# Top

**URL:** https://discuss.elastic.co/top.md?page=1109&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1110

---

## [Find and replace to a unicode string](https://discuss.elastic.co/t/find-and-replace-to-a-unicode-string/252226)

<div class="topic-metadata">

**Author:** [@Andrew\_Harris](https://discuss.elastic.co/u/Andrew_Harris)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 10:36am UTC](https://discuss.elastic.co/t/find-and-replace-to-a-unicode-string/252226 "2020-10-22T10:36:41Z")

</div>

Hi, I am trying to do a find and replace using mutate to replace | (vertical bar) with Unicode u0001 (start of header) anywhere in the source message before being further parsed. I have tried various combinations of fo…

---

## [Guidance With S3 Input Plugin](https://discuss.elastic.co/t/guidance-with-s3-input-plugin/175005)

<div class="topic-metadata">

**Author:** [@pcarcel](https://discuss.elastic.co/u/pcarcel)\
**Replies:** 2\
**Last updated:** [April 2, 2019, 3:55pm UTC](https://discuss.elastic.co/t/guidance-with-s3-input-plugin/175005 "2019-04-02T15:55:56Z")

</div>

I am using the S3 input plugin on a project I am working on. Each day a couple hundred thousand files are sent to different buckets, then processed by logstash. I am using the options to backup the data to the same buc…

---

## [Installation of elasticsearch kibana and logstash in windows 10](https://discuss.elastic.co/t/installation-of-elasticsearch-kibana-and-logstash-in-windows-10/124564)

<div class="topic-metadata">

**Author:** [@mayanksachan007](https://discuss.elastic.co/u/mayanksachan007)\
**Replies:** 2\
**Last updated:** [March 19, 2018, 1:45pm UTC](https://discuss.elastic.co/t/installation-of-elasticsearch-kibana-and-logstash-in-windows-10/124564 "2018-03-19T13:45:40Z")

</div>

Windows command for elasticsearch : C:\\Users\\ABC\\Desktop\\ELK\\elasticsearch-6.2.2\\bin\>elasticsearch-plugin.bat install file:///C:\\Users\\ABC\\Desktop\\ELK\\x-pack-6.2.2.zip Windows command for kibana: C:\\Users\\ABC\\Desktop\\…

---

## [Grok patterns - failed to match - java logs](https://discuss.elastic.co/t/grok-patterns-failed-to-match-java-logs/82521)

<div class="topic-metadata">

**Author:** [@ItsMeSurajR](https://discuss.elastic.co/u/ItsMeSurajR)\
**Replies:** 2\
**Last updated:** [April 18, 2017, 11:53pm UTC](https://discuss.elastic.co/t/grok-patterns-failed-to-match-java-logs/82521 "2017-04-18T23:53:33Z")

</div>

Hi all, I'm a newbie and I learnt by watching several tutorials. I'm enjoying and sweating too! I'm trying to match errors in my java output log. I wrote a grok pattern as below and it matches in grokdebug.herokuapp.co…

---

## [ES 5.3 : Java client hangs on new PreBuiltTransportClient](https://discuss.elastic.co/t/es-5-3-java-client-hangs-on-new-prebuilttransportclient/81892)

<div class="topic-metadata">

**Author:** [@Barrett\_Strausser](https://discuss.elastic.co/u/Barrett_Strausser)\
**Replies:** 2\
**Last updated:** [April 11, 2017, 12:10pm UTC](https://discuss.elastic.co/t/es-5-3-java-client-hangs-on-new-prebuilttransportclient/81892 "2017-04-11T12:10:07Z")

</div>

Client hangs on calling the constructor public static void main(String\[\] args) throws IOException,Exception { Settings setting = Settings.builder() .put("cluster.name", "elasticsearch") …

---

## [Converting string field to integer](https://discuss.elastic.co/t/converting-string-field-to-integer/53853)

<div class="topic-metadata">

**Author:** [@Gaurav\_SK](https://discuss.elastic.co/u/Gaurav_SK)\
**Replies:** 2\
**Last updated:** [June 27, 2016, 11:12am UTC](https://discuss.elastic.co/t/converting-string-field-to-integer/53853 "2016-06-27T11:12:11Z")

</div>

I am getting the value of a field name "fcs" through pattern but i want this to be in integer format, but when i open settings in kibana, it says this field has string type. Can anyone tell how to resolve this issue ? …

---

## [Slow indexing speed, possibly related to filebeat misconfiguration](https://discuss.elastic.co/t/slow-indexing-speed-possibly-related-to-filebeat-misconfiguration/327283)

<div class="topic-metadata">

**Author:** [@alexandrpaliy](https://discuss.elastic.co/u/alexandrpaliy)\
**Replies:** 4\
**Last updated:** [March 10, 2023, 9:05pm UTC](https://discuss.elastic.co/t/slow-indexing-speed-possibly-related-to-filebeat-misconfiguration/327283 "2023-03-10T21:05:38Z")

</div>

I have actually no idea which tag/subforum to use, because I have an issue with a general filebeat -\> logstash -\> elasticsearch pipelinem and I am not entirely sure, is this issue related to ES indexing performance, or i…

---

## [Creating a NOT EQUAL filter in Java Fluent API](https://discuss.elastic.co/t/creating-a-not-equal-filter-in-java-fluent-api/309859)

<div class="topic-metadata">

**Author:** [@bweston](https://discuss.elastic.co/u/bweston)\
**Replies:** 4\
**Last updated:** [July 19, 2022, 12:29pm UTC](https://discuss.elastic.co/t/creating-a-not-equal-filter-in-java-fluent-api/309859 "2022-07-19T12:29:37Z")

</div>

Hi, I'm trying to compose a NOT EQUAL filter with the new Java Fluent API, querying Elastic 8.2 and have drawn a blank. The query below returns all documents that have expired according to our company retention policy, …

---

## [Transfer csv to elasticsearch from Python](https://discuss.elastic.co/t/transfer-csv-to-elasticsearch-from-python/238044)

<div class="topic-metadata">

**Author:** [@namali](https://discuss.elastic.co/u/namali)\
**Replies:** 4\
**Last updated:** [June 26, 2020, 4:19pm UTC](https://discuss.elastic.co/t/transfer-csv-to-elasticsearch-from-python/238044 "2020-06-26T16:19:28Z")

</div>

wanted to transfer following csv to elsticsearch |hcode|hname| |1|aaaa| |2|bbbbb| |3|ccccc| |4|dddd| |5|eeee| |6|ffff| and need to insert hcode field as document\_id. getting below error elasticseach version is 7…

---

## [Addressing customer REST end-point using java API](https://discuss.elastic.co/t/addressing-customer-rest-end-point-using-java-api/839)

<div class="topic-metadata">

**Author:** [@aken](https://discuss.elastic.co/u/aken)\
**Replies:** 4\
**Last updated:** [May 20, 2015, 11:41am UTC](https://discuss.elastic.co/t/addressing-customer-rest-end-point-using-java-api/839 "2015-05-20T11:41:01Z")

</div>

Is there a simple way to address the custom end-point exposed by my plugin (e.g. /\_myplugin/ping) using the java API? The plugin installs correctly and I can test it using curl, but I would like to be able to do this in …

---

## [Nature of elastic search - CPU bound, IO bound or network bound](https://discuss.elastic.co/t/nature-of-elastic-search-cpu-bound-io-bound-or-network-bound/12031)

<div class="topic-metadata">

**Author:** [@aakashanuj](https://discuss.elastic.co/u/aakashanuj)\
**Replies:** 1\
**Last updated:** [May 20, 2013, 8:26pm UTC](https://discuss.elastic.co/t/nature-of-elastic-search-cpu-bound-io-bound-or-network-bound/12031 "2013-05-20T20:26:56Z")

</div>

I want to know the nature of elastic search database, in the case when I am shipping logs via an indexer from redis to the ES database. I have to figure out the types of each of these - Redis, Indexer(which I know…

---

## [Error uninstalling the elastic agent](https://discuss.elastic.co/t/error-uninstalling-the-elastic-agent/353142)

<div class="topic-metadata">

**Author:** [@Karan37](https://discuss.elastic.co/u/Karan37)\
**Replies:** 2\
**Last updated:** [February 14, 2024, 11:14am UTC](https://discuss.elastic.co/t/error-uninstalling-the-elastic-agent/353142 "2024-02-14T11:14:57Z")

</div>

i am running the uninstall command where the command have to be run but still showing error PS C:\\Program Files\\Elastic\\Agent\> .\\elastic-agent.exe uninstall Error: can only be uninstalled by executing the installed Elas…

---

## [Not able to telnet IP with port 5044](https://discuss.elastic.co/t/not-able-to-telnet-ip-with-port-5044/205790)

<div class="topic-metadata">

**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\
**Replies:** 2\
**Last updated:** [October 30, 2019, 6:15am UTC](https://discuss.elastic.co/t/not-able-to-telnet-ip-with-port-5044/205790 "2019-10-30T06:15:49Z")

</div>

Hi All, Good morning. I have installed logtash 7.4.1-1 , my service starts, no error messages in the logs, but I am not able to telnet to the IP with port 5044 when I did a "netstat -anp | grep 5044" it shows netsta…

---

## [How to set the where filter about sql\_last\_value?](https://discuss.elastic.co/t/how-to-set-the-where-filter-about-sql-last-value/53621)

<div class="topic-metadata">

**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\
**Replies:** 2\
**Last updated:** [June 24, 2016, 5:39am UTC](https://discuss.elastic.co/t/how-to-set-the-where-filter-about-sql-last-value/53621 "2016-06-24T05:39:17Z")

</div>

I have been already installed Logstash JDBC Input Plugin successfully. And I set sql as follows: select \* from cc where cc.last\_modify\_time \>= :smile: sql\_last\_value I already know the cc.last\_modify\_time setting i…

---

## [Private ip to gioip points](https://discuss.elastic.co/t/private-ip-to-gioip-points/52019)

<div class="topic-metadata">

**Author:** [@venkat-accel](https://discuss.elastic.co/u/venkat-accel)\
**Replies:** 2\
**Last updated:** [June 7, 2016, 8:48am UTC](https://discuss.elastic.co/t/private-ip-to-gioip-points/52019 "2016-06-07T08:48:36Z")

</div>

how to get geo-ip from private IP address in ElasticSearch.

---

## [Error during Re-Indexing, chunk size?](https://discuss.elastic.co/t/error-during-re-indexing-chunk-size/50559)

<div class="topic-metadata">

**Author:** [@zetian](https://discuss.elastic.co/u/zetian)\
**Replies:** 2\
**Last updated:** [May 20, 2016, 4:08pm UTC](https://discuss.elastic.co/t/error-during-re-indexing-chunk-size/50559 "2016-05-20T16:08:14Z")

</div>

I am using v2.1 and using the python re-indexing helper. The source index has 500491 documents and a size of 150.4gb average document about 300kb. So I chunked the bulk insert to 50 document, set 'refresh\_interval' to …

---

## [Upgrade java source code using elasticsearch 1.7 to elasticsearch 2.1](https://discuss.elastic.co/t/upgrade-java-source-code-using-elasticsearch-1-7-to-elasticsearch-2-1/39452)

<div class="topic-metadata">

**Author:** [@Karim\_KOLLI](https://discuss.elastic.co/u/Karim_KOLLI)\
**Replies:** 2\
**Last updated:** [January 19, 2016, 10:17am UTC](https://discuss.elastic.co/t/upgrade-java-source-code-using-elasticsearch-1-7-to-elasticsearch-2-1/39452 "2016-01-19T10:17:32Z")

</div>

Hello, I have a java class in order to connect to elasticsearch 1.7 and to make request, we have upgraded elasticsearch to version 2.1 and I have now many errors during runtime : private Client getESClientByTransport…

---

## [Getting data out of ELK and into Syslog](https://discuss.elastic.co/t/getting-data-out-of-elk-and-into-syslog/24547)

<div class="topic-metadata">

**Author:** [@srowles](https://discuss.elastic.co/u/srowles)\
**Replies:** 2\
**Last updated:** [June 29, 2015, 12:50pm UTC](https://discuss.elastic.co/t/getting-data-out-of-elk-and-into-syslog/24547 "2015-06-29T12:50:17Z")

</div>

Hi know this might sounds like a bit of a strange request, but I have an existing application that is designed to digest logs received via rsyslog. It's a 3rd party provided app so I have no control over it and can't c…

---

## [Elasticsearch OIDC connection through Proxy](https://discuss.elastic.co/t/elasticsearch-oidc-connection-through-proxy/223018)

<div class="topic-metadata">

**Author:** [@Chris\_Samo](https://discuss.elastic.co/u/Chris_Samo)\
**Replies:** 3\
**Last updated:** [March 11, 2020, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch-oidc-connection-through-proxy/223018 "2020-03-11T06:01:53Z")

</div>

We use an OpenID Connect provider for Authentication & Authorisation in Elasticsearch, however have been tasked with locking down egress from our cluster (we're running in Kubernetes using Docker images). We've implemen…

---

## [How to Group Spans, Metadata and Transactions Together for Visualization, Part 2](https://discuss.elastic.co/t/how-to-group-spans-metadata-and-transactions-together-for-visualization-part-2/204527)

<div class="topic-metadata">

**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\
**Replies:** 3\
**Last updated:** [October 25, 2019, 7:07am UTC](https://discuss.elastic.co/t/how-to-group-spans-metadata-and-transactions-together-for-visualization-part-2/204527 "2019-10-25T07:07:13Z")

</div>

Kibana version: 7.3 Elasticsearch version: 7.3 APM Server version: 7.3 APM Agent language and version: Self created agent for Delphi 5 and above Hello, I have proposed this question before but the answer I got back …

---

## [With 1.5.0, facet date\_histograms min/max now return Infinity or -Infinity instead of numeric values?](https://discuss.elastic.co/t/with-1-5-0-facet-date-histograms-min-max-now-return-infinity-or-infinity-instead-of-numeric-values/23110)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 3\
**Last updated:** [April 6, 2015, 3:18pm UTC](https://discuss.elastic.co/t/with-1-5-0-facet-date-histograms-min-max-now-return-infinity-or-infinity-instead-of-numeric-values/23110 "2015-04-06T15:18:23Z")

</div>

Hi All, This seems like something that should be communicated somewhere if a type has changed return values. Prior to 1.5.0, facet return values were always numeric, now I'm getting "Infinity" and "-Infinity". See…

---

## [Error fetching data for metricset http.json](https://discuss.elastic.co/t/error-fetching-data-for-metricset-http-json/326848)

<div class="topic-metadata">

**Author:** [@abdul90082](https://discuss.elastic.co/u/abdul90082)\
**Replies:** 0\
**Last updated:** [March 2, 2023, 12:41pm UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-http-json/326848 "2023-03-02T12:41:03Z")

</div>

{ "log.level": "error", "@timestamp": "2023-03-02T11:40:42.101Z", "message": "Error fetching data for metricset http.json: error making http request: Get \\"http://unix/stats\\": context deadline exceeded (Client.Timeout e…

---

## [Remove Ingest Processor](https://discuss.elastic.co/t/remove-ingest-processor/303848)

<div class="topic-metadata">

**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 2:47pm UTC](https://discuss.elastic.co/t/remove-ingest-processor/303848 "2022-05-03T14:47:25Z")

</div>

I'm looking to re-index the .siem-signals-default index into an index called alerts and have created a pipeline to remove fields from the .siem-signals-default index. It looks similar to below - However, it doesn't …

---

## [Interval queries filter, not\_containing behaving like not overlapping. Intended?](https://discuss.elastic.co/t/interval-queries-filter-not-containing-behaving-like-not-overlapping-intended/263212)

<div class="topic-metadata">

**Author:** [@aaronkiwi](https://discuss.elastic.co/u/aaronkiwi)\
**Replies:** 0\
**Last updated:** [February 4, 2021, 9:01am UTC](https://discuss.elastic.co/t/interval-queries-filter-not-containing-behaving-like-not-overlapping-intended/263212 "2021-02-04T09:01:59Z")

</div>

Hello I was wondering what the actual difference between the not\_overlapping and not\_containing filters for interval queries are. From the documentation I would assume that overlapping is when any part of the filter is…

---

## [Query to get results in percentage split](https://discuss.elastic.co/t/query-to-get-results-in-percentage-split/106318)

<div class="topic-metadata">

**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\
**Replies:** 0\
**Last updated:** [November 3, 2017, 1:38pm UTC](https://discuss.elastic.co/t/query-to-get-results-in-percentage-split/106318 "2017-11-03T13:38:24Z")

</div>

I have node with news articles. Now the news articles are two kinds local and international. I need to write a query where I can fetch n number of results form the node but the results should be in proportion of 60:40 (6…

---

## [Grouping aggregation doc\_count into occurrence summaries](https://discuss.elastic.co/t/grouping-aggregation-doc-count-into-occurrence-summaries/63139)

<div class="topic-metadata">

**Author:** [@Search9212](https://discuss.elastic.co/u/Search9212)\
**Replies:** 0\
**Last updated:** [October 16, 2016, 10:31pm UTC](https://discuss.elastic.co/t/grouping-aggregation-doc-count-into-occurrence-summaries/63139 "2016-10-16T22:31:46Z")

</div>

Thanks in advance for any assistance. I'm trying to do a second pass on an aggregation to analyze doc\_count. I keep getting: Expected \[START\_OBJECT\] under \[script\], but got a \[VALUE\_STRING\] I…

---

## [How can i schedule logstash every two hours for jdbc input plugin?](https://discuss.elastic.co/t/how-can-i-schedule-logstash-every-two-hours-for-jdbc-input-plugin/272973)

<div class="topic-metadata">

**Author:** [@sreedhar1](https://discuss.elastic.co/u/sreedhar1)\
**Replies:** 5\
**Last updated:** [May 21, 2021, 10:40am UTC](https://discuss.elastic.co/t/how-can-i-schedule-logstash-every-two-hours-for-jdbc-input-plugin/272973 "2021-05-21T10:40:01Z")

</div>

How can i schedule logstash every two hours for jdbc input plugin?

---

## [Kubernetes Events MetricBeat filter duplicate entries](https://discuss.elastic.co/t/kubernetes-events-metricbeat-filter-duplicate-entries/267064)

<div class="topic-metadata">

**Author:** [@webmutation](https://discuss.elastic.co/u/webmutation)\
**Replies:** 5\
**Last updated:** [March 24, 2021, 2:25pm UTC](https://discuss.elastic.co/t/kubernetes-events-metricbeat-filter-duplicate-entries/267064 "2021-03-24T14:25:01Z")

</div>

Having setup a default ELK stack on Kubernetes cluster I deployed MetricBeat also as default... everything works well, excepts I get duplicated entries for the same data, due to the daemonSet (I have 3 worker nodes on th…

---

## [Strigo asks for account creation](https://discuss.elastic.co/t/strigo-asks-for-account-creation/190219)

<div class="topic-metadata">

**Author:** [@fchyla](https://discuss.elastic.co/u/fchyla)\
**Replies:** 5\
**Last updated:** [July 12, 2019, 1:07pm UTC](https://discuss.elastic.co/t/strigo-asks-for-account-creation/190219 "2019-07-12T13:07:28Z")

</div>

Elastic Machine Learning for Cybersecurity training, when using the Lab button the Strigo page opens up asking to create an account.

---

## [Vega transform-stack not calculating correctly](https://discuss.elastic.co/t/vega-transform-stack-not-calculating-correctly/150604)

<div class="topic-metadata">

**Author:** [@thekm1](https://discuss.elastic.co/u/thekm1)\
**Replies:** 5\
**Last updated:** [October 3, 2018, 4:41pm UTC](https://discuss.elastic.co/t/vega-transform-stack-not-calculating-correctly/150604 "2018-10-03T16:41:24Z")

</div>

Hi There, I got a problem, I am trying to create a chart with VEGA. I want in the x axis the time and in the y axis the number of doc\_count. And ofcourse for coolnes i wanted the data in y-axis stacked by the continent\_…

---

## [Plugin not working on Elastic version 6.3.0](https://discuss.elastic.co/t/plugin-not-working-on-elastic-version-6-3-0/138201)

<div class="topic-metadata">

**Author:** [@ganessen23](https://discuss.elastic.co/u/ganessen23)\
**Replies:** 5\
**Last updated:** [July 30, 2018, 6:24am UTC](https://discuss.elastic.co/t/plugin-not-working-on-elastic-version-6-3-0/138201 "2018-07-30T06:24:51Z")

</div>

Hello, I am having issues with a customised plugin when installed on the latest version of Kibana - 6.4. I have initially customised the pivot table plugin for the kibana version 6.2.3/6.2.4 (found through this link h…

---

## [Watcher with ES 2.4 shield -- SSL handshake](https://discuss.elastic.co/t/watcher-with-es-2-4-shield-ssl-handshake/102927)

<div class="topic-metadata">

**Author:** [@ankush\_singh](https://discuss.elastic.co/u/ankush_singh)\
**Replies:** 5\
**Last updated:** [October 11, 2017, 8:19am UTC](https://discuss.elastic.co/t/watcher-with-es-2-4-shield-ssl-handshake/102927 "2017-10-11T08:19:27Z")

</div>

Hi, I am trying to integrate pagerduty with es watcher. My ES 2.4 has shield enabled. While watcher get and event it is not able to trigger action event.While checking status of watcher history, i get below response: W…

---

## [ELK query throtteling](https://discuss.elastic.co/t/elk-query-throtteling/28595)

<div class="topic-metadata">

**Author:** [@Laines](https://discuss.elastic.co/u/Laines)\
**Replies:** 5\
**Last updated:** [September 10, 2015, 4:30am UTC](https://discuss.elastic.co/t/elk-query-throtteling/28595 "2015-09-10T04:30:17Z")

</div>

Hello, we are using the ELK setup for our log management. The document count is currently around 1.5 Billion. We are facing the problem when users making queries by the elasticsearch API or by the Kibana Dashboard it …

---

## [ElasticSearch won't recongize char\_filter mapping](https://discuss.elastic.co/t/elasticsearch-wont-recongize-char-filter-mapping/10338)

<div class="topic-metadata">

**Author:** [@brian\_yoder](https://discuss.elastic.co/u/brian_yoder)\
**Replies:** 5\
**Last updated:** [January 15, 2013, 11:09pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-recongize-char-filter-mapping/10338 "2013-01-15T23:09:53Z")

</div>

In summary: Everything is currently working, except for char\_filter mapping. I'm currently on ElasticSearch 19.10 because it works fine for our current production application, and I am not extending its use to requi…

---

## [Manage Multiple instances of Elasticsearch cluster with different version by ECK](https://discuss.elastic.co/t/manage-multiple-instances-of-elasticsearch-cluster-with-different-version-by-eck/332894)

<div class="topic-metadata">

**Author:** [@HadarPeeran](https://discuss.elastic.co/u/HadarPeeran)\
**Replies:** 3\
**Last updated:** [May 25, 2023, 9:02am UTC](https://discuss.elastic.co/t/manage-multiple-instances-of-elasticsearch-cluster-with-different-version-by-eck/332894 "2023-05-25T09:02:00Z")

</div>

I should deploy Elasticsearch 8 and Elasticsearch 7 on the same AKS cluster. Is it possible to upgrade the ECK operator to the latest 2.7.0 and deploy Elasticsearch 7 and 8 by this one operator? thanks

---

## [How can I filter certain information from the logs?](https://discuss.elastic.co/t/how-can-i-filter-certain-information-from-the-logs/344293)

<div class="topic-metadata">

**Author:** [@hta](https://discuss.elastic.co/u/hta)\
**Replies:** 7\
**Last updated:** [November 8, 2023, 7:41am UTC](https://discuss.elastic.co/t/how-can-i-filter-certain-information-from-the-logs/344293 "2023-11-08T07:41:48Z")

</div>

We work with ELK Stack and I have the task of creating meaningful visualizations from the log entries. I have logs in the following format: { "@timestamp": \[ "2023-08-08T00:00:11.2123" \], "xxxxx": \[ "yyyyy…

---

## [Search character ( wild card )](https://discuss.elastic.co/t/search-character-wild-card/226091)

<div class="topic-metadata">

**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\
**Replies:** 7\
**Last updated:** [April 1, 2020, 5:34pm UTC](https://discuss.elastic.co/t/search-character-wild-card/226091 "2020-04-01T17:34:56Z")

</div>

How we use wild card to search in elasticsearch. I try with following queries "query": { "wildcard": { "item\_name": { "value": "\*Iko\*", "boost": 1.0, "rewrite": "constant\_score" } } a…

---

## [About the curator setting about curator.yml and action\_file](https://discuss.elastic.co/t/about-the-curator-setting-about-curator-yml-and-action-file/103811)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 7\
**Last updated:** [October 13, 2017, 1:14pm UTC](https://discuss.elastic.co/t/about-the-curator-setting-about-curator-yml-and-action-file/103811 "2017-10-13T13:14:43Z")

</div>

about the curator can give me a example how setting the "curator.yml" and the "action\_file" thanks so much.

---

## [Elasticsearch: Error](https://discuss.elastic.co/t/elasticsearch-error/95762)

<div class="topic-metadata">

**Author:** [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\
**Replies:** 7\
**Last updated:** [August 11, 2017, 5:33am UTC](https://discuss.elastic.co/t/elasticsearch-error/95762 "2017-08-11T05:33:51Z")

</div>

asacsdcscasa

---

## [Ingest Attachment processor pipeline, but without storing base64 data](https://discuss.elastic.co/t/ingest-attachment-processor-pipeline-but-without-storing-base64-data/119024)

<div class="topic-metadata">

**Author:** [@pritishc](https://discuss.elastic.co/u/pritishc)\
**Replies:** 1\
**Last updated:** [February 8, 2018, 12:01pm UTC](https://discuss.elastic.co/t/ingest-attachment-processor-pipeline-but-without-storing-base64-data/119024 "2018-02-08T12:01:38Z")

</div>

Hi there. We run a simple ES cluster - one shard, one node, v5.6. It contains a single index, with a single mapping containing many different fields/field types. On every object index operation, we send some attachment …

---

## [Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down!](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/106726)

<div class="topic-metadata">

**Author:** [@theo.ptz](https://discuss.elastic.co/u/theo.ptz)\
**Replies:** 1\
**Last updated:** [November 10, 2017, 4:01am UTC](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/106726 "2017-11-10T04:01:06Z")

</div>

Hi guys. I've got this error today: "Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down!" And i can't figure out what's wrong with my ELK cluster. ELK cluster is gr…

---

## [How to combine Function Score Query and Bool Query?](https://discuss.elastic.co/t/how-to-combine-function-score-query-and-bool-query/42500)

<div class="topic-metadata">

**Author:** [@Harish\_Ramanathan](https://discuss.elastic.co/u/Harish_Ramanathan)\
**Replies:** 1\
**Last updated:** [May 30, 2017, 6:19am UTC](https://discuss.elastic.co/t/how-to-combine-function-score-query-and-bool-query/42500 "2017-05-30T06:19:30Z")

</div>

I have a use case where I need to write a search query with Bool Query and Function Score Query. The Bool Query is having multiple should clauses for Fields with a minimum should match set to 1. The Function Score Query …

---

## [Suggestions - Hardware and software configurations of Logstash, Elasticsearch, Kibana](https://discuss.elastic.co/t/suggestions-hardware-and-software-configurations-of-logstash-elasticsearch-kibana/34689)

<div class="topic-metadata">

**Author:** [@shankar-es](https://discuss.elastic.co/u/shankar-es)\
**Replies:** 1\
**Last updated:** [November 17, 2015, 3:50am UTC](https://discuss.elastic.co/t/suggestions-hardware-and-software-configurations-of-logstash-elasticsearch-kibana/34689 "2015-11-17T03:50:14Z")

</div>

what we want to setup is : Kafka server =\> Kafka-logstash-input plugin =\> Elasticsearch =\> Kibana Use =\> Real-time analysis Analysis frequency =\> last 1 week data Below are the our Kafka message system details : M…

---

## [ERROR: Skipping security auto configuration because it appears that the node is not starting up for the first time. The node might already be part of a cluster and this auto setup utility is designed to configure Security for new clusters only](https://discuss.elastic.co/t/error-skipping-security-auto-configuration-because-it-appears-that-the-node-is-not-starting-up-for-the-first-time-the-node-might-already-be-part-of-a-cluster-and-this-auto-setup-utility-is-designed-to-configure-security-for-new-clusters-only/362955)

<div class="topic-metadata">

**Author:** [@martianzz](https://discuss.elastic.co/u/martianzz)\
**Replies:** 4\
**Last updated:** [July 15, 2024, 9:35am UTC](https://discuss.elastic.co/t/error-skipping-security-auto-configuration-because-it-appears-that-the-node-is-not-starting-up-for-the-first-time-the-node-might-already-be-part-of-a-cluster-and-this-auto-setup-utility-is-designed-to-configure-security-for-new-clusters-only/362955 "2024-07-15T09:35:52Z")

</div>

ERROR: Skipping security auto configuration because it appears that the node is not starting up for the first time. The node might already be part of a cluster and this auto setup utility is designed to configure Securit…

---

## [Filebeat F5 AFM Module Log Format](https://discuss.elastic.co/t/filebeat-f5-afm-module-log-format/259106)

<div class="topic-metadata">

**Author:** [@cyber\_crab](https://discuss.elastic.co/u/cyber_crab)\
**Replies:** 4\
**Last updated:** [December 22, 2020, 4:15pm UTC](https://discuss.elastic.co/t/filebeat-f5-afm-module-log-format/259106 "2020-12-22T16:15:56Z")

</div>

We're currently trying to get the bigipafm fileset in the F5 module to parse the logs that are incoming from the F5 appliance. The documentation is missing the required log format, as well as the F5 AFM versions that are…

---

## [Timeout, GC overhead and plenty other beginner errors](https://discuss.elastic.co/t/timeout-gc-overhead-and-plenty-other-beginner-errors/176156)

<div class="topic-metadata">

**Author:** [@Ricocotam](https://discuss.elastic.co/u/Ricocotam)\
**Replies:** 4\
**Last updated:** [May 3, 2019, 3:56pm UTC](https://discuss.elastic.co/t/timeout-gc-overhead-and-plenty-other-beginner-errors/176156 "2019-05-03T15:56:55Z")

</div>

Hi, I'm super new to ES and I have some problems. Actually, quite a lot. My setup is at the end, the only thing that matters to understand my problems is that I have two different servers which share some problems but n…

---

## [\_\_WEBPACK\_AMD\_DEFINE\_RESULT\_\_ problem with loading dashboard](https://discuss.elastic.co/t/--webpack-amd-define-result---problem-with-loading-dashboard/48091)

<div class="topic-metadata">

**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\
**Replies:** 4\
**Last updated:** [May 23, 2016, 12:20pm UTC](https://discuss.elastic.co/t/--webpack-amd-define-result---problem-with-loading-dashboard/48091 "2016-05-23T12:20:14Z")

</div>

Hi I am getting the following error in Kibana 4.3.1 (in Edge or firefox) when opening the Dashboard and loading a saved one. I did this operation many many times with no problem. Now I am using a larger data set (~ 110…

---

## [Elasticsearch Puppet Error](https://discuss.elastic.co/t/elasticsearch-puppet-error/43554)

<div class="topic-metadata">

**Author:** [@net](https://discuss.elastic.co/u/net)\
**Replies:** 4\
**Last updated:** [March 4, 2016, 9:10pm UTC](https://discuss.elastic.co/t/elasticsearch-puppet-error/43554 "2016-03-04T21:10:56Z")

</div>

Hi, I'm having the following issue below. Note that I'm running puppet 3.x, I bring that up because I'm modifying a hash in the code below. I'm doing that because of time constraints, we are demoing at the end of this …

---

## [Debian package creates configuration file writable by the elasticsearch process](https://discuss.elastic.co/t/debian-package-creates-configuration-file-writable-by-the-elasticsearch-process/156748)

<div class="topic-metadata">

**Author:** [@Joost\_Cassee](https://discuss.elastic.co/u/Joost_Cassee)\
**Replies:** 2\
**Last updated:** [November 16, 2018, 12:59pm UTC](https://discuss.elastic.co/t/debian-package-creates-configuration-file-writable-by-the-elasticsearch-process/156748 "2018-11-16T12:59:43Z")

</div>

I just installed Elasticsearch 6.4.3 on a fresh Ubuntu 18.04 system from the Apt repository. I noticed that the configuration files in /etc/elasticsearch are writable by group elasticsearch, which the elasticsearch proce…

---

## [Anyone install plugins successful on K4.4.1?](https://discuss.elastic.co/t/anyone-install-plugins-successful-on-k4-4-1/41968)

<div class="topic-metadata">

**Author:** [@chenryn](https://discuss.elastic.co/u/chenryn)\
**Replies:** 2\
**Last updated:** [February 25, 2016, 10:55pm UTC](https://discuss.elastic.co/t/anyone-install-plugins-successful-on-k4-4-1/41968 "2016-02-25T22:55:05Z")

</div>

I wrote a vistype plugin on k4.3, and then try to upgrade to the latest k4.4.1. But then I found even the elastic/timelion install was failed on K4.4.1: ➜ kibana-4.4.1-darwin-x64 ./bin/kibana plugin -i elastic/timel…

[Previous page](https://discuss.elastic.co/top.md?page=1108&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1110&per_page=50&period=all)
