# Top **URL:** https://discuss.elastic.co/top.md?page=782&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 783 --- ## [Parse error with large JSON structure/file](https://discuss.elastic.co/t/parse-error-with-large-json-structure-file/104149)
**Author:** [@marksarnold](https://discuss.elastic.co/u/marksarnold)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 4:41pm UTC](https://discuss.elastic.co/t/parse-error-with-large-json-structure-file/104149 "2017-10-23T16:41:23Z")
I found that logstash complains about syntax errors in even "simple" JSON files when a JSON "record" becomes large. By large, I mean a few hundred key/value pairs. The example file is too large to paste in here, so crea… --- ## [X-Pack Security is not avaible on ES 6.6.1 basic](https://discuss.elastic.co/t/x-pack-security-is-not-avaible-on-es-6-6-1-basic/199065)
**Author:** [@pzygan](https://discuss.elastic.co/u/pzygan)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 11:10am UTC](https://discuss.elastic.co/t/x-pack-security-is-not-avaible-on-es-6-6-1-basic/199065 "2019-09-11T11:10:34Z")
Hi, I've got elasticsearch-6.6.1 with basic license, installed on one node. I try to configure security, but when i try setup passwords i get an error : C:\\ProgramData\\Elastic661\\elasticsearch-6.6.1\\bin\>elasticsearc… --- ## [Painless Script to Concat in ReIndex API](https://discuss.elastic.co/t/painless-script-to-concat-in-reindex-api/143203)
**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\ **Replies:** 2\ **Last updated:** [August 15, 2018, 5:49am UTC](https://discuss.elastic.co/t/painless-script-to-concat-in-reindex-api/143203 "2018-08-15T05:49:52Z")
I am trying to concat 2 fields using painless script during ReIndex API call. However not able to get the correct syntax. field3=field1,field2. The below code is throwing a parsing exception POST \_reindex { "sour… --- ## [+XX:OnOutOfMemoryError not executing, heap dump not generating](https://discuss.elastic.co/t/xx-onoutofmemoryerror-not-executing-heap-dump-not-generating/46680)
**Author:** [@DanielBrierton](https://discuss.elastic.co/u/DanielBrierton)\ **Replies:** 2\ **Last updated:** [April 12, 2016, 1:39pm UTC](https://discuss.elastic.co/t/xx-onoutofmemoryerror-not-executing-heap-dump-not-generating/46680 "2016-04-12T13:39:52Z")
Hi, We're running ES 2.1.1 and are having trouble handling out of memory errors. We've created a small script to execute on out of memory, which includes logger commands to ensure the script has actually executed, we… --- ## [How to get json array object size in kibana](https://discuss.elastic.co/t/how-to-get-json-array-object-size-in-kibana/170386)
**Author:** [@pcrai](https://discuss.elastic.co/u/pcrai)\ **Replies:** 5\ **Last updated:** [February 28, 2019, 9:38pm UTC](https://discuss.elastic.co/t/how-to-get-json-array-object-size-in-kibana/170386 "2019-02-28T21:38:12Z")
I have given one json log file as input in logstash and getting corresponding mapping in kibana but I want to count element available in json array object. need help to get that. --- ## [Custom Numeric Field Formatter](https://discuss.elastic.co/t/custom-numeric-field-formatter/107730)
**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\ **Replies:** 5\ **Last updated:** [November 17, 2017, 5:23pm UTC](https://discuss.elastic.co/t/custom-numeric-field-formatter/107730 "2017-11-17T17:23:44Z")
Hi there, is it possible to create a custom field format in Kibana 5.6 or 6. I tried my luck with the instructions here: https://www.elastic.co/blog/kibana-custom-field-formatters. But unfortunately the blog post isn't u… --- ## [\_http\_request\_failure in logstash while using http\_poller](https://discuss.elastic.co/t/-http-request-failure-in-logstash-while-using-http-poller/31637)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 5\ **Last updated:** [October 5, 2015, 5:55pm UTC](https://discuss.elastic.co/t/-http-request-failure-in-logstash-while-using-http-poller/31637 "2015-10-05T17:55:34Z")
Hi , I am getting some json documents from http\_poller input { http\_poller { urls =\> { "localhost" =\> "http://localhost:9200" } interval =\> 10 After I reads all the document It shows httprequest\_fai… --- ## [Daily Ingestion graphs Per Index](https://discuss.elastic.co/t/daily-ingestion-graphs-per-index/222490)
**Author:** [@vsubrama](https://discuss.elastic.co/u/vsubrama)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 2:39pm UTC](https://discuss.elastic.co/t/daily-ingestion-graphs-per-index/222490 "2020-03-12T14:39:18Z")
Has someone build reliable Kibana dashboards for displaying ingestion rate for a duration of time (say a day) per index? We have a self managed ELK cluster that ingests 1 TB per day across some 150 different log indices… --- ## [Multiple errors; "Failed to list store metadata for shard"](https://discuss.elastic.co/t/multiple-errors-failed-to-list-store-metadata-for-shard/164298)
**Author:** [@Jakub500](https://discuss.elastic.co/u/Jakub500)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 11:39am UTC](https://discuss.elastic.co/t/multiple-errors-failed-to-list-store-metadata-for-shard/164298 "2019-01-15T11:39:10Z")
Hi all, I have a problem with my elasticsearch cluster with logging a large number of errors. In the night, when import is ongoing I receive many errors: \[2019-01-15T03:28:54,372\]\[WARN \]\[o.e.g.GatewayAllocator$Interna… --- ## [Wildcard query with a file path - Search for c:\\users\\public\*](https://discuss.elastic.co/t/wildcard-query-with-a-file-path-search-for-c-users-public/150384)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 1\ **Last updated:** [October 1, 2018, 8:09pm UTC](https://discuss.elastic.co/t/wildcard-query-with-a-file-path-search-for-c-users-public/150384 "2018-10-01T20:09:28Z")
Hi, I'm trying to run a query similar to below that has a file path in it but keep getting this error: Discover: Expected "\*", "", \[\\ \\t\\r\\n\] or end of input but ":" found. I've tried adding those but nothing. Any sugge… --- ## [Grok - extract file extension from file name](https://discuss.elastic.co/t/grok-extract-file-extension-from-file-name/102528)
**Author:** [@evild3ad](https://discuss.elastic.co/u/evild3ad)\ **Replies:** 3\ **Last updated:** [October 3, 2017, 2:15pm UTC](https://discuss.elastic.co/t/grok-extract-file-extension-from-file-name/102528 "2017-10-03T14:15:46Z")
Hi, I have problems with creating a grok filter to extract the file extension from the file name field. Example data: 9151\_to\_9152.log 80bddb9998f9f66bc44b59d9899bbbb853b8958ecd9188e14fd0828e00246050.txt ($FILE\_NAME) … --- ## [Set Default Filter Field](https://discuss.elastic.co/t/set-default-filter-field/219353)
**Author:** [@rwr](https://discuss.elastic.co/u/rwr)\ **Replies:** 4\ **Last updated:** [February 24, 2020, 9:10am UTC](https://discuss.elastic.co/t/set-default-filter-field/219353 "2020-02-24T09:10:06Z")
Hi All is there any configuration for setting default filter field (pict 1) in kibana like in pict 2 ? --- ## [Index size is increasing during the forcemerge](https://discuss.elastic.co/t/index-size-is-increasing-during-the-forcemerge/199073)
**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\ **Replies:** 4\ **Last updated:** [September 11, 2019, 1:52pm UTC](https://discuss.elastic.co/t/index-size-is-increasing-during-the-forcemerge/199073 "2019-09-11T13:52:12Z")
Hi Elastic team, I'm using hot-warm-cold ILM to manage my indexes. However, in forcemerge action, I'm curious why the index size is increasing during the forcemerge. From the picture below, the primary shard size is o… --- ## [Suspicious File Alert](https://discuss.elastic.co/t/suspicious-file-alert/50068)
**Author:** [@Nirjonadda](https://discuss.elastic.co/u/Nirjonadda)\ **Replies:** 4\ **Last updated:** [December 19, 2016, 6:05pm UTC](https://discuss.elastic.co/t/suspicious-file-alert/50068 "2016-12-19T18:05:54Z")
Hello I receive thousands of emails with this error, I ask you in the forum, how can I disable these alerts? Thanks to everyone who can help me. Time: Sun May 15 12:53:11 2016 +0600 File: /tmp/jna--1985354563/jna84… --- ## [Permission denied in logstash?](https://discuss.elastic.co/t/permission-denied-in-logstash/71320)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 2\ **Last updated:** [January 12, 2017, 6:43am UTC](https://discuss.elastic.co/t/permission-denied-in-logstash/71320 "2017-01-12T06:43:57Z")
HI, ES 2.4.0 Logstash 5.1.1 when i executed the following code : input { elasticsearch { hosts =\> "http://localhost:9200/" index =\> "mediacontent-jan-2017" } } output { file { path =\> "C:\\Users\\571952\\Desktop\\logst… --- ## [Unassigned shards, with status "Elasticsearch can allocate the shard" for all of them](https://discuss.elastic.co/t/unassigned-shards-with-status-elasticsearch-can-allocate-the-shard-for-all-of-them/333806)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 6\ **Last updated:** [May 19, 2023, 9:49am UTC](https://discuss.elastic.co/t/unassigned-shards-with-status-elasticsearch-can-allocate-the-shard-for-all-of-them/333806 "2023-05-19T09:49:27Z")
Can you help me to explain why I have for several days 25 unassigned replica shards wich can\_allocate status = yes and allocation\_explanation = Elasticsearch can allocate the shard. I supposed rebalancing job will alloc… --- ## [Elasticsearch moving a replica shard between nodes](https://discuss.elastic.co/t/elasticsearch-moving-a-replica-shard-between-nodes/262042)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 6\ **Last updated:** [January 25, 2021, 5:10pm UTC](https://discuss.elastic.co/t/elasticsearch-moving-a-replica-shard-between-nodes/262042 "2021-01-25T17:10:24Z")
Hi, I have a cluster with almost all nodes 111 shards and only 2 nodes 108. I understand that ES balance the cluster with shard count. cluster has around 19 nodes, 3 master eligible of them 2 data as well and 16 data… --- ## [ECE licensing](https://discuss.elastic.co/t/ece-licensing/352005)
**Author:** [@kaismax](https://discuss.elastic.co/u/kaismax)\ **Replies:** 2\ **Last updated:** [January 29, 2024, 6:20pm UTC](https://discuss.elastic.co/t/ece-licensing/352005 "2024-01-29T18:20:05Z")
Hello Elastic Team, if I buy X ERU of Enterprise licenses, Are the Proxy, Controllers.. going to consume License or only the Allocators will consume it. --- ## [Parsing Palo Alto System Logs with Date Filter](https://discuss.elastic.co/t/parsing-palo-alto-system-logs-with-date-filter/271836)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 7\ **Last updated:** [May 4, 2021, 7:23pm UTC](https://discuss.elastic.co/t/parsing-palo-alto-system-logs-with-date-filter/271836 "2021-05-04T19:23:24Z")
I am trying to parse the Palo Alto System logs with logstash using the following dissect pattern inside a logstash filter: dissect { mapping =\> { "message" =\> '%{?date} %{?date} %{?date} %{?network} - %{?version},%{@… --- ## [Elasticsearch crashes ubuntu vm](https://discuss.elastic.co/t/elasticsearch-crashes-ubuntu-vm/116474)
**Author:** [@babayotakun](https://discuss.elastic.co/u/babayotakun)\ **Replies:** 7\ **Last updated:** [January 23, 2018, 9:27am UTC](https://discuss.elastic.co/t/elasticsearch-crashes-ubuntu-vm/116474 "2018-01-23T09:27:59Z")
We have two VMware VMs with Ubuntu 16.4 x64 on them. Each one has 2gb of memory and 1 cpu core. We have installed elasticsearch (5.1.2) on every vm as systemd service. All properties are default, except of xmx and xms (… --- ## [Boost relevance score based on word proximity in Elasticsearch](https://discuss.elastic.co/t/boost-relevance-score-based-on-word-proximity-in-elasticsearch/87883)
**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\ **Replies:** 1\ **Last updated:** [June 5, 2017, 8:12am UTC](https://discuss.elastic.co/t/boost-relevance-score-based-on-word-proximity-in-elasticsearch/87883 "2017-06-05T08:12:54Z")
I am working in a project where I need to provide boost based on Proximity in Elasticsearch. The Requirement states that let's say we have a field called statement in index so doc 1 has following value in statement "s… --- ## [How to trace Socket Events using Elastic APM Tool](https://discuss.elastic.co/t/how-to-trace-socket-events-using-elastic-apm-tool/244153)
**Author:** [@sreedharbukya](https://discuss.elastic.co/u/sreedharbukya)\ **Replies:** 5\ **Last updated:** [August 17, 2020, 6:34pm UTC](https://discuss.elastic.co/t/how-to-trace-socket-events-using-elastic-apm-tool/244153 "2020-08-17T18:34:36Z")
Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: 7.5.2 Kibana 7.5.2 APM Agent language and version: elastic-apm-node : 3.6.1 How do we capture the socket events? I am using TypeScript vers… --- ## [Custom metric data visualisation](https://discuss.elastic.co/t/custom-metric-data-visualisation/171627)
**Author:** [@Stefano\_Bossi](https://discuss.elastic.co/u/Stefano_Bossi)\ **Replies:** 3\ **Last updated:** [March 19, 2019, 9:23pm UTC](https://discuss.elastic.co/t/custom-metric-data-visualisation/171627 "2019-03-19T21:23:57Z")
Dear team, I have a problem I would like to discuss with you; let me explain. Data description I have an application which ingest data read from some sensors. The readings came in groups of 400 points (i.e. every time… --- ## [FunctionScoreQueryBuilder.add() removed?](https://discuss.elastic.co/t/functionscorequerybuilder-add-removed/101770)
**Author:** [@sliu](https://discuss.elastic.co/u/sliu)\ **Replies:** 2\ **Last updated:** [September 28, 2017, 1:08pm UTC](https://discuss.elastic.co/t/functionscorequerybuilder-add-removed/101770 "2017-09-28T13:08:45Z")
I'm trying to implement function\_score in Java code. This is exactly what I'm looking for. This page also has similar examples: https://www.programcreek.com/java-api-examples/index.php?api=org.elasticsearch.index.qu… --- ## [Parsing SQL Error Logs & Best Practices](https://discuss.elastic.co/t/parsing-sql-error-logs-best-practices/74716)
**Author:** [@locolbd](https://discuss.elastic.co/u/locolbd)\ **Replies:** 2\ **Last updated:** [February 13, 2017, 6:24pm UTC](https://discuss.elastic.co/t/parsing-sql-error-logs-best-practices/74716 "2017-02-13T18:24:28Z")
I am in the early stages of collecting SQL logs from the sql errrorlog file. My DBAs are slowing giving me information as to the type of data they would like parsed into fields etc. I would like to parse the domain an… --- ## [How do I use dayOfWeek in a Watcher condition script?](https://discuss.elastic.co/t/how-do-i-use-dayofweek-in-a-watcher-condition-script/38341)
**Author:** [@JohnMunson](https://discuss.elastic.co/u/JohnMunson)\ **Replies:** 2\ **Last updated:** [January 5, 2016, 8:46pm UTC](https://discuss.elastic.co/t/how-do-i-use-dayofweek-in-a-watcher-condition-script/38341 "2016-01-05T20:46:37Z")
Hi. I've been using Watcher for a little while, but I don't know much about Elasticsearch itself -- enough to construct the queries I've needed for my watches (many thanks to Steve Kearns for his help when I was getting… --- ## [How to install a custom elasticsearch plugin IntelliJ locally and debug](https://discuss.elastic.co/t/how-to-install-a-custom-elasticsearch-plugin-intellij-locally-and-debug/195970)
**Author:** [@zcharli](https://discuss.elastic.co/u/zcharli)\ **Replies:** 4\ **Last updated:** [August 21, 2019, 1:48am UTC](https://discuss.elastic.co/t/how-to-install-a-custom-elasticsearch-plugin-intellij-locally-and-debug/195970 "2019-08-21T01:48:32Z")
I've got java 12 running on my Mac, I've checked out the 6.7 branch from github and was able to successfully build and launch the project with ./gradlew run --debug-jvm. I've managed to put a breakpoint against my local … --- ## [Logstash not sending data to ES](https://discuss.elastic.co/t/logstash-not-sending-data-to-es/88020)
**Author:** [@keshav](https://discuss.elastic.co/u/keshav)\ **Replies:** 4\ **Last updated:** [June 7, 2017, 6:57am UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-es/88020 "2017-06-07T06:57:59Z")
I have a logstash config which reads nginx logs and sends data to elasticsearch. The log file contains two endpoints viz /index and /info. Logstash parses the /index endpoint and sends the data to ES but it doesn't do th… --- ## [Custom analyzers with elasticsearch-php API](https://discuss.elastic.co/t/custom-analyzers-with-elasticsearch-php-api/18261)
**Author:** [@Olivier\_Revollat](https://discuss.elastic.co/u/Olivier_Revollat)\ **Replies:** 1\ **Last updated:** [June 24, 2014, 9:38am UTC](https://discuss.elastic.co/t/custom-analyzers-with-elasticsearch-php-api/18261 "2014-06-24T09:38:30Z")
Hello I currently creating an elasticsearch extension for Bolt (a \[very cool\] symfony2 based CMS). For the PHP client i'm using elasticsearch-php. Great ! I already wrote the code that create the index, mapping and… --- ## [Logstash filter for FTP logs](https://discuss.elastic.co/t/logstash-filter-for-ftp-logs/188896)
**Author:** [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)\ **Replies:** 6\ **Last updated:** [July 8, 2019, 5:08am UTC](https://discuss.elastic.co/t/logstash-filter-for-ftp-logs/188896 "2019-07-08T05:08:21Z")
Hello Team, I need to put filters for logstash for querying data coming from FTP servers. I havent worked on filters much, just have rough idea, so i created one for some below test logs: Thu Jul 4 06:01:45 2019 \[pid … --- ## [Unable to start elasticsearch service](https://discuss.elastic.co/t/unable-to-start-elasticsearch-service/312083)
**Author:** [@Alice\_Walker](https://discuss.elastic.co/u/Alice_Walker)\ **Replies:** 2\ **Last updated:** [August 17, 2022, 7:50am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-service/312083 "2022-08-17T07:50:03Z")
Unable to start elastisearch service on AWS EC2 instances. systemctl start elasticsearch Job for elasticsearch.service failed because a fatal signal was delivered to the control process. See "systemctl status elasticse… --- ## [Document contains at least one immense term error](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-error/304057)
**Author:** [@VV1002](https://discuss.elastic.co/u/VV1002)\ **Replies:** 2\ **Last updated:** [May 5, 2022, 8:25pm UTC](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-error/304057 "2022-05-05T20:25:25Z")
Hi, I am trying to add some data to ES using javascript client, I am getting this error ResponseError: illegal\_argument\_exception: \[illegal\_argument\_exception\] Reason: Document contains at least one immense term in fi… --- ## [Filter on @timestamp](https://discuss.elastic.co/t/filter-on-timestamp/127748)
**Author:** [@krsna](https://discuss.elastic.co/u/krsna)\ **Replies:** 2\ **Last updated:** [April 17, 2018, 6:56am UTC](https://discuss.elastic.co/t/filter-on-timestamp/127748 "2018-04-17T06:56:39Z")
Hello team, There is some timeseries data in an index that is captured every 4 minutes. So there are 15 entries every hour. Below is the sample data. |@timestamp| No.of hits | |April 12th 2018, 09:00:00.000|36| |Apri… --- ## [Error when generating reports](https://discuss.elastic.co/t/error-when-generating-reports/310791)
**Author:** [@tcapp24](https://discuss.elastic.co/u/tcapp24)\ **Replies:** 5\ **Last updated:** [August 2, 2022, 3:55pm UTC](https://discuss.elastic.co/t/error-when-generating-reports/310791 "2022-08-02T15:55:42Z")
Hello, Currently we are trying to generate a report but keep getting the error message below: Error: Failed to decrypt report job data. Please ensure that xpack.reporting.encryptionKey is set and re-generate this repo… --- ## [Combine scores from multi-match and date range](https://discuss.elastic.co/t/combine-scores-from-multi-match-and-date-range/154825)
**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\ **Replies:** 5\ **Last updated:** [November 13, 2018, 9:19am UTC](https://discuss.elastic.co/t/combine-scores-from-multi-match-and-date-range/154825 "2018-11-13T09:19:18Z")
Hey there, I want to consider the dates while calculating scores, meaning that a document score is a combination of both multi-match fields and date. Here's my code: var response = elasticClient.Search\(s =\> … --- ## [Why the returned score is more than 100 , like , 113.445 ,115?](https://discuss.elastic.co/t/why-the-returned-score-is-more-than-100-like-113-445-115/75618)
**Author:** [@Reza\_Shirazi](https://discuss.elastic.co/u/Reza_Shirazi)\ **Replies:** 5\ **Last updated:** [February 19, 2017, 8:31am UTC](https://discuss.elastic.co/t/why-the-returned-score-is-more-than-100-like-113-445-115/75618 "2017-02-19T08:31:56Z")
Hi, I am running a compound boolean match query against 100k rows and what I get as the score for the matched documents is between 0 to more than 100, like 113.494 or 111.8383 etc. Why the scoring is more than 100 and i… --- ## [Elaticsearch 2.1.2 crashing on OpenJDK (1.7.0\_79-b14)](https://discuss.elastic.co/t/elaticsearch-2-1-2-crashing-on-openjdk-1-7-0-79-b14/61256)
**Author:** [@pmathur](https://discuss.elastic.co/u/pmathur)\ **Replies:** 5\ **Last updated:** [January 11, 2017, 10:26am UTC](https://discuss.elastic.co/t/elaticsearch-2-1-2-crashing-on-openjdk-1-7-0-79-b14/61256 "2017-01-11T10:26:06Z")
Hi, I am trying to run elasticsearch 2.1.2 on OpenJDK (1.7.0\_79-b14) but it keeps crashing due to SIGSEGV , can anyone please suggest what could be done are their any know issue with these version of OpenJDK and elastic… --- ## [Reindex fails on array formatted geo\_point](https://discuss.elastic.co/t/reindex-fails-on-array-formatted-geo-point/107054)
**Author:** [@andrewgstreet](https://discuss.elastic.co/u/andrewgstreet)\ **Replies:** 0\ **Last updated:** [November 9, 2017, 2:26pm UTC](https://discuss.elastic.co/t/reindex-fails-on-array-formatted-geo-point/107054 "2017-11-09T14:26:11Z")
I'm trying to perform a reindex with only subtle mapping changes. One those changes doesn't apply to a field with the type of geo\_point. In the existing index, the mapping is {MapCoordinate : {"type":"geo\_point"}} In … --- ## [Filebeat timestamp processor to parse from epoch/unix\_ms to readable format](https://discuss.elastic.co/t/filebeat-timestamp-processor-to-parse-from-epoch-unix-ms-to-readable-format/329712)
**Author:** [@rkelastic](https://discuss.elastic.co/u/rkelastic)\ **Replies:** 4\ **Last updated:** [April 12, 2023, 11:37am UTC](https://discuss.elastic.co/t/filebeat-timestamp-processor-to-parse-from-epoch-unix-ms-to-readable-format/329712 "2023-04-12T11:37:45Z")
I want to convert an epoch timestamp (ex: 1680940932415) to readable format (ex: '2006-01-02 15:04:05') using timestamp processor (Timestamp | Filebeat Reference \[8.7\] | Elastic), but am unable to achieve it. processor… --- ## [Filebeat using go lang](https://discuss.elastic.co/t/filebeat-using-go-lang/168153)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 4\ **Last updated:** [February 13, 2019, 7:32am UTC](https://discuss.elastic.co/t/filebeat-using-go-lang/168153 "2019-02-13T07:32:36Z")
HI Team, I want to know some information about filebeat using golang. Currently, I'm using golang api in that i can use elasticsearch to index my data. Is it possible to use filebeat with that to send data from filebeat… --- ## [Is it fine to have a 2 node cluster for Elastic Search?](https://discuss.elastic.co/t/is-it-fine-to-have-a-2-node-cluster-for-elastic-search/27585)
**Author:** [@Zeal\_Vora](https://discuss.elastic.co/u/Zeal_Vora)\ **Replies:** 4\ **Last updated:** [August 18, 2015, 10:25pm UTC](https://discuss.elastic.co/t/is-it-fine-to-have-a-2-node-cluster-for-elastic-search/27585 "2015-08-18T22:25:48Z")
Hi One of the person said that he uses 2 node cluster for Elastic Search and he has set both the nodes to master and it does the job. Is this a feasible way of doing it ? I've seen in Red Hat Cluster that they have 2… --- ## [How to get maximum value of field in events?](https://discuss.elastic.co/t/how-to-get-maximum-value-of-field-in-events/24167)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 4\ **Last updated:** [June 23, 2015, 10:12am UTC](https://discuss.elastic.co/t/how-to-get-maximum-value-of-field-in-events/24167 "2015-06-23T10:12:31Z")
I have two entries of message event, which has two array fields i have to find out maximum length of these array. Is there any ways.? --- ## [Backup & retention strategy](https://discuss.elastic.co/t/backup-retention-strategy/60683)
**Author:** [@eirc](https://discuss.elastic.co/u/eirc)\ **Replies:** 1\ **Last updated:** [September 16, 2016, 11:38am UTC](https://discuss.elastic.co/t/backup-retention-strategy/60683 "2016-09-16T11:38:33Z")
Hello, we are new to the Elastic Stack and we're trying to design our backup & data retention strategy. Our use case is for logs and so we have the standard index per day setup. Before delving into Elasticsearch inte… --- ## [Elasticsearch Ingest node gsub processor replace character](https://discuss.elastic.co/t/elasticsearch-ingest-node-gsub-processor-replace-character/115817)
**Author:** [@anson\_ch](https://discuss.elastic.co/u/anson_ch)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-ingest-node-gsub-processor-replace-character/115817 "2018-01-17T08:40:05Z")
I am trying to use the gsub processor to replace characters such as " to \\" curl -XPOST 'localhost:9200/\_ingest/pipeline/\_simulate?pretty' -H 'Content-Type: application/json' -d' { "pipeline": { "description" : "par… --- ## [Filebeat 0 hits? Require help to resolve](https://discuss.elastic.co/t/filebeat-0-hits-require-help-to-resolve/49789)
**Author:** [@Leonard\_Larios\_Chan](https://discuss.elastic.co/u/Leonard_Larios_Chan)\ **Replies:** 2\ **Last updated:** [May 11, 2016, 10:45pm UTC](https://discuss.elastic.co/t/filebeat-0-hits-require-help-to-resolve/49789 "2016-05-11T22:45:10Z")
Hi! I'm new to using the ELK stack and after configuring, installing the ELK stack and finally coming to filebeat, I can't seem to get a hit after running curl -XGET 'http://localhost:9200/filebeat-\*/\_search?pretty' … --- ## [Kibana throws error while creating index pattern](https://discuss.elastic.co/t/kibana-throws-error-while-creating-index-pattern/240932)
**Author:** [@Sai\_Avinash\_Duddupud](https://discuss.elastic.co/u/Sai_Avinash_Duddupud)\ **Replies:** 6\ **Last updated:** [July 13, 2020, 1:44pm UTC](https://discuss.elastic.co/t/kibana-throws-error-while-creating-index-pattern/240932 "2020-07-13T13:44:02Z")
I have setup logstash on server1 which is sending data to elastic-search(server2) so that I visualise the same in Kibana but when I am creating index patter it throws Internal Server Error as show in the following image. … --- ## [Not able to see csv option in share button in discover tab](https://discuss.elastic.co/t/not-able-to-see-csv-option-in-share-button-in-discover-tab/195974)
**Author:** [@Ulka](https://discuss.elastic.co/u/Ulka)\ **Replies:** 6\ **Last updated:** [August 22, 2019, 9:33am UTC](https://discuss.elastic.co/t/not-able-to-see-csv-option-in-share-button-in-discover-tab/195974 "2019-08-22T09:33:14Z")
Installed kibana 6.7 on kubernetes using helm charts. send some data. If want to export teh data to csv, option is not seen in share button of discover tab. doc say post 6.3, xpack is installed by default. I logged in … --- ## [How to send logstash exec cmd output to elasticsearch](https://discuss.elastic.co/t/how-to-send-logstash-exec-cmd-output-to-elasticsearch/107093)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 6\ **Last updated:** [November 10, 2017, 8:31am UTC](https://discuss.elastic.co/t/how-to-send-logstash-exec-cmd-output-to-elasticsearch/107093 "2017-11-10T08:31:49Z")
Hi , I 'm using exec output plugin and i want to send output of exec cmd to elasticsearch. My logstash conf as shown below input { file { path =\> "/log/sample.log" start\_position =\> "beginning" } } filter… --- ## [Script to move data between clusters](https://discuss.elastic.co/t/script-to-move-data-between-clusters/3557)
**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\ **Replies:** 6\ **Last updated:** [November 14, 2010, 1:17am UTC](https://discuss.elastic.co/t/script-to-move-data-between-clusters/3557 "2010-11-14T01:17:29Z")
Hey, Was curious if anybody had already written scripts to copy data between clusters by pulling docs from one cluster and indexing to another. Preferably, something using the bulk APIs. I started to write this a… --- ## [Unable to enable alerting feature in kibana 7.7](https://discuss.elastic.co/t/unable-to-enable-alerting-feature-in-kibana-7-7/233582)
**Author:** [@keerthikar](https://discuss.elastic.co/u/keerthikar)\ **Replies:** 3\ **Last updated:** [May 26, 2020, 6:00pm UTC](https://discuss.elastic.co/t/unable-to-enable-alerting-feature-in-kibana-7-7/233582 "2020-05-26T18:00:38Z")
Enabling the xpack.encryptedSavedObjects.encryptionKey : xxxx in kibana.yml and elasticsearch fails. kibana.stderr log: Could not create APM Agent configuration: No Living connections FATAL Error: Cluster client can… [Previous page](https://discuss.elastic.co/top.md?page=781&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=783&per_page=50&period=all)