# Top **URL:** https://discuss.elastic.co/top.md?page=123&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 124 --- ## [Sparse vector vs rank features. Which one?](https://discuss.elastic.co/t/sparse-vector-vs-rank-features-which-one/214772)
**Author:** [@snakeztc](https://discuss.elastic.co/u/snakeztc)\ **Replies:** 12\ **Last updated:** [February 11, 2020, 7:02pm UTC](https://discuss.elastic.co/t/sparse-vector-vs-rank-features-which-one/214772 "2020-02-11T19:02:04Z")
I am trying to implement a customized search function that will rank documents based on sparse features. Concretely, each document will have a list of sparse features, e.g. doc\_1 -\> {a: 1.1, b: 0.2} doc\_2 -\> {a: 0.2, z… --- ## [Configuring Data and Master Node](https://discuss.elastic.co/t/configuring-data-and-master-node/61512)
**Author:** [@brandonmcgrath1](https://discuss.elastic.co/u/brandonmcgrath1)\ **Replies:** 12\ **Last updated:** [September 28, 2016, 9:05am UTC](https://discuss.elastic.co/t/configuring-data-and-master-node/61512 "2016-09-28T09:05:35Z")
Hello, I'm building an ELK production cluster consisting of 1 master and 1 (maybe 2) data nodes. I'm following this guide for reference: https://www.digitalocean.com/community/tutorials/how-to-set-up-a-production-elasti… --- ## [Filter Error logs only](https://discuss.elastic.co/t/filter-error-logs-only/218701)
**Author:** [@Adam\_Songambele](https://discuss.elastic.co/u/Adam_Songambele)\ **Replies:** 14\ **Last updated:** [February 15, 2020, 10:20pm UTC](https://discuss.elastic.co/t/filter-error-logs-only/218701 "2020-02-15T22:20:26Z")
Hi, i am still very new to the ELK stack and i am wondering how can i filter only error logs through logstash? i am currently feeding application, security and system logs into Logstash. below is my configuration for l… --- ## [Importing multiple large csv and json files into a single index](https://discuss.elastic.co/t/importing-multiple-large-csv-and-json-files-into-a-single-index/326738)
**Author:** [@mansi\_raval](https://discuss.elastic.co/u/mansi_raval)\ **Replies:** 10\ **Last updated:** [March 7, 2023, 9:29pm UTC](https://discuss.elastic.co/t/importing-multiple-large-csv-and-json-files-into-a-single-index/326738 "2023-03-07T21:29:17Z")
I have an folder containing data (20 GB) and this folder contains 26 subfolders that are sorted city-wise. Each of these subfolder contain many more subfolders comprising of csv and json files (The data that is stored in… --- ## [How does elastic agent configure filebeat](https://discuss.elastic.co/t/how-does-elastic-agent-configure-filebeat/351187)
**Author:** [@mbby](https://discuss.elastic.co/u/mbby)\ **Replies:** 9\ **Last updated:** [January 19, 2024, 7:17am UTC](https://discuss.elastic.co/t/how-does-elastic-agent-configure-filebeat/351187 "2024-01-19T07:17:22Z")
Hi, I've installed an agent and added a custom log integration to the policy. It's working but I'm wondering if there's some documentation which tells me: How does the agent configure filebeat? I searched in the filesy… --- ## [Elasticsearch inaccurate shard state when timed\_out is true](https://discuss.elastic.co/t/elasticsearch-inaccurate-shard-state-when-timed-out-is-true/285513)
**Author:** [@niketpatel2525](https://discuss.elastic.co/u/niketpatel2525)\ **Replies:** 14\ **Last updated:** [November 2, 2021, 5:28pm UTC](https://discuss.elastic.co/t/elasticsearch-inaccurate-shard-state-when-timed-out-is-true/285513 "2021-11-02T17:28:09Z")
Hey there, I have an index with 40 shards and I use the timeout feature with my search query. As per the documentation, if request timeout before it completes search on all shards, it will return whatever the results ot… --- ## [Extend Metricbeat](https://discuss.elastic.co/t/extend-metricbeat/146181)
**Author:** [@Manjukb](https://discuss.elastic.co/u/Manjukb)\ **Replies:** 13\ **Last updated:** [September 3, 2018, 6:50am UTC](https://discuss.elastic.co/t/extend-metricbeat/146181 "2018-09-03T06:50:59Z")
I understand there is a way to extend metric beats but documentation is bit confusing it says there are two ways to extend Extend Metricbeat directly Create your own Beat and use Metricbeat as a library what i unders… --- ## [Grok matching multi-lines saving first and last value to separate fields](https://discuss.elastic.co/t/grok-matching-multi-lines-saving-first-and-last-value-to-separate-fields/264958)
**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\ **Replies:** 11\ **Last updated:** [February 22, 2021, 3:08pm UTC](https://discuss.elastic.co/t/grok-matching-multi-lines-saving-first-and-last-value-to-separate-fields/264958 "2021-02-22T15:08:30Z")
Hello everyone, as the caption indicates I am trying to match multiple-lines of logs of which I would like to save first occurence of timestamp to separate field than last occurence of the timestamp. I am using codec mu… --- ## [Primary Shards Unassigned but still Cluster State health Yellow](https://discuss.elastic.co/t/primary-shards-unassigned-but-still-cluster-state-health-yellow/176189)
**Author:** [@Gaurav6141](https://discuss.elastic.co/u/Gaurav6141)\ **Replies:** 16\ **Last updated:** [April 10, 2019, 12:43pm UTC](https://discuss.elastic.co/t/primary-shards-unassigned-but-still-cluster-state-health-yellow/176189 "2019-04-10T12:43:17Z")
I was testing by Creating two dedicated master node and one data node. So I put down my data node from the Cluster and then tried to create new Index by curl -X PUT "localhost:9200/customer?pretty" where customer is the… --- ## [Empty record in ElasticSearch](https://discuss.elastic.co/t/empty-record-in-elasticsearch/144481)
**Author:** [@czome](https://discuss.elastic.co/u/czome)\ **Replies:** 14\ **Last updated:** [August 15, 2018, 5:04pm UTC](https://discuss.elastic.co/t/empty-record-in-elasticsearch/144481 "2018-08-15T17:04:06Z")
Hello, I don't understand why my logstash config don't save data in ES. My data comes from an xml file and here is my pipeline conf : input { beats { port =\> "5044" host =\> "localhost" client\_inactivity\_timeout =\> … --- ## [Unable to push incremental data from Cassandra DB to daily index using logstash](https://discuss.elastic.co/t/unable-to-push-incremental-data-from-cassandra-db-to-daily-index-using-logstash/166324)
**Author:** [@Sapna](https://discuss.elastic.co/u/Sapna)\ **Replies:** 24\ **Last updated:** [February 12, 2019, 10:42am UTC](https://discuss.elastic.co/t/unable-to-push-incremental-data-from-cassandra-db-to-daily-index-using-logstash/166324 "2019-02-12T10:42:23Z")
Hello, I am trying to create a daily index to fetch data from Cassandra DB using JDBC driver logstash. As soon it creates a new index with new date it is again pulling the whole data , which is already available in yes… --- ## [Cluster health times out](https://discuss.elastic.co/t/cluster-health-times-out/7944)
**Author:** [@arta](https://discuss.elastic.co/u/arta)\ **Replies:** 17\ **Last updated:** [August 13, 2012, 4:06pm UTC](https://discuss.elastic.co/t/cluster-health-times-out/7944 "2012-08-13T16:06:58Z")
Hi, After I restarted ES cluster (3 nodes), all my curl -XGET 'http://localhost:9200/\_cluster/health' times out on all nodes. I changed the cluster name in config/elasticsearch.yml and restarted ES, I can get cluster… --- ## [Visualize GEO location](https://discuss.elastic.co/t/visualize-geo-location/98937)
**Author:** [@immandotnet](https://discuss.elastic.co/u/immandotnet)\ **Replies:** 14\ **Last updated:** [August 31, 2017, 10:33am UTC](https://discuss.elastic.co/t/visualize-geo-location/98937 "2017-08-31T10:33:15Z")
I am trying to visualize GEO locations using ELK but getting an exception while selecting the bucket GEO coordinates “No Compatible Fields: The “\_\_\_\_” index pattern does not contain any of the following field types: geo\_… --- ## [Kibana unable to connect to elasticsearch after upgrade 6.6.8 to 7.5.0](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch-after-upgrade-6-6-8-to-7-5-0/211817)
**Author:** [@happycampo](https://discuss.elastic.co/u/happycampo)\ **Replies:** 9\ **Last updated:** [December 14, 2019, 6:49pm UTC](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch-after-upgrade-6-6-8-to-7-5-0/211817 "2019-12-14T18:49:55Z")
Using docker here. Upgraded elasticsearch and now cannot attach to it with kibana. We have a premium license and have had x-pack configured. I inherited it and honestly do not understand the configuration all that wel… --- ## [Не работают стоп слова](https://discuss.elastic.co/t/topic/50696)
**Author:** [@dasha](https://discuss.elastic.co/u/dasha)\ **Replies:** 10\ **Last updated:** [May 24, 2016, 12:59pm UTC](https://discuss.elastic.co/t/topic/50696 "2016-05-24T12:59:03Z")
Я использую elasticsearch php. первоначальный маппинг выглядит так $params = \[ 'index' =\> 'myindex', 'type' =\> 'faq\_article', 'body' =\> \[ 'settings' =\> \[ 'analysis' =\> \[ … --- ## [Cardinality computation](https://discuss.elastic.co/t/cardinality-computation/28454)
**Author:** [@lokeshhctm](https://discuss.elastic.co/u/lokeshhctm)\ **Replies:** 12\ **Last updated:** [September 2, 2015, 2:56pm UTC](https://discuss.elastic.co/t/cardinality-computation/28454 "2015-09-02T14:56:12Z")
We have avery large data set and hence we are storing data in elastic search with aggregated values with group by of a few columns. The problem now we are in, where we also need to do the cardinality. Since we can not … --- ## [Embedded ElasticSearch On JAVA API](https://discuss.elastic.co/t/embedded-elasticsearch-on-java-api/7021)
**Author:** [@samCougars](https://discuss.elastic.co/u/samCougars)\ **Replies:** 9\ **Last updated:** [March 21, 2012, 9:10pm UTC](https://discuss.elastic.co/t/embedded-elasticsearch-on-java-api/7021 "2012-03-21T21:10:44Z")
All I am using Embedded ElasticSearch On JAVA API. It is creating indexes correctly. Once I create the index, I see a folder "elasticSearch" under my home directory. But even after I remove this "elasticSearch" folde… --- ## [Functionbeat lambda timeout on aws elasticsearch connection](https://discuss.elastic.co/t/functionbeat-lambda-timeout-on-aws-elasticsearch-connection/230269)
**Author:** [@mnlth](https://discuss.elastic.co/u/mnlth)\ **Replies:** 10\ **Last updated:** [May 12, 2020, 10:30pm UTC](https://discuss.elastic.co/t/functionbeat-lambda-timeout-on-aws-elasticsearch-connection/230269 "2020-05-12T22:30:53Z")
I have functionbeat lambda deployed with cloudwatch triggers which works fine. When lambda streams logs to elasticsearch, I get Connecting to backoff(elasticsearch( https://escluster.es.amazonaws.com:9200 )) using htt… --- ## [Wrong anomaly detection with X-pack ML?](https://discuss.elastic.co/t/wrong-anomaly-detection-with-x-pack-ml/124348)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 12\ **Last updated:** [April 23, 2018, 2:39am UTC](https://discuss.elastic.co/t/wrong-anomaly-detection-with-x-pack-ml/124348 "2018-04-23T02:39:55Z")
Hello, I'm starting to make some tests with Machine Learning on my data and I'm trying to understand how it works and why it identifies an anomaly, an unexpected zero value, when the same query did not return zero. The… --- ## [License 2.1.1 Jar Hell Error](https://discuss.elastic.co/t/license-2-1-1-jar-hell-error/44782)
**Author:** [@dparkar](https://discuss.elastic.co/u/dparkar)\ **Replies:** 9\ **Last updated:** [March 18, 2016, 7:28pm UTC](https://discuss.elastic.co/t/license-2-1-1-jar-hell-error/44782 "2016-03-18T19:28:08Z")
Following is the error I am seeing on my nodes : \[2016-03-17 17:37:22,708\]\[ERROR\]\[bootstrap \] Exception java.lang.IllegalStateException: failed to load bundle \[file:/D:/ElasticSearch/pluginVersioned/lic… --- ## [Filebeat CPU high](https://discuss.elastic.co/t/filebeat-cpu-high/51152)
**Author:** [@Atul\_Patel](https://discuss.elastic.co/u/Atul_Patel)\ **Replies:** 10\ **Last updated:** [June 6, 2016, 10:00am UTC](https://discuss.elastic.co/t/filebeat-cpu-high/51152 "2016-06-06T10:00:55Z")
HI We are using Filebeat to collect the logs from various folders.Example.A service is calling A1,A2 and A3. All the logs are written in their respective folders.Filbeat is pushing the logs to logstash.In the logstash … --- ## [Filebeat in Docker: logging.to\_files is ignored](https://discuss.elastic.co/t/filebeat-in-docker-logging-to-files-is-ignored/147224)
**Author:** [@bluecoffee](https://discuss.elastic.co/u/bluecoffee)\ **Replies:** 11\ **Last updated:** [October 19, 2018, 2:22pm UTC](https://discuss.elastic.co/t/filebeat-in-docker-logging-to-files-is-ignored/147224 "2018-10-19T14:22:55Z")
Hi! I'm running Filebeat as a Docker container. I bind-mount a config file "filebeat.yml" that defines logging to files, but the logs still end up in the console, not in a file. The config file is being read (other con… --- ## [Xml filter plugin - creating nested field out of null object: Can't get text on a END\_OBJECT](https://discuss.elastic.co/t/xml-filter-plugin-creating-nested-field-out-of-null-object-cant-get-text-on-a-end-object/56928)
**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\ **Replies:** 10\ **Last updated:** [August 4, 2016, 4:08pm UTC](https://discuss.elastic.co/t/xml-filter-plugin-creating-nested-field-out-of-null-object-cant-get-text-on-a-end-object/56928 "2016-08-04T16:08:03Z")
FYI, Here is the error seen: "status"=\>400, "error"=\>{"type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse \[entry.AppId.raw\]", "caused\_by"=\>{"type"=\>"illegal\_state\_exception", "reason"=\>"Can't get text on a… --- ## [Can't figure out how to use certificates correctly](https://discuss.elastic.co/t/cant-figure-out-how-to-use-certificates-correctly/45949)
**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\ **Replies:** 14\ **Last updated:** [April 6, 2016, 1:04pm UTC](https://discuss.elastic.co/t/cant-figure-out-how-to-use-certificates-correctly/45949 "2016-04-06T13:04:38Z")
Hello everyone, I need help with configuring filebeat on windows with tls. I created .crt file in my ELK server, and copied it to my windows client. Now I'm trying to configure the filebeat.yml file, I've tried this fe… --- ## [The shards are crowded in a node](https://discuss.elastic.co/t/the-shards-are-crowded-in-a-node/112335)
**Author:** [@mcun0s](https://discuss.elastic.co/u/mcun0s)\ **Replies:** 19\ **Last updated:** [December 22, 2017, 12:58am UTC](https://discuss.elastic.co/t/the-shards-are-crowded-in-a-node/112335 "2017-12-22T00:58:31Z")
Hi :slight\_smile: We're using Elasticsearch for almost our products and we found a strange issue on our Elasticsearch cluster. The problem is that the shards are crowded in a node for a couple of indexes. Issue Image … --- ## [Kibana table sample size](https://discuss.elastic.co/t/kibana-table-sample-size/248449)
**Author:** [@AditiKhalatkar](https://discuss.elastic.co/u/AditiKhalatkar)\ **Replies:** 13\ **Last updated:** [September 14, 2020, 5:43pm UTC](https://discuss.elastic.co/t/kibana-table-sample-size/248449 "2020-09-14T17:43:05Z")
How much can be the maximum value for discover:sampleSize in Kibana/Advanced Settings? I have tried setting it to 10000 because of a few use cases (since my table crashes because of too many rows at times). Also, I saw a… --- ## [Getting Error in ElasticSearch](https://discuss.elastic.co/t/getting-error-in-elasticsearch/36494)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 9\ **Last updated:** [December 21, 2015, 8:59am UTC](https://discuss.elastic.co/t/getting-error-in-elasticsearch/36494 "2015-12-21T08:59:10Z")
Hi Guys, I am unable to run ElasticSearch. Getting error like this - Not able to open Kibana also. Kindly suggest me solution. --- ## [SIEM can't detect DNS activity to Internet](https://discuss.elastic.co/t/siem-cant-detect-dns-activity-to-internet/236552)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 20\ **Last updated:** [June 17, 2020, 6:44pm UTC](https://discuss.elastic.co/t/siem-cant-detect-dns-activity-to-internet/236552 "2020-06-17T18:44:44Z")
Dear, I have running an ELK server 7.7 with Elastic SIEM. I have enabled the related pre-built nmap and tcpdump signals detection rules and I could detect these type of "attacks". But now I have enabled the "DNS Activi… --- ## [Unable to cast org.elasticsearch.client.RestClient to org.elasticsearch.client.Client](https://discuss.elastic.co/t/unable-to-cast-org-elasticsearch-client-restclient-to-org-elasticsearch-client-client/244488)
**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\ **Replies:** 12\ **Last updated:** [August 13, 2020, 8:44pm UTC](https://discuss.elastic.co/t/unable-to-cast-org-elasticsearch-client-restclient-to-org-elasticsearch-client-client/244488 "2020-08-13T20:44:21Z")
Hi, In my code I am casting RestClient to Client. I don't see any runtime error but my application is not coming up due to the following error. Can someone help me org.apache.catalina.core.StandardContext.listenerStart … --- ## [Painless script fields: How to get date.start date.end for a http\_status=!200](https://discuss.elastic.co/t/painless-script-fields-how-to-get-date-start-date-end-for-a-http-status-200/106664)
**Author:** [@OucemaBellagha](https://discuss.elastic.co/u/OucemaBellagha)\ **Replies:** 9\ **Last updated:** [November 8, 2017, 8:47am UTC](https://discuss.elastic.co/t/painless-script-fields-how-to-get-date-start-date-end-for-a-http-status-200/106664 "2017-11-08T08:47:03Z")
I want to create a new field that counts the downtime of my website, so if http\_status is different then 200; I need a total variable containing the difference between \[@timestamp\]date.start and \[@timestamp\]date.end. S… --- ## [Elasticsearch Cluster Status Yellow](https://discuss.elastic.co/t/elasticsearch-cluster-status-yellow/26931)
**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\ **Replies:** 9\ **Last updated:** [August 12, 2015, 5:41pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-status-yellow/26931 "2015-08-12T17:41:28Z")
Hi, I have created a cluster with two nodes. Config on server1: cluster.name: app.elasticsearch.prod node.name: app.elasticsearch.prod.prod01 Config on server2: cluster.name: app.elasticsearch.prod node.name: … --- ## [Region Map does not show](https://discuss.elastic.co/t/region-map-does-not-show/124447)
**Author:** [@BicaLuv](https://discuss.elastic.co/u/BicaLuv)\ **Replies:** 11\ **Last updated:** [March 20, 2018, 7:23pm UTC](https://discuss.elastic.co/t/region-map-does-not-show/124447 "2018-03-20T19:23:23Z")
Hi! I'm playing with my own German region maps. I got a geojson file with the following format: {"type":"FeatureCollection","features":\[ {"type":"Feature","geometry":{"type":"Polygon","coordinates":\[\[\[...\]\]\]},"proper… --- ## [Problem with line chart](https://discuss.elastic.co/t/problem-with-line-chart/70278)
**Author:** [@gve](https://discuss.elastic.co/u/gve)\ **Replies:** 9\ **Last updated:** [January 3, 2017, 7:45am UTC](https://discuss.elastic.co/t/problem-with-line-chart/70278 "2017-01-03T07:45:04Z")
Hello, I've integrated in Kibana datas from an SQL query. I can create pie charts, metrics, data tables without any problem, but I can not create line charts. I'va declared in my index pattern the field "last modif… --- ## [Java API to disable source](https://discuss.elastic.co/t/java-api-to-disable-source/6660)
**Author:** [@thinusp](https://discuss.elastic.co/u/thinusp)\ **Replies:** 12\ **Last updated:** [July 25, 2012, 12:04am UTC](https://discuss.elastic.co/t/java-api-to-disable-source/6660 "2012-07-25T00:04:01Z")
I would like to disable saving the source with the indexes, but do it through the Java API. I believe the method to do it with JSON would be to use the "\_source" : {"enabled" : false} idea with the field, but I do no… --- ## [Failed to start elastic search after tls enabled](https://discuss.elastic.co/t/failed-to-start-elastic-search-after-tls-enabled/153490)
**Author:** [@rmadoori](https://discuss.elastic.co/u/rmadoori)\ **Replies:** 9\ **Last updated:** [October 24, 2018, 1:06am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search-after-tls-enabled/153490 "2018-10-24T01:06:47Z")
Hi, I am trying to enable tls between elasticsearch nodes. I have created the certs . I have added key.pem and chain.pem under my /elasticsearch/config. But elastic search doest start . ERROR: \`failed to initialize… --- ## [Just upgraded to kibana 6.8.1 and now kibana fails to launch with "kibana server is not ready yet"](https://discuss.elastic.co/t/just-upgraded-to-kibana-6-8-1-and-now-kibana-fails-to-launch-with-kibana-server-is-not-ready-yet/189208)
**Author:** [@Shawhin](https://discuss.elastic.co/u/Shawhin)\ **Replies:** 19\ **Last updated:** [July 6, 2019, 4:17pm UTC](https://discuss.elastic.co/t/just-upgraded-to-kibana-6-8-1-and-now-kibana-fails-to-launch-with-kibana-server-is-not-ready-yet/189208 "2019-07-06T16:17:57Z")
Hi elk friends, I just tried upgrading my kibana installation, and upgraded to logstash, kibana, elasticsearch version 6.8.1 now that I have upgraded, I am getting the page "kibana server is not ready yet" I am fairl… --- ## [Index Size: Elasticsearch 1.4 -\> 2.1](https://discuss.elastic.co/t/index-size-elasticsearch-1-4-2-1/36253)
**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\ **Replies:** 16\ **Last updated:** [December 14, 2015, 2:33pm UTC](https://discuss.elastic.co/t/index-size-elasticsearch-1-4-2-1/36253 "2015-12-14T14:33:52Z")
We currently switched from ES 1.4 to ES 2.1. After creation of our indices with ES 2.1 the size of them are more than twice bigger than with ES 1.4. Any hints about this effect or has anybody made the same observation? --- ## [Kibana 4 behind reverse proxy. Is it possible?](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409)
**Author:** [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)\ **Replies:** 10\ **Last updated:** [January 22, 2016, 8:03pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409 "2016-01-22T20:03:38Z")
We currently use Kibana 3 hosted in IIS behind IIS reverse proxy for auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to replace Kibana 3 soon. Kibana 4 is self hosted and works nicely when accessed direc… --- ## [Python3 query with large results, best approach](https://discuss.elastic.co/t/python3-query-with-large-results-best-approach/257402)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 10\ **Last updated:** [December 6, 2020, 7:01pm UTC](https://discuss.elastic.co/t/python3-query-with-large-results-best-approach/257402 "2020-12-06T19:01:45Z")
hi, i'm throwing a huge amount of log data into ES each month. i'm trying to create a python script to build a report at the end of the month. my first query i need to make is to query the index and get all the unique … --- ## [Failed to create valid geo\_shape](https://discuss.elastic.co/t/failed-to-create-valid-geo-shape/175975)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 10\ **Last updated:** [April 9, 2019, 12:17pm UTC](https://discuss.elastic.co/t/failed-to-create-valid-geo-shape/175975 "2019-04-09T12:17:59Z")
Appreciate if someone can shed some light on why ES complains about the seemingly valid geo\_shape I'm trying to create. The question has been asked on SO (Discuss whined about the length of the body) Thank you very … --- ## [We are not receiving the log from elasticsearch to kibana](https://discuss.elastic.co/t/we-are-not-receiving-the-log-from-elasticsearch-to-kibana/180864)
**Author:** [@saravananveera](https://discuss.elastic.co/u/saravananveera)\ **Replies:** 9\ **Last updated:** [May 14, 2019, 7:39pm UTC](https://discuss.elastic.co/t/we-are-not-receiving-the-log-from-elasticsearch-to-kibana/180864 "2019-05-14T19:39:13Z")
Hi We are not receiving the log from elasticsearch to kibana, also i have shared in below kibana and elasticsearch log. Can you please help to fix this issue. service versions: logstash-6.3.2 kafka\_2.12-2.2.0 zookeep… --- ## [Allocation awareness - something not right](https://discuss.elastic.co/t/allocation-awareness-something-not-right/184616)
**Author:** [@john275](https://discuss.elastic.co/u/john275)\ **Replies:** 25\ **Last updated:** [June 10, 2019, 10:28am UTC](https://discuss.elastic.co/t/allocation-awareness-something-not-right/184616 "2019-06-10T10:28:47Z")
I have an 11 node Cluster 3 Master nodes and 8 Data nodes: I have 4 physical machines with 2 Virtual VM's on each, the 2 physical machines are in two different rooms. Data nodes 1,3,5&7 are in room 1 Data nodes 2,4,6&8… --- ## [Logstash - XML Filter not working properly](https://discuss.elastic.co/t/logstash-xml-filter-not-working-properly/176758)
**Author:** [@miguelfreitas93](https://discuss.elastic.co/u/miguelfreitas93)\ **Replies:** 14\ **Last updated:** [April 14, 2019, 10:07pm UTC](https://discuss.elastic.co/t/logstash-xml-filter-not-working-properly/176758 "2019-04-14T22:07:47Z")
Hi, I'm trying to parse a very complex XML with nested arrays into logstash, but for some reason XML filter only parses right 2 objects, discarding many of them. Here below my configuration for Logstash: input { … --- ## [Background merge hit exception](https://discuss.elastic.co/t/background-merge-hit-exception/3477)
**Author:** [@Christian\_Pesch](https://discuss.elastic.co/u/Christian_Pesch)\ **Replies:** 9\ **Last updated:** [October 28, 2010, 12:44pm UTC](https://discuss.elastic.co/t/background-merge-hit-exception/3477 "2010-10-28T12:44:53Z")
Hi, I'm running ElasticSearch 0.11.0 with three machines and about 30G of disk usage. Yesterday, this dropped to 12G and I'm seeing errors: java.io.IOException: directory '/mnt/elasticsearch/work/warp/nodes/0/ in… --- ## [Logstash as a service in linux](https://discuss.elastic.co/t/logstash-as-a-service-in-linux/62126)
**Author:** [@elastic-fan](https://discuss.elastic.co/u/elastic-fan)\ **Replies:** 15\ **Last updated:** [October 4, 2016, 11:20am UTC](https://discuss.elastic.co/t/logstash-as-a-service-in-linux/62126 "2016-10-04T11:20:43Z")
Hello, Is it possible to run logstash as service in linux? i am finding it difficult, in windows its super easy and even can run multiple instances, but in linux i have no clue at all --- ## [Logstash erreur d'exécution](https://discuss.elastic.co/t/logstash-erreur-dexecution/126444)
**Author:** [@Ibti\_Ssem](https://discuss.elastic.co/u/Ibti_Ssem)\ **Replies:** 25\ **Last updated:** [April 3, 2018, 12:26pm UTC](https://discuss.elastic.co/t/logstash-erreur-dexecution/126444 "2018-04-03T12:26:39Z")
lorsque j'ai exucute logstash j'ai une erreur pourquoi ? sachant que ce la première fois ça fonctionnait bien !! \[image\] --- ## [Updating data in CSV logstash is pushing the entire CSV file again with updated data which duplicates my records in index. But I just want to sync the data](https://discuss.elastic.co/t/updating-data-in-csv-logstash-is-pushing-the-entire-csv-file-again-with-updated-data-which-duplicates-my-records-in-index-but-i-just-want-to-sync-the-data/175354)
**Author:** [@Sumit\_Kumar1](https://discuss.elastic.co/u/Sumit_Kumar1)\ **Replies:** 13\ **Last updated:** [April 11, 2019, 9:57am UTC](https://discuss.elastic.co/t/updating-data-in-csv-logstash-is-pushing-the-entire-csv-file-again-with-updated-data-which-duplicates-my-records-in-index-but-i-just-want-to-sync-the-data/175354 "2019-04-11T09:57:02Z")
input{ file { path =\> "/home/elastic/elk/logstash-6.4.3/csv\_data/attrition\_dump\_v3.csv" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } file { path =\> "/home/elastic/elk/logstash-6.4.3/csv\_data/workday\_dump… --- ## [Wrong/old version downloaded from 2.x repository?](https://discuss.elastic.co/t/wrong-old-version-downloaded-from-2-x-repository/52658)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 13\ **Last updated:** [July 26, 2016, 6:51am UTC](https://discuss.elastic.co/t/wrong-old-version-downloaded-from-2-x-repository/52658 "2016-07-26T06:51:06Z")
uname -a Linux NetFlowDeb3 3.16.0-4-686-pae #1 SMP Debian 3.16.7-ckt25-2 (2016-04-08) i686 GNU/Linux I added the repository as per this: wget -qO - https://packages.elastic.co/GPG-KEY-elasticsearch | sudo apt-key a… --- ## [Unable to create users and roles](https://discuss.elastic.co/t/unable-to-create-users-and-roles/181911)
**Author:** [@Dhrumil](https://discuss.elastic.co/u/Dhrumil)\ **Replies:** 11\ **Last updated:** [May 23, 2019, 6:23pm UTC](https://discuss.elastic.co/t/unable-to-create-users-and-roles/181911 "2019-05-23T18:23:54Z")
Hi here, I am trying to create users and roles in my elastic cluster. But, every time I run the REST API, I get this error { "error": { "root\_cause": \[ { "type": "security\_exception", "reason": "current license i… --- ## [How to delete index permanently Elastic Search](https://discuss.elastic.co/t/how-to-delete-index-permanently-elastic-search/22957)
**Author:** [@James\_Crone](https://discuss.elastic.co/u/James_Crone)\ **Replies:** 9\ **Last updated:** [March 28, 2015, 12:20pm UTC](https://discuss.elastic.co/t/how-to-delete-index-permanently-elastic-search/22957 "2015-03-28T12:20:31Z")
localhost:9200/\_river/my\_update\_river/\_meta{ "type" : "jdbc", "jdbc" : { "url" : "jdbc:mysql://localhost:3306/admin", "user" : "root", "password" : "", "poll" : "6s", "index" :… [Previous page](https://discuss.elastic.co/top.md?page=122&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=124&per_page=50&period=all)