# Top **URL:** https://discuss.elastic.co/top.md?page=266&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 267 --- ## [Getting a bunch of startup errors when trying to run ES 6.3.2 on my mac](https://discuss.elastic.co/t/getting-a-bunch-of-startup-errors-when-trying-to-run-es-6-3-2-on-my-mac/203831)
**Author:** [@Nicholas\_Hillier](https://discuss.elastic.co/u/Nicholas_Hillier)\ **Replies:** 5\ **Last updated:** [July 16, 2020, 5:10am UTC](https://discuss.elastic.co/t/getting-a-bunch-of-startup-errors-when-trying-to-run-es-6-3-2-on-my-mac/203831 "2020-07-16T05:10:10Z")
I was running, without issue, Elastic Search 7.4.0 which comes bundled with a JDK. However, after downloading and attempting to run 6.3.2, I receive 12 errors with the following message: Message: access denied ("java.l… --- ## [Windowsコマンドラインからcurlで全角文字を送るには](https://discuss.elastic.co/t/windows-curl/49604)
**Author:** [@yyam](https://discuss.elastic.co/u/yyam)\ **Replies:** 6\ **Last updated:** [May 13, 2016, 12:14am UTC](https://discuss.elastic.co/t/windows-curl/49604 "2016-05-13T00:14:01Z")
Windows7 (日本語) のコマンドプロンプトから curl (curl-7.33.0-win64-nossl) で elasticsearch にインデックスのフィールドの値を入力するとき 値が英数字の時は正しく入力できるのですが 値が全角文字の時は以下のようなエラーになってしまいます。 値が全角文字の時はどのように記述すればよろしいのでしょうか。 curl -X PUT http://localhost:9200/ho… --- ## [Is this free?](https://discuss.elastic.co/t/is-this-free/58618)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 2\ **Last updated:** [August 22, 2016, 9:09pm UTC](https://discuss.elastic.co/t/is-this-free/58618 "2016-08-22T21:09:56Z")
Hi Experts, I was just exploring this new extension of ES and Kibana, I am curious to know is it free ? Thanks VG --- ## [Result window is too large](https://discuss.elastic.co/t/result-window-is-too-large/319979)
**Author:** [@rayyanalbaz1](https://discuss.elastic.co/u/rayyanalbaz1)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 11:01pm UTC](https://discuss.elastic.co/t/result-window-is-too-large/319979 "2022-11-28T23:01:51Z")
Hello, I am facing an issue when using from and size to query the last page for example: my index contains 122000 documents if I specify size = 100 and from = 121000 I get the following error: {"type":"illegal\_argume… --- ## [ECS compatibility target info message](https://discuss.elastic.co/t/ecs-compatibility-target-info-message/304244)
**Author:** [@thibveni](https://discuss.elastic.co/u/thibveni)\ **Replies:** 1\ **Last updated:** [May 9, 2022, 1:28pm UTC](https://discuss.elastic.co/t/ecs-compatibility-target-info-message/304244 "2022-05-09T13:28:46Z")
Hello, i'm using logstash in v8.1.3 and since the upgrade in v8 i have this info message: logstash\_1 | \[2022-05-09T09:57:59,861\]\[INFO \]\[logstash.codecs.jsonlines\] ECS compatibility is enabled but \`target\` option was no… --- ## [Handlng microsecond timestamps](https://discuss.elastic.co/t/handlng-microsecond-timestamps/38350)
**Author:** [@bbach](https://discuss.elastic.co/u/bbach)\ **Replies:** 0\ **Last updated:** [January 4, 2016, 10:20pm UTC](https://discuss.elastic.co/t/handlng-microsecond-timestamps/38350 "2016-01-04T22:20:06Z")
Elasticseach search's native timestamp can currently only handle times with millisecond resolution and I know there are people out there looking to store timestamps with as least microsecond (usec) resolution. My wor… --- ## [Number format Exception For string type](https://discuss.elastic.co/t/number-format-exception-for-string-type/59175)
**Author:** [@parithiban](https://discuss.elastic.co/u/parithiban)\ **Replies:** 7\ **Last updated:** [May 30, 2017, 11:00pm UTC](https://discuss.elastic.co/t/number-format-exception-for-string-type/59175 "2017-05-30T23:00:40Z")
I have a mapping like this "users": { "user\_profiles": { "properties": { "score" : { "type": "string" } } } } I can get the score as inte… --- ## [Create a new field using Regular Expressions](https://discuss.elastic.co/t/create-a-new-field-using-regular-expressions/139397)
**Author:** [@martb](https://discuss.elastic.co/u/martb)\ **Replies:** 2\ **Last updated:** [July 10, 2018, 4:37pm UTC](https://discuss.elastic.co/t/create-a-new-field-using-regular-expressions/139397 "2018-07-10T16:37:26Z")
Hi, I'm trying to extract part of a field using RegEx and create a new field with the extracted text. i.e string = alert message|User: johnc |Host: test |Event type: test capture = johnc RegEx example : User: (… --- ## [Kibana 7.9.0: Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read](https://discuss.elastic.co/t/kibana-7-9-0-configuring-logger-failed-error-eisdir-illegal-operation-on-a-directory-read/245653)
**Author:** [@nixy](https://discuss.elastic.co/u/nixy)\ **Replies:** 7\ **Last updated:** [August 20, 2020, 4:04pm UTC](https://discuss.elastic.co/t/kibana-7-9-0-configuring-logger-failed-error-eisdir-illegal-operation-on-a-directory-read/245653 "2020-08-20T16:04:08Z")
Upgraded Kibana-full 7.8.1 to 7.9.0 using homebrew and elastic/tap/kibana-full. Afterwards when start kibana always get this error: Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read ..… --- ## [How is -%{+YYYY.MM.dd} generated on Logstash output](https://discuss.elastic.co/t/how-is-yyyy-mm-dd-generated-on-logstash-output/142189)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 3\ **Last updated:** [August 1, 2018, 8:35pm UTC](https://discuss.elastic.co/t/how-is-yyyy-mm-dd-generated-on-logstash-output/142189 "2018-08-01T20:35:52Z")
Hello, I use daily ES indices that are created by Logstash using output { elasticsearch { ... index =\> "%{\[@metadata\]\[foo\]}-%{+YYYY.MM.dd}" } } I always assumed that Logstash looks up the date from the sy… --- ## [Parsing a JSON array of objects](https://discuss.elastic.co/t/parsing-a-json-array-of-objects/55441)
**Author:** [@gigavinyl](https://discuss.elastic.co/u/gigavinyl)\ **Replies:** 5\ **Last updated:** [July 27, 2016, 9:23am UTC](https://discuss.elastic.co/t/parsing-a-json-array-of-objects/55441 "2016-07-27T09:23:49Z")
I have a log file that's an array of objects that looks something like this: \[ { "cate1": "data1a", "cate2": "data2a" }, { "cate1": "data1b", "cate2": "data2b" } \] and I need each object … --- ## [GROK Multiple Match - Logstash](https://discuss.elastic.co/t/grok-multiple-match-logstash/27870)
**Author:** [@Dario\_Pezzi](https://discuss.elastic.co/u/Dario_Pezzi)\ **Replies:** 3\ **Last updated:** [February 19, 2016, 7:03am UTC](https://discuss.elastic.co/t/grok-multiple-match-logstash/27870 "2016-02-19T07:03:52Z")
Dear All, I'm looking for to match multiple patterns against a single field (message) but I can't understand how it works. This is my multiple match defined inside filter: grok { patterns\_dir =\> "/etc/logstash/pa… --- ## [\[CheckPoint\] \[Filebeat 7.8\] Provided Grok expressions do not match field value](https://discuss.elastic.co/t/checkpoint-filebeat-7-8-provided-grok-expressions-do-not-match-field-value/238186)
**Author:** [@julianksanchez](https://discuss.elastic.co/u/julianksanchez)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 5:29am UTC](https://discuss.elastic.co/t/checkpoint-filebeat-7-8-provided-grok-expressions-do-not-match-field-value/238186 "2020-06-23T05:29:00Z")
Hello all, I want to send logs directly to Elastic from my CheckPoint Management. This is my checkpoint.yml configuration : module: checkpoint firewall: enabled: true var.syslog\_host: 10.10.10.1 var.syslog\_port: 514 o… --- ## [How to rebalance primary shards on elastic cluster](https://discuss.elastic.co/t/how-to-rebalance-primary-shards-on-elastic-cluster/176060)
**Author:** [@oraclept](https://discuss.elastic.co/u/oraclept)\ **Replies:** 4\ **Last updated:** [April 25, 2019, 5:13pm UTC](https://discuss.elastic.co/t/how-to-rebalance-primary-shards-on-elastic-cluster/176060 "2019-04-25T17:13:53Z")
Hi - How can I rebalance primary shards on elasticsearch cluster? Below are primary shards allocation on 5 node elastic cluster. We are seeing huge spikes on node4 6 node1 38 node2 116 node3 162 node4… --- ## [Authentication of \[kibana\] was terminated by realm \[reserved\] - failed to authenticate user \[kibana\]](https://discuss.elastic.co/t/authentication-of-kibana-was-terminated-by-realm-reserved-failed-to-authenticate-user-kibana/205448)
**Author:** [@arb](https://discuss.elastic.co/u/arb)\ **Replies:** 7\ **Last updated:** [October 28, 2019, 2:24pm UTC](https://discuss.elastic.co/t/authentication-of-kibana-was-terminated-by-realm-reserved-failed-to-authenticate-user-kibana/205448 "2019-10-28T14:24:03Z")
I am having a problem with a clean installation of elastic & kibana (Basic). Steps so far: install Elasticsearch (7.4.1) install kibana (7.4.1) each works fine and can communicate to each other. Add the config… --- ## [In which case ElasticSearch will return 429?](https://discuss.elastic.co/t/in-which-case-elasticsearch-will-return-429/23483)
**Author:** [@shinyke](https://discuss.elastic.co/u/shinyke)\ **Replies:** 3\ **Last updated:** [April 30, 2015, 5:55pm UTC](https://discuss.elastic.co/t/in-which-case-elasticsearch-will-return-429/23483 "2015-04-30T17:55:59Z")
When doing pressure test on ES cluster，it sometimes may return 429(too many request). I can't find any detail docs about this.In which case ElasticSearch may return 429 ? -- You received this message because… --- ## [Removal of discovery.zen.minimum\_master\_nodes](https://discuss.elastic.co/t/removal-of-discovery-zen-minimum-master-nodes/179263)
**Author:** [@sg.esearch](https://discuss.elastic.co/u/sg.esearch)\ **Replies:** 1\ **Last updated:** [May 2, 2019, 1:46am UTC](https://discuss.elastic.co/t/removal-of-discovery-zen-minimum-master-nodes/179263 "2019-05-02T01:46:57Z")
As described in https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-7.0.html#breaking\_70\_discovery\_changes, discovery.zen.minimum\_master\_nodes option is ingored in 7.0 version. But this sett… --- ## [Index.max\_result\_window - not working](https://discuss.elastic.co/t/index-max-result-window-not-working/130509)
**Author:** [@pamamolf](https://discuss.elastic.co/u/pamamolf)\ **Replies:** 7\ **Last updated:** [May 4, 2018, 1:39pm UTC](https://discuss.elastic.co/t/index-max-result-window-not-working/130509 "2018-05-04T13:39:29Z")
Hello I am getting this error on latest version of elastic: Result window is too large, from + size must be less than or equal to: \[10000\] but was \[2039925\]. so i was try to add at the elasticsearch.yml configuration … --- ## [Logstash: retrying failed action with response code: 429](https://discuss.elastic.co/t/logstash-retrying-failed-action-with-response-code-429/102824)
**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\ **Replies:** 4\ **Last updated:** [October 5, 2017, 5:07pm UTC](https://discuss.elastic.co/t/logstash-retrying-failed-action-with-response-code-429/102824 "2017-10-05T17:07:14Z")
I am get the below error continuously in Logstash (v5.5) Pushing logs using FileBeat (v5.5) with 2-3 logs files then it works fine. But when using logs using Filebeat with 150+ logs files then I get below error. (since… --- ## [Logstash not creating index daily based on date](https://discuss.elastic.co/t/logstash-not-creating-index-daily-based-on-date/189306)
**Author:** [@svm89](https://discuss.elastic.co/u/svm89)\ **Replies:** 8\ **Last updated:** [August 21, 2019, 2:27pm UTC](https://discuss.elastic.co/t/logstash-not-creating-index-daily-based-on-date/189306 "2019-08-21T14:27:13Z")
Hi guys, I have set up a ELK stack platform for work and I am facing some issues with some indices, basically they are not rotating daily based on the date (like logstash-YYYY.MM.DD). The pipeline config is the followi… --- ## [Logstash with Splunk](https://discuss.elastic.co/t/logstash-with-splunk/38269)
**Author:** [@vadimso](https://discuss.elastic.co/u/vadimso)\ **Replies:** 2\ **Last updated:** [May 8, 2017, 7:27pm UTC](https://discuss.elastic.co/t/logstash-with-splunk/38269 "2017-05-08T19:27:01Z")
Hello All, Is it possible to configure Logstash to send logs (windows event log ) to Splunk to get events after logstash parsing? Tnx in advance --- ## [Conditional grok](https://discuss.elastic.co/t/conditional-grok/33641)
**Author:** [@Tak\_MK](https://discuss.elastic.co/u/Tak_MK)\ **Replies:** 7\ **Last updated:** [November 4, 2015, 8:40am UTC](https://discuss.elastic.co/t/conditional-grok/33641 "2015-11-04T08:40:40Z")
Hi guys! I have a log with two totally different patterns (yeah, I should split them up), and I want to parse them with grok. Can I do something like "if the message has X word, use this grok pattern, else, use that … --- ## [Issue in Logstash installation on Windows](https://discuss.elastic.co/t/issue-in-logstash-installation-on-windows/136852)
**Author:** [@Shweta\_Priyadarshani](https://discuss.elastic.co/u/Shweta_Priyadarshani)\ **Replies:** 7\ **Last updated:** [July 25, 2018, 12:47pm UTC](https://discuss.elastic.co/t/issue-in-logstash-installation-on-windows/136852 "2018-07-25T12:47:44Z")
Hello all, I am completely new to logstash. I began with downloading logstash for windows zip file, unzipped it in d drive. Now i am trying to cmd D:\\logstash-6.3.0\\bin\>logstash. Its giving me following error: Sending … --- ## [Unexpected error while indexing monitoring document org.elasticsearch.xpack.monitoring](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-org-elasticsearch-xpack-monitoring/120750)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 2\ **Last updated:** [February 22, 2018, 9:30pm UTC](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-org-elasticsearch-xpack-monitoring/120750 "2018-02-22T21:30:51Z")
Hello, I updated from 5.6.2 to 6.2.1 on Sunday and today I started to get this error, which stopped all the indexing on my nodes whic made some data to be lost since I have tcp and udp inputs comingo from logstash that … --- ## [How does the cutoff\_frequency work on the match query](https://discuss.elastic.co/t/how-does-the-cutoff-frequency-work-on-the-match-query/80694)
**Author:** [@Martijn\_Laarman](https://discuss.elastic.co/u/Martijn_Laarman)\ **Replies:** 2\ **Last updated:** [April 18, 2017, 11:27am UTC](https://discuss.elastic.co/t/how-does-the-cutoff-frequency-work-on-the-match-query/80694 "2017-04-18T11:27:52Z")
Given the following sense session: DELETE /my-index PUT my-index { "settings": { "number\_of\_replicas": 0, "number\_of\_shards": 1 } } PUT /my-index/search\_item/1 { "title" : " the car", "type": "article… --- ## [Filter multiple different file beat logs in logstash](https://discuss.elastic.co/t/filter-multiple-different-file-beat-logs-in-logstash/76847)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 4\ **Last updated:** [March 2, 2017, 7:04am UTC](https://discuss.elastic.co/t/filter-multiple-different-file-beat-logs-in-logstash/76847 "2017-03-02T07:04:39Z")
Hi, I am currently sending apache access logs from a remote server to my Logstash server by running FileBeat on the remote server. This is working like a charm. I would like to also send other logs with different log… --- ## ["Add filter", "contains"-operator?](https://discuss.elastic.co/t/add-filter-contains-operator/105754)
**Author:** [@CarlKnutsen](https://discuss.elastic.co/u/CarlKnutsen)\ **Replies:** 2\ **Last updated:** [October 30, 2017, 1:14pm UTC](https://discuss.elastic.co/t/add-filter-contains-operator/105754 "2017-10-30T13:14:29Z")
Hi there, I am wondering why there doesn't exist a "contains" operator in the "Add filter"-window. I'd like to do something like this: \[image\] When I select "is" I am getting no result. But when I enter "message:\*test… --- ## [Dec 4th, 2024: \[EN\] Does the Elasticsearch Python client work with free-threading Python?](https://discuss.elastic.co/t/dec-4th-2024-en-does-the-elasticsearch-python-client-work-with-free-threading-python/370392)
**Author:** [@Quentin\_Pradet](https://discuss.elastic.co/u/Quentin_Pradet)\ **Replies:** 0\ **Last updated:** [December 4, 2024, 8:00am UTC](https://discuss.elastic.co/t/dec-4th-2024-en-does-the-elasticsearch-python-client-work-with-free-threading-python/370392 "2024-12-04T08:00:29Z")
Cet article est disponible en français. In this post, we'll run some experiments to see if the Python Elasticsearch client is compatible with the new Python 3.13 free-threading builds, where the GIL was removed. Introd… --- ## [Failed to send logs to elasticsearch output because failed to create ILM alias](https://discuss.elastic.co/t/failed-to-send-logs-to-elasticsearch-output-because-failed-to-create-ilm-alias/179116)
**Author:** [@razafinr](https://discuss.elastic.co/u/razafinr)\ **Replies:** 5\ **Last updated:** [May 26, 2019, 4:44pm UTC](https://discuss.elastic.co/t/failed-to-send-logs-to-elasticsearch-output-because-failed-to-create-ilm-alias/179116 "2019-05-26T16:44:10Z")
Hello, I am using metricbeat 7.0.0 and sending data to the elasticsearch output. My elasticsearch version is also 7.0.0 I have a very basic configuration: metricbeat.config.modules: # Glob pattern for configuration … --- ## [🎉 What’s new in Elastic 8.14](https://discuss.elastic.co/t/what-s-new-in-elastic-8-14/360940)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 8:27am UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-14/360940 "2024-06-06T08:27:41Z")
:tada: What’s new in Elastic 8.14 Learn about Elastic 8.14 which includes the GA of ES|QL, improvements in vector search, new generative AI Attack Discovery security capabilities, and more. Elastic Search helps devel… --- ## [Curator does not backup all index on Azure](https://discuss.elastic.co/t/curator-does-not-backup-all-index-on-azure/232773)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 0\ **Last updated:** [May 15, 2020, 9:07am UTC](https://discuss.elastic.co/t/curator-does-not-backup-all-index-on-azure/232773 "2020-05-15T09:07:51Z")
Hi, everyone I use Curator tool in order to backup all my index on Azure. However, it only backup 46 index. On Kibana: PUT \_snapshot/azure { "type": "azure", "settings": { "container": "container-name-azure", … --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/157025)
**Author:** [@subhas](https://discuss.elastic.co/u/subhas)\ **Replies:** 3\ **Last updated:** [November 19, 2018, 3:23pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/157025 "2018-11-19T15:23:23Z")
Kibana url is not working. Whether kibana service is started or stopped, it is giving the same error when i go to http://localhost:9243 - "Kibana server is not ready yet". I am using centos 7. But the elasticsearch and k… --- ## [Unknown key for a START\_OBJECT in \[should\]](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-should/140008)
**Author:** [@nola111](https://discuss.elastic.co/u/nola111)\ **Replies:** 5\ **Last updated:** [July 16, 2018, 4:20pm UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-should/140008 "2018-07-16T16:20:03Z")
Hi all, Still brand new to ElasticSearch (and JSON for that matter). I get this error: { "error": { "root\_cause": \[ { "type": "parsing\_exception", "reason": "Unk… --- ## [Action \[indices:admin/create\] is unauthorized for user](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user/303458)
**Author:** [@mattstubbs](https://discuss.elastic.co/u/mattstubbs)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 1:02am UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user/303458 "2022-04-29T01:02:57Z")
Hi Team, tl;dr: Complains that user needs one of \[create\_index,manage,all\], but user has create\_index and manage A pretty basic error message here that seems very straightforward but is giving my team trouble. I am tr… --- ## [How to store document history (versioning, revisions)?](https://discuss.elastic.co/t/how-to-store-document-history-versioning-revisions/32651)
**Author:** [@mos](https://discuss.elastic.co/u/mos)\ **Replies:** 8\ **Last updated:** [May 3, 2016, 4:49pm UTC](https://discuss.elastic.co/t/how-to-store-document-history-versioning-revisions/32651 "2016-05-03T16:49:09Z")
We have a very common requirement: On every document update, we need to store the old version. Thus we would have a complete history of document changes. I plan to build a second index that holds all the archived docu… --- ## [How to set the scheduler of JDBC from the INPUT plugin to every 5 seconds](https://discuss.elastic.co/t/how-to-set-the-scheduler-of-jdbc-from-the-input-plugin-to-every-5-seconds/62164)
**Author:** [@xiaozhuqq48](https://discuss.elastic.co/u/xiaozhuqq48)\ **Replies:** 6\ **Last updated:** [March 7, 2017, 10:00pm UTC](https://discuss.elastic.co/t/how-to-set-the-scheduler-of-jdbc-from-the-input-plugin-to-every-5-seconds/62164 "2017-03-07T22:00:30Z")
Original doc :Schedule of when to periodically run statement, in Cron format for example: "\* \* \* \* \*" (execute query every minute, on the minute) Is there any way to narrow down the period to 5 seconds? Thanks. --- ## [Setting Elasticsearch Docker container's timezone](https://discuss.elastic.co/t/setting-elasticsearch-docker-containers-timezone/88141)
**Author:** [@Steve\_1](https://discuss.elastic.co/u/Steve_1)\ **Replies:** 0\ **Last updated:** [June 3, 2017, 12:58am UTC](https://discuss.elastic.co/t/setting-elasticsearch-docker-containers-timezone/88141 "2017-06-03T00:58:32Z")
What is the proper way to set Elasticsearch Docker container's timezone? For Logstash it can be done with environment variable -e TZ="timezone\_name" . But none of the options -e TZ="timezone\_name" or -e "TZ=timezone\_n… --- ## [Elasticsearch in docker, and the restclient often got java.util.concurrent.TimeoutException](https://discuss.elastic.co/t/elasticsearch-in-docker-and-the-restclient-often-got-java-util-concurrent-timeoutexception/68118)
**Author:** [@compasses](https://discuss.elastic.co/u/compasses)\ **Replies:** 0\ **Last updated:** [December 6, 2016, 1:59am UTC](https://discuss.elastic.co/t/elasticsearch-in-docker-and-the-restclient-often-got-java-util-concurrent-timeoutexception/68118 "2016-12-06T01:59:45Z")
Often face such error, this issue purely caused by bad network circumstances? Caused by: java.util.concurrent.TimeoutException at org.apache.http.nio.pool.AbstractNIOConnPool.processPendingRequest(AbstractNIOConnPool.ja… --- ## [Most efficient way to query without a score](https://discuss.elastic.co/t/most-efficient-way-to-query-without-a-score/57457)
**Author:** [@tpraizler](https://discuss.elastic.co/u/tpraizler)\ **Replies:** 5\ **Last updated:** [August 12, 2016, 8:57pm UTC](https://discuss.elastic.co/t/most-efficient-way-to-query-without-a-score/57457 "2016-08-12T20:57:26Z")
Hey, I am trying to figure out what is the most efficient way to query elasticsearch without scoring. (I assume that scoring add more overhead, and no scoring make it faster). I need to be able to say filter all tha… --- ## [Equals NOT Filter in Kibana Visualisation](https://discuss.elastic.co/t/equals-not-filter-in-kibana-visualisation/208475)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 10:01am UTC](https://discuss.elastic.co/t/equals-not-filter-in-kibana-visualisation/208475 "2019-11-19T10:01:56Z")
Hope this will be a quick one: I try to set a filter in my dashboards which EXCLUDES a certain hostname. Kibana tells me i can use : to equal a value and :\* to search for an exisitin field and also the typical and & … --- ## [Rally 2.7.1](https://discuss.elastic.co/t/rally-2-7-1/326852)
**Author:** [@Quentin\_Pradet](https://discuss.elastic.co/u/Quentin_Pradet)\ **Replies:** 0\ **Last updated:** [March 2, 2023, 1:15pm UTC](https://discuss.elastic.co/t/rally-2-7-1/326852 "2023-03-02T13:15:50Z")
We have just released Rally 2.7.1. Highlights #1674: Allow reading metrics password from environment #1624: Skip building plugins moved to modules Enhancements #1654: Add role metadata to node-stats telemetry device #… --- ## [Exiting: resource 'metricbeat-7.4.2' exists, but it is not an alias](https://discuss.elastic.co/t/exiting-resource-metricbeat-7-4-2-exists-but-it-is-not-an-alias/206685)
**Author:** [@kenbergquist](https://discuss.elastic.co/u/kenbergquist)\ **Replies:** 5\ **Last updated:** [November 21, 2019, 1:08pm UTC](https://discuss.elastic.co/t/exiting-resource-metricbeat-7-4-2-exists-but-it-is-not-an-alias/206685 "2019-11-21T13:08:52Z")
After upgrading from 6.8.2 to 7.4.2, when executing metricbeat setup, I receive the error Exiting: resource 'metricbeat-7.4.2' exists, but it is not an alias Visualizations and dashboards are of course largely broken… --- ## [Access nested fields in mutate filter](https://discuss.elastic.co/t/access-nested-fields-in-mutate-filter/58172)
**Author:** [@rudo](https://discuss.elastic.co/u/rudo)\ **Replies:** 4\ **Last updated:** [August 21, 2016, 10:24am UTC](https://discuss.elastic.co/t/access-nested-fields-in-mutate-filter/58172 "2016-08-21T10:24:26Z")
Hello, I would like to ask a question regarding accessing nested fields in logstash. There is "processes" object in my JSON which has nested field "Name". I would like to extract the field value from the nested objec… --- ## [Dec 4th, 2018: \[EN\]\[ML\] Rarity Analysis with Machine Learning](https://discuss.elastic.co/t/dec-4th-2018-en-ml-rarity-analysis-with-machine-learning/158979)
**Author:** [@richcollier](https://discuss.elastic.co/u/richcollier)\ **Replies:** 0\ **Last updated:** [December 4, 2018, 12:00am UTC](https://discuss.elastic.co/t/dec-4th-2018-en-ml-rarity-analysis-with-machine-learning/158979 "2018-12-04T00:00:05Z")
Often it is easy to forget about one key capability of our ML - Rarity Analysis Finding items that rarely occur is often very useful. Some example use cases are finding: Rarely occurring log messages Rare running proc… --- ## [Collecting logfiles of Docker containers with filebeat running as Docker container](https://discuss.elastic.co/t/collecting-logfiles-of-docker-containers-with-filebeat-running-as-docker-container/77548)
**Author:** [@MartinAhrer](https://discuss.elastic.co/u/MartinAhrer)\ **Replies:** 5\ **Last updated:** [March 21, 2017, 3:07pm UTC](https://discuss.elastic.co/t/collecting-logfiles-of-docker-containers-with-filebeat-running-as-docker-container/77548 "2017-03-21T15:07:54Z")
I have added docker containers with the ELK components plus filebeat networks: elk: external: name: elk services: elasticsearch: environment: http.host: 0.0.0.0 transport.host: 127.0.0.… --- ## [Logstash compare one field with multiple value (string)](https://discuss.elastic.co/t/logstash-compare-one-field-with-multiple-value-string/42315)
**Author:** [@gnoale](https://discuss.elastic.co/u/gnoale)\ **Replies:** 5\ **Last updated:** [February 22, 2016, 9:25pm UTC](https://discuss.elastic.co/t/logstash-compare-one-field-with-multiple-value-string/42315 "2016-02-22T21:25:46Z")
Hi there, This is the configuration I am using for debugging purpose. The goal is basically to filter sources hosts to apply appropriate filter to the messages, and add a tag to distinguish them in elasticsearch. inp… --- ## [If you can't delete a "stuck" (In progress/aborted) snapshot](https://discuss.elastic.co/t/if-you-cant-delete-a-stuck-in-progress-aborted-snapshot/65041)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 0\ **Last updated:** [November 4, 2016, 6:24pm UTC](https://discuss.elastic.co/t/if-you-cant-delete-a-stuck-in-progress-aborted-snapshot/65041 "2016-11-04T18:24:31Z")
Maybe this is only an issue in older versions, but I've seen a few posts about this and no solution other than rolling restarts. I've seen this issue a few times, and have been able to resolve it without restarting all … --- ## [Query elasticsearch from browser/webservice](https://discuss.elastic.co/t/query-elasticsearch-from-browser-webservice/129697)
**Author:** [@Martijn](https://discuss.elastic.co/u/Martijn)\ **Replies:** 2\ **Last updated:** [April 28, 2018, 6:43pm UTC](https://discuss.elastic.co/t/query-elasticsearch-from-browser-webservice/129697 "2018-04-28T18:43:37Z")
Hello, I've recently upgraded my Elasticsearch environment from 2.4 to 6.2. The old ES 2.4 environment was sometimes used as a datasource by ETL processes. The ETL process involved a simple API call, which looks like th… --- ## [All shards failed for phase: \[query\] on Elasticsearch 7.2.0](https://discuss.elastic.co/t/all-shards-failed-for-phase-query-on-elasticsearch-7-2-0/193270)
**Author:** [@Extinguo](https://discuss.elastic.co/u/Extinguo)\ **Replies:** 4\ **Last updated:** [August 1, 2019, 11:23am UTC](https://discuss.elastic.co/t/all-shards-failed-for-phase-query-on-elasticsearch-7-2-0/193270 "2019-08-01T11:23:47Z")
Hey guys, I'm running Elastic 7.2.0 on a single machine in docker containers. It works fine except for some problems with the shards. I let Elastic run for a few days and looked at the logs today. The look fine, except… --- ## [Why does elasticsearch use PKCS#12, while Kibana needs PEM?](https://discuss.elastic.co/t/why-does-elasticsearch-use-pkcs-12-while-kibana-needs-pem/161756)
**Author:** [@avocado](https://discuss.elastic.co/u/avocado)\ **Replies:** 2\ **Last updated:** [December 21, 2018, 5:49pm UTC](https://discuss.elastic.co/t/why-does-elasticsearch-use-pkcs-12-while-kibana-needs-pem/161756 "2018-12-21T17:49:12Z")
What's the best way to deal with this? Should I just convert the CA and keys using openssl? [Previous page](https://discuss.elastic.co/top.md?page=265&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=267&per_page=50&period=all)