# Top **URL:** https://discuss.elastic.co/top.md?page=862&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 863 --- ## [Flush threads stuck \[ES 6.1.2\]](https://discuss.elastic.co/t/flush-threads-stuck-es-6-1-2/117707)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 3\ **Last updated:** [January 31, 2018, 7:46pm UTC](https://discuss.elastic.co/t/flush-threads-stuck-es-6-1-2/117707 "2018-01-31T19:46:25Z")
I have run into an issue a few times now where a node is not receiving any requests but is using ~50% CPU indefinitely. Looking at GET /\_cat/thread\_pool?v, I see 1 or more active flush thread. This node seems to have 4 … --- ## [ELK 5.2, x-pack with SSO](https://discuss.elastic.co/t/elk-5-2-x-pack-with-sso/76019)
**Author:** [@Lakshmi1](https://discuss.elastic.co/u/Lakshmi1)\ **Replies:** 3\ **Last updated:** [February 27, 2017, 12:40pm UTC](https://discuss.elastic.co/t/elk-5-2-x-pack-with-sso/76019 "2017-02-27T12:40:58Z")
Hello Team, I want to implement SSO with ELK 5.2 using x-pack. I am planning to use my organisation SSO. My organisation SSO internally integrated with LDAP. So should I have to use LDAP realm? If I have to use LDAP r… --- ## [Logstash imap input plugin](https://discuss.elastic.co/t/logstash-imap-input-plugin/39336)
**Author:** [@nkoleff](https://discuss.elastic.co/u/nkoleff)\ **Replies:** 2\ **Last updated:** [February 3, 2016, 7:41am UTC](https://discuss.elastic.co/t/logstash-imap-input-plugin/39336 "2016-02-03T07:41:21Z")
Hello, For some time now my imap input is failing with End of file reached and I'm wondering what could be the problem with it. It's working for like 10 to 15 minutes and then suddenly stops with that message: {:times… --- ## [Kibana Discovery Errors followed by unknown node.js issues](https://discuss.elastic.co/t/kibana-discovery-errors-followed-by-unknown-node-js-issues/208070)
**Author:** [@tomervain](https://discuss.elastic.co/u/tomervain)\ **Replies:** 6\ **Last updated:** [November 20, 2019, 10:03am UTC](https://discuss.elastic.co/t/kibana-discovery-errors-followed-by-unknown-node-js-issues/208070 "2019-11-20T10:03:12Z")
Hello, I'm having some issues with Kibana recently and could really use the community's help. I'm running Elasticsearch + Kibana 6.5.4 (both) on a Windows Server with one master node without any issues. Elasticsearch i… --- ## [Filebeat giving error on start - Unable to read file at end](https://discuss.elastic.co/t/filebeat-giving-error-on-start-unable-to-read-file-at-end/51407)
**Author:** [@Varun\_Kapoor](https://discuss.elastic.co/u/Varun_Kapoor)\ **Replies:** 6\ **Last updated:** [June 1, 2016, 9:56am UTC](https://discuss.elastic.co/t/filebeat-giving-error-on-start-unable-to-read-file-at-end/51407 "2016-06-01T09:56:55Z")
Hi Whenever I am starting the file beat it gives me following error 2016-05-31T09:24:09Z INFO Harvester started for file: - 2016-05-31T09:24:09Z ERR Unexpected state reading from /dev/stdin; error: read /dev/stdin: r… --- ## [Output Logs In Original Form](https://discuss.elastic.co/t/output-logs-in-original-form/25349)
**Author:** [@Ernest\_Mueller](https://discuss.elastic.co/u/Ernest_Mueller)\ **Replies:** 2\ **Last updated:** [July 13, 2015, 8:14pm UTC](https://discuss.elastic.co/t/output-logs-in-original-form/25349 "2015-07-13T20:14:36Z")
Hey all, I'm a new logstash user. I'm trying to ease in a client to ELK who is currently analyzing their logs using an existing tool. I wanted to start by just using logstash for log shipping and aggregating them to on… --- ## [Best similarity for retrieving exact matches first](https://discuss.elastic.co/t/best-similarity-for-retrieving-exact-matches-first/288319)
**Author:** [@Giovanni\_Montobbio](https://discuss.elastic.co/u/Giovanni_Montobbio)\ **Replies:** 7\ **Last updated:** [November 3, 2021, 7:04pm UTC](https://discuss.elastic.co/t/best-similarity-for-retrieving-exact-matches-first/288319 "2021-11-03T19:04:14Z")
Hi I'm working on a project with elasticseach. I have an index with 1 million phrases inside and I want to retrieve phrases from the index which match with some query phrases. The phrases are in italian and I use an ital… --- ## [Running terms query with filter context causes maxClauseCount](https://discuss.elastic.co/t/running-terms-query-with-filter-context-causes-maxclausecount/162571)
**Author:** [@YuvalPruss](https://discuss.elastic.co/u/YuvalPruss)\ **Replies:** 1\ **Last updated:** [January 4, 2019, 10:19am UTC](https://discuss.elastic.co/t/running-terms-query-with-filter-context-causes-maxclausecount/162571 "2019-01-04T10:19:44Z")
I'm trying to tun a terms query and filter with the results on some aggrs I run. It looks like this: { "aggregations": { "aggs\_name": { "aggregations": { ... }, "filter": { "bool… --- ## [\`Provided Grok expressions do not match field value\` Apache Filebeat](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value-apache-filebeat/254027)
**Author:** [@willis](https://discuss.elastic.co/u/willis)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 1:42pm UTC](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value-apache-filebeat/254027 "2020-11-02T13:42:51Z")
Filebeat: 7.9.2 We are using a custom log format for Apache. The filebeat apache module (i.e. /usr/share/filebeat/module/apache/access/ingest/pipeline.yml) is updated with a single Grok expression that matches our custo… --- ## [How to create intentionally slow query?](https://discuss.elastic.co/t/how-to-create-intentionally-slow-query/239132)
**Author:** [@trex](https://discuss.elastic.co/u/trex)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 2:56pm UTC](https://discuss.elastic.co/t/how-to-create-intentionally-slow-query/239132 "2020-06-29T14:56:25Z")
I want to test things with a slow query. How can I create a slow query? I thought it can be done via script GET \_search { "script\_fields": { "AvgTicketPrice": { "script": "sleep(3000);" } } } But it … --- ## [Functionbeat with AWS Elasticsearch Service](https://discuss.elastic.co/t/functionbeat-with-aws-elasticsearch-service/181712)
**Author:** [@fbidu](https://discuss.elastic.co/u/fbidu)\ **Replies:** 1\ **Last updated:** [May 19, 2019, 1:15pm UTC](https://discuss.elastic.co/t/functionbeat-with-aws-elasticsearch-service/181712 "2019-05-19T13:15:24Z")
Hello, After searching around for a while and deploying some test functions, I haven't been able to make Functionbeat output logs to AWS's Elasticsearch service. Has anybody here been able to achieve this successfully?… --- ## [TLS Certificates and Kafka TLS Secured](https://discuss.elastic.co/t/tls-certificates-and-kafka-tls-secured/264131)
**Author:** [@mschuch](https://discuss.elastic.co/u/mschuch)\ **Replies:** 4\ **Last updated:** [February 23, 2021, 1:54pm UTC](https://discuss.elastic.co/t/tls-certificates-and-kafka-tls-secured/264131 "2021-02-23T13:54:40Z")
Hi, i have three Kafka Brokers configured in Heartime. - type: tcp id: kafka name: Kafka Brokers hosts: \["sl8-0349.xxxx:9092","sl8-0350.xxxxx:9092","sl8-0351.xxxx:9092"\] # default TCP Echo Proto… --- ## [APM roadmap](https://discuss.elastic.co/t/apm-roadmap/113071)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 4\ **Last updated:** [January 2, 2018, 11:00am UTC](https://discuss.elastic.co/t/apm-roadmap/113071 "2018-01-02T11:00:52Z")
It would be awesome to have a rough roadmap for APM. What are the planned agents? (As far as I can see, theres currently python and node available, but python only supports django and flask). I've seen some comments abou… --- ## [Duplicate data parsed by Logstash, which cause duplicate data in Elasticsearch index](https://discuss.elastic.co/t/duplicate-data-parsed-by-logstash-which-cause-duplicate-data-in-elasticsearch-index/99531)
**Author:** [@sezanawa](https://discuss.elastic.co/u/sezanawa)\ **Replies:** 4\ **Last updated:** [September 8, 2017, 10:33am UTC](https://discuss.elastic.co/t/duplicate-data-parsed-by-logstash-which-cause-duplicate-data-in-elasticsearch-index/99531 "2017-09-08T10:33:13Z")
Hallo Eveybody I am using ELK for Log parsing. I have a Job which dowload Logfiles after every 15 mins to a central log directory. Logstash is configured to parse log files from central directory and send to ES. as i n… --- ## [Graph Limitations with Nested Datatypes](https://discuss.elastic.co/t/graph-limitations-with-nested-datatypes/53067)
**Author:** [@mitchswaldman](https://discuss.elastic.co/u/mitchswaldman)\ **Replies:** 4\ **Last updated:** [June 24, 2016, 1:16pm UTC](https://discuss.elastic.co/t/graph-limitations-with-nested-datatypes/53067 "2016-06-24T13:16:00Z")
Hello, I read in one of the earlier posts that graph is capable of querying nested datatypes from the seed query, but it is unable to network outwards using nested datatypes. I took Mark's advice from that post and use… --- ## [2.1.1 won't parse query involving not/and filters that parses in 1.7.x](https://discuss.elastic.co/t/2-1-1-wont-parse-query-involving-not-and-filters-that-parses-in-1-7-x/37880)
**Author:** [@Frederick\_Cheung](https://discuss.elastic.co/u/Frederick_Cheung)\ **Replies:** 4\ **Last updated:** [January 5, 2016, 8:39am UTC](https://discuss.elastic.co/t/2-1-1-wont-parse-query-involving-not-and-filters-that-parses-in-1-7-x/37880 "2016-01-05T08:39:45Z")
Hi, The following query works fine in 1.7.x: curl -XPOST localhost:9200/dummy/document -d '{ "ids": \[1,2,3\] }' curl -XPOST localhost:9200/dummy/document/\_search -d ' { "query": { "filtered":{ "query": {… --- ## [Something went wrong when installing logstash-filter-prune, message: certificate verify failed](https://discuss.elastic.co/t/something-went-wrong-when-installing-logstash-filter-prune-message-certificate-verify-failed/110575)
**Author:** [@Samuel\_Lima1](https://discuss.elastic.co/u/Samuel_Lima1)\ **Replies:** 0\ **Last updated:** [December 6, 2017, 8:54pm UTC](https://discuss.elastic.co/t/something-went-wrong-when-installing-logstash-filter-prune-message-certificate-verify-failed/110575 "2017-12-06T20:54:51Z")
Hi folks, I´m trying to install a plugin with logstash-plugin as folow: sudo /usr/share/logstash/bin/logstash-plugin install --no-verify logstash-filter-prune ERROR: Something went wrong when installing logstash-filt… --- ## [Can we get the logs From S3 Bucket](https://discuss.elastic.co/t/can-we-get-the-logs-from-s3-bucket/56346)
**Author:** [@disalassalyjose](https://discuss.elastic.co/u/disalassalyjose)\ **Replies:** 3\ **Last updated:** [July 26, 2016, 2:13am UTC](https://discuss.elastic.co/t/can-we-get-the-logs-from-s3-bucket/56346 "2016-07-26T02:13:03Z")
Hi, Is it possible to get the logs that pushed to the S3 bucket from the host. --- ## [Compiling elasticsearch from maven:"The property attribute is required"](https://discuss.elastic.co/t/compiling-elasticsearch-from-maven-the-property-attribute-is-required/29236)
**Author:** [@padang](https://discuss.elastic.co/u/padang)\ **Replies:** 3\ **Last updated:** [December 1, 2015, 7:16am UTC](https://discuss.elastic.co/t/compiling-elasticsearch-from-maven-the-property-attribute-is-required/29236 "2015-12-01T07:16:31Z")
Hi, I am trying to include the elasticsearch source into my maven project. Here is what I did: - expand "~.m2\\repository\\org\\elasticsearch\\elasticsearch\\1.7.1\\elasticsearch-1.7.1-sources.jar" into "/elasticsearch/… --- ## [Prefix query on fields mapped as keyword](https://discuss.elastic.co/t/prefix-query-on-fields-mapped-as-keyword/355111)
**Author:** [@india](https://discuss.elastic.co/u/india)\ **Replies:** 5\ **Last updated:** [April 24, 2024, 6:59pm UTC](https://discuss.elastic.co/t/prefix-query-on-fields-mapped-as-keyword/355111 "2024-04-24T18:59:53Z")
Hello, I use Elasticsearch version 7.17. In a Elasticsearch blog post ( Find strings within strings faster with the Elasticsearch wildcard field | Elastic Blog ) it's mentioned that keyword fields can offer better perf… --- ## [Failed to start Elasticsearch on windows](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-windows/323211)
**Author:** [@FoamQuicksand](https://discuss.elastic.co/u/FoamQuicksand)\ **Replies:** 5\ **Last updated:** [January 16, 2023, 3:26pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-windows/323211 "2023-01-16T15:26:36Z")
I failed to start Elasticsearch8.5.1 and 8.6.0 locally, but 8.2.2 and 8.4.1 can start normally. anyone know what the problem？ report errors: warning: ignoring JAVA\_HOME=C:\\Program Files\\Java\\jdk-17.0.4.1; using bundle… --- ## [Use multiple analyzers by field on query](https://discuss.elastic.co/t/use-multiple-analyzers-by-field-on-query/285396)
**Author:** [@oskrdt](https://discuss.elastic.co/u/oskrdt)\ **Replies:** 5\ **Last updated:** [September 28, 2021, 10:48pm UTC](https://discuss.elastic.co/t/use-multiple-analyzers-by-field-on-query/285396 "2021-09-28T22:48:16Z")
I want to do a multi\_match query for 3 different fields, but I want 2 of those fields (indexed as text using standard analyzer) to use the english language analyzer and the 3rd one to use the standard analyzer. I want to… --- ## [Invalid Results with whitespace analyzer and Multi match search](https://discuss.elastic.co/t/invalid-results-with-whitespace-analyzer-and-multi-match-search/172015)
**Author:** [@TARUN\_KUNDHIYA](https://discuss.elastic.co/u/TARUN_KUNDHIYA)\ **Replies:** 5\ **Last updated:** [March 20, 2019, 2:23pm UTC](https://discuss.elastic.co/t/invalid-results-with-whitespace-analyzer-and-multi-match-search/172015 "2019-03-20T14:23:42Z")
These are only 3 documents in my index \ "hits": \[ { "\_index": "test\_index", "\_type": "relationship", "\_id": "AWly5Q6mfOHUG\_jfP5e8", "\_score": 1, "\_source": { "fromEntityId": "a323dd-d43de-d43d3d4-d4334", "toEntityId… --- ## [Error: Cannot invoke "java.lang.CharSequence.length()" because "this.wrapped" is null](https://discuss.elastic.co/t/error-cannot-invoke-java-lang-charsequence-length-because-this-wrapped-is-null/286076)
**Author:** [@Thanura\_Kannangara](https://discuss.elastic.co/u/Thanura_Kannangara)\ **Replies:** 1\ **Last updated:** [October 6, 2021, 11:14pm UTC](https://discuss.elastic.co/t/error-cannot-invoke-java-lang-charsequence-length-because-this-wrapped-is-null/286076 "2021-10-06T23:14:22Z")
Hey Folks, I ran into this error when I tried to run my logstash pipeline \[2021-10-06T21:41:34,176\]\[WARN \]\[logstash.outputs.elasticsearch\]\[logstash\_pipeline\_2\]\[e957447bf4995516c816dfcbd573d1dabd794c31f242e6642bc68deb57… --- ## [NotSslRecordException: not an SSL/TLS record while adding New Node to Cluster](https://discuss.elastic.co/t/notsslrecordexception-not-an-ssl-tls-record-while-adding-new-node-to-cluster/289334)
**Author:** [@ankurthakur](https://discuss.elastic.co/u/ankurthakur)\ **Replies:** 2\ **Last updated:** [November 27, 2021, 6:44pm UTC](https://discuss.elastic.co/t/notsslrecordexception-not-an-ssl-tls-record-while-adding-new-node-to-cluster/289334 "2021-11-27T18:44:03Z")
Hi, Hope everyone is doing well! We are having trouble adding a New Node to a Cluster which has SSL enabled using XPack Security. Before I write further, please keep the below things in mind: Installed same version o… --- ## [Custom table color](https://discuss.elastic.co/t/custom-table-color/250594)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 6\ **Last updated:** [October 1, 2020, 6:33pm UTC](https://discuss.elastic.co/t/custom-table-color/250594 "2020-10-01T18:33:41Z")
Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your … --- ## [GC Collection (OLD) on Data Node brings node offline](https://discuss.elastic.co/t/gc-collection-old-on-data-node-brings-node-offline/209230)
**Author:** [@Newbie2019](https://discuss.elastic.co/u/Newbie2019)\ **Replies:** 6\ **Last updated:** [December 4, 2019, 1:41am UTC](https://discuss.elastic.co/t/gc-collection-old-on-data-node-brings-node-offline/209230 "2019-12-04T01:41:57Z")
Hi all, I am a newbie to elasticsearch, and I have an issue with my ES cluster.d). “Something” triggers one of the data nodes to do an extensive old GC which lasts for a few minutes. During this GC’ing the master node … --- ## [How to move $KIBANA\_HOME from /usr/share/ to /data/](https://discuss.elastic.co/t/how-to-move-kibana-home-from-usr-share-to-data/206650)
**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\ **Replies:** 6\ **Last updated:** [November 25, 2019, 4:38pm UTC](https://discuss.elastic.co/t/how-to-move-kibana-home-from-usr-share-to-data/206650 "2019-11-25T16:38:52Z")
hi all. i cant update ELK 7.4.1 to 7.4.2 due to \[lack of\] space in /usr/ Transaction check error: a instalação do pacote kibana-7.4.2-1.x86\_64 precisa de 38MB no sistema de arquivos /usr i have all ELK data in /data… --- ## [Load balancing Kibana behind Nginx](https://discuss.elastic.co/t/load-balancing-kibana-behind-nginx/225113)
**Author:** [@craigothy](https://discuss.elastic.co/u/craigothy)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 2:40pm UTC](https://discuss.elastic.co/t/load-balancing-kibana-behind-nginx/225113 "2020-03-30T14:40:16Z")
We are using nginx as our load balancer. It is working just fine for elastic. However, when logging into kibana, it shows "no data". However, we can go to index management and see indices have been created that match ou… --- ## [Cannot retrieve remote IP address](https://discuss.elastic.co/t/cannot-retrieve-remote-ip-address/128217)
**Author:** [@jordyd](https://discuss.elastic.co/u/jordyd)\ **Replies:** 3\ **Last updated:** [April 23, 2018, 1:03am UTC](https://discuss.elastic.co/t/cannot-retrieve-remote-ip-address/128217 "2018-04-23T01:03:11Z")
I created certificates using the x-pack certutil, but Logstash is giving me this error. I created a certificate with an IP address for Filebeat and Logstash because I want Filebeat to send data to Logstash which is insta… --- ## [ES 5.2 refresh\_interval doesn't work if set to 0](https://discuss.elastic.co/t/es-5-2-refresh-interval-doesnt-work-if-set-to-0/79248)
**Author:** [@Suyog\_Kale](https://discuss.elastic.co/u/Suyog_Kale)\ **Replies:** 3\ **Last updated:** [March 21, 2017, 5:20am UTC](https://discuss.elastic.co/t/es-5-2-refresh-interval-doesnt-work-if-set-to-0/79248 "2017-03-21T05:20:28Z")
Hello, I used following API to set index refresh\_interval to zero \[yes, I want to refresh an index immediately \] PUT localhost:9200/indexname/\_settings { "index" : { "refresh\_interval" :"0" } } GET localhost:9200… --- ## [Enrich processor high cpu load](https://discuss.elastic.co/t/enrich-processor-high-cpu-load/284778)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 7\ **Last updated:** [September 23, 2021, 1:11am UTC](https://discuss.elastic.co/t/enrich-processor-high-cpu-load/284778 "2021-09-23T01:11:57Z")
Hello, I have a couple of filebeats shipping data directly to elasticsearch, when this data hits elasticsearch two ingest pipelines are executed, one from the module, and another one using the final\_pipeline setting, I'… --- ## [Unable to execute metric beat command & unable to view on kibana](https://discuss.elastic.co/t/unable-to-execute-metric-beat-command-unable-to-view-on-kibana/147349)
**Author:** [@kranthi\_851](https://discuss.elastic.co/u/kranthi_851)\ **Replies:** 7\ **Last updated:** [September 12, 2018, 7:47am UTC](https://discuss.elastic.co/t/unable-to-execute-metric-beat-command-unable-to-view-on-kibana/147349 "2018-09-12T07:47:55Z")
Hi All, Two problems I am facing currently with the metric beat I have installed metricbeat on pc successfully but now I am unable to enable the modules. Its showing as apache not exist. Current my working directory i… --- ## [Best way to load a pcap file into elasticsearch 7.11](https://discuss.elastic.co/t/best-way-to-load-a-pcap-file-into-elasticsearch-7-11/266483)
**Author:** [@humbaw](https://discuss.elastic.co/u/humbaw)\ **Replies:** 1\ **Last updated:** [March 7, 2021, 6:58pm UTC](https://discuss.elastic.co/t/best-way-to-load-a-pcap-file-into-elasticsearch-7-11/266483 "2021-03-07T18:58:08Z")
Hi. I'm using elasticsearch 7.11 and I would like to ingest a pcap file into elasticsearch and kibana. What would be the best way to do this I tried using the analyzing network packets guide(https://www.elastic.co/… --- ## [Nest Script Query example](https://discuss.elastic.co/t/nest-script-query-example/120718)
**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\ **Replies:** 1\ **Last updated:** [February 26, 2018, 11:34pm UTC](https://discuss.elastic.co/t/nest-script-query-example/120718 "2018-02-26T23:34:43Z")
Hi, I came across script query topic in Nest https://www.elastic.co/guide/en/elasticsearch/client/net-api/6.x/script-query-usage.html I'm just looking for an example on how to use this. What would be an example \_templ… --- ## [Is there a way to sort by the existance of a specific field?](https://discuss.elastic.co/t/is-there-a-way-to-sort-by-the-existance-of-a-specific-field/35943)
**Author:** [@gdeconto](https://discuss.elastic.co/u/gdeconto)\ **Replies:** 1\ **Last updated:** [December 1, 2015, 5:35pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-sort-by-the-existance-of-a-specific-field/35943 "2015-12-01T17:35:14Z")
say I have a field that may or may not exist for a given document (ie if there is no data, the field would not get created during data population) is there a fast way to sort by the existence of that field (basically a… --- ## [Sorting and bucket\_selector not working on pipeline aggregation](https://discuss.elastic.co/t/sorting-and-bucket-selector-not-working-on-pipeline-aggregation/298353)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 2:25pm UTC](https://discuss.elastic.co/t/sorting-and-bucket-selector-not-working-on-pipeline-aggregation/298353 "2022-02-28T14:25:17Z")
Hi Team, I have an index "order" that has order data with seller detail, status, and order value. { sId:1, name: "John", orderId:123 gov:100, rtsStatus:"BRECHED" }, { sId:1, name: "John", orderId:456 gov:150, rtsStatus… --- ## [/usr/share/kibana/bin/../node/bin/node: bad option: --max-http-header-size=65536. (Kibana 7.1.1)](https://discuss.elastic.co/t/usr-share-kibana-bin-node-bin-node-bad-option-max-http-header-size-65536-kibana-7-1-1/184882)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 4\ **Last updated:** [June 10, 2019, 1:03pm UTC](https://discuss.elastic.co/t/usr-share-kibana-bin-node-bin-node-bad-option-max-http-header-size-65536-kibana-7-1-1/184882 "2019-06-10T13:03:43Z")
Issue I keep on getting the following error when I compose the kibana docker file unable to find usable node.js executable. Attached is the docker image code FROM node:10.15.2-alpine # Include dist ADD dist/ /root… --- ## [Logstash help with geoip mapping from csv file](https://discuss.elastic.co/t/logstash-help-with-geoip-mapping-from-csv-file/169229)
**Author:** [@mmalisa12](https://discuss.elastic.co/u/mmalisa12)\ **Replies:** 4\ **Last updated:** [February 21, 2019, 3:06pm UTC](https://discuss.elastic.co/t/logstash-help-with-geoip-mapping-from-csv-file/169229 "2019-02-21T15:06:42Z")
Hi, sorry for asking, but went through code, help, FAQ and i still cant make it work. I have CSV file with two fields which contains IP address. When importing from Kibana directly i can make this fields to be recognized… --- ## [Error 401 when authenticating with OpenIDConnect](https://discuss.elastic.co/t/error-401-when-authenticating-with-openidconnect/277977)
**Author:** [@Kostas\_elastic](https://discuss.elastic.co/u/Kostas_elastic)\ **Replies:** 2\ **Last updated:** [July 8, 2021, 4:29pm UTC](https://discuss.elastic.co/t/error-401-when-authenticating-with-openidconnect/277977 "2021-07-08T16:29:09Z")
Hello everyone, I am getting this error message after trying to authenticate with OIDC. {"statusCode":401,"error":"Unauthorized","message":"Response session state does not have corresponding state or nonce parameters o… --- ## [500 Internal server error on query\_suggestion](https://discuss.elastic.co/t/500-internal-server-error-on-query-suggestion/269489)
**Author:** [@Bott\_Radio\_Network](https://discuss.elastic.co/u/Bott_Radio_Network)\ **Replies:** 2\ **Last updated:** [April 7, 2021, 4:34pm UTC](https://discuss.elastic.co/t/500-internal-server-error-on-query-suggestion/269489 "2021-04-07T16:34:05Z")
Hi, some of my requests to /query\_suggestion are returning a 500 error with the following message. {"errors":\["Internal server error. Please check your application server logs for more details and contact Elastic suppor… --- ## [Ingest: foreachとgrokを組み合わせた場合の処理について](https://discuss.elastic.co/t/ingest-foreach-grok/101027)
**Author:** [@tsgkdt](https://discuss.elastic.co/u/tsgkdt)\ **Replies:** 2\ **Last updated:** [October 3, 2017, 12:42am UTC](https://discuss.elastic.co/t/ingest-foreach-grok/101027 "2017-10-03T00:42:06Z")
知りたいこと Ingest Pipelineでforeachの中でgrokを適用し、結果をarrayとして保存する方法について 状況の説明 括弧内にログのコード、次にログのメッセージからなる文字列が、カンマ区切りで出力されているテキストがあります。 （例） \[INFO.0001\]あいうえおかきくけこ, \[INFO.0002\]さしすせそ これを、Ingest Pipelineでこのようにパースしたいと考えています。 期待値 { … --- ## [Plugin Jar Hell](https://discuss.elastic.co/t/plugin-jar-hell/40309)
**Author:** [@krasnaya](https://discuss.elastic.co/u/krasnaya)\ **Replies:** 2\ **Last updated:** [January 28, 2016, 5:52am UTC](https://discuss.elastic.co/t/plugin-jar-hell/40309 "2016-01-28T05:52:40Z")
I'm working on an elasticsearch plugin, and it was working fine until I decided to add Jackson as a dependency. When trying to install my plugin, I now get the following error. I have confirmed that a clean installation … --- ## [How to get all results with search API](https://discuss.elastic.co/t/how-to-get-all-results-with-search-api/307127)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 5\ **Last updated:** [June 15, 2022, 2:35am UTC](https://discuss.elastic.co/t/how-to-get-all-results-with-search-api/307127 "2022-06-15T02:35:25Z")
I am trying to use the REST API to get the contents of the index. I found that this API only retrieves up to 10 results by default. I also found that by using the size option, I can retrieve the specified number of re… --- ## [Json\_parse\_exception multisearch](https://discuss.elastic.co/t/json-parse-exception-multisearch/278116)
**Author:** [@draft10](https://discuss.elastic.co/u/draft10)\ **Replies:** 5\ **Last updated:** [July 12, 2021, 8:08am UTC](https://discuss.elastic.co/t/json-parse-exception-multisearch/278116 "2021-07-12T08:08:06Z")
curl -X GET --user user:pass "localhost:port/element1-2021.07.06/\_msearch?pretty" -H 'Content-Type: application/json' -d' { } {"query": {"match" : {"application":"Scanner"}}} {"index": "element1-2021.07.06"} {"query"… --- ## [Windows MSI installer for Elasticsearch](https://discuss.elastic.co/t/windows-msi-installer-for-elasticsearch/87547)
**Author:** [@larsbj](https://discuss.elastic.co/u/larsbj)\ **Replies:** 5\ **Last updated:** [July 10, 2017, 8:46am UTC](https://discuss.elastic.co/t/windows-msi-installer-for-elasticsearch/87547 "2017-07-10T08:46:57Z")
Hi all, Sorry for the intrusion, but where are the official Windows MSI installer for Elasticsearch hosted? I've googled my heart out, but I can only find the zip download. Any links or hints would be much appreciated.… --- ## [Watcher doesn't recognise chains](https://discuss.elastic.co/t/watcher-doesnt-recognise-chains/39006)
**Author:** [@NDevox](https://discuss.elastic.co/u/NDevox)\ **Replies:** 5\ **Last updated:** [January 14, 2016, 8:11am UTC](https://discuss.elastic.co/t/watcher-doesnt-recognise-chains/39006 "2016-01-14T08:11:38Z")
I'm playing with what I can do with watcher and trying to get chains working. But I get an error when trying to upload the watch: {"error":"WatcherException\[failed to put watch \[chain\_tester\]\]; nested: InputException\[c… --- ## [What does "re-syncing mappings with cluster state for types" on startup mean?](https://discuss.elastic.co/t/what-does-re-syncing-mappings-with-cluster-state-for-types-on-startup-mean/5928)
**Author:** [@Matt1](https://discuss.elastic.co/u/Matt1)\ **Replies:** 5\ **Last updated:** [November 22, 2011, 3:39pm UTC](https://discuss.elastic.co/t/what-does-re-syncing-mappings-with-cluster-state-for-types-on-startup-mean/5928 "2011-11-22T15:39:35Z")
Hey all, I have a cluster with a couple of hundred indices, each one between tens of megs to hundreds of megs and tens of thousands to hundreds of thousands of documents. I was doing an upgrade from 18.2 to 18.4, … --- ## [Geopoint visualization in Kibana 6.4.2 (Elastic 6.4.2)](https://discuss.elastic.co/t/geopoint-visualization-in-kibana-6-4-2-elastic-6-4-2/208468)
**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\ **Replies:** 8\ **Last updated:** [November 20, 2019, 7:34am UTC](https://discuss.elastic.co/t/geopoint-visualization-in-kibana-6-4-2-elastic-6-4-2/208468 "2019-11-20T07:34:01Z")
I have an index pattern for my metrics that's configured as "filebeat-\*" in Kibana I have a field called qp\_point - this is created by reading another field and running "mutate" in logstash However, I cannot see visual… --- ## [How can use esrally import data to es cloud?](https://discuss.elastic.co/t/how-can-use-esrally-import-data-to-es-cloud/111467)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 8\ **Last updated:** [December 13, 2017, 9:10am UTC](https://discuss.elastic.co/t/how-can-use-esrally-import-data-to-es-cloud/111467 "2017-12-13T09:10:57Z")
how can use esrally import data to es cloud ? can give a example. the host connect internet with proxy how can configure about it. [Previous page](https://discuss.elastic.co/top.md?page=861&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=863&per_page=50&period=all)