-01-07T00:37:31Z")
https://www.elastic.co/guide/en/elasticsearch/plugins/6.x/analysis-nori-tokenizer.html 위 내용을 이용해서 특정 문장의 analyze 결과를 보는 방법이 있는걸 확인하고 나서 현재 인덱싱된 문서의 특정 필드의 analyze 결과를 보는 방법도 있을것 같은데 아무리 찾아도 방법이 안보여서요 --- ## [Windows Event Log to Syslog server](https://discuss.elastic.co/t/windows-event-log-to-syslog-server/124665)
**Author:** [@mun](https://discuss.elastic.co/u/mun)\ **Replies:** 4\ **Last updated:** [March 26, 2018, 1:26am UTC](https://discuss.elastic.co/t/windows-event-log-to-syslog-server/124665 "2018-03-26T01:26:10Z")
Hi, Is it possible to send windows event log to syslog server using winlogbeat? Thank You. --- ## [How to read each array item into a map of key value pair?](https://discuss.elastic.co/t/how-to-read-each-array-item-into-a-map-of-key-value-pair/284769)
**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\ **Replies:** 7\ **Last updated:** [September 23, 2021, 3:34am UTC](https://discuss.elastic.co/t/how-to-read-each-array-item-into-a-map-of-key-value-pair/284769 "2021-09-23T03:34:45Z")
I have a multiline message field, msg= "CPU=9% TotalMem=12288 MB FreeMem=3895 MB AMQMemoryPercentUsage=0% n0-kkk size=0 inFlight=0 enqRate=0 deqRate=0 n1-xxx size=1 inFlight=1 enqRate=13 deqRate=2 n2-yyyy-oo si… --- ## [Default dashboard for heartbeat not working](https://discuss.elastic.co/t/default-dashboard-for-heartbeat-not-working/282743)
**Author:** [@selin](https://discuss.elastic.co/u/selin)\ **Replies:** 7\ **Last updated:** [August 30, 2021, 2:05pm UTC](https://discuss.elastic.co/t/default-dashboard-for-heartbeat-not-working/282743 "2021-08-30T14:05:02Z")
Hi can I know is there default dashboard for heartbeat? I try enable setup dashboard. But in dashboard section i cant view it. U have any idea --- ## [\[FATAL\] Elasticsearch BulkHandler: Unrecoverable indexing failure \[400\]](https://discuss.elastic.co/t/fatal-elasticsearch-bulkhandler-unrecoverable-indexing-failure-400/163957)
**Author:** [@netops](https://discuss.elastic.co/u/netops)\ **Replies:** 7\ **Last updated:** [January 15, 2019, 12:22pm UTC](https://discuss.elastic.co/t/fatal-elasticsearch-bulkhandler-unrecoverable-indexing-failure-400/163957 "2019-01-15T12:22:38Z")
Hello, We are using Elasticesearch 6.5.4 with SugarCRM Professional version 8.0.2 on site version Global search is working fine within Sugar, but we are seeing this in the elasticesearch.log It is showing the same ind… --- ## [ElasticSearch cloud-aws plugin with riak s3: snapshot is done, failed to finalize snapshot](https://discuss.elastic.co/t/elasticsearch-cloud-aws-plugin-with-riak-s3-snapshot-is-done-failed-to-finalize-snapshot/54810)
**Author:** [@Anna\_Nowak](https://discuss.elastic.co/u/Anna_Nowak)\ **Replies:** 7\ **Last updated:** [July 8, 2016, 1:22pm UTC](https://discuss.elastic.co/t/elasticsearch-cloud-aws-plugin-with-riak-s3-snapshot-is-done-failed-to-finalize-snapshot/54810 "2016-07-08T13:22:10Z")
I’m trying to create Elasticsearch snapshot into riak s3 repository using cloud-aws (Elasticsearch plugin). I’m using: Red Hat Enterprise Linux Server release 7.2 (Maipo) java version "1.8.0\_60" Java(TM) SE Runtime En… --- ## [Encountered a retryable error (will retry with exponential backoff) {:code=\>413,](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-413/291417)
**Author:** [@danushkalakmina](https://discuss.elastic.co/u/danushkalakmina)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 2:36pm UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-413/291417 "2021-12-10T14:36:20Z")
Hi there i got this error in my logstash while sending logs to the Elasticsearch cluster.When i restarted the logstash service it got fix. But after 1-2 days it will happen recursively. \[2021-12-10T10:17:52,948\]\[ERROR\]… --- ## [Batch size is too large, size must be less than or equal to: \[10000\] but was \[10001\]. Scroll batch sizes cost as much memory as result windows so they are controlled by the \[index.max\_result\_window\] index level setting](https://discuss.elastic.co/t/batch-size-is-too-large-size-must-be-less-than-or-equal-to-10000-but-was-10001-scroll-batch-sizes-cost-as-much-memory-as-result-windows-so-they-are-controlled-by-the-index-max-result-window-index-level-setting/84876)
**Author:** [@leln](https://discuss.elastic.co/u/leln)\ **Replies:** 1\ **Last updated:** [May 9, 2017, 9:37am UTC](https://discuss.elastic.co/t/batch-size-is-too-large-size-must-be-less-than-or-equal-to-10000-but-was-10001-scroll-batch-sizes-cost-as-much-memory-as-result-windows-so-they-are-controlled-by-the-index-max-result-window-index-level-setting/84876 "2017-05-09T09:37:34Z")
Hello, I'm using Elasticsearch 5.1.1 and Nest 5.0 and I'm trying to search items by query. This is the code: var searchDescriptor = new SearchDescriptor() .Index(indexName) .Size(itemsPerShard) .StoredFields((Field)"Id… --- ## [Can we hide xaxis and y axis labels on kibana visualization](https://discuss.elastic.co/t/can-we-hide-xaxis-and-y-axis-labels-on-kibana-visualization/40258)
**Author:** [@srujani](https://discuss.elastic.co/u/srujani)\ **Replies:** 1\ **Last updated:** [January 27, 2016, 6:24pm UTC](https://discuss.elastic.co/t/can-we-hide-xaxis-and-y-axis-labels-on-kibana-visualization/40258 "2016-01-27T18:24:19Z")
Hi, I would like to hide x and y axis labels in vertical bar chart in visualization. Please let me know how can i achieve that. --- ## [Elasticsearch not responding for CAT and other apis](https://discuss.elastic.co/t/elasticsearch-not-responding-for-cat-and-other-apis/216659)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 5\ **Last updated:** [January 28, 2020, 8:17am UTC](https://discuss.elastic.co/t/elasticsearch-not-responding-for-cat-and-other-apis/216659 "2020-01-28T08:17:26Z")
Hi, Env details: I am using ELK 7.0.1 in kubernetes environment. I have a 9 node cluster which has 3 master pods, 3 data pods and 3 client pods. Memory & cpu limits are configured as: Master pods: RAM: no limit, CP… --- ## [Logstash processing the same file again and again from a remote shared path](https://discuss.elastic.co/t/logstash-processing-the-same-file-again-and-again-from-a-remote-shared-path/96955)
**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\ **Replies:** 5\ **Last updated:** [August 14, 2017, 1:55pm UTC](https://discuss.elastic.co/t/logstash-processing-the-same-file-again-and-again-from-a-remote-shared-path/96955 "2017-08-14T13:55:30Z")
Hi, I have a logfile in a shared path (//XXXX/storage/files/test.log) with 100 lines. I am processing the it with logstash with the below input cong: input { file { path =\> "//XXXX/storage/files/test.log" start\_pos… --- ## [Filter by min nested value](https://discuss.elastic.co/t/filter-by-min-nested-value/94220)
**Author:** [@IsaacInstrumental](https://discuss.elastic.co/u/IsaacInstrumental)\ **Replies:** 5\ **Last updated:** [July 24, 2017, 8:00pm UTC](https://discuss.elastic.co/t/filter-by-min-nested-value/94220 "2017-07-24T20:00:19Z")
I have a bunch of documents of the form: \[ { title: string, comments: \[ comment\_body: string, created\_date: date, \], }, ... \] How can I get the posts whose … --- ## [Json string to searchresponse conversion](https://discuss.elastic.co/t/json-string-to-searchresponse-conversion/43063)
**Author:** [@rahulcse](https://discuss.elastic.co/u/rahulcse)\ **Replies:** 5\ **Last updated:** [March 1, 2016, 8:07pm UTC](https://discuss.elastic.co/t/json-string-to-searchresponse-conversion/43063 "2016-03-01T20:07:09Z")
Hi, I am looking for ways to convert json string from ES to searchresponse object. Thanks for your help in advance. --- ## [Lucene Hackdays in October '18](https://discuss.elastic.co/t/lucene-hackdays-in-october-18/139710)
**Author:** [@Charlie\_Hull](https://discuss.elastic.co/u/Charlie_Hull)\ **Replies:** 0\ **Last updated:** [July 12, 2018, 9:29am UTC](https://discuss.elastic.co/t/lucene-hackdays-in-october-18/139710 "2018-07-12T09:29:54Z")
Hi all, A couple of years ago I ran two free Lucene Hackdays in London and Boston (the latter just before Lucene Revolution). Here's what we got up to with the kind support of Alfresco, Bloomberg, BA Insight and Lucidwo… --- ## [How to handle Partial snapshots? Drop and initiate a new snapshot?](https://discuss.elastic.co/t/how-to-handle-partial-snapshots-drop-and-initiate-a-new-snapshot/77084)
**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\ **Replies:** 0\ **Last updated:** [March 2, 2017, 4:18am UTC](https://discuss.elastic.co/t/how-to-handle-partial-snapshots-drop-and-initiate-a-new-snapshot/77084 "2017-03-02T04:18:29Z")
Hi There, I want to know the behavior of the snapshot. I have a partial snapshot created(because of primary shard not available for some time) How to handle this partial snapshot now? Should I initiate a new sna… --- ## [Logstash multithreading?](https://discuss.elastic.co/t/logstash-multithreading/183036)
**Author:** [@dkuiate1](https://discuss.elastic.co/u/dkuiate1)\ **Replies:** 1\ **Last updated:** [May 31, 2019, 3:31pm UTC](https://discuss.elastic.co/t/logstash-multithreading/183036 "2019-05-31T15:31:03Z")
Hello everyone !! I have a logstash config file that has 15 inputs. When running logstash in debug mode i can realize that every input are read one by one. if one input is blocked, it tries several time to load it befor… --- ## [Maximum score of a field in script score - ElasticSearch](https://discuss.elastic.co/t/maximum-score-of-a-field-in-script-score-elasticsearch/76047)
**Author:** [@M.Prabha\_karan](https://discuss.elastic.co/u/M.Prabha_karan)\ **Replies:** 2\ **Last updated:** [February 27, 2017, 10:41am UTC](https://discuss.elastic.co/t/maximum-score-of-a-field-in-script-score-elasticsearch/76047 "2017-02-27T10:41:57Z")
I'm using ElasticSearch 2.4.0 . Using the script\_score, I'm calculating custom score like '{"script":"return ( ((doc.field\_a.value)\* 0.5) + (\_score \* 0.5) );"}' I want something like (some normalisation effect on the… --- ## [Kibana\_system privileges - unauthorized for user \[kibana\_system\] with roles \[kibana\_system\] on indices](https://discuss.elastic.co/t/kibana-system-privileges-unauthorized-for-user-kibana-system-with-roles-kibana-system-on-indices/303505)
**Author:** [@Penchev](https://discuss.elastic.co/u/Penchev)\ **Replies:** 3\ **Last updated:** [May 6, 2022, 3:01pm UTC](https://discuss.elastic.co/t/kibana-system-privileges-unauthorized-for-user-kibana-system-with-roles-kibana-system-on-indices/303505 "2022-05-06T15:01:23Z")
Hi, I changed the deprecated user kibana to kibana\_system and now I have this error. {"type":"log","@timestamp":"2022-04-28T02:45:00-04:00","tags":\["error","plugins","wazuh","monitoring"\],"pid":29306,"message":"secur… --- ## [Change background color and text conditionally - OpenSearch Dashboard](https://discuss.elastic.co/t/change-background-color-and-text-conditionally-opensearch-dashboard/297262)
**Author:** [@Raphael\_Carneiro](https://discuss.elastic.co/u/Raphael_Carneiro)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 7:28am UTC](https://discuss.elastic.co/t/change-background-color-and-text-conditionally-opensearch-dashboard/297262 "2022-02-16T07:28:51Z")
Hi, I want to build a very simple visualization based on Count aggregation to be added to a dashboard. This visualization should look just like this: This text and background should change between OK/NOK based on a c… --- ## [Dot not used as delimiter](https://discuss.elastic.co/t/dot-not-used-as-delimiter/12468)
**Author:** [@oto\_iashvili](https://discuss.elastic.co/u/oto_iashvili)\ **Replies:** 3\ **Last updated:** [June 19, 2013, 9:29pm UTC](https://discuss.elastic.co/t/dot-not-used-as-delimiter/12468 "2013-06-19T21:29:16Z")
Hi, I just find out that if texte is something like 'computer.rails' , search on "computer" will not find this text. If I change to 'computer. rails' (with space after dot), then it is working I saw her some in… --- ## [How request flow through cluster](https://discuss.elastic.co/t/how-request-flow-through-cluster/11118)
**Author:** [@Wes\_Plunk](https://discuss.elastic.co/u/Wes_Plunk)\ **Replies:** 3\ **Last updated:** [March 12, 2013, 10:41pm UTC](https://discuss.elastic.co/t/how-request-flow-through-cluster/11118 "2013-03-12T22:41:39Z")
I've done extensive research over the last 18 month on elasticsearch and am currently in the middle of a 2 year old project that has yet to launch but is set to launch in May. From the initial investigation I discove… --- ## [java.lang.RuntimeException when using client in Java API in Kotlin](https://discuss.elastic.co/t/java-lang-runtimeexception-when-using-client-in-java-api-in-kotlin/327013)
**Author:** [@GAETANO\_SIMONELLI](https://discuss.elastic.co/u/GAETANO_SIMONELLI)\ **Replies:** 6\ **Last updated:** [March 6, 2023, 1:05pm UTC](https://discuss.elastic.co/t/java-lang-runtimeexception-when-using-client-in-java-api-in-kotlin/327013 "2023-03-06T13:05:38Z")
I am trying to use the Elasticsearch Java API in a Kotlin application, following the official tutorial page (Connecting | Elasticsearch Java API Client \[8.6\] | Elastic). However, I am encountering a java.lang.RuntimeExce… --- ## [Slow performance Logstash/Filebeat](https://discuss.elastic.co/t/slow-performance-logstash-filebeat/314040)
**Author:** [@AsapNoCare](https://discuss.elastic.co/u/AsapNoCare)\ **Replies:** 6\ **Last updated:** [September 16, 2022, 7:19am UTC](https://discuss.elastic.co/t/slow-performance-logstash-filebeat/314040 "2022-09-16T07:19:12Z")
Hi everyone, It’s the first time I ask for help so feel free to tell me if you need more information from me. Something else, English is not my native language so sorry in advance for the mistakes. Here is my data flo… --- ## [\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/267826)
**Author:** [@gerald716](https://discuss.elastic.co/u/gerald716)\ **Replies:** 6\ **Last updated:** [April 6, 2021, 4:30pm UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/267826 "2021-04-06T16:30:31Z")
\[2021-03-18T15:33:29,348\]\[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"http://elastic:xxxxxx@127.0.0.1:9200/", :error\_type=\>LogStash::Outputs::E… --- ## [Logstash and MongoDB input](https://discuss.elastic.co/t/logstash-and-mongodb-input/297535)
**Author:** [@serfisar](https://discuss.elastic.co/u/serfisar)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 10:20am UTC](https://discuss.elastic.co/t/logstash-and-mongodb-input/297535 "2022-02-28T10:20:15Z")
Hi! Logstash version: 7.17.0 Could you help me with logstash-mongodb issue, in view of input plugin for Logstash. I work on some task, where I need to get logs from postgre and mongo. Regarding to postgre - everythi… --- ## [Filebeat unable to send logs from windows 2008 R2 server](https://discuss.elastic.co/t/filebeat-unable-to-send-logs-from-windows-2008-r2-server/81755)
**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Replies:** 4\ **Last updated:** [April 20, 2017, 6:37am UTC](https://discuss.elastic.co/t/filebeat-unable-to-send-logs-from-windows-2008-r2-server/81755 "2017-04-20T06:37:25Z")
i am using Elasticsearch, logstash and kibana version 5.2.0 and to monitor logs from remote servers, i have installed filebeat in respective servers (windows server 2012) and able to get logs from remote servers. Since… --- ## [Beats send logs to redis](https://discuss.elastic.co/t/beats-send-logs-to-redis/43679)
**Author:** [@Jeferson\_Martins](https://discuss.elastic.co/u/Jeferson_Martins)\ **Replies:** 8\ **Last updated:** [April 13, 2016, 2:02pm UTC](https://discuss.elastic.co/t/beats-send-logs-to-redis/43679 "2016-04-13T14:02:08Z")
I want only to use multipline and ship logs to redis. What version of beats have redis output? I read about this and the last version does't output to redis. --- ## [Painless equivalent of simple groovy script (substring issues?)](https://discuss.elastic.co/t/painless-equivalent-of-simple-groovy-script-substring-issues/66769)
**Author:** [@reflection](https://discuss.elastic.co/u/reflection)\ **Replies:** 2\ **Last updated:** [November 21, 2016, 9:48pm UTC](https://discuss.elastic.co/t/painless-equivalent-of-simple-groovy-script-substring-issues/66769 "2016-11-21T21:48:26Z")
The following works in groovy but not in painless; any ideas what I'm doing wrong (using elasticsearch-dsl-py but that shouldn't matter)?: .bucket('protocol', 'terms', script={ 'inline': 'def protocol = doc\["… --- ## [Visualisation to replay user session/journey](https://discuss.elastic.co/t/visualisation-to-replay-user-session-journey/281052)
**Author:** [@Likewise](https://discuss.elastic.co/u/Likewise)\ **Replies:** 3\ **Last updated:** [August 21, 2021, 2:41am UTC](https://discuss.elastic.co/t/visualisation-to-replay-user-session-journey/281052 "2021-08-21T02:41:04Z")
Hi community! I am a complete newbie to ELK though have been using Discover for a few months to randomly investigate issues experienced by our end users. We currently use ELK to log most of the activity that happens on … --- ## [No monitoring data collected](https://discuss.elastic.co/t/no-monitoring-data-collected/160348)
**Author:** [@Nicola\_Ambrosetti\_Br](https://discuss.elastic.co/u/Nicola_Ambrosetti_Br)\ **Replies:** 3\ **Last updated:** [December 11, 2018, 9:10pm UTC](https://discuss.elastic.co/t/no-monitoring-data-collected/160348 "2018-12-11T21:10:10Z")
I've just setup a small elastic cluster with version 6.5.2. I've activated monitoring both in kibana and logstash and I can see that there are monitoring indexes for all: \[ambnic@myhome ~\]$ curl http://localhost:9200/\_c… --- ## [Using Shield SSL with the Java client](https://discuss.elastic.co/t/using-shield-ssl-with-the-java-client/71404)
**Author:** [@Andy\_Warren](https://discuss.elastic.co/u/Andy_Warren)\ **Replies:** 6\ **Last updated:** [January 12, 2017, 5:09pm UTC](https://discuss.elastic.co/t/using-shield-ssl-with-the-java-client/71404 "2017-01-12T17:09:36Z")
Hi, I have an ElasticSearch cluster (1 node) and I've set up shield with an admin user and enabled SSL which is working fine when i access via the browser. However I'm running into trouble when trying to write data to t… --- ## [How to update index template](https://discuss.elastic.co/t/how-to-update-index-template/251491)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 4\ **Last updated:** [October 10, 2020, 4:54pm UTC](https://discuss.elastic.co/t/how-to-update-index-template/251491 "2020-10-10T16:54:43Z")
Our cluster have about 170 index templates. I need to update all templates , include the settings: PUT \_template/testovaci { "settings": { "index.routing.allocation.include.data": "hot" } } but this syntax doe… --- ## ["Too many open files" on small cluster](https://discuss.elastic.co/t/too-many-open-files-on-small-cluster/173325)
**Author:** [@jammann](https://discuss.elastic.co/u/jammann)\ **Replies:** 4\ **Last updated:** [March 22, 2019, 6:15am UTC](https://discuss.elastic.co/t/too-many-open-files-on-small-cluster/173325 "2019-03-22T06:15:36Z")
Hi all We run a small 4-node cluster (2 data nodes) which was lately upgraded to 6.5.4, without apparent problems. It only has about 100 indices, 5 shards each, 1 replica per index, so a total of roughly 1000 shards. Y… --- ## [Debian 8 apt install issue](https://discuss.elastic.co/t/debian-8-apt-install-issue/139061)
**Author:** [@Alex4](https://discuss.elastic.co/u/Alex4)\ **Replies:** 2\ **Last updated:** [July 8, 2018, 4:22pm UTC](https://discuss.elastic.co/t/debian-8-apt-install-issue/139061 "2018-07-08T16:22:33Z")
apt-get install elasticsearch Reading package lists... Done Building dependency tree Reading state information... Done The following NEW packages will be installed: elasticsearch 0 upgraded, 1 newly installed, 0 to… --- ## [Indexing a blob](https://discuss.elastic.co/t/indexing-a-blob/175211)
**Author:** [@freaka](https://discuss.elastic.co/u/freaka)\ **Replies:** 5\ **Last updated:** [April 4, 2019, 12:58pm UTC](https://discuss.elastic.co/t/indexing-a-blob/175211 "2019-04-04T12:58:16Z")
Hi, I am currently facing issues indexing documents that have fields with changing structure. Basically, things like this can happen: { "property-a": "hello" } { "property-a": { … --- ## [Logstash grok filter not working](https://discuss.elastic.co/t/logstash-grok-filter-not-working/60914)
**Author:** [@Roberto\_Iglesias](https://discuss.elastic.co/u/Roberto_Iglesias)\ **Replies:** 5\ **Last updated:** [September 20, 2016, 6:29am UTC](https://discuss.elastic.co/t/logstash-grok-filter-not-working/60914 "2016-09-20T06:29:23Z")
Hi and thanks for reading. I'm trying to do my own postfix/imapd logs filter. This is what i made: %{SYSLOGTIMESTAMP:timestamp} %{WORD:mail} %{WORD:program}/?(%{WORD:subprogram})?\\\['?(%{BASE10NUM:id})?\\\]?:? %{GREEDYDAT… --- ## [Elasticsearch.2.1.1 no of shard Settings](https://discuss.elastic.co/t/elasticsearch-2-1-1-no-of-shard-settings/37825)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 5\ **Last updated:** [September 14, 2016, 9:50am UTC](https://discuss.elastic.co/t/elasticsearch-2-1-1-no-of-shard-settings/37825 "2016-09-14T09:50:29Z")
hey, I want to change my Default no of shard in Es 2.1.1 version...but i am not getting any option in elasticsearch.yml file. So i tried while creating index its showing me this error. PUT kk PUT kk/\_settings { … --- ## [How to change logo in Kibana 7.8.0](https://discuss.elastic.co/t/how-to-change-logo-in-kibana-7-8-0/242412)
**Author:** [@yrtqz](https://discuss.elastic.co/u/yrtqz)\ **Replies:** 8\ **Last updated:** [August 5, 2020, 5:15am UTC](https://discuss.elastic.co/t/how-to-change-logo-in-kibana-7-8-0/242412 "2020-08-05T05:15:12Z")
I've found multiple posts about how to do this in earlier versions, but none of the solutions i saw worked on kibana 7.8.0. What can i do to change the loading screen elastic logo and the kibana logo in the sidebar? [Previous page](https://discuss.elastic.co/top.md?page=776&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=778&per_page=50&period=all)