# Top **URL:** https://discuss.elastic.co/top.md?page=1155&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1156 --- ## [Office365 Logstash parser](https://discuss.elastic.co/t/office365-logstash-parser/141842)
**Author:** [@a899090](https://discuss.elastic.co/u/a899090)\ **Replies:** 3\ **Last updated:** [July 30, 2018, 11:09am UTC](https://discuss.elastic.co/t/office365-logstash-parser/141842 "2018-07-30T11:09:33Z")
Hi I need some help running this logstash config, when running in ubuntu it keeps on complaining about line 47 where it expected # or =\> but i can't see the problem with the below. Any help will be appreciated. input {… --- ## [Nodes not joining cluster on Centos 6.2 using ElasticSearch 5.2.2](https://discuss.elastic.co/t/nodes-not-joining-cluster-on-centos-6-2-using-elasticsearch-5-2-2/80666)
**Author:** [@abhishekash](https://discuss.elastic.co/u/abhishekash)\ **Replies:** 8\ **Last updated:** [April 5, 2017, 1:01pm UTC](https://discuss.elastic.co/t/nodes-not-joining-cluster-on-centos-6-2-using-elasticsearch-5-2-2/80666 "2017-04-05T13:01:08Z")
I have two nodes in different physical machines : cluster.name: ss node.name: node3 path.data: /elasticsearch/elasticsearch\_data path.logs: /elasticsearch/elasticsearch\_logs bootstrap.memory\_lock: true network.ho… --- ## [Beats : Error decoding JSON: json: cannot unmarshal array](https://discuss.elastic.co/t/beats-error-decoding-json-json-cannot-unmarshal-array/52545)
**Author:** [@sahas](https://discuss.elastic.co/u/sahas)\ **Replies:** 3\ **Last updated:** [June 13, 2016, 11:43am UTC](https://discuss.elastic.co/t/beats-error-decoding-json-json-cannot-unmarshal-array/52545 "2016-06-13T11:43:30Z")
I'm trying out the latest beta (filebeat-5.0.0-alpha3-darwin-x64). Its working as expected for simple .json object. However, getting below error when I try to ship an array \[{"name":"first","count":100},{"name":"second",… --- ## [Error when creating email alert in Cloud](https://discuss.elastic.co/t/error-when-creating-email-alert-in-cloud/258168)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 2\ **Last updated:** [December 11, 2020, 3:10pm UTC](https://discuss.elastic.co/t/error-when-creating-email-alert-in-cloud/258168 "2020-12-11T15:10:10Z")
When attempting to create an email alert I get the following error: Action failed to run The following error was found: error sending email Details: 139794888578880:error:1408F10B:SSL routines:ssl3\_get\_record:wrong ver… --- ## [Does Elastic APM/RUM allow us to save sessions?](https://discuss.elastic.co/t/does-elastic-apm-rum-allow-us-to-save-sessions/328187)
**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\ **Replies:** 7\ **Last updated:** [January 6, 2026, 3:12pm UTC](https://discuss.elastic.co/t/does-elastic-apm-rum-allow-us-to-save-sessions/328187 "2026-01-06T15:12:34Z")
I'm trying to spec out APM to replace Dynatrace RUM. Are we able to have session playback? --- ## [ES query to match all elements in array](https://discuss.elastic.co/t/es-query-to-match-all-elements-in-array/250364)
**Author:** [@GeorgetaPojoga](https://discuss.elastic.co/u/GeorgetaPojoga)\ **Replies:** 1\ **Last updated:** [September 30, 2020, 12:03pm UTC](https://discuss.elastic.co/t/es-query-to-match-all-elements-in-array/250364 "2020-09-30T12:03:24Z")
So I got this document with a nested array that I want to filter with this query. I want ES to return all documents where all items have changes = 0 and that only. If document has even a single item in the list with a c… --- ## [Filebeat.yml include\_lines and decode\_json can't work together](https://discuss.elastic.co/t/filebeat-yml-include-lines-and-decode-json-cant-work-together/131388)
**Author:** [@Qing](https://discuss.elastic.co/u/Qing)\ **Replies:** 1\ **Last updated:** [May 11, 2018, 7:07am UTC](https://discuss.elastic.co/t/filebeat-yml-include-lines-and-decode-json-cant-work-together/131388 "2018-05-11T07:07:18Z")
Hi: Can anyone help me ? I meet problem using filebeat, error message: Exiting: Error in initing prospector: When using the JSON decoder and line filtering together, you need to specify a message\_key value accessing '… --- ## [Winlogbeat for XP](https://discuss.elastic.co/t/winlogbeat-for-xp/113253)
**Author:** [@hsiuming](https://discuss.elastic.co/u/hsiuming)\ **Replies:** 1\ **Last updated:** [January 2, 2018, 4:08pm UTC](https://discuss.elastic.co/t/winlogbeat-for-xp/113253 "2018-01-02T16:08:05Z")
Hello We save the windows XP event log to elasticsearch by winlogbeat. But we find there is no field of event\_data.Binary in elasticsearch. For win7 system we can get a field:"event\_data.Binary XXXXXXXXXXXXXX". Is th… --- ## [Migrating Multiple table from SQL Server to Elasticsearch](https://discuss.elastic.co/t/migrating-multiple-table-from-sql-server-to-elasticsearch/110919)
**Author:** [@Anshuman\_Kirty](https://discuss.elastic.co/u/Anshuman_Kirty)\ **Replies:** 1\ **Last updated:** [December 11, 2017, 6:38am UTC](https://discuss.elastic.co/t/migrating-multiple-table-from-sql-server-to-elasticsearch/110919 "2017-12-11T06:38:33Z")
I am trying to migrate all the Tables from the database. The output received gives only the 1st Table data values in the elasticsearch. Can anyone help me. Thanks in Advance. logstash.conf input { jdbc { jdbc\_driver\_… --- ## [Tcp output exception](https://discuss.elastic.co/t/tcp-output-exception/317227)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 5\ **Last updated:** [October 26, 2022, 9:44am UTC](https://discuss.elastic.co/t/tcp-output-exception/317227 "2022-10-26T09:44:14Z")
Hie Everyone, I have configured pipeline to read logs over tcp plugin. But im feeling tcp output exception every now and than the tcp connection is getting closed. Error logs: tcp output exception {:host=\>"10.109.0.0"… --- ## [Kibana 7.5.2 under container FATAL Error: Optimizations failure. 5818 modules](https://discuss.elastic.co/t/kibana-7-5-2-under-container-fatal-error-optimizations-failure-5818-modules/217694)
**Author:** [@elemus](https://discuss.elastic.co/u/elemus)\ **Replies:** 5\ **Last updated:** [February 6, 2020, 11:06pm UTC](https://discuss.elastic.co/t/kibana-7-5-2-under-container-fatal-error-optimizations-failure-5818-modules/217694 "2020-02-06T23:06:30Z")
Hi, I'm working on Kibana 7.5.2 docker container trying to connect to elasticsearch cluster using docker-compose but can't initialize, I tried several solutions of another versions, like disable xpack.reporting or xpack.… --- ## [Kibana thrown a tantrum with Dashboard. ES timeout 30000ms](https://discuss.elastic.co/t/kibana-thrown-a-tantrum-with-dashboard-es-timeout-30000ms/57222)
**Author:** [@gh0stid](https://discuss.elastic.co/u/gh0stid)\ **Replies:** 5\ **Last updated:** [August 5, 2016, 12:42pm UTC](https://discuss.elastic.co/t/kibana-thrown-a-tantrum-with-dashboard-es-timeout-30000ms/57222 "2016-08-05T12:42:57Z")
Hello ! despite the title it is related to ES. somehow my ELK stack stop working after 50 shards or so (46) (9 day 5shards per indices plus kibana. ) I have to close indices to get it working again, OR I get 30000ms ti… --- ## [A massive amount of active generic thread](https://discuss.elastic.co/t/a-massive-amount-of-active-generic-thread/25183)
**Author:** [@liu\_wei](https://discuss.elastic.co/u/liu_wei)\ **Replies:** 5\ **Last updated:** [July 10, 2015, 1:07am UTC](https://discuss.elastic.co/t/a-massive-amount-of-active-generic-thread/25183 "2015-07-10T01:07:21Z")
My nodes recently started to have accumulate amount of active generic threads, growing steadily to 20k+, then the node is crashed. I tried to look from the hot thread but it's not responding. Any other ways to troublesh… --- ## [Elasticsearch didn't create ca.key. How can i create new key/crt for new instances?](https://discuss.elastic.co/t/elasticsearch-didnt-create-ca-key-how-can-i-create-new-key-crt-for-new-instances/215479)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 9:48am UTC](https://discuss.elastic.co/t/elasticsearch-didnt-create-ca-key-how-can-i-create-new-key-crt-for-new-instances/215479 "2020-01-20T09:48:03Z")
Hi guys, I've used this documentation to encrypt the communication in the ELK (7.4.0) cluster: https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash especially this… --- ## [Replica shard stuck at initializing after client and data node restart](https://discuss.elastic.co/t/replica-shard-stuck-at-initializing-after-client-and-data-node-restart/16529)
**Author:** [@Glenn\_Snead](https://discuss.elastic.co/u/Glenn_Snead)\ **Replies:** 2\ **Last updated:** [March 24, 2014, 3:20pm UTC](https://discuss.elastic.co/t/replica-shard-stuck-at-initializing-after-client-and-data-node-restart/16529 "2014-03-24T15:20:07Z")
I have a six node cluster: 2 master nodes and 4 client / data nodes. I have two indicies. One with data and one that is set aside for future use. I'm having trouble with the indicie that is in use. After making s… --- ## [Search source code and also use as store for them at the same time](https://discuss.elastic.co/t/search-source-code-and-also-use-as-store-for-them-at-the-same-time/219365)
**Author:** [@ice3man543](https://discuss.elastic.co/u/ice3man543)\ **Replies:** 6\ **Last updated:** [February 14, 2020, 4:20pm UTC](https://discuss.elastic.co/t/search-source-code-and-also-use-as-store-for-them-at-the-same-time/219365 "2020-02-14T16:20:52Z")
I am building a search engine for some internal code and we decided to use elasticsearch. The issue is i also need access to those documents directly with an ID while providing search on them. Reading around, some forum… --- ## [Delete oldest index if storage is full](https://discuss.elastic.co/t/delete-oldest-index-if-storage-is-full/301115)
**Author:** [@6NMgfDwZ3](https://discuss.elastic.co/u/6NMgfDwZ3)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 11:46pm UTC](https://discuss.elastic.co/t/delete-oldest-index-if-storage-is-full/301115 "2022-03-30T23:46:36Z")
Hello, ELK stack version: v7.x ... latest I've created an ILM policy that deletes the index if the index is older than x days. It works well. But sometimes too many documents arrive into the indexes so the storage bec… --- ## [Toggle](https://discuss.elastic.co/t/toggle/258497)
**Author:** [@ravishka](https://discuss.elastic.co/u/ravishka)\ **Replies:** 3\ **Last updated:** [December 29, 2020, 3:27pm UTC](https://discuss.elastic.co/t/toggle/258497 "2020-12-29T15:27:53Z")
Is there a way to put a toggle button on the kibana canvas? Is there any alternative solution? --- ## [Elasticsearch 7.6.0 - Security index is unavailable](https://discuss.elastic.co/t/elasticsearch-7-6-0-security-index-is-unavailable/236422)
**Author:** [@phaze-debug](https://discuss.elastic.co/u/phaze-debug)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 10:11pm UTC](https://discuss.elastic.co/t/elasticsearch-7-6-0-security-index-is-unavailable/236422 "2020-06-09T22:11:42Z")
We are using elastic search 7.6.0 as a package from the DCOS universe (3 master nodes, 6 data nodes, 1 ingest and 1 coordinator node) with xpack enabled (using native realm). We ran into an issue when the DCOS cluster wa… --- ## [Help to writing a request](https://discuss.elastic.co/t/help-to-writing-a-request/137152)
**Author:** [@atef](https://discuss.elastic.co/u/atef)\ **Replies:** 3\ **Last updated:** [June 24, 2018, 5:01pm UTC](https://discuss.elastic.co/t/help-to-writing-a-request/137152 "2018-06-24T17:01:04Z")
Hello I have two documents in the elastic search database document 1 { section = "baby" category = "Clothing" subcategory = "shoe" } document 2 { section = "baby" category = "Clothing" subcategory = "" } I … --- ## [How many ES nodes for 2 hardware servers](https://discuss.elastic.co/t/how-many-es-nodes-for-2-hardware-servers/67598)
**Author:** [@avdelst](https://discuss.elastic.co/u/avdelst)\ **Replies:** 3\ **Last updated:** [November 30, 2016, 11:45am UTC](https://discuss.elastic.co/t/how-many-es-nodes-for-2-hardware-servers/67598 "2016-11-30T11:45:31Z")
Hi all, When I have to server, each running multiple VM's what would be the correct number of ES nodes ? The goal is to still have a functoning ES cluster even when 1 server completely dies due to a hardware failure. … --- ## [Trying to build Timelion charts with metricbeat data](https://discuss.elastic.co/t/trying-to-build-timelion-charts-with-metricbeat-data/65006)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 3\ **Last updated:** [November 23, 2016, 3:07am UTC](https://discuss.elastic.co/t/trying-to-build-timelion-charts-with-metricbeat-data/65006 "2016-11-23T03:07:18Z")
Hey Folks, I have installed Kibana v5 and I'm trying to build some nice Timelion charts using postgres metrics data collected via Metricbeat. I have noticed a strange issue, maybe I'm missing the point here: I'm using … --- ## [Is the AWS S3 gateway deprecated?](https://discuss.elastic.co/t/is-the-aws-s3-gateway-deprecated/9962)
**Author:** [@Kubes](https://discuss.elastic.co/u/Kubes)\ **Replies:** 3\ **Last updated:** [May 27, 2014, 11:56am UTC](https://discuss.elastic.co/t/is-the-aws-s3-gateway-deprecated/9962 "2014-05-27T11:56:25Z")
I am setuping a new cluster on AWS and an looking at using the S3 gateway, but in the logs I saw: \[gateway.s3 \] \[Red Ghost\] shared gateway has been deprecated, please use the (default) local gateway … --- ## [Score based on integer value](https://discuss.elastic.co/t/score-based-on-integer-value/8907)
**Author:** [@Chris\_Yuska](https://discuss.elastic.co/u/Chris_Yuska)\ **Replies:** 3\ **Last updated:** [September 1, 2012, 1:23am UTC](https://discuss.elastic.co/t/score-based-on-integer-value/8907 "2012-09-01T01:23:22Z")
I've searched and I can't seem to find anyone else asking this sort of question. I have many Person objects that are searchable by name and should be scored by name match and number of mutual friends. Saying I have… --- ## [Build your own Beat in Go](https://discuss.elastic.co/t/build-your-own-beat-in-go/316066)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 4\ **Last updated:** [October 10, 2022, 5:38pm UTC](https://discuss.elastic.co/t/build-your-own-beat-in-go/316066 "2022-10-10T17:38:11Z")
I needed to send messages to Logstash using Beat from a little app I'm developing in Go. I've seen different ways to do it without doing calling services as filebeat to not create a dependency. I was taking a look to t… --- ## [Prebuilt dashboards for esrally](https://discuss.elastic.co/t/prebuilt-dashboards-for-esrally/276674)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 4\ **Last updated:** [June 23, 2021, 5:57am UTC](https://discuss.elastic.co/t/prebuilt-dashboards-for-esrally/276674 "2021-06-23T05:57:14Z")
Hi All, I have pushed the esrally metrics to dedicated elasticsearch cluster. are there any existing dashboards available so that I can make use of them for esrally metrics visualizations in kibana? --- ## [Json object containing json array need to insert using bulk in an index](https://discuss.elastic.co/t/json-object-containing-json-array-need-to-insert-using-bulk-in-an-index/179128)
**Author:** [@vinayak](https://discuss.elastic.co/u/vinayak)\ **Replies:** 4\ **Last updated:** [May 2, 2019, 11:52am UTC](https://discuss.elastic.co/t/json-object-containing-json-array-need-to-insert-using-bulk-in-an-index/179128 "2019-05-02T11:52:04Z")
need to insert json object to an index.i know it is a silly question but not able to get rid of that.sample json data: {"test":\[ { "sourceNumber": 6, "sourceName": "Trade Days", "result": "false" }, { "sourceNumb… --- ## [Cannot create custom track](https://discuss.elastic.co/t/cannot-create-custom-track/111589)
**Author:** [@Andrey\_Masunov](https://discuss.elastic.co/u/Andrey_Masunov)\ **Replies:** 4\ **Last updated:** [December 14, 2017, 9:57am UTC](https://discuss.elastic.co/t/cannot-create-custom-track/111589 "2017-12-14T09:57:30Z")
I've tried to create my track for rally, step by step based on (http://esrally.readthedocs.io/en/stable/adding\_tracks.html#) But already at step esrally list tracks --track-path=~/rally-tracks/tutorial I've faced error… --- ## [elasticsearch.exceptions.NotFoundError: NotFoundError(404, u'search\_phase\_execution\_exception', u'No search context found for id \[id\_num\]')](https://discuss.elastic.co/t/elasticsearch-exceptions-notfounderror-notfounderror-404-usearch-phase-execution-exception-uno-search-context-found-for-id-id-num/305702)
**Author:** [@alex\_bernadi](https://discuss.elastic.co/u/alex_bernadi)\ **Replies:** 1\ **Last updated:** [May 30, 2022, 4:20am UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-notfounderror-notfounderror-404-usearch-phase-execution-exception-uno-search-context-found-for-id-id-num/305702 "2022-05-30T04:20:42Z")
Hi all! Firts of all I would like to say that this is my first post here so forgive me if I make any mistake :). I am trying to retrieve a large number of documents from an Elasticsearch index, the query to Elasticsear… --- ## [Big data: Log analysis with ELK and Spark](https://discuss.elastic.co/t/big-data-log-analysis-with-elk-and-spark/128142)
**Author:** [@Malek\_Soltani](https://discuss.elastic.co/u/Malek_Soltani)\ **Replies:** 1\ **Last updated:** [April 16, 2018, 8:13pm UTC](https://discuss.elastic.co/t/big-data-log-analysis-with-elk-and-spark/128142 "2018-04-16T20:13:31Z")
Hi, I'm new to ELK stack and Big data. Now, i'm trying to build a one node Log Analytics tool based on ELK+Kafka+Spark Machine Learning. I'm trying to implement the lambda architecture with the following layers: Batch:… --- ## [Parsing JSON in JSON (docker logs)](https://discuss.elastic.co/t/parsing-json-in-json-docker-logs/65663)
**Author:** [@Jeff](https://discuss.elastic.co/u/Jeff)\ **Replies:** 1\ **Last updated:** [November 10, 2016, 1:12pm UTC](https://discuss.elastic.co/t/parsing-json-in-json-docker-logs/65663 "2016-11-10T13:12:05Z")
We are parsing docker logs using filebeat 5. We parse the JSON using the following options: json.message\_key: log json.keys\_under\_root: true json.add\_error\_key: true However, the log messages from the docker co… --- ## [Logstash DNS Filter Issue](https://discuss.elastic.co/t/logstash-dns-filter-issue/123818)
**Author:** [@sysadmin007](https://discuss.elastic.co/u/sysadmin007)\ **Replies:** 0\ **Last updated:** [March 13, 2018, 10:43pm UTC](https://discuss.elastic.co/t/logstash-dns-filter-issue/123818 "2018-03-13T22:43:55Z")
Hello All, I setup an ELK Stack with the latest version of logstash 6.2.2 on Ubuntu 17.10. The setup went ok i have netflow records in my Kibana dashboard and most everything seems to be working properly. The only issue… --- ## [Kibana Server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/322780)
**Author:** [@Rishvana](https://discuss.elastic.co/u/Rishvana)\ **Replies:** 8\ **Last updated:** [January 10, 2023, 4:04am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/322780 "2023-01-10T04:04:10Z")
Hi Team, We are not able to login to kibana application as it throws an error "Kibana server is not ready yet. we recently renewed ssl certificate for kibana and we done sanity check at that time it works fine. can let… --- ## [Logstash dynamically create field name](https://discuss.elastic.co/t/logstash-dynamically-create-field-name/246326)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 8\ **Last updated:** [August 26, 2020, 10:00pm UTC](https://discuss.elastic.co/t/logstash-dynamically-create-field-name/246326 "2020-08-26T22:00:42Z")
this is my input {"dataflow":\[{"gate": "v204.06", "attrmath":"v206.07"}\]} I want output like dataflow.m1: gate dataflow.m1\_version: v204.06 dataflow.m2: attrmath dataflow.m2\_version: v206.07 I want this m1, m2, m3… --- ## [How i can add a new dependency to kibana?](https://discuss.elastic.co/t/how-i-can-add-a-new-dependency-to-kibana/202694)
**Author:** [@Ravil](https://discuss.elastic.co/u/Ravil)\ **Replies:** 8\ **Last updated:** [October 18, 2019, 4:52pm UTC](https://discuss.elastic.co/t/how-i-can-add-a-new-dependency-to-kibana/202694 "2019-10-18T16:52:42Z")
I want to add a new module to a project kibana. I installed kibana from this instruction https://www.elastic.co/guide/en/kibana/current/brew.html And after i wrote two new plugins for kibana. This plugins used one big… --- ## [ESRally Not Responding Search Queries if it exceeds from 280 Clients](https://discuss.elastic.co/t/esrally-not-responding-search-queries-if-it-exceeds-from-280-clients/181809)
**Author:** [@Balmukund](https://discuss.elastic.co/u/Balmukund)\ **Replies:** 8\ **Last updated:** [May 21, 2019, 2:43pm UTC](https://discuss.elastic.co/t/esrally-not-responding-search-queries-if-it-exceeds-from-280-clients/181809 "2019-05-21T14:43:12Z")
Hi, I am doing the Elasticsearch -6.6.2 Search Queries Benchmark on NVMe device(Non-Volatile Memory). I am having mixed queries of Simple, Complex and moderate. But ESRally not responding if it exceeds 280 clients. Be… --- ## [Kibana dashboard for index pattern with no time filter field still has date picker](https://discuss.elastic.co/t/kibana-dashboard-for-index-pattern-with-no-time-filter-field-still-has-date-picker/190290)
**Author:** [@NickBook](https://discuss.elastic.co/u/NickBook)\ **Replies:** 2\ **Last updated:** [July 12, 2019, 7:43pm UTC](https://discuss.elastic.co/t/kibana-dashboard-for-index-pattern-with-no-time-filter-field-still-has-date-picker/190290 "2019-07-12T19:43:14Z")
Hi Kibana community! I've got an index pattern with that doesn't use a time filter field. However, in my Kibana dashboard, there is still a a date picker next to the filter bar. In my discover tab, there is no date pick… --- ## [Elasticsearch - Avoid Word based and fuzzy based match when Phrase is matched](https://discuss.elastic.co/t/elasticsearch-avoid-word-based-and-fuzzy-based-match-when-phrase-is-matched/161651)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 2\ **Last updated:** [December 24, 2018, 12:05pm UTC](https://discuss.elastic.co/t/elasticsearch-avoid-word-based-and-fuzzy-based-match-when-phrase-is-matched/161651 "2018-12-24T12:05:21Z")
Hi, I have a query which searches on phrase, word level and fuzziness of words searched for. Is there a method where in I can restrict word and fuzzy matches when exact phrase is matched? Query developed is : { "quer… --- ## [How do I handle mapping explosion?](https://discuss.elastic.co/t/how-do-i-handle-mapping-explosion/116914)
**Author:** [@zachy](https://discuss.elastic.co/u/zachy)\ **Replies:** 2\ **Last updated:** [January 24, 2018, 7:40pm UTC](https://discuss.elastic.co/t/how-do-i-handle-mapping-explosion/116914 "2018-01-24T19:40:28Z")
I understand that the default index number is 1000, and that increasing it can work in the short term, but is not a viable long term solution, especially if there is a spike in the ingestion of data. I haven't seen any … --- ## [Regex queries don't appear to work at all in kibana](https://discuss.elastic.co/t/regex-queries-dont-appear-to-work-at-all-in-kibana/70222)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 2\ **Last updated:** [December 30, 2016, 5:25pm UTC](https://discuss.elastic.co/t/regex-queries-dont-appear-to-work-at-all-in-kibana/70222 "2016-12-30T17:25:33Z")
I have been having a lot of problems getting any regex queries to work at all from kibana. We have a field with an exact string value of "Expected group query to return a single result but instead got 1261". The field… --- ## [Topbeat Dashboard shows strange numbers in RC1](https://discuss.elastic.co/t/topbeat-dashboard-shows-strange-numbers-in-rc1/33988)
**Author:** [@owulff](https://discuss.elastic.co/u/owulff)\ **Replies:** 2\ **Last updated:** [November 12, 2015, 12:20pm UTC](https://discuss.elastic.co/t/topbeat-dashboard-shows-strange-numbers-in-rc1/33988 "2015-11-12T12:20:12Z")
Hi all I've upgraded to RC1. I updated the template, deleted old indexes and re-created the index pattern in Kibana. Finally I updated the Beats dashboard. I liked to see % for filesystem usage and GB, MB etc in Beta 4… --- ## [Delete by query fails often with HTTP 503](https://discuss.elastic.co/t/delete-by-query-fails-often-with-http-503/16415)
**Author:** [@Thomas\_S](https://discuss.elastic.co/u/Thomas_S)\ **Replies:** 2\ **Last updated:** [March 18, 2014, 8:19pm UTC](https://discuss.elastic.co/t/delete-by-query-fails-often-with-http-503/16415 "2014-03-18T20:19:47Z")
Hi, We often get failures when using the delete by query API. The response is an HTTP 503 with a body like this: {"\_indices": {"myindex": {"\_shards": {"successful": 2, "failed": 58, "total": 60}}}} Is there … --- ## [Circles visible in line graph on dashboard](https://discuss.elastic.co/t/circles-visible-in-line-graph-on-dashboard/88770)
**Author:** [@Preston\_Newton](https://discuss.elastic.co/u/Preston_Newton)\ **Replies:** 5\ **Last updated:** [June 19, 2017, 6:17pm UTC](https://discuss.elastic.co/t/circles-visible-in-line-graph-on-dashboard/88770 "2017-06-19T18:17:41Z")
Circles from line graph still visible on dashboard. Within the visuaization took the circles are removed(the box is unchecked) but once added to a dashboard the circles reappear, and they are still missing from the visu… --- ## [Using percolate in a Logstash filter?](https://discuss.elastic.co/t/using-percolate-in-a-logstash-filter/76381)
**Author:** [@es435](https://discuss.elastic.co/u/es435)\ **Replies:** 5\ **Last updated:** [March 16, 2017, 12:25am UTC](https://discuss.elastic.co/t/using-percolate-in-a-logstash-filter/76381 "2017-03-16T00:25:36Z")
I have an index of percolator queries on Elasticsearch and I'm trying to write a Logstash config file with a filter that will allow me to percolate documents against those queries as I index them, sending an alert if the… --- ## [Elastic search data format](https://discuss.elastic.co/t/elastic-search-data-format/59552)
**Author:** [@Igor\_Masternoy](https://discuss.elastic.co/u/Igor_Masternoy)\ **Replies:** 5\ **Last updated:** [September 5, 2016, 11:30am UTC](https://discuss.elastic.co/t/elastic-search-data-format/59552 "2016-09-05T11:30:09Z")
As I we know elastic search based on Apache Lucene and store it's data in Lucene's indexes in binary format. Is there any way to save the raw json data? --- ## [Pick latest data](https://discuss.elastic.co/t/pick-latest-data/256361)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 7\ **Last updated:** [December 9, 2020, 11:06am UTC](https://discuss.elastic.co/t/pick-latest-data/256361 "2020-12-09T11:06:09Z")
Hi, I am bulk inserting my data into an index multiple times in a day. I want to get all data with last timestamp(with last timestamp I inserted.). --- ## ["Unable to connect to Elasticsearch. Error: \[search\_phase\_execution\_exception\] all shards failed"](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-search-phase-execution-exception-all-shards-failed/283344)
**Author:** [@ShashikanthKomandoor](https://discuss.elastic.co/u/ShashikanthKomandoor)\ **Replies:** 1\ **Last updated:** [September 5, 2021, 10:22pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-search-phase-execution-exception-all-shards-failed/283344 "2021-09-05T22:22:02Z")
Hi Team, I have been running ELK Cluster of version 7.8 with 3 master nodes and 5 data nodes. I am running this on RHEL 7.5. I have installed httpd to proxy the requests to Kibana. I installed httpd, Kibana, Elasticsear… --- ## [ElasticsearchException\[Failed to create native process factories for Machine Learning\] - version 7.1.0](https://discuss.elastic.co/t/elasticsearchexception-failed-to-create-native-process-factories-for-machine-learning-version-7-1-0/182888)
**Author:** [@eliassal](https://discuss.elastic.co/u/eliassal)\ **Replies:** 1\ **Last updated:** [May 27, 2019, 10:30am UTC](https://discuss.elastic.co/t/elasticsearchexception-failed-to-create-native-process-factories-for-machine-learning-version-7-1-0/182888 "2019-05-27T10:30:38Z")
I am trying to run elasticsearch in a docker container, getting the following error in the logs. I understood that it was a known bug and fixed in recent versions. I use elasticsearch version 7.1.0. Thanks for your help … --- ## [How to Persist Kibana Dashboards](https://discuss.elastic.co/t/how-to-persist-kibana-dashboards/167343)
**Author:** [@Arnav\_Bose](https://discuss.elastic.co/u/Arnav_Bose)\ **Replies:** 1\ **Last updated:** [February 6, 2019, 8:36pm UTC](https://discuss.elastic.co/t/how-to-persist-kibana-dashboards/167343 "2019-02-06T20:36:16Z")
Hi, We created a few kibana dashboards with corresponding search and visualization. We can export the json files and import them to other environments. But if Kibana is restarted we are losing all the dashboards which w… --- ## [Creating elasticsearch cluster on the same machine](https://discuss.elastic.co/t/creating-elasticsearch-cluster-on-the-same-machine/122468)
**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\ **Replies:** 1\ **Last updated:** [March 5, 2018, 9:34am UTC](https://discuss.elastic.co/t/creating-elasticsearch-cluster-on-the-same-machine/122468 "2018-03-05T09:34:00Z")
I have a use case where I need to create a single elasticsearch cluster of multiple nodes on the same machine. I have a heavy hardware and this is for a dev environment only. I am using ES 6.2.2 and having hard time crea… [Previous page](https://discuss.elastic.co/top.md?page=1154&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1156&per_page=50&period=all)