# Top **URL:** https://discuss.elastic.co/top.md?page=181&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 182 --- ## [How to replace logstash read time with log timing?](https://discuss.elastic.co/t/how-to-replace-logstash-read-time-with-log-timing/285834)
**Author:** [@Pradeep\_Kumar2](https://discuss.elastic.co/u/Pradeep_Kumar2)\ **Replies:** 9\ **Last updated:** [October 4, 2021, 6:25pm UTC](https://discuss.elastic.co/t/how-to-replace-logstash-read-time-with-log-timing/285834 "2021-10-04T18:25:56Z")
Hi, I am trying to configure logstash file which will replace the logstash read timestamp or system time with actual log time. In the kibana discover dashboard logs are displayed with logstash read time. How to replace … --- ## [How to improve performance?](https://discuss.elastic.co/t/how-to-improve-performance/129685)
**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\ **Replies:** 19\ **Last updated:** [May 3, 2018, 12:52pm UTC](https://discuss.elastic.co/t/how-to-improve-performance/129685 "2018-05-03T12:52:31Z")
Hello, I use Elasticsearch last version and my cluster contains 3 nodes. I receive 100GB of data per day. Actually, I have 6GB of heap size. My Elasticsearch has a lot of latence when I search data. I would like to kn… --- ## [How to handle XML file "Last ## unconsumed characters" error](https://discuss.elastic.co/t/how-to-handle-xml-file-last-unconsumed-characters-error/188385)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 10\ **Last updated:** [July 12, 2019, 7:04pm UTC](https://discuss.elastic.co/t/how-to-handle-xml-file-last-unconsumed-characters-error/188385 "2019-07-12T19:04:23Z")
Elastic has an issue parsing xml. Returns error "Error parsing xml with XmlSimple...." Also "Last ## unconsumed characters". Logstash config file is as follows input { file { path =\> "filepath" start\_position =\> "b… --- ## [\_bulk API not working when we migrate from ES 2.3 to ES 5.5](https://discuss.elastic.co/t/bulk-api-not-working-when-we-migrate-from-es-2-3-to-es-5-5/102613)
**Author:** [@keerthipenmatsa](https://discuss.elastic.co/u/keerthipenmatsa)\ **Replies:** 10\ **Last updated:** [November 1, 2017, 9:00pm UTC](https://discuss.elastic.co/t/bulk-api-not-working-when-we-migrate-from-es-2-3-to-es-5-5/102613 "2017-11-01T21:00:41Z")
We are trying to migrate from AWS elasticsearch 2.3 to 5.5 version with minimal code changes. Currently, we are using bulk api for 2.3 version and am able to successfully insert data into ES. But, with the same api, I a… --- ## [A large amount of Logstash inputs](https://discuss.elastic.co/t/a-large-amount-of-logstash-inputs/25163)
**Author:** [@ChiBiPonD](https://discuss.elastic.co/u/ChiBiPonD)\ **Replies:** 10\ **Last updated:** [July 10, 2015, 1:01am UTC](https://discuss.elastic.co/t/a-large-amount-of-logstash-inputs/25163 "2015-07-10T01:01:47Z")
I would like to achieve 30k inputs per machine to ElasticSearch. I have set up 5 ElasticSearch master nodes. As I want to get inputs from all 20 machines at 600K rate, I need to get 30k inputs per machine. Any suggestio… --- ## [Must\_not nested with should query not working (ES version 7.10.2) -- not countryiso OR not branch\_id](https://discuss.elastic.co/t/must-not-nested-with-should-query-not-working-es-version-7-10-2-not-countryiso-or-not-branch-id/303737)
**Author:** [@Udayaprakash\_S\_10d](https://discuss.elastic.co/u/Udayaprakash_S_10d)\ **Replies:** 13\ **Last updated:** [May 3, 2022, 8:59am UTC](https://discuss.elastic.co/t/must-not-nested-with-should-query-not-working-es-version-7-10-2-not-countryiso-or-not-branch-id/303737 "2022-05-03T08:59:54Z")
{ "size": 0, "query": { "bool": { "filter": \[ { "term": { "is\_reachable": { "value": "YES", "boost": 1 } } }, … --- ## [Fields are not being parsed in new version of kibna](https://discuss.elastic.co/t/fields-are-not-being-parsed-in-new-version-of-kibna/126748)
**Author:** [@kolli\_dilip](https://discuss.elastic.co/u/kolli_dilip)\ **Replies:** 20\ **Last updated:** [April 18, 2018, 9:34am UTC](https://discuss.elastic.co/t/fields-are-not-being-parsed-in-new-version-of-kibna/126748 "2018-04-18T09:34:56Z")
Hi fileds such as ApplicationPool , ConnectedServerPort , bytesReceivedFromClient , httpResponse , uriPathWithParam etc are not being segregated, in kibana, due to which we are unable to perform visualizations, based … --- ## [Is pruning done asap?](https://discuss.elastic.co/t/is-pruning-done-asap/63365)
**Author:** [@mihai1voicescu](https://discuss.elastic.co/u/mihai1voicescu)\ **Replies:** 10\ **Last updated:** [October 26, 2016, 8:00am UTC](https://discuss.elastic.co/t/is-pruning-done-asap/63365 "2016-10-26T08:00:54Z")
Hello, Teoretical question: We have 2 aggregations in cascade. The first level aggregations' pruning is independent from it's brethren (it does not depend on the calculation of the aggregations of the same level). W… --- ## [Internal metric collection ends up in "Standalone Cluster" regardless cluster\_uuid setting](https://discuss.elastic.co/t/internal-metric-collection-ends-up-in-standalone-cluster-regardless-cluster-uuid-setting/240320)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 12\ **Last updated:** [July 14, 2020, 1:17pm UTC](https://discuss.elastic.co/t/internal-metric-collection-ends-up-in-standalone-cluster-regardless-cluster-uuid-setting/240320 "2020-07-14T13:17:32Z")
Hi, ES, APM version: 7.2.1 I've seen this before with Filebeat but it wasn't important at the time but now that I added an APM server to the cluster it's frustrating. ES, Kibana, and Logstash are correctly grouped so I… --- ## [Kibana 6.5 custom visualisation not receiving filters](https://discuss.elastic.co/t/kibana-6-5-custom-visualisation-not-receiving-filters/199846)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 17\ **Last updated:** [January 6, 2020, 2:45pm UTC](https://discuss.elastic.co/t/kibana-6-5-custom-visualisation-not-receiving-filters/199846 "2020-01-06T14:45:44Z")
Hi, I have written a custom visualisation for Kibana 6.5, which has its own custom request and response handlers. It queries elasticsearch and returns all the data for the chosen time period in its raw format. I want to… --- ## [Host Elastic Maps Service locally](https://discuss.elastic.co/t/host-elastic-maps-service-locally/346347)
**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\ **Replies:** 12\ **Last updated:** [November 10, 2023, 4:33pm UTC](https://discuss.elastic.co/t/host-elastic-maps-service-locally/346347 "2023-11-10T16:33:50Z")
I use an offline virtual machine (Red Hat), and I want to create some maps. So, I followed the documentation of hosting Elastic maps service locally, and I'm going to use the Docker image for the map server. However, wh… --- ## [Nodes are offline](https://discuss.elastic.co/t/nodes-are-offline/335716)
**Author:** [@Siavash\_Fazli](https://discuss.elastic.co/u/Siavash_Fazli)\ **Replies:** 9\ **Last updated:** [June 24, 2023, 8:25am UTC](https://discuss.elastic.co/t/nodes-are-offline/335716 "2023-06-24T08:25:37Z")
Hi, dears. I deployed a 3-node elastic cluster with default docker-compose in the Elastic document. but expect the master node, other nodes are offline. Are there any additional settings that I have to do? also why m… --- ## [How to let Logstash read all my Input texts Files automatically](https://discuss.elastic.co/t/how-to-let-logstash-read-all-my-input-texts-files-automatically/171724)
**Author:** [@samyo](https://discuss.elastic.co/u/samyo)\ **Replies:** 10\ **Last updated:** [March 11, 2019, 2:54pm UTC](https://discuss.elastic.co/t/how-to-let-logstash-read-all-my-input-texts-files-automatically/171724 "2019-03-11T14:54:34Z")
Hello Folks, i need some help to know if its Possible, to let Logstash read my 1000 Textfiles separately and automatically from the Input. I have about 1000 textfiles , each textfile has his name and different text ins… --- ## [Create visualization and dashboard through Java REST jest client?](https://discuss.elastic.co/t/create-visualization-and-dashboard-through-java-rest-jest-client/243566)
**Author:** [@Redcxx](https://discuss.elastic.co/u/Redcxx)\ **Replies:** 9\ **Last updated:** [August 14, 2020, 6:19pm UTC](https://discuss.elastic.co/t/create-visualization-and-dashboard-through-java-rest-jest-client/243566 "2020-08-14T18:19:07Z")
Hi may I know if there is a way to create visualization and dashboard through jest client? I know that there is an experimental saved\_objects api but I am not sure how can I access that using Jest client. --- ## [Unresponsive Cluster](https://discuss.elastic.co/t/unresponsive-cluster/65070)
**Author:** [@fvegaucr](https://discuss.elastic.co/u/fvegaucr)\ **Replies:** 9\ **Last updated:** [December 20, 2016, 10:46pm UTC](https://discuss.elastic.co/t/unresponsive-cluster/65070 "2016-12-20T22:46:37Z")
Im having issues with my cluster.The cluster has 3 master and 15 nodes 13 are data nodes and 2 are edge nodes. The cluster was working before, and I did a change in one of the templates that we use. The original config … --- ## [Are there plans to support “accurate distinct”？](https://discuss.elastic.co/t/are-there-plans-to-support-accurate-distinct/232808)
**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\ **Replies:** 13\ **Last updated:** [May 29, 2020, 10:20am UTC](https://discuss.elastic.co/t/are-there-plans-to-support-accurate-distinct/232808 "2020-05-29T10:20:09Z")
In the field of big data，many olap engine already support “accurate distinct” ,such as kylin，clickhouse。Those engine can calculate Ultra High Cardinality(billion level ) in less than a second 。Dose elasticsearch has any… --- ## [What to do with ES?](https://discuss.elastic.co/t/what-to-do-with-es/8607)
**Author:** [@Bernd\_Fehling](https://discuss.elastic.co/u/Bernd_Fehling)\ **Replies:** 16\ **Last updated:** [August 7, 2012, 12:03am UTC](https://discuss.elastic.co/t/what-to-do-with-es/8607 "2012-08-07T00:03:16Z")
Well, after having ES installed and set up 2 nodes on one machine for testing I tried to get some content into ES. The results are very bad. After 2 days not a single useful doc with an acceptable mapping. Best I c… --- ## [Cluster freeze](https://discuss.elastic.co/t/cluster-freeze/150581)
**Author:** [@Fabrice\_Granatieri](https://discuss.elastic.co/u/Fabrice_Granatieri)\ **Replies:** 10\ **Last updated:** [October 3, 2018, 1:08pm UTC](https://discuss.elastic.co/t/cluster-freeze/150581 "2018-10-03T13:08:49Z")
Hi. Our cluster is: 11 servers with each 128 GB RAM a total of 3 masters and 33 data with each 19 GB allowed for the heap So 3 or 4 (for the 3 masters nodes) nodes per server 53 TB of data for over 5 billions of doc… --- ## [Kibana - Enterprise Search Connector Issue](https://discuss.elastic.co/t/kibana-enterprise-search-connector-issue/360248)
**Author:** [@longansoju](https://discuss.elastic.co/u/longansoju)\ **Replies:** 15\ **Last updated:** [May 29, 2024, 10:10am UTC](https://discuss.elastic.co/t/kibana-enterprise-search-connector-issue/360248 "2024-05-29T10:10:11Z")
Hi All, I was trying to migrate my connector configurations over from my testing environment into my live environment. However, every single time i enter the configuration page of my connector, it prompts the error "An u… --- ## [Do I need to remove old .yml file while upgrading Elasticsearch?](https://discuss.elastic.co/t/do-i-need-to-remove-old-yml-file-while-upgrading-elasticsearch/118369)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 9\ **Last updated:** [February 5, 2018, 2:21am UTC](https://discuss.elastic.co/t/do-i-need-to-remove-old-yml-file-while-upgrading-elasticsearch/118369 "2018-02-05T02:21:54Z")
Hi, I am trying to upgrade Elasticsearch. Do I need to remove old .yml file while upgrading Elasticsearch to a newer version? In the documentation it is mentioned as - ''Use rpm or dpkg to install the new package. All … --- ## [Cluster unstable and running slowly](https://discuss.elastic.co/t/cluster-unstable-and-running-slowly/70377)
**Author:** [@mvleandro](https://discuss.elastic.co/u/mvleandro)\ **Replies:** 10\ **Last updated:** [January 4, 2017, 1:55pm UTC](https://discuss.elastic.co/t/cluster-unstable-and-running-slowly/70377 "2017-01-04T13:55:40Z")
Hello everyone! I am running a cluster with 7 nodes under version 5.1.1. I've upgraded this cluster from old 2.x version 20 days before and he was running ok until today. After today 2pm all the requests made to t… --- ## [Why my bulk request not using all cpus of others node?](https://discuss.elastic.co/t/why-my-bulk-request-not-using-all-cpus-of-others-node/180285)
**Author:** [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\ **Replies:** 26\ **Last updated:** [May 11, 2019, 8:35pm UTC](https://discuss.elastic.co/t/why-my-bulk-request-not-using-all-cpus-of-others-node/180285 "2019-05-11T20:35:04Z")
Hi Team, Below is my output of thread pool. I dont know why my only one node'cpu is being use for bulk request. curl -X GET "myhost:9200/\_cat/thread\_pool/?v" node\_name name active queue rejected node… --- ## [File transfer error from logstash to elasticsearch](https://discuss.elastic.co/t/file-transfer-error-from-logstash-to-elasticsearch/313950)
**Author:** [@Sagar\_Shrestha](https://discuss.elastic.co/u/Sagar_Shrestha)\ **Replies:** 9\ **Last updated:** [September 9, 2022, 12:54pm UTC](https://discuss.elastic.co/t/file-transfer-error-from-logstash-to-elasticsearch/313950 "2022-09-09T12:54:41Z")
In my windows machine. My Logstash is working fine as administrator. When I input any raw data in the console (when input is stdin { } ) it is indexed into the Elasticsearch. But when any file format document is executed… --- ## [Need help calculating weekly averages using either TSVB tables or Scripted fields](https://discuss.elastic.co/t/need-help-calculating-weekly-averages-using-either-tsvb-tables-or-scripted-fields/271472)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 9\ **Last updated:** [April 30, 2021, 4:29am UTC](https://discuss.elastic.co/t/need-help-calculating-weekly-averages-using-either-tsvb-tables-or-scripted-fields/271472 "2021-04-30T04:29:35Z")
I have an index with the following structure - @timestamp the format is Apr 25, 2021 @ 05:30:00.000, all of the documents have this same time however the dates vary eg. Apr 26, 2021 @ 05:30:00.000 The next field is a … --- ## [.Net Agent Instrumentation for IIS hosted app](https://discuss.elastic.co/t/net-agent-instrumentation-for-iis-hosted-app/233784)
**Author:** [@joychatterjee05](https://discuss.elastic.co/u/joychatterjee05)\ **Replies:** 11\ **Last updated:** [June 5, 2020, 11:09am UTC](https://discuss.elastic.co/t/net-agent-instrumentation-for-iis-hosted-app/233784 "2020-06-05T11:09:58Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.7 … --- ## [How to remove formatting from visualization?](https://discuss.elastic.co/t/how-to-remove-formatting-from-visualization/132539)
**Author:** [@gregpaskal](https://discuss.elastic.co/u/gregpaskal)\ **Replies:** 11\ **Last updated:** [May 29, 2018, 3:43pm UTC](https://discuss.elastic.co/t/how-to-remove-formatting-from-visualization/132539 "2018-05-29T15:43:12Z")
I have a super basic question about formatting visualizations. I'm finding Kibana wants to add all sorts of helpers to my visualizations. I've attached a screenshot of some type of expander which expands this visualizati… --- ## ["could not load fields from index" in datafeed while creating a ML job](https://discuss.elastic.co/t/could-not-load-fields-from-index-in-datafeed-while-creating-a-ml-job/220693)
**Author:** [@higee](https://discuss.elastic.co/u/higee)\ **Replies:** 9\ **Last updated:** [February 26, 2020, 7:42pm UTC](https://discuss.elastic.co/t/could-not-load-fields-from-index-in-datafeed-while-creating-a-ml-job/220693 "2020-02-26T19:42:50Z")
Hi, I am trying to create a ML job with Advanced Job Creation. The thing is I get an error from datafeed tab that it "Could not load fields from index". I wonder what exactly is going wrong. For instance, if I go to Dat… --- ## [Marvel reflect changes very slowly](https://discuss.elastic.co/t/marvel-reflect-changes-very-slowly/50119)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 9\ **Last updated:** [May 17, 2016, 6:19pm UTC](https://discuss.elastic.co/t/marvel-reflect-changes-very-slowly/50119 "2016-05-17T18:19:39Z")
I just upgraded elasticsearch from 2.1 to 2.3, in my elasticsearch cluster, there is 1 master&data node, 1 data node, and one client node. Marvel is installed in all the three nodes. I found that Marvel reflect index c… --- ## [Unable to parse multiline json data into logstash](https://discuss.elastic.co/t/unable-to-parse-multiline-json-data-into-logstash/284114)
**Author:** [@Magesh\_02](https://discuss.elastic.co/u/Magesh_02)\ **Replies:** 11\ **Last updated:** [September 24, 2021, 6:17am UTC](https://discuss.elastic.co/t/unable-to-parse-multiline-json-data-into-logstash/284114 "2021-09-24T06:17:09Z")
I have tried to parse my json data into logstash data with separate fields. But unable to parse my data, logstash console struck on pipeline starts line input : { "id": 1, "first\_name": "Frank", "las… --- ## [Chain Transform for an action](https://discuss.elastic.co/t/chain-transform-for-an-action/151659)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 11\ **Last updated:** [October 16, 2018, 3:23pm UTC](https://discuss.elastic.co/t/chain-transform-for-an-action/151659 "2018-10-16T15:23:18Z")
I need to do two queries across two indexes in my email action, however, I cannot get the transform to save. Also I'm not sure setting up the transform, how I can call the context between the two searches without a name.… --- ## [Fleet AWS Cloudtrail integration stops working after upgrading elastic agent to 7.12.0](https://discuss.elastic.co/t/fleet-aws-cloudtrail-integration-stops-working-after-upgrading-elastic-agent-to-7-12-0/269120)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 10\ **Last updated:** [May 31, 2021, 12:05pm UTC](https://discuss.elastic.co/t/fleet-aws-cloudtrail-integration-stops-working-after-upgrading-elastic-agent-to-7-12-0/269120 "2021-05-31T12:05:22Z")
Hi all, We have a working AWS CloudTrail integration with Elastic agent 7.10.1. After upgrading to 7.12 the cloud trail data stops working without any error in the log. I have tried to enabled debug level on agent but … --- ## [APM Server Cluster Monitoring in Kibana](https://discuss.elastic.co/t/apm-server-cluster-monitoring-in-kibana/164587)
**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\ **Replies:** 10\ **Last updated:** [January 22, 2019, 10:07am UTC](https://discuss.elastic.co/t/apm-server-cluster-monitoring-in-kibana/164587 "2019-01-22T10:07:47Z")
Hi, We've set up an Elastic APM cluster composed of three APM servers fronted by Haproxy. Load testing result has been great on this stack, and I could see that all APM Server instances are happily distributing the loa… --- ## [Facet on Nested Objects filtered by Outer object?](https://discuss.elastic.co/t/facet-on-nested-objects-filtered-by-outer-object/9553)
**Author:** [@phill](https://discuss.elastic.co/u/phill)\ **Replies:** 9\ **Last updated:** [November 8, 2012, 6:48am UTC](https://discuss.elastic.co/t/facet-on-nested-objects-filtered-by-outer-object/9553 "2012-11-08T06:48:12Z")
Is there a way to limit nested objects by something in the outer objects and then do a facet on the nested objects? What I tried was: (1) Filter for a list of nested of objects that match on two fields in the nes… --- ## [Migrating from Elastic 2 to 5](https://discuss.elastic.co/t/migrating-from-elastic-2-to-5/154353)
**Author:** [@praveenoma](https://discuss.elastic.co/u/praveenoma)\ **Replies:** 12\ **Last updated:** [November 19, 2018, 6:04pm UTC](https://discuss.elastic.co/t/migrating-from-elastic-2-to-5/154353 "2018-11-19T18:04:36Z")
We are migrating from Spring Boot 1.x (comes with Elastic 2) to Spring Boot 2.x (comes with Elastic 5) In Spring boot 1 (i.e Elastic 2), we've used the NodeBuilder api to create in memory nodes on demand. With Spr… --- ## [Java HotSpot(TM) 64-Bit Server VM warning: Cannot open file logs/gc.log due to No such file or directory on mac](https://discuss.elastic.co/t/java-hotspot-tm-64-bit-server-vm-warning-cannot-open-file-logs-gc-log-due-to-no-such-file-or-directory-on-mac/195943)
**Author:** [@nijanthan0](https://discuss.elastic.co/u/nijanthan0)\ **Replies:** 9\ **Last updated:** [August 21, 2019, 5:41am UTC](https://discuss.elastic.co/t/java-hotspot-tm-64-bit-server-vm-warning-cannot-open-file-logs-gc-log-due-to-no-such-file-or-directory-on-mac/195943 "2019-08-21T05:41:15Z")
\[2019-08-20T19:07:05,100\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[unknown\] uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to obtain … --- ## [Change a Number Field Value](https://discuss.elastic.co/t/change-a-number-field-value/184008)
**Author:** [@gerard.ramos](https://discuss.elastic.co/u/gerard.ramos)\ **Replies:** 11\ **Last updated:** [June 4, 2019, 2:20pm UTC](https://discuss.elastic.co/t/change-a-number-field-value/184008 "2019-06-04T14:20:33Z")
Hi, I was trying to change a value of Windows Event Logs or add a field in a other case. I tried this: filter { if \[log.level\] == "information" { mutate { replace =\> { "\[log.level\]" =\> "información" } } } else i… --- ## [Regex not working with painless](https://discuss.elastic.co/t/regex-not-working-with-painless/284221)
**Author:** [@forst](https://discuss.elastic.co/u/forst)\ **Replies:** 9\ **Last updated:** [September 28, 2021, 2:19pm UTC](https://discuss.elastic.co/t/regex-not-working-with-painless/284221 "2021-09-28T14:19:03Z")
I'm trying to write a regex query for a java log error as following \[Poolthread\] com.xxxx.content.core-bundle com.xxxxx.content.model.impl.RegisterTypeInternal(3179)\] The activate method has thrown an exception (com.xxx… --- ## [Setting index false increases the index storage size](https://discuss.elastic.co/t/setting-index-false-increases-the-index-storage-size/232324)
**Author:** [@thinkshard](https://discuss.elastic.co/u/thinkshard)\ **Replies:** 10\ **Last updated:** [May 22, 2020, 3:05am UTC](https://discuss.elastic.co/t/setting-index-false-increases-the-index-storage-size/232324 "2020-05-22T03:05:49Z")
Hi, In an effort to reduce document storage size, I added the index false property to several fields in my index mapping template for fields of type text, keyword and numerical types. To measure how much storage space … --- ## [LOGSTASH - GSUB - DOESN'T MATCH](https://discuss.elastic.co/t/logstash-gsub-doesnt-match/279227)
**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\ **Replies:** 13\ **Last updated:** [July 23, 2021, 7:18am UTC](https://discuss.elastic.co/t/logstash-gsub-doesnt-match/279227 "2021-07-23T07:18:27Z")
Hi I tried to change a value in a field for use it like id but i couldn't modify the field value with gsub The data i have in the field is like this: rId = ABC0\_L123456\_789012 and only data i want is 123456 from rId, t… --- ## [Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/313838)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 10\ **Last updated:** [September 8, 2022, 10:15am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/313838 "2022-09-08T10:15:28Z")
I have elastic cluster, one node removed(automatically) from the cluster and log shows "Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]" elastic version 8.1 --- ## [Creating type in ES](https://discuss.elastic.co/t/creating-type-in-es/308666)
**Author:** [@smitak](https://discuss.elastic.co/u/smitak)\ **Replies:** 23\ **Last updated:** [July 15, 2022, 12:13pm UTC](https://discuss.elastic.co/t/creating-type-in-es/308666 "2022-07-15T12:13:18Z")
Hello , I am new to Elasticsearch. I have created index. And Now adding type and document. But getting error. {"error":"no handler found for uri \[/my\_first\_index/message\] and method \[POST\]"} Entering this command c… --- ## [Elasticsearch Kibana 9.4.0 Basic authentication returns 401 Unauthorized](https://discuss.elastic.co/t/elasticsearch-kibana-9-4-0-basic-authentication-returns-401-unauthorized/386318)
**Author:** [@GeertVerbeurgt](https://discuss.elastic.co/u/GeertVerbeurgt)\ **Replies:** 37\ **Last updated:** [May 22, 2026, 11:05am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-9-4-0-basic-authentication-returns-401-unauthorized/386318 "2026-05-22T11:05:15Z")
After upgrading from elasticsearch/kibana version 9.3.0 to elasticsearch/kibana 9.4.0 I'm no longer able to login with basic authentication via the Authorization Header. This returns the error 401 Unauthorized. { "ser… --- ## [Logstash Date Result in one day late](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 9\ **Last updated:** [October 10, 2016, 5:37am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465 "2016-10-10T05:37:48Z")
my field "sdatetime" value is "2016 Aug 31 00:47:17Aug 31 00:47:17" I did the following date { match =\> \[ "sdatetime", "YYYY MMM dd HH:mm:ss" \] target =\> "sdatetime2" } The result is "sdatetime… --- ## [Query\_string filter syntax bug (v1.7)](https://discuss.elastic.co/t/query-string-filter-syntax-bug-v1-7/40215)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 9\ **Last updated:** [January 27, 2016, 1:07pm UTC](https://discuss.elastic.co/t/query-string-filter-syntax-bug-v1-7/40215 "2016-01-27T13:07:21Z")
im looking for the bug in the following query, as it doesn't bring any results. i want it to act like terms filter, and look for exact values in the country / device fields GET idx/type/\_search { "query": … --- ## [Error on fleet-server install](https://discuss.elastic.co/t/error-on-fleet-server-install/344346)
**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\ **Replies:** 13\ **Last updated:** [October 11, 2023, 5:54pm UTC](https://discuss.elastic.co/t/error-on-fleet-server-install/344346 "2023-10-11T17:54:34Z")
hi there, I'm trying to install fleet-server on a VM with CentOS 7. In this same VM I already have elasticsearch (8.9.0), logstash and kibana (version 8.6.1) installed. To install I am using the commands below (advanc… --- ## [Is there a way to limit RES memory used by ES](https://discuss.elastic.co/t/is-there-a-way-to-limit-res-memory-used-by-es/209100)
**Author:** [@rnataraja](https://discuss.elastic.co/u/rnataraja)\ **Replies:** 9\ **Last updated:** [November 25, 2019, 8:08am UTC](https://discuss.elastic.co/t/is-there-a-way-to-limit-res-memory-used-by-es/209100 "2019-11-25T08:08:57Z")
ES 6.8.3 I understand from reading up through forum that ES will use more than actually the Heap Max. On our systems we see that if its given 32Gig of Max Heap. It slowly keeps increasing and consumes a lot more than 32… --- ## [Newbie Question (Real user monitoring): how do I track browser and device origin?](https://discuss.elastic.co/t/newbie-question-real-user-monitoring-how-do-i-track-browser-and-device-origin/178643)
**Author:** [@amit\_e](https://discuss.elastic.co/u/amit_e)\ **Replies:** 9\ **Last updated:** [May 9, 2019, 6:59am UTC](https://discuss.elastic.co/t/newbie-question-real-user-monitoring-how-do-i-track-browser-and-device-origin/178643 "2019-05-09T06:59:51Z")
I gave just got myself a paid elasticsearch account and installed RUM on my website (ref: https://www.elastic.co/blog/performing-real-user-monitoring-rum-with-elastic-apm). I now want to track custom events on my 4-step… --- ## [Deleted ingest pipeline, doh! - Can't get it Back](https://discuss.elastic.co/t/deleted-ingest-pipeline-doh-cant-get-it-back/280687)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 11\ **Last updated:** [August 7, 2021, 8:27am UTC](https://discuss.elastic.co/t/deleted-ingest-pipeline-doh-cant-get-it-back/280687 "2021-08-07T08:27:52Z")
Hey there, I configured Fleet in the console, installed/enrolled an agent down on my server and configured an integration.. Moments later i got logs and kibana was happy. I'm an idiot and accidently deleted the ingest … --- ## [Indices problem](https://discuss.elastic.co/t/indices-problem/136813)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 20\ **Last updated:** [June 21, 2018, 10:30am UTC](https://discuss.elastic.co/t/indices-problem/136813 "2018-06-21T10:30:50Z")
Hi, I think I made a mistake, curator wouldn't work and I went to /elasticeasrch/nodes/0/indices and I deleste all indices !! :confused: Now I can't receive any logs :confused: --- ## [How do I get Enterprise search to use my existing indexes?](https://discuss.elastic.co/t/how-do-i-get-enterprise-search-to-use-my-existing-indexes/288583)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 10\ **Last updated:** [November 9, 2021, 6:38am UTC](https://discuss.elastic.co/t/how-do-i-get-enterprise-search-to-use-my-existing-indexes/288583 "2021-11-09T06:38:43Z")
Elasticsearch + Kibana + Enterprise Search (7.15.1) all running in a docker container on a Synology NAS. /volume2/docker I used FSCrawler-some months ago to generated indexes which are stored in /volume4/Elasticsearch/… [Previous page](https://discuss.elastic.co/top.md?page=180&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=182&per_page=50&period=all)