# Top

**URL:** https://discuss.elastic.co/top.md?page=1283&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1284

---

## [Query Array by Position](https://discuss.elastic.co/t/query-array-by-position/124765)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 1\
**Last updated:** [March 20, 2018, 2:19pm UTC](https://discuss.elastic.co/t/query-array-by-position/124765 "2018-03-20T14:19:00Z")

</div>

We have a URL field split on / into a path array field. We now want to query documents in Kibana which have "something as their first element. The following query fails in Kibana: path\[0\]: something: \[image\] We do ho…

---

## [AWS Elasticsearch Avg aggregation Java API generates error when trying to retrieve results using a Jest client during a certain time period](https://discuss.elastic.co/t/aws-elasticsearch-avg-aggregation-java-api-generates-error-when-trying-to-retrieve-results-using-a-jest-client-during-a-certain-time-period/63465)

<div class="topic-metadata">

**Author:** [@khurram.khan](https://discuss.elastic.co/u/khurram.khan)\
**Replies:** 1\
**Last updated:** [October 20, 2016, 10:51am UTC](https://discuss.elastic.co/t/aws-elasticsearch-avg-aggregation-java-api-generates-error-when-trying-to-retrieve-results-using-a-jest-client-during-a-certain-time-period/63465 "2016-10-20T10:51:50Z")

</div>

I am using Elasticsearch SDK 2.3 and Jest 2.0.0 to create a client. I am trying to get average aggregation (and other aggregations) implemented which will retrieve results from a certain time period. SearchSourceBuilder…

---

## [Dashboard per environment](https://discuss.elastic.co/t/dashboard-per-environment/54330)

<div class="topic-metadata">

**Author:** [@Andrew\_Smith](https://discuss.elastic.co/u/Andrew_Smith)\
**Replies:** 1\
**Last updated:** [June 29, 2016, 10:52pm UTC](https://discuss.elastic.co/t/dashboard-per-environment/54330 "2016-06-29T22:52:55Z")

</div>

Hi, we have an instance of Elasticsearch/Kibana setup to collect data from each of our three environments: development, staging, production. The incoming events are tagged appropriately with the environment name. I have …

---

## [Installation of ELK on Windows help](https://discuss.elastic.co/t/installation-of-elk-on-windows-help/302333)

<div class="topic-metadata">

**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\
**Replies:** 5\
**Last updated:** [April 14, 2022, 1:39pm UTC](https://discuss.elastic.co/t/installation-of-elk-on-windows-help/302333 "2022-04-14T13:39:39Z")

</div>

Hi all, need some help with Windows install. Windows Server 2022, ELK 8.12. I am trying to install everything on the 1 box. Steps for far Installed Elasticsearch using Elasticsearch.bat. This creates the elastic passwo…

---

## [Deploy ELK platinum in on-prem server](https://discuss.elastic.co/t/deploy-elk-platinum-in-on-prem-server/284452)

<div class="topic-metadata">

**Author:** [@EdisonDevadoss](https://discuss.elastic.co/u/EdisonDevadoss)\
**Replies:** 5\
**Last updated:** [September 21, 2021, 5:00am UTC](https://discuss.elastic.co/t/deploy-elk-platinum-in-on-prem-server/284452 "2021-09-21T05:00:01Z")

</div>

Hi Team, If we go for platinum subscription for ELK stack, can we deploy it on-prem server? I need your help.

---

## [Is it possible to use split filter instead of grok in Logstash to chop message?](https://discuss.elastic.co/t/is-it-possible-to-use-split-filter-instead-of-grok-in-logstash-to-chop-message/136878)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 5\
**Last updated:** [June 22, 2018, 4:36am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-split-filter-instead-of-grok-in-logstash-to-chop-message/136878 "2018-06-22T04:36:57Z")

</div>

Hi, I am using ELK GA 6.3. I am using Logstash to read data from Kafka. My Kafka message is like; \<Jun 02, 2018 12:04:41:531 AM\> \<data1\> \<data2\> \<data3\\n\> I am using the below grok pattern to split data; grok { matc…

---

## [ElasticSearch 6.0 beta2](https://discuss.elastic.co/t/elasticsearch-6-0-beta2/99176)

<div class="topic-metadata">

**Author:** [@questar](https://discuss.elastic.co/u/questar)\
**Replies:** 5\
**Last updated:** [September 6, 2017, 1:17pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-beta2/99176 "2017-09-06T13:17:45Z")

</div>

When will maven have the update for beta2 ? Thanks

---

## [Elasticseach out of memory issue](https://discuss.elastic.co/t/elasticseach-out-of-memory-issue/57118)

<div class="topic-metadata">

**Author:** [@vikas\_J](https://discuss.elastic.co/u/vikas_J)\
**Replies:** 5\
**Last updated:** [August 4, 2016, 6:33am UTC](https://discuss.elastic.co/t/elasticseach-out-of-memory-issue/57118 "2016-08-04T06:33:07Z")

</div>

I have elasticsearch 2.3.4 version installed. However i find that it goes out of memory quite often. The ES\_HEAP\_SIZE is set to 1.5gb(which is 50% of available RAM). I found out that it could be because of the setting "i…

---

## [How to make full text search for data range?](https://discuss.elastic.co/t/how-to-make-full-text-search-for-data-range/47922)

<div class="topic-metadata">

**Author:** [@bhavani](https://discuss.elastic.co/u/bhavani)\
**Replies:** 5\
**Last updated:** [April 20, 2016, 5:15pm UTC](https://discuss.elastic.co/t/how-to-make-full-text-search-for-data-range/47922 "2016-04-20T17:15:43Z")

</div>

Hi, We are trying to make full text search on a string , it is searching entire collection and returning the data. Similarly we are trying to make full search on date range using REST call, but it is not giving any p…

---

## [Running an ESQL query periodally and output the result into an index](https://discuss.elastic.co/t/running-an-esql-query-periodally-and-output-the-result-into-an-index/351481)

<div class="topic-metadata">

**Author:** [@lizozom](https://discuss.elastic.co/u/lizozom)\
**Replies:** 8\
**Last updated:** [January 24, 2024, 8:52pm UTC](https://discuss.elastic.co/t/running-an-esql-query-periodally-and-output-the-result-into-an-index/351481 "2024-01-24T20:52:38Z")

</div>

I have built an ESQL query that calculates today's inventory of products. I want to run it daily and output the result into a different index. I thought of using Transforms, could I use an ESQL query there? If not, I …

---

## [Logstash loading template, but not applying it?](https://discuss.elastic.co/t/logstash-loading-template-but-not-applying-it/235207)

<div class="topic-metadata">

**Author:** [@AndyS](https://discuss.elastic.co/u/AndyS)\
**Replies:** 8\
**Last updated:** [June 1, 2020, 11:14pm UTC](https://discuss.elastic.co/t/logstash-loading-template-but-not-applying-it/235207 "2020-06-01T23:14:45Z")

</div>

I'm having a problem where logstash is loading a template file, but either it's not applying it, or this isn't being communicated to Elastic. (This is using Security Onion, which has logstash in Docker) I have a logsta…

---

## [Buckets\_path parameter percents not accepting a double value](https://discuss.elastic.co/t/buckets-path-parameter-percents-not-accepting-a-double-value/125798)

<div class="topic-metadata">

**Author:** [@saii](https://discuss.elastic.co/u/saii)\
**Replies:** 8\
**Last updated:** [March 28, 2018, 4:22pm UTC](https://discuss.elastic.co/t/buckets-path-parameter-percents-not-accepting-a-double-value/125798 "2018-03-28T16:22:05Z")

</div>

I have written a watch program which uses percentile to calculate the 90th percentile of the aggregated data and when plotted against threshold,it should alert if its crossing the threshold. The percents parameter conta…

---

## [PagedBytesIndexFieldData cannot be cast to IndexNumericFieldData](https://discuss.elastic.co/t/pagedbytesindexfielddata-cannot-be-cast-to-indexnumericfielddata/15227)

<div class="topic-metadata">

**Author:** [@VB1](https://discuss.elastic.co/u/VB1)\
**Replies:** 8\
**Last updated:** [January 20, 2014, 9:18pm UTC](https://discuss.elastic.co/t/pagedbytesindexfielddata-cannot-be-cast-to-indexnumericfielddata/15227 "2014-01-20T21:18:54Z")

</div>

Hello all, I have a weird problem. When i try to run facet using following query I get error that PagedBytesIndexFieldData cannot be cast to org.elasticsearch.index.fielddata.IndexNumericFieldData\] But my fie…

---

## ["best\_compression" not compressing the data](https://discuss.elastic.co/t/best-compression-not-compressing-the-data/318320)

<div class="topic-metadata">

**Author:** [@ashika](https://discuss.elastic.co/u/ashika)\
**Replies:** 2\
**Last updated:** [November 7, 2022, 2:27pm UTC](https://discuss.elastic.co/t/best-compression-not-compressing-the-data/318320 "2022-11-07T14:27:25Z")

</div>

Hello team, I was applying "best\_compression" compressing type to my existing elasticsearch indices, but I don't see any significant reduction happening in the indices size. The steps followed were : Close the indices …

---

## [To get the data of Index size into Kibana Dashboards](https://discuss.elastic.co/t/to-get-the-data-of-index-size-into-kibana-dashboards/310136)

<div class="topic-metadata">

**Author:** [@anushyaadam](https://discuss.elastic.co/u/anushyaadam)\
**Replies:** 2\
**Last updated:** [August 9, 2022, 8:14am UTC](https://discuss.elastic.co/t/to-get-the-data-of-index-size-into-kibana-dashboards/310136 "2022-08-09T08:14:25Z")

</div>

Hi Team, We have a request for you.. we need live dashboard with each application volumes per index in Kibana(7.15.1) Firstly ,we would like to get to know about the volume of each and every indices in a unique dashboa…

---

## [Kibana and Azure SSO](https://discuss.elastic.co/t/kibana-and-azure-sso/267336)

<div class="topic-metadata">

**Author:** [@Gerrard](https://discuss.elastic.co/u/Gerrard)\
**Replies:** 2\
**Last updated:** [March 17, 2021, 2:09pm UTC](https://discuss.elastic.co/t/kibana-and-azure-sso/267336 "2021-03-17T14:09:43Z")

</div>

I'm trying to get Kibana (on elastic.co) working with Azure SSO. I've followed numerous "guides" on this, and ADFS and setting up SSO in general, and just can't figure it out. We're using elasticsearch 7.11.1, and getti…

---

## [Connecting MySql to Logstash Using JDBC](https://discuss.elastic.co/t/connecting-mysql-to-logstash-using-jdbc/232403)

<div class="topic-metadata">

**Author:** [@Jasmin](https://discuss.elastic.co/u/Jasmin)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 10:37am UTC](https://discuss.elastic.co/t/connecting-mysql-to-logstash-using-jdbc/232403 "2020-05-13T10:37:32Z")

</div>

Hi , this is my first time working on logstash , i am trying to send data from mysql to elasticsearch using logstash , but as a first step i specify json\_line output This is my output when running /usr/share/logstash…

---

## [Connecting Kibana to Elasticsearch over HTTPS: unsupported certificate purpose](https://discuss.elastic.co/t/connecting-kibana-to-elasticsearch-over-https-unsupported-certificate-purpose/186907)

<div class="topic-metadata">

**Author:** [@Chris\_Murray](https://discuss.elastic.co/u/Chris_Murray)\
**Replies:** 2\
**Last updated:** [June 21, 2019, 11:13pm UTC](https://discuss.elastic.co/t/connecting-kibana-to-elasticsearch-over-https-unsupported-certificate-purpose/186907 "2019-06-21T23:13:27Z")

</div>

Hey folks, I'm in the process of setting up my first larger ES cluster, and first time going full HTTPS across the board. Bit of background: 40ish ES nodes, with 2 Kibana nodes. Using an internal root CA / Intermedia…

---

## [Logstash service will not run (Ubuntu server 14.04)](https://discuss.elastic.co/t/logstash-service-will-not-run-ubuntu-server-14-04/44719)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 2\
**Last updated:** [March 18, 2016, 10:53am UTC](https://discuss.elastic.co/t/logstash-service-will-not-run-ubuntu-server-14-04/44719 "2016-03-18T10:53:59Z")

</div>

Hi, I'm trying out the ELK stack on an environment of 1 ELK server, two client servers and one laptop to access Kabina. I have followed https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-lo…

---

## [Elastic Rollup Job , Error while creating visualization](https://discuss.elastic.co/t/elastic-rollup-job-error-while-creating-visualization/237577)

<div class="topic-metadata">

**Author:** [@brijeshpallath](https://discuss.elastic.co/u/brijeshpallath)\
**Replies:** 0\
**Last updated:** [June 18, 2020, 7:10am UTC](https://discuss.elastic.co/t/elastic-rollup-job-error-while-creating-visualization/237577 "2020-06-18T07:10:53Z")

</div>

Hi I have created rollup Job as per the specification given below. This will roll up data on an hourly basis. I have also created a rollup index pattern combining the rollup index and source/original index pattern. Pl…

---

## [Index size mismatch in Kibana and linux console](https://discuss.elastic.co/t/index-size-mismatch-in-kibana-and-linux-console/149048)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 0\
**Last updated:** [September 19, 2018, 3:12am UTC](https://discuss.elastic.co/t/index-size-mismatch-in-kibana-and-linux-console/149048 "2018-09-19T03:12:39Z")

</div>

I am using Elasticsearch 6.3.2 to index a bunch of log file which are around 1.8 to 2 GB in size. The disk size shown in Kibana are close the expected size (size of input) but a du -sh on the data folder via the console …

---

## [Any plans to support JVM Heap and GC stats using the Java APM agent?](https://discuss.elastic.co/t/any-plans-to-support-jvm-heap-and-gc-stats-using-the-java-apm-agent/160787)

<div class="topic-metadata">

**Author:** [@Jeremy\_Freedman](https://discuss.elastic.co/u/Jeremy_Freedman)\
**Replies:** 4\
**Last updated:** [January 1, 2019, 9:25am UTC](https://discuss.elastic.co/t/any-plans-to-support-jvm-heap-and-gc-stats-using-the-java-apm-agent/160787 "2019-01-01T09:25:27Z")

</div>

Hi, I was wondering if there are any plans to support monitoring the size of each generation in java's heap and the cpu time spent in gc using the Java APM agent? I've used other APM products in the past that monitor t…

---

## [Custom Type Field Causes Multiple Types Error](https://discuss.elastic.co/t/custom-type-field-causes-multiple-types-error/138107)

<div class="topic-metadata">

**Author:** [@Darin\_Hensley](https://discuss.elastic.co/u/Darin_Hensley)\
**Replies:** 4\
**Last updated:** [July 14, 2018, 2:10am UTC](https://discuss.elastic.co/t/custom-type-field-causes-multiple-types-error/138107 "2018-07-14T02:10:31Z")

</div>

I am new to Elastic search. Following the article https://www.elastic.co/guide/en/elasticsearch/reference/6.x/removal-of-types.html#\_custom\_type\_field I made a index that could have multiple types using the type keyword. …

---

## [Matching date filter with Month in UPPERCASE](https://discuss.elastic.co/t/matching-date-filter-with-month-in-uppercase/126538)

<div class="topic-metadata">

**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\
**Replies:** 4\
**Last updated:** [April 4, 2018, 12:06pm UTC](https://discuss.elastic.co/t/matching-date-filter-with-month-in-uppercase/126538 "2018-04-04T12:06:14Z")

</div>

Hi, The date-timestamp column "time" in my log looks like: 09-FEB-18 05.32.53.045598000 AM With the below configuration in logstash, I am getting dateparse failure: date { match =\> \[ "time", "dd-MMM-yy HH.mm.ss.SSSS…

---

## [Redis cluster can communicate with logstash cluster](https://discuss.elastic.co/t/redis-cluster-can-communicate-with-logstash-cluster/59181)

<div class="topic-metadata">

**Author:** [@shashant](https://discuss.elastic.co/u/shashant)\
**Replies:** 4\
**Last updated:** [August 30, 2016, 4:15am UTC](https://discuss.elastic.co/t/redis-cluster-can-communicate-with-logstash-cluster/59181 "2016-08-30T04:15:50Z")

</div>

Hi, i want to communication b/w redis cluster and logstash cluster. is it possible is yes the how.

---

## [Heap Allocation for Machines with 100GB+ Ram](https://discuss.elastic.co/t/heap-allocation-for-machines-with-100gb-ram/12208)

<div class="topic-metadata">

**Author:** [@Murad\_K](https://discuss.elastic.co/u/Murad_K)\
**Replies:** 4\
**Last updated:** [June 5, 2013, 8:17am UTC](https://discuss.elastic.co/t/heap-allocation-for-machines-with-100gb-ram/12208 "2013-06-05T08:17:22Z")

</div>

I've read a lot of different guides for how much memory to allocate to ElasticSearch, and everything points to 50% of available system memory (with the rest left over for caching and whatnot). A post to the group in …

---

## [DatabaseError: driver.new.connect returned nil \>\> Logstash doesn´t connect to Postgresql Database](https://discuss.elastic.co/t/databaseerror-driver-new-connect-returned-nil-logstash-doesn-t-connect-to-postgresql-database/271288)

<div class="topic-metadata">

**Author:** [@Eng.Lucy](https://discuss.elastic.co/u/Eng.Lucy)\
**Replies:** 3\
**Last updated:** [May 17, 2021, 4:39pm UTC](https://discuss.elastic.co/t/databaseerror-driver-new-connect-returned-nil-logstash-doesn-t-connect-to-postgresql-database/271288 "2021-05-17T16:39:02Z")

</div>

I try to connect Logstash to Postgresql. This database is located in a remote server and Logstash runs in a docker container. My logstash.conf is: # input{ jdbc{ jdbc\_connection\_string =\> "jdbc:postgresql://000.00.0…

---

## [Symantec Message Gateway Multiline Logs Parsing](https://discuss.elastic.co/t/symantec-message-gateway-multiline-logs-parsing/267455)

<div class="topic-metadata">

**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\
**Replies:** 3\
**Last updated:** [March 18, 2021, 7:02pm UTC](https://discuss.elastic.co/t/symantec-message-gateway-multiline-logs-parsing/267455 "2021-03-18T19:02:43Z")

</div>

Hi Community, I've multiline logs of Symantec message gateway (email server). {"port":49542,"host":"10.10.x.x","type":"smg","message":"\<158\>Mar 2 16:21:59 smtp01 bmserver: 1614684119|0a0a5199-534c370000006c49-29-603e…

---

## [How do I bundle logs by request?](https://discuss.elastic.co/t/how-do-i-bundle-logs-by-request/136304)

<div class="topic-metadata">

**Author:** [@Joshua\_Fox](https://discuss.elastic.co/u/Joshua_Fox)\
**Replies:** 3\
**Last updated:** [June 19, 2018, 7:11pm UTC](https://discuss.elastic.co/t/how-do-i-bundle-logs-by-request/136304 "2018-06-19T19:11:18Z")

</div>

In Stackdriver Log Viewer, all log-lines within a give HTTP request (in our Google AppEngine app) appear together in a single section. This is very useful in tracking behavior inside a single HTTP request. How do we do…

---

## [Problem about plugins](https://discuss.elastic.co/t/problem-about-plugins/93732)

<div class="topic-metadata">

**Author:** [@geff](https://discuss.elastic.co/u/geff)\
**Replies:** 3\
**Last updated:** [July 29, 2017, 12:02am UTC](https://discuss.elastic.co/t/problem-about-plugins/93732 "2017-07-29T00:02:41Z")

</div>

Hello, we used this plugin since version 4.4 ( https://github.com/sbeyn/kibana-plugin-traffic-sg ) but now, with the version 5.5, it does not work anymore : Error: Uncaught TypeError: webpack\_require(...).register i…

---

## [Elasticsearch 5.1.1 \_suggest not working with mapping](https://discuss.elastic.co/t/elasticsearch-5-1-1--suggest-not-working-with-mapping/73598)

<div class="topic-metadata">

**Author:** [@Shail\_Patel](https://discuss.elastic.co/u/Shail_Patel)\
**Replies:** 0\
**Last updated:** [February 1, 2017, 11:33pm UTC](https://discuss.elastic.co/t/elasticsearch-5-1-1--suggest-not-working-with-mapping/73598 "2017-02-01T23:33:41Z")

</div>

Here is the mapping I have: { "ft\_autocomplete\_v2" : { "mappings" : { "ft" : { "properties" : { "nameSuggest" : { "properties" : { "input" : { "ty…

---

## [How to check the CPU number from metricbeat?](https://discuss.elastic.co/t/how-to-check-the-cpu-number-from-metricbeat/68803)

<div class="topic-metadata">

**Author:** [@sitanxin](https://discuss.elastic.co/u/sitanxin)\
**Replies:** 3\
**Last updated:** [December 13, 2016, 10:23am UTC](https://discuss.elastic.co/t/how-to-check-the-cpu-number-from-metricbeat/68803 "2016-12-13T10:23:57Z")

</div>

Hi All, it maybe a strange question. But how to get the number of CPU via metricbeat?

---

## [Imap input gives weird error](https://discuss.elastic.co/t/imap-input-gives-weird-error/290671)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 6\
**Last updated:** [December 8, 2021, 5:16pm UTC](https://discuss.elastic.co/t/imap-input-gives-weird-error/290671 "2021-12-08T17:16:38Z")

</div>

Hello, I want to run imap plugin to load some reporting mails into Elasticsearch. I have it configured as the following: input { imap { check\_interval =\> "10" host =\> "host" port =\> "995" user =\> "em…

---

## [Accessing Unique Token or Term ID](https://discuss.elastic.co/t/accessing-unique-token-or-term-id/35947)

<div class="topic-metadata">

**Author:** [@neal](https://discuss.elastic.co/u/neal)\
**Replies:** 6\
**Last updated:** [December 1, 2015, 6:04pm UTC](https://discuss.elastic.co/t/accessing-unique-token-or-term-id/35947 "2015-12-01T18:04:37Z")

</div>

Does ES assign a token id to each token / term? I imagine that it does. Is there any way to get the token ID? I've tried through the term vector API, but it seems that IDs are not a valid field. So, I'd like to …

---

## [Ingesting syslog from NetApp ONTAP](https://discuss.elastic.co/t/ingesting-syslog-from-netapp-ontap/328170)

<div class="topic-metadata">

**Author:** [@diselkgd7](https://discuss.elastic.co/u/diselkgd7)\
**Replies:** 1\
**Last updated:** [March 22, 2023, 12:58am UTC](https://discuss.elastic.co/t/ingesting-syslog-from-netapp-ontap/328170 "2023-03-22T00:58:51Z")

</div>

I've configured our storage to send syslog to filebeat but when I examine what's been ingested in kibana - the whole syslog message is crammed in one "message" field while the rest of the 26 fields have values relating t…

---

## [Can I have one Index per User?](https://discuss.elastic.co/t/can-i-have-one-index-per-user/209248)

<div class="topic-metadata">

**Author:** [@saiphani\_jupudi](https://discuss.elastic.co/u/saiphani_jupudi)\
**Replies:** 1\
**Last updated:** [November 25, 2019, 12:36pm UTC](https://discuss.elastic.co/t/can-i-have-one-index-per-user/209248 "2019-11-25T12:36:57Z")

</div>

Hi, This is my use case. We are from analytics domain. We track the traffic coming to website & generate some reports with the collected data. We are planning to assign one index per user. Currently we have 33000 activ…

---

## [How to validated index templates](https://discuss.elastic.co/t/how-to-validated-index-templates/192313)

<div class="topic-metadata">

**Author:** [@TeraInferno](https://discuss.elastic.co/u/TeraInferno)\
**Replies:** 1\
**Last updated:** [July 26, 2019, 12:05am UTC](https://discuss.elastic.co/t/how-to-validated-index-templates/192313 "2019-07-26T00:05:28Z")

</div>

Hello, I am trying to use multiple index templates in elasticsearch and need to verify that the final index template, after they are merged together by elasticsearch, is what I was aiming for. For example, if I add the …

---

## [Copy field and convert to lowercase](https://discuss.elastic.co/t/copy-field-and-convert-to-lowercase/136301)

<div class="topic-metadata">

**Author:** [@atom](https://discuss.elastic.co/u/atom)\
**Replies:** 1\
**Last updated:** [June 20, 2018, 1:47pm UTC](https://discuss.elastic.co/t/copy-field-and-convert-to-lowercase/136301 "2018-06-20T13:47:02Z")

</div>

Hi There, in all of my indices i have a field that i want to copy to a new field and convert it to lowercase. Copying was easy: POST /INDEX-2018.06.07/\_update\_by\_query?conflicts=proceed&refresh=true { "query" …

---

## [Filebeat supports binary log file input?](https://discuss.elastic.co/t/filebeat-supports-binary-log-file-input/90689)

<div class="topic-metadata">

**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\
**Replies:** 1\
**Last updated:** [June 26, 2017, 11:36am UTC](https://discuss.elastic.co/t/filebeat-supports-binary-log-file-input/90689 "2017-06-26T11:36:15Z")

</div>

Dear Filebeat team, We set up Filebeat to tail local log files. I am wondering by any chance Filebeat supports binary file format or it needs to see "\\n" as a deliminator for a new log message. Thanks! yan

---

## [When add new node in elasticsearch 5.4 old node deleted - 2](https://discuss.elastic.co/t/when-add-new-node-in-elasticsearch-5-4-old-node-deleted-2/86595)

<div class="topic-metadata">

**Author:** [@pjayramkumar](https://discuss.elastic.co/u/pjayramkumar)\
**Replies:** 1\
**Last updated:** [May 22, 2017, 4:17am UTC](https://discuss.elastic.co/t/when-add-new-node-in-elasticsearch-5-4-old-node-deleted-2/86595 "2017-05-22T04:17:39Z")

</div>

Hello I created a node via command as elasticsearch user in server here is command bin/elasticsearch -Epath.data=/usr/share/elasticsearch/data/node\_3 -Epath.logs=/var/log/elasticsearch/node\_3 -Enode.name=fan then…

---

## [How to install Elasticsearch on Kubernetes using Helm (3 nodes) and production SSL certificates](https://discuss.elastic.co/t/how-to-install-elasticsearch-on-kubernetes-using-helm-3-nodes-and-production-ssl-certificates/291433)

<div class="topic-metadata">

**Author:** [@Peter\_Schwarz](https://discuss.elastic.co/u/Peter_Schwarz)\
**Replies:** 1\
**Last updated:** [December 17, 2021, 8:05am UTC](https://discuss.elastic.co/t/how-to-install-elasticsearch-on-kubernetes-using-helm-3-nodes-and-production-ssl-certificates/291433 "2021-12-17T08:05:17Z")

</div>

Hi I am having a bad time trying to install Elasticsearch (3 nodes) on Kubernetes using HELM + Production certificates. I am using the following config: clusterName: "my-cluster" nodeGroup: "master" roles: master:…

---

## [Update the value of a field in index based on its value in another index](https://discuss.elastic.co/t/update-the-value-of-a-field-in-index-based-on-its-value-in-another-index/287952)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 2\
**Last updated:** [October 28, 2021, 9:38pm UTC](https://discuss.elastic.co/t/update-the-value-of-a-field-in-index-based-on-its-value-in-another-index/287952 "2021-10-28T21:38:57Z")

</div>

There's an index\_A that contains say about 10K docs. It has many fields like field\_1, field\_2, ...field\_n and one of the fields is product\_name. Then there's another index\_B that contains about 10 docs only and is a mas…

---

## [Find documents which is older then specified date range based on list of ids](https://discuss.elastic.co/t/find-documents-which-is-older-then-specified-date-range-based-on-list-of-ids/255843)

<div class="topic-metadata">

**Author:** [@sibasish.palo](https://discuss.elastic.co/u/sibasish.palo)\
**Replies:** 2\
**Last updated:** [November 20, 2020, 8:23am UTC](https://discuss.elastic.co/t/find-documents-which-is-older-then-specified-date-range-based-on-list-of-ids/255843 "2020-11-20T08:23:13Z")

</div>

After searching for sometime and seeing some answer not able to quite figure out the query for my requirement My requirement is i have a list of document ids, what i need to find is the documents which are older than a …

---

## [Date histogram doesn't give proper data](https://discuss.elastic.co/t/date-histogram-doesnt-give-proper-data/203305)

<div class="topic-metadata">

**Author:** [@Nikhil04](https://discuss.elastic.co/u/Nikhil04)\
**Replies:** 2\
**Last updated:** [October 12, 2019, 1:43pm UTC](https://discuss.elastic.co/t/date-histogram-doesnt-give-proper-data/203305 "2019-10-12T13:43:31Z")

</div>

Hi, I have used date histogram with 5m interval starting for the last 10 minutes as below: There is no data before 17:36:45 in my index. GET metricbeat-7.3.2/\_search { "size": 0, "query": { "bool": { "f…

---

## [Detach java agent runtime](https://discuss.elastic.co/t/detach-java-agent-runtime/191870)

<div class="topic-metadata">

**Author:** [@gajanan8086](https://discuss.elastic.co/u/gajanan8086)\
**Replies:** 2\
**Last updated:** [August 7, 2019, 11:39am UTC](https://discuss.elastic.co/t/detach-java-agent-runtime/191870 "2019-08-07T11:39:38Z")

</div>

Hi Team, I believe provision for detaching java agent from the process without restarting is quite critical. This will be one of the key feature asked during go live. I see that changing the value for "elastic.apm.activ…

---

## [Document Bailing Out Errors in Bulk Update Mode Resulting in Crashing the Entire Spark Job](https://discuss.elastic.co/t/document-bailing-out-errors-in-bulk-update-mode-resulting-in-crashing-the-entire-spark-job/137163)

<div class="topic-metadata">

**Author:** [@rajivchodisetti](https://discuss.elastic.co/u/rajivchodisetti)\
**Replies:** 2\
**Last updated:** [June 27, 2018, 5:44am UTC](https://discuss.elastic.co/t/document-bailing-out-errors-in-bulk-update-mode-resulting-in-crashing-the-entire-spark-job/137163 "2018-06-27T05:44:15Z")

</div>

HI Guys, First of all will explain my use case and the problem that am facing right now, We have a use case where we have modeled the data as time-series indices i.e one index for each month and again each monthly inde…

---

## [Copying file contents to another file using filebeat](https://discuss.elastic.co/t/copying-file-contents-to-another-file-using-filebeat/129126)

<div class="topic-metadata">

**Author:** [@Yusuff\_Sodiq](https://discuss.elastic.co/u/Yusuff_Sodiq)\
**Replies:** 2\
**Last updated:** [April 23, 2018, 5:15pm UTC](https://discuss.elastic.co/t/copying-file-contents-to-another-file-using-filebeat/129126 "2018-04-23T17:15:01Z")

</div>

I would like to use the filebeat module to pull the contents of a file in one server to a file in another server. I need help on how to do this if it is possible.

---

## [Elastic Stack on Azure Marketplace - Fail to access kibana IP address](https://discuss.elastic.co/t/elastic-stack-on-azure-marketplace-fail-to-access-kibana-ip-address/114109)

<div class="topic-metadata">

**Author:** [@Doron\_Raz](https://discuss.elastic.co/u/Doron_Raz)\
**Replies:** 2\
**Last updated:** [January 14, 2018, 11:56pm UTC](https://discuss.elastic.co/t/elastic-stack-on-azure-marketplace-fail-to-access-kibana-ip-address/114109 "2018-01-14T23:56:15Z")

</div>

After installing this solution template, can't access the provided IP on port 5601. Elastic Stack - (Elasticsearch, Kibana, X-Pack) Also followed this demo: Elastic Stack on Azure deployment demo: Azure Marketplace W…

---

## [Create Visualize "Data Table" with join data](https://discuss.elastic.co/t/create-visualize-data-table-with-join-data/107588)

<div class="topic-metadata">

**Author:** [@karmax](https://discuss.elastic.co/u/karmax)\
**Replies:** 2\
**Last updated:** [November 15, 2017, 10:59am UTC](https://discuss.elastic.co/t/create-visualize-data-table-with-join-data/107588 "2017-11-15T10:59:09Z")

</div>

Hi all, I write log in elastic with logstash and I get some data from logfile and some data from mysql with jdbc query. Now I need to concat this data. logfile contain this fields: ipaddress, timestamp, url mysql…

---

## [Filebeat.idle\_timeout VS output.elasticsearch.flush\_interval](https://discuss.elastic.co/t/filebeat-idle-timeout-vs-output-elasticsearch-flush-interval/96638)

<div class="topic-metadata">

**Author:** [@mguiwin](https://discuss.elastic.co/u/mguiwin)\
**Replies:** 2\
**Last updated:** [August 11, 2017, 1:44pm UTC](https://discuss.elastic.co/t/filebeat-idle-timeout-vs-output-elasticsearch-flush-interval/96638 "2017-08-11T13:44:58Z")

</div>

Hi, Given the following configuration, filebeat.spool\_size: 786432 filebeat.idle\_timeout: 30s output.elasticsearch: enabled: true hosts: \["elastic-node1:9200", "elastic-node2:9200", "elastic-node3:9200"\] ... w…

[Previous page](https://discuss.elastic.co/top.md?page=1282&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1284&per_page=50&period=all)
