# Top

**URL:** https://discuss.elastic.co/top.md?page=943&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 944

---

## [Logstash parsing for rich text documents](https://discuss.elastic.co/t/logstash-parsing-for-rich-text-documents/40640)

<div class="topic-metadata">

**Author:** [@Meenal.Luktuke](https://discuss.elastic.co/u/Meenal.Luktuke)\
**Replies:** 2\
**Last updated:** [April 22, 2016, 8:00am UTC](https://discuss.elastic.co/t/logstash-parsing-for-rich-text-documents/40640 "2016-04-22T08:00:38Z")

</div>

Hi, Can Logstash parse rich text documents? I have a use-case where the input is not logs, but some documents instead and then build some KPI in Kibana. I have 2 questions: 1) Can logstash do it with some plugin or I…

---

## [Trying to connect to mssql server with JDBC](https://discuss.elastic.co/t/trying-to-connect-to-mssql-server-with-jdbc/57003)

<div class="topic-metadata">

**Author:** [@valky05](https://discuss.elastic.co/u/valky05)\
**Replies:** 0\
**Last updated:** [August 2, 2016, 12:02pm UTC](https://discuss.elastic.co/t/trying-to-connect-to-mssql-server-with-jdbc/57003 "2016-08-02T12:02:52Z")

</div>

I'm currently trying to connect to a remote MSsql server with the JDBC plugin of Logstash. For the config file, I use the syntax proposed by mick66 on this thread: https://discuss.elastic.co/t/jdbc-mssql-server-connect…

---

## [Convert 2 Node Cluster Into Single Node](https://discuss.elastic.co/t/convert-2-node-cluster-into-single-node/316555)

<div class="topic-metadata">

**Author:** [@rhailey](https://discuss.elastic.co/u/rhailey)\
**Replies:** 7\
**Last updated:** [October 19, 2022, 1:10pm UTC](https://discuss.elastic.co/t/convert-2-node-cluster-into-single-node/316555 "2022-10-19T13:10:27Z")

</div>

Hello - I'm currently using Elastic 7.11 (open/communitiy version) as the back-end storage for Graylog (also the open/community version). OS is Oracle Linux v8. I have 2 Graylog servers, clustered, in front of 2 Elast…

---

## [/usr/share/logstash/bin/system-install: line 88: #: command not found](https://discuss.elastic.co/t/usr-share-logstash-bin-system-install-line-88-command-not-found/214242)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 1\
**Last updated:** [January 8, 2020, 2:48pm UTC](https://discuss.elastic.co/t/usr-share-logstash-bin-system-install-line-88-command-not-found/214242 "2020-01-08T14:48:05Z")

</div>

Hi, On upgrading from 7.5.0 to 7.5.1 I receive the error: Using provided startup.options file: /etc/logstash/startup.options OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 an…

---

## [Query to get exact cardinality counts](https://discuss.elastic.co/t/query-to-get-exact-cardinality-counts/180836)

<div class="topic-metadata">

**Author:** [@lask001](https://discuss.elastic.co/u/lask001)\
**Replies:** 1\
**Last updated:** [May 14, 2019, 2:24pm UTC](https://discuss.elastic.co/t/query-to-get-exact-cardinality-counts/180836 "2019-05-14T14:24:45Z")

</div>

I'm trying to get an exact count of documents that meet a specific criteria. Aggs queries are somewhat helpful, but I need to be able to return results as well so hoping someone knows a good way to approach this problem.…

---

## [Error saving Spark RDD using rdd.saveToEs](https://discuss.elastic.co/t/error-saving-spark-rdd-using-rdd-savetoes/96888)

<div class="topic-metadata">

**Author:** [@Antonio\_Ye](https://discuss.elastic.co/u/Antonio_Ye)\
**Replies:** 1\
**Last updated:** [August 15, 2017, 5:13pm UTC](https://discuss.elastic.co/t/error-saving-spark-rdd-using-rdd-savetoes/96888 "2017-08-15T17:13:03Z")

</div>

I have a simple Spark data frame which contains a column of JSON strings. When I run the following code: import org.elasticsearch.spark.\_ val df = Seq("""{“name”: “john”, “age”:44}""").toDF(“json”) df.rdd.map(x=\>x.get…

---

## [How can I schedule Logstash jdbc input ro run on specific minutes?](https://discuss.elastic.co/t/how-can-i-schedule-logstash-jdbc-input-ro-run-on-specific-minutes/79229)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [March 20, 2017, 11:04am UTC](https://discuss.elastic.co/t/how-can-i-schedule-logstash-jdbc-input-ro-run-on-specific-minutes/79229 "2017-03-20T11:04:12Z")

</div>

Hi, I am using ELK GA 5.0.0. I have set Logsrash jdbc to run on every 15th minute like; schedule =\> "15 \* \* \* \*" Now, I want to change this scheduler, to run on every 0th, 15th, 30th and 45th minute. How can I do th…

---

## [How to implement Near Me](https://discuss.elastic.co/t/how-to-implement-near-me/215304)

<div class="topic-metadata">

**Author:** [@JasonStoltz](https://discuss.elastic.co/u/JasonStoltz)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 11:32am UTC](https://discuss.elastic.co/t/how-to-implement-near-me/215304 "2020-01-16T11:32:42Z")

</div>

A user asked this question and then withdrew their post. Re-posting the answer here because I thought it was a valid question that others may have in the future: Near me can be implemented with a Geo Filter: Filters | S…

---

## [Output recurring events multiple times in a range query](https://discuss.elastic.co/t/output-recurring-events-multiple-times-in-a-range-query/119631)

<div class="topic-metadata">

**Author:** [@Wullschi](https://discuss.elastic.co/u/Wullschi)\
**Replies:** 0\
**Last updated:** [February 13, 2018, 12:30pm UTC](https://discuss.elastic.co/t/output-recurring-events-multiple-times-in-a-range-query/119631 "2018-02-13T12:30:04Z")

</div>

Hi, my indexed documents should represent events with a certain starting date. Some of those events can be reccuring. Every event has a nested date property which indicates the starting date of the event. If it is a rec…

---

## [Count for Nested array objects](https://discuss.elastic.co/t/count-for-nested-array-objects/19653)

<div class="topic-metadata">

**Author:** [@xfzhang15](https://discuss.elastic.co/u/xfzhang15)\
**Replies:** 0\
**Last updated:** [September 6, 2014, 7:16pm UTC](https://discuss.elastic.co/t/count-for-nested-array-objects/19653 "2014-09-06T19:16:28Z")

</div>

Hi, I was wondering if there's a way return count based on nested array items, instead of Document count. e.g: So if I have something like this: obj : { array : \[{ id: 1, group: A …

---

## [Elastic Cloud vs AWS ELK as a service](https://discuss.elastic.co/t/elastic-cloud-vs-aws-elk-as-a-service/268192)

<div class="topic-metadata">

**Author:** [@evgeniy777](https://discuss.elastic.co/u/evgeniy777)\
**Replies:** 1\
**Last updated:** [March 24, 2021, 10:46am UTC](https://discuss.elastic.co/t/elastic-cloud-vs-aws-elk-as-a-service/268192 "2021-03-24T10:46:26Z")

</div>

Hi all ! Can you please explain what the cons and pros of using both solutions ? VS https://cloud.elastic.co/ Thanks in advance

---

## [Persist data- Index pattern, dashboards gets wiped when container restarted](https://discuss.elastic.co/t/persist-data-index-pattern-dashboards-gets-wiped-when-container-restarted/233616)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 4\
**Last updated:** [May 27, 2020, 6:14pm UTC](https://discuss.elastic.co/t/persist-data-index-pattern-dashboards-gets-wiped-when-container-restarted/233616 "2020-05-27T18:14:10Z")

</div>

I am running my ELK and Beats services inside a docker container. I have created multiple index patterns and dashboards. But whenever I restart the docker container, the data gets wiped out. Is there a way to persist all…

---

## [How to ignore certain spans](https://discuss.elastic.co/t/how-to-ignore-certain-spans/232625)

<div class="topic-metadata">

**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\
**Replies:** 4\
**Last updated:** [May 14, 2020, 3:17pm UTC](https://discuss.elastic.co/t/how-to-ignore-certain-spans/232625 "2020-05-14T15:17:45Z")

</div>

Hello, I'm using Elastic Cloud and very pleased with it so far. However I've come with a requirement that I can't seem to find a solution for. Is someone able to point in the right direction? The application uses Mysql…

---

## [Filebeat not sending specific Log Files](https://discuss.elastic.co/t/filebeat-not-sending-specific-log-files/170776)

<div class="topic-metadata">

**Author:** [@shiva\_jawanjal](https://discuss.elastic.co/u/shiva_jawanjal)\
**Replies:** 4\
**Last updated:** [March 7, 2019, 6:28pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-specific-log-files/170776 "2019-03-07T18:28:38Z")

</div>

I have configured filebeat 6.6 on a Windows instance. Weird thing is, it is sending logs for IIS but not for file I have specified even though the filebeat can detect it. Filebeat.yml --\> filebeat.inputs: - type: log …

---

## [Logstash - Agent Failing to execute Actions](https://discuss.elastic.co/t/logstash-agent-failing-to-execute-actions/170580)

<div class="topic-metadata">

**Author:** [@Elliott954](https://discuss.elastic.co/u/Elliott954)\
**Replies:** 4\
**Last updated:** [March 3, 2019, 7:23am UTC](https://discuss.elastic.co/t/logstash-agent-failing-to-execute-actions/170580 "2019-03-03T07:23:13Z")

</div>

Hey Everyone, I'm currently trying to load some .csv data into my Elasticsearch/Kibana by using logstash. At this current time I'm getting the following error when I'm trying to load my data. \[WARN \] 2019-03-02 18:52:4…

---

## [Add Column in csv file logstash](https://discuss.elastic.co/t/add-column-in-csv-file-logstash/127853)

<div class="topic-metadata">

**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Replies:** 4\
**Last updated:** [April 13, 2018, 9:07am UTC](https://discuss.elastic.co/t/add-column-in-csv-file-logstash/127853 "2018-04-13T09:07:48Z")

</div>

hello everyone , please i need ur help i want add new columns in my logstash config file but i don't how do it ?? there is my config file : input { file { path =\> "C:\\elk\\logstash\\data.csv" start\_position =\> "begin…

---

## [Parse logs from log4j to logstash](https://discuss.elastic.co/t/parse-logs-from-log4j-to-logstash/131082)

<div class="topic-metadata">

**Author:** [@andradedb](https://discuss.elastic.co/u/andradedb)\
**Replies:** 3\
**Last updated:** [May 9, 2018, 1:19pm UTC](https://discuss.elastic.co/t/parse-logs-from-log4j-to-logstash/131082 "2018-05-09T13:19:46Z")

</div>

I'm trying to parse some old log files from log4j, but I can't find the right pattern for grok to do that. This is a snipet from the log 2018-04-12T15:10:25.180-0300 INFO CORE:VinculoServico:49 - teste 2018-04-12T15:1…

---

## [Kibana not showing correct logs](https://discuss.elastic.co/t/kibana-not-showing-correct-logs/247547)

<div class="topic-metadata">

**Author:** [@samra1810](https://discuss.elastic.co/u/samra1810)\
**Replies:** 1\
**Last updated:** [September 6, 2020, 9:41pm UTC](https://discuss.elastic.co/t/kibana-not-showing-correct-logs/247547 "2020-09-06T21:41:27Z")

</div>

EFK (Elasticsearch+Fluentd-(td-agent)+Kibana): Kibana not showing correct logs I have installed EFK on redhat linux system(version 7.6). Stable distribution of fluentd, that is td-agent is used instead of fluentd. Path…

---

## [Term VS. Match | ES 5.0.2](https://discuss.elastic.co/t/term-vs-match-es-5-0-2/69212)

<div class="topic-metadata">

**Author:** [@chromechris](https://discuss.elastic.co/u/chromechris)\
**Replies:** 1\
**Last updated:** [December 16, 2016, 9:25am UTC](https://discuss.elastic.co/t/term-vs-match-es-5-0-2/69212 "2016-12-16T09:25:34Z")

</div>

Ok, so I just came out of a 2 full day Watcher testing. I have been having issues with the Input body queries with watcher. For example, there are these two links in which one uses "match" in a "must", and another uses "…

---

## [Creating Dashbard and visualisation with python](https://discuss.elastic.co/t/creating-dashbard-and-visualisation-with-python/270235)

<div class="topic-metadata">

**Author:** [@rockiram](https://discuss.elastic.co/u/rockiram)\
**Replies:** 2\
**Last updated:** [April 15, 2021, 1:24pm UTC](https://discuss.elastic.co/t/creating-dashbard-and-visualisation-with-python/270235 "2021-04-15T13:24:02Z")

</div>

Hi, I am new to kibana. Is it possible to create kibana visualisation and dashboard using python? If so, Please suggest me some references to start Thanks in Advance!!!

---

## [Ingest pipeline gsub processor back reference not working](https://discuss.elastic.co/t/ingest-pipeline-gsub-processor-back-reference-not-working/329090)

<div class="topic-metadata">

**Author:** [@kmfreder1](https://discuss.elastic.co/u/kmfreder1)\
**Replies:** 8\
**Last updated:** [April 7, 2023, 12:36am UTC](https://discuss.elastic.co/t/ingest-pipeline-gsub-processor-back-reference-not-working/329090 "2023-04-07T00:36:18Z")

</div>

I am having trouble getting a back reference to work using the gsub processor in the elasticsearch ingest node pipeline. I am trying to get just the TLD from a dns.question.name field and using very similar syntax to wh…

---

## [How to split a single line message, into parts](https://discuss.elastic.co/t/how-to-split-a-single-line-message-into-parts/306982)

<div class="topic-metadata">

**Author:** [@Zerra\_Triani](https://discuss.elastic.co/u/Zerra_Triani)\
**Replies:** 8\
**Last updated:** [June 17, 2022, 5:36pm UTC](https://discuss.elastic.co/t/how-to-split-a-single-line-message-into-parts/306982 "2022-06-17T17:36:32Z")

</div>

Hi, I've created a logstash to filter a log and output a single message. Then I want to split that message into several fields. What filter plugin should I use? I try to use split filter and it doesn't work The example…

---

## [More master node?](https://discuss.elastic.co/t/more-master-node/323348)

<div class="topic-metadata">

**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\
**Replies:** 6\
**Last updated:** [January 17, 2023, 8:02pm UTC](https://discuss.elastic.co/t/more-master-node/323348 "2023-01-17T20:02:54Z")

</div>

Hello everyone, I explain my context. I am designing an architecture with 18 nodes where everyone can be master (of the 18 nodes, only 1 master remains) if necessary, but I feel that 1 for 17 is too little and I want to…

---

## [Pushing data through python to elastic search](https://discuss.elastic.co/t/pushing-data-through-python-to-elastic-search/315489)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 6\
**Last updated:** [October 2, 2022, 3:06am UTC](https://discuss.elastic.co/t/pushing-data-through-python-to-elastic-search/315489 "2022-10-02T03:06:33Z")

</div>

I'm trying to push some data that I've collected through Python into Elasticsearch but it's showing this error:- "ValueError: Can't specify the options 'http\_auth' via a dictionary in 'hosts', only 'host', 'path\_prefix',…

---

## [Gmail problems](https://discuss.elastic.co/t/gmail-problems/213467)

<div class="topic-metadata">

**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\
**Replies:** 6\
**Last updated:** [January 16, 2020, 11:00am UTC](https://discuss.elastic.co/t/gmail-problems/213467 "2020-01-16T11:00:26Z")

</div>

I'm trying to enable watcher to send email when conditions require an email to be sent. however i'm encounter issues and have been bashing my head against the wall for a while and decided its time to ask for assistance. …

---

## [When is best practice to use an ES node as HTTP only?](https://discuss.elastic.co/t/when-is-best-practice-to-use-an-es-node-as-http-only/14126)

<div class="topic-metadata">

**Author:** [@dantuff](https://discuss.elastic.co/u/dantuff)\
**Replies:** 6\
**Last updated:** [October 28, 2013, 11:02am UTC](https://discuss.elastic.co/t/when-is-best-practice-to-use-an-es-node-as-http-only/14126 "2013-10-28T11:02:25Z")

</div>

I'll have 5 ES nodes in my cluster, at this time I do not know how many documents we are going to have or what the average queries per second will be as we haven't go live yet. Should I set up one of the nodes as…

---

## [Link recognition in Elastic Detections emails seem wrong and confusing](https://discuss.elastic.co/t/link-recognition-in-elastic-detections-emails-seem-wrong-and-confusing/267156)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 7\
**Last updated:** [March 22, 2021, 12:25pm UTC](https://discuss.elastic.co/t/link-recognition-in-elastic-detections-emails-seem-wrong-and-confusing/267156 "2021-03-22T12:25:27Z")

</div>

Hello, While working with Elastic Emails alerts on detections, I've noticed several misrecognized links. For example: In the above example user.name is suddenly a link.., while this is just a part of a query. Anot…

---

## [Dynamic maximum range in Kibana 5.6.5 (Gauge)](https://discuss.elastic.co/t/dynamic-maximum-range-in-kibana-5-6-5-gauge/140169)

<div class="topic-metadata">

**Author:** [@giovanni.granda](https://discuss.elastic.co/u/giovanni.granda)\
**Replies:** 1\
**Last updated:** [July 17, 2018, 7:31am UTC](https://discuss.elastic.co/t/dynamic-maximum-range-in-kibana-5-6-5-gauge/140169 "2018-07-17T07:31:05Z")

</div>

I am using Kibana version 5.6.5; is it possible to have a max range value that is dynamic for the "gauge" or "metric" visualization in order to display an accurate percentage? We are using Kibana to display the results …

---

## [Kibana 4 display most recent value of field](https://discuss.elastic.co/t/kibana-4-display-most-recent-value-of-field/32026)

<div class="topic-metadata">

**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\
**Replies:** 1\
**Last updated:** [October 13, 2015, 4:05am UTC](https://discuss.elastic.co/t/kibana-4-display-most-recent-value-of-field/32026 "2015-10-13T04:05:25Z")

</div>

Hello All, is it possible to dispaly the most recent value of a field on any given dashboard? I would like to add a viusualisation displaying the most recent value of a field, in this case it's the data from a temper…

---

## [Gateway recovery exception](https://discuss.elastic.co/t/gateway-recovery-exception/7007)

<div class="topic-metadata">

**Author:** [@Johny\_John](https://discuss.elastic.co/u/Johny_John)\
**Replies:** 7\
**Last updated:** [March 24, 2012, 12:02pm UTC](https://discuss.elastic.co/t/gateway-recovery-exception/7007 "2012-03-24T12:02:17Z")

</div>

Hello, I manually deleted an index directory instead of playing a curl - XDELETE localhost:9200/indexName and i'm know stuck with a gateway recovery exception when i whant to restart the server : failed to start …

---

## [Snapshot Retention Task not deleting expired snapshots](https://discuss.elastic.co/t/snapshot-retention-task-not-deleting-expired-snapshots/215952)

<div class="topic-metadata">

**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\
**Replies:** 3\
**Last updated:** [January 28, 2020, 3:27pm UTC](https://discuss.elastic.co/t/snapshot-retention-task-not-deleting-expired-snapshots/215952 "2020-01-28T15:27:56Z")

</div>

For some reason, I cannot get the snapshot retention policy to delete old snapshots in one of my clusters. I successfully set up SLM on a test, standalone node ingesting a regular but small amount of data. The retention…

---

## [Logstash gives: Unknown setting '"bucket"' for s3 error](https://discuss.elastic.co/t/logstash-gives-unknown-setting-bucket-for-s3-error/187559)

<div class="topic-metadata">

**Author:** [@K\_B1](https://discuss.elastic.co/u/K_B1)\
**Replies:** 3\
**Last updated:** [June 26, 2019, 2:12pm UTC](https://discuss.elastic.co/t/logstash-gives-unknown-setting-bucket-for-s3-error/187559 "2019-06-26T14:12:32Z")

</div>

Referring to: Security for Elasticsearch is now free | Elastic Blog In order to get role-based access control, I upgraded my ELK stack from 6.8.1 to 7.1.1, though it should run on 6.8.1 also. I followed Secure Elas…

---

## [Unable to restore elasticsearch snapshot when using searchGuard](https://discuss.elastic.co/t/unable-to-restore-elasticsearch-snapshot-when-using-searchguard/104116)

<div class="topic-metadata">

**Author:** [@Milan](https://discuss.elastic.co/u/Milan)\
**Replies:** 3\
**Last updated:** [October 24, 2017, 9:00am UTC](https://discuss.elastic.co/t/unable-to-restore-elasticsearch-snapshot-when-using-searchguard/104116 "2017-10-24T09:00:43Z")

</div>

Hello, I'm having a problem when trying to restore a snapshot. Elasticsearch communications are secured using SearchGuard plugin. I've successfully been able to snapshot indexes to FS repository (shared samba repo). …

---

## [Logstash nested conditional statement one with null check](https://discuss.elastic.co/t/logstash-nested-conditional-statement-one-with-null-check/77946)

<div class="topic-metadata">

**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\
**Replies:** 3\
**Last updated:** [March 13, 2017, 12:39pm UTC](https://discuss.elastic.co/t/logstash-nested-conditional-statement-one-with-null-check/77946 "2017-03-13T12:39:04Z")

</div>

As i am trying to write a script that as to populate the "Category" based on "Knowledge Title" contains some text called "AGSS", but here the condition is that i need to check the "Category" is null then only i have to …

---

## [User Management for Kibana (Open Source tools)](https://discuss.elastic.co/t/user-management-for-kibana-open-source-tools/53650)

<div class="topic-metadata">

**Author:** [@rocky4bmw](https://discuss.elastic.co/u/rocky4bmw)\
**Replies:** 3\
**Last updated:** [June 22, 2016, 1:07pm UTC](https://discuss.elastic.co/t/user-management-for-kibana-open-source-tools/53650 "2016-06-22T13:07:22Z")

</div>

Hi Team, I have installed ELK on a single server , filebeats, topbeats on client servers. currently I am able to view logs in Kibana dashborad using admin credentials. How can we setup usermanagent on Kibana? Kind…

---

## [Cumulative bar chart について](https://discuss.elastic.co/t/cumulative-bar-chart/1205)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 3\
**Last updated:** [June 20, 2015, 6:42am UTC](https://discuss.elastic.co/t/cumulative-bar-chart/1205 "2015-06-20T06:42:14Z")

</div>

初めまして。 Kibana4 についての質問です。 ある値についてBar chartで月ごとにその月までの総和のグラフ(cumulative stack)を作りたく 悩んでいます。 Kibana 3 ではオプションとしてcumulative オプションがあったので 簡単にできたのですが、Kibana 4では無いようです。Date Histogram でx軸を月単位にするまではいいのですが、私の力不足もあり その月までの総和を…

---

## [Block in initialize'", block in healthcheck!' \[LOGSTASH\]](https://discuss.elastic.co/t/block-in-initialize-block-in-healthcheck-logstash/278432)

<div class="topic-metadata">

**Author:** [@Mesut\_Yilmaz](https://discuss.elastic.co/u/Mesut_Yilmaz)\
**Replies:** 4\
**Last updated:** [July 13, 2021, 12:32am UTC](https://discuss.elastic.co/t/block-in-initialize-block-in-healthcheck-logstash/278432 "2021-07-13T00:32:34Z")

</div>

I installed brand new logstash and I got the same error. logstash.conf is working config and systax is ok but I got pipeline error. systemctl start logstash - is running but on logstash-plain.log there are some errors as…

---

## [Wich RestHandler for Index Settings?](https://discuss.elastic.co/t/wich-resthandler-for-index-settings/24536)

<div class="topic-metadata">

**Author:** [@ESUser10](https://discuss.elastic.co/u/ESUser10)\
**Replies:** 4\
**Last updated:** [June 29, 2015, 12:09pm UTC](https://discuss.elastic.co/t/wich-resthandler-for-index-settings/24536 "2015-06-29T12:09:14Z")

</div>

If I create a index like: PUT /test { "type": "test", "fs": { "url": "c:\\temp", "update\_rate": "1h" } } I will get this settings of the Index with a RestHandler in a Plugin. MyQuestion is wich Resthand…

---

## [6.4.0: Field Type Conflict Resolution](https://discuss.elastic.co/t/6-4-0-field-type-conflict-resolution/146534)

<div class="topic-metadata">

**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\
**Replies:** 2\
**Last updated:** [August 29, 2018, 4:20pm UTC](https://discuss.elastic.co/t/6-4-0-field-type-conflict-resolution/146534 "2018-08-29T16:20:36Z")

</div>

After upgrading Kibana from 6.3.1 to 6.4.0, I have realized that resolving the field type conflicts has become unnecessary difficult. Management / Kibana / Indices does not show the actual conflict anymore, just useless …

---

## [Does Logstash "Elasticsearch" output plugin support client certificates](https://discuss.elastic.co/t/does-logstash-elasticsearch-output-plugin-support-client-certificates/100167)

<div class="topic-metadata">

**Author:** [@Bozzerreaneaux](https://discuss.elastic.co/u/Bozzerreaneaux)\
**Replies:** 2\
**Last updated:** [September 12, 2017, 8:21am UTC](https://discuss.elastic.co/t/does-logstash-elasticsearch-output-plugin-support-client-certificates/100167 "2017-09-12T08:21:39Z")

</div>

Hi Team , Does Logstash "Elasticsearch" output plugin support client certificates? I can only see option there (cacert) to verify the ES node certificate but I would also like the Logstash pipeline to also identify it…

---

## [How to reindex last bulk of docs of elasticsearch.helpers.parallel\_bulk?](https://discuss.elastic.co/t/how-to-reindex-last-bulk-of-docs-of-elasticsearch-helpers-parallel-bulk/66887)

<div class="topic-metadata">

**Author:** [@Moshe\_Sucaz](https://discuss.elastic.co/u/Moshe_Sucaz)\
**Replies:** 2\
**Last updated:** [November 30, 2016, 6:51am UTC](https://discuss.elastic.co/t/how-to-reindex-last-bulk-of-docs-of-elasticsearch-helpers-parallel-bulk/66887 "2016-11-30T06:51:56Z")

</div>

Hi, I am upgrading our elastic from 1.5.2 to 2.3.4. I wrote python re index script that is using elasticsearch.helpers.parallel\_bulk. When I am running the script, its reindexing perfectly 99% of the docs, but the last…

---

## [ElasticSearch and Cassandra Sync](https://discuss.elastic.co/t/elasticsearch-and-cassandra-sync/52502)

<div class="topic-metadata">

**Author:** [@zhili](https://discuss.elastic.co/u/zhili)\
**Replies:** 2\
**Last updated:** [June 11, 2016, 1:45pm UTC](https://discuss.elastic.co/t/elasticsearch-and-cassandra-sync/52502 "2016-06-11T13:45:37Z")

</div>

Hi, I want to use ElasticSearch for indexing and Cassandra as a database, but I found that the plugin river is deprecated. So how can I synchronize the data between my database and elasticseach (real time indexing). Than…

---

## [Elasticsearch same query has different performance](https://discuss.elastic.co/t/elasticsearch-same-query-has-different-performance/132765)

<div class="topic-metadata">

**Author:** [@ans76](https://discuss.elastic.co/u/ans76)\
**Replies:** 4\
**Last updated:** [May 24, 2018, 2:23pm UTC](https://discuss.elastic.co/t/elasticsearch-same-query-has-different-performance/132765 "2018-05-24T14:23:36Z")

</div>

I have 2 nodes in my cluster. n1: \[master:true data:true\] 8GB RAM 500GB Disk space n2: \[master:false data:true\] 8GB RAM 500GB Disk space Only one index for test(about 20000 docs), 5shards, 1replica Run the same quer…

---

## [Wrong visualize display field](https://discuss.elastic.co/t/wrong-visualize-display-field/50059)

<div class="topic-metadata">

**Author:** [@Valeriy](https://discuss.elastic.co/u/Valeriy)\
**Replies:** 5\
**Last updated:** [July 21, 2016, 5:54pm UTC](https://discuss.elastic.co/t/wrong-visualize-display-field/50059 "2016-07-21T17:54:51Z")

</div>

I am doing visualization and field hostname signed "analyzed field". What does this mean? This field is not on the graph displays full names. It must be like this: HOME-GW-R1 HOME-CUCM-PUB How to display the ful…

---

## [Optimize elasticsearch / JVM](https://discuss.elastic.co/t/optimize-elasticsearch-jvm/21874)

<div class="topic-metadata">

**Author:** [@oto\_iashvili](https://discuss.elastic.co/u/oto_iashvili)\
**Replies:** 5\
**Last updated:** [January 29, 2015, 10:38am UTC](https://discuss.elastic.co/t/optimize-elasticsearch-jvm/21874 "2015-01-29T10:38:22Z")

</div>

Hi I have a website for classified. For this I'm using elasticsearch, postgres and rails on a same ubuntu 14.04 dedicated server, with 256go of RAM and 20 cores, 40 threads . I have 10 indexes on elasticsearch,…

---

## [Indexing (insert) performance and tuning](https://discuss.elastic.co/t/indexing-insert-performance-and-tuning/10332)

<div class="topic-metadata">

**Author:** [@Omega\_Mike](https://discuss.elastic.co/u/Omega_Mike)\
**Replies:** 5\
**Last updated:** [January 16, 2013, 3:02pm UTC](https://discuss.elastic.co/t/indexing-insert-performance-and-tuning/10332 "2013-01-16T15:02:57Z")

</div>

I am currently testing ES as a replacement for MongoDB in a custom centralized logging mechanism. Using Mongo, I am able to throughput entries into the current instance at a rate of 500-800/second on average with pea…

---

## [Elasticsearch install error on MAC](https://discuss.elastic.co/t/elasticsearch-install-error-on-mac/321693)

<div class="topic-metadata">

**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\
**Replies:** 6\
**Last updated:** [December 21, 2022, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearch-install-error-on-mac/321693 "2022-12-21T14:31:23Z")

</div>

Hi, I am new to Elasticsearch, tried to install, when I try to hit the URL "http://localhost:9200/", it works fine. However when I need to reset a password it gives an error. ./elasticsearch-reset-password -u kibana\_sy…

---

## [Kibana 7.6.1: Getting values from kibana.yml](https://discuss.elastic.co/t/kibana-7-6-1-getting-values-from-kibana-yml/227076)

<div class="topic-metadata">

**Author:** [@Javek](https://discuss.elastic.co/u/Javek)\
**Replies:** 6\
**Last updated:** [April 13, 2020, 1:39pm UTC](https://discuss.elastic.co/t/kibana-7-6-1-getting-values-from-kibana-yml/227076 "2020-04-13T13:39:46Z")

</div>

Hello. At 7.4.2 kibana i was able to get hosts config value from clusterClient: const hosts = server.plugins.elasticsearch.getCluster('data').clusterClient.config.hosts But now at 7.6+ it's seems imposibble because htt…

---

## [ELK on Windows Server 2016 with Filebeat on Windows 10 client - problems](https://discuss.elastic.co/t/elk-on-windows-server-2016-with-filebeat-on-windows-10-client-problems/209667)

<div class="topic-metadata">

**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\
**Replies:** 6\
**Last updated:** [November 28, 2019, 10:33am UTC](https://discuss.elastic.co/t/elk-on-windows-server-2016-with-filebeat-on-windows-10-client-problems/209667 "2019-11-28T10:33:09Z")

</div>

Hello, I've setup ELK 7.4.2 on Windows Server 2016, with some of these references: http://robwillis.info/2019/05/installing-elk-7-elasticsearch-logstash-and-kibana-windows-server-2016/ and I've setup Filebeat on…

---

## [Status 404 on update](https://discuss.elastic.co/t/status-404-on-update/96432)

<div class="topic-metadata">

**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\
**Replies:** 6\
**Last updated:** [August 11, 2017, 11:31am UTC](https://discuss.elastic.co/t/status-404-on-update/96432 "2017-08-11T11:31:31Z")

</div>

Hi, I have a document that is inserted into elasticsearch under the index: index-%{+YYYY.MM.dd} where %{+YYYY.MM.dd}=2017-08-09 A day later another event comes in and I have to update that document I inserted yesterda…

[Previous page](https://discuss.elastic.co/top.md?page=942&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=944&per_page=50&period=all)
