# Top **URL:** https://discuss.elastic.co/top.md?page=991&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 992 --- ## [Drop Event Logs - By "Content"](https://discuss.elastic.co/t/drop-event-logs-by-content/192761)
**Author:** [@Hotdog453](https://discuss.elastic.co/u/Hotdog453)\ **Replies:** 4\ **Last updated:** [July 29, 2019, 11:08pm UTC](https://discuss.elastic.co/t/drop-event-logs-by-content/192761 "2019-07-29T23:08:47Z")
Hello! So, we're looking to forward windows Firewall logs via WinLogBeat, into LogStash, for review/security. My desire is, however, to 'drop' 'known blocks'; that is, for example, we're going to block TCP 137. This is e… --- ## [How to migrate indices from old .raw template to new .keyword mapping](https://discuss.elastic.co/t/how-to-migrate-indices-from-old-raw-template-to-new-keyword-mapping/118610)
**Author:** [@T3rm11](https://discuss.elastic.co/u/T3rm11)\ **Replies:** 4\ **Last updated:** [February 8, 2018, 3:13pm UTC](https://discuss.elastic.co/t/how-to-migrate-indices-from-old-raw-template-to-new-keyword-mapping/118610 "2018-02-08T15:13:57Z")
I think I ran into a very big problem when I upgraded from ELK 5 to ELK 6. When I look at the Logstash template in ELK 5 I see a keyword mapping with .raw. After the upgrade to ELK 6 the new template has a keyword mappin… --- ## [If condition inside aggregate filter](https://discuss.elastic.co/t/if-condition-inside-aggregate-filter/209486)
**Author:** [@Anuwa\_A](https://discuss.elastic.co/u/Anuwa_A)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 11:08am UTC](https://discuss.elastic.co/t/if-condition-inside-aggregate-filter/209486 "2019-11-26T11:08:04Z")
I want to create my document using mysql data, here when creating document i want to use if condition, This is my mysql data, id myid1 myid2 name 1 1 2 abc 2 1 2 xyz i want to… --- ## [Ruby plugin and timezone issue](https://discuss.elastic.co/t/ruby-plugin-and-timezone-issue/106138)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 1\ **Last updated:** [November 6, 2017, 3:07pm UTC](https://discuss.elastic.co/t/ruby-plugin-and-timezone-issue/106138 "2017-11-06T15:07:25Z")
Hi all, I had to calculate a new date field: given a timestamp and a offset I need to set a new field with the value timestamp+offset I solved the problem but I'm sure that there is a better way to do it. I use ruby … --- ## [No log4j2 configuration file found when trying to load test data from X-pack learning tutorial](https://discuss.elastic.co/t/no-log4j2-configuration-file-found-when-trying-to-load-test-data-from-x-pack-learning-tutorial/96574)
**Author:** [@Ferrow](https://discuss.elastic.co/u/Ferrow)\ **Replies:** 1\ **Last updated:** [August 22, 2017, 8:25pm UTC](https://discuss.elastic.co/t/no-log4j2-configuration-file-found-when-trying-to-load-test-data-from-x-pack-learning-tutorial/96574 "2017-08-22T20:25:22Z")
Hello out there :slight\_smile: im having trouble getting data loaded for training purpose with the x-pack tutorial. (Lab 1) Im not sure where to start with this error since the files it mentions are in the correct place… --- ## [Timestamp mapping in Java API](https://discuss.elastic.co/t/timestamp-mapping-in-java-api/14913)
**Author:** [@Andra\_Bennett](https://discuss.elastic.co/u/Andra_Bennett)\ **Replies:** 1\ **Last updated:** [December 17, 2013, 4:26pm UTC](https://discuss.elastic.co/t/timestamp-mapping-in-java-api/14913 "2013-12-17T16:26:16Z")
I'd like to do the timestamp mapping for my index with the Java API. I ran across this class TimestampFieldMapperin github. What is the intended use case for it? Does anyone have any documentation on it, or any e… --- ## [Authentication methods Kibana Dash](https://discuss.elastic.co/t/authentication-methods-kibana-dash/317690)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 8\ **Last updated:** [October 31, 2022, 10:31am UTC](https://discuss.elastic.co/t/authentication-methods-kibana-dash/317690 "2022-10-31T10:31:42Z")
Hello, I configured my ES e Kibana for a token authentication. Both are reachable by browser, but Kibana asks me login credentials to access even if I have configured Token Authentication. Is it normal? Shouldn't i l… --- ## [Automate export of Kibana dashboard CSV](https://discuss.elastic.co/t/automate-export-of-kibana-dashboard-csv/278260)
**Author:** [@Core\_Sec](https://discuss.elastic.co/u/Core_Sec)\ **Replies:** 3\ **Last updated:** [July 9, 2021, 12:21pm UTC](https://discuss.elastic.co/t/automate-export-of-kibana-dashboard-csv/278260 "2021-07-09T12:21:05Z")
Hi All, I need to download the CSV data that generated by Kibana dashboard. I'm struggling with selenium to automate the manual download without much luck But it seems like very not generic and robust way to do that… --- ## [Integration tests involving repository s3 and docker](https://discuss.elastic.co/t/integration-tests-involving-repository-s3-and-docker/125896)
**Author:** [@pvales](https://discuss.elastic.co/u/pvales)\ **Replies:** 3\ **Last updated:** [March 28, 2018, 1:17pm UTC](https://discuss.elastic.co/t/integration-tests-involving-repository-s3-and-docker/125896 "2018-03-28T13:17:47Z")
Hi, I'm struggling to create an integration test for our code orchestrating snapshots to S3. I've following setup: Docker compose of external services: services: s3: build: s3/ ports: - "9495:9495" el… --- ## [Currency in €](https://discuss.elastic.co/t/currency-in/121204)
**Author:** [@Fred59](https://discuss.elastic.co/u/Fred59)\ **Replies:** 3\ **Last updated:** [March 6, 2018, 5:15pm UTC](https://discuss.elastic.co/t/currency-in/121204 "2018-03-06T17:15:34Z")
Hello, I have Kibana 5.6.3 and i have 2 questions : It is possible to have currency in € on this version ? In advanced settings i put '0,0\[.\]0 $' but dollar is not my currency ^^. Actualy my sums of amount are li… --- ## [Can Elasticsearch extract fields from multiple log files? Can we write this code in a single file?](https://discuss.elastic.co/t/can-elasticsearch-extract-fields-from-multiple-log-files-can-we-write-this-code-in-a-single-file/40190)
**Author:** [@usahitya](https://discuss.elastic.co/u/usahitya)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 5:29am UTC](https://discuss.elastic.co/t/can-elasticsearch-extract-fields-from-multiple-log-files-can-we-write-this-code-in-a-single-file/40190 "2016-04-12T05:29:04Z")
Hi Friends, I am monitoring /var/log/\* in my linux box through Filebeat. Every log file have it's own style. I am getting the event like below (sample log file) "message:b8tTpts/0��3T(:� pts/0ts/0SAHISD+jocktramen10.33… --- ## [Grok Pattern to add missing characters to a mac address](https://discuss.elastic.co/t/grok-pattern-to-add-missing-characters-to-a-mac-address/140865)
**Author:** [@martinrw](https://discuss.elastic.co/u/martinrw)\ **Replies:** 2\ **Last updated:** [July 20, 2018, 4:22pm UTC](https://discuss.elastic.co/t/grok-pattern-to-add-missing-characters-to-a-mac-address/140865 "2018-07-20T16:22:33Z")
Hi I'm attempting to use grok patterns in my logstash config to tokenise output from dhcpd. I have successfully managed it apart form one bit... DHCPD sometimes removes leading 0's from Mac addresses, specifically on t… --- ## [Q="xxxx" not working on timelion when use metric](https://discuss.elastic.co/t/q-xxxx-not-working-on-timelion-when-use-metric/69394)
**Author:** [@Chen\_Jian](https://discuss.elastic.co/u/Chen_Jian)\ **Replies:** 2\ **Last updated:** [December 19, 2016, 11:30pm UTC](https://discuss.elastic.co/t/q-xxxx-not-working-on-timelion-when-use-metric/69394 "2016-12-19T23:30:39Z")
Hi - I try to monitor 5 nodes logstash ingress rate with: .es(index='logstash-metrics', q='message:ls-index1', metric=max:events.rate\_1m),.es(index='logstash-metrics', q='message:ls-index2', metric=max:events.rate\_1… --- ## [Filtering on a mapped timestamp](https://discuss.elastic.co/t/filtering-on-a-mapped-timestamp/28704)
**Author:** [@edmondo1984](https://discuss.elastic.co/u/edmondo1984)\ **Replies:** 2\ **Last updated:** [September 5, 2015, 9:40am UTC](https://discuss.elastic.co/t/filtering-on-a-mapped-timestamp/28704 "2015-09-05T09:40:26Z")
I have been moving from an auto-generated timestamp to a mapped one and query doesn’t work anymore. When using an auto-generated timestamp, I was able to perform this sort of query: FilterBuilder filter = FilterBuilder… --- ## [Error: \[parsing\_exception\] \[constant\_score\] query does not support \[query\]](https://discuss.elastic.co/t/error-parsing-exception-constant-score-query-does-not-support-query/168601)
**Author:** [@codeashish247](https://discuss.elastic.co/u/codeashish247)\ **Replies:** 2\ **Last updated:** [February 28, 2019, 11:12am UTC](https://discuss.elastic.co/t/error-parsing-exception-constant-score-query-does-not-support-query/168601 "2019-02-28T11:12:28Z")
client.search({ index: \['index1','index2'\], body: { from: 0, size: 20, query: { "constant\_score": { boost: 1.0, "query": { query\_str… --- ## [Role based access to Kibana dashboards](https://discuss.elastic.co/t/role-based-access-to-kibana-dashboards/25435)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 2\ **Last updated:** [July 13, 2015, 12:21pm UTC](https://discuss.elastic.co/t/role-based-access-to-kibana-dashboards/25435 "2015-07-13T12:21:56Z")
Hi, Is there any feature in kibana like:For same dashboards User A is having access only 2 graphs, and User B has access to 1 graphs, something like this. Is it possible to add access featues in kibana ? Best Regar… --- ## [Parsing Dynatrace dashboard reports in XML format](https://discuss.elastic.co/t/parsing-dynatrace-dashboard-reports-in-xml-format/206179)
**Author:** [@Volkan\_E](https://discuss.elastic.co/u/Volkan_E)\ **Replies:** 6\ **Last updated:** [November 15, 2019, 12:52pm UTC](https://discuss.elastic.co/t/parsing-dynatrace-dashboard-reports-in-xml-format/206179 "2019-11-15T12:52:29Z")
I'm trying to use Logstash 7.4.1 to parse XML files that are being generated each minute upon request to the Dynatrace server via REST api. The output will be sent to ElasticSearch. Dynatrace Dashboard Report My goal i… --- ## [X-PACK Features](https://discuss.elastic.co/t/x-pack-features/101040)
**Author:** [@sagar](https://discuss.elastic.co/u/sagar)\ **Replies:** 6\ **Last updated:** [September 19, 2017, 6:38pm UTC](https://discuss.elastic.co/t/x-pack-features/101040 "2017-09-19T18:38:22Z")
I have a question about X-PACK. So to use all the X-PACK features do we need KIbana to be installed with elastic search or we can use without the whole ELK stack. Thank You --- ## [Many active indices:admin/get tasks](https://discuss.elastic.co/t/many-active-indices-admin-get-tasks/87225)
**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\ **Replies:** 6\ **Last updated:** [May 31, 2017, 2:03pm UTC](https://discuss.elastic.co/t/many-active-indices-admin-get-tasks/87225 "2017-05-31T14:03:27Z")
Hi all, Have a strange issue where we have around 1500 active tasks on our 5 node 5.2 ES cluster. They are all on the same node (current master, and endpoint for Kibana/Monitoring) and go back for days. Any ideas wha… --- ## [Elastic Search Cluster Doubts](https://discuss.elastic.co/t/elastic-search-cluster-doubts/27580)
**Author:** [@Zeal\_Vora](https://discuss.elastic.co/u/Zeal_Vora)\ **Replies:** 6\ **Last updated:** [August 18, 2015, 12:40pm UTC](https://discuss.elastic.co/t/elastic-search-cluster-doubts/27580 "2015-08-18T12:40:06Z")
Hi I have setup a 3 Node Elastic Search Cluster. This is the detail of my cluster :- { "cluster\_name" : "pokemon", "status" : "green", "timed\_out" : false, "number\_of\_nodes" : 3, "number\_of\_data\_nodes" : 3, … --- ## [Failed to import dashboard: Failed to load directory](https://discuss.elastic.co/t/failed-to-import-dashboard-failed-to-load-directory/215079)
**Author:** [@Minh\_Ti\_n\_Tr\_n](https://discuss.elastic.co/u/Minh_Ti_n_Tr_n)\ **Replies:** 1\ **Last updated:** [February 6, 2020, 2:28am UTC](https://discuss.elastic.co/t/failed-to-import-dashboard-failed-to-load-directory/215079 "2020-02-06T02:28:13Z")
I got problem when setup winlogbeat Preformatted textPS C:\\Program Files\\Winlogbeat\> .\\winlogbeat.exe setup Index setup finished. Loading dashboards (Kibana must be running and reachable) Exiting: Failed to import da… --- ## [Define a date variable with an initial value in scripted field](https://discuss.elastic.co/t/define-a-date-variable-with-an-initial-value-in-scripted-field/107771)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 5\ **Last updated:** [November 16, 2017, 7:45am UTC](https://discuss.elastic.co/t/define-a-date-variable-with-an-initial-value-in-scripted-field/107771 "2017-11-16T07:45:27Z")
Hi, I'm working with an scripted field that computes a difference between two dates "total\_duration": { "max": { "script": {"source": "(doc\['ts\_stop'\].value - doc\['ts\_star… --- ## [Add tags in filebeat modules](https://discuss.elastic.co/t/add-tags-in-filebeat-modules/282750)
**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\ **Replies:** 4\ **Last updated:** [August 29, 2021, 6:57pm UTC](https://discuss.elastic.co/t/add-tags-in-filebeat-modules/282750 "2021-08-29T18:57:03Z")
Hi all, I have beats installed on my logstash instance. My idea is to collect multiple logs using filebeat modules -\> send it to logstash on port 5044 -\> send it to elasticsearch. Can I add tags in each of the filebeat… --- ## [TooManyBuckets Exception](https://discuss.elastic.co/t/toomanybuckets-exception/229176)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 4\ **Last updated:** [April 22, 2020, 11:41pm UTC](https://discuss.elastic.co/t/toomanybuckets-exception/229176 "2020-04-22T23:41:29Z")
Hey I am using ES 7.3 with Kibana. I encountered this error in a few visualisations and I cannot figure out what is wrong. For example - I am trying to visual a time line of Bytes read/write per host. But I am gett… --- ## [Kibana console introduction](https://discuss.elastic.co/t/kibana-console-introduction/93575)
**Author:** [@alvaro13](https://discuss.elastic.co/u/alvaro13)\ **Replies:** 4\ **Last updated:** [July 18, 2017, 5:10pm UTC](https://discuss.elastic.co/t/kibana-console-introduction/93575 "2017-07-18T17:10:46Z")
Hello all, I am trying to get familiarized with my kibana UI DevTools. I am following this manual It is clear when I run this command on URL \> GET localhost:9200 However, how can I do this on the DevTools? … --- ## [Filebeat 5.3.1 config\_dir files needs 644 permissions?](https://discuss.elastic.co/t/filebeat-5-3-1-config-dir-files-needs-644-permissions/84108)
**Author:** [@stefanrinderle](https://discuss.elastic.co/u/stefanrinderle)\ **Replies:** 4\ **Last updated:** [May 3, 2017, 1:06pm UTC](https://discuss.elastic.co/t/filebeat-5-3-1-config-dir-files-needs-644-permissions/84108 "2017-05-03T13:06:50Z")
Hi, i just spend a few ours on this topic. As far as i can see now, filebeat ignores files placed in the config\_dir folder with 664 permission without any comment in the log file. Changing the permissions to 644 and re… --- ## [Tuning ElasticSearch for handling logging](https://discuss.elastic.co/t/tuning-elasticsearch-for-handling-logging/79147)
**Author:** [@ChronosWS](https://discuss.elastic.co/u/ChronosWS)\ **Replies:** 4\ **Last updated:** [March 20, 2017, 11:15pm UTC](https://discuss.elastic.co/t/tuning-elasticsearch-for-handling-logging/79147 "2017-03-20T23:15:23Z")
I'm relatively new to ElasticSearch and we have a small cluster running which is collecting all of our logging and metrics data. Currently it's suffering from pretty bad performance (particularly memory usage) and after… --- ## [Has\_parent](https://discuss.elastic.co/t/has-parent/51943)
**Author:** [@webdevsHub](https://discuss.elastic.co/u/webdevsHub)\ **Replies:** 4\ **Last updated:** [June 7, 2016, 3:59pm UTC](https://discuss.elastic.co/t/has-parent/51943 "2016-06-07T15:59:38Z")
Hi, I have problems understanding how that "has\_parent" query works. Situation: Index with 2 types: "parent\_type" and "child\_type" with simple parent-child mapping: "parent\_type" =\> {"properties": {...}} "child\_type"… --- ## [Search phase execution error missing error](https://discuss.elastic.co/t/search-phase-execution-error-missing-error/252624)
**Author:** [@BigSugar](https://discuss.elastic.co/u/BigSugar)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 2:25am UTC](https://discuss.elastic.co/t/search-phase-execution-error-missing-error/252624 "2020-10-21T02:25:20Z")
Need help with this one: Error loading data search\_phase\_execution\_exception all shards failed Error at Fetch.\_callee3$ (https://5e. . . No error type listed in the peach banner or after Error (there is no "Bad Req… --- ## [ECE showing NaN Available Capacity](https://discuss.elastic.co/t/ece-showing-nan-available-capacity/145087)
**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\ **Replies:** 3\ **Last updated:** [August 29, 2018, 3:07am UTC](https://discuss.elastic.co/t/ece-showing-nan-available-capacity/145087 "2018-08-29T03:07:58Z")
I installed ECE on 3 VMs using a small baseline setup in a non production environment. Each server is assigned a different availability zone and each server has the runner, proxy, allocator, coordinator and director rol… --- ## [Help in resetting filebeat registry to reread in log files](https://discuss.elastic.co/t/help-in-resetting-filebeat-registry-to-reread-in-log-files/349216)
**Author:** [@allan.silverstein](https://discuss.elastic.co/u/allan.silverstein)\ **Replies:** 3\ **Last updated:** [December 13, 2023, 10:10pm UTC](https://discuss.elastic.co/t/help-in-resetting-filebeat-registry-to-reread-in-log-files/349216 "2023-12-13T22:10:50Z")
Hello, does anyone know how to reset the filebeat registry so I can reread in existing log files. This is for testing purposes... This is for filebeat version 8.10.4. I tried deleting the files in /var/lib/filebeat/r… --- ## [Kibana Lens Visualization showing data as "other" where as I have values for that fields](https://discuss.elastic.co/t/kibana-lens-visualization-showing-data-as-other-where-as-i-have-values-for-that-fields/282659)
**Author:** [@sagar.pattnayak](https://discuss.elastic.co/u/sagar.pattnayak)\ **Replies:** 3\ **Last updated:** [September 14, 2021, 10:05am UTC](https://discuss.elastic.co/t/kibana-lens-visualization-showing-data-as-other-where-as-i-have-values-for-that-fields/282659 "2021-09-14T10:05:15Z")
Hi There, I have created a Kibana Lens visualization (Datatable) where I am showing some tabular data from my index. The problem I have is even if I have some values in one my field (documenttitle), it is showing as "ot… --- ## [Get the returning and unique users list in Dashboard metric](https://discuss.elastic.co/t/get-the-returning-and-unique-users-list-in-dashboard-metric/204443)
**Author:** [@Prashant\_Kumar3](https://discuss.elastic.co/u/Prashant_Kumar3)\ **Replies:** 3\ **Last updated:** [October 21, 2019, 11:23am UTC](https://discuss.elastic.co/t/get-the-returning-and-unique-users-list-in-dashboard-metric/204443 "2019-10-21T11:23:19Z")
Hi, I have data in which user\_id field appears and what i want is to show in a metric on dashboard the number of users, Unique(user\_id appeared only once) and returning users(user\_id appeared more than once). Thanks … --- ## [Mapper attachment plugin fails to index document](https://discuss.elastic.co/t/mapper-attachment-plugin-fails-to-index-document/26115)
**Author:** [@AkshataNaik](https://discuss.elastic.co/u/AkshataNaik)\ **Replies:** 3\ **Last updated:** [July 30, 2015, 12:08am UTC](https://discuss.elastic.co/t/mapper-attachment-plugin-fails-to-index-document/26115 "2015-07-30T00:08:44Z")
Hello, I am using mapper attachment plugin to index pdf documents. I followed both official documentation : https://github.com/elastic/elasticsearch-mapper-attachments and this example tutorial : http://www.elasticsea… --- ## ["Too small maximum heap"](https://discuss.elastic.co/t/too-small-maximum-heap/288816)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [November 9, 2021, 7:53pm UTC](https://discuss.elastic.co/t/too-small-maximum-heap/288816 "2021-11-09T19:53:42Z")
I have installed 7.14 on a new machine running ubuntu 18.04. This machine has 48 GB of memory and is identical to another machine that I am currently running ES 7.14 on. The Elasticsearch.yml is identical and jvm.opti… --- ## [Logstash S3 Input Plugin not recognizing IAM Instance Profile](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-recognizing-iam-instance-profile/259812)
**Author:** [@prod](https://discuss.elastic.co/u/prod)\ **Replies:** 2\ **Last updated:** [December 30, 2020, 12:47pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-recognizing-iam-instance-profile/259812 "2020-12-30T12:47:44Z")
Checking the S3 Input plugin documentation This plugin uses the AWS SDK and supports several ways to get credentials, which will be tried in this order: Static configuration, using access\_key\_id and secret\_access\_k… --- ## [Will disabling shard allocation on one node affect cluster health?](https://discuss.elastic.co/t/will-disabling-shard-allocation-on-one-node-affect-cluster-health/192296)
**Author:** [@haotian9850](https://discuss.elastic.co/u/haotian9850)\ **Replies:** 2\ **Last updated:** [August 4, 2019, 7:58am UTC](https://discuss.elastic.co/t/will-disabling-shard-allocation-on-one-node-affect-cluster-health/192296 "2019-08-04T07:58:51Z")
Hey there! I am working on a project that automates elasticsearch cluster upgrade (7.1.1 =\> 7.2.0). From reading the documentations on cluster upgrading, it seems that a reasonable approach to upgrade the entire cluster … --- ## [Can't start kibana](https://discuss.elastic.co/t/cant-start-kibana/86038)
**Author:** [@LmYjQ](https://discuss.elastic.co/u/LmYjQ)\ **Replies:** 2\ **Last updated:** [May 18, 2017, 3:03am UTC](https://discuss.elastic.co/t/cant-start-kibana/86038 "2017-05-18T03:03:10Z")
I haved disabled xpack.security.enabled and xpack.watcher.enabled in kibana and elasticsearch referring https://www.elastic.co/guide/en/x-pack/current/installing-xpack.html then the log come out -\> # /usr/share/kibana… --- ## [Index ORC file using Elastic](https://discuss.elastic.co/t/index-orc-file-using-elastic/71311)
**Author:** [@Asish\_Bose](https://discuss.elastic.co/u/Asish_Bose)\ **Replies:** 2\ **Last updated:** [January 12, 2017, 6:06am UTC](https://discuss.elastic.co/t/index-orc-file-using-elastic/71311 "2017-01-12T06:06:06Z")
Hi, I am currently evaluating elastic to be our middleman to index our ORC files generated from storm bolts and use the data for real time analytics. Since Our data-rate is huge we need a high degree of parallelism t… --- ## [Error : not enough master nodes](https://discuss.elastic.co/t/error-not-enough-master-nodes/55759)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 2\ **Last updated:** [July 19, 2016, 4:30am UTC](https://discuss.elastic.co/t/error-not-enough-master-nodes/55759 "2016-07-19T04:30:42Z")
In my cluster I have two nodes. Both are master and data nodes. I am trying some queries in Kibana its showing this error. \[2016-07-18 17:55:00,451\]\[WARN \]\[monitor.jvm \] \[ravi-2\] \[gc\]\[young\]\[458531\]\[5591… --- ## [Error sql server to elasticsearch TLS10](https://discuss.elastic.co/t/error-sql-server-to-elasticsearch-tls10/307244)
**Author:** [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)\ **Replies:** 7\ **Last updated:** [June 15, 2022, 5:34pm UTC](https://discuss.elastic.co/t/error-sql-server-to-elasticsearch-tls10/307244 "2022-06-15T17:34:40Z")
I am trying to communicate with sqlserver with logstash, I used : java version "11.0.14" 2022-01-18 LTS Myfile.conf input { jdbc jdbc\_driver\_library =\> "C:\\Users\\Lenovo\\Desktop\\ELK\\logstash-8.1.0\\logstash-core\\lib… --- ## [Extract date from timestamp field](https://discuss.elastic.co/t/extract-date-from-timestamp-field/259349)
**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 12:40am UTC](https://discuss.elastic.co/t/extract-date-from-timestamp-field/259349 "2020-12-23T00:40:03Z")
hello, i have a time field and i want to extract date from it in my elasticsearch sql query. Below is the format of time: 2020-01-11T02:13:00.000Z which function in elasticsearch sql query will extract the date from i… --- ## [Exiting: 1 error: setting 'filebeat.prospectors' has been removed](https://discuss.elastic.co/t/exiting-1-error-setting-filebeat-prospectors-has-been-removed/189486)
**Author:** [@Dea\_Agra](https://discuss.elastic.co/u/Dea_Agra)\ **Replies:** 1\ **Last updated:** [July 10, 2019, 1:00pm UTC](https://discuss.elastic.co/t/exiting-1-error-setting-filebeat-prospectors-has-been-removed/189486 "2019-07-10T13:00:15Z")
I got an error when running the filebeat. here my configuration --- ## [Connect Error with JAVA - NoNodeAvailableException\[None of the configured nodes are available](https://discuss.elastic.co/t/connect-error-with-java-nonodeavailableexception-none-of-the-configured-nodes-are-available/102238)
**Author:** [@Tony\_Lam](https://discuss.elastic.co/u/Tony_Lam)\ **Replies:** 1\ **Last updated:** [September 29, 2017, 11:41am UTC](https://discuss.elastic.co/t/connect-error-with-java-nonodeavailableexception-none-of-the-configured-nodes-are-available/102238 "2017-09-29T11:41:01Z")
Hi Everyone, I have provision a Elastic Cloud for my programmers, they are using Native Elasticsearch binary protocal but found these errors It is able to connect to it and find out its nodes below: 54.254.97.95:9343 … --- ## [Import data from facebook](https://discuss.elastic.co/t/import-data-from-facebook/1554)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 1\ **Last updated:** [May 30, 2015, 3:42pm UTC](https://discuss.elastic.co/t/import-data-from-facebook/1554 "2015-05-30T15:42:38Z")
Hi All, Is it possible to import data from facebook to logstash or ES??? If it possible please give me step by step procedure. Thanks, Dan --- ## [Rollover Failure - Unable to auto set lifecycle.rollover\_alias after rollover - Moving to ERROR step](https://discuss.elastic.co/t/rollover-failure-unable-to-auto-set-lifecycle-rollover-alias-after-rollover-moving-to-error-step/336235)
**Author:** [@vedalas21](https://discuss.elastic.co/u/vedalas21)\ **Replies:** 8\ **Last updated:** [June 22, 2023, 12:48pm UTC](https://discuss.elastic.co/t/rollover-failure-unable-to-auto-set-lifecycle-rollover-alias-after-rollover-moving-to-error-step/336235 "2023-06-22T12:48:55Z")
Getting a "Moving to ERROR step" while rollover from an alias when "max\_age" paramter is met Steps to reproduce Create an Index Template { "name": "temp-test\_idx\_template", "index\_template": { "in… --- ## [Docker Desktop used space increase +500Mb per day](https://discuss.elastic.co/t/docker-desktop-used-space-increase-500mb-per-day/201957)
**Author:** [@jnick1982](https://discuss.elastic.co/u/jnick1982)\ **Replies:** 0\ **Last updated:** [October 2, 2019, 1:27pm UTC](https://discuss.elastic.co/t/docker-desktop-used-space-increase-500mb-per-day/201957 "2019-10-02T13:27:38Z")
Since migrating from 6.4 to 6.8 and now 7.3.2 I notice that the used space from Docker Desktop on Windows 10 increased every day. I am running a very simple elk stack Elasticsearch/Kibana/Logstash from a docker compose.… --- ## [Delete](https://discuss.elastic.co/t/delete/72084)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 8\ **Last updated:** [January 19, 2017, 9:32pm UTC](https://discuss.elastic.co/t/delete/72084 "2017-01-19T21:32:31Z")
How the heck do I delete records form an index? index: test\_index This is not working: DELETE test\_index/myType { "query":{ "match\_all": { } } } --- ## [How to set/change Elastic Agent with same hostname](https://discuss.elastic.co/t/how-to-set-change-elastic-agent-with-same-hostname/354766)
**Author:** [@djarami726](https://discuss.elastic.co/u/djarami726)\ **Replies:** 6\ **Last updated:** [March 8, 2024, 3:53pm UTC](https://discuss.elastic.co/t/how-to-set-change-elastic-agent-with-same-hostname/354766 "2024-03-08T15:53:37Z")
I have installed the elastic agent on two linux VM machines and they have the same hostname on both VMs. Unfortunately, only one shows up on my list of installed agents. How do i change the name used for elastic agent … --- ## [Ogstash.javapipeline \]\[main\] Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@saidjon](https://discuss.elastic.co/u/saidjon)\ **Replies:** 6\ **Last updated:** [February 22, 2020, 12:21pm UTC](https://discuss.elastic.co/t/ogstash-javapipeline-main-pipeline-aborted-due-to-error-pipeline-id-main-exception-logstash-unexpected-character-code-60-expected-a-valid-value-number-string-array-object-true-false-or-null/220465 "2020-02-22T12:21:26Z") hi there . im trying to import data to elastic cloud but getting this error . my conf file looks like this \ input{ file{ path =\> "/home/saidjon/Downloads/big\_data/urbandict-word-defs.csv" start\_position =\>… [Previous page](https://discuss.elastic.co/top.md?page=990&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=992&per_page=50&period=all)