# Top **URL:** https://discuss.elastic.co/top.md?page=1649&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1650 --- ## [Понимание основ](https://discuss.elastic.co/t/topic/61123)
**Author:** [@ktomu](https://discuss.elastic.co/u/ktomu)\ **Replies:** 1\ **Last updated:** [September 21, 2016, 8:12pm UTC](https://discuss.elastic.co/t/topic/61123 "2016-09-21T20:12:54Z")
Приветствую, помогите плз с пониманием основ. Когда мы передаем в индекс эластика какую-ту инфу, данная инфа проходит цепочку обработки – Analyzer. Целью этой цепочки является преобразование данной информации в набор ток… --- ## [Optimizing my current GROK Filter](https://discuss.elastic.co/t/optimizing-my-current-grok-filter/45289)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 1\ **Last updated:** [March 27, 2016, 8:02am UTC](https://discuss.elastic.co/t/optimizing-my-current-grok-filter/45289 "2016-03-27T08:02:50Z")
I am new to GROK work. As of now, I have created a filter which extracts all the data. But I need to extract only the SessionID, Method, RequestURI and Content values only. This is my request log EventId : 1, Level … --- ## [ELK sur centOs](https://discuss.elastic.co/t/elk-sur-centos/39128)
**Author:** [@Tristan\_Ferioli](https://discuss.elastic.co/u/Tristan_Ferioli)\ **Replies:** 1\ **Last updated:** [January 15, 2016, 8:56pm UTC](https://discuss.elastic.co/t/elk-sur-centos/39128 "2016-01-15T20:56:20Z")
Bonjour, j'ai installé le trio ELK Logstash, Elasticsearch, Kinaba. Mon but étant de récuperer de mon parefeu sonicwa avec logstash et de les récupérer sur elastisearch et de pour pouvoir les traiter avec kibana 4 (loc… --- ## [How to disable tcp6](https://discuss.elastic.co/t/how-to-disable-tcp6/1809)
**Author:** [@Mister74](https://discuss.elastic.co/u/Mister74)\ **Replies:** 1\ **Last updated:** [June 3, 2015, 12:11pm UTC](https://discuss.elastic.co/t/how-to-disable-tcp6/1809 "2015-06-03T12:11:58Z")
hello I need not explain the operation of TCP 6 and TCP4. for my part, can not enable TCP 4 for activation of ports 9200 and 9300 how to do thank you --- ## [Percentiles and outliers](https://discuss.elastic.co/t/percentiles-and-outliers/20010)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 1\ **Last updated:** [October 1, 2014, 2:44am UTC](https://discuss.elastic.co/t/percentiles-and-outliers/20010 "2014-10-01T02:44:11Z")
hi all, i'm trying to filter a search by 99 percentile, which for now i consider as outlier. currently i have 3 phases: 1. get all rows 2. calculate the 99 percentile for each row (by its key)- update t… --- ## [Custom Authorization Engine issue](https://discuss.elastic.co/t/custom-authorization-engine-issue/305024)
**Author:** [@ash\_n](https://discuss.elastic.co/u/ash_n)\ **Replies:** 8\ **Last updated:** [May 20, 2022, 7:25pm UTC](https://discuss.elastic.co/t/custom-authorization-engine-issue/305024 "2022-05-20T19:25:49Z")
I'm working on an implementation of a custom authorization engine by following the instructions on this page and using this sample. I'm using Elasticsearch v8.2.0. I've been able to generate the single zip file for my c… --- ## [Failed to start elastic search](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983)
**Author:** [@Jedrick](https://discuss.elastic.co/u/Jedrick)\ **Replies:** 8\ **Last updated:** [July 19, 2021, 10:48am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983 "2021-07-19T10:48:42Z")
Hi, Good day. Can you help me with my problem with elastic search? Currently, i am building a Wazuh siem that uses elastic search functions. As I checked, Filebeat, kibana services are running. But the elasticsearch … --- ## [Optimizing using sample aggregation](https://discuss.elastic.co/t/optimizing-using-sample-aggregation/199934)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 8\ **Last updated:** [September 19, 2019, 8:37am UTC](https://discuss.elastic.co/t/optimizing-using-sample-aggregation/199934 "2019-09-19T08:37:05Z")
I have an index where each doc contains all user's-weekly events. each event has messages.txt , which contain whole line strings, some very long (mapping bellow). The following query takes 15 seconds to return, the "sa… --- ## [Safepoint "Cleanup" after update 7.7.0](https://discuss.elastic.co/t/safepoint-cleanup-after-update-7-7-0/234349)
**Author:** [@willouuu](https://discuss.elastic.co/u/willouuu)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 1:47pm UTC](https://discuss.elastic.co/t/safepoint-cleanup-after-update-7-7-0/234349 "2020-05-26T13:47:11Z")
Hello I have this messages after update to 7.7.0 on logs elasticsearch \[2020-05-26T13:40:32.045+0000\]\[5768\]\[safepoint \] Safepoint "Cleanup", Time since last: 1000124847 ns, Reaching safepoint: 110408 ns, At safepoin… --- ## [Filebeat sends old logs after reboot](https://discuss.elastic.co/t/filebeat-sends-old-logs-after-reboot/54517)
**Author:** [@lkosz](https://discuss.elastic.co/u/lkosz)\ **Replies:** 0\ **Last updated:** [July 1, 2016, 8:15am UTC](https://discuss.elastic.co/t/filebeat-sends-old-logs-after-reboot/54517 "2016-07-01T08:15:59Z")
I'm having problem with filebeat - filebeat send old logs after service restart. I've turned on debugging and got: 2016-07-01T09:42:45+02:00 INFO Additional configs loaded from: /etc/filebeat/conf.d/maillog.yml 2016-0… --- ## [Query date field which is strictly "today", "yesterday"](https://discuss.elastic.co/t/query-date-field-which-is-strictly-today-yesterday/53195)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 0\ **Last updated:** [June 17, 2016, 9:34pm UTC](https://discuss.elastic.co/t/query-date-field-which-is-strictly-today-yesterday/53195 "2016-06-17T21:34:21Z")
Using Kibana, I have daily named indices. I would like create different Kibana "Search" for today events and yesterday event. I believed this was obvious but nop \[:confused:\] With a query string, how can I query a d… --- ## [Issues with Exception lists automatically combining rules](https://discuss.elastic.co/t/issues-with-exception-lists-automatically-combining-rules/323106)
**Author:** [@aforfot](https://discuss.elastic.co/u/aforfot)\ **Replies:** 5\ **Last updated:** [January 19, 2023, 6:39pm UTC](https://discuss.elastic.co/t/issues-with-exception-lists-automatically-combining-rules/323106 "2023-01-19T18:39:52Z")
When creating multiple Rules in Elastic Security we have started to notice an issue where exception list items created for one specific rule will also affect other rules. In our case the issue affects 2 specific rules th… --- ## [Multi terms aggregation](https://discuss.elastic.co/t/multi-terms-aggregation/304345)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 5\ **Last updated:** [May 13, 2022, 7:01am UTC](https://discuss.elastic.co/t/multi-terms-aggregation/304345 "2022-05-13T07:01:17Z")
Hello everyone, I need help with an elastic query. My current query is: { "size" : 1, "aggs": { "NAME": { "multi\_terms": { "terms": \[{ "field": "fieldName1.keyword" }, { … --- ## [Force joining cluster after network error](https://discuss.elastic.co/t/force-joining-cluster-after-network-error/162634)
**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\ **Replies:** 5\ **Last updated:** [January 2, 2019, 11:21am UTC](https://discuss.elastic.co/t/force-joining-cluster-after-network-error/162634 "2019-01-02T11:21:23Z")
Hi Three of my nodes were on a different switch, got network problem and now I have two clusters, what should I do to make these three nodes, join the real cluster again? --- ## [How to return all values in URL](https://discuss.elastic.co/t/how-to-return-all-values-in-url/125618)
**Author:** [@Willian\_Tartaro](https://discuss.elastic.co/u/Willian_Tartaro)\ **Replies:** 5\ **Last updated:** [March 26, 2018, 8:19pm UTC](https://discuss.elastic.co/t/how-to-return-all-values-in-url/125618 "2018-03-26T20:19:56Z")
Hello, I have a BD with many products, i'm trying to return all values in a request URL. i have a total of products: 837721, but i can only 10000. i'm trying use From and Size, but, not working. localhost:8080/api/v1… --- ## [\[bug\] Search by field which contain "@"](https://discuss.elastic.co/t/bug-search-by-field-which-contain/95384)
**Author:** [@denis.peshkov](https://discuss.elastic.co/u/denis.peshkov)\ **Replies:** 5\ **Last updated:** [August 2, 2017, 2:08pm UTC](https://discuss.elastic.co/t/bug-search-by-field-which-contain/95384 "2017-08-02T14:08:14Z")
Hi guys, I have a problem with search by field which contain “@” (email field). —create a new entity— POST http://ua1-2003-pc.gtech.local:9200/idx2/create HTTP/1.1 Accept: application/json Content-Type: application/js… --- ## [Logstash and auto-index creation with ECK](https://discuss.elastic.co/t/logstash-and-auto-index-creation-with-eck/360391)
**Author:** [@durera](https://discuss.elastic.co/u/durera)\ **Replies:** 2\ **Last updated:** [July 10, 2025, 12:35pm UTC](https://discuss.elastic.co/t/logstash-and-auto-index-creation-with-eck/360391 "2025-07-10T12:35:03Z")
I've been looking at replacing our hoomebrew stack with ECK this last week, and have the basic flow from filebeat -\> logstash -\> elasticsearch working. It's really impressive how it all just wires up together, and the q… --- ## [Error with ECK Operator 2.3.0 - Failed to get API Group-Resources](https://discuss.elastic.co/t/error-with-eck-operator-2-3-0-failed-to-get-api-group-resources/312674)
**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\ **Replies:** 2\ **Last updated:** [August 26, 2022, 9:59am UTC](https://discuss.elastic.co/t/error-with-eck-operator-2-3-0-failed-to-get-api-group-resources/312674 "2022-08-26T09:59:55Z")
Using a fresh installation of ECK Operator 2.3.0, and installing Elasticsearch version 7.16.2, Running on Azure Kubernetes Service, and with ISTIO service mesh. The operator eventually runs fine but restarts once in a w… --- ## [Log threshold alert with the actual message inside the alert](https://discuss.elastic.co/t/log-threshold-alert-with-the-actual-message-inside-the-alert/287258)
**Author:** [@Ido\_Ilani](https://discuss.elastic.co/u/Ido_Ilani)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 3:01pm UTC](https://discuss.elastic.co/t/log-threshold-alert-with-the-actual-message-inside-the-alert/287258 "2021-10-26T15:01:42Z")
Hi, I set up a Log threshold alert to Slack when number of error log lines exceeds a certain limit. Is there a way to alert to Slack the actual log message body? I searched for a way and the only variables I see I can … --- ## [Logstash dropping a lot of logs](https://discuss.elastic.co/t/logstash-dropping-a-lot-of-logs/285429)
**Author:** [@Parthib\_Dutta](https://discuss.elastic.co/u/Parthib_Dutta)\ **Replies:** 2\ **Last updated:** [September 29, 2021, 11:12am UTC](https://discuss.elastic.co/t/logstash-dropping-a-lot-of-logs/285429 "2021-09-29T11:12:44Z")
I have this current setup where Filebeat is reading Lumen logs and forwarding them to Logstash . And Logstash is parsing one of those field in log lines as JSON . I am only seeing partial outputs in my Kibana dashboard a… --- ## [Heatmap Y-Axis reversed](https://discuss.elastic.co/t/heatmap-y-axis-reversed/228894)
**Author:** [@mpitt](https://discuss.elastic.co/u/mpitt)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 9:16am UTC](https://discuss.elastic.co/t/heatmap-y-axis-reversed/228894 "2020-04-21T09:16:57Z")
Same issue as https://discuss.elastic.co/t/heat-map-y-axis-reverse-order/117685 Looks still unfixed after more than 2 years, any chance it will be worked on? --- ## [Modify search.max\_buckets](https://discuss.elastic.co/t/modify-search-max-buckets/217175)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 1:01pm UTC](https://discuss.elastic.co/t/modify-search-max-buckets/217175 "2020-01-30T13:01:31Z")
Hi, I am trying to modify "search.max\_buckets" by: curl -X PUT "localhost:9200/\_cluster/settings?pretty" -H 'Content-Type: application/json' -d' { "defaults" : { "search.max\_buckets" : "15000" } } ' and I get t… --- ## [Inconsistent Behaviors between Different Runs of ES-Spark Connector](https://discuss.elastic.co/t/inconsistent-behaviors-between-different-runs-of-es-spark-connector/174649)
**Author:** [@qixinwm2010](https://discuss.elastic.co/u/qixinwm2010)\ **Replies:** 2\ **Last updated:** [April 12, 2019, 12:22am UTC](https://discuss.elastic.co/t/inconsistent-behaviors-between-different-runs-of-es-spark-connector/174649 "2019-04-12T00:22:10Z")
Hello Community, We are doing ES indexing using the ES-SPark Connector (6.6.1) in our daily spark job. Here is our API call we make in our spark code df.write .format("org.elasticsearch.spark.sql") .option("es.resourc… --- ## [Journalbeat writes registry file to /registry instead of /var/lib/journalbeat/registry](https://discuss.elastic.co/t/journalbeat-writes-registry-file-to-registry-instead-of-var-lib-journalbeat-registry/165744)
**Author:** [@SpComb](https://discuss.elastic.co/u/SpComb)\ **Replies:** 2\ **Last updated:** [January 25, 2019, 12:47pm UTC](https://discuss.elastic.co/t/journalbeat-writes-registry-file-to-registry-instead-of-var-lib-journalbeat-registry/165744 "2019-01-25T12:47:26Z")
I encountered the following error when trying to reconfigure journalbeat to run as non-root, even though the journalbeat user has write permissions to /var/lib/journalbeat: 2019-01-25T09:55:07.494Z ERROR instance/beat.g… --- ## [Logstash Error When Running - Not Sure Of Error](https://discuss.elastic.co/t/logstash-error-when-running-not-sure-of-error/114290)
**Author:** [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)\ **Replies:** 2\ **Last updated:** [January 5, 2018, 2:21pm UTC](https://discuss.elastic.co/t/logstash-error-when-running-not-sure-of-error/114290 "2018-01-05T14:21:02Z")
Good morning everyone. I am running a custom config from a class on Udemy for ElasticSearch, LogStash and Kibana. For whatever reason I get errors and I cant get it to run. I have been trying over and over and over. Can… --- ## [Logstash and drop filter for Windows event](https://discuss.elastic.co/t/logstash-and-drop-filter-for-windows-event/106322)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 2\ **Last updated:** [November 6, 2017, 11:49am UTC](https://discuss.elastic.co/t/logstash-and-drop-filter-for-windows-event/106322 "2017-11-06T11:49:42Z")
Hello, I'm trying to drop events using the following filter but its not working: if \[event\_id\] == 4658 and \[event\_data.ProcessName\] == "C:\\Windows\\System32\\CpqMgmt\\cqmghost/cqmghost.exe" { drop {} } I've tried usin… --- ## [Is there any option to calculate variance and use it in Y-Axis in visualizations?](https://discuss.elastic.co/t/is-there-any-option-to-calculate-variance-and-use-it-in-y-axis-in-visualizations/105165)
**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\ **Replies:** 2\ **Last updated:** [November 2, 2017, 11:12am UTC](https://discuss.elastic.co/t/is-there-any-option-to-calculate-variance-and-use-it-in-y-axis-in-visualizations/105165 "2017-11-02T11:12:31Z")
I need to show variance in kibana visualizations but there is no option for Y-axis Can I create scripted field or is there any other way around? --- ## [My aggregate indices version 1, thoughts?](https://discuss.elastic.co/t/my-aggregate-indices-version-1-thoughts/105076)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 2\ **Last updated:** [October 24, 2017, 5:06pm UTC](https://discuss.elastic.co/t/my-aggregate-indices-version-1-thoughts/105076 "2017-10-24T17:06:20Z")
Hi, I have been looking for a good way to aggregate metrics data and terms counts for various index data I have been collecting. I'm mostly looking at infrastructure component performance and throughput metrics. I hav… --- ## [Cannot add geo\_point type to the mapping template](https://discuss.elastic.co/t/cannot-add-geo-point-type-to-the-mapping-template/84429)
**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\ **Replies:** 2\ **Last updated:** [May 4, 2017, 6:45am UTC](https://discuss.elastic.co/t/cannot-add-geo-point-type-to-the-mapping-template/84429 "2017-05-04T06:45:14Z")
Hi, I'm trying to copy my mapping template from my 5.3 ELK cluster to the new 5.3.2 instance. Any ideas what this error message is meaning? TIA, Vitaly curl -XPUT 'localhost:9200/\_template' -H 'Content-Type: applica… --- ## [Requête sur plusieurs champs dans un embed object](https://discuss.elastic.co/t/requete-sur-plusieurs-champs-dans-un-embed-object/44727)
**Author:** [@fkukus](https://discuss.elastic.co/u/fkukus)\ **Replies:** 2\ **Last updated:** [March 18, 2016, 8:56am UTC](https://discuss.elastic.co/t/requete-sur-plusieurs-champs-dans-un-embed-object/44727 "2016-03-18T08:56:00Z")
Bonjour, Je ne trouve pas comment faire une requête sur plusieurs champs d'un même embeded object. Un exemple Voici mes données : "hits": \[ { "\_type": "company", "\_score": 5.35856, "\_source": … --- ## [Logstash failed to send ping to zen unicast](https://discuss.elastic.co/t/logstash-failed-to-send-ping-to-zen-unicast/42474)
**Author:** [@Sameer\_Dharur](https://discuss.elastic.co/u/Sameer_Dharur)\ **Replies:** 2\ **Last updated:** [February 23, 2016, 3:23pm UTC](https://discuss.elastic.co/t/logstash-failed-to-send-ping-to-zen-unicast/42474 "2016-02-23T15:23:07Z")
Hi, I've used ELK successfully before but now I get the problem of failing to send ping to zen unicast. Here's my config file - input { file { path =\> "C:\\logstash-1.5.4\\slt.log" type =\> "sample" sta… --- ## [Puppet - Elasticsearch prevent restart](https://discuss.elastic.co/t/puppet-elasticsearch-prevent-restart/41667)
**Author:** [@megaforce1020](https://discuss.elastic.co/u/megaforce1020)\ **Replies:** 2\ **Last updated:** [February 16, 2016, 7:06pm UTC](https://discuss.elastic.co/t/puppet-elasticsearch-prevent-restart/41667 "2016-02-16T19:06:22Z")
So whenever I do a puppet apply to configure elasticsearch, it causes the elasticsearch service to either close if I have the option 'Status =\> disabled' or it will cause it to restart if I comment the status option out.… --- ## [Isolate data on a single node](https://discuss.elastic.co/t/isolate-data-on-a-single-node/1853)
**Author:** [@Vic](https://discuss.elastic.co/u/Vic)\ **Replies:** 2\ **Last updated:** [June 4, 2015, 1:43pm UTC](https://discuss.elastic.co/t/isolate-data-on-a-single-node/1853 "2015-06-04T13:43:06Z")
Hi, I'm trying to copy a production index onto a single node in a separate cluster. This is so that I can experiment with data types and attempt to improve performance of certain queries. I've tried a few approaches … --- ## [MapperParsingException](https://discuss.elastic.co/t/mapperparsingexception/21083)
**Author:** [@Stefan\_2](https://discuss.elastic.co/u/Stefan_2)\ **Replies:** 2\ **Last updated:** [December 11, 2014, 12:31pm UTC](https://discuss.elastic.co/t/mapperparsingexception/21083 "2014-12-11T12:31:41Z")
Hey! I am quite new to the ELK-Stack but what I have seen so far is awesome even if it's sometimes challenging for me! :D But I am facing a huge problem right now. The loglines often contain xml/soap messages a… --- ## [Gateway.recover\_after\_nodes & minimum\_master\_nodes in a distributed environment?](https://discuss.elastic.co/t/gateway-recover-after-nodes-minimum-master-nodes-in-a-distributed-environment/19465)
**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\ **Replies:** 2\ **Last updated:** [August 27, 2014, 2:06am UTC](https://discuss.elastic.co/t/gateway-recover-after-nodes-minimum-master-nodes-in-a-distributed-environment/19465 "2014-08-27T02:06:52Z")
Hello all, Question about gateway.recover\_after\_nodes and discovery.zen.minimum\_master\_nodes in a distributed ES cluster. By "distributed" I mean I have: 2 nodes that are data only: 'node.data' =\> 'true', … --- ## [Out of the Box ML jobs for Security](https://discuss.elastic.co/t/out-of-the-box-ml-jobs-for-security/305162)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 3\ **Last updated:** [June 3, 2022, 3:41pm UTC](https://discuss.elastic.co/t/out-of-the-box-ml-jobs-for-security/305162 "2022-06-03T15:41:42Z")
Good Morning, I am looking for help/advice in regards to using the out of the box ML jobs. Specifically, some of the jobs that are underlying SIEM detections. I have an environment with 4500 hosts sending endpoint data … --- ## [Transforms failed status with runtime fields](https://discuss.elastic.co/t/transforms-failed-status-with-runtime-fields/303444)
**Author:** [@Ann\_Abbott](https://discuss.elastic.co/u/Ann_Abbott)\ **Replies:** 3\ **Last updated:** [May 4, 2022, 10:48am UTC](https://discuss.elastic.co/t/transforms-failed-status-with-runtime-fields/303444 "2022-05-04T10:48:12Z")
Hi, I am trying to create a transforms index with runtime-fields called adoption\_time\_stamp that's in a date format. Every time I try to create a transforms index with this adoption\_time\_stamp runtime\_field, I get t… --- ## [Redirect post call from kibana backend to another server using Hapi/h2o2 proxy handler in kibana plugin development](https://discuss.elastic.co/t/redirect-post-call-from-kibana-backend-to-another-server-using-hapi-h2o2-proxy-handler-in-kibana-plugin-development/278066)
**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\ **Replies:** 3\ **Last updated:** [July 28, 2021, 3:26pm UTC](https://discuss.elastic.co/t/redirect-post-call-from-kibana-backend-to-another-server-using-hapi-h2o2-proxy-handler-in-kibana-plugin-development/278066 "2021-07-28T15:26:03Z")
I have created a kibana plugin using the following procedure: goto kibana source directory node scripts/generate\_plugin test\_plugin build plugin with #yarn plugin-helpers build I modified UI as it has some forms in fr… --- ## [Indices not being deleted in ILM policy](https://discuss.elastic.co/t/indices-not-being-deleted-in-ilm-policy/263492)
**Author:** [@KevSex](https://discuss.elastic.co/u/KevSex)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 7:55pm UTC](https://discuss.elastic.co/t/indices-not-being-deleted-in-ilm-policy/263492 "2021-02-08T19:55:49Z")
For some reason, my indices are not being deleted after the delete phase is triggered. I have a policy as below: { "unifi" : { "version" : 1, "modified\_date" : "2021-01-28T14:21:47.860Z", "policy" : { … --- ## [Elasticsearch is not running on Linux VM](https://discuss.elastic.co/t/elasticsearch-is-not-running-on-linux-vm/231079)
**Author:** [@aman97](https://discuss.elastic.co/u/aman97)\ **Replies:** 3\ **Last updated:** [May 5, 2020, 6:14am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-running-on-linux-vm/231079 "2020-05-05T06:14:43Z")
Hi, @LizaD I am trying to run Elasticsearch on my Linux VM. but it shows the following status sudo systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/sys… --- ## [Response total results doesn't match results](https://discuss.elastic.co/t/response-total-results-doesnt-match-results/210274)
**Author:** [@abohannon](https://discuss.elastic.co/u/abohannon)\ **Replies:** 3\ **Last updated:** [December 4, 2019, 9:17am UTC](https://discuss.elastic.co/t/response-total-results-doesnt-match-results/210274 "2019-12-04T09:17:49Z")
I'm attempting to remove duplicate entries in our index by deleting all documents before re-uploading, but after I delete all documents 60 still remain and I'm unable to delete them. And when I query for the list of docu… --- ## [Drop beginning of JSON log](https://discuss.elastic.co/t/drop-beginning-of-json-log/184202)
**Author:** [@SantZP](https://discuss.elastic.co/u/SantZP)\ **Replies:** 3\ **Last updated:** [June 6, 2019, 8:18am UTC](https://discuss.elastic.co/t/drop-beginning-of-json-log/184202 "2019-06-06T08:18:16Z")
Hi! Im trying to parse the following JSON log in FileBeat but i keep getting error.message: "Error decoding JSON: invalid character 'J' looking for beginning of value: " JSON Authentication: {"timestamp": "2019-06-04T1… --- ## [Filebeat 6.5.0 does not send data to logstash 6.5.0](https://discuss.elastic.co/t/filebeat-6-5-0-does-not-send-data-to-logstash-6-5-0/157428)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 3\ **Last updated:** [November 19, 2018, 8:48pm UTC](https://discuss.elastic.co/t/filebeat-6-5-0-does-not-send-data-to-logstash-6-5-0/157428 "2018-11-19T20:48:20Z")
Hello, I am using filebeat 6.5.0 with the following configuration: filebeat.inputs: - type: log enabled: true paths: - /home/jetty/logs/\*.log exclude\_files: /home/jetty/logs/OLD/\* filebeat.config.modules: p… --- ## [Upgrade issue with path.data](https://discuss.elastic.co/t/upgrade-issue-with-path-data/139548)
**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\ **Replies:** 3\ **Last updated:** [July 12, 2018, 4:16pm UTC](https://discuss.elastic.co/t/upgrade-issue-with-path-data/139548 "2018-07-12T16:16:11Z")
I've been given a go ahead to get some training which is great but first I need to get the cluster up to the version the training it all for. I've had some issues when I tried a test upgrade before but since then I've r… --- ## [Error after Kibana install](https://discuss.elastic.co/t/error-after-kibana-install/122271)
**Author:** [@syedm](https://discuss.elastic.co/u/syedm)\ **Replies:** 3\ **Last updated:** [March 4, 2018, 1:21am UTC](https://discuss.elastic.co/t/error-after-kibana-install/122271 "2018-03-04T01:21:37Z")
I installed Kibana on windows by extracting it to plugins folder under elasticsearch (6.2.2). Later I installed x-pack for kibana using the command line : C:\\Program Files\\Elastic\\Elasticsearch\\6.2.2\\plugins\\kibana-6.2.… --- ## [Using multiple dates for aggregation](https://discuss.elastic.co/t/using-multiple-dates-for-aggregation/104602)
**Author:** [@Ron\_OG](https://discuss.elastic.co/u/Ron_OG)\ **Replies:** 3\ **Last updated:** [October 25, 2017, 11:58am UTC](https://discuss.elastic.co/t/using-multiple-dates-for-aggregation/104602 "2017-10-25T11:58:04Z")
I'm trying to create a bar or line chart to compare a given month over several years, ie. I want to display all of the doc counts for the month of Jan. from 2005-2017. Is this possible to do? Thanks ahead of time. --- ## [NPE в AbstractSearchScript при использовании из ScriptEngineService](https://discuss.elastic.co/t/npe-abstractsearchscript-scriptengineservice/104740)
**Author:** [@ponimas](https://discuss.elastic.co/u/ponimas)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 1:35pm UTC](https://discuss.elastic.co/t/npe-abstractsearchscript-scriptengineservice/104740 "2017-10-24T13:35:43Z")
Здравствуйте! Пытаюсь разобраться со script engine. Написал такой вот минимальный пример. private static class MyScriptEngine implements ScriptEngineService { @Override public String getType() { … --- ## [Logstash LOG\_OPTION](https://discuss.elastic.co/t/logstash-log-option/58178)
**Author:** [@sundar](https://discuss.elastic.co/u/sundar)\ **Replies:** 3\ **Last updated:** [August 19, 2016, 6:18am UTC](https://discuss.elastic.co/t/logstash-log-option/58178 "2016-08-19T06:18:09Z")
Hello Logstash experts, We are using Logstash 2.3 .1 and find in the documentation that there are only two levels of log (from logstash itself): --verbose and --debug. Is there any other level we can set which is und… --- ## [Bounds on Ranged Aggs don't seem to be working](https://discuss.elastic.co/t/bounds-on-ranged-aggs-dont-seem-to-be-working/46184)
**Author:** [@hifitodd](https://discuss.elastic.co/u/hifitodd)\ **Replies:** 3\ **Last updated:** [April 27, 2016, 5:57pm UTC](https://discuss.elastic.co/t/bounds-on-ranged-aggs-dont-seem-to-be-working/46184 "2016-04-27T17:57:25Z")
Hi there, I'm running into something a bit funny with ranged aggs. I am getting records that are double bucketed when they are at the range endpoint. I am doing it like this: "range": { "field": def.key, "k… --- ## [Event Filter \* field](https://discuss.elastic.co/t/event-filter-field/325674)
**Author:** [@NathanLau](https://discuss.elastic.co/u/NathanLau)\ **Replies:** 4\ **Last updated:** [March 14, 2023, 1:12am UTC](https://discuss.elastic.co/t/event-filter-field/325674 "2023-03-14T01:12:04Z")
Hi all , The purpose is refuse receive some logs. (Endpoint) there are a lot of event on everyday , don't want to receive not meaningful logs to occupied the space , how could filter all value of \* or filter the field… [Previous page](https://discuss.elastic.co/top.md?page=1648&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1650&per_page=50&period=all)