# Top **URL:** https://discuss.elastic.co/top.md?page=1639&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1640 --- ## [River errors on elasticsearch restart](https://discuss.elastic.co/t/river-errors-on-elasticsearch-restart/13357)
**Author:** [@11126](https://discuss.elastic.co/u/11126)\ **Replies:** 5\ **Last updated:** [September 24, 2013, 3:40am UTC](https://discuss.elastic.co/t/river-errors-on-elasticsearch-restart/13357 "2013-09-24T03:40:51Z")
Hi, There are some errors on elasticsearch restart. Full log on github issue https://github.com/richardwilly98/elasticsearch-river-mongodb/issues/120 After several messages river and elasticsearch worked fine. Wh… --- ## [S3 input plugin taking really long time to process](https://discuss.elastic.co/t/s3-input-plugin-taking-really-long-time-to-process/313261)
**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\ **Replies:** 4\ **Last updated:** [September 13, 2022, 12:26pm UTC](https://discuss.elastic.co/t/s3-input-plugin-taking-really-long-time-to-process/313261 "2022-09-13T12:26:27Z")
Hi Team, I am using s3 input plugins to get billing data from aws. There are almost 15-20 files (ending with .csv.gz), each 115-120 MB of size. Now these files are replaced next day with new set of files Logstash conf… --- ## [How to get JVM Memory used with metricbeat jolokia module](https://discuss.elastic.co/t/how-to-get-jvm-memory-used-with-metricbeat-jolokia-module/267828)
**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 6:49am UTC](https://discuss.elastic.co/t/how-to-get-jvm-memory-used-with-metricbeat-jolokia-module/267828 "2021-04-12T06:49:33Z")
I'm trying to use Jolokia + metricbeat to gather Info about the JVM Memory. I did everything like described in the docs but it won't work. https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-jo… --- ## [How to create index-pattern and import dashboard using REST API?](https://discuss.elastic.co/t/how-to-create-index-pattern-and-import-dashboard-using-rest-api/138651)
**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\ **Replies:** 4\ **Last updated:** [July 8, 2018, 11:50pm UTC](https://discuss.elastic.co/t/how-to-create-index-pattern-and-import-dashboard-using-rest-api/138651 "2018-07-08T23:50:24Z")
Hi, I can create index-pattern and import dashboard using kibana GUI, but I'd like to do these tasks programatically. The kibana version what I am using is 6.2.2. Thanks! --- ## [Kibana Monitoring App reports Elasticsearch as Version: 6.0.0 instead of 6.0.1](https://discuss.elastic.co/t/kibana-monitoring-app-reports-elasticsearch-as-version-6-0-0-instead-of-6-0-1/111186)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [December 11, 2017, 10:24pm UTC](https://discuss.elastic.co/t/kibana-monitoring-app-reports-elasticsearch-as-version-6-0-0-instead-of-6-0-1/111186 "2017-12-11T22:24:09Z")
I did rolling update to each of my Elasticsearch nodes to 6.0.1 yesterday, yet still seeing: Version: 6.0.0 in Elasticsearch Overview through Monitoring app in Kibana. Bug? Please advise. --- ## [Index level settings in elasticsearch v5.0](https://discuss.elastic.co/t/index-level-settings-in-elasticsearch-v5-0/96193)
**Author:** [@1222kkk](https://discuss.elastic.co/u/1222kkk)\ **Replies:** 4\ **Last updated:** [August 14, 2017, 8:58am UTC](https://discuss.elastic.co/t/index-level-settings-in-elasticsearch-v5-0/96193 "2017-08-14T08:58:31Z")
Hi all, I noticed that index level settings can’t be set in elasticsearch.yml. I just wonder how I can set indices.fielddata.cache.size ? and other index memory cache settings like this one. --- ## [Logstash output to kafka does not working?](https://discuss.elastic.co/t/logstash-output-to-kafka-does-not-working/88176)
**Author:** [@zhaochl](https://discuss.elastic.co/u/zhaochl)\ **Replies:** 4\ **Last updated:** [June 4, 2017, 8:54am UTC](https://discuss.elastic.co/t/logstash-output-to-kafka-does-not-working/88176 "2017-06-04T08:54:15Z")
as question is, who can give me a example, my config as follows: input { #stdin { } kafka { bootstrap\_servers =\> "bi1:9092,bi2:9092,bi3:9092" topics =\> "test" reset\_beginning=\>true … --- ## [Compound Words not found but Filter is configured](https://discuss.elastic.co/t/compound-words-not-found-but-filter-is-configured/62355)
**Author:** [@Miku](https://discuss.elastic.co/u/Miku)\ **Replies:** 4\ **Last updated:** [October 7, 2016, 11:49am UTC](https://discuss.elastic.co/t/compound-words-not-found-but-filter-is-configured/62355 "2016-10-07T11:49:14Z")
Hi guys, i experiment with search phrases of german compound words. The testword is "kennenlernen" which consists of the two words "kennen" and "lernen". I configured the following settings to achive that i can find th… --- ## [Logstash blocs backend application server](https://discuss.elastic.co/t/logstash-blocs-backend-application-server/57244)
**Author:** [@yevgenl](https://discuss.elastic.co/u/yevgenl)\ **Replies:** 4\ **Last updated:** [August 5, 2016, 2:02pm UTC](https://discuss.elastic.co/t/logstash-blocs-backend-application-server/57244 "2016-08-05T14:02:03Z")
Server configuration: Glassfish -\> Log4j socket appender -\> Logstash log4j input -\> Logstash elasticsearch output Everything works as expected but if elasticsearch goes down my application server become blocked. Nobo… --- ## [Geo distance and bounding box](https://discuss.elastic.co/t/geo-distance-and-bounding-box/10656)
**Author:** [@amnesia7](https://discuss.elastic.co/u/amnesia7)\ **Replies:** 4\ **Last updated:** [February 9, 2013, 12:06pm UTC](https://discuss.elastic.co/t/geo-distance-and-bounding-box/10656 "2013-02-09T12:06:13Z")
I am doing a geo\_distance filter in my search (and I also have geo\_distance as one of my sorting fields). I'm not sure how ES performs the geo\_distance filtering under the hood but I was wondering whether I should… --- ## [Getting No mapping Error](https://discuss.elastic.co/t/getting-no-mapping-error/344283)
**Author:** [@Anand\_Konagala](https://discuss.elastic.co/u/Anand_Konagala)\ **Replies:** 1\ **Last updated:** [October 3, 2023, 12:20pm UTC](https://discuss.elastic.co/t/getting-no-mapping-error/344283 "2023-10-03T12:20:26Z")
Hii, I tried a lot of queries.. but, Its not works.. It through an error.. Can anyone try this Here is my mapping, PUT array\_sort { "mappings": { "properties": { "Skills": { "type": "nested", … --- ## [Fleet server loading slowly](https://discuss.elastic.co/t/fleet-server-loading-slowly/321108)
**Author:** [@krzychohoho](https://discuss.elastic.co/u/krzychohoho)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 9:15am UTC](https://discuss.elastic.co/t/fleet-server-loading-slowly/321108 "2022-12-21T09:15:57Z")
Hi, I came across a strange issue. My Fleet server is permamently loading. After ten minutes it pops up but there are other issues. This is what I see for 4 - 10 minutes every time: My Elastick stack is v 8.5.1. The… --- ## [Elastic APM Data Retention and Enterprise edition policy](https://discuss.elastic.co/t/elastic-apm-data-retention-and-enterprise-edition-policy/306571)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 1\ **Last updated:** [June 8, 2022, 3:25am UTC](https://discuss.elastic.co/t/elastic-apm-data-retention-and-enterprise-edition-policy/306571 "2022-06-08T03:25:01Z")
Hi Team, I am currently using ELK along with dotnet and java APM agents for monitoring applications of respective technologies. I wanted to confirm on below points Data retention: Since Elasticsearch uses Lucene docu… --- ## [How to change the color's in treemap in lens in Kibana?](https://discuss.elastic.co/t/how-to-change-the-colors-in-treemap-in-lens-in-kibana/266883)
**Author:** [@Saurabh\_Patil](https://discuss.elastic.co/u/Saurabh_Patil)\ **Replies:** 1\ **Last updated:** [March 11, 2021, 3:46pm UTC](https://discuss.elastic.co/t/how-to-change-the-colors-in-treemap-in-lens-in-kibana/266883 "2021-03-11T15:46:41Z")
Hey, I am trying to create treemap using lens in kibana. But I am not able to change the color's. So, is there any method for changing the color's ? Thank you --- ## [Will ElasticSearch high-level rest java client be always forward compatible?](https://discuss.elastic.co/t/will-elasticsearch-high-level-rest-java-client-be-always-forward-compatible/220038)
**Author:** [@Jerry\_Peng](https://discuss.elastic.co/u/Jerry_Peng)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 6:19pm UTC](https://discuss.elastic.co/t/will-elasticsearch-high-level-rest-java-client-be-always-forward-compatible/220038 "2020-02-19T18:19:46Z")
Just came across the following post: It mentions that 6.x high level rest java client will work with cluster running 7.x, as forward compatibility is guaranteed. However, I want to double confirm that if, for future r… --- ## [Tile map service CORS errors](https://discuss.elastic.co/t/tile-map-service-cors-errors/216262)
**Author:** [@rainae](https://discuss.elastic.co/u/rainae)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 4:33pm UTC](https://discuss.elastic.co/t/tile-map-service-cors-errors/216262 "2020-01-23T16:33:07Z")
Hi, I tried to create a map with a tile map service with the url https://tiles.openrailwaymap.org/standard/{z}/{x}/{y}.png but the tiles are not loaded, and the debug-console of the browser tells me: Blockquote Acc… --- ## [Upgrade ELK Stack from 5.x -\> 6.5 - Now have stability issues / errors!](https://discuss.elastic.co/t/upgrade-elk-stack-from-5-x-6-5-now-have-stability-issues-errors/203458)
**Author:** [@huowen](https://discuss.elastic.co/u/huowen)\ **Replies:** 7\ **Last updated:** [October 16, 2019, 11:25am UTC](https://discuss.elastic.co/t/upgrade-elk-stack-from-5-x-6-5-now-have-stability-issues-errors/203458 "2019-10-16T11:25:02Z")
HI all, really would appreciated your help on the following. I have been running an ELK stack very successfully for over 2 years on version 5.x. There was a requirement to upgrade which I have done for all components (El… --- ## [Dedup Help!](https://discuss.elastic.co/t/dedup-help/196823)
**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:25am UTC](https://discuss.elastic.co/t/dedup-help/196823 "2019-08-28T11:25:25Z")
Hello All, I am attempting to use DEDUP command in Kibana, via the Query DSL. { "exists": { "field": "TSID" }, "dedup": true } Getting this error: Discover: \[parsing\_exception\] \[exists\] malformed query, exp… --- ## [Field missing in explicit mapping causes import error](https://discuss.elastic.co/t/field-missing-in-explicit-mapping-causes-import-error/75017)
**Author:** [@Matthew\_Bullock](https://discuss.elastic.co/u/Matthew_Bullock)\ **Replies:** 1\ **Last updated:** [February 14, 2017, 12:31pm UTC](https://discuss.elastic.co/t/field-missing-in-explicit-mapping-causes-import-error/75017 "2017-02-14T12:31:12Z")
Hi i have explicitly defined a filed in my mapping to force it as a keyword. I use the Bulk API to import the data However some cases this field in not present in the imported data. This causes an import error and an… --- ## [Tokenizing a hashtag](https://discuss.elastic.co/t/tokenizing-a-hashtag/65844)
**Author:** [@winder](https://discuss.elastic.co/u/winder)\ **Replies:** 1\ **Last updated:** [November 14, 2016, 9:05am UTC](https://discuss.elastic.co/t/tokenizing-a-hashtag/65844 "2016-11-14T09:05:33Z")
I want to create a pattern\_capture filter to tokenize a hashtag. For instance #My\_Hashtag needs to tokenize to #My\_Hashtag and My\_Hashtag. There is a project from twitter with the regular expression I need, but it is ki… --- ## [Kibana discover histogram not showing documents](https://discuss.elastic.co/t/kibana-discover-histogram-not-showing-documents/41076)
**Author:** [@Brandon\_Metcalf](https://discuss.elastic.co/u/Brandon_Metcalf)\ **Replies:** 1\ **Last updated:** [February 8, 2016, 9:54pm UTC](https://discuss.elastic.co/t/kibana-discover-histogram-not-showing-documents/41076 "2016-02-08T21:54:29Z")
I am using the AWS Elasticsearch service that has Kibana 4.0.3 installed. However, when I search in the Discover tab, I get hits, but nothing shows up in the histogram graph. I have attached two screenshots with the se… --- ## [Shield dependency in SBT](https://discuss.elastic.co/t/shield-dependency-in-sbt/35802)
**Author:** [@tpraizler](https://discuss.elastic.co/u/tpraizler)\ **Replies:** 1\ **Last updated:** [November 28, 2015, 6:17pm UTC](https://discuss.elastic.co/t/shield-dependency-in-sbt/35802 "2015-11-28T18:17:08Z")
Hey! I am trying to import the shield dependency into my project (2.0.1). My problem is that I am working with sbt, and I couldn't find how to import it. I am using this as my reference : https://www.elastic.co/guide/e… --- ## [The client\_location doesn't appear in the output fieds](https://discuss.elastic.co/t/the-client-location-doesnt-appear-in-the-output-fieds/27734)
**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\ **Replies:** 1\ **Last updated:** [August 20, 2015, 7:57am UTC](https://discuss.elastic.co/t/the-client-location-doesnt-appear-in-the-output-fieds/27734 "2015-08-20T07:57:08Z")
Hi, My http protocols look like the following. It appears the client\_location never appears in the output fields. Is there is somehting wrong in my configuration? protocols: http: # Configure the ports where to lis… --- ## [Query DSL Date Range](https://discuss.elastic.co/t/query-dsl-date-range/27295)
**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\ **Replies:** 1\ **Last updated:** [August 13, 2015, 1:35am UTC](https://discuss.elastic.co/t/query-dsl-date-range/27295 "2015-08-13T01:35:55Z")
I want to initially get all the documents from the date range and then apply grouping on user. { "size": 0, "aggs": { "range": { "date\_range": { "field": "@timestamp", "format": "MM-yyyy… --- ## [Safe to set doc\_values: true on existing index?](https://discuss.elastic.co/t/safe-to-set-doc-values-true-on-existing-index/22502)
**Author:** [@Justin\_Zhu\_2](https://discuss.elastic.co/u/Justin_Zhu_2)\ **Replies:** 7\ **Last updated:** [March 6, 2015, 2:09am UTC](https://discuss.elastic.co/t/safe-to-set-doc-values-true-on-existing-index/22502 "2015-03-06T02:09:25Z")
Would this start building the doc values structure for new documents indexed and not prior docs? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe … --- ## [Adding mapping and settings using Java API](https://discuss.elastic.co/t/adding-mapping-and-settings-using-java-api/13983)
**Author:** [@Gerson\_Galang1](https://discuss.elastic.co/u/Gerson_Galang1)\ **Replies:** 1\ **Last updated:** [October 17, 2013, 5:51am UTC](https://discuss.elastic.co/t/adding-mapping-and-settings-using-java-api/13983 "2013-10-17T05:51:00Z")
Hi guys, I'm using ES 0.90.02. I followed kimchy's advice on this similar post ( http://elasticsearch-users.115913.n3.nabble.com/updating-settings-and-mapping-with-java-API-td3707085.html) but the code I've written do… --- ## [Update field](https://discuss.elastic.co/t/update-field/6306)
**Author:** [@Frank\_LaRosa](https://discuss.elastic.co/u/Frank_LaRosa)\ **Replies:** 7\ **Last updated:** [January 10, 2012, 8:55am UTC](https://discuss.elastic.co/t/update-field/6306 "2012-01-10T08:55:32Z")
Is there a way (using the Java API) to update a field without having to re-send all the other fields in the document? --- ## [Hey I created canvas widget using below script but widgets failed to load in 8.4.2 Version](https://discuss.elastic.co/t/hey-i-created-canvas-widget-using-below-script-but-widgets-failed-to-load-in-8-4-2-version/317782)
**Author:** [@Nabeel\_Ahmed\_NAK](https://discuss.elastic.co/u/Nabeel_Ahmed_NAK)\ **Replies:** 6\ **Last updated:** [October 31, 2022, 12:31pm UTC](https://discuss.elastic.co/t/hey-i-created-canvas-widget-using-below-script-but-widgets-failed-to-load-in-8-4-2-version/317782 "2022-10-31T12:31:40Z")
I'm facing an issue of failed loading of widgets and even assets like images when elasticsearch moves to 8.3.2 to 8.4.2. I have two kinds of widgets like Status count and percentage of status (Also handle divide by zero… --- ## [After Deleting the older snapshots, it deleted first full snapshot](https://discuss.elastic.co/t/after-deleting-the-older-snapshots-it-deleted-first-full-snapshot/102397)
**Author:** [@vishu.kolki](https://discuss.elastic.co/u/vishu.kolki)\ **Replies:** 6\ **Last updated:** [October 3, 2017, 7:10am UTC](https://discuss.elastic.co/t/after-deleting-the-older-snapshots-it-deleted-first-full-snapshot/102397 "2017-10-03T07:10:06Z")
Hi, I have about 10 Older snapshots for Elasticsearch. If i delete the 8 older snapshot leaving current 2 of them. It is deleting the full snapshot which was created at first. So if i take now another snapshot, will it… --- ## [키바나 인덱스 패턴 생성 안되는 에러에 대하여](https://discuss.elastic.co/t/topic/185582)
**Author:** [@donghwan1020](https://discuss.elastic.co/u/donghwan1020)\ **Replies:** 0\ **Last updated:** [June 13, 2019, 8:50am UTC](https://discuss.elastic.co/t/topic/185582 "2019-06-13T08:50:27Z")
키바나 인덱스 패턴 생성 2단계 후, 필드 정의 까지 했지만, discovery, visualize, dashboard 메뉴에 들어가면 인덱스패턴을 하나이상 생성해야 한다고 나오고, 그 상태에서 인덱스 패턴을 생성할 경우 또 다시 같은 현상이 반복되는 상태입니다... 인덱스 패턴 생성이 정상적으로 되지 않는것 같습니다. ( 샘플데이터 추가 후 테스트 해봄... ) --- ## [Fail to Create Repository for Snapshots](https://discuss.elastic.co/t/fail-to-create-repository-for-snapshots/64495)
**Author:** [@tim](https://discuss.elastic.co/u/tim)\ **Replies:** 0\ **Last updated:** [October 31, 2016, 9:55pm UTC](https://discuss.elastic.co/t/fail-to-create-repository-for-snapshots/64495 "2016-10-31T21:55:41Z")
ELK Stack on single node ES 1.2.4 Curator 3.5.1 Want to create repository on attached NAS to save snapshots. Running everything as root to test. Created es\_repo under /mnt/NAS/ drwxrwxrwx 1 root elasticsearch 0 Oct 31 … --- ## [Kibana not installing on Ubuntu Server](https://discuss.elastic.co/t/kibana-not-installing-on-ubuntu-server/309988)
**Author:** [@Ronald\_Chinomona](https://discuss.elastic.co/u/Ronald_Chinomona)\ **Replies:** 3\ **Last updated:** [July 20, 2022, 7:50am UTC](https://discuss.elastic.co/t/kibana-not-installing-on-ubuntu-server/309988 "2022-07-20T07:50:27Z")
I have been trying to install Kibana on Ubuntu Server for the last two days. The package unpacking progress just gets stuck on 20%. I have tried on different VM's with different specs. I have made sure there is enough me… --- ## [How to configure filebeat for AD logs in Cloudwatch](https://discuss.elastic.co/t/how-to-configure-filebeat-for-ad-logs-in-cloudwatch/307690)
**Author:** [@johnstancox](https://discuss.elastic.co/u/johnstancox)\ **Replies:** 3\ **Last updated:** [June 23, 2022, 6:03am UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-for-ad-logs-in-cloudwatch/307690 "2022-06-23T06:03:01Z")
Hello Elastic/Beat super heroes, I am using filebeat to pull aws cloudwatch logs for an aws Active Directory service. So, the "message" property of the cloudwatch log record is the Windows Event log record. I would like… --- ## [Mapper size plugin on Elastic Cloud](https://discuss.elastic.co/t/mapper-size-plugin-on-elastic-cloud/303161)
**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\ **Replies:** 3\ **Last updated:** [April 26, 2022, 11:15am UTC](https://discuss.elastic.co/t/mapper-size-plugin-on-elastic-cloud/303161 "2022-04-26T11:15:51Z")
Hello, I've enabled the mapper size plugin on my Elastic Cloud cluster and would like to know how can I add that new field mapping to my existing indices? I know that I have to modify my index templates to add the mappi… --- ## [Upgrade Assistant API Not Responding](https://discuss.elastic.co/t/upgrade-assistant-api-not-responding/247138)
**Author:** [@ajrvester](https://discuss.elastic.co/u/ajrvester)\ **Replies:** 3\ **Last updated:** [September 11, 2020, 5:45pm UTC](https://discuss.elastic.co/t/upgrade-assistant-api-not-responding/247138 "2020-09-11T17:45:42Z")
Hello, I'm attempting to resolve an issue with one of our indexes before we perform an upgrade. We're currently running v6.8.8 of Elastic Cloud. I'm following the docs here to add a default field to our index to resolv… --- ## [Only show most current docs in Dashboard or Visualization](https://discuss.elastic.co/t/only-show-most-current-docs-in-dashboard-or-visualization/230785)
**Author:** [@cglencr](https://discuss.elastic.co/u/cglencr)\ **Replies:** 3\ **Last updated:** [May 19, 2020, 11:46pm UTC](https://discuss.elastic.co/t/only-show-most-current-docs-in-dashboard-or-visualization/230785 "2020-05-19T23:46:31Z")
Here is an example of what I would like to do in Elastic Every 10 minutes temperatures from cities are sent to an Elastic index: citytemps Citytemps index Index \_id CityID CityName TemperatureDate Temperature jkskhj2… --- ## [How to manage elasticsearch data directory](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-directory/97452)
**Author:** [@mohit214721](https://discuss.elastic.co/u/mohit214721)\ **Replies:** 3\ **Last updated:** [August 18, 2017, 6:03am UTC](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-directory/97452 "2017-08-18T06:03:52Z")
I am using ELK stack in UAT environment along with the filebeat functionality (installed in various webservers). While using it, i could see that directory /elasticsearch-5.2.2/data/nodes directory is getting increased … --- ## [Relationship between watches](https://discuss.elastic.co/t/relationship-between-watches/88967)
**Author:** [@abpabab](https://discuss.elastic.co/u/abpabab)\ **Replies:** 3\ **Last updated:** [June 12, 2017, 4:37am UTC](https://discuss.elastic.co/t/relationship-between-watches/88967 "2017-06-12T04:37:20Z")
I wanna do alert in escalation way, for example: In last 1 minute, my watch found 3 events met the condition, occurs on OBJECT\_A. So this watch marked with priority level is 1. In next firing, my watch found more 3 ev… --- ## [Bin is not a recognized command](https://discuss.elastic.co/t/bin-is-not-a-recognized-command/65640)
**Author:** [@azizsagi](https://discuss.elastic.co/u/azizsagi)\ **Replies:** 3\ **Last updated:** [November 10, 2016, 11:45am UTC](https://discuss.elastic.co/t/bin-is-not-a-recognized-command/65640 "2016-11-10T11:45:22Z")
Hi, I have successfully installed elasticsearch 5.0 in windows server 2012. I need to install marvel now. As I read that I need to install x-pack for this. I can't install x-pack. I have found the following command b… --- ## [GeoPolygon Query: Illegal shift value, must be 32..63; got shift=0](https://discuss.elastic.co/t/geopolygon-query-illegal-shift-value-must-be-32-63-got-shift-0/59850)
**Author:** [@Hithran](https://discuss.elastic.co/u/Hithran)\ **Replies:** 3\ **Last updated:** [September 6, 2016, 8:39am UTC](https://discuss.elastic.co/t/geopolygon-query-illegal-shift-value-must-be-32-63-got-shift-0/59850 "2016-09-06T08:39:48Z")
Hi, I'm having trouble executing a GeoPolygon query with a certain polygon and I'm unable to figure out what is wrong. I have tried several other polygons with the same shape, which all execute correctly. For some rea… --- ## [Logstash reads log file one step behind](https://discuss.elastic.co/t/logstash-reads-log-file-one-step-behind/43306)
**Author:** [@bilguuna](https://discuss.elastic.co/u/bilguuna)\ **Replies:** 3\ **Last updated:** [March 3, 2016, 6:32am UTC](https://discuss.elastic.co/t/logstash-reads-log-file-one-step-behind/43306 "2016-03-03T06:32:18Z")
Hi, I've been trying to create index on json log file that are generated by Log4j2 and viewed by Kibana. Everything is working fine except LogStash skips last object on the log file, next time when a log file is changed … --- ## [PHP search query fields](https://discuss.elastic.co/t/php-search-query-fields/41388)
**Author:** [@Rashed\_Karim](https://discuss.elastic.co/u/Rashed_Karim)\ **Replies:** 3\ **Last updated:** [February 11, 2016, 5:43am UTC](https://discuss.elastic.co/t/php-search-query-fields/41388 "2016-02-11T05:43:34Z")
I have this search query which works fine, but I am unable to translate this into a PHP $params associative array. POST /index/type/\_search { "fields": \[ "url" \], "query": { "query\_string": {… --- ## [Cannot install osquery-manager](https://discuss.elastic.co/t/cannot-install-osquery-manager/281311)
**Author:** [@cheapsupps](https://discuss.elastic.co/u/cheapsupps)\ **Replies:** 2\ **Last updated:** [August 13, 2021, 11:36am UTC](https://discuss.elastic.co/t/cannot-install-osquery-manager/281311 "2021-08-13T11:36:39Z")
Hi, I have deployed elasticsearch + kibana + package registry in the air-gap environment. However, I am having problem deploying the osquery-manager to my agent. Below is the error at my agent. {"log.level":"info","@ti… --- ## [Elasticsearch raw events](https://discuss.elastic.co/t/elasticsearch-raw-events/261052)
**Author:** [@karanp](https://discuss.elastic.co/u/karanp)\ **Replies:** 2\ **Last updated:** [January 19, 2021, 3:41pm UTC](https://discuss.elastic.co/t/elasticsearch-raw-events/261052 "2021-01-19T15:41:08Z")
So we have to create visualizations on raw event data in Elasticsearch. The data would include all the stages for that data in the same index for historical uses. The question is how do we look at data and only get the m… --- ## [Make parameters of a SQL query visible as a config option](https://discuss.elastic.co/t/make-parameters-of-a-sql-query-visible-as-a-config-option/217025)
**Author:** [@Rodrigo\_Jimenez](https://discuss.elastic.co/u/Rodrigo_Jimenez)\ **Replies:** 2\ **Last updated:** [January 31, 2020, 8:06pm UTC](https://discuss.elastic.co/t/make-parameters-of-a-sql-query-visible-as-a-config-option/217025 "2020-01-31T20:06:20Z")
Hi!, We have been using the apm agent for django and it's really cool, but we found that for dev environments we would find the option of seeing the raw SQL query the ORM is doing very very useful. I know that these pa… --- ## [Case-sensitive search and custom analyzer](https://discuss.elastic.co/t/case-sensitive-search-and-custom-analyzer/200399)
**Author:** [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 2:05pm UTC](https://discuss.elastic.co/t/case-sensitive-search-and-custom-analyzer/200399 "2019-09-20T14:05:15Z")
Hello every one I have been trying to activate case sensitive search in elasticsearch and what i found is it depend on type of analyzer. so i create a custom analyzer: PUT test\_index { "settings": { "analysis": { "… --- ## [Conditional match for numeric type in list?](https://discuss.elastic.co/t/conditional-match-for-numeric-type-in-list/130447)
**Author:** [@PandKing](https://discuss.elastic.co/u/PandKing)\ **Replies:** 2\ **Last updated:** [May 3, 2018, 1:36pm UTC](https://discuss.elastic.co/t/conditional-match-for-numeric-type-in-list/130447 "2018-05-03T13:36:46Z")
Hi, Please help, I have been struggling with this for a few days. How can I match a numeric field against a long list of numbers? Would it be best to use grok or ruby? I can do it for one but there must be a more el… --- ## [Can I read input file's metadata (file creation time) through logstash?](https://discuss.elastic.co/t/can-i-read-input-files-metadata-file-creation-time-through-logstash/118707)
**Author:** [@Dimitry\_Khan](https://discuss.elastic.co/u/Dimitry_Khan)\ **Replies:** 2\ **Last updated:** [February 7, 2018, 12:00pm UTC](https://discuss.elastic.co/t/can-i-read-input-files-metadata-file-creation-time-through-logstash/118707 "2018-02-07T12:00:59Z")
Hi, can logstash read the metadata of the input file; say, the file creation time? --- ## [Logstash Parsing - kv filter](https://discuss.elastic.co/t/logstash-parsing-kv-filter/107714)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 2\ **Last updated:** [November 20, 2017, 12:06pm UTC](https://discuss.elastic.co/t/logstash-parsing-kv-filter/107714 "2017-11-20T12:06:50Z")
Hi All, Iam trying to parse the events using kv filter , my kibana looks likes this \[image\] How to make just from : ebay@ebay.com but iam getting like 78AE89C45C: from : ebay@ebay.com moreover iam getting duplic… --- ## [Memory status when processing](https://discuss.elastic.co/t/memory-status-when-processing/102147)
**Author:** [@danielkmb2](https://discuss.elastic.co/u/danielkmb2)\ **Replies:** 2\ **Last updated:** [October 2, 2017, 7:51am UTC](https://discuss.elastic.co/t/memory-status-when-processing/102147 "2017-10-02T07:51:19Z")
Hello! I have one node dedicated for the ML tasks. When trying to run a big job, after some time the memory status turns to soft\_limit, and after some more hard\_limit. The ml node has enought resources, and its ram is u… [Previous page](https://discuss.elastic.co/top.md?page=1638&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1640&per_page=50&period=all)