# Top

**URL:** https://discuss.elastic.co/top.md?page=1063&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1064

---

## [Basic documentation question](https://discuss.elastic.co/t/basic-documentation-question/61021)

<div class="topic-metadata">

**Author:** [@Jparish4](https://discuss.elastic.co/u/Jparish4)\
**Replies:** 6\
**Last updated:** [September 20, 2016, 2:26pm UTC](https://discuss.elastic.co/t/basic-documentation-question/61021 "2016-09-20T14:26:30Z")

</div>

i have have been going through the docs but cannot get through the basic step that indexes the sample file from this page: https://www.elastic.co/guide/en/elasticsearch/reference/current/\_exploring\_your\_data.html I get…

---

## [How much overhead for scroll search\_type?](https://discuss.elastic.co/t/how-much-overhead-for-scroll-search-type/11513)

<div class="topic-metadata">

**Author:** [@Jeffrey\_Gerard](https://discuss.elastic.co/u/Jeffrey_Gerard)\
**Replies:** 6\
**Last updated:** [June 7, 2013, 9:32pm UTC](https://discuss.elastic.co/t/how-much-overhead-for-scroll-search-type/11513 "2013-06-07T21:32:45Z")

</div>

I want to page through (unsorted) search results in a way that provides consistent results from one page to the next -- ideally even if there are docs being indexed/deleted at the same time. I will have potentially …

---

## [Filebeat - "Cannot index event publisher"](https://discuss.elastic.co/t/filebeat-cannot-index-event-publisher/205793)

<div class="topic-metadata">

**Author:** [@IwanHSKY](https://discuss.elastic.co/u/IwanHSKY)\
**Replies:** 0\
**Last updated:** [October 30, 2019, 5:31am UTC](https://discuss.elastic.co/t/filebeat-cannot-index-event-publisher/205793 "2019-10-30T05:31:40Z")

</div>

Hello everyone, I use ELK Stack in Docker. I try send logs from Java app in Docker. I Tested 7.4.0, and 7.4.1 versions. Send logs with filebeat to ES; Config Filebeat for ES Filebeat.yml# Modules configuration == …

---

## [Track total hits: support by integer?](https://discuss.elastic.co/t/track-total-hits-support-by-integer/165232)

<div class="topic-metadata">

**Author:** [@kzzzzo2](https://discuss.elastic.co/u/kzzzzo2)\
**Replies:** 3\
**Last updated:** [January 22, 2019, 2:21pm UTC](https://discuss.elastic.co/t/track-total-hits-support-by-integer/165232 "2019-01-22T14:21:31Z")

</div>

An exception occurred when setting an integer to track\_total\_hits. The doc is written as set track\_total\_hits as an integer. Is there a way to set an integer? Version 7.0.0-alpha2 Request GET \_search { "track\_total…

---

## [S3 input plugin is not able to handle encrypted data](https://discuss.elastic.co/t/s3-input-plugin-is-not-able-to-handle-encrypted-data/147415)

<div class="topic-metadata">

**Author:** [@Satej](https://discuss.elastic.co/u/Satej)\
**Replies:** 3\
**Last updated:** [September 6, 2018, 8:32pm UTC](https://discuss.elastic.co/t/s3-input-plugin-is-not-able-to-handle-encrypted-data/147415 "2018-09-06T20:32:08Z")

</div>

Hello All, I have setup the "Kinesis Firehose stream" which accepts the log data from "kinesis data stream" and stores these logs as backup on S3 bucket in gz format. For this configuration I have kept the KMS encrypti…

---

## [Output NetFlow and Syslog to Elasticsearch](https://discuss.elastic.co/t/output-netflow-and-syslog-to-elasticsearch/29046)

<div class="topic-metadata">

**Author:** [@Ben19](https://discuss.elastic.co/u/Ben19)\
**Replies:** 3\
**Last updated:** [September 11, 2015, 10:24am UTC](https://discuss.elastic.co/t/output-netflow-and-syslog-to-elasticsearch/29046 "2015-09-11T10:24:17Z")

</div>

Hello, I have an ELK server currently taking NetFlow traffic from a single host and sending this to a custom index name (logstash\_netflow-\*) etc and I’m now wanting to take syslogs on UDP port 5000. Currently NetFlow is c…

---

## [Logstash Grok pattern GREEDYDATA does not match](https://discuss.elastic.co/t/logstash-grok-pattern-greedydata-does-not-match/158535)

<div class="topic-metadata">

**Author:** [@rani](https://discuss.elastic.co/u/rani)\
**Replies:** 4\
**Last updated:** [November 28, 2018, 12:28pm UTC](https://discuss.elastic.co/t/logstash-grok-pattern-greedydata-does-not-match/158535 "2018-11-28T12:28:05Z")

</div>

Hello there I'm currently building a pipeline with different grok patterns. For the most part it's properly working already but I'm having issues with some Jira logs: Log Message: 2018-11-21 12:50:23,950 http-nio-8080…

---

## [Query with Bool Must and Contain String](https://discuss.elastic.co/t/query-with-bool-must-and-contain-string/130311)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 1\
**Last updated:** [May 2, 2018, 7:24pm UTC](https://discuss.elastic.co/t/query-with-bool-must-and-contain-string/130311 "2018-05-02T19:24:01Z")

</div>

How can I create a JSON that returns the results in this type of condition? User\_ID = 1234 AND Type\_Search IN ('ALL', 'RESTRICT') AND ( title contains 'example string' OR content contains 'example string' ) I creat…

---

## [Elasticsearch puppet module's problem](https://discuss.elastic.co/t/elasticsearch-puppet-modules-problem/23322)

<div class="topic-metadata">

**Author:** [@Sergey\_Zemlyanoy](https://discuss.elastic.co/u/Sergey_Zemlyanoy)\
**Replies:** 7\
**Last updated:** [April 29, 2015, 8:54am UTC](https://discuss.elastic.co/t/elasticsearch-puppet-modules-problem/23322 "2015-04-29T08:54:32Z")

</div>

Dear support, I'm trying to setup Es using this module - https://github.com/elastic/puppet-elasticsearch/blob/master/README.md For sake of testing I spin up a new VM and try to apply default module on it node so…

---

## [Canvas: Area Chart: Change font color](https://discuss.elastic.co/t/canvas-area-chart-change-font-color/178913)

<div class="topic-metadata">

**Author:** [@dennis.rietvink](https://discuss.elastic.co/u/dennis.rietvink)\
**Replies:** 2\
**Last updated:** [April 29, 2019, 11:22am UTC](https://discuss.elastic.co/t/canvas-area-chart-change-font-color/178913 "2019-04-29T11:22:47Z")

</div>

Hi there, I am trying to change the font color of the area chart element. I suspect this can be done through the CSS element style. If have tried the below approaches but didn't work. .canvasRenderEl { color: #ffffff; …

---

## ["sort" on multiple indices with a missing field](https://discuss.elastic.co/t/sort-on-multiple-indices-with-a-missing-field/100400)

<div class="topic-metadata">

**Author:** [@jimyoo](https://discuss.elastic.co/u/jimyoo)\
**Replies:** 2\
**Last updated:** [September 14, 2017, 11:54pm UTC](https://discuss.elastic.co/t/sort-on-multiple-indices-with-a-missing-field/100400 "2017-09-14T23:54:24Z")

</div>

Hi, I see queries on multiple indices with "sort" with a missing field causes an exception (query and exception are attached). And, the same queries on individual index (either with or w/o a missing field) are fine tr…

---

## [Kibana not showing data due to timestamp issues](https://discuss.elastic.co/t/kibana-not-showing-data-due-to-timestamp-issues/64715)

<div class="topic-metadata">

**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\
**Replies:** 2\
**Last updated:** [November 3, 2016, 6:50am UTC](https://discuss.elastic.co/t/kibana-not-showing-data-due-to-timestamp-issues/64715 "2016-11-03T06:50:21Z")

</div>

hi i'm having some issues in kibana i have a log file that it's date looks like this : 02-11-2016 09:48:33 AM ... as you can see the time is a 12 hour day (AM\\PM) i've parsed it with date filter in logstash after tur…

---

## [How to update multiple type in JAVA API?](https://discuss.elastic.co/t/how-to-update-multiple-type-in-java-api/29289)

<div class="topic-metadata">

**Author:** [@kikuchan](https://discuss.elastic.co/u/kikuchan)\
**Replies:** 2\
**Last updated:** [September 16, 2015, 1:29am UTC](https://discuss.elastic.co/t/how-to-update-multiple-type-in-java-api/29289 "2015-09-16T01:29:35Z")

</div>

Hello I'd like to update multiple type in JAVA API. I created the following method. public void update(String index, String type, String, id, List\< String\> fieldList, List\< String\> valueList) { UpdateRequest u…

---

## [Same field name with different types?](https://discuss.elastic.co/t/same-field-name-with-different-types/25742)

<div class="topic-metadata">

**Author:** [@brett](https://discuss.elastic.co/u/brett)\
**Replies:** 2\
**Last updated:** [July 16, 2015, 7:34pm UTC](https://discuss.elastic.co/t/same-field-name-with-different-types/25742 "2015-07-16T19:34:00Z")

</div>

Similar problem to this discussion, but I was hoping for some input on what the best solution would be. We're inputting json messages from multiple exchanges using the rabbitmq input plugin. Several of these types of m…

---

## [Multisearch requests in new Java API do not support "sort" or "\_source" properties](https://discuss.elastic.co/t/multisearch-requests-in-new-java-api-do-not-support-sort-or-source-properties/297489)

<div class="topic-metadata">

**Author:** [@babayotakun](https://discuss.elastic.co/u/babayotakun)\
**Replies:** 4\
**Last updated:** [February 24, 2022, 3:28pm UTC](https://discuss.elastic.co/t/multisearch-requests-in-new-java-api-do-not-support-sort-or-source-properties/297489 "2022-02-24T15:28:13Z")

</div>

With brand new Elasticsearch Java API I cannot write multisearch requests like: curl -H 'Content-type: application/x-ndjson' -XGET 'http://localhost:9200/myindex/\_msearch' -d '{} { "sort": \[ { "text": { …

---

## [Elasticsearch read-only after upgrade (6.2.0 -\> 6.3.0)](https://discuss.elastic.co/t/elasticsearch-read-only-after-upgrade-6-2-0-6-3-0/136496)

<div class="topic-metadata">

**Author:** [@jarnold](https://discuss.elastic.co/u/jarnold)\
**Replies:** 1\
**Last updated:** [July 2, 2018, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-read-only-after-upgrade-6-2-0-6-3-0/136496 "2018-07-02T13:28:32Z")

</div>

I upgraded elasticsearch, kibana and logstash this morning, which seems to have caused the database to become read-only, as evidenced by the following log lines; \[2018-06-19T13:51:37,700\]\[ERROR\]\[o.e.x.w.e.ExecutionServi…

---

## [Receiving ERR\_CONNECTION\_REFUSED after installing and starting kibana on AWS EC2 instance](https://discuss.elastic.co/t/receiving-err-connection-refused-after-installing-and-starting-kibana-on-aws-ec2-instance/101583)

<div class="topic-metadata">

**Author:** [@manoj\_faria](https://discuss.elastic.co/u/manoj_faria)\
**Replies:** 1\
**Last updated:** [September 25, 2017, 12:57am UTC](https://discuss.elastic.co/t/receiving-err-connection-refused-after-installing-and-starting-kibana-on-aws-ec2-instance/101583 "2017-09-25T00:57:49Z")

</div>

When connecting to kibana hosted on aws ec2 ami instance via chrome browser i run into the below stated error: This site can’t be reached ec2-.us-west-1.compute.amazonaws.com refused to connect. Search Google for ec2…

---

## [Visualization, dashboard background](https://discuss.elastic.co/t/visualization-dashboard-background/108760)

<div class="topic-metadata">

**Author:** [@wkpv68](https://discuss.elastic.co/u/wkpv68)\
**Replies:** 5\
**Last updated:** [November 23, 2017, 3:09pm UTC](https://discuss.elastic.co/t/visualization-dashboard-background/108760 "2017-11-23T15:09:54Z")

</div>

Hi, Is there a way to change visualization or dashboard background? Kibana support dark and white background and I want to change it to different color. Best Regards

---

## [I Want to remove the duplicate events inside Logstash filter how could I do that? I mention the events below please have a look and suggest](https://discuss.elastic.co/t/i-want-to-remove-the-duplicate-events-inside-logstash-filter-how-could-i-do-that-i-mention-the-events-below-please-have-a-look-and-suggest/349175)

<div class="topic-metadata">

**Author:** [@Subrato1](https://discuss.elastic.co/u/Subrato1)\
**Replies:** 6\
**Last updated:** [December 15, 2023, 1:35pm UTC](https://discuss.elastic.co/t/i-want-to-remove-the-duplicate-events-inside-logstash-filter-how-could-i-do-that-i-mention-the-events-below-please-have-a-look-and-suggest/349175 "2023-12-15T13:35:00Z")

</div>

{ "date" =\> 2023-12-12T00:00:00.000Z, "category" =\> "AUTH", "username" =\> "cassandra", "event\_time" =\> "ab390a7b-98e7-11ee-af20-4b75abbb029d", "node" =\> "172.31.57.239",…

---

## [Is there any alternate way for connecting Elasticsearch from C++ code except ODBC?](https://discuss.elastic.co/t/is-there-any-alternate-way-for-connecting-elasticsearch-from-c-code-except-odbc/269837)

<div class="topic-metadata">

**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\
**Replies:** 6\
**Last updated:** [April 12, 2021, 2:47pm UTC](https://discuss.elastic.co/t/is-there-any-alternate-way-for-connecting-elasticsearch-from-c-code-except-odbc/269837 "2021-04-12T14:47:06Z")

</div>

I tried fetching data of Elasticsearch from C++ code using Elasticsearch ODBC. As elasticsearch is known for its fast fetching speed, I'm not getting the expected performance using ODBC as compared to other RDBMS. So, ca…

---

## [Canvas Issue - math](https://discuss.elastic.co/t/canvas-issue-math/261086)

<div class="topic-metadata">

**Author:** [@florian.wallner](https://discuss.elastic.co/u/florian.wallner)\
**Replies:** 6\
**Last updated:** [January 14, 2021, 4:13pm UTC](https://discuss.elastic.co/t/canvas-issue-math/261086 "2021-01-14T16:13:34Z")

</div>

Hey Maybe someone got that issue already - I am doing a SQL query which is working fine - but as soon as I change the value from AVG to PERCENTILE I am getting following error message: Whoops! Expression failed Express…

---

## [Change loaded index name](https://discuss.elastic.co/t/change-loaded-index-name/227272)

<div class="topic-metadata">

**Author:** [@kickon](https://discuss.elastic.co/u/kickon)\
**Replies:** 6\
**Last updated:** [April 10, 2020, 12:50pm UTC](https://discuss.elastic.co/t/change-loaded-index-name/227272 "2020-04-10T12:50:42Z")

</div>

hello, I cannot anymore change index name loaded by winlogbeat, could someone look at this and indicate where is an issue ? ###################### Winlogbeat Configuration Example ######################## # This file…

---

## [ES use 100% cpu resource due to same spacial query](https://discuss.elastic.co/t/es-use-100-cpu-resource-due-to-same-spacial-query/126579)

<div class="topic-metadata">

**Author:** [@showmeall](https://discuss.elastic.co/u/showmeall)\
**Replies:** 6\
**Last updated:** [April 6, 2018, 5:54am UTC](https://discuss.elastic.co/t/es-use-100-cpu-resource-due-to-same-spacial-query/126579 "2018-04-06T05:54:30Z")

</div>

our es just have one node, and it is dead sometimes, we can see there have a lot of tasks when check http://localhost:9200/\_tasks?pretty&detailed , it will continual a few hours，in this time we can not connected the ES, …

---

## [Records per shard](https://discuss.elastic.co/t/records-per-shard/24338)

<div class="topic-metadata">

**Author:** [@TheCowboy](https://discuss.elastic.co/u/TheCowboy)\
**Replies:** 6\
**Last updated:** [July 8, 2015, 7:33am UTC](https://discuss.elastic.co/t/records-per-shard/24338 "2015-07-08T07:33:18Z")

</div>

Hi What's the best practice/main thing to consider when deciding upon the number of shards in your index vs the number of documents you will have? For example in our dev system we've had a problem highlighted here: …

---

## [Transport Client connectedNodes() duplicates](https://discuss.elastic.co/t/transport-client-connectednodes-duplicates/19564)

<div class="topic-metadata">

**Author:** [@Stefan\_Will](https://discuss.elastic.co/u/Stefan_Will)\
**Replies:** 6\
**Last updated:** [September 2, 2014, 9:05pm UTC](https://discuss.elastic.co/t/transport-client-connectednodes-duplicates/19564 "2014-09-02T21:05:48Z")

</div>

Hi, for testing purposes, I've started up a stand-alone Elasticsearch node on my laptop, and am using the transport client to connect to it. When I initialize the client using "sniff=true", and then print out the …

---

## [Custom score query && pagination](https://discuss.elastic.co/t/custom-score-query-pagination/14450)

<div class="topic-metadata">

**Author:** [@Yann\_Barraud](https://discuss.elastic.co/u/Yann_Barraud)\
**Replies:** 6\
**Last updated:** [November 19, 2013, 1:16pm UTC](https://discuss.elastic.co/t/custom-score-query-pagination/14450 "2013-11-19T13:16:51Z")

</div>

Hi folks, I was wondering recently : how Elasticsearch perfoms on custom score queries & pagination ? Does it rescore the whole bunch each time ? Will it keep custom scores in cache ? Do I have to use a scroll id …

---

## [HPE\_INVALID\_CONSTANT nodejs elastic apm](https://discuss.elastic.co/t/hpe-invalid-constant-nodejs-elastic-apm/272795)

<div class="topic-metadata">

**Author:** [@Max\_Lee](https://discuss.elastic.co/u/Max_Lee)\
**Replies:** 2\
**Last updated:** [May 17, 2021, 7:13am UTC](https://discuss.elastic.co/t/hpe-invalid-constant-nodejs-elastic-apm/272795 "2021-05-17T07:13:11Z")

</div>

Kibana version : v7.12.1 Elasticsearch version : v7.12.1 APM Server version : v7.12.1 APM Agent language and version : nodejs : 12 fastify : 2.11.0 mongoose : 5.11.1 elastic-apm-node : 3.14.0 ioredis : 4.14.1 …

---

## [Where is File Data Visualizer? How to upload CSV in Kibana?](https://discuss.elastic.co/t/where-is-file-data-visualizer-how-to-upload-csv-in-kibana/238404)

<div class="topic-metadata">

**Author:** [@Lan\_Lynn](https://discuss.elastic.co/u/Lan_Lynn)\
**Replies:** 2\
**Last updated:** [June 24, 2020, 9:41am UTC](https://discuss.elastic.co/t/where-is-file-data-visualizer-how-to-upload-csv-in-kibana/238404 "2020-06-24T09:41:29Z")

</div>

Hello ES community. I've learned on the Kibana documentation that it can load CSV files by this method: here is the link of this documentation: https://www.elastic.co/guide/en/kibana/7.7/connect-to-elasticsearch.html…

---

## [Error while connection to Elasticsearch (503, The server refuse to browse the page)](https://discuss.elastic.co/t/error-while-connection-to-elasticsearch-503-the-server-refuse-to-browse-the-page/223613)

<div class="topic-metadata">

**Author:** [@stk1](https://discuss.elastic.co/u/stk1)\
**Replies:** 2\
**Last updated:** [March 18, 2020, 6:43am UTC](https://discuss.elastic.co/t/error-while-connection-to-elasticsearch-503-the-server-refuse-to-browse-the-page/223613 "2020-03-18T06:43:38Z")

</div>

Hi, I am having trouble sending data from Heartbeat to Elasticsearch (both version 7.3). On the same server runs an instance of apm-server which makes no trouble, so I used the same configuration for elasticsearch givin…

---

## [JSON parse failure](https://discuss.elastic.co/t/json-parse-failure/118356)

<div class="topic-metadata">

**Author:** [@Shyam\_Burla](https://discuss.elastic.co/u/Shyam_Burla)\
**Replies:** 2\
**Last updated:** [February 5, 2018, 10:56pm UTC](https://discuss.elastic.co/t/json-parse-failure/118356 "2018-02-05T22:56:55Z")

</div>

I trying to parse log message which is below.. { "records": \[ { "ActivityId": "XXX", "EventName": "XXX", "resourceId": "XXXX", "SubscriptionId": "XXXXX", "EventTimeString": "XXXXX", "EventPropertie…

---

## [No sample dashboard or Visualize in new installed Kibana](https://discuss.elastic.co/t/no-sample-dashboard-or-visualize-in-new-installed-kibana/113634)

<div class="topic-metadata">

**Author:** [@andychen1234](https://discuss.elastic.co/u/andychen1234)\
**Replies:** 2\
**Last updated:** [December 31, 2017, 5:35am UTC](https://discuss.elastic.co/t/no-sample-dashboard-or-visualize-in-new-installed-kibana/113634 "2017-12-31T05:35:42Z")

</div>

Hi All, I am new for this, please forgive me if my question is too stupid. my setup: client server ship apache/nginx log via filebeat to logstash server. logstash is on the same machine with elasticsearch as well…

---

## [Grouping values of specific field with count](https://discuss.elastic.co/t/grouping-values-of-specific-field-with-count/109082)

<div class="topic-metadata">

**Author:** [@wassx](https://discuss.elastic.co/u/wassx)\
**Replies:** 2\
**Last updated:** [November 28, 2017, 9:40pm UTC](https://discuss.elastic.co/t/grouping-values-of-specific-field-with-count/109082 "2017-11-28T21:40:27Z")

</div>

Hi! I can't find a query to get all distinct values of a field grouped and with a count of their occurrance. So i have e.g. 10 documents with a field "info". "Info" has various values. Output should be something like: …

---

## [After 1.7 to 5.5.1 Unable to authenticate user for REST request](https://discuss.elastic.co/t/after-1-7-to-5-5-1-unable-to-authenticate-user-for-rest-request/96510)

<div class="topic-metadata">

**Author:** [@JJerpseth](https://discuss.elastic.co/u/JJerpseth)\
**Replies:** 2\
**Last updated:** [August 9, 2017, 10:32pm UTC](https://discuss.elastic.co/t/after-1-7-to-5-5-1-unable-to-authenticate-user-for-rest-request/96510 "2017-08-09T22:32:37Z")

</div>

I am upgrading our nodes from 1.7 to 5.5.1. I split off two master/data nodes and one index node – I have elasticsearch running on all three and kibana running on one node. Even the simplest request is refused curl -…

---

## [Unable to check Elasticsearch cluster health w/shield plugin installed](https://discuss.elastic.co/t/unable-to-check-elasticsearch-cluster-health-w-shield-plugin-installed/36686)

<div class="topic-metadata">

**Author:** [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)\
**Replies:** 2\
**Last updated:** [February 27, 2016, 4:01pm UTC](https://discuss.elastic.co/t/unable-to-check-elasticsearch-cluster-health-w-shield-plugin-installed/36686 "2016-02-27T16:01:06Z")

</div>

Now that I have elasticsearch plugin installed, how do I check my elasticsearch cluster healther/indices/any curl command? How do I run curl ':9200/\_cat/indices?v' when I have shield plugin? I get the following messa…

---

## [Fixing mappings for Elasticsearch 2.0](https://discuss.elastic.co/t/fixing-mappings-for-elasticsearch-2-0/24590)

<div class="topic-metadata">

**Author:** [@chruss2](https://discuss.elastic.co/u/chruss2)\
**Replies:** 2\
**Last updated:** [July 1, 2015, 4:16am UTC](https://discuss.elastic.co/t/fixing-mappings-for-elasticsearch-2-0/24590 "2015-07-01T04:16:38Z")

</div>

As mentioned in a recent Elastic blog, Elasticsearch 2.0 is coming soon, and indices with conflicting field mappings will be incompatible. I did a quick check, and 66% of my indices will not be upgradable. It will proba…

---

## [Index Trimming](https://discuss.elastic.co/t/index-trimming/9119)

<div class="topic-metadata">

**Author:** [@orenmazor](https://discuss.elastic.co/u/orenmazor)\
**Replies:** 2\
**Last updated:** [September 24, 2012, 8:58pm UTC](https://discuss.elastic.co/t/index-trimming/9119 "2012-09-24T20:58:52Z")

</div>

hey all, given a cluster of around 200m large-ish uniform documents, how would you go about trimming the index based on a certain mapping property? right now I run a scroll query on my cluster, and for all the ma…

---

## [Multiline stderr logs mixed with stout logs](https://discuss.elastic.co/t/multiline-stderr-logs-mixed-with-stout-logs/233571)

<div class="topic-metadata">

**Author:** [@elia.oggian](https://discuss.elastic.co/u/elia.oggian)\
**Replies:** 3\
**Last updated:** [June 4, 2020, 2:01pm UTC](https://discuss.elastic.co/t/multiline-stderr-logs-mixed-with-stout-logs/233571 "2020-06-04T14:01:07Z")

</div>

I am having an issue collecting docker containers logs. The issue is that, for example, when a Java Stacktrace gets logged on multiple lines on stderr stream, it could be that other logs of the stdout stream are logged …

---

## [Logstash pipeline problem](https://discuss.elastic.co/t/logstash-pipeline-problem/204902)

<div class="topic-metadata">

**Author:** [@basavyr](https://discuss.elastic.co/u/basavyr)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 1:10pm UTC](https://discuss.elastic.co/t/logstash-pipeline-problem/204902 "2019-10-24T13:10:24Z")

</div>

So I have to achieve a Logstash setup where I have two (or maybe even more) log files, each with its own input and filters (output will always be sent to Elastic and then visualized in Kibana). I saw this is very doable…

---

## [No route to ElasticSearch from Spark in Standalone mode](https://discuss.elastic.co/t/no-route-to-elasticsearch-from-spark-in-standalone-mode/84116)

<div class="topic-metadata">

**Author:** [@mtrivolli](https://discuss.elastic.co/u/mtrivolli)\
**Replies:** 3\
**Last updated:** [May 2, 2017, 3:45pm UTC](https://discuss.elastic.co/t/no-route-to-elasticsearch-from-spark-in-standalone-mode/84116 "2017-05-02T15:45:38Z")

</div>

I'm working on some simple tests with Spark (standalone mode) and ElasticSearch. All my tests work fine as long as ElasticSearch is running in the same host as Spark. If I move ElasticSearch to a different node, then I …

---

## [Failed to parse @timestamp from UNIX\_MS](https://discuss.elastic.co/t/failed-to-parse-timestamp-from-unix-ms/52732)

<div class="topic-metadata">

**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\
**Replies:** 3\
**Last updated:** [June 15, 2016, 7:19am UTC](https://discuss.elastic.co/t/failed-to-parse-timestamp-from-unix-ms/52732 "2016-06-15T07:19:24Z")

</div>

Going crazy. Been busy / searching all day, but no success. I've got this data which I want to import in Elasticsearch with Logstash: 1465309033156,84,http://test.com/purchase.php,200,OK,ThreadGroup 1-3,true,6,6,84,t…

---

## [Setting Timeout in the cloud shield](https://discuss.elastic.co/t/setting-timeout-in-the-cloud-shield/43362)

<div class="topic-metadata">

**Author:** [@orpo](https://discuss.elastic.co/u/orpo)\
**Replies:** 3\
**Last updated:** [March 4, 2016, 2:22am UTC](https://discuss.elastic.co/t/setting-timeout-in-the-cloud-shield/43362 "2016-03-04T02:22:21Z")

</div>

We're getting timeout too soon when using the cloud version of Elastic + kibana + shield, Is it possible to change the timeout ? Regards O

---

## [How to log additional data for a given process such as "Command Line"?](https://discuss.elastic.co/t/how-to-log-additional-data-for-a-given-process-such-as-command-line/39702)

<div class="topic-metadata">

**Author:** [@styfle](https://discuss.elastic.co/u/styfle)\
**Replies:** 3\
**Last updated:** [February 8, 2016, 7:53pm UTC](https://discuss.elastic.co/t/how-to-log-additional-data-for-a-given-process-such-as-command-line/39702 "2016-02-08T19:53:01Z")

</div>

I am using the latest topbeat 2.1.1 with elasticsearch 2.1.1 on Windows. My goal is to see CPU usage and Memory usage for several w3wp.exe processes (IIS App Pools) on the machine. The default topbeat.yml is logging th…

---

## [REDIS input stops working?](https://discuss.elastic.co/t/redis-input-stops-working/27834)

<div class="topic-metadata">

**Author:** [@slee](https://discuss.elastic.co/u/slee)\
**Replies:** 3\
**Last updated:** [August 21, 2015, 7:54pm UTC](https://discuss.elastic.co/t/redis-input-stops-working/27834 "2015-08-21T19:54:36Z")

</div>

Hello, We currently have a server with redis installed, and several logstash instances. Half of these instances listen on a port and output to redis, and half of them input from redis, filter, and output to elasticsearc…

---

## [Custom Plugin for specifying custom filter attributes at query time](https://discuss.elastic.co/t/custom-plugin-for-specifying-custom-filter-attributes-at-query-time/18461)

<div class="topic-metadata">

**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\
**Replies:** 8\
**Last updated:** [July 8, 2014, 1:05pm UTC](https://discuss.elastic.co/t/custom-plugin-for-specifying-custom-filter-attributes-at-query-time/18461 "2014-07-08T13:05:32Z")

</div>

Hi All, I am new to ES and I have the following requirement: I need to specify a list of strings as a filter that applies to a specific field in the document. Like what a filter does, but instead of sending them o…

---

## [Not able to see request body for errors in NodeJS elastic-apm agent for express framework](https://discuss.elastic.co/t/not-able-to-see-request-body-for-errors-in-nodejs-elastic-apm-agent-for-express-framework/336760)

<div class="topic-metadata">

**Author:** [@Kesha\_Shah](https://discuss.elastic.co/u/Kesha_Shah)\
**Replies:** 4\
**Last updated:** [June 27, 2023, 12:05pm UTC](https://discuss.elastic.co/t/not-able-to-see-request-body-for-errors-in-nodejs-elastic-apm-agent-for-express-framework/336760 "2023-06-27T12:05:54Z")

</div>

Kibana version: 8.8.1 Elasticsearch version: 8.8.1 APM Server version: 8.8.1 APM Agent language and version: NodeJs Agent elastic-apm-node": "^3.47.0 Fresh install or upgraded from other version? Upgraded from 7.17 r…

---

## [Increase setCustomContext context character limit](https://discuss.elastic.co/t/increase-setcustomcontext-context-character-limit/173818)

<div class="topic-metadata">

**Author:** [@isurfbecause](https://discuss.elastic.co/u/isurfbecause)\
**Replies:** 4\
**Last updated:** [March 27, 2019, 6:20pm UTC](https://discuss.elastic.co/t/increase-setcustomcontext-context-character-limit/173818 "2019-03-27T18:20:04Z")

</div>

Kibana version: 6.5.4 Elasticsearch version: 6.5.4 APM Server version: 6.5.4 APM Agent language and version: elastic-apm-node 2.5.1 Browser version: Google Chrome Version 73.0.3683.86 (Official Build) (64-bit) …

---

## [Clustering problem with ES 2.x](https://discuss.elastic.co/t/clustering-problem-with-es-2-x/49412)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 4\
**Last updated:** [May 18, 2016, 9:00am UTC](https://discuss.elastic.co/t/clustering-problem-with-es-2-x/49412 "2016-05-18T09:00:13Z")

</div>

I am trying to form an ES clsuter in AWS private subnets When I add second node, its getting added to the cluster, but only some shards are getting allocated I see these errors in logs \`\[2016-05-06 13:43:16,921\]\[…

---

## [Empty field in native script](https://discuss.elastic.co/t/empty-field-in-native-script/16560)

<div class="topic-metadata">

**Author:** [@Meidan](https://discuss.elastic.co/u/Meidan)\
**Replies:** 4\
**Last updated:** [March 24, 2014, 4:24pm UTC](https://discuss.elastic.co/t/empty-field-in-native-script/16560 "2014-03-24T16:24:53Z")

</div>

I have created native script that checks if a specific field (mapped to type long) in the document is empty, using three different options below, the two first options sometime return false. Is there a documentation…

---

## [How to create kibana plugin and render \`Hello World\`](https://discuss.elastic.co/t/how-to-create-kibana-plugin-and-render-hello-world/303154)

<div class="topic-metadata">

**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\
**Replies:** 7\
**Last updated:** [May 3, 2022, 9:12am UTC](https://discuss.elastic.co/t/how-to-create-kibana-plugin-and-render-hello-world/303154 "2022-05-03T09:12:00Z")

</div>

I started kibana and elastic search a few days ago just trying to create the kibana plugin and render hello world on a page I went to mixuan sun website for a guide but I couldn't get it even I watched the official vi…

---

## [Logstash parse csv file with a column that contains multiple comma separated data points?](https://discuss.elastic.co/t/logstash-parse-csv-file-with-a-column-that-contains-multiple-comma-separated-data-points/256874)

<div class="topic-metadata">

**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\
**Replies:** 7\
**Last updated:** [December 1, 2020, 2:33pm UTC](https://discuss.elastic.co/t/logstash-parse-csv-file-with-a-column-that-contains-multiple-comma-separated-data-points/256874 "2020-12-01T14:33:10Z")

</div>

I have a CSV file with multiple entries in the following format (the headers are not included in the actual data): Time, FT Data (2048 entries), SNR, Frequency 430201865, 1000, 2000, 8500,... 4.50, 1266.255 2…

[Previous page](https://discuss.elastic.co/top.md?page=1062&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1064&per_page=50&period=all)
