# Top

**URL:** https://discuss.elastic.co/top.md?page=1278&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1279

---

## [Elasticsearch not working after Elasticsearch upgrade from 6.7 to 7.0](https://discuss.elastic.co/t/elasticsearch-not-working-after-elasticsearch-upgrade-from-6-7-to-7-0/179322)

<div class="topic-metadata">

**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\
**Replies:** 6\
**Last updated:** [May 3, 2019, 6:28am UTC](https://discuss.elastic.co/t/elasticsearch-not-working-after-elasticsearch-upgrade-from-6-7-to-7-0/179322 "2019-05-03T06:28:33Z")

</div>

Hi Guys, After i upgraded from 6.7 to 7.0, i'm having the issues to startup my elasticsearch and cluster, Anyone can assist me? I don't know what's wrong. Is it syntax errors? Below are my config and error logs, elas…

---

## [Pipeline Performance & jdbc\_static filter](https://discuss.elastic.co/t/pipeline-performance-jdbc-static-filter/157169)

<div class="topic-metadata">

**Author:** [@hermann102](https://discuss.elastic.co/u/hermann102)\
**Replies:** 6\
**Last updated:** [November 19, 2018, 12:37pm UTC](https://discuss.elastic.co/t/pipeline-performance-jdbc-static-filter/157169 "2018-11-19T12:37:21Z")

</div>

Hello everyone, I am new to ELK and have a number of issues that I would like to share with you. My difficulties concern the following points: Pipeline Performance (FileBeat & Jbdc --\> Logstash--\> Elk--\>Kibana) Setti…

---

## [Elasticsearch storage on containers](https://discuss.elastic.co/t/elasticsearch-storage-on-containers/340829)

<div class="topic-metadata">

**Author:** [@anderstr1](https://discuss.elastic.co/u/anderstr1)\
**Replies:** 2\
**Last updated:** [September 6, 2023, 11:33am UTC](https://discuss.elastic.co/t/elasticsearch-storage-on-containers/340829 "2023-09-06T11:33:40Z")

</div>

Our goal is to run Elasticsearch on docker containers. Until now we have only managed to run it properly on an Azure Virtual Machine. Our challenge is regarding storage. When using Elasticsearch, I understand that a typ…

---

## [Elasticsearch Java api client get index mapping in a Map](https://discuss.elastic.co/t/elasticsearch-java-api-client-get-index-mapping-in-a-map/311461)

<div class="topic-metadata">

**Author:** [@ijaxahmed](https://discuss.elastic.co/u/ijaxahmed)\
**Replies:** 2\
**Last updated:** [August 5, 2022, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-get-index-mapping-in-a-map/311461 "2022-08-05T07:42:11Z")

</div>

I have two qestion 1- I want to get mapping of an Index in a map as "Map\<String, Object\>", i successfully get the GetMappingResponse but from there not getting what to do in order to get mapping as a "Map\<String, Objec…

---

## [Data Transfer from Sql Server to Elasticsearch with SSIS and CData](https://discuss.elastic.co/t/data-transfer-from-sql-server-to-elasticsearch-with-ssis-and-cdata/269307)

<div class="topic-metadata">

**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 3:42pm UTC](https://discuss.elastic.co/t/data-transfer-from-sql-server-to-elasticsearch-with-ssis-and-cdata/269307 "2021-04-06T15:42:14Z")

</div>

I am trying to data transfer from Sql Server to Elasticsearch with SSIS (Microsoft SQL Server Integration Services) application using CData Elasticsearch Destination tool. What I am successfully for now. Using SSIS I …

---

## [Combining (grouping) two records as one in Kibana Discover](https://discuss.elastic.co/t/combining-grouping-two-records-as-one-in-kibana-discover/266937)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 2\
**Last updated:** [March 15, 2021, 12:13pm UTC](https://discuss.elastic.co/t/combining-grouping-two-records-as-one-in-kibana-discover/266937 "2021-03-15T12:13:00Z")

</div>

Hi, I want to group (aggregate) records on the basis of a specific ID. At the moment, my data has an event START and END record identified by the IDs. START and END record have different fields in them which I want to c…

---

## [Dissect filter plugin to map nested fields](https://discuss.elastic.co/t/dissect-filter-plugin-to-map-nested-fields/251314)

<div class="topic-metadata">

**Author:** [@carlos-bernad](https://discuss.elastic.co/u/carlos-bernad)\
**Replies:** 2\
**Last updated:** [October 7, 2020, 5:01pm UTC](https://discuss.elastic.co/t/dissect-filter-plugin-to-map-nested-fields/251314 "2020-10-07T17:01:11Z")

</div>

I am listening to events like this with logstash: {"MYSQL":{"eqp":"ST\_22","eqpId":"TT\_1","label":"MONITOR : BW\_TE\_TRACKING \[20\]","local":"2020-09-23T22:35:29.855+05:00"},"tags":\["MYSQL"\]} My goal is to store it in Mong…

---

## [Get uptime percentage](https://discuss.elastic.co/t/get-uptime-percentage/176182)

<div class="topic-metadata">

**Author:** [@OrangeDog](https://discuss.elastic.co/u/OrangeDog)\
**Replies:** 2\
**Last updated:** [April 10, 2019, 2:32pm UTC](https://discuss.elastic.co/t/get-uptime-percentage/176182 "2019-04-10T14:32:17Z")

</div>

I'm not seeing a per-service uptime percentage anywhere in the UI? What's the best way to get it?

---

## [Trying to pass params to elasticsearch getting null\_pointer\_exception](https://discuss.elastic.co/t/trying-to-pass-params-to-elasticsearch-getting-null-pointer-exception/163230)

<div class="topic-metadata">

**Author:** [@qballer](https://discuss.elastic.co/u/qballer)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 6:42pm UTC](https://discuss.elastic.co/t/trying-to-pass-params-to-elasticsearch-getting-null-pointer-exception/163230 "2019-01-07T18:42:44Z")

</div>

I'm trying to send to Elasticsearch the following query. Here is the most minimal update by query which gives me the exception. Lets name it Query1: { "id": "someID", "script": { "lang": "painless", "source…

---

## [BAD request after deleting an index pattern and recreating it](https://discuss.elastic.co/t/bad-request-after-deleting-an-index-pattern-and-recreating-it/105333)

<div class="topic-metadata">

**Author:** [@abdalians](https://discuss.elastic.co/u/abdalians)\
**Replies:** 2\
**Last updated:** [October 27, 2017, 12:14am UTC](https://discuss.elastic.co/t/bad-request-after-deleting-an-index-pattern-and-recreating-it/105333 "2017-10-27T00:14:02Z")

</div>

Hi all, Continuing the discussion from Kibana shows blank sites in Discover, Management, ... after deleting/creation of default index pattern: I had an index-pattern logstash-2017\* which I deleted, then I recreated it …

---

## [Force index template update](https://discuss.elastic.co/t/force-index-template-update/52507)

<div class="topic-metadata">

**Author:** [@alecswan](https://discuss.elastic.co/u/alecswan)\
**Replies:** 2\
**Last updated:** [June 13, 2016, 2:31am UTC](https://discuss.elastic.co/t/force-index-template-update/52507 "2016-06-13T02:31:38Z")

</div>

Hi there, I have an index template which maps "hostip" to "type": "ip". Unfortunately, data was sent to ES before the template was applied. So, ES decided that the type of "hostip" is LongFieldType. Once the template w…

---

## [Python library: search over large dataset sorted by timestamp](https://discuss.elastic.co/t/python-library-search-over-large-dataset-sorted-by-timestamp/15891)

<div class="topic-metadata">

**Author:** [@Andrew\_Vine](https://discuss.elastic.co/u/Andrew_Vine)\
**Replies:** 2\
**Last updated:** [February 19, 2014, 3:34pm UTC](https://discuss.elastic.co/t/python-library-search-over-large-dataset-sorted-by-timestamp/15891 "2014-02-19T15:34:15Z")

</div>

Hi all, I would like to read over all the docs for an index in timestamp order. Does anyone have a suggestion as to what would be the best way to do this using the python client? At the moment I'm using the …

---

## [Using two enrich policies in one ingestion pipeline](https://discuss.elastic.co/t/using-two-enrich-policies-in-one-ingestion-pipeline/223767)

<div class="topic-metadata">

**Author:** [@winlamp](https://discuss.elastic.co/u/winlamp)\
**Replies:** 8\
**Last updated:** [March 16, 2020, 4:09pm UTC](https://discuss.elastic.co/t/using-two-enrich-policies-in-one-ingestion-pipeline/223767 "2020-03-16T16:09:49Z")

</div>

Hi, I'm trying to enrich one index by applying two enrich policies with two different source indices. Here is my approach: "enrich": \[ { "policy\_name": "vehicle-database-policy", "field" : "vehicle.id", "target\_f…

---

## [ElasticSearch - Active shards](https://discuss.elastic.co/t/elasticsearch-active-shards/76749)

<div class="topic-metadata">

**Author:** [@pfischermx](https://discuss.elastic.co/u/pfischermx)\
**Replies:** 0\
**Last updated:** [February 28, 2017, 9:39am UTC](https://discuss.elastic.co/t/elasticsearch-active-shards/76749 "2017-02-28T09:39:30Z")

</div>

Hello, I've a 4-node cluster that I've setup for ELK, it usually goes around 5-10K events per second so it gets a good number of traffic from all our hosts. Here we have curator to only keep the last 10 days. Each of…

---

## [Emails from logstash are sometimes delayed](https://discuss.elastic.co/t/emails-from-logstash-are-sometimes-delayed/27751)

<div class="topic-metadata">

**Author:** [@angelsmile](https://discuss.elastic.co/u/angelsmile)\
**Replies:** 8\
**Last updated:** [August 21, 2015, 1:37am UTC](https://discuss.elastic.co/t/emails-from-logstash-are-sometimes-delayed/27751 "2015-08-21T01:37:46Z")

</div>

Hi, I'm a new user of ELK. I have set up logstash to send out emails upon some syslog messages received from remote node. However, the emails sent from logstash are sometimes delayed for a long time (minutes to hours).…

---

## [Illegal\_argument\_exception while creating new index](https://discuss.elastic.co/t/illegal-argument-exception-while-creating-new-index/219074)

<div class="topic-metadata">

**Author:** [@JustSomeoneOnline](https://discuss.elastic.co/u/JustSomeoneOnline)\
**Replies:** 1\
**Last updated:** [February 13, 2020, 9:54am UTC](https://discuss.elastic.co/t/illegal-argument-exception-while-creating-new-index/219074 "2020-02-13T09:54:41Z")

</div>

Hi. I'm running into issues when trying to create a new index in ElasticSearch 7.5 The error message is: The difference between max\_gram and min\_gram in NGram Tokenizer must be less than or equal to: \[1\] but was \[18\]. …

---

## [Logstash RabbitMQ Input Plugin not recognize host and port](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-not-recognize-host-and-port/198070)

<div class="topic-metadata">

**Author:** [@ThiagoBarradas](https://discuss.elastic.co/u/ThiagoBarradas)\
**Replies:** 1\
**Last updated:** [September 4, 2019, 3:50pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-not-recognize-host-and-port/198070 "2019-09-04T15:50:31Z")

</div>

Hello Guys! I'm trying to use Logstash to receive messages from RabbitMQ but it not recognize my configuration, cosidering only localhost:5672 and failing when tries to connect. I have already tested the connection wit…

---

## [Java High Level REST Client 怎么解决index\_not\_found\_exception](https://discuss.elastic.co/t/java-high-level-rest-client-index-not-found-exception/133147)

<div class="topic-metadata">

**Author:** [@xiaojiang](https://discuss.elastic.co/u/xiaojiang)\
**Replies:** 1\
**Last updated:** [May 25, 2018, 6:39am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-index-not-found-exception/133147 "2018-05-25T06:39:08Z")

</div>

在elasticsearch 中，我们可以通过设置ignore\_unavailable=true防止报空索引异常，但是在Java High Level REST Client中怎么解决？我看了下文档，貌似没有提供响应的方法，求救~~~~~~~~~~~~~~~~~~

---

## [Object field starting or ending with a \[.\] makes object resolution ambiguous: \[\]](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/123351)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 9:54pm UTC](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/123351 "2018-03-09T21:54:30Z")

</div>

I'm getting the error "object field starting or ending with a \[.\] makes object resolution ambiguous: \[\]". But there isn't a single dot \[.\] in my object. Using elasticClient.update() I'm passing: { "index": "applicants"…

---

## [visState Kibana](https://discuss.elastic.co/t/visstate-kibana/105311)

<div class="topic-metadata">

**Author:** [@sonic](https://discuss.elastic.co/u/sonic)\
**Replies:** 1\
**Last updated:** [October 27, 2017, 12:01am UTC](https://discuss.elastic.co/t/visstate-kibana/105311 "2017-10-27T00:01:58Z")

</div>

Hello everyone! I have datatable visualization and need multiply sort (two fields), also I need to get 15% of sorted results. Can I do this in visState, using elasticsearch sort, and how? I tried to sort by the end of …

---

## [Export to XML](https://discuss.elastic.co/t/export-to-xml/82206)

<div class="topic-metadata">

**Author:** [@rajaram.p](https://discuss.elastic.co/u/rajaram.p)\
**Replies:** 1\
**Last updated:** [April 12, 2017, 5:54pm UTC](https://discuss.elastic.co/t/export-to-xml/82206 "2017-04-12T17:54:21Z")

</div>

Is there any way to export the ES data into XML format using Kibana?

---

## [SQL Server input for Logstash](https://discuss.elastic.co/t/sql-server-input-for-logstash/2725)

<div class="topic-metadata">

**Author:** [@Win\_Wang](https://discuss.elastic.co/u/Win_Wang)\
**Replies:** 1\
**Last updated:** [June 15, 2015, 10:52pm UTC](https://discuss.elastic.co/t/sql-server-input-for-logstash/2725 "2015-06-15T22:52:35Z")

</div>

I didn't see an implementation of an SQL Server plugin for Logstash, and a quick StackOverflow reseult used a file as an intermediary. Does anyone know of a better solution? For example, if I could use the included sqlit…

---

## [Missing traces under traces but found under services](https://discuss.elastic.co/t/missing-traces-under-traces-but-found-under-services/284121)

<div class="topic-metadata">

**Author:** [@alexanderc](https://discuss.elastic.co/u/alexanderc)\
**Replies:** 1\
**Last updated:** [September 16, 2021, 6:36pm UTC](https://discuss.elastic.co/t/missing-traces-under-traces-but-found-under-services/284121 "2021-09-16T18:36:27Z")

</div>

There seems to be a weird behaviour with the APM feature of Kibana. We use OpenTelemetry collector to send traces to our apm-server which in turn ships them to elasticsearch. When we try to get all traces using a trace.i…

---

## [\[logstash.outputs.nagiosnsca\] TypeError: no implicit conversion of Fixnum into String](https://discuss.elastic.co/t/logstash-outputs-nagiosnsca-typeerror-no-implicit-conversion-of-fixnum-into-string/113024)

<div class="topic-metadata">

**Author:** [@Andrey\_Maraev](https://discuss.elastic.co/u/Andrey_Maraev)\
**Replies:** 1\
**Last updated:** [January 9, 2018, 7:20am UTC](https://discuss.elastic.co/t/logstash-outputs-nagiosnsca-typeerror-no-implicit-conversion-of-fixnum-into-string/113024 "2018-01-09T07:20:58Z")

</div>

Hello there! I use logstash 6.1.0 with logstash-output-nagios-nsca plugin for sending Errors from my log to the nagios server. My config is: input { file { path =\> "/opt/mylog.log" start\_position =\> "beginning" } …

---

## [How to development a kibana plugin in kibana 6.5.4](https://discuss.elastic.co/t/how-to-development-a-kibana-plugin-in-kibana-6-5-4/169129)

<div class="topic-metadata">

**Author:** [@Linoonphan](https://discuss.elastic.co/u/Linoonphan)\
**Replies:** 3\
**Last updated:** [February 22, 2019, 4:23pm UTC](https://discuss.elastic.co/t/how-to-development-a-kibana-plugin-in-kibana-6-5-4/169129 "2019-02-22T16:23:25Z")

</div>

Develop the kibana6.5.4 plugin on windows10, run eslasticsearch using yarn es archive ../elasticsearch.tar.gz, then run yarn start or npm start in the kibana-extra\\test\_plugins folder, the result shows server log \[03:15:…

---

## [Effective date Filter](https://discuss.elastic.co/t/effective-date-filter/32786)

<div class="topic-metadata">

**Author:** [@TheKahuna](https://discuss.elastic.co/u/TheKahuna)\
**Replies:** 3\
**Last updated:** [October 27, 2015, 3:30pm UTC](https://discuss.elastic.co/t/effective-date-filter/32786 "2015-10-27T15:30:37Z")

</div>

Hi, I've got an index, indexed from a mssql server database using nest, so far so good. Most properties are effective dated, i.e. when a property "changed", what will happen is that created a new record with a timestam…

---

## [Beta plugin crashed. ES does not start](https://discuss.elastic.co/t/beta-plugin-crashed-es-does-not-start/1006)

<div class="topic-metadata">

**Author:** [@esap](https://discuss.elastic.co/u/esap)\
**Replies:** 3\
**Last updated:** [May 20, 2015, 8:57pm UTC](https://discuss.elastic.co/t/beta-plugin-crashed-es-does-not-start/1006 "2015-05-20T20:57:37Z")

</div>

Running es 1.4.4. Just downloaded the beta and es does not start... D:\\elasticsearch-1.4.4\\bin\>plugin -i elasticsearch/watcher/xxxxxxlicensekey D -\> Installing elasticsearch/watcher/xxxxxxlicensekey... Trying http://do…

---

## [Only partial results returned for aggregation + ElasticsearchIllegalStateException when trying scroll](https://discuss.elastic.co/t/only-partial-results-returned-for-aggregation-elasticsearchillegalstateexception-when-trying-scroll/21310)

<div class="topic-metadata">

**Author:** [@Eran\_Duchan](https://discuss.elastic.co/u/Eran_Duchan)\
**Replies:** 3\
**Last updated:** [December 18, 2014, 6:32pm UTC](https://discuss.elastic.co/t/only-partial-results-returned-for-aggregation-elasticsearchillegalstateexception-when-trying-scroll/21310 "2014-12-18T18:32:15Z")

</div>

Over a sample ~2.5M document dataset, where each record holds a geopoint and some other data, I wanted ElasticSearch 1.4.1 to provide the following data: For all results in a given geo\_bounding box: Group resul…

---

## [To send JSON with webhook connectors](https://discuss.elastic.co/t/to-send-json-with-webhook-connectors/361781)

<div class="topic-metadata">

**Author:** [@kppriya](https://discuss.elastic.co/u/kppriya)\
**Replies:** 2\
**Last updated:** [June 20, 2024, 10:08am UTC](https://discuss.elastic.co/t/to-send-json-with-webhook-connectors/361781 "2024-06-20T10:08:46Z")

</div>

I am trying to send a JSON request to a webhook api, as per the document Webhook connector and action | Kibana Guide \[8.14\] | Elastic. But I am getting the below error. Details: \[415\] UNSUPPORTED MEDIA TYPE: Did not at…

---

## [Docs: reindex.remote.whitelist takes and array and not comma separated list](https://discuss.elastic.co/t/docs-reindex-remote-whitelist-takes-and-array-and-not-comma-separated-list/336976)

<div class="topic-metadata">

**Author:** [@adopauco](https://discuss.elastic.co/u/adopauco)\
**Replies:** 0\
**Last updated:** [June 27, 2023, 10:49am UTC](https://discuss.elastic.co/t/docs-reindex-remote-whitelist-takes-and-array-and-not-comma-separated-list/336976 "2023-06-27T10:49:41Z")

</div>

According to this piece of documentation, I need to configure reindex.remote.whitelist to allow reindexing from a remote elastic cluster. It states that the value should be a string with comma separated list of allowed …

---

## [Using Kibana for custom dashboard-](https://discuss.elastic.co/t/using-kibana-for-custom-dashboard/232456)

<div class="topic-metadata">

**Author:** [@tomillo](https://discuss.elastic.co/u/tomillo)\
**Replies:** 0\
**Last updated:** [May 13, 2020, 2:24pm UTC](https://discuss.elastic.co/t/using-kibana-for-custom-dashboard/232456 "2020-05-13T14:24:09Z")

</div>

I am new to using Elastic Stack. I have imported all the content to the App Search. I would like to index the data to Kibana in order to create a dashboard with custom graphics. It can be done? How?

---

## [A new store plugin: native-unix-store](https://discuss.elastic.co/t/a-new-store-plugin-native-unix-store/157843)

<div class="topic-metadata">

**Author:** [@LeMic](https://discuss.elastic.co/u/LeMic)\
**Replies:** 0\
**Last updated:** [November 22, 2018, 9:45am UTC](https://discuss.elastic.co/t/a-new-store-plugin-native-unix-store/157843 "2018-11-22T09:45:14Z")

</div>

Hi all, Following this discussion on Github (https://github.com/elastic/elasticsearch/issues/27748), I released a new store plugin which uses native syscalls on Linux and helps to reduce the search latency especially on…

---

## [Threadpool.index.queue\_size overflow](https://discuss.elastic.co/t/threadpool-index-queue-size-overflow/130398)

<div class="topic-metadata">

**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\
**Replies:** 0\
**Last updated:** [May 3, 2018, 8:24am UTC](https://discuss.elastic.co/t/threadpool-index-queue-size-overflow/130398 "2018-05-03T08:24:02Z")

</div>

Node configuration : 61.0 GiB 8 vCPUs and 8 nodes 3 master nodes and 5 data nodes thread\_pool.search.queue\_size: 1000 we have almost 300+ indices and 1 Percolator index. Per day indexing is 400K and this same 400K wil…

---

## [Metricbeat kafka module kerberos authentication](https://discuss.elastic.co/t/metricbeat-kafka-module-kerberos-authentication/265167)

<div class="topic-metadata">

**Author:** [@drewkrrb](https://discuss.elastic.co/u/drewkrrb)\
**Replies:** 4\
**Last updated:** [March 18, 2021, 4:04pm UTC](https://discuss.elastic.co/t/metricbeat-kafka-module-kerberos-authentication/265167 "2021-03-18T16:04:12Z")

</div>

Hi Am trying to enable metricbeat kafka module in my kafka cluster. My kafka cluster uses kerberos auth to access all the topics. Here is my current config: # Module: kafka # Docs: https://www.elastic.co/guide/en/beat…

---

## [Very slow queries stop words and synonyms after upgrade to 6.7.0 from 6.2.3](https://discuss.elastic.co/t/very-slow-queries-stop-words-and-synonyms-after-upgrade-to-6-7-0-from-6-2-3/210254)

<div class="topic-metadata">

**Author:** [@bayers51](https://discuss.elastic.co/u/bayers51)\
**Replies:** 4\
**Last updated:** [December 3, 2019, 6:56pm UTC](https://discuss.elastic.co/t/very-slow-queries-stop-words-and-synonyms-after-upgrade-to-6-7-0-from-6-2-3/210254 "2019-12-03T18:56:30Z")

</div>

Removing the stop word or synonym, the query is fast. Removing the stop word, removes spanNear(\[SpanGap(:1), from the query. ES version 6.7. "took" : 9913, (Note: artificial intelligence has a synonym to ai as well) …

---

## [Why there are always a couple of exceptions on the master instance in the beginning of starting elasticsearch](https://discuss.elastic.co/t/why-there-are-always-a-couple-of-exceptions-on-the-master-instance-in-the-beginning-of-starting-elasticsearch/119146)

<div class="topic-metadata">

**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\
**Replies:** 4\
**Last updated:** [February 11, 2018, 6:46am UTC](https://discuss.elastic.co/t/why-there-are-always-a-couple-of-exceptions-on-the-master-instance-in-the-beginning-of-starting-elasticsearch/119146 "2018-02-11T06:46:16Z")

</div>

I setup a elasticsearch cluster with 3 instances(nodes), it works well so far. But each time when I starting the cluster, I can always see a couple of exceptions in the master elasticsearch instance, although the cluster…

---

## [Need supported version for elastic search -jdbc](https://discuss.elastic.co/t/need-supported-version-for-elastic-search-jdbc/88049)

<div class="topic-metadata">

**Author:** [@ent\_1](https://discuss.elastic.co/u/ent_1)\
**Replies:** 4\
**Last updated:** [June 2, 2017, 5:51pm UTC](https://discuss.elastic.co/t/need-supported-version-for-elastic-search-jdbc/88049 "2017-06-02T17:51:21Z")

</div>

Hai I am using elastic search 2.4.1, i would like to know which version of elasticsearch-jdbc will support for this elastic search 2.4.1 or suggest me supported versions.

---

## [Get website certificate log with Filebeats](https://discuss.elastic.co/t/get-website-certificate-log-with-filebeats/54628)

<div class="topic-metadata">

**Author:** [@Chanawit\_Onchoo](https://discuss.elastic.co/u/Chanawit_Onchoo)\
**Replies:** 4\
**Last updated:** [July 5, 2016, 4:40pm UTC](https://discuss.elastic.co/t/get-website-certificate-log-with-filebeats/54628 "2016-07-05T16:40:58Z")

</div>

Is it possible way to use Filebeats to get certificate log from website(or others beats) or I need to build my own beats(or script) to do it. Thank you for answer.

---

## [Error in Repository Creation on Windows](https://discuss.elastic.co/t/error-in-repository-creation-on-windows/24518)

<div class="topic-metadata">

**Author:** [@tanveer3](https://discuss.elastic.co/u/tanveer3)\
**Replies:** 4\
**Last updated:** [June 29, 2015, 12:49pm UTC](https://discuss.elastic.co/t/error-in-repository-creation-on-windows/24518 "2015-06-29T12:49:36Z")

</div>

Hi All, I received the below error while creation of repository on Windows. PUT http://localhost:9200/\_snapshot/backup -d { "type": "fs", "settings": { "location": "C:\\Users\\Downloads\\elasticsearch-1.6.0\\es\_backup\_f…

---

## [Unable to setup an alert on log data not received from host for last 1 hour](https://discuss.elastic.co/t/unable-to-setup-an-alert-on-log-data-not-received-from-host-for-last-1-hour/269459)

<div class="topic-metadata">

**Author:** [@elango1](https://discuss.elastic.co/u/elango1)\
**Replies:** 2\
**Last updated:** [April 12, 2021, 10:53pm UTC](https://discuss.elastic.co/t/unable-to-setup-an-alert-on-log-data-not-received-from-host-for-last-1-hour/269459 "2021-04-12T22:53:03Z")

</div>

Hi , I am trying to setup an alert when a host has stopped sending logs. I would like to group by hosts and check if log count is zero. The UI is mandating at least 1 condition. Tried setting host.name is , but it liter…

---

## [Invalid NEST response built from a unsuccessful () low level call on PUT: /indexname/\_doc/888](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put-indexname-doc-888/211282)

<div class="topic-metadata">

**Author:** [@EmpeRoar](https://discuss.elastic.co/u/EmpeRoar)\
**Replies:** 2\
**Last updated:** [December 13, 2019, 11:24am UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put-indexname-doc-888/211282 "2019-12-13T11:24:14Z")

</div>

Invalid NEST response built from a unsuccessful () low level call on PUT: \[1\] BadRequest: Node: http://localhost:9200/ Took: 00:00:00.2651740 OriginalException: System.Net.Http.HttpRequestException: Cannot assign reque…

---

## [Saved "field" parameter is now invalid / Visualize: "field" is a required parameter](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-visualize-field-is-a-required-parameter/129727)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [April 27, 2018, 2:50pm UTC](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-visualize-field-is-a-required-parameter/129727 "2018-04-27T14:50:23Z")

</div>

I followed Configuration Examples | Logstash Reference \[6.2\] | Elastic to configure Apache 2, MySQL, Nginx and System Logs... however, via Kibana, I get following message when trying to access \[Filebeat Apache2\] Access …

---

## [Logstash to Elasticsearch JDBC Current Version Conflict Issue](https://discuss.elastic.co/t/logstash-to-elasticsearch-jdbc-current-version-conflict-issue/123314)

<div class="topic-metadata">

**Author:** [@ayeager](https://discuss.elastic.co/u/ayeager)\
**Replies:** 2\
**Last updated:** [March 12, 2018, 3:26pm UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-jdbc-current-version-conflict-issue/123314 "2018-03-12T15:26:00Z")

</div>

I'm trying to import data from a mysql database with the jdbc input plugin and based on the way I'm getting the data out of the database, I'm running into concurrency errors similar to the one below \[2018-03-09T17:40:02…

---

## [Change the default script language](https://discuss.elastic.co/t/change-the-default-script-language/49529)

<div class="topic-metadata">

**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\
**Replies:** 2\
**Last updated:** [May 10, 2016, 1:12pm UTC](https://discuss.elastic.co/t/change-the-default-script-language/49529 "2016-05-10T13:12:10Z")

</div>

Hi all, Running ES 2.3.1 and latest Kibana version (pre 5) I've set up the javascript language plugin and defined it in my elasticsearch.yml as the default language and enabled inline scripting. However, when I att…

---

## [\[Ask suggestion\] How to simplify the synonyms implementaiton?](https://discuss.elastic.co/t/ask-suggestion-how-to-simplify-the-synonyms-implementaiton/27922)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 2\
**Last updated:** [August 25, 2015, 4:22am UTC](https://discuss.elastic.co/t/ask-suggestion-how-to-simplify-the-synonyms-implementaiton/27922 "2015-08-25T04:22:23Z")

</div>

we are going to define synonyms with multi-language support in our ES indexes. Right now, we have totally 10 indexes, all of which need multi-language support, that is, for any field need multi-language index/query, we d…

---

## [Filebeat failing to start due to YAML error, but which config file is it complaining about?](https://discuss.elastic.co/t/filebeat-failing-to-start-due-to-yaml-error-but-which-config-file-is-it-complaining-about/341047)

<div class="topic-metadata">

**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\
**Replies:** 7\
**Last updated:** [August 17, 2023, 8:48pm UTC](https://discuss.elastic.co/t/filebeat-failing-to-start-due-to-yaml-error-but-which-config-file-is-it-complaining-about/341047 "2023-08-17T20:48:47Z")

</div>

I'm attempting to use Filebeat to ingest logs from Zeek, but I'm getting the following error when I start Filebeat: Here's my /etc/filebeat/filebeat.yml file: Yamllint tells me that there's an issue with this: "Map…

---

## [Search and get distenic result base on create\_at in elasticsearch](https://discuss.elastic.co/t/search-and-get-distenic-result-base-on-create-at-in-elasticsearch/123408)

<div class="topic-metadata">

**Author:** [@mohammad\_S07](https://discuss.elastic.co/u/mohammad_S07)\
**Replies:** 7\
**Last updated:** [March 11, 2018, 2:04pm UTC](https://discuss.elastic.co/t/search-and-get-distenic-result-base-on-create-at-in-elasticsearch/123408 "2018-03-11T14:04:15Z")

</div>

I store data in the Elasticsearch like this: { "\_index": "my\_index", "\_type": "doc", "\_id": "6lDquGEBFRQVe0x93eHk", "\_version": 1, "\_score": 1, "\_source": { "Barcode": "6947503728601", …

---

## [TCP output hangs while sending syslog](https://discuss.elastic.co/t/tcp-output-hangs-while-sending-syslog/109025)

<div class="topic-metadata">

**Author:** [@vishal0708gautam](https://discuss.elastic.co/u/vishal0708gautam)\
**Replies:** 1\
**Last updated:** [November 24, 2017, 12:10pm UTC](https://discuss.elastic.co/t/tcp-output-hangs-while-sending-syslog/109025 "2017-11-24T12:10:09Z")

</div>

Hello Experts, We facing an issue, while sending syslog event output from TCP, some times TCP hangs and then outputs the syslog event. The major problem here is that if any event comes in between for output, because TCP…

---

## [Visualization of 2 or more saved searches in the same piechart](https://discuss.elastic.co/t/visualization-of-2-or-more-saved-searches-in-the-same-piechart/86256)

<div class="topic-metadata">

**Author:** [@sudha\_swaminathan](https://discuss.elastic.co/u/sudha_swaminathan)\
**Replies:** 1\
**Last updated:** [May 19, 2017, 8:58pm UTC](https://discuss.elastic.co/t/visualization-of-2-or-more-saved-searches-in-the-same-piechart/86256 "2017-05-19T20:58:42Z")

</div>

Hi, I have 2 saved searches. One with the total count and the other one with a filter for presence or absence of a field. I want to visualize these two in a single pie chart. Is that possible? These are discrete data typ…

---

## [Using source filtering to get nested object count](https://discuss.elastic.co/t/using-source-filtering-to-get-nested-object-count/70221)

<div class="topic-metadata">

**Author:** [@stevenmwall](https://discuss.elastic.co/u/stevenmwall)\
**Replies:** 1\
**Last updated:** [December 30, 2016, 8:52am UTC](https://discuss.elastic.co/t/using-source-filtering-to-get-nested-object-count/70221 "2016-12-30T08:52:22Z")

</div>

I have an index with documents like this: { "firstName": "Fred", "lastName": "Flinstone", "children": \[ { "firstName": "Pebbles", "lastName": "Flinstone", "age": 1 } …

[Previous page](https://discuss.elastic.co/top.md?page=1277&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1279&per_page=50&period=all)
