# Top **URL:** https://discuss.elastic.co/top.md?page=1631&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1632 --- ## [Date\_time\_exception: Field Year cannot be printed as the value -292275055 exceeds the maximum print width of 4\]](https://discuss.elastic.co/t/date-time-exception-field-year-cannot-be-printed-as-the-value-292275055-exceeds-the-maximum-print-width-of-4/318900)
**Author:** [@hchen1](https://discuss.elastic.co/u/hchen1)\ **Replies:** 2\ **Last updated:** [November 15, 2022, 6:15pm UTC](https://discuss.elastic.co/t/date-time-exception-field-year-cannot-be-printed-as-the-value-292275055-exceeds-the-maximum-print-width-of-4/318900 "2022-11-15T18:15:28Z")
I got date\_time\_exception after disabling dynamic mapping and adding mapping for a Date attribute like this: "mappings": { "dynamic": false, ........ "updateDate": { "type": "date", … --- ## [Maxtimeout Reached](https://discuss.elastic.co/t/maxtimeout-reached/307486)
**Author:** [@Balaji\_Arun](https://discuss.elastic.co/u/Balaji_Arun)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 4:31am UTC](https://discuss.elastic.co/t/maxtimeout-reached/307486 "2022-06-21T04:31:42Z")
Hi Everyone, recently when I try to index a document. The request, response with max-timeout reached after a certain point in time, and it starts indexing again. Now, I'm trying to find the root cause of that issue. T… --- ## [How to speed up the segment merging at night?](https://discuss.elastic.co/t/how-to-speed-up-the-segment-merging-at-night/271267)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 2\ **Last updated:** [April 27, 2021, 3:22am UTC](https://discuss.elastic.co/t/how-to-speed-up-the-segment-merging-at-night/271267 "2021-04-27T03:22:16Z")
The ES version is 7.11.1 I use ilm to manage my log indices hot phase: rollover warm phase (12 hours from rollover): forcemerge、read only、data allocation cold phase (5 days from rollover): freeze delete phase(10 day… --- ## [Custom Index Name for Apache Module, but using ILM as well](https://discuss.elastic.co/t/custom-index-name-for-apache-module-but-using-ilm-as-well/226284)
**Author:** [@dsdameron](https://discuss.elastic.co/u/dsdameron)\ **Replies:** 2\ **Last updated:** [April 6, 2020, 9:03pm UTC](https://discuss.elastic.co/t/custom-index-name-for-apache-module-but-using-ilm-as-well/226284 "2020-04-06T21:03:46Z")
I need to setup a Linux system running Apache to send logs into Elastic Search via Filebeat, but have the Apache module send to a different index. This custom index name needs to use the Filebeat/apache module mappings,… --- ## [How to get percentage change of field values for two different time periods or differentiated by other field in visualizations](https://discuss.elastic.co/t/how-to-get-percentage-change-of-field-values-for-two-different-time-periods-or-differentiated-by-other-field-in-visualizations/216688)
**Author:** [@skt](https://discuss.elastic.co/u/skt)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 3:58am UTC](https://discuss.elastic.co/t/how-to-get-percentage-change-of-field-values-for-two-different-time-periods-or-differentiated-by-other-field-in-visualizations/216688 "2020-01-29T03:58:18Z")
I have requirement where I need to show percentage change of certain field values for two different time periods or differentiated by other field like runName. Basically, How to do arithmetic functions like difference on… --- ## [Kibana Dashboard issue \[Metricbeat System\] Host overview](https://discuss.elastic.co/t/kibana-dashboard-issue-metricbeat-system-host-overview/172795)
**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 3:37pm UTC](https://discuss.elastic.co/t/kibana-dashboard-issue-metricbeat-system-host-overview/172795 "2019-03-18T15:37:38Z")
We are seeing an issue with the built in Kibana 6.6 Dashboard "\[Metricbeat System\] Host overview" Disk Usage sometimes shows 0% zero percent. Although data is showing in the bar graph. Changing the time range sometime… --- ## [Need help for error " java.lang.IllegalArgumentException: Rejecting mapping update to \[logstash-git\] as the final mapping would have more than 1 type: \[\_doc, doc\]"](https://discuss.elastic.co/t/need-help-for-error-java-lang-illegalargumentexception-rejecting-mapping-update-to-logstash-git-as-the-final-mapping-would-have-more-than-1-type-doc-doc/171499)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 2\ **Last updated:** [March 12, 2019, 2:25am UTC](https://discuss.elastic.co/t/need-help-for-error-java-lang-illegalargumentexception-rejecting-mapping-update-to-logstash-git-as-the-final-mapping-would-have-more-than-1-type-doc-doc/171499 "2019-03-12T02:25:59Z")
Hi team - need your help for this painful issue. My ES Index template with index pattern is "logstash-git" { "template": "git\_template", "index\_patterns":\["logstash-git"\], "mappings": { "doc": { "properties": { … --- ## [.ml-state is too big](https://discuss.elastic.co/t/ml-state-is-too-big/131561)
**Author:** [@alah64](https://discuss.elastic.co/u/alah64)\ **Replies:** 2\ **Last updated:** [May 18, 2018, 10:15am UTC](https://discuss.elastic.co/t/ml-state-is-too-big/131561 "2018-05-18T10:15:27Z")
after delete machine learning job , model state data is remaining in .ml-state index. another is :why remain model state for 200 days ago without timestamp field for delete them? now it takes 8gb for deleted jobs and g… --- ## [Elastic Cloudでのslow logの確認方法](https://discuss.elastic.co/t/elastic-cloud-slow-log/114243)
**Author:** [@mnozawa](https://discuss.elastic.co/u/mnozawa)\ **Replies:** 2\ **Last updated:** [January 9, 2018, 12:29am UTC](https://discuss.elastic.co/t/elastic-cloud-slow-log/114243 "2018-01-09T00:29:33Z")
Elastic Cloud上のclusterでパフォーマンスチューニングを行なっており、時間のかかっているsearchクエリを確認したいのですが、どのようにすれば良いでしょうか？ 自前の環境ではslow logを確認していたのですが、elastic cloud上で確認する方法がわからず困っています。 Elastic Cloudの管理コンソール上の「Logs」にはsearch slow logは出ていないように思われます。 やりたい… --- ## [Cloud: NoNodeAvailableException after some time of connectivity](https://discuss.elastic.co/t/cloud-nonodeavailableexception-after-some-time-of-connectivity/76400)
**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\ **Replies:** 2\ **Last updated:** [February 24, 2017, 1:55pm UTC](https://discuss.elastic.co/t/cloud-nonodeavailableexception-after-some-time-of-connectivity/76400 "2017-02-24T13:55:41Z")
Hi all, I'm running into e.g. a NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{f9PviRNJSribEeZ4TkMY3g}{74403af429071821d485db89e9c0a357.eu-west-1.aws.found.io}{176.34.243.129:9343… --- ## [How to check only the documents with in the interval?](https://discuss.elastic.co/t/how-to-check-only-the-documents-with-in-the-interval/60599)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [September 15, 2016, 9:40pm UTC](https://discuss.elastic.co/t/how-to-check-only-the-documents-with-in-the-interval/60599 "2016-09-15T21:40:38Z")
I want to check only the documents which was indexed within the interval of watcher execution but result.input.payload.hits.total is returning all the matched documents in the index matching the query. My watcher def… --- ## [Shard Awareness and Allocation](https://discuss.elastic.co/t/shard-awareness-and-allocation/55534)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 2\ **Last updated:** [July 15, 2016, 11:39am UTC](https://discuss.elastic.co/t/shard-awareness-and-allocation/55534 "2016-07-15T11:39:59Z")
I have upgraded the RAM on my data nodes to 64GB and before restarting I decided to start using shard awareness. I added the following to my elasticsearch.yml: node.master: false node.data: true node.box\_type: hot node… --- ## [Elasticsearch is not running after update to 2.3.3](https://discuss.elastic.co/t/elasticsearch-is-not-running-after-update-to-2-3-3/51411)
**Author:** [@mendy](https://discuss.elastic.co/u/mendy)\ **Replies:** 2\ **Last updated:** [May 31, 2016, 10:59am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-running-after-update-to-2-3-3/51411 "2016-05-31T10:59:16Z")
I have ubuntu server in Oracle Virtualbox. this morning I upgraded the elastic from version 2.2.1 to 2.3.3 and I can not turn on the service of elasticsearch. after i make 'sudo service elasticsearch restart' the stat… --- ## [Sample dashboards for Kibana 4.5](https://discuss.elastic.co/t/sample-dashboards-for-kibana-4-5/50245)
**Author:** [@sundar](https://discuss.elastic.co/u/sundar)\ **Replies:** 2\ **Last updated:** [May 17, 2016, 5:40pm UTC](https://discuss.elastic.co/t/sample-dashboards-for-kibana-4-5/50245 "2016-05-17T17:40:21Z")
Hi, are there any sample visualizations and dashboards available for Kibana 4.5/EL 2.3 stack? I found this github page, but it is for Kibana 3: https://github.com/markwalkom/kibana-dashboards @warkolm do you have any s… --- ## [Object Array display nmap open/closed ports](https://discuss.elastic.co/t/object-array-display-nmap-open-closed-ports/44681)
**Author:** [@anish2good](https://discuss.elastic.co/u/anish2good)\ **Replies:** 2\ **Last updated:** [March 17, 2016, 4:36pm UTC](https://discuss.elastic.co/t/object-array-display-nmap-open-closed-ports/44681 "2016-03-17T16:36:37Z")
Using Kibana4, nmap plugin I Have configured the nmap codec and plugin to view the open ports, unfortunately i'm not able plot the graph as because of object array is not supported, How to Workaround this Here is the… --- ## [Incorrect "Time" field in Discover tab](https://discuss.elastic.co/t/incorrect-time-field-in-discover-tab/33123)
**Author:** [@icecrime](https://discuss.elastic.co/u/icecrime)\ **Replies:** 2\ **Last updated:** [October 31, 2015, 2:16pm UTC](https://discuss.elastic.co/t/incorrect-time-field-in-discover-tab/33123 "2015-10-31T14:16:49Z")
I have a monthly time-based index pattern \[engine-live-\]YYY.MM, where the time field is \_timestamp. In the discover tab, I can see my documents properly "distributed" on the time histogram at the very top. However, in t… --- ## [Open deleted file handles with elasticsearch](https://discuss.elastic.co/t/open-deleted-file-handles-with-elasticsearch/8207)
**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Replies:** 2\ **Last updated:** [June 29, 2012, 9:04pm UTC](https://discuss.elastic.co/t/open-deleted-file-handles-with-elasticsearch/8207 "2012-06-29T21:04:57Z")
Hi there, we have a problem with open file handles of deleted lucene indices on one elasticsearch instance, and I am not sure how to figure this out. Setup: ES 0.19.3 with result grouping, one index, plus FST sugg… --- ## [Elastic Defend Licensing](https://discuss.elastic.co/t/elastic-defend-licensing/366405)
**Author:** [@mike123](https://discuss.elastic.co/u/mike123)\ **Replies:** 3\ **Last updated:** [September 12, 2024, 3:45am UTC](https://discuss.elastic.co/t/elastic-defend-licensing/366405 "2024-09-12T03:45:53Z")
Hi team, We are analyzing Elastic stack for our security needs. we are testing Elastic defend for forwarding logs. After the Elastic Agent is installed with the Elastic Defend integration, several protections features —… --- ## [How to handle missing values for date datatype while ingesting the data in Elasticsearch](https://discuss.elastic.co/t/how-to-handle-missing-values-for-date-datatype-while-ingesting-the-data-in-elasticsearch/320524)
**Author:** [@Durga\_Prasad](https://discuss.elastic.co/u/Durga_Prasad)\ **Replies:** 3\ **Last updated:** [December 14, 2022, 5:49am UTC](https://discuss.elastic.co/t/how-to-handle-missing-values-for-date-datatype-while-ingesting-the-data-in-elasticsearch/320524 "2022-12-14T05:49:12Z")
There are few empty values for date datatype field in a csv file. So, while ingesting the data in Kibana (uploading csv file), getting the below error. Some documents could not be imported 1445 out of 45436 documents c… --- ## [Agent randomly stops sending data but still checks in to fleet](https://discuss.elastic.co/t/agent-randomly-stops-sending-data-but-still-checks-in-to-fleet/277704)
**Author:** [@greggailly](https://discuss.elastic.co/u/greggailly)\ **Replies:** 3\ **Last updated:** [July 6, 2021, 9:05am UTC](https://discuss.elastic.co/t/agent-randomly-stops-sending-data-but-still-checks-in-to-fleet/277704 "2021-07-06T09:05:15Z")
Hi everybody, In case it might be related, the agents were enrolled according to the procedure described in the following topic https://discuss.elastic.co/t/agent-stuck-on-updating-when-enrolling/277703 as enroll proces… --- ## [Перенос нод кластера в docker](https://discuss.elastic.co/t/docker/261126)
**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\ **Replies:** 3\ **Last updated:** [January 14, 2021, 5:59pm UTC](https://discuss.elastic.co/t/docker/261126 "2021-01-14T17:59:47Z")
Добрый день. Есть кластер из 4х нод - 3 дата и 1 координатор. Пытаюсь запустить координатора в docker. Прочитал официальную инструкцию, но не понял как правильно переносить инстансы, если они на разных нодах. Права на … --- ## [Issue in deserializing WKT Geoshape](https://discuss.elastic.co/t/issue-in-deserializing-wkt-geoshape/188804)
**Author:** [@PatriceMarin](https://discuss.elastic.co/u/PatriceMarin)\ **Replies:** 3\ **Last updated:** [July 5, 2019, 12:38am UTC](https://discuss.elastic.co/t/issue-in-deserializing-wkt-geoshape/188804 "2019-07-05T00:38:24Z")
Hi, I've got an unexpected exception when I'm querying an index containing GeoShape data. My index is a city with a geo\_shape property which represents the polygon of the city. After indexing all my cities, I'm queryi… --- ## [Bucket script aggregation in kibana visualization](https://discuss.elastic.co/t/bucket-script-aggregation-in-kibana-visualization/178336)
**Author:** [@Josip\_Cagalj](https://discuss.elastic.co/u/Josip_Cagalj)\ **Replies:** 0\ **Last updated:** [April 24, 2019, 10:14pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-in-kibana-visualization/178336 "2019-04-24T22:14:34Z")
Hi, in my index I'm holding transaction data and I'm storing (among other stuff) fields transactionType and amount. I'm interested in Transaction types 1 (withdraw) and 2 (deposit). I'm trying to visualize the following … --- ## [Problem with : curl -XGET ‘localhost:9200/logstash-2018.05.03/\_search?pretty&q=response=200’](https://discuss.elastic.co/t/problem-with-curl-xget-localhost-9200-logstash-2018-05-03-search-pretty-q-response-200/130587)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 3\ **Last updated:** [May 4, 2018, 10:15am UTC](https://discuss.elastic.co/t/problem-with-curl-xget-localhost-9200-logstash-2018-05-03-search-pretty-q-response-200/130587 "2018-05-04T10:15:51Z")
I had this error when i try with other logs ( the test was successfull with logtash-totu ) : { "error" : { "root\_cause" : \[ { "type" : "index\_not\_found\_exception", "reason" : "no such index", "resource.type" : "in… --- ## [Logstash does not start; does not accept Java version](https://discuss.elastic.co/t/logstash-does-not-start-does-not-accept-java-version/113832)
**Author:** [@enrique3000](https://discuss.elastic.co/u/enrique3000)\ **Replies:** 0\ **Last updated:** [January 2, 2018, 8:26pm UTC](https://discuss.elastic.co/t/logstash-does-not-start-does-not-accept-java-version/113832 "2018-01-02T20:26:57Z")
Best regard. I would like to know why the Logstash (version 6.1.1) that I have installed locally, does not accept the Java version that is on my computer. After locating in DOS in the directory where I have it installed … --- ## [Unable to send logs to logstash](https://discuss.elastic.co/t/unable-to-send-logs-to-logstash/107260)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 3\ **Last updated:** [November 13, 2017, 5:22pm UTC](https://discuss.elastic.co/t/unable-to-send-logs-to-logstash/107260 "2017-11-13T17:22:00Z")
filebeat.prospectors: input\_type: log paths: /home/niked/Downloads/tom.log document\_type: prepaid\_logs multiline: pattern =\> "^%{TIMESTAMP\_ISO8601} " negate =\> true what =\> previous output.logstash: hosts: \["l… --- ## [Logstash Fails to insert the data in Elasticseach](https://discuss.elastic.co/t/logstash-fails-to-insert-the-data-in-elasticseach/89709)
**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 12:21pm UTC](https://discuss.elastic.co/t/logstash-fails-to-insert-the-data-in-elasticseach/89709 "2017-06-16T12:21:26Z")
Hi While Logstash getting started with the following config elasticsearch { manage\_template =\> false codec =\> "json" hosts =\>\["10.4.1.70:9299"\] index … --- ## [Indexing slow down when we increase data node](https://discuss.elastic.co/t/indexing-slow-down-when-we-increase-data-node/69532)
**Author:** [@parthiban\_p](https://discuss.elastic.co/u/parthiban_p)\ **Replies:** 3\ **Last updated:** [December 21, 2016, 2:03pm UTC](https://discuss.elastic.co/t/indexing-slow-down-when-we-increase-data-node/69532 "2016-12-21T14:03:17Z")
We are using Elastic Search Nest client for our application , we did load testing testing on inserting documents into Elastic Search Cluster. Whenever we increase the data node, performance get degraded. Master Node … --- ## [Mulitple nodes on one server for testing](https://discuss.elastic.co/t/mulitple-nodes-on-one-server-for-testing/39919)
**Author:** [@wilson.dieujuste](https://discuss.elastic.co/u/wilson.dieujuste)\ **Replies:** 3\ **Last updated:** [January 26, 2016, 5:25pm UTC](https://discuss.elastic.co/t/mulitple-nodes-on-one-server-for-testing/39919 "2016-01-26T17:25:45Z")
Im trying to setup 2 nodes on one machine with the following configuration: es-all-01 (expecting this to be MASTER, CLIENT, DATA): http.port: 9201 discovery.zen.ping.multicast.enabled: false discovery.zen.ping.unicast.ho… --- ## [Suddenly Lost data after this 'index not found exception'](https://discuss.elastic.co/t/suddenly-lost-data-after-this-index-not-found-exception/35996)
**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\ **Replies:** 0\ **Last updated:** [December 1, 2015, 7:56am UTC](https://discuss.elastic.co/t/suddenly-lost-data-after-this-index-not-found-exception/35996 "2015-12-01T07:56:43Z")
Hi Today i have faced strange issue, After i am getting cluster alert for red, I have investigated on the particular Node which one is down. In this node we have 3 shards ,each contains 400 - 500 GB Data.After I go… --- ## [Frontend click metrics](https://discuss.elastic.co/t/frontend-click-metrics/316563)
**Author:** [@batata](https://discuss.elastic.co/u/batata)\ **Replies:** 2\ **Last updated:** [October 18, 2022, 2:23pm UTC](https://discuss.elastic.co/t/frontend-click-metrics/316563 "2022-10-18T14:23:31Z")
Hi. I'm new to Elastic and I have been reading the docs for what I need and I can't find something precise. I want a metric click event only on some parts of the interface. This button triggers a third party widget ap… --- ## [A question about a potential vulnerability in Kibana](https://discuss.elastic.co/t/a-question-about-a-potential-vulnerability-in-kibana/323195)
**Author:** [@frenkel](https://discuss.elastic.co/u/frenkel)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 7:23pm UTC](https://discuss.elastic.co/t/a-question-about-a-potential-vulnerability-in-kibana/323195 "2023-01-16T19:23:20Z")
Hi, There is this CVE about a vulnerability in JsonWebToken: https://nvd.nist.gov/vuln/detail/CVE-2022-23529 This is a vulnerability about insecure input validation in jwt.verify function, in JsonWebToken versions \<= … --- ## [Where to find Fleet Integration new additions and changelogs](https://discuss.elastic.co/t/where-to-find-fleet-integration-new-additions-and-changelogs/286636)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 3\ **Last updated:** [November 9, 2021, 9:52am UTC](https://discuss.elastic.co/t/where-to-find-fleet-integration-new-additions-and-changelogs/286636 "2021-11-09T09:52:51Z")
Is there a way to identify which new Fleet Integrations are added and also a changelog when they are upgraded? Is there a central location for this information? I can only tell right now (maybe incorrectly) via the Inte… --- ## [Why is the length of keyword array always 1?](https://discuss.elastic.co/t/why-is-the-length-of-keyword-array-always-1/328164)
**Author:** [@lyq2333](https://discuss.elastic.co/u/lyq2333)\ **Replies:** 6\ **Last updated:** [March 23, 2023, 12:56am UTC](https://discuss.elastic.co/t/why-is-the-length-of-keyword-array-always-1/328164 "2023-03-23T00:56:28Z")
I create an index by PUT my-index-000002 { "mappings": { "properties": { "content":{ "type": "keyword", "index\_options": "freqs" }, "id":{ "type": "integer" } } … --- ## [How to visualize deeper into a donut chart?](https://discuss.elastic.co/t/how-to-visualize-deeper-into-a-donut-chart/318017)
**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\ **Replies:** 6\ **Last updated:** [November 10, 2022, 10:23am UTC](https://discuss.elastic.co/t/how-to-visualize-deeper-into-a-donut-chart/318017 "2022-11-10T10:23:57Z")
Hi! We'd like to implement something similar to the "baobab" tool on Ubuntu. It's a tool that displays information about the size of all the folders and files in the hard drive. It starts with a simple donut chart repr… --- ## [Change local ip address to "any text" in elasticsearch logs](https://discuss.elastic.co/t/change-local-ip-address-to-any-text-in-elasticsearch-logs/313771)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 6\ **Last updated:** [September 6, 2022, 10:36pm UTC](https://discuss.elastic.co/t/change-local-ip-address-to-any-text-in-elasticsearch-logs/313771 "2022-09-06T22:36:54Z")
hi all! we collect nginx access logs in elasticsearch. here is an example of incoming nginx access logs: kibana-linux.elk.com 10.211.45.45 - \[05/Sep/2022:15:26:54 +0300\] UNIX-TIME-1662380814.467 "GET /internal/security… --- ## [How to profile search query in elasticsearch 1.6?](https://discuss.elastic.co/t/how-to-profile-search-query-in-elasticsearch-1-6/65933)
**Author:** [@himan\_Jain](https://discuss.elastic.co/u/himan_Jain)\ **Replies:** 6\ **Last updated:** [November 14, 2016, 8:45am UTC](https://discuss.elastic.co/t/how-to-profile-search-query-in-elasticsearch-1-6/65933 "2016-11-14T08:45:08Z")
How can I profile search query in elasticsearch 1.6 since ProfileAPI is not available for this version? --- ## [Is there a way to completely drop incoming documents from indexing based on some criteria?](https://discuss.elastic.co/t/is-there-a-way-to-completely-drop-incoming-documents-from-indexing-based-on-some-criteria/21241)
**Author:** [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)\ **Replies:** 6\ **Last updated:** [December 14, 2014, 4:39am UTC](https://discuss.elastic.co/t/is-there-a-way-to-completely-drop-incoming-documents-from-indexing-based-on-some-criteria/21241 "2014-12-14T04:39:23Z")
I noticed that occasionally I need to shield my ES cluster from some documents, which are too many or too big or otherwise poison ES. Usually I can formulate pretty easy query or criteria to detect those documents … --- ## [Discovery.type : single-node but the new indexes are always : index.number\_of\_replicas" : "1"?](https://discuss.elastic.co/t/discovery-type-single-node-but-the-new-indexes-are-always-index-number-of-replicas-1/309318)
**Author:** [@PM75](https://discuss.elastic.co/u/PM75)\ **Replies:** 5\ **Last updated:** [July 19, 2022, 10:21am UTC](https://discuss.elastic.co/t/discovery-type-single-node-but-the-new-indexes-are-always-index-number-of-replicas-1/309318 "2022-07-19T10:21:43Z")
Hello, \[root@STL-SAS-025 ~\]# /usr/share/elasticsearch/bin/elasticsearch --version Version: 8.3.1, Build: rpm/b9a6b2867996ba92ceac66cb5bafc6db25e7910e/2022-06-29T18:39:55.731992798Z, JVM: 18.0.1.1 I'm having trouble und… --- ## [Disk usage threshold](https://discuss.elastic.co/t/disk-usage-threshold/277328)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 1:35am UTC](https://discuss.elastic.co/t/disk-usage-threshold/277328 "2021-07-06T01:35:29Z")
I'm planning integrate Elasticsearch as a single node cluster per application server. Application server is getting hosted in customer environment. For disk threshold, I'm planning to use only disk flood\_stage configura… --- ## [Redis slowlog monitoring with ECK (Elastic on Kubernetes)?](https://discuss.elastic.co/t/redis-slowlog-monitoring-with-eck-elastic-on-kubernetes/246377)
**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\ **Replies:** 5\ **Last updated:** [August 29, 2020, 2:02am UTC](https://discuss.elastic.co/t/redis-slowlog-monitoring-with-eck-elastic-on-kubernetes/246377 "2020-08-29T02:02:45Z")
Hi thanks for the wonderful elastic stack! I am trying to monitor the SLOWLOG of Redis in elastic, and I am on Kubernetes (using ECK). The doc says Redis filebeat for slowlog needs to specify a list of hosts. However, in… --- ## [Reindex documents following a query in order to make a snapshot](https://discuss.elastic.co/t/reindex-documents-following-a-query-in-order-to-make-a-snapshot/224307)
**Author:** [@stack](https://discuss.elastic.co/u/stack)\ **Replies:** 5\ **Last updated:** [March 23, 2020, 5:59pm UTC](https://discuss.elastic.co/t/reindex-documents-following-a-query-in-order-to-make-a-snapshot/224307 "2020-03-23T17:59:04Z")
Hello, I am currently looking at making a snapshot of my Active Directory users login events that i have been gathering using Winlogbeat. I don't want to snapshot the whole winlogbeat index, just theses specifics event… --- ## [Kubernetes metadata missing from APM documents](https://discuss.elastic.co/t/kubernetes-metadata-missing-from-apm-documents/167190)
**Author:** [@drinnird](https://discuss.elastic.co/u/drinnird)\ **Replies:** 5\ **Last updated:** [February 6, 2019, 8:55pm UTC](https://discuss.elastic.co/t/kubernetes-metadata-missing-from-apm-documents/167190 "2019-02-06T20:55:21Z")
Kibana V. 6.5.4: ES V. 5.6: APM V 6.6.0: APM agent nodeJS v 1.12: \*\*Installed from docker image docker.elastic.co/apm/apm-server:6.6.0 \*\*: Fresh install Is there anything special in your setup? Using kubernetes, de… --- ## [Connection between logstash and filebeat](https://discuss.elastic.co/t/connection-between-logstash-and-filebeat/166119)
**Author:** [@cppatel](https://discuss.elastic.co/u/cppatel)\ **Replies:** 5\ **Last updated:** [January 29, 2019, 10:16am UTC](https://discuss.elastic.co/t/connection-between-logstash-and-filebeat/166119 "2019-01-29T10:16:53Z")
Architecture setup: logstash : logstash-6.4.0-1.noarch (installed on RHEL7.5) filebeat : filebeat version 6.4.0 (installed on Windows 2016 (64 bit OS)) elasticsearch : elasticsearch-oss-6.4.0-1.noarch (installed on R… --- ## [Top Hit aggregation with heat map missing drop down value](https://discuss.elastic.co/t/top-hit-aggregation-with-heat-map-missing-drop-down-value/165109)
**Author:** [@ioannism](https://discuss.elastic.co/u/ioannism)\ **Replies:** 5\ **Last updated:** [January 23, 2019, 10:45am UTC](https://discuss.elastic.co/t/top-hit-aggregation-with-heat-map-missing-drop-down-value/165109 "2019-01-23T10:45:43Z")
I'm trying to create a heat map with monitor.status reported from heartbeat, but the "Aggregate with" drop down remains stubbornly empty. I only have this issue with heat map as a vis, it works for others. Is this a genu… --- ## [KV not including space values](https://discuss.elastic.co/t/kv-not-including-space-values/119205)
**Author:** [@tag\_v](https://discuss.elastic.co/u/tag_v)\ **Replies:** 5\ **Last updated:** [February 9, 2018, 10:53am UTC](https://discuss.elastic.co/t/kv-not-including-space-values/119205 "2018-02-09T10:53:18Z")
input message: key1=first value key2=second value key3=value3 required output: { "key1" =\> "first value", "key2" =\> "second value", "key3" =\> "value3", "message" =\> "key1=first value key2=second value key3=value3" … --- ## [How to avoid duplicate data in data table visualization](https://discuss.elastic.co/t/how-to-avoid-duplicate-data-in-data-table-visualization/260182)
**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 3:39pm UTC](https://discuss.elastic.co/t/how-to-avoid-duplicate-data-in-data-table-visualization/260182 "2021-01-05T15:39:26Z")
I have data where I have customer names and devices linked to it. I want to visualize this on a data table. For this, I have added top hit as aggregation in metrics and have used field as Device. In the bucket, I have a… --- ## [@timestamp filter missing in Kibana time filter field](https://discuss.elastic.co/t/timestamp-filter-missing-in-kibana-time-filter-field/254191)
**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 3:08am UTC](https://discuss.elastic.co/t/timestamp-filter-missing-in-kibana-time-filter-field/254191 "2020-11-04T03:08:52Z")
Kibana 6.8.12 management Logs are ingested using curl curl -v -XPOST 'http://localhost:9200/missing1/\_doc/\_bulk?pretty' -H 'Content-Type: application/json' --data-binary @missing Why is @timestamp missing in the list… --- ## [Exact + partial match of text documents (with bool query?)](https://discuss.elastic.co/t/exact-partial-match-of-text-documents-with-bool-query/218454)
**Author:** [@hao9850](https://discuss.elastic.co/u/hao9850)\ **Replies:** 1\ **Last updated:** [February 9, 2020, 6:02pm UTC](https://discuss.elastic.co/t/exact-partial-match-of-text-documents-with-bool-query/218454 "2020-02-09T18:02:32Z")
Hi friends! I am building a news search engine and need a way to construct ES queries that delivers relevant results. Currently, I am using a combination of must and should clauses in a bool query for every news topic a … --- ## [Monitor Status Table](https://discuss.elastic.co/t/monitor-status-table/196921)
**Author:** [@Surya369](https://discuss.elastic.co/u/Surya369)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 3:28pm UTC](https://discuss.elastic.co/t/monitor-status-table/196921 "2019-08-29T15:28:10Z")
There has been an issue that the monitor status tab is only able to show 50 entries whereas I have setup this system for 54 entries. The endpoint status is displaying that all the 54 servers are up but the monitor statu… [Previous page](https://discuss.elastic.co/top.md?page=1630&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1632&per_page=50&period=all)