# Top

**URL:** https://discuss.elastic.co/top.md?page=811&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 812

---

## [Remove pipeline using field wildcard](https://discuss.elastic.co/t/remove-pipeline-using-field-wildcard/167849)

<div class="topic-metadata">

**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\
**Replies:** 6\
**Last updated:** [February 11, 2019, 3:16pm UTC](https://discuss.elastic.co/t/remove-pipeline-using-field-wildcard/167849 "2019-02-11T15:16:16Z")

</div>

I want to remove a field starting with ElapsedTimeAt\* in my remove processor pipeline. Is it possible?

---

## [Watcher - Sending x number of emails per hit](https://discuss.elastic.co/t/watcher-sending-x-number-of-emails-per-hit/128931)

<div class="topic-metadata">

**Author:** [@pstobbe\_corett](https://discuss.elastic.co/u/pstobbe_corett)\
**Replies:** 6\
**Last updated:** [April 23, 2018, 3:06pm UTC](https://discuss.elastic.co/t/watcher-sending-x-number-of-emails-per-hit/128931 "2018-04-23T15:06:30Z")

</div>

Hi, I'm trying to setup a watcher so that based on the number on hits in my query send out that number of emails. It seems to me that this can't be done by simply looping around the email action so I have an idea but n…

---

## [Logstash is missing real time logs](https://discuss.elastic.co/t/logstash-is-missing-real-time-logs/122653)

<div class="topic-metadata">

**Author:** [@Naqib\_Faiyaz](https://discuss.elastic.co/u/Naqib_Faiyaz)\
**Replies:** 6\
**Last updated:** [March 6, 2018, 8:03am UTC](https://discuss.elastic.co/t/logstash-is-missing-real-time-logs/122653 "2018-03-06T08:03:35Z")

</div>

hello!! I'm reading logs with file input plugin. When I'm reading older logs logstash is performing very good. But while reading live logs it is missing aroung 2% of the logs. My files are coming through ftp in a solar…

---

## [Highlighting without HTML tags but structured data](https://discuss.elastic.co/t/highlighting-without-html-tags-but-structured-data/164883)

<div class="topic-metadata">

**Author:** [@stevemao](https://discuss.elastic.co/u/stevemao)\
**Replies:** 0\
**Last updated:** [January 19, 2019, 7:23am UTC](https://discuss.elastic.co/t/highlighting-without-html-tags-but-structured-data/164883 "2019-01-19T07:23:16Z")

</div>

In the docs, if I do GET twitter/\_search { "query" : { "match\_phrase": { "message": "number 1" } }, "highlight" : { "fields" : { "message" : { "type": "plain", …

---

## [Netflow High CPU utilization and poor throughput](https://discuss.elastic.co/t/netflow-high-cpu-utilization-and-poor-throughput/94854)

<div class="topic-metadata">

**Author:** [@jasonkeller](https://discuss.elastic.co/u/jasonkeller)\
**Replies:** 3\
**Last updated:** [August 2, 2017, 10:23am UTC](https://discuss.elastic.co/t/netflow-high-cpu-utilization-and-poor-throughput/94854 "2017-08-02T10:23:01Z")

</div>

I’ve got an issue with Logstash 5.x on an RHEL7 VM (8 vCPU, 2GB memory) on vSphere 6 hosts with E5-2698 v4 Xeon CPUs. I’ve installed the filter plugin and the Netflow plugin - basic gist is that I’m ingesting Netflow an…

---

## [Filebeat not harvesting after startup](https://discuss.elastic.co/t/filebeat-not-harvesting-after-startup/83277)

<div class="topic-metadata">

**Author:** [@jasperla](https://discuss.elastic.co/u/jasperla)\
**Replies:** 3\
**Last updated:** [April 27, 2017, 2:52pm UTC](https://discuss.elastic.co/t/filebeat-not-harvesting-after-startup/83277 "2017-04-27T14:52:21Z")

</div>

After updating filebeat to 5.3.1 I noticed that it no was harvesting new logdata. Upon startup it harvests the existing files and then it fails to process any new events. For example I create a new and empty file and hoo…

---

## [Kibana not showing all events](https://discuss.elastic.co/t/kibana-not-showing-all-events/19270)

<div class="topic-metadata">

**Author:** [@cablenightmare](https://discuss.elastic.co/u/cablenightmare)\
**Replies:** 3\
**Last updated:** [August 14, 2014, 9:40pm UTC](https://discuss.elastic.co/t/kibana-not-showing-all-events/19270 "2014-08-14T21:40:05Z")

</div>

Hi, I am using the ELK stack. I have an event that is logged 5 times an hour. I use Kibana to query the event by type going back 24 hours (see k1.png), 6 hours (see k2.png), and 1 hour (see k3.png). The displa…

---

## [Alert for every document based on the field value](https://discuss.elastic.co/t/alert-for-every-document-based-on-the-field-value/320237)

<div class="topic-metadata">

**Author:** [@breakingcode](https://discuss.elastic.co/u/breakingcode)\
**Replies:** 4\
**Last updated:** [December 9, 2022, 5:45am UTC](https://discuss.elastic.co/t/alert-for-every-document-based-on-the-field-value/320237 "2022-12-09T05:45:22Z")

</div>

Hi, We have a requirement in which we have to setup alerting system based on the field value of the document. So document will be like this { ........ ........ breach: "false"/"true" ........ } Based of the 'breach' f…

---

## [Logstash Translate Filter Can't Convert String Into Hash Loading Dictionary](https://discuss.elastic.co/t/logstash-translate-filter-cant-convert-string-into-hash-loading-dictionary/107112)

<div class="topic-metadata">

**Author:** [@cchamberlain](https://discuss.elastic.co/u/cchamberlain)\
**Replies:** 4\
**Last updated:** [November 11, 2017, 5:45am UTC](https://discuss.elastic.co/t/logstash-translate-filter-cant-convert-string-into-hash-loading-dictionary/107112 "2017-11-11T05:45:48Z")

</div>

Hello, May I please request your advice? I am on Windows Server 2012 R2, Logstash 5.4.0. I am enriching either SQL Server results or text (shown) via a dictionary YAML file. However, the error is : error=\>"LogStash:…

---

## [Elasticsearch 2.0 and Spark - TimestampType conversion issue](https://discuss.elastic.co/t/elasticsearch-2-0-and-spark-timestamptype-conversion-issue/34136)

<div class="topic-metadata">

**Author:** [@eliasah](https://discuss.elastic.co/u/eliasah)\
**Replies:** 4\
**Last updated:** [June 29, 2016, 6:09am UTC](https://discuss.elastic.co/t/elasticsearch-2-0-and-spark-timestamptype-conversion-issue/34136 "2016-06-29T06:09:42Z")

</div>

I'm trying to write a DataFrame into Elasticsearch 2.0 with the following schema |-- actionId: long (nullable = true) |-- userId: long (nullable = true) |-- saleDate: timestamp (nullable = true) When the index is cre…

---

## [Invalid Index Name Exception](https://discuss.elastic.co/t/invalid-index-name-exception/312908)

<div class="topic-metadata">

**Author:** [@hnf](https://discuss.elastic.co/u/hnf)\
**Replies:** 2\
**Last updated:** [August 25, 2022, 4:42pm UTC](https://discuss.elastic.co/t/invalid-index-name-exception/312908 "2022-08-25T16:42:29Z")

</div>

Hello everyone, I have an issue when I try to make an index a field created using add\_field by referencing them when outputing. I create three .conf files that begin by a number , like 1file.conf, 2file.conf and 99outp…

---

## [Conditional check on json response](https://discuss.elastic.co/t/conditional-check-on-json-response/77738)

<div class="topic-metadata">

**Author:** [@timmy8ken](https://discuss.elastic.co/u/timmy8ken)\
**Replies:** 2\
**Last updated:** [March 15, 2017, 6:18am UTC](https://discuss.elastic.co/t/conditional-check-on-json-response/77738 "2017-03-15T06:18:20Z")

</div>

Hello Elastic World, I have got logs from our web application shipping into Logstash then onto Elasticsearch. It's all working very well, however I would like to filter some entries in our logs to trigger an alert in Za…

---

## [Error restarting service after change data path](https://discuss.elastic.co/t/error-restarting-service-after-change-data-path/29378)

<div class="topic-metadata">

**Author:** [@carlosvega](https://discuss.elastic.co/u/carlosvega)\
**Replies:** 2\
**Last updated:** [September 16, 2015, 10:23am UTC](https://discuss.elastic.co/t/error-restarting-service-after-change-data-path/29378 "2015-09-16T10:23:13Z")

</div>

I made a clean install of elasticsearch and changed the data.path in the yml file like this: path.data: /media/ssd/elasticsearch\_data/ but I'm getting an error every time I restart the service: Sep 16 11:46:03 hel …

---

## [Filter by Count in Datatable](https://discuss.elastic.co/t/filter-by-count-in-datatable/187297)

<div class="topic-metadata">

**Author:** [@CraigMc](https://discuss.elastic.co/u/CraigMc)\
**Replies:** 1\
**Last updated:** [June 26, 2019, 12:39am UTC](https://discuss.elastic.co/t/filter-by-count-in-datatable/187297 "2019-06-26T00:39:36Z")

</div>

I have a simple data table of events with the count of stages. In my example, a count of '7' indicates that the process has completed all stages. I want to filter this table for rows with a count \<\> 7. I have seen t…

---

## [Index lifecycle management at Elasticsearch 6.6.0](https://discuss.elastic.co/t/index-lifecycle-management-at-elasticsearch-6-6-0/168429)

<div class="topic-metadata">

**Author:** [@YanekR](https://discuss.elastic.co/u/YanekR)\
**Replies:** 1\
**Last updated:** [February 15, 2019, 9:31am UTC](https://discuss.elastic.co/t/index-lifecycle-management-at-elasticsearch-6-6-0/168429 "2019-02-15T09:31:05Z")

</div>

Hi All, Could you please help me as I am not able to find proper solution. I do have properly setup of Index lifecycle management policy which runs every 10 min to check if policy met requirements or not. Is it possibl…

---

## [Tactics for nailing Timelion label Regexes](https://discuss.elastic.co/t/tactics-for-nailing-timelion-label-regexes/125654)

<div class="topic-metadata">

**Author:** [@Fulton\_Byrne](https://discuss.elastic.co/u/Fulton_Byrne)\
**Replies:** 1\
**Last updated:** [March 27, 2018, 9:51pm UTC](https://discuss.elastic.co/t/tactics-for-nailing-timelion-label-regexes/125654 "2018-03-27T21:51:36Z")

</div>

I've noticed that the Regex engine for timelion labels does not quite work as expected. For example I've tried plugging the regex in an online visualizer such as Regex Tester, it will match what I expect and then I'll pl…

---

## [Bulk API - curl: (55) Send failure: Connection was aborted](https://discuss.elastic.co/t/bulk-api-curl-55-send-failure-connection-was-aborted/64927)

<div class="topic-metadata">

**Author:** [@JackOfAllDevs](https://discuss.elastic.co/u/JackOfAllDevs)\
**Replies:** 1\
**Last updated:** [November 3, 2016, 6:18pm UTC](https://discuss.elastic.co/t/bulk-api-curl-55-send-failure-connection-was-aborted/64927 "2016-11-03T18:18:56Z")

</div>

Bulk API - curl: (55) Send failure: Connection was aborted I've seen a lot of posts about this, but none of the solutions seem to work. I've broken my bulk loads into separate file (~50Mb each). The server a Xeon proce…

---

## [How to send a single email after csv file saved and attached to email output plugin](https://discuss.elastic.co/t/how-to-send-a-single-email-after-csv-file-saved-and-attached-to-email-output-plugin/186136)

<div class="topic-metadata">

**Author:** [@Ennr](https://discuss.elastic.co/u/Ennr)\
**Replies:** 6\
**Last updated:** [July 10, 2019, 10:28am UTC](https://discuss.elastic.co/t/how-to-send-a-single-email-after-csv-file-saved-and-attached-to-email-output-plugin/186136 "2019-07-10T10:28:55Z")

</div>

My requirement is send a file ( extracting data from elastic search index is to save in CSV or excel format it contains 1000 records ) in a single mail through logstash output email plugin. is it possible or not? we…

---

## [Term vectors filter by search word](https://discuss.elastic.co/t/term-vectors-filter-by-search-word/157154)

<div class="topic-metadata">

**Author:** [@bjo](https://discuss.elastic.co/u/bjo)\
**Replies:** 6\
**Last updated:** [December 17, 2018, 5:44pm UTC](https://discuss.elastic.co/t/term-vectors-filter-by-search-word/157154 "2018-12-17T17:44:43Z")

</div>

I have implemented the examples in Term Vectors and Multi termvectors API but it seems like all these examples are designed to get document/documents based on id/ids. Is there some way of filtering the term results base…

---

## [How to access double nested data in Kibana/Vega](https://discuss.elastic.co/t/how-to-access-double-nested-data-in-kibana-vega/308806)

<div class="topic-metadata">

**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\
**Replies:** 5\
**Last updated:** [July 14, 2022, 7:40am UTC](https://discuss.elastic.co/t/how-to-access-double-nested-data-in-kibana-vega/308806 "2022-07-14T07:40:07Z")

</div>

Hi! I'm trying to display an stacked bar with information in a double nested array in Vega. I know that people struggle with this and I've read other questions/responses, but I still cannot get this right. This is the …

---

## [Apache logs not sending to logstash](https://discuss.elastic.co/t/apache-logs-not-sending-to-logstash/152527)

<div class="topic-metadata">

**Author:** [@ppafford](https://discuss.elastic.co/u/ppafford)\
**Replies:** 5\
**Last updated:** [October 18, 2018, 9:00pm UTC](https://discuss.elastic.co/t/apache-logs-not-sending-to-logstash/152527 "2018-10-18T21:00:24Z")

</div>

This is my setup Running Filebeat in it's own Docker container on ECS https://www.elastic.co/guide/en/beats/filebeat/current/running-on-docker.html Mount the log volume /var/log and create the filebeat directory there…

---

## [Compare two document type values under one index and print difference](https://discuss.elastic.co/t/compare-two-document-type-values-under-one-index-and-print-difference/141118)

<div class="topic-metadata">

**Author:** [@Md\_Ghulam\_khaja](https://discuss.elastic.co/u/Md_Ghulam_khaja)\
**Replies:** 5\
**Last updated:** [July 23, 2018, 1:24pm UTC](https://discuss.elastic.co/t/compare-two-document-type-values-under-one-index-and-print-difference/141118 "2018-07-23T13:24:19Z")

</div>

I have two mysql tables containing thousands of rows in each table. I have index all records into elasticsearch using logstash jdbc plugin. The Idea is to compare difference between two tables using Elasticsearch in a v…

---

## [Run logtsash on docker with custom pattern](https://discuss.elastic.co/t/run-logtsash-on-docker-with-custom-pattern/137915)

<div class="topic-metadata">

**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\
**Replies:** 3\
**Last updated:** [June 29, 2018, 11:09am UTC](https://discuss.elastic.co/t/run-logtsash-on-docker-with-custom-pattern/137915 "2018-06-29T11:09:01Z")

</div>

Hi all, how can I run a logstash container with a custom pattern folder? the patterns folder is in the /pipeline folder together with pipeline config

---

## [Windows service installation](https://discuss.elastic.co/t/windows-service-installation/49283)

<div class="topic-metadata">

**Author:** [@simonjefford](https://discuss.elastic.co/u/simonjefford)\
**Replies:** 3\
**Last updated:** [November 9, 2016, 3:26pm UTC](https://discuss.elastic.co/t/windows-service-installation/49283 "2016-11-09T15:26:25Z")

</div>

Would there be any interest in a patch to libbeats to allow beats to self install themselves as a Windows Service? My reasoning is two-fold: Removes the need to ship a Powershell script along with the binary. Instal…

---

## [How to revome the prefix of nested json fields](https://discuss.elastic.co/t/how-to-revome-the-prefix-of-nested-json-fields/55489)

<div class="topic-metadata">

**Author:** [@suntuo](https://discuss.elastic.co/u/suntuo)\
**Replies:** 3\
**Last updated:** [July 15, 2016, 7:30am UTC](https://discuss.elastic.co/t/how-to-revome-the-prefix-of-nested-json-fields/55489 "2016-07-15T07:30:54Z")

</div>

input: {"cookies":{"mfov":"ZTE Q705U","sver":"5915","appid":"1","mfo":"ZTE","sysver":"4.2.2","plat":"1","sys":"android"}} filter{ json { source =\> \["message"\] } } how to remove prefix "cookie." of filed\_name …

---

## [Monitoring an AIX-based ElasticSearch cluster](https://discuss.elastic.co/t/monitoring-an-aix-based-elasticsearch-cluster/34449)

<div class="topic-metadata">

**Author:** [@Russ](https://discuss.elastic.co/u/Russ)\
**Replies:** 3\
**Last updated:** [November 13, 2015, 6:56pm UTC](https://discuss.elastic.co/t/monitoring-an-aix-based-elasticsearch-cluster/34449 "2015-11-13T18:56:53Z")

</div>

I'm relatively new to the ElasticSearch scene, and we have an AIX-based environment in a development mode to get familiar with the features of the products. We see a great deal of promise in using ES for our solution, b…

---

## [Filebeat CPU usage too high](https://discuss.elastic.co/t/filebeat-cpu-usage-too-high/200782)

<div class="topic-metadata">

**Author:** [@sugimoccos](https://discuss.elastic.co/u/sugimoccos)\
**Replies:** 2\
**Last updated:** [September 25, 2019, 1:30am UTC](https://discuss.elastic.co/t/filebeat-cpu-usage-too-high/200782 "2019-09-25T01:30:58Z")

</div>

Hi, My filebeats' CPU usage is too high. I couldn't find solution in this forum. I'm suspecting multiple wildcard inclusion such as \*-\*\_\*.log causes CPU consumption. Please tell me how to reduce CPU usage. Version o…

---

## [Kibana server is not ready yet error](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error/298789)

<div class="topic-metadata">

**Author:** [@CoreyCBurton](https://discuss.elastic.co/u/CoreyCBurton)\
**Replies:** 4\
**Last updated:** [March 3, 2022, 10:04pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error/298789 "2022-03-03T22:04:21Z")

</div>

I am getting an error that is shown below when I visit localhost:5601 Kibana server is not ready yet. When I enter the command curl -cacert /etc/elasticsearch/certs/http\_ca.crt -u Elasticsearch https://localhost:9200,…

---

## [Trying to trigger alert when field exceed limit](https://discuss.elastic.co/t/trying-to-trigger-alert-when-field-exceed-limit/136781)

<div class="topic-metadata">

**Author:** [@wailoont](https://discuss.elastic.co/u/wailoont)\
**Replies:** 4\
**Last updated:** [June 22, 2018, 6:20am UTC](https://discuss.elastic.co/t/trying-to-trigger-alert-when-field-exceed-limit/136781 "2018-06-22T06:20:07Z")

</div>

Hello, I am trying to create an advanced watcher using json. Below is my json. { "trigger": { "schedule": { "interval": "1m" } }, "input": { "search": { "request": { "body": { …

---

## [После перезапуска Elasticsearch выдает ошибки](https://discuss.elastic.co/t/elasticsearch/86467)

<div class="topic-metadata">

**Author:** [@Bob04](https://discuss.elastic.co/u/Bob04)\
**Replies:** 4\
**Last updated:** [May 22, 2017, 6:56pm UTC](https://discuss.elastic.co/t/elasticsearch/86467 "2017-05-22T18:56:31Z")

</div>

После первого запуска ES в Docker контейнере, ES работает без ошибок: docker run -d --name elasticsearch -p 9200:9200 -e "bootstrap.system\_call\_filter=false" \\ -e "xpack.security.enabled=false" -e "xpack.graph.enab…

---

## [What is wrong with this filter?](https://discuss.elastic.co/t/what-is-wrong-with-this-filter/70226)

<div class="topic-metadata">

**Author:** [@lupolo](https://discuss.elastic.co/u/lupolo)\
**Replies:** 4\
**Last updated:** [December 30, 2016, 2:04pm UTC](https://discuss.elastic.co/t/what-is-wrong-with-this-filter/70226 "2016-12-30T14:04:28Z")

</div>

Hi, I have the following filter that passes the configuration test: ./logstash -f ../config/pipeline.conf --config.test\_and\_exit Sending Logstash's logs to /usr/local/rex/logstash-5.0.2/logs which is now configured …

---

## [TranslogCorruptedException after restarting ES](https://discuss.elastic.co/t/translogcorruptedexception-after-restarting-es/29276)

<div class="topic-metadata">

**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 1\
**Last updated:** [September 14, 2015, 10:28pm UTC](https://discuss.elastic.co/t/translogcorruptedexception-after-restarting-es/29276 "2015-09-14T22:28:56Z")

</div>

Hi All, I am getting IndexShardGatewayRecoveryException after my ES instance got restarted. I am using ES 1.4.4 Can someone help me to fix this? \[2015-09-14 11:57:50,186\]\[WARN \]\[indices.cluster \] \[My N…

---

## [Help with mapping location names to geo\_point](https://discuss.elastic.co/t/help-with-mapping-location-names-to-geo-point/196072)

<div class="topic-metadata">

**Author:** [@astrobalaji](https://discuss.elastic.co/u/astrobalaji)\
**Replies:** 2\
**Last updated:** [August 22, 2019, 6:58am UTC](https://discuss.elastic.co/t/help-with-mapping-location-names-to-geo-point/196072 "2019-08-22T06:58:27Z")

</div>

Hi, I have some Location (Country) names indexed in Elasticsearch as string. I want to display it on Kibana maps. In my main index, I just have the field with Country names. Now I have another separate index with Countr…

---

## [Ruby Filter to Add Multiple Values to a Field](https://discuss.elastic.co/t/ruby-filter-to-add-multiple-values-to-a-field/186746)

<div class="topic-metadata">

**Author:** [@cappy](https://discuss.elastic.co/u/cappy)\
**Replies:** 2\
**Last updated:** [June 20, 2019, 9:13pm UTC](https://discuss.elastic.co/t/ruby-filter-to-add-multiple-values-to-a-field/186746 "2019-06-20T21:13:33Z")

</div>

Hello, Due to the fact that a field is getting interpreted as a single string and attempted to be indexed into Elasticsearch as type ip (and failing due to mapping, rightfully so), I am looking to take values separated …

---

## [Deprecation logging](https://discuss.elastic.co/t/deprecation-logging/161060)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 2\
**Last updated:** [December 17, 2018, 10:47am UTC](https://discuss.elastic.co/t/deprecation-logging/161060 "2018-12-17T10:47:38Z")

</div>

What does deprecation logging mean? It means that when “logger.deprecation.level = warn” is set, each time a deprecated class/method/interface is invoked, the corresponding logging message would be printed out. Am I corr…

---

## [Point in Time API and Search After .net NEST](https://discuss.elastic.co/t/point-in-time-api-and-search-after-net-nest/278572)

<div class="topic-metadata">

**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\
**Replies:** 1\
**Last updated:** [July 27, 2021, 10:54am UTC](https://discuss.elastic.co/t/point-in-time-api-and-search-after-net-nest/278572 "2021-07-27T10:54:40Z")

</div>

I have been reading up on Point in time API and wanted to implement it using NEST in my .net application. However, when reading that article (.net application hyperlink), I saw the Fluent DSL example as shown below. Is t…

---

## [FileBeat Setup Error : error loading index pattern: returned 413 to import file: \<nil\>. Response: {"statusCode":413,"error":"Request Entity Too Large","message":"Payload content length greater than maximum allowed: 1048576"](https://discuss.elastic.co/t/filebeat-setup-error-error-loading-index-pattern-returned-413-to-import-file-nil-response-statuscode-413-error-request-entity-too-large-message-payload-content-length-greater-than-maximum-allowed-1048576/264845)

<div class="topic-metadata">

**Author:** [@Biswabhusan\_Dash](https://discuss.elastic.co/u/Biswabhusan_Dash)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 12:51am UTC](https://discuss.elastic.co/t/filebeat-setup-error-error-loading-index-pattern-returned-413-to-import-file-nil-response-statuscode-413-error-request-entity-too-large-message-payload-content-length-greater-than-maximum-allowed-1048576/264845 "2021-02-22T00:51:37Z")

</div>

We are working to capture logs from server to elasticsearch by filebeat. We are getting below issue, while setup the filebeat. Response: {"statusCode":413,"error":"Request Entity Too Large","message":"Payload content le…

---

## [Elastic search multiple instances or multiple nodes on the same machine](https://discuss.elastic.co/t/elastic-search-multiple-instances-or-multiple-nodes-on-the-same-machine/96254)

<div class="topic-metadata">

**Author:** [@arunvijayam](https://discuss.elastic.co/u/arunvijayam)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 12:44pm UTC](https://discuss.elastic.co/t/elastic-search-multiple-instances-or-multiple-nodes-on-the-same-machine/96254 "2017-08-08T12:44:45Z")

</div>

Hi All, Is there any opportunity to run multiple instances or multiple nodes of elasticsearch in the same machine. I am getting below on running below command. start “ElasticSearch1” /I “cmd” “D:\\SWTOOLS\\Apache\\Serve…

---

## [Input file start\_position =\> "beginning" doesn't work even after deleting .sincedb files](https://discuss.elastic.co/t/input-file-start-position-beginning-doesnt-work-even-after-deleting-sincedb-files/75627)

<div class="topic-metadata">

**Author:** [@Prathamesh](https://discuss.elastic.co/u/Prathamesh)\
**Replies:** 1\
**Last updated:** [February 22, 2017, 6:37am UTC](https://discuss.elastic.co/t/input-file-start-position-beginning-doesnt-work-even-after-deleting-sincedb-files/75627 "2017-02-22T06:37:48Z")

</div>

Hello World Version: ElasticSearch-5.2.1/Logstash-5.2.1/Kibana-5.2.1 OS: Windows 2008 I've just started working on the ELK Stack & am facing some problems loading data I've got the following .json code input { fi…

---

## [Bulk Inserts taking a long time](https://discuss.elastic.co/t/bulk-inserts-taking-a-long-time/228530)

<div class="topic-metadata">

**Author:** [@jcremeans](https://discuss.elastic.co/u/jcremeans)\
**Replies:** 3\
**Last updated:** [April 17, 2020, 2:06pm UTC](https://discuss.elastic.co/t/bulk-inserts-taking-a-long-time/228530 "2020-04-17T14:06:40Z")

</div>

I am having an issue with bulk updating records. As I send requests, the bulk update takes longer and longer to work. I am using the scroll api in batches of 100 then bulk updating them. Some of these operations will tak…

---

## [Pending tasks list flooded with \_add\_listener\_ tasks](https://discuss.elastic.co/t/pending-tasks-list-flooded-with--add-listener--tasks/44636)

<div class="topic-metadata">

**Author:** [@roper](https://discuss.elastic.co/u/roper)\
**Replies:** 3\
**Last updated:** [April 28, 2016, 12:37pm UTC](https://discuss.elastic.co/t/pending-tasks-list-flooded-with--add-listener--tasks/44636 "2016-04-28T12:37:14Z")

</div>

I have an elasticsearch cluster running with a handful of nodes and it periodically (as in every few minutes) falls down with a master\_not\_discovered\_exception. While investigating I notice that when I check cat/pendingt…

---

## [Kibana accessing issue in IE 11 browser](https://discuss.elastic.co/t/kibana-accessing-issue-in-ie-11-browser/41156)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 3\
**Last updated:** [March 1, 2016, 2:59am UTC](https://discuss.elastic.co/t/kibana-accessing-issue-in-ie-11-browser/41156 "2016-03-01T02:59:33Z")

</div>

HI , My kibana working fine in chrome, but when i open in IE 11 it showing some error can anyone help me out of it.

---

## [S3 Repository Creation](https://discuss.elastic.co/t/s3-repository-creation/25221)

<div class="topic-metadata">

**Author:** [@tanveer3](https://discuss.elastic.co/u/tanveer3)\
**Replies:** 3\
**Last updated:** [July 9, 2015, 12:03pm UTC](https://discuss.elastic.co/t/s3-repository-creation/25221 "2015-07-09T12:03:25Z")

</div>

Hi Team I am trying to create & configure repository in S3, i am did the below steps. Please check and advice. Installing Plugin on ElasticSearch plugin -install elasticsearch/elasticsearch-cloud-aws/2.5.1 Setti…

---

## [How can i combine the information of two indexes with kibana lens?](https://discuss.elastic.co/t/how-can-i-combine-the-information-of-two-indexes-with-kibana-lens/278242)

<div class="topic-metadata">

**Author:** [@alprde](https://discuss.elastic.co/u/alprde)\
**Replies:** 6\
**Last updated:** [July 13, 2021, 1:57pm UTC](https://discuss.elastic.co/t/how-can-i-combine-the-information-of-two-indexes-with-kibana-lens/278242 "2021-07-13T13:57:47Z")

</div>

I have two indexes named market place and stalls. How many stalls in which market place? How can I show this with kibana lens? marketplace fields: id name stalls fields: id stall\_no marketplace\_id

---

## [How to get the all disks(Drive) via metricbeat?](https://discuss.elastic.co/t/how-to-get-the-all-disks-drive-via-metricbeat/165927)

<div class="topic-metadata">

**Author:** [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)\
**Replies:** 6\
**Last updated:** [February 6, 2019, 5:18pm UTC](https://discuss.elastic.co/t/how-to-get-the-all-disks-drive-via-metricbeat/165927 "2019-02-06T17:18:52Z")

</div>

Hi all, I have three disks, want to get three disks in kibana but I am able to get only one disk. I have added the name of those disk in system.yml configuration file but still, only one/dev/xvda1 is getting in kibana. …

---

## [Custom filebeat module](https://discuss.elastic.co/t/custom-filebeat-module/149797)

<div class="topic-metadata">

**Author:** [@mraz1337](https://discuss.elastic.co/u/mraz1337)\
**Replies:** 5\
**Last updated:** [October 24, 2018, 8:00am UTC](https://discuss.elastic.co/t/custom-filebeat-module/149797 "2018-10-24T08:00:01Z")

</div>

Filebeat configuration supports multiple inputs, how can be this achived with custom module config.yml ? I would like to tag single path with the unique value. type: log paths: - C:/Logs1/\*/\*.log -\> tag1 - C:/Logs…

---

## [Kibana on AWS EC2 instance to talk to Managed AWS ES](https://discuss.elastic.co/t/kibana-on-aws-ec2-instance-to-talk-to-managed-aws-es/99508)

<div class="topic-metadata">

**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\
**Replies:** 5\
**Last updated:** [September 7, 2017, 1:56am UTC](https://discuss.elastic.co/t/kibana-on-aws-ec2-instance-to-talk-to-managed-aws-es/99508 "2017-09-07T01:56:28Z")

</div>

Hi , I have installed kibana on EC2 instance as we need custom plugins on kibana and trying to configure to connect to managed AWS ES . Can someone provide a guideline to do this . I tried few things but it seems to be …

---

## [Kibana to PDF (cool tool for reports)](https://discuss.elastic.co/t/kibana-to-pdf-cool-tool-for-reports/59113)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 0\
**Last updated:** [August 28, 2016, 1:22pm UTC](https://discuss.elastic.co/t/kibana-to-pdf-cool-tool-for-reports/59113 "2016-08-28T13:22:03Z")

</div>

Hey guys, thought I would share a nice reporting app someone wrote https://github.com/parvez/snapshot It uses PhantomJs and Crontab to generate reports based on your Dashboard selections. You should check it out, …

---

## [Transport Client can't connect to AWS EC2 Cluster](https://discuss.elastic.co/t/transport-client-cant-connect-to-aws-ec2-cluster/55459)

<div class="topic-metadata">

**Author:** [@cheruvian](https://discuss.elastic.co/u/cheruvian)\
**Replies:** 4\
**Last updated:** [August 10, 2016, 3:46pm UTC](https://discuss.elastic.co/t/transport-client-cant-connect-to-aws-ec2-cluster/55459 "2016-08-10T15:46:10Z")

</div>

I have an ES 2.3.2 cluster configured and running in AWS EC2 (VPC). I've opened up both the REST and Transport ports in the security group. I want to be able to connect a TransportClient to the remote cluster running …

---

## [Grok filter pattern not working](https://discuss.elastic.co/t/grok-filter-pattern-not-working/211780)

<div class="topic-metadata">

**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\
**Replies:** 8\
**Last updated:** [December 13, 2019, 12:32pm UTC](https://discuss.elastic.co/t/grok-filter-pattern-not-working/211780 "2019-12-13T12:32:28Z")

</div>

I must be going mad today, i can't get this filter to work. I extracted a single log line from an azure activity log, so i parse it through grok debugger both in kibana and herokuapp and i can't get it to work. so i spl…

[Previous page](https://discuss.elastic.co/top.md?page=810&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=812&per_page=50&period=all)
