# Top **URL:** https://discuss.elastic.co/top.md?page=1472&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1473 --- ## [More indices vs. more types](https://discuss.elastic.co/t/more-indices-vs-more-types/7747)
**Author:** [@Christian\_Aust](https://discuss.elastic.co/u/Christian_Aust)\ **Replies:** 8\ **Last updated:** [May 21, 2012, 8:35am UTC](https://discuss.elastic.co/t/more-indices-vs-more-types/7747 "2012-05-21T08:35:48Z")
Hi all, how is having \*multiple indices with just one document type\* different from having \*one index with multiple document types\*? When do I choose what? My application sorts topics into namespaces. Most of the… --- ## [Field Collapsing & Pagination](https://discuss.elastic.co/t/field-collapsing-pagination/249936)
**Author:** [@Prahalad\_Rathod](https://discuss.elastic.co/u/Prahalad_Rathod)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 9:00am UTC](https://discuss.elastic.co/t/field-collapsing-pagination/249936 "2020-09-28T09:00:18Z")
I just want to know how pagination works with collapsing. I have below index data: {'departmentNo': 1, 'departmentName': 'Food', 'departmentLoc': "I1", "departmentScore": "5", "employeeid" : 1, "employeeName": "vij… --- ## [Dynamic JSON -- Can't get text on a START\_OBJECT](https://discuss.elastic.co/t/dynamic-json-cant-get-text-on-a-start-object/165653)
**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\ **Replies:** 1\ **Last updated:** [January 30, 2019, 10:18pm UTC](https://discuss.elastic.co/t/dynamic-json-cant-get-text-on-a-start-object/165653 "2019-01-30T22:18:59Z")
I know the error means it is expecting a string but gets an object, but I have no idea why only this field breaks. It looks and behaves like every other field yet consistently errors out. Here is the relevant template I… --- ## [How to share my DashBoard via iframe without Authentication](https://discuss.elastic.co/t/how-to-share-my-dashboard-via-iframe-without-authentication/165006)
**Author:** [@Sunil\_Edupuganti](https://discuss.elastic.co/u/Sunil_Edupuganti)\ **Replies:** 1\ **Last updated:** [January 21, 2019, 3:24pm UTC](https://discuss.elastic.co/t/how-to-share-my-dashboard-via-iframe-without-authentication/165006 "2019-01-21T15:24:50Z")
How to share my DashBoard via iframe without Authentication --- ## [Multipolygon query](https://discuss.elastic.co/t/multipolygon-query/128131)
**Author:** [@JanSp](https://discuss.elastic.co/u/JanSp)\ **Replies:** 1\ **Last updated:** [April 16, 2018, 8:23pm UTC](https://discuss.elastic.co/t/multipolygon-query/128131 "2018-04-16T20:23:15Z")
Hey guys, i want to make a query on a multipolygon array and dont know if it is possible. i have some tables where the coordinates stored as point and want to find all these document within a polygon or a multipolygon. … --- ## [Painless Debug.explain is NOT a println](https://discuss.elastic.co/t/painless-debug-explain-is-not-a-println/117146)
**Author:** [@luis1](https://discuss.elastic.co/u/luis1)\ **Replies:** 1\ **Last updated:** [January 26, 2018, 5:05pm UTC](https://discuss.elastic.co/t/painless-debug-explain-is-not-a-println/117146 "2018-01-26T17:05:19Z")
Painless Debug.explain is NOT a println because interrupts the flow. Is there any way I can print a variable without interrupting the scoring for the document? Thanks. --- ## [SearchAfter and possible duplicates?](https://discuss.elastic.co/t/searchafter-and-possible-duplicates/116058)
**Author:** [@Ryan\_M](https://discuss.elastic.co/u/Ryan_M)\ **Replies:** 1\ **Last updated:** [January 18, 2018, 1:50pm UTC](https://discuss.elastic.co/t/searchafter-and-possible-duplicates/116058 "2018-01-18T13:50:40Z")
I've been looking at the docs for Search After and I have a question regarding the last paragraph (emphasis mine): search\_after is not a solution to jump freely to a random page but rather to scroll many queries in par… --- ## [\[v5.6.1 java transport client\] org.elasticsearch.client.transport.NoNodeAvailableException: None of the configured nodes were available](https://discuss.elastic.co/t/v5-6-1-java-transport-client-org-elasticsearch-client-transport-nonodeavailableexception-none-of-the-configured-nodes-were-available/101767)
**Author:** [@Roman\_Selmeci](https://discuss.elastic.co/u/Roman_Selmeci)\ **Replies:** 1\ **Last updated:** [September 26, 2017, 1:18am UTC](https://discuss.elastic.co/t/v5-6-1-java-transport-client-org-elasticsearch-client-transport-nonodeavailableexception-none-of-the-configured-nodes-were-available/101767 "2017-09-26T01:18:15Z")
Hi, my name is Roman. I'm really hopeless. I'm trying to use elastic cloud, but it does not work correctly and I'm getting randomly java error on transport client after update to 5.6.1 version (cluster and client). M… --- ## [Ruby code with operation (modulo)](https://discuss.elastic.co/t/ruby-code-with-operation-modulo/81339)
**Author:** [@henrilabarre](https://discuss.elastic.co/u/henrilabarre)\ **Replies:** 1\ **Last updated:** [April 5, 2017, 5:40pm UTC](https://discuss.elastic.co/t/ruby-code-with-operation-modulo/81339 "2017-04-05T17:40:45Z")
Hi I use a CSV (and the logstash csv filter) and with one field I need to create a id based on this php code where $siren value is in my csv (named SIREN, for example 010441582), notice the use of php modulo (%) ret… --- ## [Using logstash-output-gelf can I print my own message that will describe the issue cause](https://discuss.elastic.co/t/using-logstash-output-gelf-can-i-print-my-own-message-that-will-describe-the-issue-cause/74790)
**Author:** [@sivaram](https://discuss.elastic.co/u/sivaram)\ **Replies:** 1\ **Last updated:** [February 12, 2017, 6:53am UTC](https://discuss.elastic.co/t/using-logstash-output-gelf-can-i-print-my-own-message-that-will-describe-the-issue-cause/74790 "2017-02-12T06:53:01Z")
logFile $ sudo vi /var/log/nova/nova-compute.log 2017-01-25 02:05:35.748 20820 CRITICAL nova \[req-a5d425ae-b08e-450b-ac83-142733c35c99 - - - - -\] AccessRefused: (0, 0): (403) ACCESS\_REFUSED - Login was refused using a… --- ## [How to convert gc logs from mb kb to bytes](https://discuss.elastic.co/t/how-to-convert-gc-logs-from-mb-kb-to-bytes/70659)
**Author:** [@jagadees](https://discuss.elastic.co/u/jagadees)\ **Replies:** 1\ **Last updated:** [January 10, 2017, 6:41am UTC](https://discuss.elastic.co/t/how-to-convert-gc-logs-from-mb-kb-to-bytes/70659 "2017-01-10T06:41:28Z")
filter { match =\> { "store" =\> "^%{\[@metadata\]\[store\_number\]:float}(?)\[kKmMgGtT\])(?\[kKmMgGtT\])(?\[kKmMgGtT\])" } } mutate { add\_field =\> { "\[@metadata\]\[before\_memory\]\[INT:after\_memory\]\[NOTSPA… --- ## [Failure connecting to x.x.x.x: dial tcp x.x.x.x❌ connection refused](https://discuss.elastic.co/t/failure-connecting-to-x-x-x-x-dial-tcp-x-x-x-x-x-connection-refused/19007)
**Author:** [@Indirajith\_V](https://discuss.elastic.co/u/Indirajith_V)\ **Replies:** 1\ **Last updated:** [August 4, 2014, 9:09am UTC](https://discuss.elastic.co/t/failure-connecting-to-x-x-x-x-dial-tcp-x-x-x-x-x-connection-refused/19007 "2014-08-04T09:09:24Z")
Hi all, I am Naive to elasticsearch and logstash. Logstash suddenly. When I looked in to the logs parsed and I can only see the following. Jul 31 14:55:16 logs 2014-07-31T14:55:16+02:00 .... logstash-forwarder\[22514… --- ## [Index template creation](https://discuss.elastic.co/t/index-template-creation/337049)
**Author:** [@shailendra1](https://discuss.elastic.co/u/shailendra1)\ **Replies:** 6\ **Last updated:** [July 3, 2023, 12:48pm UTC](https://discuss.elastic.co/t/index-template-creation/337049 "2023-07-03T12:48:36Z")
during the template creation based on the json data , i am facing the issues for the data, even i have defined the nested type. please suggest . "type": "illegal\_argument\_exception", "reason": "composable template \[… --- ## [ILM on single-node?](https://discuss.elastic.co/t/ilm-on-single-node/333997)
**Author:** [@Skairik](https://discuss.elastic.co/u/Skairik)\ **Replies:** 6\ **Last updated:** [May 22, 2023, 10:44am UTC](https://discuss.elastic.co/t/ilm-on-single-node/333997 "2023-05-22T10:44:37Z")
Hello everyone, I am currently on a single-node infrastructure and I would like to know if the implementation of ILM was useful, I assumed that putting an ILM with the different phases would allow me to keep my data lon… --- ## [Wrong data aggregation in a table](https://discuss.elastic.co/t/wrong-data-aggregation-in-a-table/212033)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 2:20pm UTC](https://discuss.elastic.co/t/wrong-data-aggregation-in-a-table/212033 "2020-01-14T14:20:56Z")
Hello, I've created a table, but the data in the table differ from the elastic. For example, for player\_id "750" there are 6 records from 2 different devices: However it's impossible because each player's id is uniq… --- ## [Red cluster](https://discuss.elastic.co/t/red-cluster/165400)
**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\ **Replies:** 6\ **Last updated:** [January 24, 2019, 7:35am UTC](https://discuss.elastic.co/t/red-cluster/165400 "2019-01-24T07:35:34Z")
I installed elastic search on 2 servers with different ips. and they are found in the cluster one master and one data node and their names are master and data. when I was trying to run kibana on the master it kept hangin… --- ## [Filebeat and Docker EE](https://discuss.elastic.co/t/filebeat-and-docker-ee/156698)
**Author:** [@Eric\_Duquesnoy](https://discuss.elastic.co/u/Eric_Duquesnoy)\ **Replies:** 6\ **Last updated:** [November 16, 2018, 2:21pm UTC](https://discuss.elastic.co/t/filebeat-and-docker-ee/156698 "2018-11-16T14:21:45Z")
Hi There, We have just installed a Docker EE cluster on 10 nodes (3 UCP , 3 DTR and 6 workers) . Filebeat and Metricbeat are installed on each nodes with this configuration : filebeat.config.modules: path: ${path.co… --- ## [Problem with creation indexes based on custom field](https://discuss.elastic.co/t/problem-with-creation-indexes-based-on-custom-field/99621)
**Author:** [@alex\_gorb](https://discuss.elastic.co/u/alex_gorb)\ **Replies:** 6\ **Last updated:** [September 7, 2017, 10:02am UTC](https://discuss.elastic.co/t/problem-with-creation-indexes-based-on-custom-field/99621 "2017-09-07T10:02:19Z")
Hi, I am using ELK 5.5.2. I have a problem with creation indexes. On filebeat config I have a following setup input\_type: log document\_type: prod paths: c:\\somepath\*.log fields: my\_log\_type: app On logstas… --- ## [Minimum Hardware Requirement for Kibana](https://discuss.elastic.co/t/minimum-hardware-requirement-for-kibana/374536)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 3\ **Last updated:** [February 17, 2025, 6:30am UTC](https://discuss.elastic.co/t/minimum-hardware-requirement-for-kibana/374536 "2025-02-17T06:30:03Z")
Hi Team, We search in official documentation of Elastic Search for minimum HW to get install Kibana but not able to found any relevant docs. Could you please share the documentation link. Thanks, Debasis --- ## [Filebeat exclude\_lines](https://discuss.elastic.co/t/filebeat-exclude-lines/276892)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 3\ **Last updated:** [July 21, 2021, 2:37pm UTC](https://discuss.elastic.co/t/filebeat-exclude-lines/276892 "2021-07-21T14:37:45Z")
Hi evreyone, I wanted to use exclude\_lines to exlude all line of a file exept the first one. (I want only the name of the file and his path i don't need his message). filebeat.inputs: - type: log enabled: true #clo… --- ## [Finding snippet location in text array](https://discuss.elastic.co/t/finding-snippet-location-in-text-array/237462)
**Author:** [@coding\_martian](https://discuss.elastic.co/u/coding_martian)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 1:12pm UTC](https://discuss.elastic.co/t/finding-snippet-location-in-text-array/237462 "2020-06-18T13:12:49Z")
I'm trying to use App Search to build a document search feature. I am storing the text of documents I want to search in an array, where each element is a string consisting of all the text of a single page. My current sch… --- ## [Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable/204029)
**Author:** [@wangzf](https://discuss.elastic.co/u/wangzf)\ **Replies:** 0\ **Last updated:** [October 17, 2019, 10:47am UTC](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable/204029 "2019-10-17T10:47:00Z")
hi,i hava a question ,my cluster is green ,but my logstasht hava this error Oct 15 09:17:16 logstashmysql logstash\[14839\]: \[2019-10-15T09:17:16,974\]\[WARN \]\[logstash.outputs.elasticsearch\] Marking url as dead. Last error… --- ## [Visualizing different values of same field in a single pie chart](https://discuss.elastic.co/t/visualizing-different-values-of-same-field-in-a-single-pie-chart/202945)
**Author:** [@whalien52](https://discuss.elastic.co/u/whalien52)\ **Replies:** 3\ **Last updated:** [October 16, 2019, 10:56am UTC](https://discuss.elastic.co/t/visualizing-different-values-of-same-field-in-a-single-pie-chart/202945 "2019-10-16T10:56:14Z")
Hi Guys, This is urgent and I really need some assistance with this. I have a particular field and for that field I have different values. I need to compare those different values of a same field in a single pie chart. … --- ## [Issue converting number field to date](https://discuss.elastic.co/t/issue-converting-number-field-to-date/189497)
**Author:** [@moti.mor](https://discuss.elastic.co/u/moti.mor)\ **Replies:** 3\ **Last updated:** [July 10, 2019, 4:39am UTC](https://discuss.elastic.co/t/issue-converting-number-field-to-date/189497 "2019-07-10T04:39:42Z")
Hi there, I'm trying to convert the following number field to date. Please see pic attached. and it's not working... please see my logstash configuration attahced on another photo. this is urgent issue for me , h… --- ## [What is meant by the line "Non-zero metrics in the last 30s" in WinLogBeat logs](https://discuss.elastic.co/t/what-is-meant-by-the-line-non-zero-metrics-in-the-last-30s-in-winlogbeat-logs/191225)
**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\ **Replies:** 3\ **Last updated:** [July 22, 2019, 3:16pm UTC](https://discuss.elastic.co/t/what-is-meant-by-the-line-non-zero-metrics-in-the-last-30s-in-winlogbeat-logs/191225 "2019-07-22T15:16:02Z")
I usually see the line "Non-zero metrics in the last 30s" in WinLogBeat logs and it does not load any events. This ends with the line "Failed to publish events caused by: write tcp 127.0.0.1:63448-\>127.0.0.1:5044" and th… --- ## [Use timestamp from previous log line](https://discuss.elastic.co/t/use-timestamp-from-previous-log-line/115097)
**Author:** [@Tomas\_Law](https://discuss.elastic.co/u/Tomas_Law)\ **Replies:** 3\ **Last updated:** [January 12, 2018, 6:43pm UTC](https://discuss.elastic.co/t/use-timestamp-from-previous-log-line/115097 "2018-01-12T18:43:43Z")
Hello, I have several logs with a timestamp field. I want to be able to group them by periods. That is, if the timestamp of a log is 30 minutes after the timestamp of the previous log, then it's in a different period. … --- ## [Packetbeat: panic: Too many events acked](https://discuss.elastic.co/t/packetbeat-panic-too-many-events-acked/102055)
**Author:** [@191801737](https://discuss.elastic.co/u/191801737)\ **Replies:** 3\ **Last updated:** [October 10, 2017, 11:47am UTC](https://discuss.elastic.co/t/packetbeat-panic-too-many-events-acked/102055 "2017-10-10T11:47:59Z")
\[root@xdl-10-7 packetbeat\]# bin/packetbeat -version packetbeat version 6.0.0-beta2 (amd64), libbeat 6.0.0-beta2 \[root@xdl-10-7 packetbeat\]# cat /etc/redhat-release CentOS Linux release 7.3.1611 (Core) /var/log/messag… --- ## [\[Logstash and Kibana running parallely\]](https://discuss.elastic.co/t/logstash-and-kibana-running-parallely/34962)
**Author:** [@varun\_kumar1](https://discuss.elastic.co/u/varun_kumar1)\ **Replies:** 3\ **Last updated:** [November 20, 2015, 6:04am UTC](https://discuss.elastic.co/t/logstash-and-kibana-running-parallely/34962 "2015-11-20T06:04:00Z")
Hello, Firstly I am new to using Kibana and Logstash .I am running logstash to parse one file and simultaneously also running kibana .Is there any way seeing from the Kibana GUI I can confirm that Logstasth parsing has b… --- ## [Which version of elasticsearch solve the CVE-2022-1471(snakeyaml need bump to 2.0 version)](https://discuss.elastic.co/t/which-version-of-elasticsearch-solve-the-cve-2022-1471-snakeyaml-need-bump-to-2-0-version/355162)
**Author:** [@DeBruyne2020](https://discuss.elastic.co/u/DeBruyne2020)\ **Replies:** 1\ **Last updated:** [March 12, 2024, 10:12am UTC](https://discuss.elastic.co/t/which-version-of-elasticsearch-solve-the-cve-2022-1471-snakeyaml-need-bump-to-2-0-version/355162 "2024-03-12T10:12:03Z")
I have a question ： the elasticsearch that I use now( version 7.11.2) has CVE-2022-1471 (about snakeyaml), which version of elasticsearch solve this problem ? (As I know, snakeyaml need bump to 2.0 version which solv… --- ## [Does Log4j vulnerability (CVE-2021-44228) is impacted for ES v7.5.2?](https://discuss.elastic.co/t/does-log4j-vulnerability-cve-2021-44228-is-impacted-for-es-v7-5-2/292128)
**Author:** [@Anuroop1](https://discuss.elastic.co/u/Anuroop1)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:17am UTC](https://discuss.elastic.co/t/does-log4j-vulnerability-cve-2021-44228-is-impacted-for-es-v7-5-2/292128 "2021-12-20T00:17:51Z")
We are using Elasticsearch v7.5.2 along with OpenJDK 11.0.11 in on-premise servers and I just need to know from Elasticsearch Team support if this version is impacted by Log4j vulnerability (CVE-2021-44228) or not. The … --- ## [How to make filed as aggregatable in Elastic search](https://discuss.elastic.co/t/how-to-make-filed-as-aggregatable-in-elastic-search/272636)
**Author:** [@Suvarna\_S](https://discuss.elastic.co/u/Suvarna_S)\ **Replies:** 7\ **Last updated:** [May 12, 2021, 9:00am UTC](https://discuss.elastic.co/t/how-to-make-filed-as-aggregatable-in-elastic-search/272636 "2021-05-12T09:00:59Z")
Hi Team, I am new to elastic search/kibana. I have a field "exceptions". I want to make this field as aggregatable, so that I can use this field for my visualization dashboard to fetch the count of exceptions. Kindly h… --- ## [Logstash multiple configuration](https://discuss.elastic.co/t/logstash-multiple-configuration/251065)
**Author:** [@peretz\_shlomi](https://discuss.elastic.co/u/peretz_shlomi)\ **Replies:** 7\ **Last updated:** [October 6, 2020, 12:16pm UTC](https://discuss.elastic.co/t/logstash-multiple-configuration/251065 "2020-10-06T12:16:30Z")
Hello everyone I'm trying to install the logstash system with multipel I have a error to run ths system. error: D:\\logstash\\bin\>logstash --path.settings d:/logstash/config Java HotSpot(TM) 64-Bit Server VM warning: … --- ## [How to restore all indices from a snapshot location?](https://discuss.elastic.co/t/how-to-restore-all-indices-from-a-snapshot-location/107185)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 11:00pm UTC](https://discuss.elastic.co/t/how-to-restore-all-indices-from-a-snapshot-location/107185 "2017-11-17T23:00:44Z")
Hi, I have created a snapshot and below is the structure of my snapshots using GET /\_snapshot/ESSnapshots/\* command. { "snapshots": \[ { "snapshot": "mylogs1backup-20170920000007", "uuid": "XRpT\_8feTne… --- ## [How to construct Spark DStream from continued RDD？](https://discuss.elastic.co/t/how-to-construct-spark-dstream-from-continued-rdd/44388)
**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\ **Replies:** 1\ **Last updated:** [March 21, 2016, 10:17am UTC](https://discuss.elastic.co/t/how-to-construct-spark-dstream-from-continued-rdd/44388 "2016-03-21T10:17:59Z")
I\`m reading data from ElasticSearch to Spark every 5min. So there will be a RDD every 5 minutes. I hope to construct a DStream based on these RDDs, so that I can get report for data within last 1 day, last 1 hour , las… --- ## [How to index heterogeneous JSON Array as value in Elastic Search](https://discuss.elastic.co/t/how-to-index-heterogeneous-json-array-as-value-in-elastic-search/29128)
**Author:** [@apt275](https://discuss.elastic.co/u/apt275)\ **Replies:** 1\ **Last updated:** [September 11, 2015, 1:42pm UTC](https://discuss.elastic.co/t/how-to-index-heterogeneous-json-array-as-value-in-elastic-search/29128 "2015-09-11T13:42:04Z")
Can Elastic search index fields like "key": \[ 14.0, "somestring" \] if i try to ingest this data, i get this error org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: Found unrecoverable error \[Bad Request(400) - \[W… --- ## [After server disk full, indexes unavailable](https://discuss.elastic.co/t/after-server-disk-full-indexes-unavailable/5542)
**Author:** [@drahmel7](https://discuss.elastic.co/u/drahmel7)\ **Replies:** 1\ **Last updated:** [July 19, 2012, 4:52pm UTC](https://discuss.elastic.co/t/after-server-disk-full-indexes-unavailable/5542 "2012-07-19T16:52:56Z")
My CentOS server box that was hosting Elastic Server ran out of disk space. After clearing disk space and bringing up ES, all indexes are unavailable. If I do this: curl -XGET http://localhost:9200/\_status I ge… --- ## [How to Resolve In\_flight\_request Data too Large Errors](https://discuss.elastic.co/t/how-to-resolve-in-flight-request-data-too-large-errors/289193)
**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 6:33am UTC](https://discuss.elastic.co/t/how-to-resolve-in-flight-request-data-too-large-errors/289193 "2021-11-16T06:33:54Z")
Hello, dear community, We are constantly getting this OutOfMemory error with our master-1 machine. \[in\_flight\_requests\] New used memory 4567112664 \[4.2gb\] for data of \[\\] would be larger than configured br… --- ## [How to disable JSON parser](https://discuss.elastic.co/t/how-to-disable-json-parser/279336)
**Author:** [@maxim.mokhov](https://discuss.elastic.co/u/maxim.mokhov)\ **Replies:** 2\ **Last updated:** [July 22, 2021, 11:22pm UTC](https://discuss.elastic.co/t/how-to-disable-json-parser/279336 "2021-07-22T23:22:37Z")
I have different logs from applications, and I want sent it to elasticsearch. In some cases in logs appear JSON. I want to send it in elasticsearch as plaintext. But in log logstash I see "JSON parse failure": \[2021-07… --- ## [怎样使用QueryBuilders查询列表字段](https://discuss.elastic.co/t/querybuilders/240306)
**Author:** [@PeterZhao](https://discuss.elastic.co/u/PeterZhao)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 8:17am UTC](https://discuss.elastic.co/t/querybuilders/240306 "2020-07-13T08:17:53Z")
新手 列表字段：docBuilder.field(FreeTextField, List freeTextFieldAsArray) 想用QueryBuilders做一个查询匹配列表中的一项，怎么做呢？ --- ## [Readiness check failure when enabling OIDC authentication](https://discuss.elastic.co/t/readiness-check-failure-when-enabling-oidc-authentication/200554)
**Author:** [@robcoward](https://discuss.elastic.co/u/robcoward)\ **Replies:** 2\ **Last updated:** [September 22, 2019, 6:16pm UTC](https://discuss.elastic.co/t/readiness-check-failure-when-enabling-oidc-authentication/200554 "2019-09-22T18:16:01Z")
I'm trying to enable OIDC authentication in elastic/kibana deployed by the operator, having enabled the platinum subscription trial. The operator is starting the required number of pods and they are coming up as running … --- ## [Upgrade from 6.8 to 7.1 - master not discovered yet: have discovered \[...lists all master nodes...\]](https://discuss.elastic.co/t/upgrade-from-6-8-to-7-1-master-not-discovered-yet-have-discovered-lists-all-master-nodes/187604)
**Author:** [@vangogh94](https://discuss.elastic.co/u/vangogh94)\ **Replies:** 2\ **Last updated:** [June 27, 2019, 6:27pm UTC](https://discuss.elastic.co/t/upgrade-from-6-8-to-7-1-master-not-discovered-yet-have-discovered-lists-all-master-nodes/187604 "2019-06-27T18:27:47Z")
Hi, we upgraded to Elasticseach 7.1.1 from 6.8 last week, the cluster has 3 master nodes and 60 data nodes. First few days everything worked as expected. On the third day random nodes started disconnecting and connecting… --- ## [Logstash: How to stop logstash once the scheduled job is complete](https://discuss.elastic.co/t/logstash-how-to-stop-logstash-once-the-scheduled-job-is-complete/174917)
**Author:** [@Ram18](https://discuss.elastic.co/u/Ram18)\ **Replies:** 2\ **Last updated:** [April 3, 2019, 2:56pm UTC](https://discuss.elastic.co/t/logstash-how-to-stop-logstash-once-the-scheduled-job-is-complete/174917 "2019-04-03T14:56:12Z")
Hi, I have cron scheduled jobs, which would append the data into Elasticsearch indexes. The scheduled job is supposed to run on daily basis. I have different set of files to load. So I need to know, how we can stop the … --- ## [VersionConflictEngineException](https://discuss.elastic.co/t/versionconflictengineexception/144474)
**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\ **Replies:** 2\ **Last updated:** [August 24, 2018, 9:41am UTC](https://discuss.elastic.co/t/versionconflictengineexception/144474 "2018-08-24T09:41:44Z")
I use multiple threads to update one index.And I got VersionConflictEngineException. And it also tells me which shard failed（\[daily\_station\_data\_collect\_20180731\]\[0\]\]）. I think “\[0\]” is the shard which is failed. So I… --- ## [Aggregate records netflow](https://discuss.elastic.co/t/aggregate-records-netflow/139293)
**Author:** [@eddie4](https://discuss.elastic.co/u/eddie4)\ **Replies:** 2\ **Last updated:** [July 14, 2018, 3:49pm UTC](https://discuss.elastic.co/t/aggregate-records-netflow/139293 "2018-07-14T15:49:24Z")
The problem: We operate a elastic search cluster for storing netflow data. One of our clients operates a UDP service that is queried an insane amount by different IP's. This one client is responsible for 2/3 of the flow… --- ## [Time limit for ES node shutdown](https://discuss.elastic.co/t/time-limit-for-es-node-shutdown/113148)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 2\ **Last updated:** [December 26, 2017, 5:18am UTC](https://discuss.elastic.co/t/time-limit-for-es-node-shutdown/113148 "2017-12-26T05:18:42Z")
Working with ES 5.4 How can I know what is the maximum limit for ES master node to shutdown? I have a 3 nodes cluster, 1 elected as master. When I shut it down, a new master is elected. In the meantime, I get org.el… --- ## [Heat Map not showing only data](https://discuss.elastic.co/t/heat-map-not-showing-only-data/86070)
**Author:** [@BrunoC](https://discuss.elastic.co/u/BrunoC)\ **Replies:** 2\ **Last updated:** [May 17, 2017, 12:34pm UTC](https://discuss.elastic.co/t/heat-map-not-showing-only-data/86070 "2017-05-17T12:34:53Z")
Hello, I have a heat map that only shows data and not the map behind it. As seen here. --- ## [Variable in gsub](https://discuss.elastic.co/t/variable-in-gsub/44051)
**Author:** [@deepmind](https://discuss.elastic.co/u/deepmind)\ **Replies:** 2\ **Last updated:** [March 11, 2016, 7:50am UTC](https://discuss.elastic.co/t/variable-in-gsub/44051 "2016-03-11T07:50:03Z")
Hi, Multiline concat my device logs but does not remove unusefull informations. exemple: \<134\>Mar 03 11:39:57 SHK-NSW-CORE CLI(67) Data: USERCMD: \ \<10.1.16.1\> \[no ip interface lololol\] \ **Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 5\ **Last updated:** [September 27, 2019, 6:18pm UTC](https://discuss.elastic.co/t/csv-export-bug/201414 "2019-09-27T18:18:13Z") kibana exports csv inside but writes in one column. I want separate columns in excel format as I described in the figure. I am developing in kibana development environment. The page developed is on the following page. … --- ## [Explenation why I can't see my data visualized](https://discuss.elastic.co/t/explenation-why-i-cant-see-my-data-visualized/100918)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 5\ **Last updated:** [September 19, 2017, 3:09pm UTC](https://discuss.elastic.co/t/explenation-why-i-cant-see-my-data-visualized/100918 "2017-09-19T15:09:38Z")
Hi I have the following data: \[image\] and when I make a visualization of this info I get nothing: \[image\] Many thanks! --- ## [Delete by query with has\_parent](https://discuss.elastic.co/t/delete-by-query-with-has-parent/10938)
**Author:** [@snmaynard](https://discuss.elastic.co/u/snmaynard)\ **Replies:** 5\ **Last updated:** [May 28, 2013, 10:30am UTC](https://discuss.elastic.co/t/delete-by-query-with-has-parent/10938 "2013-05-28T10:30:17Z")
I have the following schema in elasticsearch. parent = { name: "Name", id: "parentID" } child = { name:"Name here", id: "childID" } When adding a child, I add it as a child of the parent in elastic… [Previous page](https://discuss.elastic.co/top.md?page=1471&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1473&per_page=50&period=all)