# Top

**URL:** https://discuss.elastic.co/top.md?page=82&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 83

---

## [Package for Kibana 4.2.0](https://discuss.elastic.co/t/package-for-kibana-4-2-0/33164)

<div class="topic-metadata">

**Author:** [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)\
**Replies:** 14\
**Last updated:** [November 3, 2015, 9:55am UTC](https://discuss.elastic.co/t/package-for-kibana-4-2-0/33164 "2015-11-03T09:55:18Z")

</div>

Hi there! I've been using this tutorial as how to setup my ELK setup but I wanted to try out the 2.0 Elasticsearch and Logstash so I can try the webhook with Slack. Now Kibana won't start and I suspect that's because I…

---

## [Filebeat Stop Cleaning Registry](https://discuss.elastic.co/t/filebeat-stop-cleaning-registry/58902)

<div class="topic-metadata">

**Author:** [@Gabry993](https://discuss.elastic.co/u/Gabry993)\
**Replies:** 9\
**Last updated:** [September 2, 2016, 7:44am UTC](https://discuss.elastic.co/t/filebeat-stop-cleaning-registry/58902 "2016-09-02T07:44:28Z")

</div>

Hi, I've got a problem related to log rotation and registry clean up. This is how the rotation works: after reaching a certain size, the file "logxxx.log" get renamed in "logxxx-timestamp.log" and a new "logxxx.log" is…

---

## [Agent 1.28.1 ERROR No Log4j 2 configuration file found](https://discuss.elastic.co/t/agent-1-28-1-error-no-log4j-2-configuration-file-found/291668)

<div class="topic-metadata">

**Author:** [@coynef](https://discuss.elastic.co/u/coynef)\
**Replies:** 23\
**Last updated:** [December 17, 2021, 1:23pm UTC](https://discuss.elastic.co/t/agent-1-28-1-error-no-log4j-2-configuration-file-found/291668 "2021-12-17T13:23:36Z")

</div>

APM Agent language and version: 1.28.1 Hi In testing the latest version of the java agent the following error appeared... 2021-12-13 12:59:25,268 elastic-apm-server-healthcheck ERROR No Log4j 2 configuration file foun…

---

## [Create new version of existing document / enforce the id](https://discuss.elastic.co/t/create-new-version-of-existing-document-enforce-the-id/69746)

<div class="topic-metadata">

**Author:** [@Florck](https://discuss.elastic.co/u/Florck)\
**Replies:** 13\
**Last updated:** [January 23, 2017, 12:35pm UTC](https://discuss.elastic.co/t/create-new-version-of-existing-document-enforce-the-id/69746 "2017-01-23T12:35:20Z")

</div>

Dear all, For our need we develop a beat for which we need not to add new values at each time in elasticsearch, but potentially update existing one. We have not found any way to enforce the id of the document to be p…

---

## [logstashでltsvをパースしESへ保存について](https://discuss.elastic.co/t/logstash-ltsv-es/58082)

<div class="topic-metadata">

**Author:** [@111127](https://discuss.elastic.co/u/111127)\
**Replies:** 11\
**Last updated:** [August 23, 2016, 5:18am UTC](https://discuss.elastic.co/t/logstash-ltsv-es/58082 "2016-08-23T05:18:05Z")

</div>

識者の皆様 初めて投稿をさせていただきます よろしくお願い申し上げます 今回、私は以下の様な環境の構築を目指しております 解析対象：nginxのアクセスログ(ltsv形式) 上記の解析対象のnginxにはfilebeat-1.2.3-1をinstallしてlogstashにアクセスログを送信しています logstashはlogstash-2.3.2-1を利用しており、logstashのconfigは以下の通りのようなconfig…

---

## [Problem using SERVER\_PUBLICBASEURL with docker-compose](https://discuss.elastic.co/t/problem-using-server-publicbaseurl-with-docker-compose/315874)

<div class="topic-metadata">

**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\
**Replies:** 12\
**Last updated:** [October 5, 2022, 3:38pm UTC](https://discuss.elastic.co/t/problem-using-server-publicbaseurl-with-docker-compose/315874 "2022-10-05T15:38:32Z")

</div>

Hi, I am currently trying to set the field SERVER\_PUBLICSBASEURL on my docker-compose.yml, but it seems that nothing is changing. I can only access to kibana through the ip but not through the hostname I wrote. the doc…

---

## [Getting Elasticsearch cluster status as RED](https://discuss.elastic.co/t/getting-elasticsearch-cluster-status-as-red/304939)

<div class="topic-metadata">

**Author:** [@Yogendra\_Pratap\_Sing](https://discuss.elastic.co/u/Yogendra_Pratap_Sing)\
**Replies:** 16\
**Last updated:** [May 17, 2022, 2:24pm UTC](https://discuss.elastic.co/t/getting-elasticsearch-cluster-status-as-red/304939 "2022-05-17T14:24:25Z")

</div>

Hi Community, I'm using Elastic stack on k8s and facing ES cluster status as RED but indices are all in green below is cluster health status \[Elasticsearch@Elasticsearch-master-0 ~\]$ curl -XGET 'localhost:9200/\_cluste…

---

## [Winlogbeat - unable to start service on windows](https://discuss.elastic.co/t/winlogbeat-unable-to-start-service-on-windows/357619)

<div class="topic-metadata">

**Author:** [@fracorbas](https://discuss.elastic.co/u/fracorbas)\
**Replies:** 27\
**Last updated:** [May 27, 2024, 1:52pm UTC](https://discuss.elastic.co/t/winlogbeat-unable-to-start-service-on-windows/357619 "2024-05-27T13:52:27Z")

</div>

I'm using the ELK stack as a syslog server on an debian server in order to gather logs from Cisco devices and Windows server. Everything was doing fine until I wanted to use HTTPS instead of HTTP, now kibana and Elastic…

---

## [Elasticsearch snapshot and restore best practices](https://discuss.elastic.co/t/elasticsearch-snapshot-and-restore-best-practices/284141)

<div class="topic-metadata">

**Author:** [@eolver](https://discuss.elastic.co/u/eolver)\
**Replies:** 9\
**Last updated:** [September 20, 2021, 5:59am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-and-restore-best-practices/284141 "2021-09-20T05:59:37Z")

</div>

Hi All, I want to know the best way, to store elastic data for recovery. Currently we had each cluster hosted in azure and the cluster backed up daily using RSV. However we wanted to do more frequently snapshots which…

---

## [Connecting kibana with elasticsearch](https://discuss.elastic.co/t/connecting-kibana-with-elasticsearch/116285)

<div class="topic-metadata">

**Author:** [@Nada\_I](https://discuss.elastic.co/u/Nada_I)\
**Replies:** 13\
**Last updated:** [January 22, 2018, 1:09pm UTC](https://discuss.elastic.co/t/connecting-kibana-with-elasticsearch/116285 "2018-01-22T13:09:27Z")

</div>

hello, i want to monitor the network in elasticsearch cloud so i have 2 questions: 1- how i can enter data and send it to the cluster to monitor it from kibana 2-which software i should install x-pack,elasticsearch a…

---

## [URL of the Elasticsearch instance](https://discuss.elastic.co/t/url-of-the-elasticsearch-instance/70881)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 9\
**Last updated:** [January 9, 2017, 9:29am UTC](https://discuss.elastic.co/t/url-of-the-elasticsearch-instance/70881 "2017-01-09T09:29:26Z")

</div>

After applying all security, If I set the URL of the Elasticsearch instance elasticsearch.url: "https://localhost:9200" in kibana.yml, the kibana browser isn't starting. When using back: elasticsearch.url: "http:/…

---

## [Create json object in logstash & pass to the elastic search](https://discuss.elastic.co/t/create-json-object-in-logstash-pass-to-the-elastic-search/106665)

<div class="topic-metadata">

**Author:** [@dsakpal](https://discuss.elastic.co/u/dsakpal)\
**Replies:** 9\
**Last updated:** [November 14, 2017, 10:10am UTC](https://discuss.elastic.co/t/create-json-object-in-logstash-pass-to-the-elastic-search/106665 "2017-11-14T10:10:29Z")

</div>

My log format is like, 02.11.2017,11:33:13,DDIC,6,192.168.2.110,PFCG,SAPMSYST SAPMSYST1,Logon Successful (Type=A) My filter is like, filter { grok{ match=\>{ "message"=\>"%{NOTSPACE:date},%{NOTSPACE:time},%{WORD:use…

---

## [Some networks were defined but are not used by any service: elastic](https://discuss.elastic.co/t/some-networks-were-defined-but-are-not-used-by-any-service-elastic/290480)

<div class="topic-metadata">

**Author:** [@iruushi\_lol](https://discuss.elastic.co/u/iruushi_lol)\
**Replies:** 10\
**Last updated:** [November 30, 2021, 6:43pm UTC](https://discuss.elastic.co/t/some-networks-were-defined-but-are-not-used-by-any-service-elastic/290480 "2021-11-30T18:43:36Z")

</div>

hey, i have a little problem with elastic, i have a error message : some networks were defined but are not used by any service: elastic, i have install kibana and this error appeared. i want to create ELK server on doc…

---

## [How to capture text from a path or s3 prefix](https://discuss.elastic.co/t/how-to-capture-text-from-a-path-or-s3-prefix/95998)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 11\
**Last updated:** [August 24, 2017, 8:27pm UTC](https://discuss.elastic.co/t/how-to-capture-text-from-a-path-or-s3-prefix/95998 "2017-08-24T20:27:49Z")

</div>

I have a slightly different requirement where i have a directory structure something like this /data/aws-test1 /data/aws-test2 … and so on Is there a way when using the file input template to capture aws-test1 and aws…

---

## [Filebeat connection to ELK via port 5044](https://discuss.elastic.co/t/filebeat-connection-to-elk-via-port-5044/78781)

<div class="topic-metadata">

**Author:** [@pleegor](https://discuss.elastic.co/u/pleegor)\
**Replies:** 9\
**Last updated:** [March 16, 2017, 4:07am UTC](https://discuss.elastic.co/t/filebeat-connection-to-elk-via-port-5044/78781 "2017-03-16T04:07:46Z")

</div>

Hi, I am trying to setup a filebeat shipping logs to ELK instance. 2017/03/16 01:07:45.254081 output.go:109: DBG output worker: publish 2046 events 2017/03/16 01:07:45.254086 sync.go:53: DBG connect 2017…

---

## [Throttling processing of log backfill using Filebeat](https://discuss.elastic.co/t/throttling-processing-of-log-backfill-using-filebeat/83740)

<div class="topic-metadata">

**Author:** [@gtorrance](https://discuss.elastic.co/u/gtorrance)\
**Replies:** 10\
**Last updated:** [April 28, 2017, 5:39pm UTC](https://discuss.elastic.co/t/throttling-processing-of-log-backfill-using-filebeat/83740 "2017-04-28T17:39:39Z")

</div>

\[Originally posted this on the Elasticsearch forum (https://discuss.elastic.co/t/throttling-processing-of-log-backfill/83734), but it was suggested that it was more of a Filebeat or Logstash question. Sorry for the cross…

---

## [HELP - Logstash isn't working!](https://discuss.elastic.co/t/help-logstash-isnt-working/80614)

<div class="topic-metadata">

**Author:** [@safasalwan](https://discuss.elastic.co/u/safasalwan)\
**Replies:** 17\
**Last updated:** [April 4, 2017, 3:23pm UTC](https://discuss.elastic.co/t/help-logstash-isnt-working/80614 "2017-04-04T15:23:09Z")

</div>

Hey guys, , I'm in the process of installing Logstash, but I'm stuck halfway. This is what's happening: What am I supposed to do? I really need to install it ASAP. Thanks, Safa

---

## [Scala SBT install issues](https://discuss.elastic.co/t/scala-sbt-install-issues/65072)

<div class="topic-metadata">

**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\
**Replies:** 10\
**Last updated:** [November 11, 2016, 4:38pm UTC](https://discuss.elastic.co/t/scala-sbt-install-issues/65072 "2016-11-11T16:38:57Z")

</div>

Has anyone had issues adding the elasticsearch-hadoop v 5.0.0 lib to SBT? name := "Insights Data" version := "1.0.0" organization := "me" scalaVersion := "2.11.5" libraryDependencies ++= Seq( "org.apache.spark" %% "…

---

## [Unbalanced disk usage - ES 2.1](https://discuss.elastic.co/t/unbalanced-disk-usage-es-2-1/131219)

<div class="topic-metadata">

**Author:** [@varun\_arora](https://discuss.elastic.co/u/varun_arora)\
**Replies:** 29\
**Last updated:** [May 30, 2018, 6:06pm UTC](https://discuss.elastic.co/t/unbalanced-disk-usage-es-2-1/131219 "2018-05-30T18:06:21Z")

</div>

On a 5 node cluster, the shards are balanced, but the disk space used is unbalanced. Checking the directories, I found that the shards are taking around 10 times the size of the shard on the disk. //tickets\_v2 …

---

## [Field list](https://discuss.elastic.co/t/field-list/214863)

<div class="topic-metadata">

**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\
**Replies:** 22\
**Last updated:** [January 16, 2020, 4:29am UTC](https://discuss.elastic.co/t/field-list/214863 "2020-01-16T04:29:03Z")

</div>

I have this entry in logstash.conf mutate { split =\> \["message","Employee"\] add\_field =\> {"part1" =\>"%{\[message\]\[0\]}"} add\_field =\> {"part2" =\>"%{\[message\]\[1\]}"} } mutate { split =\> \[…

---

## [Search with exact match comes first?](https://discuss.elastic.co/t/search-with-exact-match-comes-first/175485)

<div class="topic-metadata">

**Author:** [@flash](https://discuss.elastic.co/u/flash)\
**Replies:** 10\
**Last updated:** [April 8, 2019, 6:30pm UTC](https://discuss.elastic.co/t/search-with-exact-match-comes-first/175485 "2019-04-08T18:30:33Z")

</div>

I have some index settings like this DELETE index PUT index/\_doc/Neighbour { "id": "id1" "name": "Downtown San Francisco" "indexed\_at": "2019-03-01" } PUT index/\_doc/State { "id": "id2" "name": "Nevada" …

---

## [Fleet Server - \* missing enrollment api key](https://discuss.elastic.co/t/fleet-server-missing-enrollment-api-key/283339)

<div class="topic-metadata">

**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\
**Replies:** 11\
**Last updated:** [October 1, 2021, 5:22pm UTC](https://discuss.elastic.co/t/fleet-server-missing-enrollment-api-key/283339 "2021-10-01T17:22:13Z")

</div>

Hey All, Recently upgraded to 7.14.1 to and am struggling to install fleet server. I am running on-prem and have my self-signed certs setup. Trying to install fleet-server on the same node where elasticsearch is install…

---

## [NodesNotAvailable for java client](https://discuss.elastic.co/t/nodesnotavailable-for-java-client/68011)

<div class="topic-metadata">

**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\
**Replies:** 10\
**Last updated:** [December 5, 2016, 12:24pm UTC](https://discuss.elastic.co/t/nodesnotavailable-for-java-client/68011 "2016-12-05T12:24:20Z")

</div>

Hello Elastic Team. My name is Kanagat. I am trying configurate connection to Elk node from java by transport client.But i get exception: noNodesAvailable. next my ELK configuration running on server with name XXX: e…

---

## ["cannot poll for user changes since security index \[.security\] does not exist" prevents authorization](https://discuss.elastic.co/t/cannot-poll-for-user-changes-since-security-index-security-does-not-exist-prevents-authorization/169078)

<div class="topic-metadata">

**Author:** [@btmurphy](https://discuss.elastic.co/u/btmurphy)\
**Replies:** 24\
**Last updated:** [February 25, 2019, 6:23pm UTC](https://discuss.elastic.co/t/cannot-poll-for-user-changes-since-security-index-security-does-not-exist-prevents-authorization/169078 "2019-02-25T18:23:04Z")

</div>

New to Elasticsearch & Shield. Required to work with version 2.4.6, and cannot currently upgrade to a newer version. Installed Shield, started a SINGLE NODE Elasticsearch 'cluster' with basic authentication, added a us…

---

## [Filter duplicate record of log in kibana dashboard](https://discuss.elastic.co/t/filter-duplicate-record-of-log-in-kibana-dashboard/237016)

<div class="topic-metadata">

**Author:** [@anand27889](https://discuss.elastic.co/u/anand27889)\
**Replies:** 10\
**Last updated:** [June 17, 2020, 8:21am UTC](https://discuss.elastic.co/t/filter-duplicate-record-of-log-in-kibana-dashboard/237016 "2020-06-17T08:21:03Z")

</div>

Hi Friends, I want to remove the duplicate record of log file which is displaying in kibana dashboard, for example: {TransactionID: 23750 , Status: failed, Time: 14/06/2020 11:20:25} {TransactionID: 23750 , Status: …

---

## [Receiving 204 response but no cookie with the /api/security/v1/login endpoint](https://discuss.elastic.co/t/receiving-204-response-but-no-cookie-with-the-api-security-v1-login-endpoint/167534)

<div class="topic-metadata">

**Author:** [@an0nc0d3r](https://discuss.elastic.co/u/an0nc0d3r)\
**Replies:** 10\
**Last updated:** [February 14, 2019, 3:32pm UTC](https://discuss.elastic.co/t/receiving-204-response-but-no-cookie-with-the-api-security-v1-login-endpoint/167534 "2019-02-14T15:32:06Z")

</div>

When making a post request to /api/security/v1/login with valid credentials, I get a 204 (empty response), and no cookie :cookie: However, when I send invalid credentials, I get a 401 response. Request POST /api/securi…

---

## [Filebeat 6 on Redhat (RHEL/CentOS 5) not supported!](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049)

<div class="topic-metadata">

**Author:** [@knight](https://discuss.elastic.co/u/knight)\
**Replies:** 11\
**Last updated:** [March 25, 2019, 1:53pm UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049 "2019-03-25T13:53:48Z")

</div>

OS ENV： cat /etc/redhat-release Red Hat Enterprise Linux Server release 5.4 (Tikanga) uname -r 2.6.18-164.el5 Filebeat version： 6.6.2 when i run cmd：./filebeat -e -c ./filebeat.yml , i got those info： runtime: ep…

---

## [Filebeat not closing opened files,consuming around 60GB on Production systems](https://discuss.elastic.co/t/filebeat-not-closing-opened-files-consuming-around-60gb-on-production-systems/72350)

<div class="topic-metadata">

**Author:** [@NITIN-BHAISARE](https://discuss.elastic.co/u/NITIN-BHAISARE)\
**Replies:** 11\
**Last updated:** [February 1, 2017, 9:02am UTC](https://discuss.elastic.co/t/filebeat-not-closing-opened-files-consuming-around-60gb-on-production-systems/72350 "2017-02-01T09:02:57Z")

</div>

Hello, We have filebeat installed on the production system. I see disk getting full after every 3-4 days. For the temporary purpose, we are restarting filebeat and everything comes back to normal. My understanding is…

---

## [Please suggest performance settings for my ElasticSearch cluster](https://discuss.elastic.co/t/please-suggest-performance-settings-for-my-elasticsearch-cluster/60232)

<div class="topic-metadata">

**Author:** [@renego](https://discuss.elastic.co/u/renego)\
**Replies:** 20\
**Last updated:** [September 26, 2016, 2:44pm UTC](https://discuss.elastic.co/t/please-suggest-performance-settings-for-my-elasticsearch-cluster/60232 "2016-09-26T14:44:09Z")

</div>

Hi, I have troubles with my ElasticSearch cluster and don't know what to do. Here my settings: Server: 64GB of RAM 8 cores 500GB SSD Data: 10 different index each 1M rows 10M of rows 11GB of data Actual ES cluster 3…

---

## [How to create an array runtime field](https://discuss.elastic.co/t/how-to-create-an-array-runtime-field/322791)

<div class="topic-metadata">

**Author:** [@cr\_168328](https://discuss.elastic.co/u/cr_168328)\
**Replies:** 15\
**Last updated:** [January 11, 2023, 10:53am UTC](https://discuss.elastic.co/t/how-to-create-an-array-runtime-field/322791 "2023-01-11T10:53:23Z")

</div>

I have an index with a nested field 'roles': "roles": { "type": "nested", "properties": { "name": { "type": "text", "fields": { "raw": { "type"…

---

## [Role based access](https://discuss.elastic.co/t/role-based-access/26873)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 9\
**Last updated:** [August 17, 2015, 12:48pm UTC](https://discuss.elastic.co/t/role-based-access/26873 "2015-08-17T12:48:58Z")

</div>

Hi All, I would like to have different privilege for different user in using Kibana, I added user by $/usr/share/elasticsearch/bin/shield/esusers useradd franky -r kibana4\_monitoring -p password and then modify role…

---

## [No data MySQL dashboard - version mismatch?](https://discuss.elastic.co/t/no-data-mysql-dashboard-version-mismatch/146480)

<div class="topic-metadata">

**Author:** [@ron\_e\_e](https://discuss.elastic.co/u/ron_e_e)\
**Replies:** 24\
**Last updated:** [September 18, 2018, 11:10pm UTC](https://discuss.elastic.co/t/no-data-mysql-dashboard-version-mismatch/146480 "2018-09-18T23:10:06Z")

</div>

Hello, Somehow we ended up with a slightly newer version of metricbeats vs everything else. We are running on Centos 7, version 6.3.1 while metricbeats is 6.3.2, we do see some data such as system metrics but after conf…

---

## [Windows DNS incompatible character encodings](https://discuss.elastic.co/t/windows-dns-incompatible-character-encodings/48961)

<div class="topic-metadata">

**Author:** [@BongoEADGC6](https://discuss.elastic.co/u/BongoEADGC6)\
**Replies:** 14\
**Last updated:** [February 23, 2017, 2:30pm UTC](https://discuss.elastic.co/t/windows-dns-incompatible-character-encodings/48961 "2017-02-23T14:30:16Z")

</div>

I am having a constant issue while sending Windows DNS logs from filebeat to logstash. This is the config I use during debug: input { beats { port =\> XXXX } } filter { if \[type\] =="Win\_DNS" { gro…

---

## [Recommended way to reduce overload on ES](https://discuss.elastic.co/t/recommended-way-to-reduce-overload-on-es/17174)

<div class="topic-metadata">

**Author:** [@ran](https://discuss.elastic.co/u/ran)\
**Replies:** 9\
**Last updated:** [April 25, 2014, 10:31am UTC](https://discuss.elastic.co/t/recommended-way-to-reduce-overload-on-es/17174 "2014-04-25T10:31:05Z")

</div>

Hi all, I'm looking for the recommended solution for my situation. We have a time based data. Each day we index around 43,000,000 documents. Each document weighs around 0.6k. Our cluster contains 8 nodes (Ama…

---

## [What actually causes Red / Yellow cluster health](https://discuss.elastic.co/t/what-actually-causes-red-yellow-cluster-health/22485)

<div class="topic-metadata">

**Author:** [@Steven\_Williams](https://discuss.elastic.co/u/Steven_Williams)\
**Replies:** 17\
**Last updated:** [March 3, 2015, 2:20pm UTC](https://discuss.elastic.co/t/what-actually-causes-red-yellow-cluster-health/22485 "2015-03-03T14:20:39Z")

</div>

Hello all I have 2 nodes (two different machines) and on occasion the cluster goes from green to yellow (my cluster health is below, and at the moment all is good) "cluster\_name" : "elasticsearch", "statu…

---

## [Geo\_point and geohash in logstash](https://discuss.elastic.co/t/geo-point-and-geohash-in-logstash/202880)

<div class="topic-metadata">

**Author:** [@rohitg](https://discuss.elastic.co/u/rohitg)\
**Replies:** 13\
**Last updated:** [October 10, 2019, 8:28pm UTC](https://discuss.elastic.co/t/geo-point-and-geohash-in-logstash/202880 "2019-10-10T20:28:07Z")

</div>

Hi, I am trying to use coordinate maps in kibana for my visualization. I mutate my longitude and latitude fields with rename and convert to float, but when i tried in Kibana, it showing no compactible field geo\_point. …

---

## [Data node lost, all shards go to RED - Data node returns but shards lost forever](https://discuss.elastic.co/t/data-node-lost-all-shards-go-to-red-data-node-returns-but-shards-lost-forever/186761)

<div class="topic-metadata">

**Author:** [@LucasSh](https://discuss.elastic.co/u/LucasSh)\
**Replies:** 9\
**Last updated:** [June 26, 2019, 10:37pm UTC](https://discuss.elastic.co/t/data-node-lost-all-shards-go-to-red-data-node-returns-but-shards-lost-forever/186761 "2019-06-26T22:37:31Z")

</div>

This happened to me on a test bed running the 6.7 ELK stack on Kubernetes (3 ingest, 3 master, 3 32TB datanodes) with the configuration set to 5 Shards, 1 Replica. \*\* OBSERVATION Kibana renders a json "message":"all sh…

---

## [NPE using APM Agent 1.34.1](https://discuss.elastic.co/t/npe-using-apm-agent-1-34-1/317179)

<div class="topic-metadata">

**Author:** [@barath](https://discuss.elastic.co/u/barath)\
**Replies:** 19\
**Last updated:** [December 7, 2022, 12:55pm UTC](https://discuss.elastic.co/t/npe-using-apm-agent-1-34-1/317179 "2022-12-07T12:55:55Z")

</div>

The same error that was reported in NPE using APM Agent 1.33.0 still happens in Java agent 1.34.1. java.lang.NullPointerException at co.elastic.apm.agent.impl.transaction.Span.afterEnd(Span.java:289) at co.elastic.apm…

---

## [Fleet Server is unstable. Can't connect new hosts but status is 'healthy'](https://discuss.elastic.co/t/fleet-server-is-unstable-cant-connect-new-hosts-but-status-is-healthy/299009)

<div class="topic-metadata">

**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\
**Replies:** 17\
**Last updated:** [April 11, 2022, 12:34am UTC](https://discuss.elastic.co/t/fleet-server-is-unstable-cant-connect-new-hosts-but-status-is-healthy/299009 "2022-04-11T00:34:02Z")

</div>

Hello, since end of February I was not able to add new hosts to my fleet using my fleet server. Also I do not receive data from my Windows Domain Controller anymore for some reason. When I try to add another Windows Ho…

---

## [Elasticsearch will not start after installing 7.9.2](https://discuss.elastic.co/t/elasticsearch-will-not-start-after-installing-7-9-2/264877)

<div class="topic-metadata">

**Author:** [@mike\_wills](https://discuss.elastic.co/u/mike_wills)\
**Replies:** 29\
**Last updated:** [March 2, 2021, 7:35pm UTC](https://discuss.elastic.co/t/elasticsearch-will-not-start-after-installing-7-9-2/264877 "2021-03-02T19:35:04Z")

</div>

Elasticsearch will not start after we installed 7.9.2. When started it enters a failed state. I ran journalctl -xe it points to Unregistered Authentication Agent. But when I check the logs I see the following: at …

---

## [How to set the shards of Elasticsearch 5](https://discuss.elastic.co/t/how-to-set-the-shards-of-elasticsearch-5/96167)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 20\
**Last updated:** [August 11, 2017, 8:19am UTC](https://discuss.elastic.co/t/how-to-set-the-shards-of-elasticsearch-5/96167 "2017-08-11T08:19:35Z")

</div>

how to set the number of shards about elasticsearch 5.4.2. ie: 100 nodes ,one node have 6 disk to es .how to set the number fo es index shards. thank.s

---

## [File o/p plugin not working](https://discuss.elastic.co/t/file-o-p-plugin-not-working/100007)

<div class="topic-metadata">

**Author:** [@ashish235](https://discuss.elastic.co/u/ashish235)\
**Replies:** 15\
**Last updated:** [September 12, 2017, 6:21am UTC](https://discuss.elastic.co/t/file-o-p-plugin-not-working/100007 "2017-09-12T06:21:25Z")

</div>

Hi Team, Does anyone using file o/p plugin to just ship logs from remote location to a central location? ES needs a lot of storage so that's not a viable option for me, so I need to ship logs and store logs as files on…

---

## [Elasticsearch 5.1.1 remote reindex process aborts without any error](https://discuss.elastic.co/t/elasticsearch-5-1-1-remote-reindex-process-aborts-without-any-error/72222)

<div class="topic-metadata">

**Author:** [@hailima](https://discuss.elastic.co/u/hailima)\
**Replies:** 14\
**Last updated:** [January 24, 2017, 11:21pm UTC](https://discuss.elastic.co/t/elasticsearch-5-1-1-remote-reindex-process-aborts-without-any-error/72222 "2017-01-24T23:21:05Z")

</div>

Hi All, I migrate my index from ES 1.4.4 to 5.1.1 using "\_reindex" API. The reindex process always aborts without any errors before finishing all records. Here are details: 1) Create a new index with settings in 5.1.…

---

## [Fresh cluster all shards are unavailable](https://discuss.elastic.co/t/fresh-cluster-all-shards-are-unavailable/210216)

<div class="topic-metadata">

**Author:** [@dg\_hivebrite](https://discuss.elastic.co/u/dg_hivebrite)\
**Replies:** 9\
**Last updated:** [December 3, 2019, 2:34pm UTC](https://discuss.elastic.co/t/fresh-cluster-all-shards-are-unavailable/210216 "2019-12-03T14:34:55Z")

</div>

Hi, When my cluster is started, his status is in yellow: { "cluster\_name" : "datawarehouse", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 6, "number\_of\_data\_nodes" : 0, "active\_primary\_shards" :…

---

## [Cluster name not specified in java client and it is failing to communicate with cluster, no node available exceptio](https://discuss.elastic.co/t/cluster-name-not-specified-in-java-client-and-it-is-failing-to-communicate-with-cluster-no-node-available-exceptio/106868)

<div class="topic-metadata">

**Author:** [@basanagouda](https://discuss.elastic.co/u/basanagouda)\
**Replies:** 9\
**Last updated:** [November 8, 2017, 4:58pm UTC](https://discuss.elastic.co/t/cluster-name-not-specified-in-java-client-and-it-is-failing-to-communicate-with-cluster-no-node-available-exceptio/106868 "2017-11-08T16:58:58Z")

</div>

Hi, I am not setting any cluster name in elasticsearch java client. it use to work with ES1.x. In 5.x yml file i am specifying path.data=/../data/{clustername} \[path.data: /home/vagrant/elasticsearch-5.5.1/data/qa-elas…

---

## [Put mapping request returning acknowledged false](https://discuss.elastic.co/t/put-mapping-request-returning-acknowledged-false/3104)

<div class="topic-metadata">

**Author:** [@Samuel\_Doyle](https://discuss.elastic.co/u/Samuel_Doyle)\
**Replies:** 17\
**Last updated:** [July 19, 2010, 6:36pm UTC](https://discuss.elastic.co/t/put-mapping-request-returning-acknowledged-false/3104 "2010-07-19T18:36:20Z")

</div>

When sending a PutMappingRequest I used to receive back a true value for acknowledged. client.admin().indices().putMapping(new PutMappingRequest(indexName).source(value)).actionGet().acknowledged After my last up…

---

## [Installation does not bind to 9200](https://discuss.elastic.co/t/installation-does-not-bind-to-9200/101225)

<div class="topic-metadata">

**Author:** [@rhalbheer](https://discuss.elastic.co/u/rhalbheer)\
**Replies:** 10\
**Last updated:** [September 23, 2017, 11:56am UTC](https://discuss.elastic.co/t/installation-does-not-bind-to-9200/101225 "2017-09-23T11:56:21Z")

</div>

I am really sorry but I am completely lost. I spent more than a day now to get Elastiscsearch running on an RPI but failed miserably. Goal is to have the whole ELK stack there at the end. List item I installed a plain…

---

## [Nginx reverse proxy failing with csp error](https://discuss.elastic.co/t/nginx-reverse-proxy-failing-with-csp-error/229318)

<div class="topic-metadata">

**Author:** [@KenneyHe](https://discuss.elastic.co/u/KenneyHe)\
**Replies:** 11\
**Last updated:** [April 28, 2020, 10:01am UTC](https://discuss.elastic.co/t/nginx-reverse-proxy-failing-with-csp-error/229318 "2020-04-28T10:01:06Z")

</div>

Hi, Being a bit of a technocrat, I tried the latest 7.6.2 ES/Kibana releases and can't understand this error message after configuring nginx 1.15-alpine reverse proxy. Even after repeatedly restarting with kibana with …

---

## [Multiple pipelines: Failed to read pipelines yaml file](https://discuss.elastic.co/t/multiple-pipelines-failed-to-read-pipelines-yaml-file/210589)

<div class="topic-metadata">

**Author:** [@WalterLeff](https://discuss.elastic.co/u/WalterLeff)\
**Replies:** 11\
**Last updated:** [December 11, 2019, 11:00am UTC](https://discuss.elastic.co/t/multiple-pipelines-failed-to-read-pipelines-yaml-file/210589 "2019-12-11T11:00:25Z")

</div>

Hi, i've managed to run elastic search with kibana and logstash with JDBC mssql driver for ingesting data. Now i'm trying to run multiple pipelines but i keep getting an error. ELK : 7.4.0 version pipeline.yml : # L…

---

## [How to filter Data with Spaces in Logstash](https://discuss.elastic.co/t/how-to-filter-data-with-spaces-in-logstash/170939)

<div class="topic-metadata">

**Author:** [@samyo](https://discuss.elastic.co/u/samyo)\
**Replies:** 19\
**Last updated:** [March 7, 2019, 8:09am UTC](https://discuss.elastic.co/t/how-to-filter-data-with-spaces-in-logstash/170939 "2019-03-07T08:09:33Z")

</div>

Hello Folks, i need some Help here to read this Example Data in my Text editor with its Spaces in Logstash. Example Data in my Text editor as follows: Hello World Hello back Plea…

[Previous page](https://discuss.elastic.co/top.md?page=81&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=83&per_page=50&period=all)
