# Top

**URL:** https://discuss.elastic.co/top.md?page=1267&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1268

---

## [Stuck doctype in elasticsearch 6.2.3](https://discuss.elastic.co/t/stuck-doctype-in-elasticsearch-6-2-3/128700)

<div class="topic-metadata">

**Author:** [@kehu](https://discuss.elastic.co/u/kehu)\
**Replies:** 4\
**Last updated:** [April 20, 2018, 7:03am UTC](https://discuss.elastic.co/t/stuck-doctype-in-elasticsearch-6-2-3/128700 "2018-04-20T07:03:12Z")

</div>

Hello. I'm having some problems with the doc\_type in elasticsearch. The doctype in my index used to be "doc" like it's supposed to be by default, but it got changed to something else. This leads to errors when trying to…

---

## [Logstash JDBC file permission errors, cannot send data to elastic](https://discuss.elastic.co/t/logstash-jdbc-file-permission-errors-cannot-send-data-to-elastic/263810)

<div class="topic-metadata">

**Author:** [@wlbsxnlp22](https://discuss.elastic.co/u/wlbsxnlp22)\
**Replies:** 5\
**Last updated:** [February 12, 2021, 3:43pm UTC](https://discuss.elastic.co/t/logstash-jdbc-file-permission-errors-cannot-send-data-to-elastic/263810 "2021-02-12T15:43:28Z")

</div>

Hi, I keep getting errors when running JDBC, it seems to complain about being unable to read to files on disc but I have checked the permissions and there is write access. The problem seems to become worse when having a…

---

## [Fleet enrollment is done but doesn't appear on Security \> Administration \> Endpoints](https://discuss.elastic.co/t/fleet-enrollment-is-done-but-doesnt-appear-on-security-administration-endpoints/260142)

<div class="topic-metadata">

**Author:** [@roh](https://discuss.elastic.co/u/roh)\
**Replies:** 5\
**Last updated:** [January 7, 2021, 9:00am UTC](https://discuss.elastic.co/t/fleet-enrollment-is-done-but-doesnt-appear-on-security-administration-endpoints/260142 "2021-01-07T09:00:57Z")

</div>

Hi all! I'm trying to enroll Elastic Agent on Fleet. Kibana and Elasticsearch are on Windows 10 WSL Ubuntu 16.04 and Elastic Agent is on Windows 10. I'm using self-signed certs so I imported certificates as root trust…

---

## [Hex Character removal using logstash](https://discuss.elastic.co/t/hex-character-removal-using-logstash/225278)

<div class="topic-metadata">

**Author:** [@waqas\_rasheed](https://discuss.elastic.co/u/waqas_rasheed)\
**Replies:** 5\
**Last updated:** [March 26, 2020, 9:13pm UTC](https://discuss.elastic.co/t/hex-character-removal-using-logstash/225278 "2020-03-26T21:13:53Z")

</div>

Hi, I am transferring NGINX logs from filebeat to logstash and than to Kibana but i am not getting desired output as response\_body contains hex characters and i don't know how to remove them using logstash. Current re…

---

## [Extract the results of a ML job](https://discuss.elastic.co/t/extract-the-results-of-a-ml-job/185414)

<div class="topic-metadata">

**Author:** [@Bharath\_Kumar\_R](https://discuss.elastic.co/u/Bharath_Kumar_R)\
**Replies:** 5\
**Last updated:** [June 13, 2019, 12:01pm UTC](https://discuss.elastic.co/t/extract-the-results-of-a-ml-job/185414 "2019-06-13T12:01:32Z")

</div>

Is there any way to extract the results of a ML job(i.e, the detected anomalies in input data) using languages like python with their Elasticsearch client?

---

## [Feed / Apache index for ECE Versions and ECE Stacks](https://discuss.elastic.co/t/feed-apache-index-for-ece-versions-and-ece-stacks/106162)

<div class="topic-metadata">

**Author:** [@Lafunamor](https://discuss.elastic.co/u/Lafunamor)\
**Replies:** 5\
**Last updated:** [November 3, 2017, 10:51am UTC](https://discuss.elastic.co/t/feed-apache-index-for-ece-versions-and-ece-stacks/106162 "2017-11-03T10:51:03Z")

</div>

Hi there! Is there a place where I can get a feed or easy to parse index (e.g. apache folder listening) of all ECE versions and all ECE stacks? I'd like to subscribe to those with our CI/CD systems so we can automatical…

---

## [Security vulnerability](https://discuss.elastic.co/t/security-vulnerability/46015)

<div class="topic-metadata">

**Author:** [@chichu](https://discuss.elastic.co/u/chichu)\
**Replies:** 5\
**Last updated:** [April 1, 2016, 6:11am UTC](https://discuss.elastic.co/t/security-vulnerability/46015 "2016-04-01T06:11:12Z")

</div>

Need help in security issue

---

## [Elastic-agent 8.17.7: logs are not being harvested from .log files on Windows host](https://discuss.elastic.co/t/elastic-agent-8-17-7-logs-are-not-being-harvested-from-log-files-on-windows-host/379447)

<div class="topic-metadata">

**Author:** [@kiedis](https://discuss.elastic.co/u/kiedis)\
**Replies:** 8\
**Last updated:** [July 7, 2025, 8:31pm UTC](https://discuss.elastic.co/t/elastic-agent-8-17-7-logs-are-not-being-harvested-from-log-files-on-windows-host/379447 "2025-07-07T20:31:19Z")

</div>

first i would like to point out that there is no official tutorial for Custom Logs (Filestream) integration in elastic docs, except this piece touting its numerous improvements when compared to its deprecated predecessor…

---

## [Unable to update node\_modules in kibana(version 7.15.1) source code](https://discuss.elastic.co/t/unable-to-update-node-modules-in-kibana-version-7-15-1-source-code/297146)

<div class="topic-metadata">

**Author:** [@mridul.chandel](https://discuss.elastic.co/u/mridul.chandel)\
**Replies:** 8\
**Last updated:** [March 18, 2022, 7:02am UTC](https://discuss.elastic.co/t/unable-to-update-node-modules-in-kibana-version-7-15-1-source-code/297146 "2022-03-18T07:02:26Z")

</div>

I made some changes in the date picker provided by Elasticsearch EUI library inside kibana node\_modules folder. Specifically to these path :- node\_modules@elastic\\eui\\es\\components\\date\_picker\\super\_date\_picker\\relativ…

---

## [Grok help with cisco firepower 2130](https://discuss.elastic.co/t/grok-help-with-cisco-firepower-2130/211465)

<div class="topic-metadata">

**Author:** [@Aashish\_Arora](https://discuss.elastic.co/u/Aashish_Arora)\
**Replies:** 3\
**Last updated:** [January 3, 2020, 3:41pm UTC](https://discuss.elastic.co/t/grok-help-with-cisco-firepower-2130/211465 "2020-01-03T15:41:40Z")

</div>

Hello, I'm new to grok i want to put cisco fire power 2130 logs to elasticsearch I'm getting 6 types of different log lines so how do i write grok filter I'd created 6 different grok filter and checked by grok debugge…

---

## [Elasticsearch7.4.2 takes too long to form a cluster](https://discuss.elastic.co/t/elasticsearch7-4-2-takes-too-long-to-form-a-cluster/207911)

<div class="topic-metadata">

**Author:** [@weekyuan](https://discuss.elastic.co/u/weekyuan)\
**Replies:** 3\
**Last updated:** [November 19, 2019, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch7-4-2-takes-too-long-to-form-a-cluster/207911 "2019-11-19T07:35:19Z")

</div>

hi，all： When I deploy a brand new ealsticsearch cluster, it's always difficult to quickly form a whole.After some nodes form a cluster, other individual nodes wait for several hours and have not yet joined them.This has…

---

## [Filebeat is harvesting the wrong files](https://discuss.elastic.co/t/filebeat-is-harvesting-the-wrong-files/204453)

<div class="topic-metadata">

**Author:** [@Tompson](https://discuss.elastic.co/u/Tompson)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 5:14pm UTC](https://discuss.elastic.co/t/filebeat-is-harvesting-the-wrong-files/204453 "2019-10-23T17:14:59Z")

</div>

I'm using filebeat on a debian 10 to ship logfiles directly to elasticsearch und use kibana as the GUI to display an filter those files, as it's supposed to be. The problem is, that the configurations i make doesnt have …

---

## [Logstash configuration to achieve 300k eps](https://discuss.elastic.co/t/logstash-configuration-to-achieve-300k-eps/97162)

<div class="topic-metadata">

**Author:** [@Supernomad](https://discuss.elastic.co/u/Supernomad)\
**Replies:** 0\
**Last updated:** [August 16, 2017, 1:23am UTC](https://discuss.elastic.co/t/logstash-configuration-to-achieve-300k-eps/97162 "2017-08-16T01:23:15Z")

</div>

So I have gone through the majority of this forum and what I can find on the web, and have come up short of how exactly to push logstash to get to this kind of scale. A bit of back story, I am currently running a 5 clie…

---

## [Unexpected behaviour of date histogram aggregation](https://discuss.elastic.co/t/unexpected-behaviour-of-date-histogram-aggregation/86111)

<div class="topic-metadata">

**Author:** [@ferran.munoz](https://discuss.elastic.co/u/ferran.munoz)\
**Replies:** 3\
**Last updated:** [May 17, 2017, 4:20pm UTC](https://discuss.elastic.co/t/unexpected-behaviour-of-date-histogram-aggregation/86111 "2017-05-17T16:20:58Z")

</div>

Hello, I am experiencing an unexpected behaviour (imho) of date histogram aggregation when both offset and extended\_bounds options are used. Query using both offset and extended\_bounds that returns unexpected results…

---

## [Cluster stuck in Initializing](https://discuss.elastic.co/t/cluster-stuck-in-initializing/39202)

<div class="topic-metadata">

**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\
**Replies:** 0\
**Last updated:** [January 14, 2016, 8:45am UTC](https://discuss.elastic.co/t/cluster-stuck-in-initializing/39202 "2016-01-14T08:45:38Z")

</div>

Hi, EDIT: running ES 1.7 EDIT2: I launched a new node with the same settings as the nodes not receiving any data. The new node also gets no shards. The cluster is still stuck. One node is producing the outofMemory Erro…

---

## [Get Alert per Log of All Indexes - Watcher](https://discuss.elastic.co/t/get-alert-per-log-of-all-indexes-watcher/211446)

<div class="topic-metadata">

**Author:** [@mord](https://discuss.elastic.co/u/mord)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 10:11am UTC](https://discuss.elastic.co/t/get-alert-per-log-of-all-indexes-watcher/211446 "2019-12-11T10:11:45Z")

</div>

Get Alert per Log of All Indexes - Watcher

---

## [Rolling indices for dynamic index names](https://discuss.elastic.co/t/rolling-indices-for-dynamic-index-names/166814)

<div class="topic-metadata">

**Author:** [@Eduardo](https://discuss.elastic.co/u/Eduardo)\
**Replies:** 0\
**Last updated:** [February 2, 2019, 9:10am UTC](https://discuss.elastic.co/t/rolling-indices-for-dynamic-index-names/166814 "2019-02-02T09:10:32Z")

</div>

Hi, I will be receiving documents into the cluster that I will not be aware of the index names. I want to leverage rolling indices either using ILM API and index templating or curator but the problem I see is I will rec…

---

## [Elasticsearch 7.13 2 nodes cluster](https://discuss.elastic.co/t/elasticsearch-7-13-2-nodes-cluster/276079)

<div class="topic-metadata">

**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\
**Replies:** 6\
**Last updated:** [June 17, 2021, 5:29am UTC](https://discuss.elastic.co/t/elasticsearch-7-13-2-nodes-cluster/276079 "2021-06-17T05:29:37Z")

</div>

Hi I have two nodes(xnode1, xnode2) cluster on elasticsearch 7.13. I made cluster succesfully, it showing 2 nodes in cluster. For testing i stop xnode2, it showing 1 node cluster. but when stop xnode1 , then try curl w…

---

## [Can't run MetricBeat on Openshift](https://discuss.elastic.co/t/cant-run-metricbeat-on-openshift/206076)

<div class="topic-metadata">

**Author:** [@agiorgi](https://discuss.elastic.co/u/agiorgi)\
**Replies:** 6\
**Last updated:** [November 12, 2019, 12:15pm UTC](https://discuss.elastic.co/t/cant-run-metricbeat-on-openshift/206076 "2019-11-12T12:15:37Z")

</div>

Hi guys :slight\_smile: I'm having issues while trying to setup metricbeat on our Openshift cluster. Here are some details: Elasticsearch Version: 7.4 MetricBeat version: 7.4 OpenShift & Kubernetes: (OCP) Client Ver…

---

## [Parametrized watch](https://discuss.elastic.co/t/parametrized-watch/145878)

<div class="topic-metadata">

**Author:** [@The](https://discuss.elastic.co/u/The)\
**Replies:** 6\
**Last updated:** [September 10, 2018, 1:18pm UTC](https://discuss.elastic.co/t/parametrized-watch/145878 "2018-09-10T13:18:05Z")

</div>

I gather logs from 500 different devices (each separated with different id) and would like to create a watcher that detects when any of them stops sending data. I managed to create a watcher that does it for a single dev…

---

## [Is there any way to keep indices older than some days in one cluster and other indices in another cluster?](https://discuss.elastic.co/t/is-there-any-way-to-keep-indices-older-than-some-days-in-one-cluster-and-other-indices-in-another-cluster/108551)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 6\
**Last updated:** [November 22, 2017, 8:00am UTC](https://discuss.elastic.co/t/is-there-any-way-to-keep-indices-older-than-some-days-in-one-cluster-and-other-indices-in-another-cluster/108551 "2017-11-22T08:00:43Z")

</div>

Hi, I have an ES architecture like below; \[arch\] I have named my indices based on day, like myindexa-2017-11-08, myindexa-2017-11-09, myindexb-2017-11-08, myindexb-2017-11-09 etc. I would like to keep indices older th…

---

## [How to enter an instruction with CMD in Elasticsearch](https://discuss.elastic.co/t/how-to-enter-an-instruction-with-cmd-in-elasticsearch/94264)

<div class="topic-metadata">

**Author:** [@eboy](https://discuss.elastic.co/u/eboy)\
**Replies:** 6\
**Last updated:** [July 25, 2017, 7:37am UTC](https://discuss.elastic.co/t/how-to-enter-an-instruction-with-cmd-in-elasticsearch/94264 "2017-07-25T07:37:16Z")

</div>

I just read it here: https://www.elastic.co/guide/en/elasticsearch/reference/current/\_index\_and\_query\_a\_document.html I don't know how to type this instruction(curl -XPUT 'localhost:9200/customer/external/1?pretty&pretty…

---

## [Xpack security with active directory question](https://discuss.elastic.co/t/xpack-security-with-active-directory-question/77224)

<div class="topic-metadata">

**Author:** [@adityajain19](https://discuss.elastic.co/u/adityajain19)\
**Replies:** 6\
**Last updated:** [March 11, 2017, 5:40pm UTC](https://discuss.elastic.co/t/xpack-security-with-active-directory-question/77224 "2017-03-11T17:40:57Z")

</div>

Hi Team, I am new to elasticsearch. I am able to integrate xpack elastic and active directory and authentication too. Know when a user who's not associated to any role but is in the company's domain is still able to lo…

---

## [You are not authorized to access Monitoring. To use Monitoring, you need the privileges granted by both the \`kibana\_admin\` and \`monitoring\_user \` roles](https://discuss.elastic.co/t/you-are-not-authorized-to-access-monitoring-to-use-monitoring-you-need-the-privileges-granted-by-both-the-kibana-admin-and-monitoring-user-roles/346448)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 1\
**Last updated:** [November 9, 2023, 8:43pm UTC](https://discuss.elastic.co/t/you-are-not-authorized-to-access-monitoring-to-use-monitoring-you-need-the-privileges-granted-by-both-the-kibana-admin-and-monitoring-user-roles/346448 "2023-11-09T20:43:19Z")

</div>

Hello World! I'm trying out eck'quickstart: and even though I'm logging in as elastic user, which is superadmin, I get the following message when I try to access Kibana'Monitoring app: Access Denied You are not aut…

---

## [Logstash-iterating through array field with specific action for every value](https://discuss.elastic.co/t/logstash-iterating-through-array-field-with-specific-action-for-every-value/269702)

<div class="topic-metadata">

**Author:** [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\
**Replies:** 1\
**Last updated:** [April 9, 2021, 3:40pm UTC](https://discuss.elastic.co/t/logstash-iterating-through-array-field-with-specific-action-for-every-value/269702 "2021-04-09T15:40:00Z")

</div>

Hi,logstash wizards! I suppose ruby must be used for what I need but I tried many many ways with no success:( I parse DNS responses on Logstash and as a result I have field below with array of values: {"dns": { …

---

## [Filtering json with embedded xml](https://discuss.elastic.co/t/filtering-json-with-embedded-xml/138955)

<div class="topic-metadata">

**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\
**Replies:** 7\
**Last updated:** [July 6, 2018, 7:03pm UTC](https://discuss.elastic.co/t/filtering-json-with-embedded-xml/138955 "2018-07-06T19:03:29Z")

</div>

I'm pulling json messages from a jms queue, where most of them filter properly. However there are specific messages with XML payload. What would be the best way to filter this type of message? { "envCode": "RWCS"…

---

## [Tilemap: Could not retrieve manifest from the tile service: status -1](https://discuss.elastic.co/t/tilemap-could-not-retrieve-manifest-from-the-tile-service-status-1/123516)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 1\
**Last updated:** [March 12, 2018, 2:29pm UTC](https://discuss.elastic.co/t/tilemap-could-not-retrieve-manifest-from-the-tile-service-status-1/123516 "2018-03-12T14:29:44Z")

</div>

Using Kibana 5.4.1 While trying to visualize geoip, I am getting the following alert: Tilemap: Could not retrieve manifest from the tile service: status -1 I can see the points but no map in the background. I am run…

---

## [Cognitive Search](https://discuss.elastic.co/t/cognitive-search/92809)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [July 12, 2017, 4:33pm UTC](https://discuss.elastic.co/t/cognitive-search/92809 "2017-07-12T16:33:19Z")

</div>

Wanted to know is there any thought process to have the Cognitive Search support in elasticsearch.

---

## [ElasticSearch normalized the score for each document](https://discuss.elastic.co/t/elasticsearch-normalized-the-score-for-each-document/78785)

<div class="topic-metadata">

**Author:** [@Philip\_Moniaga](https://discuss.elastic.co/u/Philip_Moniaga)\
**Replies:** 1\
**Last updated:** [March 16, 2017, 7:39am UTC](https://discuss.elastic.co/t/elasticsearch-normalized-the-score-for-each-document/78785 "2017-03-16T07:39:38Z")

</div>

Is it possible to normalized score in elastic search using function\_score from relevance score? so, we can get max\_score/\_score range 0 to 1 for each document and we can put a threshold min\_score because we know the exac…

---

## [ClusterBlockException when master servers(s) return](https://discuss.elastic.co/t/clusterblockexception-when-master-servers-s-return/44260)

<div class="topic-metadata">

**Author:** [@Matt\_Chambers](https://discuss.elastic.co/u/Matt_Chambers)\
**Replies:** 1\
**Last updated:** [March 14, 2016, 1:05am UTC](https://discuss.elastic.co/t/clusterblockexception-when-master-servers-s-return/44260 "2016-03-14T01:05:29Z")

</div>

Hi all, I've looked around for a solution this, tried lots of different settings but I can't seem to fix this. If all masters are down when a non-master node comes up and fails discovery, I see this message: waited fo…

---

## [Java API for mapping](https://discuss.elastic.co/t/java-api-for-mapping/3574)

<div class="topic-metadata">

**Author:** [@IvanBrusic](https://discuss.elastic.co/u/IvanBrusic)\
**Replies:** 7\
**Last updated:** [May 30, 2012, 5:24pm UTC](https://discuss.elastic.co/t/java-api-for-mapping/3574 "2012-05-30T17:24:49Z")

</div>

Perhaps I am missing something fundamental, but I cannot figure out how to add a mapping via the Java API. I can index and query documents, but I do not see the relevant methods in the client interface. You have pre…

---

## [Options for log collection from client applications](https://discuss.elastic.co/t/options-for-log-collection-from-client-applications/328288)

<div class="topic-metadata">

**Author:** [@malliaridis](https://discuss.elastic.co/u/malliaridis)\
**Replies:** 2\
**Last updated:** [March 23, 2023, 8:10pm UTC](https://discuss.elastic.co/t/options-for-log-collection-from-client-applications/328288 "2023-03-23T20:10:14Z")

</div>

tl;dr If I have generated logs on mobile applications / mobile devices and desktop PCs (owned by users) and stored them in files or embedded databases, what options are available and recommended to collect these logs in…

---

## [Elastic-search-6.7.0 not starting after x-pack configuration](https://discuss.elastic.co/t/elastic-search-6-7-0-not-starting-after-x-pack-configuration/175276)

<div class="topic-metadata">

**Author:** [@kishorerv93](https://discuss.elastic.co/u/kishorerv93)\
**Replies:** 2\
**Last updated:** [April 4, 2019, 5:22am UTC](https://discuss.elastic.co/t/elastic-search-6-7-0-not-starting-after-x-pack-configuration/175276 "2019-04-04T05:22:03Z")

</div>

Hello, I was installing elasticsearch the following is the error i get when i start elasticsearch While i was running these below commands. I did not set any password. I just hit enter and did not specify anything rega…

---

## [Problem with very slow insertion](https://discuss.elastic.co/t/problem-with-very-slow-insertion/153732)

<div class="topic-metadata">

**Author:** [@magorbe](https://discuss.elastic.co/u/magorbe)\
**Replies:** 2\
**Last updated:** [October 24, 2018, 7:29am UTC](https://discuss.elastic.co/t/problem-with-very-slow-insertion/153732 "2018-10-24T07:29:01Z")

</div>

Hi, I'm desperate. I have the following mapping: { "my\_index": { "aliases": {}, "mappings": { "a\_c": { "properties": { "id": { …

---

## [Create a places API](https://discuss.elastic.co/t/create-a-places-api/135171)

<div class="topic-metadata">

**Author:** [@arkkanoid](https://discuss.elastic.co/u/arkkanoid)\
**Replies:** 2\
**Last updated:** [June 8, 2018, 4:55pm UTC](https://discuss.elastic.co/t/create-a-places-api/135171 "2018-06-08T16:55:28Z")

</div>

Hi, I need to transform a text about a place (i.e. Copenhagen , Capital Region, Denmark) in a structured data: { "professionals": 15644, "elevation": "", "name": "Copenhagen", "modification\_date": "2012-11-26", "c…

---

## [Coordinate map - zoom in further](https://discuss.elastic.co/t/coordinate-map-zoom-in-further/106879)

<div class="topic-metadata">

**Author:** [@magerRV](https://discuss.elastic.co/u/magerRV)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 8:35am UTC](https://discuss.elastic.co/t/coordinate-map-zoom-in-further/106879 "2017-12-05T08:35:17Z")

</div>

Is there any possebility to zoom in further in the visualisation type coordinate map ? I have some data with geo\_points and would like to see seperation in the city. Unfortunately they are so close to each other that I …

---

## [Count for fieldName & fieldName.keyword different](https://discuss.elastic.co/t/count-for-fieldname-fieldname-keyword-different/108017)

<div class="topic-metadata">

**Author:** [@thampton](https://discuss.elastic.co/u/thampton)\
**Replies:** 2\
**Last updated:** [November 17, 2017, 1:40pm UTC](https://discuss.elastic.co/t/count-for-fieldname-fieldname-keyword-different/108017 "2017-11-17T13:40:28Z")

</div>

I'm using Elasticsearch 5.2.2 Trying to understand why the following queries are returning different count for some fields, while returning the same count for others. I would expect to get the same count for each of th…

---

## [親子関係を持つドキュメントのaggregationについて](https://discuss.elastic.co/t/aggregation/26494)

<div class="topic-metadata">

**Author:** [@hirarin](https://discuss.elastic.co/u/hirarin)\
**Replies:** 2\
**Last updated:** [February 3, 2016, 6:47am UTC](https://discuss.elastic.co/t/aggregation/26494 "2016-02-03T06:47:22Z")

</div>

お世話になります。 Aggregationの方法として、Children Aggregationがあるかと思いますが、 逆に子のTypeに対してAggregationをかけた後、関連する親Typeにあるドキュメントによって Aggregationをかけることはできないのでしょうか？ Parent Aggregation的なものがマニュアル上に見つけることができず・・・ やり方もしくはドキュメントの場所をご存知の方がいらっしゃ…

---

## [Elasticsearch crashes with PEM certificate error when using pfx split into separate certificate and key](https://discuss.elastic.co/t/elasticsearch-crashes-with-pem-certificate-error-when-using-pfx-split-into-separate-certificate-and-key/273247)

<div class="topic-metadata">

**Author:** [@keacw](https://discuss.elastic.co/u/keacw)\
**Replies:** 4\
**Last updated:** [May 19, 2021, 9:49am UTC](https://discuss.elastic.co/t/elasticsearch-crashes-with-pem-certificate-error-when-using-pfx-split-into-separate-certificate-and-key/273247 "2021-05-19T09:49:08Z")

</div>

\[ERROR\]\[c.a.o.s.s.DefaultOpenDistroSecurityKeyStore\] \[example.com\] Your keystore or PEM does not contain a key. If you specified a key password, try removing it. If you did not specify a key password, perhaps you need t…

---

## [Intake very slow (more than 10secondes)](https://discuss.elastic.co/t/intake-very-slow-more-than-10secondes/269558)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 4\
**Last updated:** [April 8, 2021, 4:21pm UTC](https://discuss.elastic.co/t/intake-very-slow-more-than-10secondes/269558 "2021-04-08T16:21:29Z")

</div>

Elastic stack version 7.12.0 with Platinium licence APM Agent language and version: nodeJS - 3.X (latest) Run on k8s. Our nodeJS application complains about timeout when sending APM events to intake API. I setup instr…

---

## [Timeouts when deleting a snapshot (without curator)](https://discuss.elastic.co/t/timeouts-when-deleting-a-snapshot-without-curator/133569)

<div class="topic-metadata">

**Author:** [@Mrep](https://discuss.elastic.co/u/Mrep)\
**Replies:** 4\
**Last updated:** [May 29, 2018, 4:09pm UTC](https://discuss.elastic.co/t/timeouts-when-deleting-a-snapshot-without-curator/133569 "2018-05-29T16:09:37Z")

</div>

Hi, I sometimes have timeout errors when deleting a snapshot using the API: { "statusCode": 504, "error": "Gateway Timeout", "message": "Client request timeout" } With curator, it's possible to expand the timeout...bu…

---

## [Latest LS X-Pack still using a deprecated feature](https://discuss.elastic.co/t/latest-ls-x-pack-still-using-a-deprecated-feature/128866)

<div class="topic-metadata">

**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\
**Replies:** 4\
**Last updated:** [April 20, 2018, 6:05pm UTC](https://discuss.elastic.co/t/latest-ls-x-pack-still-using-a-deprecated-feature/128866 "2018-04-20T18:05:33Z")

</div>

LS & X-Pack are home based product. So why are they still using deprecated feature in 6.2.4? \[2018-04-20T13:32:52,331\]\[WARN \]\[logstash.outputs.elasticsearch\] You are using a deprecated config setting "document\_type" set…

---

## [Cluster 2 nodes no communication](https://discuss.elastic.co/t/cluster-2-nodes-no-communication/107211)

<div class="topic-metadata">

**Author:** [@dpachot](https://discuss.elastic.co/u/dpachot)\
**Replies:** 4\
**Last updated:** [November 10, 2017, 4:43pm UTC](https://discuss.elastic.co/t/cluster-2-nodes-no-communication/107211 "2017-11-10T16:43:54Z")

</div>

Hello, i try to make a cluster with 2 nodes with 2 VM / CentOs 7 cluster.name: elk57 node.name: node-elk57-1 node.master: true node.data: false bootstrap.memory\_lock: true network.host: 0.0.0.0 transport.host: localhos…

---

## [Elasticsearch can't run and can't connect to kibana . help](https://discuss.elastic.co/t/elasticsearch-cant-run-and-cant-connect-to-kibana-help/94566)

<div class="topic-metadata">

**Author:** [@Amity4](https://discuss.elastic.co/u/Amity4)\
**Replies:** 4\
**Last updated:** [July 26, 2017, 5:15am UTC](https://discuss.elastic.co/t/elasticsearch-cant-run-and-cant-connect-to-kibana-help/94566 "2017-07-26T05:15:11Z")

</div>

here's screenshoot from when i try tu run systemctl start elasticsearch and then systemctl status elasticsearch. and screenshoot from when i open kibana from browser.

---

## [Use GeoIP2 database with geoip filter plugin](https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826)

<div class="topic-metadata">

**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Replies:** 4\
**Last updated:** [March 8, 2017, 9:27pm UTC](https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826 "2017-03-08T21:27:54Z")

</div>

Hello, We are thinking of purchasing a license for Maxmind's GeoIP2 database. I've learned that Logstash uses the free Geolite2 database from Maxmind that might be less accurate. Would it be possible to configure logst…

---

## [Partitioning a mapping for sort or not?](https://discuss.elastic.co/t/partitioning-a-mapping-for-sort-or-not/58699)

<div class="topic-metadata">

**Author:** [@frankkoornstra](https://discuss.elastic.co/u/frankkoornstra)\
**Replies:** 4\
**Last updated:** [August 29, 2016, 3:39pm UTC](https://discuss.elastic.co/t/partitioning-a-mapping-for-sort-or-not/58699 "2016-08-29T15:39:23Z")

</div>

This might seem a bit complicated but stick with me please :slight\_smile: At the moment we have an immense mapping (230,000+ lines) of which most is mapping used for sorting. We save a score in a field with a key like …

---

## [Indexing HTML documents, problems with JSON](https://discuss.elastic.co/t/indexing-html-documents-problems-with-json/3473)

<div class="topic-metadata">

**Author:** [@Albin\_Stigo](https://discuss.elastic.co/u/Albin_Stigo)\
**Replies:** 4\
**Last updated:** [October 27, 2010, 8:59am UTC](https://discuss.elastic.co/t/indexing-html-documents-problems-with-json/3473 "2010-10-27T08:59:37Z")

</div>

Hi, I have a bunch of html documents that I would like to index (around 3000, so not so many). I put the title as well as some other metadata in separate properties but I would like to make the content searchable a…

---

## [\[status\_exception\] error while executing search in Kibana](https://discuss.elastic.co/t/status-exception-error-while-executing-search-in-kibana/296942)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [February 11, 2022, 12:03pm UTC](https://discuss.elastic.co/t/status-exception-error-while-executing-search-in-kibana/296942 "2022-02-11T12:03:45Z")

</div>

Hi, I'm getting this error in discover and dashboards. \[status\_exception\] error while executing search Though it seems to be working for different time periods... It gives this error when i select for a particular ti…

---

## [Grafana colored logs and elasticsearch lucene query](https://discuss.elastic.co/t/grafana-colored-logs-and-elasticsearch-lucene-query/285541)

<div class="topic-metadata">

**Author:** [@AlexG](https://discuss.elastic.co/u/AlexG)\
**Replies:** 1\
**Last updated:** [September 30, 2021, 9:49pm UTC](https://discuss.elastic.co/t/grafana-colored-logs-and-elasticsearch-lucene-query/285541 "2021-09-30T21:49:16Z")

</div>

I have colored logs (Ansible logs) in Elasticsearch. Logs are displayed normally (colored) in Grafana. If I execute a lucence query using a Number field, the logs will be displayed in color: But if I execute lucen…

---

## [ES pod CrashLoopBackOff , Likely root cause: java.nio.file.FileAlreadyExistsException](https://discuss.elastic.co/t/es-pod-crashloopbackoff-likely-root-cause-java-nio-file-filealreadyexistsexception/187824)

<div class="topic-metadata">

**Author:** [@Zanoubia](https://discuss.elastic.co/u/Zanoubia)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 12:44pm UTC](https://discuss.elastic.co/t/es-pod-crashloopbackoff-likely-root-cause-java-nio-file-filealreadyexistsexception/187824 "2019-06-27T12:44:43Z")

</div>

Using elasticsearch docker image 7.2.0, in a kubernetes cluster: ES describe: Events: Type Reason Age From Message ---- ------ ---- ---- ------- …

[Previous page](https://discuss.elastic.co/top.md?page=1266&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1268&per_page=50&period=all)
