# Top **URL:** https://discuss.elastic.co/top.md?page=1239&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1240 --- ## [Logstashforwarder on Windows -No exectutable after building with go](https://discuss.elastic.co/t/logstashforwarder-on-windows-no-exectutable-after-building-with-go/27599)
**Author:** [@DavidL](https://discuss.elastic.co/u/DavidL)\ **Replies:** 2\ **Last updated:** [August 18, 2015, 5:21pm UTC](https://discuss.elastic.co/t/logstashforwarder-on-windows-no-exectutable-after-building-with-go/27599 "2015-08-18T17:21:14Z")
I downloaded the windows version of logstash forwarder, and downloaded "go" after running the command "go build -o logstash-forwarder", I was expecting a executable file but could not see one, I have seen seen people sa… --- ## [Java client initialization](https://discuss.elastic.co/t/java-client-initialization/17571)
**Author:** [@manish\_kumar](https://discuss.elastic.co/u/manish_kumar)\ **Replies:** 2\ **Last updated:** [May 17, 2014, 1:38pm UTC](https://discuss.elastic.co/t/java-client-initialization/17571 "2014-05-17T13:38:04Z")
I am new to Elastic search. I wanted to know that i am using java client to access ES. Client client = new TransportClient().addTransportAddress(new InetSocketTransportAddress("127.0.0.1", 9300)… --- ## [Logstash output elasticsearch - document\_id double document produced](https://discuss.elastic.co/t/logstash-output-elasticsearch-document-id-double-document-produced/83995)
**Author:** [@Nico-DF](https://discuss.elastic.co/u/Nico-DF)\ **Replies:** 1\ **Last updated:** [April 28, 2017, 12:42pm UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-document-id-double-document-produced/83995 "2017-04-28T12:42:43Z")
Hi, I have the following thing I'm trying to do: I a log file in .csv that contains info about a server (localisation, etc.) And along with this .csv, I got several folder (typically, 1/day) that contains a .txt file w… --- ## [Ruby: APM not sending any data](https://discuss.elastic.co/t/ruby-apm-not-sending-any-data/189028)
**Author:** [@rzlprnft](https://discuss.elastic.co/u/rzlprnft)\ **Replies:** 5\ **Last updated:** [July 6, 2019, 11:01am UTC](https://discuss.elastic.co/t/ruby-apm-not-sending-any-data/189028 "2019-07-06T11:01:45Z")
Hi everyone, we already integrated APM in 3 projects with a total of 6 environments, all Rails. However, we have another project (fairly old) in Sinatra with a lot of Sidekiq Workers that we like to monitor. I followe… --- ## [Ignore non-existent docs in mget](https://discuss.elastic.co/t/ignore-non-existent-docs-in-mget/12044)
**Author:** [@Allan\_Johns](https://discuss.elastic.co/u/Allan_Johns)\ **Replies:** 5\ **Last updated:** [May 29, 2013, 8:12am UTC](https://discuss.elastic.co/t/ignore-non-existent-docs-in-mget/12044 "2013-05-29T08:12:04Z")
Hi, ES noob here, bear with me. I need to filter out the results from an mget so that those with exists=false are not returned. How can I do this? The docs state: "All multi indices API support the ignore\_indices… --- ## [No data in suricata dashboard](https://discuss.elastic.co/t/no-data-in-suricata-dashboard/351373)
**Author:** [@e-ferrari](https://discuss.elastic.co/u/e-ferrari)\ **Replies:** 6\ **Last updated:** [January 23, 2024, 4:56pm UTC](https://discuss.elastic.co/t/no-data-in-suricata-dashboard/351373 "2024-01-23T16:56:11Z")
Hi, i'm pretty new to ELK and struggling a lot. I try to read my suricata log with filebeat and visualize it with kibana. But the dashboard is empty: 0 events and "No results found". Suricata is running and constant… --- ## [Can I compare Two SearchRequest Object](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487)
**Author:** [@good\_Royale](https://discuss.elastic.co/u/good_Royale)\ **Replies:** 6\ **Last updated:** [May 2, 2022, 9:37am UTC](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487 "2022-05-02T09:37:03Z")
I want to compare two SearchRequest, kind a like to see if both SearchRequest object's query are same or not. for Example: Reader queryJson = new StringReader( "{" + " \\"query\\": {" + … --- ## [KQL syntax for serial difference/delta filter](https://discuss.elastic.co/t/kql-syntax-for-serial-difference-delta-filter/266100)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 6\ **Last updated:** [March 5, 2021, 3:39pm UTC](https://discuss.elastic.co/t/kql-syntax-for-serial-difference-delta-filter/266100 "2021-03-05T15:39:55Z")
hi guys, my numeric data is coming aggregating , so i am using aggregation "sum of serial difference of values" to take delta...how do i put this delta in KQL filter in search box... example value1 : 20 value 2: 50 … --- ## [Data table visualization in Kibana](https://discuss.elastic.co/t/data-table-visualization-in-kibana/132028)
**Author:** [@vikas.joinme](https://discuss.elastic.co/u/vikas.joinme)\ **Replies:** 6\ **Last updated:** [May 17, 2018, 10:22am UTC](https://discuss.elastic.co/t/data-table-visualization-in-kibana/132028 "2018-05-17T10:22:08Z")
I want to display Top WebService Actions by Avg Time in data table . could you please tell me how to implement using data table visulaization Below is the sample data : i need four column ( web service action , count ,… --- ## [Elastic cloud - Cluster failing to restart - log4j JVM security issue](https://discuss.elastic.co/t/elastic-cloud-cluster-failing-to-restart-log4j-jvm-security-issue/292058)
**Author:** [@Ralph\_v](https://discuss.elastic.co/u/Ralph_v)\ **Replies:** 5\ **Last updated:** [December 16, 2021, 7:50pm UTC](https://discuss.elastic.co/t/elastic-cloud-cluster-failing-to-restart-log4j-jvm-security-issue/292058 "2021-12-16T19:50:06Z")
Hello there, Is anyone else experiencing problems restarting their older version \<7.2 elastic cloud cluster? I am following the recommendation for the Log4j vulnerability, which is for cloud users to restart their clus… --- ## [Clarification on end of maintenance of elastic search 8.x](https://discuss.elastic.co/t/clarification-on-end-of-maintenance-of-elastic-search-8-x/330129)
**Author:** [@mohammed\_rizwan](https://discuss.elastic.co/u/mohammed_rizwan)\ **Replies:** 1\ **Last updated:** [April 17, 2023, 12:55pm UTC](https://discuss.elastic.co/t/clarification-on-end-of-maintenance-of-elastic-search-8-x/330129 "2023-04-17T12:55:01Z")
Hi team, From the Elasticsearch link Elastic Product End of Life Dates | Elastic, the Elasticsearch (8.x) end of maintenance is mentioned as "The later of 2024-08-10 or 6 months after the release date of 9.0 (TBD)". Is… --- ## [Markdown codeblock syntax highlighting](https://discuss.elastic.co/t/markdown-codeblock-syntax-highlighting/279549)
**Author:** [@Sketchy](https://discuss.elastic.co/u/Sketchy)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 8:39pm UTC](https://discuss.elastic.co/t/markdown-codeblock-syntax-highlighting/279549 "2021-07-28T20:39:55Z")
Is there a way to show syntax highlighting on canvas markdown? Using three backticks then the code like in vscode or right here in this editor as I type this: "\`\`\`sql SELECT \* FROM users \`\`\`\` " Would highlight/bol… --- ## [S3 Repository plugin PKIX failed](https://discuss.elastic.co/t/s3-repository-plugin-pkix-failed/222183)
**Author:** [@ivanavi](https://discuss.elastic.co/u/ivanavi)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 10:59am UTC](https://discuss.elastic.co/t/s3-repository-plugin-pkix-failed/222183 "2020-03-05T10:59:36Z")
Hi all, I have 1 cluster (Ubuntu 18.04) with 3 ES 7.4.2 nodes with Offline install 7.4.2 S3 Repository plugin. I installed plugin than I did restart of every node. I added keys on every node and did restart bin/elast… --- ## [Sophos UTM syslog message parsing with Logstash](https://discuss.elastic.co/t/sophos-utm-syslog-message-parsing-with-logstash/185199)
**Author:** [@skills](https://discuss.elastic.co/u/skills)\ **Replies:** 1\ **Last updated:** [June 11, 2019, 2:21pm UTC](https://discuss.elastic.co/t/sophos-utm-syslog-message-parsing-with-logstash/185199 "2019-06-11T14:21:37Z")
Hi all, I am struggling to parse Sophos Firewall Syslog messages with logstash. Log format is as follows: Jun 11 14:23:57 10.11.223.44 2019:06:11-14:23:57 bewg-t2-ff2-2 ulogd\[23094\]: id="2001" severity="info" sys="Secu… --- ## [We couldn't activate monitoring in kibbana](https://discuss.elastic.co/t/we-couldnt-activate-monitoring-in-kibbana/166151)
**Author:** [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Replies:** 1\ **Last updated:** [January 29, 2019, 12:38pm UTC](https://discuss.elastic.co/t/we-couldnt-activate-monitoring-in-kibbana/166151 "2019-01-29T12:38:18Z")
I have increase size of my disk. after that i am seeing this and my files are not loading in elastisearch. error --- ## [How to define cloud id in logstash config file?](https://discuss.elastic.co/t/how-to-define-cloud-id-in-logstash-config-file/135584)
**Author:** [@fcukinyahoo](https://discuss.elastic.co/u/fcukinyahoo)\ **Replies:** 1\ **Last updated:** [June 12, 2018, 9:06pm UTC](https://discuss.elastic.co/t/how-to-define-cloud-id-in-logstash-config-file/135584 "2018-06-12T21:06:39Z")
What I am trying to accomplish is execute sql query against our mssql database, pass that data to ES stack in cloud. To my understanding I have to take following actions, install jdk on windows client where i ll be sen… --- ## [Kibana not creating index automatically](https://discuss.elastic.co/t/kibana-not-creating-index-automatically/101318)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 1\ **Last updated:** [September 21, 2017, 1:03pm UTC](https://discuss.elastic.co/t/kibana-not-creating-index-automatically/101318 "2017-09-21T13:03:00Z")
Hi i am using logstash to upload data , once data is upload i can see my index name in dev tool using this command - GET /\_cat/indices?v but i cant find that index in kiabana index list , there is anyway its creat… --- ## [Calculating the time remaining for re-indexing process](https://discuss.elastic.co/t/calculating-the-time-remaining-for-re-indexing-process/261702)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 2\ **Last updated:** [January 20, 2021, 8:44pm UTC](https://discuss.elastic.co/t/calculating-the-time-remaining-for-re-indexing-process/261702 "2021-01-20T20:44:29Z")
While curator is a fantastic tool, I wish it was showing the approximate time remaining for a re-indexing process. Right now, I calculate the approximate time using the following: Fire GET \_tasks?detailed=true&action… --- ## [Master Node election not working](https://discuss.elastic.co/t/master-node-election-not-working/245097)
**Author:** [@jijo.john](https://discuss.elastic.co/u/jijo.john)\ **Replies:** 2\ **Last updated:** [August 15, 2020, 7:19pm UTC](https://discuss.elastic.co/t/master-node-election-not-working/245097 "2020-08-15T19:19:15Z")
Hi Team, We are running a POC on elastic search. We have three nodes Node 1: node.master: true node.data: true node.ingest: true node.ml: false cluster.initial\_master\_nodes: \["ibs-dc-siem-1", "ibs-dc-siem-backup"\] … --- ## [Logstash how to solve the problem about jackson-databind CVE-2019-12384](https://discuss.elastic.co/t/logstash-how-to-solve-the-problem-about-jackson-databind-cve-2019-12384/194134)
**Author:** [@muyuqj](https://discuss.elastic.co/u/muyuqj)\ **Replies:** 2\ **Last updated:** [August 7, 2019, 10:33am UTC](https://discuss.elastic.co/t/logstash-how-to-solve-the-problem-about-jackson-databind-cve-2019-12384/194134 "2019-08-07T10:33:54Z")
logstash how to solve the problem about jackson-databind CVE-2019-12384 my path is: /usr/local/logstash/logstash-core/lib/jars/jackson-annotations-2.9.5.jar it is seem the jackson lib version is 2.9.5, This bug … --- ## [How to Analysis images using Elasticsearch](https://discuss.elastic.co/t/how-to-analysis-images-using-elasticsearch/117931)
**Author:** [@Hari\_Baskar](https://discuss.elastic.co/u/Hari_Baskar)\ **Replies:** 2\ **Last updated:** [February 2, 2018, 7:34am UTC](https://discuss.elastic.co/t/how-to-analysis-images-using-elasticsearch/117931 "2018-02-02T07:34:49Z")
Hi, How to compare the images and analyze the images using the Elasticsearch and Kibana? Eg. Employee's security login using the face recognition, We stored already some employee's images in the database, so, Now the l… --- ## [How to handle \_grokparsefailure with multiple inputs](https://discuss.elastic.co/t/how-to-handle--grokparsefailure-with-multiple-inputs/68260)
**Author:** [@hunterchris](https://discuss.elastic.co/u/hunterchris)\ **Replies:** 2\ **Last updated:** [December 7, 2016, 3:50pm UTC](https://discuss.elastic.co/t/how-to-handle--grokparsefailure-with-multiple-inputs/68260 "2016-12-07T15:50:46Z")
Hello, I have logstash with two inputs: beats and gelf. Logs that come from beats are syslog messages, logs from gelf are docker logs. I created a filter to match multiline logs from docker that works perfect, however I… --- ## [How log stash is recognizing file rotation and resetting byte offset in since db files of that file](https://discuss.elastic.co/t/how-log-stash-is-recognizing-file-rotation-and-resetting-byte-offset-in-since-db-files-of-that-file/35514)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 2\ **Last updated:** [November 25, 2015, 9:02am UTC](https://discuss.elastic.co/t/how-log-stash-is-recognizing-file-rotation-and-resetting-byte-offset-in-since-db-files-of-that-file/35514 "2015-11-25T09:02:13Z")
currently i have a data.log file from which log stash is reading data continuously, after some one lakh lines i am moving this data to data1.log and adding some 100 lines of data into new data.log file. How does log stas… --- ## [How to change default value size parameter of the terms aggregation?](https://discuss.elastic.co/t/how-to-change-default-value-size-parameter-of-the-terms-aggregation/304162)
**Author:** [@MNB\_1101](https://discuss.elastic.co/u/MNB_1101)\ **Replies:** 3\ **Last updated:** [May 8, 2022, 10:27pm UTC](https://discuss.elastic.co/t/how-to-change-default-value-size-parameter-of-the-terms-aggregation/304162 "2022-05-08T22:27:53Z")
By default, the terms aggregation returns the top ten terms with the most documents. How to change default value of the size parameter of terms aggregation? --- ## [Kibana Pie Charts with Unique Count](https://discuss.elastic.co/t/kibana-pie-charts-with-unique-count/265725)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 11:47pm UTC](https://discuss.elastic.co/t/kibana-pie-charts-with-unique-count/265725 "2021-03-02T23:47:34Z")
Here is my data set { ticket\_id: 1, status: Open, timestamp: 2019-02-10 } { ticket\_id: 2, status: Open, timestamp: 2019-02-10 } { ticket\_id: 1; status: Closed, timestamp: 2019-02-14 } { ticket\_id: 3; status: Open, ti… --- ## [Dynamic index name with template setup fails on using an existing ILM](https://discuss.elastic.co/t/dynamic-index-name-with-template-setup-fails-on-using-an-existing-ilm/243242)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 3\ **Last updated:** [July 31, 2020, 1:47pm UTC](https://discuss.elastic.co/t/dynamic-index-name-with-template-setup-fails-on-using-an-existing-ilm/243242 "2020-07-31T13:47:00Z")
Hi guys, I am currently trying to define a ILM that should be used for a specific template. However, I am failing unfortunately. The manifest looks like that: apiVersion: beat.k8s.elastic.co/v1beta1 kind: Beat metada… --- ## [Query Regarding Watcher on ES 6.7](https://discuss.elastic.co/t/query-regarding-watcher-on-es-6-7/176800)
**Author:** [@venusf1ytrap](https://discuss.elastic.co/u/venusf1ytrap)\ **Replies:** 3\ **Last updated:** [April 17, 2019, 9:15pm UTC](https://discuss.elastic.co/t/query-regarding-watcher-on-es-6-7/176800 "2019-04-17T21:15:48Z")
Hello All, I'm currently using ES 6.7 stack (Basic License) & i wanted to understand if i'd need a paid subscription of X-Pack to be able to use Watcher for alerting purposes ? Is watcher included as a part of Basic / O… --- ## [Extract log patterns](https://discuss.elastic.co/t/extract-log-patterns/169316)
**Author:** [@anandsunderraman](https://discuss.elastic.co/u/anandsunderraman)\ **Replies:** 3\ **Last updated:** [February 21, 2019, 10:48pm UTC](https://discuss.elastic.co/t/extract-log-patterns/169316 "2019-02-21T22:48:31Z")
I am a past life SUMO logic user. There are times when you want to analyze the log and extract / identify patterns rather than manually identifying them. I am looking for something similar to the SUMO logic log reduce … --- ## [Logstash output not working when using logstash-s3-plugin](https://discuss.elastic.co/t/logstash-output-not-working-when-using-logstash-s3-plugin/101404)
**Author:** [@dwdw](https://discuss.elastic.co/u/dwdw)\ **Replies:** 3\ **Last updated:** [September 22, 2017, 5:31pm UTC](https://discuss.elastic.co/t/logstash-output-not-working-when-using-logstash-s3-plugin/101404 "2017-09-22T17:31:05Z")
Configuration with input file from local file system writes to output file and output elasticsearch as expected. When using logtash-input-s3 input{s3{ etc }} the output to elasticsearch and file only write one of the fil… --- ## [Data format for graph](https://discuss.elastic.co/t/data-format-for-graph/58843)
**Author:** [@abasu](https://discuss.elastic.co/u/abasu)\ **Replies:** 3\ **Last updated:** [August 24, 2016, 5:04pm UTC](https://discuss.elastic.co/t/data-format-for-graph/58843 "2016-08-24T17:04:59Z")
Hi, new user here, so excuse the basic question. How do I setup data to appear in graph format? Is there an example dataset you provide for better understanding. For example, I am looking at the following dataset - htt… --- ## [Changing Logstash config file on the fly](https://discuss.elastic.co/t/changing-logstash-config-file-on-the-fly/36508)
**Author:** [@spireofdreams](https://discuss.elastic.co/u/spireofdreams)\ **Replies:** 3\ **Last updated:** [December 7, 2015, 10:16am UTC](https://discuss.elastic.co/t/changing-logstash-config-file-on-the-fly/36508 "2015-12-07T10:16:11Z")
Is it possible to update a logstash conf file without restarting the logstash instance in the latest 2.1 version? e.g. if I am reading from one kafka topic, and in the meantime another topic has pushed some data, I need … --- ## [Elasticsearch filter not working due to 1 sec refresh?](https://discuss.elastic.co/t/elasticsearch-filter-not-working-due-to-1-sec-refresh/1820)
**Author:** [@niksfirefly](https://discuss.elastic.co/u/niksfirefly)\ **Replies:** 3\ **Last updated:** [September 11, 2015, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-filter-not-working-due-to-1-sec-refresh/1820 "2015-09-11T10:43:28Z")
I am trying to use elasticsearch filter but with no success. I want to search logs to find past events and add fields to actual event. I think this is due to 1 sec refresh of indices so when past events are too close to … --- ## [ES running out of memory for bulk import](https://discuss.elastic.co/t/es-running-out-of-memory-for-bulk-import/12630)
**Author:** [@jerkywez](https://discuss.elastic.co/u/jerkywez)\ **Replies:** 3\ **Last updated:** [July 10, 2013, 6:05am UTC](https://discuss.elastic.co/t/es-running-out-of-memory-for-bulk-import/12630 "2013-07-10T06:05:31Z")
Hi, Im currently doing a large bulk import from mongodb into ES, the ES process keeps on dying after a while, im assuming its running out of memory. Ive got the following memory settings: -Xms=512m -Xmx=1500m … --- ## [Can not remove "tags" field?](https://discuss.elastic.co/t/can-not-remove-tags-field/67036)
**Author:** [@agrm](https://discuss.elastic.co/u/agrm)\ **Replies:** 0\ **Last updated:** [November 23, 2016, 9:54pm UTC](https://discuss.elastic.co/t/can-not-remove-tags-field/67036 "2016-11-23T21:54:01Z")
I have the following pipe configuration (See bellow). It removes all additional fields except "tags". I am using the latest elasticsearch and logstash software. What could be wrong that it does not remove "tage"? input … --- ## [Sort based on a Python List (array) and this list is not stored in the Elastic search](https://discuss.elastic.co/t/sort-based-on-a-python-list-array-and-this-list-is-not-stored-in-the-elastic-search/306528)
**Author:** [@Kv\_Karthik](https://discuss.elastic.co/u/Kv_Karthik)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/sort-based-on-a-python-list-array-and-this-list-is-not-stored-in-the-elastic-search/306528 "2022-06-16T14:32:52Z")
I would like to sort the hits in my results in a specific order and this order can be made available from a Python list or a python dictionary. I already tried using the script fields like mentioned in Medium website( M… --- ## [Logstash Configuration when removing specified type mapping](https://discuss.elastic.co/t/logstash-configuration-when-removing-specified-type-mapping/156148)
**Author:** [@Josh\_cullum](https://discuss.elastic.co/u/Josh_cullum)\ **Replies:** 4\ **Last updated:** [November 10, 2018, 5:42pm UTC](https://discuss.elastic.co/t/logstash-configuration-when-removing-specified-type-mapping/156148 "2018-11-10T17:42:11Z")
Hi, There is probably a simple fix to this. We've recently upgrade our elastic stack from 5.3 to 6.4, and we're having the mapping issues that many other people are having but we seem to be using it in a slightly differ… --- ## [Elasticsearch 6.4.1 - Configuring X-pack on CentOS7 x64 Issue](https://discuss.elastic.co/t/elasticsearch-6-4-1-configuring-x-pack-on-centos7-x64-issue/150397)
**Author:** [@mreloysanchez](https://discuss.elastic.co/u/mreloysanchez)\ **Replies:** 4\ **Last updated:** [October 2, 2018, 9:32pm UTC](https://discuss.elastic.co/t/elasticsearch-6-4-1-configuring-x-pack-on-centos7-x64-issue/150397 "2018-10-02T21:32:37Z")
Hello, I've installed Elasticsearch 6.4.1 and installed Kibana 6.4.1 Logstash 6.4.1, Packetbeat 6.4.1, and Filebeat 6.4.1 on our CentOS 7 x64 VMware VM. Reviewing the documentation on how to secure Elasticsearch here: h… --- ## [Chain input for customized alerts during throttled period](https://discuss.elastic.co/t/chain-input-for-customized-alerts-during-throttled-period/123135)
**Author:** [@lalitlouis](https://discuss.elastic.co/u/lalitlouis)\ **Replies:** 4\ **Last updated:** [March 28, 2018, 7:13pm UTC](https://discuss.elastic.co/t/chain-input-for-customized-alerts-during-throttled-period/123135 "2018-03-28T19:13:58Z")
Hi, I'm trying to do a filesystem disk threshold alert and based on the watcher history, am trying to see if the hostname has already been alerted and if yes, remove the hostname from the first bucket. Reason we're doin… --- ## [Querying Elasticsearch 2.3.0 Causes node to exit cluster](https://discuss.elastic.co/t/querying-elasticsearch-2-3-0-causes-node-to-exit-cluster/48841)
**Author:** [@AvantGardeDreams](https://discuss.elastic.co/u/AvantGardeDreams)\ **Replies:** 4\ **Last updated:** [May 16, 2016, 12:35pm UTC](https://discuss.elastic.co/t/querying-elasticsearch-2-3-0-causes-node-to-exit-cluster/48841 "2016-05-16T12:35:29Z")
I have a five node cluster recently upgraded from ES 1.7 to ES 2.3.0. Each node has 13 gig of memory dedicated to ES. I have observed that making a large search query will cause a node to exit the cluster. Error logs m… --- ## [Detect exact field that matched the text](https://discuss.elastic.co/t/detect-exact-field-that-matched-the-text/43525)
**Author:** [@diego.bernardes](https://discuss.elastic.co/u/diego.bernardes)\ **Replies:** 4\ **Last updated:** [March 4, 2016, 5:14pm UTC](https://discuss.elastic.co/t/detect-exact-field-that-matched-the-text/43525 "2016-03-04T17:14:46Z")
Given this document: { "id":123, "name":"amazing dress", "variations":\[ { "sku":456, "name":"amazing dress red", "price":12.42 }, { "sku":789, … --- ## [Snapshot HDFS files encrypted?](https://discuss.elastic.co/t/snapshot-hdfs-files-encrypted/41319)
**Author:** [@arani](https://discuss.elastic.co/u/arani)\ **Replies:** 4\ **Last updated:** [February 21, 2016, 6:27pm UTC](https://discuss.elastic.co/t/snapshot-hdfs-files-encrypted/41319 "2016-02-21T18:27:32Z")
Hi - Are the files created in HDFS as snapshot of a Elasticsearch index encrypted by default? Upon running the 'hadoop fs -text' command against one of the index snapshot I get only garbage printed on screen. It'd be gre… --- ## [Lucene version for each ES release](https://discuss.elastic.co/t/lucene-version-for-each-es-release/4126)
**Author:** [@Enrique\_Medina\_Monte](https://discuss.elastic.co/u/Enrique_Medina_Monte)\ **Replies:** 4\ **Last updated:** [March 18, 2011, 1:07pm UTC](https://discuss.elastic.co/t/lucene-version-for-each-es-release/4126 "2011-03-18T13:07:37Z")
Hi Shay, As I'm creating my own Spanish analyzer, I'd like to know where I can find information about which version of Lucene ships with which version of ES. For instance, I just built the latest master from Git t… --- ## [Flat table of data](https://discuss.elastic.co/t/flat-table-of-data/296177)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 8\ **Last updated:** [February 3, 2022, 1:01pm UTC](https://discuss.elastic.co/t/flat-table-of-data/296177 "2022-02-03T13:01:03Z")
Hi all, I'm using 7.16.2 version. I have data in elastic which is representing result of tests, one json for example: My question is, how can I create new table in kibana with flat result, not top values. I want to s… --- ## [Python elasticsearch client "Validation Failed: 1: scrollId is missing;"](https://discuss.elastic.co/t/python-elasticsearch-client-validation-failed-1-scrollid-is-missing/136155)
**Author:** [@niceyeti](https://discuss.elastic.co/u/niceyeti)\ **Replies:** 0\ **Last updated:** [June 16, 2018, 12:09am UTC](https://discuss.elastic.co/t/python-elasticsearch-client-validation-failed-1-scrollid-is-missing/136155 "2018-06-16T00:09:22Z")
I'm using elasticsearch 5.6.4 and py-elasticsearch client (5,5,2) but the client methods are failing to scroll large result sets (~20k documents). When scan()+scroll() are called, or likewise helpers.scan(), the first re… --- ## [Search across different indices with consistent ranking](https://discuss.elastic.co/t/search-across-different-indices-with-consistent-ranking/311916)
**Author:** [@stelitz](https://discuss.elastic.co/u/stelitz)\ **Replies:** 5\ **Last updated:** [August 19, 2022, 8:21pm UTC](https://discuss.elastic.co/t/search-across-different-indices-with-consistent-ranking/311916 "2022-08-19T20:21:32Z")
Hi everyone, I just got started with Elasticsearch and it's really awesome! I am, however, struggling with implementing one specific use case. Let's say I have different logical entities like books and authors and I wan… --- ## [Elasticsearch service is crashing while indexing](https://discuss.elastic.co/t/elasticsearch-service-is-crashing-while-indexing/232472)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 5\ **Last updated:** [May 14, 2020, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-service-is-crashing-while-indexing/232472 "2020-05-14T10:23:15Z")
Hi, I am running Elasticsearch on CentOS, and to indexing the 5GB files automatically using fsCrawler commands in a python script.When I am running that script, elastic search is crashing. below is the status using sys… --- ## [Can I access the \_score for events from an elasticsearch input in logstash?](https://discuss.elastic.co/t/can-i-access-the-score-for-events-from-an-elasticsearch-input-in-logstash/102873)
**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\ **Replies:** 5\ **Last updated:** [October 12, 2017, 9:16pm UTC](https://discuss.elastic.co/t/can-i-access-the-score-for-events-from-an-elasticsearch-input-in-logstash/102873 "2017-10-12T21:16:02Z")
logstash is pulling data out of elasticsearch using the following query query =\> '{ "\_source": false, "query": { "function\_score": { "query": { "query\_string": { "query": "\*" } }, "random\_score": {}… --- ## [Is there a converter from a search in kibana to query language?](https://discuss.elastic.co/t/is-there-a-converter-from-a-search-in-kibana-to-query-language/282954)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 10:15pm UTC](https://discuss.elastic.co/t/is-there-a-converter-from-a-search-in-kibana-to-query-language/282954 "2021-08-31T22:15:52Z")
I would like to know if there is any program or some type of converter from a search to a query language in kibana --- ## [Indices don't have primary shards while taking snapshot](https://discuss.elastic.co/t/indices-dont-have-primary-shards-while-taking-snapshot/267619)
**Author:** [@Venkatesh\_Kumar](https://discuss.elastic.co/u/Venkatesh_Kumar)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 1:44am UTC](https://discuss.elastic.co/t/indices-dont-have-primary-shards-while-taking-snapshot/267619 "2021-03-22T01:44:22Z")
Hi , I am trying to take snapshot using curl -X PUT "http://localhost:9200/\_snapshot/repo1/snap1?wait\_for\_completion=true&pretty" -H 'Content-Type: application/json' -d" { \\"indices\\": \[ \\"apm-7.10.1-transaction-00… --- ## [Kibana scripted fields for percentage calculation](https://discuss.elastic.co/t/kibana-scripted-fields-for-percentage-calculation/75031)
**Author:** [@Del1](https://discuss.elastic.co/u/Del1)\ **Replies:** 1\ **Last updated:** [February 14, 2017, 9:15pm UTC](https://discuss.elastic.co/t/kibana-scripted-fields-for-percentage-calculation/75031 "2017-02-14T21:15:48Z")
Is it possible to calculate % value using Kibana? I wanted to create a line chart with week wise percentage for a particular field [Previous page](https://discuss.elastic.co/top.md?page=1238&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1240&per_page=50&period=all)