# Top **URL:** https://discuss.elastic.co/top.md?page=983&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 984 --- ## [Logstash Grok - duplicate entries after parsing](https://discuss.elastic.co/t/logstash-grok-duplicate-entries-after-parsing/120563)
**Author:** [@ranganath\_nangineni](https://discuss.elastic.co/u/ranganath_nangineni)\ **Replies:** 3\ **Last updated:** [February 20, 2018, 10:36am UTC](https://discuss.elastic.co/t/logstash-grok-duplicate-entries-after-parsing/120563 "2018-02-20T10:36:26Z")
I have a peculiar situation where , the grok match parsing is putting duplicate entries after parsing. I have tried break\_on\_match =\> true ( with true -\> it is not able to parse the required fields), on false, it is put… --- ## [Io/console not supported when starting logstash 2.3.2 on Win 10](https://discuss.elastic.co/t/io-console-not-supported-when-starting-logstash-2-3-2-on-win-10/50382)
**Author:** [@bhawanaus](https://discuss.elastic.co/u/bhawanaus)\ **Replies:** 3\ **Last updated:** [May 20, 2016, 5:32am UTC](https://discuss.elastic.co/t/io-console-not-supported-when-starting-logstash-2-3-2-on-win-10/50382 "2016-05-20T05:32:50Z")
C:\\Users\\bhagupta\\elk\_poc\\logstash-2.3.2\\logstash-2.3.2\\bin\>logstash -f logstash.conf io/console not supported; tty will not be manipulated Settings: Default pipeline workers: 4 Note : After this nothing get displayed… --- ## [SQL indexes with dashes fail with high level java client (escaped with quotes)](https://discuss.elastic.co/t/sql-indexes-with-dashes-fail-with-high-level-java-client-escaped-with-quotes/287108)
**Author:** [@larryjag99](https://discuss.elastic.co/u/larryjag99)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 6:21pm UTC](https://discuss.elastic.co/t/sql-indexes-with-dashes-fail-with-high-level-java-client-escaped-with-quotes/287108 "2021-10-21T18:21:29Z")
I am using the high-level java client to submit SQL requests to our elastic cluster. I'm seeing an issue where if the index name has a "dash" in it (while enclosed in quotes), the request cannot be parsed by the server.… --- ## [Can not convert from long to float logstash](https://discuss.elastic.co/t/can-not-convert-from-long-to-float-logstash/168577)
**Author:** [@KashiPashoria\_Tonny](https://discuss.elastic.co/u/KashiPashoria_Tonny)\ **Replies:** 2\ **Last updated:** [February 18, 2019, 12:23pm UTC](https://discuss.elastic.co/t/can-not-convert-from-long-to-float-logstash/168577 "2019-02-18T12:23:28Z")
I'm taking data from sql server to elasticsearch 6.6 using logstash and jdbc. Some of my records are skipped by logstash printing these warning logs: \[2019-02-15T16:48:52,630\]\[WARN \]\[logstash.outputs.elasticsearch\] Coul… --- ## [Add field to the message in logstash](https://discuss.elastic.co/t/add-field-to-the-message-in-logstash/49443)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 2\ **Last updated:** [May 9, 2016, 9:32pm UTC](https://discuss.elastic.co/t/add-field-to-the-message-in-logstash/49443 "2016-05-09T21:32:48Z")
Hello, I have the following config: input { udp { host =\> "0.0.0.0" port =\> 5544 type =\> "f5-logs" } udp { host =\> "0.0.0.0" port =\> 514 type =\> "firewall-lo… --- ## [StringIndexOutOfBoundsException: String index out of range: -1](https://discuss.elastic.co/t/stringindexoutofboundsexception-string-index-out-of-range-1/13488)
**Author:** [@subin](https://discuss.elastic.co/u/subin)\ **Replies:** 2\ **Last updated:** [September 24, 2013, 5:56pm UTC](https://discuss.elastic.co/t/stringindexoutofboundsexception-string-index-out-of-range-1/13488 "2013-09-24T17:56:20Z")
I run ES v 0.90.0. I'm facing 'StringIndexOutOfBoundsException: String index out of range: -1 ' only when sending log from a particular server through logstash to ES. Below is a sample log from that server: 06-… --- ## [Expected one of #](https://discuss.elastic.co/t/expected-one-of/81114)
**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\ **Replies:** 7\ **Last updated:** [April 4, 2017, 10:17am UTC](https://discuss.elastic.co/t/expected-one-of/81114 "2017-04-04T10:17:49Z")
Am using conditionals for output my config looks as below output{ if\[type\] == "access\_log" { elasticsearch{ hosts =\> \["10.190.188.174:9200"\] index =\> "logstash-%{+YYYY.MM.dd}" } } else if \[type\] == "BPM" { elasticsear… --- ## [JSON and syslog in LogStash — how to handle them both?](https://discuss.elastic.co/t/json-and-syslog-in-logstash-how-to-handle-them-both/52172)
**Author:** [@jojo](https://discuss.elastic.co/u/jojo)\ **Replies:** 1\ **Last updated:** [June 8, 2016, 6:32pm UTC](https://discuss.elastic.co/t/json-and-syslog-in-logstash-how-to-handle-them-both/52172 "2016-06-08T18:32:17Z")
I send 2 different types of data to Logstash from filebeat: json and syslog. Previously it was only json and it worked fine but now I've added syslog also. I want to display them both in Kibana in separate dashboards… --- ## [ElasticSearch Config - Issues SSHing into default linux machine](https://discuss.elastic.co/t/elasticsearch-config-issues-sshing-into-default-linux-machine/182804)
**Author:** [@jasonmull](https://discuss.elastic.co/u/jasonmull)\ **Replies:** 4\ **Last updated:** [May 27, 2019, 10:24am UTC](https://discuss.elastic.co/t/elasticsearch-config-issues-sshing-into-default-linux-machine/182804 "2019-05-27T10:24:16Z")
I've recently installed Docker on Windows 10 Enterprise in order to run an Elasticsearch environment. Going through the documentation here, I'm instructed to run docker-machine ssh and sudo sysctl -w vm.max\_map\_count=26… --- ## [Lag in filebeat tailing the logs from local disk and send to Kafka](https://discuss.elastic.co/t/lag-in-filebeat-tailing-the-logs-from-local-disk-and-send-to-kafka/182723)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 6\ **Last updated:** [May 30, 2019, 8:51pm UTC](https://discuss.elastic.co/t/lag-in-filebeat-tailing-the-logs-from-local-disk-and-send-to-kafka/182723 "2019-05-30T20:51:23Z")
filebeat timestamp in the log message is 2019-05-24T17:16:10.063Z; Log timestamp is: I0524 16:32:40.761113. therefore, it takes filebeat more than 30 mins to tail a production C++ logs and send them to kafka, I looke… --- ## [What does object datatype mapping with value parameter mean?](https://discuss.elastic.co/t/what-does-object-datatype-mapping-with-value-parameter-mean/156580)
**Author:** [@Jun\_Zhang](https://discuss.elastic.co/u/Jun_Zhang)\ **Replies:** 6\ **Last updated:** [November 14, 2018, 1:45pm UTC](https://discuss.elastic.co/t/what-does-object-datatype-mapping-with-value-parameter-mean/156580 "2018-11-14T13:45:46Z")
I found following settings in my index mapping, it was created by metricbeat. what does value prarameter mean? "prophet": { "properties": { "4paradigm": { "pro… --- ## [Help! Problem output using jdbc input](https://discuss.elastic.co/t/help-problem-output-using-jdbc-input/92221)
**Author:** [@nano](https://discuss.elastic.co/u/nano)\ **Replies:** 6\ **Last updated:** [July 11, 2017, 6:29pm UTC](https://discuss.elastic.co/t/help-problem-output-using-jdbc-input/92221 "2017-07-11T18:29:52Z")
Hello! i'm using jdbc input to access my first Mysql data, my schedule is around 30 minutes, after that i'm using jdbc streaming to upload an other database , then i use simple output to see my data as stdout ruby , the… --- ## [Error when using VersionType.EXTERNAL\_GTE in 1.1.0](https://discuss.elastic.co/t/error-when-using-versiontype-external-gte-in-1-1-0/16721)
**Author:** [@Amit\_Soni](https://discuss.elastic.co/u/Amit_Soni)\ **Replies:** 6\ **Last updated:** [April 4, 2014, 5:07am UTC](https://discuss.elastic.co/t/error-when-using-versiontype-external-gte-in-1-1-0/16721 "2014-04-04T05:07:03Z")
Hello team - I just switched over to 1.1.0 and changed from VersionType.EXTERNAL to VersionType.EXTERNAL\_GTE. Ever since then, we are seeing the error below. Any comments? I looked at ES code and see this newly a… --- ## [Grok regex don't match](https://discuss.elastic.co/t/grok-regex-dont-match/170188)
**Author:** [@elastic\_trg](https://discuss.elastic.co/u/elastic_trg)\ **Replies:** 8\ **Last updated:** [March 4, 2019, 12:07pm UTC](https://discuss.elastic.co/t/grok-regex-dont-match/170188 "2019-03-04T12:07:30Z")
Hi everybody, I'm asking for your help because I can not perform a correct parsing of one of my log. Indeed my original log include regex pattern and I would to delete them. I made a regex whish working fine on https://… --- ## [Filebeat not sending to logstash](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash/60743)
**Author:** [@overip](https://discuss.elastic.co/u/overip)\ **Replies:** 3\ **Last updated:** [September 19, 2016, 7:33am UTC](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash/60743 "2016-09-19T07:33:06Z")
Hello everybody. I am a total newbie. I am having problem sending logs to Logstash from Filebeat. Actually I don't see anything coming out the port 5044 with sudo tcpdump port 5044 and '(tcp-syn|tcp-ack)!=0' Here is th… --- ## [Which pattern to choose for Stack trace](https://discuss.elastic.co/t/which-pattern-to-choose-for-stack-trace/54377)
**Author:** [@JohnnyS](https://discuss.elastic.co/u/JohnnyS)\ **Replies:** 3\ **Last updated:** [June 30, 2016, 1:10pm UTC](https://discuss.elastic.co/t/which-pattern-to-choose-for-stack-trace/54377 "2016-06-30T13:10:30Z")
Hi Can somebody please assist me a bit to know which pattern I should use for the following stack trace: \ \2016/06/30 00:00:02\\ERROR\\\\Thread-429878\ **Author:** [@extesy](https://discuss.elastic.co/u/extesy)\ **Replies:** 3\ **Last updated:** [September 2, 2015, 5:56pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-doesnt-work-with-nested-type-fields/28476 "2015-09-02T17:56:06Z") Somehow I can't make elasticsearch aggregation+filter to work with nested fields. The data schema (relevant part) is like this: "mappings": { "rb": { "properties": { "project": { "type": "nested", … --- ## [Blog feed size very large, feed reader does not update](https://discuss.elastic.co/t/blog-feed-size-very-large-feed-reader-does-not-update/79012)
**Author:** [@choppa](https://discuss.elastic.co/u/choppa)\ **Replies:** 2\ **Last updated:** [April 10, 2017, 6:27pm UTC](https://discuss.elastic.co/t/blog-feed-size-very-large-feed-reader-does-not-update/79012 "2017-04-10T18:27:49Z")
Hi! My RSS feed reader (GreatNews on Windows) throws an error about the blog feed size of https://www.elastic.co/blog/feed being larger than 1000k. Looking into the feed I see very old "news" still in there. Could th… --- ## [Read logs from another server and ship to logstash using filebeat](https://discuss.elastic.co/t/read-logs-from-another-server-and-ship-to-logstash-using-filebeat/75327)
**Author:** [@paya](https://discuss.elastic.co/u/paya)\ **Replies:** 2\ **Last updated:** [March 8, 2017, 4:05pm UTC](https://discuss.elastic.co/t/read-logs-from-another-server-and-ship-to-logstash-using-filebeat/75327 "2017-03-08T16:05:58Z")
Hi all, I am setting up a an independent machine to run all ELK services together, but I have to read the log files from other servers, in specific they are all haproxy. so my question is: is it possible to setup and… --- ## [Defining a mapping for join datatype](https://discuss.elastic.co/t/defining-a-mapping-for-join-datatype/113429)
**Author:** [@oguz](https://discuss.elastic.co/u/oguz)\ **Replies:** 1\ **Last updated:** [December 28, 2017, 12:14pm UTC](https://discuss.elastic.co/t/defining-a-mapping-for-join-datatype/113429 "2017-12-28T12:14:42Z")
Hi All, i couldn't figure out how to define a join datatype relationship following the documentation on join datatype Mapping: curl -XPUT localhost:9200/bookings -H 'Content-Type: application/json' -d ' { "mapping… --- ## [Why does ES need Java 14 to build?](https://discuss.elastic.co/t/why-does-es-need-java-14-to-build/232915)
**Author:** [@Niels\_Basjes](https://discuss.elastic.co/u/Niels_Basjes)\ **Replies:** 5\ **Last updated:** [May 17, 2020, 10:25am UTC](https://discuss.elastic.co/t/why-does-es-need-java-14-to-build/232915 "2020-05-17T10:25:21Z")
Hi, I want to create a custom processing plugin for ES and I ran into the problem that apparently building anything for ES 7.7.0 requires Java 14 ( see https://github.com/elastic/elasticsearch/pull/54696 ). Yet the htt… --- ## [Check the top\_hits aggregation results to see if every top hit has a field with a specific value](https://discuss.elastic.co/t/check-the-top-hits-aggregation-results-to-see-if-every-top-hit-has-a-field-with-a-specific-value/197904)
**Author:** [@awatkins](https://discuss.elastic.co/u/awatkins)\ **Replies:** 5\ **Last updated:** [September 10, 2019, 5:49pm UTC](https://discuss.elastic.co/t/check-the-top-hits-aggregation-results-to-see-if-every-top-hit-has-a-field-with-a-specific-value/197904 "2019-09-10T17:49:11Z")
I am trying to accomplish what seems like it should be super easy and obviously possible but hitting a hard brick wall instead. aggregate all elastic documents in a specific index from the last 60 days into buckets by… --- ## [Can the java client join a DB transaction?](https://discuss.elastic.co/t/can-the-java-client-join-a-db-transaction/147668)
**Author:** [@douxf](https://discuss.elastic.co/u/douxf)\ **Replies:** 5\ **Last updated:** [September 7, 2018, 12:40pm UTC](https://discuss.elastic.co/t/can-the-java-client-join-a-db-transaction/147668 "2018-09-07T12:40:04Z")
I have searched the issues list but found nothing about my scenario. I use ES as a nosql db, so the data must be strictly same as data in relational database. i use java client and tcp mode to submit the data ES server, … --- ## [Kibana 7.0.1 does not work on IPv6](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-on-ipv6/207937)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 4\ **Last updated:** [December 14, 2019, 3:07pm UTC](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-on-ipv6/207937 "2019-12-14T15:07:47Z")
Hi, I am using kibana-oss (version - 7.0.1) in kubernetes environment with IPv6 environment. My kibana.yaml looks like this: server.name: kibana server.host: "\[::0\]" server.port: 5601 elasticsearch.hosts: "http://elas… --- ## [Delete\_by\_query vs index journalier](https://discuss.elastic.co/t/delete-by-query-vs-index-journalier/207931)
**Author:** [@vdsm](https://discuss.elastic.co/u/vdsm)\ **Replies:** 4\ **Last updated:** [November 18, 2019, 3:29pm UTC](https://discuss.elastic.co/t/delete-by-query-vs-index-journalier/207931 "2019-11-18T15:29:33Z")
Bonjour à tous, Je rencontre des soucis sur mon serveur ELK, et j'ai éventuellement plusieurs pistes pour y remédier mais aucune n'aboutit car j'ai toujours des contraintes que je ne peux pas gérer. En fait, tout part … --- ## [Access Kibana config value from scripted field?](https://discuss.elastic.co/t/access-kibana-config-value-from-scripted-field/122393)
**Author:** [@dcode](https://discuss.elastic.co/u/dcode)\ **Replies:** 4\ **Last updated:** [March 8, 2018, 12:03am UTC](https://discuss.elastic.co/t/access-kibana-config-value-from-scripted-field/122393 "2018-03-08T00:03:20Z")
I'm interested in programmatically creating a scripted field using Painless. Namely, I want to create a string type that is formatted as a URL. I can create the field without problem. I can also push the Kibana configura… --- ## [I lose all my data when master node restarts](https://discuss.elastic.co/t/i-lose-all-my-data-when-master-node-restarts/334410)
**Author:** [@daniela09](https://discuss.elastic.co/u/daniela09)\ **Replies:** 7\ **Last updated:** [May 26, 2023, 12:54pm UTC](https://discuss.elastic.co/t/i-lose-all-my-data-when-master-node-restarts/334410 "2023-05-26T12:54:45Z")
Hi, I have EKF stack on Kubernetes, now I have 1 client node, 1 master node and 3 data nodes. When my master node restarts I lose all the data and indices that I have and my master's UUID changes, so I need to restart a… --- ## [Discover page error in kibana](https://discuss.elastic.co/t/discover-page-error-in-kibana/252523)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 7\ **Last updated:** [October 21, 2020, 11:58am UTC](https://discuss.elastic.co/t/discover-page-error-in-kibana/252523 "2020-10-21T11:58:39Z")
Hi All, My kibana was working fine earlier and all of a sudden it started displaying internal error in the discover page and i'm not able to view any data in discover page, SearchError: Internal Server Error at htt… --- ## [How to make alarm dashboard on standard system log errors](https://discuss.elastic.co/t/how-to-make-alarm-dashboard-on-standard-system-log-errors/87679)
**Author:** [@rottis](https://discuss.elastic.co/u/rottis)\ **Replies:** 1\ **Last updated:** [June 6, 2017, 12:17pm UTC](https://discuss.elastic.co/t/how-to-make-alarm-dashboard-on-standard-system-log-errors/87679 "2017-06-06T12:17:03Z")
Hi. I am wondering if the following is possible using X-pack and kibana. I have a large amount of system logs coming into elasticsearch trough logstash from different stacks. I want to get the dashboard to display for … --- ## [NodeStats serialization error](https://discuss.elastic.co/t/nodestats-serialization-error/8819)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 7\ **Last updated:** [October 12, 2012, 1:57am UTC](https://discuss.elastic.co/t/nodestats-serialization-error/8819 "2012-10-12T01:57:06Z")
Recently setup a cluster using 0.19.2 and created two large indices. Upgraded to 0.19.8 (without reindexing) and now I am seeing the following errors over and over again: \[2012-08-22 11:46:39,087\]\[DEBUG\]\[action.admi… --- ## [Is possible to listen index changes?](https://discuss.elastic.co/t/is-possible-to-listen-index-changes/289988)
**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\ **Replies:** 2\ **Last updated:** [November 24, 2021, 1:25am UTC](https://discuss.elastic.co/t/is-possible-to-listen-index-changes/289988 "2021-11-24T01:25:31Z")
I need to 'listen' for changes on my index, at first I started by writing a script in nodejs which is executed every 5min. For now I think it works... But can I do it in realtime? When a new document is insert or update. … --- ## [Logstash can't read the environment variable](https://discuss.elastic.co/t/logstash-cant-read-the-environment-variable/286949)
**Author:** [@ramilbermejo](https://discuss.elastic.co/u/ramilbermejo)\ **Replies:** 2\ **Last updated:** [October 19, 2021, 4:58am UTC](https://discuss.elastic.co/t/logstash-cant-read-the-environment-variable/286949 "2021-10-19T04:58:42Z")
Good day everyone! Need some help here. On my dev environment, checking the logstash configuration will show this error. root@devlogstash:~# /usr/share/logstash/bin/logstash --path.settings /etc/logstash -t OpenJDK 64… --- ## [Plugin install on ubuntu fails](https://discuss.elastic.co/t/plugin-install-on-ubuntu-fails/69951)
**Author:** [@mcgrews3](https://discuss.elastic.co/u/mcgrews3)\ **Replies:** 2\ **Last updated:** [December 27, 2016, 3:16am UTC](https://discuss.elastic.co/t/plugin-install-on-ubuntu-fails/69951 "2016-12-27T03:16:13Z")
logstash version 5.1.1 I have gone through the documentation and installed logstash on ubuntu 14.04 twice - both times repeating the error. I have also reproduced the issue on my OS X mac-book-pro. It's also worth n… --- ## [Help with circle colors on elastic maps](https://discuss.elastic.co/t/help-with-circle-colors-on-elastic-maps/209077)
**Author:** [@richardchin](https://discuss.elastic.co/u/richardchin)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 10:39am UTC](https://discuss.elastic.co/t/help-with-circle-colors-on-elastic-maps/209077 "2019-11-26T10:39:10Z")
Hi - I am a newbie to elasticsearch and maps, so sorry if this is an obvious question but I cannot seem to find much info on detailed examples. This is my issue: I am trying to visualise the status of our HW units aroun… --- ## [Metricbeat not able to connect with x-pack enabled elastic](https://discuss.elastic.co/t/metricbeat-not-able-to-connect-with-x-pack-enabled-elastic/191753)
**Author:** [@abhishek13](https://discuss.elastic.co/u/abhishek13)\ **Replies:** 3\ **Last updated:** [July 25, 2019, 12:33pm UTC](https://discuss.elastic.co/t/metricbeat-not-able-to-connect-with-x-pack-enabled-elastic/191753 "2019-07-25T12:33:02Z")
Hi While connecting metricbeat with x-pack enabled elastic cluster , i am getting below error. 2019-07-23T12:45:21.103+0530 INFO instance/beat.go:292 Setup Beat: metricbeat; Version: 7.2.0 2019-07-23T12:45:21.103+0530 … --- ## [SSO for Embedding Dashboards](https://discuss.elastic.co/t/sso-for-embedding-dashboards/139396)
**Author:** [@brichmond](https://discuss.elastic.co/u/brichmond)\ **Replies:** 3\ **Last updated:** [July 13, 2018, 12:26pm UTC](https://discuss.elastic.co/t/sso-for-embedding-dashboards/139396 "2018-07-13T12:26:28Z")
I've been experimenting with embedding Kibana dashboards into our own applications and have run into a few issues. I will preface this by saying we are attempting to make use of the Elastic Cloud (on GCP, if it matters).… --- ## [Get sequence number of document](https://discuss.elastic.co/t/get-sequence-number-of-document/117843)
**Author:** [@agaengel](https://discuss.elastic.co/u/agaengel)\ **Replies:** 3\ **Last updated:** [February 1, 2018, 4:00pm UTC](https://discuss.elastic.co/t/get-sequence-number-of-document/117843 "2018-02-01T16:00:59Z")
When I add an document to elasticsearch 6.0.1 I get the \_seq\_no in the response. Is it possible the get the \_seq\_no via get document api or search request Thanks Alex --- ## [Curator with Shield: How to pass credentials securely?](https://discuss.elastic.co/t/curator-with-shield-how-to-pass-credentials-securely/52555)
**Author:** [@Dave\_G](https://discuss.elastic.co/u/Dave_G)\ **Replies:** 3\ **Last updated:** [June 13, 2016, 3:58pm UTC](https://discuss.elastic.co/t/curator-with-shield-how-to-pass-credentials-securely/52555 "2016-06-13T15:58:04Z")
I'm trying to run Curator 3.5 with Shield with SSL. I'm using the following options to curator: --certificate (pem-encoded CA) --client-cert (public key file) --client-key (private key file) --use\_ssl and then the usua… --- ## [Histogram and Sturges' formula](https://discuss.elastic.co/t/histogram-and-sturges-formula/14133)
**Author:** [@Justin\_MacCarthy](https://discuss.elastic.co/u/Justin_MacCarthy)\ **Replies:** 3\ **Last updated:** [October 28, 2013, 8:31pm UTC](https://discuss.elastic.co/t/histogram-and-sturges-formula/14133 "2013-10-28T20:31:33Z")
Hi, Has anyone figured out how to use Sturges (http://en.wikipedia.org/wiki/Histogram#cite\_note-sturges-9) or similar to set the number of bins in a histogram? Is it possible to use scripting to set that number … --- ## [Filebeat low performance with multiple input files](https://discuss.elastic.co/t/filebeat-low-performance-with-multiple-input-files/173933)
**Author:** [@Naxo](https://discuss.elastic.co/u/Naxo)\ **Replies:** 6\ **Last updated:** [April 8, 2019, 11:21am UTC](https://discuss.elastic.co/t/filebeat-low-performance-with-multiple-input-files/173933 "2019-04-08T11:21:48Z")
Hi everyone, I have tried several configurations in the filebeat service but I cannot see a good performance. When I use a single input file we can see a high network throutput and logstash and elasticsearch do a good d… --- ## [Is there a quicker way to import data to Elastic?](https://discuss.elastic.co/t/is-there-a-quicker-way-to-import-data-to-elastic/327275)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 5\ **Last updated:** [March 8, 2023, 3:49pm UTC](https://discuss.elastic.co/t/is-there-a-quicker-way-to-import-data-to-elastic/327275 "2023-03-08T15:49:54Z")
I have exported elastic indices using logstash with the following logstash configuration: - pipeline.id: export-process pipeline.workers: 4 config.string: | input { elasticsearch { … --- ## [Logstash configuration file error filtering](https://discuss.elastic.co/t/logstash-configuration-file-error-filtering/166338)
**Author:** [@althair34](https://discuss.elastic.co/u/althair34)\ **Replies:** 5\ **Last updated:** [January 30, 2019, 1:41pm UTC](https://discuss.elastic.co/t/logstash-configuration-file-error-filtering/166338 "2019-01-30T13:41:22Z")
Hello, I'm starting to use ELK and I'm attempting to start logstash with a custom logstash.conf file but I've an error : Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>… --- ## [Error during (re-)installation of x-pack](https://discuss.elastic.co/t/error-during-re-installation-of-x-pack/88710)
**Author:** [@srd](https://discuss.elastic.co/u/srd)\ **Replies:** 5\ **Last updated:** [June 9, 2017, 5:37pm UTC](https://discuss.elastic.co/t/error-during-re-installation-of-x-pack/88710 "2017-06-09T17:37:36Z")
I'm trying to update kibanas x-pack plugin from 5.3 to 5.4.1 running on archlinux. Kibana itself was installed via archlinux' kibana aur package. While removing the old x-pack plugin works, installing the new plugin ve… --- ## [How to stop logstash send data to mongo if data incorrect](https://discuss.elastic.co/t/how-to-stop-logstash-send-data-to-mongo-if-data-incorrect/32242)
**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\ **Replies:** 5\ **Last updated:** [October 19, 2015, 2:36am UTC](https://discuss.elastic.co/t/how-to-stop-logstash-send-data-to-mongo-if-data-incorrect/32242 "2015-10-19T02:36:09Z")
Hi All, It seems to a loop which cannot stop when logstash would like to write incorrect data to mongo, even I did 'service logstash restart', the logstash started and then start to try send the incorrect data My data … --- ## [Data tranformation](https://discuss.elastic.co/t/data-tranformation/28405)
**Author:** [@mathiasa](https://discuss.elastic.co/u/mathiasa)\ **Replies:** 5\ **Last updated:** [September 1, 2015, 12:36pm UTC](https://discuss.elastic.co/t/data-tranformation/28405 "2015-09-01T12:36:33Z")
Hi, What is the best way of doing data transformations in the ELK flow. I want for example transform seconds into minutes. Is there a way of doing that kind of calculations in Kibana? Don't think logstash is the right p… --- ## [Index problem .keyword](https://discuss.elastic.co/t/index-problem-keyword/308112)
**Author:** [@AnotherGuy](https://discuss.elastic.co/u/AnotherGuy)\ **Replies:** 8\ **Last updated:** [July 6, 2022, 12:32pm UTC](https://discuss.elastic.co/t/index-problem-keyword/308112 "2022-07-06T12:32:00Z")
Hi, I go a big problem today and i don't know how to resolve it. I work on ELK 7.17.1 on the same computer and with filebeat on another computer which sends me log in live with a docker. I import my template Dashboard… --- ## [Error: a container name must be specified for pod elk-monitoring-es-hot-0](https://discuss.elastic.co/t/error-a-container-name-must-be-specified-for-pod-elk-monitoring-es-hot-0/291038)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 4\ **Last updated:** [December 6, 2021, 1:13pm UTC](https://discuss.elastic.co/t/error-a-container-name-must-be-specified-for-pod-elk-monitoring-es-hot-0/291038 "2021-12-06T13:13:29Z")
Hi, On GCP Autopilot Cluster(v1.21.5) I have deployed via ECK(1.8) Elasticserach server using this config .yaml metadata: name: elk-monitoring namespace: xx spec: monitoring: metrics: elasticsearchRefs:… --- ## [Traefik integration](https://discuss.elastic.co/t/traefik-integration/203377)
**Author:** [@trajano](https://discuss.elastic.co/u/trajano)\ **Replies:** 4\ **Last updated:** [October 14, 2019, 5:11am UTC](https://discuss.elastic.co/t/traefik-integration/203377 "2019-10-14T05:11:05Z")
Traefik supports five tracing backends according to https://docs.traefik.io/observability/tracing/overview/ Jaeger Zipkin Datadog Instana Haystack I was wondering if there's a way of using any of those to integrate wi… --- ## [Rolling offset for date\_histogram aggregations](https://discuss.elastic.co/t/rolling-offset-for-date-histogram-aggregations/88154)
**Author:** [@ogtool](https://discuss.elastic.co/u/ogtool)\ **Replies:** 4\ **Last updated:** [June 9, 2017, 1:31am UTC](https://discuss.elastic.co/t/rolling-offset-for-date-histogram-aggregations/88154 "2017-06-09T01:31:46Z")
I'm working on a platform that monitors sensors attached to utility services (gas/water/power etc), tracks usage and warns on pre-set alarms and ES has been a huge help in doing this efficiently. One of the last issues h… --- ## [Couldn't Start Elastic Search on a Remote Machine Windows-32 Bit](https://discuss.elastic.co/t/couldnt-start-elastic-search-on-a-remote-machine-windows-32-bit/71022)
**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\ **Replies:** 4\ **Last updated:** [January 10, 2017, 10:35am UTC](https://discuss.elastic.co/t/couldnt-start-elastic-search-on-a-remote-machine-windows-32-bit/71022 "2017-01-10T10:35:54Z")
Hi- I wanted to host the Elastic Search on a Windows-7 machine which is installed with 32-bit. I could able to install the elastic search service, but when I start it, its throwing a error message. I've attached the sc… [Previous page](https://discuss.elastic.co/top.md?page=982&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=984&per_page=50&period=all)