# Top **URL:** https://discuss.elastic.co/top.md?page=1455&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1456 --- ## [Elasticsearch 聚合加条件搜索一起检索](https://discuss.elastic.co/t/elasticsearch/205981)
**Author:** [@wwl1](https://discuss.elastic.co/u/wwl1)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 9:49am UTC](https://discuss.elastic.co/t/elasticsearch/205981 "2019-11-19T09:49:09Z")
例如：根据一个产品名称查相关的产品信息，多个，页数为10，然后根据产品的公司再查公司信息，公司名称不能重复但返回的条数必须为10条，该怎么处理 --- ## [\[ERROR\]\[logstash.filters.grok \] Error while attempti ng to check/cancel excessively long grok patterns {:message=\>"Mutex relocking by same thread", :class=\>"ThreadError",](https://discuss.elastic.co/t/error-logstash-filters-grok-error-while-attempti-ng-to-check-cancel-excessively-long-grok-patterns-message-mutex-relocking-by-same-thread-class-threaderror/92990)
**Author:** [@swatititame](https://discuss.elastic.co/u/swatititame)\ **Replies:** 1\ **Last updated:** [July 21, 2017, 10:12am UTC](https://discuss.elastic.co/t/error-logstash-filters-grok-error-while-attempti-ng-to-check-cancel-excessively-long-grok-patterns-message-mutex-relocking-by-same-thread-class-threaderror/92990 "2017-07-21T10:12:01Z")
2017-07-13T15:59:36,280\]\[ERROR\]\[logstash.filters.grok \] Error while attempti ng to check/cancel excessively long grok patterns {:message=\>"Mutex relocking by same thread", :class=\>"ThreadError", :backtrace=\>\["org/jr… --- ## [Use cases where graphite should be use in addition or instead of ELK](https://discuss.elastic.co/t/use-cases-where-graphite-should-be-use-in-addition-or-instead-of-elk/445)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 1\ **Last updated:** [May 10, 2015, 12:43pm UTC](https://discuss.elastic.co/t/use-cases-where-graphite-should-be-use-in-addition-or-instead-of-elk/445 "2015-05-10T12:43:26Z")
We are evaluating elasticsearch for logging and there are many use cases where it's a perfect match. The question is should we also consider something like graphite for simple metrics (number of logins, visitors, respon… --- ## [Issue getting Zeek logs into Kibana](https://discuss.elastic.co/t/issue-getting-zeek-logs-into-kibana/303974)
**Author:** [@espressobeanies](https://discuss.elastic.co/u/espressobeanies)\ **Replies:** 3\ **Last updated:** [May 5, 2022, 3:26am UTC](https://discuss.elastic.co/t/issue-getting-zeek-logs-into-kibana/303974 "2022-05-05T03:26:45Z")
I'm having problems getting my Zeek logs into Kibana using an Elastic Agent that is not Fleet Managed. I'm running the latest and greatest versions of everything and I confirmed I can see dashboard information about the … --- ## [@CaptureSpan not working but ElasticApm.currentSpan().startSpan() works](https://discuss.elastic.co/t/capturespan-not-working-but-elasticapm-currentspan-startspan-works/293127)
**Author:** [@solveretur](https://discuss.elastic.co/u/solveretur)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 11:30am UTC](https://discuss.elastic.co/t/capturespan-not-working-but-elasticapm-currentspan-startspan-works/293127 "2022-01-03T11:30:54Z")
Kibana version: v 7.12.1 Elasticsearch version: 7.12.1 APM Server version: 7.12.1 APM Agent language and version: co.elastic.apm:apm-agent-attach:1.28.3 co.elastic.apm:apm-agent-api:1.28.3 Original install metho… --- ## [Recommended Elasticsearch Node requirements for monitoring 2000 nodes](https://discuss.elastic.co/t/recommended-elasticsearch-node-requirements-for-monitoring-2000-nodes/224057)
**Author:** [@Bingu\_Shim](https://discuss.elastic.co/u/Bingu_Shim)\ **Replies:** 3\ **Last updated:** [March 21, 2020, 2:56am UTC](https://discuss.elastic.co/t/recommended-elasticsearch-node-requirements-for-monitoring-2000-nodes/224057 "2020-03-21T02:56:15Z")
Hello, I'm starting to research Metricbeat + Kibana Inventory to monitor system resources. The total number machine that we are planning to monitor is about 2,000. Currently I was able to deploy metricbeat to 79 hosts… --- ## [Synonyms for Sankt and St](https://discuss.elastic.co/t/synonyms-for-sankt-and-st/126057)
**Author:** [@Kurzer\_Patrick](https://discuss.elastic.co/u/Kurzer_Patrick)\ **Replies:** 3\ **Last updated:** [March 30, 2018, 8:52am UTC](https://discuss.elastic.co/t/synonyms-for-sankt-and-st/126057 "2018-03-30T08:52:39Z")
Hi there, I'm trying to get synonyms working for my existing setup. Currently I have this settings: PUT city { "settings": { "analysis": { "analyzer": { "autocomplete": { "tokenizer": "autocomplete", … --- ## [KV-Pairs and type conversion](https://discuss.elastic.co/t/kv-pairs-and-type-conversion/100046)
**Author:** [@desete](https://discuss.elastic.co/u/desete)\ **Replies:** 3\ **Last updated:** [September 13, 2017, 3:54am UTC](https://discuss.elastic.co/t/kv-pairs-and-type-conversion/100046 "2017-09-13T03:54:55Z")
Hello, I have an input like this \<14\>1 2017-09-11T14:00:27.582+02:00 SECRETHOSTNAME RT\_FLOW - RT\_FLOW\_SESSION\_CREATE \[junos@2636.1.1.1.2.40 source-address="1.1.1.1" source-port="53780" destination-address="2.2.2.2" des… --- ## [Auto calculate time offset in timelion for two measurements separated in time](https://discuss.elastic.co/t/auto-calculate-time-offset-in-timelion-for-two-measurements-separated-in-time/89049)
**Author:** [@user\_1985](https://discuss.elastic.co/u/user_1985)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 11:05am UTC](https://discuss.elastic.co/t/auto-calculate-time-offset-in-timelion-for-two-measurements-separated-in-time/89049 "2017-06-16T11:05:45Z")
Hi, I want to setup graphs to display difference in average frames per second(FPS) for two independent runs one after another. For instance at 10 AM i start a measurement that runs for 15 mins and later in the day with … --- ## [NoMethodError: undefined method \`eventget' for #\\>](https://discuss.elastic.co/t/nomethoderror-undefined-method-eventget-for-logstash-filters-mutate-0x65caadda/60862)
**Author:** [@chenjianbin](https://discuss.elastic.co/u/chenjianbin)\ **Replies:** 3\ **Last updated:** [September 23, 2016, 2:27am UTC](https://discuss.elastic.co/t/nomethoderror-undefined-method-eventget-for-logstash-filters-mutate-0x65caadda/60862 "2016-09-23T02:27:14Z")
my logstash version is 5.0.0-alpha5 and the following is my configuration . input { redis { batch\_count =\> 1000 host =\> "127.0.0.1" port =\> 6379 password =\> "xx" db =\> 0 … --- ## [Filebeat5 alpha 5: multiline and procesor not work as expectation](https://discuss.elastic.co/t/filebeat5-alpha-5-multiline-and-procesor-not-work-as-expectation/60845)
**Author:** [@ptvi](https://discuss.elastic.co/u/ptvi)\ **Replies:** 3\ **Last updated:** [September 22, 2016, 10:59am UTC](https://discuss.elastic.co/t/filebeat5-alpha-5-multiline-and-procesor-not-work-as-expectation/60845 "2016-09-22T10:59:53Z")
Hi, I'm using filebeat alpha 5 installed in my Windows server to flushing log to my ELK. In filebeat.yml, I configure multiline and processor as below: #I only want to get log line containing ER or ERROR processors: … --- ## [Mysql exports](https://discuss.elastic.co/t/mysql-exports/59899)
**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\ **Replies:** 3\ **Last updated:** [September 8, 2016, 10:52am UTC](https://discuss.elastic.co/t/mysql-exports/59899 "2016-09-08T10:52:24Z")
Would it be possible to add threads\_connected to the exported fields for mysql plugin? https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-mysql-status.html Thanks! --- ## [Sorting multivalued dates is incorrect with large number of shards](https://discuss.elastic.co/t/sorting-multivalued-dates-is-incorrect-with-large-number-of-shards/57219)
**Author:** [@drjz](https://discuss.elastic.co/u/drjz)\ **Replies:** 3\ **Last updated:** [August 4, 2016, 2:31pm UTC](https://discuss.elastic.co/t/sorting-multivalued-dates-is-incorrect-with-large-number-of-shards/57219 "2016-08-04T14:31:56Z")
I have an index with 40 shards. When I sort a field with date type and it is multivalued, then I get the results sorted in incorrect order. This is how the sort is built: "PDate"{ "order" : "desc", "missing" : "\_… --- ## [Index Lifecycle Rollover Alias is Empty in Winlogbeat Indices](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-is-empty-in-winlogbeat-indices/302415)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 5\ **Last updated:** [May 6, 2022, 2:11am UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-is-empty-in-winlogbeat-indices/302415 "2022-05-06T02:11:54Z")
Hi, I'm having below errors "index.lifecycle.rollover\_alias" in winlogbeats indices. Index lifecycle error illegal\_argument\_exception: setting \[index.lifecycle.rollover\_alias\] for index \[winlogbeat-8.1.2-2022.04.14\] is… --- ## [Trying to run the 'Get duration by using bucket script' but not working](https://discuss.elastic.co/t/trying-to-run-the-get-duration-by-using-bucket-script-but-not-working/269648)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 5\ **Last updated:** [April 16, 2021, 9:52pm UTC](https://discuss.elastic.co/t/trying-to-run-the-get-duration-by-using-bucket-script-but-not-working/269648 "2021-04-16T21:52:38Z")
Hello, I'm attempting to calculate Session Duration by using the provided example here: I even followed this users successful implementation: Computing session durations from timestamps scattered over two documents - … --- ## [Time between two timestamps in different files](https://discuss.elastic.co/t/time-between-two-timestamps-in-different-files/248327)
**Author:** [@Tommie](https://discuss.elastic.co/u/Tommie)\ **Replies:** 5\ **Last updated:** [September 14, 2020, 11:09am UTC](https://discuss.elastic.co/t/time-between-two-timestamps-in-different-files/248327 "2020-09-14T11:09:10Z")
Hi, Can you please advise me setting up the following? There are multiple log files (csv) coming from multiple sources. The logfiles contains data from transactions which are first processed in system A, then processe… --- ## [How can i disable logs UI](https://discuss.elastic.co/t/how-can-i-disable-logs-ui/185751)
**Author:** [@Min\_Mah](https://discuss.elastic.co/u/Min_Mah)\ **Replies:** 5\ **Last updated:** [June 17, 2019, 5:36pm UTC](https://discuss.elastic.co/t/how-can-i-disable-logs-ui/185751 "2019-06-17T17:36:05Z")
Hello, I have a question how can i disable logs UI?? it's blue circle in photo make me solve this problem Thanks --- ## [Need help with Performance and Storage Factors](https://discuss.elastic.co/t/need-help-with-performance-and-storage-factors/102939)
**Author:** [@sidra\_89](https://discuss.elastic.co/u/sidra_89)\ **Replies:** 5\ **Last updated:** [October 6, 2017, 7:20am UTC](https://discuss.elastic.co/t/need-help-with-performance-and-storage-factors/102939 "2017-10-06T07:20:46Z")
Hi .. i am new to elasticsearch and have some basic knowledge about it and at this point i dont know what and how performance will be altered with the choices i will make for using Elasticsearch. i came across some ques… --- ## [Different score in 5.x compared to 1.x](https://discuss.elastic.co/t/different-score-in-5-x-compared-to-1-x/85189)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 5\ **Last updated:** [May 12, 2017, 5:06pm UTC](https://discuss.elastic.co/t/different-score-in-5-x-compared-to-1-x/85189 "2017-05-12T17:06:50Z")
Hi, I have upgraded elasticsearch cluster from 1.7 to 5.3.1 We have a query in 1.7 as below { "size": 100, "query": { "filtered": { "query": { "query\_string": { "query": "Akhilesh Anb" } }, "filter": { "ter… --- ## [Number of Shards for an Index](https://discuss.elastic.co/t/number-of-shards-for-an-index/78412)
**Author:** [@senthilvel](https://discuss.elastic.co/u/senthilvel)\ **Replies:** 5\ **Last updated:** [March 15, 2017, 3:21pm UTC](https://discuss.elastic.co/t/number-of-shards-for-an-index/78412 "2017-03-15T15:21:29Z")
Hi, We are trying to come up with optimum number of shards for the Index. Based on https://www.elastic.co/guide/en/elasticsearch/guide/current/capacity-planning.html, we have done load testing and found that 750K docu… --- ## [Unassigned shards on es 5.5.1](https://discuss.elastic.co/t/unassigned-shards-on-es-5-5-1/148779)
**Author:** [@Guy\_Barnea](https://discuss.elastic.co/u/Guy_Barnea)\ **Replies:** 8\ **Last updated:** [September 17, 2018, 8:39am UTC](https://discuss.elastic.co/t/unassigned-shards-on-es-5-5-1/148779 "2018-09-17T08:39:58Z")
Hello, Im running elasticSearch 5.5.1 on port 9200. I have a problem with its shards : not all of them are assign and right now , I dont have access to all of my files in my indexes. How can i solve this problem? Th… --- ## [Difficulty understanding the "size" parameter in aggregations](https://discuss.elastic.co/t/difficulty-understanding-the-size-parameter-in-aggregations/35042)
**Author:** [@leethaksor](https://discuss.elastic.co/u/leethaksor)\ **Replies:** 8\ **Last updated:** [November 19, 2015, 3:12pm UTC](https://discuss.elastic.co/t/difficulty-understanding-the-size-parameter-in-aggregations/35042 "2015-11-19T15:12:18Z")
I have a service where users can rate items from 1 to 5 and I need to find the top 40 rated items. I'm searching from a type that contains posts made by users and it filters posts made from a specific country and that… --- ## [FSCrawler - Best approach to load massive amount of document](https://discuss.elastic.co/t/fscrawler-best-approach-to-load-massive-amount-of-document/284900)
**Author:** [@classless\_oak](https://discuss.elastic.co/u/classless_oak)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 2:25pm UTC](https://discuss.elastic.co/t/fscrawler-best-approach-to-load-massive-amount-of-document/284900 "2021-09-24T14:25:57Z")
Hello, I am trying to come up with a solution to load massive amount of documents (xlx, xlsx, doc, xml, txt, pdf, etd.) 30+ terabytes into Elastic. I have spun up the stack with the FSCrawler and have been adding docume… --- ## [Elastic APM throws warning illegal\_argument\_exception with reason the number of source shards \[4\] must be a factor of \[30\]](https://discuss.elastic.co/t/elastic-apm-throws-warning-illegal-argument-exception-with-reason-the-number-of-source-shards-4-must-be-a-factor-of-30/223131)
**Author:** [@Vipin\_Menon](https://discuss.elastic.co/u/Vipin_Menon)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 7:38am UTC](https://discuss.elastic.co/t/elastic-apm-throws-warning-illegal-argument-exception-with-reason-the-number-of-source-shards-4-must-be-a-factor-of-30/223131 "2020-03-12T07:38:05Z")
I get the error when I run the command docker run --rm -it --name=apm-server --user=apm-server --volume="$(pwd)/apm-server.docker.yml:/usr/share/apm-server/apm-server.yml:ro" -p 8200:8200 docker.elastic.co/apm/apm-ser… --- ## [Install Winlogbeat-overview.json on Kibana on Linux](https://discuss.elastic.co/t/install-winlogbeat-overview-json-on-kibana-on-linux/180572)
**Author:** [@mpco](https://discuss.elastic.co/u/mpco)\ **Replies:** 2\ **Last updated:** [May 15, 2019, 7:43am UTC](https://discuss.elastic.co/t/install-winlogbeat-overview-json-on-kibana-on-linux/180572 "2019-05-15T07:43:28Z")
Hi, I have a new installation of Elasticsearch and Kibana running on CentOS. I have installed a Winlogbeat agent on a test server and am receiving data which I can view and search, and now want to see the example Winlog… --- ## [Node.name unique?](https://discuss.elastic.co/t/node-name-unique/148992)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [September 24, 2018, 12:33pm UTC](https://discuss.elastic.co/t/node-name-unique/148992 "2018-09-24T12:33:20Z")
Wondering if node.name must be unique or not? We setup a new cluster with Docker, and we have the same node name everywhere, it seems working fine. --- ## [Transaction locking](https://discuss.elastic.co/t/transaction-locking/114082)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 2\ **Last updated:** [January 4, 2018, 1:50pm UTC](https://discuss.elastic.co/t/transaction-locking/114082 "2018-01-04T13:50:01Z")
Hi , is there any way where i can lock the transaction? If there is a situation where two users are trying to update data in ES at same time or more precisely if data is added offline and has to be synchronized when com… --- ## [Shield 2.3, Elasticsearch 2.3: 'ldap' realm works, but 'file' realm does not](https://discuss.elastic.co/t/shield-2-3-elasticsearch-2-3-ldap-realm-works-but-file-realm-does-not/65424)
**Author:** [@jburn2614](https://discuss.elastic.co/u/jburn2614)\ **Replies:** 2\ **Last updated:** [November 16, 2016, 1:20pm UTC](https://discuss.elastic.co/t/shield-2-3-elasticsearch-2-3-ldap-realm-works-but-file-realm-does-not/65424 "2016-11-16T13:20:43Z")
Hi, I'm evaluating Shield for our company on our existing cluster. We are running Elasticsearch 2.3 with Kibana 4.5. LDAP authentiation via Kibana works partially. The part that works that it disallows non-existent accou… --- ## [Conditional being ignored for grok match](https://discuss.elastic.co/t/conditional-being-ignored-for-grok-match/58010)
**Author:** [@harrytewkesbury](https://discuss.elastic.co/u/harrytewkesbury)\ **Replies:** 2\ **Last updated:** [August 15, 2016, 11:08am UTC](https://discuss.elastic.co/t/conditional-being-ignored-for-grok-match/58010 "2016-08-15T11:08:59Z")
Hi all, I have a working filter for a specific log, and I am happy with that. However, one other log is being matched on it, even though the conditional I am using should not do so. I am matching on tags. if "access"… --- ## [Logstash at 100% CPU, slow to process Redis queue to Elasticsearch](https://discuss.elastic.co/t/logstash-at-100-cpu-slow-to-process-redis-queue-to-elasticsearch/49686)
**Author:** [@RCMMike](https://discuss.elastic.co/u/RCMMike)\ **Replies:** 2\ **Last updated:** [May 29, 2016, 8:17pm UTC](https://discuss.elastic.co/t/logstash-at-100-cpu-slow-to-process-redis-queue-to-elasticsearch/49686 "2016-05-29T20:17:19Z")
Hello! I have a Logstash instance that is reading data from a Redis queue, processing it via some grok filters, and then outputting to Elasticsearch. For a day or two, this was working properly - decent CPU but not ov… --- ## [Installing Shield with Puppet](https://discuss.elastic.co/t/installing-shield-with-puppet/49689)
**Author:** [@vikram\_yerneni](https://discuss.elastic.co/u/vikram_yerneni)\ **Replies:** 2\ **Last updated:** [May 17, 2016, 3:19pm UTC](https://discuss.elastic.co/t/installing-shield-with-puppet/49689 "2016-05-17T15:19:07Z")
Hello, Quick question folks.. We had an existing Puppet module for Elasticsearch (ES) 1.5.2 setups with basic head and kopf plugins. I am trying to add the shield plugin also to it. I am trying to add this Shield plugin … --- ## [NumberFormatException - how can I filter queries around it?](https://discuss.elastic.co/t/numberformatexception-how-can-i-filter-queries-around-it/2605)
**Author:** [@ecweaver](https://discuss.elastic.co/u/ecweaver)\ **Replies:** 2\ **Last updated:** [June 14, 2015, 8:13pm UTC](https://discuss.elastic.co/t/numberformatexception-how-can-i-filter-queries-around-it/2605 "2015-06-14T20:13:59Z")
I have a rather large (or at least non-small) logs use-case, with an index per day with many types. Many of those types have a "status" field, some in nested objects and some right at source level. I have struggled to … --- ## [Limitation on the value of top values](https://discuss.elastic.co/t/limitation-on-the-value-of-top-values/307731)
**Author:** [@eduhernandezm](https://discuss.elastic.co/u/eduhernandezm)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 2:06pm UTC](https://discuss.elastic.co/t/limitation-on-the-value-of-top-values/307731 "2022-06-21T14:06:37Z")
Hello, I am implementing dashboards with data that I am collecting every day through a process that loads CSV files and then processes all that data. The problem I am running into is the following. When I want to build… --- ## [Unable to add OpenStreetMap to kibana](https://discuss.elastic.co/t/unable-to-add-openstreetmap-to-kibana/204338)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 1\ **Last updated:** [October 20, 2019, 9:06am UTC](https://discuss.elastic.co/t/unable-to-add-openstreetmap-to-kibana/204338 "2019-10-20T09:06:41Z")
Hi, I use elk container with latest tag. I've added this line in kibana.yml to use OpenStreetMap: tilemap.url: "http://a.tile.openstreetmap.org/{z}/{x}/{y}.png" but I got the following error: Error: "tilemap.url" set… --- ## [Can't load filebeat Index Template in Elasticsearch](https://discuss.elastic.co/t/cant-load-filebeat-index-template-in-elasticsearch/190836)
**Author:** [@Saber.Tala](https://discuss.elastic.co/u/Saber.Tala)\ **Replies:** 1\ **Last updated:** [July 17, 2019, 9:01am UTC](https://discuss.elastic.co/t/cant-load-filebeat-index-template-in-elasticsearch/190836 "2019-07-17T09:01:53Z")
Hello, Using Filebeat version 7.2.0, Logstash version 7.1.1 and ElasticSearch version 7.1.1, when I try to load Filebeat Index Template in Elasticsearch, I get the following error: \[root@VM1 ~\]# curl -XPUT 'http://loc… --- ## [Machine Learning course and 6.0](https://discuss.elastic.co/t/machine-learning-course-and-6-0/108948)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 1\ **Last updated:** [November 24, 2017, 8:35pm UTC](https://discuss.elastic.co/t/machine-learning-course-and-6-0/108948 "2017-11-24T20:35:58Z")
Does the e-learning courses, specifically machine learning work with 6.0 of everything? I'm having all kinds of problems with logstash not starting. --- ## [Filebeat Preprocess](https://discuss.elastic.co/t/filebeat-preprocess/49563)
**Author:** [@Tim\_Brammer](https://discuss.elastic.co/u/Tim_Brammer)\ **Replies:** 1\ **Last updated:** [May 9, 2016, 3:19pm UTC](https://discuss.elastic.co/t/filebeat-preprocess/49563 "2016-05-09T15:19:33Z")
Hi All, I've got some logs with sensitive data in them that I'd like to exclude before shipping them. I know I can remove entire lines, but the sensitive data is just a portion of the line, the rest of which I need. I… --- ## [Elasticsearch index contains documents where source is invalid json](https://discuss.elastic.co/t/elasticsearch-index-contains-documents-where-source-is-invalid-json/2010)
**Author:** [@stubbetje](https://discuss.elastic.co/u/stubbetje)\ **Replies:** 1\ **Last updated:** [February 11, 2016, 1:38pm UTC](https://discuss.elastic.co/t/elasticsearch-index-contains-documents-where-source-is-invalid-json/2010 "2016-02-11T13:38:56Z")
I'm in the process of migrating a complete index from one cluster to another. I'm selecting all the documents from the old cluster with the scroll api and bulk indexing them to the new cluster, using elasticsearch-php. … --- ## [Dynamic Index Names](https://discuss.elastic.co/t/dynamic-index-names/24378)
**Author:** [@aochsner](https://discuss.elastic.co/u/aochsner)\ **Replies:** 1\ **Last updated:** [June 26, 2015, 11:20am UTC](https://discuss.elastic.co/t/dynamic-index-names/24378 "2015-06-26T11:20:55Z")
Looks like this was added to 1.0 which is great news however I have 2 questions It doesn't appear that this works in the "path" of an "http" input. Is that correct? Will there be any consideration to adding that in … --- ## [Strange problem with a boolean field](https://discuss.elastic.co/t/strange-problem-with-a-boolean-field/10026)
**Author:** [@Ian\_Clark1](https://discuss.elastic.co/u/Ian_Clark1)\ **Replies:** 7\ **Last updated:** [December 14, 2012, 5:58pm UTC](https://discuss.elastic.co/t/strange-problem-with-a-boolean-field/10026 "2012-12-14T17:58:15Z")
Hi, has anyone had a problem with a boolean field having a value 't' when normally it is 'T' or 'F' (for true and false)? It's happens to me occasionally in my integration tests. I've tried to simplify the problem… --- ## [Question about sorting non-indexed fields](https://discuss.elastic.co/t/question-about-sorting-non-indexed-fields/9264)
**Author:** [@Jae](https://discuss.elastic.co/u/Jae)\ **Replies:** 1\ **Last updated:** [October 8, 2012, 3:45am UTC](https://discuss.elastic.co/t/question-about-sorting-non-indexed-fields/9264 "2012-10-08T03:45:11Z")
Hi I thought that I could sort with the date field which was not indexed but sorting didn't work. I checked the sort value in the response and all were '0', which means, if I want to sort with the field, I shou… --- ## [Date format issue for two different log types into same datefield in logstash](https://discuss.elastic.co/t/date-format-issue-for-two-different-log-types-into-same-datefield-in-logstash/50952)
**Author:** [@jyothish](https://discuss.elastic.co/u/jyothish)\ **Replies:** 2\ **Last updated:** [May 29, 2016, 10:25am UTC](https://discuss.elastic.co/t/date-format-issue-for-two-different-log-types-into-same-datefield-in-logstash/50952 "2016-05-29T10:25:12Z")
I have a common timedate field named TIME\_END for two different date format for two different log types ,, in the first format it comes in UNIX type eg : 1460555937090 (millisecond+last 3 digits in nanoseconds) a… --- ## [Kibana Input controls old v/s new](https://discuss.elastic.co/t/kibana-input-controls-old-v-s-new/339915)
**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\ **Replies:** 4\ **Last updated:** [August 4, 2023, 1:56pm UTC](https://discuss.elastic.co/t/kibana-input-controls-old-v-s-new/339915 "2023-08-04T13:56:51Z")
Hi, We are using Kibana/Elasticsearch /eck managed for our dev/production (non customer facing UIs) to analyse many things. Sometime back kibana depricated beta version / non-guaranteed (non production ready) versions … --- ## [Jdbc\_static left joins in local\_lookups](https://discuss.elastic.co/t/jdbc-static-left-joins-in-local-lookups/193953)
**Author:** [@ErikWarming](https://discuss.elastic.co/u/ErikWarming)\ **Replies:** 4\ **Last updated:** [August 13, 2019, 11:48am UTC](https://discuss.elastic.co/t/jdbc-static-left-joins-in-local-lookups/193953 "2019-08-13T11:48:59Z")
I have connected to a database via logstash filter jdbc\_static and input jdbc I have loaded the tables and defined the local\_db\_objects objects. I have created a query in the local\_lookups and when I just join tables t… --- ## [Logstash Windows Service - error java.lang.IllegalStateException](https://discuss.elastic.co/t/logstash-windows-service-error-java-lang-illegalstateexception/144187)
**Author:** [@Scott\_Newby](https://discuss.elastic.co/u/Scott_Newby)\ **Replies:** 4\ **Last updated:** [August 13, 2018, 5:45pm UTC](https://discuss.elastic.co/t/logstash-windows-service-error-java-lang-illegalstateexception/144187 "2018-08-13T17:45:15Z")
Logstash continues to restart repeating - \[ERROR\]\[org.logstash.Logstash \] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit I've tried: removing the config.reload.au… --- ## [Exclude Graphite fields from Elasticsearch](https://discuss.elastic.co/t/exclude-graphite-fields-from-elasticsearch/85094)
**Author:** [@Exocomp](https://discuss.elastic.co/u/Exocomp)\ **Replies:** 4\ **Last updated:** [May 12, 2017, 2:42am UTC](https://discuss.elastic.co/t/exclude-graphite-fields-from-elasticsearch/85094 "2017-05-12T02:42:49Z")
In the filter stage of logstash I'm creating some fields based on metricbeat data that are meant to be for Graphite specifically. Then in the output stage of logstash I'm sending the data to Graphite and Elasticsearch,… --- ## [Show in Kibana - DAU/MAU and WAU/MAU](https://discuss.elastic.co/t/show-in-kibana-dau-mau-and-wau-mau/334017)
**Author:** [@pocketcolin](https://discuss.elastic.co/u/pocketcolin)\ **Replies:** 6\ **Last updated:** [May 30, 2023, 2:50pm UTC](https://discuss.elastic.co/t/show-in-kibana-dau-mau-and-wau-mau/334017 "2023-05-30T14:50:52Z")
Hello! I'm trying to get a line chart that shows the calculations of DAU/MAU and WAU/MAU (DAU = Daily Active Users, WAU = Weekly, MAU = Monthly). Thanks to another user's help, I was able to get a graph showing DAU and I… --- ## [Java APM has no spans](https://discuss.elastic.co/t/java-apm-has-no-spans/162610)
**Author:** [@mrk1](https://discuss.elastic.co/u/mrk1)\ **Replies:** 6\ **Last updated:** [January 3, 2019, 12:14pm UTC](https://discuss.elastic.co/t/java-apm-has-no-spans/162610 "2019-01-03T12:14:49Z")
hi i have setup JavaAPM in my kibana ui , i am not able to see any transactions error : "No spans available for this transaction. " i do get response times and request per minute . --- ## [Enterprise Search 8.18.6, 8.19.3 Security Update (ESA-2025-15) (CVE-2025-54988)](https://discuss.elastic.co/t/enterprise-search-8-18-6-8-19-3-security-update-esa-2025-15-cve-2025-54988/381428)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [August 28, 2025, 3:39pm UTC](https://discuss.elastic.co/t/enterprise-search-8-18-6-8-19-3-security-update-esa-2025-15-cve-2025-54988/381428 "2025-08-28T15:39:46Z")
Enterprise Search XML external entity (XXE) injection in Apache Tika (ESA-2025-15) On August 20, 2025, CVE-2025-54988 in Apache Tika PDF parser module was announced, disclosing an XML External Entity injection flaw in t… --- ## [Event based trigger of watcher](https://discuss.elastic.co/t/event-based-trigger-of-watcher/251989)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 3\ **Last updated:** [October 15, 2020, 7:08pm UTC](https://discuss.elastic.co/t/event-based-trigger-of-watcher/251989 "2020-10-15T19:08:21Z")
Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your … [Previous page](https://discuss.elastic.co/top.md?page=1454&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1456&per_page=50&period=all)