# Top

**URL:** https://discuss.elastic.co/top.md?page=1073&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1074

---

## [Error In elasticsearch when Creating new mapping](https://discuss.elastic.co/t/error-in-elasticsearch-when-creating-new-mapping/46878)

<div class="topic-metadata">

**Author:** [@kingprimex](https://discuss.elastic.co/u/kingprimex)\
**Replies:** 5\
**Last updated:** [April 11, 2016, 3:44pm UTC](https://discuss.elastic.co/t/error-in-elasticsearch-when-creating-new-mapping/46878 "2016-04-11T15:44:52Z")

</div>

When I try to add a product I get: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Mapper for \[created\_at\] conflicts with existing mapping in other types:\\n\[mapper \[created\_at\] is used by multiple…

---

## [Range Filter strange behavior for numeric datat ype like integer, long, double](https://discuss.elastic.co/t/range-filter-strange-behavior-for-numeric-datat-ype-like-integer-long-double/11470)

<div class="topic-metadata">

**Author:** [@Vivek\_Muthal](https://discuss.elastic.co/u/Vivek_Muthal)\
**Replies:** 5\
**Last updated:** [April 9, 2013, 1:18pm UTC](https://discuss.elastic.co/t/range-filter-strange-behavior-for-numeric-datat-ype-like-integer-long-double/11470 "2013-04-09T13:18:43Z")

</div>

I have a field with integer data type, i tried with long and double also. This field has values from 0 - 200. I am using a simple filter which i had tried with from-to, gt-lt, gte-lte. The filter gives proper result…

---

## [How do I get a list of search results?](https://discuss.elastic.co/t/how-do-i-get-a-list-of-search-results/335541)

<div class="topic-metadata">

**Author:** [@Nad.Chel](https://discuss.elastic.co/u/Nad.Chel)\
**Replies:** 4\
**Last updated:** [June 8, 2023, 4:17pm UTC](https://discuss.elastic.co/t/how-do-i-get-a-list-of-search-results/335541 "2023-06-08T16:17:20Z")

</div>

I honestly tried to read the official tutorials. Unfortunately, I got completely bogged down: I find them hard to understand and they don't appear to give me the very specific information I need which is: how do I get a L…

---

## [How to access the system indices like .kibana\* indices in the elasticsearch](https://discuss.elastic.co/t/how-to-access-the-system-indices-like-kibana-indices-in-the-elasticsearch/297779)

<div class="topic-metadata">

**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 4\
**Last updated:** [February 22, 2022, 2:08am UTC](https://discuss.elastic.co/t/how-to-access-the-system-indices-like-kibana-indices-in-the-elasticsearch/297779 "2022-02-22T02:08:09Z")

</div>

In our project, we have a service that takes the backup of different system indices like .kibana\* indices. When I access them using the rest API, I am getting the following deprecation warning {"type": "deprecation.elas…

---

## [Yellow index (primary shard seems fine)](https://discuss.elastic.co/t/yellow-index-primary-shard-seems-fine/295563)

<div class="topic-metadata">

**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\
**Replies:** 4\
**Last updated:** [January 31, 2022, 9:48pm UTC](https://discuss.elastic.co/t/yellow-index-primary-shard-seems-fine/295563 "2022-01-31T21:48:37Z")

</div>

Hi, most of my indices are yellow. I am curious about one particular index, which is important to me. Due to confidentiallity I have to rename it in Paint and in codes bellow. When I use this code I get result whats in…

---

## [Logstash elasticsearch input plugin error](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-error/187178)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 4\
**Last updated:** [June 26, 2019, 11:28pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-error/187178 "2019-06-26T23:28:08Z")

</div>

While re-indexing data from an index using logstash, at times, it gives the following error: \[2019-06-24T13:45:08,442\]\[INFO \]\[logstash.pipeline \] Starting pipeline {"id"=\>"main", "pipeline.workers"=\>4, "pipeline…

---

## [ElasticSearch 5.3 filterer char\_filter. pattern\_replace not working](https://discuss.elastic.co/t/elasticsearch-5-3-filterer-char-filter-pattern-replace-not-working/95265)

<div class="topic-metadata">

**Author:** [@Galim\_Kaudinov](https://discuss.elastic.co/u/Galim_Kaudinov)\
**Replies:** 4\
**Last updated:** [August 1, 2017, 4:32pm UTC](https://discuss.elastic.co/t/elasticsearch-5-3-filterer-char-filter-pattern-replace-not-working/95265 "2017-08-01T16:32:57Z")

</div>

favorite I have a requirement where I need to query docs by phone number. Users can enter characters such as parenthesis and dashes in the search query string and they should be ignored.So, I have created a custom analy…

---

## [Filebeat 1.2.1 on ubuntu linux does not support kafka output](https://discuss.elastic.co/t/filebeat-1-2-1-on-ubuntu-linux-does-not-support-kafka-output/47688)

<div class="topic-metadata">

**Author:** [@kasi](https://discuss.elastic.co/u/kasi)\
**Replies:** 4\
**Last updated:** [April 18, 2016, 8:42pm UTC](https://discuss.elastic.co/t/filebeat-1-2-1-on-ubuntu-linux-does-not-support-kafka-output/47688 "2016-04-18T20:42:07Z")

</div>

I have installed filebeat 1.2.1, when I start filebeat with kafka as the output I am seeing no outouts defined error message the followings is the filebeat config. output: kafka: hosts: \["localhost:6667"\] …

---

## [X-pack seems to be creating a logstash index template automatically](https://discuss.elastic.co/t/x-pack-seems-to-be-creating-a-logstash-index-template-automatically/197009)

<div class="topic-metadata">

**Author:** [@jwalls](https://discuss.elastic.co/u/jwalls)\
**Replies:** 6\
**Last updated:** [September 4, 2019, 5:11pm UTC](https://discuss.elastic.co/t/x-pack-seems-to-be-creating-a-logstash-index-template-automatically/197009 "2019-09-04T17:11:31Z")

</div>

I have an issue with conflicting logstash index templates, and when deleting the one I don't need, it gets immediately recreated. considering it's called logstash-index-template this follows the similar naming convention…

---

## [Take events from one pipeline and forward to another pipeline : Pipeline to Pipeline Communication](https://discuss.elastic.co/t/take-events-from-one-pipeline-and-forward-to-another-pipeline-pipeline-to-pipeline-communication/156903)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 6\
**Last updated:** [November 15, 2018, 4:36pm UTC](https://discuss.elastic.co/t/take-events-from-one-pipeline-and-forward-to-another-pipeline-pipeline-to-pipeline-communication/156903 "2018-11-15T16:36:19Z")

</div>

Hi All I have a scenario, wherein i need to read events from one data source and transfer the output of this pipeline to other pipeline as a sprintf like %{abc}, please let me know how to achieve this Here is my exampl…

---

## [Input http plugin and CORS](https://discuss.elastic.co/t/input-http-plugin-and-cors/86815)

<div class="topic-metadata">

**Author:** [@CSchulz](https://discuss.elastic.co/u/CSchulz)\
**Replies:** 1\
**Last updated:** [May 23, 2017, 1:50pm UTC](https://discuss.elastic.co/t/input-http-plugin-and-cors/86815 "2017-05-23T13:50:30Z")

</div>

I have enabeld the input http plugin and added some headers for CORS. In general it works. To be secure I have enabled also the authorization, but I am struggling with the OPTIONS request itself. Normally the applicati…

---

## [Kibana requestTimeout and shardTimeout are not respected](https://discuss.elastic.co/t/kibana-requesttimeout-and-shardtimeout-are-not-respected/230027)

<div class="topic-metadata">

**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\
**Replies:** 3\
**Last updated:** [April 28, 2020, 2:40am UTC](https://discuss.elastic.co/t/kibana-requesttimeout-and-shardtimeout-are-not-respected/230027 "2020-04-28T02:40:42Z")

</div>

Hi, Here's out kibana configuration in kubernetes: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: annotations: common.k8s.elastic.co/controller-version: 1.0.1 creationTimestamp: "2020-04-09T20:01:3…

---

## [Merge or combine 2 different input fields as 1](https://discuss.elastic.co/t/merge-or-combine-2-different-input-fields-as-1/218420)

<div class="topic-metadata">

**Author:** [@jrodbor](https://discuss.elastic.co/u/jrodbor)\
**Replies:** 3\
**Last updated:** [February 10, 2020, 7:11pm UTC](https://discuss.elastic.co/t/merge-or-combine-2-different-input-fields-as-1/218420 "2020-02-10T19:11:19Z")

</div>

Hello, I the input CSV file I have the timestamp file separate by a TAB, one as "date" and another as "time", is it possible load is as the timestamp one ? What is the code to doing it ? input { file { path =\> "/Use…

---

## [How to create index as per file creation date?](https://discuss.elastic.co/t/how-to-create-index-as-per-file-creation-date/202206)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [October 3, 2019, 7:35pm UTC](https://discuss.elastic.co/t/how-to-create-index-as-per-file-creation-date/202206 "2019-10-03T19:35:00Z")

</div>

Hi Experts , For now I am creating index in ES on daily basis with below logic output { elasticsearch { action =\> "index" hosts =\> \["elastic:1234"\] …

---

## [Why close/reopen index will reset index stats to zero](https://discuss.elastic.co/t/why-close-reopen-index-will-reset-index-stats-to-zero/170830)

<div class="topic-metadata">

**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\
**Replies:** 3\
**Last updated:** [March 5, 2019, 3:15pm UTC](https://discuss.elastic.co/t/why-close-reopen-index-will-reset-index-stats-to-zero/170830 "2019-03-05T15:15:30Z")

</div>

Now we calculate index useage by index stats api, if close and reopen index, the index stats will reset to 0, such indexing/search/merge metrics. it will bring us misunderstanding. I'm wondering why this operation will …

---

## [Elasticsearch failed to active](https://discuss.elastic.co/t/elasticsearch-failed-to-active/125580)

<div class="topic-metadata">

**Author:** [@fitmren\_lamhr](https://discuss.elastic.co/u/fitmren_lamhr)\
**Replies:** 3\
**Last updated:** [March 27, 2018, 6:35am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-active/125580 "2018-03-27T06:35:25Z")

</div>

hi, i'm newbie. i just configure graylog and elasticsearch. the graylog seems working fine. but i have no idea where is the wrong in elasticsearch it wont be active . anw the version is 2.4.6 i tried enable, start and …

---

## [Logstash on low end ARM devices?](https://discuss.elastic.co/t/logstash-on-low-end-arm-devices/101634)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 3\
**Last updated:** [September 26, 2017, 10:50pm UTC](https://discuss.elastic.co/t/logstash-on-low-end-arm-devices/101634 "2017-09-26T22:50:11Z")

</div>

Hi, I've searched for Logstash minimum system requirements but I couldn't find anything. Is it possible to run logstash on something like a Raspberry pi or a 600Mhz 512mb ram ARM device? In my case it would only proce…

---

## [Grok Parse Error even though regex is valid](https://discuss.elastic.co/t/grok-parse-error-even-though-regex-is-valid/92535)

<div class="topic-metadata">

**Author:** [@amarc](https://discuss.elastic.co/u/amarc)\
**Replies:** 3\
**Last updated:** [July 12, 2017, 9:50pm UTC](https://discuss.elastic.co/t/grok-parse-error-even-though-regex-is-valid/92535 "2017-07-12T21:50:47Z")

</div>

Grok Patterns: (truncated to matching patterns only) ## Fixing AVC ## Example: ## type=AVC msg=audit(1499716867.329:3287727): avc: denied { execute } for pid=29362 comm=\\"ld-linux-x86-64\\" path=\\"/usr/libexec/hal-sys…

---

## [Pass proxy header with ES-Hadoop](https://discuss.elastic.co/t/pass-proxy-header-with-es-hadoop/24990)

<div class="topic-metadata">

**Author:** [@vijaym123](https://discuss.elastic.co/u/vijaym123)\
**Replies:** 3\
**Last updated:** [August 22, 2016, 11:20pm UTC](https://discuss.elastic.co/t/pass-proxy-header-with-es-hadoop/24990 "2016-08-22T23:20:02Z")

</div>

Hi Everyone, I was looking at the configuration page on your site (https://www.elastic.co/guide/en/elasticsearch/hadoop/current/configuration.html) and found some very useful documentation to pass data from hadoop to e…

---

## [Shard size / Index number / server count and performance](https://discuss.elastic.co/t/shard-size-index-number-server-count-and-performance/21858)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 3\
**Last updated:** [February 1, 2015, 9:14pm UTC](https://discuss.elastic.co/t/shard-size-index-number-server-count-and-performance/21858 "2015-02-01T21:14:41Z")

</div>

Hi all, I've seen lots of posts about this, and want to make sure I'm understanding correctly. Background: - Our cluster has 6 servers. They are Dell R720xd with 64GB RAM, 2xE5-2600v2 CPU (2 sockets, 6 …

---

## [Elasticsearch stop responding with too many scroll contexts](https://discuss.elastic.co/t/elasticsearch-stop-responding-with-too-many-scroll-contexts/368510)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 1\
**Last updated:** [October 14, 2024, 10:59am UTC](https://discuss.elastic.co/t/elasticsearch-stop-responding-with-too-many-scroll-contexts/368510 "2024-10-14T10:59:58Z")

</div>

We have .NET app that use NEST to store events in elastic. Randomly after some time my elasticsearch cluster of 3 nodes stop working and i see these errors. \[indices:data/read/search\[phase/query\]\]\\nCaused by: org.elasti…

---

## [Kibana APM not showing any data for the last two weeks](https://discuss.elastic.co/t/kibana-apm-not-showing-any-data-for-the-last-two-weeks/341291)

<div class="topic-metadata">

**Author:** [@ELLIOTTCABLE](https://discuss.elastic.co/u/ELLIOTTCABLE)\
**Replies:** 7\
**Last updated:** [August 22, 2023, 9:16pm UTC](https://discuss.elastic.co/t/kibana-apm-not-showing-any-data-for-the-last-two-weeks/341291 "2023-08-22T21:16:20Z")

</div>

Kibana version: v8.8.1 Elasticsearch version: v8.8.1 APM Server version: v8.8.0 Browser version: FireFox v116.0.3; Chrome v115.0.5790.170 Original install method (e.g. download page, yum, deb, from source, etc.) and…

---

## [Logstash holding deleted output file](https://discuss.elastic.co/t/logstash-holding-deleted-output-file/296113)

<div class="topic-metadata">

**Author:** [@Xiaochi\_Weng](https://discuss.elastic.co/u/Xiaochi_Weng)\
**Replies:** 7\
**Last updated:** [February 8, 2022, 7:06pm UTC](https://discuss.elastic.co/t/logstash-holding-deleted-output-file/296113 "2022-02-08T19:06:26Z")

</div>

I am currently using logstash with version 7.17 in the docker. Here is my output code: output{ file{ path=\>"/tmp/data/output.log" } } Meanwhile, I also have logrotate to keep it rotating: /tmp/data/output.log { si…

---

## [Threatintel anomali error: the requested root field is empty](https://discuss.elastic.co/t/threatintel-anomali-error-the-requested-root-field-is-empty/270841)

<div class="topic-metadata">

**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\
**Replies:** 7\
**Last updated:** [May 28, 2021, 7:26am UTC](https://discuss.elastic.co/t/threatintel-anomali-error-the-requested-root-field-is-empty/270841 "2021-05-28T07:26:54Z")

</div>

Hi, I gave the threatintel module a try. Successfully ingesting abuseurl, abusemalware and otx. I've a problem with getting anomali to work. First I figured, I have to uncomment the username/password fields to send def…

---

## [Specifying http.max\_content\_length](https://discuss.elastic.co/t/specifying-http-max-content-length/247804)

<div class="topic-metadata">

**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Replies:** 1\
**Last updated:** [September 7, 2020, 8:56pm UTC](https://discuss.elastic.co/t/specifying-http-max-content-length/247804 "2020-09-07T20:56:33Z")

</div>

Hello, When specifying http.max\_content\_length, do i need to do this for all nodes in my cluster? I have a lot of data to index and I'm trying to see if increasing this value might make indexing faster. I see the ques…

---

## [Alter the template for system indices](https://discuss.elastic.co/t/alter-the-template-for-system-indices/183883)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 7\
**Last updated:** [June 5, 2019, 4:09am UTC](https://discuss.elastic.co/t/alter-the-template-for-system-indices/183883 "2019-06-05T04:09:05Z")

</div>

Hi, We want to reduce the amount of shards that each .security\_audit\_log template is generating on a daily basis. At the moment it is creating 5 shards each day and we want to reduce it to 1 primary and 1 replica. Does…

---

## [Memory Explosion: Heap Dump in less than one minute](https://discuss.elastic.co/t/memory-explosion-heap-dump-in-less-than-one-minute/18994)

<div class="topic-metadata">

**Author:** [@Tom\_Wilson](https://discuss.elastic.co/u/Tom_Wilson)\
**Replies:** 7\
**Last updated:** [July 31, 2014, 6:06pm UTC](https://discuss.elastic.co/t/memory-explosion-heap-dump-in-less-than-one-minute/18994 "2014-07-31T18:06:11Z")

</div>

Help! Elasticsearch was working fine, but now it's using up all its heap space in the matter of a few minutes. I uninstalled the river and am performing no queries. How do I diagnose the problem? 2-3 minutes after s…

---

## [Elasticsearch on EC2 : load-average problem](https://discuss.elastic.co/t/elasticsearch-on-ec2-load-average-problem/11332)

<div class="topic-metadata">

**Author:** [@Talal\_2](https://discuss.elastic.co/u/Talal_2)\
**Replies:** 7\
**Last updated:** [March 28, 2013, 10:18am UTC](https://discuss.elastic.co/t/elasticsearch-on-ec2-load-average-problem/11332 "2013-03-28T10:18:33Z")

</div>

Hi everybody, I have used elasticsearch for some months now, and I have a problem that I don't really know how to solve. I have an iPhone application that sends notifications. Regarding the number of users we hav…

---

## [Reindex Data Stream](https://discuss.elastic.co/t/reindex-data-stream/305529)

<div class="topic-metadata">

**Author:** [@teamomni](https://discuss.elastic.co/u/teamomni)\
**Replies:** 2\
**Last updated:** [May 24, 2022, 5:00pm UTC](https://discuss.elastic.co/t/reindex-data-stream/305529 "2022-05-24T17:00:40Z")

</div>

We have recently moved all of our Logstash indices to the current data stream, but we are getting errors using the same ingest pipeline to fix the variable types of the original data stream. The reindex command given: P…

---

## [How to calculate date diffs using ingest node](https://discuss.elastic.co/t/how-to-calculate-date-diffs-using-ingest-node/169652)

<div class="topic-metadata">

**Author:** [@Christian\_SANCHEZ](https://discuss.elastic.co/u/Christian_SANCHEZ)\
**Replies:** 2\
**Last updated:** [February 26, 2019, 9:49am UTC](https://discuss.elastic.co/t/how-to-calculate-date-diffs-using-ingest-node/169652 "2019-02-26T09:49:27Z")

</div>

Hi I have a basic date diff between 2 dates to do and display it as weeks. If i use the Kibana scripted fields, it works fine using the following syntax : Math.round((doc\['last\_detected'\].value.toInstant().toEpochMill…

---

## [How to delete indice data from disk?](https://discuss.elastic.co/t/how-to-delete-indice-data-from-disk/137568)

<div class="topic-metadata">

**Author:** [@PolterFox](https://discuss.elastic.co/u/PolterFox)\
**Replies:** 2\
**Last updated:** [June 27, 2018, 9:08am UTC](https://discuss.elastic.co/t/how-to-delete-indice-data-from-disk/137568 "2018-06-27T09:08:12Z")

</div>

Hey guys, I want to delete all indices which are older than 30 days. I have successfully created a curator script which deletes the indices from ES, the indices which are deleted are not shown in kibana but the storage …

---

## [Using Split in Timelion and "Group other values"](https://discuss.elastic.co/t/using-split-in-timelion-and-group-other-values/122949)

<div class="topic-metadata">

**Author:** [@skatemple](https://discuss.elastic.co/u/skatemple)\
**Replies:** 2\
**Last updated:** [March 8, 2018, 3:18am UTC](https://discuss.elastic.co/t/using-split-in-timelion-and-group-other-values/122949 "2018-03-08T03:18:20Z")

</div>

Hello guys, I'm trying to make a Timelion query using split on a field with limit of 5, everythings fine but I want it to also show the "Others" grouped in a single line, just like you can do it when creating a Visualiz…

---

## [Watch schedule trigger with TimeZone](https://discuss.elastic.co/t/watch-schedule-trigger-with-timezone/106870)

<div class="topic-metadata">

**Author:** [@mhgeay](https://discuss.elastic.co/u/mhgeay)\
**Replies:** 2\
**Last updated:** [November 8, 2017, 5:49pm UTC](https://discuss.elastic.co/t/watch-schedule-trigger-with-timezone/106870 "2017-11-08T17:49:36Z")

</div>

Hello all, I re-open an old topic (Schedule Trigger TimeZone). Regarding current docs for Watch schedule trigger, we still use UTC time. It could generate false alerts based on time period due of DST changes. Are you …

---

## [Date filter not working in Logstash](https://discuss.elastic.co/t/date-filter-not-working-in-logstash/58073)

<div class="topic-metadata">

**Author:** [@RileyShu](https://discuss.elastic.co/u/RileyShu)\
**Replies:** 2\
**Last updated:** [August 16, 2016, 8:33am UTC](https://discuss.elastic.co/t/date-filter-not-working-in-logstash/58073 "2016-08-16T08:33:06Z")

</div>

input { file { path =\> "C:\\SystemErrors.log" start\_position =\> beginning ignore\_older =\> 0 type =\> "SystemErrors" } } filter { date { locale =\> "en" timezone =\> "America/Los\_Angeles" match =\> \["\\…

---

## [Completion Suggestor- Multi value field in a single document](https://discuss.elastic.co/t/completion-suggestor-multi-value-field-in-a-single-document/16268)

<div class="topic-metadata">

**Author:** [@vineeth\_mohan\_2](https://discuss.elastic.co/u/vineeth_mohan_2)\
**Replies:** 2\
**Last updated:** [March 12, 2014, 1:37pm UTC](https://discuss.elastic.co/t/completion-suggestor-multi-value-field-in-a-single-document/16268 "2014-03-12T13:37:58Z")

</div>

Hello , Here its told how to index data for completion suggester - http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-suggesters-completion.html#search-suggesters-completion But then it a…

---

## [Restore-elastic-search-snapshot-from-2-2-1-to-6-3-0](https://discuss.elastic.co/t/restore-elastic-search-snapshot-from-2-2-1-to-6-3-0/145529)

<div class="topic-metadata">

**Author:** [@deepsing](https://discuss.elastic.co/u/deepsing)\
**Replies:** 8\
**Last updated:** [August 22, 2018, 12:51pm UTC](https://discuss.elastic.co/t/restore-elastic-search-snapshot-from-2-2-1-to-6-3-0/145529 "2018-08-22T12:51:34Z")

</div>

I read that we can directly upgrade indices from 2.2.1 to 6.3.0. So First I upgraded it from 2.2.1 to 5.6.0 Now I am Trying to restore elastic search backup from 5.6.0 to 6.3.0 Following the below steps: update elas…

---

## [Failed to parse date field with format epoch\_millis](https://discuss.elastic.co/t/failed-to-parse-date-field-with-format-epoch-millis/202000)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 1\
**Last updated:** [October 9, 2019, 4:48pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field-with-format-epoch-millis/202000 "2019-10-09T16:48:43Z")

</div>

Hi all, Thanks in advance for your appreciated help. Would you know from where can come this error ? It occurs when I zoom in a specific window of 2 / 3 minutes in a timelion visualization I'm using kibana-7.3.2 an…

---

## [Cannot search long number field](https://discuss.elastic.co/t/cannot-search-long-number-field/121603)

<div class="topic-metadata">

**Author:** [@Khiem\_Tr\_n](https://discuss.elastic.co/u/Khiem_Tr_n)\
**Replies:** 1\
**Last updated:** [February 27, 2018, 8:44am UTC](https://discuss.elastic.co/t/cannot-search-long-number-field/121603 "2018-02-27T08:44:36Z")

</div>

Hi all, I have a problem with Elasticsearch. vid is a long field in my index. I try to search with: POST my-index/video/\_search { "query": { "term": { "vid": 6518061120253592000 } } } but get nothing…

---

## [Get aggregation result used by a Kibana visualization from ElasticSearch](https://discuss.elastic.co/t/get-aggregation-result-used-by-a-kibana-visualization-from-elasticsearch/27643)

<div class="topic-metadata">

**Author:** [@91pavan](https://discuss.elastic.co/u/91pavan)\
**Replies:** 1\
**Last updated:** [August 19, 2015, 8:23am UTC](https://discuss.elastic.co/t/get-aggregation-result-used-by-a-kibana-visualization-from-elasticsearch/27643 "2015-08-19T08:23:04Z")

</div>

Hi. I have a Kibana visualization doing some nested aggregation. I want to get the raw data which Kibana uses to graph this visualization. Here's the visState: { "type": "histogram", "params": { "shareYAxis"…

---

## [Phrase Query breaks with "Compound Word Token Filters"](https://discuss.elastic.co/t/phrase-query-breaks-with-compound-word-token-filters/138858)

<div class="topic-metadata">

**Author:** [@mos](https://discuss.elastic.co/u/mos)\
**Replies:** 5\
**Last updated:** [July 16, 2018, 12:53pm UTC](https://discuss.elastic.co/t/phrase-query-breaks-with-compound-word-token-filters/138858 "2018-07-16T12:53:26Z")

</div>

We are evaluating the use of Elastic's "Compound Word Token Filters" and @jprante's "Decompound Plugin" for a large index of German documents. So far both work fine. The one of @jprante works even a little better. :wi…

---

## [Index Patterns Keep Disappearing](https://discuss.elastic.co/t/index-patterns-keep-disappearing/258292)

<div class="topic-metadata">

**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\
**Replies:** 4\
**Last updated:** [December 10, 2020, 5:39pm UTC](https://discuss.elastic.co/t/index-patterns-keep-disappearing/258292 "2020-12-10T17:39:15Z")

</div>

Hi All, I'm currently using version 7.8.0, I've indexed some documents into ES, but when I create a n Index Pattern in Kibana, it disappear automatically. Please see below some screenshots of this issue. GET \_cat/indi…

---

## [GeoIP data without geo\_point](https://discuss.elastic.co/t/geoip-data-without-geo-point/221838)

<div class="topic-metadata">

**Author:** [@Ludek](https://discuss.elastic.co/u/Ludek)\
**Replies:** 4\
**Last updated:** [March 4, 2020, 2:21pm UTC](https://discuss.elastic.co/t/geoip-data-without-geo-point/221838 "2020-03-04T14:21:48Z")

</div>

I'm not able to create geopoint data With Elastic Stack 6.8.6. Geolocation works, but without geo\_point. That means, I cannot use it in Kibana. This is my Elastic template part: "geoip" : { "dynamic": true, "p…

---

## [Scripted Field - Sum of Field values to then use as a Max?](https://discuss.elastic.co/t/scripted-field-sum-of-field-values-to-then-use-as-a-max/145478)

<div class="topic-metadata">

**Author:** [@Dave21854207](https://discuss.elastic.co/u/Dave21854207)\
**Replies:** 4\
**Last updated:** [August 22, 2018, 9:48pm UTC](https://discuss.elastic.co/t/scripted-field-sum-of-field-values-to-then-use-as-a-max/145478 "2018-08-22T21:48:46Z")

</div>

Hi, This use case is for an electricity monitoring system, where we have two sources of supply to a building (A&B). Each of these supplies are metered and in the elastic cloud. We have visualizations for the data, but w…

---

## [Logstash loading same file after restart](https://discuss.elastic.co/t/logstash-loading-same-file-after-restart/101123)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 4\
**Last updated:** [September 20, 2017, 10:23am UTC](https://discuss.elastic.co/t/logstash-loading-same-file-after-restart/101123 "2017-09-20T10:23:35Z")

</div>

Hi all , whenever my logstash start , its load the same file again , this causing duplicate data in EC . this is my config file - input { file { path =\> "E:\\Local\_Elasticsearch\\logstashv5\\datafiles/\*.csv" start…

---

## [Multiline filter in logstash 5.5](https://discuss.elastic.co/t/multiline-filter-in-logstash-5-5/96832)

<div class="topic-metadata">

**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\
**Replies:** 4\
**Last updated:** [August 14, 2017, 2:24pm UTC](https://discuss.elastic.co/t/multiline-filter-in-logstash-5-5/96832 "2017-08-14T14:24:47Z")

</div>

I am unable to find any example or document giving example of it , this code is from 2.4 version , what would be the equivalent in 5.5 ? I have tried "codec =\> multiline" but it gives syntax error in the "filte…

---

## [How to update installed version of kibana](https://discuss.elastic.co/t/how-to-update-installed-version-of-kibana/67893)

<div class="topic-metadata">

**Author:** [@ven](https://discuss.elastic.co/u/ven)\
**Replies:** 4\
**Last updated:** [December 5, 2016, 2:25pm UTC](https://discuss.elastic.co/t/how-to-update-installed-version-of-kibana/67893 "2016-12-05T14:25:11Z")

</div>

Hi, I've deployed Kibana, but I'd like to make a few tweaks to it. The geo tile map has support for circle markers and heat maps, but I would like to add lines connecting the points, if possible (I'm new to Leaflet as w…

---

## [Need help with Elastic agent installation](https://discuss.elastic.co/t/need-help-with-elastic-agent-installation/338570)

<div class="topic-metadata">

**Author:** [@Retrogamer](https://discuss.elastic.co/u/Retrogamer)\
**Replies:** 3\
**Last updated:** [July 17, 2023, 2:25pm UTC](https://discuss.elastic.co/t/need-help-with-elastic-agent-installation/338570 "2023-07-17T14:25:27Z")

</div>

It has been a few days that I am going through all documentations to install Elastic-agent either with Fleet Server or Stand-alone, but still, I have not been able to understand how each components works, what is the pre…

---

## [Updated to 7.11.00 - Resource is under maintenance / recovery](https://discuss.elastic.co/t/updated-to-7-11-00-resource-is-under-maintenance-recovery/264782)

<div class="topic-metadata">

**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Replies:** 3\
**Last updated:** [February 21, 2021, 9:17pm UTC](https://discuss.elastic.co/t/updated-to-7-11-00-resource-is-under-maintenance-recovery/264782 "2021-02-21T21:17:52Z")

</div>

Upgraded to 7.11.0 and now have the following error {"ok":false,"message":"Resource is under maintenance / recovery."}

---

## [No matching indices found: No indices match pattern "winlogbeat-\*"](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-winlogbeat/174750)

<div class="topic-metadata">

**Author:** [@WarriorHarb](https://discuss.elastic.co/u/WarriorHarb)\
**Replies:** 3\
**Last updated:** [April 1, 2019, 1:48pm UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-winlogbeat/174750 "2019-04-01T13:48:05Z")

</div>

Hello , So i installed winlogbeat as a service and it is running fine, when i check in Kibana i get that error: No matching indices found: No indices match pattern "winlogbeat-\*" -Logsash was configured to receive da…

---

## [Elasticsearch request with c# NEST POST](https://discuss.elastic.co/t/elasticsearch-request-with-c-nest-post/173112)

<div class="topic-metadata">

**Author:** [@Philippe\_Schaeffer](https://discuss.elastic.co/u/Philippe_Schaeffer)\
**Replies:** 3\
**Last updated:** [March 28, 2019, 9:58pm UTC](https://discuss.elastic.co/t/elasticsearch-request-with-c-nest-post/173112 "2019-03-28T21:58:41Z")

</div>

Hello, Sorry to disturb you but I'm totally blocked, I'm french student and I work on a project in my company. I want to make a query in c# on elasticsearch. The adress which I can have a json response is: X.X.X.X:56…

[Previous page](https://discuss.elastic.co/top.md?page=1072&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1074&per_page=50&period=all)
