# Top **URL:** https://discuss.elastic.co/top.md?page=149&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 150 --- ## [Fuzzy query behaviour](https://discuss.elastic.co/t/fuzzy-query-behaviour/53238)
**Author:** [@Patrick\_Kuhlmann](https://discuss.elastic.co/u/Patrick_Kuhlmann)\ **Replies:** 10\ **Last updated:** [June 21, 2016, 6:08am UTC](https://discuss.elastic.co/t/fuzzy-query-behaviour/53238 "2016-06-21T06:08:23Z")
Hi I'm about to make a phonelist with ES. For user experience I want to make the search a fuzzy one localhost:9200/phonelist/users/\_search { "query": { "match": { "name": { "query": "Kuhlmann", … --- ## [Elasticsearch-Kibana- Deployment issues in Anthos on-prem K8s cluster](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465)
**Author:** [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Replies:** 27\ **Last updated:** [October 17, 2023, 4:35am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465 "2023-10-17T04:35:34Z")
Hi Team, We have Anthos on-prem K8s, where we need to deploy Elasticsearch and Kibana, I used the attached .yaml file but it's not working.. I have two DNS created for Elasticsearch and Kibana something like this elast… --- ## [Keep losing documents](https://discuss.elastic.co/t/keep-losing-documents/3171)
**Author:** [@David\_Jensen\_2](https://discuss.elastic.co/u/David_Jensen_2)\ **Replies:** 16\ **Last updated:** [August 5, 2010, 7:42am UTC](https://discuss.elastic.co/t/keep-losing-documents/3171 "2010-08-05T07:42:44Z")
I was a little worried about the "magic" that ElasticSearch provides. Here is an example why ... After several days of indexing, I ran into an Exception reporting too many open files. I fixed the issue on the system… --- ## [Azure Filebeat issues with dashboard setup and data ingestion](https://discuss.elastic.co/t/azure-filebeat-issues-with-dashboard-setup-and-data-ingestion/274823)
**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\ **Replies:** 13\ **Last updated:** [July 13, 2021, 12:56pm UTC](https://discuss.elastic.co/t/azure-filebeat-issues-with-dashboard-setup-and-data-ingestion/274823 "2021-07-13T12:56:56Z")
Hi people, I am currently new to elk stack and have set up elk locally and also have an elastic cloud instance. So as part of the learning phase I am trying to use filebeat to consume data from Azure. I have followed … --- ## [Unable to configure Elastic APM with Java App](https://discuss.elastic.co/t/unable-to-configure-elastic-apm-with-java-app/191329)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 18\ **Last updated:** [August 14, 2019, 6:36pm UTC](https://discuss.elastic.co/t/unable-to-configure-elastic-apm-with-java-app/191329 "2019-08-14T18:36:00Z")
Hello team I'm trying to integrate apm with java app. Kibana version: 7.1.1 Elasticsearch version: 7.1.1 APM Server version: 7.2.0 APM Agent language and version: Java 1.7.0 Java App: https://github.com/elastic/s… --- ## [Extracting full-text from an attachment field](https://discuss.elastic.co/t/extracting-full-text-from-an-attachment-field/133933)
**Author:** [@silversun](https://discuss.elastic.co/u/silversun)\ **Replies:** 18\ **Last updated:** [June 4, 2018, 7:08pm UTC](https://discuss.elastic.co/t/extracting-full-text-from-an-attachment-field/133933 "2018-06-04T19:08:41Z")
I am a newbie for Elasticsearch. I'm working on an application which integrates Drupal with Elasticsearch 2.4. Our current ES index has data with a field called "file\_resource\_url" with a full URL path to a PDF/DOC file… --- ## [Kibana Timeout on visualization edit](https://discuss.elastic.co/t/kibana-timeout-on-visualization-edit/134471)
**Author:** [@ramaro0x00](https://discuss.elastic.co/u/ramaro0x00)\ **Replies:** 12\ **Last updated:** [June 15, 2018, 7:37pm UTC](https://discuss.elastic.co/t/kibana-timeout-on-visualization-edit/134471 "2018-06-15T19:37:09Z")
Hello guys, I'm having troubles when creating, updating and deleting dashboards and/or visualizations. When opening the same dashboards and visualizations I have no problem whatsoever. I have a nearly empty database. Th… --- ## [Run 2 kibana instances with different dashboards](https://discuss.elastic.co/t/run-2-kibana-instances-with-different-dashboards/148619)
**Author:** [@Guy\_Barnea](https://discuss.elastic.co/u/Guy_Barnea)\ **Replies:** 10\ **Last updated:** [September 16, 2018, 10:40am UTC](https://discuss.elastic.co/t/run-2-kibana-instances-with-different-dashboards/148619 "2018-09-16T10:40:42Z")
hello, i want to run 2 instances of kibana, such that each one will point to different es cluster. I want that each kibana will have different dashboards. it is possible to do such a thing? Thanks. --- ## [OutOfMemory error](https://discuss.elastic.co/t/outofmemory-error/162608)
**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\ **Replies:** 11\ **Last updated:** [January 3, 2019, 10:25am UTC](https://discuss.elastic.co/t/outofmemory-error/162608 "2019-01-03T10:25:17Z")
Hi, I'm facing the issue that my Elasticsearch data nodes shutdown automatically for some searches. Elasticsearch version - 6.3.2 Ram - 8gb Heap size - 1gb Documents - 7000(max) This is the error -\> at java.lang.Ou… --- ## [Падает Logstash](https://discuss.elastic.co/t/logstash/101810)
**Author:** [@Tim\_Moskalets](https://discuss.elastic.co/u/Tim_Moskalets)\ **Replies:** 9\ **Last updated:** [September 29, 2017, 7:08pm UTC](https://discuss.elastic.co/t/logstash/101810 "2017-09-29T19:08:57Z")
Проблема номер один Собственно, периодически падает Logstash, при смерти в лог выдает: \[2017-09-25T07:28:01,929\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>java.lang.NullPointerException, :backtrac… --- ## [Endpoint 7.13 migration to 7.13.1 Lesson learned with Fleet “On-Prim” -Bad](https://discuss.elastic.co/t/endpoint-7-13-migration-to-7-13-1-lesson-learned-with-fleet-on-prim-bad/275343)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 15\ **Last updated:** [June 23, 2021, 3:23pm UTC](https://discuss.elastic.co/t/endpoint-7-13-migration-to-7-13-1-lesson-learned-with-fleet-on-prim-bad/275343 "2021-06-23T15:23:13Z")
Failed. Kibana 7.13.1 migration from 7.13.0 failed. Testing setup. Single node. Fleet policies with Elastic-Endpoint only. Agent log's set to enable on settings to upload. When the Elastic instance went offline for upd… --- ## [Settings template in Docker file](https://discuss.elastic.co/t/settings-template-in-docker-file/169643)
**Author:** [@Hemant\_Kumar](https://discuss.elastic.co/u/Hemant_Kumar)\ **Replies:** 11\ **Last updated:** [March 14, 2019, 2:51pm UTC](https://discuss.elastic.co/t/settings-template-in-docker-file/169643 "2019-03-14T14:51:29Z")
Hi, I am running elasticsearch cluster on kubernetes cluster. I want to set max\_result\_window inside the dockerfile through settings template. How would I do that? I didn't find any valuable resource online. Please help! … --- ## [Elastic mapping flattened vs field wise](https://discuss.elastic.co/t/elastic-mapping-flattened-vs-field-wise/362151)
**Author:** [@Moni\_Hazarika](https://discuss.elastic.co/u/Moni_Hazarika)\ **Replies:** 9\ **Last updated:** [August 7, 2024, 3:20am UTC](https://discuss.elastic.co/t/elastic-mapping-flattened-vs-field-wise/362151 "2024-08-07T03:20:14Z")
In our MongoDB if we have a collection where we have multiple field types like array, multi-level object, strings, numbers, dates etc. sample of a nested field/object is like - "ValuesDocument ":{"field1":"Value1","fiel… --- ## [APM Java Agent Ignore Error](https://discuss.elastic.co/t/apm-java-agent-ignore-error/325563)
**Author:** [@Ivan\_Hosea](https://discuss.elastic.co/u/Ivan_Hosea)\ **Replies:** 17\ **Last updated:** [February 23, 2023, 3:08am UTC](https://discuss.elastic.co/t/apm-java-agent-ignore-error/325563 "2023-02-23T03:08:59Z")
APM Agent language and version: 1.36 Description of the problem including expected versus actual behavior. Please include screenshots (if relevant): I was wondering if there is any way to filter out specific error cod… --- ## [Create time series with fields date as long mapping](https://discuss.elastic.co/t/create-time-series-with-fields-date-as-long-mapping/262833)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 17\ **Last updated:** [March 3, 2021, 1:05pm UTC](https://discuss.elastic.co/t/create-time-series-with-fields-date-as-long-mapping/262833 "2021-03-03T13:05:46Z")
Hi all, sorry for my poor english I have a index with a eventTime field mapped as long, So when I create a time series no date field is found by kibana. Is there a way (with a pre script???) to say to kibana "consider… --- ## [Continuously getting - java.lang.IllegalArgumentException: Limit of total fields \[1000\] in index has been exceeded error](https://discuss.elastic.co/t/continuously-getting-java-lang-illegalargumentexception-limit-of-total-fields-1000-in-index-has-been-exceeded-error/187982)
**Author:** [@Nishant\_Hurnekar](https://discuss.elastic.co/u/Nishant_Hurnekar)\ **Replies:** 9\ **Last updated:** [July 3, 2019, 1:23pm UTC](https://discuss.elastic.co/t/continuously-getting-java-lang-illegalargumentexception-limit-of-total-fields-1000-in-index-has-been-exceeded-error/187982 "2019-07-03T13:23:49Z")
I am running with ELK cluster 5.6.16. I am getting continuously below error into elasticsearch logs since quite some time for only one index. Is there any method reduce no of fields Or I will have to increase no of fie… --- ## [Error on filebeat](https://discuss.elastic.co/t/error-on-filebeat/311330)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 10\ **Last updated:** [August 5, 2022, 3:19pm UTC](https://discuss.elastic.co/t/error-on-filebeat/311330 "2022-08-05T15:19:57Z")
My elasticsearch and kibana is ok but by filebeat doesn't work but when i do filebeat test config say its ok. Any suggestions for resolve this problem? Thank you. --- ## [Cannot show request body in errors page with Spring Boot 2.6.4 or later](https://discuss.elastic.co/t/cannot-show-request-body-in-errors-page-with-spring-boot-2-6-4-or-later/302016)
**Author:** [@David\_LEE1](https://discuss.elastic.co/u/David_LEE1)\ **Replies:** 10\ **Last updated:** [May 4, 2022, 3:02am UTC](https://discuss.elastic.co/t/cannot-show-request-body-in-errors-page-with-spring-boot-2-6-4-or-later/302016 "2022-05-04T03:02:06Z")
I am using Elasticsearch version 7.17.1 and APM agent version 1.28.4 When I use Spring Boot 2.6.3 with APM agent, the request body can be shown on the metadata tab of the error page. However, when I updated the Spring … --- ## [App Search: how to best index a site that doesn't crawl well - Confluence wiki for example](https://discuss.elastic.co/t/app-search-how-to-best-index-a-site-that-doesnt-crawl-well-confluence-wiki-for-example/313195)
**Author:** [@tonyfam](https://discuss.elastic.co/u/tonyfam)\ **Replies:** 16\ **Last updated:** [January 9, 2023, 7:44pm UTC](https://discuss.elastic.co/t/app-search-how-to-best-index-a-site-that-doesnt-crawl-well-confluence-wiki-for-example/313195 "2023-01-09T19:44:07Z")
I'm very new to search and elastic, and I would like to close a large gap in my understanding. I'm reading your docs, done the tutorials, but I feel like I'm missing something basic. So I'm working on a niche tech sup… --- ## [3 questions about memory leak](https://discuss.elastic.co/t/3-questions-about-memory-leak/188760)
**Author:** [@jcaballero](https://discuss.elastic.co/u/jcaballero)\ **Replies:** 9\ **Last updated:** [July 17, 2019, 3:01pm UTC](https://discuss.elastic.co/t/3-questions-about-memory-leak/188760 "2019-07-17T15:01:57Z")
Using LogStash 6.7.1 It really feels like the memory consumption increases day by day. So: Is really there a memory leak? I read in some of the "RELEASE NOTES" some comment about minimizing it, so I assume it's real… --- ## [How much disk storage required to take backup of index which is having 300GB?](https://discuss.elastic.co/t/how-much-disk-storage-required-to-take-backup-of-index-which-is-having-300gb/267424)
**Author:** [@Jax\_dev](https://discuss.elastic.co/u/Jax_dev)\ **Replies:** 12\ **Last updated:** [March 22, 2021, 1:55am UTC](https://discuss.elastic.co/t/how-much-disk-storage-required-to-take-backup-of-index-which-is-having-300gb/267424 "2021-03-22T01:55:57Z")
If we want to take a back of one of the indices which is having 300GB, enabling compression - true. How much space snapshot will occupy? How do we take snapshot to azure blob storage? Elastic server cluster is on azure… --- ## [Type not supported exception, index mapping ignored](https://discuss.elastic.co/t/type-not-supported-exception-index-mapping-ignored/169842)
**Author:** [@tarkin67](https://discuss.elastic.co/u/tarkin67)\ **Replies:** 15\ **Last updated:** [March 25, 2019, 7:09am UTC](https://discuss.elastic.co/t/type-not-supported-exception-index-mapping-ignored/169842 "2019-03-25T07:09:14Z")
Hi, I am encountering an issue with canvas: when querying all fields of a particular index with essql or esdocs the canvas element fails with the following error message: \[esdocs\] \> Unexpected error from Elasticsearch:… --- ## [Filter range on array of object](https://discuss.elastic.co/t/filter-range-on-array-of-object/312669)
**Author:** [@Jake\_Wong](https://discuss.elastic.co/u/Jake_Wong)\ **Replies:** 10\ **Last updated:** [August 23, 2022, 4:21pm UTC](https://discuss.elastic.co/t/filter-range-on-array-of-object/312669 "2022-08-23T16:21:10Z")
I have a documents with many nested fields and array of objects inside them. So when I perform search, how can I get the age range between 20 to 35? { "company\_name": "abc company", "detail": { "staff": … --- ## [How to use multiple csv files in logstash and filebeat](https://discuss.elastic.co/t/how-to-use-multiple-csv-files-in-logstash-and-filebeat/232222)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 10\ **Last updated:** [May 13, 2020, 11:55am UTC](https://discuss.elastic.co/t/how-to-use-multiple-csv-files-in-logstash-and-filebeat/232222 "2020-05-13T11:55:29Z")
I want to use multiple csv files in filebeat my config file beat filebeat.inputs: # Each - is an input. Most options can be set at the input level, so # you can use different inputs for various configurations. # Below… --- ## [Problem with the time in elastic](https://discuss.elastic.co/t/problem-with-the-time-in-elastic/312810)
**Author:** [@yosi\_herschkovitz](https://discuss.elastic.co/u/yosi_herschkovitz)\ **Replies:** 9\ **Last updated:** [September 1, 2022, 3:08pm UTC](https://discuss.elastic.co/t/problem-with-the-time-in-elastic/312810 "2022-09-01T15:08:42Z")
hi i have elasticsearch-7.10.1 and kibana-7.10.1 and filebeat-7.10.1 and i cant configure the time for israel in the Discover i see the timestamp and log\_date are different. how i can fix that the both time are Will b… --- ## [How does ES handle deletes? (keeping a sliding window of documents)](https://discuss.elastic.co/t/how-does-es-handle-deletes-keeping-a-sliding-window-of-documents/9219)
**Author:** [@Theo](https://discuss.elastic.co/u/Theo)\ **Replies:** 9\ **Last updated:** [October 4, 2012, 7:06am UTC](https://discuss.elastic.co/t/how-does-es-handle-deletes-keeping-a-sliding-window-of-documents/9219 "2012-10-04T07:06:34Z")
Hi, I'm evaluating ElasticSearch for a new thing I'm working on. What I haven't been able to figure out completely is how ES handles deletes. My plan is to continuously throw new documents into ES, but I only want… --- ## [Net core 2.1 elasticsearch working in development, it doesn't work in release](https://discuss.elastic.co/t/net-core-2-1-elasticsearch-working-in-development-it-doesnt-work-in-release/191503)
**Author:** [@Ilyoskhuja](https://discuss.elastic.co/u/Ilyoskhuja)\ **Replies:** 10\ **Last updated:** [August 7, 2019, 11:19am UTC](https://discuss.elastic.co/t/net-core-2-1-elasticsearch-working-in-development-it-doesnt-work-in-release/191503 "2019-08-07T11:19:18Z")
net core 2.1 elasticsearch working in development, it doesn't work in release, this is my elasticsearch class {public static class ElasticsearchExtensions { public static void AddElasticsearch( … --- ## [ERROR co.elastic.apm.agent.bci.IndyBootstrap - Advice threw an exception, this should never happen!](https://discuss.elastic.co/t/error-co-elastic-apm-agent-bci-indybootstrap-advice-threw-an-exception-this-should-never-happen/337589)
**Author:** [@miguel.longo](https://discuss.elastic.co/u/miguel.longo)\ **Replies:** 11\ **Last updated:** [July 7, 2023, 6:51am UTC](https://discuss.elastic.co/t/error-co-elastic-apm-agent-bci-indybootstrap-advice-threw-an-exception-this-should-never-happen/337589 "2023-07-07T06:51:37Z")
Kibana version: 8.6.0 Elasticsearch version: 8.6.0 APM Server version: 8.6.0 APM Agent language and version: 1.36.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Docker stack … --- ## [ES on Azure - Version](https://discuss.elastic.co/t/es-on-azure-version/98645)
**Author:** [@sanketshinde](https://discuss.elastic.co/u/sanketshinde)\ **Replies:** 12\ **Last updated:** [September 13, 2017, 4:30am UTC](https://discuss.elastic.co/t/es-on-azure-version/98645 "2017-09-13T04:30:35Z")
The version of elastic search available for deployment on Azure as a marketplace template is limited to the latest version of 2.3.1 Why is this so far back in the evolution? --- ## [Filebeat to Logstash to ES](https://discuss.elastic.co/t/filebeat-to-logstash-to-es/247767)
**Author:** [@slash665](https://discuss.elastic.co/u/slash665)\ **Replies:** 15\ **Last updated:** [September 8, 2020, 3:22pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-to-es/247767 "2020-09-08T15:22:15Z")
Hello, I am trying to set up a pipeline from Filebeat to Logstash to ES, following the guide from Elastic with the tutorial logs they provide, and for the love of me I just can't get it to work. This is what I've got i… --- ## [Beginer error, sent data to APM but this is not showed on kibana](https://discuss.elastic.co/t/beginer-error-sent-data-to-apm-but-this-is-not-showed-on-kibana/290827)
**Author:** [@targino.cbranco](https://discuss.elastic.co/u/targino.cbranco)\ **Replies:** 9\ **Last updated:** [January 5, 2022, 4:52pm UTC](https://discuss.elastic.co/t/beginer-error-sent-data-to-apm-but-this-is-not-showed-on-kibana/290827 "2022-01-05T16:52:28Z")
Hi poeple! I'm starting with ELK, and I get some problems, I installed the last version of Elasticsearch, kibana and apm server, on kibana apm pages, I can see successful test of connectivity with apm server, but agent … --- ## [Closer than Before ... WoW .. Cisco Log Processing](https://discuss.elastic.co/t/closer-than-before-wow-cisco-log-processing/81726)
**Author:** [@mhalatuituia](https://discuss.elastic.co/u/mhalatuituia)\ **Replies:** 9\ **Last updated:** [April 20, 2017, 9:43pm UTC](https://discuss.elastic.co/t/closer-than-before-wow-cisco-log-processing/81726 "2017-04-20T21:43:17Z")
I got this on my logstash.stdout but still No result found on Kibana ... Please anyone with a hint what still i miss i would really appreciate. Thanks in advance. "message" =\> "\<183\>Apr 10 2017 09:41:01 ha-fw1 : %… --- ## [TSVB don't work only on Count Aggregation](https://discuss.elastic.co/t/tsvb-dont-work-only-on-count-aggregation/283457)
**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\ **Replies:** 17\ **Last updated:** [September 21, 2021, 3:51pm UTC](https://discuss.elastic.co/t/tsvb-dont-work-only-on-count-aggregation/283457 "2021-09-21T15:51:35Z")
I don't know why the TSVB suddenly don't work anymore only for "Count" Aggregation. it show "The request for this panel failed. Failed to compile inline script \[count \*1\] using lang \[expression\]. " But when i use the oth… --- ## [One node is stuck with gc](https://discuss.elastic.co/t/one-node-is-stuck-with-gc/165068)
**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\ **Replies:** 14\ **Last updated:** [February 25, 2019, 5:37pm UTC](https://discuss.elastic.co/t/one-node-is-stuck-with-gc/165068 "2019-02-25T17:37:50Z")
Hi I am using elasticsearch 2.4 version. Have a setup with 3 nodes each having 36cpu's, 32gc(es) + 32gb(lucen) setup. Setup was running fine for 7days. huge and constant traffic is going on continuously. after 7 days o… --- ## [Migrating to new cluster](https://discuss.elastic.co/t/migrating-to-new-cluster/15898)
**Author:** [@Attila\_Bukor](https://discuss.elastic.co/u/Attila_Bukor)\ **Replies:** 12\ **Last updated:** [February 22, 2014, 5:52pm UTC](https://discuss.elastic.co/t/migrating-to-new-cluster/15898 "2014-02-22T17:52:34Z")
Hey everybody, I have a question regarding the migration of the indices to a new cluster seamlessly. Let me first describe the situation: I have a project which uses Elasticsearch since a few weeks ago. This is ou… --- ## [Problems with Logstash Pipeline to ElasticSearch](https://discuss.elastic.co/t/problems-with-logstash-pipeline-to-elasticsearch/290936)
**Author:** [@Leandro\_Valim](https://discuss.elastic.co/u/Leandro_Valim)\ **Replies:** 12\ **Last updated:** [December 10, 2021, 7:51pm UTC](https://discuss.elastic.co/t/problems-with-logstash-pipeline-to-elasticsearch/290936 "2021-12-10T19:51:48Z")
Hi i have some erros to up my logstash service as bellows \[2021-12-03T19:44:46,535\]\[INFO \]\[logstash.javapipeline \]\[KSC\] Pipeline terminated {"pipeline.id"=\>"KSC"} \[2021-12-03T19:44:46,550\]\[ERROR\]\[logstash.agent … --- ## [No ML nodes with sufficient capacity for trained model deployment](https://discuss.elastic.co/t/no-ml-nodes-with-sufficient-capacity-for-trained-model-deployment/357517)
**Author:** [@msola](https://discuss.elastic.co/u/msola)\ **Replies:** 9\ **Last updated:** [September 19, 2024, 9:18am UTC](https://discuss.elastic.co/t/no-ml-nodes-with-sufficient-capacity-for-trained-model-deployment/357517 "2024-09-19T09:18:23Z")
Hi, I'm new with elasticsearch. I currently have the trial period Platinum subscription, since I want to check if elasticsearch fits with what I want to do. I want to test the elster\_model\_2 ML model. However, every ti… --- ## [How to get N chars in a string field?](https://discuss.elastic.co/t/how-to-get-n-chars-in-a-string-field/71481)
**Author:** [@Super\_L](https://discuss.elastic.co/u/Super_L)\ **Replies:** 9\ **Last updated:** [January 13, 2017, 7:34am UTC](https://discuss.elastic.co/t/how-to-get-n-chars-in-a-string-field/71481 "2017-01-13T07:34:16Z")
Hi all I need get 4 chars in a field as es type. My conf as follow: filter { if \[driveid\] =~ "^CENNAVIVOMS" { drop { } } else { ruby { code =\> " event\['@met… --- ## [Field format color](https://discuss.elastic.co/t/field-format-color/302106)
**Author:** [@Plachey](https://discuss.elastic.co/u/Plachey)\ **Replies:** 11\ **Last updated:** [April 13, 2022, 3:58pm UTC](https://discuss.elastic.co/t/field-format-color/302106 "2022-04-13T15:58:39Z")
Hello Who can help me with index color format request I found this api /api/saved\_objects/index-pattern/xxxxx/fields but i got problem with data for it request, I can't find how to do it (format and naming fields) m… --- ## [Apache live stats using elasticsearch and logstash](https://discuss.elastic.co/t/apache-live-stats-using-elasticsearch-and-logstash/7510)
**Author:** [@user16](https://discuss.elastic.co/u/user16)\ **Replies:** 19\ **Last updated:** [May 4, 2012, 1:18pm UTC](https://discuss.elastic.co/t/apache-live-stats-using-elasticsearch-and-logstash/7510 "2012-05-04T13:18:09Z")
Hi, I am currently collecting apache access logs using the logstash centralized setup and all the logs are being collected properly. I want trying to display the last 2min visitors (something similar to SPLUNK \*Googl… --- ## [Need help for Energy Monitoring System Alerts](https://discuss.elastic.co/t/need-help-for-energy-monitoring-system-alerts/89415)
**Author:** [@jodhias](https://discuss.elastic.co/u/jodhias)\ **Replies:** 12\ **Last updated:** [July 28, 2017, 10:46am UTC](https://discuss.elastic.co/t/need-help-for-energy-monitoring-system-alerts/89415 "2017-07-28T10:46:21Z")
Hello I'm a student and I really need your help to sort this out. So, I want to create a real time monitoring data for voltage consumption. The outcome will be: there will be an alert if the voltage value exceeds the 'Up… --- ## [Metricbeat 6.X - Kafka module with SASL Auth didn't work](https://discuss.elastic.co/t/metricbeat-6-x-kafka-module-with-sasl-auth-didnt-work/119587)
**Author:** [@sgerlach](https://discuss.elastic.co/u/sgerlach)\ **Replies:** 10\ **Last updated:** [February 16, 2018, 3:24pm UTC](https://discuss.elastic.co/t/metricbeat-6-x-kafka-module-with-sasl-auth-didnt-work/119587 "2018-02-16T15:24:44Z")
Hi, we run a 5 node Kafka Cluster and try to collect some metric with metricbeat. - module: kafka metricsets: \["partition" \] hosts: \["localhost:20160"\] enabled: true period: 30s client\_id: metricbeat retri… --- ## [Elasticsearch is not reallocating shards after the primary shards were recovered. Unable to perform bulk indexing](https://discuss.elastic.co/t/elasticsearch-is-not-reallocating-shards-after-the-primary-shards-were-recovered-unable-to-perform-bulk-indexing/223971)
**Author:** [@Jehu\_T](https://discuss.elastic.co/u/Jehu_T)\ **Replies:** 9\ **Last updated:** [March 18, 2020, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-reallocating-shards-after-the-primary-shards-were-recovered-unable-to-perform-bulk-indexing/223971 "2020-03-18T12:27:34Z")
We have a 5 node cluster that is not reallocating shards after the primary shards were recovered. To fix this issue we increased the heap size of the server from 80GB (160GB RAM) to 192GB (384GB RAM). This is also becaus… --- ## [Elasticsearch - node client does not connect to cluster](https://discuss.elastic.co/t/elasticsearch-node-client-does-not-connect-to-cluster/22714)
**Author:** [@11181](https://discuss.elastic.co/u/11181)\ **Replies:** 9\ **Last updated:** [March 21, 2015, 8:24pm UTC](https://discuss.elastic.co/t/elasticsearch-node-client-does-not-connect-to-cluster/22714 "2015-03-21T20:24:28Z")
I have one physical server and I work only on it (no other servers). At this server I have running elastic 1.4.2 - I use this version as this is the last version elastic osgi bundle is ready for. Also at this server I h… --- ## [Fuzzy matching and direct hit ranking](https://discuss.elastic.co/t/fuzzy-matching-and-direct-hit-ranking/7709)
**Author:** [@Woody\_Peterson](https://discuss.elastic.co/u/Woody_Peterson)\ **Replies:** 9\ **Last updated:** [May 23, 2012, 10:28pm UTC](https://discuss.elastic.co/t/fuzzy-matching-and-direct-hit-ranking/7709 "2012-05-23T22:28:45Z")
I'm trying to implement fuzzy matching, and wanted to get a sanity check, as I'm hitting what was initially a surprising use case. Let's say I have an index with documents: \[{'name' =\> 'Coleman'}, {'name' =\> 'Bole… --- ## [\_grokparsefailure is occurring even after the grok pattern is success in grokdebugger](https://discuss.elastic.co/t/grokparsefailure-is-occurring-even-after-the-grok-pattern-is-success-in-grokdebugger/280784)
**Author:** [@vaseemQA](https://discuss.elastic.co/u/vaseemQA)\ **Replies:** 19\ **Last updated:** [August 21, 2021, 6:56am UTC](https://discuss.elastic.co/t/grokparsefailure-is-occurring-even-after-the-grok-pattern-is-success-in-grokdebugger/280784 "2021-08-21T06:56:58Z")
Hi Team, I'm using logstash 6.8.3, and I'm trying to parse ES slow logs and my sample field is a ES source\_query which looks like "source\_query":{"from":0,"size":0,"post\_filter":{"bool":{"must":\[{"term":{" \*\*someId\*\* "… --- ## [Else conditional in ingest pipeline](https://discuss.elastic.co/t/else-conditional-in-ingest-pipeline/286697)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 9\ **Last updated:** [October 18, 2021, 3:55am UTC](https://discuss.elastic.co/t/else-conditional-in-ingest-pipeline/286697 "2021-10-18T03:55:58Z")
Hello, I want to make else conditional on my ingest pipeline, here's pipeline I've made: PUT \_ingest/pipeline/pipeline-test { "processors": \[ { "pipeline":{ "description": "check field1 to output to … --- ## [Create Curator in Elastic Cloud](https://discuss.elastic.co/t/create-curator-in-elastic-cloud/221768)
**Author:** [@bmbrit](https://discuss.elastic.co/u/bmbrit)\ **Replies:** 9\ **Last updated:** [March 4, 2020, 10:38pm UTC](https://discuss.elastic.co/t/create-curator-in-elastic-cloud/221768 "2020-03-04T22:38:09Z")
Hi, Our team has a deployment in the elastic-cloud and we have purchased a standard cloud package. Now, I have a requirement to clear the indices older than 30 days due to storage issues. I tried to connect the cloud-se… --- ## [Multiline issue with 2 different patterns for a single event](https://discuss.elastic.co/t/multiline-issue-with-2-different-patterns-for-a-single-event/57896)
**Author:** [@jinal.shah](https://discuss.elastic.co/u/jinal.shah)\ **Replies:** 12\ **Last updated:** [August 17, 2016, 1:13pm UTC](https://discuss.elastic.co/t/multiline-issue-with-2-different-patterns-for-a-single-event/57896 "2016-08-17T13:13:16Z")
Hello I am trying to parse the log below through Logstash, however I can't seem to get the pattern to work. Essentially, I need to have the line straight after the dated line begining with {0=Failed to be part of the s… --- ## [File input pipeline not working in Logstash 5.6.3](https://discuss.elastic.co/t/file-input-pipeline-not-working-in-logstash-5-6-3/108469)
**Author:** [@sgladkovich](https://discuss.elastic.co/u/sgladkovich)\ **Replies:** 10\ **Last updated:** [November 22, 2017, 6:03pm UTC](https://discuss.elastic.co/t/file-input-pipeline-not-working-in-logstash-5-6-3/108469 "2017-11-22T18:03:33Z")
Hello, I have a single-node ElasticStack 5.6.3 on Ubuntu 14.04 in AWS, and I'm trying to get AWS RDS logs sent to it. I have a script (on the same node) that downloads the log files with no issues. Here's my Logstash … [Previous page](https://discuss.elastic.co/top.md?page=148&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=150&per_page=50&period=all)