# Top

**URL:** https://discuss.elastic.co/top.md?page=1015&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1016

---

## [Is it possiable to add one more filed to existing index in elastic search,using java API](https://discuss.elastic.co/t/is-it-possiable-to-add-one-more-filed-to-existing-index-in-elastic-search-using-java-api/225139)

<div class="topic-metadata">

**Author:** [@upendra5](https://discuss.elastic.co/u/upendra5)\
**Replies:** 7\
**Last updated:** [March 26, 2020, 3:21pm UTC](https://discuss.elastic.co/t/is-it-possiable-to-add-one-more-filed-to-existing-index-in-elastic-search-using-java-api/225139 "2020-03-26T15:21:00Z")

</div>

Hi Team, I trying to add one more field to existing in elastic search using JAVA API. PutMappingRequest request = new PutMappingRequest(indexName); XContentBuilder mapping = XContentFactory.jsonBuilder(); mapping.st…

---

## [ES Nest won't insert @timestamp](https://discuss.elastic.co/t/es-nest-wont-insert-timestamp/87808)

<div class="topic-metadata">

**Author:** [@Ian\_Cross](https://discuss.elastic.co/u/Ian_Cross)\
**Replies:** 1\
**Last updated:** [May 31, 2017, 9:32pm UTC](https://discuss.elastic.co/t/es-nest-wont-insert-timestamp/87808 "2017-05-31T21:32:25Z")

</div>

Hi, I am trying to insert a record into Elasticsearch using NEST. I need the timestamp to be indexed as "@timestamp" not "timestamp". class Program { /// \<summary\> /// /// \</summary\> /// \<param name…

---

## [Logstash not inserted data into elasticsearch](https://discuss.elastic.co/t/logstash-not-inserted-data-into-elasticsearch/324737)

<div class="topic-metadata">

**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\
**Replies:** 6\
**Last updated:** [February 7, 2023, 6:45am UTC](https://discuss.elastic.co/t/logstash-not-inserted-data-into-elasticsearch/324737 "2023-02-07T06:45:24Z")

</div>

Hello Team, I had Elasticsearch, Logstash and Kibana v7.16.2 with xpack security based login enabled, Yesterday i had upgraded my ELK versions to 8.6.1 using my docker-compose file. Current problem: My logstash fetched…

---

## [Configure ingest manager in elasticseach 7.9](https://discuss.elastic.co/t/configure-ingest-manager-in-elasticseach-7-9/251114)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 6\
**Last updated:** [October 13, 2020, 2:27pm UTC](https://discuss.elastic.co/t/configure-ingest-manager-in-elasticseach-7-9/251114 "2020-10-13T14:27:52Z")

</div>

I have configured ELK on a single VM ( Centos 7 / 10Gig / 4 CPU) along with filebeat and auditbeat as POC and encountered the below error while trying to use the ingest manager. I followed the security setup as sugges…

---

## [Dynamic Indexing based on user input](https://discuss.elastic.co/t/dynamic-indexing-based-on-user-input/62238)

<div class="topic-metadata">

**Author:** [@Mayank\_Agrawal](https://discuss.elastic.co/u/Mayank_Agrawal)\
**Replies:** 6\
**Last updated:** [October 5, 2016, 12:17pm UTC](https://discuss.elastic.co/t/dynamic-indexing-based-on-user-input/62238 "2016-10-05T12:17:48Z")

</div>

I am developing an application using node.js (an custom interface) to visualize logs. There are two issues that I am facing: 1) How to dynamically change the index based on user input??? Through the interface, user w…

---

## [Elasticsearch6 python client - SSL works with RequestsHttpConnection, but not with Urllib3HttpConnection](https://discuss.elastic.co/t/elasticsearch6-python-client-ssl-works-with-requestshttpconnection-but-not-with-urllib3httpconnection/310541)

<div class="topic-metadata">

**Author:** [@nethlaria](https://discuss.elastic.co/u/nethlaria)\
**Replies:** 3\
**Last updated:** [July 25, 2022, 11:15pm UTC](https://discuss.elastic.co/t/elasticsearch6-python-client-ssl-works-with-requestshttpconnection-but-not-with-urllib3httpconnection/310541 "2022-07-25T23:15:51Z")

</div>

Hi, having a headscratching time trying to use elasticsearch python client with client certs. Using the same client certs (they're definitely fine), I can only connect using the RequestsHttpConnection class. Here's some …

---

## [Downgrading from Gold licence to basic license](https://discuss.elastic.co/t/downgrading-from-gold-licence-to-basic-license/245202)

<div class="topic-metadata">

**Author:** [@baidwan007](https://discuss.elastic.co/u/baidwan007)\
**Replies:** 3\
**Last updated:** [August 17, 2020, 9:58pm UTC](https://discuss.elastic.co/t/downgrading-from-gold-licence-to-basic-license/245202 "2020-08-17T21:58:39Z")

</div>

We have a cluster with ES 7.1 where we use gold licence. We have native authentication realm (order 0) and pki realm (order 1) as auth mechanisms. xpack.security.enabled: true in elasticsearch.yaml Now we have decided…

---

## [Kibana Canvas vertical chart - Show x axis and y axis lines](https://discuss.elastic.co/t/kibana-canvas-vertical-chart-show-x-axis-and-y-axis-lines/227800)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 3\
**Last updated:** [April 13, 2020, 7:39pm UTC](https://discuss.elastic.co/t/kibana-canvas-vertical-chart-show-x-axis-and-y-axis-lines/227800 "2020-04-13T19:39:09Z")

</div>

How to show x and y axis lines in vertical chart in canvas? It just shows the values.

---

## [How to install and import @kbn/es-query](https://discuss.elastic.co/t/how-to-install-and-import-kbn-es-query/198377)

<div class="topic-metadata">

**Author:** [@funina](https://discuss.elastic.co/u/funina)\
**Replies:** 3\
**Last updated:** [September 19, 2019, 1:36pm UTC](https://discuss.elastic.co/t/how-to-install-and-import-kbn-es-query/198377 "2019-09-19T13:36:59Z")

</div>

Hi There, My project is using elastic search as the back-end service provider to do the searching, and for UI, we would like to leverage kibana by developing a new UI project and migrate some powerful components from ki…

---

## [He given configuration is invalid. Reason: Illegal character in scheme name at index 0: \["172.23.130.220:9200","172.23.130.164:9200"\]](https://discuss.elastic.co/t/he-given-configuration-is-invalid-reason-illegal-character-in-scheme-name-at-index-0-172-23-130-220-9200-172-23-130-164-9200/170152)

<div class="topic-metadata">

**Author:** [@vaibhavjain882](https://discuss.elastic.co/u/vaibhavjain882)\
**Replies:** 3\
**Last updated:** [March 18, 2019, 8:38pm UTC](https://discuss.elastic.co/t/he-given-configuration-is-invalid-reason-illegal-character-in-scheme-name-at-index-0-172-23-130-220-9200-172-23-130-164-9200/170152 "2019-03-18T20:38:14Z")

</div>

Hi all I am deploy logstash consumer on kubernetes with following specification: Logstash version logstash:6.6.1 I am picking up all the values from the environment variable, my config file looks like this: input { …

---

## [BucketPath to ScriptedMetric not working?](https://discuss.elastic.co/t/bucketpath-to-scriptedmetric-not-working/109904)

<div class="topic-metadata">

**Author:** [@SparkyRih](https://discuss.elastic.co/u/SparkyRih)\
**Replies:** 3\
**Last updated:** [December 7, 2017, 10:36am UTC](https://discuss.elastic.co/t/bucketpath-to-scriptedmetric-not-working/109904 "2017-12-07T10:36:26Z")

</div>

I'm trying to get a ScriptedMetric in a BucketScript, that should be possible right? This is my query (in NEST) .ScriptedMetric("Urgency-Level", sm =\> sm .InitScript(i =\> i.Inline("params.\_agg.data = \[\]").Lang("painle…

---

## [Aggregate by keyword in kibana 5.6](https://discuss.elastic.co/t/aggregate-by-keyword-in-kibana-5-6/109193)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 1:15pm UTC](https://discuss.elastic.co/t/aggregate-by-keyword-in-kibana-5-6/109193 "2017-12-05T13:15:02Z")

</div>

Hi everyone! I have the following setup: filebeat (collects log file) \> logdash (filters JSON) \> elasticsearch \> kibana. In kibana, I mapped the data as follows: get filebeat-2017\*/\_mapping/log results in: . . . "com…

---

## [Logstash pipeline starts and then stops with a warning](https://discuss.elastic.co/t/logstash-pipeline-starts-and-then-stops-with-a-warning/99071)

<div class="topic-metadata">

**Author:** [@elk\_of\_the\_forest](https://discuss.elastic.co/u/elk_of_the_forest)\
**Replies:** 3\
**Last updated:** [September 2, 2017, 2:03am UTC](https://discuss.elastic.co/t/logstash-pipeline-starts-and-then-stops-with-a-warning/99071 "2017-09-02T02:03:45Z")

</div>

This is the error im getting when I start logstash. \[2017-08-31T18:59:33,010\]\[INFO \]\[logstash.pipeline \] Starting pipeline {“id”=\>“main”, “pipeline.workers”=\>4, “pipeline.batch.size”=\>125, “pipeline.batch.delay”=\>…

---

## [Could not find or load main class org.elasticsearch.plugins.PluginManagerCliParser](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-plugins-pluginmanagercliparser/97474)

<div class="topic-metadata">

**Author:** [@whuang2](https://discuss.elastic.co/u/whuang2)\
**Replies:** 3\
**Last updated:** [August 17, 2017, 10:38pm UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-plugins-pluginmanagercliparser/97474 "2017-08-17T22:38:03Z")

</div>

I am trying to upgrade ES from 2.0.1 to 5.5.1, elasticsearch-5.5.1.jar giving follow error: Could not find or load main class org.elasticsearch.plugins.PluginManagerCliParser What is the proper way to upgrade ES from 2…

---

## [Can not install elastic on Ubuntu](https://discuss.elastic.co/t/can-not-install-elastic-on-ubuntu/306975)

<div class="topic-metadata">

**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\
**Replies:** 2\
**Last updated:** [June 15, 2022, 6:09am UTC](https://discuss.elastic.co/t/can-not-install-elastic-on-ubuntu/306975 "2022-06-15T06:09:05Z")

</div>

Hello, when i execute sudo apt update that error occurred. Temporary failure resolving 'artifacts.elastic.co'. Is there any blocking? I'm from Mongolia. My ip is 103.17.108.48. What should i do? Please, answer asa…

---

## [Failed installing elasticsearch](https://discuss.elastic.co/t/failed-installing-elasticsearch/153231)

<div class="topic-metadata">

**Author:** [@Patrick\_Doyle](https://discuss.elastic.co/u/Patrick_Doyle)\
**Replies:** 2\
**Last updated:** [October 25, 2018, 6:00am UTC](https://discuss.elastic.co/t/failed-installing-elasticsearch/153231 "2018-10-25T06:00:26Z")

</div>

I am following the guide here https://logz.io/blog/elasticsearch-tutorial/ on a brand new ubuntu 18.04 AWS EC2 instance. I ran the following commands: wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sud…

---

## [ES 6.3.2 elasticsearch-py API with \_xpack/sql](https://discuss.elastic.co/t/es-6-3-2-elasticsearch-py-api-with-xpack-sql/143729)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 2\
**Last updated:** [August 13, 2018, 9:38am UTC](https://discuss.elastic.co/t/es-6-3-2-elasticsearch-py-api-with-xpack-sql/143729 "2018-08-13T09:38:37Z")

</div>

Hi Guys, A quick question please. I am playing around with the new SQL syntax feature: https://www.elastic.co/guide/en/elasticsearch/reference/current/sql-syntax-select.html But I noticed that the SQL Rest API is curr…

---

## [Using must and falling to fuzzy if no match in queries](https://discuss.elastic.co/t/using-must-and-falling-to-fuzzy-if-no-match-in-queries/114894)

<div class="topic-metadata">

**Author:** [@ericohtake](https://discuss.elastic.co/u/ericohtake)\
**Replies:** 2\
**Last updated:** [January 18, 2018, 6:17am UTC](https://discuss.elastic.co/t/using-must-and-falling-to-fuzzy-if-no-match-in-queries/114894 "2018-01-18T06:17:48Z")

</div>

Hi, I'm trying to match some documents in a query where my dataset contains exact matches and others that don't exactly match, if ever. I'd like to query ES for the exact match, and if it doesn't exists exactly, it fall…

---

## [How to download elasticsearch Source code？](https://discuss.elastic.co/t/how-to-download-elasticsearch-source-code/115521)

<div class="topic-metadata">

**Author:** [@huajing](https://discuss.elastic.co/u/huajing)\
**Replies:** 2\
**Last updated:** [January 18, 2018, 5:12am UTC](https://discuss.elastic.co/t/how-to-download-elasticsearch-source-code/115521 "2018-01-18T05:12:36Z")

</div>

I cannot recognise which archive is the source code in GitHub。

---

## [Retrieve value based on a single field using metric - Timelion](https://discuss.elastic.co/t/retrieve-value-based-on-a-single-field-using-metric-timelion/81054)

<div class="topic-metadata">

**Author:** [@pavithrakc](https://discuss.elastic.co/u/pavithrakc)\
**Replies:** 2\
**Last updated:** [April 5, 2017, 3:21pm UTC](https://discuss.elastic.co/t/retrieve-value-based-on-a-single-field-using-metric-timelion/81054 "2017-04-05T15:21:43Z")

</div>

Hello All, I have been trying to understand and utilize Time series in my project. I actually want to fetch data of a particular index based on a metric "sum" of field LastQty\_Tag\_32 and split them based on another fie…

---

## [Filebeat Affecting Elasticsearch Dynamic Mapping](https://discuss.elastic.co/t/filebeat-affecting-elasticsearch-dynamic-mapping/53368)

<div class="topic-metadata">

**Author:** [@cb2015](https://discuss.elastic.co/u/cb2015)\
**Replies:** 2\
**Last updated:** [June 21, 2016, 11:22am UTC](https://discuss.elastic.co/t/filebeat-affecting-elasticsearch-dynamic-mapping/53368 "2016-06-21T11:22:46Z")

</div>

Hi Everyone, I am using filebeat to send logs to logstash for processing, and finally, sending them to elasticsearch for graphing in kibana. My question is: Does filebeat affect how elasticsearch makes a dynamic m…

---

## [Case-insensitive sort](https://discuss.elastic.co/t/case-insensitive-sort/2975)

<div class="topic-metadata">

**Author:** [@Phil\_Hagelberg\_2](https://discuss.elastic.co/u/Phil_Hagelberg_2)\
**Replies:** 2\
**Last updated:** [May 26, 2010, 6:31am UTC](https://discuss.elastic.co/t/case-insensitive-sort/2975 "2010-05-26T06:31:27Z")

</div>

I'm trying to get some fields to perform case-insensitive sort. {"index": {"analysis": {"analyzer": {"text": {"tokenizer": "standard", "filter":\["standard","lowercase"\]}, "sorta…

---

## [Osquerybeat standalone without elastic-agent?](https://discuss.elastic.co/t/osquerybeat-standalone-without-elastic-agent/284872)

<div class="topic-metadata">

**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\
**Replies:** 5\
**Last updated:** [September 24, 2021, 12:02pm UTC](https://discuss.elastic.co/t/osquerybeat-standalone-without-elastic-agent/284872 "2021-09-24T12:02:51Z")

</div>

Hi, I'm currently using various \*beats deployed to servers and clients. For a number of reasons, I have my beats output to logstash, before they are sent to Elasticsearch. I'm evaluating elastic-agent, to at least repla…

---

## [Kibana 4 authorization exception error](https://discuss.elastic.co/t/kibana-4-authorization-exception-error/188357)

<div class="topic-metadata">

**Author:** [@mavericknomad](https://discuss.elastic.co/u/mavericknomad)\
**Replies:** 5\
**Last updated:** [July 2, 2019, 10:50am UTC](https://discuss.elastic.co/t/kibana-4-authorization-exception-error/188357 "2019-07-02T10:50:58Z")

</div>

We use AWS elasticsearch service and kibana is installed on the ec2 instance. From last few days, we started getting below error. Could you please let us know what may cause this error? ############ Fatal Error Kiban…

---

## [Always view all results from search? (Java Client)](https://discuss.elastic.co/t/always-view-all-results-from-search-java-client/7202)

<div class="topic-metadata">

**Author:** [@Drew\_H\_2](https://discuss.elastic.co/u/Drew_H_2)\
**Replies:** 5\
**Last updated:** [April 2, 2012, 4:52pm UTC](https://discuss.elastic.co/t/always-view-all-results-from-search-java-client/7202 "2012-04-02T16:52:24Z")

</div>

Hey guys. Just wanted to say I really like the product but I'm having an issue. Right now when I search, I'm doing this. searchRequestBuilder.setSize( 99999999 ); I've indexed data from a huge table in MySQL.…

---

## [Check if id exist in array field or not using script\_fields](https://discuss.elastic.co/t/check-if-id-exist-in-array-field-or-not-using-script-fields/266453)

<div class="topic-metadata">

**Author:** [@aninda\_halder](https://discuss.elastic.co/u/aninda_halder)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 9:08am UTC](https://discuss.elastic.co/t/check-if-id-exist-in-array-field-or-not-using-script-fields/266453 "2021-03-08T09:08:16Z")

</div>

Hi, i like to get a script field if a specific value exist in a array . Here is my mapping - "mappings": { "properties": { "field1": { "type": "text", }, "field2": { …

---

## [Match query not return exact match as top result](https://discuss.elastic.co/t/match-query-not-return-exact-match-as-top-result/192156)

<div class="topic-metadata">

**Author:** [@Timotius\_Pamungkas](https://discuss.elastic.co/u/Timotius_Pamungkas)\
**Replies:** 1\
**Last updated:** [July 25, 2019, 5:02am UTC](https://discuss.elastic.co/t/match-query-not-return-exact-match-as-top-result/192156 "2019-07-25T05:02:54Z")

</div>

I have data in elasticsearch, with field fullName : John Doe Doe John Doe Eric John Doe When I do a match query against fullName, with this query { "from": 0, "size": 20, "query": { "bool": { …

---

## [How to normalize similarity score using 'more\_like\_this'](https://discuss.elastic.co/t/how-to-normalize-similarity-score-using-more-like-this/249721)

<div class="topic-metadata">

**Author:** [@Sangmin\_Lee](https://discuss.elastic.co/u/Sangmin_Lee)\
**Replies:** 0\
**Last updated:** [September 24, 2020, 12:54am UTC](https://discuss.elastic.co/t/how-to-normalize-similarity-score-using-more-like-this/249721 "2020-09-24T00:54:11Z")

</div>

Hi. I'm using 'more like this' to get the similarity of the given text. As you know, the score is not normalized. I want to get a normalized value \[0, 1\] so that I can cut out documents below the threshold score. I t…

---

## [\_geoip\_lookup\_failure](https://discuss.elastic.co/t/-geoip-lookup-failure/78873)

<div class="topic-metadata">

**Author:** [@m.francia](https://discuss.elastic.co/u/m.francia)\
**Replies:** 0\
**Last updated:** [March 16, 2017, 1:59pm UTC](https://discuss.elastic.co/t/-geoip-lookup-failure/78873 "2017-03-16T13:59:06Z")

</div>

Hi! I have this grok pattern: RTMPLOGV %{IPORHOST:ipclient} \\\[%{HTTPDATE:timestamp}\\\] %{WORD:command} "%{GREEDYDATA:app}" "%{WORD:name}" %{DATA} %{NUMBER:bytesreceived} %{NUMBER:bytessent} "%{URI:url}" "%{HOSTNAME:fl…

---

## [Field Extraction/Parsing](https://discuss.elastic.co/t/field-extraction-parsing/171352)

<div class="topic-metadata">

**Author:** [@elborni96](https://discuss.elastic.co/u/elborni96)\
**Replies:** 4\
**Last updated:** [March 11, 2019, 2:03pm UTC](https://discuss.elastic.co/t/field-extraction-parsing/171352 "2019-03-11T14:03:06Z")

</div>

Hi everyone, I'm a new user of the ELK stack. I'm monitoring a file and I would like to extract fields (hereinafter a small extraction): \<Item\> \<title\> Vulnerability in Cisco Products (March 6, 2019) \</ title\> \<Link\> h…

---

## [Not able to start the elasticsearch](https://discuss.elastic.co/t/not-able-to-start-the-elasticsearch/157821)

<div class="topic-metadata">

**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\
**Replies:** 4\
**Last updated:** [November 27, 2018, 5:04am UTC](https://discuss.elastic.co/t/not-able-to-start-the-elasticsearch/157821 "2018-11-27T05:04:15Z")

</div>

Hi Team, I have started elasticsearch using this command etc/init.d# ./elasticsearch start \[ ok \] Starting elasticsearch (via systemctl): elasticsearch.service. but cant able to access the elasticsearch facing this …

---

## [Trying to fetch status of a web url to determine if its up/down](https://discuss.elastic.co/t/trying-to-fetch-status-of-a-web-url-to-determine-if-its-up-down/92163)

<div class="topic-metadata">

**Author:** [@aman\_yadav](https://discuss.elastic.co/u/aman_yadav)\
**Replies:** 4\
**Last updated:** [July 11, 2017, 6:55pm UTC](https://discuss.elastic.co/t/trying-to-fetch-status-of-a-web-url-to-determine-if-its-up-down/92163 "2017-07-11T18:55:44Z")

</div>

Hi, I have a url and I need to find out if this site is up or not. I was trying to do something like below. and then I thought I could get header's statuscode to determine its status. But this url returns 'text/html' r…

---

## [Filebeat slower than logstash default "file" input?](https://discuss.elastic.co/t/filebeat-slower-than-logstash-default-file-input/63640)

<div class="topic-metadata">

**Author:** [@remaselvi](https://discuss.elastic.co/u/remaselvi)\
**Replies:** 4\
**Last updated:** [October 24, 2016, 11:16am UTC](https://discuss.elastic.co/t/filebeat-slower-than-logstash-default-file-input/63640 "2016-10-24T11:16:46Z")

</div>

Hi, So far I have been using logstash's default "file" input plugin. I am giving filebeat a try with logstash. Filebeat gives me a significant performance boost when it comes to reading large logfiles, this is great. …

---

## [Filter the Error content from Server Log (WildFly Application server log)](https://discuss.elastic.co/t/filter-the-error-content-from-server-log-wildfly-application-server-log/180486)

<div class="topic-metadata">

**Author:** [@Madhan\_Kumar1](https://discuss.elastic.co/u/Madhan_Kumar1)\
**Replies:** 2\
**Last updated:** [May 14, 2019, 2:05pm UTC](https://discuss.elastic.co/t/filter-the-error-content-from-server-log-wildfly-application-server-log/180486 "2019-05-14T14:05:01Z")

</div>

Hi Team, I've installed File Beat/Elasticsearch/Kibana to get server log from WildFly server and below is my configuration on File Beat We are using processor to filter the log content in File Beat ###################…

---

## [Remove/Unmap a field alias](https://discuss.elastic.co/t/remove-unmap-a-field-alias/159258)

<div class="topic-metadata">

**Author:** [@GBP](https://discuss.elastic.co/u/GBP)\
**Replies:** 2\
**Last updated:** [December 4, 2018, 11:13am UTC](https://discuss.elastic.co/t/remove-unmap-a-field-alias/159258 "2018-12-04T11:13:59Z")

</div>

Hi, I am using Elasticsearch 6.5 to create alias datatypes to fields (https://www.elastic.co/guide/en/elasticsearch/reference/current/alias.html). For e.g. I have this mapping { "mappings": { "\_doc": { "pr…

---

## [Sum\_other\_doc\_count higher than total docs](https://discuss.elastic.co/t/sum-other-doc-count-higher-than-total-docs/140490)

<div class="topic-metadata">

**Author:** [@covolution](https://discuss.elastic.co/u/covolution)\
**Replies:** 2\
**Last updated:** [July 19, 2018, 9:16am UTC](https://discuss.elastic.co/t/sum-other-doc-count-higher-than-total-docs/140490 "2018-07-19T09:16:47Z")

</div>

I have a single shard index with 1,464,467 docs. I am doing some aggregations on a keyword field. The terms aggregation is returning a "sum\_other\_doc\_count": 1637376, which is more documents than I have in the index. …

---

## [Elasticsearch ports using ES-Hadoop](https://discuss.elastic.co/t/elasticsearch-ports-using-es-hadoop/26070)

<div class="topic-metadata">

**Author:** [@Piyush\_Goyal](https://discuss.elastic.co/u/Piyush_Goyal)\
**Replies:** 2\
**Last updated:** [July 27, 2015, 4:10am UTC](https://discuss.elastic.co/t/elasticsearch-ports-using-es-hadoop/26070 "2015-07-27T04:10:10Z")

</div>

Hi Costin, I am trying to run a spark application on the production mode with 3 node spark cluster and 3 node ES cluster with 32 partition. Following is the ES-hadoop configuration while doing a simple search: val d…

---

## [Wildcard is not working as expected](https://discuss.elastic.co/t/wildcard-is-not-working-as-expected/360117)

<div class="topic-metadata">

**Author:** [@venkatesh\_aamanchi](https://discuss.elastic.co/u/venkatesh_aamanchi)\
**Replies:** 7\
**Last updated:** [May 24, 2024, 8:51am UTC](https://discuss.elastic.co/t/wildcard-is-not-working-as-expected/360117 "2024-05-24T08:51:33Z")

</div>

Hello, I am using "wildcard" for matching fields of type text with a specific pattern. "query": { "wildcard": { "description": { "value": "objective\*", "case\_inse…

---

## [Help with slow query/indexing time on big index](https://discuss.elastic.co/t/help-with-slow-query-indexing-time-on-big-index/286583)

<div class="topic-metadata">

**Author:** [@Ain\_Ryushika](https://discuss.elastic.co/u/Ain_Ryushika)\
**Replies:** 7\
**Last updated:** [November 1, 2021, 9:47pm UTC](https://discuss.elastic.co/t/help-with-slow-query-indexing-time-on-big-index/286583 "2021-11-01T21:47:31Z")

</div>

System Specifications Elasticsearch: 3 data nodes, 200 primary shards, 406 total shards CPU model: Intel(R) Xeon(R) Gold 6248 CPU @ 2.50GHz CPU total logical cores: 8 Memory : 32GB (16gb heap) Client have an index 9…

---

## [Enrich policy with integrated sort/search query](https://discuss.elastic.co/t/enrich-policy-with-integrated-sort-search-query/225349)

<div class="topic-metadata">

**Author:** [@winlamp](https://discuss.elastic.co/u/winlamp)\
**Replies:** 7\
**Last updated:** [March 28, 2020, 2:04pm UTC](https://discuss.elastic.co/t/enrich-policy-with-integrated-sort-search-query/225349 "2020-03-28T14:04:48Z")

</div>

Hi, I'm trying to integrate a search query into my enrich policy. This step is required since I only require the most recent data from my index. Therefore i would like to do a sort based on the index @timestamp. I alre…

---

## [Time Filter field name: @timestamp](https://discuss.elastic.co/t/time-filter-field-name-timestamp/176232)

<div class="topic-metadata">

**Author:** [@Guy\_Shar](https://discuss.elastic.co/u/Guy_Shar)\
**Replies:** 1\
**Last updated:** [April 11, 2019, 12:35pm UTC](https://discuss.elastic.co/t/time-filter-field-name-timestamp/176232 "2019-04-11T12:35:38Z")

</div>

Am trying to setup a graph using the date and time values from my log file. The date and time format is as follow: 16/09/2014 11:54:55 I would like this value to be populated into the field: @timestamp, as at the mome…

---

## [How create dynamic query in logstash?](https://discuss.elastic.co/t/how-create-dynamic-query-in-logstash/79119)

<div class="topic-metadata">

**Author:** [@Yur\_Gasparyan](https://discuss.elastic.co/u/Yur_Gasparyan)\
**Replies:** 1\
**Last updated:** [March 18, 2017, 7:44pm UTC](https://discuss.elastic.co/t/how-create-dynamic-query-in-logstash/79119 "2017-03-18T19:44:09Z")

</div>

Hi all. I need your help. In my db config I have code look like this jdbc { jdbc\_connection\_string =\> "jdbc:mysql//localhost:3306/mydb" jdbc\_user =\> "root" jdbc\_password =\> "" jdbc\_driver\_library =\> "C:/server…

---

## [A couple HOWTO questions](https://discuss.elastic.co/t/a-couple-howto-questions/60725)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 7\
**Last updated:** [September 16, 2016, 9:44pm UTC](https://discuss.elastic.co/t/a-couple-howto-questions/60725 "2016-09-16T21:44:57Z")

</div>

So after creating my first mapping I now discovered a few more fields that need changes. So at this point are there any HOWTO's that will explain the process of mapping management? Such as: HOWTO: Create a mapping t…

---

## [Only one node in cluster(6 nodes) slow query and high read I/O when querying](https://discuss.elastic.co/t/only-one-node-in-cluster-6-nodes-slow-query-and-high-read-i-o-when-querying/243158)

<div class="topic-metadata">

**Author:** [@Sunghoon\_Jo](https://discuss.elastic.co/u/Sunghoon_Jo)\
**Replies:** 6\
**Last updated:** [July 30, 2020, 8:17am UTC](https://discuss.elastic.co/t/only-one-node-in-cluster-6-nodes-slow-query-and-high-read-i-o-when-querying/243158 "2020-07-30T08:17:23Z")

</div>

Hi All, I have some problem when querying. My cluster have 6 data nodes. When I query, only one node has unusual symptoms. my query is very simple. I'm doing stress tests, only one node shows high Read I/O(3000/s) , L…

---

## [Запись событий FileBeat в разные индексы](https://discuss.elastic.co/t/filebeat/203651)

<div class="topic-metadata">

**Author:** [@d1gger](https://discuss.elastic.co/u/d1gger)\
**Replies:** 6\
**Last updated:** [October 16, 2019, 5:37pm UTC](https://discuss.elastic.co/t/filebeat/203651 "2019-10-16T17:37:02Z")

</div>

Прошу не судить строго. С ELK только начинаю знакомиться, а есть одна срочная задача, которую нужно решить. Я собираю с МЭ Cisco ASA NetFlow и SysLog с помощью соответствующих модулей FileBeat и пишу их напрямую в Elast…

---

## [Elastic Cloud 6.0 - User authentications](https://discuss.elastic.co/t/elastic-cloud-6-0-user-authentications/108809)

<div class="topic-metadata">

**Author:** [@shanim](https://discuss.elastic.co/u/shanim)\
**Replies:** 6\
**Last updated:** [November 23, 2017, 7:41am UTC](https://discuss.elastic.co/t/elastic-cloud-6-0-user-authentications/108809 "2017-11-23T07:41:56Z")

</div>

Hi, I'm a noob at Elastic Cloud 6.0 and I'm using X-Pack for the first time. I have been attempting to add some data into a cluster I created on elastic cloud. I created a new user (as I didn't want to use the elastic …

---

## [After convert csv to ES anyway to update index without change its name](https://discuss.elastic.co/t/after-convert-csv-to-es-anyway-to-update-index-without-change-its-name/42481)

<div class="topic-metadata">

**Author:** [@Neal\_Shan](https://discuss.elastic.co/u/Neal_Shan)\
**Replies:** 6\
**Last updated:** [February 24, 2016, 6:32pm UTC](https://discuss.elastic.co/t/after-convert-csv-to-es-anyway-to-update-index-without-change-its-name/42481 "2016-02-24T18:32:11Z")

</div>

Scenario 1. use logstash transfer csv to elasticsearch 2. csv update every week, have to create a new index for it, and index name will be changed, otherwise, the index will have old and new data in it, we only need the …

---

## [Migrating lucene drill sideways query to elasticsearch](https://discuss.elastic.co/t/migrating-lucene-drill-sideways-query-to-elasticsearch/21690)

<div class="topic-metadata">

**Author:** [@Bo\_Finnerup\_Madsen](https://discuss.elastic.co/u/Bo_Finnerup_Madsen)\
**Replies:** 6\
**Last updated:** [January 20, 2015, 12:58pm UTC](https://discuss.elastic.co/t/migrating-lucene-drill-sideways-query-to-elasticsearch/21690 "2015-01-20T12:58:51Z")

</div>

Hi, I am trying to migrate a project from Lucene to elasticsearch, and for the most part it is a pleasure :) However, I cannot wrap my head around how to recreate the drill sideways queries we currently use in Lu…

---

## [Does node APM agent supports grpc framework](https://discuss.elastic.co/t/does-node-apm-agent-supports-grpc-framework/297055)

<div class="topic-metadata">

**Author:** [@vinodmb](https://discuss.elastic.co/u/vinodmb)\
**Replies:** 3\
**Last updated:** [February 16, 2022, 7:22pm UTC](https://discuss.elastic.co/t/does-node-apm-agent-supports-grpc-framework/297055 "2022-02-16T19:22:55Z")

</div>

I am trying to integrate elastic apm in my node application, we are using express for http endpoints and grpc for service to service communication. I am able to see transactions for http calls but there is no transaction…

---

## [Configure load balancer/ingress for ECK on AWS EKS](https://discuss.elastic.co/t/configure-load-balancer-ingress-for-eck-on-aws-eks/292526)

<div class="topic-metadata">

**Author:** [@George\_Leonard](https://discuss.elastic.co/u/George_Leonard)\
**Replies:** 3\
**Last updated:** [December 23, 2021, 6:29am UTC](https://discuss.elastic.co/t/configure-load-balancer-ingress-for-eck-on-aws-eks/292526 "2021-12-23T06:29:40Z")

</div>

Hi guys Can anyone point me to how/what to configure to make the stack accessible from say a 2nd K8S cluster... I will have X workload on my EKS cluster, which includes the EKS stack, but also have a 2nd EKS cluster an…

[Previous page](https://discuss.elastic.co/top.md?page=1014&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1016&per_page=50&period=all)
