# Top **URL:** https://discuss.elastic.co/top.md?page=896&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 897 --- ## [MetricBeat - how to define Elasticsearch JVM metrics](https://discuss.elastic.co/t/metricbeat-how-to-define-elasticsearch-jvm-metrics/126756)
**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\ **Replies:** 7\ **Last updated:** [April 6, 2018, 11:46am UTC](https://discuss.elastic.co/t/metricbeat-how-to-define-elasticsearch-jvm-metrics/126756 "2018-04-06T11:46:26Z")
Hello to everyone. I want to know how to define Elasticsearch JVM heap usage in percentage and number of garbage collectors per some period of time. I have already configure Elasticsearch module for Metricbeat and saw … --- ## [Filebeat can't pull to lofstash with x-pack](https://discuss.elastic.co/t/filebeat-cant-pull-to-lofstash-with-x-pack/104487)
**Author:** [@Dees7](https://discuss.elastic.co/u/Dees7)\ **Replies:** 7\ **Last updated:** [October 30, 2017, 12:50pm UTC](https://discuss.elastic.co/t/filebeat-cant-pull-to-lofstash-with-x-pack/104487 "2017-10-30T12:50:55Z")
I installed x-pack to elastic, logstash, kibana and now filebeat can't sent to logstash: ERR Connecting error publishing events (retrying): read tcp 192.168.100.2:54230-\>192.168.100.2:5044: i/o timeout I configure fil… --- ## [Custom pattern problems in the grok filter](https://discuss.elastic.co/t/custom-pattern-problems-in-the-grok-filter/26221)
**Author:** [@simonrisberg](https://discuss.elastic.co/u/simonrisberg)\ **Replies:** 1\ **Last updated:** [July 24, 2015, 8:14pm UTC](https://discuss.elastic.co/t/custom-pattern-problems-in-the-grok-filter/26221 "2015-07-24T20:14:00Z")
Hi! I'm currently using two different custom patterns that I've made in my logstash config. One pattern serves the purpose of filter a certain word in a filepath in the event message in every log and take out that par… --- ## [TSVB Table - Using Timepicker Duration as Interval](https://discuss.elastic.co/t/tsvb-table-using-timepicker-duration-as-interval/218826)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 2\ **Last updated:** [February 27, 2020, 9:28pm UTC](https://discuss.elastic.co/t/tsvb-table-using-timepicker-duration-as-interval/218826 "2020-02-27T21:28:11Z")
I have some TSVB data tables (Kibana 7.4.2) I'm trying to modify to use a dynamically selected interval (timepicker range) for, and I can't find how to properly call this interval in Painless. I currently have network d… --- ## [It's possible read data from Elasticsearch to postgres inside a pgsql function? How?](https://discuss.elastic.co/t/its-possible-read-data-from-elasticsearch-to-postgres-inside-a-pgsql-function-how/90513)
**Author:** [@parentemj](https://discuss.elastic.co/u/parentemj)\ **Replies:** 2\ **Last updated:** [June 23, 2017, 9:04am UTC](https://discuss.elastic.co/t/its-possible-read-data-from-elasticsearch-to-postgres-inside-a-pgsql-function-how/90513 "2017-06-23T09:04:58Z")
HI it's possible read data from elasticsearch "inside" a pgsql function (i need read some data and write them in a DB Table (postgres)). all the information i finded is about write data from postgres DB to ElasticS… --- ## [Logstash filters for VMware VPXA logs](https://discuss.elastic.co/t/logstash-filters-for-vmware-vpxa-logs/54769)
**Author:** [@Geezer](https://discuss.elastic.co/u/Geezer)\ **Replies:** 0\ **Last updated:** [July 5, 2016, 5:38pm UTC](https://discuss.elastic.co/t/logstash-filters-for-vmware-vpxa-logs/54769 "2016-07-05T17:38:07Z")
Hello, We are ingesting vmware vpxa logs from our ESX servers into Elasticsearch but parsing is problematic as every agent on the ESX servers seems to have a different message format. Sexilog produced an ELK applian… --- ## [Lumberjack output plugin posts duplicate entries when there is a connection error](https://discuss.elastic.co/t/lumberjack-output-plugin-posts-duplicate-entries-when-there-is-a-connection-error/149615)
**Author:** [@manz](https://discuss.elastic.co/u/manz)\ **Replies:** 4\ **Last updated:** [October 3, 2018, 6:32am UTC](https://discuss.elastic.co/t/lumberjack-output-plugin-posts-duplicate-entries-when-there-is-a-connection-error/149615 "2018-10-03T06:32:12Z")
Duplicate entries are posted when the following error happens. Client write error, trying connect {:e=\>#\, :backtrace=\>\["org/jruby/ext/openssl/SSLSocket.java:950:in syswrite'", "/root/… --- ## [Can you run a bucket selector aggregation using the output of a stats bucket agg?](https://discuss.elastic.co/t/can-you-run-a-bucket-selector-aggregation-using-the-output-of-a-stats-bucket-agg/108432)
**Author:** [@jtalmi](https://discuss.elastic.co/u/jtalmi)\ **Replies:** 4\ **Last updated:** [November 23, 2017, 5:13pm UTC](https://discuss.elastic.co/t/can-you-run-a-bucket-selector-aggregation-using-the-output-of-a-stats-bucket-agg/108432 "2017-11-23T17:13:42Z")
Hi, The basic overview of the user events query below: We bucket by week, then we bucket by user, then for each user we bucket by day, to get events per day per user per week. The goal is to return a count of users who … --- ## [X-pack offline installation problem: Connection refused: connect](https://discuss.elastic.co/t/x-pack-offline-installation-problem-connection-refused-connect/104018)
**Author:** [@frumat\_l](https://discuss.elastic.co/u/frumat_l)\ **Replies:** 4\ **Last updated:** [October 16, 2017, 7:59am UTC](https://discuss.elastic.co/t/x-pack-offline-installation-problem-connection-refused-connect/104018 "2017-10-16T07:59:08Z")
Hi, I have standalone windows 2012 r2 server with Elasticsearch, Kibana and Logstash (5.6.3) The server is not connected to the internet I download the x-pack zip file for offline installation. I succeeded to install… --- ## [How to clear transient settings with zero downtime? (2.4)](https://discuss.elastic.co/t/how-to-clear-transient-settings-with-zero-downtime-2-4/68089)
**Author:** [@mconlon](https://discuss.elastic.co/u/mconlon)\ **Replies:** 4\ **Last updated:** [December 5, 2016, 8:50pm UTC](https://discuss.elastic.co/t/how-to-clear-transient-settings-with-zero-downtime-2-4/68089 "2016-12-05T20:50:19Z")
I have some transient cluster settings I want to clear out. I understand that I need to do a cluster restart for these settings to be cleared in 2.4, but I want to find a way to do this with zero downtime. My production … --- ## [Elasticsearch getting failed to start the service](https://discuss.elastic.co/t/elasticsearch-getting-failed-to-start-the-service/327646)
**Author:** [@Sarathsoundar](https://discuss.elastic.co/u/Sarathsoundar)\ **Replies:** 6\ **Last updated:** [March 16, 2023, 4:19pm UTC](https://discuss.elastic.co/t/elasticsearch-getting-failed-to-start-the-service/327646 "2023-03-16T16:19:31Z")
Below i mentioned error log for elasticsearch. I don't know how to resolve this, Please anybody help me to resolve this ASAP. Because i want to start this in development server. \ **Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 9:45am UTC](https://discuss.elastic.co/t/elk-watcher-alarms/213566 "2020-01-14T09:45:41Z") Hey, I am trying to create alarms in elk watcher with the following parameters like 5 datapoints in 20 min for value \> 10 but i cannot see anything apart from average median, etc. How can we achieve this type pf alarm co… --- ## [JDBC Input with Aggregate Filter](https://discuss.elastic.co/t/jdbc-input-with-aggregate-filter/205617)
**Author:** [@Ahmad\_Samir](https://discuss.elastic.co/u/Ahmad_Samir)\ **Replies:** 6\ **Last updated:** [October 30, 2019, 2:41pm UTC](https://discuss.elastic.co/t/jdbc-input-with-aggregate-filter/205617 "2019-10-30T14:41:06Z")
Hello, I have a plugin that gets data from SQL server and aggregates some records with a unique ID, But unfortaintly I didn't get any output. My config file is as bellow. input { jdbc { jdbc\_connection\_string =\> … --- ## [Metric Beat \_Fail to run Import Dashboard Script on Remote Virtual machine](https://discuss.elastic.co/t/metric-beat--fail-to-run-import-dashboard-script-on-remote-virtual-machine/85705)
**Author:** [@tanuj\_wadhawan](https://discuss.elastic.co/u/tanuj_wadhawan)\ **Replies:** 6\ **Last updated:** [May 16, 2017, 9:45am UTC](https://discuss.elastic.co/t/metric-beat--fail-to-run-import-dashboard-script-on-remote-virtual-machine/85705 "2017-05-16T09:45:04Z")
Hi Team, I am trying to run Metric beat import dashboard script on remote Virtual machine from where Windows resources needs to be extracted. Elastic Search & Kibana are running on my local machine. I am getting be… --- ## [Can't pull from kafka topic that has date stamp](https://discuss.elastic.co/t/cant-pull-from-kafka-topic-that-has-date-stamp/46757)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 6\ **Last updated:** [April 18, 2016, 5:38pm UTC](https://discuss.elastic.co/t/cant-pull-from-kafka-topic-that-has-date-stamp/46757 "2016-04-18T17:38:35Z")
Hello, I have this issue, when I am able to generate a kafka topic that has date stamp in the name, but when I try to read from it, it fails to. verified that topic created, and i can read from it. Snipped bellow k… --- ## [Export to CSV missing in - Report/Share](https://discuss.elastic.co/t/export-to-csv-missing-in-report-share/190852)
**Author:** [@Debasis\_Jagadev](https://discuss.elastic.co/u/Debasis_Jagadev)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 3:13pm UTC](https://discuss.elastic.co/t/export-to-csv-missing-in-report-share/190852 "2019-07-18T15:13:06Z")
Hi All I wanted to export my my query data but i could not see report tab. Then i checked under Share - but i can get only share as a link? how to export data to CSV? --- ## [How to use S3 Plugin with a Keystore](https://discuss.elastic.co/t/how-to-use-s3-plugin-with-a-keystore/122613)
**Author:** [@rhugga](https://discuss.elastic.co/u/rhugga)\ **Replies:** 3\ **Last updated:** [March 20, 2018, 8:22pm UTC](https://discuss.elastic.co/t/how-to-use-s3-plugin-with-a-keystore/122613 "2018-03-20T20:22:56Z")
I'm trying to configure the S3 plugin to use a non-AWS S3 storage platform with access credentials stored in a keystore. I can't seem to find where or how you reference the keystore and key names. Thx --- ## [NEST search by guid returning more documentes, how to escape "-" char?](https://discuss.elastic.co/t/nest-search-by-guid-returning-more-documentes-how-to-escape-char/67498)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 3\ **Last updated:** [December 27, 2016, 5:15am UTC](https://discuss.elastic.co/t/nest-search-by-guid-returning-more-documentes-how-to-escape-char/67498 "2016-12-27T05:15:43Z")
I am doing a search by a guid but it returns more documents not matching the full guid. If i search for: 333-600-123-334 it returns any doc containing 600 per example. How can i match the full guid string? va… --- ## [KIBANA: Kibana not accessible from a network computer](https://discuss.elastic.co/t/kibana-kibana-not-accessible-from-a-network-computer/45764)
**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\ **Replies:** 3\ **Last updated:** [March 31, 2016, 10:49am UTC](https://discuss.elastic.co/t/kibana-kibana-not-accessible-from-a-network-computer/45764 "2016-03-31T10:49:55Z")
Hello {ES World}, I'm running ES and Kibana on my machine. One of my colleague needs to access both, I've configured ES with my IP as publishing address and KIBANA with my IP as server.host. He is able to access my ES,… --- ## [Logs send to Logstash Forwarder in http post request](https://discuss.elastic.co/t/logs-send-to-logstash-forwarder-in-http-post-request/25249)
**Author:** [@marjolaine](https://discuss.elastic.co/u/marjolaine)\ **Replies:** 3\ **Last updated:** [July 10, 2015, 7:15am UTC](https://discuss.elastic.co/t/logs-send-to-logstash-forwarder-in-http-post-request/25249 "2015-07-10T07:15:04Z")
Hello, I use Logstash Forwarder to collect logs in files, but I would like to know if it's possible to collecte log which are sending in http post on the port of Logstash Forwarder ? In fact, I have some logs that I … --- ## [Substring a field from Logstash](https://discuss.elastic.co/t/substring-a-field-from-logstash/217990)
**Author:** [@Haalanam](https://discuss.elastic.co/u/Haalanam)\ **Replies:** 2\ **Last updated:** [February 5, 2020, 5:31pm UTC](https://discuss.elastic.co/t/substring-a-field-from-logstash/217990 "2020-02-05T17:31:40Z")
I want create a new field based on an field from an JDBC input i want to use the filter option of Logstash but not sure the how to. My goal is to have something like this: new\_field = substr(old\_field,1,300) i want t… --- ## [Why am I getting warning about "Number of open shards exceeds cluster soft limit"?](https://discuss.elastic.co/t/why-am-i-getting-warning-about-number-of-open-shards-exceeds-cluster-soft-limit/295356)
**Author:** [@willdennis](https://discuss.elastic.co/u/willdennis)\ **Replies:** 8\ **Last updated:** [January 27, 2022, 2:14am UTC](https://discuss.elastic.co/t/why-am-i-getting-warning-about-number-of-open-shards-exceeds-cluster-soft-limit/295356 "2022-01-27T02:14:53Z")
I have a single-node ES 6.8 cluster with ~5500 shards. I have set the cluster.max\_shards\_per\_node to '10000' in /etc/elasticsearch/elasticsearch.yml as per this article: But even after restarting ES, I get the "Number … --- ## [Service will not start (RHE7)](https://discuss.elastic.co/t/service-will-not-start-rhe7/282591)
**Author:** [@stacey](https://discuss.elastic.co/u/stacey)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 1:09pm UTC](https://discuss.elastic.co/t/service-will-not-start-rhe7/282591 "2021-09-02T13:09:22Z")
Hi I have installed elasticsearch via the rpm as per the documentation. But I am unable to start the elasticsearch service, but running directly works (with warnings). ES 7.14.0 JDK (bundled): openjdk version "16.0.… --- ## [Drop\_fields not working on doc](https://discuss.elastic.co/t/drop-fields-not-working-on-doc/211545)
**Author:** [@brain](https://discuss.elastic.co/u/brain)\ **Replies:** 7\ **Last updated:** [December 16, 2019, 12:05pm UTC](https://discuss.elastic.co/t/drop-fields-not-working-on-doc/211545 "2019-12-16T12:05:14Z")
i'm trying to use drop\_fields on part of a document: "signatures": \[ { "markcount": 2, "families": \[\], "description": "The binary likely contains encrypted or compressed data indicative of a pack… --- ## [Connecting a local Kibana instance to a remote Elasticsearch cluster](https://discuss.elastic.co/t/connecting-a-local-kibana-instance-to-a-remote-elasticsearch-cluster/128359)
**Author:** [@Trk\_9987](https://discuss.elastic.co/u/Trk_9987)\ **Replies:** 1\ **Last updated:** [April 17, 2018, 7:45pm UTC](https://discuss.elastic.co/t/connecting-a-local-kibana-instance-to-a-remote-elasticsearch-cluster/128359 "2018-04-17T19:45:27Z")
Hey folks. We're investigating adding Kibana to one of our production Elasticsearch clusters. For security reasons, we are hesitant to run Kibana itself in production and are considering running kibana locally and point… --- ## [Log stash configuration file to push delta of data from SQL Server using JDBC Importer](https://discuss.elastic.co/t/log-stash-configuration-file-to-push-delta-of-data-from-sql-server-using-jdbc-importer/45841)
**Author:** [@sreeramg](https://discuss.elastic.co/u/sreeramg)\ **Replies:** 1\ **Last updated:** [March 30, 2016, 7:54pm UTC](https://discuss.elastic.co/t/log-stash-configuration-file-to-push-delta-of-data-from-sql-server-using-jdbc-importer/45841 "2016-03-30T19:54:31Z")
Hi, Any one has done this delta import in Logstatsh from sql server. my configuration file looks like this, but it fetches all the rows every time it is running. I need only the DELTA of data ( what changed/added/delet… --- ## [Filebeat stopped frequently when sending to Logstash](https://discuss.elastic.co/t/filebeat-stopped-frequently-when-sending-to-logstash/137687)
**Author:** [@mugil1988](https://discuss.elastic.co/u/mugil1988)\ **Replies:** 4\ **Last updated:** [June 29, 2018, 1:12pm UTC](https://discuss.elastic.co/t/filebeat-stopped-frequently-when-sending-to-logstash/137687 "2018-06-29T13:12:39Z")
Hi Team, I have installed file beat 5.5.1 version in production server.. Filebeat was worked properly till yesterday But today filebeat is stopping suddenly without any error.. Once I restart the file beat..it's ship… --- ## [How can I disable versioning?](https://discuss.elastic.co/t/how-can-i-disable-versioning/9422)
**Author:** [@Cailin\_Nelson](https://discuss.elastic.co/u/Cailin_Nelson)\ **Replies:** 4\ **Last updated:** [October 20, 2012, 10:40pm UTC](https://discuss.elastic.co/t/how-can-i-disable-versioning/9422 "2012-10-20T22:40:11Z")
Our index size seems to grow and grow over time. I assume this is due to versioning. I don't care about having multiple versions of a document. How can I just turn it off? -- --- ## [Compiling ES source](https://discuss.elastic.co/t/compiling-es-source/3883)
**Author:** [@Barsk](https://discuss.elastic.co/u/Barsk)\ **Replies:** 4\ **Last updated:** [February 8, 2011, 12:45pm UTC](https://discuss.elastic.co/t/compiling-es-source/3883 "2011-02-08T12:45:28Z")
Hello, I have been trying to hook up the ES source in Eclipse IDE. But I cannot figure out how to create the classpath entries for the sources that have been transformed with respect to packages names. E.g the log… --- ## [Winlog with SSL - Errors](https://discuss.elastic.co/t/winlog-with-ssl-errors/200454)
**Author:** [@NewmazN24](https://discuss.elastic.co/u/NewmazN24)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 1:20pm UTC](https://discuss.elastic.co/t/winlog-with-ssl-errors/200454 "2019-09-23T13:20:55Z")
Hello folks, I have configured Kibana, Elasticsearch with TLS/SSL. It works. When I am trying to do the same for my Winlogbeat, I can't make it work. Command: .\\winlogbeat.exe -c winlogbeat.yml -e -d "\*" Outpout 201… --- ## [Kibana won't run with Shield LicenseExpiredException](https://discuss.elastic.co/t/kibana-wont-run-with-shield-licenseexpiredexception/31681)
**Author:** [@rsjavier](https://discuss.elastic.co/u/rsjavier)\ **Replies:** 3\ **Last updated:** [April 18, 2016, 4:37pm UTC](https://discuss.elastic.co/t/kibana-wont-run-with-shield-licenseexpiredexception/31681 "2016-04-18T16:37:14Z")
I have my Kibana, Elastic and Shield running for quite sometime. The system is working properly even the Shield expired. But when I try to restart the ElasticSearch and Kibana, the Kibana then will run but gives me fatal… --- ## [Kibana ingress not working after upgrading to eck 1.1.0](https://discuss.elastic.co/t/kibana-ingress-not-working-after-upgrading-to-eck-1-1-0/232316)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 5\ **Last updated:** [March 18, 2021, 2:06pm UTC](https://discuss.elastic.co/t/kibana-ingress-not-working-after-upgrading-to-eck-1-1-0/232316 "2021-03-18T14:06:30Z")
Hi Team, My kibana ingress is not working after i upgraded to eck 1.1.0 from eck 1.0.1, below are the files for reference kibana\_cr.yaml apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: kibana-confi… --- ## [Setting up a Separate Monitoring Cluster](https://discuss.elastic.co/t/setting-up-a-separate-monitoring-cluster/54645)
**Author:** [@Geeshan\_S](https://discuss.elastic.co/u/Geeshan_S)\ **Replies:** 5\ **Last updated:** [July 10, 2016, 5:50am UTC](https://discuss.elastic.co/t/setting-up-a-separate-monitoring-cluster/54645 "2016-07-10T05:50:08Z")
Hi All, I'm trying to setup a separate cluster(kibanacluster) for monitoring my primary elasticsearch cluster (marveltest) . Below are the ES, Marvel and Kibana versions I'm using. The ES version is fixed for the mome… --- ## [Add custom metadata to events](https://discuss.elastic.co/t/add-custom-metadata-to-events/166695)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 6\ **Last updated:** [March 14, 2019, 7:30am UTC](https://discuss.elastic.co/t/add-custom-metadata-to-events/166695 "2019-03-14T07:30:30Z")
Hi, Is it possible to add custom metadata to events? I like the concept of meta.cloud.\* and would like to add something like ec2 tags to that, nested under meta.cloud.tags.\* for everything on that instance. Alternativ… --- ## [データを取り込む際に不要な情報をインデックスから削除する方法](https://discuss.elastic.co/t/topic/210288)
**Author:** [@5f750bbb360aba6ced5f](https://discuss.elastic.co/u/5f750bbb360aba6ced5f)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 4:34am UTC](https://discuss.elastic.co/t/topic/210288 "2019-12-05T04:34:18Z")
Logstashデータを取り込むと時に、Host・tags・pathなどがIndexに含まれていますが、こちらは見せたくない情報を含むため、これらを取り込み時点で除去するLogstash上の設定等はありませんでしょうか。 【環境等】 ・Kibana、Elasticsearch、Logstashのバージョン：6.6.2 --- ## [Monitoring pipeline fails x-pack for logstash](https://discuss.elastic.co/t/monitoring-pipeline-fails-x-pack-for-logstash/121098)
**Author:** [@ecamero2](https://discuss.elastic.co/u/ecamero2)\ **Replies:** 2\ **Last updated:** [February 22, 2018, 9:02pm UTC](https://discuss.elastic.co/t/monitoring-pipeline-fails-x-pack-for-logstash/121098 "2018-02-22T21:02:13Z")
logstash monitoring never shows up. I see the below over and over again in the log file: \[2018-02-22T12:15:59,993\]\[INFO \]\[logstash.pipeline \] Starting pipeline {:pipeline\_id=\>".monitoring-logstash", "pipeline.wor… --- ## [Connection refused to webhdfs](https://discuss.elastic.co/t/connection-refused-to-webhdfs/120012)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 2\ **Last updated:** [February 18, 2018, 7:51pm UTC](https://discuss.elastic.co/t/connection-refused-to-webhdfs/120012 "2018-02-18T19:51:55Z")
Hi, The Hadoop is up: vpwrk1@vpelastic:\[/home/vpwrk1/var/log/logstash\]$ ps -ef | grep hadoop root 7711 1 0 16:32 ? 00:00:04 /usr/java/jdk1.8.0\_74/bin/java -Dproc\_datanode -Xmx1000m -Djava.net.preferIP… --- ## [Using Softflowd to send IPFIX data to logstash](https://discuss.elastic.co/t/using-softflowd-to-send-ipfix-data-to-logstash/93083)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 2\ **Last updated:** [July 21, 2017, 5:43pm UTC](https://discuss.elastic.co/t/using-softflowd-to-send-ipfix-data-to-logstash/93083 "2017-07-21T17:43:37Z")
Looking at the docs it says I can use Softflowd to send IPFIX traffic to logstash: https://www.elastic.co/guide/en/logstash/current/plugins-codecs-netflow.html#\_description\_154 I can find any examples though of how to … --- ## [Getting MasterNotDiscoveredException 503 on new installation veriosn elasticsearch-0.90.4](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-503-on-new-installation-veriosn-elasticsearch-0-90-4/13635)
**Author:** [@Wei\_Zhang](https://discuss.elastic.co/u/Wei_Zhang)\ **Replies:** 2\ **Last updated:** [September 18, 2013, 4:26pm UTC](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-503-on-new-installation-veriosn-elasticsearch-0-90-4/13635 "2013-09-18T16:26:05Z")
I am getting following error curl -XGET 'http://localhost:9200/\_cluster/health?pretty=true' { "error" : "MasterNotDiscoveredException\[waited for \[30s\]\]", "status" : 503 } Elastic Search Version 0.90.4 (ne… --- ## [Dec 23rd, 2021: \[es\] Aumentando documentos con la política geo\_match](https://discuss.elastic.co/t/dec-23rd-2021-es-aumentando-documentos-con-la-politica-geo-match/292462)
**Author:** [@jsanz](https://discuss.elastic.co/u/jsanz)\ **Replies:** 0\ **Last updated:** [December 23, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-23rd-2021-es-aumentando-documentos-con-la-politica-geo-match/292462 "2021-12-23T08:00:39Z")
:speaking\_head: This article is also available in English Como tal vez sepas, el 19 de Septiembre de 2021 comenzó la erupción del Cumbre Vieja en la isla de La Palma en las Islas Canarias, España. El gobierno de la i… --- ## [Index Lifecycle Management - closing indices](https://discuss.elastic.co/t/index-lifecycle-management-closing-indices/316757)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 4\ **Last updated:** [October 19, 2022, 7:10am UTC](https://discuss.elastic.co/t/index-lifecycle-management-closing-indices/316757 "2022-10-19T07:10:07Z")
Have I failed to find the relevant part of the documentation for Elasticsearch 7.17 and 8.4, or is it the case that Index Lifecycle Management does not provide a way to close indices? (And if it really doesn't provide a … --- ## [Is Elasticsearch SQL going to be in XPack?](https://discuss.elastic.co/t/is-elasticsearch-sql-going-to-be-in-xpack/141723)
**Author:** [@Drammy](https://discuss.elastic.co/u/Drammy)\ **Replies:** 4\ **Last updated:** [July 26, 2018, 10:33am UTC](https://discuss.elastic.co/t/is-elasticsearch-sql-going-to-be-in-xpack/141723 "2018-07-26T10:33:38Z")
Hi all, I'd love to be able to use the beta Elasticsearch SQL functionality but I don't want to waste time developing around something that we won't be able to afford should it only be released post-beta in the XPack. I… --- ## [Delete All ES 2.4.1 Data for a Given filebeat Host](https://discuss.elastic.co/t/delete-all-es-2-4-1-data-for-a-given-filebeat-host/85305)
**Author:** [@Nastooh](https://discuss.elastic.co/u/Nastooh)\ **Replies:** 4\ **Last updated:** [May 15, 2017, 1:03am UTC](https://discuss.elastic.co/t/delete-all-es-2-4-1-data-for-a-given-filebeat-host/85305 "2017-05-15T01:03:55Z")
Hi Trying to clear all data belonging to a particular beat host. Started with the following query: curl -XGET 'localhost:9200/filebeat-2017.05.10/\_search?pretty' -H 'Content-Type: application/json' -d '{"query":{"fil… --- ## [How to get the ES\_HEAP\_SIZE?](https://discuss.elastic.co/t/how-to-get-the-es-heap-size/50210)
**Author:** [@sravani\_amarachinta](https://discuss.elastic.co/u/sravani_amarachinta)\ **Replies:** 4\ **Last updated:** [May 18, 2016, 11:04am UTC](https://discuss.elastic.co/t/how-to-get-the-es-heap-size/50210 "2016-05-18T11:04:08Z")
what is the command that is used to retrieve ES\_HEAP\_SIZE ? --- ## [Kibana in logs view shows the paths to they log files, but no content](https://discuss.elastic.co/t/kibana-in-logs-view-shows-the-paths-to-they-log-files-but-no-content/264759)
**Author:** [@jacob1375](https://discuss.elastic.co/u/jacob1375)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 2:17pm UTC](https://discuss.elastic.co/t/kibana-in-logs-view-shows-the-paths-to-they-log-files-but-no-content/264759 "2021-02-23T14:17:17Z")
I created elk project(elasticsearch, logstash, kibana and filebeat) for production environment. It’s contained 1 server and 5 filebeat clients. Our developers would like to see some log files from they applications. I us… --- ## [Creating a Line Chart that Graphs 1 Day Versus the Weekly Average with a Non-Time Based Histogram](https://discuss.elastic.co/t/creating-a-line-chart-that-graphs-1-day-versus-the-weekly-average-with-a-non-time-based-histogram/193307)
**Author:** [@nfielder](https://discuss.elastic.co/u/nfielder)\ **Replies:** 3\ **Last updated:** [August 1, 2019, 3:41pm UTC](https://discuss.elastic.co/t/creating-a-line-chart-that-graphs-1-day-versus-the-weekly-average-with-a-non-time-based-histogram/193307 "2019-08-01T15:41:57Z")
Hi all, I am currently trying to create a graph that shows the frequency of response time within given intervals (i.e. every 50ms) and split the series so that one line is the data for the last day and the second line i… --- ## [Elasticsearch snapshots not visible](https://discuss.elastic.co/t/elasticsearch-snapshots-not-visible/138102)
**Author:** [@Joba](https://discuss.elastic.co/u/Joba)\ **Replies:** 3\ **Last updated:** [July 1, 2018, 11:16pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-not-visible/138102 "2018-07-01T23:16:09Z")
I am using Elasticsearch 6.3.0 with its default configuration, and am currently trying to restore older snapshots created with some version of Elasticsearch 6.x. I've added a repository to restore the old snapshots, but … --- ## [Parse text value from message but keep original text in message](https://discuss.elastic.co/t/parse-text-value-from-message-but-keep-original-text-in-message/121263)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 3\ **Last updated:** [February 23, 2018, 6:59pm UTC](https://discuss.elastic.co/t/parse-text-value-from-message-but-keep-original-text-in-message/121263 "2018-02-23T18:59:57Z")
Good Afternoon All, I am currently using the Logstash Grok filter to parse out values from a log entry and populate index fields with the values and it is working like a champ but now I want to parse out certain values … --- ## [Kibana Red Status](https://discuss.elastic.co/t/kibana-red-status/116372)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 3\ **Last updated:** [January 22, 2018, 8:02pm UTC](https://discuss.elastic.co/t/kibana-red-status/116372 "2018-01-22T20:02:14Z")
Hi, running 6.1.1 I see the following error in Kibana logs... The cluster is healthy and running and I can do searches against it no problem... Unhandled rejection Error: Request Timeout after 30000ms at /usr/share… --- ## [Kibana Maps features not displaying (failed net::ERR\_CONTENT\_DECODING\_FAILED)](https://discuss.elastic.co/t/kibana-maps-features-not-displaying-failed-net-err-content-decoding-failed/302424)
**Author:** [@quentin.renoux](https://discuss.elastic.co/u/quentin.renoux)\ **Replies:** 7\ **Last updated:** [April 15, 2022, 6:38pm UTC](https://discuss.elastic.co/t/kibana-maps-features-not-displaying-failed-net-err-content-decoding-failed/302424 "2022-04-15T18:38:06Z")
Hi, All layers on my Kibana maps are reporting No result found. with the minusInCircle icon from EUI (Elastic UI Framework | Elastic UI Framework). When I use the term "features", it is in reference of the Elastic Guid… [Previous page](https://discuss.elastic.co/top.md?page=895&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=897&per_page=50&period=all)