# Top **URL:** https://discuss.elastic.co/top.md?page=1322&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1323 --- ## [Leading backslash important in Elastic Cloud but not in the official docker container](https://discuss.elastic.co/t/leading-backslash-important-in-elastic-cloud-but-not-in-the-official-docker-container/117292)
**Author:** [@robisrob](https://discuss.elastic.co/u/robisrob)\ **Replies:** 8\ **Last updated:** [January 27, 2018, 8:02pm UTC](https://discuss.elastic.co/t/leading-backslash-important-in-elastic-cloud-but-not-in-the-official-docker-container/117292 "2018-01-27T20:02:37Z")
POST indexname/\_update\_by\_query HTTP/1.1 is failing on Elastic Cloud POST /indexname/\_update\_by\_query HTTP/1.1 is working on Elastic Cloud POST indexname/\_update\_by\_query HTTP/1.1 is working on the official docker cont… --- ## [Calculate the sum in a bar graph](https://discuss.elastic.co/t/calculate-the-sum-in-a-bar-graph/106505)
**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\ **Replies:** 3\ **Last updated:** [November 10, 2017, 11:36am UTC](https://discuss.elastic.co/t/calculate-the-sum-in-a-bar-graph/106505 "2017-11-10T11:36:18Z")
Hi at all, I would like to know how it is possible to calculate the sum of two bars) which represent, for example, true and false) by creating a new bar that is their sum having the same aggregator \[image\] M --- ## [Mapping Users and Groups to Roles "other" realms](https://discuss.elastic.co/t/mapping-users-and-groups-to-roles-other-realms/87528)
**Author:** [@Niklas](https://discuss.elastic.co/u/Niklas)\ **Replies:** 3\ **Last updated:** [June 2, 2017, 9:47am UTC](https://discuss.elastic.co/t/mapping-users-and-groups-to-roles-other-realms/87528 "2017-06-02T09:47:42Z")
For native or file it is possible to map users to roles via the API or Kibana. But role mappings for Active Directory realms e.g. you need to create a role\_mapping.yml file. I suppose I can just can create it in /mnt/dat… --- ## [Logstash slack webhook](https://discuss.elastic.co/t/logstash-slack-webhook/72569)
**Author:** [@Suran\_Kularatna](https://discuss.elastic.co/u/Suran_Kularatna)\ **Replies:** 3\ **Last updated:** [January 24, 2017, 8:04am UTC](https://discuss.elastic.co/t/logstash-slack-webhook/72569 "2017-01-24T08:04:04Z")
Hi, I would like to import my slack messages into logstash, we can't use the IRC and so was looking at outgoing webhooks. How do i configure logstash http server What do i put in the logstash config file to be able… --- ## [Dashboard with multiple time pickers](https://discuss.elastic.co/t/dashboard-with-multiple-time-pickers/53213)
**Author:** [@Dan\_AdWorks](https://discuss.elastic.co/u/Dan_AdWorks)\ **Replies:** 3\ **Last updated:** [June 19, 2016, 8:29am UTC](https://discuss.elastic.co/t/dashboard-with-multiple-time-pickers/53213 "2016-06-19T08:29:05Z")
I want to have 2 visualizations on the same dashboard. One showing the last 15 minutes and one showing the last 2 weeks. Is this possible? --- ## [What happens when synchronization between the primary and replica shards is lost?](https://discuss.elastic.co/t/what-happens-when-synchronization-between-the-primary-and-replica-shards-is-lost/366120)
**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\ **Replies:** 5\ **Last updated:** [October 16, 2024, 9:31pm UTC](https://discuss.elastic.co/t/what-happens-when-synchronization-between-the-primary-and-replica-shards-is-lost/366120 "2024-10-16T21:31:00Z")
What happens when synchronization between the primary and replica shards is lost in Elasticsearch? :thinking: For example, a node is disconnected and a replica is unassigned. The indexing is persist to the primary shard… --- ## [Does elasticsearch support functionality like before insert trigger](https://discuss.elastic.co/t/does-elasticsearch-support-functionality-like-before-insert-trigger/173033)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 1\ **Last updated:** [March 20, 2019, 8:15am UTC](https://discuss.elastic.co/t/does-elasticsearch-support-functionality-like-before-insert-trigger/173033 "2019-03-20T08:15:10Z")
Hello Team, Is it possible to create trigger to check if document with some field value already exist and depending on condition either insert or drop document. Thank you for your help and support. Thank you, Aditya --- ## [Elasticsearch crashed during reindex, can I continue?](https://discuss.elastic.co/t/elasticsearch-crashed-during-reindex-can-i-continue/170962)
**Author:** [@brianecole](https://discuss.elastic.co/u/brianecole)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 5:00pm UTC](https://discuss.elastic.co/t/elasticsearch-crashed-during-reindex-can-i-continue/170962 "2019-03-06T17:00:50Z")
I was upgrading from ES 2.x to 5.x, and then using the X-Pack Upgrade Assistant/Reindex helper to upgrade the indices as required. Unfortunately I hit a Java heap space problem and the elasticsearch process crashed afte… --- ## [Calculation of first\_switched and last\_switched is not correct in netflow.rb cocde](https://discuss.elastic.co/t/calculation-of-first-switched-and-last-switched-is-not-correct-in-netflow-rb-cocde/37151)
**Author:** [@abhisheyke](https://discuss.elastic.co/u/abhisheyke)\ **Replies:** 1\ **Last updated:** [July 13, 2016, 11:16am UTC](https://discuss.elastic.co/t/calculation-of-first-switched-and-last-switched-is-not-correct-in-netflow-rb-cocde/37151 "2016-07-13T11:16:06Z")
Looking at below snap of netfow.rb, It seems that overflow of bit is taken care during calculation of first\_switched and last\_switched. I can think a case where system up time may be smaller than first switched time in … --- ## [Discovery.zen.minimum\_master\_nodes](https://discuss.elastic.co/t/discovery-zen-minimum-master-nodes/39924)
**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\ **Replies:** 1\ **Last updated:** [January 23, 2016, 12:47am UTC](https://discuss.elastic.co/t/discovery-zen-minimum-master-nodes/39924 "2016-01-23T00:47:09Z")
Can anyone please explain me the significance of setting discovery.zen.minimum\_master\_nodes and how it avoids split brain.Also the formula mentioned to set this value is not clear .what would be the number of nodes in th… --- ## [Logstash failed to send ping to elasticsearch](https://discuss.elastic.co/t/logstash-failed-to-send-ping-to-elasticsearch/22611)
**Author:** [@Monika\_Bhadauria](https://discuss.elastic.co/u/Monika_Bhadauria)\ **Replies:** 1\ **Last updated:** [March 11, 2015, 11:26am UTC](https://discuss.elastic.co/t/logstash-failed-to-send-ping-to-elasticsearch/22611 "2015-03-11T11:26:02Z")
Hi guys, I have my Elasticsearch on one server and logstash on another. I am getting the following error in my logstash, will need your inputs: log4j, \[2015-03-11T05:26:32.662\] WARN: org.elasticsearch.discove… --- ## [Key\_as\_string formating glued to key](https://discuss.elastic.co/t/key-as-string-formating-glued-to-key/20106)
**Author:** [@TJ1](https://discuss.elastic.co/u/TJ1)\ **Replies:** 1\ **Last updated:** [October 7, 2014, 9:29am UTC](https://discuss.elastic.co/t/key-as-string-formating-glued-to-key/20106 "2014-10-07T09:29:06Z")
Hi, I'm doing some experiments on elasticsearch as it looks a very promising solution in our system. While trying to do some date aggregation I've noticed some odd behavior when trying to format date { "aggs"… --- ## [Proper way to restart elasticsearch in a cluster](https://discuss.elastic.co/t/proper-way-to-restart-elasticsearch-in-a-cluster/355794)
**Author:** [@tegerei](https://discuss.elastic.co/u/tegerei)\ **Replies:** 4\ **Last updated:** [March 20, 2024, 7:17pm UTC](https://discuss.elastic.co/t/proper-way-to-restart-elasticsearch-in-a-cluster/355794 "2024-03-20T19:17:00Z")
Hello, I have a 3 node ES cluster. Sometimes I do restarts on some or all of the nodes. Despite disabling shard allocation as explained here, I still get failed shards after the restart is complete and shard re-allocati… --- ## [Порядок слов в полнотекстном поиске](https://discuss.elastic.co/t/topic/310239)
**Author:** [@Evgeny\_Antipin](https://discuss.elastic.co/u/Evgeny_Antipin)\ **Replies:** 4\ **Last updated:** [August 4, 2022, 11:00am UTC](https://discuss.elastic.co/t/topic/310239 "2022-08-04T11:00:54Z")
Доброго дня. Есть такой индекс: { "ta": { "mappings": { "properties": { "address": { "type": "text" }, "obj\_id": { … --- ## [How can i stop to generating monitoring index? its taking too much memory without any index creation](https://discuss.elastic.co/t/how-can-i-stop-to-generating-monitoring-index-its-taking-too-much-memory-without-any-index-creation/208710)
**Author:** [@Mitesh\_Shah1](https://discuss.elastic.co/u/Mitesh_Shah1)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 5:38am UTC](https://discuss.elastic.co/t/how-can-i-stop-to-generating-monitoring-index-its-taking-too-much-memory-without-any-index-creation/208710 "2019-12-05T05:38:29Z")
Hi i m using Elasticsearch 7.4 i just install and setup Elasticsearch and configure network.host & discovery.seed\_hosts Parameter in /etc/elasticsearch/elasticsearch.yml file. Now, when i am seeing in kibana , it showi… --- ## [Module nginx save documents twice with kubernetes autodiscover](https://discuss.elastic.co/t/module-nginx-save-documents-twice-with-kubernetes-autodiscover/163483)
**Author:** [@orgoz](https://discuss.elastic.co/u/orgoz)\ **Replies:** 4\ **Last updated:** [February 14, 2019, 8:58am UTC](https://discuss.elastic.co/t/module-nginx-save-documents-twice-with-kubernetes-autodiscover/163483 "2019-02-14T08:58:44Z")
Hi, I am trying to use Kubernetes Autodiscover with filebeat 6.4.0. It is working except my nginx log are stored twice : one in original format, and one after parsing. For example, for this log line : 10.142.0.4 - \[10… --- ## [Memlock settings not taking effect?](https://discuss.elastic.co/t/memlock-settings-not-taking-effect/62209)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 4\ **Last updated:** [October 6, 2016, 7:25pm UTC](https://discuss.elastic.co/t/memlock-settings-not-taking-effect/62209 "2016-10-06T19:25:24Z")
I still see this log when I start ES (v2.3.5) even though I have these settings in /etc/security/limits.conf, and have rebooted the machine. I also have bootstrap.mlockall: true in /etc/elasticsearch.yml. \[2016-10-04 1… --- ## [Elasticsearch getting stucked after few iterations](https://discuss.elastic.co/t/elasticsearch-getting-stucked-after-few-iterations/54164)
**Author:** [@prashant](https://discuss.elastic.co/u/prashant)\ **Replies:** 4\ **Last updated:** [June 29, 2016, 6:15am UTC](https://discuss.elastic.co/t/elasticsearch-getting-stucked-after-few-iterations/54164 "2016-06-29T06:15:43Z")
Hello, I am using ES ver 1.7.4 and we are using java api to search and make connection to es. Searching and making connection is in parallel, we have observed that after few minutes elasticsearch getting stucked, neith… --- ## [Disable dynamic scripting in Elasticsearch Grails Plugin](https://discuss.elastic.co/t/disable-dynamic-scripting-in-elasticsearch-grails-plugin/52900)
**Author:** [@mdhavale](https://discuss.elastic.co/u/mdhavale)\ **Replies:** 4\ **Last updated:** [June 17, 2016, 9:01pm UTC](https://discuss.elastic.co/t/disable-dynamic-scripting-in-elasticsearch-grails-plugin/52900 "2016-06-17T21:01:10Z")
This is kind of a longshot, but does anyone know a means of disabling dynamic scripting in the Elasticsearch grails plugin? The plugin doesn't have all the features/toggles of normal ES. I'm just curious if anyone has … --- ## [Global ordinal cache invalidation](https://discuss.elastic.co/t/global-ordinal-cache-invalidation/47795)
**Author:** [@xam](https://discuss.elastic.co/u/xam)\ **Replies:** 4\ **Last updated:** [April 25, 2016, 3:42pm UTC](https://discuss.elastic.co/t/global-ordinal-cache-invalidation/47795 "2016-04-25T15:42:36Z")
Hi all, I run some tests with aggregation. I have two types of data ("business" and "meta" types), that I can query separatly, but also combine them with parent-child queries. The data for my "business" type doesn't ch… --- ## [JVM metrics failing on latest java17 openj9 with the java agent](https://discuss.elastic.co/t/jvm-metrics-failing-on-latest-java17-openj9-with-the-java-agent/337863)
**Author:** [@kroonprins](https://discuss.elastic.co/u/kroonprins)\ **Replies:** 5\ **Last updated:** [July 7, 2023, 4:41pm UTC](https://discuss.elastic.co/t/jvm-metrics-failing-on-latest-java17-openj9-with-the-java-agent/337863 "2023-07-07T16:41:36Z")
APM Agent language and version: java 1.39.0 Description of the problem including expected versus actual behavior: When using the latest version of the openj9 docker image for java 17 (bm-semeru-runtimes:open-17-jdk-jam… --- ## [“Error” message creates a pop-up \[esaggs\]\>](https://discuss.elastic.co/t/error-message-creates-a-pop-up-esaggs/260803)
**Author:** [@gulshann](https://discuss.elastic.co/u/gulshann)\ **Replies:** 5\ **Last updated:** [February 16, 2021, 11:15am UTC](https://discuss.elastic.co/t/error-message-creates-a-pop-up-esaggs/260803 "2021-02-16T11:15:18Z")
Hi, if I am ideal for more than 10 minutes and then try to interact Dashboard then I am getting a error pop up msg in my widget. I am using kibana v 7.10 --- ## [Kibana Discover](https://discuss.elastic.co/t/kibana-discover/88228)
**Author:** [@Aris\_Pratama](https://discuss.elastic.co/u/Aris_Pratama)\ **Replies:** 5\ **Last updated:** [June 7, 2017, 6:48am UTC](https://discuss.elastic.co/t/kibana-discover/88228 "2017-06-07T06:48:22Z")
Before that, i'm sorry for my bad english. Are kibana discover can't add more than 5 host? because there are 7 hosts that i need to monitor, but when i already config my filebeat then open my kibana, there are only fiv… --- ## [Separate index for every aggs bucket](https://discuss.elastic.co/t/separate-index-for-every-aggs-bucket/247661)
**Author:** [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\ **Replies:** 4\ **Last updated:** [September 6, 2020, 10:45am UTC](https://discuss.elastic.co/t/separate-index-for-every-aggs-bucket/247661 "2020-09-06T10:45:47Z")
Hi, I want to create a separate index for every aggs buckets. here is my watcher. I know I have to use "foreach" for my problem but can't figure out what value should I give it. thanks. --- ## [FileBeat -\> AWS MSK over TLS Client Authentication](https://discuss.elastic.co/t/filebeat-aws-msk-over-tls-client-authentication/252709)
**Author:** [@Ravi342883](https://discuss.elastic.co/u/Ravi342883)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 3:02pm UTC](https://discuss.elastic.co/t/filebeat-aws-msk-over-tls-client-authentication/252709 "2020-10-21T15:02:36Z")
Hi, Could anyone guide me with the process (or configuration) to enable TLS Client Auth while streaming data from FileBeat --\> AWS MSK What are all the params that we need to pass in FileBeat output configuration. --- ## [ECK - Internal Load Balancer unable to create](https://discuss.elastic.co/t/eck-internal-load-balancer-unable-to-create/236491)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 2\ **Last updated:** [June 10, 2020, 1:50pm UTC](https://discuss.elastic.co/t/eck-internal-load-balancer-unable-to-create/236491 "2020-06-10T13:50:33Z")
Hi Team, I am following the below document to add internal load balancer for routing the traffic from data proc, but i am unable to create one: please find the config i applied: spec: http: service: spec: … --- ## [How to debug multiline in filebeat?](https://discuss.elastic.co/t/how-to-debug-multiline-in-filebeat/195918)
**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\ **Replies:** 2\ **Last updated:** [August 22, 2019, 10:10pm UTC](https://discuss.elastic.co/t/how-to-debug-multiline-in-filebeat/195918 "2019-08-22T22:10:10Z")
Here is my filebeat.yml: filebeat.inputs: - type: log enabled: true paths: - /home/xyz/nohup.txt multiline.pattern: '^\\\[\[0-9\]{4}-\[0-9\]{2}-\[0-9\]{2}' multiline.negate: true multiline.match: after Here … --- ## [Requring object field names to be lowercase to search](https://discuss.elastic.co/t/requring-object-field-names-to-be-lowercase-to-search/114000)
**Author:** [@duydle](https://discuss.elastic.co/u/duydle)\ **Replies:** 2\ **Last updated:** [January 4, 2018, 3:00pm UTC](https://discuss.elastic.co/t/requring-object-field-names-to-be-lowercase-to-search/114000 "2018-01-04T15:00:57Z")
I'm experimenting with indexing my search results. It seems like I have to have my object field names to be lower case (not the data) when I create an index and populate my index to be able to do a Search via Match. If… --- ## [Multiline max\_lines not set](https://discuss.elastic.co/t/multiline-max-lines-not-set/73122)
**Author:** [@mjasion](https://discuss.elastic.co/u/mjasion)\ **Replies:** 2\ **Last updated:** [January 30, 2017, 12:07pm UTC](https://discuss.elastic.co/t/multiline-max-lines-not-set/73122 "2017-01-30T12:07:19Z")
Hi I'm working on harvesting large csv files using multiline option and It looks like that default option of multiline.max\_lines is not overriden by value set in filebeat.yml When filebeat is parsing record which tak… --- ## [Calculating percentage in elasticsearch](https://discuss.elastic.co/t/calculating-percentage-in-elasticsearch/40780)
**Author:** [@furqan](https://discuss.elastic.co/u/furqan)\ **Replies:** 2\ **Last updated:** [April 2, 2016, 8:11am UTC](https://discuss.elastic.co/t/calculating-percentage-in-elasticsearch/40780 "2016-04-02T08:11:32Z")
i am using bucket script for calculating percentage in Elasticsearch but i am unable to do so. I am getting could not find aggregator type bucket\_script --- ## [Insert parent doc and child doc in One Spark job](https://discuss.elastic.co/t/insert-parent-doc-and-child-doc-in-one-spark-job/41718)
**Author:** [@Netanel\_Malka](https://discuss.elastic.co/u/Netanel_Malka)\ **Replies:** 2\ **Last updated:** [February 21, 2016, 10:39pm UTC](https://discuss.elastic.co/t/insert-parent-doc-and-child-doc-in-one-spark-job/41718 "2016-02-21T22:39:27Z")
Hi, I try to insert parent doc to specific type, and child doc to another type in the same spark job. I defined in the spark conf the es.mapping.parent to the correct field. But when the job tries to saveJsonToEs() , I … --- ## [Elastic Search vs RavenDB](https://discuss.elastic.co/t/elastic-search-vs-ravendb/7911)
**Author:** [@CoGo](https://discuss.elastic.co/u/CoGo)\ **Replies:** 2\ **Last updated:** [May 30, 2012, 7:41pm UTC](https://discuss.elastic.co/t/elastic-search-vs-ravendb/7911 "2012-05-30T19:41:20Z")
Hello, I'm searching for a good search server solution and are considering the advantages and disadvantages of Elastic Search. I will use RavenDB to store the raw, general data and have heard a lot of good things abo… --- ## [Transform or Other Solution to set null value to 0 on first run](https://discuss.elastic.co/t/transform-or-other-solution-to-set-null-value-to-0-on-first-run/137075)
**Author:** [@dmdm](https://discuss.elastic.co/u/dmdm)\ **Replies:** 6\ **Last updated:** [June 27, 2018, 2:27pm UTC](https://discuss.elastic.co/t/transform-or-other-solution-to-set-null-value-to-0-on-first-run/137075 "2018-06-27T14:27:26Z")
In the below example for: yellow state for ({{ctx.payload.first.hits.total}}) and red state ({{ctx.payload.second.hits.total}}). The first time a yellow status triggers the alert there is nothing in the index so the … --- ## [What search to use?](https://discuss.elastic.co/t/what-search-to-use/36730)
**Author:** [@Stefan\_Kruse\_2](https://discuss.elastic.co/u/Stefan_Kruse_2)\ **Replies:** 6\ **Last updated:** [December 12, 2015, 8:30am UTC](https://discuss.elastic.co/t/what-search-to-use/36730 "2015-12-12T08:30:02Z")
Hi, i have the follow problem. In my elasticsearch index i have names like Festmacher,Festmacher - Emden,Festmacher - Bremerhaven,Festmacher - Hamburg,Festmacher - Bremen,Festmacher - Glückstad,Festmacher - Brunsbüttel e… --- ## [Return just some fields using Transform](https://discuss.elastic.co/t/return-just-some-fields-using-transform/350887)
**Author:** [@jcruz](https://discuss.elastic.co/u/jcruz)\ **Replies:** 7\ **Last updated:** [January 12, 2024, 7:24pm UTC](https://discuss.elastic.co/t/return-just-some-fields-using-transform/350887 "2024-01-12T19:24:41Z")
Hi there! I'm setting up a latest transform, and I would like to know if is it possible to return just some fields (from the original index) into the new transform index. I've tried to copy those needed fields and then … --- ## [Engineer certification exam topics vs Engineer I, II training labs](https://discuss.elastic.co/t/engineer-certification-exam-topics-vs-engineer-i-ii-training-labs/241433)
**Author:** [@jkhere](https://discuss.elastic.co/u/jkhere)\ **Replies:** 7\ **Last updated:** [July 23, 2020, 10:32pm UTC](https://discuss.elastic.co/t/engineer-certification-exam-topics-vs-engineer-i-ii-training-labs/241433 "2020-07-23T22:32:26Z")
Hi, The following topics are included in the official exam objectives but these are missing in the labs of Engineer I and II training labs. Write and execute pipeline aggregations Use the scroll API to retrieve large… --- ## [Sending Data from MySql to ES](https://discuss.elastic.co/t/sending-data-from-mysql-to-es/232609)
**Author:** [@Jasmin](https://discuss.elastic.co/u/Jasmin)\ **Replies:** 7\ **Last updated:** [May 15, 2020, 11:08am UTC](https://discuss.elastic.co/t/sending-data-from-mysql-to-es/232609 "2020-05-15T11:08:11Z")
Hi , i am sending 447 documents from logstash but ES is recieving only 43 , my config file : input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://ipaddress:3306/zendb" jdbc\_user =\> "\*\*\*\*" jdbc\_password =\> "\*\*\*\*\*… --- ## [Error: no objects visited](https://discuss.elastic.co/t/error-no-objects-visited/187948)
**Author:** [@mouna\_boujrad](https://discuss.elastic.co/u/mouna_boujrad)\ **Replies:** 1\ **Last updated:** [July 4, 2019, 11:25am UTC](https://discuss.elastic.co/t/error-no-objects-visited/187948 "2019-07-04T11:25:26Z")
Hello , I have installed the elasticsearch helm chart and then when I try to add security.yml to the elasticsearch i shows me this error :pensive: Release "elasticsearch" has been upgraded. Error: no objects visited t… --- ## [Logstash Plugin es\_bulk - Need a working exampleof bulk indexing](https://discuss.elastic.co/t/logstash-plugin-es-bulk-need-a-working-exampleof-bulk-indexing/157530)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 7\ **Last updated:** [January 9, 2019, 8:50am UTC](https://discuss.elastic.co/t/logstash-plugin-es-bulk-need-a-working-exampleof-bulk-indexing/157530 "2019-01-09T08:50:26Z")
We are currently posting multiple events to Elastic Search using the /\_bulk endpoint in the format: {"index":{"\_type" : "doc", "\_id": "1"}} {"category":"DATA","raw": "message 1"} {"index":{"\_type" : "doc", "\_id": "2"}} … --- ## [How to use Lucene expressions within a query to filter a search by hour](https://discuss.elastic.co/t/how-to-use-lucene-expressions-within-a-query-to-filter-a-search-by-hour/44612)
**Author:** [@nosocks](https://discuss.elastic.co/u/nosocks)\ **Replies:** 1\ **Last updated:** [March 18, 2016, 3:41pm UTC](https://discuss.elastic.co/t/how-to-use-lucene-expressions-within-a-query-to-filter-a-search-by-hour/44612 "2016-03-18T15:41:42Z")
I have a bunch of indexed documents, each of which have a startTime field which is a date. I want to query for all documents after 9 PM, regardless of what day they are on. In my production setup, I have groovy scripts… --- ## [Update settings api ignoring index.refresh\_interval](https://discuss.elastic.co/t/update-settings-api-ignoring-index-refresh-interval/10826)
**Author:** [@Telvis\_Calhoun\_Jr](https://discuss.elastic.co/u/Telvis_Calhoun_Jr)\ **Replies:** 7\ **Last updated:** [February 25, 2013, 3:31pm UTC](https://discuss.elastic.co/t/update-settings-api-ignoring-index-refresh-interval/10826 "2013-02-25T15:31:33Z")
I see the following in the logs when I attempt to update the refresh settings for an index. I'm running "0.20.1". Isn't index.refresh\_interval configurable? \[2013-02-20 16:12:59,115\]\[WARN \]\[cluster.metadata … --- ## [Parsing custom log timestamps, how?](https://discuss.elastic.co/t/parsing-custom-log-timestamps-how/310205)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [July 21, 2022, 5:41pm UTC](https://discuss.elastic.co/t/parsing-custom-log-timestamps-how/310205 "2022-07-21T17:41:58Z")
I'm having issues figuring out how to get a timestamp out of a custom log. I've been trying to use the dissect and timestamp processors via the Custom configurations field in the fleet policy -\> custom log screen. Here… --- ## [How can I create a sequence diagram using Vega or Vega-lite?](https://discuss.elastic.co/t/how-can-i-create-a-sequence-diagram-using-vega-or-vega-lite/257502)
**Author:** [@shalintha](https://discuss.elastic.co/u/shalintha)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 4:35pm UTC](https://discuss.elastic.co/t/how-can-i-create-a-sequence-diagram-using-vega-or-vega-lite/257502 "2020-12-03T16:35:39Z")
I want to create a Sequence diagram using Vega visualize for my Kibana Dashboard. Is there a way to create Sequence diagram using Vega or Vega-lite (or using D3js)? --- ## [Failed to authenticate user elastic](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic/245604)
**Author:** [@Divyabharathi](https://discuss.elastic.co/u/Divyabharathi)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 5:10am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic/245604 "2020-08-20T05:10:11Z")
I have 3 instances of elasticsearch 7.6 (2-master+data & 1- data). Cluster name is same in all three instances. I have enabled the security using xpack.security.enabled=true and xpack.security.transport.ssl.enabled=true … --- ## [Elasticsearch service fail afte upgrade](https://discuss.elastic.co/t/elasticsearch-service-fail-afte-upgrade/150143)
**Author:** [@xpico](https://discuss.elastic.co/u/xpico)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 12:19pm UTC](https://discuss.elastic.co/t/elasticsearch-service-fail-afte-upgrade/150143 "2018-09-27T12:19:16Z")
Hi, I upgrade elasticsearch from 6.3 to 6.4 and now i can't start service. I'm on Debian 9. Here systemctl status elasticsearch: elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elas… --- ## [Namescoped plugins fails to run](https://discuss.elastic.co/t/namescoped-plugins-fails-to-run/96288)
**Author:** [@ENG618](https://discuss.elastic.co/u/ENG618)\ **Replies:** 3\ **Last updated:** [August 10, 2017, 6:40pm UTC](https://discuss.elastic.co/t/namescoped-plugins-fails-to-run/96288 "2017-08-10T18:40:42Z")
github issue I am trying to create a plugin with a name spaced package name (i.e. @\/\). When doing so it is unable to run or be installed. It has to be name scoped so that it can be published … --- ## [What is default similarity in Elasticsearch 5](https://discuss.elastic.co/t/what-is-default-similarity-in-elasticsearch-5/68440)
**Author:** [@svarup](https://discuss.elastic.co/u/svarup)\ **Replies:** 3\ **Last updated:** [December 8, 2016, 2:34pm UTC](https://discuss.elastic.co/t/what-is-default-similarity-in-elasticsearch-5/68440 "2016-12-08T14:34:25Z")
I have been trouble to find what is the default similarity in Elasticsearch 5 is BM25 or Classic Lucene IF/IDF? --- ## [Elasticsearch.Net.ElasticsearchClientException: BulkAll halted after failed product check](https://discuss.elastic.co/t/elasticsearch-net-elasticsearchclientexception-bulkall-halted-after-failed-product-check/309076)
**Author:** [@dawood\_ahmad](https://discuss.elastic.co/u/dawood_ahmad)\ **Replies:** 2\ **Last updated:** [July 18, 2022, 5:09am UTC](https://discuss.elastic.co/t/elasticsearch-net-elasticsearchclientexception-bulkall-halted-after-failed-product-check/309076 "2022-07-18T05:09:23Z")
Unhandled exception. Elasticsearch.Net.ElasticsearchClientException: BulkAll halted after failed product check at Nest.BlockingSubscribeExtensions.WaitOnObservable\[TObservable,TObserve,TObserver\](TObservable observabl… --- ## [Winlogbeat - ERROR checkpoint/checkpoint.go:199](https://discuss.elastic.co/t/winlogbeat-error-checkpoint-checkpoint-go-199/218086)
**Author:** [@Mickael1](https://discuss.elastic.co/u/Mickael1)\ **Replies:** 2\ **Last updated:** [February 6, 2020, 10:40am UTC](https://discuss.elastic.co/t/winlogbeat-error-checkpoint-checkpoint-go-199/218086 "2020-02-06T10:40:50Z")
Hi everyone, To explain you simply the architecture; we collect sources windows log through our Windows Log Collector and Collector Server forward logs to SOC team with a specify number of events ID with winlogbeat 6.8 … --- ## [入力ログファイルサイズとインデックスサイズの関係性](https://discuss.elastic.co/t/topic/213988)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 1:57am UTC](https://discuss.elastic.co/t/topic/213988 "2020-01-14T01:57:38Z")
elasticsearchにファイルを取り込む際の入力ログファイルのサイズと、作成されるインデックスサイズの関係性について教えて下さい。 入力ファイルとして、110byteのログAと2byteのログBを別々のインデックスに取り込んだところ、ログAを取り込んだインデックスサイズは12121byte、ログBを取り込んだインデックスサイズは5732byteとなりました。 入力ファイル1byteあたりのインデックスサイズで考えると、ログAは… [Previous page](https://discuss.elastic.co/top.md?page=1321&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1323&per_page=50&period=all)