# Top

**URL:** https://discuss.elastic.co/top.md?page=1459&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1460

---

## [Godaddy SSL Wildcard Certificate](https://discuss.elastic.co/t/godaddy-ssl-wildcard-certificate/265503)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 2\
**Last updated:** [February 28, 2021, 11:52am UTC](https://discuss.elastic.co/t/godaddy-ssl-wildcard-certificate/265503 "2021-02-28T11:52:54Z")

</div>

Hello there, I´m trying to use my godaddy wildcard ssl on elk stack but for some reason is not working. Can someone point me to the right direction? Follow my config: xpack.security.transport.ssl.enabled: true xpack.sec…

---

## [Canvas kibana visualization filter](https://discuss.elastic.co/t/canvas-kibana-visualization-filter/259288)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 2\
**Last updated:** [December 22, 2020, 8:45am UTC](https://discuss.elastic.co/t/canvas-kibana-visualization-filter/259288 "2020-12-22T08:45:11Z")

</div>

Hi, Is it possible to add filters to Kibana visualizations within Canvas? We create reports for customers and it would be useful to create the generic visualizations, create reports for each customer and and the filter …

---

## [Сбор логов кластера Elasticsearch и audit logging из контейнеров](https://discuss.elastic.co/t/elasticsearch-audit-logging/253296)

<div class="topic-metadata">

**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\
**Replies:** 2\
**Last updated:** [November 18, 2020, 7:55pm UTC](https://discuss.elastic.co/t/elasticsearch-audit-logging/253296 "2020-11-18T19:55:49Z")

</div>

Добрый день! Кластер Elasticsearch запущен из docker-compose. Посоветуйте, возможно ли собирать логи кластера и логи audit logging из контейнеров с помощью Filebeat? Или стоит пробрасывать логи наружу и собирать традицио…

---

## [Filebeatのタグの設定について](https://discuss.elastic.co/t/filebeat/201567)

<div class="topic-metadata">

**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 6:35am UTC](https://discuss.elastic.co/t/filebeat/201567 "2019-09-30T06:35:47Z")

</div>

「x」というタグをつける設定をすると、 「beats\_input\_codec\_plain\_applied」というタグもつきます。 ①「beats\_input\_codec\_plain\_applied」のタグをつけないことは可能でしょうか？ ②また、可能でしたら「beats\_input\_codec\_plain\_applied」をつけない設定を 教えていただけないでしょうか？ 現行のタグ付け x, beats\_input\_code…

---

## [Controls Visualization: empty values](https://discuss.elastic.co/t/controls-visualization-empty-values/151169)

<div class="topic-metadata">

**Author:** [@Alufolie](https://discuss.elastic.co/u/Alufolie)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 10:07am UTC](https://discuss.elastic.co/t/controls-visualization-empty-values/151169 "2018-10-11T10:07:52Z")

</div>

Hello, I'am using Kibana in v6.3.2 and I'am trying to visualize IP Networks by there names and devices. So I've created a visualization to filter networknames. Some of these Networknames are just empty Strings and this …

---

## [Elastic search cannot connect to kibana](https://discuss.elastic.co/t/elastic-search-cannot-connect-to-kibana/134099)

<div class="topic-metadata">

**Author:** [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)\
**Replies:** 2\
**Last updated:** [June 1, 2018, 8:00pm UTC](https://discuss.elastic.co/t/elastic-search-cannot-connect-to-kibana/134099 "2018-06-01T20:00:17Z")

</div>

elastic search is getting connected after installing x-pack added the following line after the xpack.security.enabled: false login currently disabled administrator should consult kibana logs for more details the follo…

---

## [Problem with \[mutate \>\> convert\] more that one field : Error registering plugin](https://discuss.elastic.co/t/problem-with-mutate-convert-more-that-one-field-error-registering-plugin/102776)

<div class="topic-metadata">

**Author:** [@enrico\_villa](https://discuss.elastic.co/u/enrico_villa)\
**Replies:** 2\
**Last updated:** [October 5, 2017, 3:43am UTC](https://discuss.elastic.co/t/problem-with-mutate-convert-more-that-one-field-error-registering-plugin/102776 "2017-10-05T03:43:04Z")

</div>

I run smoothly my logstash config with only one mutate:convert command, but if i add more than one i got this error .. I tried many syntaxes to specifiy multiple conversions but with no luck .. tnx for any help ! \[…

---

## [Csv filter doesn't activate](https://discuss.elastic.co/t/csv-filter-doesnt-activate/93827)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 2\
**Last updated:** [August 14, 2017, 8:01pm UTC](https://discuss.elastic.co/t/csv-filter-doesnt-activate/93827 "2017-08-14T20:01:24Z")

</div>

OK, I've been working this all morning and I've tried everything I can think of and googled. We are doing some processing of netflow data and it produces a csv file. We want to ingest each csv file into Elastic, but f…

---

## [Mavel basic disables all clusters](https://discuss.elastic.co/t/mavel-basic-disables-all-clusters/46150)

<div class="topic-metadata">

**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\
**Replies:** 2\
**Last updated:** [April 3, 2016, 9:58pm UTC](https://discuss.elastic.co/t/mavel-basic-disables-all-clusters/46150 "2016-04-03T21:58:15Z")

</div>

I was using marvel in eval mode and had two clusters configured. Then I installed the basic license. Now both clusters are disabled. How can I delete the remove cluster so it work again for the single local cluster?

---

## [Auth plugin not prompting for authentication](https://discuss.elastic.co/t/auth-plugin-not-prompting-for-authentication/28324)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 2\
**Last updated:** [August 31, 2015, 3:34am UTC](https://discuss.elastic.co/t/auth-plugin-not-prompting-for-authentication/28324 "2015-08-31T03:34:29Z")

</div>

Hey all, I need a free alternative for shield for my personal cluster. We use shield at work, but for my own project I need something free and open source. So I tried the ES auth plugin: ES Auth I installed the …

---

## [Canvas Time filter not refreshing](https://discuss.elastic.co/t/canvas-time-filter-not-refreshing/252590)

<div class="topic-metadata">

**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\
**Replies:** 5\
**Last updated:** [October 22, 2020, 2:15pm UTC](https://discuss.elastic.co/t/canvas-time-filter-not-refreshing/252590 "2020-10-22T14:15:16Z")

</div>

The Time filter element refreshes only some of the time. Increasing the end time generally works on change, decreasing end time generally doesn't. Page refresh doesn't help, strangely, toggling edit or full screen does. …

---

## [Некорректное отображение данных в kibana](https://discuss.elastic.co/t/kibana/204609)

<div class="topic-metadata">

**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\
**Replies:** 5\
**Last updated:** [October 23, 2019, 2:02pm UTC](https://discuss.elastic.co/t/kibana/204609 "2019-10-23T14:02:00Z")

</div>

Есть массив, каждый элемент которого выглядит следующим образом: t \_id htqe7m0BSOdvtuXlL\_IK t \_index currency\_data # \_score - t \_type …

---

## [Does Java High Level REST Client have "check if exists" operation?](https://discuss.elastic.co/t/does-java-high-level-rest-client-have-check-if-exists-operation/104178)

<div class="topic-metadata">

**Author:** [@k-miras](https://discuss.elastic.co/u/k-miras)\
**Replies:** 5\
**Last updated:** [October 17, 2017, 9:21pm UTC](https://discuss.elastic.co/t/does-java-high-level-rest-client-have-check-if-exists-operation/104178 "2017-10-17T21:21:11Z")

</div>

I'm using Get API for now but I think this is inefficient

---

## [Upgrade from 2.4 to 5 Elasticsearch issues](https://discuss.elastic.co/t/upgrade-from-2-4-to-5-elasticsearch-issues/65664)

<div class="topic-metadata">

**Author:** [@NiGame](https://discuss.elastic.co/u/NiGame)\
**Replies:** 5\
**Last updated:** [November 10, 2016, 4:11pm UTC](https://discuss.elastic.co/t/upgrade-from-2-4-to-5-elasticsearch-issues/65664 "2016-11-10T16:11:18Z")

</div>

Used the upgrade plugin and sorted all issues, it flagged. Then shutdown, single node cluster. Upgraded using apt Running Elasticsearch start then shuts down after about 12seconds logs show see below, does not show any i…

---

## [Monitor network using the elasticstack](https://discuss.elastic.co/t/monitor-network-using-the-elasticstack/144959)

<div class="topic-metadata">

**Author:** [@LSG](https://discuss.elastic.co/u/LSG)\
**Replies:** 1\
**Last updated:** [August 19, 2018, 9:38am UTC](https://discuss.elastic.co/t/monitor-network-using-the-elasticstack/144959 "2018-08-19T09:38:20Z")

</div>

Hi, Newbie here... I would appreciate it if someone could assist. I watched about two hours of videos this morning but I have questions. Basically, I want to test by installing your open source elastic stack with Elasti…

---

## [What is the upper limit on index.query.bool.max\_clause\_count for different ES versions?](https://discuss.elastic.co/t/what-is-the-upper-limit-on-index-query-bool-max-clause-count-for-different-es-versions/92892)

<div class="topic-metadata">

**Author:** [@abzter10690](https://discuss.elastic.co/u/abzter10690)\
**Replies:** 1\
**Last updated:** [July 26, 2017, 2:35pm UTC](https://discuss.elastic.co/t/what-is-the-upper-limit-on-index-query-bool-max-clause-count-for-different-es-versions/92892 "2017-07-26T14:35:15Z")

</div>

What is the maximum that we can set for index.query.bool.max\_clause\_count(old versions) and indices.query.bool.max\_clause\_count (\>5.1)?

---

## [SQS Input Not working - SOLVED](https://discuss.elastic.co/t/sqs-input-not-working-solved/82458)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 1\
**Last updated:** [May 1, 2017, 5:45pm UTC](https://discuss.elastic.co/t/sqs-input-not-working-solved/82458 "2017-05-01T17:45:26Z")

</div>

Hi, I have a very simple conf right now. Logstash 5.3.0. input{ sqs{ queue =\> "somename" } } If i run I get the following error: \[2017-04-14T20:08:55,084\]\[INFO \]\[logstash.pipeline \] Starting pipeline {"id"=\>"…

---

## [Logstash http output to Kafka-REST-Proxy](https://discuss.elastic.co/t/logstash-http-output-to-kafka-rest-proxy/64930)

<div class="topic-metadata">

**Author:** [@Olivier\_Girardot](https://discuss.elastic.co/u/Olivier_Girardot)\
**Replies:** 1\
**Last updated:** [November 4, 2016, 2:32pm UTC](https://discuss.elastic.co/t/logstash-http-output-to-kafka-rest-proxy/64930 "2016-11-04T14:32:54Z")

</div>

Hi everyone, I know there's a kafka output plugin for logstash but I'd like to use Confluent's REST proxy to push it to kafka. But according to the documentation http://docs.confluent.io/3.0.0/kafka-rest/docs/intro.html…

---

## [Search with fuzzy and on a field with word\_delimiter doesn't work as expected](https://discuss.elastic.co/t/search-with-fuzzy-and-on-a-field-with-word-delimiter-doesnt-work-as-expected/64989)

<div class="topic-metadata">

**Author:** [@I.Bogdan](https://discuss.elastic.co/u/I.Bogdan)\
**Replies:** 1\
**Last updated:** [November 4, 2016, 9:52am UTC](https://discuss.elastic.co/t/search-with-fuzzy-and-on-a-field-with-word-delimiter-doesnt-work-as-expected/64989 "2016-11-04T09:52:04Z")

</div>

I have an index defined like this: PUT /fuzzytest { "settings": { "index": { "number\_of\_shards": "1", "analysis": { "filter": { "my\_word\_delimiter": { "type": "word\_d…

---

## [Is there any way to skip row inserting in ES while moving data from HIVE to ES?](https://discuss.elastic.co/t/is-there-any-way-to-skip-row-inserting-in-es-while-moving-data-from-hive-to-es/53648)

<div class="topic-metadata">

**Author:** [@r.gupta2508](https://discuss.elastic.co/u/r.gupta2508)\
**Replies:** 1\
**Last updated:** [June 27, 2016, 6:40pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-skip-row-inserting-in-es-while-moving-data-from-hive-to-es/53648 "2016-06-27T18:40:35Z")

</div>

i am trying to copy data (more then 300 million rows) from hive table to Elasticsearch using this query:- insert overwrite table TableNameES select \* from HiveTableName; & after inserting some of rows i am getting this…

---

## [Can I ingest specific log files using winlogbeat?](https://discuss.elastic.co/t/can-i-ingest-specific-log-files-using-winlogbeat/303124)

<div class="topic-metadata">

**Author:** [@rrrrrrrrrrr](https://discuss.elastic.co/u/rrrrrrrrrrr)\
**Replies:** 4\
**Last updated:** [April 26, 2022, 9:31am UTC](https://discuss.elastic.co/t/can-i-ingest-specific-log-files-using-winlogbeat/303124 "2022-04-26T09:31:02Z")

</div>

Hello, I would just like to ask if I can ingest a specific logfile using Winlogbeat? If yes, can you provide a structure or link how to do it since I tried researching and no luck finding an answer. Right now here's m…

---

## [Is it reasonable to use multiple instances of Filebeat (Windows) on a production system?](https://discuss.elastic.co/t/is-it-reasonable-to-use-multiple-instances-of-filebeat-windows-on-a-production-system/250457)

<div class="topic-metadata">

**Author:** [@ruben.crespo.cano](https://discuss.elastic.co/u/ruben.crespo.cano)\
**Replies:** 4\
**Last updated:** [September 30, 2020, 10:02pm UTC](https://discuss.elastic.co/t/is-it-reasonable-to-use-multiple-instances-of-filebeat-windows-on-a-production-system/250457 "2020-09-30T22:02:51Z")

</div>

To whom it may concern, Background: Currently in our windows servers we have different applications that belong to different clients. Therefore, we want to create different indexes with different ILM policies since each…

---

## [New to ES Rally not creating metrics](https://discuss.elastic.co/t/new-to-es-rally-not-creating-metrics/216848)

<div class="topic-metadata">

**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\
**Replies:** 4\
**Last updated:** [January 28, 2020, 4:15pm UTC](https://discuss.elastic.co/t/new-to-es-rally-not-creating-metrics/216848 "2020-01-28T16:15:04Z")

</div>

I set up my first Trackand Race but just hangs saying "Preparing for Race". INdex in reporting DB does create but no docs... Any Ideas? health status index uuid pri rep docs.count doc…

---

## [Docker + Persistent Registry = autodiscover failing](https://discuss.elastic.co/t/docker-persistent-registry-autodiscover-failing/157688)

<div class="topic-metadata">

**Author:** [@lifeofguenter](https://discuss.elastic.co/u/lifeofguenter)\
**Replies:** 4\
**Last updated:** [November 22, 2018, 1:14pm UTC](https://discuss.elastic.co/t/docker-persistent-registry-autodiscover-failing/157688 "2018-11-22T13:14:01Z")

</div>

Hi all, I would like to run filebeat as a docker container. The idea would be to volume mount the data folder so the registry can persistent between container (or even host) crashes/restarts. If I do so however, I get …

---

## [Indexing slowing down aggregations a lot](https://discuss.elastic.co/t/indexing-slowing-down-aggregations-a-lot/156486)

<div class="topic-metadata">

**Author:** [@GerbenKD](https://discuss.elastic.co/u/GerbenKD)\
**Replies:** 4\
**Last updated:** [November 14, 2018, 3:14pm UTC](https://discuss.elastic.co/t/indexing-slowing-down-aggregations-a-lot/156486 "2018-11-14T15:14:09Z")

</div>

We are running a search engine with an index of around 6M documents (~100GB) on a 3 node i3.xlarge managed AWS cluster. Our sharding and replicas are at the default settings, so 5 shards, one replica each. We are using E…

---

## [Date histogram aggregation - Sum of field](https://discuss.elastic.co/t/date-histogram-aggregation-sum-of-field/154397)

<div class="topic-metadata">

**Author:** [@Khanh\_Vo](https://discuss.elastic.co/u/Khanh_Vo)\
**Replies:** 4\
**Last updated:** [October 29, 2018, 8:56am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-sum-of-field/154397 "2018-10-29T08:56:16Z")

</div>

Hi guys, I have a problem when using Date histogram aggregation in Kibana: My index: \[logs\]-YYYY.MM.DD When I search from logs-2018.10.21 to logs-2018.10.23, I have a result: When I search from logs-2018.10.21 to l…

---

## [How to use the unanalyzed field when its analyzed?](https://discuss.elastic.co/t/how-to-use-the-unanalyzed-field-when-its-analyzed/93257)

<div class="topic-metadata">

**Author:** [@qkhanhpro](https://discuss.elastic.co/u/qkhanhpro)\
**Replies:** 4\
**Last updated:** [July 17, 2017, 5:53pm UTC](https://discuss.elastic.co/t/how-to-use-the-unanalyzed-field-when-its-analyzed/93257 "2017-07-17T17:53:09Z")

</div>

Hi everyone, I got into the same problem that is found here http://thomasardal.com/terms-aggregations-on-analyzed-fields-in-elasticsearch/ The problem is, we already got our data indexed with "analyzed" option , Is t…

---

## [Determine when to stop capturing event and start another one](https://discuss.elastic.co/t/determine-when-to-stop-capturing-event-and-start-another-one/86078)

<div class="topic-metadata">

**Author:** [@sahar\_q](https://discuss.elastic.co/u/sahar_q)\
**Replies:** 4\
**Last updated:** [May 29, 2017, 8:07am UTC](https://discuss.elastic.co/t/determine-when-to-stop-capturing-event-and-start-another-one/86078 "2017-05-29T08:07:09Z")

</div>

Hi guys, say im sending an data to log stahs through http, the data is separated in commas and each line represent and single event (that i want it to be independent as a document) Data for example: "192.168.0.1","25…

---

## [Can't remove fields in logstash 5.2.2](https://discuss.elastic.co/t/cant-remove-fields-in-logstash-5-2-2/78571)

<div class="topic-metadata">

**Author:** [@orlevy08](https://discuss.elastic.co/u/orlevy08)\
**Replies:** 4\
**Last updated:** [March 15, 2017, 6:27am UTC](https://discuss.elastic.co/t/cant-remove-fields-in-logstash-5-2-2/78571 "2017-03-15T06:27:01Z")

</div>

Hi all, I'm trying to remove the "remove" field and the default fields (host, @version, etc...) but can't seems to achieve this goal. Here is my conf file: input { file { path =\> \["E:/TestLog.txt"\] …

---

## [Indexing not proportional to document size](https://discuss.elastic.co/t/indexing-not-proportional-to-document-size/58454)

<div class="topic-metadata">

**Author:** [@vinayakshukre](https://discuss.elastic.co/u/vinayakshukre)\
**Replies:** 4\
**Last updated:** [August 19, 2016, 1:47pm UTC](https://discuss.elastic.co/t/indexing-not-proportional-to-document-size/58454 "2016-08-19T13:47:45Z")

</div>

Hello All, I am using bulk APIs to index data. I ran two instances of my java program which posts the data on \_bulk url. In first case, my average document size was 1550 bytes and I let this program run for 1 …

---

## [What is causing random query time fluctuations](https://discuss.elastic.co/t/what-is-causing-random-query-time-fluctuations/16956)

<div class="topic-metadata">

**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Replies:** 4\
**Last updated:** [April 11, 2014, 3:07pm UTC](https://discuss.elastic.co/t/what-is-causing-random-query-time-fluctuations/16956 "2014-04-11T15:07:08Z")

</div>

When I repeat the same search over and over again I get somewhat wild fluctuations in run time: 4ms, 4ms, 87ms, 17ms, 157ms, 4ms, 4ms, 4ms Any ideas what might cause this? This only seems to happen on my productio…

---

## [Filebeat and Logstash are running but no output on logstash](https://discuss.elastic.co/t/filebeat-and-logstash-are-running-but-no-output-on-logstash/239255)

<div class="topic-metadata">

**Author:** [@falconpurple](https://discuss.elastic.co/u/falconpurple)\
**Replies:** 1\
**Last updated:** [June 30, 2020, 11:42am UTC](https://discuss.elastic.co/t/filebeat-and-logstash-are-running-but-no-output-on-logstash/239255 "2020-06-30T11:42:31Z")

</div>

I have configured elk stack with filebeat. I am standing logs from filebeat to logstash but it's not running. The configuration in filebeat.yml : filebeat.inputs: - type: log enabled: true -C:/Users/mohnadik/…

---

## [Elasticsearch doesn't allow to allocate unassigned shard](https://discuss.elastic.co/t/elasticsearch-doesnt-allow-to-allocate-unassigned-shard/229471)

<div class="topic-metadata">

**Author:** [@Junaid\_Usman](https://discuss.elastic.co/u/Junaid_Usman)\
**Replies:** 7\
**Last updated:** [April 23, 2020, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-allow-to-allocate-unassigned-shard/229471 "2020-04-23T15:36:37Z")

</div>

Hi All, Recently, my elastic search status went 'red'. Due to which I am having problems with the elasticsearch and my application. I got the following response while performing health check. { "cluster\_name" : "elas…

---

## [How to delete the docs which are older than 5 hours from an index using curator and the index must remain](https://discuss.elastic.co/t/how-to-delete-the-docs-which-are-older-than-5-hours-from-an-index-using-curator-and-the-index-must-remain/228120)

<div class="topic-metadata">

**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\
**Replies:** 7\
**Last updated:** [April 15, 2020, 1:58pm UTC](https://discuss.elastic.co/t/how-to-delete-the-docs-which-are-older-than-5-hours-from-an-index-using-curator-and-the-index-must-remain/228120 "2020-04-15T13:58:38Z")

</div>

i want remaining docs should be stay rather than old docs in a index

---

## [Upgrade elasticsearch opensource for basic](https://discuss.elastic.co/t/upgrade-elasticsearch-opensource-for-basic/228013)

<div class="topic-metadata">

**Author:** [@George\_Oliveira](https://discuss.elastic.co/u/George_Oliveira)\
**Replies:** 7\
**Last updated:** [April 15, 2020, 1:55pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-opensource-for-basic/228013 "2020-04-15T13:55:22Z")

</div>

I have an opensource elasticseach environment, I want to upgrade to the basic version, only by uninstalling opensource and installing basic does the cluster work stable ?

---

## [How to resolve search context missing exception while passing scrollId to method](https://discuss.elastic.co/t/how-to-resolve-search-context-missing-exception-while-passing-scrollid-to-method/162798)

<div class="topic-metadata">

**Author:** [@sunilgjagtap](https://discuss.elastic.co/u/sunilgjagtap)\
**Replies:** 1\
**Last updated:** [January 3, 2019, 12:40pm UTC](https://discuss.elastic.co/t/how-to-resolve-search-context-missing-exception-while-passing-scrollid-to-method/162798 "2019-01-03T12:40:19Z")

</div>

Below code used for get scroll Id. CODE SearchRequest searchRequest = new SearchRequest(INDEX); searchRequest.types(TYPE); SearchSourceBuilder searchSourceBuilder = new SearchSourceBuilder(); searchSourceBuild…

---

## [Logstash inserting NUL in the apache\_access.log file](https://discuss.elastic.co/t/logstash-inserting-nul-in-the-apache-access-log-file/151502)

<div class="topic-metadata">

**Author:** [@kunalwagh](https://discuss.elastic.co/u/kunalwagh)\
**Replies:** 1\
**Last updated:** [October 8, 2018, 7:03pm UTC](https://discuss.elastic.co/t/logstash-inserting-nul-in-the-apache-access-log-file/151502 "2018-10-08T19:03:55Z")

</div>

I am running below command in the Power shell but getting NUL inserted in front of every character: C:\\ELK-Stack\\logstash\> echo '57.85.164.98 - - \[20/Sep/2017:15:31:04 +0200\] "GET /js/main.js" 200 588 "https://codinge x…

---

## [Needed building (configure,make and makeinstall ) steps for Filebeat from source on AIX](https://discuss.elastic.co/t/needed-building-configure-make-and-makeinstall-steps-for-filebeat-from-source-on-aix/109764)

<div class="topic-metadata">

**Author:** [@Ritesh\_Sharma](https://discuss.elastic.co/u/Ritesh_Sharma)\
**Replies:** 1\
**Last updated:** [November 30, 2017, 10:08pm UTC](https://discuss.elastic.co/t/needed-building-configure-make-and-makeinstall-steps-for-filebeat-from-source-on-aix/109764 "2017-11-30T22:08:28Z")

</div>

Hi Team, I am trying to fetch logs from my AIX source machines , since Filebeats is not supported officially on AIX but still i wanted to give it a try on AIX machines and hence decided to build its source from gccgo ; …

---

## [Error starting logstash version 8.4.1](https://discuss.elastic.co/t/error-starting-logstash-version-8-4-1/313478)

<div class="topic-metadata">

**Author:** [@nathan\_ledall](https://discuss.elastic.co/u/nathan_ledall)\
**Replies:** 6\
**Last updated:** [September 1, 2022, 9:53pm UTC](https://discuss.elastic.co/t/error-starting-logstash-version-8-4-1/313478 "2022-09-01T21:53:04Z")

</div>

Hi, I'm daving an issue trying to start logstash. if I run logstash/bat -f logstash.conf everything works fine and logstash even starts but then quickly shuts down and says there is an error any ideas on how to fix it? b…

---

## [Theoretical IMPORTANT questions about architecture of elasticsearch](https://discuss.elastic.co/t/theoretical-important-questions-about-architecture-of-elasticsearch/262596)

<div class="topic-metadata">

**Author:** [@111433](https://discuss.elastic.co/u/111433)\
**Replies:** 6\
**Last updated:** [January 30, 2021, 9:47am UTC](https://discuss.elastic.co/t/theoretical-important-questions-about-architecture-of-elasticsearch/262596 "2021-01-30T09:47:06Z")

</div>

Hello, we are developing a searching engine with elasticsearch and already have 3 nodes on dedicated servers for each. We almost have read the documentation, but faced to a couple of problems. about our servers: we ha…

---

## [Automatically configuring Kibana settings (indexes, visualizations, dashboards) on ECE](https://discuss.elastic.co/t/automatically-configuring-kibana-settings-indexes-visualizations-dashboards-on-ece/227169)

<div class="topic-metadata">

**Author:** [@robertiansweetman](https://discuss.elastic.co/u/robertiansweetman)\
**Replies:** 6\
**Last updated:** [April 8, 2020, 5:25pm UTC](https://discuss.elastic.co/t/automatically-configuring-kibana-settings-indexes-visualizations-dashboards-on-ece/227169 "2020-04-08T17:25:38Z")

</div>

Hi team I have used the elasticsearch superuser (elastic) credentials to automatically set up a bunch of elasticsearch indexes by sending the index-file.json contents to the Elastic API endpoint. My struggle is that I …

---

## [Exact Match](https://discuss.elastic.co/t/exact-match/155020)

<div class="topic-metadata">

**Author:** [@Euan](https://discuss.elastic.co/u/Euan)\
**Replies:** 6\
**Last updated:** [November 2, 2018, 10:39am UTC](https://discuss.elastic.co/t/exact-match/155020 "2018-11-02T10:39:21Z")

</div>

Hey all How could I in elastic search do my search in such a way that only if both fields given are a match will a result be given? Like an AND statement. Here is what I am trying to do (minified code): var searchResu…

---

## [How to drop the fields that Filebeat normally adds (type, source, offset, etc.)](https://discuss.elastic.co/t/how-to-drop-the-fields-that-filebeat-normally-adds-type-source-offset-etc/143235)

<div class="topic-metadata">

**Author:** [@Junble](https://discuss.elastic.co/u/Junble)\
**Replies:** 6\
**Last updated:** [August 8, 2018, 11:19am UTC](https://discuss.elastic.co/t/how-to-drop-the-fields-that-filebeat-normally-adds-type-source-offset-etc/143235 "2018-08-08T11:19:02Z")

</div>

Hi all As the title says,but i didn't find the setting about it!

---

## [How to Install APM Server in Legacy mode without Elastic APM Integration](https://discuss.elastic.co/t/how-to-install-apm-server-in-legacy-mode-without-elastic-apm-integration/325724)

<div class="topic-metadata">

**Author:** [@Mikele](https://discuss.elastic.co/u/Mikele)\
**Replies:** 2\
**Last updated:** [February 20, 2023, 11:50am UTC](https://discuss.elastic.co/t/how-to-install-apm-server-in-legacy-mode-without-elastic-apm-integration/325724 "2023-02-20T11:50:05Z")

</div>

I would like to install APM Server in old way so in Legacy. I have few problems with this installation. Could someone explain me two cases: Is it possible to install APM in Legacy mode without this step? Step 2: Set…

---

## [ConnectException using REST client in Java](https://discuss.elastic.co/t/connectexception-using-rest-client-in-java/299853)

<div class="topic-metadata">

**Author:** [@Chaitanya\_Varanasi](https://discuss.elastic.co/u/Chaitanya_Varanasi)\
**Replies:** 2\
**Last updated:** [March 16, 2022, 12:20pm UTC](https://discuss.elastic.co/t/connectexception-using-rest-client-in-java/299853 "2022-03-16T12:20:24Z")

</div>

RestClient is initialised well, but while trying to use the high level client , getting the following error java.net.ConnectException: null at org.apache.http.nio.pool.RouteSpecificPool.timeout(RouteSpecificPool…

---

## [Anonymous Access problem in Kibana](https://discuss.elastic.co/t/anonymous-access-problem-in-kibana/195290)

<div class="topic-metadata">

**Author:** [@Daniel6](https://discuss.elastic.co/u/Daniel6)\
**Replies:** 2\
**Last updated:** [August 16, 2019, 7:59am UTC](https://discuss.elastic.co/t/anonymous-access-problem-in-kibana/195290 "2019-08-16T07:59:29Z")

</div>

Hi Elastic team, My ELK version is 7.2 and running on CentOS7. I have configured x-pack security and it works perfectly. But in official demo web official kibana demo . I found that there is no login page and visitor…

---

## [Flatten array in Logstash](https://discuss.elastic.co/t/flatten-array-in-logstash/151850)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 2\
**Last updated:** [October 10, 2018, 2:08pm UTC](https://discuss.elastic.co/t/flatten-array-in-logstash/151850 "2018-10-10T14:08:09Z")

</div>

I am attempting to extract new values from array keys \[files\]\[MD5\] and create a new field for md5\_hashes that will contain the array keys. Input: "files": \[{ "SHA256": "1213447D713ECA24484983E754474D9D2F4A283D77DD…

---

## [Elasticsearch delete\_by\_query version conflict](https://discuss.elastic.co/t/elasticsearch-delete-by-query-version-conflict/142492)

<div class="topic-metadata">

**Author:** [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 10:07am UTC](https://discuss.elastic.co/t/elasticsearch-delete-by-query-version-conflict/142492 "2018-08-10T10:07:58Z")

</div>

Hi guys, My configuration is : Heap : 30GB core : 24 ES version : 6 We having approx 100cr data (3 months) in single index. We have field date which has format 'yyyymmdd' . Data is pushing in realtime manner it thi…

---

## [Issue while running ElasticSearch 6.2.4](https://discuss.elastic.co/t/issue-while-running-elasticsearch-6-2-4/134760)

<div class="topic-metadata">

**Author:** [@bandarujyothi](https://discuss.elastic.co/u/bandarujyothi)\
**Replies:** 2\
**Last updated:** [June 11, 2018, 6:33am UTC](https://discuss.elastic.co/t/issue-while-running-elasticsearch-6-2-4/134760 "2018-06-11T06:33:10Z")

</div>

I have installed 6.2.4. When I am trying to run Elasticsearch service through command prompt I am getting below error Message. Although we have verified our java version it is pointed to the Server VM. \[2018-06-05T17:1…

---

## [Elasticsearch-migration plugin not working on es 2.4.0/ 2.4.1](https://discuss.elastic.co/t/elasticsearch-migration-plugin-not-working-on-es-2-4-0-2-4-1/63629)

<div class="topic-metadata">

**Author:** [@biswajit86](https://discuss.elastic.co/u/biswajit86)\
**Replies:** 2\
**Last updated:** [November 9, 2016, 7:06am UTC](https://discuss.elastic.co/t/elasticsearch-migration-plugin-not-working-on-es-2-4-0-2-4-1/63629 "2016-11-09T07:06:13Z")

</div>

Hi, I am trying to run the elasticsearch migration plugin on es-2.4.0 and es-2.4.1 clusters. I do not get any output from the plugin. I do not see any errors on the webpage or in the elastic logs. How can I figure out …

[Previous page](https://discuss.elastic.co/top.md?page=1458&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1460&per_page=50&period=all)
