# Top

**URL:** https://discuss.elastic.co/top.md?page=269&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 270

---

## [Kibana Unable to revive connection. No living connections](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-no-living-connections/165745)

<div class="topic-metadata">

**Author:** [@Sajawal\_Sohail](https://discuss.elastic.co/u/Sajawal_Sohail)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 10:10pm UTC](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-no-living-connections/165745 "2019-01-29T22:10:45Z")

</div>

Im trying to host Kibana and Elasticearch on my docker. So far I have Elasticsearch up and running but the Kibana shows me "Kibana server is not ready yet" error on my browser and following log on my console kibana\_1 …

---

## [Where can I see my Certificate Fingerprint?](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335)

<div class="topic-metadata">

**Author:** [@asd11](https://discuss.elastic.co/u/asd11)\
**Replies:** 6\
**Last updated:** [November 20, 2022, 3:50pm UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335 "2022-11-20T15:50:20Z")

</div>

The documentation says: the CA fingerprint logged by the server at initial startup. However I can't find it. Is it in security -\> CA certificates? If yes, than I can download that file, but how can I get the fingerpr…

---

## [Result window is too large, from + size must be less than or equal to: \[10000\] but was \[10050\]](https://discuss.elastic.co/t/result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000-but-was-10050/124392)

<div class="topic-metadata">

**Author:** [@David\_Jacob](https://discuss.elastic.co/u/David_Jacob)\
**Replies:** 8\
**Last updated:** [March 26, 2018, 11:06am UTC](https://discuss.elastic.co/t/result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000-but-was-10050/124392 "2018-03-26T11:06:30Z")

</div>

I am trying to do pagination for my data in elastic search. But I was not able fetch beyond 10000. I found that it is doable through "top hits aggregation" https://www.elastic.co/guide/en/elasticsearch/reference/6.2/se…

---

## [Unable to retrieve version information from Elasticsearch nodes. security\_exception](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-security-exception/347442)

<div class="topic-metadata">

**Author:** [@sp0ydiYO](https://discuss.elastic.co/u/sp0ydiYO)\
**Replies:** 4\
**Last updated:** [November 18, 2023, 6:00am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-security-exception/347442 "2023-11-18T06:00:11Z")

</div>

I've read other related questions and I confirmed this is a new question I have started the elasticsearch service, but because other clients will report certificate errors, I turned off ssl in config/elasticsearch.yml #…

---

## [Why am I seeing a "FORBIDDEN/12/index read-only / allow delete" response against my index?](https://discuss.elastic.co/t/why-am-i-seeing-a-forbidden-12-index-read-only-allow-delete-response-against-my-index/244344)

<div class="topic-metadata">

**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Replies:** 0\
**Last updated:** [August 10, 2020, 6:25am UTC](https://discuss.elastic.co/t/why-am-i-seeing-a-forbidden-12-index-read-only-allow-delete-response-against-my-index/244344 "2020-08-10T06:25:16Z")

</div>

You will usually see this error when your node(s) reach their flood stage disk level. When Elasticsearch detects a node's disk is nearing being full, it sets any index that the node holds to a read only state to protect…

---

## [Any idea what these errors mean version 2.4.2](https://discuss.elastic.co/t/any-idea-what-these-errors-mean-version-2-4-2/70690)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 7\
**Last updated:** [January 5, 2017, 6:35pm UTC](https://discuss.elastic.co/t/any-idea-what-these-errors-mean-version-2-4-2/70690 "2017-01-05T18:35:52Z")

</div>

\[.marvel-es-1-2017.01.05\], type \[node\], id \[AVlvCMR8jzJUIDxT5zD3\], message \[RemoteTransportException\[\[ElasticSearch-28\]\[10.10.0.133:9300\]\[indices:data/write/bulk\[s\]\]\]; nested: RemoteTransportException\[\[ElasticSearch-28\]…

---

## [Java heap space once in a while](https://discuss.elastic.co/t/java-heap-space-once-in-a-while/2551)

<div class="topic-metadata">

**Author:** [@egrimisu](https://discuss.elastic.co/u/egrimisu)\
**Replies:** 4\
**Last updated:** [March 22, 2017, 10:50pm UTC](https://discuss.elastic.co/t/java-heap-space-once-in-a-while/2551 "2017-03-22T22:50:27Z")

</div>

I have been setting up a ELK server, 16gb ram and a 8core cpu. I have done a basic installation, no extra config on elasticsearch side. Every once in a while elasticsearch seems to break but a fter a restart of the servi…

---

## [Kibana Keystore](https://discuss.elastic.co/t/kibana-keystore/132721)

<div class="topic-metadata">

**Author:** [@delly.set](https://discuss.elastic.co/u/delly.set)\
**Replies:** 3\
**Last updated:** [May 25, 2018, 6:38am UTC](https://discuss.elastic.co/t/kibana-keystore/132721 "2018-05-25T06:38:14Z")

</div>

Hi, I created a keystore in kibana to store the credentials for connecting kibana to ElasticSearch. But I received the error when restart the Kibana. Anyone encountered and how to resolved this? log \[05:08:57.786\] \[…

---

## [Mapping conflict!](https://discuss.elastic.co/t/mapping-conflict/40248)

<div class="topic-metadata">

**Author:** [@gildor7](https://discuss.elastic.co/u/gildor7)\
**Replies:** 6\
**Last updated:** [January 29, 2016, 9:00pm UTC](https://discuss.elastic.co/t/mapping-conflict/40248 "2016-01-29T21:00:30Z")

</div>

Dear community, I have a mapping conflicts in across our indices (separated on a daily basis): Mapping conflict! A field is defined as several types (string, integer, etc) across the indices that match this pattern. …

---

## [Problem configuring the memory](https://discuss.elastic.co/t/problem-configuring-the-memory/48674)

<div class="topic-metadata">

**Author:** [@NekoNova](https://discuss.elastic.co/u/NekoNova)\
**Replies:** 3\
**Last updated:** [May 3, 2016, 1:22pm UTC](https://discuss.elastic.co/t/problem-configuring-the-memory/48674 "2016-05-03T13:22:43Z")

</div>

Hello, I've installed Elasticsearch on the new Ubuntu 16, using the apt-get packages, and the service seems to be running fine. When I curl the localhost, I can see the response, so the basic configuration is working a…

---

## [Logstash Errors mapper\_parsing\_exception vs illegal\_argument\_exception](https://discuss.elastic.co/t/logstash-errors-mapper-parsing-exception-vs-illegal-argument-exception/236783)

<div class="topic-metadata">

**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\
**Replies:** 2\
**Last updated:** [June 11, 2020, 10:58pm UTC](https://discuss.elastic.co/t/logstash-errors-mapper-parsing-exception-vs-illegal-argument-exception/236783 "2020-06-11T22:58:23Z")

</div>

I am trying to understand the difference between these two errors: \[2020-06-05T13:51:34,267\]\[WARN \]\[logstash.outputs.elasticsearch\]\[filebeat\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:…

---

## [Elasticsearch Unreachable or Down!](https://discuss.elastic.co/t/elasticsearch-unreachable-or-down/95582)

<div class="topic-metadata">

**Author:** [@cjs6891](https://discuss.elastic.co/u/cjs6891)\
**Replies:** 8\
**Last updated:** [August 4, 2017, 12:43pm UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-or-down/95582 "2017-08-04T12:43:33Z")

</div>

Hi, My ELK stack has been running great for months, until recently. I’ve been receiving the following error: \[2017-08-01T13:02:10,092\]\[ERROR\]\[logstash.outputs.elasticsearch\] Action \[2017-08-01T13:02:10,092\]\[ERROR\]\[log…

---

## [ELK 7.8.0 two node cluster "At least one primary shard for the index \[.security-7\] is unavailable"](https://discuss.elastic.co/t/elk-7-8-0-two-node-cluster-at-least-one-primary-shard-for-the-index-security-7-is-unavailable/261031)

<div class="topic-metadata">

**Author:** [@Vishnu\_Oyitty](https://discuss.elastic.co/u/Vishnu_Oyitty)\
**Replies:** 3\
**Last updated:** [January 14, 2021, 2:23pm UTC](https://discuss.elastic.co/t/elk-7-8-0-two-node-cluster-at-least-one-primary-shard-for-the-index-security-7-is-unavailable/261031 "2021-01-14T14:23:07Z")

</div>

Hello, We are on a two node ELK cluster and noticing the below error suddennly. As the error says .security index seems to be corrupted. Is there anyway to restore the old state? Due to this kibana is not loading, none…

---

## [Share your feedback & help improve the Elastic Documentation!](https://discuss.elastic.co/t/share-your-feedback-help-improve-the-elastic-documentation/379812)

<div class="topic-metadata">

**Author:** [@Elizabeth\_ML](https://discuss.elastic.co/u/Elizabeth_ML)\
**Replies:** 0\
**Last updated:** [July 4, 2025, 1:17pm UTC](https://discuss.elastic.co/t/share-your-feedback-help-improve-the-elastic-documentation/379812 "2025-07-04T13:17:35Z")

</div>

Hi folks! I'm Elizabeth, a User Experience (UX) Researcher at Elastic. We're looking for users that frequently use or recently have used the Elastic Documentation to share their experience with us -- we want your unfil…

---

## [Elasticsearch-rest-client-5.6.1.jar org.apache.http.ContentTooLongException: entity content is too long \[217056451\] for the configured buffer limit \[104857600\]](https://discuss.elastic.co/t/elasticsearch-rest-client-5-6-1-jar-org-apache-http-contenttoolongexception-entity-content-is-too-long-217056451-for-the-configured-buffer-limit-104857600/101387)

<div class="topic-metadata">

**Author:** [@iti](https://discuss.elastic.co/u/iti)\
**Replies:** 6\
**Last updated:** [September 22, 2017, 8:25pm UTC](https://discuss.elastic.co/t/elasticsearch-rest-client-5-6-1-jar-org-apache-http-contenttoolongexception-entity-content-is-too-long-217056451-for-the-configured-buffer-limit-104857600/101387 "2017-09-22T20:25:55Z")

</div>

I am using REST low level api to query the ES 5.4.0 or 5.5.2 server. and got the following exceptions: Anyway to change the bufferLimitBytes? 12:34:50,453 INFO \[stdout\] (default task-2) org.apache.http.ContentTooLongE…

---

## [Updating nested objects](https://discuss.elastic.co/t/updating-nested-objects/87586)

<div class="topic-metadata">

**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\
**Replies:** 5\
**Last updated:** [May 31, 2017, 8:48pm UTC](https://discuss.elastic.co/t/updating-nested-objects/87586 "2017-05-31T20:48:08Z")

</div>

Hi, I've read through the Update API and read advice elsewhere, but it's still not clear to me how to update a specific nested object. Here's the mappings and settings I'm using for the index, which I've also created a…

---

## [\[Solved\] How to get raw log in logstash](https://discuss.elastic.co/t/solved-how-to-get-raw-log-in-logstash/88215)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 2\
**Last updated:** [June 5, 2017, 7:51am UTC](https://discuss.elastic.co/t/solved-how-to-get-raw-log-in-logstash/88215 "2017-06-05T07:51:05Z")

</div>

Hi, i have this case. I send log from filebeat -\> logstash. (5.4). Now i need to get raw log in field "message" only { "\_index": "fb-test-2017.20", "\_type": "ssh", "\_id": "AVwPYDgrVEOhQqT8cqhk", "\_version": 1, …

---

## [Adding new fields to an existing Index](https://discuss.elastic.co/t/adding-new-fields-to-an-existing-index/7397)

<div class="topic-metadata">

**Author:** [@Rahul\_Sharma](https://discuss.elastic.co/u/Rahul_Sharma)\
**Replies:** 2\
**Last updated:** [April 20, 2012, 11:26am UTC](https://discuss.elastic.co/t/adding-new-fields-to-an-existing-index/7397 "2012-04-20T11:26:50Z")

</div>

Hi, Is it possible to specify the type and analyzer while adding a new field to an existing index? Looks like ES identifies automatically the type and uses the default analyzer. Would appropriate your help. T…

---

## [ERROR: this cluster currently has \[x\]/\[x\] maximum normal shards open](https://discuss.elastic.co/t/error-this-cluster-currently-has-x-x-maximum-normal-shards-open/282254)

<div class="topic-metadata">

**Author:** [@Stef\_Nestor](https://discuss.elastic.co/u/Stef_Nestor)\
**Replies:** 1\
**Last updated:** [August 23, 2021, 4:01pm UTC](https://discuss.elastic.co/t/error-this-cluster-currently-has-x-x-maximum-normal-shards-open/282254 "2021-08-23T16:01:14Z")

</div>

This example error may return from Elasticsearch to any ingestor (e.g. Logstash, Bulk, API, Beats, etc): \[{TIMESTAMP}\]\[WARN\]\[logstash.outputs.elasticsearch\]\[x\]\[y\] Could not index event to Elasticsearch. { :status=\> 400…

---

## [Grok URI extract](https://discuss.elastic.co/t/grok-uri-extract/54836)

<div class="topic-metadata">

**Author:** [@carrot](https://discuss.elastic.co/u/carrot)\
**Replies:** 6\
**Last updated:** [May 31, 2017, 3:54pm UTC](https://discuss.elastic.co/t/grok-uri-extract/54836 "2017-05-31T15:54:32Z")

</div>

I've been searching and reading documentation but I can't seem to find how to extract parameters from a URI. The best I could do so far is : grok { match =\> \[ "url", "%{URIPROTO:uri\_proto}://(?:%{USER:user}(?::\[…

---

## [How to replace 'special characters' with a logstash filter](https://discuss.elastic.co/t/how-to-replace-special-characters-with-a-logstash-filter/28240)

<div class="topic-metadata">

**Author:** [@daks](https://discuss.elastic.co/u/daks)\
**Replies:** 2\
**Last updated:** [September 1, 2015, 8:46am UTC](https://discuss.elastic.co/t/how-to-replace-special-characters-with-a-logstash-filter/28240 "2015-09-01T08:46:54Z")

</div>

Hello, I use the IMAP input to retrieve some e-mail (generated by a Windows application) and I can't find how to manipulate the data to do what I want. E-mails looks like that (simplified and anonymized): Virus/mal…

---

## [Avoiding Field Reference Grammer in JSON Parsing](https://discuss.elastic.co/t/avoiding-field-reference-grammer-in-json-parsing/177899)

<div class="topic-metadata">

**Author:** [@hal74](https://discuss.elastic.co/u/hal74)\
**Replies:** 3\
**Last updated:** [May 7, 2019, 12:57pm UTC](https://discuss.elastic.co/t/avoiding-field-reference-grammer-in-json-parsing/177899 "2019-05-07T12:57:13Z")

</div>

Hey all, I have been processing stringified JSON using the json filter plugin for some time: json { skip\_on\_invalid\_json =\> true source =\> "data" } The JSON being parsed is dynamically generated by another sys…

---

## [Regex Search in Kibana](https://discuss.elastic.co/t/regex-search-in-kibana/97436)

<div class="topic-metadata">

**Author:** [@Kevin\_Wiegand](https://discuss.elastic.co/u/Kevin_Wiegand)\
**Replies:** 1\
**Last updated:** [August 17, 2017, 3:23pm UTC](https://discuss.elastic.co/t/regex-search-in-kibana/97436 "2017-08-17T15:23:58Z")

</div>

Hey there, i want to do a Regex based Search on Kibana, i’ve read the Regex Instruction for Kibana an Lucene but i can’t get my Search or Query to work. I want to find each entry which begins with "Login 123456"(\<-6 Di…

---

## [Elastic Stack 6.5.2 security update](https://discuss.elastic.co/t/elastic-stack-6-5-2-security-update/159594)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [December 5, 2018, 7:42pm UTC](https://discuss.elastic.co/t/elastic-stack-6-5-2-security-update/159594 "2018-12-05T19:42:41Z")

</div>

Elasticsearch information disclosure (ESA-2018-19) Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning’s find\_file\_structure API. If a policy allowing external network access has been…

---

## [Available fields not showing in kibana \[Issue resolved\]](https://discuss.elastic.co/t/available-fields-not-showing-in-kibana-issue-resolved/31872)

<div class="topic-metadata">

**Author:** [@raamee](https://discuss.elastic.co/u/raamee)\
**Replies:** 2\
**Last updated:** [October 10, 2015, 2:58pm UTC](https://discuss.elastic.co/t/available-fields-not-showing-in-kibana-issue-resolved/31872 "2015-10-10T14:58:48Z")

</div>

Hi, I'm trying to parse Apache logs which is in this format: xxx.xxx.xxx.xxx - - \[06/Oct/2015:23:58:37 +0530\] "GET /search/newver\_smartsearchjs\_ql.php HTTP/1.1" 200 47532 29330 "http://subdomain.domain.com/search/searc…

---

## [Kibana .raw fields and "message" field](https://discuss.elastic.co/t/kibana-raw-fields-and-message-field/757)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 8\
**Last updated:** [July 19, 2016, 10:19am UTC](https://discuss.elastic.co/t/kibana-raw-fields-and-message-field/757 "2016-07-19T10:19:49Z")

</div>

I again fourum... I have optimized my filters... overall very good, but now I have Kibana problem with space separated fields. Reading around, I have stated I have "lost" those .raw fields... Now I know they were there…

---

## [Setting xpack.security.enabled = true](https://discuss.elastic.co/t/setting-xpack-security-enabled-true/182791)

<div class="topic-metadata">

**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\
**Replies:** 7\
**Last updated:** [June 1, 2019, 6:50pm UTC](https://discuss.elastic.co/t/setting-xpack-security-enabled-true/182791 "2019-06-01T18:50:00Z")

</div>

I have installed Elasticsearch 7, on Ubuntu. I believe x-pack is installed by default, buy I need to enable it. in which file should I set this setting? My cluster settings are in:/etc/elasticsearch/elasticsearch.yml a…

---

## [Logstash retry with exponential backoff](https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff/106744)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 1\
**Last updated:** [November 8, 2017, 1:45pm UTC](https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff/106744 "2017-11-08T13:45:22Z")

</div>

OK I installed x-pack and finally got all the credentials in the correct places(including winlogbeats on WEC) but now getting new error in logstash logs - \[2017-11-07T14:29:34,577\]\[ERROR\]\[logstash.outputs.elasticsearch…

---

## [Elasticsearch 7.10.2 Security Update](https://discuss.elastic.co/t/elasticsearch-7-10-2-security-update/261164)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [January 14, 2021, 6:09pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-2-security-update/261164 "2021-01-14T18:09:21Z")

</div>

Elasticsearch authorization-header storage issue (ESA-2021-01) An information disclosure flaw was found in the Elasticsearch async search API. Users who execute an async search will store the HTTP headers. An Elasticsea…

---

## [Elasticsearch bool query formation with multiple must clause](https://discuss.elastic.co/t/elasticsearch-bool-query-formation-with-multiple-must-clause/97509)

<div class="topic-metadata">

**Author:** [@Milind\_Karandikar](https://discuss.elastic.co/u/Milind_Karandikar)\
**Replies:** 2\
**Last updated:** [August 18, 2017, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-bool-query-formation-with-multiple-must-clause/97509 "2017-08-18T05:14:20Z")

</div>

I have a query like the following - { "query": { "bool": { "must": { "bool" : { "should": \[ { "match": { "camp\_id": "Elasticsearch" }}, …

---

## [Dec 2nd, 2017: \[JP\]Elasticsearch\] Elasticsearch Ingest pluginの作り方](https://discuss.elastic.co/t/dec-2nd-2017-jp-elasticsearch-elasticsearch-ingest-plugin/109307)

<div class="topic-metadata">

**Author:** [@johtani](https://discuss.elastic.co/u/johtani)\
**Replies:** 0\
**Last updated:** [December 2, 2017, 12:00am UTC](https://discuss.elastic.co/t/dec-2nd-2017-jp-elasticsearch-elasticsearch-ingest-plugin/109307 "2017-12-02T00:00:04Z")

</div>

Ingest Nodeの機能は5で追加されました。Elasticsearchにデータを送信し、インデックスに登録する前処理として、色々な処理が可能です。例えば、Grok pluginを利用すれば、正規表現を利用して文字列を構造化したりできます。また、GeoIP pluginを利用すれば、IPアドレスを元に、緯度経度などの地理情報を追加するといったことも前処理で可能です。 独自のIngest Node pluginを作ってみる Elas…

---

## [Check-rollover-ready explain](https://discuss.elastic.co/t/check-rollover-ready-explain/261260)

<div class="topic-metadata">

**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\
**Replies:** 2\
**Last updated:** [January 15, 2021, 1:40pm UTC](https://discuss.elastic.co/t/check-rollover-ready-explain/261260 "2021-01-15T13:40:20Z")

</div>

Hello guys, I have set up ILM policy on data stream and when I manually perform rollover trough rollover api, it's just a blink of an eye and new index is created. BUT, if I use ILM, there is some step called check-rol…

---

## [Filter based on the doc\_count with aggregations](https://discuss.elastic.co/t/filter-based-on-the-doc-count-with-aggregations/62677)

<div class="topic-metadata">

**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\
**Replies:** 1\
**Last updated:** [October 11, 2016, 12:43pm UTC](https://discuss.elastic.co/t/filter-based-on-the-doc-count-with-aggregations/62677 "2016-10-11T12:43:35Z")

</div>

I have the following index : POST /cars/transactions/\_bulk { "index": {}} { "price" : 10000, "color" : "red", "make" : "honda", "sold" : "2014-10-28" } { "index": {}} { "price" : 20000, "color" : "red"…

---

## [Date Histogram - group by hour interval across multiple days](https://discuss.elastic.co/t/date-histogram-group-by-hour-interval-across-multiple-days/79850)

<div class="topic-metadata">

**Author:** [@prashant.bajpai](https://discuss.elastic.co/u/prashant.bajpai)\
**Replies:** 3\
**Last updated:** [March 24, 2017, 8:24am UTC](https://discuss.elastic.co/t/date-histogram-group-by-hour-interval-across-multiple-days/79850 "2017-03-24T08:24:15Z")

</div>

Today I had a task where I have to aggregate the data bucketed by 1 hour interval. So I used Date\_Histogram aggregation in elastic search. Below is the query: GET test-2017.02.01/\_search { "size" : 0, …

---

## [Disable authentification for elasticsearch](https://discuss.elastic.co/t/disable-authentification-for-elasticsearch/304862)

<div class="topic-metadata">

**Author:** [@Ines\_ZAYANI](https://discuss.elastic.co/u/Ines_ZAYANI)\
**Replies:** 7\
**Last updated:** [May 16, 2022, 10:03pm UTC](https://discuss.elastic.co/t/disable-authentification-for-elasticsearch/304862 "2022-05-16T22:03:32Z")

</div>

hi everyone, can i delete my user elastic and the password and make kibana and elastic accessible without any authentication needed. if so send me an article or a tutorial, thanks.

---

## [Not exists query](https://discuss.elastic.co/t/not-exists-query/284052)

<div class="topic-metadata">

**Author:** [@ilgrosso](https://discuss.elastic.co/u/ilgrosso)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 9:40am UTC](https://discuss.elastic.co/t/not-exists-query/284052 "2021-09-14T09:40:50Z")

</div>

Negating the exists query as suggested by docs does not seem to work as I would intend it, at least with Elasticsearch 7.14. When I send GET to /master\_user/\_search with payload { "query": { "bool": { "must…

---

## [How to use slash ('/') to search in Discovery?](https://discuss.elastic.co/t/how-to-use-slash-to-search-in-discovery/92340)

<div class="topic-metadata">

**Author:** [@palexvs](https://discuss.elastic.co/u/palexvs)\
**Replies:** 4\
**Last updated:** [July 10, 2017, 5:58pm UTC](https://discuss.elastic.co/t/how-to-use-slash-to-search-in-discovery/92340 "2017-07-10T17:58:25Z")

</div>

I'm testing ELK stack for nginx-access logs. It looks good except I have not found a way to search records in Kibana Discovery (v5.3.2) with a path that contains '/test/a'. Search works if I remove slashes, but in this c…

---

## [Elastic Stack 6.8.11 and 7.8.1 security update](https://discuss.elastic.co/t/elastic-stack-6-8-11-and-7-8-1-security-update/242786)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [July 27, 2020, 5:09pm UTC](https://discuss.elastic.co/t/elastic-stack-6-8-11-and-7-8-1-security-update/242786 "2020-07-27T17:09:12Z")

</div>

Kibana regular expression denial of service flaw (ESA-2020-09) Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana use…

---

## [Big binary fields/files storage in ElasticSearch](https://discuss.elastic.co/t/big-binary-fields-files-storage-in-elasticsearch/28392)

<div class="topic-metadata">

**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\
**Replies:** 2\
**Last updated:** [September 1, 2015, 12:16am UTC](https://discuss.elastic.co/t/big-binary-fields-files-storage-in-elasticsearch/28392 "2015-09-01T00:16:39Z")

</div>

Hello ElasticSearch experts, Wondering if we could store big binary fields/files into ElasticSearch? For big binary file, I mean video, PDF, image files, etc. which is big (from a few M bytes to hundreds of M bytes), a…

---

## [Warn : expected UTF-8](https://discuss.elastic.co/t/warn-expected-utf-8/94616)

<div class="topic-metadata">

**Author:** [@marwa](https://discuss.elastic.co/u/marwa)\
**Replies:** 3\
**Last updated:** [August 2, 2017, 6:44pm UTC](https://discuss.elastic.co/t/warn-expected-utf-8/94616 "2017-08-02T18:44:36Z")

</div>

i wanted to load data from logsatsh into elasticsearch , this is a sample of my data product-name,price,number\_of\_customers,general\_feddback,promotion\_period,percentage\_promotion,number\_of\_customers\_after\_promotion,cate…

---

## [What are the differences between the Kibana 'oss' and 'non-oss' build?](https://discuss.elastic.co/t/what-are-the-differences-between-the-kibana-oss-and-non-oss-build/152364)

<div class="topic-metadata">

**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\
**Replies:** 4\
**Last updated:** [October 21, 2018, 2:10am UTC](https://discuss.elastic.co/t/what-are-the-differences-between-the-kibana-oss-and-non-oss-build/152364 "2018-10-21T02:10:43Z")

</div>

Hi, I build my own custom Kibana packages. I've noticed the introduction of a oss only build of Kibana. Could you please explain to me the precise difference between the oss and the non-oss builds? Does the non-oss buil…

---

## [How to resolve the unassigned shards](https://discuss.elastic.co/t/how-to-resolve-the-unassigned-shards/87635)

<div class="topic-metadata">

**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\
**Replies:** 2\
**Last updated:** [May 30, 2017, 10:01pm UTC](https://discuss.elastic.co/t/how-to-resolve-the-unassigned-shards/87635 "2017-05-30T22:01:08Z")

</div>

{ "cluster\_name": "elastic", "status": "red", "timed\_out": false, "number\_of\_nodes": 3, "number\_of\_data\_nodes": 3, "active\_primary\_shards": 74, "active\_shards": 147, "relocating\_shards": 0, "initializin…

---

## [Request cannot be executed i/o reactor status stopped](https://discuss.elastic.co/t/request-cannot-be-executed-i-o-reactor-status-stopped/195438)

<div class="topic-metadata">

**Author:** [@Rajashekarchelpuri](https://discuss.elastic.co/u/Rajashekarchelpuri)\
**Replies:** 5\
**Last updated:** [August 16, 2019, 11:30am UTC](https://discuss.elastic.co/t/request-cannot-be-executed-i-o-reactor-status-stopped/195438 "2019-08-16T11:30:59Z")

</div>

request cannot be executed i/o reactor status stopped. Please help me how to solve this issue

---

## [Find and delete duplicate documents](https://discuss.elastic.co/t/find-and-delete-duplicate-documents/26575)

<div class="topic-metadata">

**Author:** [@noamt](https://discuss.elastic.co/u/noamt)\
**Replies:** 7\
**Last updated:** [July 27, 2018, 5:52pm UTC](https://discuss.elastic.co/t/find-and-delete-duplicate-documents/26575 "2018-07-27T17:52:34Z")

</div>

Sorry if this has already been asked; I've mostly seen questions of how to deal with duplicate documents in the result set, but not how to actually locate and remove them from the index. We have a type within an index …

---

## [Finding and deleting empty indexes](https://discuss.elastic.co/t/finding-and-deleting-empty-indexes/172764)

<div class="topic-metadata">

**Author:** [@gormanst](https://discuss.elastic.co/u/gormanst)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 1:00pm UTC](https://discuss.elastic.co/t/finding-and-deleting-empty-indexes/172764 "2019-03-18T13:00:36Z")

</div>

I am using the RestHighLevelClient to try and find then delete empty indexes. I can't find anything in the API that makes getting empty indexes simple. Is this something that is usually handled by Curator? Is dealing wit…

---

## [Kubernetes Module of Metricbeat does not get metrics \[7.9.2 with Kubernetes 1.21.1\]](https://discuss.elastic.co/t/kubernetes-module-of-metricbeat-does-not-get-metrics-7-9-2-with-kubernetes-1-21-1/272996)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 0\
**Last updated:** [May 14, 2021, 8:45am UTC](https://discuss.elastic.co/t/kubernetes-module-of-metricbeat-does-not-get-metrics-7-9-2-with-kubernetes-1-21-1/272996 "2021-05-14T08:45:28Z")

</div>

Hi, everyone I have been testing with a new version of Kubernetes, in this case, 1.21.1. I use Metricbeat in order to get metrics of containers, pods and nodes. Here you are my config: apiVersion: v1 kind: ConfigMap m…

---

## ["error" : "JsonParseException\[Unexpected end-of-input: expected close marker for OBJECT (from \[Source: \[B@19d6816; line: 1, column: 0\])\\n at \[Source: \[B@19d6816; line: 2, column: 3\]\]"](https://discuss.elastic.co/t/error-jsonparseexception-unexpected-end-of-input-expected-close-marker-for-object-from-source-b-19d6816-line-1-column-0-n-at-source-b-19d6816-line-2-column-3/25295)

<div class="topic-metadata">

**Author:** [@Ashok](https://discuss.elastic.co/u/Ashok)\
**Replies:** 7\
**Last updated:** [July 10, 2015, 9:22am UTC](https://discuss.elastic.co/t/error-jsonparseexception-unexpected-end-of-input-expected-close-marker-for-object-from-source-b-19d6816-line-1-column-0-n-at-source-b-19d6816-line-2-column-3/25295 "2015-07-10T09:22:24Z")

</div>

Hi Getting the "error" : "JsonParseException\[Unexpected end-of-input: expected close marker for OBJECT (from \[Source: \[B@19d6816; line: 1, column: 0\])\\n at \[Source: \[B@19d6816; line: 2, column: 3\]\]", "status" : 500 error…

---

## [I cannot mutate \>\> convert multiple fields](https://discuss.elastic.co/t/i-cannot-mutate-convert-multiple-fields/1227)

<div class="topic-metadata">

**Author:** [@pescobar](https://discuss.elastic.co/u/pescobar)\
**Replies:** 4\
**Last updated:** [March 9, 2017, 10:29am UTC](https://discuss.elastic.co/t/i-cannot-mutate-convert-multiple-fields/1227 "2017-03-09T10:29:26Z")

</div>

Hi, I am trying to convert few of my fields to integer using logstash 1.5. When converting just one field it works fine doing this to convert my field "failed" to integer: mutate { convert =\> \[ "fai…

---

## [Kibana 7.17.0 Security Update](https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [February 3, 2022, 5:34pm UTC](https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215 "2022-02-03T17:34:35Z")

</div>

Kibana Cross-site scripting issue (ESA-2022-01) An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious jav…

---

## [Execution Error, return code 2 from org.apache.hadoop.hive.ql.exec.mr.MapRedTask](https://discuss.elastic.co/t/execution-error-return-code-2-from-org-apache-hadoop-hive-ql-exec-mr-mapredtask/103501)

<div class="topic-metadata">

**Author:** [@sagarsingh20](https://discuss.elastic.co/u/sagarsingh20)\
**Replies:** 5\
**Last updated:** [October 26, 2017, 9:31am UTC](https://discuss.elastic.co/t/execution-error-return-code-2-from-org-apache-hadoop-hive-ql-exec-mr-mapredtask/103501 "2017-10-26T09:31:11Z")

</div>

Hadoop env - 2.6.0-cdh5.11.0 Elastic - 2.4.4 Hive - version 1.1.0-cdh5.11.0 So, i created a basic external table using the query :- CREATE EXTERNAL TABLE testESHIVE (name STRING) STORED BY 'org.elasticsearch.hadoo…

[Previous page](https://discuss.elastic.co/top.md?page=268&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=270&per_page=50&period=all)
