# Top

**URL:** https://discuss.elastic.co/top.md?page=1341&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1342

---

## [SnapshotMissingException attempting to restore s3 snapshot to different server](https://discuss.elastic.co/t/snapshotmissingexception-attempting-to-restore-s3-snapshot-to-different-server/58059)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 1\
**Last updated:** [August 15, 2016, 8:05pm UTC](https://discuss.elastic.co/t/snapshotmissingexception-attempting-to-restore-s3-snapshot-to-different-server/58059 "2016-08-15T20:05:28Z")

</div>

I've created the same snapshot repository on CLUSTER\_1 and CLUSTER\_2. I took a full snapshot on CLUSTER\_1 and attempted to run the restore command on CLUSTER\_2. The s3 bucket is correct, and the same on both. The bas…

---

## [View stuck queries in ES](https://discuss.elastic.co/t/view-stuck-queries-in-es/34606)

<div class="topic-metadata">

**Author:** [@jiten.savla](https://discuss.elastic.co/u/jiten.savla)\
**Replies:** 1\
**Last updated:** [November 15, 2015, 4:46am UTC](https://discuss.elastic.co/t/view-stuck-queries-in-es/34606 "2015-11-15T04:46:58Z")

</div>

We have been seeing an issue that ES gets stuck with queries and the client doesn't return results. If we kill the client the queries are still stuck with ES and any further queries don't yield any results. The only solu…

---

## [Help with PHP wrapper for \_suggest query](https://discuss.elastic.co/t/help-with-php-wrapper-for--suggest-query/14247)

<div class="topic-metadata">

**Author:** [@kevins](https://discuss.elastic.co/u/kevins)\
**Replies:** 1\
**Last updated:** [November 5, 2013, 3:00pm UTC](https://discuss.elastic.co/t/help-with-php-wrapper-for--suggest-query/14247 "2013-11-05T15:00:19Z")

</div>

I am using this simple constructor class for PHP calls to ES. https://github.com/hasantayyar/elasticsearch-php/blob/master/ElasticSearch.php I am trying to add a stub for the following suggest query: curl -XPOST…

---

## [Removal of orphan indices / cleanup when removing Entreprise Search on Elastic Cloud](https://discuss.elastic.co/t/removal-of-orphan-indices-cleanup-when-removing-entreprise-search-on-elastic-cloud/303804)

<div class="topic-metadata">

**Author:** [@Damien\_Alexandre](https://discuss.elastic.co/u/Damien_Alexandre)\
**Replies:** 2\
**Last updated:** [June 25, 2022, 8:04am UTC](https://discuss.elastic.co/t/removal-of-orphan-indices-cleanup-when-removing-entreprise-search-on-elastic-cloud/303804 "2022-06-25T08:04:02Z")

</div>

I had a cluster running on Elastic Cloud and having A LOT of system / hidden / technical indices - multiple hundreds of them. That's something I already rant about here Is there a way to clean .kibana\* indices? I got 22…

---

## [Kibana Visualization - combine filters](https://discuss.elastic.co/t/kibana-visualization-combine-filters/218862)

<div class="topic-metadata">

**Author:** [@rmoat](https://discuss.elastic.co/u/rmoat)\
**Replies:** 2\
**Last updated:** [February 12, 2020, 2:28pm UTC](https://discuss.elastic.co/t/kibana-visualization-combine-filters/218862 "2020-02-12T14:28:34Z")

</div>

Hello, I'm trying to combine two filters together for a visualization, but it is not functioning correctly at all. I wanted to combine: winlog.event\_id:4723 and winlog.keywords:"Audit Success". When I do that, I'm gett…

---

## [How to search Regular expressions in Kibana 7.5](https://discuss.elastic.co/t/how-to-search-regular-expressions-in-kibana-7-5/217644)

<div class="topic-metadata">

**Author:** [@mosherr](https://discuss.elastic.co/u/mosherr)\
**Replies:** 2\
**Last updated:** [February 3, 2020, 7:10pm UTC](https://discuss.elastic.co/t/how-to-search-regular-expressions-in-kibana-7-5/217644 "2020-02-03T19:10:38Z")

</div>

Hi all, i have Kibana 7.5 version I'm trying to search for a particular field in REGEX. The field is text-type, for example: 35-1010111\_HFBg 41-9991234\_ERF 51-9912234\_FGF 41-8888234\_ASDFG 21\_454556\_JHDS How do I…

---

## [Monitoring indices not created](https://discuss.elastic.co/t/monitoring-indices-not-created/192786)

<div class="topic-metadata">

**Author:** [@mstarensier](https://discuss.elastic.co/u/mstarensier)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 2:39am UTC](https://discuss.elastic.co/t/monitoring-indices-not-created/192786 "2019-08-01T02:39:18Z")

</div>

I'm running a new prod 7.2 cluster. Want to view my ES logs in kibana as I did in dev cluster. I understand recommendation to use a seperate monitoring cluster, but for now, just want local. I set my cluster settings s…

---

## [How to enchance the body text in email actions while using watcher in elasticsearch](https://discuss.elastic.co/t/how-to-enchance-the-body-text-in-email-actions-while-using-watcher-in-elasticsearch/180350)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 2\
**Last updated:** [May 10, 2019, 5:26am UTC](https://discuss.elastic.co/t/how-to-enchance-the-body-text-in-email-actions-while-using-watcher-in-elasticsearch/180350 "2019-05-10T05:26:08Z")

</div>

This is my action part of my watcher: "actions" : { "email\_admin" : { "email" : { "to" : "vishnumk@company.com", "subject" : "Priority : High State : Down ", "body": { "text": "Portal\_URL:{{#ctx.payload.hits.hits}…

---

## [Watcher send content of Key-Value](https://discuss.elastic.co/t/watcher-send-content-of-key-value/163349)

<div class="topic-metadata">

**Author:** [@Alejandro\_Martinez\_F](https://discuss.elastic.co/u/Alejandro_Martinez_F)\
**Replies:** 2\
**Last updated:** [January 11, 2019, 2:12pm UTC](https://discuss.elastic.co/t/watcher-send-content-of-key-value/163349 "2019-01-11T14:12:20Z")

</div>

Hello!! I'm using the watcher to send notifications. For example, an email notification. I would like to include value of Key-Values on email notification. Practical case example, I have a watcher that firing when fou…

---

## [Visual Builder split bars](https://discuss.elastic.co/t/visual-builder-split-bars/106690)

<div class="topic-metadata">

**Author:** [@cosmo](https://discuss.elastic.co/u/cosmo)\
**Replies:** 2\
**Last updated:** [November 8, 2017, 8:30am UTC](https://discuss.elastic.co/t/visual-builder-split-bars/106690 "2017-11-08T08:30:52Z")

</div>

Hello Does anyone know if it possible to get a split bar chart like the normal Vertical Bar visualization in the Visual builder? Vertial bar: (split bars) - this is what I want \[image\] Visual builder, not stacked \[i…

---

## [Parameterize Watcher query string](https://discuss.elastic.co/t/parameterize-watcher-query-string/43855)

<div class="topic-metadata">

**Author:** [@Rubaiyat\_Islam\_Sadat](https://discuss.elastic.co/u/Rubaiyat_Islam_Sadat)\
**Replies:** 2\
**Last updated:** [March 9, 2016, 7:23am UTC](https://discuss.elastic.co/t/parameterize-watcher-query-string/43855 "2016-03-09T07:23:29Z")

</div>

I am currently using Watcher and part of it is as follows. ................. "input" : { "search" : { "request" : { "indices" : \[ "" \], "body" : { "query" : { "filtered": { "query": { "query\_string": { "query": "\\"rd1\*…

---

## [Disable field "count" in filebeat output](https://discuss.elastic.co/t/disable-field-count-in-filebeat-output/39568)

<div class="topic-metadata">

**Author:** [@kurromat](https://discuss.elastic.co/u/kurromat)\
**Replies:** 2\
**Last updated:** [January 20, 2016, 8:55am UTC](https://discuss.elastic.co/t/disable-field-count-in-filebeat-output/39568 "2016-01-20T08:55:28Z")

</div>

Hi, after switching from logstash-forwarder to filebeat, I noticed a new field named count in the output. Is it possible to disable or rename this field via configuration? (And out of interest, which meaning does thi…

---

## [ES2.0 - Pipeline Aggregation for logging user?](https://discuss.elastic.co/t/es2-0-pipeline-aggregation-for-logging-user/25303)

<div class="topic-metadata">

**Author:** [@german23](https://discuss.elastic.co/u/german23)\
**Replies:** 2\
**Last updated:** [July 14, 2015, 5:54am UTC](https://discuss.elastic.co/t/es2-0-pipeline-aggregation-for-logging-user/25303 "2015-07-14T05:54:15Z")

</div>

Hey guys, i want to do some feedback about the pipeline aggregations and the examples that have been brought till now. When i first read about pipeline aggregation is was like: "Oh very cool - now i don´t need shell …

---

## [Validating mapping file](https://discuss.elastic.co/t/validating-mapping-file/10132)

<div class="topic-metadata">

**Author:** [@Himanshu\_Gupta](https://discuss.elastic.co/u/Himanshu_Gupta)\
**Replies:** 2\
**Last updated:** [December 20, 2012, 10:33am UTC](https://discuss.elastic.co/t/validating-mapping-file/10132 "2012-12-20T10:33:18Z")

</div>

Hi, I wanted to know if we have any way to check if any mapping file is present or not in specified location for elastic search. apart from that can we validate mapping json, if it correct or not. -Himanshu -- …

---

## [Illegal chars in doc id](https://discuss.elastic.co/t/illegal-chars-in-doc-id/5196)

<div class="topic-metadata">

**Author:** [@mrg](https://discuss.elastic.co/u/mrg)\
**Replies:** 2\
**Last updated:** [August 19, 2011, 6:02am UTC](https://discuss.elastic.co/t/illegal-chars-in-doc-id/5196 "2011-08-19T06:02:18Z")

</div>

am looking to create (index) a documents with base-64 chars that include slashes. ES reliably returns http. 400 :-) What is the preferred work-around when this is the case? In this context, am using this as Doc I…

---

## [Error in logstash output by using elasticsearch update by query](https://discuss.elastic.co/t/error-in-logstash-output-by-using-elasticsearch-update-by-query/314405)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 0\
**Last updated:** [September 14, 2022, 11:47am UTC](https://discuss.elastic.co/t/error-in-logstash-output-by-using-elasticsearch-update-by-query/314405 "2022-09-14T11:47:35Z")

</div>

Hi All, I am trying to update new field to the existing documents using update by query through logstash and below is the configuration I have tried, input { http\_poller { urls =\> { version =\> "https://d…

---

## [Need help logstash-input-salesforce](https://discuss.elastic.co/t/need-help-logstash-input-salesforce/222028)

<div class="topic-metadata">

**Author:** [@bittusingh](https://discuss.elastic.co/u/bittusingh)\
**Replies:** 0\
**Last updated:** [March 4, 2020, 9:45am UTC](https://discuss.elastic.co/t/need-help-logstash-input-salesforce/222028 "2020-03-04T09:45:38Z")

</div>

Hi All, I have usecase to retrieve data from salesforce SDFS which can be done using logstash-input-salesforce. But, when trying to install the plugin it is throwing error Validating logstash-input-salesforce Install…

---

## [Report DLQ's max\_queue\_size\_in\_bytes in logstash API](https://discuss.elastic.co/t/report-dlqs-max-queue-size-in-bytes-in-logstash-api/164585)

<div class="topic-metadata">

**Author:** [@Sarfaraz\_Ahmad](https://discuss.elastic.co/u/Sarfaraz_Ahmad)\
**Replies:** 0\
**Last updated:** [January 17, 2019, 8:13am UTC](https://discuss.elastic.co/t/report-dlqs-max-queue-size-in-bytes-in-logstash-api/164585 "2019-01-17T08:13:17Z")

</div>

logstash's monitoring API only reports the bytes used in the DLQ. If it were to report the configured bytes for the DLQ like what it does with the persistent queue, then my monitoring tool can figure out what percentage…

---

## [SunCertPathBuilderException when Logstash 6.4.2 outputs to HTTPS](https://discuss.elastic.co/t/suncertpathbuilderexception-when-logstash-6-4-2-outputs-to-https/159567)

<div class="topic-metadata">

**Author:** [@vmaldosan](https://discuss.elastic.co/u/vmaldosan)\
**Replies:** 0\
**Last updated:** [December 5, 2018, 3:44pm UTC](https://discuss.elastic.co/t/suncertpathbuilderexception-when-logstash-6-4-2-outputs-to-https/159567 "2018-12-05T15:44:26Z")

</div>

Hi there, I'm trying to forward messages from RabbitMQ to an HTTPS server, using a self-signed certificate. The relevant piece of my configuration is as follows: output { http { url =\> "https://localhost:84…

---

## [Cannot convert MethodHandle(List,int)int to (Object,String)String](https://discuss.elastic.co/t/cannot-convert-methodhandle-list-int-int-to-object-string-string/134439)

<div class="topic-metadata">

**Author:** [@psu](https://discuss.elastic.co/u/psu)\
**Replies:** 0\
**Last updated:** [June 4, 2018, 2:28pm UTC](https://discuss.elastic.co/t/cannot-convert-methodhandle-list-int-int-to-object-string-string/134439 "2018-06-04T14:28:50Z")

</div>

I'm using \_update\_by\_query with script which contains many if's like this: ArrayList tmp=\[\]; if(ctx.\_source.anketa\["REGION"\]==3){tmp.add(2);} if(ctx.\_source.anketa\["REGION"\]==4){tmp.add(5);} if(ctx.\_source.anketa\["REGIO…

---

## [Need Help with Merging Data from Two Elasticsearch Indices](https://discuss.elastic.co/t/need-help-with-merging-data-from-two-elasticsearch-indices/363343)

<div class="topic-metadata">

**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\
**Replies:** 4\
**Last updated:** [July 19, 2024, 7:32am UTC](https://discuss.elastic.co/t/need-help-with-merging-data-from-two-elasticsearch-indices/363343 "2024-07-19T07:32:15Z")

</div>

Hi, I need to merge data from two indices (test1 and test2) based on a common key (information). Here’s a simplified example of my indices: Index test1: sample\_id information price --------- ------- ---…

---

## [Ingest pipeline with conditions runs tests correct but no documents are processed](https://discuss.elastic.co/t/ingest-pipeline-with-conditions-runs-tests-correct-but-no-documents-are-processed/339150)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 4\
**Last updated:** [July 25, 2023, 11:55am UTC](https://discuss.elastic.co/t/ingest-pipeline-with-conditions-runs-tests-correct-but-no-documents-are-processed/339150 "2023-07-25T11:55:45Z")

</div>

Hi; Elasticsearch version: 8.6.2 Logstash version: 8.6.2 I have created and tested at simple ingest pipeline, which adds an event.ingested field to Filebeat documents, which do not already have this field set b…

---

## [Elasticsearch doesn't run as root](https://discuss.elastic.co/t/elasticsearch-doesnt-run-as-root/145931)

<div class="topic-metadata">

**Author:** [@fabrice](https://discuss.elastic.co/u/fabrice)\
**Replies:** 4\
**Last updated:** [August 24, 2018, 3:37pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-run-as-root/145931 "2018-08-24T15:37:41Z")

</div>

Good morning all the community... I've serious problem with my elasticsearch. I've installed and configured sonarqube version 6.7 (and 7.0, 7.1) on my pc to do the test for application that i developed. when i run son…

---

## [Date format parsing](https://discuss.elastic.co/t/date-format-parsing/125584)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 4\
**Last updated:** [March 26, 2018, 12:19pm UTC](https://discuss.elastic.co/t/date-format-parsing/125584 "2018-03-26T12:19:30Z")

</div>

Hi, The Original format of the date in the events is: Monday, March 5, 2018 11:58:24:874 The date filter I used: date { match =\> \[ "timestamp", "EEEE, MMMM d, yyyy HH:mm:ss:SSS" \] } I…

---

## [Too many shards, 1960 of them](https://discuss.elastic.co/t/too-many-shards-1960-of-them/72823)

<div class="topic-metadata">

**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\
**Replies:** 4\
**Last updated:** [January 26, 2017, 9:00pm UTC](https://discuss.elastic.co/t/too-many-shards-1960-of-them/72823 "2017-01-26T21:00:26Z")

</div>

Hi, Originally like most users I had one index logstash-\*. Since I have been implementing Elasticsearch, it seemed reasonable to define new indexes for each application or group of apps. This has led me to the above pr…

---

## [Log4j in integration with logstash](https://discuss.elastic.co/t/log4j-in-integration-with-logstash/55333)

<div class="topic-metadata">

**Author:** [@pavana](https://discuss.elastic.co/u/pavana)\
**Replies:** 4\
**Last updated:** [July 13, 2016, 1:39pm UTC](https://discuss.elastic.co/t/log4j-in-integration-with-logstash/55333 "2016-07-13T13:39:16Z")

</div>

Is it possible to configure the data in message field in logged data. For example , I want to give data in message field while logging, whose logfield is INFO as shown below. 2016-06-16 INFO main - Airtel,500060,1000…

---

## [Removing item from array based on string value from another field](https://discuss.elastic.co/t/removing-item-from-array-based-on-string-value-from-another-field/278279)

<div class="topic-metadata">

**Author:** [@mad\_dog](https://discuss.elastic.co/u/mad_dog)\
**Replies:** 6\
**Last updated:** [July 9, 2021, 6:27pm UTC](https://discuss.elastic.co/t/removing-item-from-array-based-on-string-value-from-another-field/278279 "2021-07-09T18:27:00Z")

</div>

I have a ruby filter that puts all mac addresses (access points and stations macs) in a log to mac\_addresses field and this works fine. I also have another grok filter which puts only station mac addresses to station\_ma…

---

## [Central Management output to Elasticsearch](https://discuss.elastic.co/t/central-management-output-to-elasticsearch/162660)

<div class="topic-metadata">

**Author:** [@Rasmus\_Fredensborg\_J](https://discuss.elastic.co/u/Rasmus_Fredensborg_J)\
**Replies:** 6\
**Last updated:** [January 22, 2019, 11:18am UTC](https://discuss.elastic.co/t/central-management-output-to-elasticsearch/162660 "2019-01-22T11:18:39Z")

</div>

Hi, Thank you for your amazing products. I just started using Central management for beats and got everything working except for output to Elasticsearch cloud. I looked at this issue but it doesn't seem to be related to…

---

## [Docker.elastic.co/logstash/logstash version 5.6.1 does not send logs to ElasticSearch on a different server](https://discuss.elastic.co/t/docker-elastic-co-logstash-logstash-version-5-6-1-does-not-send-logs-to-elasticsearch-on-a-different-server/118717)

<div class="topic-metadata">

**Author:** [@ajstark123](https://discuss.elastic.co/u/ajstark123)\
**Replies:** 6\
**Last updated:** [February 7, 2018, 2:08pm UTC](https://discuss.elastic.co/t/docker-elastic-co-logstash-logstash-version-5-6-1-does-not-send-logs-to-elasticsearch-on-a-different-server/118717 "2018-02-07T14:08:58Z")

</div>

The docker.elastic.co/logstash/logstash:5.6.1 image is not sending logs to an ElasticSearch cluster that is running on different servers. We are running this docket image in docker toolbox on a windows 7.0 PC. The Ela…

---

## [Split a field value in a Visualization](https://discuss.elastic.co/t/split-a-field-value-in-a-visualization/327303)

<div class="topic-metadata">

**Author:** [@Jonathan\_Fernandez](https://discuss.elastic.co/u/Jonathan_Fernandez)\
**Replies:** 3\
**Last updated:** [March 9, 2023, 7:37am UTC](https://discuss.elastic.co/t/split-a-field-value-in-a-visualization/327303 "2023-03-09T07:37:53Z")

</div>

Hi everyone, Currently I am trying to split the value of a field (an email) by the '@' in an "Aggregation Based - Data Table" visualization at Kibana, so the expected output for an email field with value name@domain.com …

---

## [Connection problem at the second login](https://discuss.elastic.co/t/connection-problem-at-the-second-login/309851)

<div class="topic-metadata">

**Author:** [@tamir\_raviv](https://discuss.elastic.co/u/tamir_raviv)\
**Replies:** 3\
**Last updated:** [July 18, 2022, 8:51am UTC](https://discuss.elastic.co/t/connection-problem-at-the-second-login/309851 "2022-07-18T08:51:22Z")

</div>

Hey. Running elasticsearch locally. Using elasticsearch-8.3.2 and kibana-8.3.2. I'm able to run everything smoothly the first time. After some timeout, when i'm not running anything, Kibana asking me to login again when …

---

## [Creating Index pattern](https://discuss.elastic.co/t/creating-index-pattern/297679)

<div class="topic-metadata">

**Author:** [@Hamdi\_Hassan](https://discuss.elastic.co/u/Hamdi_Hassan)\
**Replies:** 3\
**Last updated:** [February 20, 2022, 2:25pm UTC](https://discuss.elastic.co/t/creating-index-pattern/297679 "2022-02-20T14:25:15Z")

</div>

Problems to create an index pattern I have a problem when I'm trying to create an index pattern in Kibana. I have a system configured in the Elasticsearch cloud for my company, and I access it with a user with superuse…

---

## [Bool must and must\_not as arrays in documentation](https://discuss.elastic.co/t/bool-must-and-must-not-as-arrays-in-documentation/167909)

<div class="topic-metadata">

**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 6:02pm UTC](https://discuss.elastic.co/t/bool-must-and-must-not-as-arrays-in-documentation/167909 "2019-02-11T18:02:34Z")

</div>

I have just discovered that must and must\_not in bool queries can be arrays. The documentation page doesn't say this and all the examples show an object for these and an array for should, so I assumed that was what it sh…

---

## [Logstash multiple pipelines bug?](https://discuss.elastic.co/t/logstash-multiple-pipelines-bug/166582)

<div class="topic-metadata">

**Author:** [@sabdoul](https://discuss.elastic.co/u/sabdoul)\
**Replies:** 3\
**Last updated:** [February 4, 2019, 10:31am UTC](https://discuss.elastic.co/t/logstash-multiple-pipelines-bug/166582 "2019-02-04T10:31:05Z")

</div>

Hello, I made a mutiple pipeline with version 6.6 of logstash. But, he has behavior that is unexpected. Indeed I have my multiple pipeline that generates duplicates of the data as if making a loop before stopping the p…

---

## [ES service could not start](https://discuss.elastic.co/t/es-service-could-not-start/152741)

<div class="topic-metadata">

**Author:** [@Qing\_Liu](https://discuss.elastic.co/u/Qing_Liu)\
**Replies:** 3\
**Last updated:** [October 17, 2018, 11:32am UTC](https://discuss.elastic.co/t/es-service-could-not-start/152741 "2018-10-17T11:32:54Z")

</div>

Environments: 4GB memory virtual machine, Ubuntu 16.04 , jdk-8, ES-6.4.2 No message outputs after executing: sudo systemctl start elasticsearch after excuting: sudo /etc/init.d/elasticsearch start it says : \[ ok…

---

## [ElasticSearch Plugin Upgrade \[1.7 to 5.4\] -- Integration Testing](https://discuss.elastic.co/t/elasticsearch-plugin-upgrade-1-7-to-5-4-integration-testing/102042)

<div class="topic-metadata">

**Author:** [@taylorgaw](https://discuss.elastic.co/u/taylorgaw)\
**Replies:** 3\
**Last updated:** [November 10, 2017, 3:25pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-upgrade-1-7-to-5-4-integration-testing/102042 "2017-11-10T15:25:03Z")

</div>

I'm currently working on upgrading a plugin to be compatible with our new 5.4 cluster. I've been following this tutorial, which has been very helpful, however I've hit a dead end in my quest for resolution... Here's my …

---

## [LS error while reindexing data](https://discuss.elastic.co/t/ls-error-while-reindexing-data/40218)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [November 1, 2016, 10:08am UTC](https://discuss.elastic.co/t/ls-error-while-reindexing-data/40218 "2016-11-01T10:08:36Z")

</div>

Hi Experts , I am using logstash1.5.4 with ES1.7.1 to reindex old data to a new index . My LS conf file is like input { elasticsearch { hosts =\> "localhost" index =\> "based1" query =\> "\*" size =\> 5…

---

## [Upgrade to 5 file descriptors Issue](https://discuss.elastic.co/t/upgrade-to-5-file-descriptors-issue/64359)

<div class="topic-metadata">

**Author:** [@ggp](https://discuss.elastic.co/u/ggp)\
**Replies:** 3\
**Last updated:** [October 31, 2016, 5:11pm UTC](https://discuss.elastic.co/t/upgrade-to-5-file-descriptors-issue/64359 "2016-10-31T17:11:02Z")

</div>

I am trying to upgrade ES cluster to 5 and using \_plugin/elasticsearch-migration/ when i am running cluster checkup and its complaining about issue At least 65536 file descriptors must be available to Elasticsearch first…

---

## [Logstash (grokparsefailure)](https://discuss.elastic.co/t/logstash-grokparsefailure/54717)

<div class="topic-metadata">

**Author:** [@gfst1](https://discuss.elastic.co/u/gfst1)\
**Replies:** 3\
**Last updated:** [July 5, 2016, 11:23am UTC](https://discuss.elastic.co/t/logstash-grokparsefailure/54717 "2016-07-05T11:23:10Z")

</div>

Hi!!! I have a problem, please help=( message 2W\\u0000\\u0000\\u0000\\u00012C\\u0000\\u0000\\u0000\\xFAx^l\\x90\\xCFN\\xC30\\f\\x87ǛT\>g\]\\x93u\\xCD\\xC8i\\xE2\\xC8\\u0015N Te\\xAD\[\\"\\xF2\\xA7J\\xD2ISŻ\\xE3\\x8E\\v\\b\\xA4\\u001C\\xA2\\xCF\\xF2g\\xF…

---

## [Need advices for my cluster design](https://discuss.elastic.co/t/need-advices-for-my-cluster-design/50555)

<div class="topic-metadata">

**Author:** [@dihpierrick](https://discuss.elastic.co/u/dihpierrick)\
**Replies:** 3\
**Last updated:** [May 23, 2016, 7:09am UTC](https://discuss.elastic.co/t/need-advices-for-my-cluster-design/50555 "2016-05-23T07:09:49Z")

</div>

Hello threre, \[:slight\_smile:\] I'm looking for advices for a new cluster. I would like to manage my firewalls logs with an ES cluster. I have five sites in five separate cities. So, my idea is to install an ELK stack o…

---

## [Jdbc-elasticsearch table names with hyphens](https://discuss.elastic.co/t/jdbc-elasticsearch-table-names-with-hyphens/29069)

<div class="topic-metadata">

**Author:** [@entreri](https://discuss.elastic.co/u/entreri)\
**Replies:** 3\
**Last updated:** [September 13, 2015, 8:39pm UTC](https://discuss.elastic.co/t/jdbc-elasticsearch-table-names-with-hyphens/29069 "2015-09-13T20:39:28Z")

</div>

Hello, any jdbc-elasticsearch users here who can help me figure out how to query data from MS SQL servers which have table names containing hyphens? I can't seem to get around the following error... Caused by: com.micr…

---

## [How to show overall server names in a table in kibana?](https://discuss.elastic.co/t/how-to-show-overall-server-names-in-a-table-in-kibana/28839)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [September 10, 2015, 10:26pm UTC](https://discuss.elastic.co/t/how-to-show-overall-server-names-in-a-table-in-kibana/28839 "2015-09-10T22:26:15Z")

</div>

Hi Experts, I have very basic requirement . I want to show overall servers in a single table . I checked kibana only provides me to select top servers as per there event counts . What I want is to show overall server n…

---

## [Failed indices in snapshot since upgrade to 8.5.3](https://discuss.elastic.co/t/failed-indices-in-snapshot-since-upgrade-to-8-5-3/322802)

<div class="topic-metadata">

**Author:** [@QuLh44](https://discuss.elastic.co/u/QuLh44)\
**Replies:** 7\
**Last updated:** [January 11, 2023, 3:55pm UTC](https://discuss.elastic.co/t/failed-indices-in-snapshot-since-upgrade-to-8-5-3/322802 "2023-01-11T15:55:22Z")

</div>

Hello, Since we upgraded Elasticsearch/Logstash/Kibana to 8.5.3 version yesterday, we have lot of failed indices in snapshots (559 indices are OK, but 168 failed). Here is the error for each of them : INTERNAL\_SERVER\_…

---

## [Implementing Search After to fetch hits greater than 10000](https://discuss.elastic.co/t/implementing-search-after-to-fetch-hits-greater-than-10000/309913)

<div class="topic-metadata">

**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\
**Replies:** 1\
**Last updated:** [July 18, 2022, 2:59pm UTC](https://discuss.elastic.co/t/implementing-search-after-to-fetch-hits-greater-than-10000/309913 "2022-07-18T14:59:18Z")

</div>

Hi team, I am using elasticsearch in java to query hits that are greater than maximum default of 10000. For the same I came across using search after along with sort. I tried the query by sorting it on the basis of @ti…

---

## [Elastic 8.1 installation on windows with HTTPS and wild card certificates](https://discuss.elastic.co/t/elastic-8-1-installation-on-windows-with-https-and-wild-card-certificates/300703)

<div class="topic-metadata">

**Author:** [@thomasbosa](https://discuss.elastic.co/u/thomasbosa)\
**Replies:** 1\
**Last updated:** [March 26, 2022, 8:38am UTC](https://discuss.elastic.co/t/elastic-8-1-installation-on-windows-with-https-and-wild-card-certificates/300703 "2022-03-26T08:38:36Z")

</div>

Hi All, I'm trying to setup an elastic-search cluster, on Windows machines (all windows server 2019). When i run the Elasticsearch.bat for the first time, it configures the node with a default configuration, which is n…

---

## [Multiple Grok Processors in pipeline: "\[processors\] required property is missing"](https://discuss.elastic.co/t/multiple-grok-processors-in-pipeline-processors-required-property-is-missing/236741)

<div class="topic-metadata">

**Author:** [@KookieMeister](https://discuss.elastic.co/u/KookieMeister)\
**Replies:** 1\
**Last updated:** [June 12, 2020, 1:28pm UTC](https://discuss.elastic.co/t/multiple-grok-processors-in-pipeline-processors-required-property-is-missing/236741 "2020-06-12T13:28:47Z")

</div>

Hi there, I'm currently using the following pipeline with success: { "ingestpipeline" : { "description" : "...", "processors" : \[ { "grok" : { "field" : "message", …

---

## [Unable to connect to elastic after adding TLS support - Unable to revive connection: https://elastic.xxxxx.com:9200/](https://discuss.elastic.co/t/unable-to-connect-to-elastic-after-adding-tls-support-unable-to-revive-connection-https-elastic-xxxxx-com-9200/210985)

<div class="topic-metadata">

**Author:** [@Elad\_hirsch](https://discuss.elastic.co/u/Elad_hirsch)\
**Replies:** 1\
**Last updated:** [December 9, 2019, 9:57am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elastic-after-adding-tls-support-unable-to-revive-connection-https-elastic-xxxxx-com-9200/210985 "2019-12-09T09:57:48Z")

</div>

Hi, I was following all the instructions getting support for security addon under v7.5 and understood that all elastic\<-\>kibna comm in to be TLS i saw the certutil solution with csr but as lack of real documentation an…

---

## [Java Needs](https://discuss.elastic.co/t/java-needs/205569)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 1\
**Last updated:** [October 29, 2019, 1:01am UTC](https://discuss.elastic.co/t/java-needs/205569 "2019-10-29T01:01:43Z")

</div>

Does Kibana need JAVA/JDK/JVM? In 4.1 it was I believe, and don't think it requires now. Also, would there be any need of having Java in Kibana hosts for any plugin support/x-pack?

---

## [Document Type in version 6.1.0](https://discuss.elastic.co/t/document-type-in-version-6-1-0/113933)

<div class="topic-metadata">

**Author:** [@Frank\_Matera](https://discuss.elastic.co/u/Frank_Matera)\
**Replies:** 1\
**Last updated:** [January 6, 2018, 10:21am UTC](https://discuss.elastic.co/t/document-type-in-version-6-1-0/113933 "2018-01-06T10:21:05Z")

</div>

I have been testing ELK for a few months and was previously on 5.6. Filebeat -\> Logstash -\> Elasticsearch. In 5.6 Filebeat I would assign a document\_type to a log. I was working with 2 types of logs: filebeat.prospector…

---

## [Unable to search few keywords](https://discuss.elastic.co/t/unable-to-search-few-keywords/86666)

<div class="topic-metadata">

**Author:** [@pchinta](https://discuss.elastic.co/u/pchinta)\
**Replies:** 7\
**Last updated:** [May 25, 2017, 1:44pm UTC](https://discuss.elastic.co/t/unable-to-search-few-keywords/86666 "2017-05-25T13:44:43Z")

</div>

I am unable to search few assets with below keyword. mountains, this is not picking up mountain. Already i created search analyser as below on assets by seeing documentation. http://localhost:9200/assets { "s…

[Previous page](https://discuss.elastic.co/top.md?page=1340&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1342&per_page=50&period=all)
