# Top

**URL:** https://discuss.elastic.co/top.md?page=1506&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1507

---

## [ES shards allocation logic](https://discuss.elastic.co/t/es-shards-allocation-logic/110080)

<div class="topic-metadata">

**Author:** [@rwat090](https://discuss.elastic.co/u/rwat090)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 1:24am UTC](https://discuss.elastic.co/t/es-shards-allocation-logic/110080 "2017-12-05T01:24:15Z")

</div>

Hi Everyone, Im just trying to get my head around the logic for shards node allocation, here are some examples Config ES: 5.6.4 Nodes: 2 Nodes are split between two datacenters Server 01 and Server 02 node.master r…

---

## [Search returns no results for partial string](https://discuss.elastic.co/t/search-returns-no-results-for-partial-string/101793)

<div class="topic-metadata">

**Author:** [@amiexc](https://discuss.elastic.co/u/amiexc)\
**Replies:** 2\
**Last updated:** [September 26, 2017, 11:57pm UTC](https://discuss.elastic.co/t/search-returns-no-results-for-partial-string/101793 "2017-09-26T23:57:08Z")

</div>

Hello, I have a document with field "name": "Hotel Relais Fontana Di Trevi", indexed using the default (standard) analyser. I am running a search on this field with the string "fontana di tre" and max expansions 100 an…

---

## [Elasticsearch red cluster & index](https://discuss.elastic.co/t/elasticsearch-red-cluster-index/100769)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [September 18, 2017, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-red-cluster-index/100769 "2017-09-18T09:13:49Z")

</div>

I'm using elasticsearch 5.5.1 in 4 node cluster and I just noticed following: # curl --silent --request GET elk:9200/\_cat/health 1505576198 15:36:38 X red 4 4 991 831 0 0 691 0 - 58.9% # & # curl --silent --request G…

---

## [How to resolve installation issue in kibana-plugin for extended\_metric\_vis?](https://discuss.elastic.co/t/how-to-resolve-installation-issue-in-kibana-plugin-for-extended-metric-vis/98221)

<div class="topic-metadata">

**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\
**Replies:** 2\
**Last updated:** [August 25, 2017, 3:58am UTC](https://discuss.elastic.co/t/how-to-resolve-installation-issue-in-kibana-plugin-for-extended-metric-vis/98221 "2017-08-25T03:58:28Z")

</div>

I’m working on Elastocsearch 5.0.0 and kibana 5.0.0 and extended\_metric\_vis-5.0.0 I am trying to install extended\_metric\_vis plugins available for kibana but I am getting below error… D:…\\kibana-5.0.0-windows-x86\\kiban…

---

## [What analyzer to use in mappings for java stack traces](https://discuss.elastic.co/t/what-analyzer-to-use-in-mappings-for-java-stack-traces/75816)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 2\
**Last updated:** [February 21, 2017, 6:38am UTC](https://discuss.elastic.co/t/what-analyzer-to-use-in-mappings-for-java-stack-traces/75816 "2017-02-21T06:38:11Z")

</div>

Hi, I have a use case for logging the java stack traces to ES and the end user to search for error patterns. I would be using filebeat to ship my stack traces as a single event using the multi line configuration. Say …

---

## [ElasticSearch Cluster fails 5 minutes after starting on Azure](https://discuss.elastic.co/t/elasticsearch-cluster-fails-5-minutes-after-starting-on-azure/55241)

<div class="topic-metadata">

**Author:** [@iboware](https://discuss.elastic.co/u/iboware)\
**Replies:** 2\
**Last updated:** [July 14, 2016, 5:17pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-fails-5-minutes-after-starting-on-azure/55241 "2016-07-14T17:17:41Z")

</div>

Hi, I am trying to build an ElasticSearch cluster on Azure. I have done it successfully for testing purposes with 3 VM's under the same virtual network. It functioned very good. Because of my subscription limits, I d…

---

## [Bulk api mapper exception](https://discuss.elastic.co/t/bulk-api-mapper-exception/50713)

<div class="topic-metadata">

**Author:** [@gphadke](https://discuss.elastic.co/u/gphadke)\
**Replies:** 2\
**Last updated:** [May 26, 2016, 12:17pm UTC](https://discuss.elastic.co/t/bulk-api-mapper-exception/50713 "2016-05-26T12:17:31Z")

</div>

Hello We have encountered one problem and I am not sure why exactly. We are using bulk api to index data. Suddenly we see the below error. Failed to commit transaction. Transaction rolled back. stack\_trace: org.apac…

---

## [Not able to add repository](https://discuss.elastic.co/t/not-able-to-add-repository/37469)

<div class="topic-metadata">

**Author:** [@abhijitdeka11](https://discuss.elastic.co/u/abhijitdeka11)\
**Replies:** 2\
**Last updated:** [December 18, 2015, 5:56am UTC](https://discuss.elastic.co/t/not-able-to-add-repository/37469 "2015-12-18T05:56:32Z")

</div>

Hi, I have the same issue as this https://discuss.elastic.co/t/path-repo-is-empty/25166 . I followed the same steps mentioned in that thread to resolve the issue.Still i am getting this error {"error":"RemoteTranspo…

---

## [Heap filled with FixedBitSetFilterCache](https://discuss.elastic.co/t/heap-filled-with-fixedbitsetfiltercache/34524)

<div class="topic-metadata">

**Author:** [@micpalmia](https://discuss.elastic.co/u/micpalmia)\
**Replies:** 2\
**Last updated:** [November 16, 2015, 11:15am UTC](https://discuss.elastic.co/t/heap-filled-with-fixedbitsetfiltercache/34524 "2015-11-16T11:15:47Z")

</div>

I'm running Elasticsearch 1.5.1 and my nodes have 60GB of memory, 30GB of which are allocated (as the documentation suggests) to the Java heap. After a full cluster restart, things are good for a while and I can see th…

---

## [Unique count of all the indexed records using the most recent message](https://discuss.elastic.co/t/unique-count-of-all-the-indexed-records-using-the-most-recent-message/34071)

<div class="topic-metadata">

**Author:** [@jimmies](https://discuss.elastic.co/u/jimmies)\
**Replies:** 2\
**Last updated:** [November 8, 2015, 6:23am UTC](https://discuss.elastic.co/t/unique-count-of-all-the-indexed-records-using-the-most-recent-message/34071 "2015-11-08T06:23:13Z")

</div>

Hello I am streaming data from my 3rdpty applications in the form of {field1:"value",field2:"value",field3:"value"} my 3rdpty application is a database, and the same record can change overtime with field3 being increm…

---

## [Compound Word Token Filter Configuration File](https://discuss.elastic.co/t/compound-word-token-filter-configuration-file/29260)

<div class="topic-metadata">

**Author:** [@Marcos\_Cazulo](https://discuss.elastic.co/u/Marcos_Cazulo)\
**Replies:** 2\
**Last updated:** [September 15, 2015, 10:03pm UTC](https://discuss.elastic.co/t/compound-word-token-filter-configuration-file/29260 "2015-09-15T22:03:09Z")

</div>

Hi, I am trying to switch from having a word\_list to a file with the list of words for the compound word token filter. Right now I have it working defining the filter in the following way: "compound\_word\_splitter":{ "…

---

## [CSV export from kibana dashboard through external API call](https://discuss.elastic.co/t/csv-export-from-kibana-dashboard-through-external-api-call/340299)

<div class="topic-metadata">

**Author:** [@manish0803](https://discuss.elastic.co/u/manish0803)\
**Replies:** 1\
**Last updated:** [September 25, 2023, 4:43pm UTC](https://discuss.elastic.co/t/csv-export-from-kibana-dashboard-through-external-api-call/340299 "2023-09-25T16:43:22Z")

</div>

Hi, I have researched and implemented the csv export functionality by calling the export link provided by Kibana. referenced : Automatically generate reports | Kibana Guide \[8.6\] | Elastic However, when I use the link…

---

## [What does index pattern consist of?](https://discuss.elastic.co/t/what-does-index-pattern-consist-of/258163)

<div class="topic-metadata">

**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\
**Replies:** 1\
**Last updated:** [December 9, 2020, 5:23pm UTC](https://discuss.elastic.co/t/what-does-index-pattern-consist-of/258163 "2020-12-09T17:23:46Z")

</div>

Hi. I am new to Kibana. I already have existing index patterns and logs, so I mostly worked with visualization and dashboard. However, I don't quite understand index pattern. Can someone please explain index pattern in…

---

## [Multiple log files per index -- need to create one index per one log file](https://discuss.elastic.co/t/multiple-log-files-per-index-need-to-create-one-index-per-one-log-file/230505)

<div class="topic-metadata">

**Author:** [@Hung\_M\_Le](https://discuss.elastic.co/u/Hung_M_Le)\
**Replies:** 1\
**Last updated:** [April 30, 2020, 11:42am UTC](https://discuss.elastic.co/t/multiple-log-files-per-index-need-to-create-one-index-per-one-log-file/230505 "2020-04-30T11:42:34Z")

</div>

Hi My current setting is filebeat -\> Elasticsearch -\> Kibana. Current behavior: Send one file to the work directory to be ingested by filebeat and send to the Elasticsearch log output is sent to Elasticsearch without…

---

## [\[PLUGIN DEV\] How to check the current Kibana version number?](https://discuss.elastic.co/t/plugin-dev-how-to-check-the-current-kibana-version-number/162101)

<div class="topic-metadata">

**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\
**Replies:** 1\
**Last updated:** [December 26, 2018, 2:52pm UTC](https://discuss.elastic.co/t/plugin-dev-how-to-check-the-current-kibana-version-number/162101 "2018-12-26T14:52:37Z")

</div>

Hello, Is there a way from the plugin API in Kibana to check if the current Kibana version is for example "6.5.0 or later"?

---

## [Distributed Tracing](https://discuss.elastic.co/t/distributed-tracing/123828)

<div class="topic-metadata">

**Author:** [@dicarlo2](https://discuss.elastic.co/u/dicarlo2)\
**Replies:** 1\
**Last updated:** [March 14, 2018, 3:28am UTC](https://discuss.elastic.co/t/distributed-tracing/123828 "2018-03-14T03:28:07Z")

</div>

Are there plans to support distributed traces in APM? (Or perhaps it already does?) I'd like to have a set of spans created across services that are then linked together on the APM server. From reading the OpenTracing sp…

---

## [Document table and views customizations](https://discuss.elastic.co/t/document-table-and-views-customizations/122413)

<div class="topic-metadata">

**Author:** [@martin.g](https://discuss.elastic.co/u/martin.g)\
**Replies:** 1\
**Last updated:** [March 4, 2018, 7:45pm UTC](https://discuss.elastic.co/t/document-table-and-views-customizations/122413 "2018-03-04T19:45:09Z")

</div>

Hi Kibana Team. As a first thing I would like to thank you for this great product. I would like to ask you, if it is possible to add action buttons or links with my own JS function, to every displayed record in dashboar…

---

## [Installing beats plugin logstash in docker](https://discuss.elastic.co/t/installing-beats-plugin-logstash-in-docker/102703)

<div class="topic-metadata">

**Author:** [@vaidabhishek](https://discuss.elastic.co/u/vaidabhishek)\
**Replies:** 1\
**Last updated:** [October 4, 2017, 12:46pm UTC](https://discuss.elastic.co/t/installing-beats-plugin-logstash-in-docker/102703 "2017-10-04T12:46:47Z")

</div>

I am testing a ELK and Beats integration on my local machine and want to fire up 4 docker containers with E, L, K and B. I'm unable to figure out how to install beats plugin for Logstash. Can someone please help me get t…

---

## [Aggregated CPU User and System Load Percentage](https://discuss.elastic.co/t/aggregated-cpu-user-and-system-load-percentage/75307)

<div class="topic-metadata">

**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Replies:** 1\
**Last updated:** [February 17, 2017, 7:16am UTC](https://discuss.elastic.co/t/aggregated-cpu-user-and-system-load-percentage/75307 "2017-02-17T07:16:30Z")

</div>

Am trying to get a sum value of CPU USER and CPU SYSTEM percentage thru Ruby client. Is there any single API parameter to pull out the both the values ? I believe, it does have 2 separate parameters. I wanted to check,…

---

## [Docker \[ES+Shield\]](https://discuss.elastic.co/t/docker-es-shield/40742)

<div class="topic-metadata">

**Author:** [@Tehina](https://discuss.elastic.co/u/Tehina)\
**Replies:** 1\
**Last updated:** [March 30, 2016, 3:48pm UTC](https://discuss.elastic.co/t/docker-es-shield/40742 "2016-03-30T15:48:16Z")

</div>

Bonjour, Dans une optique de sécurisation d'Elasticsearch, j'ai été amené à installer Shield. J'ai donc créé un dockerfile allant chercher l'image officielle d'Elasticsearch et en y mettant directement les ligne corres…

---

## [Elastic search term support chinese character?](https://discuss.elastic.co/t/elastic-search-term-support-chinese-character/13795)

<div class="topic-metadata">

**Author:** [@cyrilforce](https://discuss.elastic.co/u/cyrilforce)\
**Replies:** 1\
**Last updated:** [September 28, 2013, 2:46pm UTC](https://discuss.elastic.co/t/elastic-search-term-support-chinese-character/13795 "2013-09-28T14:46:33Z")

</div>

Hi All, I m trying to use term query to do full text search with combination of english and chinese character but it returned me empty records. \*Documents in the index : \* "\_source": { "u…

---

## [Elastic 2.4 Compatibility matrix](https://discuss.elastic.co/t/elastic-2-4-compatibility-matrix/288307)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 4\
**Last updated:** [November 4, 2021, 8:20am UTC](https://discuss.elastic.co/t/elastic-2-4-compatibility-matrix/288307 "2021-11-04T08:20:40Z")

</div>

hey there, is there a link to a compatibility matrix related to Elasticsearch 2.4? I know its EOL, I would like to know any compatibility with Java, OS and so on.... thanks

---

## [String with spaces not is not searchable in logstash](https://discuss.elastic.co/t/string-with-spaces-not-is-not-searchable-in-logstash/251225)

<div class="topic-metadata">

**Author:** [@NARHAR\_DEV\_SHARMA](https://discuss.elastic.co/u/NARHAR_DEV_SHARMA)\
**Replies:** 4\
**Last updated:** [October 9, 2020, 4:51am UTC](https://discuss.elastic.co/t/string-with-spaces-not-is-not-searchable-in-logstash/251225 "2020-10-09T04:51:31Z")

</div>

Hi Team, Greeting for the day! I am trying to search a pattern that contain spaces and its not working. However, if i put something without space that's working absolutely fine; i am able to send mail to required addr…

---

## [Security Exception when Running Sample Security Plugin](https://discuss.elastic.co/t/security-exception-when-running-sample-security-plugin/214671)

<div class="topic-metadata">

**Author:** [@YanbangLiuUiPath](https://discuss.elastic.co/u/YanbangLiuUiPath)\
**Replies:** 4\
**Last updated:** [January 17, 2020, 5:28pm UTC](https://discuss.elastic.co/t/security-exception-when-running-sample-security-plugin/214671 "2020-01-17T17:28:50Z")

</div>

I have followed the steps from This post But at the step to authenticate using this command: curl "localhost:9200/\_xpack/security/\_authenticate" -H "x-web-store-claims: $ClaimJson" -H "x-web-store-sig: $ClaimSig" I …

---

## [Distributed tracing missing expansion for one service](https://discuss.elastic.co/t/distributed-tracing-missing-expansion-for-one-service/201329)

<div class="topic-metadata">

**Author:** [@dnorth98](https://discuss.elastic.co/u/dnorth98)\
**Replies:** 4\
**Last updated:** [September 30, 2019, 7:37am UTC](https://discuss.elastic.co/t/distributed-tracing-missing-expansion-for-one-service/201329 "2019-09-30T07:37:28Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.3.…

---

## [Create multiple indexes with single logstash configuration file depending upon the kafka channel](https://discuss.elastic.co/t/create-multiple-indexes-with-single-logstash-configuration-file-depending-upon-the-kafka-channel/177003)

<div class="topic-metadata">

**Author:** [@Nandita\_Rane](https://discuss.elastic.co/u/Nandita_Rane)\
**Replies:** 4\
**Last updated:** [April 17, 2019, 5:59am UTC](https://discuss.elastic.co/t/create-multiple-indexes-with-single-logstash-configuration-file-depending-upon-the-kafka-channel/177003 "2019-04-17T05:59:13Z")

</div>

Please help me to resolve this issue. Issue Description: I want to create a logstash configuration which will put logs in two different index. I tried with this configuration but not able to create index in logstash. p…

---

## [Remote reindex from 1.3.9 to 5.5](https://discuss.elastic.co/t/remote-reindex-from-1-3-9-to-5-5/100596)

<div class="topic-metadata">

**Author:** [@pbellerive](https://discuss.elastic.co/u/pbellerive)\
**Replies:** 4\
**Last updated:** [September 15, 2017, 10:39pm UTC](https://discuss.elastic.co/t/remote-reindex-from-1-3-9-to-5-5/100596 "2017-09-15T22:39:19Z")

</div>

I want to migrate elasticsearch from 1.3.9 to 5.5 . So i decided to use the second option from the doc. Install a 5.5 , create index( with settings and mapping) and do a remote reindex. Actually i don't have any error …

---

## [Get Updated data From Powercfg Battery Report](https://discuss.elastic.co/t/get-updated-data-from-powercfg-battery-report/94081)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 4\
**Last updated:** [July 25, 2017, 4:51am UTC](https://discuss.elastic.co/t/get-updated-data-from-powercfg-battery-report/94081 "2017-07-25T04:51:24Z")

</div>

Is there anyone here who tried to get the logs of powercfg /batteryreport?

---

## [Autodiscovery setting in Metricbeat](https://discuss.elastic.co/t/autodiscovery-setting-in-metricbeat/273732)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 5\
**Last updated:** [June 2, 2021, 7:54am UTC](https://discuss.elastic.co/t/autodiscovery-setting-in-metricbeat/273732 "2021-06-02T07:54:27Z")

</div>

I was going through this nice and comprehensive presentation by @pebrc At the point in time where the link points to, the presenter makes a configuration change to the Elasticsearch resource definition so that the label…

---

## [Legend Color](https://discuss.elastic.co/t/legend-color/265310)

<div class="topic-metadata">

**Author:** [@NourBM](https://discuss.elastic.co/u/NourBM)\
**Replies:** 5\
**Last updated:** [February 24, 2021, 2:35pm UTC](https://discuss.elastic.co/t/legend-color/265310 "2021-02-24T14:35:21Z")

</div>

Hi , Is there any way where i can make the color for up= Green and down= RED, instead of default colors provided by Kibana as shown below. and also when you click on down area then Graph shows GREEN which should be RED f…

---

## [Timelion gaps in dashboard display data (SNMP interface utilization)](https://discuss.elastic.co/t/timelion-gaps-in-dashboard-display-data-snmp-interface-utilization/254460)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 5\
**Last updated:** [November 11, 2020, 9:48pm UTC](https://discuss.elastic.co/t/timelion-gaps-in-dashboard-display-data-snmp-interface-utilization/254460 "2020-11-11T21:48:44Z")

</div>

Hello, Recently I have made my first logstash pipeline that ingests data gathered via SNMP form network devices regarding interfaces statistic. I have made timelion graph to displayed network interface utilization but I…

---

## [Kibana monitoring shows empty nodes](https://discuss.elastic.co/t/kibana-monitoring-shows-empty-nodes/249829)

<div class="topic-metadata">

**Author:** [@fanqiaoqing](https://discuss.elastic.co/u/fanqiaoqing)\
**Replies:** 5\
**Last updated:** [October 1, 2020, 2:02am UTC](https://discuss.elastic.co/t/kibana-monitoring-shows-empty-nodes/249829 "2020-10-01T02:02:45Z")

</div>

Hi Elastic, We are using the kibana 7.2.1, we have around 200 nodes in our clusters. Recently, we found the kibana monitoring shows empty nodes I uploaded a screenshot, you can check that. Meanwhile we had try many so…

---

## [Ingest pipeline-\>update by query updating only 999 documents?](https://discuss.elastic.co/t/ingest-pipeline-update-by-query-updating-only-999-documents/188128)

<div class="topic-metadata">

**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\
**Replies:** 5\
**Last updated:** [June 29, 2019, 10:03am UTC](https://discuss.elastic.co/t/ingest-pipeline-update-by-query-updating-only-999-documents/188128 "2019-06-29T10:03:12Z")

</div>

POST /logdata/\_update\_by\_query?pipeline=delete-referrer Why this pipeline is updating only 999 documents at once? and how to change it to whole index at once? Thanks in advance

---

## [Can not send alert via gmail(already disable 2FA)](https://discuss.elastic.co/t/can-not-send-alert-via-gmail-already-disable-2fa/154325)

<div class="topic-metadata">

**Author:** [@SailorJupiter](https://discuss.elastic.co/u/SailorJupiter)\
**Replies:** 5\
**Last updated:** [November 6, 2018, 3:08pm UTC](https://discuss.elastic.co/t/can-not-send-alert-via-gmail-already-disable-2fa/154325 "2018-11-06T15:08:22Z")

</div>

Can not send alert via gmail(already disable 2FA) I am sure my password and account is right! And I already disabled 2 factors authtications. The log is //at java.lang.Thread.run(Unknown Source) \[?:1.8.0\_181\] Caused …

---

## [Processing concentration on some cluster nodes](https://discuss.elastic.co/t/processing-concentration-on-some-cluster-nodes/145222)

<div class="topic-metadata">

**Author:** [@Claudio\_Ranieri](https://discuss.elastic.co/u/Claudio_Ranieri)\
**Replies:** 5\
**Last updated:** [August 28, 2018, 5:44pm UTC](https://discuss.elastic.co/t/processing-concentration-on-some-cluster-nodes/145222 "2018-08-28T17:44:02Z")

</div>

Hi, we currently have a cluster elasticsearch consisting of 18 data nodes and 3 master nodes (instances m4.4xlarge - 16 core and 64Gb RAM distributed in 2 zones in aws). We use elasticsearch version 5.6.2 with java jre1.…

---

## [How do I get \_value Webhook to be in Json format](https://discuss.elastic.co/t/how-do-i-get-value-webhook-to-be-in-json-format/134213)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 5\
**Last updated:** [June 5, 2018, 10:18am UTC](https://discuss.elastic.co/t/how-do-i-get-value-webhook-to-be-in-json-format/134213 "2018-06-05T10:18:46Z")

</div>

How do I get my "\_value" from my webhook to be in a Json format or even better would be just to display the output of the GET query in a Json format. Current watcher: { "trigger": { "schedule": { "interval"…

---

## [Elasticsearch query to pull the record based on max timestamp](https://discuss.elastic.co/t/elasticsearch-query-to-pull-the-record-based-on-max-timestamp/120131)

<div class="topic-metadata">

**Author:** [@ranganath\_nangineni](https://discuss.elastic.co/u/ranganath_nangineni)\
**Replies:** 5\
**Last updated:** [February 16, 2018, 1:58pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-pull-the-record-based-on-max-timestamp/120131 "2018-02-16T13:58:35Z")

</div>

Hi, I have 4 records in the elasticsearch DB for the ddocname "CNT1882742" for the below query Logstash elasticsearch query: query =\> '{ "query": {"match": { "ddocname" :"CNT1882742"} }, "sort": \["@timestamp"\] }' Quer…

---

## [Indexing Speed Elastic Search](https://discuss.elastic.co/t/indexing-speed-elastic-search/71595)

<div class="topic-metadata">

**Author:** [@vmandke](https://discuss.elastic.co/u/vmandke)\
**Replies:** 5\
**Last updated:** [January 16, 2017, 9:19am UTC](https://discuss.elastic.co/t/indexing-speed-elastic-search/71595 "2017-01-16T09:19:35Z")

</div>

I am indexing 300 documents in following indexes Index A: has a synonym\_filter with 25000 synonyms in the Index itself Index B: the synonym\_filter refers the synonyms from a file I observed a drastic difference in ind…

---

## [\[es/search\] failed: \[x\_content\_parse\_exception\] \[2:4\] Unexpected character ('\\' (code 92)): was expecting double-quote](https://discuss.elastic.co/t/es-search-failed-x-content-parse-exception-2-4-unexpected-character-code-92-was-expecting-double-quote/356632)

<div class="topic-metadata">

**Author:** [@thatelasticguy](https://discuss.elastic.co/u/thatelasticguy)\
**Replies:** 8\
**Last updated:** [April 3, 2024, 8:20pm UTC](https://discuss.elastic.co/t/es-search-failed-x-content-parse-exception-2-4-unexpected-character-code-92-was-expecting-double-quote/356632 "2024-04-03T20:20:41Z")

</div>

I am using elastic version 8+ with spring boot elasticsearch 5.2.0 dependency. I want to query my index with Odata $filter. I have configured my parser for Odata and it's generating below query json for following query: $…

---

## [Filebeat 8.3](https://discuss.elastic.co/t/filebeat-8-3/314630)

<div class="topic-metadata">

**Author:** [@abaltan](https://discuss.elastic.co/u/abaltan)\
**Replies:** 8\
**Last updated:** [September 19, 2022, 8:40am UTC](https://discuss.elastic.co/t/filebeat-8-3/314630 "2022-09-19T08:40:52Z")

</div>

Hello, Hope you doing well. we are upgrading Filebeat from 7.12 to 8.3 and we are using the config file below. But for some reason filebeat is not working. Could you please check if there is anything we need to modify …

---

## [Kibana data values after rollup](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716)

<div class="topic-metadata">

**Author:** [@thirty2](https://discuss.elastic.co/u/thirty2)\
**Replies:** 8\
**Last updated:** [August 2, 2022, 7:05am UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716 "2022-08-02T07:05:15Z")

</div>

Hi, in an index (raw\_data) where i have raw data i have records every minute. Each record has always the same value for a field called loss \>\>\> LOSS: 100 Then i created a rollup job for raw\_data index, to rollup data…

---

## [ESM tool migration](https://discuss.elastic.co/t/esm-tool-migration/303521)

<div class="topic-metadata">

**Author:** [@iliyab09](https://discuss.elastic.co/u/iliyab09)\
**Replies:** 3\
**Last updated:** [May 2, 2022, 12:12am UTC](https://discuss.elastic.co/t/esm-tool-migration/303521 "2022-05-02T00:12:22Z")

</div>

Hello I have couple questions about migration, can't find the information nowhere. When the migration is in progress do I need to stop read write to my old cluster? When the migration is done I can just connect to…

---

## [DotNet agent oracle database tracing](https://discuss.elastic.co/t/dotnet-agent-oracle-database-tracing/300596)

<div class="topic-metadata">

**Author:** [@sarabu\_ps](https://discuss.elastic.co/u/sarabu_ps)\
**Replies:** 3\
**Last updated:** [March 24, 2022, 8:24pm UTC](https://discuss.elastic.co/t/dotnet-agent-oracle-database-tracing/300596 "2022-03-24T20:24:35Z")

</div>

The above link says Oracle.ManagedDataAccess would be added in beta, let me know if that is available in elastic apm nuget 1.14.1, Also when Oracle.ManagedDataAccessCore would be supported for .NEt Core

---

## [\[Error v7.12.1\] High Level Rest Client async search doesn't work](https://discuss.elastic.co/t/error-v7-12-1-high-level-rest-client-async-search-doesnt-work/283745)

<div class="topic-metadata">

**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\
**Replies:** 3\
**Last updated:** [September 21, 2021, 11:04am UTC](https://discuss.elastic.co/t/error-v7-12-1-high-level-rest-client-async-search-doesnt-work/283745 "2021-09-21T11:04:37Z")

</div>

When using asyncSearch for long running queries, results that I get from asyncSearch.get requests can't be parsed. It looks like the aggregation types are missing in the result, which leads to errors like: java.io.IOEx…

---

## [APM Setup Success but is not showing information into Kibana](https://discuss.elastic.co/t/apm-setup-success-but-is-not-showing-information-into-kibana/202061)

<div class="topic-metadata">

**Author:** [@Ramon\_Sanchez\_Villan](https://discuss.elastic.co/u/Ramon_Sanchez_Villan)\
**Replies:** 3\
**Last updated:** [October 10, 2019, 3:24am UTC](https://discuss.elastic.co/t/apm-setup-success-but-is-not-showing-information-into-kibana/202061 "2019-10-10T03:24:57Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.3…

---

## [Log size too large causes kibana to crash](https://discuss.elastic.co/t/log-size-too-large-causes-kibana-to-crash/146417)

<div class="topic-metadata">

**Author:** [@Derek\_Liu](https://discuss.elastic.co/u/Derek_Liu)\
**Replies:** 3\
**Last updated:** [August 29, 2018, 9:27am UTC](https://discuss.elastic.co/t/log-size-too-large-causes-kibana-to-crash/146417 "2018-08-29T09:27:12Z")

</div>

I am using packetbeat to monitor search queries and results on elasticsearch, then use logstash to send it to elasticsearch. Because the result of each search is too large, everytime when I try to load the logstash-\* ind…

---

## [How to prevent adding extra fields by filebeat to the actual log records](https://discuss.elastic.co/t/how-to-prevent-adding-extra-fields-by-filebeat-to-the-actual-log-records/143095)

<div class="topic-metadata">

**Author:** [@ramanna\_hk](https://discuss.elastic.co/u/ramanna_hk)\
**Replies:** 3\
**Last updated:** [August 9, 2018, 5:42am UTC](https://discuss.elastic.co/t/how-to-prevent-adding-extra-fields-by-filebeat-to-the-actual-log-records/143095 "2018-08-09T05:42:15Z")

</div>

Hi, I am shipping log data to Kafka topic using file beat, here the problem is i don't want to have extra fields added by file-beat ex: file-beat version. is it possible? Thanks

---

## [Losgtash running but there is no output](https://discuss.elastic.co/t/losgtash-running-but-there-is-no-output/112598)

<div class="topic-metadata">

**Author:** [@marouane](https://discuss.elastic.co/u/marouane)\
**Replies:** 3\
**Last updated:** [December 20, 2017, 1:13pm UTC](https://discuss.elastic.co/t/losgtash-running-but-there-is-no-output/112598 "2017-12-20T13:13:01Z")

</div>

Hello , i have an issue concerning logstash this is the log that i have, Settings: Default pipeline workers: 4 Pipeline main started my logstash log file input { http { type =\> "test\_http" host =\> "0.0.0.0" # de…

---

## [X-pack License renewal information](https://discuss.elastic.co/t/x-pack-license-renewal-information/106882)

<div class="topic-metadata">

**Author:** [@gauravbhutani30](https://discuss.elastic.co/u/gauravbhutani30)\
**Replies:** 3\
**Last updated:** [November 10, 2017, 1:09pm UTC](https://discuss.elastic.co/t/x-pack-license-renewal-information/106882 "2017-11-10T13:09:23Z")

</div>

Hi, I have a quick question on X-Pack license. We are running X-pack on our application, I have few questions regarding the same: Once my license expires, will i get a new license.json file from Elastic and i need to…

---

## [When do we need to close and open the index in Elastic search](https://discuss.elastic.co/t/when-do-we-need-to-close-and-open-the-index-in-elastic-search/98898)

<div class="topic-metadata">

**Author:** [@Ramchandram](https://discuss.elastic.co/u/Ramchandram)\
**Replies:** 3\
**Last updated:** [August 31, 2017, 5:31pm UTC](https://discuss.elastic.co/t/when-do-we-need-to-close-and-open-the-index-in-elastic-search/98898 "2017-08-31T17:31:00Z")

</div>

Hi guys, I have applied analyzer to the index. After that do we need to close and open the index in Elastic search to see the old documents.

[Previous page](https://discuss.elastic.co/top.md?page=1505&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1507&per_page=50&period=all)
