# Top **URL:** https://discuss.elastic.co/top.md?page=222&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 223 --- ## [Logstash pluguin to march multiline logs?](https://discuss.elastic.co/t/logstash-pluguin-to-march-multiline-logs/186399)
**Author:** [@gerard.ramos](https://discuss.elastic.co/u/gerard.ramos)\ **Replies:** 9\ **Last updated:** [July 2, 2019, 2:44pm UTC](https://discuss.elastic.co/t/logstash-pluguin-to-march-multiline-logs/186399 "2019-07-02T14:44:01Z")
Hello everyone, I was trying to send logs to Elasticsearch, this logs are in a file and they are multiline like this: ERROR 2019-06-18 05:00:15,919 \[pool-1-thread-147\] somelongtexthere moretext moretext some text some… --- ## [Help with jdbc rivers and type mapping](https://discuss.elastic.co/t/help-with-jdbc-rivers-and-type-mapping/17291)
**Author:** [@Eric\_Sims](https://discuss.elastic.co/u/Eric_Sims)\ **Replies:** 9\ **Last updated:** [May 1, 2014, 12:58pm UTC](https://discuss.elastic.co/t/help-with-jdbc-rivers-and-type-mapping/17291 "2014-05-01T12:58:47Z")
i can't seem to understand how to fully set up my type mappings while using jdbc rivers and sql server. here's an example. PUT /\_river/mytest\_river/\_meta { "type": "jdbc", "jdbc": { "url":"jdbc:… --- ## [Conditionally aggregating documents in an index?](https://discuss.elastic.co/t/conditionally-aggregating-documents-in-an-index/171560)
**Author:** [@propel](https://discuss.elastic.co/u/propel)\ **Replies:** 11\ **Last updated:** [March 8, 2019, 11:32pm UTC](https://discuss.elastic.co/t/conditionally-aggregating-documents-in-an-index/171560 "2019-03-08T23:32:44Z")
I'm trying to conditionally aggregate documents in my index based on the existence of another document in the same set. Imagine the following series: {"action": "pressed\_submit", "user": 1, "timestamp": "2016-01-01 00:0… --- ## [I try to ingest the data from S3 bucket to opensearch dashboards using logstash](https://discuss.elastic.co/t/i-try-to-ingest-the-data-from-s3-bucket-to-opensearch-dashboards-using-logstash/360781)
**Author:** [@Rathiga\_Thambu](https://discuss.elastic.co/u/Rathiga_Thambu)\ **Replies:** 16\ **Last updated:** [June 6, 2024, 4:32pm UTC](https://discuss.elastic.co/t/i-try-to-ingest-the-data-from-s3-bucket-to-opensearch-dashboards-using-logstash/360781 "2024-06-06T16:32:05Z")
\[2024-06-04T11:09:21,409\]\[INFO \]\[logstash.javapipeline \]\[main\] Pipeline terminated {"pipeline.id"=\>"main"} \[2024-06-04T11:09:21,484\]\[ERROR\]\[logstash.agent \] Failed to execute action {:id=\>:main, :action\_typ… --- ## [Separate shards](https://discuss.elastic.co/t/separate-shards/74781)
**Author:** [@Amin1](https://discuss.elastic.co/u/Amin1)\ **Replies:** 9\ **Last updated:** [February 12, 2017, 10:20am UTC](https://discuss.elastic.co/t/separate-shards/74781 "2017-02-12T10:20:50Z")
Hi all I have design this structure for my enterprise network with more than 280 server : Logstash(1)===\>Docker (Redis)=====\>Logstash(2)=======\>Elasticsearch(Clustre) my config is as follow : logstash1 : i… --- ## [Determining the count of words in a given field](https://discuss.elastic.co/t/determining-the-count-of-words-in-a-given-field/359578)
**Author:** [@Honestabe](https://discuss.elastic.co/u/Honestabe)\ **Replies:** 10\ **Last updated:** [May 21, 2024, 9:44pm UTC](https://discuss.elastic.co/t/determining-the-count-of-words-in-a-given-field/359578 "2024-05-21T21:44:02Z")
I wrote a painless script to determine the word count in a particular filed emit (doc\['skus.keyword'\].length) the problem is that it doesn't count duplicates. so if there is more than one of the same keyword it only… --- ## [Filebeats only sends logs when I have filebeat -e running](https://discuss.elastic.co/t/filebeats-only-sends-logs-when-i-have-filebeat-e-running/245088)
**Author:** [@plegault](https://discuss.elastic.co/u/plegault)\ **Replies:** 10\ **Last updated:** [August 19, 2020, 11:58am UTC](https://discuss.elastic.co/t/filebeats-only-sends-logs-when-i-have-filebeat-e-running/245088 "2020-08-19T11:58:57Z")
I'm new to configuring ELK stack. I had it setup without ssl and with ssl and back to without ssl. I did this because I was not able to get apache and mysql to send logs to the elk stack. I tried to send it to output.ela… --- ## [Xml plugin getting text with characters](https://discuss.elastic.co/t/xml-plugin-getting-text-with-characters/180389)
**Author:** [@bigster](https://discuss.elastic.co/u/bigster)\ **Replies:** 10\ **Last updated:** [May 17, 2019, 10:02am UTC](https://discuss.elastic.co/t/xml-plugin-getting-text-with-characters/180389 "2019-05-17T10:02:34Z")
Hi, I'm getting the XML values from a QUEUE and when i get an element that have the '&' character it transforms into the & string. Here are the before and after: gz$LDQ@vnbkj7DNUVwwjrnGa0&|2,a) gz$LDQ@vnbkj7DNU… --- ## [Jdbc input sql\_last\_value from another source?](https://discuss.elastic.co/t/jdbc-input-sql-last-value-from-another-source/307090)
**Author:** [@Chris\_Kessel](https://discuss.elastic.co/u/Chris_Kessel)\ **Replies:** 9\ **Last updated:** [June 14, 2022, 4:48pm UTC](https://discuss.elastic.co/t/jdbc-input-sql-last-value-from-another-source/307090 "2022-06-14T16:48:31Z")
I've been struggling for a couple days on this. I'm using the jdbc input plugin, but I need to source the sql\_last\_value from a DB query against another DB rather than having it pull from last\_run\_metadata\_path . So: f… --- ## [Index in elastic](https://discuss.elastic.co/t/index-in-elastic/296909)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 9\ **Last updated:** [February 11, 2022, 11:16am UTC](https://discuss.elastic.co/t/index-in-elastic/296909 "2022-02-11T11:16:05Z")
Hello, I'm new to elastic, tell me if it's possible to do such a thing, create an index pattern, for example “index-\*” without adding %{+YYYY.MM.dd} , but so that an index like this is automatically created on the onset … --- ## [Search query total hits not adding up when using multiple queries](https://discuss.elastic.co/t/search-query-total-hits-not-adding-up-when-using-multiple-queries/242676)
**Author:** [@antonsamper](https://discuss.elastic.co/u/antonsamper)\ **Replies:** 9\ **Last updated:** [July 28, 2020, 1:13pm UTC](https://discuss.elastic.co/t/search-query-total-hits-not-adding-up-when-using-multiple-queries/242676 "2020-07-28T13:13:50Z")
I have encountered a strange problem whereby the total hits don't seem to be adding up when I use multiple filters. I have an index with around 40 million documents. A typical document looks like something like this: {… --- ## [Problem mapping response to Model class \[Elasticsearch.NET 8.13\]](https://discuss.elastic.co/t/problem-mapping-response-to-model-class-elasticsearch-net-8-13/357896)
**Author:** [@hiilmiee](https://discuss.elastic.co/u/hiilmiee)\ **Replies:** 12\ **Last updated:** [May 28, 2024, 7:11am UTC](https://discuss.elastic.co/t/problem-mapping-response-to-model-class-elasticsearch-net-8-13/357896 "2024-05-28T07:11:36Z")
Hi, I am unable to map the ElasticsearchClient SearchASync result into my data model. Gotten a conversion error: The server encountered an error processing the request. Please see the \[service help page\] for constructin… --- ## [Limit number of fields without actually having to delete anything or hampering visualisations](https://discuss.elastic.co/t/limit-number-of-fields-without-actually-having-to-delete-anything-or-hampering-visualisations/156927)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 12\ **Last updated:** [November 19, 2018, 12:31pm UTC](https://discuss.elastic.co/t/limit-number-of-fields-without-actually-having-to-delete-anything-or-hampering-visualisations/156927 "2018-11-19T12:31:57Z")
Hi, Number of fields in my index is shooting above the limit (1000). I don't want to increase the limit any further (to avoid mapping explosion) . But rather planning on to cut down on the number of fields. There are fi… --- ## [Memory issues on ES client node](https://discuss.elastic.co/t/memory-issues-on-es-client-node/18420)
**Author:** [@Venkat\_Morampudi](https://discuss.elastic.co/u/Venkat_Morampudi)\ **Replies:** 10\ **Last updated:** [July 10, 2014, 3:43am UTC](https://discuss.elastic.co/t/memory-issues-on-es-client-node/18420 "2014-07-10T03:43:22Z")
In the elastic search deployment we are seeing random client node crashed due to out of memory exception. I got the memory dump from one of the crash and analysed using Eclipse memory analyzer. I have attached leak s… --- ## [Search a string using logstash](https://discuss.elastic.co/t/search-a-string-using-logstash/265607)
**Author:** [@Rabin\_Bhattacharya](https://discuss.elastic.co/u/Rabin_Bhattacharya)\ **Replies:** 9\ **Last updated:** [March 2, 2021, 6:29am UTC](https://discuss.elastic.co/t/search-a-string-using-logstash/265607 "2021-03-02T06:29:04Z")
Hi, We have a requirement to parse a XML ( XML2) which is available as a string within a XML( XML1) document. I was able to parse the XML1 using xml filter in logstash. Please help to parse /search a particular string w… --- ## [Delete / purge data from fields](https://discuss.elastic.co/t/delete-purge-data-from-fields/200959)
**Author:** [@shappy123](https://discuss.elastic.co/u/shappy123)\ **Replies:** 9\ **Last updated:** [October 1, 2019, 11:51pm UTC](https://discuss.elastic.co/t/delete-purge-data-from-fields/200959 "2019-10-01T23:51:39Z")
Hi Guys, Would highly appreciate if you guys can please assist me on this , I need to delete/purge existing + old data which contains these fields : fields.SourceContext & fields.RequestBody under the fields.applicatio… --- ## [Kibana4 Beta3: Battling with wildcard search on not\_analyzed fields](https://discuss.elastic.co/t/kibana4-beta3-battling-with-wildcard-search-on-not-analyzed-fields/21936)
**Author:** [@Ali\_Kheyrollahi](https://discuss.elastic.co/u/Ali_Kheyrollahi)\ **Replies:** 12\ **Last updated:** [February 4, 2015, 1:14pm UTC](https://discuss.elastic.co/t/kibana4-beta3-battling-with-wildcard-search-on-not-analyzed-fields/21936 "2015-02-04T13:14:05Z")
Hi, I really haven't found a consistent way to use query window in Discover or Visualize tabs. My results become hit and miss and inconsistent. So I am searching for types of "my\_type" and I have a field called … --- ## [Delete Records in ES](https://discuss.elastic.co/t/delete-records-in-es/16660)
**Author:** [@Arun\_Prasath](https://discuss.elastic.co/u/Arun_Prasath)\ **Replies:** 12\ **Last updated:** [March 29, 2014, 8:57am UTC](https://discuss.elastic.co/t/delete-records-in-es/16660 "2014-03-29T08:57:54Z")
Hi, I would need to delete records from particular Type with date range. I'm trying following command but it deletes all records from index. Is it right way to delete records. DELETE /index/type/ { "… --- ## [How to embed kibana dashboard in html code?](https://discuss.elastic.co/t/how-to-embed-kibana-dashboard-in-html-code/343748)
**Author:** [@Jyoti\_Pandey](https://discuss.elastic.co/u/Jyoti_Pandey)\ **Replies:** 11\ **Last updated:** [October 3, 2023, 8:56am UTC](https://discuss.elastic.co/t/how-to-embed-kibana-dashboard-in-html-code/343748 "2023-10-03T08:56:29Z")
i paste the iframe code in any external site, kibana login page appears when i enter my username and password the login page just gets reloaded and asks for the username and password again. the same process is repeating … --- ## [Search for documents containing words with and without dots (e.g. “ceo”, “c.e.o”, “c.e.o.”)](https://discuss.elastic.co/t/search-for-documents-containing-words-with-and-without-dots-e-g-ceo-c-e-o-c-e-o/319035)
**Author:** [@revencu](https://discuss.elastic.co/u/revencu)\ **Replies:** 11\ **Last updated:** [November 16, 2022, 11:43am UTC](https://discuss.elastic.co/t/search-for-documents-containing-words-with-and-without-dots-e-g-ceo-c-e-o-c-e-o/319035 "2022-11-16T11:43:04Z")
{ "query":{ "match":{ "title": "ceo" } } } this query returns docs that only contain "ceo", "Ceo", "CEO". But the index has values like "c.e.o.", "C.E.O.", "c.e.o" How to set up a query so th… --- ## [Cat api nodes returning stale data?](https://discuss.elastic.co/t/cat-api-nodes-returning-stale-data/254656)
**Author:** [@falkenbt](https://discuss.elastic.co/u/falkenbt)\ **Replies:** 9\ **Last updated:** [November 9, 2020, 4:00pm UTC](https://discuss.elastic.co/t/cat-api-nodes-returning-stale-data/254656 "2020-11-09T16:00:46Z")
ES version: 7.7.1 In our startup/shutdown scripts we call \_cat/nodes in order to get the number of running nodes to decide if we need to change the shard allocation (only the first stop should change it). The script the… --- ## [Combine Platinum version with Free license version](https://discuss.elastic.co/t/combine-platinum-version-with-free-license-version/354834)
**Author:** [@ekas](https://discuss.elastic.co/u/ekas)\ **Replies:** 14\ **Last updated:** [March 11, 2024, 11:35am UTC](https://discuss.elastic.co/t/combine-platinum-version-with-free-license-version/354834 "2024-03-11T11:35:46Z")
Hi! I deployed 1 ELK stack on premise. I have only 1 Elastic node. I am going to upgrade my license from Free to Platinum (still on premise) and delete the ELK free version cluster. I am going to buy only 1 Elastic no… --- ## [Help on a special visualisation](https://discuss.elastic.co/t/help-on-a-special-visualisation/147075)
**Author:** [@CryptArks](https://discuss.elastic.co/u/CryptArks)\ **Replies:** 12\ **Last updated:** [September 11, 2018, 1:22pm UTC](https://discuss.elastic.co/t/help-on-a-special-visualisation/147075 "2018-09-11T13:22:12Z")
Hello everyone, I'm having troubles looking for a unique count formula. Here's how my data is working : PUT /general { "mappings": { "events": { "properties": { "type": { "type": "keyword… --- ## [Analyzer configuration](https://discuss.elastic.co/t/analyzer-configuration/13377)
**Author:** [@Mingfeng\_Yang](https://discuss.elastic.co/u/Mingfeng_Yang)\ **Replies:** 10\ **Last updated:** [August 29, 2013, 4:08pm UTC](https://discuss.elastic.co/t/analyzer-configuration/13377 "2013-08-29T16:08:01Z")
How should I configure my analyzer so that search for word "search" will also include results containing words of its variations like "searching", "searched"? Right now, I have the following in config/elasticsearch.… --- ## [Filter for logstash](https://discuss.elastic.co/t/filter-for-logstash/68016)
**Author:** [@Deepak\_Mann](https://discuss.elastic.co/u/Deepak_Mann)\ **Replies:** 11\ **Last updated:** [December 6, 2016, 10:21am UTC](https://discuss.elastic.co/t/filter-for-logstash/68016 "2016-12-06T10:21:36Z")
launch TIMESTAMP START: 2016.11.15 05:30:23 INFO: 200000 packets. Current packet is class com.navtech.kernel.flat.FlatCombo \[Loader\] \[tstamp: 1866 time: 1851.4 (30:51) split: 03.2\] \[Memory: 3.320G total: 22.20G free: 18.… --- ## [Is there a way to overcome "cross object" search matches in Elastic Search when using nested types?](https://discuss.elastic.co/t/is-there-a-way-to-overcome-cross-object-search-matches-in-elastic-search-when-using-nested-types/11960)
**Author:** [@rakesh\_rakshit](https://discuss.elastic.co/u/rakesh_rakshit)\ **Replies:** 11\ **Last updated:** [May 16, 2013, 10:32am UTC](https://discuss.elastic.co/t/is-there-a-way-to-overcome-cross-object-search-matches-in-elastic-search-when-using-nested-types/11960 "2013-05-16T10:32:13Z")
Hi all, I have one of the column which is nested and has structure similar to this: { "obj1" : \[ { "name" : "blue", "count" : 4 }, { "name" : "green", "count" : 6 } \] } Now if I want to search an object with… --- ## [Перенос данных с 5.6.2 на 7.7.1 версию (reindex from a remote) и консистентность данных](https://discuss.elastic.co/t/5-6-2-7-7-1-reindex-from-a-remote/237477)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 9\ **Last updated:** [June 17, 2020, 8:04pm UTC](https://discuss.elastic.co/t/5-6-2-7-7-1-reindex-from-a-remote/237477 "2020-06-17T20:04:43Z")
Добрый день! Выполняю перенос данных из 5.6.2 на 7.7.1 версию (reindex from a remote) через \_reindex api - как описано тут Все прекрасно переносится - по большей части обошелся лишь удалением типа из маппинга. Но есть… --- ## ["attachment" handler type not found](https://discuss.elastic.co/t/attachment-handler-type-not-found/8771)
**Author:** [@msya](https://discuss.elastic.co/u/msya)\ **Replies:** 9\ **Last updated:** [January 8, 2015, 9:42am UTC](https://discuss.elastic.co/t/attachment-handler-type-not-found/8771 "2015-01-08T09:42:35Z")
Hello, I downloaded the plugin mapper-attachments and and tried to set a mapping where the type is "attachment". I did restart after I installed the mapper-attachment. However, I am getting the error - "No handle… --- ## [Garbage collection issue](https://discuss.elastic.co/t/garbage-collection-issue/184126)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 10\ **Last updated:** [June 6, 2019, 8:41am UTC](https://discuss.elastic.co/t/garbage-collection-issue/184126 "2019-06-06T08:41:26Z")
I am trying to bulk index data of size 6GB , but garbage collection is taking long time so process is getting killed. cluster.name: Elastic-Demo node.name: es-node-1 node.master: true path.data: /var/lib/elasticsearch p… --- ## [How to create a script statically in Logstash 7.17](https://discuss.elastic.co/t/how-to-create-a-script-statically-in-logstash-7-17/347446)
**Author:** [@getsolaris](https://discuss.elastic.co/u/getsolaris)\ **Replies:** 18\ **Last updated:** [November 18, 2023, 5:42pm UTC](https://discuss.elastic.co/t/how-to-create-a-script-statically-in-logstash-7-17/347446 "2023-11-18T17:42:50Z")
How to statically generate a script in Logstash 7.17 Hi, I would like to add elements to nested in elasticsearch via script via Logstash. Currently, compilations, cache\_evisions are increasing. I also increased max\_co… --- ## [Contributing a JMS River Plugin](https://discuss.elastic.co/t/contributing-a-jms-river-plugin/11730)
**Author:** [@Aall\_Spemmer](https://discuss.elastic.co/u/Aall_Spemmer)\ **Replies:** 15\ **Last updated:** [May 4, 2013, 10:21pm UTC](https://discuss.elastic.co/t/contributing-a-jms-river-plugin/11730 "2013-05-04T22:21:22Z")
How would I go about submitting the code for a JMS river plugin I created? It didn't seem like I should go through the whole fork, clone, pull request thing, as I am not actually modifying the elasticsearch code. … --- ## [ILM - Warm phase index is showing up in Hot phase](https://discuss.elastic.co/t/ilm-warm-phase-index-is-showing-up-in-hot-phase/282788)
**Author:** [@Music91](https://discuss.elastic.co/u/Music91)\ **Replies:** 11\ **Last updated:** [September 6, 2021, 11:11pm UTC](https://discuss.elastic.co/t/ilm-warm-phase-index-is-showing-up-in-hot-phase/282788 "2021-09-06T23:11:48Z")
Team, One of the index i have created with routing policy set to warm but under the Lifecycle status the index is showing up under Hot. Any idea why it is showing in Hot when it is expected to show only in Warm. Please a… --- ## [Logstash input file configuration](https://discuss.elastic.co/t/logstash-input-file-configuration/305081)
**Author:** [@Iss](https://discuss.elastic.co/u/Iss)\ **Replies:** 10\ **Last updated:** [May 19, 2022, 2:07am UTC](https://discuss.elastic.co/t/logstash-input-file-configuration/305081 "2022-05-19T02:07:05Z")
Hi! I use logstash to import a json file into Elasticsearch. I use the following configuration but the index is not created in Elasticsearch (or the consol). input{ file{ codec=\>multiline{ pattern =\>"^{header" … --- ## [Upgrading Kibana to 6](https://discuss.elastic.co/t/upgrading-kibana-to-6/144835)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 10\ **Last updated:** [August 22, 2018, 1:10pm UTC](https://discuss.elastic.co/t/upgrading-kibana-to-6/144835 "2018-08-22T13:10:36Z")
Hi, I tried to upgrade kibana using the documentation(https://www.elastic.co/guide/en/kibana/6.0/migrating-6.0-index.html) but I can't create the .kibana-6 index. this is the error message: {"error":{"root\_cause":\[{"t… --- ## [Bug with minimum\_number\_should\_match or is this incorrect usage?](https://discuss.elastic.co/t/bug-with-minimum-number-should-match-or-is-this-incorrect-usage/3512)
**Author:** [@Diptamay](https://discuss.elastic.co/u/Diptamay)\ **Replies:** 10\ **Last updated:** [November 4, 2010, 6:39pm UTC](https://discuss.elastic.co/t/bug-with-minimum-number-should-match-or-is-this-incorrect-usage/3512 "2010-11-04T18:39:51Z")
Hi I have this test data https://gist.github.com/661688, against which I am running my test cases. Here are the queries that I am firing. If you see the difference between the working (returns results) versions a… --- ## [Kibana 8.8.8 external plugin failure](https://discuss.elastic.co/t/kibana-8-8-8-external-plugin-failure/335240)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 11\ **Last updated:** [June 14, 2023, 7:52pm UTC](https://discuss.elastic.co/t/kibana-8-8-8-external-plugin-failure/335240 "2023-06-14T19:52:00Z")
Hi we have upgraded our plugin from Kibana 8.6.2 to Kibana 8.8.0. We now get this error when launching the plugin from Kibana. We build like before using RUN BUILD\_TS\_REFS\_DISABLE=true yarn kbn bootstrap --no-cache --d… --- ## [Elastic Search Pagination in Term Aggrigation](https://discuss.elastic.co/t/elastic-search-pagination-in-term-aggrigation/159540)
**Author:** [@RITESH\_AGARWAL](https://discuss.elastic.co/u/RITESH_AGARWAL)\ **Replies:** 9\ **Last updated:** [December 6, 2018, 11:11am UTC](https://discuss.elastic.co/t/elastic-search-pagination-in-term-aggrigation/159540 "2018-12-06T11:11:07Z")
How can we achieve the Pagination in ES Term Aggregation to avoid Memory issues. --- ## [Elastic search with CouchDB river plugin - Can't find any documents](https://discuss.elastic.co/t/elastic-search-with-couchdb-river-plugin-cant-find-any-documents/12263)
**Author:** [@Yannis\_Psarras](https://discuss.elastic.co/u/Yannis_Psarras)\ **Replies:** 12\ **Last updated:** [February 2, 2015, 7:14pm UTC](https://discuss.elastic.co/t/elastic-search-with-couchdb-river-plugin-cant-find-any-documents/12263 "2015-02-02T19:14:31Z")
I recently started using elastic search and couchdb and I have the following problem. I have a couch database with a bunch of documents. I add a couch db river index on elastic search and I expect to have those d… --- ## [500 - Internal Server : ErrorRepository\_verification\_exception, nested: RepositoryVerificationException\[\[backup\] a file written by master to the store \[C:\\\\Updates\\\\Backups\\\\ElasticSearch\] cannot be accessed on the node](https://discuss.elastic.co/t/500-internal-server-errorrepository-verification-exception-nested-repositoryverificationexception-backup-a-file-written-by-master-to-the-store-c-updates-backups-elasticsearch-cannot-be-accessed-on-the-node/311106)
**Author:** [@mujtabah](https://discuss.elastic.co/u/mujtabah)\ **Replies:** 9\ **Last updated:** [August 24, 2022, 6:07am UTC](https://discuss.elastic.co/t/500-internal-server-errorrepository-verification-exception-nested-repositoryverificationexception-backup-a-file-written-by-master-to-the-store-c-updates-backups-elasticsearch-cannot-be-accessed-on-the-node/311106 "2022-08-24T06:07:40Z")
I have a cluster of 5 nodes(3master,2 data), i have created directory in each node and included its path as path.repo in all of its yml's. then when i take snapshot its giving this error. command i used PUT \_snapshot/b… --- ## [Cloud elastic Alerting not working as expected](https://discuss.elastic.co/t/cloud-elastic-alerting-not-working-as-expected/148111)
**Author:** [@Hitesh\_Baldaniya](https://discuss.elastic.co/u/Hitesh_Baldaniya)\ **Replies:** 9\ **Last updated:** [September 17, 2018, 4:31am UTC](https://discuss.elastic.co/t/cloud-elastic-alerting-not-working-as-expected/148111 "2018-09-17T04:31:21Z")
Hi Team, We have setup watcher on our monitoring elasticsearch server. We are monitoring on ".monitoring-es-\*" indices with following mentioned watcher definition, but it always getting triggered so I believe compare st… --- ## [Newbie: Easiest way to view ES Results](https://discuss.elastic.co/t/newbie-easiest-way-to-view-es-results/134940)
**Author:** [@Dhiwakar\_Kusuma](https://discuss.elastic.co/u/Dhiwakar_Kusuma)\ **Replies:** 9\ **Last updated:** [June 19, 2018, 4:03pm UTC](https://discuss.elastic.co/t/newbie-easiest-way-to-view-es-results/134940 "2018-06-19T16:03:39Z")
Whats' the easiest way to view the ES Query results - I have '000s of documents in my index? Kibana console is making me feel tired :frowning: --- ## [Logstash json input file only required fields to output](https://discuss.elastic.co/t/logstash-json-input-file-only-required-fields-to-output/342400)
**Author:** [@Narayan\_Rao](https://discuss.elastic.co/u/Narayan_Rao)\ **Replies:** 11\ **Last updated:** [September 20, 2023, 12:53pm UTC](https://discuss.elastic.co/t/logstash-json-input-file-only-required-fields-to-output/342400 "2023-09-20T12:53:37Z")
I'm new in ELK & I have logs in JSON format. Below is the json sample log file. I want only item level array, others fields not required. Sample logs { "source": "mdm/pim", "topic": "pim-record-globalfields", "subj… --- ## [Snapshot Restore to 9.0.1 Fails Despite Setting \`index.blocks.write=true\` on Source Index in 8.7.1](https://discuss.elastic.co/t/snapshot-restore-to-9-0-1-fails-despite-setting-index-blocks-write-true-on-source-index-in-8-7-1/378853)
**Author:** [@Bojan\_Komazec](https://discuss.elastic.co/u/Bojan_Komazec)\ **Replies:** 10\ **Last updated:** [June 5, 2025, 9:17am UTC](https://discuss.elastic.co/t/snapshot-restore-to-9-0-1-fails-despite-setting-index-blocks-write-true-on-source-index-in-8-7-1/378853 "2025-06-05T09:17:35Z")
Hi all, I'm attempting to restore a snapshot from an Elasticsearch 8.7.1 cluster into a 9.0.1 cluster running via ECK on AWS EKS. I have full access to both clusters. The snapshot was taken in 8.7.1 and includes some o… --- ## [Read segments directly from the snapshot](https://discuss.elastic.co/t/read-segments-directly-from-the-snapshot/335122)
**Author:** [@Ariel\_Zach](https://discuss.elastic.co/u/Ariel_Zach)\ **Replies:** 10\ **Last updated:** [June 9, 2023, 10:46pm UTC](https://discuss.elastic.co/t/read-segments-directly-from-the-snapshot/335122 "2023-06-09T22:46:00Z")
Hello, I'm trying to read Lucene files (segments) directly from the files generated in the snapshot, but I'm encountering errors. Could you guide me on how to do it? Thank you. --- ## [Kibana kql suggestions not working](https://discuss.elastic.co/t/kibana-kql-suggestions-not-working/289240)
**Author:** [@Tingda\_Du](https://discuss.elastic.co/u/Tingda_Du)\ **Replies:** 10\ **Last updated:** [November 17, 2021, 10:32pm UTC](https://discuss.elastic.co/t/kibana-kql-suggestions-not-working/289240 "2021-11-17T22:32:35Z")
Do I need to configure anything to make kibana kql filtering suggestions working? --- ## [Logstash configuration : 6.3](https://discuss.elastic.co/t/logstash-configuration-6-3/145574)
**Author:** [@pavan1991](https://discuss.elastic.co/u/pavan1991)\ **Replies:** 10\ **Last updated:** [August 23, 2018, 2:21pm UTC](https://discuss.elastic.co/t/logstash-configuration-6-3/145574 "2018-08-23T14:21:28Z")
Hi Team, I am new to ELK stack and I am looking for a solution for the below problem. ELK Components : ElasticSearch Cluster ( 1 Master & 2 Data Nodes ) Kibana is Installed on same server as the master Logstash is a… --- ## [Index logstash (Delete)](https://discuss.elastic.co/t/index-logstash-delete/130849)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 10\ **Last updated:** [May 9, 2018, 11:57am UTC](https://discuss.elastic.co/t/index-logstash-delete/130849 "2018-05-09T11:57:13Z")
Hello again, I delete logstash index with DELETE methode and I want to get it back, how can I do this ? --- ## [Tuning elasticsearch enviroment](https://discuss.elastic.co/t/tuning-elasticsearch-enviroment/322089)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 11\ **Last updated:** [January 3, 2023, 8:42am UTC](https://discuss.elastic.co/t/tuning-elasticsearch-enviroment/322089 "2023-01-03T08:42:45Z")
Hi Please share any suggestion how I can tune up the performance of elasic cluster This solution was deployed on 3 bare metal machine. Each of particular host has a 256 GB RAM so we distributed memory through such co… --- ## [Logstash cannot reach Elasticsearch / filebeat security](https://discuss.elastic.co/t/logstash-cannot-reach-elasticsearch-filebeat-security/284733)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 11\ **Last updated:** [September 30, 2021, 8:20am UTC](https://discuss.elastic.co/t/logstash-cannot-reach-elasticsearch-filebeat-security/284733 "2021-09-30T08:20:07Z")
Hello, I am encountering some Problems while trying to secure Filebeat&Logstash. Scenario: I created my own RootCA and signed certificates with it. My Kibana-Webserver for example is signed with this Certificate, but … --- ## [Расчет даты в watcher](https://discuss.elastic.co/t/watcher/202524)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 10\ **Last updated:** [October 9, 2019, 2:21pm UTC](https://discuss.elastic.co/t/watcher/202524 "2019-10-09T14:21:41Z")
Добрый день! Делаю watcher. В ответ на запрос watcher\`a из elastic в таком формате выводятся два поля с датами: формат @timestamp - 2019-10-06T2 0:06:59.140Z формат @buildTimestamp - 2019-10-06T20:06:58.237Z Мне необ… [Previous page](https://discuss.elastic.co/top.md?page=221&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=223&per_page=50&period=all)