# Top **URL:** https://discuss.elastic.co/top.md?page=284&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 285 --- ## [Elasticsearch 5.4.1 - availableProcessors is already set](https://discuss.elastic.co/t/elasticsearch-5-4-1-availableprocessors-is-already-set/88036)
**Author:** [@Mihai\_Cazacu](https://discuss.elastic.co/u/Mihai_Cazacu)\ **Replies:** 8\ **Last updated:** [June 2, 2017, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-5-4-1-availableprocessors-is-already-set/88036 "2017-06-02T12:06:25Z")
Hi, I have upgraded elasticsearch from 5.4.0 to 5.4.1 and I have got this error: java.lang.IllegalStateException: availableProcessors is already set to \[8\], rejecting \[8\] at io.netty.util.NettyRuntime$AvailableProces… --- ## [Creation and update timestamps for each doc?](https://discuss.elastic.co/t/creation-and-update-timestamps-for-each-doc/93456)
**Author:** [@twigbranch](https://discuss.elastic.co/u/twigbranch)\ **Replies:** 3\ **Last updated:** [July 19, 2017, 7:02am UTC](https://discuss.elastic.co/t/creation-and-update-timestamps-for-each-doc/93456 "2017-07-19T07:02:40Z")
What would be the most performant way to maintain a creation timestamp and last update timestamp for each doc? I am indexing documents which have a set ID. When there is a new ID the creation timestamp is set. When fi… --- ## [Failed to execute bulk item](https://discuss.elastic.co/t/failed-to-execute-bulk-item/43740)
**Author:** [@Ashvin\_Meetoo](https://discuss.elastic.co/u/Ashvin_Meetoo)\ **Replies:** 2\ **Last updated:** [May 10, 2017, 4:42am UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item/43740 "2017-05-10T04:42:12Z")
Hello people, I am getting a strange error while parsing some data to elasticsearch. My template is properly defined, and when i add a sample data manually it works: POST /netflow-2016-03-08/socket { … --- ## [Sending logs from Syslog-ng to Logstash with and without TLS](https://discuss.elastic.co/t/sending-logs-from-syslog-ng-to-logstash-with-and-without-tls/252939)
**Author:** [@Vishnuprasad](https://discuss.elastic.co/u/Vishnuprasad)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 6:25am UTC](https://discuss.elastic.co/t/sending-logs-from-syslog-ng-to-logstash-with-and-without-tls/252939 "2020-10-22T06:25:10Z")
Hello Explorers :slightly\_smiling\_face: Hope I could help you if you are looking to set up a Syslog-ng Logstash configuration to transfer logs from a Client server to Master server. Advantage of this setup: If you ha… --- ## [Elasticsearch Serverless is GA](https://discuss.elastic.co/t/elasticsearch-serverless-is-ga/371370)
**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\ **Replies:** 0\ **Last updated:** [December 3, 2024, 10:53am UTC](https://discuss.elastic.co/t/elasticsearch-serverless-is-ga/371370 "2024-12-03T10:53:37Z")
No nodes, no shards, no versions: Elasticsearch Serverless is GA on AWS — right from re:invent. Some of the best resources to get you up and running: Official announcement blog post Differences from self-managed or ho… --- ## [Import a csv into ElasticSearch using logstash - Windows](https://discuss.elastic.co/t/import-a-csv-into-elasticsearch-using-logstash-windows/43401)
**Author:** [@evripides](https://discuss.elastic.co/u/evripides)\ **Replies:** 4\ **Last updated:** [October 12, 2016, 5:59am UTC](https://discuss.elastic.co/t/import-a-csv-into-elasticsearch-using-logstash-windows/43401 "2016-10-12T05:59:24Z")
I am trying to import a csv into ElasticSearch using logstash - Windows but receive the following error Error: No config files found Command I run is logstash -f agent logstash-simple.conf The config is as f… --- ## [Multiple match option in grok](https://discuss.elastic.co/t/multiple-match-option-in-grok/83590)
**Author:** [@Darya\_Semenova](https://discuss.elastic.co/u/Darya_Semenova)\ **Replies:** 7\ **Last updated:** [April 26, 2017, 12:01pm UTC](https://discuss.elastic.co/t/multiple-match-option-in-grok/83590 "2017-04-26T12:01:26Z")
I have a question about several matches in grok filter. Am I right to assume that with multiple matches, even if the log will be parsed successfully by one of them, it will still be \_grokparsefailure in tags, cause of mi… --- ## [Elastic Search License Installation on Windows](https://discuss.elastic.co/t/elastic-search-license-installation-on-windows/72138)
**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\ **Replies:** 7\ **Last updated:** [February 7, 2017, 10:54am UTC](https://discuss.elastic.co/t/elastic-search-license-installation-on-windows/72138 "2017-02-07T10:54:27Z")
Hi- I've received the license for Elastic search, Would you please let me know, how do I install the license on the Windows-7 machine ? CURL doesn't work in my machine. Thanks ! Regards. Prakash --- ## [Dec 3rd, 2019: \[ES\] Como utilizar Elasticsearch para procesar la actividad de Mailgun](https://discuss.elastic.co/t/dec-3rd-2019-es-como-utilizar-elasticsearch-para-procesar-la-actividad-de-mailgun/208990)
**Author:** [@gonz](https://discuss.elastic.co/u/gonz)\ **Replies:** 0\ **Last updated:** [December 3, 2019, 7:00am UTC](https://discuss.elastic.co/t/dec-3rd-2019-es-como-utilizar-elasticsearch-para-procesar-la-actividad-de-mailgun/208990 "2019-12-03T07:00:02Z")
Introducción Mailgun es un proveedor que ofrece un servicio SaaS para enviar y recibir e-mails, procesar unsubscribes, y llevar un seguimiento de cada transacción que ocurre a través de su plataforma. Mailgun ofrece una … --- ## [Configure log4j2 in Elasticsearch (7x)](https://discuss.elastic.co/t/configure-log4j2-in-elasticsearch-7x/224777)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 2\ **Last updated:** [March 26, 2020, 7:02am UTC](https://discuss.elastic.co/t/configure-log4j2-in-elasticsearch-7x/224777 "2020-03-26T07:02:25Z")
Hi everyone, I have just installed Elasticsearch 7.5.2 on Ubuntu 16.04 and I would like to configure Elasticsearch in order to retain only two log compressed files in /var/log/elasticsearch. I have modified log4j2.prop… --- ## [Replacing redis with elasticsearch (GET query speed, counters and lists)?](https://discuss.elastic.co/t/replacing-redis-with-elasticsearch-get-query-speed-counters-and-lists/5609)
**Author:** [@datadev](https://discuss.elastic.co/u/datadev)\ **Replies:** 4\ **Last updated:** [October 18, 2011, 5:03pm UTC](https://discuss.elastic.co/t/replacing-redis-with-elasticsearch-get-query-speed-counters-and-lists/5609 "2011-10-18T17:03:08Z")
I am currently considering replacing redis with elasticsearch to simplify the stack and have run into the following 3 use cases: 1. I am currently using redis for caching. Redis is benchmarked at around 100,000 GETs… --- ## [Failed to connect to backoff(async(tcp://localhost:5044)): dial tcp 127.0.0.1:5044: connect: connection refused](https://discuss.elastic.co/t/failed-to-connect-to-backoff-async-tcp-localhost-5044-dial-tcp-127-0-0-1-connect-connection-refused/213713)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 5\ **Last updated:** [January 31, 2020, 12:11pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-async-tcp-localhost-5044-dial-tcp-127-0-0-1-connect-connection-refused/213713 "2020-01-31T12:11:04Z")
My setup = filebeat --\> logstash --\> elasticsearch The first part (filebeat --\> logstash ) doens't work. I got this message in the filebeat log: INFO pipeline/output.go:95 Connecting to backoff(async(tcp://localh… --- ## [Java.lang.NoSuchFieldError: LUCENE\_3\_6](https://discuss.elastic.co/t/java-lang-nosuchfielderror-lucene-3-6/32767)
**Author:** [@andreilve](https://discuss.elastic.co/u/andreilve)\ **Replies:** 8\ **Last updated:** [October 23, 2015, 1:16pm UTC](https://discuss.elastic.co/t/java-lang-nosuchfielderror-lucene-3-6/32767 "2015-10-23T13:16:27Z")
Hi guys, I am running 1.7.2 elasticsearch server and i'm using org.elasticsearch:elasticsearch-groovy:1.7.2 client to connect on it using TransportClient. elasticsearch-groovy come with elasticseach 1.7.2 and lucene 4… --- ## [TopHits aggregation | How to get strong type from Java API?](https://discuss.elastic.co/t/tophits-aggregation-how-to-get-strong-type-from-java-api/341343)
**Author:** [@denbo](https://discuss.elastic.co/u/denbo)\ **Replies:** 2\ **Last updated:** [January 3, 2024, 10:52am UTC](https://discuss.elastic.co/t/tophits-aggregation-how-to-get-strong-type-from-java-api/341343 "2024-01-03T10:52:09Z")
I am extracting the hits from a TopHits aggregation using the Java API: Map\ aggregations = searchResponse.aggregations(); TopHitsAggregate topHitsAggregate = searchResponse.aggregations().get("topHits… --- ## [Templates/mappings defined by logstash](https://discuss.elastic.co/t/templates-mappings-defined-by-logstash/64739)
**Author:** [@mostolog](https://discuss.elastic.co/u/mostolog)\ **Replies:** 8\ **Last updated:** [November 7, 2016, 9:21am UTC](https://discuss.elastic.co/t/templates-mappings-defined-by-logstash/64739 "2016-11-07T09:21:35Z")
Hi I'm running several logstash instances, each one parsing logs from one application. On each instance, I grok to get all fields I need, before indexing them on elasticsearch. As each logstash is isolated from others… --- ## [Failed to connect to localhost port 9200: Connection refused \[Fresh Install\]](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused-fresh-install/212788)
**Author:** [@WhatsElastic](https://discuss.elastic.co/u/WhatsElastic)\ **Replies:** 7\ **Last updated:** [December 31, 2019, 7:51pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused-fresh-install/212788 "2019-12-31T19:51:48Z")
First time installing ELK and I am already stuck with E. I am using this EasyELK method for installing on a raspberry pi /etc/elasticsearch/elasticsearch.yml network.host: 127.0.0.1 http.port: 9200 service elasticsear… --- ## [JsonGenerationException: Can not write a field name, expecting a value](https://discuss.elastic.co/t/jsongenerationexception-can-not-write-a-field-name-expecting-a-value/10616)
**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\ **Replies:** 5\ **Last updated:** [February 4, 2013, 5:33pm UTC](https://discuss.elastic.co/t/jsongenerationexception-can-not-write-a-field-name-expecting-a-value/10616 "2013-02-04T17:33:26Z")
ToXContent response=///////in debugger it shows: { "took" : 3, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "failed" : 0 }, "hits" : { "total" : 0, "max\_sc… --- ## [Find nested objects that are null](https://discuss.elastic.co/t/find-nested-objects-that-are-null/99578)
**Author:** [@sina309](https://discuss.elastic.co/u/sina309)\ **Replies:** 1\ **Last updated:** [September 6, 2017, 4:31pm UTC](https://discuss.elastic.co/t/find-nested-objects-that-are-null/99578 "2017-09-06T16:31:19Z")
I have a nested field called ‘category’: PUT my\_index { "mappings": { "my\_type": { "properties": { "name": { "type": "keyword", "null\_value": "NULL" }, "categories… --- ## [How to export an entire Elastic Search index to a csv file](https://discuss.elastic.co/t/how-to-export-an-entire-elastic-search-index-to-a-csv-file/296655)
**Author:** [@mwalk](https://discuss.elastic.co/u/mwalk)\ **Replies:** 3\ **Last updated:** [February 8, 2022, 10:51pm UTC](https://discuss.elastic.co/t/how-to-export-an-entire-elastic-search-index-to-a-csv-file/296655 "2022-02-08T22:51:22Z")
Hello, We have an Elasticsearch index that has approximately 1 million records in it. We'd like to export only two fields from it, and ID (int) and a Value (string) for auditing purposes. We've tried using es2csv, but… --- ## [X509: certificate signed by unknown authority](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/327572)
**Author:** [@AbbysS](https://discuss.elastic.co/u/AbbysS)\ **Replies:** 8\ **Last updated:** [March 14, 2023, 1:48pm UTC](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/327572 "2023-03-14T13:48:51Z")
Hi everyone, I'm new on the forum. I'm little confuse, i try to learn many tutorials on fleet server / agent but i don't know how i can create my own certificate to deploy in production. I try to learn the ELK tutoria… --- ## [Help With Multiple If {} else if {} COnfiguration](https://discuss.elastic.co/t/help-with-multiple-if-else-if-configuration/40417)
**Author:** [@rcuza](https://discuss.elastic.co/u/rcuza)\ **Replies:** 1\ **Last updated:** [January 28, 2016, 8:23pm UTC](https://discuss.elastic.co/t/help-with-multiple-if-else-if-configuration/40417 "2016-01-28T20:23:57Z")
I am seeking help with a Logstash configuration issue. Some of my syslog messages coming into my indexer are in JSON format and some are not. I am solving this using multiple if {} else if {} else {} statements after gro… --- ## [Problem with transfer Filebeat 6.1.3 \> Logstash 6.1.3 \> Elasticsearch 6.1.3](https://discuss.elastic.co/t/problem-with-transfer-filebeat-6-1-3-logstash-6-1-3-elasticsearch-6-1-3/136264)
**Author:** [@artful](https://discuss.elastic.co/u/artful)\ **Replies:** 8\ **Last updated:** [July 20, 2018, 3:03am UTC](https://discuss.elastic.co/t/problem-with-transfer-filebeat-6-1-3-logstash-6-1-3-elasticsearch-6-1-3/136264 "2018-07-20T03:03:55Z")
Hello! Transfer log Filebeat \> Elasticsearch without Logstash work fine. When I add Logstash, I see in log: \[2018-06-18T08:42:00,801\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:st… --- ## [What is the best scheme for similarity search based on binary codes with Elasticsearch ? (Context is image search with deep nets)](https://discuss.elastic.co/t/what-is-the-best-scheme-for-similarity-search-based-on-binary-codes-with-elasticsearch-context-is-image-search-with-deep-nets/42915)
**Author:** [@beniz](https://discuss.elastic.co/u/beniz)\ **Replies:** 4\ **Last updated:** [March 5, 2016, 11:25am UTC](https://discuss.elastic.co/t/what-is-the-best-scheme-for-similarity-search-based-on-binary-codes-with-elasticsearch-context-is-image-search-with-deep-nets/42915 "2016-03-05T11:25:35Z")
Hi Elastic! We're using deep convolutional neural networks to fast process images and make the building of image similarity search engines a commodity for everyone. Our pipeline uses the neural nets to turn images into… --- ## [Multiple visualization in same chart in Kibana](https://discuss.elastic.co/t/multiple-visualization-in-same-chart-in-kibana/106271)
**Author:** [@Joeltstephen](https://discuss.elastic.co/u/Joeltstephen)\ **Replies:** 4\ **Last updated:** [November 6, 2017, 6:05am UTC](https://discuss.elastic.co/t/multiple-visualization-in-same-chart-in-kibana/106271 "2017-11-06T06:05:00Z")
Is it possible to create multiple visualization in a single chart ? i want to implement a graph like below. any ideas or explanations are welcome. \[image\] x-axis contains the service name and the y-axis contains the co… --- ## [Kibana Fails to start : FATAL CLI ERROR Error: ENOENT: no such file or directory, open '/usr/share/kibana/config/kibana.yml'](https://discuss.elastic.co/t/kibana-fails-to-start-fatal-cli-error-error-enoent-no-such-file-or-directory-open-usr-share-kibana-config-kibana-yml/244123)
**Author:** [@Mr\_Chicken](https://discuss.elastic.co/u/Mr_Chicken)\ **Replies:** 1\ **Last updated:** [August 7, 2020, 8:45am UTC](https://discuss.elastic.co/t/kibana-fails-to-start-fatal-cli-error-error-enoent-no-such-file-or-directory-open-usr-share-kibana-config-kibana-yml/244123 "2020-08-07T08:45:27Z")
hi everyone, i've started installing ELK on my VM machine ( ubuntu 18.04 ). At first everything was okay, i started by installing elasticsearch and configuring some files etc.. but then moving on to Kibana i encountere… --- ## [Accessing Port 9200 Remotely](https://discuss.elastic.co/t/accessing-port-9200-remotely/21840)
**Author:** [@Dave\_Mittner](https://discuss.elastic.co/u/Dave_Mittner)\ **Replies:** 4\ **Last updated:** [January 27, 2015, 12:33am UTC](https://discuss.elastic.co/t/accessing-port-9200-remotely/21840 "2015-01-27T00:33:27Z")
I'm at a bit of a loss here... I have a pretty standard setup of elasticsearch and I'm able to curl/telnet to port 9200 locally, but the connection is refused if accessed from another server. I'm likewise unable t… --- ## [Two filebeat instances](https://discuss.elastic.co/t/two-filebeat-instances/123132)
**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\ **Replies:** 8\ **Last updated:** [March 16, 2018, 2:03pm UTC](https://discuss.elastic.co/t/two-filebeat-instances/123132 "2018-03-16T14:03:26Z")
can i get two filebeat instances working at the same time, one sending to elasticsearch and the other to logstash? i have lots of messages being parsed by logstash (postfix, cyrus) and it would be too much trouble migra… --- ## [Error initializing processors](https://discuss.elastic.co/t/error-initializing-processors/99247)
**Author:** [@BeerRider](https://discuss.elastic.co/u/BeerRider)\ **Replies:** 8\ **Last updated:** [September 8, 2017, 9:18am UTC](https://discuss.elastic.co/t/error-initializing-processors/99247 "2017-09-08T09:18:30Z")
Hello. I'm trying to make filebeat send logs excluding some messages. Config: filebeat.prospectors: - input\_type: log document\_type: exchange paths: - d:\\Program Files\\Exchange Server 2013\\Trans… --- ## [Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/error-request-timeout-after-30000ms/103192)
**Author:** [@mercymx](https://discuss.elastic.co/u/mercymx)\ **Replies:** 6\ **Last updated:** [November 3, 2017, 9:49am UTC](https://discuss.elastic.co/t/error-request-timeout-after-30000ms/103192 "2017-11-03T09:49:06Z")
my elasticsearch and kibana runing in 2 servers. I can use python script to get data from ES, but kibana runs error like this: \[图片\] the status page like this: \[图片\] I checked the kibana logs. It just has 2 error mess… --- ## [Searching multiple words in multiple fields using C# NEST](https://discuss.elastic.co/t/searching-multiple-words-in-multiple-fields-using-c-nest/163468)
**Author:** [@waleedkaramat](https://discuss.elastic.co/u/waleedkaramat)\ **Replies:** 3\ **Last updated:** [January 14, 2019, 8:32pm UTC](https://discuss.elastic.co/t/searching-multiple-words-in-multiple-fields-using-c-nest/163468 "2019-01-14T20:32:16Z")
Hello All, I want to write an elasticsearch query in C# which can search multiple words in multiple fields. For example. Query: John California Honda Fields: Name, State, Car This query should search the term John i… --- ## [Configuring the standard tokenizer](https://discuss.elastic.co/t/configuring-the-standard-tokenizer/8691)
**Author:** [@Robin\_Hughes](https://discuss.elastic.co/u/Robin_Hughes)\ **Replies:** 7\ **Last updated:** [August 11, 2016, 11:29am UTC](https://discuss.elastic.co/t/configuring-the-standard-tokenizer/8691 "2016-08-11T11:29:58Z")
Hi We use the "standard" tokenizer in custom analyzer definitions. By default the standard tokenizer splits words on hyphens and ampersands, so for example "i-mac" is tokenized to "i" and "mac" Is there any way… --- ## [Run multiple Elasticsearch instance on the same server](https://discuss.elastic.co/t/run-multiple-elasticsearch-instance-on-the-same-server/140558)
**Author:** [@wrozan](https://discuss.elastic.co/u/wrozan)\ **Replies:** 1\ **Last updated:** [July 18, 2018, 1:08pm UTC](https://discuss.elastic.co/t/run-multiple-elasticsearch-instance-on-the-same-server/140558 "2018-07-18T13:08:14Z")
Hi, i have an ES server with an instance already installed and running. That one has been deployed from rpm file (v5.6.4) /etc/elasticsearch/ current yml file : #cluster cluster.name: nakisa #node node.name: leasing… --- ## [How many indices can be created](https://discuss.elastic.co/t/how-many-indices-can-be-created/140226)
**Author:** [@Pierre\_Abreu](https://discuss.elastic.co/u/Pierre_Abreu)\ **Replies:** 7\ **Last updated:** [July 17, 2018, 7:58pm UTC](https://discuss.elastic.co/t/how-many-indices-can-be-created/140226 "2018-07-17T19:58:38Z")
HI, my ES data can grow up to 270,000 indexes. I'm creating one index per user. Is there a ES limit to create indexes? Each index has one shard and one replica only. My cluster have 3 master nodes and 2 data nodes --- ## [Max request size?](https://discuss.elastic.co/t/max-request-size/6495)
**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\ **Replies:** 5\ **Last updated:** [January 5, 2015, 11:42pm UTC](https://discuss.elastic.co/t/max-request-size/6495 "2015-01-05T23:42:37Z")
Hey guys. Is there a maximum request size that ES can handle? --- ## [Connectivity issues with a new/upgraded 2.X cluster? Read here first :)](https://discuss.elastic.co/t/connectivity-issues-with-a-new-upgraded-2-x-cluster-read-here-first/35699)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 5\ **Last updated:** [February 21, 2016, 11:22am UTC](https://discuss.elastic.co/t/connectivity-issues-with-a-new-upgraded-2-x-cluster-read-here-first/35699 "2016-02-21T11:22:51Z")
If you are having issues with nodes not forming a cluster, or if you are unable to connect to a remote cluster, please read this first! In Elasticsearch 2.0 we made some major changes to the way default networking is c… --- ## [Syslog output plugin configuration](https://discuss.elastic.co/t/syslog-output-plugin-configuration/26368)
**Author:** [@kkomv](https://discuss.elastic.co/u/kkomv)\ **Replies:** 7\ **Last updated:** [August 3, 2015, 8:33am UTC](https://discuss.elastic.co/t/syslog-output-plugin-configuration/26368 "2015-08-03T08:33:43Z")
Please help in configuring sylog output plugin I keep getting the below error while starting logstash - TypeError: can't convert nil into String + at org/jruby/RubyString.java:1172 receive at … --- ## [Search syntax to provide unique values for a single field in the result set](https://discuss.elastic.co/t/search-syntax-to-provide-unique-values-for-a-single-field-in-the-result-set/56892)
**Author:** [@Jeremy\_Colton](https://discuss.elastic.co/u/Jeremy_Colton)\ **Replies:** 3\ **Last updated:** [August 2, 2016, 8:32am UTC](https://discuss.elastic.co/t/search-syntax-to-provide-unique-values-for-a-single-field-in-the-result-set/56892 "2016-08-02T08:32:37Z")
I'm trying to find all countries whose users visited a specific website. My ES document has 'publisherDomain' and 'geoip.country\_name'. So far I have: GET /logstash-\*/\_search?size=100 { "query": { "match… --- ## [Elastic Lucene vs KQL vs DSL vs EQL](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588)
**Author:** [@Esha](https://discuss.elastic.co/u/Esha)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 6:23am UTC](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588 "2022-04-18T06:23:11Z")
Hi Team, Can you please share when should we use the lucene query, KQL, DSL and EQL query types. For rules creation is it best to use the lucene query or KQL query? Thank you --- ## [Convert millisecond epoch time to ISO human readable time](https://discuss.elastic.co/t/convert-millisecond-epoch-time-to-iso-human-readable-time/114178)
**Author:** [@jeremymclain](https://discuss.elastic.co/u/jeremymclain)\ **Replies:** 4\ **Last updated:** [January 4, 2018, 11:33pm UTC](https://discuss.elastic.co/t/convert-millisecond-epoch-time-to-iso-human-readable-time/114178 "2018-01-04T23:33:46Z")
I have a field that is represented in milliseconds since epoch. I want to use this field as the x axis of a histogram bar chart but I want the dates to be human readable. See the screenshot of what it looks like now. Wha… --- ## [How to filter on ip type fields in kibana](https://discuss.elastic.co/t/how-to-filter-on-ip-type-fields-in-kibana/175615)
**Author:** [@RenaudF](https://discuss.elastic.co/u/RenaudF)\ **Replies:** 2\ **Last updated:** [April 8, 2019, 1:18pm UTC](https://discuss.elastic.co/t/how-to-filter-on-ip-type-fields-in-kibana/175615 "2019-04-08T13:18:13Z")
Hi, I would like to get all documents with an ip that begin with 192.168. but I don't find how to do it. If I put in kibana search clientip:192.168.1.1 it works. But if put clientip:192.168.\* it failed. Someone can hel… --- ## [Dec 10th, 2020: \[ES\] Las 12 mejores características de Mapas desde GA](https://discuss.elastic.co/t/dec-10th-2020-es-las-12-mejores-caracteristicas-de-mapas-desde-ga/256368)
**Author:** [@jsanz](https://discuss.elastic.co/u/jsanz)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-10th-2020-es-las-12-mejores-caracteristicas-de-mapas-desde-ga/256368 "2020-12-10T08:00:03Z")
Este artículo es una traducción de Top 12 Maps features since going GA de Nathan Reese. Elastic Maps fue lanzado de manera general (lo que en la casa llamamos generally available o GA) con Kibana 7.3. Alcanzar el nive… --- ## [ApiError(406, 'Content-Type header \[application/vnd.elasticsearch+json; compatible-with=8\] is not supported',](https://discuss.elastic.co/t/apierror-406-content-type-header-application-vnd-elasticsearch-json-compatible-with-8-is-not-supported/334579)
**Author:** [@Anand\_Konagala](https://discuss.elastic.co/u/Anand_Konagala)\ **Replies:** 8\ **Last updated:** [June 10, 2023, 1:11pm UTC](https://discuss.elastic.co/t/apierror-406-content-type-header-application-vnd-elasticsearch-json-compatible-with-8-is-not-supported/334579 "2023-06-10T13:11:23Z")
Hii.. ApiError(406, 'Content-Type header \[application/vnd.elasticsearch+json; compatible-with=8\] is not supported', 'Content-Type header \[application/vnd.elasticsearch+json; compatible-with=8\] is not supported') When I… --- ## [Where can I find the default template?](https://discuss.elastic.co/t/where-can-i-find-the-default-template/78618)
**Author:** [@camkidman](https://discuss.elastic.co/u/camkidman)\ **Replies:** 5\ **Last updated:** [March 15, 2017, 3:51pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-default-template/78618 "2017-03-15T15:51:30Z")
Hi there, I've got the following in my elasticsearch configuration file: output { elasticsearch { hosts =\> \["https://...."\] index =\> "production-%{+YYYY.MM.dd}" } stdout { codec =\> rubydebug } } I'm runni… --- ## [Filebeat stopped automatically](https://discuss.elastic.co/t/filebeat-stopped-automatically/267950)
**Author:** [@Tristan\_D](https://discuss.elastic.co/u/Tristan_D)\ **Replies:** 3\ **Last updated:** [March 22, 2021, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-stopped-automatically/267950 "2021-03-22T13:14:30Z")
Hi, everyone. I have two servers using filebeat-7.10.1. Today I found filebeat stoped automaticaly at the same time. They have worked normaly several days. We didn't kill it, the cpu or mem of the servers didn't have any… --- ## [How to search for terms containing hyphen (-) on \_all field?](https://discuss.elastic.co/t/how-to-search-for-terms-containing-hyphen-on--all-field/81335)
**Author:** [@ptrussart](https://discuss.elastic.co/u/ptrussart)\ **Replies:** 2\ **Last updated:** [April 6, 2017, 7:34am UTC](https://discuss.elastic.co/t/how-to-search-for-terms-containing-hyphen-on--all-field/81335 "2017-04-06T07:34:36Z")
Hello, I have an issue searching a term containing hyphens on the \_all field. I have also tried with a custom \_all field but I have the same results. I have configured my index like this, using a filter with a "type"… --- ## [Regarding Filebeat Offset Value](https://discuss.elastic.co/t/regarding-filebeat-offset-value/44139)
**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\ **Replies:** 8\ **Last updated:** [April 24, 2017, 7:21pm UTC](https://discuss.elastic.co/t/regarding-filebeat-offset-value/44139 "2017-04-24T19:21:39Z")
Regarding filebeat offset , The value of offset for the lines in the same log file is not shown in sequential order based on order of line numbers in the file. I've some queries on the filebeat offset . Is the offs… --- ## [Problem: \[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch-wazuh-alerts-3.x-2020.05.30](https://discuss.elastic.co/t/problem-logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch-wazuh-alerts-3-x-2020-05-30/235038)
**Author:** [@Harsha7071](https://discuss.elastic.co/u/Harsha7071)\ **Replies:** 6\ **Last updated:** [June 1, 2020, 12:36pm UTC](https://discuss.elastic.co/t/problem-logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch-wazuh-alerts-3-x-2020-05-30/235038 "2020-06-01T12:36:53Z")
Hi Team, We are running into a problem where we are not seeing any alerts in the Kibana. We are using this for the first time. We have two servers- Server is installed with Wazuh Manager-API- Filebeat Elastic search … --- ## [How to reduce Index size on disk?](https://discuss.elastic.co/t/how-to-reduce-index-size-on-disk/49415)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 6\ **Last updated:** [March 29, 2017, 6:43pm UTC](https://discuss.elastic.co/t/how-to-reduce-index-size-on-disk/49415 "2017-03-29T18:43:52Z")
Hi Experts, I am using ES1.7.1 and I have an index which consumes 20GB of disk space , even after removing unnecessary fields . I am also using index.store.compress.stored : true in my template . Can anyone suggest … --- ## [Logstash error: Cannot create pipeline](https://discuss.elastic.co/t/logstash-error-cannot-create-pipeline/91439)
**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\ **Replies:** 1\ **Last updated:** [June 30, 2017, 1:59pm UTC](https://discuss.elastic.co/t/logstash-error-cannot-create-pipeline/91439 "2017-06-30T13:59:16Z")
I am running logstash using docker. When I ran my docker-compose up I got this error: 13:31:16.723 \[LogStash::Runner\] ERROR logstash.agent - Cannot create pipeline {:reason=\>"Expected one of #, input, filter, output at… --- ## [Read Only User in Kibana](https://discuss.elastic.co/t/read-only-user-in-kibana/234088)
**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\ **Replies:** 0\ **Last updated:** [May 25, 2020, 7:05am UTC](https://discuss.elastic.co/t/read-only-user-in-kibana/234088 "2020-05-25T07:05:18Z")
Hello, I have followed the document : https://www.elastic.co/blog/getting-started-with-elasticsearch-security I want to create a user who has read-only privileges. The user should be able to view the data in the disco… [Previous page](https://discuss.elastic.co/top.md?page=283&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=285&per_page=50&period=all)