# Top **URL:** https://discuss.elastic.co/top.md?page=1688&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1689 --- ## [RetryOnPrimaryException in ES node](https://discuss.elastic.co/t/retryonprimaryexception-in-es-node/62809)
**Author:** [@dipathak](https://discuss.elastic.co/u/dipathak)\ **Replies:** 3\ **Last updated:** [October 12, 2016, 8:33pm UTC](https://discuss.elastic.co/t/retryonprimaryexception-in-es-node/62809 "2016-10-12T20:33:42Z")
Hi, we are using ES 2.0 on a 16 node cluster. There are 2 indexes. One index has 5 shards with RF 2. This is giving RetryOnPrimaryException while trying to index a document. This error is happening on only one of the nod… --- ## [Create dynamic column and save output in ES](https://discuss.elastic.co/t/create-dynamic-column-and-save-output-in-es/56007)
**Author:** [@rakesh76](https://discuss.elastic.co/u/rakesh76)\ **Replies:** 3\ **Last updated:** [August 1, 2016, 8:50pm UTC](https://discuss.elastic.co/t/create-dynamic-column-and-save-output-in-es/56007 "2016-08-01T20:50:24Z")
Here is my question. I have following column which has Int type. 1) DurationA 2) DurationB 3) Duration C = DurationB-DurationA DurationA and DurationB values comes from Different CSV file which I am loading to ES thr… --- ## [Logstash 1.5.0 RC4 released](https://discuss.elastic.co/t/logstash-1-5-0-rc4-released/409)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 3\ **Last updated:** [May 9, 2015, 10:45pm UTC](https://discuss.elastic.co/t/logstash-1-5-0-rc4-released/409 "2015-05-09T22:45:23Z")
Hello all, a short note to announce we have released 1.5.0 RC4! Thanks for all the bug reports and patches for RC3! We are close to wrapping up 1.5.0 \[smile\] Here's the blog: https://www.elastic.co/blog/logstash-1-5-0-… --- ## [Tracking down issue - Elasticsearch server returned no response. Is it running?](https://discuss.elastic.co/t/tracking-down-issue-elasticsearch-server-returned-no-response-is-it-running/6898)
**Author:** [@Slavik](https://discuss.elastic.co/u/Slavik)\ **Replies:** 3\ **Last updated:** [March 6, 2012, 9:08pm UTC](https://discuss.elastic.co/t/tracking-down-issue-elasticsearch-server-returned-no-response-is-it-running/6898 "2012-03-06T21:08:33Z")
Hi there guys, I currently run a forum with 1.4 million posts indexed by Elasticsearch on XenForo. The issue several of us are experiencing is very occasionally (maybe 1 or 2 times per day on my forum with about … --- ## [CONVERT GSM COORDINATE TO GD COORDINATE](https://discuss.elastic.co/t/convert-gsm-coordinate-to-gd-coordinate/256664)
**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\ **Replies:** 3\ **Last updated:** [November 26, 2020, 7:57pm UTC](https://discuss.elastic.co/t/convert-gsm-coordinate-to-gd-coordinate/256664 "2020-11-26T19:57:25Z")
Hi to all I'm just trying to convert GSM to GD For example GMS N 39° 56' 41.673'' O 3° 43' 47.872'' to GET GD 39.94490923478156 and -3.729964618217764 I have this config csv { columns =\> \["MCC","MNC","LAC","CI"… --- ## [Timelion](https://discuss.elastic.co/t/timelion/274147)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 7\ **Last updated:** [May 28, 2021, 8:45am UTC](https://discuss.elastic.co/t/timelion/274147 "2021-05-28T08:45:36Z")
how i can implement formula of simple interest in timelion graph? --- ## [Current Time Marker in vega-lite chart](https://discuss.elastic.co/t/current-time-marker-in-vega-lite-chart/256073)
**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 3:37pm UTC](https://discuss.elastic.co/t/current-time-marker-in-vega-lite-chart/256073 "2020-12-07T15:37:53Z")
Hi experts, Is there any way to draw a current time marker in vega-lite? I'd like to do it on a scatter plot written in vega-lite. Many thanks in advane, Cheers Shin --- ## [Intervals wildcard 128 expansion limit](https://discuss.elastic.co/t/intervals-wildcard-128-expansion-limit/256390)
**Author:** [@prasad.deshpande](https://discuss.elastic.co/u/prasad.deshpande)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 2:57pm UTC](https://discuss.elastic.co/t/intervals-wildcard-128-expansion-limit/256390 "2020-11-25T14:57:23Z")
Hi, I'm trying out intervals wildcard queries. But in the process, depending on the term I'm hitting the 128 expansion limit. I know that this is a hard limit imposed by Lucene. But my question is if I have to get past … --- ## [Control vizualization ignore filter](https://discuss.elastic.co/t/control-vizualization-ignore-filter/232964)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 10:11pm UTC](https://discuss.elastic.co/t/control-vizualization-ignore-filter/232964 "2020-06-04T22:11:20Z")
I have an index with metrics of various groups of machines, like the index "CPU" will have cpu metrics of multiples groups, so I use filter in my visualizations to show only one group, when I create a dashboard and use c… --- ## [Shipping logs from multiple log files from single instance of filebeat to logstash](https://discuss.elastic.co/t/shipping-logs-from-multiple-log-files-from-single-instance-of-filebeat-to-logstash/192400)
**Author:** [@Eva](https://discuss.elastic.co/u/Eva)\ **Replies:** 7\ **Last updated:** [August 2, 2019, 12:18pm UTC](https://discuss.elastic.co/t/shipping-logs-from-multiple-log-files-from-single-instance-of-filebeat-to-logstash/192400 "2019-08-02T12:18:12Z")
Hello I have a setup where i send only one log file like /abc/example.log to logstash instance like below: filebeat.prospectors: paths: /abc/example.log fields: app\_suite: cba application: abc name: "xyz" outp… --- ## [Setup logstash with multinodes](https://discuss.elastic.co/t/setup-logstash-with-multinodes/102828)
**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\ **Replies:** 7\ **Last updated:** [October 5, 2017, 2:31pm UTC](https://discuss.elastic.co/t/setup-logstash-with-multinodes/102828 "2017-10-05T14:31:52Z")
Hello All, I need to setup Logstash with multinodes. Thanks, --- ## [Multiline configuration, several prospectors](https://discuss.elastic.co/t/multiline-configuration-several-prospectors/85511)
**Author:** [@Vedran\_Maricevic](https://discuss.elastic.co/u/Vedran_Maricevic)\ **Replies:** 1\ **Last updated:** [May 12, 2017, 9:52am UTC](https://discuss.elastic.co/t/multiline-configuration-several-prospectors/85511 "2017-05-12T09:52:38Z")
I have one filebeat that reads severals different log formats. I have this settings. One format that works just fine is a single liner, which is sent to Logstash as a single event. Now, I have another format that is a mu… --- ## [MapperParsingException with logstash](https://discuss.elastic.co/t/mapperparsingexception-with-logstash/13545)
**Author:** [@Rob\_Bos](https://discuss.elastic.co/u/Rob_Bos)\ **Replies:** 1\ **Last updated:** [September 11, 2013, 8:20am UTC](https://discuss.elastic.co/t/mapperparsingexception-with-logstash/13545 "2013-09-11T08:20:32Z")
I'm sending Windows logs, using nxlog, to a Logstash server with Elasticsearch, and a field is failing to autodetect correctly, if I'm reading Google searches correctly. ES is generating errors like "Failed to pars… --- ## [Elasticsearch 7.7.1 shards getting unassigned](https://discuss.elastic.co/t/elasticsearch-7-7-1-shards-getting-unassigned/256006)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 5\ **Last updated:** [November 19, 2020, 6:37pm UTC](https://discuss.elastic.co/t/elasticsearch-7-7-1-shards-getting-unassigned/256006 "2020-11-19T18:37:53Z")
We recently upgraded our elasticsearch cluster from 5.6.16 to 7.7.1. After that sometimes I am observing that few of the shards not getting assigned. My node stats is placed here. The allocation explanation for an una… --- ## [Document similarity problems](https://discuss.elastic.co/t/document-similarity-problems/116951)
**Author:** [@jiangshigen](https://discuss.elastic.co/u/jiangshigen)\ **Replies:** 5\ **Last updated:** [January 29, 2018, 1:03pm UTC](https://discuss.elastic.co/t/document-similarity-problems/116951 "2018-01-29T13:03:54Z")
I do not understand how to use searchTemplates in the Java API of Elasticsearch correctly. My template seems to work fine when I test it in sense. But when I use the template in Java code, it gives different results. He… --- ## [Upgrade Elasticsearch](https://discuss.elastic.co/t/upgrade-elasticsearch/57828)
**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\ **Replies:** 5\ **Last updated:** [August 11, 2016, 4:56pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch/57828 "2016-08-11T16:56:42Z")
Hi there Can you tell me how to upgrade elasticsearch?, if a have to install again or there are some repositories. Thanks for all! Greetings --- ## [Index alias problem](https://discuss.elastic.co/t/index-alias-problem/22771)
**Author:** [@Mathias\_Adler](https://discuss.elastic.co/u/Mathias_Adler)\ **Replies:** 5\ **Last updated:** [March 23, 2015, 12:03pm UTC](https://discuss.elastic.co/t/index-alias-problem/22771 "2015-03-23T12:03:20Z")
Hi, I just upgraded my four node ES cluster to 1.4.2. After restart I cant retrieve data using Kibana3 unless I manually creates an alias for each index? I still have one ES1.3.x left in the cluster where kibana wor… --- ## [How delete data from elasticsearch according to index time](https://discuss.elastic.co/t/how-delete-data-from-elasticsearch-according-to-index-time/43064)
**Author:** [@lizhenmxcz](https://discuss.elastic.co/u/lizhenmxcz)\ **Replies:** 8\ **Last updated:** [March 1, 2016, 2:47am UTC](https://discuss.elastic.co/t/how-delete-data-from-elasticsearch-according-to-index-time/43064 "2016-03-01T02:47:33Z")
hi all: I index data use spark, but the job failed after ran few hours, so the data is incomplete. I want to delete them that indexed in that few hours. How can I do it? Thanks. --- ## [Combining must, should, and must\_not](https://discuss.elastic.co/t/combining-must-should-and-must-not/184781)
**Author:** [@Kinbaum](https://discuss.elastic.co/u/Kinbaum)\ **Replies:** 0\ **Last updated:** [June 7, 2019, 3:22pm UTC](https://discuss.elastic.co/t/combining-must-should-and-must-not/184781 "2019-06-07T15:22:49Z")
Hello, I am working with elasticsearch within Gentics Mesh CMS and I'm trying to construct a query that returns a series of nodes. I have two nodes tagged with keywordA. One of those nodes has tag keywordB. Based on the … --- ## [How to write Parent-child relationship and has\_child queries in Spark?](https://discuss.elastic.co/t/how-to-write-parent-child-relationship-and-has-child-queries-in-spark/44126)
**Author:** [@yuCompHW](https://discuss.elastic.co/u/yuCompHW)\ **Replies:** 0\ **Last updated:** [March 11, 2016, 8:45am UTC](https://discuss.elastic.co/t/how-to-write-parent-child-relationship-and-has-child-queries-in-spark/44126 "2016-03-11T08:45:51Z")
Hello I am a beginner in Elasticsearch-Spark. My data is created in a Spark task, and it will be stored into Elasticsearch. My problem is that, I have two types, namely "branch" and "employee", which are in parent-chi… --- ## [Elastic AI Assistant - Function Calls not working from separately hosted Ollama instance running in Docker](https://discuss.elastic.co/t/elastic-ai-assistant-function-calls-not-working-from-separately-hosted-ollama-instance-running-in-docker/380734)
**Author:** [@BBQigniter](https://discuss.elastic.co/u/BBQigniter)\ **Replies:** 1\ **Last updated:** [August 4, 2025, 6:20pm UTC](https://discuss.elastic.co/t/elastic-ai-assistant-function-calls-not-working-from-separately-hosted-ollama-instance-running-in-docker/380734 "2025-08-04T18:20:54Z")
Hello, for testing purposes I've set up an ECK on a home-server. On the same server there also runs an Ollama instance serving the model hf.co/unsloth/Mistral-Small-3.2-24B-Instruct-2506-GGUF:Q4\_K\_XL. Because I have no … --- ## [Winlogbeat read Windows Event id 4732 but not Member Security ID?](https://discuss.elastic.co/t/winlogbeat-read-windows-event-id-4732-but-not-member-security-id/322759)
**Author:** [@hansbrah7](https://discuss.elastic.co/u/hansbrah7)\ **Replies:** 2\ **Last updated:** [February 2, 2023, 3:06pm UTC](https://discuss.elastic.co/t/winlogbeat-read-windows-event-id-4732-but-not-member-security-id/322759 "2023-02-02T15:06:32Z")
We have noticed that the Winlogbeat agent will read and ship up the event id 4732 (User added to local Security Group) but we noticed that it is missing the Member Security ID (which is the user that is getting added). … --- ## [Unable to connect to ES through public IP](https://discuss.elastic.co/t/unable-to-connect-to-es-through-public-ip/317850)
**Author:** [@yadu\_krishna](https://discuss.elastic.co/u/yadu_krishna)\ **Replies:** 2\ **Last updated:** [November 1, 2022, 12:25am UTC](https://discuss.elastic.co/t/unable-to-connect-to-es-through-public-ip/317850 "2022-11-01T00:25:13Z")
Hi, I know this issue has been posted here a few times, but I'm stuck trying to debug what's going on. I have set up elasticsearch with docker following (Install Elasticsearch with Docker | Elasticsearch Guide \[8.4\] | El… --- ## [Best way to exclude headers and footers on external website](https://discuss.elastic.co/t/best-way-to-exclude-headers-and-footers-on-external-website/314074)
**Author:** [@tonyfam](https://discuss.elastic.co/u/tonyfam)\ **Replies:** 2\ **Last updated:** [September 9, 2022, 6:08pm UTC](https://discuss.elastic.co/t/best-way-to-exclude-headers-and-footers-on-external-website/314074 "2022-09-09T18:08:07Z")
Is it possible to index "external" websites (websites we don't control) an avoid the the header/footer sections, for instance? Perhaps by some trick with the web crawler, tuning, or some other avenue altogether? The … --- ## [How to understand logstash pipeline-to-pipeline patterns?](https://discuss.elastic.co/t/how-to-understand-logstash-pipeline-to-pipeline-patterns/301044)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [March 31, 2022, 12:50am UTC](https://discuss.elastic.co/t/how-to-understand-logstash-pipeline-to-pipeline-patterns/301044 "2022-03-31T00:50:15Z")
Currently I use logstash to operate pipeline.yml, the contents are as follows, according to my understanding, a line of pipeline.id should be a thread, it should be independent, but recently I found that there is a probl… --- ## [Transforms on data older than a specific timestamp: checkpoints are not created](https://discuss.elastic.co/t/transforms-on-data-older-than-a-specific-timestamp-checkpoints-are-not-created/296483)
**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 10:29am UTC](https://discuss.elastic.co/t/transforms-on-data-older-than-a-specific-timestamp-checkpoints-are-not-created/296483 "2022-02-08T10:29:09Z")
Continuing the discussion from ES Continuous Transforms Checkpoint not updating: Hi, I'm creating a transform job that transforms data in an index and takes all documents OLDER THAN 6 days (calculating averages etc). … --- ## [Processor not dropping events Beats Winlogbeat](https://discuss.elastic.co/t/processor-not-dropping-events-beats-winlogbeat/268873)
**Author:** [@stinkfly](https://discuss.elastic.co/u/stinkfly)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 2:50am UTC](https://discuss.elastic.co/t/processor-not-dropping-events-beats-winlogbeat/268873 "2021-04-01T02:50:56Z")
Hi there, V7.11.2 This topic has been addressed before and I've read other people's solutions, no luck. Have tried multiple combinations of and/or to drop windows event logs 4624 or 4634 with LogonType 0,3 or 5. Howe… --- ## [Question about setting up beats on multiple hosts](https://discuss.elastic.co/t/question-about-setting-up-beats-on-multiple-hosts/229608)
**Author:** [@archon810](https://discuss.elastic.co/u/archon810)\ **Replies:** 2\ **Last updated:** [April 24, 2020, 11:26pm UTC](https://discuss.elastic.co/t/question-about-setting-up-beats-on-multiple-hosts/229608 "2020-04-24T23:26:16Z")
Hi, We have a 4-machine ES and Kibana cluster and I'm now setting up various beats. For starters, I set up metricbeat on host1 and enabled nginx metricbeat that grabs metrics from host1, host2, host3, host4. This crea… --- ## [Filebeat stops in docker container](https://discuss.elastic.co/t/filebeat-stops-in-docker-container/226323)
**Author:** [@fdbatista](https://discuss.elastic.co/u/fdbatista)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 8:33pm UTC](https://discuss.elastic.co/t/filebeat-stops-in-docker-container/226323 "2020-04-03T20:33:00Z")
Hello everyone. I am trying to feed Logstash via Filebeat using docker containers, and it works fine, except for the fact that Filebeat container stops after reading the files contents. I want Filebeat to constantly wa… --- ## [VolumeClaim emptyDir overwrite not working](https://discuss.elastic.co/t/volumeclaim-emptydir-overwrite-not-working/224809)
**Author:** [@TatsuKishi](https://discuss.elastic.co/u/TatsuKishi)\ **Replies:** 2\ **Last updated:** [March 24, 2020, 4:07pm UTC](https://discuss.elastic.co/t/volumeclaim-emptydir-overwrite-not-working/224809 "2020-03-24T16:07:26Z")
Hey, I'm trying to disable the PVC for a client/ingest nodeset like stated in documentation, however ECK is still creating the 1gb volume. nodeSet config: nodesets\[client\].config.podTemplate.volumes: - emptyDir: {} … --- ## [Pre-processing data for analysis/visualisation - kibana or elsewhere?](https://discuss.elastic.co/t/pre-processing-data-for-analysis-visualisation-kibana-or-elsewhere/206583)
**Author:** [@cpeter](https://discuss.elastic.co/u/cpeter)\ **Replies:** 2\ **Last updated:** [November 11, 2019, 11:50am UTC](https://discuss.elastic.co/t/pre-processing-data-for-analysis-visualisation-kibana-or-elsewhere/206583 "2019-11-11T11:50:12Z")
Hi, I got some indices the data of wich are not optimal for my analysis goals. Where/how can I manipulate them? It's about the type of the fields the names merging fields (e.g. Christmas and X-mas should both become X… --- ## [Parsing failure Jmeter to logstash](https://discuss.elastic.co/t/parsing-failure-jmeter-to-logstash/205581)
**Author:** [@Trevorp](https://discuss.elastic.co/u/Trevorp)\ **Replies:** 2\ **Last updated:** [October 30, 2019, 1:31am UTC](https://discuss.elastic.co/t/parsing-failure-jmeter-to-logstash/205581 "2019-10-30T01:31:25Z")
I m trying to use beats to send Jmeter data to log stash, I can get the data in Ok , But not in the format I want. Logstash puts it all into one field. My Logstash.config file looks like Read input from filebeat by li… --- ## [Count distinct by date](https://discuss.elastic.co/t/count-distinct-by-date/200845)
**Author:** [@Quang\_D\_Tr\_n](https://discuss.elastic.co/u/Quang_D_Tr_n)\ **Replies:** 2\ **Last updated:** [September 30, 2019, 9:16am UTC](https://discuss.elastic.co/t/count-distinct-by-date/200845 "2019-09-30T09:16:35Z")
I am trying to count distinct date in a field so I followed the cardinality aggregation to do it but it failed to return the expected result, any suggestion on what I am doing wrong please? { "query": { "bool": { "fi… --- ## [Elasticsearch 7.3 CPU Usage](https://discuss.elastic.co/t/elasticsearch-7-3-cpu-usage/196029)
**Author:** [@Spock\_Tgai](https://discuss.elastic.co/u/Spock_Tgai)\ **Replies:** 2\ **Last updated:** [August 21, 2019, 5:23pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-cpu-usage/196029 "2019-08-21T17:23:07Z")
Hi, We are running elasticsearch 7.3 release in 5 node cluster. Two of the nodes in the cluster are suddenly showing constant 50% CPU. The other nodes are showing less than 20% CPU, any ideas on how to understand why i… --- ## [No default index pattern](https://discuss.elastic.co/t/no-default-index-pattern/176046)
**Author:** [@WassimDhib](https://discuss.elastic.co/u/WassimDhib)\ **Replies:** 2\ **Last updated:** [April 10, 2019, 8:44am UTC](https://discuss.elastic.co/t/no-default-index-pattern/176046 "2019-04-10T08:44:40Z")
\[Kibana 6.5.1\] I have two index-pattern defined and I have already indexed some data in the related indices. I have already chosen a default index among those index-patterns. Sometimes, Kibana shows me this message : … --- ## [Sonicwall-elk - track which Users or IP addresses are accessing a certain website](https://discuss.elastic.co/t/sonicwall-elk-track-which-users-or-ip-addresses-are-accessing-a-certain-website/169215)
**Author:** [@cgermanb](https://discuss.elastic.co/u/cgermanb)\ **Replies:** 2\ **Last updated:** [February 25, 2019, 12:17pm UTC](https://discuss.elastic.co/t/sonicwall-elk-track-which-users-or-ip-addresses-are-accessing-a-certain-website/169215 "2019-02-25T12:17:48Z")
Hi people, i have working elk with sonicwall firewall. i have a lot of logs but, i looking for user reports, example see web pages visit for one user. i can see that, but for ips, i want urls. is possible? --- ## [X-pack/ldaps error: RFC822Name may not be null or empty](https://discuss.elastic.co/t/x-pack-ldaps-error-rfc822name-may-not-be-null-or-empty/133341)
**Author:** [@jmtrc](https://discuss.elastic.co/u/jmtrc)\ **Replies:** 2\ **Last updated:** [May 29, 2018, 2:03pm UTC](https://discuss.elastic.co/t/x-pack-ldaps-error-rfc822name-may-not-be-null-or-empty/133341 "2018-05-29T14:03:04Z")
It looks like to me that x-pack deployed by ECE 1.1.3 requires X509 Subject Alternative Name presented in LDAPS server certificate. Otherwise, x-pack generates a Java exception "RFC822Name may not be null or empty". Java… --- ## [The perennial auditd event correlation problem](https://discuss.elastic.co/t/the-perennial-auditd-event-correlation-problem/131202)
**Author:** [@0xeb0de](https://discuss.elastic.co/u/0xeb0de)\ **Replies:** 2\ **Last updated:** [May 10, 2018, 8:48am UTC](https://discuss.elastic.co/t/the-perennial-auditd-event-correlation-problem/131202 "2018-05-10T08:48:35Z")
Many, many people over the years have tried to find a sensible way of reducing the several events produced by Linux auditd to a single, meaningful one. audisp, for example, will produce syslog messages of type SYSCALL, C… --- ## [Logstash can't recognize "message" field from winlogbeat](https://discuss.elastic.co/t/logstash-cant-recognize-message-field-from-winlogbeat/101518)
**Author:** [@leonkin](https://discuss.elastic.co/u/leonkin)\ **Replies:** 2\ **Last updated:** [September 22, 2017, 8:38pm UTC](https://discuss.elastic.co/t/logstash-cant-recognize-message-field-from-winlogbeat/101518 "2017-09-22T20:38:54Z")
winlogbeat version 5.6.1 config winlonbeat.yml winlogbeat: registry\_file: C:/ProgramData/winlogbeat/.winlogbeat.yml event\_logs: - name: Application output.logstash: # The Logstash hosts hosts: \["host:port"… --- ## [X-Pack run\_as](https://discuss.elastic.co/t/x-pack-run-as/93399)
**Author:** [@francula](https://discuss.elastic.co/u/francula)\ **Replies:** 2\ **Last updated:** [July 21, 2017, 11:57am UTC](https://discuss.elastic.co/t/x-pack-run-as/93399 "2017-07-21T11:57:39Z")
Hi, I'm trying to use the run\_as feature of x-pack. But I cannot hand over the user that should be taken. I'm using elasticsearch 5.3 with x-pack and the nodejs api. I tried to enrich the constructor with the header … --- ## [java.net.ConnectException when trying to overwrite a table in Hive?](https://discuss.elastic.co/t/java-net-connectexception-when-trying-to-overwrite-a-table-in-hive/90952)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 2\ **Last updated:** [June 28, 2017, 4:36am UTC](https://discuss.elastic.co/t/java-net-connectexception-when-trying-to-overwrite-a-table-in-hive/90952 "2017-06-28T04:36:15Z")
I'm already having a table(test) in hive, with a single column (logtype) which has around 5 rows. And I created another table(hive\_to\_elastic) with ES properties as such: CREATE EXTERNAL TABLE hive\_to\_elastic(logtype… --- ## [Does anybody have any experience using Infinidat storage with Elasticsearch?](https://discuss.elastic.co/t/does-anybody-have-any-experience-using-infinidat-storage-with-elasticsearch/84822)
**Author:** [@Peter\_Portante](https://discuss.elastic.co/u/Peter_Portante)\ **Replies:** 2\ **Last updated:** [May 7, 2017, 1:29pm UTC](https://discuss.elastic.co/t/does-anybody-have-any-experience-using-infinidat-storage-with-elasticsearch/84822 "2017-05-07T13:29:09Z")
Hi Folks, We have a team that is considering using Infinidat \[1\] storage as the disk storage for Elasticsearch. Does anybody have any experience with such a deployment? There is a use-case on the website from Sprin… --- ## [Create user roles in ELK 5.2.2](https://discuss.elastic.co/t/create-user-roles-in-elk-5-2-2/80229)
**Author:** [@Ashik\_Mohammed](https://discuss.elastic.co/u/Ashik_Mohammed)\ **Replies:** 2\ **Last updated:** [March 31, 2017, 7:10am UTC](https://discuss.elastic.co/t/create-user-roles-in-elk-5-2-2/80229 "2017-03-31T07:10:00Z")
Hello, I have setup ELK 5.2.2 and installed x-pack plugin for implementing access controls. I can see some built in user roles. I need to create two user roles. Following are the requirements User1(Admin) … --- ## [Elastic CloudのサービスでのKopf利用に関して](https://discuss.elastic.co/t/elastic-cloud-kopf/70643)
**Author:** [@rup-yokokawa](https://discuss.elastic.co/u/rup-yokokawa)\ **Replies:** 2\ **Last updated:** [January 5, 2017, 10:07am UTC](https://discuss.elastic.co/t/elastic-cloud-kopf/70643 "2017-01-05T10:07:55Z")
Elastic Cloudのサービスで、DashboardsにKopfがあります。 このKopfを利用しようとするのですが、KopfのバージョンがESのバージョンと違うというメッセージが常に画面右上に表示されています。 実際にKopfからインデックスを作成しようとしてもErrorとなります。 この状態ですが、現在、試用版で行なっているので利用ができない状態なのか、 本利用（課金対象）となると利用ができるのか、 もし… --- ## [Is it possible to create multiple index in single config file with different input locations?](https://discuss.elastic.co/t/is-it-possible-to-create-multiple-index-in-single-config-file-with-different-input-locations/64062)
**Author:** [@asac2](https://discuss.elastic.co/u/asac2)\ **Replies:** 2\ **Last updated:** [October 26, 2016, 11:34pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-multiple-index-in-single-config-file-with-different-input-locations/64062 "2016-10-26T23:34:11Z")
Is it possible to create multiple index in single config file with different input locations? --- ## [MLT analyzer dosn't remove stopwords](https://discuss.elastic.co/t/mlt-analyzer-dosnt-remove-stopwords/48796)
**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\ **Replies:** 2\ **Last updated:** [May 2, 2016, 5:49am UTC](https://discuss.elastic.co/t/mlt-analyzer-dosnt-remove-stopwords/48796 "2016-05-02T05:49:11Z")
Hi, we use MLT to find documents base on an id of a source document. Via Validate-API (validate/query?rewrite=true) we found out that a couple of terms are used which we dosn't want to use for MLT. So we have added a l… --- ## [Having problems with hit count from OR filter](https://discuss.elastic.co/t/having-problems-with-hit-count-from-or-filter/20414)
**Author:** [@Lenin](https://discuss.elastic.co/u/Lenin)\ **Replies:** 2\ **Last updated:** [October 27, 2014, 6:12pm UTC](https://discuss.elastic.co/t/having-problems-with-hit-count-from-or-filter/20414 "2014-10-27T18:12:52Z")
I have the following aggregation which show all the count by values for a particular field values. http://localhost:8200/index1/collection1/\_search?search\_type=count { "aggs" : { "effects" : { … --- ## [Have an error message "Failed to derive xcontent from org.elasticsearch.common.bytes.ChannelBufferBytesReference", why?](https://discuss.elastic.co/t/have-an-error-message-failed-to-derive-xcontent-from-org-elasticsearch-common-bytes-channelbufferbytesreference-why/10167)
**Author:** [@asoqa](https://discuss.elastic.co/u/asoqa)\ **Replies:** 2\ **Last updated:** [December 25, 2012, 2:40am UTC](https://discuss.elastic.co/t/have-an-error-message-failed-to-derive-xcontent-from-org-elasticsearch-common-bytes-channelbufferbytesreference-why/10167 "2012-12-25T02:40:14Z")
I used bulk api with php, but met a problem: {"error":"Failed to derive xcontent from org.elasticsearch.common.bytes.ChannelBufferBytesReference here is my curl command: curl -s -XPOST localhost:9200/\_bulk… --- ## [Nagios/Shinken plugins for checking on Elasticsearch](https://discuss.elastic.co/t/nagios-shinken-plugins-for-checking-on-elasticsearch/8030)
**Author:** [@Radu\_Gheorghe1](https://discuss.elastic.co/u/Radu_Gheorghe1)\ **Replies:** 2\ **Last updated:** [June 14, 2012, 12:40pm UTC](https://discuss.elastic.co/t/nagios-shinken-plugins-for-checking-on-elasticsearch/8030 "2012-06-14T12:40:39Z")
Hi, If anyone is using Nagios/Shinken for monitoring, you can find a couple of plugins here: https://github.com/radu-gheorghe/check-es Right now I've got one that measures how many documents are indexed per seco… --- ## [Regular expression has redundant nested repeat operator messages](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator-messages/232482)
**Author:** [@realyn\_elastic](https://discuss.elastic.co/u/realyn_elastic)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 4:50pm UTC](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator-messages/232482 "2020-05-15T16:50:52Z")
I am seeing this lot of errors inside my /var/log/messages. Could someone help me to enlighten and fix this regular expression has redundant nested repeat operator \* /(?:(?:(?:(?\(?:(?\>\\d\\d){… [Previous page](https://discuss.elastic.co/top.md?page=1687&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1689&per_page=50&period=all)