# Top

**URL:** https://discuss.elastic.co/top.md?page=944&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 945

---

## [Search no have any results](https://discuss.elastic.co/t/search-no-have-any-results/95645)

<div class="topic-metadata">

**Author:** [@parsa](https://discuss.elastic.co/u/parsa)\
**Replies:** 6\
**Last updated:** [August 6, 2017, 1:38pm UTC](https://discuss.elastic.co/t/search-no-have-any-results/95645 "2017-08-06T13:38:28Z")

</div>

Hi I’m an asp.net developer and I want to implement elastic search in windows. I installed and configured the elasticsearch serivice like as described in this articles: 1- http://caraulean.com/2016/install-and-configur…

---

## [Why isn't Lucene's BreakIteratorBoundaryScanner supported?](https://discuss.elastic.co/t/why-isnt-lucenes-breakiteratorboundaryscanner-supported/75461)

<div class="topic-metadata">

**Author:** [@Shai\_Erera](https://discuss.elastic.co/u/Shai_Erera)\
**Replies:** 6\
**Last updated:** [February 19, 2017, 10:33am UTC](https://discuss.elastic.co/t/why-isnt-lucenes-breakiteratorboundaryscanner-supported/75461 "2017-02-19T10:33:55Z")

</div>

Hi, I noticed that when requesting to perform highlighting of search results (with FVH), one can only specify the boundary characters. I also reviewed the FastVectorHighlighter code (in Elastic) and saw it only creates t…

---

## [What does max\_docs do in context of \_delete\_by\_query](https://discuss.elastic.co/t/what-does-max-docs-do-in-context-of-delete-by-query/256317)

<div class="topic-metadata">

**Author:** [@vangogh94](https://discuss.elastic.co/u/vangogh94)\
**Replies:** 3\
**Last updated:** [November 23, 2020, 10:53am UTC](https://discuss.elastic.co/t/what-does-max-docs-do-in-context-of-delete-by-query/256317 "2020-11-23T10:53:41Z")

</div>

Hi, Looking at the documentation for \_delete\_by\_query API, there is a parameter called "max\_docs". From what i see it was added to documentation in 7.3. This same parameter is shown on \_reindex API documentation and ha…

---

## [Filebeat having error in bulk index operations](https://discuss.elastic.co/t/filebeat-having-error-in-bulk-index-operations/141339)

<div class="topic-metadata">

**Author:** [@rich456](https://discuss.elastic.co/u/rich456)\
**Replies:** 2\
**Last updated:** [July 24, 2018, 9:33am UTC](https://discuss.elastic.co/t/filebeat-having-error-in-bulk-index-operations/141339 "2018-07-24T09:33:08Z")

</div>

Hi all, I just started exploring ELK stack for my company and I am quite new to this. I am encountering an error, and this is the error logs: 2018/07/24 09:01:35.330832 client.go:297: DBG ES Ping(url=http://10.130.12.…

---

## [How to make a new custom global variable?](https://discuss.elastic.co/t/how-to-make-a-new-custom-global-variable/75163)

<div class="topic-metadata">

**Author:** [@valereds](https://discuss.elastic.co/u/valereds)\
**Replies:** 2\
**Last updated:** [February 15, 2017, 8:39pm UTC](https://discuss.elastic.co/t/how-to-make-a-new-custom-global-variable/75163 "2017-02-15T20:39:53Z")

</div>

Hi all, I need to make a custom global variable (to write inside the kibana.yml) and maybe access to its value from the 'config' service inside my controllers. Can anyone explain me how kibana deals with settings variabl…

---

## [UDP listener died. IOError: closed stream](https://discuss.elastic.co/t/udp-listener-died-ioerror-closed-stream/44009)

<div class="topic-metadata">

**Author:** [@Alexey\_Khudyakov](https://discuss.elastic.co/u/Alexey_Khudyakov)\
**Replies:** 2\
**Last updated:** [December 21, 2016, 10:27am UTC](https://discuss.elastic.co/t/udp-listener-died-ioerror-closed-stream/44009 "2016-12-21T10:27:50Z")

</div>

Dear community, I'm evaluating logstash and stuck on this problem with a UDP Input. The part of config input { udp { port =\> 9995 type =\> "netflow" } } Logstash version is 2.2.2 OS is Centos Linux 7, …

---

## [Accessing \_source from script search in 5.0](https://discuss.elastic.co/t/accessing--source-from-script-search-in-5-0/64358)

<div class="topic-metadata">

**Author:** [@Nicolas\_Garfinkiel](https://discuss.elastic.co/u/Nicolas_Garfinkiel)\
**Replies:** 2\
**Last updated:** [October 30, 2016, 3:09pm UTC](https://discuss.elastic.co/t/accessing--source-from-script-search-in-5-0/64358 "2016-10-30T15:09:13Z")

</div>

Hey all, I think I'm going crazy... Could someone tell me why I fail to access the \_source field on this query? { "size": 0, "query": { "constant\_score": { "filter": { "script": { "scrip…

---

## [Problems with error "File was truncated. Begin reading file from offset 0"](https://discuss.elastic.co/t/problems-with-error-file-was-truncated-begin-reading-file-from-offset-0/279959)

<div class="topic-metadata">

**Author:** [@mark\_vr](https://discuss.elastic.co/u/mark_vr)\
**Replies:** 4\
**Last updated:** [July 29, 2021, 5:32pm UTC](https://discuss.elastic.co/t/problems-with-error-file-was-truncated-begin-reading-file-from-offset-0/279959 "2021-07-29T17:32:17Z")

</div>

We use Azure Kubernetes Service, and our HTTP logs are written by the loadbalancer (ingress) to shared Azure storage. I'd like to read these logs and import them to Elasticsearch. I realise reading from shared storage …

---

## [Change \_id field generation strategy from UUID-strings to long (by means of ES)](https://discuss.elastic.co/t/change-id-field-generation-strategy-from-uuid-strings-to-long-by-means-of-es/198050)

<div class="topic-metadata">

**Author:** [@tworogue](https://discuss.elastic.co/u/tworogue)\
**Replies:** 1\
**Last updated:** [September 4, 2019, 4:31pm UTC](https://discuss.elastic.co/t/change-id-field-generation-strategy-from-uuid-strings-to-long-by-means-of-es/198050 "2019-09-04T16:31:54Z")

</div>

Hello! I'm wondering if I can change the default behavior for '\_id' field generation. I'd like ES to generate ids, but, instead of Flake-based string UUIDs I would like to get long (incremental, sequential) numbers (re…

---

## [Filebeat memory leak suddenly after all the files consumed](https://discuss.elastic.co/t/filebeat-memory-leak-suddenly-after-all-the-files-consumed/131831)

<div class="topic-metadata">

**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\
**Replies:** 4\
**Last updated:** [May 16, 2018, 1:56pm UTC](https://discuss.elastic.co/t/filebeat-memory-leak-suddenly-after-all-the-files-consumed/131831 "2018-05-16T13:56:10Z")

</div>

I use filebeat to ship data to elasticsearch, there are over 100 files to consume. my setting for harvesters are as below. close the harvester immediately after the EOF, and harvester\_limit is 2. it works fine but the …

---

## [Elasticsearch, SAML configuration, help required](https://discuss.elastic.co/t/elasticsearch-saml-configuration-help-required/218934)

<div class="topic-metadata">

**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\
**Replies:** 7\
**Last updated:** [February 18, 2020, 5:22pm UTC](https://discuss.elastic.co/t/elasticsearch-saml-configuration-help-required/218934 "2020-02-18T17:22:18Z")

</div>

Elasticsearch Version: 7.5.2 Kibana Version: 7.5.2 Deployment: Elastic.co Cloud Managed Hello, we are seeing strange issues when using saml on our production deployment, it all worked fine during our trial which is st…

---

## [Parsing apache access log file and extract timestamp](https://discuss.elastic.co/t/parsing-apache-access-log-file-and-extract-timestamp/162016)

<div class="topic-metadata">

**Author:** [@Eliot54](https://discuss.elastic.co/u/Eliot54)\
**Replies:** 1\
**Last updated:** [January 3, 2019, 3:30pm UTC](https://discuss.elastic.co/t/parsing-apache-access-log-file-and-extract-timestamp/162016 "2019-01-03T15:30:01Z")

</div>

I'm trying to use a custom log file with the following format in ELK : 109.70.81.5 - - \[01/Jul/1995:00:00:01 -0400\] "GET /history/apollo/ HTTP/1.0" 200 6245 However logstash /kibana keeps using my localhosts timestamp …

---

## [Any alert integration can be setup?](https://discuss.elastic.co/t/any-alert-integration-can-be-setup/175671)

<div class="topic-metadata">

**Author:** [@Vincent\_Ngai](https://discuss.elastic.co/u/Vincent_Ngai)\
**Replies:** 5\
**Last updated:** [April 9, 2019, 8:38am UTC](https://discuss.elastic.co/t/any-alert-integration-can-be-setup/175671 "2019-04-09T08:38:21Z")

</div>

Great. Neat combine all we need ....Infra for K8S(metrics), Logging(filebeat) , ElasticAPM(apm-server) and now Uptime (heatbeat) But do there have Alert can be setup for Uptime ?(hook to email, slack or other com tools) …

---

## [Migrating daily indices to monthly](https://discuss.elastic.co/t/migrating-daily-indices-to-monthly/102636)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 5\
**Last updated:** [October 4, 2017, 6:47am UTC](https://discuss.elastic.co/t/migrating-daily-indices-to-monthly/102636 "2017-10-04T06:47:17Z")

</div>

Hi, I am trying to collapse daily indices to monthly but when i try to match the count of both old and new indices, it does not match. This is my current logstash config look like. input { elasticsearch { hosts …

---

## [Logstash input plugin log4j not working in unix](https://discuss.elastic.co/t/logstash-input-plugin-log4j-not-working-in-unix/84049)

<div class="topic-metadata">

**Author:** [@mdafrozhcl](https://discuss.elastic.co/u/mdafrozhcl)\
**Replies:** 5\
**Last updated:** [May 4, 2017, 5:18am UTC](https://discuss.elastic.co/t/logstash-input-plugin-log4j-not-working-in-unix/84049 "2017-05-04T05:18:42Z")

</div>

I am facing Serialization errors with logstash 5.2.1 while trying to use log4j and socket appender. I have a custom log4j layouts/appenders which writes json objects as string while emmiting json string with socket appe…

---

## [Cluster configuration 1 shard 0 replicas](https://discuss.elastic.co/t/cluster-configuration-1-shard-0-replicas/72391)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 5\
**Last updated:** [January 23, 2017, 5:25am UTC](https://discuss.elastic.co/t/cluster-configuration-1-shard-0-replicas/72391 "2017-01-23T05:25:02Z")

</div>

I have an elasticsearch cluster consisted of 3 nodes. I want to create time based index (let's say, every month I will create a new index) and store it on 1 node. Than the node will replicate automatically the index to t…

---

## [Ruby Filter to delete array element with regexp](https://discuss.elastic.co/t/ruby-filter-to-delete-array-element-with-regexp/197131)

<div class="topic-metadata">

**Author:** [@Thiago\_Paiva](https://discuss.elastic.co/u/Thiago_Paiva)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 2:55pm UTC](https://discuss.elastic.co/t/ruby-filter-to-delete-array-element-with-regexp/197131 "2019-08-28T14:55:27Z")

</div>

Hi, I try to delete an array element using a regexp, But code isn't run. Imput json: \`{"test":"The http module allows to expose\\nThe http module allows to expose\\ncamp:using asynchronous communication\\nusing asynchrono…

---

## [Monitor YARN Application jobs](https://discuss.elastic.co/t/monitor-yarn-application-jobs/160443)

<div class="topic-metadata">

**Author:** [@amillion8](https://discuss.elastic.co/u/amillion8)\
**Replies:** 2\
**Last updated:** [December 12, 2018, 9:47pm UTC](https://discuss.elastic.co/t/monitor-yarn-application-jobs/160443 "2018-12-12T21:47:42Z")

</div>

Has anyone done YARN application jobs monitoring with Elastic? If so, how did you do that? Thanks, Alex

---

## [Painless scripting - how to compare two different fields present in two different documents of an index](https://discuss.elastic.co/t/painless-scripting-how-to-compare-two-different-fields-present-in-two-different-documents-of-an-index/112026)

<div class="topic-metadata">

**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\
**Replies:** 2\
**Last updated:** [December 15, 2017, 11:01pm UTC](https://discuss.elastic.co/t/painless-scripting-how-to-compare-two-different-fields-present-in-two-different-documents-of-an-index/112026 "2017-12-15T23:01:13Z")

</div>

Hi , I want to compare field 'start\_time' present in document 'A' and field 'end\_time' present document 'B' and get the result as new field in the document using painless scripting. I am using scripted fields in kibana …

---

## [Kibana Visualizations changing color on refresh \[OPEN BUG\]](https://discuss.elastic.co/t/kibana-visualizations-changing-color-on-refresh-open-bug/106280)

<div class="topic-metadata">

**Author:** [@gotjoshua](https://discuss.elastic.co/u/gotjoshua)\
**Replies:** 2\
**Last updated:** [November 10, 2017, 3:26pm UTC](https://discuss.elastic.co/t/kibana-visualizations-changing-color-on-refresh-open-bug/106280 "2017-11-10T15:26:15Z")

</div>

It seems that if you don't manually set the colors on a chart, they will randomize on each refresh: \[ChartRandomcolor2\]\[ChartRandomcolor1\] Is this feature or bug? I would expect that kibana would choose random colors …

---

## [Exclude specific bucket with integer key from term aggregation](https://discuss.elastic.co/t/exclude-specific-bucket-with-integer-key-from-term-aggregation/19141)

<div class="topic-metadata">

**Author:** [@micpalmia](https://discuss.elastic.co/u/micpalmia)\
**Replies:** 2\
**Last updated:** [August 22, 2014, 9:47am UTC](https://discuss.elastic.co/t/exclude-specific-bucket-with-integer-key-from-term-aggregation/19141 "2014-08-22T09:47:07Z")

</div>

Hi all! My documents contain an integer array field storing the id of tags describing them. Given a specific tag id, I want to extract a list of top tags that occur most frequently together with the provided one. I c…

---

## [Nested fields upsert with Spark not working](https://discuss.elastic.co/t/nested-fields-upsert-with-spark-not-working/146633)

<div class="topic-metadata">

**Author:** [@cluengo](https://discuss.elastic.co/u/cluengo)\
**Replies:** 3\
**Last updated:** [September 5, 2018, 8:11am UTC](https://discuss.elastic.co/t/nested-fields-upsert-with-spark-not-working/146633 "2018-09-05T08:11:33Z")

</div>

Hi, I already asked this a few months ago, but since the answer was that it would be fixed in a following release, I wanted to know whether I'm doing something wrong, or if it's still not fixed. I'm trying to update a …

---

## [Refresh Field List through API Call](https://discuss.elastic.co/t/refresh-field-list-through-api-call/198764)

<div class="topic-metadata">

**Author:** [@singhamitprakash](https://discuss.elastic.co/u/singhamitprakash)\
**Replies:** 1\
**Last updated:** [September 10, 2019, 11:41am UTC](https://discuss.elastic.co/t/refresh-field-list-through-api-call/198764 "2019-09-10T11:41:33Z")

</div>

Hi, We are adding new fields to our existing index and would like to show these new fields on our kibana dashboard. However, noticed that new field is not available right away and requires a field list refresh through m…

---

## [Randomize results with the same score](https://discuss.elastic.co/t/randomize-results-with-the-same-score/104163)

<div class="topic-metadata">

**Author:** [@kulmen](https://discuss.elastic.co/u/kulmen)\
**Replies:** 1\
**Last updated:** [November 10, 2017, 6:17pm UTC](https://discuss.elastic.co/t/randomize-results-with-the-same-score/104163 "2017-11-10T18:17:17Z")

</div>

I have indexed documents with lot of not analyzed mostly numeric fields and one analyzed field 'title'. And on that data I built search engine which generates less or more complicated bool queries. In results I need to h…

---

## [Summing up average of two fields](https://discuss.elastic.co/t/summing-up-average-of-two-fields/97659)

<div class="topic-metadata">

**Author:** [@iam.xtreme](https://discuss.elastic.co/u/iam.xtreme)\
**Replies:** 1\
**Last updated:** [August 21, 2017, 7:01pm UTC](https://discuss.elastic.co/t/summing-up-average-of-two-fields/97659 "2017-08-21T19:01:46Z")

</div>

Hi Team, Just wanted to know , if it is possible to sum up, the average of two data fields to one? For example, say i have, two numeric fields dumped into elasticsearch, viz. ‘expenses’ and ‘balance’ and i have to calc…

---

## [LogStash Special Character Split Error](https://discuss.elastic.co/t/logstash-special-character-split-error/295137)

<div class="topic-metadata">

**Author:** [@eagles40cnuh](https://discuss.elastic.co/u/eagles40cnuh)\
**Replies:** 6\
**Last updated:** [January 24, 2022, 9:10am UTC](https://discuss.elastic.co/t/logstash-special-character-split-error/295137 "2022-01-24T09:10:40Z")

</div>

Hi! I have some problem with Logstash Filter Filebeat collect -\> "aaa.log" file and then message field -\> "ID∮NAME∮TELNO" And Logstash.conf is input { beats { port =\> xxxx } filter { mutate { split =\> { "message"…

---

## [Issue with elastic cluster after upgrade to 6.5.0](https://discuss.elastic.co/t/issue-with-elastic-cluster-after-upgrade-to-6-5-0/157768)

<div class="topic-metadata">

**Author:** [@planetvortex](https://discuss.elastic.co/u/planetvortex)\
**Replies:** 6\
**Last updated:** [November 27, 2018, 5:06pm UTC](https://discuss.elastic.co/t/issue-with-elastic-cluster-after-upgrade-to-6-5-0/157768 "2018-11-27T17:06:29Z")

</div>

My master node is reporting the following error "role retrieval failed from \[native roles store\]" \[2018-11-21T18:27:50,739\]\[WARN \]\[o.e.x.s.a.s.CompositeRolesStore\] \[elk-master-2.mydomain.net\] role retrieval failed from…

---

## [Data is not avaialable for some metrics](https://discuss.elastic.co/t/data-is-not-avaialable-for-some-metrics/145381)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 6\
**Last updated:** [August 24, 2018, 10:19am UTC](https://discuss.elastic.co/t/data-is-not-avaialable-for-some-metrics/145381 "2018-08-24T10:19:39Z")

</div>

Hello All, I am using metricbeat6.2.4 and all the other component are also 6.2.4 like ELK. I have imported metricbeat dashboard but didn't get value for some metrics. Please refer the below screenshot: Can anyone pl…

---

## [Not available when you only have two zones. See Fault Tolerance in the documentation to learn more.?](https://discuss.elastic.co/t/not-available-when-you-only-have-two-zones-see-fault-tolerance-in-the-documentation-to-learn-more/138459)

<div class="topic-metadata">

**Author:** [@rkalluri](https://discuss.elastic.co/u/rkalluri)\
**Replies:** 6\
**Last updated:** [July 5, 2018, 3:52pm UTC](https://discuss.elastic.co/t/not-available-when-you-only-have-two-zones-see-fault-tolerance-in-the-documentation-to-learn-more/138459 "2018-07-05T15:52:24Z")

</div>

I have 2 zones, and want my elastic cluster to scale across them but for some reason ECE does not let me choose the 2 zones option with a Not available when you only have two zones. See Fault Tolerance in the documenta…

---

## [Update document giving status 404](https://discuss.elastic.co/t/update-document-giving-status-404/129818)

<div class="topic-metadata">

**Author:** [@saramali](https://discuss.elastic.co/u/saramali)\
**Replies:** 6\
**Last updated:** [April 27, 2018, 2:34pm UTC](https://discuss.elastic.co/t/update-document-giving-status-404/129818 "2018-04-27T14:34:52Z")

</div>

I just updated to 6.1.4. My logstash script is working fine but in the elasticsearch window it is giving me the following "dex=\>"khoji-logs-2018-04-27", :\_type=\>"doc", :\_routing=\>nil, :\_retry\_on\_conflict=\>1}, #LogStash…

---

## [Ordering ES Document Fields like SQL](https://discuss.elastic.co/t/ordering-es-document-fields-like-sql/168823)

<div class="topic-metadata">

**Author:** [@KashiPashoria\_Tonny](https://discuss.elastic.co/u/KashiPashoria_Tonny)\
**Replies:** 4\
**Last updated:** [February 18, 2019, 2:43pm UTC](https://discuss.elastic.co/t/ordering-es-document-fields-like-sql/168823 "2019-02-18T14:43:55Z")

</div>

I'm using elasticsearch version 6.6. I'm upgraded from version 2.x to 6.6. I want to store my document fields in a specific order as it was in elasticsearch version 2.x that fields are saved in exact same order as they a…

---

## [How to use IF ELSE conduction in grok pattern in logstash](https://discuss.elastic.co/t/how-to-use-if-else-conduction-in-grok-pattern-in-logstash/164458)

<div class="topic-metadata">

**Author:** [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)\
**Replies:** 4\
**Last updated:** [January 16, 2019, 8:12pm UTC](https://discuss.elastic.co/t/how-to-use-if-else-conduction-in-grok-pattern-in-logstash/164458 "2019-01-16T20:12:44Z")

</div>

I have web and API log combined and I want to save it separately in elasticsearch. So I want to write one pattern if the request is for API then if past should execute, the request is web then else part of the log should…

---

## [Java REST client returning long value in Exponential](https://discuss.elastic.co/t/java-rest-client-returning-long-value-in-exponential/100681)

<div class="topic-metadata">

**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\
**Replies:** 4\
**Last updated:** [September 25, 2017, 11:44am UTC](https://discuss.elastic.co/t/java-rest-client-returning-long-value-in-exponential/100681 "2017-09-25T11:44:58Z")

</div>

Hi, I am using java REST client of Elasticsearch. I have a requirement where i need to find the max value of a long field from all the documents in an Index. I ran a POST http://localhost:9200/myIndex/myType/\_search?si…

---

## [The First Run of Kibana 4 makes Elasticsearch crash](https://discuss.elastic.co/t/the-first-run-of-kibana-4-makes-elasticsearch-crash/23843)

<div class="topic-metadata">

**Author:** [@Aldian](https://discuss.elastic.co/u/Aldian)\
**Replies:** 4\
**Last updated:** [July 21, 2015, 1:12pm UTC](https://discuss.elastic.co/t/the-first-run-of-kibana-4-makes-elasticsearch-crash/23843 "2015-07-21T13:12:52Z")

</div>

Hi! I tried several times to migrate to kibana 4 but every time I access the interface and configure the indice pattern, kibana will load forever until Elasticsearch crashes around 10 min later. Then Kibana 4 shows an …

---

## [Filebeat logging - ERROR	\[logstash\]	logstash/async.go:280 Failed to publish events caused by: read tcp](https://discuss.elastic.co/t/filebeat-logging-error-logstash-logstash-async-go-280-failed-to-publish-events-caused-by-read-tcp/266330)

<div class="topic-metadata">

**Author:** [@newmember](https://discuss.elastic.co/u/newmember)\
**Replies:** 2\
**Last updated:** [March 5, 2021, 4:27pm UTC](https://discuss.elastic.co/t/filebeat-logging-error-logstash-logstash-async-go-280-failed-to-publish-events-caused-by-read-tcp/266330 "2021-03-05T16:27:52Z")

</div>

I am trying to figure out if these timeouts are a bad thing or just notifications of no consequence. From a cmd I can telnet to 10.10.98.102:5044 and the port opens. There is a cert there that I can see with a cURL. T…

---

## [Auditbeat OSS fails to start](https://discuss.elastic.co/t/auditbeat-oss-fails-to-start/236261)

<div class="topic-metadata">

**Author:** [@Khasim\_Soudagar](https://discuss.elastic.co/u/Khasim_Soudagar)\
**Replies:** 2\
**Last updated:** [June 10, 2020, 4:07pm UTC](https://discuss.elastic.co/t/auditbeat-oss-fails-to-start/236261 "2020-06-10T16:07:56Z")

</div>

Please find the error message below, i have installed auditbeat and ELK stack from OSS repository. But failed to start auditbeat, can anyone please help me on this. \`\[khasim@vm1\] ~\]$ sudo systemctl status -l auditbeat.s…

---

## [\[WARN \]\[o.e.g.DanglingIndicesState\] \[X\] - can not be imported as a dangling index, as index with same name already exists in cluster metadata](https://discuss.elastic.co/t/warn-o-e-g-danglingindicesstate-x-can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/102756)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [October 5, 2017, 1:30am UTC](https://discuss.elastic.co/t/warn-o-e-g-danglingindicesstate-x-can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/102756 "2017-10-05T01:30:16Z")

</div>

whenever I start my cluster, my logs produces a lot of these messages (just different name for index): elasticsearch11 | \[2017-10-04T20:20:44,936\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[114ff04a775b\] \[\[.monitoring-es-…

---

## [Java agent in IBM Websphere 8.5.5 not send events](https://discuss.elastic.co/t/java-agent-in-ibm-websphere-8-5-5-not-send-events/272688)

<div class="topic-metadata">

**Author:** [@fernandezsjanto](https://discuss.elastic.co/u/fernandezsjanto)\
**Replies:** 7\
**Last updated:** [May 19, 2021, 11:57am UTC](https://discuss.elastic.co/t/java-agent-in-ibm-websphere-8-5-5-not-send-events/272688 "2021-05-19T11:57:04Z")

</div>

Kibana version: 7.10.1 Elasticsearch version: 7.10.1 APM Server version: 7.10.2 APM Agent language and version: java 1.23.0 Browser version: Original install method (e.g. download page, yum, deb, from source, et…

---

## [Filebeat output not reaching logstash](https://discuss.elastic.co/t/filebeat-output-not-reaching-logstash/133971)

<div class="topic-metadata">

**Author:** [@devika\_sudheer](https://discuss.elastic.co/u/devika_sudheer)\
**Replies:** 7\
**Last updated:** [June 1, 2018, 6:36am UTC](https://discuss.elastic.co/t/filebeat-output-not-reaching-logstash/133971 "2018-06-01T06:36:36Z")

</div>

I have logstash, es and kibana inside docker-compose. They are communicating to each other well. But filebeat which is installed outside is responsible for fetching data from a file and sending to logstash. Filebeat is h…

---

## [Finding the query in agg\_table.js context](https://discuss.elastic.co/t/finding-the-query-in-agg-table-js-context/99336)

<div class="topic-metadata">

**Author:** [@leofer](https://discuss.elastic.co/u/leofer)\
**Replies:** 7\
**Last updated:** [September 13, 2017, 3:17pm UTC](https://discuss.elastic.co/t/finding-the-query-in-agg-table-js-context/99336 "2017-09-13T15:17:25Z")

</div>

Hi, I’m trying to develop server side query analysis tool, and I’m modifying the src/ui/public/agg\_table/agg\_table.js I was able to add some stuff, but what I would really like to to, is to get the query text (just lik…

---

## [Logstash 5 beta 1: Ruby exception occurred: undefined method \`\[\]'](https://discuss.elastic.co/t/logstash-5-beta-1-ruby-exception-occurred-undefined-method/62376)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [October 6, 2016, 12:30pm UTC](https://discuss.elastic.co/t/logstash-5-beta-1-ruby-exception-occurred-undefined-method/62376 "2016-10-06T12:30:32Z")

</div>

Hi, I am currently playing around with logstash 5 beta 1. When I use my filter settings, which are fine with 2.3.4 I get now a ruby exception: Ruby exception occurred: undefined method \`\[\]'... my filter code is as …

---

## [Cyrillic symbols and query with prefix](https://discuss.elastic.co/t/cyrillic-symbols-and-query-with-prefix/54332)

<div class="topic-metadata">

**Author:** [@klimvv](https://discuss.elastic.co/u/klimvv)\
**Replies:** 1\
**Last updated:** [July 4, 2016, 9:08am UTC](https://discuss.elastic.co/t/cyrillic-symbols-and-query-with-prefix/54332 "2016-07-04T09:08:58Z")

</div>

Hello! Help me, please, to solve such problem. I use this query res = es.search(index='sinki', doc\_type='dwg', body={"query": { "bool": { "must": \[ { "match": {"dwgobj": "комплекс оборудования"} }, { "prefix": …

---

## [Language Translation API](https://discuss.elastic.co/t/language-translation-api/216886)

<div class="topic-metadata">

**Author:** [@jyotis](https://discuss.elastic.co/u/jyotis)\
**Replies:** 3\
**Last updated:** [January 30, 2020, 11:47am UTC](https://discuss.elastic.co/t/language-translation-api/216886 "2020-01-30T11:47:37Z")

</div>

Hi Team, I want to integrate Elastic search with my App. I'm wondering if there is any API(Rest API) for language translation. My use case is if i search in french "problème", would be able to get result related to prob…

---

## [Logstash exec input plugin empty message](https://discuss.elastic.co/t/logstash-exec-input-plugin-empty-message/192316)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 3\
**Last updated:** [July 26, 2019, 8:38pm UTC](https://discuss.elastic.co/t/logstash-exec-input-plugin-empty-message/192316 "2019-07-26T20:38:53Z")

</div>

Hi, i'm trying to use logstash exec input plugin to run a shell script, however i'm not getting any result. i have a sample shell script /scripts/myscript.sh the contents is just ls if i start logstash with the foll…

---

## [Json parse failure on curl post data](https://discuss.elastic.co/t/json-parse-failure-on-curl-post-data/165884)

<div class="topic-metadata">

**Author:** [@hoff](https://discuss.elastic.co/u/hoff)\
**Replies:** 3\
**Last updated:** [January 27, 2019, 9:03pm UTC](https://discuss.elastic.co/t/json-parse-failure-on-curl-post-data/165884 "2019-01-27T21:03:53Z")

</div>

I have a script that sends json via curl. My question is am I able to display data that is not parsed by json codec? \[2019-01-25T11:10:01,403\]\[WARN \]\[logstash.filters.json \] Parsed JSON object/hash requires a tar…

---

## [Logstash - port closed](https://discuss.elastic.co/t/logstash-port-closed/109774)

<div class="topic-metadata">

**Author:** [@Tade](https://discuss.elastic.co/u/Tade)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 7:33am UTC](https://discuss.elastic.co/t/logstash-port-closed/109774 "2017-12-05T07:33:36Z")

</div>

Hi, I have problem with logstash - service is running, but port 10515 isnt open :frowning: Here is my logstash.conf: input { udp { host =\> "192.168.201.30" port =\> 10514 codec =\> "json" type =\> "rsyslog" } } f…

---

## [Log Sync time](https://discuss.elastic.co/t/log-sync-time/102500)

<div class="topic-metadata">

**Author:** [@shethsaam](https://discuss.elastic.co/u/shethsaam)\
**Replies:** 3\
**Last updated:** [October 3, 2017, 1:27pm UTC](https://discuss.elastic.co/t/log-sync-time/102500 "2017-10-03T13:27:14Z")

</div>

Hi, I am having a setup wherein I am sending Win Event logs from my local machine (windows 10) to Elastic cloud (service). My Config: Winglogbeat -\>Elastic search -\> Kibana. Working on the setup, I need to find the defa…

---

## [Cluster broke after some network troubles](https://discuss.elastic.co/t/cluster-broke-after-some-network-troubles/100206)

<div class="topic-metadata">

**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\
**Replies:** 3\
**Last updated:** [September 22, 2017, 7:33am UTC](https://discuss.elastic.co/t/cluster-broke-after-some-network-troubles/100206 "2017-09-22T07:33:17Z")

</div>

hello guys , i need some advice. Is it possible configure elasticsearch cluster 2.3.4 to restore connection between nodes that placed in different servers after some network troubles. i have next configuration: server…

---

## [No alive nodes found in cluster](https://discuss.elastic.co/t/no-alive-nodes-found-in-cluster/178032)

<div class="topic-metadata">

**Author:** [@Sulcalibur](https://discuss.elastic.co/u/Sulcalibur)\
**Replies:** 5\
**Last updated:** [April 23, 2019, 1:33pm UTC](https://discuss.elastic.co/t/no-alive-nodes-found-in-cluster/178032 "2019-04-23T13:33:44Z")

</div>

I have installed Elasticsearch on my Digital Ocean Plesk server to work with Active Collab. It all seems fine apart from after a few seconds it seems to stop. Trying to keep the Elasticsearch nodes alive but it keeps st…

---

## [Ip-filtering](https://discuss.elastic.co/t/ip-filtering/128328)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 5\
**Last updated:** [April 22, 2018, 9:34pm UTC](https://discuss.elastic.co/t/ip-filtering/128328 "2018-04-22T21:34:32Z")

</div>

Hello, I want to migrate from configuration property ip-filtering to dynamic: https://www.elastic.co/guide/en/x-pack/current/ip-filtering.html#dynamic-ip-filtering If I want to add a host, or remove a host can I do it…

[Previous page](https://discuss.elastic.co/top.md?page=943&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=945&per_page=50&period=all)
