# Top **URL:** https://discuss.elastic.co/top.md?page=1164&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1165 --- ## [Filter and tokenizer not working](https://discuss.elastic.co/t/filter-and-tokenizer-not-working/139043)
**Author:** [@Mohamed\_Lotfy](https://discuss.elastic.co/u/Mohamed_Lotfy)\ **Replies:** 7\ **Last updated:** [July 8, 2018, 6:48pm UTC](https://discuss.elastic.co/t/filter-and-tokenizer-not-working/139043 "2018-07-08T18:48:26Z")
Hello dudes recently I work for a task to use Elasticsearch with node.js and mongoose then I used Mongoosastic to be easier to link them together so I create a schema and add an analyzer called "edge\_nGram\_analyzer" a… --- ## [Broken relevance](https://discuss.elastic.co/t/broken-relevance/77846)
**Author:** [@venkata\_sreekanth\_bh](https://discuss.elastic.co/u/venkata_sreekanth_bh)\ **Replies:** 7\ **Last updated:** [March 9, 2017, 5:47pm UTC](https://discuss.elastic.co/t/broken-relevance/77846 "2017-03-09T17:47:39Z")
I am using elastic search for search purposes. My configuration has 3 shards and 2 replicas. One of the type of record has only 2.6 million records. When performing a simple match query against a field, it returns differ… --- ## [Can't create logstash indexes in elasticsearch](https://discuss.elastic.co/t/cant-create-logstash-indexes-in-elasticsearch/1342)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 1\ **Last updated:** [May 26, 2015, 8:54pm UTC](https://discuss.elastic.co/t/cant-create-logstash-indexes-in-elasticsearch/1342 "2015-05-26T20:54:31Z")
Hello, I've downloaded the binary tar of logstash 1.5.0 and I'm trying to get it working with a 3 node elasticsearch cluster running on ES 1.5.1. I have kibana 3 running under nginx. But when I go to my web browser a… --- ## [Response Code 503 showing in application](https://discuss.elastic.co/t/response-code-503-showing-in-application/218549)
**Author:** [@rijash](https://discuss.elastic.co/u/rijash)\ **Replies:** 4\ **Last updated:** [February 11, 2020, 1:02pm UTC](https://discuss.elastic.co/t/response-code-503-showing-in-application/218549 "2020-02-11T13:02:19Z")
Hi, Application is showing response Code "503" for RUM events ( (/intake/v2/rum/events) whenever we are seeing "Queue is Full" message in APM Server. As per our understanding, If the server is not able to process the e… --- ## [Elastic Search Incremental River always fetching data](https://discuss.elastic.co/t/elastic-search-incremental-river-always-fetching-data/49877)
**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\ **Replies:** 4\ **Last updated:** [May 13, 2016, 5:04am UTC](https://discuss.elastic.co/t/elastic-search-incremental-river-always-fetching-data/49877 "2016-05-13T05:04:58Z")
We are currently using ES 1.4. We are using incremental river to fetch delta change from DB. We are using the below query: { "type": "jdbc", "jdbc": { "url": null, "user": "userName", "password": "pwd", "sql"… --- ## [LogStash setting Date error](https://discuss.elastic.co/t/logstash-setting-date-error/335733)
**Author:** [@yy\_isam](https://discuss.elastic.co/u/yy_isam)\ **Replies:** 8\ **Last updated:** [June 13, 2023, 4:46am UTC](https://discuss.elastic.co/t/logstash-setting-date-error/335733 "2023-06-13T04:46:20Z")
Hello guys! I want to run my logtstash connect to elastic using input jdbc. Then i create conf file to run logstash but i always get this error, i try any changes in conf file but still not working. Anyone can help me t… --- ## [Elasticsearch backup GCP plugin](https://discuss.elastic.co/t/elasticsearch-backup-gcp-plugin/173132)
**Author:** [@Callonski](https://discuss.elastic.co/u/Callonski)\ **Replies:** 8\ **Last updated:** [March 22, 2019, 2:34pm UTC](https://discuss.elastic.co/t/elasticsearch-backup-gcp-plugin/173132 "2019-03-22T14:34:13Z")
I'm having trouble securing a backup for elasticsearch running on GCP, kubernetes. I've tried two approaches. The first, that seems like the best is taking snapshots and store in a bucket. I’ve installed this plugin o… --- ## ["Your settings are invalid. Setting "" doesnt exist" error during setup](https://discuss.elastic.co/t/your-settings-are-invalid-setting-doesnt-exist-error-during-setup/308751)
**Author:** [@dsilvera](https://discuss.elastic.co/u/dsilvera)\ **Replies:** 2\ **Last updated:** [July 3, 2022, 6:04pm UTC](https://discuss.elastic.co/t/your-settings-are-invalid-setting-doesnt-exist-error-during-setup/308751 "2022-07-03T18:04:00Z")
Setting up ELK 8.3.1 on Windows 10 PC and got Elastic Search and Kabana up and running. Reached to setting up logstash, entered the following command: .\\bin\\logstash.bat -e "input { stdin { } } output { stdout {} }" f… --- ## [Implementing Rollover+ILM with Logstash and time based index name](https://discuss.elastic.co/t/implementing-rollover-ilm-with-logstash-and-time-based-index-name/247883)
**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\ **Replies:** 2\ **Last updated:** [September 9, 2020, 4:46am UTC](https://discuss.elastic.co/t/implementing-rollover-ilm-with-logstash-and-time-based-index-name/247883 "2020-09-09T04:46:50Z")
Hi there, I used to index logs with Logstash into time-based indices (logstash-YYYY.MM.DD). Time-based index names make administration easier on us. We already use lifecycle management to pull the indices to slower nod… --- ## [Performance Optimization for Multi-Index Search on Small Data Set](https://discuss.elastic.co/t/performance-optimization-for-multi-index-search-on-small-data-set/243378)
**Author:** [@Piyush\_Gupta](https://discuss.elastic.co/u/Piyush_Gupta)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 6:29am UTC](https://discuss.elastic.co/t/performance-optimization-for-multi-index-search-on-small-data-set/243378 "2020-08-03T06:29:46Z")
We have different document structures/schema that we on-board into different indices. We have ~50 such indices, and one of our primary use cases is to perform search across all these document types i.e. across all 50 ind… --- ## [Can we control server memeroy (RAM) for Elastic search?](https://discuss.elastic.co/t/can-we-control-server-memeroy-ram-for-elastic-search/200111)
**Author:** [@jignesh.panchal](https://discuss.elastic.co/u/jignesh.panchal)\ **Replies:** 2\ **Last updated:** [September 19, 2019, 5:52am UTC](https://discuss.elastic.co/t/can-we-control-server-memeroy-ram-for-elastic-search/200111 "2019-09-19T05:52:06Z")
If I have 8GB RAM serave & I want to give only 4 GB to elastic is it posiile --- ## [NetApp integration with ELK](https://discuss.elastic.co/t/netapp-integration-with-elk/182860)
**Author:** [@swapnali](https://discuss.elastic.co/u/swapnali)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 5:42am UTC](https://discuss.elastic.co/t/netapp-integration-with-elk/182860 "2019-05-28T05:42:35Z")
Is prepackages are available for Netapp NAS And integration of same with ELK?? If yes then please Tell me how to do it. --- ## [6.2.4 to 6.4.3: getting "Cannot read property 'map' of undefined"](https://discuss.elastic.co/t/6-2-4-to-6-4-3-getting-cannot-read-property-map-of-undefined/160146)
**Author:** [@Shaoranlaos](https://discuss.elastic.co/u/Shaoranlaos)\ **Replies:** 2\ **Last updated:** [December 11, 2018, 6:47am UTC](https://discuss.elastic.co/t/6-2-4-to-6-4-3-getting-cannot-read-property-map-of-undefined/160146 "2018-12-11T06:47:49Z")
Hello, this morning i have done an update from 6.2.4 to 6.4.3 and have now a problem with a bar chart visualization in Kibana. Each time i try to load it Kibana gives the message "Cannot read property 'map' of undefine… --- ## [Conditions, Pipelines and GeoIP](https://discuss.elastic.co/t/conditions-pipelines-and-geoip/84092)
**Author:** [@Ghanlow](https://discuss.elastic.co/u/Ghanlow)\ **Replies:** 2\ **Last updated:** [May 9, 2017, 12:06pm UTC](https://discuss.elastic.co/t/conditions-pipelines-and-geoip/84092 "2017-05-09T12:06:57Z")
Hello, i'm new in Elastic community, i'm actually French IT Student, i'm not native english so sorry for my mistakes. I've enjoyed installing ELK Stack. Here i am, i'm actually using Packetbeat 5.3, sending output to… --- ## [Filebeat is reading my logs but they stop to write on their files](https://discuss.elastic.co/t/filebeat-is-reading-my-logs-but-they-stop-to-write-on-their-files/37132)
**Author:** [@adsqueiroz](https://discuss.elastic.co/u/adsqueiroz)\ **Replies:** 2\ **Last updated:** [December 14, 2015, 3:43pm UTC](https://discuss.elastic.co/t/filebeat-is-reading-my-logs-but-they-stop-to-write-on-their-files/37132 "2015-12-14T15:43:55Z")
Hi folks! I'm new on FileBeat, Logstash and Elastiscsearch. I'm trying to implement in my work, but I'm having problem with FileBeat. When I start the service from FileBeat, my logs are sent to Logstash, but the file… --- ## [Systemd Logs to Kibana?](https://discuss.elastic.co/t/systemd-logs-to-kibana/69113)
**Author:** [@vladsniper](https://discuss.elastic.co/u/vladsniper)\ **Replies:** 1\ **Last updated:** [December 15, 2016, 10:07am UTC](https://discuss.elastic.co/t/systemd-logs-to-kibana/69113 "2016-12-15T10:07:03Z")
Hi) Help me pls with this problem. What is the best way to pass systemd logs to kibana? --- ## [Subquery in Elastic Search](https://discuss.elastic.co/t/subquery-in-elastic-search/65438)
**Author:** [@yogeshyadav.mca](https://discuss.elastic.co/u/yogeshyadav.mca)\ **Replies:** 1\ **Last updated:** [November 9, 2016, 8:37am UTC](https://discuss.elastic.co/t/subquery-in-elastic-search/65438 "2016-11-09T08:37:27Z")
Can we use output of one query as input to another query? Can you perform a subquery similar to sql? For ex: SELECT column-names FROM table-name1 WHERE value IN (SELECT column-name FROM table-… --- ## [APM Flask - Treating all transactions as Errors](https://discuss.elastic.co/t/apm-flask-treating-all-transactions-as-errors/343611)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 5\ **Last updated:** [September 27, 2023, 7:16pm UTC](https://discuss.elastic.co/t/apm-flask-treating-all-transactions-as-errors/343611 "2023-09-27T19:16:38Z")
Kibana version: 8.9.1 Elasticsearch version: 8.9.1 APM Server version: 8.9.1 APM Agent language and version: Python (Flask) 6.18.0 We are trying to build a proof of concept using Elastic APM and are running into a si… --- ## [The same problem with you about it](https://discuss.elastic.co/t/the-same-problem-with-you-about-it/191572)
**Author:** [@anon20829737](https://discuss.elastic.co/u/anon20829737)\ **Replies:** 5\ **Last updated:** [July 26, 2019, 7:37am UTC](https://discuss.elastic.co/t/the-same-problem-with-you-about-it/191572 "2019-07-26T07:37:23Z")
Nothing to type --- ## [Save request results in a new elastic index or a new database](https://discuss.elastic.co/t/save-request-results-in-a-new-elastic-index-or-a-new-database/92616)
**Author:** [@AitZaid](https://discuss.elastic.co/u/AitZaid)\ **Replies:** 5\ **Last updated:** [July 11, 2017, 2:00pm UTC](https://discuss.elastic.co/t/save-request-results-in-a-new-elastic-index-or-a-new-database/92616 "2017-07-11T14:00:35Z")
Hi, I'm quite new with elasticsearch and kibana and I wonder if there is a way to save the data used to make the graphs with kibana in a new index, or even in an outside database, and then make the data processing of th… --- ## [Top3 in Line graph and Top values in Available fields are different](https://discuss.elastic.co/t/top3-in-line-graph-and-top-values-in-available-fields-are-different/310382)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 6\ **Last updated:** [July 25, 2022, 1:10am UTC](https://discuss.elastic.co/t/top3-in-line-graph-and-top-values-in-available-fields-are-different/310382 "2022-07-25T01:10:37Z")
I'm working on visualizing the statistics of logs collected by Kibana. I would like to know how certain items in the logs have changed over time. For example, I would like to aggregate the IP addresses of remote hosts … --- ## [ES operator log rotation](https://discuss.elastic.co/t/es-operator-log-rotation/256494)
**Author:** [@Ravi\_Gusain](https://discuss.elastic.co/u/Ravi_Gusain)\ **Replies:** 6\ **Last updated:** [December 14, 2020, 4:12am UTC](https://discuss.elastic.co/t/es-operator-log-rotation/256494 "2020-12-14T04:12:54Z")
Hi, What's the by default log rotation policy for ES operator? I have created master node of 1G, want to understand chances of it getting filled with the logs. Thanks Ravi --- ## [Elasticsearch Benchmarking docs/s](https://discuss.elastic.co/t/elasticsearch-benchmarking-docs-s/149027)
**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\ **Replies:** 6\ **Last updated:** [September 20, 2018, 5:27am UTC](https://discuss.elastic.co/t/elasticsearch-benchmarking-docs-s/149027 "2018-09-20T05:27:25Z")
What kind of optimizations is Elastic using on their benchmarking hosts? I have a bare-metals server, with 20 cpu cores, 64 gb of ram, and a mounted nvme drive, but when I use rally locally with esrally --distribution-v… --- ## [Loop through fields to find a matching value](https://discuss.elastic.co/t/loop-through-fields-to-find-a-matching-value/227601)
**Author:** [@krille.com](https://discuss.elastic.co/u/krille.com)\ **Replies:** 3\ **Last updated:** [April 12, 2020, 2:01pm UTC](https://discuss.elastic.co/t/loop-through-fields-to-find-a-matching-value/227601 "2020-04-12T14:01:31Z")
I have 2 fields (integer) called Year and Month e.g. Year = 2016 Month = 9 I have from an array created seqRate.## fields e.g. "rateSeq": { "0": "2016;8;0.0001285760", "1": "2016;9;0.0001287969", "2": "2016;10;0.… --- ## [Problem with GeoIP using filebeat-\>logstash-\>ES-\>Kibana (No geo\_point type)](https://discuss.elastic.co/t/problem-with-geoip-using-filebeat-logstash-es-kibana-no-geo-point-type/78763)
**Author:** [@zokratez](https://discuss.elastic.co/u/zokratez)\ **Replies:** 3\ **Last updated:** [March 16, 2017, 1:36pm UTC](https://discuss.elastic.co/t/problem-with-geoip-using-filebeat-logstash-es-kibana-no-geo-point-type/78763 "2017-03-16T13:36:09Z")
This is my config: filter { if \[type\] == "apache-access" { grok { match =\> \[ "message", "%{IP:clientip} %{USER:ident} %{USER:auth} \\\[%{HTTPDATE:apache\_timestamp}\\\] \\"%{WORD:method} /%{NOTSPACE:request\_page}… --- ## [When Parent-Child is faster than nested object? Example provided](https://discuss.elastic.co/t/when-parent-child-is-faster-than-nested-object-example-provided/55874)
**Author:** [@AdamLepkowski](https://discuss.elastic.co/u/AdamLepkowski)\ **Replies:** 3\ **Last updated:** [July 21, 2016, 1:44pm UTC](https://discuss.elastic.co/t/when-parent-child-is-faster-than-nested-object-example-provided/55874 "2016-07-21T13:44:49Z")
Hi, I need to store one to many relationship between two objects let’s assume between Property (N) and Offers (M). I defined two data sources in both structure (parent-child and nested object): -1mln of properties and … --- ## [Marvel 1.3 download](https://discuss.elastic.co/t/marvel-1-3-download/40488)
**Author:** [@rspangle1](https://discuss.elastic.co/u/rspangle1)\ **Replies:** 3\ **Last updated:** [January 29, 2016, 3:29pm UTC](https://discuss.elastic.co/t/marvel-1-3-download/40488 "2016-01-29T15:29:46Z")
Where can I get Marvel 1.3 to download? I can't seem to find it --- ## [Federating a query?](https://discuss.elastic.co/t/federating-a-query/39953)
**Author:** [@schaefer](https://discuss.elastic.co/u/schaefer)\ **Replies:** 3\ **Last updated:** [January 24, 2016, 4:29pm UTC](https://discuss.elastic.co/t/federating-a-query/39953 "2016-01-24T16:29:27Z")
I have a document to that includes a foreign key to an external data source. When a client retrieves the document, I'd like ES to transparently query the external source and materialize the data into the retrieved docum… --- ## [\[AU\] Canberra Elastic Fantastics - 9th Sept 2015](https://discuss.elastic.co/t/au-canberra-elastic-fantastics-9th-sept-2015/28315)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [August 31, 2015, 12:34am UTC](https://discuss.elastic.co/t/au-canberra-elastic-fantastics-9th-sept-2015/28315 "2015-08-31T00:34:39Z")
Come along to our inaugural Meetup in the nations capital! Our very own @Joshua\_Rich will be presenting his brand new Pingbeat! We're also on the look out for other speakers, if you're a local and interested in giving … --- ## [Elastic service stopped automatically](https://discuss.elastic.co/t/elastic-service-stopped-automatically/293252)
**Author:** [@sandesh0209](https://discuss.elastic.co/u/sandesh0209)\ **Replies:** 4\ **Last updated:** [January 11, 2022, 9:57am UTC](https://discuss.elastic.co/t/elastic-service-stopped-automatically/293252 "2022-01-11T09:57:58Z")
Faulting application name: Elasticsearch.exe, version: 7.10.1.0, time stamp: 0x5fcb0351 Faulting module name: KERNELBASE.dll, version: 10.0.14393.4770, time stamp: 0x6180883c Exception code: 0xe0434352 Fault offset: 0… --- ## [Raw log message in kibana](https://discuss.elastic.co/t/raw-log-message-in-kibana/223759)
**Author:** [@kumar6](https://discuss.elastic.co/u/kumar6)\ **Replies:** 4\ **Last updated:** [March 16, 2020, 3:51pm UTC](https://discuss.elastic.co/t/raw-log-message-in-kibana/223759 "2020-03-16T15:51:55Z")
Hello, We have a requirement to send the entire raw log message along with parsed data. This will allow the users to view the parsed data as well raw log. Can someone let me know if this is feasible? --- ## [Multiple Elastic Queries per spark job](https://discuss.elastic.co/t/multiple-elastic-queries-per-spark-job/86115)
**Author:** [@mattmattmatt1](https://discuss.elastic.co/u/mattmattmatt1)\ **Replies:** 4\ **Last updated:** [May 19, 2017, 9:46am UTC](https://discuss.elastic.co/t/multiple-elastic-queries-per-spark-job/86115 "2017-05-19T09:46:35Z")
HI All, I've got a spark job that starts with a single elastic query. I want to use the result of this in a new query within the same spark job to pull down more data, based on what the first one brings back. I've a… --- ## [Greedydata not working as expected](https://discuss.elastic.co/t/greedydata-not-working-as-expected/46972)
**Author:** [@Suren92](https://discuss.elastic.co/u/Suren92)\ **Replies:** 4\ **Last updated:** [April 12, 2016, 8:15am UTC](https://discuss.elastic.co/t/greedydata-not-working-as-expected/46972 "2016-04-12T08:15:00Z")
Hi, I have the following data 2016-02-07 22:45:48,804 \[72\] FATAL GlobalHttpApplication \[(null)\] - cannot set status after HTTP headers have been sent. Region: (null) UserId: (null) Session: {} System.Web… --- ## [Set Elastic Security rules on syslog](https://discuss.elastic.co/t/set-elastic-security-rules-on-syslog/288012)
**Author:** [@Limoelou](https://discuss.elastic.co/u/Limoelou)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 11:01am UTC](https://discuss.elastic.co/t/set-elastic-security-rules-on-syslog/288012 "2021-11-01T11:01:33Z")
Hello, I'm having trouble to display syslog events in Kibana. I have a Stormshield firewall sending syslog events to my elastic server from different hosts : 2628 2703 3.429885364 192.168.3.223 → 10.22.5.58 Syslog … --- ## [Check if nested field exists not working](https://discuss.elastic.co/t/check-if-nested-field-exists-not-working/199100)
**Author:** [@cdalexndr](https://discuss.elastic.co/u/cdalexndr)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 6:32pm UTC](https://discuss.elastic.co/t/check-if-nested-field-exists-not-working/199100 "2019-09-11T18:32:26Z")
I have the following code in my logstash configuration where gsub is not applied if\[exception\]\[stacktrace\] { mutate { gsub =\> \["exception.stacktrace","\\s\*at\\s(?!package).\*", ""\] } } T… --- ## [Issue in creating mapping with \_all field having different analyzer though in different index](https://discuss.elastic.co/t/issue-in-creating-mapping-with--all-field-having-different-analyzer-though-in-different-index/80572)
**Author:** [@sknaved](https://discuss.elastic.co/u/sknaved)\ **Replies:** 2\ **Last updated:** [March 30, 2017, 12:03pm UTC](https://discuss.elastic.co/t/issue-in-creating-mapping-with--all-field-having-different-analyzer-though-in-different-index/80572 "2017-03-30T12:03:20Z")
I am stucked with below problem in production. Could you help me solve this In Production i have two indices "hs" and "hsproduct". In index "hs", i have type "product" whose mapping contains "\_all" to some custom anal… --- ## [ElasticSearch 2.2.0 - File Too Large while bulk indexing](https://discuss.elastic.co/t/elasticsearch-2-2-0-file-too-large-while-bulk-indexing/43760)
**Author:** [@cjuste](https://discuss.elastic.co/u/cjuste)\ **Replies:** 2\ **Last updated:** [March 8, 2016, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-2-2-0-file-too-large-while-bulk-indexing/43760 "2016-03-08T14:14:56Z")
Hello, I'm using ES 2.2.0 in a cluster of 5 nodes. It's a new cluster to replace the old one and I want to index everything I have, so I'm indexing a lot of documents at the time with the HTTP Bulk API (around 5k docum… --- ## [Threat intelligence](https://discuss.elastic.co/t/threat-intelligence/328211)
**Author:** [@ermilan2309](https://discuss.elastic.co/u/ermilan2309)\ **Replies:** 7\ **Last updated:** [March 22, 2023, 9:30pm UTC](https://discuss.elastic.co/t/threat-intelligence/328211 "2023-03-22T21:30:33Z")
Hello, I would like to integrate threat intelligence with wazuh. How can I do that. what are the ways to archive this ? I have deployed the hive , cortex and MISP for threat intelligence but do not know how to integra… --- ## [How to remove a filed](https://discuss.elastic.co/t/how-to-remove-a-filed/105173)
**Author:** [@raghu1](https://discuss.elastic.co/u/raghu1)\ **Replies:** 7\ **Last updated:** [October 26, 2017, 10:05am UTC](https://discuss.elastic.co/t/how-to-remove-a-filed/105173 "2017-10-26T10:05:25Z")
Hi Team, Please can you suggest how to remove field "payload" from below pattern: I am trying using remove\_field =\> \[ "payload" \]. Please suggest. {match =\> { "message" =\> "\[%{GREEDYDATA:BEGIN}\]|%{GREEDYDATA:service\_i… --- ## [Not getting reroute API to work](https://discuss.elastic.co/t/not-getting-reroute-api-to-work/11260)
**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\ **Replies:** 7\ **Last updated:** [March 23, 2013, 12:32pm UTC](https://discuss.elastic.co/t/not-getting-reroute-api-to-work/11260 "2013-03-23T12:32:54Z")
Hi , We have 4 machines and 4 shard. We want one shard to run in a machine at a time. But then head is telling me that Shard 1 and Shard 3 are present in a node and another node is sitting idle with just a replica … --- ## [About commercial use of the free version](https://discuss.elastic.co/t/about-commercial-use-of-the-free-version/337410)
**Author:** [@kimjinyoung](https://discuss.elastic.co/u/kimjinyoung)\ **Replies:** 1\ **Last updated:** [July 3, 2023, 3:47am UTC](https://discuss.elastic.co/t/about-commercial-use-of-the-free-version/337410 "2023-07-03T03:47:09Z")
of the following sites Is "Wildcard field type" of "Free and open-Basic 1,2" available for commercial use free of charge? Is "Free and open -Basic 1, 2" already free for commercial use? I look forward to hearing fro… --- ## [Failed to create report](https://discuss.elastic.co/t/failed-to-create-report/310508)
**Author:** [@Dso\_Test](https://discuss.elastic.co/u/Dso_Test)\ **Replies:** 1\ **Last updated:** [July 29, 2022, 2:37am UTC](https://discuss.elastic.co/t/failed-to-create-report/310508 "2022-07-29T02:37:36Z")
I am unable to generate a CSV report based on my search. I tried to minimize the timeframe of my search to about 10 seconds but the error persists. This is done on AWS elastic stack instance. What might be causing this i… --- ## [Missing value for number field](https://discuss.elastic.co/t/missing-value-for-number-field/257832)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [December 9, 2020, 9:09pm UTC](https://discuss.elastic.co/t/missing-value-for-number-field/257832 "2020-12-09T21:09:49Z")
Hi all, I'm creating a data table to display set of data. For "string" type of fields, i'm able to display " missing" value for empty fields of data. For "number" type of fields, there is no option of "missing" values… --- ## [Same query return different result](https://discuss.elastic.co/t/same-query-return-different-result/98206)
**Author:** [@ydj](https://discuss.elastic.co/u/ydj)\ **Replies:** 1\ **Last updated:** [August 25, 2017, 8:14am UTC](https://discuss.elastic.co/t/same-query-return-different-result/98206 "2017-08-25T08:14:28Z")
I have 3 servers，i find that same query has different result ip1：9200 and ip2：9200 return right result，but ip3：9200 return wrong result. ip1 and ip2 result： { “took”: 3, “timed\_out”: false, "\_shards": { “total”: 5… --- ## [Sort value](https://discuss.elastic.co/t/sort-value/92773)
**Author:** [@Chanpiseth\_Ros](https://discuss.elastic.co/u/Chanpiseth_Ros)\ **Replies:** 1\ **Last updated:** [July 12, 2017, 8:06am UTC](https://discuss.elastic.co/t/sort-value/92773 "2017-07-12T08:06:43Z")
Hi everyone, if i have a values: "eee-ccc" "aaa-ttt" "ppp-bbb" And i want to sort value that has a special character - in the middle of each value. I always get an error while sorting, it's not order from A-Z, … --- ## [Elastic-builder - Elasticsearch 5.x query builder for node.js](https://discuss.elastic.co/t/elastic-builder-elasticsearch-5-x-query-builder-for-node-js/83962)
**Author:** [@sudo-suhas](https://discuss.elastic.co/u/sudo-suhas)\ **Replies:** 1\ **Last updated:** [April 28, 2017, 7:56am UTC](https://discuss.elastic.co/t/elastic-builder-elasticsearch-5-x-query-builder-for-node-js/83962 "2017-04-28T07:56:50Z")
elastic.js was a library which could be used for building the elasticsearch request body using builder syntax. However, it has not been updated in over 3 years and it is not longer usable with 5.x version of elasticsearc… --- ## [Minimal Filebeat configuration for sending Logstash message in JSON format to Logstash](https://discuss.elastic.co/t/minimal-filebeat-configuration-for-sending-logstash-message-in-json-format-to-logstash/339811)
**Author:** [@jba](https://discuss.elastic.co/u/jba)\ **Replies:** 8\ **Last updated:** [August 1, 2023, 6:51pm UTC](https://discuss.elastic.co/t/minimal-filebeat-configuration-for-sending-logstash-message-in-json-format-to-logstash/339811 "2023-08-01T18:51:32Z")
Until now, we have had Logstash produce its log messages in plain-text format (written to /var/log/logstash/logstash-plain.log). And we had Filebeat ship the log messages to a Logstash cluster where the log messages were… --- ## [File copy size that appears multiple times](https://discuss.elastic.co/t/file-copy-size-that-appears-multiple-times/114931)
**Author:** [@learner](https://discuss.elastic.co/u/learner)\ **Replies:** 8\ **Last updated:** [January 12, 2018, 9:05pm UTC](https://discuss.elastic.co/t/file-copy-size-that-appears-multiple-times/114931 "2018-01-12T21:05:33Z")
I downloaded a 2.4 GB file from the Internet and the same 2.4 GB size appears multiple times in my query result, as below. Is this normal? Why does ES show the total size multiple times rather than just once at the end … --- ## [Error - No application was found at this URL. Try going back or choosing an app from the menu](https://discuss.elastic.co/t/error-no-application-was-found-at-this-url-try-going-back-or-choosing-an-app-from-the-menu/301867)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 12:53pm UTC](https://discuss.elastic.co/t/error-no-application-was-found-at-this-url-try-going-back-or-choosing-an-app-from-the-menu/301867 "2022-04-07T12:53:52Z")
Hi Experts, I created the dashboard in default space and imported that under space-test in kibana. Though the dashboard was imported successfully in space-test, I am not able to edit that dashboard in space-test. Whil… --- ## [S3 output plugin](https://discuss.elastic.co/t/s3-output-plugin/297675)
**Author:** [@brunoof1](https://discuss.elastic.co/u/brunoof1)\ **Replies:** 3\ **Last updated:** [February 21, 2022, 12:59pm UTC](https://discuss.elastic.co/t/s3-output-plugin/297675 "2022-02-21T12:59:28Z")
Hello everyone, everything good ? I have 2 doubts. What are all the file formats supported by the s3 output plugin? I'm using Oracle, kafka and file input and writing to s3 with s3 output. I would like to create Parqu… [Previous page](https://discuss.elastic.co/top.md?page=1163&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1165&per_page=50&period=all)