# Top

**URL:** https://discuss.elastic.co/top.md?page=1184&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1185

---

## [Attempted to resurrect connection to dead ES instance, but got an error](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/333650)

<div class="topic-metadata">

**Author:** [@snalaband](https://discuss.elastic.co/u/snalaband)\
**Replies:** 4\
**Last updated:** [May 31, 2023, 9:03am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/333650 "2023-05-31T09:03:02Z")

</div>

Attempted to resurrect connection to dead ES instance, but got an error. {:error\_type=\>LogStash::Outputs::Elasticsearch::HttpClient::Pool::BadResponseCodeError, :error=\>"Got response code '401' contacting Elasticsearch a…

---

## [Just one unknown field - Filebeat json parsing](https://discuss.elastic.co/t/just-one-unknown-field-filebeat-json-parsing/234738)

<div class="topic-metadata">

**Author:** [@vdelcampo](https://discuss.elastic.co/u/vdelcampo)\
**Replies:** 4\
**Last updated:** [June 4, 2020, 2:00pm UTC](https://discuss.elastic.co/t/just-one-unknown-field-filebeat-json-parsing/234738 "2020-06-04T14:00:46Z")

</div>

Hi. Im using filebeat to send to Elasticsearch a preformatted json logfile. The files are parsing fine, but i have an unknown field and i don´t know why: Any ideas? Thanks in advance Víctor

---

## [TSVB empty/null fields](https://discuss.elastic.co/t/tsvb-empty-null-fields/226591)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 4\
**Last updated:** [April 13, 2020, 2:10pm UTC](https://discuss.elastic.co/t/tsvb-empty-null-fields/226591 "2020-04-13T14:10:22Z")

</div>

Hi, how can I exclude null/empty fields on TSVB (time series)? I use cardinality, group by terms, order by cardinality, direction desc, top 50 but still got in legend most values with 0. I have logs like HTTP, there is…

---

## [Import Index Pattern "Source filters"](https://discuss.elastic.co/t/import-index-pattern-source-filters/160665)

<div class="topic-metadata">

**Author:** [@Kenneth\_M\_Kolano](https://discuss.elastic.co/u/Kenneth_M_Kolano)\
**Replies:** 4\
**Last updated:** [December 19, 2018, 10:10pm UTC](https://discuss.elastic.co/t/import-index-pattern-source-filters/160665 "2018-12-19T22:10:01Z")

</div>

I'm trying to work out how to import terms into Kibana's Management / Index Patterns / Source filters pane. That pane doesn't seem to be documented, and searches are filled with the related filtering of individual querie…

---

## [How can I add this ruby code?](https://discuss.elastic.co/t/how-can-i-add-this-ruby-code/152580)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 4\
**Last updated:** [October 21, 2018, 11:33pm UTC](https://discuss.elastic.co/t/how-can-i-add-this-ruby-code/152580 "2018-10-21T23:33:10Z")

</div>

Hi, I have GPS coordinates in DMS (degree minute second) that I need to convert to DD (decimal degrees) so they can be used in Elastic as geo points. I already wrote I probably not very good filter to convert South and…

---

## [ES running in docker container can not discover the host's name and the host's ip](https://discuss.elastic.co/t/es-running-in-docker-container-can-not-discover-the-hosts-name-and-the-hosts-ip/47786)

<div class="topic-metadata">

**Author:** [@wenma](https://discuss.elastic.co/u/wenma)\
**Replies:** 4\
**Last updated:** [April 21, 2016, 9:35am UTC](https://discuss.elastic.co/t/es-running-in-docker-container-can-not-discover-the-hosts-name-and-the-hosts-ip/47786 "2016-04-21T09:35:14Z")

</div>

Elasticsearch version: v2.3.1 JVM version: 1.8.0\_77 OS version: centos:6.6 ES running in docker container can not discover the host's name and the host's ip, I used the HOST network model， but the es in container c…

---

## [Bug - Regex parsing for procs setting in topbeat.yml](https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422)

<div class="topic-metadata">

**Author:** [@janwillemvd](https://discuss.elastic.co/u/janwillemvd)\
**Replies:** 4\
**Last updated:** [April 6, 2016, 6:51am UTC](https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422 "2016-04-06T06:51:20Z")

</div>

Hi, It looks like there is a bug with respect to the 'procs' setting in topbeat.yml. We followed the instructions on https://www.elastic.co/guide/en/beats/topbeat/current/topbeat-configuration.html and we use the fo…

---

## [TransportClient Throws 'java.lang.OutOfMemoryError: GC overhead limit exceeded' when all nodes in cluster are down (1.1.1)](https://discuss.elastic.co/t/transportclient-throws-java-lang-outofmemoryerror-gc-overhead-limit-exceeded-when-all-nodes-in-cluster-are-down-1-1-1/18267)

<div class="topic-metadata">

**Author:** [@Santiago\_Ferrer\_Dehe](https://discuss.elastic.co/u/Santiago_Ferrer_Dehe)\
**Replies:** 4\
**Last updated:** [June 24, 2014, 4:39am UTC](https://discuss.elastic.co/t/transportclient-throws-java-lang-outofmemoryerror-gc-overhead-limit-exceeded-when-all-nodes-in-cluster-are-down-1-1-1/18267 "2014-06-24T04:39:50Z")

</div>

Hi there! I'm having this exception (\*'java.lang.OutOfMemoryError: GC overhead limit exceeded'\*) \*in client\* when my ES 1.1.1 cluster goes down. Im having problems with the cluster (work in progress) but it doesn'…

---

## [Extending Thai analyzer](https://discuss.elastic.co/t/extending-thai-analyzer/15656)

<div class="topic-metadata">

**Author:** [@Min\_Cha](https://discuss.elastic.co/u/Min_Cha)\
**Replies:** 4\
**Last updated:** [February 14, 2014, 10:48am UTC](https://discuss.elastic.co/t/extending-thai-analyzer/15656 "2014-02-14T10:48:24Z")

</div>

Hi folks. I would like to develop for a searching system for Thai language. First of all, I found Thai analyzer and it seemed like good. Actually, but, It doesn\`t meet my whole requirement. I decided what extend…

---

## [Kibana - Request Timeout after 3000ms](https://discuss.elastic.co/t/kibana-request-timeout-after-3000ms/241753)

<div class="topic-metadata">

**Author:** [@gferrette](https://discuss.elastic.co/u/gferrette)\
**Replies:** 2\
**Last updated:** [August 14, 2020, 7:17pm UTC](https://discuss.elastic.co/t/kibana-request-timeout-after-3000ms/241753 "2020-08-14T19:17:37Z")

</div>

Hello! Please, we are getting the error below in kibana log a few times during the day. We had already change the values below on kibana.yml and restarted kibana, but the error persists showing the same value "3000ms",…

---

## [How is an update handled when an integer field is incremented?](https://discuss.elastic.co/t/how-is-an-update-handled-when-an-integer-field-is-incremented/130697)

<div class="topic-metadata">

**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\
**Replies:** 2\
**Last updated:** [May 6, 2018, 10:29am UTC](https://discuss.elastic.co/t/how-is-an-update-handled-when-an-integer-field-is-incremented/130697 "2018-05-06T10:29:24Z")

</div>

I was curious how Lucene handles updates to documents where an integer field is incremented. I am designing a system that will make a lot of script updates to documents by incrementing the value of an integer field and …

---

## [ES 6.x removal of mapping types](https://discuss.elastic.co/t/es-6-x-removal-of-mapping-types/114023)

<div class="topic-metadata">

**Author:** [@jv123](https://discuss.elastic.co/u/jv123)\
**Replies:** 2\
**Last updated:** [January 6, 2018, 4:24am UTC](https://discuss.elastic.co/t/es-6-x-removal-of-mapping-types/114023 "2018-01-06T04:24:08Z")

</div>

Hello guys! I hope you are ok. I'm coming from ES 5.x . Around a year ago I had an objective to setup testing ELK service which I achieved. Due to various reasons I stopped using it and left pretty much as it is until…

---

## [Questions Migrating to Java High Level Rest Client 5.6](https://discuss.elastic.co/t/questions-migrating-to-java-high-level-rest-client-5-6/101677)

<div class="topic-metadata">

**Author:** [@Herm\_Flink](https://discuss.elastic.co/u/Herm_Flink)\
**Replies:** 2\
**Last updated:** [September 25, 2017, 11:30am UTC](https://discuss.elastic.co/t/questions-migrating-to-java-high-level-rest-client-5-6/101677 "2017-09-25T11:30:54Z")

</div>

Hi All, At the moment, we are investigating efforts to move away from the Java Transport Client to the new Java High Level Rest Client. Two questions already popped up: For the BulkProcessor we now need to make use o…

---

## [It is possible to create multiple groks for multiple paths?](https://discuss.elastic.co/t/it-is-possible-to-create-multiple-groks-for-multiple-paths/87530)

<div class="topic-metadata">

**Author:** [@tabs11](https://discuss.elastic.co/u/tabs11)\
**Replies:** 2\
**Last updated:** [May 30, 2017, 9:48am UTC](https://discuss.elastic.co/t/it-is-possible-to-create-multiple-groks-for-multiple-paths/87530 "2017-05-30T09:48:17Z")

</div>

I mean, define two paths, which the files (csv or log) in one path have 9 columns and in other path the files have 11 columns, then apply two different groks, one for the file with 9 columns and other for the file with 1…

---

## [Update elasticsearch cluster hardware with no downtime](https://discuss.elastic.co/t/update-elasticsearch-cluster-hardware-with-no-downtime/27441)

<div class="topic-metadata">

**Author:** [@echin1999\_2](https://discuss.elastic.co/u/echin1999_2)\
**Replies:** 2\
**Last updated:** [August 17, 2015, 2:54pm UTC](https://discuss.elastic.co/t/update-elasticsearch-cluster-hardware-with-no-downtime/27441 "2015-08-17T14:54:44Z")

</div>

Hi All, I have elasticsearch 0.90 cluster running a single node on each of two Amazon instances. The cluster is configured for: 5 shards / 2 replica From my understanding of how elasticsearch works, i should be able …

---

## [使用Docker设置timezone环境变量无效（timezone not working in elasticsearch on docker）](https://discuss.elastic.co/t/docker-timezone-timezone-not-working-in-elasticsearch-on-docker/300262)

<div class="topic-metadata">

**Author:** [@emmet.jiang](https://discuss.elastic.co/u/emmet.jiang)\
**Replies:** 1\
**Last updated:** [April 8, 2022, 1:08am UTC](https://discuss.elastic.co/t/docker-timezone-timezone-not-working-in-elasticsearch-on-docker/300262 "2022-04-08T01:08:50Z")

</div>

经过我的测试发现，\>=7.15.2 版本无法使用TZ设置时区，例如：7.17.1、8.1.0 After my test, I found that the time zone cannot be set with TZ in version \> = 7.15.2, such as 7.17.1 and 8.1.0。 docker run -d -e "TZ=Asia/Shanghai" -e "discovery.type=sin…

---

## [Filter Ratio not displaying data](https://discuss.elastic.co/t/filter-ratio-not-displaying-data/241490)

<div class="topic-metadata">

**Author:** [@franco-martin](https://discuss.elastic.co/u/franco-martin)\
**Replies:** 7\
**Last updated:** [July 16, 2020, 6:55pm UTC](https://discuss.elastic.co/t/filter-ratio-not-displaying-data/241490 "2020-07-16T18:55:37Z")

</div>

Hi, im indexing some data and I want to know the ratio of documents that have isCompliant as True. I visualized the data as count over time and I see documents. Then I moved to gauge and applied the filter as grouping …

---

## [Kibana :: Count if the id not exist for the event](https://discuss.elastic.co/t/kibana-count-if-the-id-not-exist-for-the-event/238609)

<div class="topic-metadata">

**Author:** [@Jai1](https://discuss.elastic.co/u/Jai1)\
**Replies:** 7\
**Last updated:** [June 26, 2020, 8:01am UTC](https://discuss.elastic.co/t/kibana-count-if-the-id-not-exist-for-the-event/238609 "2020-06-26T08:01:09Z")

</div>

hi, I have a data like this: id : 1,event: event1 id: 2,event:event1 id: 2,event:event2 id:3,event:event1 Need to count the ids having only event1 not in event2 expecting is 2 count

---

## [Logstash ingest pipeline at elasticsearch](https://discuss.elastic.co/t/logstash-ingest-pipeline-at-elasticsearch/146322)

<div class="topic-metadata">

**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\
**Replies:** 1\
**Last updated:** [August 28, 2018, 11:11am UTC](https://discuss.elastic.co/t/logstash-ingest-pipeline-at-elasticsearch/146322 "2018-08-28T11:11:23Z")

</div>

Hi All i m trying to use the filebeat -\> logstash -\> elasticsearch flow. When i enable the system module from filebeat the message doesn't parse so trying to use the output.elasticsearch pipeline option is not working…

---

## [\_grokparsefailure in Kibana tag (Synology messages)](https://discuss.elastic.co/t/grokparsefailure-in-kibana-tag-synology-messages/111496)

<div class="topic-metadata">

**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\
**Replies:** 7\
**Last updated:** [December 21, 2017, 7:18am UTC](https://discuss.elastic.co/t/grokparsefailure-in-kibana-tag-synology-messages/111496 "2017-12-21T07:18:01Z")

</div>

Hi, I recieve a \_grokparsefailure in Kibana tags but all the fields are splitted correct. How can I remove the grokparsefailure for those incomming messages? if \[logsource\] == "BackupStation" { mutate { …

---

## [Kibana + elasticsearch 5.2.0 monitoring ui not showing (RESOLVED)](https://discuss.elastic.co/t/kibana-elasticsearch-5-2-0-monitoring-ui-not-showing-resolved/73441)

<div class="topic-metadata">

**Author:** [@Troy\_Axthelm](https://discuss.elastic.co/u/Troy_Axthelm)\
**Replies:** 1\
**Last updated:** [January 31, 2017, 11:33pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-5-2-0-monitoring-ui-not-showing-resolved/73441 "2017-01-31T23:33:41Z")

</div>

I recently upgraded to elasticsearch and kibana 5.2.0. Everything looks to have gone great during the upgrade. I have installed the x-pack plugin and have disabled security (do not need it for this use case) in both kib…

---

## [App search: create new engine problem](https://discuss.elastic.co/t/app-search-create-new-engine-problem/202855)

<div class="topic-metadata">

**Author:** [@JyL](https://discuss.elastic.co/u/JyL)\
**Replies:** 6\
**Last updated:** [October 10, 2019, 12:50pm UTC](https://discuss.elastic.co/t/app-search-create-new-engine-problem/202855 "2019-10-10T12:50:33Z")

</div>

Hey guys, need help with a create new engine problem on app search. There is no engine with the same name that I am willing to create. But I did have an engine with the same name previous, so now when I create new engin…

---

## [Dynamic mapping: Confusing type inference behaviour](https://discuss.elastic.co/t/dynamic-mapping-confusing-type-inference-behaviour/197371)

<div class="topic-metadata">

**Author:** [@timost](https://discuss.elastic.co/u/timost)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 11:17am UTC](https://discuss.elastic.co/t/dynamic-mapping-confusing-type-inference-behaviour/197371 "2019-09-13T11:17:32Z")

</div>

Hi, I'm using Elasticsearch 6.8.2. I've been playing with mappings and I've stumbled across this behavior for which I can't find an explanation: # Step 0: Creating an index with dynamic mappings enabled PUT /test-data…

---

## [Nested Query - Exclude parent document with nested query and must\_not/filter](https://discuss.elastic.co/t/nested-query-exclude-parent-document-with-nested-query-and-must-not-filter/115185)

<div class="topic-metadata">

**Author:** [@saurav](https://discuss.elastic.co/u/saurav)\
**Replies:** 1\
**Last updated:** [January 16, 2018, 4:37pm UTC](https://discuss.elastic.co/t/nested-query-exclude-parent-document-with-nested-query-and-must-not-filter/115185 "2018-01-16T16:37:24Z")

</div>

Trying to exclude top level documents where one of the child documents doesn't match the query. For the example below, I'm trying to exclude all documents where one of it's nested jobs has current: true, and matches with…

---

## [How to get ML Categorization results break down by users](https://discuss.elastic.co/t/how-to-get-ml-categorization-results-break-down-by-users/320283)

<div class="topic-metadata">

**Author:** [@CamillePapillon](https://discuss.elastic.co/u/CamillePapillon)\
**Replies:** 8\
**Last updated:** [January 12, 2023, 12:45pm UTC](https://discuss.elastic.co/t/how-to-get-ml-categorization-results-break-down-by-users/320283 "2023-01-12T12:45:33Z")

</div>

Hi! I have an input index with tons of different logs messages coming from many different devices (same product type = similar logs, different users). My source index is break down with : timestamp, serial\_number, messa…

---

## [Error in parsing date field](https://discuss.elastic.co/t/error-in-parsing-date-field/233986)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 8\
**Last updated:** [May 24, 2020, 12:07pm UTC](https://discuss.elastic.co/t/error-in-parsing-date-field/233986 "2020-05-24T12:07:36Z")

</div>

Hi All, I'm trying to ingest data from database into elasticsearch, for which i have written mapping in kibana as PUT agent5 { "mappings" : { "properties": { "logged\_date": { "type": "date", …

---

## [Forcemerge concerns](https://discuss.elastic.co/t/forcemerge-concerns/211838)

<div class="topic-metadata">

**Author:** [@FabioRodrigues](https://discuss.elastic.co/u/FabioRodrigues)\
**Replies:** 8\
**Last updated:** [December 17, 2019, 4:56pm UTC](https://discuss.elastic.co/t/forcemerge-concerns/211838 "2019-12-17T16:56:22Z")

</div>

Hi! I need to reduce de size of a database by shrinking one field from a document. The problem is: the size of this database is huge. Also, I need to not reduce the performance of it significantly. I'm wondering if I ca…

---

## [Memory footprint](https://discuss.elastic.co/t/memory-footprint/9897)

<div class="topic-metadata">

**Author:** [@Garth](https://discuss.elastic.co/u/Garth)\
**Replies:** 8\
**Last updated:** [December 10, 2012, 9:11am UTC](https://discuss.elastic.co/t/memory-footprint/9897 "2012-12-10T09:11:14Z")

</div>

Given the following cluster configuration: 3 Master Only machines most likely VMs. 9 Client Only nodes & 9 Data Only nodes - 2 ES instances (CO+DO) per server. 296GB of RAM per physical server. 14 TB per DO machi…

---

## [Decode Base64](https://discuss.elastic.co/t/decode-base64/341359)

<div class="topic-metadata">

**Author:** [@Khaled\_Aldughili](https://discuss.elastic.co/u/Khaled_Aldughili)\
**Replies:** 3\
**Last updated:** [August 24, 2023, 11:23am UTC](https://discuss.elastic.co/t/decode-base64/341359 "2023-08-24T11:23:00Z")

</div>

hello , I am a bit new to ELK, I am trying to decode a base64 field to show as a string. I read through some articles that suggest using ingest pipeline, how would i do that exactly? PS: I tried runtime fields, bu…

---

## [Not using Elasticsearch, Logstash keeps asking for a license](https://discuss.elastic.co/t/not-using-elasticsearch-logstash-keeps-asking-for-a-license/322318)

<div class="topic-metadata">

**Author:** [@camilovietnam](https://discuss.elastic.co/u/camilovietnam)\
**Replies:** 3\
**Last updated:** [January 2, 2023, 4:53pm UTC](https://discuss.elastic.co/t/not-using-elasticsearch-logstash-keeps-asking-for-a-license/322318 "2023-01-02T16:53:38Z")

</div>

Hello! I am running Logstash with Opensearch, and I keep seeing the following message in the logs of my Logstash container: logstash | \[2023-01-02T14:17:52,107\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to r…

---

## [How to transfer elastic index created in local machine to elastic cloud?](https://discuss.elastic.co/t/how-to-transfer-elastic-index-created-in-local-machine-to-elastic-cloud/139571)

<div class="topic-metadata">

**Author:** [@Lakshay\_Arora](https://discuss.elastic.co/u/Lakshay_Arora)\
**Replies:** 3\
**Last updated:** [July 12, 2018, 7:56am UTC](https://discuss.elastic.co/t/how-to-transfer-elastic-index-created-in-local-machine-to-elastic-cloud/139571 "2018-07-12T07:56:07Z")

</div>

I have an index created in locally setup elasticsearch and I want to transfer that index on the elastic cloud. How can I do that?

---

## [Unable to parse Fortinet Netflow with logstash module](https://discuss.elastic.co/t/unable-to-parse-fortinet-netflow-with-logstash-module/122941)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 3\
**Last updated:** [March 9, 2018, 7:13am UTC](https://discuss.elastic.co/t/unable-to-parse-fortinet-netflow-with-logstash-module/122941 "2018-03-09T07:13:36Z")

</div>

Hi, I am trying to monitor Fortinet Netflow logs using elasticsearch stack 6.2.2. I am using logstash Netflow module but logs are not completely being parsed and seeing below errors. Any clue what could be the issue? \[…

---

## [Logstash JDBC Input - SQL Query](https://discuss.elastic.co/t/logstash-jdbc-input-sql-query/41798)

<div class="topic-metadata">

**Author:** [@Architha](https://discuss.elastic.co/u/Architha)\
**Replies:** 3\
**Last updated:** [December 22, 2016, 11:56pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-sql-query/41798 "2016-12-22T23:56:26Z")

</div>

Hi all, I have a table where the data is in the following manner : My requirement is a documnet on Elastic Search that is like : { "\_index" : "Library", "\_type" : "books", "\_id" : "1", "\_score" : 1.0, "\_sourc…

---

## [Segurity Problem using X-pack with 5.0.1](https://discuss.elastic.co/t/segurity-problem-using-x-pack-with-5-0-1/68298)

<div class="topic-metadata">

**Author:** [@olorasde](https://discuss.elastic.co/u/olorasde)\
**Replies:** 3\
**Last updated:** [December 7, 2016, 2:16pm UTC](https://discuss.elastic.co/t/segurity-problem-using-x-pack-with-5-0-1/68298 "2016-12-07T14:16:11Z")

</div>

Hi, Recently I start to configure my EL Cluster and Kibana aganist a AD. Im using 5.0.1 I preferred to start configuring my cluster aganist and simple LDAP. I use for this OpenDS. The main configuration in elasticsea…

---

## [Analyzed string can use a lot of memory to visualize](https://discuss.elastic.co/t/analyzed-string-can-use-a-lot-of-memory-to-visualize/26492)

<div class="topic-metadata">

**Author:** [@saif](https://discuss.elastic.co/u/saif)\
**Replies:** 3\
**Last updated:** [July 30, 2015, 10:59pm UTC](https://discuss.elastic.co/t/analyzed-string-can-use-a-lot-of-memory-to-visualize/26492 "2015-07-30T22:59:53Z")

</div>

Hi im using rsyslog+ES+kibana es on 3 servers cluster after 10 days my kibana work but its very slow i think that the analyzed fileds use lot of memory .. there is any solution i used ES to index logs from Rsyslo…

---

## [Install kibana 4.0.3 or 4.1.1 on IBM HTTP Server](https://discuss.elastic.co/t/install-kibana-4-0-3-or-4-1-1-on-ibm-http-server/25638)

<div class="topic-metadata">

**Author:** [@ukanabar](https://discuss.elastic.co/u/ukanabar)\
**Replies:** 3\
**Last updated:** [July 15, 2015, 3:20pm UTC](https://discuss.elastic.co/t/install-kibana-4-0-3-or-4-1-1-on-ibm-http-server/25638 "2015-07-15T15:20:59Z")

</div>

Hello Friends, I was checking kibana installation and it comes with own http server. So i was wondering is it possible to install it on third partt server like IBM HTTP server or apche.If yes please provide steps or link…

---

## [Elasticsearch killed by oom-killer](https://discuss.elastic.co/t/elasticsearch-killed-by-oom-killer/334982)

<div class="topic-metadata">

**Author:** [@Andy\_Ni](https://discuss.elastic.co/u/Andy_Ni)\
**Replies:** 5\
**Last updated:** [June 5, 2023, 3:27am UTC](https://discuss.elastic.co/t/elasticsearch-killed-by-oom-killer/334982 "2023-06-05T03:27:33Z")

</div>

Elasticsearch version: 6.2.3 System: \[root@my-host-name\]# uname -s -r -v -m -p -i -o Linux 5.4.8-1.el7.elrepo.x86\_64 #1 SMP Sat Jan 4 15:29:03 EST 2020 x86\_64 x86\_64 x86\_64 GNU/Linux ErrorMessage in /var/log/message: …

---

## ["Unable to retrieve version information from Elasticsearch nodes. "](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/302852)

<div class="topic-metadata">

**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\
**Replies:** 5\
**Last updated:** [April 21, 2022, 3:49pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/302852 "2022-04-21T15:49:41Z")

</div>

Trying to set up a small barebones (for now) 3 node cluster in Centos 7. Cluster appears to be up, but I can't connect kibana to it. I have installed kibana on one of the Elasticsearch nodes. Elasticsearch is running …

---

## [Shard in initialing state for a long period of time now](https://discuss.elastic.co/t/shard-in-initialing-state-for-a-long-period-of-time-now/42347)

<div class="topic-metadata">

**Author:** [@James\_Tang](https://discuss.elastic.co/u/James_Tang)\
**Replies:** 5\
**Last updated:** [February 23, 2016, 2:32am UTC](https://discuss.elastic.co/t/shard-in-initialing-state-for-a-long-period-of-time-now/42347 "2016-02-23T02:32:34Z")

</div>

Cluster ID : 45cd54 Shard location-541275-1602 Observing KOPF plugin show that the shard is in an initializing state for more than 10 minutes now. Please restart or do your magic. I have stop all indexing activity and al…

---

## [Nested aggregation with min\_doc\_count=0](https://discuss.elastic.co/t/nested-aggregation-with-min-doc-count-0/146038)

<div class="topic-metadata">

**Author:** [@jdesousa](https://discuss.elastic.co/u/jdesousa)\
**Replies:** 1\
**Last updated:** [August 28, 2018, 4:42pm UTC](https://discuss.elastic.co/t/nested-aggregation-with-min-doc-count-0/146038 "2018-08-28T16:42:31Z")

</div>

Hi all, I'am trying to use nested aggregation with min\_doc\_count=0 My schema: PUT /example { "mappings": { "doc": { "properties": { "id": { "type": "text" }, "properties":…

---

## [Make filebeat error: cannot find package "github.com/elastic/beats/filebeat/beater" in any of:](https://discuss.elastic.co/t/make-filebeat-error-cannot-find-package-github-com-elastic-beats-filebeat-beater-in-any-of/96348)

<div class="topic-metadata">

**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 1:50am UTC](https://discuss.elastic.co/t/make-filebeat-error-cannot-find-package-github-com-elastic-beats-filebeat-beater-in-any-of/96348 "2017-08-09T01:50:45Z")

</div>

I install the beats directory under beats-5.5.1. when i go to beats-5.5.1/filebeat, and run “make”, got the following error: go build main.go:6:2: cannot find package “github.com/elastic/beats/filebeat/beater” in any …

---

## [Groovy to Painless, get logstash event](https://discuss.elastic.co/t/groovy-to-painless-get-logstash-event/71920)

<div class="topic-metadata">

**Author:** [@sebz](https://discuss.elastic.co/u/sebz)\
**Replies:** 1\
**Last updated:** [January 18, 2017, 4:42pm UTC](https://discuss.elastic.co/t/groovy-to-painless-get-logstash-event/71920 "2017-01-18T16:42:33Z")

</div>

Hello, I'm getting data from logstash, using update by script (indexed or file). I need to update a field, only if the value already indexed is less than the one in the logstash event. With groovy, it works well by us…

---

## [Logstash: Calling webservice in filter plugin for preprocesssing](https://discuss.elastic.co/t/logstash-calling-webservice-in-filter-plugin-for-preprocesssing/52947)

<div class="topic-metadata">

**Author:** [@preehana](https://discuss.elastic.co/u/preehana)\
**Replies:** 1\
**Last updated:** [June 16, 2016, 6:05am UTC](https://discuss.elastic.co/t/logstash-calling-webservice-in-filter-plugin-for-preprocesssing/52947 "2016-06-16T06:05:54Z")

</div>

Hello All, I am actually taking beats as an input and I need to pre-process the data in the filter section of logstash before sending to elastic search.The data should be pre-processed by calling a rest service in the …

---

## [Unable to update document using a script](https://discuss.elastic.co/t/unable-to-update-document-using-a-script/23198)

<div class="topic-metadata">

**Author:** [@Sacheendra\_Talluri](https://discuss.elastic.co/u/Sacheendra_Talluri)\
**Replies:** 1\
**Last updated:** [April 12, 2015, 1:11pm UTC](https://discuss.elastic.co/t/unable-to-update-document-using-a-script/23198 "2015-04-12T13:11:31Z")

</div>

I am unable to update documents using scripts. The required script has been stored at config/scripts. The curl request I am doing is here https://gist.github.com/sacheendra/22424ca9b3caf1d2a0b1#file-updatedoc\_err T…

---

## [Fatal exception while booting Elasticsearchjava.nio.file.NoSuchFileException:](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearchjava-nio-file-nosuchfileexception/316603)

<div class="topic-metadata">

**Author:** [@Arun\_Singh2](https://discuss.elastic.co/u/Arun_Singh2)\
**Replies:** 2\
**Last updated:** [October 17, 2022, 5:50am UTC](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearchjava-nio-file-nosuchfileexception/316603 "2022-10-17T05:50:31Z")

</div>

i cant find any way to solve this error java version on my laptop is 19 nad i have added ES dir to path also these are logs --\> \[2022-10-14T12:45:26,597\]\[ERROR\]\[o.e.b.Elasticsearch \] \[LT0148506\] fatal exception w…

---

## [Parsing nested JSON arrays](https://discuss.elastic.co/t/parsing-nested-json-arrays/211938)

<div class="topic-metadata">

**Author:** [@sera123k](https://discuss.elastic.co/u/sera123k)\
**Replies:** 2\
**Last updated:** [December 16, 2019, 3:41pm UTC](https://discuss.elastic.co/t/parsing-nested-json-arrays/211938 "2019-12-16T15:41:02Z")

</div>

Hello, I am trying to parse a message from Office 365 that contains a nested array with some values in each item. I'm not 100% sure how to tackle it, the array i'm working with looks like this: "targetResources" =\> \[ \[…

---

## [Control visualization not updating to new data/ missing field values](https://discuss.elastic.co/t/control-visualization-not-updating-to-new-data-missing-field-values/190919)

<div class="topic-metadata">

**Author:** [@Orunacher-Dataviz](https://discuss.elastic.co/u/Orunacher-Dataviz)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 2:42pm UTC](https://discuss.elastic.co/t/control-visualization-not-updating-to-new-data-missing-field-values/190919 "2019-07-22T14:42:30Z")

</div>

Hi team ! I am creating a dashboard with the tool control visualization but I've realized that I have missing values or field in the filter dropdown. I have several equipment registered in the field EquipmentID.keyword …

---

## [Language detection in ES 6.x?](https://discuss.elastic.co/t/language-detection-in-es-6-x/147611)

<div class="topic-metadata">

**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\
**Replies:** 2\
**Last updated:** [September 7, 2018, 3:19pm UTC](https://discuss.elastic.co/t/language-detection-in-es-6-x/147611 "2018-09-07T15:19:06Z")

</div>

I've seen all kinds of references to language detection in ES 5.x (ie. elasticsearch-langdetect) but nothing for ES 6.x. Can someone direct me to the options for ES 6.x?

---

## [Delete Elasticsearch repository in S3](https://discuss.elastic.co/t/delete-elasticsearch-repository-in-s3/147123)

<div class="topic-metadata">

**Author:** [@ardel](https://discuss.elastic.co/u/ardel)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 1:13am UTC](https://discuss.elastic.co/t/delete-elasticsearch-repository-in-s3/147123 "2018-09-04T01:13:02Z")

</div>

Hello! Is there anyone here who knows how to delete AWS managed elasticsearch repository in S3 using curator? Or any command?

---

## [How to union fields to get distinct count?](https://discuss.elastic.co/t/how-to-union-fields-to-get-distinct-count/57585)

<div class="topic-metadata">

**Author:** [@goofansu](https://discuss.elastic.co/u/goofansu)\
**Replies:** 2\
**Last updated:** [August 9, 2016, 9:08pm UTC](https://discuss.elastic.co/t/how-to-union-fields-to-get-distinct-count/57585 "2016-08-09T21:08:50Z")

</div>

data: \[ {"from\_uid": 1, "to\_uid": 2}, {"from\_uid": 2, "to\_uid": 1}, {"from\_uid": 2, "to\_uid": 3} \] I want to query the result like following sql: select count(distinct a.uid) from ( select from\_uid as uid from dat…

[Previous page](https://discuss.elastic.co/top.md?page=1183&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1185&per_page=50&period=all)
