# Top **URL:** https://discuss.elastic.co/top.md?page=1659&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1660 --- ## [Aggregation only on hits returned](https://discuss.elastic.co/t/aggregation-only-on-hits-returned/268131)
**Author:** [@sidnei\_de\_souza](https://discuss.elastic.co/u/sidnei_de_souza)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 8:53pm UTC](https://discuss.elastic.co/t/aggregation-only-on-hits-returned/268131 "2021-03-23T20:53:00Z")
First question here, new on Elasticsearch. Is it possible to do an aggregation on the hits returned on a search? I mean, if there are 8000 docs that match my query but I limit the size to 200, is it possible to do an ag… --- ## [Transform indices show green but Regular indices shows yellow status](https://discuss.elastic.co/t/transform-indices-show-green-but-regular-indices-shows-yellow-status/243233)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 4\ **Last updated:** [August 9, 2020, 5:21pm UTC](https://discuss.elastic.co/t/transform-indices-show-green-but-regular-indices-shows-yellow-status/243233 "2020-08-09T17:21:55Z")
Hi all ES and K version = 7.7.0 I am using a one node development machine that has ES and Kibana running. All my indices display a status YELLOW (understandable because I have one node). However ALL my transform indic… --- ## [Custom ingest alongside with IIS module](https://discuss.elastic.co/t/custom-ingest-alongside-with-iis-module/232682)
**Author:** [@Jujule](https://discuss.elastic.co/u/Jujule)\ **Replies:** 4\ **Last updated:** [May 15, 2020, 12:50pm UTC](https://discuss.elastic.co/t/custom-ingest-alongside-with-iis-module/232682 "2020-05-15T12:50:51Z")
Hi, warning: those are probably some newbie questions. Context: wanting to filebeat some files to ES with ingest pipelines, and IIS logs, from differents files on the same machine. Are the main configuration from file… --- ## [Saved Search display specific nested field as a column](https://discuss.elastic.co/t/saved-search-display-specific-nested-field-as-a-column/195480)
**Author:** [@theflyingcarpet](https://discuss.elastic.co/u/theflyingcarpet)\ **Replies:** 4\ **Last updated:** [August 19, 2019, 3:29pm UTC](https://discuss.elastic.co/t/saved-search-display-specific-nested-field-as-a-column/195480 "2019-08-19T15:29:37Z")
The current behaviour when displaying a nested field is to display the complete sub-document as the column e.g. {"field1": "value1", "field2": "value2"} How can we flatten this to display the fields as separate columns?… --- ## [APM 6.6 release, python flask agent are stuck at startup](https://discuss.elastic.co/t/apm-6-6-release-python-flask-agent-are-stuck-at-startup/166285)
**Author:** [@oldcodeoberyn](https://discuss.elastic.co/u/oldcodeoberyn)\ **Replies:** 4\ **Last updated:** [February 1, 2019, 3:07pm UTC](https://discuss.elastic.co/t/apm-6-6-release-python-flask-agent-are-stuck-at-startup/166285 "2019-02-01T15:07:45Z")
After I upgrade the agent from 4.0.3 to 4.1.0, I can't start the app which use APM python agent. It is stuck after the log print: base\_metrics.py\[line:63\] DEBUG Starting metrics collect timer --- ## [Structure of value for a key that represents nested classes](https://discuss.elastic.co/t/structure-of-value-for-a-key-that-represents-nested-classes/80880)
**Author:** [@Xavi\_Montero](https://discuss.elastic.co/u/Xavi_Montero)\ **Replies:** 4\ **Last updated:** [April 2, 2017, 8:54am UTC](https://discuss.elastic.co/t/structure-of-value-for-a-key-that-represents-nested-classes/80880 "2017-04-02T08:54:46Z")
First of all, I'm a complete newbie to ElasticSeach and related tools. Although 30 yrs programming, in fact this is my First project using Elasticsearch. So sorry if this is not the kind of question I should be asking he… --- ## [Best layout for inventory Data](https://discuss.elastic.co/t/best-layout-for-inventory-data/266542)
**Author:** [@Eric007](https://discuss.elastic.co/u/Eric007)\ **Replies:** 2\ **Last updated:** [March 9, 2021, 6:13pm UTC](https://discuss.elastic.co/t/best-layout-for-inventory-data/266542 "2021-03-09T18:13:15Z")
Hi, I am realatively new to the topic of Elasticsearch and Kibana. I have set up a small infrastructure with Logstash, Elastisearch and Kibana. Currently, files are successfully routed to my custom index via Logsatash a… --- ## [Kibana upgrade from 6.6.1 to 7.8.0 fails with resource already exists exception](https://discuss.elastic.co/t/kibana-upgrade-from-6-6-1-to-7-8-0-fails-with-resource-already-exists-exception/245158)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 2\ **Last updated:** [August 17, 2020, 10:15am UTC](https://discuss.elastic.co/t/kibana-upgrade-from-6-6-1-to-7-8-0-fails-with-resource-already-exists-exception/245158 "2020-08-17T10:15:24Z")
Hi, I am upgrading ELK stack from 6.6.1 to 7.8.0(oss) in kubernetes environment. Elasticsearch upgrade works fine, but new kibana pod fails with this error - {"type":"log","@timestamp":"2020-08-16T18:01:43Z","tags":\["… --- ## [Using a "missing" field option in a group by statement in a Data Transform](https://discuss.elastic.co/t/using-a-missing-field-option-in-a-group-by-statement-in-a-data-transform/219069)
**Author:** [@ebalmeida](https://discuss.elastic.co/u/ebalmeida)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 3:07pm UTC](https://discuss.elastic.co/t/using-a-missing-field-option-in-a-group-by-statement-in-a-data-transform/219069 "2020-02-14T15:07:47Z")
Hi guys, I'm trying to create a data transform (using kibana's interface) in elasticsearch that includes missing docs for one of it's group by parameters as such: However, once I hit apply changes, it obliterates the… --- ## [Pinned filter across dashboards](https://discuss.elastic.co/t/pinned-filter-across-dashboards/201665)
**Author:** [@scroodj](https://discuss.elastic.co/u/scroodj)\ **Replies:** 2\ **Last updated:** [October 1, 2019, 7:19am UTC](https://discuss.elastic.co/t/pinned-filter-across-dashboards/201665 "2019-10-01T07:19:00Z")
Hello. I have pinned filter on my Dashboard A: when i navigate from Dashboard A to Dashboard B via Markdown Widget, i see no pinned filter on Dashboard B: Is this expected behavior or bug? Kibana 7.3.2 Thx. --- ## [Cannot install error checking file system storage driver permissions](https://discuss.elastic.co/t/cannot-install-error-checking-file-system-storage-driver-permissions/162181)
**Author:** [@Giovanni\_Mazza](https://discuss.elastic.co/u/Giovanni_Mazza)\ **Replies:** 2\ **Last updated:** [December 28, 2018, 4:16pm UTC](https://discuss.elastic.co/t/cannot-install-error-checking-file-system-storage-driver-permissions/162181 "2018-12-28T16:16:50Z")
Getting this error i followed the instructions as close as i could the only thing that is different is that the Storage is /Data/elastic instead of the default I got this warning Checking Docker file system... PASSED … --- ## [Adding device name field to visual builder table](https://discuss.elastic.co/t/adding-device-name-field-to-visual-builder-table/159947)
**Author:** [@jtebbens](https://discuss.elastic.co/u/jtebbens)\ **Replies:** 2\ **Last updated:** [December 10, 2018, 11:48pm UTC](https://discuss.elastic.co/t/adding-device-name-field-to-visual-builder-table/159947 "2018-12-10T23:48:35Z")
I need to add a device name field to this visual builder table. Currently it is grouped by Interface name but I like to add the device name as well. Device name is captured in ci\_id but I can't find a way to add it as … --- ## [Error parsing postgresql](https://discuss.elastic.co/t/error-parsing-postgresql/133319)
**Author:** [@pollux](https://discuss.elastic.co/u/pollux)\ **Replies:** 2\ **Last updated:** [May 29, 2018, 11:26am UTC](https://discuss.elastic.co/t/error-parsing-postgresql/133319 "2018-05-29T11:26:32Z")
I setup filebeat on a ubuntu 18.04 server. filebeat from elastic repo, version 6.2.4 here is the /etc/filebeat/filebeat.ymlfile: filebeat.config.modules: # Glob pattern for configuration loading path: ${path.config… --- ## [Scripted field containing timestamp less 1 hour](https://discuss.elastic.co/t/scripted-field-containing-timestamp-less-1-hour/131351)
**Author:** [@bkelley](https://discuss.elastic.co/u/bkelley)\ **Replies:** 2\ **Last updated:** [May 10, 2018, 8:22pm UTC](https://discuss.elastic.co/t/scripted-field-containing-timestamp-less-1-hour/131351 "2018-05-10T20:22:53Z")
Hello - I would like to create a scripted field that takes my existing timestamp field and subtracts 1 hour. What I have is: timestamp\_OMi Language: painless Type: date Format: Date Script: doc\['@timestamp'\].value… --- ## [Kibana dashboard - fails to show index pattern available](https://discuss.elastic.co/t/kibana-dashboard-fails-to-show-index-pattern-available/100446)
**Author:** [@rajendar](https://discuss.elastic.co/u/rajendar)\ **Replies:** 2\ **Last updated:** [September 15, 2017, 1:27am UTC](https://discuss.elastic.co/t/kibana-dashboard-fails-to-show-index-pattern-available/100446 "2017-09-15T01:27:33Z")
Hi, I am using EFK stack . My data is pushed by fluentd to ES and i could verify the index being created @ ES by url http://ES:9200/\_cat/indices. My queries are (i) Do we need to initialize or create index pattern @ … --- ## [OutOfMemoryError Java Heap Space](https://discuss.elastic.co/t/outofmemoryerror-java-heap-space/83474)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 2\ **Last updated:** [April 26, 2017, 5:12am UTC](https://discuss.elastic.co/t/outofmemoryerror-java-heap-space/83474 "2017-04-26T05:12:02Z")
Any idea why should this happen? Configuration: 15 GB for lucene and 15GB for Elasticsearch. Let me know if you need more information. \[2017-04-25T01:23:57,673\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[d… --- ## [Shield and LDAP error](https://discuss.elastic.co/t/shield-and-ldap-error/60156)
**Author:** [@matrocker](https://discuss.elastic.co/u/matrocker)\ **Replies:** 2\ **Last updated:** [September 9, 2016, 12:50pm UTC](https://discuss.elastic.co/t/shield-and-ldap-error/60156 "2016-09-09T12:50:04Z")
Hello, I have integrated shield and LDAP. Both of these components are on the same machine (Windows 10) . I'm doing this exercise before implementing it on production. Below is the the ldap realm: shield: authc: … --- ## [Deleting unwanted indexes](https://discuss.elastic.co/t/deleting-unwanted-indexes/48836)
**Author:** [@Michael1](https://discuss.elastic.co/u/Michael1)\ **Replies:** 2\ **Last updated:** [April 30, 2016, 1:24am UTC](https://discuss.elastic.co/t/deleting-unwanted-indexes/48836 "2016-04-30T01:24:47Z")
I've got two warm nodes that indexes get moved to beyond a set expiration date on hot nodes. When I am ready to call a DELETE on any given index, does this need to happen on all warm nodes or can it happen on one and i… --- ## [New Layer support - Wi-Fi (RadioTap)](https://discuss.elastic.co/t/new-layer-support-wi-fi-radiotap/40204)
**Author:** [@alm8i](https://discuss.elastic.co/u/alm8i)\ **Replies:** 2\ **Last updated:** [January 27, 2016, 11:20am UTC](https://discuss.elastic.co/t/new-layer-support-wi-fi-radiotap/40204 "2016-01-27T11:20:53Z")
I added limited radiotap layer (Wi-Fi) support to packetbeat, so that I am able to receive for example beacons, probes, etc... But when I am enabling other protocols (http, dns, ...) in yml file, no management frames are… --- ## [Can't build Kibana: yarn build](https://discuss.elastic.co/t/cant-build-kibana-yarn-build/303750)
**Author:** [@MichelPitz](https://discuss.elastic.co/u/MichelPitz)\ **Replies:** 5\ **Last updated:** [May 4, 2022, 2:58pm UTC](https://discuss.elastic.co/t/cant-build-kibana-yarn-build/303750 "2022-05-04T14:58:22Z")
Hello, I created a custom connector like Pargerduty, the connector is working localhost perfectly. However I cannot build the projectm I got the following error. Actually, even if git clone the project and do not chan… --- ## [Validation schedule for \[xpack,fleet\] was already registered](https://discuss.elastic.co/t/validation-schedule-for-xpack-fleet-was-already-registered/270135)
**Author:** [@mof\_cmsmith](https://discuss.elastic.co/u/mof_cmsmith)\ **Replies:** 5\ **Last updated:** [April 22, 2021, 2:17pm UTC](https://discuss.elastic.co/t/validation-schedule-for-xpack-fleet-was-already-registered/270135 "2021-04-22T14:17:08Z")
Morning all, while upgrading Elasticsearch, Logstash, and Kibana this morning to 7.12 from 7.10.1 on Windows Server, I received this error in Kibana. As a result, I am unable to start Kibana. Elasticsearch and logstash … --- ## [Elastic: Problem with decimal format when indexing from the 64th document (document not indexed)](https://discuss.elastic.co/t/elastic-problem-with-decimal-format-when-indexing-from-the-64th-document-document-not-indexed/257588)
**Author:** [@oldiequattro](https://discuss.elastic.co/u/oldiequattro)\ **Replies:** 5\ **Last updated:** [December 5, 2020, 4:43am UTC](https://discuss.elastic.co/t/elastic-problem-with-decimal-format-when-indexing-from-the-64th-document-document-not-indexed/257588 "2020-12-05T04:43:40Z")
Hello, I am showing you here a problem encountered in our environments with the indexing of a row in Elasticsearch which is not done as soon as the decimal value contained in the key exceeds 64 (side effect of a base 64… --- ## [Filebeat decoded JSON fields aren't searchable](https://discuss.elastic.co/t/filebeat-decoded-json-fields-arent-searchable/256410)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 6:34am UTC](https://discuss.elastic.co/t/filebeat-decoded-json-fields-arent-searchable/256410 "2020-11-25T06:34:06Z")
Sending logs (JSON nested) using filebeat, the fields are getting created in (confirming from index pattern) , but the decoded fields are not visible in Kibana Discover tab. Sample data {"id":"5f5a0206-c431-4d76-9e8a-0… --- ## [Why does this query take so long? How can I make it faster?](https://discuss.elastic.co/t/why-does-this-query-take-so-long-how-can-i-make-it-faster/68234)
**Author:** [@mpenkov](https://discuss.elastic.co/u/mpenkov)\ **Replies:** 5\ **Last updated:** [December 9, 2016, 3:55pm UTC](https://discuss.elastic.co/t/why-does-this-query-take-so-long-how-can-i-make-it-faster/68234 "2016-12-09T15:55:30Z")
I have a query that looks like this: { "query": { "bool": { "should": \[ { "match": { "title": { "query": "Profound Networks", "boost": 2 … --- ## [Duplicate logs in Logstash](https://discuss.elastic.co/t/duplicate-logs-in-logstash/347630)
**Author:** [@marcowiskhy](https://discuss.elastic.co/u/marcowiskhy)\ **Replies:** 8\ **Last updated:** [November 23, 2023, 6:15pm UTC](https://discuss.elastic.co/t/duplicate-logs-in-logstash/347630 "2023-11-23T18:15:47Z")
I collect VPN logs through Logstash and index them in Elasticsearch, but I'm having the following problem: For each unique VPN connection (represented by TunnelID), there should be only one tunnel-up event and one tunne… --- ## [Spike Search is too often in elastic](https://discuss.elastic.co/t/spike-search-is-too-often-in-elastic/291007)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 8\ **Last updated:** [December 6, 2021, 5:06am UTC](https://discuss.elastic.co/t/spike-search-is-too-often-in-elastic/291007 "2021-12-06T05:06:31Z")
Hello Everobody, I just want to know, if Elasticsearch there is often a spike like this. What caused of it? can anyone explain to me? FYI: i'm newbie in elastic --- ## [How to define what data is sent to Elastic from Logstash?](https://discuss.elastic.co/t/how-to-define-what-data-is-sent-to-elastic-from-logstash/279995)
**Author:** [@profsteve](https://discuss.elastic.co/u/profsteve)\ **Replies:** 8\ **Last updated:** [August 12, 2021, 1:37pm UTC](https://discuss.elastic.co/t/how-to-define-what-data-is-sent-to-elastic-from-logstash/279995 "2021-08-12T13:37:12Z")
Hello, I have ELK running on Ubuntu Server with the intention of it receiving Syslog from firewalls and Filebeat from DNS/DHCP/AD services. The primary issue is the firewalls make a lot of Syslog noise without there be… --- ## [1.2.0 routing issue and explicit routing](https://discuss.elastic.co/t/1-2-0-routing-issue-and-explicit-routing/18028)
**Author:** [@Ralph\_Meijer](https://discuss.elastic.co/u/Ralph_Meijer)\ **Replies:** 8\ **Last updated:** [June 12, 2014, 8:43am UTC](https://discuss.elastic.co/t/1-2-0-routing-issue-and-explicit-routing/18028 "2014-06-12T08:43:35Z")
Hi, I use explicit routing in some of my logging indexes, and I have a \*lot\* of data. The tool provided to fix the routing issue that showed up in 1.2.0 takes forever on my indexes, but while it has been running, … --- ## [Boolean query vs filters and more](https://discuss.elastic.co/t/boolean-query-vs-filters-and-more/3225)
**Author:** [@Andrei](https://discuss.elastic.co/u/Andrei)\ **Replies:** 8\ **Last updated:** [August 17, 2010, 10:11pm UTC](https://discuss.elastic.co/t/boolean-query-vs-filters-and-more/3225 "2010-08-17T22:11:42Z")
Hi, I've just started using ElasticSearch and so far it's been fairly easy to get going with. However, I have a couple of questions that came up during the course of development: 1. I need to find docs where a st… --- ## [Does Logstash Persistent Queue support Syslog Plugin](https://discuss.elastic.co/t/does-logstash-persistent-queue-support-syslog-plugin/298809)
**Author:** [@ivanchak](https://discuss.elastic.co/u/ivanchak)\ **Replies:** 3\ **Last updated:** [March 4, 2022, 4:30am UTC](https://discuss.elastic.co/t/does-logstash-persistent-queue-support-syslog-plugin/298809 "2022-03-04T04:30:42Z")
Dear all, I have a pipeline that has been configured to use the syslog plugin as its input data source. And I would like to enable the Persistent Queue feature to prevent potential data loss due to a crash on Logstash. … --- ## [Rollover illegal\_state\_exception and illegal\_argument\_exception](https://discuss.elastic.co/t/rollover-illegal-state-exception-and-illegal-argument-exception/272197)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 0\ **Last updated:** [May 5, 2021, 1:45pm UTC](https://discuss.elastic.co/t/rollover-illegal-state-exception-and-illegal-argument-exception/272197 "2021-05-05T13:45:45Z")
I implemented rollover index myapp ant it works like a charm for a long time. Today, I find out in Kibana that two of my indices encounter errors: 2 indices have lifecycle errors. GET /\_cat/aliases/myapp?v=true alias in… --- ## [Refresh data](https://discuss.elastic.co/t/refresh-data/258989)
**Author:** [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)\ **Replies:** 3\ **Last updated:** [December 18, 2020, 9:03am UTC](https://discuss.elastic.co/t/refresh-data/258989 "2020-12-18T09:03:17Z")
Hello, I have a logstash configuration that is inserting the data from csv files from a specific folder. In the past two weeks I have made numerous changes and the data that I inserted is incomplete. How do I drop ever… --- ## [Exclude specific fields from multimatch query](https://discuss.elastic.co/t/exclude-specific-fields-from-multimatch-query/182091)
**Author:** [@dpiemonte](https://discuss.elastic.co/u/dpiemonte)\ **Replies:** 0\ **Last updated:** [May 21, 2019, 9:34pm UTC](https://discuss.elastic.co/t/exclude-specific-fields-from-multimatch-query/182091 "2019-05-21T21:34:57Z")
Hello everyone, Is there a way to perform a multi match query in all fields but exclude only certain fields from being considered in the clause? We have a structure with dynamic indexes and we don't know the fields at … --- ## [Grok pattern for Apache customized log](https://discuss.elastic.co/t/grok-pattern-for-apache-customized-log/177270)
**Author:** [@srinivasas](https://discuss.elastic.co/u/srinivasas)\ **Replies:** 3\ **Last updated:** [April 17, 2019, 3:17pm UTC](https://discuss.elastic.co/t/grok-pattern-for-apache-customized-log/177270 "2019-04-17T15:17:15Z")
Hello, we are using a filebeat Apahce module to parse apache access logs and customized the default log format. Logs are sent to Logstash there we want to use the grok filter to catch few events through alerts. We trie… --- ## [APM Problem with Java standalone](https://discuss.elastic.co/t/apm-problem-with-java-standalone/175214)
**Author:** [@MaryFu](https://discuss.elastic.co/u/MaryFu)\ **Replies:** 3\ **Last updated:** [April 3, 2019, 3:11pm UTC](https://discuss.elastic.co/t/apm-problem-with-java-standalone/175214 "2019-04-03T15:11:02Z")
Hi all, I have a couple of Java application which comunicate with rmi. One of them has a part web. I can see document from Jboss (2 server) to MySQL (3 server) in apm dashboard as a service. But the part of from daemon… --- ## [Zen-disco-receive - master node](https://discuss.elastic.co/t/zen-disco-receive-master-node/166902)
**Author:** [@sujatha\_g](https://discuss.elastic.co/u/sujatha_g)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 5:53am UTC](https://discuss.elastic.co/t/zen-disco-receive-master-node/166902 "2019-02-04T05:53:44Z")
I have following cluster configuration: 3 data nodes 3 master nodes 2 client nodes. On one of my data node i have got this exception while indexing. \[2019-02-03T18:10:45,242\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[dV6Mi… --- ## [How do I use a Condition to Match Against a Value in a Loop from ctx.payload](https://discuss.elastic.co/t/how-do-i-use-a-condition-to-match-against-a-value-in-a-loop-from-ctx-payload/122910)
**Author:** [@dmdm](https://discuss.elastic.co/u/dmdm)\ **Replies:** 3\ **Last updated:** [March 20, 2018, 6:39pm UTC](https://discuss.elastic.co/t/how-do-i-use-a-condition-to-match-against-a-value-in-a-loop-from-ctx-payload/122910 "2018-03-20T18:39:57Z")
On the bottom of this example, in the actions section, I sort through all the snapshots in an S3 bucket, end goal is to send an alert to victorops if I have a failed snapshot. I finally figured out how to write out ever… --- ## [ElasticSearch has stopped working](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888)
**Author:** [@wmcgilvery](https://discuss.elastic.co/u/wmcgilvery)\ **Replies:** 3\ **Last updated:** [January 10, 2018, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888 "2018-01-10T19:00:57Z")
Hello: I have a setup with Logstash, ElasticSearch and Kibana and ElasticSeach is not working properly. I found that before Christmas I had stopped receiving information in Kibana and because of an error in logstash, I… --- ## [Delete document from elastic search](https://discuss.elastic.co/t/delete-document-from-elastic-search/105750)
**Author:** [@Sumit\_Gupta1](https://discuss.elastic.co/u/Sumit_Gupta1)\ **Replies:** 3\ **Last updated:** [November 1, 2017, 11:51pm UTC](https://discuss.elastic.co/t/delete-document-from-elastic-search/105750 "2017-11-01T23:51:19Z")
Hi, I want to delete some document which type is mytype1. curl -XDELETE 'http://localhost:9200/logstash-databases-info/mytype1/\_query' -d '{ "query" : { "match\_all" : {} } }' This throwing following log: {"fou… --- ## [Elasticsearch token\_vector analysis over an entire field](https://discuss.elastic.co/t/elasticsearch-token-vector-analysis-over-an-entire-field/101036)
**Author:** [@MPurcell](https://discuss.elastic.co/u/MPurcell)\ **Replies:** 3\ **Last updated:** [September 20, 2017, 4:38pm UTC](https://discuss.elastic.co/t/elasticsearch-token-vector-analysis-over-an-entire-field/101036 "2017-09-20T16:38:57Z")
Hello I'm writing this question in the hopes for some clarity regarding token\_vector analysis. I am looking to get a count of unique tokens in a text/keyword field. So for example in the token\_vector query below: GET … --- ## [Configuration for High Volume Search 10k/sec](https://discuss.elastic.co/t/configuration-for-high-volume-search-10k-sec/98609)
**Author:** [@wpearson4](https://discuss.elastic.co/u/wpearson4)\ **Replies:** 3\ **Last updated:** [August 29, 2017, 10:04pm UTC](https://discuss.elastic.co/t/configuration-for-high-volume-search-10k-sec/98609 "2017-08-29T22:04:16Z")
Cluster Id: b3ceb5 I am currently running elastic search in Elastic cloud. I have a single node cluster with 64 gb of ram and 1.5 terabytes of hard drive space. I am doing high volume of searches. Users upload csv fi… --- ## [Elasticsearch Snapshots Clarifications?](https://discuss.elastic.co/t/elasticsearch-snapshots-clarifications/85408)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 3\ **Last updated:** [May 12, 2017, 4:25pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-clarifications/85408 "2017-05-12T16:25:40Z")
Hi, 1)I have 3 node ES cluster and in all the nodes the curator is installed and it is master enabled . Suppose if i take a snapshot in master node whether it will cover all the indices that are right now present in th… --- ## [Bad performance and crashes with Elasticsearch 5.1](https://discuss.elastic.co/t/bad-performance-and-crashes-with-elasticsearch-5-1/82875)
**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\ **Replies:** 3\ **Last updated:** [April 26, 2017, 9:40am UTC](https://discuss.elastic.co/t/bad-performance-and-crashes-with-elasticsearch-5-1/82875 "2017-04-26T09:40:53Z")
We're running ELK 5.1.1; Elasticsearch runs on a standalone EC2 instance with 4CPUs/16GB RAM. We're indexing about 20GB daily, 40 indexes per day, so with 30-40 days retention we have ~800GB data, about 1800 indexes. T… --- ## [Logstash failover s3](https://discuss.elastic.co/t/logstash-failover-s3/69037)
**Author:** [@bob-bza](https://discuss.elastic.co/u/bob-bza)\ **Replies:** 3\ **Last updated:** [December 20, 2016, 6:49am UTC](https://discuss.elastic.co/t/logstash-failover-s3/69037 "2016-12-20T06:49:22Z")
i was planning to pull elb logs from s3 using logstash. i want to use multiple logstash for failover control. is there anything i can use multiple logstash to pull logs from s3 bucket with loadbalance or something else c… --- ## [Unable to attache pdf report](https://discuss.elastic.co/t/unable-to-attache-pdf-report/60605)
**Author:** [@theo.bot](https://discuss.elastic.co/u/theo.bot)\ **Replies:** 3\ **Last updated:** [September 16, 2016, 8:49am UTC](https://discuss.elastic.co/t/unable-to-attache-pdf-report/60605 "2016-09-16T08:49:24Z")
Hi I am try-ing to send a pdf using the watch I get the following message: Unable to get attachment of type \[http\] with id \[dash\_report.pdf\] in watch \[dash\_report\] aborting watch execution I used the following watc… --- ## [Advice needed on configuration approach](https://discuss.elastic.co/t/advice-needed-on-configuration-approach/33319)
**Author:** [@i8beef](https://discuss.elastic.co/u/i8beef)\ **Replies:** 3\ **Last updated:** [October 30, 2015, 5:53pm UTC](https://discuss.elastic.co/t/advice-needed-on-configuration-approach/33319 "2015-10-30T17:53:33Z")
Greetings all. I'm starting down a path of implementing ELK + NXLog for various reasons. Our current use case involves wanting to monitor: Certain Windows event log events (Really ASP.NET related ones, but I haven't f… --- ## [TransportClient behavior when the server node is not availble](https://discuss.elastic.co/t/transportclient-behavior-when-the-server-node-is-not-availble/14713)
**Author:** [@Jongyoon\_Lee](https://discuss.elastic.co/u/Jongyoon_Lee)\ **Replies:** 3\ **Last updated:** [February 18, 2014, 12:24pm UTC](https://discuss.elastic.co/t/transportclient-behavior-when-the-server-node-is-not-availble/14713 "2014-02-18T12:24:37Z")
We have single server node and single client node cluster running 1.0.0.Beta1. We recently noticed that a couple of times when the server node is not available (shutdown for upgrade, maintenance, etc), the elastic… --- ## [ES process restart causes full resync of all all shards to the restarted node](https://discuss.elastic.co/t/es-process-restart-causes-full-resync-of-all-all-shards-to-the-restarted-node/12600)
**Author:** [@Piavlo](https://discuss.elastic.co/u/Piavlo)\ **Replies:** 3\ **Last updated:** [July 2, 2013, 12:24am UTC](https://discuss.elastic.co/t/es-process-restart-causes-full-resync-of-all-all-shards-to-the-restarted-node/12600 "2013-07-02T00:24:20Z")
Hi, Each time I restart an ES process on any single node in the ES cluster, all shards to this node are rsynced from other nodes. This happens for all shards , even those that are not written to during the restar… --- ## [0.19.11 client node in solaris weblogic web app crashes jvm after creating hundreds of transport\_client\_worker threads](https://discuss.elastic.co/t/0-19-11-client-node-in-solaris-weblogic-web-app-crashes-jvm-after-creating-hundreds-of-transport-client-worker-threads/10018)
**Author:** [@ABC](https://discuss.elastic.co/u/ABC)\ **Replies:** 6\ **Last updated:** [December 12, 2012, 3:45pm UTC](https://discuss.elastic.co/t/0-19-11-client-node-in-solaris-weblogic-web-app-crashes-jvm-after-creating-hundreds-of-transport-client-worker-threads/10018 "2012-12-12T15:45:25Z")
Hi, 1) I am upgrading from 0.17.x to 0.19.11. Have deleted old index files. Stand alone jvm Elastic Search server starts fine. It connects to standalone jvm client node and indexes data without any problem. 2) … --- ## [How to manually configure javaagent for Websphere](https://discuss.elastic.co/t/how-to-manually-configure-javaagent-for-websphere/189676)
**Author:** [@kamaleshwar](https://discuss.elastic.co/u/kamaleshwar)\ **Replies:** 1\ **Last updated:** [July 10, 2019, 7:35am UTC](https://discuss.elastic.co/t/how-to-manually-configure-javaagent-for-websphere/189676 "2019-07-10T07:35:00Z")
I have got the below configuration that needs to be done in WebSphere but not sure what values needs to be placed .Could you please provide me the sample values i need to add to have the JVM agent for WebSphere. -javaag… [Previous page](https://discuss.elastic.co/top.md?page=1658&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1660&per_page=50&period=all)