# Top

**URL:** https://discuss.elastic.co/top.md?page=815&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 816

---

## [High Rest Java Client with CompletableFuture](https://discuss.elastic.co/t/high-rest-java-client-with-completablefuture/183952)

<div class="topic-metadata">

**Author:** [@Santosh\_Pandey](https://discuss.elastic.co/u/Santosh_Pandey)\
**Replies:** 3\
**Last updated:** [November 11, 2019, 2:19pm UTC](https://discuss.elastic.co/t/high-rest-java-client-with-completablefuture/183952 "2019-11-11T14:19:45Z")

</div>

Using Elastic search high client java client, I was able to search asynchronously restHighLevelClient.searchAsync(searchRequest, RequestOptions.DEFAULT,new ActionListener() { @Override public void onResponse(SearchRes…

---

## [ES stopped logging](https://discuss.elastic.co/t/es-stopped-logging/21332)

<div class="topic-metadata">

**Author:** [@James\_4](https://discuss.elastic.co/u/James_4)\
**Replies:** 3\
**Last updated:** [December 22, 2014, 5:05pm UTC](https://discuss.elastic.co/t/es-stopped-logging/21332 "2014-12-22T17:05:28Z")

</div>

Topic says it....I'm not seeing any log files in /var/log/elasticsearch...ES is running, and I haven't modified anything since starting. Any way to track this down? Thank you. -- You received this message beca…

---

## [Kibana table resizing of columns](https://discuss.elastic.co/t/kibana-table-resizing-of-columns/307633)

<div class="topic-metadata">

**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 6:37am UTC](https://discuss.elastic.co/t/kibana-table-resizing-of-columns/307633 "2022-06-21T06:37:41Z")

</div>

Dear team, Is there a way to resize columns per user needs? We have a dashboard in 1 space, which is used by multiple users, each with their own monitor sizes. That causes an issue with different width of table colum…

---

## [Log4j No appenders could be found for logger (bootstrap)](https://discuss.elastic.co/t/log4j-no-appenders-could-be-found-for-logger-bootstrap/81935)

<div class="topic-metadata">

**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\
**Replies:** 2\
**Last updated:** [April 11, 2017, 8:58am UTC](https://discuss.elastic.co/t/log4j-no-appenders-could-be-found-for-logger-bootstrap/81935 "2017-04-11T08:58:06Z")

</div>

HI, I have 3 servers. And each server host 4 nodes ES v2.2. Only 2 nodes can generate logs. The others have the following error : Apr 10 14:12:48 elk-uat-m03 elasticsearch\[2168\]: log4j:WARN No appenders could b…

---

## [Logstash s3 elb config into existing ELK stack](https://discuss.elastic.co/t/logstash-s3-elb-config-into-existing-elk-stack/52914)

<div class="topic-metadata">

**Author:** [@meathouse](https://discuss.elastic.co/u/meathouse)\
**Replies:** 2\
**Last updated:** [June 28, 2016, 11:19pm UTC](https://discuss.elastic.co/t/logstash-s3-elb-config-into-existing-elk-stack/52914 "2016-06-28T23:19:11Z")

</div>

I recently set up an ELK stack in AWS with 1 elasticsearch master, and 1 data node. Running fine for a few weeks with filebeat and some basic auth log and syslog filters. Now I'm trying to add my ELB logs from s3. I h…

---

## [Logstash pipeline output | duplicate messages ending up indexes](https://discuss.elastic.co/t/logstash-pipeline-output-duplicate-messages-ending-up-indexes/199878)

<div class="topic-metadata">

**Author:** [@deeps](https://discuss.elastic.co/u/deeps)\
**Replies:** 4\
**Last updated:** [September 19, 2019, 6:19pm UTC](https://discuss.elastic.co/t/logstash-pipeline-output-duplicate-messages-ending-up-indexes/199878 "2019-09-19T18:19:53Z")

</div>

In the /etc/logstash/conf.d/ directory I have configured 2 pipeline files to read messages from kafka topic/s and send it to data nodes in the cluster. (1.conf and 2.conf) \[root@ingest1 conf.d\]# egrep -w "topics|index" …

---

## [Cluster health and the amount of indexes and data](https://discuss.elastic.co/t/cluster-health-and-the-amount-of-indexes-and-data/40034)

<div class="topic-metadata">

**Author:** [@Don\_Pich](https://discuss.elastic.co/u/Don_Pich)\
**Replies:** 7\
**Last updated:** [February 1, 2016, 3:20pm UTC](https://discuss.elastic.co/t/cluster-health-and-the-amount-of-indexes-and-data/40034 "2016-02-01T15:20:28Z")

</div>

So I have 4 nodes in my ELK stack. I have a logstash server that parses syslog messages into my cluster. I have 3 ES nodes. One is strictly a master node. The other two are master/data eligible. So it's all working…

---

## [Config pipeline logstash with module cisco](https://discuss.elastic.co/t/config-pipeline-logstash-with-module-cisco/300044)

<div class="topic-metadata">

**Author:** [@jojodd](https://discuss.elastic.co/u/jojodd)\
**Replies:** 6\
**Last updated:** [March 22, 2022, 1:08pm UTC](https://discuss.elastic.co/t/config-pipeline-logstash-with-module-cisco/300044 "2022-03-22T13:08:53Z")

</div>

Hello, I would like to know if it is possible to use at the same time cisco-asa and cisco-ios in a single pipeline? Is there a method to create several indexes with one for cisco-ios and the other for cisco-asa?

---

## [Elasticsearch-head cannot connect through ssh tunnel](https://discuss.elastic.co/t/elasticsearch-head-cannot-connect-through-ssh-tunnel/76880)

<div class="topic-metadata">

**Author:** [@nanothermite](https://discuss.elastic.co/u/nanothermite)\
**Replies:** 6\
**Last updated:** [March 3, 2017, 5:27pm UTC](https://discuss.elastic.co/t/elasticsearch-head-cannot-connect-through-ssh-tunnel/76880 "2017-03-03T17:27:09Z")

</div>

Hi, While I can connect to a remote ES instance through an ssh tunnel and confirm via Postman, I am unable to do so via the plugin, which has no problem connecting to local ES instance. What to configure? Thanks, H…

---

## [Document Level Security Problems](https://discuss.elastic.co/t/document-level-security-problems/43952)

<div class="topic-metadata">

**Author:** [@CamJN](https://discuss.elastic.co/u/CamJN)\
**Replies:** 6\
**Last updated:** [April 22, 2016, 2:13pm UTC](https://discuss.elastic.co/t/document-level-security-problems/43952 "2016-04-22T14:13:00Z")

</div>

I'm trying to set up document level security for a user on my found/elastic-cloud cluster, with the following config: user-list me: big\_hash user-role map: my\_role: me role-list my\_role: indices: '\*': pri…

---

## [Logstash 7.6.2 (EPIPE) Broken pipe Error (pipeline stopped processing new events)](https://discuss.elastic.co/t/logstash-7-6-2-epipe-broken-pipe-error-pipeline-stopped-processing-new-events/238366)

<div class="topic-metadata">

**Author:** [@iscorpio23](https://discuss.elastic.co/u/iscorpio23)\
**Replies:** 3\
**Last updated:** [July 10, 2020, 4:48am UTC](https://discuss.elastic.co/t/logstash-7-6-2-epipe-broken-pipe-error-pipeline-stopped-processing-new-events/238366 "2020-07-10T04:48:22Z")

</div>

Hi All, Just upgrade Logstash version from version 6.2.3 to 7.6.2 by RPM upgrade and i have 9 pipeline. Logstash will push log to Elasticsearch cloud version 7.4. After the upgrade, log can be seen in Kibana, but daily …

---

## [Logstash Syntax :: Check Boolian Value within a Field?](https://discuss.elastic.co/t/logstash-syntax-check-boolian-value-within-a-field/237530)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 3\
**Last updated:** [June 18, 2020, 2:57pm UTC](https://discuss.elastic.co/t/logstash-syntax-check-boolian-value-within-a-field/237530 "2020-06-18T14:57:19Z")

</div>

Hi Logstash Ninjas, In my filter{} section, I think I am creating a field with a Boolean value in it: if SOME CONDITION { mutate { add\_field =\> { "MyFlag" =\> 'true' } convert =\> { "MyFlag" =\> "boolean" } } …

---

## [Java High level rest client update](https://discuss.elastic.co/t/java-high-level-rest-client-update/144158)

<div class="topic-metadata">

**Author:** [@darsan55](https://discuss.elastic.co/u/darsan55)\
**Replies:** 3\
**Last updated:** [August 20, 2018, 8:14am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-update/144158 "2018-08-20T08:14:56Z")

</div>

Hi All, I m trying to update a nested field using java high level client . Here i am using script to update the document . While executing it its throwing error which i have mentioned below. CODE : …

---

## [Refresh index pattern not working](https://discuss.elastic.co/t/refresh-index-pattern-not-working/143077)

<div class="topic-metadata">

**Author:** [@fr0der1c](https://discuss.elastic.co/u/fr0der1c)\
**Replies:** 3\
**Last updated:** [August 7, 2018, 1:19pm UTC](https://discuss.elastic.co/t/refresh-index-pattern-not-working/143077 "2018-08-07T13:19:09Z")

</div>

I started using Elastic APM few days ago. In the discover panel of Kibana I can see a lot of yellow triangles noticing me that there is no cache mapping for this field. So I go to Management \> Index Patterns page to f…

---

## [Best method of handling arbitrary document joins](https://discuss.elastic.co/t/best-method-of-handling-arbitrary-document-joins/130457)

<div class="topic-metadata">

**Author:** [@Erik\_Miller](https://discuss.elastic.co/u/Erik_Miller)\
**Replies:** 8\
**Last updated:** [May 4, 2018, 9:31pm UTC](https://discuss.elastic.co/t/best-method-of-handling-arbitrary-document-joins/130457 "2018-05-04T21:31:53Z")

</div>

I've done some research and everywhere I look it sounds like nosql dbs, including elastic search use application side joins. For ES I understand the nested/parent-child options and have both implemented in my existing s…

---

## [How to push multiple metricbeat instance from multiple machines into 1 ES instance?](https://discuss.elastic.co/t/how-to-push-multiple-metricbeat-instance-from-multiple-machines-into-1-es-instance/109752)

<div class="topic-metadata">

**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\
**Replies:** 3\
**Last updated:** [December 4, 2017, 4:35pm UTC](https://discuss.elastic.co/t/how-to-push-multiple-metricbeat-instance-from-multiple-machines-into-1-es-instance/109752 "2017-12-04T16:35:07Z")

</div>

how to push multiple metricbeat instance from multiple machines into 1 ES instance connected in same network.Basically need to connect 2 windows machine and monitor the system metrics of both machines using ELK stack. Fo…

---

## [Ingest Attachment and Wildcard Queries](https://discuss.elastic.co/t/ingest-attachment-and-wildcard-queries/119977)

<div class="topic-metadata">

**Author:** [@colaci](https://discuss.elastic.co/u/colaci)\
**Replies:** 5\
**Last updated:** [February 27, 2018, 7:41pm UTC](https://discuss.elastic.co/t/ingest-attachment-and-wildcard-queries/119977 "2018-02-27T19:41:56Z")

</div>

Hello, I'm using the Ingest Attachment plugin to import PDF/DOC files into Elasticsearch. The "match" query works as expected, but I'm unable to make a "wildcard" query as I always get an empty result set. I just read (…

---

## [Elastic Fan Out Read](https://discuss.elastic.co/t/elastic-fan-out-read/78757)

<div class="topic-metadata">

**Author:** [@Nicholas\_Ventimiglia](https://discuss.elastic.co/u/Nicholas_Ventimiglia)\
**Replies:** 5\
**Last updated:** [March 16, 2017, 5:56pm UTC](https://discuss.elastic.co/t/elastic-fan-out-read/78757 "2017-03-16T17:56:07Z")

</div>

I am a first time user with elastic search. I am tasked with implementing a news feed which uses a fan-out-read to scan news from my friends and return the news in chronological order. My first hypothesis is that I cou…

---

## [Last\_run\_metadata\_path not updated with sql\_last\_value](https://discuss.elastic.co/t/last-run-metadata-path-not-updated-with-sql-last-value/276143)

<div class="topic-metadata">

**Author:** [@Alesora](https://discuss.elastic.co/u/Alesora)\
**Replies:** 2\
**Last updated:** [June 17, 2021, 8:06am UTC](https://discuss.elastic.co/t/last-run-metadata-path-not-updated-with-sql-last-value/276143 "2021-06-17T08:06:14Z")

</div>

Hi, I m new to ELK and I'm having an issue with the jdbc sql\_last\_value. So I'm trying to update my Elastic database from a SQL database using the jdbc driver, I want to update records that are modified (dhm is the row t…

---

## [Java.lang.NoSuchMethodError for saveToEs method](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-for-savetoes-method/48361)

<div class="topic-metadata">

**Author:** [@Amir](https://discuss.elastic.co/u/Amir)\
**Replies:** 2\
**Last updated:** [April 26, 2016, 2:05am UTC](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-for-savetoes-method/48361 "2016-04-26T02:05:10Z")

</div>

I am new to es-hadoop. I wrote a simple code using the tutorial import org.apache.spark.SparkConf import org.elasticsearch.spark.\_ val conf = sc.getConf conf.set("es.index.auto.create", "true") conf.set("es.nodes", "#…

---

## [Find and replace string in message field](https://discuss.elastic.co/t/find-and-replace-string-in-message-field/253574)

<div class="topic-metadata">

**Author:** [@randoran](https://discuss.elastic.co/u/randoran)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 11:33am UTC](https://discuss.elastic.co/t/find-and-replace-string-in-message-field/253574 "2020-10-29T11:33:04Z")

</div>

Is there a way using filebeat to find and replace a string in the \[message\] field of a log entry before sending to Elasticsearch? (similar to mutate and gsub in logstash)

---

## [Kibana browser support](https://discuss.elastic.co/t/kibana-browser-support/17414)

<div class="topic-metadata">

**Author:** [@sd\_2](https://discuss.elastic.co/u/sd_2)\
**Replies:** 1\
**Last updated:** [May 16, 2014, 7:53am UTC](https://discuss.elastic.co/t/kibana-browser-support/17414 "2014-05-16T07:53:41Z")

</div>

Kibana supports the latest browsers. What are the minimum browser versions supported by Kibana 3 for IE, Chrome, Mozilla, Safari ? -- You received this message because you are subscribed to the Google Gro…

---

## [Kibana cannot be accessed on different port other than 5601](https://discuss.elastic.co/t/kibana-cannot-be-accessed-on-different-port-other-than-5601/152068)

<div class="topic-metadata">

**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\
**Replies:** 4\
**Last updated:** [October 11, 2018, 3:00pm UTC](https://discuss.elastic.co/t/kibana-cannot-be-accessed-on-different-port-other-than-5601/152068 "2018-10-11T15:00:06Z")

</div>

I cannot access Kibana on different port other than 5601. I changed the server.port property in Kibana.yml file to several different unused ports. But I cannot access it from those ports. I can only access it on port 560…

---

## [Needed info on Kibana cross site scripting issue (ESA-2017-22)](https://discuss.elastic.co/t/needed-info-on-kibana-cross-site-scripting-issue-esa-2017-22/111917)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 4\
**Last updated:** [December 16, 2017, 5:14am UTC](https://discuss.elastic.co/t/needed-info-on-kibana-cross-site-scripting-issue-esa-2017-22/111917 "2017-12-16T05:14:35Z")

</div>

Hi, Hi I am currently using Kibana 5.6.4 and As mentioned in the security announcements , it seems this issue is not present in 5.6.5. I tried to search in github what was the fix made or under what bug was this issue …

---

## [Array of objects datatype exists](https://discuss.elastic.co/t/array-of-objects-datatype-exists/91524)

<div class="topic-metadata">

**Author:** [@WisdomPill](https://discuss.elastic.co/u/WisdomPill)\
**Replies:** 4\
**Last updated:** [July 1, 2017, 8:14pm UTC](https://discuss.elastic.co/t/array-of-objects-datatype-exists/91524 "2017-07-01T20:14:05Z")

</div>

I have a field called alarm\_images where I store a list of objects with three fields download\_date, index and url. I wanted to lighten my mapping since I was using lot of memory for lot of fields and I wanted to disable …

---

## [Primary shard auto re-balancing](https://discuss.elastic.co/t/primary-shard-auto-re-balancing/87908)

<div class="topic-metadata">

**Author:** [@MarkTierney](https://discuss.elastic.co/u/MarkTierney)\
**Replies:** 0\
**Last updated:** [June 1, 2017, 12:36pm UTC](https://discuss.elastic.co/t/primary-shard-auto-re-balancing/87908 "2017-06-01T12:36:36Z")

</div>

Hi Folks, I have a cluster with three data nodes with an index that has three primary shards with one replica each. When I stop one of the nodes, Elasticsearch promotes one of the replicas elsewhere to primary. At this…

---

## [NEST issue with ingesting PDFs](https://discuss.elastic.co/t/nest-issue-with-ingesting-pdfs/86871)

<div class="topic-metadata">

**Author:** [@goodsammy1](https://discuss.elastic.co/u/goodsammy1)\
**Replies:** 0\
**Last updated:** [May 23, 2017, 10:05pm UTC](https://discuss.elastic.co/t/nest-issue-with-ingesting-pdfs/86871 "2017-05-23T22:05:38Z")

</div>

Hi, I am trying to index some PDF documents using NEST and ElasticSearch5.1. Most of them go thru fine. The larger ones (10 MB to 40 MB) throw either a "(413) Request Entity Too Large" or "System.IO.IOException: Unable…

---

## [Kibana 4.6 directory structure](https://discuss.elastic.co/t/kibana-4-6-directory-structure/66542)

<div class="topic-metadata">

**Author:** [@vvs14](https://discuss.elastic.co/u/vvs14)\
**Replies:** 3\
**Last updated:** [November 24, 2016, 7:52am UTC](https://discuss.elastic.co/t/kibana-4-6-directory-structure/66542 "2016-11-24T07:52:25Z")

</div>

Hi, I am using Kibana4.1.4 with ES 1.7 and creating log export using Elasticdump behind Nginx. I have Keystone for authentication purpose and I have wrote code for authentication logic in KibanaDir/src/app.js file. Now…

---

## [Delete and recreate index in elasticsearch](https://discuss.elastic.co/t/delete-and-recreate-index-in-elasticsearch/292651)

<div class="topic-metadata">

**Author:** [@Vikrant1](https://discuss.elastic.co/u/Vikrant1)\
**Replies:** 1\
**Last updated:** [December 22, 2021, 2:17pm UTC](https://discuss.elastic.co/t/delete-and-recreate-index-in-elasticsearch/292651 "2021-12-22T14:17:51Z")

</div>

Hi All, Thanks for taking your time to read this query - I have to delete the existing index and the need to create same Index in Elasticsearch using the logstash config file before data loading start (reading from or…

---

## [Data encryption](https://discuss.elastic.co/t/data-encryption/6118)

<div class="topic-metadata">

**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\
**Replies:** 7\
**Last updated:** [December 10, 2011, 7:01pm UTC](https://discuss.elastic.co/t/data-encryption/6118 "2011-12-10T19:01:40Z")

</div>

Hi, Is there any option to store index data encrypted ? Best Regards.

---

## [Kibana behind NGINX](https://discuss.elastic.co/t/kibana-behind-nginx/178648)

<div class="topic-metadata">

**Author:** [@med\_barka](https://discuss.elastic.co/u/med_barka)\
**Replies:** 6\
**Last updated:** [April 26, 2019, 7:21pm UTC](https://discuss.elastic.co/t/kibana-behind-nginx/178648 "2019-04-26T19:21:01Z")

</div>

Hello, i'm using kibana behind reverse proxy along side with a node API application that uses elasticsearch. This is config of NGINX : location / { auth\_basic "Restricted Access"; auth\_bas…

---

## [Multiple Plotted Lines on a Line Chart - Canvas](https://discuss.elastic.co/t/multiple-plotted-lines-on-a-line-chart-canvas/198424)

<div class="topic-metadata">

**Author:** [@ShaneDaly](https://discuss.elastic.co/u/ShaneDaly)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 11:31am UTC](https://discuss.elastic.co/t/multiple-plotted-lines-on-a-line-chart-canvas/198424 "2019-09-13T11:31:53Z")

</div>

Hello, I am looking to create a line chart in a Canvas workbook with two different lines present on the graph. filters | esdocs index="e4000\*" fields="humidity, temperature, @timestamp" sort="@timestamp, DESC" | points…

---

## [Need help getting Logstash index from EC2 instance to Elasticsearch](https://discuss.elastic.co/t/need-help-getting-logstash-index-from-ec2-instance-to-elasticsearch/86726)

<div class="topic-metadata">

**Author:** [@fuel](https://discuss.elastic.co/u/fuel)\
**Replies:** 2\
**Last updated:** [May 25, 2017, 1:13pm UTC](https://discuss.elastic.co/t/need-help-getting-logstash-index-from-ec2-instance-to-elasticsearch/86726 "2017-05-25T13:13:44Z")

</div>

I have activated Elasticsearch from the AWS dashboard. My whole goal is to be able to view apache logs from my EC2 instance in Elasticsearch. I have installed Logstash on the EC2 instance. I have been able to start up…

---

## [How to overwrite Log time values with @timestamp](https://discuss.elastic.co/t/how-to-overwrite-log-time-values-with-timestamp/66689)

<div class="topic-metadata">

**Author:** [@Vivin\_Pai](https://discuss.elastic.co/u/Vivin_Pai)\
**Replies:** 2\
**Last updated:** [November 28, 2016, 7:05am UTC](https://discuss.elastic.co/t/how-to-overwrite-log-time-values-with-timestamp/66689 "2016-11-28T07:05:01Z")

</div>

I have created a conf file for Logstash. input { file { path =\> "/advdata/tmp/Error\_Trace\_blrhpbl\_SC1\*.txt" start\_position =\> "beginning" } } filter { date { match =\> \[ "logdate",…

---

## [LogStash: how many events per second do they handle?](https://discuss.elastic.co/t/logstash-how-many-events-per-second-do-they-handle/65017)

<div class="topic-metadata">

**Author:** [@sen](https://discuss.elastic.co/u/sen)\
**Replies:** 2\
**Last updated:** [November 4, 2016, 3:37pm UTC](https://discuss.elastic.co/t/logstash-how-many-events-per-second-do-they-handle/65017 "2016-11-04T15:37:39Z")

</div>

Hello Folks, I already found a lot of documents about Logstash. However, I did not find the information of how many events per second does logstash handle ? Obviously, it depends of the cluster and the size of the e…

---

## [Timestamp incorrect, even in regards to UTC](https://discuss.elastic.co/t/timestamp-incorrect-even-in-regards-to-utc/56011)

<div class="topic-metadata">

**Author:** [@Fidel\_Netflow](https://discuss.elastic.co/u/Fidel_Netflow)\
**Replies:** 2\
**Last updated:** [July 20, 2016, 8:42pm UTC](https://discuss.elastic.co/t/timestamp-incorrect-even-in-regards-to-utc/56011 "2016-07-20T20:42:06Z")

</div>

Hi, I am using the elk stack in regards to netflow records (using the netflow logstash codec). I have noticed a strange discrepancy regarding the timestamp. I'm aware elasticsearch converts time to UTC, but my issue se…

---

## [TLS handshake / read error looking for ack](https://discuss.elastic.co/t/tls-handshake-read-error-looking-for-ack/33254)

<div class="topic-metadata">

**Author:** [@incogniro](https://discuss.elastic.co/u/incogniro)\
**Replies:** 2\
**Last updated:** [November 4, 2015, 10:44am UTC](https://discuss.elastic.co/t/tls-handshake-read-error-looking-for-ack/33254 "2015-11-04T10:44:32Z")

</div>

Hi I'm having an issue with the forwarders in a deployment which fills the logstash-forwarder.err log with a combination of the messages shown below. Output in the forwarder log: 2015/10/29 13:06:53.594221 Connecting t…

---

## [Elastic 5 search result returns incorrect value of custom "id" field](https://discuss.elastic.co/t/elastic-5-search-result-returns-incorrect-value-of-custom-id-field/75106)

<div class="topic-metadata">

**Author:** [@Kevin\_Chan](https://discuss.elastic.co/u/Kevin_Chan)\
**Replies:** 5\
**Last updated:** [February 16, 2017, 6:24pm UTC](https://discuss.elastic.co/t/elastic-5-search-result-returns-incorrect-value-of-custom-id-field/75106 "2017-02-16T18:24:49Z")

</div>

I recently upgrade to Elastic 5.1.1 and my unit test starts to fail. The context of the test is to put a document in the index and search it. simple. The search result does correctly return the record, however the cus…

---

## [Deleting index suddenly](https://discuss.elastic.co/t/deleting-index-suddenly/315334)

<div class="topic-metadata">

**Author:** [@Emre\_Kurt](https://discuss.elastic.co/u/Emre_Kurt)\
**Replies:** 8\
**Last updated:** [September 29, 2022, 8:03am UTC](https://discuss.elastic.co/t/deleting-index-suddenly/315334 "2022-09-29T08:03:20Z")

</div>

Hi everyone, I've been having a very annoying problem lately. Something deleting my indexes suddenly. Here is my situations; 9200 port is closed to outside. Only server ip can access the port. There is a lot of docker…

---

## [Unable to initialize central management for Elastic Agents](https://discuss.elastic.co/t/unable-to-initialize-central-management-for-elastic-agents/308311)

<div class="topic-metadata">

**Author:** [@xynobob](https://discuss.elastic.co/u/xynobob)\
**Replies:** 8\
**Last updated:** [July 4, 2022, 10:36am UTC](https://discuss.elastic.co/t/unable-to-initialize-central-management-for-elastic-agents/308311 "2022-07-04T10:36:46Z")

</div>

I am new to Elasticsearch and was trying to use Fleet and Elastic Agent. It was fine initially as everything was working perfectly fine; managed to pipe logs to ES, etc, but now when I try to navigate to the Fleet page, …

---

## [How do i get the message field?](https://discuss.elastic.co/t/how-do-i-get-the-message-field/262711)

<div class="topic-metadata">

**Author:** [@walid\_lakehal](https://discuss.elastic.co/u/walid_lakehal)\
**Replies:** 4\
**Last updated:** [January 30, 2021, 2:05pm UTC](https://discuss.elastic.co/t/how-do-i-get-the-message-field/262711 "2021-01-30T14:05:37Z")

</div>

Hello , i am trying to get the "message" field to use it in a web site dashboard , in this example it's just the result of an ls command

---

## [Unable to Start ElasticSearch 5.6.16](https://discuss.elastic.co/t/unable-to-start-elasticsearch-5-6-16/192791)

<div class="topic-metadata">

**Author:** [@jboyes](https://discuss.elastic.co/u/jboyes)\
**Replies:** 4\
**Last updated:** [August 5, 2019, 9:06pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-5-6-16/192791 "2019-08-05T21:06:05Z")

</div>

I just downgraded from v6.5.4 to v5.6.16 to meet the requirements of a web app I am installing. When I start the service (service elasticsearch start) it says OK, but when I check the status (service elasticsearch start…

---

## [\[RUBY\] : elasticsearch-ruby : Special characters not escaped by the library](https://discuss.elastic.co/t/ruby-elasticsearch-ruby-special-characters-not-escaped-by-the-library/15187)

<div class="topic-metadata">

**Author:** [@Srirang\_Doddihal](https://discuss.elastic.co/u/Srirang_Doddihal)\
**Replies:** 4\
**Last updated:** [January 31, 2014, 3:05pm UTC](https://discuss.elastic.co/t/ruby-elasticsearch-ruby-special-characters-not-escaped-by-the-library/15187 "2014-01-31T15:05:03Z")

</div>

Hi, I tried out the elasticsearch Ruby gem today and found that it does not escape the reserve characters when searching with the query\_string query. As a library providing easy to use search API, wouldn't it be …

---

## [Java RestHighLevelClient vs Elasticsearch Java API Client Improvements](https://discuss.elastic.co/t/java-resthighlevelclient-vs-elasticsearch-java-api-client-improvements/300398)

<div class="topic-metadata">

**Author:** [@Ashfur](https://discuss.elastic.co/u/Ashfur)\
**Replies:** 1\
**Last updated:** [March 23, 2022, 8:26am UTC](https://discuss.elastic.co/t/java-resthighlevelclient-vs-elasticsearch-java-api-client-improvements/300398 "2022-03-23T08:26:24Z")

</div>

Hello, We are on 7.16.2 and are currently using the org.Elasticsearch.client.RestHighLevelClient. I am aware that the RestHighLevelClient has been deprecated in favor of the new Java API client. I'd just like to know…

---

## [Index size is increased while deleting](https://discuss.elastic.co/t/index-size-is-increased-while-deleting/217804)

<div class="topic-metadata">

**Author:** [@nhatnam](https://discuss.elastic.co/u/nhatnam)\
**Replies:** 1\
**Last updated:** [February 12, 2020, 6:03am UTC](https://discuss.elastic.co/t/index-size-is-increased-while-deleting/217804 "2020-02-12T06:03:19Z")

</div>

I've just upgraded my cluster from v5.3 to v7.5 and I see strange behaviour. I'm using Bulk API to delete and index docs to a newly created index. I'm sure that at the beginning my bulk requests only contain deletion of…

---

## [Timelion offset: best userfriendly way to work with offset](https://discuss.elastic.co/t/timelion-offset-best-userfriendly-way-to-work-with-offset/72993)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [January 27, 2017, 12:29pm UTC](https://discuss.elastic.co/t/timelion-offset-best-userfriendly-way-to-work-with-offset/72993 "2017-01-27T12:29:50Z")

</div>

Hi, I am very interested in using timelion to support our load tests of our application. Therefore I want to use the offset function of timelion. Lets say I have the start time of my baseline test at 2017-01-20 10:00…

---

## [Logstash Error: Address already in use](https://discuss.elastic.co/t/logstash-error-address-already-in-use/110677)

<div class="topic-metadata">

**Author:** [@Jonathan\_Kosgei](https://discuss.elastic.co/u/Jonathan_Kosgei)\
**Replies:** 2\
**Last updated:** [December 7, 2017, 2:23pm UTC](https://discuss.elastic.co/t/logstash-error-address-already-in-use/110677 "2017-12-07T14:23:11Z")

</div>

I have the following config input { beats { 'port' =\> '5044' } } output { cloudwatch { 'region'=\> 'us-west-2' } } I have only one conf file in /usr/share/logstash/pipeline/ bash-4.2$ ls /usr/share/logstash/pi…

---

## [Use Elasticsearch java api, hits score always be 1.0](https://discuss.elastic.co/t/use-elasticsearch-java-api-hits-score-always-be-1-0/61565)

<div class="topic-metadata">

**Author:** [@simonLi](https://discuss.elastic.co/u/simonLi)\
**Replies:** 2\
**Last updated:** [September 27, 2016, 11:46am UTC](https://discuss.elastic.co/t/use-elasticsearch-java-api-hits-score-always-be-1-0/61565 "2016-09-27T11:46:03Z")

</div>

Hi, I used Elasticsearch java client. I do search with query\_string, and I get response, but score always be 1.0 . code is: String query = "{\\"query\\": {\\"query\_string\\": {\\"query\\": \\"weblog data4\\"}}}"; SearchReq…

---

## [Order by name doesn't work as expected](https://discuss.elastic.co/t/order-by-name-doesnt-work-as-expected/15083)

<div class="topic-metadata">

**Author:** [@Nikolay\_Chankov](https://discuss.elastic.co/u/Nikolay_Chankov)\
**Replies:** 2\
**Last updated:** [January 2, 2014, 8:46pm UTC](https://discuss.elastic.co/t/order-by-name-doesnt-work-as-expected/15083 "2014-01-02T20:46:43Z")

</div>

Hi guys, for some reason, the order by name, \_score is not working as I would expect. I've prepared a simple example to explain what I mean. There are 2 records: john doe and jane doe. if there is no email in the i…

---

## [ERR - Failed to publish events caused by: EOF](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-eof/65563)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 3\
**Last updated:** [November 10, 2016, 1:08pm UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-eof/65563 "2016-11-10T13:08:38Z")

</div>

filebeat 5.0. Filebeat stop sending logs and i get these errors. Restart doesnt work and same errors again. The only solution is to remove registry file and start again. 2016-11-09T20:52:21+01:00 INFO Non-zero metri…

[Previous page](https://discuss.elastic.co/top.md?page=814&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=816&per_page=50&period=all)
