# Top

**URL:** https://discuss.elastic.co/top.md?page=260&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 261

---

## [Logstash elasticsearch-filter disable ssl verification](https://discuss.elastic.co/t/logstash-elasticsearch-filter-disable-ssl-verification/222926)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 0\
**Last updated:** [March 10, 2020, 12:12pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-disable-ssl-verification/222926 "2020-03-10T12:12:11Z")

</div>

How to disable hostname verification in elasticsearch filter like below https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-ssl\_certificate\_verification

---

## [Using rollover got error](https://discuss.elastic.co/t/using-rollover-got-error/84869)

<div class="topic-metadata">

**Author:** [@flyfish](https://discuss.elastic.co/u/flyfish)\
**Replies:** 1\
**Last updated:** [May 8, 2017, 4:09am UTC](https://discuss.elastic.co/t/using-rollover-got-error/84869 "2017-05-08T04:09:27Z")

</div>

Hi, I just created an alias which name is "squid-log-alias" for my index "squid-log", and when I setup rollover API and I got the error: POST /squid-log-alias/\_rollover { "conditions":{ "max\_age": "7d", "m…

---

## [Welcome to ElasticSearch users list](https://discuss.elastic.co/t/welcome-to-elasticsearch-users-list/2801)

<div class="topic-metadata">

**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\
**Replies:** 0\
**Last updated:** [January 19, 2010, 9:43pm UTC](https://discuss.elastic.co/t/welcome-to-elasticsearch-users-list/2801 "2010-01-19T21:43:34Z")

</div>

Hello World -- You Know, for Search

---

## [Java agent 1.0.0 Release Candidate ready for testing](https://discuss.elastic.co/t/java-agent-1-0-0-release-candidate-ready-for-testing/155527)

<div class="topic-metadata">

**Author:** [@felixbarny](https://discuss.elastic.co/u/felixbarny)\
**Replies:** 6\
**Last updated:** [November 14, 2018, 12:20pm UTC](https://discuss.elastic.co/t/java-agent-1-0-0-release-candidate-ready-for-testing/155527 "2018-11-14T12:20:22Z")

</div>

We have just released a release candidate for the Java agent: https://github.com/elastic/apm-agent-java/releases/tag/v1.0.0.RC1 This is your chance to give us feedback before the general availability (1.0.0 release) of …

---

## [Dec 18th, 2023: \[EN\] The most magical time of the year: Using semantic search to find the most festive Harry Potter moments](https://discuss.elastic.co/t/dec-18th-2023-en-the-most-magical-time-of-the-year-using-semantic-search-to-find-the-most-festive-harry-potter-moments/347615)

<div class="topic-metadata">

**Author:** [@iulia](https://discuss.elastic.co/u/iulia)\
**Replies:** 0\
**Last updated:** [December 18, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-18th-2023-en-the-most-magical-time-of-the-year-using-semantic-search-to-find-the-most-festive-harry-potter-moments/347615 "2023-12-18T08:00:30Z")

</div>

Christmas at Hogwarts, anyone? I don't know about you, but for me, Christmas usually means starting (yet another) Harry Potter marathon. While I'm a fan of the Wizarding World year-round, there is something extra fest…

---

## [Disable Security](https://discuss.elastic.co/t/disable-security/66380)

<div class="topic-metadata">

**Author:** [@DimitrisFilippou](https://discuss.elastic.co/u/DimitrisFilippou)\
**Replies:** 1\
**Last updated:** [November 17, 2016, 4:40pm UTC](https://discuss.elastic.co/t/disable-security/66380 "2016-11-17T16:40:38Z")

</div>

When i navigate to 127.0.0.1 i get this warning message. Your Basic license does not support Security. Please upgrade your license or disable Security in Elasticsearch. How can i Disable Security?

---

## [Multiple bool must clause on nested fields](https://discuss.elastic.co/t/multiple-bool-must-clause-on-nested-fields/79310)

<div class="topic-metadata">

**Author:** [@TsukAfonso](https://discuss.elastic.co/u/TsukAfonso)\
**Replies:** 0\
**Last updated:** [March 20, 2017, 7:35pm UTC](https://discuss.elastic.co/t/multiple-bool-must-clause-on-nested-fields/79310 "2017-03-20T19:35:43Z")

</div>

Hi everyone, I have a working query that I would like to discuss to see if there are ways to make it both smaller and more efficient. I have a mapping that has a similar structure to this one: { "documents": …

---

## [How to convert parsed date into long (epoch time)](https://discuss.elastic.co/t/how-to-convert-parsed-date-into-long-epoch-time/167202)

<div class="topic-metadata">

**Author:** [@shimpi](https://discuss.elastic.co/u/shimpi)\
**Replies:** 4\
**Last updated:** [February 6, 2019, 6:40pm UTC](https://discuss.elastic.co/t/how-to-convert-parsed-date-into-long-epoch-time/167202 "2019-02-06T18:40:45Z")

</div>

I'm parsing tomcat log 2019-01-31 23:25:27,421 INFO SNOW FAA31C764BD69D829C09715487B1E923 \[Thread-16\] using: grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:date} %{LOGLEVEL:loglevel} %{WORD:GW} %{WORD:GUID}…

---

## [Same query, Different results](https://discuss.elastic.co/t/same-query-different-results/60982)

<div class="topic-metadata">

**Author:** [@kunal642](https://discuss.elastic.co/u/kunal642)\
**Replies:** 8\
**Last updated:** [September 21, 2016, 10:13am UTC](https://discuss.elastic.co/t/same-query-different-results/60982 "2016-09-21T10:13:40Z")

</div>

Hi, I just ran into a problem while executing a very basic query. I am trying to search for documents based on user\_id. The total result count keeps on fluctuating between 0 and 200. This is the output that i get Th…

---

## [Block in Start\_input](https://discuss.elastic.co/t/block-in-start-input/166474)

<div class="topic-metadata">

**Author:** [@fiery\_george](https://discuss.elastic.co/u/fiery_george)\
**Replies:** 1\
**Last updated:** [January 31, 2019, 1:06pm UTC](https://discuss.elastic.co/t/block-in-start-input/166474 "2019-01-31T13:06:13Z")

</div>

I am getting the following error: S:/ELK/logstash-6.6.0/logstash-6.6.0/vendor/bundle/jruby/2.3.0/gems/logstash-inp ut-file-4.1.9/lib/filewatch/observing\_base.rb:62:in build\_watch\_and\_dependencie s' S:/ELK/logstash-6.6.…

---

## [Elastic SIEM TheHive Integration](https://discuss.elastic.co/t/elastic-siem-thehive-integration/279729)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 12:52pm UTC](https://discuss.elastic.co/t/elastic-siem-thehive-integration/279729 "2021-08-10T12:52:20Z")

</div>

Hello, Is there any plan to integrate more SIEM Case connectors, for example for TheHive? Willem

---

## [How to write NULL value for a field](https://discuss.elastic.co/t/how-to-write-null-value-for-a-field/53885)

<div class="topic-metadata">

**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\
**Replies:** 1\
**Last updated:** [June 29, 2016, 8:14pm UTC](https://discuss.elastic.co/t/how-to-write-null-value-for-a-field/53885 "2016-06-29T20:14:32Z")

</div>

We're ingesting some logfiles where the system writes a "-" for fields without value. I'd like to replace this with a proper NULL in order to keep data as clean as possible. I've tried mutations with the following valu…

---

## [Guide how to deploy ES in a high availability configuration](https://discuss.elastic.co/t/guide-how-to-deploy-es-in-a-high-availability-configuration/10034)

<div class="topic-metadata">

**Author:** [@Juho\_Makinen](https://discuss.elastic.co/u/Juho_Makinen)\
**Replies:** 2\
**Last updated:** [February 25, 2014, 1:05am UTC](https://discuss.elastic.co/t/guide-how-to-deploy-es-in-a-high-availability-configuration/10034 "2014-02-25T01:05:41Z")

</div>

We're looking on deploying Elastic Search into EC2 to power the search of our new product. After crawling elasticsearch.org for tutorials, I found the EC2 tutorial, which was quite helpful, but I didn't find any guid…

---

## [Get All Index Patterns](https://discuss.elastic.co/t/get-all-index-patterns/120405)

<div class="topic-metadata">

**Author:** [@waleed\_ali](https://discuss.elastic.co/u/waleed_ali)\
**Replies:** 3\
**Last updated:** [February 20, 2018, 1:30pm UTC](https://discuss.elastic.co/t/get-all-index-patterns/120405 "2018-02-20T13:30:59Z")

</div>

Hello, Just wanted to ask if there is a way we can get a list of all index patterns either from Kibana or ES (version 6.x)? Actually, I am using Kibana API plugin to add new visualizations to my dashboard dynamically, b…

---

## [Exclude if not in array](https://discuss.elastic.co/t/exclude-if-not-in-array/105552)

<div class="topic-metadata">

**Author:** [@henrilabarre](https://discuss.elastic.co/u/henrilabarre)\
**Replies:** 2\
**Last updated:** [October 30, 2017, 1:26pm UTC](https://discuss.elastic.co/t/exclude-if-not-in-array/105552 "2017-10-30T13:26:48Z")

</div>

Hi here is my source: { "telephone" =\> { "fine" =\> { "date" =\> "2017-10-26T16:54:28.477Z", "value" =\> "0387931080" } }, "TEL" =\> "0387931080", } I use this conf file to add …

---

## [How to use if else statments in logstash output pipline?](https://discuss.elastic.co/t/how-to-use-if-else-statments-in-logstash-output-pipline/119199)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 8\
**Last updated:** [February 9, 2018, 11:19am UTC](https://discuss.elastic.co/t/how-to-use-if-else-statments-in-logstash-output-pipline/119199 "2018-02-09T11:19:15Z")

</div>

Dear ES folks, Here is my request, I want to split the index by tags and environment. Can someone help me out? The logical like this： "system" in \[tags\] =\> index =\> "system-%{+YYYY.MM}" "nginx" in \[tags\] =\> index …

---

## [Kibana Go - iOS Mobile App](https://discuss.elastic.co/t/kibana-go-ios-mobile-app/218465)

<div class="topic-metadata">

**Author:** [@octagon.mobile](https://discuss.elastic.co/u/octagon.mobile)\
**Replies:** 4\
**Last updated:** [May 22, 2020, 10:38am UTC](https://discuss.elastic.co/t/kibana-go-ios-mobile-app/218465 "2020-05-22T10:38:27Z")

</div>

Hello everyone, :wave: We are pleased to announce that we have developed a native iOS application for Kibana. AND it's an OPEN SOURCE project !!! You can find it over here You can also download the demo project from t…

---

## [Unique value counts in kibana](https://discuss.elastic.co/t/unique-value-counts-in-kibana/107141)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 4\
**Last updated:** [November 20, 2017, 1:39pm UTC](https://discuss.elastic.co/t/unique-value-counts-in-kibana/107141 "2017-11-20T13:39:30Z")

</div>

Hi , I am using elasticsearch 5.1.1 and kibana also 5.1.1 . I want to check distinct counts for a long value field in elasticsearch i have used cardinality to do this. i have designed three graphs Userid is my long val…

---

## [deviceId changes of the drive where filebeat reads log, produces a lot of duplicate log messages](https://discuss.elastic.co/t/deviceid-changes-of-the-drive-where-filebeat-reads-log-produces-a-lot-of-duplicate-log-messages/196310)

<div class="topic-metadata">

**Author:** [@frueht68](https://discuss.elastic.co/u/frueht68)\
**Replies:** 0\
**Last updated:** [August 22, 2019, 11:48am UTC](https://discuss.elastic.co/t/deviceid-changes-of-the-drive-where-filebeat-reads-log-produces-a-lot-of-duplicate-log-messages/196310 "2019-08-22T11:48:37Z")

</div>

We observed the following behavior in our private cloud, managed by an external provider: In some occasions we observe changes of the deviceId of the drive, where filebeat reads the log files from. Those occasions alway…

---

## [Elastisearch timeout on service start after yum update from 7.3 to 7.4](https://discuss.elastic.co/t/elastisearch-timeout-on-service-start-after-yum-update-from-7-3-to-7-4/201863)

<div class="topic-metadata">

**Author:** [@EtienneDemers](https://discuss.elastic.co/u/EtienneDemers)\
**Replies:** 5\
**Last updated:** [November 26, 2019, 1:37pm UTC](https://discuss.elastic.co/t/elastisearch-timeout-on-service-start-after-yum-update-from-7-3-to-7-4/201863 "2019-11-26T13:37:28Z")

</div>

I installed a brand new single node dev cluster of ES 7.3 earlier this week from the yum repository and ran a yum update to update the stack to 7.4 When i try to run service elasticsearch start i get a timeout, but no e…

---

## [Put mapping fails index\_already\_exists\_exception](https://discuss.elastic.co/t/put-mapping-fails-index-already-exists-exception/56782)

<div class="topic-metadata">

**Author:** [@vchav73](https://discuss.elastic.co/u/vchav73)\
**Replies:** 4\
**Last updated:** [July 30, 2016, 7:19pm UTC](https://discuss.elastic.co/t/put-mapping-fails-index-already-exists-exception/56782 "2016-07-30T19:19:50Z")

</div>

I am trying to add a mapping for a new type to an existing index in ES 2.3.3. I'm following he the examples from here and here but keep getting the result seen below. Any idea why this is generating an error? \[root@vm …

---

## [How to get rid of event.original field?](https://discuss.elastic.co/t/how-to-get-rid-of-event-original-field/303604)

<div class="topic-metadata">

**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\
**Replies:** 6\
**Last updated:** [April 29, 2022, 3:03pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-event-original-field/303604 "2022-04-29T15:03:26Z")

</div>

After upgrading to ELK 8.1, I noticed that every event has the "event.original" field containing all of the log data. This is highly unwanted, how to prevent this field from being sent from Filebeat? I tried doing it on…

---

## [Problem with keystore password was incorrect](https://discuss.elastic.co/t/problem-with-keystore-password-was-incorrect/168950)

<div class="topic-metadata">

**Author:** [@Behzad\_Rezaie](https://discuss.elastic.co/u/Behzad_Rezaie)\
**Replies:** 6\
**Last updated:** [February 23, 2019, 6:31am UTC](https://discuss.elastic.co/t/problem-with-keystore-password-was-incorrect/168950 "2019-02-23T06:31:25Z")

</div>

Hi pals, I have configured my elasticsearch.yml as follow: xpack.security.audit.enabled: true xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: cer…

---

## [Worker thread consumes 100 % CPU (for no reason)](https://discuss.elastic.co/t/worker-thread-consumes-100-cpu-for-no-reason/261)

<div class="topic-metadata">

**Author:** [@kaaelhaa](https://discuss.elastic.co/u/kaaelhaa)\
**Replies:** 4\
**Last updated:** [May 8, 2015, 7:10pm UTC](https://discuss.elastic.co/t/worker-thread-consumes-100-cpu-for-no-reason/261 "2015-05-08T19:10:15Z")

</div>

Hi, I've recently set up a full ELK-stack. Things are not playing nice though. I'm experiencing the Logstash worker thread is constantly consuming 100 % of one of my CPU cores, even when there are nothing to ship or pa…

---

## [New index not appearing in kibana](https://discuss.elastic.co/t/new-index-not-appearing-in-kibana/67371)

<div class="topic-metadata">

**Author:** [@deepankar32](https://discuss.elastic.co/u/deepankar32)\
**Replies:** 3\
**Last updated:** [November 28, 2016, 8:25pm UTC](https://discuss.elastic.co/t/new-index-not-appearing-in-kibana/67371 "2016-11-28T20:25:51Z")

</div>

Hi, I have created index in elastic search through PIG. The new index is not appearing in Kibana Discover section for search. But I can see the index in elastic search. Please help how to fix this. Thanks

---

## [Error occurred during initialization of VM Could not reserve enough space for 1048576KB object heap - ElasticSearch](https://discuss.elastic.co/t/error-occurred-during-initialization-of-vm-could-not-reserve-enough-space-for-1048576kb-object-heap-elasticsearch/33999)

<div class="topic-metadata">

**Author:** [@Prewin](https://discuss.elastic.co/u/Prewin)\
**Replies:** 2\
**Last updated:** [May 19, 2017, 4:58am UTC](https://discuss.elastic.co/t/error-occurred-during-initialization-of-vm-could-not-reserve-enough-space-for-1048576kb-object-heap-elasticsearch/33999 "2017-05-19T04:58:26Z")

</div>

Goto ElasticSearch bin directory. Eg:\\ElasticSearch\\elasticsearch-2.0.0\\bin Right click elasticsearch.in.bat -\>edit change if "%ES\_MAX\_MEM%" == "" ( set ES\_MAX\_MEM=1g ) to if "%ES\_MAX\_MEM%" == "" ( set ES\_MAX\_M…

---

## [Volume mapped filebeat.yml permissions from Docker on Windows host](https://discuss.elastic.co/t/volume-mapped-filebeat-yml-permissions-from-docker-on-windows-host/91893)

<div class="topic-metadata">

**Author:** [@NathanBaulch](https://discuss.elastic.co/u/NathanBaulch)\
**Replies:** 3\
**Last updated:** [July 5, 2017, 3:44pm UTC](https://discuss.elastic.co/t/volume-mapped-filebeat-yml-permissions-from-docker-on-windows-host/91893 "2017-07-05T15:44:17Z")

</div>

I'm trying to run the official 5.4.3 filebeat docker container via VirtualBox on a Windows host. Rather than creating a custom image, I'm using a volume mapping to pass the filebeat.yml file to the container using the au…

---

## [Dec 5th: \[EN\]\[Elasticsearch\] Using Painless to Prepare for The Holiday Season Deals](https://discuss.elastic.co/t/dec-5th-en-elasticsearch-using-painless-to-prepare-for-the-holiday-season-deals/110211)

<div class="topic-metadata">

**Author:** [@talevy](https://discuss.elastic.co/u/talevy)\
**Replies:** 3\
**Last updated:** [January 4, 2018, 11:30pm UTC](https://discuss.elastic.co/t/dec-5th-en-elasticsearch-using-painless-to-prepare-for-the-holiday-season-deals/110211 "2018-01-04T23:30:27Z")

</div>

Painless was introduced in Elasticsearch 5.0. Since then, It has been possible to script the values of fields during indexing and the scores of documents during searching using Painless. Starting in Elasticsearch 6.0, su…

---

## [Dec 12th, 2020: \[ES\] Tu infraestructura en un mapa](https://discuss.elastic.co/t/dec-12th-2020-es-tu-infraestructura-en-un-mapa/257971)

<div class="topic-metadata">

**Author:** [@jsanz](https://discuss.elastic.co/u/jsanz)\
**Replies:** 0\
**Last updated:** [December 12, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-12th-2020-es-tu-infraestructura-en-un-mapa/257971 "2020-12-12T08:00:04Z")

</div>

Este artículo es una traducción de Mapping your infrastructure escrito por Thomas Neirynck. tl;dr; Esta entrada elabora cómo puedes usar el stack de Elastic para representar datos geoespaciales relativos a IoT, Seguri…

---

## [Issue with JSON bulk insert "The bulk request must be terminated by a newline \[\\n\]"](https://discuss.elastic.co/t/issue-with-json-bulk-insert-the-bulk-request-must-be-terminated-by-a-newline-n/165902)

<div class="topic-metadata">

**Author:** [@ballavamsi](https://discuss.elastic.co/u/ballavamsi)\
**Replies:** 4\
**Last updated:** [January 27, 2019, 2:50pm UTC](https://discuss.elastic.co/t/issue-with-json-bulk-insert-the-bulk-request-must-be-terminated-by-a-newline-n/165902 "2019-01-27T14:50:52Z")

</div>

I'm trying to bulk upload json to elasticsearch with the below data. I searched in the forums and found that last line should be newline even if I did that i'm getting the same error. This is the index i'm using {…

---

## [How to extract kibana visualization query?](https://discuss.elastic.co/t/how-to-extract-kibana-visualization-query/67621)

<div class="topic-metadata">

**Author:** [@abhi\_chinchole](https://discuss.elastic.co/u/abhi_chinchole)\
**Replies:** 2\
**Last updated:** [December 1, 2016, 5:33am UTC](https://discuss.elastic.co/t/how-to-extract-kibana-visualization-query/67621 "2016-12-01T05:33:41Z")

</div>

I am moving away from kibana and want to extract all visualization queries from existing dashboard. I want queries to be in such format which I can use directly on elasticsearch to get same result as it is on kibana. Ex…

---

## [Fields missing in EQL sequence detection rule with building block alert as source](https://discuss.elastic.co/t/fields-missing-in-eql-sequence-detection-rule-with-building-block-alert-as-source/288483)

<div class="topic-metadata">

**Author:** [@masual](https://discuss.elastic.co/u/masual)\
**Replies:** 0\
**Last updated:** [November 5, 2021, 10:05am UTC](https://discuss.elastic.co/t/fields-missing-in-eql-sequence-detection-rule-with-building-block-alert-as-source/288483 "2021-11-05T10:05:41Z")

</div>

Hi everyone, I am implementing a set of Detection Rules to correlate events from different sources. I created a Threshold Rule and marked it as "building block" since I plan to use the alerts it generates as the source…

---

## [Buckets\_path to access field in top\_hits aggregation result](https://discuss.elastic.co/t/buckets-path-to-access-field-in-top-hits-aggregation-result/88093)

<div class="topic-metadata">

**Author:** [@mpaduada](https://discuss.elastic.co/u/mpaduada)\
**Replies:** 1\
**Last updated:** [June 15, 2017, 3:02pm UTC](https://discuss.elastic.co/t/buckets-path-to-access-field-in-top-hits-aggregation-result/88093 "2017-06-15T15:02:14Z")

</div>

Is it possible to use a pipeline aggregation to access information contained in the result of a top\_hits aggregation? If so, what's the correct buckets\_path to use? Here's an illustrative example. POST testcalc1/te…

---

## [Logstash setup for syslog udp input](https://discuss.elastic.co/t/logstash-setup-for-syslog-udp-input/50810)

<div class="topic-metadata">

**Author:** [@panopt1k](https://discuss.elastic.co/u/panopt1k)\
**Replies:** 2\
**Last updated:** [July 27, 2016, 2:52pm UTC](https://discuss.elastic.co/t/logstash-setup-for-syslog-udp-input/50810 "2016-07-27T14:52:51Z")

</div>

Hi guys! I need your help in advanced setting up for ELK server. I have installed ELK stack into Ubuntu 14.04 Basically I setup logstash server with filebeats and successfully configured logstash filter for parsing lo…

---

## [\[SOLVED\] TCP "RST"/reset causing Filebeat/Logstash connection reset](https://discuss.elastic.co/t/solved-tcp-rst-reset-causing-filebeat-logstash-connection-reset/82343)

<div class="topic-metadata">

**Author:** [@gtorrance](https://discuss.elastic.co/u/gtorrance)\
**Replies:** 2\
**Last updated:** [April 14, 2017, 11:42am UTC](https://discuss.elastic.co/t/solved-tcp-rst-reset-causing-filebeat-logstash-connection-reset/82343 "2017-04-14T11:42:59Z")

</div>

I have a RHEL 6 Linux server (10.230.143.160) running ELK 5.3 and a Windows client (10.230.143.31) with Filebeat shipping logs to the server. I’m seeing a very consistent issue where every few minutes the Filebeat log …

---

## [Disable expansion of field names with dots in mapping](https://discuss.elastic.co/t/disable-expansion-of-field-names-with-dots-in-mapping/84761)

<div class="topic-metadata">

**Author:** [@Xoom](https://discuss.elastic.co/u/Xoom)\
**Replies:** 0\
**Last updated:** [May 5, 2017, 4:54pm UTC](https://discuss.elastic.co/t/disable-expansion-of-field-names-with-dots-in-mapping/84761 "2017-05-05T16:54:10Z")

</div>

Currently our elastic cluster ( running v5.2.2) handle about 60,000 syslogs and traps per hour. We have a significant amount of traps with long object identifiers of the form "1.2.3.4.5.6". These get expanded into a JS…

---

## [BindTransportException\[Failed to bind to \[9300-9400\]\]; nested: BindException\[Cannot assign requested address](https://discuss.elastic.co/t/bindtransportexception-failed-to-bind-to-9300-9400-nested-bindexception-cannot-assign-requested-address/132048)

<div class="topic-metadata">

**Author:** [@sahara](https://discuss.elastic.co/u/sahara)\
**Replies:** 3\
**Last updated:** [June 4, 2018, 7:15am UTC](https://discuss.elastic.co/t/bindtransportexception-failed-to-bind-to-9300-9400-nested-bindexception-cannot-assign-requested-address/132048 "2018-06-04T07:15:55Z")

</div>

elasticsearch.yml network.host: 10.42.0.204 http.port: 9200 my host has address 10.1.1.209 my stack trace \[2018-05-16T12:44:35,056\]\[INFO \]\[o.e.n.Node \] \[2VhkBLX\] starting ... \[2018-05-16T12:44:35,216\]…

---

## [Using G1 with Elasticsearch](https://discuss.elastic.co/t/using-g1-with-elasticsearch/98)

<div class="topic-metadata">

**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Replies:** 2\
**Last updated:** [June 22, 2017, 12:18pm UTC](https://discuss.elastic.co/t/using-g1-with-elasticsearch/98 "2017-06-22T12:18:07Z")

</div>

Background Oracle introduced the Garbage First (G1) Garbage Collector (G1GC) in Java 7 as an alternative to the Concurrent Mark-Sweep (CMS) Garbage Collector and used by Elasticsearch. G1 is intended for server-side app…

---

## [How to delete all documents present in the index without deleting the Index and its mapping](https://discuss.elastic.co/t/how-to-delete-all-documents-present-in-the-index-without-deleting-the-index-and-its-mapping/93891)

<div class="topic-metadata">

**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\
**Replies:** 1\
**Last updated:** [July 20, 2017, 9:41am UTC](https://discuss.elastic.co/t/how-to-delete-all-documents-present-in-the-index-without-deleting-the-index-and-its-mapping/93891 "2017-07-20T09:41:51Z")

</div>

I have index logstash-test of type logs I just want to delete documents present in it.

---

## [Elastic doubles down on cloud native with Helm charts and CNCF membership](https://discuss.elastic.co/t/elastic-doubles-down-on-cloud-native-with-helm-charts-and-cncf-membership/160222)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [December 10, 2018, 4:56pm UTC](https://discuss.elastic.co/t/elastic-doubles-down-on-cloud-native-with-helm-charts-and-cncf-membership/160222 "2018-12-10T16:56:41Z")

</div>

We're proud to join the Cloud Native Computing Foundation (CNCF) and continue our commitment to the cloud native ecosystem. With that in mind, Helm Charts for Elasticsearch and Kibana are now in alpha so you can deploy t…

---

## [Visualize-\>Controls-\>Range slider support for date](https://discuss.elastic.co/t/visualize-controls-range-slider-support-for-date/143051)

<div class="topic-metadata">

**Author:** [@Thomas\_Difei\_Qin](https://discuss.elastic.co/u/Thomas_Difei_Qin)\
**Replies:** 1\
**Last updated:** [August 6, 2018, 12:43pm UTC](https://discuss.elastic.co/t/visualize-controls-range-slider-support-for-date/143051 "2018-08-06T12:43:38Z")

</div>

Hi, I knew that in Kibana 6.1, interactive input on dashboard is introduced. (i.e. the drop-downs and range-sliders, see https://www.elastic.co/blog/interactive-inputs-on-kibana-dashboards). However, based on the example…

---

## [Elastic Stack 5.3.0 released](https://discuss.elastic.co/t/elastic-stack-5-3-0-released/80330)

<div class="topic-metadata">

**Author:** [@tudor](https://discuss.elastic.co/u/tudor)\
**Replies:** 0\
**Last updated:** [March 28, 2017, 4:45pm UTC](https://discuss.elastic.co/t/elastic-stack-5-3-0-released/80330 "2017-03-28T16:45:42Z")

</div>

Hi all, We've just released version 5.3.0 of the Elastic Stack, bringing many new features and improvements for Elasticsearch, Kibana, Logstash, and Beats. You can find the blog post here: https://www.elastic.co/blog…

---

## [Migrating code from ElasticSearch.Net 7 to Elastic.Clients.Elasticsearch 8](https://discuss.elastic.co/t/migrating-code-from-elasticsearch-net-7-to-elastic-clients-elasticsearch-8/322937)

<div class="topic-metadata">

**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\
**Replies:** 0\
**Last updated:** [January 11, 2023, 2:03pm UTC](https://discuss.elastic.co/t/migrating-code-from-elasticsearch-net-7-to-elastic-clients-elasticsearch-8/322937 "2023-01-11T14:03:48Z")

</div>

Hi! I’m rewriting our code for the new Elastic.Client.Elasticsearch and I’m trying to find some code examples how to do that. For example we have a lot of queries like this one: \> var response = \_client.Search\<TDocume…

---

## [Kibana cannot connect to the Elastic Package Registry, which provides Elastic Agent integrations](https://discuss.elastic.co/t/kibana-cannot-connect-to-the-elastic-package-registry-which-provides-elastic-agent-integrations/330580)

<div class="topic-metadata">

**Author:** [@mehdi-lamrani](https://discuss.elastic.co/u/mehdi-lamrani)\
**Replies:** 0\
**Last updated:** [April 23, 2023, 1:21pm UTC](https://discuss.elastic.co/t/kibana-cannot-connect-to-the-elastic-package-registry-which-provides-elastic-agent-integrations/330580 "2023-04-23T13:21:01Z")

</div>

There are a few posts noting this error message, without a solution. In case somebody stumbles upon it : This message may be very misleading, in case you did not activate xpack security First, check your service logs…

---

## [Elastic Stack 5.5.1 released](https://discuss.elastic.co/t/elastic-stack-5-5-1-released/94509)

<div class="topic-metadata">

**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Replies:** 0\
**Last updated:** [July 25, 2017, 4:06pm UTC](https://discuss.elastic.co/t/elastic-stack-5-5-1-released/94509 "2017-07-25T16:06:07Z")

</div>

Hi all, We've just released version 5.5.1 of the Elastic Stack. This is a bug fix release; please see the release notes/blogs for each product to get the details. You can find the individual blog posts here: https://…

---

## [Filebeat Module Problem](https://discuss.elastic.co/t/filebeat-module-problem/219042)

<div class="topic-metadata">

**Author:** [@weasel87](https://discuss.elastic.co/u/weasel87)\
**Replies:** 1\
**Last updated:** [February 14, 2020, 6:52pm UTC](https://discuss.elastic.co/t/filebeat-module-problem/219042 "2020-02-14T18:52:02Z")

</div>

I want to send cisco firewall logs to my elastic statck so I was trying to setup the siem for Cisco. I already have filebeat installed, so the next step is to enable the cisco module. This is what doesn't work. root@ela…

---

## [Flatten JSON Array in Logstash Filter](https://discuss.elastic.co/t/flatten-json-array-in-logstash-filter/124562)

<div class="topic-metadata">

**Author:** [@EricPSU](https://discuss.elastic.co/u/EricPSU)\
**Replies:** 2\
**Last updated:** [March 19, 2018, 2:41pm UTC](https://discuss.elastic.co/t/flatten-json-array-in-logstash-filter/124562 "2018-03-19T14:41:17Z")

</div>

I have a REST API call that returns the structure below. When I send this structure to Elasticsearch, all of the records within the "data" array are combined into one Elasticsearch document. { "data": \[ { …

---

## [Dec 9th, 2017: \[EN\]\[Kibana\] A Competitive Edge in Sports](https://discuss.elastic.co/t/dec-9th-2017-en-kibana-a-competitive-edge-in-sports/110904)

<div class="topic-metadata">

**Author:** [@jordansissel](https://discuss.elastic.co/u/jordansissel)\
**Replies:** 1\
**Last updated:** [December 9, 2017, 10:23am UTC](https://discuss.elastic.co/t/dec-9th-2017-en-kibana-a-competitive-edge-in-sports/110904 "2017-12-09T10:23:54Z")

</div>

I play adult league ice hockey here in California. I don’t make time to practice, so my only ice time is during games. Given this, is there something I can do between games to give my team an edge? Yes! GRAPHS! Everybody…

---

## [How to index nanoseconds precision events with Logstash (7.10) and type date\_nanos](https://discuss.elastic.co/t/how-to-index-nanoseconds-precision-events-with-logstash-7-10-and-type-date-nanos/262029)

<div class="topic-metadata">

**Author:** [@juan.domenech](https://discuss.elastic.co/u/juan.domenech)\
**Replies:** 0\
**Last updated:** [January 24, 2021, 11:14am UTC](https://discuss.elastic.co/t/how-to-index-nanoseconds-precision-events-with-logstash-7-10-and-type-date-nanos/262029 "2021-01-24T11:14:24Z")

</div>

Problem statement Elasticsearch 7.10 supports timestamp with nanoseconds precision (type date\_nanos) Kibana 7.10 visualises these timestamps but Logstash can't handle them yet (precision above milliseconds is lost whe…

---

## [Elasticsearch Certified Engineer notes](https://discuss.elastic.co/t/elasticsearch-certified-engineer-notes/303304)

<div class="topic-metadata">

**Author:** [@pistocop](https://discuss.elastic.co/u/pistocop)\
**Replies:** 0\
**Last updated:** [April 26, 2022, 3:30pm UTC](https://discuss.elastic.co/t/elasticsearch-certified-engineer-notes/303304 "2022-04-26T15:30:57Z")

</div>

Hi all, I would share my notes to prepare the Elasticsearch Certified Engineer Exam, they contain: Notes for each exam topic Exercises to try and test the exam topics, alongside Docker files to run different ES cluste…

[Previous page](https://discuss.elastic.co/top.md?page=259&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=261&per_page=50&period=all)
