# Top **URL:** https://discuss.elastic.co/top.md?page=1422&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1423 --- ## [Specifying filters in the suggest query](https://discuss.elastic.co/t/specifying-filters-in-the-suggest-query/13233)
**Author:** [@Amit\_Soni](https://discuss.elastic.co/u/Amit_Soni)\ **Replies:** 2\ **Last updated:** [August 15, 2013, 9:02pm UTC](https://discuss.elastic.co/t/specifying-filters-in-the-suggest-query/13233 "2013-08-15T21:02:01Z")
Hi all - I see that \_suggest API has been introduced recently although it is still in experiment phase. I am wondering if there is a way to specify filter in the suggest API. This is to ensure that the suggestions ar… --- ## [Timelion top 5 not working compared to TSVB top 5](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 6\ **Last updated:** [June 24, 2021, 3:01pm UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221 "2021-06-24T15:01:30Z")
Hi, I have this top 5 interfaces based on the average of utilization, in TSVB last 24 hours But when I try to do the same in canvas using Timelion with this query .es(q='tenant name.keyword : LABSAV',index='metric-i… --- ## [Detection Rule Exceptions "is one of", comma in value](https://discuss.elastic.co/t/detection-rule-exceptions-is-one-of-comma-in-value/272738)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 6\ **Last updated:** [May 12, 2021, 8:30pm UTC](https://discuss.elastic.co/t/detection-rule-exceptions-is-one-of-comma-in-value/272738 "2021-05-12T20:30:45Z")
Hi All, I'm trying to add an exception to a detection rule. This exception is intended to be an is one of rule, that excludes a number of ISPs. However, I am running into an issue some of the ISP names contain a comma, … --- ## [Путь к бинам в Windows версии](https://discuss.elastic.co/t/windows/247500)
**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\ **Replies:** 6\ **Last updated:** [September 28, 2020, 11:00am UTC](https://discuss.elastic.co/t/windows/247500 "2020-09-28T11:00:28Z")
Есть тестовая нода на Windows Server 2016. Туда изначально была установлена версия 7.6.1 И раньше логика при обновлении из msi пакета была такая, что путь к новым бинам был такой: C:\\Elasticsearch\\7.6.1\\{новая версия}\\… --- ## [\[LogStash::Runner\]: Exception on end of comment line - 'The given configuration is invalid. Reason: Expected'](https://discuss.elastic.co/t/logstash-runner-exception-on-end-of-comment-line-the-given-configuration-is-invalid-reason-expected/169564)
**Author:** [@henkepa](https://discuss.elastic.co/u/henkepa)\ **Replies:** 6\ **Last updated:** [March 12, 2019, 1:41pm UTC](https://discuss.elastic.co/t/logstash-runner-exception-on-end-of-comment-line-the-given-configuration-is-invalid-reason-expected/169564 "2019-03-12T13:41:36Z")
OS: Redhat 7 Logstash Version: 6.5.1 The following logstash pipeline.conf: # !!!Attenttion: Comments can raise exceptions -\> be aware!!! input { beats { port =\> "5044" host =\> "0.0.0.0" } } out… --- ## [Permission Trees](https://discuss.elastic.co/t/permission-trees/9535)
**Author:** [@mbaryu](https://discuss.elastic.co/u/mbaryu)\ **Replies:** 6\ **Last updated:** [November 15, 2012, 4:54pm UTC](https://discuss.elastic.co/t/permission-trees/9535 "2012-11-15T16:54:57Z")
I'm trying to use ElasticSearch in an environment where I need document-by-document permissions. We have considered using an external store for permissions mapping, however the sheer number of documents that wi… --- ## [BadRequest400Exception latitude must be a number](https://discuss.elastic.co/t/badrequest400exception-latitude-must-be-a-number/293169)
**Author:** [@rayuth](https://discuss.elastic.co/u/rayuth)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 5:48am UTC](https://discuss.elastic.co/t/badrequest400exception-latitude-must-be-a-number/293169 "2022-01-04T05:48:52Z")
Hi All, I got an error: Elasticsearch\\Common\\Exceptions\\BadRequest400Exception: {"error":{"root\_cause":\[{"type":"parse\_exception","reason":"latitude must be a number"}\],"type":"mapper\_parsing\_exception","reason":"faile… --- ## [Filebeats does not create custom-named indices and hangs if ILM is disabled](https://discuss.elastic.co/t/filebeats-does-not-create-custom-named-indices-and-hangs-if-ilm-is-disabled/283894)
**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\ **Replies:** 3\ **Last updated:** [September 21, 2021, 8:40pm UTC](https://discuss.elastic.co/t/filebeats-does-not-create-custom-named-indices-and-hangs-if-ilm-is-disabled/283894 "2021-09-21T20:40:51Z")
All details and code snippets are included into the SO post: elasticsearch - Elastic Filebeat does not index into custom indices with mappings - Stack Overflow Below is the summary with the latest updates: I am trying … --- ## [Filebeat processor add tags to log files from different folders](https://discuss.elastic.co/t/filebeat-processor-add-tags-to-log-files-from-different-folders/204226)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 0\ **Last updated:** [October 18, 2019, 12:39pm UTC](https://discuss.elastic.co/t/filebeat-processor-add-tags-to-log-files-from-different-folders/204226 "2019-10-18T12:39:34Z")
Filebeat 7.4.0 I've been trying to work off of the link below to add tags to logs that are coming from different folders. We have multiple different log folders like vdi001, vdimgmt001 and flx001 and we'd like to use f… --- ## [Master CPU high when bulk indexing in ES 5.1](https://discuss.elastic.co/t/master-cpu-high-when-bulk-indexing-in-es-5-1/183613)
**Author:** [@willyaranda\_vonage](https://discuss.elastic.co/u/willyaranda_vonage)\ **Replies:** 3\ **Last updated:** [May 31, 2019, 9:04am UTC](https://discuss.elastic.co/t/master-cpu-high-when-bulk-indexing-in-es-5-1/183613 "2019-05-31T09:04:43Z")
Hi! I'm testing a kafka-connect plugin that writes to ES (the official one from confluent, that does not use the elastic package, but own implementation) and I'm seeing a huge spike in CPU usage in the master node when … --- ## [Port drop statistics](https://discuss.elastic.co/t/port-drop-statistics/138239)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 3\ **Last updated:** [July 3, 2018, 1:54pm UTC](https://discuss.elastic.co/t/port-drop-statistics/138239 "2018-07-03T13:54:29Z")
Hello, I'm currently using netflow plugin in my ELK stack. I was wondering if there is any way to figure out how many packets are being dropped when feeding netflow data to the 2055 port of logstash. Thanks --- ## [Ealstic search plugin installation from in house maven repository](https://discuss.elastic.co/t/ealstic-search-plugin-installation-from-in-house-maven-repository/103706)
**Author:** [@thinkingisall](https://discuss.elastic.co/u/thinkingisall)\ **Replies:** 3\ **Last updated:** [October 13, 2017, 6:04am UTC](https://discuss.elastic.co/t/ealstic-search-plugin-installation-from-in-house-maven-repository/103706 "2017-10-13T06:04:29Z")
I am new here and also to elastic search. We are installing elastic search for one of our vendor product. Our servers don’t have access to internet. When installing the plugin it is going to maven repo public site. Can… --- ## [Beat dont' ship log to ES when ES restart (ES died)](https://discuss.elastic.co/t/beat-dont-ship-log-to-es-when-es-restart-es-died/43189)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 3\ **Last updated:** [March 3, 2016, 12:16am UTC](https://discuss.elastic.co/t/beat-dont-ship-log-to-es-when-es-restart-es-died/43189 "2016-03-03T00:16:02Z")
I'm using ES 2.0. My cluster is full storage \>85% (Status Red). i try to Remove some indices and restart cluster, status healthy is green. But filebeat and winlogbeat installed in server don't ship log to LS and ES. I … --- ## [TranslogCorruptedException and root cause](https://discuss.elastic.co/t/translogcorruptedexception-and-root-cause/31933)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 3\ **Last updated:** [October 11, 2015, 2:05am UTC](https://discuss.elastic.co/t/translogcorruptedexception-and-root-cause/31933 "2015-10-11T02:05:59Z")
Hi Everyone, For the second time, I am coming across TranslogCorruptedException in my production environment and every time I delete recovery file and translog file to bring back the index to healthy state. But I am re… --- ## [Sort on a deeply nested field?](https://discuss.elastic.co/t/sort-on-a-deeply-nested-field/5909)
**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\ **Replies:** 3\ **Last updated:** [November 21, 2011, 7:53pm UTC](https://discuss.elastic.co/t/sort-on-a-deeply-nested-field/5909 "2011-11-21T19:53:46Z")
Hi folks. Can you sort on a deeply nested field? I ask because this query: curl -X GET 'localhost:9200/test/product/\_search?pretty=true' -d '{ "sort" : \[{ "items.properties.color.orig": {"order": "asc"} }\] }' f… --- ## [How to specify pipelines.yml file path](https://discuss.elastic.co/t/how-to-specify-pipelines-yml-file-path/280923)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 7\ **Last updated:** [August 11, 2021, 3:20am UTC](https://discuss.elastic.co/t/how-to-specify-pipelines-yml-file-path/280923 "2021-08-11T03:20:18Z")
I'm working on Logstash setup in a legacy system with no owners in the organisation. Using ps, i found the process executing the logstash service: /usr/bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headl… --- ## [We are getting "unindexed fields or ignored values cannot be searched"](https://discuss.elastic.co/t/we-are-getting-unindexed-fields-or-ignored-values-cannot-be-searched/322148)
**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\ **Replies:** 1\ **Last updated:** [December 30, 2022, 2:18pm UTC](https://discuss.elastic.co/t/we-are-getting-unindexed-fields-or-ignored-values-cannot-be-searched/322148 "2022-12-30T14:18:03Z")
Hi, In Kibana (7.16.2) discover there are so many fields whose format is text which is not searchable like if we hover on the field it gives below message "unindexed fields or ignored values cannot be searched". But s… --- ## [How to extract rules and connector using elastic API](https://discuss.elastic.co/t/how-to-extract-rules-and-connector-using-elastic-api/303477)
**Author:** [@waelboss](https://discuss.elastic.co/u/waelboss)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 9:53pm UTC](https://discuss.elastic.co/t/how-to-extract-rules-and-connector-using-elastic-api/303477 "2022-05-05T21:53:40Z")
i want to export rules and connector from elastic using API i created this request : curl -X POST -u elastic:pass https://myHOST:9243/api/detection\_engine/rules/\_export?exclude\_export\_details=true -H 'kbn-xsrf: true' -… --- ## [Highlighting of exact search with simple\_query\_string](https://discuss.elastic.co/t/highlighting-of-exact-search-with-simple-query-string/283292)
**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 1\ **Last updated:** [September 5, 2021, 12:53pm UTC](https://discuss.elastic.co/t/highlighting-of-exact-search-with-simple-query-string/283292 "2021-09-05T12:53:23Z")
I use Elasticsearch 7.9 and I want to highlight an exact search filed with simple query string query, for a document. The following query doesn't highlight words in the document, although these words are in the document… --- ## [OAuth2.0 support for http\_poller input plugin](https://discuss.elastic.co/t/oauth2-0-support-for-http-poller-input-plugin/254199)
**Author:** [@pankaj](https://discuss.elastic.co/u/pankaj)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 5:34am UTC](https://discuss.elastic.co/t/oauth2-0-support-for-http-poller-input-plugin/254199 "2020-11-04T05:34:59Z")
Hello Team I would like to know how to configure the OAuth2.0 in http\_poller input . --- ## [Glob based paths in Filebeat](https://discuss.elastic.co/t/glob-based-paths-in-filebeat/250906)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 1\ **Last updated:** [October 5, 2020, 1:18am UTC](https://discuss.elastic.co/t/glob-based-paths-in-filebeat/250906 "2020-10-05T01:18:18Z")
Hi Team, I am trying to find out an easy way to give the Glob based path in filebeat. Below is a sample path which we need to configure in filebeat.yml . - /oraadr/XHPROD/adump/\*.aud - /projects/oraxhph2/orabase/ad… --- ## [Error: 'tuple' object is not callable](https://discuss.elastic.co/t/error-tuple-object-is-not-callable/220952)
**Author:** [@Ramazan\_dd](https://discuss.elastic.co/u/Ramazan_dd)\ **Replies:** 1\ **Last updated:** [March 3, 2020, 1:19pm UTC](https://discuss.elastic.co/t/error-tuple-object-is-not-callable/220952 "2020-03-03T13:19:06Z")
Hello I run this FROM python:3.6-alpine COPY ./config /config RUN pip install elasticsearch-curator==5.8.0 &&\\ pip install elasticsearch==7.0.4 &&\\ rm -rf /var/cache/apk/\* CMD curator --config /config/confi… --- ## [Understanding Search Rate](https://discuss.elastic.co/t/understanding-search-rate/124070)
**Author:** [@Amit\_Hora](https://discuss.elastic.co/u/Amit_Hora)\ **Replies:** 1\ **Last updated:** [March 15, 2018, 12:14pm UTC](https://discuss.elastic.co/t/understanding-search-rate/124070 "2018-03-15T12:14:12Z")
Hi, I have roll over indexes, with retention duration of 7 days. Sessions-2018-03-15 Sessions-2018-03-14 ...... I can see search rate of 213/sec consistent across all session indexes. We have alias that points to th… --- ## [How to create graph with time on y axis and date timeline on x axis?](https://discuss.elastic.co/t/how-to-create-graph-with-time-on-y-axis-and-date-timeline-on-x-axis/78274)
**Author:** [@Jan\_Fabo](https://discuss.elastic.co/u/Jan_Fabo)\ **Replies:** 1\ **Last updated:** [March 15, 2017, 3:09pm UTC](https://discuss.elastic.co/t/how-to-create-graph-with-time-on-y-axis-and-date-timeline-on-x-axis/78274 "2017-03-15T15:09:39Z")
Hi, I'm trying to visualize bacula backup logs. Each one log means one finished job, it contains clientname, starttime, endtime, jobstatus, number of files backed up and backup type. I want a visualization, where on x… --- ## [ElasticSearch + field Alias](https://discuss.elastic.co/t/elasticsearch-field-alias/50755)
**Author:** [@sarthak2016](https://discuss.elastic.co/u/sarthak2016)\ **Replies:** 1\ **Last updated:** [May 25, 2016, 8:47am UTC](https://discuss.elastic.co/t/elasticsearch-field-alias/50755 "2016-05-25T08:47:33Z")
Hello All, I would like to apply Alias on field Below is elastic search mapping document script "logruntime": { "type": "date", "format": "epoch\_millis||MM/dd/yyyy HH:mm" } So it will create column into Kibana an… --- ## [Rule preview is slow](https://discuss.elastic.co/t/rule-preview-is-slow/351732)
**Author:** [@elasticexpert](https://discuss.elastic.co/u/elasticexpert)\ **Replies:** 2\ **Last updated:** [January 25, 2024, 5:07am UTC](https://discuss.elastic.co/t/rule-preview-is-slow/351732 "2024-01-25T05:07:57Z")
Rule preview is very slow, but when I take the search and search it in kibana dev tools it is very fast. In the rule preview it says that the query time is fast (3ms), so I opened chrome dev tools at network and saw tha… --- ## [How to get average of items in an array of a nested field?](https://discuss.elastic.co/t/how-to-get-average-of-items-in-an-array-of-a-nested-field/322690)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 4\ **Last updated:** [January 9, 2023, 12:32am UTC](https://discuss.elastic.co/t/how-to-get-average-of-items-in-an-array-of-a-nested-field/322690 "2023-01-09T00:32:28Z")
I'm trying to get the average price of products that are in stock across my different physical warehouses. I made this index: PUT warehouse POST warehouse/\_mapping { "properties": { "inventory": { "prope… --- ## [Elasticsearch - 'network.host': is not allowed](https://discuss.elastic.co/t/elasticsearch-network-host-is-not-allowed/272669)
**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\ **Replies:** 4\ **Last updated:** [May 11, 2021, 2:52pm UTC](https://discuss.elastic.co/t/elasticsearch-network-host-is-not-allowed/272669 "2021-05-11T14:52:00Z")
I am using ElasticCloud , version v7.12.1, I have sat up a watcher for health check of cluster that it looks like below: PUT \_watcher/watch/cluster\_health\_watch { "trigger" : { "schedule" : { "cron… --- ## [Markdown built from index data](https://discuss.elastic.co/t/markdown-built-from-index-data/151861)
**Author:** [@JoanSegura](https://discuss.elastic.co/u/JoanSegura)\ **Replies:** 4\ **Last updated:** [October 15, 2018, 9:05am UTC](https://discuss.elastic.co/t/markdown-built-from-index-data/151861 "2018-10-15T09:05:55Z")
Hello, I'm trying to build a simple menu to jump from one dashboard to others. The source data (labels and links) of the menu are contained into an index, so menu will be created and modified from time to time. is there… --- ## [Packetbeat cannot parse Tomcat's response status line because of reason phrase](https://discuss.elastic.co/t/packetbeat-cannot-parse-tomcats-response-status-line-because-of-reason-phrase/124223)
**Author:** [@cero-t](https://discuss.elastic.co/u/cero-t)\ **Replies:** 4\ **Last updated:** [March 17, 2018, 9:14am UTC](https://discuss.elastic.co/t/packetbeat-cannot-parse-tomcats-response-status-line-because-of-reason-phrase/124223 "2018-03-17T09:14:34Z")
I tried to use Packetbeat 6.2.2 to capture packets of Tomcat request / response but failed to capture with this error. http/http\_parser.go(156) Failed to understand HTTP response status: 200 Tomcat (\> 8.5) returns only… --- ## [Error while updating topbeat template](https://discuss.elastic.co/t/error-while-updating-topbeat-template/54413)
**Author:** [@pvignesh92](https://discuss.elastic.co/u/pvignesh92)\ **Replies:** 4\ **Last updated:** [July 1, 2016, 8:06am UTC](https://discuss.elastic.co/t/error-while-updating-topbeat-template/54413 "2016-07-01T08:06:32Z")
Hi.. Im trying to modify the topbeat template.. hav an additional field and need to make that analyzed. I modified the template to exclude my field name from not\_analysed by using unmatch "match": "\*" "unmatch": "m… --- ## [I wonder why docvalues are fast for sorting](https://discuss.elastic.co/t/i-wonder-why-docvalues-are-fast-for-sorting/297039)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 2\ **Last updated:** [February 20, 2022, 10:42am UTC](https://discuss.elastic.co/t/i-wonder-why-docvalues-are-fast-for-sorting/297039 "2022-02-20T10:42:36Z")
docvalues ​​are sorted by docid, so they are not values, but why can they be fast for sorting? I want to know deeply about the internal structure, please help! --- ## [Count total DNS queries](https://discuss.elastic.co/t/count-total-dns-queries/170318)
**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\ **Replies:** 2\ **Last updated:** [February 28, 2019, 10:26pm UTC](https://discuss.elastic.co/t/count-total-dns-queries/170318 "2019-02-28T22:26:31Z")
Hello everyone, I'm trying to figure out the best way to count total DNS Queries per hour or day. I can easily adjust period. But what would be the best way to count this? Packetbeat is sending data to elasticsearch an… --- ## [Logstash - translate issue](https://discuss.elastic.co/t/logstash-translate-issue/124749)
**Author:** [@Pedro\_Cabral](https://discuss.elastic.co/u/Pedro_Cabral)\ **Replies:** 2\ **Last updated:** [March 22, 2018, 11:25am UTC](https://discuss.elastic.co/t/logstash-translate-issue/124749 "2018-03-22T11:25:50Z")
Hello all, I have the following configuration: filter { if \[type\] == "bro-conn" { #The following makes use of the translate filter (logstash contrib) to convert conn\_state into human text. Saves having to loo… --- ## [Using Digital Ocean Droplets as Client Nodes](https://discuss.elastic.co/t/using-digital-ocean-droplets-as-client-nodes/58297)
**Author:** [@shabi](https://discuss.elastic.co/u/shabi)\ **Replies:** 2\ **Last updated:** [August 17, 2016, 11:12pm UTC](https://discuss.elastic.co/t/using-digital-ocean-droplets-as-client-nodes/58297 "2016-08-17T23:12:18Z")
Would a small digital ocean droplet generally work well for a dedicated Kibana/Elasticsearch client node? Would a $20/month (2 GB RAM/2 CPU) work well in most circumstances? Would a $5/month (512 MB RAM/1 CPU) droplet ev… --- ## [E-shop sorting by lowest price](https://discuss.elastic.co/t/e-shop-sorting-by-lowest-price/26393)
**Author:** [@mirakovar](https://discuss.elastic.co/u/mirakovar)\ **Replies:** 2\ **Last updated:** [July 31, 2015, 7:09am UTC](https://discuss.elastic.co/t/e-shop-sorting-by-lowest-price/26393 "2015-07-31T07:09:27Z")
Hi! I would like to ask you about best solution for searching/sorting within elasticsearch. Let’s imagine catalog about 50 00+ cards. Each card has got price within dimension of pricelist about 20 pricelist. So I created… --- ## [Add button(s) to export tabular data to external source](https://discuss.elastic.co/t/add-button-s-to-export-tabular-data-to-external-source/201394)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 3\ **Last updated:** [October 10, 2019, 8:03am UTC](https://discuss.elastic.co/t/add-button-s-to-export-tabular-data-to-external-source/201394 "2019-10-10T08:03:47Z")
In Kibana I have a table representation of my data. I want to be able to filter this data and by pressing a button be able to export the resulting dataset to an external source. I will likely have multiple external sourc… --- ## [Elastic agent tries to download beats from Elastic artifacts directly without passing by fleet server](https://discuss.elastic.co/t/elastic-agent-tries-to-download-beats-from-elastic-artifacts-directly-without-passing-by-fleet-server/290676)
**Author:** [@djamel.lahouazi](https://discuss.elastic.co/u/djamel.lahouazi)\ **Replies:** 5\ **Last updated:** [December 2, 2021, 12:24am UTC](https://discuss.elastic.co/t/elastic-agent-tries-to-download-beats-from-elastic-artifacts-directly-without-passing-by-fleet-server/290676 "2021-12-02T00:24:09Z")
I installed fleet server & kibana in a machine that has access to internet and installed elasticagent in Windows server that does not have access to internet. But when I try to add integration (osquerybeat) i find in the… --- ## [FSCrawler: Error while crawling - Invalid UTF-8 start byte 0xb5](https://discuss.elastic.co/t/fscrawler-error-while-crawling-invalid-utf-8-start-byte-0xb5/230096)
**Author:** [@Yamini\_Shashank](https://discuss.elastic.co/u/Yamini_Shashank)\ **Replies:** 5\ **Last updated:** [April 28, 2020, 11:56am UTC](https://discuss.elastic.co/t/fscrawler-error-while-crawling-invalid-utf-8-start-byte-0xb5/230096 "2020-04-28T11:56:50Z")
Hi @dadoonet, I'v installed "fscrawler-es7-2.7-SNAPSHOT" . I'v created a PDF from MS Word with simple text. Here is a snapshot: Now i'v placed it in a folder structure such as: My configuration in yaml: --- nam… --- ## [Data is sent to created index and the default index](https://discuss.elastic.co/t/data-is-sent-to-created-index-and-the-default-index/113845)
**Author:** [@motts](https://discuss.elastic.co/u/motts)\ **Replies:** 5\ **Last updated:** [January 8, 2018, 9:18pm UTC](https://discuss.elastic.co/t/data-is-sent-to-created-index-and-the-default-index/113845 "2018-01-08T21:18:09Z")
I have an interesting issue where data is being sent to the new index and also the old default index. I am using Elasticsearch 2.4 and here is my output file: output { if \[type\] == "Corporate" { elasti… --- ## [Поиск термина в поисковой фразе](https://discuss.elastic.co/t/topic/105072)
**Author:** [@doctorx](https://discuss.elastic.co/u/doctorx)\ **Replies:** 5\ **Last updated:** [October 25, 2017, 10:42am UTC](https://discuss.elastic.co/t/topic/105072 "2017-10-25T10:42:21Z")
У меня есть словарь цветов и есть длинный запрос "Красные шерстяные носки" Document: { name = color value = красный Keword() } То есть мне надо определить какой цвет в этой фразе. Как это сделать что бы при запро… --- ## [Ideal Shard number of Single node](https://discuss.elastic.co/t/ideal-shard-number-of-single-node/101435)
**Author:** [@AAanton](https://discuss.elastic.co/u/AAanton)\ **Replies:** 5\ **Last updated:** [September 22, 2017, 8:17am UTC](https://discuss.elastic.co/t/ideal-shard-number-of-single-node/101435 "2017-09-22T08:17:27Z")
Hello... I want to use a single node for my indexes what is the difference of multiple shards and only one shard given single node. and is it better to use multiple shards than one shard? Any comments will be helpful… --- ## [Logstash 5.0.0beta1 never goes to background](https://discuss.elastic.co/t/logstash-5-0-0beta1-never-goes-to-background/61433)
**Author:** [@himbeere](https://discuss.elastic.co/u/himbeere)\ **Replies:** 5\ **Last updated:** [September 25, 2016, 8:32pm UTC](https://discuss.elastic.co/t/logstash-5-0-0beta1-never-goes-to-background/61433 "2016-09-25T20:32:04Z")
Hello. I'm trying to persuade logstash 5 to run in the background but i can't do it. My start command is: bin/logstash -f /etc/logstash/conf.d/ -l /var/log/logstash/ --log.level info -e "" Logstash starts fine but… --- ## [Using KQL in Filters on Kibana to match strings that "ends with"](https://discuss.elastic.co/t/using-kql-in-filters-on-kibana-to-match-strings-that-ends-with/336862)
**Author:** [@kashif\_shamaz](https://discuss.elastic.co/u/kashif_shamaz)\ **Replies:** 1\ **Last updated:** [June 26, 2023, 6:17am UTC](https://discuss.elastic.co/t/using-kql-in-filters-on-kibana-to-match-strings-that-ends-with/336862 "2023-06-26T06:17:04Z")
Hi there, I have an indexed field called "uri\_path", on this field, I have following values: - /something/\*/ - /something/\*/a/ - /something/\*/b/ - /something/\*/c/ The \* indicates anything, and I want to create a searc… --- ## [Logstash to parse TSV logs](https://discuss.elastic.co/t/logstash-to-parse-tsv-logs/147517)
**Author:** [@apurva](https://discuss.elastic.co/u/apurva)\ **Replies:** 1\ **Last updated:** [September 17, 2018, 4:59pm UTC](https://discuss.elastic.co/t/logstash-to-parse-tsv-logs/147517 "2018-09-17T16:59:36Z")
Need to parse TSV logs via logstash 6.3.2. Need to understand possibilities for same. 1 is to write a separate exe which converts tsv into csv, parse csv via logstash. Can we write any program in logstash itself to rea… --- ## [How to delete logs with a specific severity/tag with curator?](https://discuss.elastic.co/t/how-to-delete-logs-with-a-specific-severity-tag-with-curator/63252)
**Author:** [@smutel](https://discuss.elastic.co/u/smutel)\ **Replies:** 1\ **Last updated:** [October 18, 2016, 7:51am UTC](https://discuss.elastic.co/t/how-to-delete-logs-with-a-specific-severity-tag-with-curator/63252 "2016-10-18T07:51:07Z")
Hello, Is there a way to delete indices related to syslog messages with a specific severity? For example if I would like to keel debug logs during 7 days but all others during 31 days? Is-it possible ? Could we do th… --- ## [Elastic 5.0.0-alpha3 issues with some settings](https://discuss.elastic.co/t/elastic-5-0-0-alpha3-issues-with-some-settings/52619)
**Author:** [@tikkisetty](https://discuss.elastic.co/u/tikkisetty)\ **Replies:** 1\ **Last updated:** [June 14, 2016, 9:21am UTC](https://discuss.elastic.co/t/elastic-5-0-0-alpha3-issues-with-some-settings/52619 "2016-06-14T09:21:22Z")
After upgrade of elastic from 2.3.1 to 5.0.0-alpha3 , i had to remove/comment out the parameters http.jsonp.enable (error: unknown setting \[http.jsonp.enable\] did you mean \[http.cors.enabled\]?) node.rack ( not a valid … --- ## [How to implement an autocomplete functionality with an existing ElasticSearch index?](https://discuss.elastic.co/t/how-to-implement-an-autocomplete-functionality-with-an-existing-elasticsearch-index/48849)
**Author:** [@steliyan](https://discuss.elastic.co/u/steliyan)\ **Replies:** 1\ **Last updated:** [May 1, 2016, 11:19pm UTC](https://discuss.elastic.co/t/how-to-implement-an-autocomplete-functionality-with-an-existing-elasticsearch-index/48849 "2016-05-01T23:19:54Z")
Hello all, this is my first post in this forum. So here it goes \[:slight\_smile:\] The ES index consists of 2 types that are implicitly mapped (default mapping). One type is "person" or an author, the 2nd type is "docum… --- ## [Logstash doesn't open files](https://discuss.elastic.co/t/logstash-doesnt-open-files/287100)
**Author:** [@mrdiogon](https://discuss.elastic.co/u/mrdiogon)\ **Replies:** 8\ **Last updated:** [October 21, 2021, 11:32am UTC](https://discuss.elastic.co/t/logstash-doesnt-open-files/287100 "2021-10-21T11:32:04Z")
Hi everyone, I tried to install filebeat on a windows server which send logs to a logstash server on docker. But no indexes are created and it seems logstash doesn't get any input from logstash. Here's my configuration … --- ## [Combine random sampling with vector similarity scoring](https://discuss.elastic.co/t/combine-random-sampling-with-vector-similarity-scoring/228045)
**Author:** [@Abraham\_Sanders](https://discuss.elastic.co/u/Abraham_Sanders)\ **Replies:** 3\ **Last updated:** [April 22, 2020, 10:23am UTC](https://discuss.elastic.co/t/combine-random-sampling-with-vector-similarity-scoring/228045 "2020-04-22T10:23:50Z")
I have an index with a dense\_vector field on which I am doing text similarity search. (For reference, I followed the sample here:https://www.elastic.co/blog/text-similarity-search-with-vectors-in-elasticsearch) In the d… [Previous page](https://discuss.elastic.co/top.md?page=1421&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1423&per_page=50&period=all)