# Top **URL:** https://discuss.elastic.co/top.md?page=1629&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1630 --- ## [Elasticsearch and Kibana version 6 and 7 Windows 2019 support](https://discuss.elastic.co/t/elasticsearch-and-kibana-version-6-and-7-windows-2019-support/192844)
**Author:** [@ropal](https://discuss.elastic.co/u/ropal)\ **Replies:** 1\ **Last updated:** [August 5, 2019, 5:08am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-version-6-and-7-windows-2019-support/192844 "2019-08-05T05:08:45Z")
I could see from the support matrix that ES version starting from 5.5.x is supported on Windows Server 2016. Just wanted to know if it is supported in Windows Server 2019 as well? Are there any potential issues that were… --- ## [Logstash if statement not working correctly](https://discuss.elastic.co/t/logstash-if-statement-not-working-correctly/37919)
**Author:** [@davinders](https://discuss.elastic.co/u/davinders)\ **Replies:** 0\ **Last updated:** [December 24, 2015, 8:07am UTC](https://discuss.elastic.co/t/logstash-if-statement-not-working-correctly/37919 "2015-12-24T08:07:28Z")
I am trying to restrict content/data to go to elastic search if grok not able to parse data in input.log but seems if "\_grokparsefailure" not in \[tags\] not working. I am parsing some input log and matching some pattern… --- ## [What exactly does "size" mean for a data stream in Kibana](https://discuss.elastic.co/t/what-exactly-does-size-mean-for-a-data-stream-in-kibana/308982)
**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 1:28pm UTC](https://discuss.elastic.co/t/what-exactly-does-size-mean-for-a-data-stream-in-kibana/308982 "2022-07-07T13:28:13Z")
Hey all. I've got a fleet managed agent which is, via the kubernetes integration (and others), creating data streams. I'm trying to understand what the size column is telling me and I don't seem to be able to find any do… --- ## [Use an Analyzer within a painless script and access the produced terms](https://discuss.elastic.co/t/use-an-analyzer-within-a-painless-script-and-access-the-produced-terms/283474)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 4\ **Last updated:** [September 7, 2021, 5:04pm UTC](https://discuss.elastic.co/t/use-an-analyzer-within-a-painless-script-and-access-the-produced-terms/283474 "2021-09-07T17:04:50Z")
Hi All, I'm trying to find out if something is possible or not within Painless. I'd like to use the English analyzer within a Painless script. I'd then like to use the same painless script to iterate over the created t… --- ## [Filter out the same event and send to different outputs](https://discuss.elastic.co/t/filter-out-the-same-event-and-send-to-different-outputs/281611)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 4\ **Last updated:** [August 17, 2021, 2:40pm UTC](https://discuss.elastic.co/t/filter-out-the-same-event-and-send-to-different-outputs/281611 "2021-08-17T14:40:24Z")
What I want is, the event i get from the Beats by listening to the port 5044, to send a filtered version of the event to one output and send a differently filtered version to the other output. That is the general questi… --- ## [Winlogbeat to Kibana api/failed](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530)
**Author:** [@Coeus.IT](https://discuss.elastic.co/u/Coeus.IT)\ **Replies:** 4\ **Last updated:** [April 20, 2021, 5:24am UTC](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530 "2021-04-20T05:24:21Z")
Hi, I have setup a Ubuntu server for centralized logs. Installed: Elasticsearch Kibana Logstash Now, when I wants to run ".\\winlogbeat.exe setup --dashboard" from Windows 10 machine, it shows "error connecting to k… --- ## [Using Nest, queries returning with 0 hits](https://discuss.elastic.co/t/using-nest-queries-returning-with-0-hits/267037)
**Author:** [@asimsek99](https://discuss.elastic.co/u/asimsek99)\ **Replies:** 4\ **Last updated:** [March 21, 2021, 9:22am UTC](https://discuss.elastic.co/t/using-nest-queries-returning-with-0-hits/267037 "2021-03-21T09:22:30Z")
Hey hey, Env: .net Core, Nest, Elasticsearch I had my queries running with using Logstash and Elastic with AWS. Decided to not use logstash and move to cloud.elastic.co. Trying to migrate the current queries to cloud.… --- ## [Need help to mask XML elements](https://discuss.elastic.co/t/need-help-to-mask-xml-elements/251354)
**Author:** [@tgkumarmca](https://discuss.elastic.co/u/tgkumarmca)\ **Replies:** 4\ **Last updated:** [October 12, 2020, 8:28pm UTC](https://discuss.elastic.co/t/need-help-to-mask-xml-elements/251354 "2020-10-12T20:28:56Z")
Hello, I'm actually stuck to perform the masking! I would request you to help in this regard I need to perform masking of some sensitive data(like card number, account number, etc) from the input XML message. I am cur… --- ## [Bar chart based on cumulative function](https://discuss.elastic.co/t/bar-chart-based-on-cumulative-function/212355)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 4\ **Last updated:** [December 18, 2019, 6:01pm UTC](https://discuss.elastic.co/t/bar-chart-based-on-cumulative-function/212355 "2019-12-18T18:01:29Z")
Hello all, I have an index "consump" having as fields : category, timestamp, costs. I want to display in Kibana Canvas, a bar chart exhibiting cumulative sum(costs). In other cases I used "timelion" for that like this… --- ## [Linkedin OAuth 2.0 settings using elasticsearch](https://discuss.elastic.co/t/linkedin-oauth-2-0-settings-using-elasticsearch/192597)
**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\ **Replies:** 4\ **Last updated:** [August 1, 2019, 8:26pm UTC](https://discuss.elastic.co/t/linkedin-oauth-2-0-settings-using-elasticsearch/192597 "2019-08-01T20:26:32Z")
Hi All, I am trying to access the Linkedin content via api using elasticsearch. I have created a linkedin app and trying to give the access and redirect url to http://localhost:9200. after click on the allow button, … --- ## [File not closed with JDBC input and CSV output](https://discuss.elastic.co/t/file-not-closed-with-jdbc-input-and-csv-output/180566)
**Author:** [@romariol](https://discuss.elastic.co/u/romariol)\ **Replies:** 4\ **Last updated:** [May 13, 2019, 7:42am UTC](https://discuss.elastic.co/t/file-not-closed-with-jdbc-input-and-csv-output/180566 "2019-05-13T07:42:55Z")
Hi, I'm using a JDBC input to fetch data from a specific table. I want to put this data in a new file. For this I'm using the CSV output. What I'm seeing, is that the file remains open. I want this file to be closed, be… --- ## [Hard code metadata values in ldap realm configuration](https://discuss.elastic.co/t/hard-code-metadata-values-in-ldap-realm-configuration/119678)
**Author:** [@jchannon](https://discuss.elastic.co/u/jchannon)\ **Replies:** 4\ **Last updated:** [February 14, 2018, 12:31pm UTC](https://discuss.elastic.co/t/hard-code-metadata-values-in-ldap-realm-configuration/119678 "2018-02-14T12:31:05Z")
In the LDAP realm configuration you can set the metadata value to be an ldap attribute that the realm uses to populate the user's metadata property. Is there a way to hardcode a value for metadata for example if I didn'… --- ## [Logstash filter conditions does not work,how to get The real user ipaddress from access log of Apache?](https://discuss.elastic.co/t/logstash-filter-conditions-does-not-work-how-to-get-the-real-user-ipaddress-from-access-log-of-apache/101091)
**Author:** [@jagerzhang](https://discuss.elastic.co/u/jagerzhang)\ **Replies:** 4\ **Last updated:** [September 20, 2017, 7:51am UTC](https://discuss.elastic.co/t/logstash-filter-conditions-does-not-work-how-to-get-the-real-user-ipaddress-from-access-log-of-apache/101091 "2017-09-20T07:51:52Z")
Logstash filter conditions does not work， as follows： filter { json { source =\> "message" } if "%{client\_ip}" == "-" { mutate { remove\_field =\> "client\_ip"… --- ## [Searching specific fields](https://discuss.elastic.co/t/searching-specific-fields/100612)
**Author:** [@tcouto](https://discuss.elastic.co/u/tcouto)\ **Replies:** 4\ **Last updated:** [September 15, 2017, 6:46pm UTC](https://discuss.elastic.co/t/searching-specific-fields/100612 "2017-09-15T18:46:01Z")
I have a document with a field called request which stores the path component of the URL. I'd like to find all documents where field contains a substring. For example, consider a document containing the following request… --- ## [A question about Winlogbeat configuration](https://discuss.elastic.co/t/a-question-about-winlogbeat-configuration/98050)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 4\ **Last updated:** [August 23, 2017, 12:29pm UTC](https://discuss.elastic.co/t/a-question-about-winlogbeat-configuration/98050 "2017-08-23T12:29:30Z")
Hello. If I like below diagram: Winlogbeat -\> Logstash -\> Elasticsearch -\> Kibana Then in Winlogbeat configuration I must set both Logstash and Elasticsearch servers? Thank you. --- ## [Kibana@5.5.0 Running "esvm:test" (esvm) task](https://discuss.elastic.co/t/kibana-5-5-0-running-esvm-test-esvm-task/95436)
**Author:** [@xiaopeng\_zhang](https://discuss.elastic.co/u/xiaopeng_zhang)\ **Replies:** 4\ **Last updated:** [August 4, 2017, 3:46am UTC](https://discuss.elastic.co/t/kibana-5-5-0-running-esvm-test-esvm-task/95436 "2017-08-04T03:46:32Z")
because Poor computer configuration. i want to use the option : ES\_JAVA\_OPTS="-Xms512m -Xmx512m" but the esvm seems to redownload the es everytime .so the option can’t work because it was override. Is there any opt… --- ## [Indexing rate fluctuates](https://discuss.elastic.co/t/indexing-rate-fluctuates/92167)
**Author:** [@hding](https://discuss.elastic.co/u/hding)\ **Replies:** 4\ **Last updated:** [July 6, 2017, 9:43pm UTC](https://discuss.elastic.co/t/indexing-rate-fluctuates/92167 "2017-07-06T21:43:07Z")
Why does my indexing rate fluctuate between 4k doc/sec to 7k doc/sec? And it does not fluctuate frequently. It keeps at 7k doc/sec for a few minutes, then drops for a few minutes, then goes up again. I tried to disab… --- ## [Replica shards are sometimes not created](https://discuss.elastic.co/t/replica-shards-are-sometimes-not-created/41451)
**Author:** [@angelsmile](https://discuss.elastic.co/u/angelsmile)\ **Replies:** 4\ **Last updated:** [February 18, 2016, 11:28pm UTC](https://discuss.elastic.co/t/replica-shards-are-sometimes-not-created/41451 "2016-02-18T23:28:38Z")
We are running elasticsearch 1.7.1 with two nodes. Node 2 was added recently. Number of primary shards has been 5 from beginning and that of replica was set to 1 recently when the 2nd node was added. elasticsearch confi… --- ## [Does something like "upsert" exist in ES?](https://discuss.elastic.co/t/does-something-like-upsert-exist-in-es/7954)
**Author:** [@Mr\_Johnsson](https://discuss.elastic.co/u/Mr_Johnsson)\ **Replies:** 4\ **Last updated:** [June 7, 2012, 11:53pm UTC](https://discuss.elastic.co/t/does-something-like-upsert-exist-in-es/7954 "2012-06-07T23:53:49Z")
Is it possible to do an insert if the document/data doesn't exist and on exist just update it? Exactly as the mongodb upsert feature. Ref: http://www.mongodb.org/display/DOCS/Updating#Updating-{{upserts}} --- ## [Info about the free ELK tools](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044)
**Author:** [@sonujatav35](https://discuss.elastic.co/u/sonujatav35)\ **Replies:** 6\ **Last updated:** [June 14, 2023, 8:57am UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044 "2023-06-14T08:57:36Z")
Hi Elasticsearch Community, I need some advice, I am creating a New ELK stack where i am going to store oracle log in ES and by using the logstash. I would like get the some information if i use the below the additional… --- ## [High Availability for Kibana Console application](https://discuss.elastic.co/t/high-availability-for-kibana-console-application/273751)
**Author:** [@ggio](https://discuss.elastic.co/u/ggio)\ **Replies:** 6\ **Last updated:** [May 26, 2021, 8:27pm UTC](https://discuss.elastic.co/t/high-availability-for-kibana-console-application/273751 "2021-05-26T20:27:38Z")
Hi, Kibana currently can be configured to connect to multiple Elasticsearch nodes in the same cluster. I discovered that Console application is limited to connecting only on the first host defined in elasticsearch.host… --- ## [Watcher webhook body How to build a json format?](https://discuss.elastic.co/t/watcher-webhook-body-how-to-build-a-json-format/231434)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [May 8, 2020, 8:21am UTC](https://discuss.elastic.co/t/watcher-webhook-body-how-to-build-a-json-format/231434 "2020-05-08T08:21:28Z")
"actions": { "mywebhook": { "webhook": { "method": "POST", "url": "https://xxxxx, "headers": { "Content-Type": "application/json" }, "body": { … --- ## [Unable to test pipeline in logstash](https://discuss.elastic.co/t/unable-to-test-pipeline-in-logstash/120313)
**Author:** [@\_PSPKFan](https://discuss.elastic.co/u/_PSPKFan)\ **Replies:** 1\ **Last updated:** [February 19, 2018, 8:56am UTC](https://discuss.elastic.co/t/unable-to-test-pipeline-in-logstash/120313 "2018-02-19T08:56:24Z")
I'm new to ELK stack. I'm able to install and run the logstash, Elasticsearch, Kibana services individually. But when I'm trying to test pipelining in logstatsh by running below command bin/logstash -f ..LogstashPipelin… --- ## [ES5.X 在只有两个nodes时查询性能还不如一个node](https://discuss.elastic.co/t/es5-x-nodes-node/73780)
**Author:** [@kevin-tang-rs](https://discuss.elastic.co/u/kevin-tang-rs)\ **Replies:** 1\ **Last updated:** [March 20, 2017, 11:27pm UTC](https://discuss.elastic.co/t/es5-x-nodes-node/73780 "2017-03-20T23:27:49Z")
配置信息： 版本：ES 5.0.1 或者ES5.1.2 ; replic: 1; shard:3; index:30，每个index的大小是4G左右，总共约120G数据量。 操作： 创建两个nodes的集群，通过kibana进行查询的时候，发现两个nodes主机上的IO是先从其中一个节点不固定的查询，然后过了几分钟后，另一个节点上才会有相应的IO查询。 结果： 导致两个节点的集群查询能力不如一个节点的时候… --- ## [Write failure handling in elasticsearch](https://discuss.elastic.co/t/write-failure-handling-in-elasticsearch/63270)
**Author:** [@Vikas\_Kumar](https://discuss.elastic.co/u/Vikas_Kumar)\ **Replies:** 1\ **Last updated:** [October 19, 2016, 1:22pm UTC](https://discuss.elastic.co/t/write-failure-handling-in-elasticsearch/63270 "2016-10-19T13:22:51Z")
How are write failures handled in elasticsearch, particularly cases where a write op succeeds on primary, but one or more replicas fail to respond (due to network or any other issue)? Will the write/update stay on repl… --- ## [Couldn't get HTTP POST content](https://discuss.elastic.co/t/couldnt-get-http-post-content/56684)
**Author:** [@junhuih](https://discuss.elastic.co/u/junhuih)\ **Replies:** 1\ **Last updated:** [July 29, 2016, 12:11am UTC](https://discuss.elastic.co/t/couldnt-get-http-post-content/56684 "2016-07-29T00:11:11Z")
when i'm trying to use packetbeat, but couldn't get the http post content, from the official demo site, it have the post content. not sure how to set it up, anybody can help? tried open following: send\_all\_headers:… --- ## [Unknown setting foreground](https://discuss.elastic.co/t/unknown-setting-foreground/42279)
**Author:** [@sreeramjayan](https://discuss.elastic.co/u/sreeramjayan)\ **Replies:** 1\ **Last updated:** [February 19, 2016, 10:02pm UTC](https://discuss.elastic.co/t/unknown-setting-foreground/42279 "2016-02-19T22:02:48Z")
Hello, I am trying to build the elastic search source, for the first time, and receive the following error: Exception in thread "main" java.lang.IllegalArgumentException: unknown setting \[foreground\] This is happenin… --- ## [Logstash: how to use multiple geoip filter in one message](https://discuss.elastic.co/t/logstash-how-to-use-multiple-geoip-filter-in-one-message/36248)
**Author:** [@sumeet\_dembra](https://discuss.elastic.co/u/sumeet_dembra)\ **Replies:** 1\ **Last updated:** [December 3, 2015, 7:19am UTC](https://discuss.elastic.co/t/logstash-how-to-use-multiple-geoip-filter-in-one-message/36248 "2015-12-03T07:19:48Z")
Hi, I am using two geoip filters for one message. But the output shows geoip fields only for first geoip filter. Here is the snippet for filters: filter { grep { match =\> \["m… --- ## [Defining a useful mapping for indexing Office docs on network drives](https://discuss.elastic.co/t/defining-a-useful-mapping-for-indexing-office-docs-on-network-drives/14105)
**Author:** [@Rian\_Stockbower](https://discuss.elastic.co/u/Rian_Stockbower)\ **Replies:** 1\ **Last updated:** [October 28, 2013, 10:05am UTC](https://discuss.elastic.co/t/defining-a-useful-mapping-for-indexing-office-docs-on-network-drives/14105 "2013-10-28T10:05:13Z")
I'm indexing MS Office, PDFs, and plain text files on a network share drive. In small scale testing, I've successfully used the fsriver and mapper-attachments plugin to index and search the files. The mapping was c… --- ## [Elastic 8.7.0 Error in Discover tab](https://discuss.elastic.co/t/elastic-8-7-0-error-in-discover-tab/332329)
**Author:** [@afmiller1](https://discuss.elastic.co/u/afmiller1)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 10:00pm UTC](https://discuss.elastic.co/t/elastic-8-7-0-error-in-discover-tab/332329 "2023-05-03T22:00:03Z")
Have a single node cluster up and trying to use metricbeats locally and running into this error. I haven't come across it before. What is actually broke? This is when I go into the discover tab under metricbeat and try t… --- ## [Create configuration with minimum 2 master nodes](https://discuss.elastic.co/t/create-configuration-with-minimum-2-master-nodes/273501)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 10:51am UTC](https://discuss.elastic.co/t/create-configuration-with-minimum-2-master-nodes/273501 "2021-05-20T10:51:48Z")
I want (via ECK) to create a setup where a) there will be three nodes in total having all roles b) there will be a MINIMUM of 2 master nodes Is the following configuration on the Elasticsearch resource legit? apiVers… --- ## [Kibana\[7.3\] load custom vector shape from http server](https://discuss.elastic.co/t/kibana-7-3-load-custom-vector-shape-from-http-server/194558)
**Author:** [@Scorpion21](https://discuss.elastic.co/u/Scorpion21)\ **Replies:** 3\ **Last updated:** [August 10, 2019, 5:24am UTC](https://discuss.elastic.co/t/kibana-7-3-load-custom-vector-shape-from-http-server/194558 "2019-08-10T05:24:33Z")
Hi There, I am trying to add a few vector shape files in geojson format to Kibana (running on ubuntu 18.04) Here are what I did: 1- set up a http server for my geojson files using: python3 -m http.server 8080 2- set … --- ## [Multisearch API in Elasticsearch v5 / v6 using Java Client](https://discuss.elastic.co/t/multisearch-api-in-elasticsearch-v5-v6-using-java-client/158243)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 8\ **Last updated:** [November 27, 2018, 12:42pm UTC](https://discuss.elastic.co/t/multisearch-api-in-elasticsearch-v5-v6-using-java-client/158243 "2018-11-27T12:42:26Z")
I'm currently upgrading our elasticsearch from v2.3.4 to v5.6 and then v6.x. I'm starting to use the RestHighLevelClient and want to execute a MultiSearchRequest. How can I do this RestHighLevelClient in v5? It looks li… --- ## [Finding Registry in Elk](https://discuss.elastic.co/t/finding-registry-in-elk/155086)
**Author:** [@Ralph\_Lawrence](https://discuss.elastic.co/u/Ralph_Lawrence)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 11:49pm UTC](https://discuss.elastic.co/t/finding-registry-in-elk/155086 "2018-11-01T23:49:03Z")
Is there a way registry events can be located in ELK using Winlogbeats for windows. event\_id does not seem to have a true representation. --- ## [How to convert String "date+time+tz" to timestamp](https://discuss.elastic.co/t/how-to-convert-string-date-time-tz-to-timestamp/115577)
**Author:** [@marouane](https://discuss.elastic.co/u/marouane)\ **Replies:** 3\ **Last updated:** [January 23, 2018, 11:32am UTC](https://discuss.elastic.co/t/how-to-convert-string-date-time-tz-to-timestamp/115577 "2018-01-23T11:32:34Z")
Hello every one, I want to replace 3 fields that contains string(date) , string(time) and string(tz) by a new field with date type that contains (date+time+tz) converted. { "query":{ "bool":{ "must\_not":{ … --- ## [Environment variable in Logstash](https://discuss.elastic.co/t/environment-variable-in-logstash/112978)
**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\ **Replies:** 3\ **Last updated:** [January 3, 2018, 12:29pm UTC](https://discuss.elastic.co/t/environment-variable-in-logstash/112978 "2018-01-03T12:29:12Z")
I have the following use case: I am capturing some data from ActiveMQ bus and Storing it in ElasticSearch via Logstash. I am capturing some data ("version number") via Kafka and storing it in ElasticSearch. This variab… --- ## [Prevent Elasticsearch from purging documents based on ttl](https://discuss.elastic.co/t/prevent-elasticsearch-from-purging-documents-based-on-ttl/93811)
**Author:** [@andiries](https://discuss.elastic.co/u/andiries)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 1:25pm UTC](https://discuss.elastic.co/t/prevent-elasticsearch-from-purging-documents-based-on-ttl/93811 "2017-07-21T13:25:45Z")
Hi, I'm having trouble with restoring data from an elasticsearch database that contains documents with a ttl of 2 days. A customer gave us the files forming the database. The documents in there are actually older than … --- ## [Customizing Kibana Dashboard](https://discuss.elastic.co/t/customizing-kibana-dashboard/92630)
**Author:** [@bhavna\_jha](https://discuss.elastic.co/u/bhavna_jha)\ **Replies:** 3\ **Last updated:** [July 11, 2017, 12:53pm UTC](https://discuss.elastic.co/t/customizing-kibana-dashboard/92630 "2017-07-11T12:53:31Z")
Hey, I want to customize my kibana dashboard according to the user logged in,how is that possible with kibana dashboards? --- ## [Elasticsearch Storage](https://discuss.elastic.co/t/elasticsearch-storage/85832)
**Author:** [@kevinc1029](https://discuss.elastic.co/u/kevinc1029)\ **Replies:** 3\ **Last updated:** [May 16, 2017, 8:57pm UTC](https://discuss.elastic.co/t/elasticsearch-storage/85832 "2017-05-16T20:57:29Z")
I'm new to Elasticsearch and have couple questions that I can't seem to find the answers to. Is there a way to configure Elasticsearch to compress or delete the logs after a certain number of days or when storage reac… --- ## [Can all occurrences of a shard be deleted?Can all occurrences of a shard (primary and replica(s)) be re-routed to same node?](https://discuss.elastic.co/t/can-all-occurrences-of-a-shard-be-deleted-can-all-occurrences-of-a-shard-primary-and-replica-s-be-re-routed-to-same-node/54966)
**Author:** [@Karthick\_Vinod\_L](https://discuss.elastic.co/u/Karthick_Vinod_L)\ **Replies:** 3\ **Last updated:** [July 7, 2016, 9:41pm UTC](https://discuss.elastic.co/t/can-all-occurrences-of-a-shard-be-deleted-can-all-occurrences-of-a-shard-primary-and-replica-s-be-re-routed-to-same-node/54966 "2016-07-07T21:41:02Z")
I want to delete all occurrences of a shard in the cluster. Primary as well as replicas. Is there a straight forward way to do it? If not, can multiple instances of same shards (primary and replica(s)) be re-routed to s… --- ## [Filter first then search](https://discuss.elastic.co/t/filter-first-then-search/16636)
**Author:** [@Max\_Ivanov](https://discuss.elastic.co/u/Max_Ivanov)\ **Replies:** 3\ **Last updated:** [April 18, 2014, 8:05pm UTC](https://discuss.elastic.co/t/filter-first-then-search/16636 "2014-04-18T20:05:35Z")
Gist below in short: I have 1000 documents, only one of them matches filter and all of them match text query. When I do filtered query the document is only found if I set large max\_expansions. The real data is tens… --- ## [Serialization issues on 0.90.3](https://discuss.elastic.co/t/serialization-issues-on-0-90-3/13236)
**Author:** [@robert\_3](https://discuss.elastic.co/u/robert_3)\ **Replies:** 8\ **Last updated:** [December 19, 2013, 5:19pm UTC](https://discuss.elastic.co/t/serialization-issues-on-0-90-3/13236 "2013-12-19T17:19:30Z")
Hi all, I booted up a brand new cluster, all running the same version of elasticsearch, with no cruft around from any previous clusters or anything. I'm seeing a lot of the following in my logs, shortly before nod… --- ## [Slow Log Duplicates](https://discuss.elastic.co/t/slow-log-duplicates/9809)
**Author:** [@Aaditi\_Sharma](https://discuss.elastic.co/u/Aaditi_Sharma)\ **Replies:** 3\ **Last updated:** [November 24, 2012, 4:38am UTC](https://discuss.elastic.co/t/slow-log-duplicates/9809 "2012-11-24T04:38:23Z")
Hi, I've set up elasticsearch and it works as expected. However, I need to log all the queries that get fetched. I set up the configuration in the elasticsearch.yml as follows : index.search.slowlog.level: TRAC… --- ## [Client node rejoins but isn't communicating with the server](https://discuss.elastic.co/t/client-node-rejoins-but-isnt-communicating-with-the-server/6693)
**Author:** [@Lar\_Mader](https://discuss.elastic.co/u/Lar_Mader)\ **Replies:** 8\ **Last updated:** [March 19, 2012, 2:15pm UTC](https://discuss.elastic.co/t/client-node-rejoins-but-isnt-communicating-with-the-server/6693 "2012-03-19T14:15:22Z")
We've been having a recurring problem in which our server and client nodes get disconnected, seem to rejoin successfully, but are no longer communicating with each other. Our setup is pretty simple - we have one serv… --- ## [ElasticSearch 7.15.1 / Unhappy Cluster](https://discuss.elastic.co/t/elasticsearch-7-15-1-unhappy-cluster/322974)
**Author:** [@Devin\_Acosta](https://discuss.elastic.co/u/Devin_Acosta)\ **Replies:** 5\ **Last updated:** [January 12, 2023, 9:19pm UTC](https://discuss.elastic.co/t/elasticsearch-7-15-1-unhappy-cluster/322974 "2023-01-12T21:19:20Z")
I am trying to troubleshoot an Elasticsearch 7.15.1 cluster that has 3 master nodes, and 30+ data nodes. Recently we have seen where data nodes are complaining about "master not discovered yet" after the nodes have been … --- ## [Fortinet module not parsing from file](https://discuss.elastic.co/t/fortinet-module-not-parsing-from-file/273590)
**Author:** [@Mustafa\_Y](https://discuss.elastic.co/u/Mustafa_Y)\ **Replies:** 5\ **Last updated:** [May 21, 2021, 12:23pm UTC](https://discuss.elastic.co/t/fortinet-module-not-parsing-from-file/273590 "2021-05-21T12:23:16Z")
Hello, I want to parse fortinet logs from file instead of syslog network. There is an option var.paths in Fortinet module | Filebeat Reference \[master\] | Elastic and var.input . I configured it as below: - module: for… --- ## [How to avoid duplicates before entering the filter plugin?](https://discuss.elastic.co/t/how-to-avoid-duplicates-before-entering-the-filter-plugin/234735)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 5\ **Last updated:** [May 29, 2020, 8:23am UTC](https://discuss.elastic.co/t/how-to-avoid-duplicates-before-entering-the-filter-plugin/234735 "2020-05-29T08:23:55Z")
Hi, I'm using a document\_id and action =\> create in the logstash elasticsearch output filter to avoid duplicates. Since, this is in output plugin, I can see the duplicates passing through all my filter plugin operation… --- ## [Questions about transaction](https://discuss.elastic.co/t/questions-about-transaction/213069)
**Author:** [@HadarPeeran](https://discuss.elastic.co/u/HadarPeeran)\ **Replies:** 5\ **Last updated:** [January 1, 2020, 6:17am UTC](https://discuss.elastic.co/t/questions-about-transaction/213069 "2020-01-01T06:17:01Z")
Kibana version: 7.5 Elasticsearch version: 7.5 APM Server version: 7.5 APM Agent language and version: Java 1.x, Jboss 7.2 standalone.bat.conf: set JAVA\_OPTS=%JAVA\_OPTS% -javaagent:C:/APM-Agent/elastic-apm-agent-1… --- ## [About CouchDB Integration](https://discuss.elastic.co/t/about-couchdb-integration/6062)
**Author:** [@Goog\_Jobs](https://discuss.elastic.co/u/Goog_Jobs)\ **Replies:** 5\ **Last updated:** [April 23, 2013, 2:24pm UTC](https://discuss.elastic.co/t/about-couchdb-integration/6062 "2013-04-23T14:24:21Z")
CouchDB Integration: http://www.elasticsearch.org/tutorials/2010/08/01/couchb-integration.html ,says that automatically index data in CouchDB .does it include attachment of a document in couchDB? --- ## [Best way to resolve this out of memory error in my ES Data Nodes](https://discuss.elastic.co/t/best-way-to-resolve-this-out-of-memory-error-in-my-es-data-nodes/263478)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 2\ **Last updated:** [February 6, 2021, 4:04am UTC](https://discuss.elastic.co/t/best-way-to-resolve-this-out-of-memory-error-in-my-es-data-nodes/263478 "2021-02-06T04:04:57Z")
I have a cluster and now my data nodes are crashing. Looking over the logs i see this error. Its an out of memory error. Is there something i should set in the Elastic yml file to help lock memory? Add more data nodes… [Previous page](https://discuss.elastic.co/top.md?page=1628&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1630&per_page=50&period=all)