# Top

**URL:** https://discuss.elastic.co/top.md?page=268&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 269

---

## [Extract the underlying query from a filter which I created visually](https://discuss.elastic.co/t/extract-the-underlying-query-from-a-filter-which-i-created-visually/68767)

<div class="topic-metadata">

**Author:** [@coder-98103](https://discuss.elastic.co/u/coder-98103)\
**Replies:** 3\
**Last updated:** [December 13, 2016, 11:08pm UTC](https://discuss.elastic.co/t/extract-the-underlying-query-from-a-filter-which-i-created-visually/68767 "2016-12-13T23:08:43Z")

</div>

I am new to the Elastic Stack, so far it has been super-fun to learn. Thanks for making this great toolkit available! The feature I most love in Kibana is the feature where you select a region from a timeline or a slic…

---

## [Elasticsearch won't start after 7.9.1 to 7.9.2 upgrade](https://discuss.elastic.co/t/elasticsearch-wont-start-after-7-9-1-to-7-9-2-upgrade/249878)

<div class="topic-metadata">

**Author:** [@craigothy](https://discuss.elastic.co/u/craigothy)\
**Replies:** 3\
**Last updated:** [October 14, 2020, 10:53am UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-after-7-9-1-to-7-9-2-upgrade/249878 "2020-10-14T10:53:06Z")

</div>

For some reason, I am getting the following JVM error when starting elasticsearch 7.9.2 on CentOS7 after a yum upgrade. Any ideas? Thanks for any help: Exception in thread "main" java.lang.RuntimeException: starting ja…

---

## [Cluster currently has \[1000\]/\[1000\] maximum normal shards open](https://discuss.elastic.co/t/cluster-currently-has-1000-1000-maximum-normal-shards-open/347719)

<div class="topic-metadata">

**Author:** [@DaddyYusk](https://discuss.elastic.co/u/DaddyYusk)\
**Replies:** 4\
**Last updated:** [November 23, 2023, 1:32pm UTC](https://discuss.elastic.co/t/cluster-currently-has-1000-1000-maximum-normal-shards-open/347719 "2023-11-23T13:32:03Z")

</div>

Hi, From the title, this is an error I usually encounter with my Elastic Proof Of Concept. The workaround is easy, I simply close and delete some indices from time to time... But now I'm currently deploying Elastic in…

---

## [Exporting the discover data (Saved Search) in CSV](https://discuss.elastic.co/t/exporting-the-discover-data-saved-search-in-csv/125864)

<div class="topic-metadata">

**Author:** [@kishore\_narni](https://discuss.elastic.co/u/kishore_narni)\
**Replies:** 6\
**Last updated:** [March 28, 2018, 7:02pm UTC](https://discuss.elastic.co/t/exporting-the-discover-data-saved-search-in-csv/125864 "2018-03-28T19:02:22Z")

</div>

Hi all, I am very new to kibana and started learning the basics. Currently I am working in kibana 6. My requirement i have to create a search in which we can sort or filter on any column we and export the search data …

---

## [Validation failed because of missing type with bulk API](https://discuss.elastic.co/t/validation-failed-because-of-missing-type-with-bulk-api/118465)

<div class="topic-metadata">

**Author:** [@tomak](https://discuss.elastic.co/u/tomak)\
**Replies:** 5\
**Last updated:** [February 5, 2018, 2:30pm UTC](https://discuss.elastic.co/t/validation-failed-because-of-missing-type-with-bulk-api/118465 "2018-02-05T14:30:04Z")

</div>

Hello, I would like to add the following JSON file using the bulk API "index":{"\_id":"1"} "info":"1" however I get the following error "type" : "action\_request\_validation\_exception", "reason" : "Validation Failed: 1:…

---

## [CVE-2021-45046 : Incomplete fix for Apache Log4j vulnerability](https://discuss.elastic.co/t/cve-2021-45046-incomplete-fix-for-apache-log4j-vulnerability/291925)

<div class="topic-metadata">

**Author:** [@Ravi\_GH](https://discuss.elastic.co/u/Ravi_GH)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 9:13pm UTC](https://discuss.elastic.co/t/cve-2021-45046-incomplete-fix-for-apache-log4j-vulnerability/291925 "2021-12-15T21:13:46Z")

</div>

With respect to "Incomplete fix for Apache Log4j vulnerability" @ Incomplete fix for Apache Log4j vulnerability · CVE-2021-45046 · GitHub Advisory Database · GitHub I have two questions: Q1) is JndiLookup class remova…

---

## [Elastic Stack 7.9.0 and 6.8.12 Security Update](https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [August 18, 2020, 3:11pm UTC](https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456 "2020-08-18T15:11:54Z")

</div>

Elasticsearch field disclosure flaw (ESA-2020-12) A field disclosure flaw was found in Elasticsearch when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user …

---

## [Ingest pipeline not working for filebeat](https://discuss.elastic.co/t/ingest-pipeline-not-working-for-filebeat/228015)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 1\
**Last updated:** [April 15, 2020, 2:40am UTC](https://discuss.elastic.co/t/ingest-pipeline-not-working-for-filebeat/228015 "2020-04-15T02:40:36Z")

</div>

I've created an ingest pipeline that works perfectly when I use the simulate endpoint, POST filebeat-7.6.2-2020.04.14/\_doc?pipeline=pipeline\_lookup\_test, and when I reindex the data into the index. But when I try and sen…

---

## [Group by & sum field](https://discuss.elastic.co/t/group-by-sum-field/61104)

<div class="topic-metadata">

**Author:** [@Ivan\_Ghisleni](https://discuss.elastic.co/u/Ivan_Ghisleni)\
**Replies:** 5\
**Last updated:** [September 22, 2016, 7:42am UTC](https://discuss.elastic.co/t/group-by-sum-field/61104 "2016-09-22T07:42:04Z")

</div>

Hi to all, I want to get the Elasticsearch translation of SQL "Group by & sum field" anyone can help me? thanks Ivan

---

## [Facing issue to start elasticsearch "permission denied"](https://discuss.elastic.co/t/facing-issue-to-start-elasticsearch-permission-denied/131970)

<div class="topic-metadata">

**Author:** [@Harshal\_Yeole1](https://discuss.elastic.co/u/Harshal_Yeole1)\
**Replies:** 7\
**Last updated:** [May 15, 2018, 6:25pm UTC](https://discuss.elastic.co/t/facing-issue-to-start-elasticsearch-permission-denied/131970 "2018-05-15T18:25:54Z")

</div>

Hi, I have added x-pack to the elastic search but after doing so, I am not able to start using service elasticsearch start sudo service elasticsearch start bin/elasticsearch but I'm getting permission denied errors…

---

## [Java RestClient: Connection closed](https://discuss.elastic.co/t/java-restclient-connection-closed/174325)

<div class="topic-metadata">

**Author:** [@zoltan-toth-mw](https://discuss.elastic.co/u/zoltan-toth-mw)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 12:02pm UTC](https://discuss.elastic.co/t/java-restclient-connection-closed/174325 "2019-03-28T12:02:22Z")

</div>

Hi There, I have a business logic that visits elasticsearch in every minute to query some data. After a while the client has connection issues, while the Elasticsearch v6.4 in AWS with 2 nodes are up and running withou…

---

## [Timestamp range search in the search bar](https://discuss.elastic.co/t/timestamp-range-search-in-the-search-bar/92174)

<div class="topic-metadata">

**Author:** [@Shuxin\_Lin](https://discuss.elastic.co/u/Shuxin_Lin)\
**Replies:** 2\
**Last updated:** [July 7, 2017, 7:26pm UTC](https://discuss.elastic.co/t/timestamp-range-search-in-the-search-bar/92174 "2017-07-07T19:26:49Z")

</div>

Hi, I want to search all the entries within a time span. Like this: search all the entries during a time span from 2017-07-02 12:05:51.898 to 2017-07-02 12:06:15.464 I know 2017-07-02 12:05:51.898 in epoch\_millis i…

---

## [Search on a field with regex](https://discuss.elastic.co/t/search-on-a-field-with-regex/52056)

<div class="topic-metadata">

**Author:** [@ivanandrianto95](https://discuss.elastic.co/u/ivanandrianto95)\
**Replies:** 1\
**Last updated:** [June 7, 2016, 8:24pm UTC](https://discuss.elastic.co/t/search-on-a-field-with-regex/52056 "2016-06-07T20:24:41Z")

</div>

In Kibana, I need to match string on a field 'url' that contains, for example '/new-product/p1' or '/new-product/sample' but not '/new-product/?type=1' or '/new-product/' only. How can do it?

---

## [Failed to start service: The data area passed to a system call is too small](https://discuss.elastic.co/t/failed-to-start-service-the-data-area-passed-to-a-system-call-is-too-small/82902)

<div class="topic-metadata">

**Author:** [@scottf](https://discuss.elastic.co/u/scottf)\
**Replies:** 0\
**Last updated:** [April 19, 2017, 2:03pm UTC](https://discuss.elastic.co/t/failed-to-start-service-the-data-area-passed-to-a-system-call-is-too-small/82902 "2017-04-19T14:03:08Z")

</div>

HOW DO YOU GET ELASTICSEARCH TO RUN ON WINDOWS. YOUR DOCUMENTATION FALLS DOWN. https://www.elastic.co/guide/en/elasticsearch/reference/current/windows.html https://www.elastic.co/guide/en/elasticsearch/reference/current/…

---

## ["reason"=\>"failed to parse field \[Time\] of type \[date\] in document with id 'xxxxxxxxxxxxxxx'](https://discuss.elastic.co/t/reason-failed-to-parse-field-time-of-type-date-in-document-with-id-xxxxxxxxxxxxxxx/267473)

<div class="topic-metadata">

**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\
**Replies:** 2\
**Last updated:** [March 22, 2021, 12:26am UTC](https://discuss.elastic.co/t/reason-failed-to-parse-field-time-of-type-date-in-document-with-id-xxxxxxxxxxxxxxx/267473 "2021-03-22T00:26:35Z")

</div>

I set config of logstash, But happen warning message. Please, how to do resolve. I want to send below log to Elasticsearch. ////////////////// 2021-03-17 10:27:50.115 +0900 26240 main : INFO com.tableausoftware.acti…

---

## [Info message "No config files found in path" - doesn't make any sense](https://discuss.elastic.co/t/info-message-no-config-files-found-in-path-doesnt-make-any-sense/113827)

<div class="topic-metadata">

**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\
**Replies:** 6\
**Last updated:** [January 29, 2018, 2:37pm UTC](https://discuss.elastic.co/t/info-message-no-config-files-found-in-path-doesnt-make-any-sense/113827 "2018-01-29T14:37:19Z")

</div>

Hi, I have been using 2 files for a long time /path/to/logstash1.conf /path/to/logstash2.conf When switching to pipelines.yml I get an error that tells me no config files found in path (all correct path and file name…

---

## [Bucket script aggregation error](https://discuss.elastic.co/t/bucket-script-aggregation-error/114106)

<div class="topic-metadata">

**Author:** [@Frank\_Matera](https://discuss.elastic.co/u/Frank_Matera)\
**Replies:** 4\
**Last updated:** [January 5, 2018, 12:54pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-error/114106 "2018-01-05T12:54:30Z")

</div>

I am trying to create a bucket script based off of 2 single metric buckets and am having no luck. My initial bucket query works: { "query": { "bool": { "must": \[ { "match": { "call\_ty": "10"} }, …

---

## [Index Max Size](https://discuss.elastic.co/t/index-max-size/42421)

<div class="topic-metadata">

**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\
**Replies:** 5\
**Last updated:** [January 17, 2017, 1:46pm UTC](https://discuss.elastic.co/t/index-max-size/42421 "2017-01-17T13:46:12Z")

</div>

Hello Guys , Sorry for my noob question, but I can't find where can I setup the index size?. I just see in docs about shard cache or buffer size. Thank you

---

## [Can't use \_doc as type despite it being declared the preferred method](https://discuss.elastic.co/t/cant-use-doc-as-type-despite-it-being-declared-the-preferred-method/113837)

<div class="topic-metadata">

**Author:** [@percona.jayj](https://discuss.elastic.co/u/percona.jayj)\
**Replies:** 8\
**Last updated:** [February 22, 2018, 2:49am UTC](https://discuss.elastic.co/t/cant-use-doc-as-type-despite-it-being-declared-the-preferred-method/113837 "2018-02-22T02:49:40Z")

</div>

Ok, I'm at a loss. I'm starting to work with 6.0 and I read here that the preferred type name in 6.x is '\_doc'. However, when I try to PUT a new document, I get an error from the (6.0.1) server: Document mapping type…

---

## [To expand the list of the values for a field beyond the 5 limitation](https://discuss.elastic.co/t/to-expand-the-list-of-the-values-for-a-field-beyond-the-5-limitation/40670)

<div class="topic-metadata">

**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\
**Replies:** 2\
**Last updated:** [February 7, 2016, 2:24am UTC](https://discuss.elastic.co/t/to-expand-the-list-of-the-values-for-a-field-beyond-the-5-limitation/40670 "2016-02-07T02:24:01Z")

</div>

Hi in To add a filter from the Fields list: Click the name of the field you want to filter on. This displays the top five values for that field I want to filter based on all possible values in a field. Currently…

---

## [How to clean up storage space in elasticsearch cluster](https://discuss.elastic.co/t/how-to-clean-up-storage-space-in-elasticsearch-cluster/43044)

<div class="topic-metadata">

**Author:** [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)\
**Replies:** 5\
**Last updated:** [March 23, 2016, 2:24pm UTC](https://discuss.elastic.co/t/how-to-clean-up-storage-space-in-elasticsearch-cluster/43044 "2016-03-23T14:24:44Z")

</div>

I'm currently about 80% storage used accross my ES data nodes. I was trying to clear up indexes to get more storage back, but I guess the deleting of indices alone does not remove documents. Problem 2: I am looking fo…

---

## [Step by step guide to enable SAML with G Suite Idp (elastic cloud)](https://discuss.elastic.co/t/step-by-step-guide-to-enable-saml-with-g-suite-idp-elastic-cloud/221553)

<div class="topic-metadata">

**Author:** [@m1kel](https://discuss.elastic.co/u/m1kel)\
**Replies:** 7\
**Last updated:** [March 11, 2020, 11:12am UTC](https://discuss.elastic.co/t/step-by-step-guide-to-enable-saml-with-g-suite-idp-elastic-cloud/221553 "2020-03-11T11:12:59Z")

</div>

Hey, I've spent the last couple hours trying to figure out how to configure Kibana to play along with SAML and G Suite Idp (Google). I couldn't find any guides so I added all my notes to this gist: https://gist.github.…

---

## [Is Elastic APM Free or Licensed?](https://discuss.elastic.co/t/is-elastic-apm-free-or-licensed/243028)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 1\
**Last updated:** [July 29, 2020, 11:42am UTC](https://discuss.elastic.co/t/is-elastic-apm-free-or-licensed/243028 "2020-07-29T11:42:47Z")

</div>

Do Elastic APM server and the Java APM agent require a licensed Elasticsearch to run or can it be used without one? I will be using Elastic Stack version 7.7. Kibana version: 7.7 Elasticsearch version: 7.7 APM Server…

---

## [Change visualization index under saved objects](https://discuss.elastic.co/t/change-visualization-index-under-saved-objects/188578)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 3\
**Last updated:** [July 2, 2019, 11:09pm UTC](https://discuss.elastic.co/t/change-visualization-index-under-saved-objects/188578 "2019-07-02T23:09:17Z")

</div>

I want to change my index for a visualization, so I went to: Management \> Saved Objects \> Visualization but I don't what field I have to change in my kibanaSavedObjectMeta.searchSourceJSON kibanaSavedObjectMeta.search…

---

## [Cannot add custom headers to http poll input in logstash](https://discuss.elastic.co/t/cannot-add-custom-headers-to-http-poll-input-in-logstash/48870)

<div class="topic-metadata">

**Author:** [@matt617](https://discuss.elastic.co/u/matt617)\
**Replies:** 1\
**Last updated:** [March 24, 2017, 6:19pm UTC](https://discuss.elastic.co/t/cannot-add-custom-headers-to-http-poll-input-in-logstash/48870 "2017-03-24T18:19:05Z")

</div>

trying to get data from the uber API to come to stdout (just as an initial test) but cannot seem to get the authorization through the HTTP Header. tried the code below. i think i am close but what am i doing wrong? inp…

---

## [How to run Logstash on Docker-compose](https://discuss.elastic.co/t/how-to-run-logstash-on-docker-compose/158867)

<div class="topic-metadata">

**Author:** [@patrick007](https://discuss.elastic.co/u/patrick007)\
**Replies:** 3\
**Last updated:** [December 3, 2018, 2:06am UTC](https://discuss.elastic.co/t/how-to-run-logstash-on-docker-compose/158867 "2018-12-03T02:06:14Z")

</div>

Logstash on Docker-compose ? How can we setup the config file

---

## [Script painless : null\_pointer\_exception](https://discuss.elastic.co/t/script-painless-null-pointer-exception/125971)

<div class="topic-metadata">

**Author:** [@sabdoul](https://discuss.elastic.co/u/sabdoul)\
**Replies:** 7\
**Last updated:** [March 29, 2018, 1:11pm UTC](https://discuss.elastic.co/t/script-painless-null-pointer-exception/125971 "2018-03-29T13:11:26Z")

</div>

Hello, I have a null\_pointer\_exception error in my painless script when trying to modify all the data in an index. Indeed when I modify a line, the modification passes correctly but if I generalize it to all the data I …

---

## [Curl localhost port 3128: Connection refused](https://discuss.elastic.co/t/curl-localhost-port-3128-connection-refused/101011)

<div class="topic-metadata">

**Author:** [@Maxclac](https://discuss.elastic.co/u/Maxclac)\
**Replies:** 6\
**Last updated:** [September 19, 2017, 1:51pm UTC](https://discuss.elastic.co/t/curl-localhost-port-3128-connection-refused/101011 "2017-09-19T13:51:04Z")

</div>

Hello everyone! I am currently using Elasticsearch 5.6.1 and I have the following problem: curl -X GET http://localhost:9200/ curl: (7) Failed to connect to localhost port 3128: Connection refused What is this port 31…

---

## [Failed to authenticate user \[kibana\_system\]](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana-system/282864)

<div class="topic-metadata">

**Author:** [@yyyayo](https://discuss.elastic.co/u/yyyayo)\
**Replies:** 3\
**Last updated:** [September 2, 2021, 2:38am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana-system/282864 "2021-09-02T02:38:14Z")

</div>

When I tried Kibana development, I ran the following commands: yarn es snapshot --license trial yarn start --run-examples Then I encountered an error in Elasticsearch: failed to retrieve password hash for reserved use…

---

## [Mutate - replace source value](https://discuss.elastic.co/t/mutate-replace-source-value/672)

<div class="topic-metadata">

**Author:** [@achechen](https://discuss.elastic.co/u/achechen)\
**Replies:** 7\
**Last updated:** [April 18, 2017, 9:16am UTC](https://discuss.elastic.co/t/mutate-replace-source-value/672 "2017-04-18T09:16:35Z")

</div>

I am trying to change the value of the @source field in my syslogs using mutate - replace. logstash configuration: \[/opt/logstash/bin\] # cat /etc/logstash/conf.d/logstash.conf input { tcp { port =\> 5000 type =\> syslog…

---

## [Accidentally deleted .security index for x-pack](https://discuss.elastic.co/t/accidentally-deleted-security-index-for-x-pack/69844)

<div class="topic-metadata">

**Author:** [@Johntdyer](https://discuss.elastic.co/u/Johntdyer)\
**Replies:** 3\
**Last updated:** [March 30, 2022, 12:29pm UTC](https://discuss.elastic.co/t/accidentally-deleted-security-index-for-x-pack/69844 "2022-03-30T12:29:45Z")

</div>

So by some horrible error we deleted the .security index for x-pack. How do we get that back? We tried reinstalling in a lab deployment and it didnt seem to recover that index.

---

## [Specifying with Elasticsearch template and file to use](https://discuss.elastic.co/t/specifying-with-elasticsearch-template-and-file-to-use/33362)

<div class="topic-metadata">

**Author:** [@kelv1n](https://discuss.elastic.co/u/kelv1n)\
**Replies:** 2\
**Last updated:** [October 31, 2015, 11:57pm UTC](https://discuss.elastic.co/t/specifying-with-elasticsearch-template-and-file-to-use/33362 "2015-10-31T23:57:08Z")

</div>

Hi Guys This is probably a newbie config mistake. When specifying a custom Elasticsearch template for an output, it appears the index and template\_name need to be the same.. so if I had a generic template that I wan…

---

## [Conditional color change in Metric Widget](https://discuss.elastic.co/t/conditional-color-change-in-metric-widget/120327)

<div class="topic-metadata">

**Author:** [@Shailesh\_Vaidya](https://discuss.elastic.co/u/Shailesh_Vaidya)\
**Replies:** 3\
**Last updated:** [February 23, 2018, 8:07pm UTC](https://discuss.elastic.co/t/conditional-color-change-in-metric-widget/120327 "2018-02-23T20:07:05Z")

</div>

Hello, Can we have conditional color change in Metric widget. My use case is, I have result field which can be either Success or Failure. I want to show it in Green when its Success and in Red when it failure. Also ple…

---

## [Odd swap metric values with Metricbeat 7.15.2 in Windows](https://discuss.elastic.co/t/odd-swap-metric-values-with-metricbeat-7-15-2-in-windows/288956)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 0\
**Last updated:** [November 11, 2021, 7:00am UTC](https://discuss.elastic.co/t/odd-swap-metric-values-with-metricbeat-7-15-2-in-windows/288956 "2021-11-11T07:00:57Z")

</div>

Hi, everyone I have installed a Metricbeat 7.15.1 in Windows Server 2019. Here you are a screenshot about memory: Metricbeat: Are these values right? I don't understand very well swap metrics. Thanks in advanc…

---

## [Error index management Filebeat to Logstash](https://discuss.elastic.co/t/error-index-management-filebeat-to-logstash/218849)

<div class="topic-metadata">

**Author:** [@vazel](https://discuss.elastic.co/u/vazel)\
**Replies:** 2\
**Last updated:** [February 15, 2020, 7:54pm UTC](https://discuss.elastic.co/t/error-index-management-filebeat-to-logstash/218849 "2020-02-15T19:54:17Z")

</div>

Hi, I have the following configuration: Filebeat 7.2.0 and Logstash 7.2.0. ERROR instance/beat.go:877 Exiting: Index management requested but the Elasticsearch output is not configured/enabled When I run the filebeat s…

---

## [Logstash config error reason=\>"Expected one of #, \\", ', }](https://discuss.elastic.co/t/logstash-config-error-reason-expected-one-of/55594)

<div class="topic-metadata">

**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\
**Replies:** 7\
**Last updated:** [March 21, 2017, 8:20pm UTC](https://discuss.elastic.co/t/logstash-config-error-reason-expected-one-of/55594 "2017-03-21T20:20:17Z")

</div>

Why this error is coming... input { file { path =\> \[ "Documents/apache-sample-dataset.log" \] type =\> "apache" start\_position =\> "beginning" } } filter { if \[type\] == "apache" { grok { …

---

## [Could not index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/124672)

<div class="topic-metadata">

**Author:** [@Pororo](https://discuss.elastic.co/u/Pororo)\
**Replies:** 7\
**Last updated:** [March 22, 2018, 1:42am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/124672 "2018-03-22T01:42:51Z")

</div>

This is my json item, \[47\] And this is my config input { file { path =\> "/Users/apple/Desktop/RiskComb/RiskComb.json" start\_position =\> "beginning" sincedb\_path =\> "/Users/apple/Desktop/RiskComb/read\_pos.txt" …

---

## [Multiple type in one index in ES 6.1](https://discuss.elastic.co/t/multiple-type-in-one-index-in-es-6-1/116803)

<div class="topic-metadata">

**Author:** [@Vishal\_Chaurasia](https://discuss.elastic.co/u/Vishal_Chaurasia)\
**Replies:** 2\
**Last updated:** [January 24, 2018, 6:05am UTC](https://discuss.elastic.co/t/multiple-type-in-one-index-in-es-6-1/116803 "2018-01-24T06:05:32Z")

</div>

can we define multiple types in one index in elasticsearch version 6.1. When I am trying to define mappings of more than 1 types it results in following error- Rejecting mapping update to \[contents-en\] as the final map…

---

## [How to import json file to Elasticsearch](https://discuss.elastic.co/t/how-to-import-json-file-to-elasticsearch/210976)

<div class="topic-metadata">

**Author:** [@Ahmet\_Kartal](https://discuss.elastic.co/u/Ahmet_Kartal)\
**Replies:** 4\
**Last updated:** [December 11, 2019, 7:12am UTC](https://discuss.elastic.co/t/how-to-import-json-file-to-elasticsearch/210976 "2019-12-11T07:12:25Z")

</div>

Hi, I have 1 billion json data. I want to import these data to my local elasticsearch. All the documents in one json file. What is the easiest way to do that? I have tried this but did not work for me: curl -XPOST http:…

---

## [Show all unique values](https://discuss.elastic.co/t/show-all-unique-values/269606)

<div class="topic-metadata">

**Author:** [@Andrey\_RF](https://discuss.elastic.co/u/Andrey_RF)\
**Replies:** 3\
**Last updated:** [April 8, 2021, 3:30pm UTC](https://discuss.elastic.co/t/show-all-unique-values/269606 "2021-04-08T15:30:00Z")

</div>

I have a field and I need to get all unique values by this field in table or something else. Does it have some tools for it ?

---

## [Increasing shard relocation speed](https://discuss.elastic.co/t/increasing-shard-relocation-speed/54009)

<div class="topic-metadata">

**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\
**Replies:** 6\
**Last updated:** [June 27, 2016, 12:56pm UTC](https://discuss.elastic.co/t/increasing-shard-relocation-speed/54009 "2016-06-27T12:56:31Z")

</div>

I have ES 2.3.3 running with 6 data nodes. Each index has one replica. ONE of the data nodes was down for a day. Now it's back to life and ES started relocating shards to it. The thing is that it only relocates two sha…

---

## [Limit of total fields \[1000\] in index has been exceeded](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-has-been-exceeded/87280)

<div class="topic-metadata">

**Author:** [@\_sar](https://discuss.elastic.co/u/_sar)\
**Replies:** 6\
**Last updated:** [June 1, 2017, 2:20pm UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-has-been-exceeded/87280 "2017-06-01T14:20:39Z")

</div>

I know how to set the total field value on an index (ES 5.x) (without to increase the default limit or decrease it) and to also use a template to apply that setting on newly created indices. However, I'm trying to better…

---

## [Request Entity Too Large when importing Kibana saved objects](https://discuss.elastic.co/t/request-entity-too-large-when-importing-kibana-saved-objects/261497)

<div class="topic-metadata">

**Author:** [@oskrdt](https://discuss.elastic.co/u/oskrdt)\
**Replies:** 6\
**Last updated:** [January 20, 2021, 9:31pm UTC](https://discuss.elastic.co/t/request-entity-too-large-when-importing-kibana-saved-objects/261497 "2021-01-20T21:31:48Z")

</div>

I'm trying to import a ndjson file with size 11.2 MB, but I'm getting the error 413 Request Entity Too Large when trying to do that. I tried increasing the following values on kibana.yml server.maxPayloadBytes: 104857…

---

## [How to fix mapping conflict?](https://discuss.elastic.co/t/how-to-fix-mapping-conflict/55072)

<div class="topic-metadata">

**Author:** [@filebeat\_win](https://discuss.elastic.co/u/filebeat_win)\
**Replies:** 4\
**Last updated:** [July 10, 2016, 1:08am UTC](https://discuss.elastic.co/t/how-to-fix-mapping-conflict/55072 "2016-07-10T01:08:18Z")

</div>

I have a few fields (bytesSent, bytesReceived, timetaken) that show mapping conflicts, and thus I cannot visualize them in Kibana. All of these log entries are going to an index "logstash-\*" I am pretty green at this…

---

## [Elastic Search Connection error](https://discuss.elastic.co/t/elastic-search-connection-error/261348)

<div class="topic-metadata">

**Author:** [@Tlm\_Konstantinos](https://discuss.elastic.co/u/Tlm_Konstantinos)\
**Replies:** 5\
**Last updated:** [January 21, 2021, 2:07pm UTC](https://discuss.elastic.co/t/elastic-search-connection-error/261348 "2021-01-21T14:07:16Z")

</div>

Hi every one I have installed elastic search through docker-compose on a machine. The version of elastic search in the yaml file is 1.11.0 and from python withn pyelasticsearch 7.6.0 I im tryig to get all the indices fro…

---

## [Error while creating snapshot to s3 repository](https://discuss.elastic.co/t/error-while-creating-snapshot-to-s3-repository/176731)

<div class="topic-metadata">

**Author:** [@pranay\_sankpal](https://discuss.elastic.co/u/pranay_sankpal)\
**Replies:** 1\
**Last updated:** [April 13, 2019, 11:41am UTC](https://discuss.elastic.co/t/error-while-creating-snapshot-to-s3-repository/176731 "2019-04-13T11:41:07Z")

</div>

I've created s3 snapshot repository PUT \_snapshot/s3\_repository/snap1 { "indices": "pe-queue-jobs-new1-2019.03.30", "ignore\_unavailable": true, "include\_global\_state": false } I'm getting the following error …

---

## [Automatically removing index](https://discuss.elastic.co/t/automatically-removing-index/106866)

<div class="topic-metadata">

**Author:** [@gavenkoa](https://discuss.elastic.co/u/gavenkoa)\
**Replies:** 2\
**Last updated:** [November 8, 2017, 3:06pm UTC](https://discuss.elastic.co/t/automatically-removing-index/106866 "2017-11-08T15:06:46Z")

</div>

Docs says you need to remove unused (yeah, old) indexes: https://www.elastic.co/guide/en/elasticsearch/guide/current/retiring-data.html There is https://www.elastic.co/guide/en/elasticsearch/client/curator/current/insta…

---

## [Enterprise Search 7.x - Docker Compose example](https://discuss.elastic.co/t/enterprise-search-7-x-docker-compose-example/239782)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [July 3, 2020, 11:02am UTC](https://discuss.elastic.co/t/enterprise-search-7-x-docker-compose-example/239782 "2020-07-03T11:02:21Z")

</div>

Here is a simple way to start Enterprise Search (App Search and Workplace Search) with docker-compose. Elasticsearch File: docker-compose-elasticsearch.yml --- version: '3' services: elasticsearch: image: $IMG\_E…

---

## [How to insert JSON data directly to elastic search using curl command?](https://discuss.elastic.co/t/how-to-insert-json-data-directly-to-elastic-search-using-curl-command/160046)

<div class="topic-metadata">

**Author:** [@bugnet17](https://discuss.elastic.co/u/bugnet17)\
**Replies:** 3\
**Last updated:** [December 9, 2018, 2:50pm UTC](https://discuss.elastic.co/t/how-to-insert-json-data-directly-to-elastic-search-using-curl-command/160046 "2018-12-09T14:50:06Z")

</div>

I'm trying to insert data directly to elastic search into a specific index called "cars" via the curl command but it is constantly encountering errors. curl -XPOST http://elk.local:9200/cars/doc -H "Content-Type: applic…

---

## [Query and return all of the results](https://discuss.elastic.co/t/query-and-return-all-of-the-results/54783)

<div class="topic-metadata">

**Author:** [@rheng](https://discuss.elastic.co/u/rheng)\
**Replies:** 4\
**Last updated:** [July 6, 2016, 10:52am UTC](https://discuss.elastic.co/t/query-and-return-all-of-the-results/54783 "2016-07-06T10:52:27Z")

</div>

I'm trying to query elasticsearch to return all the index data between say july 3 and july 4. I issued the query and it returned a total hits of 14003. I know the default value it returns is 10, and i can set the defa…

[Previous page](https://discuss.elastic.co/top.md?page=267&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=269&per_page=50&period=all)
