# Top

**URL:** https://discuss.elastic.co/top.md?page=1096&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1097

---

## [Elasticsearch service times out, although cluster appears to be working properly](https://discuss.elastic.co/t/elasticsearch-service-times-out-although-cluster-appears-to-be-working-properly/256391)

<div class="topic-metadata">

**Author:** [@jtbis](https://discuss.elastic.co/u/jtbis)\
**Replies:** 6\
**Last updated:** [November 24, 2020, 12:28pm UTC](https://discuss.elastic.co/t/elasticsearch-service-times-out-although-cluster-appears-to-be-working-properly/256391 "2020-11-24T12:28:04Z")

</div>

I am facing an issue where systemd doesn't appear to realize that Elasticsearch has started successfully after updating to 6.8.0. The cluster shows green, the application can write to it and there are no errors in the l…

---

## [Dynamic modification of \[beats\].yml file for providing list of hosts/urls dynamically](https://discuss.elastic.co/t/dynamic-modification-of-beats-yml-file-for-providing-list-of-hosts-urls-dynamically/78646)

<div class="topic-metadata">

**Author:** [@shweta\_chugh](https://discuss.elastic.co/u/shweta_chugh)\
**Replies:** 6\
**Last updated:** [March 20, 2017, 12:46pm UTC](https://discuss.elastic.co/t/dynamic-modification-of-beats-yml-file-for-providing-list-of-hosts-urls-dynamically/78646 "2017-03-20T12:46:27Z")

</div>

Hi, My application code is written in Java. I am running heartbeat and metricbeat on one application module and some devices are getting connected to this module randomly thus I get an IP address of the connected devi…

---

## [Using elasticsearch to index couchdb tags](https://discuss.elastic.co/t/using-elasticsearch-to-index-couchdb-tags/12652)

<div class="topic-metadata">

**Author:** [@bryan\_rasmussen](https://discuss.elastic.co/u/bryan_rasmussen)\
**Replies:** 6\
**Last updated:** [July 7, 2013, 11:46pm UTC](https://discuss.elastic.co/t/using-elasticsearch-to-index-couchdb-tags/12652 "2013-07-07T23:46:42Z")

</div>

As per the subject, my documents in couchdb have a tags field which is an array. Now I could of course do a view that output every single with the relevant data, and I would have to do some map reduce I guess to be a…

---

## [Slower query\_string query in elasticsearch 7.5 as compared to elasticsearch 2.4](https://discuss.elastic.co/t/slower-query-string-query-in-elasticsearch-7-5-as-compared-to-elasticsearch-2-4/282222)

<div class="topic-metadata">

**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\
**Replies:** 8\
**Last updated:** [September 13, 2021, 5:12pm UTC](https://discuss.elastic.co/t/slower-query-string-query-in-elasticsearch-7-5-as-compared-to-elasticsearch-2-4/282222 "2021-09-13T17:12:29Z")

</div>

We have recently started migrating from elasticsearch 2.4.1 to elasticsearch 7.5.2 but have faced a major roadblock because of query performance. A query string query that used to respond in around 800ms when queried in …

---

## [\[rally\] Could not connect to your Elasticsearch metrics store](https://discuss.elastic.co/t/rally-could-not-connect-to-your-elasticsearch-metrics-store/283762)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 8\
**Last updated:** [September 10, 2021, 12:43pm UTC](https://discuss.elastic.co/t/rally-could-not-connect-to-your-elasticsearch-metrics-store/283762 "2021-09-10T12:43:39Z")

</div>

In long: Hey, I am trying to do a benchmark test against a cluster. The cluster in question contains 3 nodes in virtualbox, with no ssl restriction or authentication (fully for test). Then I have another cluster hosted …

---

## [Errors in Kibana with Metricbeat 6.7.1+](https://discuss.elastic.co/t/errors-in-kibana-with-metricbeat-6-7-1/186301)

<div class="topic-metadata">

**Author:** [@alexz00](https://discuss.elastic.co/u/alexz00)\
**Replies:** 8\
**Last updated:** [July 16, 2019, 9:06pm UTC](https://discuss.elastic.co/t/errors-in-kibana-with-metricbeat-6-7-1/186301 "2019-07-16T21:06:40Z")

</div>

Running Kibana (I tried different versions, from 6.5.x to 7.1.1) with Metricbeat 6.7.1 and 7.1.1 I see several errors in Kibana: Unable to see metricbeat-\* index pattern in Kibana: Request Timeout error Unable to open …

---

## [Elasticsearch\[43061\]: which: no java in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin)](https://discuss.elastic.co/t/elasticsearch-43061-which-no-java-in-usr-local-sbin-usr-local-bin-usr-sbin-usr-bin/135820)

<div class="topic-metadata">

**Author:** [@damvinod](https://discuss.elastic.co/u/damvinod)\
**Replies:** 0\
**Last updated:** [June 14, 2018, 2:37am UTC](https://discuss.elastic.co/t/elasticsearch-43061-which-no-java-in-usr-local-sbin-usr-local-bin-usr-sbin-usr-bin/135820 "2018-06-14T02:37:04Z")

</div>

Not able to start Elasticsearch in RHEL 7.5 with rpm package getting below error elasticsearch\[43061\]: which: no java in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin) Configurations with Root user: \[root@xxxx ~\]…

---

## [How to query a field type of string exactly in URI search?](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407)

<div class="topic-metadata">

**Author:** [@WuChuan](https://discuss.elastic.co/u/WuChuan)\
**Replies:** 8\
**Last updated:** [November 7, 2017, 1:33pm UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407 "2017-11-07T13:33:34Z")

</div>

Hi, Here I need to query logs from an external ELK system which only supports HTTP GET request for security. So I guess I can only use the URI-api to do that. There are many logs but I need only two types in "/var/ftds…

---

## [Notify without alerts x-pack?](https://discuss.elastic.co/t/notify-without-alerts-x-pack/138516)

<div class="topic-metadata">

**Author:** [@remco\_zwaan](https://discuss.elastic.co/u/remco_zwaan)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 8:48am UTC](https://discuss.elastic.co/t/notify-without-alerts-x-pack/138516 "2018-07-04T08:48:07Z")

</div>

Hi, We have a availability index. We have 1400 accommodations in the the index. Each accommodation has by default 365 days availability. When a lodge is booked we remove the selected dates from the availability index…

---

## [How to Disable edit button when you share the dashboard URL](https://discuss.elastic.co/t/how-to-disable-edit-button-when-you-share-the-dashboard-url/157508)

<div class="topic-metadata">

**Author:** [@emma1](https://discuss.elastic.co/u/emma1)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 6:33pm UTC](https://discuss.elastic.co/t/how-to-disable-edit-button-when-you-share-the-dashboard-url/157508 "2018-11-20T18:33:21Z")

</div>

I tried sharing URL of kibana dashboard with other people they are able to access the dashboard,but i want to disable edit button

---

## [Elasticsearch bulk insert in pentaho data integration](https://discuss.elastic.co/t/elasticsearch-bulk-insert-in-pentaho-data-integration/13104)

<div class="topic-metadata">

**Author:** [@ES1](https://discuss.elastic.co/u/ES1)\
**Replies:** 1\
**Last updated:** [August 12, 2013, 11:52am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-insert-in-pentaho-data-integration/13104 "2013-08-12T11:52:48Z")

</div>

Hi, Can any one please guide me on how to use elasticsearch bulk insert in pentaho data integration. i have installed elasticsearch and tried connecting to the server with following details address: and port:9200 …

---

## [How do I protect indexes](https://discuss.elastic.co/t/how-do-i-protect-indexes/294585)

<div class="topic-metadata">

**Author:** [@kzltp](https://discuss.elastic.co/u/kzltp)\
**Replies:** 3\
**Last updated:** [January 17, 2022, 2:09pm UTC](https://discuss.elastic.co/t/how-do-i-protect-indexes/294585 "2022-01-17T14:09:41Z")

</div>

I use elasticsarch 7.16. I wanna any indexes not delete. Any user(included in superuser) can't delete any indexes. How do i do that.

---

## [Json object field with name "tags" get converted to array after logstash mutate](https://discuss.elastic.co/t/json-object-field-with-name-tags-get-converted-to-array-after-logstash-mutate/185888)

<div class="topic-metadata">

**Author:** [@Shabin\_Shajahan](https://discuss.elastic.co/u/Shabin_Shajahan)\
**Replies:** 3\
**Last updated:** [June 17, 2019, 8:44am UTC](https://discuss.elastic.co/t/json-object-field-with-name-tags-get-converted-to-array-after-logstash-mutate/185888 "2019-06-17T08:44:21Z")

</div>

I have a json in the following format. I am reading this from kafka in logstash. {"id":"8eba168be707e85d","kind":"PRODUCER","name":"scheduler","timestamp":1560526848185066,"duration":23645,"tags":{"class":"TestJob","met…

---

## [Metricbeat - system.process.cpu.total.ticks Help](https://discuss.elastic.co/t/metricbeat-system-process-cpu-total-ticks-help/132389)

<div class="topic-metadata">

**Author:** [@suman\_tripuraneni](https://discuss.elastic.co/u/suman_tripuraneni)\
**Replies:** 3\
**Last updated:** [May 22, 2018, 4:25pm UTC](https://discuss.elastic.co/t/metricbeat-system-process-cpu-total-ticks-help/132389 "2018-05-22T16:25:20Z")

</div>

Hi, I am working on the metricbeat to gather the sys & process info. The particular field -"system.process.cpu.total.ticks" , I am interested in this as, I need to create report by CPU time spent by the process. I trie…

---

## [Using environment variables in pipelines.yml (LS 6.0.0.)](https://discuss.elastic.co/t/using-environment-variables-in-pipelines-yml-ls-6-0-0/109674)

<div class="topic-metadata">

**Author:** [@zpraxis](https://discuss.elastic.co/u/zpraxis)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 4:02am UTC](https://discuss.elastic.co/t/using-environment-variables-in-pipelines-yml-ls-6-0-0/109674 "2017-12-01T04:02:23Z")

</div>

I am trying to use an environment variable in my pipelines.yml file. It looks something like this: - pipeline.id: test path.config: '${LS\_SETTINGS\_DIR}/test.conf' I am using Linux RedHat distribution, Logstash was in…

---

## [Logstash output to CloudWatch Logs](https://discuss.elastic.co/t/logstash-output-to-cloudwatch-logs/98299)

<div class="topic-metadata">

**Author:** [@rherr63](https://discuss.elastic.co/u/rherr63)\
**Replies:** 0\
**Last updated:** [August 24, 2017, 10:52pm UTC](https://discuss.elastic.co/t/logstash-output-to-cloudwatch-logs/98299 "2017-08-24T22:52:05Z")

</div>

I am aware of the ‘Cloudwatch output plugin’ for Logstash, https://www.elastic.co/guide/en/logstash/5.5/plugins-outputs-cloudwatch.html However, there is a need to send log data from Logstash to Cloudwatch Logs. I ran a…

---

## [Best way to change a list of not wanted values](https://discuss.elastic.co/t/best-way-to-change-a-list-of-not-wanted-values/27329)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 3\
**Last updated:** [August 13, 2015, 5:57pm UTC](https://discuss.elastic.co/t/best-way-to-change-a-list-of-not-wanted-values/27329 "2015-08-13T17:57:21Z")

</div>

So I have some values being fed from logstash, and they are failing input into Elastic because I have a template being used, and the values sometimes don't adhere to the tablet. Notably, I get the values "-" and "(empt…

---

## [How many nodes/shards do I need for a cluster Elasticsearch?](https://discuss.elastic.co/t/how-many-nodes-shards-do-i-need-for-a-cluster-elasticsearch/26623)

<div class="topic-metadata">

**Author:** [@Juan\_Diaz\_Gonzalez](https://discuss.elastic.co/u/Juan_Diaz_Gonzalez)\
**Replies:** 3\
**Last updated:** [July 31, 2015, 9:02am UTC](https://discuss.elastic.co/t/how-many-nodes-shards-do-i-need-for-a-cluster-elasticsearch/26623 "2015-07-31T09:02:06Z")

</div>

I was reading about the number of nodes necesaries in Elasticsearch cluster do yo need and the recomendation is that to have one node per shard. For in this way the queries could be executed in parallel over all the node…

---

## [A web UI for es](https://discuss.elastic.co/t/a-web-ui-for-es/7598)

<div class="topic-metadata">

**Author:** [@Goog\_Jobs](https://discuss.elastic.co/u/Goog_Jobs)\
**Replies:** 3\
**Last updated:** [August 4, 2014, 2:02am UTC](https://discuss.elastic.co/t/a-web-ui-for-es/7598 "2014-08-04T02:02:30Z")

</div>

Hi, all! i wanna know that is a existed framework web UI to display the json returned by es ? a little like the google's frontpage THX!

---

## [Help with setting up mappings (Perl)](https://discuss.elastic.co/t/help-with-setting-up-mappings-perl/16267)

<div class="topic-metadata">

**Author:** [@Dominic\_Nicholas](https://discuss.elastic.co/u/Dominic_Nicholas)\
**Replies:** 3\
**Last updated:** [March 10, 2014, 7:22pm UTC](https://discuss.elastic.co/t/help-with-setting-up-mappings-perl/16267 "2014-03-10T19:22:39Z")

</div>

Hi, I'm using the Elasticsearch Perl module and need guidance on setting up mappings. I'm using the bulk() method to index data. Here is an example of the structure of the data : $response = $e-\>bulk( …

---

## [Unable to find source.geo.location in index pattern logstash-\*](https://discuss.elastic.co/t/unable-to-find-source-geo-location-in-index-pattern-logstash/264496)

<div class="topic-metadata">

**Author:** [@Ronnie\_Raraihuru](https://discuss.elastic.co/u/Ronnie_Raraihuru)\
**Replies:** 4\
**Last updated:** [February 17, 2021, 1:53am UTC](https://discuss.elastic.co/t/unable-to-find-source-geo-location-in-index-pattern-logstash/264496 "2021-02-17T01:53:42Z")

</div>

Got the above error when trying to view map under Security\>Network in Elastic. Index mapping "mappings" : { "geoip" : { "dynamic" : "true", "properties" : { "city\_name" : { …

---

## [How to optimize disk usage?](https://discuss.elastic.co/t/how-to-optimize-disk-usage/7767)

<div class="topic-metadata">

**Author:** [@llowder](https://discuss.elastic.co/u/llowder)\
**Replies:** 4\
**Last updated:** [May 21, 2012, 4:51pm UTC](https://discuss.elastic.co/t/how-to-optimize-disk-usage/7767 "2012-05-21T16:51:44Z")

</div>

Currently testing out a program that uses ElasticSearch to store large amounts of data (from log files). My initial test showed a 250% increase in disk usage from the raw data to what was stored in ES. I have l…

---

## [Error fetching fields for index pattern](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern/235537)

<div class="topic-metadata">

**Author:** [@dzoni](https://discuss.elastic.co/u/dzoni)\
**Replies:** 5\
**Last updated:** [June 5, 2020, 6:22am UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern/235537 "2020-06-05T06:22:21Z")

</div>

Hello there, i was working with Kibana and suddenly i'm getting in my Kibana Management element always an error. This happens when i press the Button to refresh the field of an existing index pattern. Or when i want t…

---

## [Reindex, creating multiple destination documents from each source document](https://discuss.elastic.co/t/reindex-creating-multiple-destination-documents-from-each-source-document/184633)

<div class="topic-metadata">

**Author:** [@mconner](https://discuss.elastic.co/u/mconner)\
**Replies:** 5\
**Last updated:** [June 10, 2019, 1:12pm UTC](https://discuss.elastic.co/t/reindex-creating-multiple-destination-documents-from-each-source-document/184633 "2019-06-10T13:12:07Z")

</div>

I want to build a new index from an existing, but split each source document into a set of destination documents. Is it possible to do this with reindex, or is there some other means which it can be done server-side? O…

---

## [Elasticsearch Cluster formation on AWS - Elasticsearch 5.2](https://discuss.elastic.co/t/elasticsearch-cluster-formation-on-aws-elasticsearch-5-2/76560)

<div class="topic-metadata">

**Author:** [@Leo\_Li](https://discuss.elastic.co/u/Leo_Li)\
**Replies:** 5\
**Last updated:** [March 2, 2017, 12:01am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-formation-on-aws-elasticsearch-5-2/76560 "2017-03-02T00:01:21Z")

</div>

Hi, I recently upgraded Elasticsearch from 1.6 to 5.2, and my ES instances stopped forming a cluster on aws environment. I had set below parameters in configuration file: cluster.name: elasticsearch\_ids discovery.z…

---

## [Task Management API](https://discuss.elastic.co/t/task-management-api/45910)

<div class="topic-metadata">

**Author:** [@ceilingfish](https://discuss.elastic.co/u/ceilingfish)\
**Replies:** 5\
**Last updated:** [April 3, 2016, 8:33am UTC](https://discuss.elastic.co/t/task-management-api/45910 "2016-04-03T08:33:59Z")

</div>

Hi Really looking forward to using the task management API in elastic 2.3, just wondering what jobs are shown in there? The documentation implies that reindex jobs will show up, but I was wondering about other jobs such …

---

## [Filebeat ignores stdout logs with autodiscover of docker containers](https://discuss.elastic.co/t/filebeat-ignores-stdout-logs-with-autodiscover-of-docker-containers/155544)

<div class="topic-metadata">

**Author:** [@givorenon](https://discuss.elastic.co/u/givorenon)\
**Replies:** 1\
**Last updated:** [November 9, 2018, 7:13am UTC](https://discuss.elastic.co/t/filebeat-ignores-stdout-logs-with-autodiscover-of-docker-containers/155544 "2018-11-09T07:13:30Z")

</div>

Here is my filebeat.yml filebeat.autodiscover: providers: - type: docker #hints.enabled: true templates: - condition: contains: docker.container.name: agent …

---

## [Remote cluster monitoring elastic cloud](https://discuss.elastic.co/t/remote-cluster-monitoring-elastic-cloud/266605)

<div class="topic-metadata">

**Author:** [@jugonzalezv](https://discuss.elastic.co/u/jugonzalezv)\
**Replies:** 3\
**Last updated:** [March 22, 2021, 6:18pm UTC](https://discuss.elastic.co/t/remote-cluster-monitoring-elastic-cloud/266605 "2021-03-22T18:18:38Z")

</div>

Good evening, I'm trying to create a metric visualization from another cluster and a different user, I have already tried Using one of the clusters as a remote cluster to no avail , my question is: is there anyway to dir…

---

## [APM Consuming lot of reatined Heap and Blocked APM Threads in Thread Dump](https://discuss.elastic.co/t/apm-consuming-lot-of-reatined-heap-and-blocked-apm-threads-in-thread-dump/273778)

<div class="topic-metadata">

**Author:** [@Ayush\_Agrahari](https://discuss.elastic.co/u/Ayush_Agrahari)\
**Replies:** 6\
**Last updated:** [June 6, 2021, 12:42pm UTC](https://discuss.elastic.co/t/apm-consuming-lot-of-reatined-heap-and-blocked-apm-threads-in-thread-dump/273778 "2021-06-06T12:42:14Z")

</div>

Hello, We have deployed one java service into Kubernetes with a Heap Size of around 8GB. We also run APM along with it using the below command. java -javaagent:/home/user/elastic-apm-agent-1.23.0.jar -jar -Delastic.apm…

---

## [Anomaly Explorer uses different timezone for Anomaly timeline and Anomalies](https://discuss.elastic.co/t/anomaly-explorer-uses-different-timezone-for-anomaly-timeline-and-anomalies/99577)

<div class="topic-metadata">

**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\
**Replies:** 6\
**Last updated:** [September 8, 2017, 1:24pm UTC](https://discuss.elastic.co/t/anomaly-explorer-uses-different-timezone-for-anomaly-timeline-and-anomalies/99577 "2017-09-08T13:24:09Z")

</div>

ML "Anomaly Explorer" screen presents two visualizations: " Anomaly timeline" map and "Anomalies" graph. They use different timezones - " Anomaly timeline" uses UTC, while "Anomalies" - my local timezone. IMHO, suc…

---

## [Kibana imported filebeat script complains in elasticsearch:](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065)

<div class="topic-metadata">

**Author:** [@hsafe](https://discuss.elastic.co/u/hsafe)\
**Replies:** 6\
**Last updated:** [August 1, 2017, 12:52pm UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065 "2017-08-01T12:52:22Z")

</div>

Hi all, Let me first mention the error I receive: Error: No matching indices found: \[index\_not\_found\_exception\] no such index, with { resource.type=“index\_or\_alias” & resource.id=“filebeat-" & index\_uuid=“na” & index="…

---

## [How can I make a join between two file?](https://discuss.elastic.co/t/how-can-i-make-a-join-between-two-file/34923)

<div class="topic-metadata">

**Author:** [@adellarocca](https://discuss.elastic.co/u/adellarocca)\
**Replies:** 6\
**Last updated:** [November 20, 2015, 10:14am UTC](https://discuss.elastic.co/t/how-can-i-make-a-join-between-two-file/34923 "2015-11-20T10:14:16Z")

</div>

Hi! I have two files: us\_data\_flights and us\_states\_geo\_coordinates. a) In the file us\_data\_flights there are data about flights in 2015 with information about departure/arrival state, air\_time, delay etc... b) In the…

---

## [Visualisation: trying to unique count a field with a "-" in it, not working](https://discuss.elastic.co/t/visualisation-trying-to-unique-count-a-field-with-a-in-it-not-working/33072)

<div class="topic-metadata">

**Author:** [@Mark\_Watkins](https://discuss.elastic.co/u/Mark_Watkins)\
**Replies:** 6\
**Last updated:** [October 27, 2015, 2:52pm UTC](https://discuss.elastic.co/t/visualisation-trying-to-unique-count-a-field-with-a-in-it-not-working/33072 "2015-10-27T14:52:56Z")

</div>

Hi, I am trying to count unique log streams, and the format of the value is "i-123abc456". When I do the unique count, it counts the "i" as one value, so it is adding 1 to my unique count. i.e. if I had a legend, …

---

## [Force new field to type "keyword" or "text"](https://discuss.elastic.co/t/force-new-field-to-type-keyword-or-text/349665)

<div class="topic-metadata">

**Author:** [@yquirion](https://discuss.elastic.co/u/yquirion)\
**Replies:** 3\
**Last updated:** [January 12, 2024, 8:49pm UTC](https://discuss.elastic.co/t/force-new-field-to-type-keyword-or-text/349665 "2024-01-12T20:49:30Z")

</div>

Hello, I'm currently struggling with an annoying problem who lead to many lost logs into my Elastic cluster. The problem happen when a field that hasn't been defined into the default filebeat template is created. When …

---

## [Different fonts for inline words in markdown](https://discuss.elastic.co/t/different-fonts-for-inline-words-in-markdown/189042)

<div class="topic-metadata">

**Author:** [@Vartika\_Srivastava](https://discuss.elastic.co/u/Vartika_Srivastava)\
**Replies:** 3\
**Last updated:** [July 9, 2019, 10:11pm UTC](https://discuss.elastic.co/t/different-fonts-for-inline-words-in-markdown/189042 "2019-07-09T22:11:11Z")

</div>

Hi,how can we give different font to inline words in markdown? eg.

---

## [Custom template for logstash](https://discuss.elastic.co/t/custom-template-for-logstash/176225)

<div class="topic-metadata">

**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\
**Replies:** 3\
**Last updated:** [April 11, 2019, 11:10am UTC](https://discuss.elastic.co/t/custom-template-for-logstash/176225 "2019-04-11T11:10:45Z")

</div>

My custom logs are sent from filebeat (ingest pipeline) -\> logstash -\> elasticsearch . Now i need to make custom index for retention period purpose. when i try the custom index my geo\_ip not mapping correct one. Logsta…

---

## [Logstash to read from multiple server filebeat](https://discuss.elastic.co/t/logstash-to-read-from-multiple-server-filebeat/119239)

<div class="topic-metadata">

**Author:** [@Sridhar](https://discuss.elastic.co/u/Sridhar)\
**Replies:** 3\
**Last updated:** [February 9, 2018, 2:24pm UTC](https://discuss.elastic.co/t/logstash-to-read-from-multiple-server-filebeat/119239 "2018-02-09T14:24:09Z")

</div>

Hi All, below is the file beat I'm configuring in one server with port 5044 filebeat: prospectors: - paths: - /path/to/logs/router-001-yyyymmdd.log include: "Read from QMANGER:INPUT\_IN" fields: {log\_type: input\_in…

---

## [Updating Elasticsearch Document Popularity by number of times it gets queried](https://discuss.elastic.co/t/updating-elasticsearch-document-popularity-by-number-of-times-it-gets-queried/99448)

<div class="topic-metadata">

**Author:** [@ankit2](https://discuss.elastic.co/u/ankit2)\
**Replies:** 3\
**Last updated:** [September 11, 2017, 9:44pm UTC](https://discuss.elastic.co/t/updating-elasticsearch-document-popularity-by-number-of-times-it-gets-queried/99448 "2017-09-11T21:44:51Z")

</div>

I was wondering if elasticsearch provides any kind of functionality that lets you keep track & update the documents in indices based on the number of times any document gets queried directly using document\_id. Would that…

---

## [Error installing X-Pack 5.1.1 for Kibana in windows](https://discuss.elastic.co/t/error-installing-x-pack-5-1-1-for-kibana-in-windows/70472)

<div class="topic-metadata">

**Author:** [@chetan\_vartak](https://discuss.elastic.co/u/chetan_vartak)\
**Replies:** 3\
**Last updated:** [January 11, 2017, 6:12pm UTC](https://discuss.elastic.co/t/error-installing-x-pack-5-1-1-for-kibana-in-windows/70472 "2017-01-11T18:12:29Z")

</div>

I'm looking for advice on how to overcome this error while installing X-Pack for Kibana - D:\\Elastic5.1\\kibana-5.1.1-windows-x86\>bin\\kibana-plugin.bat install file:///C:/Users/admcvartak/Downloads/x-pack-5.1.1.zip A…

---

## [Ping remote services for availability and log results to Elasticsearch or send to Logstash](https://discuss.elastic.co/t/ping-remote-services-for-availability-and-log-results-to-elasticsearch-or-send-to-logstash/249273)

<div class="topic-metadata">

**Author:** [@Armen\_Khachikyan](https://discuss.elastic.co/u/Armen_Khachikyan)\
**Replies:** 2\
**Last updated:** [September 21, 2020, 10:09am UTC](https://discuss.elastic.co/t/ping-remote-services-for-availability-and-log-results-to-elasticsearch-or-send-to-logstash/249273 "2020-09-21T10:09:44Z")

</div>

have ELK server, and sending Heartbeats to server. I added an monitor in monitors.d directory, added setup.dashboards.enabled: true line in heartbeat.yml file, but after restarting heartbeat service, service working 2-…

---

## [Why it is recommended to have more than one master nodes](https://discuss.elastic.co/t/why-it-is-recommended-to-have-more-than-one-master-nodes/229549)

<div class="topic-metadata">

**Author:** [@Daud\_Ahmed](https://discuss.elastic.co/u/Daud_Ahmed)\
**Replies:** 2\
**Last updated:** [April 24, 2020, 5:20am UTC](https://discuss.elastic.co/t/why-it-is-recommended-to-have-more-than-one-master-nodes/229549 "2020-04-24T05:20:54Z")

</div>

Is elasticsearch using more than one master nodes at a time or the other one is just a backup so that it can be use in case of if one of the master nodes is not working. Can any guide me this is a very simple question bu…

---

## [Indexing large text fields](https://discuss.elastic.co/t/indexing-large-text-fields/210694)

<div class="topic-metadata">

**Author:** [@Maxim\_Golman](https://discuss.elastic.co/u/Maxim_Golman)\
**Replies:** 2\
**Last updated:** [December 9, 2019, 10:22am UTC](https://discuss.elastic.co/t/indexing-large-text-fields/210694 "2019-12-09T10:22:56Z")

</div>

Hello, I'm trying to index news and other articles that my clients upload and allow free text search on them. Is elasticsearch the right choice since there's a limit to text field size which get indexed.

---

## [Kibana filter; trying to query a keyword field](https://discuss.elastic.co/t/kibana-filter-trying-to-query-a-keyword-field/140604)

<div class="topic-metadata">

**Author:** [@d\_s](https://discuss.elastic.co/u/d_s)\
**Replies:** 2\
**Last updated:** [July 19, 2018, 1:52pm UTC](https://discuss.elastic.co/t/kibana-filter-trying-to-query-a-keyword-field/140604 "2018-07-19T13:52:49Z")

</div>

Hello! I am a complete beginner to Elasticserach and Kibana and am having some trouble using the filter while searching in Kibana. I have a field called serial which is full of serial numbers that were strings because s…

---

## [Switching from index names to alias - performance impact?](https://discuss.elastic.co/t/switching-from-index-names-to-alias-performance-impact/294633)

<div class="topic-metadata">

**Author:** [@sale](https://discuss.elastic.co/u/sale)\
**Replies:** 4\
**Last updated:** [January 18, 2022, 8:50pm UTC](https://discuss.elastic.co/t/switching-from-index-names-to-alias-performance-impact/294633 "2022-01-18T20:50:53Z")

</div>

We use Elasticsearch for time series data with indices created every day. We perform all operations (ingest, search etc) using the REST APIs. We keep 60-days worth of data available to query. Currently, when we do searc…

---

## [How to Parse Json log format by ConfigMap in Logstash](https://discuss.elastic.co/t/how-to-parse-json-log-format-by-configmap-in-logstash/168438)

<div class="topic-metadata">

**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\
**Replies:** 4\
**Last updated:** [February 17, 2019, 2:15pm UTC](https://discuss.elastic.co/t/how-to-parse-json-log-format-by-configmap-in-logstash/168438 "2019-02-17T14:15:41Z")

</div>

Hi, The logs that I'm receiving for message, looking like that in Kibana - message {"time\_date": "2019-02-14T14:00:39+00:00","client": "10.xxx.xxx.xxx", "host": "xxx.com", "scheme": "https", "request\_method": "…

---

## [How to have a filebeat config send some prospectors to a pipeline and send some prospectors to no pipeline](https://discuss.elastic.co/t/how-to-have-a-filebeat-config-send-some-prospectors-to-a-pipeline-and-send-some-prospectors-to-no-pipeline/104492)

<div class="topic-metadata">

**Author:** [@frr255](https://discuss.elastic.co/u/frr255)\
**Replies:** 4\
**Last updated:** [October 24, 2017, 12:48pm UTC](https://discuss.elastic.co/t/how-to-have-a-filebeat-config-send-some-prospectors-to-a-pipeline-and-send-some-prospectors-to-no-pipeline/104492 "2017-10-24T12:48:26Z")

</div>

I have a Filebeat config containing multiple prospectors. I want some prospectors to be sent to a pipeline. This is easy. However, I also want some prospectors not to be sent to any pipeline i.e. skip or avoid any pipel…

---

## [Elastic java client search non case sensitive](https://discuss.elastic.co/t/elastic-java-client-search-non-case-sensitive/26568)

<div class="topic-metadata">

**Author:** [@fabioebner](https://discuss.elastic.co/u/fabioebner)\
**Replies:** 4\
**Last updated:** [August 6, 2015, 2:15pm UTC](https://discuss.elastic.co/t/elastic-java-client-search-non-case-sensitive/26568 "2015-08-06T14:15:52Z")

</div>

Can anyone help me?? i need to create one search with case NON sensitive. tks

---

## [Remote Access Fails to start instance](https://discuss.elastic.co/t/remote-access-fails-to-start-instance/51825)

<div class="topic-metadata">

**Author:** [@Youdong\_Zhang](https://discuss.elastic.co/u/Youdong_Zhang)\
**Replies:** 5\
**Last updated:** [June 6, 2016, 9:47pm UTC](https://discuss.elastic.co/t/remote-access-fails-to-start-instance/51825 "2016-06-06T21:47:08Z")

</div>

I tried to set network.host : 0.0.0.0 in elasticsearch.yml but now i can't start root:~# sudo service elasticsearch restart \* Stopping Elasticsearch Server \[ OK \] \* Starting Elasticsearch Serve…

---

## [Elasticsearch突然崩溃，日志相关报错如下。](https://discuss.elastic.co/t/elasticsearch/156335)

<div class="topic-metadata">

**Author:** [@kdu\_fdj](https://discuss.elastic.co/u/kdu_fdj)\
**Replies:** 1\
**Last updated:** [December 3, 2018, 7:23am UTC](https://discuss.elastic.co/t/elasticsearch/156335 "2018-12-03T07:23:44Z")

</div>

相关报错已经搜索结果如下。 不知道限制fielddata上限能否解决这个问题。

---

## [NeedQuickHelp: java.lang.NoSuchFieldError: LUCENE\_7\_3\_1](https://discuss.elastic.co/t/needquickhelp-java-lang-nosuchfielderror-lucene-7-3-1/138766)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 1\
**Last updated:** [July 5, 2018, 3:51pm UTC](https://discuss.elastic.co/t/needquickhelp-java-lang-nosuchfielderror-lucene-7-3-1/138766 "2018-07-05T15:51:31Z")

</div>

I am upgrading from 6.1.3 to 6.3.0 I am trying to initialize: SearchSourceBuilder ssb = new SearchSourceBuilder(); Getting this error on above line: java.lang.NoSuchFieldError: LUCENE\_7\_3\_1 at org.elasticsearch.Vers…

[Previous page](https://discuss.elastic.co/top.md?page=1095&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1097&per_page=50&period=all)
