# Top

**URL:** https://discuss.elastic.co/top.md?page=1300&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1301

---

## [UTF-8 issue when patterns are loading](https://discuss.elastic.co/t/utf-8-issue-when-patterns-are-loading/25256)

<div class="topic-metadata">

**Author:** [@incogniro](https://discuss.elastic.co/u/incogniro)\
**Replies:** 1\
**Last updated:** [July 10, 2015, 8:34am UTC](https://discuss.elastic.co/t/utf-8-issue-when-patterns-are-loading/25256 "2015-07-10T08:34:37Z")

</div>

The pattern files which are read have not been changed in some time. Here is the end of the debug output: {:timestamp=\>"2015-07-09T18:52:30.171000+0100", :message=\>"Adding pattern", "}"=\>"", :level=\>:info, :file=\>"/Pro…

---

## [Font size and colors in Lens bar charts](https://discuss.elastic.co/t/font-size-and-colors-in-lens-bar-charts/295694)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 2\
**Last updated:** [January 28, 2022, 2:32pm UTC](https://discuss.elastic.co/t/font-size-and-colors-in-lens-bar-charts/295694 "2022-01-28T14:32:54Z")

</div>

Hello, This is a pretty basic question, but I cannot find the answers in the Kibana documentation. I have a Lens bar charts visualization where I want to change the font size and colors of the bar legends and axis titl…

---

## [How does elasticsearch store its data \[ multi node architecture \]](https://discuss.elastic.co/t/how-does-elasticsearch-store-its-data-multi-node-architecture/251056)

<div class="topic-metadata">

**Author:** [@Youssef\_Blaada](https://discuss.elastic.co/u/Youssef_Blaada)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 7:58am UTC](https://discuss.elastic.co/t/how-does-elasticsearch-store-its-data-multi-node-architecture/251056 "2020-10-06T07:58:15Z")

</div>

Hi all, I'm a newbie in elasticsearch, and i have a question about how does elasticsearch store its data in a multi node architecture, what i know is each node store its data on the specified data path and if we choose …

---

## [Elasticsearch 7.2.1 startup failed load search guard plugin with java.lang.ClassNotFoundException: io.netty.internal.tcnative.SSLPrivateKeyMethod](https://discuss.elastic.co/t/elasticsearch-7-2-1-startup-failed-load-search-guard-plugin-with-java-lang-classnotfoundexception-io-netty-internal-tcnative-sslprivatekeymethod/197776)

<div class="topic-metadata">

**Author:** [@Rachangouda](https://discuss.elastic.co/u/Rachangouda)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 8:09pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-1-startup-failed-load-search-guard-plugin-with-java-lang-classnotfoundexception-io-netty-internal-tcnative-sslprivatekeymethod/197776 "2019-09-12T20:09:30Z")

</div>

Hi, I have followed below steps to start elasticsearch 7.2.1 with search guard version-36.1.0 as mentioned in https://docs.search-guard.com/latest/search-guard-versions created elasticsearch image from elasticsearch-7…

---

## [Compound sub-files must have a valid codec header and footer: file is too small (0 bytes)](https://discuss.elastic.co/t/compound-sub-files-must-have-a-valid-codec-header-and-footer-file-is-too-small-0-bytes/194936)

<div class="topic-metadata">

**Author:** [@liulinisgood](https://discuss.elastic.co/u/liulinisgood)\
**Replies:** 2\
**Last updated:** [August 14, 2019, 8:13am UTC](https://discuss.elastic.co/t/compound-sub-files-must-have-a-valid-codec-header-and-footer-file-is-too-small-0-bytes/194936 "2019-08-14T08:13:38Z")

</div>

I met a error for a long time, it occurs at 23:10 every day , I am very puzzled. I don't find any period run task . ES version: 5.5.3 os: centos7 3.10.0-327.el7.x86\_64 disk: ssd jdk8, g1 \[2019-08-11T23:08:20,178\]\[WA…

---

## [How to remove beat field and host field](https://discuss.elastic.co/t/how-to-remove-beat-field-and-host-field/155334)

<div class="topic-metadata">

**Author:** [@luzhzhsoft](https://discuss.elastic.co/u/luzhzhsoft)\
**Replies:** 2\
**Last updated:** [November 5, 2018, 6:03am UTC](https://discuss.elastic.co/t/how-to-remove-beat-field-and-host-field/155334 "2018-11-05T06:03:20Z")

</div>

My output contains beat ，host ，@timestamp @metadat filed as default.I want remove beat ,host fields from input.I define processor ,but it not work for beat and host filelds.I do not want to use pipeline ,because I hav…

---

## [Display a picture in markdown visualization](https://discuss.elastic.co/t/display-a-picture-in-markdown-visualization/139882)

<div class="topic-metadata">

**Author:** [@pdombey](https://discuss.elastic.co/u/pdombey)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 7:31am UTC](https://discuss.elastic.co/t/display-a-picture-in-markdown-visualization/139882 "2018-07-18T07:31:12Z")

</div>

Hi all, Does anybody know where i have to store my own pictures in kibana directory, in order to be able to display them in a markdown? if i code the path of the file, preceded by the kbana adr and port , that doesn't…

---

## [Counting an event in multiple buckets](https://discuss.elastic.co/t/counting-an-event-in-multiple-buckets/132891)

<div class="topic-metadata">

**Author:** [@alexcorr](https://discuss.elastic.co/u/alexcorr)\
**Replies:** 2\
**Last updated:** [May 23, 2018, 6:33am UTC](https://discuss.elastic.co/t/counting-an-event-in-multiple-buckets/132891 "2018-05-23T06:33:07Z")

</div>

Hi, Suppose I have events (telephone call logs) where each event has: start timestamp end timestamp destination id ... I can plot a # of calls distribution along a time interval just by defining the Y-axis as a Count…

---

## [How to do elasticsearch data comparison](https://discuss.elastic.co/t/how-to-do-elasticsearch-data-comparison/107061)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 2\
**Last updated:** [November 14, 2017, 3:09pm UTC](https://discuss.elastic.co/t/how-to-do-elasticsearch-data-comparison/107061 "2017-11-14T15:09:49Z")

</div>

Sir, I have index named security, where i indexed a website log. I need to create a query for calculating how many people connected to site this month and last month, then compare the count . Is there a way to do com…

---

## [Using ElasticSearch how db for a e-commerce](https://discuss.elastic.co/t/using-elasticsearch-how-db-for-a-e-commerce/13849)

<div class="topic-metadata">

**Author:** [@Tiago\_Rodrigues](https://discuss.elastic.co/u/Tiago_Rodrigues)\
**Replies:** 2\
**Last updated:** [October 7, 2013, 12:11pm UTC](https://discuss.elastic.co/t/using-elasticsearch-how-db-for-a-e-commerce/13849 "2013-10-07T12:11:29Z")

</div>

Hi guys, I want to make an e-commerce using ElasticSearch as a database in PHP, I have some experience with dbs in mysql, but I want to use ElasticSearch as a single database for many reasons. My question is, c…

---

## [Fscrawler image file text extraction](https://discuss.elastic.co/t/fscrawler-image-file-text-extraction/279538)

<div class="topic-metadata">

**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\
**Replies:** 6\
**Last updated:** [July 25, 2021, 5:50pm UTC](https://discuss.elastic.co/t/fscrawler-image-file-text-extraction/279538 "2021-07-25T17:50:54Z")

</div>

Hello! I use FScrawler 2.7 on Windows 7 to ingest files content into Elastic 7.13 node on centos 7. It works really greate for .pdf and .docx extensions, but not for imge files such as .jpg or .png and .txt files. My…

---

## [Incorrect number of shard, what is the possible reason?](https://discuss.elastic.co/t/incorrect-number-of-shard-what-is-the-possible-reason/239582)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 6\
**Last updated:** [July 2, 2020, 8:36am UTC](https://discuss.elastic.co/t/incorrect-number-of-shard-what-is-the-possible-reason/239582 "2020-07-02T08:36:23Z")

</div>

Hello, The default number of shard is 5 in the yml setting. I also didn't specify any template for all logstash config. Most of the index are with correct number of shards, However, some index appears to be only 1 pri…

---

## [Shards unassigned after datanode addition](https://discuss.elastic.co/t/shards-unassigned-after-datanode-addition/191130)

<div class="topic-metadata">

**Author:** [@viratag26](https://discuss.elastic.co/u/viratag26)\
**Replies:** 6\
**Last updated:** [July 19, 2019, 7:35am UTC](https://discuss.elastic.co/t/shards-unassigned-after-datanode-addition/191130 "2019-07-19T07:35:35Z")

</div>

Hi, I have added a data node to my cluster. Shards are unassigned after the that. 2 primary and 2 replica shards are shown to be UNASSIGNED. Output of GET { "index": "other-administrator-2017.03.09", "shard": 3, …

---

## [Jdbc input plugin read data multiple times from database](https://discuss.elastic.co/t/jdbc-input-plugin-read-data-multiple-times-from-database/184314)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 6\
**Last updated:** [June 8, 2019, 8:54pm UTC](https://discuss.elastic.co/t/jdbc-input-plugin-read-data-multiple-times-from-database/184314 "2019-06-08T20:54:23Z")

</div>

Hi All I am using JDBC input plugin, i have 10,000 records in Database I am setting jdbc\_page\_size as 500 It goes in loop 20, to get all the 10,000 records for this, i schedule this as schedule =\> \*/2 \* \* \* \* With …

---

## [Using custom target for geoip filter, how to update Elasticsearch template?](https://discuss.elastic.co/t/using-custom-target-for-geoip-filter-how-to-update-elasticsearch-template/125442)

<div class="topic-metadata">

**Author:** [@omeugdoj](https://discuss.elastic.co/u/omeugdoj)\
**Replies:** 6\
**Last updated:** [March 24, 2018, 6:46pm UTC](https://discuss.elastic.co/t/using-custom-target-for-geoip-filter-how-to-update-elasticsearch-template/125442 "2018-03-24T18:46:59Z")

</div>

I am enriching my firewall logs with GeoIP information for the source and destination IPs. Because of that, I have to use custom target field names: src\_geoip and dst\_geoip. This is the relevant part for my filter: …

---

## [Calculate time difference between two log lines - Logstash](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-logstash/292284)

<div class="topic-metadata">

**Author:** [@giancringo](https://discuss.elastic.co/u/giancringo)\
**Replies:** 4\
**Last updated:** [December 22, 2021, 2:56pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-logstash/292284 "2021-12-22T14:56:34Z")

</div>

Hello, I'm looking for a solution to calculate the difference between two time on two different log lines as below: 2020-06-11 15:31:22,817 \[http-8080-0\] INFO it.example.sign.sign.SignTool - \[TYPE\] trackingID: x12e65…

---

## [\[ERROR\]\[logstash.pipeline\] Error registering plugin when sending cloudwatch logs to my elastic cloud](https://discuss.elastic.co/t/error-logstash-pipeline-error-registering-plugin-when-sending-cloudwatch-logs-to-my-elastic-cloud/188401)

<div class="topic-metadata">

**Author:** [@rhader](https://discuss.elastic.co/u/rhader)\
**Replies:** 4\
**Last updated:** [July 1, 2019, 8:42pm UTC](https://discuss.elastic.co/t/error-logstash-pipeline-error-registering-plugin-when-sending-cloudwatch-logs-to-my-elastic-cloud/188401 "2019-07-01T20:42:41Z")

</div>

I am running logstash v6.8.1 on an aws ec2 linux 2 ami instance. I have installed logstash successfully. I am using logstash to get logs from aws cloudwatch using this plugin https://github.com/lukewaite/logstash-input-…

---

## [Is it possible to move .fdt file, to external disk?](https://discuss.elastic.co/t/is-it-possible-to-move-fdt-file-to-external-disk/167139)

<div class="topic-metadata">

**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\
**Replies:** 4\
**Last updated:** [February 8, 2019, 11:39am UTC](https://discuss.elastic.co/t/is-it-possible-to-move-fdt-file-to-external-disk/167139 "2019-02-08T11:39:38Z")

</div>

Hi 70-80% of the storage use for my indices are the Stored Fields. - that is, the .fdt files. I am running in the cloud, and this becomes expensive, since I need quite large machines to contain the indices. The total …

---

## [Get rid of Dashboard name in the browser title](https://discuss.elastic.co/t/get-rid-of-dashboard-name-in-the-browser-title/133248)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 4\
**Last updated:** [May 25, 2018, 3:41pm UTC](https://discuss.elastic.co/t/get-rid-of-dashboard-name-in-the-browser-title/133248 "2018-05-25T15:41:38Z")

</div>

Hi, I don't want dashboard name in the title. I want title to be static. I changed title to "myTitle" but it prefix the dashboard-name. Please suggest how to get rid of Dashbiard name? br, Sunil.

---

## [Inject extra fields into metricbeat stats](https://discuss.elastic.co/t/inject-extra-fields-into-metricbeat-stats/93917)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 4\
**Last updated:** [July 21, 2017, 9:21am UTC](https://discuss.elastic.co/t/inject-extra-fields-into-metricbeat-stats/93917 "2017-07-21T09:21:59Z")

</div>

Hi Elastic Team, I've been reading about creating a beat and creating metricsets for metricbeat but would like your advise on creating extra fields. What I would like to do is to add one extra field such as datacente…

---

## [Elapsed filter inquiry](https://discuss.elastic.co/t/elapsed-filter-inquiry/90118)

<div class="topic-metadata">

**Author:** [@ibrahimsharaf](https://discuss.elastic.co/u/ibrahimsharaf)\
**Replies:** 4\
**Last updated:** [July 3, 2017, 9:34am UTC](https://discuss.elastic.co/t/elapsed-filter-inquiry/90118 "2017-07-03T09:34:59Z")

</div>

Hello, I created an elapsed filter, but I can't find the time elapsed in the stdout neither elasticsearch/kibana, I only find those lines in stdout: logstash\_1 | \[2017-06-20T15:12:48,787\]\[INFO \]\[logstash.filters.…

---

## [Nested/join scripted queries](https://discuss.elastic.co/t/nested-join-scripted-queries/51742)

<div class="topic-metadata">

**Author:** [@Fryder](https://discuss.elastic.co/u/Fryder)\
**Replies:** 4\
**Last updated:** [June 10, 2016, 3:17pm UTC](https://discuss.elastic.co/t/nested-join-scripted-queries/51742 "2016-06-10T15:17:58Z")

</div>

Hello, I have a situation to write search query in elasticsearch having data as follows {id:"p1",person:{name:"name",age:"12"},relatedTO:{id:"p2"}} {id:"p2",person:{name:"name2",age:"15"},relatedTO:{id:"p3"}} {id:"p3",…

---

## [How many redis input plugins Logstash can Handle?](https://discuss.elastic.co/t/how-many-redis-input-plugins-logstash-can-handle/40170)

<div class="topic-metadata">

**Author:** [@GustavoHoyer1](https://discuss.elastic.co/u/GustavoHoyer1)\
**Replies:** 4\
**Last updated:** [January 27, 2016, 11:24pm UTC](https://discuss.elastic.co/t/how-many-redis-input-plugins-logstash-can-handle/40170 "2016-01-27T23:24:27Z")

</div>

Hi guys, Is there a limit of how many redis input plugins can be declared on a single instance of Logstash? We've decided some time ago to split the redis keys per client/system so that every system had its own queue…

---

## [Multi\_match boolean across fields](https://discuss.elastic.co/t/multi-match-boolean-across-fields/16150)

<div class="topic-metadata">

**Author:** [@Thibaut](https://discuss.elastic.co/u/Thibaut)\
**Replies:** 4\
**Last updated:** [March 5, 2014, 1:15pm UTC](https://discuss.elastic.co/t/multi-match-boolean-across-fields/16150 "2014-03-05T13:15:11Z")

</div>

Hello, I'd like to build a specific query to ES that I can't find currently, here is what I would like to do: The query would be a \*multi\_match\* that keeps only the documents that have all the terms in the query …

---

## [Able to list system indices in elasticsearch 7.9.0](https://discuss.elastic.co/t/able-to-list-system-indices-in-elasticsearch-7-9-0/257479)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 8\
**Last updated:** [December 7, 2020, 2:45am UTC](https://discuss.elastic.co/t/able-to-list-system-indices-in-elasticsearch-7-9-0/257479 "2020-12-07T02:45:49Z")

</div>

I deployed elasticsearch cluster with operator 1.3.0 and es version: 7.9.0. When I am trying to list the indices, not able to see any system indices. Attaching the screenshot Able to see only created indices. Is that…

---

## [Log rotation policy](https://discuss.elastic.co/t/log-rotation-policy/256683)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 3\
**Last updated:** [December 1, 2020, 3:17pm UTC](https://discuss.elastic.co/t/log-rotation-policy/256683 "2020-12-01T15:17:39Z")

</div>

I have deployed elasticsearch cluster in GCP with one master and data-ingest nodes. What is the default log rotation policy. How frequently logs are rotated? How much logs will be collected in pvc?

---

## [How to stream audio from S3 to Kibana](https://discuss.elastic.co/t/how-to-stream-audio-from-s3-to-kibana/223370)

<div class="topic-metadata">

**Author:** [@li-yun](https://discuss.elastic.co/u/li-yun)\
**Replies:** 8\
**Last updated:** [March 13, 2020, 10:08pm UTC](https://discuss.elastic.co/t/how-to-stream-audio-from-s3-to-kibana/223370 "2020-03-13T22:08:18Z")

</div>

Hello Folks, I am a beginner to Elasticsearch and Kibana. My goal is to stream audio files from an S3 bucket to Kibana. Currently, I can only stream audios from a public website to Kibana but not from the S3 bucket to K…

---

## [Change log level Logstash kafka input plugin?](https://discuss.elastic.co/t/change-log-level-logstash-kafka-input-plugin/214426)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 3\
**Last updated:** [January 30, 2020, 4:25am UTC](https://discuss.elastic.co/t/change-log-level-logstash-kafka-input-plugin/214426 "2020-01-30T04:25:06Z")

</div>

I am using kafka input plugin and logs are getting filled with the below msgs \[2020-01-09T17:28:16,750\]\[WARN \]\[org.apache.kafka.clients.NetworkClient\] \[Consumer clientId=logstash-0, groupId=logstash\] Error while fetch…

---

## [Multiple CSV files and Multiple Header data \[identifiers\]](https://discuss.elastic.co/t/multiple-csv-files-and-multiple-header-data-identifiers/157077)

<div class="topic-metadata">

**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\
**Replies:** 3\
**Last updated:** [November 19, 2018, 10:04pm UTC](https://discuss.elastic.co/t/multiple-csv-files-and-multiple-header-data-identifiers/157077 "2018-11-19T22:04:47Z")

</div>

I have read @theuntergeek responses in the Parse 1st Line of Multiple CSV files and set as Columns thread But I didn't fully understand this comment: csv\_type\_1 identifies a stream (by file type, or whatever you ident…

---

## [Language Detector Processor in Elasticsearch Ingest pipeline](https://discuss.elastic.co/t/language-detector-processor-in-elasticsearch-ingest-pipeline/125659)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 3\
**Last updated:** [March 28, 2018, 9:20am UTC](https://discuss.elastic.co/t/language-detector-processor-in-elasticsearch-ingest-pipeline/125659 "2018-03-28T09:20:07Z")

</div>

Hello, Is there any way where i can detect the different languages present in the message or text through ingest pipeline ? Regards,, Rohan

---

## [What is ECCN number for X-Pack?](https://discuss.elastic.co/t/what-is-eccn-number-for-x-pack/123659)

<div class="topic-metadata">

**Author:** [@hondak](https://discuss.elastic.co/u/hondak)\
**Replies:** 3\
**Last updated:** [March 13, 2018, 2:01am UTC](https://discuss.elastic.co/t/what-is-eccn-number-for-x-pack/123659 "2018-03-13T02:01:29Z")

</div>

I want to use X-Pack with my Elastic in my service. So I need to confirm ECCN number. I found this thread. Is ECCN number for X-Pack also 5D992? Thanks.

---

## [Es 5.5.1 \[size\] query malformed, no start\_object after query name](https://discuss.elastic.co/t/es-5-5-1-size-query-malformed-no-start-object-after-query-name/96635)

<div class="topic-metadata">

**Author:** [@JnKollo](https://discuss.elastic.co/u/JnKollo)\
**Replies:** 0\
**Last updated:** [August 10, 2017, 3:12pm UTC](https://discuss.elastic.co/t/es-5-5-1-size-query-malformed-no-start-object-after-query-name/96635 "2017-08-10T15:12:38Z")

</div>

Hello Es community ! We are upgrading Elasticsearch 1.7 to 5.5 in my company. Always got this exceptions : {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"\[size\] query malformed, no start\_object after qu…

---

## [Mutate WinlogBeat](https://discuss.elastic.co/t/mutate-winlogbeat/93098)

<div class="topic-metadata">

**Author:** [@Nobby](https://discuss.elastic.co/u/Nobby)\
**Replies:** 3\
**Last updated:** [July 14, 2017, 7:46am UTC](https://discuss.elastic.co/t/mutate-winlogbeat/93098 "2017-07-14T07:46:51Z")

</div>

Hey guys, I'm trying to use mutate to define the data type of various fields generated in some Windows logs. For example, Remote Desktop Gateway has number fields for user\_data.BytesReceived, user\_data.BytesTransfered …

---

## [Permanent unassigned shards in latest logstash index](https://discuss.elastic.co/t/permanent-unassigned-shards-in-latest-logstash-index/16813)

<div class="topic-metadata">

**Author:** [@Alexander\_Gray\_II](https://discuss.elastic.co/u/Alexander_Gray_II)\
**Replies:** 8\
**Last updated:** [April 4, 2014, 5:06am UTC](https://discuss.elastic.co/t/permanent-unassigned-shards-in-latest-logstash-index/16813 "2014-04-04T05:06:40Z")

</div>

We have a 3 node m1.large ES/logstash cluster with version 0.90.3. Everything has been running fine for a very long time. We needed to upgrade our cluster to use m2.xlarge, so we killed a node and brought up a new …

---

## [RAG with Elasticsearch - exclusion questions](https://discuss.elastic.co/t/rag-with-elasticsearch-exclusion-questions/353911)

<div class="topic-metadata">

**Author:** [@Volodymyr\_Husakovsky](https://discuss.elastic.co/u/Volodymyr_Husakovsky)\
**Replies:** 5\
**Last updated:** [February 23, 2024, 6:41pm UTC](https://discuss.elastic.co/t/rag-with-elasticsearch-exclusion-questions/353911 "2024-02-23T18:41:35Z")

</div>

Hi Guys! My task is to return, at my request, the passages I need from my menu data from the restaurant dataset. for example, I ask the question “do you have pizza WITHOUT mushrooms?” I need a semantic analysis of the…

---

## [ElasticSearch POST \_doc and doc issue](https://discuss.elastic.co/t/elasticsearch-post-doc-and-doc-issue/309097)

<div class="topic-metadata">

**Author:** [@Even\_Zhang](https://discuss.elastic.co/u/Even_Zhang)\
**Replies:** 5\
**Last updated:** [July 8, 2022, 5:36am UTC](https://discuss.elastic.co/t/elasticsearch-post-doc-and-doc-issue/309097 "2022-07-08T05:36:58Z")

</div>

Hi everyone, I through curl to POST new index with doc like curl -XPOST -H "Content-Type: application/json" 'http://localhost:9200/portstats/doc/' -d '{"bytesReceived":0,"bytesSent":0,"@timestamp":"2022-07-10T23:43:01.…

---

## [Elasticsearch php nested aggregations](https://discuss.elastic.co/t/elasticsearch-php-nested-aggregations/133012)

<div class="topic-metadata">

**Author:** [@sewox](https://discuss.elastic.co/u/sewox)\
**Replies:** 5\
**Last updated:** [May 31, 2018, 12:30pm UTC](https://discuss.elastic.co/t/elasticsearch-php-nested-aggregations/133012 "2018-05-31T12:30:49Z")

</div>

hi everyone, i tired searching an trying. I need to group the nested fields. The sql query is as follows SELECT p\_application\_category,Sum(p\_recv\_bytes) as download,p\_date FROM ZLog2 $w group by p\_application\_categor…

---

## [Incompatible Lucene versions between neo4j and ElasticSearch](https://discuss.elastic.co/t/incompatible-lucene-versions-between-neo4j-and-elasticsearch/131249)

<div class="topic-metadata">

**Author:** [@Aishwarya\_S](https://discuss.elastic.co/u/Aishwarya_S)\
**Replies:** 5\
**Last updated:** [May 28, 2018, 10:33am UTC](https://discuss.elastic.co/t/incompatible-lucene-versions-between-neo4j-and-elasticsearch/131249 "2018-05-28T10:33:53Z")

</div>

Hi. We are facing issues while upgrading Neo4j from 3.1 to 3.3 due to incompatible Lucene versions used by Neo4j and ElasticSearch. We are using Rest based client provided by ES to query data. Please find the maven dep…

---

## [Failing to parse csv](https://discuss.elastic.co/t/failing-to-parse-csv/108613)

<div class="topic-metadata">

**Author:** [@chikondot](https://discuss.elastic.co/u/chikondot)\
**Replies:** 5\
**Last updated:** [November 23, 2017, 6:31am UTC](https://discuss.elastic.co/t/failing-to-parse-csv/108613 "2017-11-23T06:31:23Z")

</div>

Good day, I am trying to parse multiple csv files in a directory for trend analysis and report generation, Index is being created but not all information is being parsed. The error below is being displayed \[ERROR\] 201…

---

## [Failed elasticsearch upgrade 1.5.2 --\> 2.4.5](https://discuss.elastic.co/t/failed-elasticsearch-upgrade-1-5-2-2-4-5/96682)

<div class="topic-metadata">

**Author:** [@rrue](https://discuss.elastic.co/u/rrue)\
**Replies:** 5\
**Last updated:** [August 11, 2017, 10:30pm UTC](https://discuss.elastic.co/t/failed-elasticsearch-upgrade-1-5-2-2-4-5/96682 "2017-08-11T22:30:26Z")

</div>

Hi All, I’m a relative newbie to RELK and it’s been along to day to boot, so bear with me if I’m missing something obvious or if this question has been answered here already. I’m attempting to upgrade a two-node RELK c…

---

## [Impossible to implement real custom boost query when the weight is in the child document?](https://discuss.elastic.co/t/impossible-to-implement-real-custom-boost-query-when-the-weight-is-in-the-child-document/17950)

<div class="topic-metadata">

**Author:** [@Csaba\_Dezsenyi](https://discuss.elastic.co/u/Csaba_Dezsenyi)\
**Replies:** 5\
**Last updated:** [July 11, 2014, 4:06am UTC](https://discuss.elastic.co/t/impossible-to-implement-real-custom-boost-query-when-the-weight-is-in-the-child-document/17950 "2014-07-11T04:06:09Z")

</div>

Hello Everyone, I would like to implement a popularity-based boost in my elasticsearch engine. I calculate custom popularity boost factors for documents periodically, but I store these float numbers in a child doc…

---

## [Elasticsearch on Kubernetes losing Cluster Connection every hour](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-losing-cluster-connection-every-hour/237086)

<div class="topic-metadata">

**Author:** [@fewagewasd](https://discuss.elastic.co/u/fewagewasd)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-losing-cluster-connection-every-hour/237086 "2020-06-16T08:23:47Z")

</div>

Hi, I am migrating an older application using elasticsearch 2.4 (I know that's a very old version, but I'm not able to upgrade at this point) to Kubernetes. I set it up using a StatefulSet and a headless service, which …

---

## [Total doc\_count aggregations](https://discuss.elastic.co/t/total-doc-count-aggregations/293832)

<div class="topic-metadata">

**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\
**Replies:** 1\
**Last updated:** [January 10, 2022, 9:11am UTC](https://discuss.elastic.co/t/total-doc-count-aggregations/293832 "2022-01-10T09:11:05Z")

</div>

I am looking for a way to sum up the Total doc\_count aggregations that I have defined in the query. I will try to explain my question through the following simple representative example: { "name" : false, "…

---

## [Edit Existing Post On Elastic Forum](https://discuss.elastic.co/t/edit-existing-post-on-elastic-forum/205320)

<div class="topic-metadata">

**Author:** [@kjain14](https://discuss.elastic.co/u/kjain14)\
**Replies:** 1\
**Last updated:** [October 26, 2019, 8:38pm UTC](https://discuss.elastic.co/t/edit-existing-post-on-elastic-forum/205320 "2019-10-26T20:38:41Z")

</div>

Hi All, Is there any way to edit the post (first post on a discussion) on discuss.elastic that has been replied by other members? I guess, if someone replies on the post, then it would not be editable? Am I correct? Ple…

---

## [How to calculate Avg of a duration in Timelion](https://discuss.elastic.co/t/how-to-calculate-avg-of-a-duration-in-timelion/189605)

<div class="topic-metadata">

**Author:** [@Karthik2411](https://discuss.elastic.co/u/Karthik2411)\
**Replies:** 1\
**Last updated:** [July 19, 2019, 10:14am UTC](https://discuss.elastic.co/t/how-to-calculate-avg-of-a-duration-in-timelion/189605 "2019-07-19T10:14:31Z")

</div>

I want to know the exact command for calculating the average of a duration. For now I used the following code to get the average. Wonder why is it showing me the count of the average but not the average itself ".es(inde…

---

## [Logstash pipeline block in start\_input](https://discuss.elastic.co/t/logstash-pipeline-block-in-start-input/147940)

<div class="topic-metadata">

**Author:** [@anji](https://discuss.elastic.co/u/anji)\
**Replies:** 1\
**Last updated:** [September 10, 2018, 1:02pm UTC](https://discuss.elastic.co/t/logstash-pipeline-block-in-start-input/147940 "2018-09-10T13:02:48Z")

</div>

Hi Team, i have setup like Elasticsearch , logstash and kibana in one machine when i running my logstash file i am getting Error pipeline block in start\_input can anyone suggest what needs to be done, i have tried to …

---

## [Logstash Hangs (thread blocked)](https://discuss.elastic.co/t/logstash-hangs-thread-blocked/137655)

<div class="topic-metadata">

**Author:** [@mzominy](https://discuss.elastic.co/u/mzominy)\
**Replies:** 1\
**Last updated:** [June 28, 2018, 6:56am UTC](https://discuss.elastic.co/t/logstash-hangs-thread-blocked/137655 "2018-06-28T06:56:42Z")

</div>

Hi Everyone, We're running a Logstash pipeline with TCP input \> JSON filter \> ES output, and most of the time it goes great, except sometimes logstash will stop inserting data into ES without any log that we could find,…

---

## [Index pdf files to AWS Elasticsearch service using Elasticsearch File System Crawler](https://discuss.elastic.co/t/index-pdf-files-to-aws-elasticsearch-service-using-elasticsearch-file-system-crawler/132666)

<div class="topic-metadata">

**Author:** [@Fish](https://discuss.elastic.co/u/Fish)\
**Replies:** 1\
**Last updated:** [May 28, 2018, 8:39am UTC](https://discuss.elastic.co/t/index-pdf-files-to-aws-elasticsearch-service-using-elasticsearch-file-system-crawler/132666 "2018-05-28T08:39:20Z")

</div>

I can index pdf files to a local Elasticsearch using Elasticsearch File System Crawler. The default, fscrawler setting has port, host and scheme parameters as shown below. { "name" : "job\_name2", "fs" : { "url" …

---

## [Elasticsearch query: multiple fields group by](https://discuss.elastic.co/t/elasticsearch-query-multiple-fields-group-by/117957)

<div class="topic-metadata">

**Author:** [@8f91697eaddc6c975381](https://discuss.elastic.co/u/8f91697eaddc6c975381)\
**Replies:** 1\
**Last updated:** [February 1, 2018, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-query-multiple-fields-group-by/117957 "2018-02-01T08:22:02Z")

</div>

Hi, I want to convert the following query in mysql to elastic search: Select field1, count(field1), field2, count(field2), field3, count(field3) from table1 group by field1, field2, field3 Having ddate between ‘201…

---

## [Reindex api is not routing the document in destination index](https://discuss.elastic.co/t/reindex-api-is-not-routing-the-document-in-destination-index/96680)

<div class="topic-metadata">

**Author:** [@saurabh.jaluka](https://discuss.elastic.co/u/saurabh.jaluka)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 9:22pm UTC](https://discuss.elastic.co/t/reindex-api-is-not-routing-the-document-in-destination-index/96680 "2017-08-18T21:22:46Z")

</div>

Hi, I am trying to use reindex api to migrate data from index sites-v3 to sites-v5. Seems like the \_routing is not taking effect on dest index. Context: I am using ES v5.4.0, with 20 shards. I have 2 index sites-v3 and…

[Previous page](https://discuss.elastic.co/top.md?page=1299&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1301&per_page=50&period=all)
