# Top **URL:** https://discuss.elastic.co/top.md?page=886&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 887 --- ## [Waited for 30s and no initial state was set by the discovery](https://discuss.elastic.co/t/waited-for-30s-and-no-initial-state-was-set-by-the-discovery/22271)
**Author:** [@dtuck9](https://discuss.elastic.co/u/dtuck9)\ **Replies:** 1\ **Last updated:** [February 19, 2015, 6:32pm UTC](https://discuss.elastic.co/t/waited-for-30s-and-no-initial-state-was-set-by-the-discovery/22271 "2015-02-19T18:32:36Z")
I know other people have posted this, but I've tried everything that the other threads have said to try. We keep getting this at startup of our java node client: INFO \[2015-02-19 17:57:45,206\] org.elasticsearch.… --- ## [Elastic Defend - Credential Harderning](https://discuss.elastic.co/t/elastic-defend-credential-harderning/342858)
**Author:** [@slash24](https://discuss.elastic.co/u/slash24)\ **Replies:** 1\ **Last updated:** [September 12, 2023, 6:29pm UTC](https://discuss.elastic.co/t/elastic-defend-credential-harderning/342858 "2023-09-12T18:29:07Z")
What does the "Credential hardening"-setting in Elastic Defend-integration do for Windows-endpoints when active? Does it simply set the RunasPPL registry key? We have thirdparty components involved in authentication an… --- ## [Beta: Fielddata](https://discuss.elastic.co/t/beta-fielddata/64332)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 4\ **Last updated:** [November 3, 2016, 4:40pm UTC](https://discuss.elastic.co/t/beta-fielddata/64332 "2016-11-03T16:40:03Z")
So my testing box locked up...had to hard power it down. Now I am seeing this: \[2016-10-28T19:56:19,264\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[scanner\] All shards failed for phase: \[query\] org.elasticsearch.transport… --- ## [Can ElasticSearch sort data that is stored as a linked list?](https://discuss.elastic.co/t/can-elasticsearch-sort-data-that-is-stored-as-a-linked-list/17629)
**Author:** [@Shane\_Claggett](https://discuss.elastic.co/u/Shane_Claggett)\ **Replies:** 4\ **Last updated:** [August 27, 2014, 5:35pm UTC](https://discuss.elastic.co/t/can-elasticsearch-sort-data-that-is-stored-as-a-linked-list/17629 "2014-08-27T17:35:43Z")
Hi all, Is it possible for ES to sort records that are related to one another as a linked list? For example, is there a query that would order the following sample data? \[ { "id":"572bc3df-f567-432e-808… --- ## [Custom nginx module log format error](https://discuss.elastic.co/t/custom-nginx-module-log-format-error/152791)
**Author:** [@damonops](https://discuss.elastic.co/u/damonops)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 10:33am UTC](https://discuss.elastic.co/t/custom-nginx-module-log-format-error/152791 "2018-10-19T10:33:27Z")
my filebeat nginx log format: "\\"?%{IP\_LIST:nginx.access.remote\_ip\_list} - %{DATA:nginx.access.user\_name} \\\\\[%{HTTPDATE:nginx.access.time}\\\\\] \\"%{GREEDYDATA:nginx.access.info}\\" %{NUMBER:nginx.access.response\_code} %{… --- ## [Span queries](https://discuss.elastic.co/t/span-queries/117352)
**Author:** [@Vishal\_Chaurasia](https://discuss.elastic.co/u/Vishal_Chaurasia)\ **Replies:** 3\ **Last updated:** [January 28, 2018, 10:51am UTC](https://discuss.elastic.co/t/span-queries/117352 "2018-01-28T10:51:01Z")
I want to perform span query on different field. Use case is like this, i have firstname and lastname indexed and i want to perform fuzzy search first on firstname and then lastname. --- ## [Bulk API & date index name ingest processor](https://discuss.elastic.co/t/bulk-api-date-index-name-ingest-processor/81708)
**Author:** [@Charles.w](https://discuss.elastic.co/u/Charles.w)\ **Replies:** 3\ **Last updated:** [April 10, 2017, 11:23am UTC](https://discuss.elastic.co/t/bulk-api-date-index-name-ingest-processor/81708 "2017-04-10T11:23:30Z")
Hi, Is there a way to send a bulk (using the bulk api) to a specific ingest pipeline without having to specify an index name ? So far, the current situation can lead to funny things, especially when using the date i… --- ## [Found "Unknown store type \[memory\]" with 2.0.0-beta](https://discuss.elastic.co/t/found-unknown-store-type-memory-with-2-0-0-beta/31352)
**Author:** [@padang](https://discuss.elastic.co/u/padang)\ **Replies:** 3\ **Last updated:** [December 28, 2015, 1:38pm UTC](https://discuss.elastic.co/t/found-unknown-store-type-memory-with-2-0-0-beta/31352 "2015-12-28T13:38:15Z")
Hi, This code works fine with 1.7.0 but not 2.0.0-beta. Is it expected ? builder.settings().put("index.store.type","memory"); Error is: java.lang.IllegalArgumentException: Unknown store type \[memory\] a… --- ## [Elasticsearch startup problemse](https://discuss.elastic.co/t/elasticsearch-startup-problemse/298831)
**Author:** [@zx\_emo](https://discuss.elastic.co/u/zx_emo)\ **Replies:** 5\ **Last updated:** [March 7, 2022, 7:20am UTC](https://discuss.elastic.co/t/elasticsearch-startup-problemse/298831 "2022-03-07T07:20:59Z")
Hello, my Yml file looks like this #xpack.license.self\_generated.type: basic xpack.security.enabled: true #xpack.security.enrollment.enabled: true #xpack.security.enrollment.enabled: true # Enable encryption for HTTP … --- ## [Received Token Response from OP with status \[UNAUTHORIZED\]](https://discuss.elastic.co/t/received-token-response-from-op-with-status-unauthorized/236458)
**Author:** [@mllu](https://discuss.elastic.co/u/mllu)\ **Replies:** 5\ **Last updated:** [June 11, 2020, 3:09pm UTC](https://discuss.elastic.co/t/received-token-response-from-op-with-status-unauthorized/236458 "2020-06-11T15:09:36Z")
Hi, I was trying to integrate elasticsearch and kibana with our Okta. However, I had no luck to make it work. I enabled trace and got some error messages as shown below. It mentioned something like Received Token Respo… --- ## [Completion Suggest - Set Returned Result Size](https://discuss.elastic.co/t/completion-suggest-set-returned-result-size/13832)
**Author:** [@Johny\_Lam](https://discuss.elastic.co/u/Johny_Lam)\ **Replies:** 2\ **Last updated:** [October 3, 2013, 6:11pm UTC](https://discuss.elastic.co/t/completion-suggest-set-returned-result-size/13832 "2013-10-03T18:11:43Z")
Is there some way to configure the number of results that's returned by using completion suggestion? I looked at http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-suggesters-completion… --- ## [Export Index Patterns with all mapping properties / fields](https://discuss.elastic.co/t/export-index-patterns-with-all-mapping-properties-fields/205609)
**Author:** [@thesprvzr](https://discuss.elastic.co/u/thesprvzr)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 3:44pm UTC](https://discuss.elastic.co/t/export-index-patterns-with-all-mapping-properties-fields/205609 "2019-10-29T15:44:09Z")
Hey, I need to export all saved objects from my ES and Kibana environment and import them to a different instance of Kibana and ES. When I did that using the bulk get Objects API, the exported index patterns included on… --- ## [Disable filebeat console output](https://discuss.elastic.co/t/disable-filebeat-console-output/128352)
**Author:** [@terminaattori](https://discuss.elastic.co/u/terminaattori)\ **Replies:** 1\ **Last updated:** [April 17, 2018, 1:25pm UTC](https://discuss.elastic.co/t/disable-filebeat-console-output/128352 "2018-04-17T13:25:03Z")
Hey! I'm having trouble disabling my filebeat's console output. I have stated in my filebeat.yml that console output should be enabled but it doesn't work. Do I need to configure it somewhere else as well as to the file… --- ## [Logstash failed to stop the service](https://discuss.elastic.co/t/logstash-failed-to-stop-the-service/63958)
**Author:** [@bopa](https://discuss.elastic.co/u/bopa)\ **Replies:** 1\ **Last updated:** [October 26, 2016, 5:50am UTC](https://discuss.elastic.co/t/logstash-failed-to-stop-the-service/63958 "2016-10-26T05:50:24Z")
I'm experiencing the logstash service failed to start after I issue systemctl restart logstash Output: systemctl status logstash ● logstash.service - LSB: Starts Logstash as a daemon. \*\* Loaded: loaded (/etc/rc.… --- ## [Logstash + Split filepath with backslash \\](https://discuss.elastic.co/t/logstash-split-filepath-with-backslash/49806)
**Author:** [@sarthak2016](https://discuss.elastic.co/u/sarthak2016)\ **Replies:** 1\ **Last updated:** [May 11, 2016, 5:55pm UTC](https://discuss.elastic.co/t/logstash-split-filepath-with-backslash/49806 "2016-05-11T17:55:37Z")
Hello All, I am facing a issue to split the filepath with backslash, Below is my code for split filepath with \\ Logstash Code input { file { path =\> "C:\\logstash-2.3.1\\CSV\\SQL.csv" type=\>"sql" } } … --- ## [Using strings for Kibana search?](https://discuss.elastic.co/t/using-strings-for-kibana-search/121764)
**Author:** [@jmgarcia](https://discuss.elastic.co/u/jmgarcia)\ **Replies:** 6\ **Last updated:** [March 1, 2018, 6:03pm UTC](https://discuss.elastic.co/t/using-strings-for-kibana-search/121764 "2018-03-01T18:03:18Z")
Hey fellas,, I am sorry but I have used google, youtube, etc as much as I can before posting on here but I really need some help. I have a fair amount of strings ex: (device: foo1 AND device foo2( OR device: foo3) AND p… --- ## [Graphs in Kibana](https://discuss.elastic.co/t/graphs-in-kibana/60010)
**Author:** [@deepak727](https://discuss.elastic.co/u/deepak727)\ **Replies:** 6\ **Last updated:** [September 10, 2016, 10:55am UTC](https://discuss.elastic.co/t/graphs-in-kibana/60010 "2016-09-10T10:55:01Z")
Hi there, I am using elk stack for log monitoring and visualization. Now I am monitoring pfsense and freenas with collectd which ships logs to logstash and after that it goes to elasticsearch, every thing works perfe… --- ## [Your browser does not meet the security requirements for kibana?](https://discuss.elastic.co/t/your-browser-does-not-meet-the-security-requirements-for-kibana/299813)
**Author:** [@pinehk](https://discuss.elastic.co/u/pinehk)\ **Replies:** 1\ **Last updated:** [March 16, 2022, 7:31am UTC](https://discuss.elastic.co/t/your-browser-does-not-meet-the-security-requirements-for-kibana/299813 "2022-03-16T07:31:30Z")
There is a small popup with the message "your browser does not meet the security requirements for kibana" everytime opening Kibana. From related posts it seems to be complaining a non-CSP compliant browser and especially… --- ## [exception=\>"Java::JavaNet::URISyntaxException", :message=\>"Illegal character in path at index 0: \[\\"esi1\\",\\"esi2\\"\]"](https://discuss.elastic.co/t/exception-java-urisyntaxexception-message-illegal-character-in-path-at-index-0-esi1-esi2/165456)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [January 23, 2019, 5:57pm UTC](https://discuss.elastic.co/t/exception-java-urisyntaxexception-message-illegal-character-in-path-at-index-0-esi1-esi2/165456 "2019-01-23T17:57:43Z")
Hello, I'm running Logstash with Environment variable configuration. I'm also trying to follow Using Environment Variables in the Configuration to define Elasticsearch output plugin. my environment variable: # grep HO… --- ## [String interpolation for HTTP output message format](https://discuss.elastic.co/t/string-interpolation-for-http-output-message-format/34917)
**Author:** [@ak0ska](https://discuss.elastic.co/u/ak0ska)\ **Replies:** 4\ **Last updated:** [November 20, 2015, 10:12am UTC](https://discuss.elastic.co/t/string-interpolation-for-http-output-message-format/34917 "2015-11-20T10:12:41Z")
Hello, I am trying to send some data gathered with the JDBC input plugin to an HTTP endpoint. I have to make my POST body match a certain specification, and so I use message format for the HTTP output plugin. This i… --- ## [How to avoid false positive \[Updated\]](https://discuss.elastic.co/t/how-to-avoid-false-positive-updated/135006)
**Author:** [@genPz01](https://discuss.elastic.co/u/genPz01)\ **Replies:** 3\ **Last updated:** [June 12, 2018, 4:04pm UTC](https://discuss.elastic.co/t/how-to-avoid-false-positive-updated/135006 "2018-06-12T16:04:38Z")
Hi, Elastic.co claims that ML reduces false positive but doesn't tell how. To explain my question let's consider this scenario: My aim is to monitor -using ML and ELK stack- a Java application installed on a Linux Hos… --- ## [Vega Plugin: Use input signal in query](https://discuss.elastic.co/t/vega-plugin-use-input-signal-in-query/132053)
**Author:** [@Keff](https://discuss.elastic.co/u/Keff)\ **Replies:** 3\ **Last updated:** [May 17, 2018, 5:17am UTC](https://discuss.elastic.co/t/vega-plugin-use-input-signal-in-query/132053 "2018-05-17T05:17:24Z")
I have a vega visualization with an input signal (dropdown). I want to use this value to update the query to elastic and set the size parameter. ... "signals": \[ { "name": "points", "value": 10, "bind": {"input":… --- ## [Aggregation facility in the detections rules tab?](https://discuss.elastic.co/t/aggregation-facility-in-the-detections-rules-tab/235080)
**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\ **Replies:** 1\ **Last updated:** [June 5, 2020, 4:48pm UTC](https://discuss.elastic.co/t/aggregation-facility-in-the-detections-rules-tab/235080 "2020-06-05T16:48:00Z")
can we write aggregation in the detection rules tab?. if not, is it a planned feature? --- ## [Scroll api error in 5.3](https://discuss.elastic.co/t/scroll-api-error-in-5-3/81019)
**Author:** [@Guru\_Prashanth](https://discuss.elastic.co/u/Guru_Prashanth)\ **Replies:** 1\ **Last updated:** [April 3, 2017, 4:29pm UTC](https://discuss.elastic.co/t/scroll-api-error-in-5-3/81019 "2017-04-03T16:29:41Z")
{ \[Error: \[illegal\_argument\_exception\] Failed to parse request body\] status: 400, displayName: 'BadRequest', message: '\[illegal\_argument\_exception\] Failed to parse request body', path: '/\_search/scroll', quer… --- ## [How can I monitor MSSQL with network traffic the same time with packetbeat?](https://discuss.elastic.co/t/how-can-i-monitor-mssql-with-network-traffic-the-same-time-with-packetbeat/49038)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 1\ **Last updated:** [May 3, 2016, 11:58am UTC](https://discuss.elastic.co/t/how-can-i-monitor-mssql-with-network-traffic-the-same-time-with-packetbeat/49038 "2016-05-03T11:58:20Z")
I would wonder how can I do that. Is it a must for me to install logstash in order to do that or I can just directly communicate with elasticsearch? The folowing is my json file for packetbeat { "mappings": { "defa… --- ## [How to loop or iterate in Logstash output plugin](https://discuss.elastic.co/t/how-to-loop-or-iterate-in-logstash-output-plugin/142991)
**Author:** [@pushanbhattacharya](https://discuss.elastic.co/u/pushanbhattacharya)\ **Replies:** 2\ **Last updated:** [August 15, 2018, 9:38pm UTC](https://discuss.elastic.co/t/how-to-loop-or-iterate-in-logstash-output-plugin/142991 "2018-08-15T21:38:00Z")
So, if I have prepared a list or array of string data in LogStash filter using ElasticSearch plugin. I can save that array or list directly in another elasticsearch index from logstash output plugin. But that list actua… --- ## [Dead Letter Queue can't be enabled](https://discuss.elastic.co/t/dead-letter-queue-cant-be-enabled/121447)
**Author:** [@manya12](https://discuss.elastic.co/u/manya12)\ **Replies:** 2\ **Last updated:** [March 5, 2018, 12:12pm UTC](https://discuss.elastic.co/t/dead-letter-queue-cant-be-enabled/121447 "2018-03-05T12:12:34Z")
Hi Team, I am trying to use dead letter queue feature and want to create a new index for dlq input events. Here are my configurations: in logstash.yml: path.data: /usr/share/logstash/data dead\_letter\_queue.enable: t… --- ## [Monitoring from remote cluster with X-Pack Basic license](https://discuss.elastic.co/t/monitoring-from-remote-cluster-with-x-pack-basic-license/85811)
**Author:** [@data.dev](https://discuss.elastic.co/u/data.dev)\ **Replies:** 2\ **Last updated:** [May 17, 2017, 8:14pm UTC](https://discuss.elastic.co/t/monitoring-from-remote-cluster-with-x-pack-basic-license/85811 "2017-05-17T20:14:21Z")
I have two Elasticsearch clusters PROD (for production) and OPS (for operational), both configured with an X-Pack Basic license. I'm running Elasticsearch version 5.3.0. I'm trying to configure PROD to report monitori… --- ## [How to disable automatic creation of document types?](https://discuss.elastic.co/t/how-to-disable-automatic-creation-of-document-types/32573)
**Author:** [@mos](https://discuss.elastic.co/u/mos)\ **Replies:** 2\ **Last updated:** [October 21, 2015, 9:04am UTC](https://discuss.elastic.co/t/how-to-disable-automatic-creation-of-document-types/32573 "2015-10-21T09:04:46Z")
We need to prevent creating new types in a specific index? Dynamic index creation can be disabled via: action.auto\_create\_index: false (via config/elasticsearch.yml) Dynamic field mapping can be disable during mapping… --- ## [Filebeat not pushing to elastic - docker compose](https://discuss.elastic.co/t/filebeat-not-pushing-to-elastic-docker-compose/205427)
**Author:** [@Neal\_Derman](https://discuss.elastic.co/u/Neal_Derman)\ **Replies:** 5\ **Last updated:** [October 29, 2019, 1:06pm UTC](https://discuss.elastic.co/t/filebeat-not-pushing-to-elastic-docker-compose/205427 "2019-10-29T13:06:20Z")
I'm trying to get filebeat data to elastic. I've followed the instructions and I have filebeat running in a container. I'd ultimately like it to grab stdout from my other containers and push that to elastic.co but first … --- ## [Post 6.3 Upgrade Issue: "Config: Failed to fetch"](https://discuss.elastic.co/t/post-6-3-upgrade-issue-config-failed-to-fetch/136189)
**Author:** [@Patrick\_Maroney](https://discuss.elastic.co/u/Patrick_Maroney)\ **Replies:** 5\ **Last updated:** [June 18, 2018, 4:16pm UTC](https://discuss.elastic.co/t/post-6-3-upgrade-issue-config-failed-to-fetch/136189 "2018-06-18T16:16:26Z")
Can't save any Configuration changes post 6.3 upgrade. Dead in the water as Kibana does not remember Default index, etc. and can't set/save same. Sequence (1) Just did a normal sudo apt-get update and upgrade on Ubunt… --- ## [Lost in tutorial, Windows](https://discuss.elastic.co/t/lost-in-tutorial-windows/76344)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 5\ **Last updated:** [March 5, 2017, 4:37pm UTC](https://discuss.elastic.co/t/lost-in-tutorial-windows/76344 "2017-03-05T16:37:19Z")
I didn't know in which category this should fit... anyway, I'm trying to get started on Elastic and found this page after watching a video. At the bottom is a quick tutorial that got me to Kibana on the browser... after… --- ## [Are any of Elastic's products affected by CVE-2022-22965?](https://discuss.elastic.co/t/are-any-of-elastics-products-affected-by-cve-2022-22965/301576)
**Author:** [@xxgogogo](https://discuss.elastic.co/u/xxgogogo)\ **Replies:** 3\ **Last updated:** [April 15, 2022, 2:08pm UTC](https://discuss.elastic.co/t/are-any-of-elastics-products-affected-by-cve-2022-22965/301576 "2022-04-15T14:08:52Z")
Hi, Are any of Elastic's products(Elasticsearch, Kibana, and so on) affected by CVE-2022-22965? Link: https://tanzu.vmware.com/security/cve-2022-22965 Thanks! --- ## [Does Elasticsearch fit my project?](https://discuss.elastic.co/t/does-elasticsearch-fit-my-project/265721)
**Author:** [@duck](https://discuss.elastic.co/u/duck)\ **Replies:** 3\ **Last updated:** [February 28, 2021, 3:12pm UTC](https://discuss.elastic.co/t/does-elasticsearch-fit-my-project/265721 "2021-02-28T15:12:42Z")
Hi, I've been working on a project for a while. Recently, we've decided to build a system for logging and analyzing. About Project It's an online game project and type is MMORPG. Since it's a MMORPG, there'd be billion… --- ## [Using ILM: error's on more then one write index](https://discuss.elastic.co/t/using-ilm-errors-on-more-then-one-write-index/272804)
**Author:** [@robbert](https://discuss.elastic.co/u/robbert)\ **Replies:** 3\ **Last updated:** [August 3, 2021, 11:15pm UTC](https://discuss.elastic.co/t/using-ilm-errors-on-more-then-one-write-index/272804 "2021-08-03T23:15:21Z")
Greetings, Currently i am in the process of migrating our ELK instance from manual index deletion to using ILM policy, however filebeat is sending logs to logstash but the following error is shown in the logs of logstas… --- ## [Showing document fields as tooltips](https://discuss.elastic.co/t/showing-document-fields-as-tooltips/262760)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 3\ **Last updated:** [January 31, 2021, 8:07pm UTC](https://discuss.elastic.co/t/showing-document-fields-as-tooltips/262760 "2021-01-31T20:07:11Z")
I'm missing something obvious here, I know I am, but I have struggled to find an answer. I have a small index of 20 documents in ES 7.10.2 with a GeoPoint in the top level, with other fields stored as objects and nested… --- ## [Restarting cluster takes long time. Update mapping times out](https://discuss.elastic.co/t/restarting-cluster-takes-long-time-update-mapping-times-out/144930)
**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\ **Replies:** 3\ **Last updated:** [August 21, 2018, 8:48am UTC](https://discuss.elastic.co/t/restarting-cluster-takes-long-time-update-mapping-times-out/144930 "2018-08-21T08:48:48Z")
Whenever I restart my cluster completely, do a rolling restart or a node simply disconnects from the cluster due to a network hickup a lengthy recovery process is started that can take multiple hours to complete. All sha… --- ## [Unable to install Timelion on Ubuntu 14.04](https://discuss.elastic.co/t/unable-to-install-timelion-on-ubuntu-14-04/38593)
**Author:** [@Hugo](https://discuss.elastic.co/u/Hugo)\ **Replies:** 3\ **Last updated:** [January 13, 2016, 2:48pm UTC](https://discuss.elastic.co/t/unable-to-install-timelion-on-ubuntu-14-04/38593 "2016-01-13T14:48:50Z")
Hi, I've followed the tutorial How To Install Elasticsearch, Logstash, and Kibana (ELK Stack) on Ubuntu 14.04 | DigitalOcean to install ELK in a Ubuntu machine and its working fine. Then I've tried to install timelion… --- ## [Logstash, how to avoid output block when one elasticsearch node go down](https://discuss.elastic.co/t/logstash-how-to-avoid-output-block-when-one-elasticsearch-node-go-down/247419)
**Author:** [@daniele.lopez](https://discuss.elastic.co/u/daniele.lopez)\ **Replies:** 6\ **Last updated:** [September 18, 2020, 9:54am UTC](https://discuss.elastic.co/t/logstash-how-to-avoid-output-block-when-one-elasticsearch-node-go-down/247419 "2020-09-18T09:54:25Z")
Hi all, I have an elasticsearch cluster with 3 nodes. is a really basic cluster. On each node i have one logstash pointing to cluster nodes. If a node go down all logstash output fail, even if i have the master node u… --- ## [Nest cutting off trailing zero](https://discuss.elastic.co/t/nest-cutting-off-trailing-zero/195264)
**Author:** [@plawler92](https://discuss.elastic.co/u/plawler92)\ **Replies:** 6\ **Last updated:** [August 16, 2019, 1:35pm UTC](https://discuss.elastic.co/t/nest-cutting-off-trailing-zero/195264 "2019-08-16T13:35:28Z")
I have Latitude and Longitude fields in my index stored as double that can contain trailing zero's which we treat as important ex: 37.15580. When I query elasticsearch through curl or kibana this field correctly returns… --- ## [Visualize Map Problems](https://discuss.elastic.co/t/visualize-map-problems/88107)
**Author:** [@lewis15](https://discuss.elastic.co/u/lewis15)\ **Replies:** 6\ **Last updated:** [June 8, 2017, 12:42pm UTC](https://discuss.elastic.co/t/visualize-map-problems/88107 "2017-06-08T12:42:39Z")
Winlogbeat-\* index has geoip.location as number Using the guide https://www.elastic.co/blog/monitoring-windows-logons-with-winlogbeat geoip.location was empty when examining event logs 4624. After following the instruct… --- ## [Indexing RabbitMQ queues](https://discuss.elastic.co/t/indexing-rabbitmq-queues/5725)
**Author:** [@lyes\_zaiko](https://discuss.elastic.co/u/lyes_zaiko)\ **Replies:** 6\ **Last updated:** [November 23, 2016, 10:27am UTC](https://discuss.elastic.co/t/indexing-rabbitmq-queues/5725 "2016-11-23T10:27:45Z")
Hello all! Is there any documentation about how to index data contained in a RabbitMQ Queue? thanks --- ## [Need Help in converting Julian date in to Calender date](https://discuss.elastic.co/t/need-help-in-converting-julian-date-in-to-calender-date/44140)
**Author:** [@Pavithrananda\_Prabhu](https://discuss.elastic.co/u/Pavithrananda_Prabhu)\ **Replies:** 1\ **Last updated:** [March 12, 2016, 9:01pm UTC](https://discuss.elastic.co/t/need-help-in-converting-julian-date-in-to-calender-date/44140 "2016-03-12T21:01:10Z")
Need help in converting Julian date in to Calender date Below is the sample Syslog message from the mainframe N C000000 PROD 15307 23:58:19.27 JOB78042 00000004 $HASP101 OGIVJS11 HELD would like to convert 15… --- ## [The performance of Script Based Sorting in ES 7.4.2 verison is very poor](https://discuss.elastic.co/t/the-performance-of-script-based-sorting-in-es-7-4-2-verison-is-very-poor/261241)
**Author:** [@PandaXu](https://discuss.elastic.co/u/PandaXu)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 5:55am UTC](https://discuss.elastic.co/t/the-performance-of-script-based-sorting-in-es-7-4-2-verison-is-very-poor/261241 "2021-01-18T05:55:09Z")
Hello, all, Recently , We compare the query performance of two versions of ES cluster. One is 5.3.2, and the other is 7.4.2. The index settings, mapping and the amout of data , is exactly the same.I find that the que… --- ## [Correlate two indexes](https://discuss.elastic.co/t/correlate-two-indexes/151445)
**Author:** [@Bjorn\_Timmer](https://discuss.elastic.co/u/Bjorn_Timmer)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 11:56am UTC](https://discuss.elastic.co/t/correlate-two-indexes/151445 "2018-10-25T11:56:08Z")
Hi, I'm pretty new to ELK and I was hoping to get some help with a use case I have. From our network we collect data in elasticsearch with netflow and we have a openvpn server from which we collect the logging with bea… --- ## [Performance of NativeScripts](https://discuss.elastic.co/t/performance-of-nativescripts/40017)
**Author:** [@dmitriy\_olshanskiy](https://discuss.elastic.co/u/dmitriy_olshanskiy)\ **Replies:** 2\ **Last updated:** [February 10, 2016, 12:51pm UTC](https://discuss.elastic.co/t/performance-of-nativescripts/40017 "2016-02-10T12:51:30Z")
Is it expected to have script-based sorting much slower then field-based sorting? (x4 times slower then field-based in my tests) Is there any fundamental performance problem in processing - i.e. why the limitation to one… --- ## [ANNOUNCEMENT - Upgrade of Webpack Version](https://discuss.elastic.co/t/announcement-upgrade-of-webpack-version/105975)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [November 1, 2017, 4:11am UTC](https://discuss.elastic.co/t/announcement-upgrade-of-webpack-version/105975 "2017-11-01T04:11:44Z")
Kibana is upgrading to the most recent version of Webpack (3). This should improve build times when restarting the optimizer and should also address the issues some users have been having with node running out of memory. … --- ## [Collect logs from AWS Fargate application to Elastic Cloud](https://discuss.elastic.co/t/collect-logs-from-aws-fargate-application-to-elastic-cloud/344223)
**Author:** [@georgms](https://discuss.elastic.co/u/georgms)\ **Replies:** 5\ **Last updated:** [December 4, 2023, 7:52pm UTC](https://discuss.elastic.co/t/collect-logs-from-aws-fargate-application-to-elastic-cloud/344223 "2023-12-04T19:52:10Z")
I have an application running on AWS Fargate. I have already added the Elastic APM agent to the application so I get metrics, transactions etc. but no log yet. So how do I collect logs from an AWS Fargate application to… --- ## [Missing events when shipping Cloudtrail logs with Filebeat and the AWS module](https://discuss.elastic.co/t/missing-events-when-shipping-cloudtrail-logs-with-filebeat-and-the-aws-module/239838)
**Author:** [@m1kel](https://discuss.elastic.co/u/m1kel)\ **Replies:** 8\ **Last updated:** [July 15, 2020, 1:40am UTC](https://discuss.elastic.co/t/missing-events-when-shipping-cloudtrail-logs-with-filebeat-and-the-aws-module/239838 "2020-07-15T01:40:45Z")
I've configured a POC of Filebeat ingestion of Cloudtrail logs into our Elastic Cloud. I see the events and can see that the SQS queue is being processed. However, when looking closely, I can spot that not all of the ev… --- ## [Topbeat / Graylog is just displaying 0 for percentage](https://discuss.elastic.co/t/topbeat-graylog-is-just-displaying-0-for-percentage/38039)
**Author:** [@mbuyukkarakas](https://discuss.elastic.co/u/mbuyukkarakas)\ **Replies:** 5\ **Last updated:** [December 30, 2015, 11:52am UTC](https://discuss.elastic.co/t/topbeat-graylog-is-just-displaying-0-for-percentage/38039 "2015-12-30T11:52:28Z")
Hi everybody I just started to use topbeat on my test Win7 PC. I forwarded logs via Logstash to Graylog. But it's only showing 0 for percentage (\_p) fields. My config is ; Win7 Sp1 Graylog 2.4 Topbeat 1 I wonder a… [Previous page](https://discuss.elastic.co/top.md?page=885&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=887&per_page=50&period=all)