# Top

**URL:** https://discuss.elastic.co/top.md?page=88&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 89

---

## [Query regarding GeoIP](https://discuss.elastic.co/t/query-regarding-geoip/99210)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 22\
**Last updated:** [September 18, 2017, 4:03am UTC](https://discuss.elastic.co/t/query-regarding-geoip/99210 "2017-09-18T04:03:17Z")

</div>

Hi Guys, I am taking nginx logs and with custom Index name and logs are being injested properly even I see Log/lt properly country name absilutely fine. However when I do visualization I see that regular error “No Comp…

---

## [Kafkabeat - help](https://discuss.elastic.co/t/kafkabeat-help/60724)

<div class="topic-metadata">

**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\
**Replies:** 15\
**Last updated:** [September 20, 2016, 6:12pm UTC](https://discuss.elastic.co/t/kafkabeat-help/60724 "2016-09-20T18:12:56Z")

</div>

I am trying to follow the blog guide about Kafka: https://www.elastic.co/blog/just-enough-kafka-for-the-elastic-stack-part2 to start collecting some Kafka stats. I have basic experience with Beats via using the yum rep…

---

## [Delete time based indices on elastic search older than 30 days using date math expression in JAVA gives indexNotExists exception](https://discuss.elastic.co/t/delete-time-based-indices-on-elastic-search-older-than-30-days-using-date-math-expression-in-java-gives-indexnotexists-exception/171365)

<div class="topic-metadata">

**Author:** [@singla\_02](https://discuss.elastic.co/u/singla_02)\
**Replies:** 11\
**Last updated:** [March 9, 2019, 8:41pm UTC](https://discuss.elastic.co/t/delete-time-based-indices-on-elastic-search-older-than-30-days-using-date-math-expression-in-java-gives-indexnotexists-exception/171365 "2019-03-09T20:41:59Z")

</div>

want to delete time based indices on Elasticsearch older than some specific (let's say 30) days using date math expression in JAVA. Trying to implement following approach in our spring boot application using Transaport…

---

## [Exclude lines regex for excluding all non json logs is not working](https://discuss.elastic.co/t/exclude-lines-regex-for-excluding-all-non-json-logs-is-not-working/167704)

<div class="topic-metadata">

**Author:** [@venkat\_t](https://discuss.elastic.co/u/venkat_t)\
**Replies:** 11\
**Last updated:** [March 1, 2019, 6:09am UTC](https://discuss.elastic.co/t/exclude-lines-regex-for-excluding-all-non-json-logs-is-not-working/167704 "2019-03-01T06:09:23Z")

</div>

Dear Elastic team, My requirement is to exclude non JSON lines from the file. Data comes into the log file are mainly json and the third-party libraries sometimes emit non-JSON single and multiline logs. JSON logs are s…

---

## [Как востановить данные индекса из каталога, который не видит Эластик?](https://discuss.elastic.co/t/topic/109557)

<div class="topic-metadata">

**Author:** [@MichaelAA](https://discuss.elastic.co/u/MichaelAA)\
**Replies:** 9\
**Last updated:** [December 6, 2017, 4:45pm UTC](https://discuss.elastic.co/t/topic/109557 "2017-12-06T16:45:22Z")

</div>

Добрый день! Есть ли возможность достать данные после подобной ситуации: Данные записывались в index1 Был тестовый index2 В один момент был удален index2, и создан заново с новым mapping и в него закачали данные из i…

---

## [Timezone issue](https://discuss.elastic.co/t/timezone-issue/318620)

<div class="topic-metadata">

**Author:** [@MahithaSarala](https://discuss.elastic.co/u/MahithaSarala)\
**Replies:** 10\
**Last updated:** [November 16, 2022, 12:12pm UTC](https://discuss.elastic.co/t/timezone-issue/318620 "2022-11-16T12:12:32Z")

</div>

In our current kibana setup , the timezone has been set to browser timezone. This dashboard is live for users in India as well as users in Ireland . The kibana setup is live and linked to spinnaker to monitor the pipelin…

---

## [Python to ingest data in to ES, reading from kafka](https://discuss.elastic.co/t/python-to-ingest-data-in-to-es-reading-from-kafka/216493)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 13\
**Last updated:** [February 3, 2020, 7:35pm UTC](https://discuss.elastic.co/t/python-to-ingest-data-in-to-es-reading-from-kafka/216493 "2020-02-03T19:35:23Z")

</div>

I want to read kafka topic and insert that data in to elasticsearch anyone has basic python script for it. I am newbee to python connection to es is alredy established with this code from elasticsearch import Elastic…

---

## [Error creating connection to Oracle](https://discuss.elastic.co/t/error-creating-connection-to-oracle/257980)

<div class="topic-metadata">

**Author:** [@jenssc](https://discuss.elastic.co/u/jenssc)\
**Replies:** 24\
**Last updated:** [December 15, 2020, 6:24am UTC](https://discuss.elastic.co/t/error-creating-connection-to-oracle/257980 "2020-12-15T06:24:06Z")

</div>

Hi I'm having a lot of problems getting the metricbeat connect to my Oracle database! What ever I'm trying to put in my YML-file I always end up with this error: Error fetching data for metricset oracle.tablespace: er…

---

## [Logstash 5.5 input jdbc schedule problem](https://discuss.elastic.co/t/logstash-5-5-input-jdbc-schedule-problem/95202)

<div class="topic-metadata">

**Author:** [@eldiablo62](https://discuss.elastic.co/u/eldiablo62)\
**Replies:** 9\
**Last updated:** [August 4, 2017, 1:23pm UTC](https://discuss.elastic.co/t/logstash-5-5-input-jdbc-schedule-problem/95202 "2017-08-04T13:23:33Z")

</div>

Hi, I have configured logstash to get data from mysql server and i have scheduled to get data every minute but it’s not working. I think i have made a mistake on my configuration. If somebody can help me :slight\_smile: …

---

## [Extract fields from multiline message](https://discuss.elastic.co/t/extract-fields-from-multiline-message/204843)

<div class="topic-metadata">

**Author:** [@guahos](https://discuss.elastic.co/u/guahos)\
**Replies:** 9\
**Last updated:** [October 24, 2019, 1:49pm UTC](https://discuss.elastic.co/t/extract-fields-from-multiline-message/204843 "2019-10-24T13:49:26Z")

</div>

Hello! I am new to Elastic stack, and currently I'm trying to set up simple visualization for our backup system which is run on rsync scripts. Those scripts provide a good logging, a single backup job log message looks …

---

## [Failed stopping 'elasticsearch-service-x64' service](https://discuss.elastic.co/t/failed-stopping-elasticsearch-service-x64-service/21460)

<div class="topic-metadata">

**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\
**Replies:** 9\
**Last updated:** [January 7, 2015, 10:23am UTC](https://discuss.elastic.co/t/failed-stopping-elasticsearch-service-x64-service/21460 "2015-01-07T10:23:52Z")

</div>

I'm getting this error every time I try to start and stop the elastic search windows service. Takes a couple of minutes then fails. I can kill the task in task manager and then restart but cannot get it to stop o…

---

## [Unable to put dstip\_geoip.location on map](https://discuss.elastic.co/t/unable-to-put-dstip-geoip-location-on-map/72073)

<div class="topic-metadata">

**Author:** [@Frank\_Trezza](https://discuss.elastic.co/u/Frank_Trezza)\
**Replies:** 17\
**Last updated:** [February 1, 2017, 9:32pm UTC](https://discuss.elastic.co/t/unable-to-put-dstip-geoip-location-on-map/72073 "2017-02-01T21:32:03Z")

</div>

In my Logstash.conf file I have the following to parse my sonicwall logs, which is working well and I am getting good data thats geo-coded on the fly, but when using kibana and trying to create a tile map the field doesn…

---

## [ELK - 8.6 (Filebeat to logstash) - only write ops with an op\_type of create are allowed in data streams](https://discuss.elastic.co/t/elk-8-6-filebeat-to-logstash-only-write-ops-with-an-op-type-of-create-are-allowed-in-data-streams/328401)

<div class="topic-metadata">

**Author:** [@Kvoyce2023](https://discuss.elastic.co/u/Kvoyce2023)\
**Replies:** 12\
**Last updated:** [March 29, 2023, 1:54am UTC](https://discuss.elastic.co/t/elk-8-6-filebeat-to-logstash-only-write-ops-with-an-op-type-of-create-are-allowed-in-data-streams/328401 "2023-03-29T01:54:53Z")

</div>

Hello everyone: I got 2 physical server - one got elastic and 2nd one got Logstash & Kibana. I got filebeat running on our customer server from where I am harvesting data from the application log. Below is the error w…

---

## [Couldn't resolve error: java.lang.NoSuchFieldError: FAIL\_ON\_SYMBOL\_HASH\_OVERFLOW- elasticsearch java client api](https://discuss.elastic.co/t/couldnt-resolve-error-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow-elasticsearch-java-client-api/188751)

<div class="topic-metadata">

**Author:** [@ahlem](https://discuss.elastic.co/u/ahlem)\
**Replies:** 14\
**Last updated:** [July 28, 2019, 2:42pm UTC](https://discuss.elastic.co/t/couldnt-resolve-error-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow-elasticsearch-java-client-api/188751 "2019-07-28T14:42:26Z")

</div>

Hello Elastic developer community, I'm trying to implement autocomple feature using elaticsearch 6.2.4 and its java rest client api on my maven web application which is running under glassfish 4.1 despite all my effor…

---

## [Poor performance on brand new cluster](https://discuss.elastic.co/t/poor-performance-on-brand-new-cluster/139919)

<div class="topic-metadata">

**Author:** [@1fe60245fe160bc0f8ab](https://discuss.elastic.co/u/1fe60245fe160bc0f8ab)\
**Replies:** 12\
**Last updated:** [July 26, 2018, 2:12pm UTC](https://discuss.elastic.co/t/poor-performance-on-brand-new-cluster/139919 "2018-07-26T14:12:53Z")

</div>

Hi all, We've set a new elasticsearch cluster to store netflow data. Settings are as following: 4 data nodes, each 32GB RAM (around 40% heap size), 16 cores, 240GB NFS-accessed SSD 3 master nodes 8GB RAM, 2 cores, 20G…

---

## [NEST Library Error - sort field descriptor does not contain a definition for \<property type\> dot net core (2.0)](https://discuss.elastic.co/t/nest-library-error-sort-field-descriptor-does-not-contain-a-definition-for-property-type-dot-net-core-2-0/115974)

<div class="topic-metadata">

**Author:** [@rakesh1](https://discuss.elastic.co/u/rakesh1)\
**Replies:** 15\
**Last updated:** [January 19, 2018, 5:40am UTC](https://discuss.elastic.co/t/nest-library-error-sort-field-descriptor-does-not-contain-a-definition-for-property-type-dot-net-core-2-0/115974 "2018-01-19T05:40:56Z")

</div>

Hi, The following section is giving an compilation error in dot net core (2.0) - vs2017, although the same is working fine in dot net 4.5.1 - vs2015. Error in line - sortDesc = s =\> s.Field(f =\> f.Year, sort.Direction…

---

## [ML Throws errors as soon as click on it](https://discuss.elastic.co/t/ml-throws-errors-as-soon-as-click-on-it/84788)

<div class="topic-metadata">

**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\
**Replies:** 17\
**Last updated:** [May 11, 2017, 11:39am UTC](https://discuss.elastic.co/t/ml-throws-errors-as-soon-as-click-on-it/84788 "2017-05-11T11:39:49Z")

</div>

I've just upgraded to 5.4 so I can play with the ML features. When I click on Machine Learning in Kibana, I get three error banners at the top of the page, 'Jobs list could not be created', 'An internal server error occu…

---

## [ELK 5.2.1 - still can't get geoip working](https://discuss.elastic.co/t/elk-5-2-1-still-cant-get-geoip-working/76420)

<div class="topic-metadata">

**Author:** [@paka](https://discuss.elastic.co/u/paka)\
**Replies:** 17\
**Last updated:** [April 10, 2017, 4:29pm UTC](https://discuss.elastic.co/t/elk-5-2-1-still-cant-get-geoip-working/76420 "2017-04-10T16:29:27Z")

</div>

Hello, I was already asking about this on Jan 12, but with no solution. Meanwhile I have upgraded to ELK 5.2.1 so I tried again, but still can't get geoip working. The logstash filter is minimalistic: …

---

## [Logstash nested json parsing,getting every nested json as seperate field](https://discuss.elastic.co/t/logstash-nested-json-parsing-getting-every-nested-json-as-seperate-field/327956)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 12\
**Last updated:** [March 24, 2023, 11:51am UTC](https://discuss.elastic.co/t/logstash-nested-json-parsing-getting-every-nested-json-as-seperate-field/327956 "2023-03-24T11:51:44Z")

</div>

Hello, After trying several times I'm unable to parse below json string data coming from oracle column called: package\_data.Kindly assist how to get data in elastic to show data like below from given data. {"status":"R…

---

## [Cant load Demo-Data - Tutorial is wrong?](https://discuss.elastic.co/t/cant-load-demo-data-tutorial-is-wrong/85752)

<div class="topic-metadata">

**Author:** [@Rico30](https://discuss.elastic.co/u/Rico30)\
**Replies:** 14\
**Last updated:** [May 29, 2017, 3:52am UTC](https://discuss.elastic.co/t/cant-load-demo-data-tutorial-is-wrong/85752 "2017-05-29T03:52:03Z")

</div>

Hallo, im stuck at the tutorial to load demo data, maybe someone of you can help me to continue: I try this line in console (Kibana): curl -H 'Content-Type: application/x-ndjson' -XPOST 'localhost:9200/bank/account/\_…

---

## [Apm-server not work with jboss 7](https://discuss.elastic.co/t/apm-server-not-work-with-jboss-7/322097)

<div class="topic-metadata">

**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\
**Replies:** 19\
**Last updated:** [January 4, 2023, 7:41am UTC](https://discuss.elastic.co/t/apm-server-not-work-with-jboss-7/322097 "2023-01-04T07:41:49Z")

</div>

Hi setup apm-agent java for jboss server -jboss 7 -elastic-apm-agent-1.35.0.jar -elasticsearch-8.5.3 here is the apm-server.yml vi /etc/apm-server/apm-server.yml output.elasticsearch: hosts: \["localhost:9200"\] u…

---

## [Error restoring state from URL rison decoder error: missing ':'](https://discuss.elastic.co/t/error-restoring-state-from-url-rison-decoder-error-missing/330053)

<div class="topic-metadata">

**Author:** [@carollyl](https://discuss.elastic.co/u/carollyl)\
**Replies:** 10\
**Last updated:** [May 16, 2023, 5:06am UTC](https://discuss.elastic.co/t/error-restoring-state-from-url-rison-decoder-error-missing/330053 "2023-05-16T05:06:38Z")

</div>

Hi, since updated from 6.8.8 to 7.12.0, always get this message "Error restoring state from URL". I have used a scripted field as URL to link one dashboard to another. See below for the URL (sample.com). I've verified w…

---

## [KİBANA URL CHANGE NAME](https://discuss.elastic.co/t/kibana-url-change-name/213351)

<div class="topic-metadata">

**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\
**Replies:** 22\
**Last updated:** [January 13, 2020, 10:52am UTC](https://discuss.elastic.co/t/kibana-url-change-name/213351 "2020-01-13T10:52:25Z")

</div>

Does anyone know if it is possible to change the 'kibana' text in Kibana URL to different name? We are using Kibana 6.3.0 version.

---

## [Can't create winlogbeat-\*](https://discuss.elastic.co/t/cant-create-winlogbeat/100113)

<div class="topic-metadata">

**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\
**Replies:** 16\
**Last updated:** [September 12, 2017, 7:03pm UTC](https://discuss.elastic.co/t/cant-create-winlogbeat/100113 "2017-09-12T19:03:11Z")

</div>

Hi, I have succesfully installed winlogbeat on a Windows Server 2016. Yesterday I was able to create the index for the winlogbeat data. Today I deleted everything and I wanted to start again also with a new index name. …

---

## [Start warinnig](https://discuss.elastic.co/t/start-warinnig/124692)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 9\
**Last updated:** [March 22, 2018, 6:55am UTC](https://discuss.elastic.co/t/start-warinnig/124692 "2018-03-22T06:55:58Z")

</div>

\[2018-03-20T14:25:23,077\]\[INFO \]\[logstash.pipeline \] Starting pipeline {"id"=\>"main", "pipeline.workers"=\>16, "pipeline.batch.size"=\>12500, "pipeline.batch.delay"=\>5, "pipeline.max\_inflight"=\>200000} \[2018-03-20T…

---

## [Mapper-Size Query](https://discuss.elastic.co/t/mapper-size-query/54147)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 12\
**Last updated:** [June 1, 2017, 12:01pm UTC](https://discuss.elastic.co/t/mapper-size-query/54147 "2017-06-01T12:01:55Z")

</div>

Hi, Could someone please comment on the discussion in this thread: Regards, David

---

## [Kibana No monitoring data found](https://discuss.elastic.co/t/kibana-no-monitoring-data-found/313677)

<div class="topic-metadata">

**Author:** [@WenhaoXu](https://discuss.elastic.co/u/WenhaoXu)\
**Replies:** 15\
**Last updated:** [September 16, 2022, 6:46am UTC](https://discuss.elastic.co/t/kibana-no-monitoring-data-found/313677 "2022-09-16T06:46:37Z")

</div>

version : 8.2.3 kibana No monitoring data found get cluster info not found . is it the reason? And GET /\_cat/indices?v&s=index has .monitoring-kibana-7-2022.09.05 .monitoring-es-7-2022.09.05

---

## [Querying "Hash" Values Stored under String Mapping](https://discuss.elastic.co/t/querying-hash-values-stored-under-string-mapping/9443)

<div class="topic-metadata">

**Author:** [@govind201\_2](https://discuss.elastic.co/u/govind201_2)\
**Replies:** 14\
**Last updated:** [October 25, 2012, 11:38am UTC](https://discuss.elastic.co/t/querying-hash-values-stored-under-string-mapping/9443 "2012-10-25T11:38:24Z")

</div>

My index has a field called "features" with mapping type "string" as follows: { "twitter": { "user": { "properties": { "features": { "typ…

---

## [Is this conf file working for csv import?](https://discuss.elastic.co/t/is-this-conf-file-working-for-csv-import/33289)

<div class="topic-metadata">

**Author:** [@GregMeadows](https://discuss.elastic.co/u/GregMeadows)\
**Replies:** 9\
**Last updated:** [November 16, 2015, 4:40pm UTC](https://discuss.elastic.co/t/is-this-conf-file-working-for-csv-import/33289 "2015-11-16T16:40:16Z")

</div>

I am trying to get log stash to monitor a folder to import my csv data load to elastic search and view in Kibana. Logstash/ES/Kibana instances are all up and running but LS does not create the index. "default settings…

---

## [Logs does not show in kibana](https://discuss.elastic.co/t/logs-does-not-show-in-kibana/334519)

<div class="topic-metadata">

**Author:** [@yash2](https://discuss.elastic.co/u/yash2)\
**Replies:** 13\
**Last updated:** [June 26, 2023, 7:54pm UTC](https://discuss.elastic.co/t/logs-does-not-show-in-kibana/334519 "2023-06-26T19:54:18Z")

</div>

Hi - I am having a little trouble pulling the logs to my Elasticsearch; currently, as I am on the main page, from the Discover menu , nothing shows up. I have Winlogbeat and sysmon installed as a service on my Windows ma…

---

## [How to use ElasticSearch hadoop connector to create type automatically from Streaming DataSet\<Row\>?](https://discuss.elastic.co/t/how-to-use-elasticsearch-hadoop-connector-to-create-type-automatically-from-streaming-dataset-row/116779)

<div class="topic-metadata">

**Author:** [@kant\_kodali](https://discuss.elastic.co/u/kant_kodali)\
**Replies:** 17\
**Last updated:** [February 1, 2018, 6:51pm UTC](https://discuss.elastic.co/t/how-to-use-elasticsearch-hadoop-connector-to-create-type-automatically-from-streaming-dataset-row/116779 "2018-02-01T18:51:38Z")

</div>

How to use ElasticSearch hadoop connector to create type automatically from Streaming DataSet ? I have the following code. df .writeStream() .outputMode("append") .trigger(Trigger.ProcessingTime…

---

## [Delay between Logstash and ES? ELK 7.16.1 \[ECK\]](https://discuss.elastic.co/t/delay-between-logstash-and-es-elk-7-16-1-eck/295882)

<div class="topic-metadata">

**Author:** [@rudyfaile](https://discuss.elastic.co/u/rudyfaile)\
**Replies:** 15\
**Last updated:** [February 14, 2022, 7:59pm UTC](https://discuss.elastic.co/t/delay-between-logstash-and-es-elk-7-16-1-eck/295882 "2022-02-14T19:59:30Z")

</div>

Howdy, Similar to and We're experiencing a 1-2 minute delay between logstash and ES and can't figure out why. We're relatively sure the problem is between logstash and ES. If I manually trigger an error it appear…

---

## [Setup snapshot for s3 plugin](https://discuss.elastic.co/t/setup-snapshot-for-s3-plugin/211661)

<div class="topic-metadata">

**Author:** [@dg\_hivebrite](https://discuss.elastic.co/u/dg_hivebrite)\
**Replies:** 15\
**Last updated:** [January 15, 2020, 5:51pm UTC](https://discuss.elastic.co/t/setup-snapshot-for-s3-plugin/211661 "2020-01-15T17:51:14Z")

</div>

Hi, I'm trying to setup the s3 plugin but I have an issue. I don't how to format the secret for aws credentials for the operator. Actually I tried that (with terraform): resource "kubernetes\_secret" "aws\_credentials\_…

---

## [Не удается поменять параметры disk watermark](https://discuss.elastic.co/t/disk-watermark/152194)

<div class="topic-metadata">

**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\
**Replies:** 9\
**Last updated:** [November 14, 2018, 7:42pm UTC](https://discuss.elastic.co/t/disk-watermark/152194 "2018-11-14T19:42:41Z")

</div>

Добрый день. Пытаюсь изменить настройки действий по исчерпанию дисового пространства через API, но мне возращается ошибка: \[admin@client1 ~\]$ curl -X PUT "10.xxx.xxx.xxx:9200/\_cluster/settings?flat\_settings=true" -H 'C…

---

## [Grok for email log](https://discuss.elastic.co/t/grok-for-email-log/171750)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 13\
**Last updated:** [April 1, 2019, 4:35am UTC](https://discuss.elastic.co/t/grok-for-email-log/171750 "2019-04-01T04:35:05Z")

</div>

Can you please help me with building a grok pattern for SMTP log: Example of my smtp log: Return-Path: alok@XXXXXX.in Delivered-To: bigbrother@XXXX.in Received: from n-mail-1.xxxxx.in by n-mail-1.xxxxx.inwith LMTP i…

---

## [Running curator is no longer freeing up space for us](https://discuss.elastic.co/t/running-curator-is-no-longer-freeing-up-space-for-us/108468)

<div class="topic-metadata">

**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\
**Replies:** 15\
**Last updated:** [November 21, 2017, 12:13am UTC](https://discuss.elastic.co/t/running-curator-is-no-longer-freeing-up-space-for-us/108468 "2017-11-21T00:13:01Z")

</div>

elasticsearch 5.3.1 We a single node ES cluster with roughly 600 gig assigned to it. Every so often it would get above the high water mark and I'd run curator usually deleting any indices older than 60 days. In the pa…

---

## [Unable to connect to kibana with a secure cluster](https://discuss.elastic.co/t/unable-to-connect-to-kibana-with-a-secure-cluster/316444)

<div class="topic-metadata">

**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\
**Replies:** 19\
**Last updated:** [October 26, 2022, 12:15pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-kibana-with-a-secure-cluster/316444 "2022-10-26T12:15:22Z")

</div>

Hello everyone, I have configured a cluster of 5 secure nodes with this configuration (adapted on each node :slight\_smile: xpack.security.http.ssl: enabled: true keystore.path: /etc/elasticsearch/new/http.p12 tru…

---

## [Cannot retrieve license. Connection refused](https://discuss.elastic.co/t/cannot-retrieve-license-connection-refused/197563)

<div class="topic-metadata">

**Author:** [@jbuenostein89](https://discuss.elastic.co/u/jbuenostein89)\
**Replies:** 10\
**Last updated:** [September 5, 2019, 6:20pm UTC](https://discuss.elastic.co/t/cannot-retrieve-license-connection-refused/197563 "2019-09-05T18:20:18Z")

</div>

Getting an error while trying to retrieve the license. I confirmed in Kibana that we have an active basic license. We are running everything locally. 2019-08-30T17:28:10.007Z DEBUG \[license-manager\] lic…

---

## [Translate return multiple fields](https://discuss.elastic.co/t/translate-return-multiple-fields/64590)

<div class="topic-metadata">

**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\
**Replies:** 11\
**Last updated:** [November 20, 2016, 4:30pm UTC](https://discuss.elastic.co/t/translate-return-multiple-fields/64590 "2016-11-20T16:30:35Z")

</div>

Hi, I have been using the translate plugin that works great however I have multiple fields that all reference to the one field used for the translate. So is it possible to use the translate plugin to lookup a value again…

---

## [Failed to start Elasticsearch \[7.16.3\] \[Ubuntu 20.04\]](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-16-3-ubuntu-20-04/295991)

<div class="topic-metadata">

**Author:** [@Arkoos62](https://discuss.elastic.co/u/Arkoos62)\
**Replies:** 18\
**Last updated:** [February 3, 2022, 5:56pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-16-3-ubuntu-20-04/295991 "2022-02-03T17:56:58Z")

</div>

Hello there, I have installed Elasticsearch trough the apt on my vps ubuntu 20.04, i just followed the installation guide from here : Install Elasticsearch with Debian Package | Elasticsearch Guide \[7.17\] | Elastic I c…

---

## [Logstash server errors](https://discuss.elastic.co/t/logstash-server-errors/79494)

<div class="topic-metadata">

**Author:** [@rmelton](https://discuss.elastic.co/u/rmelton)\
**Replies:** 9\
**Last updated:** [March 26, 2017, 9:00pm UTC](https://discuss.elastic.co/t/logstash-server-errors/79494 "2017-03-26T21:00:05Z")

</div>

installed ELK stack 5.2.2 on ubuntu 14.04 server image and put 5.2.2 filebeat on 5 other servers to send logs up to logstash. I can curl elasticsearch and login to kibana but my new logstash is flooding errors into log…

---

## [Skip reading historical data in logstash while parsing logs](https://discuss.elastic.co/t/skip-reading-historical-data-in-logstash-while-parsing-logs/129221)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 24\
**Last updated:** [April 25, 2018, 9:58am UTC](https://discuss.elastic.co/t/skip-reading-historical-data-in-logstash-while-parsing-logs/129221 "2018-04-25T09:58:05Z")

</div>

Hi i am reading my logs from s3 bucket, bucket contains data from the month of Jan , when i am running my configuration , logstash is reading all historical data , but i want to read only todays data , how can do that,…

---

## [Elastic Endpoint 8.1 - File locking issues](https://discuss.elastic.co/t/elastic-endpoint-8-1-file-locking-issues/299253)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 19\
**Last updated:** [April 1, 2022, 4:35pm UTC](https://discuss.elastic.co/t/elastic-endpoint-8-1-file-locking-issues/299253 "2022-04-01T16:35:48Z")

</div>

Recently updated to 8.1 being it's only been out for a day... Endpoint is locking certain files which is stalling applications causing huge problems! This forces applications to crash and corrupt databases files. Only w…

---

## [Elastic Search Killed on start up!](https://discuss.elastic.co/t/elastic-search-killed-on-start-up/250737)

<div class="topic-metadata">

**Author:** [@aatif26](https://discuss.elastic.co/u/aatif26)\
**Replies:** 9\
**Last updated:** [October 5, 2020, 6:14pm UTC](https://discuss.elastic.co/t/elastic-search-killed-on-start-up/250737 "2020-10-05T18:14:55Z")

</div>

I just installed elasticsearch 7.9.2 in my centos 7.8.2003. Whenever I run ./bin/elasticsearch it just returns "killed" along with a bunch of warnings. I have referred this for installation. I have 2GB installed memor…

---

## [Pdf等の検索について](https://discuss.elastic.co/t/pdf/57180)

<div class="topic-metadata">

**Author:** [@MMitsuhata](https://discuss.elastic.co/u/MMitsuhata)\
**Replies:** 9\
**Last updated:** [August 10, 2016, 6:48am UTC](https://discuss.elastic.co/t/pdf/57180 "2016-08-10T06:48:41Z")

</div>

はじめまして。 Elasticsearchの使用に関して検討を始めたばかりの初心者です。 Elasticsearchを使用して、PDF等の資料の検索等を検討しております。 ManifoldCF等のクローラーを使用して、PDF等のファイルをElasticsearchへ蓄積はできるのですが、 手作業で、Elasticsearchへ蓄積する場合、Base64で変換し、その後変換したファイルをElasticsearchへ蓄積する方法…

---

## [Logstash how to output the source log path in my message](https://discuss.elastic.co/t/logstash-how-to-output-the-source-log-path-in-my-message/167945)

<div class="topic-metadata">

**Author:** [@fvegaucr1](https://discuss.elastic.co/u/fvegaucr1)\
**Replies:** 16\
**Last updated:** [March 15, 2019, 11:53pm UTC](https://discuss.elastic.co/t/logstash-how-to-output-the-source-log-path-in-my-message/167945 "2019-03-15T23:53:39Z")

</div>

Im trying to get the number of times an ERROR|Error|error or Warn loglevel shows up in my log file and depending of the amount of times it repeats send a email/slack to the service owner with a summary like that CDP-er…

---

## [Failed to create shard, failure IOException\[failed to obtain in-memory shard lock\]](https://discuss.elastic.co/t/failed-to-create-shard-failure-ioexception-failed-to-obtain-in-memory-shard-lock/242323)

<div class="topic-metadata">

**Author:** [@AaronSarkissian](https://discuss.elastic.co/u/AaronSarkissian)\
**Replies:** 10\
**Last updated:** [July 23, 2020, 11:31am UTC](https://discuss.elastic.co/t/failed-to-create-shard-failure-ioexception-failed-to-obtain-in-memory-shard-lock/242323 "2020-07-23T11:31:58Z")

</div>

My cluster setup is 2 nodes, both docker based on different VMs in the same network. My cluster health becomes yellow after few hours it start to get unassigned status one by one, till after a day all the replica shards…

---

## [Purge Data base Elasticsearch](https://discuss.elastic.co/t/purge-data-base-elasticsearch/131738)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 23\
**Last updated:** [June 4, 2018, 8:10pm UTC](https://discuss.elastic.co/t/purge-data-base-elasticsearch/131738 "2018-06-04T20:10:41Z")

</div>

Hi, Pleaaase, can someone tell me, how to purge the Elasticsearch database automatically every week ???

---

## [Start-Service heartbeat fails](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600)

<div class="topic-metadata">

**Author:** [@ppic](https://discuss.elastic.co/u/ppic)\
**Replies:** 27\
**Last updated:** [January 27, 2023, 11:01am UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600 "2023-01-27T11:01:43Z")

</div>

Hello, I have installed heartbeat on a Windows server. When I start the service, it stops immediately. with the command : "Start-Service heartbeat" it says nothing, but I can see with the command "sc.exe query…

---

## [Warm nodes on spinning disks not stable, falling out of cluster during recovery](https://discuss.elastic.co/t/warm-nodes-on-spinning-disks-not-stable-falling-out-of-cluster-during-recovery/250078)

<div class="topic-metadata">

**Author:** [@otoce](https://discuss.elastic.co/u/otoce)\
**Replies:** 33\
**Last updated:** [October 13, 2020, 5:26pm UTC](https://discuss.elastic.co/t/warm-nodes-on-spinning-disks-not-stable-falling-out-of-cluster-during-recovery/250078 "2020-10-13T17:26:18Z")

</div>

Hi, our warms nodes are falling out of cluster while in recovery, and then start recovery from zero. Hot nodes are ok. Env: 4 servers, on each (256GB ram, 8 cpu) : 1 hot node, 64GB, ssd, 30 days of data, heavy input f…

[Previous page](https://discuss.elastic.co/top.md?page=87&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=89&per_page=50&period=all)
