# Top **URL:** https://discuss.elastic.co/top.md?page=1417&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1418 --- ## [Search via Query String DSL](https://discuss.elastic.co/t/search-via-query-string-dsl/62293)
**Author:** [@minhnhat2807](https://discuss.elastic.co/u/minhnhat2807)\ **Replies:** 4\ **Last updated:** [October 6, 2016, 6:35am UTC](https://discuss.elastic.co/t/search-via-query-string-dsl/62293 "2016-10-06T06:35:46Z")
Hi all, I'm using the query like that GET \_search { "query": { "query\_string": { "query": "curator" } } } ==\> returned 3 items GET \_search { "query": { "query\_string": { … --- ## [How do I delete a single type, rather than a whole index?](https://discuss.elastic.co/t/how-do-i-delete-a-single-type-rather-than-a-whole-index/43315)
**Author:** [@Randall](https://discuss.elastic.co/u/Randall)\ **Replies:** 4\ **Last updated:** [March 3, 2016, 1:54am UTC](https://discuss.elastic.co/t/how-do-i-delete-a-single-type-rather-than-a-whole-index/43315 "2016-03-03T01:54:58Z")
Hi. The Definitive Guide explains how you can easily delete an entire index (DELETE /my\_index) but not a single type. I assumed DELETE /my\_index/my\_type would work, but it doesn't. I can delete each document indiv… --- ## [Attachment arabic](https://discuss.elastic.co/t/attachment-arabic/12621)
**Author:** [@ghonsor](https://discuss.elastic.co/u/ghonsor)\ **Replies:** 4\ **Last updated:** [July 6, 2013, 10:10am UTC](https://discuss.elastic.co/t/attachment-arabic/12621 "2013-07-06T10:10:32Z")
Hi all In ES with mapper-attachment do we can index arabic pdf and search on it? can you give me one example?(like java exapmle or with curl) I test this mapping: curl -XPUT 'http://localhost:9200/test/arabic… --- ## [Lock date range in dashboards](https://discuss.elastic.co/t/lock-date-range-in-dashboards/298504)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 3\ **Last updated:** [March 1, 2022, 2:10pm UTC](https://discuss.elastic.co/t/lock-date-range-in-dashboards/298504 "2022-03-01T14:10:03Z")
Hi i have multiple dashboards i want to lock the date range in one of them so it can't be change when i change the other dashboards for example dashboard 1 date range last 1 min dashboard 2,3 it's ok to be anything --- ## [Filebeat setup error Request Time-out](https://discuss.elastic.co/t/filebeat-setup-error-request-time-out/269821)
**Author:** [@Leon2](https://discuss.elastic.co/u/Leon2)\ **Replies:** 3\ **Last updated:** [April 12, 2021, 9:30am UTC](https://discuss.elastic.co/t/filebeat-setup-error-request-time-out/269821 "2021-04-12T09:30:09Z")
Hi I'm struggeling in setting up filebeat to work with elastic cloud instance. all I'm trying to do is enabling a module( without changing any config, yet) and uplouding dashboard setting from filebeat to elastic cloud … --- ## [Kibana7.1 - Getting "unable to find usable node.js executable" after running ./kibana --oss](https://discuss.elastic.co/t/kibana7-1-getting-unable-to-find-usable-node-js-executable-after-running-kibana-oss/240077)
**Author:** [@ucw](https://discuss.elastic.co/u/ucw)\ **Replies:** 3\ **Last updated:** [July 8, 2020, 1:53am UTC](https://discuss.elastic.co/t/kibana7-1-getting-unable-to-find-usable-node-js-executable-after-running-kibana-oss/240077 "2020-07-08T01:53:34Z")
Hi all, I'm getting message "unable to find usable node.js executable" after running ./kibana --oss and couldn't get Kibana up and running. Kibana server OS - Ubuntu 18.04.1 LTS Installation steps: git clone https:/… --- ## [Drop message,but still write into elasticsearch](https://discuss.elastic.co/t/drop-message-but-still-write-into-elasticsearch/96614)
**Author:** [@zhangheng](https://discuss.elastic.co/u/zhangheng)\ **Replies:** 3\ **Last updated:** [August 11, 2017, 1:09am UTC](https://discuss.elastic.co/t/drop-message-but-still-write-into-elasticsearch/96614 "2017-08-11T01:09:06Z")
I was confused,because i drop some message in the filter,it really not out put in the stdout ,but it still write into the elasticsearch . here is my config, help me ,please filter { if “GET” in \[message\] { drop { } … --- ## [Urgent - index templates lost after upgrade to 2.4.4 from 2.3.3](https://discuss.elastic.co/t/urgent-index-templates-lost-after-upgrade-to-2-4-4-from-2-3-3/79831)
**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\ **Replies:** 8\ **Last updated:** [March 24, 2017, 8:13am UTC](https://discuss.elastic.co/t/urgent-index-templates-lost-after-upgrade-to-2-4-4-from-2-3-3/79831 "2017-03-24T08:13:25Z")
Index templates and repository settings lost after upgrade to 2.4.4 from 2.3.3(full cluster restart) Is this expected behavior? Where elasticsearch save index templates? what can I do is this situation? any meta data … --- ## [Shield - The user can see everyhting?](https://discuss.elastic.co/t/shield-the-user-can-see-everyhting/42634)
**Author:** [@veve90](https://discuss.elastic.co/u/veve90)\ **Replies:** 3\ **Last updated:** [February 25, 2016, 10:15am UTC](https://discuss.elastic.co/t/shield-the-user-can-see-everyhting/42634 "2016-02-25T10:15:31Z")
Hello, I need some help with Shield configuration.. Firstly I installed ELK and it worked perfectly. Then I wanted to add Shield. I created the roles, and 2 users that I wanted for Kibana. One that should have acces… --- ## [Simple logstash for syslog and apache error](https://discuss.elastic.co/t/simple-logstash-for-syslog-and-apache-error/29788)
**Author:** [@lukas\_meier](https://discuss.elastic.co/u/lukas_meier)\ **Replies:** 3\ **Last updated:** [September 22, 2015, 5:29pm UTC](https://discuss.elastic.co/t/simple-logstash-for-syslog-and-apache-error/29788 "2015-09-22T17:29:18Z")
hello, im trying to get a logstash config file, that can parse syslogs and apachelogs too, the following conf shows up in a result: Error: Expected one of #, =\> at line 37, column 17 (byte 722) but i didnt changed … --- ## [Partial index replication causes data loss?](https://discuss.elastic.co/t/partial-index-replication-causes-data-loss/20252)
**Author:** [@Evan\_Tahler](https://discuss.elastic.co/u/Evan_Tahler)\ **Replies:** 8\ **Last updated:** [October 24, 2014, 9:20pm UTC](https://discuss.elastic.co/t/partial-index-replication-causes-data-loss/20252 "2014-10-24T21:20:25Z")
Hi Mailing List! I'm a first-time poster, and a long time reader. We recently had a crash in our ES (1.3.1 on Ubuntu) cluster which caused us to loose a significant volume of data. I have a "theory" on what happen… --- ## [TransportClient - Sniffing Issue](https://discuss.elastic.co/t/transportclient-sniffing-issue/17100)
**Author:** [@Savva](https://discuss.elastic.co/u/Savva)\ **Replies:** 3\ **Last updated:** [April 21, 2014, 10:54am UTC](https://discuss.elastic.co/t/transportclient-sniffing-issue/17100 "2014-04-21T10:54:25Z")
Hello, I have an ES cluster that consists of two nodes. The first one is explicitly set to be a master and the second serves as a replica. The configuration of the nodes is following: \*Master Node:\* cluster.n… --- ## [JSONP Support](https://discuss.elastic.co/t/jsonp-support/2903)
**Author:** [@Walendo](https://discuss.elastic.co/u/Walendo)\ **Replies:** 3\ **Last updated:** [April 12, 2010, 2:22pm UTC](https://discuss.elastic.co/t/jsonp-support/2903 "2010-04-12T14:22:46Z")
Hi again! I'm facing a problem using JQuery do access my Elastic Search server using getJSON method on Firefox 3.5 and Google Chrome 4.1.249.104. The problem is that, from Firefox 3.5 on, the XMLHttpRequest must u… --- ## [Need help to build ScriptSortBuilder scriptSort using java api](https://discuss.elastic.co/t/need-help-to-build-scriptsortbuilder-scriptsort-using-java-api/85742)
**Author:** [@Rahul\_Kumar](https://discuss.elastic.co/u/Rahul_Kumar)\ **Replies:** 0\ **Last updated:** [May 15, 2017, 10:44am UTC](https://discuss.elastic.co/t/need-help-to-build-scriptsortbuilder-scriptsort-using-java-api/85742 "2017-05-15T10:44:46Z")
Hi , I'm new to E\_S ,and using from last 2 weeks with version 5.3 with java api. I'm stuck in one place where i need t sort based on custom fields. below is what i'm trying String script = 'doc\[provider\_name\].value … --- ## [\[Pie Chart\] Split Slices based on value of respective fields](https://discuss.elastic.co/t/pie-chart-split-slices-based-on-value-of-respective-fields/98041)
**Author:** [@kapoorabhishek24](https://discuss.elastic.co/u/kapoorabhishek24)\ **Replies:** 1\ **Last updated:** [August 23, 2017, 5:36pm UTC](https://discuss.elastic.co/t/pie-chart-split-slices-based-on-value-of-respective-fields/98041 "2017-08-23T17:36:55Z")
Hi, I am trying a visualization (Pie Chart) to show Disk Usage of a machine. The fields that I have are: Total and Available, of the number type. Eg: Total: 290, Available: 210. I want to depict this on a pie chart, I… --- ## [Read csv file and insert/update the index based on condition in logstash](https://discuss.elastic.co/t/read-csv-file-and-insert-update-the-index-based-on-condition-in-logstash/94497)
**Author:** [@skodari](https://discuss.elastic.co/u/skodari)\ **Replies:** 1\ **Last updated:** [July 26, 2017, 8:04am UTC](https://discuss.elastic.co/t/read-csv-file-and-insert-update-the-index-based-on-condition-in-logstash/94497 "2017-07-26T08:04:37Z")
Hi folks, I have quick qusetion. My scenario is read csv file and insert/update the index based on condition here my query, I need to filter 'age' field from csv file and check if the age \> 18, then only I should update… --- ## [ES nodes keep timing out](https://discuss.elastic.co/t/es-nodes-keep-timing-out/52889)
**Author:** [@pip0](https://discuss.elastic.co/u/pip0)\ **Replies:** 1\ **Last updated:** [June 16, 2016, 3:29am UTC](https://discuss.elastic.co/t/es-nodes-keep-timing-out/52889 "2016-06-16T03:29:18Z")
Kibana would report Courier Fetch: Bad Gateway. here are my logs \[2016-06-15 11:32:38,512\]\[DEBUG\]\[action.admin.cluster.node.stats\] \[elastic-kibana\] failed to execute on node \[Cr1WzqKXTAmtVy15adTRbg\] ReceiveTimeoutT… --- ## [Backup & Restore Scripts- Elasticsearch - 2.4.3](https://discuss.elastic.co/t/backup-restore-scripts-elasticsearch-2-4-3/379173)
**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\ **Replies:** 2\ **Last updated:** [June 14, 2025, 4:42pm UTC](https://discuss.elastic.co/t/backup-restore-scripts-elasticsearch-2-4-3/379173 "2025-06-14T16:42:08Z")
Posting For records. Note: These scripts tested against Elasticsearch 2.4.3 which is EOL. These scripts may or may not work with newer versions of elastic. 1\] Details: A\] Node1: 10.226.71.1 (Master + Data) B\] Node2:… --- ## [Elasticsearch Master Not discovered](https://discuss.elastic.co/t/elasticsearch-master-not-discovered/336375)
**Author:** [@A.Hani](https://discuss.elastic.co/u/A.Hani)\ **Replies:** 2\ **Last updated:** [June 19, 2023, 3:16pm UTC](https://discuss.elastic.co/t/elasticsearch-master-not-discovered/336375 "2023-06-19T15:16:33Z")
Hi all, I'm trying to form a cluster of 3 Nodes using Elasticsearch V8.8. I'm testing how this should work on the first 2 nodes and this really driving me crazy. My initial attempt was to start the first node as a clust… --- ## [Dynamic fields name within grok match](https://discuss.elastic.co/t/dynamic-fields-name-within-grok-match/287150)
**Author:** [@paska](https://discuss.elastic.co/u/paska)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 2:52am UTC](https://discuss.elastic.co/t/dynamic-fields-name-within-grok-match/287150 "2021-10-21T02:52:41Z")
Hello. I'm wanted to use dynamic fields name within grok match. But I couldn't find any information about it and about correct syntax. First of all I'm getting field, which depends on field log.file.path grok { mat… --- ## [Can Logstash Base64 decode then parse json from a cloudfront log?](https://discuss.elastic.co/t/can-logstash-base64-decode-then-parse-json-from-a-cloudfront-log/280367)
**Author:** [@chrisan](https://discuss.elastic.co/u/chrisan)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 9:06am UTC](https://discuss.elastic.co/t/can-logstash-base64-decode-then-parse-json-from-a-cloudfront-log/280367 "2021-08-05T09:06:05Z")
Hello, we are using AWS's image resizer Serverless Image Handler | Implementations | AWS Solutions To get an image, you need to base64 encode a json object such as {"bucket":"my-s3-bucket","key":"path/to/your/image.jpg… --- ## [Watcher returns null values](https://discuss.elastic.co/t/watcher-returns-null-values/215092)
**Author:** [@NGhost](https://discuss.elastic.co/u/NGhost)\ **Replies:** 2\ **Last updated:** [January 15, 2020, 8:45am UTC](https://discuss.elastic.co/t/watcher-returns-null-values/215092 "2020-01-15T08:45:09Z")
Hello! I'd appreciate for any help, can't figure it by myself for a long time. I have a quite simple watcher, like this: { "trigger": { "schedule": { "interval": "5m" } }, "input": { "search": { "request": {… --- ## [False Postive submission](https://discuss.elastic.co/t/false-postive-submission/205449)
**Author:** [@kman](https://discuss.elastic.co/u/kman)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 7:08am UTC](https://discuss.elastic.co/t/false-postive-submission/205449 "2019-10-29T07:08:26Z")
Hi, our software is being detected by Endgame engine. we would like to remove the detection, could you guide me what needs to be done? thanks --- ## [Guidance on setting up elasticsearch to handle terrabytes of logs](https://discuss.elastic.co/t/guidance-on-setting-up-elasticsearch-to-handle-terrabytes-of-logs/205579)
**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 6:12am UTC](https://discuss.elastic.co/t/guidance-on-setting-up-elasticsearch-to-handle-terrabytes-of-logs/205579 "2019-10-29T06:12:19Z")
I need guidance on setting up an ES cluster which can consume ~1TB of logs per day and storing them for 30days. Here is what I am thinking to do by procuring Basic license: Elastisearch - 3 master nodes (x-pack and tl… --- ## [Deleted kibana index.. How do I reload?](https://discuss.elastic.co/t/deleted-kibana-index-how-do-i-reload/89061)
**Author:** [@JayArthur](https://discuss.elastic.co/u/JayArthur)\ **Replies:** 2\ **Last updated:** [June 13, 2017, 1:42pm UTC](https://discuss.elastic.co/t/deleted-kibana-index-how-do-i-reload/89061 "2017-06-13T13:42:49Z")
Hey guys, I deleted my kibana index file , and now I'm having a problem getting logs from other remote machines.. How Do I re enable my indices ? Here's my logs Jun 12 17:34:17 epicenter kibana: {"type":"response","@ti… --- ## [Performance issue django/haystack + elasticsearch on ec2's](https://discuss.elastic.co/t/performance-issue-django-haystack-elasticsearch-on-ec2s/24578)
**Author:** [@Paul\_Bormans](https://discuss.elastic.co/u/Paul_Bormans)\ **Replies:** 2\ **Last updated:** [June 30, 2015, 5:07pm UTC](https://discuss.elastic.co/t/performance-issue-django-haystack-elasticsearch-on-ec2s/24578 "2015-06-30T17:07:24Z")
For a new website i'm setting up i deploy nginx/gunicorn/django/haystack on a webserver instance; currently a t2.small. ES is running on a seperate instance which is currently a t2.micro. (I think this should for now not… --- ## [Logstash start failed because of Could not load FFI Provider: (NotImplementedError) FFI not available](https://discuss.elastic.co/t/logstash-start-failed-because-of-could-not-load-ffi-provider-notimplementederror-ffi-not-available/247970)
**Author:** [@qiuwenhui1](https://discuss.elastic.co/u/qiuwenhui1)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 7:47am UTC](https://discuss.elastic.co/t/logstash-start-failed-because-of-could-not-load-ffi-provider-notimplementederror-ffi-not-available/247970 "2020-09-09T07:47:31Z")
java.lang.IllegalStateException: Logstash stopped processing because of an error: (LoadError) Could not load FFI Provider: (NotImplementedError) FFI not available: java.lang.ClassCastException: java.nio.HeapByteBuffer ca… --- ## [Filebeat: How to create multiple instances/pipelines on same VM](https://discuss.elastic.co/t/filebeat-how-to-create-multiple-instances-pipelines-on-same-vm/352999)
**Author:** [@albus](https://discuss.elastic.co/u/albus)\ **Replies:** 5\ **Last updated:** [February 12, 2024, 7:51pm UTC](https://discuss.elastic.co/t/filebeat-how-to-create-multiple-instances-pipelines-on-same-vm/352999 "2024-02-12T19:51:38Z")
Hello Elastic Community, I hope everybody is doing great. I am facing a problem and I cannot find any documentation or blog related to it. Problem statement is: Is there a possibility to run multiple instances of Fileb… --- ## [Bad elastic document](https://discuss.elastic.co/t/bad-elastic-document/321904)
**Author:** [@thuy\_do\_thi](https://discuss.elastic.co/u/thuy_do_thi)\ **Replies:** 5\ **Last updated:** [December 25, 2022, 2:49pm UTC](https://discuss.elastic.co/t/bad-elastic-document/321904 "2022-12-25T14:49:11Z")
Why is the Elastic document so bad? I am a devops engineer. I spent a week on deploy elasticsearch+logstash+kibana+kafka. After Xpack is enabled by default, I try to modify the user name of elasticsearch. It took me a… --- ## [ELK - xpack , watcher - what to use for advanced alerting and observability?](https://discuss.elastic.co/t/elk-xpack-watcher-what-to-use-for-advanced-alerting-and-observability/247946)
**Author:** [@AwesomeRoy](https://discuss.elastic.co/u/AwesomeRoy)\ **Replies:** 5\ **Last updated:** [September 9, 2020, 11:38pm UTC](https://discuss.elastic.co/t/elk-xpack-watcher-what-to-use-for-advanced-alerting-and-observability/247946 "2020-09-09T23:38:16Z")
Kibana alerting is basic . For advanced alerts in ELK stack what should I use ? Watcher plugin ? - Is this part of paid version only ? or can i install this separately within the open n source version as well ? x-pack… --- ## [Shard size vs. query performance where all shard have the same terms](https://discuss.elastic.co/t/shard-size-vs-query-performance-where-all-shard-have-the-same-terms/193577)
**Author:** [@IanRC72](https://discuss.elastic.co/u/IanRC72)\ **Replies:** 5\ **Last updated:** [August 3, 2019, 10:35am UTC](https://discuss.elastic.co/t/shard-size-vs-query-performance-where-all-shard-have-the-same-terms/193577 "2019-08-03T10:35:27Z")
As I understand it, ES's query speed is a function of the term dictionary size, not the document count. In my scenario, I have a large set of data that can be distributed across any arbitrary number of shards. The terms… --- ## [Load the templates manually - is the output correct?](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520)
**Author:** [@przemolb](https://discuss.elastic.co/u/przemolb)\ **Replies:** 5\ **Last updated:** [March 2, 2018, 9:17am UTC](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520 "2018-03-02T09:17:11Z")
Hi all, since my filebeat doesn't have any access to Elasticsearch I have to follow this procedure https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html#load-template-manually. I have the follow… --- ## [Logstash log4j2.properties gets overriden by dpkg](https://discuss.elastic.co/t/logstash-log4j2-properties-gets-overriden-by-dpkg/90290)
**Author:** [@ol3k](https://discuss.elastic.co/u/ol3k)\ **Replies:** 5\ **Last updated:** [July 17, 2017, 8:47am UTC](https://discuss.elastic.co/t/logstash-log4j2-properties-gets-overriden-by-dpkg/90290 "2017-07-17T08:47:10Z")
I've a problem with my custom log4j2.properties file: While the elasticsearch config is changed to log4j2.properties.dpkg-new, the logstash properties file gets overriden by the paket manager each time I update logstas… --- ## [Logs with lime breaks not working with multiline](https://discuss.elastic.co/t/logs-with-lime-breaks-not-working-with-multiline/87937)
**Author:** [@amruthapbhat](https://discuss.elastic.co/u/amruthapbhat)\ **Replies:** 5\ **Last updated:** [June 6, 2017, 11:00am UTC](https://discuss.elastic.co/t/logs-with-lime-breaks-not-working-with-multiline/87937 "2017-06-06T11:00:14Z")
I have a file in the below format Ex: This is the first line. This is the second line. I am using no pattern since I want all the lines in the text to send to Logstash which is around 2000 lines. If the file is… --- ## [UAX29 URL Email Tokenizer](https://discuss.elastic.co/t/uax29-url-email-tokenizer/168304)
**Author:** [@avencar](https://discuss.elastic.co/u/avencar)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 3:26pm UTC](https://discuss.elastic.co/t/uax29-url-email-tokenizer/168304 "2019-02-15T15:26:38Z")
I am wondering if there are plans to implement a more advanced version of the current URL Email Tokenizer, such as the UAX29 one provided by solr (https://lucene.apache.org/solr/guide/7\_3/tokenizers.html#uax29-url-email-… --- ## [When can keyword field with doc values enabled consume fielddata cache?](https://discuss.elastic.co/t/when-can-keyword-field-with-doc-values-enabled-consume-fielddata-cache/127146)
**Author:** [@Ankit\_Malpani](https://discuss.elastic.co/u/Ankit_Malpani)\ **Replies:** 2\ **Last updated:** [August 10, 2018, 9:32am UTC](https://discuss.elastic.co/t/when-can-keyword-field-with-doc-values-enabled-consume-fielddata-cache/127146 "2018-08-10T09:32:05Z")
ES version - 6.2.3 Sometimes after running an aggregation query on a keyword field enabled with doc\_values, my fielddata cache is still being consumed which was unexpected for me. When can this happen? eg. here is a ma… --- ## [Get Array FieldValues ElasticSearch NEST](https://discuss.elastic.co/t/get-array-fieldvalues-elasticsearch-nest/288911)
**Author:** [@Mr\_X](https://discuss.elastic.co/u/Mr_X)\ **Replies:** 1\ **Last updated:** [November 15, 2021, 8:46am UTC](https://discuss.elastic.co/t/get-array-fieldvalues-elasticsearch-nest/288911 "2021-11-15T08:46:31Z")
Is there a way to get Arrays returned in FieldValues using NEST. Consider the following query var searchResponse = client.Search\(s =\> s .Index("specs") .Source(… --- ## [I can't edit my deployment because I have too many shards in my cluster](https://discuss.elastic.co/t/i-cant-edit-my-deployment-because-i-have-too-many-shards-in-my-cluster/260774)
**Author:** [@daniel\_at\_gus](https://discuss.elastic.co/u/daniel_at_gus)\ **Replies:** 7\ **Last updated:** [January 19, 2021, 12:32am UTC](https://discuss.elastic.co/t/i-cant-edit-my-deployment-because-i-have-too-many-shards-in-my-cluster/260774 "2021-01-19T00:32:21Z")
Hi, community. Recently I have talked to Elastic Cloud support team and they told me that my cluster fails to edit my deployment because I have too many shards in my cluster. They suggested me to delete unused indexes. … --- ## [Mtermvectors API not working properly](https://discuss.elastic.co/t/mtermvectors-api-not-working-properly/228702)
**Author:** [@Thek10patil](https://discuss.elastic.co/u/Thek10patil)\ **Replies:** 7\ **Last updated:** [April 21, 2020, 4:24am UTC](https://discuss.elastic.co/t/mtermvectors-api-not-working-properly/228702 "2020-04-21T04:24:19Z")
Hi Team, Currently, I am using Elasticsearch for my journal data in my Research lab. I am trying to retrieve mtermvectors for 25 documents at a time using python. Some times I get the result properly but most of the t… --- ## [Run \_ilm apis and get invalid\_index\_name\_exception](https://discuss.elastic.co/t/run-ilm-apis-and-get-invalid-index-name-exception/158590)
**Author:** [@Heng\_Zhang](https://discuss.elastic.co/u/Heng_Zhang)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 10:17pm UTC](https://discuss.elastic.co/t/run-ilm-apis-and-get-invalid-index-name-exception/158590 "2018-11-28T22:17:59Z")
I tried to run the following API in my elastic cluster with version 6.5 and got error of invalid\_index\_name\_exception. I also tried the api of POST /\_ilm/start and got the same error. could you advice a solution? my clu… --- ## [How to use one Filebeat directly with ES to process multiple applications log files](https://discuss.elastic.co/t/how-to-use-one-filebeat-directly-with-es-to-process-multiple-applications-log-files/92673)
**Author:** [@sezanawa](https://discuss.elastic.co/u/sezanawa)\ **Replies:** 1\ **Last updated:** [July 12, 2017, 2:14am UTC](https://discuss.elastic.co/t/how-to-use-one-filebeat-directly-with-es-to-process-multiple-applications-log-files/92673 "2017-07-12T02:14:20Z")
Hallo Everybody i am using filebeat directly with ES. I have installed filebeat on my Web Frontend Server where multiple applications are deployed. Each application wirte its own log. I want to use filebeat to parse th… --- ## [Delete Old Log Files in ES 2.3.4](https://discuss.elastic.co/t/delete-old-log-files-in-es-2-3-4/70829)
**Author:** [@santsaha](https://discuss.elastic.co/u/santsaha)\ **Replies:** 1\ **Last updated:** [January 7, 2017, 12:22am UTC](https://discuss.elastic.co/t/delete-old-log-files-in-es-2-3-4/70829 "2017-01-07T00:22:18Z")
I want to have a logging window of 7 days in elasticsearch. I don't want to delete old indices. Found a couple of threads but none provides a conclusion. There are a few suggestions of using maxBackupIndex , but it d… --- ## [ElasticJasper](https://discuss.elastic.co/t/elasticjasper/49908)
**Author:** [@maher](https://discuss.elastic.co/u/maher)\ **Replies:** 1\ **Last updated:** [May 12, 2016, 2:28pm UTC](https://discuss.elastic.co/t/elasticjasper/49908 "2016-05-12T14:28:17Z")
Hi, I am trying to use jaspersoft to make some reports. For that I am using Elasticjasper adapter, but when i create a new report it crashes for me. is there any isues related with version compatibilities. note that … --- ## [Planning capacity and ELK using filebeat/logstash or logstash/redis?](https://discuss.elastic.co/t/planning-capacity-and-elk-using-filebeat-logstash-or-logstash-redis/43894)
**Author:** [@Willie\_Cadete](https://discuss.elastic.co/u/Willie_Cadete)\ **Replies:** 1\ **Last updated:** [March 9, 2016, 8:42pm UTC](https://discuss.elastic.co/t/planning-capacity-and-elk-using-filebeat-logstash-or-logstash-redis/43894 "2016-03-09T20:42:13Z")
Hello everyone! It's my first time here, Reading logstash book I bought, it recommends using redis as a broker and several other sources recommend the same scenario in a production environment. Searching I saw tha… --- ## [Is "value" a reserved field name?](https://discuss.elastic.co/t/is-value-a-reserved-field-name/26285)
**Author:** [@wflanagan](https://discuss.elastic.co/u/wflanagan)\ **Replies:** 1\ **Last updated:** [July 26, 2015, 7:02am UTC](https://discuss.elastic.co/t/is-value-a-reserved-field-name/26285 "2015-07-26T07:02:30Z")
I have an index that has the field name "value" that is defined as in Integer, where I am trying to use an aggregation to determine its minimum value. When I use 'min' or 'max' or 'stats' aggregation.. i always get a… --- ## [How to read SQL Server log trace?](https://discuss.elastic.co/t/how-to-read-sql-server-log-trace/24429)
**Author:** [@Zanatto](https://discuss.elastic.co/u/Zanatto)\ **Replies:** 1\ **Last updated:** [June 26, 2015, 11:19pm UTC](https://discuss.elastic.co/t/how-to-read-sql-server-log-trace/24429 "2015-06-26T23:19:24Z")
I would like to know if have any pluging in logstash for this task. If not, what do you suggest? --- ## [Check searchresponse is success or failure for a given search](https://discuss.elastic.co/t/check-searchresponse-is-success-or-failure-for-a-given-search/21582)
**Author:** [@vipins](https://discuss.elastic.co/u/vipins)\ **Replies:** 1\ **Last updated:** [January 12, 2015, 4:27pm UTC](https://discuss.elastic.co/t/check-searchresponse-is-success-or-failure-for-a-given-search/21582 "2015-01-12T16:27:11Z")
I am querying elasticsearch with the below query SearchResponse searchResponse = getElasticSearchClient() .prepareSearch(indexNameStr).setTypes(typeNameStr) … --- ## [How can I restore logs from /usr/share/elasticsearch/data/nodes/0?](https://discuss.elastic.co/t/how-can-i-restore-logs-from-usr-share-elasticsearch-data-nodes-0/327822)
**Author:** [@shawnmin](https://discuss.elastic.co/u/shawnmin)\ **Replies:** 6\ **Last updated:** [March 20, 2023, 10:09am UTC](https://discuss.elastic.co/t/how-can-i-restore-logs-from-usr-share-elasticsearch-data-nodes-0/327822 "2023-03-20T10:09:19Z")
I am using Elasticsearch as a backend to save logs collected from Fluentd logging agent. Specifically, I've set up an EFK logging architecture in my Kubernetes cluster. (AWS EKS cluster to be specific) I've mounted the … --- ## [Fill an Elasticsearch index with data from another index on same cluster](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451)
**Author:** [@workaround](https://discuss.elastic.co/u/workaround)\ **Replies:** 6\ **Last updated:** [April 8, 2021, 8:30am UTC](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451 "2021-04-08T08:30:18Z")
This is kind of a noob question so please be kind. I have an elasticsearch cluster (v5) with 3 nodes and two indexes, lets say indexes X and Y(default). I would like to know if there is a way to write data to the index … --- ## [How to add podip on add\_kubernetes\_metadata processor?](https://discuss.elastic.co/t/how-to-add-podip-on-add-kubernetes-metadata-processor/269006)
**Author:** [@dadayoo](https://discuss.elastic.co/u/dadayoo)\ **Replies:** 6\ **Last updated:** [April 2, 2021, 7:45am UTC](https://discuss.elastic.co/t/how-to-add-podip-on-add-kubernetes-metadata-processor/269006 "2021-04-02T07:45:05Z")
Hi I'm running filebeat daemonset on my k8s cluster have try different config scenario but do not get the pod ip data here is my config processors: - add\_kubernetes\_metadata: default\_indexers.enabled: tr… [Previous page](https://discuss.elastic.co/top.md?page=1416&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1418&per_page=50&period=all)