# Top

**URL:** https://discuss.elastic.co/top.md?page=931&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 932

---

## [Can't reach Rally Target throughput](https://discuss.elastic.co/t/cant-reach-rally-target-throughput/148612)

<div class="topic-metadata">

**Author:** [@Sunil\_pandith](https://discuss.elastic.co/u/Sunil_pandith)\
**Replies:** 7\
**Last updated:** [September 17, 2018, 11:23am UTC](https://discuss.elastic.co/t/cant-reach-rally-target-throughput/148612 "2018-09-17T11:23:39Z")

</div>

Hi, I have a 4 node cluster setup. I'm benchmarking the setup using Rally. I have set the no. of "client" for a search operation in "track.json" to 12 with "target-throughput" of 2500. But the rally reported that it has…

---

## [Content-Type header \[application/x-www-form-urlencoded\] is not supported","status":406](https://discuss.elastic.co/t/content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406/110346)

<div class="topic-metadata">

**Author:** [@ravirjn](https://discuss.elastic.co/u/ravirjn)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 4:06pm UTC](https://discuss.elastic.co/t/content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406/110346 "2017-12-08T16:06:38Z")

</div>

Hi, I am installing a fresh ELK stack, when I am trying to load dashboard using load.sh script, I am getting error: Content-Type header \[application/x-www-form-urlencoded\] is not supported","status":406 My elastic sea…

---

## [Different filters for different visualizations inside the same dashboard](https://discuss.elastic.co/t/different-filters-for-different-visualizations-inside-the-same-dashboard/330208)

<div class="topic-metadata">

**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\
**Replies:** 6\
**Last updated:** [April 24, 2023, 11:21am UTC](https://discuss.elastic.co/t/different-filters-for-different-visualizations-inside-the-same-dashboard/330208 "2023-04-24T11:21:13Z")

</div>

Hi! I'm building a dashboard that has two visualizations, each of them taking data from different indexes. I want to apply a filter (that can be edited on the dashboard to show different data), but as the data comes fro…

---

## [Threshold selection - How to define it?](https://discuss.elastic.co/t/threshold-selection-how-to-define-it/239433)

<div class="topic-metadata">

**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\
**Replies:** 6\
**Last updated:** [July 1, 2020, 10:16am UTC](https://discuss.elastic.co/t/threshold-selection-how-to-define-it/239433 "2020-07-01T10:16:10Z")

</div>

Hi, I have 4 data nodes with 25 Tb on each for a total of 100Tb of storage. I want to change the cluster threshold because, by default, the option cluster.routing.allocation.disk.watermark.flood\_stage is at 95%. Tha…

---

## [SAML in Elastic Cloud - Support cant fix and are saying its Consulting now!](https://discuss.elastic.co/t/saml-in-elastic-cloud-support-cant-fix-and-are-saying-its-consulting-now/158805)

<div class="topic-metadata">

**Author:** [@hogbinj](https://discuss.elastic.co/u/hogbinj)\
**Replies:** 6\
**Last updated:** [December 3, 2018, 1:57pm UTC](https://discuss.elastic.co/t/saml-in-elastic-cloud-support-cant-fix-and-are-saying-its-consulting-now/158805 "2018-12-03T13:57:32Z")

</div>

I've tried to implement the advice here on securing a Cloud Cluster with SAML I added the following to the elasticsearch.yml being careful to use spaces rather than the tabs you get if you copy the example because YAML …

---

## [Log4J issue with using Elastic 5.0 with Storm server 1.02](https://discuss.elastic.co/t/log4j-issue-with-using-elastic-5-0-with-storm-server-1-02/66597)

<div class="topic-metadata">

**Author:** [@gopal.ramakrishnan](https://discuss.elastic.co/u/gopal.ramakrishnan)\
**Replies:** 6\
**Last updated:** [November 21, 2016, 10:01pm UTC](https://discuss.elastic.co/t/log4j-issue-with-using-elastic-5-0-with-storm-server-1-02/66597 "2016-11-21T22:01:04Z")

</div>

We are using elastic client in our Storm bolt. Recently we upgraded to elastic 5.0. Elastic 5.0 started having a direct dependency with log4j 2.6.2. Storm server does not work with this version of log4j and expects this …

---

## [GET /\_cluster/settings empty](https://discuss.elastic.co/t/get-cluster-settings-empty/252471)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 2\
**Last updated:** [October 19, 2020, 5:42am UTC](https://discuss.elastic.co/t/get-cluster-settings-empty/252471 "2020-10-19T05:42:40Z")

</div>

Hi there, I have a 7.5.1 production cluster of 3 nodes running. I am wondering: doing this GET /\_cluster/settings empty just gives me: I would expect more. Background: I have reached on all 3 nodes the disk waterma…

---

## [Failed to establish a new connection: \[Errno 111\] Connection refused')))](https://discuss.elastic.co/t/failed-to-establish-a-new-connection-errno-111-connection-refused/292919)

<div class="topic-metadata">

**Author:** [@DoDuyen162000](https://discuss.elastic.co/u/DoDuyen162000)\
**Replies:** 2\
**Last updated:** [December 27, 2021, 7:27am UTC](https://discuss.elastic.co/t/failed-to-establish-a-new-connection-errno-111-connection-refused/292919 "2021-12-27T07:27:15Z")

</div>

Hi. I am having problems creating elastalert in Elasticsearch. When I use the elastalert-create-index command it gives me the error: help me please!!!

---

## [Logstash error with multiple](https://discuss.elastic.co/t/logstash-error-with-multiple/172103)

<div class="topic-metadata">

**Author:** [@Thibaut603](https://discuss.elastic.co/u/Thibaut603)\
**Replies:** 2\
**Last updated:** [March 13, 2019, 11:59am UTC](https://discuss.elastic.co/t/logstash-error-with-multiple/172103 "2019-03-13T11:59:40Z")

</div>

Hello guys i'm a little bit stuck with my config logstash i try to have multiple pipeline one for AD events and Palo alto syslog event so i've configure the file pipeline.yml like this i've a question do i need to se…

---

## [Logstash 5.1 - Multiline codec with file input](https://discuss.elastic.co/t/logstash-5-1-multiline-codec-with-file-input/70635)

<div class="topic-metadata">

**Author:** [@spravn789](https://discuss.elastic.co/u/spravn789)\
**Replies:** 2\
**Last updated:** [January 12, 2017, 4:28am UTC](https://discuss.elastic.co/t/logstash-5-1-multiline-codec-with-file-input/70635 "2017-01-12T04:28:28Z")

</div>

Hi All, I am using Logstash 5.1 , where facing issues with multiline, Since multiline filter is depricated, trying to use multiline codec along with file input. In the response all the line are getting combined and fa…

---

## [Logstash fail to start,it shows translation missing: en.logstash.runner.configuration.file-not-found](https://discuss.elastic.co/t/logstash-fail-to-start-it-shows-translation-missing-en-logstash-runner-configuration-file-not-found/51189)

<div class="topic-metadata">

**Author:** [@Hobbit](https://discuss.elastic.co/u/Hobbit)\
**Replies:** 2\
**Last updated:** [May 27, 2016, 6:57pm UTC](https://discuss.elastic.co/t/logstash-fail-to-start-it-shows-translation-missing-en-logstash-runner-configuration-file-not-found/51189 "2016-05-27T18:57:06Z")

</div>

Hi ! I'm following the doc to set up the first-pipeline-conf,but after I ran bin/logstash -f first-pipeline.conf --configtest ,this error shows: An unexpected error occurred! {:error=\>#\<RuntimeError: translation missing:…

---

## [Stats aggregation on list length](https://discuss.elastic.co/t/stats-aggregation-on-list-length/21772)

<div class="topic-metadata">

**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\
**Replies:** 2\
**Last updated:** [January 23, 2015, 10:11am UTC](https://discuss.elastic.co/t/stats-aggregation-on-list-length/21772 "2015-01-23T10:11:55Z")

</div>

I'm trying to do a stats aggregation on the list length using a script but I'm getting errors. For this data, PUT test\_groups/group/1 { "name":"1", "members":\[ { "name":"m1" } \] } PUT…

---

## [\[CH\] ES Meetup in Lausanne - Switzerland, 11th June 2019](https://discuss.elastic.co/t/ch-es-meetup-in-lausanne-switzerland-11th-june-2019/183862)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 0\
**Last updated:** [June 2, 2019, 1:49pm UTC](https://discuss.elastic.co/t/ch-es-meetup-in-lausanne-switzerland-11th-june-2019/183862 "2019-06-02T13:49:38Z")

</div>

For our next ES meetup in Western Switzerland, we're happy to announce another fantastic line-up: Guillaume Lederrey (from Wikimedia) will present an operational view of Elasticsearch (How to scale Elasticsearch to th…

---

## [Hive JDBC](https://discuss.elastic.co/t/hive-jdbc/107478)

<div class="topic-metadata">

**Author:** [@Jeff\_Bursik](https://discuss.elastic.co/u/Jeff_Bursik)\
**Replies:** 1\
**Last updated:** [November 14, 2017, 3:19pm UTC](https://discuss.elastic.co/t/hive-jdbc/107478 "2017-11-14T15:19:23Z")

</div>

I've seen a couple posts asking for a Hive JDBC Input configuration however I haven't seen a successful configuration posted. Im curious what JDBC Driver is needed to make the Hive connection work? Thanks!

---

## [How to update nested objects In Elasticsearch 2.2 script via Java API](https://discuss.elastic.co/t/how-to-update-nested-objects-in-elasticsearch-2-2-script-via-java-api/43135)

<div class="topic-metadata">

**Author:** [@PeteyPabPro](https://discuss.elastic.co/u/PeteyPabPro)\
**Replies:** 1\
**Last updated:** [March 1, 2016, 5:30pm UTC](https://discuss.elastic.co/t/how-to-update-nested-objects-in-elasticsearch-2-2-script-via-java-api/43135 "2016-03-01T17:30:58Z")

</div>

I'm trying to update a nested object in Elasticsearch via the Java API, using a technique similar to what is outlined here. The problem is how to pass the json into the script. If I just blindly concatenate the json to t…

---

## [What's the ideal IdleTimeout of AWS ELB to avoid GatewayTimeout?](https://discuss.elastic.co/t/whats-the-ideal-idletimeout-of-aws-elb-to-avoid-gatewaytimeout/26971)

<div class="topic-metadata">

**Author:** [@Alexander\_Pepper](https://discuss.elastic.co/u/Alexander_Pepper)\
**Replies:** 1\
**Last updated:** [September 1, 2015, 9:36am UTC](https://discuss.elastic.co/t/whats-the-ideal-idletimeout-of-aws-elb-to-avoid-gatewaytimeout/26971 "2015-09-01T09:36:52Z")

</div>

Context We are running an elasticsearch cluster with three nodes on AWS EC2. Each node uses the AWS Cloud Plugin to discover each other. In front of the cluster, we put a private elastic load balancer (ELB), so our rail…

---

## [Entity-centric indexing with Transforms](https://discuss.elastic.co/t/entity-centric-indexing-with-transforms/277798)

<div class="topic-metadata">

**Author:** [@katja1](https://discuss.elastic.co/u/katja1)\
**Replies:** 4\
**Last updated:** [July 7, 2021, 12:34pm UTC](https://discuss.elastic.co/t/entity-centric-indexing-with-transforms/277798 "2021-07-07T12:34:51Z")

</div>

Hello, we're working with Elasticsearch for the first time and we are currently deciding on what would be the best solution for our problem at hand. We are receiving Event based logs (in JSON form) from our applications…

---

## [Data values about time graph kibana vega, vega-lite](https://discuss.elastic.co/t/data-values-about-time-graph-kibana-vega-vega-lite/272714)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 4\
**Last updated:** [May 12, 2021, 5:45pm UTC](https://discuss.elastic.co/t/data-values-about-time-graph-kibana-vega-vega-lite/272714 "2021-05-12T17:45:31Z")

</div>

Hi all experts, I'm a beginner of this new techonolgy. I would like to use vega for display line graph that plot data values over time-series (timestamp). The goal is to represent how data values and not count of data ch…

---

## [Apply ILM Policy to existing DataStream Index](https://discuss.elastic.co/t/apply-ilm-policy-to-existing-datastream-index/267422)

<div class="topic-metadata">

**Author:** [@Karl\_Falconer](https://discuss.elastic.co/u/Karl_Falconer)\
**Replies:** 4\
**Last updated:** [March 17, 2021, 3:26pm UTC](https://discuss.elastic.co/t/apply-ilm-policy-to-existing-datastream-index/267422 "2021-03-17T15:26:27Z")

</div>

We have an exiting datastream foo-stream and two backing indices .foo-stream-000001 and .foo-stream-000002. Our application is writing/reading to the index foo-stream and the overall expectation is that ILM would automa…

---

## [Why can't I access the index alias I created to use in Kibana Discover/Visualize?](https://discuss.elastic.co/t/why-cant-i-access-the-index-alias-i-created-to-use-in-kibana-discover-visualize/252591)

<div class="topic-metadata">

**Author:** [@bgiordano](https://discuss.elastic.co/u/bgiordano)\
**Replies:** 4\
**Last updated:** [October 19, 2020, 9:24pm UTC](https://discuss.elastic.co/t/why-cant-i-access-the-index-alias-i-created-to-use-in-kibana-discover-visualize/252591 "2020-10-19T21:24:17Z")

</div>

What am I missing? Why can't I access an alias index by name from Kibana? I currently am using ES/K 7.6.2 I have been working with ES/K since 2014 --- used alias indices all the time. What has changed in 7.x that I am …

---

## [Boot Strap check failed](https://discuss.elastic.co/t/boot-strap-check-failed/67566)

<div class="topic-metadata">

**Author:** [@Sureshkumar](https://discuss.elastic.co/u/Sureshkumar)\
**Replies:** 4\
**Last updated:** [December 4, 2016, 6:32am UTC](https://discuss.elastic.co/t/boot-strap-check-failed/67566 "2016-12-04T06:32:04Z")

</div>

Hi When i upgrade to elastic search 5.0.2 below error message received and its elastic search instance is getting closed. \[2016-11-30T00:47:09,525\]\[INFO \]\[o.e.t.TransportService \] \[m7H0n9h\] publish\_address {10.50.0.16…

---

## [Logstash - Elastisearch template](https://discuss.elastic.co/t/logstash-elastisearch-template/55774)

<div class="topic-metadata">

**Author:** [@Diego\_Gomez](https://discuss.elastic.co/u/Diego_Gomez)\
**Replies:** 4\
**Last updated:** [July 18, 2016, 4:07pm UTC](https://discuss.elastic.co/t/logstash-elastisearch-template/55774 "2016-07-18T16:07:04Z")

</div>

Hi, I'm working with twitter and want to map coordinates for the reconnoitre Kibana . This is my template.json { "template": "twitter", "order": 1, "settings": { "number\_of\_shards": 1 }, "mappings": { "tweet": { …

---

## [What is the best way to write grok pattern for below Log](https://discuss.elastic.co/t/what-is-the-best-way-to-write-grok-pattern-for-below-log/223646)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 8\
**Last updated:** [March 18, 2020, 4:04pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-write-grok-pattern-for-below-log/223646 "2020-03-18T16:04:25Z")

</div>

Hi Folks, Below is the line that I am trying to write a GROK pattern however later part starts with JSON and my codec =\> json is not matching due to the first part. Any idea or clue how do I match the rules or do I nee…

---

## [Canvas line with multiple items on Y axes](https://discuss.elastic.co/t/canvas-line-with-multiple-items-on-y-axes/190364)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 3\
**Last updated:** [July 16, 2019, 8:52am UTC](https://discuss.elastic.co/t/canvas-line-with-multiple-items-on-y-axes/190364 "2019-07-16T08:52:20Z")

</div>

Hello, I would like to create a chart that would look like this: http://prntscr.com/oenqlp. However I did not find a way to add multiple elements to the Y axes. Is there a possiblity? Regard

---

## [Nginx filebeat logging](https://discuss.elastic.co/t/nginx-filebeat-logging/120650)

<div class="topic-metadata">

**Author:** [@clock21am](https://discuss.elastic.co/u/clock21am)\
**Replies:** 8\
**Last updated:** [March 6, 2018, 7:38am UTC](https://discuss.elastic.co/t/nginx-filebeat-logging/120650 "2018-03-06T07:38:49Z")

</div>

Hi, we are trying to log our nginx log to elasticsearch. our code is working fine and logging in es. but while creating dashboard it is showing following\[1\] errors in our kibana-dashboard dashboard is showing the fol…

---

## [Filebeat on RHEL 5.7](https://discuss.elastic.co/t/filebeat-on-rhel-5-7/100927)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 12:51pm UTC](https://discuss.elastic.co/t/filebeat-on-rhel-5-7/100927 "2017-09-19T12:51:09Z")

</div>

How can I install Filebeat and run it on REDHAT 5.7v? Filebeat 5.4.1 Thanks Sharon.

---

## [Zen discovery plugin - Connection refused: /127.0.0.1:9302](https://discuss.elastic.co/t/zen-discovery-plugin-connection-refused-127-0-0-1-9302/55255)

<div class="topic-metadata">

**Author:** [@dreamer](https://discuss.elastic.co/u/dreamer)\
**Replies:** 3\
**Last updated:** [July 17, 2016, 11:20pm UTC](https://discuss.elastic.co/t/zen-discovery-plugin-connection-refused-127-0-0-1-9302/55255 "2016-07-17T23:20:45Z")

</div>

Hello everyone, Just started using Elasticsearch and trying out Zen discovery plugin for the first time. I'm currently using version 5.0.0-alpha4. My data node is unable to join the cluster, I'm getting Connection r…

---

## [Windows module - The specified object was not found](https://discuss.elastic.co/t/windows-module-the-specified-object-was-not-found/86983)

<div class="topic-metadata">

**Author:** [@Jeff\_Davis](https://discuss.elastic.co/u/Jeff_Davis)\
**Replies:** 5\
**Last updated:** [May 29, 2017, 8:45am UTC](https://discuss.elastic.co/t/windows-module-the-specified-object-was-not-found/86983 "2017-05-29T08:45:06Z")

</div>

I am testing the new Windows module in metricbeat-6.0.0-alpha1 on Windows 7 and Windows 10 machines. I am very excited about this functionality! The issue/concern I have is if the perfmon counter does not exist on the…

---

## [AccessDeniedException](https://discuss.elastic.co/t/accessdeniedexception/173127)

<div class="topic-metadata">

**Author:** [@junhyuk](https://discuss.elastic.co/u/junhyuk)\
**Replies:** 2\
**Last updated:** [March 21, 2019, 1:12am UTC](https://discuss.elastic.co/t/accessdeniedexception/173127 "2019-03-21T01:12:45Z")

</div>

Hi there, I am beginner user to elasticsearch. I have set network.host: 0.0.0.0 (also try to my local IP), http.port: 9200, and give executive authority to my new account. I use centOs6, Java 1.8, and doesn't use root a…

---

## [Log4j input migration to Beats](https://discuss.elastic.co/t/log4j-input-migration-to-beats/122402)

<div class="topic-metadata">

**Author:** [@plexaikm](https://discuss.elastic.co/u/plexaikm)\
**Replies:** 2\
**Last updated:** [March 5, 2018, 7:31am UTC](https://discuss.elastic.co/t/log4j-input-migration-to-beats/122402 "2018-03-05T07:31:47Z")

</div>

Hello As stated in the documentation log4j input plugin for logstash is deprecated (security reasons) and log4j2 input plugin (community) is quite not maintained... The official recommendation for migration is to use f…

---

## [Index full document or subset?](https://discuss.elastic.co/t/index-full-document-or-subset/214144)

<div class="topic-metadata">

**Author:** [@Rvs](https://discuss.elastic.co/u/Rvs)\
**Replies:** 7\
**Last updated:** [January 9, 2020, 2:53am UTC](https://discuss.elastic.co/t/index-full-document-or-subset/214144 "2020-01-09T02:53:44Z")

</div>

I Had a newbie question. Would appreciate some advice here. Should i index my entire document or only the data (subset)within my document that i know will be searched on. What is the philosophy of elasticsearch. Should…

---

## [How to detect and log 400 bad requests?](https://discuss.elastic.co/t/how-to-detect-and-log-400-bad-requests/163778)

<div class="topic-metadata">

**Author:** [@gcsabbagh](https://discuss.elastic.co/u/gcsabbagh)\
**Replies:** 1\
**Last updated:** [January 13, 2019, 12:21pm UTC](https://discuss.elastic.co/t/how-to-detect-and-log-400-bad-requests/163778 "2019-01-13T12:21:20Z")

</div>

Hello, My apologies if asked before but I've been scouting the forums and the docs for hours trying to figure this out.. My setup: Fluentd daemonset on Kubernetes collecting logs from containers and sending them to AW…

---

## [Mark a as closed an Alert take long time](https://discuss.elastic.co/t/mark-a-as-closed-an-alert-take-long-time/303777)

<div class="topic-metadata">

**Author:** [@rainierwolf](https://discuss.elastic.co/u/rainierwolf)\
**Replies:** 6\
**Last updated:** [June 1, 2022, 4:12pm UTC](https://discuss.elastic.co/t/mark-a-as-closed-an-alert-take-long-time/303777 "2022-06-01T16:12:50Z")

</div>

Hi team, I'm having a strange problem changing alert states in the security module. When I mark an alert as closed, it takes several minutes waiting until the system displays an error ("Failed to retrieve"). If I change…

---

## [Problem with Logstash logs](https://discuss.elastic.co/t/problem-with-logstash-logs/80276)

<div class="topic-metadata">

**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\
**Replies:** 6\
**Last updated:** [March 28, 2017, 1:38pm UTC](https://discuss.elastic.co/t/problem-with-logstash-logs/80276 "2017-03-28T13:38:44Z")

</div>

Dear all, I I would like to get know where is logstash logs. My goal is to have logstash logs in /data01/logstah/logs Please help Here are my configs: logstash.yml ''' Settings file in YAML Settings can be…

---

## [What's the difference between solr and elasticsearch in hdfs case?](https://discuss.elastic.co/t/whats-the-difference-between-solr-and-elasticsearch-in-hdfs-case/19215)

<div class="topic-metadata">

**Author:** [@Jianyi](https://discuss.elastic.co/u/Jianyi)\
**Replies:** 6\
**Last updated:** [August 13, 2014, 4:40am UTC](https://discuss.elastic.co/t/whats-the-difference-between-solr-and-elasticsearch-in-hdfs-case/19215 "2014-08-13T04:40:21Z")

</div>

Hi~ I'm new to both solr and elasticsearch. I have read that both the two support creating index on hdfs. So, what's the difference between solr and elasticsearch in hdfs case?

---

## [No Endpoints for port 9300](https://discuss.elastic.co/t/no-endpoints-for-port-9300/221542)

<div class="topic-metadata">

**Author:** [@dtapia](https://discuss.elastic.co/u/dtapia)\
**Replies:** 3\
**Last updated:** [April 7, 2020, 12:54pm UTC](https://discuss.elastic.co/t/no-endpoints-for-port-9300/221542 "2020-04-07T12:54:09Z")

</div>

When I deploy a new instance of ECK, I only see services with port 9200 service/r4e-elasticsearch-datastore-cluster-es-http ClusterIP 10.224.83.227 \<none\> 9200/TCP …

---

## [Logstash exits after starting with no error messages](https://discuss.elastic.co/t/logstash-exits-after-starting-with-no-error-messages/136943)

<div class="topic-metadata">

**Author:** [@alilland](https://discuss.elastic.co/u/alilland)\
**Replies:** 3\
**Last updated:** [June 25, 2018, 11:17am UTC](https://discuss.elastic.co/t/logstash-exits-after-starting-with-no-error-messages/136943 "2018-06-25T11:17:18Z")

</div>

I am getting a very similar experience that was mentioned here on this post, however, I'm not using Docker, I'm just using a basic .tar and turning logstash on from the command line After having a mixed experience with …

---

## [Installing root CA certificate on the nodes and configure logstash](https://discuss.elastic.co/t/installing-root-ca-certificate-on-the-nodes-and-configure-logstash/65395)

<div class="topic-metadata">

**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\
**Replies:** 3\
**Last updated:** [November 17, 2016, 7:50am UTC](https://discuss.elastic.co/t/installing-root-ca-certificate-on-the-nodes-and-configure-logstash/65395 "2016-11-17T07:50:33Z")

</div>

Hello, I have been reading the https://www.elastic.co/guide/en/shield/current/ssl-tls.html#install-signed-cert But I am not sure I understand. I have a root CA generated where I have defined SAN with all the node nam…

---

## [Update mapping for geoip.location](https://discuss.elastic.co/t/update-mapping-for-geoip-location/41244)

<div class="topic-metadata">

**Author:** [@gromit](https://discuss.elastic.co/u/gromit)\
**Replies:** 3\
**Last updated:** [February 9, 2016, 8:32am UTC](https://discuss.elastic.co/t/update-mapping-for-geoip-location/41244 "2016-02-09T08:32:03Z")

</div>

Using Elasticsearch 2,2 I'm trying to update the field type for geoip.location (currently mapped as type 'number') to type geo\_point using the following request: myindex/\_mapping/ { "properties": { "geoip.locati…

---

## [How to divide and visualize two aggregated data？](https://discuss.elastic.co/t/how-to-divide-and-visualize-two-aggregated-data/292758)

<div class="topic-metadata">

**Author:** [@wsysx123](https://discuss.elastic.co/u/wsysx123)\
**Replies:** 4\
**Last updated:** [December 24, 2021, 3:50pm UTC](https://discuss.elastic.co/t/how-to-divide-and-visualize-two-aggregated-data/292758 "2021-12-24T15:50:25Z")

</div>

As a beginner of Kibana, I feel very powerful. However, there is a problem that cannot be realized at present, so I hereby ask for advice. Suppose I have two fields, named 'key1' and 'key2', and aggregation them by 1 mi…

---

## [Logstash uses current year for timestamp without year and shows events with future dates](https://discuss.elastic.co/t/logstash-uses-current-year-for-timestamp-without-year-and-shows-events-with-future-dates/277877)

<div class="topic-metadata">

**Author:** [@theirfan](https://discuss.elastic.co/u/theirfan)\
**Replies:** 4\
**Last updated:** [July 8, 2021, 8:26am UTC](https://discuss.elastic.co/t/logstash-uses-current-year-for-timestamp-without-year-and-shows-events-with-future-dates/277877 "2021-07-08T08:26:53Z")

</div>

Hi Community !! I have logs wherein there's no year mentioned, and while parsing, logstash adds current year and makes the event appear in future dates. i checked on forums for a similar issue but unfortunately, there …

---

## [Using processor in Filebeat Nginx module](https://discuss.elastic.co/t/using-processor-in-filebeat-nginx-module/263368)

<div class="topic-metadata">

**Author:** [@jz1603](https://discuss.elastic.co/u/jz1603)\
**Replies:** 2\
**Last updated:** [February 5, 2021, 7:47pm UTC](https://discuss.elastic.co/t/using-processor-in-filebeat-nginx-module/263368 "2021-02-05T19:47:02Z")

</div>

I am trying to drop some fields on the indices ingested by the filebeat Nginx module. I followed the instructions on the thread https://discuss.elastic.co/t/how-to-use-processors-in-filebeat-haproxys-module/216256/3, bu…

---

## [I got error when use "elasticsearch-rest-high-level-client 7.5.1"](https://discuss.elastic.co/t/i-got-error-when-use-elasticsearch-rest-high-level-client-7-5-1/213171)

<div class="topic-metadata">

**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\
**Replies:** 1\
**Last updated:** [December 27, 2019, 12:03pm UTC](https://discuss.elastic.co/t/i-got-error-when-use-elasticsearch-rest-high-level-client-7-5-1/213171 "2019-12-27T12:03:55Z")

</div>

If i use elasticsearch-rest-high-level-client version 7.5.1, i got the following error: NoClassDefFoundError: org/elasticsearch/client/Cancellable However, if i use lower version to 7.4.x, it works fine. I followed …

---

## [How to update elasticsearch.yml if I am using Elastic cloud through API](https://discuss.elastic.co/t/how-to-update-elasticsearch-yml-if-i-am-using-elastic-cloud-through-api/279505)

<div class="topic-metadata">

**Author:** [@idelix](https://discuss.elastic.co/u/idelix)\
**Replies:** 5\
**Last updated:** [July 23, 2021, 5:30pm UTC](https://discuss.elastic.co/t/how-to-update-elasticsearch-yml-if-i-am-using-elastic-cloud-through-api/279505 "2021-07-23T17:30:05Z")

</div>

Hello, I'm trying to update elasticsearch.yml and kibana.yml in elastic cloud through API but I cannot find any reference. Basically I need to be able to configure it fully through API as it will be done by ci/cd pipel…

---

## [Wrong Long vlaue when store long value in es](https://discuss.elastic.co/t/wrong-long-vlaue-when-store-long-value-in-es/53882)

<div class="topic-metadata">

**Author:** [@yzhang226](https://discuss.elastic.co/u/yzhang226)\
**Replies:** 5\
**Last updated:** [February 21, 2017, 7:22am UTC](https://discuss.elastic.co/t/wrong-long-vlaue-when-store-long-value-in-es/53882 "2017-02-21T07:22:16Z")

</div>

today i met one long value convert issue, for clear seeing this issue, i capture one image, as following: logstash: 2.1.1 elasticsearch: 2.1.1 completely logstash config file is shown as following, input { stdin …

---

## [Kafka/log.go:53 producer/broker/38402 maximum request accumulated, waiting for space? when I set output.kafka.required\_acks: 0?](https://discuss.elastic.co/t/kafka-log-go-53-producer-broker-38402-maximum-request-accumulated-waiting-for-space-when-i-set-output-kafka-required-acks-0/195982)

<div class="topic-metadata">

**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\
**Replies:** 2\
**Last updated:** [August 22, 2019, 8:00pm UTC](https://discuss.elastic.co/t/kafka-log-go-53-producer-broker-38402-maximum-request-accumulated-waiting-for-space-when-i-set-output-kafka-required-acks-0/195982 "2019-08-22T20:00:45Z")

</div>

Hello, I see lots of "INFO kafka/log.go:53 producer/broker/38322 maximum request accumulated, waiting for space" even when I set output.kafka.required\_acks: 0, i am using filebeat 7.2. I thought when I set required\_…

---

## [After upgrade to 7.0.1 filebeat is complaining about a license](https://discuss.elastic.co/t/after-upgrade-to-7-0-1-filebeat-is-complaining-about-a-license/181233)

<div class="topic-metadata">

**Author:** [@werowe](https://discuss.elastic.co/u/werowe)\
**Replies:** 2\
**Last updated:** [May 16, 2019, 1:43pm UTC](https://discuss.elastic.co/t/after-upgrade-to-7-0-1-filebeat-is-complaining-about-a-license/181233 "2019-05-16T13:43:32Z")

</div>

After apt-get remove elasticsearch to remove version 6.x and then downloading version 7.0.1 ES and installing it with dpkg ES starts fine. In other words I kept my cluster config files the same. But filebeat is complai…

---

## [Errors when Kibana is fronted by an nginx reverse proxy](https://discuss.elastic.co/t/errors-when-kibana-is-fronted-by-an-nginx-reverse-proxy/94116)

<div class="topic-metadata">

**Author:** [@mark54g](https://discuss.elastic.co/u/mark54g)\
**Replies:** 2\
**Last updated:** [July 21, 2017, 6:38pm UTC](https://discuss.elastic.co/t/errors-when-kibana-is-fronted-by-an-nginx-reverse-proxy/94116 "2017-07-21T18:38:09Z")

</div>

Hi, all Having a weird one, and not able to specifically trace it to an nginx issue, though I'm not an expert there. Getting this error: 2017/07/20 19:16:44 \[crit\] 21618#0: \*3 open() "/etc/nginx/client\_body\_temp/00…

---

## [Syntax for readable long lines in logstash config](https://discuss.elastic.co/t/syntax-for-readable-long-lines-in-logstash-config/88754)

<div class="topic-metadata">

**Author:** [@selivan](https://discuss.elastic.co/u/selivan)\
**Replies:** 2\
**Last updated:** [June 8, 2017, 7:01pm UTC](https://discuss.elastic.co/t/syntax-for-readable-long-lines-in-logstash-config/88754 "2017-06-08T19:01:55Z")

</div>

I am using a very long grok templates to parse some complex logs like mysql slow log. It looks ugly in config: very long string, full of characters like (?\<z\>%{ZZ})? - hard to read and hard to write. Does logstash config…

---

## [Index Operation Update and delete existing records in elastic search](https://discuss.elastic.co/t/index-operation-update-and-delete-existing-records-in-elastic-search/69413)

<div class="topic-metadata">

**Author:** [@vikrant\_trivedi](https://discuss.elastic.co/u/vikrant_trivedi)\
**Replies:** 2\
**Last updated:** [December 19, 2016, 9:57am UTC](https://discuss.elastic.co/t/index-operation-update-and-delete-existing-records-in-elastic-search/69413 "2016-12-19T09:57:58Z")

</div>

I have used this way to creating index and fetching data from it. client.index({ index: 'check', id: '1', type: 'test', body: { …

[Previous page](https://discuss.elastic.co/top.md?page=930&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=932&per_page=50&period=all)
