# Top **URL:** https://discuss.elastic.co/top.md?page=270&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 271 --- ## [X-Pack Security 5.6.0 and 5.5.3 security update](https://discuss.elastic.co/t/x-pack-security-5-6-0-and-5-5-3-security-update/100089)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [September 11, 2017, 4:20pm UTC](https://discuss.elastic.co/t/x-pack-security-5-6-0-and-5-5-3-security-update/100089 "2017-09-11T16:20:20Z")
X-Pack Security permission issue (ESA-2017-18) An error was found in the X-Pack Security privilege enforcement. If a user has either ‘delete’ or ‘index’ permissions on an index in a cluster, they may be able to issue bo… --- ## [Grok match everything up to certain character sequence?](https://discuss.elastic.co/t/grok-match-everything-up-to-certain-character-sequence/82268)
**Author:** [@jovanmal](https://discuss.elastic.co/u/jovanmal)\ **Replies:** 7\ **Last updated:** [April 14, 2017, 4:18am UTC](https://discuss.elastic.co/t/grok-match-everything-up-to-certain-character-sequence/82268 "2017-04-14T04:18:12Z")
Hi guys, does anybody know how to grok all text from log entry until certain character sequence? For example, how to seperate only SiteController::actionThankYou() Displaying random premium game. from the follow… --- ## [Query for ecommerce product filter using aggregation](https://discuss.elastic.co/t/query-for-ecommerce-product-filter-using-aggregation/47736)
**Author:** [@Rajiv\_Srivastava](https://discuss.elastic.co/u/Rajiv_Srivastava)\ **Replies:** 0\ **Last updated:** [April 19, 2016, 4:32am UTC](https://discuss.elastic.co/t/query-for-ecommerce-product-filter-using-aggregation/47736 "2016-04-19T04:32:37Z")
Our use case is to design product filters on search page (2nd page) like Amazon or any other e-commerce shop. Please see screen shot. Product should be filtered on these scenarios. Internal filters like TV, Fridge should… --- ## [Uptime dashboard - Error: \[illegal\_argument\_exception\] Text fields are not optimised for operations that require per-document field data](https://discuss.elastic.co/t/uptime-dashboard-error-illegal-argument-exception-text-fields-are-not-optimised-for-operations-that-require-per-document-field-data/230429)
**Author:** [@almathden](https://discuss.elastic.co/u/almathden)\ **Replies:** 6\ **Last updated:** [May 2, 2020, 5:44am UTC](https://discuss.elastic.co/t/uptime-dashboard-error-illegal-argument-exception-text-fields-are-not-optimised-for-operations-that-require-per-document-field-data/230429 "2020-05-02T05:44:31Z")
Hey Team. Just getting started using heartbeat. Here's the full error I'm getting. This shows up under the 'Monitor Status' section of the /app/uptime area: Error: \[illegal\_argument\_exception\] Text fields are not opti… --- ## [Kibana 8.15.1 Security Update (ESA-2024-27, ESA-2024-28)](https://discuss.elastic.co/t/kibana-8-15-1-security-update-esa-2024-27-esa-2024-28/366119)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 5, 2024, 7:19pm UTC](https://discuss.elastic.co/t/kibana-8-15-1-security-update-esa-2024-27-esa-2024-28/366119 "2024-09-05T19:19:30Z")
Kibana arbitrary code execution via YAML deserialization in Amazon Bedrock Connector (ESA-2024-27) A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document con… --- ## [Elasticsearch failed to parse date field with logstash](https://discuss.elastic.co/t/elasticsearch-failed-to-parse-date-field-with-logstash/1623)
**Author:** [@abcfy2](https://discuss.elastic.co/u/abcfy2)\ **Replies:** 8\ **Last updated:** [June 3, 2015, 10:40am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-parse-date-field-with-logstash/1623 "2015-06-03T10:40:38Z")
Here is logstash rubydebug result: { "@timestamp" =\> "2015-06-01T07:56:39.581Z", "message" =\> "2015-06-01 15:56:39,213 \[vert.x-eventloop-thread-0\] INFO hawkeyes.rtds.monitor.MetricsVerticle - Metrics o… --- ## [Elastic Stack 6.6.2 and 5.6.16 security update](https://discuss.elastic.co/t/elastic-stack-6-6-2-and-5-6-16-security-update/173180)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [March 20, 2019, 3:09pm UTC](https://discuss.elastic.co/t/elastic-stack-6-6-2-and-5-6-16-security-update/173180 "2019-03-20T15:09:22Z")
Winlogbeat insufficient logging issue (ESA-2019-06) Nate Guagenti (@ neu5ron), solutions engineer with Perched Inc. reported an issue in Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An a… --- ## [How to use Date Range filter in Kibana?](https://discuss.elastic.co/t/how-to-use-date-range-filter-in-kibana/194751)
**Author:** [@Sujata\_Yadav](https://discuss.elastic.co/u/Sujata_Yadav)\ **Replies:** 3\ **Last updated:** [August 13, 2019, 2:04pm UTC](https://discuss.elastic.co/t/how-to-use-date-range-filter-in-kibana/194751 "2019-08-13T14:04:30Z")
Hi All, I am trying to use kibana date filter range to plot a bar chart for my relevant data. I am unable to use the date filter for filtering out a particular range of data. My date format in JSON is 2019-01-04T03:02:… --- ## [Can't open Kibana because it says I'm using Elasticsearch 6.2.4](https://discuss.elastic.co/t/cant-open-kibana-because-it-says-im-using-elasticsearch-6-2-4/147246)
**Author:** [@ksantone](https://discuss.elastic.co/u/ksantone)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 7:17pm UTC](https://discuss.elastic.co/t/cant-open-kibana-because-it-says-im-using-elasticsearch-6-2-4/147246 "2018-09-27T19:17:24Z")
So I downloaded Elasticsearch and Kibana (both versions 6.4) but when I run bin/kibana (after having ran bin/elasticsearch) I get the error: log \[16:53:08.247\] \[error\]\[status\]\[plugin:security@6.4.0\] Status changed fro… --- ## [Best way to put pcap traffic into logstash/Elasticsearch](https://discuss.elastic.co/t/best-way-to-put-pcap-traffic-into-logstash-elasticsearch/101237)
**Author:** [@nuggetinu](https://discuss.elastic.co/u/nuggetinu)\ **Replies:** 2\ **Last updated:** [September 24, 2017, 9:35am UTC](https://discuss.elastic.co/t/best-way-to-put-pcap-traffic-into-logstash-elasticsearch/101237 "2017-09-24T09:35:31Z")
Hi, I am interested in creating a dashboard which will visualize network traffic collected from access points. I currently have tcpdump running on an access point and outputting to a pcap file. My intention is to pcap d… --- ## [How to import kibana visualization and dashboard](https://discuss.elastic.co/t/how-to-import-kibana-visualization-and-dashboard/87128)
**Author:** [@rajegworks](https://discuss.elastic.co/u/rajegworks)\ **Replies:** 3\ **Last updated:** [May 30, 2017, 6:25pm UTC](https://discuss.elastic.co/t/how-to-import-kibana-visualization-and-dashboard/87128 "2017-05-30T18:25:06Z")
I have exported kibana visualization and dashboard via kibana ui(machine1). Next I need to import same visualization and dashboard via elasticdump to another kiban(machine2). Machine1: es ==\> 2.4.6 kibana =\> 4… --- ## [Unable to connect to Elasticsearch at http://localhost:9200 - Windows 10](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-at-http-localhost-9200-windows-10/84878)
**Author:** [@avdnowhere](https://discuss.elastic.co/u/avdnowhere)\ **Replies:** 8\ **Last updated:** [May 9, 2017, 8:18am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-at-http-localhost-9200-windows-10/84878 "2017-05-09T08:18:04Z")
Dear All, I am trying to run Kibana, however I get this error: This is my kibana.yml: elasticsearch.url: "http://localhost:9200" elasticsearch.ssl.verify: false xpack.security.enabled: false and this is my elastics… --- ## [Invalid version of beats protocol](https://discuss.elastic.co/t/invalid-version-of-beats-protocol/223769)
**Author:** [@sam6](https://discuss.elastic.co/u/sam6)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 3:17pm UTC](https://discuss.elastic.co/t/invalid-version-of-beats-protocol/223769 "2020-03-16T15:17:52Z")
Hi, TLS is not enabled on the filebeat or logstash config and im seeing the below error when trying to ingest logs from a fllebeats agent: \[2020-03-16T13:12:20,101\]\[INFO \]\[org.logstash.beats.BeatsHandler\]\[main\] \[local:… --- ## [Primary shard not available](https://discuss.elastic.co/t/primary-shard-not-available/161687)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 7\ **Last updated:** [December 31, 2018, 10:19am UTC](https://discuss.elastic.co/t/primary-shard-not-available/161687 "2018-12-31T10:19:25Z")
Hi I am facing issues because the primary shard is not available. What could be the reason for it? Please suggest. Caused by: org.elasticsearch.action.UnavailableShardsException: \[.monitoring-kibana-6-2018.12.20\]\[0\] pr… --- ## [Index lifecycle error](https://discuss.elastic.co/t/index-lifecycle-error/171254)
**Author:** [@hsam](https://discuss.elastic.co/u/hsam)\ **Replies:** 5\ **Last updated:** [March 11, 2019, 5:29pm UTC](https://discuss.elastic.co/t/index-lifecycle-error/171254 "2019-03-11T17:29:34Z")
Can you help me using kibana ilm error ? I don't get the meaning of this error: illegal\_argument\_exception: index.lifecycle.rollover\_alias \[metricbeat-6.6.0-alias\] does not point to index \[metricbeat-6.6.0-2019.03.06\] … --- ## ["reason" : "Unrecognized token 'John': was expecting ('true', 'false' or 'null')](https://discuss.elastic.co/t/reason-unrecognized-token-john-was-expecting-true-false-or-null/29700)
**Author:** [@Gowtham\_Sen\_Potnuru](https://discuss.elastic.co/u/Gowtham_Sen_Potnuru)\ **Replies:** 5\ **Last updated:** [July 5, 2016, 2:01pm UTC](https://discuss.elastic.co/t/reason-unrecognized-token-john-was-expecting-true-false-or-null/29700 "2016-07-05T14:01:14Z")
Hi, This is the first time I am trying to use Elastic Search. I am unable to feed data to it. here is the command (Having issues with this command): curl -XPUT localhost:9200/customer/external/1?pretty -d {"name":"Jo… --- ## [Reporting - CSV Export: reached the max size and contains partial data](https://discuss.elastic.co/t/reporting-csv-export-reached-the-max-size-and-contains-partial-data/116626)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [January 31, 2018, 4:15pm UTC](https://discuss.elastic.co/t/reporting-csv-export-reached-the-max-size-and-contains-partial-data/116626 "2018-01-31T16:15:50Z")
Hi, I get following error when exporting my data: Your report for the "mySearch" search is ready;however, it reached the max size and contains partial data. Pick it up from Management \> Kibana \> Reporting How can I in… --- ## [Where to set MAX\_LOCKED\_MEMORY=unlimited in Elasticsearch 5.0](https://discuss.elastic.co/t/where-to-set-max-locked-memory-unlimited-in-elasticsearch-5-0/74760)
**Author:** [@sumo7](https://discuss.elastic.co/u/sumo7)\ **Replies:** 5\ **Last updated:** [February 12, 2017, 12:51pm UTC](https://discuss.elastic.co/t/where-to-set-max-locked-memory-unlimited-in-elasticsearch-5-0/74760 "2017-02-12T12:51:55Z")
I run Ubuntu 16.04 in my production environment. I downloaded Elasticsearch 5.0 from TAR. According to this post, I can set MAX\_LOCKED\_MEMORY=unlimited in /etc/default/elasticsearch on Ubuntu 14.04, but there is no s… --- ## [Minimal hardware requirement for Kibana](https://discuss.elastic.co/t/minimal-hardware-requirement-for-kibana/2772)
**Author:** [@mal](https://discuss.elastic.co/u/mal)\ **Replies:** 8\ **Last updated:** [September 10, 2015, 8:20am UTC](https://discuss.elastic.co/t/minimal-hardware-requirement-for-kibana/2772 "2015-09-10T08:20:57Z")
Hello, what are the minimal hardware requirements for running Kibana on a server? Background: For different departments we've to create separate Dashboards. We use Shield for authorization. We separate data by cre… --- ## [\[ANNOUNCEMENT\] - Elastic 9.0.0-RC1 is available](https://discuss.elastic.co/t/announcement-elastic-9-0-0-rc1-is-available/376490)
**Author:** [@David\_Brimley](https://discuss.elastic.co/u/David_Brimley)\ **Replies:** 0\ **Last updated:** [March 27, 2025, 3:51pm UTC](https://discuss.elastic.co/t/announcement-elastic-9-0-0-rc1-is-available/376490 "2025-03-27T15:51:16Z")
We're excited to announce the release candidates for Elastic Stack 9.0! :tada: We encourage developers to download, test, and provide feedback as we refine these versions. The quickest way to test it out is via start l… --- ## [Filebeat not sending any log files](https://discuss.elastic.co/t/filebeat-not-sending-any-log-files/41183)
**Author:** [@NekoNova](https://discuss.elastic.co/u/NekoNova)\ **Replies:** 4\ **Last updated:** [July 7, 2016, 3:48pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-any-log-files/41183 "2016-07-07T15:48:14Z")
Hello, I'm encountering a weird issue with the Filebeat on one of our systems. I've configured it identical to all other systems, but for some reason this one box is not sending out any log files. I've also noticed tha… --- ## [Error "Path does not chain with any of the trust anchors" when enabling TSL between nodes](https://discuss.elastic.co/t/error-path-does-not-chain-with-any-of-the-trust-anchors-when-enabling-tsl-between-nodes/131078)
**Author:** [@mlemartien](https://discuss.elastic.co/u/mlemartien)\ **Replies:** 4\ **Last updated:** [May 9, 2018, 4:04am UTC](https://discuss.elastic.co/t/error-path-does-not-chain-with-any-of-the-trust-anchors-when-enabling-tsl-between-nodes/131078 "2018-05-09T04:04:21Z")
Hi, I have been trying to enable TLS encryption between my nodes. I have followed the instructions of the documentation and generated p12-format certificates for each node and configured my cluster like this (the certif… --- ## [How to create auto generated ids while reindexing?](https://discuss.elastic.co/t/how-to-create-auto-generated-ids-while-reindexing/188782)
**Author:** [@praveengadugin1](https://discuss.elastic.co/u/praveengadugin1)\ **Replies:** 3\ **Last updated:** [July 4, 2019, 6:10am UTC](https://discuss.elastic.co/t/how-to-create-auto-generated-ids-while-reindexing/188782 "2019-07-04T06:10:43Z")
On using reindex API for reindexing 5 TB of data, to make the process faster I would like to create auto generated ids for new index as mentioned here.How do we do it?? https://www.elastic.co/guide/en/elasticsearch/refe… --- ## [Bin/elasticsearch-setup-passwords: No such file or directory](https://discuss.elastic.co/t/bin-elasticsearch-setup-passwords-no-such-file-or-directory/247725)
**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\ **Replies:** 3\ **Last updated:** [September 8, 2020, 5:40pm UTC](https://discuss.elastic.co/t/bin-elasticsearch-setup-passwords-no-such-file-or-directory/247725 "2020-09-08T17:40:59Z")
Hi, I am using elasticsearch 8.0 and I want to setup passwords for built-in users, so I enabled xpack.security.enabled: true and after restarting elasticsearch service I ran following command: "bin/elasticsearch-setup-p… --- ## [Where can I find logs on Linux machine](https://discuss.elastic.co/t/where-can-i-find-logs-on-linux-machine/49312)
**Author:** [@nitesh](https://discuss.elastic.co/u/nitesh)\ **Replies:** 8\ **Last updated:** [May 6, 2016, 12:39pm UTC](https://discuss.elastic.co/t/where-can-i-find-logs-on-linux-machine/49312 "2016-05-06T12:39:14Z")
I want to find where are all logs stored on ELK linux box. I want to perform some task on logs like tar and zip. paths: - /var/log/log1.log - /var/log/nova/log2.log I want to see where they are sto… --- ## [Elasticsearch output for Elastic Agent - adding an ingest pipeline](https://discuss.elastic.co/t/elasticsearch-output-for-elastic-agent-adding-an-ingest-pipeline/256398)
**Author:** [@bsanderRMG](https://discuss.elastic.co/u/bsanderRMG)\ **Replies:** 4\ **Last updated:** [November 25, 2020, 10:56am UTC](https://discuss.elastic.co/t/elasticsearch-output-for-elastic-agent-adding-an-ingest-pipeline/256398 "2020-11-25T10:56:37Z")
Hello. Is it possible to assign an ingest pipeline for the Elastic Agent? ideally we'd like to push this out to the entire fleet as well. I've tried below and it does not seem to have any effect. Let me know if you h… --- ## [Filter on a datefield relative to today](https://discuss.elastic.co/t/filter-on-a-datefield-relative-to-today/79559)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 4\ **Last updated:** [March 22, 2017, 12:52pm UTC](https://discuss.elastic.co/t/filter-on-a-datefield-relative-to-today/79559 "2017-03-22T12:52:32Z")
I have a dataset that includes various date fields, and I would like to only show records where the date is "recent". I can get the data using the date math stuff from the Range Query docs: GET ipreputation-\*/\_search {… --- ## [Elasticsearch: Couldn't connect to any of the configured Elasticsearch hosts - connection refused\]](https://discuss.elastic.co/t/elasticsearch-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-connection-refused/211860)
**Author:** [@carmezsa](https://discuss.elastic.co/u/carmezsa)\ **Replies:** 5\ **Last updated:** [December 14, 2019, 6:33pm UTC](https://discuss.elastic.co/t/elasticsearch-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-connection-refused/211860 "2019-12-14T18:33:13Z")
Hello, I have to virtualmachine with ubunu 19.10 in my local lab. Host A: 192.168.29.90 /etc/filebeat/filebeat.yml filebeat.inputs: - type: log paths: - /opt/zeek/logs/current/\*.log filebeat.config.modules: … --- ## [Sort field Using Kibana](https://discuss.elastic.co/t/sort-field-using-kibana/25931)
**Author:** [@Aditya\_Patel](https://discuss.elastic.co/u/Aditya_Patel)\ **Replies:** 5\ **Last updated:** [July 22, 2015, 6:29am UTC](https://discuss.elastic.co/t/sort-field-using-kibana/25931 "2015-07-22T06:29:05Z")
Hi I was wondering how to go about sorting one field wrt another field. Suppose we have two fields in our object. eg. 1 { id: x1 val : 3 } 2{ id: x2 val : 4 } Can we sort id's as x2,x1 (wrt val in t… --- ## [Dec 9th, 2024: \[EN\]: Leveraging AutoOps to detect long-running search queries](https://discuss.elastic.co/t/dec-9th-2024-en-leveraging-autoops-to-detect-long-running-search-queries/369794)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 11:23am UTC](https://discuss.elastic.co/t/dec-9th-2024-en-leveraging-autoops-to-detect-long-running-search-queries/369794 "2024-12-09T11:23:28Z")
Cet article est aussi disponible en français. Released early November on Elastic Cloud Hosted, AutoOps significantly simplifies cluster management with performance recommendations, resource utilization and cost insights… --- ## [Math operations with ruby](https://discuss.elastic.co/t/math-operations-with-ruby/55140)
**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\ **Replies:** 2\ **Last updated:** [July 11, 2016, 1:12am UTC](https://discuss.elastic.co/t/math-operations-with-ruby/55140 "2016-07-11T01:12:00Z")
I want to multiply or divide two fields and create a new field based on that. I've got this ruby code: ruby { code =\> "event\['hit\_rate'\] = event\['MAIN\_client\_req'\] \* event\['MAIN\_cache\_hit'\]" } When I tr… --- ## [Best practice for creating an index when an ES docker container starts](https://discuss.elastic.co/t/best-practice-for-creating-an-index-when-an-es-docker-container-starts/126651)
**Author:** [@Brett\_Anderson](https://discuss.elastic.co/u/Brett_Anderson)\ **Replies:** 4\ **Last updated:** [April 6, 2018, 9:26pm UTC](https://discuss.elastic.co/t/best-practice-for-creating-an-index-when-an-es-docker-container-starts/126651 "2018-04-06T21:26:07Z")
When running an initialization script to create a new index on startup, authentication fails with default username and password (elastic:changeme). Waiting a few seconds then manually running the exact same command works… --- ## [Exiting: Could not start registrar: Error loading state: Error decoding states: EOF](https://discuss.elastic.co/t/exiting-could-not-start-registrar-error-loading-state-error-decoding-states-eof/74430)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [February 8, 2017, 10:24pm UTC](https://discuss.elastic.co/t/exiting-could-not-start-registrar-error-loading-state-error-decoding-states-eof/74430 "2017-02-08T22:24:30Z")
My environment: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.3 (Maipo) # rpm -q filebeat filebeat-5.2.0-1.x86\_64 # systemctl: # systemctl stop filebeat # systemctl start filebeat # echo $? 0 … --- ## [JsonParseException: Illegal unquoted character ((CTRL-CHAR, code 9)): has to be escaped](https://discuss.elastic.co/t/jsonparseexception-illegal-unquoted-character-ctrl-char-code-9-has-to-be-escaped/12410)
**Author:** [@Abhishek\_Andhavarapu](https://discuss.elastic.co/u/Abhishek_Andhavarapu)\ **Replies:** 2\ **Last updated:** [June 18, 2013, 5:46pm UTC](https://discuss.elastic.co/t/jsonparseexception-illegal-unquoted-character-ctrl-char-code-9-has-to-be-escaped/12410 "2013-06-18T17:46:34Z")
Hi All, I'm getting these exceptions when indexing user comments \*Caused by: org.elasticsearch.common.jackson.core.JsonParseException: Illegal unquoted character ((CTRL-CHAR, code 9)): has to be escaped using b… --- ## [Error elasticsearch encountered a retryable error. Will Retry with exponential backoff code 400](https://discuss.elastic.co/t/error-elasticsearch-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/138267)
**Author:** [@databeata](https://discuss.elastic.co/u/databeata)\ **Replies:** 1\ **Last updated:** [July 4, 2018, 5:02am UTC](https://discuss.elastic.co/t/error-elasticsearch-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/138267 "2018-07-04T05:02:07Z")
\[ERROR\] 2018-07-02 16:23:20.482 \[\[main\]\>worker5\] elasticsearch - Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"http://ip:9200/\_bulk"} logstash 6.0.0, elasticsearch 6.0.0 I incr… --- ## [Overhead and heap issues](https://discuss.elastic.co/t/overhead-and-heap-issues/117888)
**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\ **Replies:** 6\ **Last updated:** [February 14, 2018, 7:07pm UTC](https://discuss.elastic.co/t/overhead-and-heap-issues/117888 "2018-02-14T19:07:43Z")
Hi all, I'm having big problems with Java Heap size and my 3 Elastic nodes running out of space. I've been running with the default 1gig setup but as that started to fill, I've increased it to 4gig (half of the availab… --- ## [Highlighting on all fields](https://discuss.elastic.co/t/highlighting-on-all-fields/6353)
**Author:** [@chimingc](https://discuss.elastic.co/u/chimingc)\ **Replies:** 2\ **Last updated:** [January 30, 2015, 8:57am UTC](https://discuss.elastic.co/t/highlighting-on-all-fields/6353 "2015-01-30T08:57:28Z")
Hi, I'm new to elastic search and am wondering if there is a way to highlight on all fields. Looks like highlighting requires me to explicitly specify the field names. My understanding is that if I want to hi… --- ## [Delete a field in filter, but use it in output](https://discuss.elastic.co/t/delete-a-field-in-filter-but-use-it-in-output/48008)
**Author:** [@JvonRudno](https://discuss.elastic.co/u/JvonRudno)\ **Replies:** 7\ **Last updated:** [April 25, 2016, 8:07am UTC](https://discuss.elastic.co/t/delete-a-field-in-filter-but-use-it-in-output/48008 "2016-04-25T08:07:43Z")
Hi everybody, I am using: input { jdbc { } } filter { elasticsearch { remove\_field =\> \["index\_type"\] } } output { elasticsearch{ index =\> "myindex" … --- ## [Fields not displaying in visualize](https://discuss.elastic.co/t/fields-not-displaying-in-visualize/133501)
**Author:** [@fluidjeel](https://discuss.elastic.co/u/fluidjeel)\ **Replies:** 2\ **Last updated:** [May 28, 2018, 11:03am UTC](https://discuss.elastic.co/t/fields-not-displaying-in-visualize/133501 "2018-05-28T11:03:57Z")
The fields are not displaying in visualize under Terms or Significant Terms but are available in discover page. What should i change to make fields available in Visualize: I have tried with keywords and text Mapping: P… --- ## [Match phrase prefix query not working as expected](https://discuss.elastic.co/t/match-phrase-prefix-query-not-working-as-expected/227233)
**Author:** [@oneoneonepig](https://discuss.elastic.co/u/oneoneonepig)\ **Replies:** 0\ **Last updated:** [April 9, 2020, 5:15am UTC](https://discuss.elastic.co/t/match-phrase-prefix-query-not-working-as-expected/227233 "2020-04-09T05:15:56Z")
According to the documents: Match phrase prefix query Returns documents that contain the words of a provided text, in the same order as provided. The last term of the provided text is treated as a prefix, matching a… --- ## [ES Request Timeout after 30000ms](https://discuss.elastic.co/t/es-request-timeout-after-30000ms/38250)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 6\ **Last updated:** [March 14, 2016, 9:42am UTC](https://discuss.elastic.co/t/es-request-timeout-after-30000ms/38250 "2016-03-14T09:42:07Z")
I've seem to have lost connection from kibana 4.3 to ES 2.1 while idling over xmas, wondering how to resolve this as ES says: \[root@d1r1n1 ~\]# curl -XGET "http://\`hostname\`:9200/\_cluster/health?pretty" { "cluster\_name… --- ## [Cannot sending data from mongodb into elasticsearch using logstash](https://discuss.elastic.co/t/cannot-sending-data-from-mongodb-into-elasticsearch-using-logstash/100835)
**Author:** [@Muhammad\_Rizky](https://discuss.elastic.co/u/Muhammad_Rizky)\ **Replies:** 1\ **Last updated:** [September 18, 2017, 9:16am UTC](https://discuss.elastic.co/t/cannot-sending-data-from-mongodb-into-elasticsearch-using-logstash/100835 "2017-09-18T09:16:25Z")
Hi all, i have an issue when i try to get data from mongodb to elasticsearch using logstash-input-mongodb. There is no document that get into elastic but when i stdout using rubydebug, logstash show me the documents in … --- ## [How do I setup watcher to only alert on new messages?](https://discuss.elastic.co/t/how-do-i-setup-watcher-to-only-alert-on-new-messages/27330)
**Author:** [@dmccuk](https://discuss.elastic.co/u/dmccuk)\ **Replies:** 2\ **Last updated:** [August 13, 2015, 4:06pm UTC](https://discuss.elastic.co/t/how-do-i-setup-watcher-to-only-alert-on-new-messages/27330 "2015-08-13T16:06:29Z")
I've been working through setting up watcher to alert on events it finds in the logs. I set up a watcher like below and every 20 seconds (in the example) it will send an email if it finds a match. But it won't stop. It w… --- ## [Apache access logs - "No cached mapping for this field"](https://discuss.elastic.co/t/apache-access-logs-no-cached-mapping-for-this-field/25653)
**Author:** [@dixon1dw](https://discuss.elastic.co/u/dixon1dw)\ **Replies:** 6\ **Last updated:** [November 28, 2016, 10:37am UTC](https://discuss.elastic.co/t/apache-access-logs-no-cached-mapping-for-this-field/25653 "2016-11-28T10:37:36Z")
I have setup a ELK stack Proof of Concept and in Kibana I have setup one index pattern (logstash-\*) using one time-field name (@timestamp) I originally setup the logstash-fowarder on two dev servers sending only logs fro… --- ## [Difference between json codec in input {} vs filter {}?](https://discuss.elastic.co/t/difference-between-json-codec-in-input-vs-filter/77575)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 7\ **Last updated:** [March 7, 2017, 9:22pm UTC](https://discuss.elastic.co/t/difference-between-json-codec-in-input-vs-filter/77575 "2017-03-07T21:22:44Z")
I have JSON-ified logs coming into my Logstash server. What's the difference between putting the json codec in input { codec =\> json } vs. filter { json =\> { source =\> "message" } } --- ## [Snapshot in progress for long time. How do I delete it?](https://discuss.elastic.co/t/snapshot-in-progress-for-long-time-how-do-i-delete-it/17199)
**Author:** [@Dipesh\_Patel](https://discuss.elastic.co/u/Dipesh_Patel)\ **Replies:** 6\ **Last updated:** [June 20, 2016, 6:48am UTC](https://discuss.elastic.co/t/snapshot-in-progress-for-long-time-how-do-i-delete-it/17199 "2016-06-20T06:48:21Z")
Hi We've been using the snapshot feature for a while. Yesterday we hit the endpoint to create a snapshot however it has been in progress for nearly 24 hours now - this has never happened they generally tend to fin… --- ## [Elasticsearch Rust Client: Update 05 Oct 2017](https://discuss.elastic.co/t/elasticsearch-rust-client-update-05-oct-2017/102815)
**Author:** [@KodrAus](https://discuss.elastic.co/u/KodrAus)\ **Replies:** 0\ **Last updated:** [October 5, 2017, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-rust-client-update-05-oct-2017/102815 "2017-10-05T09:03:19Z")
The GitHub repo Documentation Release notes Hi everyone! It's been a busy few months, but I've just pushed out a new release of the Elasticsearch Rust client I work on. I'm pretty excited to get this one out the door,… --- ## [Display search results in dashboard](https://discuss.elastic.co/t/display-search-results-in-dashboard/66337)
**Author:** [@elastic-fan](https://discuss.elastic.co/u/elastic-fan)\ **Replies:** 1\ **Last updated:** [November 17, 2016, 5:48pm UTC](https://discuss.elastic.co/t/display-search-results-in-dashboard/66337 "2016-11-17T17:48:45Z")
Is it possible to display search results in dashboard, i.e lets say i have 200 entries of some logs and in dashboard i have a line chart that tells me the count , when i click that can i see the exact log entries in dash… --- ## [How to exclude bad output (lines not matching 'grok' pattern) from logstash?](https://discuss.elastic.co/t/how-to-exclude-bad-output-lines-not-matching-grok-pattern-from-logstash/40459)
**Author:** [@punit\_naik1](https://discuss.elastic.co/u/punit_naik1)\ **Replies:** 8\ **Last updated:** [September 7, 2019, 12:07pm UTC](https://discuss.elastic.co/t/how-to-exclude-bad-output-lines-not-matching-grok-pattern-from-logstash/40459 "2019-09-07T12:07:08Z")
I have a log file and I am parsing it through Logstash and storing it in some place. But the the problem is that some lines in the log file do not always match my grok pattern and are therefore tagged as 'grokparsefailur… --- ## [Kibana default basic auth](https://discuss.elastic.co/t/kibana-default-basic-auth/86045)
**Author:** [@ccrecana](https://discuss.elastic.co/u/ccrecana)\ **Replies:** 1\ **Last updated:** [May 17, 2017, 2:36pm UTC](https://discuss.elastic.co/t/kibana-default-basic-auth/86045 "2017-05-17T14:36:40Z")
Hello. I have a basic auth set on the elasticsearch cluster and I would like to set default auth on kibana. On kibana 5.1.2 it was enough to set the elasticsearch.url at : "https://user:passwd@my-elasticsearch-server:920… [Previous page](https://discuss.elastic.co/top.md?page=269&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=271&per_page=50&period=all)