# Top **URL:** https://discuss.elastic.co/top.md?page=967&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 968 --- ## [Winlogbeat v5 Dashboard Error (Fielddata is disabled on text fields)](https://discuss.elastic.co/t/winlogbeat-v5-dashboard-error-fielddata-is-disabled-on-text-fields/64342)
**Author:** [@somerandomguy](https://discuss.elastic.co/u/somerandomguy)\ **Replies:** 3\ **Last updated:** [October 31, 2016, 3:53pm UTC](https://discuss.elastic.co/t/winlogbeat-v5-dashboard-error-fielddata-is-disabled-on-text-fields/64342 "2016-10-31T15:53:02Z")
Hi. Just setup my windows 2012 server to send eventlogs to ES (via winlogbeat and LS). I also uploaded the dashboard as per document here - https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-sample-da… --- ## [Logging not initialised properly after upgrade to 2.0](https://discuss.elastic.co/t/logging-not-initialised-properly-after-upgrade-to-2-0/35542)
**Author:** [@aodj](https://discuss.elastic.co/u/aodj)\ **Replies:** 3\ **Last updated:** [November 26, 2015, 3:53pm UTC](https://discuss.elastic.co/t/logging-not-initialised-properly-after-upgrade-to-2-0/35542 "2015-11-26T15:53:01Z")
I'm currently testing out migrating to 2.0 from 1.7 but I keep receiving a notification saying log4j:WARN No appenders could be found for logger (bootstrap). log4j:WARN Please initialize the log4j system properly. lo… --- ## [Received response for a request that has timed out and "failed to retrieve stats for node"](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out-and-failed-to-retrieve-stats-for-node/343963)
**Author:** [@sanju1323](https://discuss.elastic.co/u/sanju1323)\ **Replies:** 7\ **Last updated:** [September 28, 2023, 3:01pm UTC](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out-and-failed-to-retrieve-stats-for-node/343963 "2023-09-28T15:01:22Z")
Hi.. I have a 5 node cluster where we are receiving data around 400 GB per day. Disk in the cluster is at 70% mark on all the nodes. We have observed slowness in running simple queries like \_cat/indices also. When we c… --- ## [Custom transaction names stopped working and warning message](https://discuss.elastic.co/t/custom-transaction-names-stopped-working-and-warning-message/158335)
**Author:** [@Chris\_Blackwell](https://discuss.elastic.co/u/Chris_Blackwell)\ **Replies:** 7\ **Last updated:** [November 30, 2018, 7:03pm UTC](https://discuss.elastic.co/t/custom-transaction-names-stopped-working-and-warning-message/158335 "2018-11-30T19:03:01Z")
We had apm working in an app, which is built on Lucee CFML (https://lucee.org/) . Which is a scripting language on the JVM. The app runs in tomcat, but because the script engine only exposes a single servlet we need to … --- ## [Issue in elasticsearch configurations](https://discuss.elastic.co/t/issue-in-elasticsearch-configurations/135020)
**Author:** [@riccardopierpaoli](https://discuss.elastic.co/u/riccardopierpaoli)\ **Replies:** 1\ **Last updated:** [June 15, 2018, 2:42pm UTC](https://discuss.elastic.co/t/issue-in-elasticsearch-configurations/135020 "2018-06-15T14:42:13Z")
Hello, I'm new in Elasticsearch x-pack plug-in and I have a problem to configure Metricbeat. My configuration is composed by 2 clusters: one for monitoring, compound by one node (port 9202) and one cluster for data node… --- ## [ELK Stack in different servers](https://discuss.elastic.co/t/elk-stack-in-different-servers/151110)
**Author:** [@calebereis](https://discuss.elastic.co/u/calebereis)\ **Replies:** 2\ **Last updated:** [October 5, 2018, 2:24pm UTC](https://discuss.elastic.co/t/elk-stack-in-different-servers/151110 "2018-10-05T14:24:39Z")
Hi everyone, I'm using ELK Stack and it was working good until the last days when I started working with Machine Learning. The problem is I'm using the stack in the same server, so I'm thinking about split it, but I don… --- ## [Logstash Pipeline aborted due to error](https://discuss.elastic.co/t/logstash-pipeline-aborted-due-to-error/63177)
**Author:** [@bopa](https://discuss.elastic.co/u/bopa)\ **Replies:** 2\ **Last updated:** [October 19, 2016, 6:40am UTC](https://discuss.elastic.co/t/logstash-pipeline-aborted-due-to-error/63177 "2016-10-19T06:40:28Z")
following is my logstash config file . configtest shows OK but I'm getting "Pipeline aborted due to error" in logstash logs. logstash config input { tcp { port =\> 5000 type =\> 'eventlog' … --- ## [Access the epoch of the date type doc in groovy script](https://discuss.elastic.co/t/access-the-epoch-of-the-date-type-doc-in-groovy-script/53129)
**Author:** [@dhruvpsaru](https://discuss.elastic.co/u/dhruvpsaru)\ **Replies:** 2\ **Last updated:** [June 17, 2016, 1:18pm UTC](https://discuss.elastic.co/t/access-the-epoch-of-the-date-type-doc-in-groovy-script/53129 "2016-06-17T13:18:58Z")
As per my understanding and from here http://stackoverflow.com/questions/29341715/understanding-how-elasticsearch-stores-dates-internally ealstic search stores the date internally as epoch format. Now consider I need to … --- ## [Index sorting in rollover request not supported?](https://discuss.elastic.co/t/index-sorting-in-rollover-request-not-supported/197430)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 5\ **Last updated:** [August 30, 2019, 9:43pm UTC](https://discuss.elastic.co/t/index-sorting-in-rollover-request-not-supported/197430 "2019-08-30T21:43:20Z")
ES 7.3.0 I'm trying to issue rollover command with index sorting. But I'm getting status 400 with "reason": "unknown index sort field:\[ts\]" This is my payload: POST test/\_rollover { "conditions": { "max\_size"… --- ## [Problem Updating Licence Xpack5.3 basic Free Licence](https://discuss.elastic.co/t/problem-updating-licence-xpack5-3-basic-free-licence/85088)
**Author:** [@Baco](https://discuss.elastic.co/u/Baco)\ **Replies:** 5\ **Last updated:** [May 11, 2017, 12:00pm UTC](https://discuss.elastic.co/t/problem-updating-licence-xpack5-3-basic-free-licence/85088 "2017-05-11T12:00:31Z")
Please, could you help me to find solution to the problem below? When I do this command: curl -XPUT -u elastic 'http://localhost:9200/\_xpack/license' -H "Content-Type: application/json" -d @license.json I have this … --- ## [Logstash Docker Image locations and size differences](https://discuss.elastic.co/t/logstash-docker-image-locations-and-size-differences/76035)
**Author:** [@kevingimbel](https://discuss.elastic.co/u/kevingimbel)\ **Replies:** 5\ **Last updated:** [February 28, 2017, 12:06am UTC](https://discuss.elastic.co/t/logstash-docker-image-locations-and-size-differences/76035 "2017-02-28T00:06:27Z")
Hello there, @pmoust pointed out in a recent post of me (https://discuss.elastic.co/t/cant-connect-to-elastic-cloud-from-logstash-docker-image-logstash/75517/4) that the official Logstash Docker Images from Elastic are… --- ## [When is one shard enough](https://discuss.elastic.co/t/when-is-one-shard-enough/14840)
**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\ **Replies:** 5\ **Last updated:** [December 14, 2013, 4:03pm UTC](https://discuss.elastic.co/t/when-is-one-shard-enough/14840 "2013-12-14T16:03:26Z")
I maintain search indexes for a bunch of wikis (hundreds), many of which are small (hundreds of documents), some of which are pretty big (a few million documents). I've noticed that having five shards per index for th… --- ## [ElasticSearch Java Client with Spring doesn't stop](https://discuss.elastic.co/t/elasticsearch-java-client-with-spring-doesnt-stop/8071)
**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\ **Replies:** 5\ **Last updated:** [June 14, 2012, 10:08pm UTC](https://discuss.elastic.co/t/elasticsearch-java-client-with-spring-doesnt-stop/8071 "2012-06-14T22:08:11Z")
Hello, I'm using Spring Bean to initialize ES TransportClient: see the code here: https://gist.github.com/2922102 I just @Autowire EsClientProvider and everything works fine, except when application stops, I still … --- ## [RequestOptions cannot be resolved to a variable](https://discuss.elastic.co/t/requestoptions-cannot-be-resolved-to-a-variable/143681)
**Author:** [@agrawal](https://discuss.elastic.co/u/agrawal)\ **Replies:** 1\ **Last updated:** [August 17, 2018, 11:21am UTC](https://discuss.elastic.co/t/requestoptions-cannot-be-resolved-to-a-variable/143681 "2018-08-17T11:21:54Z")
I am trying to search the data in ES using RestHighLevelClient and referring the documentation available at (https://www.elastic.co/guide/en/elasticsearch/client/java-rest/master/java-rest-high-search.html) but getting a… --- ## [Does word order matter in my query?](https://discuss.elastic.co/t/does-word-order-matter-in-my-query/143947)
**Author:** [@pemfir](https://discuss.elastic.co/u/pemfir)\ **Replies:** 1\ **Last updated:** [August 12, 2018, 9:40am UTC](https://discuss.elastic.co/t/does-word-order-matter-in-my-query/143947 "2018-08-12T09:40:15Z")
I am trying to put together a query. field1 is a big text field. I am looking for key words in there. order of keywords do not matter. I would like to know if the query below achieves that. Thank you ! query\_template = … --- ## [TIMESTAMP\_ISO8601 in date not working](https://discuss.elastic.co/t/timestamp-iso8601-in-date-not-working/136923)
**Author:** [@punit\_j](https://discuss.elastic.co/u/punit_j)\ **Replies:** 1\ **Last updated:** [June 21, 2018, 5:57pm UTC](https://discuss.elastic.co/t/timestamp-iso8601-in-date-not-working/136923 "2018-06-21T17:57:37Z")
I have a date as below: 2018-06-21 13:25:09-04:00 my logstash filter for date is as below: date { match =\> \[ "DeviceDate", "TIMESTAMP\_ISO8601"\] target =\> "@timestamp" } however i get below error on : Cannot creat… --- ## [How to get large strings in elasticsearch and kibana](https://discuss.elastic.co/t/how-to-get-large-strings-in-elasticsearch-and-kibana/120842)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 1\ **Last updated:** [February 21, 2018, 1:11pm UTC](https://discuss.elastic.co/t/how-to-get-large-strings-in-elasticsearch-and-kibana/120842 "2018-02-21T13:11:29Z")
Hi, I am pushing large string values in elasticsearch. But it is not showing in kibana. I have query to update mapping. But it is showing resource\_already\_exists exception. I want to update mapping for large strings wi… --- ## [Ignore geo points having lat & lon 0 from graph](https://discuss.elastic.co/t/ignore-geo-points-having-lat-lon-0-from-graph/79976)
**Author:** [@btom](https://discuss.elastic.co/u/btom)\ **Replies:** 1\ **Last updated:** [March 25, 2017, 7:30am UTC](https://discuss.elastic.co/t/ignore-geo-points-having-lat-lon-0-from-graph/79976 "2017-03-25T07:30:33Z")
Hi, I have few records in DB having latitude and longitude value 0. I am storing them as a geo points in elastic search. "location": { "lat": 0, "lon": 0 } Could I filter to ignore records having lat = 0… --- ## [Two indexes, one on encrypted fs, one on regular fs](https://discuss.elastic.co/t/two-indexes-one-on-encrypted-fs-one-on-regular-fs/213708)
**Author:** [@justroll](https://discuss.elastic.co/u/justroll)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 1:33pm UTC](https://discuss.elastic.co/t/two-indexes-one-on-encrypted-fs-one-on-regular-fs/213708 "2020-01-03T13:33:59Z")
I'm tring to setup elastisearch for two different purposes, keeping general data that doesn't need encryption, and user sensitive data that needs to be stored in encrypted filesystem. Can you please confirm/correct my c… --- ## [Vega: Condition based on drop down value](https://discuss.elastic.co/t/vega-condition-based-on-drop-down-value/261513)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 4\ **Last updated:** [January 22, 2021, 6:35am UTC](https://discuss.elastic.co/t/vega-condition-based-on-drop-down-value/261513 "2021-01-22T06:35:01Z")
Hello everyone The graph both x-axis and y-axis value must change automatically when a value is selected from dropdown. I have a grouped bar chart displaying count of incidents logged on x-axis grouped by year, month o… --- ## [Elasticsearch Hot-Warn-Cold on a single node!](https://discuss.elastic.co/t/elasticsearch-hot-warn-cold-on-a-single-node/237650)
**Author:** [@Julius](https://discuss.elastic.co/u/Julius)\ **Replies:** 4\ **Last updated:** [June 20, 2020, 3:30am UTC](https://discuss.elastic.co/t/elasticsearch-hot-warn-cold-on-a-single-node/237650 "2020-06-20T03:30:09Z")
is there a way to archive old data on elasticsearch and automatically move it to cheaper storage while keeping access to this data from the kibana interface ? Our architecture has a single node that run, logstash, elast… --- ## [Topbeats and Physical volume](https://discuss.elastic.co/t/topbeats-and-physical-volume/51731)
**Author:** [@daguero](https://discuss.elastic.co/u/daguero)\ **Replies:** 4\ **Last updated:** [June 13, 2016, 9:44pm UTC](https://discuss.elastic.co/t/topbeats-and-physical-volume/51731 "2016-06-13T21:44:08Z")
I have ELK with: 1. Elasticsearch 2.1 2. Logstash 2.3 3. Kibana 4.3 I have too a virtual machine with topbeats1.2.3 and many disk partitions. This agent is setting to send only Filesystem information (filesystem: true)… --- ## [Topbeat doesn't work in unix machine](https://discuss.elastic.co/t/topbeat-doesnt-work-in-unix-machine/33507)
**Author:** [@mdaoor](https://discuss.elastic.co/u/mdaoor)\ **Replies:** 4\ **Last updated:** [November 6, 2015, 5:25am UTC](https://discuss.elastic.co/t/topbeat-doesnt-work-in-unix-machine/33507 "2015-11-06T05:25:34Z")
i've a linux machine that has elasticsearch and kibana installed on it ,and unix machine that has topbeat installed on it , i tried to run the topbeat but with no luck -bash: ./topbeat: Invalid argument i tried all… --- ## [Log file to json](https://discuss.elastic.co/t/log-file-to-json/150526)
**Author:** [@erkant](https://discuss.elastic.co/u/erkant)\ **Replies:** 3\ **Last updated:** [October 2, 2018, 10:16am UTC](https://discuss.elastic.co/t/log-file-to-json/150526 "2018-10-02T10:16:58Z")
Hi, I installed elasticsearch-6.4.1, kibana-6.4.1, logstash-6.4.1 and filebeat.6-4.1 filebeat.yml #=========================== Filebeat inputs ============================= filebeat.inputs: # Each - is an input. Most… --- ## [Use the same query return different hits total](https://discuss.elastic.co/t/use-the-same-query-return-different-hits-total/128330)
**Author:** [@Aleishus](https://discuss.elastic.co/u/Aleishus)\ **Replies:** 3\ **Last updated:** [April 19, 2018, 7:49am UTC](https://discuss.elastic.co/t/use-the-same-query-return-different-hits-total/128330 "2018-04-19T07:49:23Z")
Hi： I use a very simple query to search a index which is last day and has no documents income. but I got a different hits total , I don't know why? The query: GET app-wechat-2018.04.16/\_search?preference=\_primary {… --- ## [How to add a ruby code inside of the logstash config file?](https://discuss.elastic.co/t/how-to-add-a-ruby-code-inside-of-the-logstash-config-file/124965)
**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\ **Replies:** 3\ **Last updated:** [March 22, 2018, 11:24am UTC](https://discuss.elastic.co/t/how-to-add-a-ruby-code-inside-of-the-logstash-config-file/124965 "2018-03-22T11:24:03Z")
I try to send logs to windows event by using logstash. After added some ruby code;it is created below error.How can I send logs to windows event? input { file { type =\> "json" path =\> \["C:/Temp/logs/\*.json"\] start\_p… --- ## [Query\_string in Java API 5.4](https://discuss.elastic.co/t/query-string-in-java-api-5-4/120456)
**Author:** [@Hrachya\_Yeghishyan](https://discuss.elastic.co/u/Hrachya_Yeghishyan)\ **Replies:** 3\ **Last updated:** [February 19, 2018, 3:11pm UTC](https://discuss.elastic.co/t/query-string-in-java-api-5-4/120456 "2018-02-19T15:11:04Z")
Is there an equivalent of the query\_string for the ES Java API 5.4, as it look like that queryString is unavailable in this version? Also there isn't anything descriptive about the queryStringQuery in the documentation … --- ## [Trouble with log in UCS-2 LE BOM encoding](https://discuss.elastic.co/t/trouble-with-log-in-ucs-2-le-bom-encoding/198487)
**Author:** [@\_finack](https://discuss.elastic.co/u/_finack)\ **Replies:** 2\ **Last updated:** [July 24, 2020, 7:12am UTC](https://discuss.elastic.co/t/trouble-with-log-in-ucs-2-le-bom-encoding/198487 "2020-07-24T07:12:28Z")
I'm new to filebeat. I have a log file in UCS-2 LE BOM encoding. Log entries are each their own valid JSON object, one per line. Filebeat does not seem to like the UCS-2 LE BOM encoding. I'm seeing the following in the … --- ## [I can not create index pattern](https://discuss.elastic.co/t/i-can-not-create-index-pattern/160415)
**Author:** [@Alberto\_Allegue](https://discuss.elastic.co/u/Alberto_Allegue)\ **Replies:** 2\ **Last updated:** [December 12, 2018, 8:07am UTC](https://discuss.elastic.co/t/i-can-not-create-index-pattern/160415 "2018-12-12T08:07:45Z")
Since I have updated Kibana to 6.5.2 when I go to Management-\> Kibana -\> Index Pattern Kibana doesn't show the create index option and any index already created as you can see on the screenshot Watching logs on my brow… --- ## [Kibana data-table visualization not displaying all data rows](https://discuss.elastic.co/t/kibana-data-table-visualization-not-displaying-all-data-rows/337861)
**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\ **Replies:** 6\ **Last updated:** [July 14, 2023, 5:25am UTC](https://discuss.elastic.co/t/kibana-data-table-visualization-not-displaying-all-data-rows/337861 "2023-07-14T05:25:18Z")
I’m trying to create a Data Table visualization and I have below issue. My buckets selections as follows. In discover page, i can able to view the data , each fields value and its rows without any problem. But in v… --- ## [What is the correct way to specify mappings for "geo point" data type to index geo information documents in an elasticsearch index?](https://discuss.elastic.co/t/what-is-the-correct-way-to-specify-mappings-for-geo-point-data-type-to-index-geo-information-documents-in-an-elasticsearch-index/268200)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 6\ **Last updated:** [March 25, 2021, 8:08am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-specify-mappings-for-geo-point-data-type-to-index-geo-information-documents-in-an-elasticsearch-index/268200 "2021-03-25T08:08:52Z")
I have configured a logstash pipeline in which I have used filter "logstash-filter-geoip" for getting geo information about the IP Address.I have specified mapping before indexing documents into elasticsearch but it is s… --- ## [Delete Documents From Large Index based on Timestamp](https://discuss.elastic.co/t/delete-documents-from-large-index-based-on-timestamp/223814)
**Author:** [@Oleksandr.Tedikov](https://discuss.elastic.co/u/Oleksandr.Tedikov)\ **Replies:** 6\ **Last updated:** [March 24, 2020, 7:49pm UTC](https://discuss.elastic.co/t/delete-documents-from-large-index-based-on-timestamp/223814 "2020-03-24T19:49:07Z")
Hello, Elastic Cluster Ram, Disk Size 500GB, 3 Master Nodes and 3 Data/Ingest Nodes(1 VCPU, 4GB) Currently I have Index which is ~200 GB in 1 Shard for 3 month of usage. I would like to delete data for 2 months and le… --- ## [Is there a chance to reset the settings screen of infrastructure?](https://discuss.elastic.co/t/is-there-a-chance-to-reset-the-settings-screen-of-infrastructure/217206)
**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\ **Replies:** 6\ **Last updated:** [February 5, 2020, 10:56pm UTC](https://discuss.elastic.co/t/is-there-a-chance-to-reset-the-settings-screen-of-infrastructure/217206 "2020-02-05T22:56:50Z")
I used ./metricbeat setup to import the template of metricbeat. However the screen of the settings is blank so I cant select the event.dataset.keyword field over event.dataset field to remove this message. What would yo… --- ## [Extracting particular folder from the path and adding that to a field](https://discuss.elastic.co/t/extracting-particular-folder-from-the-path-and-adding-that-to-a-field/142277)
**Author:** [@whoiscnu](https://discuss.elastic.co/u/whoiscnu)\ **Replies:** 6\ **Last updated:** [August 3, 2018, 11:49am UTC](https://discuss.elastic.co/t/extracting-particular-folder-from-the-path-and-adding-that-to-a-field/142277 "2018-08-03T11:49:07Z")
Hi Guys, I need help to fetch particular folder from the path and assign the same to a different field. path ==\> /var/mqm/qmgrs/FOLDER\_NEEDED/errors/\*.log. I need to extract FOLDER\_NEEDED and assign it to a field for … --- ## [Alert that responds to result of webhook](https://discuss.elastic.co/t/alert-that-responds-to-result-of-webhook/174810)
**Author:** [@nielsoncr](https://discuss.elastic.co/u/nielsoncr)\ **Replies:** 8\ **Last updated:** [April 4, 2019, 9:05pm UTC](https://discuss.elastic.co/t/alert-that-responds-to-result-of-webhook/174810 "2019-04-04T21:05:59Z")
I would like to be able to write an alert (watch) that executes a webhook on a schedule like every hour and sends a notification email if error http statuses occur. Is this supported, or do I have to have one watch to r… --- ## [Restore the kibana visualizations and Dashboards with old index](https://discuss.elastic.co/t/restore-the-kibana-visualizations-and-dashboards-with-old-index/163459)
**Author:** [@rajesnal](https://discuss.elastic.co/u/rajesnal)\ **Replies:** 1\ **Last updated:** [January 9, 2019, 4:43pm UTC](https://discuss.elastic.co/t/restore-the-kibana-visualizations-and-dashboards-with-old-index/163459 "2019-01-09T16:43:18Z")
Dear Team, After the kibana upgrade from 6.2.4 to 6.5.1, the previous visualizations, and dashboards are missing. Is there any way to restore back the old visualizations and dashboards. --- ## [Dynamic mappings for particular fields](https://discuss.elastic.co/t/dynamic-mappings-for-particular-fields/49048)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 7\ **Last updated:** [June 17, 2016, 8:21am UTC](https://discuss.elastic.co/t/dynamic-mappings-for-particular-fields/49048 "2016-06-17T08:21:33Z")
I'm using default mappings in ES that will set default type as "string" for message fields. But I need to set the type as "long" for particular dynamic fields. In properties section of mapping file, I can insert manua… --- ## [Set connect\_timeout of elasticsearch php client](https://discuss.elastic.co/t/set-connect-timeout-of-elasticsearch-php-client/19441)
**Author:** [@Niv\_Penso](https://discuss.elastic.co/u/Niv_Penso)\ **Replies:** 1\ **Last updated:** [August 27, 2014, 8:51am UTC](https://discuss.elastic.co/t/set-connect-timeout-of-elasticsearch-php-client/19441 "2014-08-27T08:51:40Z")
Hey, i want to configure a a small timeout between my elasticsearch php client to the my elasticsearch server. i tried to pass some parameters to the guzzle client but it seems this doesn't work. here is the code: $… --- ## [Facing issue while starting multiple instance of logstash](https://discuss.elastic.co/t/facing-issue-while-starting-multiple-instance-of-logstash/100491)
**Author:** [@sukeerthi\_bj](https://discuss.elastic.co/u/sukeerthi_bj)\ **Replies:** 5\ **Last updated:** [September 14, 2017, 12:30pm UTC](https://discuss.elastic.co/t/facing-issue-while-starting-multiple-instance-of-logstash/100491 "2017-09-14T12:30:28Z")
Hi, I created a separate folder for new instance of logstash as mentioned in below link but getting logstash status as failed systemctl status logstash-suk.service ● logstash-suk.service - logstash-suk Loaded: loa… --- ## [Problem grok pattern](https://discuss.elastic.co/t/problem-grok-pattern/82200)
**Author:** [@Vittorio](https://discuss.elastic.co/u/Vittorio)\ **Replies:** 5\ **Last updated:** [April 14, 2017, 9:29am UTC](https://discuss.elastic.co/t/problem-grok-pattern/82200 "2017-04-14T09:29:28Z")
Hi all, I'm issuing a problem while using filter grok. For instance, i'm trying to parse nginx logs using this pattern: NGUSERNAME \[a-zA-Z\\.\\@\\-\\+\_%\]+ NGUSER %{NGUSERNAME} NGINXACCESS %{IPORHOST:clientip} %{NGUSER:id… --- ## [Simulate elasticsearch client](https://discuss.elastic.co/t/simulate-elasticsearch-client/80975)
**Author:** [@usund](https://discuss.elastic.co/u/usund)\ **Replies:** 5\ **Last updated:** [April 4, 2017, 7:38am UTC](https://discuss.elastic.co/t/simulate-elasticsearch-client/80975 "2017-04-04T07:38:26Z")
Hi, Is it possible to simulate an elasticsearch client for testing without having an instance of elasticsearch running --- ## [Strange indicies](https://discuss.elastic.co/t/strange-indicies/26774)
**Author:** [@it2](https://discuss.elastic.co/u/it2)\ **Replies:** 5\ **Last updated:** [August 5, 2015, 6:38am UTC](https://discuss.elastic.co/t/strange-indicies/26774 "2015-08-05T06:38:25Z")
Hello everyone! I have a ES cluster - 1master(with logstash) and 3 data nodes. Few days ago I noticed strange thing. In KOPF strange indicies began to appear: http://prntscr.com/80m51b I delete them, but next day they ba… --- ## [Unable to run python tests - No module named beat.beat](https://discuss.elastic.co/t/unable-to-run-python-tests-no-module-named-beat-beat/249949)
**Author:** [@ebanashka](https://discuss.elastic.co/u/ebanashka)\ **Replies:** 3\ **Last updated:** [September 26, 2020, 9:54am UTC](https://discuss.elastic.co/t/unable-to-run-python-tests-no-module-named-beat-beat/249949 "2020-09-26T09:54:51Z")
I am unable to run python tests for packetbeat or any other beats. Here's what I've done: in the packetbeat dir i ran make python-dev then navigated to the tests/system folder and ran nosetests -x -v. Getting the fol… --- ## [Java Agent doesn't generate any span/transaction using Spring Cloud Gateway](https://discuss.elastic.co/t/java-agent-doesnt-generate-any-span-transaction-using-spring-cloud-gateway/196120)
**Author:** [@delphi](https://discuss.elastic.co/u/delphi)\ **Replies:** 3\ **Last updated:** [August 22, 2019, 2:48pm UTC](https://discuss.elastic.co/t/java-agent-doesnt-generate-any-span-transaction-using-spring-cloud-gateway/196120 "2019-08-22T14:48:46Z")
Hi. I'm getting an issue related with APM Java Agent. My application is a Spring Webflux (Spring Cloud Gateway) and run over Netty framework. Although I can't see any error in debug logs (either in agent or server logs)… --- ## [How to setup Elasticsearch to force single shard per node for new indices?](https://discuss.elastic.co/t/how-to-setup-elasticsearch-to-force-single-shard-per-node-for-new-indices/125254)
**Author:** [@Aleksey\_Chudov](https://discuss.elastic.co/u/Aleksey_Chudov)\ **Replies:** 3\ **Last updated:** [March 26, 2018, 6:38am UTC](https://discuss.elastic.co/t/how-to-setup-elasticsearch-to-force-single-shard-per-node-for-new-indices/125254 "2018-03-26T06:38:02Z")
Hi, I'm responsible for managing Elasticsearch 2.4 cluster for Graylog Log Management system. The cluster consists of 13 nodes located in 3 data centers: Data center A: nodeA1 (master) Data center B: nodeB1 (master, d… --- ## [Grok match handel special characters, \_grokparsefailure](https://discuss.elastic.co/t/grok-match-handel-special-characters--grokparsefailure/55417)
**Author:** [@govereem](https://discuss.elastic.co/u/govereem)\ **Replies:** 3\ **Last updated:** [May 31, 2017, 12:14pm UTC](https://discuss.elastic.co/t/grok-match-handel-special-characters--grokparsefailure/55417 "2017-05-31T12:14:11Z")
I'm using this grok code grok { # check that fields match your IIS log settings match =\> \["message", "%{TIMESTAMP\_ISO8601:log\_timestamp} %{IPORHOST:site} %{WORD:method} %{URIPATH:page} %{NOTSPACE:querystring}… --- ## [Some packets are not getting captured on heavy load](https://discuss.elastic.co/t/some-packets-are-not-getting-captured-on-heavy-load/52448)
**Author:** [@harshafrnd4u](https://discuss.elastic.co/u/harshafrnd4u)\ **Replies:** 3\ **Last updated:** [June 13, 2016, 5:20pm UTC](https://discuss.elastic.co/t/some-packets-are-not-getting-captured-on-heavy-load/52448 "2016-06-13T17:20:45Z")
I am load testing packetbeat with 2 nginx servers at load of 2000 requests per second per server. And I see that only half were getting captured. When I tried with logging I can see these plenty of similar warning logs … --- ## [Adding .raw fields to existing data](https://discuss.elastic.co/t/adding-raw-fields-to-existing-data/47568)
**Author:** [@tsegal](https://discuss.elastic.co/u/tsegal)\ **Replies:** 3\ **Last updated:** [April 16, 2016, 8:34pm UTC](https://discuss.elastic.co/t/adding-raw-fields-to-existing-data/47568 "2016-04-16T20:34:45Z")
Hi all, I created a cluster where I host my logs. I have around 8 index patterns and ~40 million documents currently. I noticed that my fields are being analyzed and broken down (so foo-bar is broken down to "foo" and … --- ## [Elastic search PHP: wait for bulk indexation to finish](https://discuss.elastic.co/t/elastic-search-php-wait-for-bulk-indexation-to-finish/126394)
**Author:** [@mike.active](https://discuss.elastic.co/u/mike.active)\ **Replies:** 4\ **Last updated:** [April 2, 2018, 9:49am UTC](https://discuss.elastic.co/t/elastic-search-php-wait-for-bulk-indexation-to-finish/126394 "2018-04-02T09:49:08Z")
Hello! My question is very simple yet I can't find an answer for it: Situation: I am creating search feature for a small online store that uses elastic search PHP library. I am using client-\>bulk() operation to index… --- ## [Cassandra monitoring by ELK](https://discuss.elastic.co/t/cassandra-monitoring-by-elk/22169)
**Author:** [@kamal\_bisht](https://discuss.elastic.co/u/kamal_bisht)\ **Replies:** 1\ **Last updated:** [February 16, 2015, 7:31am UTC](https://discuss.elastic.co/t/cassandra-monitoring-by-elk/22169 "2015-02-16T07:31:30Z")
Hi I developed and contributing in "Cassandra cluster monitoring by using ELK", If anyone wants to use that or wants to contributing then this is the Github link https://github.com/kmluvce/cassandra-monitoring-by… [Previous page](https://discuss.elastic.co/top.md?page=966&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=968&per_page=50&period=all)