# Top

**URL:** https://discuss.elastic.co/top.md?page=1187&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1188

---

## [Get rid of .keyword](https://discuss.elastic.co/t/get-rid-of-keyword/277105)

<div class="topic-metadata">

**Author:** [@svenvg93](https://discuss.elastic.co/u/svenvg93)\
**Replies:** 1\
**Last updated:** [June 25, 2021, 9:36pm UTC](https://discuss.elastic.co/t/get-rid-of-keyword/277105 "2021-06-25T21:36:00Z")

</div>

Hi, I'm still a ELK noob so bear with me here ;). I've setup Logstash to send the output of fping command to Elasticsearch and add some geoip data to it. Fping output; ec2.eu-west-1.amazonaws.com : xmt/rcv/%loss = 3…

---

## [Mysql connector jdbc driver not loaded](https://discuss.elastic.co/t/mysql-connector-jdbc-driver-not-loaded/134808)

<div class="topic-metadata">

**Author:** [@dmongit](https://discuss.elastic.co/u/dmongit)\
**Replies:** 1\
**Last updated:** [June 12, 2018, 12:01am UTC](https://discuss.elastic.co/t/mysql-connector-jdbc-driver-not-loaded/134808 "2018-06-12T00:01:33Z")

</div>

Hi, I see tons of posts related to this. But, I still have the same issue after running through several of the solutions in these posts. I used the full path for the jar, and it's not an empty file. I'm running windows…

---

## [How to cast type in Scripted Field](https://discuss.elastic.co/t/how-to-cast-type-in-scripted-field/101397)

<div class="topic-metadata">

**Author:** [@adnil](https://discuss.elastic.co/u/adnil)\
**Replies:** 1\
**Last updated:** [September 22, 2017, 10:40pm UTC](https://discuss.elastic.co/t/how-to-cast-type-in-scripted-field/101397 "2017-09-22T22:40:29Z")

</div>

I'm trying to create a scripted field so that I can perform some arithmetic. I have the following field, which is currently a string: 'UCD-SNMP-MIB::memTotalReal.0.keyword'. I want to convert that to an integer to do c…

---

## [Filebeat and Logstash certificate and key](https://discuss.elastic.co/t/filebeat-and-logstash-certificate-and-key/53990)

<div class="topic-metadata">

**Author:** [@fjiang212](https://discuss.elastic.co/u/fjiang212)\
**Replies:** 1\
**Last updated:** [June 27, 2016, 10:09am UTC](https://discuss.elastic.co/t/filebeat-and-logstash-certificate-and-key/53990 "2016-06-27T10:09:00Z")

</div>

I follow the doc (https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04) to generate certificate and private key, then use them in both filebeat and l…

---

## [Postfix monitoring using ELK](https://discuss.elastic.co/t/postfix-monitoring-using-elk/353125)

<div class="topic-metadata">

**Author:** [@uzzaldas](https://discuss.elastic.co/u/uzzaldas)\
**Replies:** 3\
**Last updated:** [February 14, 2024, 12:20pm UTC](https://discuss.elastic.co/t/postfix-monitoring-using-elk/353125 "2024-02-14T12:20:39Z")

</div>

I want to monitor Postfix logs using ELK stack. I tried postfix filter and grok pattern as below. But I am getting following errors from logstash. ELK Version: 8.9.2 Logstash Error: logstash\_1 | \[2024-02-13T05:3…

---

## [Can I still jump from 7.17 to the new 8.8?](https://discuss.elastic.co/t/can-i-still-jump-from-7-17-to-the-new-8-8/334616)

<div class="topic-metadata">

**Author:** [@GenSSC](https://discuss.elastic.co/u/GenSSC)\
**Replies:** 8\
**Last updated:** [May 31, 2023, 7:16pm UTC](https://discuss.elastic.co/t/can-i-still-jump-from-7-17-to-the-new-8-8/334616 "2023-05-31T19:16:57Z")

</div>

I'm at 7.16 right now. I know I need to update to 7.17 first, but I am wondering if right after that I can go directly to 8.8? I know I could jump to 8.7 from 7.17. Just wondering if it's still the case.

---

## [Error failed to mark Task endpoint](https://discuss.elastic.co/t/error-failed-to-mark-task-endpoint/246452)

<div class="topic-metadata">

**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\
**Replies:** 3\
**Last updated:** [August 28, 2020, 3:12pm UTC](https://discuss.elastic.co/t/error-failed-to-mark-task-endpoint/246452 "2020-08-28T15:12:51Z")

</div>

Hey, every few seconds Kibana spits out this message: {"type":"log","@timestamp":"2020-08-26T12:57:31Z","tags":\["error","plugins","taskManager","taskManager"\],"pid":6,"message":"Failed to mark Task endpoint:user-artifact…

---

## [Span events missing kubernetes metadata](https://discuss.elastic.co/t/span-events-missing-kubernetes-metadata/218237)

<div class="topic-metadata">

**Author:** [@jasonmoo-we](https://discuss.elastic.co/u/jasonmoo-we)\
**Replies:** 8\
**Last updated:** [February 11, 2020, 6:44pm UTC](https://discuss.elastic.co/t/span-events-missing-kubernetes-metadata/218237 "2020-02-11T18:44:49Z")

</div>

APM Server version: 7.4.2 APM Agent language and version: ruby 3.4.0 Hey I'm running a basic apm server sending events to kafka, deployed to kubernetes with a custom helm chart. A rails app has installed the agent gem…

---

## [How to shift back just the end datetime in timefitler?](https://discuss.elastic.co/t/how-to-shift-back-just-the-end-datetime-in-timefitler/193436)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 3\
**Last updated:** [August 16, 2019, 1:37am UTC](https://discuss.elastic.co/t/how-to-shift-back-just-the-end-datetime-in-timefitler/193436 "2019-08-16T01:37:43Z")

</div>

I have a requirement where I need to calculate the difference from 2 data sets. The two datasets will have different timerange. ex. Dataset1: 2019-01-01 00:00:00 - 2019-07-31 00:00:00 Dataset2: 2019-01-01 00:00:00 - 2…

---

## [I'm using ELK stack on ubuntu 14.0.4 , I want to send log files from my local machine using filebeat to my server,Someone help me out with this scenario](https://discuss.elastic.co/t/im-using-elk-stack-on-ubuntu-14-0-4-i-want-to-send-log-files-from-my-local-machine-using-filebeat-to-my-server-someone-help-me-out-with-this-scenario/79848)

<div class="topic-metadata">

**Author:** [@DharaniKumar](https://discuss.elastic.co/u/DharaniKumar)\
**Replies:** 8\
**Last updated:** [March 25, 2017, 9:54pm UTC](https://discuss.elastic.co/t/im-using-elk-stack-on-ubuntu-14-0-4-i-want-to-send-log-files-from-my-local-machine-using-filebeat-to-my-server-someone-help-me-out-with-this-scenario/79848 "2017-03-25T21:54:46Z")

</div>

Guide me with all configuration file for client ,step by step

---

## [Disk - Filesystem and block size recommendations](https://discuss.elastic.co/t/disk-filesystem-and-block-size-recommendations/148782)

<div class="topic-metadata">

**Author:** [@Sylmarch](https://discuss.elastic.co/u/Sylmarch)\
**Replies:** 0\
**Last updated:** [September 17, 2018, 7:42am UTC](https://discuss.elastic.co/t/disk-filesystem-and-block-size-recommendations/148782 "2018-09-17T07:42:12Z")

</div>

Hello, I'm going to install a new Elasticsearch 6.x cluster with hot and warm nodes. hot nodes have SSD disks warm nodes have HDD disks Indices with no modifications for N hours/days will be moved from hot to warm no…

---

## [Options List Control Ignores Filters and Queries](https://discuss.elastic.co/t/options-list-control-ignores-filters-and-queries/308962)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 7\
**Last updated:** [September 7, 2022, 1:52pm UTC](https://discuss.elastic.co/t/options-list-control-ignores-filters-and-queries/308962 "2022-09-07T13:52:44Z")

</div>

The Controls visualization has now been available for quite some time, but it is still being noted as a technical preview. Is there any plan to move this to GA? Since it was first introduced, it seems the Options List co…

---

## [Настройка winlogbeat для контроллеров домена](https://discuss.elastic.co/t/winlogbeat/294112)

<div class="topic-metadata">

**Author:** [@holpa](https://discuss.elastic.co/u/holpa)\
**Replies:** 1\
**Last updated:** [January 28, 2022, 12:16pm UTC](https://discuss.elastic.co/t/winlogbeat/294112 "2022-01-28T12:16:55Z")

</div>

Привет. Подскажите как правильно настроить. Есть сервер srvlog, он собирает все логи с контроллеров домена (forward event). Как настроить WinLogbeat для отправки логов, полученных этим сервером? Моя конфигурация сейчас…

---

## [Null Missing Values in Max Aggregation in Kibana](https://discuss.elastic.co/t/null-missing-values-in-max-aggregation-in-kibana/164140)

<div class="topic-metadata">

**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\
**Replies:** 1\
**Last updated:** [January 17, 2019, 2:14pm UTC](https://discuss.elastic.co/t/null-missing-values-in-max-aggregation-in-kibana/164140 "2019-01-17T14:14:25Z")

</div>

I'm trying to plot a line graph of the maximum value of a Logstash metric over time. Missing values cause the graph to look like this though: I'm trying to use a combination of Advanced options in Kibana to try to g…

---

## [Problem with Fake Log in Logshash](https://discuss.elastic.co/t/problem-with-fake-log-in-logshash/122685)

<div class="topic-metadata">

**Author:** [@just666](https://discuss.elastic.co/u/just666)\
**Replies:** 7\
**Last updated:** [March 6, 2018, 11:11am UTC](https://discuss.elastic.co/t/problem-with-fake-log-in-logshash/122685 "2018-03-06T11:11:15Z")

</div>

I install Elastic (no problem) I install Kibana (no problem) I run Logshtast with argument: ./logstash -f apache\_config.conf apache\_config.conf input { file { path =\> "/var/log/my\_apache\_logs/\*.log" } } filter { …

---

## [Timelion Offset](https://discuss.elastic.co/t/timelion-offset/121313)

<div class="topic-metadata">

**Author:** [@Pororo](https://discuss.elastic.co/u/Pororo)\
**Replies:** 1\
**Last updated:** [February 27, 2018, 7:58pm UTC](https://discuss.elastic.co/t/timelion-offset/121313 "2018-02-27T19:58:29Z")

</div>

Hi, I am kinda confused with how "offset" works in Timelion. Some documents say it is used for comparison of current and past specific time. So let's say we have offset = "-3d", does it mean it will show up the data in …

---

## [JDBC input plugin error for MongoDB](https://discuss.elastic.co/t/jdbc-input-plugin-error-for-mongodb/113086)

<div class="topic-metadata">

**Author:** [@Sarra\_Bouhenni](https://discuss.elastic.co/u/Sarra_Bouhenni)\
**Replies:** 1\
**Last updated:** [January 2, 2018, 12:30pm UTC](https://discuss.elastic.co/t/jdbc-input-plugin-error-for-mongodb/113086 "2018-01-02T12:30:59Z")

</div>

Hello, I am using Logstash to replcate a database from MongoDB to Elasticsearch using Logstash 6.0.0, here is my config file: input{ jdbc{ jdbc\_driver\_library =\> "/usr/share/logstash/driver/mongodb-driver-3…

---

## [Logstash-all-plugins Download](https://discuss.elastic.co/t/logstash-all-plugins-download/91637)

<div class="topic-metadata">

**Author:** [@GambitK](https://discuss.elastic.co/u/GambitK)\
**Replies:** 1\
**Last updated:** [July 3, 2017, 6:09pm UTC](https://discuss.elastic.co/t/logstash-all-plugins-download/91637 "2017-07-03T18:09:29Z")

</div>

Hello, I'm downloading the latest version of logstash to install on a machine without internet connection. I want to use the xml plugin. Before I just downloaded the logstash-all-plugins pagacke/tar and used that, but I …

---

## [Search in type with one attribute as null or empty](https://discuss.elastic.co/t/search-in-type-with-one-attribute-as-null-or-empty/80457)

<div class="topic-metadata">

**Author:** [@v.kumar](https://discuss.elastic.co/u/v.kumar)\
**Replies:** 1\
**Last updated:** [March 30, 2017, 9:01am UTC](https://discuss.elastic.co/t/search-in-type-with-one-attribute-as-null-or-empty/80457 "2017-03-30T09:01:23Z")

</div>

Hi All, I am using elastic search java api. We have indexed data as GET eb\_portal\_index/part/\_search { "query": { "match": { "part\_no": "ME9143" } } } We get result like { "took": 16, "tim…

---

## [Shard failure when scrolling - invalid results, but no error reported](https://discuss.elastic.co/t/shard-failure-when-scrolling-invalid-results-but-no-error-reported/18158)

<div class="topic-metadata">

**Author:** [@mooky](https://discuss.elastic.co/u/mooky)\
**Replies:** 1\
**Last updated:** [June 17, 2014, 3:12pm UTC](https://discuss.elastic.co/t/shard-failure-when-scrolling-invalid-results-but-no-error-reported/18158 "2014-06-17T15:12:32Z")

</div>

I have been having some problem with a failing test (using the ElasticsearchIntegrationTest) that was testing scrolling. It took quite a while to notice that in my response was an indication I was getting a shard f…

---

## [Why i am getting "1 of 3 shards failed"](https://discuss.elastic.co/t/why-i-am-getting-1-of-3-shards-failed/222565)

<div class="topic-metadata">

**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\
**Replies:** 2\
**Last updated:** [March 9, 2020, 9:29am UTC](https://discuss.elastic.co/t/why-i-am-getting-1-of-3-shards-failed/222565 "2020-03-09T09:29:37Z")

</div>

Why i am getting this error. RESPONSE { "took": 27, "timed\_out": false, "\_shards": { "total": 3, "successful": 2, "skipped": 0, "failed": 1, "failures": \[ { "shard": 0, …

---

## [Indexing videos in elasticserach](https://discuss.elastic.co/t/indexing-videos-in-elasticserach/182213)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 2\
**Last updated:** [May 22, 2019, 1:57pm UTC](https://discuss.elastic.co/t/indexing-videos-in-elasticserach/182213 "2019-05-22T13:57:52Z")

</div>

is it possible to index video in elasticsearch thank you

---

## [Cannot establish secure (SSL/TLS) connection between elasticsearch clusters](https://discuss.elastic.co/t/cannot-establish-secure-ssl-tls-connection-between-elasticsearch-clusters/173852)

<div class="topic-metadata">

**Author:** [@iShiBin](https://discuss.elastic.co/u/iShiBin)\
**Replies:** 2\
**Last updated:** [March 26, 2019, 4:14pm UTC](https://discuss.elastic.co/t/cannot-establish-secure-ssl-tls-connection-between-elasticsearch-clusters/173852 "2019-03-26T16:14:46Z")

</div>

Hi, I followed the guide on Elastic website "Adding the CA certificate from the local cluster as a trusted CA in each remote cluster (see Transport TLS settings)." However, I found the connection could not be made. Mayb…

---

## [Configure main instance with puppet module](https://discuss.elastic.co/t/configure-main-instance-with-puppet-module/172623)

<div class="topic-metadata">

**Author:** [@Tommy2](https://discuss.elastic.co/u/Tommy2)\
**Replies:** 2\
**Last updated:** [March 19, 2019, 9:53pm UTC](https://discuss.elastic.co/t/configure-main-instance-with-puppet-module/172623 "2019-03-19T21:53:28Z")

</div>

I have "inherited" some puppet code that is using the elasticsearch-puppet module to manage our "ELK" stack, and was trying to use it to create a separate (unrelated) Elasticsearch cluster. What I cannot figure out, is w…

---

## [Metricbeat not registered error](https://discuss.elastic.co/t/metricbeat-not-registered-error/127788)

<div class="topic-metadata">

**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\
**Replies:** 2\
**Last updated:** [April 12, 2018, 12:36pm UTC](https://discuss.elastic.co/t/metricbeat-not-registered-error/127788 "2018-04-12T12:36:29Z")

</div>

2018/04/12 10:13:21.755608 beat.go:346: CRIT Exiting: 11 errors: metricset 'system/process\_summary' is not registered, metricset not found; metricset 'system/uptime' is not registered, metricset not found; host parsing f…

---

## [How to configure alert hierarchy/levels in kibana](https://discuss.elastic.co/t/how-to-configure-alert-hierarchy-levels-in-kibana/87708)

<div class="topic-metadata">

**Author:** [@magda](https://discuss.elastic.co/u/magda)\
**Replies:** 2\
**Last updated:** [June 8, 2017, 9:30am UTC](https://discuss.elastic.co/t/how-to-configure-alert-hierarchy-levels-in-kibana/87708 "2017-06-08T09:30:28Z")

</div>

Hi, How to configure alert hierarchy/levels in Kibana? I need to: visualization of the overiding/primary alarm –\> if I look at the list of alerts, I will see all of them marked red, but I want the system to notifiy…

---

## [Elasticsearch X-pack Username and Password Create](https://discuss.elastic.co/t/elasticsearch-x-pack-username-and-password-create/65190)

<div class="topic-metadata">

**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\
**Replies:** 2\
**Last updated:** [November 7, 2016, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-x-pack-username-and-password-create/65190 "2016-11-07T13:24:01Z")

</div>

Hi, I installed ES 5.0.0, kİBANA 5.0.0 and X-pack 5.0.0 on windows 10. After I start ES and Kibana (bin\\elasticsearch and bin\\kibana) It works true but he asks me username and password. I don't have username and passw…

---

## [Filebeat log filename when using recursive \*.log filter](https://discuss.elastic.co/t/filebeat-log-filename-when-using-recursive-log-filter/45025)

<div class="topic-metadata">

**Author:** [@JakeDEvans](https://discuss.elastic.co/u/JakeDEvans)\
**Replies:** 2\
**Last updated:** [March 21, 2016, 5:51pm UTC](https://discuss.elastic.co/t/filebeat-log-filename-when-using-recursive-log-filter/45025 "2016-03-21T17:51:22Z")

</div>

I was wondering if there is a way to log the source filename of each file filebeat collects logs from without manually specifying fields for each file individually. Thank You -Jake

---

## [Increasing number of open files descriptors in elastic search](https://discuss.elastic.co/t/increasing-number-of-open-files-descriptors-in-elastic-search/20948)

<div class="topic-metadata">

**Author:** [@Vijay\_Tiwary](https://discuss.elastic.co/u/Vijay_Tiwary)\
**Replies:** 2\
**Last updated:** [November 26, 2014, 5:37pm UTC](https://discuss.elastic.co/t/increasing-number-of-open-files-descriptors-in-elastic-search/20948 "2014-11-26T17:37:55Z")

</div>

I am increasing the number of open files descriptors for the root user by adding the following entry in /etc/sysctl.conf fs.file-max = 751864 However when I am restarting elastic search as root user then elasti…

---

## [Logstash is not showing base64 encoded data for pdf's extracted from urls](https://discuss.elastic.co/t/logstash-is-not-showing-base64-encoded-data-for-pdfs-extracted-from-urls/330386)

<div class="topic-metadata">

**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\
**Replies:** 5\
**Last updated:** [April 28, 2023, 6:58am UTC](https://discuss.elastic.co/t/logstash-is-not-showing-base64-encoded-data-for-pdfs-extracted-from-urls/330386 "2023-04-28T06:58:36Z")

</div>

Hi Team, I am using logstash http filter to get pdf from url and extract it. http filter has downloaded pdf and extracted its content on target\_field. But the contents are not proper and also its not base64 encoded. Ho…

---

## [Add custom serchable fields in logs](https://discuss.elastic.co/t/add-custom-serchable-fields-in-logs/234000)

<div class="topic-metadata">

**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\
**Replies:** 5\
**Last updated:** [June 1, 2020, 3:21pm UTC](https://discuss.elastic.co/t/add-custom-serchable-fields-in-logs/234000 "2020-06-01T15:21:30Z")

</div>

I'm using Java APM client in my Spring Boot 2.2.7 application. It's a multi-tenant application, so I'd like to set (dynamically) tenant's id to the current transaction. So far I configured the agent like this: …

---

## [Watcher: multiple email accounts](https://discuss.elastic.co/t/watcher-multiple-email-accounts/130835)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 5\
**Last updated:** [May 8, 2018, 7:57am UTC](https://discuss.elastic.co/t/watcher-multiple-email-accounts/130835 "2018-05-08T07:57:23Z")

</div>

Hi ES experts, I'm trying to configure several Email accounts in elasticsearch.yml: xpack.notification.email.account: acc1: profile: standard email\_defaults: from: mail1@dom1.net smtp: auth: t…

---

## [Dynamically assign aggregation partitionings](https://discuss.elastic.co/t/dynamically-assign-aggregation-partitionings/122086)

<div class="topic-metadata">

**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\
**Replies:** 5\
**Last updated:** [March 13, 2018, 1:27pm UTC](https://discuss.elastic.co/t/dynamically-assign-aggregation-partitionings/122086 "2018-03-13T13:27:56Z")

</div>

Is there a way to dynamically set the number of partitioning we set for aggregation? for example, if i have 10 aggs i preform, each one has different distinct count. can i dynamically set the partitioning to return X am…

---

## [Logstash Pipeline-Filter](https://discuss.elastic.co/t/logstash-pipeline-filter/122034)

<div class="topic-metadata">

**Author:** [@vincent25](https://discuss.elastic.co/u/vincent25)\
**Replies:** 5\
**Last updated:** [March 3, 2018, 11:46am UTC](https://discuss.elastic.co/t/logstash-pipeline-filter/122034 "2018-03-03T11:46:13Z")

</div>

Hi, I am new to ELK and struggling to write my first logstash pipeline. Can anyone help me to write my pipeline with the filter section?Please note that I require the actual log time (e.g 2018-01-23 06:43:48.79851) to …

---

## [Kibana vulnerability?](https://discuss.elastic.co/t/kibana-vulnerability/98854)

<div class="topic-metadata">

**Author:** [@nh45](https://discuss.elastic.co/u/nh45)\
**Replies:** 5\
**Last updated:** [August 30, 2017, 2:05pm UTC](https://discuss.elastic.co/t/kibana-vulnerability/98854 "2017-08-30T14:05:08Z")

</div>

Hi, just a quick question regarding potential Kibana vulnerability. Does anyone think that because requests such as get \_node/… are executable by any user with access to Kibana return so much detailed data about the enti…

---

## [.monitoring-es-\* index shards and replicas number fail to match any template](https://discuss.elastic.co/t/monitoring-es-index-shards-and-replicas-number-fail-to-match-any-template/95275)

<div class="topic-metadata">

**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\
**Replies:** 5\
**Last updated:** [August 2, 2017, 9:42am UTC](https://discuss.elastic.co/t/monitoring-es-index-shards-and-replicas-number-fail-to-match-any-template/95275 "2017-08-02T09:42:37Z")

</div>

I had put common template like this: curl -XPUT http://locahost:xxx/\_template/t1 '-d{"template" : "\*","order" : 0,"settings": {"index.refresh\_interval": "1m","number\_of\_shards": "36","number\_of\_replicas" : 0}' t1 wor…

---

## [Variable space working in grok debugger but not in server](https://discuss.elastic.co/t/variable-space-working-in-grok-debugger-but-not-in-server/79024)

<div class="topic-metadata">

**Author:** [@raamee](https://discuss.elastic.co/u/raamee)\
**Replies:** 5\
**Last updated:** [March 21, 2017, 12:50am UTC](https://discuss.elastic.co/t/variable-space-working-in-grok-debugger-but-not-in-server/79024 "2017-03-21T00:50:34Z")

</div>

Hi, My new problem: Here's my logs: (14529) Login OK: \[host\] (from client DEVICE-NAME port 13 cli 20-19-44-03-26-c6 via TLS tunnel) (14529) Login OK: \[host\] (from client DEVICE-NAME port 13 cli 20-19-44-03-26-c6 v…

---

## [Не обновляется поле с типом timestamp у некоторых документов](https://discuss.elastic.co/t/timestamp/54200)

<div class="topic-metadata">

**Author:** [@rero](https://discuss.elastic.co/u/rero)\
**Replies:** 5\
**Last updated:** [June 29, 2016, 8:26am UTC](https://discuss.elastic.co/t/timestamp/54200 "2016-06-29T08:26:03Z")

</div>

Документ содержит поле registration\_at с типом date и форматом strict\_date\_optional\_time||epoch\_millis При обновлении у некоторых документов это поле не изменяется на передаваемое значение, хотя версия документа изменяет…

---

## [Multiple analyzers in "\_all" field?](https://discuss.elastic.co/t/multiple-analyzers-in--all-field/14324)

<div class="topic-metadata">

**Author:** [@Pawel\_Mlynarczyk](https://discuss.elastic.co/u/Pawel_Mlynarczyk)\
**Replies:** 5\
**Last updated:** [November 11, 2013, 9:05am UTC](https://discuss.elastic.co/t/multiple-analyzers-in--all-field/14324 "2013-11-11T09:05:21Z")

</div>

Hi I've got a multilingual documents to index. I want to create a full text search, so the first thing on my mind was to use string query with the \_all field. The problem is that the \_all field has it's own analyz…

---

## [X-Pack confusion](https://discuss.elastic.co/t/x-pack-confusion/122113)

<div class="topic-metadata">

**Author:** [@bossi6of9](https://discuss.elastic.co/u/bossi6of9)\
**Replies:** 6\
**Last updated:** [March 8, 2018, 9:44am UTC](https://discuss.elastic.co/t/x-pack-confusion/122113 "2018-03-08T09:44:46Z")

</div>

Hi, I read the XPack announcement yesterday, but I'm still confused. Can someone elaborate on what parts of XPack are free for a production environment?

---

## [FS River not working in elasticsearch cluster](https://discuss.elastic.co/t/fs-river-not-working-in-elasticsearch-cluster/12089)

<div class="topic-metadata">

**Author:** [@imdhmd](https://discuss.elastic.co/u/imdhmd)\
**Replies:** 6\
**Last updated:** [April 16, 2016, 12:35pm UTC](https://discuss.elastic.co/t/fs-river-not-working-in-elasticsearch-cluster/12089 "2016-04-16T12:35:04Z")

</div>

I am using: \* FS River version: 0.0.3 \* Elasticsearch: 0.20.6 Setup: - Two nodes of elasticsearch in a cluster, \*es-one\* & \*es-two\* - A local file system on \*es-one\* at /tmp/data - A remotely mounted (via fuse-ss…

---

## [Need help understanding an error message](https://discuss.elastic.co/t/need-help-understanding-an-error-message/12949)

<div class="topic-metadata">

**Author:** [@subin](https://discuss.elastic.co/u/subin)\
**Replies:** 6\
**Last updated:** [July 26, 2013, 8:09am UTC](https://discuss.elastic.co/t/need-help-understanding-an-error-message/12949 "2013-07-26T08:09:20Z")

</div>

Hi group, After restarting my ES master node (Logstash setup) I find this error come up 'once' in elasticsearch.log: \[2013-07-26 00:29:15,718\]\[DEBUG\]\[action.admin.cluster.node.info\] \[Logstash\] failed to execute…

---

## [Why don't Elastic Agent Integrations Leverage @timestamp Sorting?](https://discuss.elastic.co/t/why-dont-elastic-agent-integrations-leverage-timestamp-sorting/284071)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 3\
**Last updated:** [September 15, 2021, 5:06pm UTC](https://discuss.elastic.co/t/why-dont-elastic-agent-integrations-leverage-timestamp-sorting/284071 "2021-09-15T17:06:49Z")

</div>

Hi All, I was doing some research into some possible search performance tuning within my cluster, and I noticed that the Elastic Agent integrations don't leverage sorting the index on @timestamp. In release 7.6, Elasti…

---

## [Multi Filebeat prospector paths and Filebeat pipelines in one Logstash config file for ES/Kibana](https://discuss.elastic.co/t/multi-filebeat-prospector-paths-and-filebeat-pipelines-in-one-logstash-config-file-for-es-kibana/163908)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 4\
**Last updated:** [January 15, 2019, 9:58pm UTC](https://discuss.elastic.co/t/multi-filebeat-prospector-paths-and-filebeat-pipelines-in-one-logstash-config-file-for-es-kibana/163908 "2019-01-15T21:58:35Z")

</div>

Hi, hope youre all doing fine. I'm quite new to the elastic stack and in learning progress. I play with the plugins and datasets to become more familar about this fantastic tools. This is my 2nd post :slight\_smile: I…

---

## [Metric beat jolokia module cannot read attribute "Value"](https://discuss.elastic.co/t/metric-beat-jolokia-module-cannot-read-attribute-value/92190)

<div class="topic-metadata">

**Author:** [@hacktopia](https://discuss.elastic.co/u/hacktopia)\
**Replies:** 4\
**Last updated:** [July 18, 2017, 6:17am UTC](https://discuss.elastic.co/t/metric-beat-jolokia-module-cannot-read-attribute-value/92190 "2017-07-18T06:17:49Z")

</div>

Jolokia agent version: "1.3.6" METRICBEAT\_VERSION=6.0.0-alpha1 I get the following error message while trying to read kafka jmx metric from jolokia Error: "message": "1 error: No key found for metric: 'kafka.controll…

---

## [ElasticSearch - node instances](https://discuss.elastic.co/t/elasticsearch-node-instances/91346)

<div class="topic-metadata">

**Author:** [@mkudama](https://discuss.elastic.co/u/mkudama)\
**Replies:** 4\
**Last updated:** [June 30, 2017, 5:45pm UTC](https://discuss.elastic.co/t/elasticsearch-node-instances/91346 "2017-06-30T17:45:12Z")

</div>

Hello, I'm setting up an ElasticSearch 5.4 cluster on AWS (can't use the managed service). This is my current setup: 3 master nodes (r4.xlarge, with high-performant EBS storage) 3 data nodes (r4.xlarge, with high-pe…

---

## [Performance issues around \_source and large page size](https://discuss.elastic.co/t/performance-issues-around--source-and-large-page-size/58066)

<div class="topic-metadata">

**Author:** [@MDavisHomeAway](https://discuss.elastic.co/u/MDavisHomeAway)\
**Replies:** 4\
**Last updated:** [August 17, 2016, 7:15am UTC](https://discuss.elastic.co/t/performance-issues-around--source-and-large-page-size/58066 "2016-08-17T07:15:25Z")

</div>

We're running a ES 1.7 cluster with an index of ~1.5 million documents, averaging around 20k in size. Our searches generally use a page size of 1000, as we do secondary sorting with live data that isn't available in our …

---

## [Search all docs into index in nest 2.1.1](https://discuss.elastic.co/t/search-all-docs-into-index-in-nest-2-1-1/47370)

<div class="topic-metadata">

**Author:** [@fabriziodb](https://discuss.elastic.co/u/fabriziodb)\
**Replies:** 4\
**Last updated:** [April 14, 2016, 2:51pm UTC](https://discuss.elastic.co/t/search-all-docs-into-index-in-nest-2-1-1/47370 "2016-04-14T14:51:23Z")

</div>

hi, this code returns only 10 docs ISearchResponse result = elasticClient.Search ( x =\> x.MatchAll() ); this one throw exception 500 ISearchResponse result = elasticClient.Search ( x =\> x.MatchAll().From(0).Size…

---

## [How search with limit and top results?](https://discuss.elastic.co/t/how-search-with-limit-and-top-results/33556)

<div class="topic-metadata">

**Author:** [@tenaz3](https://discuss.elastic.co/u/tenaz3)\
**Replies:** 4\
**Last updated:** [November 2, 2015, 10:44pm UTC](https://discuss.elastic.co/t/how-search-with-limit-and-top-results/33556 "2015-11-02T22:44:33Z")

</div>

I want to sort 7 most expansive products with validate time ascending. I did: { "from": 0, "size": 7, "query": { "filtered": { "query": { "match\_all": {} } } }, "sort": \[{ "price…

---

## [String index out of range: -1 Exception](https://discuss.elastic.co/t/string-index-out-of-range-1-exception/4829)

<div class="topic-metadata">

**Author:** [@Uli\_Kohler](https://discuss.elastic.co/u/Uli_Kohler)\
**Replies:** 4\
**Last updated:** [July 10, 2011, 9:29pm UTC](https://discuss.elastic.co/t/string-index-out-of-range-1-exception/4829 "2011-07-10T21:29:07Z")

</div>

Hi, I'm running ElasticSearch (0.16.2) on a dedicated cluster with 17 nodes (100 shards, currently 0 replicas). After indexing about 130 million documents, I'm using Hadoop MapReduce to execute about 100000 queries. F…

[Previous page](https://discuss.elastic.co/top.md?page=1186&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1188&per_page=50&period=all)
