# Top

**URL:** https://discuss.elastic.co/top.md?page=847&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 848

---

## [Kibana service is not running it's waiting with “loading elastic”](https://discuss.elastic.co/t/kibana-service-is-not-running-its-waiting-with-loading-elastic/269550)

<div class="topic-metadata">

**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\
**Replies:** 8\
**Last updated:** [April 8, 2021, 12:04pm UTC](https://discuss.elastic.co/t/kibana-service-is-not-running-its-waiting-with-loading-elastic/269550 "2021-04-08T12:04:16Z")

</div>

When I try to run bin/kibana. I get the below message. When I check the localhost:5601. Kibana is waiting "loading elastic" message. How can i solve this problem ? log \[16:25:00.767\] \[info\]\[plugins-service\] Plugi…

---

## [Help converting Watcher Alert to Painless](https://discuss.elastic.co/t/help-converting-watcher-alert-to-painless/67139)

<div class="topic-metadata">

**Author:** [@Sam\_Barham](https://discuss.elastic.co/u/Sam_Barham)\
**Replies:** 3\
**Last updated:** [December 1, 2016, 5:49pm UTC](https://discuss.elastic.co/t/help-converting-watcher-alert-to-painless/67139 "2016-12-01T17:49:18Z")

</div>

I'm having real trouble working out how to convert my Watcher alerts to something that will run in xpack, specifically around converting to Painless. For example, I have an alert that should put a message on Slack if th…

---

## [SyntaxError: Unexpected token { in JSON at position 2955 - AWS Lambda NodeJS module of APM](https://discuss.elastic.co/t/syntaxerror-unexpected-token-in-json-at-position-2955-aws-lambda-nodejs-module-of-apm/316525)

<div class="topic-metadata">

**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\
**Replies:** 2\
**Last updated:** [October 14, 2022, 6:21am UTC](https://discuss.elastic.co/t/syntaxerror-unexpected-token-in-json-at-position-2955-aws-lambda-nodejs-module-of-apm/316525 "2022-10-14T06:21:13Z")

</div>

Hello, We are trying to implement the AWS Lambda agent for APM as per below documentation: Added below variables: Defined outbound rules for security groups under 'VPC' section over port 8200 However after firing…

---

## [Parsing json objects with dynamic key](https://discuss.elastic.co/t/parsing-json-objects-with-dynamic-key/132459)

<div class="topic-metadata">

**Author:** [@nmeaux](https://discuss.elastic.co/u/nmeaux)\
**Replies:** 2\
**Last updated:** [May 23, 2018, 8:12pm UTC](https://discuss.elastic.co/t/parsing-json-objects-with-dynamic-key/132459 "2018-05-23T20:12:32Z")

</div>

Hello, I am trying to parse a nested json which have dynamic keys. I am just able for now to extract data from the first json object, i dont understand what is going wrong in my ruby filter. Also in the output the who…

---

## [This version of Kibana requires ElasticSearch ^2.2.1](https://discuss.elastic.co/t/this-version-of-kibana-requires-elasticsearch-2-2-1/83889)

<div class="topic-metadata">

**Author:** [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\
**Replies:** 2\
**Last updated:** [April 28, 2017, 10:32am UTC](https://discuss.elastic.co/t/this-version-of-kibana-requires-elasticsearch-2-2-1/83889 "2017-04-28T10:32:03Z")

</div>

Hi everyone, i'm trying to set up ElasticSearch with Kibi. I have ElasticSearch 5.3.1 but when i start UI Kibi i found this error: This version of Kibana requires Elasticsearch ^2.4.0 on all nodes. I found the follow…

---

## [Elastic's plain to support Lucene Load FST offHeap features](https://discuss.elastic.co/t/elastics-plain-to-support-lucene-load-fst-offheap-features/231679)

<div class="topic-metadata">

**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\
**Replies:** 7\
**Last updated:** [May 8, 2020, 9:44am UTC](https://discuss.elastic.co/t/elastics-plain-to-support-lucene-load-fst-offheap-features/231679 "2020-05-08T09:44:33Z")

</div>

Related to this: https://issues.apache.org/jira/browse/LUCENE-8635

---

## [No meaningful logs from bulk write operation failure](https://discuss.elastic.co/t/no-meaningful-logs-from-bulk-write-operation-failure/137662)

<div class="topic-metadata">

**Author:** [@rkalluri](https://discuss.elastic.co/u/rkalluri)\
**Replies:** 1\
**Last updated:** [July 2, 2018, 4:22pm UTC](https://discuss.elastic.co/t/no-meaningful-logs-from-bulk-write-operation-failure/137662 "2018-07-02T16:22:43Z")

</div>

I am trying to index some geo\_point data using apache spark, the operation fails with out giving me any information on what is wrong and how I can fix it. When I index the field as string everything checks out. Any clues…

---

## [Add\_field is not working when trying to add interger value](https://discuss.elastic.co/t/add-field-is-not-working-when-trying-to-add-interger-value/42376)

<div class="topic-metadata">

**Author:** [@Sergey\_Grigorov](https://discuss.elastic.co/u/Sergey_Grigorov)\
**Replies:** 1\
**Last updated:** [February 22, 2016, 11:38am UTC](https://discuss.elastic.co/t/add-field-is-not-working-when-trying-to-add-interger-value/42376 "2016-02-22T11:38:57Z")

</div>

I'm trying to add\_field of integer type right after "match". But the output shows that this field is a string not integer as required. Here is the part of my filter configuration: ... filter { if \[type\] == "xferlog"…

---

## [Mutate and statsd not work in my logstash](https://discuss.elastic.co/t/mutate-and-statsd-not-work-in-my-logstash/34185)

<div class="topic-metadata">

**Author:** [@Chengcheng\_Pei](https://discuss.elastic.co/u/Chengcheng_Pei)\
**Replies:** 7\
**Last updated:** [November 9, 2015, 7:59pm UTC](https://discuss.elastic.co/t/mutate-and-statsd-not-work-in-my-logstash/34185 "2015-11-09T19:59:52Z")

</div>

New to logstash. Assume messages in kafka look like: {'test message':\[{'key':'key-1234'}\]} {"test message":\[{"key":"key-1234"}\]} ... Try to increase the statsd key:test-1234. There are two problems: (1) when i…

---

## [Kibana4 scripted field array access](https://discuss.elastic.co/t/kibana4-scripted-field-array-access/2275)

<div class="topic-metadata">

**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\
**Replies:** 1\
**Last updated:** [June 17, 2015, 5:08am UTC](https://discuss.elastic.co/t/kibana4-scripted-field-array-access/2275 "2015-06-17T05:08:21Z")

</div>

Hello, i have the following field: "load\_average": \[ 2.57, 2.2, 2.18 \], this is the JSON. I now want to use scripted fields to generate separate fields so I can visualize the loads separ…

---

## [Metricbeat does not get \*\_state metrics from kube-state-metrics](https://discuss.elastic.co/t/metricbeat-does-not-get-state-metrics-from-kube-state-metrics/128828)

<div class="topic-metadata">

**Author:** [@ralfeus](https://discuss.elastic.co/u/ralfeus)\
**Replies:** 5\
**Last updated:** [April 20, 2018, 2:10pm UTC](https://discuss.elastic.co/t/metricbeat-does-not-get-state-metrics-from-kube-state-metrics/128828 "2018-04-20T14:10:45Z")

</div>

Hi I've deployed Metricbeat to my OpenShift environment along with kube-state-metrics as it's supposed to be used to get pod and container level metrics (such as CPU, RAM, IO etc). In documentation I read the kubernetes …

---

## [Issue with sending logs in secure Kafka](https://discuss.elastic.co/t/issue-with-sending-logs-in-secure-kafka/242707)

<div class="topic-metadata">

**Author:** [@svasilyev](https://discuss.elastic.co/u/svasilyev)\
**Replies:** 4\
**Last updated:** [July 28, 2020, 8:45am UTC](https://discuss.elastic.co/t/issue-with-sending-logs-in-secure-kafka/242707 "2020-07-28T08:45:35Z")

</div>

my problem looks the same https://discuss.elastic.co/t/issue-with-sending-to-kafka-0-10-2-1-over-tls/111252 but my version work however my logs are written for some time (different on several servers) and then they sto…

---

## [Aggregate filter logstash not working when the input is elasticsearch](https://discuss.elastic.co/t/aggregate-filter-logstash-not-working-when-the-input-is-elasticsearch/173016)

<div class="topic-metadata">

**Author:** [@imaad](https://discuss.elastic.co/u/imaad)\
**Replies:** 0\
**Last updated:** [March 19, 2019, 4:44pm UTC](https://discuss.elastic.co/t/aggregate-filter-logstash-not-working-when-the-input-is-elasticsearch/173016 "2019-03-19T16:44:59Z")

</div>

Hello, I am wondering why I don't have the same result when I use elasticsearch (instead of a file) as an input in my logstash configuration. This my log file : {"@timestamp":"2019-03-11T17:12:39.929+01:00","@version"…

---

## [Logstash Jdbc input Plugin configuration with SSL cert information](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-configuration-with-ssl-cert-information/215639)

<div class="topic-metadata">

**Author:** [@mullan](https://discuss.elastic.co/u/mullan)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 6:25am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-configuration-with-ssl-cert-information/215639 "2020-01-23T06:25:28Z")

</div>

Hi, Iam new to Logstash. My project requires to configure logstash with jdbc input plugin.Below is the conf file I had used. input { jdbc { jdbc\_driver\_library =\> "lib\\jars\\mongodb\_unityjdbc\_full.jar" jdbc\_driver\_cl…

---

## [Using external document\_id](https://discuss.elastic.co/t/using-external-document-id/221200)

<div class="topic-metadata">

**Author:** [@jwinth](https://discuss.elastic.co/u/jwinth)\
**Replies:** 8\
**Last updated:** [March 5, 2020, 2:16pm UTC](https://discuss.elastic.co/t/using-external-document-id/221200 "2020-03-05T14:16:17Z")

</div>

Hi, Whenever i try to assign the document\_id with some attribute from the documents, it creates just one new document on ElasticSearch with the document\_id as the name of the attribute i'm trying to use. What i want is …

---

## [Exec input filter in logstash not capturing entire output from python script](https://discuss.elastic.co/t/exec-input-filter-in-logstash-not-capturing-entire-output-from-python-script/89626)

<div class="topic-metadata">

**Author:** [@Jaspreet\_Singh](https://discuss.elastic.co/u/Jaspreet_Singh)\
**Replies:** 3\
**Last updated:** [June 15, 2017, 8:58pm UTC](https://discuss.elastic.co/t/exec-input-filter-in-logstash-not-capturing-entire-output-from-python-script/89626 "2017-06-15T20:58:27Z")

</div>

Here is what my configuration looks like ... input { exec { command =\> 'c:\\Python27\\python C:\\J\\logstash\\pythonscripts\\test.py' interval =\> 10000 } } output { stdout { codec =\> rubydebug } } When I execute…

---

## [Winlogbeat.event\_logs not working properly](https://discuss.elastic.co/t/winlogbeat-event-logs-not-working-properly/136871)

<div class="topic-metadata">

**Author:** [@Astarandel](https://discuss.elastic.co/u/Astarandel)\
**Replies:** 5\
**Last updated:** [June 22, 2018, 12:02pm UTC](https://discuss.elastic.co/t/winlogbeat-event-logs-not-working-properly/136871 "2018-06-22T12:02:15Z")

</div>

Hello guys, I'm testing a setup atm where Winlogbeat sends Windows events logs to Graylog server. I wanted to limit the number of events Winlogbeat is collecting, so I tried to use winlogbeat.event\_logs. Here is my wi…

---

## [Wildcard search not working](https://discuss.elastic.co/t/wildcard-search-not-working/48225)

<div class="topic-metadata">

**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Replies:** 5\
**Last updated:** [April 28, 2016, 2:24pm UTC](https://discuss.elastic.co/t/wildcard-search-not-working/48225 "2016-04-28T14:24:01Z")

</div>

In Kibana, When i type "\*.jpg", its return the values. But this one is not working, shows empty result --\> uripath:"\*.jpg". I need to get this work. Since I need to match some patterns like domainname:"www.example.co…

---

## [Elasticsearch register backup repository with different UID and GID](https://discuss.elastic.co/t/elasticsearch-register-backup-repository-with-different-uid-and-gid/277212)

<div class="topic-metadata">

**Author:** [@KA3AXCTAH](https://discuss.elastic.co/u/KA3AXCTAH)\
**Replies:** 6\
**Last updated:** [July 2, 2021, 8:18am UTC](https://discuss.elastic.co/t/elasticsearch-register-backup-repository-with-different-uid-and-gid/277212 "2021-07-02T08:18:18Z")

</div>

I have 2 Elasticsearch clusters they are backed up to the same NFS share, but in different directories and the elasticsearch user on these VMs has different UIDs and GIDs For example, for the corn project, the elasticsea…

---

## [High CPU Usage on XDCR Transfer to ElasticSearch nodes](https://discuss.elastic.co/t/high-cpu-usage-on-xdcr-transfer-to-elasticsearch-nodes/14718)

<div class="topic-metadata">

**Author:** [@Corey\_Nolet](https://discuss.elastic.co/u/Corey_Nolet)\
**Replies:** 6\
**Last updated:** [December 6, 2013, 7:07am UTC](https://discuss.elastic.co/t/high-cpu-usage-on-xdcr-transfer-to-elasticsearch-nodes/14718 "2013-12-06T07:07:07Z")

</div>

I've got a 6 node HDFS cluster. Each node has 8 cores and 32gb of ram. On the same nodes, I'm running Couchbase 2.2 and Elasticsearch 0.90.5 with the Couchbase transport plugin 1.1.0. I have Couchbase doing real-time…

---

## [Поиск ключевых слов в запросе](https://discuss.elastic.co/t/topic/28374)

<div class="topic-metadata">

**Author:** [@twister](https://discuss.elastic.co/u/twister)\
**Replies:** 4\
**Last updated:** [August 31, 2015, 7:30pm UTC](https://discuss.elastic.co/t/topic/28374 "2015-08-31T19:30:16Z")

</div>

Здравствуйте. Имеется простой индекс с ключевыми словами, в моем случае - это имена, следующего вида: id, name 1 John Lord 2 John Lee Hooker 3 Ritchie Blackmore Всего имен порядка 100 тысяч. Задача заключается в том…

---

## [How to force a forcemerge?](https://discuss.elastic.co/t/how-to-force-a-forcemerge/305090)

<div class="topic-metadata">

**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\
**Replies:** 7\
**Last updated:** [June 1, 2022, 8:35am UTC](https://discuss.elastic.co/t/how-to-force-a-forcemerge/305090 "2022-06-01T08:35:42Z")

</div>

How do I force a forcemerge to run for shards with only one segment? I changed index.codec on my index to BEST\_COMPRESSION and I want my segments use it. But when I run forcemerge, it immediately returns. Guessing beca…

---

## [ElasticSearch. Select by date range in array of dates and sort by matching dates](https://discuss.elastic.co/t/elasticsearch-select-by-date-range-in-array-of-dates-and-sort-by-matching-dates/249509)

<div class="topic-metadata">

**Author:** [@AHeavyObject](https://discuss.elastic.co/u/AHeavyObject)\
**Replies:** 1\
**Last updated:** [September 22, 2020, 1:38pm UTC](https://discuss.elastic.co/t/elasticsearch-select-by-date-range-in-array-of-dates-and-sort-by-matching-dates/249509 "2020-09-22T13:38:36Z")

</div>

Every document has several dates. I want to select documents withing a date range (any of dates fits the range - the document matches). This part works. And I want to sort the selected document by date, but sorting inc…

---

## [Docker-compose with multi-node setup does not detect the second node](https://discuss.elastic.co/t/docker-compose-with-multi-node-setup-does-not-detect-the-second-node/173685)

<div class="topic-metadata">

**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\
**Replies:** 1\
**Last updated:** [March 25, 2019, 9:04am UTC](https://discuss.elastic.co/t/docker-compose-with-multi-node-setup-does-not-detect-the-second-node/173685 "2019-03-25T09:04:36Z")

</div>

I'm attempting to run two ES nodes from a single server. I'm trying to get an understanding of how replica sets etc work - specific to it helping out in terms of searching. Currently I have some data on my first ES inst…

---

## [Timestamp off(delay) 5 hours](https://discuss.elastic.co/t/timestamp-off-delay-5-hours/156081)

<div class="topic-metadata">

**Author:** [@netvmdb](https://discuss.elastic.co/u/netvmdb)\
**Replies:** 7\
**Last updated:** [November 9, 2018, 11:03pm UTC](https://discuss.elastic.co/t/timestamp-off-delay-5-hours/156081 "2018-11-09T23:03:24Z")

</div>

Running version 6.2.4. Multiple logstash and each for different log type, like messages, secure... Index for messages log is off 5 hours. Everything else is correct. All logstash.conf files are similar. Here is the filte…

---

## [Installing Sense - plugin not found error](https://discuss.elastic.co/t/installing-sense-plugin-not-found-error/82330)

<div class="topic-metadata">

**Author:** [@jobyjohny](https://discuss.elastic.co/u/jobyjohny)\
**Replies:** 1\
**Last updated:** [April 15, 2017, 1:56pm UTC](https://discuss.elastic.co/t/installing-sense-plugin-not-found-error/82330 "2017-04-15T13:56:03Z")

</div>

I am following the link @https://www.elastic.co/guide/en/sense/current/installing.html to install sense I have setup a emr cluster and installed elasticsearch & Kibana seperatley and updated yml file with internal ip's …

---

## [Free Text Input Control](https://discuss.elastic.co/t/free-text-input-control/290757)

<div class="topic-metadata">

**Author:** [@kshepitzki1](https://discuss.elastic.co/u/kshepitzki1)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 8:26pm UTC](https://discuss.elastic.co/t/free-text-input-control/290757 "2021-12-02T20:26:44Z")

</div>

Input Controls are amazing. Would be nice to complement the Drop Down and Range controls with Free Text controls that are bound to specific fields like the other controls. Is it possible?

---

## [Filebeat setup without Kibana?](https://discuss.elastic.co/t/filebeat-setup-without-kibana/271958)

<div class="topic-metadata">

**Author:** [@davidwhthomas](https://discuss.elastic.co/u/davidwhthomas)\
**Replies:** 2\
**Last updated:** [May 3, 2021, 2:31pm UTC](https://discuss.elastic.co/t/filebeat-setup-without-kibana/271958 "2021-05-03T14:31:31Z")

</div>

Working on a setup where log data is stored in elasticsearch using filebeat. However, we don't need Kibana (lovely although it is) for this application. The data is queried separately via an API. I read: Configure Kiba…

---

## [Cannot update cluster settings](https://discuss.elastic.co/t/cannot-update-cluster-settings/121515)

<div class="topic-metadata">

**Author:** [@seyhmus](https://discuss.elastic.co/u/seyhmus)\
**Replies:** 3\
**Last updated:** [February 27, 2018, 1:26pm UTC](https://discuss.elastic.co/t/cannot-update-cluster-settings/121515 "2018-02-27T13:26:45Z")

</div>

Hi all, I've upgraded my cluster from 5.6 to 6.2.2 and using x-pack tls only. After upgrade cluster status is yellow and i am trying to enable routing shard allocation. PUT \_cluster/settings { "transient": { "clu…

---

## [Running grok against an HTTP source](https://discuss.elastic.co/t/running-grok-against-an-http-source/60608)

<div class="topic-metadata">

**Author:** [@amit\_oren](https://discuss.elastic.co/u/amit_oren)\
**Replies:** 1\
**Last updated:** [September 16, 2016, 5:41am UTC](https://discuss.elastic.co/t/running-grok-against-an-http-source/60608 "2016-09-16T05:41:07Z")

</div>

Hi, I'm trying to recieve HTTP GET requests via the HTTP input and then run grok and a ruby script on the request\_uri in order to extract the paramters and their values. My agent configuration is as follows: input { …

---

## [Multiline cuts off character](https://discuss.elastic.co/t/multiline-cuts-off-character/132468)

<div class="topic-metadata">

**Author:** [@manuelk](https://discuss.elastic.co/u/manuelk)\
**Replies:** 8\
**Last updated:** [May 30, 2018, 2:06pm UTC](https://discuss.elastic.co/t/multiline-cuts-off-character/132468 "2018-05-30T14:06:38Z")

</div>

Hello, we´ve a case where Multiline seems to cut off the first character of a string within Filebeat 6.2.4. Mulitline setting: multiline.pattern: '^(\*.JOB)|Cooldown' multiline.negate: true multiline.match: after M…

---

## [Allocation/re-routing of unassigned shards](https://discuss.elastic.co/t/allocation-re-routing-of-unassigned-shards/107466)

<div class="topic-metadata">

**Author:** [@Nikolay\_Petrov](https://discuss.elastic.co/u/Nikolay_Petrov)\
**Replies:** 2\
**Last updated:** [November 14, 2017, 11:29am UTC](https://discuss.elastic.co/t/allocation-re-routing-of-unassigned-shards/107466 "2017-11-14T11:29:30Z")

</div>

Hi, could you please help to solve ongoing issue with unassigned shards? The story of these sad example is that cluster with one node goes down(terminated),disk with a elastic data attached to another system with the s…

---

## [マスタノードの変更について](https://discuss.elastic.co/t/topic/45303)

<div class="topic-metadata">

**Author:** [@higashi](https://discuss.elastic.co/u/higashi)\
**Replies:** 2\
**Last updated:** [March 25, 2016, 7:31am UTC](https://discuss.elastic.co/t/topic/45303 "2016-03-25T07:31:11Z")

</div>

初歩的な質問になるかと思いますが、宜しくお願い致します。 ElasticSearchのプロセスの上げ直し以外で、マスタノードを変更する方法はありますか？ マスタノードを変更したい場合は、現マスタノードのESプロセスを停止して、 他のノードがマスタ選出されるのを待つしか無いように思うのですが、 動的に変更できるようなAPIがあればご教示ください。 マスタのノード障害で他ノードがマスタになった後に 元ノードが復旧した場合の戻しを、動…

---

## [Error registering plugin for logstash output jdbc](https://discuss.elastic.co/t/error-registering-plugin-for-logstash-output-jdbc/172170)

<div class="topic-metadata">

**Author:** [@elkha](https://discuss.elastic.co/u/elkha)\
**Replies:** 4\
**Last updated:** [March 15, 2019, 1:51pm UTC](https://discuss.elastic.co/t/error-registering-plugin-for-logstash-output-jdbc/172170 "2019-03-15T13:51:15Z")

</div>

Hi , I am trying to pull data from file and send the result to JDBC oracle , i installed the plugin logstash-output-jdbc succefully but when i run the conf file i am getting the following error : \[2019-03-13T15:02:3…

---

## [Logstash returns 0 (success) on JDBC error](https://discuss.elastic.co/t/logstash-returns-0-success-on-jdbc-error/86658)

<div class="topic-metadata">

**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\
**Replies:** 4\
**Last updated:** [May 30, 2017, 12:30pm UTC](https://discuss.elastic.co/t/logstash-returns-0-success-on-jdbc-error/86658 "2017-05-30T12:30:56Z")

</div>

Hi, We use logstash 5.2.2 on CentOS 7 to extract data from an Oracle database to put into Elasticsearch (5.2.2). I've noticed that if there is a failure (username/password etc.) on the Oracle end logstash still returns…

---

## [Master node keeps crashing](https://discuss.elastic.co/t/master-node-keeps-crashing/18007)

<div class="topic-metadata">

**Author:** [@Gaurav\_Arora](https://discuss.elastic.co/u/Gaurav_Arora)\
**Replies:** 4\
**Last updated:** [June 10, 2014, 9:59am UTC](https://discuss.elastic.co/t/master-node-keeps-crashing/18007 "2014-06-10T09:59:12Z")

</div>

I'm having a very odd problem with one of my elasticsearch clusters. The master node on the cluster crashes randomly. The cluster is running on 3 different ec2 instances. My cluster configuration is: 3 nodes (1 m…

---

## [Cluster Health degraded overnight with no apparent reason](https://discuss.elastic.co/t/cluster-health-degraded-overnight-with-no-apparent-reason/11853)

<div class="topic-metadata">

**Author:** [@Curt\_Kohler](https://discuss.elastic.co/u/Curt_Kohler)\
**Replies:** 4\
**Last updated:** [May 8, 2013, 2:25am UTC](https://discuss.elastic.co/t/cluster-health-degraded-overnight-with-no-apparent-reason/11853 "2013-05-08T02:25:49Z")

</div>

This morning I arrived to find our test ES cluster in poor health... Some background on our cluster... Single ES index running on a single AWS Hi IO instance (60 GB RAM, 2TB SSD storage, 16 virtual cores). I…

---

## [Unable to connect to Master node from Data node in ElasticSearch](https://discuss.elastic.co/t/unable-to-connect-to-master-node-from-data-node-in-elasticsearch/188098)

<div class="topic-metadata">

**Author:** [@manojkavali](https://discuss.elastic.co/u/manojkavali)\
**Replies:** 5\
**Last updated:** [June 28, 2019, 7:55pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-master-node-from-data-node-in-elasticsearch/188098 "2019-06-28T19:55:13Z")

</div>

Hi, I am unable to connect to master node from one of my data node. Below is error I see from elasticsearch.log \[2019-06-28T17:06:58,964\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[data1\] master not discov…

---

## [Docker image vulnerabilies](https://discuss.elastic.co/t/docker-image-vulnerabilies/184472)

<div class="topic-metadata">

**Author:** [@Yohan\_al](https://discuss.elastic.co/u/Yohan_al)\
**Replies:** 5\
**Last updated:** [June 6, 2019, 6:22pm UTC](https://discuss.elastic.co/t/docker-image-vulnerabilies/184472 "2019-06-06T18:22:17Z")

</div>

Hi, We've seen on docker hub somes criticals vulnerabilities on the latest elasticsearch docker image. CVE-2014-6277 CVE-2014-6278 CVE-2019-9924 CVE-2018-15686 CVE-2018-14618 CVE-2019-8457 CVE-2019-9169 ... how…

---

## [Can't run logstash on Windows](https://discuss.elastic.co/t/cant-run-logstash-on-windows/154333)

<div class="topic-metadata">

**Author:** [@joubeh](https://discuss.elastic.co/u/joubeh)\
**Replies:** 5\
**Last updated:** [October 30, 2018, 7:21am UTC](https://discuss.elastic.co/t/cant-run-logstash-on-windows/154333 "2018-10-30T07:21:28Z")

</div>

Hello, what I'm facing that I've downloaded logstash.zip, I've unzipped it to C drive I've Elastic search and Kibana running on my machine but when I'm executing the following command on cmd C:\\logstash-6.4.2\\bin\>logs…

---

## [About search thread pool‘s queue length](https://discuss.elastic.co/t/about-search-thread-pool-s-queue-length/25761)

<div class="topic-metadata">

**Author:** [@shinyke](https://discuss.elastic.co/u/shinyke)\
**Replies:** 3\
**Last updated:** [July 20, 2015, 1:55am UTC](https://discuss.elastic.co/t/about-search-thread-pool-s-queue-length/25761 "2015-07-20T01:55:35Z")

</div>

Hi, I have a 2 nodes cluster and doing stress testing now. There are some appearances I can not explain and ask for help here. When doing search testing. The search thread pool's queue length perform different between …

---

## [How to setup Kibana under HA mode for 2 machine setup](https://discuss.elastic.co/t/how-to-setup-kibana-under-ha-mode-for-2-machine-setup/52189)

<div class="topic-metadata">

**Author:** [@Ankit\_Singhal](https://discuss.elastic.co/u/Ankit_Singhal)\
**Replies:** 3\
**Last updated:** [June 8, 2016, 1:47pm UTC](https://discuss.elastic.co/t/how-to-setup-kibana-under-ha-mode-for-2-machine-setup/52189 "2016-06-08T13:47:39Z")

</div>

We have a two machine setup, in which we will be installing whole ELK stack. The elastic search nodes will be working as a cluster. My problem is, since Kibana can link only to a single Elastic node and not cluster, so i…

---

## [Objective C client for ElasticSearch ( iphone, ipad etc.)](https://discuss.elastic.co/t/objective-c-client-for-elasticsearch-iphone-ipad-etc/7334)

<div class="topic-metadata">

**Author:** [@pulkitsinghal](https://discuss.elastic.co/u/pulkitsinghal)\
**Replies:** 3\
**Last updated:** [April 15, 2012, 4:36pm UTC](https://discuss.elastic.co/t/objective-c-client-for-elasticsearch-iphone-ipad-etc/7334 "2012-04-15T16:36:19Z")

</div>

Is there a client implementation for ElasticSearch written for Objective-C (iPhone) users out there? I'm trying to roll my own but I don't want to reinvent the wheel.

---

## [Palo Alto Networks - Logstash \> Elastic \> Kibana](https://discuss.elastic.co/t/palo-alto-networks-logstash-elastic-kibana/335380)

<div class="topic-metadata">

**Author:** [@thunt](https://discuss.elastic.co/u/thunt)\
**Replies:** 7\
**Last updated:** [June 6, 2023, 9:16pm UTC](https://discuss.elastic.co/t/palo-alto-networks-logstash-elastic-kibana/335380 "2023-06-06T21:16:01Z")

</div>

Hello Everyone - Hoping I have a simple solution. Testing out Elastic Stack with Palo Alto syslogs, and running into issues with GeoIP's and combining the lon/lat to use Maps in Kibana. Not sure what else needs to be d…

---

## [Handling missing fields in output filters](https://discuss.elastic.co/t/handling-missing-fields-in-output-filters/45004)

<div class="topic-metadata">

**Author:** [@eroussel](https://discuss.elastic.co/u/eroussel)\
**Replies:** 0\
**Last updated:** [March 21, 2016, 2:38pm UTC](https://discuss.elastic.co/t/handling-missing-fields-in-output-filters/45004 "2016-03-21T14:38:36Z")

</div>

Hello, What are my options to handle missing fields in output filters? Specifically, if in my log message I have a bunch of fields that may or may not exist depending on the case, do I have to do something like: i…

---

## [Kibana 4.5.1 Fatal Error - unhandled courier request error: Request Timeout after 30000ms](https://discuss.elastic.co/t/kibana-4-5-1-fatal-error-unhandled-courier-request-error-request-timeout-after-30000ms/54834)

<div class="topic-metadata">

**Author:** [@dhy3ives](https://discuss.elastic.co/u/dhy3ives)\
**Replies:** 2\
**Last updated:** [July 7, 2016, 9:17pm UTC](https://discuss.elastic.co/t/kibana-4-5-1-fatal-error-unhandled-courier-request-error-request-timeout-after-30000ms/54834 "2016-07-07T21:17:17Z")

</div>

hi I using elasticsearch 2.3.3 + Kibana 4.5.1 After start elasticsearch and kibana, go to browser to open kibana and receive this error bellow. I try put in kibana.yml one great value to timeout elasticsearch but the…

---

## [( Kibana visualize ) A value greater than "Max axis extents" is not displayed with on Line chart](https://discuss.elastic.co/t/kibana-visualize-a-value-greater-than-max-axis-extents-is-not-displayed-with-on-line-chart/269202)

<div class="topic-metadata">

**Author:** [@kash203](https://discuss.elastic.co/u/kash203)\
**Replies:** 5\
**Last updated:** [April 21, 2021, 2:18pm UTC](https://discuss.elastic.co/t/kibana-visualize-a-value-greater-than-max-axis-extents-is-not-displayed-with-on-line-chart/269202 "2021-04-21T14:18:16Z")

</div>

When we update version of kibana from 7.11 to 7.12, a value greater than "Max axis extents(Y-axes)" is not displayed on Line chart of visualize. On prior to 7.11, When the value of the data exceeded "Max axis extents"…

---

## [Logstash elasticsearch output and IP change](https://discuss.elastic.co/t/logstash-elasticsearch-output-and-ip-change/26422)

<div class="topic-metadata">

**Author:** [@fhoubart](https://discuss.elastic.co/u/fhoubart)\
**Replies:** 1\
**Last updated:** [July 28, 2015, 3:59pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-and-ip-change/26422 "2015-07-28T15:59:44Z")

</div>

Hi, I'm facing a strage case where after changing the IP address of my ElasticSearch server, logstash keep trying to connect to the old IP. The output configuration is: output { elasticsearch { host =\> "192.168…

---

## [Extracting the last word of an event/line (Grok)](https://discuss.elastic.co/t/extracting-the-last-word-of-an-event-line-grok/214774)

<div class="topic-metadata">

**Author:** [@nino](https://discuss.elastic.co/u/nino)\
**Replies:** 4\
**Last updated:** [January 13, 2020, 3:04pm UTC](https://discuss.elastic.co/t/extracting-the-last-word-of-an-event-line-grok/214774 "2020-01-13T15:04:11Z")

</div>

Hello all, i am looking for a Grok pattern to retrieve the last word a matching line with literal. input (file content) THISLINE 1,011.53EUR 12,815.50EUR 2,940.17 100,011.53EUR filter grok{ match =\> { …

---

## [Connect Elasticsearch Kerberos realm using java Rest Client](https://discuss.elastic.co/t/connect-elasticsearch-kerberos-realm-using-java-rest-client/182438)

<div class="topic-metadata">

**Author:** [@dhrchatt](https://discuss.elastic.co/u/dhrchatt)\
**Replies:** 4\
**Last updated:** [June 11, 2019, 12:00am UTC](https://discuss.elastic.co/t/connect-elasticsearch-kerberos-realm-using-java-rest-client/182438 "2019-06-11T00:00:52Z")

</div>

Can you give code sample/snippets of how java Rest Client can connect to an Elasticsearch cluster having configured Kerberos Realm authentication.

[Previous page](https://discuss.elastic.co/top.md?page=846&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=848&per_page=50&period=all)
