# Top **URL:** https://discuss.elastic.co/top.md?page=946&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 947 --- ## [Index stays at massive size after split](https://discuss.elastic.co/t/index-stays-at-massive-size-after-split/283453)
**Author:** [@rcz](https://discuss.elastic.co/u/rcz)\ **Replies:** 5\ **Last updated:** [September 7, 2021, 8:50am UTC](https://discuss.elastic.co/t/index-stays-at-massive-size-after-split/283453 "2021-09-07T08:50:26Z")
Hi, I had mistakenly made a very large index: 1 shard of 406 GB (1.8b documents). Then I split it into 16 shards hoping to get ~25GB sizes. I think the new index triggered a template, since it also got 1 replica shard… --- ## [Filebeat and fields with dots in name](https://discuss.elastic.co/t/filebeat-and-fields-with-dots-in-name/198620)
**Author:** [@marcomusso](https://discuss.elastic.co/u/marcomusso)\ **Replies:** 5\ **Last updated:** [September 18, 2019, 2:26pm UTC](https://discuss.elastic.co/t/filebeat-and-fields-with-dots-in-name/198620 "2019-09-18T14:26:15Z")
Hi all, I found that the issue discussed in: is still relevant in 2019 using the default audit output in JSON (ref: log4j2.properties for Elasticsearch 7.x) which is: appender.audit\_rolling.layout.pattern = {\\ … --- ## [Pareto Chart](https://discuss.elastic.co/t/pareto-chart/185986)
**Author:** [@June](https://discuss.elastic.co/u/June)\ **Replies:** 5\ **Last updated:** [June 19, 2019, 4:50am UTC](https://discuss.elastic.co/t/pareto-chart/185986 "2019-06-19T04:50:16Z")
Greetings! Is there any possibility to create pareto chart in Kibana (v.6.5.1)? Thank you. --- ## [How the Elastic search results shows the cloudfront / CDN links contained in the body of a content](https://discuss.elastic.co/t/how-the-elastic-search-results-shows-the-cloudfront-cdn-links-contained-in-the-body-of-a-content/162153)
**Author:** [@venu.pgi](https://discuss.elastic.co/u/venu.pgi)\ **Replies:** 5\ **Last updated:** [December 27, 2018, 8:29am UTC](https://discuss.elastic.co/t/how-the-elastic-search-results-shows-the-cloudfront-cdn-links-contained-in-the-body-of-a-content/162153 "2018-12-27T08:29:00Z")
Hi Good morning all. I am new to elasticsearch looking for some help please. I have a webhook from "Contentful" cms connecting to an endpoint within cloud.elastic.co . Assume that I create a content which contains a medi… --- ## [Recommended # of Shards for 1.5 TB = 2.752.250.197 Docs](https://discuss.elastic.co/t/recommended-of-shards-for-1-5-tb-2-752-250-197-docs/121208)
**Author:** [@cmadera\_rp](https://discuss.elastic.co/u/cmadera_rp)\ **Replies:** 5\ **Last updated:** [March 1, 2018, 12:01pm UTC](https://discuss.elastic.co/t/recommended-of-shards-for-1-5-tb-2-752-250-197-docs/121208 "2018-03-01T12:01:16Z")
Hello I'm working with a cluster with 6 nodes with 64 Gb of Ram and 1.7Tb of storage SSD NVMe on each node actually all our data is actively used and we have one index per year (total 24 index), 4 of them are the most … --- ## [No encuentro un item que esta cargado en el indice](https://discuss.elastic.co/t/no-encuentro-un-item-que-esta-cargado-en-el-indice/120204)
**Author:** [@leandrobara](https://discuss.elastic.co/u/leandrobara)\ **Replies:** 7\ **Last updated:** [February 16, 2018, 4:28pm UTC](https://discuss.elastic.co/t/no-encuentro-un-item-que-esta-cargado-en-el-indice/120204 "2018-02-16T16:28:09Z")
Estimados, tengo ei siguiente item cargado en el indice: { "\_index": "books\_ar", "\_type": "item", "\_id": "1225714", "\_score": 10.9347725, "\_source": { "title": "Fueron por todo", "catalogitem\_id": "1225714",, "l… --- ## [Basic question about snapshots](https://discuss.elastic.co/t/basic-question-about-snapshots/70527)
**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\ **Replies:** 7\ **Last updated:** [January 4, 2017, 1:24pm UTC](https://discuss.elastic.co/t/basic-question-about-snapshots/70527 "2017-01-04T13:24:05Z")
Elasticsearch snapshots are incremental, meaning that when I create a snapshot for an index, Elasticsearch will look at the repository and search for other snapshots and if it finds another snapshot, it will only snapsho… --- ## [Elasticsearch timeout error on operations](https://discuss.elastic.co/t/elasticsearch-timeout-error-on-operations/280239)
**Author:** [@iuryfukuda](https://discuss.elastic.co/u/iuryfukuda)\ **Replies:** 4\ **Last updated:** [August 2, 2021, 11:22pm UTC](https://discuss.elastic.co/t/elasticsearch-timeout-error-on-operations/280239 "2021-08-02T23:22:46Z")
We have timeout error on worker clients who use ES go client: time="2021-08-02T16:04:45Z" level=error msg="error handling connection with queue: error saving bulk: error making bulk request dial tcp 20.96.122.135:9200:… --- ## [Security Announcements, RSS, Versions](https://discuss.elastic.co/t/security-announcements-rss-versions/228477)
**Author:** [@Steve\_Mushero](https://discuss.elastic.co/u/Steve_Mushero)\ **Replies:** 4\ **Last updated:** [April 18, 2020, 7:14am UTC](https://discuss.elastic.co/t/security-announcements-rss-versions/228477 "2020-04-18T07:14:03Z")
Exploring the Security Issues page and have some suggestions: Can you add columns for versions affected, instead of burying it different ways in the text? The actual announcements cover this (mostly) but it's very ha… --- ## [Roles related to infra UI](https://discuss.elastic.co/t/roles-related-to-infra-ui/176129)
**Author:** [@sl1729](https://discuss.elastic.co/u/sl1729)\ **Replies:** 4\ **Last updated:** [April 17, 2019, 7:21am UTC](https://discuss.elastic.co/t/roles-related-to-infra-ui/176129 "2019-04-17T07:21:43Z")
We are experimenting infra UI and logs UI. Going good so far, except few known issues which are getting discussed in forum. But when providing access to the users we are having difficulty. We have a scenario where we ne… --- ## [Rally gets stuck while benchmarking](https://discuss.elastic.co/t/rally-gets-stuck-while-benchmarking/148878)
**Author:** [@akhil-rane](https://discuss.elastic.co/u/akhil-rane)\ **Replies:** 4\ **Last updated:** [September 27, 2018, 2:35pm UTC](https://discuss.elastic.co/t/rally-gets-stuck-while-benchmarking/148878 "2018-09-27T14:35:38Z")
I am benchmarking a elaticsearch cluster but Rally gets stuck with the following output on the command line. / \_\_ \_\_\_\_ / / / \_\_ / // / \_\_ \`/ / / / / / / , / // / / / // / // ||\_,///\_, / /\_\_\_\_/ \[INFO\] You did not p… --- ## [ES-Hadoop overwrite the external table](https://discuss.elastic.co/t/es-hadoop-overwrite-the-external-table/101540)
**Author:** [@EvelynC](https://discuss.elastic.co/u/EvelynC)\ **Replies:** 4\ **Last updated:** [October 4, 2017, 6:21pm UTC](https://discuss.elastic.co/t/es-hadoop-overwrite-the-external-table/101540 "2017-10-04T18:21:27Z")
Hi everyone, According to all I know, the external table which is just a link to the data stored in ES, and we can only insert appendant data or delete all of them. Is there any way to overwrite the data? such as just d… --- ## [Unable to import metricbeat dashboard](https://discuss.elastic.co/t/unable-to-import-metricbeat-dashboard/145083)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 3\ **Last updated:** [August 21, 2018, 7:12am UTC](https://discuss.elastic.co/t/unable-to-import-metricbeat-dashboard/145083 "2018-08-21T07:12:42Z")
Hello All, I am using metricbeat6.2.4. I want to export metricbeat dashboard in kibana. I have configured logstash output in my metricbeat.yml file instead of elasticsearch output. My Kibana dashboard is running on diff… --- ## [Logstash 1.5.4 : No password supplied for PKCS#12 KeyStore](https://discuss.elastic.co/t/logstash-1-5-4-no-password-supplied-for-pkcs-12-keystore/127697)
**Author:** [@meghnatolani](https://discuss.elastic.co/u/meghnatolani)\ **Replies:** 3\ **Last updated:** [April 12, 2018, 11:08pm UTC](https://discuss.elastic.co/t/logstash-1-5-4-no-password-supplied-for-pkcs-12-keystore/127697 "2018-04-12T23:08:26Z")
Hi, I am using logstash version 1.5.4 I am getting the bellow error - WARNING: Default JAVA\_OPTS will be overridden by the JAVA\_OPTS defined in the environment. Environment JAVA\_OPTS are -Djava.io.tmpdir=/var/lib/logst… --- ## [Max retries in Elasticsearch Java Client](https://discuss.elastic.co/t/max-retries-in-elasticsearch-java-client/53805)
**Author:** [@Otavio\_Goncalves\_de](https://discuss.elastic.co/u/Otavio_Goncalves_de)\ **Replies:** 3\ **Last updated:** [April 14, 2017, 11:55pm UTC](https://discuss.elastic.co/t/max-retries-in-elasticsearch-java-client/53805 "2017-04-14T23:55:16Z")
Looking to JS client elasticsearch API, there's a documentation about max retries. https://www.elastic.co/guide/en/elasticsearch/client/javascript-api/current/configuration.html In Java world, there are several configu… --- ## [How to store disjoint date ranges and then search for a specific range](https://discuss.elastic.co/t/how-to-store-disjoint-date-ranges-and-then-search-for-a-specific-range/52935)
**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\ **Replies:** 3\ **Last updated:** [June 17, 2016, 7:04am UTC](https://discuss.elastic.co/t/how-to-store-disjoint-date-ranges-and-then-search-for-a-specific-range/52935 "2016-06-17T07:04:21Z")
I am trying to store hotel room availability in elasticsearch. And then I need to search rooms those are available from a date till another date. I have come up with two ways to store data for availability, and they ar… --- ## [Override \_default\_ mapping properties](https://discuss.elastic.co/t/override--default--mapping-properties/51660)
**Author:** [@Nicolas\_Guyomar](https://discuss.elastic.co/u/Nicolas_Guyomar)\ **Replies:** 3\ **Last updated:** [June 3, 2016, 6:04pm UTC](https://discuss.elastic.co/t/override--default--mapping-properties/51660 "2016-06-03T18:04:41Z")
Hi, I started a while ago using the logstash default elasticsearch template "https://github.com/logstash-plugins/logstash-output-elasticsearch/blob/master/lib/logstash/outputs/elasticsearch/elasticsearch-template.json"… --- ## [EQL - Alert on different values for the same field in a sequence](https://discuss.elastic.co/t/eql-alert-on-different-values-for-the-same-field-in-a-sequence/255344)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 6\ **Last updated:** [March 10, 2021, 6:33pm UTC](https://discuss.elastic.co/t/eql-alert-on-different-values-for-the-same-field-in-a-sequence/255344 "2021-03-10T18:33:41Z")
Hi, I am trying to build a sequence, as an example to look for multiple different user.names from the same host over a period of time. How would i go about this condition 2 user.name != condition 1 user.name. There a … --- ## [Mysql query in mysql moudle](https://discuss.elastic.co/t/mysql-query-in-mysql-moudle/66092)
**Author:** [@Idan](https://discuss.elastic.co/u/Idan)\ **Replies:** 6\ **Last updated:** [November 15, 2016, 2:20pm UTC](https://discuss.elastic.co/t/mysql-query-in-mysql-moudle/66092 "2016-11-15T14:20:01Z")
Hello, I want to send a specific query from Mysql DB to the elasticsearch and then display in Kibana. I have looked into the MySQL Moudle in Metricbeats, I can't figure out how to send specific query to the elastic searc… --- ## [How can I pass a filebeat \[host\]\[ip\] array to the logstash CIDR filter plugin?](https://discuss.elastic.co/t/how-can-i-pass-a-filebeat-host-ip-array-to-the-logstash-cidr-filter-plugin/171816)
**Author:** [@PSM](https://discuss.elastic.co/u/PSM)\ **Replies:** 2\ **Last updated:** [March 12, 2019, 11:48am UTC](https://discuss.elastic.co/t/how-can-i-pass-a-filebeat-host-ip-array-to-the-logstash-cidr-filter-plugin/171816 "2019-03-12T11:48:38Z")
I'm using the filebeat add\_host\_metadata processor to enrich events with an array of local IP addresses for a host but I can't pass that to the logstash CIDR filter plugin because it sees it as a string, not as an array … --- ## [Filebeat startup error (multiline)](https://discuss.elastic.co/t/filebeat-startup-error-multiline/133270)
**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\ **Replies:** 2\ **Last updated:** [May 25, 2018, 7:46am UTC](https://discuss.elastic.co/t/filebeat-startup-error-multiline/133270 "2018-05-25T07:46:56Z")
Use filebeat to collect logs. There are many lines in the collected log that need to be merged into one line. After referring to the official documentation, the following errors are reported: 2018-05-25T15:07:55.442+080… --- ## [Trying to debug org.elasticsearch.bootstrap.Elasticsearch.java in Intellij](https://discuss.elastic.co/t/trying-to-debug-org-elasticsearch-bootstrap-elasticsearch-java-in-intellij/67904)
**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\ **Replies:** 2\ **Last updated:** [December 5, 2016, 3:29pm UTC](https://discuss.elastic.co/t/trying-to-debug-org-elasticsearch-bootstrap-elasticsearch-java-in-intellij/67904 "2016-12-05T15:29:54Z")
RESOLVED: I found in the \[testing documentation\] (https://github.com/elastic/elasticsearch/blob/master/TESTING.asciidoc) That you can run gradle in the command line(intellij gradle plugin is not working for me, even on… --- ## [Is "include\_lines" case sensitive?](https://discuss.elastic.co/t/is-include-lines-case-sensitive/65618)
**Author:** [@msr](https://discuss.elastic.co/u/msr)\ **Replies:** 2\ **Last updated:** [November 10, 2016, 1:13pm UTC](https://discuss.elastic.co/t/is-include-lines-case-sensitive/65618 "2016-11-10T13:13:37Z")
I have just installed ElasticStack 5.0 as a proof of concept and I am playing with the Filebeat config to only output the data I'm interested in. Are the "include\_lines" search strings case sensitive? I initially c… --- ## [Waiting for Marvel Data](https://discuss.elastic.co/t/waiting-for-marvel-data/50370)
**Author:** [@tesseract](https://discuss.elastic.co/u/tesseract)\ **Replies:** 2\ **Last updated:** [May 19, 2016, 2:16pm UTC](https://discuss.elastic.co/t/waiting-for-marvel-data/50370 "2016-05-19T14:16:00Z")
Hey guys, We have been running ES + Kibana + Marvel for around 6 months, but today we decided to change the nodes since we required more disk space. After we deployed everything on the new machines, no data is showing u… --- ## [How to run apm-server as service to run in background](https://discuss.elastic.co/t/how-to-run-apm-server-as-service-to-run-in-background/152850)
**Author:** [@arun5635](https://discuss.elastic.co/u/arun5635)\ **Replies:** 1\ **Last updated:** [October 17, 2018, 2:27pm UTC](https://discuss.elastic.co/t/how-to-run-apm-server-as-service-to-run-in-background/152850 "2018-10-17T14:27:03Z")
I have APM-SERVER and i using the command ./apm-server -e to run but If i check the status using sudo service apm-server status im get below error. sudo service apm-server status ● apm-server.service - Elastic APM Serv… --- ## [Node.lock file - Underlying file changed by an external force](https://discuss.elastic.co/t/node-lock-file-underlying-file-changed-by-an-external-force/106038)
**Author:** [@Jeremy\_C](https://discuss.elastic.co/u/Jeremy_C)\ **Replies:** 1\ **Last updated:** [November 3, 2017, 1:11pm UTC](https://discuss.elastic.co/t/node-lock-file-underlying-file-changed-by-an-external-force/106038 "2017-11-03T13:11:27Z")
I have 5 data nodes, version 5.6.2 on Ubuntu 16.04. All nodes are occassionaly having a problem with the "node.lock" file, or perhaps that's just a symptom of some other problem. This results in shards failing to alloc… --- ## [LogStash::ConfigurationError but ConfigurationOK - Logstash 2.4.0](https://discuss.elastic.co/t/logstash-configurationerror-but-configurationok-logstash-2-4-0/65727)
**Author:** [@csamson](https://discuss.elastic.co/u/csamson)\ **Replies:** 1\ **Last updated:** [November 14, 2016, 6:47am UTC](https://discuss.elastic.co/t/logstash-configurationerror-but-configurationok-logstash-2-4-0/65727 "2016-11-14T06:47:05Z")
I am tring to upgrade from Logstash 1.4.4 to Logstash 2.4.0 I have reused the same configuration file that we used before for parsing our application logs I am running Logstash 2.4.0 in debug mode and getting that bl… --- ## [Recovering deleted documents](https://discuss.elastic.co/t/recovering-deleted-documents/57275)
**Author:** [@vinodn](https://discuss.elastic.co/u/vinodn)\ **Replies:** 1\ **Last updated:** [August 4, 2016, 10:39pm UTC](https://discuss.elastic.co/t/recovering-deleted-documents/57275 "2016-08-04T22:39:11Z")
We had to bounce a few Elasticsearch nodes due to a server patch after which we ended up with unassigned shards and a cluster in red status. We ran the reroute API after which the unassigned shards were assigned and the … --- ## [Question regarding specifying "localhost" and deploying to Lambda](https://discuss.elastic.co/t/question-regarding-specifying-localhost-and-deploying-to-lambda/195332)
**Author:** [@TheSwede86](https://discuss.elastic.co/u/TheSwede86)\ **Replies:** 5\ **Last updated:** [August 20, 2019, 4:20pm UTC](https://discuss.elastic.co/t/question-regarding-specifying-localhost-and-deploying-to-lambda/195332 "2019-08-20T16:20:23Z")
Running on my localhost (i.e. my laptop): ES 7.3 w. Basic-license (port 9200 is verified and returns info) Kibana 7.3 w. Basic-license (port 5601 is verified and returns the Kibana interface) Functionbeat 7.3 from the… --- ## [APM in Kibana Empty](https://discuss.elastic.co/t/apm-in-kibana-empty/169406)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 5\ **Last updated:** [February 22, 2019, 12:42pm UTC](https://discuss.elastic.co/t/apm-in-kibana-empty/169406 "2019-02-22T12:42:19Z")
ELK 6.5 (free subscription), APM Server 6.6.1 We are seeing an empty list in APM in Kibana. However, we do have data logged to the apm-\* index and our service "expresstest" is displayed in the Kibana Search. Kibana is … --- ## [Logstash .conf file run forever as a service?](https://discuss.elastic.co/t/logstash-conf-file-run-forever-as-a-service/162952)
**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\ **Replies:** 5\ **Last updated:** [January 4, 2019, 1:38pm UTC](https://discuss.elastic.co/t/logstash-conf-file-run-forever-as-a-service/162952 "2019-01-04T13:38:12Z")
i want to run logstash.conf file forever in server . Everytime i have to run this command sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf but i want run some command which will run forever… --- ## [Kibana visualization Interval change automatic issue](https://discuss.elastic.co/t/kibana-visualization-interval-change-automatic-issue/310882)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 4\ **Last updated:** [August 1, 2022, 6:36am UTC](https://discuss.elastic.co/t/kibana-visualization-interval-change-automatic-issue/310882 "2022-08-01T06:36:19Z")
Hello All, I've selected timerange as 90 days(quick select),then applied visualization interval as \>=15m but in visualization the interval is showing per "12 hours" automatically,Note:Everytime the quick select option … --- ## [Unable to connect to elasticsearch after upgrading to 7.3.0](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-after-upgrading-to-7-3-0/193611)
**Author:** [@jxz](https://discuss.elastic.co/u/jxz)\ **Replies:** 4\ **Last updated:** [August 26, 2019, 2:13pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-after-upgrading-to-7-3-0/193611 "2019-08-26T14:13:53Z")
I upgraded to elastisearch 7.3.0 on Windows and the service is running. With the default elasticsearch.yml, I am able to connect to localhost:9200 but I cannot connect to it with IpAddress:9200 on the local machine or fr… --- ## [Index templates not working in ES 2.4](https://discuss.elastic.co/t/index-templates-not-working-in-es-2-4/63696)
**Author:** [@kaung](https://discuss.elastic.co/u/kaung)\ **Replies:** 4\ **Last updated:** [October 24, 2016, 7:35am UTC](https://discuss.elastic.co/t/index-templates-not-working-in-es-2-4/63696 "2016-10-24T07:35:23Z")
I have the following index templates that have been working up until Elasticsearch 2.3.4. After I upgraded my Elasticsearch to 2.4, it seem to have broken. I am out of idea where I could be doing wrong. Some help is real… --- ## [Grok Pattern Help with message parsing](https://discuss.elastic.co/t/grok-pattern-help-with-message-parsing/50279)
**Author:** [@snipervelli](https://discuss.elastic.co/u/snipervelli)\ **Replies:** 4\ **Last updated:** [May 23, 2016, 5:38am UTC](https://discuss.elastic.co/t/grok-pattern-help-with-message-parsing/50279 "2016-05-23T05:38:48Z")
Hi all i am fairly new to Elasticsearch. I have Elasticsearc running and i have some information in my logs that i need to graph and i just don't know how filter it. So here are the contents in my message field that i ne… --- ## [Could not configure kibana verification code in Kibana version 8.3.3](https://discuss.elastic.co/t/could-not-configure-kibana-verification-code-in-kibana-version-8-3-3/314045)
**Author:** [@rt\_888](https://discuss.elastic.co/u/rt_888)\ **Replies:** 3\ **Last updated:** [November 3, 2022, 3:10pm UTC](https://discuss.elastic.co/t/could-not-configure-kibana-verification-code-in-kibana-version-8-3-3/314045 "2022-11-03T15:10:14Z")
I started the Kibana where it required enrollment token. Once i filled in the enrollment token from running the elastic bin with this path " /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token ", then it a… --- ## [Storing images , videos in elasticserch](https://discuss.elastic.co/t/storing-images-videos-in-elasticserch/303985)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 8\ **Last updated:** [May 5, 2022, 10:17am UTC](https://discuss.elastic.co/t/storing-images-videos-in-elasticserch/303985 "2022-05-05T10:17:20Z")
Can someone help me how can I store images in elasticserch? 1st way: using logstash conf file 2nd way; using directly elasticserch --- ## [ES 7.2.0 upgrade resulted in "Don't modify the classpath with ES\_CLASSPATH" error](https://discuss.elastic.co/t/es-7-2-0-upgrade-resulted-in-dont-modify-the-classpath-with-es-classpath-error/189431)
**Author:** [@KiloDunse](https://discuss.elastic.co/u/KiloDunse)\ **Replies:** 3\ **Last updated:** [July 8, 2019, 10:43pm UTC](https://discuss.elastic.co/t/es-7-2-0-upgrade-resulted-in-dont-modify-the-classpath-with-es-classpath-error/189431 "2019-07-08T22:43:16Z")
Hi, I upgraded Elasticsearch from 6.8.0 to 7.2.0. After install the service won't start. If I start it from .exe i get this error: The following deprecated environment variables are set and preventing elasticsearch f… --- ## [Problem with S3 Input](https://discuss.elastic.co/t/problem-with-s3-input/140412)
**Author:** [@jlawrenc](https://discuss.elastic.co/u/jlawrenc)\ **Replies:** 3\ **Last updated:** [July 18, 2018, 11:27pm UTC](https://discuss.elastic.co/t/problem-with-s3-input/140412 "2018-07-18T23:27:51Z")
This is all new to me, but I'm trying to pull Cisco managed S3 bucket gzip logs using the below input. The error message I'm seeing in /var/log/logstash/logstash.log is "Logstash S3 input, stop reading in the middle of t… --- ## [Landing on a dashboard with a dynamic time period](https://discuss.elastic.co/t/landing-on-a-dashboard-with-a-dynamic-time-period/122958)
**Author:** [@mr\_chang7](https://discuss.elastic.co/u/mr_chang7)\ **Replies:** 3\ **Last updated:** [March 7, 2018, 10:16pm UTC](https://discuss.elastic.co/t/landing-on-a-dashboard-with-a-dynamic-time-period/122958 "2018-03-07T22:16:35Z")
Hello guys, I made a scripted field, say 'A', with setting an URL template to land on a dashboard. But I'd like set the time period on the landed dashboard based on a timestamp field in the original event having the fie… --- ## [Put an intentional delay in event transmission to Logstash](https://discuss.elastic.co/t/put-an-intentional-delay-in-event-transmission-to-logstash/109813)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 8\ **Last updated:** [December 6, 2017, 4:24pm UTC](https://discuss.elastic.co/t/put-an-intentional-delay-in-event-transmission-to-logstash/109813 "2017-12-06T16:24:40Z")
I have a use-case where I want to delay individual events being transmitted via Filebeat to Logstash. This is due to a race condition I'm encountering with another monitoring mechanism. I've looked through the config op… --- ## [Logstash - Ajout de patterns](https://discuss.elastic.co/t/logstash-ajout-de-patterns/37456)
**Author:** [@Flo\_](https://discuss.elastic.co/u/Flo_)\ **Replies:** 3\ **Last updated:** [January 12, 2016, 4:41pm UTC](https://discuss.elastic.co/t/logstash-ajout-de-patterns/37456 "2016-01-12T16:41:38Z")
Bonjour à tous, Je suis nouveau sur logstash et je travaille actuellement sur une extraction de données depuis un fichier log (Apache) en vu d'être utilisées dans ES. Voici le type de données log que je traite : ("ac… --- ## [Optimizing Elasticsearch for Timeseries data](https://discuss.elastic.co/t/optimizing-elasticsearch-for-timeseries-data/35942)
**Author:** [@spiral\_circ](https://discuss.elastic.co/u/spiral_circ)\ **Replies:** 3\ **Last updated:** [December 2, 2015, 6:38am UTC](https://discuss.elastic.co/t/optimizing-elasticsearch-for-timeseries-data/35942 "2015-12-02T06:38:39Z")
Hi, We use elasticsearch to store financial stock data, and was wondering if there is any optimizations that can be done to improve the performance w.r.t timeseries data. We have around 3 million documents on a 2 nod… --- ## [Logstash CEF codec](https://discuss.elastic.co/t/logstash-cef-codec/33783)
**Author:** [@us3r](https://discuss.elastic.co/u/us3r)\ **Replies:** 3\ **Last updated:** [November 4, 2015, 10:15pm UTC](https://discuss.elastic.co/t/logstash-cef-codec/33783 "2015-11-04T22:15:20Z")
Together with my collegue we found a few problems with this codec: The first one is described here -\> https://github.com/logstash-plugins/logstash-codec-cef/issues/9 Second one is related with the changes in Elasticsea… --- ## [Graceful Cluster Shutdown](https://discuss.elastic.co/t/graceful-cluster-shutdown/32493)
**Author:** [@taspotts](https://discuss.elastic.co/u/taspotts)\ **Replies:** 3\ **Last updated:** [October 19, 2015, 11:06pm UTC](https://discuss.elastic.co/t/graceful-cluster-shutdown/32493 "2015-10-19T23:06:41Z")
What is the preferred method now(1.7.x) for a graceful shutdown of an entire cluster? Looks like the \_shutdown option is going away soon... https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-nodes-… --- ## [Elasticsearch complaining about space issues when there is plenty of space available](https://discuss.elastic.co/t/elasticsearch-complaining-about-space-issues-when-there-is-plenty-of-space-available/309844)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 7\ **Last updated:** [July 19, 2022, 5:11am UTC](https://discuss.elastic.co/t/elasticsearch-complaining-about-space-issues-when-there-is-plenty-of-space-available/309844 "2022-07-19T05:11:09Z")
I received the following error this evening while indexing a large dataset: WARNING:root:{'create': {'\_index': 'fh\_hot\_en\_2021-05-05', '\_id': '1390039787566821378', 'status': 429, 'error': {'type': 'cluster\_block\_except… --- ## [Index rotation](https://discuss.elastic.co/t/index-rotation/190960)
**Author:** [@maasid](https://discuss.elastic.co/u/maasid)\ **Replies:** 1\ **Last updated:** [July 17, 2019, 10:42am UTC](https://discuss.elastic.co/t/index-rotation/190960 "2019-07-17T10:42:16Z")
Hello, I have upgraded to elasticsearch v7.2.0 and the same has been done for all beats that I used along with kibana. Now, since I upgraded, my indexes have been rotating based on size roughly 100gb, instead of date. H… --- ## [APM Agent not working with Nodejs](https://discuss.elastic.co/t/apm-agent-not-working-with-nodejs/295638)
**Author:** [@Mayderson\_Santos](https://discuss.elastic.co/u/Mayderson_Santos)\ **Replies:** 2\ **Last updated:** [January 29, 2022, 2:51am UTC](https://discuss.elastic.co/t/apm-agent-not-working-with-nodejs/295638 "2022-01-29T02:51:55Z")
Guys, I'm trying to use APM in a NodeJS API I have, every environment is local using Docker. The APM Server normally connects to the Kibana check, but the problem is that my Agent in this check returns the message "No d… --- ## [Last value of a series kibana](https://discuss.elastic.co/t/last-value-of-a-series-kibana/184282)
**Author:** [@francisaugusto](https://discuss.elastic.co/u/francisaugusto)\ **Replies:** 2\ **Last updated:** [June 27, 2019, 1:19pm UTC](https://discuss.elastic.co/t/last-value-of-a-series-kibana/184282 "2019-06-27T13:19:46Z")
Hi there, I am creating a table that counts apache accesses. I like to have the count number on the table so that I have an idea of which clients are sending most requests. If I add @timestamp to the table, then I don'… --- ## [Searching query return results based on word frequency/term vectors](https://discuss.elastic.co/t/searching-query-return-results-based-on-word-frequency-term-vectors/129524)
**Author:** [@sandbar\_shark](https://discuss.elastic.co/u/sandbar_shark)\ **Replies:** 0\ **Last updated:** [April 25, 2018, 3:19pm UTC](https://discuss.elastic.co/t/searching-query-return-results-based-on-word-frequency-term-vectors/129524 "2018-04-25T15:19:37Z")
So I have an index that has multiple documents, each document being sentences of text. For example: Doc 1: "the cat in the hat" Doc 2: "feed your cat lots of fish for a cat" So I indexed them with term vectors, so I c… [Previous page](https://discuss.elastic.co/top.md?page=945&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=947&per_page=50&period=all)