# Top

**URL:** https://discuss.elastic.co/top.md?page=1194&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1195

---

## [ES 8.0.0 Deletion with index lifecycle policy does nothing](https://discuss.elastic.co/t/es-8-0-0-deletion-with-index-lifecycle-policy-does-nothing/258346)

<div class="topic-metadata">

**Author:** [@nlavrov](https://discuss.elastic.co/u/nlavrov)\
**Replies:** 5\
**Last updated:** [December 14, 2020, 9:12pm UTC](https://discuss.elastic.co/t/es-8-0-0-deletion-with-index-lifecycle-policy-does-nothing/258346 "2020-12-14T21:12:26Z")

</div>

I am running an elk stack set up with helm chart running 8.0.0 version. I have a simple delete policy I created in the kibana dashboard that just deletes indices older than 1 minute (this is for testing). I then applied …

---

## [Vertical zoom, drag, Y axis position](https://discuss.elastic.co/t/vertical-zoom-drag-y-axis-position/250747)

<div class="topic-metadata">

**Author:** [@Philippe\_Graca](https://discuss.elastic.co/u/Philippe_Graca)\
**Replies:** 5\
**Last updated:** [October 12, 2020, 7:18am UTC](https://discuss.elastic.co/t/vertical-zoom-drag-y-axis-position/250747 "2020-10-12T07:18:39Z")

</div>

Hello all I'm currently trying to use kibana to analyse data coming out of SCADA monitoring software. I would like to be able to view the following graph X-Axis: Time Y-axis 1: A temperature beetween 0 to 1200 degree…

---

## [Elasticsearch auto creating index after startup without any documents](https://discuss.elastic.co/t/elasticsearch-auto-creating-index-after-startup-without-any-documents/114691)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 5\
**Last updated:** [January 9, 2018, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-auto-creating-index-after-startup-without-any-documents/114691 "2018-01-09T16:15:15Z")

</div>

Hi team, I am facing the below issue whenever i start my elasticsearch server. it automatically creates an index and then throws below exceptions. Please provide your insight. \[image\]

---

## [Trouble getting my grok on](https://discuss.elastic.co/t/trouble-getting-my-grok-on/39247)

<div class="topic-metadata">

**Author:** [@Cooker](https://discuss.elastic.co/u/Cooker)\
**Replies:** 5\
**Last updated:** [January 18, 2016, 2:59pm UTC](https://discuss.elastic.co/t/trouble-getting-my-grok-on/39247 "2016-01-18T14:59:31Z")

</div>

Hello, I am trying to get a reasonably simple filter for hmail working with logstash but not having much luck so far. An example log line would be: 2016-01-14 16:03:05 sql@contoso.com dba@contoso.com 192.168.31.22…

---

## [How to Split Message Field with Exchange LOG Information](https://discuss.elastic.co/t/how-to-split-message-field-with-exchange-log-information/174844)

<div class="topic-metadata">

**Author:** [@Eric\_Santos](https://discuss.elastic.co/u/Eric_Santos)\
**Replies:** 2\
**Last updated:** [April 2, 2019, 2:03pm UTC](https://discuss.elastic.co/t/how-to-split-message-field-with-exchange-log-information/174844 "2019-04-02T14:03:59Z")

</div>

Today, I can send the LOGs from Exchange messages to Kibana using filebeat, but I need more fields that are sent in a unique way in the message field. My logstash.conf is: #udp syslogs stream via 5141 input { udp { …

---

## [Total Limits of Users and Roles while using X-Pack Plugin?](https://discuss.elastic.co/t/total-limits-of-users-and-roles-while-using-x-pack-plugin/127066)

<div class="topic-metadata">

**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\
**Replies:** 2\
**Last updated:** [April 9, 2018, 5:11pm UTC](https://discuss.elastic.co/t/total-limits-of-users-and-roles-while-using-x-pack-plugin/127066 "2018-04-09T17:11:34Z")

</div>

Hi, Can any one let me know Wile using X-pack plugin with elasticsearch 1:How many roles can be created.Is there any limit to create roles? 2:Can a user have multiple roles? 3:How many users can be created.IS there a…

---

## [How to extract an Information from an attribute?](https://discuss.elastic.co/t/how-to-extract-an-information-from-an-attribute/31446)

<div class="topic-metadata">

**Author:** [@ABecker](https://discuss.elastic.co/u/ABecker)\
**Replies:** 2\
**Last updated:** [October 2, 2015, 1:45pm UTC](https://discuss.elastic.co/t/how-to-extract-an-information-from-an-attribute/31446 "2015-10-02T13:45:56Z")

</div>

Hello elastic community, I have a problem with one of my Logstash parsing configurations. One customer want to use a country field. The information to fill the country field I can extract from the path, but I don't …

---

## [How to search value with Wild card](https://discuss.elastic.co/t/how-to-search-value-with-wild-card/1447)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 2\
**Last updated:** [May 28, 2015, 2:30pm UTC](https://discuss.elastic.co/t/how-to-search-value-with-wild-card/1447 "2015-05-28T14:30:05Z")

</div>

Hi Experts, In my log I have a field "Customer". It has all the values in capital latter like "VIKAS". Now when I fire query in Kibana like Customer:"vikas" or Customer:"VIK\*" I got nothing . It works only when I do ex…

---

## [Browser Plugin for HTTP GET / PUT?](https://discuss.elastic.co/t/browser-plugin-for-http-get-put/3657)

<div class="topic-metadata">

**Author:** [@phobos182](https://discuss.elastic.co/u/phobos182)\
**Replies:** 2\
**Last updated:** [December 16, 2010, 7:23am UTC](https://discuss.elastic.co/t/browser-plugin-for-http-get-put/3657 "2010-12-16T07:23:27Z")

</div>

I'm trying to have users in my organization use Elastic Search as a Solr replacement. The main pain point right now is that there is no web interface to do ad-hoc searches. I have given the search documentation to users …

---

## [AWS Elasticsearch Best Practice for Indexes](https://discuss.elastic.co/t/aws-elasticsearch-best-practice-for-indexes/208634)

<div class="topic-metadata">

**Author:** [@Fei\_YU](https://discuss.elastic.co/u/Fei_YU)\
**Replies:** 2\
**Last updated:** [November 20, 2019, 11:43am UTC](https://discuss.elastic.co/t/aws-elasticsearch-best-practice-for-indexes/208634 "2019-11-20T11:43:28Z")

</div>

We have been using AWS Elasticsearch Service for a while ( few years ) with the current configuration: No Master dedicated Nodes. 2k+ indexes and 10K primary shards, 20K shards with one replica. 4 instances 8GB memory …

---

## [Logstash and sniffing](https://discuss.elastic.co/t/logstash-and-sniffing/199131)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 0\
**Last updated:** [September 11, 2019, 7:43pm UTC](https://discuss.elastic.co/t/logstash-and-sniffing/199131 "2019-09-11T19:43:45Z")

</div>

I have a question and wondering if anyone could help out. Using the sniffing protocol in Logstash do the logstash nodes know where to directly send the payload? Say I have an index on 5 of my 10 nodes and that payload ha…

---

## [How to obtain termvectors api results for a multi-fields text?](https://discuss.elastic.co/t/how-to-obtain-termvectors-api-results-for-a-multi-fields-text/66527)

<div class="topic-metadata">

**Author:** [@vchalmel](https://discuss.elastic.co/u/vchalmel)\
**Replies:** 0\
**Last updated:** [November 18, 2016, 11:22am UTC](https://discuss.elastic.co/t/how-to-obtain-termvectors-api-results-for-a-multi-fields-text/66527 "2016-11-18T11:22:38Z")

</div>

I can't figure out the syntax to get the termvectors details for a multi-field text here is my mapping : fiche\_es": { "properties": { "es\_article": { "type": "nested", "properties": { "ar…

---

## [64 fields limitation in 7.16.3](https://discuss.elastic.co/t/64-fields-limitation-in-7-16-3/304322)

<div class="topic-metadata">

**Author:** [@leosyedali](https://discuss.elastic.co/u/leosyedali)\
**Replies:** 4\
**Last updated:** [May 11, 2022, 5:51pm UTC](https://discuss.elastic.co/t/64-fields-limitation-in-7-16-3/304322 "2022-05-11T17:51:25Z")

</div>

Hello, How can we increase the Schema Fields limit in 7.16.3 release? Thank You.

---

## [差分集計のグラフ化方法](https://discuss.elastic.co/t/topic/285204)

<div class="topic-metadata">

**Author:** [@yuta.yokoyama](https://discuss.elastic.co/u/yuta.yokoyama)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 12:32am UTC](https://discuss.elastic.co/t/topic/285204 "2021-09-28T00:32:28Z")

</div>

初めまして。 初歩的な質問かもしれませんが、 以下のようなJsonで登録し、エラーコード事に StartTimeとEndTime差分合計値をグラフ化したいと考えていますが、 Kibanaで差分の合計を指定する方法がわかりません。 どうすればよいでしょうか。 { "errorCode": "ERR0001", "Time": { "StartTime": "2021/06/29 00:59:57", "EndTim…

---

## [Is there a way to batch your query when facing with too\_many\_buckets\_exception](https://discuss.elastic.co/t/is-there-a-way-to-batch-your-query-when-facing-with-too-many-buckets-exception/214293)

<div class="topic-metadata">

**Author:** [@Tomaz\_Bratanic1](https://discuss.elastic.co/u/Tomaz_Bratanic1)\
**Replies:** 4\
**Last updated:** [January 8, 2020, 7:43pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-batch-your-query-when-facing-with-too-many-buckets-exception/214293 "2020-01-08T19:43:12Z")

</div>

I use the following query: { "aggs": { "2": { "terms": { "field": "deviceID.keyword", "order": { "\_key": "desc" }, "size": 500000 }, "aggs": { "1…

---

## [Deploying across multi-regions in Azure?](https://discuss.elastic.co/t/deploying-across-multi-regions-in-azure/172923)

<div class="topic-metadata">

**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\
**Replies:** 4\
**Last updated:** [March 19, 2019, 10:55am UTC](https://discuss.elastic.co/t/deploying-across-multi-regions-in-azure/172923 "2019-03-19T10:55:48Z")

</div>

Hello, Are there any pitfalls for deploying / configuring a cluster spread across different regions in Azure, how do we achieve five 9's. Would creating vpn gateways across different regions & building a cluster have p…

---

## [Deb repos are offline?](https://discuss.elastic.co/t/deb-repos-are-offline/15073)

<div class="topic-metadata">

**Author:** [@Stas\_Oskin](https://discuss.elastic.co/u/Stas_Oskin)\
**Replies:** 4\
**Last updated:** [January 2, 2014, 8:03pm UTC](https://discuss.elastic.co/t/deb-repos-are-offline/15073 "2014-01-02T20:03:07Z")

</div>

Hi, It seems the logstash deb repos are currently offline, and return access denied? root@ip-10-0-0-59:/# apt-get install logstash Reading package lists... Done Building dependency tree Reading state in…

---

## [ElasticSearch thinks my Map\<String,String\> should be datetime, and fails](https://discuss.elastic.co/t/elasticsearch-thinks-my-map-string-string-should-be-datetime-and-fails/8547)

<div class="topic-metadata">

**Author:** [@job](https://discuss.elastic.co/u/job)\
**Replies:** 4\
**Last updated:** [July 28, 2012, 2:36am UTC](https://discuss.elastic.co/t/elasticsearch-thinks-my-map-string-string-should-be-datetime-and-fails/8547 "2012-07-28T02:36:24Z")

</div>

I have a Java class: public class Audit { public Map newValues = new HashMap(); ... Which I turn to JSON: {"newValues":{"data":"sjab",...},...} I get this error Failed to parse \[newValues.…

---

## [Any way to show different dashboards for different users?](https://discuss.elastic.co/t/any-way-to-show-different-dashboards-for-different-users/200035)

<div class="topic-metadata">

**Author:** [@landy](https://discuss.elastic.co/u/landy)\
**Replies:** 1\
**Last updated:** [September 18, 2019, 4:15pm UTC](https://discuss.elastic.co/t/any-way-to-show-different-dashboards-for-different-users/200035 "2019-09-18T16:15:06Z")

</div>

Hi Experts! Is there any possible way for me to show different Kibana dashboards for different users? For example, I have 4 user groups. Every user group should have access to one dashboard but no permission to other da…

---

## [Heartbeat ssl self signed certificate](https://discuss.elastic.co/t/heartbeat-ssl-self-signed-certificate/86830)

<div class="topic-metadata">

**Author:** [@Roque\_Moyano](https://discuss.elastic.co/u/Roque_Moyano)\
**Replies:** 1\
**Last updated:** [May 25, 2017, 12:12pm UTC](https://discuss.elastic.co/t/heartbeat-ssl-self-signed-certificate/86830 "2017-05-25T12:12:57Z")

</div>

Hi I'm new in the ELK stack , I've configured some things , now I'm trying to monitor the urls with heartbeat , the problem is that one of my urls is configured using self signed ssl certificate , is there any heartbeat…

---

## [Cannot get the aggregate plugin to work](https://discuss.elastic.co/t/cannot-get-the-aggregate-plugin-to-work/28570)

<div class="topic-metadata">

**Author:** [@anoban](https://discuss.elastic.co/u/anoban)\
**Replies:** 1\
**Last updated:** [September 3, 2015, 8:28am UTC](https://discuss.elastic.co/t/cannot-get-the-aggregate-plugin-to-work/28570 "2015-09-03T08:28:18Z")

</div>

I am trying to compute response times and therefore do a line2 - line1 type operation. As I couldn't get this to work with real data, I wrote a tiny python program which logs in this format: The idea now is compare wh…

---

## [Filter docs by field exists not working as expected](https://discuss.elastic.co/t/filter-docs-by-field-exists-not-working-as-expected/27532)

<div class="topic-metadata">

**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\
**Replies:** 1\
**Last updated:** [August 18, 2015, 5:22pm UTC](https://discuss.elastic.co/t/filter-docs-by-field-exists-not-working-as-expected/27532 "2015-08-18T17:22:11Z")

</div>

The Source Example you can see below is being returned by a query on "thin". However, you can see in my query that I'm trying to filter docs using the filter exists "sbb" field. With this query, the Source Example should…

---

## [ML job behavior changed](https://discuss.elastic.co/t/ml-job-behavior-changed/291230)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 6\
**Last updated:** [December 9, 2021, 3:30pm UTC](https://discuss.elastic.co/t/ml-job-behavior-changed/291230 "2021-12-09T15:30:46Z")

</div>

Hello, I have a ML jon that is started for a long time, but since a few monthes, there is a change (is it a bug?) Explanations: Here is what I have As you can see, It seems that the ML runs OK and detects some ano…

---

## [Primary store size showing wrong info while using \_cat/indices](https://discuss.elastic.co/t/primary-store-size-showing-wrong-info-while-using-cat-indices/267361)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 6\
**Last updated:** [March 16, 2021, 3:41pm UTC](https://discuss.elastic.co/t/primary-store-size-showing-wrong-info-while-using-cat-indices/267361 "2021-03-16T15:41:02Z")

</div>

I somehow doubt \_cat/indices is showing me wrong information regarding store size. I have two indices - giitran\_with\_message and giitran\_without\_message. Now both have have almost the same document. Each one has 1000 …

---

## [I am unable to parse certain JSON messages](https://discuss.elastic.co/t/i-am-unable-to-parse-certain-json-messages/225888)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 6\
**Last updated:** [April 5, 2020, 6:16am UTC](https://discuss.elastic.co/t/i-am-unable-to-parse-certain-json-messages/225888 "2020-04-05T06:16:48Z")

</div>

Hi Guys, I am trying to parse Json formatted messages certain messages are getting parsed properly; while certain are showing as jsonparsefailure. Then I checked the same message online json viewer and it gets parsed pe…

---

## [Some of the data nodes not processing requests](https://discuss.elastic.co/t/some-of-the-data-nodes-not-processing-requests/53994)

<div class="topic-metadata">

**Author:** [@prasadkgvs](https://discuss.elastic.co/u/prasadkgvs)\
**Replies:** 6\
**Last updated:** [June 27, 2016, 9:39am UTC](https://discuss.elastic.co/t/some-of-the-data-nodes-not-processing-requests/53994 "2016-06-27T09:39:52Z")

</div>

Hi I am new to ElasticSerach. In our ElasticSearch cluster deployment we have total 12 nodes. Master-3, Data-7 and Client-3. During a load test we observed that out of 7 data nodes only 4 nodes participating and their CP…

---

## [Watcher alert only on state transition (error / ok state)](https://discuss.elastic.co/t/watcher-alert-only-on-state-transition-error-ok-state/243076)

<div class="topic-metadata">

**Author:** [@trigger-unhappy](https://discuss.elastic.co/u/trigger-unhappy)\
**Replies:** 3\
**Last updated:** [August 12, 2020, 8:27am UTC](https://discuss.elastic.co/t/watcher-alert-only-on-state-transition-error-ok-state/243076 "2020-08-12T08:27:15Z")

</div>

I've read this nice post on how you could possibly set up Watcher to trigger an action only when a watch change state (similar to how cloudwatch does it with events). I'd love to set something like that up to avoid spamm…

---

## [Log parsing in logstash](https://discuss.elastic.co/t/log-parsing-in-logstash/201313)

<div class="topic-metadata">

**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\
**Replies:** 3\
**Last updated:** [September 27, 2019, 10:31pm UTC](https://discuss.elastic.co/t/log-parsing-in-logstash/201313 "2019-09-27T22:31:44Z")

</div>

I am wondering , how can i parse below sample event into relevant fields in logstash ?currently i am not seeing any fields from this log in Kibana UI {"COMPILATION\_TIME":40,"DATABASE\_ID":19,"DATABASE\_NAME":"EEERD","END…

---

## [Marvel or elasticsearch-head with embedded elasticsearch](https://discuss.elastic.co/t/marvel-or-elasticsearch-head-with-embedded-elasticsearch/19488)

<div class="topic-metadata">

**Author:** [@clandestino\_bgd\_2](https://discuss.elastic.co/u/clandestino_bgd_2)\
**Replies:** 3\
**Last updated:** [November 15, 2014, 5:21pm UTC](https://discuss.elastic.co/t/marvel-or-elasticsearch-head-with-embedded-elasticsearch/19488 "2014-11-15T17:21:22Z")

</div>

Hello, I want to use ES as embedded in my spring boot / spring-data based app. That means I will have local node running inside my app. This is managed by spring-data-elasticsearch. How can I use marvel or elasticse…

---

## [Kibana: Failed to create report](https://discuss.elastic.co/t/kibana-failed-to-create-report/297884)

<div class="topic-metadata">

**Author:** [@bitnapper](https://discuss.elastic.co/u/bitnapper)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 9:09pm UTC](https://discuss.elastic.co/t/kibana-failed-to-create-report/297884 "2022-03-03T21:09:26Z")

</div>

I'm trying to create a csv report kibana reports „Failed to create report“ with little information about why. Is there some secret switch one has to turn on before reports work something to make kibana tell me why? Its j…

---

## [Force insert double quotes in a field value](https://discuss.elastic.co/t/force-insert-double-quotes-in-a-field-value/274144)

<div class="topic-metadata">

**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\
**Replies:** 2\
**Last updated:** [May 27, 2021, 6:41pm UTC](https://discuss.elastic.co/t/force-insert-double-quotes-in-a-field-value/274144 "2021-05-27T18:41:40Z")

</div>

Hi all, I have been trying to force wrap double quotes around a field value so it can be used in the query statements of the elasticsearch plugin. the field in question is the network.community\_id which includes a colo…

---

## [Filtering a nested cardinality aggregation](https://discuss.elastic.co/t/filtering-a-nested-cardinality-aggregation/86385)

<div class="topic-metadata">

**Author:** [@John\_Schoonover](https://discuss.elastic.co/u/John_Schoonover)\
**Replies:** 2\
**Last updated:** [May 25, 2017, 6:50am UTC](https://discuss.elastic.co/t/filtering-a-nested-cardinality-aggregation/86385 "2017-05-25T06:50:47Z")

</div>

I'm looking to have nested aggregation queries against documents to eventually reveal cardinality against a particular field which will result in either '1' or '2'. I'd like to filter out the '1' so that only those agg…

---

## [Libbeat - C or C++ implementation?](https://discuss.elastic.co/t/libbeat-c-or-c-implementation/67453)

<div class="topic-metadata">

**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\
**Replies:** 2\
**Last updated:** [December 2, 2016, 9:13pm UTC](https://discuss.elastic.co/t/libbeat-c-or-c-implementation/67453 "2016-12-02T21:13:54Z")

</div>

Any available or planned ? Thanks,

---

## [Multiple individual date & time fields from CSV into ES](https://discuss.elastic.co/t/multiple-individual-date-time-fields-from-csv-into-es/37305)

<div class="topic-metadata">

**Author:** [@zarec](https://discuss.elastic.co/u/zarec)\
**Replies:** 2\
**Last updated:** [December 16, 2015, 7:11am UTC](https://discuss.elastic.co/t/multiple-individual-date-time-fields-from-csv-into-es/37305 "2015-12-16T07:11:50Z")

</div>

Howdy all, I've spent the past few days reading forums, researching guides and using trial & error to get my head around the following situation, and now I realise I need help. I want to be able to display/work on date…

---

## [Freezing Indicies Doesn't Improve Cluster Performance](https://discuss.elastic.co/t/freezing-indicies-doesnt-improve-cluster-performance/241548)

<div class="topic-metadata">

**Author:** [@Liam\_B](https://discuss.elastic.co/u/Liam_B)\
**Replies:** 8\
**Last updated:** [July 20, 2020, 11:49am UTC](https://discuss.elastic.co/t/freezing-indicies-doesnt-improve-cluster-performance/241548 "2020-07-20T11:49:29Z")

</div>

Currently working with a 4 node ELK cluster (7.6) with 10k indices, 20k Primary Shard, 12k replica shards. To stabilise the cluster performance, I have attempted freezing and closing indices. so the number of open non-f…

---

## [MapperParsingException\[Analyzer \[name\_analyzer\] not found for field \[name\]\]](https://discuss.elastic.co/t/mapperparsingexception-analyzer-name-analyzer-not-found-for-field-name/7114)

<div class="topic-metadata">

**Author:** [@ryanwool](https://discuss.elastic.co/u/ryanwool)\
**Replies:** 0\
**Last updated:** [March 25, 2012, 10:36am UTC](https://discuss.elastic.co/t/mapperparsingexception-analyzer-name-analyzer-not-found-for-field-name/7114 "2012-03-25T10:36:12Z")

</div>

Hi, I am using IK analyzer (https://github.com/medcl/elasticsearch-analysis-ik). My following commands throws exception like below: curl -XDELETE http://localhost:9200/test curl -XPUT http://localhost:9200…

---

## ["Load more" instead of paging on search result page?](https://discuss.elastic.co/t/load-more-instead-of-paging-on-search-result-page/324412)

<div class="topic-metadata">

**Author:** [@samuel-m](https://discuss.elastic.co/u/samuel-m)\
**Replies:** 5\
**Last updated:** [February 2, 2023, 7:02am UTC](https://discuss.elastic.co/t/load-more-instead-of-paging-on-search-result-page/324412 "2023-02-02T07:02:20Z")

</div>

Hi everyone! Im using the search-ui library together with app search to build my first search result page. So far I looove it! :heart\_eyes: However, my customer has decided he does not want a traditional paging, but ra…

---

## [How to change timestamp adding by logstash while sending logs to output plugin](https://discuss.elastic.co/t/how-to-change-timestamp-adding-by-logstash-while-sending-logs-to-output-plugin/244799)

<div class="topic-metadata">

**Author:** [@aksshm](https://discuss.elastic.co/u/aksshm)\
**Replies:** 5\
**Last updated:** [August 13, 2020, 3:04pm UTC](https://discuss.elastic.co/t/how-to-change-timestamp-adding-by-logstash-while-sending-logs-to-output-plugin/244799 "2020-08-13T15:04:16Z")

</div>

Hi, I'm running logstash with kafka as input plugin and syslog as output plugin. For kafka , all the messages are with local timezone/required timezone but while sending to syslog logstash is adding a timestamp in fron…

---

## [Snapshot management plugin](https://discuss.elastic.co/t/snapshot-management-plugin/110811)

<div class="topic-metadata">

**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\
**Replies:** 5\
**Last updated:** [December 11, 2017, 11:00am UTC](https://discuss.elastic.co/t/snapshot-management-plugin/110811 "2017-12-11T11:00:05Z")

</div>

Hello guys, is exist some tools(kibana plugin) for centralized management, configure snapshots of elasticsearch? (for example, somebody want to restore data for some periodic from repository, and it not needed to ask a…

---

## [How does segment merging work](https://discuss.elastic.co/t/how-does-segment-merging-work/26416)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 5\
**Last updated:** [July 30, 2015, 2:11am UTC](https://discuss.elastic.co/t/how-does-segment-merging-work/26416 "2015-07-30T02:11:55Z")

</div>

So i read the docs, but just curious... Using ES 1.6.0 I had an index with: 257,947,981 documents and it was 1.28TB Then I did some bulk updates to that index which ended up being: 257,997,034 docs and 1.56TB Then …

---

## [Users & Roles Migration](https://discuss.elastic.co/t/users-roles-migration/213786)

<div class="topic-metadata">

**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\
**Replies:** 1\
**Last updated:** [January 6, 2020, 5:22pm UTC](https://discuss.elastic.co/t/users-roles-migration/213786 "2020-01-06T17:22:57Z")

</div>

Hi, What would be the best way to migrate all my User and Roles from a cluster running 6.8.0 to a new cluster running 7.5?

---

## [Upgrading to ES5 and Java TransporClient](https://discuss.elastic.co/t/upgrading-to-es5-and-java-transporclient/102463)

<div class="topic-metadata">

**Author:** [@ibailak1](https://discuss.elastic.co/u/ibailak1)\
**Replies:** 7\
**Last updated:** [October 4, 2017, 5:57am UTC](https://discuss.elastic.co/t/upgrading-to-es5-and-java-transporclient/102463 "2017-10-04T05:57:56Z")

</div>

Hi, I had a cluster in ES2 for a while, now finally we are ready to upgrade it to ES5 but I have some concerns, many applications are querying this cluster using the Java Client all the time, since many applications rel…

---

## [ElasticSearch Java TransportClient Logging Requests (logback)?](https://discuss.elastic.co/t/elasticsearch-java-transportclient-logging-requests-logback/61494)

<div class="topic-metadata">

**Author:** [@schmitch](https://discuss.elastic.co/u/schmitch)\
**Replies:** 1\
**Last updated:** [January 27, 2017, 5:56pm UTC](https://discuss.elastic.co/t/elasticsearch-java-transportclient-logging-requests-logback/61494 "2017-01-27T17:56:35Z")

</div>

Hello, is there a way to log all the Requests of Elasticsearch? I mean if I have a simple Query: v.prepareSearch() .setTypes("customer") .setQuery(QueryBuilders.termQuery("name", name)) Is there a way to ge…

---

## [About the JavaAPI - why do not recognize PreBuiltTransportClient](https://discuss.elastic.co/t/about-the-javaapi-why-do-not-recognize-prebuilttransportclient/70513)

<div class="topic-metadata">

**Author:** [@AmazoneWebService](https://discuss.elastic.co/u/AmazoneWebService)\
**Replies:** 7\
**Last updated:** [January 5, 2017, 9:38am UTC](https://discuss.elastic.co/t/about-the-javaapi-why-do-not-recognize-prebuilttransportclient/70513 "2017-01-05T09:38:32Z")

</div>

ES 5.1.1, use JavaAPI As describe at manual, write pom.xml but have a problem. that don't recognize PreBuiltTransportClient

---

## [Auto-generated deafult password hash error](https://discuss.elastic.co/t/auto-generated-deafult-password-hash-error/365401)

<div class="topic-metadata">

**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\
**Replies:** 4\
**Last updated:** [August 24, 2024, 11:45am UTC](https://discuss.elastic.co/t/auto-generated-deafult-password-hash-error/365401 "2024-08-24T11:45:19Z")

</div>

so as i am following Tutorial 1: Installing a self-managed Elastic Stack at the end of step 3 i should be able to run curl command and see some sort of default message that indicate my set up was fine but instead i get t…

---

## [Joining multiple document within same index with joining the key](https://discuss.elastic.co/t/joining-multiple-document-within-same-index-with-joining-the-key/282680)

<div class="topic-metadata">

**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\
**Replies:** 4\
**Last updated:** [August 27, 2021, 3:40pm UTC](https://discuss.elastic.co/t/joining-multiple-document-within-same-index-with-joining-the-key/282680 "2021-08-27T15:40:17Z")

</div>

Just have an question on query to join multiple document together. For example , i have the following 6 document into same index: { "\_id" : 1, "studentId" : "a11", "class" : "1A", "classNumber" : 11 }, { "\_id" :…

---

## [Import Saved Object API Issue](https://discuss.elastic.co/t/import-saved-object-api-issue/273695)

<div class="topic-metadata">

**Author:** [@Rini\_Singh](https://discuss.elastic.co/u/Rini_Singh)\
**Replies:** 4\
**Last updated:** [May 24, 2021, 2:31pm UTC](https://discuss.elastic.co/t/import-saved-object-api-issue/273695 "2021-05-24T14:31:15Z")

</div>

I am trying to use API - curl -X POST "localhost:5601/api/saved\_objects/\_import?createNewCopies=true -H "kbn-xsrf: true" --form file=@file.ndjson" -H 'kbn-xsrf: true' But i am getting error {"statusCode":400,"error":"Ba…

---

## [How can I install systemd module into the ES serverinstalled from the archive?](https://discuss.elastic.co/t/how-can-i-install-systemd-module-into-the-es-serverinstalled-from-the-archive/243656)

<div class="topic-metadata">

**Author:** [@takh777](https://discuss.elastic.co/u/takh777)\
**Replies:** 4\
**Last updated:** [August 6, 2020, 5:34am UTC](https://discuss.elastic.co/t/how-can-i-install-systemd-module-into-the-es-serverinstalled-from-the-archive/243656 "2020-08-06T05:34:11Z")

</div>

I've installed Elasticsearch 7.6 from archive (not RPM) on Cent OS 7 and configuring it. ( I cannot use RPM release of ES in this case, due to a requrement from other software.) Now I could launch the server via comman…

---

## [java.lang.IllegalArgumentException: plugin \[ingest-geoip\] is incompatible with version \[6.0.1\]; was designed for version \[6.0.0\]](https://discuss.elastic.co/t/java-lang-illegalargumentexception-plugin-ingest-geoip-is-incompatible-with-version-6-0-1-was-designed-for-version-6-0-0/110727)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [December 8, 2017, 6:53pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-plugin-ingest-geoip-is-incompatible-with-version-6-0-1-was-designed-for-version-6-0-0/110727 "2017-12-08T18:53:10Z")

</div>

after I update elasticearch from 6.0 to 6.0.1, elasticsearch.service won't start anymore and I'm getting errors in my error log: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.4 (Maipo) # rpm -q el…

---

## [Exclude line regex wont work](https://discuss.elastic.co/t/exclude-line-regex-wont-work/101855)

<div class="topic-metadata">

**Author:** [@Thunder](https://discuss.elastic.co/u/Thunder)\
**Replies:** 4\
**Last updated:** [September 28, 2017, 9:16am UTC](https://discuss.elastic.co/t/exclude-line-regex-wont-work/101855 "2017-09-28T09:16:18Z")

</div>

Hi, I trying to exclude lines from the logs. Some lines from the log: Connect from 192.168.3.6:54422 to 192.168.3.2:3306 (mysql/TCP) \[26/Sep/2017:00:19:50 +0200\] 94.0.38.45 - - "" 408 160 "" "" 58010 859 "www~" "www"…

[Previous page](https://discuss.elastic.co/top.md?page=1193&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1195&per_page=50&period=all)
