# Top **URL:** https://discuss.elastic.co/top.md?page=1411&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1412 --- ## [How to count up "skipped shards" in "\_shards" as query result](https://discuss.elastic.co/t/how-to-count-up-skipped-shards-in-shards-as-query-result/159668)
**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\ **Replies:** 1\ **Last updated:** [December 13, 2018, 8:10am UTC](https://discuss.elastic.co/t/how-to-count-up-skipped-shards-in-shards-as-query-result/159668 "2018-12-13T08:10:03Z")
Hi all, I look for the way to count up "skipped shards" in "\_shards" as query result. The following topic is similar to mine. But nobody has commented to that topic yet. Based on the following URL, https://discuss.e… --- ## [Numeric Level Value in Event Logs](https://discuss.elastic.co/t/numeric-level-value-in-event-logs/120808)
**Author:** [@froto](https://discuss.elastic.co/u/froto)\ **Replies:** 1\ **Last updated:** [February 21, 2018, 4:11pm UTC](https://discuss.elastic.co/t/numeric-level-value-in-event-logs/120808 "2018-02-21T16:11:33Z")
Hi There! I have a question about WinlogBeat. Is there any way to display the "level" field in the EventLog as a numeric value? When I search for the data in Elasticsearch the value of the level field is always displaye… --- ## [How to crawler static file by logstash 'file' input plugin without modifying at beginning](https://discuss.elastic.co/t/how-to-crawler-static-file-by-logstash-file-input-plugin-without-modifying-at-beginning/52713)
**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\ **Replies:** 1\ **Last updated:** [June 15, 2016, 4:54am UTC](https://discuss.elastic.co/t/how-to-crawler-static-file-by-logstash-file-input-plugin-without-modifying-at-beginning/52713 "2016-06-15T04:54:32Z")
Hi all, there are 3 log files has been archived, and named 'archived.2016.06.12.log', 'archived.2016.06.13.log' and 'archived.2016.06.14.log'. my logstash conf content input { file { path =\> "/home/ubuntu/test\_log/… --- ## [Recovery From Missing translog.ckp files with 2.0 Upgrade](https://discuss.elastic.co/t/recovery-from-missing-translog-ckp-files-with-2-0-upgrade/33694)
**Author:** [@paulr](https://discuss.elastic.co/u/paulr)\ **Replies:** 1\ **Last updated:** [November 20, 2015, 1:25am UTC](https://discuss.elastic.co/t/recovery-from-missing-translog-ckp-files-with-2-0-upgrade/33694 "2015-11-20T01:25:28Z")
I've run an errant command, and accidentally deleted all \*/translog/translog.ckp files for my single-node cluster. This occurred during the upgrade process from ES 1.7.3 to ES 2.0.0. I managed to keep a backup of the a… --- ## [What does path.conf do](https://discuss.elastic.co/t/what-does-path-conf-do/27018)
**Author:** [@arpan](https://discuss.elastic.co/u/arpan)\ **Replies:** 1\ **Last updated:** [August 7, 2015, 3:16am UTC](https://discuss.elastic.co/t/what-does-path-conf-do/27018 "2015-08-07T03:16:07Z")
I am new to elastic search and was confused what path.conf exactly does. I saw another question on this but it didn't seem detailed enough. I understand how the path can be specified at launch via a flag, I was unsure … --- ## [ElasticSearch mapping vs JSON Schema](https://discuss.elastic.co/t/elasticsearch-mapping-vs-json-schema/15340)
**Author:** [@jan\_javorek](https://discuss.elastic.co/u/jan_javorek)\ **Replies:** 1\ **Last updated:** [January 21, 2014, 4:42pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-vs-json-schema/15340 "2014-01-21T16:42:39Z")
Hello, I am just looking at mapping files for ElasticSearch and they look a lot like JSON schema. Unfortunately, I could not find any official information about a relation between those two formats. Are ES mapping… --- ## [Valid index names](https://discuss.elastic.co/t/valid-index-names/6699)
**Author:** [@Eric\_Jain](https://discuss.elastic.co/u/Eric_Jain)\ **Replies:** 1\ **Last updated:** [February 14, 2012, 2:49pm UTC](https://discuss.elastic.co/t/valid-index-names/6699 "2012-02-14T14:49:40Z")
It looks like elasticsearch doesn't allow mixed case index names. Is this a Lucene limitation, or an elasticsearch feature to protect Windows users? Not a big deal, just a minor annoyance for people using Base-36- e… --- ## [How to Hide the Zero records using JSON Input in Metric Dashboard](https://discuss.elastic.co/t/how-to-hide-the-zero-records-using-json-input-in-metric-dashboard/323013)
**Author:** [@Maruthappan\_Muthu](https://discuss.elastic.co/u/Maruthappan_Muthu)\ **Replies:** 5\ **Last updated:** [January 13, 2023, 10:21am UTC](https://discuss.elastic.co/t/how-to-hide-the-zero-records-using-json-input-in-metric-dashboard/323013 "2023-01-13T10:21:12Z")
My document gets the data on irregular interval.The field name is Ex.,SensexValue. There can be multiple values on the field (SensexValue) in every interval, with different timestamp(milliseconds) and some interval the f… --- ## [Elasticsearch Startup Error with NFS repo for backup](https://discuss.elastic.co/t/elasticsearch-startup-error-with-nfs-repo-for-backup/297864)
**Author:** [@Avnish\_Singh](https://discuss.elastic.co/u/Avnish_Singh)\ **Replies:** 5\ **Last updated:** [February 26, 2022, 6:29am UTC](https://discuss.elastic.co/t/elasticsearch-startup-error-with-nfs-repo-for-backup/297864 "2022-02-26T06:29:42Z")
Elasticsearch doesn't start with repo as NFS mount-point. Elasticsearch Version: \[root@ip-10-92-3-133 ~\]# curl -XGET localhost:9200 { "name" : "ip-10-92-3-133.ap-south-1.compute.internal", "cluster\_name" : "elastic… --- ## [\[Kibana Plugin\]: Inject data (headers) from Kibana to the browser](https://discuss.elastic.co/t/kibana-plugin-inject-data-headers-from-kibana-to-the-browser/192283)
**Author:** [@Dasko](https://discuss.elastic.co/u/Dasko)\ **Replies:** 5\ **Last updated:** [August 1, 2019, 5:44pm UTC](https://discuss.elastic.co/t/kibana-plugin-inject-data-headers-from-kibana-to-the-browser/192283 "2019-08-01T17:44:25Z")
Hi guys, I'm looking for a way to make some data (headers received by the Kibana Server) available to the plugin front-end (re-use the headers to fetch some data through an external API). It is also worth noticing that… --- ## [Медленно работает geo поиск](https://discuss.elastic.co/t/geo/146637)
**Author:** [@111126](https://discuss.elastic.co/u/111126)\ **Replies:** 5\ **Last updated:** [September 14, 2018, 5:40pm UTC](https://discuss.elastic.co/t/geo/146637 "2018-09-14T17:40:53Z")
В продолжении ранее заданного мною вопроса (Сложный поисковый запрос) Наступил на следующие грабли: Есть большой список координат (гео точек). Надо для каждой точки найти poi попадающие в радиус 100 метров. Написал скр… --- ## [Weird TCP connection to host6.diocesedesobral100anos.com](https://discuss.elastic.co/t/weird-tcp-connection-to-host6-diocesedesobral100anos-com/109088)
**Author:** [@abbasovalex](https://discuss.elastic.co/u/abbasovalex)\ **Replies:** 5\ **Last updated:** [November 27, 2017, 3:38pm UTC](https://discuss.elastic.co/t/weird-tcp-connection-to-host6-diocesedesobral100anos-com/109088 "2017-11-27T15:38:20Z")
Hello! I need help. When I run lsof -a -p \ then I am seeing next lines: java 22834 elasticsearch 158u IPv6 285317013 0t0 TCP cs24290:vrace-\>host6.diocesedesobral100an… --- ## [ES as a simple keyword search engine](https://discuss.elastic.co/t/es-as-a-simple-keyword-search-engine/103919)
**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\ **Replies:** 5\ **Last updated:** [October 26, 2017, 1:05pm UTC](https://discuss.elastic.co/t/es-as-a-simple-keyword-search-engine/103919 "2017-10-26T13:05:06Z")
Hi All, A quick question. Can I just query keywords (eg. "AI" "Intelligence") and get result list? It looks like ES kindly returns results based on matching score by default. I want to use ES just as keywords search … --- ## [Can't use the Java API with data-less node](https://discuss.elastic.co/t/cant-use-the-java-api-with-data-less-node/15842)
**Author:** [@Dario\_Rossi](https://discuss.elastic.co/u/Dario_Rossi)\ **Replies:** 5\ **Last updated:** [August 14, 2014, 6:26pm UTC](https://discuss.elastic.co/t/cant-use-the-java-api-with-data-less-node/15842 "2014-08-14T18:26:01Z")
Hello, I'm in the process of moving away from the REST API to the JAVA one (because we want to benefit from the data-less node advantages). I tried to startup the local node in this way (boot seems fine to me): … --- ## [Docker-compose issue with elasticsearch and kibana docker image](https://discuss.elastic.co/t/docker-compose-issue-with-elasticsearch-and-kibana-docker-image/330067)
**Author:** [@toki0709](https://discuss.elastic.co/u/toki0709)\ **Replies:** 3\ **Last updated:** [April 16, 2023, 3:49pm UTC](https://discuss.elastic.co/t/docker-compose-issue-with-elasticsearch-and-kibana-docker-image/330067 "2023-04-16T15:49:51Z")
I am trying to create a docker-compose file with the latest image version of Elasticsearch and Kibana. Even after mentioning the version name in docker-compose.yml, I am noticing that the image version is 7.11.1 for both… --- ## [Kibana 8.x Installation without GUI](https://discuss.elastic.co/t/kibana-8-x-installation-without-gui/305405)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 3\ **Last updated:** [June 1, 2022, 7:26am UTC](https://discuss.elastic.co/t/kibana-8-x-installation-without-gui/305405 "2022-06-01T07:26:35Z")
Hi there, I want to install Kibana 8.x - actually I already did it. But: There are these new steps when building a new cluster from scratch: /usr/share/Elasticsearch/bin/Elasticsearch-create-enrollment-token -s kibana … --- ## [Logstash and CSV - append to field while upsert](https://discuss.elastic.co/t/logstash-and-csv-append-to-field-while-upsert/247071)
**Author:** [@AnthonyA](https://discuss.elastic.co/u/AnthonyA)\ **Replies:** 3\ **Last updated:** [September 4, 2020, 7:47am UTC](https://discuss.elastic.co/t/logstash-and-csv-append-to-field-while-upsert/247071 "2020-09-04T07:47:10Z")
Hi there :grinning: I'm using logstash. My input is a CSV file. I'm using one of the columns as the document\_id. There are lines in the CSV file that have the same document\_id. In my output, I'm using upsert. When Logs… --- ## [Google SAML 401](https://discuss.elastic.co/t/google-saml-401/202903)
**Author:** [@Brad\_Wadsworth](https://discuss.elastic.co/u/Brad_Wadsworth)\ **Replies:** 3\ **Last updated:** [October 11, 2019, 5:12am UTC](https://discuss.elastic.co/t/google-saml-401/202903 "2019-10-11T05:12:16Z")
Having issues getting Google SAML SSO to work withe Elastic Cloud. I'm getting a 401 after I choose my Google identity. elasticsearch.yaml: xpack: security: authc: realms: saml: cloud-saml: order: 2 attributes.p… --- ## [Kibana : 5.4.3 Not able to download more 500 rows in kibana csv exports](https://discuss.elastic.co/t/kibana-5-4-3-not-able-to-download-more-500-rows-in-kibana-csv-exports/120864)
**Author:** [@Puneet\_Sharma1](https://discuss.elastic.co/u/Puneet_Sharma1)\ **Replies:** 3\ **Last updated:** [February 27, 2018, 1:09am UTC](https://discuss.elastic.co/t/kibana-5-4-3-not-able-to-download-more-500-rows-in-kibana-csv-exports/120864 "2018-02-27T01:09:35Z")
Hello, I am using kibana 5.4.3. I am trying to export data in scv file from kibana using raw format. I am only able to download 500 records in csv file. I also changed the default value of discover:sampleSize variable… --- ## [Can't get started with the ElasticSearch Java API classes](https://discuss.elastic.co/t/cant-get-started-with-the-elasticsearch-java-api-classes/320951)
**Author:** [@Alain\_Desilets](https://discuss.elastic.co/u/Alain_Desilets)\ **Replies:** 2\ **Last updated:** [December 15, 2022, 10:10am UTC](https://discuss.elastic.co/t/cant-get-started-with-the-elasticsearch-java-api-classes/320951 "2022-12-15T10:10:02Z")
I am am having a hell of a time trying to get started with the ES Java API using the instructions on the official doc I install it as instructed here, i.e., I put this in my pom.xml file: \ \ **Author:** [@Scorpion21](https://discuss.elastic.co/u/Scorpion21)\ **Replies:** 2\ **Last updated:** [February 17, 2022, 5:58am UTC](https://discuss.elastic.co/t/enable-graph-in-kibana-7-17-0/297437 "2022-02-17T05:58:38Z") I'd like to draw a network topology diagram using Graph According to the configuration guide here, seems I should be able to use graph analytics features straight away after deploying Kibana 7.17. However, I cannot f… --- ## [ECE Installation Issue](https://discuss.elastic.co/t/ece-installation-issue/280426)
**Author:** [@ddaloia](https://discuss.elastic.co/u/ddaloia)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 2:26pm UTC](https://discuss.elastic.co/t/ece-installation-issue/280426 "2021-08-04T14:26:07Z")
Hi folks. Attempting to install ECE on prem using a medium installation guide. Was able to get the first 3 servers up and running no issue. When I attempt to install the 3 allocator servers, I am getting an error with th… --- ## [Can't reach Kibana on localhost](https://discuss.elastic.co/t/cant-reach-kibana-on-localhost/197811)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 11:09am UTC](https://discuss.elastic.co/t/cant-reach-kibana-on-localhost/197811 "2019-09-03T11:09:24Z")
Hey there, I took the Eng I and II courses and now wanted to go through the labs on my local machine again to prepare for the certification. I set up a VM with an ubuntu server on VMware in NAT mode (but bridged doesn'… --- ## [How to create devops dashboard using ELK](https://discuss.elastic.co/t/how-to-create-devops-dashboard-using-elk/184559)
**Author:** [@Karthick\_Cse](https://discuss.elastic.co/u/Karthick_Cse)\ **Replies:** 2\ **Last updated:** [June 6, 2019, 1:03pm UTC](https://discuss.elastic.co/t/how-to-create-devops-dashboard-using-elk/184559 "2019-06-06T13:03:10Z")
how to create devops dashboard using ELK Need to get information from GitHub , jira ,sonar qube ,cloud (AWS) --- ## [Canvas Gauge with Timelion](https://discuss.elastic.co/t/canvas-gauge-with-timelion/180833)
**Author:** [@ScottBarnes](https://discuss.elastic.co/u/ScottBarnes)\ **Replies:** 2\ **Last updated:** [May 23, 2019, 11:27am UTC](https://discuss.elastic.co/t/canvas-gauge-with-timelion/180833 "2019-05-23T11:27:20Z")
Hi all, Thanks in advance for you support. I'm getting an interesting result in my Guage in Canvas. The Guage is supposed to be showing the Referred Percentage of the values to the left, clearly this should be 47%. … --- ## [Limit of total fields \[1000\] in index has been exceeded"](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-has-been-exceeded/126929)
**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\ **Replies:** 2\ **Last updated:** [April 7, 2018, 1:16am UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-has-been-exceeded/126929 "2018-04-07T01:16:57Z")
I know this query keeps cropping up. Is there a way we can identify the event that triggered this error? and if we increase the limit on the template are there any overheads added. --- ## [Snapshotのファイル名について](https://discuss.elastic.co/t/snapshot/123823)
**Author:** [@mikeda](https://discuss.elastic.co/u/mikeda)\ **Replies:** 2\ **Last updated:** [March 25, 2018, 11:34pm UTC](https://discuss.elastic.co/t/snapshot/123823 "2018-03-25T23:34:37Z")
snapshotを作成すると、ファイル名が、 snap-"uuid".dat meta-"uuid".dat になってしまいます。 ファイル名は、デフォルトでsnapshot名になると思っていたのですが、uuidになるのが仕様なのでしょうか? snapshot作成時に指定したsnapshot名にするためには、どのような設定が必要なのでしょうか? よろしくお願いします。 --- ## [Logstash, local plugin installation fails if network connected without internet](https://discuss.elastic.co/t/logstash-local-plugin-installation-fails-if-network-connected-without-internet/93590)
**Author:** [@IHateBugs](https://discuss.elastic.co/u/IHateBugs)\ **Replies:** 2\ **Last updated:** [July 25, 2017, 7:39am UTC](https://discuss.elastic.co/t/logstash-local-plugin-installation-fails-if-network-connected-without-internet/93590 "2017-07-25T07:39:09Z")
installing a local plugin in logstash only works with internet connection or without any network connection. When trying to do it in a local network without internet i get the following error message to install the pl… --- ## [Discover: Cannot read property 'valueOf' of undefined](https://discuss.elastic.co/t/discover-cannot-read-property-valueof-of-undefined/83247)
**Author:** [@qzil](https://discuss.elastic.co/u/qzil)\ **Replies:** 2\ **Last updated:** [April 21, 2017, 7:53pm UTC](https://discuss.elastic.co/t/discover-cannot-read-property-valueof-of-undefined/83247 "2017-04-21T19:53:18Z")
Hi, since yesterday I have the following error in Kibana: TypeError: Cannot read property 'valueOf' of undefined at Timefilter.get (http://elastic01.mvlab.cumulusnetworks.com:5601/bundles/commons.bundle.js?v=14566:… --- ## [Logstash set log rotate time](https://discuss.elastic.co/t/logstash-set-log-rotate-time/74965)
**Author:** [@howie\_chen](https://discuss.elastic.co/u/howie_chen)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 7:01am UTC](https://discuss.elastic.co/t/logstash-set-log-rotate-time/74965 "2017-02-14T07:01:57Z")
I have installed logstash-5.2.0 on centos 7.2, the config show as below, now the new log web\_%{+YYYY-MM-dd}.log generated at 8:00 am everyday, but i want to set the log rotate time at 00:00:00 everyday, i can't find log… --- ## [Ctx.payload.hits.total returns me zero, why?](https://discuss.elastic.co/t/ctx-payload-hits-total-returns-me-zero-why/50359)
**Author:** [@Abdellah\_Bouhoudane](https://discuss.elastic.co/u/Abdellah_Bouhoudane)\ **Replies:** 2\ **Last updated:** [May 20, 2016, 3:31pm UTC](https://discuss.elastic.co/t/ctx-payload-hits-total-returns-me-zero-why/50359 "2016-05-20T15:31:40Z")
This is my Watch, for some reason ctx.payload.hits.total returns zero curl -XPUT 'http://172.17.0.2:9200/\_watcher/watch/ehackb\_watch19' -d ' { "trigger": { "schedule": { "interval" : "15s"} }, "input" : { "search"… --- ## [ES data modeling](https://discuss.elastic.co/t/es-data-modeling/37953)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 2\ **Last updated:** [December 27, 2015, 10:53am UTC](https://discuss.elastic.co/t/es-data-modeling/37953 "2015-12-27T10:53:25Z")
Hi, We are in the middle of an ongoing process for improving our data modeling for Elasticsearch, and we have a few questions that could use some experts advice. In a simplified way: A client downloads some data fr… --- ## [Netflow Codec Not Matching Interface from Netflow Export](https://discuss.elastic.co/t/netflow-codec-not-matching-interface-from-netflow-export/37864)
**Author:** [@Stefano\_Pirrello](https://discuss.elastic.co/u/Stefano_Pirrello)\ **Replies:** 2\ **Last updated:** [December 24, 2015, 4:14am UTC](https://discuss.elastic.co/t/netflow-codec-not-matching-interface-from-netflow-export/37864 "2015-12-24T04:14:58Z")
Hi, I've setup ELK for Netflow analysis and overall everything seems to be working fine. The only problem I'm seeing is the Netflow codec is not matching interface information of the router. For instance, I'm not see… --- ## [Elastic Stack 8.x in Helm](https://discuss.elastic.co/t/elastic-stack-8-x-in-helm/310411)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 3:57am UTC](https://discuss.elastic.co/t/elastic-stack-8-x-in-helm/310411 "2022-07-26T03:57:04Z")
Hi All, I would like to deploy an Elasticsearch 8.x version cluster using Helm. Searching on the internet I only found charts for version 7.x and 6.x. Do you know where can I get the Helm chart to deploy 8.x version of… --- ## [Need help - Cisco syslog events matching in GROK debugger but not showing up in](https://discuss.elastic.co/t/need-help-cisco-syslog-events-matching-in-grok-debugger-but-not-showing-up-in/280116)
**Author:** [@Cdnvballer](https://discuss.elastic.co/u/Cdnvballer)\ **Replies:** 7\ **Last updated:** [August 1, 2021, 7:59pm UTC](https://discuss.elastic.co/t/need-help-cisco-syslog-events-matching-in-grok-debugger-but-not-showing-up-in/280116 "2021-08-01T19:59:20Z")
the actual grok pattern(s) used to match Cisco syslog event messages is no longer working despite the match is successful in the grok debugger UI . other pattern is working fine for Juniper routers though... not sure wh… --- ## [Newly added Field Not available for aggregations](https://discuss.elastic.co/t/newly-added-field-not-available-for-aggregations/261050)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 7\ **Last updated:** [February 11, 2021, 5:21pm UTC](https://discuss.elastic.co/t/newly-added-field-not-available-for-aggregations/261050 "2021-02-11T17:21:29Z")
Elasticsearch 7.9.1 Kibana 7.9.1 - 4 docker containers Updated the index mapping to add new field of type keyword. Waited for new index to be created. Refreshed the index pattern in Kibana. Searched for that field i… --- ## [Elasticsearch Master Node JVM reaching 99%](https://discuss.elastic.co/t/elasticsearch-master-node-jvm-reaching-99/241907)
**Author:** [@rsmith013](https://discuss.elastic.co/u/rsmith013)\ **Replies:** 7\ **Last updated:** [July 30, 2020, 6:48pm UTC](https://discuss.elastic.co/t/elasticsearch-master-node-jvm-reaching-99/241907 "2020-07-30T18:48:28Z")
I am running a 3 Master 8 Data node cluster. Elasticsearch Version 7.8.0 The cluster bumps along happily for several days with the regular sawtooth JVM pattern then suddenly ramps up and then hits 99%. This leads to… --- ## [Docker filebeat autodiscover not detecting nginx logs](https://discuss.elastic.co/t/docker-filebeat-autodiscover-not-detecting-nginx-logs/239849)
**Author:** [@Fachtna\_Simi](https://discuss.elastic.co/u/Fachtna_Simi)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 6:05pm UTC](https://discuss.elastic.co/t/docker-filebeat-autodiscover-not-detecting-nginx-logs/239849 "2020-07-06T18:05:16Z")
On my mac I am running nginx in a docker file and filebeat in a docker file. docker run -p 80:80 nginx The above command successfully runs nginx which I can visit in the browser and the output is printed to the console… --- ## [Deleting a file in elasticsearch index](https://discuss.elastic.co/t/deleting-a-file-in-elasticsearch-index/172334)
**Author:** [@saqibjavid](https://discuss.elastic.co/u/saqibjavid)\ **Replies:** 7\ **Last updated:** [March 20, 2019, 5:50am UTC](https://discuss.elastic.co/t/deleting-a-file-in-elasticsearch-index/172334 "2019-03-20T05:50:18Z")
I am unable to delete a file in the elasticsearch index using the DELETE command, as my document id is: "E:/ELK\_Stack\_6.6.0/100 files compare/parsed xml 7.6v\\USA\_ENG\_10077.doc001.out". So how do I delete the document? I… --- ## [Kibana bulk index from a Json file](https://discuss.elastic.co/t/kibana-bulk-index-from-a-json-file/87054)
**Author:** [@Hirad\_Khakipour](https://discuss.elastic.co/u/Hirad_Khakipour)\ **Replies:** 1\ **Last updated:** [May 25, 2017, 1:33am UTC](https://discuss.elastic.co/t/kibana-bulk-index-from-a-json-file/87054 "2017-05-25T01:33:21Z")
I'm trying to index a json file using the bulk API. From the terminal I can easily do: curl -H 'Content-Type: application/x-ndjson' -XPOST 'localhost:9200/\_bulk?pretty' --data-binary @logs.json What's the syntax to do … --- ## [What is 'Retry failed shards'? (Cluster Reroute)](https://discuss.elastic.co/t/what-is-retry-failed-shards-cluster-reroute/81775)
**Author:** [@ABChocolate](https://discuss.elastic.co/u/ABChocolate)\ **Replies:** 1\ **Last updated:** [April 10, 2017, 9:08am UTC](https://discuss.elastic.co/t/what-is-retry-failed-shards-cluster-reroute/81775 "2017-04-10T09:08:52Z")
Hi, I'm looking for a way to prevent the loss of shard data piled up during ES shutdown. Is this document relevant? ↓ 'Cluster Reroute' \>\> 'Retry failed shards' (https://www.elastic.co/guide/en/elasticsearch/refere… --- ## [Logstash logrotation doesn't work properly](https://discuss.elastic.co/t/logstash-logrotation-doesnt-work-properly/57870)
**Author:** [@reallistic](https://discuss.elastic.co/u/reallistic)\ **Replies:** 1\ **Last updated:** [August 12, 2016, 5:42am UTC](https://discuss.elastic.co/t/logstash-logrotation-doesnt-work-properly/57870 "2016-08-12T05:42:25Z")
When attempting to do log rotation on logstash's logs I get weirdness due to the Null-bytes problem. I am using the following logrotate config: /var/log/logstash/\*.err /var/log/logstash/\*.log /var/log/logstash/\*.stdout… --- ## [Sort in JSON](https://discuss.elastic.co/t/sort-in-json/8894)
**Author:** [@tullio0106](https://discuss.elastic.co/u/tullio0106)\ **Replies:** 1\ **Last updated:** [August 30, 2012, 1:10pm UTC](https://discuss.elastic.co/t/sort-in-json/8894 "2012-08-30T13:10:40Z")
I wasn't able to find the correct syntax for adding sort in queries using JSON. Could someone provide an example. Tks Tullio -- --- ## [Elasticsearch ilm rollover NOT applied as it should on datastreams v8.5.2](https://discuss.elastic.co/t/elasticsearch-ilm-rollover-not-applied-as-it-should-on-datastreams-v8-5-2/326612)
**Author:** [@Gautier\_Franchini](https://discuss.elastic.co/u/Gautier_Franchini)\ **Replies:** 4\ **Last updated:** [February 28, 2023, 7:45am UTC](https://discuss.elastic.co/t/elasticsearch-ilm-rollover-not-applied-as-it-should-on-datastreams-v8-5-2/326612 "2023-02-28T07:45:54Z")
Dear All, I'm currently using elasticsearch and kibana in 8.5.2 version; I used the stack as a centralized logging platform. Everything works fine, logstash is able to send me tousant of logs through elastic data stream … --- ## [Should filebeat's cisco module export ecs fields when outputting to non-elasticsearch](https://discuss.elastic.co/t/should-filebeats-cisco-module-export-ecs-fields-when-outputting-to-non-elasticsearch/254801)
**Author:** [@justinainsworth](https://discuss.elastic.co/u/justinainsworth)\ **Replies:** 4\ **Last updated:** [November 10, 2020, 11:42pm UTC](https://discuss.elastic.co/t/should-filebeats-cisco-module-export-ecs-fields-when-outputting-to-non-elasticsearch/254801 "2020-11-10T23:42:55Z")
I'm new to filebeat, and I am trying to understand what data it should be exporting when sending to logstash. I have setup filebeat to read cisco asa log files, and output to logstash. I guess I expected it to parse mo… --- ## [Run http\_poller only once and terminate logstash](https://discuss.elastic.co/t/run-http-poller-only-once-and-terminate-logstash/249029)
**Author:** [@hamsinihboomi](https://discuss.elastic.co/u/hamsinihboomi)\ **Replies:** 4\ **Last updated:** [September 18, 2020, 5:22pm UTC](https://discuss.elastic.co/t/run-http-poller-only-once-and-terminate-logstash/249029 "2020-09-18T17:22:05Z")
I have an API call to JIRA which should run only once every 4 weeks. I'm using logstash http\_poller to fetch the data from JIRA. The schedule with http\_poller does not allow a complex cron schedule so I was planning on … --- ## [Ingest node GrokにてArraylistの値を受け取りエラー](https://discuss.elastic.co/t/ingest-node-grok-arraylist/201124)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [September 30, 2019, 1:42am UTC](https://discuss.elastic.co/t/ingest-node-grok-arraylist/201124 "2019-09-30T01:42:39Z")
LogstashからElasticsearch(Ingest node)の連携について、ご質問させて頂きます。 実現したいこと ・Logstashでtanslateを実施（前段階としてmutateのsplit,add\_fieldを使い特定の値をfieldにセット） ・Elasticsearch Ingest nodeにて全体値をGrok Logstash config input { beats { port =\> … --- ## [Need urgent support for eLearning?](https://discuss.elastic.co/t/need-urgent-support-for-elearning/184847)
**Author:** [@mwarren](https://discuss.elastic.co/u/mwarren)\ **Replies:** 4\ **Last updated:** [June 10, 2019, 4:55am UTC](https://discuss.elastic.co/t/need-urgent-support-for-elearning/184847 "2019-06-10T04:55:09Z")
I'm trying to complete my security course before it expires on June 10th. But my Strigo Lab environment has expired and says the course has ended. Is there away to get weekend support for this? --- ## [Need to filter below AWS API gateway logs](https://discuss.elastic.co/t/need-to-filter-below-aws-api-gateway-logs/173796)
**Author:** [@Piyush\_Sonigra](https://discuss.elastic.co/u/Piyush_Sonigra)\ **Replies:** 4\ **Last updated:** [March 26, 2019, 5:16pm UTC](https://discuss.elastic.co/t/need-to-filter-below-aws-api-gateway-logs/173796 "2019-03-26T17:16:15Z")
{"messageType":"DATA\_MESSAGE", "owner":"144360258", "logGroup":"API-Gateway-Execution-Logs\_x63d3nk/live", "logStream":"d645920e395fedad7bbbed0eca3fe2e0","subscriptionFilters":\["API-Gateway-Execution-Logs\_x63d3nr84klive"\]… --- ## [How to charge for three elk software](https://discuss.elastic.co/t/how-to-charge-for-three-elk-software/165507)
**Author:** [@wcfCode](https://discuss.elastic.co/u/wcfCode)\ **Replies:** 4\ **Last updated:** [January 24, 2019, 1:37am UTC](https://discuss.elastic.co/t/how-to-charge-for-three-elk-software/165507 "2019-01-24T01:37:58Z")
How to charge for three elk software [Previous page](https://discuss.elastic.co/top.md?page=1410&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1412&per_page=50&period=all)