# Top

**URL:** https://discuss.elastic.co/top.md?page=1662&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1663

---

## [Elasticsearch curator 4.x](https://discuss.elastic.co/t/elasticsearch-curator-4-x/62346)

<div class="topic-metadata">

**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\
**Replies:** 3\
**Last updated:** [October 6, 2016, 11:04pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-4-x/62346 "2016-10-06T23:04:22Z")

</div>

Hi how do I get it to run a cron job that will delete indices X days old. I had it running with an older curator vesions, but the command line reference i can find on the net don't work. Did you do away with this in t…

---

## [Dots in Fieldnames =\> ES 2.X Upgrade will fail?](https://discuss.elastic.co/t/dots-in-fieldnames-es-2-x-upgrade-will-fail/56069)

<div class="topic-metadata">

**Author:** [@german23](https://discuss.elastic.co/u/german23)\
**Replies:** 3\
**Last updated:** [July 28, 2016, 9:01am UTC](https://discuss.elastic.co/t/dots-in-fieldnames-es-2-x-upgrade-will-fail/56069 "2016-07-28T09:01:19Z")

</div>

Hi guys, i apologize if this is 1242032nd thread to this particular upgrade topic. After getting rid of the different mapping-types of fields in different ES-types, i now got the "problem" to have some fields with do…

---

## [Daily index name and @timestamp value discrepancies](https://discuss.elastic.co/t/daily-index-name-and-timestamp-value-discrepancies/43319)

<div class="topic-metadata">

**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Replies:** 3\
**Last updated:** [March 3, 2016, 3:00pm UTC](https://discuss.elastic.co/t/daily-index-name-and-timestamp-value-discrepancies/43319 "2016-03-03T15:00:59Z")

</div>

Hello, As many here, we use logstash to fill in data in ES and the output is a daily index with this format: index-name-%{+YYYY.MM.dd} Yesterday (2016.03.01) , I saw a few a hours before midnight the next day index …

---

## [Elasticsearch 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-33)](https://discuss.elastic.co/t/elasticsearch-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-33/384181)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [December 18, 2025, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-33/384181 "2025-12-18T21:17:50Z")

</div>

Elasticsearch Allocation of Resources Without Limits or Throttling (ESA-2025-33) Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Exc…

---

## [🎉 Elastic Stack 7.3.0 released](https://discuss.elastic.co/t/elastic-stack-7-3-0-released/193191)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [July 31, 2019, 5:46pm UTC](https://discuss.elastic.co/t/elastic-stack-7-3-0-released/193191 "2019-07-31T17:46:15Z")

</div>

:tada: Elastic Stack 7.3.0 released We are thrilled to announce that version 7.3 of the Elastic Stack has arrived, and it’s another good one. Machine learning leads the way in 7.3. Data frames let you pivot Elasticsearc…

---

## [Hdfs input plugin for logstash](https://discuss.elastic.co/t/hdfs-input-plugin-for-logstash/50401)

<div class="topic-metadata">

**Author:** [@saggarsunil](https://discuss.elastic.co/u/saggarsunil)\
**Replies:** 0\
**Last updated:** [May 19, 2016, 5:29am UTC](https://discuss.elastic.co/t/hdfs-input-plugin-for-logstash/50401 "2016-05-19T05:29:11Z")

</div>

I am planning to read HDFS data using logstash ( & add geoip and other filters, etc) and then send the data to elasticsearch. Earlier, I tried ES-hadoop plugin for moving the data by creating hive tables and it worked.…

---

## [Web Crawler Setup: "Content Verification" for Domain fails](https://discuss.elastic.co/t/web-crawler-setup-content-verification-for-domain-fails/293055)

<div class="topic-metadata">

**Author:** [@b0r1sp](https://discuss.elastic.co/u/b0r1sp)\
**Replies:** 4\
**Last updated:** [January 13, 2022, 7:54pm UTC](https://discuss.elastic.co/t/web-crawler-setup-content-verification-for-domain-fails/293055 "2022-01-13T19:54:13Z")

</div>

Hi, I'd like to setup a domain for a web crawler - it fails in the last step "Content Verification" with: "The web server at http://www.test.de redirected us to a different domain URL (http://www.test.com/). If you wan…

---

## [Export machine learning jobs in elastic cloud](https://discuss.elastic.co/t/export-machine-learning-jobs-in-elastic-cloud/292133)

<div class="topic-metadata">

**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\
**Replies:** 4\
**Last updated:** [December 16, 2021, 1:34pm UTC](https://discuss.elastic.co/t/export-machine-learning-jobs-in-elastic-cloud/292133 "2021-12-16T13:34:35Z")

</div>

Hi, How to export ML jobs from elastic cloud? Kind regards, Dane

---

## [Not seeing any pfsense logs](https://discuss.elastic.co/t/not-seeing-any-pfsense-logs/254145)

<div class="topic-metadata">

**Author:** [@Lusca\_lusca](https://discuss.elastic.co/u/Lusca_lusca)\
**Replies:** 4\
**Last updated:** [November 3, 2020, 11:48am UTC](https://discuss.elastic.co/t/not-seeing-any-pfsense-logs/254145 "2020-11-03T11:48:14Z")

</div>

I only need to display the Ips that are coming from a remote PFSENSE firewall on kibana but I couldn't do it, can anyone help me? input { beats { port =\> 5044 } }

---

## [How to merge 2 canvas workpads?](https://discuss.elastic.co/t/how-to-merge-2-canvas-workpads/242132)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 4\
**Last updated:** [August 18, 2020, 5:30am UTC](https://discuss.elastic.co/t/how-to-merge-2-canvas-workpads/242132 "2020-08-18T05:30:05Z")

</div>

Hello, Is there a way to merge 2 (or more) canvas workpad? What will be the best solution? Thanks!

---

## [Syntax for Aggregate Filter Plugin (No End Event)?](https://discuss.elastic.co/t/syntax-for-aggregate-filter-plugin-no-end-event/239188)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 4\
**Last updated:** [June 30, 2020, 7:25pm UTC](https://discuss.elastic.co/t/syntax-for-aggregate-filter-plugin-no-end-event/239188 "2020-06-30T19:25:38Z")

</div>

Hi Logstash Maestros, Suppose I have a continuous stream of data records flowing into Logstash, tracking how many widgets a producer as cranked out. The data fields are {timestamp} {producer} {numWidgits} and the data …

---

## [Visualize aggs min as sub bucket](https://discuss.elastic.co/t/visualize-aggs-min-as-sub-bucket/196431)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 4\
**Last updated:** [August 28, 2019, 9:24am UTC](https://discuss.elastic.co/t/visualize-aggs-min-as-sub-bucket/196431 "2019-08-28T09:24:21Z")

</div>

Hello all, I have the below elasticsearch query GET /monthly-data/\_search { "size": 0, "aggs": { "accname": { "terms": { "field": "User.keyword" }, "aggs": { "year ": { "terms": { "field": "Year.keyword" }…

---

## [Increase shards and replicas in new Index](https://discuss.elastic.co/t/increase-shards-and-replicas-in-new-index/188900)

<div class="topic-metadata">

**Author:** [@mrashid](https://discuss.elastic.co/u/mrashid)\
**Replies:** 4\
**Last updated:** [July 5, 2019, 8:17am UTC](https://discuss.elastic.co/t/increase-shards-and-replicas-in-new-index/188900 "2019-07-05T08:17:35Z")

</div>

In my logstash configuration I am creating Index daily with date using the below configuration : elasticsearch { hosts =\> \["elkhost:9200"\] manage\_template =\> false index =\> "%{\[@metadata\]\[beat\]}-%{+YYYY.MM.dd}-failurel…

---

## [US states region maps](https://discuss.elastic.co/t/us-states-region-maps/182716)

<div class="topic-metadata">

**Author:** [@Ambarish\_Chitnis](https://discuss.elastic.co/u/Ambarish_Chitnis)\
**Replies:** 4\
**Last updated:** [May 27, 2019, 11:55pm UTC](https://discuss.elastic.co/t/us-states-region-maps/182716 "2019-05-27T23:55:23Z")

</div>

I want to know how I can define the regions for all the 50 US states. I am trying to build a simple region map showing the population of the 50 US states.

---

## [To take snapshot in cluster without NFS?](https://discuss.elastic.co/t/to-take-snapshot-in-cluster-without-nfs/109324)

<div class="topic-metadata">

**Author:** [@MuthuRamalingam](https://discuss.elastic.co/u/MuthuRamalingam)\
**Replies:** 4\
**Last updated:** [November 28, 2017, 8:07am UTC](https://discuss.elastic.co/t/to-take-snapshot-in-cluster-without-nfs/109324 "2017-11-28T08:07:47Z")

</div>

I have a multinode setup in my local. I need to take snapshot without nfs.

---

## [JSON mapping limitations, was: Getting MapperParsingException while parsing a string and a number?](https://discuss.elastic.co/t/json-mapping-limitations-was-getting-mapperparsingexception-while-parsing-a-string-and-a-number/7315)

<div class="topic-metadata">

**Author:** [@Jean\_Sebastien\_Delfi](https://discuss.elastic.co/u/Jean_Sebastien_Delfi)\
**Replies:** 4\
**Last updated:** [August 29, 2012, 5:38pm UTC](https://discuss.elastic.co/t/json-mapping-limitations-was-getting-mapperparsingexception-while-parsing-a-string-and-a-number/7315 "2012-08-29T17:38:51Z")

</div>

Thanks! Comments and more questions inline. On Tue, Apr 10, 2012 at 3:29 PM, Igor Motov imotov@gmail.com wrote: By default, elasticsearch tries to deduce field types from filed values. If you will check mappings aft…

---

## [Loading records with date\_range field from Logstash](https://discuss.elastic.co/t/loading-records-with-date-range-field-from-logstash/86299)

<div class="topic-metadata">

**Author:** [@chrisbeck](https://discuss.elastic.co/u/chrisbeck)\
**Replies:** 1\
**Last updated:** [May 29, 2017, 8:12pm UTC](https://discuss.elastic.co/t/loading-records-with-date-range-field-from-logstash/86299 "2017-05-29T20:12:29Z")

</div>

I have a set of data with a start date/time and an end date/time. I would like to create a date\_range field via a filter clause in logstash as part of inserting the data. has anyone been able to do this? Thanks, Chr…

---

## [Is elastic Ingest pipelines resource intensive?](https://discuss.elastic.co/t/is-elastic-ingest-pipelines-resource-intensive/338049)

<div class="topic-metadata">

**Author:** [@JasonREC](https://discuss.elastic.co/u/JasonREC)\
**Replies:** 7\
**Last updated:** [July 13, 2023, 4:30am UTC](https://discuss.elastic.co/t/is-elastic-ingest-pipelines-resource-intensive/338049 "2023-07-13T04:30:05Z")

</div>

Hi, I am currently using injest pipelines to enrich my document before it wrote into index. I am wondering if this process would have a potenial hugh resouce(heap ram or cpu) comsumed for my Elasticsearch node behind …

---

## [How move configuration from logstash 5.5.1 to logstash 6.5 for tomcat logs](https://discuss.elastic.co/t/how-move-configuration-from-logstash-5-5-1-to-logstash-6-5-for-tomcat-logs/164632)

<div class="topic-metadata">

**Author:** [@kvaga](https://discuss.elastic.co/u/kvaga)\
**Replies:** 7\
**Last updated:** [January 18, 2019, 2:17pm UTC](https://discuss.elastic.co/t/how-move-configuration-from-logstash-5-5-1-to-logstash-6-5-for-tomcat-logs/164632 "2019-01-18T14:17:33Z")

</div>

Hai, I am a newbie to Elastic Stack. We have a nice working Elastic Stack 5.5 for prod, and I\`m trying to create separate instance on Elastic Stack 6.5.4 for test, and then switch prod to new version No problem with i…

---

## [Path facets](https://discuss.elastic.co/t/path-facets/16701)

<div class="topic-metadata">

**Author:** [@Volker](https://discuss.elastic.co/u/Volker)\
**Replies:** 7\
**Last updated:** [July 18, 2014, 8:16am UTC](https://discuss.elastic.co/t/path-facets/16701 "2014-07-18T08:16:24Z")

</div>

dear reader I have a question about facets. I have documents with a path as part of a document. e.g.: /america/ /america/usa /america/usa/california /america/usa/new-york /america/mexico /europe/spain /…

---

## [Index.routing.allocation.include not working](https://discuss.elastic.co/t/index-routing-allocation-include-not-working/14528)

<div class="topic-metadata">

**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Replies:** 7\
**Last updated:** [December 5, 2013, 5:36pm UTC](https://discuss.elastic.co/t/index-routing-allocation-include-not-working/14528 "2013-12-05T17:36:42Z")

</div>

I have 2 nodes and I created a new index and given this routing rule. Node 1 has "node.group1 : group1" set in yaml file and Node 2 has "node.group1 : group2" set in the file. However, when I write data it still is get…

---

## [NoLivingConnectionsError (Node.js)](https://discuss.elastic.co/t/nolivingconnectionserror-node-js/224537)

<div class="topic-metadata">

**Author:** [@kulakowka](https://discuss.elastic.co/u/kulakowka)\
**Replies:** 1\
**Last updated:** [March 23, 2020, 10:58am UTC](https://discuss.elastic.co/t/nolivingconnectionserror-node-js/224537 "2020-03-23T10:58:35Z")

</div>

Hello. Please help me figure it out. I am using npm package: @elastic/elasticsearch 7.6.0 In recent days, I regularly notice an error: There are no living connections At first I thought that this occurs under heavy…

---

## [Writing to new index using Spark with mapping disabled](https://discuss.elastic.co/t/writing-to-new-index-using-spark-with-mapping-disabled/218072)

<div class="topic-metadata">

**Author:** [@tchu01](https://discuss.elastic.co/u/tchu01)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 4:49pm UTC](https://discuss.elastic.co/t/writing-to-new-index-using-spark-with-mapping-disabled/218072 "2020-02-06T16:49:22Z")

</div>

Hi all, I am using AWS EMR PySpark to write to AWS ElasticSearch (cluster version 6.3) using the elasticsearch-hadoop-7.5.2.jar from https://www.elastic.co/downloads/hadoop. I am trying to write to a new index with map…

---

## [How to enable dashboards for metricbeat in kubernetes daemonset environment](https://discuss.elastic.co/t/how-to-enable-dashboards-for-metricbeat-in-kubernetes-daemonset-environment/177216)

<div class="topic-metadata">

**Author:** [@Ji\_Ho\_Choi](https://discuss.elastic.co/u/Ji_Ho_Choi)\
**Replies:** 1\
**Last updated:** [April 19, 2019, 9:43pm UTC](https://discuss.elastic.co/t/how-to-enable-dashboards-for-metricbeat-in-kubernetes-daemonset-environment/177216 "2019-04-19T21:43:58Z")

</div>

I currently have a default daemonset settings from elastic stack like below It's what I have copied off from https://github.com/elastic/beats/tree/master/deploy/kubernetes/metricbeat I would like to import default dash…

---

## [What is the best way to reprocess a processed file through logstash](https://discuss.elastic.co/t/what-is-the-best-way-to-reprocess-a-processed-file-through-logstash/106157)

<div class="topic-metadata">

**Author:** [@Dimitry\_Khan](https://discuss.elastic.co/u/Dimitry_Khan)\
**Replies:** 1\
**Last updated:** [November 2, 2017, 1:02pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-reprocess-a-processed-file-through-logstash/106157 "2017-11-02T13:02:30Z")

</div>

Dear All, my case is like this. I am processing a file through logstash. But for some reason I want to delete the old records in ES and want to reprocess that file. As I found - I need to keep the setting as - start\_posi…

---

## [Logstash.conf Not Working (Cannot Create Pipeline)](https://discuss.elastic.co/t/logstash-conf-not-working-cannot-create-pipeline/105078)

<div class="topic-metadata">

**Author:** [@Anshuman\_Kirty](https://discuss.elastic.co/u/Anshuman_Kirty)\
**Replies:** 1\
**Last updated:** [October 24, 2017, 2:34pm UTC](https://discuss.elastic.co/t/logstash-conf-not-working-cannot-create-pipeline/105078 "2017-10-24T14:34:51Z")

</div>

Logstash.conf input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://localhost:3306/testdb" jdbc\_user =\> "root" jdbc\_password ="explorer" jdbc\_dr…

---

## [AWS Cloud Trail Logs](https://discuss.elastic.co/t/aws-cloud-trail-logs/96277)

<div class="topic-metadata">

**Author:** [@bmanilkumar](https://discuss.elastic.co/u/bmanilkumar)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 8:22am UTC](https://discuss.elastic.co/t/aws-cloud-trail-logs/96277 "2017-08-10T08:22:02Z")

</div>

Hi Team, I am trying to configure AWS Cloud Trail log in Elastic Search using logstash and Kibana, can you please guide me how to configure the same. Regard

---

## [Font size issue in kibana](https://discuss.elastic.co/t/font-size-issue-in-kibana/94672)

<div class="topic-metadata">

**Author:** [@sudi\_2611](https://discuss.elastic.co/u/sudi_2611)\
**Replies:** 1\
**Last updated:** [July 26, 2017, 5:33pm UTC](https://discuss.elastic.co/t/font-size-issue-in-kibana/94672 "2017-07-26T17:33:08Z")

</div>

HI, I have created a vertical bar chart in visualization and when presenting it in dashboard how to make sure that the value such that it remains constant in each of the bars rather the value getting displayed when clic…

---

## [Unable to find plugins when unit testing using rspec on windows 10](https://discuss.elastic.co/t/unable-to-find-plugins-when-unit-testing-using-rspec-on-windows-10/57230)

<div class="topic-metadata">

**Author:** [@cwerge](https://discuss.elastic.co/u/cwerge)\
**Replies:** 1\
**Last updated:** [August 5, 2016, 10:40am UTC](https://discuss.elastic.co/t/unable-to-find-plugins-when-unit-testing-using-rspec-on-windows-10/57230 "2016-08-05T10:40:34Z")

</div>

Hi Using logstash 2.3.1, after having run the "logstash-plugin install --development", the gemfile is updated and i can find the plugins manually. The top of the ruby file containing the test contain the following l…

---

## [Change default Logstash Document Type](https://discuss.elastic.co/t/change-default-logstash-document-type/48187)

<div class="topic-metadata">

**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\
**Replies:** 1\
**Last updated:** [April 24, 2016, 5:26pm UTC](https://discuss.elastic.co/t/change-default-logstash-document-type/48187 "2016-04-24T17:26:34Z")

</div>

Hi, Is there any way to change the default Logstash document type from "logs" to something else? For example: { "myindex-2016.04.21": { "aliases": {}, "mappings": { "logs": { …

---

## [ElasticSearch Spark Hadoop Connector](https://discuss.elastic.co/t/elasticsearch-spark-hadoop-connector/37156)

<div class="topic-metadata">

**Author:** [@Pinhus\_Dash](https://discuss.elastic.co/u/Pinhus_Dash)\
**Replies:** 1\
**Last updated:** [December 18, 2015, 12:39pm UTC](https://discuss.elastic.co/t/elasticsearch-spark-hadoop-connector/37156 "2015-12-18T12:39:18Z")

</div>

Continuing the discussion from EsHadoopInvalidRequest: \[POST\]: Theses same commands work fine when I am using the localhost elasticsearch cluster which consists of three nodes. The previous two example only use one no…

---

## [Is it possible to have actual value on Y axis as opposed to Aggregation](https://discuss.elastic.co/t/is-it-possible-to-have-actual-value-on-y-axis-as-opposed-to-aggregation/32855)

<div class="topic-metadata">

**Author:** [@Shailen](https://discuss.elastic.co/u/Shailen)\
**Replies:** 1\
**Last updated:** [October 24, 2015, 9:37pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-actual-value-on-y-axis-as-opposed-to-aggregation/32855 "2015-10-24T21:37:00Z")

</div>

I am looking to plot a chart where i can see the actual value as opposed to an average or some other aggregate over time. is this possible?

---

## [Aggregates filters](https://discuss.elastic.co/t/aggregates-filters/21005)

<div class="topic-metadata">

**Author:** [@Robert\_Gardam](https://discuss.elastic.co/u/Robert_Gardam)\
**Replies:** 1\
**Last updated:** [December 2, 2014, 8:37am UTC](https://discuss.elastic.co/t/aggregates-filters/21005 "2014-12-02T08:37:11Z")

</div>

I have a query that i'm trying to run against ES 1.3.4 and i'm not able to use the filters buckets. Here is my query. It's actually pulled straight from the documentation with some small changes. { "aggs" …

---

## [Always keep under docs.deleted after Delete By Query API](https://discuss.elastic.co/t/always-keep-under-docs-deleted-after-delete-by-query-api/119183)

<div class="topic-metadata">

**Author:** [@lauea](https://discuss.elastic.co/u/lauea)\
**Replies:** 5\
**Last updated:** [February 9, 2018, 9:27am UTC](https://discuss.elastic.co/t/always-keep-under-docs-deleted-after-delete-by-query-api/119183 "2018-02-09T09:27:10Z")

</div>

Hi guys, These days I deleted documents by Query API. Below is my command to delete my document by Query API. curl -XPOST 'http://elasticsearch:9200/myindex/\_delete\_by\_query?pretty' -H 'Content-Type: application/json' …

---

## [How to shut down a node](https://discuss.elastic.co/t/how-to-shut-down-a-node/2847)

<div class="topic-metadata">

**Author:** [@Paul\_Loy](https://discuss.elastic.co/u/Paul_Loy)\
**Replies:** 5\
**Last updated:** [March 17, 2010, 11:27am UTC](https://discuss.elastic.co/t/how-to-shut-down-a-node/2847 "2010-03-17T11:27:43Z")

</div>

Couldn't find it in the docs. Do you just kill it or is there something more graceful? Ironically the Elastic Search website does not have search!? Many thanks, -K-

---

## [Not able to create elasticsearch on Azure aks](https://discuss.elastic.co/t/not-able-to-create-elasticsearch-on-azure-aks/302057)

<div class="topic-metadata">

**Author:** [@Srinivas\_RK](https://discuss.elastic.co/u/Srinivas_RK)\
**Replies:** 2\
**Last updated:** [April 11, 2022, 10:30am UTC](https://discuss.elastic.co/t/not-able-to-create-elasticsearch-on-azure-aks/302057 "2022-04-11T10:30:26Z")

</div>

Im trying to create Elasticsearch on azure Kubernetes service (v 1.20.13) using eck version (1.8.0) here is my kubernetes deployment script apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: …

---

## [Restoring selected indexes from a snapshot using regex in Curator?](https://discuss.elastic.co/t/restoring-selected-indexes-from-a-snapshot-using-regex-in-curator/281951)

<div class="topic-metadata">

**Author:** [@pradeepgm](https://discuss.elastic.co/u/pradeepgm)\
**Replies:** 2\
**Last updated:** [August 31, 2021, 11:43am UTC](https://discuss.elastic.co/t/restoring-selected-indexes-from-a-snapshot-using-regex-in-curator/281951 "2021-08-31T11:43:53Z")

</div>

Hi, I would like to restore selected indexes based on regex from ElasticSearch Snapshot using Curator. For example while taking a snapshot of selected indexes we can mention the regex in filtertype as below filters: …

---

## [ES terminated without any error message](https://discuss.elastic.co/t/es-terminated-without-any-error-message/277771)

<div class="topic-metadata">

**Author:** [@Jennny06](https://discuss.elastic.co/u/Jennny06)\
**Replies:** 2\
**Last updated:** [July 6, 2021, 3:25am UTC](https://discuss.elastic.co/t/es-terminated-without-any-error-message/277771 "2021-07-06T03:25:58Z")

</div>

Hi, I am using version 7.13.2. I am setting up ES on remote server. ES worked for me last week, however, today when I tried to start it, it won't open anymore. It always shows Terminated or stop right after it shows JVM …

---

## [Update by query](https://discuss.elastic.co/t/update-by-query/269674)

<div class="topic-metadata">

**Author:** [@yen\_l\_ng\_th](https://discuss.elastic.co/u/yen_l_ng_th)\
**Replies:** 2\
**Last updated:** [April 9, 2021, 8:34am UTC](https://discuss.elastic.co/t/update-by-query/269674 "2021-04-09T08:34:54Z")

</div>

create by bluk, after update by quey =\> update run but not updated Timeout is 2m =\> not updated Can you help me? I using php client

---

## [Unable to rename Index!](https://discuss.elastic.co/t/unable-to-rename-index/230205)

<div class="topic-metadata">

**Author:** [@JulienN](https://discuss.elastic.co/u/JulienN)\
**Replies:** 2\
**Last updated:** [April 29, 2020, 1:47pm UTC](https://discuss.elastic.co/t/unable-to-rename-index/230205 "2020-04-29T13:47:55Z")

</div>

Hi all , i'm French and i'm a new user of ELK Stack . Actually i discover the ELK stack , and one of my principal use is to aggregate some logs from my Servers to Elastic , and to consult it in Kibana. I've a problem…

---

## [Generating extra-fields to my results based on query](https://discuss.elastic.co/t/generating-extra-fields-to-my-results-based-on-query/211491)

<div class="topic-metadata">

**Author:** [@ovinz](https://discuss.elastic.co/u/ovinz)\
**Replies:** 2\
**Last updated:** [December 12, 2019, 10:56am UTC](https://discuss.elastic.co/t/generating-extra-fields-to-my-results-based-on-query/211491 "2019-12-12T10:56:35Z")

</div>

Hi everyone, I’m discovering ElasticSearch and I really don’t know how to find this kind of feature in the ES documentation. My goal is to add extra-fields to the result of a query ; the extra-fields being themselves a…

---

## [Index Lifecycle Policy doesn't work](https://discuss.elastic.co/t/index-lifecycle-policy-doesnt-work/206357)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 2\
**Last updated:** [November 7, 2019, 11:09am UTC](https://discuss.elastic.co/t/index-lifecycle-policy-doesnt-work/206357 "2019-11-07T11:09:53Z")

</div>

Hey Guys, i tought i'd like to try the Index Lifecycle Policies. But i'm pretty sure i've done something wrong, because the Index to which i assigned it is now 37GB instead of a max of 20GB. I Created one which looks l…

---

## [Painless - Getting Field with whitespace Character](https://discuss.elastic.co/t/painless-getting-field-with-whitespace-character/109223)

<div class="topic-metadata">

**Author:** [@dcam](https://discuss.elastic.co/u/dcam)\
**Replies:** 2\
**Last updated:** [November 27, 2017, 5:01pm UTC](https://discuss.elastic.co/t/painless-getting-field-with-whitespace-character/109223 "2017-11-27T17:01:01Z")

</div>

I have a field with Whitespace character: i.e 'Error Message.keyword' How can I get this field with painless? 1 ) ctx.payload.buckets\[0\].'Error Message.keyword' 2 ) def error='Error Message.keyword'; ctx.payload.bucke…

---

## [Logstash output to jms , qpid broker queue getting below error](https://discuss.elastic.co/t/logstash-output-to-jms-qpid-broker-queue-getting-below-error/94480)

<div class="topic-metadata">

**Author:** [@Jagatjyoti\_Mohanty](https://discuss.elastic.co/u/Jagatjyoti_Mohanty)\
**Replies:** 2\
**Last updated:** [July 25, 2017, 1:44pm UTC](https://discuss.elastic.co/t/logstash-output-to-jms-qpid-broker-queue-getting-below-error/94480 "2017-07-25T13:44:56Z")

</div>

:exception=\>#, :backtrace=\>\["C:/logstash-5.4.1/vendor/bundle/jruby/1.9/gems/logstash-output-jms-3.0.1/lib/logstash/outputs/jms.rb:114:in receive'", "C:/logstash-5.4.1/logstash-core/lib/logstash/outputs/base.rb:92:inmulti…

---

## [Any plan to support Spark2.0 in Elasticsearch-Hadoop?](https://discuss.elastic.co/t/any-plan-to-support-spark2-0-in-elasticsearch-hadoop/68938)

<div class="topic-metadata">

**Author:** [@Grant\_Guo](https://discuss.elastic.co/u/Grant_Guo)\
**Replies:** 2\
**Last updated:** [December 15, 2016, 3:11am UTC](https://discuss.elastic.co/t/any-plan-to-support-spark2-0-in-elasticsearch-hadoop/68938 "2016-12-15T03:11:03Z")

</div>

Any plan to support Spark2.0 in Elasticsearch-Hadoop?

---

## [FileBeat 5 - Parsing JSON - Why can't it parse the whole line](https://discuss.elastic.co/t/filebeat-5-parsing-json-why-cant-it-parse-the-whole-line/64021)

<div class="topic-metadata">

**Author:** [@Yarden\_Bar](https://discuss.elastic.co/u/Yarden_Bar)\
**Replies:** 2\
**Last updated:** [October 27, 2016, 2:25pm UTC](https://discuss.elastic.co/t/filebeat-5-parsing-json-why-cant-it-parse-the-whole-line/64021 "2016-10-27T14:25:40Z")

</div>

Hi, As documented, in order to parse json line logs, the json object must contain a key to pull the message object from. Is there a particular reason that FB won't have the ability to parse the whole line (assuming tha…

---

## [Logstash configuration api](https://discuss.elastic.co/t/logstash-configuration-api/53946)

<div class="topic-metadata">

**Author:** [@prabhakar349](https://discuss.elastic.co/u/prabhakar349)\
**Replies:** 2\
**Last updated:** [July 20, 2016, 3:46pm UTC](https://discuss.elastic.co/t/logstash-configuration-api/53946 "2016-07-20T15:46:28Z")

</div>

Hi , Is there any plan to provide rest API for configuring logstash ?

---

## [Logging MySQL query with username](https://discuss.elastic.co/t/logging-mysql-query-with-username/55400)

<div class="topic-metadata">

**Author:** [@ChuyenGiaSon](https://discuss.elastic.co/u/ChuyenGiaSon)\
**Replies:** 2\
**Last updated:** [July 14, 2016, 10:57am UTC](https://discuss.elastic.co/t/logging-mysql-query-with-username/55400 "2016-07-14T10:57:23Z")

</div>

Hi, I see that packetbeat can log mysql query with performance data but not user name. It's not good because I want to use packetbeat for audit purpose. Can you tell me if packetbeat can log username along with the que…

---

## [\[SOLVED\] Where to set log pattern?](https://discuss.elastic.co/t/solved-where-to-set-log-pattern/50956)

<div class="topic-metadata">

**Author:** [@cbismuth](https://discuss.elastic.co/u/cbismuth)\
**Replies:** 2\
**Last updated:** [May 25, 2016, 6:36pm UTC](https://discuss.elastic.co/t/solved-where-to-set-log-pattern/50956 "2016-05-25T18:36:23Z")

</div>

Hi, I've successfully managed to ship JSON structured logs to Kibana 4.5.1 with Filebeat 5.0.0-alpha2. I've created second prospector in my filebeat.yml to parse simple traditional log lines stored in others log file…

---

## [Slow searches on a cluster](https://discuss.elastic.co/t/slow-searches-on-a-cluster/47580)

<div class="topic-metadata">

**Author:** [@LiorY89](https://discuss.elastic.co/u/LiorY89)\
**Replies:** 2\
**Last updated:** [April 18, 2016, 7:41am UTC](https://discuss.elastic.co/t/slow-searches-on-a-cluster/47580 "2016-04-18T07:41:40Z")

</div>

So i'm making a benchmark for performance tests. I have a cluster with 4 machines -\> all virtual, all with 64GB RAM and 1.5TB Memory. Only one of those 4 machines is master node. I Indexed 2 bilion records (each record i…

[Previous page](https://discuss.elastic.co/top.md?page=1661&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1663&per_page=50&period=all)
