# Top **URL:** https://discuss.elastic.co/top.md?page=81&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 82 --- ## [3 Node Cluster health is always YELLOW](https://discuss.elastic.co/t/3-node-cluster-health-is-always-yellow/59314)
**Author:** [@ramkchirra](https://discuss.elastic.co/u/ramkchirra)\ **Replies:** 12\ **Last updated:** [August 31, 2016, 4:41am UTC](https://discuss.elastic.co/t/3-node-cluster-health-is-always-yellow/59314 "2016-08-31T04:41:35Z")
Hi, I am having a 3 Node cluster (2 Data nodes and 3 Master Eligible) with minimum\_master\_nodes : 2. I have all defaults for shards and Replicas (5 and 1 respectively). But my cluster health is always showing YELLOW… --- ## [\[6.3.0\] homebrew recipe](https://discuss.elastic.co/t/6-3-0-homebrew-recipe/136765)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 12\ **Last updated:** [September 20, 2018, 2:56pm UTC](https://discuss.elastic.co/t/6-3-0-homebrew-recipe/136765 "2018-09-20T14:56:52Z")
I was surprised to see there was no homebrew recipe for 6.3.0 yet and no open PR so I set about creating a PR myself. I ran into some issues with brew audit --strict and, after some digging, found this is why there is no… --- ## [Cluster keeps becoming unresponsive](https://discuss.elastic.co/t/cluster-keeps-becoming-unresponsive/35677)
**Author:** [@yoitsro](https://discuss.elastic.co/u/yoitsro)\ **Replies:** 24\ **Last updated:** [November 26, 2015, 5:15pm UTC](https://discuss.elastic.co/t/cluster-keeps-becoming-unresponsive/35677 "2015-11-26T17:15:15Z")
Hey, Our complete three node cluster keeps on becoming completely unresponsive. The index concerned is up and running on one node, but isn't able to replicate to the other two nodes due to a mapping issue, apparently. … --- ## [Elasticsearch hangs at 541 shards](https://discuss.elastic.co/t/elasticsearch-hangs-at-541-shards/59287)
**Author:** [@mkoch](https://discuss.elastic.co/u/mkoch)\ **Replies:** 17\ **Last updated:** [September 1, 2016, 2:40pm UTC](https://discuss.elastic.co/t/elasticsearch-hangs-at-541-shards/59287 "2016-09-01T14:40:01Z")
Greetings, this is my setup: CentOS 7 on VMware ESXi, 8GB RAM elasticsearch 2.3.5 (via repo) 1 node When I'm starting the service, elasticsearch hangs at status red. Here's the output: curl -XGET http://localhost… --- ## [\[ANN\] LemmaGen Analysis for ElasticSearch plugin](https://discuss.elastic.co/t/ann-lemmagen-analysis-for-elasticsearch-plugin/14585)
**Author:** [@vhyza1](https://discuss.elastic.co/u/vhyza1)\ **Replies:** 14\ **Last updated:** [December 15, 2013, 6:27pm UTC](https://discuss.elastic.co/t/ann-lemmagen-analysis-for-elasticsearch-plugin/14585 "2013-12-15T18:27:46Z")
Hello, I wrote plugin which provides jLemmaGen (https://bitbucket.org/hlavki/jlemmagen) lemmatizer with 14 prebuilt European lexicons. jLemmaGen is Java implementation of LemmaGen (Multilingual Open Source Lemmatis… --- ## [Error fetching fields for data in Security Dashboard](https://discuss.elastic.co/t/error-fetching-fields-for-data-in-security-dashboard/313573)
**Author:** [@GustavoPires](https://discuss.elastic.co/u/GustavoPires)\ **Replies:** 13\ **Last updated:** [September 22, 2022, 1:12pm UTC](https://discuss.elastic.co/t/error-fetching-fields-for-data-in-security-dashboard/313573 "2022-09-22T13:12:16Z")
Hello guys, I am getting the error below when I go to the security dashboard overview: Error fetching fields for data view .alerts-security.alerts-default,apm--transaction,auditbeat-,endgame-,filebeat-,logs-,packetbeat… --- ## [Windows Server 2012 R2 Discover (5.1.1)](https://discuss.elastic.co/t/windows-server-2012-r2-discover-5-1-1/73160)
**Author:** [@Mario\_van\_Gemert](https://discuss.elastic.co/u/Mario_van_Gemert)\ **Replies:** 23\ **Last updated:** [March 20, 2017, 6:58am UTC](https://discuss.elastic.co/t/windows-server-2012-r2-discover-5-1-1/73160 "2017-03-20T06:58:38Z")
Tried to use Kibana on Windows Server 2012R2, but Discover and Dashboard does not work. Is this a known problem? Using 5.1.1. --- ## [Logstash Setup with GeoIP](https://discuss.elastic.co/t/logstash-setup-with-geoip/195231)
**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\ **Replies:** 17\ **Last updated:** [September 11, 2019, 2:58am UTC](https://discuss.elastic.co/t/logstash-setup-with-geoip/195231 "2019-09-11T02:58:02Z")
I am attempting to setup geoip on Logstash 7.3.0. I have seen an old post on how to set it up, but I want to make sure I'm doing it right. In the logstash config file I add the below code. Is this correct? filter { g… --- ## [Can elastic/rally point to existing ES configurations for benchmarking](https://discuss.elastic.co/t/can-elastic-rally-point-to-existing-es-configurations-for-benchmarking/56627)
**Author:** [@paulbarr](https://discuss.elastic.co/u/paulbarr)\ **Replies:** 9\ **Last updated:** [January 10, 2017, 10:21am UTC](https://discuss.elastic.co/t/can-elastic-rally-point-to-existing-es-configurations-for-benchmarking/56627 "2017-01-10T10:21:05Z")
Hey, I looking at doing some bench marking for different ElasticSearch cluster configurations I've seen this: https://github.com/elastic/rally It says that when you kick it off it downloads the benchmark data, pulls do… --- ## [Huge concurrent data ingestion to ElasticSearch](https://discuss.elastic.co/t/huge-concurrent-data-ingestion-to-elasticsearch/142318)
**Author:** [@supergunme](https://discuss.elastic.co/u/supergunme)\ **Replies:** 15\ **Last updated:** [August 21, 2018, 5:22am UTC](https://discuss.elastic.co/t/huge-concurrent-data-ingestion-to-elasticsearch/142318 "2018-08-21T05:22:02Z")
Hi Guys, I encountered an issue in ElasticSearch. We use Logstash listen a TCP connection, then filter and output. We only have a few dissect filters in Logstash to improve Logstash processing speed. Our logstash settin… --- ## [Помогите составить запрос с исключениями](https://discuss.elastic.co/t/topic/77469)
**Author:** [@pablissimo77](https://discuss.elastic.co/u/pablissimo77)\ **Replies:** 9\ **Last updated:** [March 8, 2017, 9:46pm UTC](https://discuss.elastic.co/t/topic/77469 "2017-03-08T21:46:51Z")
Здравствуйте! Изучаю ElasticSearch несколько месяцев, создал индекс с подобным типом документа: "mappings": { "news": { "properties" : { "title" : {"type" : "text", "fields" : {"russian" : {"type" … --- ## [Elastic Search SSL installation issue](https://discuss.elastic.co/t/elastic-search-ssl-installation-issue/195030)
**Author:** [@Prakash\_Choudhary](https://discuss.elastic.co/u/Prakash_Choudhary)\ **Replies:** 16\ **Last updated:** [August 14, 2019, 5:34am UTC](https://discuss.elastic.co/t/elastic-search-ssl-installation-issue/195030 "2019-08-14T05:34:30Z")
I tried to increase the security of elasticsearch but facing the issue below. i am unable to find the solution of it. request to please help me. below are the logs. Caused by: java.security.cert.CertificateParsingExcept… --- ## [APM Agent logs shown on Discover but not on APM UI](https://discuss.elastic.co/t/apm-agent-logs-shown-on-discover-but-not-on-apm-ui/289706)
**Author:** [@jorsec](https://discuss.elastic.co/u/jorsec)\ **Replies:** 14\ **Last updated:** [December 2, 2021, 1:55pm UTC](https://discuss.elastic.co/t/apm-agent-logs-shown-on-discover-but-not-on-apm-ui/289706 "2021-12-02T13:55:03Z")
Hello all, Currently i am using ELK APM for my java application running on tomcat, with centos 7 as a linux distrubution and its my fresh installation but while apm java agent transfer the logs to apm server -\> elastrics… --- ## [Passing to output index field but getting \[@metadata\]\[index\]](https://discuss.elastic.co/t/passing-to-output-index-field-but-getting-metadata-index/223650)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 9\ **Last updated:** [March 15, 2020, 5:50pm UTC](https://discuss.elastic.co/t/passing-to-output-index-field-but-getting-metadata-index/223650 "2020-03-15T17:50:12Z")
Hi , i'm creating index name dynamically but when I'm passing the field to output i'm getting the variable name (\[@metadata\]\[index\]): mutate { add\_field =\> { "\[@metadata\]\[index\_prefix\]" =\> "system-secure" } } outpu… --- ## [Error establishing direct connection to mongo node at \[ip:port\]. Error output: no reachable servers](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-at-ip-port-error-output-no-reachable-servers/233995)
**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\ **Replies:** 19\ **Last updated:** [June 9, 2020, 12:48pm UTC](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-at-ip-port-error-output-no-reachable-servers/233995 "2020-06-09T12:48:46Z")
Hi, I am using mongodb with replicaset and ssl enabled. When I am trying to create metricbeat mongodb module am not sure How to give URL. I have only CA file. I don't undestand how to solve it. hosts: \["mongodb://rspel… --- ## [Parsing human readable log files with grok](https://discuss.elastic.co/t/parsing-human-readable-log-files-with-grok/26821)
**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Replies:** 18\ **Last updated:** [August 6, 2015, 9:05pm UTC](https://discuss.elastic.co/t/parsing-human-readable-log-files-with-grok/26821 "2015-08-06T21:05:20Z")
We have the following log sample file that was created in a human readable format. I'm interested in the lines in bold and want to capture the following event fields: timestamp (i.e. 7/17/15 18:50:59:616 GMT) status … --- ## [How to adjust apm client .setLabel() index field type to "geo\_point"](https://discuss.elastic.co/t/how-to-adjust-apm-client-setlabel-index-field-type-to-geo-point/226994)
**Author:** [@rgroleau](https://discuss.elastic.co/u/rgroleau)\ **Replies:** 12\ **Last updated:** [April 27, 2020, 3:41am UTC](https://discuss.elastic.co/t/how-to-adjust-apm-client-setlabel-index-field-type-to-geo-point/226994 "2020-04-27T03:41:21Z")
I am using the elastic apm client for nodejs to set custom labels when my IoT devices communicate with my IoT API. Here is the function documentation. This API works great, but always sets the label value type to "strin… --- ## [7.8 doesn't parse apache access logs](https://discuss.elastic.co/t/7-8-doesnt-parse-apache-access-logs/242342)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 15\ **Last updated:** [August 28, 2020, 6:07pm UTC](https://discuss.elastic.co/t/7-8-doesnt-parse-apache-access-logs/242342 "2020-08-28T18:07:39Z")
I had an old 6.x stack setup a while ago but had to shut it down. I'm back to try another round and hopefully its permanent this time. I need to have my Apache 2.4 logs parsed so I can create custom dashboards. All serv… --- ## [Elasticsearch API SourceAsMap](https://discuss.elastic.co/t/elasticsearch-api-sourceasmap/173191)
**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\ **Replies:** 15\ **Last updated:** [March 20, 2019, 5:10pm UTC](https://discuss.elastic.co/t/elasticsearch-api-sourceasmap/173191 "2019-03-20T17:10:46Z")
I use this take only SourceAsMap List\ llist = new ArrayList\(); SearchResponse response = client.search(new SearchRequest("test"), RequestOptions.DEFAULT); for (SearchHit hit : response.getHits()) { l… --- ## [Winlogbeat service won't start - Server 2016](https://discuss.elastic.co/t/winlogbeat-service-wont-start-server-2016/211374)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 9\ **Last updated:** [January 2, 2020, 8:15pm UTC](https://discuss.elastic.co/t/winlogbeat-service-wont-start-server-2016/211374 "2020-01-02T20:15:22Z")
I'm trying to install winlogbeat on a Server 2016 host but the service won't start. I've tested the config file using: winlogbeat.exe test config and it comes back OK. I've tried running it in the foreground using winlog… --- ## [Pass additional filters with search text from Search UI to App search](https://discuss.elastic.co/t/pass-additional-filters-with-search-text-from-search-ui-to-app-search/199647)
**Author:** [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)\ **Replies:** 12\ **Last updated:** [September 26, 2019, 6:39am UTC](https://discuss.elastic.co/t/pass-additional-filters-with-search-text-from-search-ui-to-app-search/199647 "2019-09-26T06:39:32Z")
Is there any way to pass additional filters with search text from search UI to app search? We have advance filter screen, there user can select the several filters and hit the submit button for search result. --- ## [Elasticsearch upgrade from 6.4.1 to 6.7.0, upgraded node is unable to join the cluster](https://discuss.elastic.co/t/elasticsearch-upgrade-from-6-4-1-to-6-7-0-upgraded-node-is-unable-to-join-the-cluster/175442)
**Author:** [@shiv94](https://discuss.elastic.co/u/shiv94)\ **Replies:** 10\ **Last updated:** [April 10, 2019, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-6-4-1-to-6-7-0-upgraded-node-is-unable-to-join-the-cluster/175442 "2019-04-10T16:53:07Z")
Hello, elasticserach, logstash, kibana - 6.4.1 version Rolling upgrade I have 3 nodes in the ELK cluster. I upgraded elasticsearch in node 3 from 6.4.1 to 6.7.0, then I get the following errors. In the logs, \[2019-0… --- ## [Index : MySQL to Elasticsearch 6.2 with Logstash 6.2](https://discuss.elastic.co/t/index-mysql-to-elasticsearch-6-2-with-logstash-6-2/131573)
**Author:** [@phenric](https://discuss.elastic.co/u/phenric)\ **Replies:** 30\ **Last updated:** [May 19, 2018, 7:45am UTC](https://discuss.elastic.co/t/index-mysql-to-elasticsearch-6-2-with-logstash-6-2/131573 "2018-05-19T07:45:09Z")
Hi, I'm trying to use Logstash 6.2 and mysql-connector-java-8.0.11 to import rows from MySQL server to ElasticSearch 6.2. Everything seems working unless the creation of the index in Elasticsearch. I thought it was auto… --- ## [Can't configure PKI authentication](https://discuss.elastic.co/t/cant-configure-pki-authentication/88673)
**Author:** [@Shlomi\_Toren](https://discuss.elastic.co/u/Shlomi_Toren)\ **Replies:** 14\ **Last updated:** [June 8, 2017, 6:23pm UTC](https://discuss.elastic.co/t/cant-configure-pki-authentication/88673 "2017-06-08T18:23:24Z")
Hey all, I'm trying to use PKI authentication in my cluster, meaning the client will need to present certificates in order to get data. I wrote the following in elasticsearch.yml: xpack: security: authc: real… --- ## [Trust two different certs on two nodes](https://discuss.elastic.co/t/trust-two-different-certs-on-two-nodes/235642)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 11\ **Last updated:** [June 17, 2020, 6:04pm UTC](https://discuss.elastic.co/t/trust-two-different-certs-on-two-nodes/235642 "2020-06-17T18:04:55Z")
We are trying to add TLS security to our cluster. For compliance, all certs need to be generated via a in-house tool (they are signed by a 3rd party entity). I am currently testing with two nodes on my local box. The ce… --- ## [KV filter and fields separator](https://discuss.elastic.co/t/kv-filter-and-fields-separator/273286)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 23\ **Last updated:** [May 19, 2021, 12:13pm UTC](https://discuss.elastic.co/t/kv-filter-and-fields-separator/273286 "2021-05-19T12:13:05Z")
Good morning. I'm using a KV filter in logstash to parse the content of a JSON log. I have to use a comma "," as separator between different fileds, but there is some values wich contains string with commas in the text, … --- ## [Logstash is not creating new index in elastic cloud](https://discuss.elastic.co/t/logstash-is-not-creating-new-index-in-elastic-cloud/103774)
**Author:** [@sbade](https://discuss.elastic.co/u/sbade)\ **Replies:** 18\ **Last updated:** [October 12, 2017, 10:28pm UTC](https://discuss.elastic.co/t/logstash-is-not-creating-new-index-in-elastic-cloud/103774 "2017-10-12T22:28:15Z")
I' ve got a pretty simple configuration to setup. what I need to do is create a new index for each of my servers in my elastic cloud setup. my output is elasticsearch { hosts =\> "https://XXXXXXXXX.us-east-1.aws.found… --- ## [Packetbeat for Windows does not capture TCP port data.?](https://discuss.elastic.co/t/packetbeat-for-windows-does-not-capture-tcp-port-data/44965)
**Author:** [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\ **Replies:** 11\ **Last updated:** [November 16, 2016, 11:22am UTC](https://discuss.elastic.co/t/packetbeat-for-windows-does-not-capture-tcp-port-data/44965 "2016-11-16T11:22:23Z")
Dear Team, Basis the link below Packetbeat does not capture packets on TCP port on Windows. and current issue I am facing on my local instance is that packet beat does not capture TCP port Windows7 64bit packe… --- ## [Can not load kibana homepage](https://discuss.elastic.co/t/can-not-load-kibana-homepage/213243)
**Author:** [@Jay\_Tran](https://discuss.elastic.co/u/Jay_Tran)\ **Replies:** 11\ **Last updated:** [December 30, 2019, 3:08pm UTC](https://discuss.elastic.co/t/can-not-load-kibana-homepage/213243 "2019-12-30T15:08:21Z")
Hi All, I'm using kibana 6.8, I got below error after launched kibana Thank you for any response. --- ## [WARN Content type detection for rest requests is deprecated](https://discuss.elastic.co/t/warn-content-type-detection-for-rest-requests-is-deprecated/90269)
**Author:** [@barry1](https://discuss.elastic.co/u/barry1)\ **Replies:** 10\ **Last updated:** [June 22, 2017, 7:58am UTC](https://discuss.elastic.co/t/warn-content-type-detection-for-rest-requests-is-deprecated/90269 "2017-06-22T07:58:51Z")
I'm seeing a lot of these warnings in our logs, can anyone tell me what they are, and where they are coming from? \[2017-06-21T09:36:18,650\]\[WARN \]\[org.elasticsearch.deprecation.rest.RestController\] Content type detecti… --- ## [Частые обновления индекса](https://discuss.elastic.co/t/topic/106577)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 13\ **Last updated:** [November 15, 2017, 4:36pm UTC](https://discuss.elastic.co/t/topic/106577 "2017-11-15T16:36:47Z")
Как ведет себя индекс при частых обновлениях? Он будет увеличиваться до бесконечности или же elastic будет оптимизировать индекс и форматировать его? --- ## [How to exclude facets in filters or get conditional filters/conditionalFacets](https://discuss.elastic.co/t/how-to-exclude-facets-in-filters-or-get-conditional-filters-conditionalfacets/206044)
**Author:** [@Swapnil\_Ghorpade](https://discuss.elastic.co/u/Swapnil_Ghorpade)\ **Replies:** 11\ **Last updated:** [November 2, 2019, 9:41am UTC](https://discuss.elastic.co/t/how-to-exclude-facets-in-filters-or-get-conditional-filters-conditionalfacets/206044 "2019-11-02T09:41:34Z")
App structure Engine : national-parks-example schema: \[title, id, state, description\]. Facet shows filters based on state field values. I have following scenario There are different users who can access documents fr… --- ## [Why Filebeat returns Unicode character code instead of XML tag symbol under message, it is showing like \\u003c and \\u003e](https://discuss.elastic.co/t/why-filebeat-returns-unicode-character-code-instead-of-xml-tag-symbol-under-message-it-is-showing-like-u003c-and-u003e/183916)
**Author:** [@manjsr](https://discuss.elastic.co/u/manjsr)\ **Replies:** 14\ **Last updated:** [June 11, 2019, 4:54pm UTC](https://discuss.elastic.co/t/why-filebeat-returns-unicode-character-code-instead-of-xml-tag-symbol-under-message-it-is-showing-like-u003c-and-u003e/183916 "2019-06-11T16:54:40Z")
I'm new here even for ELK. Just trying to use Filebeat to collect XML log and push it to Kafka but Filebeat returns Unicode character code instead of XML tag symbol under message, it is showing like \\u003c and \\u003e. I… --- ## [User in xpack security not added](https://discuss.elastic.co/t/user-in-xpack-security-not-added/223983)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 13\ **Last updated:** [April 3, 2020, 8:57pm UTC](https://discuss.elastic.co/t/user-in-xpack-security-not-added/223983 "2020-04-03T20:57:52Z")
I am trying to add user in kibana after running the ./bin/kibana-keystore add elasticsearch.username --allow-root and password command in Kibana folder. But when I restart kibana after setting username and password, i ge… --- ## [Three types of WARN/ERRORs in filebeat logs](https://discuss.elastic.co/t/three-types-of-warn-errors-in-filebeat-logs/105136)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 10\ **Last updated:** [October 27, 2017, 1:56pm UTC](https://discuss.elastic.co/t/three-types-of-warn-errors-in-filebeat-logs/105136 "2017-10-27T13:56:24Z")
Hi, Filebeat experts, we encountered three types of errors, copied below. I am wondering anyone could shed light on under what scenario each error would happen? is the warning or error serious? e.g., whether the error… --- ## [Issue with integrating watcher webhook with ServiceNow](https://discuss.elastic.co/t/issue-with-integrating-watcher-webhook-with-servicenow/211536)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 19\ **Last updated:** [December 24, 2019, 4:16am UTC](https://discuss.elastic.co/t/issue-with-integrating-watcher-webhook-with-servicenow/211536 "2019-12-24T04:16:32Z")
Hello there: We face issue when integrating watcher webhook to integrate with ServiceNow. Here is what we did and got…. If possible we’d prefer to set up a session so I may show you the details and learn from you. We … --- ## [Kibana does not show documents updated via index API](https://discuss.elastic.co/t/kibana-does-not-show-documents-updated-via-index-api/197175)
**Author:** [@cmelzer](https://discuss.elastic.co/u/cmelzer)\ **Replies:** 9\ **Last updated:** [August 29, 2019, 7:41am UTC](https://discuss.elastic.co/t/kibana-does-not-show-documents-updated-via-index-api/197175 "2019-08-29T07:41:35Z")
Hey Guys, I encountered an issue on my elasic installation. While moving the elastic installation from one server to an other one, I had an error in my logstash pipeline so a field was not correctly parsed as json. No… --- ## [Scan/Scroll performance and cache](https://discuss.elastic.co/t/scan-scroll-performance-and-cache/44173)
**Author:** [@vad](https://discuss.elastic.co/u/vad)\ **Replies:** 10\ **Last updated:** [April 4, 2016, 12:35pm UTC](https://discuss.elastic.co/t/scan-scroll-performance-and-cache/44173 "2016-04-04T12:35:07Z")
We're running Elasticsearch 1.7.5 and we have an API that, given a few filters (API-level, an abstraction over what's stored in ES) returns a list of matching doc ids. This list can be 100k ids and that's why we're using… --- ## [Filter dropdown for a field missing one of the top 5 values displayed under "Available fields" section](https://discuss.elastic.co/t/filter-dropdown-for-a-field-missing-one-of-the-top-5-values-displayed-under-available-fields-section/194458)
**Author:** [@deepalalitaakella](https://discuss.elastic.co/u/deepalalitaakella)\ **Replies:** 14\ **Last updated:** [August 28, 2019, 3:39pm UTC](https://discuss.elastic.co/t/filter-dropdown-for-a-field-missing-one-of-the-top-5-values-displayed-under-available-fields-section/194458 "2019-08-28T15:39:17Z")
I am having an issue with the dropdown values listed for a field when trying to filter for an index. It always shows the same 10 values but doesn't show one of the top 5 values listed in the "Available fields" section fo… --- ## [Can't access Detections from a different space](https://discuss.elastic.co/t/cant-access-detections-from-a-different-space/272118)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 9\ **Last updated:** [May 6, 2021, 8:55pm UTC](https://discuss.elastic.co/t/cant-access-detections-from-a-different-space/272118 "2021-05-06T20:55:49Z")
Hi, \*Running ELK 7.11.2 Standalone I am trying to setup a user to have access to Security in a separate space. I have been following all directions from the official documentation, but the user can't access the "Detect… --- ## [Unable to Install Xpack on ElasticSearch and Kibana](https://discuss.elastic.co/t/unable-to-install-xpack-on-elasticsearch-and-kibana/83827)
**Author:** [@Sam67000](https://discuss.elastic.co/u/Sam67000)\ **Replies:** 9\ **Last updated:** [April 27, 2017, 1:22pm UTC](https://discuss.elastic.co/t/unable-to-install-xpack-on-elasticsearch-and-kibana/83827 "2017-04-27T13:22:28Z")
Hella EveryOne , I need help to install x-pack plugin. When I try to install it on elasticSearch with the following command : bin/elasticsearch-plugin install x-pack, that put me this : I do not know if the installa… --- ## [Elasticsearch high CPU usage on a mostly bulk indexing use case](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-on-a-mostly-bulk-indexing-use-case/233196)
**Author:** [@ssouris](https://discuss.elastic.co/u/ssouris)\ **Replies:** 10\ **Last updated:** [May 26, 2020, 9:59pm UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-on-a-mostly-bulk-indexing-use-case/233196 "2020-05-26T21:59:35Z")
Hi, we are running Elasticsearch 7.6.2 on our own in AWS. We have: 6 data nodes on i3en.xlarge instances 3 dedicated master nodes 200 indices storing ~800million documents. Total size ~5TB 30s refresh interval We are… --- ## [Csv filter can only be used for one file? (multiple files messes up fields/columns)](https://discuss.elastic.co/t/csv-filter-can-only-be-used-for-one-file-multiple-files-messes-up-fields-columns/99995)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 13\ **Last updated:** [September 13, 2017, 4:33am UTC](https://discuss.elastic.co/t/csv-filter-can-only-be-used-for-one-file-multiple-files-messes-up-fields-columns/99995 "2017-09-13T04:33:48Z")
Hi, I'm having a big problem with the csv filter. I got four .csv files, each with a separate .conf. When I run those configs in stdout they are fine. When I run logstash and have only one of them active, data gets imp… --- ## [ERR failed to initialize elasticsearch plugin as output: missing condition](https://discuss.elastic.co/t/err-failed-to-initialize-elasticsearch-plugin-as-output-missing-condition/126162)
**Author:** [@sunny1](https://discuss.elastic.co/u/sunny1)\ **Replies:** 25\ **Last updated:** [March 30, 2018, 7:30pm UTC](https://discuss.elastic.co/t/err-failed-to-initialize-elasticsearch-plugin-as-output-missing-condition/126162 "2018-03-30T19:30:03Z")
Hello can some please help me get the condition set correctly. I want to create multiple index based on source file. So i used document\_type to identify the different input file. When i try to specify condition i get err… --- ## [Kibana Alerts from API](https://discuss.elastic.co/t/kibana-alerts-from-api/245168)
**Author:** [@PaulMess](https://discuss.elastic.co/u/PaulMess)\ **Replies:** 9\ **Last updated:** [August 18, 2020, 12:02am UTC](https://discuss.elastic.co/t/kibana-alerts-from-api/245168 "2020-08-18T00:02:12Z")
Can I create an alert using the kibana API? --- ## [When I refresh field list, it fails because of 【blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];: \[cluster\_block\_exception\] blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];】](https://discuss.elastic.co/t/when-i-refresh-field-list-it-fails-because-of-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api/168158)
**Author:** [@Orli](https://discuss.elastic.co/u/Orli)\ **Replies:** 12\ **Last updated:** [February 14, 2019, 8:16am UTC](https://discuss.elastic.co/t/when-i-refresh-field-list-it-fails-because-of-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api/168158 "2019-02-14T08:16:53Z")
Hi, When I refreshed field list in Management --\> Kibana --\> Index Patterns, it failed because of 【blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];: \[cluster\_block\_exception\] blocked by: \[FORBIDDEN/12/in… --- ## [How to set refresh\_interval globally in runing elastic search cluster](https://discuss.elastic.co/t/how-to-set-refresh-interval-globally-in-runing-elastic-search-cluster/199225)
**Author:** [@arun.kumar92](https://discuss.elastic.co/u/arun.kumar92)\ **Replies:** 10\ **Last updated:** [September 13, 2019, 10:20am UTC](https://discuss.elastic.co/t/how-to-set-refresh-interval-globally-in-runing-elastic-search-cluster/199225 "2019-09-13T10:20:52Z")
Hi Team Kindly help me to configure refresh\_interval settings globally in running elastic search cluster Kindly go through the below command, Which I used to setup refresh\_interval curl -X PUT -k -u elastic:xxxxxx "h… --- ## [UTC+2 been added to the Time field in kibana](https://discuss.elastic.co/t/utc-2-been-added-to-the-time-field-in-kibana/82724)
**Author:** [@rabbit](https://discuss.elastic.co/u/rabbit)\ **Replies:** 9\ **Last updated:** [April 28, 2017, 10:09am UTC](https://discuss.elastic.co/t/utc-2-been-added-to-the-time-field-in-kibana/82724 "2017-04-28T10:09:52Z")
I have a Timestamp field in my log lines as following : 2017-04-03 07:21:39,092 In grok pattern I get the field "data"(timestamp\_iso8601 type) as following : grok{ match =\> {"message" =\> "%{TIMESTAMP\_ISO8601:… --- ## [Logstash not show any output (again)](https://discuss.elastic.co/t/logstash-not-show-any-output-again/37206)
**Author:** [@Lallartu](https://discuss.elastic.co/u/Lallartu)\ **Replies:** 12\ **Last updated:** [April 22, 2016, 10:54am UTC](https://discuss.elastic.co/t/logstash-not-show-any-output-again/37206 "2016-04-22T10:54:05Z")
I'am trying to use logstash for parsing rest-api logs into file, however the only output is logstash -f ../conf/first-pipeline.conf c:\\ELK\\logstash\\bin\>logstash -f ../conf/first-pipeline.conf io/console not supported; t… --- ## [Updating log file is effecting date value on kibana dashboard](https://discuss.elastic.co/t/updating-log-file-is-effecting-date-value-on-kibana-dashboard/158316)
**Author:** [@Sanchit\_Gupta](https://discuss.elastic.co/u/Sanchit_Gupta)\ **Replies:** 23\ **Last updated:** [December 6, 2018, 6:02am UTC](https://discuss.elastic.co/t/updating-log-file-is-effecting-date-value-on-kibana-dashboard/158316 "2018-12-06T06:02:56Z")
Hi, I am new in ElasticSearch, please help me on this. When my log is updating(SOA Admin log), even single line added, that time My complete Kibana dashboard (discover tab) time option is updating with the current time… [Previous page](https://discuss.elastic.co/top.md?page=80&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=82&per_page=50&period=all)