# Top

**URL:** https://discuss.elastic.co/top.md?page=1436&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1437

---

## [Change timestamp format for existing index](https://discuss.elastic.co/t/change-timestamp-format-for-existing-index/195593)

<div class="topic-metadata">

**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 7:20am UTC](https://discuss.elastic.co/t/change-timestamp-format-for-existing-index/195593 "2019-08-19T07:20:24Z")

</div>

I read the date time is one of the only mappings that can be altered for an existing index. I'm attempting to alter the date format as follows: curl http://localhost:9200/web/\_mapping/\_timestamp?include\_type\_name=true -…

---

## [Nginx logs from stdout coming to error pipeline instead of access pipeline](https://discuss.elastic.co/t/nginx-logs-from-stdout-coming-to-error-pipeline-instead-of-access-pipeline/194772)

<div class="topic-metadata">

**Author:** [@poma](https://discuss.elastic.co/u/poma)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 2:18am UTC](https://discuss.elastic.co/t/nginx-logs-from-stdout-coming-to-error-pipeline-instead-of-access-pipeline/194772 "2019-08-12T02:18:13Z")

</div>

edit: read below for update to initial question I'm getting Provided Grok expressions do not match field value even though \_simulate works with exact same string. Error message: "message": "172.18.0.2 - - \[12/Aug/2019…

---

## [Rest High Level Client - TimeoutException](https://discuss.elastic.co/t/rest-high-level-client-timeoutexception/123668)

<div class="topic-metadata">

**Author:** [@Pavel\_Sapozhnikov](https://discuss.elastic.co/u/Pavel_Sapozhnikov)\
**Replies:** 1\
**Last updated:** [March 16, 2018, 9:22am UTC](https://discuss.elastic.co/t/rest-high-level-client-timeoutexception/123668 "2018-03-16T09:22:52Z")

</div>

Hello Folks When I use client.updateAsync I am getting the java.util.concurrent.TimeoutException within onFailure method. I see the messages comes through to Kibana, so it almost feels like annoying exception but I defi…

---

## [Can Watcher POST Webhook contain XML in the body?](https://discuss.elastic.co/t/can-watcher-post-webhook-contain-xml-in-the-body/64214)

<div class="topic-metadata">

**Author:** [@chromechris](https://discuss.elastic.co/u/chromechris)\
**Replies:** 1\
**Last updated:** [October 28, 2016, 7:21am UTC](https://discuss.elastic.co/t/can-watcher-post-webhook-contain-xml-in-the-body/64214 "2016-10-28T07:21:44Z")

</div>

Can Watcher POST Webhook contain XML in the body? I have been using Sense (The Chrome Plugin) to send my watches, but when I try to create one using XML as part of a custom header POST Webhook Watch, I am unable to becau…

---

## [How does the dynamic typing work in filebeat](https://discuss.elastic.co/t/how-does-the-dynamic-typing-work-in-filebeat/44569)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 1\
**Last updated:** [March 17, 2016, 2:41pm UTC](https://discuss.elastic.co/t/how-does-the-dynamic-typing-work-in-filebeat/44569 "2016-03-17T14:41:39Z")

</div>

We are looking to send a plethora of different logs into a downstream logstash cluster. How exactly does the type setting work within filebeat, so that I can appropriately tag incoming data in logstash in order to grok…

---

## [How persistence works in ElasticSearch](https://discuss.elastic.co/t/how-persistence-works-in-elasticsearch/2872)

<div class="topic-metadata">

**Author:** [@Berkay\_Mollamustafao](https://discuss.elastic.co/u/Berkay_Mollamustafao)\
**Replies:** 1\
**Last updated:** [March 26, 2010, 9:04pm UTC](https://discuss.elastic.co/t/how-persistence-works-in-elasticsearch/2872 "2010-03-26T21:04:10Z")

</div>

I can use some help verifying/understanding how persistence works. Here is my understanding of how it works: Regardless of whether the index is stored in memory or file system, it is considered temporary and removed w…

---

## [Authentication Exception](https://discuss.elastic.co/t/authentication-exception/302177)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 2\
**Last updated:** [April 12, 2022, 11:18am UTC](https://discuss.elastic.co/t/authentication-exception/302177 "2022-04-12T11:18:43Z")

</div>

Hi dears I have 4nodes of Elasticsearch 7.16.2 and 1node with Kibana, apm-server and Metricbeat. There are 3 instances of Logstash running on Elasticsearch nodes (3 of 4 servers have both ES and Logstash) My cluster wo…

---

## [Original fields name changed to abnormal keyword in new visualization (Kibana)](https://discuss.elastic.co/t/original-fields-name-changed-to-abnormal-keyword-in-new-visualization-kibana/188227)

<div class="topic-metadata">

**Author:** [@kyaw](https://discuss.elastic.co/u/kyaw)\
**Replies:** 2\
**Last updated:** [July 2, 2019, 3:26am UTC](https://discuss.elastic.co/t/original-fields-name-changed-to-abnormal-keyword-in-new-visualization-kibana/188227 "2019-07-02T03:26:13Z")

</div>

When creating a new visualization, original fields name changed to abnormal keywords like. but in raw log json file there is no extra fields name as shown in above figure. Is there anyone who happened like this iss…

---

## [ERROR: Installation Aborted](https://discuss.elastic.co/t/error-installation-aborted/183476)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 2\
**Last updated:** [May 30, 2019, 7:31am UTC](https://discuss.elastic.co/t/error-installation-aborted/183476 "2019-05-30T07:31:50Z")

</div>

Hey I'm running Logstash 6.5.3 I want to install plugin but I am getting error. bin/logstash-plugin install logstash-output-elasticsearch-license Validating logstash-output-elasticsearch-license Installing lo…

---

## [Data loss ,bulk rejected high in elastic search](https://discuss.elastic.co/t/data-loss-bulk-rejected-high-in-elastic-search/140997)

<div class="topic-metadata">

**Author:** [@manish\_jaiswal](https://discuss.elastic.co/u/manish_jaiswal)\
**Replies:** 2\
**Last updated:** [July 22, 2018, 5:18am UTC](https://discuss.elastic.co/t/data-loss-bulk-rejected-high-in-elastic-search/140997 "2018-07-22T05:18:08Z")

</div>

I am sending data from filebeat (6.3) from 138 servers to elastic search 6.3.( 3 master and 17 data nodes with (6data node 30gb memory and 11 with 15gb memeory)) getting bulk failure in filebeat when checking in elastic…

---

## [Unable to send json documents to elasticsearch](https://discuss.elastic.co/t/unable-to-send-json-documents-to-elasticsearch/86486)

<div class="topic-metadata">

**Author:** [@shyamalaponnada](https://discuss.elastic.co/u/shyamalaponnada)\
**Replies:** 2\
**Last updated:** [May 22, 2017, 3:29pm UTC](https://discuss.elastic.co/t/unable-to-send-json-documents-to-elasticsearch/86486 "2017-05-22T15:29:39Z")

</div>

Hi everyone, I have able to start the ES and trying to send the json document to the server by using curl -XPUT 'http://localhost:9200/test/test/1' -d @test22.json but i am getting the error "curl: (52) Empty reply fro…

---

## [Unwanted Automatic Rounding of double](https://discuss.elastic.co/t/unwanted-automatic-rounding-of-double/68287)

<div class="topic-metadata">

**Author:** [@Lars2](https://discuss.elastic.co/u/Lars2)\
**Replies:** 2\
**Last updated:** [December 7, 2016, 12:12pm UTC](https://discuss.elastic.co/t/unwanted-automatic-rounding-of-double/68287 "2016-12-07T12:12:38Z")

</div>

I have a longitude and latitude field in my database, which feed elasticsearch using the elasticsearch-jdbc. Both my longitude and latitude values are stored in ElasticSearch as a "Double". The database contains "51.9851…

---

## [Get Total Sum Bucket without Including All Buckets](https://discuss.elastic.co/t/get-total-sum-bucket-without-including-all-buckets/47356)

<div class="topic-metadata">

**Author:** [@Ahmad\_Hayam](https://discuss.elastic.co/u/Ahmad_Hayam)\
**Replies:** 2\
**Last updated:** [April 14, 2016, 3:16pm UTC](https://discuss.elastic.co/t/get-total-sum-bucket-without-including-all-buckets/47356 "2016-04-14T15:16:04Z")

</div>

Can we get sum of original bucket (all aggregation result) data from elasticsearch aggregation without showing all bucket result? I'm using elasticsearch 2.2. Ex: this is the original result of original query (just to …

---

## [Where do we put logstash template?](https://discuss.elastic.co/t/where-do-we-put-logstash-template/39408)

<div class="topic-metadata">

**Author:** [@MaxOrelus](https://discuss.elastic.co/u/MaxOrelus)\
**Replies:** 2\
**Last updated:** [January 18, 2016, 3:51am UTC](https://discuss.elastic.co/t/where-do-we-put-logstash-template/39408 "2016-01-18T03:51:50Z")

</div>

I'm somewhat new to the ELK stack and I'm currently putting together my dev environment so I can get familiar with the different products. I already have gone through the process of setting up ElasticSearch, Logstash, an…

---

## [How to define fields in kibana](https://discuss.elastic.co/t/how-to-define-fields-in-kibana/36856)

<div class="topic-metadata">

**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\
**Replies:** 2\
**Last updated:** [December 11, 2015, 11:39am UTC](https://discuss.elastic.co/t/how-to-define-fields-in-kibana/36856 "2015-12-11T11:39:00Z")

</div>

Hi, I am using Acconts.json as a data file which is having different fields e.g firstName, lastName ,city etc but I am not able to get the same as different fields in kibana. Please suggest how to apply filters to get …

---

## [Shield config locations confusion](https://discuss.elastic.co/t/shield-config-locations-confusion/27835)

<div class="topic-metadata">

**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\
**Replies:** 2\
**Last updated:** [August 21, 2015, 3:30pm UTC](https://discuss.elastic.co/t/shield-config-locations-confusion/27835 "2015-08-21T15:30:14Z")

</div>

hi, I had some issues with the Shield config locations, I created an issue at the elasticsearch-puppet repository, since the problem only applied when adding an extra subfolder between /etc/elasticsearch and the elastics…

---

## [Elastic on Secure YARN](https://discuss.elastic.co/t/elastic-on-secure-yarn/23349)

<div class="topic-metadata">

**Author:** [@Eric\_Walk](https://discuss.elastic.co/u/Eric_Walk)\
**Replies:** 2\
**Last updated:** [April 22, 2015, 2:43pm UTC](https://discuss.elastic.co/t/elastic-on-secure-yarn/23349 "2015-04-22T14:43:10Z")

</div>

Hi All, I'm working on running elasticsearch on yarn in a secured hadoop cluster (HDP 2.2). It is failing when instantiating the containers with the error below. The issue appears that the Kerberos based JAAS P…

---

## [There are wrong values with memory usage in kubernetes metricbeat module](https://discuss.elastic.co/t/there-are-wrong-values-with-memory-usage-in-kubernetes-metricbeat-module/288261)

<div class="topic-metadata">

**Author:** [@Sergio\_Ferreyra](https://discuss.elastic.co/u/Sergio_Ferreyra)\
**Replies:** 4\
**Last updated:** [November 24, 2021, 3:53am UTC](https://discuss.elastic.co/t/there-are-wrong-values-with-memory-usage-in-kubernetes-metricbeat-module/288261 "2021-11-24T03:53:17Z")

</div>

Hi team, Having an issue with the values of this metric. kubernetes.node.memory.usage.bytes Looks like is not taking the proper values, for example: I am using that metric to get the memory usage but is not the cor…

---

## [Waiting for a quote (Gold license Elastic Stack on Kubernetes)](https://discuss.elastic.co/t/waiting-for-a-quote-gold-license-elastic-stack-on-kubernetes/288631)

<div class="topic-metadata">

**Author:** [@WookWook](https://discuss.elastic.co/u/WookWook)\
**Replies:** 1\
**Last updated:** [November 8, 2021, 3:59pm UTC](https://discuss.elastic.co/t/waiting-for-a-quote-gold-license-elastic-stack-on-kubernetes/288631 "2021-11-08T15:59:43Z")

</div>

Hello there, me and my company are waiting for a quote for many weeks now. We have a self managed Elastic Cloud on Kubernetes cluster running. Want to buy a gold license for a 3 node environment. I started here Offizie…

---

## [Limited indexing rate from one host](https://discuss.elastic.co/t/limited-indexing-rate-from-one-host/199151)

<div class="topic-metadata">

**Author:** [@Dmitry1](https://discuss.elastic.co/u/Dmitry1)\
**Replies:** 4\
**Last updated:** [September 19, 2019, 5:12pm UTC](https://discuss.elastic.co/t/limited-indexing-rate-from-one-host/199151 "2019-09-19T17:12:07Z")

</div>

Hello, i see strange ES behavior on my test cluster. Cluster has one node and has only one index for logs that have 10 primary shards no replicas. Some tuning of this index: "index.refresh\_interval": "30s", "index.tran…

---

## [Distribute X-Pack](https://discuss.elastic.co/t/distribute-x-pack/86233)

<div class="topic-metadata">

**Author:** [@rgogolok](https://discuss.elastic.co/u/rgogolok)\
**Replies:** 4\
**Last updated:** [May 18, 2017, 2:26pm UTC](https://discuss.elastic.co/t/distribute-x-pack/86233 "2017-05-18T14:26:13Z")

</div>

Hey, we're creating an Elasticsearch service that allows end users to dynamically create Elasticsearch installations. We want to bundle the X-Pack plugin with those installations. This means: - we ship an 'installati…

---

## [Retrieve document where certain field exists](https://discuss.elastic.co/t/retrieve-document-where-certain-field-exists/48150)

<div class="topic-metadata">

**Author:** [@bharath\_meka](https://discuss.elastic.co/u/bharath_meka)\
**Replies:** 4\
**Last updated:** [April 24, 2016, 1:21pm UTC](https://discuss.elastic.co/t/retrieve-document-where-certain-field-exists/48150 "2016-04-24T13:21:14Z")

</div>

Hi, I'm trying to find documents in which certain field exist using POST. Here is the code snippet that I'm using. For example, I would like to find all the documents in which "activity\_name" field is present. \> { \> …

---

## [Optimum value for "max\_num\_segments"](https://discuss.elastic.co/t/optimum-value-for-max-num-segments/12733)

<div class="topic-metadata">

**Author:** [@subin](https://discuss.elastic.co/u/subin)\
**Replies:** 4\
**Last updated:** [July 11, 2013, 3:21pm UTC](https://discuss.elastic.co/t/optimum-value-for-max-num-segments/12733 "2013-07-11T15:21:09Z")

</div>

Hi, I have an ES v0.90.0 running on a single server with 1 shard 0 replica per index configuration. What is the optimum value for the old index optimize call: curl -XPOST 'http://localhost:9200/twitter/\_optimiz…

---

## [Filebeat setup --dashboards](https://discuss.elastic.co/t/filebeat-setup-dashboards/160961)

<div class="topic-metadata">

**Author:** [@Thibault](https://discuss.elastic.co/u/Thibault)\
**Replies:** 3\
**Last updated:** [January 4, 2019, 12:16pm UTC](https://discuss.elastic.co/t/filebeat-setup-dashboards/160961 "2019-01-04T12:16:28Z")

</div>

Hi everybody ! I'm a french student and i try to install ELK. I found this tuto: https://github.com/justmeandopensource/elk/blob/master/INSTALL-CentOS7.md I follow it, all works but when i try this command: filebeat …

---

## [Filebeat not getting data from all configured sources](https://discuss.elastic.co/t/filebeat-not-getting-data-from-all-configured-sources/158337)

<div class="topic-metadata">

**Author:** [@Astarandel](https://discuss.elastic.co/u/Astarandel)\
**Replies:** 3\
**Last updated:** [November 27, 2018, 3:45pm UTC](https://discuss.elastic.co/t/filebeat-not-getting-data-from-all-configured-sources/158337 "2018-11-27T15:45:41Z")

</div>

Greetings, we are experiencing the following issue with Filebeat. After we start the Filebeat instance it registers three inputs. Unfortunately it pulls info only from one. Here is the debug log. 018-11-27T11:34:26.895…

---

## [Configuring Multiple Pipelines](https://discuss.elastic.co/t/configuring-multiple-pipelines/118299)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 3\
**Last updated:** [February 27, 2018, 8:22pm UTC](https://discuss.elastic.co/t/configuring-multiple-pipelines/118299 "2018-02-27T20:22:21Z")

</div>

Logstash 6.1.1 on Server 2012 R2 Trying to configure multiple pipelines but coming up short. In pipelines.yml: - pipeline.id: Beats\_Pipe path.config: "c:/Logstash/config/beats.yml" Here's my beats.yml pipeline: i…

---

## [Are we able to add basepath on ECE repository setting?](https://discuss.elastic.co/t/are-we-able-to-add-basepath-on-ece-repository-setting/95079)

<div class="topic-metadata">

**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\
**Replies:** 3\
**Last updated:** [August 3, 2017, 1:03pm UTC](https://discuss.elastic.co/t/are-we-able-to-add-basepath-on-ece-repository-setting/95079 "2017-08-03T13:03:46Z")

</div>

HI ECE: I tried to add basepath attributes on ECE repository by clicking the advanced button. But seems doesnt work. Are we able to do this in ECE? Or did I miss anything?

---

## [Metricbeat logs contain errors about nonexistent Redis properties](https://discuss.elastic.co/t/metricbeat-logs-contain-errors-about-nonexistent-redis-properties/56923)

<div class="topic-metadata">

**Author:** [@ladenedge](https://discuss.elastic.co/u/ladenedge)\
**Replies:** 3\
**Last updated:** [August 3, 2016, 10:48am UTC](https://discuss.elastic.co/t/metricbeat-logs-contain-errors-about-nonexistent-redis-properties/56923 "2016-08-03T10:48:37Z")

</div>

Metricbeat-5.0.0-alpha4 Redis v3.0.501 (Windows) My log contains the following errors, repeated on every period: 2016-08-01T14:56:42-04:00 ERR Key does not exist in in data: gcc\_version 2016-08-01T14:56:42-04:00 ERR …

---

## [Transport vs Node client for large bulk inserts?](https://discuss.elastic.co/t/transport-vs-node-client-for-large-bulk-inserts/52885)

<div class="topic-metadata">

**Author:** [@datvikash](https://discuss.elastic.co/u/datvikash)\
**Replies:** 3\
**Last updated:** [June 16, 2016, 8:58pm UTC](https://discuss.elastic.co/t/transport-vs-node-client-for-large-bulk-inserts/52885 "2016-06-16T20:58:55Z")

</div>

I am trying to determine which would be a better fit for a large bulk upload ( ~ 1 trillion items for a single index). I have tried with the http api, but its very slow and painful (it has taken a week and only inserted …

---

## [Query by keywords and phrase. Performance question](https://discuss.elastic.co/t/query-by-keywords-and-phrase-performance-question/10785)

<div class="topic-metadata">

**Author:** [@Victor\_Soloh](https://discuss.elastic.co/u/Victor_Soloh)\
**Replies:** 3\
**Last updated:** [February 19, 2013, 1:14am UTC](https://discuss.elastic.co/t/query-by-keywords-and-phrase-performance-question/10785 "2013-02-19T01:14:01Z")

</div>

Hello, I am relatively new to Elasticsearch. I do understand the basic concepts but have trouble with more advanced queries. I am trying to build a query which searches by several keywords on 2 fields: 'title' an…

---

## [Stuck upgrading elastic search from 6.x to 7.17](https://discuss.elastic.co/t/stuck-upgrading-elastic-search-from-6-x-to-7-17/300393)

<div class="topic-metadata">

**Author:** [@CapitanRedBeard](https://discuss.elastic.co/u/CapitanRedBeard)\
**Replies:** 5\
**Last updated:** [March 25, 2022, 4:53pm UTC](https://discuss.elastic.co/t/stuck-upgrading-elastic-search-from-6-x-to-7-17/300393 "2022-03-25T16:53:17Z")

</div>

I have two Elasticsearch deployments hosted on the elastic cloud. My DEV deployment is on v6.8.9 with kibana on v6.6.1 thus it has a "7.0 Upgrade Assistant" in the Management options in kibana. My PROD deployment is on…

---

## [Reading multiline exceptions - filebeat](https://discuss.elastic.co/t/reading-multiline-exceptions-filebeat/297459)

<div class="topic-metadata">

**Author:** [@Rashmika\_Gamage](https://discuss.elastic.co/u/Rashmika_Gamage)\
**Replies:** 5\
**Last updated:** [February 21, 2022, 1:23pm UTC](https://discuss.elastic.co/t/reading-multiline-exceptions-filebeat/297459 "2022-02-21T13:23:26Z")

</div>

I am trying to read IBM websphere logs but as shown in the picture, it is hard to read the logs. since it is hard to find a pattern. Can someone please suggest a method? Also as you can see there are multiple timesta…

---

## [Scripted field error al crear](https://discuss.elastic.co/t/scripted-field-error-al-crear/290667)

<div class="topic-metadata">

**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\
**Replies:** 5\
**Last updated:** [December 2, 2021, 11:14am UTC](https://discuss.elastic.co/t/scripted-field-error-al-crear/290667 "2021-12-02T11:14:31Z")

</div>

Buenos días, soy nuevo en el manejo y estoy intentado crear un scripted field y me da error. Alguien me puede ayudar, Gracias. Nombre scripted\_field: PRUEBA if(doc\['CAMPO'\].value.toString().substring(0,5)==("valor")){…

---

## [Using Curator](https://discuss.elastic.co/t/using-curator/225032)

<div class="topic-metadata">

**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\
**Replies:** 5\
**Last updated:** [March 25, 2020, 8:56pm UTC](https://discuss.elastic.co/t/using-curator/225032 "2020-03-25T20:56:21Z")

</div>

I've been tasked with setting up Curator to delete data more than 40 days old on our existing ELK 6.8.6 server. I did not set up elk and am pretty much unfamiliar with how it is configured. I set up the yum repository,…

---

## [Vis plugin development - Getting custom visualization to save editor parameters](https://discuss.elastic.co/t/vis-plugin-development-getting-custom-visualization-to-save-editor-parameters/193880)

<div class="topic-metadata">

**Author:** [@esantonicolvin](https://discuss.elastic.co/u/esantonicolvin)\
**Replies:** 5\
**Last updated:** [August 8, 2019, 8:43pm UTC](https://discuss.elastic.co/t/vis-plugin-development-getting-custom-visualization-to-save-editor-parameters/193880 "2019-08-08T20:43:19Z")

</div>

Hi, I'm developing a custom visualization for Kibana using the base visualization type. For part of my visualization, I have an options template HTML file with sliders and checkboxes that are used to set some vis.params…

---

## [Warnings after changing logstash 5.1.1 to 5.1.2](https://discuss.elastic.co/t/warnings-after-changing-logstash-5-1-1-to-5-1-2/72030)

<div class="topic-metadata">

**Author:** [@tbw](https://discuss.elastic.co/u/tbw)\
**Replies:** 5\
**Last updated:** [January 23, 2017, 1:43pm UTC](https://discuss.elastic.co/t/warnings-after-changing-logstash-5-1-1-to-5-1-2/72030 "2017-01-23T13:43:29Z")

</div>

After updating from logstash 5.1.1 to 5.1.2 (also elastic) i see those messages: {"log":"14:56:02.635 \[\[main\]\\u003eworker0\] WARN logstash.outputs.elasticsearch - Failed action. {:status=\\u003e409, :action=\\u003e\["upda…

---

## [Error when exporting more than 1000 saved objects](https://discuss.elastic.co/t/error-when-exporting-more-than-1000-saved-objects/317497)

<div class="topic-metadata">

**Author:** [@jonas27](https://discuss.elastic.co/u/jonas27)\
**Replies:** 7\
**Last updated:** [November 2, 2022, 12:57pm UTC](https://discuss.elastic.co/t/error-when-exporting-more-than-1000-saved-objects/317497 "2022-11-02T12:57:58Z")

</div>

Hi, I am hitting an error in our infrastructure when exporting more than =\< 1000 saved objects (visualizations in particular) from either the API or inside the dev tools. However, when exporting the same objects via a li…

---

## [Reset Built-in users](https://discuss.elastic.co/t/reset-built-in-users/259003)

<div class="topic-metadata">

**Author:** [@Charly\_ROCH](https://discuss.elastic.co/u/Charly_ROCH)\
**Replies:** 1\
**Last updated:** [December 18, 2020, 3:57am UTC](https://discuss.elastic.co/t/reset-built-in-users/259003 "2020-12-18T03:57:34Z")

</div>

I am building elasticsearch cluster with SSL following this tutorial : My first node is a debian with elastic running as a service. I ran the command : bin/elasticsearch-setup-passwords auto But when listing users w…

---

## [XML Filter Output to Ruby Code](https://discuss.elastic.co/t/xml-filter-output-to-ruby-code/253870)

<div class="topic-metadata">

**Author:** [@chayelastic](https://discuss.elastic.co/u/chayelastic)\
**Replies:** 7\
**Last updated:** [November 3, 2020, 2:22am UTC](https://discuss.elastic.co/t/xml-filter-output-to-ruby-code/253870 "2020-11-03T02:22:40Z")

</div>

Hello, In my Logstash config, I have an XML filter with xpath that allows me to read the XML tags and store in a variable/field. It works well. Next step, I had to use a Ruby Filter for I need to transpose a couple o…

---

## [Error while configuring Kibana Development setup](https://discuss.elastic.co/t/error-while-configuring-kibana-development-setup/234690)

<div class="topic-metadata">

**Author:** [@anilreddyd](https://discuss.elastic.co/u/anilreddyd)\
**Replies:** 7\
**Last updated:** [June 3, 2020, 2:00pm UTC](https://discuss.elastic.co/t/error-while-configuring-kibana-development-setup/234690 "2020-06-03T14:00:36Z")

</div>

Hi, I am trying to develop Kibana development environment to do the changes and rebuild. During the setup process while executing the command "yarn kbn bootstrap", I am getting the below error ERROR Kibana pre-commit …

---

## [OpenJDK 64-Bit Server VM warning ElasticSearch FAILED TO START](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-elasticsearch-failed-to-start/158638)

<div class="topic-metadata">

**Author:** [@Richard\_Phillips\_Roy](https://discuss.elastic.co/u/Richard_Phillips_Roy)\
**Replies:** 1\
**Last updated:** [November 28, 2018, 8:58pm UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-elasticsearch-failed-to-start/158638 "2018-11-28T20:58:33Z")

</div>

I'm a newbie , i'm running DEBAIN on virtual box , and i'm getting this error please help. ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: …

---

## [Display polygon on the map](https://discuss.elastic.co/t/display-polygon-on-the-map/146840)

<div class="topic-metadata">

**Author:** [@nicolasl](https://discuss.elastic.co/u/nicolasl)\
**Replies:** 1\
**Last updated:** [August 31, 2018, 6:52pm UTC](https://discuss.elastic.co/t/display-polygon-on-the-map/146840 "2018-08-31T18:52:42Z")

</div>

Hello, I have documents in kibana, they all have a a closed polygon like this \[ -14.062, 45.089\], \[61.875, 45.089\], \[61.875, 60.759\], \[-14.062, 60.759\], \[-14.062, 45.089\] . Is it possible to display that polygon on a …

---

## [Logstash process as startup process](https://discuss.elastic.co/t/logstash-process-as-startup-process/84205)

<div class="topic-metadata">

**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\
**Replies:** 7\
**Last updated:** [May 2, 2017, 2:30pm UTC](https://discuss.elastic.co/t/logstash-process-as-startup-process/84205 "2017-05-02T14:30:42Z")

</div>

We are using logstash 2.1.1 version and running 5 different logstash process on RHEL, my concern is that whenever the servers goes down these process are getting stopped and these process are require to start manually wh…

---

## [ES2.1 shard recovery is extremely slow](https://discuss.elastic.co/t/es2-1-shard-recovery-is-extremely-slow/36356)

<div class="topic-metadata">

**Author:** [@emptyemail](https://discuss.elastic.co/u/emptyemail)\
**Replies:** 1\
**Last updated:** [December 4, 2015, 10:17am UTC](https://discuss.elastic.co/t/es2-1-shard-recovery-is-extremely-slow/36356 "2015-12-04T10:17:08Z")

</div>

We are upgrading to 2.1 and reindexing all the data from scratch, when growing or shrinking the cluster it takes hours to relocate or recover a shard. On the 1.7.1 cluster it usually took a few minute for a small shard, …

---

## [ML datafeed bucket aggregation/script challenge](https://discuss.elastic.co/t/ml-datafeed-bucket-aggregation-script-challenge/297552)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 6\
**Last updated:** [March 7, 2022, 9:35pm UTC](https://discuss.elastic.co/t/ml-datafeed-bucket-aggregation-script-challenge/297552 "2022-03-07T21:35:41Z")

</div>

I would like to create an anomaly detection job for the ratio of two counts. The logic is as follows... A = count filtered by condition X B = count filtered by condition Y C = A/B The datafeed would need to produce C…

---

## [Map nested field into DB output using Elastic input plugin](https://discuss.elastic.co/t/map-nested-field-into-db-output-using-elastic-input-plugin/250176)

<div class="topic-metadata">

**Author:** [@jasoninmel](https://discuss.elastic.co/u/jasoninmel)\
**Replies:** 6\
**Last updated:** [September 29, 2020, 3:54am UTC](https://discuss.elastic.co/t/map-nested-field-into-db-output-using-elastic-input-plugin/250176 "2020-09-29T03:54:20Z")

</div>

Hi there, I'm using Logstash as a ETL tool to copy data from Elastic index to DB table. I tried to map a nested field using following insert statement in the logstash configuration; statement =\> \["INSERT into assets (i…

---

## [Loosing Visualizations after refreshing kibana Index Pattern to add new fields!](https://discuss.elastic.co/t/loosing-visualizations-after-refreshing-kibana-index-pattern-to-add-new-fields/208243)

<div class="topic-metadata">

**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\
**Replies:** 6\
**Last updated:** [November 21, 2019, 10:09am UTC](https://discuss.elastic.co/t/loosing-visualizations-after-refreshing-kibana-index-pattern-to-add-new-fields/208243 "2019-11-21T10:09:39Z")

</div>

Hi, this seems to be a huge problem for me. I made some visualizations and dashboards using an index pattern. I refreshed the same index pattern because I created a new geo-point data type field. Hence had to refresh to …

---

## [Error key populated even when explicitly disabled](https://discuss.elastic.co/t/error-key-populated-even-when-explicitly-disabled/172602)

<div class="topic-metadata">

**Author:** [@mobidyc](https://discuss.elastic.co/u/mobidyc)\
**Replies:** 6\
**Last updated:** [March 19, 2019, 8:29am UTC](https://discuss.elastic.co/t/error-key-populated-even-when-explicitly-disabled/172602 "2019-03-19T08:29:02Z")

</div>

Hello, Using filebeat 6.6 I have a "error" field used in my template, it has to come from the log file. so, in the configuration file, I disabled the error key with the following parameter: json.add\_error\_key: false …

---

## [Average value of buckets in wide range](https://discuss.elastic.co/t/average-value-of-buckets-in-wide-range/130596)

<div class="topic-metadata">

**Author:** [@slawek367](https://discuss.elastic.co/u/slawek367)\
**Replies:** 6\
**Last updated:** [May 14, 2018, 9:33pm UTC](https://discuss.elastic.co/t/average-value-of-buckets-in-wide-range/130596 "2018-05-14T21:33:24Z")

</div>

Hello, I'm trying to solve problem regarding average value of buckets with small interval in wide range. Example: I have 10 services, each send messages every 5 sec with it's state: "ACTIVATE", "STOPPED" etc. I would…

---

## [Looking for Elasticsearch projects](https://discuss.elastic.co/t/looking-for-elasticsearch-projects/19580)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 6\
**Last updated:** [September 3, 2014, 9:42pm UTC](https://discuss.elastic.co/t/looking-for-elasticsearch-projects/19580 "2014-09-03T21:42:34Z")

</div>

For those that are not regulars on the mailing list, I am a fairly active member that has used Elasticsearch for years. I am leaving my full-time job to focus on other (techie and non-techie) goals and would love to…

[Previous page](https://discuss.elastic.co/top.md?page=1435&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1437&per_page=50&period=all)
