# Top **URL:** https://discuss.elastic.co/top.md?page=276&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 277 --- ## [Pushback to hadoop from es on bulk load](https://discuss.elastic.co/t/pushback-to-hadoop-from-es-on-bulk-load/1535)
**Author:** [@koert](https://discuss.elastic.co/u/koert)\ **Replies:** 8\ **Last updated:** [October 7, 2016, 8:19pm UTC](https://discuss.elastic.co/t/pushback-to-hadoop-from-es-on-bulk-load/1535 "2016-10-07T20:19:58Z")
When we load data from hadoop into elasticsearch, we keep seeing errors in the tasks like this: org.elasticsearch.hadoop.EsHadoopException: Could not write all entries \[99/347072\] (maybe ES was overloaded?). Bailing out.… --- ## [Case insensitive sort doesn't work](https://discuss.elastic.co/t/case-insensitive-sort-doesnt-work/143192)
**Author:** [@shwetaskatdare](https://discuss.elastic.co/u/shwetaskatdare)\ **Replies:** 8\ **Last updated:** [September 11, 2018, 11:08am UTC](https://discuss.elastic.co/t/case-insensitive-sort-doesnt-work/143192 "2018-09-11T11:08:30Z")
Elasticsearch version (bin/elasticsearch --version): 5.3 JVM version (java -version): java 10.0.1 2018-04-17 Description of the problem including expected versus actual behavior: Hello, I am trying to achieve case in… --- ## [Vega Lite Table Output Option](https://discuss.elastic.co/t/vega-lite-table-output-option/124428)
**Author:** [@Johnnycc1](https://discuss.elastic.co/u/Johnnycc1)\ **Replies:** 3\ **Last updated:** [March 19, 2018, 8:47pm UTC](https://discuss.elastic.co/t/vega-lite-table-output-option/124428 "2018-03-19T20:47:50Z")
Is there a table output option for vega lite (there is like 10 "mark" options but none of them are data table / grid or something similar. Seems so simple - any help would be appreciated. --- ## [Case sensitive search in Kibana](https://discuss.elastic.co/t/case-sensitive-search-in-kibana/145583)
**Author:** [@TheCodingKnight](https://discuss.elastic.co/u/TheCodingKnight)\ **Replies:** 8\ **Last updated:** [August 28, 2018, 1:04pm UTC](https://discuss.elastic.co/t/case-sensitive-search-in-kibana/145583 "2018-08-28T13:04:08Z")
I'm trying to do a case sensitive search in a Kibana watcher as below. However, this seems to pick up all messages with "error" as well. How best can this be handled? "body": { "query": { "bool": { … --- ## [Linux distribution](https://discuss.elastic.co/t/linux-distribution/50315)
**Author:** [@vadimso](https://discuss.elastic.co/u/vadimso)\ **Replies:** 2\ **Last updated:** [May 18, 2016, 8:38am UTC](https://discuss.elastic.co/t/linux-distribution/50315 "2016-05-18T08:38:41Z")
Hello, What Linux distribution is preferred for the ELK machine? Tnx Vadim --- ## [Elastic Defend 8.19.6, 9.1.6, and 9.2.0 Security Update (ESA-2025-23)](https://discuss.elastic.co/t/elastic-defend-8-19-6-9-1-6-and-9-2-0-security-update-esa-2025-23/383272)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [November 6, 2025, 2:25pm UTC](https://discuss.elastic.co/t/elastic-defend-8-19-6-9-1-6-and-9-2-0-security-update-esa-2025-23/383272 "2025-11-06T14:25:08Z")
Elastic Defend Improper Preservation of Permissions (ESA-2025-23) Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service run… --- ## [Proper way to dump indices from Elasticsearch and import to another Elasticsearch instance](https://discuss.elastic.co/t/proper-way-to-dump-indices-from-elasticsearch-and-import-to-another-elasticsearch-instance/310938)
**Author:** [@kent010341](https://discuss.elastic.co/u/kent010341)\ **Replies:** 7\ **Last updated:** [August 2, 2022, 2:50am UTC](https://discuss.elastic.co/t/proper-way-to-dump-indices-from-elasticsearch-and-import-to-another-elasticsearch-instance/310938 "2022-08-02T02:50:17Z")
I have a ELK stack deployed with docker container in a private network, and I have to export some of the indices to a device (such as a laptop) and import them to another Elasticsearch instance in another private network… --- ## [How i can increase thread pool queue size in Elasticsearch 5.6](https://discuss.elastic.co/t/how-i-can-increase-thread-pool-queue-size-in-elasticsearch-5-6/145661)
**Author:** [@amitshar04](https://discuss.elastic.co/u/amitshar04)\ **Replies:** 6\ **Last updated:** [August 23, 2018, 7:31am UTC](https://discuss.elastic.co/t/how-i-can-increase-thread-pool-queue-size-in-elasticsearch-5-6/145661 "2018-08-23T07:31:28Z")
thread pool queue size how can make changes in elasticsearch.yml file for increasing thread pool queue size setting ? i am using Elasticsearch 5.6 Please help !! --- ## [Elasticsearch returns only 10 records but the hit is 507](https://discuss.elastic.co/t/elasticsearch-returns-only-10-records-but-the-hit-is-507/136605)
**Author:** [@Vishnu\_P\_S](https://discuss.elastic.co/u/Vishnu_P_S)\ **Replies:** 2\ **Last updated:** [June 20, 2018, 6:04am UTC](https://discuss.elastic.co/t/elasticsearch-returns-only-10-records-but-the-hit-is-507/136605 "2018-06-20T06:04:40Z")
I am using invenio\_search to search data from elasticsearch. I am able to query the elasticsearch and the results shows hits greater than 500. But receiving only 10 records. Is there any way to change the configuration s… --- ## [Is there any option to log queries?](https://discuss.elastic.co/t/is-there-any-option-to-log-queries/20940)
**Author:** [@Eugen\_Paraschiv](https://discuss.elastic.co/u/Eugen_Paraschiv)\ **Replies:** 2\ **Last updated:** [November 25, 2014, 5:31pm UTC](https://discuss.elastic.co/t/is-there-any-option-to-log-queries/20940 "2014-11-25T17:31:14Z")
Hi, I'm using Spring Data Elasticsearch, and so some of the queries are generated. I'd like to be able to log all queries that hit Elasticsearch, simply to be able to better understand what is being generated and r… --- ## [Enabling nginx module in filebeat on docker](https://discuss.elastic.co/t/enabling-nginx-module-in-filebeat-on-docker/143256)
**Author:** [@g.myznikov.tinkoff](https://discuss.elastic.co/u/g.myznikov.tinkoff)\ **Replies:** 2\ **Last updated:** [August 7, 2018, 12:10pm UTC](https://discuss.elastic.co/t/enabling-nginx-module-in-filebeat-on-docker/143256 "2018-08-07T12:10:50Z")
Hello! I have run filebeat on docker by a custom image. Its Dockerfile is: FROM docker.elastic.co/beats/filebeat:6.3.1 COPY filebeat.yml /usr/share/filebeat/filebeat.yml USER root RUN filebeat modules enable nginx RUN … --- ## [Kibana error loop redirect login page - when config server.basePath](https://discuss.elastic.co/t/kibana-error-loop-redirect-login-page-when-config-server-basepath/183282)
**Author:** [@NguyenVanTrieu](https://discuss.elastic.co/u/NguyenVanTrieu)\ **Replies:** 1\ **Last updated:** [May 29, 2019, 4:24pm UTC](https://discuss.elastic.co/t/kibana-error-loop-redirect-login-page-when-config-server-basepath/183282 "2019-05-29T16:24:43Z")
I run kibana:7.1.0 - elasticsearch:7.1.0 My config: /usr/share/kibana/config/kibana.yml " server.name: kibana server.host: 0.0.0.0 elasticsearch.hosts: http://elasticsearch:9200 " Everything woking on http://ip:56… --- ## [I just want a simple ILM rollover policy](https://discuss.elastic.co/t/i-just-want-a-simple-ilm-rollover-policy/175269)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 2\ **Last updated:** [April 4, 2019, 3:25am UTC](https://discuss.elastic.co/t/i-just-want-a-simple-ilm-rollover-policy/175269 "2019-04-04T03:25:06Z")
But I can't get it working... I want to replicate with filebeat does, create a new index daily. I just want to rollover on the event of unusual data volume. Say I normally get 20G a day, so I set 1 shard. I want to r… --- ## [AsciiFolding filter with preserve\_original=true causes indexing error](https://discuss.elastic.co/t/asciifolding-filter-with-preserve-original-true-causes-indexing-error/102630)
**Author:** [@jmcginty](https://discuss.elastic.co/u/jmcginty)\ **Replies:** 0\ **Last updated:** [October 3, 2017, 10:43pm UTC](https://discuss.elastic.co/t/asciifolding-filter-with-preserve-original-true-causes-indexing-error/102630 "2017-10-03T22:43:43Z")
Using ElasticSearch 5.6.2. When I set preserve\_original=true in an acsiifolding filter and use a word\_delimiter filter together in my analyzer, I sometimes get the following error during indexing: \[2017-10-03T15:31:57,… --- ## [Elasticsearch 7.2.0. homebrew install on mac java error on startup fail](https://discuss.elastic.co/t/elasticsearch-7-2-0-homebrew-install-on-mac-java-error-on-startup-fail/192760)
**Author:** [@ferenc0521](https://discuss.elastic.co/u/ferenc0521)\ **Replies:** 4\ **Last updated:** [August 12, 2019, 8:59am UTC](https://discuss.elastic.co/t/elasticsearch-7-2-0-homebrew-install-on-mac-java-error-on-startup-fail/192760 "2019-08-12T08:59:41Z")
$ elasticsearch Exception in thread "main" java.lang.RuntimeException: starting java failed with \[1\] output: \[0.002s\]\[error\]\[logging\] Error opening log file 'logs/gc.log': No such file or directory \[0.002s\]\[error\]\[… --- ## [Return the number of documents in an index using Painless](https://discuss.elastic.co/t/return-the-number-of-documents-in-an-index-using-painless/103563)
**Author:** [@A.McBride](https://discuss.elastic.co/u/A.McBride)\ **Replies:** 3\ **Last updated:** [October 13, 2017, 11:40am UTC](https://discuss.elastic.co/t/return-the-number-of-documents-in-an-index-using-painless/103563 "2017-10-13T11:40:17Z")
I've been trying to find a way to return a document count in painless, but I can't find the answer anywhere. Is there any way to do this? I need to use this value as part of a painless script but I can't find a way to do… --- ## [Compare fields](https://discuss.elastic.co/t/compare-fields/114514)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 7\ **Last updated:** [January 8, 2018, 12:10pm UTC](https://discuss.elastic.co/t/compare-fields/114514 "2018-01-08T12:10:49Z")
Hi all, So I am trying to compare two fields from a specific progam. I am trying it with this. { "query": { "bool": { "must": \[{ "script": { "script": { "inline": "doc\['email.k… --- ## [How do I size my cluster?](https://discuss.elastic.co/t/how-do-i-size-my-cluster/249483)
**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Replies:** 0\ **Last updated:** [September 22, 2020, 8:56am UTC](https://discuss.elastic.co/t/how-do-i-size-my-cluster/249483 "2020-09-22T08:56:06Z")
The ultimate answer is the 42 of IT aka It depends. Let's break this down and see, which factors come into play. It's rather hard to give exact advice here, as many factors come into play Your indexing load, how many … --- ## [Filter mutate replace field value with value of another field](https://discuss.elastic.co/t/filter-mutate-replace-field-value-with-value-of-another-field/38660)
**Author:** [@Chris\_Clifton](https://discuss.elastic.co/u/Chris_Clifton)\ **Replies:** 2\ **Last updated:** [January 7, 2016, 5:49pm UTC](https://discuss.elastic.co/t/filter-mutate-replace-field-value-with-value-of-another-field/38660 "2016-01-07T17:49:58Z")
Hoping this is a simple syntax issue, I'm adding a tag to events from filebeat on the client shipper, fields: tag\_hostname: "Dev Server" host value is already present in LS, I want to replace the value of the… --- ## [Handling multiples modules output to multiples indexes, good practice?](https://discuss.elastic.co/t/handling-multiples-modules-output-to-multiples-indexes-good-practice/184085)
**Author:** [@TanguyB](https://discuss.elastic.co/u/TanguyB)\ **Replies:** 3\ **Last updated:** [June 27, 2019, 7:34am UTC](https://discuss.elastic.co/t/handling-multiples-modules-output-to-multiples-indexes-good-practice/184085 "2019-06-27T07:34:28Z")
Hello, In my current deployment, I've many filebeats shipping logs from many sources ( system / audit / mysql modules / docker processor ...). I'd like filebeat to send them in different indexes to ES instead of everyt… --- ## [Csv files from FIlebeat to Elasticsearch](https://discuss.elastic.co/t/csv-files-from-filebeat-to-elasticsearch/229492)
**Author:** [@wild\_turkey](https://discuss.elastic.co/u/wild_turkey)\ **Replies:** 6\ **Last updated:** [April 24, 2020, 2:42am UTC](https://discuss.elastic.co/t/csv-files-from-filebeat-to-elasticsearch/229492 "2020-04-24T02:42:57Z")
Hi All, I'm a beginner to the Elasticstack world and learning to architect the collection of logs for visualization. One file I'm working on is a CSV file. I want to feed it into Elasticsearch to visualize in Kibana. … --- ## [Elasticsearch 7.1 fresh install errors with "master not discovered exception" when security is enabled](https://discuss.elastic.co/t/elasticsearch-7-1-fresh-install-errors-with-master-not-discovered-exception-when-security-is-enabled/182407)
**Author:** [@Luigi\_Grilli](https://discuss.elastic.co/u/Luigi_Grilli)\ **Replies:** 5\ **Last updated:** [June 7, 2019, 3:12am UTC](https://discuss.elastic.co/t/elasticsearch-7-1-fresh-install-errors-with-master-not-discovered-exception-when-security-is-enabled/182407 "2019-06-07T03:12:26Z")
I just installed es 7.1 using the msi package on a windows server 2012R2 box. After install I checked the newly created cluster with a single node and health is green. I enabled the xpack.security.enabled and restarted… --- ## [Can i use Elasticsearch on an app that is developed using flutter and dart?](https://discuss.elastic.co/t/can-i-use-elasticsearch-on-an-app-that-is-developed-using-flutter-and-dart/213259)
**Author:** [@mustafakamal](https://discuss.elastic.co/u/mustafakamal)\ **Replies:** 0\ **Last updated:** [December 28, 2019, 4:16pm UTC](https://discuss.elastic.co/t/can-i-use-elasticsearch-on-an-app-that-is-developed-using-flutter-and-dart/213259 "2019-12-28T16:16:55Z")
hi, i have developed an e-commerce app using flutter and dart. I want to integrate elasticsearch on this app to make my search more efficient. It seems that there are no documentation on dart and flutter on elasticsearch… --- ## [Quick way to test logstash config file?](https://discuss.elastic.co/t/quick-way-to-test-logstash-config-file/159270)
**Author:** [@jamespb](https://discuss.elastic.co/u/jamespb)\ **Replies:** 2\ **Last updated:** [December 5, 2018, 9:46am UTC](https://discuss.elastic.co/t/quick-way-to-test-logstash-config-file/159270 "2018-12-05T09:46:37Z")
I just started with logstash. I am tune with the config fie. I wonder if I must run following everytime with any change? It takes a long time to start. Any grammar checker or a quick way to test what the config file go… --- ## [Impact of CVE-2022-42889 on Elastic stack](https://discuss.elastic.co/t/impact-of-cve-2022-42889-on-elastic-stack/316858)
**Author:** [@jgimenez](https://discuss.elastic.co/u/jgimenez)\ **Replies:** 4\ **Last updated:** [October 24, 2022, 7:28am UTC](https://discuss.elastic.co/t/impact-of-cve-2022-42889-on-elastic-stack/316858 "2022-10-24T07:28:56Z")
Hi there, is the Elastic software affected by CVE-2022-42889, and if so, what are the actions recommended? Thanks. --- ## [How to set “\_id” value in elasticsearch document as my custom document id](https://discuss.elastic.co/t/how-to-set-id-value-in-elasticsearch-document-as-my-custom-document-id/254944)
**Author:** [@smruthip](https://discuss.elastic.co/u/smruthip)\ **Replies:** 8\ **Last updated:** [November 12, 2020, 6:35pm UTC](https://discuss.elastic.co/t/how-to-set-id-value-in-elasticsearch-document-as-my-custom-document-id/254944 "2020-11-12T18:35:15Z")
Can I do this outside in my python script before I send the data to elastic search? --- ## [Data storage estimation for ES cluster](https://discuss.elastic.co/t/data-storage-estimation-for-es-cluster/77997)
**Author:** [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\ **Replies:** 7\ **Last updated:** [March 14, 2017, 4:10pm UTC](https://discuss.elastic.co/t/data-storage-estimation-for-es-cluster/77997 "2017-03-14T16:10:37Z")
Hi All We have requirement to build ES cluster for 10TB per day to retain the data for 60 days. With the configuration of Replication shard to 2. Primary shard may be depending on the index receiving the daily volume… --- ## [OSI approved Docker image for ES 8+](https://discuss.elastic.co/t/osi-approved-docker-image-for-es-8/386055)
**Author:** [@stitchart](https://discuss.elastic.co/u/stitchart)\ **Replies:** 0\ **Last updated:** [April 27, 2026, 7:24pm UTC](https://discuss.elastic.co/t/osi-approved-docker-image-for-es-8/386055 "2026-04-27T19:24:39Z")
Hi, we're looking to build our own OSS Docker image since Elasticsearch v8+ onward, Elastic has discontinued the elasticsearch-oss Docker images that were previously available for those of us who needed to use an Apache … --- ## [How to call python script from Logstash to process (partialy) logs](https://discuss.elastic.co/t/how-to-call-python-script-from-logstash-to-process-partialy-logs/40009)
**Author:** [@vitaly\_r](https://discuss.elastic.co/u/vitaly_r)\ **Replies:** 5\ **Last updated:** [March 2, 2017, 9:17am UTC](https://discuss.elastic.co/t/how-to-call-python-script-from-logstash-to-process-partialy-logs/40009 "2017-03-02T09:17:10Z")
Hello, I have to process parts of the logging information using python script (python beautifulsoup and other useful stuff which I do not want to reimnplement in Ruby). What is the simplest way to do this? As of no… --- ## [Elasticsearch 5.3.0 install - Cannot find java binary](https://discuss.elastic.co/t/elasticsearch-5-3-0-install-cannot-find-java-binary/83122)
**Author:** [@glturle](https://discuss.elastic.co/u/glturle)\ **Replies:** 2\ **Last updated:** [April 20, 2017, 10:21pm UTC](https://discuss.elastic.co/t/elasticsearch-5-3-0-install-cannot-find-java-binary/83122 "2017-04-20T22:21:31Z")
I am installing Elasticsearch 5.3.0 on a Windows server2012 R2. I installed the application on the shared mount E: drive. I installed Java and set the path and java\_home environment variables on C: drive. When I execu… --- ## [Where does Elasticsearch store logs?](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 6\ **Last updated:** [September 23, 2019, 8:56pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466 "2019-09-23T20:56:01Z")
Hi I am using a VM to explore the X-pack. I want to send some logs from the production servers (Elasticsearch and Splunk) to that VM. Where are the logs stored in Elasticsearch? Is there a path (ex: /var/log/)? I woul… --- ## [Elasticsearch error curl: (7) Failed to connect to localhost port 9200: Connection refused but localhost:9200 works on browser](https://discuss.elastic.co/t/elasticsearch-error-curl-7-failed-to-connect-to-localhost-port-9200-connection-refused-but-localhost-9200-works-on-browser/120817)
**Author:** [@kabrice](https://discuss.elastic.co/u/kabrice)\ **Replies:** 8\ **Last updated:** [February 21, 2018, 2:00pm UTC](https://discuss.elastic.co/t/elasticsearch-error-curl-7-failed-to-connect-to-localhost-port-9200-connection-refused-but-localhost-9200-works-on-browser/120817 "2018-02-21T14:00:35Z")
I'm trying to connect Elasticsearch 5.5.2 to a Django 2 project: When running : curl -X GET 'http://localhost:9200' on terminal, I got this error : curl: (7) Failed to connect to localhost port 9200: Connection refused … --- ## [Cannot index event publisher.Event (elasticsearch/client.go:502)](https://discuss.elastic.co/t/cannot-index-event-publisher-event-elasticsearch-client-go-502/127502)
**Author:** [@shaharyar](https://discuss.elastic.co/u/shaharyar)\ **Replies:** 5\ **Last updated:** [April 13, 2018, 10:44am UTC](https://discuss.elastic.co/t/cannot-index-event-publisher-event-elasticsearch-client-go-502/127502 "2018-04-13T10:44:29Z")
I set up APM in my Nodejs Express app. It starts fine, creates a new index in elasticsearch. When API return errors it only logs first few errors in elasticsearch (3,4 or 7 sometimes, its random) and then on starts throw… --- ## [Too many shards](https://discuss.elastic.co/t/too-many-shards/59668)
**Author:** [@veve90](https://discuss.elastic.co/u/veve90)\ **Replies:** 8\ **Last updated:** [December 6, 2016, 2:56pm UTC](https://discuss.elastic.co/t/too-many-shards/59668 "2016-12-06T14:56:16Z")
Hello, For one of the kibana queries I have the folowing error: Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Trying to query 1230 shards, which is over… --- ## [First thoughts on ES|QL](https://discuss.elastic.co/t/first-thoughts-on-es-ql/347607)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 1\ **Last updated:** [November 21, 2023, 10:01am UTC](https://discuss.elastic.co/t/first-thoughts-on-es-ql/347607 "2023-11-21T10:01:48Z")
Dear all, We are currently trying out the new ES|QL query language and as far as I have used it it is a great improvement! The flexibility and the relatively easy grammar will surely make this my preferred language in t… --- ## [Filter if condition in Logstash](https://discuss.elastic.co/t/filter-if-condition-in-logstash/187484)
**Author:** [@Laurent\_Beretti](https://discuss.elastic.co/u/Laurent_Beretti)\ **Replies:** 7\ **Last updated:** [June 26, 2019, 1:01pm UTC](https://discuss.elastic.co/t/filter-if-condition-in-logstash/187484 "2019-06-26T13:01:29Z")
Hello, I'm new in Elastic and now I'm trying to modify fields with if condition, but it doesn't work. Note that I've no error after restarting Logstash. I just want to create a new field (this part is ok) and then I w… --- ## [Getting event correlation of log data across different systems using elasticsearch](https://discuss.elastic.co/t/getting-event-correlation-of-log-data-across-different-systems-using-elasticsearch/91051)
**Author:** [@gautamv](https://discuss.elastic.co/u/gautamv)\ **Replies:** 0\ **Last updated:** [June 28, 2017, 7:06am UTC](https://discuss.elastic.co/t/getting-event-correlation-of-log-data-across-different-systems-using-elasticsearch/91051 "2017-06-28T07:06:30Z")
I have a week of log data collected across multiple systems. I have stored them in elasticsearch. I need to find a way to get correlation of log events across different systems. For example an error in the app server cap… --- ## [Connection refused logstash to elasticsearch](https://discuss.elastic.co/t/connection-refused-logstash-to-elasticsearch/262970)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 8\ **Last updated:** [February 3, 2021, 8:17am UTC](https://discuss.elastic.co/t/connection-refused-logstash-to-elasticsearch/262970 "2021-02-03T08:17:20Z")
Hi, I enable trial licence for my 3 node elasticsearch cluster, on docker. And now elasticsearch and kibana is running on https but logstash start giving problem. Earlier ELK was running on http correctly. My all setup … --- ## [Why has it become so difficult to find timely documentation on elastic.co?](https://discuss.elastic.co/t/why-has-it-become-so-difficult-to-find-timely-documentation-on-elastic-co/378110)
**Author:** [@iTiago](https://discuss.elastic.co/u/iTiago)\ **Replies:** 4\ **Last updated:** [May 28, 2025, 7:01pm UTC](https://discuss.elastic.co/t/why-has-it-become-so-difficult-to-find-timely-documentation-on-elastic-co/378110 "2025-05-28T19:01:18Z")
Hello Elastic team and community, I want to open this thread because I'm honestly frustrated (and I think I'm not alone) by how complex it has become to access specific documentation for key Elasticsearch features, such… --- ## [Modify elastic.yml file in kubernetes pod](https://discuss.elastic.co/t/modify-elastic-yml-file-in-kubernetes-pod/103612)
**Author:** [@akpt](https://discuss.elastic.co/u/akpt)\ **Replies:** 1\ **Last updated:** [October 12, 2017, 3:15pm UTC](https://discuss.elastic.co/t/modify-elastic-yml-file-in-kubernetes-pod/103612 "2017-10-12T15:15:53Z")
Hello! I have an elasticsearch cluster running on minikube. When I ssh into one of the elasticsearch pods, I can see that the elasticsearch.yml file is very empty/has almost no configs set. \[elasticsearch@es-0 config\]$ … --- ## [How to import data to elasticsearch?](https://discuss.elastic.co/t/how-to-import-data-to-elasticsearch/58100)
**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\ **Replies:** 7\ **Last updated:** [August 18, 2016, 9:40am UTC](https://discuss.elastic.co/t/how-to-import-data-to-elasticsearch/58100 "2016-08-18T09:40:29Z")
Hi, All I want to know how to import data to elasticsearch? Now I have the follow sence: 1, the data size is very small, eg: the import date size is 10MB/s; 2, the data size is very big, eg: the import data size is 100TB… --- ## [Filter by field only if the field exists](https://discuss.elastic.co/t/filter-by-field-only-if-the-field-exists/171219)
**Author:** [@all9lives](https://discuss.elastic.co/u/all9lives)\ **Replies:** 4\ **Last updated:** [March 8, 2019, 4:43am UTC](https://discuss.elastic.co/t/filter-by-field-only-if-the-field-exists/171219 "2019-03-08T04:43:00Z")
I need to filter items by a certain field value, only if that field exists, otherwise it should include items which don't have that field value Here's the example, a Todo app with assigned users and projects. I need to … --- ## [How to connect Elasticsearch over HTTPS with Nginx as a reverse proxy server](https://discuss.elastic.co/t/how-to-connect-elasticsearch-over-https-with-nginx-as-a-reverse-proxy-server/76114)
**Author:** [@sumo7](https://discuss.elastic.co/u/sumo7)\ **Replies:** 0\ **Last updated:** [February 22, 2017, 9:42pm UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-over-https-with-nginx-as-a-reverse-proxy-server/76114 "2017-02-22T21:42:01Z")
I run Elasticsearch 5.0 on my production server. I use Nginx as a reverse proxy server. My website is secured with Let's Encrypt so I need Elasticsearch to run over https like this curl -XGET https://172.31.18.5.........… --- ## [I am getting an error when I tried to restart elasticsearch service](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726)
**Author:** [@rvaedex23](https://discuss.elastic.co/u/rvaedex23)\ **Replies:** 6\ **Last updated:** [March 21, 2016, 12:45pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726 "2016-03-21T12:45:09Z")
I removed elasticsearch and reinstalled it. When I tried to restart the service I get this error: elasticsearch.service - Starts and stops a single elasticsearch instance on this system Loaded: loaded (/usr/lib/sys… --- ## [Endless creating index after delete another index](https://discuss.elastic.co/t/endless-creating-index-after-delete-another-index/146334)
**Author:** [@lunatic](https://discuss.elastic.co/u/lunatic)\ **Replies:** 4\ **Last updated:** [September 3, 2018, 4:24am UTC](https://discuss.elastic.co/t/endless-creating-index-after-delete-another-index/146334 "2018-09-03T04:24:22Z")
I deleted some of my indices, but after about 1~10s the cluster create another index(being deleted long time ago) automatically. For example: delete index request-log-2018-05-03,created request-log-2018-05-30, but the … --- ## [Change mapping](https://discuss.elastic.co/t/change-mapping/138345)
**Author:** [@hgpit](https://discuss.elastic.co/u/hgpit)\ **Replies:** 5\ **Last updated:** [July 4, 2018, 8:03pm UTC](https://discuss.elastic.co/t/change-mapping/138345 "2018-07-04T20:03:17Z")
Hi, I am really struggling to edit my existing index, in order to exclude certain fields from being searchable. I've tried so many suggestions that I'm just about to go insane. My ES index is idx-wsa\_access\_logs and t… --- ## [Adding Columns in Data Table](https://discuss.elastic.co/t/adding-columns-in-data-table/132815)
**Author:** [@MariumHassan](https://discuss.elastic.co/u/MariumHassan)\ **Replies:** 1\ **Last updated:** [May 22, 2018, 2:34pm UTC](https://discuss.elastic.co/t/adding-columns-in-data-table/132815 "2018-05-22T14:34:21Z")
Hi, I am creating a data table in kibana which is shown below. \[Capturtempe\] Now, I am facing an issue. I just want to add field of that document as a column without adding sub-bucket of that field in the table becaus… --- ## [Performance searching single index vs multiple indices](https://discuss.elastic.co/t/performance-searching-single-index-vs-multiple-indices/137926)
**Author:** [@tjliu](https://discuss.elastic.co/u/tjliu)\ **Replies:** 8\ **Last updated:** [June 29, 2018, 10:53am UTC](https://discuss.elastic.co/t/performance-searching-single-index-vs-multiple-indices/137926 "2018-06-29T10:53:32Z")
Hi All, How to understand this tip? From The Definitive Guide Searching 1 index of 50 shards is exactly equivalent to searching 50 indices with 1 shard each: both search requests hit 50 shards. I have 2048G of Data … --- ## [Getting master\_not\_discovered\_exception from node](https://discuss.elastic.co/t/getting-master-not-discovered-exception-from-node/269840)
**Author:** [@arielman2304](https://discuss.elastic.co/u/arielman2304)\ **Replies:** 6\ **Last updated:** [April 13, 2021, 3:20pm UTC](https://discuss.elastic.co/t/getting-master-not-discovered-exception-from-node/269840 "2021-04-13T15:20:19Z")
Hi I created 3 EC2 clusters in AWS, and I'm trying to set 2 of them as nodes. I followed this guideline: However, nothing helps and I'm still getting this exception from the nodes. all ES are up and return response t… --- ## [Filebeat service failing to start](https://discuss.elastic.co/t/filebeat-service-failing-to-start/251199)
**Author:** [@aviationfan](https://discuss.elastic.co/u/aviationfan)\ **Replies:** 8\ **Last updated:** [October 7, 2020, 2:03pm UTC](https://discuss.elastic.co/t/filebeat-service-failing-to-start/251199 "2020-10-07T14:03:27Z")
Ever since updating to 7.9.2, filebeat has failed to start as a service. Ubuntu 20.04.1 LTS (Focal Fossa) systemctl status filebeat ● filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch… [Previous page](https://discuss.elastic.co/top.md?page=275&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=277&per_page=50&period=all)