# Top

**URL:** https://discuss.elastic.co/top.md?page=264&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 265

---

## [Understanding "skipped" shards](https://discuss.elastic.co/t/understanding-skipped-shards/141428)

<div class="topic-metadata">

**Author:** [@MaJaHa95](https://discuss.elastic.co/u/MaJaHa95)\
**Replies:** 0\
**Last updated:** [July 24, 2018, 4:51pm UTC](https://discuss.elastic.co/t/understanding-skipped-shards/141428 "2018-07-24T16:51:07Z")

</div>

Hey, I've been a long-time user of the \_field\_stats API for index filtering. I have two production systems in place where queries typically filter on some category identifier (namely an ID, in the form of an integer) an…

---

## [Elasticsearch with ingress received plaintext http traffic on an https channel](https://discuss.elastic.co/t/elasticsearch-with-ingress-received-plaintext-http-traffic-on-an-https-channel/246549)

<div class="topic-metadata">

**Author:** [@dcanales](https://discuss.elastic.co/u/dcanales)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-with-ingress-received-plaintext-http-traffic-on-an-https-channel/246549 "2020-09-02T13:47:56Z")

</div>

Hi, i have the config from https://github.com/elastic/helm-charts/tree/7.9/elasticsearch/examples/security with the next ingress in my values.yaml: ingress: enabled: true annotations: kubernetes.io/ingress.clas…

---

## [The data you are seeing might be incomplete or wrong](https://discuss.elastic.co/t/the-data-you-are-seeing-might-be-incomplete-or-wrong/211386)

<div class="topic-metadata">

**Author:** [@t3fsx](https://discuss.elastic.co/u/t3fsx)\
**Replies:** 0\
**Last updated:** [December 10, 2019, 10:38pm UTC](https://discuss.elastic.co/t/the-data-you-are-seeing-might-be-incomplete-or-wrong/211386 "2019-12-10T22:38:50Z")

</div>

Hi, Recently delete an index with DELETE filebeat-7.5.0-2019.12.03-000001 and now I'm having all sorts of different issues with searching and visualizations. The data you are seeing might be incomplete or wrong. Is a …

---

## [Filebeat private key parse error](https://discuss.elastic.co/t/filebeat-private-key-parse-error/119633)

<div class="topic-metadata">

**Author:** [@itspecialistsimon](https://discuss.elastic.co/u/itspecialistsimon)\
**Replies:** 5\
**Last updated:** [February 14, 2018, 5:09pm UTC](https://discuss.elastic.co/t/filebeat-private-key-parse-error/119633 "2018-02-14T17:09:00Z")

</div>

Hi everyone, I'm trying to configure SSL encryption in between filebeat and redis. I self signed the certificate. Logfile: filebeat -c filebeat.yml -e -v 2018/02/13 12:22:37.675420 beat.go:436: INFO Home path: \[/usr/…

---

## [ElasticsearchClient v.8 QueryContainer alternative](https://discuss.elastic.co/t/elasticsearchclient-v-8-querycontainer-alternative/345861)

<div class="topic-metadata">

**Author:** [@Carlos\_Barros](https://discuss.elastic.co/u/Carlos_Barros)\
**Replies:** 0\
**Last updated:** [October 26, 2023, 6:32pm UTC](https://discuss.elastic.co/t/elasticsearchclient-v-8-querycontainer-alternative/345861 "2023-10-26T18:32:16Z")

</div>

Hi, I'm migrating .net 7 Nest client to the newer v8 .net client. I have the following code and would like to question if there is an alternative to QueryContainer usage as you see next. QueryContainer filt…

---

## [JSON Input: Converting Minutes to Minutes and Seconds](https://discuss.elastic.co/t/json-input-converting-minutes-to-minutes-and-seconds/100845)

<div class="topic-metadata">

**Author:** [@mentari\_mrh](https://discuss.elastic.co/u/mentari_mrh)\
**Replies:** 1\
**Last updated:** [September 18, 2017, 7:46pm UTC](https://discuss.elastic.co/t/json-input-converting-minutes-to-minutes-and-seconds/100845 "2017-09-18T19:46:18Z")

</div>

Hi I'm using Kibana 5.5.1 I want to convert serveAvg (currently in seconds) to Minutes and Seconds. Currently i managed to convert to Minutes only using below script { "script": { "inline1": "doc\['serveAvg'\].value …

---

## [CORS error when sending get reuqest from angular 6 app to elasticsearch, even when its allowed](https://discuss.elastic.co/t/cors-error-when-sending-get-reuqest-from-angular-6-app-to-elasticsearch-even-when-its-allowed/150705)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 0\
**Last updated:** [October 2, 2018, 12:55pm UTC](https://discuss.elastic.co/t/cors-error-when-sending-get-reuqest-from-angular-6-app-to-elasticsearch-even-when-its-allowed/150705 "2018-10-02T12:55:03Z")

</div>

0 down vote favorite I have an angular 6 app that sends http requests to elasticsearch DB. The angular app, nodejs server (that serves the angular app) and elasticsearch are hosted on the same machine, and the browser …

---

## [How to Visualize Discover data in dashboard](https://discuss.elastic.co/t/how-to-visualize-discover-data-in-dashboard/52307)

<div class="topic-metadata">

**Author:** [@Ankit\_Pradhan](https://discuss.elastic.co/u/Ankit_Pradhan)\
**Replies:** 3\
**Last updated:** [June 9, 2016, 12:25pm UTC](https://discuss.elastic.co/t/how-to-visualize-discover-data-in-dashboard/52307 "2016-06-09T12:25:00Z")

</div>

How can I visualize the display i am seeing in Discover panel in Visualize / Dashboard ... Till Kibana 3.x I use to use "table" panel in Rows ... but it seems like in Kibana 4\* the old table way of looking data is moved …

---

## [Curator Docker image](https://discuss.elastic.co/t/curator-docker-image/87507)

<div class="topic-metadata">

**Author:** [@taha](https://discuss.elastic.co/u/taha)\
**Replies:** 1\
**Last updated:** [May 30, 2017, 2:35pm UTC](https://discuss.elastic.co/t/curator-docker-image/87507 "2017-05-30T14:35:51Z")

</div>

Hi, Is there an official docker image for ES curator, ideally with cron job running within the docker container and variables defined as env variables. I looked around and found few ideas, but nothing up to date or …

---

## [Error connecting to secured ES cluster from logstash.filters.elasticsearch](https://discuss.elastic.co/t/error-connecting-to-secured-es-cluster-from-logstash-filters-elasticsearch/179457)

<div class="topic-metadata">

**Author:** [@maavericc](https://discuss.elastic.co/u/maavericc)\
**Replies:** 0\
**Last updated:** [May 3, 2019, 4:20am UTC](https://discuss.elastic.co/t/error-connecting-to-secured-es-cluster-from-logstash-filters-elasticsearch/179457 "2019-05-03T04:20:16Z")

</div>

When I am trying to connect to secured ES cluster from logstash.filters.elasticsearch, getting this error: \[2019-05-03T04:15:34,613\]\[WARN \]\[logstash.filters.elasticsearch\] Failed to query elasticsearch for previous even…

---

## [Elasticsearch will not start, no logs, (code=exited, status=1/FAILURE)](https://discuss.elastic.co/t/elasticsearch-will-not-start-no-logs-code-exited-status-1-failure/135797)

<div class="topic-metadata">

**Author:** [@Guanilo](https://discuss.elastic.co/u/Guanilo)\
**Replies:** 3\
**Last updated:** [June 14, 2018, 3:16pm UTC](https://discuss.elastic.co/t/elasticsearch-will-not-start-no-logs-code-exited-status-1-failure/135797 "2018-06-14T15:16:57Z")

</div>

Fresh ES 6.2.4 install on RHE 7.4, install is performed by downloading rpms to local machine, ftping rpms (and GPG key) to server), then yum localinstall. All values are default, excepting one: /etc/sysconfig/elastics…

---

## [How do I disable X-Pack security on the elasticsearch 5.2.2 docker image?](https://discuss.elastic.co/t/how-do-i-disable-x-pack-security-on-the-elasticsearch-5-2-2-docker-image/78183)

<div class="topic-metadata">

**Author:** [@sivabalans](https://discuss.elastic.co/u/sivabalans)\
**Replies:** 5\
**Last updated:** [March 10, 2017, 10:48pm UTC](https://discuss.elastic.co/t/how-do-i-disable-x-pack-security-on-the-elasticsearch-5-2-2-docker-image/78183 "2017-03-10T22:48:58Z")

</div>

This image comes bundled with X-Pack security. I see a question about an image without X-Pack. But I am also ok with a way to disable it in the docker image. I am aware of how to disable it in the elasticsearch.yml file …

---

## [How to delete a field from an index while reindexing?](https://discuss.elastic.co/t/how-to-delete-a-field-from-an-index-while-reindexing/156613)

<div class="topic-metadata">

**Author:** [@i333](https://discuss.elastic.co/u/i333)\
**Replies:** 6\
**Last updated:** [November 15, 2018, 3:32pm UTC](https://discuss.elastic.co/t/how-to-delete-a-field-from-an-index-while-reindexing/156613 "2018-11-15T15:32:21Z")

</div>

I have an index that I want to reindex and change its dynamic type from mapping to strict, but then it complains that a field doesn't exist in the new index mapping. How can I delete the field from the old index so that …

---

## [Kibana with Multinode Elasticsearch cluster](https://discuss.elastic.co/t/kibana-with-multinode-elasticsearch-cluster/75337)

<div class="topic-metadata">

**Author:** [@etp](https://discuss.elastic.co/u/etp)\
**Replies:** 2\
**Last updated:** [February 17, 2017, 6:39am UTC](https://discuss.elastic.co/t/kibana-with-multinode-elasticsearch-cluster/75337 "2017-02-17T06:39:03Z")

</div>

Hi, I have setup a cluster with 3 nodes on which I have installed Elasticsearch. On one of the nodes I have installed Kibana also. I would like to know, how would I configure this setup such that Kibana may read from the…

---

## [Share your #ElasticStories](https://discuss.elastic.co/t/share-your-elasticstories/186614)

<div class="topic-metadata">

**Author:** [@livdec](https://discuss.elastic.co/u/livdec)\
**Replies:** 0\
**Last updated:** [June 20, 2019, 7:26am UTC](https://discuss.elastic.co/t/share-your-elasticstories/186614 "2019-06-20T07:26:44Z")

</div>

Heya Elastic community! We’re constantly amazed by the innovation and imagination our community displays with the Elastic Stack. We’ve seen use cases that we couldn’t have imagined. We showcase them on our blog, custome…

---

## [Error : Limit of total fields \[1000\] in index has been exceeded](https://discuss.elastic.co/t/error-limit-of-total-fields-1000-in-index-has-been-exceeded/118196)

<div class="topic-metadata">

**Author:** [@Rym\_Guerbi\_Michaut](https://discuss.elastic.co/u/Rym_Guerbi_Michaut)\
**Replies:** 7\
**Last updated:** [February 2, 2018, 3:08pm UTC](https://discuss.elastic.co/t/error-limit-of-total-fields-1000-in-index-has-been-exceeded/118196 "2018-02-02T15:08:34Z")

</div>

Hi, there elastic community, I know this problem has already been exposed and even solved in some cases, but the solutions provided don't solve mine. Or I don't know how to apply them to my case. Tools: Elasticsearch…

---

## [Logstash error in config file](https://discuss.elastic.co/t/logstash-error-in-config-file/110003)

<div class="topic-metadata">

**Author:** [@Shreya\_Chatterjee](https://discuss.elastic.co/u/Shreya_Chatterjee)\
**Replies:** 7\
**Last updated:** [December 2, 2017, 6:36pm UTC](https://discuss.elastic.co/t/logstash-error-in-config-file/110003 "2017-12-02T18:36:59Z")

</div>

I'm trying to feed data in csv files into elastic search using logstash. My logsatsh config file looks like this: input { file { path =\> "C:\\Users\\shreya\\Data\\RetailData.csv" start\_position =\> "b…

---

## [Found duplicate column(s) in the data schema, Need help on how to load such index data into Spark Dataframe](https://discuss.elastic.co/t/found-duplicate-column-s-in-the-data-schema-need-help-on-how-to-load-such-index-data-into-spark-dataframe/167517)

<div class="topic-metadata">

**Author:** [@Yasmeenc](https://discuss.elastic.co/u/Yasmeenc)\
**Replies:** 1\
**Last updated:** [February 11, 2019, 9:50pm UTC](https://discuss.elastic.co/t/found-duplicate-column-s-in-the-data-schema-need-help-on-how-to-load-such-index-data-into-spark-dataframe/167517 "2019-02-11T21:50:54Z")

</div>

Hi Team, I am trying to read data from elasticsearch index and write into a spark dataframe, but the index has same field name with different cases(upper/lower case) below is the mapping, and the error I am getting is …

---

## [🎉 What’s new in Elastic 9.4](https://discuss.elastic.co/t/what-s-new-in-elastic-9-4/386175)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [May 5, 2026, 4:31pm UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-9-4/386175 "2026-05-05T16:31:00Z")

</div>

:tada: What’s new in Elastic 9.4 Elastic 9.4 continues to reinforce the Elasticsearch Platform's role as the context and retrieval layer for AI workloads, while dramatically expanding its capabilities in metrics and t…

---

## [BindTransportException: Failed to bind to 9300-9400](https://discuss.elastic.co/t/bindtransportexception-failed-to-bind-to-9300-9400/47901)

<div class="topic-metadata">

**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\
**Replies:** 7\
**Last updated:** [May 16, 2017, 10:43am UTC](https://discuss.elastic.co/t/bindtransportexception-failed-to-bind-to-9300-9400/47901 "2017-05-16T10:43:51Z")

</div>

Trying to configure nodes(Network computers) under a cluster. When I start first node, it starts successfully. Even second node starts successfully, but (second) terminates as soon as it is started with the following…

---

## [Can't enroll agent to fleet: (Fail to enroll: fail to execute request to fleet-server)](https://discuss.elastic.co/t/cant-enroll-agent-to-fleet-fail-to-enroll-fail-to-execute-request-to-fleet-server/285682)

<div class="topic-metadata">

**Author:** [@John9](https://discuss.elastic.co/u/John9)\
**Replies:** 4\
**Last updated:** [November 9, 2021, 4:29pm UTC](https://discuss.elastic.co/t/cant-enroll-agent-to-fleet-fail-to-enroll-fail-to-execute-request-to-fleet-server/285682 "2021-11-09T16:29:34Z")

</div>

Hello, I've been trying to setup a testing ELK stack environment for learning purposes. I am running: VM1 = Ubuntu Server 20.04 running Elasticsearch / Kibana with IP 172.16.0.27. Minimal Security is on. VM2 = Ubuntu …

---

## [Deploying filebeat on AWS Beanstalk](https://discuss.elastic.co/t/deploying-filebeat-on-aws-beanstalk/72246)

<div class="topic-metadata">

**Author:** [@sharadachukka](https://discuss.elastic.co/u/sharadachukka)\
**Replies:** 2\
**Last updated:** [February 8, 2017, 3:36pm UTC](https://discuss.elastic.co/t/deploying-filebeat-on-aws-beanstalk/72246 "2017-02-08T15:36:14Z")

</div>

Has anybody deployed filebeat successfully on AWS beanstalk? What is your architecture? Is it best to write directly to elasticsearch?.. or better to have a logstash instances as middle layer to write to elasticsearch. C…

---

## [Quick question. How to start Kibana with custom config file?](https://discuss.elastic.co/t/quick-question-how-to-start-kibana-with-custom-config-file/123247)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 4:08pm UTC](https://discuss.elastic.co/t/quick-question-how-to-start-kibana-with-custom-config-file/123247 "2018-03-09T16:08:21Z")

</div>

Hi, I am using ELK GA 5.0.0. How can I start kibana with my\_kibana.yml instead of default kibana.yml? Thanks.

---

## [How to fix cluster health yellow with Elastic Search](https://discuss.elastic.co/t/how-to-fix-cluster-health-yellow-with-elastic-search/23484)

<div class="topic-metadata">

**Author:** [@James\_Crone](https://discuss.elastic.co/u/James_Crone)\
**Replies:** 4\
**Last updated:** [April 30, 2015, 11:16am UTC](https://discuss.elastic.co/t/how-to-fix-cluster-health-yellow-with-elastic-search/23484 "2015-04-30T11:16:01Z")

</div>

Hello.! Elastic search stuck in yellow status. I searched a lot about this problem and i find out same answer that to create two nodes. So i create two nodes by creating two config file elasticsearch.yml and…

---

## [Change Index on Visualisatons](https://discuss.elastic.co/t/change-index-on-visualisatons/58593)

<div class="topic-metadata">

**Author:** [@alvaroca1](https://discuss.elastic.co/u/alvaroca1)\
**Replies:** 3\
**Last updated:** [September 21, 2016, 1:16pm UTC](https://discuss.elastic.co/t/change-index-on-visualisatons/58593 "2016-09-21T13:16:28Z")

</div>

Good day, when I created my Index's for elastic I renamed them so I can validate and keep them organized. now I'm loading the default visualizations provided for Kibana and they create a winlobeat, Fileneat..etc. index …

---

## [\[C# NEST\] Best way of accessing properties of IAggregate object](https://discuss.elastic.co/t/c-nest-best-way-of-accessing-properties-of-iaggregate-object/85384)

<div class="topic-metadata">

**Author:** [@narcis](https://discuss.elastic.co/u/narcis)\
**Replies:** 2\
**Last updated:** [May 12, 2017, 9:12am UTC](https://discuss.elastic.co/t/c-nest-best-way-of-accessing-properties-of-iaggregate-object/85384 "2017-05-12T09:12:09Z")

</div>

Hi all, I'm trying to map the aggregations returned by ES through NEST into our own model, but I see that those aggregates within NEST are defined as being of type IAggregate. Since different types of aggregates (for…

---

## [How to split lines based on a term in Timelion using split() or other?](https://discuss.elastic.co/t/how-to-split-lines-based-on-a-term-in-timelion-using-split-or-other/85851)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 6\
**Last updated:** [May 18, 2017, 8:14am UTC](https://discuss.elastic.co/t/how-to-split-lines-based-on-a-term-in-timelion-using-split-or-other/85851 "2017-05-18T08:14:11Z")

</div>

Hi, I am using ELK GA 5.0.0. In my timelion, I am plotting success error ratio. My log contain time, user, and response. Response can be either error or success. My current timelion code is; .es(index=mylogs-\*, q='re…

---

## [Rejecting mapping update to \[\] as the final mapping would have more than 1 type](https://discuss.elastic.co/t/rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type/124316)

<div class="topic-metadata">

**Author:** [@tanisdlj](https://discuss.elastic.co/u/tanisdlj)\
**Replies:** 4\
**Last updated:** [March 16, 2018, 3:14pm UTC](https://discuss.elastic.co/t/rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type/124316 "2018-03-16T15:14:13Z")

</div>

Hi! I've just upgraded to ES6 and my ES logs started to throw this error: \[2018-03-16T15:31:05,759\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[logstash-2018.03.16\]\[3\] failed to execute bulk item (index) BulkShardRequest …

---

## [ECSEncoder - Add the possibility to process or transform the messages](https://discuss.elastic.co/t/ecsencoder-add-the-possibility-to-process-or-transform-the-messages/293204)

<div class="topic-metadata">

**Author:** [@fpena](https://discuss.elastic.co/u/fpena)\
**Replies:** 0\
**Last updated:** [December 30, 2021, 1:25pm UTC](https://discuss.elastic.co/t/ecsencoder-add-the-possibility-to-process-or-transform-the-messages/293204 "2021-12-30T13:25:33Z")

</div>

I need to be able to transform some messages. For example obfuscate some information. I want to be able to do that at the encoder level and not before on several components. Now a days, the encode method add the message…

---

## [Dec 1st, 2025: \[EN\] Dear Santa, Here’s a little --help for christmas](https://discuss.elastic.co/t/dec-1st-2025-en-dear-santa-here-s-a-little-help-for-christmas/383561)

<div class="topic-metadata">

**Author:** [@Laurent\_Saint-Felix](https://discuss.elastic.co/u/Laurent_Saint-Felix)\
**Replies:** 0\
**Last updated:** [December 1, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2025-en-dear-santa-here-s-a-little-help-for-christmas/383561 "2025-12-01T08:00:44Z")

</div>

Cet article est également disponible en Français. Every year, Santa Claus faces the same scaling problem: billions of children, one magical delivery window, zero margin for error. For centuries, he ran everything o…

---

## [How to run the schedule every five minutes in Logstash 5.0?](https://discuss.elastic.co/t/how-to-run-the-schedule-every-five-minutes-in-logstash-5-0/66222)

<div class="topic-metadata">

**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\
**Replies:** 2\
**Last updated:** [November 16, 2016, 9:47am UTC](https://discuss.elastic.co/t/how-to-run-the-schedule-every-five-minutes-in-logstash-5-0/66222 "2016-11-16T09:47:26Z")

</div>

I'm having a jdbc connection within my input in logstash where as I'm trying to execute the query according to the schedule property. I went through jdbc and rufus-scheduler, but still pretty unclear of what those five s…

---

## [Unable to connect http://127.0.0.1:9200](https://discuss.elastic.co/t/unable-to-connect-http-127-0-0-1-9200/91065)

<div class="topic-metadata">

**Author:** [@vijjun123](https://discuss.elastic.co/u/vijjun123)\
**Replies:** 8\
**Last updated:** [June 28, 2017, 10:14am UTC](https://discuss.elastic.co/t/unable-to-connect-http-127-0-0-1-9200/91065 "2017-06-28T10:14:35Z")

</div>

Hi , unable to connect http://127.0.0.1:9200 and got the below error curl -XGET http://127.0.0.1:9200 curl: (7) Failed to connect to 127.0.0.1 port 9200: Connection refused

---

## [Include/Exclude Pattern syntax](https://discuss.elastic.co/t/include-exclude-pattern-syntax/76823)

<div class="topic-metadata">

**Author:** [@cisaksen](https://discuss.elastic.co/u/cisaksen)\
**Replies:** 8\
**Last updated:** [March 2, 2017, 2:14pm UTC](https://discuss.elastic.co/t/include-exclude-pattern-syntax/76823 "2017-03-02T14:14:53Z")

</div>

I've been reading some post regarding include and exclude patterns and i'm still not sure what the correct syntax is. Is there a single syntax to these pattern options or is it based on the field your searching for a …

---

## [POST to elasticsearch bulk api from powershell](https://discuss.elastic.co/t/post-to-elasticsearch-bulk-api-from-powershell/89541)

<div class="topic-metadata">

**Author:** [@pemby](https://discuss.elastic.co/u/pemby)\
**Replies:** 0\
**Last updated:** [June 15, 2017, 11:19am UTC](https://discuss.elastic.co/t/post-to-elasticsearch-bulk-api-from-powershell/89541 "2017-06-15T11:19:36Z")

</div>

I spent a bit of time stuffing around to get this format right so here it is for anyone else wanting to do this. the key was to force the line feed and this was not obvious until i looked at the string in tcpdump. Be car…

---

## [Syslog timestamp format?](https://discuss.elastic.co/t/syslog-timestamp-format/49007)

<div class="topic-metadata">

**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\
**Replies:** 7\
**Last updated:** [May 11, 2017, 12:34pm UTC](https://discuss.elastic.co/t/syslog-timestamp-format/49007 "2017-05-11T12:34:07Z")

</div>

I am using logs from syslog, and syslog timestamp format doest not have year, and the timestamp format is May 3 09:10:10 how to add the year and convert the format to YYYY-MM-DD hh:mm:ss for the example ,it's will …

---

## [Why ElasticSearch was written in Java?](https://discuss.elastic.co/t/why-elasticsearch-was-written-in-java/182035)

<div class="topic-metadata">

**Author:** [@chughpiyush](https://discuss.elastic.co/u/chughpiyush)\
**Replies:** 3\
**Last updated:** [May 21, 2019, 4:00pm UTC](https://discuss.elastic.co/t/why-elasticsearch-was-written-in-java/182035 "2019-05-21T16:00:47Z")

</div>

I am exploring other languages than Java. What I have learnt till date is that there is no silver bullet to solve each kind of use case and one needs to choose a language on the basis of what problem they are trying to s…

---

## [Error accessing elastic monitoring tab on kibana](https://discuss.elastic.co/t/error-accessing-elastic-monitoring-tab-on-kibana/300620)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 5\
**Last updated:** [March 27, 2022, 12:16pm UTC](https://discuss.elastic.co/t/error-accessing-elastic-monitoring-tab-on-kibana/300620 "2022-03-27T12:16:43Z")

</div>

Hi all After upgraded my cluster to version 8.1 now i cannot access the tab stack monitoring anymore it keep give me this error Access Denied You are not authorized to access Monitoring. To use Monitoring, you need th…

---

## [Elastic Agent not shipping all logs from Kubernetes Cluster. Errors in logs](https://discuss.elastic.co/t/elastic-agent-not-shipping-all-logs-from-kubernetes-cluster-errors-in-logs/325620)

<div class="topic-metadata">

**Author:** [@slogger](https://discuss.elastic.co/u/slogger)\
**Replies:** 0\
**Last updated:** [February 15, 2023, 1:44pm UTC](https://discuss.elastic.co/t/elastic-agent-not-shipping-all-logs-from-kubernetes-cluster-errors-in-logs/325620 "2023-02-15T13:44:55Z")

</div>

Hello I have Elastic Agent installed on 5 EKS clusters for logging and monitoring. Recently the agents have stopped shipping all logs to the cluster (Hosted with elastic.cloud). Im seeing some logs, but not all (usual…

---

## [Doc values & field-data cache - Unexplained observation](https://discuss.elastic.co/t/doc-values-field-data-cache-unexplained-observation/60810)

<div class="topic-metadata">

**Author:** [@putkarsh](https://discuss.elastic.co/u/putkarsh)\
**Replies:** 0\
**Last updated:** [September 18, 2016, 1:45pm UTC](https://discuss.elastic.co/t/doc-values-field-data-cache-unexplained-observation/60810 "2016-09-18T13:45:29Z")

</div>

We are trying to enable doc values for our ES cluster running ES 1.7. We have created two test indices for our testing purposes. First index has the following template, { "some-text-here": { "dynamic\_temp…

---

## [Visualize: JSON Input: how to use? I want to lean](https://discuss.elastic.co/t/visualize-json-input-how-to-use-i-want-to-lean/164320)

<div class="topic-metadata">

**Author:** [@gauravb](https://discuss.elastic.co/u/gauravb)\
**Replies:** 1\
**Last updated:** [January 16, 2019, 2:35pm UTC](https://discuss.elastic.co/t/visualize-json-input-how-to-use-i-want-to-lean/164320 "2019-01-16T14:35:36Z")

</div>

Give me some link or document to learn THIS script language.

---

## [Index has exceeded \[1000000\] - maximum allowed to be analyzed for highlighting](https://discuss.elastic.co/t/index-has-exceeded-1000000-maximum-allowed-to-be-analyzed-for-highlighting/199273)

<div class="topic-metadata">

**Author:** [@oobi89](https://discuss.elastic.co/u/oobi89)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 6:01pm UTC](https://discuss.elastic.co/t/index-has-exceeded-1000000-maximum-allowed-to-be-analyzed-for-highlighting/199273 "2019-09-12T18:01:22Z")

</div>

Hello, I've came across strange problem when trying to get postgresql logs using Filebeats to elasticsearch and displaying it using kibana. I have configured elasticsearch with kibana and logstash on one of my server a…

---

## [Could Not Index Event to Elasticsearch Error?](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/106584)

<div class="topic-metadata">

**Author:** [@magdieldominguez](https://discuss.elastic.co/u/magdieldominguez)\
**Replies:** 7\
**Last updated:** [November 6, 2017, 11:30pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/106584 "2017-11-06T23:30:05Z")

</div>

Hi I am sending information from Logstash to Elasticsearch. The Elasticsearch is working fine but when I try to send it information to it from a log file it created the index for it but does not receive any of the inform…

---

## [Unable to communicate with Elasticseach](https://discuss.elastic.co/t/unable-to-communicate-with-elasticseach/70057)

<div class="topic-metadata">

**Author:** [@gve](https://discuss.elastic.co/u/gve)\
**Replies:** 8\
**Last updated:** [December 27, 2016, 10:40am UTC](https://discuss.elastic.co/t/unable-to-communicate-with-elasticseach/70057 "2016-12-27T10:40:03Z")

</div>

Hi, I'm a newcomer in "Elastic World" so maybe my question is really stupid, but after few hours with my freind Google, I did not found the answer. I start with a brand new installation, following each part of document…

---

## [Min date and max date](https://discuss.elastic.co/t/min-date-and-max-date/125174)

<div class="topic-metadata">

**Author:** [@srinivasthouti](https://discuss.elastic.co/u/srinivasthouti)\
**Replies:** 2\
**Last updated:** [March 22, 2018, 11:44am UTC](https://discuss.elastic.co/t/min-date-and-max-date/125174 "2018-03-22T11:44:14Z")

</div>

how can i get min date and max date in elastic search

---

## [Logstash output: If field exists, use other index](https://discuss.elastic.co/t/logstash-output-if-field-exists-use-other-index/141958)

<div class="topic-metadata">

**Author:** [@johann](https://discuss.elastic.co/u/johann)\
**Replies:** 2\
**Last updated:** [July 27, 2018, 3:03pm UTC](https://discuss.elastic.co/t/logstash-output-if-field-exists-use-other-index/141958 "2018-07-27T15:03:25Z")

</div>

Hi all, I want to use an other index, if a specific field exists... My output-config looks like this: output { if \[kubernetes.namespace\] { elasticsearch { hosts =\> "my-elastic.local:9200" …

---

## [Fleet Server - Error - x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/312923)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 8\
**Last updated:** [August 29, 2022, 8:27am UTC](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/312923 "2022-08-29T08:27:23Z")

</div>

Hi All, Please have some patience with me cause i ll give as much details. I have my ELK stack (elastic, kibana, logstash) on same local server (192.168.0.2) and im trying to install Fleet server on another host (192.1…

---

## [Logstash-input-mongodb (questions)](https://discuss.elastic.co/t/logstash-input-mongodb-questions/173363)

<div class="topic-metadata">

**Author:** [@pmarques](https://discuss.elastic.co/u/pmarques)\
**Replies:** 5\
**Last updated:** [April 9, 2019, 3:09pm UTC](https://discuss.elastic.co/t/logstash-input-mongodb-questions/173363 "2019-04-09T15:09:58Z")

</div>

Hello All, I have read some old discussions about using MongoDB as a data source. I mean, using Logstash to bring data from MongoDB and send it to Elasticsearch. Basically, this (https://discuss.elastic.co/t/mongodb-log…

---

## [String query - exact string](https://discuss.elastic.co/t/string-query-exact-string/176883)

<div class="topic-metadata">

**Author:** [@Astarandel](https://discuss.elastic.co/u/Astarandel)\
**Replies:** 6\
**Last updated:** [April 17, 2019, 3:56pm UTC](https://discuss.elastic.co/t/string-query-exact-string/176883 "2019-04-17T15:56:42Z")

</div>

Hello everyone: I m doing the following filtering: beat.hostname:APS01 AND program\_name:"deadline" And I get the results: Unfortunately, I don't want to include "deadline\_balancer" here. When I filter: "beat.host…

---

## [Can elasticsearch do GROUP BY and ORDER BY count?](https://discuss.elastic.co/t/can-elasticsearch-do-group-by-and-order-by-count/65365)

<div class="topic-metadata">

**Author:** [@linuxdev](https://discuss.elastic.co/u/linuxdev)\
**Replies:** 5\
**Last updated:** [November 8, 2016, 8:52pm UTC](https://discuss.elastic.co/t/can-elasticsearch-do-group-by-and-order-by-count/65365 "2016-11-08T20:52:07Z")

</div>

Let's say I have dictionary application where people come and look up word definitions. Im trying to visualize top N most popular words during some timeframe. In SQL I would do it possibly like this: SELECT wor…

---

## [Elasticsearch 5.1.1 cannot run as root user](https://discuss.elastic.co/t/elasticsearch-5-1-1-cannot-run-as-root-user/70304)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 6\
**Last updated:** [December 31, 2016, 3:07am UTC](https://discuss.elastic.co/t/elasticsearch-5-1-1-cannot-run-as-root-user/70304 "2016-12-31T03:07:16Z")

</div>

Hi, I was trying to run elasticsearch.5.1.1 version in my server and i get the following error: \[2016-12-30T15:45:51,714\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] uncaught exception in thread \[main\] org.e…

[Previous page](https://discuss.elastic.co/top.md?page=263&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=265&per_page=50&period=all)
