# Top **URL:** https://discuss.elastic.co/top.md?page=286&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 287 --- ## [What is the maximum number of documents an index can hold?](https://discuss.elastic.co/t/what-is-the-maximum-number-of-documents-an-index-can-hold/229571)
**Author:** [@neel1996](https://discuss.elastic.co/u/neel1996)\ **Replies:** 2\ **Last updated:** [April 24, 2020, 5:12am UTC](https://discuss.elastic.co/t/what-is-the-maximum-number-of-documents-an-index-can-hold/229571 "2020-04-24T05:12:25Z")
Hi, I am currently working on indexing searchable items from MS SQL to Elasticsearch. Currently there are over 20 million records which needs to be pushed to ES which constitutes to 20 millions documents in ES index. T… --- ## [Usage of coordinator node for indexing](https://discuss.elastic.co/t/usage-of-coordinator-node-for-indexing/219034)
**Author:** [@1fe60245fe160bc0f8ab](https://discuss.elastic.co/u/1fe60245fe160bc0f8ab)\ **Replies:** 7\ **Last updated:** [February 13, 2020, 7:43am UTC](https://discuss.elastic.co/t/usage-of-coordinator-node-for-indexing/219034 "2020-02-13T07:43:39Z")
Hi all, I've read that the best practice for querying/searching is to use a coordinator node, which makes sense to me (a node that's not busy on disk operations for indexing and uses memory for gather phase of searches)… --- ## [Spark, read data from ES, how to specify fields?](https://discuss.elastic.co/t/spark-read-data-from-es-how-to-specify-fields/37451)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 8\ **Last updated:** [April 12, 2017, 11:56am UTC](https://discuss.elastic.co/t/spark-read-data-from-es-how-to-specify-fields/37451 "2017-04-12T11:56:34Z")
I am trying to get some data from Spark to a remote elasticsearch cluster: JavaPairRDD\> esRDD = JavaEsSpark.esRDD(jsc, "es\_articles", "?fields=title"); It doesnt seem to be implemented like "q" \[:confused:\] Any wa… --- ## [Find documents which don't have some field in the doc](https://discuss.elastic.co/t/find-documents-which-dont-have-some-field-in-the-doc/195106)
**Author:** [@ab\_cd](https://discuss.elastic.co/u/ab_cd)\ **Replies:** 5\ **Last updated:** [August 19, 2019, 6:45am UTC](https://discuss.elastic.co/t/find-documents-which-dont-have-some-field-in-the-doc/195106 "2019-08-19T06:45:44Z")
I'm trying to differentiate between documents that have some field but the value is not set, and the documents that don't have value. I was thinking about term query and script fields but both don't seem to let me achiev… --- ## [Kibana search query to remove ip range](https://discuss.elastic.co/t/kibana-search-query-to-remove-ip-range/41825)
**Author:** [@jystol](https://discuss.elastic.co/u/jystol)\ **Replies:** 2\ **Last updated:** [February 16, 2016, 2:33pm UTC](https://discuss.elastic.co/t/kibana-search-query-to-remove-ip-range/41825 "2016-02-16T14:33:49Z")
I would like to exclude an ip range in my kibana visualization via a search similar to "NOT dst\_ip:10.0.0.0/8 ". the field is of type ip. Any help would be appreciated. --- ## [Combining several logstash config files into one... how do you do it?](https://discuss.elastic.co/t/combining-several-logstash-config-files-into-one-how-do-you-do-it/33546)
**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Replies:** 5\ **Last updated:** [November 2, 2015, 6:42pm UTC](https://discuss.elastic.co/t/combining-several-logstash-config-files-into-one-how-do-you-do-it/33546 "2015-11-02T18:42:51Z")
To date, we have created several mini-config files on our own to satisfy very specific goals. Now we are looking to consolidate these files on a common server and wondering how to go about it. Is the best practice to … --- ## [How to add Nessus CSV report to logstash](https://discuss.elastic.co/t/how-to-add-nessus-csv-report-to-logstash/50470)
**Author:** [@Abe\_Bazouie](https://discuss.elastic.co/u/Abe_Bazouie)\ **Replies:** 7\ **Last updated:** [July 29, 2016, 8:02pm UTC](https://discuss.elastic.co/t/how-to-add-nessus-csv-report-to-logstash/50470 "2016-07-29T20:02:05Z")
Hi guys I am kind of new in ELK. I am trying to add CSV file which is Nessus report to logstash in order to analyze them. What I have done is I create a .conf file in logstash but when I try to run logstash -f config… --- ## [How to search keyword fields with case insensitive](https://discuss.elastic.co/t/how-to-search-keyword-fields-with-case-insensitive/101704)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 1\ **Last updated:** [October 5, 2017, 6:47am UTC](https://discuss.elastic.co/t/how-to-search-keyword-fields-with-case-insensitive/101704 "2017-10-05T06:47:25Z")
Please provide me solution for case insensitive search on keyword field. Like if I am searching for ajit it should display AJIT and all ajit available in elasticsearch data. Currently it giving me exact match. --- ## [Elastic Stack Release - 5.0.0-alpha2](https://discuss.elastic.co/t/elastic-stack-release-5-0-0-alpha2/49087)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [May 3, 2016, 5:03pm UTC](https://discuss.elastic.co/t/elastic-stack-release-5-0-0-alpha2/49087 "2016-05-03T17:03:31Z")
Hi all, we are pleased to announce 5.0.0-alpha2 for the entire Elastic Stack has been released!! Blog: https://www.elastic.co/blog/elastic-stack-release-5-0-0-alpha-2 Downloads: https://www.elastic.co/downloads/ Pl… --- ## [Strings shown as Multifields](https://discuss.elastic.co/t/strings-shown-as-multifields/285580)
**Author:** [@KarlosA](https://discuss.elastic.co/u/KarlosA)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 11:14am UTC](https://discuss.elastic.co/t/strings-shown-as-multifields/285580 "2021-09-30T11:14:19Z")
Hello, Using Elasticsearch 7.8.1 the following mapping: "mappings": { "\_routing": { "required": true }, "properties": { "qualified\_host": { … --- ## [Search problem, contains unrecognized parameter: \[typed\_keys\]](https://discuss.elastic.co/t/search-problem-contains-unrecognized-parameter-typed-keys/120926)
**Author:** [@mrenanjr](https://discuss.elastic.co/u/mrenanjr)\ **Replies:** 5\ **Last updated:** [February 23, 2018, 11:40am UTC](https://discuss.elastic.co/t/search-problem-contains-unrecognized-parameter-typed-keys/120926 "2018-02-23T11:40:38Z")
Using Previous versions of NEST this code was working: (c#) var rangeDateQuery = new DateRangeQuery(); //some rangeDateQuery configurations var emailQuery = new TermQuery(); //some emailQuery configurations return awai… --- ## [Query returning only ids](https://discuss.elastic.co/t/query-returning-only-ids/5135)
**Author:** [@Ridvan\_Gyundogan](https://discuss.elastic.co/u/Ridvan_Gyundogan)\ **Replies:** 3\ **Last updated:** [August 12, 2011, 12:54pm UTC](https://discuss.elastic.co/t/query-returning-only-ids/5135 "2011-08-12T12:54:51Z")
Hello All, I am trying to run a query which returns only the id's for a given index without the source but I am unable to do it. I try with a query like this: { "fields": \[ "price", "\_id" \], "\_… --- ## [Elasticsearch: TransportError exception while searching Id](https://discuss.elastic.co/t/elasticsearch-transporterror-exception-while-searching-id/49168)
**Author:** [@Nilesh\_Gaikwad](https://discuss.elastic.co/u/Nilesh_Gaikwad)\ **Replies:** 5\ **Last updated:** [March 24, 2017, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-transporterror-exception-while-searching-id/49168 "2017-03-24T07:14:13Z")
Hello All, I'm new to Elasticsearch, while running below python code I'm getting TransportError: TransportError(503, u'search\_phase\_execution\_exception') :- Python code :- f = open(file, "rb") strings = f.read(of… --- ## [Bulk indexing with java high level rest client gives error "Unable to parse response body"](https://discuss.elastic.co/t/bulk-indexing-with-java-high-level-rest-client-gives-error-unable-to-parse-response-body/161696)
**Author:** [@ivanqwam](https://discuss.elastic.co/u/ivanqwam)\ **Replies:** 2\ **Last updated:** [December 21, 2018, 3:54pm UTC](https://discuss.elastic.co/t/bulk-indexing-with-java-high-level-rest-client-gives-error-unable-to-parse-response-body/161696 "2018-12-21T15:54:03Z")
We are trying to switch from Java Transport Client to Java high level client but we get error "Unable to parse response body" with bulk batches over 10000 documents using high level client. We had this with many configu… --- ## [Delete indices older than 30 days using Kibana Index Lifecycle policies](https://discuss.elastic.co/t/delete-indices-older-than-30-days-using-kibana-index-lifecycle-policies/242350)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 6\ **Last updated:** [July 24, 2020, 7:44pm UTC](https://discuss.elastic.co/t/delete-indices-older-than-30-days-using-kibana-index-lifecycle-policies/242350 "2020-07-24T19:44:34Z")
Hello. I am new to ELK. I have managed to install and setup ELK 7.6.2 stack on RHEL 7 servers. Now as part of house keeping I need to remove/ delete indices older than 30 days to maintain certain level of available dis… --- ## [How do I reset the "file pointer" in filebeats](https://discuss.elastic.co/t/how-do-i-reset-the-file-pointer-in-filebeats/49440)
**Author:** [@elastic1622](https://discuss.elastic.co/u/elastic1622)\ **Replies:** 2\ **Last updated:** [May 9, 2016, 3:16pm UTC](https://discuss.elastic.co/t/how-do-i-reset-the-file-pointer-in-filebeats/49440 "2016-05-09T15:16:52Z")
Hello I have filebeats forwarding logs to logstash/ELK. I have spent time developing, debugging, and getting visualizations up, and would now like to process all log files in their entirety once again. This is a simi… --- ## [CURL command not working](https://discuss.elastic.co/t/curl-command-not-working/64519)
**Author:** [@VijayKarthikeyan](https://discuss.elastic.co/u/VijayKarthikeyan)\ **Replies:** 7\ **Last updated:** [November 2, 2016, 6:40am UTC](https://discuss.elastic.co/t/curl-command-not-working/64519 "2016-11-02T06:40:43Z")
While doing some handson with ELK, I happen to delete an Index from ELK. I used the below command curl -XDELETE 'http://localhost:9200/logstash-2016.10.20' but this throws the below error Invoke-WebRequest : A para… --- ## [How do I set a field type using grok?](https://discuss.elastic.co/t/how-do-i-set-a-field-type-using-grok/24662)
**Author:** [@naisanza](https://discuss.elastic.co/u/naisanza)\ **Replies:** 3\ **Last updated:** [June 30, 2015, 9:24pm UTC](https://discuss.elastic.co/t/how-do-i-set-a-field-type-using-grok/24662 "2015-06-30T21:24:02Z")
I know that %{NUMBER:field:integer} works, actually I think this works, too: %{NUMBER:field:int} I use the grok filter heavily and would like to know if I can set the field type in a custom pattern without needing to u… --- ## [Newb/learner floundering](https://discuss.elastic.co/t/newb-learner-floundering/298216)
**Author:** [@mrodent](https://discuss.elastic.co/u/mrodent)\ **Replies:** 3\ **Last updated:** [March 2, 2022, 11:44pm UTC](https://discuss.elastic.co/t/newb-learner-floundering/298216 "2022-03-02T23:44:37Z")
When I say newb, I have in fact developed a couple of minor apps which use the most basic aspects of creating an ES index and then searching it (in Python). The resource I might naturally expect to go to, with v 7.16 cu… --- ## [Going through the Logstash tutorial - "connection refused" error](https://discuss.elastic.co/t/going-through-the-logstash-tutorial-connection-refused-error/69620)
**Author:** [@Josh\_A](https://discuss.elastic.co/u/Josh_A)\ **Replies:** 7\ **Last updated:** [December 22, 2016, 8:32pm UTC](https://discuss.elastic.co/t/going-through-the-logstash-tutorial-connection-refused-error/69620 "2016-12-22T20:32:23Z")
Hi all -- getting stuck during the Logstash tutorial on the Elastic site: https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html I'm trying to use FileBeat to load the specified sample logfile into ES.… --- ## [Bulk insert with python](https://discuss.elastic.co/t/bulk-insert-with-python/269883)
**Author:** [@eliase](https://discuss.elastic.co/u/eliase)\ **Replies:** 1\ **Last updated:** [April 13, 2021, 9:08am UTC](https://discuss.elastic.co/t/bulk-insert-with-python/269883 "2021-04-13T09:08:15Z")
Hi everyone, just as a foreword: I'm new to elasticsearch (and this forum :slightly\_smiling\_face:) and still figuring out a lot. So, I successfully tried to use bulk insertion from a file with the following content: {… --- ## [Split nested json array](https://discuss.elastic.co/t/split-nested-json-array/147969)
**Author:** [@slavo3](https://discuss.elastic.co/u/slavo3)\ **Replies:** 8\ **Last updated:** [September 11, 2018, 9:27am UTC](https://discuss.elastic.co/t/split-nested-json-array/147969 "2018-09-11T09:27:36Z")
I would like to to retrieve every element in below JSON to be a field so as to visualize in kibana by applying metrics in dashboard. { "message": "{"SegmentId":4,"VectorList":\[{"LocalizationId":60,"ServiceId":1,"Date"… --- ## [Received message from unsupported version: \[2.0.0\] minimal compatible version is: \[5.0.0\]](https://discuss.elastic.co/t/received-message-from-unsupported-version-2-0-0-minimal-compatible-version-is-5-0-0/64708)
**Author:** [@dawood\_abdullah](https://discuss.elastic.co/u/dawood_abdullah)\ **Replies:** 5\ **Last updated:** [March 8, 2017, 3:36pm UTC](https://discuss.elastic.co/t/received-message-from-unsupported-version-2-0-0-minimal-compatible-version-is-5-0-0/64708 "2017-03-08T15:36:42Z")
When I am starting elastic server, I am continously getting the below exception: java.lang.IllegalStateException: Received message from unsupported version: \[2.0.0\] minimal compatible version is: \[5.0.0\] at org.elastics… --- ## [\[ANN\] Kibana 4.2.0-beta1 is released!](https://discuss.elastic.co/t/ann-kibana-4-2-0-beta1-is-released/28369)
**Author:** [@tbragin](https://discuss.elastic.co/u/tbragin)\ **Replies:** 0\ **Last updated:** [August 31, 2015, 5:41pm UTC](https://discuss.elastic.co/t/ann-kibana-4-2-0-beta1-is-released/28369 "2015-08-31T17:41:34Z")
We are excited to announce the release of Kibana 4.2.0-beta1! This release brings compatibility with Elasticsearch 2.0.0-beta1 and a host of other enhancements and improvements. This release is not backward-compatible wi… --- ## [How to ingest Parquet files into Elasticsearch](https://discuss.elastic.co/t/how-to-ingest-parquet-files-into-elasticsearch/167426)
**Author:** [@shivakumar\_kasha](https://discuss.elastic.co/u/shivakumar_kasha)\ **Replies:** 0\ **Last updated:** [February 7, 2019, 10:50am UTC](https://discuss.elastic.co/t/how-to-ingest-parquet-files-into-elasticsearch/167426 "2019-02-07T10:50:37Z")
Hi, I've parquet files. I want to ingest them into Elasticsearch. Please respond with the possible solutions. I've tried with elasticsearch\_loader ( https://github.com/moshe/elasticsearch\_loader ) but unable to write t… --- ## [\[ANNOUNCEMENT\] - esBench 0.0.2 released](https://discuss.elastic.co/t/announcement-esbench-0-0-2-released/36950)
**Author:** [@kucera.jan.cz](https://discuss.elastic.co/u/kucera.jan.cz)\ **Replies:** 0\ **Last updated:** [December 11, 2015, 8:12am UTC](https://discuss.elastic.co/t/announcement-esbench-0-0-2-released/36950 "2015-12-11T08:12:12Z")
Hi, I would like to announce a first release of the esBench tool with version 0.0.2. esBench is performance and unit test tool for generating Elasticsearch documents based on existing data It is compatible with ES 2… --- ## [Reindex from Remote](https://discuss.elastic.co/t/reindex-from-remote/78583)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 8\ **Last updated:** [April 3, 2017, 5:08pm UTC](https://discuss.elastic.co/t/reindex-from-remote/78583 "2017-04-03T17:08:53Z")
I'm trying to perform Reindex from Remote and I'm getting following error: @dest: # curl --request POST 0:9200/\_reindex?pretty -d @reindex.json { "error" : { "root\_cause" : \[ { "type" : "illegal\_… --- ## [Elastic Helm Charts are not working integrated OOTB in version 8.5.1](https://discuss.elastic.co/t/elastic-helm-charts-are-not-working-integrated-ootb-in-version-8-5-1/325642)
**Author:** [@Enrique\_Carbonell](https://discuss.elastic.co/u/Enrique_Carbonell)\ **Replies:** 3\ **Last updated:** [February 15, 2023, 6:29pm UTC](https://discuss.elastic.co/t/elastic-helm-charts-are-not-working-integrated-ootb-in-version-8-5-1/325642 "2023-02-15T18:29:19Z")
Kibana version: 8.5.1 Elasticsearch version: 8.5.1 APM Server version: 8.5.1 OpenTelementry Java Agent: 1.22.1 We are using the official Helm Chart to deploy the Elastic Stack on Kubernetes with the following compone… --- ## [How to find the Elasticsearch URL from Kibana?](https://discuss.elastic.co/t/how-to-find-the-elasticsearch-url-from-kibana/294979)
**Author:** [@Ananya\_Chakraborty](https://discuss.elastic.co/u/Ananya_Chakraborty)\ **Replies:** 3\ **Last updated:** [January 20, 2022, 10:00pm UTC](https://discuss.elastic.co/t/how-to-find-the-elasticsearch-url-from-kibana/294979 "2022-01-20T22:00:53Z")
I have a Kibana login with admin privilege. I don't know the URL for my Elasticsearch. How can I find it from within Kibana? Is there a query that I can run in the console to find the Elasticsearch URL? --- ## [Elastic APM .NET Agent 1.10.0 Security Update](https://discuss.elastic.co/t/elastic-apm-net-agent-1-10-0-security-update/274668)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 5:42pm UTC](https://discuss.elastic.co/t/elastic-apm-net-agent-1-10-0-security-update/274668 "2021-06-01T17:42:39Z")
Elastic APM .NET Agent information disclosure (ESA-2021-14) The Elastic APM .NET Agent can leak sensitive HTTP header information when logging the details during an application error. Normally, the APM agent will saniti… --- ## [Demo: using the API to detect fraud + create investigator tasks](https://discuss.elastic.co/t/demo-using-the-api-to-detect-fraud-create-investigator-tasks/66965)
**Author:** [@Mark\_Harwood](https://discuss.elastic.co/u/Mark_Harwood)\ **Replies:** 0\ **Last updated:** [November 23, 2016, 10:35am UTC](https://discuss.elastic.co/t/demo-using-the-api-to-detect-fraud-create-investigator-tasks/66965 "2016-11-23T10:35:26Z")
This demo shows how to write a script that detects fraud using the Graph API and generate task lists with visualization tools for fraud investigators: https://www.youtube.com/watch?v=liMhiiyQ9co --- ## [Cannot solve problem "max file descriptors \[4096\] for elasticsearch"](https://discuss.elastic.co/t/cannot-solve-problem-max-file-descriptors-4096-for-elasticsearch/82459)
**Author:** [@John\_06](https://discuss.elastic.co/u/John_06)\ **Replies:** 5\ **Last updated:** [April 23, 2017, 9:42pm UTC](https://discuss.elastic.co/t/cannot-solve-problem-max-file-descriptors-4096-for-elasticsearch/82459 "2017-04-23T21:42:38Z")
I am running Elasticsearch in Docker container with the following command: docker run -d --name elasticsearch -p 9200:9200 -e "bootstrap.system\_call\_filter=false" -e "xpack.security.enabled=false" docker.elastic.co/ela… --- ## [Failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic/92522)
**Author:** [@aswinkumart](https://discuss.elastic.co/u/aswinkumart)\ **Replies:** 4\ **Last updated:** [July 11, 2017, 1:07pm UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic/92522 "2017-07-11T13:07:54Z")
After installing X-Pack in Windows machine, I am getting the following error when I start Kibana \[WARN \]\[o.e.x.s.a.AuthenticationService\] \[j1NB46r\] An error occurred while attempting to authenticate \[elastic\] against r… --- ## [ConfigurationError", :message=\>"Expected one of #, input, filter, output at line 1, column 1](https://discuss.elastic.co/t/configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1/156154)
**Author:** [@numan\_KIZILIRMAK](https://discuss.elastic.co/u/numan_KIZILIRMAK)\ **Replies:** 6\ **Last updated:** [November 11, 2018, 9:51am UTC](https://discuss.elastic.co/t/configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1/156154 "2018-11-11T09:51:00Z")
Hello, I want to get rabitmq messages from rabitmq to elasticsearch via logstash my config is: input { rabbitmq { host ⇒ "localhost" queue =\> "LoggingToElastic" exchange =\> "LogQueue" durable =\> true user =\> "gue… --- ## [Get average of response time in specific interval](https://discuss.elastic.co/t/get-average-of-response-time-in-specific-interval/50828)
**Author:** [@ivanandrianto95](https://discuss.elastic.co/u/ivanandrianto95)\ **Replies:** 4\ **Last updated:** [May 25, 2016, 4:26pm UTC](https://discuss.elastic.co/t/get-average-of-response-time-in-specific-interval/50828 "2016-05-25T16:26:13Z")
I use Filebeat and ELK and I need to display average of response time in specific interval. It has a field response\_time but I don't know how to get the average response time each minute. How can I do it? --- ## [Scripted field HourOfDay()](https://discuss.elastic.co/t/scripted-field-hourofday/87520)
**Author:** [@rcfontana](https://discuss.elastic.co/u/rcfontana)\ **Replies:** 7\ **Last updated:** [June 12, 2017, 9:53am UTC](https://discuss.elastic.co/t/scripted-field-hourofday/87520 "2017-06-12T09:53:55Z")
Hi, I want a field containing the hour of the day for each elasticsearch document. The easiest way would be to parse @timestamp into a hour\_of\_day field but that means I would have to reindex all my data. I saw another… --- ## [Is there a plan for elasticsearch to support LTR (learning to rank)](https://discuss.elastic.co/t/is-there-a-plan-for-elasticsearch-to-support-ltr-learning-to-rank/73150)
**Author:** [@Sujith\_Joseph](https://discuss.elastic.co/u/Sujith_Joseph)\ **Replies:** 4\ **Last updated:** [February 14, 2017, 10:06pm UTC](https://discuss.elastic.co/t/is-there-a-plan-for-elasticsearch-to-support-ltr-learning-to-rank/73150 "2017-02-14T22:06:07Z")
Hi, Solr 6.4 enabled support for LTR machine learning model with the goal of improved search relevancy . I was wondering if elasticsearch or prelert will support this in future? " Machine Learning: Configurable Lea… --- ## [Elasticsearch won't upstart](https://discuss.elastic.co/t/elasticsearch-wont-upstart/45550)
**Author:** [@mchomicz](https://discuss.elastic.co/u/mchomicz)\ **Replies:** 6\ **Last updated:** [May 23, 2017, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-wont-upstart/45550 "2017-05-23T07:14:40Z")
Hi! I have been successfully running ELK for a day \[:slight\_smile:\] However, after a needed server restart I cannot upstart Elasticsearch from systemctl. If I run it manually it works. My set up: centos7 elasti… --- ## [Dec 25th, 2020 \[EN\] Santa’s Little Helper - Workplace Search](https://discuss.elastic.co/t/dec-25th-2020-en-santa-s-little-helper-workplace-search/256691)
**Author:** [@Sean\_Story](https://discuss.elastic.co/u/Sean_Story)\ **Replies:** 0\ **Last updated:** [December 25, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-25th-2020-en-santa-s-little-helper-workplace-search/256691 "2020-12-25T08:00:13Z")
Santa’s Little Helper - Workplace Search You might have picked up on this from movies: Santa’s operation is pretty high tech. It’s a big job, coordinating a massive workforce of Elves to ensure the timely delivery of… --- ## [Retrying failed action with response code: 503](https://discuss.elastic.co/t/retrying-failed-action-with-response-code-503/24635)
**Author:** [@samding](https://discuss.elastic.co/u/samding)\ **Replies:** 5\ **Last updated:** [July 4, 2015, 12:34am UTC](https://discuss.elastic.co/t/retrying-failed-action-with-response-code-503/24635 "2015-07-04T00:34:10Z")
I started both Elasticsearch(1.6.) and Logstash(1.5.1), but ES seems not working. Here is the conf of LS: input { stdin { } } output { elasticsearch { host =\> "zslesvm09:9300" } # it is the same if removing "… --- ## [How to check if logstash is recieving data?](https://discuss.elastic.co/t/how-to-check-if-logstash-is-recieving-data/122916)
**Author:** [@olorien](https://discuss.elastic.co/u/olorien)\ **Replies:** 2\ **Last updated:** [March 8, 2018, 8:58am UTC](https://discuss.elastic.co/t/how-to-check-if-logstash-is-recieving-data/122916 "2018-03-08T08:58:37Z")
Hi everyone I am doing some troubleshooting for our logstash-elasticsearch setup, and I was wondering how to check if logstash is receiving any input at all. It simply stopped creating indexes at one point, and no log… --- ## [Completed handshake with but follow up connection failed](https://discuss.elastic.co/t/completed-handshake-with-but-follow-up-connection-failed/271353)
**Author:** [@overbid](https://discuss.elastic.co/u/overbid)\ **Replies:** 3\ **Last updated:** [April 27, 2021, 11:15am UTC](https://discuss.elastic.co/t/completed-handshake-with-but-follow-up-connection-failed/271353 "2021-04-27T11:15:57Z")
I'm trying to install via podman compose in 3 machines on AWS EC2 version: "3" services: es01: image: docker.elastic.co/elasticsearch/elasticsearch:7.12.0 container\_name: es01 environment: - node.nam… --- ## [Elastic Search - Free or Paid?](https://discuss.elastic.co/t/elastic-search-free-or-paid/120355)
**Author:** [@stevetso](https://discuss.elastic.co/u/stevetso)\ **Replies:** 3\ **Last updated:** [February 18, 2018, 5:26pm UTC](https://discuss.elastic.co/t/elastic-search-free-or-paid/120355 "2018-02-18T17:26:04Z")
Elastic search is a nice tool for log searching. If we want to move one more step forward, we need to pay for the X-Pack and $$ is involved already. I hope elastic stack can be packaged into two version: community and … --- ## [\[security\_exception\] action \[indices:data/read/search\] is unauthorized for user \[user\]](https://discuss.elastic.co/t/security-exception-action-indices-data-read-search-is-unauthorized-for-user-user/164848)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 3\ **Last updated:** [January 22, 2019, 9:37am UTC](https://discuss.elastic.co/t/security-exception-action-indices-data-read-search-is-unauthorized-for-user-user/164848 "2019-01-22T09:37:29Z")
Hello, I followed Grant users access to APM Server indices | APM Server Reference \[6.5\] | Elastic, yet user (w/ apm\_reader role) is unable to access the way superuser does (some parts of apm are visible, while others is… --- ## [What kind of encoding does the ES support?](https://discuss.elastic.co/t/what-kind-of-encoding-does-the-es-support/16127)
**Author:** [@Ivan\_Ji](https://discuss.elastic.co/u/Ivan_Ji)\ **Replies:** 3\ **Last updated:** [March 4, 2014, 11:37pm UTC](https://discuss.elastic.co/t/what-kind-of-encoding-does-the-es-support/16127 "2014-03-04T23:37:14Z")
Hi all, I am wondering about the encoding of ES. What kind of the encoding is of the ES storage? And what's the encoding during the operations? Through the REST API, any json document can be sent to insert into E… --- ## [Master and client node role clarifications](https://discuss.elastic.co/t/master-and-client-node-role-clarifications/104036)
**Author:** [@giomanda](https://discuss.elastic.co/u/giomanda)\ **Replies:** 5\ **Last updated:** [October 16, 2017, 9:21am UTC](https://discuss.elastic.co/t/master-and-client-node-role-clarifications/104036 "2017-10-16T09:21:14Z")
I am quite new to elasticsearch and i have read the documentation and the online book. However , some things are still not clear to me and unfortunately i haven't found the exact answers i am looking for. Lets assume th… --- ## [Getting "Dark Theme" to Load](https://discuss.elastic.co/t/getting-dark-theme-to-load/40434)
**Author:** [@DocileRaptor](https://discuss.elastic.co/u/DocileRaptor)\ **Replies:** 8\ **Last updated:** [January 29, 2016, 11:07pm UTC](https://discuss.elastic.co/t/getting-dark-theme-to-load/40434 "2016-01-29T23:07:21Z")
Hey all, Is anyone having an issue where Kibana is failing to load the dark theme despite the box being checked and even directly loading the URL that includes the dark theme preference option? The Options JSON rea… --- ## [Kibana \\ Elasticsearch - Search\_phase\_execution\_exception, all shards failed](https://discuss.elastic.co/t/kibana-elasticsearch-search-phase-execution-exception-all-shards-failed/267704)
**Author:** [@21908](https://discuss.elastic.co/u/21908)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 7:48pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-search-phase-execution-exception-all-shards-failed/267704 "2021-03-18T19:48:10Z")
I'm using Kibana for querying a 3 node Elasticsearch cluster, both version 7.9.2. My Elasticsearch cluster and all of its indexes are healthy and in a green state as reported by \_cat/health and \_cat/indices?v. I query … --- ## [Filter contain string in Kibana 5.6](https://discuss.elastic.co/t/filter-contain-string-in-kibana-5-6/101722)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 8:23pm UTC](https://discuss.elastic.co/t/filter-contain-string-in-kibana-5-6/101722 "2017-09-25T20:23:18Z")
Hi, I saw new filter ui in kibana 5.6 is very useful but i dont see option "contain" and "not contain" string in field value. It look like this: Filter all docs/event have field "Username" contain "admin". "administr… --- ## [Kafka output throughput is slow or not fast enough](https://discuss.elastic.co/t/kafka-output-throughput-is-slow-or-not-fast-enough/252117)
**Author:** [@jkyamog](https://discuss.elastic.co/u/jkyamog)\ **Replies:** 1\ **Last updated:** [October 16, 2020, 3:26am UTC](https://discuss.elastic.co/t/kafka-output-throughput-is-slow-or-not-fast-enough/252117 "2020-10-16T03:26:38Z")
We are ingesting logs of zscaler, we have come up with a bottle neck likely on the filebeat kafka output. Deployment A: \[\[ Zscaler NSS \]\] -- syslog input --\> \[\[ filebeat \]\] -- kafka output --\> \[\[ Event Hub \]\] ... \[\[ El… [Previous page](https://discuss.elastic.co/top.md?page=285&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=287&per_page=50&period=all)