# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=928 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 929 --- ## [Check if index exist in elasticsearch 8.2](https://discuss.elastic.co/t/check-if-index-exist-in-elasticsearch-8-2/305356)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 8\ **Last updated:** [May 24, 2022, 11:47am UTC](https://discuss.elastic.co/t/check-if-index-exist-in-elasticsearch-8-2/305356 "2022-05-24T11:47:07Z")
Hi, How do I check if index exist in JAVA API 8.2. In v.7.x I used: GetIndexRequest request = new GetIndexRequest("yourindexname"); restHighLevelclient.indices().exists(request, RequestOptions.DEFAULT); --- ## [Filebeat doesn't send logs to elasticsearch](https://discuss.elastic.co/t/filebeat-doesnt-send-logs-to-elasticsearch/305301)
**Author:** [@elduderino](https://discuss.elastic.co/u/elduderino)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 11:31am UTC](https://discuss.elastic.co/t/filebeat-doesnt-send-logs-to-elasticsearch/305301 "2022-05-24T11:31:08Z")
I got some logs and filebeat was shipping them to the ES server just fine but all of a sudden seems to be stopped shipping some files in different folders in the same machine. Filebeat service is running. Did anyone expe… --- ## [Expand\_keys doesn't work if target option is used in decode\_json\_fields beat processor](https://discuss.elastic.co/t/expand-keys-doesnt-work-if-target-option-is-used-in-decode-json-fields-beat-processor/305276)
**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 10:35am UTC](https://discuss.elastic.co/t/expand-keys-doesnt-work-if-target-option-is-used-in-decode-json-fields-beat-processor/305276 "2022-05-24T10:35:08Z")
In decode\_json\_fields processor, expanded notation works only if target is left to "". In fact, in source code ( beats/decode\_json\_fields.go at master · elastic/beats · GitHub ) there is a clear if section: if target… --- ## [Use KV filter in logstash can not filter?](https://discuss.elastic.co/t/use-kv-filter-in-logstash-can-not-filter/305446)
**Author:** [@GhostRaven](https://discuss.elastic.co/u/GhostRaven)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 10:29am UTC](https://discuss.elastic.co/t/use-kv-filter-in-logstash-can-not-filter/305446 "2022-05-24T10:29:45Z")
Use KV filter in logstash. I can get the value, but can not filter ? why ? Does the key can not be uppercase? if \[host\] == "10.9.10.10" { kv { include\_keys =\> \[ "ACMAC", "ACNAME", "AP… --- ## [Adding a New field to index](https://discuss.elastic.co/t/adding-a-new-field-to-index/305408)
**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 10:26am UTC](https://discuss.elastic.co/t/adding-a-new-field-to-index/305408 "2022-05-24T10:26:22Z")
I want to add a new field to my index which includes more than 20m documents. I have dictionary like this Template : \[Catalog\_id : {Keyword: Sold Count}\] Sold Counts = {1234: {Apple:50}, 3242: {Banana:20}, 3423: {Apple:… --- ## [Changing index replication factor to 0](https://discuss.elastic.co/t/changing-index-replication-factor-to-0/305482)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 4\ **Last updated:** [May 24, 2022, 10:08am UTC](https://discuss.elastic.co/t/changing-index-replication-factor-to-0/305482 "2022-05-24T10:08:35Z")
Currently I am working on a single node Elasticsearch setup. But the replication factor was set to 1 by default. The space on my node is 3TB. If I decrease the replication factor to 0 , what will happen in that case? O… --- ## [Failed to execute action](https://discuss.elastic.co/t/failed-to-execute-action/305479)
**Author:** [@Palaibada](https://discuss.elastic.co/u/Palaibada)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 9:40am UTC](https://discuss.elastic.co/t/failed-to-execute-action/305479 "2022-05-24T09:40:30Z")
what is solution for this error "message=\>"java.io.IOException: Page file size is too small to hold elements" ? --- ## [Preserve original log file name using Filebeat and Logstash](https://discuss.elastic.co/t/preserve-original-log-file-name-using-filebeat-and-logstash/305390)
**Author:** [@Robert\_Garcia\_Torren](https://discuss.elastic.co/u/Robert_Garcia_Torren)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 8:50am UTC](https://discuss.elastic.co/t/preserve-original-log-file-name-using-filebeat-and-logstash/305390 "2022-05-24T08:50:07Z")
Hi. I just want to preserve the original file name for example: laravel-2022-05-17.log and set it as index. I was not able to find the propper way to obtain it using filebeat and sending it to logstash. Thanks … --- ## [ILM rollout not working](https://discuss.elastic.co/t/ilm-rollout-not-working/303463)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 8:33am UTC](https://discuss.elastic.co/t/ilm-rollout-not-working/303463 "2022-05-24T08:33:29Z")
Hi all, We want to active the rollout into hot phase in a index. Policy applied before rollout: PUT \_ilm/policy/test-custom { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { … --- ## [Kibana URL Error on HTTPS Connection: Refuse To Execute Inline Scripts Because Its Violate The Following Content Security Policy Directive And Failed To Fetch JS Pages](https://discuss.elastic.co/t/kibana-url-error-on-https-connection-refuse-to-execute-inline-scripts-because-its-violate-the-following-content-security-policy-directive-and-failed-to-fetch-js-pages/304945)
**Author:** [@Lokesh\_Sachdeva](https://discuss.elastic.co/u/Lokesh_Sachdeva)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 1:12pm UTC](https://discuss.elastic.co/t/kibana-url-error-on-https-connection-refuse-to-execute-inline-scripts-because-its-violate-the-following-content-security-policy-directive-and-failed-to-fetch-js-pages/304945 "2022-05-17T13:12:15Z")
HI Team We are installing the ELK Docker Image 8.0.0 with configuring SSL security in ELK Cluster. Configured Kibana.yml file with below settings SERVER\_SSL\_ENABLE= true SERVER\_SSL\_CERTIFICATE=config/cert/server/server… --- ## [Can word spacing support and or relationship](https://discuss.elastic.co/t/can-word-spacing-support-and-or-relationship/305444)
**Author:** [@S-Dragon0302](https://discuss.elastic.co/u/S-Dragon0302)\ **Replies:** 6\ **Last updated:** [May 24, 2022, 7:02am UTC](https://discuss.elastic.co/t/can-word-spacing-support-and-or-relationship/305444 "2022-05-24T07:02:39Z")
query\_string case: ((a|b)+(c|d))~10 ==\> ((a+c)~10)|((a+d)~10)|((b+c)~10)|((b+d)~10) Can this be true,What should I do if I want to do this. --- ## [Dedicated Auth Log](https://discuss.elastic.co/t/dedicated-auth-log/305415)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 0\ **Last updated:** [May 23, 2022, 3:54pm UTC](https://discuss.elastic.co/t/dedicated-auth-log/305415 "2022-05-23T15:54:53Z")
Is it possible to setup Elasticsearch to log all authentication attempts to a separate file? This would mostly be Kibana authentications via AD or local user, would it be better to setup logging in Kibana to track this? … --- ## [How to search in Elasticsearch when same field is present multiple times?](https://discuss.elastic.co/t/how-to-search-in-elasticsearch-when-same-field-is-present-multiple-times/305385)
**Author:** [@Vipul\_Kumar](https://discuss.elastic.co/u/Vipul_Kumar)\ **Replies:** 7\ **Last updated:** [May 24, 2022, 6:30am UTC](https://discuss.elastic.co/t/how-to-search-in-elasticsearch-when-same-field-is-present-multiple-times/305385 "2022-05-24T06:30:41Z")
I'm trying to figure out how do I search an index when same field is present multiple times. Look at the below example: "\_source" : { "field1" : "value1", "field\_list" : \[ { … --- ## [Fuzzysearch not working as expected](https://discuss.elastic.co/t/fuzzysearch-not-working-as-expected/305450)
**Author:** [@Reset\_Button](https://discuss.elastic.co/u/Reset_Button)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 6:04am UTC](https://discuss.elastic.co/t/fuzzysearch-not-working-as-expected/305450 "2022-05-24T06:04:25Z")
Hello! I try to implement fuzzysearch like explained here How to Use Fuzzy Query Matches in Elasticsearch | HackerNoon - but get strange results. { "query": { "match" : { "term": { "query" : "At w… --- ## [Elastic Cloud performance data in Stack Monitoring](https://discuss.elastic.co/t/elastic-cloud-performance-data-in-stack-monitoring/303978)
**Author:** [@keiransteele](https://discuss.elastic.co/u/keiransteele)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 5:21am UTC](https://discuss.elastic.co/t/elastic-cloud-performance-data-in-stack-monitoring/303978 "2022-05-24T05:21:59Z")
Are there any plans to have the performance metrics from the Elastic Cloud deployment interface available in Stack Monitoring? The graphs in the deployment interface are small and not very useful, it's also not possible … --- ## [Using formula section on the vertical axis](https://discuss.elastic.co/t/using-formula-section-on-the-vertical-axis/305410)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 5:09am UTC](https://discuss.elastic.co/t/using-formula-section-on-the-vertical-axis/305410 "2022-05-24T05:09:30Z")
Hi, I want to show the count as a percentage. Currently it is displaying the count of files. How do I show the count as a percentage of the total number of files in the formula section of the vertical axis. attached scr… --- ## [Index document: very bad performance in Elasticsearch 8.2.0](https://discuss.elastic.co/t/index-document-very-bad-performance-in-elasticsearch-8-2-0/305392)
**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 5:07am UTC](https://discuss.elastic.co/t/index-document-very-bad-performance-in-elasticsearch-8-2-0/305392 "2022-05-24T05:07:03Z")
We are trying to migrate from Elasticsearch 6.7.1 to Elasticsearch 8.2.0. With the same amount of documents per bulk request, we always get a socket timeout in Elasticsearch 8.2.0. Everything works fine in Elasticsearch… --- ## [Elastic Cloud : Option to deploy into a single zone / alternative cloud providers](https://discuss.elastic.co/t/elastic-cloud-option-to-deploy-into-a-single-zone-alternative-cloud-providers/303866)
**Author:** [@devops\_uilicious](https://discuss.elastic.co/u/devops_uilicious)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 3:32am UTC](https://discuss.elastic.co/t/elastic-cloud-option-to-deploy-into-a-single-zone-alternative-cloud-providers/303866 "2022-05-24T03:32:43Z")
We would like to ideally be able to avoid "inter-node" fees by ... deploying all our nodes into a single zone (for the existing GCP/AWS/Azure workload), saving both elastic (and us) the inter networking fees. deploying… --- ## [Parse specific field when JSON filter failed](https://discuss.elastic.co/t/parse-specific-field-when-json-filter-failed/305439)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 2:53am UTC](https://discuss.elastic.co/t/parse-specific-field-when-json-filter-failed/305439 "2022-05-24T02:53:53Z")
I have some logs in JSON format with some offending key-value pairs that cause \_jsonparsefailure. I wanted to leave the log as is and just parse the timestamp. I tried the below config but failed to parse the timestamp f… --- ## [Kibana URL breaking and navigates back to home page](https://discuss.elastic.co/t/kibana-url-breaking-and-navigates-back-to-home-page/305442)
**Author:** [@shyamnguitar](https://discuss.elastic.co/u/shyamnguitar)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 2:48am UTC](https://discuss.elastic.co/t/kibana-url-breaking-and-navigates-back-to-home-page/305442 "2022-05-24T02:48:14Z")
When I run a query and share the URLs to my developers, the URL breaks and goes to home page. The developer who wants to debug has to construct the whole query again from beginning. Thanks folks in advance for any guidan… --- ## [\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\] Encountered a retryable error (will retry with exponential backoff) {:code=\>400, :url=\>"http://127.0.0.1:9200/\_bulk", :content\_length=\>137306}](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-main-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-127-0-0-1-9200-bulk-content-length-137306/305436)
**Author:** [@sunpasup](https://discuss.elastic.co/u/sunpasup)\ **Replies:** 4\ **Last updated:** [May 24, 2022, 2:03am UTC](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-main-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-127-0-0-1-9200-bulk-content-length-137306/305436 "2022-05-24T02:03:29Z")
we are facing above issue while uploading large sets of data from postgres table. based on basic research it looks like, its because of malfunctioned data. how to fix this ? how to identify what data is causing this is… --- ## [Hide weekends for date histogram field in time series in graph](https://discuss.elastic.co/t/hide-weekends-for-date-histogram-field-in-time-series-in-graph/305434)
**Author:** [@monilgangar](https://discuss.elastic.co/u/monilgangar)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 12:54am UTC](https://discuss.elastic.co/t/hide-weekends-for-date-histogram-field-in-time-series-in-graph/305434 "2022-05-24T00:54:51Z")
Our application runs between Monday to Friday... and not on Saturday and Sunday. We are creating a chart in Kibana and using the date histogram field for time series. It is showing the weekends as well in the graph. so… --- ## [Transition time old to new licence](https://discuss.elastic.co/t/transition-time-old-to-new-licence/305394)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 12:46am UTC](https://discuss.elastic.co/t/transition-time-old-to-new-licence/305394 "2022-05-24T00:46:38Z")
Dear Elastic, I have a basic question: What does happen if a gold licence in an onpremises cluster runs out of time (and only e.g. a week later) the new license gets appied? What does not funtion in that 'transition we… --- ## [Max\_terms\_count parameter in Elastic search 6.1](https://discuss.elastic.co/t/max-terms-count-parameter-in-elastic-search-6-1/305413)
**Author:** [@akshay\_chavan](https://discuss.elastic.co/u/akshay_chavan)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 12:40am UTC](https://discuss.elastic.co/t/max-terms-count-parameter-in-elastic-search-6-1/305413 "2022-05-24T00:40:04Z")
We have upgraded Elasticsearch from 6.1 to 7.1 and getting error for max\_terms\_count parameter, can anyone confirm if this parameter was present in ES 6.1 and what is the default value for it ? --- ## [Your Query is taking a while - Kibana](https://discuss.elastic.co/t/your-query-is-taking-a-while-kibana/305417)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 12:22am UTC](https://discuss.elastic.co/t/your-query-is-taking-a-while-kibana/305417 "2022-05-24T00:22:29Z")
Hello All, I'm facing an issue in almost in all my Index when I'm trying to get data more than 1 day. Below is the error screenshot , I'm not sure how to resolve this,any suggestion would be helpful. Note: I've done v… --- ## [Maintenance of the node/cluster in Elasticsearch](https://discuss.elastic.co/t/maintenance-of-the-node-cluster-in-elasticsearch/305366)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 3\ **Last updated:** [May 23, 2022, 10:01pm UTC](https://discuss.elastic.co/t/maintenance-of-the-node-cluster-in-elasticsearch/305366 "2022-05-23T22:01:17Z")
Hello everyone, this time isn't much of a problem, is more like a topic for advice so I hope theres no problem posting it here. Up until now I've been using all the settings of Elasticsearch in default by recommendation… --- ## [Running multiple filebeat instances](https://discuss.elastic.co/t/running-multiple-filebeat-instances/305423)
**Author:** [@justplanenutz](https://discuss.elastic.co/u/justplanenutz)\ **Replies:** 2\ **Last updated:** [May 23, 2022, 8:59pm UTC](https://discuss.elastic.co/t/running-multiple-filebeat-instances/305423 "2022-05-23T20:59:07Z")
We have a system that is very chatty with regard to the number of logs produced. Our current production implementation has a single filebeat container ( in k8s ) running and it is struggling to keep up. We have adjusted … --- ## [Syntax of Elastic.Clients.Elasticsearch](https://discuss.elastic.co/t/syntax-of-elastic-clients-elasticsearch/305433)
**Author:** [@Sjaak](https://discuss.elastic.co/u/Sjaak)\ **Replies:** 0\ **Last updated:** [May 23, 2022, 7:59pm UTC](https://discuss.elastic.co/t/syntax-of-elastic-clients-elasticsearch/305433 "2022-05-23T19:59:02Z")
I can find a lot of examples for Elastic 8.2 'NEST' namespace, but nothing for the new 'Elastic.Clients.Elasticsearch' namespace. For example, this code works, but how to add the second field 'name'. Nothing seems to wo… --- ## [Parsing whole phrase](https://discuss.elastic.co/t/parsing-whole-phrase/305420)
**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\ **Replies:** 3\ **Last updated:** [May 23, 2022, 7:58pm UTC](https://discuss.elastic.co/t/parsing-whole-phrase/305420 "2022-05-23T19:58:01Z")
I'm collecting Windows Applications Event Logs, all of them are multiline and can have a variety of formats. My message field which I would like to match has such format: \[Message: An error occurred while trying to ch… --- ## [How not to duplicate data in Elasticserch](https://discuss.elastic.co/t/how-not-to-duplicate-data-in-elasticserch/305428)
**Author:** [@Daniel\_Oliveira](https://discuss.elastic.co/u/Daniel_Oliveira)\ **Replies:** 1\ **Last updated:** [May 23, 2022, 7:45pm UTC](https://discuss.elastic.co/t/how-not-to-duplicate-data-in-elasticserch/305428 "2022-05-23T19:45:03Z")
Hello gentlemen. I have a logstash pipeline that processes data from a .csv file this file has a column called id how do i not duplicate the data with the same id in case i reprocessed the file or another file that co… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=927) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=929)