# Top **URL:** https://discuss.elastic.co/top.md?page=813&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 814 --- ## [File output - Logstash is unable to create directory and write a file due to permission denied error](https://discuss.elastic.co/t/file-output-logstash-is-unable-to-create-directory-and-write-a-file-due-to-permission-denied-error/209638)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 2\ **Last updated:** [November 29, 2019, 2:28pm UTC](https://discuss.elastic.co/t/file-output-logstash-is-unable-to-create-directory-and-write-a-file-due-to-permission-denied-error/209638 "2019-11-29T14:28:45Z")
Hi, I created a pipeline that outputs the content into home folder of one of the users. When i run the pipeline manually as root, there is no issue, but then i try to do the same using pipelines.yml and logstash service… --- ## [Load balancer between Kibana and Elasticsearch?](https://discuss.elastic.co/t/load-balancer-between-kibana-and-elasticsearch/51496)
**Author:** [@Mike\_Wurtz](https://discuss.elastic.co/u/Mike_Wurtz)\ **Replies:** 4\ **Last updated:** [June 2, 2016, 11:01pm UTC](https://discuss.elastic.co/t/load-balancer-between-kibana-and-elasticsearch/51496 "2016-06-02T23:01:31Z")
Kibana/Elasticsearch Alpha 3 Question, I've got two Elasticsearch Client Only nodes running under an Elastic Load Balancer in AWS.. I am able to query the API fine using the ELB as an endpoint, so I know the load balan… --- ## [Stop words and re indexing](https://discuss.elastic.co/t/stop-words-and-re-indexing/23239)
**Author:** [@bvnagaraju](https://discuss.elastic.co/u/bvnagaraju)\ **Replies:** 4\ **Last updated:** [April 16, 2015, 1:56am UTC](https://discuss.elastic.co/t/stop-words-and-re-indexing/23239 "2015-04-16T01:56:19Z")
Hi , am new to elastic stop words and I want to understand more can we configure the stop words at time of index creation and later update the stop words with \_settings API . Does it requires to re index docum… --- ## [Elasticsearch and Logstash logs retention to 7 days](https://discuss.elastic.co/t/elasticsearch-and-logstash-logs-retention-to-7-days/259464)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 11:42pm UTC](https://discuss.elastic.co/t/elasticsearch-and-logstash-logs-retention-to-7-days/259464 "2020-12-23T23:42:12Z")
Hi guys, Is there any way to reduce the Elasticsearch and logstash app logs count to 7 days using log4j.properties? Currently as I can observe, the log rotation in /var/log/elasticsearch and /var/log/logstash has no lim… --- ## [Can Output file-plugin point to /dev/null?](https://discuss.elastic.co/t/can-output-file-plugin-point-to-dev-null/215645)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 3:23pm UTC](https://discuss.elastic.co/t/can-output-file-plugin-point-to-dev-null/215645 "2020-01-20T15:23:15Z")
Hi Forum. I'm just discovering how the new ELK+x-pack pieces work together, and, since I've realiced that I've got to create a parallel monitoring cluster to fully learn the current ELK potential, I'm thinking in advanc… --- ## [GPU accelerated Machine learning](https://discuss.elastic.co/t/gpu-accelerated-machine-learning/104197)
**Author:** [@vbs1214](https://discuss.elastic.co/u/vbs1214)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 2:16pm UTC](https://discuss.elastic.co/t/gpu-accelerated-machine-learning/104197 "2017-10-25T14:16:09Z")
Hello! I would like to know if it is possible to boost X-pack machine learning with GPU acceleration (if not - other recommended means to boost performance for this kind of jobs?) The reason I am asking this is because… --- ## [GeoIP error: "The database provided is invalid or corrupted"](https://discuss.elastic.co/t/geoip-error-the-database-provided-is-invalid-or-corrupted/92650)
**Author:** [@Zeineb](https://discuss.elastic.co/u/Zeineb)\ **Replies:** 1\ **Last updated:** [July 26, 2017, 12:30pm UTC](https://discuss.elastic.co/t/geoip-error-the-database-provided-is-invalid-or-corrupted/92650 "2017-07-26T12:30:20Z")
Hi, I need your help, I use ELK stack. But I have a probleme with filter geoIP when I add it in my file confirugation I lose everything in visualisation kibana !! and this error in my file logstash-palin.log … --- ## [Logstash unable to convert date to string correctly](https://discuss.elastic.co/t/logstash-unable-to-convert-date-to-string-correctly/82499)
**Author:** [@niels1189](https://discuss.elastic.co/u/niels1189)\ **Replies:** 1\ **Last updated:** [April 17, 2017, 4:50am UTC](https://discuss.elastic.co/t/logstash-unable-to-convert-date-to-string-correctly/82499 "2017-04-17T04:50:43Z")
Elasticsearch version: 5.3.0 Plugins installed: N/A - (Elasticsearch, Kibana & Logstash setup) JVM version: 1.8.0\_121 OS version: Ubuntu 16.04.2 LTS Description of the problem including expected versus actual beh… --- ## [Kibana is displaying a previous month instead of the month available in the field](https://discuss.elastic.co/t/kibana-is-displaying-a-previous-month-instead-of-the-month-available-in-the-field/27537)
**Author:** [@Fabio\_Batalha](https://discuss.elastic.co/u/Fabio_Batalha)\ **Replies:** 7\ **Last updated:** [August 20, 2015, 4:35am UTC](https://discuss.elastic.co/t/kibana-is-displaying-a-previous-month-instead-of-the-month-available-in-the-field/27537 "2015-08-20T04:35:47Z")
Hello Fellows, I'm facing a strange situation with Kibana when dealing with datefields with just year and month (YYYY-MM). The labels in a Chart our List are displaying a datefield with value 2015-07 as "June 30th 2015… --- ## [How to transfer whole file instead of line by line.?](https://discuss.elastic.co/t/how-to-transfer-whole-file-instead-of-line-by-line/45965)
**Author:** [@sdaruna](https://discuss.elastic.co/u/sdaruna)\ **Replies:** 1\ **Last updated:** [March 31, 2016, 9:37pm UTC](https://discuss.elastic.co/t/how-to-transfer-whole-file-instead-of-line-by-line/45965 "2016-03-31T21:37:04Z")
Hi, I configured file beats to look into a folder and push the data to logstash. How to use multiline to move whole file once.? --- ## [Failed to authenticate user 'elastic' against https://192.168.xx.xx:9200/\_security/\_authenticate?pretty](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-against-https-192-168-xx-xx-9200-security-authenticate-pretty/342654)
**Author:** [@uli67](https://discuss.elastic.co/u/uli67)\ **Replies:** 3\ **Last updated:** [September 11, 2023, 2:00pm UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-against-https-192-168-xx-xx-9200-security-authenticate-pretty/342654 "2023-09-11T14:00:33Z")
Hi fellows, your help is needed. I have installed elasticsearch for the first time on my Alma-Linux9. That worked so far elastisearch runs on port 9200 tcp6 0 0 :::9200 :::\* … --- ## [How to remove write-lock for elasticsearch segment after reindexing?](https://discuss.elastic.co/t/how-to-remove-write-lock-for-elasticsearch-segment-after-reindexing/289580)
**Author:** [@Adarsh\_Nair](https://discuss.elastic.co/u/Adarsh_Nair)\ **Replies:** 3\ **Last updated:** [November 18, 2021, 11:35am UTC](https://discuss.elastic.co/t/how-to-remove-write-lock-for-elasticsearch-segment-after-reindexing/289580 "2021-11-18T11:35:15Z")
How to remove write-lock for elasticsearch segment after reindexing? Looking at the stack trace there is a missing Lucene file which is not good. Did this index/shard have any docs in it before shutdown? Can you list … --- ## [Generating a CSV file from curl with Kibana, results in just 'Processing' in the output csv file](https://discuss.elastic.co/t/generating-a-csv-file-from-curl-with-kibana-results-in-just-processing-in-the-output-csv-file/268374)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 3\ **Last updated:** [March 30, 2021, 8:02am UTC](https://discuss.elastic.co/t/generating-a-csv-file-from-curl-with-kibana-results-in-just-processing-in-the-output-csv-file/268374 "2021-03-30T08:02:00Z")
I am using the following shell snipped to download csvs for a a series of queries that I have collected up in Kibana: for filename in ${KIBANA\_QUERIES}/\*.rison; do echo "Processing que… --- ## [TCP for elasticsearch and kibana](https://discuss.elastic.co/t/tcp-for-elasticsearch-and-kibana/164111)
**Author:** [@yash\_sachdeva](https://discuss.elastic.co/u/yash_sachdeva)\ **Replies:** 3\ **Last updated:** [January 14, 2019, 8:42am UTC](https://discuss.elastic.co/t/tcp-for-elasticsearch-and-kibana/164111 "2019-01-14T08:42:20Z")
Hi Team, I have a use case wherein I need to send logs to elasticsearch and then on to Kibana using either UDP or TCP protocol. Could you suggest the required configuration changes on the elasticsearch and kibana end to … --- ## [Add external links to graphs in Kibana](https://discuss.elastic.co/t/add-external-links-to-graphs-in-kibana/87552)
**Author:** [@Tarun\_Kalluri](https://discuss.elastic.co/u/Tarun_Kalluri)\ **Replies:** 3\ **Last updated:** [May 31, 2017, 7:19am UTC](https://discuss.elastic.co/t/add-external-links-to-graphs-in-kibana/87552 "2017-05-31T07:19:11Z")
Is there a way in Kibana to add external links to graphs in the visualization tab or the dashboard? For example, if I click on a bar graph, it needs to take me to an external link associated with parameters on that pa… --- ## [No handlers could be found for logger "curator.validators.SchemaCheck"](https://discuss.elastic.co/t/no-handlers-could-be-found-for-logger-curator-validators-schemacheck/65270)
**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\ **Replies:** 3\ **Last updated:** [November 15, 2016, 1:03pm UTC](https://discuss.elastic.co/t/no-handlers-could-be-found-for-logger-curator-validators-schemacheck/65270 "2016-11-15T13:03:50Z")
Hey, I am trying to setup curator ' /usr/bin/curator --config /root/curator.yml /root/action\_file.yml' and getting errors below. /usr/bin/curator --config /root/curator.yml /root/action\_file.yml No handlers could be f… --- ## [Operation \[elasticsearch-watcher\_watch\] and lang \[groovy\] are disabled](https://discuss.elastic.co/t/operation-elasticsearch-watcher-watch-and-lang-groovy-are-disabled/34603)
**Author:** [@aanm](https://discuss.elastic.co/u/aanm)\ **Replies:** 3\ **Last updated:** [October 3, 2016, 10:33am UTC](https://discuss.elastic.co/t/operation-elasticsearch-watcher-watch-and-lang-groovy-are-disabled/34603 "2016-10-03T10:33:31Z")
I'm getting this error while I'm trying to push a \_watcher configuration to elasticsearch: {"error":{"root\_cause":\[{"type":"script\_exception","reason":"failed to compile script \[ScriptException\[scripts of type \[inlin\], o… --- ## [Exporting Elastic cloud cluster performance stats](https://discuss.elastic.co/t/exporting-elastic-cloud-cluster-performance-stats/265707)
**Author:** [@kielni](https://discuss.elastic.co/u/kielni)\ **Replies:** 5\ **Last updated:** [March 2, 2021, 10:17pm UTC](https://discuss.elastic.co/t/exporting-elastic-cloud-cluster-performance-stats/265707 "2021-03-02T22:17:01Z")
I would like to make use of the the metrics available from Cloud / Deployments / \[deployment\] / Performance. The metrics are interesting, but the charts are difficult to use. I use Datadog for monitoring, and want to be … --- ## [Curator and Elasticsearch 7.0](https://discuss.elastic.co/t/curator-and-elasticsearch-7-0/176929)
**Author:** [@wiliamauc85](https://discuss.elastic.co/u/wiliamauc85)\ **Replies:** 5\ **Last updated:** [April 28, 2019, 6:33pm UTC](https://discuss.elastic.co/t/curator-and-elasticsearch-7-0/176929 "2019-04-28T18:33:13Z")
Hi there, I've just installed Curator 5.6 and nothing seems to be working, I've checked /opt/elasticsearch-curator and /usr/bin/curator and thcurator and curator\_cli files are present, but even running just curator --… --- ## [UDP netflow packets arrive, netflow does not process them](https://discuss.elastic.co/t/udp-netflow-packets-arrive-netflow-does-not-process-them/171001)
**Author:** [@jpbourke](https://discuss.elastic.co/u/jpbourke)\ **Replies:** 5\ **Last updated:** [March 6, 2019, 1:50pm UTC](https://discuss.elastic.co/t/udp-netflow-packets-arrive-netflow-does-not-process-them/171001 "2019-03-06T13:50:57Z")
I have two servers, getting logs from the same sources, parallel streams of netflow and syslog. 64Gb RAM, 8 cores, 500Gb SSD VMs running on ESXI 6.7. I build the servers using Ansible and Cobbler so they are "identical… --- ## [Sort by \_doc as fast as search\_type=scan](https://discuss.elastic.co/t/sort-by--doc-as-fast-as-search-type-scan/92448)
**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\ **Replies:** 5\ **Last updated:** [July 20, 2017, 7:06pm UTC](https://discuss.elastic.co/t/sort-by--doc-as-fast-as-search-type-scan/92448 "2017-07-20T19:06:40Z")
Hi ES: I upgrade my cluster from 1.4 to 5.1. However, I found search\_type=scan is deprecated. And the document recommended us to use sort\["\_doc"\] instead. I tried to sort by \_doc during searching but I found the sp… --- ## [Filebeat doesn't update log file and limits file to 2048 lines](https://discuss.elastic.co/t/filebeat-doesnt-update-log-file-and-limits-file-to-2048-lines/53964)
**Author:** [@Dan2](https://discuss.elastic.co/u/Dan2)\ **Replies:** 5\ **Last updated:** [June 27, 2016, 1:16pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-update-log-file-and-limits-file-to-2048-lines/53964 "2016-06-27T13:16:57Z")
Hi, I'm new to this. I want Filebeat to update the output file each time the log gets updated. What's happening now is that Filebeat creates a file with only the existing lines that fit "inclued\_lines" that I've ente… --- ## [Correct Mapping into ElasticSearch for JSON](https://discuss.elastic.co/t/correct-mapping-into-elasticsearch-for-json/25871)
**Author:** [@Aditya\_Patel](https://discuss.elastic.co/u/Aditya_Patel)\ **Replies:** 5\ **Last updated:** [July 20, 2015, 5:23pm UTC](https://discuss.elastic.co/t/correct-mapping-into-elasticsearch-for-json/25871 "2015-07-20T17:23:58Z")
Hi Guys, I am pretty new to elasticsearch and was trying to get data from a postgres database to elasticsearch. I have currently used the following link to get data: https://github.com/jprante/elasticsearch-jdbc Th… --- ## [Permission Problem About Starting Elasticserach](https://discuss.elastic.co/t/permission-problem-about-starting-elasticserach/7498)
**Author:** [@Ahmet\_DAL](https://discuss.elastic.co/u/Ahmet_DAL)\ **Replies:** 2\ **Last updated:** [April 29, 2012, 6:13am UTC](https://discuss.elastic.co/t/permission-problem-about-starting-elasticserach/7498 "2012-04-29T06:13:44Z")
When I try to start elasticsearch with bin/elasticsearch -f command on commandline, Ubuntu gives me exec: 177: : Permission denied. I've also tried it as root but same. There is no info about that I could'nt find the … --- ## [Logstash 5.6.0 deserialization errors when persistent queues enabled](https://discuss.elastic.co/t/logstash-5-6-0-deserialization-errors-when-persistent-queues-enabled/100952)
**Author:** [@Zt\_Zeng](https://discuss.elastic.co/u/Zt_Zeng)\ **Replies:** 4\ **Last updated:** [September 23, 2017, 1:27am UTC](https://discuss.elastic.co/t/logstash-5-6-0-deserialization-errors-when-persistent-queues-enabled/100952 "2017-09-23T01:27:16Z")
The same problem in a closed post Version: 5.5.0 & 5.6.0 OS: Linux ubuntu-100 4.4.0-31-generic #50~14.04.1-Ubuntu SMP Wed Jul 13 01:07:32 UTC 2016 x86\_64 x86\_64 x86\_64 GNU/Linux Config file: logstash.yml with x… --- ## [Can't Create Enrollment Token](https://discuss.elastic.co/t/cant-create-enrollment-token/348460)
**Author:** [@Bethanie\_Tipton](https://discuss.elastic.co/u/Bethanie_Tipton)\ **Replies:** 6\ **Last updated:** [December 6, 2023, 9:06pm UTC](https://discuss.elastic.co/t/cant-create-enrollment-token/348460 "2023-12-06T21:06:53Z")
When I try to open elasticsearch-create-enrollment-token, it crashes. I can't do anything with it; I click it, it pops up on my screen for half a second, and then closes. --- ## [Trouble ingesting through Filebeat](https://discuss.elastic.co/t/trouble-ingesting-through-filebeat/240016)
**Author:** [@tom.p](https://discuss.elastic.co/u/tom.p)\ **Replies:** 6\ **Last updated:** [July 7, 2020, 6:21pm UTC](https://discuss.elastic.co/t/trouble-ingesting-through-filebeat/240016 "2020-07-07T18:21:35Z")
Hello all, I'm trying to ingest data from a "data" directory into Elasticsearch using Filebeat. When I manually upload these data files through Filebeat I have no problems. If I use that same mapping for my .conf file … --- ## [What the different beats to es and beats to logstash to es](https://discuss.elastic.co/t/what-the-different-beats-to-es-and-beats-to-logstash-to-es/36020)
**Author:** [@11175](https://discuss.elastic.co/u/11175)\ **Replies:** 6\ **Last updated:** [December 8, 2015, 5:56am UTC](https://discuss.elastic.co/t/what-the-different-beats-to-es-and-beats-to-logstash-to-es/36020 "2015-12-08T05:56:09Z")
beats -\> data -\> es beats -\> logstash -\> es which good solution? --- ## [Alphanumeric Search](https://discuss.elastic.co/t/alphanumeric-search/224901)
**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\ **Replies:** 4\ **Last updated:** [March 24, 2020, 9:00pm UTC](https://discuss.elastic.co/t/alphanumeric-search/224901 "2020-03-24T21:00:44Z")
Hi, I am trying to Search a alphanumeric value - 1Z74W6A90342550699 against a index. This index does not contain any such value against any fields. But still I get so many records. Ideally i should not get any record … --- ## [Kibana and Ubuntu server](https://discuss.elastic.co/t/kibana-and-ubuntu-server/159319)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 4\ **Last updated:** [December 9, 2018, 1:41pm UTC](https://discuss.elastic.co/t/kibana-and-ubuntu-server/159319 "2018-12-09T13:41:37Z")
Hello I downloaded and installed "Kibana" on Ubuntu server by below commands: $ wget https://artifacts.elastic.co/downloads/kibana/kibana-6.5.1-amd64.deb $ sudo dpkg -i kibana-6.5.1-amd64.deb My firewall rules are: $ … --- ## [Winlogbeat performance issue](https://discuss.elastic.co/t/winlogbeat-performance-issue/142779)
**Author:** [@Tim\_P](https://discuss.elastic.co/u/Tim_P)\ **Replies:** 4\ **Last updated:** [August 3, 2018, 2:51pm UTC](https://discuss.elastic.co/t/winlogbeat-performance-issue/142779 "2018-08-03T14:51:09Z")
Hi, We forward all our very busy Active Directory Event logs to a single host, I then am trying to read these forwarded event logs using winlogbeat but I seem to hit a problem that it's just ignoring messages. I have n… --- ## [Elasticsearch .net conditional sort](https://discuss.elastic.co/t/elasticsearch-net-conditional-sort/120368)
**Author:** [@Orhun\_Karapinar](https://discuss.elastic.co/u/Orhun_Karapinar)\ **Replies:** 4\ **Last updated:** [February 25, 2018, 10:42pm UTC](https://discuss.elastic.co/t/elasticsearch-net-conditional-sort/120368 "2018-02-25T22:42:40Z")
I am trying to write an elasticsearch query which gets most recent top 100 from orders and sales, but my problem is orders have shipment\_date. I want to use "shipment\_date" for orders, "created\_date" for sales to sort th… --- ## [TCP load-balancer with client nodes](https://discuss.elastic.co/t/tcp-load-balancer-with-client-nodes/86043)
**Author:** [@Utkarsh\_Pyne](https://discuss.elastic.co/u/Utkarsh_Pyne)\ **Replies:** 4\ **Last updated:** [May 17, 2017, 9:18pm UTC](https://discuss.elastic.co/t/tcp-load-balancer-with-client-nodes/86043 "2017-05-17T21:18:04Z")
We are separating our cluster into data and client nodes and plan to have client nodes behind a TCP load balancer so that applications can connect to the cluster via TransportClient. We have multiple applications, each w… --- ## [Logstash reading new lines issues](https://discuss.elastic.co/t/logstash-reading-new-lines-issues/52163)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 4\ **Last updated:** [June 9, 2016, 5:34am UTC](https://discuss.elastic.co/t/logstash-reading-new-lines-issues/52163 "2016-06-09T05:34:22Z")
I have written a conf file in logstash to read the jms log and the problems are I could not break the records into newlines fore filtering. Here is the raw data ####\ \<\> \<1442678412960\> \<809000\>… --- ## [Can I restart terminated pipelines?](https://discuss.elastic.co/t/can-i-restart-terminated-pipelines/137732)
**Author:** [@JohanRask](https://discuss.elastic.co/u/JohanRask)\ **Replies:** 0\ **Last updated:** [June 28, 2018, 5:53am UTC](https://discuss.elastic.co/t/can-i-restart-terminated-pipelines/137732 "2018-06-28T05:53:02Z")
Hi, We are using logstash with kafka + elasticsearch and running multiple pipelines which works great! However, under certain circumstances kafka input will receive an exception and the pipeline will terminate. If all… --- ## [Kibana monitoring, logstash only one node](https://discuss.elastic.co/t/kibana-monitoring-logstash-only-one-node/80779)
**Author:** [@Patrik\_Soderstrom](https://discuss.elastic.co/u/Patrik_Soderstrom)\ **Replies:** 2\ **Last updated:** [April 3, 2017, 6:27am UTC](https://discuss.elastic.co/t/kibana-monitoring-logstash-only-one-node/80779 "2017-04-03T06:27:30Z")
Hi, I have three nodes currently. I have set in logstash.yml on all three nodes to send x-pack monitoring to one of my nodes. When I go to that node and check in Kibana I can see monitoring for Logstash, but it does not … --- ## [Is that possible to disable search bar autocompletion?](https://discuss.elastic.co/t/is-that-possible-to-disable-search-bar-autocompletion/58379)
**Author:** [@Yuhan\_Zhang](https://discuss.elastic.co/u/Yuhan_Zhang)\ **Replies:** 2\ **Last updated:** [August 18, 2016, 10:59pm UTC](https://discuss.elastic.co/t/is-that-possible-to-disable-search-bar-autocompletion/58379 "2016-08-18T22:59:07Z")
The autocomplete javascript on the search bar keeps interrupting me from typing in a query (especially on backward delete and left/right arrow keys). Is there a way to disable this bugged feature? --- ## [Multiple templates in one logstash.conf](https://discuss.elastic.co/t/multiple-templates-in-one-logstash-conf/46230)
**Author:** [@Sandhya\_Rathinapandi](https://discuss.elastic.co/u/Sandhya_Rathinapandi)\ **Replies:** 2\ **Last updated:** [April 19, 2016, 5:26am UTC](https://discuss.elastic.co/t/multiple-templates-in-one-logstash-conf/46230 "2016-04-19T05:26:36Z")
Hi, I am trying to use multiple templates for the indexes in the output section in logstash.conf, but it is always ignoring one of the templates. Sample conf: output { if \[type\] == "log1" { ela… --- ## [Load balancing Shipper\\Indexer](https://discuss.elastic.co/t/load-balancing-shipper-indexer/44593)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 2\ **Last updated:** [March 18, 2016, 11:35am UTC](https://discuss.elastic.co/t/load-balancing-shipper-indexer/44593 "2016-03-18T11:35:29Z")
Hello, I am using below structure of event processing pipeline in my project. LSF--\>logstash-shipper(Scaled)---\>Redis---\>Indexer(Scaled)---\>NGINX---\>Multiple nodes ES Here, I want to make Shipper and indexer highly av… --- ## [Move all index shards to a node](https://discuss.elastic.co/t/move-all-index-shards-to-a-node/6722)
**Author:** [@Jorge\_Urdaneta](https://discuss.elastic.co/u/Jorge_Urdaneta)\ **Replies:** 2\ **Last updated:** [February 16, 2012, 8:18pm UTC](https://discuss.elastic.co/t/move-all-index-shards-to-a-node/6722 "2012-02-16T20:18:53Z")
Hi, We're trying to improve the performance of a Bulk indexing in a cluster. The problem here is that dynamic update mapping slows the operations when the index grows. Setting refresh\_interval to -1 doesn't work … --- ## [Logstash dissect plugin prase doesn't correct with empty field in content](https://discuss.elastic.co/t/logstash-dissect-plugin-prase-doesnt-correct-with-empty-field-in-content/104992)
**Author:** [@sockaddr\_in](https://discuss.elastic.co/u/sockaddr_in)\ **Replies:** 5\ **Last updated:** [November 2, 2017, 8:55am UTC](https://discuss.elastic.co/t/logstash-dissect-plugin-prase-doesnt-correct-with-empty-field-in-content/104992 "2017-11-02T08:55:55Z")
@zikakou1er @Allwyn @matslats @Kubson @fcza I use the dissect plugin with logstash to parse the log which has empty fileds, but is doesn't match fields correctly.The folowing is my log pattern and logstash config file a… --- ## [Could not start some language models for NLP tasks](https://discuss.elastic.co/t/could-not-start-some-language-models-for-nlp-tasks/297888)
**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\ **Replies:** 7\ **Last updated:** [May 30, 2022, 3:52pm UTC](https://discuss.elastic.co/t/could-not-start-some-language-models-for-nlp-tasks/297888 "2022-05-30T15:52:47Z")
I've installed Eland and have imported a model from huggingface as follows: eland\_import\_hub\_model --url http://localhost:9200/ \\ --hub-model-id HooshvareLab/bert-fa-zwnj-base-ner \\ --task-type ner I can see it in h… --- ## [Synonym mapping for classification lookup / classifying documents](https://discuss.elastic.co/t/synonym-mapping-for-classification-lookup-classifying-documents/795)
**Author:** [@virtuman](https://discuss.elastic.co/u/virtuman)\ **Replies:** 7\ **Last updated:** [May 21, 2015, 6:01pm UTC](https://discuss.elastic.co/t/synonym-mapping-for-classification-lookup-classifying-documents/795 "2015-05-21T18:01:11Z")
we have a need to classify every document prior to recording it in our DB. We selected Elasticsearch SYNONYM functionality to do this work for us by building a dictionary of keywords associated to each classification. I… --- ## [Elasticsearch, docker and iptables](https://discuss.elastic.co/t/elasticsearch-docker-and-iptables/27880)
**Author:** [@lrhazi](https://discuss.elastic.co/u/lrhazi)\ **Replies:** 1\ **Last updated:** [August 22, 2015, 11:58pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-and-iptables/27880 "2015-08-22T23:58:50Z")
Hello, Just installed elasticsearch container: https://hub.docker.com/\_/elasticsearch/ On 4 RedHat entr Linux 7 VMs.... with a config like so: cluster.name: Aves node.name: "aves-01" path.logs: /var/log/elasticsear… --- ## [ElasticSearch Having-Clause?](https://discuss.elastic.co/t/elasticsearch-having-clause/15621)
**Author:** [@tkeane](https://discuss.elastic.co/u/tkeane)\ **Replies:** 1\ **Last updated:** [June 24, 2014, 1:59am UTC](https://discuss.elastic.co/t/elasticsearch-having-clause/15621 "2014-06-24T01:59:11Z")
Hi guys, I’m using elasticsearch 1.0.0RC2 and wondering if there is an equivalent to SQL’s “having-clause” for the aggregation framework there. Below is an example query and a link to a ticket that describes … --- ## [Elasticsearch hadoop - java.lang.ClassCastException: org.apache.hadoop.io.IntWritable cannot be cast to org.apache.hadoop.io.Text](https://discuss.elastic.co/t/elasticsearch-hadoop-java-lang-classcastexception-org-apache-hadoop-io-intwritable-cannot-be-cast-to-org-apache-hadoop-io-text/15974)
**Author:** [@moon\_soo\_Lee](https://discuss.elastic.co/u/moon_soo_Lee)\ **Replies:** 1\ **Last updated:** [February 23, 2014, 3:02pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-java-lang-classcastexception-org-apache-hadoop-io-intwritable-cannot-be-cast-to-org-apache-hadoop-io-text/15974 "2014-02-23T15:02:46Z")
Hi, I'm using elasticsearch 1.0 GA and elasticsearch-hadoop-1.3.0.M2.jar with hive 0.11 I created external table like CREATE EXTERNAL TABLE estable ( data STRUCT intmap:Map and when i try to… --- ## [Potential memory leak issue with filebeat and metricbeat](https://discuss.elastic.co/t/potential-memory-leak-issue-with-filebeat-and-metricbeat/334353)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 8\ **Last updated:** [June 27, 2023, 4:01pm UTC](https://discuss.elastic.co/t/potential-memory-leak-issue-with-filebeat-and-metricbeat/334353 "2023-06-27T16:01:27Z")
Since upgrading from ELK 7.17.1 to ELK 8.6.2 (and even with ELK 8.7.1) we are experiencing OOMKilled on filebeat and metricbeat pods. We had no issues with ELK 7.17.1. Increasing the resources allocations does not resolv… --- ## [Internal monitoring indices shards in UNASSIGNED state](https://discuss.elastic.co/t/internal-monitoring-indices-shards-in-unassigned-state/321247)
**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\ **Replies:** 8\ **Last updated:** [December 20, 2022, 11:14pm UTC](https://discuss.elastic.co/t/internal-monitoring-indices-shards-in-unassigned-state/321247 "2022-12-20T23:14:52Z")
Hi, We have an 8.x ES cluster running on Elastic cloud, All seems to be working ok except that a few internal monitoring indices have one shard marked as UNASSIGNED and this causes the cluster state to be YELLOW, all th… --- ## [Can't start ES 6.4 cluster with 3 master nodes](https://discuss.elastic.co/t/cant-start-es-6-4-cluster-with-3-master-nodes/151348)
**Author:** [@ludaca](https://discuss.elastic.co/u/ludaca)\ **Replies:** 6\ **Last updated:** [October 9, 2018, 7:38am UTC](https://discuss.elastic.co/t/cant-start-es-6-4-cluster-with-3-master-nodes/151348 "2018-10-09T07:38:57Z")
Hello, I have ES 6.3.2 cluster with 3 master nodes running with xpack.security.enabled=true When I' trying to upgrade to ES 6.4.x, master nodes can't communicate each other and form the cluster. Master's elasticsearc… --- ## [License on a self-managed elasticsearch cluster](https://discuss.elastic.co/t/license-on-a-self-managed-elasticsearch-cluster/305975)
**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\ **Replies:** 2\ **Last updated:** [May 30, 2022, 9:00pm UTC](https://discuss.elastic.co/t/license-on-a-self-managed-elasticsearch-cluster/305975 "2022-05-30T21:00:59Z")
Hi, I have a question about elastic licenses in self-managed clusters. I have seen in this page of elastic Official Elasticsearch Pricing: Elastic Cloud, Managed Elasticsearch | Elastic, the prices for subscriptions fo… [Previous page](https://discuss.elastic.co/top.md?page=812&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=814&per_page=50&period=all)