# Top **URL:** https://discuss.elastic.co/top.md?page=1599&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1600 --- ## ['in' condition in elastic search](https://discuss.elastic.co/t/in-condition-in-elastic-search/51184)
**Author:** [@subbu.nv](https://discuss.elastic.co/u/subbu.nv)\ **Replies:** 2\ **Last updated:** [May 31, 2016, 8:57pm UTC](https://discuss.elastic.co/t/in-condition-in-elastic-search/51184 "2016-05-31T20:57:50Z")
When i do a regex search, i am getting back list of files.. say 10. my requirement is to do the next search with in that 10 files only. is there a way we can do this is in elastic search. please suggest. --- ## [Partial fields in elasticsearch2.2.0 is not working?](https://discuss.elastic.co/t/partial-fields-in-elasticsearch2-2-0-is-not-working/47572)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 2\ **Last updated:** [April 17, 2016, 11:11am UTC](https://discuss.elastic.co/t/partial-fields-in-elasticsearch2-2-0-is-not-working/47572 "2016-04-17T11:11:07Z")
May i know the details why the partial fields is not working in elasticsearch 2.2.0.I recently upgraded from elasticsearch 1.7.2 to elasticsearch 2.2.0.In older version it is working but after upgration results are not c… --- ## [Versioning of Content](https://discuss.elastic.co/t/versioning-of-content/45742)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 2\ **Last updated:** [March 30, 2016, 6:37am UTC](https://discuss.elastic.co/t/versioning-of-content/45742 "2016-03-30T06:37:34Z")
All, I'm trying to understand the impact of versioning in elastic when I index a content. What I need is to keep only the latest version of a content and its respective indexed data for term/search filtering. When I i… --- ## [Deleted documents show up in completion suggester](https://discuss.elastic.co/t/deleted-documents-show-up-in-completion-suggester/39735)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 2\ **Last updated:** [January 21, 2016, 7:06am UTC](https://discuss.elastic.co/t/deleted-documents-show-up-in-completion-suggester/39735 "2016-01-21T07:06:44Z")
I have the following steps: create an index index 2 documents get suggestions delete a document get suggestions When I do this with a set of curl commands, the 5th step doesn't return any suggestions as expected since … --- ## [How rest-api-spec is being generated?](https://discuss.elastic.co/t/how-rest-api-spec-is-being-generated/38612)
**Author:** [@eugene\_pirogov](https://discuss.elastic.co/u/eugene_pirogov)\ **Replies:** 2\ **Last updated:** [January 8, 2016, 3:19pm UTC](https://discuss.elastic.co/t/how-rest-api-spec-is-being-generated/38612 "2016-01-08T15:19:30Z")
In this PR – https://github.com/elastic/elasticsearch/pull/14247/files I see the rest-api-spec JSON files being added. Are they written manually or automatically? I am very suspicious they are generated automatically. Co… --- ## [Document score explanation values (maxDocs ?)](https://discuss.elastic.co/t/document-score-explanation-values-maxdocs/24035)
**Author:** [@SpinBoldak](https://discuss.elastic.co/u/SpinBoldak)\ **Replies:** 2\ **Last updated:** [June 22, 2015, 5:19pm UTC](https://discuss.elastic.co/t/document-score-explanation-values-maxdocs/24035 "2015-06-22T17:19:54Z")
Hi, I'm querying some documents with two sort attributes (default score and one of the document attributes). I'm getting different scores for these docs and I cannot figure out why. Using the explain=true attribute, I'm… --- ## [Geo locating shards question](https://discuss.elastic.co/t/geo-locating-shards-question/10518)
**Author:** [@james\_lewis](https://discuss.elastic.co/u/james_lewis)\ **Replies:** 2\ **Last updated:** [January 27, 2013, 1:48pm UTC](https://discuss.elastic.co/t/geo-locating-shards-question/10518 "2013-01-27T13:48:56Z")
Just a quick questions: In the scenario discussed in this RavenDB guide, data from different companies from across the globe is to be stored in differently located shards based on the region of the company. So if… --- ## [IIS logs not making it from NXLog to Logstash](https://discuss.elastic.co/t/iis-logs-not-making-it-from-nxlog-to-logstash/36558)
**Author:** [@malonej7](https://discuss.elastic.co/u/malonej7)\ **Replies:** 0\ **Last updated:** [December 7, 2015, 4:47pm UTC](https://discuss.elastic.co/t/iis-logs-not-making-it-from-nxlog-to-logstash/36558 "2015-12-07T16:47:09Z")
Hi, I have a windows server with NXLog installed and the below config which should be sending IIS logs from this server to our Logstash server (on a linux box). The Logstash config I'm using is also below. For whatever… --- ## [Elastic Agent with Custom Logs capturing mapping errors in event logs](https://discuss.elastic.co/t/elastic-agent-with-custom-logs-capturing-mapping-errors-in-event-logs/366815)
**Author:** [@jeffabar](https://discuss.elastic.co/u/jeffabar)\ **Replies:** 6\ **Last updated:** [September 30, 2024, 5:55pm UTC](https://discuss.elastic.co/t/elastic-agent-with-custom-logs-capturing-mapping-errors-in-event-logs/366815 "2024-09-30T17:55:53Z")
I have an elastic agent running in a docker container with a custom logs integration. The elastic agent generates this warning when ingesting logs: 2024-09-11 11:14:59 {"log.level":"warn","@timestamp":"2024-09-11T15:14:… --- ## [Using Metricbeat AWS Module on Private Subnet EC2](https://discuss.elastic.co/t/using-metricbeat-aws-module-on-private-subnet-ec2/283676)
**Author:** [@roh](https://discuss.elastic.co/u/roh)\ **Replies:** 6\ **Last updated:** [September 23, 2021, 12:36am UTC](https://discuss.elastic.co/t/using-metricbeat-aws-module-on-private-subnet-ec2/283676 "2021-09-23T00:36:06Z")
Hi all! My client wants to collect ec2, ebs, rds metrics using Metricbeat on private subnet ec2 instance with AWS module. So I searched for ways to do it. Judging by document, there are common services to reach like IA… --- ## [Unable to see older logs in kibana after restarting the ELK](https://discuss.elastic.co/t/unable-to-see-older-logs-in-kibana-after-restarting-the-elk/248818)
**Author:** [@neelu\_patel](https://discuss.elastic.co/u/neelu_patel)\ **Replies:** 6\ **Last updated:** [September 17, 2020, 6:22am UTC](https://discuss.elastic.co/t/unable-to-see-older-logs-in-kibana-after-restarting-the-elk/248818 "2020-09-17T06:22:08Z")
Unable to see older logs in kibana after restarting the ELK. please give your best suggestions. --- ## [How to parse this json](https://discuss.elastic.co/t/how-to-parse-this-json/194682)
**Author:** [@Sketchy](https://discuss.elastic.co/u/Sketchy)\ **Replies:** 6\ **Last updated:** [August 11, 2019, 2:50pm UTC](https://discuss.elastic.co/t/how-to-parse-this-json/194682 "2019-08-11T14:50:24Z")
I am new to logstash and have been trying to parse the below json with no luck. { "stat": "user", "Ref": "USER:\[5000,John Smith,3A37332D2659554F9CCE0CD754185269\]", "statistics": \[ "0", "", "", "0", 0… --- ## [Filebeat6.6启动报错](https://discuss.elastic.co/t/filebeat6-6/170108)
**Author:** [@ctinm](https://discuss.elastic.co/u/ctinm)\ **Replies:** 6\ **Last updated:** [March 6, 2019, 9:01am UTC](https://discuss.elastic.co/t/filebeat6-6/170108 "2019-03-06T09:01:12Z")
Exiting: error unpacking config data: can not convert 'string' into 'object' accessing 'output.logstash' (source:'filebeat.yml') accessing 'output' (source:'filebeat.yml') --- ## [Unclear aggregation results - version 5.3](https://discuss.elastic.co/t/unclear-aggregation-results-version-5-3/148346)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 6\ **Last updated:** [September 27, 2018, 8:46am UTC](https://discuss.elastic.co/t/unclear-aggregation-results-version-5-3/148346 "2018-09-27T08:46:51Z")
can anyone please explain why I'm getting these 2 buckets when running the given query? --- ## [Kibana and marvel agent](https://discuss.elastic.co/t/kibana-and-marvel-agent/143423)
**Author:** [@nareshm\_399](https://discuss.elastic.co/u/nareshm_399)\ **Replies:** 6\ **Last updated:** [August 8, 2018, 3:46pm UTC](https://discuss.elastic.co/t/kibana-and-marvel-agent/143423 "2018-08-08T15:46:23Z")
I have 17 node ES cluster, I have marvel-agent installed on all nodes. Should I install kibana on 17 nodes or any one of the node? --- ## [Shards and scalability](https://discuss.elastic.co/t/shards-and-scalability/117566)
**Author:** [@reachnavneeth](https://discuss.elastic.co/u/reachnavneeth)\ **Replies:** 6\ **Last updated:** [January 30, 2018, 7:03am UTC](https://discuss.elastic.co/t/shards-and-scalability/117566 "2018-01-30T07:03:45Z")
We have a requirement for frequent updates but the total data size per index will not be more than 5 GB. How many shards should be allocated for fast updates? The rate at which the update will happen is around 50k update… --- ## [Install Elastic agent with PowerShell script](https://discuss.elastic.co/t/install-elastic-agent-with-powershell-script/357060)
**Author:** [@Killerbe](https://discuss.elastic.co/u/Killerbe)\ **Replies:** 1\ **Last updated:** [June 17, 2025, 2:14pm UTC](https://discuss.elastic.co/t/install-elastic-agent-with-powershell-script/357060 "2025-06-17T14:14:12Z")
We have created a PowerShell script to install the elastic agent. The script is pushed by GPO. When the installation is done by the GPO, then the elastic agent file structure is created under C:\\Program Files, but the di… --- ## [Compare two values in a single field of same index](https://discuss.elastic.co/t/compare-two-values-in-a-single-field-of-same-index/200563)
**Author:** [@sampy12345](https://discuss.elastic.co/u/sampy12345)\ **Replies:** 1\ **Last updated:** [September 24, 2019, 1:36pm UTC](https://discuss.elastic.co/t/compare-two-values-in-a-single-field-of-same-index/200563 "2019-09-24T13:36:25Z")
Hi All, I am new to Kibana and wanted to check last 4 hours difference between two values which are in in a single field of same index. Below is a small example My Index have 5 fields ( datetime, state, errorcode, fil… --- ## [Painless - way to test if division results in a whole number (no remainder)?](https://discuss.elastic.co/t/painless-way-to-test-if-division-results-in-a-whole-number-no-remainder/194306)
**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 7:26pm UTC](https://discuss.elastic.co/t/painless-way-to-test-if-division-results-in-a-whole-number-no-remainder/194306 "2019-08-07T19:26:45Z")
In javascript Number.isInteger() will return a boolean indicating whether or not the given value is an integer. Is there an equivalent function in Painless I can call to test if a division calculation results in a whole … --- ## [How to upgrade Uptime from 6.8 to 7.1 easily](https://discuss.elastic.co/t/how-to-upgrade-uptime-from-6-8-to-7-1-easily/186790)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 1\ **Last updated:** [June 21, 2019, 3:45am UTC](https://discuss.elastic.co/t/how-to-upgrade-uptime-from-6-8-to-7-1-easily/186790 "2019-06-21T03:45:23Z")
Dear all, recently I updated the Kibana from 6.7 to 7.1.1. When I launch the new kibana and found out that the data of uptime is coming in, but the visualization can't be loaded. Thinking to upgrade straightaway, but can… --- ## [Canvas Area Chart: applying a gradient to a series](https://discuss.elastic.co/t/canvas-area-chart-applying-a-gradient-to-a-series/163594)
**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\ **Replies:** 1\ **Last updated:** [January 9, 2019, 7:07pm UTC](https://discuss.elastic.co/t/canvas-area-chart-applying-a-gradient-to-a-series/163594 "2019-01-09T19:07:14Z")
I'm trying to create a Canvas dashboard plotting metricbeat CPU stats, and I'm using an area chart for this: I'd like the colour of the series to change as it goes up the Y axis from green at the bottom to red at the … --- ## [CORS error on elasticsearch 6.0 running in Docker container](https://discuss.elastic.co/t/cors-error-on-elasticsearch-6-0-running-in-docker-container/126079)
**Author:** [@TMR](https://discuss.elastic.co/u/TMR)\ **Replies:** 1\ **Last updated:** [March 29, 2018, 11:44am UTC](https://discuss.elastic.co/t/cors-error-on-elasticsearch-6-0-running-in-docker-container/126079 "2018-03-29T11:44:11Z")
Hi there, please find below my elasticsearch.yml content. \[root@2c93c5458b9b elasticsearch\]# cat config/elasticsearch.yml cluster.name: "docker-cluster" network.host: 0.0.0.0 minimum\_master\_nodes need to be explicit… --- ## [Nodes joining or leaving the cluster](https://discuss.elastic.co/t/nodes-joining-or-leaving-the-cluster/53717)
**Author:** [@michael.mack](https://discuss.elastic.co/u/michael.mack)\ **Replies:** 1\ **Last updated:** [June 23, 2016, 7:42am UTC](https://discuss.elastic.co/t/nodes-joining-or-leaving-the-cluster/53717 "2016-06-23T07:42:12Z")
Starting in Elastic 2, the node event "node\_left" and "node\_joined" have been removed from marvel indexes. Is there any other way to create a watch to alert when a node joins or leaves the cluster? Besides doing a quer… --- ## [Kibana generates wrong slice name in "Pie chart"](https://discuss.elastic.co/t/kibana-generates-wrong-slice-name-in-pie-chart/46622)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 1\ **Last updated:** [April 7, 2016, 8:19pm UTC](https://discuss.elastic.co/t/kibana-generates-wrong-slice-name-in-pie-chart/46622 "2016-04-07T20:19:20Z")
My ELK is logstash 2.1.3, elasticsearch 2.2.1,kibana 4.4.2. I transfer windows Server 2008 R2 IIS log to ELK,and create pie chart in kibana, I select "s-ip" field as "split chart",then select "time-taken" field(type:nu… --- ## [Making Kibana (4) searches faster](https://discuss.elastic.co/t/making-kibana-4-searches-faster/29768)
**Author:** [@sdh](https://discuss.elastic.co/u/sdh)\ **Replies:** 1\ **Last updated:** [September 22, 2015, 10:26pm UTC](https://discuss.elastic.co/t/making-kibana-4-searches-faster/29768 "2015-09-22T22:26:49Z")
Hi, Kindly help me with some tips on tuning elasticseach for faster searching. Sorry for the long post. I have two elasticsearch clusters 1) Two bare metal nodes, each with 24 cores, 64 GiB RAM, rotational 1TB HD… --- ## [Increasing slop causes highlighting to become inconsistent?](https://discuss.elastic.co/t/increasing-slop-causes-highlighting-to-become-inconsistent/25681)
**Author:** [@cam](https://discuss.elastic.co/u/cam)\ **Replies:** 1\ **Last updated:** [July 16, 2015, 5:22pm UTC](https://discuss.elastic.co/t/increasing-slop-causes-highlighting-to-become-inconsistent/25681 "2015-07-16T17:22:31Z")
Hi Seems like I might be running into an issue. If I use the slop parameter on a query with highlighting, it causes about 50% of the hits to not have the highlight field. However, the "blank" hits are correct. If I go … --- ## [Seeking Advice on Handling Non-UTF-8 Characters in Logs from F5 BIG-IP ASM to Logstash](https://discuss.elastic.co/t/seeking-advice-on-handling-non-utf-8-characters-in-logs-from-f5-big-ip-asm-to-logstash/353827)
**Author:** [@nw-engineer](https://discuss.elastic.co/u/nw-engineer)\ **Replies:** 0\ **Last updated:** [February 22, 2024, 12:55am UTC](https://discuss.elastic.co/t/seeking-advice-on-handling-non-utf-8-characters-in-logs-from-f5-big-ip-asm-to-logstash/353827 "2024-02-22T00:55:01Z")
Hello everyone, I hope this message finds you well. I am currently using Logstash to process logs from F5 BIG-IP ASM. Initially, I had the input codec set to the default (UTF-8). However, I've encountered an issue wher… --- ## [Kibana 8.19.8, 9.1.8, and 9.2.2 Security Update (ESA-2025-28)](https://discuss.elastic.co/t/kibana-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-28/384064)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 15, 2025, 10:15am UTC](https://discuss.elastic.co/t/kibana-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-28/384064 "2025-12-15T10:15:09Z")
Kibana Cross-site Scripting via the Integration Package Upload Functionality (ESA-2025-28) Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to re… --- ## [When I try to import a model using eland, I get an error!](https://discuss.elastic.co/t/when-i-try-to-import-a-model-using-eland-i-get-an-error/334531)
**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\ **Replies:** 3\ **Last updated:** [May 30, 2023, 4:44pm UTC](https://discuss.elastic.co/t/when-i-try-to-import-a-model-using-eland-i-get-an-error/334531 "2023-05-30T16:44:18Z")
\[root@-centos www\]# eland\_import\_hub\_model Traceback (most recent call last): File "/usr/local/bin/eland\_import\_hub\_model", line 34, in \ from elastic\_transport.client\_utils import DEFAULT File "/usr/loca… --- ## [Kibana visualize metric I'm not able to subtract with \_value](https://discuss.elastic.co/t/kibana-visualize-metric-im-not-able-to-subtract-with-value/269259)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 4:10am UTC](https://discuss.elastic.co/t/kibana-visualize-metric-im-not-able-to-subtract-with-value/269259 "2021-04-06T04:10:48Z")
I'm trying to do a simple calculation but the value is different: { "script": "\_value" } { "script": "\_value - 10" } Let me explain what the purpose is: this metrics returns me the time that some asset was … --- ## [Encrypt filebeat to logstash](https://discuss.elastic.co/t/encrypt-filebeat-to-logstash/242944)
**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 5:04pm UTC](https://discuss.elastic.co/t/encrypt-filebeat-to-logstash/242944 "2020-07-29T17:04:37Z")
I have a small setup. Filebeat was able to successfully send logs to logstash. I was then asked to encrypt communication between filebeat to logstash. On logstash I've added to the following to the input{ } block: ssl\_… --- ## [Logstash - Trying to assign an existing key to a new key's value](https://discuss.elastic.co/t/logstash-trying-to-assign-an-existing-key-to-a-new-keys-value/241017)
**Author:** [@Acomra](https://discuss.elastic.co/u/Acomra)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 6:05pm UTC](https://discuss.elastic.co/t/logstash-trying-to-assign-an-existing-key-to-a-new-keys-value/241017 "2020-07-13T18:05:58Z")
Hello, I’m pulling aggregated events from Opentsdb and I have a key/value where the key is the epoch event time and value is the agg count. Example: "dps" =\> { "1594657920" =\> 12.0 }, I’m trying to find a way to … --- ## [Kibana: Visualization issue on Controls](https://discuss.elastic.co/t/kibana-visualization-issue-on-controls/190214)
**Author:** [@igour](https://discuss.elastic.co/u/igour)\ **Replies:** 3\ **Last updated:** [July 18, 2019, 2:15pm UTC](https://discuss.elastic.co/t/kibana-visualization-issue-on-controls/190214 "2019-07-18T14:15:29Z")
Hi Team, When is created the "options list" from controls, I selected the Multiselect and Dynamic option for the perticular field. Everything is working fine from the outside, but when I use this control on the dashboa… --- ## [Run Kibana in docker](https://discuss.elastic.co/t/run-kibana-in-docker/140899)
**Author:** [@Kornelia\_Watson](https://discuss.elastic.co/u/Kornelia_Watson)\ **Replies:** 3\ **Last updated:** [July 25, 2018, 3:43am UTC](https://discuss.elastic.co/t/run-kibana-in-docker/140899 "2018-07-25T03:43:33Z")
Hi all, I'm trying to run Kibana via docker but after loading Kibana page I get Status: Red due to: plugin:xpack\_main@5.1.1 X-Pack plugin is not installed on Elasticsearch cluster plugin:profiler@5.1.1 X-Pac… --- ## [Kibana 6.2.4 on Windows hangs & fails during plugin installation: "Optimizing and caching browser bundles"](https://discuss.elastic.co/t/kibana-6-2-4-on-windows-hangs-fails-during-plugin-installation-optimizing-and-caching-browser-bundles/132678)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 3\ **Last updated:** [May 23, 2018, 8:58pm UTC](https://discuss.elastic.co/t/kibana-6-2-4-on-windows-hangs-fails-during-plugin-installation-optimizing-and-caching-browser-bundles/132678 "2018-05-23T20:58:11Z")
On Windows, I execute this: J:\\elastic\\kibana\>bin\\kibana-plugin.bat install x-pack After about 15 minutes, I get this error Transferring 4942599 bytes.................... Transfer complete Retrieving metadata from p… --- ## [Elastic Stack on Raspberry Pi 3](https://discuss.elastic.co/t/elastic-stack-on-raspberry-pi-3/116200)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 0\ **Last updated:** [January 19, 2018, 9:34am UTC](https://discuss.elastic.co/t/elastic-stack-on-raspberry-pi-3/116200 "2018-01-19T09:34:32Z")
I am thinking about installing the Elastic Stack on a Raspberry Pi 3 for a quite little private project. In fact this Installation would not store more than ~1.500 Documents a day for not longer than 6 months. So i ask … --- ## [How does the X-Pack Selling?](https://discuss.elastic.co/t/how-does-the-x-pack-selling/65292)
**Author:** [@lester015](https://discuss.elastic.co/u/lester015)\ **Replies:** 3\ **Last updated:** [November 8, 2016, 9:20am UTC](https://discuss.elastic.co/t/how-does-the-x-pack-selling/65292 "2016-11-08T09:20:56Z")
Dear team, how much does the X-Pack product? thanks! Levi --- ## [Kibana is not discovering my new data](https://discuss.elastic.co/t/kibana-is-not-discovering-my-new-data/61153)
**Author:** [@vk126y](https://discuss.elastic.co/u/vk126y)\ **Replies:** 3\ **Last updated:** [September 22, 2016, 6:30pm UTC](https://discuss.elastic.co/t/kibana-is-not-discovering-my-new-data/61153 "2016-09-22T18:30:26Z")
Hi Team, I was having an ELK up and running and all was going well. Today I updated the conf file of my logstash to read from a SAMBA network drive and thereafter Kibana stops discovering the values. I verified that … --- ## [Elasticsearch for production using AWS EC2](https://discuss.elastic.co/t/elasticsearch-for-production-using-aws-ec2/58993)
**Author:** [@anoopmk007](https://discuss.elastic.co/u/anoopmk007)\ **Replies:** 3\ **Last updated:** [August 27, 2016, 8:35pm UTC](https://discuss.elastic.co/t/elasticsearch-for-production-using-aws-ec2/58993 "2016-08-27T20:35:52Z")
Hello, Can you please help me for understanding elastcisearch deployment for production. any quick help appreciated. Currently i have configured one aws ec2 server with eleastciserch for my production. There will… --- ## [Exact matching](https://discuss.elastic.co/t/exact-matching/5077)
**Author:** [@BeckerIV](https://discuss.elastic.co/u/BeckerIV)\ **Replies:** 8\ **Last updated:** [August 9, 2011, 9:33pm UTC](https://discuss.elastic.co/t/exact-matching/5077 "2011-08-09T21:33:36Z")
I am trying to build a query to match a string (username) exactly. https://gist.github.com/1131225 I thought term would work for me. Any help would be well..helpful Thanks! Becker --- ## [Can the Logstash csv plug-in write to a remote server via sFTP?](https://discuss.elastic.co/t/can-the-logstash-csv-plug-in-write-to-a-remote-server-via-sftp/260815)
**Author:** [@Manuel\_Wong](https://discuss.elastic.co/u/Manuel_Wong)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 11:48pm UTC](https://discuss.elastic.co/t/can-the-logstash-csv-plug-in-write-to-a-remote-server-via-sftp/260815 "2021-01-12T23:48:17Z")
Hello, wish you all an excellent new year! I'd like to ask if the Logstash csv plug-in can write to a remove server via sFTP. I plan to setup the logstash in a container within a K8s cluster but the location where the c… --- ## [Documents including large arrays](https://discuss.elastic.co/t/documents-including-large-arrays/363125)
**Author:** [@ismaelalt](https://discuss.elastic.co/u/ismaelalt)\ **Replies:** 5\ **Last updated:** [July 16, 2024, 12:15pm UTC](https://discuss.elastic.co/t/documents-including-large-arrays/363125 "2024-07-16T12:15:23Z")
Hi, I am using Elastic App Search, and I have a document that contains an array field that I am using to filter search requests. e.g. { name: "nameOfTheDoc" users: \["userA", "userB", "userC"\] } In some rare docum… --- ## [How to archive snapshots](https://discuss.elastic.co/t/how-to-archive-snapshots/337959)
**Author:** [@jaykb77](https://discuss.elastic.co/u/jaykb77)\ **Replies:** 5\ **Last updated:** [July 11, 2023, 12:27pm UTC](https://discuss.elastic.co/t/how-to-archive-snapshots/337959 "2023-07-11T12:27:59Z")
Hi all, We have a requirement to archive snapshots for long term retention. However since the snapshot directories are incremental, we do not want to simply zip it and send to archive storage. Is there a recommended alt… --- ## [Sending payload to APM server failed](https://discuss.elastic.co/t/sending-payload-to-apm-server-failed/311562)
**Author:** [@tarund](https://discuss.elastic.co/u/tarund)\ **Replies:** 5\ **Last updated:** [August 9, 2022, 8:40am UTC](https://discuss.elastic.co/t/sending-payload-to-apm-server-failed/311562 "2022-08-09T08:40:38Z")
Elasticsearch version: 7.15.2 APM Server version: 7.15.0 APM Agent language and version: Java Elastic APM Agent 1.10 Original install method (e.g. download page, yum, deb, from source, etc.) and version:rpm Fresh in… --- ## [Indices gone after upgrade (7.8.0 to 7.9.1)](https://discuss.elastic.co/t/indices-gone-after-upgrade-7-8-0-to-7-9-1/254149)
**Author:** [@rcz](https://discuss.elastic.co/u/rcz)\ **Replies:** 5\ **Last updated:** [November 9, 2020, 3:05pm UTC](https://discuss.elastic.co/t/indices-gone-after-upgrade-7-8-0-to-7-9-1/254149 "2020-11-09T15:05:55Z")
Hello, I'm in a bit of a pickle. A lot of my indices are gone after an upgrade. I have a Logstash pumping in data into an alias. The alias still pointed to the same index name after upgrading, but the old data was gon… --- ## [SIEM Alert Actions not updating](https://discuss.elastic.co/t/siem-alert-actions-not-updating/234968)
**Author:** [@Mercwri](https://discuss.elastic.co/u/Mercwri)\ **Replies:** 5\ **Last updated:** [June 2, 2020, 7:40pm UTC](https://discuss.elastic.co/t/siem-alert-actions-not-updating/234968 "2020-06-02T19:40:06Z")
I've gone through a few iterations of alert actions, checking both the API and the UI the SIEM app shows my current version of the actions, but when an alert is sent it uses a previous version of the actions. I've restar… --- ## [Warning Could not find logstash.yml](https://discuss.elastic.co/t/warning-could-not-find-logstash-yml/189952)
**Author:** [@Andreasky](https://discuss.elastic.co/u/Andreasky)\ **Replies:** 5\ **Last updated:** [July 15, 2019, 6:35am UTC](https://discuss.elastic.co/t/warning-could-not-find-logstash-yml/189952 "2019-07-15T06:35:54Z")
WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults I see that there are others that have th… --- ## [Javascrip api request don't work when I change the cluster name](https://discuss.elastic.co/t/javascrip-api-request-dont-work-when-i-change-the-cluster-name/40460)
**Author:** [@Gjanger](https://discuss.elastic.co/u/Gjanger)\ **Replies:** 5\ **Last updated:** [January 29, 2016, 2:35pm UTC](https://discuss.elastic.co/t/javascrip-api-request-dont-work-when-i-change-the-cluster-name/40460 "2016-01-29T14:35:00Z")
hi, If I change the cluster name of elasticseach from "elasticsearch" to something else then the javascript API cannotspeak to ES anymore. Kibana can't too by the way. I'm not dinfing anything related to the cluster … --- ## [Es multi\_match problem](https://discuss.elastic.co/t/es-multi-match-problem/10445)
**Author:** [@sulemanmubarik](https://discuss.elastic.co/u/sulemanmubarik)\ **Replies:** 5\ **Last updated:** [January 23, 2013, 9:06pm UTC](https://discuss.elastic.co/t/es-multi-match-problem/10445 "2013-01-23T21:06:11Z")
Hi I have this search query (Ford in Detroit) It is evaluating as (Ford AND in AND Detroit) When I apply the stop word filter (analyzer) it become (Ford AND AND Detroit) When I run this Here is … --- ## [X-Forwarded-For in Elasticsearch/Kibana Logs](https://discuss.elastic.co/t/x-forwarded-for-in-elasticsearch-kibana-logs/325779)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 2\ **Last updated:** [February 16, 2023, 11:31pm UTC](https://discuss.elastic.co/t/x-forwarded-for-in-elasticsearch-kibana-logs/325779 "2023-02-16T23:31:11Z")
We have Kibana and Elasticsearch behind AVI (Nginx) load-balancers, and that is unfortunately masking the true client IP addresses that are accessing Kibana/Elasticsearch. We are logging XFF headers on all the LB configs… [Previous page](https://discuss.elastic.co/top.md?page=1598&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1600&per_page=50&period=all)