# Top **URL:** https://discuss.elastic.co/top.md?page=1114&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1115 --- ## [Exception in thread "main" java.lang.NoClassDefFoundError](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-noclassdeffounderror/307246)
**Author:** [@Ashutosh](https://discuss.elastic.co/u/Ashutosh)\ **Replies:** 2\ **Last updated:** [June 22, 2022, 8:08am UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-noclassdeffounderror/307246 "2022-06-22T08:08:44Z")
Hi Team, I am a beginner in Elasticsearch. We have a wazuh cluster running which use Elasticsearch for storing alerts. Since few days, the Elasticsearch is not starting at al. Whenever we try to use "systemctl start ela… --- ## [Monitoring Palo alto networks firewalls with ELK](https://discuss.elastic.co/t/monitoring-palo-alto-networks-firewalls-with-elk/241804)
**Author:** [@zkhanfur](https://discuss.elastic.co/u/zkhanfur)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 10:50am UTC](https://discuss.elastic.co/t/monitoring-palo-alto-networks-firewalls-with-elk/241804 "2020-08-13T10:50:36Z")
Hi dear community, I have been following a blog to create Dashboards for Palo alto networks firewalls and good progress has been made. The blog post that has been used is We have successfully replicated the dashboa… --- ## [Convert mapped IPv6 to IPv4](https://discuss.elastic.co/t/convert-mapped-ipv6-to-ipv4/158651)
**Author:** [@nandrik](https://discuss.elastic.co/u/nandrik)\ **Replies:** 2\ **Last updated:** [December 8, 2018, 11:47am UTC](https://discuss.elastic.co/t/convert-mapped-ipv6-to-ipv4/158651 "2018-12-08T11:47:54Z")
Hi, I have log lines from an IPv4 network. However, in the log lines some of the IP addresses are mapped toIPv6, i.e. are in IPv6 format. I wonder if there's a good way for those addresses to be converted to IPv4 forma… --- ## [Disable merge](https://discuss.elastic.co/t/disable-merge/16588)
**Author:** [@vineeth\_mohan\_2](https://discuss.elastic.co/u/vineeth_mohan_2)\ **Replies:** 2\ **Last updated:** [March 25, 2014, 3:52pm UTC](https://discuss.elastic.co/t/disable-merge/16588 "2014-03-25T15:52:32Z")
Hello , I am doing lots of bulk insert in hundreds of millions of feeds. But then , index merge is coming in the way at times. Is there anyway to disable the merge until i complete the bulk loading process ? Tha… --- ## [Loading Vega-lite schema + data from local](https://discuss.elastic.co/t/loading-vega-lite-schema-data-from-local/280249)
**Author:** [@sohenrane](https://discuss.elastic.co/u/sohenrane)\ **Replies:** 6\ **Last updated:** [August 5, 2021, 5:22pm UTC](https://discuss.elastic.co/t/loading-vega-lite-schema-data-from-local/280249 "2021-08-05T17:22:31Z")
{ "$schema": "file:///C:/Users/custom4me/Downloads/ELK/v5.json", "title": "Event counts from MAIN index", "data": { "url": "file:///C:/Users/custom4me/Downloads/ELK/seattle-weather.csv" } } How to load from local … --- ## [Number of vCPUS vs Number of Shards](https://discuss.elastic.co/t/number-of-vcpus-vs-number-of-shards/303651)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 3\ **Last updated:** [April 30, 2022, 11:11pm UTC](https://discuss.elastic.co/t/number-of-vcpus-vs-number-of-shards/303651 "2022-04-30T23:11:32Z")
I have an on-premise server with Elasticsearch 6.8 that was created years ago, and at the time I only had one vCPU and now I have 4 vCPU on that server. It happens that when I mapped the indexes I defined the code below… --- ## [Script for install and configure file beat on Linux](https://discuss.elastic.co/t/script-for-install-and-configure-file-beat-on-linux/197163)
**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 7:26am UTC](https://discuss.elastic.co/t/script-for-install-and-configure-file-beat-on-linux/197163 "2019-08-29T07:26:37Z")
I have several servers those need to be installed with file beat .is there any shell /Ansible/some other way to install file beat on all Linux servers at once instead of manual intervention? TIA --- ## [Filebeat 'multiline' multiline pattern](https://discuss.elastic.co/t/filebeat-multiline-multiline-pattern/121030)
**Author:** [@r2cX](https://discuss.elastic.co/u/r2cX)\ **Replies:** 3\ **Last updated:** [March 12, 2018, 7:05am UTC](https://discuss.elastic.co/t/filebeat-multiline-multiline-pattern/121030 "2018-03-12T07:05:10Z")
Filebeat 6.2.2 Has anyone tried a multiline.pattern that can span 2 lines (e.g. include \\n). I have been struggling with this type of log type. This represents a single request-response log. I used to have filebeat send… --- ## [Kibana: Microsoft Edge Support](https://discuss.elastic.co/t/kibana-microsoft-edge-support/96657)
**Author:** [@Ibrahim\_diop](https://discuss.elastic.co/u/Ibrahim_diop)\ **Replies:** 3\ **Last updated:** [August 10, 2017, 7:45pm UTC](https://discuss.elastic.co/t/kibana-microsoft-edge-support/96657 "2017-08-10T19:45:16Z")
Is microsoft Edge officially supported by Kibana 5? if not, is there a road map for that? --- ## [Add field "remote\_ip" if message contains ip addr](https://discuss.elastic.co/t/add-field-remote-ip-if-message-contains-ip-addr/61225)
**Author:** [@himbeere](https://discuss.elastic.co/u/himbeere)\ **Replies:** 3\ **Last updated:** [September 22, 2016, 10:47am UTC](https://discuss.elastic.co/t/add-field-remote-ip-if-message-contains-ip-addr/61225 "2016-09-22T10:47:45Z")
Hello all. I am trying to add a new field if an ip addr is in the message field. Something like that. filter { grok { match =\> { "message" =\> "%{IP:client} } add\_field =\> { "remote\_ip" =\> "%{client}" } }… --- ## [No Map displayed in a Tile Map Graph](https://discuss.elastic.co/t/no-map-displayed-in-a-tile-map-graph/36646)
**Author:** [@tophoune](https://discuss.elastic.co/u/tophoune)\ **Replies:** 3\ **Last updated:** [January 29, 2016, 5:54pm UTC](https://discuss.elastic.co/t/no-map-displayed-in-a-tile-map-graph/36646 "2016-01-29T17:54:31Z")
Hello, i created a tale map visualization from a set of data. when i watch the result i have have all the hit point displayed over a blank screen, no word map displayed!!!! the navigation bar is displayed and also the op… --- ## [Creating a matrix visualization in kibana](https://discuss.elastic.co/t/creating-a-matrix-visualization-in-kibana/193187)
**Author:** [@johnbchron](https://discuss.elastic.co/u/johnbchron)\ **Replies:** 1\ **Last updated:** [August 1, 2019, 8:02pm UTC](https://discuss.elastic.co/t/creating-a-matrix-visualization-in-kibana/193187 "2019-08-01T20:02:23Z")
Hello, all So I was kind of dissatisfied with the kibana visualization types available. I'm running mostly metricbeat on tons of servers, and I want a way to easily look at a single value for every host. Optimally, I wo… --- ## [AWS Error:- Cannot detect ES version: - typically this happens if the network/Elasticsearch cluster is not accessible or when tar geting a WAN/Cloud instance without the proper setting 'es.nodes.wan.only'](https://discuss.elastic.co/t/aws-error-cannot-detect-es-version-typically-this-happens-if-the-network-elasticsearch-cluster-is-not-accessible-or-when-tar-geting-a-wan-cloud-instance-without-the-proper-setting-es-nodes-wan-only/121665)
**Author:** [@krishnaSH](https://discuss.elastic.co/u/krishnaSH)\ **Replies:** 1\ **Last updated:** [March 1, 2018, 9:59pm UTC](https://discuss.elastic.co/t/aws-error-cannot-detect-es-version-typically-this-happens-if-the-network-elasticsearch-cluster-is-not-accessible-or-when-tar-geting-a-wan-cloud-instance-without-the-proper-setting-es-nodes-wan-only/121665 "2018-03-01T21:59:19Z")
I am connecting Hive in AWS EMR instancewith Elasticsearch and firing the command (PFB) to create a table in hive: create external table abc(schema) STORED BY 'org.elasticsearch.hadoop.hive.EsStorageHandler' TBLPROPERT… --- ## [Filebeat 5 decoding json probrom](https://discuss.elastic.co/t/filebeat-5-decoding-json-probrom/57559)
**Author:** [@Andy\_Young](https://discuss.elastic.co/u/Andy_Young)\ **Replies:** 1\ **Last updated:** [August 9, 2016, 10:48am UTC](https://discuss.elastic.co/t/filebeat-5-decoding-json-probrom/57559 "2016-08-09T10:48:47Z")
Hi,guys I test the filebeat-5.0.0\_alpha4-1 and found it show many logs like that: " 2016/08/09 07:28:35.013208 json.go:38: ERR Error decoding JSON: invalid character ',' in numeric literal 2016/08/09 07:28:35.013277 js… --- ## [Filebeat output all events to multiple logstash instances](https://discuss.elastic.co/t/filebeat-output-all-events-to-multiple-logstash-instances/45123)
**Author:** [@herron](https://discuss.elastic.co/u/herron)\ **Replies:** 1\ **Last updated:** [March 22, 2016, 3:30pm UTC](https://discuss.elastic.co/t/filebeat-output-all-events-to-multiple-logstash-instances/45123 "2016-03-22T15:30:46Z")
Hi There, I'm trying to send all log events ("tee") to two separate logstash instances using filebeat. This is not to accomplish HA, but rather to send all log events to my logstash cluster and my customer's logstash … --- ## [Encrypting Hard disk that stores data as configured in path.data](https://discuss.elastic.co/t/encrypting-hard-disk-that-stores-data-as-configured-in-path-data/42209)
**Author:** [@arunjohn](https://discuss.elastic.co/u/arunjohn)\ **Replies:** 1\ **Last updated:** [February 19, 2016, 4:40am UTC](https://discuss.elastic.co/t/encrypting-hard-disk-that-stores-data-as-configured-in-path-data/42209 "2016-02-19T04:40:18Z")
As mentioned in the post If I use the dm-crypt tool for this, then will this have any impact when the index is being written to the configured location and also when the data is being retrieved using the elastic api ? … --- ## [Neo4j Cypher query to Elasticsearch conversion](https://discuss.elastic.co/t/neo4j-cypher-query-to-elasticsearch-conversion/121852)
**Author:** [@Shreeraksha](https://discuss.elastic.co/u/Shreeraksha)\ **Replies:** 4\ **Last updated:** [March 1, 2018, 7:50am UTC](https://discuss.elastic.co/t/neo4j-cypher-query-to-elasticsearch-conversion/121852 "2018-03-01T07:50:20Z")
MATCH (:Person {id: 19791209310731})-\[:KNOWS\*3..5\]-(person:Person) WITH DISTINCT person MATCH (person)-\[:IS\_LOCATED\_IN\]-\>(:City)-\[:IS\_PART\_OF\]-\>(:Country {name: 'Pakistan'}), (person)\<-\[:HAS\_CREATOR\]-(message:Messag… --- ## [ElasticSearchにて索引化されたデータを出力したい](https://discuss.elastic.co/t/elasticsearch/59381)
**Author:** [@s-hatanaka](https://discuss.elastic.co/u/s-hatanaka)\ **Replies:** 4\ **Last updated:** [September 2, 2016, 3:25am UTC](https://discuss.elastic.co/t/elasticsearch/59381 "2016-09-02T03:25:40Z")
ngramやkuromoji pluginで形態素解析され、分割された各ワードがどのドキュメントを保持するのかといったデータが索引データとしてElasticsearch内部で保持しているものだと考えています。 その索引データをRESTAPI等で取得して、利用したいのですが、良い方法などありますでしょうか？ 5系のElasticsearchを利用しており、それで確認できればと考えています。 Elasticsearchのプラグインやki… --- ## [Logstash - Filtering multiple date formats - date\_time\_parse\_exception](https://discuss.elastic.co/t/logstash-filtering-multiple-date-formats-date-time-parse-exception/203725)
**Author:** [@Sidharth\_Sinha](https://discuss.elastic.co/u/Sidharth_Sinha)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 11:48pm UTC](https://discuss.elastic.co/t/logstash-filtering-multiple-date-formats-date-time-parse-exception/203725 "2019-10-15T23:48:14Z")
I have a stream of json logs being sent into elastic via logstash. The input stream has inconsistent date formats, in one of the either formats: "YYYY-MM-dd'T'HH:mm:ssZ", or "YYYY-MM-dd HH:mm:ss" Example, some of them… --- ## [Elastiflow problem with kibana](https://discuss.elastic.co/t/elastiflow-problem-with-kibana/229852)
**Author:** [@roberto.bertucci](https://discuss.elastic.co/u/roberto.bertucci)\ **Replies:** 2\ **Last updated:** [April 28, 2020, 8:27pm UTC](https://discuss.elastic.co/t/elastiflow-problem-with-kibana/229852 "2020-04-28T20:27:41Z")
Hello, i am new to ELK and i am managing to obtain graphs about Cisco ASA netflow. I followed this very effective guide: My setup is as following: elasticsearch + logstash v.7.6.2 kibana v.7.6.2-1 latest version… --- ## [Shard,replica shardの数の指定について](https://discuss.elastic.co/t/shard-replica-shard/191305)
**Author:** [@kapibara824](https://discuss.elastic.co/u/kapibara824)\ **Replies:** 2\ **Last updated:** [July 22, 2019, 3:20am UTC](https://discuss.elastic.co/t/shard-replica-shard/191305 "2019-07-22T03:20:57Z")
データノード5台のクラスタを構築し、シャードを5レプリカシャードを４に設定したいのですがやり方がわかりません。 curl -X PUT xx.xx.xx.xx:9200/\_all/\_settings -H "Content-Type: application/json" -d ' { "index":{ "number\_of\_shards":5 "number\_of\_replicas":4 } }' 出力結果 {… --- ## [I need to install filebeat service with Powershell disabled](https://discuss.elastic.co/t/i-need-to-install-filebeat-service-with-powershell-disabled/127543)
**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\ **Replies:** 2\ **Last updated:** [April 11, 2018, 1:56pm UTC](https://discuss.elastic.co/t/i-need-to-install-filebeat-service-with-powershell-disabled/127543 "2018-04-11T13:56:23Z")
Powershell is disabled by internal InfoSec dept. How else can I install filebeat as a service on Windows 2012 R2 Datacenter, please? I see that when installed with Powershell the service has this. "D:\\filebeat-6.2.3-w… --- ## [Logstash vs Filebeat Output Logs](https://discuss.elastic.co/t/logstash-vs-filebeat-output-logs/122904)
**Author:** [@rickyrome86](https://discuss.elastic.co/u/rickyrome86)\ **Replies:** 2\ **Last updated:** [March 7, 2018, 7:12pm UTC](https://discuss.elastic.co/t/logstash-vs-filebeat-output-logs/122904 "2018-03-07T19:12:33Z")
What is the best method to send logs to another environment? We are currently sending logs internally via log-stash to our elastic search, but would like to send the logs to another environment managed by a 3rd party. I … --- ## [Logstash cloudtrail codec doesn't work](https://discuss.elastic.co/t/logstash-cloudtrail-codec-doesnt-work/95791)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 5:20pm UTC](https://discuss.elastic.co/t/logstash-cloudtrail-codec-doesnt-work/95791 "2017-08-22T17:20:30Z")
Hi, I am trying to user the logstash codec cloudtrail to ingest cloudtrail data but that doesn’t seem to work. 16:27:00.265 \[\[main\]\ **Author:** [@Balaram](https://discuss.elastic.co/u/Balaram)\ **Replies:** 2\ **Last updated:** [March 29, 2017, 9:20pm UTC](https://discuss.elastic.co/t/publish-go-276-dbg-no-output-is-defined-to-store-the-topology-the-server-fields-might-not-be-filled/79802 "2017-03-29T21:20:50Z") Hi I am seeing this below lines while starting the metricbeat on Redhat Linux. did any one faced similar issue?? ========================================== 2017/03/23 19:22:22.755848 outputs.go:106: INFO Activated red… --- ## [Possible to disable data compression?](https://discuss.elastic.co/t/possible-to-disable-data-compression/68659)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 2\ **Last updated:** [December 12, 2016, 4:16am UTC](https://discuss.elastic.co/t/possible-to-disable-data-compression/68659 "2016-12-12T04:16:36Z")
Elasticsearch document says the default compression is LZ4, and we can set to best\_compression which is DEFLATE, Is there a way to stop compression? Story behind is that we're testing some SAN storage for ELK, and the st… --- ## [ILM policy based on index and not on index template](https://discuss.elastic.co/t/ilm-policy-based-on-index-and-not-on-index-template/296123)
**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\ **Replies:** 5\ **Last updated:** [February 2, 2022, 8:51pm UTC](https://discuss.elastic.co/t/ilm-policy-based-on-index-and-not-on-index-template/296123 "2022-02-02T20:51:49Z")
Hi, Is there a way to configure ILM policy specific to index and not based on index template? it is annoying to have multiple templates and specifying index patterns for each type (daily, monthly, yearly). If i want to … --- ## [Mapping definition error on ES2.4](https://discuss.elastic.co/t/mapping-definition-error-on-es2-4/67308)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 5\ **Last updated:** [November 28, 2016, 8:26am UTC](https://discuss.elastic.co/t/mapping-definition-error-on-es2-4/67308 "2016-11-28T08:26:36Z")
Guys, I have upgraded my ES from 1.5 to 2.4. I know there were significant difference between the two versions and i understand the upgrade caused this thing. But can someone help me fix this. \[2016-11-28 07:02:11,3… --- ## [Difference between 2.3.2 and 2.3.5?](https://discuss.elastic.co/t/difference-between-2-3-2-and-2-3-5/64061)
**Author:** [@Stephane\_Lapierre](https://discuss.elastic.co/u/Stephane_Lapierre)\ **Replies:** 5\ **Last updated:** [October 27, 2016, 7:35am UTC](https://discuss.elastic.co/t/difference-between-2-3-2-and-2-3-5/64061 "2016-10-27T07:35:07Z")
Last Friday, Oracle delivered Elasticsearch for PeopleSoft. They deliver a package with release 2.3.2. I don't want to install it and would like to run Elastic Cloud instead but it is 2.3.5 ... any one knows differen… --- ## [Detecting beaconing malware](https://discuss.elastic.co/t/detecting-beaconing-malware/296559)
**Author:** [@zerojin63](https://discuss.elastic.co/u/zerojin63)\ **Replies:** 7\ **Last updated:** [February 15, 2022, 9:35pm UTC](https://discuss.elastic.co/t/detecting-beaconing-malware/296559 "2022-02-15T21:35:59Z")
Hello, I saw this post (link) and wanted to try on my network log, so i followed the github manual (link), uploaded all the required scripts and changed only the transform script, just to apply it to my already existin… --- ## [Elasticsearch node disk space?](https://discuss.elastic.co/t/elasticsearch-node-disk-space/242174)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 7\ **Last updated:** [July 31, 2020, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-node-disk-space/242174 "2020-07-31T12:24:27Z")
How much disk space should be given to : Dedicated Client Node Dedicated Kibana Node Will 10gb suffice? Currently the setup is, 3 Master node, 15 gb ram, 100Gb hard disk 4 Data node, 62 gb ram, 1tb hard disk 2 cli… --- ## [Cluster a의 일부 인덱스를 신규장비 cluster b로 이동시키는 방법](https://discuss.elastic.co/t/cluster-a-cluster-b/24773)
**Author:** [@happyprg](https://discuss.elastic.co/u/happyprg)\ **Replies:** 1\ **Last updated:** [February 7, 2017, 10:15pm UTC](https://discuss.elastic.co/t/cluster-a-cluster-b/24773 "2017-02-07T22:15:32Z")
5대(10개 노드)로 구성된 cluster a에 A,B,C index를 새롭게 구성한 cluster b(5대 10개 노드)로 이동시킬 수 있는 전략은 어떤것이 있을까요? include ip 옵션을 사용해서 index의 이동은 원하는 node에 배치 할 수 있을것 같은데 index 이동이 완료 된 후, cluster a에 포함된 5대를 cluster b로 재구성하는(따로 분리 해내는) 일이 쉽… --- ## [Sorting by sum of matching children](https://discuss.elastic.co/t/sorting-by-sum-of-matching-children/7201)
**Author:** [@Olafur\_Gauti\_Gudmund](https://discuss.elastic.co/u/Olafur_Gauti_Gudmund)\ **Replies:** 7\ **Last updated:** [April 4, 2012, 2:14pm UTC](https://discuss.elastic.co/t/sorting-by-sum-of-matching-children/7201 "2012-04-04T14:14:56Z")
Hi all, I have an index with a parent type (let's call this "Equipment"), and a child type (let's call this "Availability"). An example Equipment document: { \_id: 1, title: "Bike", ... } An ex… --- ## [Best way to enrich by IP subnets](https://discuss.elastic.co/t/best-way-to-enrich-by-ip-subnets/232771)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 3\ **Last updated:** [December 10, 2021, 9:34am UTC](https://discuss.elastic.co/t/best-way-to-enrich-by-ip-subnets/232771 "2021-12-10T09:34:40Z")
I want to enrich incoming ECS-compatible documents with a tag if they come from VPN IPs. From my testing, the enrich processor cannot deal with IP-ranges. However, i want to use IP-ranges and not manually (or by a scrip… --- ## [Unusual Parent-Child Relationship Query and process parent hyphen value](https://discuss.elastic.co/t/unusual-parent-child-relationship-query-and-process-parent-hyphen-value/258570)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 7:18pm UTC](https://discuss.elastic.co/t/unusual-parent-child-relationship-query-and-process-parent-hyphen-value/258570 "2020-12-14T19:18:12Z")
Hello, I'm noticing a large amount of detections on the "Unusual Parent-Child Relationship" detection rule whichs seems to be related to the fact that some processes don't have a parent process. Data source are sysmon f… --- ## [Add a separator character in multiline configuration](https://discuss.elastic.co/t/add-a-separator-character-in-multiline-configuration/104539)
**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\ **Replies:** 3\ **Last updated:** [October 23, 2017, 1:23pm UTC](https://discuss.elastic.co/t/add-a-separator-character-in-multiline-configuration/104539 "2017-10-23T13:23:16Z")
hi, I have a multiline configuration like this: multiline.pattern : '^.{22}\*' multiline.negate: false multiline.match: after and filebeat joins the lines if a \* is found at column 23 each original line has a \\t to … --- ## [Json filter to parse nested json](https://discuss.elastic.co/t/json-filter-to-parse-nested-json/83755)
**Author:** [@harshinim](https://discuss.elastic.co/u/harshinim)\ **Replies:** 3\ **Last updated:** [April 30, 2017, 10:02pm UTC](https://discuss.elastic.co/t/json-filter-to-parse-nested-json/83755 "2017-04-30T22:02:37Z")
I have the below json {"test1":1,"test2":2,"usage":{"test3":3,"test4":4}} and I want the output to be test1:1, test2:2, usage.test3:3, usage.test4:4 Also the filter needs to be dynamic, I don't know the name of the… --- ## [Shield unable to authenticate user to active directory domain](https://discuss.elastic.co/t/shield-unable-to-authenticate-user-to-active-directory-domain/57184)
**Author:** [@Sivashankar](https://discuss.elastic.co/u/Sivashankar)\ **Replies:** 3\ **Last updated:** [August 5, 2016, 7:20am UTC](https://discuss.elastic.co/t/shield-unable-to-authenticate-user-to-active-directory-domain/57184 "2016-08-05T07:20:59Z")
I have elasticsearch installed and running , i wanted to install the shield and authenticate via active directory i followed all the step given here --\>https://www.elastic.co/guide/en/shield/current/active-directory-real… --- ## [Lazy optimization takes \>100s](https://discuss.elastic.co/t/lazy-optimization-takes-100s/45621)
**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\ **Replies:** 3\ **Last updated:** [March 30, 2016, 4:57pm UTC](https://discuss.elastic.co/t/lazy-optimization-takes-100s/45621 "2016-03-30T16:57:26Z")
Hi, I just tried to give writing kibana plugins a try. AFter every change I have to wait \> 100s for the optimization finishes. I'm running it on my local laptop (~2y.o, 2,7GHZ core, 16BG RAM, SSD), using Windows (t… --- ## [CircuitBreakingException: \[parent\] Data too large, data error](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-data-error/238690)
**Author:** [@Zeroc0pter](https://discuss.elastic.co/u/Zeroc0pter)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 6:27am UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-data-error/238690 "2020-07-16T06:27:47Z")
Hi People, I'm facing an issue that keeps crashing our cluster. Luckily it is our acceptance cluster, but still a problem because people use the cluster to log their errors. We use Elasticsearch 6.8 The error that we r… --- ## [Elasticsearch upgrade to 5.2 causes major degraded performance](https://discuss.elastic.co/t/elasticsearch-upgrade-to-5-2-causes-major-degraded-performance/76075)
**Author:** [@edalford11](https://discuss.elastic.co/u/edalford11)\ **Replies:** 2\ **Last updated:** [February 28, 2017, 3:12pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-to-5-2-causes-major-degraded-performance/76075 "2017-02-28T15:12:39Z")
Our cluster performed pretty much near perfect on 2.4. After upgrading to 5.2 we are seeing time spent in elastic increased by 6x, basically making our service useless as it is too slow. The only thing in the logs are a … --- ## [How to nested and other field search](https://discuss.elastic.co/t/how-to-nested-and-other-field-search/296147)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 1\ **Last updated:** [February 3, 2022, 7:11am UTC](https://discuss.elastic.co/t/how-to-nested-and-other-field-search/296147 "2022-02-03T07:11:59Z")
Hello! I want to know about the search conditions. { "query": { "nested": { "path": "others", "query": { "bool": { "must": \[ { "match": { "others.key": "0204key" } }, … --- ## [Error after restarting the elasticsearch pod managed by ECK](https://discuss.elastic.co/t/error-after-restarting-the-elasticsearch-pod-managed-by-eck/255935)
**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\ **Replies:** 6\ **Last updated:** [November 19, 2020, 1:16pm UTC](https://discuss.elastic.co/t/error-after-restarting-the-elasticsearch-pod-managed-by-eck/255935 "2020-11-19T13:16:49Z")
I am currently using ECK version 1.2 and Elasticsearch version 7.10.0 managed by ECK. I have restarted one of the elasticsearch pods and I am getting the below errors after pod has restarted. kubectl logs -n eo elastic-… --- ## [Moving Elasticsearch 6.2.4 data to Elasticsearch 7.6.1](https://discuss.elastic.co/t/moving-elasticsearch-6-2-4-data-to-elasticsearch-7-6-1/226364)
**Author:** [@TheOne](https://discuss.elastic.co/u/TheOne)\ **Replies:** 6\ **Last updated:** [April 3, 2020, 3:13pm UTC](https://discuss.elastic.co/t/moving-elasticsearch-6-2-4-data-to-elasticsearch-7-6-1/226364 "2020-04-03T15:13:51Z")
Hi, I am trying to copy the data from our old Elasticsearch 6.2.4 to the new elasticsearch 7.6.1 I tried the following methods. Snapshot and restore Re-index from a remote cluster. Both methods seem working but I go… --- ## [Documentation regarding the different activity actions (ECE v1.1)](https://discuss.elastic.co/t/documentation-regarding-the-different-activity-actions-ece-v1-1/150770)
**Author:** [@Simon\_Khan](https://discuss.elastic.co/u/Simon_Khan)\ **Replies:** 6\ **Last updated:** [October 4, 2018, 5:12pm UTC](https://discuss.elastic.co/t/documentation-regarding-the-different-activity-actions-ece-v1-1/150770 "2018-10-04T17:12:07Z")
When reading through my clusters' activity through the following endpoint https://www.elastic.co/guide/en/cloud-enterprise/1.1/get-es-cluster-plan-activity.html I noticed there are different activity actions found in the… --- ## [Find IP in between two ranges](https://discuss.elastic.co/t/find-ip-in-between-two-ranges/274104)
**Author:** [@Sarthak\_Mishra](https://discuss.elastic.co/u/Sarthak_Mishra)\ **Replies:** 4\ **Last updated:** [June 1, 2021, 1:53am UTC](https://discuss.elastic.co/t/find-ip-in-between-two-ranges/274104 "2021-06-01T01:53:34Z")
Hello Community, I have two indexes. Index 1 contains a column of IP address. Index 2 contains 2 columns: the start subnet and end IP Address column. I want to find in which subnet range does the particular IP belong to… --- ## [Should I use \`keyword\` in \`term\` queries?](https://discuss.elastic.co/t/should-i-use-keyword-in-term-queries/229960)
**Author:** [@tterranigma](https://discuss.elastic.co/u/tterranigma)\ **Replies:** 4\ **Last updated:** [April 27, 2020, 3:02pm UTC](https://discuss.elastic.co/t/should-i-use-keyword-in-term-queries/229960 "2020-04-27T15:02:21Z")
I parse a file with filebeat and send it to elasticsearch where I parse it with an ingest node into fields. The problem I have is that I want to use term queries to match the text of one of those fields. Until 2 days ag… --- ## [Request of field + value & samefield + anothervalue combinations using bool must or query\_string - ask for help](https://discuss.elastic.co/t/request-of-field-value-samefield-anothervalue-combinations-using-bool-must-or-query-string-ask-for-help/215395)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 4\ **Last updated:** [January 25, 2020, 10:53am UTC](https://discuss.elastic.co/t/request-of-field-value-samefield-anothervalue-combinations-using-bool-must-or-query-string-ask-for-help/215395 "2020-01-25T10:53:11Z")
Hi, i just tried to build following request to count documents containing player active status but no match found: GET /players/\_search { "size": 0, "query": { "bool": { "must" : \[ {"ter… --- ## [Logstash Parsing Error for Field which contains Spaces](https://discuss.elastic.co/t/logstash-parsing-error-for-field-which-contains-spaces/57083)
**Author:** [@rathna](https://discuss.elastic.co/u/rathna)\ **Replies:** 4\ **Last updated:** [August 8, 2016, 4:53am UTC](https://discuss.elastic.co/t/logstash-parsing-error-for-field-which-contains-spaces/57083 "2016-08-08T04:53:23Z")
Hi I am trying to parse the below log line by mutating the pipe symbol with space. However some time there are few field value contains some spaces in between(The last field in the example given below) and after parsi… --- ## [Elasticsearch index not\_analyzed](https://discuss.elastic.co/t/elasticsearch-index-not-analyzed/37932)
**Author:** [@guoyiqin](https://discuss.elastic.co/u/guoyiqin)\ **Replies:** 4\ **Last updated:** [December 25, 2015, 2:15am UTC](https://discuss.elastic.co/t/elasticsearch-index-not-analyzed/37932 "2015-12-25T02:15:50Z")
I have a data, example: a b this data beginning with multiple spaces and more than one space between this data. My mapping set no\_analyzed, save this data to es,when search this data,This data has only one space, example… [Previous page](https://discuss.elastic.co/top.md?page=1113&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1115&per_page=50&period=all)