# Top **URL:** https://discuss.elastic.co/top.md?page=1423&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1424 --- ## [What is the best approach for streaming large number of docs from ES 7.1v scrolling vs slicing?](https://discuss.elastic.co/t/what-is-the-best-approach-for-streaming-large-number-of-docs-from-es-7-1v-scrolling-vs-slicing/210115)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 8\ **Last updated:** [December 2, 2019, 9:40am UTC](https://discuss.elastic.co/t/what-is-the-best-approach-for-streaming-large-number-of-docs-from-es-7-1v-scrolling-vs-slicing/210115 "2019-12-02T09:40:24Z")
--- ## [How to parse logs](https://discuss.elastic.co/t/how-to-parse-logs/67705)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 3\ **Last updated:** [December 5, 2016, 6:58am UTC](https://discuss.elastic.co/t/how-to-parse-logs/67705 "2016-12-05T06:58:43Z")
Hello All, I have a amazon redshift logging been stored on amazon s3. I want to use the data from this s3 bucket to visualize. Below are some sample logs which is generated from redshift. '2016-11-29T00:00:04Z UTC \[ … --- ## [Extract time stamp from the log data](https://discuss.elastic.co/t/extract-time-stamp-from-the-log-data/52917)
**Author:** [@Sri\_ram](https://discuss.elastic.co/u/Sri_ram)\ **Replies:** 3\ **Last updated:** [June 17, 2016, 5:33pm UTC](https://discuss.elastic.co/t/extract-time-stamp-from-the-log-data/52917 "2016-06-17T17:33:16Z")
Hello, I am trying to extract the time stamp from the header of log data. Here is my log data looks like: Page: 1 Active Internet connections Report: Total ( 223) Time: Mon Mar 17 00:14:32 EST 2014 Proto |R… --- ## [How to limit the amount of submitted documents?](https://discuss.elastic.co/t/how-to-limit-the-amount-of-submitted-documents/41325)
**Author:** [@brand0m](https://discuss.elastic.co/u/brand0m)\ **Replies:** 8\ **Last updated:** [February 9, 2016, 11:08pm UTC](https://discuss.elastic.co/t/how-to-limit-the-amount-of-submitted-documents/41325 "2016-02-09T23:08:55Z")
hello, in my project I have (index and type): test\_index/rare\_events structure. those rare\_events are submitted to ES very rarely and generally I would like to store for instance only last 10 of them. how to limit in E… --- ## [Count versus Search API](https://discuss.elastic.co/t/count-versus-search-api/15981)
**Author:** [@pulkitsinghal](https://discuss.elastic.co/u/pulkitsinghal)\ **Replies:** 3\ **Last updated:** [February 24, 2014, 12:30pm UTC](https://discuss.elastic.co/t/count-versus-search-api/15981 "2014-02-24T12:30:23Z")
Hello, I have a bool query with a filter applied to it, which runs against the \_search endpoint successfully giving "hits.total" but unfortunately it also gives a lot more data than that which I don't need. So … --- ## [OIDC integration with kibana without Elastic license](https://discuss.elastic.co/t/oidc-integration-with-kibana-without-elastic-license/374617)
**Author:** [@akmoharana](https://discuss.elastic.co/u/akmoharana)\ **Replies:** 6\ **Last updated:** [February 1, 2026, 1:57pm UTC](https://discuss.elastic.co/t/oidc-integration-with-kibana-without-elastic-license/374617 "2026-02-01T13:57:56Z")
Hi Team, I have deployed ELK on Kubernetes and am currently using OIDC integration for SSO with an Elastic Platinum license. However, the licensing cost is exceeding our budget. I’m exploring options to exclude the lice… --- ## [Index Nested object 6.2](https://discuss.elastic.co/t/index-nested-object-6-2/123054)
**Author:** [@Varan](https://discuss.elastic.co/u/Varan)\ **Replies:** 6\ **Last updated:** [March 8, 2018, 3:51pm UTC](https://discuss.elastic.co/t/index-nested-object-6-2/123054 "2018-03-08T15:51:53Z")
Hi, I've read that Elasticsearch's Nested object are usefull but aren't independant from their root index and reindex the whole document if reindexed (https://www.elastic.co/blog/managing-relations-inside-elasticsearch)… --- ## [Splitbrain on a 4 node implementation](https://discuss.elastic.co/t/splitbrain-on-a-4-node-implementation/116461)
**Author:** [@Edmund\_Cheng](https://discuss.elastic.co/u/Edmund_Cheng)\ **Replies:** 6\ **Last updated:** [January 22, 2018, 11:38am UTC](https://discuss.elastic.co/t/splitbrain-on-a-4-node-implementation/116461 "2018-01-22T11:38:11Z")
Hi, I have done some reading about the splitbrain scenario, but seems to have hit a dilemma. e.g for this structure: machine1: 2 ES nodes (with rack id 1) machine2: 2 ES nodes (with rack id 2) In the above case, all… --- ## [Got empty page when I click plugin menu when its page is already loaded](https://discuss.elastic.co/t/got-empty-page-when-i-click-plugin-menu-when-its-page-is-already-loaded/76578)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 6\ **Last updated:** [March 7, 2017, 2:15am UTC](https://discuss.elastic.co/t/got-empty-page-when-i-click-plugin-menu-when-its-page-is-already-loaded/76578 "2017-03-07T02:15:08Z")
version: kibana 5.x question: got empty page when I click plugin menu when its page is already loaded, what's wrong? --- ## [Coalesce field values together](https://discuss.elastic.co/t/coalesce-field-values-together/242378)
**Author:** [@surjray](https://discuss.elastic.co/u/surjray)\ **Replies:** 2\ **Last updated:** [August 4, 2020, 4:44pm UTC](https://discuss.elastic.co/t/coalesce-field-values-together/242378 "2020-08-04T16:44:24Z")
Is there a way to coalesce field content values into one value so that when we visualize in Kibana it shows up as one value, e.g. Say I have a field that has several values, 2 of them being system\_test, and system\_Test. … --- ## [Kibana ciphers not bringing up the port 5601](https://discuss.elastic.co/t/kibana-ciphers-not-bringing-up-the-port-5601/239542)
**Author:** [@funlearning321](https://discuss.elastic.co/u/funlearning321)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 6:16pm UTC](https://discuss.elastic.co/t/kibana-ciphers-not-bringing-up-the-port-5601/239542 "2020-07-02T18:16:28Z")
Hi, I have added the below configuration in kibana.yml but however, when the service is restarted, kibana is throwing error. server.ssl.cipherSuites: "ECDHE-RSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-R… --- ## [Individual default route for different spaces](https://discuss.elastic.co/t/individual-default-route-for-different-spaces/214506)
**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\ **Replies:** 2\ **Last updated:** [January 10, 2020, 6:37pm UTC](https://discuss.elastic.co/t/individual-default-route-for-different-spaces/214506 "2020-01-10T18:37:53Z")
Hi, my understanding of the 7.5 release of Kibana is that I can set a different default route for each space. How can I do that? I only see that default route setting in the advanced settings and they only apply to my d… --- ## [Watcher Actions](https://discuss.elastic.co/t/watcher-actions/212396)
**Author:** [@mord](https://discuss.elastic.co/u/mord)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 9:43am UTC](https://discuss.elastic.co/t/watcher-actions/212396 "2019-12-19T09:43:08Z")
I work with Watcher and I want to create alerts. my want is to check if the "\_id" parameter exists in index-2 from index-1. If it does not exist in, It should copy the log to that index (from 1 to 2). For example, at t… --- ## [Filebeat index pattern's hostname is missing](https://discuss.elastic.co/t/filebeat-index-patterns-hostname-is-missing/187943)
**Author:** [@Amine\_Abed](https://discuss.elastic.co/u/Amine_Abed)\ **Replies:** 2\ **Last updated:** [June 30, 2019, 4:17am UTC](https://discuss.elastic.co/t/filebeat-index-patterns-hostname-is-missing/187943 "2019-06-30T04:17:06Z")
Hi , i have an issue that i have two machine that ship iptables log with filebeat , when creating index pattern i found only one filebeat index pattern i want to have index patterns by hostname can you help me please --- ## [Grant permission to space is not effect](https://discuss.elastic.co/t/grant-permission-to-space-is-not-effect/184494)
**Author:** [@messi655](https://discuss.elastic.co/u/messi655)\ **Replies:** 2\ **Last updated:** [June 6, 2019, 10:40pm UTC](https://discuss.elastic.co/t/grant-permission-to-space-is-not-effect/184494 "2019-06-06T22:40:42Z")
Hi, My Elasticsearch is: 7.1.0 My Kibana is: 7.1.1 They are enabled xpack security and successful for some kind of role like kibana\_dashboard\_only\_user But my problem is: I create 2 Spaces (development and staging)… --- ## [HOW-TO search a nested field ? \[not working\]](https://discuss.elastic.co/t/how-to-search-a-nested-field-not-working/34617)
**Author:** [@nskalis](https://discuss.elastic.co/u/nskalis)\ **Replies:** 2\ **Last updated:** [November 15, 2015, 1:59pm UTC](https://discuss.elastic.co/t/how-to-search-a-nested-field-not-working/34617 "2015-11-15T13:59:57Z")
hi guys, if i have a JSON document indexed into Elasticsearch, like the following: { "\_index": "SNIP!", "\_type": "SNIP!", "\_id": "AVEHzwACg1ogiczjUHkz", "\_score": 1, "\_routing"… --- ## [Font change!](https://discuss.elastic.co/t/font-change/35966)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [November 30, 2015, 10:33pm UTC](https://discuss.elastic.co/t/font-change/35966 "2015-11-30T22:33:55Z")
G'Day all, We've just now changed the default font on the board here to Open Sans and we hope it makes things easier to read \[:smile:\] Please let us know if you have any feedback! Cheers, The Elastic Team --- ## [How to find a missing word in elastic search query](https://discuss.elastic.co/t/how-to-find-a-missing-word-in-elastic-search-query/325351)
**Author:** [@Jude\_Jerome](https://discuss.elastic.co/u/Jude_Jerome)\ **Replies:** 7\ **Last updated:** [February 20, 2023, 7:06am UTC](https://discuss.elastic.co/t/how-to-find-a-missing-word-in-elastic-search-query/325351 "2023-02-20T07:06:39Z")
Hello Team, I have a 100 + applications which sending logs daily. I want to filter out the application which does not have a specific word. For example if a application log does not have success keyword then i need to f… --- ## [Writing Spark Dataframe into ElasticSeach- Runs Successfully but Not all Data dumped](https://discuss.elastic.co/t/writing-spark-dataframe-into-elasticseach-runs-successfully-but-not-all-data-dumped/290051)
**Author:** [@Cloud11](https://discuss.elastic.co/u/Cloud11)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 6:38pm UTC](https://discuss.elastic.co/t/writing-spark-dataframe-into-elasticseach-runs-successfully-but-not-all-data-dumped/290051 "2021-12-07T18:38:54Z")
I am writing data from my spark-dataframe into ES. i did print the schema and the total count of records and it seems all ok until the dump gets started. Job runs successfully and no issue /error raised in spark job but … --- ## [How to trigger a webhook with KQL?](https://discuss.elastic.co/t/how-to-trigger-a-webhook-with-kql/264717)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 7\ **Last updated:** [February 24, 2021, 4:29pm UTC](https://discuss.elastic.co/t/how-to-trigger-a-webhook-with-kql/264717 "2021-02-24T16:29:55Z")
Dear all =) I would like to create an alert that triggers a webhook each time host:10.10.10.10 is found in the log stream example\_test. When I click on " Stack Management" and then "Create Alert" I get presented with t… --- ## [Unable to connect mysql using logstash](https://discuss.elastic.co/t/unable-to-connect-mysql-using-logstash/238969)
**Author:** [@sandy1](https://discuss.elastic.co/u/sandy1)\ **Replies:** 1\ **Last updated:** [June 28, 2020, 3:19am UTC](https://discuss.elastic.co/t/unable-to-connect-mysql-using-logstash/238969 "2020-06-28T03:19:49Z")
logstash.config: \> input { \> jdbc { \> jdbc\_connection\_string =\> "jdbc:mysql://localhost:3306/db\_name?ssl=false" \> jdbc\_user =\> "admin" \> jdbc\_password =\> "password" \> jdbc\_driver\_library =\> "D:/el… --- ## [How to intercept each request using java plugin in ElasticSearch 6.7.0](https://discuss.elastic.co/t/how-to-intercept-each-request-using-java-plugin-in-elasticsearch-6-7-0/185364)
**Author:** [@Guna](https://discuss.elastic.co/u/Guna)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 4:43pm UTC](https://discuss.elastic.co/t/how-to-intercept-each-request-using-java-plugin-in-elasticsearch-6-7-0/185364 "2019-06-14T16:43:45Z")
Hi All, I need to handle all request in Elastic Search, it should work like interceptor. I found some example but its all about 5.1.x but I need 6.7.0 version elastic search. Thanks Guna --- ## [Custom haproxy module grok pattern failing](https://discuss.elastic.co/t/custom-haproxy-module-grok-pattern-failing/172613)
**Author:** [@10acc](https://discuss.elastic.co/u/10acc)\ **Replies:** 1\ **Last updated:** [March 25, 2019, 8:29am UTC](https://discuss.elastic.co/t/custom-haproxy-module-grok-pattern-failing/172613 "2019-03-25T08:29:47Z")
I am sending my haproxy logs with filebeat straight to my elasticsearch server. My haproxy logs are standard HTTP format , just have additional %fp (frontend\_port) at the very end. Mar 16 03:28:45 proksikas haproxy\[276… --- ## [Winlogbeat doesn't connect to logstash server but filebeat does](https://discuss.elastic.co/t/winlogbeat-doesnt-connect-to-logstash-server-but-filebeat-does/160511)
**Author:** [@nu11ahnung](https://discuss.elastic.co/u/nu11ahnung)\ **Replies:** 1\ **Last updated:** [January 2, 2019, 6:55pm UTC](https://discuss.elastic.co/t/winlogbeat-doesnt-connect-to-logstash-server-but-filebeat-does/160511 "2019-01-02T18:55:14Z")
When I run winlogbeat I get this Error ERROR pipeline/output.go:100 Failed to connect to backoff(async(tcp://l92.168.0.86:5044)): lookup 192.168.0.86: no such host which is kinda weird since Test-NetConnection 192.168… --- ## [Source Code Index using ES](https://discuss.elastic.co/t/source-code-index-using-es/17874)
**Author:** [@Sivakumar](https://discuss.elastic.co/u/Sivakumar)\ **Replies:** 1\ **Last updated:** [June 3, 2014, 6:54am UTC](https://discuss.elastic.co/t/source-code-index-using-es/17874 "2014-06-03T06:54:33Z")
Hi , We have indexed 1000+ source files using elastic search . While searching any code/string we can get proper result . \*But we have 2 major problem .\* 1 ) Code Snippet/ fragments - In result page will… --- ## [RUM & APM Traces are not having same trace id](https://discuss.elastic.co/t/rum-apm-traces-are-not-having-same-trace-id/327029)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 4\ **Last updated:** [March 10, 2023, 3:31pm UTC](https://discuss.elastic.co/t/rum-apm-traces-are-not-having-same-trace-id/327029 "2023-03-10T15:31:53Z")
hello team, I came across the issue whee i am not getting same trace id for RUM & APM transaction. E.g. i initiate the transaction "add product to basket" and i get the transaction detail in APM (service - clothing) & … --- ## [Label alignment with two layers (7.15.0)](https://discuss.elastic.co/t/label-alignment-with-two-layers-7-15-0/285334)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 4\ **Last updated:** [September 28, 2021, 2:34pm UTC](https://discuss.elastic.co/t/label-alignment-with-two-layers-7-15-0/285334 "2021-09-28T14:34:19Z")
I have a lens visualization (in version 7.15.0) where I want bar chart showing "Closed" vs "Not closed" where I color "Closed" with green and "Not closed" with red. To be able to set different colors for the bars I use t… --- ## [Customizing Kibana 7.x](https://discuss.elastic.co/t/customizing-kibana-7-x/212082)
**Author:** [@aarvee](https://discuss.elastic.co/u/aarvee)\ **Replies:** 4\ **Last updated:** [January 8, 2020, 7:43am UTC](https://discuss.elastic.co/t/customizing-kibana-7-x/212082 "2020-01-08T07:43:17Z")
Hi All, I wanted to customize the logo of Kibana or probably add my company's logo in conjunction with kibana's logo itself on kibana7.x Can anyone please help me in finding a document for the same? --- ## [How to do elastic search for selected pdf file](https://discuss.elastic.co/t/how-to-do-elastic-search-for-selected-pdf-file/164980)
**Author:** [@Niranjan\_Sourabh](https://discuss.elastic.co/u/Niranjan_Sourabh)\ **Replies:** 4\ **Last updated:** [January 23, 2019, 9:45am UTC](https://discuss.elastic.co/t/how-to-do-elastic-search-for-selected-pdf-file/164980 "2019-01-23T09:45:16Z")
I have requirement that to do elastic search for particular word/text/sentences in selected pdf file not for all present in specific folder. using elasticsearch fs crawler and kibana . Any idea guyz??????? --- ## [Logstash 6.2 as root on OSX 10.12](https://discuss.elastic.co/t/logstash-6-2-as-root-on-osx-10-12/119476)
**Author:** [@spetersen](https://discuss.elastic.co/u/spetersen)\ **Replies:** 4\ **Last updated:** [February 13, 2018, 10:46am UTC](https://discuss.elastic.co/t/logstash-6-2-as-root-on-osx-10-12/119476 "2018-02-13T10:46:09Z")
Is it possible to run Logstash 6.2 as root on OSX 10.12? If it is, can somebody walk me thru that process? I can run it successfully as a User, when that User is logged in. But I can't figure out how to install it as ro… --- ## [Is it possible to open the actual file with kibana](https://discuss.elastic.co/t/is-it-possible-to-open-the-actual-file-with-kibana/55687)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 4\ **Last updated:** [July 17, 2016, 9:49am UTC](https://discuss.elastic.co/t/is-it-possible-to-open-the-actual-file-with-kibana/55687 "2016-07-17T09:49:16Z")
hi, i was wondering, is there any way to open the actual log file which the event originated from ? for example i have a log with exceptions , and i want to be able to open tha actual logs in order to see the line abo… --- ## [ILM policy to transform index](https://discuss.elastic.co/t/ilm-policy-to-transform-index/256974)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 1\ **Last updated:** [November 30, 2020, 2:10pm UTC](https://discuss.elastic.co/t/ilm-policy-to-transform-index/256974 "2020-11-30T14:10:39Z")
Is it possible to use ILM policy to the transform index result? I tried to the transform index and added alias into it, but the ILM not works as expected for transform indices. Is there any workaround to do this? Rega… --- ## [How to create a geo\_point field in logstash for a default index logstash-\*](https://discuss.elastic.co/t/how-to-create-a-geo-point-field-in-logstash-for-a-default-index-logstash/138830)
**Author:** [@George\_Cherian](https://discuss.elastic.co/u/George_Cherian)\ **Replies:** 5\ **Last updated:** [July 7, 2018, 7:13am UTC](https://discuss.elastic.co/t/how-to-create-a-geo-point-field-in-logstash-for-a-default-index-logstash/138830 "2018-07-07T07:13:37Z")
Hi How to make a field geo\_point type in logstash itself , so that I don't need to initial create a index manually with geo\_point temple and the use it in logstash , which is double work. Thanks George --- ## [Loads of geoip errors](https://discuss.elastic.co/t/loads-of-geoip-errors/75829)
**Author:** [@PSi\_AU](https://discuss.elastic.co/u/PSi_AU)\ **Replies:** 5\ **Last updated:** [February 22, 2017, 1:18am UTC](https://discuss.elastic.co/t/loads-of-geoip-errors/75829 "2017-02-22T01:18:58Z")
I'm getting loads of the following types of error: \[2017-02-21T18:22:02,599\]\[WARN \]\[logstash.outputs.elasticsearch\] Failed action. {:status=\>400, :action=\>\["index", {:id=\>nil, :index=\>"filebeat-2017.02.21", :type=\>"s… --- ## [Can Elasticsearch on Kubernetes safely reuse data from PVs that were detached after a node went down?](https://discuss.elastic.co/t/can-elasticsearch-on-kubernetes-safely-reuse-data-from-pvs-that-were-detached-after-a-node-went-down/271207)
**Author:** [@mattwelke](https://discuss.elastic.co/u/mattwelke)\ **Replies:** 3\ **Last updated:** [April 27, 2021, 3:52pm UTC](https://discuss.elastic.co/t/can-elasticsearch-on-kubernetes-safely-reuse-data-from-pvs-that-were-detached-after-a-node-went-down/271207 "2021-04-27T15:52:51Z")
I'm looking into different ways to deploy Elasticsearch on Kubernetes. My understanding so far is that it's normal to use the ECK operator pattern to deploy if you're deploying to Kubernetes, and that this causes Statef… --- ## [New Document not getting added by fscrawler](https://discuss.elastic.co/t/new-document-not-getting-added-by-fscrawler/212472)
**Author:** [@mdr\_8](https://discuss.elastic.co/u/mdr_8)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 12:22pm UTC](https://discuss.elastic.co/t/new-document-not-getting-added-by-fscrawler/212472 "2019-12-19T12:22:35Z")
I have added 'Rule engine evaluation.docx' in c:\\tmp\\es I have run the 'touch' command for the above file. The file is not getting added in the index. Following is the output for fscrawler job execution for the above … --- ## [New sysmon event\_id 22, DNS Query](https://discuss.elastic.co/t/new-sysmon-event-id-22-dns-query/194635)
**Author:** [@Ian\_Boje](https://discuss.elastic.co/u/Ian_Boje)\ **Replies:** 3\ **Last updated:** [August 17, 2019, 4:24pm UTC](https://discuss.elastic.co/t/new-sysmon-event-id-22-dns-query/194635 "2019-08-17T16:24:52Z")
Hi Everybody I'm not much of a programmer, but I'm tempted to try to learn to submit some changes to winlogbeat, but would be interested in finding out if I'm doing this right. Newer versions of sysmon added event\_id 2… --- ## [Change logo in x-pack reports](https://discuss.elastic.co/t/change-logo-in-x-pack-reports/93532)
**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 10:08am UTC](https://discuss.elastic.co/t/change-logo-in-x-pack-reports/93532 "2017-07-21T10:08:33Z")
Is it possible to change the elastic logo which gets downloaded as PDF in the x-pack report ? --- ## [Multiline filter - single threaded?](https://discuss.elastic.co/t/multiline-filter-single-threaded/77783)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 3\ **Last updated:** [March 8, 2017, 1:18pm UTC](https://discuss.elastic.co/t/multiline-filter-single-threaded/77783 "2017-03-08T13:18:40Z")
Hi All, it looks like the multi-line filter cannot be used with more than one Logstash worker: I get the following error, when the Logstash gets started with -w N (N \> 1): 09:01:17.819 \[\[main\]\>worker0\] ERROR logstash… --- ## [Token Chars Mapping to Ngram Filter ElasticSearch NEST](https://discuss.elastic.co/t/token-chars-mapping-to-ngram-filter-elasticsearch-nest/54131)
**Author:** [@ASN](https://discuss.elastic.co/u/ASN)\ **Replies:** 0\ **Last updated:** [June 28, 2016, 8:56am UTC](https://discuss.elastic.co/t/token-chars-mapping-to-ngram-filter-elasticsearch-nest/54131 "2016-06-28T08:56:53Z")
I'm trying to replicate the below mappings using NEST and facing an issue while mapping the token chars to the tokenizer. { "settings": { "analysis": { "filter": { "nGram\_filter": { … --- ## [Simultaneous scroll requests over same index](https://discuss.elastic.co/t/simultaneous-scroll-requests-over-same-index/49580)
**Author:** [@lalitr](https://discuss.elastic.co/u/lalitr)\ **Replies:** 3\ **Last updated:** [May 11, 2016, 3:45am UTC](https://discuss.elastic.co/t/simultaneous-scroll-requests-over-same-index/49580 "2016-05-11T03:45:12Z")
Hi, I have use case where-in two different processes end up doing scroll query to extract all data from same Elasticsearch index simultaneously and this seem to cause one (or both) of them to fail with below error; s… --- ## [Custom Settings for a plugin](https://discuss.elastic.co/t/custom-settings-for-a-plugin/14265)
**Author:** [@Mark\_Conlin](https://discuss.elastic.co/u/Mark_Conlin)\ **Replies:** 3\ **Last updated:** [November 5, 2013, 8:56pm UTC](https://discuss.elastic.co/t/custom-settings-for-a-plugin/14265 "2013-11-05T20:56:53Z")
How should I implement custom settings (that I wish to persist across node restarts) inside my plugin? I will make endpoints to update and view those values, I am just not sure of the appropriate usage of Settings … --- ## [Grok pattern not being applied in logstash but working on grok debugger](https://discuss.elastic.co/t/grok-pattern-not-being-applied-in-logstash-but-working-on-grok-debugger/97384)
**Author:** [@Swaroop\_Chandre](https://discuss.elastic.co/u/Swaroop_Chandre)\ **Replies:** 2\ **Last updated:** [September 1, 2017, 6:45am UTC](https://discuss.elastic.co/t/grok-pattern-not-being-applied-in-logstash-but-working-on-grok-debugger/97384 "2017-09-01T06:45:44Z")
My grok pattern is working on grok debugger but when reading from filebeat my grok pattern is not applied. My syslog-filter.conf file filter { if \[type\] == “log” { grok { patterns\_dir =\> \["/etc/logstash/conf.d/patter… --- ## [Version conflict - no document found on update-by-query](https://discuss.elastic.co/t/version-conflict-no-document-found-on-update-by-query/338262)
**Author:** [@Balagopal\_Kanattil](https://discuss.elastic.co/u/Balagopal_Kanattil)\ **Replies:** 1\ **Last updated:** [July 14, 2023, 3:40pm UTC](https://discuss.elastic.co/t/version-conflict-no-document-found-on-update-by-query/338262 "2023-07-14T15:40:24Z")
Hi, I am running a self hosted ES cluster with version 6.8.1. I am trying to update some docs using update-by-query API. It fails for some documents with following error: version\_conflict\_engine\_exception version con… --- ## [What user role do I need need for shipping logs from fluentd to elastic search](https://discuss.elastic.co/t/what-user-role-do-i-need-need-for-shipping-logs-from-fluentd-to-elastic-search/255910)
**Author:** [@FASUGBA\_boluwatife](https://discuss.elastic.co/u/FASUGBA_boluwatife)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 10:20pm UTC](https://discuss.elastic.co/t/what-user-role-do-i-need-need-for-shipping-logs-from-fluentd-to-elastic-search/255910 "2020-11-18T22:20:38Z")
Hi guys, please what user role do I need to assign to a user I created in my elastic cloud cluster to be able to forward logs from fluentd to elastic search? Thanks --- ## [Conditional math expression in TSVB](https://discuss.elastic.co/t/conditional-math-expression-in-tsvb/220703)
**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 5:55pm UTC](https://discuss.elastic.co/t/conditional-math-expression-in-tsvb/220703 "2020-02-24T17:55:54Z")
Hello, I am just curious if it would be possible to write a conditional statement inside the expression editor of the TSVB Math aggregation. For instance, consider I have an aggregation in TSVB metric which calculates a… --- ## [How to bind searchResult from ElasticSearch into Gridview (C# ASP.NET) by using NEST](https://discuss.elastic.co/t/how-to-bind-searchresult-from-elasticsearch-into-gridview-c-asp-net-by-using-nest/180649)
**Author:** [@LawrenceSPK](https://discuss.elastic.co/u/LawrenceSPK)\ **Replies:** 1\ **Last updated:** [May 12, 2019, 5:29pm UTC](https://discuss.elastic.co/t/how-to-bind-searchresult-from-elasticsearch-into-gridview-c-asp-net-by-using-nest/180649 "2019-05-12T17:29:47Z")
I need to bind the search result from NEST (ElasticSearch) to a Gridview in ASP.NET (Webform). Code I get the result from ElasticSearch from using NEST: public class Address { public int SN { get; set; } publ… --- ## [Logstash failed to execute action :exception=\>"Java::JavaLang::IllegalArgumentException", :message=\>"Illegal pattern component: O"](https://discuss.elastic.co/t/logstash-failed-to-execute-action-exception-java-illegalargumentexception-message-illegal-pattern-component-o/160616)
**Author:** [@Max\_Shen](https://discuss.elastic.co/u/Max_Shen)\ **Replies:** 1\ **Last updated:** [December 12, 2018, 9:46pm UTC](https://discuss.elastic.co/t/logstash-failed-to-execute-action-exception-java-illegalargumentexception-message-illegal-pattern-component-o/160616 "2018-12-12T21:46:34Z")
seems to be related to the date conversion, but couldn't figure out why it complains about token 0 My Config # Sample Logstash configuration for creating a simple # Beats -\> Logstash -\> Elasticsearch pipeline. inpu… --- ## [Need help with suggest in NEST](https://discuss.elastic.co/t/need-help-with-suggest-in-nest/155571)
**Author:** [@jasman](https://discuss.elastic.co/u/jasman)\ **Replies:** 1\ **Last updated:** [November 7, 2018, 8:25am UTC](https://discuss.elastic.co/t/need-help-with-suggest-in-nest/155571 "2018-11-07T08:25:57Z")
Hi Using C# Nest client Elasticsearch 6.3 I'm attempting to add suggest when search queries return zero results. However, I get this error message UnexpectedElasticsearchClientException: Error setting value to 'Sugges… --- ## [Logstash http poller multiple URL's - output random from any 3 URL's](https://discuss.elastic.co/t/logstash-http-poller-multiple-urls-output-random-from-any-3-urls/151042)
**Author:** [@Harish\_Malu](https://discuss.elastic.co/u/Harish_Malu)\ **Replies:** 1\ **Last updated:** [October 9, 2018, 6:57am UTC](https://discuss.elastic.co/t/logstash-http-poller-multiple-urls-output-random-from-any-3-urls/151042 "2018-10-09T06:57:41Z")
I have an logstash pipeline with http poller urls. Each urls will send JSON data for a given server name. Below is my conf - input { http\_poller { urls =\> { servsb =\> "http://servsb:8003/servmetric/json/" servsd =\> … [Previous page](https://discuss.elastic.co/top.md?page=1422&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1424&per_page=50&period=all)