# Top

**URL:** https://discuss.elastic.co/top.md?page=1308&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1309

---

## [Filters on Aggregation results](https://discuss.elastic.co/t/filters-on-aggregation-results/42770)

<div class="topic-metadata">

**Author:** [@Ankitnaudiyal](https://discuss.elastic.co/u/Ankitnaudiyal)\
**Replies:** 2\
**Last updated:** [May 5, 2016, 10:50am UTC](https://discuss.elastic.co/t/filters-on-aggregation-results/42770 "2016-05-05T10:50:18Z")

</div>

Continuing the discussion from ElasticSearch Filter by Aggregation Result: Hi, This is the structure of the document which I am storing with nested relationship. {"PostID":1 "PostContent":"I love reading Harry Potter…

---

## [Appending csv contents to an existing logstash index](https://discuss.elastic.co/t/appending-csv-contents-to-an-existing-logstash-index/48154)

<div class="topic-metadata">

**Author:** [@PKA](https://discuss.elastic.co/u/PKA)\
**Replies:** 2\
**Last updated:** [April 22, 2016, 9:54am UTC](https://discuss.elastic.co/t/appending-csv-contents-to-an-existing-logstash-index/48154 "2016-04-22T09:54:41Z")

</div>

I have a folder where a user will keep adding csv files for logstash to pick up. User will add csv files in this folder, on a daily basis. The csv files will have names like yyyymmdd-dailyUsageData.csv, i.e. the file nam…

---

## [Simple\_query\_string has no analyze\_wildcard](https://discuss.elastic.co/t/simple-query-string-has-no-analyze-wildcard/20584)

<div class="topic-metadata">

**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\
**Replies:** 2\
**Last updated:** [November 10, 2014, 1:01pm UTC](https://discuss.elastic.co/t/simple-query-string-has-no-analyze-wildcard/20584 "2014-11-10T13:01:59Z")

</div>

Hi, the query\_string query http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl-query-string-query.html has been extended by a heuristic to analyze wildcarded terms some time ago. h…

---

## [\_update\_by\_query support doc {}](https://discuss.elastic.co/t/-update-by-query-support-doc/59100)

<div class="topic-metadata">

**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\
**Replies:** 2\
**Last updated:** [October 18, 2016, 4:37pm UTC](https://discuss.elastic.co/t/-update-by-query-support-doc/59100 "2016-10-18T16:37:04Z")

</div>

Does \_update\_by\_query support doc {} or only script? I'd like to update the doc's using values. In a similar way \_update works, by passing doc {}.

---

## [Lag in Filebeat to Kibana](https://discuss.elastic.co/t/lag-in-filebeat-to-kibana/275682)

<div class="topic-metadata">

**Author:** [@Ayush\_Agrahari](https://discuss.elastic.co/u/Ayush_Agrahari)\
**Replies:** 5\
**Last updated:** [June 19, 2021, 12:24pm UTC](https://discuss.elastic.co/t/lag-in-filebeat-to-kibana/275682 "2021-06-19T12:24:36Z")

</div>

Hi , I am using Filebeat in Kubernetes env. Data flow is like below Filebeat -\> Logstash -\> ElasticSearch -\> Kibana I am using 7.10.0 version of filebeat I am finding lag in FIlebeat to Kibana. ES & Logstash & Filebe…

---

## [Embed Discover app into Kibana app plugin](https://discuss.elastic.co/t/embed-discover-app-into-kibana-app-plugin/265411)

<div class="topic-metadata">

**Author:** [@Thomas\_Vaudry-Read](https://discuss.elastic.co/u/Thomas_Vaudry-Read)\
**Replies:** 5\
**Last updated:** [March 3, 2021, 11:30am UTC](https://discuss.elastic.co/t/embed-discover-app-into-kibana-app-plugin/265411 "2021-03-03T11:30:21Z")

</div>

I am developing a Kibana application plugin, and would like to embed the discover app into one of the pages. There does not seem to be much documentation on how to use the embeddables, and if that would even work for a s…

---

## [Time Based Indices](https://discuss.elastic.co/t/time-based-indices/131510)

<div class="topic-metadata">

**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\
**Replies:** 5\
**Last updated:** [May 15, 2018, 12:45am UTC](https://discuss.elastic.co/t/time-based-indices/131510 "2018-05-15T00:45:37Z")

</div>

Hi, I was trying to create an index based on time, but with a different name. For example if I want to create an index called "nginx- \*", at the time of consulting will be nginx-2018.11.05, but I need to geolocate, and r…

---

## [Kibana limit results in saved search and data table](https://discuss.elastic.co/t/kibana-limit-results-in-saved-search-and-data-table/177081)

<div class="topic-metadata">

**Author:** [@vivekkarne](https://discuss.elastic.co/u/vivekkarne)\
**Replies:** 1\
**Last updated:** [April 16, 2019, 1:46pm UTC](https://discuss.elastic.co/t/kibana-limit-results-in-saved-search-and-data-table/177081 "2019-04-16T13:46:40Z")

</div>

Hi All, I am performing aggregations on data and then saving that search, i want to display only the top x records of the search result. Here is an attached screenshot: and also limit the total number of rows in a da…

---

## [Application Data not getting passed to Elastic Search](https://discuss.elastic.co/t/application-data-not-getting-passed-to-elastic-search/157104)

<div class="topic-metadata">

**Author:** [@Neha\_Srivastava](https://discuss.elastic.co/u/Neha_Srivastava)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 10:34am UTC](https://discuss.elastic.co/t/application-data-not-getting-passed-to-elastic-search/157104 "2018-11-20T10:34:37Z")

</div>

We have recently moved to logging using ELK. We are facing issue in sending data from application to elastic search. Our application is a .Net web application and we are sending data in json format. We can see the log …

---

## [Logstash errors](https://discuss.elastic.co/t/logstash-errors/121566)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 1\
**Last updated:** [February 27, 2018, 7:02am UTC](https://discuss.elastic.co/t/logstash-errors/121566 "2018-02-27T07:02:21Z")

</div>

Hello, I have configured some hosts with filebeat and setup logstash to parse the logs. However the whole thing is failing and on the logstash I can see the following errors: \[2018-02-26T20:53:32,226\]\[INFO \]\[logstash.o…

---

## [Pagination internal working using from/size](https://discuss.elastic.co/t/pagination-internal-working-using-from-size/101919)

<div class="topic-metadata">

**Author:** [@addhawan](https://discuss.elastic.co/u/addhawan)\
**Replies:** 1\
**Last updated:** [September 27, 2017, 7:30am UTC](https://discuss.elastic.co/t/pagination-internal-working-using-from-size/101919 "2017-09-27T07:30:05Z")

</div>

Hi, I was looking at the documentation for pagination here: Pagination | Elasticsearch: The Definitive Guide \[2.x\] | Elastic which mentions : Results are sorted before being returned. But remember that a search reque…

---

## [Custom label in timelion](https://discuss.elastic.co/t/custom-label-in-timelion/82167)

<div class="topic-metadata">

**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\
**Replies:** 1\
**Last updated:** [April 12, 2017, 2:29pm UTC](https://discuss.elastic.co/t/custom-label-in-timelion/82167 "2017-04-12T14:29:10Z")

</div>

Is there a way to define a custom label in timelion like the custom label used in line chart Example:If x axis is plotted as date ,date has to be written as a custom label along x axis

---

## [Cumulative graph](https://discuss.elastic.co/t/cumulative-graph/64719)

<div class="topic-metadata">

**Author:** [@epe](https://discuss.elastic.co/u/epe)\
**Replies:** 1\
**Last updated:** [November 2, 2016, 2:58pm UTC](https://discuss.elastic.co/t/cumulative-graph/64719 "2016-11-02T14:58:02Z")

</div>

Hi, I am trying to find an efficient way to display the growth of a number of a type of requests over a period of time. I managed to create a graph (see below) that shows what we want, but it needs to have indices from…

---

## [Elasticsearch as a service ignores ENVIRONMENT VARIABLES in /etc/environemnt](https://discuss.elastic.co/t/elasticsearch-as-a-service-ignores-environment-variables-in-etc-environemnt/51486)

<div class="topic-metadata">

**Author:** [@dm0000](https://discuss.elastic.co/u/dm0000)\
**Replies:** 1\
**Last updated:** [May 31, 2016, 8:43pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-service-ignores-environment-variables-in-etc-environemnt/51486 "2016-05-31T20:43:23Z")

</div>

The documentation makes it sound as though you can set Environment Variables and use them in the /etc/elasticsearch/elasticsearch.yml file. It even gives ${HOSTNAME} as an example. According to Ubuntu, if I set a variab…

---

## [Kibana 4, autocomplete to Dashboard](https://discuss.elastic.co/t/kibana-4-autocomplete-to-dashboard/24492)

<div class="topic-metadata">

**Author:** [@spartakos87](https://discuss.elastic.co/u/spartakos87)\
**Replies:** 1\
**Last updated:** [June 28, 2015, 1:55pm UTC](https://discuss.elastic.co/t/kibana-4-autocomplete-to-dashboard/24492 "2015-06-28T13:55:44Z")

</div>

Hello, I want to ask you how I can embed autocomplete-suggester to dashboard of kibana 4, I see some tutorials where in kibana 3 they use the option of preload field, there is something like tha to kibana 4 ?? O…

---

## [What's the difference between using multiple single-vector records vs. one record with multiple vectors in OpenSearch?](https://discuss.elastic.co/t/whats-the-difference-between-using-multiple-single-vector-records-vs-one-record-with-multiple-vectors-in-opensearch/369069)

<div class="topic-metadata">

**Author:** [@cheesydown](https://discuss.elastic.co/u/cheesydown)\
**Replies:** 5\
**Last updated:** [October 18, 2024, 4:29pm UTC](https://discuss.elastic.co/t/whats-the-difference-between-using-multiple-single-vector-records-vs-one-record-with-multiple-vectors-in-opensearch/369069 "2024-10-18T16:29:51Z")

</div>

I'm trying to move my company's Pinecone-based vector DB to use OpenSearch's k-NN search. One of the main motivations is that we want something that can support multi-vector search. Currently I've made an OpenSearch ind…

---

## [Same query returning different result each time](https://discuss.elastic.co/t/same-query-returning-different-result-each-time/365230)

<div class="topic-metadata">

**Author:** [@Santanu112](https://discuss.elastic.co/u/Santanu112)\
**Replies:** 6\
**Last updated:** [August 21, 2024, 6:29pm UTC](https://discuss.elastic.co/t/same-query-returning-different-result-each-time/365230 "2024-08-21T18:29:22Z")

</div>

I have more than 50 documents with same score cause they have same name . I am searching top 10 document using "size" and "sort" parameter . Is it ok that every time i am getting different top 10 document ? "size": "10"…

---

## [Unable to properly use Logstash](https://discuss.elastic.co/t/unable-to-properly-use-logstash/216726)

<div class="topic-metadata">

**Author:** [@plisovyi](https://discuss.elastic.co/u/plisovyi)\
**Replies:** 6\
**Last updated:** [January 28, 2020, 9:23pm UTC](https://discuss.elastic.co/t/unable-to-properly-use-logstash/216726 "2020-01-28T21:23:22Z")

</div>

Hi, I am unable to launch Logstash. Elasticsearch and Kibana are both running When I execute the following command: bin\\logstash.bat -f .\\config\\logstash-sample.conf I get this: \> Java HotSpot(TM) 64-Bit Server VM…

---

## [How to get SUM of each category](https://discuss.elastic.co/t/how-to-get-sum-of-each-category/65230)

<div class="topic-metadata">

**Author:** [@atanu\_panda](https://discuss.elastic.co/u/atanu_panda)\
**Replies:** 6\
**Last updated:** [November 9, 2016, 11:13am UTC](https://discuss.elastic.co/t/how-to-get-sum-of-each-category/65230 "2016-11-09T11:13:32Z")

</div>

"extras":{"responseTime":"123", "transaction\_type";"abc"} "extras":{"responseTime":"22", "transaction\_type";"abc"} "extras":{"responseTime":"456", "transaction\_type";"abc"} "extras":{"responseTime":"12", "transaction\_typ…

---

## [Logstash snmp output](https://discuss.elastic.co/t/logstash-snmp-output/233486)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 4\
**Last updated:** [May 27, 2020, 8:25am UTC](https://discuss.elastic.co/t/logstash-snmp-output/233486 "2020-05-27T08:25:10Z")

</div>

i am successfully SNMP polling the network device. But fields in output are OID. how do i get proper fields. Below is example output. ++++++++++++++++++++++++++++++++++++++++ "host" =\> "x.x.x.x", "iso.org.dod.internet…

---

## [Reclaim deleted documents memory in Elasticsearch](https://discuss.elastic.co/t/reclaim-deleted-documents-memory-in-elasticsearch/103079)

<div class="topic-metadata">

**Author:** [@Manikanth\_Reddy](https://discuss.elastic.co/u/Manikanth_Reddy)\
**Replies:** 4\
**Last updated:** [October 6, 2017, 9:38pm UTC](https://discuss.elastic.co/t/reclaim-deleted-documents-memory-in-elasticsearch/103079 "2017-10-06T21:38:01Z")

</div>

Hi, We have a situation that we are getting some error documents(grokparsefailure) in elasticsearch from logstash. I have deleted all those documents which are around 2million out of 90days data. This is going to be reg…

---

## [ELK has changed my EventTime](https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858)

<div class="topic-metadata">

**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\
**Replies:** 4\
**Last updated:** [May 26, 2016, 9:20pm UTC](https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858 "2016-05-26T21:20:32Z")

</div>

Hello Guys, I was finding about in what Timezone ELK saved the data. I had read ELK saved the data for default in UTC. I didn't find how to change the timezone in ELK config. The output from client: "dat…

---

## [Hardware recommendation for dedicated client node](https://discuss.elastic.co/t/hardware-recommendation-for-dedicated-client-node/20430)

<div class="topic-metadata">

**Author:** [@Terence\_Tung](https://discuss.elastic.co/u/Terence_Tung)\
**Replies:** 4\
**Last updated:** [November 11, 2014, 1:32pm UTC](https://discuss.elastic.co/t/hardware-recommendation-for-dedicated-client-node/20430 "2014-11-11T13:32:16Z")

</div>

hi there, i wonder what is the hardware recommendation for the dedicated client node? i know master is a very light weight node that doesn't require good hardware, but how about client? it's saying the client node…

---

## [NoNodeAvailableException](https://discuss.elastic.co/t/nonodeavailableexception/11548)

<div class="topic-metadata">

**Author:** [@Pat\_3](https://discuss.elastic.co/u/Pat_3)\
**Replies:** 4\
**Last updated:** [April 15, 2013, 6:34am UTC](https://discuss.elastic.co/t/nonodeavailableexception/11548 "2013-04-15T06:34:24Z")

</div>

Hi, I'm having a problem that is driving me crazy: I'm trying to perform a search using the Java API. Strangely, this has been working a while ago. My Java code looks like this: Client client = new TransportClient…

---

## [Fleet Server not connecting to Elastic after install, x509 error](https://discuss.elastic.co/t/fleet-server-not-connecting-to-elastic-after-install-x509-error/315560)

<div class="topic-metadata">

**Author:** [@marchias](https://discuss.elastic.co/u/marchias)\
**Replies:** 0\
**Last updated:** [September 30, 2022, 1:21pm UTC](https://discuss.elastic.co/t/fleet-server-not-connecting-to-elastic-after-install-x509-error/315560 "2022-09-30T13:21:19Z")

</div>

I have deployed two Docker containers for elastic and kibana. Those two are talking to each other and working fine. I am now trying to deploy Fleet Server and have followed all the documentation and the Fleet Server and …

---

## [Feature Question around KPI Visualisation](https://discuss.elastic.co/t/feature-question-around-kpi-visualisation/296287)

<div class="topic-metadata">

**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 11:50am UTC](https://discuss.elastic.co/t/feature-question-around-kpi-visualisation/296287 "2022-02-04T11:50:18Z")

</div>

I'm currently setting up Elastic Security as a single pane of glass for security information and event management. As part of this we have all our alerts being created in the detections pane with the SOC opening/closing …

---

## [Elasticsearch is returning less than the top K matches for a vector search](https://discuss.elastic.co/t/elasticsearch-is-returning-less-than-the-top-k-matches-for-a-vector-search/345207)

<div class="topic-metadata">

**Author:** [@sbruinsje](https://discuss.elastic.co/u/sbruinsje)\
**Replies:** 3\
**Last updated:** [October 19, 2023, 8:19pm UTC](https://discuss.elastic.co/t/elasticsearch-is-returning-less-than-the-top-k-matches-for-a-vector-search/345207 "2023-10-19T20:19:40Z")

</div>

I have a problem where elasticsearch doesn't return k matches for a knn search. It used to work before so I think something has changed between version 8.8.3 to 8.10.3. Perhaps a minimum score? I could not find it in the…

---

## [Cannot parse "message" in pipeline with Grok -- illegal\_argument\_exception](https://discuss.elastic.co/t/cannot-parse-message-in-pipeline-with-grok-illegal-argument-exception/344188)

<div class="topic-metadata">

**Author:** [@bbarshaw](https://discuss.elastic.co/u/bbarshaw)\
**Replies:** 8\
**Last updated:** [October 1, 2023, 4:37pm UTC](https://discuss.elastic.co/t/cannot-parse-message-in-pipeline-with-grok-illegal-argument-exception/344188 "2023-10-01T16:37:00Z")

</div>

When attempting to Grok the "message" field in a filebeat pipeline from Kibana I am getting the following error: { "docs": \[ { "error": { "root\_cause": \[ { "type": "illegal\_argu…

---

## [Java Api Client TermsQueryBuilder how to add terms from collection of strings](https://discuss.elastic.co/t/java-api-client-termsquerybuilder-how-to-add-terms-from-collection-of-strings/293464)

<div class="topic-metadata">

**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\
**Replies:** 3\
**Last updated:** [January 5, 2022, 1:17pm UTC](https://discuss.elastic.co/t/java-api-client-termsquerybuilder-how-to-add-terms-from-collection-of-strings/293464 "2022-01-05T13:17:13Z")

</div>

Hello. The only available method is by ObjectBuilder value(List v) method. Why there is no option to add just a list of Strings? I am using Elasticsearch-java-7.16.2 version

---

## [Enhanced Table computed column issue](https://discuss.elastic.co/t/enhanced-table-computed-column-issue/269000)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 3\
**Last updated:** [April 2, 2021, 6:27pm UTC](https://discuss.elastic.co/t/enhanced-table-computed-column-issue/269000 "2021-04-02T18:27:36Z")

</div>

i'm trying to get the duration in s using the formula but is not working, can someone help pls, thank you.

---

## [Event Correlation](https://discuss.elastic.co/t/event-correlation/259144)

<div class="topic-metadata">

**Author:** [@escrimaglia](https://discuss.elastic.co/u/escrimaglia)\
**Replies:** 3\
**Last updated:** [December 29, 2020, 9:17pm UTC](https://discuss.elastic.co/t/event-correlation/259144 "2020-12-29T21:17:09Z")

</div>

Hi, I’m testing ELK. So far it’s been very well sending logs from different platforms to elastic as well as indexing and creating views or graphs. My interest now is correlate event using all those logs entries. For exa…

---

## [There is no data in kibana](https://discuss.elastic.co/t/there-is-no-data-in-kibana/109332)

<div class="topic-metadata">

**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\
**Replies:** 3\
**Last updated:** [November 29, 2017, 5:40am UTC](https://discuss.elastic.co/t/there-is-no-data-in-kibana/109332 "2017-11-29T05:40:11Z")

</div>

I have lots of cisco switches and i've configured the devices to send syslogs to my logstash,the output plugin is elasticsearch.But it didn't take effect on some of the devices ,i have checked the status of the elasticse…

---

## [5.4.1 broke netflow codec!](https://discuss.elastic.co/t/5-4-1-broke-netflow-codec/88793)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 3\
**Last updated:** [June 9, 2017, 8:09am UTC](https://discuss.elastic.co/t/5-4-1-broke-netflow-codec/88793 "2017-06-09T08:09:50Z")

</div>

Hi, Big problem here. I upgraded from 5.4.0 to 5.4.1 and now I'm having big problems with netflow. On 5.4.0 I had two netflow v9 devices inputting data, this appeared to work fine though I did not reboot the server …

---

## [Time based indexes and automatic deletion of created indexes](https://discuss.elastic.co/t/time-based-indexes-and-automatic-deletion-of-created-indexes/83990)

<div class="topic-metadata">

**Author:** [@iamsameer](https://discuss.elastic.co/u/iamsameer)\
**Replies:** 3\
**Last updated:** [May 8, 2017, 11:09am UTC](https://discuss.elastic.co/t/time-based-indexes-and-automatic-deletion-of-created-indexes/83990 "2017-05-08T11:09:18Z")

</div>

Hello, I am planning to upgrade ES 2.3 to 5.3. We are using Nest client and Sense(chrome extension) to see data. Since ttl is removed in ES 5.3, I am looking alternative way for it. I am looking for solution like, in…

---

## [Transport client - node.name](https://discuss.elastic.co/t/transport-client-node-name/73582)

<div class="topic-metadata">

**Author:** [@Sree2k](https://discuss.elastic.co/u/Sree2k)\
**Replies:** 3\
**Last updated:** [February 1, 2017, 9:55pm UTC](https://discuss.elastic.co/t/transport-client-node-name/73582 "2017-02-01T21:55:58Z")

</div>

Hello, In the transport client settings builder, I'm currently using node.name along with hosts. My settings builder looks like, Settings.builder().put("cluster.name", "abc").put("node.name", "node1").put("client.tra…

---

## [Why proxy instead of tribe nodes?](https://discuss.elastic.co/t/why-proxy-instead-of-tribe-nodes/67865)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 3\
**Last updated:** [December 2, 2016, 3:45pm UTC](https://discuss.elastic.co/t/why-proxy-instead-of-tribe-nodes/67865 "2016-12-02T15:45:27Z")

</div>

Just wondering why there are HTTP proxies in front of data nodes, instead of tribe nodes ? I was thinking this multi-cluster stuff is the right usage for Tribe. Thanks you,

---

## [How to open URL fields in same window (Kibana 4.1)](https://discuss.elastic.co/t/how-to-open-url-fields-in-same-window-kibana-4-1/1294)

<div class="topic-metadata">

**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\
**Replies:** 3\
**Last updated:** [October 4, 2016, 8:27am UTC](https://discuss.elastic.co/t/how-to-open-url-fields-in-same-window-kibana-4-1/1294 "2016-10-04T08:27:13Z")

</div>

I'm using kibana 4.1 and want to have URL formatted fields open in the same window/redirecting the window? What I'm trying to achieve is : I have a Kibana dashboard .. one of the fields is for instance an IP. I'd lik…

---

## [Elasticsearch and Machine Learning](https://discuss.elastic.co/t/elasticsearch-and-machine-learning/59896)

<div class="topic-metadata">

**Author:** [@kmk3173](https://discuss.elastic.co/u/kmk3173)\
**Replies:** 3\
**Last updated:** [September 6, 2016, 5:47pm UTC](https://discuss.elastic.co/t/elasticsearch-and-machine-learning/59896 "2016-09-06T17:47:52Z")

</div>

Has anyone successfully integrated LiVRE and elasticsearch? I'm looking for an open-source plugin or possible solution for a video content based image retrieval system using elasticsearch.

---

## [Issue using logstash-input-jdbc to load mongo data](https://discuss.elastic.co/t/issue-using-logstash-input-jdbc-to-load-mongo-data/174914)

<div class="topic-metadata">

**Author:** [@supritha](https://discuss.elastic.co/u/supritha)\
**Replies:** 2\
**Last updated:** [April 3, 2019, 4:09am UTC](https://discuss.elastic.co/t/issue-using-logstash-input-jdbc-to-load-mongo-data/174914 "2019-04-03T04:09:01Z")

</div>

Hello, I'm using logstash to load MongoDB data to elasticsearch. I get MongoDB data inside the map field (inside source). I want data to be part of the source, not in a separate field. I used db.collection.find() statem…

---

## [Kibana Discover calculating wrong date from timestamp](https://discuss.elastic.co/t/kibana-discover-calculating-wrong-date-from-timestamp/114289)

<div class="topic-metadata">

**Author:** [@jalfonsocu](https://discuss.elastic.co/u/jalfonsocu)\
**Replies:** 2\
**Last updated:** [January 8, 2018, 4:20pm UTC](https://discuss.elastic.co/t/kibana-discover-calculating-wrong-date-from-timestamp/114289 "2018-01-08T16:20:13Z")

</div>

Hello, i'm loading squid logs into elasticsearch using the java highlevelclient api. I'm putting the timestamp as a date field, when i open kibana discover, all dates are placed in 1970, ej: Blockquote @timestamp: …

---

## [Specific sorting order using windowfunction row\_number](https://discuss.elastic.co/t/specific-sorting-order-using-windowfunction-row-number/37893)

<div class="topic-metadata">

**Author:** [@krisgeus](https://discuss.elastic.co/u/krisgeus)\
**Replies:** 2\
**Last updated:** [May 23, 2017, 12:27pm UTC](https://discuss.elastic.co/t/specific-sorting-order-using-windowfunction-row-number/37893 "2017-05-23T12:27:41Z")

</div>

I have a very specific requirement in sorting the results from my elastic index. I want to order by a date (new collection) but I want to distribute the results in such a way that not all documents with the same brand e…

---

## [Migration of ES from AWS to non-AWS cluster](https://discuss.elastic.co/t/migration-of-es-from-aws-to-non-aws-cluster/72300)

<div class="topic-metadata">

**Author:** [@rpsandiford](https://discuss.elastic.co/u/rpsandiford)\
**Replies:** 2\
**Last updated:** [January 23, 2017, 10:43pm UTC](https://discuss.elastic.co/t/migration-of-es-from-aws-to-non-aws-cluster/72300 "2017-01-23T22:43:41Z")

</div>

HI, all. I've been tasked with migrating a large ES cluster which we have set up on EC2 instances in AWS, to a local cluster we want to set up. It is a once-only migration (i.e. we don't need to keep the two clusters …

---

## [Use saveJsonToEs and always keep the same \_id field](https://discuss.elastic.co/t/use-savejsontoes-and-always-keep-the-same--id-field/44178)

<div class="topic-metadata">

**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\
**Replies:** 2\
**Last updated:** [March 14, 2016, 10:51am UTC](https://discuss.elastic.co/t/use-savejsontoes-and-always-keep-the-same--id-field/44178 "2016-03-14T10:51:13Z")

</div>

Hello, I would like to know whether there's a workaround to this issue with log parsing: Before the 2.X version of Elasticsearch, i used this scala feature: rdd.saveJsonToEs(indexAndType) with JSON, containing an …

---

## [Logstash filter not working, when all the filters are applied at once, but working when applied only one filter](https://discuss.elastic.co/t/logstash-filter-not-working-when-all-the-filters-are-applied-at-once-but-working-when-applied-only-one-filter/310186)

<div class="topic-metadata">

**Author:** [@djrshn2346](https://discuss.elastic.co/u/djrshn2346)\
**Replies:** 7\
**Last updated:** [July 22, 2022, 5:15am UTC](https://discuss.elastic.co/t/logstash-filter-not-working-when-all-the-filters-are-applied-at-once-but-working-when-applied-only-one-filter/310186 "2022-07-22T05:15:23Z")

</div>

I have added 3 filters in Logstash but at a time only 2 are working, but all the three are not working at the same time. One of the filter is throwing error. When I applied single filter that is working fine, when 2 that…

---

## [How to add http response header in Elasticsearch](https://discuss.elastic.co/t/how-to-add-http-response-header-in-elasticsearch/278981)

<div class="topic-metadata">

**Author:** [@yupengj](https://discuss.elastic.co/u/yupengj)\
**Replies:** 1\
**Last updated:** [July 19, 2021, 9:12am UTC](https://discuss.elastic.co/t/how-to-add-http-response-header-in-elasticsearch/278981 "2021-07-19T09:12:23Z")

</div>

I encountered three security-related issues when using elasticserrch version 7.6.1. Thank you for your help. How does elasticserrch configure http response headers, such as X-Content-Type-Options, X-XSS-Protection, Con…

---

## [Constant Unassigned Shards](https://discuss.elastic.co/t/constant-unassigned-shards/275486)

<div class="topic-metadata">

**Author:** [@Oleksandr.Tedikov](https://discuss.elastic.co/u/Oleksandr.Tedikov)\
**Replies:** 7\
**Last updated:** [June 10, 2021, 4:21am UTC](https://discuss.elastic.co/t/constant-unassigned-shards/275486 "2021-06-10T04:21:05Z")

</div>

Hello, I have Elastic Cluster with the following Configuration: 3 Master Nodes (JVM Heap Ram 4 GB, 1 CPU, 1 GB Disk) 10 Data/Ingest Nodes (JVM Heap Ram 8 GB, 2 CPU, 500 GB Disk) ~200 Indexes Each Index has 2 Replica…

---

## [Logstash error - bootstrap broker disconnected](https://discuss.elastic.co/t/logstash-error-bootstrap-broker-disconnected/245965)

<div class="topic-metadata">

**Author:** [@chandramouli\_sriniva](https://discuss.elastic.co/u/chandramouli_sriniva)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 11:31pm UTC](https://discuss.elastic.co/t/logstash-error-bootstrap-broker-disconnected/245965 "2020-08-21T23:31:53Z")

</div>

we are sending logs from file.txt to Kafka(SASL\_SSL with kerberos). Below are the parm being set in conf file: bootstrap\_servers =\> "broker:9093" codec =\> json topic\_id =\> "topic" jaas\_path =\> "jaas.conf" kerberos\_conf…

---

## [What unit is Storage Size under Index Management?](https://discuss.elastic.co/t/what-unit-is-storage-size-under-index-management/182224)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 1\
**Last updated:** [June 13, 2019, 7:09pm UTC](https://discuss.elastic.co/t/what-unit-is-storage-size-under-index-management/182224 "2019-06-13T19:09:11Z")

</div>

Hi all, I was wondering if someone could help me out. I am wondering what unit Storage Size is under Index management in Kibana. I am confused if it is bits or bytes. Instinct tells me that it is bytes as that is what d…

---

## [Indexing Word documents](https://discuss.elastic.co/t/indexing-word-documents/172172)

<div class="topic-metadata">

**Author:** [@Tali](https://discuss.elastic.co/u/Tali)\
**Replies:** 1\
**Last updated:** [March 13, 2019, 6:19pm UTC](https://discuss.elastic.co/t/indexing-word-documents/172172 "2019-03-13T18:19:34Z")

</div>

We have about 2 milions Word documents on Windows server and need some search engine. We store some meta data about each document in SQL Server, like department and so on, the data that is not stored the files themselve…

---

## [How to use log4jplus with logstash?](https://discuss.elastic.co/t/how-to-use-log4jplus-with-logstash/118869)

<div class="topic-metadata">

**Author:** [@durgeshtanuku](https://discuss.elastic.co/u/durgeshtanuku)\
**Replies:** 1\
**Last updated:** [February 8, 2018, 8:24pm UTC](https://discuss.elastic.co/t/how-to-use-log4jplus-with-logstash/118869 "2018-02-08T20:24:14Z")

</div>

I'm new to logstash. I'm trying to send logs of my C++ application to logstash using log4cplus library. I need to send some json data from my application to logstash. To start with I have written some piece of code tha…

[Previous page](https://discuss.elastic.co/top.md?page=1307&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1309&per_page=50&period=all)
