# Top

**URL:** https://discuss.elastic.co/top.md?page=1055&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1056

---

## [Parameters in inline script](https://discuss.elastic.co/t/parameters-in-inline-script/74959)

<div class="topic-metadata">

**Author:** [@Leo\_Li](https://discuss.elastic.co/u/Leo_Li)\
**Replies:** 1\
**Last updated:** [February 15, 2017, 2:33am UTC](https://discuss.elastic.co/t/parameters-in-inline-script/74959 "2017-02-15T02:33:13Z")

</div>

Hi, does below query ever work in Elasticsearch 5.x? "inline": "doc\['my\_field'\] \* multiplier", "params": { "multiplier": 2 } Whenever I use parameters in query I always got compile errors. The query is from …

---

## [How to exclude APM self sent events capturing](https://discuss.elastic.co/t/how-to-exclude-apm-self-sent-events-capturing/160134)

<div class="topic-metadata">

**Author:** [@Arsalan\_Rabdanov](https://discuss.elastic.co/u/Arsalan_Rabdanov)\
**Replies:** 6\
**Last updated:** [December 10, 2018, 5:27pm UTC](https://discuss.elastic.co/t/how-to-exclude-apm-self-sent-events-capturing/160134 "2018-12-10T17:27:40Z")

</div>

Hi! I like a lot solution with elastic APM. I've configured tracing request through microservice gateway to microservices. Tracing timeline visualization looks great. But sometimes POST apm-server:8200/intake/v2/events b…

---

## [Data Viz documentation](https://discuss.elastic.co/t/data-viz-documentation/108457)

<div class="topic-metadata">

**Author:** [@DylanAlloy](https://discuss.elastic.co/u/DylanAlloy)\
**Replies:** 8\
**Last updated:** [November 21, 2017, 7:41pm UTC](https://discuss.elastic.co/t/data-viz-documentation/108457 "2017-11-21T19:41:00Z")

</div>

Maybe I'm confused about something (usually am) but I've noticed when trying to use the Shakespeare sample data to get an idea of how to do visualizations, the 'Options' tab is not there for me to use to group the bar ch…

---

## [Synced Snapshots in S3 don't show up as available in the Repository](https://discuss.elastic.co/t/synced-snapshots-in-s3-dont-show-up-as-available-in-the-repository/289226)

<div class="topic-metadata">

**Author:** [@mattph](https://discuss.elastic.co/u/mattph)\
**Replies:** 3\
**Last updated:** [November 16, 2021, 6:23am UTC](https://discuss.elastic.co/t/synced-snapshots-in-s3-dont-show-up-as-available-in-the-repository/289226 "2021-11-16T06:23:07Z")

</div>

I'm new to Elasticsearch and trying to copy an index from a Dev environment to a Test environment. I've installed the S3 Repository plugin in both Dev and Test and configured the repository in Kibana. I setup a policy i…

---

## [Logstash - not update a document even if document\_id is specified](https://discuss.elastic.co/t/logstash-not-update-a-document-even-if-document-id-is-specified/283660)

<div class="topic-metadata">

**Author:** [@reed](https://discuss.elastic.co/u/reed)\
**Replies:** 3\
**Last updated:** [September 8, 2021, 2:23pm UTC](https://discuss.elastic.co/t/logstash-not-update-a-document-even-if-document-id-is-specified/283660 "2021-09-08T14:23:15Z")

</div>

Hi all, I'm new with elastic technology and I wold ask this: I have my pipeline with output { elasticsearch { hosts =\> "localhost:9200" index =\> "crsi-index-template-%{+yyyy.MM.dd}" document\_id …

---

## [Querying elastic search DB using the index name - failing](https://discuss.elastic.co/t/querying-elastic-search-db-using-the-index-name-failing/119799)

<div class="topic-metadata">

**Author:** [@ranganath\_nangineni](https://discuss.elastic.co/u/ranganath_nangineni)\
**Replies:** 3\
**Last updated:** [February 14, 2018, 3:22pm UTC](https://discuss.elastic.co/t/querying-elastic-search-db-using-the-index-name-failing/119799 "2018-02-14T15:22:13Z")

</div>

Hi I have multiple indexes in my elastic search DB. I am trying to query one of the index among them but the query is failing and it is connecting to a differnt index rather than the one that i mentioned in the query. T…

---

## [How to add multiple host](https://discuss.elastic.co/t/how-to-add-multiple-host/94087)

<div class="topic-metadata">

**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\
**Replies:** 3\
**Last updated:** [July 24, 2017, 7:37am UTC](https://discuss.elastic.co/t/how-to-add-multiple-host/94087 "2017-07-24T07:37:54Z")

</div>

I have a filebeat installed on server and topbeat on another, and i want to see the filebeat log in topbeat dashboard. (what changes should be done in topbeat .yml) ??

---

## [Set KIbana field format using APIs for .kibana index](https://discuss.elastic.co/t/set-kibana-field-format-using-apis-for-kibana-index/92352)

<div class="topic-metadata">

**Author:** [@raazeev64](https://discuss.elastic.co/u/raazeev64)\
**Replies:** 3\
**Last updated:** [July 11, 2017, 1:27pm UTC](https://discuss.elastic.co/t/set-kibana-field-format-using-apis-for-kibana-index/92352 "2017-07-11T13:27:42Z")

</div>

I have numeric fields which need to be displayed asPercentage or Memory format. I upload visualizations using a curl request to the visualization API. But then I need to set up the field formats manually from kibana. C…

---

## [Http\_poller: dynamic URL parameters](https://discuss.elastic.co/t/http-poller-dynamic-url-parameters/81986)

<div class="topic-metadata">

**Author:** [@volkera](https://discuss.elastic.co/u/volkera)\
**Replies:** 3\
**Last updated:** [April 12, 2017, 3:04pm UTC](https://discuss.elastic.co/t/http-poller-dynamic-url-parameters/81986 "2017-04-12T15:04:26Z")

</div>

Is it possible to use a variables instead of hardcoded date in the url? http\_poller { type =\> app\_android urls =\> { app\_android =\> { method =\> get url =\> "Asbury Park Press NJ | Jersey Shore & New Jersey News" he…

---

## [Unable to connect filebeat with kibana to load dashboard](https://discuss.elastic.co/t/unable-to-connect-filebeat-with-kibana-to-load-dashboard/313300)

<div class="topic-metadata">

**Author:** [@Ahlam\_Abubaker](https://discuss.elastic.co/u/Ahlam_Abubaker)\
**Replies:** 5\
**Last updated:** [August 31, 2022, 9:01am UTC](https://discuss.elastic.co/t/unable-to-connect-filebeat-with-kibana-to-load-dashboard/313300 "2022-08-31T09:01:11Z")

</div>

Hi there, I'm running kibana behind apache2 proxy kibana is running in localhost port 5601 and my apache2 IP & port as 46.246.x.x:yyyy when I ran ./filebeat setup -e command in order to connect filebeat on client ser…

---

## [Is Elastic Search Supports Partition by Column and Overwrite Specific Partition data within the Same Index?](https://discuss.elastic.co/t/is-elastic-search-supports-partition-by-column-and-overwrite-specific-partition-data-within-the-same-index/242170)

<div class="topic-metadata">

**Author:** [@dillibabu.mekala](https://discuss.elastic.co/u/dillibabu.mekala)\
**Replies:** 5\
**Last updated:** [July 23, 2020, 8:06am UTC](https://discuss.elastic.co/t/is-elastic-search-supports-partition-by-column-and-overwrite-specific-partition-data-within-the-same-index/242170 "2020-07-23T08:06:03Z")

</div>

Hi Team, I have a csv file where i need to store this data in index ("carsdata") by partition column. Input CSV (cars-data.csv): carname,enginetype,cost,countryId,modelnumber BMW1,Petrol,10000,1,12 BMW2,Petrol,20000,…

---

## [ElasticSearch integration with Webcenter Content](https://discuss.elastic.co/t/elasticsearch-integration-with-webcenter-content/114483)

<div class="topic-metadata">

**Author:** [@prateeklpatel](https://discuss.elastic.co/u/prateeklpatel)\
**Replies:** 5\
**Last updated:** [January 8, 2018, 11:18am UTC](https://discuss.elastic.co/t/elasticsearch-integration-with-webcenter-content/114483 "2018-01-08T11:18:43Z")

</div>

How to integrate elasticsearch with Oracle webcenter content.

---

## [\_source field gets: "http\_request\_failure"](https://discuss.elastic.co/t/source-field-gets-http-request-failure/111281)

<div class="topic-metadata">

**Author:** [@Rym\_Guerbi\_Michaut](https://discuss.elastic.co/u/Rym_Guerbi_Michaut)\
**Replies:** 5\
**Last updated:** [December 15, 2017, 10:22am UTC](https://discuss.elastic.co/t/source-field-gets-http-request-failure/111281 "2017-12-15T10:22:28Z")

</div>

Hi there, I want to fetch JSON formatted logs from a URL. I'm using HTTP\_POLLER. Sending it to Elasticsearch output under the name: "json\_10meilleurs\_logs" Here's my config file: input { http\_poller { urls =\> { …

---

## [X-Pack 5.0 Beta 1 is not available in Maven repository](https://discuss.elastic.co/t/x-pack-5-0-beta-1-is-not-available-in-maven-repository/61571)

<div class="topic-metadata">

**Author:** [@lukashartmann](https://discuss.elastic.co/u/lukashartmann)\
**Replies:** 5\
**Last updated:** [November 3, 2016, 4:59pm UTC](https://discuss.elastic.co/t/x-pack-5-0-beta-1-is-not-available-in-maven-repository/61571 "2016-11-03T16:59:42Z")

</div>

It seems like the 5.0.0-beta1 artifact is still missing: https://maven.elasticsearch.org/releases/org/elasticsearch/plugin/x-pack/ When is it scheduled to be released? BTW https://www.elastic.co/guide/en/x-pack/current…

---

## [Statistical facet on length of string field](https://discuss.elastic.co/t/statistical-facet-on-length-of-string-field/16974)

<div class="topic-metadata">

**Author:** [@CC1](https://discuss.elastic.co/u/CC1)\
**Replies:** 5\
**Last updated:** [April 13, 2014, 5:15pm UTC](https://discuss.elastic.co/t/statistical-facet-on-length-of-string-field/16974 "2014-04-13T17:15:53Z")

</div>

I would like to retrieve statistical data about a string field like the min, max and average length (by counting the number of characters inside the string). I am using CURL to do this and I have what I have tried so…

---

## [Wildcard match on multiple fields](https://discuss.elastic.co/t/wildcard-match-on-multiple-fields/273852)

<div class="topic-metadata">

**Author:** [@Rammi22](https://discuss.elastic.co/u/Rammi22)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 7:11am UTC](https://discuss.elastic.co/t/wildcard-match-on-multiple-fields/273852 "2021-05-25T07:11:03Z")

</div>

Hi, im looking for the right query to find in multiple fields a wildcard query (phone number in phone number fields). i use ElasticsearchDSL ElasticsearchPHP I try the Multi-match query with a part of given value, t…

---

## [Visualize count of unique documents](https://discuss.elastic.co/t/visualize-count-of-unique-documents/170619)

<div class="topic-metadata">

**Author:** [@pup\_seba](https://discuss.elastic.co/u/pup_seba)\
**Replies:** 2\
**Last updated:** [March 5, 2019, 10:26am UTC](https://discuss.elastic.co/t/visualize-count-of-unique-documents/170619 "2019-03-05T10:26:52Z")

</div>

Hi, I'm trying to create a visualization that tells when an account is being attack with a distributed brute force kind of attack. IThe idea is to have (initially I tried with cloud tag but I ended up with data table), …

---

## [Could I query all docs where there are multiple occurrences of my term?](https://discuss.elastic.co/t/could-i-query-all-docs-where-there-are-multiple-occurrences-of-my-term/163276)

<div class="topic-metadata">

**Author:** [@tchung](https://discuss.elastic.co/u/tchung)\
**Replies:** 2\
**Last updated:** [January 14, 2019, 7:39pm UTC](https://discuss.elastic.co/t/could-i-query-all-docs-where-there-are-multiple-occurrences-of-my-term/163276 "2019-01-14T19:39:32Z")

</div>

I want to use Elasticsearch to index event data and as events come in, I want to append to an "events" array in the document. Say it ends up looking like this: { "user":"abc", "events": \[ { "action": "foo…

---

## [Convert column to JSON](https://discuss.elastic.co/t/convert-column-to-json/158848)

<div class="topic-metadata">

**Author:** [@nash](https://discuss.elastic.co/u/nash)\
**Replies:** 2\
**Last updated:** [December 5, 2018, 10:25am UTC](https://discuss.elastic.co/t/convert-column-to-json/158848 "2018-12-05T10:25:52Z")

</div>

Hi, I am new to ELK. I am trying to import a CSV file into elasticsearch using Logstash.I have got all the fields into elasticSearch and it is of type doc. I can see it in both Table and json formats. My problem is, …

---

## [Second Y-axis and ignoring X-axis split series](https://discuss.elastic.co/t/second-y-axis-and-ignoring-x-axis-split-series/99668)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [September 11, 2017, 12:05am UTC](https://discuss.elastic.co/t/second-y-axis-and-ignoring-x-axis-split-series/99668 "2017-09-11T00:05:37Z")

</div>

Hi, Is it possible to have a second Y-axis, have it use the same time series as the first Y-axis but ignore the split series? I have a log file with error codes and signal strength. The bar graph must display the amoun…

---

## [Connect logstash to Kafka with SSL throws error](https://discuss.elastic.co/t/connect-logstash-to-kafka-with-ssl-throws-error/189732)

<div class="topic-metadata">

**Author:** [@PraveenKumar\_KG](https://discuss.elastic.co/u/PraveenKumar_KG)\
**Replies:** 0\
**Last updated:** [July 10, 2019, 11:09am UTC](https://discuss.elastic.co/t/connect-logstash-to-kafka-with-ssl-throws-error/189732 "2019-07-10T11:09:12Z")

</div>

Hi , Logstash version : logstash-6.6.1 I am trying to connect logstash with kafka input plugin having SSL enabled input { kafka{ group\_id =\> "logstash-consumer-group-local" topics =\> \["topic"\] bootstrap\_servers =\> "\<h…

---

## [Parsing stringified JSON from filebeat input](https://discuss.elastic.co/t/parsing-stringified-json-from-filebeat-input/176972)

<div class="topic-metadata">

**Author:** [@cheeni](https://discuss.elastic.co/u/cheeni)\
**Replies:** 6\
**Last updated:** [April 16, 2019, 12:53am UTC](https://discuss.elastic.co/t/parsing-stringified-json-from-filebeat-input/176972 "2019-04-16T00:53:17Z")

</div>

Greetings, I am a total newbie to Elastic and co, so please educate. I have filebeat set up to export JSON from a log file with lines like this: "08-Apr-2019 01:11:16.047 INFO \[http-nio-443-exec-37\] MyClass.Func MyClass…

---

## [Update xml file content to prevent xml parse error](https://discuss.elastic.co/t/update-xml-file-content-to-prevent-xml-parse-error/111050)

<div class="topic-metadata">

**Author:** [@iam\_thadiyan](https://discuss.elastic.co/u/iam_thadiyan)\
**Replies:** 6\
**Last updated:** [December 11, 2017, 3:12pm UTC](https://discuss.elastic.co/t/update-xml-file-content-to-prevent-xml-parse-error/111050 "2017-12-11T15:12:10Z")

</div>

I have a number of (~10k) XML files that have a missing closing root tag. When I load this file to logstash with xml filter I get parse error. Is there a way to make logstash add a closing tag in filter before parsing t…

---

## [Elasticsearch bulk queue unbalanced, one node close to full](https://discuss.elastic.co/t/elasticsearch-bulk-queue-unbalanced-one-node-close-to-full/100160)

<div class="topic-metadata">

**Author:** [@zuomang](https://discuss.elastic.co/u/zuomang)\
**Replies:** 6\
**Last updated:** [September 12, 2017, 10:44am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-queue-unbalanced-one-node-close-to-full/100160 "2017-09-12T10:44:18Z")

</div>

Recently we found one issue: our es cluster had three nodes which storage our product env log, one node of cluster bulk queue size always close to full, other nodes not. i adjust our send client config file, remove the …

---

## [Failed to execute phase \[query\_fetch\], total failure](https://discuss.elastic.co/t/failed-to-execute-phase-query-fetch-total-failure/8546)

<div class="topic-metadata">

**Author:** [@Thiago\_Cardoso](https://discuss.elastic.co/u/Thiago_Cardoso)\
**Replies:** 6\
**Last updated:** [July 31, 2012, 1:30pm UTC](https://discuss.elastic.co/t/failed-to-execute-phase-query-fetch-total-failure/8546 "2012-07-31T13:30:29Z")

</div>

Hi everybody, I am using elasticsearch as a search cache which means that I am constantly inserting/expiring/searching documents in one index (in parallel). Normally this works fine, but on heavy loads (many updat…

---

## [Metrics Disappearing](https://discuss.elastic.co/t/metrics-disappearing/292488)

<div class="topic-metadata">

**Author:** [@dayajamal](https://discuss.elastic.co/u/dayajamal)\
**Replies:** 4\
**Last updated:** [December 21, 2021, 4:47pm UTC](https://discuss.elastic.co/t/metrics-disappearing/292488 "2021-12-21T16:47:03Z")

</div>

Hello everyone, I have a very frustrating problem. Upon looking up my metrics, there is some data that is missing. Sometimes, I have metrics that appear, then disappear suddenly. The thing is, those metrics that are disa…

---

## [Concat query is not working in logstash](https://discuss.elastic.co/t/concat-query-is-not-working-in-logstash/135004)

<div class="topic-metadata">

**Author:** [@Deepak\_Dandotiya](https://discuss.elastic.co/u/Deepak_Dandotiya)\
**Replies:** 4\
**Last updated:** [June 8, 2018, 12:58pm UTC](https://discuss.elastic.co/t/concat-query-is-not-working-in-logstash/135004 "2018-06-08T12:58:11Z")

</div>

Hi, I am trying to combine 2 fields first name & last name and trying to populate as single field but getting some error. Below is my Logstash config file emp-index-logstash.conf:- input { jdbc { jdbc\_connection\_…

---

## [Are there reserved fields in a document?](https://discuss.elastic.co/t/are-there-reserved-fields-in-a-document/66935)

<div class="topic-metadata">

**Author:** [@essn](https://discuss.elastic.co/u/essn)\
**Replies:** 4\
**Last updated:** [November 23, 2016, 12:46pm UTC](https://discuss.elastic.co/t/are-there-reserved-fields-in-a-document/66935 "2016-11-23T12:46:38Z")

</div>

I used the field naming to 'ownerid'. Strictly 'ownerid', not 'ownerId', 'ownerId', 'OwnerID' things.. These are processed well. But only 'ownerid' is not working when I map first time. I never had defined 'ownerid'. NEV…

---

## [Elasticsearch Indices Cluster Health API](https://discuss.elastic.co/t/elasticsearch-indices-cluster-health-api/53210)

<div class="topic-metadata">

**Author:** [@Luigi\_Grilli](https://discuss.elastic.co/u/Luigi_Grilli)\
**Replies:** 4\
**Last updated:** [June 19, 2016, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-indices-cluster-health-api/53210 "2016-06-19T07:59:16Z")

</div>

Hi, I was trying to get the indices health using the web api as documented here: https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-health.html So I was using a request like: $ curl -XGET 'http://l…

---

## [Best way to offload indexing from reading node](https://discuss.elastic.co/t/best-way-to-offload-indexing-from-reading-node/7238)

<div class="topic-metadata">

**Author:** [@Mikhail\_Sayapin](https://discuss.elastic.co/u/Mikhail_Sayapin)\
**Replies:** 4\
**Last updated:** [April 7, 2012, 3:33pm UTC](https://discuss.elastic.co/t/best-way-to-offload-indexing-from-reading-node/7238 "2012-04-07T15:33:14Z")

</div>

Hello, I have an ecommerce store with a relatively large index of products. About 10 000 000 products, 15 GB index size. This index gets updated very often, maybe 100-1000 updates per second. What I'm trying t…

---

## [Not able to load JNA native support library](https://discuss.elastic.co/t/not-able-to-load-jna-native-support-library/191920)

<div class="topic-metadata">

**Author:** [@jason.kim](https://discuss.elastic.co/u/jason.kim)\
**Replies:** 1\
**Last updated:** [July 24, 2019, 3:55am UTC](https://discuss.elastic.co/t/not-able-to-load-jna-native-support-library/191920 "2019-07-24T03:55:15Z")

</div>

I am installing ES on a hardened system and I am having issues with running my ES. When I try to run ES i get this error: unable to load JNA native support library, native methods will be disabled. java.lang.Unsatisfi…

---

## [Understand CPU based auto scaling of ElasticSearch cluster](https://discuss.elastic.co/t/understand-cpu-based-auto-scaling-of-elasticsearch-cluster/171347)

<div class="topic-metadata">

**Author:** [@Priti\_Gangrade](https://discuss.elastic.co/u/Priti_Gangrade)\
**Replies:** 1\
**Last updated:** [March 7, 2019, 4:18pm UTC](https://discuss.elastic.co/t/understand-cpu-based-auto-scaling-of-elasticsearch-cluster/171347 "2019-03-07T16:18:38Z")

</div>

Assumption: We are able to predict traffic pattern - increase/decrease number of users hitting our Search system. Usecase: CPU based autoscaling when traffic increases With SolrCloud: With SolrCloud sharded cluster, we…

---

## [Filebeat is not creating a log file](https://discuss.elastic.co/t/filebeat-is-not-creating-a-log-file/101382)

<div class="topic-metadata">

**Author:** [@ajstark123](https://discuss.elastic.co/u/ajstark123)\
**Replies:** 1\
**Last updated:** [September 21, 2017, 10:51pm UTC](https://discuss.elastic.co/t/filebeat-is-not-creating-a-log-file/101382 "2017-09-21T22:51:51Z")

</div>

I set up my filebeat yml with the following options. logging.level: info # logging.to\_syslog: false logging.to\_files: true logging.files: # path: /opt/pki/filebeat/logs path: /tmp/filebeat\_logs name: filebeat ro…

---

## [Query String Query is not working as expected when searched over not\_analyzed fields](https://discuss.elastic.co/t/query-string-query-is-not-working-as-expected-when-searched-over-not-analyzed-fields/78542)

<div class="topic-metadata">

**Author:** [@prasad\_kp](https://discuss.elastic.co/u/prasad_kp)\
**Replies:** 1\
**Last updated:** [March 29, 2017, 8:52am UTC](https://discuss.elastic.co/t/query-string-query-is-not-working-as-expected-when-searched-over-not-analyzed-fields/78542 "2017-03-29T08:52:25Z")

</div>

Hi I am using the not analyzed over the field when i search with the below query "query": { "query\_string": { "query": "06H121605E", "default\_field": "invoiceID" } } } I am getting 2 documents …

---

## [Logstash S3 input plugin - prefix wildcard](https://discuss.elastic.co/t/logstash-s3-input-plugin-prefix-wildcard/97982)

<div class="topic-metadata">

**Author:** [@Tito](https://discuss.elastic.co/u/Tito)\
**Replies:** 1\
**Last updated:** [August 31, 2017, 5:29am UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-prefix-wildcard/97982 "2017-08-31T05:29:58Z")

</div>

Hello, we send logs from our ec2 instances to s3 buckets, to directories like i.e. “logs/name\_of\_the\_server/2017/08/22/httpd/” where 20170822 is current day, httpd - name of the service from which we sent logs, is it p…

---

## [Batching HTTP output](https://discuss.elastic.co/t/batching-http-output/24370)

<div class="topic-metadata">

**Author:** [@cfili](https://discuss.elastic.co/u/cfili)\
**Replies:** 1\
**Last updated:** [June 26, 2015, 11:24pm UTC](https://discuss.elastic.co/t/batching-http-output/24370 "2015-06-26T23:24:56Z")

</div>

Is there a way to batch events on a set interval using the HTTP output plugin? I want to limit the rate at which the Logstash agent is sending messages to my HTTP end point. Ideally, I'd want it to batch all events int…

---

## [How to get start offset and end offset of a search string in search result in elasticsearch](https://discuss.elastic.co/t/how-to-get-start-offset-and-end-offset-of-a-search-string-in-search-result-in-elasticsearch/256879)

<div class="topic-metadata">

**Author:** [@Sreejith\_Pk](https://discuss.elastic.co/u/Sreejith_Pk)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 12:08am UTC](https://discuss.elastic.co/t/how-to-get-start-offset-and-end-offset-of-a-search-string-in-search-result-in-elasticsearch/256879 "2020-12-10T00:08:41Z")

</div>

Hi team, I have a requirement to find the start and end position of a particular word in a text.

---

## [Performance problem within add a new object to a nested array](https://discuss.elastic.co/t/performance-problem-within-add-a-new-object-to-a-nested-array/212195)

<div class="topic-metadata">

**Author:** [@Sergey\_Oprya](https://discuss.elastic.co/u/Sergey_Oprya)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 6:28pm UTC](https://discuss.elastic.co/t/performance-problem-within-add-a-new-object-to-a-nested-array/212195 "2019-12-17T18:28:55Z")

</div>

Hi Everyone, I have a performance issue when I try to add object to a nested array field. If this array has ~ 0-500 objects performance is ok but when I add more and more the performance is going down quite fast. Eventu…

---

## [FB connection timed out](https://discuss.elastic.co/t/fb-connection-timed-out/119326)

<div class="topic-metadata">

**Author:** [@Medard\_Rebero](https://discuss.elastic.co/u/Medard_Rebero)\
**Replies:** 3\
**Last updated:** [February 12, 2018, 4:21pm UTC](https://discuss.elastic.co/t/fb-connection-timed-out/119326 "2018-02-12T16:21:12Z")

</div>

I am struggling so badly with this issue. I am trying to use filebeat to send logs to logstash and I get this kind of error: 2018-02-10T04:27:51.356+0100 INFO \[monitoring\] log/log.go:124 Non-zero metrics in th…

---

## [Importing JSON in to Elasticsearch 5.1 using CURL](https://discuss.elastic.co/t/importing-json-in-to-elasticsearch-5-1-using-curl/74452)

<div class="topic-metadata">

**Author:** [@gjws](https://discuss.elastic.co/u/gjws)\
**Replies:** 3\
**Last updated:** [February 9, 2017, 6:22am UTC](https://discuss.elastic.co/t/importing-json-in-to-elasticsearch-5-1-using-curl/74452 "2017-02-09T06:22:17Z")

</div>

I'm trying to import a large JSON document in to Elasticsearch 5.1. A small section of the data looks like this: \[ { "id": 1, "region": "ca-central-1", "eventName": "CreateRole", "eventTime": "2016-02-04T03:41:19.…

---

## [How to configure Redis Cluster with Logstash Cluster?](https://discuss.elastic.co/t/how-to-configure-redis-cluster-with-logstash-cluster/59182)

<div class="topic-metadata">

**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\
**Replies:** 3\
**Last updated:** [August 30, 2016, 8:13pm UTC](https://discuss.elastic.co/t/how-to-configure-redis-cluster-with-logstash-cluster/59182 "2016-08-30T20:13:24Z")

</div>

Hi, I am trying to deploy a ELK stack(as POC). In this I want a cluster of Redis as an input to Logstash cluster. How can I do this? What would be the configuration required?

---

## [Multiple JVM log to send (wildfly)](https://discuss.elastic.co/t/multiple-jvm-log-to-send-wildfly/57665)

<div class="topic-metadata">

**Author:** [@fdlprod](https://discuss.elastic.co/u/fdlprod)\
**Replies:** 3\
**Last updated:** [August 11, 2016, 12:56pm UTC](https://discuss.elastic.co/t/multiple-jvm-log-to-send-wildfly/57665 "2016-08-11T12:56:05Z")

</div>

Hi, i have one issue, problem, question, indeed i have on the same host 3 differents JVM, before with logstash-Forwarder i can add a name on each log i send to logstash indexer... now in filebeat this is the configur…

---

## [Sub querying in Elasticsearch](https://discuss.elastic.co/t/sub-querying-in-elasticsearch/9370)

<div class="topic-metadata">

**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\
**Replies:** 3\
**Last updated:** [October 21, 2014, 9:40am UTC](https://discuss.elastic.co/t/sub-querying-in-elasticsearch/9370 "2014-10-21T09:40:32Z")

</div>

Hi, Is it possible in Elasticsearch to use the results of a query to another query in a single query?? some sort of subquery in sql??? I need to feed back the results of a query to another query, but currently…

---

## [ElasticSearch : Failure Sink always running](https://discuss.elastic.co/t/elasticsearch-failure-sink-always-running/299293)

<div class="topic-metadata">

**Author:** [@Adesh\_Agarwal](https://discuss.elastic.co/u/Adesh_Agarwal)\
**Replies:** 2\
**Last updated:** [March 10, 2022, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-failure-sink-always-running/299293 "2022-03-10T07:22:17Z")

</div>

The logs are always being written to both Elastic Search and Local Log Files (when used as a Failure Sink) . This should not be the case. Local Log Files should be created only when the application fails to write logs to…

---

## [Kibana's "Heap Total"](https://discuss.elastic.co/t/kibanas-heap-total/84358)

<div class="topic-metadata">

**Author:** [@mark90](https://discuss.elastic.co/u/mark90)\
**Replies:** 2\
**Last updated:** [May 3, 2017, 11:00am UTC](https://discuss.elastic.co/t/kibanas-heap-total/84358 "2017-05-03T11:00:00Z")

</div>

Dear Team, Could you please help me to increase Kibana's heap size? II was able to find guides only for modification on elasticsearch's heap, but not for kibana's heap. Thank you in advance.

---

## [How to find precision](https://discuss.elastic.co/t/how-to-find-precision/15617)

<div class="topic-metadata">

**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\
**Replies:** 2\
**Last updated:** [February 6, 2014, 4:13am UTC](https://discuss.elastic.co/t/how-to-find-precision/15617 "2014-02-06T04:13:51Z")

</div>

Hi, This is actually not very related to elasticsearch, if i want to calculate the precision and recall how can i do it .....following is the scenario. the formula for precision is :- No of relevant document ret…

---

## [FSCrawler-Unable to parse response body for Response](https://discuss.elastic.co/t/fscrawler-unable-to-parse-response-body-for-response/226212)

<div class="topic-metadata">

**Author:** [@Sarath\_Pullabhotla](https://discuss.elastic.co/u/Sarath_Pullabhotla)\
**Replies:** 5\
**Last updated:** [April 2, 2020, 2:16pm UTC](https://discuss.elastic.co/t/fscrawler-unable-to-parse-response-body-for-response/226212 "2020-04-02T14:16:24Z")

</div>

My Elastic search (7.4.2) is running on docker container on port 9201 and I am trying to start fscrawler on the same, but its resulting in the below issue. $ bin/fscrawler conf\_test --debug=true 07:20:53,773 WARN…

---

## [Grok match and divide string to multiple fields](https://discuss.elastic.co/t/grok-match-and-divide-string-to-multiple-fields/138864)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 5\
**Last updated:** [July 6, 2018, 7:28pm UTC](https://discuss.elastic.co/t/grok-match-and-divide-string-to-multiple-fields/138864 "2018-07-06T19:28:25Z")

</div>

Hi I want to match a syslog string and match into corresponding fields. Here is the message in question: Jul 06 2018 08:04:18: %ASA-6-305011: Built dynamic UDP translation from any:123.123.123.123/35439 to OUTSIDE-VRF…

---

## [Is it mandatory to load the index template into Elasticsearch manually when using filebeat?](https://discuss.elastic.co/t/is-it-mandatory-to-load-the-index-template-into-elasticsearch-manually-when-using-filebeat/130668)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 5\
**Last updated:** [May 18, 2018, 5:54pm UTC](https://discuss.elastic.co/t/is-it-mandatory-to-load-the-index-template-into-elasticsearch-manually-when-using-filebeat/130668 "2018-05-18T17:54:21Z")

</div>

Hi, I am pretty new to Filebeat. I am using Logstash to send logs to another Logstash which will send logs to Elasticsearch(Logstash1 to Logstash2 to Elasticsearch). Now I am planning to replace Logstash1 with Filebeat.…

---

## [Elasticsearch plugin doesn't create file with correct name](https://discuss.elastic.co/t/elasticsearch-plugin-doesnt-create-file-with-correct-name/47500)

<div class="topic-metadata">

**Author:** [@ameconi](https://discuss.elastic.co/u/ameconi)\
**Replies:** 5\
**Last updated:** [May 19, 2016, 2:52pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-doesnt-create-file-with-correct-name/47500 "2016-05-19T14:52:17Z")

</div>

Hello. I'm using the Logstash 5.0 on Ubuntu 14.04. This is my config output { stdout { codec =\> rubydebug } elasticsearch { } } but index filename is wrong. It is logstash-2006.09.07, but it'd be…

[Previous page](https://discuss.elastic.co/top.md?page=1054&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1056&per_page=50&period=all)
