# Top

**URL:** https://discuss.elastic.co/top.md?page=1242&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1243

---

## [Index filtering on more than a \* wildcard](https://discuss.elastic.co/t/index-filtering-on-more-than-a-wildcard/40802)

<div class="topic-metadata">

**Author:** [@pemontto](https://discuss.elastic.co/u/pemontto)\
**Replies:** 2\
**Last updated:** [February 19, 2016, 10:08pm UTC](https://discuss.elastic.co/t/index-filtering-on-more-than-a-wildcard/40802 "2016-02-19T22:08:49Z")

</div>

As the event times index patterns are now deprecated we've been trying to migrate across to replacing them with wildcards. At the moment this is not working well, we have a number of clusters used by a number of differen…

---

## [Index corruption on cluster restart](https://discuss.elastic.co/t/index-corruption-on-cluster-restart/14820)

<div class="topic-metadata">

**Author:** [@Stanislav\_Barton](https://discuss.elastic.co/u/Stanislav_Barton)\
**Replies:** 2\
**Last updated:** [December 12, 2013, 3:53pm UTC](https://discuss.elastic.co/t/index-corruption-on-cluster-restart/14820 "2013-12-12T15:53:12Z")

</div>

Hi, I have updated from ES 0.90.1 to 0.90.7 and everything runs fine until I restart the cluster. I have about 130 shards in 23 indices. I am running on Debian and Java 7, three nodes in the cluster. Most of the t…

---

## [Filebeat cannot parse a custom @timestamp string](https://discuss.elastic.co/t/filebeat-cannot-parse-a-custom-timestamp-string/252972)

<div class="topic-metadata">

**Author:** [@mattia\_galati](https://discuss.elastic.co/u/mattia_galati)\
**Replies:** 1\
**Last updated:** [October 23, 2020, 7:31am UTC](https://discuss.elastic.co/t/filebeat-cannot-parse-a-custom-timestamp-string/252972 "2020-10-23T07:31:03Z")

</div>

Hello everyone, I tryed to search in several topics but cannot manage to find a solution. I have a Python application that is writing logs and a Logstash process which is picking up that logs to send them to an Elastic…

---

## [Timezone in \_sql query](https://discuss.elastic.co/t/timezone-in-sql-query/220358)

<div class="topic-metadata">

**Author:** [@valerica\_georgescu](https://discuss.elastic.co/u/valerica_georgescu)\
**Replies:** 1\
**Last updated:** [February 22, 2020, 2:29am UTC](https://discuss.elastic.co/t/timezone-in-sql-query/220358 "2020-02-22T02:29:35Z")

</div>

Hi I use in my etl the \_sql function to select some data from elastic. One simple example: POST \_sql?format=txt { "query": "select max("@timestamp"),monitor.id, monitor.ip, monitor.status from "heartbeat" where "@time…

---

## [How to separate Date and time in HTTPDATE format in grok and assign in different fields](https://discuss.elastic.co/t/how-to-separate-date-and-time-in-httpdate-format-in-grok-and-assign-in-different-fields/169522)

<div class="topic-metadata">

**Author:** [@nitin.jangid](https://discuss.elastic.co/u/nitin.jangid)\
**Replies:** 1\
**Last updated:** [February 22, 2019, 1:46pm UTC](https://discuss.elastic.co/t/how-to-separate-date-and-time-in-httpdate-format-in-grok-and-assign-in-different-fields/169522 "2019-02-22T13:46:28Z")

</div>

Hi, This is my weblogic log 10.10.110.180 - - \[02/Jan/2018:12:36:37 +0530\] "GET /imatch/cavsar/css/cavsar.css HTTP/1.1" 404 14681 with grok filter. I am having field name DateAndTime that having value 02/Jan/2018:12…

---

## [Jdbc\_password configuration for logstash](https://discuss.elastic.co/t/jdbc-password-configuration-for-logstash/35178)

<div class="topic-metadata">

**Author:** [@learn2287](https://discuss.elastic.co/u/learn2287)\
**Replies:** 1\
**Last updated:** [November 21, 2015, 5:55am UTC](https://discuss.elastic.co/t/jdbc-password-configuration-for-logstash/35178 "2015-11-21T05:55:47Z")

</div>

Is there a way to mask/hide the jdbc\_password parameter. Config File: input { jdbc { jdbc\_driver\_library =\> "C:\\Program Files\\DbVisualizer\\jdbc\\oracle\\ojdbc6.jar" jdbc\_driver\_class =\> "Java::oracle.jdbc…

---

## [Handling of flagged PM](https://discuss.elastic.co/t/handling-of-flagged-pm/2575)

<div class="topic-metadata">

**Author:** [@costin](https://discuss.elastic.co/u/costin)\
**Replies:** 1\
**Last updated:** [June 17, 2015, 3:30pm UTC](https://discuss.elastic.co/t/handling-of-flagged-pm/2575 "2015-06-17T15:30:25Z")

</div>

The current behaviour of flagged private messages seems a bit counter-intuitive: all moderators seem to receive a notification about it but to some it was unclear why they received it. replying to flagged PM causes th…

---

## [Error in Re-Index Documentation](https://discuss.elastic.co/t/error-in-re-index-documentation/114668)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 1\
**Last updated:** [January 9, 2018, 9:34am UTC](https://discuss.elastic.co/t/error-in-re-index-documentation/114668 "2018-01-09T09:34:38Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/6.0/removal-of-types.html The script example here is apparently incorrect. ES does not accept the triple quotes. As far as I can see it should be single quotes wi…

---

## [Multiple tables as jdbc input in logstash pipeline](https://discuss.elastic.co/t/multiple-tables-as-jdbc-input-in-logstash-pipeline/336724)

<div class="topic-metadata">

**Author:** [@PodarcisMuralis](https://discuss.elastic.co/u/PodarcisMuralis)\
**Replies:** 4\
**Last updated:** [June 23, 2023, 1:58pm UTC](https://discuss.elastic.co/t/multiple-tables-as-jdbc-input-in-logstash-pipeline/336724 "2023-06-23T13:58:09Z")

</div>

I have 4 tables in oracle database and have a SQL query beginning with CTS (Common Table Expressions) which combines and creates a new single table. I want to create a pipeline using jdbc input and read date once in a …

---

## [How to remove ipv6 from host.ip](https://discuss.elastic.co/t/how-to-remove-ipv6-from-host-ip/284341)

<div class="topic-metadata">

**Author:** [@xizhimen](https://discuss.elastic.co/u/xizhimen)\
**Replies:** 4\
**Last updated:** [October 9, 2021, 6:40am UTC](https://discuss.elastic.co/t/how-to-remove-ipv6-from-host-ip/284341 "2021-10-09T06:40:59Z")

</div>

background: winlogbeat7.3.2 windows2016 winlogbeat.yml: processors: - add\_host\_metadata: netinfo.enabled: true requirement: in kibana: I want to remove this ipv6 info ,How? THANKS! I try to remove ipv…

---

## [Elasticsearch pricing](https://discuss.elastic.co/t/elasticsearch-pricing/266971)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 4\
**Last updated:** [March 11, 2021, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-pricing/266971 "2021-03-11T18:27:38Z")

</div>

Hello everyone, i was looking at elasticsearch pricing. I found this link: https://www.elastic.co/pricing/ which says the "Standard" version is $ 16 a month. But I don't understand why, with this configurator: http…

---

## [More compact JSON output for module Windows perfmon](https://discuss.elastic.co/t/more-compact-json-output-for-module-windows-perfmon/97242)

<div class="topic-metadata">

**Author:** [@githubmui\_mui](https://discuss.elastic.co/u/githubmui_mui)\
**Replies:** 4\
**Last updated:** [August 22, 2017, 2:54pm UTC](https://discuss.elastic.co/t/more-compact-json-output-for-module-windows-perfmon/97242 "2017-08-22T14:54:32Z")

</div>

Hi, is there a way to make the JSON output (e.g. via file output) less redunant? I am searching for a windows module configuration to write all performance counters e.g. of category “memory” into one single JSON record…

---

## [Plugin for bandwidth](https://discuss.elastic.co/t/plugin-for-bandwidth/42026)

<div class="topic-metadata">

**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Replies:** 4\
**Last updated:** [February 18, 2016, 5:01pm UTC](https://discuss.elastic.co/t/plugin-for-bandwidth/42026 "2016-02-18T17:01:12Z")

</div>

Hello, I searched but not found if theres a beat for sending information about bandwidth of a server. I found that collectd can take informaticon about traffic of an interface in octets, which i don't know what is actu…

---

## [Node client as load balancer node](https://discuss.elastic.co/t/node-client-as-load-balancer-node/37514)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 4\
**Last updated:** [December 21, 2015, 3:17pm UTC](https://discuss.elastic.co/t/node-client-as-load-balancer-node/37514 "2015-12-21T15:17:21Z")

</div>

Hi I'm building a micro service using the native Java Node Client. The client is set to data = false and http = false because I want my user to go through my micro service. The Elasticsearch data nodes HTTP is disabled. …

---

## [Frequently updated int field](https://discuss.elastic.co/t/frequently-updated-int-field/4562)

<div class="topic-metadata">

**Author:** [@Andy\_2](https://discuss.elastic.co/u/Andy_2)\
**Replies:** 4\
**Last updated:** [June 10, 2011, 12:30am UTC](https://discuss.elastic.co/t/frequently-updated-int-field/4562 "2011-06-10T00:30:38Z")

</div>

I have an integer field "popularity" that is frequently updated. The "popularity" of a document can either be increased or decreased. I use the value of that field to help rank my search results. A search engine mig…

---

## [Elastic 8.11.3 on docker in OSX silicon has disk volume sizing issues](https://discuss.elastic.co/t/elastic-8-11-3-on-docker-in-osx-silicon-has-disk-volume-sizing-issues/349522)

<div class="topic-metadata">

**Author:** [@matthal](https://discuss.elastic.co/u/matthal)\
**Replies:** 6\
**Last updated:** [December 18, 2023, 3:09am UTC](https://discuss.elastic.co/t/elastic-8-11-3-on-docker-in-osx-silicon-has-disk-volume-sizing-issues/349522 "2023-12-18T03:09:07Z")

</div>

Trying to run elasticsearch locally for development using docker compose (Getting started with the Elastic Stack and Docker-Compose | Elastic Blog) I end up getting disk pressure issues, well a warning, but it ends up …

---

## [Specify instrument modules instead of automatic detection](https://discuss.elastic.co/t/specify-instrument-modules-instead-of-automatic-detection/262559)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 6\
**Last updated:** [February 2, 2021, 8:55am UTC](https://discuss.elastic.co/t/specify-instrument-modules-instead-of-automatic-detection/262559 "2021-02-02T08:55:42Z")

</div>

Using nodeJS 12 / ES6. Some libraries are not detected because: import \* as IORedis from 'ioredis'; We had to change it to require("ioredis"); to have ioredis lib detected. I see there is something called "require-i…

---

## [Associating log lines with timestamp in log line](https://discuss.elastic.co/t/associating-log-lines-with-timestamp-in-log-line/144979)

<div class="topic-metadata">

**Author:** [@kraogv](https://discuss.elastic.co/u/kraogv)\
**Replies:** 6\
**Last updated:** [September 11, 2018, 5:07am UTC](https://discuss.elastic.co/t/associating-log-lines-with-timestamp-in-log-line/144979 "2018-09-11T05:07:19Z")

</div>

Hi, I am currently trying to associate lines after I encounter the time field in log lines to that time field. Sample log: 06-26-18 03:58:51 AM top - 03:58:51 up 84 days, 2:05, 0 users, load average: 0.01, 0.08, 0…

---

## [How to disable parsing of nested filelds](https://discuss.elastic.co/t/how-to-disable-parsing-of-nested-filelds/145227)

<div class="topic-metadata">

**Author:** [@jibsonline](https://discuss.elastic.co/u/jibsonline)\
**Replies:** 6\
**Last updated:** [August 21, 2018, 1:47pm UTC](https://discuss.elastic.co/t/how-to-disable-parsing-of-nested-filelds/145227 "2018-08-21T13:47:45Z")

</div>

Below is my logstash configuration input { beats { port =\> 5001 } kafka { bootstrap\_servers =\> "kafka-xxxxxxxxxxxxxxxx:9092" topics =\> \[ "java-prod", "java-pro…

---

## [Kibana Canvas is throwing unusual weird error](https://discuss.elastic.co/t/kibana-canvas-is-throwing-unusual-weird-error/137632)

<div class="topic-metadata">

**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\
**Replies:** 6\
**Last updated:** [July 9, 2018, 5:09pm UTC](https://discuss.elastic.co/t/kibana-canvas-is-throwing-unusual-weird-error/137632 "2018-07-09T17:09:39Z")

</div>

Hello Team, I'm facing following error when i trying to install canvas plugin into kibana \[image\] even i have installed all version correctly in machine. \[image\] Please provide me a appropriate solution regarding su…

---

## [Logstash RabbitMQ Wrap Incoming Message](https://discuss.elastic.co/t/logstash-rabbitmq-wrap-incoming-message/105925)

<div class="topic-metadata">

**Author:** [@Jeff\_Bursik](https://discuss.elastic.co/u/Jeff_Bursik)\
**Replies:** 6\
**Last updated:** [November 14, 2017, 3:34pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-wrap-incoming-message/105925 "2017-11-14T15:34:17Z")

</div>

I'm trying to wrap the incoming message off of Rabbit and then have some extra metadata outside of the wrapped message. Can this be done? Hoping for an end result like: errorMessage:{ ... }, trackingID:{ ... } header…

---

## [Elasticsearch service enabled, vendor disabled issue](https://discuss.elastic.co/t/elasticsearch-service-enabled-vendor-disabled-issue/279934)

<div class="topic-metadata">

**Author:** [@ritesh.aduri45](https://discuss.elastic.co/u/ritesh.aduri45)\
**Replies:** 3\
**Last updated:** [July 29, 2021, 6:58am UTC](https://discuss.elastic.co/t/elasticsearch-service-enabled-vendor-disabled-issue/279934 "2021-07-29T06:58:52Z")

</div>

\[root@hib-vm-siemlog elasticsearch\]# systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: fail…

---

## [How hard is it to add a custom module?](https://discuss.elastic.co/t/how-hard-is-it-to-add-a-custom-module/234046)

<div class="topic-metadata">

**Author:** [@Jonny\_McCullagh](https://discuss.elastic.co/u/Jonny_McCullagh)\
**Replies:** 3\
**Last updated:** [June 8, 2020, 6:12pm UTC](https://discuss.elastic.co/t/how-hard-is-it-to-add-a-custom-module/234046 "2020-06-08T18:12:54Z")

</div>

I've been battling with this for days, I can't believe it can be this hard to process a custom log format. My log lines mainly look like : \[2020-05-24 13:40:06,414\] {{jobs.py:1725}} WARNING - No viable dags retrieved f…

---

## [Module not found: Error: Can't resolve 'plugins/\*/hack'](https://discuss.elastic.co/t/module-not-found-error-cant-resolve-plugins-hack/218014)

<div class="topic-metadata">

**Author:** [@Marina\_Grechuhin](https://discuss.elastic.co/u/Marina_Grechuhin)\
**Replies:** 3\
**Last updated:** [February 6, 2020, 3:38pm UTC](https://discuss.elastic.co/t/module-not-found-error-cant-resolve-plugins-hack/218014 "2020-02-06T15:38:59Z")

</div>

I'm generating a plugin code using: node scripts/generate\_plugin marina-test with only hacks enabled. And I keep getting the following error: Module not found: Error: Can't resolve 'plugins/marina\_test/hack' in '/kib…

---

## [Invalid LinearRing provided for type polygon. Linear ring must be an array of coordinates](https://discuss.elastic.co/t/invalid-linearring-provided-for-type-polygon-linear-ring-must-be-an-array-of-coordinates/208428)

<div class="topic-metadata">

**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\
**Replies:** 3\
**Last updated:** [November 20, 2019, 10:39am UTC](https://discuss.elastic.co/t/invalid-linearring-provided-for-type-polygon-linear-ring-must-be-an-array-of-coordinates/208428 "2019-11-20T10:39:41Z")

</div>

version 6.7.2 { "properties": { "boundaries": { "type": "geo\_shape", "ignore\_malformed":true } } } but ignore\_malformed doesn't work. I can't get documents using this query(below). { "query":{ …

---

## [Dashboard text wrapping doesn't work - Visualize table works](https://discuss.elastic.co/t/dashboard-text-wrapping-doesnt-work-visualize-table-works/172941)

<div class="topic-metadata">

**Author:** [@Chris\_Sarkkinen](https://discuss.elastic.co/u/Chris_Sarkkinen)\
**Replies:** 3\
**Last updated:** [March 20, 2019, 8:34am UTC](https://discuss.elastic.co/t/dashboard-text-wrapping-doesnt-work-visualize-table-works/172941 "2019-03-20T08:34:17Z")

</div>

Hi, I have a problem with kibana 6.5.4 text wrapping. When I click on Visualize - xxx table, text wrapping works correctly and puts my string text as follows. March 4th 2019 Insert same table to dashboard - wrapping…

---

## [Resource limitation for each query](https://discuss.elastic.co/t/resource-limitation-for-each-query/109295)

<div class="topic-metadata">

**Author:** [@Edberg.s](https://discuss.elastic.co/u/Edberg.s)\
**Replies:** 3\
**Last updated:** [November 28, 2017, 7:31am UTC](https://discuss.elastic.co/t/resource-limitation-for-each-query/109295 "2017-11-28T07:31:34Z")

</div>

I think it is not an error but I need to solve it. Sometimes, huge query is carried-on over the elastic cluster like query with lots of 'or' and wide range of time (1 year or so...) At that time, this query takes most o…

---

## [ElasticSearch for +500gb Audit Trail](https://discuss.elastic.co/t/elasticsearch-for-500gb-audit-trail/98399)

<div class="topic-metadata">

**Author:** [@ncarlini](https://discuss.elastic.co/u/ncarlini)\
**Replies:** 3\
**Last updated:** [August 26, 2017, 9:26pm UTC](https://discuss.elastic.co/t/elasticsearch-for-500gb-audit-trail/98399 "2017-08-26T21:26:14Z")

</div>

We are designing new applications and we are thinking of solutions for audit trail. We need to store 10 years of user transactions (clicks, changes, text they write, etc.). On our current SQL DB this is about 400 gb of i…

---

## [Tracking input document raw size in bytes](https://discuss.elastic.co/t/tracking-input-document-raw-size-in-bytes/10433)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 3\
**Last updated:** [January 22, 2013, 6:54pm UTC](https://discuss.elastic.co/t/tracking-input-document-raw-size-in-bytes/10433 "2013-01-22T18:54:39Z")

</div>

Hi, What are my options if I want to keep track of the size (in bytes) of the original input documents? That is, the sum of sizes, in bytes, of all their fields? I see http://www.elasticsearch.org/guide/refere…

---

## [Python api client connection with proxy](https://discuss.elastic.co/t/python-api-client-connection-with-proxy/319232)

<div class="topic-metadata">

**Author:** [@lucas.queiroz](https://discuss.elastic.co/u/lucas.queiroz)\
**Replies:** 1\
**Last updated:** [November 17, 2022, 5:46pm UTC](https://discuss.elastic.co/t/python-api-client-connection-with-proxy/319232 "2022-11-17T17:46:17Z")

</div>

Hi use the following class to connect the client to Elastic Cloud running in Azure. The job runs in kubernetes updating my index with some data in a daily basis, and I need to setup the proxy from my organization in orde…

---

## [Unable to connect to database. The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption](https://discuss.elastic.co/t/unable-to-connect-to-database-the-driver-could-not-establish-a-secure-connection-to-sql-server-by-using-secure-sockets-layer-ssl-encryption/240562)

<div class="topic-metadata">

**Author:** [@Andrew\_Foxis](https://discuss.elastic.co/u/Andrew_Foxis)\
**Replies:** 1\
**Last updated:** [July 9, 2020, 4:41pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-database-the-driver-could-not-establish-a-secure-connection-to-sql-server-by-using-secure-sockets-layer-ssl-encryption/240562 "2020-07-09T16:41:34Z")

</div>

Hi all! I configure connect to database jdbc and get error( \[2020-07-09T19:07:06,569\]\[ERROR\]\[logstash.inputs.jdbc \] Unable to connect to database. Tried 1 times {:error\_message=\>"Java::ComMicrosoftSqlserverJdbc::SQ…

---

## [Access log, requested\_uri pattern matching](https://discuss.elastic.co/t/access-log-requested-uri-pattern-matching/117891)

<div class="topic-metadata">

**Author:** [@tonymurphy](https://discuss.elastic.co/u/tonymurphy)\
**Replies:** 1\
**Last updated:** [January 31, 2018, 9:47pm UTC](https://discuss.elastic.co/t/access-log-requested-uri-pattern-matching/117891 "2018-01-31T21:47:08Z")

</div>

Hi I'm trying to find all access log entries matching a specfic pattern - rest url. But I'm struggling Say for example I had the following regex \\/api\\/savedsearches\\/\[0-9a-z\]{24}\\/on The following uri path would mat…

---

## [Reindex fail](https://discuss.elastic.co/t/reindex-fail/86107)

<div class="topic-metadata">

**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\
**Replies:** 1\
**Last updated:** [May 17, 2017, 1:23pm UTC](https://discuss.elastic.co/t/reindex-fail/86107 "2017-05-17T13:23:00Z")

</div>

Hi, I'm reindexing from my old ES 1.7 to ES 5.4 Here is my reindex query: POST \_reindex { "source": { "remote": { "host": "http://myes:9200", }, "index": "test\_reindex", }, "dest": { "index": "test\_reindex" …

---

## [ElasticSearch config/install: +Logstash +Kibana](https://discuss.elastic.co/t/elasticsearch-config-install-logstash-kibana/2745)

<div class="topic-metadata">

**Author:** [@codingisfundamental](https://discuss.elastic.co/u/codingisfundamental)\
**Replies:** 7\
**Last updated:** [June 16, 2015, 2:02am UTC](https://discuss.elastic.co/t/elasticsearch-config-install-logstash-kibana/2745 "2015-06-16T02:02:37Z")

</div>

I am brand new to Elasticsearch, trying to use it with Logstash and Kibana. I have seemingly got everything installed and running but hit problems with what I believe are configuration errors. My end goal here is to ru…

---

## [Date Filter Doesn't Work](https://discuss.elastic.co/t/date-filter-doesnt-work/150689)

<div class="topic-metadata">

**Author:** [@stevetso](https://discuss.elastic.co/u/stevetso)\
**Replies:** 5\
**Last updated:** [October 5, 2018, 9:37am UTC](https://discuss.elastic.co/t/date-filter-doesnt-work/150689 "2018-10-05T09:37:52Z")

</div>

I have a message like this: 14/Jul/18 15:18:55 44.130.128.195 GET /url111 200 853 3 - - - Filter: filter { grok { match =\> { "message" =\> "%{MONTHDAY:day}/%{MONTH:month}/%{YEAR:year} %{TIME:time} %{IP:client\_ip} %{W…

---

## [Machine learning doesn't work but shows no error](https://discuss.elastic.co/t/machine-learning-doesnt-work-but-shows-no-error/132766)

<div class="topic-metadata">

**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\
**Replies:** 5\
**Last updated:** [May 24, 2018, 9:01am UTC](https://discuss.elastic.co/t/machine-learning-doesnt-work-but-shows-no-error/132766 "2018-05-24T09:01:39Z")

</div>

HI, we are having our elastic stack version 6.1.1. in production and now we are testing x-pack with machine learning. I have just run basic job - count of all data with bucket span 15m. I click on "create job" and run i…

---

## [Only Process Newly indexed documents](https://discuss.elastic.co/t/only-process-newly-indexed-documents/111785)

<div class="topic-metadata">

**Author:** [@sparklegoat](https://discuss.elastic.co/u/sparklegoat)\
**Replies:** 5\
**Last updated:** [December 14, 2017, 3:26pm UTC](https://discuss.elastic.co/t/only-process-newly-indexed-documents/111785 "2017-12-14T15:26:39Z")

</div>

Is there a way to get the date and time that an elastic search document was written? Looking to run over data hourly and not have to consume data I have already processed in prior runs. The negatives to the options I hav…

---

## [External libs in python scripts (lang-python module)](https://discuss.elastic.co/t/external-libs-in-python-scripts-lang-python-module/61802)

<div class="topic-metadata">

**Author:** [@barravi](https://discuss.elastic.co/u/barravi)\
**Replies:** 5\
**Last updated:** [October 5, 2016, 12:03pm UTC](https://discuss.elastic.co/t/external-libs-in-python-scripts-lang-python-module/61802 "2016-10-05T12:03:09Z")

</div>

Hello we are currently running an Elasticsearch cluster with a fairly complex enrichment pipeline. The enrichment at the moment runs as a separate Python process, that pulls data from ES\< processes it and puts it back. …

---

## [Transport vs Node client for large (billion +) bulk inserts?](https://discuss.elastic.co/t/transport-vs-node-client-for-large-billion-bulk-inserts/53023)

<div class="topic-metadata">

**Author:** [@datvikash](https://discuss.elastic.co/u/datvikash)\
**Replies:** 5\
**Last updated:** [June 16, 2016, 6:07pm UTC](https://discuss.elastic.co/t/transport-vs-node-client-for-large-billion-bulk-inserts/53023 "2016-06-16T18:07:22Z")

</div>

I am trying to determine which would be a better fit for a large bulk upload ( ~ 1 trillion items for a single index). I have tried with the http api, but its very slow and painful (it has taken a week and only inserted …

---

## [Elastic search scenarios](https://discuss.elastic.co/t/elastic-search-scenarios/3355)

<div class="topic-metadata">

**Author:** [@Meenakshi](https://discuss.elastic.co/u/Meenakshi)\
**Replies:** 5\
**Last updated:** [September 22, 2010, 9:44pm UTC](https://discuss.elastic.co/t/elastic-search-scenarios/3355 "2010-09-22T21:44:57Z")

</div>

Hi All, I am novice to Elastic search. We had installed ES with Jetty service for our own developing software and working on it. And we haven't get clear idea about creating scenarios for testing the Elastic search …

---

## [Packetbeat unable to monitor mysql traffic](https://discuss.elastic.co/t/packetbeat-unable-to-monitor-mysql-traffic/321690)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 0\
**Last updated:** [December 20, 2022, 8:40pm UTC](https://discuss.elastic.co/t/packetbeat-unable-to-monitor-mysql-traffic/321690 "2022-12-20T20:40:13Z")

</div>

I'm trying out packetbeat to monitor events for the mysql protocol. Packetbeat seems to be able to detect packets on destination.port: 3306 which is the default mysql port as shown in this screenshot here: But packet…

---

## [Unable to connect to Cloud Platform via Nest](https://discuss.elastic.co/t/unable-to-connect-to-cloud-platform-via-nest/224305)

<div class="topic-metadata">

**Author:** [@Justin\_Williams](https://discuss.elastic.co/u/Justin_Williams)\
**Replies:** 2\
**Last updated:** [March 23, 2020, 5:14pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-cloud-platform-via-nest/224305 "2020-03-23T17:14:30Z")

</div>

Here is my C# code: try { var credentials = new BasicAuthenticationCredentials(configuration\["Elastic:Username"\], configuration\["Elastic:Password"\]); var pool = new CloudConne…

---

## [Is everyone know how to apply the close\_timeout in filebeat modules](https://discuss.elastic.co/t/is-everyone-know-how-to-apply-the-close-timeout-in-filebeat-modules/179015)

<div class="topic-metadata">

**Author:** [@Mohan\_Selvam](https://discuss.elastic.co/u/Mohan_Selvam)\
**Replies:** 2\
**Last updated:** [April 30, 2019, 7:26am UTC](https://discuss.elastic.co/t/is-everyone-know-how-to-apply-the-close-timeout-in-filebeat-modules/179015 "2019-04-30T07:26:12Z")

</div>

i am having this one in filebeat.yml file , but its not working. can anyone please tell me how to achieve this one?

---

## [Metricbeat Autodiscover - error parsing URL: empty host](https://discuss.elastic.co/t/metricbeat-autodiscover-error-parsing-url-empty-host/147888)

<div class="topic-metadata">

**Author:** [@simioa](https://discuss.elastic.co/u/simioa)\
**Replies:** 2\
**Last updated:** [September 10, 2018, 11:57am UTC](https://discuss.elastic.co/t/metricbeat-autodiscover-error-parsing-url-empty-host/147888 "2018-09-10T11:57:18Z")

</div>

Metricbeat Version used: 6.4.0 Kubernetes Version: 1.10 Hi, I'm trying to get the Prometheus Collector working with Hints based autodiscovery in Kubernetes. Unfortunately I always get the following Error: ERROR \[au…

---

## [Multiline logs are not displaying in kibana](https://discuss.elastic.co/t/multiline-logs-are-not-displaying-in-kibana/119217)

<div class="topic-metadata">

**Author:** [@vaidehi9039](https://discuss.elastic.co/u/vaidehi9039)\
**Replies:** 2\
**Last updated:** [February 9, 2018, 7:24pm UTC](https://discuss.elastic.co/t/multiline-logs-are-not-displaying-in-kibana/119217 "2018-02-09T19:24:55Z")

</div>

Hi, I am using multiline option in filebeat, the issue is its creating new index with the same name for each hits. And also if i use @timestamp as "time filter field name" it will not show any logs, if i use "I dont wa…

---

## [Nested query with decay function score fails with scaled\_float type](https://discuss.elastic.co/t/nested-query-with-decay-function-score-fails-with-scaled-float-type/106506)

<div class="topic-metadata">

**Author:** [@1jon](https://discuss.elastic.co/u/1jon)\
**Replies:** 2\
**Last updated:** [November 6, 2017, 11:28am UTC](https://discuss.elastic.co/t/nested-query-with-decay-function-score-fails-with-scaled-float-type/106506 "2017-11-06T11:28:14Z")

</div>

Here is the guts of a nested function score query, which works: "query": { "function\_score": { "field\_value\_factor": { "field": "variants.x.laba", }, "query": { "bool": {…

---

## [Prefer one master node over another?](https://discuss.elastic.co/t/prefer-one-master-node-over-another/45049)

<div class="topic-metadata">

**Author:** [@marke72](https://discuss.elastic.co/u/marke72)\
**Replies:** 2\
**Last updated:** [March 22, 2016, 1:48pm UTC](https://discuss.elastic.co/t/prefer-one-master-node-over-another/45049 "2016-03-22T13:48:38Z")

</div>

I've decreased the size of my cluster to just 4 data nodes but I feel like 3 dedicated master nodes is just a bit much for how small the cluster is and only one would be fine. I would like to relieve the data nodes from …

---

## [Getting warnings about shards](https://discuss.elastic.co/t/getting-warnings-about-shards/29107)

<div class="topic-metadata">

**Author:** [@it2](https://discuss.elastic.co/u/it2)\
**Replies:** 2\
**Last updated:** [September 11, 2015, 9:16am UTC](https://discuss.elastic.co/t/getting-warnings-about-shards/29107 "2015-09-11T09:16:22Z")

</div>

Hi there. Can you help me to understand what these messages mean? i have some problem with shards \[2015-09-11 03:11:11,746\]\[WARN \]\[cluster.action.shard \] \[master\] \[logstash-2015.09.11\]\[0\] received shard failed fo…

---

## [Issue in elasticdump](https://discuss.elastic.co/t/issue-in-elasticdump/116211)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 0\
**Last updated:** [January 19, 2018, 10:27am UTC](https://discuss.elastic.co/t/issue-in-elasticdump/116211 "2018-01-19T10:27:19Z")

</div>

Hi all.... I am trying to Import and Export Visualizations and Dashboards with Elasticdump in kibana-6 elasticdump \\ --input=http://localhost:9200/.kibana \\ --headers='{"Content-Type": "application/json"}' \\ …

---

## [Must vs filter differences in time](https://discuss.elastic.co/t/must-vs-filter-differences-in-time/106306)

<div class="topic-metadata">

**Author:** [@oskarvdb](https://discuss.elastic.co/u/oskarvdb)\
**Replies:** 0\
**Last updated:** [November 3, 2017, 12:33pm UTC](https://discuss.elastic.co/t/must-vs-filter-differences-in-time/106306 "2017-11-03T12:33:38Z")

</div>

Hi Group, I have a question regarding the usage of 'must' vs 'filter' in a search query. I'm aware that 'must' also returns a score, but how much time does it take to calculate this? Can it delay requests by a significa…

[Previous page](https://discuss.elastic.co/top.md?page=1241&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1243&per_page=50&period=all)
