# Top

**URL:** https://discuss.elastic.co/top.md?page=1156&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1157

---

## [\[UPDATED\] Logstash output to elasticsearch in docker](https://discuss.elastic.co/t/updated-logstash-output-to-elasticsearch-in-docker/87789)

<div class="topic-metadata">

**Author:** [@Jaxon\_Kochel](https://discuss.elastic.co/u/Jaxon_Kochel)\
**Replies:** 1\
**Last updated:** [June 2, 2017, 2:32pm UTC](https://discuss.elastic.co/t/updated-logstash-output-to-elasticsearch-in-docker/87789 "2017-06-02T14:32:46Z")

</div>

I'm currently experiencing an issue getting my logstash output to get to elasticsearch inside docker containers I start elasticsearch like this: docker run -d --name elasticsearch -p 9200:9200 -p 9300:9300 docker.el…

---

## [独自ログフォーマットをlogstashで加工する方法](https://discuss.elastic.co/t/logstash/51892)

<div class="topic-metadata">

**Author:** [@kohenro19](https://discuss.elastic.co/u/kohenro19)\
**Replies:** 1\
**Last updated:** [June 8, 2016, 5:05am UTC](https://discuss.elastic.co/t/logstash/51892 "2016-06-08T05:05:28Z")

</div>

ベンダー特有の独自ログフォーマットをlogstashで取り込み・加工する方法をご教示頂けませんでしょうか。 ユーザ(アクセスIDまたはIPアドレス)が、どの無線アクセスポイント(部屋番号)をどの時間帯で利用したか可視化したいです。 ベンダー特有の独自ログフォーマットは添付しています。

---

## [Rufus-scheduler error: TZInfo::PeriodNotFound](https://discuss.elastic.co/t/rufus-scheduler-error-tzinfo-periodnotfound/278811)

<div class="topic-metadata">

**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\
**Replies:** 3\
**Last updated:** [July 26, 2021, 12:12pm UTC](https://discuss.elastic.co/t/rufus-scheduler-error-tzinfo-periodnotfound/278811 "2021-07-26T12:12:58Z")

</div>

Hi all, I recently posted a question about my logstash pipeline at some point (seemingly) randomly not updating the jdbc metadata for sql\_last\_value substitution. For completeness, I'll include the input plugin of my co…

---

## [\[Filebeat System\] Syslog dashboard ECS showing no results found](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs-showing-no-results-found/276103)

<div class="topic-metadata">

**Author:** [@ShabariNath](https://discuss.elastic.co/u/ShabariNath)\
**Replies:** 3\
**Last updated:** [June 18, 2021, 8:47am UTC](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs-showing-no-results-found/276103 "2021-06-18T08:47:52Z")

</div>

\*\*filebeat.yml file \*\* \*\*###################### Filebeat Configuration Example #########################\*\* \*\*# This file is an example configuration file highlighting only the most common\*\* \*\*# options. The filebeat.re…

---

## [Text field to convert as date and perform math Operation](https://discuss.elastic.co/t/text-field-to-convert-as-date-and-perform-math-operation/260785)

<div class="topic-metadata">

**Author:** [@Sathish22](https://discuss.elastic.co/u/Sathish22)\
**Replies:** 3\
**Last updated:** [January 13, 2021, 2:40pm UTC](https://discuss.elastic.co/t/text-field-to-convert-as-date-and-perform-math-operation/260785 "2021-01-13T14:40:43Z")

</div>

Hi All, I need to convert a text field to date data type and perform a math operation on it something like this Process ID Process Name Start Time End Time Difference 1 Process1 2021-01-12T13:16:20.19Z 2021-01…

---

## [How to set a time range in an Alert?](https://discuss.elastic.co/t/how-to-set-a-time-range-in-an-alert/248743)

<div class="topic-metadata">

**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\
**Replies:** 3\
**Last updated:** [September 28, 2020, 2:22pm UTC](https://discuss.elastic.co/t/how-to-set-a-time-range-in-an-alert/248743 "2020-09-28T14:22:37Z")

</div>

Hi. How can I specify a time range in a metric alert? I want to trigger the alarm only if @timestamp is between an interval.

---

## [Kibana dashboards for Kafka](https://discuss.elastic.co/t/kibana-dashboards-for-kafka/183957)

<div class="topic-metadata">

**Author:** [@danielpetisme](https://discuss.elastic.co/u/danielpetisme)\
**Replies:** 3\
**Last updated:** [June 10, 2019, 11:10pm UTC](https://discuss.elastic.co/t/kibana-dashboards-for-kafka/183957 "2019-06-10T23:10:59Z")

</div>

Hello, I'm considering to monitor my Kafka platform components (brokers, zookeepers, etc.) and the associated JVMs. I'm wondering if there is Kibana dashboards already existing?

---

## [Update Snapshot in the repo with same name?](https://discuss.elastic.co/t/update-snapshot-in-the-repo-with-same-name/181446)

<div class="topic-metadata">

**Author:** [@Mohit\_Ruke](https://discuss.elastic.co/u/Mohit_Ruke)\
**Replies:** 3\
**Last updated:** [May 16, 2019, 6:57pm UTC](https://discuss.elastic.co/t/update-snapshot-in-the-repo-with-same-name/181446 "2019-05-16T18:57:46Z")

</div>

Is there any way to update a snapshot in a repo after adding new records to an index?

---

## [Elasticsearch docker containers - unable to add second node](https://discuss.elastic.co/t/elasticsearch-docker-containers-unable-to-add-second-node/106443)

<div class="topic-metadata">

**Author:** [@jagga13](https://discuss.elastic.co/u/jagga13)\
**Replies:** 3\
**Last updated:** [November 5, 2017, 10:42pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-containers-unable-to-add-second-node/106443 "2017-11-05T22:42:42Z")

</div>

Hello, I am trying to deploy a 2 node elasticsearch test cluster in docker and was able to get up the first node as the master without any issues but when I try to startup the second es docker container it sees the mast…

---

## [Data Type Conversion of a Field](https://discuss.elastic.co/t/data-type-conversion-of-a-field/78307)

<div class="topic-metadata">

**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Replies:** 3\
**Last updated:** [March 20, 2017, 5:15am UTC](https://discuss.elastic.co/t/data-type-conversion-of-a-field/78307 "2017-03-20T05:15:55Z")

</div>

Hi - I have consumed a community beat (wmibeat) and running fine and sending the data directly to the Elastic search engine. There are few fields which are been with 'String' data type, even though we get a numeric value…

---

## [How make multi shipping without duplicates](https://discuss.elastic.co/t/how-make-multi-shipping-without-duplicates/27583)

<div class="topic-metadata">

**Author:** [@inceptor](https://discuss.elastic.co/u/inceptor)\
**Replies:** 3\
**Last updated:** [August 21, 2015, 9:39am UTC](https://discuss.elastic.co/t/how-make-multi-shipping-without-duplicates/27583 "2015-08-21T09:39:02Z")

</div>

Hello everybody, I was try it some examples (architectural) from the documentation : https://www.elastic.co/guide/en/logstash/current/deploying-and-scaling.html#deploying-scaling But I have now a problem : The multi …

---

## [Unable to connect to Elasticsearch from Kibana](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-from-kibana/174587)

<div class="topic-metadata">

**Author:** [@surya2](https://discuss.elastic.co/u/surya2)\
**Replies:** 6\
**Last updated:** [April 1, 2019, 6:42pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-from-kibana/174587 "2019-04-01T18:42:16Z")

</div>

Hello, I am getting below error in kibana 6.5.4 "message":"Rejecting mapping update to \[.kibana\_1\] as the final mapping would have more than 1 type: \[doc, type\]: \[illegal\_argument\_exception\] Rejecting mapping update to…

---

## [Connect ES and KB](https://discuss.elastic.co/t/connect-es-and-kb/133624)

<div class="topic-metadata">

**Author:** [@Meghna\_Mane](https://discuss.elastic.co/u/Meghna_Mane)\
**Replies:** 6\
**Last updated:** [May 29, 2018, 11:35am UTC](https://discuss.elastic.co/t/connect-es-and-kb/133624 "2018-05-29T11:35:33Z")

</div>

I have setup elasticsearch on one separate server and Logstatsh & Kibana (Both) on one server. 1st server- ES 2nd server- Logstatsh and kibana I have added Elasticsearch.yml network.host: 0.0.0.0 and kibana.yml se…

---

## [How to transfer the array to csv format](https://discuss.elastic.co/t/how-to-transfer-the-array-to-csv-format/125685)

<div class="topic-metadata">

**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\
**Replies:** 6\
**Last updated:** [March 30, 2018, 2:18am UTC](https://discuss.elastic.co/t/how-to-transfer-the-array-to-csv-format/125685 "2018-03-30T02:18:21Z")

</div>

Hi experts, I have parsed the XML file and get some useful NODEs' information, they are saved as a array format. I want to draw a trend chart by using Kibana, but I can't draw it because all of data are saved as array f…

---

## [Filter Cache Statistics](https://discuss.elastic.co/t/filter-cache-statistics/68330)

<div class="topic-metadata">

**Author:** [@manast](https://discuss.elastic.co/u/manast)\
**Replies:** 6\
**Last updated:** [December 8, 2016, 8:45am UTC](https://discuss.elastic.co/t/filter-cache-statistics/68330 "2016-12-08T08:45:26Z")

</div>

Hello, the query cache statistics of my cluster contain following values: "query\_cache": { "memory\_size\_in\_bytes": 113744184, "total\_count": 394174905, "hit\_count": 17192100, …

---

## [Issue with Elasticsearch 1.7.0 queries with Java 8 Update 66 on Mac](https://discuss.elastic.co/t/issue-with-elasticsearch-1-7-0-queries-with-java-8-update-66-on-mac/43343)

<div class="topic-metadata">

**Author:** [@himanshu.sati](https://discuss.elastic.co/u/himanshu.sati)\
**Replies:** 6\
**Last updated:** [March 8, 2016, 12:09pm UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-1-7-0-queries-with-java-8-update-66-on-mac/43343 "2016-03-08T12:09:06Z")

</div>

I have a use case where i am trying to fetch some data from elasticsearch in sorted order , below is the java code to do so. QueryBuilder queryBuilder = QueryBuilders.boolQuery().must(QueryBuilders.matchQuery("id", id)…

---

## [New install of ElasticSearch Fail](https://discuss.elastic.co/t/new-install-of-elasticsearch-fail/185882)

<div class="topic-metadata">

**Author:** [@sean-39](https://discuss.elastic.co/u/sean-39)\
**Replies:** 4\
**Last updated:** [June 18, 2019, 5:12pm UTC](https://discuss.elastic.co/t/new-install-of-elasticsearch-fail/185882 "2019-06-18T17:12:55Z")

</div>

ElasticSearch Service Fails Any help would be nice! trying to play with and start learning ElasticStack but when i try to install on CentOS I hit failure straight away. Below I included information about the system, fa…

---

## [Kibana Client Request timed out with Logstash Netflow module](https://discuss.elastic.co/t/kibana-client-request-timed-out-with-logstash-netflow-module/144255)

<div class="topic-metadata">

**Author:** [@ccutmt](https://discuss.elastic.co/u/ccutmt)\
**Replies:** 4\
**Last updated:** [August 17, 2018, 10:09pm UTC](https://discuss.elastic.co/t/kibana-client-request-timed-out-with-logstash-netflow-module/144255 "2018-08-17T22:09:11Z")

</div>

Hi, I've been trying to connect Logstash Netflow module with Kibana. I followed the documentation in the link. https://www.elastic.co/guide/en/logstash/6.x/netflow-module.html My whole scenario is that I have elasticse…

---

## [Query database from a filter](https://discuss.elastic.co/t/query-database-from-a-filter/50367)

<div class="topic-metadata">

**Author:** [@wmikew5672](https://discuss.elastic.co/u/wmikew5672)\
**Replies:** 4\
**Last updated:** [May 19, 2016, 11:04am UTC](https://discuss.elastic.co/t/query-database-from-a-filter/50367 "2016-05-19T11:04:08Z")

</div>

I'm just new to Elasticsearch, and I'm looking to find a way to get info from a database, based on a value stored in an index tab. I've looked at the jdbc input plugin, however I'd like to do it within a condition in a f…

---

## [No handler found](https://discuss.elastic.co/t/no-handler-found/362560)

<div class="topic-metadata">

**Author:** [@edgarmat1964](https://discuss.elastic.co/u/edgarmat1964)\
**Replies:** 2\
**Last updated:** [July 5, 2024, 7:32pm UTC](https://discuss.elastic.co/t/no-handler-found/362560 "2024-07-05T19:32:27Z")

</div>

Hi list, I've got an issue where I get a "no handler found" error. I've started a trial license which is still active. My relevant elasticsearch.yml: path.data: /data/elasticsearch path.logs: /var/log/elasticsearch net…

---

## [Ingress controller logs directly from filebeat to elasticsearch](https://discuss.elastic.co/t/ingress-controller-logs-directly-from-filebeat-to-elasticsearch/310675)

<div class="topic-metadata">

**Author:** [@Zahraa\_Dehghan](https://discuss.elastic.co/u/Zahraa_Dehghan)\
**Replies:** 2\
**Last updated:** [August 9, 2022, 11:09am UTC](https://discuss.elastic.co/t/ingress-controller-logs-directly-from-filebeat-to-elasticsearch/310675 "2022-08-09T11:09:08Z")

</div>

hi , I want to ship ingress controllers log directly to elasticsearch via filebeat. Here is my log format for ingress {\\"remote\_ip\\": \\"%{GREEDYDATA:remote\_ip}\\",\\"method\\": \\"%{GREEDYDATA:method}\\", \\"host\\": \\"%{GREE…

---

## [Problem with elasticsearch docker](https://discuss.elastic.co/t/problem-with-elasticsearch-docker/230259)

<div class="topic-metadata">

**Author:** [@DBond](https://discuss.elastic.co/u/DBond)\
**Replies:** 2\
**Last updated:** [April 29, 2020, 12:02pm UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-docker/230259 "2020-04-29T12:02:19Z")

</div>

Hi, Following https://www.elastic.co/guide/en/elastic-stack-get-started/current/get-started-docker.html, during create\_certs, I have problem "Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x8…

---

## [Reindex failed](https://discuss.elastic.co/t/reindex-failed/154336)

<div class="topic-metadata">

**Author:** [@Amita](https://discuss.elastic.co/u/Amita)\
**Replies:** 2\
**Last updated:** [October 28, 2018, 3:46pm UTC](https://discuss.elastic.co/t/reindex-failed/154336 "2018-10-28T15:46:36Z")

</div>

Hi, I tried to run a reindex on a big index, but it failed with the reason of - node is not available. I seperated the reindex to several reindexes with prefix query on spesific field, so it will go faster. I can see …

---

## [Access first location of \_all in Visual Builder markdown](https://discuss.elastic.co/t/access-first-location-of-all-in-visual-builder-markdown/150500)

<div class="topic-metadata">

**Author:** [@rouble](https://discuss.elastic.co/u/rouble)\
**Replies:** 2\
**Last updated:** [October 4, 2018, 3:17pm UTC](https://discuss.elastic.co/t/access-first-location-of-all-in-visual-builder-markdown/150500 "2018-10-04T15:17:48Z")

</div>

This topic is associated to the open issue of creating drill down dashboards in Kibana: https://github.com/elastic/kibana/issues/12560 What follows is an attempt to workaround this open issue, but ultimately hitting a b…

---

## [Logstash-6.2.4-1 persisted queue hung again](https://discuss.elastic.co/t/logstash-6-2-4-1-persisted-queue-hung-again/129374)

<div class="topic-metadata">

**Author:** [@PandKing](https://discuss.elastic.co/u/PandKing)\
**Replies:** 2\
**Last updated:** [April 25, 2018, 12:40am UTC](https://discuss.elastic.co/t/logstash-6-2-4-1-persisted-queue-hung-again/129374 "2018-04-25T00:40:02Z")

</div>

Spent a couple hours looking through the forum. Lots of people talking about persisted queues not processing but have not seen any solutions to troubleshoot. This seems to be a single file that needs to be looked at 559…

---

## [Elasticsearch array of strings filter specific value](https://discuss.elastic.co/t/elasticsearch-array-of-strings-filter-specific-value/79061)

<div class="topic-metadata">

**Author:** [@aniss05](https://discuss.elastic.co/u/aniss05)\
**Replies:** 2\
**Last updated:** [March 18, 2017, 8:07pm UTC](https://discuss.elastic.co/t/elasticsearch-array-of-strings-filter-specific-value/79061 "2017-03-18T20:07:22Z")

</div>

Hey everyone, I am using Elasticsearch 5.2 with Kibana 5.2 and I am inserting my data correctly. The problem is that I have a field called "country\_names" which represents a list of strings and when I want to query for …

---

## [How to remove elasticsearch and reinstall to reset cluster](https://discuss.elastic.co/t/how-to-remove-elasticsearch-and-reinstall-to-reset-cluster/317904)

<div class="topic-metadata">

**Author:** [@tmdgk490255](https://discuss.elastic.co/u/tmdgk490255)\
**Replies:** 1\
**Last updated:** [November 9, 2022, 1:03am UTC](https://discuss.elastic.co/t/how-to-remove-elasticsearch-and-reinstall-to-reset-cluster/317904 "2022-11-09T01:03:58Z")

</div>

I want to remove es on ec2 instance and reinstall it to initialize cluster and node info How can I? I tried but it always had same cluster uuid even I uninstalled it First I installed es following these steps sudo rpm…

---

## [Anyone get logstash-input-xlsx or logstash-codec-excel work?](https://discuss.elastic.co/t/anyone-get-logstash-input-xlsx-or-logstash-codec-excel-work/55448)

<div class="topic-metadata">

**Author:** [@zotsing](https://discuss.elastic.co/u/zotsing)\
**Replies:** 1\
**Last updated:** [February 22, 2017, 12:03pm UTC](https://discuss.elastic.co/t/anyone-get-logstash-input-xlsx-or-logstash-codec-excel-work/55448 "2017-02-22T12:03:00Z")

</div>

Tried for quite a while, but keep getting the following message, hope someone can help me to get it work: Message: failed to open #@filestat=#, @state\_history=\[:watched\], @ignore\_older=nil, @close\_older=nil, @initial=t…

---

## [Fatal error: concurrent map iteration and map write](https://discuss.elastic.co/t/fatal-error-concurrent-map-iteration-and-map-write/328350)

<div class="topic-metadata">

**Author:** [@Z4ck404](https://discuss.elastic.co/u/Z4ck404)\
**Replies:** 5\
**Last updated:** [March 24, 2023, 8:08am UTC](https://discuss.elastic.co/t/fatal-error-concurrent-map-iteration-and-map-write/328350 "2023-03-24T08:08:24Z")

</div>

I am using filebeat with google storage input and elasticsearch as output .. the filebeat starts and throws this error after few seconds : {"log.level":"warn","@timestamp":"2023-03-23T13:46:05.824Z","log.logger":"input…

---

## [How to do Calculation in Elasticsearch Query](https://discuss.elastic.co/t/how-to-do-calculation-in-elasticsearch-query/323496)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 5\
**Last updated:** [January 20, 2023, 1:39am UTC](https://discuss.elastic.co/t/how-to-do-calculation-in-elasticsearch-query/323496 "2023-01-20T01:39:44Z")

</div>

Hi there, to continue discussion below, I decided to create a new topic. please read the topic below first so you can understand it. OK, so the next question is how if i use elasticsearch query to calculate expire dat…

---

## [\[BUG\] filebeat becomes totally unreliable with --once option](https://discuss.elastic.co/t/bug-filebeat-becomes-totally-unreliable-with-once-option/303183)

<div class="topic-metadata">

**Author:** [@kRs](https://discuss.elastic.co/u/kRs)\
**Replies:** 5\
**Last updated:** [April 26, 2022, 10:10am UTC](https://discuss.elastic.co/t/bug-filebeat-becomes-totally-unreliable-with-once-option/303183 "2022-04-26T10:10:53Z")

</div>

Hi, by using a config as simple as this one: filebeat.inputs: # filestream is an input for collecting log messages from files. - type: filestream id: "test" enabled: true paths: - /home/krs/elasticsearch/\*.log…

---

## [Terms aggregation on field with lowercase normalizer](https://discuss.elastic.co/t/terms-aggregation-on-field-with-lowercase-normalizer/301640)

<div class="topic-metadata">

**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\
**Replies:** 5\
**Last updated:** [April 7, 2022, 12:54pm UTC](https://discuss.elastic.co/t/terms-aggregation-on-field-with-lowercase-normalizer/301640 "2022-04-07T12:54:15Z")

</div>

Hi, I mapped the following field: "name": { "type": "keyword", "normalizer": "lowercase", "fields": { "text": { "type": "text" } When I run Terms aggregation on this field, I get lowercase results. How can I get the …

---

## [elasticApm not sending data](https://discuss.elastic.co/t/elasticapm-not-sending-data/225683)

<div class="topic-metadata">

**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\
**Replies:** 5\
**Last updated:** [April 6, 2020, 9:27am UTC](https://discuss.elastic.co/t/elasticapm-not-sending-data/225683 "2020-04-06T09:27:37Z")

</div>

Kibana version: 7.6.1 Elasticsearch version: 7.6.1 APM Server version: 7.6.1 Browser version: chrome, Version 80.0.3987.149 (Official Build) (64-bit) Original install method (e.g. download page, yum, deb, from source…

---

## [APM Servers hangs on rolling configuration change after a change in elastic](https://discuss.elastic.co/t/apm-servers-hangs-on-rolling-configuration-change-after-a-change-in-elastic/170985)

<div class="topic-metadata">

**Author:** [@gmazza](https://discuss.elastic.co/u/gmazza)\
**Replies:** 5\
**Last updated:** [March 5, 2019, 9:43pm UTC](https://discuss.elastic.co/t/apm-servers-hangs-on-rolling-configuration-change-after-a-change-in-elastic/170985 "2019-03-05T21:43:43Z")

</div>

I had applied a Rolling configuration change to my installation. All Kibana and Elasticsearch nodes came back without a problem but the APM Servers shows as pending configuration. Also it is showing this alert APM hea…

---

## [Not able to install x-pack 5.6.2](https://discuss.elastic.co/t/not-able-to-install-x-pack-5-6-2/107552)

<div class="topic-metadata">

**Author:** [@arye](https://discuss.elastic.co/u/arye)\
**Replies:** 5\
**Last updated:** [December 3, 2017, 8:11am UTC](https://discuss.elastic.co/t/not-able-to-install-x-pack-5-6-2/107552 "2017-12-03T08:11:56Z")

</div>

Hi All, I am new to ELK and I have managed to build the ELK Stack and now getting beats from several Windows servers. I am trying to figure out the installation of x-pack. I have ELK version 5.6.2 Since i am working …

---

## [Metricbeat Windows Module 6.0.0-alpha2, Output question](https://discuss.elastic.co/t/metricbeat-windows-module-6-0-0-alpha2-output-question/95676)

<div class="topic-metadata">

**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\
**Replies:** 5\
**Last updated:** [August 3, 2017, 4:17pm UTC](https://discuss.elastic.co/t/metricbeat-windows-module-6-0-0-alpha2-output-question/95676 "2017-08-03T16:17:25Z")

</div>

Hi Everyone, was since yesterday starting to test the alpha of the new windows module to use perfmon data to get a better overview of our .Net applications within IIS. Now is only one big remaining question mark over m…

---

## [Search, then remove data](https://discuss.elastic.co/t/search-then-remove-data/361)

<div class="topic-metadata">

**Author:** [@Don\_Pich](https://discuss.elastic.co/u/Don_Pich)\
**Replies:** 5\
**Last updated:** [May 9, 2015, 5:33pm UTC](https://discuss.elastic.co/t/search-then-remove-data/361 "2015-05-09T17:33:50Z")

</div>

I have tried to search for a particular string, and then delete the data that matches. For example, I have an index called 'logstash-2015.04\* for all indexes in April. I am trying to search for any part of the message …

---

## [Announcing Haystack: The Search Relevance Conference!](https://discuss.elastic.co/t/announcing-haystack-the-search-relevance-conference/110892)

<div class="topic-metadata">

**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 2:46pm UTC](https://discuss.elastic.co/t/announcing-haystack-the-search-relevance-conference/110892 "2018-01-12T14:46:55Z")

</div>

At OpenSource Connections, our mission is to empower the world's best search teams! As part of making your org awesome, we're proud to announce Haystack, the Search Relevance Conference! I have spoken with a ton of folk…

---

## [ILM shrink and warm node](https://discuss.elastic.co/t/ilm-shrink-and-warm-node/292357)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 8\
**Last updated:** [December 21, 2021, 2:42pm UTC](https://discuss.elastic.co/t/ilm-shrink-and-warm-node/292357 "2021-12-21T14:42:16Z")

</div>

I have setup ILM policy with shrink but not working. what am I missing PUT \_ilm/policy/metricbeat { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { …

---

## [(Elasticsearch NEST C#) How to apply CopyTo to any field in an index](https://discuss.elastic.co/t/elasticsearch-nest-c-how-to-apply-copyto-to-any-field-in-an-index/248224)

<div class="topic-metadata">

**Author:** [@WestCoastWondering](https://discuss.elastic.co/u/WestCoastWondering)\
**Replies:** 3\
**Last updated:** [September 15, 2020, 6:56pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-c-how-to-apply-copyto-to-any-field-in-an-index/248224 "2020-09-15T18:56:08Z")

</div>

Hi, My team is using Elasticsearch NEST to implement search within a .Net application. The documents in this index include static text fields, such as title and description as well as dynamic fields such as field1234. …

---

## [How to retrieve the length of an array in a nested document using painless](https://discuss.elastic.co/t/how-to-retrieve-the-length-of-an-array-in-a-nested-document-using-painless/215934)

<div class="topic-metadata">

**Author:** [@QuincyBowers](https://discuss.elastic.co/u/QuincyBowers)\
**Replies:** 0\
**Last updated:** [January 21, 2020, 5:48pm UTC](https://discuss.elastic.co/t/how-to-retrieve-the-length-of-an-array-in-a-nested-document-using-painless/215934 "2020-01-21T17:48:25Z")

</div>

My question is, how do I get the length of an array field in a nested document using a painless script. Here is the problem I am trying to solve. We have documents which can have a set of labels assigned to them. Thes…

---

## [Kibana not starting 7.0.1-1](https://discuss.elastic.co/t/kibana-not-starting-7-0-1-1/181882)

<div class="topic-metadata">

**Author:** [@L8apex32](https://discuss.elastic.co/u/L8apex32)\
**Replies:** 3\
**Last updated:** [May 21, 2019, 2:42pm UTC](https://discuss.elastic.co/t/kibana-not-starting-7-0-1-1/181882 "2019-05-21T14:42:00Z")

</div>

We are trying to upgrade a v6.5 node to the latest (7.0.1-1). Elasticsearch upgraded fine, but Kibana won't start. Kibana was not installed on this node before. The Kibana logs repeat, showing Kibana is trying. The onl…

---

## [Linear trend in Bar Chart visualization Vega](https://discuss.elastic.co/t/linear-trend-in-bar-chart-visualization-vega/154979)

<div class="topic-metadata">

**Author:** [@Lidiya\_Chernova](https://discuss.elastic.co/u/Lidiya_Chernova)\
**Replies:** 3\
**Last updated:** [November 12, 2018, 2:54pm UTC](https://discuss.elastic.co/t/linear-trend-in-bar-chart-visualization-vega/154979 "2018-11-12T14:54:38Z")

</div>

Hi guys! :wave: Could you please give a recommendation or an example how can I create a linear trends in my bar chart in Vega? Maybe there are some functions or templates that I can use? Here is my graph:

---

## [Not able to check added field in index when drop is used](https://discuss.elastic.co/t/not-able-to-check-added-field-in-index-when-drop-is-used/95074)

<div class="topic-metadata">

**Author:** [@deepanshu\_mittal](https://discuss.elastic.co/u/deepanshu_mittal)\
**Replies:** 8\
**Last updated:** [July 31, 2017, 1:57am UTC](https://discuss.elastic.co/t/not-able-to-check-added-field-in-index-when-drop-is-used/95074 "2017-07-31T01:57:40Z")

</div>

I am trying to add the field if any condition matches and then drop . But it is not able to keep the field. Can you please help on same ? if “el5” in \[message\] { mutate { add\_field{ “linuxversion”, “5”} } drop{} }

---

## [Import Dashboards on non standard indexes](https://discuss.elastic.co/t/import-dashboards-on-non-standard-indexes/81712)

<div class="topic-metadata">

**Author:** [@fnzv](https://discuss.elastic.co/u/fnzv)\
**Replies:** 3\
**Last updated:** [April 11, 2017, 12:21am UTC](https://discuss.elastic.co/t/import-dashboards-on-non-standard-indexes/81712 "2017-04-11T00:21:46Z")

</div>

Hello, I was trying to import some of the default beats dashboards via : /usr/share/packetbeat/scripts/import\_dashboards -i customindexname -beat PacketBeat But i cannot see them on Kibana with custom index names but i…

---

## [Kibana dashboard slow to load because of max connections limit (http 1.1)](https://discuss.elastic.co/t/kibana-dashboard-slow-to-load-because-of-max-connections-limit-http-1-1/60244)

<div class="topic-metadata">

**Author:** [@kartiku](https://discuss.elastic.co/u/kartiku)\
**Replies:** 3\
**Last updated:** [September 11, 2016, 10:36pm UTC](https://discuss.elastic.co/t/kibana-dashboard-slow-to-load-because-of-max-connections-limit-http-1-1/60244 "2016-09-11T22:36:16Z")

</div>

I have a kibana dashboard that has a large number of panels. When the page is loaded, all the panels result in queries being fired to the elasticsearch cluster. But it is very slow to load. What i noticed is that once 6 …

---

## [Add nodes with different memory (RAM) capacity](https://discuss.elastic.co/t/add-nodes-with-different-memory-ram-capacity/49720)

<div class="topic-metadata">

**Author:** [@EricB](https://discuss.elastic.co/u/EricB)\
**Replies:** 3\
**Last updated:** [May 11, 2016, 9:29pm UTC](https://discuss.elastic.co/t/add-nodes-with-different-memory-ram-capacity/49720 "2016-05-11T21:29:24Z")

</div>

I know the general advice is to keep hardware as homogeneous as possible. However... I have an existing 5 node ES cluster (v1.7.5) where each node has 32GB of RAM. ES gets 14GB of that for heap. I would like to (fo…

---

## [Does marvel has any limitation of number of nodes in a cluster](https://discuss.elastic.co/t/does-marvel-has-any-limitation-of-number-of-nodes-in-a-cluster/47876)

<div class="topic-metadata">

**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\
**Replies:** 3\
**Last updated:** [April 21, 2016, 1:01pm UTC](https://discuss.elastic.co/t/does-marvel-has-any-limitation-of-number-of-nodes-in-a-cluster/47876 "2016-04-21T13:01:21Z")

</div>

I seen a basic version of marvel is free now. Is there any limitation that marvel is free if only my cluster has less than 5/some x nodes. Or its free irrespective of number of nodes in the cluster?

---

## [Status red error in kibana](https://discuss.elastic.co/t/status-red-error-in-kibana/195191)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 7\
**Last updated:** [August 14, 2019, 4:22pm UTC](https://discuss.elastic.co/t/status-red-error-in-kibana/195191 "2019-08-14T16:22:04Z")

</div>

Hi, The highlighted area shows my heap-size as 1.4gb in the kibana heap ss (screenshot below). How do i increase or decrease it ? and it is different jvm.options in elasticsearch.yml which i confiugured as 2gb and th…

---

## [Elastic Search-Java.lang.OutOfMemoryError](https://discuss.elastic.co/t/elastic-search-java-lang-outofmemoryerror/148597)

<div class="topic-metadata">

**Author:** [@sahadevan](https://discuss.elastic.co/u/sahadevan)\
**Replies:** 1\
**Last updated:** [September 17, 2018, 1:21pm UTC](https://discuss.elastic.co/t/elastic-search-java-lang-outofmemoryerror/148597 "2018-09-17T13:21:39Z")

</div>

We are getting "Out of Memory Exception" frequently on elastic search instances. 3 machines are in Elastic search cluster with Similar configuration. Environment: Windows Server 2012 R2 64 bit OS. Ram : 24gb Elastic sea…

[Previous page](https://discuss.elastic.co/top.md?page=1155&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1157&per_page=50&period=all)
