# Top

**URL:** https://discuss.elastic.co/top.md?page=838&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 839

---

## [GPU accelerated Machine learning](https://discuss.elastic.co/t/gpu-accelerated-machine-learning/246716)

<div class="topic-metadata">

**Author:** [@nsrushi](https://discuss.elastic.co/u/nsrushi)\
**Replies:** 2\
**Last updated:** [August 31, 2020, 5:58am UTC](https://discuss.elastic.co/t/gpu-accelerated-machine-learning/246716 "2020-08-31T05:58:14Z")

</div>

hi would like to know if GPU accelerated machine learning is supported on Xpack along with SIEM (threat hunting platform) ?

---

## [Bulk index - partial success](https://discuss.elastic.co/t/bulk-index-partial-success/100325)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 2\
**Last updated:** [September 13, 2017, 11:49am UTC](https://discuss.elastic.co/t/bulk-index-partial-success/100325 "2017-09-13T11:49:06Z")

</div>

When can I expect to get partial success when indexing a bulk? Meaning, some documents are indexed and some are not. I know one reason to get a document rejected in a bulk: duplicate ID. Are there more reasons to get t…

---

## [SAML AD ADFS yaml settings, troubleshooting and role mapping notes and insight (Solved)](https://discuss.elastic.co/t/saml-ad-adfs-yaml-settings-troubleshooting-and-role-mapping-notes-and-insight-solved/169859)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 2\
**Last updated:** [February 25, 2019, 4:11pm UTC](https://discuss.elastic.co/t/saml-ad-adfs-yaml-settings-troubleshooting-and-role-mapping-notes-and-insight-solved/169859 "2019-02-25T16:11:31Z")

</div>

Elasticsearch 6.5.4 Linux RPM First, appreciate the help of those who have posted useful troubleshooting methods/info in the forums and to Cyberyllium (cyberyllium.io) and Thundercat Tech (thundercattech.com) for the e…

---

## [\_reindex and \_update\_by\_query equivalent apis in java transport client?](https://discuss.elastic.co/t/-reindex-and--update-by-query-equivalent-apis-in-java-transport-client/50615)

<div class="topic-metadata">

**Author:** [@nikhilbhide](https://discuss.elastic.co/u/nikhilbhide)\
**Replies:** 2\
**Last updated:** [May 22, 2016, 6:40pm UTC](https://discuss.elastic.co/t/-reindex-and--update-by-query-equivalent-apis-in-java-transport-client/50615 "2016-05-22T18:40:21Z")

</div>

Hi, I am using ES 2.3 version and using \_reindex api; however, I could not find corresponding api in java transport client. Also, I could not find any documentation regarding it. For time being, to use the api I am using…

---

## [How to add the refresh interval in Kibana Iframe Dashboard](https://discuss.elastic.co/t/how-to-add-the-refresh-interval-in-kibana-iframe-dashboard/120827)

<div class="topic-metadata">

**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\
**Replies:** 1\
**Last updated:** [February 21, 2018, 6:46pm UTC](https://discuss.elastic.co/t/how-to-add-the-refresh-interval-in-kibana-iframe-dashboard/120827 "2018-02-21T18:46:47Z")

</div>

Hi All, We are embedding the i-frame dashboard url into our web application. We need to add the auto refresh interval in that iFrame Url. Can we add the refresh interval manually in Kibana Iframe dashboard and can we c…

---

## [Permissions for backup user with X-Pack](https://discuss.elastic.co/t/permissions-for-backup-user-with-x-pack/88057)

<div class="topic-metadata">

**Author:** [@lherrera](https://discuss.elastic.co/u/lherrera)\
**Replies:** 1\
**Last updated:** [June 7, 2017, 7:45pm UTC](https://discuss.elastic.co/t/permissions-for-backup-user-with-x-pack/88057 "2017-06-07T19:45:05Z")

</div>

Hi there, I have setup an ELK cluster and i am using x-pack for authentication. I am now setting up daily backups using snapshots and it's all working ok. The problem I have is that it seems that my backup user needs…

---

## [Does it make sense to pipeline few Logstashs one after another?](https://discuss.elastic.co/t/does-it-make-sense-to-pipeline-few-logstashs-one-after-another/45503)

<div class="topic-metadata">

**Author:** [@mrohad](https://discuss.elastic.co/u/mrohad)\
**Replies:** 7\
**Last updated:** [March 26, 2016, 6:03pm UTC](https://discuss.elastic.co/t/does-it-make-sense-to-pipeline-few-logstashs-one-after-another/45503 "2016-03-26T18:03:35Z")

</div>

We would like to read data using our own input plug-in. The data that we receive should go through the log4j-input plug-in. We were thinking to have two Logstashs running in a sequence. the output of the first logstash w…

---

## [Create X Axis percentage chart of total](https://discuss.elastic.co/t/create-x-axis-percentage-chart-of-total/208373)

<div class="topic-metadata">

**Author:** [@markus\_buchner](https://discuss.elastic.co/u/markus_buchner)\
**Replies:** 3\
**Last updated:** [November 22, 2019, 2:51pm UTC](https://discuss.elastic.co/t/create-x-axis-percentage-chart-of-total/208373 "2019-11-22T14:51:24Z")

</div>

I am struggling getting used to kibana charting - or its not possible at all. I have a really simple index structure like: RequestId: 1234 Duration(in seconds): 1,3 What I want (have to) visualize is a percentage buck…

---

## [Automatic APM agent cannot connect to apm server](https://discuss.elastic.co/t/automatic-apm-agent-cannot-connect-to-apm-server/268723)

<div class="topic-metadata">

**Author:** [@Kevin\_Christopher](https://discuss.elastic.co/u/Kevin_Christopher)\
**Replies:** 5\
**Last updated:** [April 5, 2021, 5:52am UTC](https://discuss.elastic.co/t/automatic-apm-agent-cannot-connect-to-apm-server/268723 "2021-04-05T05:52:02Z")

</div>

Kibana version: 7.12 Elasticsearch version: 7.12 APM Server version: 7.12 APM Agent language and version: Java 1.22 Browser version: Chrome 86 Original install method (e.g. download page, yum, deb, from source, etc…

---

## [Parse RFC3339Nano Date to @timestamp field](https://discuss.elastic.co/t/parse-rfc3339nano-date-to-timestamp-field/98978)

<div class="topic-metadata">

**Author:** [@rucciva](https://discuss.elastic.co/u/rucciva)\
**Replies:** 5\
**Last updated:** [September 3, 2017, 6:37pm UTC](https://discuss.elastic.co/t/parse-rfc3339nano-date-to-timestamp-field/98978 "2017-09-03T18:37:07Z")

</div>

How do you parse time that is formatted using golang’s RFC3339Nano into @timestamp field?

---

## [Prioritising logs Using Kafka & Logstash](https://discuss.elastic.co/t/prioritising-logs-using-kafka-logstash/29057)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 5\
**Last updated:** [September 12, 2015, 6:48pm UTC](https://discuss.elastic.co/t/prioritising-logs-using-kafka-logstash/29057 "2015-09-12T18:48:39Z")

</div>

We have a deployment in which different types of logs are getting pushed to Kafka. Then logstash is pulling these logs from Kafka and pushing it to ES. We want to prioritise the way logs getting indexed in ES. For exampl…

---

## [ELK Stack - not creating indexes by day](https://discuss.elastic.co/t/elk-stack-not-creating-indexes-by-day/191051)

<div class="topic-metadata">

**Author:** [@MColeman](https://discuss.elastic.co/u/MColeman)\
**Replies:** 2\
**Last updated:** [July 25, 2019, 3:25pm UTC](https://discuss.elastic.co/t/elk-stack-not-creating-indexes-by-day/191051 "2019-07-25T15:25:27Z")

</div>

Hi! I'm not sure if this should be here in this category or over in Logstash, but here goes. I've brought up a new 7.2 ELK stack cluster and have started ingesting data. When I started Logstash, it created the logstash-…

---

## [Missing document in Elasticsearch when using BulkProcessor](https://discuss.elastic.co/t/missing-document-in-elasticsearch-when-using-bulkprocessor/52015)

<div class="topic-metadata">

**Author:** [@spireofdreams](https://discuss.elastic.co/u/spireofdreams)\
**Replies:** 2\
**Last updated:** [June 9, 2016, 12:40am UTC](https://discuss.elastic.co/t/missing-document-in-elasticsearch-when-using-bulkprocessor/52015 "2016-06-09T00:40:35Z")

</div>

I'm using a \[java\] kafka-producer to push data to kafka-topic x and a \[java\] high level consumer/bulkProcessor to read from topic x and index data to elasticsearch. The producer pushes 10 docs each time. When I start my …

---

## [\[Control Relevance\] How to boost doc contains specific keywords?](https://discuss.elastic.co/t/control-relevance-how-to-boost-doc-contains-specific-keywords/28478)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 2\
**Last updated:** [September 3, 2015, 6:39am UTC](https://discuss.elastic.co/t/control-relevance-how-to-boost-doc-contains-specific-keywords/28478 "2015-09-03T06:39:19Z")

</div>

Let me explain my question with a real example. I have two docs: POST /support/docs/1 { "title": "product 1", "description": "...get support for your device, how to videos, troubleshooting. Find out the warrant…

---

## [Kibana metric aggregation - sum distinct](https://discuss.elastic.co/t/kibana-metric-aggregation-sum-distinct/173962)

<div class="topic-metadata">

**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\
**Replies:** 6\
**Last updated:** [March 28, 2019, 3:40pm UTC](https://discuss.elastic.co/t/kibana-metric-aggregation-sum-distinct/173962 "2019-03-28T15:40:31Z")

</div>

Hello, I want to use Elasticsearch and my idea is to access my SQL database and with a query join all the data that I have in my database. I solve this problem and now I am trying to do some visualizations. My data: x…

---

## [Design Help: Searching Users and Friends](https://discuss.elastic.co/t/design-help-searching-users-and-friends/9979)

<div class="topic-metadata">

**Author:** [@Drew\_Kutcharian](https://discuss.elastic.co/u/Drew_Kutcharian)\
**Replies:** 6\
**Last updated:** [December 10, 2012, 4:08am UTC](https://discuss.elastic.co/t/design-help-searching-users-and-friends/9979 "2012-12-10T04:08:27Z")

</div>

Hi Guys, In our app, we have users and users can have friends (think Facebook, relationship is bi-directional). I would like to be able to: 1- Have a site-wide search for users by name or username 2- Allow each …

---

## [Kibana 6.3 build error](https://discuss.elastic.co/t/kibana-6-3-build-error/144817)

<div class="topic-metadata">

**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\
**Replies:** 8\
**Last updated:** [August 20, 2018, 8:19am UTC](https://discuss.elastic.co/t/kibana-6-3-build-error/144817 "2018-08-20T08:19:00Z")

</div>

im trying build kibana version 6.3 and see below errors. yarn run v1.8.0 $ gulp build \[11:48:39\] Using gulpfile ~/Documents/dev/kibana/x-pack/gulpfile.js \[11:48:39\] Starting 'clean-test'... \[11:48:39\] Starting 'report'.…

---

## [Error connecting to Kibana: fail to get the Kibana version](https://discuss.elastic.co/t/error-connecting-to-kibana-fail-to-get-the-kibana-version/241747)

<div class="topic-metadata">

**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\
**Replies:** 0\
**Last updated:** [July 18, 2020, 3:48pm UTC](https://discuss.elastic.co/t/error-connecting-to-kibana-fail-to-get-the-kibana-version/241747 "2020-07-18T15:48:03Z")

</div>

I have elasticsearch and kibana setup in my kubernetes cluster using ECK. I'm also trying to get filebeat setup. Im having trouble with getting filebeat to connect to kibana. in the filebeat logs i can see the following …

---

## [Logstash and Lumberjack giving Error](https://discuss.elastic.co/t/logstash-and-lumberjack-giving-error/268044)

<div class="topic-metadata">

**Author:** [@jhanvi](https://discuss.elastic.co/u/jhanvi)\
**Replies:** 0\
**Last updated:** [March 23, 2021, 5:59am UTC](https://discuss.elastic.co/t/logstash-and-lumberjack-giving-error/268044 "2021-03-23T05:59:52Z")

</div>

Hello, I am facing this error quite often and it happens randomly too. My logs seem to be flowing fine and then suddenly it stops and I get the below error. \[ERROR\]\[logstash.outputs.lumberjack\]\[main\] All hosts unavaila…

---

## [Any way to save raw log data prior to converting and indexing](https://discuss.elastic.co/t/any-way-to-save-raw-log-data-prior-to-converting-and-indexing/191611)

<div class="topic-metadata">

**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 9:57am UTC](https://discuss.elastic.co/t/any-way-to-save-raw-log-data-prior-to-converting-and-indexing/191611 "2019-07-22T09:57:49Z")

</div>

Hello Everyone, i have a very specific use case that was requested of me to look into and after days of research came up empty. Namely what was requested is an option to have log data output-ed and kept in its original f…

---

## [Vega access multiple buckets group bar chart](https://discuss.elastic.co/t/vega-access-multiple-buckets-group-bar-chart/185413)

<div class="topic-metadata">

**Author:** [@TEJASWI\_CHUNDURI](https://discuss.elastic.co/u/TEJASWI_CHUNDURI)\
**Replies:** 4\
**Last updated:** [June 20, 2019, 2:43pm UTC](https://discuss.elastic.co/t/vega-access-multiple-buckets-group-bar-chart/185413 "2019-06-20T14:43:50Z")

</div>

Hi please find the below snippet and needs to access the parameters url(yaxis) , cvscore (x axis) and fversion ( group by color label ) in group bar chart Request: { $schema: https://vega.github.io/schema/vega/v5.jso…

---

## [When using logstash to index data from MySQL to ElasticSearch,only the first row is being displayed](https://discuss.elastic.co/t/when-using-logstash-to-index-data-from-mysql-to-elasticsearch-only-the-first-row-is-being-displayed/40086)

<div class="topic-metadata">

**Author:** [@Sreevatsa\_Vadiraj](https://discuss.elastic.co/u/Sreevatsa_Vadiraj)\
**Replies:** 4\
**Last updated:** [January 26, 2016, 9:50am UTC](https://discuss.elastic.co/t/when-using-logstash-to-index-data-from-mysql-to-elasticsearch-only-the-first-row-is-being-displayed/40086 "2016-01-26T09:50:02Z")

</div>

This is my logstash configuration file: input { jdbc { jdbc\_driver\_library =\> "/home/vatsa/logstash/mysql-connector-java-5.1.38-bin.jar" jdbc\_driver\_class =\> "com.mysql.jdbc.Driver" jd…

---

## [Kibana 5 not creating index pattern](https://discuss.elastic.co/t/kibana-5-not-creating-index-pattern/77172)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 3\
**Last updated:** [March 2, 2017, 7:25pm UTC](https://discuss.elastic.co/t/kibana-5-not-creating-index-pattern/77172 "2017-03-02T19:25:12Z")

</div>

Kibana 5.2 Elastic 5.2 I have multiple indices that all start with suri- and then are appended by a date: green open suri-flow-2017.03.02 mMQbv7WfRSW\_VDQCLd955g 5 0 185102 0 109mb 109mb green open suri-htt…

---

## [How to enable distributed tracing (Traceparent)?](https://discuss.elastic.co/t/how-to-enable-distributed-tracing-traceparent/298712)

<div class="topic-metadata">

**Author:** [@urbanalho](https://discuss.elastic.co/u/urbanalho)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 4:02pm UTC](https://discuss.elastic.co/t/how-to-enable-distributed-tracing-traceparent/298712 "2022-03-03T16:02:34Z")

</div>

Hi! Im working for a big organisation where we barely even know what application talks to what application and in what order. Its many times not in a logical flow, more of a spiderweb. And now we want to enable distrib…

---

## [Parse date format with timezone CST](https://discuss.elastic.co/t/parse-date-format-with-timezone-cst/182118)

<div class="topic-metadata">

**Author:** [@phelim13](https://discuss.elastic.co/u/phelim13)\
**Replies:** 5\
**Last updated:** [May 28, 2019, 8:47am UTC](https://discuss.elastic.co/t/parse-date-format-with-timezone-cst/182118 "2019-05-28T08:47:26Z")

</div>

hello, in my case, my log insert logTime like 19-5-21 11:00:00:000 CST I parse date with format yy-M-d HH:mm:ss:SSS zzz everything is looks good but when I query this date field, I found that timezone is wrong becau…

---

## [Fleet server is Unhealthy](https://discuss.elastic.co/t/fleet-server-is-unhealthy/337194)

<div class="topic-metadata">

**Author:** [@David\_Arshakyan](https://discuss.elastic.co/u/David_Arshakyan)\
**Replies:** 7\
**Last updated:** [July 3, 2023, 2:08pm UTC](https://discuss.elastic.co/t/fleet-server-is-unhealthy/337194 "2023-07-03T14:08:20Z")

</div>

Hi All, I have a problem to setup Fleet server. When I add Fleet Server on my hosts, I notice that the node goes Offline. I checked Settings, Logs on Kibana, Logs on host, and didn't find anything strange. You can find …

---

## [Caused by: java.lang.NullPointerException: Cannot invoke \\"org.elasticsearch.index.analysis.AnalyzerComponents.getCharFilters()\\" because \\"components\\" is null](https://discuss.elastic.co/t/caused-by-java-lang-nullpointerexception-cannot-invoke-org-elasticsearch-index-analysis-analyzercomponents-getcharfilters-because-components-is-null/251824)

<div class="topic-metadata">

**Author:** [@jdoucy](https://discuss.elastic.co/u/jdoucy)\
**Replies:** 1\
**Last updated:** [October 14, 2020, 12:25pm UTC](https://discuss.elastic.co/t/caused-by-java-lang-nullpointerexception-cannot-invoke-org-elasticsearch-index-analysis-analyzercomponents-getcharfilters-because-components-is-null/251824 "2020-10-14T12:25:05Z")

</div>

Hi there, I get an issue with \_reload\_search\_analyzers I simply try to reload a synonym file but it doesn't reload it, no error, just the new file is not taken into account. So I tried the old way, closing and re-open…

---

## [Im Getting error Unrecognized Exception ccs\_minimize\_roundtrips](https://discuss.elastic.co/t/im-getting-error-unrecognized-exception-ccs-minimize-roundtrips/189359)

<div class="topic-metadata">

**Author:** [@Deepa](https://discuss.elastic.co/u/Deepa)\
**Replies:** 1\
**Last updated:** [July 12, 2019, 9:06am UTC](https://discuss.elastic.co/t/im-getting-error-unrecognized-exception-ccs-minimize-roundtrips/189359 "2019-07-12T09:06:14Z")

</div>

org.elasticsearch.ElasticsearchStatusException: Elasticsearch exception \[type=illegal\_argument\_exception, reason=request \[/\_search\] contains unrecognized parameter: \[ccs\_minimize\_roundtrips\]\] at org.elasticsearch.rest.B…

---

## [Filebeat stopped working post upgrade](https://discuss.elastic.co/t/filebeat-stopped-working-post-upgrade/88542)

<div class="topic-metadata">

**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\
**Replies:** 7\
**Last updated:** [June 12, 2017, 2:18pm UTC](https://discuss.elastic.co/t/filebeat-stopped-working-post-upgrade/88542 "2017-06-12T14:18:12Z")

</div>

So i migrated filebeat to 5.x from 1.x now am not able to send the logs to logstash. Filebeat was working perfectly fine with previous version. Now am getting the error INFO File is inactive: /opt/IBM/WebSphere/AppSer…

---

## [Analyzed vs not\_analyzed](https://discuss.elastic.co/t/analyzed-vs-not-analyzed/59072)

<div class="topic-metadata">

**Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\
**Replies:** 1\
**Last updated:** [August 27, 2016, 5:16am UTC](https://discuss.elastic.co/t/analyzed-vs-not-analyzed/59072 "2016-08-27T05:16:29Z")

</div>

By default, I have a field that is set to not\_analyzed. The field contains a string but when using Kibana to do generic searches I have to type the below to find "something" in the string: fieldLog:(\*something\*) I'm t…

---

## [Handling unmounted data volume](https://discuss.elastic.co/t/handling-unmounted-data-volume/260478)

<div class="topic-metadata">

**Author:** [@a06ced31bae02498a46d](https://discuss.elastic.co/u/a06ced31bae02498a46d)\
**Replies:** 1\
**Last updated:** [January 7, 2021, 5:59pm UTC](https://discuss.elastic.co/t/handling-unmounted-data-volume/260478 "2021-01-07T17:59:32Z")

</div>

Hello! We are facing an issue with the store volume hardware on a given data node which results in full production outage. While the problem is clearly lies in the system/hardware level there might be some Elasticsearch…

---

## [Kibana Vega-lite data unlimited size](https://discuss.elastic.co/t/kibana-vega-lite-data-unlimited-size/183415)

<div class="topic-metadata">

**Author:** [@AditiKhalatkar](https://discuss.elastic.co/u/AditiKhalatkar)\
**Replies:** 4\
**Last updated:** [May 30, 2019, 4:04pm UTC](https://discuss.elastic.co/t/kibana-vega-lite-data-unlimited-size/183415 "2019-05-30T16:04:09Z")

</div>

Hi, I am using an index to fetch data into vega-lite visualization object. My query is how can I fetch the data when it crosses 10000 docs. Is there a way to do that? May be use Scroll API. Not so sure upon that. Kindly…

---

## [Issue with Elasticsearch performance](https://discuss.elastic.co/t/issue-with-elasticsearch-performance/131535)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 4\
**Last updated:** [May 12, 2018, 3:07pm UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-performance/131535 "2018-05-12T15:07:38Z")

</div>

Hi, When I try to query data from ES using Kibana, I am getting Gateway Timeout. I am using Nginx as a reverse proxy(Nginx, Kibana, ES coordinating node are installed on the same server and I have 3 Data nodes with 10 d…

---

## [\[ERROR\]\[logstash.agent\] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"and\\", \\"or\\", \\"xor\\", \\"nand\\",](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-t-r-n-and-or-xor-nand/322599)

<div class="topic-metadata">

**Author:** [@SP003](https://discuss.elastic.co/u/SP003)\
**Replies:** 6\
**Last updated:** [January 11, 2023, 3:50pm UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-t-r-n-and-or-xor-nand/322599 "2023-01-11T15:50:28Z")

</div>

Hello experts, I am setting up filebeat, logstash for my log monitoring work. (Linux system) Getting below error on filebeat. --\> systemctl status filebeat - getting error --\> systemctl status logstash - Running fine…

---

## [Unbalanced shards](https://discuss.elastic.co/t/unbalanced-shards/298520)

<div class="topic-metadata">

**Author:** [@Sashi](https://discuss.elastic.co/u/Sashi)\
**Replies:** 6\
**Last updated:** [March 7, 2022, 2:17pm UTC](https://discuss.elastic.co/t/unbalanced-shards/298520 "2022-03-07T14:17:40Z")

</div>

Hello, I have a cluster of over 25 nodes and the indices are balanced on all the nodes except for one node. Let's call the node as problematic node. The problematic node has less indices and shards when compared to othe…

---

## [Running filebeat as a binary, got log ERR on invalid config file](https://discuss.elastic.co/t/running-filebeat-as-a-binary-got-log-err-on-invalid-config-file/92737)

<div class="topic-metadata">

**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\
**Replies:** 6\
**Last updated:** [July 21, 2017, 12:27am UTC](https://discuss.elastic.co/t/running-filebeat-as-a-binary-got-log-err-on-invalid-config-file/92737 "2017-07-21T00:27:26Z")

</div>

Hello, I am trying to package and run filebeat as a self-contained binary, as opposed to running it as system service: "sudo /etc/init.d/filebeat start" I supplied various path parameters in command line when running …

---

## [Codec json is not working](https://discuss.elastic.co/t/codec-json-is-not-working/73637)

<div class="topic-metadata">

**Author:** [@jmcjmcjmc](https://discuss.elastic.co/u/jmcjmcjmc)\
**Replies:** 6\
**Last updated:** [February 2, 2017, 8:00pm UTC](https://discuss.elastic.co/t/codec-json-is-not-working/73637 "2017-02-02T20:00:57Z")

</div>

I am trying to read data from Kafka (fed by beats) and send to ES. Using codec =\> "json" does not work at all. input { kafka { bootstrap\_servers =\> "10.100.177.100:9999" topics …

---

## [setFilter in Java API](https://discuss.elastic.co/t/setfilter-in-java-api/15763)

<div class="topic-metadata">

**Author:** [@Ryan\_Chazen](https://discuss.elastic.co/u/Ryan_Chazen)\
**Replies:** 6\
**Last updated:** [April 3, 2014, 7:43am UTC](https://discuss.elastic.co/t/setfilter-in-java-api/15763 "2014-04-03T07:43:15Z")

</div>

Hey I updated to 1.0.0, but I'm getting a strange issue: As from http://www.elasticsearch.org/guide/en/elasticsearch/client/java-api/current/search.html I tried to run SearchResponse response = client.prepar…

---

## [How to ignore 404 error in dependencies?](https://discuss.elastic.co/t/how-to-ignore-404-error-in-dependencies/325465)

<div class="topic-metadata">

**Author:** [@leandro.silva](https://discuss.elastic.co/u/leandro.silva)\
**Replies:** 4\
**Last updated:** [February 27, 2023, 3:57pm UTC](https://discuss.elastic.co/t/how-to-ignore-404-error-in-dependencies/325465 "2023-02-27T15:57:39Z")

</div>

Hi! We are using elastic apm in a micro-service environment and we have some 404 response from internal APIs that are totally acceptable, like verifying if a resource exists, but those are reported as erros in the Depen…

---

## [Can a Filter be Applied with "OR" Logic?](https://discuss.elastic.co/t/can-a-filter-be-applied-with-or-logic/266959)

<div class="topic-metadata">

**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\
**Replies:** 4\
**Last updated:** [March 23, 2021, 2:37pm UTC](https://discuss.elastic.co/t/can-a-filter-be-applied-with-or-logic/266959 "2021-03-23T14:37:52Z")

</div>

I'm trying to mimic the functionality of another search engine. The functionality I want is that when a user selects a filter it first limits a search, as expected. However, I want to still return all possible aggregatio…

---

## [FIlebeat Input Type](https://discuss.elastic.co/t/filebeat-input-type/146674)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 3\
**Last updated:** [August 30, 2018, 11:13am UTC](https://discuss.elastic.co/t/filebeat-input-type/146674 "2018-08-30T11:13:57Z")

</div>

Could be a stupid question, can we manipulate the input type in the filebeat.yml to be whatever string we want? I want to uniquely identify logs that come from this server (without having to create a separate index for …

---

## [Multiple Logstash output with different SSL signing authorities, certificates and keys](https://discuss.elastic.co/t/multiple-logstash-output-with-different-ssl-signing-authorities-certificates-and-keys/91398)

<div class="topic-metadata">

**Author:** [@Platypus](https://discuss.elastic.co/u/Platypus)\
**Replies:** 3\
**Last updated:** [July 3, 2017, 1:45pm UTC](https://discuss.elastic.co/t/multiple-logstash-output-with-different-ssl-signing-authorities-certificates-and-keys/91398 "2017-07-03T13:45:14Z")

</div>

Hello, I need Filebeat to send the same logs to two different logstash endpoints with differents signing authorities, certificates and keys. I have test them separetly and the connexion with both endpoints works fine.…

---

## [java.lang.IllegalStateException: Future got interrupted](https://discuss.elastic.co/t/java-lang-illegalstateexception-future-got-interrupted/146709)

<div class="topic-metadata">

**Author:** [@dr01](https://discuss.elastic.co/u/dr01)\
**Replies:** 0\
**Last updated:** [August 30, 2018, 1:31pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-future-got-interrupted/146709 "2018-08-30T13:31:06Z")

</div>

After a restart, our Elasticsearch cluster is showing this in the logs: \[2018-08-30T14:13:15,111\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[myelastic01\] collector \[cluster\_stats\] failed to collect data java.lang.Illega…

---

## [Calculate elapsed time in Kibana?](https://discuss.elastic.co/t/calculate-elapsed-time-in-kibana/316575)

<div class="topic-metadata">

**Author:** [@TXBigDawg1836](https://discuss.elastic.co/u/TXBigDawg1836)\
**Replies:** 2\
**Last updated:** [November 13, 2022, 10:18am UTC](https://discuss.elastic.co/t/calculate-elapsed-time-in-kibana/316575 "2022-11-13T10:18:15Z")

</div>

ELK newbie here. Is it possible in Kibana visualization (ie. Table) to calculate the elapsed time from the timestamp and current time? Looking to populate a field in the table to show the elapsed time since the last ti…

---

## [Time range not working](https://discuss.elastic.co/t/time-range-not-working/115957)

<div class="topic-metadata">

**Author:** [@MFlop](https://discuss.elastic.co/u/MFlop)\
**Replies:** 2\
**Last updated:** [January 18, 2018, 6:18pm UTC](https://discuss.elastic.co/t/time-range-not-working/115957 "2018-01-18T18:18:53Z")

</div>

Hi, I created an index and inserted documents on Elasticsearch 6.1. I have a mapping for the "timestamp" field and it has a "date" type. Dates are showed using the correct date format in the "Discover" tab (I insert ep…

---

## [TLS certs issue on Elastice search](https://discuss.elastic.co/t/tls-certs-issue-on-elastice-search/114529)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 1\
**Last updated:** [January 8, 2018, 9:51pm UTC](https://discuss.elastic.co/t/tls-certs-issue-on-elastice-search/114529 "2018-01-08T21:51:49Z")

</div>

Hi , I have generated certificates for TLS on Elastic search cluster , after enabling below configuration , getting exceptions , \[2018-01-08T14:28:48,784\]\[WARN \]\[o.e.x.s.t.n.SecurityNetty4Transport\] \[ ES-Node-node01\] …

---

## [Filebeat, Cisco ASA and ECS fields](https://discuss.elastic.co/t/filebeat-cisco-asa-and-ecs-fields/238381)

<div class="topic-metadata">

**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\
**Replies:** 5\
**Last updated:** [July 16, 2020, 7:40pm UTC](https://discuss.elastic.co/t/filebeat-cisco-asa-and-ecs-fields/238381 "2020-07-16T19:40:38Z")

</div>

Filebeat 7.7, Cisco ASA logs ASA syslog -\> logstash for filtering -\> filebeat (as original raw syslog) -\> cisco module/asa -\> logstash -\> ES According to the recommendations from Elastic, the firewall should be the "ob…

---

## [Highlighter trim a field, why?](https://discuss.elastic.co/t/highlighter-trim-a-field-why/36779)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 5\
**Last updated:** [December 9, 2015, 9:11pm UTC](https://discuss.elastic.co/t/highlighter-trim-a-field-why/36779 "2015-12-09T21:11:55Z")

</div>

I use default mapping: PUT /tom/test/1 { "title" : "tom", "url" : "http://www.fetedelascience.fr/", "url2" : "http://www.fetedelascience.fr/3" } POST /tom/\_search { "query": { "match": { "title": "tom" } …

---

## [Should the bootstrap.password in Keystore be added on all nodes?](https://discuss.elastic.co/t/should-the-bootstrap-password-in-keystore-be-added-on-all-nodes/112469)

<div class="topic-metadata">

**Author:** [@ivten](https://discuss.elastic.co/u/ivten)\
**Replies:** 2\
**Last updated:** [December 20, 2017, 8:32am UTC](https://discuss.elastic.co/t/should-the-bootstrap-password-in-keystore-be-added-on-all-nodes/112469 "2017-12-20T08:32:08Z")

</div>

Stupid question but It is not clear from the documentation of Elasticsearch 6. Should bootstrap.password be added to the Keystore on only one of the nodes, only the master nodes or all of the nodes (or maybe the nodes f…

---

## [Version conflict when using update\_by\_query](https://discuss.elastic.co/t/version-conflict-when-using-update-by-query/98706)

<div class="topic-metadata">

**Author:** [@Kornelia\_Watson](https://discuss.elastic.co/u/Kornelia_Watson)\
**Replies:** 2\
**Last updated:** [September 1, 2017, 7:07am UTC](https://discuss.elastic.co/t/version-conflict-when-using-update-by-query/98706 "2017-09-01T07:07:47Z")

</div>

Hi all, I'm trying to use update\_by\_query to update a field in each document but I keep failing due to a version conflict. I don't understand why I am getting version conflicts as I know nothing else is running against …

[Previous page](https://discuss.elastic.co/top.md?page=837&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=839&per_page=50&period=all)
