# Top **URL:** https://discuss.elastic.co/top.md?page=899&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 900 --- ## [Cross cluster replication](https://discuss.elastic.co/t/cross-cluster-replication/308735)
**Author:** [@Nicole-Ann\_Menezes](https://discuss.elastic.co/u/Nicole-Ann_Menezes)\ **Replies:** 6\ **Last updated:** [July 3, 2022, 4:23pm UTC](https://discuss.elastic.co/t/cross-cluster-replication/308735 "2022-07-03T16:23:36Z")
Exploring CCR. Flow - fluentd----\>Load balancer--'--\>elasticsearch ccr\<---kibana. Cluster A and Cluster B are set up with CCR. As per the documentation-An index has many shards, the follower replicas are in another cl… --- ## [Simple query on two fields with preference to one of them](https://discuss.elastic.co/t/simple-query-on-two-fields-with-preference-to-one-of-them/159235)
**Author:** [@Illidan](https://discuss.elastic.co/u/Illidan)\ **Replies:** 6\ **Last updated:** [December 13, 2018, 5:33am UTC](https://discuss.elastic.co/t/simple-query-on-two-fields-with-preference-to-one-of-them/159235 "2018-12-13T05:33:44Z")
I have a document with two fields; "title" and "description". When performing query, I want to give a significant preference to documents having search term in their "title", e.g. show all documents with term in "title"… --- ## [簡単なサーチ！](https://discuss.elastic.co/t/topic/87892)
**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\ **Replies:** 6\ **Last updated:** [June 2, 2017, 6:03am UTC](https://discuss.elastic.co/t/topic/87892 "2017-06-02T06:03:45Z")
すみません、 私の日本語は下手です、でも日本語の質問です。 documents: { "title": "あいうえお", "description": "...スポーツ。2016年リオオリンピックが終了しました。..." } keyword: 2016年 バージョン: 5.2.2 mapping: Kuromoji\_tokenizerを使います。 query: ... 'query\_string': { 'fi… --- ## [How To Fix : code 429 - circuit\_breaking\_exception - Data too large, data for \[indices:data/write/bulk\[s\]\]](https://discuss.elastic.co/t/how-to-fix-code-429-circuit-breaking-exception-data-too-large-data-for-indices-data-write-bulk-s/354138)
**Author:** [@Leo\_K](https://discuss.elastic.co/u/Leo_K)\ **Replies:** 0\ **Last updated:** [February 26, 2024, 4:37pm UTC](https://discuss.elastic.co/t/how-to-fix-code-429-circuit-breaking-exception-data-too-large-data-for-indices-data-write-bulk-s/354138 "2024-02-26T16:37:23Z")
Hello everyone, Configuration : Elastic Cloud - ES 8.11 I've been benchmarking Elastic for the past days and had multiple errors coming up and I couldn't find a viable answer on the most annoying one : { \_index: 'MY\_I… --- ## [Fortinet.tmp.\*](https://discuss.elastic.co/t/fortinet-tmp/267213)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 8\ **Last updated:** [March 17, 2021, 4:28am UTC](https://discuss.elastic.co/t/fortinet-tmp/267213 "2021-03-17T04:28:17Z")
Hi, I'm trying out fortinet filebeat plugin. Running ELK with 7.10.1 and filebeat 7.10.1 However, I'm getting a strange input values into the documents (in the filebeat-\* index) This is my config - module: fortin… --- ## [Group by function is not working in sql query in kibana\>dev tools](https://discuss.elastic.co/t/group-by-function-is-not-working-in-sql-query-in-kibana-dev-tools/259452)
**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\ **Replies:** 8\ **Last updated:** [January 4, 2021, 7:43am UTC](https://discuss.elastic.co/t/group-by-function-is-not-working-in-sql-query-in-kibana-dev-tools/259452 "2021-01-04T07:43:17Z")
I am creating a query in kibana\>dev tools. Some how my SQL query is not working due to group by function in console. The SQL query is working fine in MSSQL management studio. Query: POST /\_sql?format=txt&pretty { … --- ## [Searching indexed fields without analysing](https://discuss.elastic.co/t/searching-indexed-fields-without-analysing/15144)
**Author:** [@Chris\_H\_2](https://discuss.elastic.co/u/Chris_H_2)\ **Replies:** 8\ **Last updated:** [January 13, 2014, 9:51am UTC](https://discuss.elastic.co/t/searching-indexed-fields-without-analysing/15144 "2014-01-13T09:51:17Z")
Hi. I've deployed elasticsearch with logstash and kibana to take in Windows logs from my OSSEC log server, following this guide: http://vichargrave.com/ossec-log-management-with-elasticsearch/ I've tweaked the logs… --- ## [Ruby script file with dynamic param](https://discuss.elastic.co/t/ruby-script-file-with-dynamic-param/133130)
**Author:** [@jonviously](https://discuss.elastic.co/u/jonviously)\ **Replies:** 3\ **Last updated:** [May 24, 2018, 3:47pm UTC](https://discuss.elastic.co/t/ruby-script-file-with-dynamic-param/133130 "2018-05-24T15:47:39Z")
hi everyone ! in order to factoring my logstash configuration i wanna replace many similar ruby inline code by a ruby script with dynamic param. what i got before my ruby code : \[ 'key1 =\> 'value1', 'key2 =\> 'value2… --- ## [Logstash data appears but filebeat data not appearing in kibana after x-pack is enabled](https://discuss.elastic.co/t/logstash-data-appears-but-filebeat-data-not-appearing-in-kibana-after-x-pack-is-enabled/89365)
**Author:** [@priyam](https://discuss.elastic.co/u/priyam)\ **Replies:** 3\ **Last updated:** [June 14, 2017, 8:26pm UTC](https://discuss.elastic.co/t/logstash-data-appears-but-filebeat-data-not-appearing-in-kibana-after-x-pack-is-enabled/89365 "2017-06-14T20:26:51Z")
I have configured filebeat to send logs to logstash followed by logstash sending logs to elasticsearch. All worked fine .. i could see logstash-\* and filebeat-\* data getting updated in kibana .. until i enabled x-pack s… --- ## [Mysql Performance dashboard: slowest mysql queries](https://discuss.elastic.co/t/mysql-performance-dashboard-slowest-mysql-queries/60917)
**Author:** [@KIVagant](https://discuss.elastic.co/u/KIVagant)\ **Replies:** 3\ **Last updated:** [September 20, 2016, 7:55am UTC](https://discuss.elastic.co/t/mysql-performance-dashboard-slowest-mysql-queries/60917 "2016-09-20T07:55:01Z")
Why the mysql queries is so strange in the table? \[image\] In the Packetbeat debug mode I see all normal queries. And they are absolute normal in the "Discover" tab, for example: SELECT count(DISTINCT l0\_.id) AS sclr… --- ## [What is the recommended value for ES\_HEAP\_SIZE?](https://discuss.elastic.co/t/what-is-the-recommended-value-for-es-heap-size/29772)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 3\ **Last updated:** [September 23, 2015, 4:43am UTC](https://discuss.elastic.co/t/what-is-the-recommended-value-for-es-heap-size/29772 "2015-09-23T04:43:31Z")
Hi, We are planning to run Elasticsearch 1.7 with Java 7 version and we have 3 Physical Servers. Our proposed setup is as follows:- a. 3 Master Nodes (1 in each server) b 3 Client Nodes (1 in each server) c. 3 Data … --- ## [Logstash join two csv files, one to many data](https://discuss.elastic.co/t/logstash-join-two-csv-files-one-to-many-data/193019)
**Author:** [@genice\_ladroma](https://discuss.elastic.co/u/genice_ladroma)\ **Replies:** 5\ **Last updated:** [August 9, 2019, 2:27pm UTC](https://discuss.elastic.co/t/logstash-join-two-csv-files-one-to-many-data/193019 "2019-08-09T14:27:29Z")
Hi, I was able to follow instructions on joining 2 csv files from this link However, this is just for joining one to one data, e.g. file1.csv id,name 1,john 2,jonathan file2.csv id,lastname 1,wick 2,smith thi… --- ## [Problem logs redirection](https://discuss.elastic.co/t/problem-logs-redirection/157011)
**Author:** [@NauGui](https://discuss.elastic.co/u/NauGui)\ **Replies:** 5\ **Last updated:** [November 28, 2018, 12:45pm UTC](https://discuss.elastic.co/t/problem-logs-redirection/157011 "2018-11-28T12:45:45Z")
Hello, I'm meeting an issue with redirection of logs (winlogbeat,filebeat,...). Normally my logs is stocked in /var/lib/elasticsearch/nodes/0/indices. But now logs are redirected in /var/logs/logstash and now the logs a… --- ## [SQL like Group by in Elasticsearch](https://discuss.elastic.co/t/sql-like-group-by-in-elasticsearch/129265)
**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\ **Replies:** 5\ **Last updated:** [April 24, 2018, 12:00pm UTC](https://discuss.elastic.co/t/sql-like-group-by-in-elasticsearch/129265 "2018-04-24T12:00:37Z")
I want to, when filtering my results, at the end, group everything by name for example. If multiple results contain the same name, they are grouped, as well as all of their other fields being summed together if they are … --- ## [Indexing with Camel. Too many files. Socket Closed](https://discuss.elastic.co/t/indexing-with-camel-too-many-files-socket-closed/69313)
**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\ **Replies:** 5\ **Last updated:** [December 16, 2016, 7:57pm UTC](https://discuss.elastic.co/t/indexing-with-camel-too-many-files-socket-closed/69313 "2016-12-16T19:57:53Z")
I'm using Apache Camel to index data from a Enterprise Service. I'm testing it out on a local elasticsearch instance. It appears to index about 12000 files then starts giving me a Too many files error. I set my ulimit… --- ## [Best way to sort by a rapidly changing field?](https://discuss.elastic.co/t/best-way-to-sort-by-a-rapidly-changing-field/9824)
**Author:** [@bob\_2](https://discuss.elastic.co/u/bob_2)\ **Replies:** 5\ **Last updated:** [November 27, 2012, 12:50pm UTC](https://discuss.elastic.co/t/best-way-to-sort-by-a-rapidly-changing-field/9824 "2012-11-27T12:50:47Z")
What the best way to sort by a quick changing field like number of votes? There seems to be 2 options. 1. Delete and reindex the object with the field changed. How many updates a second can an elasticsearch node usu… --- ## [Logstash error : invalid setting for elasticsearch output plugin](https://discuss.elastic.co/t/logstash-error-invalid-setting-for-elasticsearch-output-plugin/314196)
**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\ **Replies:** 2\ **Last updated:** [September 12, 2022, 1:50pm UTC](https://discuss.elastic.co/t/logstash-error-invalid-setting-for-elasticsearch-output-plugin/314196 "2022-09-12T13:50:41Z")
Hi, I have two pipeline configurations located in /etc/logstash/conf.d. I can make work both seperately by running /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/\*\*.conf -r, and it sends data to elasticsearch … --- ## [Logstash behavior on file name change](https://discuss.elastic.co/t/logstash-behavior-on-file-name-change/26460)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 2\ **Last updated:** [July 31, 2015, 7:45am UTC](https://discuss.elastic.co/t/logstash-behavior-on-file-name-change/26460 "2015-07-31T07:45:06Z")
Hi, i configured logstasth to monitor a file with below config file { path =\> "/var/log/app1/xxxx.log" type =\> "app1log" } when the file reaches certain size, it'll be renamed to xxxx-01.log by the applicati… --- ## [Search field names using wildcard](https://discuss.elastic.co/t/search-field-names-using-wildcard/86918)
**Author:** [@paul2](https://discuss.elastic.co/u/paul2)\ **Replies:** 1\ **Last updated:** [May 24, 2017, 8:57am UTC](https://discuss.elastic.co/t/search-field-names-using-wildcard/86918 "2017-05-24T08:57:44Z")
Is it possible to search fieldnames with a wild card and not field values? For example I want to search for a company name in these fields field names: Company\_Lessor\_Name Company\_Lessee\_Name I want to do something… --- ## [Create a date mapping with timezone](https://discuss.elastic.co/t/create-a-date-mapping-with-timezone/79972)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 1\ **Last updated:** [March 25, 2017, 4:32am UTC](https://discuss.elastic.co/t/create-a-date-mapping-with-timezone/79972 "2017-03-25T04:32:55Z")
I am trying 5.2 ELK. I have a date field. I know that by default ES will consider that as GMT. But my time is in GMT +5.30. is there any mapping to say to elasticsearch to save my date field in GMT +05.30 --- ## [Filebeat/Elastic/ECS source field conflict](https://discuss.elastic.co/t/filebeat-elastic-ecs-source-field-conflict/213634)
**Author:** [@mistrhanky](https://discuss.elastic.co/u/mistrhanky)\ **Replies:** 6\ **Last updated:** [January 3, 2020, 6:16pm UTC](https://discuss.elastic.co/t/filebeat-elastic-ecs-source-field-conflict/213634 "2020-01-03T18:16:19Z")
I am having an issue that seems it may be configurable, but I am not sure where to look next. I have filebeat setup up and most of my traffic is standard syslog stuff. I have one feed that is using a non-typical path tho… --- ## [Error: shield.authc.esnative](https://discuss.elastic.co/t/error-shield-authc-esnative/64081)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 6\ **Last updated:** [November 4, 2016, 8:28pm UTC](https://discuss.elastic.co/t/error-shield-authc-esnative/64081 "2016-11-04T20:28:46Z")
Hi Jai, Please help resolving below error: Moreover, i am very much interested to know how elasticsearch nodes are interacting with each other after shield implementation? how they are getting authenticated? \[2016-10-2… --- ## [Large cluster on vm vs bare metal](https://discuss.elastic.co/t/large-cluster-on-vm-vs-bare-metal/276017)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [June 17, 2021, 12:50am UTC](https://discuss.elastic.co/t/large-cluster-on-vm-vs-bare-metal/276017 "2021-06-17T00:50:44Z")
What would be better run on vm or on bare metal? metricbeat getting large set of data, about billion document a day, 100+ gig data, data will be feed by three logstash spec I was making was 8 data node, three master a… --- ## [How to deal with brackets json input filter](https://discuss.elastic.co/t/how-to-deal-with-brackets-json-input-filter/272848)
**Author:** [@Magnuss](https://discuss.elastic.co/u/Magnuss)\ **Replies:** 8\ **Last updated:** [May 13, 2021, 11:02am UTC](https://discuss.elastic.co/t/how-to-deal-with-brackets-json-input-filter/272848 "2021-05-13T11:02:15Z")
Hi there, I'm trying to figure out how to deal with brackets in logstash. The code is as following: { "test1": "text", "images": \[ "https://test2.com/images/I/test.jpg", "https://test2.com/images/I/test.jpg", … --- ## [Wildcard filter on a Windows path](https://discuss.elastic.co/t/wildcard-filter-on-a-windows-path/258035)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [January 2, 2021, 3:48pm UTC](https://discuss.elastic.co/t/wildcard-filter-on-a-windows-path/258035 "2021-01-02T15:48:17Z")
Hello, I'm trying to create a wildcard filter that filters on paths starting with c:\\git\* But: { "query": { "wildcard": { "process.working\_directory": { "value": "c:\\\\git\\\\\*" } } } } i… --- ## [What is included in the free X-Pack?](https://discuss.elastic.co/t/what-is-included-in-the-free-x-pack/203334)
**Author:** [@trajano](https://discuss.elastic.co/u/trajano)\ **Replies:** 3\ **Last updated:** [October 13, 2019, 6:44am UTC](https://discuss.elastic.co/t/what-is-included-in-the-free-x-pack/203334 "2019-10-13T06:44:56Z")
I am reading through https://www.elastic.co/what-is/open-x-pack but I don't see ILM specifically mentioned. Just wanted to confirm whether it is too new a feature and it came out after or if it is actually not available… --- ## [Canvas - @timestamp](https://discuss.elastic.co/t/canvas-timestamp/159501)
**Author:** [@cmcdowell03](https://discuss.elastic.co/u/cmcdowell03)\ **Replies:** 3\ **Last updated:** [December 9, 2018, 9:31am UTC](https://discuss.elastic.co/t/canvas-timestamp/159501 "2018-12-09T09:31:10Z")
Hello, I have set my Index pattern - @timestamp to MM/DD/YYYY, HH:mm:ss a , which otherwise works throughout Kibana but in Canvas the @timestamp defaults to YYYY MM dd, HH:mm:ss.SSS I'm assuming.. Resulting in the fol… --- ## [Logs not parsed as per splunk](https://discuss.elastic.co/t/logs-not-parsed-as-per-splunk/146111)
**Author:** [@mav](https://discuss.elastic.co/u/mav)\ **Replies:** 8\ **Last updated:** [September 3, 2018, 6:25am UTC](https://discuss.elastic.co/t/logs-not-parsed-as-per-splunk/146111 "2018-09-03T06:25:30Z")
Hi, I am a newbie to ELK stack and I am trying to read logs from an application, so please pardon my ignorance. This is a Citrix based application from a vendor and have logs in the format as shown below. ============… --- ## [Numbers being encoded as floats](https://discuss.elastic.co/t/numbers-being-encoded-as-floats/58872)
**Author:** [@jasonish](https://discuss.elastic.co/u/jasonish)\ **Replies:** 3\ **Last updated:** [August 26, 2016, 12:10am UTC](https://discuss.elastic.co/t/numbers-being-encoded-as-floats/58872 "2016-08-26T00:10:05Z")
I ran into an issue where the JSON sent to Elastic Search was being encoded as a float. This appears to a normal Golang solved by creating a json.NewDecoder and setting .UseNumber(). Fine enough, the JSON I'm parsing n… --- ## [Facing error while rollover based on alias and template in 5.6.0](https://discuss.elastic.co/t/facing-error-while-rollover-based-on-alias-and-template-in-5-6-0/184869)
**Author:** [@thenextfreelancer](https://discuss.elastic.co/u/thenextfreelancer)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 4:52am UTC](https://discuss.elastic.co/t/facing-error-while-rollover-based-on-alias-and-template-in-5-6-0/184869 "2019-06-11T04:52:24Z")
Hi, I am facing a strange problem while rollover of a particular alias. Error: { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "index name \[twitter\] does not … --- ## [Merge multiple lines into one with Filebeat](https://discuss.elastic.co/t/merge-multiple-lines-into-one-with-filebeat/57352)
**Author:** [@theopiboubes](https://discuss.elastic.co/u/theopiboubes)\ **Replies:** 2\ **Last updated:** [August 10, 2016, 8:59am UTC](https://discuss.elastic.co/t/merge-multiple-lines-into-one-with-filebeat/57352 "2016-08-10T08:59:51Z")
Hi! I have a Filebeat instance running along with a Logstash server, to which Filebeat data is forwarded. Before sending data to Logstash, I want to merge certain lines of the watched log file together. For example, … --- ## [Best practice for thread pool queue size](https://discuss.elastic.co/t/best-practice-for-thread-pool-queue-size/20226)
**Author:** [@Zaki\_Agha](https://discuss.elastic.co/u/Zaki_Agha)\ **Replies:** 2\ **Last updated:** [October 17, 2014, 11:51pm UTC](https://discuss.elastic.co/t/best-practice-for-thread-pool-queue-size/20226 "2014-10-17T23:51:45Z")
Hi We have several elastic search clusters Recently we faced an issue in which one of our nodes experienced queueing. In fact, the queue length was greater than 1000. Subsequent requests were rejected as the queue wa… --- ## [Spring data elastic 7.4 version](https://discuss.elastic.co/t/spring-data-elastic-7-4-version/207397)
**Author:** [@tfe2012](https://discuss.elastic.co/u/tfe2012)\ **Replies:** 5\ **Last updated:** [November 12, 2019, 9:28am UTC](https://discuss.elastic.co/t/spring-data-elastic-7-4-version/207397 "2019-11-12T09:28:58Z")
Hi, I update my cluster to 7.4.2 version But getting an error: Caused by: java.lang.ClassNotFoundException: org.elasticsearch.action.Action at java.net.URLClassLoader.findClass (URLClassLoader.java:436) at java.lang.… --- ## [X-pack subscription cost](https://discuss.elastic.co/t/x-pack-subscription-cost/77620)
**Author:** [@shams](https://discuss.elastic.co/u/shams)\ **Replies:** 5\ **Last updated:** [March 30, 2017, 6:54am UTC](https://discuss.elastic.co/t/x-pack-subscription-cost/77620 "2017-03-30T06:54:57Z")
Hi, I want to know the x-pack yearly subscription cost. I Request for Quote multiple times for same on https://www.elastic.co/subscriptions#request-info link but didn't get any response. Thanks --- ## [ES Snapshots giving error](https://discuss.elastic.co/t/es-snapshots-giving-error/99105)
**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\ **Replies:** 1\ **Last updated:** [September 2, 2017, 1:36pm UTC](https://discuss.elastic.co/t/es-snapshots-giving-error/99105 "2017-09-02T13:36:25Z")
Am able to successfully register snapshot with the below request. PUT /\_snapshot/my\_backup { "type": "fs", "settings": { "location": "/elk\_bak/esback", "compress": true } } But now am facing… --- ## [Can't curl expected results using public, private or localhost ip](https://discuss.elastic.co/t/cant-curl-expected-results-using-public-private-or-localhost-ip/9167)
**Author:** [@Jasey\_Wang](https://discuss.elastic.co/u/Jasey_Wang)\ **Replies:** 1\ **Last updated:** [January 3, 2017, 7:15am UTC](https://discuss.elastic.co/t/cant-curl-expected-results-using-public-private-or-localhost-ip/9167 "2017-01-03T07:15:05Z")
hi all I have 2 nics on my ubuntu server, eth0 for private ip and eth1 for public ip, and a loopback nic which is localhost, according to the guide below: there are mainly three settings for networking: network.bin… --- ## [Any idea to remove the duplicates from the search results?](https://discuss.elastic.co/t/any-idea-to-remove-the-duplicates-from-the-search-results/19975)
**Author:** [@Peiyong\_Lin](https://discuss.elastic.co/u/Peiyong_Lin)\ **Replies:** 1\ **Last updated:** [September 26, 2014, 9:04am UTC](https://discuss.elastic.co/t/any-idea-to-remove-the-duplicates-from-the-search-results/19975 "2014-09-26T09:04:44Z")
Hi all, I have some documents that look like: { "name": "", "image\_url: "", "simHash": "" } And there are many duplicate documents with the same \`simHash\` value, any idea to remove the duplicate… --- ## [How do I check what causing high JVM?](https://discuss.elastic.co/t/how-do-i-check-what-causing-high-jvm/264118)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 4\ **Last updated:** [February 15, 2021, 10:35pm UTC](https://discuss.elastic.co/t/how-do-i-check-what-causing-high-jvm/264118 "2021-02-15T22:35:58Z")
Hi, We have been having some heavy load on our system, but I am not exactly sure what causing them. Just wondering is there a way to check what have caused the high JVM load in our system. I know the high JVM load can b… --- ## [Жёлтый статус. Нужен совет](https://discuss.elastic.co/t/topic/117009)
**Author:** [@karelianboy1](https://discuss.elastic.co/u/karelianboy1)\ **Replies:** 4\ **Last updated:** [January 26, 2018, 3:21pm UTC](https://discuss.elastic.co/t/topic/117009 "2018-01-26T15:21:43Z")
Начались первые проблемы. { "cluster\_name": "docker-cluster", "status": "yellow", "timed\_out": false, "number\_of\_nodes": 1, "number\_of\_data\_nodes": 1, "active\_primary\_shards": 29, "active\_shards": 29, "r… --- ## [Elasticsearch shield plugin with node client](https://discuss.elastic.co/t/elasticsearch-shield-plugin-with-node-client/51239)
**Author:** [@Anand\_Chandak](https://discuss.elastic.co/u/Anand_Chandak)\ **Replies:** 4\ **Last updated:** [March 27, 2017, 3:52am UTC](https://discuss.elastic.co/t/elasticsearch-shield-plugin-with-node-client/51239 "2017-03-27T03:52:39Z")
Hi, Can somebody please tell us if elastic- search shield plugin can work with node client ? If so, can somebody please provide us with some pointers --- ## [Logstash stop reading from RabbitMQ](https://discuss.elastic.co/t/logstash-stop-reading-from-rabbitmq/34750)
**Author:** [@srikanth.guduru](https://discuss.elastic.co/u/srikanth.guduru)\ **Replies:** 4\ **Last updated:** [December 1, 2015, 7:24pm UTC](https://discuss.elastic.co/t/logstash-stop-reading-from-rabbitmq/34750 "2015-12-01T19:24:14Z")
After sometime logstash stop reading data from RabbitMQ. Gives out no error, just halts. Messages stack-up in unacknowledged mode in RabbitMQ Messages rates can go upto 40-50 messages per second. My config for losgtas… --- ## [Exisisting field doesn't show on Dashboard filters, but it does in discover and visualizations](https://discuss.elastic.co/t/exisisting-field-doesnt-show-on-dashboard-filters-but-it-does-in-discover-and-visualizations/257691)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 10:14am UTC](https://discuss.elastic.co/t/exisisting-field-doesnt-show-on-dashboard-filters-but-it-does-in-discover-and-visualizations/257691 "2020-12-08T10:14:55Z")
Hi a specific field doesn't show on the filter of the dashboards, but it exists and can be found in discovery and in the visualizations I have reloaded the index pattern, checked his existance through a month, but … --- ## [Analyzing PCAP's with Zeek(Bro) in offline mode](https://discuss.elastic.co/t/analyzing-pcaps-with-zeek-bro-in-offline-mode/254515)
**Author:** [@shabi037](https://discuss.elastic.co/u/shabi037)\ **Replies:** 3\ **Last updated:** [November 6, 2020, 11:53am UTC](https://discuss.elastic.co/t/analyzing-pcaps-with-zeek-bro-in-offline-mode/254515 "2020-11-06T11:53:04Z")
Hi all, I am using Zeek to analyze the pcaps in the offline mode. To run the pcap i use command "sudo zeek -r /path/to/file.pcap. It generates the logs (dns.log, http.log, ssl.log etc) in the /opt/zeek/logs/current fold… --- ## [Logstash to Elastic search not working for heartbeat](https://discuss.elastic.co/t/logstash-to-elastic-search-not-working-for-heartbeat/86694)
**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\ **Replies:** 3\ **Last updated:** [May 25, 2017, 2:42pm UTC](https://discuss.elastic.co/t/logstash-to-elastic-search-not-working-for-heartbeat/86694 "2017-05-25T14:42:04Z")
In the ELK pipeline, I have Heartbeat pushing logs to Logstash and then to Elasticsearch. The heartbeat to logstash works fine and from logstash to elasticsearh have issues. I have done my best using the debug options in… --- ## [Saving dataframe to ElasticSearch](https://discuss.elastic.co/t/saving-dataframe-to-elasticsearch/204451)
**Author:** [@Hugh\_McBride](https://discuss.elastic.co/u/Hugh_McBride)\ **Replies:** 2\ **Last updated:** [November 15, 2019, 11:15am UTC](https://discuss.elastic.co/t/saving-dataframe-to-elasticsearch/204451 "2019-11-15T11:15:04Z")
I am on a new project that is saving spark dataframes to elastic search using dataFrame.saveToEsI(.... ) There are multi terabytes of Data (\> 10) that are being saved to a rather small cluster (5 node ) , And it is ta… --- ## [How to set window size for moving average?](https://discuss.elastic.co/t/how-to-set-window-size-for-moving-average/99323)
**Author:** [@pranav0091](https://discuss.elastic.co/u/pranav0091)\ **Replies:** 2\ **Last updated:** [September 4, 2017, 7:14pm UTC](https://discuss.elastic.co/t/how-to-set-window-size-for-moving-average/99323 "2017-09-04T19:14:06Z")
I am trying to move away from excel into ES+Kibana. I have some data (lets say, the name, age, IQ and height of 10000 people) that can be histogram-ed (lets say over the the IQ field with a bin size of 10). I wish to plo… --- ## [Elasticseaart unable to start](https://discuss.elastic.co/t/elasticseaart-unable-to-start/55581)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 2\ **Last updated:** [July 15, 2016, 2:46am UTC](https://discuss.elastic.co/t/elasticseaart-unable-to-start/55581 "2016-07-15T02:46:56Z")
I install the zip file of elasticsearch 5.0 Alpha 4 into a RHEL7 system and install x pack following the documentation. Then when I type bin/elasticsearch, it prompts me the following error log4j:ERROR setFile(null,tr… --- ## [Visualize Graphite with Kibana](https://discuss.elastic.co/t/visualize-graphite-with-kibana/34812)
**Author:** [@Tal\_Bar\_Or](https://discuss.elastic.co/u/Tal_Bar_Or)\ **Replies:** 2\ **Last updated:** [November 17, 2015, 4:30pm UTC](https://discuss.elastic.co/t/visualize-graphite-with-kibana/34812 "2015-11-17T16:30:38Z")
Hi All, I have Graphite db with lots of graph , i would like Visualize it under Kibana . My question is there a way to integrate both together and have the desired results ? Please advice Thanks --- ## [FileBeat How to control the ports used](https://discuss.elastic.co/t/filebeat-how-to-control-the-ports-used/293296)
**Author:** [@gaogao110](https://discuss.elastic.co/u/gaogao110)\ **Replies:** 5\ **Last updated:** [January 3, 2022, 1:23pm UTC](https://discuss.elastic.co/t/filebeat-how-to-control-the-ports-used/293296 "2022-01-03T13:23:30Z")
During use, the program will randomly start the port, is there any way to control ? --- ## [Linux ps command shows Elasticsearch password](https://discuss.elastic.co/t/linux-ps-command-shows-elasticsearch-password/234621)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 6\ **Last updated:** [June 3, 2020, 12:38am UTC](https://discuss.elastic.co/t/linux-ps-command-shows-elasticsearch-password/234621 "2020-06-03T00:38:14Z")
We are running docker versions of Kibana and Elasticsearch. When kibana is running, you can use a Linux "ps" command to see the Elasticsearch password. geo 233087 232961 6 21:11 ? 00:00:06 /usr/share/kiban… [Previous page](https://discuss.elastic.co/top.md?page=898&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=900&per_page=50&period=all)