# Top

**URL:** https://discuss.elastic.co/top.md?page=96&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 97

---

## [Heap size Not tally](https://discuss.elastic.co/t/heap-size-not-tally/185789)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 18\
**Last updated:** [June 19, 2019, 9:20am UTC](https://discuss.elastic.co/t/heap-size-not-tally/185789 "2019-06-19T09:20:30Z")

</div>

Hi all, may I know is this correct? No matter how I change the heapsize, it will not take any effect. in JVM.options file : -Xms8g -Xmx12g

---

## [LifeCycle Policy Configuration](https://discuss.elastic.co/t/lifecycle-policy-configuration/198503)

<div class="topic-metadata">

**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\
**Replies:** 37\
**Last updated:** [October 24, 2019, 7:46am UTC](https://discuss.elastic.co/t/lifecycle-policy-configuration/198503 "2019-10-24T07:46:57Z")

</div>

Hi, I have this simple scenario. I have more or less 100 hosts (linux and windows) and i want to gather only logs and metrics. So i have install filebeat and metricbeat to all linux hosts and winlogbeat and metricbeat…

---

## [Metricbeat Kubernetes Module](https://discuss.elastic.co/t/metricbeat-kubernetes-module/91850)

<div class="topic-metadata">

**Author:** [@sukhada\_sankpal369](https://discuss.elastic.co/u/sukhada_sankpal369)\
**Replies:** 9\
**Last updated:** [July 5, 2017, 10:58am UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-module/91850 "2017-07-05T10:58:33Z")

</div>

My kubernetes node is tls configured. I am tring to use the metricset node, system, pod, container and volume which would be fetched from https://IP\_k8s:10255. It gives me logs saying "error making http request: Get http…

---

## [Timeout on /\_cat/indices on a single node](https://discuss.elastic.co/t/timeout-on--cat-indices-on-a-single-node/63529)

<div class="topic-metadata">

**Author:** [@carrot](https://discuss.elastic.co/u/carrot)\
**Replies:** 9\
**Last updated:** [October 23, 2016, 1:03pm UTC](https://discuss.elastic.co/t/timeout-on--cat-indices-on-a-single-node/63529 "2016-10-23T13:03:26Z")

</div>

I have a cluster of about 10 data nodes, 5 master nodes and a few client nodes. I've got a single client node that no matter what I do, I can get the cluster state via curl, but not getting any responses back from /\_cat…

---

## [Logstash 5 not working with multiline filter](https://discuss.elastic.co/t/logstash-5-not-working-with-multiline-filter/65143)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 15\
**Last updated:** [November 8, 2016, 7:21am UTC](https://discuss.elastic.co/t/logstash-5-not-working-with-multiline-filter/65143 "2016-11-08T07:21:42Z")

</div>

Hello, I have a working configuration with Logstash 2.4.0 like this: input { file { path =\> "/path/\*" type =\> "type" start\_position =\> "beginning" } } filter { multiline { pattern =\> "^\<group" …

---

## [I need guy who can install and configure elasticsearch](https://discuss.elastic.co/t/i-need-guy-who-can-install-and-configure-elasticsearch/261358)

<div class="topic-metadata">

**Author:** [@avagyanlevon](https://discuss.elastic.co/u/avagyanlevon)\
**Replies:** 22\
**Last updated:** [January 20, 2021, 6:44pm UTC](https://discuss.elastic.co/t/i-need-guy-who-can-install-and-configure-elasticsearch/261358 "2021-01-20T18:44:31Z")

</div>

I need guy who can install and configure elasticsearch. I have problem with elasticsearch with my website, it was stop works after restarting server, now I need expert who can install and configuration it. Sorry for my E…

---

## [Enhanced Table Visualization](https://discuss.elastic.co/t/enhanced-table-visualization/255004)

<div class="topic-metadata">

**Author:** [@thuhaa](https://discuss.elastic.co/u/thuhaa)\
**Replies:** 11\
**Last updated:** [January 20, 2021, 9:16am UTC](https://discuss.elastic.co/t/enhanced-table-visualization/255004 "2021-01-20T09:16:01Z")

</div>

Hi @fbaligand, I'm very thank you for creating Kibana Enhanced Table Plugin. But I wonder why about the order of columns when I used split cols function. Example: The data of datetime field is 2020-11-05, 2020-11-06,…

---

## [Logstash error while using email plugin](https://discuss.elastic.co/t/logstash-error-while-using-email-plugin/142840)

<div class="topic-metadata">

**Author:** [@APJ](https://discuss.elastic.co/u/APJ)\
**Replies:** 16\
**Last updated:** [August 3, 2018, 8:09am UTC](https://discuss.elastic.co/t/logstash-error-while-using-email-plugin/142840 "2018-08-03T08:09:02Z")

</div>

I am trying to simulate an environment wherein if the temperature exceeds 40℉, an email is sent to the user. I am running logstash on my local. Here is the config file. weather\_data.conf input { http\_poller { ur…

---

## [ElasticSearch Java Agent for tomcat stops my application from running](https://discuss.elastic.co/t/elasticsearch-java-agent-for-tomcat-stops-my-application-from-running/157564)

<div class="topic-metadata">

**Author:** [@souravtyson](https://discuss.elastic.co/u/souravtyson)\
**Replies:** 17\
**Last updated:** [November 22, 2018, 11:32am UTC](https://discuss.elastic.co/t/elasticsearch-java-agent-for-tomcat-stops-my-application-from-running/157564 "2018-11-22T11:32:10Z")

</div>

Hi Team, I have been trying to configure APM for tomcat. I added following configuration in setenv.sh file : export CATALINA\_OPTS="$CATALINA\_OPTS -javaagent:/home/webtech/elastic-apm-agent-1.0.1.jar" export CATALINA\_…

---

## [Incompatible encodings: IBM437 and UTF-8](https://discuss.elastic.co/t/incompatible-encodings-ibm437-and-utf-8/316918)

<div class="topic-metadata">

**Author:** [@Helmut](https://discuss.elastic.co/u/Helmut)\
**Replies:** 11\
**Last updated:** [November 10, 2022, 3:48pm UTC](https://discuss.elastic.co/t/incompatible-encodings-ibm437-and-utf-8/316918 "2022-11-10T15:48:06Z")

</div>

Hi, I just installed logstash 8.4.3 on Windows Server 2019 and copied over configs from 8.2.3. logstash doesn't start: \[2022-10-18T18:24:26,830\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[42989fb99e78bec7495dbe5bfe5a…

---

## [Installing jdbc driver for elasticsearch](https://discuss.elastic.co/t/installing-jdbc-driver-for-elasticsearch/143553)

<div class="topic-metadata">

**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\
**Replies:** 9\
**Last updated:** [August 15, 2018, 7:47pm UTC](https://discuss.elastic.co/t/installing-jdbc-driver-for-elasticsearch/143553 "2018-08-15T19:47:12Z")

</div>

i am following this document to install the driver but I do not have any maven tool . can I use wget to download the driver and then install it using elasticsearch plugin ? if someone can kindly give me a detailed steps…

---

## [My Logstash is not parsing data properly](https://discuss.elastic.co/t/my-logstash-is-not-parsing-data-properly/231399)

<div class="topic-metadata">

**Author:** [@pjepsen](https://discuss.elastic.co/u/pjepsen)\
**Replies:** 21\
**Last updated:** [May 14, 2020, 9:50pm UTC](https://discuss.elastic.co/t/my-logstash-is-not-parsing-data-properly/231399 "2020-05-14T21:50:53Z")

</div>

I have been working on a project to upload VPN logs to a logstash instance that I created, and while I am able to see data being sent to the logstash, I am seeing a "\_dateparsefailure" error showing under \[tags\] in my ou…

---

## ["Illegal Instruction" error when running Kibana 4](https://discuss.elastic.co/t/illegal-instruction-error-when-running-kibana-4/24427)

<div class="topic-metadata">

**Author:** [@sc22150](https://discuss.elastic.co/u/sc22150)\
**Replies:** 9\
**Last updated:** [September 21, 2015, 10:29am UTC](https://discuss.elastic.co/t/illegal-instruction-error-when-running-kibana-4/24427 "2015-09-21T10:29:52Z")

</div>

I am attempting to run Kibana 4 on a RHEL 6 32-bit server. Whenever I run the kibana binary, it tells me that node\\bin\\node ../src/bin/kibana.js attempted an illegal instruction. Am I missing a required package somewhe…

---

## [Snapshot restore Failed recovery of index, getting FileAlreadyExistsException](https://discuss.elastic.co/t/snapshot-restore-failed-recovery-of-index-getting-filealreadyexistsexception/100300)

<div class="topic-metadata">

**Author:** [@rinu](https://discuss.elastic.co/u/rinu)\
**Replies:** 9\
**Last updated:** [October 6, 2017, 6:02pm UTC](https://discuss.elastic.co/t/snapshot-restore-failed-recovery-of-index-getting-filealreadyexistsexception/100300 "2017-10-06T18:02:14Z")

</div>

When trying to restore a 2.2 snapshot on 5.1.1 cluster the below exception returned. out of 10 shards, 2 shards failed recovery. Able to restore the same snapshot in 2.2 and 5.5 cluster. Any idea why? there is no memory…

---

## [APM transactions missing SQL statements](https://discuss.elastic.co/t/apm-transactions-missing-sql-statements/167164)

<div class="topic-metadata">

**Author:** [@airstofather](https://discuss.elastic.co/u/airstofather)\
**Replies:** 14\
**Last updated:** [February 6, 2019, 9:34pm UTC](https://discuss.elastic.co/t/apm-transactions-missing-sql-statements/167164 "2019-02-06T21:34:33Z")

</div>

Kibana version: 6.6.0 (cloud) Elasticsearch version: 6.6.0 (cloud) APM Server version: 6.6.0 (self hosted open source docker image) APM Agent language and version: elastic-apm-node 2.5.0 Browser version: Any bro…

---

## [How can I make collectd report which device/mount point it is looking at?](https://discuss.elastic.co/t/how-can-i-make-collectd-report-which-device-mount-point-it-is-looking-at/32728)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 9\
**Last updated:** [May 30, 2017, 10:04am UTC](https://discuss.elastic.co/t/how-can-i-make-collectd-report-which-device-mount-point-it-is-looking-at/32728 "2017-05-30T10:04:20Z")

</div>

Using collectd i want to report disk space usage to ELK. I successfully enabled CollectD's df plugin, and it is sending data to ELK. But I don't see any field that says "this is the usage for /boot", or "this is the usag…

---

## [Not able to view json data in available fields for message json](https://discuss.elastic.co/t/not-able-to-view-json-data-in-available-fields-for-message-json/275932)

<div class="topic-metadata">

**Author:** [@Harshad\_Solanki](https://discuss.elastic.co/u/Harshad_Solanki)\
**Replies:** 13\
**Last updated:** [June 18, 2021, 8:43am UTC](https://discuss.elastic.co/t/not-able-to-view-json-data-in-available-fields-for-message-json/275932 "2021-06-18T08:43:32Z")

</div>

In my Kibana dashboard I have below json data "message": "{ "time": "2021-06-15T08:57:20+00:00", "remote\_addr": "1.2.3.4", "the\_real\_ip": "10..2.3.4", "remote\_user": "", "time\_local": "15/Jun/2021:08:57:20 +0000", "body…

---

## [Processing Multiple Rows From JDBC Streaming](https://discuss.elastic.co/t/processing-multiple-rows-from-jdbc-streaming/291012)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 22\
**Last updated:** [December 8, 2021, 8:37pm UTC](https://discuss.elastic.co/t/processing-multiple-rows-from-jdbc-streaming/291012 "2021-12-08T20:37:51Z")

</div>

I'm querying a database to get questions asked in a ticket. The query asks for all questions asked by the ticket id. So a single query may return multiple rows. I'd like to be able to parse them all into separate fiel…

---

## [Grok error](https://discuss.elastic.co/t/grok-error/143834)

<div class="topic-metadata">

**Author:** [@FBurke](https://discuss.elastic.co/u/FBurke)\
**Replies:** 17\
**Last updated:** [August 22, 2018, 12:45pm UTC](https://discuss.elastic.co/t/grok-error/143834 "2018-08-22T12:45:05Z")

</div>

Hi All, I'm new to logstash / grok and I'm getting errors with my grok statement that I was hoping somebody could help me with? My log entry looks like this: 50.60.70.80 \[08/Aug/2018:16:25:48 +0100\] 50.60.70.72 /Commo…

---

## [Do I need a server to Elasticsearch?](https://discuss.elastic.co/t/do-i-need-a-server-to-elasticsearch/23985)

<div class="topic-metadata">

**Author:** [@TBDK](https://discuss.elastic.co/u/TBDK)\
**Replies:** 11\
**Last updated:** [June 26, 2015, 1:21pm UTC](https://discuss.elastic.co/t/do-i-need-a-server-to-elasticsearch/23985 "2015-06-26T13:21:15Z")

</div>

Hi, Really new to this and I have to ask if I have to have a server,like IIS or something similar, to ES.I want to access some XBRL files on a web service, and my first goal is just sending queries to retrieve the info. f…

---

## [Advanced-Pipeline: Logstash-\>Elasticsearch](https://discuss.elastic.co/t/advanced-pipeline-logstash-elasticsearch/50258)

<div class="topic-metadata">

**Author:** [@Jamen\_McGranahan](https://discuss.elastic.co/u/Jamen_McGranahan)\
**Replies:** 12\
**Last updated:** [May 18, 2016, 8:51pm UTC](https://discuss.elastic.co/t/advanced-pipeline-logstash-elasticsearch/50258 "2016-05-18T20:51:54Z")

</div>

I have been trying to follow this guide in order to try to understand this system: https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html In the middle of the page, it suggests that you issue a test …

---

## [509: certificate signed by unknown authority](https://discuss.elastic.co/t/509-certificate-signed-by-unknown-authority/317154)

<div class="topic-metadata">

**Author:** [@Joao\_Malebo](https://discuss.elastic.co/u/Joao_Malebo)\
**Replies:** 11\
**Last updated:** [October 28, 2022, 1:01am UTC](https://discuss.elastic.co/t/509-certificate-signed-by-unknown-authority/317154 "2022-10-28T01:01:56Z")

</div>

hello dears, I'm getting errors when running sudo filebeat setup --pipelines -and below the error return: {"log.level":"error","@timestamp":"2022-10-21T00:32:06.624+0100","log.origin":{"file.name":"instance/beat.go","f…

---

## [Building List Box of Unique Values](https://discuss.elastic.co/t/building-list-box-of-unique-values/29254)

<div class="topic-metadata">

**Author:** [@Joe](https://discuss.elastic.co/u/Joe)\
**Replies:** 11\
**Last updated:** [November 13, 2015, 2:46pm UTC](https://discuss.elastic.co/t/building-list-box-of-unique-values/29254 "2015-11-13T14:46:59Z")

</div>

I have a Centos7 5 node cluster. I have a proof of concept advanced search gui (.Net/Nest) with a critical requirement of filling in a list box with the existing values (at least a 1000 values) of one of the 20 or 30 …

---

## [How to prevent es cluster crash from deep aggregations](https://discuss.elastic.co/t/how-to-prevent-es-cluster-crash-from-deep-aggregations/36861)

<div class="topic-metadata">

**Author:** [@t7s](https://discuss.elastic.co/u/t7s)\
**Replies:** 9\
**Last updated:** [December 14, 2015, 3:38am UTC](https://discuss.elastic.co/t/how-to-prevent-es-cluster-crash-from-deep-aggregations/36861 "2015-12-14T03:38:15Z")

</div>

Recently I have to permit a query that aggs three levels, if data is large then full gc wave is coming then the cluster is gone。 Can es server（not client） abort a request if query time is long？

---

## [Greedydata does not work](https://discuss.elastic.co/t/greedydata-does-not-work/64032)

<div class="topic-metadata">

**Author:** [@ally](https://discuss.elastic.co/u/ally)\
**Replies:** 10\
**Last updated:** [November 17, 2016, 10:28am UTC](https://discuss.elastic.co/t/greedydata-does-not-work/64032 "2016-11-17T10:28:21Z")

</div>

Hello, I have Logstash v2.3 with the following configuration: \> input { \> beats { \> port =\> 5044 \> } \> } \> filter { \> grok { \> match =\> \["message", "(?m)\[%{HTTPDATE:msg\_timestamp}\] \[%…

---

## [Cluster is down and master nodes are not coming up](https://discuss.elastic.co/t/cluster-is-down-and-master-nodes-are-not-coming-up/179441)

<div class="topic-metadata">

**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\
**Replies:** 16\
**Last updated:** [May 29, 2019, 7:34pm UTC](https://discuss.elastic.co/t/cluster-is-down-and-master-nodes-are-not-coming-up/179441 "2019-05-29T19:34:17Z")

</div>

Looks like there was a connectivity issue due to which the nodes were not able to communicate with each other for some time and the cluster went into not available state. There are 3 master, 6 client and 156 data nodes.…

---

## [Elastic Search Module for Play! Framework and Java](https://discuss.elastic.co/t/elastic-search-module-for-play-framework-and-java/4131)

<div class="topic-metadata">

**Author:** [@felipera](https://discuss.elastic.co/u/felipera)\
**Replies:** 19\
**Last updated:** [March 25, 2011, 3:28pm UTC](https://discuss.elastic.co/t/elastic-search-module-for-play-framework-and-java/4131 "2011-03-25T15:28:31Z")

</div>

Guys, I just released a new Elastic Search module for Java and Play! Framework. http://geeks.aretotally.in/play-framework-module-elastic-search-distributed-searching-with-json-http-rest-or-java Just the first v…

---

## [Snapshot creation using curator 4.2](https://discuss.elastic.co/t/snapshot-creation-using-curator-4-2/75857)

<div class="topic-metadata">

**Author:** [@Rajasekaran\_Mari](https://discuss.elastic.co/u/Rajasekaran_Mari)\
**Replies:** 15\
**Last updated:** [March 29, 2017, 3:16pm UTC](https://discuss.elastic.co/t/snapshot-creation-using-curator-4-2/75857 "2017-03-29T15:16:06Z")

</div>

I want to create a snapshot older than 30 days indices using curator 4.2 so i created two curator configuration file : cat ~/curator\_config.yml # Remember, leave a key empty if there is no value. None will be …

---

## [Variable fields in Logstash's Grok-Pattern](https://discuss.elastic.co/t/variable-fields-in-logstashs-grok-pattern/177296)

<div class="topic-metadata">

**Author:** [@Nabil\_Mohamed](https://discuss.elastic.co/u/Nabil_Mohamed)\
**Replies:** 10\
**Last updated:** [April 23, 2019, 10:14am UTC](https://discuss.elastic.co/t/variable-fields-in-logstashs-grok-pattern/177296 "2019-04-23T10:14:46Z")

</div>

Dears , kindly i need some help for the below issue --\> -In the RAW data file that i am using in filebeat , has variable # of fields , and i need to build the Grok Pattern in logstash. raw data --\> 001:2019-04-17 00:…

---

## [Metricbeat bug: UTC timestamp in @timestamp and local date in \_index](https://discuss.elastic.co/t/metricbeat-bug-utc-timestamp-in-timestamp-and-local-date-in--index/90489)

<div class="topic-metadata">

**Author:** [@max0x7ba](https://discuss.elastic.co/u/max0x7ba)\
**Replies:** 11\
**Last updated:** [July 17, 2017, 2:57am UTC](https://discuss.elastic.co/t/metricbeat-bug-utc-timestamp-in-timestamp-and-local-date-in--index/90489 "2017-07-17T02:57:11Z")

</div>

Unlike Filebeat, Metricbeat uses UTC timestamp in @timestamp field and local date in \_index. That causes the records to go into the wrong index with Elasticsearch output. See \_index and @timestamp fields below: { "…

---

## [Store XML to Index in ES using logstash](https://discuss.elastic.co/t/store-xml-to-index-in-es-using-logstash/124158)

<div class="topic-metadata">

**Author:** [@Galileo](https://discuss.elastic.co/u/Galileo)\
**Replies:** 10\
**Last updated:** [March 16, 2018, 6:31pm UTC](https://discuss.elastic.co/t/store-xml-to-index-in-es-using-logstash/124158 "2018-03-16T18:31:36Z")

</div>

This would be my first code in logstash My config file is shared below, im using ver. 5.6.4 input { file { path =\> ""sample.xml"" start\_position =\> ""beginning"" sincedb\_path =\> ""/dev/null"" } } filter { xml …

---

## [Failed parsing date in format "dd/MM/yyyy" for specific date](https://discuss.elastic.co/t/failed-parsing-date-in-format-dd-mm-yyyy-for-specific-date/152312)

<div class="topic-metadata">

**Author:** [@rlapolli](https://discuss.elastic.co/u/rlapolli)\
**Replies:** 12\
**Last updated:** [October 22, 2018, 1:04pm UTC](https://discuss.elastic.co/t/failed-parsing-date-in-format-dd-mm-yyyy-for-specific-date/152312 "2018-10-22T13:04:17Z")

</div>

Hello everyone. I'm having trouble analyzing date for the "dd / mm / yyyy" format. I'm using the "Date Filter". Everything works perfectly for any date, except for "10/16/2016". Yes, it sounds quite weird, but I have t…

---

## [Why does an enrich policy get executed on the master node?](https://discuss.elastic.co/t/why-does-an-enrich-policy-get-executed-on-the-master-node/263241)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 29\
**Last updated:** [March 16, 2021, 7:56am UTC](https://discuss.elastic.co/t/why-does-an-enrich-policy-get-executed-on-the-master-node/263241 "2021-03-16T07:56:36Z")

</div>

I'm trying to create a geo\_match enrich policy based on a not-so-big source index (10GB). The match field is a geo\_shape and there are about half a dozen single-term enrich fields. So nothing extraordinary. When the ind…

---

## [Filebeat logs to logstash to kibana](https://discuss.elastic.co/t/filebeat-logs-to-logstash-to-kibana/115842)

<div class="topic-metadata">

**Author:** [@Firdaus](https://discuss.elastic.co/u/Firdaus)\
**Replies:** 9\
**Last updated:** [January 19, 2018, 10:18am UTC](https://discuss.elastic.co/t/filebeat-logs-to-logstash-to-kibana/115842 "2018-01-19T10:18:18Z")

</div>

I am using ELK and filebeat of version 6 and above. I have configured everything but struggling with seeing filebeat logs in kibana. If i put output as elasticsearch, i can see logs. But when I put as logstash in filebea…

---

## [Not able to login to kibana with SAML IdP(Siteminder)](https://discuss.elastic.co/t/not-able-to-login-to-kibana-with-saml-idp-siteminder/231336)

<div class="topic-metadata">

**Author:** [@bansalhp](https://discuss.elastic.co/u/bansalhp)\
**Replies:** 13\
**Last updated:** [May 11, 2020, 12:00pm UTC](https://discuss.elastic.co/t/not-able-to-login-to-kibana-with-saml-idp-siteminder/231336 "2020-05-11T12:00:56Z")

</div>

Hi, We are trying to authenticate Elasticsearch with SAML realm using IpD(Siteminder) on a development elasticsearch setup. https://www.elastic.co/guide/en/elasticsearch/reference/master/saml-guide-authentication.html#…

---

## [Cluster takes too long to apply cluster state](https://discuss.elastic.co/t/cluster-takes-too-long-to-apply-cluster-state/328407)

<div class="topic-metadata">

**Author:** [@Vadym](https://discuss.elastic.co/u/Vadym)\
**Replies:** 26\
**Last updated:** [June 6, 2023, 6:14pm UTC](https://discuss.elastic.co/t/cluster-takes-too-long-to-apply-cluster-state/328407 "2023-06-06T18:14:51Z")

</div>

Hi guys, We have some 1Tb+ indices and it takes more than a minute to drop these indices when we rotate them. During the deletion cluster takes too long to apply cluster state and master nodes start to kick data nodes o…

---

## [High cpu and Beats input: the pipeline is blocked, temporary refusing new connection](https://discuss.elastic.co/t/high-cpu-and-beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection/55270)

<div class="topic-metadata">

**Author:** [@xiongzhichaoelk](https://discuss.elastic.co/u/xiongzhichaoelk)\
**Replies:** 12\
**Last updated:** [December 9, 2016, 10:57am UTC](https://discuss.elastic.co/t/high-cpu-and-beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection/55270 "2016-12-09T10:57:01Z")

</div>

when I start logstash after about 5 minutes ,the log :slight\_smile: the cpu 100% :slight\_smile: the config: the ela is normal:

---

## [Elasticsearch not handled more indexes, So goes to Read Only mode](https://discuss.elastic.co/t/elasticsearch-not-handled-more-indexes-so-goes-to-read-only-mode/190964)

<div class="topic-metadata">

**Author:** [@Ritesh\_Pradhan](https://discuss.elastic.co/u/Ritesh_Pradhan)\
**Replies:** 9\
**Last updated:** [July 18, 2019, 1:09pm UTC](https://discuss.elastic.co/t/elasticsearch-not-handled-more-indexes-so-goes-to-read-only-mode/190964 "2019-07-18T13:09:17Z")

</div>

Hi Team, I am configure kibana and elasticsearch to our server. If elastic search generate more log or I am not deleted last 10 days data or kibana memory full or elastic search not handled data, So Elastic search confi…

---

## [Unable to use curator 5.2.0 with ELK 5.6.2](https://discuss.elastic.co/t/unable-to-use-curator-5-2-0-with-elk-5-6-2/104873)

<div class="topic-metadata">

**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\
**Replies:** 9\
**Last updated:** [October 30, 2017, 12:03pm UTC](https://discuss.elastic.co/t/unable-to-use-curator-5-2-0-with-elk-5-6-2/104873 "2017-10-30T12:03:58Z")

</div>

Hi, I have ELK 5.6.0 installed and I want to delete data older than 10 days. I have installed curator using pip and it got ver 5.2.0 of it by default. When I execute curator I get following error \[root@elk0 elasticsea…

---

## [How to remove columns from a bar chart which have no data](https://discuss.elastic.co/t/how-to-remove-columns-from-a-bar-chart-which-have-no-data/49923)

<div class="topic-metadata">

**Author:** [@Ken\_Ivon](https://discuss.elastic.co/u/Ken_Ivon)\
**Replies:** 9\
**Last updated:** [June 6, 2016, 6:07pm UTC](https://discuss.elastic.co/t/how-to-remove-columns-from-a-bar-chart-which-have-no-data/49923 "2016-06-06T18:07:12Z")

</div>

Continuing the discussion from Absence of some X.AXIS values in Bar chart or line chart: I have the same basic question. I am also new fairly new to Kibana. I am using version 4.4.2. My configuration is : y-axis s…

---

## [APM rest api](https://discuss.elastic.co/t/apm-rest-api/218986)

<div class="topic-metadata">

**Author:** [@spark](https://discuss.elastic.co/u/spark)\
**Replies:** 15\
**Last updated:** [February 17, 2020, 2:46pm UTC](https://discuss.elastic.co/t/apm-rest-api/218986 "2020-02-17T14:46:03Z")

</div>

Hey, I'm using Kibana, ElasticSearch and APM in version 7.5.1 (fresh install). I now want to use Application Performance Monitoring in my application, which is written in c++. Since Elastic does not have an C++ APM A…

---

## [Failing to retrieve results from ES when the timezone is UTC+1, UTC+2 - Problem started in indexes opened since 1/1/2019](https://discuss.elastic.co/t/failing-to-retrieve-results-from-es-when-the-timezone-is-utc-1-utc-2-problem-started-in-indexes-opened-since-1-1-2019/162716)

<div class="topic-metadata">

**Author:** [@Ariel\_Assaraf](https://discuss.elastic.co/u/Ariel_Assaraf)\
**Replies:** 14\
**Last updated:** [January 27, 2019, 9:34am UTC](https://discuss.elastic.co/t/failing-to-retrieve-results-from-es-when-the-timezone-is-utc-1-utc-2-problem-started-in-indexes-opened-since-1-1-2019/162716 "2019-01-27T09:34:56Z")

</div>

We are seeing very odd behavior when trying to query ES via Kibana or directly (using Postman). If the timezone is set to UTC or a timezone that is UTC+3 and above/UTC-3 and below, queries return fast, while queries ran …

---

## [Ignore wrong date value](https://discuss.elastic.co/t/ignore-wrong-date-value/87896)

<div class="topic-metadata">

**Author:** [@mitabrev](https://discuss.elastic.co/u/mitabrev)\
**Replies:** 12\
**Last updated:** [June 2, 2017, 3:11pm UTC](https://discuss.elastic.co/t/ignore-wrong-date-value/87896 "2017-06-02T15:11:23Z")

</div>

Hi, Hope I'm in the corrent sections. If not, please forgive. My parsed log files contain some date fields, and in some cases, the filed is not filled with epoch time value but with an empty string or just an "0". l…

---

## [How can I change "winlogbeat" name in "template.name"?](https://discuss.elastic.co/t/how-can-i-change-winlogbeat-name-in-template-name/98442)

<div class="topic-metadata">

**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\
**Replies:** 13\
**Last updated:** [September 1, 2017, 11:15am UTC](https://discuss.elastic.co/t/how-can-i-change-winlogbeat-name-in-template-name/98442 "2017-09-01T11:15:45Z")

</div>

Hello. Why I can’t change “winlogbeat” name in “template.name” section in config file? Thank you.

---

## [Data too large, data for \[\<transport\_request\>\]](https://discuss.elastic.co/t/data-too-large-data-for-transport-request/258676)

<div class="topic-metadata">

**Author:** [@myamor163](https://discuss.elastic.co/u/myamor163)\
**Replies:** 16\
**Last updated:** [December 28, 2020, 9:14am UTC](https://discuss.elastic.co/t/data-too-large-data-for-transport-request/258676 "2020-12-28T09:14:05Z")

</div>

Do not open replicas, index write normal, open replicas, write the following error: type":"circuit\_breaking\_exception","reason":"\[parent\] Data too large, data for \[\<transport\_request\>\] would be \[30770989726/28.6gb\], whi…

---

## [Elasticsearch Cluster 7.5.1 Not Working on docker](https://discuss.elastic.co/t/elasticsearch-cluster-7-5-1-not-working-on-docker/213327)

<div class="topic-metadata">

**Author:** [@jayjit](https://discuss.elastic.co/u/jayjit)\
**Replies:** 14\
**Last updated:** [December 31, 2019, 10:45am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-7-5-1-not-working-on-docker/213327 "2019-12-31T10:45:26Z")

</div>

Hi Our Elasticsearch Cluster 7.4.2 three node cluster was working great. But due once this is got upgrade to 7.5.1 cluster is not working. It is failing with following error. Same docker-compose.yml was working to star…

---

## [How to insert file,when my file is continuously updating](https://discuss.elastic.co/t/how-to-insert-file-when-my-file-is-continuously-updating/50639)

<div class="topic-metadata">

**Author:** [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Replies:** 17\
**Last updated:** [May 26, 2016, 7:29am UTC](https://discuss.elastic.co/t/how-to-insert-file-when-my-file-is-continuously-updating/50639 "2016-05-26T07:29:23Z")

</div>

Hi, I am having 5 files, names of those files are xyz0.log ,xyz1.log,.....xyz4.log and in that file there is a text :"my name is tom". now I am runing filebeat its only give one output to me ,but it harvest to all file a…

---

## [Icu\_normalizer is not working](https://discuss.elastic.co/t/icu-normalizer-is-not-working/165223)

<div class="topic-metadata">

**Author:** [@Saikiran\_Kyatham1](https://discuss.elastic.co/u/Saikiran_Kyatham1)\
**Replies:** 15\
**Last updated:** [January 22, 2019, 3:08pm UTC](https://discuss.elastic.co/t/icu-normalizer-is-not-working/165223 "2019-01-22T15:08:06Z")

</div>

here the Error message - when I'm trying to use icu\_normalizer in my elastic search. installed the plugins as well. { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Unknown filter ty…

---

## [Elasticsearch server terminates itself](https://discuss.elastic.co/t/elasticsearch-server-terminates-itself/7945)

<div class="topic-metadata">

**Author:** [@Kara](https://discuss.elastic.co/u/Kara)\
**Replies:** 20\
**Last updated:** [June 8, 2012, 10:13pm UTC](https://discuss.elastic.co/t/elasticsearch-server-terminates-itself/7945 "2012-06-08T22:13:48Z")

</div>

Hi, Does anyone know why ES terminates itself after indexing x number of documents? I restarted it 3 times today. This is how I start the server. Not passing any arguments. ./elasticsearch Thanks, Kara

---

## [Installing xpack = yellow cluster health](https://discuss.elastic.co/t/installing-xpack-yellow-cluster-health/104629)

<div class="topic-metadata">

**Author:** [@shines2](https://discuss.elastic.co/u/shines2)\
**Replies:** 13\
**Last updated:** [October 26, 2017, 8:18pm UTC](https://discuss.elastic.co/t/installing-xpack-yellow-cluster-health/104629 "2017-10-26T20:18:21Z")

</div>

After installing xpack and changing the default passwords of the three default users, my cluster now shows as yellow when I query it's health: { "cluster\_name" : "graylog", "status" : "yellow", "timed\_out" : false…

[Previous page](https://discuss.elastic.co/top.md?page=95&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=97&per_page=50&period=all)
