# Top

**URL:** https://discuss.elastic.co/top.md?page=89&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 90

---

## [Random Access & Performance](https://discuss.elastic.co/t/random-access-performance/4882)

<div class="topic-metadata">

**Author:** [@phobos182](https://discuss.elastic.co/u/phobos182)\
**Replies:** 11\
**Last updated:** [July 19, 2011, 4:39pm UTC](https://discuss.elastic.co/t/random-access-performance/4882 "2011-07-19T16:39:57Z")

</div>

A generic question regarding ElasticSearch / Lucene. I have a lot of indexes, and they are very large. I believe we have about 3 Billion documents that need to be searched very quickly. The data has a lot of fields (10-2…

---

## [Filebeat sending json date field as text](https://discuss.elastic.co/t/filebeat-sending-json-date-field-as-text/152353)

<div class="topic-metadata">

**Author:** [@DougC](https://discuss.elastic.co/u/DougC)\
**Replies:** 11\
**Last updated:** [October 15, 2018, 8:23pm UTC](https://discuss.elastic.co/t/filebeat-sending-json-date-field-as-text/152353 "2018-10-15T20:23:38Z")

</div>

Hi. I've been trying to teach myself the Elastic Stack by trying to index data generated by speedtest-cli on my local Ubuntu shell. When I use Logstash to send the results to Elasticsearch the timestamp field comes thr…

---

## [To exclude around 350 fields in JSON in Logstash](https://discuss.elastic.co/t/to-exclude-around-350-fields-in-json-in-logstash/239019)

<div class="topic-metadata">

**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\
**Replies:** 15\
**Last updated:** [July 31, 2020, 5:12am UTC](https://discuss.elastic.co/t/to-exclude-around-350-fields-in-json-in-logstash/239019 "2020-07-31T05:12:43Z")

</div>

Hi, I am trying to exclude many Keys in the JSON field. The data is actually of a Github payload. As the contributors are bit high, the details it carries is also high. For example, the total fields/kvp are around 720 b…

---

## [Rally errors](https://discuss.elastic.co/t/rally-errors/51720)

<div class="topic-metadata">

**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\
**Replies:** 10\
**Last updated:** [June 17, 2016, 5:48am UTC](https://discuss.elastic.co/t/rally-errors/51720 "2016-06-17T05:48:41Z")

</div>

I am trying to get to grips with Rally; I run with a command line of; esrally --pipeline=benchmark-only --target-hosts=localhost:9200 It fails almost immediately with the following exception; Writing additional l…

---

## [Filebeat errors after update to version 7](https://discuss.elastic.co/t/filebeat-errors-after-update-to-version-7/178607)

<div class="topic-metadata">

**Author:** [@cawa](https://discuss.elastic.co/u/cawa)\
**Replies:** 9\
**Last updated:** [May 2, 2019, 2:08pm UTC](https://discuss.elastic.co/t/filebeat-errors-after-update-to-version-7/178607 "2019-05-02T14:08:25Z")

</div>

I get a flood of errors since updating the cluster and filebeat to version 7. My setup consists of a 2 node elasticsearch cluster and a bunch of servers running filebeat with modules (system, auditd and nginx) shipping …

---

## [Message "failed to find message" event.dataset "cisco.asa"](https://discuss.elastic.co/t/message-failed-to-find-message-event-dataset-cisco-asa/232690)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 11\
**Last updated:** [May 29, 2020, 10:09am UTC](https://discuss.elastic.co/t/message-failed-to-find-message-event-dataset-cisco-asa/232690 "2020-05-29T10:09:09Z")

</div>

Hello, I have a problem with displaying parsed logs inside Kibana. I am using Filebeat Cisco module to inser logs from file to Elasticsearch I can see index of Filebeat My Filebeat Cisco module configuration config…

---

## [Curator rpm offline installation](https://discuss.elastic.co/t/curator-rpm-offline-installation/166816)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 11\
**Last updated:** [February 17, 2019, 2:36pm UTC](https://discuss.elastic.co/t/curator-rpm-offline-installation/166816 "2019-02-17T14:36:59Z")

</div>

hi all, I want to install rpm version of curator as offline, could you please advice me about this? Many thanks.

---

## [View metrics shows no data for selected host](https://discuss.elastic.co/t/view-metrics-shows-no-data-for-selected-host/218183)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 21\
**Last updated:** [February 12, 2020, 9:21am UTC](https://discuss.elastic.co/t/view-metrics-shows-no-data-for-selected-host/218183 "2020-02-12T09:21:39Z")

</div>

Hi, I struggle with the "View Metrics" display, which shows no data for a limited user, but for the elastic superuser. The user can see the inventory of the hosts, when opening the Metrics app, he can change to Logs and…

---

## [Logstash 6.5.0 stops shipping logs to ES](https://discuss.elastic.co/t/logstash-6-5-0-stops-shipping-logs-to-es/175477)

<div class="topic-metadata">

**Author:** [@stash2logs](https://discuss.elastic.co/u/stash2logs)\
**Replies:** 22\
**Last updated:** [April 27, 2019, 2:15pm UTC](https://discuss.elastic.co/t/logstash-6-5-0-stops-shipping-logs-to-es/175477 "2019-04-27T14:15:07Z")

</div>

We are running into an issue where the Logstash service is running but the logs are not being shipped to ES. This issue is quite strange as it is random, we would start the logstash instance and after a few hours or som…

---

## [Uptime app 7.9.1 - "Internal server error"](https://discuss.elastic.co/t/uptime-app-7-9-1-internal-server-error/248384)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 12\
**Last updated:** [September 17, 2020, 10:17pm UTC](https://discuss.elastic.co/t/uptime-app-7-9-1-internal-server-error/248384 "2020-09-17T22:17:26Z")

</div>

Hi, Note: I am running ELK 7.9.1. All beats were updated to match same version Recently Uptime app stopped showing data. It used to work fine and I was monitoring a few machines. Now it is showing nothing else but this…

---

## [Error while backing up ES to HDFS via plugin](https://discuss.elastic.co/t/error-while-backing-up-es-to-hdfs-via-plugin/22078)

<div class="topic-metadata">

**Author:** [@Salman](https://discuss.elastic.co/u/Salman)\
**Replies:** 12\
**Last updated:** [February 11, 2016, 1:36pm UTC](https://discuss.elastic.co/t/error-while-backing-up-es-to-hdfs-via-plugin/22078 "2016-02-11T13:36:35Z")

</div>

Hadoop nodes are NOT co-located with ElasticSearch and are on CDH5.1 I installed the plugin \[ elasticsearch/elasticsearch-repository-hdfs/2.0.2\] on all Elasticsearch nodes, and restarted the nodes When I try to s…

---

## [Where to place unicast\_hosts.txt file for cluster setup in ES 6.5](https://discuss.elastic.co/t/where-to-place-unicast-hosts-txt-file-for-cluster-setup-in-es-6-5/181799)

<div class="topic-metadata">

**Author:** [@Suryadip\_Nag](https://discuss.elastic.co/u/Suryadip_Nag)\
**Replies:** 13\
**Last updated:** [May 24, 2019, 6:12am UTC](https://discuss.elastic.co/t/where-to-place-unicast-hosts-txt-file-for-cluster-setup-in-es-6-5/181799 "2019-05-24T06:12:27Z")

</div>

Where to place unicast\_hosts.txt file for cluster setup in ES 6.5? In elasticsearch website (6.5) it is mentioned to put the unicast\_hosts.txt file in below directory: $ES\_PATH\_CONF/discovery-file/unicast\_hosts.txt I …

---

## [No JMX metrics in JBoss EAP 7.3.0](https://discuss.elastic.co/t/no-jmx-metrics-in-jboss-eap-7-3-0/238438)

<div class="topic-metadata">

**Author:** [@sopgreg](https://discuss.elastic.co/u/sopgreg)\
**Replies:** 14\
**Last updated:** [July 3, 2020, 6:10am UTC](https://discuss.elastic.co/t/no-jmx-metrics-in-jboss-eap-7-3-0/238438 "2020-07-03T06:10:40Z")

</div>

Kibana version: 7.7.1 Elasticsearch version: 7.7.1 APM Server version: 7.7.1 APM Agent language and version: Java, 1.17 Browser version: not relevant Original install method (e.g. download page, yum, deb, from sourc…

---

## [Snapshot to GCS repository times out](https://discuss.elastic.co/t/snapshot-to-gcs-repository-times-out/82768)

<div class="topic-metadata">

**Author:** [@David\_Koch](https://discuss.elastic.co/u/David_Koch)\
**Replies:** 13\
**Last updated:** [May 5, 2017, 7:02pm UTC](https://discuss.elastic.co/t/snapshot-to-gcs-repository-times-out/82768 "2017-05-05T19:02:15Z")

</div>

Hello, We never had problems backing up our data to a filesystem type: fs repositories but since migrating to GCS repository snapshots systematically time out with 1 to 3 shards out of 64 not being snapshot correctly a…

---

## [Unable to execute POST request to Kibana](https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992)

<div class="topic-metadata">

**Author:** [@peternijem](https://discuss.elastic.co/u/peternijem)\
**Replies:** 29\
**Last updated:** [September 13, 2020, 7:29am UTC](https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992 "2020-09-13T07:29:12Z")

</div>

Hi, I've built a UI that executes REST API for creating user, role, and a space in Kibana. But, the POST requests fail due to CORS poilicy: In the kibana.yml I have the following: server.cors: true server.cors.or…

---

## [Elasticsearch failed start when enable x-pack security](https://discuss.elastic.co/t/elasticsearch-failed-start-when-enable-x-pack-security/301117)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 12\
**Last updated:** [April 1, 2022, 9:26am UTC](https://discuss.elastic.co/t/elasticsearch-failed-start-when-enable-x-pack-security/301117 "2022-04-01T09:26:02Z")

</div>

first thing first, i just create ssl/tls certificate using Elasticsearch-certutil cert and then i created this configuration into bottom Elasticsearch.yml #xpack xpack.security.enabled: true xpack.security.transport.ss…

---

## [Filebeat performance stall sometimes](https://discuss.elastic.co/t/filebeat-performance-stall-sometimes/222207)

<div class="topic-metadata">

**Author:** [@GhOsTMZ](https://discuss.elastic.co/u/GhOsTMZ)\
**Replies:** 16\
**Last updated:** [April 3, 2020, 10:04am UTC](https://discuss.elastic.co/t/filebeat-performance-stall-sometimes/222207 "2020-04-03T10:04:06Z")

</div>

Hello anyone! I have a some problems with a Filebeat. I collecting logs from a 2 files and send it to a Logstash. Events rate decreasing after a few hours of work. Events rate becomes normal after restart filebeat or co…

---

## [Elasticsearch crashed on development machine, trying to recover](https://discuss.elastic.co/t/elasticsearch-crashed-on-development-machine-trying-to-recover/160548)

<div class="topic-metadata">

**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\
**Replies:** 18\
**Last updated:** [December 18, 2018, 12:05pm UTC](https://discuss.elastic.co/t/elasticsearch-crashed-on-development-machine-trying-to-recover/160548 "2018-12-18T12:05:33Z")

</div>

We have a 3 node elasticsearch/kibana/logstash set up with docker-compose, each node has 8 GB for the Java. I tried working with some firewall rules to secure it a bit, but found out that firewalld (centos) messes up th…

---

## [Unstable operation of elasticsearch](https://discuss.elastic.co/t/unstable-operation-of-elasticsearch/345931)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 19\
**Last updated:** [December 19, 2023, 2:14pm UTC](https://discuss.elastic.co/t/unstable-operation-of-elasticsearch/345931 "2023-12-19T14:14:15Z")

</div>

Hi Team! Recently I began to notice unstable operation of Logstash, I started looking at the logs (I have two Logstash nodes). Here is an example of logs: Oct 27 07:01:17 v-elk-lst01.my logstash\[42023\]: \[2023-10-27T07:…

---

## [Problem upgrade from 6.1.2 to 6.5.4](https://discuss.elastic.co/t/problem-upgrade-from-6-1-2-to-6-5-4/164950)

<div class="topic-metadata">

**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\
**Replies:** 14\
**Last updated:** [January 23, 2019, 7:07pm UTC](https://discuss.elastic.co/t/problem-upgrade-from-6-1-2-to-6-5-4/164950 "2019-01-23T19:07:25Z")

</div>

I upgraded the data nodes (data=true, master=false), and stood up two new master nodes (data=false, master=true). My final step was to bounce the old master node, with the hope a new master (with new version) was electe…

---

## [Watcher reporting basic auth not working, password not saved](https://discuss.elastic.co/t/watcher-reporting-basic-auth-not-working-password-not-saved/108597)

<div class="topic-metadata">

**Author:** [@Tommaso](https://discuss.elastic.co/u/Tommaso)\
**Replies:** 9\
**Last updated:** [November 22, 2017, 3:01pm UTC](https://discuss.elastic.co/t/watcher-reporting-basic-auth-not-working-password-not-saved/108597 "2017-11-22T15:01:53Z")

</div>

Hello, this watcher below is not working for me. Whenever I add the password field, it doesn't get saved. I thought it was only hidden, but running the watcher returns: "Watcher: \[parse\_exception\] password is a required…

---

## [Elasticsearch Keystore not being created](https://discuss.elastic.co/t/elasticsearch-keystore-not-being-created/341120)

<div class="topic-metadata">

**Author:** [@ANUBHAV\_GUPTA](https://discuss.elastic.co/u/ANUBHAV_GUPTA)\
**Replies:** 11\
**Last updated:** [August 20, 2023, 4:30am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-not-being-created/341120 "2023-08-20T04:30:08Z")

</div>

Hi there, So, I am trying to run a simple ES single-node cluster. Here is the Dockerfile:- FROM elasticsearch:8.7.0 COPY . . #this copies the start\_es.sh ENTRYPOINT \["./start\_es.sh"\] The start\_es.sh contains noth…

---

## [Filebeat memory leak associated with failure to open harvesters](https://discuss.elastic.co/t/filebeat-memory-leak-associated-with-failure-to-open-harvesters/123100)

<div class="topic-metadata">

**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\
**Replies:** 14\
**Last updated:** [April 16, 2018, 6:05pm UTC](https://discuss.elastic.co/t/filebeat-memory-leak-associated-with-failure-to-open-harvesters/123100 "2018-04-16T18:05:42Z")

</div>

Hi folks, We recently began having problem with runaway memory leaks in Filebeats (observed on versions 6.1.3 and above) on various versions of Scientific Linux 6.x and CentOS 7.x. It appears to be associated with a pe…

---

## [Knapsack plugin problem](https://discuss.elastic.co/t/knapsack-plugin-problem/40697)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 14\
**Last updated:** [February 5, 2016, 12:08pm UTC](https://discuss.elastic.co/t/knapsack-plugin-problem/40697 "2016-02-05T12:08:28Z")

</div>

Hi @jprante I am trying to copy docs from one index to another index by using knapsack plugin. I have installed the knapsack plugin in dev environment. It has one master node, one data node & 1 client node. I am using …

---

## [Filebeat 8.8.0 error loading template: failed to put data stream: could not put data stream: 400 Bad Request](https://discuss.elastic.co/t/filebeat-8-8-0-error-loading-template-failed-to-put-data-stream-could-not-put-data-stream-400-bad-request/337370)

<div class="topic-metadata">

**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\
**Replies:** 12\
**Last updated:** [July 2, 2023, 11:40am UTC](https://discuss.elastic.co/t/filebeat-8-8-0-error-loading-template-failed-to-put-data-stream-could-not-put-data-stream-400-bad-request/337370 "2023-07-02T11:40:35Z")

</div>

I have installed the filebeat 8.8.0 and by running the filebeat setup -e the index is created in index template but when trying to create a data view the index is not showing there and while running the filebeat setup co…

---

## [Difference between db and elasticsearch](https://discuss.elastic.co/t/difference-between-db-and-elasticsearch/6289)

<div class="topic-metadata">

**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Replies:** 13\
**Last updated:** [January 10, 2012, 9:01am UTC](https://discuss.elastic.co/t/difference-between-db-and-elasticsearch/6289 "2012-01-10T09:01:47Z")

</div>

Please throw some light on this because I am unable to think of reasons why elasticsearch shouldn't just be used as real time database. Since with DB you need to write and then for most part run queries on them. So if…

---

## [Org.elasticsearch.index.engine.EngineClosedException](https://discuss.elastic.co/t/org-elasticsearch-index-engine-engineclosedexception/45904)

<div class="topic-metadata">

**Author:** [@Antoine\_Brun](https://discuss.elastic.co/u/Antoine_Brun)\
**Replies:** 9\
**Last updated:** [April 6, 2016, 4:51pm UTC](https://discuss.elastic.co/t/org-elasticsearch-index-engine-engineclosedexception/45904 "2016-04-06T16:51:39Z")

</div>

Hello, one week ago we upgraded our production cluster (running ES 1.7.5) by adding 2 new data nodes to the 2 existing data node. We also have 3 indexing/search nodes. After adding the 2 new nodes (which are exactly th…

---

## [Not able to execute http request in Filter with JSON Payload](https://discuss.elastic.co/t/not-able-to-execute-http-request-in-filter-with-json-payload/157822)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 13\
**Last updated:** [November 23, 2018, 3:36pm UTC](https://discuss.elastic.co/t/not-able-to-execute-http-request-in-filter-with-json-payload/157822 "2018-11-23T15:36:33Z")

</div>

Hi Not able to execute http request in Filter with JSON Payload Here how my conf file looks like rest { request =\> { url =\>"https://abc.com" method =\> "post" headers =\> { "A…

---

## [Data loading in real time using logstash csv input](https://discuss.elastic.co/t/data-loading-in-real-time-using-logstash-csv-input/69552)

<div class="topic-metadata">

**Author:** [@sabyasachi\_mallick](https://discuss.elastic.co/u/sabyasachi_mallick)\
**Replies:** 9\
**Last updated:** [January 19, 2017, 1:13pm UTC](https://discuss.elastic.co/t/data-loading-in-real-time-using-logstash-csv-input/69552 "2017-01-19T13:13:15Z")

</div>

i am fetching data using a python script and dumping into a csv file. And using that csv file as input in my logstash config file.Each time my python code runs , it opens and overwrites all that csv fil.But sometimes i m…

---

## [Avoiding analysis of query strings](https://discuss.elastic.co/t/avoiding-analysis-of-query-strings/1255)

<div class="topic-metadata">

**Author:** [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Replies:** 9\
**Last updated:** [December 16, 2015, 8:14pm UTC](https://discuss.elastic.co/t/avoiding-analysis-of-query-strings/1255 "2015-12-16T20:14:30Z")

</div>

I’m using a path hierarchy analyzer to analyze fields containing Java class names: "analysis": { "analyzer": { "java\_classname\_analyzer": { "tokenizer": "java\_classname\_tokenizer", "type": "custom" …

---

## [Remove spring DispatcherServlet from transactions](https://discuss.elastic.co/t/remove-spring-dispatcherservlet-from-transactions/187147)

<div class="topic-metadata">

**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\
**Replies:** 20\
**Last updated:** [July 9, 2019, 3:30pm UTC](https://discuss.elastic.co/t/remove-spring-dispatcherservlet-from-transactions/187147 "2019-07-09T15:30:24Z")

</div>

Hi, I have APM setup on a local server, and my agents are installed on some applications that are springboot. Because of this when I look at the transactions page for my app I only see 2 transactions; DispatcherServlet…

---

## [Can i convert latin-1 (ISO8859\_1) into UTF-8 available?](https://discuss.elastic.co/t/can-i-convert-latin-1-iso8859-1-into-utf-8-available/96898)

<div class="topic-metadata">

**Author:** [@Prapat\_Polchan](https://discuss.elastic.co/u/Prapat_Polchan)\
**Replies:** 10\
**Last updated:** [August 17, 2017, 7:14am UTC](https://discuss.elastic.co/t/can-i-convert-latin-1-iso8859-1-into-utf-8-available/96898 "2017-08-17T07:14:23Z")

</div>

i using JDBC input on logstash but can't read latin-1 into elasticsearch anyone can convert guide for me ? this result problem.

---

## [Denormalize data within a log file](https://discuss.elastic.co/t/denormalize-data-within-a-log-file/141277)

<div class="topic-metadata">

**Author:** [@designet](https://discuss.elastic.co/u/designet)\
**Replies:** 24\
**Last updated:** [July 30, 2018, 9:51pm UTC](https://discuss.elastic.co/t/denormalize-data-within-a-log-file/141277 "2018-07-30T21:51:50Z")

</div>

I've got 8000 log files being imported to Logstash via Filebeat. The log files all look something like this: START-OF-LOG: 3.0 LOCATION: DX CALLSIGN: SP1EGN CLUB: SP-CW-C CONTEST: CQ-WW-CW CATEGORY-OPERATOR: SINGLE-OP C…

---

## [Elasticsearch(6.5) HIgh level java rest client Delete an index by name is not working](https://discuss.elastic.co/t/elasticsearch-6-5-high-level-java-rest-client-delete-an-index-by-name-is-not-working/174939)

<div class="topic-metadata">

**Author:** [@Aswini\_Kumar\_Rout](https://discuss.elastic.co/u/Aswini_Kumar_Rout)\
**Replies:** 18\
**Last updated:** [April 5, 2019, 6:19am UTC](https://discuss.elastic.co/t/elasticsearch-6-5-high-level-java-rest-client-delete-an-index-by-name-is-not-working/174939 "2019-04-05T06:19:23Z")

</div>

I can delete an document by passing the index name , type and id like this- DeleteRequest deleteRequest = new DeleteRequest(data.getIndexName(),data.getType(),data.getUniqueId()); DeleteResponse deleteResponse = clie…

---

## [How to get the total of memory and cpu usage of my cluster](https://discuss.elastic.co/t/how-to-get-the-total-of-memory-and-cpu-usage-of-my-cluster/288170)

<div class="topic-metadata">

**Author:** [@Sergio\_Ferreyra](https://discuss.elastic.co/u/Sergio_Ferreyra)\
**Replies:** 10\
**Last updated:** [November 2, 2021, 2:35pm UTC](https://discuss.elastic.co/t/how-to-get-the-total-of-memory-and-cpu-usage-of-my-cluster/288170 "2021-11-02T14:35:12Z")

</div>

Hi team, I am working on Kibana Dashboard trying to get a particular metric. for example, I have 3 kubernetes nodes and I am trying to create a dashboard with the Total of memory and CPU consumption, I am trying with len…

---

## [Kibana Log scale not working for values lower than 1](https://discuss.elastic.co/t/kibana-log-scale-not-working-for-values-lower-than-1/54287)

<div class="topic-metadata">

**Author:** [@Michael\_Aupetit](https://discuss.elastic.co/u/Michael_Aupetit)\
**Replies:** 10\
**Last updated:** [May 11, 2017, 12:40pm UTC](https://discuss.elastic.co/t/kibana-log-scale-not-working-for-values-lower-than-1/54287 "2017-05-11T12:40:30Z")

</div>

When using log scale in line chart with Y values = count, there are two problems: 1) Log scale does not work for values 0 2) The error message is odd telling that it does not work because of values lower than 1. 1) I s…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/308174)

<div class="topic-metadata">

**Author:** [@Badr\_Atouhlaten](https://discuss.elastic.co/u/Badr_Atouhlaten)\
**Replies:** 13\
**Last updated:** [June 28, 2022, 4:25am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/308174 "2022-06-28T04:25:50Z")

</div>

i am getting \[Kibana server is not ready yet\] after reboot server Started Kibana. : \[2022-06-14T11:08:40.458+00:00\]\[INFO \]\[plugins-service\] Plugin "cloudSecurityPosture" is disabled. : \[2022-06-14T11:08:40.498+00:00\]\[…

---

## [How to integrate apm trace id with java logs](https://discuss.elastic.co/t/how-to-integrate-apm-trace-id-with-java-logs/287705)

<div class="topic-metadata">

**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\
**Replies:** 10\
**Last updated:** [October 27, 2021, 7:23pm UTC](https://discuss.elastic.co/t/how-to-integrate-apm-trace-id-with-java-logs/287705 "2021-10-27T19:23:36Z")

</div>

\`Hi Team, How to integrate apm trace id or span id with actual java logs to trace the complete java log.\`

---

## [Elasticsearch Cluster Timeouts](https://discuss.elastic.co/t/elasticsearch-cluster-timeouts/143712)

<div class="topic-metadata">

**Author:** [@Galambos\_Robert](https://discuss.elastic.co/u/Galambos_Robert)\
**Replies:** 13\
**Last updated:** [August 17, 2018, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-timeouts/143712 "2018-08-17T06:56:03Z")

</div>

Hello It's my first topic , so I apreciate any help :slight\_smile: Scenario : I have filebeat installed on multiple windows machines sending data to 3 logstash (ubuntu servers). Filebeat is configured to spread the l…

---

## [S3 input not passing metadata](https://discuss.elastic.co/t/s3-input-not-passing-metadata/191220)

<div class="topic-metadata">

**Author:** [@eclipsed450](https://discuss.elastic.co/u/eclipsed450)\
**Replies:** 16\
**Last updated:** [July 19, 2019, 10:36pm UTC](https://discuss.elastic.co/t/s3-input-not-passing-metadata/191220 "2019-07-19T22:36:43Z")

</div>

Hi, I'm having a weird issue. When logstash pulls messages down from S3 and passes them over to ES, not all of the messages get their S3 metadata key value. Some messages get %{\[@metadata\]\[s3\]\[key\]} as their file field,…

---

## [Marvel 2.1 basic licence. Cannot access cluster data](https://discuss.elastic.co/t/marvel-2-1-basic-licence-cannot-access-cluster-data/39293)

<div class="topic-metadata">

**Author:** [@mole](https://discuss.elastic.co/u/mole)\
**Replies:** 10\
**Last updated:** [August 30, 2016, 3:26pm UTC](https://discuss.elastic.co/t/marvel-2-1-basic-licence-cannot-access-cluster-data/39293 "2016-08-30T15:26:35Z")

</div>

I have an Elastic 2.1.0 cluster, logging to an external Marvel 2.1 with Kibana 4.3.1. All worked fine with trial licenses, but when I updated them with a basic one, all clusters gone grayed out in Kibana and I cannot s…

---

## [Failed to install S3 repository](https://discuss.elastic.co/t/failed-to-install-s3-repository/255566)

<div class="topic-metadata">

**Author:** [@jovan](https://discuss.elastic.co/u/jovan)\
**Replies:** 9\
**Last updated:** [November 17, 2020, 12:08pm UTC](https://discuss.elastic.co/t/failed-to-install-s3-repository/255566 "2020-11-17T12:08:33Z")

</div>

Hi team, recently we upgraded our cluster to be close to latest release. We are using OSS version of stack, with current version 7.9.1: rpm -qa | grep elasticsearch-oss elasticsearch-oss-7.9.1-1.x86\_64 However, we …

---

## [Fingerprint & Aggregate Filter](https://discuss.elastic.co/t/fingerprint-aggregate-filter/125979)

<div class="topic-metadata">

**Author:** [@apatel2848](https://discuss.elastic.co/u/apatel2848)\
**Replies:** 13\
**Last updated:** [April 5, 2018, 2:21am UTC](https://discuss.elastic.co/t/fingerprint-aggregate-filter/125979 "2018-04-05T02:21:32Z")

</div>

How to generate a unique fingerprint for every record retrieved via JDBC plugin? For example, I am retrieving list of invoice line items via a JDBC plugin and using an aggregate filter to group those line items by the in…

---

## [Pipeline is running but index is not created at elasticsearch](https://discuss.elastic.co/t/pipeline-is-running-but-index-is-not-created-at-elasticsearch/333940)

<div class="topic-metadata">

**Author:** [@Yasser\_Alsawy](https://discuss.elastic.co/u/Yasser_Alsawy)\
**Replies:** 30\
**Last updated:** [May 23, 2023, 7:49pm UTC](https://discuss.elastic.co/t/pipeline-is-running-but-index-is-not-created-at-elasticsearch/333940 "2023-05-23T19:49:21Z")

</div>

I'm trying to create an index and loading one log file to Elasticsearch using logstash using below config: input { file { path =\> \["/mnt/c/databalanceInfo\_0.log"\] start\_position =\> "beginning" sincedb\_path =\> "…

---

## [Reporting not working on Kibana under docker](https://discuss.elastic.co/t/reporting-not-working-on-kibana-under-docker/170027)

<div class="topic-metadata">

**Author:** [@kibit86](https://discuss.elastic.co/u/kibit86)\
**Replies:** 18\
**Last updated:** [April 5, 2019, 11:58am UTC](https://discuss.elastic.co/t/reporting-not-working-on-kibana-under-docker/170027 "2019-04-05T11:58:34Z")

</div>

Hi all, I'm experiencing issues with the reporting functionality on my ELK 6.6.0 cluster under docker. Every time I try to create a Report I get the following error: TimeoutError: waiting for selector "\[data-test-subj=…

---

## [Aggregations blowing up client node (OOM)](https://discuss.elastic.co/t/aggregations-blowing-up-client-node-oom/43500)

<div class="topic-metadata">

**Author:** [@Peter\_van\_der\_Weerd](https://discuss.elastic.co/u/Peter_van_der_Weerd)\
**Replies:** 9\
**Last updated:** [March 24, 2016, 9:06am UTC](https://discuss.elastic.co/t/aggregations-blowing-up-client-node-oom/43500 "2016-03-24T09:06:24Z")

</div>

We have a daily index with about 30K unique devices. From Kibana we request the unique counts per day, per version. If the date range is large enough, the client node gets an out of memory, and the node should be restart…

---

## [Gsub can't modify "type" : "ip" to fix string literal error entries for non-ip address info](https://discuss.elastic.co/t/gsub-cant-modify-type-ip-to-fix-string-literal-error-entries-for-non-ip-address-info/91283)

<div class="topic-metadata">

**Author:** [@danno](https://discuss.elastic.co/u/danno)\
**Replies:** 12\
**Last updated:** [June 29, 2017, 3:39pm UTC](https://discuss.elastic.co/t/gsub-cant-modify-type-ip-to-fix-string-literal-error-entries-for-non-ip-address-info/91283 "2017-06-29T15:39:11Z")

</div>

I set field mappings for IP address fields to { "type" : "ip" } and things are great until a logging device (Fortigate) doesn't have an IP address and sends N/A. "error"=\>{"type"=\>"mapper\_parsing\_exception" "reason"=\>"…

---

## [In rollover, Is it possible to update the document of old indexes?](https://discuss.elastic.co/t/in-rollover-is-it-possible-to-update-the-document-of-old-indexes/264512)

<div class="topic-metadata">

**Author:** [@Nikunj210903](https://discuss.elastic.co/u/Nikunj210903)\
**Replies:** 16\
**Last updated:** [February 22, 2021, 3:57am UTC](https://discuss.elastic.co/t/in-rollover-is-it-possible-to-update-the-document-of-old-indexes/264512 "2021-02-22T03:57:41Z")

</div>

Hello community.I have implemented rollover feature of elastic search. It will create a new index every day. Below is my question Is it possible to update the document of old indexes ? I have read somewhere that old in…

---

## [ES Huge Cluster Setup Advice high usage of RAM](https://discuss.elastic.co/t/es-huge-cluster-setup-advice-high-usage-of-ram/90850)

<div class="topic-metadata">

**Author:** [@Ravikumar\_G](https://discuss.elastic.co/u/Ravikumar_G)\
**Replies:** 17\
**Last updated:** [July 23, 2017, 4:23pm UTC](https://discuss.elastic.co/t/es-huge-cluster-setup-advice-high-usage-of-ram/90850 "2017-07-23T16:23:28Z")

</div>

Hi Every one, I'm trying to setup ES Cluster which can able to store lest 3 tb data form 560 Client servers every day of Ingesting in Data nodes Here I have designed basic ES cluster Filebeat t=\> 3 Logstash Se…

---

## [Dropping log lines on log rotation](https://discuss.elastic.co/t/dropping-log-lines-on-log-rotation/125036)

<div class="topic-metadata">

**Author:** [@DDEFISHER](https://discuss.elastic.co/u/DDEFISHER)\
**Replies:** 14\
**Last updated:** [March 23, 2018, 4:14pm UTC](https://discuss.elastic.co/t/dropping-log-lines-on-log-rotation/125036 "2018-03-23T16:14:22Z")

</div>

File beat version: 5.6.3 os: centos Occasionally log data will be missing that appears to come after a log rotate. If we have two files "old\_log" and "new\_log" all log lines from "old\_log" will be present but the firs…

[Previous page](https://discuss.elastic.co/top.md?page=88&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=90&per_page=50&period=all)
