# Top **URL:** https://discuss.elastic.co/top.md?page=285&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 286 --- ## [Elasticsearch data node crashing with OutOfMemoryError](https://discuss.elastic.co/t/elasticsearch-data-node-crashing-with-outofmemoryerror/133873)
**Author:** [@farin99](https://discuss.elastic.co/u/farin99)\ **Replies:** 6\ **Last updated:** [June 8, 2018, 4:32pm UTC](https://discuss.elastic.co/t/elasticsearch-data-node-crashing-with-outofmemoryerror/133873 "2018-06-08T16:32:21Z")
Seems related to queries as it happened at the same time on multiple data nodes in the cluster. From the memory dump, it seems that ~70% of the heap is taken by objects that are waiting for GC (not reachable from the ro… --- ## [How does sorting on \_id work?](https://discuss.elastic.co/t/how-does-sorting-on--id-work/21854)
**Author:** [@Abid\_Hussain](https://discuss.elastic.co/u/Abid_Hussain)\ **Replies:** 2\ **Last updated:** [January 27, 2015, 7:14pm UTC](https://discuss.elastic.co/t/how-does-sorting-on--id-work/21854 "2015-01-27T19:14:24Z")
Hi all, I want to determine the doc with max and min \_id value. So, when I run this query: GET /my\_index/order/\_search { "fields": \[ "\_id" \], "sort": \[ { "\_uid": { "order": "desc" } } \], … --- ## [Dec 18th, 2020: \[EN\] Set up searchable snapshots in ECK](https://discuss.elastic.co/t/dec-18th-2020-en-set-up-searchable-snapshots-in-eck/257788)
**Author:** [@idanmo](https://discuss.elastic.co/u/idanmo)\ **Replies:** 0\ **Last updated:** [December 18, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-18th-2020-en-set-up-searchable-snapshots-in-eck/257788 "2020-12-18T08:00:15Z")
Searchable snapshots, recently released as BETA in Elasticsearch 7.10, let you reduce your operating costs by using snapshots for resiliency rather than maintaining replica shards within a cluster. In this blog, we’ll d… --- ## [Nested value on function score](https://discuss.elastic.co/t/nested-value-on-function-score/29935)
**Author:** [@cldsnchz](https://discuss.elastic.co/u/cldsnchz)\ **Replies:** 7\ **Last updated:** [March 9, 2017, 10:36am UTC](https://discuss.elastic.co/t/nested-value-on-function-score/29935 "2017-03-09T10:36:51Z")
Hi, I have a document with a nested array, and I'm trying to get a nested value in a funtion score but I can't (I always get 0). For example having the following mapping: { "mapping":{ "movie":{ "properti… --- ## [Ruby code for array iteration](https://discuss.elastic.co/t/ruby-code-for-array-iteration/137450)
**Author:** [@Eswar\_Kumar\_Musiboin](https://discuss.elastic.co/u/Eswar_Kumar_Musiboin)\ **Replies:** 6\ **Last updated:** [June 26, 2018, 2:57pm UTC](https://discuss.elastic.co/t/ruby-code-for-array-iteration/137450 "2018-06-26T14:57:13Z")
ruby { code =\> " event.get('db\_user\_details').each\_index do |i| if \[db\_user\_details\]\[i\]\[country\] == "india" event.set('flagger', 'done') end … --- ## [Help getting mlockall to work on ubuntu 14.04](https://discuss.elastic.co/t/help-getting-mlockall-to-work-on-ubuntu-14-04/45623)
**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\ **Replies:** 3\ **Last updated:** [March 28, 2016, 10:04pm UTC](https://discuss.elastic.co/t/help-getting-mlockall-to-work-on-ubuntu-14-04/45623 "2016-03-28T22:04:17Z")
Hi, Trying to get mlockall to work... I see this in the log: \[2016-03-28 20:06:26,568\]\[WARN \]\[bootstrap \] Unable to lock JVM Memory: error=12,reason=Cannot allocate memory \[2016-03-28 20:06:26,569\]\[W… --- ## [How to solve field in mapping but already used in other types](https://discuss.elastic.co/t/how-to-solve-field-in-mapping-but-already-used-in-other-types/43067)
**Author:** [@szcountryboy](https://discuss.elastic.co/u/szcountryboy)\ **Replies:** 7\ **Last updated:** [October 24, 2018, 11:10pm UTC](https://discuss.elastic.co/t/how-to-solve-field-in-mapping-but-already-used-in-other-types/43067 "2018-10-24T23:10:04Z")
I also run topbeat, packbeat, transfer to logstash, accept the data on the ES side, reported the following error \[2016-03-01 02:33:49,810\]\[DEBUG\]\[action.bulk \] \[node-1\] \[logstash-2016.02.29\]\[4\] failed to e… --- ## [Download logs from kibana](https://discuss.elastic.co/t/download-logs-from-kibana/161496)
**Author:** [@Vineeth\_Ananthula](https://discuss.elastic.co/u/Vineeth_Ananthula)\ **Replies:** 1\ **Last updated:** [December 19, 2018, 4:42pm UTC](https://discuss.elastic.co/t/download-logs-from-kibana/161496 "2018-12-19T16:42:25Z")
How to download log files located in elasticsearch of a particular index(in csv format) from kibana? --- ## [How to run multiple logstash instances for s3 input](https://discuss.elastic.co/t/how-to-run-multiple-logstash-instances-for-s3-input/47624)
**Author:** [@HugoBang](https://discuss.elastic.co/u/HugoBang)\ **Replies:** 6\ **Last updated:** [March 15, 2017, 5:59am UTC](https://discuss.elastic.co/t/how-to-run-multiple-logstash-instances-for-s3-input/47624 "2017-03-15T05:59:57Z")
Hello. I am trying to install multiple logstash instances for s3 input but it seems to be impossible because each logstash saves a sincedb file locally and even if the sincedb file is shared between the logstash instan… --- ## [How to export Kibana search query results to CSV file with more than one million records](https://discuss.elastic.co/t/how-to-export-kibana-search-query-results-to-csv-file-with-more-than-one-million-records/301412)
**Author:** [@fymaterials](https://discuss.elastic.co/u/fymaterials)\ **Replies:** 3\ **Last updated:** [April 14, 2022, 7:39am UTC](https://discuss.elastic.co/t/how-to-export-kibana-search-query-results-to-csv-file-with-more-than-one-million-records/301412 "2022-04-14T07:39:27Z")
I used Kibana to query the index, and use export under resource tab to export query results. How can I export query results if there are million records? --- ## [Connection refused on port 9200](https://discuss.elastic.co/t/connection-refused-on-port-9200/65399)
**Author:** [@cormack12](https://discuss.elastic.co/u/cormack12)\ **Replies:** 3\ **Last updated:** [November 9, 2016, 3:54pm UTC](https://discuss.elastic.co/t/connection-refused-on-port-9200/65399 "2016-11-09T15:54:42Z")
Hi, I'm following the guide over at digitalocean getting the ELK stack up on Ubuntu server 16. I've installed elasticsearch 2.4.1 and I just can't seem to get any sort of response out of it, never mind setting up Nginx … --- ## [Curl: (6) Couldn't resolve host ''](https://discuss.elastic.co/t/curl-6-couldnt-resolve-host/100745)
**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\ **Replies:** 8\ **Last updated:** [September 19, 2017, 12:58am UTC](https://discuss.elastic.co/t/curl-6-couldnt-resolve-host/100745 "2017-09-19T00:58:15Z")
Elasticsearch version:5.5.2 OS version: Suse Linux When I create a index and its mapping with the command line as follow : curl -XPUT http://10.62.179.32:9200/shakespeare -d ' { "mappings" : { "default" : { "proper… --- ## [Migrate dashboards from one instance of Kibana to another](https://discuss.elastic.co/t/migrate-dashboards-from-one-instance-of-kibana-to-another/34854)
**Author:** [@Vanguard\_space](https://discuss.elastic.co/u/Vanguard_space)\ **Replies:** 4\ **Last updated:** [November 20, 2015, 8:44pm UTC](https://discuss.elastic.co/t/migrate-dashboards-from-one-instance-of-kibana-to-another/34854 "2015-11-20T20:44:53Z")
Hello experts, we have a prod instance of Kibana and have a dashboard which we want to migrate into our local test environment. Is there a way to copy the dashboard or visualizations from one instance of Kibana to anot… --- ## ["No query registered for \[filter\]"](https://discuss.elastic.co/t/no-query-registered-for-filter/49602)
**Author:** [@Mike\_Wurtz](https://discuss.elastic.co/u/Mike_Wurtz)\ **Replies:** 3\ **Last updated:** [October 26, 2018, 3:50pm UTC](https://discuss.elastic.co/t/no-query-registered-for-filter/49602 "2018-10-26T15:50:43Z")
I can't figure out why I'm getting this response.. I'm pretty much taking this example from the documentation.. Why am I getting, "No query registered for \[filter\]" ? Here's my request: { "trigger" : { "schedule" :… --- ## [How to clear all data from Kibana (Discover) before uploading my local dashboard into live server(AWS)](https://discuss.elastic.co/t/how-to-clear-all-data-from-kibana-discover-before-uploading-my-local-dashboard-into-live-server-aws/100832)
**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\ **Replies:** 8\ **Last updated:** [September 18, 2017, 9:06am UTC](https://discuss.elastic.co/t/how-to-clear-all-data-from-kibana-discover-before-uploading-my-local-dashboard-into-live-server-aws/100832 "2017-09-18T09:06:31Z")
Created a Dashboard using ELK Stack locally and it is successfully running in localhost . Now i have to integrate with some other application in live server. So i need to upload the local kibana dashboard in live server(… --- ## [Node Auto Configuration](https://discuss.elastic.co/t/node-auto-configuration/297543)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 8\ **Last updated:** [February 21, 2022, 7:42pm UTC](https://discuss.elastic.co/t/node-auto-configuration/297543 "2022-02-21T19:42:28Z")
Hi there, I´m trying to deploy a new cluster using Elasticsearch 8 but it seens that is not working the way I expected. 4 Servers: 3 Elasticsearch 1 kibana All in the same network. I´m following the steps using the … --- ## [Got response code '401' contacting Elasticsearch at URL](https://discuss.elastic.co/t/got-response-code-401-contacting-elasticsearch-at-url/274608)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 5\ **Last updated:** [June 4, 2021, 6:08am UTC](https://discuss.elastic.co/t/got-response-code-401-contacting-elasticsearch-at-url/274608 "2021-06-04T06:08:19Z")
Dear team, I have enabled TLS on cluster and wanted to switch communication between logstash and Elasticsearch to secure protocol. After I set up all I received following error while starting logstash (btw. password is … --- ## [Using multiple 'and' and 'or' statements in a conditional](https://discuss.elastic.co/t/using-multiple-and-and-or-statements-in-a-conditional/46741)
**Author:** [@djhart](https://discuss.elastic.co/u/djhart)\ **Replies:** 4\ **Last updated:** [April 8, 2016, 7:47pm UTC](https://discuss.elastic.co/t/using-multiple-and-and-or-statements-in-a-conditional/46741 "2016-04-08T19:47:52Z")
What is the proper way to use multiple 'and' and 'or' statements in a conditional statement? I've looked around but do not see any examples an I've tried using things like parenthesis with no luck either. Here is an e… --- ## [Is Docker Compose supported for a single node Elasticsearch setup?](https://discuss.elastic.co/t/is-docker-compose-supported-for-a-single-node-elasticsearch-setup/313071)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 5\ **Last updated:** [August 28, 2022, 4:54pm UTC](https://discuss.elastic.co/t/is-docker-compose-supported-for-a-single-node-elasticsearch-setup/313071 "2022-08-28T16:54:52Z")
I'm new to Elasticstack and trying to set up a minimal development installation. I followed the instructions in Install Kibana With Docker and got what I needed. However, it seems silly to run multiple docker run comma… --- ## [2 TB of logs per day in ES?](https://discuss.elastic.co/t/2-tb-of-logs-per-day-in-es/13894)
**Author:** [@Alexios\_Giotis](https://discuss.elastic.co/u/Alexios_Giotis)\ **Replies:** 8\ **Last updated:** [September 29, 2014, 12:12pm UTC](https://discuss.elastic.co/t/2-tb-of-logs-per-day-in-es/13894 "2014-09-29T12:12:13Z")
Hi, After reading http://www.elasticsearch.org/blog/using-elasticsearch-and-logstash-to-serve-billions-of-searchable-events-for-customers/ I am wondering if ES can handle the bigger volume of a potential customer.… --- ## [How to import excel sheet in elastic search](https://discuss.elastic.co/t/how-to-import-excel-sheet-in-elastic-search/158942)
**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 6:10pm UTC](https://discuss.elastic.co/t/how-to-import-excel-sheet-in-elastic-search/158942 "2018-11-30T18:10:37Z")
Hi, I struggled to import my excel in elastic search, provide solution to import into elasticsearch. or else we can convert the excel file into csv then import this file in elasticsearch. --- ## [Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/logging/log4j/util/ReflectionUtil](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-noclassdeffounderror-org-apache-logging-log4j-util-reflectionutil/102651)
**Author:** [@kumar1993](https://discuss.elastic.co/u/kumar1993)\ **Replies:** 8\ **Last updated:** [October 13, 2017, 7:06pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-noclassdeffounderror-org-apache-logging-log4j-util-reflectionutil/102651 "2017-10-13T19:06:46Z")
Hi I have followed the tutorial on the elastic search website and i am instantiating a High level rest client in java, but when i try to do this i run into the following exception: Exception in thread "main" java.lang.No… --- ## [Query with multiple values](https://discuss.elastic.co/t/query-with-multiple-values/113299)
**Author:** [@Charlene\_Ellul](https://discuss.elastic.co/u/Charlene_Ellul)\ **Replies:** 1\ **Last updated:** [December 27, 2017, 12:59pm UTC](https://discuss.elastic.co/t/query-with-multiple-values/113299 "2017-12-27T12:59:27Z")
Hi, I am very new to elastic search...I am trying to search 1 field with multiple values that are stored in a list...I am using a loop but it is not returning any values...any help pls? the list contains 49846 elements … --- ## [Resource already exists exception throws after delete the index and create it again immediately](https://discuss.elastic.co/t/resource-already-exists-exception-throws-after-delete-the-index-and-create-it-again-immediately/169344)
**Author:** [@kunliu](https://discuss.elastic.co/u/kunliu)\ **Replies:** 1\ **Last updated:** [February 21, 2019, 10:13am UTC](https://discuss.elastic.co/t/resource-already-exists-exception-throws-after-delete-the-index-and-create-it-again-immediately/169344 "2019-02-21T10:13:07Z")
Hi Team, I am experiencing an intermittent issue. If I delete an index and create it again immediately , ES will throws resource\_already\_exists\_exception: \[48258390003131ec/mrHqvHQFSXWktcONr3iigA\] ElasticsearchStatusE… --- ## [Parse / ship JSON file with filebeat](https://discuss.elastic.co/t/parse-ship-json-file-with-filebeat/34540)
**Author:** [@rummages](https://discuss.elastic.co/u/rummages)\ **Replies:** 5\ **Last updated:** [February 10, 2016, 4:31pm UTC](https://discuss.elastic.co/t/parse-ship-json-file-with-filebeat/34540 "2016-02-10T16:31:12Z")
Is it possible to directly parse a json file from filebeats into elasticsearch? I have a small json file and I would like to have filebeats read in and ship directly to elasticsearch in json. json file -\> filebeats =\> … --- ## [Timelion : Where can I configure the date field](https://discuss.elastic.co/t/timelion-where-can-i-configure-the-date-field/75899)
**Author:** [@Sergio\_PR](https://discuss.elastic.co/u/Sergio_PR)\ **Replies:** 3\ **Last updated:** [February 21, 2017, 4:16pm UTC](https://discuss.elastic.co/t/timelion-where-can-i-configure-the-date-field/75899 "2017-02-21T16:16:19Z")
Hi, I need your help about Timelion. The line drawn by the Timelion values ​​is always 0. Data are stored in "velib\_map" index. This index has a datetime field named "last\_update". How can I specifie that timefield f… --- ## [Permission denied Can't run elasticsearch](https://discuss.elastic.co/t/permission-denied-cant-run-elasticsearch/132352)
**Author:** [@applicate](https://discuss.elastic.co/u/applicate)\ **Replies:** 7\ **Last updated:** [May 29, 2018, 10:00am UTC](https://discuss.elastic.co/t/permission-denied-cant-run-elasticsearch/132352 "2018-05-29T10:00:54Z")
Lenovo-G50-80:/usr/share/elasticsearch$ bin/elasticsearch bin/elasticsearch-env: line 70: /etc/default/elasticsearch: Permission denied --- ## [Elastic Discord server](https://discuss.elastic.co/t/elastic-discord-server/179981)
**Author:** [@me22](https://discuss.elastic.co/u/me22)\ **Replies:** 3\ **Last updated:** [March 2, 2022, 9:13pm UTC](https://discuss.elastic.co/t/elastic-discord-server/179981 "2022-03-02T21:13:23Z")
Hi, I created a Discord server for Elastic - https://discord.gg/UtTCJnA I hope it will be useful, especially if you want to use Slack-like tool but not necessarily Slack. --- ## [Repository\_missing\_exception with existing repo](https://discuss.elastic.co/t/repository-missing-exception-with-existing-repo/109369)
**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\ **Replies:** 0\ **Last updated:** [November 28, 2017, 11:09am UTC](https://discuss.elastic.co/t/repository-missing-exception-with-existing-repo/109369 "2017-11-28T11:09:08Z")
Hi, I'm using a simple script to make backups of my cluster. All it does: Read snapshot number & increment it Mount shared folder to /mnt/elkbackup/ curl -XPUT "http://localhost:9200/\_snapshot/my\_backup/snapshot\_$NUM?… --- ## [Red status: blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\]](https://discuss.elastic.co/t/red-status-blocked-by-service-unavailable-1-state-not-recovered-initialized/201520)
**Author:** [@Behzad\_Rezaie](https://discuss.elastic.co/u/Behzad_Rezaie)\ **Replies:** 8\ **Last updated:** [October 1, 2019, 3:33pm UTC](https://discuss.elastic.co/t/red-status-blocked-by-service-unavailable-1-state-not-recovered-initialized/201520 "2019-10-01T15:33:41Z")
Hi pals, A few days ago we got the following error on our elastic node: \[FORBIDDEN/12/index read-only / allow delete (api)\] We found out that more disk space is needed, since only 5% of the space had remained for the … --- ## [Request Timeout after 30000 - Kibana process getting killed](https://discuss.elastic.co/t/request-timeout-after-30000-kibana-process-getting-killed/54457)
**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\ **Replies:** 3\ **Last updated:** [February 22, 2017, 8:41am UTC](https://discuss.elastic.co/t/request-timeout-after-30000-kibana-process-getting-killed/54457 "2017-02-22T08:41:38Z")
Hi All, Sometimes Kibana shows a blank white page and I don;t see response. My ES cluster health is fine and it is in green state. Previously I used to restart the kibana and after restart I am able to user kibana with… --- ## [Kibana requesting too many doc values](https://discuss.elastic.co/t/kibana-requesting-too-many-doc-values/147760)
**Author:** [@mightyguava](https://discuss.elastic.co/u/mightyguava)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 3:40pm UTC](https://discuss.elastic.co/t/kibana-requesting-too-many-doc-values/147760 "2020-12-03T15:40:07Z")
We have an elasticsearch cluster that indexes some events that flow through our system for debugging use. These events have pretty widely varying formats, so they end up generating a lot of different fields. Kibana maps … --- ## [Kibana Regex Searching Problems](https://discuss.elastic.co/t/kibana-regex-searching-problems/154108)
**Author:** [@jasonazzarella](https://discuss.elastic.co/u/jasonazzarella)\ **Replies:** 3\ **Last updated:** [October 26, 2018, 4:37pm UTC](https://discuss.elastic.co/t/kibana-regex-searching-problems/154108 "2018-10-26T16:37:32Z")
Running into an issue that I hope some folks on here can help me with. I've been using the stack for quite a few years and had no issues with regex searching up until now. I've recently upgraded to 6.4.2 on the entire st… --- ## [Output beat events as plain HTTP POST](https://discuss.elastic.co/t/output-beat-events-as-plain-http-post/57923)
**Author:** [@raboof](https://discuss.elastic.co/u/raboof)\ **Replies:** 6\ **Last updated:** [August 19, 2016, 2:46pm UTC](https://discuss.elastic.co/t/output-beat-events-as-plain-http-post/57923 "2016-08-19T14:46:28Z")
The current suite of output modules doesn't include a publisher that simply POST's the events to some generic HTTP endpoint, without having to go through e.g. logstash. I've made a PoC of this idea at https://github.co… --- ## [Es\_rejected\_execution\_exception -](https://discuss.elastic.co/t/es-rejected-execution-exception/286901)
**Author:** [@Paulo\_Eduardo\_Bitar](https://discuss.elastic.co/u/Paulo_Eduardo_Bitar)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 1:07am UTC](https://discuss.elastic.co/t/es-rejected-execution-exception/286901 "2021-10-18T01:07:30Z")
Hi, I just started learning Elastic and I have already found a problem. I am running Elastic in a Docker and trying to execute this curl -H 'Content-Type: application/json' -XPOST '127.0.0.1:9200/shakespeare/\_bulk?prett… --- ## [Pass a list to Elasticsearch query template](https://discuss.elastic.co/t/pass-a-list-to-elasticsearch-query-template/96928)
**Author:** [@kattisa](https://discuss.elastic.co/u/kattisa)\ **Replies:** 1\ **Last updated:** [August 14, 2017, 9:02am UTC](https://discuss.elastic.co/t/pass-a-list-to-elasticsearch-query-template/96928 "2017-08-14T09:02:26Z")
Hi everyone! I am trying to pass a list of parameters to a search query (filter by terms) in Elasticsearch. It works when it’s not in a template, just in a query: "terms": { "speaker": \["HAMLET", "KING HENRY IV"\]… --- ## [How to change number\_of\_shards and number\_of\_replica in elasticseatch template](https://discuss.elastic.co/t/how-to-change-number-of-shards-and-number-of-replica-in-elasticseatch-template/167855)
**Author:** [@Debashis\_Adak](https://discuss.elastic.co/u/Debashis_Adak)\ **Replies:** 5\ **Last updated:** [February 28, 2019, 1:58pm UTC](https://discuss.elastic.co/t/how-to-change-number-of-shards-and-number-of-replica-in-elasticseatch-template/167855 "2019-02-28T13:58:01Z")
Hi All, ELK Version: 6.4.0 System Details: Windows Host: Localhost I am trying to create a new index in Elasticsearch via Logstash where I need to change the default index settings. By default 5 shards and 1 replica … --- ## [ES marking and sending shard failed due to failed recovery in enabling replication](https://discuss.elastic.co/t/es-marking-and-sending-shard-failed-due-to-failed-recovery-in-enabling-replication/41742)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 6\ **Last updated:** [February 24, 2016, 6:02am UTC](https://discuss.elastic.co/t/es-marking-and-sending-shard-failed-due-to-failed-recovery-in-enabling-replication/41742 "2016-02-24T06:02:18Z")
Hi All, We are using Elasticsearch version 1.7.3 in PERF environment and in Perf env we have 3 physical servers and each server are highly configured with 256 GB RAM & 48 cores of CPU. We have an index es\_item and it c… --- ## [Get last update time for an index](https://discuss.elastic.co/t/get-last-update-time-for-an-index/77365)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 4\ **Last updated:** [March 4, 2017, 5:41am UTC](https://discuss.elastic.co/t/get-last-update-time-for-an-index/77365 "2017-03-04T05:41:40Z")
Is there a way to get last updated time for index? I looked up on forum and google and there used to be \_timestamp field, but was deprecated. Wondering if it was replaced with something else. Thank you. --- ## [Customizable Form - Make Dashboards DO Things](https://discuss.elastic.co/t/customizable-form-make-dashboards-do-things/384124)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 0\ **Last updated:** [December 16, 2025, 3:54pm UTC](https://discuss.elastic.co/t/customizable-form-make-dashboards-do-things/384124 "2025-12-16T15:54:30Z")
Hi everyone, I’ve published an open-source Kibana plugin that allows you to build custom, configurable forms as Kibana Visualizations and use them inside your Dashboards so you can basically trigger actions directly fro… --- ## [Logstash \_dateparsefailure error](https://discuss.elastic.co/t/logstash--dateparsefailure-error/35819)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 5\ **Last updated:** [November 29, 2015, 4:57pm UTC](https://discuss.elastic.co/t/logstash--dateparsefailure-error/35819 "2015-11-29T16:57:16Z")
How do I match the below timestamp value ?. I'm getting dateparsefailure error. Log Timestamp: 2015-11-28 16:46:41,553 Filter config: grok { match =\> \[ "message", "%{TIMESTAMP\_ISO8601:timestamp}" \] } da… --- ## [Logstash cannot index data to Elasticsearch \[FORBIDDEN/8/index write (api)\]](https://discuss.elastic.co/t/logstash-cannot-index-data-to-elasticsearch-forbidden-8-index-write-api/175340)
**Author:** [@thangld](https://discuss.elastic.co/u/thangld)\ **Replies:** 8\ **Last updated:** [April 5, 2019, 7:50am UTC](https://discuss.elastic.co/t/logstash-cannot-index-data-to-elasticsearch-forbidden-8-index-write-api/175340 "2019-04-05T07:50:03Z")
I'm trying to use logstash to index data into Elasticsearch. At first, it indexes successfully but after a few moments, when I tail tailf /var/log/logstash/logstash-plain.log, it gives me this error: retrying failed act… --- ## [Curl: (7) Failed to connect to 1.x.x.x port 5601: Connection refused](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-1-x-x-x-port-5601-connection-refused/146848)
**Author:** [@jawad846](https://discuss.elastic.co/u/jawad846)\ **Replies:** 5\ **Last updated:** [August 31, 2018, 1:57pm UTC](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-1-x-x-x-port-5601-connection-refused/146848 "2018-08-31T13:57:48Z")
Hi guys, I had install elasticsearch and kibana on ec2 instance. If I run locally both elasticsearch and kibana working \[ec2-user@ip-10-0-1-168 ~\]$ curl http://localhost:9200 { "name" : "\_MF1kzR", "cluster\_name" :… --- ## [How to use Python to send data to logstash](https://discuss.elastic.co/t/how-to-use-python-to-send-data-to-logstash/44118)
**Author:** [@szcountryboy](https://discuss.elastic.co/u/szcountryboy)\ **Replies:** 4\ **Last updated:** [March 11, 2016, 10:00am UTC](https://discuss.elastic.co/t/how-to-use-python-to-send-data-to-logstash/44118 "2016-03-11T10:00:04Z")
I use Python2.7 send data to the logstash above, the use of ordinary TCP port data transmission. msgDict\["@metadata"\] = { "beat":"python-test", "type":"python" } msgDict\["@timestamp"\] = time.strftime("%Y-%m-%dT%H:%… --- ## [How do i reindex data to resolve type conflict?](https://discuss.elastic.co/t/how-do-i-reindex-data-to-resolve-type-conflict/97448)
**Author:** [@nfplatzke](https://discuss.elastic.co/u/nfplatzke)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 8:14pm UTC](https://discuss.elastic.co/t/how-do-i-reindex-data-to-resolve-type-conflict/97448 "2017-08-17T20:14:04Z")
Can someone provide a full concise example of how I would reindex my data to resolve a conflict? I have two fields where the type changed from string to integer. I don’t understand how the reindex process works or why I … --- ## [Custom filebeat template for JSON log lines](https://discuss.elastic.co/t/custom-filebeat-template-for-json-log-lines/114761)
**Author:** [@vopsec](https://discuss.elastic.co/u/vopsec)\ **Replies:** 6\ **Last updated:** [January 23, 2018, 10:07pm UTC](https://discuss.elastic.co/t/custom-filebeat-template-for-json-log-lines/114761 "2018-01-23T22:07:45Z")
Greetings, I'm trying to use filebeat to ingest a log file full of JSON objects. I've gotten it to work and it will ingest the data and I can discover the data in Kibana almost correctly. My problem is that the data tha… --- ## [Regexp and case insensitive](https://discuss.elastic.co/t/regexp-and-case-insensitive/1288)
**Author:** [@rore](https://discuss.elastic.co/u/rore)\ **Replies:** 2\ **Last updated:** [November 17, 2015, 1:24pm UTC](https://discuss.elastic.co/t/regexp-and-case-insensitive/1288 "2015-11-17T13:24:30Z")
As far as I know there is no option to provide a case insensitive option for regexp query or filter. Is there a good reason for that? This means that in order to provide case insensitive regex searches you need to h… --- ## [Searching inside an array of strings](https://discuss.elastic.co/t/searching-inside-an-array-of-strings/75463)
**Author:** [@Tartuga](https://discuss.elastic.co/u/Tartuga)\ **Replies:** 1\ **Last updated:** [February 17, 2017, 1:21pm UTC](https://discuss.elastic.co/t/searching-inside-an-array-of-strings/75463 "2017-02-17T13:21:40Z")
Searching inside an array of strings, i.e.: { "ingredients" : \["grilled cheese", "pork", "ketchup"\] } query: { "match" : { "cities" : { "query" : "grilled pork", "operator" :… --- ## [Why NFS is to be avoided for data directories](https://discuss.elastic.co/t/why-nfs-is-to-be-avoided-for-data-directories/215240)
**Author:** [@malshan](https://discuss.elastic.co/u/malshan)\ **Replies:** 7\ **Last updated:** [January 16, 2020, 5:30pm UTC](https://discuss.elastic.co/t/why-nfs-is-to-be-avoided-for-data-directories/215240 "2020-01-16T17:30:35Z")
ES: 7.5 I have seen the recommendations in official documentation to 'avoid NFS' when using them as data directories for elasticsearch. I have also seen almost everywhere in the forums to 'avoid NFS' but couldn't find a… --- ## [Reindex big index](https://discuss.elastic.co/t/reindex-big-index/83047)
**Author:** [@jackiekhuu\_work](https://discuss.elastic.co/u/jackiekhuu_work)\ **Replies:** 1\ **Last updated:** [April 20, 2017, 12:04pm UTC](https://discuss.elastic.co/t/reindex-big-index/83047 "2017-04-20T12:04:55Z")
I would like to reindex a very big index. When I run reindex API with elasticsearchjs client I will receive the requestTimeout error, or Gateway timeout error. It's ok because the reindex process is still running in E… [Previous page](https://discuss.elastic.co/top.md?page=284&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=286&per_page=50&period=all)