# Top

**URL:** https://discuss.elastic.co/top.md?page=1207&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1208

---

## [Unable to connect to ECE Cluster with Load Balancer](https://discuss.elastic.co/t/unable-to-connect-to-ece-cluster-with-load-balancer/180950)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 4\
**Last updated:** [May 16, 2019, 8:56am UTC](https://discuss.elastic.co/t/unable-to-connect-to-ece-cluster-with-load-balancer/180950 "2019-05-16T08:56:54Z")

</div>

I have Nginx as a LB which sits in front of the ECE proxy. When I added a wildcard DNS which pointed directly to the ECE proxy IP, I was able to connect to the cluster using the cluster endpoint. The DNS record is: \*.e…

---

## [Equivalent JAVA code for the below query](https://discuss.elastic.co/t/equivalent-java-code-for-the-below-query/175149)

<div class="topic-metadata">

**Author:** [@Harsha\_Yerasi](https://discuss.elastic.co/u/Harsha_Yerasi)\
**Replies:** 4\
**Last updated:** [April 8, 2019, 7:25am UTC](https://discuss.elastic.co/t/equivalent-java-code-for-the-below-query/175149 "2019-04-08T07:25:01Z")

</div>

Please help me with the equivalent java code to this search GET my\_index/\_search { "query": { "bool": { "must": { "nested": { "path": "workexperience", "query": { "terms": { "workexperience.title": \[ "1" \] } } } } } } } …

---

## [What is the current recommendation for creating integration tests that need a cluster?](https://discuss.elastic.co/t/what-is-the-current-recommendation-for-creating-integration-tests-that-need-a-cluster/145406)

<div class="topic-metadata">

**Author:** [@Marco\_Costantini](https://discuss.elastic.co/u/Marco_Costantini)\
**Replies:** 4\
**Last updated:** [August 22, 2018, 12:49pm UTC](https://discuss.elastic.co/t/what-is-the-current-recommendation-for-creating-integration-tests-that-need-a-cluster/145406 "2018-08-22T12:49:39Z")

</div>

We are using ES versoin 5.5. We have a very simple program that transforms some data and writes it to ES. I want to create some integration tests but am having much trouble. My trouble is that nothing is working or worki…

---

## [How to auto-generate default field when indexing?](https://discuss.elastic.co/t/how-to-auto-generate-default-field-when-indexing/51140)

<div class="topic-metadata">

**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\
**Replies:** 4\
**Last updated:** [May 30, 2016, 1:44am UTC](https://discuss.elastic.co/t/how-to-auto-generate-default-field-when-indexing/51140 "2016-05-30T01:44:28Z")

</div>

When using bulk api to import data, some data were not neat. For example {"name": "John", "gender": "male"} {"name": "James"} {"name": "Cindy", "gender": "female"} The second row lacks field gender. But I hope es c…

---

## [Ngrams for compound words in ES 2.\*](https://discuss.elastic.co/t/ngrams-for-compound-words-in-es-2/46157)

<div class="topic-metadata">

**Author:** [@tallakh](https://discuss.elastic.co/u/tallakh)\
**Replies:** 4\
**Last updated:** [April 6, 2016, 10:23am UTC](https://discuss.elastic.co/t/ngrams-for-compound-words-in-es-2/46157 "2016-04-06T10:23:01Z")

</div>

I've been looking into using ngrams to solve searching using wrong spelling and handling complex compound words both in the index and query string. I came across ngrams-compound-words which really fits my needs, but th…

---

## [Regex on results only](https://discuss.elastic.co/t/regex-on-results-only/27455)

<div class="topic-metadata">

**Author:** [@regexonsubset1](https://discuss.elastic.co/u/regexonsubset1)\
**Replies:** 4\
**Last updated:** [August 18, 2015, 1:42am UTC](https://discuss.elastic.co/t/regex-on-results-only/27455 "2015-08-18T01:42:28Z")

</div>

Why is it that { "query": { "ids": { "type": "mytype", "values": \[ "AU8wgJipa1wkLOvkEVEL" \] } } } Is substantially faster (instant vs a minute) than { "query": { "ids": { …

---

## [SIGSEGV JVM Crash](https://discuss.elastic.co/t/sigsegv-jvm-crash/351267)

<div class="topic-metadata">

**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\
**Replies:** 5\
**Last updated:** [January 22, 2024, 5:00am UTC](https://discuss.elastic.co/t/sigsegv-jvm-crash/351267 "2024-01-22T05:00:23Z")

</div>

Hello! Thanks for help in advance I've running a 3-nodes cluster (es1, es2, es3). Recently, after VM restart (es2 node) it constantly crashes after several hours of work with SIGSEGV. Here is full error from journalctl…

---

## [Updating field that is an empty string](https://discuss.elastic.co/t/updating-field-that-is-an-empty-string/302649)

<div class="topic-metadata">

**Author:** [@es\_beginner](https://discuss.elastic.co/u/es_beginner)\
**Replies:** 5\
**Last updated:** [April 19, 2022, 1:59am UTC](https://discuss.elastic.co/t/updating-field-that-is-an-empty-string/302649 "2022-04-19T01:59:49Z")

</div>

I currently have an elastic document with a field called grade. This field is an empty string. In Kibana, its registered as grade: (empty). Now when I try to update grade via: POST index/\_update/\_id { "doc": { …

---

## [Merging transform indices to create new summary index](https://discuss.elastic.co/t/merging-transform-indices-to-create-new-summary-index/244720)

<div class="topic-metadata">

**Author:** [@InfiniteDreamer](https://discuss.elastic.co/u/InfiniteDreamer)\
**Replies:** 5\
**Last updated:** [August 18, 2020, 1:39pm UTC](https://discuss.elastic.co/t/merging-transform-indices-to-create-new-summary-index/244720 "2020-08-18T13:39:36Z")

</div>

we want to create a summary transform index from two main index named salesdata and visitdata respectively,both indices mapping is different where CustomerCode is like primary key present in both index. SalesData index…

---

## [Logstash pipeline port is not visible outside Openshift/Kubernetes](https://discuss.elastic.co/t/logstash-pipeline-port-is-not-visible-outside-openshift-kubernetes/227372)

<div class="topic-metadata">

**Author:** [@nila](https://discuss.elastic.co/u/nila)\
**Replies:** 5\
**Last updated:** [April 10, 2020, 7:37pm UTC](https://discuss.elastic.co/t/logstash-pipeline-port-is-not-visible-outside-openshift-kubernetes/227372 "2020-04-10T19:37:48Z")

</div>

Hello all - I have setup ELK cluster on Openshift/Kubernetes with TLS. All components work fine. But when I configure filebeat to my logstash with pipeline port(created service with a nodeport), it is unable to find t…

---

## [Wildcards + synonyms](https://discuss.elastic.co/t/wildcards-synonyms/81949)

<div class="topic-metadata">

**Author:** [@klara\_gogi](https://discuss.elastic.co/u/klara_gogi)\
**Replies:** 5\
**Last updated:** [April 12, 2017, 2:43pm UTC](https://discuss.elastic.co/t/wildcards-synonyms/81949 "2017-04-12T14:43:33Z")

</div>

Можно ли применить wildcard к самим синонимам? Я хочу, найти слово "бана\*" имея его в списке синонимов: банан=\> banan Запрос выглядит так: (в анализторе ничего кроме сиинонимов нет) GET products/\_search {"\_source"…

---

## [Use case and infrastructure questions and doubts](https://discuss.elastic.co/t/use-case-and-infrastructure-questions-and-doubts/57941)

<div class="topic-metadata">

**Author:** [@johnconnor](https://discuss.elastic.co/u/johnconnor)\
**Replies:** 5\
**Last updated:** [August 13, 2016, 1:16am UTC](https://discuss.elastic.co/t/use-case-and-infrastructure-questions-and-doubts/57941 "2016-08-13T01:16:20Z")

</div>

Hi, I would like to share my use of case and issues and see if I can get some good advices and recommendations Use case: My product is a search engine based on ES. It index everyday constantly in the same index. Sad…

---

## [Logstash api endpoints are not accessible outside the logstash container](https://discuss.elastic.co/t/logstash-api-endpoints-are-not-accessible-outside-the-logstash-container/284135)

<div class="topic-metadata">

**Author:** [@vijayebpzr](https://discuss.elastic.co/u/vijayebpzr)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 4:49am UTC](https://discuss.elastic.co/t/logstash-api-endpoints-are-not-accessible-outside-the-logstash-container/284135 "2021-09-14T04:49:49Z")

</div>

We deployed the ELK stack in kubernetes cluster and everything is working fine. Now we are trying to monitor logstash from kibana stack monitoring using metricbeat. We could see that logstash section is not visible in st…

---

## [Aggregate data using filebeat](https://discuss.elastic.co/t/aggregate-data-using-filebeat/267907)

<div class="topic-metadata">

**Author:** [@szabgab](https://discuss.elastic.co/u/szabgab)\
**Replies:** 3\
**Last updated:** [March 31, 2021, 6:53am UTC](https://discuss.elastic.co/t/aggregate-data-using-filebeat/267907 "2021-03-31T06:53:09Z")

</div>

I have a log file that looks like this: TIMESTAMP FIELD VALUE e.g. 100 load 1 100 mem 23 100 free 7 103 load 2 103 mem 17 103 free 9 ... I would like to aggregate the lines with the same …

---

## [How can I sync an entire dynamodb table with Elasticsearch?](https://discuss.elastic.co/t/how-can-i-sync-an-entire-dynamodb-table-with-elasticsearch/261063)

<div class="topic-metadata">

**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\
**Replies:** 3\
**Last updated:** [January 14, 2021, 1:35pm UTC](https://discuss.elastic.co/t/how-can-i-sync-an-entire-dynamodb-table-with-elasticsearch/261063 "2021-01-14T13:35:48Z")

</div>

Hi all, I am having trouble to connect ES to dynamodb. Today I use a python lambda (serverless) to send every dynamodb change (update, delete, modify) to the Elasticsearch clusters. But we want to be able to reindex old…

---

## [Logstash découpage avec split et ingestion ne fonctionne pas](https://discuss.elastic.co/t/logstash-decoupage-avec-split-et-ingestion-ne-fonctionne-pas/219180)

<div class="topic-metadata">

**Author:** [@romainfoulono](https://discuss.elastic.co/u/romainfoulono)\
**Replies:** 3\
**Last updated:** [February 19, 2020, 3:51pm UTC](https://discuss.elastic.co/t/logstash-decoupage-avec-split-et-ingestion-ne-fonctionne-pas/219180 "2020-02-19T15:51:22Z")

</div>

Bonjour tout le monde, Je souhaite ingérer dans Elasticsearch via Logstash des CSV et des textes. Sauf que Logstash envoie un champs unique "message" avec la ligne de texte à l'intérieur. J'aimerai découper cette ligne …

---

## [Kibana log errors regarding plugin request timeout](https://discuss.elastic.co/t/kibana-log-errors-regarding-plugin-request-timeout/198087)

<div class="topic-metadata">

**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\
**Replies:** 3\
**Last updated:** [September 5, 2019, 6:04pm UTC](https://discuss.elastic.co/t/kibana-log-errors-regarding-plugin-request-timeout/198087 "2019-09-05T18:04:20Z")

</div>

Hi Elastic Team, I am running Kibana 6.8.1 built from git source. When I look at kibana.stdout file, I saw lots of errors regarding some x-pack plugins with Request timeout errors like below. {"type":"log","@timestamp"…

---

## [PostGIS Spatial Data import in ElasticSearch](https://discuss.elastic.co/t/postgis-spatial-data-import-in-elasticsearch/162741)

<div class="topic-metadata">

**Author:** [@Rahul\_Tandon](https://discuss.elastic.co/u/Rahul_Tandon)\
**Replies:** 3\
**Last updated:** [January 3, 2019, 7:11am UTC](https://discuss.elastic.co/t/postgis-spatial-data-import-in-elasticsearch/162741 "2019-01-03T07:11:17Z")

</div>

I am trying to import spatial data from postgres(POSTGIS extension) but facing issue while imporing spatial data. I am able to import non spatial data from postgres to elasticsearch using logstash. elastic search 6.5.4 …

---

## [How to show 0 instead of blank in meteric](https://discuss.elastic.co/t/how-to-show-0-instead-of-blank-in-meteric/154649)

<div class="topic-metadata">

**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\
**Replies:** 3\
**Last updated:** [October 31, 2018, 7:58am UTC](https://discuss.elastic.co/t/how-to-show-0-instead-of-blank-in-meteric/154649 "2018-10-31T07:58:20Z")

</div>

Hi All, How can I customize my metric in kibana? i want to show 0 in metric, if no data is available

---

## [Kibana Canvas - Ignore filters for fields that are not contained in the index](https://discuss.elastic.co/t/kibana-canvas-ignore-filters-for-fields-that-are-not-contained-in-the-index/146545)

<div class="topic-metadata">

**Author:** [@tarkin67](https://discuss.elastic.co/u/tarkin67)\
**Replies:** 3\
**Last updated:** [August 31, 2018, 6:17am UTC](https://discuss.elastic.co/t/kibana-canvas-ignore-filters-for-fields-that-are-not-contained-in-the-index/146545 "2018-08-31T06:17:38Z")

</div>

Hi Canvas Team, I am at the moment experimenting with canvas and very happy with it so far. One thing that bothers me a bit however, is that currently in canvas all filters are always applied to all elements. It would b…

---

## [Need help with painless scripting](https://discuss.elastic.co/t/need-help-with-painless-scripting/130059)

<div class="topic-metadata">

**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\
**Replies:** 3\
**Last updated:** [May 1, 2018, 8:41pm UTC](https://discuss.elastic.co/t/need-help-with-painless-scripting/130059 "2018-05-01T20:41:22Z")

</div>

Hi, I have data like this - curl -H "content-type: application/json" -XPUT "http://xxx:9200/currencylookup/inr/usd" -d' { "currency": "usd", "currencyname": "US Dollar", "units\_per\_inr": 0.016155969, "inr\_per\_unit…

---

## [When look at kibana, how can we use debug mode in vscode](https://discuss.elastic.co/t/when-look-at-kibana-how-can-we-use-debug-mode-in-vscode/113407)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 4:10pm UTC](https://discuss.elastic.co/t/when-look-at-kibana-how-can-we-use-debug-mode-in-vscode/113407 "2018-01-05T16:10:53Z")

</div>

when look at kibana, how can we use debug mode in vscode what's the right config! please just post me a lanuch.json config for vscode

---

## [How to set up for use in Fantastic ElasticSearch](https://discuss.elastic.co/t/how-to-set-up-for-use-in-fantastic-elasticsearch/76280)

<div class="topic-metadata">

**Author:** [@Paul\_Benbow](https://discuss.elastic.co/u/Paul_Benbow)\
**Replies:** 3\
**Last updated:** [February 24, 2017, 1:49pm UTC](https://discuss.elastic.co/t/how-to-set-up-for-use-in-fantastic-elasticsearch/76280 "2017-02-24T13:49:53Z")

</div>

I'm new to Elastic search and I'm struggling to get my Wordpress Fantastic ElasticSearch plugin to connect to the Elastic Server. I have added my https End Point when asked for Server URL but get error 'Couldn't connect …

---

## [200 logs/minute elastic performance](https://discuss.elastic.co/t/200-logs-minute-elastic-performance/61258)

<div class="topic-metadata">

**Author:** [@rubpa](https://discuss.elastic.co/u/rubpa)\
**Replies:** 3\
**Last updated:** [September 30, 2016, 8:50am UTC](https://discuss.elastic.co/t/200-logs-minute-elastic-performance/61258 "2016-09-30T08:50:58Z")

</div>

Hello! I just started with the ELK stack few weeks ago and have spent time on the tutorial videos, hands-on, etc. I've elasticsearch-2.3.4 and logstash-2.3.4 on a Win7 PC (laptop) with 8GB RAM and 64-bit JDK1.8. I'm …

---

## [Cant relocate to newly joined data node](https://discuss.elastic.co/t/cant-relocate-to-newly-joined-data-node/58629)

<div class="topic-metadata">

**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\
**Replies:** 3\
**Last updated:** [August 22, 2016, 10:13pm UTC](https://discuss.elastic.co/t/cant-relocate-to-newly-joined-data-node/58629 "2016-08-22T22:13:50Z")

</div>

Hello I have a new data node added to the cluster, when I am trying to relocate some shards to it, i get: { "error": { "root\_cause": \[ { "type": "remote\_transport\_exception", "reason": "\[lwe…

---

## [12345](https://discuss.elastic.co/t/topic/27897)

<div class="topic-metadata">

**Author:** [@jamasdj123](https://discuss.elastic.co/u/jamasdj123)\
**Replies:** 3\
**Last updated:** [February 3, 2016, 10:47pm UTC](https://discuss.elastic.co/t/topic/27897 "2016-02-03T22:47:30Z")

</div>

12345

---

## [Logstash Stopped Forwarding Messages to GrayLog After Some Time](https://discuss.elastic.co/t/logstash-stopped-forwarding-messages-to-graylog-after-some-time/1900)

<div class="topic-metadata">

**Author:** [@Haroon\_Khan](https://discuss.elastic.co/u/Haroon_Khan)\
**Replies:** 3\
**Last updated:** [June 4, 2015, 12:26pm UTC](https://discuss.elastic.co/t/logstash-stopped-forwarding-messages-to-graylog-after-some-time/1900 "2015-06-04T12:26:15Z")

</div>

Hi guys I have four servers from which i am sending the logs directly to my Gray log server. My Conf file looks like the following. input { file { type =\> "apache-localhost" path =\> "/var/log/tomcat8/localhost\_acc…

---

## [Kibana Error: Cannot read properties of undefined (reading 'id')](https://discuss.elastic.co/t/kibana-error-cannot-read-properties-of-undefined-reading-id/311817)

<div class="topic-metadata">

**Author:** [@godhand](https://discuss.elastic.co/u/godhand)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 8:55pm UTC](https://discuss.elastic.co/t/kibana-error-cannot-read-properties-of-undefined-reading-id/311817 "2022-08-12T20:55:31Z")

</div>

Hello, when I open Integrations -\> Installed integrations -\> Apache HTTP Server -\> Integration policies Tab, then this error message show up. I've tried restarting Elasticsearch and Kibana, but it doesn't work. Please he…

---

## [(Ingest Pipeline) Grok on an Array using Foreach -\> Pipeline processors](https://discuss.elastic.co/t/ingest-pipeline-grok-on-an-array-using-foreach-pipeline-processors/245436)

<div class="topic-metadata">

**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\
**Replies:** 1\
**Last updated:** [August 19, 2020, 1:00pm UTC](https://discuss.elastic.co/t/ingest-pipeline-grok-on-an-array-using-foreach-pipeline-processors/245436 "2020-08-19T13:00:21Z")

</div>

Hello, I have a document structure that looks like the example at the end and the pipeline is just after. I tried building a pipeline that would then use a foreach processor to call a pipeline in which I used a grok pr…

---

## [How i can increase the thread\_pool.index.size in 6.6.1](https://discuss.elastic.co/t/how-i-can-increase-the-thread-pool-index-size-in-6-6-1/202288)

<div class="topic-metadata">

**Author:** [@Kamal\_Ambati](https://discuss.elastic.co/u/Kamal_Ambati)\
**Replies:** 1\
**Last updated:** [October 11, 2019, 6:57pm UTC](https://discuss.elastic.co/t/how-i-can-increase-the-thread-pool-index-size-in-6-6-1/202288 "2019-10-11T18:57:36Z")

</div>

Hi With the reference to Elasticsearch document forv6.6.1, i am trying to increase the thread\_pool index/write size to number of cores times 5 (4\*5=20)in elasticsearch.yml file and but getting exceptions during startup.…

---

## [Dynamic indexing in spark structured streamin](https://discuss.elastic.co/t/dynamic-indexing-in-spark-structured-streamin/174717)

<div class="topic-metadata">

**Author:** [@Fahad\_Khan](https://discuss.elastic.co/u/Fahad_Khan)\
**Replies:** 1\
**Last updated:** [April 5, 2019, 9:31pm UTC](https://discuss.elastic.co/t/dynamic-indexing-in-spark-structured-streamin/174717 "2019-04-05T21:31:00Z")

</div>

I'm using spark structured streaming to read so many files recursively and writing them into elasticsearch, I want to know is there a way to create index at runtime according to the file name spark reading from folder. s…

---

## [Use packetbeat without root](https://discuss.elastic.co/t/use-packetbeat-without-root/97679)

<div class="topic-metadata">

**Author:** [@twitoomer](https://discuss.elastic.co/u/twitoomer)\
**Replies:** 1\
**Last updated:** [August 20, 2017, 6:58pm UTC](https://discuss.elastic.co/t/use-packetbeat-without-root/97679 "2017-08-20T18:58:08Z")

</div>

Hi, In my company, the Linux based servers are restricted and we don’t have root privileges, therefore, I cannot start Packetbeat. The error I get is: Error creating sniffer: any: You don’t have permission to capture on…

---

## [How to make make an if condition with a regular expression pattern](https://discuss.elastic.co/t/how-to-make-make-an-if-condition-with-a-regular-expression-pattern/78338)

<div class="topic-metadata">

**Author:** [@DannyM](https://discuss.elastic.co/u/DannyM)\
**Replies:** 1\
**Last updated:** [March 13, 2017, 2:17pm UTC](https://discuss.elastic.co/t/how-to-make-make-an-if-condition-with-a-regular-expression-pattern/78338 "2017-03-13T14:17:45Z")

</div>

Hi, i'm new to ELK and trying to filter some spam lines from being added to the elasticsearch server. to do this i made the following logstash filter: ## var\_log\_messages filter filter { if \[type\] == "var\_lo…

---

## [How to index stop words AND special characters using standard analyzer](https://discuss.elastic.co/t/how-to-index-stop-words-and-special-characters-using-standard-analyzer/14808)

<div class="topic-metadata">

**Author:** [@sowjanya](https://discuss.elastic.co/u/sowjanya)\
**Replies:** 1\
**Last updated:** [December 11, 2013, 8:42pm UTC](https://discuss.elastic.co/t/how-to-index-stop-words-and-special-characters-using-standard-analyzer/14808 "2013-12-11T20:42:00Z")

</div>

Hi, I need to index stop words AND Special characters with the features of Standard Analyzer. I have the mapping like this { "abc\_template" : { "template" : "\*", "order": 0, "settings" :{ }, "mappings" : {…

---

## [Codec with name 'Lucene45' does not exist](https://discuss.elastic.co/t/codec-with-name-lucene45-does-not-exist/14493)

<div class="topic-metadata">

**Author:** [@Mike\_4](https://discuss.elastic.co/u/Mike_4)\
**Replies:** 1\
**Last updated:** [November 20, 2013, 1:38pm UTC](https://discuss.elastic.co/t/codec-with-name-lucene45-does-not-exist/14493 "2013-11-20T13:38:04Z")

</div>

Hi, starting with elasticsearch 0.9.6 i get spammed with the message: Caused by: java.lang.IllegalArgumentException: A SPI class of type org.apache.lucene.codecs.Codec with name 'Lucene45' does not exist. You n…

---

## [How to sent application/xml request body in a http\_poller endpoint](https://discuss.elastic.co/t/how-to-sent-application-xml-request-body-in-a-http-poller-endpoint/143824)

<div class="topic-metadata">

**Author:** [@Jishnu\_Prathap](https://discuss.elastic.co/u/Jishnu_Prathap)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 5:37pm UTC](https://discuss.elastic.co/t/how-to-sent-application-xml-request-body-in-a-http-poller-endpoint/143824 "2018-08-10T17:37:21Z")

</div>

I am having difficulties setting XML in request body to a http\_poller endpoint. When I set the request body in http\_poller endpoint is showing error My conf file input { http\_poller { schedule =\> { cron =\> "\* \* …

---

## [Automatic Deployment and setting Index settings](https://discuss.elastic.co/t/automatic-deployment-and-setting-index-settings/57988)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 2\
**Last updated:** [August 15, 2016, 2:14pm UTC](https://discuss.elastic.co/t/automatic-deployment-and-setting-index-settings/57988 "2016-08-15T14:14:42Z")

</div>

Hi, I am trying to understand the relationship between elasticsearch.yml and static settings. See, I build my clusters with Ansible but have noticed that I am not quite sure how to deal with static settings like sh…

---

## [Is where condition supported with logstash-jdbc input plugin](https://discuss.elastic.co/t/is-where-condition-supported-with-logstash-jdbc-input-plugin/27170)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 2\
**Last updated:** [August 12, 2015, 8:34am UTC](https://discuss.elastic.co/t/is-where-condition-supported-with-logstash-jdbc-input-plugin/27170 "2015-08-12T08:34:38Z")

</div>

Hi All I am not able to create index if i provide a complex sql query like with where condition and join condition But if i am providing simple "select \* from table', it is working well Please let me know if comple…

---

## [Logstash not reading my file, no sincedb file being created either](https://discuss.elastic.co/t/logstash-not-reading-my-file-no-sincedb-file-being-created-either/52363)

<div class="topic-metadata">

**Author:** [@Rohan\_Tirumale](https://discuss.elastic.co/u/Rohan_Tirumale)\
**Replies:** 1\
**Last updated:** [June 14, 2016, 6:26pm UTC](https://discuss.elastic.co/t/logstash-not-reading-my-file-no-sincedb-file-being-created-either/52363 "2016-06-14T18:26:32Z")

</div>

I am using logstash 2.0 and this is my config file. For some reason the file isnt being read, but I am able to feed it an input using stdin, for which it shows me a result. input { file{ …

---

## [SIEM rule not working for custom query](https://discuss.elastic.co/t/siem-rule-not-working-for-custom-query/253895)

<div class="topic-metadata">

**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\
**Replies:** 6\
**Last updated:** [November 9, 2020, 3:38pm UTC](https://discuss.elastic.co/t/siem-rule-not-working-for-custom-query/253895 "2020-11-09T15:38:49Z")

</div>

HI, I'm trying to create a simple rule that checks host.name field: But no signal is generating. here is my index mapping. I can see events in timeline using the same query.

---

## [Unable to sign into ElasticSearch or Kibana after default 5.02 installation - help please?](https://discuss.elastic.co/t/unable-to-sign-into-elasticsearch-or-kibana-after-default-5-02-installation-help-please/67937)

<div class="topic-metadata">

**Author:** [@baden0x1](https://discuss.elastic.co/u/baden0x1)\
**Replies:** 6\
**Last updated:** [December 5, 2016, 8:59pm UTC](https://discuss.elastic.co/t/unable-to-sign-into-elasticsearch-or-kibana-after-default-5-02-installation-help-please/67937 "2016-12-05T20:59:04Z")

</div>

I am prompted for a user name and password after installing v5.0.2 - both for localhost:9200 and Kibana. In reading the notes her: https://www.elastic.co/guide/en/x-pack/current/setting-up-authentication.html I tried e…

---

## [Set kibana.autocompleteTerminateAfter via DevTools](https://discuss.elastic.co/t/set-kibana-autocompleteterminateafter-via-devtools/255685)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 8\
**Last updated:** [November 17, 2020, 2:08pm UTC](https://discuss.elastic.co/t/set-kibana-autocompleteterminateafter-via-devtools/255685 "2020-11-17T14:08:39Z")

</div>

Hi, Is there a way to set kibana.autocompleteTerminateAfter via DevTools or via curl command? Thank you in advance! BR Voula

---

## [High Disk Read I/O in Elasticsearch](https://discuss.elastic.co/t/high-disk-read-i-o-in-elasticsearch/104232)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 11:21am UTC](https://discuss.elastic.co/t/high-disk-read-i-o-in-elasticsearch/104232 "2017-10-17T11:21:20Z")

</div>

I am observing a high disk read i/o in a elasticsearch node. I am using one node cluster with 5 shards. Environment Elasticssearch 2.3.1 Disk SSD Cores - 16 RAM - 64 GB Segments and merging could be one of the issue.…

---

## [Does snapshot restore lead to a memory leak?](https://discuss.elastic.co/t/does-snapshot-restore-lead-to-a-memory-leak/18395)

<div class="topic-metadata">

**Author:** [@anon44344346](https://discuss.elastic.co/u/anon44344346)\
**Replies:** 8\
**Last updated:** [July 3, 2014, 6:25pm UTC](https://discuss.elastic.co/t/does-snapshot-restore-lead-to-a-memory-leak/18395 "2014-07-03T18:25:04Z")

</div>

We have one one-machine cluster with about 1k indices. It used to work flawlessly , (being with a high load, of course) but since we started to use heavily the snapshot-restore feature, it's getting its memory exhau…

---

## [Filebeat apache module not collecting any logs](https://discuss.elastic.co/t/filebeat-apache-module-not-collecting-any-logs/319832)

<div class="topic-metadata">

**Author:** [@cesq](https://discuss.elastic.co/u/cesq)\
**Replies:** 4\
**Last updated:** [November 26, 2022, 4:55pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-not-collecting-any-logs/319832 "2022-11-26T16:55:52Z")

</div>

So I have been playing around with collecting data using filebeat and sending it via sidecar to my graylog server. I wanted to try out the apache module, so I wrote the configuration for this (following the docs of cours…

---

## [What username/password should I use for logstash?](https://discuss.elastic.co/t/what-username-password-should-i-use-for-logstash/121301)

<div class="topic-metadata">

**Author:** [@mrubin](https://discuss.elastic.co/u/mrubin)\
**Replies:** 4\
**Last updated:** [February 26, 2018, 3:10am UTC](https://discuss.elastic.co/t/what-username-password-should-i-use-for-logstash/121301 "2018-02-26T03:10:02Z")

</div>

I have a question about https://www.elastic.co/guide/en/x-pack/current/security-getting-started.html. Is that applicable to Elastic Cloud as well? E.g. how do I set the password of the logstash\_system user? Or should I c…

---

## [Max hostname length?](https://discuss.elastic.co/t/max-hostname-length/28062)

<div class="topic-metadata">

**Author:** [@chrispomeroy](https://discuss.elastic.co/u/chrispomeroy)\
**Replies:** 5\
**Last updated:** [August 26, 2015, 6:45am UTC](https://discuss.elastic.co/t/max-hostname-length/28062 "2015-08-26T06:45:35Z")

</div>

Hi, I found a possible bug whereby Elasticsearch won't start (results in "Failed!" when starting the daemon using Debian) if the hostname is greater than approximately 26 letters. Does this seem possible? I'm crea…

---

## [Looking for advice on bulk loading](https://discuss.elastic.co/t/looking-for-advice-on-bulk-loading/10754)

<div class="topic-metadata">

**Author:** [@Rob\_Styles](https://discuss.elastic.co/u/Rob_Styles)\
**Replies:** 5\
**Last updated:** [February 18, 2013, 7:14pm UTC](https://discuss.elastic.co/t/looking-for-advice-on-bulk-loading/10754 "2013-02-18T19:14:06Z")

</div>

Hi all, I'm looking for some advice on getting lots of docs into es. We are generated es docs from a db and each doc is around 1k at the moment. We expect to increase the size of each doc to around 4k as we inclu…

---

## [ElasticSearch-6.8 - querying with hyphens in fields does not get results](https://discuss.elastic.co/t/elasticsearch-6-8-querying-with-hyphens-in-fields-does-not-get-results/314467)

<div class="topic-metadata">

**Author:** [@spp125](https://discuss.elastic.co/u/spp125)\
**Replies:** 7\
**Last updated:** [September 18, 2022, 2:08am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-querying-with-hyphens-in-fields-does-not-get-results/314467 "2022-09-18T02:08:17Z")

</div>

I have a users index in that there is a field called groupName that have value like "ad-users" when I query to match how many users belong to "ad-users" groupName. Upon querying to match on groupName I got no results. He…

---

## [Unable to configure OIDC using the trail licence with azure AD](https://discuss.elastic.co/t/unable-to-configure-oidc-using-the-trail-licence-with-azure-ad/297746)

<div class="topic-metadata">

**Author:** [@susmithabadam1609](https://discuss.elastic.co/u/susmithabadam1609)\
**Replies:** 7\
**Last updated:** [March 17, 2022, 10:38am UTC](https://discuss.elastic.co/t/unable-to-configure-oidc-using-the-trail-licence-with-azure-ad/297746 "2022-03-17T10:38:06Z")

</div>

Hi Team I have installed ECK operator with trail licence to test OIDC with azure AD in EKS cluster. I have configured OIDC by following the below document: but I'm facing the below issue Status of trail licence: …

[Previous page](https://discuss.elastic.co/top.md?page=1206&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1208&per_page=50&period=all)
