# Top **URL:** https://discuss.elastic.co/top.md?page=966&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 967 --- ## [AlreadyClosedException: engine is closed during cluster stats](https://discuss.elastic.co/t/alreadyclosedexception-engine-is-closed-during-cluster-stats/163238)
**Author:** [@katre](https://discuss.elastic.co/u/katre)\ **Replies:** 3\ **Last updated:** [January 7, 2019, 4:35pm UTC](https://discuss.elastic.co/t/alreadyclosedexception-engine-is-closed-during-cluster-stats/163238 "2019-01-07T16:35:04Z")
We monitor elasticsearch by using -cluster/stats. However it seems to give false alerts or we have some underlying issue to be solved. Cluster contains of 3 nodes. We use curator to periodically delete old indexes and r… --- ## [Edition de la légende sur une carte Kibana](https://discuss.elastic.co/t/edition-de-la-legende-sur-une-carte-kibana/53505)
**Author:** [@RMoulet](https://discuss.elastic.co/u/RMoulet)\ **Replies:** 3\ **Last updated:** [June 24, 2016, 1:47pm UTC](https://discuss.elastic.co/t/edition-de-la-legende-sur-une-carte-kibana/53505 "2016-06-24T13:47:13Z")
Bonjour, Je suis actuellement en train de créer une carte géographique dans Kibana pour une présentation. Seul soucis, la légende se trouvant dans le coin en bas à droite et est peu lisible. Malgré mes recherches et m… --- ## [Field names with dots](https://discuss.elastic.co/t/field-names-with-dots/48999)
**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\ **Replies:** 3\ **Last updated:** [May 3, 2016, 2:37pm UTC](https://discuss.elastic.co/t/field-names-with-dots/48999 "2016-05-03T14:37:28Z")
I am unable to find examples on the web. Is there any way to delete fields names that contains dots using logstash? My indices are failing the migration tool test, I am unable to upgrade to 2.2 yet. My plan is to re-inde… --- ## [Creating kafka topic automatically while sending logs from filebeat](https://discuss.elastic.co/t/creating-kafka-topic-automatically-while-sending-logs-from-filebeat/110563)
**Author:** [@Ferdous\_Shibly](https://discuss.elastic.co/u/Ferdous_Shibly)\ **Replies:** 1\ **Last updated:** [December 7, 2017, 12:42pm UTC](https://discuss.elastic.co/t/creating-kafka-topic-automatically-while-sending-logs-from-filebeat/110563 "2017-12-07T12:42:31Z")
is it possible to create kafka topic automatically based on the fields while sending logs from filebeat? I want to send logs from hosts through filebeat to kafka and it will create the topics automatically. And logstash … --- ## [How does sampling work](https://discuss.elastic.co/t/how-does-sampling-work/247617)
**Author:** [@manohar\_deepu](https://discuss.elastic.co/u/manohar_deepu)\ **Replies:** 6\ **Last updated:** [September 7, 2020, 7:15am UTC](https://discuss.elastic.co/t/how-does-sampling-work/247617 "2020-09-07T07:15:39Z")
Hi Can you please clarify these questions around sampling, Does agents push all the metrics to apm server irrespective of sampling and apm server chooses the data to ingest based on sampling % Or does apm agents thems… --- ## [Variables in SQL statements, running only after first statement](https://discuss.elastic.co/t/variables-in-sql-statements-running-only-after-first-statement/233893)
**Author:** [@Alex\_Korn](https://discuss.elastic.co/u/Alex_Korn)\ **Replies:** 5\ **Last updated:** [May 27, 2020, 2:13pm UTC](https://discuss.elastic.co/t/variables-in-sql-statements-running-only-after-first-statement/233893 "2020-05-27T14:13:09Z")
Hello all I'm new to logstash, and at the moment I'm playing around with my sql-requests, the almost all of them are using temp variable. It I'm running sql-request like select my\_id from table1 where date \> $start and… --- ## [Logstash error:no implicit conversion of fixnum into string](https://discuss.elastic.co/t/logstash-error-no-implicit-conversion-of-fixnum-into-string/165014)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 5\ **Last updated:** [January 22, 2019, 1:44pm UTC](https://discuss.elastic.co/t/logstash-error-no-implicit-conversion-of-fixnum-into-string/165014 "2019-01-22T13:44:22Z")
hi all I am using file beat, logstash , elasticsearch and kibana. my filebeat ships logs into logstash, but following error can be found in logstash log: \[2019-01-21T12:30:54,588\]\[ERROR\]\[logstash.pipeline \] Er… --- ## [Viewing csv file in kibana](https://discuss.elastic.co/t/viewing-csv-file-in-kibana/98492)
**Author:** [@bm1391](https://discuss.elastic.co/u/bm1391)\ **Replies:** 5\ **Last updated:** [August 28, 2017, 12:18am UTC](https://discuss.elastic.co/t/viewing-csv-file-in-kibana/98492 "2017-08-28T00:18:40Z")
Hi all, I have successfully loaded a csv file into logstash but I’m having problems visualizing it in Kibana. Here is my configuration: I believe it is a problem with the filter section obviously… \> input { \> file {… --- ## [Packetbeat - “ERR Failed to read integer reply: Expected digit”](https://discuss.elastic.co/t/packetbeat-err-failed-to-read-integer-reply-expected-digit/74352)
**Author:** [@moooofly](https://discuss.elastic.co/u/moooofly)\ **Replies:** 5\ **Last updated:** [February 10, 2017, 2:31am UTC](https://discuss.elastic.co/t/packetbeat-err-failed-to-read-integer-reply-expected-digit/74352 "2017-02-10T02:31:00Z")
when analyzing pcap file for redis protocol with packetbeat, I get outputs as follow: ➜ packetbeat git:(master) ✗ ./packetbeat -c ./packetbeat.yml -e -I redis\_xg-bjdev-rediscluster-1\_prot-7101\_20161222110711\_20161222… --- ## [Bug in decode\_json\_fields: data loss, tye conflict,](https://discuss.elastic.co/t/bug-in-decode-json-fields-data-loss-tye-conflict/73812)
**Author:** [@fld](https://discuss.elastic.co/u/fld)\ **Replies:** 5\ **Last updated:** [February 8, 2017, 7:46am UTC](https://discuss.elastic.co/t/bug-in-decode-json-fields-data-loss-tye-conflict/73812 "2017-02-08T07:46:22Z")
I think the following behaviour is a bug because it causes some data loss. Please assume the following log file /tmp/sample\_json.log: {"someDate":"2016-09-28T01:40:26.760+0000", "someNumberAsString": "1475026826760… --- ## [Elasticsearch aggregation on object over time series](https://discuss.elastic.co/t/elasticsearch-aggregation-on-object-over-time-series/43566)
**Author:** [@bstsnail](https://discuss.elastic.co/u/bstsnail)\ **Replies:** 5\ **Last updated:** [March 5, 2016, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-on-object-over-time-series/43566 "2016-03-05T09:41:44Z")
I have the following document in Elasticsearch {"timestamp": 1457018658303, "location": {"lat":1, "lon":1}} {"timestamp": 1457018718303, "location": {"lat":2, "lon":2}} {"timestamp": 1457018778303, "location": {"lat":3, … --- ## [My frontend application uses https, so does apmserver need to use the same ca certificate?](https://discuss.elastic.co/t/my-frontend-application-uses-https-so-does-apmserver-need-to-use-the-same-ca-certificate/232565)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 8\ **Last updated:** [May 16, 2020, 12:15am UTC](https://discuss.elastic.co/t/my-frontend-application-uses-https-so-does-apmserver-need-to-use-the-same-ca-certificate/232565 "2020-05-16T00:15:06Z")
Architecture Not all services use https question.1 Is a certificate required between apm agent and apm server? question.2 Does the apm agent on the frontend application need to use the same certificate as the fron… --- ## [Kibana "Reindex" Failed](https://discuss.elastic.co/t/kibana-reindex-failed/192394)
**Author:** [@oliverlucas1](https://discuss.elastic.co/u/oliverlucas1)\ **Replies:** 8\ **Last updated:** [July 27, 2019, 3:11pm UTC](https://discuss.elastic.co/t/kibana-reindex-failed/192394 "2019-07-27T15:11:43Z")
Elasticsearch and Kibana was running with 5.x for some time and I've updated to 6.x after some pain, the next logical jump is to 7.0. Following the documentation, I understand that I need to reindex my indicies via the … --- ## [More shards (in same node) makes indexing much slower](https://discuss.elastic.co/t/more-shards-in-same-node-makes-indexing-much-slower/5509)
**Author:** [@Steff](https://discuss.elastic.co/u/Steff)\ **Replies:** 8\ **Last updated:** [October 10, 2011, 12:30pm UTC](https://discuss.elastic.co/t/more-shards-in-same-node-makes-indexing-much-slower/5509 "2011-10-10T12:30:52Z")
Hi We have a simple test that indexes 100.000 documents in the same index in ES and measures how long time it takes. We always run against an ES with one node. We have tried to vary the number of shards in the inde… --- ## [ElasticsearchError error=“400 - Rejected by Elasticsearch](https://discuss.elastic.co/t/elasticsearcherror-error-400-rejected-by-elasticsearch/247477)
**Author:** [@akhinair](https://discuss.elastic.co/u/akhinair)\ **Replies:** 1\ **Last updated:** [September 4, 2020, 5:37am UTC](https://discuss.elastic.co/t/elasticsearcherror-error-400-rejected-by-elasticsearch/247477 "2020-09-04T05:37:25Z")
I am using EFK stack in my GKE cluster and recently i observed below errors in my fluentd logs. This has started after adding new data point for geopoint in the fluentd. can somebody please help on this? 2020-09-03 16… --- ## [Spark to Elasticsearch - NoRouteToHostException when ES node fails](https://discuss.elastic.co/t/spark-to-elasticsearch-noroutetohostexception-when-es-node-fails/164492)
**Author:** [@patadaptive](https://discuss.elastic.co/u/patadaptive)\ **Replies:** 7\ **Last updated:** [January 21, 2019, 9:49am UTC](https://discuss.elastic.co/t/spark-to-elasticsearch-noroutetohostexception-when-es-node-fails/164492 "2019-01-21T09:49:39Z")
I have a 3 node Elasticsearch cluster configured to be fault tolerant in that the cluster will continue working fine if any 1 of the 3 nodes fail (or is just shutdown to simulate a failure). This works fine. I have an s… --- ## [Same name fields in two mappings disable indexing in one mapping](https://discuss.elastic.co/t/same-name-fields-in-two-mappings-disable-indexing-in-one-mapping/130560)
**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\ **Replies:** 7\ **Last updated:** [May 4, 2018, 7:58am UTC](https://discuss.elastic.co/t/same-name-fields-in-two-mappings-disable-indexing-in-one-mapping/130560 "2018-05-04T07:58:57Z")
Hi I have two mappings, mapping1 and mapping2... mapping1 goes to index1 and mapping2 to index2. But mapping1 and mapping2 are same. Want to enable index in mapping1 and disable in mapping2. How to do this? --- ## ["?" next to field in Kibana](https://discuss.elastic.co/t/next-to-field-in-kibana/123591)
**Author:** [@tomak](https://discuss.elastic.co/u/tomak)\ **Replies:** 1\ **Last updated:** [March 12, 2018, 5:15pm UTC](https://discuss.elastic.co/t/next-to-field-in-kibana/123591 "2018-03-12T17:15:17Z")
I had a document with a few fields and wanted to add a field "country" to it. So I did the following: POST /test\_vendeur/vendeur/1/\_update?pretty { "doc": {"pays": "France"} } Now next to my field "pays", there is a… --- ## [GEOPOINT not recognized](https://discuss.elastic.co/t/geopoint-not-recognized/146377)
**Author:** [@Alberto\_Sironi](https://discuss.elastic.co/u/Alberto_Sironi)\ **Replies:** 4\ **Last updated:** [August 29, 2018, 12:20pm UTC](https://discuss.elastic.co/t/geopoint-not-recognized/146377 "2018-08-29T12:20:58Z")
Hi guys, i'm using logstash 6.2.4 and i have some problem to upload my longitude and latitude point in kibana. I red a lot regarding this issue, but i still have some doubt. my logstash config file looks like: input { … --- ## [Hitting error - Ignoring Netflow version v10](https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796)
**Author:** [@aayush.a15](https://discuss.elastic.co/u/aayush.a15)\ **Replies:** 4\ **Last updated:** [February 6, 2017, 1:53pm UTC](https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796 "2017-02-06T13:53:09Z")
Hi I am a Logstash newbie. I am using python-ipfix module to generate IPFIX Packets and send it to LogStash on Localhost over port 10000. However, I am hitting the error - Ignoring Netflow version v10 {:level=\>:warn} in … --- ## [Extract/export Kibana charts to embed/inport them somewhere else](https://discuss.elastic.co/t/extract-export-kibana-charts-to-embed-inport-them-somewhere-else/23621)
**Author:** [@lgs](https://discuss.elastic.co/u/lgs)\ **Replies:** 4\ **Last updated:** [May 14, 2015, 9:44pm UTC](https://discuss.elastic.co/t/extract-export-kibana-charts-to-embed-inport-them-somewhere-else/23621 "2015-05-14T21:44:07Z")
Is there a convenient way of snapshotting Kibana charts in static svg/png/jpg formats or CSS/javascript widgets eventually, to display or embed them within other application views outside Kibana ? -- Please u… --- ## [Scripted fields in vega visualization - Getting Bad request as error](https://discuss.elastic.co/t/scripted-fields-in-vega-visualization-getting-bad-request-as-error/254395)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 6\ **Last updated:** [November 16, 2020, 6:29pm UTC](https://discuss.elastic.co/t/scripted-fields-in-vega-visualization-getting-bad-request-as-error/254395 "2020-11-16T18:29:47Z")
{ $schema: "https://vega.github.io/schema/vega-lite/v2.json" data: { url: { %context%: true index: index\_ssd\_2 body: { size: 10000, \_source: \["mediatype","pred\_comp\_sem","Gender","PhotoOfP… --- ## [Heatmap number format](https://discuss.elastic.co/t/heatmap-number-format/91083)
**Author:** [@\_jake](https://discuss.elastic.co/u/_jake)\ **Replies:** 6\ **Last updated:** [June 28, 2017, 12:39pm UTC](https://discuss.elastic.co/t/heatmap-number-format/91083 "2017-06-28T12:39:43Z")
How do I specify the number format here. I want to show zero decimal places. Thanks --- ## [How to set up the initial jwkset\_path in an OpenID Connection in Elasticsearch](https://discuss.elastic.co/t/how-to-set-up-the-initial-jwkset-path-in-an-openid-connection-in-elasticsearch/220133)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 2\ **Last updated:** [February 21, 2020, 1:23am UTC](https://discuss.elastic.co/t/how-to-set-up-the-initial-jwkset-path-in-an-openid-connection-in-elasticsearch/220133 "2020-02-21T01:23:00Z")
I try to implement SSO function using OpenID Connect(using google api). So I add configuration in elasticsearch.yml by referring to the URL below. https://www.elastic.co/guide/en/elasticsearch/reference/current/oidc-gu… --- ## [Out of memory issues with single log file](https://discuss.elastic.co/t/out-of-memory-issues-with-single-log-file/196323)
**Author:** [@flavioarieta](https://discuss.elastic.co/u/flavioarieta)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 1:23pm UTC](https://discuss.elastic.co/t/out-of-memory-issues-with-single-log-file/196323 "2019-08-23T13:23:32Z")
Hi, I'm experiencing the following error some seconds after starting filebeat and I can't understand the reason. ... 2019-08-22T12:08:13.494Z INFO instance/beat.go:280 Setup Beat: filebeat; Version: 6.8.1 2019-08-22T12… --- ## [How to sort line chart in Descending order](https://discuss.elastic.co/t/how-to-sort-line-chart-in-descending-order/32323)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 2\ **Last updated:** [October 19, 2015, 6:41am UTC](https://discuss.elastic.co/t/how-to-sort-line-chart-in-descending-order/32323 "2015-10-19T06:41:40Z")
Hi Experts, My requirement is to sort above line chart in Descending order. So , my legend should be like 9 7 6 ..... Please advice , as I tried { "order" : { "\_term" : "asc" } } OR { "order" : { "\_term" : "des… --- ## [Libbeat does not allow updates when publishing to Elasticsearch?](https://discuss.elastic.co/t/libbeat-does-not-allow-updates-when-publishing-to-elasticsearch/148031)
**Author:** [@stoth](https://discuss.elastic.co/u/stoth)\ **Replies:** 4\ **Last updated:** [October 2, 2018, 4:09am UTC](https://discuss.elastic.co/t/libbeat-does-not-allow-updates-when-publishing-to-elasticsearch/148031 "2018-10-02T04:09:03Z")
NOTE: After doing additional research and managing to find the code preventing updates, I've revised this post to be more accurate and succinct. ISSUE: When using the beat.Client to publish \[bulk\] beat.Events to the Ela… --- ## [Kibana 6.0.0 RC2 - missing features for 'Coordinate Map' visualization](https://discuss.elastic.co/t/kibana-6-0-0-rc2-missing-features-for-coordinate-map-visualization/107276)
**Author:** [@networking\_guy](https://discuss.elastic.co/u/networking_guy)\ **Replies:** 4\ **Last updated:** [November 12, 2017, 12:58am UTC](https://discuss.elastic.co/t/kibana-6-0-0-rc2-missing-features-for-coordinate-map-visualization/107276 "2017-11-12T00:58:16Z")
Hey guys, i am wondering, that in the Kibana 6.0.0 RC1 and RC2 following options are missing for the 'Coordinate Map' in the release and aswell in the documentation: Blur: Sets the amount of blurring for the heatmap do… --- ## [NO\_SHARED\_CIPHER error when beats is behind AWS load balancer](https://discuss.elastic.co/t/no-shared-cipher-error-when-beats-is-behind-aws-load-balancer/144751)
**Author:** [@smilin\_stan](https://discuss.elastic.co/u/smilin_stan)\ **Replies:** 3\ **Last updated:** [August 23, 2018, 5:30pm UTC](https://discuss.elastic.co/t/no-shared-cipher-error-when-beats-is-behind-aws-load-balancer/144751 "2018-08-23T17:30:00Z")
I am running logstash 6.3.2 on Amazon Linux 2. My beats input is as follows: input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/ssl/certs/logstash.crt" ssl\_key =\> "/etc/ssl/certs/logstash.pem" } }… --- ## [Custom routing of shard number](https://discuss.elastic.co/t/custom-routing-of-shard-number/39216)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 3\ **Last updated:** [January 14, 2016, 10:06am UTC](https://discuss.elastic.co/t/custom-routing-of-shard-number/39216 "2016-01-14T10:06:53Z")
Hi All, I am trying to use custom routing to index some document to a particular shard. Below is the link I referred, https://www.elastic.co/guide/en/elasticsearch/guide/current/routing-value.html#routing-value Sam… --- ## [Term filter on field mapped to "integer" fails - a bug?](https://discuss.elastic.co/t/term-filter-on-field-mapped-to-integer-fails-a-bug/21930)
**Author:** [@msbreuer](https://discuss.elastic.co/u/msbreuer)\ **Replies:** 3\ **Last updated:** [February 3, 2015, 9:08am UTC](https://discuss.elastic.co/t/term-filter-on-field-mapped-to-integer-fails-a-bug/21930 "2015-02-03T09:08:19Z")
There seems to be a bug on term-filter when using it on "integer"-mapped fields. The field "position" is mapped to "integer" and does not match to term-filter. This is the mapping: "position" : { "type": "int… --- ## [After upgrade to 9.3.4 problem with version\_conflict\_engine\_exception](https://discuss.elastic.co/t/after-upgrade-to-9-3-4-problem-with-version-conflict-engine-exception/386162)
**Author:** [@Mario\_22](https://discuss.elastic.co/u/Mario_22)\ **Replies:** 4\ **Last updated:** [May 6, 2026, 7:53pm UTC](https://discuss.elastic.co/t/after-upgrade-to-9-3-4-problem-with-version-conflict-engine-exception/386162 "2026-05-06T19:53:38Z")
After upgrading the Elastic Stack, Fleet Server, and Elastic Agents to 9.3.4, and after re-enabling / upgrading integrations, we started seeing a very large number of errors in logs-elastic\_agent-\*. The errors look like… --- ## [Mocking SearchResponse in New .NET client](https://discuss.elastic.co/t/mocking-searchresponse-in-new-net-client/371925)
**Author:** [@imhoffdavid](https://discuss.elastic.co/u/imhoffdavid)\ **Replies:** 5\ **Last updated:** [January 10, 2025, 2:37pm UTC](https://discuss.elastic.co/t/mocking-searchresponse-in-new-net-client/371925 "2025-01-10T14:37:46Z")
Hello, I'm relatively new to .NET ecosystem and I'm trying to write some unit tests for the new elasticsearch .NET client (v 8.16.3) and I'm running into some issues. It seems in the past, (NEST client) you were able to… --- ## [Read from spark big index and memory usage](https://discuss.elastic.co/t/read-from-spark-big-index-and-memory-usage/298707)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 5\ **Last updated:** [March 4, 2022, 3:37pm UTC](https://discuss.elastic.co/t/read-from-spark-big-index-and-memory-usage/298707 "2022-03-04T15:37:44Z")
We use Spark to read a full index of 80Go then write data as a parquet file. I see memory consumption is going up until 24G per Spark worker. Hence my question: during the scroll search (1 hour), is the data stored in … --- ## [Why is dicuss website not rendering properly](https://discuss.elastic.co/t/why-is-dicuss-website-not-rendering-properly/189203)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 5\ **Last updated:** [July 8, 2019, 10:01am UTC](https://discuss.elastic.co/t/why-is-dicuss-website-not-rendering-properly/189203 "2019-07-08T10:01:28Z")
Don't know if this is right for this fora, but I've for a long time now have issues rendering this elastic discuss website in various browsers on various OSes, but f.ex. not in similar OS+browser on a home computer. Any… --- ## [Trying to parse the content of a json into different fields](https://discuss.elastic.co/t/trying-to-parse-the-content-of-a-json-into-different-fields/149202)
**Author:** [@ratman](https://discuss.elastic.co/u/ratman)\ **Replies:** 5\ **Last updated:** [September 20, 2018, 2:14pm UTC](https://discuss.elastic.co/t/trying-to-parse-the-content-of-a-json-into-different-fields/149202 "2018-09-20T14:14:18Z")
Hello, I am quite new in elasticsearch/logstash/kibana but I am trying to build a small dashboard with some logs I am getting from different machines. The logs are formed by statement like this : INFO - TEXT - Sat Aug … --- ## [Export monitoring metrics of a \*beat via HTTP(S)](https://discuss.elastic.co/t/export-monitoring-metrics-of-a-beat-via-http-s/96128)
**Author:** [@maxmeyer](https://discuss.elastic.co/u/maxmeyer)\ **Replies:** 5\ **Last updated:** [August 10, 2017, 12:32pm UTC](https://discuss.elastic.co/t/export-monitoring-metrics-of-a-beat-via-http-s/96128 "2017-08-10T12:32:36Z")
Hey there, I’m currently working on a beat. To make it work well in an environment with quite a few logs, I would like to gather as much metrics as possible and expose them to “Prometheus”. I saw people working on sendi… --- ## [Rerouting shards in cluster](https://discuss.elastic.co/t/rerouting-shards-in-cluster/88547)
**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\ **Replies:** 5\ **Last updated:** [June 7, 2017, 10:12am UTC](https://discuss.elastic.co/t/rerouting-shards-in-cluster/88547 "2017-06-07T10:12:17Z")
Hi In 2.x Es we have used the following rerouting command to move the INITIALIZING shard to STARTED state. curl -XPOST "http://172.19.0.16:9200/\_cluster/reroute" -d' { "commands": \[{ "allocate": { "index": "fw-dd-20… --- ## [Responsetime doesnt come in JSON object in case of %{COMMONAPACHELOG}"](https://discuss.elastic.co/t/responsetime-doesnt-come-in-json-object-in-case-of-commonapachelog/42562)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 5\ **Last updated:** [February 24, 2016, 11:20am UTC](https://discuss.elastic.co/t/responsetime-doesnt-come-in-json-object-in-case-of-commonapachelog/42562 "2016-02-24T11:20:59Z")
Hi, I am using logstash 1.5.0 as indexer to filter apache access logs. I use match =\> { "message" =\> "%{COMMONAPACHELOG}" } in my groke filter. Sample log is : xx.xx.xx.xxx - - \[24/Feb/2016:07:45:54 +0200\] "GET /s… --- ## [Upgrade logstash](https://discuss.elastic.co/t/upgrade-logstash/26089)
**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\ **Replies:** 5\ **Last updated:** [July 23, 2015, 1:16am UTC](https://discuss.elastic.co/t/upgrade-logstash/26089 "2015-07-23T01:16:34Z")
I currently use logstash-1.4.2 and want to upgrade it to the last stable version. But can't find any information about - How to upgrade logstash. Show me, please, any information about? --- ## [ERROR instance/beat.go:933 Exiting: Error reading config file: required 'object', but found 'string' in field 'filebeat.inputs.1' (source:'filebeat.yml')](https://discuss.elastic.co/t/error-instance-beat-go-933-exiting-error-reading-config-file-required-object-but-found-string-in-field-filebeat-inputs-1-source-filebeat-yml/225074)
**Author:** [@hemant\_472](https://discuss.elastic.co/u/hemant_472)\ **Replies:** 2\ **Last updated:** [March 27, 2020, 8:50am UTC](https://discuss.elastic.co/t/error-instance-beat-go-933-exiting-error-reading-config-file-required-object-but-found-string-in-field-filebeat-inputs-1-source-filebeat-yml/225074 "2020-03-27T08:50:43Z")
Hi, i am getting this error and not able to access my log file \`''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' filebeat.inputs: Each - is an input. Most options can be set … --- ## [Group by terms and get count of nested array property?](https://discuss.elastic.co/t/group-by-terms-and-get-count-of-nested-array-property/211823)
**Author:** [@tzn01](https://discuss.elastic.co/u/tzn01)\ **Replies:** 2\ **Last updated:** [December 14, 2019, 10:37am UTC](https://discuss.elastic.co/t/group-by-terms-and-get-count-of-nested-array-property/211823 "2019-12-14T10:37:02Z")
I would like to get the count from a document series where an array item matches some value. I have documents like these: { "Name": "jason", "Todos": \[{ "State": "COMPLETED" "Timer": 10 … --- ## [Jenkins ELK Integration without using logstash plugin](https://discuss.elastic.co/t/jenkins-elk-integration-without-using-logstash-plugin/188409)
**Author:** [@mrashid](https://discuss.elastic.co/u/mrashid)\ **Replies:** 2\ **Last updated:** [July 2, 2019, 4:56am UTC](https://discuss.elastic.co/t/jenkins-elk-integration-without-using-logstash-plugin/188409 "2019-07-02T04:56:31Z")
I am using file-beat to ship logs from Jenkins job host location by configuring filebeat.yml as follows : /builds/v2018/jenkins/jobs/ELK\_TEST/builds/\*/log The problem is that sometimes i get a source field in Kibana wh… --- ## [Kibana public visualization](https://discuss.elastic.co/t/kibana-public-visualization/110817)
**Author:** [@GregoryB-T](https://discuss.elastic.co/u/GregoryB-T)\ **Replies:** 2\ **Last updated:** [December 11, 2017, 12:39pm UTC](https://discuss.elastic.co/t/kibana-public-visualization/110817 "2017-12-11T12:39:32Z")
Hi , I'm using kibana 6.0 with X-PACK and I'm using visualization sharing by Iframe to build a external public Dashboard but with the security enable, is it possible to expose visualizations without authentication ? Th… --- ## [Generate automatic index names like "%{\[container.name\]}-%{+yyyy.MM.dd}" with ILM enabled](https://discuss.elastic.co/t/generate-automatic-index-names-like-container-name-yyyy-mm-dd-with-ilm-enabled/244217)
**Author:** [@sholokhov17](https://discuss.elastic.co/u/sholokhov17)\ **Replies:** 4\ **Last updated:** [August 16, 2020, 9:26pm UTC](https://discuss.elastic.co/t/generate-automatic-index-names-like-container-name-yyyy-mm-dd-with-ilm-enabled/244217 "2020-08-16T21:26:34Z")
Hello, our worked config of filebeat.yml: #===== Filebeat Inputs ====== filebeat.inputs: - type: docker combine\_partial: true containers: path: "/var/lib/docker/containers" ids : - "\*" #===== Filebeat… --- ## [Ruby Filter Syntax](https://discuss.elastic.co/t/ruby-filter-syntax/190839)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [July 17, 2019, 2:19pm UTC](https://discuss.elastic.co/t/ruby-filter-syntax/190839 "2019-07-17T14:19:40Z")
I'm trying to take a pair of fields that contain a date and subtract one from the other. However, my code is wrong somewhere and i get an error. This error occurs three times for each event, so I assume it's a syntax e… --- ## [Logstash saves to two different indexes when adding netflow module](https://discuss.elastic.co/t/logstash-saves-to-two-different-indexes-when-adding-netflow-module/105683)
**Author:** [@zentavr](https://discuss.elastic.co/u/zentavr)\ **Replies:** 4\ **Last updated:** [October 31, 2017, 4:47am UTC](https://discuss.elastic.co/t/logstash-saves-to-two-different-indexes-when-adding-netflow-module/105683 "2017-10-31T04:47:23Z")
I enabled netflow module in logstash 5.6.3 several days ago and today started to stream the flows into logstash. Before that I had collected the logs via filebeat already. What I noticed is that filebeat's stuff appeare… --- ## [Curl Problems with ElasticSearch on Ubuntu 10.04 Server](https://discuss.elastic.co/t/curl-problems-with-elasticsearch-on-ubuntu-10-04-server/5505)
**Author:** [@Josh\_JRG](https://discuss.elastic.co/u/Josh_JRG)\ **Replies:** 4\ **Last updated:** [November 8, 2011, 6:42pm UTC](https://discuss.elastic.co/t/curl-problems-with-elasticsearch-on-ubuntu-10-04-server/5505 "2011-11-08T18:42:43Z")
I've got an Ubuntu 10.04 Server instance running on Amazon EC2 and I'm having some problems. I followed this tutorial to the letter to install ElasticSearch: http://www.elasticsearch.org/tutorials/2010/07/02/setting… --- ## [Filebeat docker help](https://discuss.elastic.co/t/filebeat-docker-help/197161)
**Author:** [@Phil\_Brady](https://discuss.elastic.co/u/Phil_Brady)\ **Replies:** 3\ **Last updated:** [August 30, 2019, 9:10am UTC](https://discuss.elastic.co/t/filebeat-docker-help/197161 "2019-08-30T09:10:17Z")
Sorry if these questions have been answered before, I am new to elastic and cannot find the answers I have an entry in my docker logs that looks like this Wed, 28 Aug 2019 15:40:23 GMT - info: Prematch events sync pro… --- ## [Logstash upsert usage](https://discuss.elastic.co/t/logstash-upsert-usage/168244)
**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\ **Replies:** 3\ **Last updated:** [February 15, 2019, 8:03pm UTC](https://discuss.elastic.co/t/logstash-upsert-usage/168244 "2019-02-15T20:03:09Z")
I am merging two docs based on a ID which i frame it out from the document i receive. The two different doc which i want merge share the same ID and i merge it in logstash using upsert. The document are merging but at th… [Previous page](https://discuss.elastic.co/top.md?page=965&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=967&per_page=50&period=all)