# Top

**URL:** https://discuss.elastic.co/top.md?page=1087&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1088

---

## [Logstash don't trust Elasticsearch's certificate](https://discuss.elastic.co/t/logstash-dont-trust-elasticsearchs-certificate/228062)

<div class="topic-metadata">

**Author:** [@delanobgt](https://discuss.elastic.co/u/delanobgt)\
**Replies:** 2\
**Last updated:** [April 15, 2020, 11:16am UTC](https://discuss.elastic.co/t/logstash-dont-trust-elasticsearchs-certificate/228062 "2020-04-15T11:16:16Z")

</div>

I am stuck for 1 week already.. :') Elasticsearch's cluster and Kibana is working fine except for logstash only. I kept getting these logs from elasticsearch: ''' es01 | {"type": "server", "timestamp": "2020-0…

---

## [Multiple filebeat output to ES and Logstash](https://discuss.elastic.co/t/multiple-filebeat-output-to-es-and-logstash/203824)

<div class="topic-metadata">

**Author:** [@mathur7vidit](https://discuss.elastic.co/u/mathur7vidit)\
**Replies:** 2\
**Last updated:** [October 17, 2019, 4:00am UTC](https://discuss.elastic.co/t/multiple-filebeat-output-to-es-and-logstash/203824 "2019-10-17T04:00:30Z")

</div>

Team, i have a requirement where i need to send audit, auth and syslog from servers to elasticsearch directly and application's log to logstash. here are the changes and steps i performed. I am using ubuntu 16 in our set…

---

## [Conditional filebeat output to logstash](https://discuss.elastic.co/t/conditional-filebeat-output-to-logstash/156303)

<div class="topic-metadata">

**Author:** [@rrs](https://discuss.elastic.co/u/rrs)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 2:26pm UTC](https://discuss.elastic.co/t/conditional-filebeat-output-to-logstash/156303 "2018-11-13T14:26:32Z")

</div>

Hi All, We have done setup of ELK with 5.6.3 and filebeat-5.6.3 also installed on hosts to push logs. It is running fine. We need segregation for prod/dev indexes for which we have done another setup for my 'dev' envir…

---

## [Use Mustache template in SLACK](https://discuss.elastic.co/t/use-mustache-template-in-slack/60515)

<div class="topic-metadata">

**Author:** [@mmbtenorio](https://discuss.elastic.co/u/mmbtenorio)\
**Replies:** 2\
**Last updated:** [September 14, 2016, 5:25pm UTC](https://discuss.elastic.co/t/use-mustache-template-in-slack/60515 "2016-09-14T17:25:21Z")

</div>

Hello! I want to insert mustache template in my watch. I tried to use webhooks instead of slack but I'm always getting an error such as ConnectException, status:400, etc.

---

## [Filtering search on properties](https://discuss.elastic.co/t/filtering-search-on-properties/29491)

<div class="topic-metadata">

**Author:** [@jdepp99](https://discuss.elastic.co/u/jdepp99)\
**Replies:** 2\
**Last updated:** [November 17, 2015, 5:07pm UTC](https://discuss.elastic.co/t/filtering-search-on-properties/29491 "2015-11-17T17:07:39Z")

</div>

I am trying to build a dashboard on an existing elasticsearch cluster index and having trouble getting the visualizations to work. I am able to query the specific fields in discover tab but when trying to aggregate by te…

---

## [ShingleFilter with Stop List for Tag Cloud](https://discuss.elastic.co/t/shinglefilter-with-stop-list-for-tag-cloud/7403)

<div class="topic-metadata">

**Author:** [@uzicorp](https://discuss.elastic.co/u/uzicorp)\
**Replies:** 2\
**Last updated:** [April 23, 2012, 9:34am UTC](https://discuss.elastic.co/t/shinglefilter-with-stop-list-for-tag-cloud/7403 "2012-04-23T09:34:29Z")

</div>

Hello all, I'm trying to implement a tag cloud for phrases but having the ability to remove stopwords from them. I've managed to build a single word tag cloud but wanted to expand this to phrases - or shingles in th…

---

## [Replica Shard Allocation to Nodes with a Specific Attribute](https://discuss.elastic.co/t/replica-shard-allocation-to-nodes-with-a-specific-attribute/193414)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 3\
**Last updated:** [August 7, 2019, 4:48pm UTC](https://discuss.elastic.co/t/replica-shard-allocation-to-nodes-with-a-specific-attribute/193414 "2019-08-07T16:48:34Z")

</div>

I am trying to allocate shard replicas to nodes in a different region than where my primaries live. I'm looking for a way to specify in the index mapping template that replicas must live in a different region. I'm able t…

---

## [Sudden 100% high CPU spikes and degraded performance for 10-15min](https://discuss.elastic.co/t/sudden-100-high-cpu-spikes-and-degraded-performance-for-10-15min/122302)

<div class="topic-metadata">

**Author:** [@Kaspars\_Sprogis](https://discuss.elastic.co/u/Kaspars_Sprogis)\
**Replies:** 0\
**Last updated:** [March 2, 2018, 5:43pm UTC](https://discuss.elastic.co/t/sudden-100-high-cpu-spikes-and-degraded-performance-for-10-15min/122302 "2018-03-02T17:43:58Z")

</div>

I am having 3 nodes ElasticSearch cluster on AWS. Facts: ElasticSearch 6.2.2 deployed using docker. 3x identical c5.large instances (2x vCPU, 3.6 GB RAM) All are identical master + data nodes and use same docker image…

---

## [Unknown condition type \[array\_compare\]\];](https://discuss.elastic.co/t/unknown-condition-type-array-compare/34239)

<div class="topic-metadata">

**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\
**Replies:** 3\
**Last updated:** [November 18, 2015, 1:03pm UTC](https://discuss.elastic.co/t/unknown-condition-type-array-compare/34239 "2015-11-18T13:03:38Z")

</div>

Hi, I'm getting this error while executing watcher api. @steve kearns Thanks

---

## [Synchronise websites and Elasticsearch](https://discuss.elastic.co/t/synchronise-websites-and-elasticsearch/60710)

<div class="topic-metadata">

**Author:** [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)\
**Replies:** 7\
**Last updated:** [September 21, 2016, 11:20pm UTC](https://discuss.elastic.co/t/synchronise-websites-and-elasticsearch/60710 "2016-09-21T23:20:43Z")

</div>

Hello everyone, Do you have any idea how can I process to synchronise my websites (built with Wordpress, Drupal, Joomla...) with my Elasticsearch? Thank you in advance.

---

## [Searching multiple fields, types, and indexes within php](https://discuss.elastic.co/t/searching-multiple-fields-types-and-indexes-within-php/204935)

<div class="topic-metadata">

**Author:** [@prawsthorne](https://discuss.elastic.co/u/prawsthorne)\
**Replies:** 1\
**Last updated:** [October 28, 2019, 12:41pm UTC](https://discuss.elastic.co/t/searching-multiple-fields-types-and-indexes-within-php/204935 "2019-10-28T12:41:52Z")

</div>

I wanting to query one term across multiple indexes, types, and fields. I've been reading and experimenting with no working solution... yet. It's time to ask. It works until I un-comment the second match clause. Thinki…

---

## [Inactive and Rolling files](https://discuss.elastic.co/t/inactive-and-rolling-files/161398)

<div class="topic-metadata">

**Author:** [@mickt](https://discuss.elastic.co/u/mickt)\
**Replies:** 1\
**Last updated:** [December 20, 2018, 11:01pm UTC](https://discuss.elastic.co/t/inactive-and-rolling-files/161398 "2018-12-20T23:01:18Z")

</div>

Hi, I have a question regarding the close\_inactive status and rolling files configuration of Filebeat. I currently have Filebeat shipping some apache logs. Apache Log entries can come in every 2 seconds as well as eve…

---

## [\[Plugin\] Conflict when using angular bootstrap](https://discuss.elastic.co/t/plugin-conflict-when-using-angular-bootstrap/74507)

<div class="topic-metadata">

**Author:** [@algheorghe](https://discuss.elastic.co/u/algheorghe)\
**Replies:** 1\
**Last updated:** [February 9, 2017, 7:05pm UTC](https://discuss.elastic.co/t/plugin-conflict-when-using-angular-bootstrap/74507 "2017-02-09T19:05:23Z")

</div>

Hello, I am working on a docView plugin and I'm trying to import an external NPM module which actually is a angular.module. The module I am trying to import, have some useful services and directives in it, directives b…

---

## [Logstash loops on ingestion](https://discuss.elastic.co/t/logstash-loops-on-ingestion/138424)

<div class="topic-metadata">

**Author:** [@band](https://discuss.elastic.co/u/band)\
**Replies:** 5\
**Last updated:** [July 11, 2018, 3:14pm UTC](https://discuss.elastic.co/t/logstash-loops-on-ingestion/138424 "2018-07-11T15:14:23Z")

</div>

I am facing a problem with Logstash on a single node. I need to ingest a ~30MB xml file with the following format \<ROOT\> \<field1\>...\</field1\> \<row\> \<fieldA\>...\</fieldA\> \<fieldB\>...\</fieldB\> \</…

---

## [ERR Failed to publish events caused by: EOF (no tls)](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-eof-no-tls/68462)

<div class="topic-metadata">

**Author:** [@lolo67](https://discuss.elastic.co/u/lolo67)\
**Replies:** 5\
**Last updated:** [December 9, 2016, 4:38pm UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-eof-no-tls/68462 "2016-12-09T16:38:12Z")

</div>

Hello, In filebeat.log I have many : ERR Failed to publish events caused by: EOF I checked that my filebeat.yml is valid : http://www.yamllint.com/ I checked that ssl is used and not tls. I checked the logstash lo…

---

## [Show Graph based upon a self-constructed query](https://discuss.elastic.co/t/show-graph-based-upon-a-self-constructed-query/61154)

<div class="topic-metadata">

**Author:** [@michelmooren](https://discuss.elastic.co/u/michelmooren)\
**Replies:** 5\
**Last updated:** [September 24, 2016, 2:55pm UTC](https://discuss.elastic.co/t/show-graph-based-upon-a-self-constructed-query/61154 "2016-09-24T14:55:33Z")

</div>

I would like to experiment with the "guiding query" which is only available through the Graph API. Interpreting the JSON response is time consuming however. Is there a way to present the JSON response in Kibana Graph?

---

## [Ttl field in elasticsearch](https://discuss.elastic.co/t/ttl-field-in-elasticsearch/44426)

<div class="topic-metadata">

**Author:** [@lucifer](https://discuss.elastic.co/u/lucifer)\
**Replies:** 5\
**Last updated:** [March 29, 2016, 9:04am UTC](https://discuss.elastic.co/t/ttl-field-in-elasticsearch/44426 "2016-03-29T09:04:05Z")

</div>

How to change the ttl field of the indices in a cluster using curl command?

---

## [Type woes loading X3D JSON](https://discuss.elastic.co/t/type-woes-loading-x3d-json/28555)

<div class="topic-metadata">

**Author:** [@coderextreme](https://discuss.elastic.co/u/coderextreme)\
**Replies:** 5\
**Last updated:** [September 4, 2015, 3:12am UTC](https://discuss.elastic.co/t/type-woes-loading-x3d-json/28555 "2015-09-04T03:12:44Z")

</div>

I am experiencing type woes loading X3D JSON. I think because it's a very hierarchical document, and there's no schema for it yet. There is an XML schema, which might be used to load metadata into elastic search, but …

---

## [Output logstash not start](https://discuss.elastic.co/t/output-logstash-not-start/26340)

<div class="topic-metadata">

**Author:** [@Jungmi\_Yoo](https://discuss.elastic.co/u/Jungmi_Yoo)\
**Replies:** 5\
**Last updated:** [July 28, 2015, 7:44am UTC](https://discuss.elastic.co/t/output-logstash-not-start/26340 "2015-07-28T07:44:20Z")

</div>

Logstash 1.5.1 Elasticsearch 1.4.2 I tried to move from A index aggregated data to B index. but I can't let Logstash output start. here is log message and config file. I don't know what config is wrong. Fa…

---

## [Index with documents in multiple languages](https://discuss.elastic.co/t/index-with-documents-in-multiple-languages/7398)

<div class="topic-metadata">

**Author:** [@bogdanionescu](https://discuss.elastic.co/u/bogdanionescu)\
**Replies:** 5\
**Last updated:** [January 25, 2013, 5:36am UTC](https://discuss.elastic.co/t/index-with-documents-in-multiple-languages/7398 "2013-01-25T05:36:02Z")

</div>

Hello. I would like to index some documents, keep them in the same index, but the documents are in different languages. I'm thinking I must use a specific analyzer for each language. Should I declare a mapping wit…

---

## [Java API for Facet](https://discuss.elastic.co/t/java-api-for-facet/5721)

<div class="topic-metadata">

**Author:** [@irbis](https://discuss.elastic.co/u/irbis)\
**Replies:** 5\
**Last updated:** [April 27, 2012, 11:19am UTC](https://discuss.elastic.co/t/java-api-for-facet/5721 "2012-04-27T11:19:49Z")

</div>

I'm looking for Java API describing facet search, where can I see it?

---

## [ML is available but not enabled](https://discuss.elastic.co/t/ml-is-available-but-not-enabled/181357)

<div class="topic-metadata">

**Author:** [@robertvolkmann](https://discuss.elastic.co/u/robertvolkmann)\
**Replies:** 4\
**Last updated:** [May 17, 2019, 1:38pm UTC](https://discuss.elastic.co/t/ml-is-available-but-not-enabled/181357 "2019-05-17T13:38:39Z")

</div>

Hi everyone, we started with our trial licence to evaluate the machine learning features. But after following the elasticsearch documentation machine-learning remains disabled. Start point: Elasicsearch 6.6.2 xpack.m…

---

## [ElasticSearch AWS Setup - Nodes and LoadBalancers](https://discuss.elastic.co/t/elasticsearch-aws-setup-nodes-and-loadbalancers/117104)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 4\
**Last updated:** [January 25, 2018, 8:47pm UTC](https://discuss.elastic.co/t/elasticsearch-aws-setup-nodes-and-loadbalancers/117104 "2018-01-25T20:47:06Z")

</div>

Am trying to setup ES on AWS using the following configuration. Wanted to run this by the community to see if I'm doing the right thing. I have approximately 1 million documents to index. 3 Master Only Nodes 2 Data Onl…

---

## [Forwarder only sending one logfile](https://discuss.elastic.co/t/forwarder-only-sending-one-logfile/32274)

<div class="topic-metadata">

**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\
**Replies:** 4\
**Last updated:** [October 20, 2015, 10:12am UTC](https://discuss.elastic.co/t/forwarder-only-sending-one-logfile/32274 "2015-10-20T10:12:39Z")

</div>

i've added to log files to be shipped, if i do them individually no problem if i try and send both - only one of them end up in elasticsearch ? what gives? 015/10/15 15:11:41.183630 Loading registrar data from /opt/log…

---

## [Elastic.co hosted instance and number of nodes](https://discuss.elastic.co/t/elastic-co-hosted-instance-and-number-of-nodes/142407)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 8\
**Last updated:** [August 3, 2018, 6:32am UTC](https://discuss.elastic.co/t/elastic-co-hosted-instance-and-number-of-nodes/142407 "2018-08-03T06:32:48Z")

</div>

I am testing hosted instance and dont want to use replicas but i want to have multiple nodes for better performance in the cloud calculator https://www.elastic.co/cloud/elasticsearch-service/pricing i see per example 32G…

---

## [\[Ingest Node\] pipeline with id \[x\] does not exist](https://discuss.elastic.co/t/ingest-node-pipeline-with-id-x-does-not-exist/84570)

<div class="topic-metadata">

**Author:** [@mkrauklis](https://discuss.elastic.co/u/mkrauklis)\
**Replies:** 0\
**Last updated:** [May 4, 2017, 1:53pm UTC](https://discuss.elastic.co/t/ingest-node-pipeline-with-id-x-does-not-exist/84570 "2017-05-04T13:53:08Z")

</div>

I think this is the same problem noted here: https://discuss.elastic.co/t/ingest-node-pipeline-with-id-x-does-not-exist-solved/54436 That thread says "solved" but I see no resolution. Just an inability to reproduce the …

---

## [Aggregeations with different keys and values (label and ID)](https://discuss.elastic.co/t/aggregeations-with-different-keys-and-values-label-and-id/274218)

<div class="topic-metadata">

**Author:** [@Julian\_Klotz](https://discuss.elastic.co/u/Julian_Klotz)\
**Replies:** 2\
**Last updated:** [May 31, 2021, 8:39am UTC](https://discuss.elastic.co/t/aggregeations-with-different-keys-and-values-label-and-id/274218 "2021-05-31T08:39:38Z")

</div>

Dear ES community, I hope someone can help me out with a (honestly) very basic question. I’m posting this because I couldn’t find a simple answer, to my surprise. Let’s say I have a blog post indexed in ES (example bel…

---

## [Security\_exception in logstash log: indices:admin/auto\_create is unauthorized for user](https://discuss.elastic.co/t/security-exception-in-logstash-log-indices-admin-auto-create-is-unauthorized-for-user/269523)

<div class="topic-metadata">

**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\
**Replies:** 2\
**Last updated:** [April 8, 2021, 9:56am UTC](https://discuss.elastic.co/t/security-exception-in-logstash-log-indices-admin-auto-create-is-unauthorized-for-user/269523 "2021-04-08T09:56:08Z")

</div>

Hello, I configured fluentd to forward logs to Logstash (7.10) and the Elasticsearch output throws the following error: \[2021-04-07T17:17:11,390\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\]\[2662b9682e97be5de9346f00d19…

---

## [How do i convert my existing logstash grok to match with Elastic Common Schema ECS data type](https://discuss.elastic.co/t/how-do-i-convert-my-existing-logstash-grok-to-match-with-elastic-common-schema-ecs-data-type/192171)

<div class="topic-metadata">

**Author:** [@Shiv18](https://discuss.elastic.co/u/Shiv18)\
**Replies:** 2\
**Last updated:** [November 29, 2019, 3:47pm UTC](https://discuss.elastic.co/t/how-do-i-convert-my-existing-logstash-grok-to-match-with-elastic-common-schema-ecs-data-type/192171 "2019-11-29T15:47:26Z")

</div>

Hi Team, Im trying to change the existing grok pattern for several log formats into standard ECS format. For example, ecs url schema says for defining URL, i can use url.full and the type should be 'keyword'. When i …

---

## [Substring in watcher action](https://discuss.elastic.co/t/substring-in-watcher-action/146550)

<div class="topic-metadata">

**Author:** [@TheCodingKnight](https://discuss.elastic.co/u/TheCodingKnight)\
**Replies:** 2\
**Last updated:** [August 31, 2018, 11:07am UTC](https://discuss.elastic.co/t/substring-in-watcher-action/146550 "2018-08-31T11:07:32Z")

</div>

Hi, I've created a watcher which monitors for the keywords "result address" and returns the following line. Is there a way to extract the "doorno" part out of this line to display in an email through the watcher action? …

---

## [모듈을 사용하는 방법에 대해 질문이 있습니다.](https://discuss.elastic.co/t/topic/143280)

<div class="topic-metadata">

**Author:** [@da02d4d6e86247f19849](https://discuss.elastic.co/u/da02d4d6e86247f19849)\
**Replies:** 2\
**Last updated:** [August 11, 2018, 12:56am UTC](https://discuss.elastic.co/t/topic/143280 "2018-08-11T00:56:26Z")

</div>

elastic cloud를 사용중이며, 완전 기초단계에서부터 시작하는 중입니다.. https://drive.google.com/open?id=1HCl1mbqTsmJI5lsafQE0lHbeNIg0ZBzX 뉴스사이트를 크롤링해서 목표로 하고 있는 뉴스기사에 대한 json 파일을 얻었고, 이걸 분석기를 통해서 단어 형태로 짜른 다음에, 각 요소들간 연관성을 이어서 …

---

## [Index records with JSON type fields from Postgres to Elasticsearch using Logstash](https://discuss.elastic.co/t/index-records-with-json-type-fields-from-postgres-to-elasticsearch-using-logstash/64941)

<div class="topic-metadata">

**Author:** [@sumankar123](https://discuss.elastic.co/u/sumankar123)\
**Replies:** 2\
**Last updated:** [November 3, 2016, 8:18pm UTC](https://discuss.elastic.co/t/index-records-with-json-type-fields-from-postgres-to-elasticsearch-using-logstash/64941 "2016-11-03T20:18:37Z")

</div>

Hi, I have a SQL file, that generates records from a Postgres db. I would like to index these records in Elasticsearch using Logstash. Here is a sample record from the database. 1, 'Test Dataset 1', 'Insights', 'suma…

---

## [Logstash will not re-create the index with similar conf and log file after it was deleted](https://discuss.elastic.co/t/logstash-will-not-re-create-the-index-with-similar-conf-and-log-file-after-it-was-deleted/29669)

<div class="topic-metadata">

**Author:** [@lkekeng](https://discuss.elastic.co/u/lkekeng)\
**Replies:** 2\
**Last updated:** [September 22, 2015, 7:42am UTC](https://discuss.elastic.co/t/logstash-will-not-re-create-the-index-with-similar-conf-and-log-file-after-it-was-deleted/29669 "2015-09-22T07:42:34Z")

</div>

Hi, Has been struggling for many days and seem couldn't figure out what happen. I am running ElasticSearch 1.7.1 with Logstash 1.5.4. my logstash conf file named "logstash-apache" is stored in the path c:\\users\\studen…

---

## [Org.apache.lucene.queryParser.ParseException: Cannot parse 'title: AND BREAKFAST': Encountered " \<AND\> "AND ""](https://discuss.elastic.co/t/org-apache-lucene-queryparser-parseexception-cannot-parse-title-and-breakfast-encountered-and-and/13234)

<div class="topic-metadata">

**Author:** [@anurag\_naidu](https://discuss.elastic.co/u/anurag_naidu)\
**Replies:** 2\
**Last updated:** [August 16, 2013, 5:36pm UTC](https://discuss.elastic.co/t/org-apache-lucene-queryparser-parseexception-cannot-parse-title-and-breakfast-encountered-and-and/13234 "2013-08-16T17:36:15Z")

</div>

Hi, We have a ES setup that indexes on the table(Restaurant) on various fields like title, address, city, state, city etc. Also we define a restaurant title analyzer with a custom 'stop and 'synonym' filters that …

---

## [Invalid format: "2019-05-16" is too short](https://discuss.elastic.co/t/invalid-format-2019-05-16-is-too-short/191988)

<div class="topic-metadata">

**Author:** [@zxyyxzzxy001](https://discuss.elastic.co/u/zxyyxzzxy001)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:01pm UTC](https://discuss.elastic.co/t/invalid-format-2019-05-16-is-too-short/191988 "2019-08-01T12:01:59Z")

</div>

I use logstash transfer data from mysql to elasticsearch.When logstash output data to elasticsearch,it throw an exception : Invalid format: "2019-05-16" is too short. the column start\_date in mysql data type is date.…

---

## [6.6 upgrade to 6.7 on Elastic Cloud Uptime data not showing](https://discuss.elastic.co/t/6-6-upgrade-to-6-7-on-elastic-cloud-uptime-data-not-showing/175004)

<div class="topic-metadata">

**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\
**Replies:** 6\
**Last updated:** [April 4, 2019, 11:24am UTC](https://discuss.elastic.co/t/6-6-upgrade-to-6-7-on-elastic-cloud-uptime-data-not-showing/175004 "2019-04-04T11:24:54Z")

</div>

We upgraded from 6.6 to 6.7 on Elastic Cloud Elasticsearch and Kibana. Then upgraded heartbeat on our internal vm's shipping to logstash. We also re-created the heartbeat template from the heartbeat 6.7 home. The Upt…

---

## [Authentication issue with S3 Repository in EKS](https://discuss.elastic.co/t/authentication-issue-with-s3-repository-in-eks/225412)

<div class="topic-metadata">

**Author:** [@asipe](https://discuss.elastic.co/u/asipe)\
**Replies:** 3\
**Last updated:** [March 31, 2020, 4:52pm UTC](https://discuss.elastic.co/t/authentication-issue-with-s3-repository-in-eks/225412 "2020-03-31T16:52:31Z")

</div>

I am having an issue attempting to setup a S3 snapshot repository for a cluster running in EKS. The serviceaccount is setup to use a role as detailed in https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-ser…

---

## [Can not remove hits.hits.sort field from response of /\_search request with sort](https://discuss.elastic.co/t/can-not-remove-hits-hits-sort-field-from-response-of-search-request-with-sort/204992)

<div class="topic-metadata">

**Author:** [@muziyoshiz](https://discuss.elastic.co/u/muziyoshiz)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 2:34pm UTC](https://discuss.elastic.co/t/can-not-remove-hits-hits-sort-field-from-response-of-search-request-with-sort/204992 "2019-10-24T14:34:27Z")

</div>

Hello Elasticsearch Team, In our use case, we want to get only document IDs of the matched documents as a result of search API /\_search. But when I call search API with a query including "sort" field, the response cont…

---

## [Deprecated Warning in Elastic 7.3.1](https://discuss.elastic.co/t/deprecated-warning-in-elastic-7-3-1/202134)

<div class="topic-metadata">

**Author:** [@as50790](https://discuss.elastic.co/u/as50790)\
**Replies:** 3\
**Last updated:** [October 3, 2019, 11:33am UTC](https://discuss.elastic.co/t/deprecated-warning-in-elastic-7-3-1/202134 "2019-10-03T11:33:50Z")

</div>

Hi Could you please help me regarding Deprecated logs in Elasticsearch Kibana version: 7.3.1 Elasticsearch version: 7.3.1 Logstash Version: 7.3.1 Describe Warning: Deprecation Logs not constantly raised, its rais…

---

## [SAP - Logstash connection](https://discuss.elastic.co/t/sap-logstash-connection/171526)

<div class="topic-metadata">

**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\
**Replies:** 3\
**Last updated:** [March 26, 2019, 4:17pm UTC](https://discuss.elastic.co/t/sap-logstash-connection/171526 "2019-03-26T16:17:08Z")

</div>

Hello, I want to ingest my SAP data to Logstash. How can I do it? Thank you, Francisca

---

## [Multiple pattern matching](https://discuss.elastic.co/t/multiple-pattern-matching/96221)

<div class="topic-metadata">

**Author:** [@DFrant](https://discuss.elastic.co/u/DFrant)\
**Replies:** 3\
**Last updated:** [August 9, 2017, 8:04am UTC](https://discuss.elastic.co/t/multiple-pattern-matching/96221 "2017-08-09T08:04:43Z")

</div>

Hello, I have a filter defined as follow: grok { patterns\_dir =\> \["/etc/logstash/conf.d/patterns/"\] match =\> \[ "message", "^%{TIMESTAMP…

---

## [0.90.0 RC2 Java API Compilation Error: "org.apache.lucene.util.ByteRef cannot be resolved"](https://discuss.elastic.co/t/0-90-0-rc2-java-api-compilation-error-org-apache-lucene-util-byteref-cannot-be-resolved/11663)

<div class="topic-metadata">

**Author:** [@Harkirat\_Singh](https://discuss.elastic.co/u/Harkirat_Singh)\
**Replies:** 3\
**Last updated:** [April 30, 2013, 8:43am UTC](https://discuss.elastic.co/t/0-90-0-rc2-java-api-compilation-error-org-apache-lucene-util-byteref-cannot-be-resolved/11663 "2013-04-30T08:43:49Z")

</div>

ES 0.90.0.RC2 I recently upgraded to ES 0.90.0.RC2 from 0.20.6, and I noticed that my JAVA client doesn't compile anymore. I used to only have elasticsearch-0.20.6.jar in my project classpath, and I replaced it wi…

---

## [Use alluxio as shared file system](https://discuss.elastic.co/t/use-alluxio-as-shared-file-system/178850)

<div class="topic-metadata">

**Author:** [@yiguolei](https://discuss.elastic.co/u/yiguolei)\
**Replies:** 5\
**Last updated:** [April 29, 2019, 9:12am UTC](https://discuss.elastic.co/t/use-alluxio-as-shared-file-system/178850 "2019-04-29T09:12:47Z")

</div>

Does elasticsearch will support alluxio as the underly shared filesystem. I think it has following advantages: It will reduce cpu usage since data will be send only to primary replica and build index and the replicas …

---

## [Found Same Error](https://discuss.elastic.co/t/found-same-error/161452)

<div class="topic-metadata">

**Author:** [@Maulish\_Shah](https://discuss.elastic.co/u/Maulish_Shah)\
**Replies:** 5\
**Last updated:** [December 19, 2018, 9:11am UTC](https://discuss.elastic.co/t/found-same-error/161452 "2018-12-19T09:11:37Z")

</div>

Continuing the discussion from "not\_x\_content\_exception" while trying to PUT simple file with column mappings into ES via cURL: with cURL - curl -X PUT "localhost:9200/test?pretty" -H "Content-Type: application/json" -d…

---

## [RESTORE failing from S3](https://discuss.elastic.co/t/restore-failing-from-s3/25506)

<div class="topic-metadata">

**Author:** [@tanveer3](https://discuss.elastic.co/u/tanveer3)\
**Replies:** 5\
**Last updated:** [March 21, 2017, 10:33pm UTC](https://discuss.elastic.co/t/restore-failing-from-s3/25506 "2017-03-21T22:33:56Z")

</div>

Hi All I have taken a snapshot and loaded succesfully into S3, while trying to Restore i am getting error as File not found. Step -1 curl -XPUT 'localhost:9200/\_snapshot/backup/s3bkup\_14052015?wait\_for\_completion=t…

---

## [Kibana crashes server due to very high disk reads](https://discuss.elastic.co/t/kibana-crashes-server-due-to-very-high-disk-reads/72984)

<div class="topic-metadata">

**Author:** [@Lex](https://discuss.elastic.co/u/Lex)\
**Replies:** 5\
**Last updated:** [January 31, 2017, 2:11pm UTC](https://discuss.elastic.co/t/kibana-crashes-server-due-to-very-high-disk-reads/72984 "2017-01-31T14:11:45Z")

</div>

Short description: I have a problem with Kibana. After a while the server experiences very high disk reads ( \> 100GB). This causes the server to crash or get unresponsive. Question: Are you familiar with this issue…

---

## [ES 5.0 wildcard query, problem with CJK characters](https://discuss.elastic.co/t/es-5-0-wildcard-query-problem-with-cjk-characters/68815)

<div class="topic-metadata">

**Author:** [@Hacksign](https://discuss.elastic.co/u/Hacksign)\
**Replies:** 5\
**Last updated:** [December 17, 2016, 8:21am UTC](https://discuss.elastic.co/t/es-5-0-wildcard-query-problem-with-cjk-characters/68815 "2016-12-17T08:21:23Z")

</div>

If there is a data in ES like this : {'realname':'XZY'} note : X/Z/Y are CJK charcters, NOT English letters. If I want pick above item out , I wrote dsl below : { "size" : 10, "query" : { …

---

## [Analyzer not found when it is custom](https://discuss.elastic.co/t/analyzer-not-found-when-it-is-custom/38091)

<div class="topic-metadata">

**Author:** [@siddharth\_gupta](https://discuss.elastic.co/u/siddharth_gupta)\
**Replies:** 5\
**Last updated:** [December 29, 2015, 3:49pm UTC](https://discuss.elastic.co/t/analyzer-not-found-when-it-is-custom/38091 "2015-12-29T15:49:05Z")

</div>

When I use the following command: curl -XGET 'x.x.x.x:9200/\_analyze?analyzer=standardAnalyzer\_Name&pretty' -d 'justice this is a test http' It says : '{ "error" : "ElasticsearchIllegalArgumentException\[failed to…

---

## [Getting started with ElasticSearch with JAVA API](https://discuss.elastic.co/t/getting-started-with-elasticsearch-with-java-api/9054)

<div class="topic-metadata">

**Author:** [@ali\_ilyas](https://discuss.elastic.co/u/ali_ilyas)\
**Replies:** 5\
**Last updated:** [December 28, 2012, 4:42pm UTC](https://discuss.elastic.co/t/getting-started-with-elasticsearch-with-java-api/9054 "2012-12-28T16:42:43Z")

</div>

Hi, I am new to elastic search and having problem in connecting the node with Java API. Settings settings = ImmutableSettings.settingsBuilder() .put("cluster.name", "elasticsearch").build(); …

---

## [Systemctl logstash.service pipeline problem](https://discuss.elastic.co/t/systemctl-logstash-service-pipeline-problem/206892)

<div class="topic-metadata">

**Author:** [@basavyr](https://discuss.elastic.co/u/basavyr)\
**Replies:** 7\
**Last updated:** [November 11, 2019, 7:29am UTC](https://discuss.elastic.co/t/systemctl-logstash-service-pipeline-problem/206892 "2019-11-11T07:29:54Z")

</div>

Ok, so I've been dealing with this issue for a couple of days and it's becoming really frustrating. I want to start logstash with systemctl start logstash.service to have it in the background sending some metric logs to…

[Previous page](https://discuss.elastic.co/top.md?page=1086&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1088&per_page=50&period=all)
