# Top **URL:** https://discuss.elastic.co/top.md?page=781&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 782 --- ## [Bulk update with java API](https://discuss.elastic.co/t/bulk-update-with-java-api/25398)
**Author:** [@MaKro](https://discuss.elastic.co/u/MaKro)\ **Replies:** 2\ **Last updated:** [July 12, 2015, 9:40pm UTC](https://discuss.elastic.co/t/bulk-update-with-java-api/25398 "2015-07-12T21:40:12Z")
Hi. So I'm trying to index multiple documents using Bulk API in java. My documents are valid (I checked if I can index them one by one - and it works). The bulk API also works - partially, because from 169 document… --- ## [Problem getting IIS logs into Kibana using IIS module](https://discuss.elastic.co/t/problem-getting-iis-logs-into-kibana-using-iis-module/169913)
**Author:** [@tm8747a](https://discuss.elastic.co/u/tm8747a)\ **Replies:** 3\ **Last updated:** [February 28, 2019, 8:31pm UTC](https://discuss.elastic.co/t/problem-getting-iis-logs-into-kibana-using-iis-module/169913 "2019-02-28T20:31:25Z")
I'm trying to setup Filebeats to directly ship some IIS logs to ElasticSearch. While it appears my logs are getting picked up and making it to the server, when I open the Logs section in Kibana I get an entry but it's an… --- ## [To run Logstash 5.5.2 need any server like windows server 2008 r2?](https://discuss.elastic.co/t/to-run-logstash-5-5-2-need-any-server-like-windows-server-2008-r2/100059)
**Author:** [@ramesh205](https://discuss.elastic.co/u/ramesh205)\ **Replies:** 3\ **Last updated:** [September 18, 2017, 10:20pm UTC](https://discuss.elastic.co/t/to-run-logstash-5-5-2-need-any-server-like-windows-server-2008-r2/100059 "2017-09-18T22:20:54Z")
Steps: 1.Downloaded latest logstash .zip file and unziped. 2.Created logstash.conf file: input{stdin{}} output{stdout{}} 3. In cmd prompt ran cd C:/Logstash5.5.2/bin/ 4.C:\\logstash-5.5.2\\bin\>logstash -f logstash.c… --- ## [Logstash grok filter for parsing nested data?](https://discuss.elastic.co/t/logstash-grok-filter-for-parsing-nested-data/77732)
**Author:** [@PMDubuc](https://discuss.elastic.co/u/PMDubuc)\ **Replies:** 3\ **Last updated:** [March 8, 2017, 10:42pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-for-parsing-nested-data/77732 "2017-03-08T22:42:06Z")
I have log messages with field data delimited by \[ \] characters. The problem is that sometimes the data in the field contains those characters. How do I write the grok pattern to take the nesting level into account, ex… --- ## [Watcher error 400 webhook action](https://discuss.elastic.co/t/watcher-error-400-webhook-action/283959)
**Author:** [@Juliana\_Sabino](https://discuss.elastic.co/u/Juliana_Sabino)\ **Replies:** 6\ **Last updated:** [September 13, 2021, 11:54am UTC](https://discuss.elastic.co/t/watcher-error-400-webhook-action/283959 "2021-09-13T11:54:59Z")
Hi! I'm facing a problem when I try to run a watcher. "body": "{\\n \\"error\\": {\\n \\"code\\": 400,\\n \\"message\\": \\"Invalid JSON payload received. Unexpected token.\\\\nsomething\\\\n^\\",\\n \\"status\\": \\"INVALID\_A… --- ## [Filebeat's logs rotation malfunctioning](https://discuss.elastic.co/t/filebeats-logs-rotation-malfunctioning/95522)
**Author:** [@abhiroyg](https://discuss.elastic.co/u/abhiroyg)\ **Replies:** 6\ **Last updated:** [August 8, 2017, 4:52pm UTC](https://discuss.elastic.co/t/filebeats-logs-rotation-malfunctioning/95522 "2017-08-08T16:52:10Z")
Hi, Below is my filebeat config: filebeat.prospectors: - input\_type: log paths: - '/tmp/worker.log' encoding: utf-8 output.logstash: hosts: \["127.0.0.1:5044"\] worker: 2 loadbalance: true ssl.verificatio… --- ## [Data node removed; master\_failed](https://discuss.elastic.co/t/data-node-removed-master-failed/88039)
**Author:** [@Nor](https://discuss.elastic.co/u/Nor)\ **Replies:** 6\ **Last updated:** [June 6, 2017, 9:59am UTC](https://discuss.elastic.co/t/data-node-removed-master-failed/88039 "2017-06-06T09:59:30Z")
Hi, I have a cluster with 3x client, 3x master & 3xdata It has been running for weeks without any issue but today I'm suddenly facing some error. ES Version: 5.1.1 Symptom \* My cluster and all indices turned yellow \*… --- ## [Server 2008 R2 Access Denied for PIDs](https://discuss.elastic.co/t/server-2008-r2-access-denied-for-pids/53232)
**Author:** [@jezeling](https://discuss.elastic.co/u/jezeling)\ **Replies:** 6\ **Last updated:** [June 20, 2016, 2:57pm UTC](https://discuss.elastic.co/t/server-2008-r2-access-denied-for-pids/53232 "2016-06-20T14:57:27Z")
Hi, I've recently deployed topbeat to a single Windows 2008 R2 server and when running it starts without issue, however, I don't get any process information and no matter what admin logon as account I use, local or dom… --- ## [Sequel\_opts to pass securityMechanism as a parmeter to jdbc](https://discuss.elastic.co/t/sequel-opts-to-pass-securitymechanism-as-a-parmeter-to-jdbc/41539)
**Author:** [@kirankumarchava](https://discuss.elastic.co/u/kirankumarchava)\ **Replies:** 6\ **Last updated:** [February 13, 2016, 5:41pm UTC](https://discuss.elastic.co/t/sequel-opts-to-pass-securitymechanism-as-a-parmeter-to-jdbc/41539 "2016-02-13T17:41:18Z")
how can we pass the property securityMechanism using the sequel\_opts in logstash configuration. I tried sequel\_opts =\> {"securityMechanism" =\> "7"} but no use. Equivalent to pOpts.put("securityMechanism", sMech); Co… --- ## [Bulk indexing and count mismatch](https://discuss.elastic.co/t/bulk-indexing-and-count-mismatch/8107)
**Author:** [@phoenix](https://discuss.elastic.co/u/phoenix)\ **Replies:** 6\ **Last updated:** [June 19, 2012, 7:46pm UTC](https://discuss.elastic.co/t/bulk-indexing-and-count-mismatch/8107 "2012-06-19T19:46:32Z")
Hi all, I'm facing a strange situation. I'm indexing some documents using the bulk java api. My problem is in my tests. First my test uses the bulk api to index 100 randomly created documents (with random generate… --- ## [Java client for "Too many open files"](https://discuss.elastic.co/t/java-client-for-too-many-open-files/5667)
**Author:** [@Alin\_Popa](https://discuss.elastic.co/u/Alin_Popa)\ **Replies:** 6\ **Last updated:** [October 27, 2011, 7:49am UTC](https://discuss.elastic.co/t/java-client-for-too-many-open-files/5667 "2011-10-27T07:49:28Z")
Hi guys, While working with Elasticsearch, we've noticed an issue regarding the Java client when Elasticsearch Engine is crashing with "Too many open files": - I know, installation instructions suggests that we n… --- ## [Kibana looks like it cancels requests if they take more than 30 seconds?](https://discuss.elastic.co/t/kibana-looks-like-it-cancels-requests-if-they-take-more-than-30-seconds/219689)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 12:03pm UTC](https://discuss.elastic.co/t/kibana-looks-like-it-cancels-requests-if-they-take-more-than-30-seconds/219689 "2020-02-18T12:03:06Z")
I was running the newest version of Kibana, 7.6. I was noticing that during ingestion process, some of my visualizations are taking over 30 seconds. When they take that long it will expose the error: \[esaggs\] \> Unexpe… --- ## [Test-netconnection to ELK-Server is failing on port 5044 from target machines](https://discuss.elastic.co/t/test-netconnection-to-elk-server-is-failing-on-port-5044-from-target-machines/128426)
**Author:** [@codeguru](https://discuss.elastic.co/u/codeguru)\ **Replies:** 7\ **Last updated:** [April 23, 2018, 7:26pm UTC](https://discuss.elastic.co/t/test-netconnection-to-elk-server-is-failing-on-port-5044-from-target-machines/128426 "2018-04-23T19:26:52Z")
Hi Everyone, I have installed winlog beat and metric beat agents on 10 machines. The script I generated did not perform a test-connection to the ELK server I realized it later on so I ran this on the 10 machines individu… --- ## [Logs are sending to Elasticsearch without 'output' in 'logstash.conf'](https://discuss.elastic.co/t/logs-are-sending-to-elasticsearch-without-output-in-logstash-conf/83262)
**Author:** [@Steve\_1](https://discuss.elastic.co/u/Steve_1)\ **Replies:** 7\ **Last updated:** [April 23, 2017, 8:22pm UTC](https://discuss.elastic.co/t/logs-are-sending-to-elasticsearch-without-output-in-logstash-conf/83262 "2017-04-23T20:22:03Z")
I use Filebeat to forward logs from another server to Logstash and then Logstash sends them to Elasticsearch. In filebeat.yml I specify output as Logstash but in logstash.conf I don't specify output at all. But in Kibana… --- ## [Master not found when starting Elasticsearch cluster](https://discuss.elastic.co/t/master-not-found-when-starting-elasticsearch-cluster/81867)
**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\ **Replies:** 1\ **Last updated:** [April 11, 2017, 1:14am UTC](https://discuss.elastic.co/t/master-not-found-when-starting-elasticsearch-cluster/81867 "2017-04-11T01:14:14Z")
I am attempting to stand up 3 master nodes, 2 client nodes 3 data nodes and also Logstash and Kibana in my setup of ELK in AWS. I am starting with the master nodes for the cluster. Here is the elasticsearch.yml config fi… --- ## [Sql\_last\_value resets to 0 upon restart](https://discuss.elastic.co/t/sql-last-value-resets-to-0-upon-restart/228017)
**Author:** [@priyankpatel22](https://discuss.elastic.co/u/priyankpatel22)\ **Replies:** 0\ **Last updated:** [April 15, 2020, 2:37am UTC](https://discuss.elastic.co/t/sql-last-value-resets-to-0-upon-restart/228017 "2020-04-15T02:37:34Z")
It seems the variable sql\_last\_value gets reset every time I restart logstash. As per the documentation and all other threads it should look at last\_run\_metadata\_path for the last saved value. I see the last\_run\_metada… --- ## [Timestamp convert](https://discuss.elastic.co/t/timestamp-convert/225089)
**Author:** [@edkash](https://discuss.elastic.co/u/edkash)\ **Replies:** 4\ **Last updated:** [March 31, 2020, 2:22pm UTC](https://discuss.elastic.co/t/timestamp-convert/225089 "2020-03-31T14:22:05Z")
Hello dear, I want to understand, why kibana or elasticsearch is converting time. I attached an image with json inserted on elastic with a date (datetime correct), and datetime showed by kibaba -3). My time is GMT -3, … --- ## [Heap memory leak in Elasticsearch 6.2.4](https://discuss.elastic.co/t/heap-memory-leak-in-elasticsearch-6-2-4/214419)
**Author:** [@bsarkar](https://discuss.elastic.co/u/bsarkar)\ **Replies:** 4\ **Last updated:** [February 4, 2020, 7:57am UTC](https://discuss.elastic.co/t/heap-memory-leak-in-elasticsearch-6-2-4/214419 "2020-02-04T07:57:48Z")
We have a cluster with 60 data nodes (8 CPU cores, 28 GB memory, 14 GB reserved for JVM heap) in addition to 3 master and 3 client nodes. There are around 35K shards (including replicas) in the cluster. In the past few … --- ## [Logstash - v:2.2.2 : input file path not working](https://discuss.elastic.co/t/logstash-v-2-2-2-input-file-path-not-working/44317)
**Author:** [@andreealib](https://discuss.elastic.co/u/andreealib)\ **Replies:** 4\ **Last updated:** [March 14, 2016, 12:52pm UTC](https://discuss.elastic.co/t/logstash-v-2-2-2-input-file-path-not-working/44317 "2016-03-14T12:52:57Z")
I have the following stack installed on my Windows 8: elasticsearch 2.20 logstash 2.2.2 kibana 4.4.1 I have a csv file from which I want to load the data into elasticsearch. My configuration file is: input { file … --- ## [Jest vs High Level Client?](https://discuss.elastic.co/t/jest-vs-high-level-client/188290)
**Author:** [@youssef\_elhayani](https://discuss.elastic.co/u/youssef_elhayani)\ **Replies:** 2\ **Last updated:** [July 1, 2019, 1:31pm UTC](https://discuss.elastic.co/t/jest-vs-high-level-client/188290 "2019-07-01T13:31:45Z")
I'm trying to work with the new version of Elasticsearch ( 7.2.0 ) and i'm looking for a client for my ES Server, I found two Option: 1 - High level Client 2 - Jest Client I want to have some information about the di… --- ## [Unable to parse JSON logs through filebeat prospector](https://discuss.elastic.co/t/unable-to-parse-json-logs-through-filebeat-prospector/111980)
**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\ **Replies:** 2\ **Last updated:** [December 19, 2017, 6:56am UTC](https://discuss.elastic.co/t/unable-to-parse-json-logs-through-filebeat-prospector/111980 "2017-12-19T06:56:48Z")
I'm trying to parse multiline JSON logs into elasticsearch using filebeat. { "took": 95, "timed\_out": false, "\_shards": { "total": 85, "successful": 85, "skipped": 0, "failed": 0 }, "hits": { … --- ## [Filebeat cannot communicate with Kibana](https://discuss.elastic.co/t/filebeat-cannot-communicate-with-kibana/315508)
**Author:** [@mahmoudmaani](https://discuss.elastic.co/u/mahmoudmaani)\ **Replies:** 8\ **Last updated:** [October 1, 2022, 4:41pm UTC](https://discuss.elastic.co/t/filebeat-cannot-communicate-with-kibana/315508 "2022-10-01T16:41:25Z")
Hello everyone, Filebeat is not working with my setup when I try to run ./filebeat setup -e I get the below error message. I have Elastic and Kibana installed on a single host and they are working well also, I have… --- ## [Unassigned primary shards. reason:NODE LEFT](https://discuss.elastic.co/t/unassigned-primary-shards-reason-node-left/68805)
**Author:** [@chihccha](https://discuss.elastic.co/u/chihccha)\ **Replies:** 3\ **Last updated:** [December 13, 2016, 7:51pm UTC](https://discuss.elastic.co/t/unassigned-primary-shards-reason-node-left/68805 "2016-12-13T19:51:32Z")
Hi, Our ES cluster health is often red due to unassigned primary shards. The unassign.reason for this is "NODE\_LEFT" (See details below) Does this mean that the node left the cluster while it was being assigned the sh… --- ## [How to create Visualization from calculated field on Kibana](https://discuss.elastic.co/t/how-to-create-visualization-from-calculated-field-on-kibana/164830)
**Author:** [@Wassim\_Ben\_Amor](https://discuss.elastic.co/u/Wassim_Ben_Amor)\ **Replies:** 1\ **Last updated:** [January 24, 2019, 10:32pm UTC](https://discuss.elastic.co/t/how-to-create-visualization-from-calculated-field-on-kibana/164830 "2019-01-24T22:32:53Z")
I'm new to Elasticsearch and Kibana. I have a simple index which contains documents representing user requests in dialogs. Each request has a user\_id and session\_id. I want to create a Pie graph like this : showing… --- ## [Message.raw in logstash 2](https://discuss.elastic.co/t/message-raw-in-logstash-2/34659)
**Author:** [@jyotirtest](https://discuss.elastic.co/u/jyotirtest)\ **Replies:** 5\ **Last updated:** [November 17, 2015, 4:46am UTC](https://discuss.elastic.co/t/message-raw-in-logstash-2/34659 "2015-11-17T04:46:03Z")
Hi, We were using logstash 1.5 and recently upgraded to logstash 2. We are unable to get message.raw in elasticsearch. We followed mentioned link to make it work on logstash 1.5 But it is not working in logstas… --- ## [Different index for new filebeat module "bind9"](https://discuss.elastic.co/t/different-index-for-new-filebeat-module-bind9/253250)
**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\ **Replies:** 6\ **Last updated:** [October 30, 2020, 8:05pm UTC](https://discuss.elastic.co/t/different-index-for-new-filebeat-module-bind9/253250 "2020-10-30T20:05:16Z")
Dear All, My environment: ELK stack 7.9.2 on Debian buster I wrote a new module called "bind9" which picks up the bind query logs from a DNS server. This is writing its data to the filebeat index. I would like to have … --- ## [Multiple join in one index](https://discuss.elastic.co/t/multiple-join-in-one-index/117412)
**Author:** [@LordWeedlle](https://discuss.elastic.co/u/LordWeedlle)\ **Replies:** 2\ **Last updated:** [January 29, 2018, 9:46am UTC](https://discuss.elastic.co/t/multiple-join-in-one-index/117412 "2018-01-29T09:46:33Z")
Hi, I am currently updating my mapping so I can upgrade ES to version 6. I have a question, at the moment I have 2 parent-child relation in my mapping: User (parent of) Question (parent of) Answer In join quide it is… --- ## [Massive /var/log/audit logging](https://discuss.elastic.co/t/massive-var-log-audit-logging/56366)
**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\ **Replies:** 2\ **Last updated:** [July 26, 2016, 9:41am UTC](https://discuss.elastic.co/t/massive-var-log-audit-logging/56366 "2016-07-26T09:41:45Z")
We configure our nodes with basic Ubuntu CIS (https://benchmarks.cisecurity.org/tools2/linux/CIS\_Ubuntu\_14.04\_LTS\_Server\_Benchmark\_v1.0.0.pdf). On our elasticsearch data nodes this results in an amazing number of audit… --- ## [Text processing Spark - ES](https://discuss.elastic.co/t/text-processing-spark-es/46567)
**Author:** [@anon55368183](https://discuss.elastic.co/u/anon55368183)\ **Replies:** 2\ **Last updated:** [April 10, 2016, 2:27pm UTC](https://discuss.elastic.co/t/text-processing-spark-es/46567 "2016-04-10T14:27:41Z")
Hi, I need an advice about the best approach for my problem. With ManifoldCF I am indexing documents from the filesystem to ES. I gather the metadata and the content of each document. So far this works great, but for m… --- ## [Filtering on existing term in field returns nothing](https://discuss.elastic.co/t/filtering-on-existing-term-in-field-returns-nothing/23264)
**Author:** [@Michael\_Czerny](https://discuss.elastic.co/u/Michael_Czerny)\ **Replies:** 2\ **Last updated:** [April 17, 2015, 11:30am UTC](https://discuss.elastic.co/t/filtering-on-existing-term-in-field-returns-nothing/23264 "2015-04-17T11:30:18Z")
Hello, I am using ES-1.5.0. I can't for the life of me figure this out. I am trying to do a simple filter query, like so: { "filter": { "bool" : { "must" : \[ {"term": {"sentiment": "negati… --- ## [How can I have multiple concurrent jdbc\_streaming filter instances?](https://discuss.elastic.co/t/how-can-i-have-multiple-concurrent-jdbc-streaming-filter-instances/124150)
**Author:** [@jdmcalee](https://discuss.elastic.co/u/jdmcalee)\ **Replies:** 4\ **Last updated:** [March 15, 2018, 7:30pm UTC](https://discuss.elastic.co/t/how-can-i-have-multiple-concurrent-jdbc-streaming-filter-instances/124150 "2018-03-15T19:30:05Z")
I have a config using the jdbc input plugin, plus 3 instances of jdbc\_streaming filters to gather data I need to create an event. It all works, in terms of getting the events into elasticsearch as I want them to be. Howe… --- ## [Winlogbeat failed to start](https://discuss.elastic.co/t/winlogbeat-failed-to-start/109880)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 4\ **Last updated:** [December 4, 2017, 10:14am UTC](https://discuss.elastic.co/t/winlogbeat-failed-to-start/109880 "2017-12-04T10:14:06Z")
Hi there, I'm trying to install winlogbeat 5.6.4 x64 on windows server 2012,but failed to start it,error as follows: PS C:\\winlogbeat-5.6.4\> Start-Service -DisplayName “winlogbeat” -Verbose VERBOSE: Performing the ope… --- ## [Copying @timestamp in custom field not working](https://discuss.elastic.co/t/copying-timestamp-in-custom-field-not-working/33738)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 4\ **Last updated:** [November 5, 2015, 6:40am UTC](https://discuss.elastic.co/t/copying-timestamp-in-custom-field-not-working/33738 "2015-11-05T06:40:46Z")
Hi, I am trying to copy the timestamp field in logs to some custom field 'eventLogTime' on Kibana. This I want to use for sorting on basis of event time. I am using below configuration in logstash indexer grok { … --- ## [Kibana not seeing external ES monitoring node](https://discuss.elastic.co/t/kibana-not-seeing-external-es-monitoring-node/168966)
**Author:** [@gennaris](https://discuss.elastic.co/u/gennaris)\ **Replies:** 3\ **Last updated:** [February 21, 2019, 7:34am UTC](https://discuss.elastic.co/t/kibana-not-seeing-external-es-monitoring-node/168966 "2019-02-21T07:34:29Z")
Hi all, yesterday I setup a dedicated single monitoring node following this guide. I managed to fire up the new monitoring node with the same ES 6.6.0 version of the cluster, then added those lines to my elasticsearch.… --- ## [putMapping "reason":"Rejecting mapping update to \[pets\] as the final mapping would have more than 1 type: \[bird, dog\]"}\]](https://discuss.elastic.co/t/putmapping-reason-rejecting-mapping-update-to-pets-as-the-final-mapping-would-have-more-than-1-type-bird-dog/118349)
**Author:** [@nickclasener](https://discuss.elastic.co/u/nickclasener)\ **Replies:** 3\ **Last updated:** [February 4, 2018, 3:53pm UTC](https://discuss.elastic.co/t/putmapping-reason-rejecting-mapping-update-to-pets-as-the-final-mapping-would-have-more-than-1-type-bird-dog/118349 "2018-02-04T15:53:52Z")
I can't decipher what's wrong with my code. Im using the elasticsearch-php package \> json-doc, elasticsearch-php \> php-doc. my putMapping function public function elasticsearchData() { $params = \[ 'index' … --- ## [Change in document \_type?](https://discuss.elastic.co/t/change-in-document-type/107807)
**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\ **Replies:** 3\ **Last updated:** [November 16, 2017, 11:11pm UTC](https://discuss.elastic.co/t/change-in-document-type/107807 "2017-11-16T23:11:38Z")
I am ingesting both G1 and J9 garbage collection logs into elasticsearch. Filebeat sends them to kafka, and logstash pulls them in from there. I installed 6.0 GA this morning, and deleted data/nodes/0 before starting es.… --- ## [Elasticsearch case-insensitive SQL RLIKE](https://discuss.elastic.co/t/elasticsearch-case-insensitive-sql-rlike/222459)
**Author:** [@gsahu25](https://discuss.elastic.co/u/gsahu25)\ **Replies:** 5\ **Last updated:** [March 8, 2020, 10:58am UTC](https://discuss.elastic.co/t/elasticsearch-case-insensitive-sql-rlike/222459 "2020-03-08T10:58:14Z")
Hi, I am trying for a case-insensitive RLIKE operation in elasticsearch SQL. E.g. WHERE column1 RLIKE '.\*Gop.\*' I tried using LCASE, UCASE in WHERE clause on the field, but is giving below error. "root\_cause": \[ { … --- ## [What is timeout to write to replica shard](https://discuss.elastic.co/t/what-is-timeout-to-write-to-replica-shard/173966)
**Author:** [@oraclept](https://discuss.elastic.co/u/oraclept)\ **Replies:** 5\ **Last updated:** [March 27, 2019, 8:26am UTC](https://discuss.elastic.co/t/what-is-timeout-to-write-to-replica-shard/173966 "2019-03-27T08:26:50Z")
What is the timeout for writing to replica shard ? If it is taking long time to write to replica can i specify value to timeout write on replica shard. I am reading below link. https://www.elastic.co/guide/en/elastics… --- ## [Jdbc input plugin and sql\_last\_value](https://discuss.elastic.co/t/jdbc-input-plugin-and-sql-last-value/145869)
**Author:** [@rubpa](https://discuss.elastic.co/u/rubpa)\ **Replies:** 5\ **Last updated:** [August 28, 2018, 8:39am UTC](https://discuss.elastic.co/t/jdbc-input-plugin-and-sql-last-value/145869 "2018-08-28T08:39:26Z")
I'm considering replicating a MySQL database into elasticsearch to enable Kibana visualizations on that data. There's another application that runs off the database and the existing data gets updated. It appears that lo… --- ## [Elasticsearch Scroll Maximum Time](https://discuss.elastic.co/t/elasticsearch-scroll-maximum-time/95798)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 5\ **Last updated:** [August 4, 2017, 6:26am UTC](https://discuss.elastic.co/t/elasticsearch-scroll-maximum-time/95798 "2017-08-04T06:26:09Z")
Can I put 300m or 500m in scroll time? Since I got some error and based from my research, (maybe) the reason was my scroll got expired. TIA --- ## [Capturing logs from a browser (SPA)](https://discuss.elastic.co/t/capturing-logs-from-a-browser-spa/175159)
**Author:** [@Matt\_Russell](https://discuss.elastic.co/u/Matt_Russell)\ **Replies:** 1\ **Last updated:** [April 5, 2019, 8:57am UTC](https://discuss.elastic.co/t/capturing-logs-from-a-browser-spa/175159 "2019-04-05T08:57:13Z")
I wondered if anyone had any good patterns or advice on collecting logs from a single-page application (SPA) running in user browsers and getting them into Elasticsearch? I guess one approach might be to post AJAX to a /… --- ## [Invalid interval specified, must be non-null and non-empty](https://discuss.elastic.co/t/invalid-interval-specified-must-be-non-null-and-non-empty/283878)
**Author:** [@jcalonso](https://discuss.elastic.co/u/jcalonso)\ **Replies:** 2\ **Last updated:** [September 14, 2021, 1:03am UTC](https://discuss.elastic.co/t/invalid-interval-specified-must-be-non-null-and-non-empty/283878 "2021-09-14T01:03:43Z")
Hi there, I been trying to run the following query on a rollup index, but cant get around the interval error. This is my query: GET /rollup-24hours/\_search { "size": 0, "aggs": { "by\_period": { "aggs": … --- ## [Best practices for join field child doc without parent doc](https://discuss.elastic.co/t/best-practices-for-join-field-child-doc-without-parent-doc/145273)
**Author:** [@jaddison](https://discuss.elastic.co/u/jaddison)\ **Replies:** 2\ **Last updated:** [August 28, 2018, 10:37pm UTC](https://discuss.elastic.co/t/best-practices-for-join-field-child-doc-without-parent-doc/145273 "2018-08-28T22:37:23Z")
I've asked this a couple of times over the years, the most recently being Are parents required with join fields? (no response). Github issues mentions that this is the place to come for answers... so I'll ask again! I… --- ## [Search text part in object](https://discuss.elastic.co/t/search-text-part-in-object/293332)
**Author:** [@MrDeliK](https://discuss.elastic.co/u/MrDeliK)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 3:19pm UTC](https://discuss.elastic.co/t/search-text-part-in-object/293332 "2022-01-03T15:19:42Z")
Hi guys, new here and had some trouble for this basic search. In the database, we have objects containing strings like this. {fr: "french string", en: "english string", nl: "nl string"} for generic purpose (defined in… --- ## [Kibana problem with privileges - 7.0 - \[FORBIDDEN/12/index read-only / allow delete (api)\]](https://discuss.elastic.co/t/kibana-problem-with-privileges-7-0-forbidden-12-index-read-only-allow-delete-api/180212)
**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\ **Replies:** 3\ **Last updated:** [May 24, 2019, 10:53am UTC](https://discuss.elastic.co/t/kibana-problem-with-privileges-7-0-forbidden-12-index-read-only-allow-delete-api/180212 "2019-05-24T10:53:39Z")
Hello, I was upgrading from 6.7 to 7.0 and I have this problem on kibana: Error registering Kibana Privileges with Elasticsearch for kibana-.kibanax: \[cluster\_block\_exception\] blocked by: \[FORBIDDEN/12/index read-only … --- ## [Retrieve the children documents in a parent-child](https://discuss.elastic.co/t/retrieve-the-children-documents-in-a-parent-child/51418)
**Author:** [@LiorY89](https://discuss.elastic.co/u/LiorY89)\ **Replies:** 3\ **Last updated:** [June 1, 2016, 4:43pm UTC](https://discuss.elastic.co/t/retrieve-the-children-documents-in-a-parent-child/51418 "2016-06-01T16:43:34Z")
I have 2 types in my index: profile and post. each profile has many posts, so we decided to make a parent-child relationship in the mapping Each profile has a profile\_id. I want to search on the profile type, and get all… --- ## [Parse/split nested single JSON array in Logstash](https://discuss.elastic.co/t/parse-split-nested-single-json-array-in-logstash/72059)
**Author:** [@Thomas\_Schneider](https://discuss.elastic.co/u/Thomas_Schneider)\ **Replies:** 4\ **Last updated:** [January 25, 2017, 12:09pm UTC](https://discuss.elastic.co/t/parse-split-nested-single-json-array-in-logstash/72059 "2017-01-25T12:09:42Z")
Hello @all, i am a completely noob and need help on a JSON-file :slight\_smile: I am looking for a splitting/filter for the following JSON-array. We need each value in the array as an single value in elastice. Can som… --- ## [Index Rollover not working after reaching maxday](https://discuss.elastic.co/t/index-rollover-not-working-after-reaching-maxday/309066)
**Author:** [@jacky7788](https://discuss.elastic.co/u/jacky7788)\ **Replies:** 7\ **Last updated:** [July 7, 2022, 10:22am UTC](https://discuss.elastic.co/t/index-rollover-not-working-after-reaching-maxday/309066 "2022-07-07T10:22:18Z")
Not able to rollover after 1 day I have set parse\_origination\_date to true the index is like access-log-appname-2022.07.06-000001 { "policy":{ "phases":{ "hot":{ "min\_age":"0ms", "actions… --- ## [Elastic Agent and/or Filebeat](https://discuss.elastic.co/t/elastic-agent-and-or-filebeat/270967)
**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\ **Replies:** 1\ **Last updated:** [April 27, 2021, 11:57am UTC](https://discuss.elastic.co/t/elastic-agent-and-or-filebeat/270967 "2021-04-27T11:57:28Z")
HI all. I have followed this guide ELK-SIEM/Deployment-Guide at main · watsoninfosec/ELK-SIEM · GitHub This installs ElasticSearch, Kibana, Logstash and Filebeat on Ubuntu. I have 3 Windows Servers showing as healthy. E… --- ## [Kibana not able to filter beat.hostname after certain day](https://discuss.elastic.co/t/kibana-not-able-to-filter-beat-hostname-after-certain-day/129325)
**Author:** [@kko](https://discuss.elastic.co/u/kko)\ **Replies:** 7\ **Last updated:** [May 7, 2018, 6:07pm UTC](https://discuss.elastic.co/t/kibana-not-able-to-filter-beat-hostname-after-certain-day/129325 "2018-05-07T18:07:56Z")
Hi, I encountered a problem with Kibana. I have a series of indices in Elasticsearch created from metricbeat. In Kibana I created an index pattern for the series of indices. I am able to create a Timelion with .es(metri… [Previous page](https://discuss.elastic.co/top.md?page=780&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=782&per_page=50&period=all)