# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1905 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1906 --- ## [Overwriting new document?](https://discuss.elastic.co/t/overwriting-new-document/242729)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 4\ **Last updated:** [July 27, 2020, 10:19am UTC](https://discuss.elastic.co/t/overwriting-new-document/242729 "2020-07-27T10:19:27Z")
Hi, Recently I did a fresh install of elk 7.7 . I did a successfull attempt of creaing a POC and now try to build up a full environment. However, When I send a log via filebeatand logstash to ES, somehow every new docum… --- ## [Elasticsearch query for 2 Parts without changing/splitting query in PHP](https://discuss.elastic.co/t/elasticsearch-query-for-2-parts-without-changing-splitting-query-in-php/242681)
**Author:** [@bastimm](https://discuss.elastic.co/u/bastimm)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 4:37am UTC](https://discuss.elastic.co/t/elasticsearch-query-for-2-parts-without-changing-splitting-query-in-php/242681 "2020-07-27T04:37:23Z")
Hello, everyone, many years ago I built a search for a webshop with Elasticsearch. Now I like to update it. One question, if i.e. i search for "iphone 11 MWLT2ZD", i want to search for "iphone" or "11" or "MWLT2ZD". N… --- ## [I'm new and can you help me with the meaning](https://discuss.elastic.co/t/im-new-and-can-you-help-me-with-the-meaning/242724)
**Author:** [@fatih\_erol](https://discuss.elastic.co/u/fatih_erol)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 9:52am UTC](https://discuss.elastic.co/t/im-new-and-can-you-help-me-with-the-meaning/242724 "2020-07-27T09:52:04Z")
Hello, my data is on Sql server and I want to use ElasticSearch. Does ElasticSearch mean that there will also be a copy of the data? Thank you --- ## [I need Help for sort ordering most words occurrence with Query string Search](https://discuss.elastic.co/t/i-need-help-for-sort-ordering-most-words-occurrence-with-query-string-search/242511)
**Author:** [@anup786saini](https://discuss.elastic.co/u/anup786saini)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 9:26am UTC](https://discuss.elastic.co/t/i-need-help-for-sort-ordering-most-words-occurrence-with-query-string-search/242511 "2020-07-27T09:26:34Z")
{ "title":"javascript,seo,javascript,c#,html,javascript"} { "title":"javascript,wordpress,seo,javascript,c#,html"} { "title":"javascript,wordpress,seo,c#,html,wordpress,wordpress"} { "title":"javascript,wordpress,seo,… --- ## [How to determine if one of master gone from cluster?](https://discuss.elastic.co/t/how-to-determine-if-one-of-master-gone-from-cluster/241171)
**Author:** [@byumov](https://discuss.elastic.co/u/byumov)\ **Replies:** 12\ **Last updated:** [July 27, 2020, 9:08am UTC](https://discuss.elastic.co/t/how-to-determine-if-one-of-master-gone-from-cluster/241171 "2020-07-27T09:08:35Z")
Hi! I have a clean and simple installation os ES: 9 nodes: 6 data and 3 masters(without data). I want to determine situation when one of masters gone for some reason(power off). How I can do it on 7 ES? I looked at /\_… --- ## [Unique File Identifier in Filebeat](https://discuss.elastic.co/t/unique-file-identifier-in-filebeat/242507)
**Author:** [@pulkit007](https://discuss.elastic.co/u/pulkit007)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 8:59am UTC](https://discuss.elastic.co/t/unique-file-identifier-in-filebeat/242507 "2020-07-27T08:59:10Z")
https://www.elastic.co/guide/en/beats/filebeat/current/how-filebeat-works.html#\_how\_does\_filebeat\_keep\_the\_state\_of\_files The above link tells that "For each file, Filebeat stores unique identifiers to detect whether a … --- ## [Pagination for REST API Via Logstash](https://discuss.elastic.co/t/pagination-for-rest-api-via-logstash/242714)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 8:49am UTC](https://discuss.elastic.co/t/pagination-for-rest-api-via-logstash/242714 "2020-07-27T08:49:23Z")
Hi, How can I import from a REST API to Elasticsearch via Logstash using Pagination? I was able to import using http\_poller, how can I write force a custom script or "for loop" to check for other records to import. C… --- ## [Not able to start kibana after enabling ssl encryption in elk stack](https://discuss.elastic.co/t/not-able-to-start-kibana-after-enabling-ssl-encryption-in-elk-stack/242396)
**Author:** [@Matish\_Bhuyan](https://discuss.elastic.co/u/Matish_Bhuyan)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 8:38am UTC](https://discuss.elastic.co/t/not-able-to-start-kibana-after-enabling-ssl-encryption-in-elk-stack/242396 "2020-07-27T08:38:38Z")
Hi All, After installing the plugin and enabling the ssl b/w elasticsearch ,kibana and logstash when i restarted my kibana service getting this below error and not able to view the kibana screen {"type":"error","@time… --- ## [Custom index names with an ILM policy](https://discuss.elastic.co/t/custom-index-names-with-an-ilm-policy/241852)
**Author:** [@michielM](https://discuss.elastic.co/u/michielM)\ **Replies:** 4\ **Last updated:** [July 27, 2020, 8:35am UTC](https://discuss.elastic.co/t/custom-index-names-with-an-ilm-policy/241852 "2020-07-27T08:35:36Z")
Hi all, I am trying to setup my elk stack and beats in a way that I can have an ILM policy in combination with custom index names. For example: I want to have the index name filebeat-department-01/01/2000 and have it … --- ## [Passing script\_fields to Perl elasticsearch client](https://discuss.elastic.co/t/passing-script-fields-to-perl-elasticsearch-client/242647)
**Author:** [@igorid70](https://discuss.elastic.co/u/igorid70)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 8:27am UTC](https://discuss.elastic.co/t/passing-script-fields-to-perl-elasticsearch-client/242647 "2020-07-27T08:27:25Z")
Hi I use Elastic stack 6.8 and connect to extract certain documents based on parameters provided in input files with Elasticsearch official Perl client. All works well but I am unable to pass script\_fields parameter . … --- ## [Elastic agent support for Windows container](https://discuss.elastic.co/t/elastic-agent-support-for-windows-container/242671)
**Author:** [@ankugarg](https://discuss.elastic.co/u/ankugarg)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 8:12am UTC](https://discuss.elastic.co/t/elastic-agent-support-for-windows-container/242671 "2020-07-27T08:12:50Z")
Does Elastic Agent (https://www.elastic.co/downloads/elastic-agent) supports monitoring of windows container metrics(like CPU,memory of containers) and windows event logs? --- ## [Logstash jdbc sybase connect fails](https://discuss.elastic.co/t/logstash-jdbc-sybase-connect-fails/242217)
**Author:** [@xcitan](https://discuss.elastic.co/u/xcitan)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 8:02am UTC](https://discuss.elastic.co/t/logstash-jdbc-sybase-connect-fails/242217 "2020-07-27T08:02:57Z")
Working on: SMP Debian 4.19.118-2+deb10u1 (2020-06-07) x86\_64 GNU/Linux logstash 7.8.0 I need to connect to a sybase ASE16, using jconn4 driver. The driver for example works in squirrel without any problems. input {… --- ## [java.sql.SQLException: This version of the JDBC driver is only compatible with Elasticsearch version vUnknown \[Unknown\], attempting to connect to a server version 7.5.1](https://discuss.elastic.co/t/java-sql-sqlexception-this-version-of-the-jdbc-driver-is-only-compatible-with-elasticsearch-version-vunknown-unknown-attempting-to-connect-to-a-server-version-7-5-1/242698)
**Author:** [@liujiehaobang](https://discuss.elastic.co/u/liujiehaobang)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 7:51am UTC](https://discuss.elastic.co/t/java-sql-sqlexception-this-version-of-the-jdbc-driver-is-only-compatible-with-elasticsearch-version-vunknown-unknown-attempting-to-connect-to-a-server-version-7-5-1/242698 "2020-07-27T07:51:55Z")
java.sql.SQLException: This version of the JDBC driver is only compatible with Elasticsearch version vUnknown \[Unknown\], attempting to connect to a server version 7.5.1 --- ## [Identification of development mode vs production mode in Elasticsearch](https://discuss.elastic.co/t/identification-of-development-mode-vs-production-mode-in-elasticsearch/242701)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 7:38am UTC](https://discuss.elastic.co/t/identification-of-development-mode-vs-production-mode-in-elasticsearch/242701 "2020-07-27T07:38:31Z")
Currently, we are using below mention values in network.host param in elasticsearch.yml. network.host: \["localhost", "::1", "10.0.x.xx"\] Here we have used both localhost and non-localhost address. Which mode is this co… --- ## [Delete old indeces data](https://discuss.elastic.co/t/delete-old-indeces-data/242651)
**Author:** [@Yaniv\_Israel](https://discuss.elastic.co/u/Yaniv_Israel)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 7:35am UTC](https://discuss.elastic.co/t/delete-old-indeces-data/242651 "2020-07-27T07:35:25Z")
Hi, I'm trying to make some drill down to our system ELK before upgrading. We are running ElasticSearch with 1.7 (old, I know). I've found that on ES data directory, we have some indices that not exists by ES (not sho… --- ## [Failed to execute bulk item (update) BulkShardRequest](https://discuss.elastic.co/t/failed-to-execute-bulk-item-update-bulkshardrequest/242687)
**Author:** [@devinderpal](https://discuss.elastic.co/u/devinderpal)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 7:20am UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-update-bulkshardrequest/242687 "2020-07-27T07:20:04Z")
I am facing Live server problem on elastisearch. My RAM is 32 GB and Heap Memory is 8GB. But still i am facing the problem in elastisearch. Bellow are the logs // Error Log \[2020-07-26T20:15:05,456\]\[DEBUG\]\[o.e.a.b.Tra… --- ## [Change elastic ip from localhost to x.x.x.x](https://discuss.elastic.co/t/change-elastic-ip-from-localhost-to-x-x-x-x/242534)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 7:16am UTC](https://discuss.elastic.co/t/change-elastic-ip-from-localhost-to-x-x-x-x/242534 "2020-07-27T07:16:38Z")
Hi, Elastic search by default running on 127.0.0.1:9200. I change it to some IP address. Question is how I can change or tell logstash to connect with given IP address. Thanks in Advance --- ## [ELK Multi index in signle logstash.conf file](https://discuss.elastic.co/t/elk-multi-index-in-signle-logstash-conf-file/242548)
**Author:** [@jeetugangwar11](https://discuss.elastic.co/u/jeetugangwar11)\ **Replies:** 4\ **Last updated:** [July 27, 2020, 5:21am UTC](https://discuss.elastic.co/t/elk-multi-index-in-signle-logstash-conf-file/242548 "2020-07-27T05:21:45Z")
Hi, I'm trying to push data from logstash to more then 2 index using single logstash.conf file. below is my configuration: input { beats { port =\> 5044 } } input { file { type =\> "java" path =\> "C:/ELK/Projects… --- ## [Add frequency to elatize data logstash](https://discuss.elastic.co/t/add-frequency-to-elatize-data-logstash/242552)
**Author:** [@Gabriel\_Mare](https://discuss.elastic.co/u/Gabriel_Mare)\ **Replies:** 5\ **Last updated:** [July 27, 2020, 7:09am UTC](https://discuss.elastic.co/t/add-frequency-to-elatize-data-logstash/242552 "2020-07-27T07:09:15Z")
Hi, I need to add frequency to elastize data in my elasticsearch. I'm using stdin input and I don't know which the parameter/variable relationated with frequency. Somebody can help me? --- ## [Logstash-forwarder](https://discuss.elastic.co/t/logstash-forwarder/240204)
**Author:** [@mustafa.husny](https://discuss.elastic.co/u/mustafa.husny)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 7:07am UTC](https://discuss.elastic.co/t/logstash-forwarder/240204 "2020-07-27T07:07:19Z")
I am using logstash forwarder to ship my logs from AIX machine to my ELK stack on linux machine I am trying to make an index as (hostname-ip) but it is not working my config is as below input { lumberjack { port =\> … --- ## [How to set the order of aggregations](https://discuss.elastic.co/t/how-to-set-the-order-of-aggregations/242025)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 7:00am UTC](https://discuss.elastic.co/t/how-to-set-the-order-of-aggregations/242025 "2020-07-27T07:00:54Z")
is it possible to set the order of aggregations in the response to be the same as they are added in the request? --- ## [Kibana in docker, issues with installation of plugins](https://discuss.elastic.co/t/kibana-in-docker-issues-with-installation-of-plugins/236866)
**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 6:43am UTC](https://discuss.elastic.co/t/kibana-in-docker-issues-with-installation-of-plugins/236866 "2020-07-27T06:43:13Z")
Hey All - and thanks for any help in advance. Im trying to install this plugin into kibana in docker: https://github.com/dlumbrer/kbn\_network my version is 7.7.1 which should work based on the docs. After copying from … --- ## [How to change home link?](https://discuss.elastic.co/t/how-to-change-home-link/242570)
**Author:** [@sdndude](https://discuss.elastic.co/u/sdndude)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 6:38am UTC](https://discuss.elastic.co/t/how-to-change-home-link/242570 "2020-07-27T06:38:47Z")
I have several disparate containers doing data collection with both logstash and filebeat. Each of these has their own set of visualizations and dashboards. I have created a dashboard that has icons/links to the "overv… --- ## [Indexing single document](https://discuss.elastic.co/t/indexing-single-document/240636)
**Author:** [@amit.surana](https://discuss.elastic.co/u/amit.surana)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 6:08am UTC](https://discuss.elastic.co/t/indexing-single-document/240636 "2020-07-27T06:08:33Z")
Hi Team, We are planning to use ElasticSearch and to test our expected load we want to run some load test. I was looking at custom track options and see that bulk operation is used for indexing documents. However, we wo… --- ## ["org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed - ES 7.6](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-es-7-6/242555)
**Author:** [@srikhark](https://discuss.elastic.co/u/srikhark)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 5:07am UTC](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-es-7-6/242555 "2020-07-27T05:07:32Z")
I got below error on ES 7.6 and queries were taking time to execute. Can any one help on this. ? I have deployed our cluster on docker {"log":"\[2020-07-24T12:35:34,270\]\[WARN \]\[r.suppressed \] \[cindex\_name… --- ## [Question about index name rule used in Kibana](https://discuss.elastic.co/t/question-about-index-name-rule-used-in-kibana/242463)
**Author:** [@8wlgns](https://discuss.elastic.co/u/8wlgns)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 3:47am UTC](https://discuss.elastic.co/t/question-about-index-name-rule-used-in-kibana/242463 "2020-07-27T03:47:37Z")
Hello? I have a question about incremental rules of the .kibana\_N, and .kibana\_\_\_N In the official documentation, Saved objects are stored in an index named .kibana\_N, where N is a number that increments over time as … --- ## [How to update multiple servers (yml)?](https://discuss.elastic.co/t/how-to-update-multiple-servers-yml/242678)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 12:04am UTC](https://discuss.elastic.co/t/how-to-update-multiple-servers-yml/242678 "2020-07-27T00:04:59Z")
Hello All, A general question. Is there an easy way to update yml file(s) on multiple servers? Assuming the file is identical on all servers, and I just want to update the configuration file(s). Another scenario, is … --- ## [RAM and Data size](https://discuss.elastic.co/t/ram-and-data-size/239904)
**Author:** [@jigsm\_shah](https://discuss.elastic.co/u/jigsm_shah)\ **Replies:** 5\ **Last updated:** [July 26, 2020, 11:59pm UTC](https://discuss.elastic.co/t/ram-and-data-size/239904 "2020-07-26T23:59:25Z")
Hello, I am a newbie exploring Elastic Search and having hard time understanding how does Elastic Search handle data which is larger than the RAM size. I am going through the documentations and it says to allocate 50% … --- ## [Filebeat putting in thousands of extraneous fields](https://discuss.elastic.co/t/filebeat-putting-in-thousands-of-extraneous-fields/242561)
**Author:** [@hmschreck](https://discuss.elastic.co/u/hmschreck)\ **Replies:** 1\ **Last updated:** [July 26, 2020, 11:52pm UTC](https://discuss.elastic.co/t/filebeat-putting-in-thousands-of-extraneous-fields/242561 "2020-07-26T23:52:42Z")
I'm trying to use the transform functionality in Elastic Cloud (7.8) and it is complaining that Filebeat has too many index fields (3700+ vs a maximum of 1024). I've tried changing the fields file to send something diff… --- ## [Is it effective to divide data into multiple indexes instead of multiple shards/nodes?](https://discuss.elastic.co/t/is-it-effective-to-divide-data-into-multiple-indexes-instead-of-multiple-shards-nodes/242324)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 2\ **Last updated:** [July 26, 2020, 11:07pm UTC](https://discuss.elastic.co/t/is-it-effective-to-divide-data-into-multiple-indexes-instead-of-multiple-shards-nodes/242324 "2020-07-26T23:07:48Z")
I have ~100GB data and would like to build a search application with the data. The each document has a field like category id, besides ordinal text fields. Users usually filter the documents specifying the category ids… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1904) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1906)