# Top **URL:** https://discuss.elastic.co/top.md?page=987&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 988 --- ## [Filebeat doesn't resume transmission to logstash after connection interruption](https://discuss.elastic.co/t/filebeat-doesnt-resume-transmission-to-logstash-after-connection-interruption/45087)
**Author:** [@Qtax](https://discuss.elastic.co/u/Qtax)\ **Replies:** 3\ **Last updated:** [March 22, 2016, 12:17pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-resume-transmission-to-logstash-after-connection-interruption/45087 "2016-03-22T12:17:34Z")
Reporting this here since https://github.com/elastic/beats/issues/new told me to. We have filebeat running on several (Ubuntu) servers and transmitting logs to logstash on another server (also Ubuntu) (logstash sends… --- ## [Logstash to Re-index Elasticsearch indexes](https://discuss.elastic.co/t/logstash-to-re-index-elasticsearch-indexes/26365)
**Author:** [@inderjeet26](https://discuss.elastic.co/u/inderjeet26)\ **Replies:** 3\ **Last updated:** [July 28, 2015, 6:59pm UTC](https://discuss.elastic.co/t/logstash-to-re-index-elasticsearch-indexes/26365 "2015-07-28T18:59:27Z")
I am trying to re-index all the results in my elasticsearch by using Logstash Elasticsearch input and then some filter and then Logstash Elasticsearch Output plugins. For this I created a logstash-elastic.conf file. If… --- ## [CheckPoint logs error with filebeat](https://discuss.elastic.co/t/checkpoint-logs-error-with-filebeat/239024)
**Author:** [@julianksanchez](https://discuss.elastic.co/u/julianksanchez)\ **Replies:** 0\ **Last updated:** [June 28, 2020, 3:58pm UTC](https://discuss.elastic.co/t/checkpoint-logs-error-with-filebeat/239024 "2020-06-28T15:58:40Z")
Hello, I am trying to obtain firewall logs from syslog. I configurate checkpoint module of filebeat. I dont know if anyone did yet, because I have problems I can see the logs of filebeat and I see it message in var/lo/s… --- ## [APM transaction for Postgres only showing Begin and Commit statements, why I can't I see the statements in between?](https://discuss.elastic.co/t/apm-transaction-for-postgres-only-showing-begin-and-commit-statements-why-i-cant-i-see-the-statements-in-between/239201)
**Author:** [@bcollins](https://discuss.elastic.co/u/bcollins)\ **Replies:** 6\ **Last updated:** [July 7, 2020, 1:51pm UTC](https://discuss.elastic.co/t/apm-transaction-for-postgres-only-showing-begin-and-commit-statements-why-i-cant-i-see-the-statements-in-between/239201 "2020-07-07T13:51:55Z")
All of my transactions that include sql queries are only showing the begin and commit messages.... Is it supposed to display the actual commands that were executed in between? --- ## [Logstash Alter filter not found](https://discuss.elastic.co/t/logstash-alter-filter-not-found/125278)
**Author:** [@motts](https://discuss.elastic.co/u/motts)\ **Replies:** 6\ **Last updated:** [May 15, 2018, 5:59pm UTC](https://discuss.elastic.co/t/logstash-alter-filter-not-found/125278 "2018-05-15T17:59:20Z")
Hello, I am on CentOS 6.9 and running LS 6.x. I have the Alter filter plugin installed, but when running LS, there is an error and LS will not start: \[2018-03-22T18:41:50,722\]\[ERROR\]\[logstash.agent \] Failed … --- ## [Interested to contribute to Packetbeat protocols](https://discuss.elastic.co/t/interested-to-contribute-to-packetbeat-protocols/121336)
**Author:** [@montem](https://discuss.elastic.co/u/montem)\ **Replies:** 6\ **Last updated:** [February 27, 2018, 4:52pm UTC](https://discuss.elastic.co/t/interested-to-contribute-to-packetbeat-protocols/121336 "2018-02-27T16:52:50Z")
Hi I am Manthan Sharma, final year undergrad from LNMIIT, Jaipur and currently working at SOROCO, India as Site Reliability Engineer. I have a good experience of Go, and knowledge of network and communication protocol. … --- ## [Help with visualizations, multiple indexes, and a common field](https://discuss.elastic.co/t/help-with-visualizations-multiple-indexes-and-a-common-field/340753)
**Author:** [@icsy7867](https://discuss.elastic.co/u/icsy7867)\ **Replies:** 6\ **Last updated:** [August 14, 2023, 5:58pm UTC](https://discuss.elastic.co/t/help-with-visualizations-multiple-indexes-and-a-common-field/340753 "2023-08-14T17:58:58Z")
I am having some confusion on how to properly do this. Most of my "database" experience comes from relational databases. So my mind immediately goes to inner/outer joins, which I know is not applicable here. I have re… --- ## [Elasticsearch Engineer I Exception](https://discuss.elastic.co/t/elasticsearch-engineer-i-exception/236391)
**Author:** [@lhayden](https://discuss.elastic.co/u/lhayden)\ **Replies:** 7\ **Last updated:** [June 10, 2020, 9:01pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-i-exception/236391 "2020-06-10T21:01:43Z")
I'm currently working through the Elastic Engineer I (On-Demand) course and I am stuck on Lab 1.4 In trying to setup Logstash ./logstash-7.3.1/bin/logstash -f datasets/blogs\_sql.conf I get the following as output: \[2… --- ## [Filebeat to Kafka SSL (with jks)](https://discuss.elastic.co/t/filebeat-to-kafka-ssl-with-jks/213595)
**Author:** [@nisham](https://discuss.elastic.co/u/nisham)\ **Replies:** 1\ **Last updated:** [January 16, 2020, 6:57pm UTC](https://discuss.elastic.co/t/filebeat-to-kafka-ssl-with-jks/213595 "2020-01-16T18:57:10Z")
Hello, I have setup a Kafka server with SSL enabled using the jks file. I'm able to read and write from the Kafka topic using Logstash by providing the JKS files in the logstash config file. I need to write data from F… --- ## [Stream List Output Formatting in Script (for use in Watcher actions)](https://discuss.elastic.co/t/stream-list-output-formatting-in-script-for-use-in-watcher-actions/100587)
**Author:** [@damunk](https://discuss.elastic.co/u/damunk)\ **Replies:** 1\ **Last updated:** [September 15, 2017, 2:10pm UTC](https://discuss.elastic.co/t/stream-list-output-formatting-in-script-for-use-in-watcher-actions/100587 "2017-09-15T14:10:08Z")
I've been trying to develop a script that can be used for a number different watcher tasks. I came across this this post and it was quite helpful in showing me how to map the output of two aggregations. However, I don't … --- ## [Multiple geo\_points per document](https://discuss.elastic.co/t/multiple-geo-points-per-document/7154)
**Author:** [@tommyvn](https://discuss.elastic.co/u/tommyvn)\ **Replies:** 7\ **Last updated:** [September 7, 2012, 10:17pm UTC](https://discuss.elastic.co/t/multiple-geo-points-per-document/7154 "2012-09-07T22:17:26Z")
Hi all My geo\_distance sort is not returning things in the order I'd expect. Am I doing something silly? I have the following mapping: $ curl -XGET 'http://localhost:9200/work/offices/\_mapping?pretty=true' { … --- ## [Access denied error on keystore when using ECK](https://discuss.elastic.co/t/access-denied-error-on-keystore-when-using-eck/276297)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 10:03am UTC](https://discuss.elastic.co/t/access-denied-error-on-keystore-when-using-eck/276297 "2021-06-22T10:03:30Z")
We have orchestrated an elastic instance using ECK. The pods fail to start with this error Exception in thread "main" java.nio.file.AccessDeniedException: /usr/share/elasticsearch/config/elasticsearch.keystore at java… --- ## [How to send multiple headers in Logstash http output plugin?](https://discuss.elastic.co/t/how-to-send-multiple-headers-in-logstash-http-output-plugin/258318)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [December 10, 2020, 6:45pm UTC](https://discuss.elastic.co/t/how-to-send-multiple-headers-in-logstash-http-output-plugin/258318 "2020-12-10T18:45:07Z")
Hi, I am using Logstash 7.8.0. I am trying to send some message to an http endpoint using POST. I would like to add 3 header parameters and I would like to know how to do that. Its mentioned in the docs that its a hash h… --- ## [How to group space-separated parts of a message into one field in Grok?](https://discuss.elastic.co/t/how-to-group-space-separated-parts-of-a-message-into-one-field-in-grok/77181)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 2\ **Last updated:** [March 7, 2017, 6:24am UTC](https://discuss.elastic.co/t/how-to-group-space-separated-parts-of-a-message-into-one-field-in-grok/77181 "2017-03-07T06:24:58Z")
I have this log message 2017-03-02 15:52:08,455 INFO :RMI TCP Connection(80920)-10.53.123.123 \[c om.company.app\] Hello world I want to group the "RMI TCP onnection(80920)-10.53.123.123" into one field, called my… --- ## [An ECS compliant Kibana index pattern must be configured to view event data on the map](https://discuss.elastic.co/t/an-ecs-compliant-kibana-index-pattern-must-be-configured-to-view-event-data-on-the-map/209969)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 2:02pm UTC](https://discuss.elastic.co/t/an-ecs-compliant-kibana-index-pattern-must-be-configured-to-view-event-data-on-the-map/209969 "2019-12-05T14:02:14Z")
Hi all, I am using Filebeat module cisco to get logs. I am not storing this logs in an index called filebeat-\* but cisco-\*. To get the correct mapping for this pattern, I exported the filebeat template and imported it f… --- ## [Elasticsearch.js \_ search API error body is not defined](https://discuss.elastic.co/t/elasticsearch-js-search-api-error-body-is-not-defined/167147)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 4\ **Last updated:** [February 11, 2019, 5:45am UTC](https://discuss.elastic.co/t/elasticsearch-js-search-api-error-body-is-not-defined/167147 "2019-02-11T05:45:28Z")
Hello Team, I am have created a custom plugin and i am trying to call elasticsearch \_ search API using elasticsearch.js I have created custom route server.route({ path: '/api/HelloWorld/search\_test', method: '… --- ## [Mapping timestamp field from catalina logs to elasticsearch](https://discuss.elastic.co/t/mapping-timestamp-field-from-catalina-logs-to-elasticsearch/45770)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 4\ **Last updated:** [April 1, 2016, 11:15am UTC](https://discuss.elastic.co/t/mapping-timestamp-field-from-catalina-logs-to-elasticsearch/45770 "2016-04-01T11:15:45Z")
My Catalina logs contains timestamp in this format:- Mar 23, 2016 11:33:14 AM org.apache.catalina.core.AprLifecycleListener init My goal is to create Date Histogram using timestamp field in kibana. Since timestamp fiel… --- ## [Exclude one filter per facet](https://discuss.elastic.co/t/exclude-one-filter-per-facet/8761)
**Author:** [@Fermin\_Silva](https://discuss.elastic.co/u/Fermin_Silva)\ **Replies:** 4\ **Last updated:** [July 24, 2014, 9:45pm UTC](https://discuss.elastic.co/t/exclude-one-filter-per-facet/8761 "2014-07-24T21:45:06Z")
Hi everyone, my first message here! In my company we are considering to migrate from SOLR to ES, so I'm looking if all business criteria can be met with ES without to much of a hassle. So far I have everything pret… --- ## [Distinct collect first letters from field](https://discuss.elastic.co/t/distinct-collect-first-letters-from-field/105521)
**Author:** [@Alexey\_Melnikov](https://discuss.elastic.co/u/Alexey_Melnikov)\ **Replies:** 3\ **Last updated:** [October 29, 2017, 1:04pm UTC](https://discuss.elastic.co/t/distinct-collect-first-letters-from-field/105521 "2017-10-29T13:04:56Z")
Good day. I want to create navigation in index by first letters like in vocabulary. Ideally I need aggregation which will provide to me a set of all first letters from one field with first document id related to each l… --- ## [Cannot Read Elasticsearch date type with format basic\_date\_time in Spark](https://discuss.elastic.co/t/cannot-read-elasticsearch-date-type-with-format-basic-date-time-in-spark/23604)
**Author:** [@Nicolas\_Phung](https://discuss.elastic.co/u/Nicolas_Phung)\ **Replies:** 3\ **Last updated:** [June 1, 2015, 9:36pm UTC](https://discuss.elastic.co/t/cannot-read-elasticsearch-date-type-with-format-basic-date-time-in-spark/23604 "2015-06-01T21:36:08Z")
Hello, I'm trying to build a RDD from ElasticSearch data with elasticsearch-spark 2.1.0.Beta4. I have the following field mapping : "date": {"type": "date","format": "basic\_date\_time"}, But when I'm trying … --- ## [Count of user who visited 3 days in a row](https://discuss.elastic.co/t/count-of-user-who-visited-3-days-in-a-row/37026)
**Author:** [@vjyanand](https://discuss.elastic.co/u/vjyanand)\ **Replies:** 5\ **Last updated:** [December 16, 2015, 12:17pm UTC](https://discuss.elastic.co/t/count-of-user-who-visited-3-days-in-a-row/37026 "2015-12-16T12:17:41Z")
I have elasticsearch documents like {"user":"a","timestamp":1449807786150}. Would like to query users who have timestamp for 3 consecutive days. --- ## [Docker & Elasticsearch using Unicast](https://discuss.elastic.co/t/docker-elasticsearch-using-unicast/18611)
**Author:** [@Tony\_P](https://discuss.elastic.co/u/Tony_P)\ **Replies:** 5\ **Last updated:** [July 14, 2014, 4:14pm UTC](https://discuss.elastic.co/t/docker-elasticsearch-using-unicast/18611 "2014-07-14T16:14:22Z")
I've been playing with Elasticsearch and had a working cluster in a multicast environment using VMs. I recently tried adapting that to work within Docker and I'm running into a wall with the unicast configuration. … --- ## [Elastic-agent fails "enroll\_cmd.go:776 Fleet Server - Error - EOF"](https://discuss.elastic.co/t/elastic-agent-fails-enroll-cmd-go-776-fleet-server-error-eof/293779)
**Author:** [@stevebanik](https://discuss.elastic.co/u/stevebanik)\ **Replies:** 1\ **Last updated:** [January 20, 2022, 5:09pm UTC](https://discuss.elastic.co/t/elastic-agent-fails-enroll-cmd-go-776-fleet-server-error-eof/293779 "2022-01-20T17:09:34Z")
\[root@es1 elastic-agent-7.16.2-linux-x86\_64\]# uname -a Linux es1 3.10.0-1160.49.1.el7.x86\_64 #1 SMP Tue Nov 30 15:51:32 UTC 2021 x86\_64 x86\_64 x86\_64 GNU/Linux \[root@es1 elastic-agent-7.16.2-linux-x86\_64\]# ./elastic-ag… --- ## [Install kopf plugin](https://discuss.elastic.co/t/install-kopf-plugin/19898)
**Author:** [@kishore\_kumar](https://discuss.elastic.co/u/kishore_kumar)\ **Replies:** 1\ **Last updated:** [September 21, 2014, 8:24pm UTC](https://discuss.elastic.co/t/install-kopf-plugin/19898 "2014-09-21T20:24:55Z")
Hi Experts, No Internet connection on my centos 7 laptop logstash and elasticsearch services running fine. I am downloaded the kopf zip file from https://github.com/lmenezes/elasticsearch-kopf and extracted to… --- ## [S3 API Costs are extraordinary expensive for snapshots](https://discuss.elastic.co/t/s3-api-costs-are-extraordinary-expensive-for-snapshots/329071)
**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\ **Replies:** 3\ **Last updated:** [March 31, 2023, 7:04pm UTC](https://discuss.elastic.co/t/s3-api-costs-are-extraordinary-expensive-for-snapshots/329071 "2023-03-31T19:04:45Z")
To store 5TB of data, we are paying about $1,200 in storage fees per month and $10,000 in API calls Is there a way to fix this? During a snapshot we are seeing upwards of 120k s3 api calls/minute SLM: PUT \_slm/policy/… --- ## [Kibana import visualization fails - 7.8 to 7.7](https://discuss.elastic.co/t/kibana-import-visualization-fails-7-8-to-7-7/240806)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [July 13, 2020, 2:55pm UTC](https://discuss.elastic.co/t/kibana-import-visualization-fails-7-8-to-7-7/240806 "2020-07-13T14:55:33Z")
is there a bug. I am trying to export import via UI from kibana output is from 7.8 and import is gone a happen to 7.7. it fails with error the "file could not be processed" and when I try same exact ndjson file impo… --- ## [Installing Plugin](https://discuss.elastic.co/t/installing-plugin/152513)
**Author:** [@Vahid\_Mouasvi](https://discuss.elastic.co/u/Vahid_Mouasvi)\ **Replies:** 6\ **Last updated:** [October 16, 2018, 12:43pm UTC](https://discuss.elastic.co/t/installing-plugin/152513 "2018-10-16T12:43:39Z")
Hi ! I have a problem with installing my own costume plugin! I've entered the command: .\\elasticsearch-plugin install --batch file:\\\\\\address-to-my-plugin-zip-file and I've got below error: A tool for managing instal… --- ## [Logstash Debugging](https://discuss.elastic.co/t/logstash-debugging/95400)
**Author:** [@jfarrin1](https://discuss.elastic.co/u/jfarrin1)\ **Replies:** 6\ **Last updated:** [August 4, 2017, 6:01pm UTC](https://discuss.elastic.co/t/logstash-debugging/95400 "2017-08-04T18:01:03Z")
Hello, I was wondering if anyone had a good way to debug with logstash. Currently, I am using the stdout with rubydebug. In my error file it shows an error name but won’t give me any specific information, which makes th… --- ## [TypeError: settings is not a function](https://discuss.elastic.co/t/typeerror-settings-is-not-a-function/202650)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [October 9, 2019, 6:05am UTC](https://discuss.elastic.co/t/typeerror-settings-is-not-a-function/202650 "2019-10-09T06:05:30Z")
Wonder what may cause this when attempting to launch kibana 6.8.3 after patching up from kibana 5.6 { "type": "log", "@timestamp": "2019-10-08T10:35:57Z", "tags": \[ "fatal", "root" \], "pid": 17519, "… --- ## [Erroneous number of documents in the index cannot exceed 2147483519 message?](https://discuss.elastic.co/t/erroneous-number-of-documents-in-the-index-cannot-exceed-2147483519-message/196167)
**Author:** [@Todd\_Sayers](https://discuss.elastic.co/u/Todd_Sayers)\ **Replies:** 2\ **Last updated:** [August 21, 2019, 7:00pm UTC](https://discuss.elastic.co/t/erroneous-number-of-documents-in-the-index-cannot-exceed-2147483519-message/196167 "2019-08-21T19:00:30Z")
I cannot start one of my Elasticsearch nodes. It says, "number of documents in the index cannot exceed 2147483519." However, using the "\_cat/count" API call, I'm not able to find any indices that have two billion documen… --- ## [MongoDB Packetbeat frequent crashing - syslog shows frequent errors](https://discuss.elastic.co/t/mongodb-packetbeat-frequent-crashing-syslog-shows-frequent-errors/42796)
**Author:** [@kdawg14](https://discuss.elastic.co/u/kdawg14)\ **Replies:** 2\ **Last updated:** [February 26, 2016, 5:59pm UTC](https://discuss.elastic.co/t/mongodb-packetbeat-frequent-crashing-syslog-shows-frequent-errors/42796 "2016-02-26T17:59:32Z")
Potentially related to Slice bounds out of range? I have Packetbeat 1.1.1 running on Ubuntu 14.04 sniffing traffic on a MongoDB 3.2.1 node. I'm quite impressed with the results that I'm getting, but it's also crashing … --- ## [Exec commands via usage of child\_process](https://discuss.elastic.co/t/exec-commands-via-usage-of-child-process/29280)
**Author:** [@vande](https://discuss.elastic.co/u/vande)\ **Replies:** 2\ **Last updated:** [September 14, 2015, 9:37pm UTC](https://discuss.elastic.co/t/exec-commands-via-usage-of-child-process/29280 "2015-09-14T21:37:28Z")
Hi, this might be a kind of strange problem to be solved, but I'm trying to execute a shell-script on my kibana-host-server out of the kibana interface. To approach this for example and to make it simple, lets say ever… --- ## [Fortinet Logs Integration](https://discuss.elastic.co/t/fortinet-logs-integration/303788)
**Author:** [@jumpie](https://discuss.elastic.co/u/jumpie)\ **Replies:** 8\ **Last updated:** [May 3, 2022, 6:27pm UTC](https://discuss.elastic.co/t/fortinet-logs-integration/303788 "2022-05-03T18:27:15Z")
Hello, I've installed the Fortinet Logs Integration and configured the Fortigate to send syslogs for 9004. I was able to test that the Fortigate is sending logs but nothing shows up in Elastic. Is there something I am m… --- ## [\[No handler for type \[geo\_shape\] declared on field \[mapped\_geo\_shape\]\] AbstractQueryTestCase](https://discuss.elastic.co/t/no-handler-for-type-geo-shape-declared-on-field-mapped-geo-shape-abstractquerytestcase/156851)
**Author:** [@vgindin](https://discuss.elastic.co/u/vgindin)\ **Replies:** 8\ **Last updated:** [December 4, 2018, 3:02pm UTC](https://discuss.elastic.co/t/no-handler-for-type-geo-shape-declared-on-field-mapped-geo-shape-abstractquerytestcase/156851 "2018-12-04T15:02:56Z")
I have a plugin with a custom query and QueryBuilder. I've written the test extending it from org.elasticsearch.test.AbstractQueryTestCase. When I'm running it I got the following error: Caused by: MapperParsingExceptio… --- ## [Effect on cluster of very high load on master node](https://discuss.elastic.co/t/effect-on-cluster-of-very-high-load-on-master-node/37118)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 2\ **Last updated:** [December 17, 2015, 2:57pm UTC](https://discuss.elastic.co/t/effect-on-cluster-of-very-high-load-on-master-node/37118 "2015-12-17T14:57:39Z")
I'm wondering what is the effect on a cluster if the master node has very high load (eg - 10-20). The node isn't down, but is slow - what effect will this have on the cluster? This is assuming it's not a data node. --- ## [In ES \>=6.0, is sparsity for doc\_values & norms still bad?](https://discuss.elastic.co/t/in-es-6-0-is-sparsity-for-doc-values-norms-still-bad/132946)
**Author:** [@janzankowski](https://discuss.elastic.co/u/janzankowski)\ **Replies:** 4\ **Last updated:** [May 24, 2018, 8:37am UTC](https://discuss.elastic.co/t/in-es-6-0-is-sparsity-for-doc-values-norms-still-bad/132946 "2018-05-24T08:37:37Z")
Hello, ES 6.0 and up uses Lucene 7, where doc values and norms have switched from random access API to iterator API. What this means, as I understand it, is that if a document does not have a given field that other docs… --- ## [Current running tasks keep increasing on Master node](https://discuss.elastic.co/t/current-running-tasks-keep-increasing-on-master-node/92504)
**Author:** [@Ganesh\_Ravi](https://discuss.elastic.co/u/Ganesh_Ravi)\ **Replies:** 4\ **Last updated:** [July 13, 2017, 5:27pm UTC](https://discuss.elastic.co/t/current-running-tasks-keep-increasing-on-master-node/92504 "2017-07-13T17:27:42Z")
Elasticsearch version is 2.3.3. The cluster only contains one data node and 3 client nodes In 3.5 hours after starting up Elasticsearch service, the task count when using the url format http://localhost:9200/\_tasks?nodes… --- ## [Missing bin/kibana-plugin on 5.4.0 k8s cluster install](https://discuss.elastic.co/t/missing-bin-kibana-plugin-on-5-4-0-k8s-cluster-install/86875)
**Author:** [@misalarie](https://discuss.elastic.co/u/misalarie)\ **Replies:** 4\ **Last updated:** [May 24, 2017, 12:14am UTC](https://discuss.elastic.co/t/missing-bin-kibana-plugin-on-5-4-0-k8s-cluster-install/86875 "2017-05-24T00:14:22Z")
Hello! I just installed Kibana and Elasticsearch 5.4.0 on a kubernetes cluster, and while I was able to install x-pack on the elasticsearch pods just fine, the kibana-plugin seems to be missing on the kibana pod. I'm … --- ## [How to check and fix Logstash performance](https://discuss.elastic.co/t/how-to-check-and-fix-logstash-performance/53495)
**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\ **Replies:** 4\ **Last updated:** [January 18, 2017, 6:31am UTC](https://discuss.elastic.co/t/how-to-check-and-fix-logstash-performance/53495 "2017-01-18T06:31:34Z")
Hi All, I am having several servers (windows) running filebeat to get log files and send events to the Logstash. Logstash and Elasticsearch runs on the same Linux machine. I have developed a monitor scheduled script … --- ## [Licencia expirada en Marvel](https://discuss.elastic.co/t/licencia-expirada-en-marvel/57854)
**Author:** [@dpincheira](https://discuss.elastic.co/u/dpincheira)\ **Replies:** 4\ **Last updated:** [August 11, 2016, 8:34pm UTC](https://discuss.elastic.co/t/licencia-expirada-en-marvel/57854 "2016-08-11T20:34:39Z")
Buen día, Qusiera plantearles el siguiente problema: Cuando trato de actualizar mi licencia de Marvel, esta no recibe mis comandos curl. Siguiendo las intrucciones desde la documentación obtuve lo siguiente: curl -XP… --- ## [Move index to data warm manually](https://discuss.elastic.co/t/move-index-to-data-warm-manually/337885)
**Author:** [@UP\_NEWS](https://discuss.elastic.co/u/UP_NEWS)\ **Replies:** 7\ **Last updated:** [July 7, 2023, 2:53pm UTC](https://discuss.elastic.co/t/move-index-to-data-warm-manually/337885 "2023-07-07T14:53:06Z")
Hi, i can move a index from data hot to datawarm manullay with command rsync in linux from /var/lib/elasticsearch/nodes/uid(index) if the api ilm/\_move cant' work ? Thanks --- ## [Use elasticsearch index rollover policy with logstash](https://discuss.elastic.co/t/use-elasticsearch-index-rollover-policy-with-logstash/250504)
**Author:** [@Mohamed\_Saeed](https://discuss.elastic.co/u/Mohamed_Saeed)\ **Replies:** 1\ **Last updated:** [October 4, 2020, 1:13pm UTC](https://discuss.elastic.co/t/use-elasticsearch-index-rollover-policy-with-logstash/250504 "2020-10-04T13:13:01Z")
I'm using elasticsearch and logstash version 7.3.0 I'm using logstash to output all logs to elasticsearch. Now I'm trying to use the rollover policy to delete indexes older than 3 days. I defined policy in elasticsearc… --- ## [How to calculate timestamp difference using Kibana scripted field feature?](https://discuss.elastic.co/t/how-to-calculate-timestamp-difference-using-kibana-scripted-field-feature/248133)
**Author:** [@Rahul\_Chougule](https://discuss.elastic.co/u/Rahul_Chougule)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 9:09am UTC](https://discuss.elastic.co/t/how-to-calculate-timestamp-difference-using-kibana-scripted-field-feature/248133 "2020-09-10T09:09:06Z")
I have two date fields in my Elasticsearch index: 1. Submit\_Date & 2. Completed\_Date. I want to add new field which will be diff between Completed\_Date and Submit\_Date... but if Completed\_Date is empty I want the diff … --- ## [How to parse a TimeSpan value which displays the difference between to timestamps](https://discuss.elastic.co/t/how-to-parse-a-timespan-value-which-displays-the-difference-between-to-timestamps/246502)
**Author:** [@pheathers](https://discuss.elastic.co/u/pheathers)\ **Replies:** 7\ **Last updated:** [August 27, 2020, 5:29pm UTC](https://discuss.elastic.co/t/how-to-parse-a-timespan-value-which-displays-the-difference-between-to-timestamps/246502 "2020-08-27T17:29:45Z")
I'm trying to parse through a timespan value (hh:mm:ss:SSSSSS). Here is the message ... \`2020-08-05 13:28:53.128 +03:00 \[DBG\] {"Timestamp":"2020-08-05T13:28:53.1286882+03:00","Profile":"db","ProcessID":26688,"SessionId… --- ## [PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, {, ,, \] at line 4, column 36 (byte 99)](https://discuss.elastic.co/t/pipelineaction-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-at-line-4-column-36-byte-99/159312)
**Author:** [@lungelo\_zondo](https://discuss.elastic.co/u/lungelo_zondo)\ **Replies:** 7\ **Last updated:** [December 4, 2018, 2:26pm UTC](https://discuss.elastic.co/t/pipelineaction-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-at-line-4-column-36-byte-99/159312 "2018-12-04T14:26:21Z")
Hi, Can anyone please help with this issue, I am running CMD : :\\Users\\zondol\\logstash-6.5.1\\bin\>logstash -f /Users/zondol/data/logstash.config And below is my config file. input { file { path =\> "C:\\Users\\zondol\\da… --- ## [Scoring range queries by range size](https://discuss.elastic.co/t/scoring-range-queries-by-range-size/157592)
**Author:** [@monk](https://discuss.elastic.co/u/monk)\ **Replies:** 7\ **Last updated:** [December 3, 2018, 10:13pm UTC](https://discuss.elastic.co/t/scoring-range-queries-by-range-size/157592 "2018-12-03T22:13:24Z")
I have a field with type ip\_range. When I query for an IP address, I'd like to have the results returned in the order of most precise range to least. Is there a simple way to accomplish this? Perhaps I overlooked somethi… --- ## [Logstash throwing \_globbed\_files error while reading a file](https://discuss.elastic.co/t/logstash-throwing--globbed-files-error-while-reading-a-file/99470)
**Author:** [@rajesh](https://discuss.elastic.co/u/rajesh)\ **Replies:** 7\ **Last updated:** [September 11, 2017, 6:02am UTC](https://discuss.elastic.co/t/logstash-throwing--globbed-files-error-while-reading-a-file/99470 "2017-09-11T06:02:43Z")
Hi, I am trying to parse file in a directory(Linux) under /opt/\*. I am giving the exact file name and it’s throwing an error \_globbed\_files: /opt/my\_file\_2017-07-21\_03-10-46\_agg\_19303.out: glob is: \["/opt/my\_file\_2017-… --- ## [Elasticsearch in vert.x](https://discuss.elastic.co/t/elasticsearch-in-vert-x/15194)
**Author:** [@Ryan\_Chazen](https://discuss.elastic.co/u/Ryan_Chazen)\ **Replies:** 1\ **Last updated:** [January 10, 2014, 10:45pm UTC](https://discuss.elastic.co/t/elasticsearch-in-vert-x/15194 "2014-01-10T22:45:43Z")
Hey I was trying to use the elasticsearch java api directly in vert.x (async framework) However I ran into an issue - vert.x wants to manage it's own threads and sets up runloops etc inside them. The async callbac… --- ## [Keycloak with ELK stack](https://discuss.elastic.co/t/keycloak-with-elk-stack/299311)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 3\ **Last updated:** [March 11, 2022, 6:23am UTC](https://discuss.elastic.co/t/keycloak-with-elk-stack/299311 "2022-03-11T06:23:17Z")
I'm trying to use Keycloak to login into kibana dashboard. Can anyone help me on this as some of the solutions I found on the forum were not working out for me. --- ## [Elasticsearch Cluster Ingest Node Sizing](https://discuss.elastic.co/t/elasticsearch-cluster-ingest-node-sizing/298971)
**Author:** [@chateesh](https://discuss.elastic.co/u/chateesh)\ **Replies:** 3\ **Last updated:** [March 9, 2022, 6:55am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-ingest-node-sizing/298971 "2022-03-09T06:55:23Z")
Hi Team, We're planning to add a new Ingest node to running ES cluster, this node is dedicated only for data ingestion. How to do capacity planning for ingest node, does this memory optimized or CPU optimized, to ingest… [Previous page](https://discuss.elastic.co/top.md?page=986&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=988&per_page=50&period=all)