# Top **URL:** https://discuss.elastic.co/top.md?page=1354&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1355 --- ## [ECK readiness for Kubernetes 1.19 - deprecated APIVersions](https://discuss.elastic.co/t/eck-readiness-for-kubernetes-1-19-deprecated-apiversions/236670)
**Author:** [@Presence](https://discuss.elastic.co/u/Presence)\ **Replies:** 6\ **Last updated:** [March 1, 2021, 1:35pm UTC](https://discuss.elastic.co/t/eck-readiness-for-kubernetes-1-19-deprecated-apiversions/236670 "2021-03-01T13:35:00Z")
Hi, We're using ECK Elastic Cloud on Kubernetes v1.1.2 on Kubernetes 1.16 and we notice that some of the APIVersions used are deprecated and scheduled to be dropped in Kubernetes 1.19. CustomResourceDefinition/apmserv… --- ## [After Upgrade to 7.9, all documents getting deleted daily in specific Index](https://discuss.elastic.co/t/after-upgrade-to-7-9-all-documents-getting-deleted-daily-in-specific-index/246395)
**Author:** [@NashSLX](https://discuss.elastic.co/u/NashSLX)\ **Replies:** 6\ **Last updated:** [August 28, 2020, 6:41am UTC](https://discuss.elastic.co/t/after-upgrade-to-7-9-all-documents-getting-deleted-daily-in-specific-index/246395 "2020-08-28T06:41:22Z")
Hi everyone! I upgraded our servers to elastic 7.9 recently, but have been unable to index our full dataset ever since then. In fact, every morning at exactly 4AM, all data gets deleted from that, and only that, index. … --- ## [How to get the actual values next to the bars and colors cnahge?](https://discuss.elastic.co/t/how-to-get-the-actual-values-next-to-the-bars-and-colors-cnahge/146023)
**Author:** [@GGorast](https://discuss.elastic.co/u/GGorast)\ **Replies:** 6\ **Last updated:** [August 28, 2018, 10:07pm UTC](https://discuss.elastic.co/t/how-to-get-the-actual-values-next-to-the-bars-and-colors-cnahge/146023 "2018-08-28T22:07:15Z")
I'm trying to implement design into Kibana's Canvas and I'm stuck. I need two things: How to add the actual bar values at the end (or anywhere) of the bars? Any chance to change the color of the bars regarding some va… --- ## [Exception cause unwrapping ran for 10 levels](https://discuss.elastic.co/t/exception-cause-unwrapping-ran-for-10-levels/15114)
**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\ **Replies:** 6\ **Last updated:** [January 7, 2014, 9:19am UTC](https://discuss.elastic.co/t/exception-cause-unwrapping-ran-for-10-levels/15114 "2014-01-07T09:19:21Z")
Hi, we are using elasticsearch version 0.90.7 and following are gist file. https://gist.github.com/jasonwee/8282477 not sure what is happening "Exception cause unwrapping ran for 10 levels" and if it is a concern?… --- ## [How many metricbeat and filebeat instances should I have in a docker swarm?](https://discuss.elastic.co/t/how-many-metricbeat-and-filebeat-instances-should-i-have-in-a-docker-swarm/302694)
**Author:** [@UchihaYuki](https://discuss.elastic.co/u/UchihaYuki)\ **Replies:** 4\ **Last updated:** [April 26, 2022, 9:46am UTC](https://discuss.elastic.co/t/how-many-metricbeat-and-filebeat-instances-should-i-have-in-a-docker-swarm/302694 "2022-04-26T09:46:17Z")
I'm still pretty new to elastic stack. And I'm come from prometheus and grafana, and I'd like to substitute them for metricbeat, filebeat and kibana. As a newbie, I always wonder, what is the best practice to deploy fil… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/283826)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 7:34am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/283826 "2021-09-10T07:34:44Z")
I use this script for generating kibana and elastic with docker version: "2" services: zookeeper: image: wurstmeister/zookeeper:3.4.6 ports: - "2181:2181" kafka: image: wurstmeister/kafka … --- ## [Range query has weird results](https://discuss.elastic.co/t/range-query-has-weird-results/149359)
**Author:** [@titani0us](https://discuss.elastic.co/u/titani0us)\ **Replies:** 4\ **Last updated:** [November 12, 2018, 9:29pm UTC](https://discuss.elastic.co/t/range-query-has-weird-results/149359 "2018-11-12T21:29:42Z")
Observed what I would consider to be "weird" results from a query. I understand that Elasticsearch is an inverted index concept, but I would expect different behavior. Given a set of documents that have calendar dates t… --- ## [Logstash index setting now requires version](https://discuss.elastic.co/t/logstash-index-setting-now-requires-version/122095)
**Author:** [@raamee](https://discuss.elastic.co/u/raamee)\ **Replies:** 4\ **Last updated:** [March 11, 2018, 8:07pm UTC](https://discuss.elastic.co/t/logstash-index-setting-now-requires-version/122095 "2018-03-11T20:07:04Z")
Hi, I am trying to upgrade my ELK setup from 5.6.5 to 6.2.1. So I am with the help of interactive guide Upgrade to Elastic 8.11.1 | Elastic Installation and Upgrade Guide \[8.11\] | Elastic, checking the manual upgrade st… --- ## [User Agent Raw Mapping](https://discuss.elastic.co/t/user-agent-raw-mapping/59533)
**Author:** [@JoeeGrigg](https://discuss.elastic.co/u/JoeeGrigg)\ **Replies:** 4\ **Last updated:** [September 1, 2016, 1:47pm UTC](https://discuss.elastic.co/t/user-agent-raw-mapping/59533 "2016-09-01T13:47:10Z")
HI, I have recently set up Elasticsearch, Logstash and Kibana. My Logstash includes the useragent plugin and all that seems to be working fine. My problem is when it comes to visualising the user agent the separate… --- ## [Need Help with prefix search with highlighter](https://discuss.elastic.co/t/need-help-with-prefix-search-with-highlighter/42242)
**Author:** [@Lathanaganna](https://discuss.elastic.co/u/Lathanaganna)\ **Replies:** 4\ **Last updated:** [March 1, 2016, 2:23pm UTC](https://discuss.elastic.co/t/need-help-with-prefix-search-with-highlighter/42242 "2016-03-01T14:23:31Z")
Setting and mapping Looks: { "settings" : { "analysis" : { "analyzer" : { "analyzer\_startswith": { "tokenizer": "keyword", "filter": "lowercase" } } } "mappings" : { "part" : { "pro… --- ## [One snapshot repository for different clusters?](https://discuss.elastic.co/t/one-snapshot-repository-for-different-clusters/170678)
**Author:** [@warp](https://discuss.elastic.co/u/warp)\ **Replies:** 2\ **Last updated:** [March 4, 2019, 9:00am UTC](https://discuss.elastic.co/t/one-snapshot-repository-for-different-clusters/170678 "2019-03-04T09:00:44Z")
I'd like to understand what will happen if (e.g. by accident) two different clusters will backup to the same repository. Is that possible/allowed or will it corrupt the data? The documentation did not hint in either dire… --- ## [Sub-bucket aggregation missing on tilemap/view changes over time](https://discuss.elastic.co/t/sub-bucket-aggregation-missing-on-tilemap-view-changes-over-time/82735)
**Author:** [@kmrychl](https://discuss.elastic.co/u/kmrychl)\ **Replies:** 2\ **Last updated:** [April 18, 2017, 4:51pm UTC](https://discuss.elastic.co/t/sub-bucket-aggregation-missing-on-tilemap-view-changes-over-time/82735 "2017-04-18T16:51:18Z")
I'm using Kibana 5.3 and Elsatic search 5.3 and the tilemap visualization and enhanced tilemap plugin. Neither of these is giving me a sub bucket level to transform my map visualization. I want to be able to view my ma… --- ## [Configure Fleet SSL Cert Port 8220](https://discuss.elastic.co/t/configure-fleet-ssl-cert-port-8220/346157)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 2\ **Last updated:** [November 1, 2023, 12:49pm UTC](https://discuss.elastic.co/t/configure-fleet-ssl-cert-port-8220/346157 "2023-11-01T12:49:36Z")
I have deployed a Fleet server and I want to change the SSL cert that is being used. Is there a config file somewhere that I can modify to use the certificates that I generated? I want to avoid having to use the --inse… --- ## [Ignoring certain values in average aggregation](https://discuss.elastic.co/t/ignoring-certain-values-in-average-aggregation/254820)
**Author:** [@jonVR](https://discuss.elastic.co/u/jonVR)\ **Replies:** 2\ **Last updated:** [November 10, 2020, 10:57pm UTC](https://discuss.elastic.co/t/ignoring-certain-values-in-average-aggregation/254820 "2020-11-10T22:57:47Z")
I'm in the Visualize section of Kibana, and I'm trying to create a Metric that is an average. However, I want the calculation of the average to ignore values under 15 (or actually, under 900, but the point is I want to i… --- ## [ILM : Clarification on Current action time meaning](https://discuss.elastic.co/t/ilm-clarification-on-current-action-time-meaning/227094)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 12:03pm UTC](https://discuss.elastic.co/t/ilm-clarification-on-current-action-time-meaning/227094 "2020-04-10T12:03:56Z")
Hello ! I have the following ILM policy (just hot phase and delete) : PUT \_ilm/policy/test\_policy { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { … --- ## [How to avoid Data too large error for org.apache.spark.sql.streaming.StreamingQueryException](https://discuss.elastic.co/t/how-to-avoid-data-too-large-error-for-org-apache-spark-sql-streaming-streamingqueryexception/190604)
**Author:** [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Replies:** 2\ **Last updated:** [July 17, 2019, 5:57am UTC](https://discuss.elastic.co/t/how-to-avoid-data-too-large-error-for-org-apache-spark-sql-streaming-streamingqueryexception/190604 "2019-07-17T05:57:36Z")
I am using spark streaming to dump data from Kafka to ES and I got the following errors. org.apache.spark.sql.streaming.StreamingQueryException: Job aborted due to stage failure: Task 6 in stage 4888.0 failed 4 times, … --- ## [Command "filebeat modules list" doesn't work on Ubuntu](https://discuss.elastic.co/t/command-filebeat-modules-list-doesnt-work-on-ubuntu/106124)
**Author:** [@Mark\_Clarke](https://discuss.elastic.co/u/Mark_Clarke)\ **Replies:** 2\ **Last updated:** [November 2, 2017, 6:48pm UTC](https://discuss.elastic.co/t/command-filebeat-modules-list-doesnt-work-on-ubuntu/106124 "2017-11-02T18:48:28Z")
Hi there, Maybe I am missing something but the docs say running "./filebeat module list" should output a list of modules. I have tried the following on Ubunut but the system just "hangs". I.e Nothing outputted to the co… --- ## [COMB uuid or string equivilents to speed up inserts](https://discuss.elastic.co/t/comb-uuid-or-string-equivilents-to-speed-up-inserts/7696)
**Author:** [@Dennis](https://discuss.elastic.co/u/Dennis)\ **Replies:** 2\ **Last updated:** [September 27, 2013, 1:54am UTC](https://discuss.elastic.co/t/comb-uuid-or-string-equivilents-to-speed-up-inserts/7696 "2013-09-27T01:54:33Z")
Anyone ever looked at the indexing (i.e. INSERTing in database parlance) speed using the random generated uuids or COMB uuids in ElasticSearch? http://stackoverflow.com/questions/170346/what-are-the-performance-impr… --- ## [How to filter the information in the Kibana Watcher attachment?](https://discuss.elastic.co/t/how-to-filter-the-information-in-the-kibana-watcher-attachment/170550)
**Author:** [@MrGetfit1234](https://discuss.elastic.co/u/MrGetfit1234)\ **Replies:** 1\ **Last updated:** [March 20, 2019, 8:58am UTC](https://discuss.elastic.co/t/how-to-filter-the-information-in-the-kibana-watcher-attachment/170550 "2019-03-20T08:58:05Z")
hi, I am using a Kibana watcher to send an email with attachments. The attachments will be of ".csv "format. I will need only two columns in the csv( list of ip's) followed by number of logs collected per ip. Here is m… --- ## [Infinite bulk-rejection retries via es.batch.write.retry.count = -1](https://discuss.elastic.co/t/infinite-bulk-rejection-retries-via-es-batch-write-retry-count-1/140810)
**Author:** [@sumitsu](https://discuss.elastic.co/u/sumitsu)\ **Replies:** 1\ **Last updated:** [July 25, 2018, 3:00pm UTC](https://discuss.elastic.co/t/infinite-bulk-rejection-retries-via-es-batch-write-retry-count-1/140810 "2018-07-25T15:00:10Z")
The ES-Hadoop configuration documentation states that setting es.batch.write.retry.count to a negative number will direct the ES-Hadoop connector to retry infinitely upon bulk-rejection failures. Could someone advise as … --- ## [Is there a way to skip the WorkplaceSearch login screen?](https://discuss.elastic.co/t/is-there-a-way-to-skip-the-workplacesearch-login-screen/276219)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 8\ **Last updated:** [June 28, 2021, 5:40pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-skip-the-workplacesearch-login-screen/276219 "2021-06-28T17:40:19Z")
I have installed WorkplaceSearch in an internal on-premise environment. This server is in an environment that cannot be accessed except within the company, so if possible, I would like to skip the screen for entering au… --- ## [Logstash output to tcp error it a signlge line that not ok](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 8\ **Last updated:** [April 10, 2018, 7:29am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416 "2018-04-10T07:29:04Z")
i have josn data use udp listener and output to tcp server . to tcp server is the date is a single line . i don't want to a signlge line. need many lines. i find this at https://www.elastic.co/guide/en/logstash/5.6/… --- ## [Merge different sites in one global node](https://discuss.elastic.co/t/merge-different-sites-in-one-global-node/120891)
**Author:** [@Hanen](https://discuss.elastic.co/u/Hanen)\ **Replies:** 8\ **Last updated:** [February 27, 2018, 3:24pm UTC](https://discuss.elastic.co/t/merge-different-sites-in-one-global-node/120891 "2018-02-27T15:24:34Z")
Hi, I would like to make sure about if it is possible to merge different sites in one global node Elasticsearch (PS: sites are related by VPN Connections). Is that something feasible please? If so, could you please men… --- ## [Display the most frequent words in tagcloud chart in kibana](https://discuss.elastic.co/t/display-the-most-frequent-words-in-tagcloud-chart-in-kibana/252561)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 3\ **Last updated:** [November 26, 2020, 8:54am UTC](https://discuss.elastic.co/t/display-the-most-frequent-words-in-tagcloud-chart-in-kibana/252561 "2020-11-26T08:54:42Z")
hello, i have text data indexed on elasticsearch, and i want to display the words that are frequently cited in this data in tagcloud format, how i can do this on kibana thank you very much --- ## [Logstash filter to include specific keys only](https://discuss.elastic.co/t/logstash-filter-to-include-specific-keys-only/145452)
**Author:** [@Harshad\_Velapure](https://discuss.elastic.co/u/Harshad_Velapure)\ **Replies:** 3\ **Last updated:** [August 23, 2018, 6:27pm UTC](https://discuss.elastic.co/t/logstash-filter-to-include-specific-keys-only/145452 "2018-08-23T18:27:15Z")
Hello Team, I have one use case related to logstash filters I need to parse nested json data with specific fields included and drop rest data Data format: { "\_index": "index-name", "\_source": { "level": "INFO", "… --- ## [Query DSL: How to use must in should condition?](https://discuss.elastic.co/t/query-dsl-how-to-use-must-in-should-condition/108989)
**Author:** [@imqishi](https://discuss.elastic.co/u/imqishi)\ **Replies:** 3\ **Last updated:** [November 28, 2017, 11:36am UTC](https://discuss.elastic.co/t/query-dsl-how-to-use-must-in-should-condition/108989 "2017-11-28T11:36:05Z")
I need to do a time period-period match like this: Data has 2 time field such as d\_from and d\_to. Now given param p\_from and param p\_to. I need to get records which SHOULD satisfy following conditions: p\_from gte d\_… --- ## [Trends analysis of logs for one hour](https://discuss.elastic.co/t/trends-analysis-of-logs-for-one-hour/87609)
**Author:** [@Rajat\_Singh](https://discuss.elastic.co/u/Rajat_Singh)\ **Replies:** 3\ **Last updated:** [June 1, 2017, 4:55pm UTC](https://discuss.elastic.co/t/trends-analysis-of-logs-for-one-hour/87609 "2017-06-01T16:55:54Z")
Hi folks, I want to do the trends analyzes for the server response time in the logs for a particular url but in kibana i am not getting any option to do this. --- ## [3-node cluster dying intermittently with CPU spike](https://discuss.elastic.co/t/3-node-cluster-dying-intermittently-with-cpu-spike/70621)
**Author:** [@nwood888](https://discuss.elastic.co/u/nwood888)\ **Replies:** 3\ **Last updated:** [January 12, 2017, 9:44am UTC](https://discuss.elastic.co/t/3-node-cluster-dying-intermittently-with-cpu-spike/70621 "2017-01-12T09:44:23Z")
I have a 3-node 5.1.1 cluster that I believe is sized correctly. In the past 2 weeks, it's locked up twice, ultimately reaching the queue capacity of 1000 and requiring a full cluster restart to bring it back online. Ela… --- ## [Best practices in ES cluster tuning](https://discuss.elastic.co/t/best-practices-in-es-cluster-tuning/39171)
**Author:** [@koffitse](https://discuss.elastic.co/u/koffitse)\ **Replies:** 3\ **Last updated:** [January 15, 2016, 4:38pm UTC](https://discuss.elastic.co/t/best-practices-in-es-cluster-tuning/39171 "2016-01-15T16:38:14Z")
Hi, I'm new in ES platform and want to know more. I've a 10 nodes hadoop cluster on HDP 2.6 and installed Elasticsearch on 1 node for test purposes. I want to know if there are tutorials that explain how to tune both E… --- ## [Long Query string from mysql.slowlog doesn't show on table but show on json](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887)
**Author:** [@budums](https://discuss.elastic.co/u/budums)\ **Replies:** 5\ **Last updated:** [December 17, 2021, 9:14am UTC](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887 "2021-12-17T09:14:38Z")
hi I already setup filebeat on database server to get slow log query and send to Elasticsearch. but on kibana at Discover menu if query string from slowlog is too long doesn't show on table view and I set expand fi… --- ## [Resource Management of all requests in the system](https://discuss.elastic.co/t/resource-management-of-all-requests-in-the-system/232354)
**Author:** [@sohami](https://discuss.elastic.co/u/sohami)\ **Replies:** 5\ **Last updated:** [May 14, 2020, 7:55am UTC](https://discuss.elastic.co/t/resource-management-of-all-requests-in-the-system/232354 "2020-05-14T07:55:27Z")
Hi, I am looking for some feedback on my understanding and question related to resource management done in ES. Today in ES, I see there are circuit breakers which provides a way to manage the high JVM heap usage and the… --- ## [Document(s) failed to index | mapper\_parsing\_exception](https://discuss.elastic.co/t/document-s-failed-to-index-mapper-parsing-exception/316690)
**Author:** [@mohitthakkar\_ihm](https://discuss.elastic.co/u/mohitthakkar_ihm)\ **Replies:** 2\ **Last updated:** [October 16, 2022, 8:52am UTC](https://discuss.elastic.co/t/document-s-failed-to-index-mapper-parsing-exception/316690 "2022-10-16T08:52:36Z")
Hi, I have an ES instance with the following mapping & config: { "settings": { "number\_of\_shards": 5, "number\_of\_replicas": 1, "analysis": { "analyzer": { "custom\_analyzer": { "tok… --- ## [Logstash Kafka Input backpressure from Persistent Queue](https://discuss.elastic.co/t/logstash-kafka-input-backpressure-from-persistent-queue/200766)
**Author:** [@Suryatej\_Mukkamalla](https://discuss.elastic.co/u/Suryatej_Mukkamalla)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 11:48pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-backpressure-from-persistent-queue/200766 "2019-09-23T23:48:47Z")
This is my current ELK setup: Logstash (7.2.0): Input: Kafka Queue: Persistent Queue (16 GB) Output: Elasticsearch Elasticsearch (7.2.0) I am currently load testing Elasticsearch (trying to insert a billion documen… --- ## [Elastic UpdateByQuery with timestamp](https://discuss.elastic.co/t/elastic-updatebyquery-with-timestamp/157795)
**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 3:51am UTC](https://discuss.elastic.co/t/elastic-updatebyquery-with-timestamp/157795 "2018-11-26T03:51:43Z")
Hi all, I'm using UpdateByQuery from java api. Then i'm setting timestamp value to date field. But this error returned. ScriptException\[compile error\]; nested: IllegalArgumentException\[invalid sequence of tokens near \[… --- ## [Elastic Aggregation](https://discuss.elastic.co/t/elastic-aggregation/154369)
**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\ **Replies:** 2\ **Last updated:** [October 30, 2018, 1:24am UTC](https://discuss.elastic.co/t/elastic-aggregation/154369 "2018-10-30T01:24:18Z")
Hello Guys, Does anyone had this error? Two sibling aggregations cannot have the same name: --- ## [Elasticsearch check index lock(read-only) before insert data](https://discuss.elastic.co/t/elasticsearch-check-index-lock-read-only-before-insert-data/152704)
**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\ **Replies:** 2\ **Last updated:** [October 16, 2018, 6:36pm UTC](https://discuss.elastic.co/t/elasticsearch-check-index-lock-read-only-before-insert-data/152704 "2018-10-16T18:36:01Z")
Hi, Please help me someone how to check particular index in read-only mode. I use to get continues index ( \[ FORBIDDEN/12/index read-only / allow delete (api)\]\](FORBIDDEN/12/index read-only / allow delete (api)\])) nee… --- ## [New release of the Elastic Stack!](https://discuss.elastic.co/t/new-release-of-the-elastic-stack/40771)
**Author:** [@michelle](https://discuss.elastic.co/u/michelle)\ **Replies:** 2\ **Last updated:** [February 9, 2016, 6:42pm UTC](https://discuss.elastic.co/t/new-release-of-the-elastic-stack/40771 "2016-02-09T18:42:19Z")
New release of the Elastic Stack, available now! Learn more about: Kibana 4.4.0 (color picker, shield login UI, URL shortener, available as RPM/debian package) Elasticsearch 2.2.0, 2.1.2, and 1.7.5 (a query profi… --- ## [Support for executing ruby script?](https://discuss.elastic.co/t/support-for-executing-ruby-script/26523)
**Author:** [@cheeseandpepper](https://discuss.elastic.co/u/cheeseandpepper)\ **Replies:** 2\ **Last updated:** [July 29, 2015, 8:55pm UTC](https://discuss.elastic.co/t/support-for-executing-ruby-script/26523 "2015-07-29T20:55:30Z")
Hi I'm just getting started with Logstash and the ability to execute inline ruby is pretty neat. Is it possible to invoke a ruby script in a similar manner? The advantage would be that I could make it look better as… --- ## [How to merge two data sets into one with Logstash?](https://discuss.elastic.co/t/how-to-merge-two-data-sets-into-one-with-logstash/298218)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 7\ **Last updated:** [February 25, 2022, 5:24pm UTC](https://discuss.elastic.co/t/how-to-merge-two-data-sets-into-one-with-logstash/298218 "2022-02-25T17:24:56Z")
Hi, I'm trying to merge two data sets into one document that will get stored in ES. My first data set looks like this: "\_source": { "protocol-name": "BGP", "name-tag": "default", "@version": "1", "host… --- ## [Large composite agg + sorting](https://discuss.elastic.co/t/large-composite-agg-sorting/252126)
**Author:** [@joropito](https://discuss.elastic.co/u/joropito)\ **Replies:** 7\ **Last updated:** [October 16, 2020, 4:19pm UTC](https://discuss.elastic.co/t/large-composite-agg-sorting/252126 "2020-10-16T16:19:21Z")
Composite aggregation doesn't work very well with bucket\_sort aggregation. I know this was talked and explained lot of times. My scenario works with a composite aggregation on few fields, some metrics inside (max, min,… --- ## [Merge Error with lucene 4.1](https://discuss.elastic.co/t/merge-error-with-lucene-4-1/10873)
**Author:** [@taras](https://discuss.elastic.co/u/taras)\ **Replies:** 7\ **Last updated:** [July 29, 2013, 6:58pm UTC](https://discuss.elastic.co/t/merge-error-with-lucene-4-1/10873 "2013-07-29T18:58:18Z")
While testing the master build with lucene 4.1, I got a permanent merge error filling up my logs. Has anyone else seen it? Anything I can provide to help debug? \[2013-02-24 22:43:38,863\]\[WARN \]\[index.merge.schedule… --- ## [Excessive Number of Open File Descriptor Count](https://discuss.elastic.co/t/excessive-number-of-open-file-descriptor-count/7341)
**Author:** [@Stanislas\_Polu](https://discuss.elastic.co/u/Stanislas_Polu)\ **Replies:** 7\ **Last updated:** [May 15, 2012, 9:12am UTC](https://discuss.elastic.co/t/excessive-number-of-open-file-descriptor-count/7341 "2012-05-15T09:12:51Z")
Hi everyone, I run a cluster of 3 instances with local storage. I'm indexing ~60 elements per seconds and have been doing so for the past month. The number of concurrent queries is fairly low at the moment. The … --- ## [Unable to start elasticsearch cluster on CentOs7](https://discuss.elastic.co/t/unable-to-start-elasticsearch-cluster-on-centos7/207453)
**Author:** [@Pratheek\_Kumar](https://discuss.elastic.co/u/Pratheek_Kumar)\ **Replies:** 1\ **Last updated:** [December 6, 2019, 12:14pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-cluster-on-centos7/207453 "2019-12-06T12:14:43Z")
\[2019-11-12T01:50:19,897\]\[ERROR\]\[o.e.b.Bootstrap \] \[elasti-node-3.intraservers.biz\] Exception java.lang.IllegalStateException: Can't move to started state when closed at org.elasticsearch.common.componen… --- ## [Plugin fails with forbiddenapis:1.7:check](https://discuss.elastic.co/t/plugin-fails-with-forbiddenapis-1-7-check/61502)
**Author:** [@srikanth\_muddu](https://discuss.elastic.co/u/srikanth_muddu)\ **Replies:** 1\ **Last updated:** [September 26, 2016, 1:04pm UTC](https://discuss.elastic.co/t/plugin-fails-with-forbiddenapis-1-7-check/61502 "2016-09-26T13:04:22Z")
\[INFO\] Scanning for API signatures and dependencies... \[ERROR\] Forbidden class/interface/annotation use: java.nio.file.Paths \[Use org.elasticsearch.common.io.PathUtils.get() instead.\] \[ERROR\] in org.elasticsearch.commo… --- ## [Order of suggestion results for same score with fuzzy match](https://discuss.elastic.co/t/order-of-suggestion-results-for-same-score-with-fuzzy-match/61171)
**Author:** [@zoellner](https://discuss.elastic.co/u/zoellner)\ **Replies:** 1\ **Last updated:** [September 21, 2016, 6:46pm UTC](https://discuss.elastic.co/t/order-of-suggestion-results-for-same-score-with-fuzzy-match/61171 "2016-09-21T18:46:46Z")
I am seeing some unexpected behavior for a suggestion query with fuzzy turned on. The results include a number of documents with the same score (including the exact match) but the exact match is not the first one. Usin… --- ## [Filtered query - SearchParseException Parse Failure \[No parser for element...\]](https://discuss.elastic.co/t/filtered-query-searchparseexception-parse-failure-no-parser-for-element/12828)
**Author:** [@Joe\_Wong](https://discuss.elastic.co/u/Joe_Wong)\ **Replies:** 1\ **Last updated:** [July 17, 2013, 10:13pm UTC](https://discuss.elastic.co/t/filtered-query-searchparseexception-parse-failure-no-parser-for-element/12828 "2013-07-17T22:13:30Z")
for this query { "query":{ "filtered":{ "query":{ "match\_all":{ } }, "filter":{ "bool":{ "must":\[ { … --- ## [Docker elasticsearch cluster](https://discuss.elastic.co/t/docker-elasticsearch-cluster/200430)
**Author:** [@garcia](https://discuss.elastic.co/u/garcia)\ **Replies:** 4\ **Last updated:** [September 23, 2019, 7:10am UTC](https://discuss.elastic.co/t/docker-elasticsearch-cluster/200430 "2019-09-23T07:10:45Z")
I want to configure elasticsearch cluster in docker between 3 servers node1, node2, node3 - docker-compose.yml version: '2' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:5.0.2 … --- ## [Multiple join type fields in a index](https://discuss.elastic.co/t/multiple-join-type-fields-in-a-index/128974)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 4\ **Last updated:** [April 22, 2018, 11:55am UTC](https://discuss.elastic.co/t/multiple-join-type-fields-in-a-index/128974 "2018-04-22T11:55:50Z")
I want to confirm I have to achieve a scenario where I want to filter those who blocked\_me or I blocked, is the any support of multiple join types in current ES version "join\_type1": { "type": "join",… --- ## [Date Index + Alias question](https://discuss.elastic.co/t/date-index-alias-question/109978)
**Author:** [@beng](https://discuss.elastic.co/u/beng)\ **Replies:** 4\ **Last updated:** [December 2, 2017, 10:31pm UTC](https://discuss.elastic.co/t/date-index-alias-question/109978 "2017-12-02T22:31:43Z")
We're currently using a date index name pipeline to ingest documents into index based on date (https://www.elastic.co/guide/en/elasticsearch/reference/current/date-index-name-processor.html). We currently have an alias p… --- ## [Conflicting conf files](https://discuss.elastic.co/t/conflicting-conf-files/89608)
**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\ **Replies:** 4\ **Last updated:** [June 16, 2017, 11:58am UTC](https://discuss.elastic.co/t/conflicting-conf-files/89608 "2017-06-16T11:58:30Z")
Hi, So I've discovered that my latest conf file I've written conflicts with an existing one I designed to take logs from my FW. I'm struggling to understand why having them both together in my confs folder should cause … [Previous page](https://discuss.elastic.co/top.md?page=1353&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1355&per_page=50&period=all)