# Top **URL:** https://discuss.elastic.co/top.md?page=278&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 279 --- ## [Painless script - check for null](https://discuss.elastic.co/t/painless-script-check-for-null/122176)
**Author:** [@bluemalkin](https://discuss.elastic.co/u/bluemalkin)\ **Replies:** 5\ **Last updated:** [March 17, 2018, 6:23am UTC](https://discuss.elastic.co/t/painless-script-check-for-null/122176 "2018-03-17T06:23:46Z")
Hi, I have a painless script custom field using regex: if (doc\['message.keyword'\].value != null) { def m = /((GET|POST|PUT)\\s{1}(/v1/\[\\w/-\]+))(?|\\s){1}/.matcher(doc\['message.keyword'\].value); if (m.find()) { return … --- ## [JDBC to ElasticSearch: duplicate records?](https://discuss.elastic.co/t/jdbc-to-elasticsearch-duplicate-records/150153)
**Author:** [@jgabor](https://discuss.elastic.co/u/jgabor)\ **Replies:** 1\ **Last updated:** [October 11, 2018, 11:49am UTC](https://discuss.elastic.co/t/jdbc-to-elasticsearch-duplicate-records/150153 "2018-10-11T11:49:40Z")
Hi! I'm working on a PoC where we are evaluating how to ingest data from an Oracle table into ElasticSearch using Logstash and multiple connections to the Oracle DB. While doing this I observed a strange bahviour I can… --- ## [Use normal and nested fields in same Painless script query?](https://discuss.elastic.co/t/use-normal-and-nested-fields-in-same-painless-script-query/85470)
**Author:** [@PAK90](https://discuss.elastic.co/u/PAK90)\ **Replies:** 0\ **Last updated:** [May 11, 2017, 7:45pm UTC](https://discuss.elastic.co/t/use-normal-and-nested-fields-in-same-painless-script-query/85470 "2017-05-11T19:45:53Z")
I have a mapping like this: { printings: { type: "nested", properties: { prop1: {type: "number"} } }, prop2: {type: "number"} } I then want to build a Painless query like this: "script": {… --- ## [Error: disk usage exceeded flood-stage watermark, index has read-only-allow-delete block](https://discuss.elastic.co/t/error-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/323357)
**Author:** [@pmono](https://discuss.elastic.co/u/pmono)\ **Replies:** 5\ **Last updated:** [January 17, 2023, 9:14pm UTC](https://discuss.elastic.co/t/error-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/323357 "2023-01-17T21:14:59Z")
Hello, I'm getting a weird error: \[2023-01-17T18:18:32.398997+00:00\] main.ERROR: Child process failed with message: Elasticsearch engine returned an error response. item id: 20. Error type: "cluster\_block\_exception", r… --- ## [How elasticsearch will fetch data from MySQL database?](https://discuss.elastic.co/t/how-elasticsearch-will-fetch-data-from-mysql-database/139951)
**Author:** [@mamta](https://discuss.elastic.co/u/mamta)\ **Replies:** 7\ **Last updated:** [July 16, 2018, 6:34pm UTC](https://discuss.elastic.co/t/how-elasticsearch-will-fetch-data-from-mysql-database/139951 "2018-07-16T18:34:33Z")
Hi, Suppose I have MySQL database and I connected with this database through ELK. In MySQL database have 1 lac records and that all data is shown in kibana. After sometimes mysql updated with 50k records. So my question… --- ## [Plugins via RPM](https://discuss.elastic.co/t/plugins-via-rpm/1999)
**Author:** [@Duncan\_Innes](https://discuss.elastic.co/u/Duncan_Innes)\ **Replies:** 2\ **Last updated:** [June 16, 2015, 8:52am UTC](https://discuss.elastic.co/t/plugins-via-rpm/1999 "2015-06-16T08:52:51Z")
Would it be possible to look at distributing Logstash plugins via RPM? The majority of corporate RHEL estates, in my experience, don't permit external access unless a server is required to face the internet. The genera… --- ## [Rpm installation fails due to depencency /bin/sh not found?](https://discuss.elastic.co/t/rpm-installation-fails-due-to-depencency-bin-sh-not-found/98941)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 6\ **Last updated:** [September 1, 2017, 11:37am UTC](https://discuss.elastic.co/t/rpm-installation-fails-due-to-depencency-bin-sh-not-found/98941 "2017-09-01T11:37:36Z")
hi all, i am trying to install a peacketbeat using rpm, Steps i followed, curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-5.5.2-x86\_64.rpm rpm -vi packetbeat-5.5.2-x86\_64.rpm while insat… --- ## [FATAL Error: \[config validation of \[xpack.security\].enabled\]: definition for this key is missing](https://discuss.elastic.co/t/fatal-error-config-validation-of-xpack-security-enabled-definition-for-this-key-is-missing/300396)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 3:07am UTC](https://discuss.elastic.co/t/fatal-error-config-validation-of-xpack-security-enabled-definition-for-this-key-is-missing/300396 "2022-03-23T03:07:47Z")
Hi Today I've install kibana 8.1.1 on docker and I'm facing this case with FATAL Error: \[config validation of \[xpack.security\].enabled\]: definition for this key is missing what's wrong with config??? version: '3.3'… --- ## [org.elasticsearch.ElasticsearchException: Failed to parse info response. Check logs for detailed information - Unsupported Content-Type: text/html](https://discuss.elastic.co/t/org-elasticsearch-elasticsearchexception-failed-to-parse-info-response-check-logs-for-detailed-information-unsupported-content-type-text-html/295417)
**Author:** [@Sumit\_Jha1](https://discuss.elastic.co/u/Sumit_Jha1)\ **Replies:** 5\ **Last updated:** [January 26, 2022, 11:22am UTC](https://discuss.elastic.co/t/org-elasticsearch-elasticsearchexception-failed-to-parse-info-response-check-logs-for-detailed-information-unsupported-content-type-text-html/295417 "2022-01-26T11:22:58Z")
I am using Elastic Search High Level REST API 7.15.0 (Java) and the version of ES deployed on elastic.co is 7.15.2 When making any request using the client, in the logs I can see, the client first makes call to cluster … --- ## [Search for a substring within a specific field](https://discuss.elastic.co/t/search-for-a-substring-within-a-specific-field/118841)
**Author:** [@ghouston10](https://discuss.elastic.co/u/ghouston10)\ **Replies:** 3\ **Last updated:** [February 8, 2018, 1:58pm UTC](https://discuss.elastic.co/t/search-for-a-substring-within-a-specific-field/118841 "2018-02-08T13:58:43Z")
Hi, Is it possible in kibana to search for a substring contained within a specific field? --- ## [Kiabana discover tab issue -\> no apm index!](https://discuss.elastic.co/t/kiabana-discover-tab-issue-no-apm-index/198677)
**Author:** [@egarim](https://discuss.elastic.co/u/egarim)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 7:16am UTC](https://discuss.elastic.co/t/kiabana-discover-tab-issue-no-apm-index/198677 "2019-09-10T07:16:03Z")
Hi i've correctly installed kibana 7.3.1 but when I try to go to discover tab I got: Error fetching fields No indices match pattern "apm-\*" Error: No indices match pattern "apm-\*" at http://172.25.20:5601/bundles/… --- ## [How to get logs for system call filters failed to install](https://discuss.elastic.co/t/how-to-get-logs-for-system-call-filters-failed-to-install/185596)
**Author:** [@byeong\_seok\_park](https://discuss.elastic.co/u/byeong_seok_park)\ **Replies:** 5\ **Last updated:** [June 14, 2019, 6:52am UTC](https://discuss.elastic.co/t/how-to-get-logs-for-system-call-filters-failed-to-install/185596 "2019-06-14T06:52:00Z")
Hi, I'm working on installing elasticsearch for dev purpose. I'm having trouble to start a node like below: \[2019-06-13T19:15:32,594\]\[WARN \]\[o.e.b.JNANatives \] unable to install syscall filter: java.lang.Unsupp… --- ## [Unable to create an enrollment token for Kibana. "Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate"](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token-for-kibana-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificate/297032)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 6\ **Last updated:** [March 11, 2022, 1:09pm UTC](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token-for-kibana-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificate/297032 "2022-03-11T13:09:32Z")
Hello, I tried today to setup my ELK stack securely so I followed the documentation and created all certs that I need using the certutil and encrypted the CA and the node cert with passwords. I placed the http.p12 file… --- ## [Disk space cosideration for elasticsearch in production](https://discuss.elastic.co/t/disk-space-cosideration-for-elasticsearch-in-production/72825)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 5\ **Last updated:** [January 26, 2017, 7:26pm UTC](https://discuss.elastic.co/t/disk-space-cosideration-for-elasticsearch-in-production/72825 "2017-01-26T19:26:47Z")
I was going through 2 good posts to determine the size of ES servers in production. Here and here Do we need to account for extra size (free) on disk ? So, if all of my indices occupy, say 3 TB (with replication) and I… --- ## [Convert String to Integer using Painless](https://discuss.elastic.co/t/convert-string-to-integer-using-painless/128560)
**Author:** [@sahadevgd](https://discuss.elastic.co/u/sahadevgd)\ **Replies:** 3\ **Last updated:** [April 20, 2018, 12:34pm UTC](https://discuss.elastic.co/t/convert-string-to-integer-using-painless/128560 "2018-04-20T12:34:48Z")
Hi Team, I am trying to convert one of our field which is in String to Int using painless. Please find my code below. Code: String s = doc\['TotalDiskSpace'\].value; int tdvalue = Integer.parseInt(s); return tdvalue; … --- ## [ILM policy deletes index after 7 days despite the configuration is set to delete after 30days](https://discuss.elastic.co/t/ilm-policy-deletes-index-after-7-days-despite-the-configuration-is-set-to-delete-after-30days/222440)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 1\ **Last updated:** [March 11, 2020, 10:15am UTC](https://discuss.elastic.co/t/ilm-policy-deletes-index-after-7-days-despite-the-configuration-is-set-to-delete-after-30days/222440 "2020-03-11T10:15:51Z")
I have a problem with IML policy, it deletes index after 7 days despite the configuration is set to delete after 30days. What I have configured wrong.? (see all detail below) I have created index templa created index … --- ## [Data path already locked by another beat](https://discuss.elastic.co/t/data-path-already-locked-by-another-beat/219852)
**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\ **Replies:** 5\ **Last updated:** [February 24, 2020, 7:09pm UTC](https://discuss.elastic.co/t/data-path-already-locked-by-another-beat/219852 "2020-02-24T19:09:00Z")
after upgrading from 7.5.1 to 7.6.0 my filebeat breaks with error data path already locked by another beat i have two instances of filebeat running for a very long time, one reading a specific set of files and sending t… --- ## [Hide Management App on Kibana 7.2.x](https://discuss.elastic.co/t/hide-management-app-on-kibana-7-2-x/188680)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 2\ **Last updated:** [July 4, 2019, 6:02am UTC](https://discuss.elastic.co/t/hide-management-app-on-kibana-7-2-x/188680 "2019-07-04T06:02:44Z")
Hi, everyone I have just installed Elastic Stack 7.2.0 on my computer. I like the new feature that allows you to hide applications (feature controls) on Kibana, however, I would like to hide Management App, an example: … --- ## [What are the best approach for Chinese/Japanese language indexing and searching?](https://discuss.elastic.co/t/what-are-the-best-approach-for-chinese-japanese-language-indexing-and-searching/79)
**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\ **Replies:** 5\ **Last updated:** [May 9, 2016, 2:35am UTC](https://discuss.elastic.co/t/what-are-the-best-approach-for-chinese-japanese-language-indexing-and-searching/79 "2016-05-09T02:35:47Z")
Chinese and Japanese are hard to get right, but below I've included what you need to get the basics working. You will need to install the kuromoji plugin, the smartcn plugin and the icu plugin. For search, you should u… --- ## [AWS API Gateway as a Proxy For Elasticsearch](https://discuss.elastic.co/t/aws-api-gateway-as-a-proxy-for-elasticsearch/60965)
**Author:** [@jd1337](https://discuss.elastic.co/u/jd1337)\ **Replies:** 3\ **Last updated:** [September 23, 2016, 5:47pm UTC](https://discuss.elastic.co/t/aws-api-gateway-as-a-proxy-for-elasticsearch/60965 "2016-09-23T17:47:54Z")
I was wondering if anyone has any experience with using the AWS API Gateway as a proxy for Elasticsearch queries. I have a few queries that I'd like to reuse and grab from a web application, so for simplicity it would … --- ## [Change the value of a field](https://discuss.elastic.co/t/change-the-value-of-a-field/96590)
**Author:** [@sentinel](https://discuss.elastic.co/u/sentinel)\ **Replies:** 6\ **Last updated:** [August 10, 2017, 3:03pm UTC](https://discuss.elastic.co/t/change-the-value-of-a-field/96590 "2017-08-10T15:03:53Z")
I have a field called showing up with a value I wish to change clientDisabled = false} I want to get rid of the “}” character at the end without using too complicated a method. I have tried this: if (\[clientDisabled\]… --- ## [Dec 5th, 2020: \[EN\] Searching anything, anywhere with Workplace Search](https://discuss.elastic.co/t/dec-5th-2020-en-searching-anything-anywhere-with-workplace-search/254740)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [December 5, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-5th-2020-en-searching-anything-anywhere-with-workplace-search/254740 "2020-12-05T08:00:03Z")
Version française Introduction You already know that Workplace Search comes with a lot of connectors which help you connect your enterprise document data sources and have a federated way to search across all that inform… --- ## [Search results to contain only first element of an array field](https://discuss.elastic.co/t/search-results-to-contain-only-first-element-of-an-array-field/136525)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 1\ **Last updated:** [June 19, 2018, 3:35pm UTC](https://discuss.elastic.co/t/search-results-to-contain-only-first-element-of-an-array-field/136525 "2018-06-19T15:35:09Z")
Hi there. I want to limit the search result JSON, so that for a particular (nested) field — that is an array — only the first element (if one exists) is returned. I guess the \_source filtering doesn't support this. I tr… --- ## [Rollover alias \[mylogs\] can point to multiple indices](https://discuss.elastic.co/t/rollover-alias-mylogs-can-point-to-multiple-indices/179108)
**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\ **Replies:** 0\ **Last updated:** [April 30, 2019, 2:53pm UTC](https://discuss.elastic.co/t/rollover-alias-mylogs-can-point-to-multiple-indices/179108 "2019-04-30T14:53:32Z")
I am getting above mentioned error, following are the steps which I am doing. Created ILM policy PUT \_ilm/policy/mylogspolicy { "policy": { "phases": { "hot": { "actions": { "set\_priority… --- ## [Using wait\_for\_completion with Snapshot deletes](https://discuss.elastic.co/t/using-wait-for-completion-with-snapshot-deletes/176271)
**Author:** [@Chris\_Tompkinson](https://discuss.elastic.co/u/Chris_Tompkinson)\ **Replies:** 0\ **Last updated:** [April 10, 2019, 5:11pm UTC](https://discuss.elastic.co/t/using-wait-for-completion-with-snapshot-deletes/176271 "2019-04-10T17:11:55Z")
Hi, I'm using Elasticsearch 6.3 When I use the Snapshots REST API to delete snapshots I have two problems. Firstly when I run a delete the a snapshot it will sit and wait for the snapshot to be deleted, which can take… --- ## [Free Book on Intro to the ELK Stack](https://discuss.elastic.co/t/free-book-on-intro-to-the-elk-stack/49962)
**Author:** [@timogoosen](https://discuss.elastic.co/u/timogoosen)\ **Replies:** 2\ **Last updated:** [May 18, 2016, 9:53am UTC](https://discuss.elastic.co/t/free-book-on-intro-to-the-elk-stack/49962 "2016-05-18T09:53:53Z")
Hey I wrote this and posting it online for free. Feel free to comment or make pull request on github. In ascii doc and pdf format. Hope you enjoy this. Intro To The ELK Stack Timo Goosen --- ## [Grok Filter Parse a Hyphen as absent](https://discuss.elastic.co/t/grok-filter-parse-a-hyphen-as-absent/106030)
**Author:** [@Ewan](https://discuss.elastic.co/u/Ewan)\ **Replies:** 1\ **Last updated:** [November 1, 2017, 3:36pm UTC](https://discuss.elastic.co/t/grok-filter-parse-a-hyphen-as-absent/106030 "2017-11-01T15:36:59Z")
Hi, I'm trying to parse a log which will insert a hyphen for some fields when there is no value: Is there an easy way with grok to treat the hyphen as if the value is absent? i.e. not add the hyphen as a value, but con… --- ## [How to merge two indexes based on common field in Elasticsearch?](https://discuss.elastic.co/t/how-to-merge-two-indexes-based-on-common-field-in-elasticsearch/194114)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 2\ **Last updated:** [August 7, 2019, 7:34am UTC](https://discuss.elastic.co/t/how-to-merge-two-indexes-based-on-common-field-in-elasticsearch/194114 "2019-08-07T07:34:52Z")
Given two indexes test and amazon. PUT /test/\_doc/1 { "customer\_id" : "1234", "customer\_name" : "origin", "farm\_name": "Origin Delta" } PUT /amazon/\_doc/2 { "customer\_id" : "1234", "farm\_name": "Origin Delta… --- ## [Need a complete XML Filter example](https://discuss.elastic.co/t/need-a-complete-xml-filter-example/35398)
**Author:** [@Mohammed\_Abdul\_Khali](https://discuss.elastic.co/u/Mohammed_Abdul_Khali)\ **Replies:** 3\ **Last updated:** [August 18, 2016, 3:09pm UTC](https://discuss.elastic.co/t/need-a-complete-xml-filter-example/35398 "2016-08-18T15:09:49Z")
Hi, I am new to Logstash and I have a requirement where i have to read a xml file from my windows machine and index to ES. The XML file looks like the one in the attached image.... Could someone please give me a ref… --- ## ["Filebeat.prospectors has been removed"](https://discuss.elastic.co/t/filebeat-prospectors-has-been-removed/205563)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 11:01am UTC](https://discuss.elastic.co/t/filebeat-prospectors-has-been-removed/205563 "2019-10-29T11:01:07Z")
This is my filebeat.yml file content filebeat: prospectors: - paths: - C:/elk/\*.log input\_type: log multiline.pattern: '^\[0-9\]{4}-\[0-9\]{2}-\[0-9\]{2}' multiline.negate: true multiline.match: after output: logsta… --- ## [Elasticsearch plugin is red when starting kibana](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-when-starting-kibana/76125)
**Author:** [@Leo\_Li](https://discuss.elastic.co/u/Leo_Li)\ **Replies:** 2\ **Last updated:** [February 23, 2017, 10:03pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-when-starting-kibana/76125 "2017-02-23T22:03:32Z")
Hi, I'm using Elasticsearch 5.2 in docker and installed Kibana 5.2 in remote. Previously I was able to use kibana to access Elasticsearch but now when I start kibana I got error: log \[00:12:26.173\] \[info\]\[statu… --- ## [Hot to filter out the results which NOT equal to the key words?](https://discuss.elastic.co/t/hot-to-filter-out-the-results-which-not-equal-to-the-key-words/97532)
**Author:** [@ChelseaCao](https://discuss.elastic.co/u/ChelseaCao)\ **Replies:** 1\ **Last updated:** [August 18, 2017, 8:35am UTC](https://discuss.elastic.co/t/hot-to-filter-out-the-results-which-not-equal-to-the-key-words/97532 "2017-08-18T08:35:46Z")
Hi there, I am wondering how can I filter the search result filtering the field!=‘key words’? something like: select \* from tbl where col1!=‘test’ Thanks, Chelsea --- ## [Creating Cron job for Close and Delete indices from elasticsearch](https://discuss.elastic.co/t/creating-cron-job-for-close-and-delete-indices-from-elasticsearch/86614)
**Author:** [@warunac](https://discuss.elastic.co/u/warunac)\ **Replies:** 0\ **Last updated:** [May 22, 2017, 7:28am UTC](https://discuss.elastic.co/t/creating-cron-job-for-close-and-delete-indices-from-elasticsearch/86614 "2017-05-22T07:28:52Z")
I would like to share my Cron job for Close and Delete indices from elasticsearch 5.4 First installed elasticsearch-curator then created /etc/elasticsearch-curator folder for config files Created below files on that f… --- ## [How to specify timezone on elasticsearch?](https://discuss.elastic.co/t/how-to-specify-timezone-on-elasticsearch/259614)
**Author:** [@gabriel.goncalves](https://discuss.elastic.co/u/gabriel.goncalves)\ **Replies:** 6\ **Last updated:** [December 26, 2020, 6:19pm UTC](https://discuss.elastic.co/t/how-to-specify-timezone-on-elasticsearch/259614 "2020-12-26T18:19:38Z")
It says: "Internally, dates are converted to UTC (if the time-zone is specified) and stored as a long number representing milliseconds-since-the-epoch." What are all possible ways to specify the timezone? --- ## [Search for fields with dot in name](https://discuss.elastic.co/t/search-for-fields-with-dot-in-name/260692)
**Author:** [@sudpaw](https://discuss.elastic.co/u/sudpaw)\ **Replies:** 6\ **Last updated:** [February 8, 2021, 9:35am UTC](https://discuss.elastic.co/t/search-for-fields-with-dot-in-name/260692 "2021-02-08T09:35:19Z")
Hi, We are migrating from Es6.8 to latest ES7. We are using Re-index. While testing we came across a doc with a malformed fieldname. (the mapping does not allow for the field, but it is there). Example: { "id": "1… --- ## [Curl test command does](https://discuss.elastic.co/t/curl-test-command-does/73091)
**Author:** [@dmcn\_es](https://discuss.elastic.co/u/dmcn_es)\ **Replies:** 3\ **Last updated:** [January 30, 2017, 9:08am UTC](https://discuss.elastic.co/t/curl-test-command-does/73091 "2017-01-30T09:08:41Z")
Hi, When I try to do curl test command it does not show valid output but a large amount of html web page code as an error, sample below. I can connect to this servers kibana webpage. \[root@logstash1 elasticsearch-… --- ## [Elasticsearch 8.11.2, 7.17.16 Security Update (ESA-2023-29)](https://discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179)
**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 4:57pm UTC](https://discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179 "2023-12-12T16:57:56Z")
Elasticsearch Insertion of Sensitive Information into Log File (ESA-2023-29) An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw cont… --- ## [Dec 13th, 2019: \[EN\]\[APM\] How to diagnose web app flu](https://discuss.elastic.co/t/dec-13th-2019-en-apm-how-to-diagnose-web-app-flu/211408)
**Author:** [@Emanuil](https://discuss.elastic.co/u/Emanuil)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 7:59am UTC](https://discuss.elastic.co/t/dec-13th-2019-en-apm-how-to-diagnose-web-app-flu/211408 "2019-12-13T07:59:59Z")
'Tis the season for festivities, overindulgence and occasional illness. We could suggest season-appropriate decoration (at least if your app is hosted in the Northern hemisphere). However, today we will focus on apps whi… --- ## [How to backup particular index and restore if needed?](https://discuss.elastic.co/t/how-to-backup-particular-index-and-restore-if-needed/112746)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 1\ **Last updated:** [December 21, 2017, 5:38am UTC](https://discuss.elastic.co/t/how-to-backup-particular-index-and-restore-if-needed/112746 "2017-12-21T05:38:06Z")
Hi Guys, How do I take a backup of particular index say logstash-bl-2017-12-11 and move off to other location? Plus how do I restore later on that index if I wanted to query it? Can someone please help? --- ## [Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-pipeline-id-main-exception-grok-patternerror-pattern-ciscotimestamptz-log-date-not-defined/109474)
**Author:** [@adam.wendling](https://discuss.elastic.co/u/adam.wendling)\ **Replies:** 4\ **Last updated:** [January 12, 2018, 6:59pm UTC](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-pipeline-id-main-exception-grok-patternerror-pattern-ciscotimestamptz-log-date-not-defined/109474 "2018-01-12T18:59:11Z")
I am new to logstash. I am able to write and use simple .conf files and they work. I am trying a more complex and not getting very far. I am getting errors when trying to run logstash config. I ran with --debug and got t… --- ## [BindTransportException\[Failed to bind to \[9300-9400\]\]](https://discuss.elastic.co/t/bindtransportexception-failed-to-bind-to-9300-9400/65443)
**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\ **Replies:** 7\ **Last updated:** [November 9, 2016, 9:21am UTC](https://discuss.elastic.co/t/bindtransportexception-failed-to-bind-to-9300-9400/65443 "2016-11-09T09:21:41Z")
Good day I am using VM to run elastic search 2.3.3 i have changed only following to elasticsearch.yml file network.host: xx.xx.xx.xxx \*\* http.port: 9200\*\* i have opened the port for inboud and out bound rules. i… --- ## [Limit the number of search result in a dashboard](https://discuss.elastic.co/t/limit-the-number-of-search-result-in-a-dashboard/85568)
**Author:** [@ssiws](https://discuss.elastic.co/u/ssiws)\ **Replies:** 8\ **Last updated:** [May 12, 2017, 7:40pm UTC](https://discuss.elastic.co/t/limit-the-number-of-search-result-in-a-dashboard/85568 "2017-05-12T19:40:01Z")
Hello, is it possible to limit the number of results returned by a Saved Search on a dashboard ? I want to display the last 100 documents for example. I can't use a datatable because I don't want aggregation, etc... … --- ## [Elastic Stack 6.8.9 and 7.7.0 security update](https://discuss.elastic.co/t/elastic-stack-6-8-9-and-7-7-0-security-update/235571)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [June 3, 2020, 2:14pm UTC](https://discuss.elastic.co/t/elastic-stack-6-8-9-and-7-7-0-security-update/235571 "2020-06-03T14:14:53Z")
Kibana upgrade assistant prototype pollution flaw (ESA-2020-05) Kibana versions between 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privi… --- ## [Can I force ES 7+ to use bundled JDK instead of the one in JAVA\_HOME?](https://discuss.elastic.co/t/can-i-force-es-7-to-use-bundled-jdk-instead-of-the-one-in-java-home/199622)
**Author:** [@mesztam](https://discuss.elastic.co/u/mesztam)\ **Replies:** 8\ **Last updated:** [September 25, 2019, 4:42am UTC](https://discuss.elastic.co/t/can-i-force-es-7-to-use-bundled-jdk-instead-of-the-one-in-java-home/199622 "2019-09-25T04:42:38Z")
Hi, is it possible to force ES to use the bundled JDK instead of the one pointed by JAVA\_HOME? In some environments, elder version of JAVA is already installed and used by other applications, and customers may refuse t… --- ## [Disable jar hell](https://discuss.elastic.co/t/disable-jar-hell/104029)
**Author:** [@bendg25](https://discuss.elastic.co/u/bendg25)\ **Replies:** 8\ **Last updated:** [October 16, 2017, 6:06am UTC](https://discuss.elastic.co/t/disable-jar-hell/104029 "2017-10-16T06:06:01Z")
Hi, Is there any way to disable jar hell? --- ## [Can kibana uses alias for index pattern?](https://discuss.elastic.co/t/can-kibana-uses-alias-for-index-pattern/31767)
**Author:** [@cinhtau](https://discuss.elastic.co/u/cinhtau)\ **Replies:** 5\ **Last updated:** [April 10, 2017, 9:37am UTC](https://discuss.elastic.co/t/can-kibana-uses-alias-for-index-pattern/31767 "2017-04-10T09:37:59Z")
Hi, I can create for elasticsearch aliases, e.g. for all metrics-2015-10-01 to metrics-2015-10-nn the alias stats will be used. curl -XPOST 'http://localhost:9200/\_aliases' -d ' { "actions" : \[ { "add" : { … --- ## [There is insufficient memory for the Java Runtime Environment to continue](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/313926)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 7\ **Last updated:** [September 12, 2022, 8:01pm UTC](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/313926 "2022-09-12T20:01:10Z")
Hello all, I am using ELK 8.4.1. I have a cluster setup with 3 nodes. But when I tried to Ingest data through Logstash it gave me following errors. OpenJDK 64-Bit Server VM warning: INFO: os::commit\_memory(0x00000000c… --- ## [Failed to connect to backoff - Filebeat and ELK in different environemnts with NAT](https://discuss.elastic.co/t/failed-to-connect-to-backoff-filebeat-and-elk-in-different-environemnts-with-nat/155538)
**Author:** [@Dan007](https://discuss.elastic.co/u/Dan007)\ **Replies:** 5\ **Last updated:** [November 12, 2018, 9:12pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-filebeat-and-elk-in-different-environemnts-with-nat/155538 "2018-11-12T21:12:57Z")
Hi, I have two different environments: in "environment-a" there is ELK stack running using docker containers, and in "environment-b" there is a dockerised application that should sent logs using filebeat. The environme… --- ## [How to improve recovery speed?](https://discuss.elastic.co/t/how-to-improve-recovery-speed/1962)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 4\ **Last updated:** [November 9, 2016, 2:58pm UTC](https://discuss.elastic.co/t/how-to-improve-recovery-speed/1962 "2016-11-09T14:58:49Z")
Using 1.5.2 I have 16 shards initializing. I'm checking the status of recovery through \_cat/recovery, but I only see the % of 1 shard at a time actually moving up and very slowly. It seems to me that it's recovering … --- ## [Fleet Elasticsearch CA trusted fingerprint](https://discuss.elastic.co/t/fleet-elasticsearch-ca-trusted-fingerprint/297200)
**Author:** [@EliWallic](https://discuss.elastic.co/u/EliWallic)\ **Replies:** 7\ **Last updated:** [February 22, 2022, 10:05pm UTC](https://discuss.elastic.co/t/fleet-elasticsearch-ca-trusted-fingerprint/297200 "2022-02-22T22:05:59Z")
Hello community, i am trying to setup my first fleet server and figured out that i can set the ca fingerprint as default. So I tried under fFleet \> Settings \> Output to set as wanted but i am getting the error: CA tru… [Previous page](https://discuss.elastic.co/top.md?page=277&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=279&per_page=50&period=all)