# Top **URL:** https://discuss.elastic.co/top.md?page=1620&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1621 --- ## [How to create new fields and documents based on variable length log?](https://discuss.elastic.co/t/how-to-create-new-fields-and-documents-based-on-variable-length-log/232303)
**Author:** [@san\_sun](https://discuss.elastic.co/u/san_sun)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 5:03am UTC](https://discuss.elastic.co/t/how-to-create-new-fields-and-documents-based-on-variable-length-log/232303 "2020-05-13T05:03:10Z")
I have a log message with a format like: status : name message ; status: name message ; status: name message ; status: name message..... I need to split based on the semicolon, and create separate Elasticsearch docu… --- ## [Metricbeat encrypt passwords in configuration file](https://discuss.elastic.co/t/metricbeat-encrypt-passwords-in-configuration-file/231889)
**Author:** [@mctj](https://discuss.elastic.co/u/mctj)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 8:16am UTC](https://discuss.elastic.co/t/metricbeat-encrypt-passwords-in-configuration-file/231889 "2020-05-11T08:16:57Z")
Hey, I'm using the new sql module in version 7.6 and I need to assign the username and the password of the db in the yaml config in the hosts key(src). If someone will read the yaml file or get it from anybody it means… --- ## [Access denied and failure when i change network.host](https://discuss.elastic.co/t/access-denied-and-failure-when-i-change-network-host/178110)
**Author:** [@Sabyo](https://discuss.elastic.co/u/Sabyo)\ **Replies:** 2\ **Last updated:** [April 24, 2019, 8:44am UTC](https://discuss.elastic.co/t/access-denied-and-failure-when-i-change-network-host/178110 "2019-04-24T08:44:22Z")
Hello, Fresh installation : ElasticSearch version : 7.0 Elastic Search works fines when it runs on localhost. But, when I modify elasticsearch.yml at network.host, and restart service I get an "access denied" and ES s… --- ## [Dynamic mapping strict and date data type (ES 6.4)](https://discuss.elastic.co/t/dynamic-mapping-strict-and-date-data-type-es-6-4/170667)
**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\ **Replies:** 2\ **Last updated:** [March 4, 2019, 9:24am UTC](https://discuss.elastic.co/t/dynamic-mapping-strict-and-date-data-type-es-6-4/170667 "2019-03-04T09:24:10Z")
I have created an index with following mapping: { "mappings": { "\_doc": { "dynamic": "strict", "properties": { "created ": { "type": "date", "format": "yyyy/MM/dd HH:mm:ss||… --- ## [Getting rid of labels partially](https://discuss.elastic.co/t/getting-rid-of-labels-partially/138833)
**Author:** [@Sunil\_Khullar](https://discuss.elastic.co/u/Sunil_Khullar)\ **Replies:** 2\ **Last updated:** [July 6, 2018, 1:17pm UTC](https://discuss.elastic.co/t/getting-rid-of-labels-partially/138833 "2018-07-06T13:17:38Z")
How does one get rid of some of the labels and retain some. Below I want to retain the vertical labels and get rid of the horizontal ones (status : Descending ; where status is the name of a term) --- ## [org.locationtech.Spatial4j dependency missing in ES 6.3.0?](https://discuss.elastic.co/t/org-locationtech-spatial4j-dependency-missing-in-es-6-3-0/138718)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 2\ **Last updated:** [July 5, 2018, 3:07pm UTC](https://discuss.elastic.co/t/org-locationtech-spatial4j-dependency-missing-in-es-6-3-0/138718 "2018-07-05T15:07:29Z")
I have upgraded from 6.1.3 to 6.3.0. Code by using 6.1.3: final CircleBuilder circleBuilder = ShapeBuilders.newCircleBuilder(); circleBuilder.radius(String.valueOf(radius)); circleBuilder.center(longitude, latitude); C… --- ## [Unable to see all fields in Kibana](https://discuss.elastic.co/t/unable-to-see-all-fields-in-kibana/119428)
**Author:** [@MaximeP](https://discuss.elastic.co/u/MaximeP)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 7:00pm UTC](https://discuss.elastic.co/t/unable-to-see-all-fields-in-kibana/119428 "2018-02-12T19:00:43Z")
Hi, I use logstash to receive syslog data from my network devices but I can not see all the fields I want in the discover menu. I receive syslogs from a reverse proxy and I would like to see fields like "http\_host" or … --- ## [Issue with kafka input plugin](https://discuss.elastic.co/t/issue-with-kafka-input-plugin/97451)
**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\ **Replies:** 2\ **Last updated:** [September 7, 2017, 10:12am UTC](https://discuss.elastic.co/t/issue-with-kafka-input-plugin/97451 "2017-09-07T10:12:47Z")
Hi all, I am on my way to upgrade all my ELK cluster. The last point is the logtsash upgrade (before 2.3, future 5.5). Kafka version: 0.11.0.0 With logstash kafka input plugin version 2.0.6, I do not have any problem … --- ## [Multiple Aggregations, index\_out\_of\_bounds\_exception error](https://discuss.elastic.co/t/multiple-aggregations-index-out-of-bounds-exception-error/83565)
**Author:** [@vovo](https://discuss.elastic.co/u/vovo)\ **Replies:** 2\ **Last updated:** [April 25, 2017, 3:34pm UTC](https://discuss.elastic.co/t/multiple-aggregations-index-out-of-bounds-exception-error/83565 "2017-04-25T15:34:20Z")
Hi, I'm trying to develop an elastic search watcher that includes multiple aggregations. I want to group the documents based on the accounts and for each account check if a series of consecutive "failure" attempts in 15 … --- ## [Getting a Filebeat server certificate verification fail](https://discuss.elastic.co/t/getting-a-filebeat-server-certificate-verification-fail/81527)
**Author:** [@wmstein](https://discuss.elastic.co/u/wmstein)\ **Replies:** 2\ **Last updated:** [April 7, 2017, 8:29pm UTC](https://discuss.elastic.co/t/getting-a-filebeat-server-certificate-verification-fail/81527 "2017-04-07T20:29:19Z")
I have filebeat working on a production server successfully and am now putting on a second production server using the exact same process. I copied over the same Logstash crt file and added it to the filebeat.yml file. … --- ## [Cartesian coordinate support in ES](https://discuss.elastic.co/t/cartesian-coordinate-support-in-es/80864)
**Author:** [@arsi](https://discuss.elastic.co/u/arsi)\ **Replies:** 2\ **Last updated:** [April 3, 2017, 10:26pm UTC](https://discuss.elastic.co/t/cartesian-coordinate-support-in-es/80864 "2017-04-03T22:26:52Z")
Hi. I'm new to ES and I was wondering if elastic search supports cartesian geometric data or if I have to do a custom implementation. Basically, I have points in a plane and I want to be able to do aggregates such as r… --- ## [Logstash s3 input](https://discuss.elastic.co/t/logstash-s3-input/54984)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 2\ **Last updated:** [August 1, 2016, 6:36pm UTC](https://discuss.elastic.co/t/logstash-s3-input/54984 "2016-08-01T18:36:04Z")
Hi Team, I am trying to read cloud trail logs from a S3 bucket, i installed cloudtrail plugin too. I can download logs from s3 bucket using "s3 cp" command so there is no connectivity issue. (Though i can't download usi… --- ## [Présentation/slide EKL](https://discuss.elastic.co/t/presentation-slide-ekl/40389)
**Author:** [@mkm](https://discuss.elastic.co/u/mkm)\ **Replies:** 2\ **Last updated:** [January 28, 2016, 5:20pm UTC](https://discuss.elastic.co/t/presentation-slide-ekl/40389 "2016-01-28T17:20:09Z")
Bonjour, je trouve pas mal de slide ssur EKL en anglais. Savez vous s'il existe une présnetation toute simple en français. Merci d'avance. --- ## [Print nearby lines after query result](https://discuss.elastic.co/t/print-nearby-lines-after-query-result/17810)
**Author:** [@Senthil\_Raja](https://discuss.elastic.co/u/Senthil_Raja)\ **Replies:** 2\ **Last updated:** [May 30, 2014, 4:53am UTC](https://discuss.elastic.co/t/print-nearby-lines-after-query-result/17810 "2014-05-30T04:53:07Z")
Team, As per our requirement, i have to search a string in ES logs. And, print five lines before and after the result query. Is there any way to do that ? -- You received this message because you are sub… --- ## [Security autoconfiguration information](https://discuss.elastic.co/t/security-autoconfiguration-information/340100)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 6\ **Last updated:** [August 7, 2023, 1:33pm UTC](https://discuss.elastic.co/t/security-autoconfiguration-information/340100 "2023-08-07T13:33:15Z")
I have just installed the newest version of Elasticsearch using the official guide but did not come across 'Security autoconfiguration information' screen. Now when I try to start Elasticsearch using the following comman… --- ## [Signal.rule.name empty?](https://discuss.elastic.co/t/signal-rule-name-empty/260823)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 6\ **Last updated:** [January 18, 2021, 7:08pm UTC](https://discuss.elastic.co/t/signal-rule-name-empty/260823 "2021-01-18T19:08:22Z")
Hello, Just noticed signal.rule.name is empty for some rules? Elastic 7.9.2 The above screenshot is from the rule "VNC to the Internet" which I copied from the official " VNC (Virtual Network Computing) to the Intern… --- ## [How to work index refresh? & asyncronous replication setting](https://discuss.elastic.co/t/how-to-work-index-refresh-asyncronous-replication-setting/11084)
**Author:** [@narkisos84](https://discuss.elastic.co/u/narkisos84)\ **Replies:** 6\ **Last updated:** [March 13, 2013, 12:35pm UTC](https://discuss.elastic.co/t/how-to-work-index-refresh-asyncronous-replication-setting/11084 "2013-03-13T12:35:29Z")
Hello. I don't have any experience to write question in the internet. And I'm worried about my pool English ability. I try to find the internal work about index refresh. But I can't figure out. Index refresh… --- ## [Dumping elastic data into csv or into any NOSQL through python](https://discuss.elastic.co/t/dumping-elastic-data-into-csv-or-into-any-nosql-through-python/146412)
**Author:** [@a3191](https://discuss.elastic.co/u/a3191)\ **Replies:** 2\ **Last updated:** [September 20, 2018, 8:00pm UTC](https://discuss.elastic.co/t/dumping-elastic-data-into-csv-or-into-any-nosql-through-python/146412 "2018-09-20T20:00:54Z")
As we know we can't fetch more than 10000 rows in python from elastic search because of connection error issue. I want data for two hours from my elastic clusterand for every 5 minutes, I am having approx 10000 observati… --- ## [Read-only file system](https://discuss.elastic.co/t/read-only-file-system/374182)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 7\ **Last updated:** [February 6, 2025, 9:03pm UTC](https://discuss.elastic.co/t/read-only-file-system/374182 "2025-02-06T21:03:25Z")
Hello everyone, From Kibana I started to visualize load errors and when checking the cluster I see that one of the servers is outside, I entered by SSH and the server is running and had the elasticsearch service running… --- ## [Disable logstash license check?](https://discuss.elastic.co/t/disable-logstash-license-check/341788)
**Author:** [@jacobdanielrose](https://discuss.elastic.co/u/jacobdanielrose)\ **Replies:** 1\ **Last updated:** [August 28, 2023, 4:40pm UTC](https://discuss.elastic.co/t/disable-logstash-license-check/341788 "2023-08-28T16:40:42Z")
Hi! I am trying to connect a logstash instance to an elasticseach which is part of a deployment of IBM Cloudpak for AIOps. It uses an elasticsearch instance to store related incident data from ticket systems. The versio… --- ## [Logstash is processing old events](https://discuss.elastic.co/t/logstash-is-processing-old-events/326336)
**Author:** [@Nikhitha\_Karennagari](https://discuss.elastic.co/u/Nikhitha_Karennagari)\ **Replies:** 7\ **Last updated:** [March 2, 2023, 1:11pm UTC](https://discuss.elastic.co/t/logstash-is-processing-old-events/326336 "2023-03-02T13:11:57Z")
Getting continuous errors like below in logstash { "timestamp": "2023-02-10T14:04:33.661-08:00", "severity": "warning", "message": "Could not index event to Elasticsearch. {:status=\>404, :action=\>\['index', {:\_id=\>nil, :… --- ## [Kafka input - resync missing items from topic](https://discuss.elastic.co/t/kafka-input-resync-missing-items-from-topic/325294)
**Author:** [@Chris\_Denneen](https://discuss.elastic.co/u/Chris_Denneen)\ **Replies:** 7\ **Last updated:** [February 12, 2023, 2:04am UTC](https://discuss.elastic.co/t/kafka-input-resync-missing-items-from-topic/325294 "2023-02-12T02:04:14Z")
Ran into issue where we have logstash input reading kafka topics for log events. Last night the ES index rolled over and the write alias was lost (not on the new index... so nothing with is\_write\_index = true) therefore… --- ## [ResourceStatus: CREATE\_FAILED, ResourceStatusReason: Resource handler returned message: \\"The specified log group does not exist](https://discuss.elastic.co/t/resourcestatus-create-failed-resourcestatusreason-resource-handler-returned-message-the-specified-log-group-does-not-exist/313785)
**Author:** [@ayushi.sharma91](https://discuss.elastic.co/u/ayushi.sharma91)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 10:19am UTC](https://discuss.elastic.co/t/resourcestatus-create-failed-resourcestatusreason-resource-handler-returned-message-the-specified-log-group-does-not-exist/313785 "2022-09-13T10:19:25Z")
I am trying to install functionbeat 8.4 on an AWS (tried it on both amazon linux and Ubuntu). Elasticsearch is self hosted. Followed the installation guide(Functionbeat quick start: installation and configuration | Funct… --- ## [ES rolling upgrade from 6.3.2 to 6.8.22, ES plug-in version should be upgraded to 6.8.22?](https://discuss.elastic.co/t/es-rolling-upgrade-from-6-3-2-to-6-8-22-es-plug-in-version-should-be-upgraded-to-6-8-22/308325)
**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\ **Replies:** 7\ **Last updated:** [July 4, 2022, 7:51am UTC](https://discuss.elastic.co/t/es-rolling-upgrade-from-6-3-2-to-6-8-22-es-plug-in-version-should-be-upgraded-to-6-8-22/308325 "2022-07-04T07:51:11Z")
In order to fix the log4j2 vulnerability, we plan to upgrade the ES version from 6.3.2 to 6.8.22, and 7.x to 7.16.2. When reading the rolling upgrade document, the rolling upgrade document for 7.16.2 mentioned that the p… --- ## [AWS CloudTrail SQS integration issues](https://discuss.elastic.co/t/aws-cloudtrail-sqs-integration-issues/299783)
**Author:** [@bil15](https://discuss.elastic.co/u/bil15)\ **Replies:** 1\ **Last updated:** [March 16, 2022, 3:16am UTC](https://discuss.elastic.co/t/aws-cloudtrail-sqs-integration-issues/299783 "2022-03-16T03:16:32Z")
Hello! I'm trying to ingest AWS CloudTrail logs via AWS integration in Fleet using S3 input (SQS). I followed this article to configure CloudTrail logs forwarding to SQS: https://docs.rapid7.com/insightidr/aws-cloudtr… --- ## [Percentile aggregation for histogram buckets](https://discuss.elastic.co/t/percentile-aggregation-for-histogram-buckets/201676)
**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\ **Replies:** 1\ **Last updated:** [September 30, 2019, 10:27pm UTC](https://discuss.elastic.co/t/percentile-aggregation-for-histogram-buckets/201676 "2019-09-30T22:27:46Z")
We are moving our application metrics from prometheus to elastic stack. As part of migration, from the histogram buckets, is there any way in elastic search or in kibana to calculate 50th, 95th, 99th percentile latency? … --- ## [Build issue with beats in project using go.mod](https://discuss.elastic.co/t/build-issue-with-beats-in-project-using-go-mod/178249)
**Author:** [@danielw93](https://discuss.elastic.co/u/danielw93)\ **Replies:** 1\ **Last updated:** [April 25, 2019, 10:09am UTC](https://discuss.elastic.co/t/build-issue-with-beats-in-project-using-go-mod/178249 "2019-04-25T10:09:31Z")
Hey all! I have a project depending on beats/libbeat and after changing my dependency management to go modules I can no longer build the project. It fails with the following message: unknown import path "github.com/el… --- ## [How to add Terms on Y-Axis?](https://discuss.elastic.co/t/how-to-add-terms-on-y-axis/171394)
**Author:** [@dips](https://discuss.elastic.co/u/dips)\ **Replies:** 1\ **Last updated:** [March 15, 2019, 1:27pm UTC](https://discuss.elastic.co/t/how-to-add-terms-on-y-axis/171394 "2019-03-15T13:27:37Z")
Hello I want to plot one of the terms values against date histogram. I want it in the line format. Is it possible to get terms on the Y-Axis instead of count or other aggregation metrics? --- ## [Watcher gives SSL handshake exception](https://discuss.elastic.co/t/watcher-gives-ssl-handshake-exception/157112)
**Author:** [@yungnvn](https://discuss.elastic.co/u/yungnvn)\ **Replies:** 1\ **Last updated:** [November 27, 2018, 8:11am UTC](https://discuss.elastic.co/t/watcher-gives-ssl-handshake-exception/157112 "2018-11-27T08:11:41Z")
This is my input: "input": { "http": { "request": { "scheme": "https", "host": "elkrck-vccn007", "port": 9200, "method": "get", "path": "/\_cluster/health", "params": {}, "headers": {}, "auth": { "basic": { "… --- ## [Creating index pattern... hanging](https://discuss.elastic.co/t/creating-index-pattern-hanging/155340)
**Author:** [@davoti](https://discuss.elastic.co/u/davoti)\ **Replies:** 1\ **Last updated:** [November 5, 2018, 2:15pm UTC](https://discuss.elastic.co/t/creating-index-pattern-hanging/155340 "2018-11-05T14:15:25Z")
Hi I freshly installed ES/kibana 6.4.2 on centos6, curl http://my\_ip:9200 ok, launch kibana from chrome also ok,,, when trying to create index pattern, it just hangs there,,, even when I tried to use kibana\_sample\_data\_… --- ## [(Spark) Write data with new timestamp and then delete all with old timestamp](https://discuss.elastic.co/t/spark-write-data-with-new-timestamp-and-then-delete-all-with-old-timestamp/135865)
**Author:** [@c4c8f8b3048c927d1e54](https://discuss.elastic.co/u/c4c8f8b3048c927d1e54)\ **Replies:** 1\ **Last updated:** [June 21, 2018, 5:33pm UTC](https://discuss.elastic.co/t/spark-write-data-with-new-timestamp-and-then-delete-all-with-old-timestamp/135865 "2018-06-21T17:33:54Z")
Hello, everybody! I have some test RDD with case class Product (tokens : String, count : Long, timestamp : Long,id :Int) in Spark-Scala. timestamp - System.currentTimeMillis() I wrote it to elasticsearch, but later i'… --- ## [Response is terribly slow, when using from/size for pagination for large 'from' values](https://discuss.elastic.co/t/response-is-terribly-slow-when-using-from-size-for-pagination-for-large-from-values/132659)
**Author:** [@WeerasEs](https://discuss.elastic.co/u/WeerasEs)\ **Replies:** 1\ **Last updated:** [May 21, 2018, 3:30pm UTC](https://discuss.elastic.co/t/response-is-terribly-slow-when-using-from-size-for-pagination-for-large-from-values/132659 "2018-05-21T15:30:24Z")
The corresponding query nearly returns 3 million documents. From : 1, size : 50 =\> Response comes within 2 seconds. From : 1,000,000, size : 50 =\> Response comes after 20 seconds. If we send multiple concurrent requ… --- ## [Using self-managed or hosted Elastic Cloud solution - pros and cons?](https://discuss.elastic.co/t/using-self-managed-or-hosted-elastic-cloud-solution-pros-and-cons/84396)
**Author:** [@ccgav](https://discuss.elastic.co/u/ccgav)\ **Replies:** 1\ **Last updated:** [May 3, 2017, 10:53am UTC](https://discuss.elastic.co/t/using-self-managed-or-hosted-elastic-cloud-solution-pros-and-cons/84396 "2017-05-03T10:53:17Z")
I am looking at using ElasticSearch to improve our full-text search within my application - I am not sure whether to go with a self managed version that I will install manually myself or use something like Elastic Cloud … --- ## [Ignore\_malformed not seeming to work](https://discuss.elastic.co/t/ignore-malformed-not-seeming-to-work/58914)
**Author:** [@aacb9](https://discuss.elastic.co/u/aacb9)\ **Replies:** 1\ **Last updated:** [August 25, 2016, 1:15pm UTC](https://discuss.elastic.co/t/ignore-malformed-not-seeming-to-work/58914 "2016-08-25T13:15:48Z")
I have documents that are like: { "arguments": { "foo": 1.23 } } { "arguments": { "foo": false } } And I'm sending them to type "bar". I have a template for "bar" that I set the the type of "foo" to a doub… --- ## [Webhook action per document (found by watcher) instead per watcher](https://discuss.elastic.co/t/webhook-action-per-document-found-by-watcher-instead-per-watcher/35079)
**Author:** [@darshandpatel](https://discuss.elastic.co/u/darshandpatel)\ **Replies:** 1\ **Last updated:** [November 30, 2015, 5:40am UTC](https://discuss.elastic.co/t/webhook-action-per-document-found-by-watcher-instead-per-watcher/35079 "2015-11-30T05:40:00Z")
Hey guys, I want to generate the individual JIRA tickets (webhook action) for the each document found by watcher condition. Currently I know how to generate a JIRA ticket once the watcher condition is matched but It… --- ## [Changing max\_file\_descriptors for elastic 1.7.1 on mac](https://discuss.elastic.co/t/changing-max-file-descriptors-for-elastic-1-7-1-on-mac/27746)
**Author:** [@preetika\_shukla](https://discuss.elastic.co/u/preetika_shukla)\ **Replies:** 1\ **Last updated:** [September 2, 2015, 2:17am UTC](https://discuss.elastic.co/t/changing-max-file-descriptors-for-elastic-1-7-1-on-mac/27746 "2015-09-02T02:17:13Z")
Hi, I am trying to modify the max\_file\_descriptors for elastic search node, I've followed the post suggested by https://gist.github.com/tamitutor/6a1e41eec0ce021a9718, and made the changes, still when i try to curl t… --- ## [Hadoop ES Integration Options & Performamnce](https://discuss.elastic.co/t/hadoop-es-integration-options-performamnce/24208)
**Author:** [@Madhusudhana\_P](https://discuss.elastic.co/u/Madhusudhana_P)\ **Replies:** 1\ **Last updated:** [June 24, 2015, 8:32am UTC](https://discuss.elastic.co/t/hadoop-es-integration-options-performamnce/24208 "2015-06-24T08:32:10Z")
Hi I am new to ES I am actually looking at Elastic Search for the Big Data Analytics and looking at ES & Kibana; had also gone through the es-hadoop connector, wanted to push the data from Hadoop to ES and visualize th… --- ## [Searching the big index - java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/searching-the-big-index-java-lang-outofmemoryerror-java-heap-space/19152)
**Author:** [@Pavel\_P](https://discuss.elastic.co/u/Pavel_P)\ **Replies:** 7\ **Last updated:** [August 8, 2014, 3:48pm UTC](https://discuss.elastic.co/t/searching-the-big-index-java-lang-outofmemoryerror-java-heap-space/19152 "2014-08-08T15:48:21Z")
Hi, Currently I have the cluster from 3 nodes, each has 8 CPUs and 30Gb ram. https://lh4.googleusercontent.com/-r-mHzuBN0e8/U-PYE0sNIrI/AAAAAAAAAIc/mliNQ7MDVmQ/s1600/Screen+Shot+2014-08-07+at+10.48.11+PM.png Each day … --- ## [Query no working](https://discuss.elastic.co/t/query-no-working/2905)
**Author:** [@Walendo](https://discuss.elastic.co/u/Walendo)\ **Replies:** 7\ **Last updated:** [April 30, 2010, 5:16pm UTC](https://discuss.elastic.co/t/query-no-working/2905 "2010-04-30T17:16:00Z")
Hi, I'm using the query string bellow to fetch all the documents whose field "nome" starts with jo, sorting by the field "nome". http://localhost:9200/ig/cidade/\_search?size=10&q=nome:jo\*&sort:fields:\[\\"nome\\"\] … --- ## [Inference API not working](https://discuss.elastic.co/t/inference-api-not-working/358209)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 4\ **Last updated:** [April 25, 2024, 2:49pm UTC](https://discuss.elastic.co/t/inference-api-not-working/358209 "2024-04-25T14:49:48Z")
Hi, I was trying to embed some text with a model I uploaded in my local docker instance of elastic. I currently have elastic 8.11 here. When trying to do this I receive the following error: API Call (Kibana DevTools) … --- ## [Syslog Ingest Pipeline not targeting data](https://discuss.elastic.co/t/syslog-ingest-pipeline-not-targeting-data/333204)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 4\ **Last updated:** [May 17, 2023, 12:30pm UTC](https://discuss.elastic.co/t/syslog-ingest-pipeline-not-targeting-data/333204 "2023-05-17T12:30:13Z")
We're trying to utilize ingest pipelines for some of our Filebeat data and the pipeline doesn't seem to processing any events. We've run this through the grok parser and that provides us with the correct output so I'm n… --- ## [Updating index.max\_shingle\_diff](https://discuss.elastic.co/t/updating-index-max-shingle-diff/308937)
**Author:** [@Benjamin1](https://discuss.elastic.co/u/Benjamin1)\ **Replies:** 4\ **Last updated:** [July 5, 2022, 9:12pm UTC](https://discuss.elastic.co/t/updating-index-max-shingle-diff/308937 "2022-07-05T21:12:47Z")
When I try to create an index I get this message: ServerError: Type: illegal\_argument\_exception Reason: "In Shingle TokenFilter the difference between max\_shingle\_size and min\_shingle\_size (and +1 if outputting unigrams… --- ## [Filebeat cannot connect to ELK](https://discuss.elastic.co/t/filebeat-cannot-connect-to-elk/289076)
**Author:** [@bropid](https://discuss.elastic.co/u/bropid)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 6:36am UTC](https://discuss.elastic.co/t/filebeat-cannot-connect-to-elk/289076 "2021-11-23T06:36:18Z")
Hey, i'm trying to input the apache2 visualize dashboard but when i run this command said connection refused everytime i try try to connect to my ELK in my VM1 with my webserver with apache2 and filebeat, the connect… --- ## [ELK Licencing question](https://discuss.elastic.co/t/elk-licencing-question/288681)
**Author:** [@Eduard\_Abril](https://discuss.elastic.co/u/Eduard_Abril)\ **Replies:** 4\ **Last updated:** [November 9, 2021, 2:44pm UTC](https://discuss.elastic.co/t/elk-licencing-question/288681 "2021-11-09T14:44:39Z")
Hello guys, We are planning to deploy an ELK architecture with enterprise features, our though is to deploy 9 Elasticsearch nodes with different roles, 1 kibana node and 2 logstash nodes, my question is How many nodes d… --- ## [Single master node cluster dies when master node dies](https://discuss.elastic.co/t/single-master-node-cluster-dies-when-master-node-dies/281559)
**Author:** [@iojas](https://discuss.elastic.co/u/iojas)\ **Replies:** 4\ **Last updated:** [August 17, 2021, 11:05pm UTC](https://discuss.elastic.co/t/single-master-node-cluster-dies-when-master-node-dies/281559 "2021-08-17T23:05:41Z")
I am using ECK to deploy an ES cluster. my setup has 1 master node and 3 data nodes. If for some reason master nodes dies it comes back up (thanks to statefulsets in kubernetes), but associates itself with a different cl… --- ## [List all the stale data that is no longer referenced by existing snapshots](https://discuss.elastic.co/t/list-all-the-stale-data-that-is-no-longer-referenced-by-existing-snapshots/271988)
**Author:** [@Aeres-u99](https://discuss.elastic.co/u/Aeres-u99)\ **Replies:** 4\ **Last updated:** [May 3, 2021, 5:48pm UTC](https://discuss.elastic.co/t/list-all-the-stale-data-that-is-no-longer-referenced-by-existing-snapshots/271988 "2021-05-03T17:48:34Z")
We have a small setup where in we have been taking snapshots since last two years and I would like to clean it up to make some storage space on our backup server. I was going through this documentation Clean up snapsho… --- ## [How to parse fields from multiline text log file?](https://discuss.elastic.co/t/how-to-parse-fields-from-multiline-text-log-file/265752)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 4\ **Last updated:** [March 2, 2021, 4:27am UTC](https://discuss.elastic.co/t/how-to-parse-fields-from-multiline-text-log-file/265752 "2021-03-02T04:27:45Z")
Dears, I need your advise in case of parsing fields from text log file. This is sample of text file: ---- got a mess at: 11:21:51 ctrl\_mess\_handler::control\_message\_handler @333.333 got new timer id: 11111, to be fired… --- ## [There are continuous failures due to Http:500 internal server error, http:503 service unavailable and timeouts](https://discuss.elastic.co/t/there-are-continuous-failures-due-to-http-500-internal-server-error-http-503-service-unavailable-and-timeouts/240678)
**Author:** [@sasvmware](https://discuss.elastic.co/u/sasvmware)\ **Replies:** 4\ **Last updated:** [July 12, 2020, 10:37pm UTC](https://discuss.elastic.co/t/there-are-continuous-failures-due-to-http-500-internal-server-error-http-503-service-unavailable-and-timeouts/240678 "2020-07-12T22:37:29Z")
There are continuous failures while running 5x load test due to Http:500 internal server error, http:503 service unavailable and timeouts in rest api In logs, we do not find any issue. 3 nodes Memory: 16 GB vCpu : 4 --- ## [Want to format date](https://discuss.elastic.co/t/want-to-format-date/234312)
**Author:** [@shubhamblackstratus](https://discuss.elastic.co/u/shubhamblackstratus)\ **Replies:** 4\ **Last updated:** [June 26, 2020, 8:29am UTC](https://discuss.elastic.co/t/want-to-format-date/234312 "2020-06-26T08:29:11Z")
My current date format is "2019-11-11T05:59:12.000Z" and I want to modify this with day\_of\_the\_week. I tried to achieve it by utilising painless script but it forces me to use terms as an aggregation without mentioning … --- ## [Event parsing - perf\_data from cmkbeat](https://discuss.elastic.co/t/event-parsing-perf-data-from-cmkbeat/220001)
**Author:** [@Robo](https://discuss.elastic.co/u/Robo)\ **Replies:** 4\ **Last updated:** [February 21, 2020, 2:03pm UTC](https://discuss.elastic.co/t/event-parsing-perf-data-from-cmkbeat/220001 "2020-02-21T14:03:24Z")
Hello, We are collecting some server metric using cmkbeat agent. The output is available in following format: perf\_data: heap=8308.406693;15045.98125;15837.875;;15837.875 nonheap=582.264664;0;0;;0 perf\_data: generic\_… [Previous page](https://discuss.elastic.co/top.md?page=1619&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1621&per_page=50&period=all)