# Top **URL:** https://discuss.elastic.co/top.md?page=1369&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1370 --- ## [Filebeat error while parsing multiline parser config](https://discuss.elastic.co/t/filebeat-error-while-parsing-multiline-parser-config/331089)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 2\ **Last updated:** [May 4, 2023, 2:47pm UTC](https://discuss.elastic.co/t/filebeat-error-while-parsing-multiline-parser-config/331089 "2023-05-04T14:47:05Z")
I am using Filebeat 8.7. I am trying to follow the instructions here: I double checked the indentation. Cannot figure out what is wrong. I just want to make sure a multi-line stack trace is captured into one docume… --- ## [Authenticate Elasticsearch \<--\> Kibana Client Communication (xpack.security.http.ssl.client\_authentication)s](https://discuss.elastic.co/t/authenticate-elasticsearch-kibana-client-communication-xpack-security-http-ssl-client-authentication-s/305038)
**Author:** [@Lokesh\_Sachdeva](https://discuss.elastic.co/u/Lokesh_Sachdeva)\ **Replies:** 2\ **Last updated:** [May 30, 2022, 10:30am UTC](https://discuss.elastic.co/t/authenticate-elasticsearch-kibana-client-communication-xpack-security-http-ssl-client-authentication-s/305038 "2022-05-30T10:30:04Z")
Hi Team We are configuring ELK Docker 8.0.0 in our system with SSL Configuration. List item SSL Authentication Between Kibana & End User (Host Machine): Its working fine with Elasticsearch generated CA. Kibana is run… --- ## [Enable compression while indexing data using Hive/Elastic connector](https://discuss.elastic.co/t/enable-compression-while-indexing-data-using-hive-elastic-connector/210265)
**Author:** [@sachinjose](https://discuss.elastic.co/u/sachinjose)\ **Replies:** 2\ **Last updated:** [December 4, 2019, 6:43pm UTC](https://discuss.elastic.co/t/enable-compression-while-indexing-data-using-hive-elastic-connector/210265 "2019-12-04T18:43:37Z")
Hi Team, We are using Hive/Elasticsearch(connector) for batch indexing data to ES, Can some one pls share the configs in the indexer side to enable compression(gzip/deflate) for the data in transit(bulk write) in order … --- ## [Unable to index documents](https://discuss.elastic.co/t/unable-to-index-documents/200442)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 2:44pm UTC](https://discuss.elastic.co/t/unable-to-index-documents/200442 "2019-09-20T14:44:05Z")
I'm using Java to push data into Swiftype App Search. The logs have 200 has the response, but when I investigate the error message is: Here is the request body: \[ { "fileExtension": "jpg", "id": 21 } \] He… --- ## [Logstash Netflow Docs Out of Date?](https://discuss.elastic.co/t/logstash-netflow-docs-out-of-date/127207)
**Author:** [@Jarrad](https://discuss.elastic.co/u/Jarrad)\ **Replies:** 2\ **Last updated:** [April 8, 2018, 1:13pm UTC](https://discuss.elastic.co/t/logstash-netflow-docs-out-of-date/127207 "2018-04-08T13:13:44Z")
Hi. I've been following the docs here: https://www.elastic.co/guide/en/logstash/6.x/netflow-module.html for an ELK stack running ELK 6.2.3 I've built today running on Ubuntu 16.04 server. I'd like to get Netflow integra… --- ## [Unable to retrieve field value from Doc Values in nested function\_score query](https://discuss.elastic.co/t/unable-to-retrieve-field-value-from-doc-values-in-nested-function-score-query/80052)
**Author:** [@Junjun\_Zhang](https://discuss.elastic.co/u/Junjun_Zhang)\ **Replies:** 2\ **Last updated:** [March 28, 2017, 12:53am UTC](https://discuss.elastic.co/t/unable-to-retrieve-field-value-from-doc-values-in-nested-function-score-query/80052 "2017-03-28T00:53:56Z")
Hi all, We are using function\_score query to sort search results. The score takes into account the value of a field in the indexed document. However, it appears the field value can not be properly retrieved from Doc Va… --- ## [Logstash service stops every 2-3 days](https://discuss.elastic.co/t/logstash-service-stops-every-2-3-days/44826)
**Author:** [@meons](https://discuss.elastic.co/u/meons)\ **Replies:** 2\ **Last updated:** [April 5, 2016, 8:18am UTC](https://discuss.elastic.co/t/logstash-service-stops-every-2-3-days/44826 "2016-04-05T08:18:46Z")
Hi there, I have 2 Logstash servers that recieve logs from different systems such as Windows and Linux machines and some networks systems such Firewalls, Switches, etc. The problem is that every 2-3 days the logstash pro… --- ## [Possible bug with highlighted terms when setting type in search](https://discuss.elastic.co/t/possible-bug-with-highlighted-terms-when-setting-type-in-search/42903)
**Author:** [@cocote](https://discuss.elastic.co/u/cocote)\ **Replies:** 2\ **Last updated:** [February 29, 2016, 8:39am UTC](https://discuss.elastic.co/t/possible-bug-with-highlighted-terms-when-setting-type-in-search/42903 "2016-02-29T08:39:12Z")
Hello, I think I came across a small bug with the highlighting in the Java API in ElasticSearch 2.1.1. Sometimes the highlighted terms appear to be the ones queried but also the types set in the search. //create a… --- ## [Delete by source](https://discuss.elastic.co/t/delete-by-source/31475)
**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\ **Replies:** 2\ **Last updated:** [October 1, 2015, 5:47pm UTC](https://discuss.elastic.co/t/delete-by-source/31475 "2015-10-01T17:47:42Z")
Hello Guys!, I'm going to try delete documents from specific source, and I have the next struct: "\_index" : "graylog2\_0", "\_type" : "message", "\_id" : "502a30a1-33a9-11e5-8a4c-005056a9199b", "\_score" : 1.0, "\_so… --- ## [Can Attachment type do not store base64 source?](https://discuss.elastic.co/t/can-attachment-type-do-not-store-base64-source/938)
**Author:** [@shinyke](https://discuss.elastic.co/u/shinyke)\ **Replies:** 2\ **Last updated:** [May 20, 2015, 7:18am UTC](https://discuss.elastic.co/t/can-attachment-type-do-not-store-base64-source/938 "2015-05-20T07:18:28Z")
Hi,I'm a new to ES, our project is about email. Recently, we try to index attachments with Attachment Type.What confused us is that Although we only need the content index, ES still store file's base64 string in \_sour… --- ## [Create Mapping Before Uploading Json Data](https://discuss.elastic.co/t/create-mapping-before-uploading-json-data/180272)
**Author:** [@MNurhakimB](https://discuss.elastic.co/u/MNurhakimB)\ **Replies:** 1\ **Last updated:** [May 9, 2019, 4:49am UTC](https://discuss.elastic.co/t/create-mapping-before-uploading-json-data/180272 "2019-05-09T04:49:05Z")
I have the following code in python that does upload JSON file to elastic search. What it does is it loops every file in the directory and upload it but unfortunately uses the default type, keyword, for all columns. # G… --- ## [Protecting Public Kibana Instance With Cloudflare](https://discuss.elastic.co/t/protecting-public-kibana-instance-with-cloudflare/179025)
**Author:** [@NetwarSystem](https://discuss.elastic.co/u/NetwarSystem)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 7:03pm UTC](https://discuss.elastic.co/t/protecting-public-kibana-instance-with-cloudflare/179025 "2019-04-30T19:03:51Z")
I have searched a bit and I see a lot of information on using ELK to analyze Cloudflare behavior, but nothing on protecting a public facing Kibana instance using Cloudflare. I have a domain (netwarsystem.com) and there … --- ## [Vega vertical bar chart: Inline data vs elasticsearch index url data](https://discuss.elastic.co/t/vega-vertical-bar-chart-inline-data-vs-elasticsearch-index-url-data/171546)
**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\ **Replies:** 1\ **Last updated:** [March 8, 2019, 7:18pm UTC](https://discuss.elastic.co/t/vega-vertical-bar-chart-inline-data-vs-elasticsearch-index-url-data/171546 "2019-03-08T19:18:48Z")
I created a simple index: Testing vs inline data - the following works: The following does not work - Why? - complete source code will follow the illustration. Here is the complete source code: { "$schem… --- ## [Mapper\_parsing\_exception, illegal\_state\_exception, unpredictable data, dynamic mapping](https://discuss.elastic.co/t/mapper-parsing-exception-illegal-state-exception-unpredictable-data-dynamic-mapping/149510)
**Author:** [@cgmelastic](https://discuss.elastic.co/u/cgmelastic)\ **Replies:** 1\ **Last updated:** [September 25, 2018, 7:57pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-illegal-state-exception-unpredictable-data-dynamic-mapping/149510 "2018-09-25T19:57:40Z")
I've been working on aggregating log data across many different microservices. I've got all of the developers logging data in JSON format now. It shows up in CloudWatch and is forwarded to a lambda which reformats them a… --- ## [请问重置安全选项这个 post 是不是有问题](https://discuss.elastic.co/t/post/146129)
**Author:** [@Imr](https://discuss.elastic.co/u/Imr)\ **Replies:** 1\ **Last updated:** [August 29, 2018, 6:40am UTC](https://discuss.elastic.co/t/post/146129 "2018-08-29T06:40:18Z")
文档地址在： https://www.elastic.co/guide/en/elasticsearch/reference/current/secure-settings.html#secure-settings 最下面有方法： POST \_nodes/reload\_secure\_settings 但是我 POST 返回信息是 ： {"error":"Incorrect HTTP method for uri \[/\_node… --- ## [Version Upgradation in Elasticsearch from 2.x to 5.x](https://discuss.elastic.co/t/version-upgradation-in-elasticsearch-from-2-x-to-5-x/77127)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 7\ **Last updated:** [March 3, 2017, 10:53am UTC](https://discuss.elastic.co/t/version-upgradation-in-elasticsearch-from-2-x-to-5-x/77127 "2017-03-03T10:53:18Z")
Hi Team, I have upgraded Elasticsearch Version from 2.x to 5.x. But the data path in old version is : data/elasticsearchCluster/nodes/0/indices, and that of new new version is : data/nodes/0/indices How can I cop… --- ## [Aliasing a real index pattern](https://discuss.elastic.co/t/aliasing-a-real-index-pattern/36115)
**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\ **Replies:** 7\ **Last updated:** [December 7, 2015, 10:04pm UTC](https://discuss.elastic.co/t/aliasing-a-real-index-pattern/36115 "2015-12-07T22:04:42Z")
lets say I have an actual, real index pattern foo-\*. then i create another real index pattern v2-foo-\*. now i create an alias that looks something like this: { "actions": \[ { "add": { "i… --- ## [Best Optimization for wildcard queries](https://discuss.elastic.co/t/best-optimization-for-wildcard-queries/322738)
**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\ **Replies:** 4\ **Last updated:** [January 9, 2023, 2:30pm UTC](https://discuss.elastic.co/t/best-optimization-for-wildcard-queries/322738 "2023-01-09T14:30:09Z")
Hello, I am working with elasticsearch on audit log data. I wanted to know what are the best optimizations and tokenizer/analyzer/term usages for optimizing elastic for wildcard queries. I have looked at n-grams and the… --- ## [Logstash Crashes on Ruby filter when I change a field name](https://discuss.elastic.co/t/logstash-crashes-on-ruby-filter-when-i-change-a-field-name/166409)
**Author:** [@ChrisW](https://discuss.elastic.co/u/ChrisW)\ **Replies:** 4\ **Last updated:** [February 1, 2019, 2:05pm UTC](https://discuss.elastic.co/t/logstash-crashes-on-ruby-filter-when-i-change-a-field-name/166409 "2019-02-01T14:05:29Z")
Logstash version: 6.4.2 I have this code for a ruby in filter {...}: ruby { code =\> 'event.set("logstash\_time\_difference", (((event.get("\[received\_at\]").to\_f - event.get("\[@timestamp\]").to\_f).abs)\*1000)… --- ## [Using filebeat to trigger a python code](https://discuss.elastic.co/t/using-filebeat-to-trigger-a-python-code/131107)
**Author:** [@ashay.dhavale](https://discuss.elastic.co/u/ashay.dhavale)\ **Replies:** 4\ **Last updated:** [May 10, 2018, 12:37pm UTC](https://discuss.elastic.co/t/using-filebeat-to-trigger-a-python-code/131107 "2018-05-10T12:37:15Z")
Hi Can i use filebeat to monitor a directory and trigger a python code as soon as a new file is received in that directory? What changes do i need and where. --- ## [Machine learning jobs not reflecting new data](https://discuss.elastic.co/t/machine-learning-jobs-not-reflecting-new-data/126283)
**Author:** [@David\_Tomasheski](https://discuss.elastic.co/u/David_Tomasheski)\ **Replies:** 4\ **Last updated:** [April 4, 2018, 3:16pm UTC](https://discuss.elastic.co/t/machine-learning-jobs-not-reflecting-new-data/126283 "2018-04-04T15:16:46Z")
I have a few machine learning jobs running all on the same index pattern. They are single metric doc count jobs. I am getting new data in but my count in the Single Metric Viewer flat lines to 0. I have no idea what I'm … --- ## [Could not resolve org.elasticsearch:elasticsearch:5.5.2-SNAPSHOT](https://discuss.elastic.co/t/could-not-resolve-org-elasticsearch-elasticsearch-5-5-2-snapshot/98430)
**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\ **Replies:** 4\ **Last updated:** [August 29, 2017, 10:30am UTC](https://discuss.elastic.co/t/could-not-resolve-org-elasticsearch-elasticsearch-5-5-2-snapshot/98430 "2017-08-29T10:30:01Z")
Elasticsearch Version: 5.5.2 OS: Windows When I use grdle to build elasticsearch source code, I get a unknown problem, like this: What went wrong: Could not determine the dependencies of task ':benchmarks:javadoc'. … --- ## [Webhook.host doesn't translate ctx.metadata values](https://discuss.elastic.co/t/webhook-host-doesnt-translate-ctx-metadata-values/66994)
**Author:** [@nielsoncr](https://discuss.elastic.co/u/nielsoncr)\ **Replies:** 4\ **Last updated:** [November 23, 2016, 3:36pm UTC](https://discuss.elastic.co/t/webhook-host-doesnt-translate-ctx-metadata-values/66994 "2016-11-23T15:36:44Z")
I have a multiple watches that perform a webhook action. I want to store the host in a ctx.metatdata field for flexibility in cases where the host may differ depending on installation parameters, but the {{ctx.metadata}… --- ## [Resource allocation, data vs master nodes](https://discuss.elastic.co/t/resource-allocation-data-vs-master-nodes/35660)
**Author:** [@Zaid\_Amir](https://discuss.elastic.co/u/Zaid_Amir)\ **Replies:** 4\ **Last updated:** [December 1, 2015, 9:15pm UTC](https://discuss.elastic.co/t/resource-allocation-data-vs-master-nodes/35660 "2015-12-01T21:15:33Z")
Hi, I was wondering how data only nodes work. Do they load the data an memory also? Do I need to allocate large memory machines for them? --- ## [Kibana Formula using ifelse with multiple conditions](https://discuss.elastic.co/t/kibana-formula-using-ifelse-with-multiple-conditions/370983)
**Author:** [@bjornbear](https://discuss.elastic.co/u/bjornbear)\ **Replies:** 5\ **Last updated:** [December 13, 2024, 1:57pm UTC](https://discuss.elastic.co/t/kibana-formula-using-ifelse-with-multiple-conditions/370983 "2024-12-13T13:57:12Z")
How can I combine multiple conditions in an ifelse statement? I need to avoid a situation where I divide by zero e.g. any of the following values: count() and count(shift='1w')+count(shift='2w') may not be 0 to avoid a N… --- ## [How display documents with missing date field](https://discuss.elastic.co/t/how-display-documents-with-missing-date-field/294065)
**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\ **Replies:** 5\ **Last updated:** [January 11, 2022, 6:31pm UTC](https://discuss.elastic.co/t/how-display-documents-with-missing-date-field/294065 "2022-01-11T18:31:54Z")
I have what I think is an easy question, but for some reason I can't get a straight answer. I am using Kibana with another tool. The tool has documents in it that have 10 fields. 3 of those fields are date fields. If… --- ## [Aggregate filter not catching up: input start\_position = "beginning"](https://discuss.elastic.co/t/aggregate-filter-not-catching-up-input-start-position-beginning/201428)
**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\ **Replies:** 5\ **Last updated:** [October 2, 2019, 3:14am UTC](https://discuss.elastic.co/t/aggregate-filter-not-catching-up-input-start-position-beginning/201428 "2019-10-02T03:14:38Z")
One of the things I love about logstash is the "sincedb" database which tracks current position and — if interrupted — remembers the location of where it left off. So, if Logstash is down for, say 4 hours, once restarte… --- ## [Optimize is blowing up index size](https://discuss.elastic.co/t/optimize-is-blowing-up-index-size/107432)
**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\ **Replies:** 5\ **Last updated:** [November 13, 2017, 5:04pm UTC](https://discuss.elastic.co/t/optimize-is-blowing-up-index-size/107432 "2017-11-13T17:04:17Z")
So i'm on 1.7.x and i did an optimize on a large 10's of TBs index (haven't done one in a while) and all went well, the index size went down. I am currently optimizing another, however, the size has gone up amost 25% so… --- ## [Solr to Elasticsearch Migration](https://discuss.elastic.co/t/solr-to-elasticsearch-migration/327981)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 3\ **Last updated:** [March 19, 2023, 5:51pm UTC](https://discuss.elastic.co/t/solr-to-elasticsearch-migration/327981 "2023-03-19T17:51:49Z")
Is there any migration guidelines for migration from Apache Solr to Elasticsearch? --- ## [Security Rules with Endgame get an error](https://discuss.elastic.co/t/security-rules-with-endgame-get-an-error/317241)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 3\ **Last updated:** [October 25, 2022, 3:30pm UTC](https://discuss.elastic.co/t/security-rules-with-endgame-get-an-error/317241 "2022-10-25T15:30:58Z")
Hi, In Elastic Security there are 4 rules which don’t work because Endgame is replaced by Endpoint. The rules are: Malware - Detected - Elastic Endgame Malware - Prevented - Elastic Endgame Ransomware - Detected - Ela… --- ## [Filtering directly from data table - Kibana dashboard](https://discuss.elastic.co/t/filtering-directly-from-data-table-kibana-dashboard/312075)
**Author:** [@SaraAlshamsi](https://discuss.elastic.co/u/SaraAlshamsi)\ **Replies:** 3\ **Last updated:** [August 18, 2022, 6:03pm UTC](https://discuss.elastic.co/t/filtering-directly-from-data-table-kibana-dashboard/312075 "2022-08-18T18:03:57Z")
Hello, I have an issue in filtering directly from a data table in Kibana dashboard. Case 1: When I select an item, to filter it, from the first page of the table, I can filter without any problem and the filter is app… --- ## [Elasticsearch will not start with xpack.security.enabled: true running latest 7.12 version and basic license](https://discuss.elastic.co/t/elasticsearch-will-not-start-with-xpack-security-enabled-true-running-latest-7-12-version-and-basic-license/270307)
**Author:** [@Reedler](https://discuss.elastic.co/u/Reedler)\ **Replies:** 3\ **Last updated:** [April 17, 2021, 3:46am UTC](https://discuss.elastic.co/t/elasticsearch-will-not-start-with-xpack-security-enabled-true-running-latest-7-12-version-and-basic-license/270307 "2021-04-17T03:46:15Z")
Output of license "type" : "basic", Running small 3 node cluster with same elasticsearch.xml configs xpack.security.enabled: true --- ## [Elasticsearch won't accept logs using standard syslog date format](https://discuss.elastic.co/t/elasticsearch-wont-accept-logs-using-standard-syslog-date-format/179962)
**Author:** [@elasticSmash](https://discuss.elastic.co/u/elasticSmash)\ **Replies:** 3\ **Last updated:** [May 8, 2019, 11:39am UTC](https://discuss.elastic.co/t/elasticsearch-wont-accept-logs-using-standard-syslog-date-format/179962 "2019-05-08T11:39:36Z")
On the logstash forum, they said that my question had more to do with elasticsearch, so here I am. So far I've added hosts to my logstash input that have used ISO8601 time format in their syslog config. Those have impo… --- ## [Logtrail error](https://discuss.elastic.co/t/logtrail-error/122699)
**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\ **Replies:** 3\ **Last updated:** [March 12, 2018, 7:58pm UTC](https://discuss.elastic.co/t/logtrail-error/122699 "2018-03-12T19:58:32Z")
Hello, I take this error in Kibana : Error! Exception while fetching hosts : beat.hostname field not of type keyword or keyword mapping does not exist. I have this configuration in logtrail.json: { "version" : 1, … --- ## [Logstash output file - storage capacity](https://discuss.elastic.co/t/logstash-output-file-storage-capacity/119058)
**Author:** [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)\ **Replies:** 3\ **Last updated:** [February 9, 2018, 1:09pm UTC](https://discuss.elastic.co/t/logstash-output-file-storage-capacity/119058 "2018-02-09T13:09:44Z")
Hi Team, We are planning to gather IIS logs using ELK stack. We will be using filebeats to get the IIS logs to Elasticsearch server (this will also be the kibana server). Does logstash send the complete log file to elas… --- ## [Kibana index pattern](https://discuss.elastic.co/t/kibana-index-pattern/90253)
**Author:** [@brian.sarandi](https://discuss.elastic.co/u/brian.sarandi)\ **Replies:** 3\ **Last updated:** [June 28, 2017, 6:42am UTC](https://discuss.elastic.co/t/kibana-index-pattern/90253 "2017-06-28T06:42:41Z")
i am following the instructions in https://www.elastic.co/guide/en/cloud/current/ec-beats.html number 7. load the kibana index pattern i run this command: import\_dashboards -only-index -es http://93bb827b4a16fa433486b… --- ## [Combining Metricbeat/Filebeat agents into a single agent](https://discuss.elastic.co/t/combining-metricbeat-filebeat-agents-into-a-single-agent/74536)
**Author:** [@rherr63](https://discuss.elastic.co/u/rherr63)\ **Replies:** 3\ **Last updated:** [February 13, 2017, 9:52am UTC](https://discuss.elastic.co/t/combining-metricbeat-filebeat-agents-into-a-single-agent/74536 "2017-02-13T09:52:10Z")
Is there a roadmap item for combining the agents? If so, do you have a target date? Thanks. --- ## [Print response when finish reading a file](https://discuss.elastic.co/t/print-response-when-finish-reading-a-file/40054)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 3\ **Last updated:** [January 28, 2016, 1:49pm UTC](https://discuss.elastic.co/t/print-response-when-finish-reading-a-file/40054 "2016-01-28T13:49:15Z")
When I use filebeat finish reading a file (the file does not change anymore), in command line filebeat will print out a response like this. It is normal to finish reading a file, it is not an error. Is there any way I… --- ## [How can I resolve a problem of reallocation memory?](https://discuss.elastic.co/t/how-can-i-resolve-a-problem-of-reallocation-memory/34315)
**Author:** [@Juan\_Diaz\_Gonzalez](https://discuss.elastic.co/u/Juan_Diaz_Gonzalez)\ **Replies:** 3\ **Last updated:** [November 11, 2015, 1:54pm UTC](https://discuss.elastic.co/t/how-can-i-resolve-a-problem-of-reallocation-memory/34315 "2015-11-11T13:54:58Z")
I have this problem with the elasticsearch health, I do the next query: GET \_cluster/health?level=indices&pretty And the result is the next: "new\_gompute\_history\_2015-10-23\_10:10:26": { "status": "red", … --- ## [404 on PDF Report](https://discuss.elastic.co/t/404-on-pdf-report/295606)
**Author:** [@BalajiTechs](https://discuss.elastic.co/u/BalajiTechs)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:08pm UTC](https://discuss.elastic.co/t/404-on-pdf-report/295606 "2022-02-07T16:08:34Z")
I am on 7.16.2 version of elastic cloud. I am trying to generate a PDF report from a dashboard with ~25 visualizations. The generated PDF contains only error string(as shown in below image). The last successful repor… --- ## [Master and slave using same index](https://discuss.elastic.co/t/master-and-slave-using-same-index/282084)
**Author:** [@selin](https://discuss.elastic.co/u/selin)\ **Replies:** 6\ **Last updated:** [August 21, 2021, 1:38am UTC](https://discuss.elastic.co/t/master-and-slave-using-same-index/282084 "2021-08-21T01:38:31Z")
I will use filebeat -\> logstash -\> Elasticsearch cluster I have 2 server filebeat installed. Can i use same index name for the 2 server? --- ## [How to Replace a failed node with new node with same name and IP](https://discuss.elastic.co/t/how-to-replace-a-failed-node-with-new-node-with-same-name-and-ip/243518)
**Author:** [@Shoaib\_Rashid](https://discuss.elastic.co/u/Shoaib_Rashid)\ **Replies:** 6\ **Last updated:** [August 3, 2020, 1:18pm UTC](https://discuss.elastic.co/t/how-to-replace-a-failed-node-with-new-node-with-same-name-and-ip/243518 "2020-08-03T13:18:51Z")
Hello Everyone I Just want to know is there any way to replace an elasticsearch node with a new node having same name and IP in case of node failure. I have 3 dedicated master nodes and 3 Separate data nodes with repil… --- ## [Parse repeated tags in xml using split filter](https://discuss.elastic.co/t/parse-repeated-tags-in-xml-using-split-filter/194231)
**Author:** [@Arshdeep\_Sandhu](https://discuss.elastic.co/u/Arshdeep_Sandhu)\ **Replies:** 6\ **Last updated:** [August 20, 2019, 3:51am UTC](https://discuss.elastic.co/t/parse-repeated-tags-in-xml-using-split-filter/194231 "2019-08-20T03:51:22Z")
I am trying to parse repeated tags in xml using split filter to get result as below example: If my logstash is: \ \ \ \ \ **Author:** [@Masanori\_Ohnishi](https://discuss.elastic.co/u/Masanori_Ohnishi)\ **Replies:** 6\ **Last updated:** [February 6, 2019, 10:22am UTC](https://discuss.elastic.co/t/why-is-the-score-and-order-in-the-result-of-searching-what-i-registered-with-nested-different-from-the-one-of-searching-what-i-registerd-normally/163507 "2019-02-06T10:22:30Z") normal(not nested) mapping curl -X PUT "es:9200/sample1" -H 'Content-Type: application/json' -d' { "mappings": { "\_doc": { "properties": { "header" : { "type" : "text" }, "bo… --- ## [Condition check](https://discuss.elastic.co/t/condition-check/148584)
**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\ **Replies:** 6\ **Last updated:** [September 19, 2018, 11:47pm UTC](https://discuss.elastic.co/t/condition-check/148584 "2018-09-19T23:47:23Z")
I have a field name errorcode which is of type NUMBER. How do i check the starting first digit of errorcode and place it as a ciondition in if statement. --- ## [Problem configuring PatternReplaceFilter](https://discuss.elastic.co/t/problem-configuring-patternreplacefilter/5017)
**Author:** [@Alexander\_Reelsen](https://discuss.elastic.co/u/Alexander_Reelsen)\ **Replies:** 6\ **Last updated:** [August 3, 2011, 7:27am UTC](https://discuss.elastic.co/t/problem-configuring-patternreplacefilter/5017 "2011-08-03T07:27:33Z")
Hi there, I am having trouble configuring the pattern replace filter My configuration looks like this: index: analysis: analyzer: default: type: ae\_analyzer ae\_analyzer: … --- ## [Achieve autocomplete with fuzziness](https://discuss.elastic.co/t/achieve-autocomplete-with-fuzziness/170281)
**Author:** [@roxcity](https://discuss.elastic.co/u/roxcity)\ **Replies:** 0\ **Last updated:** [February 28, 2019, 6:32am UTC](https://discuss.elastic.co/t/achieve-autocomplete-with-fuzziness/170281 "2019-02-28T06:32:35Z")
I am trying to achieve autocomplete with a level of fuzziness. I tried different settings with the help of documentation. My configuration: PUT http://localhost:9200/my\_index/ { "settings": { "analysis": { "ana… --- ## [Running Logstash from a Rails application](https://discuss.elastic.co/t/running-logstash-from-a-rails-application/142730)
**Author:** [@AmiSazar](https://discuss.elastic.co/u/AmiSazar)\ **Replies:** 0\ **Last updated:** [August 2, 2018, 9:40am UTC](https://discuss.elastic.co/t/running-logstash-from-a-rails-application/142730 "2018-08-02T09:40:03Z")
Sorry if this is a newbie question or misplaced here - I have found no information on this by searching. I have a Rails app with its own Ruby environment. From this app, I am trying to start logstash via Ruby's system()… --- ## [Apply ILM to existing index](https://discuss.elastic.co/t/apply-ilm-to-existing-index/334022)
**Author:** [@ppic](https://discuss.elastic.co/u/ppic)\ **Replies:** 8\ **Last updated:** [June 5, 2023, 8:05am UTC](https://discuss.elastic.co/t/apply-ilm-to-existing-index/334022 "2023-06-05T08:05:55Z")
Hello, I use Elastic 7.17. I have created an ILM and applied it to the existing indexes through the Kibana UI (section Index Management). Each day, an index is automaticaly created but has no ILM associated. How can … --- ## [Design practice to prevent oversharding](https://discuss.elastic.co/t/design-practice-to-prevent-oversharding/298759)
**Author:** [@cyril.r](https://discuss.elastic.co/u/cyril.r)\ **Replies:** 8\ **Last updated:** [March 4, 2022, 4:57pm UTC](https://discuss.elastic.co/t/design-practice-to-prevent-oversharding/298759 "2022-03-04T16:57:03Z")
Hi there, I'm strugling with an application design and the impact that it has on the cluster. Let me explain the use case: My customers can create databases inside my application to store and retrieve data. Every tim… [Previous page](https://discuss.elastic.co/top.md?page=1368&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1370&per_page=50&period=all)