# Top **URL:** https://discuss.elastic.co/top.md?page=1651&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1652 --- ## [Getting GeoIP field for NGINX Logs](https://discuss.elastic.co/t/getting-geoip-field-for-nginx-logs/237903)
**Author:** [@jaysbeekay](https://discuss.elastic.co/u/jaysbeekay)\ **Replies:** 1\ **Last updated:** [June 20, 2020, 9:45am UTC](https://discuss.elastic.co/t/getting-geoip-field-for-nginx-logs/237903 "2020-06-20T09:45:22Z")
Hi, I am having trouble trying to get the location from NGINX logs to be shown as a GeoIP (instead of a float) within Kibana to visualise on a dashboard I am currently filebeats to ship logs from my NGINX server to Log… --- ## [Vega stacked bar plot group by](https://discuss.elastic.co/t/vega-stacked-bar-plot-group-by/214833)
**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\ **Replies:** 1\ **Last updated:** [February 6, 2020, 4:08pm UTC](https://discuss.elastic.co/t/vega-stacked-bar-plot-group-by/214833 "2020-02-06T16:08:49Z")
Hi I have an an scripted field "TotalCapacity" which return string "Error" or "OK". I want to count how many of "Error" and "Ok" i have in different timestamp. I have many returns of "TotalCapacity" for one vehicle so… --- ## [Mutate query in SearchBar from within plugin visualization](https://discuss.elastic.co/t/mutate-query-in-searchbar-from-within-plugin-visualization/210593)
**Author:** [@martijnrondeel](https://discuss.elastic.co/u/martijnrondeel)\ **Replies:** 7\ **Last updated:** [December 10, 2019, 9:51am UTC](https://discuss.elastic.co/t/mutate-query-in-searchbar-from-within-plugin-visualization/210593 "2019-12-10T09:51:16Z")
I would like to mutate the query in the SearchBar from within my Kibana 7.5 visualization. I'm able to add and remove filters using the queryFilter API, but can't find anything to mutate the query in SearchBar. Currentl… --- ## [Stop sending duplicate error in mail alert in watcher](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867)
**Author:** [@saurabh06](https://discuss.elastic.co/u/saurabh06)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 2:54pm UTC](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867 "2019-08-27T14:54:53Z")
How to stop executing action if their is same hits came again for the matched condition.i.e i want to send mail alert if their are distinct error came. I want to scan the log every 10 min interval but if their occurs sa… --- ## [Labels on a graph connection/edge in Kibana Graph](https://discuss.elastic.co/t/labels-on-a-graph-connection-edge-in-kibana-graph/167782)
**Author:** [@vnktsh](https://discuss.elastic.co/u/vnktsh)\ **Replies:** 1\ **Last updated:** [February 11, 2019, 10:27am UTC](https://discuss.elastic.co/t/labels-on-a-graph-connection-edge-in-kibana-graph/167782 "2019-02-11T10:27:34Z")
Hello, I have been experimenting with x-pack graph module in Kibana. In our use case we have set of 'nodes' which are related in 'subject' 'predicate' 'object' manner. Is there a way to represent 'predicate' on the conn… --- ## [Delete several documents in elastic with logstash?](https://discuss.elastic.co/t/delete-several-documents-in-elastic-with-logstash/146555)
**Author:** [@nicolasl](https://discuss.elastic.co/u/nicolasl)\ **Replies:** 1\ **Last updated:** [August 30, 2018, 8:00am UTC](https://discuss.elastic.co/t/delete-several-documents-in-elastic-with-logstash/146555 "2018-08-30T08:00:58Z")
Hello, I would like to delete multiple document with logstash in elasticsearch before sending the data to elastic. Why .. ? For example, I ingest a file into elastic with logstash. On the next day, I receive an updated… --- ## [Kibana Shows: kibana Request Timeout after 3000ms](https://discuss.elastic.co/t/kibana-shows-kibana-request-timeout-after-3000ms/137673)
**Author:** [@tphillips-att](https://discuss.elastic.co/u/tphillips-att)\ **Replies:** 1\ **Last updated:** [June 27, 2018, 9:40pm UTC](https://discuss.elastic.co/t/kibana-shows-kibana-request-timeout-after-3000ms/137673 "2018-06-27T21:40:20Z")
kibana Request Timeout after 3000ms Kibana is in RED Status and shows a message that the Kibana Request Timeout after 3000ms. We set the following timeout values in the Kbana yaml and are still seeing the message: req… --- ## [Search using Kibana filter bar](https://discuss.elastic.co/t/search-using-kibana-filter-bar/128248)
**Author:** [@Sam12](https://discuss.elastic.co/u/Sam12)\ **Replies:** 7\ **Last updated:** [May 9, 2018, 5:43pm UTC](https://discuss.elastic.co/t/search-using-kibana-filter-bar/128248 "2018-05-09T17:43:25Z")
Hello Everyone How can we search using Kibana filter bar if search bar is not available. Like say for example animal:cat will find all the animals like cat, wildcat,... Similarly how can we use Filter bar to find all th… --- ## [Why doesn’t logstash run as a deamon?](https://discuss.elastic.co/t/why-doesn-t-logstash-run-as-a-deamon/121490)
**Author:** [@PerPer](https://discuss.elastic.co/u/PerPer)\ **Replies:** 1\ **Last updated:** [February 27, 2018, 7:33am UTC](https://discuss.elastic.co/t/why-doesn-t-logstash-run-as-a-deamon/121490 "2018-02-27T07:33:56Z")
Hi Why doesn’t logstash run as a deamon? I am trying to run logstash on Xubuntu in VM in VMware Workstation. I can start logstash in command prompt and make it use a simple configuration.conf as expected. One that tak… --- ## [Dynamic mapper not working with default mapping](https://discuss.elastic.co/t/dynamic-mapper-not-working-with-default-mapping/89845)
**Author:** [@vakhtang](https://discuss.elastic.co/u/vakhtang)\ **Replies:** 1\ **Last updated:** [June 19, 2017, 2:27am UTC](https://discuss.elastic.co/t/dynamic-mapper-not-working-with-default-mapping/89845 "2017-06-19T02:27:07Z")
Hello, I try to develop solution for use case, when client can create new index only if this index have template. As one of possible solutions, i inserted 2 templates: PUT \_template/template\_all { "template": "\*", … --- ## [Send log from rsyslog to ELK with X-PACK](https://discuss.elastic.co/t/send-log-from-rsyslog-to-elk-with-x-pack/89042)
**Author:** [@Izana](https://discuss.elastic.co/u/Izana)\ **Replies:** 1\ **Last updated:** [June 16, 2017, 8:49am UTC](https://discuss.elastic.co/t/send-log-from-rsyslog-to-elk-with-x-pack/89042 "2017-06-16T08:49:18Z")
Hello, After installing X-PACK (necessary for Watcher and securing access to Kibana), my linux logs do not go back to ELK. Indeed, before the installation of X-PACK, I had the following configuration on my Debian cli… --- ## [Tile Map in Kibana, custom colors and popups](https://discuss.elastic.co/t/tile-map-in-kibana-custom-colors-and-popups/83195)
**Author:** [@AnCh](https://discuss.elastic.co/u/AnCh)\ **Replies:** 1\ **Last updated:** [April 21, 2017, 1:39pm UTC](https://discuss.elastic.co/t/tile-map-in-kibana-custom-colors-and-popups/83195 "2017-04-21T13:39:06Z")
I am trying to customize Kibana 5.3.0 to show different icons on the map based on the conditions of my data. For example, there are EV charging stations with possible available, alarm and error statuses. So I want to sho… --- ## [Different headers - logstash csv filter](https://discuss.elastic.co/t/different-headers-logstash-csv-filter/37588)
**Author:** [@rfplourenco](https://discuss.elastic.co/u/rfplourenco)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 3:38pm UTC](https://discuss.elastic.co/t/different-headers-logstash-csv-filter/37588 "2016-11-16T15:38:48Z")
Hello, I'm having issues when feeding CSV data into elastic. My logstash .conf file monitors a results folder and injects new .csv data into elastic with the file input plugin. The issue is that the .csv file contains… --- ## [Testing your logstash configuration](https://discuss.elastic.co/t/testing-your-logstash-configuration/53061)
**Author:** [@boazshor](https://discuss.elastic.co/u/boazshor)\ **Replies:** 1\ **Last updated:** [June 17, 2016, 5:31am UTC](https://discuss.elastic.co/t/testing-your-logstash-configuration/53061 "2016-06-17T05:31:24Z")
Hi, I'm new to Logstash. I'm working with Logstash 2.3.2. I'm trying to write unit tests for my configuration files. I wrote a simple test for a simple filter, but when I try to run them using bin\\rspec, I'm getting the… --- ## [How does an index's document count affect performance?](https://discuss.elastic.co/t/how-does-an-indexs-document-count-affect-performance/43059)
**Author:** [@bguyzer](https://discuss.elastic.co/u/bguyzer)\ **Replies:** 1\ **Last updated:** [February 29, 2016, 11:44pm UTC](https://discuss.elastic.co/t/how-does-an-indexs-document-count-affect-performance/43059 "2016-02-29T23:44:29Z")
Are there any metrics, posts, or otherwise good information regarding how document size as well as the total document count on an index affects search performance? I understand other mitigating factors such as mapping, a… --- ## [Scan/scroll - optimal "size" parameter](https://discuss.elastic.co/t/scan-scroll-optimal-size-parameter/32038)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 1\ **Last updated:** [October 12, 2015, 11:47pm UTC](https://discuss.elastic.co/t/scan-scroll-optimal-size-parameter/32038 "2015-10-12T23:47:12Z")
hello, is there a way to determine the value of the "size" parameter, to make an import, using scan/scroll, to be the fastest? for example, is "size=100000" too much for elasticsearch ? --- ## [Non standard log lines](https://discuss.elastic.co/t/non-standard-log-lines/29942)
**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\ **Replies:** 1\ **Last updated:** [September 25, 2015, 3:52pm UTC](https://discuss.elastic.co/t/non-standard-log-lines/29942 "2015-09-25T15:52:49Z")
I'm having some trouble with logstash grok filter. Specifically matching the log to a pattern. Say I have two log messages that looks something like this: 10.12.6.190 \[Thu, 24 Sep 2015 18:17:52 GMT\] 404 - 192.168.48.2… --- ## [Scaling to 900 nodes or more, risks and pitfalls?](https://discuss.elastic.co/t/scaling-to-900-nodes-or-more-risks-and-pitfalls/14546)
**Author:** [@Kim\_Laplume](https://discuss.elastic.co/u/Kim_Laplume)\ **Replies:** 7\ **Last updated:** [November 28, 2013, 7:40am UTC](https://discuss.elastic.co/t/scaling-to-900-nodes-or-more-risks-and-pitfalls/14546 "2013-11-28T07:40:11Z")
Hi, the company I work for plans to scale our ES cluster from 20 nodes to about 900 or perhaps more, because of a higher data volume. Does anyone has experience with clusters of that size, is it even possible a… --- ## [Hardware recommendations](https://discuss.elastic.co/t/hardware-recommendations/13645)
**Author:** [@Julien\_Naour](https://discuss.elastic.co/u/Julien_Naour)\ **Replies:** 7\ **Last updated:** [September 17, 2013, 4:16pm UTC](https://discuss.elastic.co/t/hardware-recommendations/13645 "2013-09-17T16:16:27Z")
Hello, Is there some hardware recomendations for ES? It seems that it's very difficult to evaluate and really dependant of the use case. But is there some well-known bottle necks or typical configuration? I/O or … --- ## [How to get results for missspelled query not using fuzzy based query?](https://discuss.elastic.co/t/how-to-get-results-for-missspelled-query-not-using-fuzzy-based-query/3876)
**Author:** [@Michal\_Orzechowski](https://discuss.elastic.co/u/Michal_Orzechowski)\ **Replies:** 7\ **Last updated:** [April 30, 2011, 3:15pm UTC](https://discuss.elastic.co/t/how-to-get-results-for-missspelled-query-not-using-fuzzy-based-query/3876 "2011-04-30T15:15:12Z")
Hi, I am new to ElasticSearch and I am trying to handel such a case: I have indexed a products: curl -XPUT 'http://localhost:9200/shop/cameras/1' -d ' { "product\_name": "Digital SLR Camera Nikon D3100 14.2M… --- ## [Plot stacked series in Canvas from filebeat](https://discuss.elastic.co/t/plot-stacked-series-in-canvas-from-filebeat/203612)
**Author:** [@Dimitris\_S](https://discuss.elastic.co/u/Dimitris_S)\ **Replies:** 2\ **Last updated:** [October 22, 2019, 2:12pm UTC](https://discuss.elastic.co/t/plot-stacked-series-in-canvas-from-filebeat/203612 "2019-10-22T14:12:09Z")
Hi there, I'm pushing data from a Raspberry Pi to Kibana via filebeat. Data are sent as UDP messages in a JSON format. One of the fields in JSON is called phys\_stats and contains three sub-fields which I would like to … --- ## [Is elasticsearch supported on docker?](https://discuss.elastic.co/t/is-elasticsearch-supported-on-docker/188642)
**Author:** [@TimStibbs](https://discuss.elastic.co/u/TimStibbs)\ **Replies:** 2\ **Last updated:** [July 4, 2019, 10:14am UTC](https://discuss.elastic.co/t/is-elasticsearch-supported-on-docker/188642 "2019-07-04T10:14:54Z")
The support matrix doesn't mention docker at all. However docker images of elasticsearch are provided, suggesting that running on docker might be supported. Do the various support contracts support running on docker? I k… --- ## [How Facet information is aggregated in a cluster](https://discuss.elastic.co/t/how-facet-information-is-aggregated-in-a-cluster/10050)
**Author:** [@revdev](https://discuss.elastic.co/u/revdev)\ **Replies:** 8\ **Last updated:** [January 4, 2013, 1:50am UTC](https://discuss.elastic.co/t/how-facet-information-is-aggregated-in-a-cluster/10050 "2013-01-04T01:50:48Z")
Hi, I wanted to know the behavior of the cluster when facet queries are run. Assuming, I have a cluster of 4 nodes and 4 indexes where each index is with configuration of 4 shards and 1 replica. If I issue a facet… --- ## [Number of Docs Returned](https://discuss.elastic.co/t/number-of-docs-returned/5328)
**Author:** [@Adam\_Estrada](https://discuss.elastic.co/u/Adam_Estrada)\ **Replies:** 8\ **Last updated:** [September 11, 2011, 8:11pm UTC](https://discuss.elastic.co/t/number-of-docs-returned/5328 "2011-09-11T20:11:15Z")
All, I am doing a search using the pyes geodistancefilter and I am only getting the top 10 results at a time. That is by design, right? I want to be able to retrieve all my the docs at a time and write them to a fi… --- ## [Deleting / editing existing analyzer in elastic index](https://discuss.elastic.co/t/deleting-editing-existing-analyzer-in-elastic-index/320838)
**Author:** [@Leonid\_P](https://discuss.elastic.co/u/Leonid_P)\ **Replies:** 3\ **Last updated:** [December 9, 2022, 8:17am UTC](https://discuss.elastic.co/t/deleting-editing-existing-analyzer-in-elastic-index/320838 "2022-12-09T08:17:27Z")
Hello! Is it safe to delete or change an analyzer in an existing index? Surfing through Stackoverflow and experimenting on my own I've found ways for both operations, i.e. curl -X PUT "localhost:9200/index\_name/\_setti… --- ## [Kibana "Goal" Visual - how to make the end of the scale dynamic](https://discuss.elastic.co/t/kibana-goal-visual-how-to-make-the-end-of-the-scale-dynamic/264686)
**Author:** [@luca.scarpato](https://discuss.elastic.co/u/luca.scarpato)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 2:04pm UTC](https://discuss.elastic.co/t/kibana-goal-visual-how-to-make-the-end-of-the-scale-dynamic/264686 "2021-02-22T14:04:42Z")
Dear Kibana & ES team, We are trying to use the Kibana Goal Visual to represents a proportion of a metrics over its total. E.g. Newly Received Emails / Total of Emails E.g. 16,700 new emails / 100,000 of total emails … --- ## [Joining two indexes in elasticsearch](https://discuss.elastic.co/t/joining-two-indexes-in-elasticsearch/218729)
**Author:** [@sarvendras](https://discuss.elastic.co/u/sarvendras)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 6:19am UTC](https://discuss.elastic.co/t/joining-two-indexes-in-elasticsearch/218729 "2020-02-12T06:19:03Z")
Hi All, I have one index having one column as primary key and some other fields while second index also have same primary key and some new column(which is not there in first index) How Can i create third index which ha… --- ## [Extract Field from Windows EventLog using Logstash](https://discuss.elastic.co/t/extract-field-from-windows-eventlog-using-logstash/210803)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 3\ **Last updated:** [December 6, 2019, 8:00pm UTC](https://discuss.elastic.co/t/extract-field-from-windows-eventlog-using-logstash/210803 "2019-12-06T20:00:20Z")
Hi, I'm new to using Logstash for parsing data. We've windows Event Logs coming though Winbeats to Logstash and then sent to Elastic Search . I am trying to extract different fields using Logstash, but it doesn't work., … --- ## [Creating a High Throughput Elasticsearch cluster](https://discuss.elastic.co/t/creating-a-high-throughput-elasticsearch-cluster/171449)
**Author:** [@kaysush](https://discuss.elastic.co/u/kaysush)\ **Replies:** 0\ **Last updated:** [March 8, 2019, 8:10am UTC](https://discuss.elastic.co/t/creating-a-high-throughput-elasticsearch-cluster/171449 "2019-03-08T08:10:46Z")
We are in process of implementing Elasticsearch as a search solution in our organization. For the POC we implemented a 3-Node cluster ( each node with 16 VCores and 60 GB RAM and 6 \* 375GB SSDs) with all the nodes acting… --- ## [Help in index pattern](https://discuss.elastic.co/t/help-in-index-pattern/116220)
**Author:** [@nivedita\_singh](https://discuss.elastic.co/u/nivedita_singh)\ **Replies:** 3\ **Last updated:** [January 30, 2018, 5:40am UTC](https://discuss.elastic.co/t/help-in-index-pattern/116220 "2018-01-30T05:40:27Z")
Hi , I was going through the following link on creating kibana index pattern - https://www.elastic.co/guide/en/kibana/current/index-patterns.html#settings-create-pattern I am using ELK stack in my project , where I am… --- ## [Query with CASE condition and SUM](https://discuss.elastic.co/t/query-with-case-condition-and-sum/110889)
**Author:** [@lecobf](https://discuss.elastic.co/u/lecobf)\ **Replies:** 0\ **Last updated:** [December 8, 2017, 7:52pm UTC](https://discuss.elastic.co/t/query-with-case-condition-and-sum/110889 "2017-12-08T19:52:25Z")
Hi there, I'm very new in Elastic world and I'm stuck with a simple query... How could I code in Kibana language the equivalent to this: SELECT le.ID\_Lote, CASE WHEN SUM (Case when le.ID\_origem = 1 then 1 else 0 end)… --- ## [Logstash Configuration Error with BlueLiv](https://discuss.elastic.co/t/logstash-configuration-error-with-blueliv/65416)
**Author:** [@ossec.junkie](https://discuss.elastic.co/u/ossec.junkie)\ **Replies:** 3\ **Last updated:** [November 9, 2016, 12:44am UTC](https://discuss.elastic.co/t/logstash-configuration-error-with-blueliv/65416 "2016-11-09T00:44:28Z")
Hi there- I'm pretty new to the ELK stack and have been tasked with using ELK Stack and BlueLiv Threat Intelligence Community. I have my basic setup configured for all ELK components, they start and what not however w… --- ## [Path.repo is not being updated by elasticsearch.yml file](https://discuss.elastic.co/t/path-repo-is-not-being-updated-by-elasticsearch-yml-file/344441)
**Author:** [@Faker](https://discuss.elastic.co/u/Faker)\ **Replies:** 4\ **Last updated:** [October 10, 2023, 12:29am UTC](https://discuss.elastic.co/t/path-repo-is-not-being-updated-by-elasticsearch-yml-file/344441 "2023-10-10T00:29:57Z")
Hi, I'd like to thank you in advance for your reply. i am going through hard tasks. our team use ES 7.13.12 and wants to migrate (& upgrade) to docker ELK 8.10.2 according to ES document, i should go through 7.17.13 b… --- ## [Troubleshoot Elastic Endpoint Unhealthy](https://discuss.elastic.co/t/troubleshoot-elastic-endpoint-unhealthy/344540)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 4\ **Last updated:** [October 9, 2023, 2:41pm UTC](https://discuss.elastic.co/t/troubleshoot-elastic-endpoint-unhealthy/344540 "2023-10-09T14:41:00Z")
Hello, We are doing a PoC with the Elastic Agent and one of our agent host in this scenario became UNHEALTHY after an upgrade. We have the following ingestion flow: Elastic Agent -\> HAProxy (passthrough) -\> Logstash -\>… --- ## [Elasticsearch log duplicates into Console and RollingFile](https://discuss.elastic.co/t/elasticsearch-log-duplicates-into-console-and-rollingfile/232614)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 4\ **Last updated:** [May 15, 2020, 5:43am UTC](https://discuss.elastic.co/t/elasticsearch-log-duplicates-into-console-and-rollingfile/232614 "2020-05-15T05:43:04Z")
Hi, all! We have some issues whereby log size grows without limit for console logs. From logging config, seems like ES defines 2 rootLogger (console and file) and respectively 2 settings for appenders for each of them. … --- ## [How to manage index lifecycle in AppSearch?](https://discuss.elastic.co/t/how-to-manage-index-lifecycle-in-appsearch/225512)
**Author:** [@gpribi](https://discuss.elastic.co/u/gpribi)\ **Replies:** 4\ **Last updated:** [April 16, 2020, 10:05pm UTC](https://discuss.elastic.co/t/how-to-manage-index-lifecycle-in-appsearch/225512 "2020-04-16T22:05:32Z")
Hello! I'm currently developing an autocomplete feature for my mobile marketplace, based on my products dataset, stored in my main database. I currently have about 100K documents loaded on my products index using logsta… --- ## [Split an output of a kv filter](https://discuss.elastic.co/t/split-an-output-of-a-kv-filter/184614)
**Author:** [@arjun\_purushotham](https://discuss.elastic.co/u/arjun_purushotham)\ **Replies:** 4\ **Last updated:** [June 7, 2019, 1:25pm UTC](https://discuss.elastic.co/t/split-an-output-of-a-kv-filter/184614 "2019-06-07T13:25:20Z")
Hi Below is my logstash filter configuration. filter { if \[type\] in \[ "apache" , "apache\_access" , "apache-access" \] { grok { match =\> \[ "message" , "%{COMBINEDAPACHELOG}+%{GREEDYDATA:extra\_fields}", "message" , … --- ## [Beat Event Field "IP datatype"](https://discuss.elastic.co/t/beat-event-field-ip-datatype/132619)
**Author:** [@ecc256](https://discuss.elastic.co/u/ecc256)\ **Replies:** 4\ **Last updated:** [May 22, 2018, 1:39am UTC](https://discuss.elastic.co/t/beat-event-field-ip-datatype/132619 "2018-05-22T01:39:46Z")
How do I add Beat Event Field with IP datatype? fields.Put("client.ip", net.ParseIP(clientIP)) adds string field... --- ## [How to enable Runtime halt() and exit() in plugin?](https://discuss.elastic.co/t/how-to-enable-runtime-halt-and-exit-in-plugin/112790)
**Author:** [@Ruan\_Yiming](https://discuss.elastic.co/u/Ruan_Yiming)\ **Replies:** 4\ **Last updated:** [December 26, 2017, 2:00am UTC](https://discuss.elastic.co/t/how-to-enable-runtime-halt-and-exit-in-plugin/112790 "2017-12-26T02:00:11Z")
As I noticed that, start from ES5.0. The security manager can not be disabled. I am developing a plugin which can restart the JVM for rolling restart purpose. I check the SecureSM.java that no package can exit nor halt t… --- ## [Learning the Query DSL](https://discuss.elastic.co/t/learning-the-query-dsl/3091)
**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\ **Replies:** 4\ **Last updated:** [July 13, 2010, 7:21am UTC](https://discuss.elastic.co/t/learning-the-query-dsl/3091 "2010-07-13T07:21:35Z")
The documentation is a bit sparse on describing the query capabilities. Is there a recommended online source to get familiar with Elastic Search's syntax and terminology? Would looking into Lucene resources help? --- ## [Add @timestamp using Python API](https://discuss.elastic.co/t/add-timestamp-using-python-api/120890)
**Author:** [@druzmieres](https://discuss.elastic.co/u/druzmieres)\ **Replies:** 0\ **Last updated:** [February 21, 2018, 4:10pm UTC](https://discuss.elastic.co/t/add-timestamp-using-python-api/120890 "2018-02-21T16:10:03Z")
I wrote a script that loads files to ES using the Python API (helpers.parallel\_bulk). But, when the same files are sent using Logstash, there's a field called "@timestamp". I'd like to add the same field using the API b… --- ## [Certificate error -javax.net.ssl.SSLHandshakeException: Received fatal alert: decrypt\_error](https://discuss.elastic.co/t/certificate-error-javax-net-ssl-sslhandshakeexception-received-fatal-alert-decrypt-error/314524)
**Author:** [@elkstack1](https://discuss.elastic.co/u/elkstack1)\ **Replies:** 1\ **Last updated:** [September 19, 2022, 3:19pm UTC](https://discuss.elastic.co/t/certificate-error-javax-net-ssl-sslhandshakeexception-received-fatal-alert-decrypt-error/314524 "2022-09-19T15:19:13Z")
Getting the below error while trying to access elasticsearch https://\/9200 and it says connection is not secure DecoderException: javax.net.ssl.SSLHandshakeException: Received fatal alert: decrypt\_error … --- ## [Scripted Field / Painless script fails upon slash for string match](https://discuss.elastic.co/t/scripted-field-painless-script-fails-upon-slash-for-string-match/211808)
**Author:** [@codak7](https://discuss.elastic.co/u/codak7)\ **Replies:** 1\ **Last updated:** [December 16, 2019, 9:35pm UTC](https://discuss.elastic.co/t/scripted-field-painless-script-fails-upon-slash-for-string-match/211808 "2019-12-16T21:35:53Z")
Hi, I am basically copy & pasting the first line of code under the section "Match a string and return that match" from this page: https://www.elastic.co/blog/using-painless-kibana-scripted-fields def m = /^(\[0-9\]+)\\..… --- ## [ES 6.5: How should I reindex with millions of documents?](https://discuss.elastic.co/t/es-6-5-how-should-i-reindex-with-millions-of-documents/184485)
**Author:** [@revolve3](https://discuss.elastic.co/u/revolve3)\ **Replies:** 1\ **Last updated:** [June 6, 2019, 1:54pm UTC](https://discuss.elastic.co/t/es-6-5-how-should-i-reindex-with-millions-of-documents/184485 "2019-06-06T13:54:54Z")
I'd like to resolve a simple mapping conflict, only it may not be so simple since I have many daily indexes and each contains millions of documents. For now I'm just trying to figure out how I can, as quickly as possible… --- ## [Caused by: org.elasticsearch.ElasticsearchTimeoutException: no activity after \[30m\]](https://discuss.elastic.co/t/caused-by-org-elasticsearch-elasticsearchtimeoutexception-no-activity-after-30m/161477)
**Author:** [@HugoP](https://discuss.elastic.co/u/HugoP)\ **Replies:** 1\ **Last updated:** [December 19, 2018, 9:45am UTC](https://discuss.elastic.co/t/caused-by-org-elasticsearch-elasticsearchtimeoutexception-no-activity-after-30m/161477 "2018-12-19T09:45:44Z")
Hi, A rebalance operation is currently in progress on my cluster because a node was added. From time to time, the cluster health status changed from green to yellow. I see a lot of errors like this one: (no activity af… --- ## [Java::org.mariadb.jdbc.Driver not loaded](https://discuss.elastic.co/t/java-org-mariadb-jdbc-driver-not-loaded/154367)
**Author:** [@sally.c](https://discuss.elastic.co/u/sally.c)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 3:39am UTC](https://discuss.elastic.co/t/java-org-mariadb-jdbc-driver-not-loaded/154367 "2018-10-29T03:39:54Z")
Hi, I am using Logstach to migrate data from mariadb to elasticSearch, but I always get this error, 'Error: Java::org.mariadb.jdbc.Driver not loaded. Are you sure you've included the correct jdbc driver in :jdbc\_driver… --- ## [Hive to elastic :- EsHadoopNoNodesLeftException](https://discuss.elastic.co/t/hive-to-elastic-eshadoopnonodesleftexception/144375)
**Author:** [@Amandeep\_Singh1](https://discuss.elastic.co/u/Amandeep_Singh1)\ **Replies:** 1\ **Last updated:** [August 17, 2018, 8:14pm UTC](https://discuss.elastic.co/t/hive-to-elastic-eshadoopnonodesleftexception/144375 "2018-08-17T20:14:31Z")
Trying to connect HIve to elastic added elasticsearch-hadoop-6.3.2.jar elasticsearch-hadoop-6.3.2-javadoc.jar elasticsearch-hadoop-6.3.2-sources.jar to/usr/lib/hive/auxlib The query for creating the table. CREATE E… --- ## [All shards failed exception from elasticsearch aggregation query](https://discuss.elastic.co/t/all-shards-failed-exception-from-elasticsearch-aggregation-query/140319)
**Author:** [@ankur\_singla](https://discuss.elastic.co/u/ankur_singla)\ **Replies:** 1\ **Last updated:** [July 17, 2018, 11:35am UTC](https://discuss.elastic.co/t/all-shards-failed-exception-from-elasticsearch-aggregation-query/140319 "2018-07-17T11:35:52Z")
Hi, I am trying to execute an aggregate query in which I am getting index\_out\_of\_bounds\_exception: null exception. I looked into stack trace of exception in elasticsearch logs but couldn't understand the proper cause. H… --- ## [message=\>"Expected one of #](https://discuss.elastic.co/t/message-expected-one-of/138496)
**Author:** [@Gokul\_15](https://discuss.elastic.co/u/Gokul_15)\ **Replies:** 1\ **Last updated:** [July 4, 2018, 10:54am UTC](https://discuss.elastic.co/t/message-expected-one-of/138496 "2018-07-04T10:54:10Z")
Sending Logstash's logs to C:/logstash-6.3.0/logs which is now configured via log4j2.properties \[2018-07-04T12:49:04,756\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or co… --- ## [Filebeat filter message for specific path](https://discuss.elastic.co/t/filebeat-filter-message-for-specific-path/115954)
**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\ **Replies:** 1\ **Last updated:** [January 18, 2018, 11:58am UTC](https://discuss.elastic.co/t/filebeat-filter-message-for-specific-path/115954 "2018-01-18T11:58:13Z")
Hi , I am using filebeat-5.6.3 with the below filebeat config i am able to drop the events which doesn't have "testing2" or "testing1" in the message field of path "/var/log/messages" drop the events which doesn't h… [Previous page](https://discuss.elastic.co/top.md?page=1650&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1652&per_page=50&period=all)