# Top **URL:** https://discuss.elastic.co/top.md?page=1014&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1015 --- ## [\[ANN\] Elasticsearch Curator 0.1 released](https://discuss.elastic.co/t/ann-elasticsearch-curator-0-1-released/37641)
**Author:** [@dapicard](https://discuss.elastic.co/u/dapicard)\ **Replies:** 3\ **Last updated:** [December 21, 2015, 9:28am UTC](https://discuss.elastic.co/t/ann-elasticsearch-curator-0-1-released/37641 "2015-12-21T09:28:24Z")
Hi, I am pleased to announce the release of the Elasticsearch Curator, version 0.1. The Elasticsearch Curator adds the facility to close/delete time-based indices with some simples rules as : { curator: \[ { … --- ## [\[resolved\] Error when trying to build packetbeat from sources](https://discuss.elastic.co/t/resolved-error-when-trying-to-build-packetbeat-from-sources/27137)
**Author:** [@Keylor42](https://discuss.elastic.co/u/Keylor42)\ **Replies:** 3\ **Last updated:** [August 11, 2015, 1:35pm UTC](https://discuss.elastic.co/t/resolved-error-when-trying-to-build-packetbeat-from-sources/27137 "2015-08-11T13:35:51Z")
Hello everyone, I would like to implement the memcached protocol for Packetbeat and so to begin I try to compile packetbeat from the github sources. But when I run make, I have some errors and I can't find a solution a… --- ## [Problem in ElasticSearch Analyzer using Java API](https://discuss.elastic.co/t/problem-in-elasticsearch-analyzer-using-java-api/9826)
**Author:** [@smhdiu](https://discuss.elastic.co/u/smhdiu)\ **Replies:** 3\ **Last updated:** [November 27, 2012, 2:33pm UTC](https://discuss.elastic.co/t/problem-in-elasticsearch-analyzer-using-java-api/9826 "2012-11-27T14:33:05Z")
Hello, following is my java code to create index using the mappings and settings. however its creating the index with given name but when we run following command curl -XGET 'http://localhost:9200/test/test/\_ma… --- ## [Searchable snapshots in ECK - Enterprise license only?](https://discuss.elastic.co/t/searchable-snapshots-in-eck-enterprise-license-only/264138)
**Author:** [@sc75651](https://discuss.elastic.co/u/sc75651)\ **Replies:** 1\ **Last updated:** [February 12, 2021, 2:12pm UTC](https://discuss.elastic.co/t/searchable-snapshots-in-eck-enterprise-license-only/264138 "2021-02-12T14:12:11Z")
Is Searchable snapshots in ECK - Enterprise license only? --- ## [Service Filebeat failed to start](https://discuss.elastic.co/t/service-filebeat-failed-to-start/59738)
**Author:** [@ashraf1390](https://discuss.elastic.co/u/ashraf1390)\ **Replies:** 1\ **Last updated:** [September 5, 2016, 5:48am UTC](https://discuss.elastic.co/t/service-filebeat-failed-to-start/59738 "2016-09-05T05:48:14Z")
Installed filebeat on Centos7 client, edit yaml file and filebeat fails to start.. below is error message kindly help.. \[x201@localhost ~\]$ sudo systemctl status filebeat -l â filebeat.service - filebeat Loaded: loa… --- ## [Kibana geopoint is not working](https://discuss.elastic.co/t/kibana-geopoint-is-not-working/36343)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 1\ **Last updated:** [December 8, 2015, 9:46am UTC](https://discuss.elastic.co/t/kibana-geopoint-is-not-working/36343 "2015-12-08T09:46:44Z")
Hello, I am loading the information from my webserver to elasticsearch using packetbeats and when I am trying your dashboards on the geopoint visualization I am getting an error saying the following: Visualize: Expecte… --- ## [HELP! Kibana Error Connecting to ES on Docker - Cannot Revive Connection](https://discuss.elastic.co/t/help-kibana-error-connecting-to-es-on-docker-cannot-revive-connection/194347)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 2:41pm UTC](https://discuss.elastic.co/t/help-kibana-error-connecting-to-es-on-docker-cannot-revive-connection/194347 "2019-08-09T14:41:55Z")
Hello, I keep on getting the following error {"type":"log","@timestamp":"2019-08-08T02:52:45Z","tags":\["warning","elasticsearch","admin"\],"pid":1,"message":"No living connections"} {"type":"log","@timestamp":"2019-08-0… --- ## [\[RESOLVED\] Remove all old indices with Curator](https://discuss.elastic.co/t/resolved-remove-all-old-indices-with-curator/64438)
**Author:** [@apelsina](https://discuss.elastic.co/u/apelsina)\ **Replies:** 2\ **Last updated:** [October 31, 2016, 4:01pm UTC](https://discuss.elastic.co/t/resolved-remove-all-old-indices-with-curator/64438 "2016-10-31T16:01:44Z")
Hi all! I am trying to use Curator to manage my indices. All I need now is to remove all indices older than several days. I am able to define a pattern with every specific index name and it worked. But all I want is ac… --- ## [Count request does not support \[filter\]. Why?](https://discuss.elastic.co/t/count-request-does-not-support-filter-why/18210)
**Author:** [@Andrew\_Gaydenko](https://discuss.elastic.co/u/Andrew_Gaydenko)\ **Replies:** 2\ **Last updated:** [June 20, 2014, 8:38am UTC](https://discuss.elastic.co/t/count-request-does-not-support-filter-why/18210 "2014-06-20T08:38:46Z")
Count request does not support \[filter\]. Why? How to count with the same filter (except for "size", "fields", "from") and query I'm probably going to search hits after counting? -- You received this message beca… --- ## [Attachment-mapper - changing analyzer](https://discuss.elastic.co/t/attachment-mapper-changing-analyzer/39379)
**Author:** [@leewadhams](https://discuss.elastic.co/u/leewadhams)\ **Replies:** 6\ **Last updated:** [June 13, 2017, 8:03pm UTC](https://discuss.elastic.co/t/attachment-mapper-changing-analyzer/39379 "2017-06-13T20:03:07Z")
How do I change the analyzer of the content field for an attachment property? I'm trying to do it using the .Net Nest client with: .AddMapping(m =\> m.MapFromAttributes()) and decorating my Attachment class with: \[El… --- ## [Split brain problem in 2 node elasticsearch cluster](https://discuss.elastic.co/t/split-brain-problem-in-2-node-elasticsearch-cluster/23524)
**Author:** [@Gourav\_H\_Dhelaria](https://discuss.elastic.co/u/Gourav_H_Dhelaria)\ **Replies:** 6\ **Last updated:** [May 5, 2015, 8:57am UTC](https://discuss.elastic.co/t/split-brain-problem-in-2-node-elasticsearch-cluster/23524 "2015-05-05T08:57:17Z")
Version: 1.4. Say there are 2 nodes X and Y, both capable of becoming master. When network goes down, both nodes get disconnected from each other and assume the responsibility of master. When network is restor… --- ## [Data stream resilience](https://discuss.elastic.co/t/data-stream-resilience/320166)
**Author:** [@lukaszst](https://discuss.elastic.co/u/lukaszst)\ **Replies:** 6\ **Last updated:** [December 1, 2022, 9:58am UTC](https://discuss.elastic.co/t/data-stream-resilience/320166 "2022-12-01T09:58:23Z")
Hello I'm migrating indices-\>datastreams in relatively large elastic cluster (15 data nodes, 80k docs per second). For our current indices-based setup we used to monitor if currently used index get red to create new in… --- ## [Update where condition in elasticsearch](https://discuss.elastic.co/t/update-where-condition-in-elasticsearch/151646)
**Author:** [@amit.patra](https://discuss.elastic.co/u/amit.patra)\ **Replies:** 4\ **Last updated:** [October 22, 2018, 5:04am UTC](https://discuss.elastic.co/t/update-where-condition-in-elasticsearch/151646 "2018-10-22T05:04:04Z")
Hi, We have thousand of records like below json. { "\_index": "commusat.mms\_cri", "\_type": "doc", "\_id": "pcolWGYBbjbfpczOv192", "\_version": 1, "\_score": null, "\_source": { "id": "236e66510e049b70", "case\_name"… --- ## [Applying license illegal\_argument\_exception unknown setting \[index.license.expiry\_date\_in\_millis\]](https://discuss.elastic.co/t/applying-license-illegal-argument-exception-unknown-setting-index-license-expiry-date-in-millis/111912)
**Author:** [@undelete](https://discuss.elastic.co/u/undelete)\ **Replies:** 4\ **Last updated:** [December 15, 2017, 10:04am UTC](https://discuss.elastic.co/t/applying-license-illegal-argument-exception-unknown-setting-index-license-expiry-date-in-millis/111912 "2017-12-15T10:04:42Z")
Hi, I am trying to apply basic license to my elastic. I just downloaded the license as a license for version 5.x/6.x. Running this command: curl -XPUT -u elastic 'http://localhost:9200/\_xpack\_license' -H "Content-Type… --- ## [Repository-gcs plugin and tls/ssl transit encryption](https://discuss.elastic.co/t/repository-gcs-plugin-and-tls-ssl-transit-encryption/88132)
**Author:** [@patM](https://discuss.elastic.co/u/patM)\ **Replies:** 4\ **Last updated:** [June 5, 2017, 12:32am UTC](https://discuss.elastic.co/t/repository-gcs-plugin-and-tls-ssl-transit-encryption/88132 "2017-06-05T00:32:06Z")
Wondering if the repository-gcs plugin is tls/ssl able for data transit to an encrypted gcs bucket? I assume it pushes data in the clear: https://www.elastic.co/guide/en/elasticsearch/plugins/current/repository-gcs-usa… --- ## [LogStash: IdentityMapCodec has reached 100% capacity](https://discuss.elastic.co/t/logstash-identitymapcodec-has-reached-100-capacity/44473)
**Author:** [@lohith](https://discuss.elastic.co/u/lohith)\ **Replies:** 1\ **Last updated:** [April 1, 2016, 10:09am UTC](https://discuss.elastic.co/t/logstash-identitymapcodec-has-reached-100-capacity/44473 "2016-04-01T10:09:51Z")
In the Logstash logs, I see lots of errors such as like IdentityMapCodec has reached 100% capacity" and stops prcessing mesages . message=\>"IdentityMapCodec has reached 100% capacity", :current\_size=\>20000, :upper\_lim… --- ## [Kibana won't start up after upgrading to 7.2.0](https://discuss.elastic.co/t/kibana-wont-start-up-after-upgrading-to-7-2-0/191128)
**Author:** [@aimarjg](https://discuss.elastic.co/u/aimarjg)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 6:53am UTC](https://discuss.elastic.co/t/kibana-wont-start-up-after-upgrading-to-7-2-0/191128 "2019-07-18T06:53:33Z")
Hi, I'm having trouble starting up kibana after upgrading to 7.2.0; It is throwing following logs: {"type":"log","@timestamp":"2019-07-18T07:39:48Z","tags":\["reporting","debug"\],"pid":15699,"message":"Running on o… --- ## [Elastic Search cannot login after disk full (\>90%)](https://discuss.elastic.co/t/elastic-search-cannot-login-after-disk-full-90/317511)
**Author:** [@zahir](https://discuss.elastic.co/u/zahir)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 6:42am UTC](https://discuss.elastic.co/t/elastic-search-cannot-login-after-disk-full-90/317511 "2022-11-08T06:42:01Z")
I suddenly unable to login Elastic Search after my snapshot backup is failed. I perform the snapshot backup after disk usage is more than 90%. Now my snapshot failed and my disk is 100% usage. Appreciate if anyone f… --- ## [Uniform Time Formats](https://discuss.elastic.co/t/uniform-time-formats/192678)
**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\ **Replies:** 5\ **Last updated:** [July 30, 2019, 4:56am UTC](https://discuss.elastic.co/t/uniform-time-formats/192678 "2019-07-30T04:56:33Z")
I have the following 2 fields with different formats in the input. End Time: 2019-07-26 00:00:05,580 Start Time: 2019-07-26T00:00:02.678+02:100: I want them to be formatted to a uniform timestamp say YYYY-MM-dd HH:mm:… --- ## [How to improve Performance](https://discuss.elastic.co/t/how-to-improve-performance/107167)
**Author:** [@yoga-sara](https://discuss.elastic.co/u/yoga-sara)\ **Replies:** 5\ **Last updated:** [November 14, 2017, 6:46am UTC](https://discuss.elastic.co/t/how-to-improve-performance/107167 "2017-11-14T06:46:01Z")
Hi, I want to know which improves performance. I have two methods like below, single pipeline with single filter having multiple plugin. 2.Single conf having multiple pipeline (multiple filter and multiple output) T… --- ## [COMBINEDAPACHELOG And COMMONAPACHELOG query](https://discuss.elastic.co/t/combinedapachelog-and-commonapachelog-query/99187)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 5\ **Last updated:** [September 3, 2017, 9:05am UTC](https://discuss.elastic.co/t/combinedapachelog-and-commonapachelog-query/99187 "2017-09-03T09:05:50Z")
Hi Guys, I have this basic query and I would really appreciate if someone can answer this for me? COMBINEDAPACHELOG can that be used directly in logstash or do I need to create COMBINEDAPACHELOG pattern under patterns … --- ## [Speed up when logstash is running](https://discuss.elastic.co/t/speed-up-when-logstash-is-running/80383)
**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\ **Replies:** 5\ **Last updated:** [March 30, 2017, 5:15am UTC](https://discuss.elastic.co/t/speed-up-when-logstash-is-running/80383 "2017-03-30T05:15:28Z")
Question1: My Current CPU utilization is only 10% in my 36-core aws server, how can i increase it to say 80%? I am using logstash and ES 5.1.1. ES is a standard server with 4 nodes. Input is S3 buckets, with thousands… --- ## [Discovery Service for Unit Testing?](https://discuss.elastic.co/t/discovery-service-for-unit-testing/52599)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 5\ **Last updated:** [June 15, 2016, 9:53am UTC](https://discuss.elastic.co/t/discovery-service-for-unit-testing/52599 "2016-06-15T09:53:04Z")
I've written some monitoring stuff that I'd really like to be able to unit test. To do this well, it requires me to be able to run up a multi-node cluster. As far as I understand it, I can run up multiple nodes with … --- ## [Kibana: is it possible to configure a "read only" filter](https://discuss.elastic.co/t/kibana-is-it-possible-to-configure-a-read-only-filter/20820)
**Author:** [@abr](https://discuss.elastic.co/u/abr)\ **Replies:** 5\ **Last updated:** [November 18, 2014, 9:09pm UTC](https://discuss.elastic.co/t/kibana-is-it-possible-to-configure-a-read-only-filter/20820 "2014-11-18T21:09:00Z")
Hello, I'm using Kinana 3 and I'm looking for a way to set dashboard based on some user id. The user IDs are indexed so by filtering or querying it is possible to provide a kind of restricted view of the data. … --- ## [Showing image in markdown with api call](https://discuss.elastic.co/t/showing-image-in-markdown-with-api-call/272906)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 3\ **Last updated:** [May 18, 2021, 9:34pm UTC](https://discuss.elastic.co/t/showing-image-in-markdown-with-api-call/272906 "2021-05-18T21:34:41Z")
hi i am trying to show s3 images in Kibana markdown if i direct pass image URL like below , its showing image without any issue - !\[test\](imageurl) But i m using signed URL , for that i m passing API path in markdown … --- ## [Kibana 7.8.0. Empty csv report](https://discuss.elastic.co/t/kibana-7-8-0-empty-csv-report/239500)
**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 4:16pm UTC](https://discuss.elastic.co/t/kibana-7-8-0-empty-csv-report/239500 "2020-07-07T16:16:08Z")
After upgrading to 7.8.0 about 90 % of cvs reports empty (the corresponding saved search is not!). Can't find any corresponding error messages in the kibana log. The only one suspect is absence of .reporting-%date% ind… --- ## [Comparison between two data in kibana](https://discuss.elastic.co/t/comparison-between-two-data-in-kibana/218538)
**Author:** [@ROHINI13](https://discuss.elastic.co/u/ROHINI13)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 11:06am UTC](https://discuss.elastic.co/t/comparison-between-two-data-in-kibana/218538 "2020-02-18T11:06:57Z")
Hi guys, I have one doubt in kibana , I want to compare two different data , I want to compare and overlap between the two different data in kibana using timelion or kibna lens. Can anyone help me how to compare betwee… --- ## [Filtering documents for rollup](https://discuss.elastic.co/t/filtering-documents-for-rollup/167417)
**Author:** [@slabajos](https://discuss.elastic.co/u/slabajos)\ **Replies:** 3\ **Last updated:** [February 13, 2019, 9:55am UTC](https://discuss.elastic.co/t/filtering-documents-for-rollup/167417 "2019-02-13T09:55:41Z")
I've been testing the rollup feature and I like it, a lot, cause it is something we wanted to do manually but never found the time to implement it. It is simple, easy and can save tons of space. The problem is that it is… --- ## [Saved search in dashboard - CSV downlaod](https://discuss.elastic.co/t/saved-search-in-dashboard-csv-downlaod/119471)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 3\ **Last updated:** [February 14, 2018, 7:45pm UTC](https://discuss.elastic.co/t/saved-search-in-dashboard-csv-downlaod/119471 "2018-02-14T19:45:20Z")
Hi All, I know we could download the saved search as csv file, which is an excellent feature.But I would like to add this saved search in dashboard, and I want to download the csv file instead of pdf format.By default … --- ## [Unable to use sAMA login account name for authentication](https://discuss.elastic.co/t/unable-to-use-sama-login-account-name-for-authentication/83271)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 3\ **Last updated:** [May 18, 2017, 8:32am UTC](https://discuss.elastic.co/t/unable-to-use-sama-login-account-name-for-authentication/83271 "2017-05-18T08:32:55Z")
Hello. I am trying to work out active directory authentication but looks like x-pack security fails to find the user name. \[2017-04-22T18:20:41,937\]\[INFO \]\[o.e.x.s.a.l.LdapRealm \] \[development\] authenticate failed f… --- ## [Deadlock/hang](https://discuss.elastic.co/t/deadlock-hang/7872)
**Author:** [@aaron](https://discuss.elastic.co/u/aaron)\ **Replies:** 3\ **Last updated:** [April 21, 2016, 1:54am UTC](https://discuss.elastic.co/t/deadlock-hang/7872 "2016-04-21T01:54:12Z")
Using 0.19.4, I have rather innocuous client code that issues a synchronous get: GetRequestBuilder get = elasticSearchClient.prepareGet(index, "entity", id); GetResponse result = get.execute().actionGet(); Yet t… --- ## [Elastic search range dates](https://discuss.elastic.co/t/elastic-search-range-dates/14992)
**Author:** [@melasticsearch](https://discuss.elastic.co/u/melasticsearch)\ **Replies:** 3\ **Last updated:** [January 3, 2014, 9:27am UTC](https://discuss.elastic.co/t/elastic-search-range-dates/14992 "2014-01-03T09:27:31Z")
I have created an Elastic search index from a Mongo database. The documents in Mongo have the following structure: { "\_id" : ObjectId("525facace4b0c1f5e78753ea"), "time" : ISODate("2013-10-… --- ## [Pipelines.yml failed to read with Pipeline to Pipeline model](https://discuss.elastic.co/t/pipelines-yml-failed-to-read-with-pipeline-to-pipeline-model/281659)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 2\ **Last updated:** [August 17, 2021, 2:32pm UTC](https://discuss.elastic.co/t/pipelines-yml-failed-to-read-with-pipeline-to-pipeline-model/281659 "2021-08-17T14:32:44Z")
I had previously multiple pipelines and i added Pipeline to Pipeline model in my pipelines.yml But since then i get this error: ERROR: Failed to read pipelines yaml file. Location: /usr/share/logstash/config/pipelines.… --- ## [Elastic search won't start after upgrade to 7.11](https://discuss.elastic.co/t/elastic-search-wont-start-after-upgrade-to-7-11/264170)
**Author:** [@glifhits](https://discuss.elastic.co/u/glifhits)\ **Replies:** 2\ **Last updated:** [February 14, 2021, 3:27am UTC](https://discuss.elastic.co/t/elastic-search-wont-start-after-upgrade-to-7-11/264170 "2021-02-14T03:27:16Z")
I'm getting the following error. I've looked thru it but nothing stands out. \` Starting Elasticsearch Server … --- ## [What line indicates that filebeat is creating an index in Elasticsearch](https://discuss.elastic.co/t/what-line-indicates-that-filebeat-is-creating-an-index-in-elasticsearch/261791)
**Author:** [@rajeshkp](https://discuss.elastic.co/u/rajeshkp)\ **Replies:** 2\ **Last updated:** [January 25, 2021, 4:34am UTC](https://discuss.elastic.co/t/what-line-indicates-that-filebeat-is-creating-an-index-in-elasticsearch/261791 "2021-01-25T04:34:09Z")
What line indicates that Filebeat 7.7.0 is creating an index in Elasticsearch. We are trying to debug the fact that its not creating an Elasticsearch index, but the harvester fails saying the index is missing. Isn't it t… --- ## [Help interpreting explain results, IDF behavior (newbie)](https://discuss.elastic.co/t/help-interpreting-explain-results-idf-behavior-newbie/228217)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 5:11pm UTC](https://discuss.elastic.co/t/help-interpreting-explain-results-idf-behavior-newbie/228217 "2020-04-16T17:11:22Z")
I have 2 documents which match my filter, and both have an identical value in the field being queried, but yet they yield vastly different scores. Here is the returned result: { "took" : 3, "timed\_out" : false, "… --- ## [Custom fields.yml](https://discuss.elastic.co/t/custom-fields-yml/178879)
**Author:** [@aksadvance](https://discuss.elastic.co/u/aksadvance)\ **Replies:** 2\ **Last updated:** [April 30, 2019, 6:48am UTC](https://discuss.elastic.co/t/custom-fields-yml/178879 "2019-04-30T06:48:06Z")
Hi, I have defined template in ES via \_template api. Created index also , having mapping as per above template. Now i want to feed data hence i have setup filebeat -\> Logstash -\> ES. I have created dummy data as per … --- ## [Getting maxConcurrentShardRequests must be \>= 1 error](https://discuss.elastic.co/t/getting-maxconcurrentshardrequests-must-be-1-error/176494)
**Author:** [@jmr317](https://discuss.elastic.co/u/jmr317)\ **Replies:** 2\ **Last updated:** [April 11, 2019, 8:35pm UTC](https://discuss.elastic.co/t/getting-maxconcurrentshardrequests-must-be-1-error/176494 "2019-04-11T20:35:55Z")
Hi I'm getting the above error when I run a GET request to any of my indices. If I try to view elasticsearch in my browser, I get a Error 503 Service Unavailable: Request Timeout after 30000ms error and nothing loads in… --- ## [Questions about Enforcing ElasticSearch Mapping](https://discuss.elastic.co/t/questions-about-enforcing-elasticsearch-mapping/28551)
**Author:** [@dadepo](https://discuss.elastic.co/u/dadepo)\ **Replies:** 2\ **Last updated:** [September 2, 2015, 8:22pm UTC](https://discuss.elastic.co/t/questions-about-enforcing-elasticsearch-mapping/28551 "2015-09-02T20:22:34Z")
Ok, so I created a mapping...say we call it "my\_mapping" that specifies two properties: "property1, property2"... So I then attempted to index a document with the following format: { "newproperty5" : "Value" } Wit… --- ## [Missing documents after bulk indexing](https://discuss.elastic.co/t/missing-documents-after-bulk-indexing/17601)
**Author:** [@israel](https://discuss.elastic.co/u/israel)\ **Replies:** 2\ **Last updated:** [May 19, 2014, 9:25pm UTC](https://discuss.elastic.co/t/missing-documents-after-bulk-indexing/17601 "2014-05-19T21:25:02Z")
Hi, I have a problem for a while now, that I cannot find an explanation for it so far. I have a 10 nodes cluster with replication factor of 2 and 10 shards. On each of the nodes, I have another JVM running my cod… --- ## [Kibana iframes issue](https://discuss.elastic.co/t/kibana-iframes-issue/257320)
**Author:** [@Iyashwant](https://discuss.elastic.co/u/Iyashwant)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 2:03pm UTC](https://discuss.elastic.co/t/kibana-iframes-issue/257320 "2020-12-22T14:03:22Z")
I have created a website which displays an iframe of the kibana dashboard and I have a filter option in my website and it shows a side bar with an iframe of another dashboard in kibana with only filters visualization. W… --- ## [What is better to recover disk space](https://discuss.elastic.co/t/what-is-better-to-recover-disk-space/119112)
**Author:** [@rbeg](https://discuss.elastic.co/u/rbeg)\ **Replies:** 4\ **Last updated:** [February 8, 2018, 8:39pm UTC](https://discuss.elastic.co/t/what-is-better-to-recover-disk-space/119112 "2018-02-08T20:39:50Z")
Hello, I have 1 index per day. I want to delete all my data that is older than 1 week, not to saturate my disk space. What should I do for that : delete index (Delete Index) delete all documents of my index (Delete B… --- ## [How can I filter by count? / How can I apply a custom filter?](https://discuss.elastic.co/t/how-can-i-filter-by-count-how-can-i-apply-a-custom-filter/62722)
**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\ **Replies:** 4\ **Last updated:** [October 15, 2016, 10:39pm UTC](https://discuss.elastic.co/t/how-can-i-filter-by-count-how-can-i-apply-a-custom-filter/62722 "2016-10-15T22:39:51Z")
This question is a continuation of the following question : https://discuss.elastic.co/t/filter-based-on-the-doc-count-with-aggregations/62677 When building aggregations in Kibana , I get the following output : My qu… --- ## [Kibana not working// Elasticsearch host](https://discuss.elastic.co/t/kibana-not-working-elasticsearch-host/336929)
**Author:** [@yash2](https://discuss.elastic.co/u/yash2)\ **Replies:** 8\ **Last updated:** [June 28, 2023, 11:03pm UTC](https://discuss.elastic.co/t/kibana-not-working-elasticsearch-host/336929 "2023-06-28T23:03:50Z")
Can anyone help me here, i have been trying to set up Wazuh to work with ELK stack, having Filebeat to send the logs to Kibana for visualization. Just to begin with here\`s my elasticsearch .yml file : network.host: 19… --- ## [Filter computer object password changes](https://discuss.elastic.co/t/filter-computer-object-password-changes/284651)
**Author:** [@WilGG](https://discuss.elastic.co/u/WilGG)\ **Replies:** 8\ **Last updated:** [October 15, 2021, 6:37pm UTC](https://discuss.elastic.co/t/filter-computer-object-password-changes/284651 "2021-10-15T18:37:13Z")
Good Afternoon Everyone, We are been overwhelmed by computer objects password changes. Does anyone know how to filter this events so we do not skip actual user object password change events ? Thank you! --- ## [Analytics on self-hosted instance](https://discuss.elastic.co/t/analytics-on-self-hosted-instance/205641)
**Author:** [@p\_ban](https://discuss.elastic.co/u/p_ban)\ **Replies:** 8\ **Last updated:** [November 12, 2019, 7:50am UTC](https://discuss.elastic.co/t/analytics-on-self-hosted-instance/205641 "2019-11-12T07:50:41Z")
Hello, How can I start using Analytics with self-hosted App Search instance (the tab has no data, everything is 0)? I am performing search requests using php client with private-key. Do I need to add something to my req… --- ## [Copying field in from one event to other in logstash](https://discuss.elastic.co/t/copying-field-in-from-one-event-to-other-in-logstash/170621)
**Author:** [@Pranav](https://discuss.elastic.co/u/Pranav)\ **Replies:** 8\ **Last updated:** [March 4, 2019, 2:25pm UTC](https://discuss.elastic.co/t/copying-field-in-from-one-event-to-other-in-logstash/170621 "2019-03-04T14:25:04Z")
Can anyone tell me if I can copy a field from one event to another in logstash based on a unique\_key present in both the events? --- ## [Winlogbeat to same index as logstash](https://discuss.elastic.co/t/winlogbeat-to-same-index-as-logstash/96150)
**Author:** [@lschoonaert](https://discuss.elastic.co/u/lschoonaert)\ **Replies:** 8\ **Last updated:** [August 18, 2017, 9:47am UTC](https://discuss.elastic.co/t/winlogbeat-to-same-index-as-logstash/96150 "2017-08-18T09:47:28Z")
Hi there, I’m trying to get all my logs into 1 index - I have DNS logs currently going into logstash (lumberjack), now when I want to sen windows eventlogs, I’d like them to be index in the logstash-\* index. I this poss… --- ## [Bulk api syntax error in kopf plugin](https://discuss.elastic.co/t/bulk-api-syntax-error-in-kopf-plugin/70810)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 8\ **Last updated:** [January 8, 2017, 8:54am UTC](https://discuss.elastic.co/t/bulk-api-syntax-error-in-kopf-plugin/70810 "2017-01-08T08:54:25Z")
Hi everyone, when i am using bulk api in the kopf plugin i am getting an syntax error . I copied the code that is present in the elasticsearch 5.1 guide.My code is POST \_bulk { { "index" : { "index" : "test", "ty… --- ## [Reindex, convert float to float, mapper \[variableX\] cannot be changed from type \[float\] to \[long\]](https://discuss.elastic.co/t/reindex-convert-float-to-float-mapper-variablex-cannot-be-changed-from-type-float-to-long/237123)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 1\ **Last updated:** [June 15, 2020, 2:13pm UTC](https://discuss.elastic.co/t/reindex-convert-float-to-float-mapper-variablex-cannot-be-changed-from-type-float-to-long/237123 "2020-06-15T14:13:58Z")
Hi, I am trying to reindex something. It works with 4/5 of my indcies but the last one fails because of: { "took": 4178, "timed\_out": false, "total": 56576151, "updated": 0, "created": 994, "del… [Previous page](https://discuss.elastic.co/top.md?page=1013&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1015&per_page=50&period=all)