# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1778 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1779 --- ## [Difference between the timeout param mentioned in query-string parameters and request body](https://discuss.elastic.co/t/difference-between-the-timeout-param-mentioned-in-query-string-parameters-and-request-body/208217)
**Author:** [@amitmbm](https://discuss.elastic.co/u/amitmbm)\ **Replies:** 0\ **Last updated:** [November 17, 2019, 11:00am UTC](https://discuss.elastic.co/t/difference-between-the-timeout-param-mentioned-in-query-string-parameters-and-request-body/208217 "2019-11-17T11:00:23Z")
I am trying to understand the ES timeout and found different resources which talked about different things. Timeout param in query String As per this ES doc: The timeout parameter tells shards how long they are allowe… --- ## [\_restore shards failed](https://discuss.elastic.co/t/restore-shards-failed/208190)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [November 17, 2019, 8:55am UTC](https://discuss.elastic.co/t/restore-shards-failed/208190 "2019-11-17T08:55:52Z")
Hello World! I just used \_restore (Snapshot And Restore), yet ran into following issue: "shards" : { "total" : 654, "failed" : 6, "successful" : 648 How does one figures out which shards have failed? Please adv… --- ## [Logstash not indexing new files](https://discuss.elastic.co/t/logstash-not-indexing-new-files/208116)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [November 17, 2019, 8:19am UTC](https://discuss.elastic.co/t/logstash-not-indexing-new-files/208116 "2019-11-17T08:19:28Z")
Hi, I have a directory that periodically receive new files from another machine, the files start with cpu and the date, ej: cpu\_2019\_11\_03 and are updated daily. yesterday I create the index in elastic search via logst… --- ## [Unfilled fields](https://discuss.elastic.co/t/unfilled-fields/208188)
**Author:** [@Charlotte\_Mar](https://discuss.elastic.co/u/Charlotte_Mar)\ **Replies:** 1\ **Last updated:** [November 16, 2019, 11:07pm UTC](https://discuss.elastic.co/t/unfilled-fields/208188 "2019-11-16T23:07:31Z")
Hi I am new to elasticsearch and I wanna ask about mapping. If I have the following mapping : { "mappings":{ "properties":{ "customer\_id": {"type": "integer"}, "customer\_name": {"type": "text"}, "city": {"type": … --- ## [Query with wildcard and space not working](https://discuss.elastic.co/t/query-with-wildcard-and-space-not-working/208106)
**Author:** [@Niels\_Brunsgaard](https://discuss.elastic.co/u/Niels_Brunsgaard)\ **Replies:** 2\ **Last updated:** [November 16, 2019, 8:59pm UTC](https://discuss.elastic.co/t/query-with-wildcard-and-space-not-working/208106 "2019-11-16T20:59:31Z")
How do I combine wildcard and spaces in a search? A KQL search for log.message:Core API Request returns expected matches. But log.message:Core API\* does not. I'm happy to use either KQL or Lucene. --- ## [Xpack.security on Elastic Search - error](https://discuss.elastic.co/t/xpack-security-on-elastic-search-error/208160)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 1\ **Last updated:** [November 16, 2019, 6:17pm UTC](https://discuss.elastic.co/t/xpack-security-on-elastic-search-error/208160 "2019-11-16T18:17:04Z")
I generated the P12 file on the Elasticsearch node: sudo ./bin/elasticsearch-certutil cert This file was after generating in /usr /share/elasticsearch ... However, I moved it to /etc/elasticsearch/certs/ I have added… --- ## [Delete phase in the ILM policy](https://discuss.elastic.co/t/delete-phase-in-the-ilm-policy/208178)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 0\ **Last updated:** [November 16, 2019, 5:52pm UTC](https://discuss.elastic.co/t/delete-phase-in-the-ilm-policy/208178 "2019-11-16T17:52:39Z")
A quick question about timing under the delete phase in the ILM policy. Right now (in Kibana), timing for the delete phase has only two options: days from rollover hours from rollover Let's say the hot phase is … --- ## [Select date range with first date criteria?](https://discuss.elastic.co/t/select-date-range-with-first-date-criteria/208036)
**Author:** [@Koen\_Wouters](https://discuss.elastic.co/u/Koen_Wouters)\ **Replies:** 5\ **Last updated:** [November 16, 2019, 5:51pm UTC](https://discuss.elastic.co/t/select-date-range-with-first-date-criteria/208036 "2019-11-16T17:51:04Z")
Hi there, I know how to select a time range in elastic, but would it also be possible to select a time range defining a 'first date' setting. Something like this totally fictional thing : { "range": {"min": {"my\_date":… --- ## [Stats around elasticsearch percolator queries](https://discuss.elastic.co/t/stats-around-elasticsearch-percolator-queries/208175)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 0\ **Last updated:** [November 16, 2019, 4:48pm UTC](https://discuss.elastic.co/t/stats-around-elasticsearch-percolator-queries/208175 "2019-11-16T16:48:54Z")
After the unification of percolators as searches, all the metrics around percolators that were there in 1.x/2.x are gone. It kind of makes it difficult to figure out what's going on in percolation Searches and percolati… --- ## [Abount Transport client VS Rest Client performance](https://discuss.elastic.co/t/abount-transport-client-vs-rest-client-performance/208148)
**Author:** [@acrawlsnail](https://discuss.elastic.co/u/acrawlsnail)\ **Replies:** 4\ **Last updated:** [November 16, 2019, 3:31pm UTC](https://discuss.elastic.co/t/abount-transport-client-vs-rest-client-performance/208148 "2019-11-16T15:31:59Z")
High Level Rest Client Which is implemented over HTTP. Transport Client Which is implemented over Netty.I have read the official performance comparison between Rest Client and Transport Client. Benchmarking REST client a… --- ## [At least one primary shard for the security index is unavailable](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-security-index-is-unavailable/208170)
**Author:** [@kiran\_kumar1](https://discuss.elastic.co/u/kiran_kumar1)\ **Replies:** 0\ **Last updated:** [November 16, 2019, 2:57pm UTC](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-security-index-is-unavailable/208170 "2019-11-16T14:57:02Z")
Hi Team, when am deploying logstash , am getting below issue from kibana dashboard, actually am trying to enabling logstash pipeline {"statusCode":503,"error":"Service Unavailable","message":"at least one primary shard… --- ## [Kibana Monitoring Dashboard showing wrong info](https://discuss.elastic.co/t/kibana-monitoring-dashboard-showing-wrong-info/205605)
**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\ **Replies:** 8\ **Last updated:** [November 16, 2019, 2:26pm UTC](https://discuss.elastic.co/t/kibana-monitoring-dashboard-showing-wrong-info/205605 "2019-11-16T14:26:43Z")
The status of every index is being wrongly shown as Deleted / Closed. But all the indices are very much in Green state. --- ## [How to Disable logstash error logging in syslog](https://discuss.elastic.co/t/how-to-disable-logstash-error-logging-in-syslog/208143)
**Author:** [@arash\_moosavi](https://discuss.elastic.co/u/arash_moosavi)\ **Replies:** 1\ **Last updated:** [November 16, 2019, 2:12pm UTC](https://discuss.elastic.co/t/how-to-disable-logstash-error-logging-in-syslog/208143 "2019-11-16T14:12:04Z")
All Logstash errors logs in /var/log/logstash/\* , but all the error logs of Logstash logs in /var/log/syslog too. Is there any way to disable logging errors of Logstash in /var/log/syslog? --- ## [Hourly indices with ingest pipeline - getting 12 hours always](https://discuss.elastic.co/t/hourly-indices-with-ingest-pipeline-getting-12-hours-always/208158)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 0\ **Last updated:** [November 16, 2019, 12:28pm UTC](https://discuss.elastic.co/t/hourly-indices-with-ingest-pipeline-getting-12-hours-always/208158 "2019-11-16T12:28:28Z")
I'd like to create hourly indices (for test purpose), creating the timestamp suffix in an ingest pipeline, but encountered an issue: it does not matter, which hour I put, I'm getting 12 hours as the result. ES version … --- ## [Min\_score doesn't working with aggs](https://discuss.elastic.co/t/min-score-doesnt-working-with-aggs/208154)
**Author:** [@Sagar\_Kayasth](https://discuss.elastic.co/u/Sagar_Kayasth)\ **Replies:** 0\ **Last updated:** [November 16, 2019, 10:47am UTC](https://discuss.elastic.co/t/min-score-doesnt-working-with-aggs/208154 "2019-11-16T10:47:49Z")
Hello, Can any elastic search member help me for prepare aggregation query with min\_score? In below i wrote my query, and this elastic query run but not getting any document count, but 1000 score documents are availabl… --- ## [Mapping conflict on deleted indices?](https://discuss.elastic.co/t/mapping-conflict-on-deleted-indices/207003)
**Author:** [@Evan\_Ravenelle](https://discuss.elastic.co/u/Evan_Ravenelle)\ **Replies:** 3\ **Last updated:** [November 16, 2019, 11:32am UTC](https://discuss.elastic.co/t/mapping-conflict-on-deleted-indices/207003 "2019-11-16T11:32:31Z")
I am seeing a mapping conflict on "message" field because in some older indices, "message" data type was set to "text" while in others it is "string." This is preventing me from using the field in any sort of analysis i… --- ## [High CPU Usage and Load on Data Nodes](https://discuss.elastic.co/t/high-cpu-usage-and-load-on-data-nodes/206945)
**Author:** [@sunilsaini314](https://discuss.elastic.co/u/sunilsaini314)\ **Replies:** 3\ **Last updated:** [November 16, 2019, 11:29am UTC](https://discuss.elastic.co/t/high-cpu-usage-and-load-on-data-nodes/206945 "2019-11-16T11:29:57Z")
We have 5 nodes cluster -- 3 Master Nodes - 2 Cores, 4 GB RAM - 2 GB Heap 2 Data Nodes - 2 Cores, 16 GB RAM - 8 GB Heap Total Number of primary Shards - Data Nodes are constantly having high CPU(~90%-95%) and load av… --- ## [Minimum Replica Factor](https://discuss.elastic.co/t/minimum-replica-factor/208157)
**Author:** [@Hossein\_Dehghan](https://discuss.elastic.co/u/Hossein_Dehghan)\ **Replies:** 0\ **Last updated:** [November 16, 2019, 11:28am UTC](https://discuss.elastic.co/t/minimum-replica-factor/208157 "2019-11-16T11:28:40Z")
Solr uses a concept called "minimum replication factor parameter (minRf)" which shows that minimum number of shards and primary that a document must be committed. For example, imagine you use minRf=1 for a index and you … --- ## [Capture-now-and-now-15min & Array\_compare condition](https://discuss.elastic.co/t/capture-now-and-now-15min-array-compare-condition/207855)
**Author:** [@Muhammad\_Irfan](https://discuss.elastic.co/u/Muhammad_Irfan)\ **Replies:** 1\ **Last updated:** [November 16, 2019, 10:01am UTC](https://discuss.elastic.co/t/capture-now-and-now-15min-array-compare-condition/207855 "2019-11-16T10:01:15Z")
Dear All, Greetings! I have been working on Watcher and successfully received email notification but want to make changes as per my assignment. So need your assistance and help Task : ELK work as a anti-spam filter an… --- ## [Write curl code in Larval or Linux terminal](https://discuss.elastic.co/t/write-curl-code-in-larval-or-linux-terminal/208147)
**Author:** [@masoud\_fathi](https://discuss.elastic.co/u/masoud_fathi)\ **Replies:** 5\ **Last updated:** [November 16, 2019, 8:38am UTC](https://discuss.elastic.co/t/write-curl-code-in-larval-or-linux-terminal/208147 "2019-11-16T08:38:30Z")
write want this codes in terminal or laravel PUT \_settings { "index": { "blocks": { "read\_only\_allow\_delete": "false" } } } PUT your\_index\_name/\_settings { "index": { "block… --- ## [Scroll with script sorting return endless data](https://discuss.elastic.co/t/scroll-with-script-sorting-return-endless-data/208142)
**Author:** [@chen\_steven](https://discuss.elastic.co/u/chen_steven)\ **Replies:** 1\ **Last updated:** [November 16, 2019, 7:07am UTC](https://discuss.elastic.co/t/scroll-with-script-sorting-return-endless-data/208142 "2019-11-16T07:07:10Z")
ES 7.4.0 Centos 7 ref github issue I would like to do a scroll operation for some data with the sorting of the abs value of the diff between publishTime VS. current system time. In my opinion, the scroll might be: f… --- ## [Es loss applog data](https://discuss.elastic.co/t/es-loss-applog-data/207988)
**Author:** [@gydtc](https://discuss.elastic.co/u/gydtc)\ **Replies:** 5\ **Last updated:** [November 16, 2019, 5:47am UTC](https://discuss.elastic.co/t/es-loss-applog-data/207988 "2019-11-16T05:47:55Z")
my applog is applog -\> kafka -\> logstash -\> es but every day，it will loss 10 sec data during 23:59:50 - 00:00:10 who can help me es 7.4 logstash 7.4 --- ## [Logstash Syntax :: Putting the Value of One Field into Another?](https://discuss.elastic.co/t/logstash-syntax-putting-the-value-of-one-field-into-another/208128)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [November 16, 2019, 4:32am UTC](https://discuss.elastic.co/t/logstash-syntax-putting-the-value-of-one-field-into-another/208128 "2019-11-16T04:32:31Z")
Hey Logstash Maestros, I have a syntax question. Suppose I have this as the input data going into Logstash: FieldA FieldB FieldC ============================== 6 "apples" "bananas" 11 "grapes"… --- ## [Unable to create index and store data to es](https://discuss.elastic.co/t/unable-to-create-index-and-store-data-to-es/208084)
**Author:** [@Akshay\_Sadawarte](https://discuss.elastic.co/u/Akshay_Sadawarte)\ **Replies:** 2\ **Last updated:** [November 16, 2019, 3:36am UTC](https://discuss.elastic.co/t/unable-to-create-index-and-store-data-to-es/208084 "2019-11-16T03:36:33Z")
i have this conf file but unable to create index to es .conf file input { file { path =\> "D:/filelog.txt" sincedb\_path =\> "NUL" }} output { elasticsearch { hosts =\> \["localhost:9200"\] index=\>"logstash"} stdout… --- ## [What OIDs should I use when monitoring routers and switches?](https://discuss.elastic.co/t/what-oids-should-i-use-when-monitoring-routers-and-switches/203293)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 5\ **Last updated:** [November 16, 2019, 3:11am UTC](https://discuss.elastic.co/t/what-oids-should-i-use-when-monitoring-routers-and-switches/203293 "2019-11-16T03:11:14Z")
I'm in the middle of testing to see if we can monitor everything we need to monitor via Elastic Stack. Linux servers have been easy enough to deal with due to Beats, but our networking infrastructure has proven a bit mor… --- ## [Cannot connect to the elasticsearch cluster - 7.4.2](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster-7-4-2/208059)
**Author:** [@hiddensquid](https://discuss.elastic.co/u/hiddensquid)\ **Replies:** 1\ **Last updated:** [November 16, 2019, 1:21am UTC](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster-7-4-2/208059 "2019-11-16T01:21:41Z")
I've had Kibana/Elasticstack/Metricbeat working for a while in a different location. I've tried to install it again with the most recent version copying the config i used the first time. However it would seem whenever i … --- ## [Deleting and recreating index sometimes gives 400 Bad Request error](https://discuss.elastic.co/t/deleting-and-recreating-index-sometimes-gives-400-bad-request-error/207562)
**Author:** [@amkoehler](https://discuss.elastic.co/u/amkoehler)\ **Replies:** 4\ **Last updated:** [November 16, 2019, 1:12am UTC](https://discuss.elastic.co/t/deleting-and-recreating-index-sometimes-gives-400-bad-request-error/207562 "2019-11-16T01:12:25Z")
I'm writing a script using the elasticsearch node JS API for bulk adding indices. Some of these indices may already exist, so I first do a check to see if the index already exists and delete it prior to recreating the in… --- ## [Unable to search all fields for IP address](https://discuss.elastic.co/t/unable-to-search-all-fields-for-ip-address/208141)
**Author:** [@JSkier](https://discuss.elastic.co/u/JSkier)\ **Replies:** 2\ **Last updated:** [November 16, 2019, 12:12am UTC](https://discuss.elastic.co/t/unable-to-search-all-fields-for-ip-address/208141 "2019-11-16T00:12:00Z")
I'm trying to search for an IP (example query on search page: 127.0.0.1), and the results indicate 0. If I put \*.ip:127.0.0.1 it works fine (I get results with desintation and source IPs). My concern and question is, sh… --- ## [Gork filter with custom pattern](https://discuss.elastic.co/t/gork-filter-with-custom-pattern/207919)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 3\ **Last updated:** [November 15, 2019, 10:13pm UTC](https://discuss.elastic.co/t/gork-filter-with-custom-pattern/207919 "2019-11-15T22:13:31Z")
I am trying to aggregate outside logs into ElasticSearch cluster running in Kubernetes. Syslogs get published to logstash instance which forward to elasticsearch instance. Syslogs has pattern Timestamp Serial\_Number:Pro… --- ## [Failed to put mappings on indices metricbeat-6.6.1-2019.11.15](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-metricbeat-6-6-1-2019-11-15/208119)
**Author:** [@drtrask](https://discuss.elastic.co/u/drtrask)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 10:01pm UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-metricbeat-6-6-1-2019-11-15/208119 "2019-11-15T22:01:23Z")
I just performed a rolling update on our elastic cluster from 6.6.1 to 6.8 to 7.4 and now I am no longer creating new indices from metricbeat or auditbeat starting when I upgraded the beats clients from 6.8 to 7.4. The c… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1777) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1779)