# Top **URL:** https://discuss.elastic.co/top.md?page=1256&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1257 --- ## [Agrupar valores para un mismo campo](https://discuss.elastic.co/t/agrupar-valores-para-un-mismo-campo/157355)
**Author:** [@villarj](https://discuss.elastic.co/u/villarj)\ **Replies:** 1\ **Last updated:** [November 20, 2018, 2:24pm UTC](https://discuss.elastic.co/t/agrupar-valores-para-un-mismo-campo/157355 "2018-11-20T14:24:00Z")
Hola, Quiero realizar un quesito (Pie), de un campo que puede tomar valores desde 100 hasta 600 y lo que quiero es que el quesito tenga 5 casos (colores) de 100 -200, 200-300 ... 500-600 y muestre la cantidad de veces q… --- ## [Query String Query for case insensitive matching using ES-Spark connector](https://discuss.elastic.co/t/query-string-query-for-case-insensitive-matching-using-es-spark-connector/120242)
**Author:** [@Pramod\_Sripada](https://discuss.elastic.co/u/Pramod_Sripada)\ **Replies:** 1\ **Last updated:** [March 1, 2018, 9:43pm UTC](https://discuss.elastic.co/t/query-string-query-for-case-insensitive-matching-using-es-spark-connector/120242 "2018-03-01T21:43:19Z")
Hi, I am using ES-Spark connector and trying to push filters down to ES, so that Spark would have exact data for processing . I am trying to perform a case insensitive value match on a column value but unable to perform… --- ## [Elasticsearch cluster timeout when node dies](https://discuss.elastic.co/t/elasticsearch-cluster-timeout-when-node-dies/14892)
**Author:** [@jjheinon](https://discuss.elastic.co/u/jjheinon)\ **Replies:** 1\ **Last updated:** [December 16, 2013, 9:45pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-timeout-when-node-dies/14892 "2013-12-16T21:45:33Z")
I have an Elasticsearch cluster with three servers (testnode00, testnode01, testnode02), with two Elasticsearch instances running on each server (ports 9300 and 9301). Total 6 instances. The instances have been conf… --- ## [How we can remove deduplication event in logstash](https://discuss.elastic.co/t/how-we-can-remove-deduplication-event-in-logstash/340060)
**Author:** [@Sukhdeob\_95](https://discuss.elastic.co/u/Sukhdeob_95)\ **Replies:** 6\ **Last updated:** [August 4, 2023, 4:53pm UTC](https://discuss.elastic.co/t/how-we-can-remove-deduplication-event-in-logstash/340060 "2023-08-04T16:53:48Z")
I want to remove the duplicate event based on particular field of my input i wrote logic like following but i got an error aggregate { task\_id =\> "%{\[meta\]\[ingestionHash\]}" code =\> " map\['@metadata'\]\['keep'\] ||= ev… --- ## [HTTP JSON input: one array one document](https://discuss.elastic.co/t/http-json-input-one-array-one-document/277327)
**Author:** [@thopic](https://discuss.elastic.co/u/thopic)\ **Replies:** 6\ **Last updated:** [July 2, 2021, 1:19pm UTC](https://discuss.elastic.co/t/http-json-input-one-array-one-document/277327 "2021-07-02T13:19:18Z")
Hello, I am using the HTTP JSON input of Filebeat to query some APIs and get some metrics. The problem is for some of them to send a JSON array instead of a JSON object. If I want to make a count of a specific metric, I… --- ## [Custom bundle does not appear in ElasticSearch deployment edit page](https://discuss.elastic.co/t/custom-bundle-does-not-appear-in-elasticsearch-deployment-edit-page/221083)
**Author:** [@Xavier\_Krantz](https://discuss.elastic.co/u/Xavier_Krantz)\ **Replies:** 6\ **Last updated:** [March 10, 2020, 2:42am UTC](https://discuss.elastic.co/t/custom-bundle-does-not-appear-in-elasticsearch-deployment-edit-page/221083 "2020-03-10T02:42:48Z")
Hi there ! I am trying to setup Kiban SSO with Google Suite SAML. I am following the official doc + using some existing posts out there: https://www.elastic.co/guide/en/cloud/current/ec-securing-clusters-SAML.html ht… --- ## [Created field not avail in ML fields](https://discuss.elastic.co/t/created-field-not-avail-in-ml-fields/110008)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 6\ **Last updated:** [December 5, 2017, 10:41am UTC](https://discuss.elastic.co/t/created-field-not-avail-in-ml-fields/110008 "2017-12-05T10:41:08Z")
With alot of help from the discussion board I'm getting closer to this... I created a field ... filter { if \[event\_id\] == 4688 and \[event\_data\]\[CommandLine\] !~ /"(.\*?)"/ { mutate { add\_field =\> {"event\_data.Suspici… --- ## [LogStach installation issue on Ubuntu](https://discuss.elastic.co/t/logstach-installation-issue-on-ubuntu/97768)
**Author:** [@muneeb](https://discuss.elastic.co/u/muneeb)\ **Replies:** 6\ **Last updated:** [August 21, 2017, 5:48pm UTC](https://discuss.elastic.co/t/logstach-installation-issue-on-ubuntu/97768 "2017-08-21T17:48:34Z")
I’m trying to run logstach-5.5.2 on ubuntu-14.04 LTS. but it’s giving me following error. "Could not find any executable java binary. Please install java in your PATH or set JAVA\_HOME." But JAVA\_HOME is already set. th… --- ## [Renaming multiple fields that are nested](https://discuss.elastic.co/t/renaming-multiple-fields-that-are-nested/299376)
**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\ **Replies:** 3\ **Last updated:** [March 11, 2022, 12:05am UTC](https://discuss.elastic.co/t/renaming-multiple-fields-that-are-nested/299376 "2022-03-11T00:05:25Z")
I need help renaming multiple fields that are nested, here is my problem, I can only rename "did" within example.devices but when I attempt to rename others I would assume it's the same pattern but the results are what i… --- ## [Events are lost when elasticsearch output is temporary unavailable](https://discuss.elastic.co/t/events-are-lost-when-elasticsearch-output-is-temporary-unavailable/272176)
**Author:** [@mabato](https://discuss.elastic.co/u/mabato)\ **Replies:** 3\ **Last updated:** [May 6, 2021, 8:23am UTC](https://discuss.elastic.co/t/events-are-lost-when-elasticsearch-output-is-temporary-unavailable/272176 "2021-05-06T08:23:44Z")
Hi all, Newbie here. I have kubernetes cluster in a location with patchy internet connection. I have metric beats on the cluster and I want to send metrics to ES which runs in cloud. I thought that when I put logstash … --- ## [Index RollOver policy and deleting logs after specific time](https://discuss.elastic.co/t/index-rollover-policy-and-deleting-logs-after-specific-time/246778)
**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 1:38pm UTC](https://discuss.elastic.co/t/index-rollover-policy-and-deleting-logs-after-specific-time/246778 "2020-08-31T13:38:22Z")
Hi, I have an ElasticCloud that I want to setups indexes on it and a policy to delete the old logs. I have created a lifecycle policy for deleting the logs which are older that 30 days: PUT \_ilm/policy/deleting\_po… --- ## [Failed to index all results after \[N\] attempts. failure in bulk execution](https://discuss.elastic.co/t/failed-to-index-all-results-after-n-attempts-failure-in-bulk-execution/241968)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 3\ **Last updated:** [July 22, 2020, 8:19am UTC](https://discuss.elastic.co/t/failed-to-index-all-results-after-n-attempts-failure-in-bulk-execution/241968 "2020-07-22T08:19:31Z")
Hello All, I see the following error originated by one of the ML jobs Could not find anything related on the www. Any ideas? \[2020-07-21T14:33:29,745\]\[WARN \]\[o.e.x.m.u.p.ResultsPersisterService\] \[NODE3\] \[job-name\] fa… --- ## [Disable Django APM agent](https://discuss.elastic.co/t/disable-django-apm-agent/233903)
**Author:** [@Taras\_Slyvka](https://discuss.elastic.co/u/Taras_Slyvka)\ **Replies:** 3\ **Last updated:** [May 28, 2020, 3:25pm UTC](https://discuss.elastic.co/t/disable-django-apm-agent/233903 "2020-05-28T15:25:41Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.6 … --- ## [Combine three scripted fields into one](https://discuss.elastic.co/t/combine-three-scripted-fields-into-one/157238)
**Author:** [@RainTown](https://discuss.elastic.co/u/RainTown)\ **Replies:** 3\ **Last updated:** [November 20, 2018, 10:51pm UTC](https://discuss.elastic.co/t/combine-three-scripted-fields-into-one/157238 "2018-11-20T22:51:44Z")
i have index with 3 scripted fields maximum of one of these 3 fields is non-null. But all 3 might be null. Let's say city1, city2, city3. i want new single field, say city, whose value is from the non-null cityX fiel… --- ## [Time Range and Filters not always working in Kibana 5.4.2](https://discuss.elastic.co/t/time-range-and-filters-not-always-working-in-kibana-5-4-2/94410)
**Author:** [@spacepacket](https://discuss.elastic.co/u/spacepacket)\ **Replies:** 3\ **Last updated:** [July 26, 2017, 5:16pm UTC](https://discuss.elastic.co/t/time-range-and-filters-not-always-working-in-kibana-5-4-2/94410 "2017-07-26T17:16:30Z")
Selecting a time range either through the time picker or visually in a graph does not always update the dashboard with the new time. Sometimes it will work the first time, but then won't work anymore. The workaround is t… --- ## [Logstash stops running after some time](https://discuss.elastic.co/t/logstash-stops-running-after-some-time/91634)
**Author:** [@Gopal](https://discuss.elastic.co/u/Gopal)\ **Replies:** 3\ **Last updated:** [July 4, 2017, 7:02am UTC](https://discuss.elastic.co/t/logstash-stops-running-after-some-time/91634 "2017-07-04T07:02:40Z")
Hi, I am facing issue with Logstash where it is being stopped suddenly when trying to send the output to SQS? Can any one help? Thanks in Advance! Regards, Gopal --- ## [ES not using all the memory assigned to it](https://discuss.elastic.co/t/es-not-using-all-the-memory-assigned-to-it/39321)
**Author:** [@Sheker](https://discuss.elastic.co/u/Sheker)\ **Replies:** 3\ **Last updated:** [January 15, 2016, 4:23pm UTC](https://discuss.elastic.co/t/es-not-using-all-the-memory-assigned-to-it/39321 "2016-01-15T16:23:27Z")
Hi, I'm running ES (1.6) for development on my MacBook PRO and I am trying to give ES more memory to use for improving query speed I've tried export ES\_HEAP\_SIZE=2g The process is named: /usr/bin/java -Xms2g -Xmx2g … --- ## [Vague Searches](https://discuss.elastic.co/t/vague-searches/6446)
**Author:** [@Jason\_4](https://discuss.elastic.co/u/Jason_4)\ **Replies:** 3\ **Last updated:** [January 23, 2012, 6:54pm UTC](https://discuss.elastic.co/t/vague-searches/6446 "2012-01-23T18:54:08Z")
I'm trying to figure out the best approach to handling a "vague" search. Say I have a document with a string attribute '123 Main St, Boston, MA, 02118' I'd like to be able to search for it using '123 Main Boston' and… --- ## [Trying to setup multi-node Elasticsearch cluster environment](https://discuss.elastic.co/t/trying-to-setup-multi-node-elasticsearch-cluster-environment/287111)
**Author:** [@milindyedge](https://discuss.elastic.co/u/milindyedge)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 1:59pm UTC](https://discuss.elastic.co/t/trying-to-setup-multi-node-elasticsearch-cluster-environment/287111 "2021-10-27T13:59:07Z")
I am new to Elasticsearch and currently trying to setup a multi-node Elasticsearch cluster environment using docker in my local machine. When cluster comes up, it status is green (checked using "/\_cluster/health" api, ho… --- ## [Filebeat: How to not send logs from kube-system namespace](https://discuss.elastic.co/t/filebeat-how-to-not-send-logs-from-kube-system-namespace/273876)
**Author:** [@vrathore18](https://discuss.elastic.co/u/vrathore18)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 10:39am UTC](https://discuss.elastic.co/t/filebeat-how-to-not-send-logs-from-kube-system-namespace/273876 "2021-05-25T10:39:11Z")
I tried all possible solutions mentioned here and StackOverflow. But not able to exclude logs from kube-system namespaces. Basically, I am getting logs from all the namespaces. data: filebeat.yml: |- filebeat.inpu… --- ## [None of the configured nodes are available](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available/272935)
**Author:** [@111474](https://discuss.elastic.co/u/111474)\ **Replies:** 2\ **Last updated:** [May 14, 2021, 1:39am UTC](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available/272935 "2021-05-14T01:39:01Z")
I launch spring boot app that should connect with elasticsearch 5.6.1 on macos catalina with globally installed java 14 . Elasticsearch 5.6.1 run as docker container via next command : docker run -d --rm --name elastic… --- ## [Watcher alert not functioning with Time range](https://discuss.elastic.co/t/watcher-alert-not-functioning-with-time-range/161737)
**Author:** [@fjm](https://discuss.elastic.co/u/fjm)\ **Replies:** 2\ **Last updated:** [December 21, 2018, 2:06pm UTC](https://discuss.elastic.co/t/watcher-alert-not-functioning-with-time-range/161737 "2018-12-21T14:06:32Z")
Hi there, I am looking to create an advanced watch where I am alerted when any docker container stops running on any VMs in a network. While I receive results back and during testing I am able to have the alert fire off… --- ## [Logstash gsub filter with special characters not working](https://discuss.elastic.co/t/logstash-gsub-filter-with-special-characters-not-working/131057)
**Author:** [@chakriv](https://discuss.elastic.co/u/chakriv)\ **Replies:** 2\ **Last updated:** [May 8, 2018, 9:42pm UTC](https://discuss.elastic.co/t/logstash-gsub-filter-with-special-characters-not-working/131057 "2018-05-08T21:42:37Z")
hello all, I am currently running logstash 6.x with ES 6.x and i am trying to leverage logstash to parse through the data and using mutate and gsub filters i have a syslog\_msg in the current format :slight\_smile: exam… --- ## [Xpack.audit.index.client.host over ssl fails with a handshake error](https://discuss.elastic.co/t/xpack-audit-index-client-host-over-ssl-fails-with-a-handshake-error/85153)
**Author:** [@lagrianitis](https://discuss.elastic.co/u/lagrianitis)\ **Replies:** 2\ **Last updated:** [June 12, 2017, 1:23pm UTC](https://discuss.elastic.co/t/xpack-audit-index-client-host-over-ssl-fails-with-a-handshake-error/85153 "2017-06-12T13:23:57Z")
Hello, I have two elasticsearch clusters: a production one and a monitoring cluster which ideally should also host the audit indices. Both clusters are 5.4.0 (x-pack as well) I have enabled transport ssl in the monito… --- ## [Querying dense\_vector from the High Level REST Java API](https://discuss.elastic.co/t/querying-dense-vector-from-the-high-level-rest-java-api/244956)
**Author:** [@MJB](https://discuss.elastic.co/u/MJB)\ **Replies:** 4\ **Last updated:** [August 15, 2020, 8:26pm UTC](https://discuss.elastic.co/t/querying-dense-vector-from-the-high-level-rest-java-api/244956 "2020-08-15T20:26:27Z")
All the examples I can find for querying dense vector mention script queries, eg. https://discuss.elastic.co/t/searching-with-dense-vector/213374 However, I have no idea on how to use those with the HL API. Is this pos… --- ## [Logstash node not showing up in Kibana monitoring (Logstash constantly restarting)](https://discuss.elastic.co/t/logstash-node-not-showing-up-in-kibana-monitoring-logstash-constantly-restarting/205808)
**Author:** [@vdere](https://discuss.elastic.co/u/vdere)\ **Replies:** 4\ **Last updated:** [October 31, 2019, 5:29am UTC](https://discuss.elastic.co/t/logstash-node-not-showing-up-in-kibana-monitoring-logstash-constantly-restarting/205808 "2019-10-31T05:29:57Z")
One of our logstash node is not showing in the monitoring tab. So how can I log into specific logstash nodes to verify if x-pack is running? Assuming that is what is causing this problem. Or there might be any other issu… --- ## [How to do 2 range query like a OR condition, give result satisfy any one condition](https://discuss.elastic.co/t/how-to-do-2-range-query-like-a-or-condition-give-result-satisfy-any-one-condition/132312)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 4\ **Last updated:** [May 17, 2018, 2:51pm UTC](https://discuss.elastic.co/t/how-to-do-2-range-query-like-a-or-condition-give-result-satisfy-any-one-condition/132312 "2018-05-17T14:51:33Z")
Hi i have 2 range queries like below { "range": { "@timestamp": { "gte": "05-16-2018", "lt": "05-17-2018", "format": "MM-dd-yyyy" } }} { "range": { "@timestamp": { "gte": "05-13-2018", "lt": "05-14-2018", "format": "… --- ## [Elasticsearch indices are now jiberish](https://discuss.elastic.co/t/elasticsearch-indices-are-now-jiberish/119693)
**Author:** [@motts](https://discuss.elastic.co/u/motts)\ **Replies:** 4\ **Last updated:** [February 15, 2018, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-indices-are-now-jiberish/119693 "2018-02-15T15:27:06Z")
Hello, I am upgrading Elastic Stack from 2.4 to 5.6. I came across some bumps, but nothing I couldn't handle until now. it appears that all the indices are now a bunch of random characters. I am not sure if I messed som… --- ## [Advice Needed on Beats](https://discuss.elastic.co/t/advice-needed-on-beats/77370)
**Author:** [@zbay](https://discuss.elastic.co/u/zbay)\ **Replies:** 4\ **Last updated:** [March 5, 2017, 9:39pm UTC](https://discuss.elastic.co/t/advice-needed-on-beats/77370 "2017-03-05T21:39:27Z")
Good evening, I'm looking for a little advice on the best way to get streaming api's information into log-stash for real time analysis. Currently I'm looking for a facebook, google, and hootsuite. I've managed to get … --- ## [Should filtering by type and type-specific search URL return different results?](https://discuss.elastic.co/t/should-filtering-by-type-and-type-specific-search-url-return-different-results/7008)
**Author:** [@James\_Wilson](https://discuss.elastic.co/u/James_Wilson)\ **Replies:** 4\ **Last updated:** [March 17, 2012, 9:58am UTC](https://discuss.elastic.co/t/should-filtering-by-type-and-type-specific-search-url-return-different-results/7008 "2012-03-17T09:58:36Z")
I'm seeing something puzzling: I have a query that returns quite different results depending on how I restrict the query by type. (1) adding "filter": { "type": { "value": "my\_type" } } into the query (2) restrictin… --- ## [Offline Mapping](https://discuss.elastic.co/t/offline-mapping/303756)
**Author:** [@millie123](https://discuss.elastic.co/u/millie123)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 6:49pm UTC](https://discuss.elastic.co/t/offline-mapping/303756 "2022-05-02T18:49:39Z")
I'm trying to get offline maps working in Kibana, but running into problems. For context, I want a standard OSM style base map, similar to the default base map, that doesn’t require an internet connection. I’ve tried a c… --- ## ["Discovery configuration is required in production mode critical" in Upgrade Assiant](https://discuss.elastic.co/t/discovery-configuration-is-required-in-production-mode-critical-in-upgrade-assiant/191372)
**Author:** [@psyapathy](https://discuss.elastic.co/u/psyapathy)\ **Replies:** 1\ **Last updated:** [July 19, 2019, 8:17pm UTC](https://discuss.elastic.co/t/discovery-configuration-is-required-in-production-mode-critical-in-upgrade-assiant/191372 "2019-07-19T20:17:05Z")
Hello! I want upgrade Elastic Stack fron 6.6 to 7.0. In Upgrade Assistand i get critical error: Discovery configuration is required in production mode nodes which do not have discovery configured: \[eBB7xaH\] I have o… --- ## [APM Reactjs](https://discuss.elastic.co/t/apm-reactjs/153138)
**Author:** [@Ciaran\_O\_Connor](https://discuss.elastic.co/u/Ciaran_O_Connor)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 8:40am UTC](https://discuss.elastic.co/t/apm-reactjs/153138 "2018-10-19T08:40:55Z")
Hi, We are currently trying out the javascript client side APM agent in our Reactjs App. Just wondering what the plan is for React integration and if there is any timeline? For tracking page changes in a single page a… --- ## [Are buckets persistent?](https://discuss.elastic.co/t/are-buckets-persistent/143780)
**Author:** [@Jose\_Ramierez](https://discuss.elastic.co/u/Jose_Ramierez)\ **Replies:** 7\ **Last updated:** [August 13, 2018, 2:47am UTC](https://discuss.elastic.co/t/are-buckets-persistent/143780 "2018-08-13T02:47:47Z")
ES 6.3 Related to this thread: Are contents of a bucket held in the same shard? Discussing Bucket Aggregations: https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket.html I thought… --- ## [Problem kibana : Error: Cannot find module 'babel-register'](https://discuss.elastic.co/t/problem-kibana-error-cannot-find-module-babel-register/143025)
**Author:** [@medaly](https://discuss.elastic.co/u/medaly)\ **Replies:** 1\ **Last updated:** [August 6, 2018, 12:34pm UTC](https://discuss.elastic.co/t/problem-kibana-error-cannot-find-module-babel-register/143025 "2018-08-06T12:34:40Z")
I'm trying to install Kibana 6.3.0 on windows 10 but kibana cannot find module "babel register: --- ## [Remote Reindexing and New Fields](https://discuss.elastic.co/t/remote-reindexing-and-new-fields/92893)
**Author:** [@The\_Juke\_Box\_Hero](https://discuss.elastic.co/u/The_Juke_Box_Hero)\ **Replies:** 7\ **Last updated:** [July 13, 2017, 7:06pm UTC](https://discuss.elastic.co/t/remote-reindexing-and-new-fields/92893 "2017-07-13T19:06:44Z")
Hi All, I'm setting up my new elastic cloud account and migrating stuff from a qbox account, the process is pretty straightforward so far but I have a problem, so far I've only been using my current index for search bu… --- ## [Extract json fields from message](https://discuss.elastic.co/t/extract-json-fields-from-message/269742)
**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 5\ **Last updated:** [April 9, 2021, 9:11pm UTC](https://discuss.elastic.co/t/extract-json-fields-from-message/269742 "2021-04-09T21:11:37Z")
Hello there, After applying grok filter to my message I get one of the fields called main\_message which looks like this main\_message Processing data {"si":"-2","a":"-54.0","r":"0","version":"1","id":"C112"} From t… --- ## [Not able to connect kibana to remote instance](https://discuss.elastic.co/t/not-able-to-connect-kibana-to-remote-instance/287859)
**Author:** [@Tingda\_Du](https://discuss.elastic.co/u/Tingda_Du)\ **Replies:** 8\ **Last updated:** [October 29, 2021, 11:36pm UTC](https://discuss.elastic.co/t/not-able-to-connect-kibana-to-remote-instance/287859 "2021-10-29T23:36:56Z")
Got this error not sure why. kibana\_1 | {"type":"log","@timestamp":"2021-10-27T22:59:48Z","tags":\["info","plugins-system"\],"pid":8,"message":"Setting up \[2\] plugins: \[inspector,data\]"} kibana\_1 | {"type":"log","@times… --- ## [How to esclude from filebeat this log](https://discuss.elastic.co/t/how-to-esclude-from-filebeat-this-log/202303)
**Author:** [@mirketto82](https://discuss.elastic.co/u/mirketto82)\ **Replies:** 3\ **Last updated:** [October 7, 2019, 11:08am UTC](https://discuss.elastic.co/t/how-to-esclude-from-filebeat-this-log/202303 "2019-10-07T11:08:47Z")
hi all i want to exclude from filebeat this logs? at org.apache.camel.spring.spi.TransactionErrorHandler.process(TransactionErrorHandler.java:101) Oct 4, 2019 @ 10:27:45 at org.apache.camel.spring.spi.TransactionErro… --- ## [Elasticsearch missing index fields after upgrade](https://discuss.elastic.co/t/elasticsearch-missing-index-fields-after-upgrade/171457)
**Author:** [@Rigrawl](https://discuss.elastic.co/u/Rigrawl)\ **Replies:** 3\ **Last updated:** [March 11, 2019, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-missing-index-fields-after-upgrade/171457 "2019-03-11T13:18:05Z")
Hey, We are facing an issue after upgrading from ELK 5.6 to 6.6.1. We had around 1,5k index fields prior to update, now we are left with ~30. We have 2TC nodes with 1 controller on which we have ELK, APM, Metricbeats T… --- ## [Convert string results into failure rates](https://discuss.elastic.co/t/convert-string-results-into-failure-rates/131227)
**Author:** [@Robert\_Cronk](https://discuss.elastic.co/u/Robert_Cronk)\ **Replies:** 3\ **Last updated:** [May 10, 2018, 10:47pm UTC](https://discuss.elastic.co/t/convert-string-results-into-failure-rates/131227 "2018-05-10T22:47:15Z")
I have a string field (data.result) in my documents that can contain "SUCCESS" or "FAILURE". I'm running ~20 tests across ~50 servers and each test on a server has a "SUCCESS" or "FAILURE" result. I want to make a heat… --- ## [Running out of fielddata without enabling it](https://discuss.elastic.co/t/running-out-of-fielddata-without-enabling-it/102279)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 8\ **Last updated:** [October 3, 2017, 10:27pm UTC](https://discuss.elastic.co/t/running-out-of-fielddata-without-enabling-it/102279 "2017-10-03T22:27:26Z")
I have read that field data is disabled by default on text fields now. I recently experienced a field data related crash, but we have not even explicitly enabled it in any of our mappings. Are there other ways that elast… --- ## [How to pull specific data from a single log line and index that data as fields available in every document](https://discuss.elastic.co/t/how-to-pull-specific-data-from-a-single-log-line-and-index-that-data-as-fields-available-in-every-document/98919)
**Author:** [@newb](https://discuss.elastic.co/u/newb)\ **Replies:** 3\ **Last updated:** [September 11, 2017, 3:31pm UTC](https://discuss.elastic.co/t/how-to-pull-specific-data-from-a-single-log-line-and-index-that-data-as-fields-available-in-every-document/98919 "2017-09-11T15:31:48Z")
Goal is: for each line in the log, there should be a document in elastic containing the ‘message’ (text after time stamp). Each document should also contain fields for the the project name, plan name, and build #. \<–this… --- ## [Query with "has\_child" filter and date range](https://discuss.elastic.co/t/query-with-has-child-filter-and-date-range/75107)
**Author:** [@eshlox](https://discuss.elastic.co/u/eshlox)\ **Replies:** 3\ **Last updated:** [February 16, 2017, 9:01am UTC](https://discuss.elastic.co/t/query-with-has-child-filter-and-date-range/75107 "2017-02-16T09:01:22Z")
Hi, Elasticsearch 5.1 data structure: "test123": { "mappings": { "doctype1": { "dynamic": "strict", "\_parent": { "type": "doctype2" }, "\_rou… --- ## [How should I configure network.host to bind to an aws elastic IP](https://discuss.elastic.co/t/how-should-i-configure-network-host-to-bind-to-an-aws-elastic-ip/73912)
**Author:** [@Robin\_Southgate](https://discuss.elastic.co/u/Robin_Southgate)\ **Replies:** 3\ **Last updated:** [February 3, 2017, 11:16pm UTC](https://discuss.elastic.co/t/how-should-i-configure-network-host-to-bind-to-an-aws-elastic-ip/73912 "2017-02-03T23:16:58Z")
I'm trying to set up an elasticsearch service to bind to the elastic IP assigned to the instance it's running on - but can't figure out the correct way. I've tried: network.host = \[\_local\_, "52.xxx.xxx.xxx"\] network.… --- ## [Logstash output: shrinkWindow is unexpectedly called twice?](https://discuss.elastic.co/t/logstash-output-shrinkwindow-is-unexpectedly-called-twice/59408)
**Author:** [@spacewander](https://discuss.elastic.co/u/spacewander)\ **Replies:** 3\ **Last updated:** [September 1, 2016, 11:31am UTC](https://discuss.elastic.co/t/logstash-output-shrinkwindow-is-unexpectedly-called-twice/59408 "2016-09-01T11:31:33Z")
Hey guys: I have just read the code in: , and find something strange here: Once c.publishWindowed returns an err, the send window will be shrinked by this line: However, there will be an asynchronous call i… --- ## [Testing the index existence](https://discuss.elastic.co/t/testing-the-index-existence/8082)
**Author:** [@tullio0106](https://discuss.elastic.co/u/tullio0106)\ **Replies:** 8\ **Last updated:** [October 14, 2014, 4:33pm UTC](https://discuss.elastic.co/t/testing-the-index-existence/8082 "2014-10-14T16:33:52Z")
I need to test if an index already exists, otherwise I create it by code. In order to test if an index already exists I execute : private boolean existsIndex() { ClusterState cs = client.admin().cluster(… --- ## [Elasticsearch Master CPU being used 100% at times](https://discuss.elastic.co/t/elasticsearch-master-cpu-being-used-100-at-times/327801)
**Author:** [@aayush\_kumar](https://discuss.elastic.co/u/aayush_kumar)\ **Replies:** 8\ **Last updated:** [March 16, 2023, 6:54am UTC](https://discuss.elastic.co/t/elasticsearch-master-cpu-being-used-100-at-times/327801 "2023-03-16T06:54:43Z")
My elasticsearch active master node CPU usage rises to 100% at times and remains the same for few minutes/hours and then comes downs to normal 4-5%. I ran the "hot\_threads" API against the node and found below threads t… --- ## [Tokens offset issue](https://discuss.elastic.co/t/tokens-offset-issue/307737)
**Author:** [@itaydvir](https://discuss.elastic.co/u/itaydvir)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 8:50am UTC](https://discuss.elastic.co/t/tokens-offset-issue/307737 "2022-06-23T08:50:34Z")
Hello, I'm upgrading from Elastic 6.8.1 to 7.8.1 (tested on 8.2.3 as well) and getting the following error: startOffset must be non-negative, and endOffset must be \>= startOffset, and offsets must not go backwards I… --- ## [Action \[indices:admin/create\] is unauthorized for user \[admin\]](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-admin/195175)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 1\ **Last updated:** [August 15, 2019, 9:23am UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-admin/195175 "2019-08-15T09:23:27Z")
Hi team, my custom endpoint makes bulk update request. I have got the error when i send my data to custom endpoint via Postman(admin/password authorized). Admin has superuser power. { "update": { … [Previous page](https://discuss.elastic.co/top.md?page=1255&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1257&per_page=50&period=all)