# Top **URL:** https://discuss.elastic.co/top.md?page=1543&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1544 --- ## [Having issues translating query dsl to NEST](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/281585)
**Author:** [@woal\_idal](https://discuss.elastic.co/u/woal_idal)\ **Replies:** 5\ **Last updated:** [August 18, 2021, 9:05am UTC](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/281585 "2021-08-18T09:05:01Z")
I have a console application that will read the logs from elasticsearch and insert those logs to a database. However I am having an issue with the count api implementation in NEST. Whenever, I type the following in the C… --- ## [Plugin development - Node Client has not been initialized exception](https://discuss.elastic.co/t/plugin-development-node-client-has-not-been-initialized-exception/264239)
**Author:** [@Tom\_Elias](https://discuss.elastic.co/u/Tom_Elias)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 9:52am UTC](https://discuss.elastic.co/t/plugin-development-node-client-has-not-been-initialized-exception/264239 "2021-02-15T09:52:04Z")
Hello, i'm developing a plugin for elasticsearch 7.8.0 and i'm using the NodeClient to get all the mappings from the cluster on start-up, in order to find indices with "dense\_vector" field types. I am overriding the cr… --- ## [\[Winlogbeat 7.10.1 dashboards\]: could not locate some index pattern fields](https://discuss.elastic.co/t/winlogbeat-7-10-1-dashboards-could-not-locate-some-index-pattern-fields/261530)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 5\ **Last updated:** [January 22, 2021, 3:41pm UTC](https://discuss.elastic.co/t/winlogbeat-7-10-1-dashboards-could-not-locate-some-index-pattern-fields/261530 "2021-01-22T15:41:17Z")
Hello, I am using Elasticsearch, kibana, logstash, and winlogbeat, all version 7.10.1 I configured winlogbeat and run: .\\winlogbeat.exe setup -e and I had no error in my winlogbeat logs, but in kibana there are some d… --- ## [Parsing Syslog to Logstash](https://discuss.elastic.co/t/parsing-syslog-to-logstash/218564)
**Author:** [@marvine82](https://discuss.elastic.co/u/marvine82)\ **Replies:** 5\ **Last updated:** [February 11, 2020, 12:17pm UTC](https://discuss.elastic.co/t/parsing-syslog-to-logstash/218564 "2020-02-11T12:17:31Z")
Hey; im currently trying to parse my syslog events to my elasticsearch host over logstash. I created a new .conf file under /etc/logstash/conf.d called syslog.conf. This file looks like this: input { syslog { port… --- ## [Role\_mapping file not able to point users if it does not have full DN](https://discuss.elastic.co/t/role-mapping-file-not-able-to-point-users-if-it-does-not-have-full-dn/207812)
**Author:** [@ksarkar](https://discuss.elastic.co/u/ksarkar)\ **Replies:** 5\ **Last updated:** [November 18, 2019, 1:39pm UTC](https://discuss.elastic.co/t/role-mapping-file-not-able-to-point-users-if-it-does-not-have-full-dn/207812 "2019-11-18T13:39:33Z")
While configuring Elastcsearch with LDAP authentication, I am able to connect LDAP users and getting authenticated as per following configuration. elasticsearch.yml , xpack: security: authc: realms: … --- ## [Some questions about Filebeat that are not clear in the docs](https://discuss.elastic.co/t/some-questions-about-filebeat-that-are-not-clear-in-the-docs/185172)
**Author:** [@jesusgn90](https://discuss.elastic.co/u/jesusgn90)\ **Replies:** 5\ **Last updated:** [June 14, 2019, 9:29am UTC](https://discuss.elastic.co/t/some-questions-about-filebeat-that-are-not-clear-in-the-docs/185172 "2019-06-14T09:29:11Z")
Hi team, just some quick questions: Can Filebeat setup a pipeline in Elasticsearch like it does with the template? What I meant is that I can send a JSON index template from FIlebeat to Elasticsearch using setup.templa… --- ## [One-hit buckets](https://discuss.elastic.co/t/one-hit-buckets/60986)
**Author:** [@gm42](https://discuss.elastic.co/u/gm42)\ **Replies:** 5\ **Last updated:** [September 20, 2016, 2:01pm UTC](https://discuss.elastic.co/t/one-hit-buckets/60986 "2016-09-20T14:01:15Z")
Scenario: I would like to aggregate documents on some terms, but I only care to know if that term is there for at least 1 document, and absolutely do not care about the count of matching documents. What would be a go… --- ## [Is there a way to give a unique ID to a field?](https://discuss.elastic.co/t/is-there-a-way-to-give-a-unique-id-to-a-field/5268)
**Author:** [@ogregras](https://discuss.elastic.co/u/ogregras)\ **Replies:** 5\ **Last updated:** [August 29, 2011, 9:02pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-give-a-unique-id-to-a-field/5268 "2011-08-29T21:02:47Z")
I'm currently working with facets and I wish my application URL to keep information about the facets that have been selected by the user so far. For example: http://www.example.com/widgets/\*manufacturer-bang\_oluf… --- ## [Python elasticsearch: always get exact match](https://discuss.elastic.co/t/python-elasticsearch-always-get-exact-match/71616)
**Author:** [@chocolate9624](https://discuss.elastic.co/u/chocolate9624)\ **Replies:** 0\ **Last updated:** [January 14, 2017, 3:25pm UTC](https://discuss.elastic.co/t/python-elasticsearch-always-get-exact-match/71616 "2017-01-14T15:25:36Z")
Hi, I am new to elasticsearch. There is an item in my index with the title: Using Python with Elasticsearch When I search for it, I always get zero hit except that I search "Using Python with Elasticsearch" exactly. like… --- ## [How to find bottleneck](https://discuss.elastic.co/t/how-to-find-bottleneck/50243)
**Author:** [@zlosim](https://discuss.elastic.co/u/zlosim)\ **Replies:** 0\ **Last updated:** [May 17, 2016, 4:24pm UTC](https://discuss.elastic.co/t/how-to-find-bottleneck/50243 "2016-05-17T16:24:52Z")
Hi guys I was doing some perf testing on my es 1.7.1 cluster and found something interesting cluster consist of: 5 data nodes - no http, cant be master 3 masters 2 client nodes - cant be master, no data I\`m pushing ev… --- ## [Is it possible to send email alerts to specific user for their login failure](https://discuss.elastic.co/t/is-it-possible-to-send-email-alerts-to-specific-user-for-their-login-failure/297849)
**Author:** [@calista](https://discuss.elastic.co/u/calista)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 6:27am UTC](https://discuss.elastic.co/t/is-it-possible-to-send-email-alerts-to-specific-user-for-their-login-failure/297849 "2022-02-22T06:27:59Z")
Hi Team, May I check if it is possible to send email alerts to specific user for their OS login failure in the stack management watcher? Example a server has multiple users and when user 'john' login using the wrong pas… --- ## [Metricbeat module Apache error - error fetching data: HTTP error 404 in : 404 Not Found](https://discuss.elastic.co/t/metricbeat-module-apache-error-error-fetching-data-http-error-404-in-404-not-found/343078)
**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\ **Replies:** 2\ **Last updated:** [September 15, 2023, 6:24pm UTC](https://discuss.elastic.co/t/metricbeat-module-apache-error-error-fetching-data-http-error-404-in-404-not-found/343078 "2023-09-15T18:24:41Z")
Hi all I having problems when trying to get metrics from my Apache installation running on a Centos 7 VM Env: ECK 2.6.1 1 ES Master Node 8.6.2 running on a single node K3S Kubernetes Cluster installed on Centos 7 Ser… --- ## [Elasticsearch shard allocation, uneven distribution of shards among nodes](https://discuss.elastic.co/t/elasticsearch-shard-allocation-uneven-distribution-of-shards-among-nodes/321621)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 2\ **Last updated:** [December 21, 2022, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-allocation-uneven-distribution-of-shards-among-nodes/321621 "2022-12-21T12:35:53Z")
Hi, May I ask you for help with The problem with uneven allocation of shards on the elatsic cluster is repeated again. This condition is causes the full nodes consumes 90% CPUs and the whole cluster starts to refuse th… --- ## [Send all data to one index and specific fields to another at same time](https://discuss.elastic.co/t/send-all-data-to-one-index-and-specific-fields-to-another-at-same-time/302381)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 2\ **Last updated:** [April 14, 2022, 8:50am UTC](https://discuss.elastic.co/t/send-all-data-to-one-index-and-specific-fields-to-another-at-same-time/302381 "2022-04-14T08:50:24Z")
Hello, I've been reading for a long time in different sources if it's possible to send all data processed by logstash to one index and at the same time send just some specific fields of this data to another different in… --- ## [Elastic Cloud IP Address](https://discuss.elastic.co/t/elastic-cloud-ip-address/296117)
**Author:** [@teamomni](https://discuss.elastic.co/u/teamomni)\ **Replies:** 2\ **Last updated:** [February 3, 2022, 11:45am UTC](https://discuss.elastic.co/t/elastic-cloud-ip-address/296117 "2022-02-03T11:45:07Z")
Our firewalls have been getting hit by several IP address that are from within the United States, and we would like to verify that it is not related to communication with our Elastic Agents and the Elastic Cloud. Is the… --- ## [Filebeat holding open handles on deleted files](https://discuss.elastic.co/t/filebeat-holding-open-handles-on-deleted-files/283192)
**Author:** [@seadub](https://discuss.elastic.co/u/seadub)\ **Replies:** 2\ **Last updated:** [September 3, 2021, 3:39pm UTC](https://discuss.elastic.co/t/filebeat-holding-open-handles-on-deleted-files/283192 "2021-09-03T15:39:06Z")
v. 6.8.4 We are experiencing issues daily with lingering open file handles on files which have been deleted by another process which has completed daily compression of logs. The files seem to remain open forever until … --- ## [Running logstash pipeline is not working](https://discuss.elastic.co/t/running-logstash-pipeline-is-not-working/263394)
**Author:** [@Srinivas\_RK](https://discuss.elastic.co/u/Srinivas_RK)\ **Replies:** 2\ **Last updated:** [February 5, 2021, 4:48pm UTC](https://discuss.elastic.co/t/running-logstash-pipeline-is-not-working/263394 "2021-02-05T16:48:01Z")
input { jdbc { id =\> "my\_plugin\_id" jdbc\_connection\_string =\> "jdbc:sqlserver://abc.database.windows.net:1433;databaseName=db;" jdbc\_driver\_library =\> "" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.… --- ## [How logstash create indices based on date - wrong date](https://discuss.elastic.co/t/how-logstash-create-indices-based-on-date-wrong-date/253826)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 2:59pm UTC](https://discuss.elastic.co/t/how-logstash-create-indices-based-on-date-wrong-date/253826 "2020-10-30T14:59:49Z")
I am running ELK with filebeat in kubernetes. Filebeat is harvesting logs and sending it to logstash. This is my logstash filter: if \[kubernetes\]\[annotations\]\[elastic\_index\] { mutate { add\_field … --- ## [Error in APM agent during startup](https://discuss.elastic.co/t/error-in-apm-agent-during-startup/239832)
**Author:** [@jibitgeorge](https://discuss.elastic.co/u/jibitgeorge)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 7:32am UTC](https://discuss.elastic.co/t/error-in-apm-agent-during-startup/239832 "2020-07-07T07:32:58Z")
Kibana version: 7.6.2 Elasticsearch version: 7.6.2 APM Server version: 7.6.2 APM Agent language and version: Java 1.12.0 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and… --- ## [Node failing to join cluster](https://discuss.elastic.co/t/node-failing-to-join-cluster/184051)
**Author:** [@bkasrai](https://discuss.elastic.co/u/bkasrai)\ **Replies:** 2\ **Last updated:** [June 4, 2019, 4:58pm UTC](https://discuss.elastic.co/t/node-failing-to-join-cluster/184051 "2019-06-04T16:58:19Z")
Good afternoon-I am looking to add a second node to my cluster and I am not seeing the node join and after reviewing the logs, I am seeing a unknown\_ca cert error. (attached below) My ES yml file mimics the original node… --- ## [Elastic search is running BUT I GOT curl: (7) Failed to connect to 127.0.0.1 port 9200: Connection refused](https://discuss.elastic.co/t/elastic-search-is-running-but-i-got-curl-7-failed-to-connect-to-127-0-0-1-port-9200-connection-refused/158312)
**Author:** [@ceyhun\_yilmaz](https://discuss.elastic.co/u/ceyhun_yilmaz)\ **Replies:** 2\ **Last updated:** [November 27, 2018, 11:23am UTC](https://discuss.elastic.co/t/elastic-search-is-running-but-i-got-curl-7-failed-to-connect-to-127-0-0-1-port-9200-connection-refused/158312 "2018-11-27T11:23:30Z")
\[root@ip-XXX-XX-XX-XXX elasticsearch\]# sudo /etc/init.d/elasticsearch restart Stopping elasticsearch: \[FAILED\] Starting elasticsearch: \[ OK \] \[ro… --- ## [Completion Suggester Sorting on Fuzziness](https://discuss.elastic.co/t/completion-suggester-sorting-on-fuzziness/82534)
**Author:** [@Maarten\_Roosendaal](https://discuss.elastic.co/u/Maarten_Roosendaal)\ **Replies:** 2\ **Last updated:** [April 19, 2017, 4:56am UTC](https://discuss.elastic.co/t/completion-suggester-sorting-on-fuzziness/82534 "2017-04-19T04:56:02Z")
Hi, I'm trying to figure out how i can sort the completion suggester when using fuzziness. I have 4 documents 1) title: tennis 2) title: tee 3) title: teen 4) title: terrace When people enter 'tee' and fuzziness: 1… --- ## [Kibana Number Overflow](https://discuss.elastic.co/t/kibana-number-overflow/68698)
**Author:** [@sitanxin](https://discuss.elastic.co/u/sitanxin)\ **Replies:** 2\ **Last updated:** [December 13, 2016, 1:32am UTC](https://discuss.elastic.co/t/kibana-number-overflow/68698 "2016-12-13T01:32:41Z")
Hi All, When I use the Kibana to display some number (like Total Memory) in GB, the number is total incorrect. So after compare, we found the number is overflow. Do you have any suggestion to display? We don't hope to u… --- ## [How to disable Filesystem/URL Snapshots in 2.x](https://discuss.elastic.co/t/how-to-disable-filesystem-url-snapshots-in-2-x/44776)
**Author:** [@Ankit\_Malpani](https://discuss.elastic.co/u/Ankit_Malpani)\ **Replies:** 2\ **Last updated:** [March 18, 2016, 6:31am UTC](https://discuss.elastic.co/t/how-to-disable-filesystem-url-snapshots-in-2-x/44776 "2016-03-18T06:31:18Z")
I want to disable FS and URL snapshots in Elasticsearch 2.x. Essentially do not want users of the cluster messing around with the filesystem. Users are allowed to configure S3 repositories only. I achieved this in 1.x … --- ## [How to parse json responses in logs](https://discuss.elastic.co/t/how-to-parse-json-responses-in-logs/37754)
**Author:** [@clandestino\_bgd](https://discuss.elastic.co/u/clandestino_bgd)\ **Replies:** 2\ **Last updated:** [December 23, 2015, 9:03am UTC](https://discuss.elastic.co/t/how-to-parse-json-responses-in-logs/37754 "2015-12-23T09:03:20Z")
Hello, could somebody help me figuring this out? I have the log file (containing server json responses) in the following format {"success":true,"data":{"field1":"value1", "field2":"value2"}} {"success":true,"data":{"fi… --- ## [How to setHighlighterNoMatchSize for a specific field?](https://discuss.elastic.co/t/how-to-sethighlighternomatchsize-for-a-specific-field/34212)
**Author:** [@andrewwwooster](https://discuss.elastic.co/u/andrewwwooster)\ **Replies:** 2\ **Last updated:** [November 11, 2015, 3:36pm UTC](https://discuss.elastic.co/t/how-to-sethighlighternomatchsize-for-a-specific-field/34212 "2015-11-11T15:36:21Z")
Using JSON I can specify no\_match\_size for a highlight field. "highlight": { "fields" : { "f1" : {"no\_match\_size": 100}, "f2" : {"no\_match\_size": 200} } } However, using the Java API it looks l… --- ## [Shield 2 beta on previous versions of ES](https://discuss.elastic.co/t/shield-2-beta-on-previous-versions-of-es/29487)
**Author:** [@Bobby\_Pilot](https://discuss.elastic.co/u/Bobby_Pilot)\ **Replies:** 2\ **Last updated:** [September 17, 2015, 3:47pm UTC](https://discuss.elastic.co/t/shield-2-beta-on-previous-versions-of-es/29487 "2015-09-17T15:47:24Z")
Wondering if the new version of Shield announced today with field-level authorization will be available on earlier versions of Elasticsearch (specifically 1.7x) --- ## [Unable to choose Elasticsearch Query as Alert Type](https://discuss.elastic.co/t/unable-to-choose-elasticsearch-query-as-alert-type/281132)
**Author:** [@andrewgodwinB](https://discuss.elastic.co/u/andrewgodwinB)\ **Replies:** 4\ **Last updated:** [August 13, 2021, 8:40am UTC](https://discuss.elastic.co/t/unable-to-choose-elasticsearch-query-as-alert-type/281132 "2021-08-13T08:40:24Z")
Hi, I'm trying to grant a role access to use Elasticsearch Query as an alert type. The users with that role are unable to see the Elasticsearch Query when they go to create a new alert in Kibana. I can see it but I hav… --- ## [Filebeat not working](https://discuss.elastic.co/t/filebeat-not-working/274316)
**Author:** [@Drupad\_Soni](https://discuss.elastic.co/u/Drupad_Soni)\ **Replies:** 4\ **Last updated:** [May 29, 2021, 8:32pm UTC](https://discuss.elastic.co/t/filebeat-not-working/274316 "2021-05-29T20:32:24Z")
Filebeat not working ● filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Loaded: loaded (/lib/systemd/system/filebeat.service; disabled; vendor preset: enabled) Active: failed (Resu… --- ## [Creating new user in Kibana, login fine but unable to view logs](https://discuss.elastic.co/t/creating-new-user-in-kibana-login-fine-but-unable-to-view-logs/262747)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 4\ **Last updated:** [January 31, 2021, 2:03pm UTC](https://discuss.elastic.co/t/creating-new-user-in-kibana-login-fine-but-unable-to-view-logs/262747 "2021-01-31T14:03:21Z")
Hello all i created new use in kibana with kibana\_admin,kibana\_system rules but when i login to kibana with the new user, I cant view the logs which i can view with the default user of kibana . i can see all the filt… --- ## [Need help on "sum by group" aggregations on simple doc structure](https://discuss.elastic.co/t/need-help-on-sum-by-group-aggregations-on-simple-doc-structure/254672)
**Author:** [@ElasBon](https://discuss.elastic.co/u/ElasBon)\ **Replies:** 4\ **Last updated:** [November 9, 2020, 2:46pm UTC](https://discuss.elastic.co/t/need-help-on-sum-by-group-aggregations-on-simple-doc-structure/254672 "2020-11-09T14:46:56Z")
I'm using es 7.8.1, my data are pojo records like this: { "timestamp": "2020-11-07 08:00:00", "lineId": 532, "sn": "A2600101000005DF", "upBytes": 5927, "dlBytes": 13706 } … --- ## [Documentation to link remote clusters using proxy](https://discuss.elastic.co/t/documentation-to-link-remote-clusters-using-proxy/220229)
**Author:** [@twiggy](https://discuss.elastic.co/u/twiggy)\ **Replies:** 4\ **Last updated:** [February 25, 2020, 8:41am UTC](https://discuss.elastic.co/t/documentation-to-link-remote-clusters-using-proxy/220229 "2020-02-25T08:41:34Z")
Hello everyone, From the the release note : With Elasticsearch 7.6, a proxy can now be used between clusters for both CCR and CCS. This means fewer ports need to be opened between Elasticsearch clusters when a proxy i… --- ## [Automate Reindex API while source is still indexing](https://discuss.elastic.co/t/automate-reindex-api-while-source-is-still-indexing/195099)
**Author:** [@abaullosa](https://discuss.elastic.co/u/abaullosa)\ **Replies:** 4\ **Last updated:** [August 21, 2019, 12:30pm UTC](https://discuss.elastic.co/t/automate-reindex-api-while-source-is-still-indexing/195099 "2019-08-21T12:30:28Z")
Hi. Im using ES 7. And I need to automate a process on Kibana so when I create a new Index, I need to \_reindex it using a query. Im able to do this manually but, How do I automate this process so everytime I have a new … --- ## [Discovery node in Elasticsearch 7.1.1](https://discuss.elastic.co/t/discovery-node-in-elasticsearch-7-1-1/185795)
**Author:** [@EL\_Cholo](https://discuss.elastic.co/u/EL_Cholo)\ **Replies:** 4\ **Last updated:** [June 19, 2019, 7:22am UTC](https://discuss.elastic.co/t/discovery-node-in-elasticsearch-7-1-1/185795 "2019-06-19T07:22:44Z")
Je suis un débutant sur Elasticsearch, et fan de cette solution de moteur avancée BIG DATA. Mais, j'ai un gros problème sur le passage à l'échelle. En effet, j'ai installé elasticsearch 7.1.1 sur trois machines virtuel… --- ## [Kibana sporadically crashing and not automatically recovering even though the correct systemd UNIT file is in place](https://discuss.elastic.co/t/kibana-sporadically-crashing-and-not-automatically-recovering-even-though-the-correct-systemd-unit-file-is-in-place/172717)
**Author:** [@thomas.heuberger](https://discuss.elastic.co/u/thomas.heuberger)\ **Replies:** 4\ **Last updated:** [March 19, 2019, 1:19pm UTC](https://discuss.elastic.co/t/kibana-sporadically-crashing-and-not-automatically-recovering-even-though-the-correct-systemd-unit-file-is-in-place/172717 "2019-03-19T13:19:16Z")
So, from time to time Kibana sporadically crashes and the service is not automatically restarted, even though the correct systemd UNIT file is in place. :~$ cat kibana.service \[Unit\] Description=Kibana StartLimitInterva… --- ## [Filebeat new module - missing info](https://discuss.elastic.co/t/filebeat-new-module-missing-info/122462)
**Author:** [@Asher\_Shoshan](https://discuss.elastic.co/u/Asher_Shoshan)\ **Replies:** 4\ **Last updated:** [March 12, 2018, 7:52am UTC](https://discuss.elastic.co/t/filebeat-new-module-missing-info/122462 "2018-03-12T07:52:05Z")
Trying to add a new module to filebeat (parsing some application access log); In documentation, last steps are missing...(after running build create- fileset) how to wrap the new module, recompile filebaet? --- ## [Configuring logs and monitoring different logstash running on same AWS instance](https://discuss.elastic.co/t/configuring-logs-and-monitoring-different-logstash-running-on-same-aws-instance/115192)
**Author:** [@kseth](https://discuss.elastic.co/u/kseth)\ **Replies:** 4\ **Last updated:** [January 27, 2018, 1:39am UTC](https://discuss.elastic.co/t/configuring-logs-and-monitoring-different-logstash-running-on-same-aws-instance/115192 "2018-01-27T01:39:03Z")
Hi, We are using systemctl for running 3 logstash processes, one for each environment : dev, qa and prod on AWS centos box. We are unable to figure out how to configure logging for these 3 different logstash processes a… --- ## [\_ingest.timestamp does not match my local time](https://discuss.elastic.co/t/ingest-timestamp-does-not-match-my-local-time/346600)
**Author:** [@JasonREC](https://discuss.elastic.co/u/JasonREC)\ **Replies:** 3\ **Last updated:** [November 7, 2023, 8:15am UTC](https://discuss.elastic.co/t/ingest-timestamp-does-not-match-my-local-time/346600 "2023-11-07T08:15:47Z")
I am currently in GMT+8 time zone, I have created this pipeline so that when indexing new document, the new document is created with a timestamp PUT \_ingest/pipeline/add-current-time { "processors": \[ { "se… --- ## [Failed to submit message (aws lambda using python)](https://discuss.elastic.co/t/failed-to-submit-message-aws-lambda-using-python/332576)
**Author:** [@gabriel-f-santos](https://discuss.elastic.co/u/gabriel-f-santos)\ **Replies:** 3\ **Last updated:** [May 8, 2023, 4:38am UTC](https://discuss.elastic.co/t/failed-to-submit-message-aws-lambda-using-python/332576 "2023-05-08T04:38:23Z")
Hello guys, I am using elastic in lambda, with: elastic-apm==6.14 layer:elastic-apm-extension-ver-1-3-0-x86\_64:1 python 3.9 in aws lambda I am receiving an error in some operations, most of the executions works fine,… --- ## [Best practice for a newbie](https://discuss.elastic.co/t/best-practice-for-a-newbie/228030)
**Author:** [@Rhh](https://discuss.elastic.co/u/Rhh)\ **Replies:** 3\ **Last updated:** [April 17, 2020, 6:34am UTC](https://discuss.elastic.co/t/best-practice-for-a-newbie/228030 "2020-04-17T06:34:42Z")
Hi I am totaly new to elastic and tries to figure out how to use elastic with serilog as provider. I have a lot of different log sources (100 +), and they all generate a JSON I need to log. I know I can log the differ… --- ## [Elasticsearch won't start in Windows 10 64bit](https://discuss.elastic.co/t/elasticsearch-wont-start-in-windows-10-64bit/191700)
**Author:** [@benqxf](https://discuss.elastic.co/u/benqxf)\ **Replies:** 0\ **Last updated:** [July 22, 2019, 6:58pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-in-windows-10-64bit/191700 "2019-07-22T18:58:17Z")
Installed Elasticsearch 7.0 in my windows 10 64bit notebook. While attempting to start service from Windows | Services, this message pops up " Windows could not start the Elasticsearch 7.0.0 (elasticsearch-service-x64… --- ## [Check filebeat status using API on local host](https://discuss.elastic.co/t/check-filebeat-status-using-api-on-local-host/183594)
**Author:** [@rahulnathan](https://discuss.elastic.co/u/rahulnathan)\ **Replies:** 3\ **Last updated:** [May 30, 2019, 10:38pm UTC](https://discuss.elastic.co/t/check-filebeat-status-using-api-on-local-host/183594 "2019-05-30T22:38:14Z")
Hello, Is it possible to check filebeat status locally on the host using API/CLI where it is running ? We are trying to build monitoring around filebeat to check whether it is up, connected to remote ElasticSearch end… --- ## [Logstash Netflow Module Change Index Pattern Field](https://discuss.elastic.co/t/logstash-netflow-module-change-index-pattern-field/113113)
**Author:** [@Michael\_Tsikerdekis](https://discuss.elastic.co/u/Michael_Tsikerdekis)\ **Replies:** 3\ **Last updated:** [December 29, 2017, 2:09am UTC](https://discuss.elastic.co/t/logstash-netflow-module-change-index-pattern-field/113113 "2017-12-29T02:09:04Z")
I am trying to change the default indexing pattern for logstash's netflow module. Currently fields netflow.dst\_port and netflow.src\_port are set to be string! I have been changing the json files (netflow.json) in this d… --- ## [Passing date field throw rest](https://discuss.elastic.co/t/passing-date-field-throw-rest/12072)
**Author:** [@abdo](https://discuss.elastic.co/u/abdo)\ **Replies:** 3\ **Last updated:** [February 9, 2016, 5:18pm UTC](https://discuss.elastic.co/t/passing-date-field-throw-rest/12072 "2016-02-09T17:18:01Z")
Hi all, I am using PHP to write REST query to ES .I am trying to search my ES with a query that contains date field. This is my query: {"query":{"bool":{"must":{"range":{"timeGenerated":{"from":"2013/4/1 09:14:08",… --- ## [Refresh thread consumes CPU resource when changing refresh\_interval to -1](https://discuss.elastic.co/t/refresh-thread-consumes-cpu-resource-when-changing-refresh-interval-to-1/20258)
**Author:** [@Shinsuke\_Sugaya](https://discuss.elastic.co/u/Shinsuke_Sugaya)\ **Replies:** 3\ **Last updated:** [October 15, 2014, 9:00am UTC](https://discuss.elastic.co/t/refresh-thread-consumes-cpu-resource-when-changing-refresh-interval-to-1/20258 "2014-10-15T09:00:15Z")
Hi, I encountered a problem in InternalIndexShard#EngineRefresher. The problem is, 1 core consumed 100% CPU resource when changing refresh\_interval to -1. In ES 1.3, I took a thread dump twice as below: $ top… --- ## [Term\_vector access](https://discuss.elastic.co/t/term-vector-access/9573)
**Author:** [@Ryan\_Stuart](https://discuss.elastic.co/u/Ryan_Stuart)\ **Replies:** 8\ **Last updated:** [November 8, 2012, 11:34am UTC](https://discuss.elastic.co/t/term-vector-access/9573 "2012-11-08T11:34:38Z")
Hi All, As previously posted I am trying to augment elasticsearch to fit with some research being conducted at a University. That research is based around dynamic schema search. The way it operates is as follows: … --- ## [Getting RemoteTransportException/QueryPhaseExecutionException](https://discuss.elastic.co/t/getting-remotetransportexception-queryphaseexecutionexception/9480)
**Author:** [@mgornik](https://discuss.elastic.co/u/mgornik)\ **Replies:** 8\ **Last updated:** [October 29, 2012, 2:30pm UTC](https://discuss.elastic.co/t/getting-remotetransportexception-queryphaseexecutionexception/9480 "2012-10-29T14:30:01Z")
Hi, We are using ES for half a year, and we are very pleased with how it's been working. We have 3 servers running sharded ES configuration. We have two mappings for two different document types. Recently, we dro… --- ## [Discovery and/or Reconnection](https://discuss.elastic.co/t/discovery-and-or-reconnection/3096)
**Author:** [@Kenneth\_Loafman](https://discuss.elastic.co/u/Kenneth_Loafman)\ **Replies:** 3\ **Last updated:** [September 1, 2010, 6:28pm UTC](https://discuss.elastic.co/t/discovery-and-or-reconnection/3096 "2010-09-01T18:28:48Z")
Hi, I've got two nodes running and communicating, or rather I did until the network went down for a long while. Now, I have two independent clusters of one node each. How do I get the nodes to rejoin into a clust… --- ## [Elastic Synthetics: Error executing step: $(...).popover is not a function](https://discuss.elastic.co/t/elastic-synthetics-error-executing-step-popover-is-not-a-function/346625)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 7\ **Last updated:** [November 8, 2023, 8:19pm UTC](https://discuss.elastic.co/t/elastic-synthetics-error-executing-step-popover-is-not-a-function/346625 "2023-11-08T20:19:04Z")
I am using @elastic/synthetics-1.5.0 to write and deploy user journeys as project monitors. They run as expected when I test them on my local workstation, however when I push them to Elastic Synthetics, they fail with th… --- ## [Keep data in a rolling window of 3 months](https://discuss.elastic.co/t/keep-data-in-a-rolling-window-of-3-months/323458)
**Author:** [@Harsh0145](https://discuss.elastic.co/u/Harsh0145)\ **Replies:** 7\ **Last updated:** [January 24, 2023, 3:31pm UTC](https://discuss.elastic.co/t/keep-data-in-a-rolling-window-of-3-months/323458 "2023-01-24T15:31:31Z")
Hi, I am trying to delete or archive documents older than 3 months. Since our use case allows customers to update the data for the last 3 months, so at any moment in time, we should have the last 3 months of data. Accor… [Previous page](https://discuss.elastic.co/top.md?page=1542&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1544&per_page=50&period=all)