# Top **URL:** https://discuss.elastic.co/top.md?page=1252&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1253 --- ## [What does suggestMode missing mean?](https://discuss.elastic.co/t/what-does-suggestmode-missing-mean/165970)
**Author:** [@Martin\_Kruger](https://discuss.elastic.co/u/Martin_Kruger)\ **Replies:** 1\ **Last updated:** [January 29, 2019, 1:44pm UTC](https://discuss.elastic.co/t/what-does-suggestmode-missing-mean/165970 "2019-01-29T13:44:49Z")
Hi, what does the suggestMode missing for the TermSuggester mean? I get no clue from the documentation. Greetings, Martin --- ## [Logstash is not converting a syslog date to date](https://discuss.elastic.co/t/logstash-is-not-converting-a-syslog-date-to-date/107985)
**Author:** [@ajstark123](https://discuss.elastic.co/u/ajstark123)\ **Replies:** 4\ **Last updated:** [November 16, 2017, 8:58pm UTC](https://discuss.elastic.co/t/logstash-is-not-converting-a-syslog-date-to-date/107985 "2017-11-16T20:58:56Z")
We are using the following: %{SYSLOGTIMESTAMP:syslog\_time} to extract the syslog date from the logs. The format of this field is Nov 16 11:43:38 in the logs. we are trying to convert syslogtime from a string to a da… --- ## [Issue while using Elastic Search (ESTap) for processing data](https://discuss.elastic.co/t/issue-while-using-elastic-search-estap-for-processing-data/92791)
**Author:** [@Kunal\_Ghosh](https://discuss.elastic.co/u/Kunal_Ghosh)\ **Replies:** 4\ **Last updated:** [July 17, 2017, 2:32am UTC](https://discuss.elastic.co/t/issue-while-using-elastic-search-estap-for-processing-data/92791 "2017-07-17T02:32:04Z")
Hi, I am new to the Elastic Search and I am stuck with an issue. I am developing an application with cascading api. I am processing 10 million rows of data with 43 columns. Now my issue is when i am dumping data to sink … --- ## [Count when element has field "tcode"](https://discuss.elastic.co/t/count-when-element-has-field-tcode/80119)
**Author:** [@bertvervaele](https://discuss.elastic.co/u/bertvervaele)\ **Replies:** 4\ **Last updated:** [March 27, 2017, 12:32pm UTC](https://discuss.elastic.co/t/count-when-element-has-field-tcode/80119 "2017-03-27T12:32:13Z")
I would like a graph that only counts the elements that have the field "tcode". I think I have to use JSON for it but I'm not sure maybe there is an easier way. This is the JSON code I tried but it doesn't work (it stil… --- ## [Terms aggregations on hashcodes (Murmur3FieldMapper)](https://discuss.elastic.co/t/terms-aggregations-on-hashcodes-murmur3fieldmapper/56330)
**Author:** [@photonic\_world\_2](https://discuss.elastic.co/u/photonic_world_2)\ **Replies:** 4\ **Last updated:** [July 26, 2016, 12:32am UTC](https://discuss.elastic.co/t/terms-aggregations-on-hashcodes-murmur3fieldmapper/56330 "2016-07-26T00:32:48Z")
Hello, I have an index (4 shards and 1 replica each) which has high ingestion rate (5k per s) distributed among 5 data nodes. The problem I see is that when a terms aggregation is run on this index, the response t… --- ## [Cumulative sum of metrics of all entries passing query in Line Chart](https://discuss.elastic.co/t/cumulative-sum-of-metrics-of-all-entries-passing-query-in-line-chart/55240)
**Author:** [@vtslac](https://discuss.elastic.co/u/vtslac)\ **Replies:** 4\ **Last updated:** [July 19, 2016, 10:17pm UTC](https://discuss.elastic.co/t/cumulative-sum-of-metrics-of-all-entries-passing-query-in-line-chart/55240 "2016-07-19T22:17:53Z")
Hi all, I have a line chart in the format I already want that displays sum of metric for Disk I/O on 25 machines on our cluster that looks like this: The query that generates this graph is of the form: plugin:disk AN… --- ## [Import table with compound key](https://discuss.elastic.co/t/import-table-with-compound-key/32979)
**Author:** [@lore6673](https://discuss.elastic.co/u/lore6673)\ **Replies:** 4\ **Last updated:** [October 27, 2015, 9:42am UTC](https://discuss.elastic.co/t/import-table-with-compound-key/32979 "2015-10-27T09:42:32Z")
Hi there I need to import a table from Oracle using logstash and jdbc input with a compound primary key, Product\_id and Language\_id. This is my conf file input { jdbc { jdbc\_connection\_string =\> "jdbc:… --- ## [Getiing this error 403 forbidden erro in "logstash-plain.log](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796)
**Author:** [@rama543](https://discuss.elastic.co/u/rama543)\ **Replies:** 1\ **Last updated:** [July 19, 2020, 6:04pm UTC](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796 "2020-07-19T18:04:09Z")
Getting below Error message in logstash-plain. log I am using AWS managed ElasticSearch ,Kibana . Logstash i have installed in amazon ec2 instance . Please help to get resolve the issue Attempted to resurrect connect… --- ## [Unicast\_hosts.txt entries are not getting loaded](https://discuss.elastic.co/t/unicast-hosts-txt-entries-are-not-getting-loaded/168846)
**Author:** [@Rosmi](https://discuss.elastic.co/u/Rosmi)\ **Replies:** 7\ **Last updated:** [February 19, 2019, 8:59am UTC](https://discuss.elastic.co/t/unicast-hosts-txt-entries-are-not-getting-loaded/168846 "2019-02-19T08:59:07Z")
I have a node running in the cluster. Now starting the second node, My application creates unicast\_hosts.txt in conf folder with ipaddress and port entry of the first node. The second node is not reloading the new confi… --- ## [How to take backup in elasticsearch 0.90?](https://discuss.elastic.co/t/how-to-take-backup-in-elasticsearch-0-90/116613)
**Author:** [@Chintan\_Joshi](https://discuss.elastic.co/u/Chintan_Joshi)\ **Replies:** 7\ **Last updated:** [January 23, 2018, 11:46am UTC](https://discuss.elastic.co/t/how-to-take-backup-in-elasticsearch-0-90/116613 "2018-01-23T11:46:18Z")
Hello all, I am new to elasticsearch and I don't know how many indices/index is there on my existing server, I have to move elasticsearch along with whole data from one server to another with same version (0.90.13), now … --- ## [ElasticSearch 2.3.0 Performance](https://discuss.elastic.co/t/elasticsearch-2-3-0-performance/72970)
**Author:** [@Mahiz10](https://discuss.elastic.co/u/Mahiz10)\ **Replies:** 7\ **Last updated:** [February 1, 2017, 6:47pm UTC](https://discuss.elastic.co/t/elasticsearch-2-3-0-performance/72970 "2017-02-01T18:47:14Z")
I am using elastic search 2.3.0 hosted on AWS Cloud. I have recently made code changes for using the bulk indexing option provided by elastic. When i have tested this change on my PERF env , i was happy with the perf… --- ## [Timelion baseline with min() and static()?](https://discuss.elastic.co/t/timelion-baseline-with-min-and-static/44786)
**Author:** [@Rafael\_Koike](https://discuss.elastic.co/u/Rafael_Koike)\ **Replies:** 1\ **Last updated:** [March 24, 2016, 9:58pm UTC](https://discuss.elastic.co/t/timelion-baseline-with-min-and-static/44786 "2016-03-24T21:58:14Z")
Is there a way to create a timeseries where i get the minimum value and set him as static? I would like to trace a baseline (straight line with the minimum value found in the timeframe) Using the static() only accept a n… --- ## [Hide fields with underscore](https://discuss.elastic.co/t/hide-fields-with-underscore/40908)
**Author:** [@enp](https://discuss.elastic.co/u/enp)\ **Replies:** 1\ **Last updated:** [February 4, 2016, 6:23am UTC](https://discuss.elastic.co/t/hide-fields-with-underscore/40908 "2016-02-04T06:23:09Z")
Hi, Is it possible to hide fields with underscore (such as \_index or \_type) from discover (from documents list default view, from document detail view and from filter panel)? --- ## [Unable to connect to AWS Elastic-Search Instance through AWS Spark EMR](https://discuss.elastic.co/t/unable-to-connect-to-aws-elastic-search-instance-through-aws-spark-emr/240483)
**Author:** [@dillibabu.mekala](https://discuss.elastic.co/u/dillibabu.mekala)\ **Replies:** 3\ **Last updated:** [July 10, 2020, 12:00pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-aws-elastic-search-instance-through-aws-spark-emr/240483 "2020-07-10T12:00:01Z")
Hi Team, We have requirement where, we need to load the parquet file from S3 bucket and ingest this data in to the AWS Elastic-Search using Spark (Scala) Job. To Achieve this i have tried in my local system by installi… --- ## [Docker kibana plugin installation with external dependencies error](https://discuss.elastic.co/t/docker-kibana-plugin-installation-with-external-dependencies-error/200451)
**Author:** [@Artem\_Kuznetsov](https://discuss.elastic.co/u/Artem_Kuznetsov)\ **Replies:** 3\ **Last updated:** [September 24, 2019, 9:18pm UTC](https://discuss.elastic.co/t/docker-kibana-plugin-installation-with-external-dependencies-error/200451 "2019-09-24T21:18:59Z")
Hey! I try to install our plugin with external dependencies(https://www.ag-grid.com/) using Kibana docker image. I tried 7.3.0 and 7.3.1 On local machine I could install the plugin by coping it builded code to the plug… --- ## [RUM: Multiple active transactions](https://discuss.elastic.co/t/rum-multiple-active-transactions/190254)
**Author:** [@Daniel\_Mariano](https://discuss.elastic.co/u/Daniel_Mariano)\ **Replies:** 3\ **Last updated:** [July 18, 2019, 10:06am UTC](https://discuss.elastic.co/t/rum-multiple-active-transactions/190254 "2019-07-18T10:06:03Z")
Hello, We are using RUM service for monitoring request on our site, so we are creating a custom transaction for each call that we are doing to an external API. We have the following scenario: Custom transaction #1 : st… --- ## [Filebeat in endless loop](https://discuss.elastic.co/t/filebeat-in-endless-loop/142445)
**Author:** [@Ray\_Kim](https://discuss.elastic.co/u/Ray_Kim)\ **Replies:** 3\ **Last updated:** [August 2, 2018, 1:10am UTC](https://discuss.elastic.co/t/filebeat-in-endless-loop/142445 "2018-08-02T01:10:19Z")
I have filebeat reading s3 logs but it sometimes get stuck in an endless loop and sometimes it just hangs and (rarely) goes as expected. filebeat.prospectors: - type: log enabled: true paths: - /home/linux/logs/… --- ## [Metricbeat setup failed](https://discuss.elastic.co/t/metricbeat-setup-failed/112142)
**Author:** [@Rezaa](https://discuss.elastic.co/u/Rezaa)\ **Replies:** 3\ **Last updated:** [December 19, 2017, 5:23am UTC](https://discuss.elastic.co/t/metricbeat-setup-failed/112142 "2017-12-19T05:23:49Z")
Hi I have installed elastic search and metricbeat 6.0 installed. But when I try to run setup i get following error want to connect to port 443. there is no program listening on port 443, and I have no such a port in my… --- ## [Any type of guide or book?](https://discuss.elastic.co/t/any-type-of-guide-or-book/34535)
**Author:** [@Don\_Pich](https://discuss.elastic.co/u/Don_Pich)\ **Replies:** 3\ **Last updated:** [November 30, 2015, 5:33am UTC](https://discuss.elastic.co/t/any-type-of-guide-or-book/34535 "2015-11-30T05:33:37Z")
I am trying to find out if there is any type of manual or book on all of the options available with Watcher? I want to learn more about it, but there is a lack of information other than a couple of the things on the ela… --- ## [Degradation performance bulk insert](https://discuss.elastic.co/t/degradation-performance-bulk-insert/2614)
**Author:** [@swood](https://discuss.elastic.co/u/swood)\ **Replies:** 3\ **Last updated:** [June 29, 2015, 9:49pm UTC](https://discuss.elastic.co/t/degradation-performance-bulk-insert/2614 "2015-06-29T21:49:08Z")
Hello. I use ElasticSearch for collection applications log. But it's huge logs. I have 17 physical servers and 8 node on each servers. Each servers has 4 disks. My config looks like this: discovery.zen.minimum\_maste… --- ## [How to extract the value of complex fields in script field specific search using the java api](https://discuss.elastic.co/t/how-to-extract-the-value-of-complex-fields-in-script-field-specific-search-using-the-java-api/3523)
**Author:** [@Diptamay](https://discuss.elastic.co/u/Diptamay)\ **Replies:** 3\ **Last updated:** [November 4, 2010, 11:07pm UTC](https://discuss.elastic.co/t/how-to-extract-the-value-of-complex-fields-in-script-field-specific-search-using-the-java-api/3523 "2010-11-04T23:07:25Z")
Hi I have sample documents like this at https://gist.github.com/663112, and I am running a setting up specific fields to fetch using script field like this for e.g. (through the java api) { "query" :{ "bool" … --- ## [Kibanaで、ログの記載日時で、表示を絞りたい。](https://discuss.elastic.co/t/kibana/207484)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 2\ **Last updated:** [November 13, 2019, 5:06am UTC](https://discuss.elastic.co/t/kibana/207484 "2019-11-13T05:06:28Z")
Kibanaで、Apacheログを集計するため、アクセスログの記載日時で、表示を絞りたいです。 Timeの日時で表示を絞ることは出来ますが、しかし、Timeの記載日時は、Elasticsearchへの格納時間のため、 Messge内の日時にずれがあり、ログ記載の日時で、表示を絞れず困っています。 ①アクセスログの記載日時で、表示を絞ることは可能でしょうか? ②Kibanaのログ表示のTimeに、収集したログの記載の日時を表示は可… --- ## [Logstash + OpenShift - issues with jdbc plugin when running as a non root user](https://discuss.elastic.co/t/logstash-openshift-issues-with-jdbc-plugin-when-running-as-a-non-root-user/144587)
**Author:** [@Constantine\_Abayeu](https://discuss.elastic.co/u/Constantine_Abayeu)\ **Replies:** 2\ **Last updated:** [August 15, 2018, 9:43pm UTC](https://discuss.elastic.co/t/logstash-openshift-issues-with-jdbc-plugin-when-running-as-a-non-root-user/144587 "2018-08-15T21:43:14Z")
Hi, I am having some issues with figuring out what is happening here. I am working on pushing some MS SQL data into elastic. here is my jdbc configuration in logstash. input { jdbc { jdbc\_connection\_string… --- ## [6.2.2 cannot run job: datafeed \[XXX\] cannot retrieve field \[@timestamp\] because it has no mappings](https://discuss.elastic.co/t/6-2-2-cannot-run-job-datafeed-xxx-cannot-retrieve-field-timestamp-because-it-has-no-mappings/141475)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 2\ **Last updated:** [July 25, 2018, 3:50pm UTC](https://discuss.elastic.co/t/6-2-2-cannot-run-job-datafeed-xxx-cannot-retrieve-field-timestamp-because-it-has-no-mappings/141475 "2018-07-25T15:50:20Z")
I found out that I could not start the job because of this message: cannot run job: datafeed \[XXX\] cannot retrieve field \[@timestamp\] because it has no mappings can you explain why? Regards, Here is my job: { "job\_… --- ## [Filebeat & Logstash SSL issue | ERR Connecting error publishing events (retrying): remote error: tls: internal error](https://discuss.elastic.co/t/filebeat-logstash-ssl-issue-err-connecting-error-publishing-events-retrying-remote-error-tls-internal-error/102229)
**Author:** [@franco.wolf](https://discuss.elastic.co/u/franco.wolf)\ **Replies:** 2\ **Last updated:** [October 4, 2017, 6:56am UTC](https://discuss.elastic.co/t/filebeat-logstash-ssl-issue-err-connecting-error-publishing-events-retrying-remote-error-tls-internal-error/102229 "2017-10-04T06:56:58Z")
Hi all, I enabled SSL for filebeat and logstash and after that I recieve: ERR Connecting error publishing events (retrying): remote error: tls: internal error Some informations about the environment: filebeat version… --- ## [/lib/systemd/system/filebeat.service in rpm package](https://discuss.elastic.co/t/lib-systemd-system-filebeat-service-in-rpm-package/100184)
**Author:** [@caibaoying](https://discuss.elastic.co/u/caibaoying)\ **Replies:** 2\ **Last updated:** [September 13, 2017, 1:15am UTC](https://discuss.elastic.co/t/lib-systemd-system-filebeat-service-in-rpm-package/100184 "2017-09-13T01:15:57Z")
\*.service should be placed to /usr/lib or /etc/sysemd/system; so why filebeat.service is placed to /lib/systemd/system/? when filebeat runing, filebeat.service， whether it works or not and why? --- ## [Debugging scripts](https://discuss.elastic.co/t/debugging-scripts/17558)
**Author:** [@Mike\_Snare](https://discuss.elastic.co/u/Mike_Snare)\ **Replies:** 2\ **Last updated:** [October 18, 2016, 11:04am UTC](https://discuss.elastic.co/t/debugging-scripts/17558 "2016-10-18T11:04:17Z")
I'm trying to debug an MVEL script that's failing in production but working locally, and I've tried to do logging a couple different ways, but I can only get logging to work locally. Both local and production are … --- ## [Index=not\_analyzed Vs analyser=keyword](https://discuss.elastic.co/t/index-not-analyzed-vs-analyser-keyword/58956)
**Author:** [@pranay.pramod](https://discuss.elastic.co/u/pranay.pramod)\ **Replies:** 2\ **Last updated:** [August 25, 2016, 7:08pm UTC](https://discuss.elastic.co/t/index-not-analyzed-vs-analyser-keyword/58956 "2016-08-25T19:08:24Z")
Since I know my data well enough, I am trying to create a mapping upfront for my index The field type am talking is string. Here is a snippet of the mapping I am trying PUT my\_index { "mappings": { "emp\_type": … --- ## [How to monitor mysql performance by giving the clients Ip?](https://discuss.elastic.co/t/how-to-monitor-mysql-performance-by-giving-the-clients-ip/1462)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 2\ **Last updated:** [May 29, 2015, 11:01am UTC](https://discuss.elastic.co/t/how-to-monitor-mysql-performance-by-giving-the-clients-ip/1462 "2015-05-29T11:01:32Z")
I want to monitor the performance of mysql, http requests of the client. I'm having clients ip and they are running mysql. I have to monitor the quiries what they are running. So, what are the changes i have to do? --- ## [Doc\_count on aggregations doesn't match total hits](https://discuss.elastic.co/t/doc-count-on-aggregations-doesnt-match-total-hits/19652)
**Author:** [@Ron\_Sher](https://discuss.elastic.co/u/Ron_Sher)\ **Replies:** 2\ **Last updated:** [September 6, 2014, 2:13pm UTC](https://discuss.elastic.co/t/doc-count-on-aggregations-doesnt-match-total-hits/19652 "2014-09-06T14:13:16Z")
Hi, I've started to use aggregations and it works very fast and cool. But it seems to get the wrong doc\_count as opposed to the total hits. For example - here's a typical search I use (I got for it total hits - 11… --- ## [APM is not show transaction](https://discuss.elastic.co/t/apm-is-not-show-transaction/208033)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 4:34am UTC](https://discuss.elastic.co/t/apm-is-not-show-transaction/208033 "2019-11-18T04:34:02Z")
Hi, I'm trying APM server with my application run on Python 3 Kibana version: 7.4.0 Elasticsearch version: 7.4.0 APM Server version: 7.4.2 APM Agent language and version: APM python (elastic-apm 5.2.2) Browser vers… --- ## [How create index every 4 or 6 hours](https://discuss.elastic.co/t/how-create-index-every-4-or-6-hours/152687)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 1\ **Last updated:** [October 16, 2018, 3:02pm UTC](https://discuss.elastic.co/t/how-create-index-every-4-or-6-hours/152687 "2018-10-16T15:02:55Z")
I have cluster consist of 17 nodes. 3 masters, 12 data, 2 coordinating. My cluster consist of approximately 300 indices right now. Each index have 4 shards and set 2 replicas. Some of my indices has between 400-800 gb (… --- ## [Multiple problems with logstash](https://discuss.elastic.co/t/multiple-problems-with-logstash/90554)
**Author:** [@sfunk](https://discuss.elastic.co/u/sfunk)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 5:53am UTC](https://discuss.elastic.co/t/multiple-problems-with-logstash/90554 "2017-06-26T05:53:34Z")
I'm encountering a couple issues with logstash, it's probably me not understanding the documentation. First, I cannot get logstash to start where it left off when filling ES from an Oracle datastore. When it gets about… --- ## [How to backup all indices older than a date using Curator plugin?](https://discuss.elastic.co/t/how-to-backup-all-indices-older-than-a-date-using-curator-plugin/68007)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [December 5, 2016, 4:07pm UTC](https://discuss.elastic.co/t/how-to-backup-all-indices-older-than-a-date-using-curator-plugin/68007 "2016-12-05T16:07:20Z")
Hi, It will be great if @theuntergeek can help me in this. I have a curator action file like this; actions: 1: action: snapshot description: \>- options: repository: mybackup name: myindexa… --- ## [org.apache.lucene.store.AlreadyClosedException](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception/56537)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 1\ **Last updated:** [July 27, 2016, 4:34pm UTC](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception/56537 "2016-07-27T16:34:46Z")
I am doing log analysis using Filebeat (1.2) -\> logstash(2.3) -\> Elasticsearch (2.3) I have 4 filebeat instances, 4 logstash instances (6 cores each, 8G RAM) , and Elasticsearch cluster (8 cores, 64G RAM) of 2 nodes Wh… --- ## [/etc/elasticsearch/certs/ - 3 files](https://discuss.elastic.co/t/etc-elasticsearch-certs-3-files/335459)
**Author:** [@Timberwolve77](https://discuss.elastic.co/u/Timberwolve77)\ **Replies:** 5\ **Last updated:** [June 8, 2023, 2:52pm UTC](https://discuss.elastic.co/t/etc-elasticsearch-certs-3-files/335459 "2023-06-08T14:52:57Z")
I saw there is a directory /etc/elasticsearch/certs/ and inside there are three files: http\_ca.crt, http.p12 and transport.p12. What if these files were deleted? Is there a way to generate new ones? --- ## ["dfs\_query\_then\_fetch" and "query\_then\_fetch" return the same score](https://discuss.elastic.co/t/dfs-query-then-fetch-and-query-then-fetch-return-the-same-score/115623)
**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\ **Replies:** 5\ **Last updated:** [January 16, 2018, 2:46pm UTC](https://discuss.elastic.co/t/dfs-query-then-fetch-and-query-then-fetch-return-the-same-score/115623 "2018-01-16T14:46:48Z")
i known the difference between "dfs\_query\_then\_fetch" and "query\_then\_fetch",I think this will return different idf ,but it return the same idf and same score,why is it？ --- ## [Delete docs via JDBC importer](https://discuss.elastic.co/t/delete-docs-via-jdbc-importer/79875)
**Author:** [@Gang](https://discuss.elastic.co/u/Gang)\ **Replies:** 5\ **Last updated:** [March 29, 2017, 10:42pm UTC](https://discuss.elastic.co/t/delete-docs-via-jdbc-importer/79875 "2017-03-29T22:42:02Z")
Hi everyone. Would anyone advise how to delete a document through the jdbc importer? I use it to download documents from the Database. But when the object in the database is marked as deleted, it should no longer fall in… --- ## [Filebeat Pod not working properly](https://discuss.elastic.co/t/filebeat-pod-not-working-properly/263641)
**Author:** [@yimengael](https://discuss.elastic.co/u/yimengael)\ **Replies:** 3\ **Last updated:** [February 10, 2021, 11:28am UTC](https://discuss.elastic.co/t/filebeat-pod-not-working-properly/263641 "2021-02-10T11:28:33Z")
Hi Filebeat experts, I deployed Filebeat on my Kubernetes cluster using deamon set. I have many nodes in my cluster. In each node of my cluster, I have a Filebeat pods that is running and collecting all the pods logs on… --- ## [Elasticsearch-setup-passwords fails with JsonParseException](https://discuss.elastic.co/t/elasticsearch-setup-passwords-fails-with-jsonparseexception/187364)
**Author:** [@xcitan](https://discuss.elastic.co/u/xcitan)\ **Replies:** 3\ **Last updated:** [July 1, 2019, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-fails-with-jsonparseexception/187364 "2019-07-01T14:27:55Z")
Hi, i would like to enable security in my cluster with elasticsearch 7.1.1. If i execute "elasticsearch-setup-passwords auto" for generating passwords for the built-in users i get the following error: /usr/share/elast… --- ## [Filebeat not connecting to ES](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834)
**Author:** [@sudhakar](https://discuss.elastic.co/u/sudhakar)\ **Replies:** 3\ **Last updated:** [January 5, 2018, 11:28am UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834 "2018-01-05T11:28:05Z")
I know this has been discussed quite a few times but would really appreciate the help on this as I have went through all the solutions but none of them would work. Filebeat service is not connecting to ES for direct out… --- ## [Term aggregation with No Compatible Fields in Kibana 5.4](https://discuss.elastic.co/t/term-aggregation-with-no-compatible-fields-in-kibana-5-4/85539)
**Author:** [@test\_user](https://discuss.elastic.co/u/test_user)\ **Replies:** 3\ **Last updated:** [May 21, 2017, 3:17pm UTC](https://discuss.elastic.co/t/term-aggregation-with-no-compatible-fields-in-kibana-5-4/85539 "2017-05-21T15:17:36Z")
Hello, On Data Table visualization I am receiving error "No Compatible Fields: The "sodhk2" index pattern does not contain any of the following field types: number, boolean, date, ip or string ". I have following in… --- ## [Process Xlsx files using Ingest Attachment Processor Plugin](https://discuss.elastic.co/t/process-xlsx-files-using-ingest-attachment-processor-plugin/65893)
**Author:** [@Guruprasad\_Prabhu](https://discuss.elastic.co/u/Guruprasad_Prabhu)\ **Replies:** 3\ **Last updated:** [November 13, 2016, 12:59pm UTC](https://discuss.elastic.co/t/process-xlsx-files-using-ingest-attachment-processor-plugin/65893 "2016-11-13T12:59:14Z")
I am new to ES and have just started exploring .I have a requirement to read MS office documents like excel, doc ,msg etc. I tried processing excel document using below code $params = \[ 'index' =\> 'index', 't… --- ## [Logstash crashes when folder/file it is watching gets deleted and rcreated](https://discuss.elastic.co/t/logstash-crashes-when-folder-file-it-is-watching-gets-deleted-and-rcreated/58215)
**Author:** [@sameer\_srivastava](https://discuss.elastic.co/u/sameer_srivastava)\ **Replies:** 3\ **Last updated:** [August 17, 2016, 11:00am UTC](https://discuss.elastic.co/t/logstash-crashes-when-folder-file-it-is-watching-gets-deleted-and-rcreated/58215 "2016-08-17T11:00:19Z")
We have been using logstash 2.3.2 on windows 7 machines to index logs into elastic search. Logstash is configured to watch a folder which has only one file at the time. Using logstash's file input plugin for this purpose… --- ## [Read all documents in an index and write to a new index (with more shards)](https://discuss.elastic.co/t/read-all-documents-in-an-index-and-write-to-a-new-index-with-more-shards/27426)
**Author:** [@burtonator](https://discuss.elastic.co/u/burtonator)\ **Replies:** 3\ **Last updated:** [September 9, 2015, 9:25pm UTC](https://discuss.elastic.co/t/read-all-documents-in-an-index-and-write-to-a-new-index-with-more-shards/27426 "2015-09-09T21:25:40Z")
Are there any tools that read all documents in an index, and write them to a new index? This is useful if you have an index with say 50 shards, and you have 50 machines, but you want to expand this to 100 machines. Th… --- ## [Updating Kibana Dashboard Admin user password](https://discuss.elastic.co/t/updating-kibana-dashboard-admin-user-password/222702)
**Author:** [@deep\_dba](https://discuss.elastic.co/u/deep_dba)\ **Replies:** 4\ **Last updated:** [March 16, 2020, 3:21pm UTC](https://discuss.elastic.co/t/updating-kibana-dashboard-admin-user-password/222702 "2020-03-16T15:21:59Z")
Hello Team, We tried changing kibana dashboard admin user default password with our custom password. it shows it saved successfully but after login with new password, it is showing message as Kibana status is red and we… --- ## [Default Sort Order in Constant Score Query](https://discuss.elastic.co/t/default-sort-order-in-constant-score-query/195112)
**Author:** [@Spock\_Tgai](https://discuss.elastic.co/u/Spock_Tgai)\ **Replies:** 4\ **Last updated:** [August 15, 2019, 6:03pm UTC](https://discuss.elastic.co/t/default-sort-order-in-constant-score-query/195112 "2019-08-15T18:03:23Z")
Hi, I wanted to know what is the default sort order for elasticsearch when using a constant score query. Also what is the mechanism for tie breaking. Thanks. --- ## [How to match all item in nested array](https://discuss.elastic.co/t/how-to-match-all-item-in-nested-array/163873)
**Author:** [@Kit\_Tsang](https://discuss.elastic.co/u/Kit_Tsang)\ **Replies:** 4\ **Last updated:** [January 11, 2019, 2:39pm UTC](https://discuss.elastic.co/t/how-to-match-all-item-in-nested-array/163873 "2019-01-11T14:39:20Z")
The mapping: "working\_hour": { "type": "nested", "properties": { "from": { "type": "long" } } } Data example: Record 1: "\_source" : { … --- ## [Logstash string equality test weirdness](https://discuss.elastic.co/t/logstash-string-equality-test-weirdness/73115)
**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\ **Replies:** 4\ **Last updated:** [January 29, 2017, 4:17pm UTC](https://discuss.elastic.co/t/logstash-string-equality-test-weirdness/73115 "2017-01-29T16:17:25Z")
Hi, Logstash version: logstash-5.1.2-1.noarch Java version: Oracle JRE 1.8.0\_111 OS: Oracle Linux 7.2 I am trying to use an environment variable to control a beat input configuration. To illustrate the issue below, … --- ## [How can I monitor Logstash?](https://discuss.elastic.co/t/how-can-i-monitor-logstash/66050)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [November 15, 2016, 6:08am UTC](https://discuss.elastic.co/t/how-can-i-monitor-logstash/66050 "2016-11-15T06:08:40Z")
Hi, I am using Elastic GA 5 stack . The architecture is FB -\> Kafka -\> LS -\> ES . At the same time, LS is using other inputs using jdbc too. I have X-Pack installed. I would like to monitor the activity of Logstash in … [Previous page](https://discuss.elastic.co/top.md?page=1251&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1253&per_page=50&period=all)