# Top

**URL:** https://discuss.elastic.co/top.md?page=1169&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1170

---

## [Ruby exception occurred: undefined method \`localtime'](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-localtime/48751)

<div class="topic-metadata">

**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\
**Replies:** 1\
**Last updated:** [April 29, 2016, 5:33am UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-localtime/48751 "2016-04-29T05:33:39Z")

</div>

hi all, I am using logstash 2.1.3 ,I want to show the @timestamp field in my timezone, like "@timestamp" =\> "2015-03-09T04:24:29.718+08:00", I try to using ruby conversion in filter. filter { ruby { co…

---

## [Elastic.co website doesn't work on IPv6](https://discuss.elastic.co/t/elastic-co-website-doesnt-work-on-ipv6/33134)

<div class="topic-metadata">

**Author:** [@jornane](https://discuss.elastic.co/u/jornane)\
**Replies:** 1\
**Last updated:** [October 28, 2015, 10:39pm UTC](https://discuss.elastic.co/t/elastic-co-website-doesnt-work-on-ipv6/33134 "2015-10-28T22:39:08Z")

</div>

The elastic.co website has AAAA records to 2620:108:700f::340b:cd7f and 2620:108:700f::3694:bcca, but neither have port 80 open.

---

## [Can logstash output an XML file?](https://discuss.elastic.co/t/can-logstash-output-an-xml-file/32300)

<div class="topic-metadata">

**Author:** [@piyush.m82](https://discuss.elastic.co/u/piyush.m82)\
**Replies:** 1\
**Last updated:** [October 15, 2015, 5:47pm UTC](https://discuss.elastic.co/t/can-logstash-output-an-xml-file/32300 "2015-10-15T17:47:51Z")

</div>

Hello Guys, I am fairly new to logstash and want to know few things before implementing anything further. I have a requirement to write into logstash, logs which are in json format and then logstash should output an xm…

---

## [Return specific field and highlights via Java API](https://discuss.elastic.co/t/return-specific-field-and-highlights-via-java-api/15333)

<div class="topic-metadata">

**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\
**Replies:** 1\
**Last updated:** [January 21, 2014, 7:00pm UTC](https://discuss.elastic.co/t/return-specific-field-and-highlights-via-java-api/15333 "2014-01-21T19:00:14Z")

</div>

I am having two issues using the java api 1. I am not able to return specific field in my search query - It shows I have the right number of results, but displays Null 2. Not return highlights Note: Assume Indexing …

---

## [Ingest Pipelines - illegal\_argument\_exception reason field not present as part of path](https://discuss.elastic.co/t/ingest-pipelines-illegal-argument-exception-reason-field-not-present-as-part-of-path/338267)

<div class="topic-metadata">

**Author:** [@dmrlixos](https://discuss.elastic.co/u/dmrlixos)\
**Replies:** 3\
**Last updated:** [July 19, 2023, 8:23pm UTC](https://discuss.elastic.co/t/ingest-pipelines-illegal-argument-exception-reason-field-not-present-as-part-of-path/338267 "2023-07-19T20:23:09Z")

</div>

Hi I trying apply a ingest pipeline into a datastream. I'm using logstash to send to datastream, this datastream has a mapping: { "template": { "mappings": { "properties": { "@…

---

## [How to search a piece of URI](https://discuss.elastic.co/t/how-to-search-a-piece-of-uri/328342)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 8\
**Last updated:** [March 23, 2023, 12:36pm UTC](https://discuss.elastic.co/t/how-to-search-a-piece-of-uri/328342 "2023-03-23T12:36:28Z")

</div>

I want to search a piece of URL. I am using the sample weblogs in elasticsearch. If I analyze the field: GET /\_analyze { "analyzer" : "standard", "text" : \["http://nytimes.com/success/kevin-Kregel"\] } I get: { "…

---

## [Flood-stage watermark?](https://discuss.elastic.co/t/flood-stage-watermark/291217)

<div class="topic-metadata">

**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\
**Replies:** 3\
**Last updated:** [December 9, 2021, 1:50pm UTC](https://discuss.elastic.co/t/flood-stage-watermark/291217 "2021-12-09T13:50:19Z")

</div>

Hello. English isn't my first language. How do I troubleshoot this error-message? What does it mean? What is the solution? We never got this error when we used the old daily indices. Now we get them after transitionin…

---

## [Filebeat for Openshift and Kubernetes audit logs](https://discuss.elastic.co/t/filebeat-for-openshift-and-kubernetes-audit-logs/249287)

<div class="topic-metadata">

**Author:** [@sayeedc](https://discuss.elastic.co/u/sayeedc)\
**Replies:** 3\
**Last updated:** [October 16, 2020, 2:58pm UTC](https://discuss.elastic.co/t/filebeat-for-openshift-and-kubernetes-audit-logs/249287 "2020-10-16T14:58:21Z")

</div>

Hi, What’s the best way to collect Openshift and Kubernetes audit logs with Filebeats? Auditbeat doesn’t seem to have any options to inspect Kube or OCP audit log files. Thanks, Sayeed

---

## [Kibana 6.7 default dashboards for different Spaces](https://discuss.elastic.co/t/kibana-6-7-default-dashboards-for-different-spaces/178180)

<div class="topic-metadata">

**Author:** [@jeromedag](https://discuss.elastic.co/u/jeromedag)\
**Replies:** 3\
**Last updated:** [April 24, 2019, 9:03pm UTC](https://discuss.elastic.co/t/kibana-6-7-default-dashboards-for-different-spaces/178180 "2019-04-24T21:03:04Z")

</div>

Hi guys! Our setup is the following: Kibana 6.7 9 different spaces with different user groups, and different rights. For example: User Adam has access to Space A, but not to Space B. User Joe has access to Space B and…

---

## [Change bar graph color in 'Discover' tab](https://discuss.elastic.co/t/change-bar-graph-color-in-discover-tab/153550)

<div class="topic-metadata">

**Author:** [@babeesh](https://discuss.elastic.co/u/babeesh)\
**Replies:** 3\
**Last updated:** [October 29, 2018, 12:07pm UTC](https://discuss.elastic.co/t/change-bar-graph-color-in-discover-tab/153550 "2018-10-29T12:07:05Z")

</div>

Hi, My kibana version is 6.2.4 I need to change the color of the graph shown in "Discover" tab in kibana view. Whenever an error log comes, the graph color should be red. How can I do that

---

## [log4j:ERROR Could not connect to remote log4j server at Logstash-server-IP](https://discuss.elastic.co/t/log4j-error-could-not-connect-to-remote-log4j-server-at-logstash-server-ip/143094)

<div class="topic-metadata">

**Author:** [@Ankita\_Ghate](https://discuss.elastic.co/u/Ankita_Ghate)\
**Replies:** 3\
**Last updated:** [August 6, 2018, 6:52am UTC](https://discuss.elastic.co/t/log4j-error-could-not-connect-to-remote-log4j-server-at-logstash-server-ip/143094 "2018-08-06T06:52:44Z")

</div>

Hello, Below is the application log4j.xml file, \<?xml version="1.0" encoding="UTF-8" ?\> \<log4j:configuration xmlns:log4j="http://jakarta.apache.org/log4j/" debug="true"\> \</log4j:configuration\> An…

---

## [SImple direct from log file JSON to elasticsearch](https://discuss.elastic.co/t/simple-direct-from-log-file-json-to-elasticsearch/61192)

<div class="topic-metadata">

**Author:** [@Brian\_G](https://discuss.elastic.co/u/Brian_G)\
**Replies:** 3\
**Last updated:** [September 22, 2016, 6:08am UTC](https://discuss.elastic.co/t/simple-direct-from-log-file-json-to-elasticsearch/61192 "2016-09-22T06:08:25Z")

</div>

Let's say I have code that is writing out tons of JSON documents to a log file. Consider these to be as is documents that should be in elasticsearch the same way they have been written to the log files. All I want to do …

---

## [Shard stuck in STORE TRANSLOG stage](https://discuss.elastic.co/t/shard-stuck-in-store-translog-stage/38112)

<div class="topic-metadata">

**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\
**Replies:** 3\
**Last updated:** [January 1, 2016, 3:52am UTC](https://discuss.elastic.co/t/shard-stuck-in-store-translog-stage/38112 "2016-01-01T03:52:06Z")

</div>

My topbeat index has two shards 0, 1 which are both stuck at TRANSLOG stage for hours. CLuster state is red. Please help me troubleshoot this problem: "id": 1, "type": "STORE", "stage": "TRANSLOG", "primary": tru…

---

## [ES get Java heap space exception and can not startup correctly](https://discuss.elastic.co/t/es-get-java-heap-space-exception-and-can-not-startup-correctly/13382)

<div class="topic-metadata">

**Author:** [@lijionly](https://discuss.elastic.co/u/lijionly)\
**Replies:** 3\
**Last updated:** [August 29, 2013, 7:08pm UTC](https://discuss.elastic.co/t/es-get-java-heap-space-exception-and-can-not-startup-correctly/13382 "2013-08-29T19:08:22Z")

</div>

Hi, in elasticsearch.log, there are exceptions: \[2013-08-29 16:52:29,789\]\[WARN \]\[transport.netty \] \[Union Jack\] exception caught on transport layer \[\[id: 0x4cb1ed1c, /192.168.109.136:59970 =\> /192.168.10…

---

## [Unable to connect elasticsearch with ldap realm](https://discuss.elastic.co/t/unable-to-connect-elasticsearch-with-ldap-realm/231339)

<div class="topic-metadata">

**Author:** [@bansalhp](https://discuss.elastic.co/u/bansalhp)\
**Replies:** 4\
**Last updated:** [June 2, 2020, 12:45pm UTC](https://discuss.elastic.co/t/unable-to-connect-elasticsearch-with-ldap-realm/231339 "2020-06-02T12:45:14Z")

</div>

Hi. We are planing to migrate our elasticseach security from Searchguard to xpac security. Below is the error we are getting while connecting to elasticseach via ldap realm \[2020-05-06T04:46:53,557\]\[DEBUG\]\[o.e.x.s.a.A…

---

## [Nested Logstash Config files](https://discuss.elastic.co/t/nested-logstash-config-files/232657)

<div class="topic-metadata">

**Author:** [@karthik3](https://discuss.elastic.co/u/karthik3)\
**Replies:** 4\
**Last updated:** [May 18, 2020, 8:42am UTC](https://discuss.elastic.co/t/nested-logstash-config-files/232657 "2020-05-18T08:42:52Z")

</div>

Hi , I like to pass payload to another logstash config file and post the payload fields to ES once it successfully it will post other fields to ES. filter { if "START \[\[" in \[message\] { grok { match =\> { "message…

---

## [Logstash installation on older version](https://discuss.elastic.co/t/logstash-installation-on-older-version/199771)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 4\
**Last updated:** [October 22, 2019, 3:38am UTC](https://discuss.elastic.co/t/logstash-installation-on-older-version/199771 "2019-10-22T03:38:11Z")

</div>

Hi how can I install Logstash 7.1.1 on Centos 6.10 ? So far cant get any guide on this. Reason, my other servers are using Kibana and ES version 7.1.1. Thanks

---

## [Question about s3 output plugin](https://discuss.elastic.co/t/question-about-s3-output-plugin/124321)

<div class="topic-metadata">

**Author:** [@analyst3292](https://discuss.elastic.co/u/analyst3292)\
**Replies:** 4\
**Last updated:** [March 16, 2018, 7:53pm UTC](https://discuss.elastic.co/t/question-about-s3-output-plugin/124321 "2018-03-16T19:53:10Z")

</div>

Is it normal for the files logstash puts to s3 to be the raw log file, no parsing? It would seem that the s3 output discards any work done by the filters. \[root@sysmanage logstash-docker\]# cat pipeline/logstash.conf…

---

## [Elastic - flattening multiple fields](https://discuss.elastic.co/t/elastic-flattening-multiple-fields/286246)

<div class="topic-metadata">

**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\
**Replies:** 5\
**Last updated:** [October 14, 2021, 2:01pm UTC](https://discuss.elastic.co/t/elastic-flattening-multiple-fields/286246 "2021-10-14T14:01:04Z")

</div>

Hi everybody, In one of the Elastic indices, I have a problem with some documents. I receive JSON from filebeat and parse them with the json plugin. But some of them contain a lot of fields. Example response.0.field1…

---

## [Scripted field returns null on querying for logs](https://discuss.elastic.co/t/scripted-field-returns-null-on-querying-for-logs/282072)

<div class="topic-metadata">

**Author:** [@NavinKu10](https://discuss.elastic.co/u/NavinKu10)\
**Replies:** 5\
**Last updated:** [September 1, 2021, 12:52pm UTC](https://discuss.elastic.co/t/scripted-field-returns-null-on-querying-for-logs/282072 "2021-09-01T12:52:57Z")

</div>

Hi community. I am a newbie in Kibana and Elastic search. I am using scripted fields to search for logs containing certains strings and then visualize them. I have written my script in Painless. Here is the line that is…

---

## [How to load tables from mysql to elasticsearch](https://discuss.elastic.co/t/how-to-load-tables-from-mysql-to-elasticsearch/242275)

<div class="topic-metadata">

**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\
**Replies:** 5\
**Last updated:** [July 23, 2020, 6:14am UTC](https://discuss.elastic.co/t/how-to-load-tables-from-mysql-to-elasticsearch/242275 "2020-07-23T06:14:24Z")

</div>

Hi, I want load multiple tables from mysql to different indexes in elastic search(i.e; each table in mysql to different index in elastic search), Is it possible to load using single logstash config file. Anyone can hel…

---

## [Wait for completion option in delete query for es 2.3](https://discuss.elastic.co/t/wait-for-completion-option-in-delete-query-for-es-2-3/231402)

<div class="topic-metadata">

**Author:** [@nomanahmed](https://discuss.elastic.co/u/nomanahmed)\
**Replies:** 5\
**Last updated:** [May 28, 2020, 1:10pm UTC](https://discuss.elastic.co/t/wait-for-completion-option-in-delete-query-for-es-2-3/231402 "2020-05-28T13:10:01Z")

</div>

Do we have wait for completion option in delete query for es 2.3? I search but found nothing, can anyone confirm and point me to any alternative method of it? Command I m using curl --request DELETE "http://localhost:92…

---

## [Error publishing metricbeat to logstash](https://discuss.elastic.co/t/error-publishing-metricbeat-to-logstash/107157)

<div class="topic-metadata">

**Author:** [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)\
**Replies:** 5\
**Last updated:** [November 13, 2017, 6:33pm UTC](https://discuss.elastic.co/t/error-publishing-metricbeat-to-logstash/107157 "2017-11-13T18:33:16Z")

</div>

Hi, I have installed metricbeat on windows and configured it to send logs/metric to logstash. However it fails with below error message: 017-11-10T14:13:36+05:30 ERR Failed to publish events (host: 10.5.52.136:5044:102…

---

## [Mistake in Elastic Cloud Documention , Please help .. ...!](https://discuss.elastic.co/t/mistake-in-elastic-cloud-documention-please-help/104298)

<div class="topic-metadata">

**Author:** [@edu\_ever](https://discuss.elastic.co/u/edu_ever)\
**Replies:** 5\
**Last updated:** [October 22, 2017, 9:09am UTC](https://discuss.elastic.co/t/mistake-in-elastic-cloud-documention-please-help/104298 "2017-10-22T09:09:06Z")

</div>

Hello i have spin up elastic cloud cluster and going through some of the tutorials mentioned in the "Getting Started Content Pack" but at some pint of step, i have to index sample apache\_logs file into my cloud cluster b…

---

## [Logstash 2.3 with Elasticsearch 5.0](https://discuss.elastic.co/t/logstash-2-3-with-elasticsearch-5-0/66342)

<div class="topic-metadata">

**Author:** [@Jay\_Dihenkar](https://discuss.elastic.co/u/Jay_Dihenkar)\
**Replies:** 5\
**Last updated:** [November 17, 2016, 2:29pm UTC](https://discuss.elastic.co/t/logstash-2-3-with-elasticsearch-5-0/66342 "2016-11-17T14:29:56Z")

</div>

Can we use Logstash 2.3 with Elasticsearch 5.0? Compatibility matrix says : It's not supported. If not what can be the breaking changes to take note of? """ Matrix """ Supported Logstash Versions Logstash Version…

---

## [Index Alias and Index operation](https://discuss.elastic.co/t/index-alias-and-index-operation/44369)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 5\
**Last updated:** [March 15, 2016, 2:19am UTC](https://discuss.elastic.co/t/index-alias-and-index-operation/44369 "2016-03-15T02:19:26Z")

</div>

I have to create an index alias representing two indexes, but index the content to one of the indexes based on a value. The case is as below: Let us assume I have indexes 20160314\_16 and 20160317\_20 representing a week…

---

## [Several questions about a cluster](https://discuss.elastic.co/t/several-questions-about-a-cluster/28497)

<div class="topic-metadata">

**Author:** [@nkoleff](https://discuss.elastic.co/u/nkoleff)\
**Replies:** 5\
**Last updated:** [September 2, 2015, 9:07am UTC](https://discuss.elastic.co/t/several-questions-about-a-cluster/28497 "2015-09-02T09:07:07Z")

</div>

Hello there, I've got a cluster of 3 nodes 1 master +data 2 data nodes. I am planning to feed it from Logstash and I am wondering if each of these 3 nodes should have Logstash installed or it may be just 1 pointed to …

---

## [Elasticsearch division with statistical facets](https://discuss.elastic.co/t/elasticsearch-division-with-statistical-facets/10450)

<div class="topic-metadata">

**Author:** [@Ahmet\_DAL](https://discuss.elastic.co/u/Ahmet_DAL)\
**Replies:** 5\
**Last updated:** [January 23, 2013, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-division-with-statistical-facets/10450 "2013-01-23T16:01:53Z")

</div>

I need to take divisions of two field. I tried it with statistical facets with scripting. But it gives me NaN values. The query is like, { "size": 0, "query": { "match\_all": {} }, "facets": { "s…

---

## [Disjunctive facets using the javascript app search client](https://discuss.elastic.co/t/disjunctive-facets-using-the-javascript-app-search-client/301629)

<div class="topic-metadata">

**Author:** [@pabvid](https://discuss.elastic.co/u/pabvid)\
**Replies:** 2\
**Last updated:** [April 6, 2022, 6:49am UTC](https://discuss.elastic.co/t/disjunctive-facets-using-the-javascript-app-search-client/301629 "2022-04-06T06:49:34Z")

</div>

Hi! I am facing some issues with the javascript client of app search and maybe you can help me. I have an engine with documents loaded into elastic and now I'm playing with this js client to fetch the data. I created …

---

## [Showing tps in TSVB in kibana](https://discuss.elastic.co/t/showing-tps-in-tsvb-in-kibana/286926)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 2\
**Last updated:** [November 1, 2021, 5:19am UTC](https://discuss.elastic.co/t/showing-tps-in-tsvb-in-kibana/286926 "2021-11-01T05:19:27Z")

</div>

Hi all, I am using kibana version 7.13.1 TSVB visualize to show TPS (COUNT per Second). the output graph is as following in "Last 15 minutes" in the case of setting "Override index pattern" No and using auto interval (…

---

## [Unable to find EMS tile configuration for id: road\_map](https://discuss.elastic.co/t/unable-to-find-ems-tile-configuration-for-id-road-map/186990)

<div class="topic-metadata">

**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\
**Replies:** 2\
**Last updated:** [June 24, 2019, 8:37pm UTC](https://discuss.elastic.co/t/unable-to-find-ems-tile-configuration-for-id-road-map/186990 "2019-06-24T20:37:13Z")

</div>

How do we fix this? Have also tried doing as per the link It was working fine before i upgraded to 6.8.0. I have a setup where we are behind corporate proxy Please help.

---

## [Running Rally against AWS Elasticsearch](https://discuss.elastic.co/t/running-rally-against-aws-elasticsearch/185059)

<div class="topic-metadata">

**Author:** [@Gaurav\_Deshmukh](https://discuss.elastic.co/u/Gaurav_Deshmukh)\
**Replies:** 2\
**Last updated:** [June 11, 2019, 10:17pm UTC](https://discuss.elastic.co/t/running-rally-against-aws-elasticsearch/185059 "2019-06-11T22:17:50Z")

</div>

I created a simple challenge and a operation with custom Parameter Source. The idea behind this implementation is to hit an AWS managed Elasticsearch cluster with the defined challenge which says run the operation for 20…

---

## [How Hive connect to Elasticsearch when X-Pack installed](https://discuss.elastic.co/t/how-hive-connect-to-elasticsearch-when-x-pack-installed/92407)

<div class="topic-metadata">

**Author:** [@huzhengkai](https://discuss.elastic.co/u/huzhengkai)\
**Replies:** 2\
**Last updated:** [July 10, 2017, 3:36am UTC](https://discuss.elastic.co/t/how-hive-connect-to-elasticsearch-when-x-pack-installed/92407 "2017-07-10T03:36:13Z")

</div>

Before i install the X-Pack,I execute the following in the Hive： CREATE EXTERNAL TABLE T\_TEMP\_SALES\_INFO(id string,loan\_no string,str\_no string) STORED BY 'org.elasticsearch.hadoop.hive.EsStorageHandler' TBLPROPERTIES(…

---

## [Completion Suggester Text Length](https://discuss.elastic.co/t/completion-suggester-text-length/47643)

<div class="topic-metadata">

**Author:** [@matt\_lethargic](https://discuss.elastic.co/u/matt_lethargic)\
**Replies:** 2\
**Last updated:** [April 19, 2016, 9:52pm UTC](https://discuss.elastic.co/t/completion-suggester-text-length/47643 "2016-04-19T21:52:39Z")

</div>

Hi, I've got a question that I can't find in the docs. I'm doing a suggestion search for "queens park", if I enter "queens" or even "queens par" it works fine (the text is 10 chars or less) but then if I use "queens p…

---

## [If else script filter does not work](https://discuss.elastic.co/t/if-else-script-filter-does-not-work/44221)

<div class="topic-metadata">

**Author:** [@84shalinisingh](https://discuss.elastic.co/u/84shalinisingh)\
**Replies:** 2\
**Last updated:** [March 16, 2016, 3:56am UTC](https://discuss.elastic.co/t/if-else-script-filter-does-not-work/44221 "2016-03-16T03:56:06Z")

</div>

Hi All, I am using elastic search version 1.4.2. I am creating a scripted term as below. "aggregations" : { "aggr~~derived\_i~g" : { "terms" : { "script" : "if(doc\['g'\].value \> 50) {'big sal'} else {…

---

## [Difference between task creation for a write and read-update-write operation in ES](https://discuss.elastic.co/t/difference-between-task-creation-for-a-write-and-read-update-write-operation-in-es/738)

<div class="topic-metadata">

**Author:** [@Piyush\_Goyal](https://discuss.elastic.co/u/Piyush_Goyal)\
**Replies:** 2\
**Last updated:** [May 16, 2015, 9:47am UTC](https://discuss.elastic.co/t/difference-between-task-creation-for-a-write-and-read-update-write-operation-in-es/738 "2015-05-16T09:47:18Z")

</div>

As asked by Costin, here is the questions and related answer set related to the discussion: Question: I saw a different behavior of creating task for write to ES operation while working on my project. The diffe…

---

## [Illegal\_argument\_exception](https://discuss.elastic.co/t/illegal-argument-exception/290743)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 2:05am UTC](https://discuss.elastic.co/t/illegal-argument-exception/290743 "2021-12-06T02:05:39Z")

</div>

Hi, I have problem with elastic error illegal\_argument\_exception because I changed field from text to number. However only new indexes have number field, old still have text field - I guess. "type": "illegal\_argument\_ex…

---

## [Further improvements for log\_ecs\_reformatting](https://discuss.elastic.co/t/further-improvements-for-log-ecs-reformatting/276759)

<div class="topic-metadata">

**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Replies:** 7\
**Last updated:** [July 20, 2021, 4:37am UTC](https://discuss.elastic.co/t/further-improvements-for-log-ecs-reformatting/276759 "2021-07-20T04:37:06Z")

</div>

APM Agent language and version: Java 1.24.0 Browser version: Chrome 91 Hello all, I am still testing the Java APM agent with log\_ecs\_reformatting enabled and found the following problems: APM agent generates (for E…

---

## [How logstash memory behaves with lot of beats connections?](https://discuss.elastic.co/t/how-logstash-memory-behaves-with-lot-of-beats-connections/240365)

<div class="topic-metadata">

**Author:** [@obuez](https://discuss.elastic.co/u/obuez)\
**Replies:** 7\
**Last updated:** [July 9, 2020, 1:47pm UTC](https://discuss.elastic.co/t/how-logstash-memory-behaves-with-lot-of-beats-connections/240365 "2020-07-09T13:47:19Z")

</div>

Hi all, We got some little issues in production around Logstash and we are a bit worried for the future, we would like to know the community's opinion on this. Let me explain: We have ran Logstash in production so far …

---

## [Logstash using protobuf as http input codec](https://discuss.elastic.co/t/logstash-using-protobuf-as-http-input-codec/125697)

<div class="topic-metadata">

**Author:** [@rafael.leon](https://discuss.elastic.co/u/rafael.leon)\
**Replies:** 1\
**Last updated:** [March 28, 2018, 6:26am UTC](https://discuss.elastic.co/t/logstash-using-protobuf-as-http-input-codec/125697 "2018-03-28T06:26:43Z")

</div>

Hi everyone. I'm facing some issues using a dockerized logstash when I use an http input with protobuf as codec. I'm using logstash (6.2.3) to receive some dynatrace's Business Transactions and then route them to differ…

---

## [Create Top slow requests graph](https://discuss.elastic.co/t/create-top-slow-requests-graph/79822)

<div class="topic-metadata">

**Author:** [@tkumark](https://discuss.elastic.co/u/tkumark)\
**Replies:** 1\
**Last updated:** [March 24, 2017, 1:46pm UTC](https://discuss.elastic.co/t/create-top-slow-requests-graph/79822 "2017-03-24T13:46:41Z")

</div>

Hi I am completely new to ELK and I just using for log analysis. I need to create a graph that give the top 10 slow web sites. I do know about visualization where we define the x and y axis and also about split line. T…

---

## [Cross-package code coverage in golang](https://discuss.elastic.co/t/cross-package-code-coverage-in-golang/62627)

<div class="topic-metadata">

**Author:** [@kwk](https://discuss.elastic.co/u/kwk)\
**Replies:** 1\
**Last updated:** [October 10, 2016, 11:04am UTC](https://discuss.elastic.co/t/cross-package-code-coverage-in-golang/62627 "2016-10-10T11:04:23Z")

</div>

I've read the article https://www.elastic.co/blog/code-coverage-for-your-golang-system-tests and wondered, if you have managed to get cross-package coverage? To explain what I mean: Suppose you have a package A and you…

---

## [Testing ElasticSearch - Java junit - is it possible to create unit tests?](https://discuss.elastic.co/t/testing-elasticsearch-java-junit-is-it-possible-to-create-unit-tests/59750)

<div class="topic-metadata">

**Author:** [@uncleBens](https://discuss.elastic.co/u/uncleBens)\
**Replies:** 1\
**Last updated:** [September 4, 2016, 6:14pm UTC](https://discuss.elastic.co/t/testing-elasticsearch-java-junit-is-it-possible-to-create-unit-tests/59750 "2016-09-04T18:14:04Z")

</div>

Hi, Is it possible to create inmemory elasticsearch? I want to run tests creating index, inserting documents, searching them with some business logic.. And when Junits start, there is no ElasticSearch index instance on t…

---

## [Logstash with Google Pub/Sub](https://discuss.elastic.co/t/logstash-with-google-pub-sub/42952)

<div class="topic-metadata">

**Author:** [@Ilya\_Levin](https://discuss.elastic.co/u/Ilya_Levin)\
**Replies:** 1\
**Last updated:** [February 29, 2016, 9:48am UTC](https://discuss.elastic.co/t/logstash-with-google-pub-sub/42952 "2016-02-29T09:48:41Z")

</div>

Hi All I'm want to use logstash-input-google-cloud-pubsub as input for logstash 2.2.2. All my tries to run it have failed so far. Installing out of the box gives me an dependency error gcloud 0.6.1 requires Ruby 2.0 …

---

## [Hyphenation decompounder - how to use?](https://discuss.elastic.co/t/hyphenation-decompounder-how-to-use/31399)

<div class="topic-metadata">

**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\
**Replies:** 1\
**Last updated:** [October 5, 2015, 11:34am UTC](https://discuss.elastic.co/t/hyphenation-decompounder-how-to-use/31399 "2015-10-05T11:34:36Z")

</div>

Hi! I'm trying to use the hyphenation decompounder as described here\[1\], on elasticsearch 1.7.2. I downloaded the hyphenation grammar files, trying to use both an inline list of words, a large file of words, but it is n…

---

## [Timelion STD use season](https://discuss.elastic.co/t/timelion-std-use-season/85027)

<div class="topic-metadata">

**Author:** [@bertvervaele](https://discuss.elastic.co/u/bertvervaele)\
**Replies:** 1\
**Last updated:** [May 9, 2017, 5:19pm UTC](https://discuss.elastic.co/t/timelion-std-use-season/85027 "2017-05-09T17:19:12Z")

</div>

Hello everyone, I have a question about timelion. I'm trying to do some anomaly detection. I use the holt winter of last 4 weeks to predict the value. But I would like to add 3 time the std to it. But I don't want the s…

---

## [Aggregate On Key Within Date / Time Range Multiple Buckets](https://discuss.elastic.co/t/aggregate-on-key-within-date-time-range-multiple-buckets/173179)

<div class="topic-metadata">

**Author:** [@Chris\_Bartos](https://discuss.elastic.co/u/Chris_Bartos)\
**Replies:** 6\
**Last updated:** [March 22, 2019, 3:03pm UTC](https://discuss.elastic.co/t/aggregate-on-key-within-date-time-range-multiple-buckets/173179 "2019-03-22T15:03:16Z")

</div>

Hello, I'm not really sure how to ask this question succinctly, so maybe I can give an example of what I'm trying to do. I have indexed 30 minute timeslots for a room reservation system. Maybe something like this: \[ { …

---

## [\_score higher than suspected](https://discuss.elastic.co/t/-score-higher-than-suspected/27820)

<div class="topic-metadata">

**Author:** [@Wojciech\_Rola](https://discuss.elastic.co/u/Wojciech_Rola)\
**Replies:** 6\
**Last updated:** [September 1, 2015, 9:06am UTC](https://discuss.elastic.co/t/-score-higher-than-suspected/27820 "2015-09-01T09:06:35Z")

</div>

Hi @kimchy \[smile\] I was waiting for the moment I will need your help and it's today \[smiley\] . I have tags, with this mapping: "tag": { "\_all": { "index\_analyzer": "nGram\_analyzer", …

---

## [Error in custom analyzer and mappings in ES v7](https://discuss.elastic.co/t/error-in-custom-analyzer-and-mappings-in-es-v7/218593)

<div class="topic-metadata">

**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\
**Replies:** 3\
**Last updated:** [February 10, 2020, 6:12pm UTC](https://discuss.elastic.co/t/error-in-custom-analyzer-and-mappings-in-es-v7/218593 "2020-02-10T18:12:34Z")

</div>

Hi, I'm trying to migrate my ES setup from 2.3 to 7.5. However, I'm facing an error with my custom analyzer: elastic: Error 400 (Bad Request): analyzer \[keyword\_lowercase\_remove\_space\] not found for field \[identity\_exac…

---

## [Calculation Aggregation Kibana 5.4.0](https://discuss.elastic.co/t/calculation-aggregation-kibana-5-4-0/84780)

<div class="topic-metadata">

**Author:** [@MAXxATTAXx](https://discuss.elastic.co/u/MAXxATTAXx)\
**Replies:** 3\
**Last updated:** [May 8, 2017, 10:11pm UTC](https://discuss.elastic.co/t/calculation-aggregation-kibana-5-4-0/84780 "2017-05-08T22:11:36Z")

</div>

Hi, I been playing around with Kibana 5.4.0 new Visual Builder feature. One of the aggregations i'm really curious about is the Calculation aggregation that allows you to run a Painless script and set variables. But i h…

[Previous page](https://discuss.elastic.co/top.md?page=1168&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1170&per_page=50&period=all)
