# Top **URL:** https://discuss.elastic.co/top.md?page=855&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 856 --- ## [Error when searching in Discover tab](https://discuss.elastic.co/t/error-when-searching-in-discover-tab/97312)
**Author:** [@mrc](https://discuss.elastic.co/u/mrc)\ **Replies:** 5\ **Last updated:** [August 18, 2017, 6:23pm UTC](https://discuss.elastic.co/t/error-when-searching-in-discover-tab/97312 "2017-08-18T18:23:39Z")
Hi, We are on ElasticStack 5.5.1 and I have started getting below error when searching for information in Discover Tab Discover:\[parse\_exception\] request body or source parameter is required. OS: Windows 2012 R2 RAM … --- ## [Getting"Timeout" error while making kibana to work with SearchGuard](https://discuss.elastic.co/t/getting-timeout-error-while-making-kibana-to-work-with-searchguard/36844)
**Author:** [@balubollam](https://discuss.elastic.co/u/balubollam)\ **Replies:** 5\ **Last updated:** [December 24, 2015, 1:10pm UTC](https://discuss.elastic.co/t/getting-timeout-error-while-making-kibana-to-work-with-searchguard/36844 "2015-12-24T13:10:33Z")
Hi Everyone I Have Implemented “search-guard” Elasticsearch --\> First i have created a “SearchGuard” Index \*Then I have Installed and Configured it in logging.yml and Elasticsearch.yml \*In elasticsear… --- ## [No results in .raw fields](https://discuss.elastic.co/t/no-results-in-raw-fields/36193)
**Author:** [@ayasha88](https://discuss.elastic.co/u/ayasha88)\ **Replies:** 5\ **Last updated:** [December 9, 2015, 2:36pm UTC](https://discuss.elastic.co/t/no-results-in-raw-fields/36193 "2015-12-09T14:36:17Z")
Hi I can not see any results in my raw fields.. This is my index template: { "log-2015.12.02": { "aliases": {}, "mappings": { "\_default\_": { "\_all": { "enabled": true, … --- ## [No matching indices found: No indices match pattern "filebeat-\*](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-filebeat/142383)
**Author:** [@soufiane\_adn](https://discuss.elastic.co/u/soufiane_adn)\ **Replies:** 1\ **Last updated:** [July 31, 2018, 7:22pm UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-filebeat/142383 "2018-07-31T19:22:01Z")
hello i have a problem with filebeat while starting kibana "No matching indices found: No indices match pattern "filebeat-\*" i followed all your suggestions but no results if someone can help me thanks . metricbeat works… --- ## [Logstash Kafka Output How to specify the Kafka Partition](https://discuss.elastic.co/t/logstash-kafka-output-how-to-specify-the-kafka-partition/114759)
**Author:** [@ajstark123](https://discuss.elastic.co/u/ajstark123)\ **Replies:** 1\ **Last updated:** [January 10, 2018, 2:44pm UTC](https://discuss.elastic.co/t/logstash-kafka-output-how-to-specify-the-kafka-partition/114759 "2018-01-10T14:44:51Z")
We have a filebeat sending logs to logstash 1. Logstash 1 writes the logs to Kafka. Logstash 2 read the logs from kafka and writes the logs to elastic. This pipeline is work we have logs going into elastic. The issu… --- ## [Is Marvel available for Elasticsearch 5](https://discuss.elastic.co/t/is-marvel-available-for-elasticsearch-5/65751)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 1\ **Last updated:** [November 11, 2016, 5:52am UTC](https://discuss.elastic.co/t/is-marvel-available-for-elasticsearch-5/65751 "2016-11-11T05:52:45Z")
I am not founding anything to install marvel in 5. Can anyone guide me to install marvel under 5 --- ## [Expanding the mapping adds field definitions to the mapping, but "acknowledged" is false](https://discuss.elastic.co/t/expanding-the-mapping-adds-field-definitions-to-the-mapping-but-acknowledged-is-false/3168)
**Author:** [@Tomislav\_Poljak](https://discuss.elastic.co/u/Tomislav_Poljak)\ **Replies:** 1\ **Last updated:** [July 29, 2010, 12:26pm UTC](https://discuss.elastic.co/t/expanding-the-mapping-adds-field-definitions-to-the-mapping-but-acknowledged-is-false/3168 "2010-07-29T12:26:05Z")
Hi, when trying to expand mapping by adding a new field definition, mapping gets updated (I get update\_mapping in ES console) and I see new props when retrieving mapping definition, but mapping update results in resp… --- ## [Version mismatch between Elasticsearch and Logstash, beats](https://discuss.elastic.co/t/version-mismatch-between-elasticsearch-and-logstash-beats/257982)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 4\ **Last updated:** [December 8, 2020, 1:53pm UTC](https://discuss.elastic.co/t/version-mismatch-between-elasticsearch-and-logstash-beats/257982 "2020-12-08T13:53:23Z")
Hi, We have AWS Elasticsearch service with version 7.4 We want to make it centralized Elasticsearch. We have one standalone ELK stack (version: 7.6.2) with filebeat, metricbeat configured. We are planning to point th… --- ## [ResizeObserver loop completed with undefined notifications](https://discuss.elastic.co/t/resizeobserver-loop-completed-with-undefined-notifications/202461)
**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\ **Replies:** 4\ **Last updated:** [October 11, 2019, 7:38pm UTC](https://discuss.elastic.co/t/resizeobserver-loop-completed-with-undefined-notifications/202461 "2019-10-11T19:38:03Z")
During searching in Discovery section of Kibana I periodically get the next Error What could be the reason of it and how to get rid of it? --- ## [Painless Cannot cast from \[java.time.LocalDateTime\] to \[double\]](https://discuss.elastic.co/t/painless-cannot-cast-from-java-time-localdatetime-to-double/198776)
**Author:** [@BrunoSdeMenezes](https://discuss.elastic.co/u/BrunoSdeMenezes)\ **Replies:** 4\ **Last updated:** [September 12, 2019, 7:42pm UTC](https://discuss.elastic.co/t/painless-cannot-cast-from-java-time-localdatetime-to-double/198776 "2019-09-12T19:42:12Z")
Hello all, I'm trying to create a scripted field that joins two fields into one. If any of fields is null, it returns the minimal LocalDateTime. The preview runs everything right, but when I try to order in the discove… --- ## [Issue with installing elasticsearch in windows 8.1](https://discuss.elastic.co/t/issue-with-installing-elasticsearch-in-windows-8-1/55160)
**Author:** [@Mehran](https://discuss.elastic.co/u/Mehran)\ **Replies:** 4\ **Last updated:** [July 12, 2016, 5:56am UTC](https://discuss.elastic.co/t/issue-with-installing-elasticsearch-in-windows-8-1/55160 "2016-07-12T05:56:15Z")
I'm running Windows 8.1 on my laptop and I tried to install elastic search but I'm getting the following error : \\Java\\jdk1.7.0\_45\\bin\\java.exe was unexpected at this time. after this error appeard I installed oracle jd… --- ## [Syslog input filling disk](https://discuss.elastic.co/t/syslog-input-filling-disk/50286)
**Author:** [@ironbeast](https://discuss.elastic.co/u/ironbeast)\ **Replies:** 4\ **Last updated:** [May 18, 2016, 5:57am UTC](https://discuss.elastic.co/t/syslog-input-filling-disk/50286 "2016-05-18T05:57:58Z")
Hi All, I have possible a dumb question... :-). We have 4 logstash servers running and are configured to receive syslog messages. But, the catch is that apparently logstash doesn't send the logs directly (parsed) to el… --- ## [SocketTimeoutException: null](https://discuss.elastic.co/t/sockettimeoutexception-null/188433)
**Author:** [@Christopher\_Glantsch](https://discuss.elastic.co/u/Christopher_Glantsch)\ **Replies:** 3\ **Last updated:** [July 2, 2019, 7:14am UTC](https://discuss.elastic.co/t/sockettimeoutexception-null/188433 "2019-07-02T07:14:12Z")
I am having a cluster on elastic.co and I have there basically 5 indexes. 1 of them has many write operations ( like 100 a minute ), where some of them are also bulk inserts. the other indexes are mainly there for readi… --- ## [Filebeat error when trying to send logs from filebeat to logstash](https://discuss.elastic.co/t/filebeat-error-when-trying-to-send-logs-from-filebeat-to-logstash/132992)
**Author:** [@remo](https://discuss.elastic.co/u/remo)\ **Replies:** 3\ **Last updated:** [May 24, 2018, 5:27am UTC](https://discuss.elastic.co/t/filebeat-error-when-trying-to-send-logs-from-filebeat-to-logstash/132992 "2018-05-24T05:27:06Z")
I am getting this error when I am trying to send logs from filebeat to logstash. Failed to connect: dial tcp 127.0.0.1:5044: connectex: No connection could be made because the target machine actively refused it. Please… --- ## [How to set APM Configuration outside appsettings?](https://discuss.elastic.co/t/how-to-set-apm-configuration-outside-appsettings/272167)
**Author:** [@KARAOGLU](https://discuss.elastic.co/u/KARAOGLU)\ **Replies:** 6\ **Last updated:** [May 5, 2021, 1:01pm UTC](https://discuss.elastic.co/t/how-to-set-apm-configuration-outside-appsettings/272167 "2021-05-05T13:01:00Z")
My application is running in test environment. I see that it throws apm logs, but it does not work in production environment. I think the reason is from the configuration in appsettings.json by default, briefly as follow… --- ## [Apache Karaf and APM agent](https://discuss.elastic.co/t/apache-karaf-and-apm-agent/254012)
**Author:** [@Daniele\_Uboldi](https://discuss.elastic.co/u/Daniele_Uboldi)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 8:02am UTC](https://discuss.elastic.co/t/apache-karaf-and-apm-agent/254012 "2020-11-04T08:02:50Z")
Kibana version: 7.3.1 Elasticsearch version: 7.3.1 APM Server version: 7.9.3 APM Agent language and version: Java 1.18.1 Browser version: Chrome 86.0.4240.111 Original install method (e.g. download page, yum, deb, f… --- ## [Translated SQL query to SearchRequest](https://discuss.elastic.co/t/translated-sql-query-to-searchrequest/254087)
**Author:** [@yuriy.kasterin](https://discuss.elastic.co/u/yuriy.kasterin)\ **Replies:** 7\ **Last updated:** [November 4, 2020, 11:20am UTC](https://discuss.elastic.co/t/translated-sql-query-to-searchrequest/254087 "2020-11-04T11:20:40Z")
Hello I want to create a search request from a translated SQL query. Here is the code that i use to translate the SQL query to json ES query: RestClient restClient = RestClient.builder( new HttpHost("local… --- ## [Error receiving audit reply: no buffer space available](https://discuss.elastic.co/t/error-receiving-audit-reply-no-buffer-space-available/210382)
**Author:** [@vaclav](https://discuss.elastic.co/u/vaclav)\ **Replies:** 1\ **Last updated:** [December 9, 2019, 9:28am UTC](https://discuss.elastic.co/t/error-receiving-audit-reply-no-buffer-space-available/210382 "2019-12-09T09:28:48Z")
Hello, I am having issue with auditbeat service running, but there is no output and some commands are not working. Found this error in syslog: auditbeat\[23346\]: 2019-12-03T11:48:38.116Z#011ERROR#011\[auditd\]#011auditd/a… --- ## [Elasticsearch 7 mappping on Elasticsearch 6](https://discuss.elastic.co/t/elasticsearch-7-mappping-on-elasticsearch-6/203681)
**Author:** [@pavolloffay](https://discuss.elastic.co/u/pavolloffay)\ **Replies:** 7\ **Last updated:** [November 5, 2019, 2:30pm UTC](https://discuss.elastic.co/t/elasticsearch-7-mappping-on-elasticsearch-6/203681 "2019-11-05T14:30:44Z")
Hello, is it possible to use Elasticsearch 7 mapping (with no types) on any version of Elasticsearch 6? For instance this mapping: { "mappings":{ "properties":{ "serviceName":{ "type":"keyword", … --- ## [Nested JSON parsing in dynamic field names](https://discuss.elastic.co/t/nested-json-parsing-in-dynamic-field-names/136211)
**Author:** [@Somya\_Makkad](https://discuss.elastic.co/u/Somya_Makkad)\ **Replies:** 1\ **Last updated:** [June 18, 2018, 11:41pm UTC](https://discuss.elastic.co/t/nested-json-parsing-in-dynamic-field-names/136211 "2018-06-18T23:41:59Z")
{ "0": { "username": "rita", "age": 21, "occupation": "teacher" }, "1": { "username": "nita", "age": 21, "occupation": "police officer" } } My log format looks as above. When applying the json filter it parse… --- ## [Unable to Setup Watcher in 6.2.1](https://discuss.elastic.co/t/unable-to-setup-watcher-in-6-2-1/119879)
**Author:** [@dkris1](https://discuss.elastic.co/u/dkris1)\ **Replies:** 7\ **Last updated:** [February 15, 2018, 1:49pm UTC](https://discuss.elastic.co/t/unable-to-setup-watcher-in-6-2-1/119879 "2018-02-15T13:49:34Z")
Hi all, I have upgraded ELK from 6.0 to 6.2.1 and im trying to setup my first watcher. How ever it fails. following is the error. "{ "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Re… --- ## [CVE-2025-66516](https://discuss.elastic.co/t/cve-2025-66516/384111)
**Author:** [@satyam\_mishra](https://discuss.elastic.co/u/satyam_mishra)\ **Replies:** 2\ **Last updated:** [December 17, 2025, 4:09pm UTC](https://discuss.elastic.co/t/cve-2025-66516/384111 "2025-12-17T16:09:40Z")
Is elasticsearch impacted by CVE-2025-66516 any version ? --- ## [Full-text search is faster if queries are sent constantly](https://discuss.elastic.co/t/full-text-search-is-faster-if-queries-are-sent-constantly/323955)
**Author:** [@athlonIIx2](https://discuss.elastic.co/u/athlonIIx2)\ **Replies:** 3\ **Last updated:** [January 26, 2023, 8:55am UTC](https://discuss.elastic.co/t/full-text-search-is-faster-if-queries-are-sent-constantly/323955 "2023-01-26T08:55:48Z")
Please help me understand my case, as I am new to Elasticsearch. I use Elasticsearch on a single node to make full-text search queries from a Python API. The problem is that searching time may vary from seconds to tens… --- ## [Dashboard: "options list" entries sorting](https://discuss.elastic.co/t/dashboard-options-list-entries-sorting/322753)
**Author:** [@hkhalil](https://discuss.elastic.co/u/hkhalil)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 8:01pm UTC](https://discuss.elastic.co/t/dashboard-options-list-entries-sorting/322753 "2023-01-16T20:01:57Z")
Hi, We are using filtering controls in our dashboards ("Options List"). Specifically, one of our controls is for the following field: "session\_id": { "type": "text", "fields": { "keyword": { … --- ## [Most efficient grok approach for ISE logs](https://discuss.elastic.co/t/most-efficient-grok-approach-for-ise-logs/165083)
**Author:** [@MarcDAFrame](https://discuss.elastic.co/u/MarcDAFrame)\ **Replies:** 2\ **Last updated:** [January 24, 2019, 9:10am UTC](https://discuss.elastic.co/t/most-efficient-grok-approach-for-ise-logs/165083 "2019-01-24T09:10:58Z")
grok{match =\> {"message" =\> "User-Name=%{DATA:username}\[,;\]"}} grok{match =\> {"message" =\> "NAS-IP-Address=%{IP:nas\_ip}\[,;\]"}} grok{match =\> {"message" =\> "NAS-Port=%{NUMBER:nas\_port}\[,;\]"}} grok{match =\> {"message"… --- ## [Kibana-plugin プロキシ設定の方法](https://discuss.elastic.co/t/kibana-plugin/73460)
**Author:** [@abu001](https://discuss.elastic.co/u/abu001)\ **Replies:** 2\ **Last updated:** [February 1, 2017, 5:49am UTC](https://discuss.elastic.co/t/kibana-plugin/73460 "2017-02-01T05:49:50Z")
kibanaの5.0.1を使用しています。 プロキシを経由して、プラグインをインストールしたいのですが、kibana-pluginコマンドを使用する場合 プロキシの設定をどこですればよいでしょうか？ 例えば、-DproxyHostや-DproxyPortが使えればよいのですが、kibana-pluginコマンドにそのような オプションは使えないようです。 --- ## [Help on Geo Point Set up](https://discuss.elastic.co/t/help-on-geo-point-set-up/55307)
**Author:** [@spraveenjd](https://discuss.elastic.co/u/spraveenjd)\ **Replies:** 2\ **Last updated:** [July 14, 2016, 6:00pm UTC](https://discuss.elastic.co/t/help-on-geo-point-set-up/55307 "2016-07-14T18:00:59Z")
I have logstatsh configured as below, and also I have deleted the logstatsh template using "curl -XDELETE 'http://localhost:9200/\_template/logstash'" input { jdbc { jdbc\_driver\_library =\> "/app/… --- ## [How to install Logstash in Windows 7](https://discuss.elastic.co/t/how-to-install-logstash-in-windows-7/51690)
**Author:** [@Anil\_Kumar1](https://discuss.elastic.co/u/Anil_Kumar1)\ **Replies:** 2\ **Last updated:** [June 15, 2016, 3:18am UTC](https://discuss.elastic.co/t/how-to-install-logstash-in-windows-7/51690 "2016-06-15T03:18:47Z")
Hi All, I have installed Elastic Search & Kibana in my Laptop(Windows 7). But I don't know how to install logstash.Please help me. Thanks in Advance --- ## [How do i take the count of a field and perform further calculations such as division in kibana 4.3.0?](https://discuss.elastic.co/t/how-do-i-take-the-count-of-a-field-and-perform-further-calculations-such-as-division-in-kibana-4-3-0/39863)
**Author:** [@KavyaS](https://discuss.elastic.co/u/KavyaS)\ **Replies:** 2\ **Last updated:** [April 11, 2016, 1:09pm UTC](https://discuss.elastic.co/t/how-do-i-take-the-count-of-a-field-and-perform-further-calculations-such-as-division-in-kibana-4-3-0/39863 "2016-04-11T13:09:04Z")
I need to create a chart with the following requirement: I have to take the count of StatusCode as StatusCodeCount and then divide it by 86400,i.e., count(StatusCode)/86400. How do i do this in kibana? I have attached t… --- ## [Npm run elasticsearch: Fatal error: Cannot read property 'master' of undefined](https://discuss.elastic.co/t/npm-run-elasticsearch-fatal-error-cannot-read-property-master-of-undefined/67959)
**Author:** [@cstock89](https://discuss.elastic.co/u/cstock89)\ **Replies:** 1\ **Last updated:** [December 5, 2016, 4:37pm UTC](https://discuss.elastic.co/t/npm-run-elasticsearch-fatal-error-cannot-read-property-master-of-undefined/67959 "2016-12-05T16:37:13Z")
Hi all, I am trying to build up a kibana development environment as described here and forked, then cloned the kibana repo. I´ve set up the development environment until it was failing at "npm run elasticsearch" step. … --- ## [Single Elasticsearch node abruptly ran out of disk space (possibly due to a giant temp file)](https://discuss.elastic.co/t/single-elasticsearch-node-abruptly-ran-out-of-disk-space-possibly-due-to-a-giant-temp-file/335515)
**Author:** [@username11](https://discuss.elastic.co/u/username11)\ **Replies:** 5\ **Last updated:** [June 9, 2023, 6:21am UTC](https://discuss.elastic.co/t/single-elasticsearch-node-abruptly-ran-out-of-disk-space-possibly-due-to-a-giant-temp-file/335515 "2023-06-09T06:21:30Z")
Hi. I have recently observed that one of our Elasticsearch nodes ran out of disk space and fell out of the cluster. Upon investigating it, I found several things that are very, very weird about this situation: I haven'… --- ## [How to restrict edit access to dashboards / visuals within a space](https://discuss.elastic.co/t/how-to-restrict-edit-access-to-dashboards-visuals-within-a-space/287556)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 5\ **Last updated:** [October 26, 2021, 12:36am UTC](https://discuss.elastic.co/t/how-to-restrict-edit-access-to-dashboards-visuals-within-a-space/287556 "2021-10-26T00:36:25Z")
Hello, I have created a set of visuals within dashboard within a space. I do not want anyone to change these dashboards / visuals in this space. The user can create or change dashboards / visuals in other spaces. Is … --- ## [Aggregations sum の doc\_count\_error\_upper\_bound について](https://discuss.elastic.co/t/aggregations-sum-doc-count-error-upper-bound/156222)
**Author:** [@gnext](https://discuss.elastic.co/u/gnext)\ **Replies:** 5\ **Last updated:** [November 15, 2018, 3:03am UTC](https://discuss.elastic.co/t/aggregations-sum-doc-count-error-upper-bound/156222 "2018-11-15T03:03:53Z")
Aggregationsでtermsでグループ化した上でsumを使用するとデータ数によりdoc\_count\_error\_upper\_boundが0件にならず正常にsumの値を取得できない場合があります。 "terms": {"field": "category.value", "size": 200} sizeを指定すれば取得できるようになりますが、データ数によっては処理に時間がかかったり指定したsize以上のデータが存在する可能性… --- ## [Getting below errors while starting Elasticsearch](https://discuss.elastic.co/t/getting-below-errors-while-starting-elasticsearch/81286)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 5\ **Last updated:** [April 11, 2017, 9:11am UTC](https://discuss.elastic.co/t/getting-below-errors-while-starting-elasticsearch/81286 "2017-04-11T09:11:42Z")
Hi Team, Getting below errors while starting Elasticsearch: \[2017-04-04T02:17:03,172\]\[ERROR\]\[o.e.x.m.c.c.ClusterStateCollector\] \[Node\_1\] collector \[cluster-state-collector\] timed out when collecting data \[2017-04-04T… --- ## [Percolator Java API 5.0.0-alpha3](https://discuss.elastic.co/t/percolator-java-api-5-0-0-alpha3/52161)
**Author:** [@MikaelK](https://discuss.elastic.co/u/MikaelK)\ **Replies:** 5\ **Last updated:** [November 16, 2016, 4:12pm UTC](https://discuss.elastic.co/t/percolator-java-api-5-0-0-alpha3/52161 "2016-11-16T16:12:09Z")
I'm trying to test the new Percolator API in the alpha3 release. Indexing the queries is working fine and everything is working as long as I use the REST API directly. Now I want to percolate documents directly from Java… --- ## [Bulk load via action.bulk API dropping events when overloaded?](https://discuss.elastic.co/t/bulk-load-via-action-bulk-api-dropping-events-when-overloaded/23856)
**Author:** [@franfabrizio](https://discuss.elastic.co/u/franfabrizio)\ **Replies:** 5\ **Last updated:** [June 18, 2015, 4:09pm UTC](https://discuss.elastic.co/t/bulk-load-via-action-bulk-api-dropping-events-when-overloaded/23856 "2015-06-18T16:09:53Z")
I'm new to Elasticsearch and I've been experimenting with doing a bulk load of data from one of our custom apps. I'm doing this on an Ubuntu VM (4GB mem) on my laptop. I'm using fluentd's elasticsearch plugin (which u… --- ## [Cannot delete index template](https://discuss.elastic.co/t/cannot-delete-index-template/243009)
**Author:** [@Karel\_Cech](https://discuss.elastic.co/u/Karel_Cech)\ **Replies:** 1\ **Last updated:** [July 29, 2020, 9:58am UTC](https://discuss.elastic.co/t/cannot-delete-index-template/243009 "2020-07-29T09:58:18Z")
Hi, I accidentally created 2 templates with the same name and same pattern. Unfortunately, I don't remember how this happened, because the API does not allow to create templates of same priority and same pattern. But I… --- ## [How to set \`bulk\_max\_size\` and \`compression\_level\`?](https://discuss.elastic.co/t/how-to-set-bulk-max-size-and-compression-level/341387)
**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\ **Replies:** 8\ **Last updated:** [August 31, 2023, 6:34pm UTC](https://discuss.elastic.co/t/how-to-set-bulk-max-size-and-compression-level/341387 "2023-08-31T18:34:19Z")
I have about 2000 Elastic agents (version 8.9.0) connected to a system with 3 Fleet servers (version 8.9.0). We have about 20 different agent policies, because the various Elastic agents are sending slightly different … --- ## [Can not create new index , Client request timeout (502)](https://discuss.elastic.co/t/can-not-create-new-index-client-request-timeout-502/322516)
**Author:** [@Madushan\_Pathirana](https://discuss.elastic.co/u/Madushan_Pathirana)\ **Replies:** 3\ **Last updated:** [January 6, 2023, 8:04am UTC](https://discuss.elastic.co/t/can-not-create-new-index-client-request-timeout-502/322516 "2023-01-06T08:04:07Z")
Hi, elasticsearch worked fine when I install it first. After two weeks, now when I try to create new index it return below error PUT customer response {"statusCode":502,"error":"Bad Gateway","message":"Client request … --- ## [Elasticsearch is not started in server](https://discuss.elastic.co/t/elasticsearch-is-not-started-in-server/254888)
**Author:** [@nagaraju.sbd](https://discuss.elastic.co/u/nagaraju.sbd)\ **Replies:** 8\ **Last updated:** [November 10, 2020, 11:32am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-started-in-server/254888 "2020-11-10T11:32:34Z")
elasticsearch.service: main process exited, code=exited, status=78/n/a Failed to start Elasticsearch. --- ## [ERR Connecting error publishing events (retrying): dial tcp x.x.x.x:5044: getsockopt: connection refused](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-dial-tcp-x-x-x-x-getsockopt-connection-refused/147645)
**Author:** [@BronQ](https://discuss.elastic.co/u/BronQ)\ **Replies:** 3\ **Last updated:** [September 7, 2018, 6:37am UTC](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-dial-tcp-x-x-x-x-getsockopt-connection-refused/147645 "2018-09-07T06:37:38Z")
Hi All, Please help, Filebeat failed to send logs to logstash with the error below: ERR Connecting error publishing events (retrying): dial tcp x.x.x.x:5044: getsockopt: connection refused Telnet from the client serve… --- ## [Missing columns in Kibana generated CSV](https://discuss.elastic.co/t/missing-columns-in-kibana-generated-csv/266865)
**Author:** [@noah.solomon](https://discuss.elastic.co/u/noah.solomon)\ **Replies:** 4\ **Last updated:** [March 11, 2021, 12:52am UTC](https://discuss.elastic.co/t/missing-columns-in-kibana-generated-csv/266865 "2021-03-11T00:52:56Z")
Hi, I'm using Kibana 7.10. I'm generating a CSV from a saved search in the Kibana UI. The generated CSV doesn't contain all of the columns that are in the index that I'm viewing. The columns that are added to the CSV ar… --- ## [Kibana dashboard for hosts status](https://discuss.elastic.co/t/kibana-dashboard-for-hosts-status/137375)
**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\ **Replies:** 2\ **Last updated:** [June 26, 2018, 8:21pm UTC](https://discuss.elastic.co/t/kibana-dashboard-for-hosts-status/137375 "2018-06-26T20:21:14Z")
Hi, My Index has three fields Host name, Host status & time stamp and these values gets updated every 60 secs. I would like to build a dashboard to show the current status of all of my hosts in one dashboard. Can someon… --- ## [S3 input and Elasticsearch output in Logstash](https://discuss.elastic.co/t/s3-input-and-elasticsearch-output-in-logstash/31340)
**Author:** [@AymenChetoui](https://discuss.elastic.co/u/AymenChetoui)\ **Replies:** 2\ **Last updated:** [September 29, 2015, 2:37pm UTC](https://discuss.elastic.co/t/s3-input-and-elasticsearch-output-in-logstash/31340 "2015-09-29T14:37:49Z")
Hi all, I am trying to get familiar with S3 plugin in Logstash in two steps : 1 - Pushing logs to S3 as output 2 - Getting logs from S3 as input 1 - The Logstash conf file looks like this : output { s3{ … --- ## [Logs to logstash config file](https://discuss.elastic.co/t/logs-to-logstash-config-file/44735)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 6\ **Last updated:** [March 19, 2016, 12:16am UTC](https://discuss.elastic.co/t/logs-to-logstash-config-file/44735 "2016-03-19T00:16:46Z")
I have a simple log file consisting of some information...how do convert it to a logstash-configuration file for indexing in elasticsearch and visualizing in kibana? I am confused. please help! --- ## [TSVB - Gauage - Bucket Script 오류 문의 (Top Hit)](https://discuss.elastic.co/t/tsvb-gauage-bucket-script-top-hit/268296)
**Author:** [@KANG](https://discuss.elastic.co/u/KANG)\ **Replies:** 4\ **Last updated:** [April 27, 2021, 5:10am UTC](https://discuss.elastic.co/t/tsvb-gauage-bucket-script-top-hit/268296 "2021-04-27T05:10:31Z")
안녕하세요. Gauage를 활용하여 메모리 사용률을 Kibana에서 시각화 하려고합니다. TSVB 활용 중 오류가 발생하여 해결방법에 대해 문의드립니다. \[구현내용\] 메모리 사용률(%) 메모리 사용량(memutilization) / 전체 메모리량(totalmem) \* 100 \[설정내용\] TSVB - Gauage - Metris 1번 Aggregation : Top Hit - t… --- ## [Keeping \`message\` field intact with module parsing](https://discuss.elastic.co/t/keeping-message-field-intact-with-module-parsing/155452)
**Author:** [@rocketraman](https://discuss.elastic.co/u/rocketraman)\ **Replies:** 4\ **Last updated:** [November 6, 2018, 5:10pm UTC](https://discuss.elastic.co/t/keeping-message-field-intact-with-module-parsing/155452 "2018-11-06T17:10:51Z")
Parsing the message field with filebeat processors is great, as it allows structured search for logs, but one thing that surprises me is that the message field itself is destroyed. This means that just casual viewing of … --- ## [Syslog output date format](https://discuss.elastic.co/t/syslog-output-date-format/264366)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 7\ **Last updated:** [February 16, 2021, 3:38am UTC](https://discuss.elastic.co/t/syslog-output-date-format/264366 "2021-02-16T03:38:39Z")
Hi, I am running Windows logs successfully to our SIEM using a kafka input and a logstash syslog output. The logs are parsing perfectly in the SIEM. When running a virtually identical pipeline to poll a different topi… --- ## [Using Filebeat on K8s - Trying to obtain App logs inside Pods](https://discuss.elastic.co/t/using-filebeat-on-k8s-trying-to-obtain-app-logs-inside-pods/224116)
**Author:** [@solijam](https://discuss.elastic.co/u/solijam)\ **Replies:** 1\ **Last updated:** [March 24, 2020, 2:27pm UTC](https://discuss.elastic.co/t/using-filebeat-on-k8s-trying-to-obtain-app-logs-inside-pods/224116 "2020-03-24T14:27:54Z")
Hello Team! We are using Filbeat on Kubernetes - OCP configuration. Currently we have success on obtaining logs through Filebeat, but these only show what you would find by navigating on OCP 4.X Web console... Pods \> "… --- ## [Logstash 7.2 Filters and filter plugins execution order](https://discuss.elastic.co/t/logstash-7-2-filters-and-filter-plugins-execution-order/187908)
**Author:** [@Alexl](https://discuss.elastic.co/u/Alexl)\ **Replies:** 1\ **Last updated:** [June 27, 2019, 8:26pm UTC](https://discuss.elastic.co/t/logstash-7-2-filters-and-filter-plugins-execution-order/187908 "2019-06-27T20:26:56Z")
Hello all! Please, expand the concise documentation. What is the execution order which Logstash applies to many filters and their inner plugins? For example, I have this in logstash.conf: filter{ mutate1... grok1.… [Previous page](https://discuss.elastic.co/top.md?page=854&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=856&per_page=50&period=all)