# Top

**URL:** https://discuss.elastic.co/top.md?page=1368&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1369

---

## [Index Size & Stats showing incorrect](https://discuss.elastic.co/t/index-size-stats-showing-incorrect/36273)

<div class="topic-metadata">

**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\
**Replies:** 2\
**Last updated:** [December 3, 2015, 11:08am UTC](https://discuss.elastic.co/t/index-size-stats-showing-incorrect/36273 "2015-12-03T11:08:55Z")

</div>

Hi I have setup a new ES instance and created few indices and loaded about 1.8 million docs. However I am not able to see the size and stats of the indices either in marvel or with Index Stats API. The hard disk space…

---

## [Elasticsearch client node's log is flooded with "Values less than -1 bytes are deprecated and will not be supported in the next major version: \[-5915230208b\]"](https://discuss.elastic.co/t/elasticsearch-client-nodes-log-is-flooded-with-values-less-than-1-bytes-are-deprecated-and-will-not-be-supported-in-the-next-major-version-5915230208b/189410)

<div class="topic-metadata">

**Author:** [@xchai](https://discuss.elastic.co/u/xchai)\
**Replies:** 1\
**Last updated:** [July 25, 2019, 6:29pm UTC](https://discuss.elastic.co/t/elasticsearch-client-nodes-log-is-flooded-with-values-less-than-1-bytes-are-deprecated-and-will-not-be-supported-in-the-next-major-version-5915230208b/189410 "2019-07-25T18:29:57Z")

</div>

Hi, we are testing ELK 6.6.1 on s390x platform (Linux on Z). We have 3 elasticsearch nodes configured as: client: discovery.zen.ping.unicast.hosts: master-discovery discovery.zen.minimum\_master\_nodes: 1 node.master:…

---

## [Want to use Elasticsearch as a base image](https://discuss.elastic.co/t/want-to-use-elasticsearch-as-a-base-image/330295)

<div class="topic-metadata">

**Author:** [@ANUBHAV\_GUPTA](https://discuss.elastic.co/u/ANUBHAV_GUPTA)\
**Replies:** 7\
**Last updated:** [April 20, 2023, 9:23am UTC](https://discuss.elastic.co/t/want-to-use-elasticsearch-as-a-base-image/330295 "2023-04-20T09:23:30Z")

</div>

I want to use elasticsearch app as a base image and load a json file while booting up the ES instance. Can I do this? What will be the Entrypoint to start the container?

---

## [Can I filter logs with if else condition?](https://discuss.elastic.co/t/can-i-filter-logs-with-if-else-condition/243421)

<div class="topic-metadata">

**Author:** [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\
**Replies:** 1\
**Last updated:** [August 1, 2020, 10:54am UTC](https://discuss.elastic.co/t/can-i-filter-logs-with-if-else-condition/243421 "2020-08-01T10:54:12Z")

</div>

my logs chain is Filebeat =\> Logstash =\> Elasticsearch Now i want to filterize logs with my own field. like match or if else condition key value. So Can I do that or what? need to know how can i do? any blog suggest…

---

## [Change type field in logstash](https://discuss.elastic.co/t/change-type-field-in-logstash/204368)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 1\
**Last updated:** [October 20, 2019, 6:02pm UTC](https://discuss.elastic.co/t/change-type-field-in-logstash/204368 "2019-10-20T18:02:27Z")

</div>

Hi. I wanna have sum of network usage per client in nginx. This is the logstash before changes: grok { match =\> { "message" =\> "%{IP:clientip} ... %{NUMBER:bytes}" } } so at first I changed the NUMBER to INT: grok { …

---

## [HeartBeat Installation Error](https://discuss.elastic.co/t/heartbeat-installation-error/150970)

<div class="topic-metadata">

**Author:** [@DavisDxb](https://discuss.elastic.co/u/DavisDxb)\
**Replies:** 7\
**Last updated:** [October 7, 2018, 12:26pm UTC](https://discuss.elastic.co/t/heartbeat-installation-error/150970 "2018-10-07T12:26:22Z")

</div>

When I try to Download Heartbeat 6.3.1 and install it, system shows like this.I didn't get it.Please reply. Reading package lists... Done Building dependency tree Reading state information... Done E: Unable to locate…

---

## [Process mining with Network diagram in Vega](https://discuss.elastic.co/t/process-mining-with-network-diagram-in-vega/121228)

<div class="topic-metadata">

**Author:** [@Cristian](https://discuss.elastic.co/u/Cristian)\
**Replies:** 1\
**Last updated:** [February 23, 2018, 5:30pm UTC](https://discuss.elastic.co/t/process-mining-with-network-diagram-in-vega/121228 "2018-02-23T17:30:58Z")

</div>

Hi All! Dont know where to post this question. Trying here. I would like to analyze a process. I have a digital footprint where I have a row representing an order. I see the status, the point in the process, previous p…

---

## [How to conf filebeat input path use date such as (/var/log/${+yyyyMMDD})](https://discuss.elastic.co/t/how-to-conf-filebeat-input-path-use-date-such-as-var-log-yyyymmdd/119342)

<div class="topic-metadata">

**Author:** [@wede2046](https://discuss.elastic.co/u/wede2046)\
**Replies:** 1\
**Last updated:** [February 12, 2018, 10:40am UTC](https://discuss.elastic.co/t/how-to-conf-filebeat-input-path-use-date-such-as-var-log-yyyymmdd/119342 "2018-02-12T10:40:33Z")

</div>

how to conf filebeat input path use date such as (/var/log/${+yyyyMMDD})? filebeat.prospectors: type: log paths: /var/log/${+yyyyMMDD} is filebeat support this file path?

---

## [How to Create JDBC connection using Logstash for Oracle DB?](https://discuss.elastic.co/t/how-to-create-jdbc-connection-using-logstash-for-oracle-db/1284)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 1\
**Last updated:** [May 26, 2015, 7:24am UTC](https://discuss.elastic.co/t/how-to-create-jdbc-connection-using-logstash-for-oracle-db/1284 "2015-05-26T07:24:22Z")

</div>

How to Create JDBC connection using Logstash for Oracle DB?

---

## [Date formats do they really use camelCase or under\_bars?](https://discuss.elastic.co/t/date-formats-do-they-really-use-camelcase-or-under-bars/12885)

<div class="topic-metadata">

**Author:** [@Douglas\_Moore](https://discuss.elastic.co/u/Douglas_Moore)\
**Replies:** 1\
**Last updated:** [July 23, 2013, 6:22am UTC](https://discuss.elastic.co/t/date-formats-do-they-really-use-camelcase-or-under-bars/12885 "2013-07-23T06:22:00Z")

</div>

The documentationon date-formats suggest to get yyyyMMdd format mapping to use "format": "basic\_date". However, when querying the \_mapping for a type with a "type":"date", I get "format":"dateOptionalTime" instead o…

---

## [Loading data on ec2 micro instances](https://discuss.elastic.co/t/loading-data-on-ec2-micro-instances/7339)

<div class="topic-metadata">

**Author:** [@Ranjan\_Bagchi](https://discuss.elastic.co/u/Ranjan_Bagchi)\
**Replies:** 7\
**Last updated:** [April 26, 2012, 3:11pm UTC](https://discuss.elastic.co/t/loading-data-on-ec2-micro-instances/7339 "2012-04-26T15:11:19Z")

</div>

Hi, I've a file of several million documents that I'd like to load into an elasticsearch cluster, hosted on 4 ec2 micro instances using the S3 gateway. What's the best way to load the index up? I'm using another…

---

## [Encryption of saved logs](https://discuss.elastic.co/t/encryption-of-saved-logs/347612)

<div class="topic-metadata">

**Author:** [@Hamada](https://discuss.elastic.co/u/Hamada)\
**Replies:** 5\
**Last updated:** [November 24, 2023, 1:08am UTC](https://discuss.elastic.co/t/encryption-of-saved-logs/347612 "2023-11-24T01:08:57Z")

</div>

I am using Elastic 8.1 in a Windows environment, How do you implement encryption of saved logs?

---

## [Elasticsearch index on blob](https://discuss.elastic.co/t/elasticsearch-index-on-blob/306951)

<div class="topic-metadata">

**Author:** [@Harsh\_Agarwal](https://discuss.elastic.co/u/Harsh_Agarwal)\
**Replies:** 5\
**Last updated:** [June 19, 2022, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-index-on-blob/306951 "2022-06-19T11:48:11Z")

</div>

Is it possible to make a blob which is a compressed binary representation of a string, searchable?

---

## [Elasticsearch query](https://discuss.elastic.co/t/elasticsearch-query/288504)

<div class="topic-metadata">

**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\
**Replies:** 5\
**Last updated:** [November 18, 2021, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-query/288504 "2021-11-18T15:06:23Z")

</div>

I cannot get this query to work. Note i cannot use the Filter field i GET /index-\*/\_search { "query": { "term": { "result": "Reputation" }, "range": { "@timestamp": { "gte":…

---

## [Curator - Delete oldest index](https://discuss.elastic.co/t/curator-delete-oldest-index/205875)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 5\
**Last updated:** [November 6, 2019, 5:36pm UTC](https://discuss.elastic.co/t/curator-delete-oldest-index/205875 "2019-11-06T17:36:08Z")

</div>

Hi, Is there a way to identify the oldest index and delete that using curator? Basically, we want to rollover a index when they meet a size of 10GB and when we get 45 indices in total, we want to remove the oldest inde…

---

## [Huge size for elastic endpoint (defend) integration indices?](https://discuss.elastic.co/t/huge-size-for-elastic-endpoint-defend-integration-indices/326344)

<div class="topic-metadata">

**Author:** [@rebug](https://discuss.elastic.co/u/rebug)\
**Replies:** 4\
**Last updated:** [February 27, 2023, 9:36am UTC](https://discuss.elastic.co/t/huge-size-for-elastic-endpoint-defend-integration-indices/326344 "2023-02-27T09:36:46Z")

</div>

Hello, Cluster information: 3 nodes with 1TB I have configured a fleet server with elastic defend integration to start using elastic security. Currently only 2 servers are enrolled with the agent. Here is the integra…

---

## [Contains Method Not Working in Sort Script](https://discuss.elastic.co/t/contains-method-not-working-in-sort-script/197241)

<div class="topic-metadata">

**Author:** [@djue](https://discuss.elastic.co/u/djue)\
**Replies:** 4\
**Last updated:** [August 30, 2019, 8:14am UTC](https://discuss.elastic.co/t/contains-method-not-working-in-sort-script/197241 "2019-08-30T08:14:56Z")

</div>

We have an old script in sort that seems to be no longer working and I can't quite figure out the case (other than we upgraded from Elastic 2 to 6), we have something like: "sort": \[ { "\_script": { "order": "desc"…

---

## [Logstash is not outputing my file with or without grok](https://discuss.elastic.co/t/logstash-is-not-outputing-my-file-with-or-without-grok/189571)

<div class="topic-metadata">

**Author:** [@Eddy\_Meds](https://discuss.elastic.co/u/Eddy_Meds)\
**Replies:** 4\
**Last updated:** [July 9, 2019, 4:09pm UTC](https://discuss.elastic.co/t/logstash-is-not-outputing-my-file-with-or-without-grok/189571 "2019-07-09T16:09:12Z")

</div>

Hello, I'm trying to set a simple .txt file as an input. And I want a parsed .txt for the output/result. Inbetween, I'm using a Grok filter to match a specific pattern. This is a simple test and it doesn't work : My…

---

## [Kibana maps geo "Point to Point" lines arrow not show on maps](https://discuss.elastic.co/t/kibana-maps-geo-point-to-point-lines-arrow-not-show-on-maps/282514)

<div class="topic-metadata">

**Author:** [@Bo\_Pham\_Nguyen](https://discuss.elastic.co/u/Bo_Pham_Nguyen)\
**Replies:** 2\
**Last updated:** [August 26, 2021, 4:44pm UTC](https://discuss.elastic.co/t/kibana-maps-geo-point-to-point-lines-arrow-not-show-on-maps/282514 "2021-08-26T16:44:44Z")

</div>

Hi team, I have an index having source and destination IP fields as geo\_point. I can use Maps on Kibana with Document, but Point to Point line/arrows not show on Maps. I can see the response and geo\_point field works wel…

---

## [Display numbers or show legend in Maps](https://discuss.elastic.co/t/display-numbers-or-show-legend-in-maps/225269)

<div class="topic-metadata">

**Author:** [@nosql\_injection](https://discuss.elastic.co/u/nosql_injection)\
**Replies:** 2\
**Last updated:** [March 30, 2020, 8:17am UTC](https://discuss.elastic.co/t/display-numbers-or-show-legend-in-maps/225269 "2020-03-30T08:17:47Z")

</div>

Hi there, I created a "World Countries" map using a EMS boundaries layer. I'm using two letter country codes with a simple join "Join World Countries:iso2 with abc-threat-\*:country.keyword". My question: How do I displ…

---

## [How can i update all the values in specific field using update\_by\_query?](https://discuss.elastic.co/t/how-can-i-update-all-the-values-in-specific-field-using-update-by-query/207875)

<div class="topic-metadata">

**Author:** [@lakmina\_chathurya](https://discuss.elastic.co/u/lakmina_chathurya)\
**Replies:** 2\
**Last updated:** [November 14, 2019, 12:19pm UTC](https://discuss.elastic.co/t/how-can-i-update-all-the-values-in-specific-field-using-update-by-query/207875 "2019-11-14T12:19:19Z")

</div>

POST /my\_metric/\_update\_by\_query { "query": { "bool": { "must": \[ { "term": {"timestamp": "1324987657365"} } …

---

## [Support for custom DiagnosticSource in APM .NET Agent](https://discuss.elastic.co/t/support-for-custom-diagnosticsource-in-apm-net-agent/180834)

<div class="topic-metadata">

**Author:** [@oleh-zheleznyak](https://discuss.elastic.co/u/oleh-zheleznyak)\
**Replies:** 2\
**Last updated:** [May 15, 2019, 11:45am UTC](https://discuss.elastic.co/t/support-for-custom-diagnosticsource-in-apm-net-agent/180834 "2019-05-15T11:45:36Z")

</div>

Hi All, Currently apm-agent-dotnet only supports pre-defined DiagnosticSources: HttpDiagnosticListener, AspNetCoreDiagnosticListener and EfCoreDiagnosticListener. If I want more trace ability, i need to revert to "manu…

---

## [No dashboard data for Filebeat](https://discuss.elastic.co/t/no-dashboard-data-for-filebeat/158249)

<div class="topic-metadata">

**Author:** [@perfecto25](https://discuss.elastic.co/u/perfecto25)\
**Replies:** 2\
**Last updated:** [November 27, 2018, 8:21am UTC](https://discuss.elastic.co/t/no-dashboard-data-for-filebeat/158249 "2018-11-27T08:21:20Z")

</div>

hello, I have basic System filebeat sending logs to my ELK isntance, I can see the log data in Discover the filebeat is installed on a testbox (not on ELK instance), and I have the following filebeat.yml config, but…

---

## [Cant Change Elastic Search Port On Kibana](https://discuss.elastic.co/t/cant-change-elastic-search-port-on-kibana/123435)

<div class="topic-metadata">

**Author:** [@gokhanartuk](https://discuss.elastic.co/u/gokhanartuk)\
**Replies:** 2\
**Last updated:** [March 12, 2018, 1:57pm UTC](https://discuss.elastic.co/t/cant-change-elastic-search-port-on-kibana/123435 "2018-03-12T13:57:58Z")

</div>

Hi I am new to kibana and having a problem about changed default elasticsearch port on kibana. What I am trying to do is change default 9200 port to 9205 in elastichsearch. For the elasticsearch part I am able to do th…

---

## [Kibana 6.0 Default index](https://discuss.elastic.co/t/kibana-6-0-default-index/109561)

<div class="topic-metadata">

**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 2:35pm UTC](https://discuss.elastic.co/t/kibana-6-0-default-index/109561 "2017-12-01T14:35:58Z")

</div>

I have upgraded Kibana from 5.6 to 6.0. When I go to Kibana, it says I need to create a default Index. Error as below: Error: Please specify a default index pattern I added a new Index, with going to Management -\> Inde…

---

## [5.2. java api from/size does not work](https://discuss.elastic.co/t/5-2-java-api-from-size-does-not-work/87088)

<div class="topic-metadata">

**Author:** [@gulcabuk](https://discuss.elastic.co/u/gulcabuk)\
**Replies:** 2\
**Last updated:** [May 25, 2017, 10:44am UTC](https://discuss.elastic.co/t/5-2-java-api-from-size-does-not-work/87088 "2017-05-25T10:44:56Z")

</div>

Hello, I want to paginate my search results and trying to use from-size (https://www.elastic.co/guide/en/elasticsearch/reference/5.2/search-request-from-size.html) feature. When I send a request from console, I got…

---

## [Logstash 5.2 logstash-plugin fails with jar dependencies](https://discuss.elastic.co/t/logstash-5-2-logstash-plugin-fails-with-jar-dependencies/74141)

<div class="topic-metadata">

**Author:** [@csobchuk](https://discuss.elastic.co/u/csobchuk)\
**Replies:** 2\
**Last updated:** [February 8, 2017, 4:03pm UTC](https://discuss.elastic.co/t/logstash-5-2-logstash-plugin-fails-with-jar-dependencies/74141 "2017-02-08T16:03:22Z")

</div>

Hi I am using Logstash 5.2 on Ubuntu 14.04 and have been trying to list/install/update plugins, but I get the following error for any action. sudo bin/logstash-plugin list Gem::LoadError: You have already activate…

---

## [Kibana permissions](https://discuss.elastic.co/t/kibana-permissions/44090)

<div class="topic-metadata">

**Author:** [@sipazzo](https://discuss.elastic.co/u/sipazzo)\
**Replies:** 2\
**Last updated:** [March 11, 2016, 11:17pm UTC](https://discuss.elastic.co/t/kibana-permissions/44090 "2016-03-11T23:17:30Z")

</div>

I am trying to understand how Kibana should be installed when using the tar install so that it runs automatically as a service. When you use the repo install it seems like it creates a kibana user but the directions for …

---

## [Translog error NoSuchFileException](https://discuss.elastic.co/t/translog-error-nosuchfileexception/38035)

<div class="topic-metadata">

**Author:** [@Glecun](https://discuss.elastic.co/u/Glecun)\
**Replies:** 2\
**Last updated:** [December 28, 2015, 11:03am UTC](https://discuss.elastic.co/t/translog-error-nosuchfileexception/38035 "2015-12-28T11:03:09Z")

</div>

Bonjour, J'utilise elasticsearch 2.1. Je rencontre un problème assez dérangeant avec marvel. En effet, je lance mes noeuds , je lance kibana & marvel, j'index mes données et jusque là tout va bien. Sauf que, lorsque …

---

## [Kibana: 405 response code on refreshing index pattern’s field list](https://discuss.elastic.co/t/kibana-405-response-code-on-refreshing-index-pattern-s-field-list/238205)

<div class="topic-metadata">

**Author:** [@MRC1](https://discuss.elastic.co/u/MRC1)\
**Replies:** 6\
**Last updated:** [August 13, 2020, 8:50am UTC](https://discuss.elastic.co/t/kibana-405-response-code-on-refreshing-index-pattern-s-field-list/238205 "2020-08-13T08:50:34Z")

</div>

Hi, all. This is an issue I've seen posted previously in this forum but with no actual answer. When trying to refresh the field list of an index pattern I get a 405 error response. This the error message: Error: …

---

## [Logstash Reference - Parsing Logs with Logstash](https://discuss.elastic.co/t/logstash-reference-parsing-logs-with-logstash/129917)

<div class="topic-metadata">

**Author:** [@yckoh](https://discuss.elastic.co/u/yckoh)\
**Replies:** 6\
**Last updated:** [May 2, 2018, 1:39am UTC](https://discuss.elastic.co/t/logstash-reference-parsing-logs-with-logstash/129917 "2018-05-02T01:39:01Z")

</div>

Hi, I've tried to send log lines from filebeat to Logstash as per the instructions in the reference. However, even though it shows that the pipeline has started successfully it seems to not give me any output on my comma…

---

## [Unable to get x-pack-api-5.5.3.jar](https://discuss.elastic.co/t/unable-to-get-x-pack-api-5-5-3-jar/123680)

<div class="topic-metadata">

**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\
**Replies:** 6\
**Last updated:** [March 13, 2018, 9:03am UTC](https://discuss.elastic.co/t/unable-to-get-x-pack-api-5-5-3-jar/123680 "2018-03-13T09:03:16Z")

</div>

Hi I am want to download x-pack-api-5.5.3.jar but it is giving me error while downloading it using POM And I am unable to find the jar for download I got x-pack-transport-5.5.3.jar from https://www.elastic.co/guide/en/…

---

## [Get MapperParsingException failed to parse in 0.90.10](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732)

<div class="topic-metadata">

**Author:** [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\
**Replies:** 6\
**Last updated:** [February 12, 2014, 8:42am UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732 "2014-02-12T08:42:26Z")

</div>

Hi all, get MapperParsingException failed to parse in 0.90.10 \[2014-02-11 16:05:09,402\]\[DEBUG\]\[action.bulk \] \[Thunderbolt\] \[logstash-2014.02.11\]\[4\] failed to execute bulk item (index) index {\[logstas…

---

## [Кластер высокой доступности из 4 ElasticSearch, 4 Logstash, 1 Kibana и 1 Grafana](https://discuss.elastic.co/t/4-elasticsearch-4-logstash-1-kibana-1-grafana/286515)

<div class="topic-metadata">

**Author:** [@Areopagit](https://discuss.elastic.co/u/Areopagit)\
**Replies:** 3\
**Last updated:** [October 15, 2021, 3:50pm UTC](https://discuss.elastic.co/t/4-elasticsearch-4-logstash-1-kibana-1-grafana/286515 "2021-10-15T15:50:19Z")

</div>

Добрый день. Собрал кластер (для сбора логов всех систем организации) из вышеперечисленного (четыре ноды Elasticsearch, четыре ноды Logstash, одна нода Kibana и одна нода Grafana) на одном высокопроизводительном физичес…

---

## [Node does not cluster setting \[cluster.routing.allocation.include\] filters](https://discuss.elastic.co/t/node-does-not-cluster-setting-cluster-routing-allocation-include-filters/254671)

<div class="topic-metadata">

**Author:** [@ludaca](https://discuss.elastic.co/u/ludaca)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 7:31am UTC](https://discuss.elastic.co/t/node-does-not-cluster-setting-cluster-routing-allocation-include-filters/254671 "2020-11-09T07:31:42Z")

</div>

Hello, ES version 5.6.10 16 data nodes 3 master nodes Can't perform any shard's relocation: Error while starting relocation { "error": { "root\_cause": \[ { "type": "remote\_transport\_exception", …

---

## [\[MachineLearning/DataVisualizer/ImportData\] - File too large (?)](https://discuss.elastic.co/t/machinelearning-datavisualizer-importdata-file-too-large/167882)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 8\
**Last updated:** [February 12, 2019, 5:24pm UTC](https://discuss.elastic.co/t/machinelearning-datavisualizer-importdata-file-too-large/167882 "2019-02-12T17:24:17Z")

</div>

Hi here, Thanks in advance for your time I was trying to use the new machine learning tool and it worked well for a first test fill Then, I've been trying with a fill much larger (header of 9 fields, 45120 lines of da…

---

## [Filbeat export template](https://discuss.elastic.co/t/filbeat-export-template/155581)

<div class="topic-metadata">

**Author:** [@shauryagarg2006](https://discuss.elastic.co/u/shauryagarg2006)\
**Replies:** 3\
**Last updated:** [November 8, 2018, 2:49pm UTC](https://discuss.elastic.co/t/filbeat-export-template/155581 "2018-11-08T14:49:39Z")

</div>

I am using the version 6.4.2 of filebeat and elasticsearch. I am trying to upload the template into elasticsearch using the setup command. It works fine but when I saw the generated template (also through the filebeat ex…

---

## [How to use optional parameters?](https://discuss.elastic.co/t/how-to-use-optional-parameters/121931)

<div class="topic-metadata">

**Author:** [@Mehmet\_KURT](https://discuss.elastic.co/u/Mehmet_KURT)\
**Replies:** 3\
**Last updated:** [March 17, 2018, 12:12am UTC](https://discuss.elastic.co/t/how-to-use-optional-parameters/121931 "2018-03-17T00:12:11Z")

</div>

How to use C# Optional Parameters In Search Query? public virtual List\<Product\> SearchProducts( bool? isFeatured = null, bool? sameDayShipping = null, bool? isMostAdvantage = null, …

---

## [Is it possible to install logstash plugin without gem (with out internet)](https://discuss.elastic.co/t/is-it-possible-to-install-logstash-plugin-without-gem-with-out-internet/77514)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 3\
**Last updated:** [March 9, 2017, 6:28pm UTC](https://discuss.elastic.co/t/is-it-possible-to-install-logstash-plugin-without-gem-with-out-internet/77514 "2017-03-09T18:28:49Z")

</div>

Is it possible to install logstash plugin without RubyGem on a VM without internet?

---

## [Marvel Indices Not Clearing Down](https://discuss.elastic.co/t/marvel-indices-not-clearing-down/64266)

<div class="topic-metadata">

**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\
**Replies:** 3\
**Last updated:** [November 3, 2016, 1:00am UTC](https://discuss.elastic.co/t/marvel-indices-not-clearing-down/64266 "2016-11-03T01:00:16Z")

</div>

Hi, I have the Marvel agent running on our production cluster sending metrics to a separate monitoring cluster, I also have the Marvel agent enabled on the monitoring cluster but with marvel.agent.interval set to -1 as…

---

## [Backup indices](https://discuss.elastic.co/t/backup-indices/56634)

<div class="topic-metadata">

**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\
**Replies:** 3\
**Last updated:** [July 29, 2016, 6:11am UTC](https://discuss.elastic.co/t/backup-indices/56634 "2016-07-29T06:11:38Z")

</div>

Hello I tested the snapshot feature and restoration with this doc: https://www.elastic.co/guide/en/elasticsearch/guide/current/backing-up-your-cluster.html . It works perfectly. I have still two questions: how to …

---

## [Elasticsearch Incremental Snapshot](https://discuss.elastic.co/t/elasticsearch-incremental-snapshot/36939)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 8\
**Last updated:** [December 11, 2015, 8:35am UTC](https://discuss.elastic.co/t/elasticsearch-incremental-snapshot/36939 "2015-12-11T08:35:17Z")

</div>

Let me explain with an example: Snapshot1 pushed segments 1, 2, 3 in repository X Snapshot2 needs to backup segments 1, 2, 3, 4 (4 contains the new data). But repository X already has segments 1, 2, 3. So the \_snapshot…

---

## [Logstash in K8s: Deployment vs StatefulSet](https://discuss.elastic.co/t/logstash-in-k8s-deployment-vs-statefulset/296595)

<div class="topic-metadata">

**Author:** [@Nadiia\_Maltseva](https://discuss.elastic.co/u/Nadiia_Maltseva)\
**Replies:** 1\
**Last updated:** [February 11, 2022, 6:43am UTC](https://discuss.elastic.co/t/logstash-in-k8s-deployment-vs-statefulset/296595 "2022-02-11T06:43:50Z")

</div>

Hi, community! I am running Logstash on an EC2 instance in AWS. And I want to migrate to Kubernetes (since all our applications are running there). Could you, please, advise me on what factors should be taken into acco…

---

## [VEGA Visualizations: index as data source](https://discuss.elastic.co/t/vega-visualizations-index-as-data-source/200696)

<div class="topic-metadata">

**Author:** [@g\_k\_b](https://discuss.elastic.co/u/g_k_b)\
**Replies:** 1\
**Last updated:** [September 23, 2019, 1:58pm UTC](https://discuss.elastic.co/t/vega-visualizations-index-as-data-source/200696 "2019-09-23T13:58:07Z")

</div>

Hi everyone! I would like to use some VEGA Visualizations for some indexed data I have on elasticsearch but my json always generates errors! The only case it works is the VEGA Sankey visulization. Examples on the VEGA …

---

## [Kibana User Profile Creation](https://discuss.elastic.co/t/kibana-user-profile-creation/154555)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 1\
**Last updated:** [October 30, 2018, 4:10pm UTC](https://discuss.elastic.co/t/kibana-user-profile-creation/154555 "2018-10-30T16:10:27Z")

</div>

Hi team, I'm trying to create following user profile in kibana and I did following steps to accomplish my requirement but unfortunately I was unable to do it . User profile requirement: we need accounts: equio : c…

---

## [Insufficient memory for the Java Runtime Environment to continue](https://discuss.elastic.co/t/insufficient-memory-for-the-java-runtime-environment-to-continue/135169)

<div class="topic-metadata">

**Author:** [@SimpleCC](https://discuss.elastic.co/u/SimpleCC)\
**Replies:** 1\
**Last updated:** [June 8, 2018, 4:08pm UTC](https://discuss.elastic.co/t/insufficient-memory-for-the-java-runtime-environment-to-continue/135169 "2018-06-08T16:08:43Z")

</div>

I configured the environment and use ./elasticsearch to launched the Elasticsearch-6.2.4，then I got the error message: \[6\] the log content is: \[1\] \[415\] --------------- S Y S T E M --------------- OS:CentOS Linux…

---

## [Is there a problem w/ 2.3 repository?](https://discuss.elastic.co/t/is-there-a-problem-w-2-3-repository/45902)

<div class="topic-metadata">

**Author:** [@thibaultlavoisey](https://discuss.elastic.co/u/thibaultlavoisey)\
**Replies:** 1\
**Last updated:** [March 31, 2016, 9:49am UTC](https://discuss.elastic.co/t/is-there-a-problem-w-2-3-repository/45902 "2016-03-31T09:49:00Z")

</div>

Hello, Is there a problem w/ 2.3 repository? According to Elasticsearch doc: I add the key w/ the command \> wget -qO - https://packages.elastic.co/GPG-KEY-elasticsearch | apt-key add - I add the repository w/ the com…

---

## [Parsing XML with self-closing tags](https://discuss.elastic.co/t/parsing-xml-with-self-closing-tags/31723)

<div class="topic-metadata">

**Author:** [@JW1](https://discuss.elastic.co/u/JW1)\
**Replies:** 1\
**Last updated:** [December 24, 2015, 9:21am UTC](https://discuss.elastic.co/t/parsing-xml-with-self-closing-tags/31723 "2015-12-24T09:21:12Z")

</div>

If I use logstash to parse XML with an self-closing tag (e.g. \<foo /\>), it turns it into an empty object instead of an empty string. For example: "parsed" =\> { "foo" =\> \[ \[0\] {} \] } How can I add a con…

---

## [Curl dictionary key and value search](https://discuss.elastic.co/t/curl-dictionary-key-and-value-search/19049)

<div class="topic-metadata">

**Author:** [@ali\_koyuncu](https://discuss.elastic.co/u/ali_koyuncu)\
**Replies:** 1\
**Last updated:** [August 2, 2014, 10:39pm UTC](https://discuss.elastic.co/t/curl-dictionary-key-and-value-search/19049 "2014-08-02T22:39:03Z")

</div>

My data structere has a key value pair like below: {"content\_type":0,"semantic":\[{"Key":"all","Value":0},{"Key":"tg","Value":1}\],"user\_local\_id":1} {"content\_type":0,"semantic":\[{"Key":"all","Value":1},{"Key":"tg","V…

---

## [Sqlite plugin 3.0.4 failed to start and it seems a bug](https://discuss.elastic.co/t/sqlite-plugin-3-0-4-failed-to-start-and-it-seems-a-bug/150305)

<div class="topic-metadata">

**Author:** [@qiulang](https://discuss.elastic.co/u/qiulang)\
**Replies:** 1\
**Last updated:** [October 2, 2018, 1:08am UTC](https://discuss.elastic.co/t/sqlite-plugin-3-0-4-failed-to-start-and-it-seems-a-bug/150305 "2018-10-02T01:08:14Z")

</div>

I am kinda sure this is a bug! Because if I just use logstash-input-jdbc without using sqlite plugin I can import my sqlite data successfully! Someone opened an issue at Logstash with sqllite3 problem · Issue #9788 · …

[Previous page](https://discuss.elastic.co/top.md?page=1367&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1369&per_page=50&period=all)
