# Top **URL:** https://discuss.elastic.co/top.md?page=1026&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1027 --- ## [Zero Disk space](https://discuss.elastic.co/t/zero-disk-space/55473)
**Author:** [@Avi\_Kesselr](https://discuss.elastic.co/u/Avi_Kesselr)\ **Replies:** 5\ **Last updated:** [July 14, 2016, 9:23am UTC](https://discuss.elastic.co/t/zero-disk-space/55473 "2016-07-14T09:23:41Z")
Hello, We are using Elastic for a year now, and we're very pleased about it. We have 2 nodes sitting on different servers with estimated size of 250GB of data sitting one index with 6 shards each. every now and then we… --- ## [Faceted search using RDF-triple like related documents](https://discuss.elastic.co/t/faceted-search-using-rdf-triple-like-related-documents/15707)
**Author:** [@peos](https://discuss.elastic.co/u/peos)\ **Replies:** 5\ **Last updated:** [February 11, 2014, 3:26pm UTC](https://discuss.elastic.co/t/faceted-search-using-rdf-triple-like-related-documents/15707 "2014-02-11T15:26:17Z")
Hi, We are using ElasticSearch for navigating through our product catalog. We have fairly simple documents like: { "\_index": "catalog", "\_type": "product", "\_id": "4… --- ## [Unable to find any unassigned shards to explain](https://discuss.elastic.co/t/unable-to-find-any-unassigned-shards-to-explain/256733)
**Author:** [@devdatta\_mulgund](https://discuss.elastic.co/u/devdatta_mulgund)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 8:01am UTC](https://discuss.elastic.co/t/unable-to-find-any-unassigned-shards-to-explain/256733 "2020-11-26T08:01:34Z")
I am facing this error in Elasticsearch. Can someone help with this? Below is the output for Elasticsearch APIs: curl localhost:9200/\_cluster/health output: {"cluster\_name":"docker-cluster","status":"green","timed\_ou… --- ## [Convert string to int by reindexing](https://discuss.elastic.co/t/convert-string-to-int-by-reindexing/217456)
**Author:** [@joelxref](https://discuss.elastic.co/u/joelxref)\ **Replies:** 1\ **Last updated:** [January 31, 2020, 8:56pm UTC](https://discuss.elastic.co/t/convert-string-to-int-by-reindexing/217456 "2020-01-31T20:56:49Z")
I have quite a few indexes matching the pattern logstash-\* In them I have a keyword called 'bytes\_read'. It's type according to elasticsearch is string. This is due to an issue with our logstash configuration. I have c… --- ## [Elastic search : EdgeGram, prefix, suffix](https://discuss.elastic.co/t/elastic-search-edgegram-prefix-suffix/10648)
**Author:** [@mohit\_Kumar](https://discuss.elastic.co/u/mohit_Kumar)\ **Replies:** 1\ **Last updated:** [February 8, 2013, 10:43am UTC](https://discuss.elastic.co/t/elastic-search-edgegram-prefix-suffix/10648 "2013-02-08T10:43:22Z")
How one can search a word through its middle or last letters. For example CORPORATION is a words and I am able to search CORPORATION with its initials like COR, CO, C etc by using EdgeGram and prefix filter. but I am… --- ## [error\_class=Fluent::Plugin::ElasticsearchErrorHandler::ElasticsearchError error="400 - Rejected by Elasticsearch](https://discuss.elastic.co/t/error-class-fluent-elasticsearcherror-error-400-rejected-by-elasticsearch/320215)
**Author:** [@Somasuntaram\_MU](https://discuss.elastic.co/u/Somasuntaram_MU)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 7:03am UTC](https://discuss.elastic.co/t/error-class-fluent-elasticsearcherror-error-400-rejected-by-elasticsearch/320215 "2022-12-01T07:03:11Z")
I am setting up EFK stack using docker-compose. Fluentd is able to receive the logs from http-endpoint. But the logs are getting rejected by elasticsearch. Though I am able to receive the error as bad argument and reje… --- ## [ILM rollover not working on max\_size?](https://discuss.elastic.co/t/ilm-rollover-not-working-on-max-size/287999)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 3\ **Last updated:** [October 31, 2021, 3:14pm UTC](https://discuss.elastic.co/t/ilm-rollover-not-working-on-max-size/287999 "2021-10-31T15:14:31Z")
I have an ILM policy with both max\_age and max\_size specified. Rollover happens as expected about ten minutes after max\_age, but does not seem to happen on max\_size. With max\_size set to 10MB I've seen shard sizes up to … --- ## [Missing Available Fields after Update](https://discuss.elastic.co/t/missing-available-fields-after-update/162536)
**Author:** [@bfrd](https://discuss.elastic.co/u/bfrd)\ **Replies:** 3\ **Last updated:** [January 3, 2019, 10:14pm UTC](https://discuss.elastic.co/t/missing-available-fields-after-update/162536 "2019-01-03T22:14:11Z")
Hello, Recently upgraded elastic stack and filebeat on clients from around 6.5.1 to 6.5.3. We use the system filebeat module. In Kibana \> Discover I can still search using terms like "system.auth.user: root" but system.… --- ## [ElasticSearch all Search Threads are waiting on take() method](https://discuss.elastic.co/t/elasticsearch-all-search-threads-are-waiting-on-take-method/155918)
**Author:** [@Sekhar1](https://discuss.elastic.co/u/Sekhar1)\ **Replies:** 8\ **Last updated:** [November 9, 2018, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-all-search-threads-are-waiting-on-take-method/155918 "2018-11-09T13:44:38Z")
Hi Team, ElasticSearch : 6.0.0 Operating System : CentOS 7 JVM arguments \[-Xms4g, -Xmx4g, -XX:MaxMetaspaceSize=512m, -XX:+UseParNewGC, -XX:NewSize=128m, -XX:MaxNewSize=128m, -XX:SurvivorRatio=1024, -XX:MaxGCPauseMilli… --- ## [Remove array field if empty 6.1 version](https://discuss.elastic.co/t/remove-array-field-if-empty-6-1-version/122022)
**Author:** [@Eswar\_Kumar\_Musiboin](https://discuss.elastic.co/u/Eswar_Kumar_Musiboin)\ **Replies:** 3\ **Last updated:** [March 7, 2018, 12:05pm UTC](https://discuss.elastic.co/t/remove-array-field-if-empty-6-1-version/122022 "2018-03-07T12:05:49Z")
Please suggest how to remove array field if empty? I have tried below config : Logstash version is : 6.1.1 if \[tags\] == \[\] { mutate { remove\_field =\> \["tags"\] } } But getting logstash exception: \[2018-03-01T15:07… --- ## [Issue while embedding kibana dashboard into website](https://discuss.elastic.co/t/issue-while-embedding-kibana-dashboard-into-website/100025)
**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\ **Replies:** 3\ **Last updated:** [September 12, 2017, 3:52pm UTC](https://discuss.elastic.co/t/issue-while-embedding-kibana-dashboard-into-website/100025 "2017-09-12T15:52:39Z")
I just created a dashboard with multiple visualizations in kibana. Then i embedded each visualization using iframe. My issue is while embedding each visualization in different iframe , each visualization act as multiple… --- ## [Logstash 5.0.1 released with a security patch](https://discuss.elastic.co/t/logstash-5-0-1-released-with-a-security-patch/66156)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [November 15, 2016, 7:02pm UTC](https://discuss.elastic.co/t/logstash-5-0-1-released-with-a-security-patch/66156 "2016-11-15T19:02:53Z")
Hi all, we would like to announce that Logstash 5.0.1 has been released with an important security patch. Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log t… --- ## [General guidance needed, multiple log files](https://discuss.elastic.co/t/general-guidance-needed-multiple-log-files/1480)
**Author:** [@jmkgreen](https://discuss.elastic.co/u/jmkgreen)\ **Replies:** 3\ **Last updated:** [May 29, 2015, 2:57pm UTC](https://discuss.elastic.co/t/general-guidance-needed-multiple-log-files/1480 "2015-05-29T14:57:38Z")
Hi, I'm new to Logstash and need some guidance on input from multiple log files. I would like to send all of my logs (i.e. messages, secure, httpd ...) to ELK. What I have found is that if I sent them through rsys… --- ## [Elasticsearch: Create API Key based on role?](https://discuss.elastic.co/t/elasticsearch-create-api-key-based-on-role/297188)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-create-api-key-based-on-role/297188 "2022-02-15T15:31:46Z")
In the Create API key API documentation, it shows the complete role definition for the API key being included in the /\_security/api\_key request. However, in the example shown, supposed I already have role-a and role-b d… --- ## [Filebeat cannot connect to Logstash using ssl. curl: (35) TCP connection reset by peer](https://discuss.elastic.co/t/filebeat-cannot-connect-to-logstash-using-ssl-curl-35-tcp-connection-reset-by-peer/212193)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 2\ **Last updated:** [December 17, 2019, 4:42pm UTC](https://discuss.elastic.co/t/filebeat-cannot-connect-to-logstash-using-ssl-curl-35-tcp-connection-reset-by-peer/212193 "2019-12-17T16:42:42Z")
Hi guys, i've set up security for ELK. Everythings works, except the communication between Filebeat and Logstash. Everything is version 7.4 filebeat.yml output.logstash: # The Logstash hosts hosts: \["ip-address:50… --- ## [1 of 4 shards failed](https://discuss.elastic.co/t/1-of-4-shards-failed/188527)
**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\ **Replies:** 2\ **Last updated:** [July 2, 2019, 2:12pm UTC](https://discuss.elastic.co/t/1-of-4-shards-failed/188527 "2019-07-02T14:12:50Z")
Hi all I have a dashboard with some visualisations. One visualisation seem be make a problem because I have the following message: 1 of 4 shards failed She fail sometimes in fonction of my filters. In my ES contai… --- ## [Transform to human readable values](https://discuss.elastic.co/t/transform-to-human-readable-values/97289)
**Author:** [@devans](https://discuss.elastic.co/u/devans)\ **Replies:** 2\ **Last updated:** [August 16, 2017, 3:49pm UTC](https://discuss.elastic.co/t/transform-to-human-readable-values/97289 "2017-08-16T15:49:41Z")
Is there a way in a transform to convert bytes to human readable format? I know I can do a painless script to perform math on a byte value, but can I format to show MB or GB depending on size of the value? --- ## [Timeout during 'Creating Admin Console' phase when installing ECE 1.0.1](https://discuss.elastic.co/t/timeout-during-creating-admin-console-phase-when-installing-ece-1-0-1/93162)
**Author:** [@frasdav](https://discuss.elastic.co/u/frasdav)\ **Replies:** 2\ **Last updated:** [July 14, 2017, 1:51pm UTC](https://discuss.elastic.co/t/timeout-during-creating-admin-console-phase-when-installing-ece-1-0-1/93162 "2017-07-14T13:51:36Z")
The 'Creating Admin Console Elasticsearch backend {}' phase times out after 10 minutes with the following error: -- An error has occurred in bootstrap process. Please examine logs -- - java.util.concurrent.TimeoutExcep… --- ## [Adding custom filter in Kibana aggregation](https://discuss.elastic.co/t/adding-custom-filter-in-kibana-aggregation/108983)
**Author:** [@fiestel](https://discuss.elastic.co/u/fiestel)\ **Replies:** 1\ **Last updated:** [November 24, 2017, 7:34am UTC](https://discuss.elastic.co/t/adding-custom-filter-in-kibana-aggregation/108983 "2017-11-24T07:34:12Z")
Hi Team, I want to use custom filters in Kibana which is actually a combination of multiple filters. Is there any way to write custom queries for filter instead of selecting from dropdown ? --- ## [\[Logstash-ilm-elasticsearch-output\] ERROR - ilm settings in Logstash Elasticsearch output filter](https://discuss.elastic.co/t/logstash-ilm-elasticsearch-output-error-ilm-settings-in-logstash-elasticsearch-output-filter/249680)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 6\ **Last updated:** [October 6, 2020, 9:12am UTC](https://discuss.elastic.co/t/logstash-ilm-elasticsearch-output-error-ilm-settings-in-logstash-elasticsearch-output-filter/249680 "2020-10-06T09:12:23Z")
Hello all, I am currently on Elastic Cloud (ESS) 7.9.1 Have been playing around with the ilm settings in the Elasticsearch output plugin in Logstash. The current setting that has been used and has been working is belo… --- ## [Logstash not receiving data from beats](https://discuss.elastic.co/t/logstash-not-receiving-data-from-beats/133169)
**Author:** [@rohitg](https://discuss.elastic.co/u/rohitg)\ **Replies:** 6\ **Last updated:** [May 31, 2018, 7:54pm UTC](https://discuss.elastic.co/t/logstash-not-receiving-data-from-beats/133169 "2018-05-31T19:54:21Z")
I have setup one elastic cluster (Elasticsearch + Logstash + Kibana) on windows server. And installed beats(filebeat+winlogbeat) on 3 windows servers. I am able to view all logs from 2 servers, but not from third one. … --- ## [Does watcher 1.0 support PKI based auth?](https://discuss.elastic.co/t/does-watcher-1-0-support-pki-based-auth/63698)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 6\ **Last updated:** [October 26, 2016, 6:37am UTC](https://discuss.elastic.co/t/does-watcher-1-0-support-pki-based-auth/63698 "2016-10-26T06:37:13Z")
Hi! Does watcher 1.0 support PKI-based authentication like later versions of wathcher do? I see "When you use PKI-based authentication instead of HTTP basic auth, you don’t need to store any authentication information… --- ## [Order the Multiple exact values query by the order of the query list](https://discuss.elastic.co/t/order-the-multiple-exact-values-query-by-the-order-of-the-query-list/46125)
**Author:** [@Garito](https://discuss.elastic.co/u/Garito)\ **Replies:** 6\ **Last updated:** [April 4, 2016, 4:29pm UTC](https://discuss.elastic.co/t/order-the-multiple-exact-values-query-by-the-order-of-the-query-list/46125 "2016-04-04T16:29:26Z")
It is possible to sort the list of documents in the list order? So if I use this query: { "query": { "bool": { "must": \[ { "match\_phrase": { "path.raw": "/" } … --- ## [Node Connected, But Not Being Utilized](https://discuss.elastic.co/t/node-connected-but-not-being-utilized/27605)
**Author:** [@KalyanaCJ](https://discuss.elastic.co/u/KalyanaCJ)\ **Replies:** 6\ **Last updated:** [August 22, 2015, 11:52pm UTC](https://discuss.elastic.co/t/node-connected-but-not-being-utilized/27605 "2015-08-22T23:52:20Z")
New to Elastic Search, I set up 5 boxes/vms on azure with Ubuntu and setup ES. Its was running good, all default settings, except ES\_HEAP\_SIZE which I set to 50%, which is 14GB, MAX\_LOCKED\_MEMORY=unlimited and bootstrap.… --- ## [\[Ann\] Easy importing/exporting indices with the Knapsack plugin](https://discuss.elastic.co/t/ann-easy-importing-exporting-indices-with-the-knapsack-plugin/10003)
**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\ **Replies:** 6\ **Last updated:** [December 11, 2012, 5:13am UTC](https://discuss.elastic.co/t/ann-easy-importing-exporting-indices-with-the-knapsack-plugin/10003 "2012-12-11T05:13:38Z")
Hi, I have written a very simple and easy-to-use importing/exporting tool for Elasticsearch, the Knapsack plugin. How does it work? Knapsack depends on the \_source field being enabled. By executing an \_expor… --- ## [Merge date and time field](https://discuss.elastic.co/t/merge-date-and-time-field/242862)
**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 10:07am UTC](https://discuss.elastic.co/t/merge-date-and-time-field/242862 "2020-07-28T10:07:34Z")
So, I have been trying to parse fortigate logs using logstash, I came across date and time fields, in fortigate there are two different fields, I tried to parse those fileds using mutate {add\_field =\> { "@timestamp" =\> … --- ## [Disabling shield user caching](https://discuss.elastic.co/t/disabling-shield-user-caching/52424)
**Author:** [@Kiran\_Reddy](https://discuss.elastic.co/u/Kiran_Reddy)\ **Replies:** 4\ **Last updated:** [June 14, 2016, 10:26am UTC](https://discuss.elastic.co/t/disabling-shield-user-caching/52424 "2016-06-14T10:26:54Z")
Hello everyone, I am have installed ES, Kibana and Shield. I have also configured shield to authenticate users when logging into ES, Kibana everything is working fine except that shield asks for the user credentials … --- ## [Can we set request time through env var?](https://discuss.elastic.co/t/can-we-set-request-time-through-env-var/214635)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 5\ **Last updated:** [January 18, 2020, 5:29am UTC](https://discuss.elastic.co/t/can-we-set-request-time-through-env-var/214635 "2020-01-18T05:29:28Z")
Hi using 6.4.2, Can we set elasticsearch.requestTimeout as an env variable ELASTICSEARCH\_REQUEST\_TIMEOUT?? Thanks --- ## [Code/JS API to refresh a visualization](https://discuss.elastic.co/t/code-js-api-to-refresh-a-visualization/93431)
**Author:** [@bishwajeet](https://discuss.elastic.co/u/bishwajeet)\ **Replies:** 5\ **Last updated:** [July 19, 2017, 3:39pm UTC](https://discuss.elastic.co/t/code-js-api-to-refresh-a-visualization/93431 "2017-07-19T15:39:58Z")
Hello. I am writing a custom Kibana plugin. When the parameters in the editor change and somebody pushes the play button, how do I refresh my visualization, I am not getting notified when parameters or the search filte… --- ## [Cluster Health RED unassigned primary and replica shards](https://discuss.elastic.co/t/cluster-health-red-unassigned-primary-and-replica-shards/258891)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 2\ **Last updated:** [December 21, 2020, 7:08am UTC](https://discuss.elastic.co/t/cluster-health-red-unassigned-primary-and-replica-shards/258891 "2020-12-21T07:08:54Z")
Hello to everyone, Cluster health turned red when a node fell from the cluster. When I re-add the node, some directories automatically turned from red to green, but there is an index still red and I don't know what to d… --- ## [Append IP Addresses to "related.ip" ECS Field](https://discuss.elastic.co/t/append-ip-addresses-to-related-ip-ecs-field/192785)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 2\ **Last updated:** [August 2, 2019, 8:51pm UTC](https://discuss.elastic.co/t/append-ip-addresses-to-related-ip-ecs-field/192785 "2019-08-02T20:51:13Z")
I would like to take advantage of the "related.ip" field for pivoting around different sources. I have everything running through Logstash, and I am attempting to append all IP fields to related.ip. Unfortunately, I am o… --- ## [Change character encoding in Logstash](https://discuss.elastic.co/t/change-character-encoding-in-logstash/153806)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 7:09pm UTC](https://discuss.elastic.co/t/change-character-encoding-in-logstash/153806 "2018-10-25T19:09:28Z")
How to specify the character encoding as UTF 16 or ASCII in logstash? My input section as below. I am reading a CSV file using CSV plugin in filter section input { file { path =\> "C:/ITIL\_Incidents.csv" … --- ## [Parentchild relationship in logstash](https://discuss.elastic.co/t/parentchild-relationship-in-logstash/100207)
**Author:** [@swaplogstash](https://discuss.elastic.co/u/swaplogstash)\ **Replies:** 2\ **Last updated:** [September 19, 2017, 1:03pm UTC](https://discuss.elastic.co/t/parentchild-relationship-in-logstash/100207 "2017-09-19T13:03:10Z")
I am using Multiple Jdbc input plugins(since I have two Sqls , one is parent and other is child table) to load data into elastic which has parent child relationship between two mappings. Can you please prov… --- ## [Create a field by doing arithmetic operation on two fileds](https://discuss.elastic.co/t/create-a-field-by-doing-arithmetic-operation-on-two-fileds/83820)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 2\ **Last updated:** [April 27, 2017, 4:19pm UTC](https://discuss.elastic.co/t/create-a-field-by-doing-arithmetic-operation-on-two-fileds/83820 "2017-04-27T16:19:23Z")
{ "actualdatetime": "2016-May-19 00:00:00.965 +05:30", "messagedeliverytime": "Thu May 19 00:00:00 2016", "messagesubmissiontime": "Wed May 18 23:59:13 2016" } This is my actual document. I need a new field … --- ## [Field(Type-String) is getting split during visualize](https://discuss.elastic.co/t/field-type-string-is-getting-split-during-visualize/51538)
**Author:** [@chintan](https://discuss.elastic.co/u/chintan)\ **Replies:** 2\ **Last updated:** [June 1, 2016, 9:56pm UTC](https://discuss.elastic.co/t/field-type-string-is-getting-split-during-visualize/51538 "2016-06-01T21:56:50Z")
I am trying to create table in KIBANA visualize which contains fields like convertToJson\_ReturnValue\_UCIC (Integer),M\_convertToPojo\_ArgumentValue\_Error\_details (String) but fields does not showing proper string(In… --- ## [Kibana 4 beta3: How to apply filters (or multiple filters) when in Discover/Search tab (not visualize)](https://discuss.elastic.co/t/kibana-4-beta3-how-to-apply-filters-or-multiple-filters-when-in-discover-search-tab-not-visualize/21877)
**Author:** [@Ali\_Kheyrollahi](https://discuss.elastic.co/u/Ali_Kheyrollahi)\ **Replies:** 0\ **Last updated:** [January 28, 2015, 1:45pm UTC](https://discuss.elastic.co/t/kibana-4-beta3-how-to-apply-filters-or-multiple-filters-when-in-discover-search-tab-not-visualize/21877 "2015-01-28T13:45:50Z")
Hi, I am trying to filter based on \_type in the search/discover tab. So I know that when I click on a field, I get to see values and can click on the + to filter but if item I am interested is not within the top … --- ## [Discoverで採取したnumber型数値のグラフ表記](https://discuss.elastic.co/t/discover-number/149233)
**Author:** [@hikigi](https://discuss.elastic.co/u/hikigi)\ **Replies:** 3\ **Last updated:** [September 25, 2018, 12:53am UTC](https://discuss.elastic.co/t/discover-number/149233 "2018-09-25T00:53:11Z")
初めまして。初心者の質問で申し訳ございません。 ただいまバックアップのジョブ結果を取得してデータ転送量をグラフ表示するようなダッシュボードをrsync+td-agent(2,3,6-0.el7)+elasticsearch(5.6.12-1)+kibana(5.6.12-1)で構築しようとしています。 rsyncからのログは単純な「バックアップ取得時間（date）」「バックアップ転送byte量(data)」を1行毎に並べたもので、t… --- ## [Split Filter Parse Failure](https://discuss.elastic.co/t/split-filter-parse-failure/145958)
**Author:** [@Rahul\_Javadekar](https://discuss.elastic.co/u/Rahul_Javadekar)\ **Replies:** 1\ **Last updated:** [August 27, 2018, 12:55pm UTC](https://discuss.elastic.co/t/split-filter-parse-failure/145958 "2018-08-27T12:55:39Z")
Hi, please help with splitting the following JSON at "value": {"count":3, "value":\[ {"id":232, "buildNumber":"20180706.7", "status":"completed"}, {"id":231, "buildNumber":"20180706.6", "status":"completed"}, {"id":2… --- ## [INFO File was truncated. Begin reading file from offset 0:](https://discuss.elastic.co/t/info-file-was-truncated-begin-reading-file-from-offset-0/109956)
**Author:** [@willsc](https://discuss.elastic.co/u/willsc)\ **Replies:** 1\ **Last updated:** [December 4, 2017, 5:20am UTC](https://discuss.elastic.co/t/info-file-was-truncated-begin-reading-file-from-offset-0/109956 "2017-12-04T05:20:11Z")
Seeing a disproportionate number of these messages " INFO File was truncated. Begin reading file from offset 0:" in /var/log/filebeats . Curiously complete files are being processed needlessly again. Log ingestion is ha… --- ## [Cloud routing awareness not working?](https://discuss.elastic.co/t/cloud-routing-awareness-not-working/28940)
**Author:** [@Cody\_W](https://discuss.elastic.co/u/Cody_W)\ **Replies:** 1\ **Last updated:** [September 16, 2015, 7:30am UTC](https://discuss.elastic.co/t/cloud-routing-awareness-not-working/28940 "2015-09-16T07:30:10Z")
I'm running a large multinode cluster with both shard allocation awareness and shard allocation filtering. Looking at my shard allocation via the elasticsearch-head plugin, I can see that the shard allocation awareness i… --- ## [Vega Bar Chart](https://discuss.elastic.co/t/vega-bar-chart/283578)
**Author:** [@Alexandre.Bernier](https://discuss.elastic.co/u/Alexandre.Bernier)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 2:56pm UTC](https://discuss.elastic.co/t/vega-bar-chart/283578 "2021-09-13T14:56:29Z")
Hi, I'm actually working on a new VEGA chart and I can't seem to make it work. I'm trying to create something like this Bar Grouped 1 or like this Bar Grouped 2. I wanna display two columns for one X value. The first… --- ## [Request rejected(400) without details(root-cause) in 6.2.4](https://discuss.elastic.co/t/request-rejected-400-without-details-root-cause-in-6-2-4/262185)
**Author:** [@Long\_Quanzheng](https://discuss.elastic.co/u/Long_Quanzheng)\ **Replies:** 4\ **Last updated:** [January 27, 2021, 1:39am UTC](https://discuss.elastic.co/t/request-rejected-400-without-details-root-cause-in-6-2-4/262185 "2021-01-27T01:39:19Z")
Hi, how do I troubleshoot rejected request ElasticSearch 6.2.4? The request got Error: elastic: Error 400 (Bad Request): all shards failed \[type=search\_phase\_execution\_exception\] As the returned but there is no detail… --- ## [ElasticSearch 7.5.2: Scores must be positive or null exception](https://discuss.elastic.co/t/elasticsearch-7-5-2-scores-must-be-positive-or-null-exception/224872)
**Author:** [@bram](https://discuss.elastic.co/u/bram)\ **Replies:** 4\ **Last updated:** [October 29, 2020, 11:31am UTC](https://discuss.elastic.co/t/elasticsearch-7-5-2-scores-must-be-positive-or-null-exception/224872 "2020-10-29T11:31:14Z")
Hello, We're getting this exception from ElasticSearch for one specific search term: { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Scores must be positive o… --- ## [Parser exception when use "include\_upper":true in date range query](https://discuss.elastic.co/t/parser-exception-when-use-include-upper-true-in-date-range-query/247428)
**Author:** [@silvina](https://discuss.elastic.co/u/silvina)\ **Replies:** 4\ **Last updated:** [September 4, 2020, 3:39pm UTC](https://discuss.elastic.co/t/parser-exception-when-use-include-upper-true-in-date-range-query/247428 "2020-09-04T15:39:14Z")
Hi, I get parse\_exception when I try to do this query: { "from":0, "size":999, "query":{ "bool":{ "filter":\[ { "r… --- ## [Having a password-protected Kibana with Basic License](https://discuss.elastic.co/t/having-a-password-protected-kibana-with-basic-license/187535)
**Author:** [@Radu\_Murzea](https://discuss.elastic.co/u/Radu_Murzea)\ **Replies:** 4\ **Last updated:** [June 26, 2019, 10:12am UTC](https://discuss.elastic.co/t/having-a-password-protected-kibana-with-basic-license/187535 "2019-06-26T10:12:56Z")
Disclaimer: it's my first experience with ELK, just keep that in mind. I use ELK stack version 6.5.1 all loaded in a Docker container, by using the sebp/elk Docker image. This comes pre-loaded with the Basic license. I … --- ## [\[solved\] Process names with semi colon not displayed correctly](https://discuss.elastic.co/t/solved-process-names-with-semi-colon-not-displayed-correctly/42871)
**Author:** [@MikeC](https://discuss.elastic.co/u/MikeC)\ **Replies:** 4\ **Last updated:** [February 27, 2016, 5:47pm UTC](https://discuss.elastic.co/t/solved-process-names-with-semi-colon-not-displayed-correctly/42871 "2016-02-27T17:47:18Z")
i've install topbeat and the related kibana graphs and i've noticed that the processes are not displayed correctly. For example, if i got this in the data proc.name:kworker/5:0, in the graphs im getting the zero at the … --- ## [Exact match now works but why is my not\_analyzed field split into tokens?](https://discuss.elastic.co/t/exact-match-now-works-but-why-is-my-not-analyzed-field-split-into-tokens/35798)
**Author:** [@setuk](https://discuss.elastic.co/u/setuk)\ **Replies:** 7\ **Last updated:** [November 29, 2015, 4:18pm UTC](https://discuss.elastic.co/t/exact-match-now-works-but-why-is-my-not-analyzed-field-split-into-tokens/35798 "2015-11-29T16:18:11Z")
Continuing the discussion from Exact match not working: Your POST is to the wrong resource. You need to POST to your index (i.e. testnames2). Your type hrname and its mapping was never create. Notice the type field of … --- ## [How to send alert to zabbix](https://discuss.elastic.co/t/how-to-send-alert-to-zabbix/289928)
**Author:** [@ciment](https://discuss.elastic.co/u/ciment)\ **Replies:** 1\ **Last updated:** [November 23, 2021, 12:53pm UTC](https://discuss.elastic.co/t/how-to-send-alert-to-zabbix/289928 "2021-11-23T12:53:14Z")
Hi, I would like to send some event/alert from kibana to zabbix, when machine learning detects critical problem on my services (default APM job, ML can tag services with tag healthy,warning, critical..) What is the pr… --- ## [Unknown NamedWriteable \[org.elasticsearch.index.query.QueryBuilder\]\[has\_child\] using ESIntegTestCase](https://discuss.elastic.co/t/unknown-namedwriteable-org-elasticsearch-index-query-querybuilder-has-child-using-esintegtestcase/112998)
**Author:** [@vaughnd](https://discuss.elastic.co/u/vaughnd)\ **Replies:** 1\ **Last updated:** [December 22, 2017, 2:00pm UTC](https://discuss.elastic.co/t/unknown-namedwriteable-org-elasticsearch-index-query-querybuilder-has-child-using-esintegtestcase/112998 "2017-12-22T14:00:33Z")
Hi, I'm using ESIntegTestCase to do some integration tests, most work fine, but as soon as I try to use a has\_child query it bombs with "Caused by: java.lang.IllegalArgumentException: Unknown NamedWriteable \[org.elastic… --- ## [Logstash, syslog severity, etc](https://discuss.elastic.co/t/logstash-syslog-severity-etc/28057)
**Author:** [@declick](https://discuss.elastic.co/u/declick)\ **Replies:** 1\ **Last updated:** [August 26, 2015, 6:06am UTC](https://discuss.elastic.co/t/logstash-syslog-severity-etc/28057 "2015-08-26T06:06:48Z")
I am a logstash noob, and have been trying to find the answer for a few hours now, searching here and all over google. Please forgive me if my question has been asked and answered - I'm starting to see double.. I have … [Previous page](https://discuss.elastic.co/top.md?page=1025&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1027&per_page=50&period=all)