# Top

**URL:** https://discuss.elastic.co/top.md?page=256&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 257

---

## [How to install and configure multiple filebeat in linux instance](https://discuss.elastic.co/t/how-to-install-and-configure-multiple-filebeat-in-linux-instance/130466)

<div class="topic-metadata">

**Author:** [@senthil\_murugan](https://discuss.elastic.co/u/senthil_murugan)\
**Replies:** 3\
**Last updated:** [May 24, 2018, 6:21am UTC](https://discuss.elastic.co/t/how-to-install-and-configure-multiple-filebeat-in-linux-instance/130466 "2018-05-24T06:21:51Z")

</div>

I have already installed one filebeat and it is working fine. I need to create multiple filebeat in the linux instances. How to start and stop the filebeat if we install multiple filebeat instances? How to differentiat…

---

## [Error while stopping harverster group](https://discuss.elastic.co/t/error-while-stopping-harverster-group/304590)

<div class="topic-metadata">

**Author:** [@leonelfonseca](https://discuss.elastic.co/u/leonelfonseca)\
**Replies:** 0\
**Last updated:** [May 12, 2022, 2:39pm UTC](https://discuss.elastic.co/t/error-while-stopping-harverster-group/304590 "2022-05-12T14:39:12Z")

</div>

Hi, can anyone explain about this error message that appears in the Filebeat log ? \> Error while stopping harverster group: task failures error while adding new reader to the bookkeeper harvester is already running…

---

## [Filebeat - On-Demand Loading Compressed (.gz) Files from Stdin](https://discuss.elastic.co/t/filebeat-on-demand-loading-compressed-gz-files-from-stdin/184159)

<div class="topic-metadata">

**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 6:42pm UTC](https://discuss.elastic.co/t/filebeat-on-demand-loading-compressed-gz-files-from-stdin/184159 "2019-06-27T18:42:09Z")

</div>

If you want to load compressed files like .gz .zip etc. you can use Filebeat with input stdin. vasek ~ $ filebeat version filebeat version 7.0.1 (amd64), libbeat 7.0.1 \[cbffb4dcc8d1d2b0ef2078cb7d7546092ee86e57 built 201…

---

## [You do not have permission to access requested page Kibana: Help](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-requested-page-kibana-help/274253)

<div class="topic-metadata">

**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\
**Replies:** 3\
**Last updated:** [May 28, 2021, 2:16am UTC](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-requested-page-kibana-help/274253 "2021-05-28T02:16:43Z")

</div>

Hi, I have followed the guide on this site for security integration. Now When I restarted Kibana I'm entering kibana\_system as the username and the password I created but after the login I get a message stating You do …

---

## [Kibana port 5601 connection refused](https://discuss.elastic.co/t/kibana-port-5601-connection-refused/71809)

<div class="topic-metadata">

**Author:** [@gutasaputra](https://discuss.elastic.co/u/gutasaputra)\
**Replies:** 2\
**Last updated:** [January 18, 2017, 9:05pm UTC](https://discuss.elastic.co/t/kibana-port-5601-connection-refused/71809 "2017-01-18T21:05:14Z")

</div>

hi, i install ELK stack and metricbeat with following this tutorial https://dzone.com/articles/playing-around-with-metricbeat-and-elastic-stack-5 my OS is ubuntu.16.0.4 with lil bit configuration, elasticsearch is run…

---

## [Output to Azure Blob Storage](https://discuss.elastic.co/t/output-to-azure-blob-storage/302209)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 2\
**Last updated:** [April 12, 2022, 1:19pm UTC](https://discuss.elastic.co/t/output-to-azure-blob-storage/302209 "2022-04-12T13:19:51Z")

</div>

Hi, everyone I have been looking over Internet in order to find a plugin for Logstash or FIlebeat in order to send data to Azure Blob Storage. I have found a plugin on GitHub: Plugin However, it is an unofficial plug…

---

## [How to return distinct values from query based on a field](https://discuss.elastic.co/t/how-to-return-distinct-values-from-query-based-on-a-field/228000)

<div class="topic-metadata">

**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\
**Replies:** 2\
**Last updated:** [April 14, 2020, 11:29pm UTC](https://discuss.elastic.co/t/how-to-return-distinct-values-from-query-based-on-a-field/228000 "2020-04-14T23:29:01Z")

</div>

I'm trying to return documents from a query and i want to return distinct values in my results. I don't want to count how many documents contain the same value i just want to return some documents based on distinct or …

---

## [Changing number of replicas](https://discuss.elastic.co/t/changing-number-of-replicas/188740)

<div class="topic-metadata">

**Author:** [@zatom](https://discuss.elastic.co/u/zatom)\
**Replies:** 1\
**Last updated:** [July 3, 2019, 7:18pm UTC](https://discuss.elastic.co/t/changing-number-of-replicas/188740 "2019-07-03T19:18:27Z")

</div>

Hi, I am trying to reindex huge index using reindex api. It fails everytime. Now, I am thinking if I can initially make the number of replica to 0 and later to 1. Is it possible with my case? How do I do it? Do I set th…

---

## [Officially maintained Logstash Chef cookbook by Elastic](https://discuss.elastic.co/t/officially-maintained-logstash-chef-cookbook-by-elastic/65549)

<div class="topic-metadata">

**Author:** [@hartfordfive](https://discuss.elastic.co/u/hartfordfive)\
**Replies:** 0\
**Last updated:** [November 9, 2016, 7:27pm UTC](https://discuss.elastic.co/t/officially-maintained-logstash-chef-cookbook-by-elastic/65549 "2016-11-09T19:27:47Z")

</div>

I know that Elastic currently has an official Chef cookbook for Elasticsearch, although I wonder why there isn't one for Logstash, and potentially even Filbeat and Kibana. I'm currently in the process of attempting to u…

---

## [Delete the schema fileds from app-search](https://discuss.elastic.co/t/delete-the-schema-fileds-from-app-search/203954)

<div class="topic-metadata">

**Author:** [@teja\_sri](https://discuss.elastic.co/u/teja_sri)\
**Replies:** 1\
**Last updated:** [October 17, 2019, 9:15am UTC](https://discuss.elastic.co/t/delete-the-schema-fileds-from-app-search/203954 "2019-10-17T09:15:20Z")

</div>

Hi , I am a new user to app-search while I was playing with app-search I updated some documents and later I have decided to change the fields from the documents, but I have realized that the old fields still exist in th…

---

## [How to get tokens for a document?](https://discuss.elastic.co/t/how-to-get-tokens-for-a-document/110083)

<div class="topic-metadata">

**Author:** [@VidyVideni](https://discuss.elastic.co/u/VidyVideni)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 5:12am UTC](https://discuss.elastic.co/t/how-to-get-tokens-for-a-document/110083 "2017-12-05T05:12:40Z")

</div>

I need to get all tokens for a document when debug, so I know what exact tokens indexed in elasticsearch , this can help me understand why a query doesn't get any result when it supposed to be . any way to do this ple…

---

## [Dec 21st, 2022: \[EN\] How to import an ML model with Eland, if you're not a Python developer](https://discuss.elastic.co/t/dec-21st-2022-en-how-to-import-an-ml-model-with-eland-if-youre-not-a-python-developer/318465)

<div class="topic-metadata">

**Author:** [@Irina\_Truong](https://discuss.elastic.co/u/Irina_Truong)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2022-en-how-to-import-an-ml-model-with-eland-if-youre-not-a-python-developer/318465 "2022-12-21T08:00:47Z")

</div>

Why do I need an ML model? An ML model in Elasticsearch could be used for enriching your data during indexing. Some examples of what an ML model can do: extract entities from text (NER) predicting classes (classific…

---

## [Unmapped sort. Why is type needed?](https://discuss.elastic.co/t/unmapped-sort-why-is-type-needed/135298)

<div class="topic-metadata">

**Author:** [@amarques](https://discuss.elastic.co/u/amarques)\
**Replies:** 0\
**Last updated:** [June 11, 2018, 6:39am UTC](https://discuss.elastic.co/t/unmapped-sort-why-is-type-needed/135298 "2018-06-11T06:39:18Z")

</div>

Hi, I have one problem regarding dynamic fields and sorts and after reading about the "unmapped\_type" parameter I'm not so sure I've understood how it works, as I don't see why it is necessary to specify the field type,…

---

## [Invalid FieldReference](https://discuss.elastic.co/t/invalid-fieldreference/178721)

<div class="topic-metadata">

**Author:** [@Samvid\_Kulkarni](https://discuss.elastic.co/u/Samvid_Kulkarni)\
**Replies:** 2\
**Last updated:** [April 29, 2019, 7:14pm UTC](https://discuss.elastic.co/t/invalid-fieldreference/178721 "2019-04-29T19:14:17Z")

</div>

I have a field named AccountName which has values like this abc$, abc234$ (just two values in field). i am using mutate filter to split it into parts and then use add\_field to insert values into another field. I have lo…

---

## [Encountered a retryable error in Logstash 5.6.3](https://discuss.elastic.co/t/encountered-a-retryable-error-in-logstash-5-6-3/105409)

<div class="topic-metadata">

**Author:** [@lwolf86](https://discuss.elastic.co/u/lwolf86)\
**Replies:** 1\
**Last updated:** [November 17, 2017, 9:00pm UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-in-logstash-5-6-3/105409 "2017-11-17T21:00:49Z")

</div>

I'm using logstash 5.6.3 with filebeat input and output to elasticsearch. Dealing huge amount of logs, filebeat reads about 100GB logs. In the begining , everything works fine, but after about 30 minutes. Logstash get th…

---

## [Increasing max\_buckets for specific Visualizations](https://discuss.elastic.co/t/increasing-max-buckets-for-specific-visualizations/187390)

<div class="topic-metadata">

**Author:** [@Nikhil04](https://discuss.elastic.co/u/Nikhil04)\
**Replies:** 6\
**Last updated:** [July 2, 2019, 5:02pm UTC](https://discuss.elastic.co/t/increasing-max-buckets-for-specific-visualizations/187390 "2019-07-02T17:02:55Z")

</div>

Hi, Today we ran into an error when viewing a Visualization for a period of 24 hrs.Error Said "Courier fetch: 1 out of 8 shards failed". On deeper inspection, we found that the query for Visualization gave error for ma…

---

## [Finally a command to simulate tail -f](https://discuss.elastic.co/t/finally-a-command-to-simulate-tail-f/31971)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 2\
**Last updated:** [October 24, 2015, 5:15pm UTC](https://discuss.elastic.co/t/finally-a-command-to-simulate-tail-f/31971 "2015-10-24T17:15:38Z")

</div>

Hi Folks, over the last year I have been really wanting a command that simulates "tail -f " on an index. Very often my Middleware and developers just want to see the logs scrolling. The web gui's that I have found just…

---

## [Logstash Failed to create monitoring event](https://discuss.elastic.co/t/logstash-failed-to-create-monitoring-event/74191)

<div class="topic-metadata">

**Author:** [@faustf](https://discuss.elastic.co/u/faustf)\
**Replies:** 5\
**Last updated:** [March 16, 2017, 1:12pm UTC](https://discuss.elastic.co/t/logstash-failed-to-create-monitoring-event/74191 "2017-03-16T13:12:15Z")

</div>

Hy guys After I installed x-pack for monitoring logstash - elasticsearch and kibana, I've the following error on logstash: \[2017-02-07T10:18:05,181\]\[ERROR\]\[logstash.inputs.metrics \] Failed to create monitoring event {…

---

## [🎉 Elastic Stack 6.3.0 released](https://discuss.elastic.co/t/elastic-stack-6-3-0-released/135784)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [June 13, 2018, 7:22pm UTC](https://discuss.elastic.co/t/elastic-stack-6-3-0-released/135784 "2018-06-13T19:22:02Z")

</div>

Elastic Stack 6.3.0 released Hi all, We’ve just released version 6.3.0 of the Elastic Stack. In 6.3, the code of X-Pack is open! Plus you’ll find Elasticsearch rollups for saving space, Elasticsearch SQL, autocomplete …

---

## [ILM policy not working](https://discuss.elastic.co/t/ilm-policy-not-working/181544)

<div class="topic-metadata">

**Author:** [@indreek](https://discuss.elastic.co/u/indreek)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 5:47pm UTC](https://discuss.elastic.co/t/ilm-policy-not-working/181544 "2019-05-20T17:47:03Z")

</div>

Hello I created ilm policy /\_ilm/policy/datastream\_policy { "policy": { "phases": { "hot": { "actions": { "rollover": { …

---

## [Log users and query in audit log](https://discuss.elastic.co/t/log-users-and-query-in-audit-log/132446)

<div class="topic-metadata">

**Author:** [@ol3k](https://discuss.elastic.co/u/ol3k)\
**Replies:** 7\
**Last updated:** [June 4, 2018, 5:49am UTC](https://discuss.elastic.co/t/log-users-and-query-in-audit-log/132446 "2018-06-04T05:49:31Z")

</div>

Hi, we set up a new ELK Cluster and enabled audit logging: Is there any possibility to log the username and all queries done by the user? In the audit log we just see successful / failed logins etc. but never any quer…

---

## [How to query elasticsearch and take some fields from old data](https://discuss.elastic.co/t/how-to-query-elasticsearch-and-take-some-fields-from-old-data/75300)

<div class="topic-metadata">

**Author:** [@Vittorio](https://discuss.elastic.co/u/Vittorio)\
**Replies:** 2\
**Last updated:** [February 17, 2017, 8:08am UTC](https://discuss.elastic.co/t/how-to-query-elasticsearch-and-take-some-fields-from-old-data/75300 "2017-02-17T08:08:09Z")

</div>

Hi all, I'm new here, hope to get some help :slight\_smile: I'm working using the logstash pipeline, for instance, I have rabbitmq as input for my logs and Elastisearch as output. Fantastic! The problem is in the elast…

---

## [Add new values in the nested field - Logstash to Elasticsearch](https://discuss.elastic.co/t/add-new-values-in-the-nested-field-logstash-to-elasticsearch/62253)

<div class="topic-metadata">

**Author:** [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)\
**Replies:** 0\
**Last updated:** [October 5, 2016, 10:31am UTC](https://discuss.elastic.co/t/add-new-values-in-the-nested-field-logstash-to-elasticsearch/62253 "2016-10-05T10:31:13Z")

</div>

Hello Elasticusers, I have a little issue, I have one field in Elasticsearch that is a nested field and I want to add some new values (like an array) into this field using Logstash. However, if the field is empty, Logs…

---

## [JDBC Fetch size VS JDBC Page Size](https://discuss.elastic.co/t/jdbc-fetch-size-vs-jdbc-page-size/168530)

<div class="topic-metadata">

**Author:** [@kelvink](https://discuss.elastic.co/u/kelvink)\
**Replies:** 0\
**Last updated:** [February 15, 2019, 6:40am UTC](https://discuss.elastic.co/t/jdbc-fetch-size-vs-jdbc-page-size/168530 "2019-02-15T06:40:26Z")

</div>

Hi there, We're trying to understand what is the difference between the jdbc\_page\_size parameter and jdbc\_fetch\_size, for logstash input jdbc plugin . What I understood from testing is that jdbc\_page\_size determines the…

---

## [Manage system indices with Curator \[Elasticsearch 7.14.2\]](https://discuss.elastic.co/t/manage-system-indices-with-curator-elasticsearch-7-14-2/288410)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 2\
**Last updated:** [November 5, 2021, 6:41am UTC](https://discuss.elastic.co/t/manage-system-indices-with-curator-elasticsearch-7-14-2/288410 "2021-11-05T06:41:07Z")

</div>

Elasticsearch version: 7.14.2 Curator version: 5.8.4 Hi, everyone I have seen a warning message in Curator in which Elasticsearch reports that in a future major version direct access to system indices will be prevente…

---

## [Dec 7th, 2022: \[EN\] Map your distributed team in Kibana](https://discuss.elastic.co/t/dec-7th-2022-en-map-your-distributed-team-in-kibana/320438)

<div class="topic-metadata">

**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\
**Replies:** 0\
**Last updated:** [December 7, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-7th-2022-en-map-your-distributed-team-in-kibana/320438 "2022-12-07T08:00:46Z")

</div>

Working in a distributed company like Elastic is great, but can sometimes be hard to grasp. Answering some seemingly simple questions can be surprisingly complicated, like: Show our team on a map, so I can explain o…

---

## [Ansible role for Kibana](https://discuss.elastic.co/t/ansible-role-for-kibana/130537)

<div class="topic-metadata">

**Author:** [@Fedele\_Mantuano](https://discuss.elastic.co/u/Fedele_Mantuano)\
**Replies:** 1\
**Last updated:** [May 7, 2018, 3:52pm UTC](https://discuss.elastic.co/t/ansible-role-for-kibana/130537 "2018-05-07T15:52:54Z")

</div>

Hi Kibana team, I develop an Ansible role for Kibana, with the same patterns used for official Elasticsearch role. I'd like to contribute with my ansible-kibana. Is it possible for you fork my repository to make an offi…

---

## [The truststore does not contain any trusted certificate entries after upgrade to 8.0](https://discuss.elastic.co/t/the-truststore-does-not-contain-any-trusted-certificate-entries-after-upgrade-to-8-0/298338)

<div class="topic-metadata">

**Author:** [@testshock](https://discuss.elastic.co/u/testshock)\
**Replies:** 4\
**Last updated:** [February 28, 2022, 7:56am UTC](https://discuss.elastic.co/t/the-truststore-does-not-contain-any-trusted-certificate-entries-after-upgrade-to-8-0/298338 "2022-02-28T07:56:24Z")

</div>

I was doing offline upgrade from 7.16 to 8.0. With all servers stopped upgrade with rpm and started again. From 7.16 to 7.17 no problems at all. Cluster came up green. From 7.17 to 8.0 elastic i got Exception org.elas…

---

## [Elasticsearch cluster status is yellow. Allocate missing replica shards](https://discuss.elastic.co/t/elasticsearch-cluster-status-is-yellow-allocate-missing-replica-shards/146146)

<div class="topic-metadata">

**Author:** [@Dave21854207](https://discuss.elastic.co/u/Dave21854207)\
**Replies:** 4\
**Last updated:** [August 28, 2018, 7:40am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-status-is-yellow-allocate-missing-replica-shards/146146 "2018-08-28T07:40:37Z")

</div>

Hi, Can i get some help with this error?

---

## [Dec 2nd, 2021: \[en\] Generating document thumbnails - now Open Source on the JVM](https://discuss.elastic.co/t/dec-2nd-2021-en-generating-document-thumbnails-now-open-source-on-the-jvm/288270)

<div class="topic-metadata">

**Author:** [@Sean\_Story](https://discuss.elastic.co/u/Sean_Story)\
**Replies:** 3\
**Last updated:** [December 2, 2021, 3:49pm UTC](https://discuss.elastic.co/t/dec-2nd-2021-en-generating-document-thumbnails-now-open-source-on-the-jvm/288270 "2021-12-02T15:49:43Z")

</div>

Generating document thumbnails - now open source on the JVM It's something that I'd always taken for granted. You work with any sort of file system/file browser/search engine and you just expect to see thumbnail images. …

---

## [Timelion: how generate .label() dynamically?](https://discuss.elastic.co/t/timelion-how-generate-label-dynamically/85072)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [May 9, 2017, 1:00pm UTC](https://discuss.elastic.co/t/timelion-how-generate-label-dynamically/85072 "2017-05-09T13:00:00Z")

</div>

Hi, I am using split function in timelion to do a term aggregation and to produce mutliple lines by grouping. The query is quite long and I want to set a custom label, which includes fields of the query. Example: I s…

---

## [Eck and Prometheus](https://discuss.elastic.co/t/eck-and-prometheus/215495)

<div class="topic-metadata">

**Author:** [@jdambly](https://discuss.elastic.co/u/jdambly)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 4:45pm UTC](https://discuss.elastic.co/t/eck-and-prometheus/215495 "2020-01-17T16:45:02Z")

</div>

What using eck what is the best way to send metrics to Prometheus for monitoring? I see there are a couple of projects for this And Are there any other that are better?

---

## [Bootstrap method initialization exception - Elasticsearch 7.8.0](https://discuss.elastic.co/t/bootstrap-method-initialization-exception-elasticsearch-7-8-0/242588)

<div class="topic-metadata">

**Author:** [@dpadasala93](https://discuss.elastic.co/u/dpadasala93)\
**Replies:** 0\
**Last updated:** [July 25, 2020, 5:04am UTC](https://discuss.elastic.co/t/bootstrap-method-initialization-exception-elasticsearch-7-8-0/242588 "2020-07-25T05:04:29Z")

</div>

Hi Team, Using java-high-level-rest client when we call getMapping for index or create index functions below errors get generated every time. almost for all the index related calls are generating this exception. bootst…

---

## [Setting index.number\_of\_replicas =\> 0 by default in ES \>= 5](https://discuss.elastic.co/t/setting-index-number-of-replicas-0-by-default-in-es-5/138195)

<div class="topic-metadata">

**Author:** [@Alex\_Harvey](https://discuss.elastic.co/u/Alex_Harvey)\
**Replies:** 2\
**Last updated:** [July 2, 2018, 4:52pm UTC](https://discuss.elastic.co/t/setting-index-number-of-replicas-0-by-default-in-es-5/138195 "2018-07-02T16:52:39Z")

</div>

I am trying to build a single-node all-in-one ELK 6 cluster for development and testing. To do this and get a cluster that goes into green state, I need to ensure that all indices inherit a setting index.number\_of\_replic…

---

## [ERROR: D is not a recognized option](https://discuss.elastic.co/t/error-d-is-not-a-recognized-option/88460)

<div class="topic-metadata">

**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\
**Replies:** 1\
**Last updated:** [June 6, 2017, 7:35pm UTC](https://discuss.elastic.co/t/error-d-is-not-a-recognized-option/88460 "2017-06-06T19:35:16Z")

</div>

Hello, Here is snippet from my init script that kicks off elasticsearch as daemon service on Centos6 set 'ES\_JAVA\_OPTS= -Xms6g -Xmx6g' echo -n 'Starting elasticsearch: ' Starting elasticsearch: + daemon --user t --p…

---

## [Dec 8th, 2023: \[EN\] Authentication in Synthetic Monitoring with Playwright and Elastic Synthetics](https://discuss.elastic.co/t/dec-8th-2023-en-authentication-in-synthetic-monitoring-with-playwright-and-elastic-synthetics/347290)

<div class="topic-metadata">

**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Replies:** 0\
**Last updated:** [December 8, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2023-en-authentication-in-synthetic-monitoring-with-playwright-and-elastic-synthetics/347290 "2023-12-08T08:00:01Z")

</div>

Introduction Christmas is a time of coming together. Last Christmas we could add RUM and APM to keep an eye on things. But it will not necessarily notify you if a particular user feature, such as the 'Buy Now!' butto…

---

## [Wildcard query not working as expected](https://discuss.elastic.co/t/wildcard-query-not-working-as-expected/84447)

<div class="topic-metadata">

**Author:** [@molusc](https://discuss.elastic.co/u/molusc)\
**Replies:** 4\
**Last updated:** [May 4, 2017, 9:14am UTC](https://discuss.elastic.co/t/wildcard-query-not-working-as-expected/84447 "2017-05-04T09:14:10Z")

</div>

I'm trying to search Apache access logs using a wildcard on the useragent.name field (as added by the useragent plugin) I'm searching on the Discover tab in Kibana 4.6.1 I can search for useragent.name:"Chrome Mobile…

---

## [Logstash Aggregate multi levels](https://discuss.elastic.co/t/logstash-aggregate-multi-levels/108169)

<div class="topic-metadata">

**Author:** [@ythalorossy](https://discuss.elastic.co/u/ythalorossy)\
**Replies:** 0\
**Last updated:** [November 17, 2017, 4:55pm UTC](https://discuss.elastic.co/t/logstash-aggregate-multi-levels/108169 "2017-11-17T16:55:13Z")

</div>

Hi all, So, I am trying do a simple aggregation using plugins-filters-aggregate. I extract data from relation database using plugin-jdbc and the result is: P\_ID P\_DESC PROD\_I P\_ID PROD\_DESC PROD\_ID SPROD\_DESC COUN…

---

## [Java Elasticsearch REST Client reuse or pooling](https://discuss.elastic.co/t/java-elasticsearch-rest-client-reuse-or-pooling/81788)

<div class="topic-metadata">

**Author:** [@Bican](https://discuss.elastic.co/u/Bican)\
**Replies:** 3\
**Last updated:** [April 11, 2017, 7:15am UTC](https://discuss.elastic.co/t/java-elasticsearch-rest-client-reuse-or-pooling/81788 "2017-04-11T07:15:41Z")

</div>

Hello, I can not seem to find any info related to the connection pooling of the java rest client. I found several articles about transport client but nothing about the rest. We have a proxy server in front of ES cluster …

---

## [Is it possible to return only the most recent of 'each document'?](https://discuss.elastic.co/t/is-it-possible-to-return-only-the-most-recent-of-each-document/172011)

<div class="topic-metadata">

**Author:** [@Daniel\_Webb](https://discuss.elastic.co/u/Daniel_Webb)\
**Replies:** 2\
**Last updated:** [March 13, 2019, 9:27am UTC](https://discuss.elastic.co/t/is-it-possible-to-return-only-the-most-recent-of-each-document/172011 "2019-03-13T09:27:22Z")

</div>

Hi Elasticsearch community, total novice here with my first post. Is it possible to design a query that will return only the most recent of each document in an index? I'd like to store snapshots of our projects as they…

---

## [Logstash substring a field using position](https://discuss.elastic.co/t/logstash-substring-a-field-using-position/32569)

<div class="topic-metadata">

**Author:** [@samnik60](https://discuss.elastic.co/u/samnik60)\
**Replies:** 5\
**Last updated:** [April 10, 2017, 1:58pm UTC](https://discuss.elastic.co/t/logstash-substring-a-field-using-position/32569 "2017-04-10T13:58:44Z")

</div>

hi guys, if i want to extract first 3 characters from a field, how do i go about it. Thanks, sam

---

## [Kibana 7.17.9 and 8.6.2 Security Update](https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 0\
**Last updated:** [February 16, 2023, 10:56pm UTC](https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782 "2023-02-16T22:56:41Z")

</div>

Kibana open redirect issue (ESA-2023-03) An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL. Affected Versions…

---

## [New Java client how to estimate size of BulkRequest](https://discuss.elastic.co/t/new-java-client-how-to-estimate-size-of-bulkrequest/316211)

<div class="topic-metadata">

**Author:** [@fabian-froehlich](https://discuss.elastic.co/u/fabian-froehlich)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 11:32am UTC](https://discuss.elastic.co/t/new-java-client-how-to-estimate-size-of-bulkrequest/316211 "2022-10-10T11:32:00Z")

</div>

Is there a efferent way to estimate the size of the bulk request in the new ElasticsearchClient ? Currently our in the HighLevelRest-Client we use the method bulkRequest.estimatedSizeInBytes() to check whether another …

---

## [Dec 24th, 2019 \[EN\]\[Kibana\] Canada open data in Kibana maps](https://discuss.elastic.co/t/dec-24th-2019-en-kibana-canada-open-data-in-kibana-maps/212361)

<div class="topic-metadata">

**Author:** [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-24th-2019-en-kibana-canada-open-data-in-kibana-maps/212361 "2019-12-24T08:00:04Z")

</div>

I love maps, I love geo-spatial open data. And last year, I plugged in Canada's population data into our region maps for the advent calendar. At that time our maps application was in development mode. But now its here an…

---

## [Dec 21, 2017: \[EN\]\[Elasticsearch\] Knobs to turn for better indexing performance](https://discuss.elastic.co/t/dec-21-2017-en-elasticsearch-knobs-to-turn-for-better-indexing-performance/112332)

<div class="topic-metadata">

**Author:** [@Sherry\_Ger](https://discuss.elastic.co/u/Sherry_Ger)\
**Replies:** 0\
**Last updated:** [December 21, 2017, 11:00am UTC](https://discuss.elastic.co/t/dec-21-2017-en-elasticsearch-knobs-to-turn-for-better-indexing-performance/112332 "2017-12-21T11:00:48Z")

</div>

You have a high volume logging use case and have followed these recommendations: Important Elasticsearch Settings Important System Settings for Elasticsearch What other knobs can you turn to improve indexing performan…

---

## [ELK Architecture and requirements](https://discuss.elastic.co/t/elk-architecture-and-requirements/101075)

<div class="topic-metadata">

**Author:** [@Nelson\_Pita](https://discuss.elastic.co/u/Nelson_Pita)\
**Replies:** 5\
**Last updated:** [September 25, 2017, 2:25pm UTC](https://discuss.elastic.co/t/elk-architecture-and-requirements/101075 "2017-09-25T14:25:02Z")

</div>

Hi guys, I need to create an ELK architecture but I don't know how many servers and requirements (CPU, RAM,Disk space) I will need. I will need to send syslog and logfiles from 15 servers (total around 500MB/day) to th…

---

## [Transport Client - NoNodeAvailableException\[None of the configured nodes are available\]](https://discuss.elastic.co/t/transport-client-nonodeavailableexception-none-of-the-configured-nodes-are-available/92000)

<div class="topic-metadata">

**Author:** [@Yang\_Young](https://discuss.elastic.co/u/Yang_Young)\
**Replies:** 2\
**Last updated:** [July 7, 2017, 3:35am UTC](https://discuss.elastic.co/t/transport-client-nonodeavailableexception-none-of-the-configured-nodes-are-available/92000 "2017-07-07T03:35:08Z")

</div>

Dear Sir I got the following error message when I tried to use transport client: Exception in thread "main" NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{zSavWRA4QBGzdYdox-h2Aw…

---

## [Rejected execution (queue capacity 1000)](https://discuss.elastic.co/t/rejected-execution-queue-capacity-1000/89954)

<div class="topic-metadata">

**Author:** [@elbori76](https://discuss.elastic.co/u/elbori76)\
**Replies:** 1\
**Last updated:** [June 20, 2017, 9:32pm UTC](https://discuss.elastic.co/t/rejected-execution-queue-capacity-1000/89954 "2017-06-20T21:32:55Z")

</div>

Receiving the following error in elasticsearch cluster logs Caused by: org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution (queue capacity 1000) on org.elasticsearch.transport.netty.…

---

## [Add field only if its does not exists?](https://discuss.elastic.co/t/add-field-only-if-its-does-not-exists/54894)

<div class="topic-metadata">

**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\
**Replies:** 2\
**Last updated:** [July 7, 2016, 6:31am UTC](https://discuss.elastic.co/t/add-field-only-if-its-does-not-exists/54894 "2016-07-07T06:31:24Z")

</div>

I expect this is common, but I can't seem to find any info on how to set a field /only/ if it does not already exist. I have tried translate: translate { field =\> "level" dictionary =\> \[ "DEBUG", "DEBUG", …

---

## [Configure file beat to multiple output](https://discuss.elastic.co/t/configure-file-beat-to-multiple-output/235471)

<div class="topic-metadata">

**Author:** [@user524](https://discuss.elastic.co/u/user524)\
**Replies:** 1\
**Last updated:** [June 3, 2020, 4:36pm UTC](https://discuss.elastic.co/t/configure-file-beat-to-multiple-output/235471 "2020-06-03T16:36:33Z")

</div>

Hi Team, We have a requirement where we are sending logs from the db using filebeat to elasticsearch cluster and Kafka cluster based on the type of the log. For Example: If the log type is INFO we need to send it to El…

[Previous page](https://discuss.elastic.co/top.md?page=255&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=257&per_page=50&period=all)
