# Top

**URL:** https://discuss.elastic.co/top.md?page=94&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 95

---

## [Client Nodes being oom-killed](https://discuss.elastic.co/t/client-nodes-being-oom-killed/133096)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 16\
**Last updated:** [May 31, 2018, 2:30pm UTC](https://discuss.elastic.co/t/client-nodes-being-oom-killed/133096 "2018-05-31T14:30:23Z")

</div>

Hi, I'm running elasticsearch 5.6.3 and am seeing my client nodes oom-killed periodically.This is odd because heap size is set to 4GB while the server itself has 8GB of RAM and nothing else is running on the node aside …

---

## [Can not connect to localhost:9600 for logstash](https://discuss.elastic.co/t/can-not-connect-to-localhost-9600-for-logstash/297687)

<div class="topic-metadata">

**Author:** [@TomYang1993](https://discuss.elastic.co/u/TomYang1993)\
**Replies:** 13\
**Last updated:** [February 23, 2022, 7:23pm UTC](https://discuss.elastic.co/t/can-not-connect-to-localhost-9600-for-logstash/297687 "2022-02-23T19:23:22Z")

</div>

logstash 7.17.0 Elasticsearch 7.17.0 logstash with all default settings, fresh install use sudo systemctl start logstash to start, sudo status shows logstash actively running However, curl -XGET 'localhost:9600/?pret…

---

## [Multiple terms in a single histogram](https://discuss.elastic.co/t/multiple-terms-in-a-single-histogram/61862)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 12\
**Last updated:** [October 10, 2016, 4:45pm UTC](https://discuss.elastic.co/t/multiple-terms-in-a-single-histogram/61862 "2016-10-10T16:45:09Z")

</div>

Topic says it. I have two string fields, service and protosigs that I'd like to use as a. I can get one (service): or the other (protosigs): But not both. Is there a way I can do this with the below? Thank you. …

---

## [Elasticsearch error of class not found](https://discuss.elastic.co/t/elasticsearch-error-of-class-not-found/16490)

<div class="topic-metadata">

**Author:** [@Anikessh\_Jain](https://discuss.elastic.co/u/Anikessh_Jain)\
**Replies:** 12\
**Last updated:** [March 21, 2014, 2:06am UTC](https://discuss.elastic.co/t/elasticsearch-error-of-class-not-found/16490 "2014-03-21T02:06:06Z")

</div>

Hi All. I am a newbie to Elastic search and I am configuring Kibana with Logstash and Redis and Elasticsearch in Centos 32 Bit and when i am trying to start the service of elastic search i am getting the below …

---

## [Filebeat does not release log files issue](https://discuss.elastic.co/t/filebeat-does-not-release-log-files-issue/85971)

<div class="topic-metadata">

**Author:** [@can.zhang](https://discuss.elastic.co/u/can.zhang)\
**Replies:** 18\
**Last updated:** [May 23, 2017, 12:52pm UTC](https://discuss.elastic.co/t/filebeat-does-not-release-log-files-issue/85971 "2017-05-23T12:52:50Z")

</div>

My Filebeat version is 1.3.1(amd64) filebeat.yml config like this: - paths: - /opt/mateinfo/logs/app/app.log input\_type: log fields: log\_format: wfm\_log4j fields\_under\_root: …

---

## [Neatly decorated emails from watch, without compromising security](https://discuss.elastic.co/t/neatly-decorated-emails-from-watch-without-compromising-security/63377)

<div class="topic-metadata">

**Author:** [@dan\_r](https://discuss.elastic.co/u/dan_r)\
**Replies:** 13\
**Last updated:** [December 13, 2016, 10:07am UTC](https://discuss.elastic.co/t/neatly-decorated-emails-from-watch-without-compromising-security/63377 "2016-12-13T10:07:18Z")

</div>

Hi I want my email alerts to be more user-friendly. In order to do so, I made some styled email templates (with mustache expressions) using css. Unfortunately i can't paste them here. According to the Watcher HTML Sani…

---

## [How to get the filesystem utilization via metricbeat?](https://discuss.elastic.co/t/how-to-get-the-filesystem-utilization-via-metricbeat/68676)

<div class="topic-metadata">

**Author:** [@sitanxin](https://discuss.elastic.co/u/sitanxin)\
**Replies:** 9\
**Last updated:** [December 16, 2016, 8:16am UTC](https://discuss.elastic.co/t/how-to-get-the-filesystem-utilization-via-metricbeat/68676 "2016-12-16T08:16:59Z")

</div>

Hi team, May I know how to get the filesystem utilization in Linux? Really don't know what does these 2 information means? system.filesystem.total system.filesystem.used.pct

---

## [Logstash unable to start and collect logs](https://discuss.elastic.co/t/logstash-unable-to-start-and-collect-logs/314296)

<div class="topic-metadata">

**Author:** [@khanchand](https://discuss.elastic.co/u/khanchand)\
**Replies:** 10\
**Last updated:** [September 14, 2022, 5:24am UTC](https://discuss.elastic.co/t/logstash-unable-to-start-and-collect-logs/314296 "2022-09-14T05:24:15Z")

</div>

Hi I have configure Elasticsearch, kibana & logstash on same machine. Want to receive firewall logs in logstash but facing below error. For now want to show these event on console only once received will forward in elast…

---

## [Kibana won't load any page, causes Elasticsearch plugin timeoutes](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466)

<div class="topic-metadata">

**Author:** [@Snick](https://discuss.elastic.co/u/Snick)\
**Replies:** 9\
**Last updated:** [June 12, 2017, 5:47pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466 "2017-06-12T17:47:18Z")

</div>

I recently upgraded my Elasticsearch nodes from 2.x to 5.3.2. Afterward, I installed a new server with an Elasticsearch client (master & date = False), and a new Kibana 5.3.2 instance on that node. Every time I go to loa…

---

## [Winlogbeat unable to communicate with logstash](https://discuss.elastic.co/t/winlogbeat-unable-to-communicate-with-logstash/321862)

<div class="topic-metadata">

**Author:** [@doudou](https://discuss.elastic.co/u/doudou)\
**Replies:** 25\
**Last updated:** [January 5, 2023, 2:32pm UTC](https://discuss.elastic.co/t/winlogbeat-unable-to-communicate-with-logstash/321862 "2023-01-05T14:32:37Z")

</div>

doudou@elkserver101:~$ doudou@elkserver101:~$ sudo /usr/share/logstash/bin/logstash -f /home/doudou/elk/pipeline.conf Using bundled JDK: /usr/share/logstash/jdk WARNING: Could not find logstash.yml which is typically loc…

---

## [FSCrawler path to remote dir](https://discuss.elastic.co/t/fscrawler-path-to-remote-dir/223080)

<div class="topic-metadata">

**Author:** [@LaaKii](https://discuss.elastic.co/u/LaaKii)\
**Replies:** 31\
**Last updated:** [March 12, 2020, 10:51am UTC](https://discuss.elastic.co/t/fscrawler-path-to-remote-dir/223080 "2020-03-12T10:51:18Z")

</div>

I'm using FSCrawler by @dadoonet and im trying to index files on a remote server. The ssh connection is established, but it can't find the path. I tried all variants I could think of in the URL String. My config looks …

---

## [Can two logstash commands run in parallel to pull data in elastic search?](https://discuss.elastic.co/t/can-two-logstash-commands-run-in-parallel-to-pull-data-in-elastic-search/38790)

<div class="topic-metadata">

**Author:** [@maryam.tauheed](https://discuss.elastic.co/u/maryam.tauheed)\
**Replies:** 10\
**Last updated:** [January 11, 2016, 11:47am UTC](https://discuss.elastic.co/t/can-two-logstash-commands-run-in-parallel-to-pull-data-in-elastic-search/38790 "2016-01-11T11:47:52Z")

</div>

I am tring to execute this command. "bin/logstash -f new.conf \< a.log and bin/logstash -f new.conf \< b.log" In my config file of logstash: output { elasticsearch { action=\>"index" hosts =\> \["localhost:9200"\] …

---

## [Elastic does not index some of the data](https://discuss.elastic.co/t/elastic-does-not-index-some-of-the-data/249459)

<div class="topic-metadata">

**Author:** [@Orly\_Knop](https://discuss.elastic.co/u/Orly_Knop)\
**Replies:** 10\
**Last updated:** [September 23, 2020, 9:13am UTC](https://discuss.elastic.co/t/elastic-does-not-index-some-of-the-data/249459 "2020-09-23T09:13:48Z")

</div>

I have set up indexing of 3 types of data: items, single pages and files. All of them are represented as objects with properties. This is some examples of the properties: For some reason, if I include file content pro…

---

## [New to ELK Stack, Logstash Will Not Start - Please Help](https://discuss.elastic.co/t/new-to-elk-stack-logstash-will-not-start-please-help/258172)

<div class="topic-metadata">

**Author:** [@NJMitchell](https://discuss.elastic.co/u/NJMitchell)\
**Replies:** 11\
**Last updated:** [December 9, 2020, 10:52pm UTC](https://discuss.elastic.co/t/new-to-elk-stack-logstash-will-not-start-please-help/258172 "2020-12-09T22:52:47Z")

</div>

Hello elastic community, I'm very new to the ELK stack and am working on getting a production environment up and running. So far I have a four node Elasticsearch cluster running with Kibana. Everything there is working …

---

## [Problem running elasticsearch in a minikube cluster](https://discuss.elastic.co/t/problem-running-elasticsearch-in-a-minikube-cluster/151031)

<div class="topic-metadata">

**Author:** [@anj\_kri](https://discuss.elastic.co/u/anj_kri)\
**Replies:** 9\
**Last updated:** [October 4, 2018, 12:58pm UTC](https://discuss.elastic.co/t/problem-running-elasticsearch-in-a-minikube-cluster/151031 "2018-10-04T12:58:14Z")

</div>

I have created a kubernetes cluster using minikube. created a helm chart of elasticsearch and installed it in the cluster. I have also passed the environment variables from the chart's deployment file to configure elast…

---

## [Parsing datapower syslog using GROK for latency calculation for given URI](https://discuss.elastic.co/t/parsing-datapower-syslog-using-grok-for-latency-calculation-for-given-uri/123118)

<div class="topic-metadata">

**Author:** [@mguttula](https://discuss.elastic.co/u/mguttula)\
**Replies:** 16\
**Last updated:** [March 13, 2018, 6:44pm UTC](https://discuss.elastic.co/t/parsing-datapower-syslog-using-grok-for-latency-calculation-for-given-uri/123118 "2018-03-13T18:44:19Z")

</div>

Hi, I'm new to GROK and Logstash. I'm trying to calculate the response time from latency field of a syslog entry of Datapower. Entry looks like following: 20180308T211418.088Z \[0x80e00073\]\[mpgw\]\[debug\] mpgw(MyServices…

---

## [Elasticsearch -2.3.0 BindTransportException on EC2](https://discuss.elastic.co/t/elasticsearch-2-3-0-bindtransportexception-on-ec2/54625)

<div class="topic-metadata">

**Author:** [@shivkumar](https://discuss.elastic.co/u/shivkumar)\
**Replies:** 13\
**Last updated:** [July 6, 2016, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-0-bindtransportexception-on-ec2/54625 "2016-07-06T10:49:54Z")

</div>

Hello, This is first time I am using elasticsearch . I am using AWS as my infrastructure. I have launched 4 EC2 Instances with the following purpose: 1. Instance 1 : Elasticsearch Client 2. Instance 2 : Elasticsearch…

---

## [TLS Between Elastic & Kibana…Alerts Not Working](https://discuss.elastic.co/t/tls-between-elastic-kibana-alerts-not-working/266367)

<div class="topic-metadata">

**Author:** [@Rok](https://discuss.elastic.co/u/Rok)\
**Replies:** 12\
**Last updated:** [April 9, 2021, 7:05am UTC](https://discuss.elastic.co/t/tls-between-elastic-kibana-alerts-not-working/266367 "2021-04-09T07:05:47Z")

</div>

Hi. I have established TLS on our cluster (v7.11.1). Entire cluster seems to be working fine except Alerts and Report section. The alerting section in kibana still says " You must enable Transport Layer Security Alerti…

---

## [Curator throwing error while restoring (Failed to complete action- )](https://discuss.elastic.co/t/curator-throwing-error-while-restoring-failed-to-complete-action/89308)

<div class="topic-metadata">

**Author:** [@Raj2](https://discuss.elastic.co/u/Raj2)\
**Replies:** 12\
**Last updated:** [June 14, 2017, 10:22am UTC](https://discuss.elastic.co/t/curator-throwing-error-while-restoring-failed-to-complete-action/89308 "2017-06-14T10:22:16Z")

</div>

I have recently made some upgrades in my dev box- ES 5.0 -\> ES 5.4 elasticsearch-curator 4.1.0 -\> elasticssearch-curator 5.1.1 Curator upgrade has automatically upgraded python elasticsearch package from 5.0.1 to 5.4.…

---

## [Filebeat -\> ElasticSearch for logrus running on k8s](https://discuss.elastic.co/t/filebeat-elasticsearch-for-logrus-running-on-k8s/312416)

<div class="topic-metadata">

**Author:** [@Austin\_ES\_Questions](https://discuss.elastic.co/u/Austin_ES_Questions)\
**Replies:** 27\
**Last updated:** [August 29, 2022, 9:41pm UTC](https://discuss.elastic.co/t/filebeat-elasticsearch-for-logrus-running-on-k8s/312416 "2022-08-29T21:41:32Z")

</div>

We are trying to get started with Elasticsearch, but can't seem to get json from filebeats into elasticsearch nicely formatted. We are using logrus in go and typescript, which writes to container log files in kubernetes.…

---

## [Delete\_by\_query & \_forcemerge doesn't free disk space](https://discuss.elastic.co/t/delete-by-query-forcemerge-doesnt-free-disk-space/129352)

<div class="topic-metadata">

**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\
**Replies:** 10\
**Last updated:** [April 25, 2018, 8:25am UTC](https://discuss.elastic.co/t/delete-by-query-forcemerge-doesnt-free-disk-space/129352 "2018-04-25T08:25:27Z")

</div>

Hi, I used delete\_by\_query API to delete multiple documents and after that \_forcemerge API to remove deleted documents. However, when I use \_forcemerge API it finishes instantly and disk usage is the same. Why my API c…

---

## [How to have a boolean based field migrated from MongoDB to Elasticsearch using Logstash?](https://discuss.elastic.co/t/how-to-have-a-boolean-based-field-migrated-from-mongodb-to-elasticsearch-using-logstash/164589)

<div class="topic-metadata">

**Author:** [@topgun743](https://discuss.elastic.co/u/topgun743)\
**Replies:** 20\
**Last updated:** [January 17, 2019, 11:40am UTC](https://discuss.elastic.co/t/how-to-have-a-boolean-based-field-migrated-from-mongodb-to-elasticsearch-using-logstash/164589 "2019-01-17T11:40:58Z")

</div>

I have banged my head on so many internet forums but failed to accomplish this. Here are my sample documents present in my MongoDB in test collection: { "\_id" : ObjectId("59a41f63dba6488b33268377"), "EntityID":…

---

## [ClassCastException\[null\] when grouping on a particular field](https://discuss.elastic.co/t/classcastexception-null-when-grouping-on-a-particular-field/40604)

<div class="topic-metadata">

**Author:** [@Ankur\_Kumar](https://discuss.elastic.co/u/Ankur_Kumar)\
**Replies:** 9\
**Last updated:** [February 1, 2016, 1:07pm UTC](https://discuss.elastic.co/t/classcastexception-null-when-grouping-on-a-particular-field/40604 "2016-02-01T13:07:52Z")

</div>

I am trying to group the results on a particular field by using the following query: { "from": 0, "size": 0, "fields": \[ "exitPage.categoryId" \], "aggs": { "check": { "terms": { …

---

## [Data too large indices:data/read/search\[phase/query](https://discuss.elastic.co/t/data-too-large-indices-data-read-search-phase-query/323770)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 10\
**Last updated:** [January 31, 2023, 3:53pm UTC](https://discuss.elastic.co/t/data-too-large-indices-data-read-search-phase-query/323770 "2023-01-31T15:53:51Z")

</div>

Hi How I can increase such value ? for avoid any disturbance in read data over kibana \[parent\] Data too large, data for \[indices:data/read/search\[phase/query\]\] would be \[4093997030/3.8gb\], which is larger than the …

---

## [Filebeat not able to send all logs](https://discuss.elastic.co/t/filebeat-not-able-to-send-all-logs/257930)

<div class="topic-metadata">

**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\
**Replies:** 11\
**Last updated:** [December 16, 2020, 9:47am UTC](https://discuss.elastic.co/t/filebeat-not-able-to-send-all-logs/257930 "2020-12-16T09:47:12Z")

</div>

Hi, We are using filebeat as a deamonset on kubernetes nodes to collect all application logs and sending them to logstash and then to elasticsearch. In our Prod environment, we have some pods writing huge volume of eve…

---

## [Elasticsearch on z/OS](https://discuss.elastic.co/t/elasticsearch-on-z-os/62449)

<div class="topic-metadata">

**Author:** [@bneelima84](https://discuss.elastic.co/u/bneelima84)\
**Replies:** 12\
**Last updated:** [January 6, 2017, 4:50am UTC](https://discuss.elastic.co/t/elasticsearch-on-z-os/62449 "2017-01-06T04:50:21Z")

</div>

Hi, We are using elasticsearch 2.4.0 on WebSphere 8.5.x as an embedded node. Server starts up fine, but when indexing is triggered, it starts indexing, but halts after a while with the checksum failure and shards b…

---

## [Error trying tutorial for csv parsing for ingest pipeline](https://discuss.elastic.co/t/error-trying-tutorial-for-csv-parsing-for-ingest-pipeline/91194)

<div class="topic-metadata">

**Author:** [@abd.wsu](https://discuss.elastic.co/u/abd.wsu)\
**Replies:** 13\
**Last updated:** [June 29, 2017, 4:18pm UTC](https://discuss.elastic.co/t/error-trying-tutorial-for-csv-parsing-for-ingest-pipeline/91194 "2017-06-29T16:18:46Z")

</div>

Hello, I am trying this tutorial However, I am doing everything as suggested. I removed the header line and converted the double quotes to single quotes from the csv file using sed using my RHEL box. When I try t…

---

## [Parsing csv file through Logstash](https://discuss.elastic.co/t/parsing-csv-file-through-logstash/274792)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 17\
**Last updated:** [June 11, 2021, 9:01pm UTC](https://discuss.elastic.co/t/parsing-csv-file-through-logstash/274792 "2021-06-11T21:01:28Z")

</div>

Hi All, I am running ELK stack 7.6.2. I need to parse a csv through Logstash. My logstash conf file looks like this: input { file { path =\> "/opt/gtal/ictal/elasticsearch/app/logstash/stage/STATS-01062021.txt" …

---

## [Elasticsearch could not store watch with watch id](https://discuss.elastic.co/t/elasticsearch-could-not-store-watch-with-watch-id/167619)

<div class="topic-metadata">

**Author:** [@Kanthasamyraja](https://discuss.elastic.co/u/Kanthasamyraja)\
**Replies:** 15\
**Last updated:** [February 11, 2019, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-could-not-store-watch-with-watch-id/167619 "2019-02-11T18:27:46Z")

</div>

Hi, Am using ELK version 6.5.4. Running with trial license. I am getting the below ERROR message. could not store triggered watch with id \[\_d6Y1y0bQ4mypPMdh3YZzg\_xpack\_license\_expiration\_89c0aa03-0208-400b-a351-db9cf5…

---

## [Kibana hangs browser tab while populating dashboard](https://discuss.elastic.co/t/kibana-hangs-browser-tab-while-populating-dashboard/142463)

<div class="topic-metadata">

**Author:** [@jay\_shah](https://discuss.elastic.co/u/jay_shah)\
**Replies:** 14\
**Last updated:** [August 7, 2018, 8:55pm UTC](https://discuss.elastic.co/t/kibana-hangs-browser-tab-while-populating-dashboard/142463 "2018-08-07T20:55:48Z")

</div>

Hi, I have a requirement of showing data tables having approx 8 to 10 columns with large data (approx 250k or more). But it seems like fetching of data is successful but Kibana cannot render the table and webpage becom…

---

## [Configurer Winlogbeat](https://discuss.elastic.co/t/configurer-winlogbeat/95153)

<div class="topic-metadata">

**Author:** [@pitieu](https://discuss.elastic.co/u/pitieu)\
**Replies:** 12\
**Last updated:** [August 10, 2017, 9:37am UTC](https://discuss.elastic.co/t/configurer-winlogbeat/95153 "2017-08-10T09:37:24Z")

</div>

Bonjour, Je souhaiterai récupérer des logs de mes serveurs windows mais je ne comprends pas comment configurer côté Windows et côté elastic. Pouvez-vous m’éclairer sur ces 2 points? Merci de votre aide. Matthieu.

---

## [Save elasticsearch document field value in java variable](https://discuss.elastic.co/t/save-elasticsearch-document-field-value-in-java-variable/116227)

<div class="topic-metadata">

**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\
**Replies:** 17\
**Last updated:** [January 23, 2018, 11:12am UTC](https://discuss.elastic.co/t/save-elasticsearch-document-field-value-in-java-variable/116227 "2018-01-23T11:12:06Z")

</div>

How can I save the the field value in a variable in Java. { "took": 6, "timed\_out": false, "\_shards": { "total": 10, "successful": 10, "skipped": 0, "failed": 0 }, "hits": { "total": 177643…

---

## [Disabling \_source field](https://discuss.elastic.co/t/disabling--source-field/2849)

<div class="topic-metadata">

**Author:** [@Sergio\_Bossa](https://discuss.elastic.co/u/Sergio_Bossa)\
**Replies:** 21\
**Last updated:** [March 18, 2010, 2:46pm UTC](https://discuss.elastic.co/t/disabling--source-field/2849 "2010-03-18T14:46:37Z")

</div>

Hi Shay, weeks ago we talked about the possibility to disable the "\_source" field, in order to avoid storing a verbatim copy of the indexed document inside the Lucene index: did you think about that? What about add…

---

## [In logstash can we have multiple inputs and combine the result set and process the combined data to one output?](https://discuss.elastic.co/t/in-logstash-can-we-have-multiple-inputs-and-combine-the-result-set-and-process-the-combined-data-to-one-output/129281)

<div class="topic-metadata">

**Author:** [@manjur](https://discuss.elastic.co/u/manjur)\
**Replies:** 9\
**Last updated:** [April 24, 2018, 1:11pm UTC](https://discuss.elastic.co/t/in-logstash-can-we-have-multiple-inputs-and-combine-the-result-set-and-process-the-combined-data-to-one-output/129281 "2018-04-24T13:11:40Z")

</div>

Hi , I am using a config file like below. In the input section I am pulling the data from different database. I want to perform join and combine results in filter section. basically I just want to merge the result se…

---

## [Pub/Sub integration with JSON Processor: "Cannot index event (status=400): dropping event! Enable debug logs to view the event and cause."](https://discuss.elastic.co/t/pub-sub-integration-with-json-processor-cannot-index-event-status-400-dropping-event-enable-debug-logs-to-view-the-event-and-cause/354760)

<div class="topic-metadata">

**Author:** [@tommed](https://discuss.elastic.co/u/tommed)\
**Replies:** 12\
**Last updated:** [March 14, 2024, 3:57pm UTC](https://discuss.elastic.co/t/pub-sub-integration-with-json-processor-cannot-index-event-status-400-dropping-event-enable-debug-logs-to-view-the-event-and-cause/354760 "2024-03-14T15:57:11Z")

</div>

I have created a Pub/Sub integration instance which imports data from a topic and ingests it into Elastic. This part works as expected. If I then re-configure the integration and specify a custom ingest pipeline (which …

---

## [Not able connect to elastic apm server from AWS lambda](https://discuss.elastic.co/t/not-able-connect-to-elastic-apm-server-from-aws-lambda/312813)

<div class="topic-metadata">

**Author:** [@Pratiksha\_Nagoshe](https://discuss.elastic.co/u/Pratiksha_Nagoshe)\
**Replies:** 23\
**Last updated:** [September 14, 2022, 5:09am UTC](https://discuss.elastic.co/t/not-able-connect-to-elastic-apm-server-from-aws-lambda/312813 "2022-09-14T05:09:43Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Not able to load data from hive to Elasticsearch using ESStorage Handler](https://discuss.elastic.co/t/not-able-to-load-data-from-hive-to-elasticsearch-using-esstorage-handler/127094)

<div class="topic-metadata">

**Author:** [@krishnaSH](https://discuss.elastic.co/u/krishnaSH)\
**Replies:** 13\
**Last updated:** [May 10, 2018, 12:20pm UTC](https://discuss.elastic.co/t/not-able-to-load-data-from-hive-to-elasticsearch-using-esstorage-handler/127094 "2018-05-10T12:20:46Z")

</div>

I am picking up data from AWS in a hive table and I am overwriting another ES-Hive table as per the steps mentioned in ES-hadoop integration steps:- https://www.elastic.co/guide/en/elasticsearch/hadoop/current/configurat…

---

## [ElasticSearch stops responding after reaching a certain number of "fails to parse query" errors](https://discuss.elastic.co/t/elasticsearch-stops-responding-after-reaching-a-certain-number-of-fails-to-parse-query-errors/170601)

<div class="topic-metadata">

**Author:** [@gopal.ramakrishnan](https://discuss.elastic.co/u/gopal.ramakrishnan)\
**Replies:** 9\
**Last updated:** [March 18, 2019, 9:33pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-responding-after-reaching-a-certain-number-of-fails-to-parse-query-errors/170601 "2019-03-18T21:33:06Z")

</div>

When the search string has special characters the 'query\_string' search fails with the error "Failed to parse query \[sam\] at org.elasticsearch.index.query.QueryStringQueryBuilder.doToQuery" Our issue here is not this e…

---

## [Kibana suddenly rounding number field to single digit](https://discuss.elastic.co/t/kibana-suddenly-rounding-number-field-to-single-digit/276003)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 12\
**Last updated:** [July 14, 2021, 1:41pm UTC](https://discuss.elastic.co/t/kibana-suddenly-rounding-number-field-to-single-digit/276003 "2021-07-14T13:41:16Z")

</div>

Hi All, Apologies in advance as this is likely to be a stupid error on my part but it's got me stumped at the moment. I'm running Elasticsearch and Kibana 7.12 and for some months have been using Logstash to input logg…

---

## [Elasticsearch input missing \[@metadata\]\[\_index\]](https://discuss.elastic.co/t/elasticsearch-input-missing-metadata-index/223594)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 13\
**Last updated:** [March 18, 2020, 11:13pm UTC](https://discuss.elastic.co/t/elasticsearch-input-missing-metadata-index/223594 "2020-03-18T23:13:29Z")

</div>

I'm doing some work with ES-input, ES-filter for lookup and ES-output into a new index... but the lookup uses \[@metadata\]\[\_index\] information. And I've been noticing a HUGE load of errors on LS log for missing that. Any …

---

## [The System cannot find the path error](https://discuss.elastic.co/t/the-system-cannot-find-the-path-error/138216)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 14\
**Last updated:** [July 4, 2018, 12:41pm UTC](https://discuss.elastic.co/t/the-system-cannot-find-the-path-error/138216 "2018-07-04T12:41:47Z")

</div>

I will be as descriptive as I can: I have been fiddling with ELK for 2/3 days now, just got it to work. I have it installed in one of our servers in a linux OS and use VMware console to connect to it. I can access Kiban…

---

## [Как добавить analyser к существующему индексу?](https://discuss.elastic.co/t/analyser/152614)

<div class="topic-metadata">

**Author:** [@pavuk](https://discuss.elastic.co/u/pavuk)\
**Replies:** 11\
**Last updated:** [October 23, 2018, 1:02pm UTC](https://discuss.elastic.co/t/analyser/152614 "2018-10-23T13:02:13Z")

</div>

Есть индекс xenf с текстовым полем messages. Я хочу делать текстовый анализ этого поля и пытаюсь прикрутить анализатор примерно вот так: PUT xenf { "settings": { "analysis": { "filter": { "custom\_engli…

---

## [Kibana 4.3.1 Windows Error](https://discuss.elastic.co/t/kibana-4-3-1-windows-error/39471)

<div class="topic-metadata">

**Author:** [@Rama](https://discuss.elastic.co/u/Rama)\
**Replies:** 15\
**Last updated:** [January 20, 2016, 12:43pm UTC](https://discuss.elastic.co/t/kibana-4-3-1-windows-error/39471 "2016-01-20T12:43:05Z")

</div>

Hi, Uncaught TypeError: Cannot use 'in' operator to search for 'length' in 3 (http://localhost:5601/bundles/commons.bundle.js:18824) Version: 4.3.1 Build: 9517 Error: Uncaught TypeError: Cannot use 'in' operator to…

---

## [Helping debugging s3 pluging with 2.4 / intellij](https://discuss.elastic.co/t/helping-debugging-s3-pluging-with-2-4-intellij/83602)

<div class="topic-metadata">

**Author:** [@samiam](https://discuss.elastic.co/u/samiam)\
**Replies:** 19\
**Last updated:** [May 13, 2017, 9:26pm UTC](https://discuss.elastic.co/t/helping-debugging-s3-pluging-with-2-4-intellij/83602 "2017-05-13T21:26:36Z")

</div>

Hi, I am successfully debugging elasticsearch 2.4 with Intellij, but I want to be able to step through the s3 snapshot plugin. I can't seem to install it and was looking for some help as to how to. My ultimate goa…

---

## [Logstash exceptionCaught() event](https://discuss.elastic.co/t/logstash-exceptioncaught-event/141814)

<div class="topic-metadata">

**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\
**Replies:** 12\
**Last updated:** [August 7, 2018, 12:18pm UTC](https://discuss.elastic.co/t/logstash-exceptioncaught-event/141814 "2018-08-07T12:18:51Z")

</div>

Hi, I use filebeat to send logs to logstash who is running in a docker's container on ubuntu. Since the gathered log files format was modified, i have a lot of grokparse failure. I don't know if there is a relation bu…

---

## [Logstash Issue with netflow modul (5.6)](https://discuss.elastic.co/t/logstash-issue-with-netflow-modul-5-6/100554)

<div class="topic-metadata">

**Author:** [@lumi](https://discuss.elastic.co/u/lumi)\
**Replies:** 10\
**Last updated:** [October 1, 2017, 12:53am UTC](https://discuss.elastic.co/t/logstash-issue-with-netflow-modul-5-6/100554 "2017-10-01T00:53:33Z")

</div>

Hello I installed Logstash 5.6 and X-pack. Now i try to to configure it as it is described in the link: I configured it in /etc/logstash/logstash.yml modules: - name: netflow #var.elasticsearch.hosts: "ht…

---

## [How to find out why a document get is slow?](https://discuss.elastic.co/t/how-to-find-out-why-a-document-get-is-slow/73203)

<div class="topic-metadata">

**Author:** [@Attila\_Nagy](https://discuss.elastic.co/u/Attila_Nagy)\
**Replies:** 12\
**Last updated:** [February 2, 2017, 1:40pm UTC](https://discuss.elastic.co/t/how-to-find-out-why-a-document-get-is-slow/73203 "2017-02-02T13:40:18Z")

</div>

Hi, After upgrading from 2.4 to 5.1.2, we can see a tremendous increase of response times in simple document gets (from java's get API over transport protocol). Previously -with 2.4-, the response times were in the ran…

---

## [KibanaでIndex Patternsを作ると、Service Unabailableとなる](https://discuss.elastic.co/t/kibana-index-patterns-service-unabailable/147524)

<div class="topic-metadata">

**Author:** [@hogehuga](https://discuss.elastic.co/u/hogehuga)\
**Replies:** 11\
**Last updated:** [September 10, 2018, 1:42am UTC](https://discuss.elastic.co/t/kibana-index-patterns-service-unabailable/147524 "2018-09-10T01:42:37Z")

</div>

表題の通り、IndexPatternを作ろうとすると、Creating index pattern...となるところで Service Unavailableになります。 \[Management/Kibana/IndexPatterns\]で作成したものを選択しても表示されず、\[SavedObjects\]で選択して削除するしか方法がなくなります。 ログをみる限り成功しているように見えます。 入れる際に@timestampの調整をして…

---

## [Why i can't to access to the interface of kibana?](https://discuss.elastic.co/t/why-i-cant-to-access-to-the-interface-of-kibana/308195)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 13\
**Last updated:** [June 28, 2022, 6:35pm UTC](https://discuss.elastic.co/t/why-i-cant-to-access-to-the-interface-of-kibana/308195 "2022-06-28T18:35:04Z")

</div>

i already installed elastic and kibana 8.2 in ubuntu 22.04 and i try to access kibana from the browser of my host it told me "Kibana server is not ready yet" this my elastic and kibana yml files : network.host: 192.16…

---

## [Define field as nested type using Logstash](https://discuss.elastic.co/t/define-field-as-nested-type-using-logstash/242289)

<div class="topic-metadata">

**Author:** [@Yoorae\_Kim](https://discuss.elastic.co/u/Yoorae_Kim)\
**Replies:** 9\
**Last updated:** [July 23, 2020, 9:06am UTC](https://discuss.elastic.co/t/define-field-as-nested-type-using-logstash/242289 "2020-07-23T09:06:39Z")

</div>

Hello, I am currently shipping my data to Elasticsearch using Logstash. The inner-hit query I am trying to perform is returning an error saying "failed to create query: \[nested\] nested object under path \[transactions\]…

[Previous page](https://discuss.elastic.co/top.md?page=93&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=95&per_page=50&period=all)
