# Top **URL:** https://discuss.elastic.co/top.md?page=165&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 166 --- ## [Deleting an index does not seem to delete external versioning](https://discuss.elastic.co/t/deleting-an-index-does-not-seem-to-delete-external-versioning/194091)
**Author:** [@Philiiiiiipp](https://discuss.elastic.co/u/Philiiiiiipp)\ **Replies:** 10\ **Last updated:** [August 7, 2019, 11:35am UTC](https://discuss.elastic.co/t/deleting-an-index-does-not-seem-to-delete-external-versioning/194091 "2019-08-07T11:35:01Z")
I am running into an issue using the external versioning where deleting the index does not seem to clear the external versioning for that given index. Steps to recreate: Create an index Put an item with id: 'someid',… --- ## [No automatic logstash shutdown on Elasticsearch Input Plugin](https://discuss.elastic.co/t/no-automatic-logstash-shutdown-on-elasticsearch-input-plugin/128887)
**Author:** [@sbienert](https://discuss.elastic.co/u/sbienert)\ **Replies:** 9\ **Last updated:** [May 2, 2018, 12:21pm UTC](https://discuss.elastic.co/t/no-automatic-logstash-shutdown-on-elasticsearch-input-plugin/128887 "2018-05-02T12:21:03Z")
I have an index X which continuosly receives maschine logs. I need to reindex the data constantly to index Y which is connected to Kibana. I have a Elasticsearch input, filter and Elasticsearch output. The reindexing wor… --- ## [Add or update to a exists json in elastic search](https://discuss.elastic.co/t/add-or-update-to-a-exists-json-in-elastic-search/218445)
**Author:** [@dkishore](https://discuss.elastic.co/u/dkishore)\ **Replies:** 10\ **Last updated:** [February 12, 2020, 7:53am UTC](https://discuss.elastic.co/t/add-or-update-to-a-exists-json-in-elastic-search/218445 "2020-02-12T07:53:06Z")
How can I update/add data in ES for example { appName:test, notes:test notes, bulkData:\[ { id:345345, name:test, data:\[ {temp:1}, {temp;2} \] } \] } now I want to add a few more data on bulkData(key), and a… --- ## [Alerting and customizing SIEM app](https://discuss.elastic.co/t/alerting-and-customizing-siem-app/230207)
**Author:** [@gar](https://discuss.elastic.co/u/gar)\ **Replies:** 11\ **Last updated:** [July 23, 2020, 3:25pm UTC](https://discuss.elastic.co/t/alerting-and-customizing-siem-app/230207 "2020-07-23T15:25:09Z")
Hi SIEM admins, a couple quick questions. Are there any pans to add alerting to the SIEM app? Specifically the ability to create a watch as part of the Detection Rule setup? I see others have requested allowing custom … --- ## [Filebeat dashboard create failing](https://discuss.elastic.co/t/filebeat-dashboard-create-failing/203699)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 9\ **Last updated:** [November 4, 2019, 7:19am UTC](https://discuss.elastic.co/t/filebeat-dashboard-create-failing/203699 "2019-11-04T07:19:40Z")
Hi, I installed Elastic and Kibana on one server and Filebeat on another. Running file except for 'sudo filebeat setup -e' I changed 'localhost' to the right IP in elastic, kibana and filebeat yml's but still this err… --- ## [Copy part of a field into new field](https://discuss.elastic.co/t/copy-part-of-a-field-into-new-field/110456)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 10\ **Last updated:** [December 8, 2017, 4:41am UTC](https://discuss.elastic.co/t/copy-part-of-a-field-into-new-field/110456 "2017-12-08T04:41:34Z")
Alright, I've got another question is it possible to copy part of one field into another? I.E. I have NewProcessName - C:\\Windows\\SysWOW64\\dllhost.exe I want to move everything after last backslash to new field Susp… --- ## ["No logs for this cluster"](https://discuss.elastic.co/t/no-logs-for-this-cluster/322932)
**Author:** [@fus80677](https://discuss.elastic.co/u/fus80677)\ **Replies:** 15\ **Last updated:** [January 18, 2023, 8:59am UTC](https://discuss.elastic.co/t/no-logs-for-this-cluster/322932 "2023-01-18T08:59:21Z")
I've been trying to set up logging for the Stack Monitoring page, but it just won't seem to work: I enabled the elasticsearch module in filebeat with this config: # Module: elasticsearch # Docs: https://www.elastic.c… --- ## [Pie Chart with Filters Aggregation ..what is my path (Sorry, I really haven't got a clue)?](https://discuss.elastic.co/t/pie-chart-with-filters-aggregation-what-is-my-path-sorry-i-really-havent-got-a-clue/282246)
**Author:** [@ChrizK](https://discuss.elastic.co/u/ChrizK)\ **Replies:** 9\ **Last updated:** [September 8, 2021, 7:35am UTC](https://discuss.elastic.co/t/pie-chart-with-filters-aggregation-what-is-my-path-sorry-i-really-havent-got-a-clue/282246 "2021-09-08T07:35:43Z")
The Test area within my organisation has implemented ELK. The main purpose is to capture, analyse and visualise logs produced by an in-house load tool. There are also other 'applications' which feed logs. I have mainl… --- ## [Trying to extract data from MySQL](https://discuss.elastic.co/t/trying-to-extract-data-from-mysql/117591)
**Author:** [@Hassan\_Shaitou](https://discuss.elastic.co/u/Hassan_Shaitou)\ **Replies:** 9\ **Last updated:** [January 30, 2018, 10:24am UTC](https://discuss.elastic.co/t/trying-to-extract-data-from-mysql/117591 "2018-01-30T10:24:31Z")
I am following this tutorial: http://r2d2.cc/2015/08/05/elastic-search-on-windows-with-mysql-sql-server-2014-and-import-feeder/, I want to extract data from mysql and index them using elastic. I am using: ElasticSearch… --- ## [How to plug in alternative Rescorer?](https://discuss.elastic.co/t/how-to-plug-in-alternative-rescorer/11555)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 10\ **Last updated:** [April 18, 2013, 12:46am UTC](https://discuss.elastic.co/t/how-to-plug-in-alternative-rescorer/11555 "2013-04-18T00:46:34Z")
Hi, How does one plug in a custom Rescorer into ElasticSearch? This is from Simon's writeup on query rescorer: " Currently the rescore API has only one implementation (the \`query\` rescorer) which modifies the r… --- ## [Potential memory leak using tcp input?](https://discuss.elastic.co/t/potential-memory-leak-using-tcp-input/349968)
**Author:** [@udp\_issues\_are\_one](https://discuss.elastic.co/u/udp_issues_are_one)\ **Replies:** 14\ **Last updated:** [January 2, 2024, 3:15pm UTC](https://discuss.elastic.co/t/potential-memory-leak-using-tcp-input/349968 "2024-01-02T15:15:08Z")
Hello, we are using logstash to collect sflow. We use fluentd at the ingest point, which forwards flows to logstash to do some processing and push to the elastic cloud. These both reside on the same box and largely wor… --- ## [Multipipeline Issues](https://discuss.elastic.co/t/multipipeline-issues/117347)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 14\ **Last updated:** [February 23, 2018, 4:36am UTC](https://discuss.elastic.co/t/multipipeline-issues/117347 "2018-02-23T04:36:20Z")
ELK 6.1.1 stack running on Windows Server 2012R2 .\\logstash -f path\\pipelines.yml pipelines.yml pipeline.id: Beats path.config: "D:/ELKStack/LogStash/config/pipeline\_beats.config" pipeline.id: NMap path.config: "… --- ## [ElasticSearch Transport client with multiple addresses fails](https://discuss.elastic.co/t/elasticsearch-transport-client-with-multiple-addresses-fails/13612)
**Author:** [@brian\_yoder](https://discuss.elastic.co/u/brian_yoder)\ **Replies:** 9\ **Last updated:** [September 19, 2013, 3:50pm UTC](https://discuss.elastic.co/t/elasticsearch-transport-client-with-multiple-addresses-fails/13612 "2013-09-19T15:50:26Z")
I'm getting closer to opening an issue against ES 0.90.3. But first, I'd like to see what others think. Here's my scenario: I have a test driver that can define N update threads and N query threads. The update thr… --- ## [ERROR Index management Winlogbeat 7.9.0](https://discuss.elastic.co/t/error-index-management-winlogbeat-7-9-0/249229)
**Author:** [@zombietek](https://discuss.elastic.co/u/zombietek)\ **Replies:** 9\ **Last updated:** [September 23, 2020, 4:10pm UTC](https://discuss.elastic.co/t/error-index-management-winlogbeat-7-9-0/249229 "2020-09-23T16:10:16Z")
Hi, I saw this old thread(https://discuss.elastic.co/t/error-index-management-filebeat-to-logstash/218849) though it was for filebeat and my issue is for winlogbeat, I'll give it a try. I have winlogbeat version 7.9.0 … --- ## [How to search words in Kibana DevTools console?](https://discuss.elastic.co/t/how-to-search-words-in-kibana-devtools-console/167208)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 9\ **Last updated:** [February 9, 2019, 4:24pm UTC](https://discuss.elastic.co/t/how-to-search-words-in-kibana-devtools-console/167208 "2019-02-09T16:24:11Z")
Is it possible to search by key words within Kibana DevTools console? If it is, how? --- ## [I am setting elasticsearch 8.5.3 but getting below error](https://discuss.elastic.co/t/i-am-setting-elasticsearch-8-5-3-but-getting-below-error/323216)
**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\ **Replies:** 10\ **Last updated:** [January 17, 2023, 12:35pm UTC](https://discuss.elastic.co/t/i-am-setting-elasticsearch-8-5-3-but-getting-below-error/323216 "2023-01-17T12:35:42Z")
\[2023-01-16T10:41:07,855\]\[ERROR\]\[o.e.i.g.GeoIpDownloader \] \[node-203\] exception during geoip databases update java.net.SocketTimeoutException: Connect timed out at sun.nio.ch.NioSocketImpl.timedFinishConnect(NioSocket… --- ## [Fleet agent doesn't work](https://discuss.elastic.co/t/fleet-agent-doesnt-work/312068)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 13\ **Last updated:** [August 16, 2022, 2:55pm UTC](https://discuss.elastic.co/t/fleet-agent-doesnt-work/312068 "2022-08-16T14:55:32Z")
I can't connect my elastic agent to the fleet server I already solved the syslink problem. --- ## [Logstash add field from another input](https://discuss.elastic.co/t/logstash-add-field-from-another-input/167292)
**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\ **Replies:** 15\ **Last updated:** [February 13, 2019, 7:22am UTC](https://discuss.elastic.co/t/logstash-add-field-from-another-input/167292 "2019-02-13T07:22:48Z")
hello i have a csv file with this field "type" : "255~15674532~15724727~50195|256~41089839104~41221424128~131585024" and another csv file with 3 fields value , name , function first i used this ruby filter code to sp… --- ## [Join queries or filter queries across indices](https://discuss.elastic.co/t/join-queries-or-filter-queries-across-indices/324275)
**Author:** [@H-Soni](https://discuss.elastic.co/u/H-Soni)\ **Replies:** 12\ **Last updated:** [January 31, 2023, 6:19am UTC](https://discuss.elastic.co/t/join-queries-or-filter-queries-across-indices/324275 "2023-01-31T06:19:44Z")
Hi, We are thinking of a document model, where we have data in multiple indices. However, when querying that data, we have to perform a join operation on these indices or to be more precise, filter an index's data using… --- ## [Sum-aggregation script doesn't allow negative values?](https://discuss.elastic.co/t/sum-aggregation-script-doesnt-allow-negative-values/18920)
**Author:** [@Valentin\_Pletzer](https://discuss.elastic.co/u/Valentin_Pletzer)\ **Replies:** 12\ **Last updated:** [August 4, 2014, 7:52am UTC](https://discuss.elastic.co/t/sum-aggregation-script-doesnt-allow-negative-values/18920 "2014-08-04T07:52:12Z")
Hi, I am trying to use this aggregation which does not work: "aggs": { "winners": { "terms": { "field": "urls", "order": { "diff": "desc" } }, "aggs": {… --- ## [Перестал работать мониторинг кластера](https://discuss.elastic.co/t/topic/255451)
**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\ **Replies:** 9\ **Last updated:** [November 22, 2020, 4:21pm UTC](https://discuss.elastic.co/t/topic/255451 "2020-11-22T16:21:53Z")
Добрый день. Несколько дней назад заметил что в кластере перестали отображаться данные. Появляется стандартное окно При попытке включить self monitoring говорит что данных нет При этом индексы существуют Я уже … --- ## [Filebeat not ingesting logs from s3](https://discuss.elastic.co/t/filebeat-not-ingesting-logs-from-s3/207734)
**Author:** [@ben.sharp](https://discuss.elastic.co/u/ben.sharp)\ **Replies:** 9\ **Last updated:** [November 21, 2019, 10:25am UTC](https://discuss.elastic.co/t/filebeat-not-ingesting-logs-from-s3/207734 "2019-11-21T10:25:53Z")
Hi there, I've configured my Filebeat following the guide for s3 input (found here), but when running, both the input worker and filebeat are starting then stopping almost immediately (all in less than a second). I'm n… --- ## [Graph option is not coming on kibana 6.5](https://discuss.elastic.co/t/graph-option-is-not-coming-on-kibana-6-5/161470)
**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 11\ **Last updated:** [December 19, 2018, 1:48pm UTC](https://discuss.elastic.co/t/graph-option-is-not-coming-on-kibana-6-5/161470 "2018-12-19T13:48:16Z")
I can't see graph option in kibana 6.5 --- ## [Which query is the best for standard searching?](https://discuss.elastic.co/t/which-query-is-the-best-for-standard-searching/8194)
**Author:** [@Marcin\_Oleszkiewicz](https://discuss.elastic.co/u/Marcin_Oleszkiewicz)\ **Replies:** 25\ **Last updated:** [July 6, 2012, 1:36pm UTC](https://discuss.elastic.co/t/which-query-is-the-best-for-standard-searching/8194 "2012-07-06T13:36:39Z")
I'm using ElasticSearch as a database for long text's to search their content. Which query with what parameters will be the best for standard text searching, the google kind of search etc. so I'm entering a string, ph… --- ## [Due to heavy load, Shards getting unassigned](https://discuss.elastic.co/t/due-to-heavy-load-shards-getting-unassigned/244433)
**Author:** [@het](https://discuss.elastic.co/u/het)\ **Replies:** 14\ **Last updated:** [August 14, 2020, 11:07am UTC](https://discuss.elastic.co/t/due-to-heavy-load-shards-getting-unassigned/244433 "2020-08-14T11:07:26Z")
Hi, I have a cluster contains 3 data nodes 31 GB of each, and 3 master nodes 8 GB of each. I have around a total of 252 shards. The total data size is approx. 65 GB. I am using 7.7.1 ElasticSearch When I run a load of… --- ## [Beats TCP Message Body Decode](https://discuss.elastic.co/t/beats-tcp-message-body-decode/97674)
**Author:** [@Zeeshan\_Haider](https://discuss.elastic.co/u/Zeeshan_Haider)\ **Replies:** 10\ **Last updated:** [October 4, 2017, 10:49am UTC](https://discuss.elastic.co/t/beats-tcp-message-body-decode/97674 "2017-10-04T10:49:16Z")
I just have a Question I am working on a private service and want to integrate beat messages ingestion on my service, I been trying to decode tcp data which is coming from beat, I was successfully decoding the packet its… --- ## [Searching multiple indices, trying to filter out specific values in specific indices](https://discuss.elastic.co/t/searching-multiple-indices-trying-to-filter-out-specific-values-in-specific-indices/38128)
**Author:** [@cminor9](https://discuss.elastic.co/u/cminor9)\ **Replies:** 11\ **Last updated:** [January 6, 2016, 7:53pm UTC](https://discuss.elastic.co/t/searching-multiple-indices-trying-to-filter-out-specific-values-in-specific-indices/38128 "2016-01-06T19:53:17Z")
I need to query several indices, and filter out certain results based on values within each index. It's forum software, so I want to search in forums, individual posts, and users for a keyword. But I need to filter fo… --- ## [Filebeat is not receiving logs from logstash](https://discuss.elastic.co/t/filebeat-is-not-receiving-logs-from-logstash/91738)
**Author:** [@DharaniKumar](https://discuss.elastic.co/u/DharaniKumar)\ **Replies:** 12\ **Last updated:** [July 4, 2017, 11:33am UTC](https://discuss.elastic.co/t/filebeat-is-not-receiving-logs-from-logstash/91738 "2017-07-04T11:33:14Z")
\[2017-07-04T14:24:02,247\]\[ERROR\]\[logstash.outputs.elasticsearch\] Got a bad response code from server, but this code is not considered retryable. Request will be dropped {:code=\>401, :response\_body=\>"{\\"error\\":{\\"root\_ca… --- ## [\[ES6 upgrade ES7\] The two-node cluster works normally, but the master node fails, the slave node tries to reconnect, and does not recommend itself as the new master node](https://discuss.elastic.co/t/es6-upgrade-es7-the-two-node-cluster-works-normally-but-the-master-node-fails-the-slave-node-tries-to-reconnect-and-does-not-recommend-itself-as-the-new-master-node/205777)
**Author:** [@LiZhe1258](https://discuss.elastic.co/u/LiZhe1258)\ **Replies:** 10\ **Last updated:** [October 30, 2019, 6:12am UTC](https://discuss.elastic.co/t/es6-upgrade-es7-the-two-node-cluster-works-normally-but-the-master-node-fails-the-slave-node-tries-to-reconnect-and-does-not-recommend-itself-as-the-new-master-node/205777 "2019-10-30T06:12:12Z")
1，服务器：x86\_64 x86\_64 x86\_64 GNU/Linux，双节点(log1和log2)，小网通信 2，软件版本：elasticsearch7.3.1，不带x-pack增强功能 3，工作模式：既作为master候选节点，也作为数据节点，log1的主分片在自己这，副本分片在log2那里，log2同理 4，elasticsearch.yml配置：除名称外两节点一致 cluster.name: log-search-cl… --- ## [Snapshot policy to include closed indices](https://discuss.elastic.co/t/snapshot-policy-to-include-closed-indices/258851)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 10\ **Last updated:** [December 18, 2020, 11:00am UTC](https://discuss.elastic.co/t/snapshot-policy-to-include-closed-indices/258851 "2020-12-18T11:00:43Z")
The create snapshot API states that the default for expand\_wildcards is all, but our snapshots created through a snapshot policy does not include our closed indices. We have tried with wildcards: PUT \_slm/policy/daily-… --- ## [Problem with upgrading to 9.0.0, index compability](https://discuss.elastic.co/t/problem-with-upgrading-to-9-0-0-index-compability/377614)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 13\ **Last updated:** [December 1, 2025, 10:22am UTC](https://discuss.elastic.co/t/problem-with-upgrading-to-9-0-0-index-compability/377614 "2025-12-01T10:22:57Z")
Hi! I'm trying to upgrade from 8.18 to 9.0 but I get a lot of these: \[2025-04-29T14:05:28,627\]\[ERROR\]\[o.e.b.Elasticsearch \] \[STHLM-KLARA-03\] fatal exception while booting Elasticsearch java.lang.IllegalStateExcept… --- ## [How to get char\_filter to work?](https://discuss.elastic.co/t/how-to-get-char-filter-to-work/19147)
**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\ **Replies:** 13\ **Last updated:** [August 19, 2014, 12:24am UTC](https://discuss.elastic.co/t/how-to-get-char-filter-to-work/19147 "2014-08-19T00:24:07Z")
I would like to strip html tags for indexing. Here is a simple example I tried so far, but doesn't seem to strip html tags. Any ideas what's missing? //settings & Mappings POST twitter { "mappings": { "twe… --- ## [Kibana custome timestamp and @timeestamp are different](https://discuss.elastic.co/t/kibana-custome-timestamp-and-timeestamp-are-different/277561)
**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\ **Replies:** 22\ **Last updated:** [July 8, 2021, 1:14pm UTC](https://discuss.elastic.co/t/kibana-custome-timestamp-and-timeestamp-are-different/277561 "2021-07-08T13:14:00Z")
Hi Team, I am using below xml/xpath statement to convert my string timestamp to date type timestamp in logstash input - 2021-06-30-20:11:23 xpath - xpath =\>\[ "concat(substring(/AdMsg/AdLels/AuditLevel/TS/text(), 1,10)… --- ## [Bulk Processor taking too long](https://discuss.elastic.co/t/bulk-processor-taking-too-long/131183)
**Author:** [@Sivapriya\_1](https://discuss.elastic.co/u/Sivapriya_1)\ **Replies:** 9\ **Last updated:** [May 9, 2018, 4:12pm UTC](https://discuss.elastic.co/t/bulk-processor-taking-too-long/131183 "2018-05-09T16:12:12Z")
I'm using the bulk API to index my docs and it is taking longer than expected. My bulk processor client is as follows \ **Author:** [@SKJ](https://discuss.elastic.co/u/SKJ)\ **Replies:** 12\ **Last updated:** [October 31, 2018, 3:59am UTC](https://discuss.elastic.co/t/es-6-2-3-performance-issues-vs-es-2-3-4/152598 "2018-10-31T03:59:04Z") We are facing severe performance issue with ES 6.2.3 in comparison to ES 2.3.4. Not sure, what we are missing. We were planning to shift to ES6 and have setup a new 6.2.3 cluster with 20 m5d.4xlarge data, 9 m5.4xlarge cl… --- ## [Two subaggregation in datafeed](https://discuss.elastic.co/t/two-subaggregation-in-datafeed/138217)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 18\ **Last updated:** [July 11, 2018, 6:22pm UTC](https://discuss.elastic.co/t/two-subaggregation-in-datafeed/138217 "2018-07-11T18:22:38Z")
Hi, I am trying to do ratio in my data feed. First I created date\_histogram with max agg (couse I got an error that it's needed) and then I am doing subaggregation by attrs.src\_ca\_name and want to count ratio of success… --- ## [Issues with 7.0.0 nested + script query](https://discuss.elastic.co/t/issues-with-7-0-0-nested-script-query/177422)
**Author:** [@Spansh](https://discuss.elastic.co/u/Spansh)\ **Replies:** 11\ **Last updated:** [May 10, 2019, 9:17am UTC](https://discuss.elastic.co/t/issues-with-7-0-0-nested-script-query/177422 "2019-05-10T09:17:25Z")
I opened this bug https://github.com/elastic/elasticsearch/issues/41323 The details are in there. Basically when I use the query in that bug with the mapping there I end up i the following situation. Without nested i… --- ## [Using elasticsearch in tomcat, getting NoClassFoundException](https://discuss.elastic.co/t/using-elasticsearch-in-tomcat-getting-noclassfoundexception/104341)
**Author:** [@Canappeco](https://discuss.elastic.co/u/Canappeco)\ **Replies:** 9\ **Last updated:** [October 18, 2017, 10:28am UTC](https://discuss.elastic.co/t/using-elasticsearch-in-tomcat-getting-noclassfoundexception/104341 "2017-10-18T10:28:42Z")
Hi, I am using elasticsearch in tomcat. I make a war file and put it in webapps. But now I am getting NoClassFoundException as follow: esThread is opening ... 18-Oct-2017 15:39:49.537 SEVERE \[main\] org.apache.catalina.c… --- ## [Dissecting google logs textPayLoad](https://discuss.elastic.co/t/dissecting-google-logs-textpayload/188300)
**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\ **Replies:** 22\ **Last updated:** [July 2, 2019, 6:22am UTC](https://discuss.elastic.co/t/dissecting-google-logs-textpayload/188300 "2019-07-02T06:22:42Z")
Hi here is my logstash config for the dissect filter { dissect { mapping =\> { "textPayload" =\> "%{something1} \[%{something2} %{+something2}\] %{something3} %{something4} %{something5} %{something6} %{… --- ## [Need to populate geo location based on US State name column using logstash,es and kibi](https://discuss.elastic.co/t/need-to-populate-geo-location-based-on-us-state-name-column-using-logstash-es-and-kibi/78755)
**Author:** [@navtej.billing](https://discuss.elastic.co/u/navtej.billing)\ **Replies:** 10\ **Last updated:** [March 28, 2017, 2:45pm UTC](https://discuss.elastic.co/t/need-to-populate-geo-location-based-on-us-state-name-column-using-logstash-es-and-kibi/78755 "2017-03-28T14:45:35Z")
I have a field with the name of USA states, I need to add another field which should have the geo location for that state. So, that I can use the Tile map in Kibi based on these newly generated Geo location. My Logstas… --- ## [ES bugs in 0.20.4 and 0.20.5 cause shards allocation failure and stuck in initializing state](https://discuss.elastic.co/t/es-bugs-in-0-20-4-and-0-20-5-cause-shards-allocation-failure-and-stuck-in-initializing-state/10915)
**Author:** [@Dong\_Aihua](https://discuss.elastic.co/u/Dong_Aihua)\ **Replies:** 20\ **Last updated:** [April 11, 2013, 3:15pm UTC](https://discuss.elastic.co/t/es-bugs-in-0-20-4-and-0-20-5-cause-shards-allocation-failure-and-stuck-in-initializing-state/10915 "2013-04-11T15:15:30Z")
Hi, guys: These days through the test, I found ES bugs in 0.20.4 and 0.20.5 which cause shards allocation failure and stuck in initializing state. The following are my test steps: 1) I setup 20 nodes with 0.20… --- ## [Circuit\_breaking\_exception](https://discuss.elastic.co/t/circuit-breaking-exception/261503)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 12\ **Last updated:** [February 3, 2021, 10:37am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/261503 "2021-02-03T10:37:24Z")
@Marta\_Bondyra Hello, I need some help { "error": { "root\_cause": \[ { "type": "circuit\_breaking\_exception", "reason": "\[parent\] Data too large, data for \[\ **Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 9\ **Last updated:** [December 5, 2015, 6:31pm UTC](https://discuss.elastic.co/t/logstash-2-x-dynamic-mapping/36353 "2015-12-05T18:31:04Z") Hi, Based on the breaking changes in elasticsearch 2,0 and other information: https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking\_20\_mapping\_changes.html ...its apparent that fields names with le… --- ## [Kibana is disconnecting after some load into elasticsearch](https://discuss.elastic.co/t/kibana-is-disconnecting-after-some-load-into-elasticsearch/208264)
**Author:** [@ksareddy](https://discuss.elastic.co/u/ksareddy)\ **Replies:** 11\ **Last updated:** [November 26, 2019, 3:29pm UTC](https://discuss.elastic.co/t/kibana-is-disconnecting-after-some-load-into-elasticsearch/208264 "2019-11-26T15:29:53Z")
"error":{"message":"Uncaught error: Expected originalHeaders to be an object, but object given". { "statusCode": 500, "error": "Internal Server Error", "message": "An internal server error occurred" } can any one p… --- ## [Visualize pdf and images indexed with fscrawler in kibana dicover section](https://discuss.elastic.co/t/visualize-pdf-and-images-indexed-with-fscrawler-in-kibana-dicover-section/180032)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 11\ **Last updated:** [May 12, 2019, 2:05am UTC](https://discuss.elastic.co/t/visualize-pdf-and-images-indexed-with-fscrawler-in-kibana-dicover-section/180032 "2019-05-12T02:05:22Z")
i created an index called bigdata in fscrawler to index pdf and images ( i use tesseract ocr to extract text from image) and then i used this index in Kibana as shown in the image but when i try to visulaize the content… --- ## [Which nodes handle the search threadpool](https://discuss.elastic.co/t/which-nodes-handle-the-search-threadpool/65718)
**Author:** [@CVTJNII](https://discuss.elastic.co/u/CVTJNII)\ **Replies:** 11\ **Last updated:** [November 11, 2016, 1:30pm UTC](https://discuss.elastic.co/t/which-nodes-handle-the-search-threadpool/65718 "2016-11-11T13:30:58Z")
I'm tuning my cluster and I believe I need to increase threadpool.search.queue\_size based on https://github.com/elastic/kibana/issues/3221, heavy query use, and our large number of shards. However, before changing this … --- ## [ScrollId Timeout](https://discuss.elastic.co/t/scrollid-timeout/4634)
**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\ **Replies:** 11\ **Last updated:** [June 16, 2011, 5:47pm UTC](https://discuss.elastic.co/t/scrollid-timeout/4634 "2011-06-16T17:47:23Z")
Is it necessary to pass the scrollId timeout value in each subsequent search scroll request? As in the example at http://www.elasticsearch.org/guide/reference/api/search/search-type.html --- ## [Index Search while using alias](https://discuss.elastic.co/t/index-search-while-using-alias/355035)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 17\ **Last updated:** [March 18, 2024, 3:24pm UTC](https://discuss.elastic.co/t/index-search-while-using-alias/355035 "2024-03-18T15:24:30Z")
Hi Team, We had below situation, where we created a alias (emp) on top of five index (employee\_01..employee\_05 which contains similar kind of data). While searching particualr key,value as mentioned below. We expect i… --- ## [Transform + Enrichment Policy](https://discuss.elastic.co/t/transform-enrichment-policy/334878)
**Author:** [@emi\_rose](https://discuss.elastic.co/u/emi_rose)\ **Replies:** 12\ **Last updated:** [June 18, 2023, 5:13pm UTC](https://discuss.elastic.co/t/transform-enrichment-policy/334878 "2023-06-18T17:13:47Z")
Hello, I had the idea to use the target index of a sum aggregation transform as the same target index for an enrichment policy. Essentially, I want to perform a join on the field being grouped on in the transform and en… --- ## [Фильтры перекрывают собой основное слово по которому идет поиск](https://discuss.elastic.co/t/topic/77972)
**Author:** [@whispersofdew](https://discuss.elastic.co/u/whispersofdew)\ **Replies:** 11\ **Last updated:** [March 11, 2017, 5:44pm UTC](https://discuss.elastic.co/t/topic/77972 "2017-03-11T17:44:49Z")
Игорь, доброго времени суток. Подскажите, пожалуйста. Может я не так понял зачем нужен фильтр? В запросе ниже основное слово запроса игнорируется и поиск идет уже по содержимому фильтров. Сам массив фильтров формир… [Previous page](https://discuss.elastic.co/top.md?page=164&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=166&per_page=50&period=all)