# Top **URL:** https://discuss.elastic.co/top.md?page=1318&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1319 --- ## [Elasticsearch not indexing while rebalancing](https://discuss.elastic.co/t/elasticsearch-not-indexing-while-rebalancing/52526)
**Author:** [@omercnet](https://discuss.elastic.co/u/omercnet)\ **Replies:** 4\ **Last updated:** [November 2, 2016, 5:01am UTC](https://discuss.elastic.co/t/elasticsearch-not-indexing-while-rebalancing/52526 "2016-11-02T05:01:18Z")
Hello, I have a 6 node cluster on AWS split with allocation awareness to 2 racks. I wanted to replace the nodes on 1 rack to increase disk size, so I launched 3 new nodes on that rack and excluded allocation for the de… --- ## [Term aggregation and doc values](https://discuss.elastic.co/t/term-aggregation-and-doc-values/63321)
**Author:** [@Bruce\_Ritchie](https://discuss.elastic.co/u/Bruce_Ritchie)\ **Replies:** 4\ **Last updated:** [October 20, 2016, 3:06pm UTC](https://discuss.elastic.co/t/term-aggregation-and-doc-values/63321 "2016-10-20T15:06:47Z")
I'm doing a term aggregation on a number of fields that have been defined like: "fieldName\_raw": { "type": "string", "index": "not\_analyzed", "store": false, "doc\_values": true } However when I curl the fielddat… --- ## [Retrieving only matching locations](https://discuss.elastic.co/t/retrieving-only-matching-locations/54590)
**Author:** [@gokhan](https://discuss.elastic.co/u/gokhan)\ **Replies:** 4\ **Last updated:** [July 9, 2016, 3:41pm UTC](https://discuss.elastic.co/t/retrieving-only-matching-locations/54590 "2016-07-09T15:41:20Z")
Hi all, I have an index that stores set of locations as geo\_point { ......, "locations" : \[ { "lat" : ... "lon" : ... }, ....... \] } and I … --- ## [Corruptindexexception warn message unclear](https://discuss.elastic.co/t/corruptindexexception-warn-message-unclear/18377)
**Author:** [@sri](https://discuss.elastic.co/u/sri)\ **Replies:** 4\ **Last updated:** [June 30, 2014, 1:21pm UTC](https://discuss.elastic.co/t/corruptindexexception-warn-message-unclear/18377 "2014-06-30T13:21:45Z")
Hi I am getting the below error my ES cluster quite frequently but am not able to understand the actual reason as to why its happening. \[2014-06-27 11:12:50,014\]\[WARN \]\[cluster.action.shard \] \[NES1\] \[logsjm… --- ## [Logstash Offline Plugin SocketError](https://discuss.elastic.co/t/logstash-offline-plugin-socketerror/234562)
**Author:** [@sonnenteich](https://discuss.elastic.co/u/sonnenteich)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 2:21pm UTC](https://discuss.elastic.co/t/logstash-offline-plugin-socketerror/234562 "2020-05-27T14:21:44Z")
I try to build and install a logstash plugin, so I run bin/logstash-plugin prepare-offline-pack logstash-filter-http . When I run bin/logstash-plugin install logstash-offline-plugins-7.7.0.zip in an offline in environme… --- ## [Filebeat unable to publish events](https://discuss.elastic.co/t/filebeat-unable-to-publish-events/160083)
**Author:** [@itnazeer](https://discuss.elastic.co/u/itnazeer)\ **Replies:** 0\ **Last updated:** [December 10, 2018, 3:03am UTC](https://discuss.elastic.co/t/filebeat-unable-to-publish-events/160083 "2018-12-10T03:03:35Z")
Filebeat which is on Centos 7 server is unable to publish events to logstash server while the filebeat on Centos 6 server is pusblishing fine with no issues. Please help on this. INFO pipeline/output.go:95 Connecti… --- ## [Adding to termvector](https://discuss.elastic.co/t/adding-to-termvector/76500)
**Author:** [@alecm3](https://discuss.elastic.co/u/alecm3)\ **Replies:** 0\ **Last updated:** [February 25, 2017, 8:36pm UTC](https://discuss.elastic.co/t/adding-to-termvector/76500 "2017-02-25T20:36:54Z")
I am storing large rapidly growing texts as termvectors only, with the \_source disabled due to storage space constraints. The termvectors have offsets and positions disabled, only used as bag-of-words. When a new chunk o… --- ## [Find index with conflicting field](https://discuss.elastic.co/t/find-index-with-conflicting-field/354963)
**Author:** [@Balu](https://discuss.elastic.co/u/Balu)\ **Replies:** 2\ **Last updated:** [March 7, 2024, 3:41pm UTC](https://discuss.elastic.co/t/find-index-with-conflicting-field/354963 "2024-03-07T15:41:32Z")
Hello, I do have fields in indexes that are listed as "Mapping conflict" (keyword, IP for example). I know I have to reindex documents to fix that, but how I do I figure out what indices have the wrong type of a field? … --- ## [Parsing date format](https://discuss.elastic.co/t/parsing-date-format/269488)
**Author:** [@tkkchan](https://discuss.elastic.co/u/tkkchan)\ **Replies:** 2\ **Last updated:** [April 9, 2021, 8:15am UTC](https://discuss.elastic.co/t/parsing-date-format/269488 "2021-04-09T08:15:46Z")
Dear All, I am currently learning how to parse data with logstash and pass them to Logstash. Right now I am confused on how to parse date correctly, as you can see, I have a timestamp with the format yyyy/MM/dd HH:mm:s… --- ## [How to create an external Table on ES document uisng Spark SQL(ES-Hadoop 6.7.0 and ES 6.7.0)](https://discuss.elastic.co/t/how-to-create-an-external-table-on-es-document-uisng-spark-sql-es-hadoop-6-7-0-and-es-6-7-0/195228)
**Author:** [@Srinivas2](https://discuss.elastic.co/u/Srinivas2)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 6:39pm UTC](https://discuss.elastic.co/t/how-to-create-an-external-table-on-es-document-uisng-spark-sql-es-hadoop-6-7-0-and-es-6-7-0/195228 "2019-08-15T18:39:41Z")
Hi Team, Requesting you help. Is it possible to create a table using spark-sql like mentioned here (https://docs.databricks.com/spark/latest/data-sources/elasticsearch.html \[Use SQL to access Elasticsearch index\]) I … --- ## [Kibana Dev Tools console response pane is not visible](https://discuss.elastic.co/t/kibana-dev-tools-console-response-pane-is-not-visible/161328)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 2\ **Last updated:** [December 18, 2018, 1:34pm UTC](https://discuss.elastic.co/t/kibana-dev-tools-console-response-pane-is-not-visible/161328 "2018-12-18T13:34:17Z")
Hi Team, All of sudden for my account kibana dev tools console response pane is not visible and in editor pane also am not seeing any executable options. Could any one suggest any setting that we need to change. Thanks… --- ## [Hits.total in Elasticsearch filter plugin](https://discuss.elastic.co/t/hits-total-in-elasticsearch-filter-plugin/148342)
**Author:** [@javiyt](https://discuss.elastic.co/u/javiyt)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 4:26pm UTC](https://discuss.elastic.co/t/hits-total-in-elasticsearch-filter-plugin/148342 "2018-09-13T16:26:01Z")
Hi everyone, I'm trying to enrich an index adding some geodata information, counting the neighbours according to a query. I'm using the elasticsearch filter to add this query, but I can't find a way to use either the \_… --- ## [X-Pack attempts to load ca-bundle.crt and ca-bundle.trust.crt despite not being configured to do so](https://discuss.elastic.co/t/x-pack-attempts-to-load-ca-bundle-crt-and-ca-bundle-trust-crt-despite-not-being-configured-to-do-so/116939)
**Author:** [@Michael\_Ihde](https://discuss.elastic.co/u/Michael_Ihde)\ **Replies:** 2\ **Last updated:** [January 25, 2018, 3:07pm UTC](https://discuss.elastic.co/t/x-pack-attempts-to-load-ca-bundle-crt-and-ca-bundle-trust-crt-despite-not-being-configured-to-do-so/116939 "2018-01-25T15:07:08Z")
I'm using ElasticSearch 5.5.2 within Docker (from the official images) and trying to setup the SSL configuration. I've set: xpack.ssl.key=/usr/share/elasticsearch/config/tls/private/server.key xpack.ssl.certificate… --- ## [Appending data from MongoDB into log files being processed by Logstash and parsed into Elasticsearch](https://discuss.elastic.co/t/appending-data-from-mongodb-into-log-files-being-processed-by-logstash-and-parsed-into-elasticsearch/92564)
**Author:** [@kmin93](https://discuss.elastic.co/u/kmin93)\ **Replies:** 2\ **Last updated:** [July 11, 2017, 5:33am UTC](https://discuss.elastic.co/t/appending-data-from-mongodb-into-log-files-being-processed-by-logstash-and-parsed-into-elasticsearch/92564 "2017-07-11T05:33:19Z")
Sorry about the title, my case really couldn't be explained with a single sentence. Here is my situation: I have a large set of log files (around 4GB) that I wish to parse with Logstash to use with Elastic stack (Lo… --- ## [publisher#Client.Publish and backpressure](https://discuss.elastic.co/t/publisher-client-publish-and-backpressure/88125)
**Author:** [@HeyImAlex](https://discuss.elastic.co/u/HeyImAlex)\ **Replies:** 2\ **Last updated:** [June 5, 2017, 6:06pm UTC](https://discuss.elastic.co/t/publisher-client-publish-and-backpressure/88125 "2017-06-05T18:06:06Z")
I'm trying to do some work on journalbeat, but the specifics around how publisher#Client.Publish works are kinda murky to me. Just for context, journalbeat basically polls journald for new entries, so the "event source… --- ## [Profile API - took Time](https://discuss.elastic.co/t/profile-api-took-time/56776)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 2\ **Last updated:** [July 29, 2016, 10:58pm UTC](https://discuss.elastic.co/t/profile-api-took-time/56776 "2016-07-29T22:58:48Z")
I executed my query with "profile":true option and observed the time taken by Lucene operations. But I'm not getting the below Took Time is "took": 12847 The query has to execute against a indice with two shards. In… --- ## [Создание маппинга на Java](https://discuss.elastic.co/t/java/35437)
**Author:** [@strikerdimabel](https://discuss.elastic.co/u/strikerdimabel)\ **Replies:** 2\ **Last updated:** [November 25, 2015, 8:25am UTC](https://discuss.elastic.co/t/java/35437 "2015-11-25T08:25:09Z")
Способ создания маппинга, который я использую сейчас: XContentBuilder mappingBuilder = XContentFactory.jsonBuilder() .startObject().startObject("tweet").startObject("properties") .startObject("id") .field("type",… --- ## [Does Elasticsearch support URL encoded endpoints or did I found a bug?](https://discuss.elastic.co/t/does-elasticsearch-support-url-encoded-endpoints-or-did-i-found-a-bug/144764)
**Author:** [@Akram\_S](https://discuss.elastic.co/u/Akram_S)\ **Replies:** 0\ **Last updated:** [August 16, 2018, 6:04pm UTC](https://discuss.elastic.co/t/does-elasticsearch-support-url-encoded-endpoints-or-did-i-found-a-bug/144764 "2018-08-16T18:04:33Z")
Update 3: It turns out that this is not a bug and instead a misunderstanding on my part on how does URL-encoding work. The library I was using was encoding the full query params, including the "'?" and "=", however it … --- ## [Send “raw log” and “filter log” from single server to elastic server](https://discuss.elastic.co/t/send-raw-log-and-filter-log-from-single-server-to-elastic-server/321824)
**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\ **Replies:** 7\ **Last updated:** [December 24, 2022, 1:42pm UTC](https://discuss.elastic.co/t/send-raw-log-and-filter-log-from-single-server-to-elastic-server/321824 "2022-12-24T13:42:40Z")
Hi Need to Send “raw log” and “filter log” from single server to elastic server, but in different index. Like this: Host1 (rawlog) \> elastic (rawindex) Host1 (filter log) \> elastic (filterindex) Is it possible? Any… --- ## [Stuck on "going to run"](https://discuss.elastic.co/t/stuck-on-going-to-run/258262)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 7\ **Last updated:** [January 4, 2021, 7:14pm UTC](https://discuss.elastic.co/t/stuck-on-going-to-run/258262 "2021-01-04T19:14:05Z")
I have a detection rule that looks for indicator matches on a filebeat-misp index and every so often it will get stuck on "going to run" with a date that is in the past. If it is failing then I'm none the wiser but I'd … --- ## [SAML group mapping](https://discuss.elastic.co/t/saml-group-mapping/225006)
**Author:** [@raphperrin](https://discuss.elastic.co/u/raphperrin)\ **Replies:** 7\ **Last updated:** [March 26, 2020, 1:36pm UTC](https://discuss.elastic.co/t/saml-group-mapping/225006 "2020-03-26T13:36:20Z")
Hi I am trying to map groups from my IDP. I can see in the SAML attributes that the group is provided see the json bellow \ **Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 7\ **Last updated:** [January 30, 2019, 12:26pm UTC](https://discuss.elastic.co/t/logstash-logs-does-not-appears-in-the-index-created-by-filebeat/163372 "2019-01-30T12:26:30Z") Hi All, I have installed the filebeat component for log/monitor purposes for Logstash activities as it was described under the Logs menu item at Kibana. Maybe I have miss-configured something, but only the file opening… --- ## [One ES node load average is very high, how to troubleshoot](https://discuss.elastic.co/t/one-es-node-load-average-is-very-high-how-to-troubleshoot/96022)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 8:05am UTC](https://discuss.elastic.co/t/one-es-node-load-average-is-very-high-how-to-troubleshoot/96022 "2017-08-07T08:05:24Z")
ELK version: 5.5.1 There are 5 nodes in my ES cluster, the other 4 nodes are normal, and configurations of the nodes are same... --- ## [Mapper for \[name\] conflicts with existing mapping in other types](https://discuss.elastic.co/t/mapper-for-name-conflicts-with-existing-mapping-in-other-types/94474)
**Author:** [@yapeng\_lee](https://discuss.elastic.co/u/yapeng_lee)\ **Replies:** 1\ **Last updated:** [July 25, 2017, 1:45pm UTC](https://discuss.elastic.co/t/mapper-for-name-conflicts-with-existing-mapping-in-other-types/94474 "2017-07-25T13:45:48Z")
HI, when I use PutMapping , I got some error messages \*\*Mapper for \[name\] conflicts with existing mapping in other types : \*\* \*\* \[mapper \[name\] has different \[store\] values,mapper \[name\] has different \[analyze… --- ## [Index file content in elasticsearch without storing the actual content in base64](https://discuss.elastic.co/t/index-file-content-in-elasticsearch-without-storing-the-actual-content-in-base64/71815)
**Author:** [@Umar\_Memon](https://discuss.elastic.co/u/Umar_Memon)\ **Replies:** 1\ **Last updated:** [January 17, 2017, 7:38am UTC](https://discuss.elastic.co/t/index-file-content-in-elasticsearch-without-storing-the-actual-content-in-base64/71815 "2017-01-17T07:38:58Z")
I am using .net Nest libraby, with mapper-attachment. I successfully indexed the file contnet and my documents stored on my machine. But by default elasticsearch index stores the whole file content as base64 encoded. Is … --- ## [Monitoring the forum for a given term](https://discuss.elastic.co/t/monitoring-the-forum-for-a-given-term/54123)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 1\ **Last updated:** [June 29, 2016, 1:05am UTC](https://discuss.elastic.co/t/monitoring-the-forum-for-a-given-term/54123 "2016-06-29T01:05:23Z")
Hey @danielmitterdorfer and I are wondering if it's possible to register a given search like https://discuss.elastic.co/search?q=rally and get notifications anytime a new thread is opened which match this search. ( w… --- ## [Top level inner hits highlighting](https://discuss.elastic.co/t/top-level-inner-hits-highlighting/40980)
**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\ **Replies:** 1\ **Last updated:** [February 5, 2016, 9:20am UTC](https://discuss.elastic.co/t/top-level-inner-hits-highlighting/40980 "2016-02-05T09:20:33Z")
Hi there, I use multiple nesting and have tried highlighting my results, but the highlighting is only returned for the innermost nest. Here is a simplified query string (only the inner\_hits part): "inner\_hits" : { … --- ## [Deduplication - Nested, Parent/Child OR None](https://discuss.elastic.co/t/deduplication-nested-parent-child-or-none/24942)
**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\ **Replies:** 1\ **Last updated:** [July 7, 2015, 10:32am UTC](https://discuss.elastic.co/t/deduplication-nested-parent-child-or-none/24942 "2015-07-07T10:32:34Z")
Hi there, We have a scenario where the documents we index might be present at multiple folders with same content. at indexing time, we can easily detect these duplicate as we have content hash. the duplication factors so… --- ## [Efficient aggregation of counting nested field values](https://discuss.elastic.co/t/efficient-aggregation-of-counting-nested-field-values/214869)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 3:27pm UTC](https://discuss.elastic.co/t/efficient-aggregation-of-counting-nested-field-values/214869 "2020-01-14T15:27:01Z")
Like so many others I run into the well-known "too\_many\_buckets\_exception". I am creating a data table visualization which sorts my data over four different fields, and then finally does a count over a fifth field. A pi… --- ## [Elasticsearch TransportClient](https://discuss.elastic.co/t/elasticsearch-transportclient/2859)
**Author:** [@Joerg\_Erdmenger](https://discuss.elastic.co/u/Joerg_Erdmenger)\ **Replies:** 6\ **Last updated:** [March 24, 2010, 9:42am UTC](https://discuss.elastic.co/t/elasticsearch-transportclient/2859 "2010-03-24T09:42:18Z")
Hi everybody, I'm experimeting with elasticsearch and I like it a lot so far. I have a question concerning the packaging though: I'd like to use elasticsearch from a webapp and the Java API would serve me well there… --- ## [Downloading Vector Data Kibana Error using Nginx](https://discuss.elastic.co/t/downloading-vector-data-kibana-error-using-nginx/186848)
**Author:** [@Samudra\_Kifli](https://discuss.elastic.co/u/Samudra_Kifli)\ **Replies:** 5\ **Last updated:** [July 2, 2019, 3:40pm UTC](https://discuss.elastic.co/t/downloading-vector-data-kibana-error-using-nginx/186848 "2019-07-02T15:40:14Z")
The Error said, "Cannot download Indonesia States file. Please ensure the CORS configuration of the server permits requests from the Kibana application on this host." I have checked my geojson web-server cors and the re… --- ## [Range filter plugin not recognized in the pipeline file](https://discuss.elastic.co/t/range-filter-plugin-not-recognized-in-the-pipeline-file/124171)
**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\ **Replies:** 5\ **Last updated:** [March 15, 2018, 9:19pm UTC](https://discuss.elastic.co/t/range-filter-plugin-not-recognized-in-the-pipeline-file/124171 "2018-03-15T21:19:03Z")
Hello folks, Trying to come up to speed on ELK stack. So far it is interesting and fun. I am using ELK 6.0 on windows 8 OS. I used range filter and logstash throw the following error. Do I need to install range plugin… --- ## [Is there a way to specify \_routing=all or similar for GET requests](https://discuss.elastic.co/t/is-there-a-way-to-specify-routing-all-or-similar-for-get-requests/115439)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 5\ **Last updated:** [January 18, 2018, 5:13pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-specify-routing-all-or-similar-for-get-requests/115439 "2018-01-18T17:13:58Z")
I opened an issue about this at https://github.com/elastic/elasticsearch/issues/28120 but I haven't heard anything. Basically I know when accessing the documents I can specific a \_routing param and I know that I can spe… --- ## [Logstash input displayed wrong in Kibana](https://discuss.elastic.co/t/logstash-input-displayed-wrong-in-kibana/109650)
**Author:** [@Timshs](https://discuss.elastic.co/u/Timshs)\ **Replies:** 5\ **Last updated:** [December 22, 2017, 3:33pm UTC](https://discuss.elastic.co/t/logstash-input-displayed-wrong-in-kibana/109650 "2017-12-22T15:33:57Z")
I get \\xC0\\t\\xC0\\b\\xC00\\xC0/\\xC0(\\xC0'\\xC0\\u0014\\xC0\\u0013\\xC0\\u0012\\u0000\\x9D\\u0000\\x9C\\u0000=\\u0000\<\\u00005\\u0000/\\u0000 as message in Kibana when sending tcp input to logstash from IOS. My logstash.conf is: input { … --- ## [How to extract and transform unstructured data into fields](https://discuss.elastic.co/t/how-to-extract-and-transform-unstructured-data-into-fields/91916)
**Author:** [@sentinel](https://discuss.elastic.co/u/sentinel)\ **Replies:** 5\ **Last updated:** [July 6, 2017, 11:37am UTC](https://discuss.elastic.co/t/how-to-extract-and-transform-unstructured-data-into-fields/91916 "2017-07-06T11:37:43Z")
My message index field has field1=A big brown wolf, field2=Yet another furry animal, field3=No guarantee how many fields we will see This is what is indexed: field1=A field2=Yet field3=No I'm missing the rest of the … --- ## [ES does not write on all disks](https://discuss.elastic.co/t/es-does-not-write-on-all-disks/43951)
**Author:** [@koffitse](https://discuss.elastic.co/u/koffitse)\ **Replies:** 5\ **Last updated:** [March 10, 2016, 11:28am UTC](https://discuss.elastic.co/t/es-does-not-write-on-all-disks/43951 "2016-03-10T11:28:42Z")
Hi, I have ES 2.2.0 installés on one node cluster. The node has 12 cpu, 96 GB RAM and 2 partition disks of 500 GB each. I loaded up to 2 billions documents in an index. I wanted to extend the storage so I added 4 more… --- ## [ElasticSearch out of memory with static field index cache size](https://discuss.elastic.co/t/elasticsearch-out-of-memory-with-static-field-index-cache-size/13742)
**Author:** [@Joseph\_Smith](https://discuss.elastic.co/u/Joseph_Smith)\ **Replies:** 5\ **Last updated:** [September 25, 2013, 9:56pm UTC](https://discuss.elastic.co/t/elasticsearch-out-of-memory-with-static-field-index-cache-size/13742 "2013-09-25T21:56:40Z")
I have been running a cluster of ES servers (5) with 48GB of RAM. They have 32 GB allocated to the ES process and are configured to use a static maximum 60% of that RAM for the index field cache. They have been runni… --- ## [TransportClient in 7.4.2](https://discuss.elastic.co/t/transportclient-in-7-4-2/209976)
**Author:** [@rajesh\_elasticsearch](https://discuss.elastic.co/u/rajesh_elasticsearch)\ **Replies:** 3\ **Last updated:** [December 3, 2019, 10:19am UTC](https://discuss.elastic.co/t/transportclient-in-7-4-2/209976 "2019-12-03T10:19:35Z")
Hi, I am using elasitcsearch 7.4.2 with openjdk 11. I can't change all the api to REST, I will do little by little. All CURD I have change to REST (working good) but only for search I want to use TransportClient. The be… --- ## [Elastic Common Schema Java Implementation](https://discuss.elastic.co/t/elastic-common-schema-java-implementation/188391)
**Author:** [@cpmoore](https://discuss.elastic.co/u/cpmoore)\ **Replies:** 3\ **Last updated:** [July 2, 2019, 2:00pm UTC](https://discuss.elastic.co/t/elastic-common-schema-java-implementation/188391 "2019-07-02T14:00:50Z")
I'm just looking for some general ideas of mapping java log fields to the elastic common schema. A couple fields are already taken care of, such as log.level and process.thread.id, but there's a couple fields that I fee… --- ## [How is webhook used in elasticsearch , and how is logstash used for webhook](https://discuss.elastic.co/t/how-is-webhook-used-in-elasticsearch-and-how-is-logstash-used-for-webhook/183291)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 12:07pm UTC](https://discuss.elastic.co/t/how-is-webhook-used-in-elasticsearch-and-how-is-logstash-used-for-webhook/183291 "2019-06-03T12:07:41Z")
Please help.. --- ## [Heartbeat http monitor is not sending headers](https://discuss.elastic.co/t/heartbeat-http-monitor-is-not-sending-headers/175761)
**Author:** [@marvnz](https://discuss.elastic.co/u/marvnz)\ **Replies:** 3\ **Last updated:** [April 10, 2019, 3:19am UTC](https://discuss.elastic.co/t/heartbeat-http-monitor-is-not-sending-headers/175761 "2019-04-10T03:19:26Z")
I have configured the following http monitor: heartbeat.monitors: - type: "http" urls: \["http://elasticsearch-dev-master.dev-common-cache.svc.cluster.local:9200","https://dev-common-cache.gubbins.bobbins","http://10.1… --- ## [Overhead, spent collecting in the last](https://discuss.elastic.co/t/overhead-spent-collecting-in-the-last/167567)
**Author:** [@Abdur\_Raqeeb2](https://discuss.elastic.co/u/Abdur_Raqeeb2)\ **Replies:** 0\ **Last updated:** [February 8, 2019, 3:30am UTC](https://discuss.elastic.co/t/overhead-spent-collecting-in-the-last/167567 "2019-02-08T03:30:58Z")
Hi, When i load the dashboard i get the below message on elasticsearch log and unable to load the dashboard.And at the same time logstash connection gets disconnect with elasticsearch Myself using 16GB instance with 8G… --- ## [Java APM Agent not sending data](https://discuss.elastic.co/t/java-apm-agent-not-sending-data/147116)
**Author:** [@Federico\_Resnizky](https://discuss.elastic.co/u/Federico_Resnizky)\ **Replies:** 3\ **Last updated:** [September 5, 2018, 5:45am UTC](https://discuss.elastic.co/t/java-apm-agent-not-sending-data/147116 "2018-09-05T05:45:28Z")
Hi, I'm trying to setup an APM Agent for a Java application using Spring Boot 2 I installed on my local machine, the ELK stack, APM Server, configured the javaagent to run on gradle bootrun and added the APM indexes to … --- ## [Questions on Graph](https://discuss.elastic.co/t/questions-on-graph/116270)
**Author:** [@David\_Tomasheski](https://discuss.elastic.co/u/David_Tomasheski)\ **Replies:** 3\ **Last updated:** [January 24, 2018, 3:33pm UTC](https://discuss.elastic.co/t/questions-on-graph/116270 "2018-01-24T15:33:12Z")
So i have three questions: I know I can share either a snapshot or a saved version of visualizations. Is there something similar for Graph so I can display it on a page outside Kibana? I saw something saying New Works… --- ## [How specify kstem in a query](https://discuss.elastic.co/t/how-specify-kstem-in-a-query/81729)
**Author:** [@witchlightning](https://discuss.elastic.co/u/witchlightning)\ **Replies:** 8\ **Last updated:** [April 11, 2017, 12:36am UTC](https://discuss.elastic.co/t/how-specify-kstem-in-a-query/81729 "2017-04-11T00:36:07Z")
I'm using c# and am building a query similar to what is shown below. I want to use a kstem filter. Anyone know the syntax for that? public async Task ExecuteAsync() { var result = await client.SearchAsync( … --- ## [Routing allocation , more then configured](https://discuss.elastic.co/t/routing-allocation-more-then-configured/73024)
**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\ **Replies:** 3\ **Last updated:** [January 30, 2017, 6:02pm UTC](https://discuss.elastic.co/t/routing-allocation-more-then-configured/73024 "2017-01-30T18:02:47Z")
Ok, I am on ELK 2.4 and I am decommissioning a node, I wanted to do it during the day but when I trigger the "Exclude" routing, it starts moving 64 shards and seems to be ignoring the Allocation settings, am I missing … --- ## [setExtraSource in Elastic 5.0.0](https://discuss.elastic.co/t/setextrasource-in-elastic-5-0-0/64487)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 3\ **Last updated:** [November 1, 2016, 6:30pm UTC](https://discuss.elastic.co/t/setextrasource-in-elastic-5-0-0/64487 "2016-11-01T18:30:40Z")
Hi, In Elastic 5.0.0, there is no more setExtraSource to pass the query as String. Is there any alternative for this? How can I pass the query as string? --- ## [How to snapshot all indexes with curator (ES 1.7 Curator 3.5)](https://discuss.elastic.co/t/how-to-snapshot-all-indexes-with-curator-es-1-7-curator-3-5/56172)
**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\ **Replies:** 3\ **Last updated:** [July 28, 2016, 8:05pm UTC](https://discuss.elastic.co/t/how-to-snapshot-all-indexes-with-curator-es-1-7-curator-3-5/56172 "2016-07-28T20:05:00Z")
Hello All, I am trying to schedule snapshotting of all indexes using curator. The command below results in an error. What am I doing wrong? curator --host 10.11.12.13 snapshot --repository my\_s3\_repository indices -… --- ## [\_grokparsefailure when not using grok](https://discuss.elastic.co/t/-grokparsefailure-when-not-using-grok/54883)
**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\ **Replies:** 3\ **Last updated:** [July 8, 2016, 5:21am UTC](https://discuss.elastic.co/t/-grokparsefailure-when-not-using-grok/54883 "2016-07-08T05:21:59Z")
I'm using file to ingest consul-template logs input { file { type =\> "consul-template" path =\> \["/var/log/consul-template.log"\] add\_field =\> { "name" =\> "consul-template" } } } For every … --- ## [How to grok for spanish characters?](https://discuss.elastic.co/t/how-to-grok-for-spanish-characters/24750)
**Author:** [@naisanza](https://discuss.elastic.co/u/naisanza)\ **Replies:** 3\ **Last updated:** [July 2, 2015, 11:51pm UTC](https://discuss.elastic.co/t/how-to-grok-for-spanish-characters/24750 "2015-07-02T23:51:41Z")
Add these characters to your regex: \[ÁÉÍÓÚ-áéíóu-ñÑ\] [Previous page](https://discuss.elastic.co/top.md?page=1317&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1319&per_page=50&period=all)