# Top **URL:** https://discuss.elastic.co/top.md?page=858&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 859 --- ## [Getting Distinct Values](https://discuss.elastic.co/t/getting-distinct-values/7024)
**Author:** [@vijuitech](https://discuss.elastic.co/u/vijuitech)\ **Replies:** 3\ **Last updated:** [March 16, 2012, 7:48am UTC](https://discuss.elastic.co/t/getting-distinct-values/7024 "2012-03-16T07:48:12Z")
Hi, I have a problem on selecting the distinct data based on the name: The problem is In a Table which contains the following data: ID | Name | Age | Rank | ---… --- ## [Jar hell?](https://discuss.elastic.co/t/jar-hell/149431)
**Author:** [@ping\_luo](https://discuss.elastic.co/u/ping_luo)\ **Replies:** 2\ **Last updated:** [September 26, 2018, 1:39am UTC](https://discuss.elastic.co/t/jar-hell/149431 "2018-09-26T01:39:50Z")
when i install a Customized plugin on elasticsearch, i got this error, it's so puzzled Caused by: java.lang.IllegalStateException: jar hell! class: org.joda.time.base.AbstractDateTime jar1: /usr/share/elasticsearch/plug… --- ## [Best practice for setting index names when using filebeats to logstash](https://discuss.elastic.co/t/best-practice-for-setting-index-names-when-using-filebeats-to-logstash/117597)
**Author:** [@David\_Gidony](https://discuss.elastic.co/u/David_Gidony)\ **Replies:** 2\ **Last updated:** [February 4, 2018, 10:33am UTC](https://discuss.elastic.co/t/best-practice-for-setting-index-names-when-using-filebeats-to-logstash/117597 "2018-02-04T10:33:44Z")
hi, i a monitoring a log directory with filebeats, this directory has severl log files, how can i send a specific log file to a specific index in elasticsearch when going through logstash? fileBeats settings: filebeat… --- ## [Logstash Error "The signal HUP is in use by the JVM and will not work correctly on this platform"-SOLVED](https://discuss.elastic.co/t/logstash-error-the-signal-hup-is-in-use-by-the-jvm-and-will-not-work-correctly-on-this-platform-solved/57622)
**Author:** [@kmk3173](https://discuss.elastic.co/u/kmk3173)\ **Replies:** 2\ **Last updated:** [October 5, 2016, 1:18pm UTC](https://discuss.elastic.co/t/logstash-error-the-signal-hup-is-in-use-by-the-jvm-and-will-not-work-correctly-on-this-platform-solved/57622 "2016-10-05T13:18:02Z")
Does anyone know a fix for this? I am running ELK on a Windows 7 machine Elasticsearch 2.3.3 Logstash 2.3.2 Kibana 4.5.1 I am trying to run my config file to import … --- ## [Parse json file with 100k/1 million records?](https://discuss.elastic.co/t/parse-json-file-with-100k-1-million-records/205659)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 7\ **Last updated:** [November 4, 2019, 1:27pm UTC](https://discuss.elastic.co/t/parse-json-file-with-100k-1-million-records/205659 "2019-11-04T13:27:50Z")
i am trying to parse big json file , here is the sample 5 records in the file with the orignial file containing 100k {"dgdocs": \[{"doc id": "0", "docowner": "0", "documentType": "cte1\_0", "docver": "1", "ogsys": "fc", … --- ## [Date format not picked up when creating index](https://discuss.elastic.co/t/date-format-not-picked-up-when-creating-index/167393)
**Author:** [@Nednazit](https://discuss.elastic.co/u/Nednazit)\ **Replies:** 7\ **Last updated:** [February 10, 2019, 8:55pm UTC](https://discuss.elastic.co/t/date-format-not-picked-up-when-creating-index/167393 "2019-02-10T20:55:24Z")
I created a template without any problems ( script 1) Then I create an index by putting data into it ( script 2) then when I retreve the index the timestamp column is still text ( script 3 ) =============== script 1 … --- ## [Eclipse J2E: IndexNotFoundException\[no such index\]](https://discuss.elastic.co/t/eclipse-j2e-indexnotfoundexception-no-such-index/59426)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 1\ **Last updated:** [August 31, 2016, 3:28pm UTC](https://discuss.elastic.co/t/eclipse-j2e-indexnotfoundexception-no-such-index/59426 "2016-08-31T15:28:56Z")
Hello folks, I have create a java client to connect to elasticsearch and request a document in several indexes called analytics-%{+YYYY.MM.dd}. Here is my code: try { client = TransportClient.builder().bu… --- ## [Logstash output exec - stdout redirect impossible?](https://discuss.elastic.co/t/logstash-output-exec-stdout-redirect-impossible/64709)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 2\ **Last updated:** [November 25, 2016, 3:36pm UTC](https://discuss.elastic.co/t/logstash-output-exec-stdout-redirect-impossible/64709 "2016-11-25T15:36:22Z")
Hi, Based on my understanding of the code, it looks impossible to execute a command that redirects stdout to a file for example - so; command \> /tmp/myoutput won't work. This is because of the line; Open3.popen3(… --- ## [License - clarification](https://discuss.elastic.co/t/license-clarification/333925)
**Author:** [@A\_Thomas](https://discuss.elastic.co/u/A_Thomas)\ **Replies:** 1\ **Last updated:** [May 20, 2023, 7:57pm UTC](https://discuss.elastic.co/t/license-clarification/333925 "2023-05-20T19:57:03Z")
We are trying to use ES for a SaaS application and would like to understand the license required in case of below scenario. Probably this is a technical discussion forum, but couldn't find any other place where I can ask… --- ## [Not sure if a field is nill, null or empty. Help please](https://discuss.elastic.co/t/not-sure-if-a-field-is-nill-null-or-empty-help-please/271123)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 4\ **Last updated:** [April 24, 2021, 6:55pm UTC](https://discuss.elastic.co/t/not-sure-if-a-field-is-nill-null-or-empty-help-please/271123 "2021-04-24T18:55:29Z")
Hi All, It's about barracuda FW log with the following entry +02:00 Security XXX Block: type=FWD|proto=TCP|srcIF=eth0|srcIP=0.0.0.0|srcPort=58570|srcMAC=00:00:00:00:00:00|dstIP=0.0.0.0|dstPort=3002|dstService=exlm-agen… --- ## [Fail to start Kibana](https://discuss.elastic.co/t/fail-to-start-kibana/120625)
**Author:** [@ayip](https://discuss.elastic.co/u/ayip)\ **Replies:** 4\ **Last updated:** [February 20, 2018, 1:12pm UTC](https://discuss.elastic.co/t/fail-to-start-kibana/120625 "2018-02-20T13:12:06Z")
Hi, I followed instructions in https://www.elastic.co/webinars/getting-started-elasticsearch to download and setup Elastic Search and Kibana. When I open Kibana in a browser, I got the following error message (after I… --- ## [Logstash Elasticsearch output does not add the first document of a collection](https://discuss.elastic.co/t/logstash-elasticsearch-output-does-not-add-the-first-document-of-a-collection/106675)
**Author:** [@MariSpirandelli](https://discuss.elastic.co/u/MariSpirandelli)\ **Replies:** 4\ **Last updated:** [November 29, 2017, 10:11am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-does-not-add-the-first-document-of-a-collection/106675 "2017-11-29T10:11:04Z")
I'm trying to use Logstash to get data from Mongodb and insert into Elasticsearch. I'm using Logstash input plugin for Mongodb from here My logstash.conf is as follow: input { mongodb { uri =\> 'mongodb\_host… --- ## [Primary shard allocation on a server running multiple ES nodes](https://discuss.elastic.co/t/primary-shard-allocation-on-a-server-running-multiple-es-nodes/60511)
**Author:** [@Swedeski](https://discuss.elastic.co/u/Swedeski)\ **Replies:** 4\ **Last updated:** [September 14, 2016, 4:15pm UTC](https://discuss.elastic.co/t/primary-shard-allocation-on-a-server-running-multiple-es-nodes/60511 "2016-09-14T16:15:50Z")
I have a cluster where I am running multiple es nodes on a single server. The cluster is composed of 16 servers, each running 4 es nodes. Are there any shard or index allocation awareness switches that would prevent m… --- ## [Elasticsearch.Net.UnexpectedElasticsearchClientException: expected:'{', actual:'\[', at offset:13520](https://discuss.elastic.co/t/elasticsearch-net-unexpectedelasticsearchclientexception-expected-actual-at-offset-13520/330290)
**Author:** [@LhamoDev](https://discuss.elastic.co/u/LhamoDev)\ **Replies:** 6\ **Last updated:** [April 27, 2023, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-net-unexpectedelasticsearchclientexception-expected-actual-at-offset-13520/330290 "2023-04-27T08:23:08Z")
Hello I am updating a project to a the new NEST version: 7.17 But keep getting this error from the logging: Elasticsearch.Net.UnexpectedElasticsearchClientException: expected:'{', actual:'\[', at offset:13520 ---\> Elas… --- ## [Clear cache API](https://discuss.elastic.co/t/clear-cache-api/48507)
**Author:** [@us3r](https://discuss.elastic.co/u/us3r)\ **Replies:** 6\ **Last updated:** [April 28, 2016, 10:19am UTC](https://discuss.elastic.co/t/clear-cache-api/48507 "2016-04-28T10:19:13Z")
Hello Based on the documentation we should use POST request on \_shield/realm/NAME/cache/clear to clear evicts users from the user cache. However it looks like that this handler doesnt work anymore... $ curl -u ad… --- ## [No handler for type \[string\] declared on field \[fieldname\]](https://discuss.elastic.co/t/no-handler-for-type-string-declared-on-field-fieldname/222693)
**Author:** [@Chris\_Wilmott](https://discuss.elastic.co/u/Chris_Wilmott)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 11:21am UTC](https://discuss.elastic.co/t/no-handler-for-type-string-declared-on-field-fieldname/222693 "2020-03-09T11:21:06Z")
I know this question has been asked before but I can't seem to make this work. I updated Kibana and ElasticSearch from 5.6.16 to 6.8.7, and after the upgrade everything continued to work. However, two days later at midn… --- ## [Getting error for mongodb module in metricbeat](https://discuss.elastic.co/t/getting-error-for-mongodb-module-in-metricbeat/200538)
**Author:** [@GRV](https://discuss.elastic.co/u/GRV)\ **Replies:** 3\ **Last updated:** [October 20, 2019, 6:41pm UTC](https://discuss.elastic.co/t/getting-error-for-mongodb-module-in-metricbeat/200538 "2019-10-20T18:41:34Z")
My mongodb server running on local (127.0.0.1:27017). I have 2 user in mongodb database. 1 for application and 2nd user with read only permission. (Eg. user/password). I configure the 2nd user in mondodb.yml module, whic… --- ## [Term filter for array list not working](https://discuss.elastic.co/t/term-filter-for-array-list-not-working/9028)
**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\ **Replies:** 3\ **Last updated:** [November 1, 2012, 3:19am UTC](https://discuss.elastic.co/t/term-filter-for-array-list-not-working/9028 "2012-11-01T03:19:21Z")
can someone tell me what i am doing wrong? basically i have an index of documents that have a field called "tags". it is a list of strings. one of the documents has "tags" : \["spam"\] but this filter in java is not… --- ## [Http filter plugin parse error - Unexpected character ('\\\\\\\\' (code 92)): was expecting double-quote to start field name](https://discuss.elastic.co/t/http-filter-plugin-parse-error-unexpected-character-code-92-was-expecting-double-quote-to-start-field-name/201098)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 4:00pm UTC](https://discuss.elastic.co/t/http-filter-plugin-parse-error-unexpected-character-code-92-was-expecting-double-quote-to-start-field-name/201098 "2019-09-26T16:00:18Z")
I am using Logstash 6.5 with Elasticsearch 6.5 What I am trying to achieve is to remove from ELS document fields, that in input has null values. Following advice from other thread, I am planning to use ruby filter to s… --- ## [Export and Import of Watchers](https://discuss.elastic.co/t/export-and-import-of-watchers/99373)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 9:02am UTC](https://discuss.elastic.co/t/export-and-import-of-watchers/99373 "2017-09-08T09:02:32Z")
Is it possible to Export and Import the Watchers from one environment to other? --- ## [I can not send logs to elastic cloud](https://discuss.elastic.co/t/i-can-not-send-logs-to-elastic-cloud/288411)
**Author:** [@Hugo\_Pacini](https://discuss.elastic.co/u/Hugo_Pacini)\ **Replies:** 5\ **Last updated:** [November 6, 2021, 2:16pm UTC](https://discuss.elastic.co/t/i-can-not-send-logs-to-elastic-cloud/288411 "2021-11-06T14:16:55Z")
I'm trying to send logs from Serilogs to Elastic Cloud but doesn't work and I can not see errors. Can I send logs to test using Postman? The URL is https://my-custom-domain.es.eastus2.azure.elastic-cloud.com:9243 var u… --- ## [ML - Learning patterns](https://discuss.elastic.co/t/ml-learning-patterns/100062)
**Author:** [@P\_Charpentier](https://discuss.elastic.co/u/P_Charpentier)\ **Replies:** 5\ **Last updated:** [September 15, 2017, 2:45pm UTC](https://discuss.elastic.co/t/ml-learning-patterns/100062 "2017-09-15T14:45:18Z")
Hello, I tried Machine Learning with some metrics. I saw some stranges things. For example, I tried with an average response time metric like this : \[image\] I have a classic pattern during the day and a noisy pattern… --- ## [Issue When Upgrading Elasticsearch v5.2.2 to V5.6.8](https://discuss.elastic.co/t/issue-when-upgrading-elasticsearch-v5-2-2-to-v5-6-8/122869)
**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\ **Replies:** 2\ **Last updated:** [March 8, 2018, 6:36am UTC](https://discuss.elastic.co/t/issue-when-upgrading-elasticsearch-v5-2-2-to-v5-6-8/122869 "2018-03-08T06:36:40Z")
I am trying to upgrade my development ELK stack running on a Single VM(No cluster) ..Below is the details of the error ..i am doing something wrong ..Please advice OS : Centos 7 Current ELK version : V5.2.2 New versio… --- ## [Production level Elasticsearch cluster using Docker](https://discuss.elastic.co/t/production-level-elasticsearch-cluster-using-docker/39759)
**Author:** [@aliostad](https://discuss.elastic.co/u/aliostad)\ **Replies:** 2\ **Last updated:** [February 29, 2016, 7:14pm UTC](https://discuss.elastic.co/t/production-level-elasticsearch-cluster-using-docker/39759 "2016-02-29T19:14:39Z")
Hi, I know that industry is dockerising everything - and they would dockerise Docker if they could - but the ease of commissioning new environment using Docker especially in a DR scenario is very appealing. So my que… --- ## [On restarting filebeat, every filestream paths input is deemed to be truncated](https://discuss.elastic.co/t/on-restarting-filebeat-every-filestream-paths-input-is-deemed-to-be-truncated/353337)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 6\ **Last updated:** [February 20, 2024, 1:32pm UTC](https://discuss.elastic.co/t/on-restarting-filebeat-every-filestream-paths-input-is-deemed-to-be-truncated/353337 "2024-02-20T13:32:05Z")
Hi, We are using filebeat to ship Zeek logs to logstash. We do this by defining a different filestream input for each type of log and in the input we define the path filebeat.yml path.home: /usr/share/filebeat path.da… --- ## [Which nodes should participate in election?](https://discuss.elastic.co/t/which-nodes-should-participate-in-election/40788)
**Author:** [@Igor\_Igor](https://discuss.elastic.co/u/Igor_Igor)\ **Replies:** 7\ **Last updated:** [February 4, 2016, 9:14pm UTC](https://discuss.elastic.co/t/which-nodes-should-participate-in-election/40788 "2016-02-04T21:14:58Z")
I am not clear about, which type of nodes should participate in election. As I understand from documentation by default, master eligible and data nodes take part in election, when client node don't. But I can configu… --- ## [Metric Visualization With Previous Period Arrow Indicator](https://discuss.elastic.co/t/metric-visualization-with-previous-period-arrow-indicator/227551)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [April 13, 2020, 4:45pm UTC](https://discuss.elastic.co/t/metric-visualization-with-previous-period-arrow-indicator/227551 "2020-04-13T16:45:27Z")
I am tracking the number of hits to a given URL with a simple Metric visualization. I'd like to be able to display an arrow that points up or down if the current metric is higher or lower than the previous measured peri… --- ## [Kibana Aggregation to get counts with Top Hit](https://discuss.elastic.co/t/kibana-aggregation-to-get-counts-with-top-hit/200496)
**Author:** [@stephenchoy](https://discuss.elastic.co/u/stephenchoy)\ **Replies:** 4\ **Last updated:** [September 21, 2019, 12:46am UTC](https://discuss.elastic.co/t/kibana-aggregation-to-get-counts-with-top-hit/200496 "2019-09-21T00:46:47Z")
I would like to create a metric that counts the number of hosts running different software versions. The tricky part is that each host regularly report its current versions to the ES. The version field changed as the so… --- ## [Elasticsearch setting field index limit](https://discuss.elastic.co/t/elasticsearch-setting-field-index-limit/131675)
**Author:** [@Dhivya\_Buvanesh](https://discuss.elastic.co/u/Dhivya_Buvanesh)\ **Replies:** 4\ **Last updated:** [May 15, 2018, 12:22pm UTC](https://discuss.elastic.co/t/elasticsearch-setting-field-index-limit/131675 "2018-05-15T12:22:47Z")
hi How to make the default elastic search field limit setting as more than 1000, for any or all index Tried adding the below line in elasticsearch.yml - but elastic search was unable to start, hope this is not the ri… --- ## [Sorting across multiple types](https://discuss.elastic.co/t/sorting-across-multiple-types/5406)
**Author:** [@Chris\_Baxter](https://discuss.elastic.co/u/Chris_Baxter)\ **Replies:** 4\ **Last updated:** [September 20, 2011, 11:19am UTC](https://discuss.elastic.co/t/sorting-across-multiple-types/5406 "2011-09-20T11:19:03Z")
I'm currently using elastic search with two types of entities being indexed. Both entities have a field called "name". I'm issuing a query with a sort on "name" (actually using "nameSort" which is non- analyzed) and… --- ## [Kibana Controls Does not Show All Possible Values](https://discuss.elastic.co/t/kibana-controls-does-not-show-all-possible-values/241957)
**Author:** [@pulkit007](https://discuss.elastic.co/u/pulkit007)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 10:13am UTC](https://discuss.elastic.co/t/kibana-controls-does-not-show-all-possible-values/241957 "2020-07-28T10:13:35Z")
Hi, I am using Kibana 6.6.0. In that, I am trying to create controls based on the distinct possible values of a particular filed. Now, all the distinct possible values are not shown in the controls. I have also create… --- ## [Kibana closes HTTP connection after 120 seconds](https://discuss.elastic.co/t/kibana-closes-http-connection-after-120-seconds/86391)
**Author:** [@droden](https://discuss.elastic.co/u/droden)\ **Replies:** 3\ **Last updated:** [May 22, 2017, 2:16pm UTC](https://discuss.elastic.co/t/kibana-closes-http-connection-after-120-seconds/86391 "2017-05-22T14:16:20Z")
Hi. So, I have this problem with Kibana that I don’t know how to solve. I’ll start by describing the environment: 12 Elasticsearch (version 2.1.2) nodes. Those are various AWS machines with Linux/CentOS installed, u… --- ## [How does fieldNorm calculated in the example](https://discuss.elastic.co/t/how-does-fieldnorm-calculated-in-the-example/54732)
**Author:** [@duo\_yi](https://discuss.elastic.co/u/duo_yi)\ **Replies:** 3\ **Last updated:** [August 31, 2016, 7:42am UTC](https://discuss.elastic.co/t/how-does-fieldnorm-calculated-in-the-example/54732 "2016-08-31T07:42:48Z")
Hi, I saw the explanation of field-norm is: norm(d) = 1 / √numTerms, and in the "put it together" section in the following page: https://www.elastic.co/guide/en/elasticsearch/guide/current/scoring-theory.html#\_putting… --- ## [Logstash websocket input plugin throwing NoMethodError exception](https://discuss.elastic.co/t/logstash-websocket-input-plugin-throwing-nomethoderror-exception/237081)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 10:02am UTC](https://discuss.elastic.co/t/logstash-websocket-input-plugin-throwing-nomethoderror-exception/237081 "2020-06-29T10:02:48Z")
Hi all, I am having some troubles using the Logstash websocket input plugin. I need Logstash to read a stream of events from a websocket endpoint and thus I am trying the following pipeline configuration input { webs… --- ## [Rename strings field to nested field](https://discuss.elastic.co/t/rename-strings-field-to-nested-field/275912)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 6\ **Last updated:** [June 15, 2021, 4:48pm UTC](https://discuss.elastic.co/t/rename-strings-field-to-nested-field/275912 "2021-06-15T16:48:00Z")
Hello every body, I want to parse the logs bellow Apr 20 01:10:04 hostname sshproxy\[150\]: \[SSH Session\] session\_id="56454646eaeazjajflen" client\_ip="X.X.X.X" target\_ip="X.X.X.X" user="X.X.X.X" device="X.X.X.X" service… --- ## [Problem with "exists" filter! (parsing\_exception no \[query\] registered for \[meta\])](https://discuss.elastic.co/t/problem-with-exists-filter-parsing-exception-no-query-registered-for-meta/125210)
**Author:** [@NOUR](https://discuss.elastic.co/u/NOUR)\ **Replies:** 6\ **Last updated:** [March 26, 2018, 10:16pm UTC](https://discuss.elastic.co/t/problem-with-exists-filter-parsing-exception-no-query-registered-for-meta/125210 "2018-03-26T22:16:36Z")
hello every one, i wana applicate a filter on my data (only one column) so i can prepare my data to the machine learning plugin... this is an example of filter i wana use to eliminate NULL values \[image\] Then , i sa… --- ## [Logstash failing to ingest multi-line json log file... I think](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 9:56pm UTC](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851 "2021-12-16T21:56:05Z")
I am having trouble getting my data ingested by logstash... I think... but I'm just learning about how to do this. Someone else stood up Cloud Custodian, and is dumping logs to an s3 bucket, and I am attempting to inge… --- ## [GZIP invalid header with Filebeat S3 input and GuardDuty logs](https://discuss.elastic.co/t/gzip-invalid-header-with-filebeat-s3-input-and-guardduty-logs/233626)
**Author:** [@nhnicwaller](https://discuss.elastic.co/u/nhnicwaller)\ **Replies:** 5\ **Last updated:** [May 21, 2020, 8:09pm UTC](https://discuss.elastic.co/t/gzip-invalid-header-with-filebeat-s3-input-and-guardduty-logs/233626 "2020-05-21T20:09:34Z")
I'm trying to ingest logs from AWS GuardDuty using Filebeat, but I'm getting ERROR messages when trying to run the ingest with Filebeat. 2020-05-20T22:42:27.973Z ERROR \[s3\] s3/input.go:447 gzip.NewReader failed: gzip: i… --- ## [Error: undefined method \`to\_sym' for nil:NilClass for Postgres JDBC](https://discuss.elastic.co/t/error-undefined-method-to-sym-for-nil-nilclass-for-postgres-jdbc/193390)
**Author:** [@Ale\_Ksa](https://discuss.elastic.co/u/Ale_Ksa)\ **Replies:** 5\ **Last updated:** [August 1, 2019, 7:57pm UTC](https://discuss.elastic.co/t/error-undefined-method-to-sym-for-nil-nilclass-for-postgres-jdbc/193390 "2019-08-01T19:57:31Z")
Hello! I am getting an undefined method error when using Postgres JDBC in Logstash. I've put the debug output on Pastebin. And here is the config itself: input { # pg\_stat\_database jdbc { jdbc\_driver\_library =\> "" … --- ## [How many shards to set when ~2TB data need to be indexed?](https://discuss.elastic.co/t/how-many-shards-to-set-when-2tb-data-need-to-be-indexed/10899)
**Author:** [@Jingang\_Wang](https://discuss.elastic.co/u/Jingang_Wang)\ **Replies:** 5\ **Last updated:** [February 26, 2013, 11:15am UTC](https://discuss.elastic.co/t/how-many-shards-to-set-when-2tb-data-need-to-be-indexed/10899 "2013-02-26T11:15:32Z")
Hi there, I mean to index ~1.9 TB text data using elasticsearch, the default number of shards is 5, would it meet the need? I could afford about 10 machine to form a cluster. Thanks for your help in advance. --… --- ## [Error 29 Too Many Requests and circuit breaking exception](https://discuss.elastic.co/t/error-29-too-many-requests-and-circuit-breaking-exception/216732)
**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 11:50am UTC](https://discuss.elastic.co/t/error-29-too-many-requests-and-circuit-breaking-exception/216732 "2020-03-04T11:50:06Z")
Hi ES team, We are getting this error from ES 7.4.1, querying an empty index (every 2s) on a server with no load (it's still in test mode so it's not receiving any request). We tried to increase the heap size from 2g to… --- ## [Limit bucket size in aggregation results](https://discuss.elastic.co/t/limit-bucket-size-in-aggregation-results/110731)
**Author:** [@babu.ganesh0708](https://discuss.elastic.co/u/babu.ganesh0708)\ **Replies:** 1\ **Last updated:** [December 15, 2017, 11:39am UTC](https://discuss.elastic.co/t/limit-bucket-size-in-aggregation-results/110731 "2017-12-15T11:39:48Z")
Hi All, I am trying to limit to the bucket count in the aggregation results and below is the query I am using, GET metricbeat\_0/\_search { "query": { "range": { "timestamp": { "gte": "2017-… --- ## [Delete by query with new Java Rest API](https://discuss.elastic.co/t/delete-by-query-with-new-java-rest-api/107578)
**Author:** [@Pingouin](https://discuss.elastic.co/u/Pingouin)\ **Replies:** 2\ **Last updated:** [November 15, 2017, 10:20am UTC](https://discuss.elastic.co/t/delete-by-query-with-new-java-rest-api/107578 "2017-11-15T10:20:39Z")
Hy there, I am currently updating all my code written using Transport Java API to new Java Rest API. For search, delete, aggregagtions, etc... i had no problem but i wish i wanted to delete by query also. And i don't … --- ## [Failed to execute fetch phase org.elasticsearch.transport.RemoteTransportException](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-org-elasticsearch-transport-remotetransportexception/101829)
**Author:** [@dedosan](https://discuss.elastic.co/u/dedosan)\ **Replies:** 2\ **Last updated:** [September 26, 2017, 11:15am UTC](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-org-elasticsearch-transport-remotetransportexception/101829 "2017-09-26T11:15:25Z")
Hi I am new to ELK Stack. Server details - 4 Vcpu , 16GB RAM here i am quering application log files (java applications) Im getting following error on elasticsearch log file It comes when i access Dashboard (It has… --- ## [Kibana iframe working due to cookies attribute "SameSite"](https://discuss.elastic.co/t/kibana-iframe-working-due-to-cookies-attribute-samesite/225326)
**Author:** [@rebirther](https://discuss.elastic.co/u/rebirther)\ **Replies:** 3\ **Last updated:** [March 27, 2020, 3:15pm UTC](https://discuss.elastic.co/t/kibana-iframe-working-due-to-cookies-attribute-samesite/225326 "2020-03-27T15:15:33Z")
At moment, Kibana refuses to work in newer versions of browsers for iframe (for example for Chrome 80.0.3987.149). Is there any way on the Kibana side to set cookies attributes - "SameSite=None" and "Secure"? --- ## [Logstash config JSON parse error](https://discuss.elastic.co/t/logstash-config-json-parse-error/201828)
**Author:** [@rohitg](https://discuss.elastic.co/u/rohitg)\ **Replies:** 3\ **Last updated:** [October 1, 2019, 6:07pm UTC](https://discuss.elastic.co/t/logstash-config-json-parse-error/201828 "2019-10-01T18:07:22Z")
Hi, I am trying to parse a json file using logstash, but getting json parse error. \[WARN \]\[logstash.filters.json \] Error parsing json {:source=\>"message", :raw=\>"\\t\\t\\t\\t\\t1568996833,", :exception=\>#\ **Author:** [@ssarnava](https://discuss.elastic.co/u/ssarnava)\ **Replies:** 4\ **Last updated:** [January 22, 2021, 11:00pm UTC](https://discuss.elastic.co/t/download-kibana-report-from-outside-kibana/260582 "2021-01-22T23:00:31Z") Hi, I am using ELK 7.9.0 version. I am able to generate dashboard report from Kibana and can download that report from inside Kibana. But my requirement is little different. I have to trigger CSV dashboard report genera… --- ## [Automate reindex operation with curator and dynamically create destionation indices](https://discuss.elastic.co/t/automate-reindex-operation-with-curator-and-dynamically-create-destionation-indices/150651)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 1\ **Last updated:** [October 2, 2018, 12:01pm UTC](https://discuss.elastic.co/t/automate-reindex-operation-with-curator-and-dynamically-create-destionation-indices/150651 "2018-10-02T12:01:27Z")
Hi, We are as of now creating daily indices which we want to reindex to a monthly index. We want the flow to look something like this if possible: Curator checks if index is older than 1 month If index is older than s… --- ## [Audit Logging Issue](https://discuss.elastic.co/t/audit-logging-issue/91876)
**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\ **Replies:** 4\ **Last updated:** [July 18, 2017, 9:32am UTC](https://discuss.elastic.co/t/audit-logging-issue/91876 "2017-07-18T09:32:07Z")
Hi, I made an entry in the elasticsearch.yml file : xpack.security.audit.enabled: true After this i am able to see the logs in the elasticsearch\_access.log Again i edited the elasticsearch.yml file and made the fo… --- ## [Topbeat server configuration question](https://discuss.elastic.co/t/topbeat-server-configuration-question/57271)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 4\ **Last updated:** [August 4, 2016, 7:46pm UTC](https://discuss.elastic.co/t/topbeat-server-configuration-question/57271 "2016-08-04T19:46:14Z")
Hello, all. I've just installed Topbeat on a node and, of course, want to capture data and view it in Kibana. I do have it working (topbeat.yml configured to use logstash as output), but all the Topbeat data end up in… [Previous page](https://discuss.elastic.co/top.md?page=857&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=859&per_page=50&period=all)