# Top **URL:** https://discuss.elastic.co/top.md?page=1596&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1597 --- ## [Rolling Upgrading from 1.2.1 to 1.3.0 – java.lang.IllegalArgumentException: No enum constant org.apache.lucene.util.Version.4.3.1](https://discuss.elastic.co/t/rolling-upgrading-from-1-2-1-to-1-3-0-java-lang-illegalargumentexception-no-enum-constant-org-apache-lucene-util-version-4-3-1/18928)
**Author:** [@Ollie](https://discuss.elastic.co/u/Ollie)\ **Replies:** 3\ **Last updated:** [July 29, 2014, 3:02pm UTC](https://discuss.elastic.co/t/rolling-upgrading-from-1-2-1-to-1-3-0-java-lang-illegalargumentexception-no-enum-constant-org-apache-lucene-util-version-4-3-1/18928 "2014-07-29T15:02:28Z")
Hi, We're upgrading our staging cluster from 1.2.1 to 1.3.0 one box at a time. We have stopped Elasticsearch on the first box, removed the Groovy plugin we were using with 1.2.1 and deployed using chef. The new bo… --- ## [Is there any way to force Replica inside particular Node](https://discuss.elastic.co/t/is-there-any-way-to-force-replica-inside-particular-node/16287)
**Author:** [@sumit\_gupta\_sgt](https://discuss.elastic.co/u/sumit_gupta_sgt)\ **Replies:** 3\ **Last updated:** [March 11, 2014, 9:15pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-force-replica-inside-particular-node/16287 "2014-03-11T21:15:55Z")
Hi, I am trying to configure ES Cluster using 2 Nodes in different Network.I am creating 1 index using 2 shards and 1 replica 1 replica is unassigned in cluster and cluster state is yellow. Please tell me how … --- ## [Fault Tolerance Fallacy](https://discuss.elastic.co/t/fault-tolerance-fallacy/15388)
**Author:** [@Ken\_Edwards](https://discuss.elastic.co/u/Ken_Edwards)\ **Replies:** 8\ **Last updated:** [February 5, 2014, 8:17pm UTC](https://discuss.elastic.co/t/fault-tolerance-fallacy/15388 "2014-02-05T20:17:46Z")
A few months ago when my team was deciding which search technology to use, one of the primary reasons why we chose Elasticsearch over Solr was because it treats distributed search as a top-level priority. Since then I … --- ## [\[ES v7.9.1\] Nested terms query runs forever and consumes massive memory](https://discuss.elastic.co/t/es-v7-9-1-nested-terms-query-runs-forever-and-consumes-massive-memory/272421)
**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\ **Replies:** 0\ **Last updated:** [May 7, 2021, 1:05pm UTC](https://discuss.elastic.co/t/es-v7-9-1-nested-terms-query-runs-forever-and-consumes-massive-memory/272421 "2021-05-07T13:05:25Z")
Hi, I'm facing an issue with a nested terms query. We have documents with nested documents within and use multiple nested terms aggregations in our queries. The cardinality of each text field is also quite high. In o… --- ## [Best blueprint/architecture/best practice to monitor Logstash pipelines with alerts in Kibana?](https://discuss.elastic.co/t/best-blueprint-architecture-best-practice-to-monitor-logstash-pipelines-with-alerts-in-kibana/265677)
**Author:** [@byteandbit](https://discuss.elastic.co/u/byteandbit)\ **Replies:** 0\ **Last updated:** [February 27, 2021, 3:57am UTC](https://discuss.elastic.co/t/best-blueprint-architecture-best-practice-to-monitor-logstash-pipelines-with-alerts-in-kibana/265677 "2021-02-27T03:57:31Z")
Hello, We are looking for best practice to monitor our Logstash (several pipelines with various input and output plugins) and alert via Slack or eMail in case of problems. Do we just read Logstash logs? If so again wha… --- ## [Apm-agent-dotnet Errors after updating from 1.14.1 to 1.15.0+](https://discuss.elastic.co/t/apm-agent-dotnet-errors-after-updating-from-1-14-1-to-1-15-0/306350)
**Author:** [@GregS1](https://discuss.elastic.co/u/GregS1)\ **Replies:** 4\ **Last updated:** [June 13, 2022, 8:42pm UTC](https://discuss.elastic.co/t/apm-agent-dotnet-errors-after-updating-from-1-14-1-to-1-15-0/306350 "2022-06-13T20:42:40Z")
Hi, after updating one of our .NET 6 services to use Elastic.Apm.Azure.\* v1.15.0 (from 1.14.1), we started seeing this in our logs (and do on v1.16.0 as well) about every 30 seconds: {BackendCommComponentBase (CentralCo… --- ## [Are there any size limits snapshot in Elasticsearch](https://discuss.elastic.co/t/are-there-any-size-limits-snapshot-in-elasticsearch/273517)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 11:48am UTC](https://discuss.elastic.co/t/are-there-any-size-limits-snapshot-in-elasticsearch/273517 "2021-05-20T11:48:52Z")
I would like to understand if there are any size limitations when save/restore snapshots? Are there such? --- ## [Cannot create a file when that file already exists](https://discuss.elastic.co/t/cannot-create-a-file-when-that-file-already-exists/235303)
**Author:** [@bob88](https://discuss.elastic.co/u/bob88)\ **Replies:** 4\ **Last updated:** [June 9, 2020, 11:15am UTC](https://discuss.elastic.co/t/cannot-create-a-file-when-that-file-already-exists/235303 "2020-06-09T11:15:20Z")
Hello, i have a problem with winlogbeat 7.6 on windows 2008r2: "ERROR instance/beat.go:933 Exiting: rename C:\\ProgramData\\winlogbeat.winlogbeat.yml.new C:\\ProgramData\\winlogbeat.winlogbeat.yml: Cannot create a file w… --- ## [Store, render and search different types of semi-structured data in elasticsearch](https://discuss.elastic.co/t/store-render-and-search-different-types-of-semi-structured-data-in-elasticsearch/228511)
**Author:** [@jgeek](https://discuss.elastic.co/u/jgeek)\ **Replies:** 4\ **Last updated:** [April 18, 2020, 8:41am UTC](https://discuss.elastic.co/t/store-render-and-search-different-types-of-semi-structured-data-in-elasticsearch/228511 "2020-04-18T08:41:47Z")
We have a couple of different features in our application both of which have different types of semi-structured data sets. One of them has a json data set (rest api responses) while other has html files that includes aud… --- ## [Copy different field with nanoseconds to elasticsearch/kibana @timestamp field](https://discuss.elastic.co/t/copy-different-field-with-nanoseconds-to-elasticsearch-kibana-timestamp-field/222806)
**Author:** [@savvy](https://discuss.elastic.co/u/savvy)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 3:55pm UTC](https://discuss.elastic.co/t/copy-different-field-with-nanoseconds-to-elasticsearch-kibana-timestamp-field/222806 "2020-03-10T15:55:47Z")
Just posting that here, seems like logstash related. Can someone guide me here? --- ## [Filtering by Long.MAX\_VALUE does not return any result](https://discuss.elastic.co/t/filtering-by-long-max-value-does-not-return-any-result/199786)
**Author:** [@Vova\_Marchev](https://discuss.elastic.co/u/Vova_Marchev)\ **Replies:** 4\ **Last updated:** [September 25, 2019, 4:44pm UTC](https://discuss.elastic.co/t/filtering-by-long-max-value-does-not-return-any-result/199786 "2019-09-25T16:44:17Z")
Hi all! I found an issue when I try to filter documents by range where second parameter is Long.MAX\_VALUE. For example, let's create a schema of the document: PUT /example { "mappings": { "\_doc": { … --- ## [Picking latest index in kibana dashboard](https://discuss.elastic.co/t/picking-latest-index-in-kibana-dashboard/192945)
**Author:** [@pmehra](https://discuss.elastic.co/u/pmehra)\ **Replies:** 4\ **Last updated:** [July 31, 2019, 4:50pm UTC](https://discuss.elastic.co/t/picking-latest-index-in-kibana-dashboard/192945 "2019-07-31T16:50:33Z")
We are using a rollover indexing strategy where each software run would result in two new indexes everyday, for example somestaticname-a-.2019.07.16\_01.00.04, somestaticname-b-.2019.07.16\_01.00.04 somestaticname-a-.20… --- ## [How to handle multi line logs in logstash](https://discuss.elastic.co/t/how-to-handle-multi-line-logs-in-logstash/153609)
**Author:** [@Parvatayya\_Malimath](https://discuss.elastic.co/u/Parvatayya_Malimath)\ **Replies:** 4\ **Last updated:** [October 24, 2018, 1:44pm UTC](https://discuss.elastic.co/t/how-to-handle-multi-line-logs-in-logstash/153609 "2018-10-24T13:44:16Z")
Hi I have such logs, i am not sure how handle this multi line logs, as you can see. its not consistent, we have multi lines at times and single lines at times. please help, how to parse them 2018-10-22 15:32:24.407 DE… --- ## [Runing logstash service with number of config files](https://discuss.elastic.co/t/runing-logstash-service-with-number-of-config-files/24487)
**Author:** [@karasmeitar](https://discuss.elastic.co/u/karasmeitar)\ **Replies:** 4\ **Last updated:** [January 22, 2016, 10:24am UTC](https://discuss.elastic.co/t/runing-logstash-service-with-number-of-config-files/24487 "2016-01-22T10:24:03Z")
Hi All, I'm running logstash as a service on ubuntu machine with 10 different config files.each config get different doc type from different s3 bucket and insert it or delete it from elasticsearch. Yesterday i saw that … --- ## [Fleet CEF Processor](https://discuss.elastic.co/t/fleet-cef-processor/296790)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 6\ **Last updated:** [February 11, 2022, 3:20pm UTC](https://discuss.elastic.co/t/fleet-cef-processor/296790 "2022-02-11T15:20:51Z")
Hello, We are trying to use the CEF integration to parse syslogs sent over from SentinelOne, but are getting an error message on processing which appears to be due to the date format. Error - Text '2022-02-09 00:25:02,… --- ## [The Junk log directory created in logstash is invalid](https://discuss.elastic.co/t/the-junk-log-directory-created-in-logstash-is-invalid/141821)
**Author:** [@swethamahesh](https://discuss.elastic.co/u/swethamahesh)\ **Replies:** 6\ **Last updated:** [August 9, 2018, 5:33am UTC](https://discuss.elastic.co/t/the-junk-log-directory-created-in-logstash-is-invalid/141821 "2018-08-09T05:33:51Z")
Hi, My filebeat configuration is as below: filebeat.prospectors: - input\_type: log paths: - /var/log/oes.log encoding: utf-8 fields\_under\_root: true document\_type: log fields: service\_name: ops ap… --- ## [使用 RestHighLevelClient 连接 es 集群报错 Request cannot be executed; I/O reactor status: STOPPED](https://discuss.elastic.co/t/resthighlevelclient-es-request-cannot-be-executed-i-o-reactor-status-stopped/165009)
**Author:** [@corleone](https://discuss.elastic.co/u/corleone)\ **Replies:** 0\ **Last updated:** [January 21, 2019, 8:44am UTC](https://discuss.elastic.co/t/resthighlevelclient-es-request-cannot-be-executed-i-o-reactor-status-stopped/165009 "2019-01-21T08:44:52Z")
连接集群的代码如下： 在启动完成之后，查询某索引就会报错，查询的关键代码如下： SearchResponse searchResponse = client.search(searchRequest, RequestOptions.DEFAULT); 这是报错： --- ## [Logstash re-processes files, incorrectly updates sincedb](https://discuss.elastic.co/t/logstash-re-processes-files-incorrectly-updates-sincedb/358640)
**Author:** [@antay](https://discuss.elastic.co/u/antay)\ **Replies:** 7\ **Last updated:** [May 3, 2024, 2:32pm UTC](https://discuss.elastic.co/t/logstash-re-processes-files-incorrectly-updates-sincedb/358640 "2024-05-03T14:32:55Z")
I've been struggling with this intermittent issue for months, where sometimes a log file is read twice into elasticsearch, and sincedb shows incorrect filenames while this is happening. Apologies for a long post, trying… --- ## [Java APM1.41.0 JVM used is Zero](https://discuss.elastic.co/t/java-apm1-41-0-jvm-used-is-zero/340218)
**Author:** [@zt9788](https://discuss.elastic.co/u/zt9788)\ **Replies:** 7\ **Last updated:** [August 10, 2023, 2:00am UTC](https://discuss.elastic.co/t/java-apm1-41-0-jvm-used-is-zero/340218 "2023-08-10T02:00:08Z")
1.38.0 can catch the jvm used Programs typically use around 200-300M of heap memory Non-Heap memory is 260~320M in 1.38.0 befor JDK: JDK17.0.8 Kibana version: 7.13.2 Elasticsearch version: 7.13.2 APM Serv… --- ## [Exiting: error loading config file: yaml: line 48: did not find expected key](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-48-did-not-find-expected-key/307508)
**Author:** [@Orkun\_CELIK](https://discuss.elastic.co/u/Orkun_CELIK)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 1:03pm UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-48-did-not-find-expected-key/307508 "2022-06-17T13:03:01Z")
Hi All , After editing apm.yml in elastic apm, we get the following error. We get the error in the index line. output.Elasticsearch: hosts: \["https://10.0.0.12:9200", "https://10.0.0.13:9200", "https://10.0.0.14:9200"… --- ## [ECK Elastic Agent not collecting k8s logs](https://discuss.elastic.co/t/eck-elastic-agent-not-collecting-k8s-logs/304424)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 1:28pm UTC](https://discuss.elastic.co/t/eck-elastic-agent-not-collecting-k8s-logs/304424 "2022-05-24T13:28:44Z")
I have eck installed on my aws eks cluster, along with elastic agents managed by fleet. After adding the kuberentes integration and attaching the kubernetes package policy to the agent policy. (following this doc -Config… --- ## [Does the transation propagate from the server to the browser when loading a webpage?](https://discuss.elastic.co/t/does-the-transation-propagate-from-the-server-to-the-browser-when-loading-a-webpage/192524)
**Author:** [@Nicolas\_Labrot](https://discuss.elastic.co/u/Nicolas_Labrot)\ **Replies:** 7\ **Last updated:** [July 30, 2019, 7:43am UTC](https://discuss.elastic.co/t/does-the-transation-propagate-from-the-server-to-the-browser-when-loading-a-webpage/192524 "2019-07-30T07:43:29Z")
Hello, I'm trying to figure out if when the browser load a new page, so make an HTTP query to the server, if the transaction propagates from the server to the browser. Currently I have setup-ed the RUM agent and the Ja… --- ## [How to develope kibana vue.js plugins](https://discuss.elastic.co/t/how-to-develope-kibana-vue-js-plugins/186730)
**Author:** [@tuohaibei](https://discuss.elastic.co/u/tuohaibei)\ **Replies:** 1\ **Last updated:** [July 2, 2019, 7:20pm UTC](https://discuss.elastic.co/t/how-to-develope-kibana-vue-js-plugins/186730 "2019-07-02T19:20:21Z")
Now i develope plugin at kibana 7.1,you know use plugins-generator to generate plugins.default use react.js.if i want to change to vue.js.is there any tool or example.i'm stuck here. --- ## [Metricbeat bulk item insert failed and elasticsearch has lots of adding template \* for index patterns \* logs](https://discuss.elastic.co/t/metricbeat-bulk-item-insert-failed-and-elasticsearch-has-lots-of-adding-template-for-index-patterns-logs/177076)
**Author:** [@Jun\_Zhang](https://discuss.elastic.co/u/Jun_Zhang)\ **Replies:** 1\ **Last updated:** [April 23, 2019, 11:26am UTC](https://discuss.elastic.co/t/metricbeat-bulk-item-insert-failed-and-elasticsearch-has-lots-of-adding-template-for-index-patterns-logs/177076 "2019-04-23T11:26:34Z")
metricbeat v7.0 logs: 2019-04-16T19:11:48.356+0800 DEBUG \[elasticsearch\] elasticsearch/client.go:338 PublishEvents: 51 events have been published to elasticsearch in 6.695631ms. 2019-04-16T19:11:48.356+0800 … --- ## [Logstrash is not connection to Elasticsearch](https://discuss.elastic.co/t/logstrash-is-not-connection-to-elasticsearch/143882)
**Author:** [@Yolanda\_Goncalves](https://discuss.elastic.co/u/Yolanda_Goncalves)\ **Replies:** 1\ **Last updated:** [August 10, 2018, 2:44pm UTC](https://discuss.elastic.co/t/logstrash-is-not-connection-to-elasticsearch/143882 "2018-08-10T14:44:37Z")
I'm getting the follow error while trying to create a new index at elasticsearch. \[root@wazuh-server logstash\]# bin/logstash -f /usr/share/logstash/logstashnessus.config WARNING: Could not find logstash.yml which is typ… --- ## [Logstash noisy and throwing errors about no elastic connection](https://discuss.elastic.co/t/logstash-noisy-and-throwing-errors-about-no-elastic-connection/84295)
**Author:** [@mut3](https://discuss.elastic.co/u/mut3)\ **Replies:** 1\ **Last updated:** [May 12, 2017, 5:05pm UTC](https://discuss.elastic.co/t/logstash-noisy-and-throwing-errors-about-no-elastic-connection/84295 "2017-05-12T17:05:02Z")
I am running logstash from a docker container built from elastic.co's 5.3.2 container (latest at time of post). As part of testing I launch this container manually. docker run --rm -it --name=testy --volume="$(pwd)/log… --- ## [Shard distribution using multiple path.data locations](https://discuss.elastic.co/t/shard-distribution-using-multiple-path-data-locations/83893)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 1\ **Last updated:** [April 28, 2017, 8:10am UTC](https://discuss.elastic.co/t/shard-distribution-using-multiple-path-data-locations/83893 "2017-04-28T08:10:50Z")
We have just added additional storage to our single node elasticsearch "cluster". I noticed that elasticsearch did not relocated some of the existing shards to the new location to use the storage evenly... thats not perf… --- ## [Connection refused for logstash configuration file](https://discuss.elastic.co/t/connection-refused-for-logstash-configuration-file/54307)
**Author:** [@a\_soong](https://discuss.elastic.co/u/a_soong)\ **Replies:** 1\ **Last updated:** [June 30, 2016, 3:01am UTC](https://discuss.elastic.co/t/connection-refused-for-logstash-configuration-file/54307 "2016-06-30T03:01:57Z")
input { file { path =\> "H:\\logstash\\zipped\_folders\\logstash-2.3.1\\bin\\first-pipeline-data" start\_position =\> beginning #1 #ignore\_older =\> 0 } } filter { grok { # Grok looks for patterns in incoming log data … --- ## [Elasticsearch user creation fails](https://discuss.elastic.co/t/elasticsearch-user-creation-fails/299478)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 2\ **Last updated:** [March 16, 2022, 8:50am UTC](https://discuss.elastic.co/t/elasticsearch-user-creation-fails/299478 "2022-03-16T08:50:50Z")
Hello team, When I try to create user with below command getting below error in ES version:7.17.0, please help.... ./elasticsearch-setup-passwords interactive -u "https://test.com:9085" But following settings are in e… --- ## [Elastic Search High level Client for OSS 7.4](https://discuss.elastic.co/t/elastic-search-high-level-client-for-oss-7-4/298369)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 8:14am UTC](https://discuss.elastic.co/t/elastic-search-high-level-client-for-oss-7-4/298369 "2022-02-28T08:14:48Z")
I am using Elasticsearch 7.4.0 OSS version server and want to connect via java rest api service. So I used EL rest high level client \ \org.elasticsearch.client\ \elastics… --- ## [Date histogram aggregation returns a wrong number of buckets and wrong start date of each bucket](https://discuss.elastic.co/t/date-histogram-aggregation-returns-a-wrong-number-of-buckets-and-wrong-start-date-of-each-bucket/289324)
**Author:** [@Helmi\_Akermi](https://discuss.elastic.co/u/Helmi_Akermi)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 10:04am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-returns-a-wrong-number-of-buckets-and-wrong-start-date-of-each-bucket/289324 "2021-11-18T10:04:06Z")
Elasticsearch version is 7 Code : GET /my\_alias/\_search { "from": 0, "size": 10, "query": { "bool": { "must": \[ { "range": { "timestamp": { "gte": 16364160000… --- ## [Enhanced Table](https://discuss.elastic.co/t/enhanced-table/274306)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 2:15pm UTC](https://discuss.elastic.co/t/enhanced-table/274306 "2021-05-28T14:15:41Z")
Hi @fbaligand i would like to use enhanced table in 7.13 version .... will you able help me? --- ## [Stack Monitoring not showing data node statistics](https://discuss.elastic.co/t/stack-monitoring-not-showing-data-node-statistics/219497)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 2\ **Last updated:** [February 16, 2020, 5:50am UTC](https://discuss.elastic.co/t/stack-monitoring-not-showing-data-node-statistics/219497 "2020-02-16T05:50:08Z")
For some reason, Stack Monitoring is now showing "Total shards: 0", "Documents: 0", "Data: 0.0B", and the node count is not including my data nodes. Why is no data present for any of my data nodes? If I restart Elasticse… --- ## [Configuring filebeat to transport csv](https://discuss.elastic.co/t/configuring-filebeat-to-transport-csv/207655)
**Author:** [@Charles\_Yuliansen](https://discuss.elastic.co/u/Charles_Yuliansen)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 7:49am UTC](https://discuss.elastic.co/t/configuring-filebeat-to-transport-csv/207655 "2019-11-14T07:49:23Z")
Im trying to learn using elastic, for my first case case im trying to push csv data to elasticsearch so i can read it in kibana. elasticsearch has been installed on the serverside. Im trying to push it with filebeat f… --- ## [How can restrict access to kibana using nginx](https://discuss.elastic.co/t/how-can-restrict-access-to-kibana-using-nginx/161021)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [December 27, 2018, 5:35am UTC](https://discuss.elastic.co/t/how-can-restrict-access-to-kibana-using-nginx/161021 "2018-12-27T05:35:59Z")
hi all, I install nginx to have authentication page in order to accessing a site (KIBANA console). for this purpose, i write following in /etc/nginx/conf.d/default.conf file server { listen \*:80; server\_name \_; loca… --- ## [How to pass current filters into the URL](https://discuss.elastic.co/t/how-to-pass-current-filters-into-the-url/152560)
**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\ **Replies:** 2\ **Last updated:** [November 2, 2018, 4:49pm UTC](https://discuss.elastic.co/t/how-to-pass-current-filters-into-the-url/152560 "2018-11-02T16:49:01Z")
I have found cool feature in the Visual builder under the 'Top N'. If you go to the Panel Options, you can find the 'Item Url' where you can pass some data into the destination URL. This means I can create URLs with pred… --- ## [Json array input producing \_jsonparsefailure](https://discuss.elastic.co/t/json-array-input-producing-jsonparsefailure/140006)
**Author:** [@Scott\_Newby](https://discuss.elastic.co/u/Scott_Newby)\ **Replies:** 2\ **Last updated:** [July 23, 2018, 1:42pm UTC](https://discuss.elastic.co/t/json-array-input-producing-jsonparsefailure/140006 "2018-07-23T13:42:36Z")
We're trying to import a json file that starts as an array (starts with \[ and ends in \]. A truncated input file: \[ { "uri": "uri/feature", "id": "idvalue", "keyword": "Feature", "name": "name", "d… --- ## [Elastic search filter plugin](https://discuss.elastic.co/t/elastic-search-filter-plugin/110015)
**Author:** [@Sai\_Jana\_Selvakumar](https://discuss.elastic.co/u/Sai_Jana_Selvakumar)\ **Replies:** 2\ **Last updated:** [December 5, 2017, 1:03pm UTC](https://discuss.elastic.co/t/elastic-search-filter-plugin/110015 "2017-12-05T13:03:43Z")
Do we need to install Elastic search filter plugin externally or do we need to install.. When I try to run logstash with elasticsearch filter plugin .I am getting this error Problems loading a plugin with {:type=\>"filt… --- ## [Proc\_pid requested](https://discuss.elastic.co/t/proc-pid-requested/37580)
**Author:** [@hamelg](https://discuss.elastic.co/u/hamelg)\ **Replies:** 2\ **Last updated:** [December 18, 2015, 5:10pm UTC](https://discuss.elastic.co/t/proc-pid-requested/37580 "2015-12-18T17:10:18Z")
In the environmental packetbeat fields, we have the proc field. proc \>\> the name of the process that served the transaction. It would be very useful to add the pid. We collect http protocol and we have hundreds apache… --- ## [Indexing to two relatively large indices slows down. Any ideas?](https://discuss.elastic.co/t/indexing-to-two-relatively-large-indices-slows-down-any-ideas/28954)
**Author:** [@asharif](https://discuss.elastic.co/u/asharif)\ **Replies:** 2\ **Last updated:** [September 11, 2015, 7:56am UTC](https://discuss.elastic.co/t/indexing-to-two-relatively-large-indices-slows-down-any-ideas/28954 "2015-09-11T07:56:51Z")
So a bit of prerequisites: ES version: 1.6.0 On AWS cluster, 16 d2.2xlarge Configured like so threadpool.bulk.type: fixed threadpool.bulk.queue\_size: 200 indices.fielddata.cache.size: 20% indices.fielddata.cache.ex… --- ## [Question about 'And' filter](https://discuss.elastic.co/t/question-about-and-filter/28714)
**Author:** [@z\_w\_w1981](https://discuss.elastic.co/u/z_w_w1981)\ **Replies:** 2\ **Last updated:** [September 11, 2015, 1:54am UTC](https://discuss.elastic.co/t/question-about-and-filter/28714 "2015-09-11T01:54:37Z")
Hi, I have simple data (just 2 rows from the Apache log): { "message" =\> "199.201.64.129 - - \[19/Aug/2015:07:06:25 +0800\] \\"GET /v2/brands/12 HTTP/1.1\\" 200 1031 \\"-\\" \\"Mode/2.0.7 (iPhone Simulator; iOS 8.3; Scale/2.… --- ## [Missing filter with nested objects](https://discuss.elastic.co/t/missing-filter-with-nested-objects/14428)
**Author:** [@Ernesto\_Reig](https://discuss.elastic.co/u/Ernesto_Reig)\ **Replies:** 2\ **Last updated:** [November 16, 2013, 9:52am UTC](https://discuss.elastic.co/t/missing-filter-with-nested-objects/14428 "2013-11-16T09:52:17Z")
Hello, I know that this has been discussed in other threads but I would like to know if I am missing something or it is just that missing filter does not work properly with nested objects. I have left the examples … --- ## [Use Elasticsearch FIlter JSON directly in JAVA Api](https://discuss.elastic.co/t/use-elasticsearch-filter-json-directly-in-java-api/11857)
**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\ **Replies:** 2\ **Last updated:** [May 8, 2013, 5:25am UTC](https://discuss.elastic.co/t/use-elasticsearch-filter-json-directly-in-java-api/11857 "2013-05-08T05:25:28Z")
Hi All, I am passing the JSON String to wrapperFilter method. FilterBuilder filterBuilder = FilterBuilders.wrapperFilter("{\\"filter\\": {\\"and\\"=\[{\\"term\\":{\\"c24\\":TEXT} }, {\\"term\\":{\\"C25\\":text} }\]} }"); Fi… --- ## [Java API to use Filters](https://discuss.elastic.co/t/java-api-to-use-filters/7673)
**Author:** [@ama\_sindhuc](https://discuss.elastic.co/u/ama_sindhuc)\ **Replies:** 2\ **Last updated:** [May 15, 2012, 8:29pm UTC](https://discuss.elastic.co/t/java-api-to-use-filters/7673 "2012-05-15T20:29:38Z")
Hi I have indexed the following document (as indicated below) in elastic search and attempting to apply a filter query using Java API (code below) However I am not receiving any results . Code is indicated below. Pl… --- ## [Syskeygen for X-Pack 5.0-alpha5](https://discuss.elastic.co/t/syskeygen-for-x-pack-5-0-alpha5/60207)
**Author:** [@Karl\_Grose](https://discuss.elastic.co/u/Karl_Grose)\ **Replies:** 1\ **Last updated:** [September 10, 2016, 7:14am UTC](https://discuss.elastic.co/t/syskeygen-for-x-pack-5-0-alpha5/60207 "2016-09-10T07:14:19Z")
There appears to be a small bug in the syskeygen Bash script for 5.0-alpha5 which causes the key file name to be incorrect. Here's the patch: diff -u bin/x-pack/syskeygen.orig bin/x-pack/syskeygen --- bin/x-pack/syskey… --- ## [AWS integration with Elasticsearch](https://discuss.elastic.co/t/aws-integration-with-elasticsearch/305284)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 5\ **Last updated:** [May 25, 2022, 1:52pm UTC](https://discuss.elastic.co/t/aws-integration-with-elasticsearch/305284 "2022-05-25T13:52:48Z")
I am trying to setup AWS integration with Elasticsearch 7.17.3 and have had some success. I am not able to get data for few services and the filebeat.json log shows the below error. I am seeing the region code twice in … --- ## [Grok Pattern not working](https://discuss.elastic.co/t/grok-pattern-not-working/293159)
**Author:** [@Pranav\_M](https://discuss.elastic.co/u/Pranav_M)\ **Replies:** 5\ **Last updated:** [January 11, 2022, 4:50am UTC](https://discuss.elastic.co/t/grok-pattern-not-working/293159 "2022-01-11T04:50:00Z")
Hey Community, Received packet: Type = N5abcde8AbcAbcde9AbcdAbcde15AbcdefghAbcdefA, xx = 95, xxx = 441, xxxXxo = 2, xXxxXxx = 1, xxxx = 9 accepted. The above line is a message from my log and I want to seperate each da… --- ## [Kibana Web Console shows zero records when some docs don't have timestamp](https://discuss.elastic.co/t/kibana-web-console-shows-zero-records-when-some-docs-dont-have-timestamp/237355)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 9:07pm UTC](https://discuss.elastic.co/t/kibana-web-console-shows-zero-records-when-some-docs-dont-have-timestamp/237355 "2020-06-16T21:07:39Z")
Hi ES and Kibana versions 7.7.0 In this example I have three docs that are loaded into ElasticSearch. The mapping has a timestamp However one doc does not have a timestamp field { "browser\_type": "Firefox", "ts": … --- ## [POST \_analyze error](https://discuss.elastic.co/t/post-analyze-error/210054)
**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\ **Replies:** 5\ **Last updated:** [December 2, 2019, 5:34am UTC](https://discuss.elastic.co/t/post-analyze-error/210054 "2019-12-02T05:34:58Z")
The analyzer does not work，So who can help me.Thanks!Here is my error and example: (1)error: { "error": { "root\_cause": \[ { "type": "x\_content\_parse\_exception", "reason": "\[3:12\] \[analyze\_request\] failed to parse … --- ## [Logstash does not create fields using grok](https://discuss.elastic.co/t/logstash-does-not-create-fields-using-grok/177615)
**Author:** [@Sam\_Kisada](https://discuss.elastic.co/u/Sam_Kisada)\ **Replies:** 5\ **Last updated:** [April 19, 2019, 1:10pm UTC](https://discuss.elastic.co/t/logstash-does-not-create-fields-using-grok/177615 "2019-04-19T13:10:32Z")
Hi! This is another "help me with grok" topic, so please help... :blush: Source Log (simple f2b): 2019-04-18 16:39:03,454 fail2ban.actions \[25673\]: NOTICE \[postfix-sasl\] Ban 185.234.218.237 2019-04-18 19:19:20… [Previous page](https://discuss.elastic.co/top.md?page=1595&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1597&per_page=50&period=all)