# Top

**URL:** https://discuss.elastic.co/top.md?page=1628&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1629

---

## [Problems with installing/starting current Elasticsearch on ubuntu](https://discuss.elastic.co/t/problems-with-installing-starting-current-elasticsearch-on-ubuntu/315632)

<div class="topic-metadata">

**Author:** [@besucher80](https://discuss.elastic.co/u/besucher80)\
**Replies:** 3\
**Last updated:** [October 2, 2022, 3:22pm UTC](https://discuss.elastic.co/t/problems-with-installing-starting-current-elasticsearch-on-ubuntu/315632 "2022-10-02T15:22:10Z")

</div>

hi, i have installed elasticsearch like here: https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html Now i want to start it with: sudo systemctl start elasticsearch.service But this always fail. In t…

---

## [Filebeat-json.log size and rotation](https://discuss.elastic.co/t/filebeat-json-log-size-and-rotation/283773)

<div class="topic-metadata">

**Author:** [@greggailly](https://discuss.elastic.co/u/greggailly)\
**Replies:** 3\
**Last updated:** [September 23, 2021, 6:56am UTC](https://discuss.elastic.co/t/filebeat-json-log-size-and-rotation/283773 "2021-09-23T06:56:13Z")

</div>

We are having size issues with the filebeat-json.log file. One of our servers had one 122gb filebeat-json.log, are they not supposed to rotate to prevent this ? All of our servers run windows server 2016/2019 and elast…

---

## [Forcing elasticsearch cluster to run on single node in the event of failure](https://discuss.elastic.co/t/forcing-elasticsearch-cluster-to-run-on-single-node-in-the-event-of-failure/283658)

<div class="topic-metadata">

**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\
**Replies:** 3\
**Last updated:** [September 13, 2021, 3:58pm UTC](https://discuss.elastic.co/t/forcing-elasticsearch-cluster-to-run-on-single-node-in-the-event-of-failure/283658 "2021-09-13T15:58:33Z")

</div>

Hi folks, Currently we are in the process of setting up 3 node elasticsearch cluster on v7.11.2 (self-managed) using below setup : All 3 nodes will be data nodes and master eligible. We will set "index.number\_of\_repl…

---

## [Aggregate filter timeouts and input completion](https://discuss.elastic.co/t/aggregate-filter-timeouts-and-input-completion/275719)

<div class="topic-metadata">

**Author:** [@jratliff](https://discuss.elastic.co/u/jratliff)\
**Replies:** 3\
**Last updated:** [June 14, 2021, 4:42pm UTC](https://discuss.elastic.co/t/aggregate-filter-timeouts-and-input-completion/275719 "2021-06-14T16:42:55Z")

</div>

I am using logstash to read events from elasticsearch and the aggregate filter to condense them. Because the data I am condensing has no clear start/stop events, we are using the timeout and inactivity\_timeout settings …

---

## [Where can i set APM-Server Memory Settings?](https://discuss.elastic.co/t/where-can-i-set-apm-server-memory-settings/249665)

<div class="topic-metadata">

**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\
**Replies:** 3\
**Last updated:** [September 24, 2020, 6:15am UTC](https://discuss.elastic.co/t/where-can-i-set-apm-server-memory-settings/249665 "2020-09-24T06:15:43Z")

</div>

Can I somewhere set the Memory Limits for APM-Server? Or is it defined by the queue.mem setting? Thanks.

---

## [Elasticsearch data type](https://discuss.elastic.co/t/elasticsearch-data-type/238517)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 3\
**Last updated:** [June 25, 2020, 5:40am UTC](https://discuss.elastic.co/t/elasticsearch-data-type/238517 "2020-06-25T05:40:27Z")

</div>

I have an index named users and i have a provided a field called user\_id which is int type.The question is it is accepting floating value and string value.This is the index i have created PUT /users { "mappings" : { …

---

## [Kibana Dashboard: I am using elastic cloud trial version and filebeat is running but failed to load fllebeat index pattern on kibana](https://discuss.elastic.co/t/kibana-dashboard-i-am-using-elastic-cloud-trial-version-and-filebeat-is-running-but-failed-to-load-fllebeat-index-pattern-on-kibana/226023)

<div class="topic-metadata">

**Author:** [@Manav\_Chopra](https://discuss.elastic.co/u/Manav_Chopra)\
**Replies:** 3\
**Last updated:** [April 3, 2020, 2:29pm UTC](https://discuss.elastic.co/t/kibana-dashboard-i-am-using-elastic-cloud-trial-version-and-filebeat-is-running-but-failed-to-load-fllebeat-index-pattern-on-kibana/226023 "2020-04-03T14:29:45Z")

</div>

I am working on windows system and working on elastic cloud: elasticsearch and kibana I have installed filebeat as well and configured properly . In console if i run filebeat -e, it is running but on kibana nothing is s…

---

## [Throughput](https://discuss.elastic.co/t/throughput/215649)

<div class="topic-metadata">

**Author:** [@kinlee](https://discuss.elastic.co/u/kinlee)\
**Replies:** 3\
**Last updated:** [February 3, 2020, 7:35am UTC](https://discuss.elastic.co/t/throughput/215649 "2020-02-03T07:35:55Z")

</div>

Is it possible to find a maximum throughput (indexing, term,phase) using esrally? if so what value do we have to assign in challenges? Thanking you

---

## [Filter\_path usage](https://discuss.elastic.co/t/filter-path-usage/193054)

<div class="topic-metadata">

**Author:** [@rubpa](https://discuss.elastic.co/u/rubpa)\
**Replies:** 3\
**Last updated:** [August 6, 2019, 12:04pm UTC](https://discuss.elastic.co/t/filter-path-usage/193054 "2019-08-06T12:04:04Z")

</div>

I have used templates to tune the number of replicas and over time I've a number of templates. I don't remember the exact names. GET \_template gives very verbose output because of a huge number of internal templates (st…

---

## [Can't use filebeat \[beat\]\[timezone\] with logstash date filter plugin?](https://discuss.elastic.co/t/cant-use-filebeat-beat-timezone-with-logstash-date-filter-plugin/171661)

<div class="topic-metadata">

**Author:** [@PSM](https://discuss.elastic.co/u/PSM)\
**Replies:** 3\
**Last updated:** [March 11, 2019, 1:47pm UTC](https://discuss.elastic.co/t/cant-use-filebeat-beat-timezone-with-logstash-date-filter-plugin/171661 "2019-03-11T13:47:11Z")

</div>

I'm sending a log file to logstash using filebeat that does not encode timezone in the timestamp: 2019-03-08 17:48:49,766 \[3\] INFO Corp.FO.DataLoaders.BaseDataFile \[DOMAIN\\username\] - log message detail Until today, wh…

---

## [Ingest-user-agent Plugin](https://discuss.elastic.co/t/ingest-user-agent-plugin/127949)

<div class="topic-metadata">

**Author:** [@Rolf\_Anderegg](https://discuss.elastic.co/u/Rolf_Anderegg)\
**Replies:** 3\
**Last updated:** [April 13, 2018, 12:50pm UTC](https://discuss.elastic.co/t/ingest-user-agent-plugin/127949 "2018-04-13T12:50:34Z")

</div>

I updated the elasticsearch trought yum to 6.2.3. After the update the elasticsearch did not start after investigating the logfile i found out that plugins are not compatible. As described in the documentation i tried t…

---

## [\_grokparsefailiure only after date filter has been included](https://discuss.elastic.co/t/-grokparsefailiure-only-after-date-filter-has-been-included/80224)

<div class="topic-metadata">

**Author:** [@rrrtttuuu](https://discuss.elastic.co/u/rrrtttuuu)\
**Replies:** 3\
**Last updated:** [March 28, 2017, 1:02pm UTC](https://discuss.elastic.co/t/-grokparsefailiure-only-after-date-filter-has-been-included/80224 "2017-03-28T13:02:12Z")

</div>

I have a filter that looks something like this: filter { grok { match =\> {"message" =\> '%{IPORHOST:remote\_addr}%{SPACE}-%{SPACE}%{HOSTPORT:upstream\_addr}%{SPACE}-%{SPACE}%{USERNAME:remote\_user}%{SPACE}\\\[%{H…

---

## [Logstash Sending data into wrong/another document type instead of document on which i have configured it](https://discuss.elastic.co/t/logstash-sending-data-into-wrong-another-document-type-instead-of-document-on-which-i-have-configured-it/63568)

<div class="topic-metadata">

**Author:** [@Tushar\_Sharma1](https://discuss.elastic.co/u/Tushar_Sharma1)\
**Replies:** 3\
**Last updated:** [October 21, 2016, 7:51am UTC](https://discuss.elastic.co/t/logstash-sending-data-into-wrong-another-document-type-instead-of-document-on-which-i-have-configured-it/63568 "2016-10-21T07:51:49Z")

</div>

Hi All, I have written filter in logstash and placed them in logstash conf.d directory and i have set same index but different document type for elasticsearch output of each filter.But when I have run query in elasticsea…

---

## [Update TTL of documents](https://discuss.elastic.co/t/update-ttl-of-documents/61110)

<div class="topic-metadata">

**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\
**Replies:** 3\
**Last updated:** [September 21, 2016, 8:31pm UTC](https://discuss.elastic.co/t/update-ttl-of-documents/61110 "2016-09-21T20:31:14Z")

</div>

My documentas have an specific ttl set and I would like to increase this ttl. Is there any fast way to do this for millions of documents? I would like to avoid deletion and creation of the documents in order to update …

---

## [Huge elasticsearch logs!](https://discuss.elastic.co/t/huge-elasticsearch-logs/53293)

<div class="topic-metadata">

**Author:** [@brandonmcgrath1](https://discuss.elastic.co/u/brandonmcgrath1)\
**Replies:** 3\
**Last updated:** [June 29, 2016, 12:25pm UTC](https://discuss.elastic.co/t/huge-elasticsearch-logs/53293 "2016-06-29T12:25:22Z")

</div>

Something is going wrong with elastic search below are the crazy logs im getting: Filename: elasticsearch-service-x64-stdout.2016-06-17.log Filesize: 55,224,716KB Filename: elasticsearch.log.2016-06-17 (file type 2016-…

---

## [Search by field percent](https://discuss.elastic.co/t/search-by-field-percent/52864)

<div class="topic-metadata">

**Author:** [@enp](https://discuss.elastic.co/u/enp)\
**Replies:** 3\
**Last updated:** [June 16, 2016, 9:21am UTC](https://discuss.elastic.co/t/search-by-field-percent/52864 "2016-06-16T09:21:55Z")

</div>

Hi Suppose, I have such objects in index: {'name':'John','age':25}, {'name':'Mary','age':27}, {'name':'Jack','age':22} How to search objects with age \> 90% of max age? Percentage for John is 25\*100/27=92, for ja…

---

## [Logstash drop newyears eve](https://discuss.elastic.co/t/logstash-drop-newyears-eve/38859)

<div class="topic-metadata">

**Author:** [@luuk](https://discuss.elastic.co/u/luuk)\
**Replies:** 3\
**Last updated:** [January 19, 2016, 4:04pm UTC](https://discuss.elastic.co/t/logstash-drop-newyears-eve/38859 "2016-01-19T16:04:50Z")

</div>

hey all, on the night of 31-12 to 1-1 i had an insane log drop on my ELK-stack cluster. the cluster exists of 2 elasticsearch clusters 8GB memory each and 1 logstash server 4gb memory. they are recieving syslog messa…

---

## [Disabling swapiness](https://discuss.elastic.co/t/disabling-swapiness/29835)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 3\
**Last updated:** [October 28, 2015, 9:33pm UTC](https://discuss.elastic.co/t/disabling-swapiness/29835 "2015-10-28T21:33:16Z")

</div>

Hi All, All my PROD nodes are dedicated ES servers each and running under elasticsearch user do I need to disable swapiness in order to prevent OOM killer issues? Thanks, phani

---

## [Elasticsearch as vector db](https://discuss.elastic.co/t/elasticsearch-as-vector-db/349192)

<div class="topic-metadata">

**Author:** [@Alexander\_Gamanyuk1](https://discuss.elastic.co/u/Alexander_Gamanyuk1)\
**Replies:** 2\
**Last updated:** [December 13, 2023, 9:04am UTC](https://discuss.elastic.co/t/elasticsearch-as-vector-db/349192 "2023-12-13T09:04:05Z")

</div>

I've been using Elasticsearch since early 2010. We have multiple self-hosted clusters with a few terabytes of data, used for search, analytics, and other use cases. But recently, we started building Retrieval Augmented …

---

## [Kibana Table visualization for different weeks,showing reports for current date](https://discuss.elastic.co/t/kibana-table-visualization-for-different-weeks-showing-reports-for-current-date/311485)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 2\
**Last updated:** [August 16, 2022, 2:34pm UTC](https://discuss.elastic.co/t/kibana-table-visualization-for-different-weeks-showing-reports-for-current-date/311485 "2022-08-16T14:34:45Z")

</div>

Hello All, I'm not sure how this can be achieved through kibana table visualization,I want to display the converter details in accordance to week wise and the date displayed should always be current date. KW-calendar …

---

## [Show multiple values in same table cell / any other field](https://discuss.elastic.co/t/show-multiple-values-in-same-table-cell-any-other-field/293291)

<div class="topic-metadata">

**Author:** [@McCasian](https://discuss.elastic.co/u/McCasian)\
**Replies:** 2\
**Last updated:** [January 14, 2022, 10:16pm UTC](https://discuss.elastic.co/t/show-multiple-values-in-same-table-cell-any-other-field/293291 "2022-01-14T22:16:48Z")

</div>

Hello everyone, I have to show Total RAM Capacity and Total Ram Capacity WS(Without Spare), and I have this for all other resources (Storage, CPU, etc.). Considering this, I would avoid making a very large table, but ra…

---

## [Could you delete my account?](https://discuss.elastic.co/t/could-you-delete-my-account/282193)

<div class="topic-metadata">

**Author:** [@anon89617342](https://discuss.elastic.co/u/anon89617342)\
**Replies:** 2\
**Last updated:** [August 23, 2021, 11:10am UTC](https://discuss.elastic.co/t/could-you-delete-my-account/282193 "2021-08-23T11:10:10Z")

</div>

I don't need this account anymore and I would like to delete it.

---

## [Bazel build artifacts stored in /tmp by default?](https://discuss.elastic.co/t/bazel-build-artifacts-stored-in-tmp-by-default/281814)

<div class="topic-metadata">

**Author:** [@GavinAnderegg](https://discuss.elastic.co/u/GavinAnderegg)\
**Replies:** 2\
**Last updated:** [August 20, 2021, 8:46pm UTC](https://discuss.elastic.co/t/bazel-build-artifacts-stored-in-tmp-by-default/281814 "2021-08-20T20:46:35Z")

</div>

Hi! I'm working on a custom Kibana plugin for a client, and am currently using Elastic Stack 7.13. One trouble that I've been running into is that I often hit the error Error: Cannot find module '@kbn/config-schema' eve…

---

## [Sort/Toggle Detection Rules by Severity or Risk Score](https://discuss.elastic.co/t/sort-toggle-detection-rules-by-severity-or-risk-score/276064)

<div class="topic-metadata">

**Author:** [@scanlan](https://discuss.elastic.co/u/scanlan)\
**Replies:** 2\
**Last updated:** [June 22, 2021, 5:48pm UTC](https://discuss.elastic.co/t/sort-toggle-detection-rules-by-severity-or-risk-score/276064 "2021-06-22T17:48:30Z")

</div>

Is it possible to sort detection rules by risk score or severity? I would like to only enable rules above a certain severity/risk score. What is the best way to do this?

---

## [CCR: deleted follower index without unfollow](https://discuss.elastic.co/t/ccr-deleted-follower-index-without-unfollow/245548)

<div class="topic-metadata">

**Author:** [@pravinpr](https://discuss.elastic.co/u/pravinpr)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 9:04am UTC](https://discuss.elastic.co/t/ccr-deleted-follower-index-without-unfollow/245548 "2020-08-20T09:04:30Z")

</div>

Hi, I have deleted an index on follower cluster without unfollowing it. I need to create a follower with same index name. However, unable to do that. Can you please suggest?

---

## [How to dynamically disable EuiButton in Elastic UI](https://discuss.elastic.co/t/how-to-dynamically-disable-euibutton-in-elastic-ui/229737)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 2\
**Last updated:** [April 25, 2020, 3:18pm UTC](https://discuss.elastic.co/t/how-to-dynamically-disable-euibutton-in-elastic-ui/229737 "2020-04-25T15:18:18Z")

</div>

I'm new to Elastic UI and React. Can you tell me how to dynamically disable a EuiButton? I know for a regular React button you can do it by passing the state of the button like the following: \<button disabled={!this.sta…

---

## [Scripted Fields with multiple fields](https://discuss.elastic.co/t/scripted-fields-with-multiple-fields/203570)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 4:54pm UTC](https://discuss.elastic.co/t/scripted-fields-with-multiple-fields/203570 "2019-10-15T16:54:10Z")

</div>

Hi everyone! I have the following dataframe grouped by field num1: I'm trying to create a Scripted Field which can tell me which num1 has both suffices dn and mt. Is that possible? I mean can I work with two differe…

---

## [Issue with HTTP Poller when using headers - invalid url](https://discuss.elastic.co/t/issue-with-http-poller-when-using-headers-invalid-url/201549)

<div class="topic-metadata">

**Author:** [@Sketchy](https://discuss.elastic.co/u/Sketchy)\
**Replies:** 2\
**Last updated:** [October 1, 2019, 3:41am UTC](https://discuss.elastic.co/t/issue-with-http-poller-when-using-headers-invalid-url/201549 "2019-10-01T03:41:50Z")

</div>

Having trouble getting http\_poller to work querying an API, as soon as I try adding headers it starts failing with Invalid URL without any other details as to why its failing. There is little documentation on using heade…

---

## [Dynamically generate watch actions using Painless to support multiple actions?](https://discuss.elastic.co/t/dynamically-generate-watch-actions-using-painless-to-support-multiple-actions/193527)

<div class="topic-metadata">

**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\
**Replies:** 2\
**Last updated:** [August 5, 2019, 9:12am UTC](https://discuss.elastic.co/t/dynamically-generate-watch-actions-using-painless-to-support-multiple-actions/193527 "2019-08-05T09:12:46Z")

</div>

Yet another rehash of https://discuss.elastic.co/t/multiple-actions-in-the-watcher-yet/136925, I am also aware of the workaround with Logstash, however, I would be interested in a solution for this limitation and would l…

---

## [Elasticsearch Node failed to send join request to master](https://discuss.elastic.co/t/elasticsearch-node-failed-to-send-join-request-to-master/193009)

<div class="topic-metadata">

**Author:** [@xiang-liu-exa](https://discuss.elastic.co/u/xiang-liu-exa)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 3:34pm UTC](https://discuss.elastic.co/t/elasticsearch-node-failed-to-send-join-request-to-master/193009 "2019-07-31T15:34:28Z")

</div>

Elasticsearch version 6.2.4 Cluster: 46 Nodes, Master: host1-0 Cluster is running for 4 days without any problem. About 10 hour ago, one data Node: host9-0 fail to ping master After that, host9-0 keeps send join requ…

---

## [Kibana not loading in ECE](https://discuss.elastic.co/t/kibana-not-loading-in-ece/148023)

<div class="topic-metadata">

**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\
**Replies:** 2\
**Last updated:** [September 24, 2018, 9:13pm UTC](https://discuss.elastic.co/t/kibana-not-loading-in-ece/148023 "2018-09-24T21:13:30Z")

</div>

Hi, I have a 6.4.x elasticsearch cluster which I want to monitor and it's configured to send metrics to another 6.4.x cluster. Looks like the metrics are being sent successfully and the shards are Green on looking at th…

---

## [Configure authentication with active directory](https://discuss.elastic.co/t/configure-authentication-with-active-directory/120667)

<div class="topic-metadata">

**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\
**Replies:** 2\
**Last updated:** [February 21, 2018, 7:52am UTC](https://discuss.elastic.co/t/configure-authentication-with-active-directory/120667 "2018-02-21T07:52:46Z")

</div>

Hello, I configured my active directory in Elasticsearch.yml like this: xpack: security: authc: realms: native: type: native order: 0 active\_directory: type: activ…

---

## [Discover processes to get metrics from?](https://discuss.elastic.co/t/discover-processes-to-get-metrics-from/81320)

<div class="topic-metadata">

**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\
**Replies:** 2\
**Last updated:** [April 6, 2017, 11:35am UTC](https://discuss.elastic.co/t/discover-processes-to-get-metrics-from/81320 "2017-04-06T11:35:35Z")

</div>

Is there anything in metricbeat (or beat in general) similar to prometheus that allows for pulling metrics from services discovered via consul? If not, how do people get metrics out of their dynamic services? Or is beats…

---

## [How can I download elastic?](https://discuss.elastic.co/t/how-can-i-download-elastic/34889)

<div class="topic-metadata">

**Author:** [@sihuo](https://discuss.elastic.co/u/sihuo)\
**Replies:** 2\
**Last updated:** [November 19, 2015, 6:45am UTC](https://discuss.elastic.co/t/how-can-i-download-elastic/34889 "2015-11-19T06:45:01Z")

</div>

I am registered today

---

## [Most common adjacent words](https://discuss.elastic.co/t/most-common-adjacent-words/22319)

<div class="topic-metadata">

**Author:** [@jarib](https://discuss.elastic.co/u/jarib)\
**Replies:** 2\
**Last updated:** [February 23, 2015, 11:10am UTC](https://discuss.elastic.co/t/most-common-adjacent-words/22319 "2015-02-23T11:10:50Z")

</div>

Hello, Does elasticsearch have the ability to return the most common \*adjacent\* words for a given search query? That is, given some documents: {"text": "To be or not to be, that is the question"} {"text": "We…

---

## [Bulk http api broken?](https://discuss.elastic.co/t/bulk-http-api-broken/16791)

<div class="topic-metadata">

**Author:** [@Isaac\_Dooley\_2](https://discuss.elastic.co/u/Isaac_Dooley_2)\
**Replies:** 2\
**Last updated:** [April 3, 2014, 2:51pm UTC](https://discuss.elastic.co/t/bulk-http-api-broken/16791 "2014-04-03T14:51:51Z")

</div>

I think I've found an intermittent bug for bulk updates over HTTP in Elasticsearch. It seems to happen on versions 0.90.11, 0.90.12, 1.0.1 when running a single server instance (not a cluster) on linux. I do a bul…

---

## [Error running Elastic Maps behind proxy](https://discuss.elastic.co/t/error-running-elastic-maps-behind-proxy/350082)

<div class="topic-metadata">

**Author:** [@m.hanna](https://discuss.elastic.co/u/m.hanna)\
**Replies:** 7\
**Last updated:** [January 3, 2024, 4:52pm UTC](https://discuss.elastic.co/t/error-running-elastic-maps-behind-proxy/350082 "2024-01-03T16:52:38Z")

</div>

I am trying to run an EMS server on a disconnected network behind an Nginx reverse-proxy in a docker swarm. I am able to start EMS up and it looks to connect to elasticsearch without the basePath setting. As soon as I a…

---

## [I need add field, and do value counter, how do it?](https://discuss.elastic.co/t/i-need-add-field-and-do-value-counter-how-do-it/297005)

<div class="topic-metadata">

**Author:** [@VK345](https://discuss.elastic.co/u/VK345)\
**Replies:** 7\
**Last updated:** [February 12, 2022, 12:57pm UTC](https://discuss.elastic.co/t/i-need-add-field-and-do-value-counter-how-do-it/297005 "2022-02-12T12:57:28Z")

</div>

My config is: ====================================== input { file{ path =\> "/home/elk/domains/rf\_domains\_test" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } }…

---

## [Indexing User-Agent data](https://discuss.elastic.co/t/indexing-user-agent-data/231972)

<div class="topic-metadata">

**Author:** [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\
**Replies:** 7\
**Last updated:** [May 30, 2020, 3:12am UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972 "2020-05-30T03:12:32Z")

</div>

Hi Team, I have below user-agent column in Elastic doc tag.http@user\_agent - Mozilla/5.0 (Macintosh; Intel Mac OS X 10\_14\_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36 I want to spl…

---

## [Bottleneck Data Pipeline](https://discuss.elastic.co/t/bottleneck-data-pipeline/160756)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 7\
**Last updated:** [December 15, 2018, 12:00pm UTC](https://discuss.elastic.co/t/bottleneck-data-pipeline/160756 "2018-12-15T12:00:34Z")

</div>

I have a csv with more than 300kr of rows per hr. I use filebeat to ship data into elasticsearch. My problem is that, the sending of data is very slow like 2k of rows per 3-5mins only and sometimes it stops for a while. …

---

## [Unable to authenticate user \[elastic\] for REST request \[/\]](https://discuss.elastic.co/t/unable-to-authenticate-user-elastic-for-rest-request/343393)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 1\
**Last updated:** [September 19, 2023, 8:14pm UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-elastic-for-rest-request/343393 "2023-09-19T20:14:00Z")

</div>

Hello, I'm trying to configure logs for my Elasticsearch cluster, by following this: and even though i set verification\_mode to none, i still getting 401 {"log.level":"error","@timestamp":"2023-09-19T19:13:02.623Z…

---

## [.async\_search Index Problem](https://discuss.elastic.co/t/async-search-index-problem/275628)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 1\
**Last updated:** [June 17, 2021, 8:15am UTC](https://discuss.elastic.co/t/async-search-index-problem/275628 "2021-06-17T08:15:23Z")

</div>

Hi, Today we had a big crash in our Netapp cabinet and our elastic cluster went down After starting up all our indices appeared to be ok with the exception of this internal's elasticsearch index .async-search which is …

---

## [How to set the default Sort Field and Sort Order in App Search Reference UI](https://discuss.elastic.co/t/how-to-set-the-default-sort-field-and-sort-order-in-app-search-reference-ui/274973)

<div class="topic-metadata">

**Author:** [@anuragchoudhary01](https://discuss.elastic.co/u/anuragchoudhary01)\
**Replies:** 1\
**Last updated:** [June 7, 2021, 9:11am UTC](https://discuss.elastic.co/t/how-to-set-the-default-sort-field-and-sort-order-in-app-search-reference-ui/274973 "2021-06-07T09:11:20Z")

</div>

Hi Team, I have created the Search UI using the reference UI from app search, but in this, the default Sort Field is set to Relevance, I need to override this field with one of my fields as I need to see the data in the…

---

## [Unable to launch elasticsearch](https://discuss.elastic.co/t/unable-to-launch-elasticsearch/128050)

<div class="topic-metadata">

**Author:** [@a1cb1d2dbb857896bbf0](https://discuss.elastic.co/u/a1cb1d2dbb857896bbf0)\
**Replies:** 1\
**Last updated:** [April 14, 2018, 4:57pm UTC](https://discuss.elastic.co/t/unable-to-launch-elasticsearch/128050 "2018-04-14T16:57:34Z")

</div>

$ /opt/elasticsearch-6.2.3/bin/elasticsearch Exception in thread "main" java.nio.file.AccessDeniedException: /opt/elasticsearch-6.2.3/config/jvm.options at sun.nio.fs.UnixException.translateToIOException(UnixException.…

---

## [Kibana的dashboard支持dsl, 但是不支持dsl的aggs？](https://discuss.elastic.co/t/kibana-dashboard-dsl-dsl-aggs/123219)

<div class="topic-metadata">

**Author:** [@Zh\_C](https://discuss.elastic.co/u/Zh_C)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 8:22am UTC](https://discuss.elastic.co/t/kibana-dashboard-dsl-dsl-aggs/123219 "2018-04-10T08:22:53Z")

</div>

The dsl: { "aggs": { "group": { "terms": { "field": "agentName" }, "aggs": { "group\_docs": { "top\_hits": { …

---

## [Logstash java api](https://discuss.elastic.co/t/logstash-java-api/73323)

<div class="topic-metadata">

**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\
**Replies:** 1\
**Last updated:** [January 31, 2017, 8:22am UTC](https://discuss.elastic.co/t/logstash-java-api/73323 "2017-01-31T08:22:34Z")

</div>

Is there a java api i can use with logstash? My Main goal is to insert a large CSV object into ES. I wrote a java program that inserts an index into ES. I read logstash can import CSV file very easily. Is there a…

---

## [Prefix Query for People's names/Lookup](https://discuss.elastic.co/t/prefix-query-for-peoples-names-lookup/59586)

<div class="topic-metadata">

**Author:** [@simi](https://discuss.elastic.co/u/simi)\
**Replies:** 1\
**Last updated:** [September 1, 2016, 7:29pm UTC](https://discuss.elastic.co/t/prefix-query-for-peoples-names-lookup/59586 "2016-09-01T19:29:45Z")

</div>

Hello all, First off, I need to say that I'm VERY new to both ElasticSearch and Lucene in general - so I apologize if this is a basic question. I'm struggling with a search question that is going against people's name…

---

## [Logstash local plugin Install Issues](https://discuss.elastic.co/t/logstash-local-plugin-install-issues/44006)

<div class="topic-metadata">

**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\
**Replies:** 1\
**Last updated:** [May 28, 2016, 6:12am UTC](https://discuss.elastic.co/t/logstash-local-plugin-install-issues/44006 "2016-05-28T06:12:46Z")

</div>

I would really appreciate some input regarding how to install locally manufactured plugins. There seems to be a bit of a black hole in this area where Logstash (testing with 2.2) is telling me that the plugin installed o…

---

## [Need help: Analysis ICU plugin elasticSearch 2.2 java api problem](https://discuss.elastic.co/t/need-help-analysis-icu-plugin-elasticsearch-2-2-java-api-problem/42566)

<div class="topic-metadata">

**Author:** [@noha5](https://discuss.elastic.co/u/noha5)\
**Replies:** 1\
**Last updated:** [February 24, 2016, 10:35am UTC](https://discuss.elastic.co/t/need-help-analysis-icu-plugin-elasticsearch-2-2-java-api-problem/42566 "2016-02-24T10:35:41Z")

</div>

Hi, I use elasticSearch 2.2 through Java Api. I need use icu\_collation filter from Analysis ICU plugin. I included Analysis ICU plugin library, but still get error: java.lang.IllegalArgumentException: Unknown TokenFilter…

---

## ["No Added Sugar" and "Added Sugar" term match](https://discuss.elastic.co/t/no-added-sugar-and-added-sugar-term-match/267730)

<div class="topic-metadata">

**Author:** [@Alan88](https://discuss.elastic.co/u/Alan88)\
**Replies:** 3\
**Last updated:** [March 19, 2021, 3:17pm UTC](https://discuss.elastic.co/t/no-added-sugar-and-added-sugar-term-match/267730 "2021-03-19T15:17:01Z")

</div>

I'm looking for a way to tell elasticsearch that "no added sugar" and "added sugar" are separate phrases and should be indexed accordingly. I do not want them to conflate or conflict with each other. Docs example: "Col…

[Previous page](https://discuss.elastic.co/top.md?page=1627&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1629&per_page=50&period=all)
