# Top

**URL:** https://discuss.elastic.co/top.md?page=1630&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1631

---

## [Error searching, probably (Global Serach plugin) error. ELK 7.9.1](https://discuss.elastic.co/t/error-searching-probably-global-serach-plugin-error-elk-7-9-1/251935)

<div class="topic-metadata">

**Author:** [@mdecastrosimon](https://discuss.elastic.co/u/mdecastrosimon)\
**Replies:** 2\
**Last updated:** [October 30, 2020, 10:11am UTC](https://discuss.elastic.co/t/error-searching-probably-global-serach-plugin-error-elk-7-9-1/251935 "2020-10-30T10:11:05Z")

</div>

When I am trying to search any word withous specify the field I am obtaining this error: search\_phase\_execution\_exception all shards failed Error: Bad Request at Fetch.\_callee3$ (http://127.0.0.1:5601/33912/bundle…

---

## [Engineer 1 training lab fails to allocate memory](https://discuss.elastic.co/t/engineer-1-training-lab-fails-to-allocate-memory/251448)

<div class="topic-metadata">

**Author:** [@JAG1](https://discuss.elastic.co/u/JAG1)\
**Replies:** 2\
**Last updated:** [October 8, 2020, 1:44pm UTC](https://discuss.elastic.co/t/engineer-1-training-lab-fails-to-allocate-memory/251448 "2020-10-08T13:44:39Z")

</div>

Engineer 1 training fails to allocate memory after instructions request memory to be changed. http://3.127.223.160/instructions/labs.html#\_lab\_1\_1\_elastic\_stack\_overview fails with a Run Time Expectation error insu…

---

## [Custom metric calculation in Kibana](https://discuss.elastic.co/t/custom-metric-calculation-in-kibana/241905)

<div class="topic-metadata">

**Author:** [@paolinux](https://discuss.elastic.co/u/paolinux)\
**Replies:** 2\
**Last updated:** [August 27, 2020, 4:34pm UTC](https://discuss.elastic.co/t/custom-metric-calculation-in-kibana/241905 "2020-08-27T16:34:56Z")

</div>

Hi, SHORT VERSION: I need to create a visualization in Kibana that shows an index given as a ratio between a "sum" metric over a given period and a "filtered-count" metric over the same period. What is the best approach…

---

## [Logstash Configuration Error in K8](https://discuss.elastic.co/t/logstash-configuration-error-in-k8/243422)

<div class="topic-metadata">

**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\
**Replies:** 2\
**Last updated:** [August 3, 2020, 3:44pm UTC](https://discuss.elastic.co/t/logstash-configuration-error-in-k8/243422 "2020-08-03T15:44:10Z")

</div>

Hi Team, Created a Pod for logstash and I am trying to solve the below error. Requesting your help for the same. \[ERROR\] 2020-07-31 04:48:57.595 \[Converge PipelineAction::Create\<main\>\] agent - Failed to execute action …

---

## [Custom tokenizer for letter and digits](https://discuss.elastic.co/t/custom-tokenizer-for-letter-and-digits/225317)

<div class="topic-metadata">

**Author:** [@lfcnassif](https://discuss.elastic.co/u/lfcnassif)\
**Replies:** 2\
**Last updated:** [March 30, 2020, 3:49pm UTC](https://discuss.elastic.co/t/custom-tokenizer-for-letter-and-digits/225317 "2020-03-30T15:49:38Z")

</div>

Hi, Searched the docs and I was not able to find a solution to create a custom tokenizer to break text at any char different from digit or unicode letter (like those returned by java Character.isLetterOrDigit()). In the…

---

## [Changing index pattern field format to "bytes" does not correctly format byte values for kibana visualizations](https://discuss.elastic.co/t/changing-index-pattern-field-format-to-bytes-does-not-correctly-format-byte-values-for-kibana-visualizations/221831)

<div class="topic-metadata">

**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\
**Replies:** 2\
**Last updated:** [March 4, 2020, 12:20pm UTC](https://discuss.elastic.co/t/changing-index-pattern-field-format-to-bytes-does-not-correctly-format-byte-values-for-kibana-visualizations/221831 "2020-03-04T12:20:54Z")

</div>

Hello, I changed the formatting for a field in my index pattern like this: However when I access the field via a visualization it is still unformatted: I want it to display the value in mb/gb. Is this a misconfigu…

---

## [Filtering on nested fields](https://discuss.elastic.co/t/filtering-on-nested-fields/215758)

<div class="topic-metadata">

**Author:** [@rgj](https://discuss.elastic.co/u/rgj)\
**Replies:** 2\
**Last updated:** [January 21, 2020, 8:56am UTC](https://discuss.elastic.co/t/filtering-on-nested-fields/215758 "2020-01-21T08:56:19Z")

</div>

I have a nested field called 'metadata' in my index with various fields inside. For some reason filtering in Kibana does not work. I have tried various data types but even 'exists' doesn't work correctly. Things show …

---

## [Automatically apply filtered alias for daily indices](https://discuss.elastic.co/t/automatically-apply-filtered-alias-for-daily-indices/180388)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 2\
**Last updated:** [May 9, 2019, 3:39pm UTC](https://discuss.elastic.co/t/automatically-apply-filtered-alias-for-daily-indices/180388 "2019-05-09T15:39:00Z")

</div>

Hi! I'm currently adding rollup jobs where filtering isn't an option. I have various cases, some would be a simple match for one field (I'd monitor the count), others would require bucketing, cardinality and a final sum…

---

## [Grok filter compile error](https://discuss.elastic.co/t/grok-filter-compile-error/166599)

<div class="topic-metadata">

**Author:** [@fefo69](https://discuss.elastic.co/u/fefo69)\
**Replies:** 2\
**Last updated:** [January 31, 2019, 8:07pm UTC](https://discuss.elastic.co/t/grok-filter-compile-error/166599 "2019-01-31T20:07:58Z")

</div>

Hi, I have the following log pattern 2019-01-31 01:27:48 10.24.32.4 POST 200 932 0.059 "394" - - - - - - /api/tbapi/services/oe/productinstances/findP…

---

## [Hive integration - Which jar do we need?](https://discuss.elastic.co/t/hive-integration-which-jar-do-we-need/145650)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 5:49pm UTC](https://discuss.elastic.co/t/hive-integration-which-jar-do-we-need/145650 "2018-09-04T17:49:05Z")

</div>

I have downloaded ES hadoop jar. I need to fetch data from Hive tables to ES. There are two jar ES-hadoop and ES-hadoop-hive. Which one to utilise to connect and fetch data from Hive?

---

## [How to show total count and percentage of error records in a table?](https://discuss.elastic.co/t/how-to-show-total-count-and-percentage-of-error-records-in-a-table/134918)

<div class="topic-metadata">

**Author:** [@firdshai](https://discuss.elastic.co/u/firdshai)\
**Replies:** 2\
**Last updated:** [June 8, 2018, 4:25am UTC](https://discuss.elastic.co/t/how-to-show-total-count-and-percentage-of-error-records-in-a-table/134918 "2018-06-08T04:25:14Z")

</div>

Hi, I have created a data table visualization and I am taking count as metric. Now I want more columns where I wish to take error count and percentage as metric which will give me the count and percentage of the respec…

---

## [Logstash 5.1.1 can not open port](https://discuss.elastic.co/t/logstash-5-1-1-can-not-open-port/70521)

<div class="topic-metadata">

**Author:** [@TaeSung\_Kim](https://discuss.elastic.co/u/TaeSung_Kim)\
**Replies:** 2\
**Last updated:** [January 4, 2017, 9:56am UTC](https://discuss.elastic.co/t/logstash-5-1-1-can-not-open-port/70521 "2017-01-04T09:56:33Z")

</div>

logstash 5.1.1 can not open port.. Log message is down. How to fix it? \[2017-01-04T07:17:44,341\]\[INFO \]\[logstash.agent \] Successfully started Logstash API endpoint {:port=\>9600} \[2017-01-04T07:17:55,582\]\[INFO…

---

## [Help on date filter plugin to parse 5/24/2016 6:10:20 AM](https://discuss.elastic.co/t/help-on-date-filter-plugin-to-parse-5-24-2016-6-10-20-am/54578)

<div class="topic-metadata">

**Author:** [@tianlinzx](https://discuss.elastic.co/u/tianlinzx)\
**Replies:** 2\
**Last updated:** [November 16, 2016, 4:40am UTC](https://discuss.elastic.co/t/help-on-date-filter-plugin-to-parse-5-24-2016-6-10-20-am/54578 "2016-11-16T04:40:52Z")

</div>

I tried to use date plugin to parase date as 5/24/2016 6:10:20 AM and 5/24/2016 1:00:15 AM. My configuration is as below. but it doesn't work. Could anyone help me? date { match =\> \[ "ACS\_Timestamp", "M d YYYY H:m…

---

## [Avoir des buckets vides avec date\_histogram](https://discuss.elastic.co/t/avoir-des-buckets-vides-avec-date-histogram/55297)

<div class="topic-metadata">

**Author:** [@5M4RG4](https://discuss.elastic.co/u/5M4RG4)\
**Replies:** 2\
**Last updated:** [July 12, 2016, 3:23pm UTC](https://discuss.elastic.co/t/avoir-des-buckets-vides-avec-date-histogram/55297 "2016-07-12T15:23:12Z")

</div>

Bonjour, Je débute avec elastic. Je cherche à compléter des buckets lorsqu'aucune date n'est trouvée. Voilà ma requête (désolé pour le format JavaScript/angular :slight\_smile: ) var incidentKnownAggs = { imp…

---

## [Ipad not loading dashboard](https://discuss.elastic.co/t/ipad-not-loading-dashboard/50672)

<div class="topic-metadata">

**Author:** [@xdzhou](https://discuss.elastic.co/u/xdzhou)\
**Replies:** 2\
**Last updated:** [May 24, 2016, 5:58am UTC](https://discuss.elastic.co/t/ipad-not-loading-dashboard/50672 "2016-05-24T05:58:31Z")

</div>

I have a kibana server worked great, fast response in a couple of seconds. When I tried to load use Ipad today, it stays at loading page forever (more than 10 minutes), at the same time, desktop browser still works fast …

---

## [Filter on Kibana](https://discuss.elastic.co/t/filter-on-kibana/44842)

<div class="topic-metadata">

**Author:** [@rafaellamuniz](https://discuss.elastic.co/u/rafaellamuniz)\
**Replies:** 2\
**Last updated:** [April 4, 2016, 7:05pm UTC](https://discuss.elastic.co/t/filter-on-kibana/44842 "2016-04-04T19:05:05Z")

</div>

Hello, I'm trying to filter the Topbeat Dashboard by the servers name. But when I click on the server name appear a table with colors. (see on image attached) Is there a way to make this work? I mean, when I click on t…

---

## [Questions on threads in elasticsearch](https://discuss.elastic.co/t/questions-on-threads-in-elasticsearch/42955)

<div class="topic-metadata">

**Author:** [@sar](https://discuss.elastic.co/u/sar)\
**Replies:** 2\
**Last updated:** [February 29, 2016, 3:04pm UTC](https://discuss.elastic.co/t/questions-on-threads-in-elasticsearch/42955 "2016-02-29T15:04:13Z")

</div>

Hi, I'm trying to understand the threads spawned when the elasticsearch is started. So I downloaded elasticsearch-2.2.0.tar.gz, extracted and started elasticsearch with the default settings (without changing any confi…

---

## [How to export Saved search panel in Kibana 4](https://discuss.elastic.co/t/how-to-export-saved-search-panel-in-kibana-4/32118)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 2\
**Last updated:** [October 13, 2015, 8:28pm UTC](https://discuss.elastic.co/t/how-to-export-saved-search-panel-in-kibana-4/32118 "2015-10-13T20:28:33Z")

</div>

Hi Experts, I want to export saved search to a CSV format , I do not see this option for saved search as we have for other panels. Or if we can export discoverer tab , idea is to export raw logs to a file . Thanks V…

---

## [Conditional query based on index/type](https://discuss.elastic.co/t/conditional-query-based-on-index-type/9067)

<div class="topic-metadata">

**Author:** [@Remy\_Gendron](https://discuss.elastic.co/u/Remy_Gendron)\
**Replies:** 2\
**Last updated:** [September 19, 2012, 4:07pm UTC](https://discuss.elastic.co/t/conditional-query-based-on-index-type/9067 "2012-09-19T16:07:16Z")

</div>

Hi all, I have fields (same names) that are present on all document types. Doing a polymorphic search on these fields is therefore not a problem. But, I have fields that are present only on some document types. …

---

## [Replace string in array with \_update\_by\_query](https://discuss.elastic.co/t/replace-string-in-array-with-update-by-query/239913)

<div class="topic-metadata">

**Author:** [@ovinz](https://discuss.elastic.co/u/ovinz)\
**Replies:** 0\
**Last updated:** [July 5, 2020, 8:18am UTC](https://discuss.elastic.co/t/replace-string-in-array-with-update-by-query/239913 "2020-07-05T08:18:02Z")

</div>

Hello, I'd like to replace string by another one in all Array elements but I don't know how to do that in Java. My document is like : "pictures" : \[ "https://www.mydomain.com/images/123.png", …

---

## [DNS Activity Data from Elastic Defend](https://discuss.elastic.co/t/dns-activity-data-from-elastic-defend/390171)

<div class="topic-metadata">

**Author:** [@RalphDibney](https://discuss.elastic.co/u/RalphDibney)\
**Replies:** 7\
**Last updated:** [September 10, 2026, 8:58am UTC](https://discuss.elastic.co/t/dns-activity-data-from-elastic-defend/390171 "2026-09-10T08:58:51Z")

</div>

Hey Elastic Community, after realizing that our Elastic Defend DNS data collected in our Windows machines has some data missing, we found some threads here in the community about it: Missing DNS requests on Windows mac…

---

## [Understanding transform stats](https://discuss.elastic.co/t/understanding-transform-stats/343053)

<div class="topic-metadata">

**Author:** [@pulsy](https://discuss.elastic.co/u/pulsy)\
**Replies:** 4\
**Last updated:** [September 14, 2023, 6:22pm UTC](https://discuss.elastic.co/t/understanding-transform-stats/343053 "2023-09-14T18:22:59Z")

</div>

I am currently in the process of figuring out how to implement a transform on a quite large index. Especially the monitoring part of it is a bit puzzling for me. For example, the search\_time\_in\_ms on the transform curre…

---

## [ILM settings not being applied](https://discuss.elastic.co/t/ilm-settings-not-being-applied/243643)

<div class="topic-metadata">

**Author:** [@wardallen](https://discuss.elastic.co/u/wardallen)\
**Replies:** 4\
**Last updated:** [August 6, 2020, 6:55am UTC](https://discuss.elastic.co/t/ilm-settings-not-being-applied/243643 "2020-08-06T06:55:36Z")

</div>

I have a logstash index storing data that will be used in reporting, but only ever for the last 5 minutes. Hence, I want to have a very aggressive deletion policy. Roll the index every 15 minutes Delete the rolled (ol…

---

## [Get json from Http poller , store it in local variable and use it in elastic search output](https://discuss.elastic.co/t/get-json-from-http-poller-store-it-in-local-variable-and-use-it-in-elastic-search-output/239610)

<div class="topic-metadata">

**Author:** [@Abolurah](https://discuss.elastic.co/u/Abolurah)\
**Replies:** 4\
**Last updated:** [July 14, 2020, 9:56am UTC](https://discuss.elastic.co/t/get-json-from-http-poller-store-it-in-local-variable-and-use-it-in-elastic-search-output/239610 "2020-07-14T09:56:18Z")

</div>

Hi All I'm trying to configure the Logstash, that it will poll credentials from Http poller plugin store it is some local variable, get data from local elastic search (multiple Inputs), and will send it to remote AWS El…

---

## [Using Filebeat dedicated and send logs to different IP](https://discuss.elastic.co/t/using-filebeat-dedicated-and-send-logs-to-different-ip/138823)

<div class="topic-metadata">

**Author:** [@Wahyu](https://discuss.elastic.co/u/Wahyu)\
**Replies:** 4\
**Last updated:** [July 6, 2018, 2:37pm UTC](https://discuss.elastic.co/t/using-filebeat-dedicated-and-send-logs-to-different-ip/138823 "2018-07-06T14:37:10Z")

</div>

Hi, I am a newcomer here especially logs monitory system. I am learning to build log system. Basically, i choose the opensource :slight\_smile: So, i have 2 VPS right now. In the first VPS (x.x.x.x), there are Graylog…

---

## [Monitoring remote Elasticsearch performance with metricbeats and Kibana "Monitoring"](https://discuss.elastic.co/t/monitoring-remote-elasticsearch-performance-with-metricbeats-and-kibana-monitoring/136867)

<div class="topic-metadata">

**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\
**Replies:** 4\
**Last updated:** [June 22, 2018, 10:56am UTC](https://discuss.elastic.co/t/monitoring-remote-elasticsearch-performance-with-metricbeats-and-kibana-monitoring/136867 "2018-06-22T10:56:56Z")

</div>

Running elasticsearch/kibana (central) and metricbeats version 6.3 I've just enabled metricbeats to monitor 6 edge servers that are running local elasticsearch-based application instances. metricbeats is shipping the m…

---

## [Box.com](https://discuss.elastic.co/t/box-com/92409)

<div class="topic-metadata">

**Author:** [@Jackson\_Pollock](https://discuss.elastic.co/u/Jackson_Pollock)\
**Replies:** 4\
**Last updated:** [July 10, 2017, 2:49pm UTC](https://discuss.elastic.co/t/box-com/92409 "2017-07-10T14:49:25Z")

</div>

Any suggestions on how to index box.com files into elastic?

---

## [Kibana User access](https://discuss.elastic.co/t/kibana-user-access/64104)

<div class="topic-metadata">

**Author:** [@manojvenkat](https://discuss.elastic.co/u/manojvenkat)\
**Replies:** 4\
**Last updated:** [October 28, 2016, 6:00pm UTC](https://discuss.elastic.co/t/kibana-user-access/64104 "2016-10-28T18:00:17Z")

</div>

Hello All, I am planning to implement ELK stack on my organization for application teams to visualize their respective logs via Kibana UI. Now my question is, I have installed ELK on server, and using filebeat i am s…

---

## [Migrate parent-child documents from ES 1.5.2 to 2.3](https://discuss.elastic.co/t/migrate-parent-child-documents-from-es-1-5-2-to-2-3/56079)

<div class="topic-metadata">

**Author:** [@Moshe\_Sucaz](https://discuss.elastic.co/u/Moshe_Sucaz)\
**Replies:** 4\
**Last updated:** [July 21, 2016, 1:27pm UTC](https://discuss.elastic.co/t/migrate-parent-child-documents-from-es-1-5-2-to-2-3/56079 "2016-07-21T13:27:24Z")

</div>

Hi, I am writing a python script to migrate all our docs from 1.5.2 cluster to 2.3 cluster. I am using my own script because we have to change the parent docs, due to fields with dots and some more mapping changes, and a…

---

## [Agg script that returns multiple-documents from 1 document ? (json\_each in postgresql)](https://discuss.elastic.co/t/agg-script-that-returns-multiple-documents-from-1-document-json-each-in-postgresql/44314)

<div class="topic-metadata">

**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\
**Replies:** 4\
**Last updated:** [March 16, 2016, 8:49am UTC](https://discuss.elastic.co/t/agg-script-that-returns-multiple-documents-from-1-document-json-each-in-postgresql/44314 "2016-03-16T08:49:49Z")

</div>

I'm recording daily country-level analytics for each url on my site. But I don't want to store each pageview in a document because that would require too much data + time to process. So I can store 1 document for eac…

---

## [Sorting on subset of values](https://discuss.elastic.co/t/sorting-on-subset-of-values/10327)

<div class="topic-metadata">

**Author:** [@jasisz](https://discuss.elastic.co/u/jasisz)\
**Replies:** 4\
**Last updated:** [January 15, 2013, 3:48pm UTC](https://discuss.elastic.co/t/sorting-on-subset-of-values/10327 "2013-01-15T15:48:04Z")

</div>

There is some document I want to search on which contains multiple values in one field - e.g. multiple dates. Now I want to filter documents by those dates - for example later than today - and then sort them by date…

---

## [APM for monitoring ELK applications](https://discuss.elastic.co/t/apm-for-monitoring-elk-applications/324503)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 7\
**Last updated:** [February 12, 2023, 4:25pm UTC](https://discuss.elastic.co/t/apm-for-monitoring-elk-applications/324503 "2023-02-12T16:25:04Z")

</div>

Hi Community, Just started APM from today. Running ELK version 7.17 , installed APM also can we use APM for monitoring ELK applications.

---

## ["CURATE YOUR RESULT" for lab 1-"Introduction to Elastic App Search". https://enterprise-search-fundamentals-af0040.kb.us-east4.gcp.elastic-cloud.com:9243/app/enterprise\_search/app\_search/engines/app-search-fundamentals/curations](https://discuss.elastic.co/t/curate-your-result-for-lab-1-introduction-to-elastic-app-search-https-enterprise-search-fundamentals-af0040-kb-us-east4-gcp-elastic-cloud-com-9243-app-enterprise-search-app-search-engines-app-search-fundamentals-curations/310793)

<div class="topic-metadata">

**Author:** [@Kimberly](https://discuss.elastic.co/u/Kimberly)\
**Replies:** 7\
**Last updated:** [August 3, 2022, 9:32pm UTC](https://discuss.elastic.co/t/curate-your-result-for-lab-1-introduction-to-elastic-app-search-https-enterprise-search-fundamentals-af0040-kb-us-east4-gcp-elastic-cloud-com-9243-app-enterprise-search-app-search-engines-app-search-fundamentals-curations/310793 "2022-08-03T21:32:25Z")

</div>

I am working on "CURATE YOUR RESULT" for lab 1-"Introduction to Elastic App Search" for the class 1. I turned on "Enable suggestions" on Setting and unchecked "Automatically accept new suggestions. I followed the instr…

---

## [Logstash runs out of memory as soon pipelines are triggered](https://discuss.elastic.co/t/logstash-runs-out-of-memory-as-soon-pipelines-are-triggered/306821)

<div class="topic-metadata">

**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\
**Replies:** 1\
**Last updated:** [June 9, 2022, 5:19pm UTC](https://discuss.elastic.co/t/logstash-runs-out-of-memory-as-soon-pipelines-are-triggered/306821 "2022-06-09T17:19:13Z")

</div>

My logstash has started suddenly running out of memory, though no changes have been made to the pipeline. Following is the error log. My server has 14-15 GB of memory free. Tried allocating different memory in jvm.optio…

---

## [Problem with configuring https x-pack](https://discuss.elastic.co/t/problem-with-configuring-https-x-pack/292509)

<div class="topic-metadata">

**Author:** [@awbait](https://discuss.elastic.co/u/awbait)\
**Replies:** 1\
**Last updated:** [December 22, 2021, 10:50am UTC](https://discuss.elastic.co/t/problem-with-configuring-https-x-pack/292509 "2021-12-22T10:50:13Z")

</div>

Hello everyone. I'm trying to set up security. So that users can log in through kibana using their username / password. Faced a x-pack config issue. My file values.yaml: replicas: 2 resources: requests: c…

---

## [Kibana watcher : Send message field in if log level is ERROR](https://discuss.elastic.co/t/kibana-watcher-send-message-field-in-if-log-level-is-error/286529)

<div class="topic-metadata">

**Author:** [@Chandrakant\_Naik](https://discuss.elastic.co/u/Chandrakant_Naik)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 5:04pm UTC](https://discuss.elastic.co/t/kibana-watcher-send-message-field-in-if-log-level-is-error/286529 "2021-10-25T17:04:31Z")

</div>

i have configure watcher in kibana to notify me via email if there are ERROR in log level. for couple indices. input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "xxxx.-\*" \], "types": \[\],…

---

## [Deserialize different typed field to other typed property in Nest](https://discuss.elastic.co/t/deserialize-different-typed-field-to-other-typed-property-in-nest/283159)

<div class="topic-metadata">

**Author:** [@Martin\_Leonard\_Sart1](https://discuss.elastic.co/u/Martin_Leonard_Sart1)\
**Replies:** 1\
**Last updated:** [September 3, 2021, 2:56pm UTC](https://discuss.elastic.co/t/deserialize-different-typed-field-to-other-typed-property-in-nest/283159 "2021-09-03T14:56:21Z")

</div>

Hi, We just recently upgraded from 6.3 to 7.7 version of Elasticsearch. Upon migration, we got an error something like this: "{"expected:'Number Token', actual:'"10"' at offset:458"}" Based on a blog I've read, bluew…

---

## [Watcher searching for query term containing hyphens](https://discuss.elastic.co/t/watcher-searching-for-query-term-containing-hyphens/241471)

<div class="topic-metadata">

**Author:** [@ChequredFlag](https://discuss.elastic.co/u/ChequredFlag)\
**Replies:** 1\
**Last updated:** [July 23, 2020, 8:48am UTC](https://discuss.elastic.co/t/watcher-searching-for-query-term-containing-hyphens/241471 "2020-07-23T08:48:59Z")

</div>

Hi I am trying to return the number of errors reported against a specific application in our stack. The search term i am using is "search" : { "request" : { "indices" : "developme…

---

## [Empty buckets](https://discuss.elastic.co/t/empty-buckets/120334)

<div class="topic-metadata">

**Author:** [@Pororo](https://discuss.elastic.co/u/Pororo)\
**Replies:** 7\
**Last updated:** [February 19, 2018, 9:43pm UTC](https://discuss.elastic.co/t/empty-buckets/120334 "2018-02-19T21:43:30Z")

</div>

I was trying to make a graph like how many cars sold per month. And I used date histogram whose interval is one month for buckets. It seems good but I am wondering how it could also display empty buckets on the graph. F…

---

## [Open file handler limit problem on CentOS 6.9](https://discuss.elastic.co/t/open-file-handler-limit-problem-on-centos-6-9/90339)

<div class="topic-metadata">

**Author:** [@MikeThomsen](https://discuss.elastic.co/u/MikeThomsen)\
**Replies:** 1\
**Last updated:** [June 23, 2017, 2:37pm UTC](https://discuss.elastic.co/t/open-file-handler-limit-problem-on-centos-6-9/90339 "2017-06-23T14:37:25Z")

</div>

Versions: Elasticsearch 5.4.2 CentOS 6.9 JDK 1.8u131 On starting Elasticsearch, I ran into the following error message: \[2017-06-21T13:06:39,517\]\[INFO \]\[o.e.t.TransportService \] \[HOSTNAME\_HERE\] publish\_address {19…

---

## [Cassandra Plugin for Logstash](https://discuss.elastic.co/t/cassandra-plugin-for-logstash/88929)

<div class="topic-metadata">

**Author:** [@dona](https://discuss.elastic.co/u/dona)\
**Replies:** 1\
**Last updated:** [June 13, 2017, 5:32am UTC](https://discuss.elastic.co/t/cassandra-plugin-for-logstash/88929 "2017-06-13T05:32:05Z")

</div>

I would like to use Cassandra data as input for Logstash -\> Elasticsearch, but officially there is no input plugin. Is there some other method or does anyone here have a source for how to configure a cassandra plugin for…

---

## [Geoip issues with ES 2.3.1](https://discuss.elastic.co/t/geoip-issues-with-es-2-3-1/50874)

<div class="topic-metadata">

**Author:** [@tlv324](https://discuss.elastic.co/u/tlv324)\
**Replies:** 1\
**Last updated:** [May 24, 2016, 7:04pm UTC](https://discuss.elastic.co/t/geoip-issues-with-es-2-3-1/50874 "2016-05-24T19:04:27Z")

</div>

Cluster ID: fb793b Continuing the discussion from Update mapping for geoip.location: I am also having an issue similar to this. I am using the Sense app within Kibana to test some of these things out but ultimately i…

---

## [\[ES 2.2.0\] Autocomplete Suggester throwing illegal argument exception](https://discuss.elastic.co/t/es-2-2-0-autocomplete-suggester-throwing-illegal-argument-exception/45288)

<div class="topic-metadata">

**Author:** [@raunak](https://discuss.elastic.co/u/raunak)\
**Replies:** 1\
**Last updated:** [March 23, 2016, 11:45pm UTC](https://discuss.elastic.co/t/es-2-2-0-autocomplete-suggester-throwing-illegal-argument-exception/45288 "2016-03-23T23:45:36Z")

</div>

I'm using ElasticSearch 2.2.0. When I execute suggestion query against my index, I get a {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Can't write raw bytes whose xcontent-type can't be gues…

---

## [How to redirect from Dashboard to discover section](https://discuss.elastic.co/t/how-to-redirect-from-dashboard-to-discover-section/40548)

<div class="topic-metadata">

**Author:** [@SureshSala](https://discuss.elastic.co/u/SureshSala)\
**Replies:** 1\
**Last updated:** [February 1, 2016, 3:25am UTC](https://discuss.elastic.co/t/how-to-redirect-from-dashboard-to-discover-section/40548 "2016-02-01T03:25:42Z")

</div>

We have created a dashboard for No.of failed login and Failed Attempt by User. I want to redirect to the discover section of saved search when I click on the dashboard. Is it possible. Please Help.!

---

## [Whether to use G1GC or not for 30GB heap?](https://discuss.elastic.co/t/whether-to-use-g1gc-or-not-for-30gb-heap/38154)

<div class="topic-metadata">

**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\
**Replies:** 1\
**Last updated:** [December 30, 2015, 8:39am UTC](https://discuss.elastic.co/t/whether-to-use-g1gc-or-not-for-30gb-heap/38154 "2015-12-30T08:39:46Z")

</div>

As per the article : https://www.elastic.co/guide/en/elasticsearch/guide/current/\_don\_8217\_t\_touch\_these\_settings.html It suggests not to switch to G1GC . please suggest if this still holds true or ES is suggesting n…

---

## [Match against stored wildcard string](https://discuss.elastic.co/t/match-against-stored-wildcard-string/34725)

<div class="topic-metadata">

**Author:** [@horte](https://discuss.elastic.co/u/horte)\
**Replies:** 1\
**Last updated:** [November 18, 2015, 4:44pm UTC](https://discuss.elastic.co/t/match-against-stored-wildcard-string/34725 "2015-11-18T16:44:38Z")

</div>

I want to be able to match a given string against a field that contains a value where an asterix is a placeholder for any given value. I have a string subdomain.domain-c.com and I want to return all documents that does…

---

## [What web server Elasticsearch use on windows?](https://discuss.elastic.co/t/what-web-server-elasticsearch-use-on-windows/23354)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 1\
**Last updated:** [April 22, 2015, 9:47am UTC](https://discuss.elastic.co/t/what-web-server-elasticsearch-use-on-windows/23354 "2015-04-22T09:47:26Z")

</div>

I deployed ES on my machine and can access via HTTP url, but I did not install IIS on my windows machine yet, so what web server does Elasticsearch use on windows? -- You received this message because you are su…

---

## [Considering bulk upserts from hadoop \[Hadoop\]](https://discuss.elastic.co/t/considering-bulk-upserts-from-hadoop-hadoop/13201)

<div class="topic-metadata">

**Author:** [@Val\_Vakar](https://discuss.elastic.co/u/Val_Vakar)\
**Replies:** 7\
**Last updated:** [November 7, 2013, 3:05pm UTC](https://discuss.elastic.co/t/considering-bulk-upserts-from-hadoop-hadoop/13201 "2013-11-07T15:05:31Z")

</div>

Hello Experts, I'd really like to leverage bulk upserts from Hive. I could implement that in elasticsearch-hadoop, but I need a good way to specify the id (see https://groups.google.com/forum/?fromgroups#!topic/el…

---

## [Highlight partial matches?](https://discuss.elastic.co/t/highlight-partial-matches/9949)

<div class="topic-metadata">

**Author:** [@A\_Zed](https://discuss.elastic.co/u/A_Zed)\
**Replies:** 1\
**Last updated:** [December 5, 2012, 9:41am UTC](https://discuss.elastic.co/t/highlight-partial-matches/9949 "2012-12-05T09:41:52Z")

</div>

I'm using ngrams to do partial matching. I would like to retrieve fragments of the documents that match the partial text, with highlighting. I have the highlight option in the query, but it works only for full text s…

---

## [Elasticsearch - Migrating from Java High Level Rest Client to New Java API Client of Version 8.x](https://discuss.elastic.co/t/elasticsearch-migrating-from-java-high-level-rest-client-to-new-java-api-client-of-version-8-x/358709)

<div class="topic-metadata">

**Author:** [@Aswini\_Kumar\_Rout](https://discuss.elastic.co/u/Aswini_Kumar_Rout)\
**Replies:** 2\
**Last updated:** [June 16, 2024, 1:51pm UTC](https://discuss.elastic.co/t/elasticsearch-migrating-from-java-high-level-rest-client-to-new-java-api-client-of-version-8-x/358709 "2024-06-16T13:51:22Z")

</div>

I am using the new version 8.13 of Elasticsearch for a new search app and trying to imitate the below kind of logic using the new Java API client instead of using Java High Level Rest client which was deprecated now. I h…

[Previous page](https://discuss.elastic.co/top.md?page=1629&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1631&per_page=50&period=all)
