# Top

**URL:** https://discuss.elastic.co/top.md?page=170&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 171

---

## [S3 input issues with images](https://discuss.elastic.co/t/s3-input-issues-with-images/122999)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 15\
**Last updated:** [March 13, 2018, 6:49am UTC](https://discuss.elastic.co/t/s3-input-issues-with-images/122999 "2018-03-13T06:49:36Z")

</div>

I've been trying to figure out how to solve this: I have an Amazon S3 bucket with a lot of files and filetypes. I only care about the xml files. I can't figure out how to have it only process xml files. It keeps trying t…

---

## [Reading logs from DB - Avoiding of duplicate records](https://discuss.elastic.co/t/reading-logs-from-db-avoiding-of-duplicate-records/186996)

<div class="topic-metadata">

**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\
**Replies:** 10\
**Last updated:** [June 26, 2019, 3:13pm UTC](https://discuss.elastic.co/t/reading-logs-from-db-avoiding-of-duplicate-records/186996 "2019-06-26T15:13:53Z")

</div>

Hello, I would like to read LOGS from database from table logs. These logs I would like to send using logstash to syslog server. I would to ensure sending events only once: I mark events that are going to be sent I s…

---

## [Can't get the NodeJS transactions in Kibana](https://discuss.elastic.co/t/cant-get-the-nodejs-transactions-in-kibana/225935)

<div class="topic-metadata">

**Author:** [@propelelk](https://discuss.elastic.co/u/propelelk)\
**Replies:** 11\
**Last updated:** [April 5, 2020, 11:09pm UTC](https://discuss.elastic.co/t/cant-get-the-nodejs-transactions-in-kibana/225935 "2020-04-05T23:09:14Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.6.…

---

## [Conditionals in Grok filter for more than one log type](https://discuss.elastic.co/t/conditionals-in-grok-filter-for-more-than-one-log-type/101656)

<div class="topic-metadata">

**Author:** [@akarsha](https://discuss.elastic.co/u/akarsha)\
**Replies:** 11\
**Last updated:** [September 27, 2017, 2:31am UTC](https://discuss.elastic.co/t/conditionals-in-grok-filter-for-more-than-one-log-type/101656 "2017-09-27T02:31:40Z")

</div>

I am using grok filter for parsing my log file by logstash. I am not getting any error, stll not getting expected results in kibana. my config file looks like below: My config file is: filter { if \[type\] == "sdp" { i…

---

## [Can i check elasticsearch index in file system](https://discuss.elastic.co/t/can-i-check-elasticsearch-index-in-file-system/332634)

<div class="topic-metadata">

**Author:** [@Skairik](https://discuss.elastic.co/u/Skairik)\
**Replies:** 9\
**Last updated:** [May 9, 2023, 6:42am UTC](https://discuss.elastic.co/t/can-i-check-elasticsearch-index-in-file-system/332634 "2023-05-09T06:42:18Z")

</div>

Hello, I wanted to know if there is a way for me to look at the logs of the different indexes directly on my server without going through kibana. After some research I was supposed to have a data folder in /var/lib/ela…

---

## [Unable to use training](https://discuss.elastic.co/t/unable-to-use-training/293672)

<div class="topic-metadata">

**Author:** [@jbellezz](https://discuss.elastic.co/u/jbellezz)\
**Replies:** 15\
**Last updated:** [January 11, 2022, 8:11pm UTC](https://discuss.elastic.co/t/unable-to-use-training/293672 "2022-01-11T20:11:48Z")

</div>

Tried working through training@elastic.co, but they directed me here. I am running into at least 2 issues at the moment. Strigo does not have my e-mail on file from the course provider, so I am unable to create a lab …

---

## [Can't Get Highlighting Working](https://discuss.elastic.co/t/cant-get-highlighting-working/3731)

<div class="topic-metadata">

**Author:** [@timscott](https://discuss.elastic.co/u/timscott)\
**Replies:** 16\
**Last updated:** [January 8, 2011, 4:26am UTC](https://discuss.elastic.co/t/cant-get-highlighting-working/3731 "2011-01-08T04:26:43Z")

</div>

I am trying to get highlighting working without luck. I'm still pretty much an ES noob. curl -XGET http://10.0.1.2:9200/tscott/\_search -d' { "query":{ "field":{ "Summary":{ "…

---

## [6 fields defined in my mappings. How is it possible to exceed the 1000 field size limit?](https://discuss.elastic.co/t/6-fields-defined-in-my-mappings-how-is-it-possible-to-exceed-the-1000-field-size-limit/130536)

<div class="topic-metadata">

**Author:** [@Jack\_Park](https://discuss.elastic.co/u/Jack_Park)\
**Replies:** 10\
**Last updated:** [May 5, 2018, 5:03pm UTC](https://discuss.elastic.co/t/6-fields-defined-in-my-mappings-how-is-it-possible-to-exceed-the-1000-field-size-limit/130536 "2018-05-05T17:03:40Z")

</div>

I am not making fields on the fly, unless there is a new bug; I've been running ES 6.1 on lots of "rows" of data, then suddenly, I am seeing the error message that I exceeded the 1000 limit on that index. I am intereste…

---

## [Using ingest-attachment plugin](https://discuss.elastic.co/t/using-ingest-attachment-plugin/65531)

<div class="topic-metadata">

**Author:** [@BGwosdz](https://discuss.elastic.co/u/BGwosdz)\
**Replies:** 10\
**Last updated:** [November 23, 2016, 10:36am UTC](https://discuss.elastic.co/t/using-ingest-attachment-plugin/65531 "2016-11-23T10:36:47Z")

</div>

I am new to ES and LS trying to setup a pipeline that ingests pdf documents from a directory into ES using the ingest-attachment plugin. Do I have to extract the file's content myself or will it be done automatically by …

---

## [Phonetic search && i18n](https://discuss.elastic.co/t/phonetic-search-i18n/10473)

<div class="topic-metadata">

**Author:** [@Yann\_Barraud](https://discuss.elastic.co/u/Yann_Barraud)\
**Replies:** 10\
**Last updated:** [January 29, 2013, 4:30pm UTC](https://discuss.elastic.co/t/phonetic-search-i18n/10473 "2013-01-29T16:30:38Z")

</div>

Hi, Does anyone know a way to use specific (localized) version of phonetic analysers and use it through the existing plugin ? (For anyone wondering, looking for something for french language...) Thanks. Yann…

---

## [Dynamic passing latitude longitude is possible](https://discuss.elastic.co/t/dynamic-passing-latitude-longitude-is-possible/181605)

<div class="topic-metadata">

**Author:** [@elk3](https://discuss.elastic.co/u/elk3)\
**Replies:** 9\
**Last updated:** [May 20, 2019, 12:25pm UTC](https://discuss.elastic.co/t/dynamic-passing-latitude-longitude-is-possible/181605 "2019-05-20T12:25:05Z")

</div>

GET /schoolkpi/\_search { "query": { "bool" : { "must" : { "match\_all" : {} }, "filter": { "geo\_distance": { "distance": "1km", "distance\_type": "plane", "location": { "lat":40.715, "lon":-73.988 } } } }…

---

## [Elasticsearch plugins missing from maven central](https://discuss.elastic.co/t/elasticsearch-plugins-missing-from-maven-central/120874)

<div class="topic-metadata">

**Author:** [@Graham\_Leggett](https://discuss.elastic.co/u/Graham_Leggett)\
**Replies:** 9\
**Last updated:** [February 22, 2018, 9:11am UTC](https://discuss.elastic.co/t/elasticsearch-plugins-missing-from-maven-central/120874 "2018-02-22T09:11:45Z")

</div>

Elasticsearch v6.2.2 is available from maven central: https://repo1.maven.org/maven2/org/elasticsearch/elasticsearch/6.2.2/ Elasticsearch plugins, like elasticsearch-analysis-icu plugin, are not available from maven ce…

---

## [Elasticsearch is not starting](https://discuss.elastic.co/t/elasticsearch-is-not-starting/46158)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 9\
**Last updated:** [April 3, 2016, 8:46pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting/46158 "2016-04-03T20:46:54Z")

</div>

I'm trying to upgrade elasticsearch version from 1.7.1 to elasticsearch 2.0.0 so I followed the steps which is given in the documentation but after upgration I'm enable to start the elasticsearch

---

## [Random number of messages dropping on logstash import](https://discuss.elastic.co/t/random-number-of-messages-dropping-on-logstash-import/251658)

<div class="topic-metadata">

**Author:** [@Paul\_Shriner](https://discuss.elastic.co/u/Paul_Shriner)\
**Replies:** 16\
**Last updated:** [November 5, 2020, 5:18pm UTC](https://discuss.elastic.co/t/random-number-of-messages-dropping-on-logstash-import/251658 "2020-11-05T17:18:57Z")

</div>

I have Logstash 7.6 running on Ubuntu 20.04. I am importing a pretty simple CSV file. The data in the file is separated by commas. See below: email,send\_time,engaged,last\_touch\_utc,score,frequency,open\_count,click\_…

---

## [Difficulty displaying all hits in kibana](https://discuss.elastic.co/t/difficulty-displaying-all-hits-in-kibana/259790)

<div class="topic-metadata">

**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\
**Replies:** 13\
**Last updated:** [December 30, 2020, 7:19pm UTC](https://discuss.elastic.co/t/difficulty-displaying-all-hits-in-kibana/259790 "2020-12-30T19:19:45Z")

</div>

Hello, I send the logs continuously to logstash. But, the logs are not displayed continuously in kibana. It shows me 8 hits over the last 7 days. While logs logs have been sent continuously for 7 days. Can you help m…

---

## [Open TCP connection count](https://discuss.elastic.co/t/open-tcp-connection-count/164482)

<div class="topic-metadata">

**Author:** [@rani](https://discuss.elastic.co/u/rani)\
**Replies:** 11\
**Last updated:** [February 20, 2019, 9:23am UTC](https://discuss.elastic.co/t/open-tcp-connection-count/164482 "2019-02-20T09:23:12Z")

</div>

Hello there. I have a use case where we do have different applications running in separate containers. We want to monitor the user activity by keeping track of the open TCP connections on each application. I am using t…

---

## [Logstash losing messages](https://discuss.elastic.co/t/logstash-losing-messages/139730)

<div class="topic-metadata">

**Author:** [@M\_B\_I](https://discuss.elastic.co/u/M_B_I)\
**Replies:** 11\
**Last updated:** [August 7, 2018, 8:54am UTC](https://discuss.elastic.co/t/logstash-losing-messages/139730 "2018-08-07T08:54:27Z")

</div>

Hello, everyone! I have a lot of syslog messages. And when I trying to filter them I found that logstash losing some messages. How can I investigate why? And how can I found howq many of messages are missed ?

---

## [Elasticsearch "close connection exception caught on transport layer ... disconnecting from relevant node: Connection reset](https://discuss.elastic.co/t/elasticsearch-close-connection-exception-caught-on-transport-layer-disconnecting-from-relevant-node-connection-reset/359040)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 10\
**Last updated:** [August 28, 2024, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-close-connection-exception-caught-on-transport-layer-disconnecting-from-relevant-node-connection-reset/359040 "2024-08-28T07:26:54Z")

</div>

Unstable operation of the elastic cluster. In the logs I see that the ingest nodes (I have two of them) are disconnected from the master in a chaotic manner after a certain time. Because of this problem, I can't transfer…

---

## [Plugin to call external Rest End point for each resulted doc with exrta parameters from Original Request](https://discuss.elastic.co/t/plugin-to-call-external-rest-end-point-for-each-resulted-doc-with-exrta-parameters-from-original-request/144592)

<div class="topic-metadata">

**Author:** [@vipindwivedi](https://discuss.elastic.co/u/vipindwivedi)\
**Replies:** 9\
**Last updated:** [September 10, 2018, 3:03pm UTC](https://discuss.elastic.co/t/plugin-to-call-external-rest-end-point-for-each-resulted-doc-with-exrta-parameters-from-original-request/144592 "2018-09-10T15:03:54Z")

</div>

Hi, I was going through online documentation to find if there is any way I can try to solve my use case while using ES for my document search. My Use case is like this .. Loaded bunch of document in ES lets say 10k. …

---

## [How to resolve ILM errors about missing "scaling\_factor"?](https://discuss.elastic.co/t/how-to-resolve-ilm-errors-about-missing-scaling-factor/345937)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 18\
**Last updated:** [January 22, 2024, 9:13pm UTC](https://discuss.elastic.co/t/how-to-resolve-ilm-errors-about-missing-scaling-factor/345937 "2024-01-22T21:13:32Z")

</div>

My ILM policy is configured to downsample metrics. The policy does work, and I have metrics being downsampled, but a few indices are stuck with lifecycle errors. Specifically several .ds-metrics-docker.memory-default... …

---

## [Range query for dates with IN clause](https://discuss.elastic.co/t/range-query-for-dates-with-in-clause/191897)

<div class="topic-metadata">

**Author:** [@kasi](https://discuss.elastic.co/u/kasi)\
**Replies:** 9\
**Last updated:** [July 28, 2019, 2:17am UTC](https://discuss.elastic.co/t/range-query-for-dates-with-in-clause/191897 "2019-07-28T02:17:33Z")

</div>

How to query for a range of dates using the IN clause in Elastic Search? I am using Java Rest services. I want to be able to query for timestamp for a range of dates? like timestamp in (list of dates) Thanks

---

## [Heartbeat-Elastic 7.10 unable to display details \[search\_phase\_execution\_exception\]](https://discuss.elastic.co/t/heartbeat-elastic-7-10-unable-to-display-details-search-phase-execution-exception/257481)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 10\
**Last updated:** [December 7, 2020, 3:12am UTC](https://discuss.elastic.co/t/heartbeat-elastic-7-10-unable-to-display-details-search-phase-execution-exception/257481 "2020-12-07T03:12:15Z")

</div>

Versions Kibana: 7.7.0 APM Server: (if relevant) Elasticsearch: 7.10.0 Heartbeat: 7.10 After I have upgraded to version 7.10 (Heartbeat-Elastic) the table below is not showing up. Below is my heartbeat.yml, please…

---

## [Elastic Tutorial for ELK](https://discuss.elastic.co/t/elastic-tutorial-for-elk/62501)

<div class="topic-metadata">

**Author:** [@syswombat](https://discuss.elastic.co/u/syswombat)\
**Replies:** 10\
**Last updated:** [November 6, 2016, 3:39pm UTC](https://discuss.elastic.co/t/elastic-tutorial-for-elk/62501 "2016-11-06T15:39:35Z")

</div>

Hello i have found a lots of Tutorial in the net to Install ELK. Some don't work other have old release. Is there a Elastic Tutorial place for installing ELK and working together? have a nice day vinc

---

## [Start Kibana](https://discuss.elastic.co/t/start-kibana/251116)

<div class="topic-metadata">

**Author:** [@acastaldi84](https://discuss.elastic.co/u/acastaldi84)\
**Replies:** 12\
**Last updated:** [October 30, 2020, 11:09am UTC](https://discuss.elastic.co/t/start-kibana/251116 "2020-10-30T11:09:50Z")

</div>

Hello, i installed Kibana on Centos 7 but i have this error when i start it! kibana error|690x430 how can i understand what it depends on? Thank you

---

## [Synced flush and keep indexing on primary](https://discuss.elastic.co/t/synced-flush-and-keep-indexing-on-primary/166197)

<div class="topic-metadata">

**Author:** [@Matteo\_Grolla](https://discuss.elastic.co/u/Matteo_Grolla)\
**Replies:** 12\
**Last updated:** [February 1, 2019, 4:34pm UTC](https://discuss.elastic.co/t/synced-flush-and-keep-indexing-on-primary/166197 "2019-02-01T16:34:20Z")

</div>

Hi, I have the following problem: I need to shut down a replica to perform some operations on it the index contains lots of data so I'd like to use synced flush to speedup replica restart In addition I'd like to cont…

---

## [Elasticsearch’s S3 Snapshot Repository: The Mystery of the Inaccessible S3 Bucket ==\> Access Denied](https://discuss.elastic.co/t/elasticsearch-s-s3-snapshot-repository-the-mystery-of-the-inaccessible-s3-bucket-access-denied/362900)

<div class="topic-metadata">

**Author:** [@Hadj\_Hassine\_Younes](https://discuss.elastic.co/u/Hadj_Hassine_Younes)\
**Replies:** 16\
**Last updated:** [October 10, 2024, 8:27pm UTC](https://discuss.elastic.co/t/elasticsearch-s-s3-snapshot-repository-the-mystery-of-the-inaccessible-s3-bucket-access-denied/362900 "2024-10-10T20:27:20Z")

</div>

Elasticsearch Version 7.17.12 Installed Plugins repository-s3 Java Version JAVA\_RUNTIME\_VERSION="20.0.2+9-78 OS Version Linux elasticsearch-data-0 5.10.214-202.855.amzn2.x86\_64 #1 SMP Tue Apr 9 06:57:12 UTC 2024 x86\_6…

---

## [Elastic search java client unable to handle scores more than 1](https://discuss.elastic.co/t/elastic-search-java-client-unable-to-handle-scores-more-than-1/64987)

<div class="topic-metadata">

**Author:** [@dbanka](https://discuss.elastic.co/u/dbanka)\
**Replies:** 15\
**Last updated:** [November 7, 2016, 11:12am UTC](https://discuss.elastic.co/t/elastic-search-java-client-unable-to-handle-scores-more-than-1/64987 "2016-11-07T11:12:42Z")

</div>

I am using elastic search java client with elastic search version 2.3 In one of my queries, the search score come out in the order of 4-5. But elastic search java client is converting all the score above 1 to 1 and there…

---

## [Slow indexing speed in 3 nodes cluster](https://discuss.elastic.co/t/slow-indexing-speed-in-3-nodes-cluster/170345)

<div class="topic-metadata">

**Author:** [@waster](https://discuss.elastic.co/u/waster)\
**Replies:** 11\
**Last updated:** [March 1, 2019, 10:37am UTC](https://discuss.elastic.co/t/slow-indexing-speed-in-3-nodes-cluster/170345 "2019-03-01T10:37:57Z")

</div>

Hello, We had a problem with slow indexing speed with ES cluster of 3 nodes (5.6.14) with the following roles: 70G RAM, SATA HDD, "mi" role 48G RAM, SSD HDD, "mdi" role 8G RAM, SATA HDD, "mi" role All ES nodes have h…

---

## [使用Machine Learning創建job來判斷是否遭到攻擊](https://discuss.elastic.co/t/machine-learning-job/303726)

<div class="topic-metadata">

**Author:** [@OBT](https://discuss.elastic.co/u/OBT)\
**Replies:** 9\
**Last updated:** [May 9, 2022, 4:29am UTC](https://discuss.elastic.co/t/machine-learning-job/303726 "2022-05-09T04:29:37Z")

</div>

我目前有一個想嘗試的東西是使用filebeat獲得伺服器的log file 再透過machine learing進行判斷並再遭到攻擊時傳送alert來警告 這邊附上我使用Slowloris攻擊Apache的log file 希望在這的大佬能給我一些方向或是幫助 或是有甚麼這方面的教程影片也希望能提供一下 感恩

---

## [\[SOLVED\] Don't succeed to create cluster ES 7.1](https://discuss.elastic.co/t/solved-dont-succeed-to-create-cluster-es-7-1/183690)

<div class="topic-metadata">

**Author:** [@jmilot](https://discuss.elastic.co/u/jmilot)\
**Replies:** 10\
**Last updated:** [May 31, 2019, 11:40am UTC](https://discuss.elastic.co/t/solved-dont-succeed-to-create-cluster-es-7-1/183690 "2019-05-31T11:40:21Z")

</div>

Hi, I'm trying to setup a 3 nodes cluster. My configuration is : cluster.name: dxproelsme node.name: dxproelsme01 path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch network.host: \_site\_ discovery.seed…

---

## ["Relaxing" query](https://discuss.elastic.co/t/relaxing-query/126044)

<div class="topic-metadata">

**Author:** [@aclowkey](https://discuss.elastic.co/u/aclowkey)\
**Replies:** 10\
**Last updated:** [April 4, 2018, 9:31am UTC](https://discuss.elastic.co/t/relaxing-query/126044 "2018-04-04T09:31:52Z")

</div>

Is there a way to "relax" a query when there are no matches? For example, if a user searches "red shirts" and the operator is "AND" and there are no results, the operator would change to "OR"

---

## [How to use local gateway](https://discuss.elastic.co/t/how-to-use-local-gateway/9316)

<div class="topic-metadata">

**Author:** [@bing\_2](https://discuss.elastic.co/u/bing_2)\
**Replies:** 9\
**Last updated:** [April 8, 2013, 7:32am UTC](https://discuss.elastic.co/t/how-to-use-local-gateway/9316 "2013-04-08T07:32:23Z")

</div>

I study local gateway for two days, but still don't know how to use it Can somebody explain it to me? My question is : 1 where are data of local gateway put? how to generate data of gateway 2 how can I simulate…

---

## [Every once in a while a single CPU will run 100% for an extended period of time](https://discuss.elastic.co/t/every-once-in-a-while-a-single-cpu-will-run-100-for-an-extended-period-of-time/5925)

<div class="topic-metadata">

**Author:** [@eroyal](https://discuss.elastic.co/u/eroyal)\
**Replies:** 9\
**Last updated:** [December 9, 2011, 9:19am UTC](https://discuss.elastic.co/t/every-once-in-a-while-a-single-cpu-will-run-100-for-an-extended-period-of-time/5925 "2011-12-09T09:19:08Z")

</div>

I am running Elasticsearch 0.15.2 on EC2 large instances. Every once in a while a single CPU will run 100% for an extended period of time. I cannot figure out what it is doing. At first I thought it might be running…

---

## [APM does not display spans despite having them in ES](https://discuss.elastic.co/t/apm-does-not-display-spans-despite-having-them-in-es/353049)

<div class="topic-metadata">

**Author:** [@Dzikidzik](https://discuss.elastic.co/u/Dzikidzik)\
**Replies:** 13\
**Last updated:** [March 13, 2024, 9:10am UTC](https://discuss.elastic.co/t/apm-does-not-display-spans-despite-having-them-in-es/353049 "2024-03-13T09:10:03Z")

</div>

I have two Django apps and celery running tasks in background, and Kibana seems to not display properly spans for transaction that are stored in ES. Transaction metadata shows transaction.span\_count.started: 48 and i…

---

## [Logstash, Filebeat and Winlogbeat](https://discuss.elastic.co/t/logstash-filebeat-and-winlogbeat/138746)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 12\
**Last updated:** [July 9, 2018, 11:28am UTC](https://discuss.elastic.co/t/logstash-filebeat-and-winlogbeat/138746 "2018-07-09T11:28:07Z")

</div>

Is there any good tutorials out there with good configuration to install these tools so that I can ship event logs to my Kibana interface? Thanks in advance

---

## [Data disappearing and new uuid](https://discuss.elastic.co/t/data-disappearing-and-new-uuid/175678)

<div class="topic-metadata">

**Author:** [@Callonski](https://discuss.elastic.co/u/Callonski)\
**Replies:** 14\
**Last updated:** [April 8, 2019, 8:58am UTC](https://discuss.elastic.co/t/data-disappearing-and-new-uuid/175678 "2019-04-08T08:58:31Z")

</div>

I'm trying to load around 20 GB of data into an index. My problem is that while I do this, all of a sudden the uuid, docs.count and store.size changes after querying: curl http://localhost:9200/\_cat/indices?v An exampl…

---

## [Multiple Terms filters not working](https://discuss.elastic.co/t/multiple-terms-filters-not-working/284077)

<div class="topic-metadata">

**Author:** [@Jay2](https://discuss.elastic.co/u/Jay2)\
**Replies:** 9\
**Last updated:** [September 23, 2021, 11:48am UTC](https://discuss.elastic.co/t/multiple-terms-filters-not-working/284077 "2021-09-23T11:48:53Z")

</div>

Hi, I am new to the DSL and im using the below DSL query: {"from":0,"min\_score":0.5,"query":{"bool":{"filter":\[{"terms":{"extension":\["bmp","jpg","tif","img","png","gif","jpeg"\]}},{"terms":{"userContentType":\["webpage"\]…

---

## [Problem with new script](https://discuss.elastic.co/t/problem-with-new-script/337800)

<div class="topic-metadata">

**Author:** [@Valerija](https://discuss.elastic.co/u/Valerija)\
**Replies:** 33\
**Last updated:** [July 12, 2023, 11:49am UTC](https://discuss.elastic.co/t/problem-with-new-script/337800 "2023-07-12T11:49:08Z")

</div>

Hi there, I created a simple new script and it works w/o problems: def totalGood = doc\['actualQuantity'\].value - doc\['failureQuantity'\].value; return totalGood; Then I tried to create another one and this one does not…

---

## [ElasticSearch 2.3.4 grinding to a halt](https://discuss.elastic.co/t/elasticsearch-2-3-4-grinding-to-a-halt/57775)

<div class="topic-metadata">

**Author:** [@jdmac](https://discuss.elastic.co/u/jdmac)\
**Replies:** 9\
**Last updated:** [August 11, 2016, 9:49am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-4-grinding-to-a-halt/57775 "2016-08-11T09:49:04Z")

</div>

Hi All, I've got an issue with ElasticSearch, or more specifically I suspect with the JVM Heap it's using. Before I go into detail overload, let me set out what I have. The Setup 4 x Nodes (3 x Eligable masters & …

---

## [Not seeing Marvel "app switcher" in kibana](https://discuss.elastic.co/t/not-seeing-marvel-app-switcher-in-kibana/58080)

<div class="topic-metadata">

**Author:** [@Bob\_Metelsky](https://discuss.elastic.co/u/Bob_Metelsky)\
**Replies:** 10\
**Last updated:** [August 16, 2016, 2:22am UTC](https://discuss.elastic.co/t/not-seeing-marvel-app-switcher-in-kibana/58080 "2016-08-16T02:22:25Z")

</div>

All I have a 4 node cluster, 1 master 3 data ES nodes. Kibana and ES is on the master. I've installed the marvel license and plugins on all nodes and can see the marvel indexes being created but I cant see the marvel das…

---

## [Is it possible for one index to use total index buffer for indexing?](https://discuss.elastic.co/t/is-it-possible-for-one-index-to-use-total-index-buffer-for-indexing/37198)

<div class="topic-metadata">

**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\
**Replies:** 10\
**Last updated:** [December 17, 2015, 5:26am UTC](https://discuss.elastic.co/t/is-it-possible-for-one-index-to-use-total-index-buffer-for-indexing/37198 "2015-12-17T05:26:49Z")

</div>

Let's say I have a daily build index and each day, the document will only put into today's index while no data will be indexed into old index. it is possible for today's index occupy the total index buffer for indexintg …

---

## [Using distanceInMiles to find distance fails](https://discuss.elastic.co/t/using-distanceinmiles-to-find-distance-fails/64232)

<div class="topic-metadata">

**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\
**Replies:** 13\
**Last updated:** [October 31, 2016, 3:32pm UTC](https://discuss.elastic.co/t/using-distanceinmiles-to-find-distance-fails/64232 "2016-10-31T15:32:42Z")

</div>

Using ES 2.3.3 A section of my document mapping is as follows : "rents": { "type": "nested", "properties": {.........e.g. "avg"} }, "location": { "type": "geo\_point" } And in groovy script, I try to find dista…

---

## [Logstash unable to parse with kv filter](https://discuss.elastic.co/t/logstash-unable-to-parse-with-kv-filter/240820)

<div class="topic-metadata">

**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\
**Replies:** 17\
**Last updated:** [July 14, 2020, 3:13pm UTC](https://discuss.elastic.co/t/logstash-unable-to-parse-with-kv-filter/240820 "2020-07-14T15:13:30Z")

</div>

My logstash configuration is working fine for most of the log cases but below exceptions are not working. My log has following format The json part consist of usual format "" "" both have space separator. In normal…

---

## [Heartbeat Kubernetes deployment manifests and icmp dashboards](https://discuss.elastic.co/t/heartbeat-kubernetes-deployment-manifests-and-icmp-dashboards/214847)

<div class="topic-metadata">

**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\
**Replies:** 9\
**Last updated:** [January 17, 2020, 2:20pm UTC](https://discuss.elastic.co/t/heartbeat-kubernetes-deployment-manifests-and-icmp-dashboards/214847 "2020-01-17T14:20:59Z")

</div>

Is there a heartbeat kubernetes deployment manifest that is available? (I only see auditbeat/filebeat/metricbeat yamls) Ideally this would show heartbeat best practices and or possible deployments in kubernetes. Also a…

---

## [Date histogram agg crashes cluster](https://discuss.elastic.co/t/date-histogram-agg-crashes-cluster/46851)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 9\
**Last updated:** [April 19, 2016, 1:23pm UTC](https://discuss.elastic.co/t/date-histogram-agg-crashes-cluster/46851 "2016-04-19T13:23:00Z")

</div>

Hi running 2.3.0 This issue is 100% reproducible. We have a 12 node cluster running with 20GB of RAM per node so 240GB total. There is 2 indexes Index1 is about 35,000,000 records and Index2 about 6,000,000. Both i…

---

## [\[Simple\] Logstash config file](https://discuss.elastic.co/t/simple-logstash-config-file/129613)

<div class="topic-metadata">

**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\
**Replies:** 11\
**Last updated:** [April 26, 2018, 1:51pm UTC](https://discuss.elastic.co/t/simple-logstash-config-file/129613 "2018-04-26T13:51:23Z")

</div>

I've got these lines in my log: 1524708231.794259376 8 c0:4a:00:40:e6:0e c0:4a:00:40:AA:AA -45 1524708231.829154447 6 3c:08:f6:e6:AA:AA 3c:08:f6:e6:AA:AA -71 1st item is Unix timestamp 2nd item is channel …

---

## [ELK version 8.7.0 with mysql using docker compose](https://discuss.elastic.co/t/elk-version-8-7-0-with-mysql-using-docker-compose/333871)

<div class="topic-metadata">

**Author:** [@Fatiha](https://discuss.elastic.co/u/Fatiha)\
**Replies:** 13\
**Last updated:** [May 25, 2023, 6:36pm UTC](https://discuss.elastic.co/t/elk-version-8-7-0-with-mysql-using-docker-compose/333871 "2023-05-25T18:36:55Z")

</div>

hi every one I want to run elastic and kibana and logstash I use docker compose this is the docker compose file yml : version: '3' services: mysql: container\_name: mysql hostname: mysql image: 'mysql' …

---

## [How we can use RBAC in elasticserach7.1](https://discuss.elastic.co/t/how-we-can-use-rbac-in-elasticserach7-1/185086)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 13\
**Last updated:** [June 12, 2019, 11:10am UTC](https://discuss.elastic.co/t/how-we-can-use-rbac-in-elasticserach7-1/185086 "2019-06-12T11:10:06Z")

</div>

Hello Teamt , Currently we are using ELK Version 6.4.4. All things are working fine as expected. We are not using any feature of xpac because we are using basic license. But few days back elasticsearch7.1 come with fre…

---

## [Bucket script fails when some docs are missing](https://discuss.elastic.co/t/bucket-script-fails-when-some-docs-are-missing/107592)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 9\
**Last updated:** [November 20, 2017, 10:09am UTC](https://discuss.elastic.co/t/bucket-script-fails-when-some-docs-are-missing/107592 "2017-11-20T10:09:59Z")

</div>

Elasticsearch version (bin/elasticsearch --version): 6.0.0-rc1 JVM version (java -version): java version "1.8.0\_151" Java(TM) SE Runtime Environment (build 1.8.0\_151-b12) Java HotSpot(TM) 64-Bit Server VM (build 25.1…

---

## [Продолжение проблем на FreeBSD](https://discuss.elastic.co/t/freebsd/221640)

<div class="topic-metadata">

**Author:** [@Chawoosh](https://discuss.elastic.co/u/Chawoosh)\
**Replies:** 19\
**Last updated:** [March 5, 2020, 2:41pm UTC](https://discuss.elastic.co/t/freebsd/221640 "2020-03-05T14:41:50Z")

</div>

Текущее состояние: Эластик, Файлбит и Кибана приведены к одной версии (6.8), логи в окне Кибаны бегут, Файлбит с ключом -e ошибок по поводу логов не выдаёт, но... Попытки активизировать модуль system заканчивается сообщ…

[Previous page](https://discuss.elastic.co/top.md?page=169&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=171&per_page=50&period=all)
