# Top **URL:** https://discuss.elastic.co/top.md?page=1031&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1032 --- ## [How to predict the top match or higher score is exact match?](https://discuss.elastic.co/t/how-to-predict-the-top-match-or-higher-score-is-exact-match/9148)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 3\ **Last updated:** [September 26, 2012, 7:57pm UTC](https://discuss.elastic.co/t/how-to-predict-the-top-match-or-higher-score-is-exact-match/9148 "2012-09-26T19:57:40Z")
Hi How can I predict the top one match is most exact match in elastic search. Thanks -- --- ## [Shard sizing as per the RAM available for an instance](https://discuss.elastic.co/t/shard-sizing-as-per-the-ram-available-for-an-instance/254594)
**Author:** [@SaitejaParsi](https://discuss.elastic.co/u/SaitejaParsi)\ **Replies:** 1\ **Last updated:** [November 7, 2020, 2:57am UTC](https://discuss.elastic.co/t/shard-sizing-as-per-the-ram-available-for-an-instance/254594 "2020-11-07T02:57:40Z")
How do the shard size related to the RAM capacity of the es instance? From the articles I read, 20 - 25 shards per GB is ideal and each shard can be from few GB to 10s of GB but should be less than 50GB. Also, the recomm… --- ## [Cpu fluctuating due to java.exe](https://discuss.elastic.co/t/cpu-fluctuating-due-to-java-exe/23567)
**Author:** [@Cheten\_Dev](https://discuss.elastic.co/u/Cheten_Dev)\ **Replies:** 7\ **Last updated:** [May 8, 2015, 1:08pm UTC](https://discuss.elastic.co/t/cpu-fluctuating-due-to-java-exe/23567 "2015-05-08T13:08:25Z")
Hi, I am running elasticsearch 1.4.4 with java 1.8.0.25 on windows machine . i have assigned 2 Gb heap memory java.exe taking almost 70 per cpu ? everything else is working fine Can somebody please give right d… --- ## [Index pattern for data stream](https://discuss.elastic.co/t/index-pattern-for-data-stream/274264)
**Author:** [@anmmok](https://discuss.elastic.co/u/anmmok)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 11:23am UTC](https://discuss.elastic.co/t/index-pattern-for-data-stream/274264 "2021-05-28T11:23:15Z")
I'm trying to visualize the data from the data stream in Kibana. So I’ve created an index template “api-logs” with the index pattern “api-logs\*” and add some documents to the new data stream: PUT api-logs/\_bulk { "cr… --- ## [How to create filter by field name](https://discuss.elastic.co/t/how-to-create-filter-by-field-name/82297)
**Author:** [@yosukew](https://discuss.elastic.co/u/yosukew)\ **Replies:** 2\ **Last updated:** [April 14, 2017, 12:52am UTC](https://discuss.elastic.co/t/how-to-create-filter-by-field-name/82297 "2017-04-14T00:52:49Z")
hi, I want to create filter by field name. I have the csv file as following, and pushing into elasticsearch with logstash. field1,field2,field3,field4,field5 001,10000,20000,30000,40000 002,10001,20001,30001,40001 0… --- ## [Monitoring using metricbeat](https://discuss.elastic.co/t/monitoring-using-metricbeat/236727)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 8\ **Last updated:** [July 6, 2020, 3:18pm UTC](https://discuss.elastic.co/t/monitoring-using-metricbeat/236727 "2020-07-06T15:18:14Z")
I turned on self-monitoring that I want to roll-back and migrate to metricbeat based monitoring for the cluster. I clicked on set self-monitoring which led to the following: I searched elasticsearch.yml but could no… --- ## [Elasticsearch two nodes config](https://discuss.elastic.co/t/elasticsearch-two-nodes-config/194193)
**Author:** [@khergner](https://discuss.elastic.co/u/khergner)\ **Replies:** 8\ **Last updated:** [August 7, 2019, 12:11pm UTC](https://discuss.elastic.co/t/elasticsearch-two-nodes-config/194193 "2019-08-07T12:11:19Z")
Hi everyone; I have a question for high availability System Info -5 different logs -Data size ~75 GB per daily -Total servers 2 nodes (1 master and node) -Daily Indices -ı use xms and xmx 8GB -Master = ram 56 GB … --- ## [Auditbeat conf.d files](https://discuss.elastic.co/t/auditbeat-conf-d-files/130661)
**Author:** [@grants](https://discuss.elastic.co/u/grants)\ **Replies:** 8\ **Last updated:** [May 16, 2018, 12:24am UTC](https://discuss.elastic.co/t/auditbeat-conf-d-files/130661 "2018-05-16T00:24:21Z")
Auditbeat isn't loading all config files from conf.d, it appears as if the conf files are stomping over each other according to the auditbeat log where the rule count from file 1 is first added and then later deleted whe… --- ## [Java Api client documentation example seems to give JacksonParseException](https://discuss.elastic.co/t/java-api-client-documentation-example-seems-to-give-jacksonparseexception/340841)
**Author:** [@Migodden](https://discuss.elastic.co/u/Migodden)\ **Replies:** 5\ **Last updated:** [August 17, 2023, 1:11am UTC](https://discuss.elastic.co/t/java-api-client-documentation-example-seems-to-give-jacksonparseexception/340841 "2023-08-17T01:11:09Z")
I am attempting to query my elastic cluster using the Elasticsearch Java Api client documentation for my version of elastic, however, I am encountering an error. Is this error because of how I am formulating my query? Co… --- ## [Recommendation for upgrading underlying kubernetes nodes](https://discuss.elastic.co/t/recommendation-for-upgrading-underlying-kubernetes-nodes/251298)
**Author:** [@estevez](https://discuss.elastic.co/u/estevez)\ **Replies:** 5\ **Last updated:** [December 9, 2021, 12:07pm UTC](https://discuss.elastic.co/t/recommendation-for-upgrading-underlying-kubernetes-nodes/251298 "2021-12-09T12:07:40Z")
ECK is great at updating Elasticsearch nodes in a rolling fashion but I was wondering if there's any recommendations for how to upgrade the underlying kubernetes worker nodes that Elasticsearch is running on. My thought… --- ## [Create ILM Rollover on existing index](https://discuss.elastic.co/t/create-ilm-rollover-on-existing-index/280814)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 5\ **Last updated:** [August 10, 2021, 11:02pm UTC](https://discuss.elastic.co/t/create-ilm-rollover-on-existing-index/280814 "2021-08-10T23:02:52Z")
Hi, I have an existing index that grows too big and I see perf going down (the index is 85Gb for the moment). I created an IL policy, and now trying to create an index template to apply the policy on. Given the existi… --- ## [ECK v1.4.0: spec.version: Invalid value: \\"6.8.15\\": Unsupported version"](https://discuss.elastic.co/t/eck-v1-4-0-spec-version-invalid-value-6-8-15-unsupported-version/272997)
**Author:** [@QiaolingTang](https://discuss.elastic.co/u/QiaolingTang)\ **Replies:** 5\ **Last updated:** [May 28, 2021, 12:43pm UTC](https://discuss.elastic.co/t/eck-v1-4-0-spec-version-invalid-value-6-8-15-unsupported-version/272997 "2021-05-28T12:43:06Z")
Hello here. I deployed an elasticsearch-eck-operator v1.4.0 on an OpenShift cluster, and created an elasticsearches.elasticsearch.k8s.elastic.co, the default elasticsearch version is 7.12.1, but I wanted to deploy elast… --- ## [Disable x-pack on Auditbeat and Metricbeat clients 7.9 (AWS Elasticsearch service) using OSS version](https://discuss.elastic.co/t/disable-x-pack-on-auditbeat-and-metricbeat-clients-7-9-aws-elasticsearch-service-using-oss-version/258924)
**Author:** [@francisca.munhoz](https://discuss.elastic.co/u/francisca.munhoz)\ **Replies:** 5\ **Last updated:** [January 11, 2021, 11:11am UTC](https://discuss.elastic.co/t/disable-x-pack-on-auditbeat-and-metricbeat-clients-7-9-aws-elasticsearch-service-using-oss-version/258924 "2021-01-11T11:11:10Z")
Hi all, I'm using AWS Elasticsearch service (7.9) and I have installed metricbeat and auditbeat clients (oss) 7.9.1 on a linux node: Beats client source: However somehow x-pack check is enabled, so I'm getting … --- ## [Format index pattern field does not work](https://discuss.elastic.co/t/format-index-pattern-field-does-not-work/199503)
**Author:** [@bodo.te](https://discuss.elastic.co/u/bodo.te)\ **Replies:** 5\ **Last updated:** [September 19, 2019, 5:31pm UTC](https://discuss.elastic.co/t/format-index-pattern-field-does-not-work/199503 "2019-09-19T17:31:53Z")
I have setup metricbeat, logstash, ES and kibana according to the tutorial https://www.elastic.co/guide/en/elastic-stack-get-started/current/get-started-elastic-stack.html which works so far as expected. Now I try to u… --- ## [Deleted mapping is still applied by Elasticsearch](https://discuss.elastic.co/t/deleted-mapping-is-still-applied-by-elasticsearch/151820)
**Author:** [@alex\_b](https://discuss.elastic.co/u/alex_b)\ **Replies:** 5\ **Last updated:** [October 16, 2018, 2:28pm UTC](https://discuss.elastic.co/t/deleted-mapping-is-still-applied-by-elasticsearch/151820 "2018-10-16T14:28:46Z")
Hi, after changing a mapping, the old mapping is still applied. I restarted ES, then even restarted Windows, but the problem is still there. An object type, lets call it ExampleType, is saved in an index, lets call it … --- ## [Node failed to send join request to master](https://discuss.elastic.co/t/node-failed-to-send-join-request-to-master/170817)
**Author:** [@seowcy](https://discuss.elastic.co/u/seowcy)\ **Replies:** 4\ **Last updated:** [March 6, 2019, 1:51am UTC](https://discuss.elastic.co/t/node-failed-to-send-join-request-to-master/170817 "2019-03-06T01:51:37Z")
Hi, I have an elasticsearch cluster with 4 nodes (4 windows hosts, each running an ubuntu VM where elasticsearch is running) currently running smoothly without any issues. I am trying to add node 5 to the cluster, but a… --- ## [Timestamp not enough precision](https://discuss.elastic.co/t/timestamp-not-enough-precision/98531)
**Author:** [@Robert\_Kovacs](https://discuss.elastic.co/u/Robert_Kovacs)\ **Replies:** 4\ **Last updated:** [August 28, 2017, 12:59pm UTC](https://discuss.elastic.co/t/timestamp-not-enough-precision/98531 "2017-08-28T12:59:49Z")
I have logs with time precision of only seconds like this: 2017-08-09 14:54:38 INFO something 2017-08-09 14:54:38 INFO something 2017-08-09 14:54:38 DEBUG something 2017-08-09 14:54:38 INFO something I use the date … --- ## [Nothing Happens After Restart](https://discuss.elastic.co/t/nothing-happens-after-restart/62240)
**Author:** [@Romain\_PZK](https://discuss.elastic.co/u/Romain_PZK)\ **Replies:** 4\ **Last updated:** [October 5, 2016, 8:52am UTC](https://discuss.elastic.co/t/nothing-happens-after-restart/62240 "2016-10-05T08:52:43Z")
Hello, I've tried some modifications on my logstash config file and when I restart logstash nothing happens after "Pipeline main started". If I do a roll back on the config file, it's the same problem. Logstash not sta… --- ## [Create Index / Type /Mapping in ELS for Kibana 4](https://discuss.elastic.co/t/create-index-type-mapping-in-els-for-kibana-4/24053)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 4\ **Last updated:** [June 23, 2015, 7:23am UTC](https://discuss.elastic.co/t/create-index-type-mapping-in-els-for-kibana-4/24053 "2015-06-23T07:23:50Z")
I would like to create a index/type/mapping manually in Elastic and post the data into it via custom script. I could be able to view the data perfectly in Kibana 3 without any problem. But when I migrate the kibana 3 t… --- ## [Appsearch language support by ES plugins](https://discuss.elastic.co/t/appsearch-language-support-by-es-plugins/202389)
**Author:** [@mrcallocu](https://discuss.elastic.co/u/mrcallocu)\ **Replies:** 2\ **Last updated:** [October 4, 2019, 8:56pm UTC](https://discuss.elastic.co/t/appsearch-language-support-by-es-plugins/202389 "2019-10-04T20:56:47Z")
Hello, My language is not supported by default by appserach, however I would like to use one of the analysis plugins available for Elasticserach (Stempel Polish Analysis Plugin | Elasticsearch Plugins and Integrations \[… --- ## [Does not contain a definition for 'Type' in ASP.NET MVC Elasticsearch](https://discuss.elastic.co/t/does-not-contain-a-definition-for-type-in-asp-net-mvc-elasticsearch/247830)
**Author:** [@Zylne](https://discuss.elastic.co/u/Zylne)\ **Replies:** 1\ **Last updated:** [September 8, 2020, 12:10pm UTC](https://discuss.elastic.co/t/does-not-contain-a-definition-for-type-in-asp-net-mvc-elasticsearch/247830 "2020-09-08T12:10:09Z")
I want to create a search on "user" index with ASP.NET MVC. DataSearch Action Method: public JsonResult DataSearch(string name) { var responsedata = \_connectionToEs.EsClient().Search\(s =\> s … --- ## [Email notification on ERROR in log](https://discuss.elastic.co/t/email-notification-on-error-in-log/20196)
**Author:** [@Prasad\_Lele](https://discuss.elastic.co/u/Prasad_Lele)\ **Replies:** 1\ **Last updated:** [October 11, 2014, 7:03am UTC](https://discuss.elastic.co/t/email-notification-on-error-in-log/20196 "2014-10-11T07:03:53Z")
Hi frnds, I have configured, Logstash + redis + indexer + elasticsearch + kibana in mysetup for logcollection. Using beaver + rsyslog agent to pushlogs to the logstash. The logs are being collected successfully. W… --- ## [Update by query date field (painless) and add hours](https://discuss.elastic.co/t/update-by-query-date-field-painless-and-add-hours/252291)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 3\ **Last updated:** [October 19, 2020, 11:15am UTC](https://discuss.elastic.co/t/update-by-query-date-field-painless-and-add-hours/252291 "2020-10-19T11:15:31Z")
Hi, Some basics in painless (the painful syntax) Trying to update a filed to have the timestamp value + X hours. I was trying the following POST index\*/\_update\_by\_query { "script": { "source": "ctx.\_source.time… --- ## [Options for increasing precision](https://discuss.elastic.co/t/options-for-increasing-precision/219920)
**Author:** [@rathcke](https://discuss.elastic.co/u/rathcke)\ **Replies:** 3\ **Last updated:** [August 10, 2020, 8:41am UTC](https://discuss.elastic.co/t/options-for-increasing-precision/219920 "2020-08-10T08:41:02Z")
I think this question has been asked a few times in various ways. As I understand, AppSearch aims to have a high recall. We have a use-case where we'd like to increase precision. One way to do that is by adjusting the f… --- ## [Count instances of a field in Elasticsearch index](https://discuss.elastic.co/t/count-instances-of-a-field-in-elasticsearch-index/236907)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 3\ **Last updated:** [June 15, 2020, 2:08am UTC](https://discuss.elastic.co/t/count-instances-of-a-field-in-elasticsearch-index/236907 "2020-06-15T02:08:07Z")
How to count the instances of a particular field, across all documents, in a given Elasticsearch index. For example, if I've got the following documents in index goober : { '\_id':'foo', 'field1':'a value', … --- ## ['\_source excludes' equivalent on Kibana discover](https://discuss.elastic.co/t/source-excludes-equivalent-on-kibana-discover/192880)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 3\ **Last updated:** [July 30, 2019, 6:23pm UTC](https://discuss.elastic.co/t/source-excludes-equivalent-on-kibana-discover/192880 "2019-07-30T18:23:33Z")
Hi, I have few very large fields, in order of few MB's. When i query for something on that index i used to get "length of the field crossed max allowed for highlighting". To work around this problem, i started indexing … --- ## [Heat map y-axis sort order](https://discuss.elastic.co/t/heat-map-y-axis-sort-order/140376)
**Author:** [@stemps](https://discuss.elastic.co/u/stemps)\ **Replies:** 3\ **Last updated:** [August 6, 2018, 8:13pm UTC](https://discuss.elastic.co/t/heat-map-y-axis-sort-order/140376 "2018-08-06T20:13:48Z")
Hi, I'm trying to plot a KPI distribution over days of the week (x-axis) and hour of day (y-axis). I got it all together using 2 histogram splits, but I can't find a way to sort the y-axis by axis value. The values are … --- ## [Is there a way to enforce the execution order of filters?](https://discuss.elastic.co/t/is-there-a-way-to-enforce-the-execution-order-of-filters/81856)
**Author:** [@AndreCimander](https://discuss.elastic.co/u/AndreCimander)\ **Replies:** 3\ **Last updated:** [April 11, 2017, 10:26am UTC](https://discuss.elastic.co/t/is-there-a-way-to-enforce-the-execution-order-of-filters/81856 "2017-04-11T10:26:53Z")
I finally got around to profile some slow running parts of our application and I found a query that is taking way too long and which also creates a good chunk of our cluster load. Profiling the query in Kibana revealed t… --- ## [Getting error when doing back up](https://discuss.elastic.co/t/getting-error-when-doing-back-up/44276)
**Author:** [@chichu](https://discuss.elastic.co/u/chichu)\ **Replies:** 3\ **Last updated:** [March 14, 2016, 8:15am UTC](https://discuss.elastic.co/t/getting-error-when-doing-back-up/44276 "2016-03-14T08:15:15Z")
When i run back up command i am getting the below error. Error {"error":"RepositoryException\[\[my\_backup\] failed to create repository\]; nested: CreationException\[Guice creation errors:\\n\\n1) Error injecting constructor,… --- ## [Watcher is getting http status code \[401\]](https://discuss.elastic.co/t/watcher-is-getting-http-status-code-401/31558)
**Author:** [@chaudharikiranp](https://discuss.elastic.co/u/chaudharikiranp)\ **Replies:** 3\ **Last updated:** [February 26, 2016, 8:44pm UTC](https://discuss.elastic.co/t/watcher-is-getting-http-status-code-401/31558 "2016-02-26T20:44:54Z")
Hi, does anyone have the sample role configuration for watcher roles with shield. I can not see anywhere in the elasticsearch documentation the roles to be added for watcher in roles.yml. Very less information is availab… --- ## [How to install APM agent on Kibana server?](https://discuss.elastic.co/t/how-to-install-apm-agent-on-kibana-server/254844)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 6\ **Last updated:** [November 17, 2020, 12:01am UTC](https://discuss.elastic.co/t/how-to-install-apm-agent-on-kibana-server/254844 "2020-11-17T00:01:43Z")
Hi All, Any documents on installing APM agent on Kibana node? Followed the documentation, but am confused. Which agent? Java? How to set up the properties? etc. Any lead will be much appreciated. Thanks --- ## [Max data that can be stored based on memory configured](https://discuss.elastic.co/t/max-data-that-can-be-stored-based-on-memory-configured/251752)
**Author:** [@mrudrego](https://discuss.elastic.co/u/mrudrego)\ **Replies:** 6\ **Last updated:** [October 20, 2020, 6:57am UTC](https://discuss.elastic.co/t/max-data-that-can-be-stored-based-on-memory-configured/251752 "2020-10-20T06:57:15Z")
Hi, I was going through the blog which talks about shards in a cluster https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster In one of their tips they say " A good rule-of-thumb is to en… --- ## [Date format error when splitting a chart with date histogram](https://discuss.elastic.co/t/date-format-error-when-splitting-a-chart-with-date-histogram/200238)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 6\ **Last updated:** [September 26, 2019, 9:47pm UTC](https://discuss.elastic.co/t/date-format-error-when-splitting-a-chart-with-date-histogram/200238 "2019-09-26T21:47:30Z")
Hello, I'm currently using 6.7 If I create a visualization (either a pie or a histogram) and split it with a Date histogram aggregation, the axis labels are not formatted (key in millisec is shown), while the tooltip c… --- ## [Can only start a prospector when all related states are finished](https://discuss.elastic.co/t/can-only-start-a-prospector-when-all-related-states-are-finished/133644)
**Author:** [@xdholy](https://discuss.elastic.co/u/xdholy)\ **Replies:** 6\ **Last updated:** [June 13, 2018, 8:18am UTC](https://discuss.elastic.co/t/can-only-start-a-prospector-when-all-related-states-are-finished/133644 "2018-06-13T08:18:46Z")
Hello, I'm getting this error multiple times now. I realize I shouldn't define multiple prospectors over one file, but i put all my server's log into same log file. I need to use multiple prospector to define different… --- ## [Extract subdomain from referrer in logstash](https://discuss.elastic.co/t/extract-subdomain-from-referrer-in-logstash/133729)
**Author:** [@Med](https://discuss.elastic.co/u/Med)\ **Replies:** 6\ **Last updated:** [May 30, 2018, 1:24am UTC](https://discuss.elastic.co/t/extract-subdomain-from-referrer-in-logstash/133729 "2018-05-30T01:24:26Z")
I use logstash to send apache log to elasticsearch. In the file config of logstash I have a filter grok { match =\> { "message" =\> "%{COMBINEDAPACHELOG}"} } In the list of fields of the obtained data I have the field … --- ## [Logstash Syntax Error](https://discuss.elastic.co/t/logstash-syntax-error/65839)
**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\ **Replies:** 6\ **Last updated:** [November 13, 2016, 5:28pm UTC](https://discuss.elastic.co/t/logstash-syntax-error/65839 "2016-11-13T17:28:45Z")
Hi there guys, Can you help me with this issue? output { if \[@metadata\]\[beat\] { elasticsearch { hosts =\> \["server"\] sniffing =\> true manage\_template =\> false index =\> "%{\[@metadata\]\[beat\]}… --- ## [Wrong timestamp, when trying to convert local time to UTC](https://discuss.elastic.co/t/wrong-timestamp-when-trying-to-convert-local-time-to-utc/239111)
**Author:** [@asmerb](https://discuss.elastic.co/u/asmerb)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 2:21pm UTC](https://discuss.elastic.co/t/wrong-timestamp-when-trying-to-convert-local-time-to-utc/239111 "2020-06-29T14:21:09Z")
Hi everyone, I am using LogStash and ElasticSearch 6.3.1 Currently having an issue where my @timestamp is being shifted by two hours. I am picking up records in logstash that comes from filebeat, the timestamp here is… --- ## [Kibana OSS 7.0](https://discuss.elastic.co/t/kibana-oss-7-0/199102)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 3:56pm UTC](https://discuss.elastic.co/t/kibana-oss-7-0/199102 "2019-09-11T15:56:31Z")
elasticsearch-oss-7.0 kibana-oss-7.0 I went through the release notes for kibana-oss-7.0 and from what I can tell we should have access to Canvas as well as a few other tools in Kibana. However we currently only have … --- ## [Elasticsearch not parsing message string to JSON](https://discuss.elastic.co/t/elasticsearch-not-parsing-message-string-to-json/172514)
**Author:** [@ChrisOdney](https://discuss.elastic.co/u/ChrisOdney)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 9:27am UTC](https://discuss.elastic.co/t/elasticsearch-not-parsing-message-string-to-json/172514 "2019-03-18T09:27:59Z")
Hi, I am getting log messages to ES from logstash, which is parsed by the ingest pipeline in ES. These messages are actually the syslog filebeat messages. The 'message' value is a string: "message": \[ "Feb 21 0… --- ## [Filebeat 6.3.1 UDP + Json](https://discuss.elastic.co/t/filebeat-6-3-1-udp-json/140624)
**Author:** [@ateixeira-pt](https://discuss.elastic.co/u/ateixeira-pt)\ **Replies:** 2\ **Last updated:** [July 18, 2018, 9:31pm UTC](https://discuss.elastic.co/t/filebeat-6-3-1-udp-json/140624 "2018-07-18T21:31:10Z")
Hi, I'm trying to send a JSON Log over UDP, so filebeat forwards it to the ElasticSearch. The thing is, I can't get it to decode the JSON payload I also tried with a \\n and a \\n\\n to no luck { "@timestamp": "2018-… --- ## [Image Display Size in Kibana](https://discuss.elastic.co/t/image-display-size-in-kibana/107841)
**Author:** [@EricWS](https://discuss.elastic.co/u/EricWS)\ **Replies:** 2\ **Last updated:** [November 20, 2017, 4:54am UTC](https://discuss.elastic.co/t/image-display-size-in-kibana/107841 "2017-11-20T04:54:25Z")
Hi All, I have a Kibana dashboard I built which displays social media posts and I have two questions I am hoping to get kelp on as I have been unable to figure it out. I currently display images associated with the p… --- ## [\[Java\] Quick way to get the failure number in BulkResponse?](https://discuss.elastic.co/t/java-quick-way-to-get-the-failure-number-in-bulkresponse/57985)
**Author:** [@trango](https://discuss.elastic.co/u/trango)\ **Replies:** 2\ **Last updated:** [August 21, 2016, 4:24am UTC](https://discuss.elastic.co/t/java-quick-way-to-get-the-failure-number-in-bulkresponse/57985 "2016-08-21T04:24:04Z")
Hello everybody, I use BulkProcessor and want to get the number of failure messages in BulkResponse. With the current APIs, I see 2 ways. Way 1: iterate over BulkResponse and count @Override public void afterB… --- ## [Timeout on Elasticsearch](https://discuss.elastic.co/t/timeout-on-elasticsearch/54515)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 2\ **Last updated:** [July 4, 2016, 6:53am UTC](https://discuss.elastic.co/t/timeout-on-elasticsearch/54515 "2016-07-04T06:53:50Z")
Hi, I have every day timeout on plugin elasticsearch of 3000ms. In the log I see \[2016-07-01 09:43:16,311\]\[WARN \]\[indices.ttl \] \[Franklin Hall\] failed to execute ttl purge java.lang.OutOfMemoryError: Ja… --- ## [Ctx.trigger.triggered\_time math and formatting](https://discuss.elastic.co/t/ctx-trigger-triggered-time-math-and-formatting/328501)
**Author:** [@ffmdsuperit](https://discuss.elastic.co/u/ffmdsuperit)\ **Replies:** 7\ **Last updated:** [March 28, 2023, 6:24pm UTC](https://discuss.elastic.co/t/ctx-trigger-triggered-time-math-and-formatting/328501 "2023-03-28T18:24:59Z")
I have a Watcher that filters on a timestamp range. I'd like to capture the searched timestamp range by saving something like "Start": "ctx.trigger.triggered\_time - 23m" and "End": "ctx.trigger.triggered\_time - 22m" into… --- ## [Distinct queries across multiple types in one request?](https://discuss.elastic.co/t/distinct-queries-across-multiple-types-in-one-request/6474)
**Author:** [@qjh](https://discuss.elastic.co/u/qjh)\ **Replies:** 7\ **Last updated:** [June 1, 2012, 3:28pm UTC](https://discuss.elastic.co/t/distinct-queries-across-multiple-types-in-one-request/6474 "2012-06-01T15:28:05Z")
Is it possible to issue distinct queries to multiple types within the same index? I have a few types with different mappings (some overlap) and I need to query some of the fields of each with the same query string, b… --- ## [Missing plugin-descriptor.properties](https://discuss.elastic.co/t/missing-plugin-descriptor-properties/261650)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 1:13pm UTC](https://discuss.elastic.co/t/missing-plugin-descriptor-properties/261650 "2021-01-21T13:13:20Z")
Experimenting with an offline install of https://artifacts.elastic.co/downloads/elasticsearch-plugins/repository-s3/repository-s3-7.10.0.zip into an Elasticsearch which says it's 7.10.0 using the command sudo bin/elasti… --- ## [How to get shard id from document Id?](https://discuss.elastic.co/t/how-to-get-shard-id-from-document-id/207250)
**Author:** [@chaitup](https://discuss.elastic.co/u/chaitup)\ **Replies:** 1\ **Last updated:** [November 11, 2019, 5:33am UTC](https://discuss.elastic.co/t/how-to-get-shard-id-from-document-id/207250 "2019-11-11T05:33:27Z")
I am trying to do a large number of lookups and searches (in order a few million) based on document ids. Instead of sending requests to all shards I would like to partition document id's by specific shards they belong to… --- ## [Getting multiple exception on restart of node - org.elasticsearch.action.FailedNodeException](https://discuss.elastic.co/t/getting-multiple-exception-on-restart-of-node-org-elasticsearch-action-failednodeexception/120173)
**Author:** [@nrmohta](https://discuss.elastic.co/u/nrmohta)\ **Replies:** 1\ **Last updated:** [March 1, 2018, 11:19am UTC](https://discuss.elastic.co/t/getting-multiple-exception-on-restart-of-node-org-elasticsearch-action-failednodeexception/120173 "2018-03-01T11:19:28Z")
Hi Team, We got below exceptions multiple times in our cluster (2 nodes) setup. After some times it gets auto recovered and ES is running fine. We want to understand what is the exact cause and is there any data loss sc… --- ## [Java heap space when using unique count on specific field](https://discuss.elastic.co/t/java-heap-space-when-using-unique-count-on-specific-field/79047)
**Author:** [@madleeen](https://discuss.elastic.co/u/madleeen)\ **Replies:** 1\ **Last updated:** [March 20, 2017, 11:38am UTC](https://discuss.elastic.co/t/java-heap-space-when-using-unique-count-on-specific-field/79047 "2017-03-20T11:38:28Z")
Hello, first of all, I am very new to Elasticsearch, which could be the main problem :slight\_smile: . My settings: I am running single node Elasticsearch (5.2.2) and Kibana (5.2.2) in Docker containers. I also tried t… --- ## [Logs of an Elasticsearch](https://discuss.elastic.co/t/logs-of-an-elasticsearch/257156)
**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 9:48am UTC](https://discuss.elastic.co/t/logs-of-an-elasticsearch/257156 "2020-12-08T09:48:47Z")
Hi, I have deployed Elasticsearch 7.10.0 in kubernetes using Operator. I have path.logs: /usr/share/elasticsearch/logs , here I am getting only gc.log Apart from this I am not getting any elasticsearch logs. So here… [Previous page](https://discuss.elastic.co/top.md?page=1030&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1032&per_page=50&period=all)