# Top **URL:** https://discuss.elastic.co/top.md?page=282&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 283 --- ## [Kibana docker image doesn't connect to elasticsearch image](https://discuss.elastic.co/t/kibana-docker-image-doesnt-connect-to-elasticsearch-image/79511)
**Author:** [@Woodford](https://discuss.elastic.co/u/Woodford)\ **Replies:** 5\ **Last updated:** [March 24, 2017, 12:25am UTC](https://discuss.elastic.co/t/kibana-docker-image-doesnt-connect-to-elasticsearch-image/79511 "2017-03-24T00:25:16Z")
I was able to run elasticsearch docker image, and login and/or change default passwords. This is the run command from the docs: docker run -p 9200:9200 -e "http.host=0.0.0.0" -e "transport.host=127.0.0.1” docker.elasti… --- ## [Import data (table) from Oracle to ES](https://discuss.elastic.co/t/import-data-table-from-oracle-to-es/79006)
**Author:** [@AyyappanK](https://discuss.elastic.co/u/AyyappanK)\ **Replies:** 5\ **Last updated:** [March 17, 2017, 7:25pm UTC](https://discuss.elastic.co/t/import-data-table-from-oracle-to-es/79006 "2017-03-17T19:25:00Z")
Hi All, I am an Oracle developer. We have a requirement to pump in data from Oracle tables to ES and subsequently route to Angular JS for reporting purposes. While I am totally new, to this technology, I have read ab… --- ## [Index Lifecycle Policy not deleting - "Waiting for all shard copies to be active"](https://discuss.elastic.co/t/index-lifecycle-policy-not-deleting-waiting-for-all-shard-copies-to-be-active/304801)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 5\ **Last updated:** [May 16, 2022, 10:37am UTC](https://discuss.elastic.co/t/index-lifecycle-policy-not-deleting-waiting-for-all-shard-copies-to-be-active/304801 "2022-05-16T10:37:01Z")
Can anyone help me with this? The policy is not deleting my indices after certain time. I put them to just to several days to see if its working. I am getting the message in my indices: Waiting for all shard copies to be… --- ## [Kibana - Unable to fetch mapping](https://discuss.elastic.co/t/kibana-unable-to-fetch-mapping/50646)
**Author:** [@maara](https://discuss.elastic.co/u/maara)\ **Replies:** 1\ **Last updated:** [May 23, 2016, 12:21am UTC](https://discuss.elastic.co/t/kibana-unable-to-fetch-mapping/50646 "2016-05-23T00:21:39Z")
Hi all, I am a total noob in the elk stack... I have deployed the docker container sebp/elk:latest and wanted to configure it but when I open the kibana url, I am thrown on a screen saying "No default index pattern. You … --- ## [Combine two queries](https://discuss.elastic.co/t/combine-two-queries/126637)
**Author:** [@subrato](https://discuss.elastic.co/u/subrato)\ **Replies:** 8\ **Last updated:** [April 30, 2018, 6:23pm UTC](https://discuss.elastic.co/t/combine-two-queries/126637 "2018-04-30T18:23:53Z")
I need to combine 2 queries and I am not sure how to do it. I have one field which has site names (we have few properties that I am scraping and putting cleaned html from it into Elastic Search) and few other fields (con… --- ## ["main ERROR Null object" after update 5.6.1 =\> 6.0.1](https://discuss.elastic.co/t/main-error-null-object-after-update-5-6-1-6-0-1/111057)
**Author:** [@Jelen](https://discuss.elastic.co/u/Jelen)\ **Replies:** 5\ **Last updated:** [December 12, 2017, 3:41pm UTC](https://discuss.elastic.co/t/main-error-null-object-after-update-5-6-1-6-0-1/111057 "2017-12-12T15:41:55Z")
Hello, after updating elastic, I get this error: root@Lisa:~# service elasticsearch status ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor prese… --- ## [Delete by query via @timestamp](https://discuss.elastic.co/t/delete-by-query-via-timestamp/134451)
**Author:** [@TechGeek](https://discuss.elastic.co/u/TechGeek)\ **Replies:** 8\ **Last updated:** [June 4, 2018, 4:45pm UTC](https://discuss.elastic.co/t/delete-by-query-via-timestamp/134451 "2018-06-04T16:45:52Z")
I want to delete highlighted doc in image i tried as below:- Though its deleting all records, please suggest the right command to achieve the Objective. POST poc/\_delete\_by\_query { "query":{ "range":{ "@timestamp":… --- ## [Kafka publish failed with: circuit breaker is open](https://discuss.elastic.co/t/kafka-publish-failed-with-circuit-breaker-is-open/123339)
**Author:** [@andlaz](https://discuss.elastic.co/u/andlaz)\ **Replies:** 1\ **Last updated:** [March 12, 2018, 3:36pm UTC](https://discuss.elastic.co/t/kafka-publish-failed-with-circuit-breaker-is-open/123339 "2018-03-12T15:36:08Z")
hi all, i'm having a problem with the kafka output in that it sends a couple MB worth of log messages right after start, then not a single one. It does not log much about a connection issue, the kafka cluster is healthy,… --- ## [Elasticsearch how to prevent duplicate data?](https://discuss.elastic.co/t/elasticsearch-how-to-prevent-duplicate-data/164039)
**Author:** [@m\_5amy](https://discuss.elastic.co/u/m_5amy)\ **Replies:** 2\ **Last updated:** [January 13, 2019, 2:39pm UTC](https://discuss.elastic.co/t/elasticsearch-how-to-prevent-duplicate-data/164039 "2019-01-13T14:39:01Z")
Hi all, I need to prevent documents to be inserted into single index if it has the same data EX: { "\_score":1.0, "\_source":{ "value":{ "user":"test user", "age":"20" } }… --- ## [NoClassDefFoundError: Could not initialize class org.elasticsearch.common.xcontent.smile.SmileXContent](https://discuss.elastic.co/t/noclassdeffounderror-could-not-initialize-class-org-elasticsearch-common-xcontent-smile-smilexcontent/36396)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 7\ **Last updated:** [March 21, 2016, 3:49pm UTC](https://discuss.elastic.co/t/noclassdeffounderror-could-not-initialize-class-org-elasticsearch-common-xcontent-smile-smilexcontent/36396 "2016-03-21T15:49:58Z")
Hi trying to port an application from 1.7.3 to 2.1.0 I have the following dependency... \ \ \org.elasticsearch\ \elasticsearch\ \2.1.0\ **Author:** [@jknight](https://discuss.elastic.co/u/jknight)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 4:43pm UTC](https://discuss.elastic.co/t/elastic-agent-install-unknown-resource/286758 "2021-10-14T16:43:21Z") I'm trying to install elastic-agent on our server and am getting message: Unknown resource. I'm using the hosted elastic offering and have APM & Fleet enabled. Steps Taken: Download Linux 64-bit tarball to server U… --- ## [How to Calculate Unique Count of Users in Timelion](https://discuss.elastic.co/t/how-to-calculate-unique-count-of-users-in-timelion/103112)
**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\ **Replies:** 7\ **Last updated:** [November 15, 2017, 7:32am UTC](https://discuss.elastic.co/t/how-to-calculate-unique-count-of-users-in-timelion/103112 "2017-11-15T07:32:16Z")
Hi Guyz, I have bunch of logs are coming in kibana. I want to check unique users hit in timelion only. i have alphanumeric value is coming under 'user' fields and have some segments in another fields then i want to ch… --- ## [Dec 14th, 2019 \[SE\]\[Machine Learning\] Så här börjar du med Elastic Maskininlärning](https://discuss.elastic.co/t/dec-14th-2019-se-machine-learning-sa-har-borjar-du-med-elastic-maskininlarning/211164)
**Author:** [@Camilla\_Montonen](https://discuss.elastic.co/u/Camilla_Montonen)\ **Replies:** 0\ **Last updated:** [December 14, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-14th-2019-se-machine-learning-sa-har-borjar-du-med-elastic-maskininlarning/211164 "2019-12-14T08:00:01Z")
På Elastic, har vi utvecklat olika maskininlärningsprogram sedan 2016. Då började vi med Elastic Anomaly Detection. Vårt Anomaly Detection program matas med tidsserier och försöker att hitta avvikande datapunkter. Förde… --- ## [APM Index Pattern is created automatically in Kibana](https://discuss.elastic.co/t/apm-index-pattern-is-created-automatically-in-kibana/288404)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 4\ **Last updated:** [November 5, 2021, 7:33am UTC](https://discuss.elastic.co/t/apm-index-pattern-is-created-automatically-in-kibana/288404 "2021-11-05T07:33:34Z")
Kibana version: 7.14.2 Elasticsearch version: 7.14.2 APM Server version: 7.14.2 APM Agent language and version: NodeJS ^3.17.0 Browser version: Microsoft Edge 95.0.1020.40 Original install method (e.g. download pag… --- ## [Geo\_point sort by distance](https://discuss.elastic.co/t/geo-point-sort-by-distance/201804)
**Author:** [@andrezenzen](https://discuss.elastic.co/u/andrezenzen)\ **Replies:** 7\ **Last updated:** [October 1, 2019, 2:00pm UTC](https://discuss.elastic.co/t/geo-point-sort-by-distance/201804 "2019-10-01T14:00:23Z")
I would like to know what would be the best way to perform a search and performing a sorting by distance, today \_geo\_distance filters and does not sort. What would be the best solution in which you need to perform two "s… --- ## [Failed to install template error](https://discuss.elastic.co/t/failed-to-install-template-error/101888)
**Author:** [@Zama\_Las](https://discuss.elastic.co/u/Zama_Las)\ **Replies:** 5\ **Last updated:** [September 27, 2017, 6:06am UTC](https://discuss.elastic.co/t/failed-to-install-template-error/101888 "2017-09-27T06:06:35Z")
Hi , I just started working on setting up the ELK stack using docker. I was able to start all the three components successfully using docker install . But I can see one error message during startup of logstash . The e… --- ## [Configuring Elastic Search Mappings and Logstash](https://discuss.elastic.co/t/configuring-elastic-search-mappings-and-logstash/55586)
**Author:** [@eyeris](https://discuss.elastic.co/u/eyeris)\ **Replies:** 7\ **Last updated:** [July 18, 2016, 12:41pm UTC](https://discuss.elastic.co/t/configuring-elastic-search-mappings-and-logstash/55586 "2016-07-18T12:41:39Z")
Hi, I am trying to put a .csv file in to logstash and then get the index to kibana. When a dynamic mapping is given and run logstash. It works fine and Kibana shows the index. Following is the config file and the dynamic… --- ## [Size of Index](https://discuss.elastic.co/t/size-of-index/43065)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 7\ **Last updated:** [March 3, 2016, 9:20pm UTC](https://discuss.elastic.co/t/size-of-index/43065 "2016-03-03T21:20:13Z")
I'm trying a simple test to understand the size of index base on what I observed. Case 1: Total Indexed Volume 15 Million Documents of size (74GB) . Index size 38.1 GB. Case 2: Total Indexed Volume 500K Documents of … --- ## [Grok -\> patterns\_dir not working in logstash 1.5.0](https://discuss.elastic.co/t/grok-patterns-dir-not-working-in-logstash-1-5-0/1428)
**Author:** [@anoban](https://discuss.elastic.co/u/anoban)\ **Replies:** 3\ **Last updated:** [December 14, 2016, 4:08am UTC](https://discuss.elastic.co/t/grok-patterns-dir-not-working-in-logstash-1-5-0/1428 "2016-12-14T04:08:18Z")
... in the same way as it did in 1.4.2 I had a complex directory structure in 1.4.2, as I noticed grok would aggregate the patterns in alphabetical order. This gave me the ability to build a directory structure like: … --- ## [How to manage data retention time in ElasticSearch](https://discuss.elastic.co/t/how-to-manage-data-retention-time-in-elasticsearch/282541)
**Author:** [@vp096](https://discuss.elastic.co/u/vp096)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 9:25am UTC](https://discuss.elastic.co/t/how-to-manage-data-retention-time-in-elasticsearch/282541 "2021-08-26T09:25:21Z")
Hello to all! I'm using Logastash to send syslog data to ElasticSearch and I'm browsing it using Kibana. I have 2 questions regarding log backup: I would like to keep this data for at least 1 year before it is deleted… --- ## [My Docker Elasticsearch Keeps Failing Looking For JAVA?](https://discuss.elastic.co/t/my-docker-elasticsearch-keeps-failing-looking-for-java/272334)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 2\ **Last updated:** [May 7, 2021, 6:13am UTC](https://discuss.elastic.co/t/my-docker-elasticsearch-keeps-failing-looking-for-java/272334 "2021-05-07T06:13:12Z")
Good Day, I'm trying to stand up a demo / test install of ES on Docker for Mac. I have a M1 (ARM) MacBook. When I try to do the docker compose up I get the following error... Attaching to elasticsearch, kibana elast… --- ## [Elastic xpack security](https://discuss.elastic.co/t/elastic-xpack-security/108885)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 2\ **Last updated:** [November 26, 2017, 5:24pm UTC](https://discuss.elastic.co/t/elastic-xpack-security/108885 "2017-11-26T17:24:49Z")
Hi All, Am trying to enable the xpack security in my elastic stack machine, but iam unable to do so initially i tried to generate the auto password using bin/x-pack/setup-passwords auto i received some default passwo… --- ## [UDP listener died](https://discuss.elastic.co/t/udp-listener-died/24489)
**Author:** [@nzHillNet](https://discuss.elastic.co/u/nzHillNet)\ **Replies:** 6\ **Last updated:** [February 15, 2016, 10:34pm UTC](https://discuss.elastic.co/t/udp-listener-died/24489 "2016-02-15T22:34:54Z")
Hi, Logstash version 1.5.1, Elasticsearch vesion 1.6 My ddwrt based switches can only send logs over UDP port 514. I cannot get this to work, and continually get the following error: {:timestamp=\>"2015-06-28T11:5… --- ## [CPU Total/Free Virtual Machine with vSphere Module \[Metricbeat 7.15.2\]](https://discuss.elastic.co/t/cpu-total-free-virtual-machine-with-vsphere-module-metricbeat-7-15-2/289449)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 5\ **Last updated:** [November 23, 2021, 10:26am UTC](https://discuss.elastic.co/t/cpu-total-free-virtual-machine-with-vsphere-module-metricbeat-7-15-2/289449 "2021-11-23T10:26:45Z")
Hi, everyone I have configured vSphere module in Metricbeat 7.15.2 in order to get metrics from my VMware hosts and VMs. Metricbeat send all VM memory metrics, here you are: vsphere.virtualmachine.memory.free.guest.by… --- ## [Bytes can be at most 32766 in length](https://discuss.elastic.co/t/bytes-can-be-at-most-32766-in-length/213650)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 8\ **Last updated:** [January 5, 2020, 6:31pm UTC](https://discuss.elastic.co/t/bytes-can-be-at-most-32766-in-length/213650 "2020-01-05T18:31:14Z")
Hello World! I'm trying to \_reindex one of my indices, yet I'm running into following issue: { "took": 9502, "timed\_out": false, "total": 114143, "updated": 0, "created": 2999, "deleted": 0, "batches": 3,… --- ## [Multiple grok rules in ingest node processor definition](https://discuss.elastic.co/t/multiple-grok-rules-in-ingest-node-processor-definition/47902)
**Author:** [@radu\_gheorghe](https://discuss.elastic.co/u/radu_gheorghe)\ **Replies:** 6\ **Last updated:** [April 21, 2016, 12:54pm UTC](https://discuss.elastic.co/t/multiple-grok-rules-in-ingest-node-processor-definition/47902 "2016-04-21T12:54:24Z")
Hey, Elastic pioneer here, testing 5.0alpha1 \[:slight\_smile:\] In the ingest node, I was able to define a grok processor, but some log types need multiple grok rules (e.g. firewall logs). In Logstash, you'd simply spec… --- ## [Is sorting on Text/String field no longer available in 5.x?](https://discuss.elastic.co/t/is-sorting-on-text-string-field-no-longer-available-in-5-x/68586)
**Author:** [@juminoz](https://discuss.elastic.co/u/juminoz)\ **Replies:** 7\ **Last updated:** [December 10, 2016, 3:09am UTC](https://discuss.elastic.co/t/is-sorting-on-text-string-field-no-longer-available-in-5-x/68586 "2016-12-10T03:09:09Z")
I understand that this is a new change, but I can't see what's wrong with this mapping. This is taken from the mapping of the field registered in ElasticSearch through \_mapping call: "key": { "type": "text", "f… --- ## [Can we join two indexes.?](https://discuss.elastic.co/t/can-we-join-two-indexes/139128)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 2\ **Last updated:** [July 17, 2018, 9:56pm UTC](https://discuss.elastic.co/t/can-we-join-two-indexes/139128 "2018-07-17T21:56:57Z")
Hi, While fetching data from elasticsearch can we join two indexes in query. Is it possible? --- ## [Hits relation constant value - gte - greater than or equal to](https://discuss.elastic.co/t/hits-relation-constant-value-gte-greater-than-or-equal-to/218037)
**Author:** [@Andrey\_Masunov](https://discuss.elastic.co/u/Andrey_Masunov)\ **Replies:** 8\ **Last updated:** [February 6, 2020, 12:19pm UTC](https://discuss.elastic.co/t/hits-relation-constant-value-gte-greater-than-or-equal-to/218037 "2020-02-06T12:19:41Z")
From documentation: https://www.elastic.co/guide/en/elasticsearch/reference/7.5/search-request-body.html#request-body-search-track-total-hits "If the total number of hits that match the query is greater than the value … --- ## [How to index the PDF documents](https://discuss.elastic.co/t/how-to-index-the-pdf-documents/327987)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 8\ **Last updated:** [March 20, 2023, 10:36am UTC](https://discuss.elastic.co/t/how-to-index-the-pdf-documents/327987 "2023-03-20T10:36:03Z")
How to index the PDF and image documents into elasticsearch. Would like to extract the entities to enable the search on keywords. Whether the workplace search provide this functionality? Whether Apache Tika has been used… --- ## [Delete old indices automatically?](https://discuss.elastic.co/t/delete-old-indices-automatically/90350)
**Author:** [@munotshubham](https://discuss.elastic.co/u/munotshubham)\ **Replies:** 4\ **Last updated:** [June 28, 2017, 8:14pm UTC](https://discuss.elastic.co/t/delete-old-indices-automatically/90350 "2017-06-28T20:14:27Z")
Hi, So I have created an ELK stack for passing IIS logs and it is generating around 3GB a day and it is storing in an index a day. Eg: filebeat-2017.06.21 I want to delete old index so that ElasticSearch doesn't cras… --- ## [Scripted field convert string to number](https://discuss.elastic.co/t/scripted-field-convert-string-to-number/198646)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 4\ **Last updated:** [September 13, 2019, 6:45am UTC](https://discuss.elastic.co/t/scripted-field-convert-string-to-number/198646 "2019-09-13T06:45:58Z")
Hi, I need to convert a string to a number. I wrote this script but it does not work and causes no data to display anymore when looking at discovery. if (doc\['stringnumber'\]) { Integer.parseInt(doc\['stringnumber'\]… --- ## [High disk watermark \[90%\] exceeded on node,shards will be relocated away from this node](https://discuss.elastic.co/t/high-disk-watermark-90-exceeded-on-node-shards-will-be-relocated-away-from-this-node/99473)
**Author:** [@shyamalaponnada](https://discuss.elastic.co/u/shyamalaponnada)\ **Replies:** 4\ **Last updated:** [September 6, 2017, 4:05pm UTC](https://discuss.elastic.co/t/high-disk-watermark-90-exceeded-on-node-shards-will-be-relocated-away-from-this-node/99473 "2017-09-06T16:05:07Z")
HI All, recently elasticsearch stops sending data to kibana as the disk space is exceeded.per day i can see 5 M documents are flowing from other server to Elasticsearch.Please find the error am getting \[2017-08-31T01:2… --- ## [Filter document with not null value in Kibana Discover. Should I use "exist", but it still return me docs with empty field](https://discuss.elastic.co/t/filter-document-with-not-null-value-in-kibana-discover-should-i-use-exist-but-it-still-return-me-docs-with-empty-field/265103)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 9:47am UTC](https://discuss.elastic.co/t/filter-document-with-not-null-value-in-kibana-discover-should-i-use-exist-but-it-still-return-me-docs-with-empty-field/265103 "2021-02-23T09:47:22Z")
Hi, I am trying to filter out field without "null/empty" value in Kibana, but when I try to use operator exist. THen it still show me docs without any value. Just wondering is there a way to filter only see documents wi… --- ## [Elasticsearch/Kibana Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/elasticsearch-kibana-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/196139)
**Author:** [@zavalazi](https://discuss.elastic.co/u/zavalazi)\ **Replies:** 7\ **Last updated:** [August 23, 2019, 1:07am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/196139 "2019-08-23T01:07:25Z")
I am configuring an EFK-stack (Elasticsearch - Fluentd - Kibana) running under Docker containers to allow LDAP authentication with my AD (Active Directory) realm. I am getting the error... Authentication of \[elastic\] … --- ## [Elasticsearch illegal\_argument\_exception error](https://discuss.elastic.co/t/elasticsearch-illegal-argument-exception-error/125110)
**Author:** [@sameera207](https://discuss.elastic.co/u/sameera207)\ **Replies:** 2\ **Last updated:** [March 25, 2018, 10:44pm UTC](https://discuss.elastic.co/t/elasticsearch-illegal-argument-exception-error/125110 "2018-03-25T22:44:35Z")
Hi All, I'm working on a rails 5.0.6 project with Elasticsearch 2.4. I'm using searchkick. My question is, I'm getting the following error when I try to reindex. (I understand some of the values in the error is maybe sp… --- ## [Elasticsearch Docker container keeps crashing with exit status of 137](https://discuss.elastic.co/t/elasticsearch-docker-container-keeps-crashing-with-exit-status-of-137/125410)
**Author:** [@hokiegeek2](https://discuss.elastic.co/u/hokiegeek2)\ **Replies:** 6\ **Last updated:** [March 30, 2018, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-container-keeps-crashing-with-exit-status-of-137/125410 "2018-03-30T13:24:32Z")
Hi Everyone, I have a docker-xpack docker image that I deploy on marathon/mesos. The image works great and is uber-stable when xplack security is disabled. When I enable xpack security and use encrypted comms, the conta… --- ## [Ready to use pi-hole filter and dashboard](https://discuss.elastic.co/t/ready-to-use-pi-hole-filter-and-dashboard/169667)
**Author:** [@nin9s](https://discuss.elastic.co/u/nin9s)\ **Replies:** 1\ **Last updated:** [February 24, 2019, 8:34am UTC](https://discuss.elastic.co/t/ready-to-use-pi-hole-filter-and-dashboard/169667 "2019-02-24T08:34:18Z")
Hi there I’ve created a configuration for the popular dns forwarder and advertisement blocker pi-hole so one can easily collect, filter, search and visualize pi-holes log data. This is meant to be a alternative to the … --- ## [Function score query returned an invalid score: NaN or -Infinity](https://discuss.elastic.co/t/function-score-query-returned-an-invalid-score-nan-or-infinity/152854)
**Author:** [@lunatic](https://discuss.elastic.co/u/lunatic)\ **Replies:** 2\ **Last updated:** [October 19, 2018, 1:16am UTC](https://discuss.elastic.co/t/function-score-query-returned-an-invalid-score-nan-or-infinity/152854 "2018-10-19T01:16:46Z")
I have a query using function\_score and field\_value\_factor like this: GET my\_item\_list/doc/\_search { "query": { "function\_score": { "query": { "match\_all": {} }, "field\_value\_factor": { … --- ## [Extract a string from a field and create a new field with that string](https://discuss.elastic.co/t/extract-a-string-from-a-field-and-create-a-new-field-with-that-string/74051)
**Author:** [@jstar](https://discuss.elastic.co/u/jstar)\ **Replies:** 1\ **Last updated:** [February 6, 2017, 2:41pm UTC](https://discuss.elastic.co/t/extract-a-string-from-a-field-and-create-a-new-field-with-that-string/74051 "2017-02-06T14:41:46Z")
Hi EveryBody, I'm working with logstash grok to extract a string from a field. Here is an example of the "myfield":" stringToExtract-instance 2017-02-06 05:48:25 INFO XXXXXXXX" I want to extract the stringToExtra… --- ## [Failing to run on Intellij in debug mode](https://discuss.elastic.co/t/failing-to-run-on-intellij-in-debug-mode/227805)
**Author:** [@amitkg](https://discuss.elastic.co/u/amitkg)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 7:01pm UTC](https://discuss.elastic.co/t/failing-to-run-on-intellij-in-debug-mode/227805 "2020-04-16T19:01:09Z")
Hi, I followed the instruction, provided CONTRIBUTING.md and TESTING.asciidoc, to setup Elasticsearch on Intellij (macOS 10.15.4) . I was able to run it normal mode but I am unable to run it in debug mode. This worked:… --- ## [Could not start Logstash 5.0 as a service on CentOS 7](https://discuss.elastic.co/t/could-not-start-logstash-5-0-as-a-service-on-centos-7/64791)
**Author:** [@chuenl](https://discuss.elastic.co/u/chuenl)\ **Replies:** 4\ **Last updated:** [January 19, 2017, 8:25pm UTC](https://discuss.elastic.co/t/could-not-start-logstash-5-0-as-a-service-on-centos-7/64791 "2017-01-19T20:25:33Z")
I am running CentOS 7. I had followed the instruction and used yum to install: https://www.elastic.co/guide/en/logstash/5.0/installing-logstash.html I put my conf file at /etc/logstash/conf.d. Launching logstash man… --- ## [Filebeat Log Error](https://discuss.elastic.co/t/filebeat-log-error/146217)
**Author:** [@robegome](https://discuss.elastic.co/u/robegome)\ **Replies:** 7\ **Last updated:** [August 28, 2018, 9:45pm UTC](https://discuss.elastic.co/t/filebeat-log-error/146217 "2018-08-28T21:45:43Z")
Hello everyone! I have an error with Filebeat... checking /var/log/filebeat/filebeat , I am seeing this error: 2018-08-27T17:37:09.165Z INFO instance/beat.go:273 Setup Beat: filebeat; Version: 6.4.0 2018… --- ## [Upgrading elasticsearch 8.19.11 to 9+ cluster managed by ECK Operator](https://discuss.elastic.co/t/upgrading-elasticsearch-8-19-11-to-9-cluster-managed-by-eck-operator/385361)
**Author:** [@coezdemir](https://discuss.elastic.co/u/coezdemir)\ **Replies:** 0\ **Last updated:** [March 6, 2026, 10:43am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-8-19-11-to-9-cluster-managed-by-eck-operator/385361 "2026-03-06T10:43:10Z")
Hello, I wanted to share some insight that we came accross on an upgrade we recently did. Upgrade ECK operator version from 2.16+ to 3+ since only 3+ supports 9+ elastic Upgrade path was from 8.19.11 → 9.1.9 at first … --- ## [Can elasticsearch do GROUP BY multi fields and ORDER BY count?](https://discuss.elastic.co/t/can-elasticsearch-do-group-by-multi-fields-and-order-by-count/176128)
**Author:** [@rookie1](https://discuss.elastic.co/u/rookie1)\ **Replies:** 2\ **Last updated:** [April 11, 2019, 7:16am UTC](https://discuss.elastic.co/t/can-elasticsearch-do-group-by-multi-fields-and-order-by-count/176128 "2019-04-11T07:16:40Z")
In SQL I would do it possibly like this: SELECT field1,field2, count(\*) as cnt FROM table GROUP BY field1,field2 ORDER BY cnt DESC; Is aggregate query like that possible with ES? --- ## [Filebeat is running but not sending logs to logstash](https://discuss.elastic.co/t/filebeat-is-running-but-not-sending-logs-to-logstash/121276)
**Author:** [@jiten](https://discuss.elastic.co/u/jiten)\ **Replies:** 7\ **Last updated:** [February 28, 2018, 12:25am UTC](https://discuss.elastic.co/t/filebeat-is-running-but-not-sending-logs-to-logstash/121276 "2018-02-28T00:25:53Z")
Hi Team, I am trying to setup filebeat on my centos 7 machine. filebeat is working fine but still not able to see any logs to logz.io. filebeat.yml file configuration filebeat.prospectors: - type: log enabled: true … --- ## [Download logs](https://discuss.elastic.co/t/download-logs/34599)
**Author:** [@langtusj](https://discuss.elastic.co/u/langtusj)\ **Replies:** 8\ **Last updated:** [October 19, 2016, 5:34am UTC](https://discuss.elastic.co/t/download-logs/34599 "2016-10-19T05:34:54Z")
Is there a way to download the logs from a saved search to a zip file, etc.? Thanks, Stan --- ## [Dec 7th, 2025: \[EN\] Elastic as Code: Automating More Than Just Infrastructure](https://discuss.elastic.co/t/dec-7th-2025-en-elastic-as-code-automating-more-than-just-infrastructure/383587)
**Author:** [@kylerozanitis](https://discuss.elastic.co/u/kylerozanitis)\ **Replies:** 0\ **Last updated:** [December 7, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-7th-2025-en-elastic-as-code-automating-more-than-just-infrastructure/383587 "2025-12-07T08:00:15Z")
Elastic as Code: Automating More Than Just Infrastructure Terraform is a tool frequently used by engineers to create, modify, and delete infrastructure using a pattern called Infrastructure as Code (IaC). Although com… --- ## [What is the best way to handle \_grokparsefailure errors](https://discuss.elastic.co/t/what-is-the-best-way-to-handle-grokparsefailure-errors/106092)
**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\ **Replies:** 3\ **Last updated:** [November 16, 2017, 8:41pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-handle-grokparsefailure-errors/106092 "2017-11-16T20:41:01Z")
I can see there are some \_grokparsefailure errors in the kibana console, i want to know what is the best way to handle these errors? --- ## [Restriction on amount of records returned by elasticsearch](https://discuss.elastic.co/t/restriction-on-amount-of-records-returned-by-elasticsearch/107412)
**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\ **Replies:** 7\ **Last updated:** [November 14, 2017, 10:40am UTC](https://discuss.elastic.co/t/restriction-on-amount-of-records-returned-by-elasticsearch/107412 "2017-11-14T10:40:04Z")
Hi All, It doesn't matter what type of search I perform. (I know for example one particular search I do should return over 1000 records/entries on the index). In Kibana using the Dev Tools window, the output window may … [Previous page](https://discuss.elastic.co/top.md?page=281&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=283&per_page=50&period=all)