# Top

**URL:** https://discuss.elastic.co/top.md?page=1415&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1416

---

## [Unresolved adddress exception](https://discuss.elastic.co/t/unresolved-adddress-exception/4687)

<div class="topic-metadata">

**Author:** [@Karl\_Baum](https://discuss.elastic.co/u/Karl_Baum)\
**Replies:** 1\
**Last updated:** [June 23, 2011, 11:51am UTC](https://discuss.elastic.co/t/unresolved-adddress-exception/4687 "2011-06-23T11:51:49Z")

</div>

We are using zen discovery within ec2. I tried to restart one of the instances and I ended up with the exceptions below. The instance throws a 500 whenever i execute any command against it. All of the other instances …

---

## [Testing Load capabilities of Elastic search](https://discuss.elastic.co/t/testing-load-capabilities-of-elastic-search/96064)

<div class="topic-metadata">

**Author:** [@sanketshinde](https://discuss.elastic.co/u/sanketshinde)\
**Replies:** 5\
**Last updated:** [August 18, 2017, 1:38pm UTC](https://discuss.elastic.co/t/testing-load-capabilities-of-elastic-search/96064 "2017-08-18T13:38:30Z")

</div>

I want to set up a test bench for elasticsearch. The idea is to deploy elastic search on Azure and test the instance for Big Data handling capabilities of elastic search. My question is, are there already such metrics t…

---

## [Unassigned shards](https://discuss.elastic.co/t/unassigned-shards/14451)

<div class="topic-metadata">

**Author:** [@Mohamed\_Lrhazi](https://discuss.elastic.co/u/Mohamed_Lrhazi)\
**Replies:** 5\
**Last updated:** [November 20, 2013, 2:44pm UTC](https://discuss.elastic.co/t/unassigned-shards/14451 "2013-11-20T14:44:54Z")

</div>

Hello, It seems we over whelmed our 6 node cluster with indexes... we started getting too many open files errors... We added 6 more nodes and also upgraded to the latest version (elasticsearch-0.90.7-1.noarch) …

---

## [Match\_all vs \*:\*](https://discuss.elastic.co/t/match-all-vs/4069)

<div class="topic-metadata">

**Author:** [@Lee\_Parker](https://discuss.elastic.co/u/Lee_Parker)\
**Replies:** 5\
**Last updated:** [March 31, 2011, 4:54pm UTC](https://discuss.elastic.co/t/match-all-vs/4069 "2011-03-31T16:54:23Z")

</div>

Is there any performance difference between using the match\_all query vs a query\_string of "\*:\*"? I ask because I'm trying to get a list of documents which match a set of fields, but want to match all documents. The…

---

## [How to add \_size mapping to index template in elasticsearch?](https://discuss.elastic.co/t/how-to-add-size-mapping-to-index-template-in-elasticsearch/335432)

<div class="topic-metadata">

**Author:** [@Amirhossein\_eidy](https://discuss.elastic.co/u/Amirhossein_eidy)\
**Replies:** 6\
**Last updated:** [June 11, 2023, 6:54am UTC](https://discuss.elastic.co/t/how-to-add-size-mapping-to-index-template-in-elasticsearch/335432 "2023-06-11T06:54:38Z")

</div>

Hi friends I have installed size mapping plugin and I added it to Kibana meta fields too I could successfully enable "\_size" in Elasticsearch via bellow command and see the result in kibana PUT logstash-2023-06-06 { …

---

## [Timestamp not mapping with event time](https://discuss.elastic.co/t/timestamp-not-mapping-with-event-time/258976)

<div class="topic-metadata">

**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\
**Replies:** 6\
**Last updated:** [December 23, 2020, 3:00pm UTC](https://discuss.elastic.co/t/timestamp-not-mapping-with-event-time/258976 "2020-12-23T15:00:20Z")

</div>

My logs are exported in csv format and uploaded. The first column name called "Event Time" has following format event time followed by rest of the comma separated columns - "2020/11/10 00:00:00 CET" I am not able to ma…

---

## [Tracking down who created Dashboards and Visualizations](https://discuss.elastic.co/t/tracking-down-who-created-dashboards-and-visualizations/251475)

<div class="topic-metadata">

**Author:** [@Shaw](https://discuss.elastic.co/u/Shaw)\
**Replies:** 6\
**Last updated:** [October 8, 2020, 5:20pm UTC](https://discuss.elastic.co/t/tracking-down-who-created-dashboards-and-visualizations/251475 "2020-10-08T17:20:32Z")

</div>

Is there any ways to track down who created a dashboard and visualizaions? I do not see any options or places to indicate who created it, who was last person to modify it, and when. It will be very helpful when audit ton…

---

## [Java High level Rest Client(5.6), getting succesful shard info count](https://discuss.elastic.co/t/java-high-level-rest-client-5-6-getting-succesful-shard-info-count/134045)

<div class="topic-metadata">

**Author:** [@Neha\_goswami](https://discuss.elastic.co/u/Neha_goswami)\
**Replies:** 6\
**Last updated:** [June 6, 2018, 9:14am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-5-6-getting-succesful-shard-info-count/134045 "2018-06-06T09:14:27Z")

</div>

Hi i am working on migration from Transport client to restClient: M stuck here: using transport client this was done as: XContentBuilder builder = jsonBuilder().startObject().field("ProcessName", processName).field(St…

---

## [Shard failure after restart of node - ES 1.7.5](https://discuss.elastic.co/t/shard-failure-after-restart-of-node-es-1-7-5/59057)

<div class="topic-metadata">

**Author:** [@kmrdiscuss](https://discuss.elastic.co/u/kmrdiscuss)\
**Replies:** 6\
**Last updated:** [August 26, 2016, 7:41pm UTC](https://discuss.elastic.co/t/shard-failure-after-restart-of-node-es-1-7-5/59057 "2016-08-26T19:41:22Z")

</div>

Hi. We have a three node cluster, running ES 1.7.5, with the following config. index.number\_of\_shards: 5 index.number\_of\_replicas: 2 node.master: true node.data: true After writing our data we see each node h…

---

## [Could not initialize class org.elasticsearch.index.codec.postingsformat.PostingFormats](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-index-codec-postingsformat-postingformats/12177)

<div class="topic-metadata">

**Author:** [@Robin\_Verlangen](https://discuss.elastic.co/u/Robin_Verlangen)\
**Replies:** 6\
**Last updated:** [May 30, 2013, 7:07am UTC](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-index-codec-postingsformat-postingformats/12177 "2013-05-30T07:07:01Z")

</div>

Hi there, Is anyone familiar with this error? I'm experimenting with embedded ES server and client (within a single Java application). org.elasticsearch.common.util.concurrent.UncategorizedExecutionException: Fai…

---

## [Fleet can not show CPU/Memory Value, No relate metric logs as well](https://discuss.elastic.co/t/fleet-can-not-show-cpu-memory-value-no-relate-metric-logs-as-well/345688)

<div class="topic-metadata">

**Author:** [@DEXUAN\_ZHU](https://discuss.elastic.co/u/DEXUAN_ZHU)\
**Replies:** 0\
**Last updated:** [October 25, 2023, 3:29am UTC](https://discuss.elastic.co/t/fleet-can-not-show-cpu-memory-value-no-relate-metric-logs-as-well/345688 "2023-10-25T03:29:47Z")

</div>

Hi Guys, I need some help. I installed some elastic agents without any error. Some of them can get CPU/Memory, some are not. Installation steps no difference, and all of them are installed by admin/root permission. For t…

---

## [SIEM mail format for winevent log](https://discuss.elastic.co/t/siem-mail-format-for-winevent-log/273632)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 0\
**Last updated:** [May 21, 2021, 7:54am UTC](https://discuss.elastic.co/t/siem-mail-format-for-winevent-log/273632 "2021-05-21T07:54:52Z")

</div>

Hi a. The mail format for elastic siem was a little weird for me at this point. For most case the mail got the right format out to me but on the case of winevent log it is a bit difference. when i try the {{winlog.eve…

---

## [S3 Repository Plugin Snapshot Endpoint Does Not Show Progress](https://discuss.elastic.co/t/s3-repository-plugin-snapshot-endpoint-does-not-show-progress/174581)

<div class="topic-metadata">

**Author:** [@stockhausenj](https://discuss.elastic.co/u/stockhausenj)\
**Replies:** 0\
**Last updated:** [March 29, 2019, 5:02pm UTC](https://discuss.elastic.co/t/s3-repository-plugin-snapshot-endpoint-does-not-show-progress/174581 "2019-03-29T17:02:22Z")

</div>

Elasticsearch 6.6 Duration metric looks invalid. End time looks invalid. Not sure what would cause this. When I look at the S3 bucket I can see data coming in from this snapshot. Snapshot repository: { "type": "s3", …

---

## [Dynamic mapping types](https://discuss.elastic.co/t/dynamic-mapping-types/142388)

<div class="topic-metadata">

**Author:** [@falcoagustin](https://discuss.elastic.co/u/falcoagustin)\
**Replies:** 0\
**Last updated:** [July 31, 2018, 2:30pm UTC](https://discuss.elastic.co/t/dynamic-mapping-types/142388 "2018-07-31T14:30:27Z")

</div>

Greetings, I am new here, using Elasticsearch 6.3, and I am facing the following problem when aiming to migrate 10GB of data. What I want to achieve, is to save all data its being sent, but only be able to searchable fo…

---

## [Automatic index creation stopped after upgrade from 5.6 to 6.2](https://discuss.elastic.co/t/automatic-index-creation-stopped-after-upgrade-from-5-6-to-6-2/131423)

<div class="topic-metadata">

**Author:** [@hpniemitube](https://discuss.elastic.co/u/hpniemitube)\
**Replies:** 0\
**Last updated:** [May 11, 2018, 7:28am UTC](https://discuss.elastic.co/t/automatic-index-creation-stopped-after-upgrade-from-5-6-to-6-2/131423 "2018-05-11T07:28:17Z")

</div>

Ok sorry, found the reason. Logstash template was too old. Deleted the old one and restartet logstash and ok. Hi, Just upgraded Elastic 5.6 --\> 6.2. Everything went fine and after the upgrade, indexing worked fine. Ho…

---

## [Performance degradation](https://discuss.elastic.co/t/performance-degradation/227508)

<div class="topic-metadata">

**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\
**Replies:** 8\
**Last updated:** [April 11, 2020, 1:56pm UTC](https://discuss.elastic.co/t/performance-degradation/227508 "2020-04-11T13:56:50Z")

</div>

Hi Guys , I'm a new in EK , need your help I need to do performance review due to the slowness of the system How would you suggest to do this ? and what would you say regarding the amount of servers , do you sugg…

---

## [Run cluster in docker, on 2 hosts](https://discuss.elastic.co/t/run-cluster-in-docker-on-2-hosts/216019)

<div class="topic-metadata">

**Author:** [@Nikolay\_Shalnev](https://discuss.elastic.co/u/Nikolay_Shalnev)\
**Replies:** 8\
**Last updated:** [January 22, 2020, 12:43pm UTC](https://discuss.elastic.co/t/run-cluster-in-docker-on-2-hosts/216019 "2020-01-22T12:43:55Z")

</div>

Hi. I have 2 hosts and 2 docker-compose file. version: '3.6' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:7.5.1 environment: - node.name=predprod-rumcelk1 / predprod-rum…

---

## [Kibana connected to WebSockets](https://discuss.elastic.co/t/kibana-connected-to-websockets/225312)

<div class="topic-metadata">

**Author:** [@jondorozco](https://discuss.elastic.co/u/jondorozco)\
**Replies:** 2\
**Last updated:** [March 27, 2020, 4:18pm UTC](https://discuss.elastic.co/t/kibana-connected-to-websockets/225312 "2020-03-27T16:18:51Z")

</div>

Hi all, I am looking to use Kibana as the visualization/monitoring tool. I have several questions regarding Kibana and Elasticsearch as a whole. Does Kibana require Elasticsearch to perform its function of creating vi…

---

## [RPM upgrade from 7.1.1 to 7.5.0 fatal error](https://discuss.elastic.co/t/rpm-upgrade-from-7-1-1-to-7-5-0-fatal-error/210419)

<div class="topic-metadata">

**Author:** [@kdotson](https://discuss.elastic.co/u/kdotson)\
**Replies:** 2\
**Last updated:** [December 4, 2019, 1:02pm UTC](https://discuss.elastic.co/t/rpm-upgrade-from-7-1-1-to-7-5-0-fatal-error/210419 "2019-12-04T13:02:23Z")

</div>

Hi, I just upgraded my first data node from 7.1.1 to 7.5.0 and the node will not start using "systemctl start elasticsearch". This is a Centos 7.0 OS. To upgrade I stopped the node with "systemctl stop elasticsearch" …

---

## [Calculations using ruby filter in logstash is giving ruby exception error](https://discuss.elastic.co/t/calculations-using-ruby-filter-in-logstash-is-giving-ruby-exception-error/188423)

<div class="topic-metadata">

**Author:** [@Pranay\_Garg](https://discuss.elastic.co/u/Pranay_Garg)\
**Replies:** 2\
**Last updated:** [July 2, 2019, 1:10am UTC](https://discuss.elastic.co/t/calculations-using-ruby-filter-in-logstash-is-giving-ruby-exception-error/188423 "2019-07-02T01:10:11Z")

</div>

I want to store multiplication of two fields in another field but when i run it gives ruby exception error. I am new to logstash and any help is appreciated. Thanks in advance for help. mutate { add\_field =\> { "tota…

---

## [How to deal with large number of files in a single directory](https://discuss.elastic.co/t/how-to-deal-with-large-number-of-files-in-a-single-directory/154008)

<div class="topic-metadata">

**Author:** [@Lihang\_Gong](https://discuss.elastic.co/u/Lihang_Gong)\
**Replies:** 2\
**Last updated:** [October 25, 2018, 1:45pm UTC](https://discuss.elastic.co/t/how-to-deal-with-large-number-of-files-in-a-single-directory/154008 "2018-10-25T13:45:36Z")

</div>

Filebeat scans the whole directory to get files which needs to be collected. But when there is a large number of files in the directory, filebeat creates multiple goroutines to collect files causing high I/O wait. Can a…

---

## [Winlogbeat disconnects every 10min](https://discuss.elastic.co/t/winlogbeat-disconnects-every-10min/149443)

<div class="topic-metadata">

**Author:** [@Wintermute2k6](https://discuss.elastic.co/u/Wintermute2k6)\
**Replies:** 2\
**Last updated:** [October 1, 2018, 9:34am UTC](https://discuss.elastic.co/t/winlogbeat-disconnects-every-10min/149443 "2018-10-01T09:34:11Z")

</div>

Hi ! I have an small issue with an winlogbeat. It works but unexpectedly it is disconnected somehow evey 10 minutes. 2018-09-20T10:03:29.716+0200 ERROR logstash/async.go:252 Failed to publish events caused by: write t…

---

## [ログの送付方法について (Filebeat + Logstash vs NFSマウント + Logstash)](https://discuss.elastic.co/t/filebeat-logstash-vs-nfs-logstash/148268)

<div class="topic-metadata">

**Author:** [@mukai](https://discuss.elastic.co/u/mukai)\
**Replies:** 2\
**Last updated:** [September 21, 2018, 3:53am UTC](https://discuss.elastic.co/t/filebeat-logstash-vs-nfs-logstash/148268 "2018-09-21T03:53:45Z")

</div>

サーバ間のログ送付方法についてご相談したいことがあります。 ログの送付方法は下記2案のどちらが良いでしょうか。 案1.「Filebeat + Logstash」： システムサーバのFilebeatでログを送付し、ログ分析サーバのLogstashでログを受け取る方法。 案2.「NFSマウント + Logstash」： システムサーバのログディレクトリをログ分析サーバにマウントし、Logstashが直接ログを読み込む方法。 どち…

---

## [Follow-up: metrics of daily open count from open and closed date and create bar chart](https://discuss.elastic.co/t/follow-up-metrics-of-daily-open-count-from-open-and-closed-date-and-create-bar-chart/131352)

<div class="topic-metadata">

**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\
**Replies:** 2\
**Last updated:** [May 23, 2018, 3:18pm UTC](https://discuss.elastic.co/t/follow-up-metrics-of-daily-open-count-from-open-and-closed-date-and-create-bar-chart/131352 "2018-05-23T15:18:32Z")

</div>

I asked this question a few months ago, and I am asking the same question again because the old ticket is closed when I realized there was a response and possibly a solution. (Link to the old ticket 121737. Thank you, Ti…

---

## [Processors not working](https://discuss.elastic.co/t/processors-not-working/121445)

<div class="topic-metadata">

**Author:** [@Feng\_Mi](https://discuss.elastic.co/u/Feng_Mi)\
**Replies:** 2\
**Last updated:** [February 27, 2018, 6:25am UTC](https://discuss.elastic.co/t/processors-not-working/121445 "2018-02-27T06:25:02Z")

</div>

\#=========================== Filebeat prospectors ============================= filebeat.config.prospectors: enabled: true path: conf.d/\*.yml #============================= Filebeat modules =========================…

---

## [Elasticsearch showing NodeDisconnectedException followed by Outofmemory?](https://discuss.elastic.co/t/elasticsearch-showing-nodedisconnectedexception-followed-by-outofmemory/90929)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 2\
**Last updated:** [June 27, 2017, 9:43am UTC](https://discuss.elastic.co/t/elasticsearch-showing-nodedisconnectedexception-followed-by-outofmemory/90929 "2017-06-27T09:43:10Z")

</div>

Hi All, I am using ES 2.4.1 Cluster hosted in Azure . I have 3 Nodes which are running in 3 VM's each has 4 cores with 14gb RAM and in that i had given 7021m to Elasticsearch HEAP. I am getting NodeDisconnectedExceptio…

---

## [Logtrail Elasticsearch and Kibana and fluentd for docker logs dificult to select container logs to display](https://discuss.elastic.co/t/logtrail-elasticsearch-and-kibana-and-fluentd-for-docker-logs-dificult-to-select-container-logs-to-display/90804)

<div class="topic-metadata">

**Author:** [@titansmc](https://discuss.elastic.co/u/titansmc)\
**Replies:** 2\
**Last updated:** [June 27, 2017, 8:20am UTC](https://discuss.elastic.co/t/logtrail-elasticsearch-and-kibana-and-fluentd-for-docker-logs-dificult-to-select-container-logs-to-display/90804 "2017-06-27T08:20:46Z")

</div>

Hi, I've configured ES along with kibana and logtrail gathering metrics with fluentd from a docker swarm cluster. Everything is working but when containers are restarting constantly I go to the Logtrail tab and click un…

---

## [Can't create snapshot with mounted network drive](https://discuss.elastic.co/t/cant-create-snapshot-with-mounted-network-drive/51488)

<div class="topic-metadata">

**Author:** [@Marjana](https://discuss.elastic.co/u/Marjana)\
**Replies:** 2\
**Last updated:** [June 1, 2016, 2:22pm UTC](https://discuss.elastic.co/t/cant-create-snapshot-with-mounted-network-drive/51488 "2016-06-01T14:22:12Z")

</div>

Hello, I am hoping someone can help me with this problem I am having. We are on 1.7.1. The cluster consists of 12 hosts. Some of these hosts have 4 instances running, under users es1, es2, es3, es4. Some of the hosts hav…

---

## [Help with Grok & Regexp: effective reuse of patterns](https://discuss.elastic.co/t/help-with-grok-regexp-effective-reuse-of-patterns/51175)

<div class="topic-metadata">

**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Replies:** 2\
**Last updated:** [May 30, 2016, 5:07pm UTC](https://discuss.elastic.co/t/help-with-grok-regexp-effective-reuse-of-patterns/51175 "2016-05-30T17:07:19Z")

</div>

Hello, I'm trying to extract fields from messages and making some reuse of information tokens but sometimes my regexps are too greedy and capture outside the end tag. I have a few different type of messages but some …

---

## [How can I achieve the consistent behaviour of match and match-phrase-prefix for all types of words with/without special character?](https://discuss.elastic.co/t/how-can-i-achieve-the-consistent-behaviour-of-match-and-match-phrase-prefix-for-all-types-of-words-with-without-special-character/44835)

<div class="topic-metadata">

**Author:** [@laxmikant](https://discuss.elastic.co/u/laxmikant)\
**Replies:** 2\
**Last updated:** [March 21, 2016, 7:36am UTC](https://discuss.elastic.co/t/how-can-i-achieve-the-consistent-behaviour-of-match-and-match-phrase-prefix-for-all-types-of-words-with-without-special-character/44835 "2016-03-21T07:36:56Z")

</div>

I have created two apis equal and like which searches filelds from Elastic search: For example : if "queuename" field in elastic search has values like queue, queue1, queue2 and 3queue equal api : It returns the resu…

---

## [Kibana does not show data](https://discuss.elastic.co/t/kibana-does-not-show-data/29436)

<div class="topic-metadata">

**Author:** [@cdominik](https://discuss.elastic.co/u/cdominik)\
**Replies:** 2\
**Last updated:** [September 26, 2015, 4:42am UTC](https://discuss.elastic.co/t/kibana-does-not-show-data/29436 "2015-09-26T04:42:04Z")

</div>

Hi All, My system is on Kubuntu with elastisearch 1.7.2 plus Kibana 4.1.2 After indexing thousands of indices I have created, in Kibana, the pattern mapping correctly as the "applogs" shows, But discover tab doesn't sh…

---

## [Replacement across all fields with single rule](https://discuss.elastic.co/t/replacement-across-all-fields-with-single-rule/27081)

<div class="topic-metadata">

**Author:** [@KrishnaPG](https://discuss.elastic.co/u/KrishnaPG)\
**Replies:** 2\
**Last updated:** [August 9, 2015, 11:39am UTC](https://discuss.elastic.co/t/replacement-across-all-fields-with-single-rule/27081 "2015-08-09T11:39:59Z")

</div>

I have around 40 fields of numeric data in csv format and occasionally multiple fields in a row could be invalid values (indicated with, say, hyphen -). In the logstash is there a way to define a single generic mutate …

---

## [ElasticSearch 2.0.0.0 beta 1 Compatibility](https://discuss.elastic.co/t/elasticsearch-2-0-0-0-beta-1-compatibility/25626)

<div class="topic-metadata">

**Author:** [@whittssg](https://discuss.elastic.co/u/whittssg)\
**Replies:** 2\
**Last updated:** [July 16, 2015, 11:17am UTC](https://discuss.elastic.co/t/elasticsearch-2-0-0-0-beta-1-compatibility/25626 "2015-07-16T11:17:10Z")

</div>

Will Kibana 4 support the upcoming ElasticSearch 2.0.0.0 beta 1? Thanks,

---

## [Thanks for helping \>\> \[spring-elasticsearch\] : Error creating bean with name 'esNode'](https://discuss.elastic.co/t/thanks-for-helping-spring-elasticsearch-error-creating-bean-with-name-esnode/13326)

<div class="topic-metadata">

**Author:** [@Prasanth\_Nair](https://discuss.elastic.co/u/Prasanth_Nair)\
**Replies:** 2\
**Last updated:** [August 27, 2013, 11:42am UTC](https://discuss.elastic.co/t/thanks-for-helping-spring-elasticsearch-error-creating-bean-with-name-esnode/13326 "2013-08-27T11:42:15Z")

</div>

I was trying to integrate elastic search onto spring by following https://github.com/dadoonet/spring-elasticsearch and got this \*Error creating bean with name 'esNode' \*Exception, not sure what is going wrong as I…

---

## [Incorrect time in @timestamp field](https://discuss.elastic.co/t/incorrect-time-in-timestamp-field/302489)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 4\
**Last updated:** [April 15, 2022, 11:43am UTC](https://discuss.elastic.co/t/incorrect-time-in-timestamp-field/302489 "2022-04-15T11:43:25Z")

</div>

Dears, I have some odd problem with @timestamp field in my indices which include incorrect time i.e. minus two hours. Logstash should populate time to @timestamp from logs on the base of this: if ("" in \[hi.my\_date\]) {…

---

## [Overwrite an index in logstash](https://discuss.elastic.co/t/overwrite-an-index-in-logstash/261345)

<div class="topic-metadata">

**Author:** [@hallaoui](https://discuss.elastic.co/u/hallaoui)\
**Replies:** 4\
**Last updated:** [January 18, 2021, 7:33am UTC](https://discuss.elastic.co/t/overwrite-an-index-in-logstash/261345 "2021-01-18T07:33:45Z")

</div>

Hi All, I am collecting alarms status from an oracle database every 5 minutes using logstash and load them into an index, the thing is that the remote DB will contain alarms only if the alarms are still open and I would…

---

## [Help me to refine this query](https://discuss.elastic.co/t/help-me-to-refine-this-query/244023)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 4\
**Last updated:** [August 10, 2020, 1:37pm UTC](https://discuss.elastic.co/t/help-me-to-refine-this-query/244023 "2020-08-10T13:37:21Z")

</div>

Context: Logstash Elasticsearch Input plugin does not maintain a state like JDBC input plugin. However it does provide scheduling support. So I decided to pull data daily from the previous day records, e.g. from say 4t…

---

## [Auto Refetch/refresh result on clearing search box text](https://discuss.elastic.co/t/auto-refetch-refresh-result-on-clearing-search-box-text/206233)

<div class="topic-metadata">

**Author:** [@Swapnil\_Ghorpade](https://discuss.elastic.co/u/Swapnil_Ghorpade)\
**Replies:** 4\
**Last updated:** [November 6, 2019, 11:02am UTC](https://discuss.elastic.co/t/auto-refetch-refresh-result-on-clearing-search-box-text/206233 "2019-11-06T11:02:41Z")

</div>

Result is not get automatically refresh or fetched on clearing entered text from search box ? Its showing old result. Need to hit search button or enter.

---

## [Elastic certification references](https://discuss.elastic.co/t/elastic-certification-references/193463)

<div class="topic-metadata">

**Author:** [@460](https://discuss.elastic.co/u/460)\
**Replies:** 4\
**Last updated:** [August 6, 2019, 1:40pm UTC](https://discuss.elastic.co/t/elastic-certification-references/193463 "2019-08-06T13:40:09Z")

</div>

Hi, I had completed my training in Elastic Engineer 1 and 2. Currently I am preparing for my Elastic certification. I had watched the elastic webinar in elastic.co. When I try to search for the tasks or sample use case…

---

## [\[Resolved\]Logstash - Issue of SUM by aggregate filter conditionally and can't get the expected csv output, how to correct?](https://discuss.elastic.co/t/resolved-logstash-issue-of-sum-by-aggregate-filter-conditionally-and-cant-get-the-expected-csv-output-how-to-correct/180111)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 4\
**Last updated:** [May 8, 2019, 4:27pm UTC](https://discuss.elastic.co/t/resolved-logstash-issue-of-sum-by-aggregate-filter-conditionally-and-cant-get-the-expected-csv-output-how-to-correct/180111 "2019-05-08T16:27:12Z")

</div>

Hi Team, I have below CSV data which are exported from ES, when,module,fa,ui,at,ci,cn,link "April 23rd 2019, 09:13:31.562",SCM,MR,cgrant1,SCM.MR.LOAD\_FILTERS,TALSCMK,TALSCMK,1 "April 23rd 2019, 22:38:31.868",SCM,TS,101…

---

## [Curator system indices](https://discuss.elastic.co/t/curator-system-indices/130006)

<div class="topic-metadata">

**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\
**Replies:** 4\
**Last updated:** [April 30, 2018, 12:54pm UTC](https://discuss.elastic.co/t/curator-system-indices/130006 "2018-04-30T12:54:24Z")

</div>

Hello, I use the curator for Elasticsearch and it runs properly for my indices. I want add to this curator the possibility to delete system indices but I don't know how to make that. Do you have some ideas ?

---

## [Should marvel be installed on master-only and client nodes?](https://discuss.elastic.co/t/should-marvel-be-installed-on-master-only-and-client-nodes/53634)

<div class="topic-metadata">

**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\
**Replies:** 4\
**Last updated:** [June 25, 2016, 11:07am UTC](https://discuss.elastic.co/t/should-marvel-be-installed-on-master-only-and-client-nodes/53634 "2016-06-25T11:07:01Z")

</div>

We are converting our cluster from data+master nodes to separate master, data, client nodes. I have left the ansible playbooks to install all the plugins on all the nodes. But does this make sense? I started by creating …

---

## [Indexing geo\_shape in 2.0.0-rc1 (BUG?)](https://discuss.elastic.co/t/indexing-geo-shape-in-2-0-0-rc1-bug/32447)

<div class="topic-metadata">

**Author:** [@michel-kraemer](https://discuss.elastic.co/u/michel-kraemer)\
**Replies:** 4\
**Last updated:** [October 21, 2015, 4:45am UTC](https://discuss.elastic.co/t/indexing-geo-shape-in-2-0-0-rc1-bug/32447 "2015-10-21T04:45:36Z")

</div>

I'm using the following requests to index a document with a geo\_shape: curl -X PUT http://localhost:9200/test/ curl -X PUT http://localhost:9200/test/\_mapping/object -d ' { "object" : { "properties" : { …

---

## [No node available and OutOfMemoryError exception](https://discuss.elastic.co/t/no-node-available-and-outofmemoryerror-exception/9130)

<div class="topic-metadata">

**Author:** [@Sawyer\_Zhu](https://discuss.elastic.co/u/Sawyer_Zhu)\
**Replies:** 4\
**Last updated:** [October 12, 2012, 8:31am UTC](https://discuss.elastic.co/t/no-node-available-and-outofmemoryerror-exception/9130 "2012-10-12T08:31:13Z")

</div>

Hi, I insert document to ES with high speed and large number. After several minutes I will get no node available exception. The stack trace as below: Exception in thread "pool-2-thread-82" org.elasticsearch.cl…

---

## [SHA1 error msgs from 'dnf update' (centos9.x)](https://discuss.elastic.co/t/sha1-error-msgs-from-dnf-update-centos9-x/337206)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 1\
**Last updated:** [June 30, 2023, 2:10am UTC](https://discuss.elastic.co/t/sha1-error-msgs-from-dnf-update-centos9-x/337206 "2023-06-30T02:10:36Z")

</div>

Looks like elastic is signing 8.8.x \*beat package updates with SHA1. CentOS 9 doesn't support this anymore. I can bypass it but maybe it's time to update these to something that's supported? journal is chock full of er…

---

## [Ailed to parse field \[host\] of type \[text\] in document with id](https://discuss.elastic.co/t/ailed-to-parse-field-host-of-type-text-in-document-with-id/278963)

<div class="topic-metadata">

**Author:** [@Bhuwaneshwar](https://discuss.elastic.co/u/Bhuwaneshwar)\
**Replies:** 1\
**Last updated:** [July 17, 2021, 6:05pm UTC](https://discuss.elastic.co/t/ailed-to-parse-field-host-of-type-text-in-document-with-id/278963 "2021-07-17T18:05:00Z")

</div>

Dear Team I am getting below error on Logstash. "error"=\>{"type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse field \[host\] of type \[text\] in document with id '4qrUs3oBqKFEAtQHASue'. Preview of field's value:…

---

## [Elasticsearch Hadoop Connection](https://discuss.elastic.co/t/elasticsearch-hadoop-connection/202501)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 8:31pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-connection/202501 "2019-10-16T20:31:25Z")

</div>

Hi, I am trying to add hive table into Elasticsearch. Have added the jar in hive-site.xml file. CDH 5.11 Hadoop 2.6 Hive 1.1.0 elasticsearch-hadoop-7.3.2.jar Elasticsearch 7.3.2 I am able to successfully create ta…

---

## [Connection of logstash hosted in one server with the elastic search hosted in another server](https://discuss.elastic.co/t/connection-of-logstash-hosted-in-one-server-with-the-elastic-search-hosted-in-another-server/159703)

<div class="topic-metadata">

**Author:** [@Archana\_Moharana](https://discuss.elastic.co/u/Archana_Moharana)\
**Replies:** 1\
**Last updated:** [December 6, 2018, 10:34am UTC](https://discuss.elastic.co/t/connection-of-logstash-hosted-in-one-server-with-the-elastic-search-hosted-in-another-server/159703 "2018-12-06T10:34:41Z")

</div>

Hello, I am trying to push the files to elastic search hosted in a different server. But unable to make the connection from logstash to elastic search as both are in different servers. I even tried to change the config …

---

## [Change field type from filter dissect](https://discuss.elastic.co/t/change-field-type-from-filter-dissect/114068)

<div class="topic-metadata">

**Author:** [@Timotius\_Pamungkas](https://discuss.elastic.co/u/Timotius_Pamungkas)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 12:47am UTC](https://discuss.elastic.co/t/change-field-type-from-filter-dissect/114068 "2018-01-05T00:47:39Z")

</div>

I use logstash-logback-encoder to send java log files to logstash, and then to elasticsearch. To parse the message in java log, I use following filter to dissect message input { file { path =\> "/Users/MacBook-2019…

---

## [Search queue rejections climb while search queue stays empty?](https://discuss.elastic.co/t/search-queue-rejections-climb-while-search-queue-stays-empty/106261)

<div class="topic-metadata">

**Author:** [@khyron4eva](https://discuss.elastic.co/u/khyron4eva)\
**Replies:** 1\
**Last updated:** [November 10, 2017, 8:13pm UTC](https://discuss.elastic.co/t/search-queue-rejections-climb-while-search-queue-stays-empty/106261 "2017-11-10T20:13:55Z")

</div>

Hello. Posting again after a long hiatus because I recently came across a behavior that I didn't think was possible and I'd like some of the elastic.co community to validate my thoughts. ES version 2.0 prior to upgrade…

[Previous page](https://discuss.elastic.co/top.md?page=1414&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1416&per_page=50&period=all)
