# Top

**URL:** https://discuss.elastic.co/top.md?page=870&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 871

---

## [EsRejectedExecution Exception](https://discuss.elastic.co/t/esrejectedexecution-exception/56493)

<div class="topic-metadata">

**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\
**Replies:** 2\
**Last updated:** [July 29, 2016, 8:44am UTC](https://discuss.elastic.co/t/esrejectedexecution-exception/56493 "2016-07-29T08:44:55Z")

</div>

Hi, I am using java client to ingest data continuously from kafka to elasticsearch and i am using elasticsearch 2.2 version. I am running four threads which continuously submit bulk ingestion tasks with a bulk load of 50…

---

## [Reindex change shard number](https://discuss.elastic.co/t/reindex-change-shard-number/299337)

<div class="topic-metadata">

**Author:** [@gabbar](https://discuss.elastic.co/u/gabbar)\
**Replies:** 4\
**Last updated:** [March 14, 2022, 12:02pm UTC](https://discuss.elastic.co/t/reindex-change-shard-number/299337 "2022-03-14T12:02:39Z")

</div>

Hello community! I'm running Elasticsearch 6.8 to store logs collected using graylog and I would like to reduce the amount of shards of the older indices. Using curator I've been able to shrink the shards from 6 to 1, …

---

## [ComMysqlJdbcExceptionsJdbc4::CommunicationsException: Communications link failure, if i schedule query every system hour](https://discuss.elastic.co/t/commysqljdbcexceptionsjdbc4-communications-link-failure-if-i-schedule-query-every-system-hour/170330)

<div class="topic-metadata">

**Author:** [@ApekshaB](https://discuss.elastic.co/u/ApekshaB)\
**Replies:** 4\
**Last updated:** [March 6, 2019, 2:49pm UTC](https://discuss.elastic.co/t/commysqljdbcexceptionsjdbc4-communications-link-failure-if-i-schedule-query-every-system-hour/170330 "2019-03-06T14:49:24Z")

</div>

Kindly find my conf file as below: input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://172.23.125.52:3304/faredge" jdbc\_user =\> "faredge" jdbc\_password =\> "faredge" jdbc\_driver\_library =\> "D:\\Apeksha\\ELK\_…

---

## [Problem with ElasticsearchRepository](https://discuss.elastic.co/t/problem-with-elasticsearchrepository/270690)

<div class="topic-metadata">

**Author:** [@Atiqur\_Rahman](https://discuss.elastic.co/u/Atiqur_Rahman)\
**Replies:** 1\
**Last updated:** [April 20, 2021, 11:00am UTC](https://discuss.elastic.co/t/problem-with-elasticsearchrepository/270690 "2021-04-20T11:00:28Z")

</div>

Hi All I am not sure if this is the right place to ask this question. I am using Elasticsearch 7.11 and Spring-Boot 2.4.4 import org.springframework.data.elasticsearch.repository.ElasticsearchRepository; import org.sp…

---

## [Event.get(message).bytesize](https://discuss.elastic.co/t/event-get-message-bytesize/267004)

<div class="topic-metadata">

**Author:** [@jchaves506](https://discuss.elastic.co/u/jchaves506)\
**Replies:** 3\
**Last updated:** [March 12, 2021, 6:07pm UTC](https://discuss.elastic.co/t/event-get-message-bytesize/267004 "2021-03-12T18:07:31Z")

</div>

Continuing the discussion from How to get entire enriched "event" size (not message size): I'm using metricbeat, and I'm looking to know what's the size of the message, I tried using that but I'm getting: \[ERROR\]\[logst…

---

## [Beats (Metricbeat) config not accepting environment variables](https://discuss.elastic.co/t/beats-metricbeat-config-not-accepting-environment-variables/69574)

<div class="topic-metadata">

**Author:** [@leigh](https://discuss.elastic.co/u/leigh)\
**Replies:** 3\
**Last updated:** [January 5, 2017, 2:06pm UTC](https://discuss.elastic.co/t/beats-metricbeat-config-not-accepting-environment-variables/69574 "2017-01-05T14:06:55Z")

</div>

Hi, We are using Env Vars in our metricbeat.yml file but they are not getting picked up when restarting the service. Metricbeat 5.1.1. This is basically the same question as answered here: But...we are exporting the …

---

## [感觉 kibana统计的时候 数据不是很准](https://discuss.elastic.co/t/kibana/49797)

<div class="topic-metadata">

**Author:** [@jixiuf](https://discuss.elastic.co/u/jixiuf)\
**Replies:** 3\
**Last updated:** [July 5, 2016, 3:29pm UTC](https://discuss.elastic.co/t/kibana/49797 "2016-07-05T15:29:17Z")

</div>

deployer@iZ94badqop7Z zjh/es $ curl 'localhost:9200/\_cat/indices' yellow open zjh\_login\_2016-19 5 1 274 0 286.9kb 286.9kb 我用curl 查看，发现 zjh\_login\_2016-19 下面共有274条数据 。 而从kibana 界面 用 查询 index : "zjh\_login" 只有一条数据 。 时…

---

## [Is it appropriate to make a product announcement in "Announcements"?](https://discuss.elastic.co/t/is-it-appropriate-to-make-a-product-announcement-in-announcements/30035)

<div class="topic-metadata">

**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\
**Replies:** 3\
**Last updated:** [September 26, 2015, 12:16am UTC](https://discuss.elastic.co/t/is-it-appropriate-to-make-a-product-announcement-in-announcements/30035 "2015-09-26T00:16:40Z")

</div>

Before I get labeled a spammer, I wanted to ask this question :). Would it be an appropriatte use of this forum to announce that we have a product that supports Elasticsearch. In particular, I would like to announce that…

---

## [Cannot generate syskeygen](https://discuss.elastic.co/t/cannot-generate-syskeygen/70530)

<div class="topic-metadata">

**Author:** [@Dixon\_Almeida](https://discuss.elastic.co/u/Dixon_Almeida)\
**Replies:** 6\
**Last updated:** [January 6, 2017, 4:35am UTC](https://discuss.elastic.co/t/cannot-generate-syskeygen/70530 "2017-01-06T04:35:24Z")

</div>

/bin/x-pack/syskeygen Storing generated key in \[/etc/elasticsearch/x-pack/system\_key\]... Exception in thread "main" java.nio.file.NoSuchFileException: /etc/elasticsearch/x-pack/system\_key at sun.nio.fs.UnixExcept…

---

## [Create field in Filebeat as Logstash](https://discuss.elastic.co/t/create-field-in-filebeat-as-logstash/57680)

<div class="topic-metadata">

**Author:** [@fdlprod](https://discuss.elastic.co/u/fdlprod)\
**Replies:** 6\
**Last updated:** [August 10, 2016, 12:04pm UTC](https://discuss.elastic.co/t/create-field-in-filebeat-as-logstash/57680 "2016-08-10T12:04:02Z")

</div>

HI, i have now logs read from filebeat and they are less cut than logstash , indeed in logstash for example i have the LOG LEVEL field and not in filebeat, how can i proceed to have it please ? and the new

---

## [How to access XML data and use GROK filter on it?](https://discuss.elastic.co/t/how-to-access-xml-data-and-use-grok-filter-on-it/154512)

<div class="topic-metadata">

**Author:** [@Samvid\_Kulkarni](https://discuss.elastic.co/u/Samvid_Kulkarni)\
**Replies:** 2\
**Last updated:** [November 5, 2018, 5:14pm UTC](https://discuss.elastic.co/t/how-to-access-xml-data-and-use-grok-filter-on-it/154512 "2018-11-05T17:14:11Z")

</div>

I am trying to parse Microsoft Active Directory which is completely in XML format. Below is the example of the logs. Here is link to log Below is my config file filter { grok { match =\> \[ "message", "%{TIMEST…

---

## [Beats Module IPMI/iLO](https://discuss.elastic.co/t/beats-module-ipmi-ilo/118888)

<div class="topic-metadata">

**Author:** [@PauliniMrtns](https://discuss.elastic.co/u/PauliniMrtns)\
**Replies:** 2\
**Last updated:** [February 9, 2018, 1:58pm UTC](https://discuss.elastic.co/t/beats-module-ipmi-ilo/118888 "2018-02-09T13:58:10Z")

</div>

Dear all, I'm looking for a new solution for our monitoring platform. We are deploying a new ELK Stack cluster dedicated for this and one of our options for monitoring the physical stats on our devices we considered tha…

---

## [How do I troubleshoot elastic agent not sending any logs to siem app](https://discuss.elastic.co/t/how-do-i-troubleshoot-elastic-agent-not-sending-any-logs-to-siem-app/286311)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 5\
**Last updated:** [October 12, 2021, 11:39am UTC](https://discuss.elastic.co/t/how-do-i-troubleshoot-elastic-agent-not-sending-any-logs-to-siem-app/286311 "2021-10-12T11:39:55Z")

</div>

Hi Team, I have enrolled windows serves through fleet and installed elastic-agent on them with malware-protction enabled in detect mode. However not a single log is being shipped hence wondering how do I troubleshoot th…

---

## [Unable to access https://localhost:9200, issue with Elastic User](https://discuss.elastic.co/t/unable-to-access-https-localhost-9200-issue-with-elastic-user/269510)

<div class="topic-metadata">

**Author:** [@Bbruteforce](https://discuss.elastic.co/u/Bbruteforce)\
**Replies:** 5\
**Last updated:** [April 8, 2021, 4:19pm UTC](https://discuss.elastic.co/t/unable-to-access-https-localhost-9200-issue-with-elastic-user/269510 "2021-04-08T16:19:38Z")

</div>

Hello Team, I am trying to send data from Wazuh Manager to Elasticsearch via Filebeat over port 9200. In the "Discover" tab of Kibana i see no data , even though the agent seems to sending data properly to manager I se…

---

## [Can't download shakespeare.json: too many redirects](https://discuss.elastic.co/t/cant-download-shakespeare-json-too-many-redirects/41702)

<div class="topic-metadata">

**Author:** [@adamd](https://discuss.elastic.co/u/adamd)\
**Replies:** 5\
**Last updated:** [February 15, 2016, 4:05pm UTC](https://discuss.elastic.co/t/cant-download-shakespeare-json-too-many-redirects/41702 "2016-02-15T16:05:28Z")

</div>

The page Getting Started with Kibana (https://www.elastic.co/guide/en/kibana/current/getting-started.html) points to a sample data file shakespeare.json. When I attempt to download it, my browser complains: Too many…

---

## [Is umlaut expansion such as ü -\> \[ü, u, ue\] possible with built in es tokenizer/filters?](https://discuss.elastic.co/t/is-umlaut-expansion-such-as-u-u-u-ue-possible-with-built-in-es-tokenizer-filters/167710)

<div class="topic-metadata">

**Author:** [@samz](https://discuss.elastic.co/u/samz)\
**Replies:** 0\
**Last updated:** [February 9, 2019, 10:27am UTC](https://discuss.elastic.co/t/is-umlaut-expansion-such-as-u-u-u-ue-possible-with-built-in-es-tokenizer-filters/167710 "2019-02-09T10:27:25Z")

</div>

Hi there elasticers! my index is a list of documents that representing names of universities from all over the world in their "english" form. our german users are having problems finding unis in Germany. their instinc…

---

## [Slow date\_histogram after upgrading to 7.3.0 on "dense" indexes](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-3-0-on-dense-indexes/196475)

<div class="topic-metadata">

**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\
**Replies:** 7\
**Last updated:** [August 26, 2019, 2:09pm UTC](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-3-0-on-dense-indexes/196475 "2019-08-26T14:09:28Z")

</div>

Hi there, We noticed a serious performance degradation of date\_histogram aggregations on our cluster after migrating from ES 6.8.2 to 7.3.0. Queries are at least 2 times slower with 7.3.0. We managed to reproduce the i…

---

## [How to get unique docment from elastic db from start time and end time?](https://discuss.elastic.co/t/how-to-get-unique-docment-from-elastic-db-from-start-time-and-end-time/141076)

<div class="topic-metadata">

**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\
**Replies:** 7\
**Last updated:** [July 24, 2018, 5:48am UTC](https://discuss.elastic.co/t/how-to-get-unique-docment-from-elastic-db-from-start-time-and-end-time/141076 "2018-07-24T05:48:03Z")

</div>

Here is my python snippet query to get documents from ES res = es.search(index="test-data", timeout=500000, body={"query": {"bool": {"must": \[ …

---

## [Kibana 5 front end authentication](https://discuss.elastic.co/t/kibana-5-front-end-authentication/52024)

<div class="topic-metadata">

**Author:** [@satya\_fury](https://discuss.elastic.co/u/satya_fury)\
**Replies:** 1\
**Last updated:** [June 7, 2016, 7:10pm UTC](https://discuss.elastic.co/t/kibana-5-front-end-authentication/52024 "2016-06-07T19:10:28Z")

</div>

Hi I recently got my hands on kibana 5. Want to put front end authentication with the help of node.js and SQL. But I am unable to understand where should I start developing the authentication part? Sharing your thought…

---

## [Add users to account on Elastic Cloud](https://discuss.elastic.co/t/add-users-to-account-on-elastic-cloud/271542)

<div class="topic-metadata">

**Author:** [@christhegrand](https://discuss.elastic.co/u/christhegrand)\
**Replies:** 1\
**Last updated:** [April 29, 2021, 12:00am UTC](https://discuss.elastic.co/t/add-users-to-account-on-elastic-cloud/271542 "2021-04-29T00:00:31Z")

</div>

How do I create an account for another user on Elastic Cloud? All I see are ways to add users as billing contacts, as operational email contacts, or to a monitoring email whitelist.

---

## [How to add the "hostname" and "environment" variables in the "message body" of the email alert sent from Watcher in Kibana?](https://discuss.elastic.co/t/how-to-add-the-hostname-and-environment-variables-in-the-message-body-of-the-email-alert-sent-from-watcher-in-kibana/323476)

<div class="topic-metadata">

**Author:** [@Shiva\_Subramaniyan](https://discuss.elastic.co/u/Shiva_Subramaniyan)\
**Replies:** 4\
**Last updated:** [January 25, 2023, 11:03pm UTC](https://discuss.elastic.co/t/how-to-add-the-hostname-and-environment-variables-in-the-message-body-of-the-email-alert-sent-from-watcher-in-kibana/323476 "2023-01-25T23:03:25Z")

</div>

Hi, We had created Watcher and configured alert rules to send the email when a threshold is breached. The email body should contain the "hostname" and the corresponding "environment" when it is triggered. We tried to …

---

## [Failed to parse mapping \[\_default\_\]: A dynamic template must be defined with a name](https://discuss.elastic.co/t/failed-to-parse-mapping--default--a-dynamic-template-must-be-defined-with-a-name/96595)

<div class="topic-metadata">

**Author:** [@Alexander\_Gerasimenk](https://discuss.elastic.co/u/Alexander_Gerasimenk)\
**Replies:** 4\
**Last updated:** [September 1, 2017, 2:26pm UTC](https://discuss.elastic.co/t/failed-to-parse-mapping--default--a-dynamic-template-must-be-defined-with-a-name/96595 "2017-09-01T14:26:59Z")

</div>

Hello, I'm trying to make logstash store suricata data to a specific elasticsearch index. When I delete template and elasticsearch index and then restart logstash - it works fine, but when logstash creates new daily ela…

---

## [EC2 Discovery not working with AWS Cloud plugin. Need Help](https://discuss.elastic.co/t/ec2-discovery-not-working-with-aws-cloud-plugin-need-help/53769)

<div class="topic-metadata">

**Author:** [@shailender\_arya](https://discuss.elastic.co/u/shailender_arya)\
**Replies:** 4\
**Last updated:** [June 24, 2016, 2:25pm UTC](https://discuss.elastic.co/t/ec2-discovery-not-working-with-aws-cloud-plugin-need-help/53769 "2016-06-24T14:25:01Z")

</div>

I have 2 EC2 nodes and aws cloud plugin and auto discovery is not working . both the nodes they start and dont find each other. Kindly help elastic version - elasticsearch-2.3.3 java version openjdk version "1.8.0\_91…

---

## [Percentile Aggregation: Help me understand "Accuracy is proportional to q(1-q)."](https://discuss.elastic.co/t/percentile-aggregation-help-me-understand-accuracy-is-proportional-to-q-1-q/53947)

<div class="topic-metadata">

**Author:** [@Nathaniel\_Anderson](https://discuss.elastic.co/u/Nathaniel_Anderson)\
**Replies:** 8\
**Last updated:** [June 30, 2016, 12:59am UTC](https://discuss.elastic.co/t/percentile-aggregation-help-me-understand-accuracy-is-proportional-to-q-1-q/53947 "2016-06-30T00:59:18Z")

</div>

I'm reading about percentile aggregations: When discussing "TDigest" -- the algorithm used to calculate percentiles -- it says: Accuracy is proportional to q(1-q). I assume "q" refers to the percentile we want. I …

---

## [Kibana logo](https://discuss.elastic.co/t/kibana-logo/85483)

<div class="topic-metadata">

**Author:** [@eneriosd](https://discuss.elastic.co/u/eneriosd)\
**Replies:** 2\
**Last updated:** [May 16, 2017, 9:20pm UTC](https://discuss.elastic.co/t/kibana-logo/85483 "2017-05-16T21:20:26Z")

</div>

Hi, is there any easy way to replace the Kibana 5.4.0 logo(s) used in side bar, title bar etc?

---

## [Elasticsearch-exporter connection failure](https://discuss.elastic.co/t/elasticsearch-exporter-connection-failure/259128)

<div class="topic-metadata">

**Author:** [@Patrick\_Lieberg1](https://discuss.elastic.co/u/Patrick_Lieberg1)\
**Replies:** 2\
**Last updated:** [December 28, 2020, 6:31pm UTC](https://discuss.elastic.co/t/elasticsearch-exporter-connection-failure/259128 "2020-12-28T18:31:47Z")

</div>

Any idea why an elasticsearch-exporter pod's logs report an error connecting to the coordinating pod, but if I exec into the pod and curl the same address, it works? Exporter version: 1.1.0-debian-10-r303 Error from lo…

---

## [Set max\_result\_window through NEST](https://discuss.elastic.co/t/set-max-result-window-through-nest/163590)

<div class="topic-metadata">

**Author:** [@Joao\_Neto](https://discuss.elastic.co/u/Joao_Neto)\
**Replies:** 2\
**Last updated:** [January 14, 2019, 8:48am UTC](https://discuss.elastic.co/t/set-max-result-window-through-nest/163590 "2019-01-14T08:48:05Z")

</div>

Hello Is it possible to set or update the max\_result\_window through the NEST API?

---

## [Can I tag the events using Winlogbeat?](https://discuss.elastic.co/t/can-i-tag-the-events-using-winlogbeat/46635)

<div class="topic-metadata">

**Author:** [@thyfere](https://discuss.elastic.co/u/thyfere)\
**Replies:** 2\
**Last updated:** [April 7, 2016, 3:47pm UTC](https://discuss.elastic.co/t/can-i-tag-the-events-using-winlogbeat/46635 "2016-04-07T15:47:46Z")

</div>

Hi, I am shipping auditing logs from Windows machines, I am already using a different index for auditing logs which is different than Windows Domain Controller logs. Can I tag the logs using Winlogbeats?

---

## [Elasticsearch query help](https://discuss.elastic.co/t/elasticsearch-query-help/26918)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 2\
**Last updated:** [August 13, 2015, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-query-help/26918 "2015-08-13T15:06:19Z")

</div>

Hi all, I have an elastic search index called 'episodes' with info in there about TV episodes. I am trying to return a record from the 'episodes' index and am unsuccessful: #curl -XPOST "http://3.3.87.69:9200/epis…

---

## [Document missing exception on Update API after update to 6.4](https://discuss.elastic.co/t/document-missing-exception-on-update-api-after-update-to-6-4/154175)

<div class="topic-metadata">

**Author:** [@dtrizna](https://discuss.elastic.co/u/dtrizna)\
**Replies:** 1\
**Last updated:** [October 30, 2018, 9:22am UTC](https://discuss.elastic.co/t/document-missing-exception-on-update-api-after-update-to-6-4/154175 "2018-10-30T09:22:17Z")

</div>

Hi there! I'm facing problem with one of update API requests after upgrade from 5.3.x to 6.4.2. Update API request looks failing with "document\_missing\_exception". I'm trying to update already existing Kibana search. …

---

## [\### i delete one index of yesterday,but 8 hours data of today is gone! help me pls](https://discuss.elastic.co/t/i-delete-one-index-of-yesterday-but-8-hours-data-of-today-is-gone-help-me-pls/83152)

<div class="topic-metadata">

**Author:** [@nwpu.yangqing](https://discuss.elastic.co/u/nwpu.yangqing)\
**Replies:** 6\
**Last updated:** [April 21, 2017, 7:41am UTC](https://discuss.elastic.co/t/i-delete-one-index-of-yesterday-but-8-hours-data-of-today-is-gone-help-me-pls/83152 "2017-04-21T07:41:10Z")

</div>

【replay angin】 1、first，check my indices before i do any detele operations % curl -XGET '172.18.102.5:9200/\_cat/indices/migu\_csms\_debug\*' green open migu\_csms\_debug-2017-04-20 SlGTE1A0TWSDerSuwDs0rA 5 1 273033 0 236.3…

---

## [APM agents together with Dynatrace breaks APM visualisation](https://discuss.elastic.co/t/apm-agents-together-with-dynatrace-breaks-apm-visualisation/290738)

<div class="topic-metadata">

**Author:** [@lancer\_enkor](https://discuss.elastic.co/u/lancer_enkor)\
**Replies:** 5\
**Last updated:** [December 6, 2021, 2:00pm UTC](https://discuss.elastic.co/t/apm-agents-together-with-dynatrace-breaks-apm-visualisation/290738 "2021-12-06T14:00:05Z")

</div>

I have the following situation: I have distributed tracing enabled on APM agents and also on Dynatrace. Everything seems working together except for waterfall visualization in Kibana. I tried to dig more into the pro…

---

## [Windows Install Newbie- Installing Elasticsearch using Zip](https://discuss.elastic.co/t/windows-install-newbie-installing-elasticsearch-using-zip/155316)

<div class="topic-metadata">

**Author:** [@alta\_01](https://discuss.elastic.co/u/alta_01)\
**Replies:** 5\
**Last updated:** [November 5, 2018, 6:46am UTC](https://discuss.elastic.co/t/windows-install-newbie-installing-elasticsearch-using-zip/155316 "2018-11-05T06:46:49Z")

</div>

My issue before after extracting was that I kept getting the "\\Common was unexpected at this time" in the cmd prompt. I was able to get this to work using the following fix. \\Common was unexpected at this time I've att…

---

## [DataTable in json](https://discuss.elastic.co/t/datatable-in-json/122211)

<div class="topic-metadata">

**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\
**Replies:** 5\
**Last updated:** [March 2, 2018, 1:03pm UTC](https://discuss.elastic.co/t/datatable-in-json/122211 "2018-03-02T13:03:06Z")

</div>

Hello,I'm going to use elasticsearch with php so i need to make some queries using json.0 i've searched throw the documentation but i didn't find how to make a datatable using json.

---

## [Logstash not parsing every file](https://discuss.elastic.co/t/logstash-not-parsing-every-file/182372)

<div class="topic-metadata">

**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\
**Replies:** 4\
**Last updated:** [May 28, 2019, 12:32pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-every-file/182372 "2019-05-28T12:32:15Z")

</div>

Hi All. I have logstash set up to parse/ingest a local directory on my server. The directory is for a CDN log files which are fetched every 10 minutes. Unfortuantly the CDN produces a new log file multiple times a min…

---

## [Logstash.conf doesnt work when run as service but runs otherwise](https://discuss.elastic.co/t/logstash-conf-doesnt-work-when-run-as-service-but-runs-otherwise/182298)

<div class="topic-metadata">

**Author:** [@Darshan\_v\_Shah](https://discuss.elastic.co/u/Darshan_v_Shah)\
**Replies:** 4\
**Last updated:** [May 24, 2019, 11:10am UTC](https://discuss.elastic.co/t/logstash-conf-doesnt-work-when-run-as-service-but-runs-otherwise/182298 "2019-05-24T11:10:36Z")

</div>

I want to listen to beats on port 5000 and also push a local file to ES. In process of debugging, I have commented the rest and just running : input { file { path=\> "/home/ec2-user/URLTestOutput/out" codec =\> "json"} } …

---

## [How to shutdown logstash after import csv](https://discuss.elastic.co/t/how-to-shutdown-logstash-after-import-csv/100973)

<div class="topic-metadata">

**Author:** [@Neal\_Shan](https://discuss.elastic.co/u/Neal_Shan)\
**Replies:** 4\
**Last updated:** [September 21, 2017, 2:11am UTC](https://discuss.elastic.co/t/how-to-shutdown-logstash-after-import-csv/100973 "2017-09-21T02:11:17Z")

</div>

I keep seeing this on topics, replied by @magnusbaeck Use the stdin input instead. Logstash will shut down by itself when stdin has been closed and all inputs has been processed. On the flip side, it Logstash dies for …

---

## [Data missed in Logstash!](https://discuss.elastic.co/t/data-missed-in-logstash/81904)

<div class="topic-metadata">

**Author:** [@zhaochl](https://discuss.elastic.co/u/zhaochl)\
**Replies:** 4\
**Last updated:** [April 11, 2017, 10:03am UTC](https://discuss.elastic.co/t/data-missed-in-logstash/81904 "2017-04-11T10:03:22Z")

</div>

Data missed a lot in logstash ,version 5.0, is it a serous bug ?

---

## [Remove Time Zone from Logstash output](https://discuss.elastic.co/t/remove-time-zone-from-logstash-output/71892)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 4\
**Last updated:** [January 18, 2017, 7:15am UTC](https://discuss.elastic.co/t/remove-time-zone-from-logstash-output/71892 "2017-01-18T07:15:43Z")

</div>

I am trying following to remove the 'Z' from logstash output but its not working Do we have any working solution here In my source the date format is is yyyy-MM-dd HH:mm:ss.SSS the Actual output i am getting from …

---

## [OutOfMemoryError after PDTrueTypeFont Using fallback font warnings](https://discuss.elastic.co/t/outofmemoryerror-after-pdtruetypefont-using-fallback-font-warnings/290322)

<div class="topic-metadata">

**Author:** [@Cordobel](https://discuss.elastic.co/u/Cordobel)\
**Replies:** 7\
**Last updated:** [December 10, 2021, 10:04am UTC](https://discuss.elastic.co/t/outofmemoryerror-after-pdtruetypefont-using-fallback-font-warnings/290322 "2021-12-10T10:04:34Z")

</div>

I noticed twice that Elasticsearch crashed after some warnings about PDTrueTypeFont Using fallback font. After these warnings, the garbage collector starts to alert about the overload. Then a fatal error - lambda $MaybeD…

---

## [Fleet Server Status Inconsistency](https://discuss.elastic.co/t/fleet-server-status-inconsistency/283790)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 7\
**Last updated:** [September 13, 2021, 9:14am UTC](https://discuss.elastic.co/t/fleet-server-status-inconsistency/283790 "2021-09-13T09:14:03Z")

</div>

Hi, I'm setting up Fleet in my production environment. I've followed this guide Encrypt traffic in a self-managed cluster | Fleet User Guide \[7.14\] | Elastic and I was able to enroll the Fleet Server. But something str…

---

## [FileBeat with CRI-O \[not docker\] container runtime environment on Kubernetes?](https://discuss.elastic.co/t/filebeat-with-cri-o-not-docker-container-runtime-environment-on-kubernetes/219055)

<div class="topic-metadata">

**Author:** [@vpuvvala](https://discuss.elastic.co/u/vpuvvala)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 5:36pm UTC](https://discuss.elastic.co/t/filebeat-with-cri-o-not-docker-container-runtime-environment-on-kubernetes/219055 "2020-02-21T17:36:43Z")

</div>

Hello, I'm trying to deploy filebeat on Kubernetes that is configured with running CRI-O container runtime environment. Deploying the filebeat as in https://github.com/elastic/beats/blob/master/deploy/kubernetes/filebe…

---

## [Logstash-input-jdbc plugin download](https://discuss.elastic.co/t/logstash-input-jdbc-plugin-download/118273)

<div class="topic-metadata">

**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\
**Replies:** 1\
**Last updated:** [February 2, 2018, 7:25pm UTC](https://discuss.elastic.co/t/logstash-input-jdbc-plugin-download/118273 "2018-02-02T19:25:46Z")

</div>

Is there a location to download the plugin so it doesn't have to be compiled? I have to install all plugins offline, and this is the result of trying with the github zip /usr/share/logstash/bin/logstash-plugin install f…

---

## [Use of dateOptionalTime Date field format](https://discuss.elastic.co/t/use-of-dateoptionaltime-date-field-format/10539)

<div class="topic-metadata">

**Author:** [@JP\_Toto](https://discuss.elastic.co/u/JP_Toto)\
**Replies:** 1\
**Last updated:** [January 29, 2013, 9:17pm UTC](https://discuss.elastic.co/t/use-of-dateoptionaltime-date-field-format/10539 "2013-01-29T21:17:59Z")

</div>

Hey all! Just a quick question (hopefully). I'd like to use dateOptionalTime date format on my schema for a date field. My dates are ISO so they look like 2013-01-24T10:08:22-05:00 or 2013-01-24T10:09:48.98…

---

## [Duration field formatter hh:mm:ss](https://discuss.elastic.co/t/duration-field-formatter-hhss/268533)

<div class="topic-metadata">

**Author:** [@Carl\_Schneidinger](https://discuss.elastic.co/u/Carl_Schneidinger)\
**Replies:** 2\
**Last updated:** [March 26, 2021, 8:14pm UTC](https://discuss.elastic.co/t/duration-field-formatter-hhss/268533 "2021-03-26T20:14:01Z")

</div>

I have a number field that represents a time duration in seconds. I set this field as duration in an index pattern. My end users want to see the time duration in hh:mm:ss instead of number of seconds/minutes/hours. Th…

---

## [Logstash warning (hanshaking error) when connecting with MongoDB](https://discuss.elastic.co/t/logstash-warning-hanshaking-error-when-connecting-with-mongodb/250979)

<div class="topic-metadata">

**Author:** [@carlos-bernad](https://discuss.elastic.co/u/carlos-bernad)\
**Replies:** 2\
**Last updated:** [October 5, 2020, 2:47pm UTC](https://discuss.elastic.co/t/logstash-warning-hanshaking-error-when-connecting-with-mongodb/250979 "2020-10-05T14:47:10Z")

</div>

I am trying to store in a MongoDB collection some JSON datalogs filtered by Logstash. Mongod instance and Logstash are running on Windows 8.1 in the same laptop and I also installed logstash-output-mongodb plugin. My co…

---

## [How to parse Proxmox log format?](https://discuss.elastic.co/t/how-to-parse-proxmox-log-format/243089)

<div class="topic-metadata">

**Author:** [@gmbynkrkrqz](https://discuss.elastic.co/u/gmbynkrkrqz)\
**Replies:** 2\
**Last updated:** [July 30, 2020, 12:04pm UTC](https://discuss.elastic.co/t/how-to-parse-proxmox-log-format/243089 "2020-07-30T12:04:50Z")

</div>

Hello, I would like to store all my Proxmox logs in Elasticsearch. I know there are Groks and I already use its for some other logs. However, as you can see below, the log format is often different : the fields are not …

---

## [Deploy filebeat in docker using a custom Dockerfile with a entry script](https://discuss.elastic.co/t/deploy-filebeat-in-docker-using-a-custom-dockerfile-with-a-entry-script/115530)

<div class="topic-metadata">

**Author:** [@vivekthangathurai](https://discuss.elastic.co/u/vivekthangathurai)\
**Replies:** 2\
**Last updated:** [January 15, 2018, 4:57pm UTC](https://discuss.elastic.co/t/deploy-filebeat-in-docker-using-a-custom-dockerfile-with-a-entry-script/115530 "2018-01-15T16:57:31Z")

</div>

Hello, I am deploying my custom config filebeat using docker with the following docker file. FROM docker.elastic.co/beats/filebeat:5.6.3 COPY filebeat.yml /usr/share/filebeat/filebeat.yml USER root RUN chown filebea…

---

## [Logstash is running but we are getting error in the logs](https://discuss.elastic.co/t/logstash-is-running-but-we-are-getting-error-in-the-logs/95827)

<div class="topic-metadata">

**Author:** [@JAYALAKSHMI](https://discuss.elastic.co/u/JAYALAKSHMI)\
**Replies:** 2\
**Last updated:** [August 8, 2017, 9:38am UTC](https://discuss.elastic.co/t/logstash-is-running-but-we-are-getting-error-in-the-logs/95827 "2017-08-08T09:38:53Z")

</div>

Hi All, We have configured the logstash as below. input { elasticsearch { hosts =\> "localhost:9202" index =\> "index\_name" size =\> 100 scroll =\> "1m" docinfo =\> true } } filter { mutate { remove\_field =\> \[ “@…

---

## [Unable to store data containing non-ASCII chars into elasticsearch](https://discuss.elastic.co/t/unable-to-store-data-containing-non-ascii-chars-into-elasticsearch/77262)

<div class="topic-metadata">

**Author:** [@shaikhmmi](https://discuss.elastic.co/u/shaikhmmi)\
**Replies:** 2\
**Last updated:** [March 3, 2017, 9:59am UTC](https://discuss.elastic.co/t/unable-to-store-data-containing-non-ascii-chars-into-elasticsearch/77262 "2017-03-03T09:59:19Z")

</div>

We are facing issues while storing some content, which actually is an HTML document. It has some special non ASCII chars in it and we're unable to store it in elasticsearch. We're using elastic version 5.2.2 One of the …

[Previous page](https://discuss.elastic.co/top.md?page=869&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=871&per_page=50&period=all)
