# Top

**URL:** https://discuss.elastic.co/top.md?page=1600&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1601

---

## [How to add another condition to SearchRequest.Builder in Java API](https://discuss.elastic.co/t/how-to-add-another-condition-to-searchrequest-builder-in-java-api/321812)

<div class="topic-metadata">

**Author:** [@cchuang4](https://discuss.elastic.co/u/cchuang4)\
**Replies:** 2\
**Last updated:** [December 23, 2022, 2:36am UTC](https://discuss.elastic.co/t/how-to-add-another-condition-to-searchrequest-builder-in-java-api/321812 "2022-12-23T02:36:54Z")

</div>

For new Java API, If I want to make a search like below: my code below, but I will set range and terms in different place, how should I combination the second setting to exist condition. In my code, the second .quer…

---

## [Как удалить fields которые экспортирует Filebeat (7.8) в logstash?](https://discuss.elastic.co/t/fields-filebeat-7-8-logstash/244401)

<div class="topic-metadata">

**Author:** [@xXxTRexXx](https://discuss.elastic.co/u/xXxTRexXx)\
**Replies:** 2\
**Last updated:** [August 18, 2020, 6:40am UTC](https://discuss.elastic.co/t/fields-filebeat-7-8-logstash/244401 "2020-08-18T06:40:39Z")

</div>

нужно отсюда удалить поле fields со всем его содержимым. вот как я пытался это сделать. У меня не получилось как видно, никто не может подсказать где я ошибся?

---

## [Filebeat getting stop without giving any error](https://discuss.elastic.co/t/filebeat-getting-stop-without-giving-any-error/241094)

<div class="topic-metadata">

**Author:** [@Rashid\_Ali](https://discuss.elastic.co/u/Rashid_Ali)\
**Replies:** 2\
**Last updated:** [July 14, 2020, 11:26am UTC](https://discuss.elastic.co/t/filebeat-getting-stop-without-giving-any-error/241094 "2020-07-14T11:26:23Z")

</div>

Hi everybody, I have a situation where filebeat automatically gets toped without giving any error in the log file. I am attaching all the logs of the filebeat. I am reading multiple files from the same path. Data in fil…

---

## [How to change .security-6 index to read-write](https://discuss.elastic.co/t/how-to-change-security-6-index-to-read-write/237141)

<div class="topic-metadata">

**Author:** [@cgricb](https://discuss.elastic.co/u/cgricb)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 8:29am UTC](https://discuss.elastic.co/t/how-to-change-security-6-index-to-read-write/237141 "2020-06-23T08:29:12Z")

</div>

My ES nodes were out of space and ES decided to take all indices read-only. After i ve added space and altered all indices to read-write i was successfull. But i could not alter the .security-6 index to read-write. Can y…

---

## [Limit of total fields ... has been exceeded](https://discuss.elastic.co/t/limit-of-total-fields-has-been-exceeded/216812)

<div class="topic-metadata">

**Author:** [@upietz](https://discuss.elastic.co/u/upietz)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 7:49am UTC](https://discuss.elastic.co/t/limit-of-total-fields-has-been-exceeded/216812 "2020-02-17T07:49:46Z")

</div>

Hi there, using winlogbeat-7.5.0-windows-x86\_64 on different Windows OS (2012R2,2016,10,...) we're regularly hitting the es (7.4.1) field limitation for our daily indices ("logstash-winlogbeat-%{+YYYY.MM}"). Logstash do…

---

## [Canvas - How to do a nested Query?](https://discuss.elastic.co/t/canvas-how-to-do-a-nested-query/175430)

<div class="topic-metadata">

**Author:** [@MarkusP](https://discuss.elastic.co/u/MarkusP)\
**Replies:** 2\
**Last updated:** [April 5, 2019, 7:20am UTC](https://discuss.elastic.co/t/canvas-how-to-do-a-nested-query/175430 "2019-04-05T07:20:30Z")

</div>

Hi there, I have in the ES 6.7 stack an index with a nested mapping an use a nested query in dashboards and queries GET /client/\_search { "query": { "nested": { "path": "params", "query": { "b…

---

## [Calculate global average over Date Histogram buckets](https://discuss.elastic.co/t/calculate-global-average-over-date-histogram-buckets/122107)

<div class="topic-metadata">

**Author:** [@ylipentt](https://discuss.elastic.co/u/ylipentt)\
**Replies:** 2\
**Last updated:** [March 5, 2018, 10:03am UTC](https://discuss.elastic.co/t/calculate-global-average-over-date-histogram-buckets/122107 "2018-03-05T10:03:05Z")

</div>

Hi, not sure if this is clarified already somewhere, but at least I couldn't find it. So, I have a vertical bar visualization in Kibana that shows sales figures for each week. On the Y-axis I have just a sum aggregatio…

---

## [Combining Netscaler Appflow request and response within Logstash](https://discuss.elastic.co/t/combining-netscaler-appflow-request-and-response-within-logstash/110043)

<div class="topic-metadata">

**Author:** [@scherma](https://discuss.elastic.co/u/scherma)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 8:40am UTC](https://discuss.elastic.co/t/combining-netscaler-appflow-request-and-response-within-logstash/110043 "2017-12-05T08:40:54Z")

</div>

Hi all, when using Logstash to parse Netscaler Appflow, I have noted that the Appflow output places request and response information different records. I would like to be able to combine the request and response (they ar…

---

## [Cluster Checkup errors](https://discuss.elastic.co/t/cluster-checkup-errors/101159)

<div class="topic-metadata">

**Author:** [@cutch69](https://discuss.elastic.co/u/cutch69)\
**Replies:** 2\
**Last updated:** [October 4, 2017, 1:22pm UTC](https://discuss.elastic.co/t/cluster-checkup-errors/101159 "2017-10-04T13:22:04Z")

</div>

I just upgraded to 5.6.1 and ran the cluster update. i ran into this error but when checking my nodes they are using the the new path method as described. Another thing i notice when my master node changes to a new nod…

---

## [Getting java.net.NetPermission with xpack.monitoring.exporters (elasticsearch-6.0.0-beta2)](https://discuss.elastic.co/t/getting-java-net-netpermission-with-xpack-monitoring-exporters-elasticsearch-6-0-0-beta2/100607)

<div class="topic-metadata">

**Author:** [@Jayme](https://discuss.elastic.co/u/Jayme)\
**Replies:** 2\
**Last updated:** [September 14, 2017, 8:55pm UTC](https://discuss.elastic.co/t/getting-java-net-netpermission-with-xpack-monitoring-exporters-elasticsearch-6-0-0-beta2/100607 "2017-09-14T20:55:57Z")

</div>

When I add xpack.monitoring.exporters: id1: type: http host: \["http://192.168.14.53:9200", "http://192.168.14.54:9200"\] to my elastic config, I get a java.net.NetPermission error.. xpack.security.enabled: fa…

---

## [Logstash 6.0 beta-1 can't work with IBM JRE 8 due to old JRuby OpenSSL](https://discuss.elastic.co/t/logstash-6-0-beta-1-cant-work-with-ibm-jre-8-due-to-old-jruby-openssl/98547)

<div class="topic-metadata">

**Author:** [@AllenShi](https://discuss.elastic.co/u/AllenShi)\
**Replies:** 2\
**Last updated:** [September 7, 2017, 2:20am UTC](https://discuss.elastic.co/t/logstash-6-0-beta-1-cant-work-with-ibm-jre-8-due-to-old-jruby-openssl/98547 "2017-09-07T02:20:43Z")

</div>

I installed Logstash 5.5.1, 5.5.2 and even 6.0-beta1 bundled with another third party plugin to work with IBM JRE 8. The error “no cipher match” is thrown into logstash-plain.log. Per some deep investigation, this issue…

---

## [Powershell and param3 keywords missing](https://discuss.elastic.co/t/powershell-and-param3-keywords-missing/84988)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 2\
**Last updated:** [May 11, 2017, 8:46pm UTC](https://discuss.elastic.co/t/powershell-and-param3-keywords-missing/84988 "2017-05-11T20:46:07Z")

</div>

Elastic Stack 5.4, running a lab, forwarding 400, 500, and 501 events -- but I can't see event\_data.param3.keyword as a dashboard option -- On Discovery I can see event\_data.param3 but not event\_data.param3 keyword..…

---

## [Timelion: divide by number of days in the selected range?](https://discuss.elastic.co/t/timelion-divide-by-number-of-days-in-the-selected-range/80865)

<div class="topic-metadata">

**Author:** [@olexij](https://discuss.elastic.co/u/olexij)\
**Replies:** 2\
**Last updated:** [April 7, 2017, 8:25am UTC](https://discuss.elastic.co/t/timelion-divide-by-number-of-days-in-the-selected-range/80865 "2017-04-07T08:25:33Z")

</div>

I would like to have an average value in the selected time range. For that purpose I would take the value I have (say number of documents), divide it by the number of days and display it as single value. Is it possible w…

---

## [XPACK(Reporting tool) bar charts Y-axis string not visible and some issue](https://discuss.elastic.co/t/xpack-reporting-tool-bar-charts-y-axis-string-not-visible-and-some-issue/78101)

<div class="topic-metadata">

**Author:** [@iyyappan13391](https://discuss.elastic.co/u/iyyappan13391)\
**Replies:** 2\
**Last updated:** [March 20, 2017, 11:48am UTC](https://discuss.elastic.co/t/xpack-reporting-tool-bar-charts-y-axis-string-not-visible-and-some-issue/78101 "2017-03-20T11:48:08Z")

</div>

Xpack reporting not giving correct output,please help me to out this.Please refer the attachment. And also not showing legend string is visible.

---

## [Logstash filter large message](https://discuss.elastic.co/t/logstash-filter-large-message/69878)

<div class="topic-metadata">

**Author:** [@n3uz](https://discuss.elastic.co/u/n3uz)\
**Replies:** 2\
**Last updated:** [December 28, 2016, 3:24am UTC](https://discuss.elastic.co/t/logstash-filter-large-message/69878 "2016-12-28T03:24:31Z")

</div>

I am a newbie Chinese ELK user,When message value is too large ,It costs too much CPU time to handle,I dont know how to fix it,but like below. ELK5.1.1 CentOS7 JDK8 log output INFO 16-12-22 13:34:40.998 - The user\[12…

---

## [Date between two indexed fields](https://discuss.elastic.co/t/date-between-two-indexed-fields/62995)

<div class="topic-metadata">

**Author:** [@marembo\_ochieng](https://discuss.elastic.co/u/marembo_ochieng)\
**Replies:** 2\
**Last updated:** [October 14, 2016, 8:42am UTC](https://discuss.elastic.co/t/date-between-two-indexed-fields/62995 "2016-10-14T08:42:58Z")

</div>

I would like to retrieve a document, that has two fields for date "startDate" and "endDate", such that a given date "date" is between the document's "startDate" and "endDate". I can't seem to formulate the range query …

---

## [How to parsing multiline messages with conditionals issues in Logstash?](https://discuss.elastic.co/t/how-to-parsing-multiline-messages-with-conditionals-issues-in-logstash/55257)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 2\
**Last updated:** [July 12, 2016, 6:21am UTC](https://discuss.elastic.co/t/how-to-parsing-multiline-messages-with-conditionals-issues-in-logstash/55257 "2016-07-12T06:21:03Z")

</div>

I have a log file reading through the ftp process and I am using logstash to ingest the data. A sample record is like that Enter an FTP subcommand. \> PUT REPE533 AMTD\_Statusfile.txt 227 Entering Passive Mode (10,133,…

---

## [Kibana: is it possible to change the label of my axes?](https://discuss.elastic.co/t/kibana-is-it-possible-to-change-the-label-of-my-axes/53866)

<div class="topic-metadata">

**Author:** [@sen](https://discuss.elastic.co/u/sen)\
**Replies:** 2\
**Last updated:** [June 24, 2016, 7:48pm UTC](https://discuss.elastic.co/t/kibana-is-it-possible-to-change-the-label-of-my-axes/53866 "2016-06-24T19:48:21Z")

</div>

Hello everyone, I am currently using Kibana 4.4.2 and I can't change the label of my axes. I know that the question was already asked last year (https://discuss.elastic.co/t/how-to-label-visualization-axes/980) but I d…

---

## [Can't figure out must\_not in filtered DELETE query](https://discuss.elastic.co/t/cant-figure-out-must-not-in-filtered-delete-query/2069)

<div class="topic-metadata">

**Author:** [@Marcel\_emblazoned](https://discuss.elastic.co/u/Marcel_emblazoned)\
**Replies:** 2\
**Last updated:** [June 8, 2015, 7:42am UTC](https://discuss.elastic.co/t/cant-figure-out-must-not-in-filtered-delete-query/2069 "2015-06-08T07:42:34Z")

</div>

I am trying to delete a set of documents that do not match a field with a certain value by sending the following data through a DELETE request to "localhost:9200/products/phone": { "query": { "filtered": { …

---

## [Use of "Terms" as "Buckets" with "Parent Pipeline Aggregations" e.g. "Derivative"](https://discuss.elastic.co/t/use-of-terms-as-buckets-with-parent-pipeline-aggregations-e-g-derivative/250966)

<div class="topic-metadata">

**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\
**Replies:** 4\
**Last updated:** [October 11, 2020, 9:03pm UTC](https://discuss.elastic.co/t/use-of-terms-as-buckets-with-parent-pipeline-aggregations-e-g-derivative/250966 "2020-10-11T21:03:05Z")

</div>

Hi, I am working on some visualization to track number of issues (let's say bugs) over different versions of a system, and I am aiming to build a visualization with Kibana that uses the release name as X-axis and the di…

---

## [Issue while parsing date](https://discuss.elastic.co/t/issue-while-parsing-date/135179)

<div class="topic-metadata">

**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\
**Replies:** 4\
**Last updated:** [June 9, 2018, 3:47am UTC](https://discuss.elastic.co/t/issue-while-parsing-date/135179 "2018-06-09T03:47:46Z")

</div>

Created following logstash pipeline file. but I am not able to make the date filter working hence commented out in the following output. input { file { path =\> "/Users/viaggarw/Documents/ELK/logstash-6.2.4/bplogs…

---

## [Cluster can't recovery indicates from disc](https://discuss.elastic.co/t/cluster-cant-recovery-indicates-from-disc/73002)

<div class="topic-metadata">

**Author:** [@awro](https://discuss.elastic.co/u/awro)\
**Replies:** 4\
**Last updated:** [January 27, 2017, 9:10pm UTC](https://discuss.elastic.co/t/cluster-cant-recovery-indicates-from-disc/73002 "2017-01-27T21:10:38Z")

</div>

Hi, I'm running cluster with 3 master nodes (master:true, data:false), 3 query(master/data:false) and 6 data nodes(master:false, data:true). Today I got "Unexpected exception in the selector loop. java.lang.OutOfMemoryE…

---

## [Logstash service started but not working, command line is working](https://discuss.elastic.co/t/logstash-service-started-but-not-working-command-line-is-working/47764)

<div class="topic-metadata">

**Author:** [@Erik\_Parienty](https://discuss.elastic.co/u/Erik_Parienty)\
**Replies:** 4\
**Last updated:** [April 19, 2016, 9:18am UTC](https://discuss.elastic.co/t/logstash-service-started-but-not-working-command-line-is-working/47764 "2016-04-19T09:18:01Z")

</div>

when i run logstash in command line all is working but not as a service i get no data no logs conf is ok ps shows: logstash 10120 1 1 08:44 pts/0 00:00:00 /usr/bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -…

---

## [Benefits of using bulk with node client?](https://discuss.elastic.co/t/benefits-of-using-bulk-with-node-client/20657)

<div class="topic-metadata">

**Author:** [@rore](https://discuss.elastic.co/u/rore)\
**Replies:** 4\
**Last updated:** [November 10, 2014, 8:31am UTC](https://discuss.elastic.co/t/benefits-of-using-bulk-with-node-client/20657 "2014-11-10T08:31:20Z")

</div>

I can definitely see the point of using the bulk API when indexing via HTTP. But is there an advantage of using bulk instead of individual index request when using the client node? Since the node parses the bulk …

---

## [Error defining Analysis in Template](https://discuss.elastic.co/t/error-defining-analysis-in-template/7791)

<div class="topic-metadata">

**Author:** [@Michael\_Sick](https://discuss.elastic.co/u/Michael_Sick)\
**Replies:** 4\
**Last updated:** [July 2, 2013, 10:12pm UTC](https://discuss.elastic.co/t/error-defining-analysis-in-template/7791 "2013-07-02T22:12:33Z")

</div>

I define a custom analyzer in my template: https://gist.github.com/2764547 but when I make a call to create an index based on the template: https://gist.github.com/2764559 I get the following: $ ./create\_busin…

---

## [Disk space not reducing after snapshot deletion](https://discuss.elastic.co/t/disk-space-not-reducing-after-snapshot-deletion/283301)

<div class="topic-metadata">

**Author:** [@arun\_sharma2](https://discuss.elastic.co/u/arun_sharma2)\
**Replies:** 7\
**Last updated:** [September 8, 2021, 6:59am UTC](https://discuss.elastic.co/t/disk-space-not-reducing-after-snapshot-deletion/283301 "2021-09-08T06:59:01Z")

</div>

Deleted snapshot of the indices but still the disk space is not reducing .

---

## [Rook ceph for Elastic Search](https://discuss.elastic.co/t/rook-ceph-for-elastic-search/275647)

<div class="topic-metadata">

**Author:** [@Sangamesh\_Patil](https://discuss.elastic.co/u/Sangamesh_Patil)\
**Replies:** 1\
**Last updated:** [June 11, 2021, 9:50am UTC](https://discuss.elastic.co/t/rook-ceph-for-elastic-search/275647 "2021-06-11T09:50:19Z")

</div>

Hello, We are deploying elastic search on kubernetes farm and we have rook ceph as our distributed storage. I was going through earlier topic and there was enough reason than with ES being heavy used for File system. Bu…

---

## [Global ordinals on high cardinality fields with large indices](https://discuss.elastic.co/t/global-ordinals-on-high-cardinality-fields-with-large-indices/229948)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 7\
**Last updated:** [April 27, 2020, 12:14pm UTC](https://discuss.elastic.co/t/global-ordinals-on-high-cardinality-fields-with-large-indices/229948 "2020-04-27T12:14:33Z")

</div>

Hi, I've got a daily index with a couple of high cardinality fields. Even after reading some threads and the documentation available, I'm not sure how should I proceed. The index has ~600M docs in it every day and the m…

---

## [Disabling fielddata on the cluster/index level](https://discuss.elastic.co/t/disabling-fielddata-on-the-cluster-index-level/205411)

<div class="topic-metadata">

**Author:** [@doron](https://discuss.elastic.co/u/doron)\
**Replies:** 1\
**Last updated:** [October 28, 2019, 7:38am UTC](https://discuss.elastic.co/t/disabling-fielddata-on-the-cluster-index-level/205411 "2019-10-28T07:38:53Z")

</div>

I've suddenly noticed that fielddata cache for the \_id field is taking 14GB of RAM on my cluster, and I'm not sure where that came from (probably some query I'm not aware of). I've cleared it manually, but I'm worried it…

---

## [Adding customised kibana filtering tag ( such as Kubernetes.cluster.name)](https://discuss.elastic.co/t/adding-customised-kibana-filtering-tag-such-as-kubernetes-cluster-name/192387)

<div class="topic-metadata">

**Author:** [@Joshua\_Ocansey](https://discuss.elastic.co/u/Joshua_Ocansey)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 10:24pm UTC](https://discuss.elastic.co/t/adding-customised-kibana-filtering-tag-such-as-kubernetes-cluster-name/192387 "2019-07-29T22:24:31Z")

</div>

I have deployed ELK system to monitor kubernetes clusters logs from different data-centers and environments. I would like to be able to filter logs based on cluster's name. Is it possible to add my own customize tag …

---

## [Kibana/Netflow bandwidth percentile calculation](https://discuss.elastic.co/t/kibana-netflow-bandwidth-percentile-calculation/172006)

<div class="topic-metadata">

**Author:** [@OlSpurty](https://discuss.elastic.co/u/OlSpurty)\
**Replies:** 1\
**Last updated:** [March 12, 2019, 4:38pm UTC](https://discuss.elastic.co/t/kibana-netflow-bandwidth-percentile-calculation/172006 "2019-03-12T16:38:48Z")

</div>

Hello, and thanks in advance for any help. I'm working on a bandwidth usage charting tool where I need to get a monthly percentile calculation, and am most of the way there - Here's what I have so far: An Elastic Stack…

---

## [Master not discovered exception is an error while doing Elasticsearch cluster setup](https://discuss.elastic.co/t/master-not-discovered-exception-is-an-error-while-doing-elasticsearch-cluster-setup/147897)

<div class="topic-metadata">

**Author:** [@nageswar](https://discuss.elastic.co/u/nageswar)\
**Replies:** 1\
**Last updated:** [September 10, 2018, 7:14am UTC](https://discuss.elastic.co/t/master-not-discovered-exception-is-an-error-while-doing-elasticsearch-cluster-setup/147897 "2018-09-10T07:14:16Z")

</div>

Hi All, while doing Elasticsearch 3 node cluster setup, we are getting below error. Please some help me to resolve this issue. For cluster status, it is giving below error. { "error" : { "root\_cause" : \[ { "type"…

---

## [Mixed document types: json and plain text](https://discuss.elastic.co/t/mixed-document-types-json-and-plain-text/143536)

<div class="topic-metadata">

**Author:** [@mimmus](https://discuss.elastic.co/u/mimmus)\
**Replies:** 1\
**Last updated:** [August 8, 2018, 2:36pm UTC](https://discuss.elastic.co/t/mixed-document-types-json-and-plain-text/143536 "2018-08-08T14:36:05Z")

</div>

We are migrating all of our applications to use the JSON encoded format, but until then we have some log files in json and some with normal logs. We cannot differentiate them using different paths because all of them ar…

---

## [No matching indices found: No indices match pattern "filebeat-\*"](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-filebeat/136556)

<div class="topic-metadata">

**Author:** [@nairihar](https://discuss.elastic.co/u/nairihar)\
**Replies:** 1\
**Last updated:** [June 20, 2018, 6:13am UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-filebeat/136556 "2018-06-20T06:13:02Z")

</div>

Hi, I have installed ELK stack in my laptop, but can't access to nginx statistics in kibana, here is the error No matching indices found: No indices match pattern "filebeat-\*" curl http://localhost:9200/\_cat/indices?…

---

## [For Apache Tomcat Performance Monitoring](https://discuss.elastic.co/t/for-apache-tomcat-performance-monitoring/130473)

<div class="topic-metadata">

**Author:** [@S\_Patel](https://discuss.elastic.co/u/S_Patel)\
**Replies:** 1\
**Last updated:** [May 11, 2018, 1:28pm UTC](https://discuss.elastic.co/t/for-apache-tomcat-performance-monitoring/130473 "2018-05-11T13:28:24Z")

</div>

Is there any beats available for Apache Tomcat ? Or Is there any other way for it? Please guide me for it. I need to monitor like, currently running java threads, etc...

---

## [Build filter chain](https://discuss.elastic.co/t/build-filter-chain/130753)

<div class="topic-metadata">

**Author:** [@secthor](https://discuss.elastic.co/u/secthor)\
**Replies:** 1\
**Last updated:** [May 6, 2018, 5:47pm UTC](https://discuss.elastic.co/t/build-filter-chain/130753 "2018-05-06T17:47:15Z")

</div>

Hi, I'm pretty new to ELK world, and now I'm trying to parse O365 audit log. (I used to used excel, than I heard about the ELK stack) So here is some test data: CreationDate,UserIds,Operations,AuditData 3462-12-12T15:…

---

## [How to parse such log](https://discuss.elastic.co/t/how-to-parse-such-log/126100)

<div class="topic-metadata">

**Author:** [@Anoop\_Sharda](https://discuss.elastic.co/u/Anoop_Sharda)\
**Replies:** 7\
**Last updated:** [April 3, 2018, 5:56am UTC](https://discuss.elastic.co/t/how-to-parse-such-log/126100 "2018-04-03T05:56:57Z")

</div>

I am getting logs in below format. How can I parse it. if I use msgpack, i am able to see proper results. but i want to parse it in some other way hence need to know what can be done with below mentioned format. \\x8C\\xA…

---

## [Sorting on distance from parent in has\_parent query](https://discuss.elastic.co/t/sorting-on-distance-from-parent-in-has-parent-query/91574)

<div class="topic-metadata">

**Author:** [@pieterdt](https://discuss.elastic.co/u/pieterdt)\
**Replies:** 1\
**Last updated:** [July 4, 2017, 1:43pm UTC](https://discuss.elastic.co/t/sorting-on-distance-from-parent-in-has-parent-query/91574 "2017-07-04T13:43:28Z")

</div>

Hi all, I've been searching quite a lot but, so far without results, so I'm turning to you for some pointers. I have 2 types of docs in my index. Rooms and Premises. Rooms have a premises as parent. The Premises (par…

---

## [Using elasticsearch.js from inside a corporate network. Proxy config?](https://discuss.elastic.co/t/using-elasticsearch-js-from-inside-a-corporate-network-proxy-config/58061)

<div class="topic-metadata">

**Author:** [@michael.lindeboom](https://discuss.elastic.co/u/michael.lindeboom)\
**Replies:** 1\
**Last updated:** [August 16, 2016, 7:46am UTC](https://discuss.elastic.co/t/using-elasticsearch-js-from-inside-a-corporate-network-proxy-config/58061 "2016-08-16T07:46:27Z")

</div>

I am using the JavaScript (nodejs) client from inside a corporate network to access a cluster hosted by Elastic.co (AWS). There does not seem to be any clear way to set the configuration to use my corporate proxy (proxy-…

---

## [Using multiple indices for ElasticSearch Spark plugin throws a curious warning](https://discuss.elastic.co/t/using-multiple-indices-for-elasticsearch-spark-plugin-throws-a-curious-warning/42594)

<div class="topic-metadata">

**Author:** [@dynamicscope](https://discuss.elastic.co/u/dynamicscope)\
**Replies:** 1\
**Last updated:** [March 3, 2016, 9:33am UTC](https://discuss.elastic.co/t/using-multiple-indices-for-elasticsearch-spark-plugin-throws-a-curious-warning/42594 "2016-03-03T09:33:32Z")

</div>

I am using ES Spark plugin and reading multiple indices... sparkContext.esJsonRDD("index1, index2") gives me WARN RestRepository: Read resource \[index1,index2/\] includes multiple indices or/and aliases; to avoid dup…

---

## [Best reindex strategy to change only the number of Shards](https://discuss.elastic.co/t/best-reindex-strategy-to-change-only-the-number-of-shards/18621)

<div class="topic-metadata">

**Author:** [@Chris\_Berry\_2](https://discuss.elastic.co/u/Chris_Berry_2)\
**Replies:** 1\
**Last updated:** [July 18, 2014, 9:57am UTC](https://discuss.elastic.co/t/best-reindex-strategy-to-change-only-the-number-of-shards/18621 "2014-07-18T09:57:54Z")

</div>

Hello, I have a very large Index in ES (millions of entries over 100s of GB) with too few Shards. And I want only to create the same Index but with more, smaller, efficient Shards. And I would love it if this c…

---

## [Logstash parsing issue \\\\xC3\\" from ASCII-8BIT to UTF-8](https://discuss.elastic.co/t/logstash-parsing-issue-xc3-from-ascii-8bit-to-utf-8/177959)

<div class="topic-metadata">

**Author:** [@kunal\_p](https://discuss.elastic.co/u/kunal_p)\
**Replies:** 0\
**Last updated:** [April 23, 2019, 7:25am UTC](https://discuss.elastic.co/t/logstash-parsing-issue-xc3-from-ascii-8bit-to-utf-8/177959 "2019-04-23T07:25:38Z")

</div>

Hi All, We are parsing the data from Database columns using jbdc plugin in logstash , but for some of the records in the database it is showing below error in the log files. scratching my head to solve this. ========…

---

## [\[ANNOUNCEMENT\] - FSCrawler 2.6 released](https://discuss.elastic.co/t/announcement-fscrawler-2-6-released/163604)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [January 9, 2019, 6:24pm UTC](https://discuss.elastic.co/t/announcement-fscrawler-2-6-released/163604 "2019-01-09T18:24:13Z")

</div>

The FSCrawler team is pleased to announce the FSCrawler 2.6 release! FSCrawler FS Crawler offers a simple way to index binary files into elasticsearch. Usage Download FSCrawler 2.6: wget https://repo1.maven.org/maven2…

---

## [For dotnet code, if a different DLL reports an error, the grabbed interface is incorrect](https://discuss.elastic.co/t/for-dotnet-code-if-a-different-dll-reports-an-error-the-grabbed-interface-is-incorrect/294538)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 3\
**Last updated:** [January 26, 2022, 10:57am UTC](https://discuss.elastic.co/t/for-dotnet-code-if-a-different-dll-reports-an-error-the-grabbed-interface-is-incorrect/294538 "2022-01-26T10:57:51Z")

</div>

I tried to upgrade Elastic.Apm.NetCoreAll to 1.13.0, then started the service and debugged an interface, the service got an error (similar to Elastic.Apm.NetCoreAll compatibility issues), that's not the point. I am oper…

---

## [Elasticsearch cluster request timeout and slow response time](https://discuss.elastic.co/t/elasticsearch-cluster-request-timeout-and-slow-response-time/263023)

<div class="topic-metadata">

**Author:** [@LurenzZ](https://discuss.elastic.co/u/LurenzZ)\
**Replies:** 0\
**Last updated:** [February 2, 2021, 6:10pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-request-timeout-and-slow-response-time/263023 "2021-02-02T18:10:44Z")

</div>

Hi, we are having some problems with our Elasticsearch cluster. For the past few days the requests performed by the master node occassionally start to time out and, after that, every search query executed to elasticsear…

---

## [Old 영역 메모리가 꾸준히 증가합니다](https://discuss.elastic.co/t/old/222012)

<div class="topic-metadata">

**Author:** [@Kwang\_Yeol\_Seo](https://discuss.elastic.co/u/Kwang_Yeol_Seo)\
**Replies:** 3\
**Last updated:** [March 5, 2020, 2:12am UTC](https://discuss.elastic.co/t/old/222012 "2020-03-05T02:12:56Z")

</div>

매일 0시에 다량의 문서를 추가하고 있습니다. Old 메모리 영역이 90%를 초과하면 FullGC가 일어나는데 재시작 후 몇일이 지나면 Old 영역이 많이 비워지지 않습니다. 그러다보니 Old 영역이 90%를 초과해 FullGC 호출이 많아지고 있습니다. Old 영역이 꾸준히 증가하는 이유가 알고 싶습니다. 시스템 구성 version : 6.2.4 master : 3 node : …

---

## [How to have \_all mapping in es6 without indexing the source field](https://discuss.elastic.co/t/how-to-have-all-mapping-in-es6-without-indexing-the-source-field/193130)

<div class="topic-metadata">

**Author:** [@Adam\_Hawkins](https://discuss.elastic.co/u/Adam_Hawkins)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 11:43am UTC](https://discuss.elastic.co/t/how-to-have-all-mapping-in-es6-without-indexing-the-source-field/193130 "2019-08-05T11:43:28Z")

</div>

I'm trying to index a document that has 1000s of fields, i'm only interested if the search text exists in the document. not searching on the specific field. I understand that v5 had an \_all field which indexed the aggre…

---

## [Geolocation not showing up](https://discuss.elastic.co/t/geolocation-not-showing-up/136675)

<div class="topic-metadata">

**Author:** [@nairihar](https://discuss.elastic.co/u/nairihar)\
**Replies:** 3\
**Last updated:** [June 21, 2018, 9:03pm UTC](https://discuss.elastic.co/t/geolocation-not-showing-up/136675 "2018-06-21T21:03:14Z")

</div>

Hi, I enabled Nginx logs in Kibana using Beats, also installed two elasticsearch plugins which written in Kibana Getting Started for DEB. But I not see any map data. Nginx request graphs shows all, but geo data not sh…

---

## [Easy Alternative solution for home](https://discuss.elastic.co/t/easy-alternative-solution-for-home/112401)

<div class="topic-metadata">

**Author:** [@bruno-d](https://discuss.elastic.co/u/bruno-d)\
**Replies:** 3\
**Last updated:** [December 22, 2017, 10:57am UTC](https://discuss.elastic.co/t/easy-alternative-solution-for-home/112401 "2017-12-22T10:57:50Z")

</div>

Hi guys, I am wondering who's know an easy alternative solution to display syslog results dashboard (RAM CPU, TEMP), and MAP (geopip) dashboard for home solution running on 1 or 2 PI (not heavy solution) . 1 Event every…

---

## [Killing 1 node causes hanging bulk requests](https://discuss.elastic.co/t/killing-1-node-causes-hanging-bulk-requests/111520)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 3\
**Last updated:** [December 14, 2017, 4:32am UTC](https://discuss.elastic.co/t/killing-1-node-causes-hanging-bulk-requests/111520 "2017-12-14T04:32:14Z")

</div>

After killing 1 node (without -9) out of 3 nodes in the cluster, bulk create via transport client hangs for minutes! The logs show: \[2017-12-13T10:52:58,703\]\[INFO \]\[o.e.c.r.a.AllocationService\] \[node-3\] Cluster health …

[Previous page](https://discuss.elastic.co/top.md?page=1599&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1601&per_page=50&period=all)
