# Top

**URL:** https://discuss.elastic.co/top.md?page=1025&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1026

---

## [Logstash won't run, openJDK 64-bit Server](https://discuss.elastic.co/t/logstash-wont-run-openjdk-64-bit-server/263072)

<div class="topic-metadata">

**Author:** [@Minx](https://discuss.elastic.co/u/Minx)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 5:04pm UTC](https://discuss.elastic.co/t/logstash-wont-run-openjdk-64-bit-server/263072 "2021-02-08T17:04:07Z")

</div>

I try to run log stash and this happens, does anyone know what is wrong please? PS C:\\logstash-7.10.1\\bin\> .\\logstash.bat -f .\\config\\logstash.conf "Using bundled JDK: "" OpenJDK 64-Bit Server VM warning: Option UseCo…

---

## [Retrieve multiple values from one field name](https://discuss.elastic.co/t/retrieve-multiple-values-from-one-field-name/120078)

<div class="topic-metadata">

**Author:** [@Ben](https://discuss.elastic.co/u/Ben)\
**Replies:** 3\
**Last updated:** [February 15, 2018, 11:06pm UTC](https://discuss.elastic.co/t/retrieve-multiple-values-from-one-field-name/120078 "2018-02-15T23:06:25Z")

</div>

I have following data in elastic search Index: test-1.2018 Field Name: "test" Field value : "Test" , Test1", "Hello", "Fellow", "And other values" and so forth ... How can I retrieve all the field values of a field ty…

---

## [Java api put index settings and mappings ResourceAlreadyExistsException](https://discuss.elastic.co/t/java-api-put-index-settings-and-mappings-resourcealreadyexistsexception/91705)

<div class="topic-metadata">

**Author:** [@Chris\_Dimitriou](https://discuss.elastic.co/u/Chris_Dimitriou)\
**Replies:** 3\
**Last updated:** [July 4, 2017, 2:15pm UTC](https://discuss.elastic.co/t/java-api-put-index-settings-and-mappings-resourcealreadyexistsexception/91705 "2017-07-04T14:15:32Z")

</div>

I try to make an index using the JAVA API like this cl.admin().indices().prepareCreate("index") .setSettings(settingsBuilder) .addMapping("event", mappingBuilder) .get(); bu…

---

## [Session Expired in kibana after installing certificates](https://discuss.elastic.co/t/session-expired-in-kibana-after-installing-certificates/77462)

<div class="topic-metadata">

**Author:** [@olorasde](https://discuss.elastic.co/u/olorasde)\
**Replies:** 3\
**Last updated:** [March 8, 2017, 9:22am UTC](https://discuss.elastic.co/t/session-expired-in-kibana-after-installing-certificates/77462 "2017-03-08T09:22:57Z")

</div>

Hi, I recently installed the certificates (the crt and key files) in my kibana installation (version 5.1.1) and after a few seconds of apparent correct operation, Kibana closes the session indicating that it is expired…

---

## [Tipps for a Cluster setup](https://discuss.elastic.co/t/tipps-for-a-cluster-setup/38715)

<div class="topic-metadata">

**Author:** [@Michael\_\_Rennecke](https://discuss.elastic.co/u/Michael__Rennecke)\
**Replies:** 3\
**Last updated:** [January 11, 2016, 7:06am UTC](https://discuss.elastic.co/t/tipps-for-a-cluster-setup/38715 "2016-01-11T07:06:26Z")

</div>

Hello, I will setup a Elasticsearchcluster for logging (Elasticsearch, Logstash Kibana). I have 2 "old" Database servers with 128 GB RAM 2x 12 core 4x 3.4 TB SAS 7200 rpm and 700 GB PCI-X-SSD. What is the best setup fo…

---

## [Problem to set up max locked memory on CentOS 7](https://discuss.elastic.co/t/problem-to-set-up-max-locked-memory-on-centos-7/20199)

<div class="topic-metadata">

**Author:** [@revolucio](https://discuss.elastic.co/u/revolucio)\
**Replies:** 0\
**Last updated:** [October 11, 2014, 11:16am UTC](https://discuss.elastic.co/t/problem-to-set-up-max-locked-memory-on-centos-7/20199 "2014-10-11T11:16:05Z")

</div>

Hi, I'm trying to setup the max locked memory to unlimited on Centos 7 but all what I did doesn't work. This is my current setup: On /etc/security/limits.conf I add elasticsearch soft memlock…

---

## [Kerberos support in Logstash Jdbc input plugin](https://discuss.elastic.co/t/kerberos-support-in-logstash-jdbc-input-plugin/289921)

<div class="topic-metadata">

**Author:** [@jitentiwari82](https://discuss.elastic.co/u/jitentiwari82)\
**Replies:** 0\
**Last updated:** [November 23, 2021, 8:45am UTC](https://discuss.elastic.co/t/kerberos-support-in-logstash-jdbc-input-plugin/289921 "2021-11-23T08:45:37Z")

</div>

Hi Guys, I am trying to use Kerberos authentication to read data from Oracle database through Logstash JDBC plug-in . Has Kerberos support for database connection through JDBC input plugin been added ? Can someone plea…

---

## [Filtered aliases warning - cannot have more than one for same index?](https://discuss.elastic.co/t/filtered-aliases-warning-cannot-have-more-than-one-for-same-index/232019)

<div class="topic-metadata">

**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 1:12pm UTC](https://discuss.elastic.co/t/filtered-aliases-warning-cannot-have-more-than-one-for-same-index/232019 "2020-05-11T13:12:17Z")

</div>

I have the following WARNING level message in my Elasticsearch 6.8 logs (index names are made up): More than one (4) filtered alias found for same index (myindex-2012.12.12). This is currently not recommended. Aliases: …

---

## [Elasticsearch 7.2.0 MSI installer - Bundled Java cannot be deployed](https://discuss.elastic.co/t/elasticsearch-7-2-0-msi-installer-bundled-java-cannot-be-deployed/190032)

<div class="topic-metadata">

**Author:** [@mailcube](https://discuss.elastic.co/u/mailcube)\
**Replies:** 0\
**Last updated:** [July 11, 2019, 2:02pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-0-msi-installer-bundled-java-cannot-be-deployed/190032 "2019-07-11T14:02:10Z")

</div>

Hi all, We are in the midst of deploying a new Elasticsearch instance on different workstations on VMs and noticed that, even though the documentation mentions that the installer is bundled with a OpenJDK package (see h…

---

## [Cutoff frequency in multi match query](https://discuss.elastic.co/t/cutoff-frequency-in-multi-match-query/127784)

<div class="topic-metadata">

**Author:** [@yash\_mundra](https://discuss.elastic.co/u/yash_mundra)\
**Replies:** 0\
**Last updated:** [April 12, 2018, 10:06am UTC](https://discuss.elastic.co/t/cutoff-frequency-in-multi-match-query/127784 "2018-04-12T10:06:38Z")

</div>

If I am using cutoff frequency in multi match query with multiple fields, is it applied to every field individually? How does it work?

---

## [How to calculate timestamp difference in logstash config file?](https://discuss.elastic.co/t/how-to-calculate-timestamp-difference-in-logstash-config-file/244732)

<div class="topic-metadata">

**Author:** [@Rahul\_Chougule](https://discuss.elastic.co/u/Rahul_Chougule)\
**Replies:** 1\
**Last updated:** [August 12, 2020, 2:25pm UTC](https://discuss.elastic.co/t/how-to-calculate-timestamp-difference-in-logstash-config-file/244732 "2020-08-12T14:25:10Z")

</div>

I have two timestamp fields: submit\_date("MM/dd/YYYY HH:mm") and completed date("MM/dd/YYYY HH:mm"). I want to calculate time difference between these two fields and wanted to add it as a new field while ingesting data …

---

## [(IOException while reading synonyms\_path\_path) synonym token filter configuration](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path-synonym-token-filter-configuration/197764)

<div class="topic-metadata">

**Author:** [@Meet\_Chaudhary](https://discuss.elastic.co/u/Meet_Chaudhary)\
**Replies:** 1\
**Last updated:** [September 3, 2019, 12:16pm UTC](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path-synonym-token-filter-configuration/197764 "2019-09-03T12:16:03Z")

</div>

I am using synonyms token filter with custom file installed elasticsearch 6.7 as a service on windows 10 machine my "synonyms.txt" is located at "C:\\ProgramData\\Elastic\\Elasticsearch\\config\\analysis\\synonyms.txt" here…

---

## [Creating a dynamic swagger for an Elasticsearch API](https://discuss.elastic.co/t/creating-a-dynamic-swagger-for-an-elasticsearch-api/122345)

<div class="topic-metadata">

**Author:** [@Kamal\_Hafyane](https://discuss.elastic.co/u/Kamal_Hafyane)\
**Replies:** 1\
**Last updated:** [March 3, 2018, 1:03am UTC](https://discuss.elastic.co/t/creating-a-dynamic-swagger-for-an-elasticsearch-api/122345 "2018-03-03T01:03:18Z")

</div>

I want to create a dynamic swagger of an elasticsearch API since the response returned by Api is unexpected because it contains facets and I would like to know if there is way to generate the swagger automatically throug…

---

## [Using Elasticsearch 5.0.0 as a primary datastore?](https://discuss.elastic.co/t/using-elasticsearch-5-0-0-as-a-primary-datastore/63704)

<div class="topic-metadata">

**Author:** [@spynxo](https://discuss.elastic.co/u/spynxo)\
**Replies:** 1\
**Last updated:** [October 24, 2016, 7:34am UTC](https://discuss.elastic.co/t/using-elasticsearch-5-0-0-as-a-primary-datastore/63704 "2016-10-24T07:34:06Z")

</div>

Hi All, I was wondering what your thoughts were today on using Elasticsearch 5.0.0 as a primary datastore. I know there has been some concerns in the past with durability, resiliency, robustness and data loss (https://…

---

## [What does setting dis\_max exactly do in a query\_string query?](https://discuss.elastic.co/t/what-does-setting-dis-max-exactly-do-in-a-query-string-query/11903)

<div class="topic-metadata">

**Author:** [@marlo](https://discuss.elastic.co/u/marlo)\
**Replies:** 1\
**Last updated:** [May 9, 2013, 3:30pm UTC](https://discuss.elastic.co/t/what-does-setting-dis-max-exactly-do-in-a-query-string-query/11903 "2013-05-09T15:30:13Z")

</div>

I'm running a query as follows: - query: { - - query\_string: { - query: "china" - default\_operator: "AND" - use\_dis\_max: true - - fields: \[ …

---

## [\[ES7\] Can't POST a geo\_point](https://discuss.elastic.co/t/es7-cant-post-a-geo-point/222453)

<div class="topic-metadata">

**Author:** [@donnadulcinea](https://discuss.elastic.co/u/donnadulcinea)\
**Replies:** 5\
**Last updated:** [March 11, 2020, 11:04am UTC](https://discuss.elastic.co/t/es7-cant-post-a-geo-point/222453 "2020-03-11T11:04:28Z")

</div>

I'm working with this setup "version": { "number": "7.2.0", "build\_flavor": "oss", "build\_type": "tar", "build\_hash": "508d38a", "build\_date": "2019-06-20T15:54:18.811730Z", "build\_snapshot": fal…

---

## [Shards and replicas for smaller indexes](https://discuss.elastic.co/t/shards-and-replicas-for-smaller-indexes/129136)

<div class="topic-metadata">

**Author:** [@mortenbock](https://discuss.elastic.co/u/mortenbock)\
**Replies:** 5\
**Last updated:** [April 25, 2018, 2:35am UTC](https://discuss.elastic.co/t/shards-and-replicas-for-smaller-indexes/129136 "2018-04-25T02:35:45Z")

</div>

Hi. We have a setup with an ES cluster with three nodes. On the cluster we have an index with our product catalog. When creating this index, we do not explicitly set any shard or replica size. The index is around 1.2g…

---

## [Filtering in Kibana maybe query dsl?](https://discuss.elastic.co/t/filtering-in-kibana-maybe-query-dsl/99141)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 5\
**Last updated:** [September 12, 2017, 3:54pm UTC](https://discuss.elastic.co/t/filtering-in-kibana-maybe-query-dsl/99141 "2017-09-12T15:54:41Z")

</div>

Hello, I create visualize in Kibana, based on 2 terms (Name\_Pass and Message). I search how to apply a specific filter on message\_field (maybe with query dsl) : If my message\_field contains either the word “pass” or “…

---

## [How to indexing realtime data in to Elasticsearch?](https://discuss.elastic.co/t/how-to-indexing-realtime-data-in-to-elasticsearch/176662)

<div class="topic-metadata">

**Author:** [@Mohamed\_eshaftri](https://discuss.elastic.co/u/Mohamed_eshaftri)\
**Replies:** 2\
**Last updated:** [April 13, 2019, 7:49pm UTC](https://discuss.elastic.co/t/how-to-indexing-realtime-data-in-to-elasticsearch/176662 "2019-04-13T19:49:29Z")

</div>

hello, i am new Elasticsearch user, i would like to know how i can indexing realtime data from webSocket API and index this data, using Javascript. even some link page to start, that will be helpful. thank you.

---

## [Filebeat ignoring recursive globs](https://discuss.elastic.co/t/filebeat-ignoring-recursive-globs/165146)

<div class="topic-metadata">

**Author:** [@SpeedyXeon](https://discuss.elastic.co/u/SpeedyXeon)\
**Replies:** 2\
**Last updated:** [January 23, 2019, 5:12am UTC](https://discuss.elastic.co/t/filebeat-ignoring-recursive-globs/165146 "2019-01-23T05:12:22Z")

</div>

Hi, I configured my prospector to use recursive globs, but filebeat is ignoring the configuration and exiting with the error below: Error in initing prospector: Failed to resolve recursive globs in config: multiple \*\*…

---

## [ERR Failed to connect: dial tcp ELK\_IP\_ADDRESS:9600: getsockopt: connection refused](https://discuss.elastic.co/t/err-failed-to-connect-dial-tcp-elk-ip-address-9600-getsockopt-connection-refused/124860)

<div class="topic-metadata">

**Author:** [@daytonpa](https://discuss.elastic.co/u/daytonpa)\
**Replies:** 2\
**Last updated:** [March 27, 2018, 1:58pm UTC](https://discuss.elastic.co/t/err-failed-to-connect-dial-tcp-elk-ip-address-9600-getsockopt-connection-refused/124860 "2018-03-27T13:58:03Z")

</div>

For some reason, I cannot get Filebeat to send logs to Logstash. I have an ELK stack on an instance in AWS that is meant to collect all logs from our staging and application servers. ELK instance: Elasticsearch -\> 5.6…

---

## [HikariCP metrics ingestion error](https://discuss.elastic.co/t/hikaricp-metrics-ingestion-error/259875)

<div class="topic-metadata">

**Author:** [@jenhouwu](https://discuss.elastic.co/u/jenhouwu)\
**Replies:** 4\
**Last updated:** [December 31, 2020, 7:50am UTC](https://discuss.elastic.co/t/hikaricp-metrics-ingestion-error/259875 "2020-12-31T07:50:58Z")

</div>

Kibana version: 7.10.1 Elasticsearch version: 7.10.1 APM Server version: 7.8.0 APM Agent language and version: java 1.19.1 Steps to reproduce: start apm java agent with option -Delastic.apm.disable\_metrics=hika…

---

## [Need Robust Grok filter for nginx error log format](https://discuss.elastic.co/t/need-robust-grok-filter-for-nginx-error-log-format/255630)

<div class="topic-metadata">

**Author:** [@nitin194](https://discuss.elastic.co/u/nitin194)\
**Replies:** 4\
**Last updated:** [November 18, 2020, 2:40pm UTC](https://discuss.elastic.co/t/need-robust-grok-filter-for-nginx-error-log-format/255630 "2020-11-18T14:40:04Z")

</div>

We are facing an issue while filtering nginx error log format ... suppose below are two log snippet from the error log 2020/11/17 13:04:05 \[error\] 32237#32237: \*4185303 open() "/etc/nginx/html/favicon.ico" failed (2: …

---

## [How to remove duplicate search result in elasticsearch?](https://discuss.elastic.co/t/how-to-remove-duplicate-search-result-in-elasticsearch/252319)

<div class="topic-metadata">

**Author:** [@yen\_l\_ng\_th](https://discuss.elastic.co/u/yen_l_ng_th)\
**Replies:** 4\
**Last updated:** [October 20, 2020, 1:49pm UTC](https://discuss.elastic.co/t/how-to-remove-duplicate-search-result-in-elasticsearch/252319 "2020-10-20T13:49:37Z")

</div>

I use a paginated search by elasticseach. But the items are duplicated between pages. It is at the bottom of this page and at the top of the other page. I did like this but it still doesn't work $aggregations = \[ "uni…

---

## [Logstash http input plugin accepting gzip file but how to detect only text format?](https://discuss.elastic.co/t/logstash-http-input-plugin-accepting-gzip-file-but-how-to-detect-only-text-format/240683)

<div class="topic-metadata">

**Author:** [@Agniv\_Gon](https://discuss.elastic.co/u/Agniv_Gon)\
**Replies:** 4\
**Last updated:** [July 24, 2020, 6:51am UTC](https://discuss.elastic.co/t/logstash-http-input-plugin-accepting-gzip-file-but-how-to-detect-only-text-format/240683 "2020-07-24T06:51:22Z")

</div>

I am using the below conf for Logstash HTTP input plugin: I am trying to send .gz file and in header passing Content-Encoding: gzip. It is successfully doing its job but I am interested only in text format inside the gzi…

---

## [Filtering and output the first item to elastic](https://discuss.elastic.co/t/filtering-and-output-the-first-item-to-elastic/237630)

<div class="topic-metadata">

**Author:** [@kileou78](https://discuss.elastic.co/u/kileou78)\
**Replies:** 4\
**Last updated:** [June 19, 2020, 8:51am UTC](https://discuss.elastic.co/t/filtering-and-output-the-first-item-to-elastic/237630 "2020-06-19T08:51:59Z")

</div>

Hi everybody I'm collecting using an API and filebeat a list of computer's status OK or KO I would like to store on elastic a global status for this group of computer My list is sorted by state, "0" for OK and "2" for…

---

## [Metricbeat - high network utilisation](https://discuss.elastic.co/t/metricbeat-high-network-utilisation/203474)

<div class="topic-metadata">

**Author:** [@RichardH](https://discuss.elastic.co/u/RichardH)\
**Replies:** 4\
**Last updated:** [October 16, 2019, 6:42am UTC](https://discuss.elastic.co/t/metricbeat-high-network-utilisation/203474 "2019-10-16T06:42:40Z")

</div>

Hello, We would like to use Metricbeat to monitor systems stats for a number of servers across slow WAN links. If I do a default install of Metric beat my outbound network throughput is around 7KB/s, however I want to s…

---

## [Language detection on elastic.co](https://discuss.elastic.co/t/language-detection-on-elastic-co/184603)

<div class="topic-metadata">

**Author:** [@aros](https://discuss.elastic.co/u/aros)\
**Replies:** 4\
**Last updated:** [June 13, 2019, 9:13am UTC](https://discuss.elastic.co/t/language-detection-on-elastic-co/184603 "2019-06-13T09:13:23Z")

</div>

Hi, first, not sure if this is the right place, but i couldnt find a better one :wink: It looks like you build a loop in elastic.co webpage concerning language detection. I am not using english as preferred language in…

---

## [Logstash config](https://discuss.elastic.co/t/logstash-config/196916)

<div class="topic-metadata">

**Author:** [@ntlong](https://discuss.elastic.co/u/ntlong)\
**Replies:** 7\
**Last updated:** [September 3, 2019, 5:13am UTC](https://discuss.elastic.co/t/logstash-config/196916 "2019-09-03T05:13:36Z")

</div>

Hi everyone, I am newbie to elk stack so it would be so kind if you guy could help me. I am able to send log directly to elasticsearch, but when I try to use logstash, i got below error when starting: logstash --path…

---

## [No traking sql\_last\_value value in jdbc plugin](https://discuss.elastic.co/t/no-traking-sql-last-value-value-in-jdbc-plugin/48219)

<div class="topic-metadata">

**Author:** [@jalen\_wang](https://discuss.elastic.co/u/jalen_wang)\
**Replies:** 1\
**Last updated:** [May 22, 2017, 9:19pm UTC](https://discuss.elastic.co/t/no-traking-sql-last-value-value-in-jdbc-plugin/48219 "2017-05-22T21:19:39Z")

</div>

I'm going to use jdbc plugin to get data from oracle database,below is my sample data: OP\_TYPE OP\_DATE OBJ\_NAME LAG HOSTNAME GROUP\_NAME RECORDLENGTH TIMESTAMP FILESEQNO FILERBA ID --…

---

## [How to merge 2 clusters](https://discuss.elastic.co/t/how-to-merge-2-clusters/6664)

<div class="topic-metadata">

**Author:** [@Chris\_H](https://discuss.elastic.co/u/Chris_H)\
**Replies:** 1\
**Last updated:** [February 12, 2012, 11:30am UTC](https://discuss.elastic.co/t/how-to-merge-2-clusters/6664 "2012-02-12T11:30:01Z")

</div>

I have ElasticSearch cluster where one of the nodes that was added to the replica-set was already running ES under a different cluster name. I need to merge this data into the current running replica- set. How do I …

---

## [Aggregations count vs hits count](https://discuss.elastic.co/t/aggregations-count-vs-hits-count/332648)

<div class="topic-metadata">

**Author:** [@NNI](https://discuss.elastic.co/u/NNI)\
**Replies:** 3\
**Last updated:** [May 12, 2023, 5:01pm UTC](https://discuss.elastic.co/t/aggregations-count-vs-hits-count/332648 "2023-05-12T17:01:11Z")

</div>

Hi I would like to concern on aggregations count for explain in more details But for the sake of presenting the case a little background : I have cluster contains with 3 master nodes, 3 ingest nodes, 3 data nodes so t…

---

## [How do I encrypt multiple fields?](https://discuss.elastic.co/t/how-do-i-encrypt-multiple-fields/126153)

<div class="topic-metadata">

**Author:** [@wakame](https://discuss.elastic.co/u/wakame)\
**Replies:** 3\
**Last updated:** [March 31, 2018, 6:12pm UTC](https://discuss.elastic.co/t/how-do-i-encrypt-multiple-fields/126153 "2018-03-31T18:12:27Z")

</div>

how do I encrypt multiple fields? cipher{ source =\> "field1" target =\> "field1" } cipher{ source =\> "field2" target =\> "field2" } cipher{ source =\> "field3" target =\> "field3" }

---

## [Filebeat Docker - Elasticsearch Host Issue](https://discuss.elastic.co/t/filebeat-docker-elasticsearch-host-issue/320083)

<div class="topic-metadata">

**Author:** [@mwsprotte](https://discuss.elastic.co/u/mwsprotte)\
**Replies:** 6\
**Last updated:** [December 14, 2022, 3:18pm UTC](https://discuss.elastic.co/t/filebeat-docker-elasticsearch-host-issue/320083 "2022-12-14T15:18:04Z")

</div>

Hello Everyone! I'm trying to run Filebeat in a Docker Container folowing this documentation: https://www.elastic.co/guide/en/beats/filebeat/current/running-on-docker.html#\_run\_the\_filebeat\_setup but in the second step, …

---

## [Using esrally to measure painless script partial update performance](https://discuss.elastic.co/t/using-esrally-to-measure-painless-script-partial-update-performance/262263)

<div class="topic-metadata">

**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\
**Replies:** 6\
**Last updated:** [February 3, 2021, 9:42am UTC](https://discuss.elastic.co/t/using-esrally-to-measure-painless-script-partial-update-performance/262263 "2021-02-03T09:42:02Z")

</div>

Hi team, I am trying to measure bulk partial update performance. I am wondering if its possible to do this via esrally at all. For eg, our application uses painless scripts for partial update and the target for these u…

---

## [Delete file from index with \_delete\_by\_query empties the index](https://discuss.elastic.co/t/delete-file-from-index-with-delete-by-query-empties-the-index/217382)

<div class="topic-metadata">

**Author:** [@Tommie](https://discuss.elastic.co/u/Tommie)\
**Replies:** 6\
**Last updated:** [February 4, 2020, 8:06am UTC](https://discuss.elastic.co/t/delete-file-from-index-with-delete-by-query-empties-the-index/217382 "2020-02-04T08:06:23Z")

</div>

I've tried to delete one of the imported files (csv logstash import) from my index by using: POST /myindex/\_delete\_by\_query { "query": { "match": { "path": "filename.ext" } } } My intention was to delete only th…

---

## [Convert Inline Ruby to Ruby Script](https://discuss.elastic.co/t/convert-inline-ruby-to-ruby-script/126357)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 6\
**Last updated:** [April 2, 2018, 12:29am UTC](https://discuss.elastic.co/t/convert-inline-ruby-to-ruby-script/126357 "2018-04-02T00:29:36Z")

</div>

I was given some inline ruby code to do some work for me. I've put it to good use but it makes my pipeline very messy and had a couple questions. First, here's what this part of the pipe looks like right now: if \[ex…

---

## [Deploy elasticsearch cluster over internet](https://discuss.elastic.co/t/deploy-elasticsearch-cluster-over-internet/122559)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 6\
**Last updated:** [March 9, 2018, 5:28pm UTC](https://discuss.elastic.co/t/deploy-elasticsearch-cluster-over-internet/122559 "2018-03-09T17:28:17Z")

</div>

Hello, I want to deploy a 3 node cluster of ES with x-pack (security) I was wondering about security: My 3 nodes have to communicate (discovery, etc...). but of course, the question of the security is raised. What is …

---

## [Timeout and slow responses](https://discuss.elastic.co/t/timeout-and-slow-responses/289418)

<div class="topic-metadata">

**Author:** [@ook](https://discuss.elastic.co/u/ook)\
**Replies:** 5\
**Last updated:** [November 17, 2021, 11:18am UTC](https://discuss.elastic.co/t/timeout-and-slow-responses/289418 "2021-11-17T11:18:05Z")

</div>

Hi, I have a Elasticsearch cluster in my k8s cluster to handle a unique small (451k docs) index (here the stats: ES Cluster stats as at 20211117 · GitHub ), so small (2gb) that I use 1 shard. All 5 nodes pods have 1CPU,…

---

## [ES can't work suddenly](https://discuss.elastic.co/t/es-cant-work-suddenly/105974)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 2\
**Last updated:** [November 1, 2017, 4:09am UTC](https://discuss.elastic.co/t/es-cant-work-suddenly/105974 "2017-11-01T04:09:24Z")

</div>

Hi, today when I setup the ES, it can't run and show the log. C:\\ELK-Stack\\elasticsearch-5.5.1\\bin\>elasticsearch \[2017-11-01T11:44:38,152\]\[INFO \]\[o.e.n.Node \] \[\] initializing ... \[2017-11-01T11:44:38,249…

---

## [Unknown setting copy for mutate](https://discuss.elastic.co/t/unknown-setting-copy-for-mutate/96187)

<div class="topic-metadata">

**Author:** [@ryac](https://discuss.elastic.co/u/ryac)\
**Replies:** 2\
**Last updated:** [August 8, 2017, 6:49am UTC](https://discuss.elastic.co/t/unknown-setting-copy-for-mutate/96187 "2017-08-08T06:49:05Z")

</div>

Hi all, Having some difficulty in copying a field in Logstash. In my filter, I have this: mutate { copy =\> { "original\_field" =\> "new\_field" } } Testing the configs, I get this: ERROR logstash.filters.mutate - Unk…

---

## [Max length allowed for "max\_token\_length" and how to set value](https://discuss.elastic.co/t/max-length-allowed-for-max-token-length-and-how-to-set-value/56812)

<div class="topic-metadata">

**Author:** [@Eli\_Mintz](https://discuss.elastic.co/u/Eli_Mintz)\
**Replies:** 2\
**Last updated:** [August 1, 2016, 1:35am UTC](https://discuss.elastic.co/t/max-length-allowed-for-max-token-length-and-how-to-set-value/56812 "2016-08-01T01:35:25Z")

</div>

Hi, I would like to set the standard tokenizer to use a token length of 30000 for a field (I am inserting biological sequences into this field) instead of cutting up the string into 255 length tokens as is the default.…

---

## [Twitter::Error::Unauthorized](https://discuss.elastic.co/t/twitter-error-unauthorized/42136)

<div class="topic-metadata">

**Author:** [@jitendersaini](https://discuss.elastic.co/u/jitendersaini)\
**Replies:** 2\
**Last updated:** [March 19, 2016, 1:53am UTC](https://discuss.elastic.co/t/twitter-error-unauthorized/42136 "2016-03-19T01:53:38Z")

</div>

HI I'm new to EKL and trying to learn this. I've installed the logstash-2.2.2 and elasticsearch-2.1.1 in my machine. I'm trying to read the twitters feed as given in the logstash guide but it's throwing the Unauthorized …

---

## [How to disable transactions being sent from Java APM agent, and how to only send error events?](https://discuss.elastic.co/t/how-to-disable-transactions-being-sent-from-java-apm-agent-and-how-to-only-send-error-events/344488)

<div class="topic-metadata">

**Author:** [@Jrdunkley](https://discuss.elastic.co/u/Jrdunkley)\
**Replies:** 4\
**Last updated:** [October 6, 2023, 9:42am UTC](https://discuss.elastic.co/t/how-to-disable-transactions-being-sent-from-java-apm-agent-and-how-to-only-send-error-events/344488 "2023-10-06T09:42:53Z")

</div>

Kibana version: 8.9.1 Elasticsearch version: 8.9.1 APM Server version: 8.9.1 APM Agent language and version: Java 1.42.0 Using Springboot 2.5.6 Environment variables used. ELASTIC\_APM\_APPLICATIONS\_PACKAGES=com.exam…

---

## [Nginx logs in Kibana log streaming!](https://discuss.elastic.co/t/nginx-logs-in-kibana-log-streaming/193944)

<div class="topic-metadata">

**Author:** [@sv\_bcvt92](https://discuss.elastic.co/u/sv_bcvt92)\
**Replies:** 4\
**Last updated:** [August 9, 2019, 3:32pm UTC](https://discuss.elastic.co/t/nginx-logs-in-kibana-log-streaming/193944 "2019-08-09T15:32:12Z")

</div>

Hi Guru's, I'm setting up Laravel with Nginx. And I expose Laravel access logs to Nginx logs as config below: server { listen 80; listen \[::\]:80 ipv6only=on; server\_name abcyxyz.ap-northeast-1.…

---

## [Uncaught TypeError: Cannot read property 'scripted' of undefined](https://discuss.elastic.co/t/uncaught-typeerror-cannot-read-property-scripted-of-undefined/177206)

<div class="topic-metadata">

**Author:** [@Mohammed\_khan](https://discuss.elastic.co/u/Mohammed_khan)\
**Replies:** 4\
**Last updated:** [April 23, 2019, 6:34am UTC](https://discuss.elastic.co/t/uncaught-typeerror-cannot-read-property-scripted-of-undefined/177206 "2019-04-23T06:34:15Z")

</div>

Error: Uncaught TypeError: Cannot read property 'scripted' of undefined (http://localhost:5601/dlls/vendors.bundle.dll.js:82) at window.onerror (http://localhost:5601/bundles/commons.bundle.js:3:935489) what to do, how…

---

## [Not able to create a machine learning job](https://discuss.elastic.co/t/not-able-to-create-a-machine-learning-job/164600)

<div class="topic-metadata">

**Author:** [@maarab](https://discuss.elastic.co/u/maarab)\
**Replies:** 4\
**Last updated:** [January 21, 2019, 6:46am UTC](https://discuss.elastic.co/t/not-able-to-create-a-machine-learning-job/164600 "2019-01-21T06:46:50Z")

</div>

Hi, I activated a platinum trial license to do a hands-on machine learning. I have an index and have created an index pattern with the same index name without specifying a time field and no wild card. While creating the…

---

## [Add new Kibana dashboard using comandline](https://discuss.elastic.co/t/add-new-kibana-dashboard-using-comandline/143113)

<div class="topic-metadata">

**Author:** [@b22565875b81d856c5b0](https://discuss.elastic.co/u/b22565875b81d856c5b0)\
**Replies:** 4\
**Last updated:** [August 8, 2018, 11:59am UTC](https://discuss.elastic.co/t/add-new-kibana-dashboard-using-comandline/143113 "2018-08-08T11:59:43Z")

</div>

Hi all! I have one problem. I am just trying to insert new Kibana dashboard (or copy of existing dashboard) using comandline. I send PUT request to elasticsearch .kibana index. That request stores JSON file in body with…

---

## [How to use the service on Windows with multiple nodes?](https://discuss.elastic.co/t/how-to-use-the-service-on-windows-with-multiple-nodes/15643)

<div class="topic-metadata">

**Author:** [@Wesley\_Creteur](https://discuss.elastic.co/u/Wesley_Creteur)\
**Replies:** 4\
**Last updated:** [February 6, 2014, 1:57pm UTC](https://discuss.elastic.co/t/how-to-use-the-service-on-windows-with-multiple-nodes/15643 "2014-02-06T13:57:38Z")

</div>

Hi, I'm using elasticsearch on my windows 2012 server and want to use the included service that starts automatically. I'm having 2 nodes (just leaning about that) but i can't get this to work. When i start each…

---

## [How to run multiple instances of Filebeat for the same input/output?](https://discuss.elastic.co/t/how-to-run-multiple-instances-of-filebeat-for-the-same-input-output/286539)

<div class="topic-metadata">

**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\
**Replies:** 5\
**Last updated:** [October 13, 2021, 12:38pm UTC](https://discuss.elastic.co/t/how-to-run-multiple-instances-of-filebeat-for-the-same-input-output/286539 "2021-10-13T12:38:03Z")

</div>

Hi, is there a recommended way to run multiple instances if Filebeat, on different physical servers (VMs) that would process data from the same input and into the same output (ES index)? Basically to have an option to …

[Previous page](https://discuss.elastic.co/top.md?page=1024&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1026&per_page=50&period=all)
