# Top **URL:** https://discuss.elastic.co/top.md?page=1003&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1004 --- ## [Log4J socket appender to Beats](https://discuss.elastic.co/t/log4j-socket-appender-to-beats/34000)
**Author:** [@mdconner](https://discuss.elastic.co/u/mdconner)\ **Replies:** 1\ **Last updated:** [November 6, 2015, 10:54pm UTC](https://discuss.elastic.co/t/log4j-socket-appender-to-beats/34000 "2015-11-06T22:54:43Z")
Any plans to support Log4J in Beats as a SocketAppender or some other mechanism besides file? I'd love not to parse log output to ensure data is formatted consistently. Would also like it to support other logging libr… --- ## [Get a document of a specific version?](https://discuss.elastic.co/t/get-a-document-of-a-specific-version/4945)
**Author:** [@ajsie](https://discuss.elastic.co/u/ajsie)\ **Replies:** 1\ **Last updated:** [July 25, 2011, 8:21pm UTC](https://discuss.elastic.co/t/get-a-document-of-a-specific-version/4945 "2011-07-25T20:21:40Z")
Is it possible to get a document of a specific version or can I only read the latest version of a document? --- ## [Failed to start Elasticcluster after adding trial license](https://discuss.elastic.co/t/failed-to-start-elasticcluster-after-adding-trial-license/150780)
**Author:** [@rmadoori](https://discuss.elastic.co/u/rmadoori)\ **Replies:** 8\ **Last updated:** [October 3, 2018, 10:46pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticcluster-after-adding-trial-license/150780 "2018-10-03T22:46:47Z")
Elastic serach container fails after adding trial license key.. logs doesnt show any specific error. Created elasticsearch keystore in /usr/share/elasticsearch/config OpenJDK 64-Bit Server VM warning: Option UseConcMar… --- ## [Passing in complex array as environment variables?](https://discuss.elastic.co/t/passing-in-complex-array-as-environment-variables/233508)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 1:43pm UTC](https://discuss.elastic.co/t/passing-in-complex-array-as-environment-variables/233508 "2020-05-20T13:43:04Z")
Hi there, I'm using the Logstash SNMP input to poll a list of servers with a list of OIDs. We are deploying Logstash in Docker using Ansible, and we try to maintain the code using environment variables passed through t… --- ## [Aggregation quires in Query DSL of add filters in Discover](https://discuss.elastic.co/t/aggregation-quires-in-query-dsl-of-add-filters-in-discover/217923)
**Author:** [@Satish512](https://discuss.elastic.co/u/Satish512)\ **Replies:** 3\ **Last updated:** [February 5, 2020, 12:46pm UTC](https://discuss.elastic.co/t/aggregation-quires-in-query-dsl-of-add-filters-in-discover/217923 "2020-02-05T12:46:01Z")
Hi team, I'm trying to write a query in Query DSL of Add filters in Discover tab. "size": 0, "aggs": { "test": { "nested": { "path": "users" }, "aggs": { "users": { "terms": { "field": "users.username.keyword" … --- ## [Problems doing an \_update\_by\_query with the logstash http output plugin](https://discuss.elastic.co/t/problems-doing-an-update-by-query-with-the-logstash-http-output-plugin/139057)
**Author:** [@Efrain\_Gonzalez](https://discuss.elastic.co/u/Efrain_Gonzalez)\ **Replies:** 3\ **Last updated:** [July 11, 2018, 10:58am UTC](https://discuss.elastic.co/t/problems-doing-an-update-by-query-with-the-logstash-http-output-plugin/139057 "2018-07-11T10:58:48Z")
Using kibana's Dev tools I have a working REST api call POST /unicast-prefixes-x.x.x.x/\_update\_by\_query { "script" : { "source" : "if (ctx.\_source.containsKey('tags')) { ctx.\_source.tags.ad… --- ## [How to delete logs from index which came from a particular IP?](https://discuss.elastic.co/t/how-to-delete-logs-from-index-which-came-from-a-particular-ip/118306)
**Author:** [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Replies:** 3\ **Last updated:** [February 3, 2018, 11:17am UTC](https://discuss.elastic.co/t/how-to-delete-logs-from-index-which-came-from-a-particular-ip/118306 "2018-02-03T11:17:43Z")
Hi folks, I need to delete logs from elasticsearch which came from a particular IP, i ran below query in sense to delete those logs. POST logstash-\*/\_delete\_by\_query { "query": { "match\_phrase": { "src\_i… --- ## [Transport.go:125: ERR SSL client failed to connect with: dial tcp \*.\*.\*.\*:5044: i/o timeout](https://discuss.elastic.co/t/transport-go-125-err-ssl-client-failed-to-connect-with-dial-tcp-5044-i-o-timeout/81813)
**Author:** [@raghuvarma](https://discuss.elastic.co/u/raghuvarma)\ **Replies:** 3\ **Last updated:** [April 11, 2017, 11:03am UTC](https://discuss.elastic.co/t/transport-go-125-err-ssl-client-failed-to-connect-with-dial-tcp-5044-i-o-timeout/81813 "2017-04-11T11:03:56Z")
I am trying to learn and work on ELK stuff. Configured ELK server and it's good so far. Configured file beat in elk client server. To send log files to ELK server, i restarted filebeat service. It restarted with foll… --- ## [Change past dates to today's date while sorting in ElasticSearch](https://discuss.elastic.co/t/change-past-dates-to-todays-date-while-sorting-in-elasticsearch/81268)
**Author:** [@hrishi\_es](https://discuss.elastic.co/u/hrishi_es)\ **Replies:** 3\ **Last updated:** [April 8, 2017, 3:53am UTC](https://discuss.elastic.co/t/change-past-dates-to-todays-date-while-sorting-in-elasticsearch/81268 "2017-04-08T03:53:57Z")
I am trying to sort Elasticsearch index on a date field in asc order. I have two conditions which I need to take care of while sorting. All past dates should be considered as today's date. This matters since I am sort… --- ## [How to get the cluster running status using java elastic API?](https://discuss.elastic.co/t/how-to-get-the-cluster-running-status-using-java-elastic-api/5255)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 3\ **Last updated:** [August 26, 2011, 2:21pm UTC](https://discuss.elastic.co/t/how-to-get-the-cluster-running-status-using-java-elastic-api/5255 "2011-08-26T14:21:40Z")
Hi I want to check whether elastic search server running or not and which state it give me information that server running nicely. Thanks --- ## [Create custom visualization dashboard from the monitoring data?](https://discuss.elastic.co/t/create-custom-visualization-dashboard-from-the-monitoring-data/219185)
**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\ **Replies:** 4\ **Last updated:** [February 17, 2020, 8:02am UTC](https://discuss.elastic.co/t/create-custom-visualization-dashboard-from-the-monitoring-data/219185 "2020-02-17T08:02:16Z")
Hello, I noticed all the graphs under Stackmonitoring/elasticsearch/nodes and was wondering where Kibana gets this data from. Also can I access this data myself and create custom visualizations for my dashboard? Or is th… --- ## [How to set Split Lines when use nested json?](https://discuss.elastic.co/t/how-to-set-split-lines-when-use-nested-json/86955)
**Author:** [@tonghualin](https://discuss.elastic.co/u/tonghualin)\ **Replies:** 4\ **Last updated:** [May 30, 2017, 8:32pm UTC](https://discuss.elastic.co/t/how-to-set-split-lines-when-use-nested-json/86955 "2017-05-30T20:32:41Z")
hello all: kibana version 5.3.0 I want to show chart like this: data format like this is ok. { "\_index": "log20170524", "\_type": "sysinfo", "\_id": "AVw5TnPNslqZOjiWet\_p", "\_score": null, "\_source": { "info": … --- ## [Config Logstash for Syslog](https://discuss.elastic.co/t/config-logstash-for-syslog/77325)
**Author:** [@Senninp](https://discuss.elastic.co/u/Senninp)\ **Replies:** 4\ **Last updated:** [March 7, 2017, 6:58am UTC](https://discuss.elastic.co/t/config-logstash-for-syslog/77325 "2017-03-07T06:58:28Z")
Hi everyone, I would like to know here is my mistake. My config is : Kibana 4.1.1 Elasticsearch 1.7.1 Logstash 1.5.4 I want to catch syslog in my elasticsearch. To do this i configure my logstash like : input { … --- ## [Grok filter help](https://discuss.elastic.co/t/grok-filter-help/43847)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 4\ **Last updated:** [March 9, 2016, 10:15pm UTC](https://discuss.elastic.co/t/grok-filter-help/43847 "2016-03-09T22:15:28Z")
I am seeing this error in my logstash log at \[Source: \[B@1717bb35; line: 1, column: 2\]\>, :level=\>:warn} {:timestamp=\>"2016-03-09T02:07:34.248000+0000", :message=\>"Error parsing json", :source=\>"message", :raw=\>"\<182\>Ma… --- ## [No metric kubernetes.pod.cpu.usage.limit.pct in event output](https://discuss.elastic.co/t/no-metric-kubernetes-pod-cpu-usage-limit-pct-in-event-output/181216)
**Author:** [@Ethan\_Lebioda](https://discuss.elastic.co/u/Ethan_Lebioda)\ **Replies:** 3\ **Last updated:** [May 16, 2019, 2:46pm UTC](https://discuss.elastic.co/t/no-metric-kubernetes-pod-cpu-usage-limit-pct-in-event-output/181216 "2019-05-16T14:46:37Z")
Metricbeat documentation shows that pod level metrics should show kubernetes.pod.cpu.usage.limit.pct. I am using the github reference for setting up metricbeat, but cant see any pod percentages. Only thing showing up for… --- ## [Trouble setting up an elasticsearch cluster](https://discuss.elastic.co/t/trouble-setting-up-an-elasticsearch-cluster/203245)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 6\ **Last updated:** [October 14, 2019, 12:31pm UTC](https://discuss.elastic.co/t/trouble-setting-up-an-elasticsearch-cluster/203245 "2019-10-14T12:31:16Z")
Hi, i'm trying to set up a cluster with 3 nodes es-node1 es-node2 es-node3 installed elasticsearch 7.4 on 3 nodes con configure elasticsearch.yml with the following: cluster.name: es-cluster node.name: es-node1 node… --- ## [Regarding exposing Elastic Search API over https](https://discuss.elastic.co/t/regarding-exposing-elastic-search-api-over-https/57123)
**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\ **Replies:** 4\ **Last updated:** [August 5, 2016, 2:20pm UTC](https://discuss.elastic.co/t/regarding-exposing-elastic-search-api-over-https/57123 "2016-08-05T14:20:11Z")
I've configured http.port to 9200 to query elasticsearch over HTTP , but is it possible to expose elastic search API over https. If so how to configure the same. --- ## [How to reset Fleet / Get a new Service Token?](https://discuss.elastic.co/t/how-to-reset-fleet-get-a-new-service-token/276159)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 2\ **Last updated:** [June 16, 2021, 6:50pm UTC](https://discuss.elastic.co/t/how-to-reset-fleet-get-a-new-service-token/276159 "2021-06-16T18:50:29Z")
Hello, I kind of crashed my fleet setup and needed to remove all agents (including the one providing the fleet "server"). But now I can't create a new Fleet server like in the beginning where it asked me to enter an IP… --- ## [Monitoring could not connect to elasticsearch, failed with xpack monitoring not available](https://discuss.elastic.co/t/monitoring-could-not-connect-to-elasticsearch-failed-with-xpack-monitoring-not-available/124581)
**Author:** [@jasl](https://discuss.elastic.co/u/jasl)\ **Replies:** 2\ **Last updated:** [March 21, 2018, 9:19am UTC](https://discuss.elastic.co/t/monitoring-could-not-connect-to-elasticsearch-failed-with-xpack-monitoring-not-available/124581 "2018-03-21T09:19:07Z")
So I have 2 ES clusters: Main: 6.2 xpack monitoring enabled filebeat Monit 6.2 xpack monitoring disabled kibana with monitoring enabled I can see monitoring data from Main in Monit's kibana (coming from ES i… --- ## [IF ELSE in Logstash INPUT](https://discuss.elastic.co/t/if-else-in-logstash-input/75142)
**Author:** [@froto](https://discuss.elastic.co/u/froto)\ **Replies:** 1\ **Last updated:** [February 15, 2017, 7:02am UTC](https://discuss.elastic.co/t/if-else-in-logstash-input/75142 "2017-02-15T07:02:08Z")
Hey there, at the moment many different systems were sending logs on port 514 Does anyone know if it is possible to declare different type direktly in the input section? Something like: input { udp { port =\> "514… --- ## [Is it possible to filter on multiple fields?](https://discuss.elastic.co/t/is-it-possible-to-filter-on-multiple-fields/23098)
**Author:** [@Ali\_Akhtar](https://discuss.elastic.co/u/Ali_Akhtar)\ **Replies:** 1\ **Last updated:** [April 6, 2015, 3:36am UTC](https://discuss.elastic.co/t/is-it-possible-to-filter-on-multiple-fields/23098 "2015-04-06T03:36:53Z")
Hi there, I'm able to filter on one field at a time, using: client.prepareSearch(index) .setTypes(type) .setQuery( new FilteredQueryBuilder(null, FilterBuilders … --- ## [How to select the newest rows in an ordered result set?](https://discuss.elastic.co/t/how-to-select-the-newest-rows-in-an-ordered-result-set/297598)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 0\ **Last updated:** [February 18, 2022, 10:50am UTC](https://discuss.elastic.co/t/how-to-select-the-newest-rows-in-an-ordered-result-set/297598 "2022-02-18T10:50:44Z")
Hello I have an annoying problem with Elasticsearch SQL I hope someone can help me with. Elasticsearch is version 7.17.0 and it will soon be upgraded to 8.0.0. We collect package data from Linux hosts with the auditbea… --- ## [Shard reallocation after rolling restart](https://discuss.elastic.co/t/shard-reallocation-after-rolling-restart/87748)
**Author:** [@alsyia](https://discuss.elastic.co/u/alsyia)\ **Replies:** 2\ **Last updated:** [June 2, 2017, 2:32pm UTC](https://discuss.elastic.co/t/shard-reallocation-after-rolling-restart/87748 "2017-06-02T14:32:25Z")
Hi there, I just performed a rolling restart of my cluster (I needed to update a plugin), following the doc. I disabled shard allocation, restarted one node, waited until it joined the cluster, reenabled allocation, wa… --- ## [Sysmon v.11 and new 'file delete' event without archive](https://discuss.elastic.co/t/sysmon-v-11-and-new-file-delete-event-without-archive/236141)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 3\ **Last updated:** [June 11, 2020, 8:46am UTC](https://discuss.elastic.co/t/sysmon-v-11-and-new-file-delete-event-without-archive/236141 "2020-06-11T08:46:13Z")
Anyone know if it's possible to configure Windows Sysmon v.11's new 'File Delete' event not to archive a copy of deleted files in the 'ArchiveDirectory' config key directory (as config key has a default value: Sysmon, he… --- ## [Y-Axis not sorting Ascending or Descending on Vega-Lite](https://discuss.elastic.co/t/y-axis-not-sorting-ascending-or-descending-on-vega-lite/191902)
**Author:** [@BrunoSdeMenezes](https://discuss.elastic.co/u/BrunoSdeMenezes)\ **Replies:** 3\ **Last updated:** [July 24, 2019, 7:28pm UTC](https://discuss.elastic.co/t/y-axis-not-sorting-ascending-or-descending-on-vega-lite/191902 "2019-07-24T19:28:41Z")
Hello There, I'm trying to plot a graph using Vega-Lite, everything works fine, but I need the Y-axis to be reversed. The most recent date on top and the older dates on bottom. I've tried use the sort, but nothing seems… --- ## [Search in both parent and child](https://discuss.elastic.co/t/search-in-both-parent-and-child/83015)
**Author:** [@Jul](https://discuss.elastic.co/u/Jul)\ **Replies:** 3\ **Last updated:** [April 21, 2017, 9:23am UTC](https://discuss.elastic.co/t/search-in-both-parent-and-child/83015 "2017-04-21T09:23:31Z")
Hey, I'm looking for a solution for the following problem, maybe someone can help me: I'd like to index documents with a parent-child relationship and be able to search for parent-documents where the search string (pro… --- ## [Logstash-plugin install logstash-output-elasticsearch 5.1.0 installs logstash-output-elasticsearch-java 5.1.0](https://discuss.elastic.co/t/logstash-plugin-install-logstash-output-elasticsearch-5-1-0-installs-logstash-output-elasticsearch-java-5-1-0/59921)
**Author:** [@gpaggi](https://discuss.elastic.co/u/gpaggi)\ **Replies:** 3\ **Last updated:** [September 7, 2016, 5:08pm UTC](https://discuss.elastic.co/t/logstash-plugin-install-logstash-output-elasticsearch-5-1-0-installs-logstash-output-elasticsearch-java-5-1-0/59921 "2016-09-07T17:08:47Z")
Hi, I'm in the process of upgrading to 2.4.0 and wanted to test the new version of the output plugin to elastic. On a fresh install installing logstash-output-elasticsearch 5.1.0 installs instead logstash-output-elasti… --- ## [Overriding default analyzer broken](https://discuss.elastic.co/t/overriding-default-analyzer-broken/54205)
**Author:** [@mitchswaldman](https://discuss.elastic.co/u/mitchswaldman)\ **Replies:** 3\ **Last updated:** [July 5, 2016, 6:27am UTC](https://discuss.elastic.co/t/overriding-default-analyzer-broken/54205 "2016-07-05T06:27:01Z")
Hello! I'm curious how to override the default analyzer and tokenizer via a template. I'm upgrading a plugin to be compatible with ES 5.0, and prior to the upgrade this template of ours wasn't giving any issues: { "… --- ## [Create Horizontal pod autoscaling for elasticsearch in kubernetes (eck operator)](https://discuss.elastic.co/t/create-horizontal-pod-autoscaling-for-elasticsearch-in-kubernetes-eck-operator/227753)
**Author:** [@kumar\_kung](https://discuss.elastic.co/u/kumar_kung)\ **Replies:** 5\ **Last updated:** [April 13, 2020, 12:03pm UTC](https://discuss.elastic.co/t/create-horizontal-pod-autoscaling-for-elasticsearch-in-kubernetes-eck-operator/227753 "2020-04-13T12:03:31Z")
ECK = 1.0.0 ga Cloud= EKS Kibana version : 7.5.2 Elasticsearch version : 7.5.2 EKS: 1.15 Please provide details for Horizontal pod autoscaling for elasticsearch in kubernetes (eck operator) --- ## [Speedup Migration/shard allocation on hot warm nodes](https://discuss.elastic.co/t/speedup-migration-shard-allocation-on-hot-warm-nodes/162206)
**Author:** [@arvind297](https://discuss.elastic.co/u/arvind297)\ **Replies:** 5\ **Last updated:** [January 2, 2019, 5:42am UTC](https://discuss.elastic.co/t/speedup-migration-shard-allocation-on-hot-warm-nodes/162206 "2019-01-02T05:42:01Z")
Hi, While migrating the indices older than number of days from hot to warm,I beleive setting replica to 0(I know it is bit risky) can speed up the migration of indices,Please suggest if there is any other way(any param… --- ## [Cloud UI logs url point to undefined app](https://discuss.elastic.co/t/cloud-ui-logs-url-point-to-undefined-app/90071)
**Author:** [@JohnnyB](https://discuss.elastic.co/u/JohnnyB)\ **Replies:** 5\ **Last updated:** [June 21, 2017, 5:08pm UTC](https://discuss.elastic.co/t/cloud-ui-logs-url-point-to-undefined-app/90071 "2017-06-21T17:08:07Z")
Hi ECE Team, I'm runing some tests on ECE. I create some cluster but when I try to see logs in the Cluster / tab / Overview, links are pointing to some /undefined/app/kibana Example for the elasticsearch logs : h… --- ## [Display of various reports ready for download](https://discuss.elastic.co/t/display-of-various-reports-ready-for-download/90103)
**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\ **Replies:** 5\ **Last updated:** [June 26, 2017, 5:44pm UTC](https://discuss.elastic.co/t/display-of-various-reports-ready-for-download/90103 "2017-06-26T17:44:44Z")
Hello there, I generated a number of reports a week ago. X-Pack is writing at the top of the screen that: "Your report for the .... dashboard is ready! Pick it up from Management-\> Kibana-\> Reporting". After downloadi… --- ## [Shield license](https://discuss.elastic.co/t/shield-license/58910)
**Author:** [@dkspace](https://discuss.elastic.co/u/dkspace)\ **Replies:** 5\ **Last updated:** [August 30, 2016, 6:49am UTC](https://discuss.elastic.co/t/shield-license/58910 "2016-08-30T06:49:10Z")
Dear colleagues. could you clarify : does Shield work with "type" : "basic" license "license" : { "status" : "active", "uid" : "blablabla", "type" : "basic", .... In my case i see that Shield loaded \[2016… --- ## [Is it possible to index Files (PDF, DOC, PPT) using App Search?](https://discuss.elastic.co/t/is-it-possible-to-index-files-pdf-doc-ppt-using-app-search/254213)
**Author:** [@ELKUser111](https://discuss.elastic.co/u/ELKUser111)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 1:24pm UTC](https://discuss.elastic.co/t/is-it-possible-to-index-files-pdf-doc-ppt-using-app-search/254213 "2020-11-04T13:24:01Z")
I would like to use App Search for searching files from the server folder, Is it possible to feed this to Elastic Enterprise Search - App Search as a document using ingest-attachment-plugin. My server is NodeJS, also I … --- ## [Duplicate records in indexes](https://discuss.elastic.co/t/duplicate-records-in-indexes/194443)
**Author:** [@SirJune](https://discuss.elastic.co/u/SirJune)\ **Replies:** 4\ **Last updated:** [August 20, 2019, 9:00pm UTC](https://discuss.elastic.co/t/duplicate-records-in-indexes/194443 "2019-08-20T21:00:06Z")
HI, I have logstash running connecting/reading records from MySQL DB. I have 7 records in a timeframe (say: 01:00:00 - 01:01:00) I have this config file: tracking\_column =\> "datetime" use\_column\_value =\>true stateme… --- ## [Unable to retrieve data through Elasticsearch](https://discuss.elastic.co/t/unable-to-retrieve-data-through-elasticsearch/162584)
**Author:** [@Srikar\_Rampally](https://discuss.elastic.co/u/Srikar_Rampally)\ **Replies:** 4\ **Last updated:** [January 2, 2019, 7:55am UTC](https://discuss.elastic.co/t/unable-to-retrieve-data-through-elasticsearch/162584 "2019-01-02T07:55:09Z")
I'm able to perform all crud operations but whenever I tried to retrieve information through Elasticsearch I'm unable to do so. GET http://localhost:8080/topics/ { "id": "1", "name": "Java", "desc": "Java Language … --- ## [Canvas - Unexpected error from Elasticsearch: \[illegal\_argument\_exception\] Illegal Capacity: -2](https://discuss.elastic.co/t/canvas-unexpected-error-from-elasticsearch-illegal-argument-exception-illegal-capacity-2/204042)
**Author:** [@abdulsofts](https://discuss.elastic.co/u/abdulsofts)\ **Replies:** 7\ **Last updated:** [October 23, 2019, 11:53am UTC](https://discuss.elastic.co/t/canvas-unexpected-error-from-elasticsearch-illegal-argument-exception-illegal-capacity-2/204042 "2019-10-23T11:53:38Z")
Hi, This is w.r.t an error observed in Canvas dashboard containing a elsql. We are getting below error: Unexpected error from Elasticsearch: \[illegal\_argument\_exception\] Illegal Capacity: -2 Please note that the index… --- ## [The count and index\_total not same , why?](https://discuss.elastic.co/t/the-count-and-index-total-not-same-why/155639)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 7\ **Last updated:** [November 7, 2018, 9:00am UTC](https://discuss.elastic.co/t/the-count-and-index-total-not-same-why/155639 "2018-11-07T09:00:30Z")
with cerebro show the index stats . i find the count and the index\_total not same.. { "\_shards": { "total": 84, "successful": 84, "failed": 0 }, "\_all": { "primaries": { "docs": { "… --- ## [Scripted Date Aggs](https://discuss.elastic.co/t/scripted-date-aggs/35338)
**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\ **Replies:** 7\ **Last updated:** [November 25, 2015, 1:55am UTC](https://discuss.elastic.co/t/scripted-date-aggs/35338 "2015-11-25T01:55:24Z")
Hello, How can I take my @timestamp field and get the hourOfDay count over a period? In other words I would like to see how many records have a timestamp for each hour of the day. I am running elasticsearch 2.0 T… --- ## [Using field or field.keyword errors](https://discuss.elastic.co/t/using-field-or-field-keyword-errors/200928)
**Author:** [@pmarques](https://discuss.elastic.co/u/pmarques)\ **Replies:** 2\ **Last updated:** [September 26, 2019, 7:33pm UTC](https://discuss.elastic.co/t/using-field-or-field-keyword-errors/200928 "2019-09-26T19:33:14Z")
Hello all, Could you help me decipher this? The issue is the use of field/field.keyword Not sure where to start... Well ES 7.3 Note: There are some "-------------- \>\>\>" marks in this message. I hope you find it D… --- ## [Return the buckets size after performing aggregations](https://discuss.elastic.co/t/return-the-buckets-size-after-performing-aggregations/174349)
**Author:** [@elk\_user188](https://discuss.elastic.co/u/elk_user188)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 8:22am UTC](https://discuss.elastic.co/t/return-the-buckets-size-after-performing-aggregations/174349 "2019-04-01T08:22:26Z")
Hi there! I'd like to know the size of the buckets array so as to visualize it (as a metric for example). Let's say I have an index generated as follows: PUT hockey/player/\_bulk?refresh {"index":{"\_id":1}} {"first":"j… --- ## [Can't crontab curator](https://discuss.elastic.co/t/cant-crontab-curator/81819)
**Author:** [@Mohammad\_Ramadan\_Abd](https://discuss.elastic.co/u/Mohammad_Ramadan_Abd)\ **Replies:** 6\ **Last updated:** [April 13, 2017, 4:27pm UTC](https://discuss.elastic.co/t/cant-crontab-curator/81819 "2017-04-13T16:27:57Z")
Hi... I am installing my ELK and I need to rotate the logs in the server. now i have ELK 4.5, and to do this log rotation I've used the curator (3.4.1-1) which works very good but that's manual for example sudo curator … --- ## [Es2.3.3 OOM,someone help](https://discuss.elastic.co/t/es2-3-3-oom-someone-help/56574)
**Author:** [@win1027](https://discuss.elastic.co/u/win1027)\ **Replies:** 6\ **Last updated:** [August 2, 2016, 1:55pm UTC](https://discuss.elastic.co/t/es2-3-3-oom-someone-help/56574 "2016-08-02T13:55:56Z")
this is my es jvm config: -Xms30g -Xmx30g -Djava.awt.headless=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+PrintGCDetails -XX:+PrintGCTimeSta… --- ## [Elastic Search is always status red when I restart with no data in index](https://discuss.elastic.co/t/elastic-search-is-always-status-red-when-i-restart-with-no-data-in-index/14991)
**Author:** [@Sam\_Millman](https://discuss.elastic.co/u/Sam_Millman)\ **Replies:** 6\ **Last updated:** [December 22, 2013, 10:05pm UTC](https://discuss.elastic.co/t/elastic-search-is-always-status-red-when-i-restart-with-no-data-in-index/14991 "2013-12-22T22:05:51Z")
This topic is heavily linked to: http://stackoverflow.com/questions/20729704/cannot-seem-to-restart-elastic-search-without-red-status Using the data there, the exact log I kept getting red status whenever I restar… --- ## [Nested Type in Kibana](https://discuss.elastic.co/t/nested-type-in-kibana/169980)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 8\ **Last updated:** [March 8, 2019, 9:26am UTC](https://discuss.elastic.co/t/nested-type-in-kibana/169980 "2019-03-08T09:26:50Z")
Hi I'm using Kibana 5.6.13 and I'm having nested type as below { "test": { "mappings": { "sessions": { "properties": { "appdata": { "type": "nested", "properties": { "accessType": {… --- ## [Metricbeats autodiscovery failing in kubernetes](https://discuss.elastic.co/t/metricbeats-autodiscovery-failing-in-kubernetes/147071)
**Author:** [@Alex\_Armstrong](https://discuss.elastic.co/u/Alex_Armstrong)\ **Replies:** 8\ **Last updated:** [September 12, 2018, 2:13pm UTC](https://discuss.elastic.co/t/metricbeats-autodiscovery-failing-in-kubernetes/147071 "2018-09-12T14:13:02Z")
Autodiscover not working for metricbeat 6.4.0 in kubernetes 1.9.6. Nginx module in this use case, uwsgi also tried. Declaring the module and giving an nginx ip outside of autodiscover works. below is the configmap bein… --- ## [Clear Cache After Bulk Insertion](https://discuss.elastic.co/t/clear-cache-after-bulk-insertion/111081)
**Author:** [@shemilr](https://discuss.elastic.co/u/shemilr)\ **Replies:** 8\ **Last updated:** [December 12, 2017, 11:07am UTC](https://discuss.elastic.co/t/clear-cache-after-bulk-insertion/111081 "2017-12-12T11:07:21Z")
I am creating index which have 1 million data. I have many indexes with similar size. After creatng some indexes, this bulk insertion is too slow. If we are restarting the elasticsearch service in server, insert will be … --- ## [Support Diagnostic Tool failing](https://discuss.elastic.co/t/support-diagnostic-tool-failing/293999)
**Author:** [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Replies:** 3\ **Last updated:** [February 19, 2022, 9:11am UTC](https://discuss.elastic.co/t/support-diagnostic-tool-failing/293999 "2022-02-19T09:11:34Z")
I'm trying to run diagnostics-8.2.6 on my ES node running on Openshift 4.6 with Elastic Stack version 7.16.2. The command being used is: ./diagnostics.sh --host logging-es --port 9200 --type local -u ayush.mathur --ssl… --- ## [Shard fails because of java.lang.IllegalStateException: A document doesn't have a value for a field!](https://discuss.elastic.co/t/shard-fails-because-of-java-lang-illegalstateexception-a-document-doesnt-have-a-value-for-a-field/224440)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 8:54am UTC](https://discuss.elastic.co/t/shard-fails-because-of-java-lang-illegalstateexception-a-document-doesnt-have-a-value-for-a-field/224440 "2020-03-30T08:54:37Z")
Hi, I am using Elasticsearch and Kibana in version 7.6.1, which I migrated from 6.8.5 I have a scripted field: // user String path = doc\['logmessage.keyword'\].value; String logger = doc\['logger.keyword'\].value; if… --- ## [Xpack source project](https://discuss.elastic.co/t/xpack-source-project/69263)
**Author:** [@mlkmhd](https://discuss.elastic.co/u/mlkmhd)\ **Replies:** 3\ **Last updated:** [December 16, 2016, 9:33am UTC](https://discuss.elastic.co/t/xpack-source-project/69263 "2016-12-16T09:33:05Z")
Hi everyone I'm new in xpack project. I interested in xpack graph copabilities and I want to view and download source code of this project. where is the source code of xpack graph project? thanks [Previous page](https://discuss.elastic.co/top.md?page=1002&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1004&per_page=50&period=all)