# Top **URL:** https://discuss.elastic.co/top.md?page=293&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 294 --- ## [Curl with elasticsearch](https://discuss.elastic.co/t/curl-with-elasticsearch/102961)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 6\ **Last updated:** [October 6, 2017, 8:33am UTC](https://discuss.elastic.co/t/curl-with-elasticsearch/102961 "2017-10-06T08:33:05Z")
Hi everyone, My pc is windows 10. I want to use curl command to get the data from elasticsearch, but I have some problems. this is my curl command (a small test): curl -GET "http://localhost:9200/\_search" -d'{"query":… --- ## [How to disable dynamic mapping in 5.1.1?](https://discuss.elastic.co/t/how-to-disable-dynamic-mapping-in-5-1-1/69019)
**Author:** [@tcollinsworth](https://discuss.elastic.co/u/tcollinsworth)\ **Replies:** 6\ **Last updated:** [December 21, 2016, 2:25pm UTC](https://discuss.elastic.co/t/how-to-disable-dynamic-mapping-in-5-1-1/69019 "2016-12-21T14:25:02Z")
Running 5.1.1, followed the 5.1 docs and set a template and setting on the mapping definition and it still creates dynamic mappings. Set template to disable dynamic mapping for all: curl -XPUT 'http://localhost:9200/\_… --- ## [Update multiple field values in elasticsearch](https://discuss.elastic.co/t/update-multiple-field-values-in-elasticsearch/214776)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 1\ **Last updated:** [January 13, 2020, 8:49am UTC](https://discuss.elastic.co/t/update-multiple-field-values-in-elasticsearch/214776 "2020-01-13T08:49:19Z")
Hi all, I am looking to update just one field value in document, http://host:9200/index/\_update/id { "script" : "ctx.\_source.Surname = 'ag'" } this does the job for updating one field, but how to replace multiple f… --- ## [Help please with high CPU utilization on 1 node of cluster :)](https://discuss.elastic.co/t/help-please-with-high-cpu-utilization-on-1-node-of-cluster/32027)
**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\ **Replies:** 8\ **Last updated:** [October 13, 2015, 8:06pm UTC](https://discuss.elastic.co/t/help-please-with-high-cpu-utilization-on-1-node-of-cluster/32027 "2015-10-13T20:06:01Z")
Hi all, I'm having one data node of 6 dedicated nodes have very high CPU utilization. I'm hoping to have some help figuring out what is causing it. Here is the output from "top". top - 17:51:19 up 91 days, 3:38… --- ## [Error: Document contains at least one immense term in field](https://discuss.elastic.co/t/error-document-contains-at-least-one-immense-term-in-field/66486)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 1\ **Last updated:** [November 18, 2016, 9:03am UTC](https://discuss.elastic.co/t/error-document-contains-at-least-one-immense-term-in-field/66486 "2016-11-18T09:03:12Z")
Hi, I am trying mapping and indexing with ES-5.0.0 and PHP. I did mapping on kibana and I started indexing with my php codes.(http://192.168.1.35:8080/indexleme.php?p=index) It indexed but then it stopped. My error: … --- ## [Filebeat + Apache2 Module + add field](https://discuss.elastic.co/t/filebeat-apache2-module-add-field/96747)
**Author:** [@Globule](https://discuss.elastic.co/u/Globule)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 8:38pm UTC](https://discuss.elastic.co/t/filebeat-apache2-module-add-field/96747 "2017-08-15T20:38:44Z")
Hello, I try to add a field with vhost name. Actually, the filebeat module apache2 work but it dosen’t show the vhost name. My apache log looks like this: www.foo.com:443 37.34.55.121 - - \[11/Aug/2017:12:07:53 +0200\] … --- ## [Action \[cluster:monitor/main\] is unauthorized for user](https://discuss.elastic.co/t/action-cluster-monitor-main-is-unauthorized-for-user/119074)
**Author:** [@Turbo\_Fredriksson](https://discuss.elastic.co/u/Turbo_Fredriksson)\ **Replies:** 3\ **Last updated:** [February 9, 2018, 9:02pm UTC](https://discuss.elastic.co/t/action-cluster-monitor-main-is-unauthorized-for-user/119074 "2018-02-09T21:02:21Z")
I'm trying to setup X-Pack (on ES v5.1.1 - can't upgrade yet) using the Puppet module (https://github.com/elastic/puppet-elasticsearch/tree/5.x#advanced-features), but I'm having problem with authentication... I've crea… --- ## [Log File Retention Settings](https://discuss.elastic.co/t/log-file-retention-settings/33160)
**Author:** [@zylo47](https://discuss.elastic.co/u/zylo47)\ **Replies:** 3\ **Last updated:** [October 29, 2015, 5:00pm UTC](https://discuss.elastic.co/t/log-file-retention-settings/33160 "2015-10-29T17:00:58Z")
Our Elasticsearch cluster seems to be generating new log files every day and retaining them indefinitely. I found this post explaining that to fix this I should be adding maxBackupIndex to my logging.yml files. https:… --- ## [HSTS configuration for ElasticSearch](https://discuss.elastic.co/t/hsts-configuration-for-elasticsearch/260304)
**Author:** [@Ravi\_GH](https://discuss.elastic.co/u/Ravi_GH)\ **Replies:** 1\ **Last updated:** [January 7, 2021, 12:13am UTC](https://discuss.elastic.co/t/hsts-configuration-for-elasticsearch/260304 "2021-01-07T00:13:20Z")
We have HSTS vulnerability for Elasticsearch server (v7.5.2 & v6.8.6) as mentioned @ https://www.tenable.com/plugins/nessus/142960 How to enable HSTS for the elasticsearch server. --- ## [Parse Failure Failed to parse source](https://discuss.elastic.co/t/parse-failure-failed-to-parse-source/32760)
**Author:** [@Erik\_Parienty](https://discuss.elastic.co/u/Erik_Parienty)\ **Replies:** 6\ **Last updated:** [October 22, 2015, 10:32am UTC](https://discuss.elastic.co/t/parse-failure-failed-to-parse-source/32760 "2015-10-22T10:32:05Z")
When i try to search kibana i see errors in the log and i cant find a sulotion this is the logs \[2015-10-22 08:58:01,352\]\[DEBUG\]\[action.search.type \] \[\*\*\*\*\*\*\*\] \[logstash-2015.09.13\]\[0\], node\[mVSbQ\_KdTL-X-tMUepT… --- ## [This node does not have the remote\_cluster\_client role](https://discuss.elastic.co/t/this-node-does-not-have-the-remote-cluster-client-role/266294)
**Author:** [@dylan0911](https://discuss.elastic.co/u/dylan0911)\ **Replies:** 3\ **Last updated:** [March 12, 2021, 9:01pm UTC](https://discuss.elastic.co/t/this-node-does-not-have-the-remote-cluster-client-role/266294 "2021-03-12T21:01:53Z")
Hi all, Been going through the doc, the topics and github. Can't seem to find an answer tho this one. I have 2 clusters running in 2 different regions and wanted to test CCR. Both of them are running on 7.11.1. I was a… --- ## [How to get the free version license.json?](https://discuss.elastic.co/t/how-to-get-the-free-version-license-json/71562)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 7\ **Last updated:** [January 19, 2017, 10:44am UTC](https://discuss.elastic.co/t/how-to-get-the-free-version-license-json/71562 "2017-01-19T10:44:17Z")
Currently I am using trial license, how can I get the free version license.json so that I can update it? --- ## [How to filter events based on certain string?](https://discuss.elastic.co/t/how-to-filter-events-based-on-certain-string/127190)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 8\ **Last updated:** [April 9, 2018, 3:29pm UTC](https://discuss.elastic.co/t/how-to-filter-events-based-on-certain-string/127190 "2018-04-09T15:29:03Z")
Hi, I am trying to filter out events if it contains either source\_type=\\”APP/PROC/WEB\\” or source\_type=APP in the event. Can someone please help me on this? Thanks --- ## [Filebeat losing logs](https://discuss.elastic.co/t/filebeat-losing-logs/275501)
**Author:** [@devopscanada](https://discuss.elastic.co/u/devopscanada)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 9:38pm UTC](https://discuss.elastic.co/t/filebeat-losing-logs/275501 "2021-06-09T21:38:53Z")
Hello, see this question for context. I'm running filebeat 7.13.1 in Kubernetes (GKE) with this running configuration: kubectl exec filebeat-filebeat-2rmhh -- filebeat export config filebeat: inputs: - paths: -… --- ## [Kibana 5.2, How to set "searchable" or "aggregatable"](https://discuss.elastic.co/t/kibana-5-2-how-to-set-searchable-or-aggregatable/74810)
**Author:** [@allegro](https://discuss.elastic.co/u/allegro)\ **Replies:** 4\ **Last updated:** [February 13, 2017, 3:57pm UTC](https://discuss.elastic.co/t/kibana-5-2-how-to-set-searchable-or-aggregatable/74810 "2017-02-13T15:57:11Z")
Hi, I'm using Elasticsearch 5.2 and Kibana 5.2 on macOS 10.12.3. After the mapping api as below on kibana console on developping Tools menu, searchable and aggregatable menus on any field on this index wont be checked.… --- ## [Getting 404 Not Found error while sending data to Elasticsearch via port 80](https://discuss.elastic.co/t/getting-404-not-found-error-while-sending-data-to-elasticsearch-via-port-80/135752)
**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\ **Replies:** 8\ **Last updated:** [June 13, 2018, 5:27pm UTC](https://discuss.elastic.co/t/getting-404-not-found-error-while-sending-data-to-elasticsearch-via-port-80/135752 "2018-06-13T17:27:36Z")
Hi, I have installed elasticsearch and Kibana in my local (centOS) system. I am using default port for elasticsearch(9200) and kibana(5601) . My requirement is to send data from another server to my local server using… --- ## [ELK Stack vs Splunk for Your Advise?](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716)
**Author:** [@Henry\_Pan](https://discuss.elastic.co/u/Henry_Pan)\ **Replies:** 8\ **Last updated:** [March 11, 2016, 4:19pm UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716 "2016-03-11T16:19:26Z")
Would you please share your take on Splunk vs ELK Stack? Thanks in advance + Happy Labor Day w/e – Henry --- ## [How can I start automatic Logstash? (SOLVED)](https://discuss.elastic.co/t/how-can-i-start-automatic-logstash-solved/28638)
**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\ **Replies:** 4\ **Last updated:** [September 5, 2015, 12:05pm UTC](https://discuss.elastic.co/t/how-can-i-start-automatic-logstash-solved/28638 "2015-09-05T12:05:25Z")
Hi, I was wondering how can I put logstash to start automatic when it boots up I have had no luck on putting it as a daemon maybe as service? Operating system Lubuntu Every time Lubuntu restarts I have to run the comma… --- ## [Using regex in kibana filters](https://discuss.elastic.co/t/using-regex-in-kibana-filters/232704)
**Author:** [@sravan](https://discuss.elastic.co/u/sravan)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 11:08pm UTC](https://discuss.elastic.co/t/using-regex-in-kibana-filters/232704 "2020-06-04T23:08:32Z")
I am trying to validate a field against a regular expression (regex). but its not validating. I have a filed like presentation number ( which is text field) and I would like to filter this filed only that starts with 0-… --- ## [Splainer: The Elasticsearch Relevance Sandbox that Tells you Why](https://discuss.elastic.co/t/splainer-the-elasticsearch-relevance-sandbox-that-tells-you-why/49089)
**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\ **Replies:** 1\ **Last updated:** [June 10, 2016, 11:19am UTC](https://discuss.elastic.co/t/splainer-the-elasticsearch-relevance-sandbox-that-tells-you-why/49089 "2016-06-10T11:19:49Z")
Some of you from the Solr community may know about Splainer. Well Splainer now supports Elasticsearch! What's Splainer? Splainer is a relevance sandbox. It doesn't just parse the relevance explain, it tells you why. I… --- ## [Some considerations about Kibana 7.11](https://discuss.elastic.co/t/some-considerations-about-kibana-7-11/268099)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 2:40pm UTC](https://discuss.elastic.co/t/some-considerations-about-kibana-7-11/268099 "2021-03-23T14:40:15Z")
Hello, We updated to Elastic 7.11.2 last week and I need to tell you about some functionalities that are sub-optimal.. We can no longer right-click on a lot of stuff... Not on dashboard right click open in another pag… --- ## [How to check the total number of data over 10,000?](https://discuss.elastic.co/t/how-to-check-the-total-number-of-data-over-10-000/296799)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 2\ **Last updated:** [February 10, 2022, 7:26am UTC](https://discuss.elastic.co/t/how-to-check-the-total-number-of-data-over-10-000/296799 "2022-02-10T07:26:00Z")
Hello friends There are more than 1 million docs in the index. At this time, when information is obtained through match\_all, the total value is displayed as 10,000. How can I check the number of doc? I know that more… --- ## [Lucene hates UUID v4. A real issue or a myth?](https://discuss.elastic.co/t/lucene-hates-uuid-v4-a-real-issue-or-a-myth/37066)
**Author:** [@gmack](https://discuss.elastic.co/u/gmack)\ **Replies:** 4\ **Last updated:** [December 13, 2015, 6:22pm UTC](https://discuss.elastic.co/t/lucene-hates-uuid-v4-a-real-issue-or-a-myth/37066 "2015-12-13T18:22:23Z")
Background: we've been working on a new ES install, happily bulk indexing data from a DB, and then from an upstream JSON API. The documents all have integer IDs, which makes POST/GET updates simple. Last week, the up… --- ## [Uid/gid error on install](https://discuss.elastic.co/t/uid-gid-error-on-install/142633)
**Author:** [@Archness](https://discuss.elastic.co/u/Archness)\ **Replies:** 7\ **Last updated:** [August 1, 2018, 8:26pm UTC](https://discuss.elastic.co/t/uid-gid-error-on-install/142633 "2018-08-01T20:26:42Z")
I'm stuck installing the ece due to the following error: elastic@ece1:~$ sudo bash elastic-cloud-enterprise.sh install The UID or GID must not be smaller than 1000. I have posted my "id" output below as well. elastic@… --- ## [Adding a normalizer for case-insensitive search on keyword field to an active index](https://discuss.elastic.co/t/adding-a-normalizer-for-case-insensitive-search-on-keyword-field-to-an-active-index/106725)
**Author:** [@gansvv](https://discuss.elastic.co/u/gansvv)\ **Replies:** 3\ **Last updated:** [November 9, 2017, 11:07pm UTC](https://discuss.elastic.co/t/adding-a-normalizer-for-case-insensitive-search-on-keyword-field-to-an-active-index/106725 "2017-11-09T23:07:16Z")
I have an active ES index and would like to make searches on it case-insensitive. The indexes are being created dynamically and are actively used. The fields are of "keyword" type. I saw that normalizer is the way to low… --- ## [Ontology with ElasticSearch](https://discuss.elastic.co/t/ontology-with-elasticsearch/123760)
**Author:** [@Aurelio1908](https://discuss.elastic.co/u/Aurelio1908)\ **Replies:** 3\ **Last updated:** [March 15, 2018, 9:04am UTC](https://discuss.elastic.co/t/ontology-with-elasticsearch/123760 "2018-03-15T09:04:32Z")
Hi all, how i can integrate an ontology in elasticSearch? I would like to retrieve all documents contains word "iphone" when i search "smartphone" without specifying them as synonyms, could someone help me? --- ## [How to backup/restore searches and dashboards](https://discuss.elastic.co/t/how-to-backup-restore-searches-and-dashboards/69223)
**Author:** [@markd](https://discuss.elastic.co/u/markd)\ **Replies:** 5\ **Last updated:** [December 16, 2016, 5:15pm UTC](https://discuss.elastic.co/t/how-to-backup-restore-searches-and-dashboards/69223 "2016-12-16T17:15:05Z")
Hi, a cup of coffee and a doughnut if you explain how to "backup/restore" searches and dashboard selectively or all at once. Thanks! MarkD:-) --- ## [JDBC and tracking\_column(s) questions](https://discuss.elastic.co/t/jdbc-and-tracking-column-s-questions/51997)
**Author:** [@ron.west](https://discuss.elastic.co/u/ron.west)\ **Replies:** 1\ **Last updated:** [June 8, 2016, 6:49pm UTC](https://discuss.elastic.co/t/jdbc-and-tracking-column-s-questions/51997 "2016-06-08T18:49:09Z")
I have 2 questions about the jdbc and tracking columns that my google foo isn't coming up with a good answer for. https://www.elastic.co/guide/en/logstash/current/plugins-inputs-jdbc.html (my source server is a sql s… --- ## [Hardware requirements for Elasticsearch 6.3.1](https://discuss.elastic.co/t/hardware-requirements-for-elasticsearch-6-3-1/140919)
**Author:** [@adrwer](https://discuss.elastic.co/u/adrwer)\ **Replies:** 6\ **Last updated:** [July 21, 2018, 4:12pm UTC](https://discuss.elastic.co/t/hardware-requirements-for-elasticsearch-6-3-1/140919 "2018-07-21T16:12:40Z")
I'm new to elasticsearch and I've installed the .tar.gz package on a Rhel7.5 instance on Amazon Web Services with a RAM of 1GB and volume of 10GB but when I run it with this command "./bin/elasticsearch" I get this erro… --- ## [TTL gone in 5.0 -OMG](https://discuss.elastic.co/t/ttl-gone-in-5-0-omg/93028)
**Author:** [@PeterC](https://discuss.elastic.co/u/PeterC)\ **Replies:** 5\ **Last updated:** [July 24, 2017, 10:37am UTC](https://discuss.elastic.co/t/ttl-gone-in-5-0-omg/93028 "2017-07-24T10:37:57Z")
Just set up ES for a new client to discover TTL is gone. OMG why? I had this working fine for 200m docs per day on a 3 mode cluster.. it is/was one of teh best features of ES, especially if yoou dont use Log based indexe… --- ## [Request timeout after 30000ms - should I set a higher value?](https://discuss.elastic.co/t/request-timeout-after-30000ms-should-i-set-a-higher-value/149370)
**Author:** [@popa](https://discuss.elastic.co/u/popa)\ **Replies:** 1\ **Last updated:** [September 26, 2018, 1:29am UTC](https://discuss.elastic.co/t/request-timeout-after-30000ms-should-i-set-a-higher-value/149370 "2018-09-26T01:29:35Z")
I was reading through the following post and had some follow up questions: My issue: When running long time range queries / more complex queries in Kibana, I receive the following error: Fatal Error: Courier fetch: … --- ## [Error: Payload content length greater than maximum allowed](https://discuss.elastic.co/t/error-payload-content-length-greater-than-maximum-allowed/121498)
**Author:** [@T3rm11](https://discuss.elastic.co/u/T3rm11)\ **Replies:** 1\ **Last updated:** [February 27, 2018, 8:17pm UTC](https://discuss.elastic.co/t/error-payload-content-length-greater-than-maximum-allowed/121498 "2018-02-27T20:17:05Z")
I just updated from Kibana 5.4.3 to 6.1.3. It asks me to set a default index pattern. As soon as I click on one of my index patterns I get the following error: Error: Payload content length greater than maximum allowed:… --- ## [Runtime Fields with subnested fields](https://discuss.elastic.co/t/runtime-fields-with-subnested-fields/287218)
**Author:** [@rreverol](https://discuss.elastic.co/u/rreverol)\ **Replies:** 0\ **Last updated:** [October 20, 2021, 3:44pm UTC](https://discuss.elastic.co/t/runtime-fields-with-subnested-fields/287218 "2021-10-20T15:44:21Z")
I have the following doc mapping { "mappings": { "security": { "properties": { "id": { "type": "keyword" }, "trades": { "type": "nested", "properties": {… --- ## [Change logstash logs and temp location](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494)
**Author:** [@karasmeitar](https://discuss.elastic.co/u/karasmeitar)\ **Replies:** 5\ **Last updated:** [June 28, 2015, 7:09am UTC](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494 "2015-06-28T07:09:23Z")
Hi all, I install logstash on ubunto as a service and i want to change the logs location and the location of the temp folder(were logsrash save the files before execute). How can i do it? --- ## [Painless scripting JSON functions](https://discuss.elastic.co/t/painless-scripting-json-functions/98511)
**Author:** [@HDB](https://discuss.elastic.co/u/HDB)\ **Replies:** 5\ **Last updated:** [August 31, 2017, 6:49pm UTC](https://discuss.elastic.co/t/painless-scripting-json-functions/98511 "2017-08-31T18:49:53Z")
In Painless scripting how can I do JSON.parse and JSON.stringify? I have kept JSON data in the single string field, but now I want to delete some of the fields. So I will be needing JSON functions. --- ## [Index max\_result\_window](https://discuss.elastic.co/t/index-max-result-window/38388)
**Author:** [@bevans88](https://discuss.elastic.co/u/bevans88)\ **Replies:** 6\ **Last updated:** [April 12, 2016, 4:40am UTC](https://discuss.elastic.co/t/index-max-result-window/38388 "2016-04-12T04:40:01Z")
Hi, After upgrading to ES 2.1 I've noticed that the max\_result\_window now defaults to 10000 and throws an exception if it's exceeded. I understand the reasons behind this and was wondering if there is any other way to … --- ## [How To Output to Amazon Elasticsearch Service](https://discuss.elastic.co/t/how-to-output-to-amazon-elasticsearch-service/101247)
**Author:** [@mdanner](https://discuss.elastic.co/u/mdanner)\ **Replies:** 5\ **Last updated:** [September 28, 2017, 8:06pm UTC](https://discuss.elastic.co/t/how-to-output-to-amazon-elasticsearch-service/101247 "2017-09-28T20:06:13Z")
Hello, I'm setting up my first ELK stack on AWS. I installed Logstash 5.6.0 on an EC2 instance running Ubuntu 16.04.3 LTS. It was installed using the instructions for Debian/RPM. The input side of things is running fine… --- ## [Empty certificate chain after upgrading from ES 7.8.1 to ES 7.9.2](https://discuss.elastic.co/t/empty-certificate-chain-after-upgrading-from-es-7-8-1-to-es-7-9-2/250145)
**Author:** [@Nicolas\_Labrot](https://discuss.elastic.co/u/Nicolas_Labrot)\ **Replies:** 7\ **Last updated:** [October 14, 2020, 8:50am UTC](https://discuss.elastic.co/t/empty-certificate-chain-after-upgrading-from-es-7-8-1-to-es-7-9-2/250145 "2020-10-14T08:50:43Z")
Hello, After the upgrade from ES 7.8.1 to ES 7.9.2, Elastic threw in the logs an "empty certificate chain" exception. I was using the following configuration: xpack.security.transport.ssl.keystore.path: /usr/share/ela… --- ## [Elasticsearch case insensitive to not\_analyzed index](https://discuss.elastic.co/t/elasticsearch-case-insensitive-to-not-analyzed-index/52979)
**Author:** [@tarlok](https://discuss.elastic.co/u/tarlok)\ **Replies:** 7\ **Last updated:** [June 17, 2016, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-case-insensitive-to-not-analyzed-index/52979 "2016-06-17T07:36:16Z")
Hi, I am using not\_analyzed index for performing exact word search but not\_analyzed index make search case sensitive. I also tried analyzer setting: "settings" : { "index" : { "creation\_date" : "1466… --- ## [Attempted to resurrect connection to dead ES instance](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/300480)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 9:21am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/300480 "2022-03-29T09:21:30Z")
Am I missing something? I am trying to send in a basic tryout some logs from a Server with Filebeat, via Logstash to Elasticsearch. I am getting the data from Beats in Logstash. But Logstash is giving me following messag… --- ## [Shipping logs via Proxy with Logstash](https://discuss.elastic.co/t/shipping-logs-via-proxy-with-logstash/24723)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 8\ **Last updated:** [May 24, 2017, 2:12am UTC](https://discuss.elastic.co/t/shipping-logs-via-proxy-with-logstash/24723 "2017-05-24T02:12:34Z")
Hi, How do I tell Logstash to ship logs via a proxy? I searched and searched, but could not find any documentation about shipping via a proxy. Maybe sending data through proxy is simply not supported at this time? T… --- ## [How can I insert JSON data directly elastic search using curl command?](https://discuss.elastic.co/t/how-can-i-insert-json-data-directly-elastic-search-using-curl-command/90400)
**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 3\ **Last updated:** [June 23, 2017, 6:57am UTC](https://discuss.elastic.co/t/how-can-i-insert-json-data-directly-elastic-search-using-curl-command/90400 "2017-06-23T06:57:46Z")
I want to insert JSON data into elastic search directly using curl command data I am getting from one of the web service --- ## [Cannot allocate because allocation is not permitted to any of the nodes](https://discuss.elastic.co/t/cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes/91096)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 5\ **Last updated:** [June 28, 2017, 4:22pm UTC](https://discuss.elastic.co/t/cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes/91096 "2017-06-28T16:22:18Z")
Hi all i have a 5 node cluster where 3 nodes are data nodes, 1 is master and 1 is client node on this cluster i have created a snapshot for particular index and when i tried to restore that snapshot on same cluster th… --- ## [Bool Queries and MUST/SHOULD combinations](https://discuss.elastic.co/t/bool-queries-and-must-should-combinations/20531)
**Author:** [@kazoompa\_3](https://discuss.elastic.co/u/kazoompa_3)\ **Replies:** 4\ **Last updated:** [November 6, 2014, 2:52am UTC](https://discuss.elastic.co/t/bool-queries-and-must-should-combinations/20531 "2014-11-06T02:52:50Z")
Hi, Below is my data and the two queries that I tested, first one failing and the latter working. I start to believe that if one wants to combine several SHOULD and MUST filters, the outer one must always be SHOUL… --- ## [Update Loading Wikipedia Guide](https://discuss.elastic.co/t/update-loading-wikipedia-guide/99911)
**Author:** [@Palisand](https://discuss.elastic.co/u/Palisand)\ **Replies:** 2\ **Last updated:** [September 9, 2017, 4:32pm UTC](https://discuss.elastic.co/t/update-loading-wikipedia-guide/99911 "2017-09-09T16:32:17Z")
UPDATE: I managed to create the index; see my UPDATEs in my response below. Loading Wikipedia's Search Index For Testing was posted in early 2016. I have been trying (and failing) to load the Wikipedia search index whil… --- ## [Master not discovered or elected yet, an election requires a node with id](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id/186704)
**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\ **Replies:** 8\ **Last updated:** [June 24, 2019, 7:04am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id/186704 "2019-06-24T07:04:19Z")
Hi, version: 7.0.1 I have 2 nodes in my local with the following configuration: First one yml details : node.max\_local\_storage\_nodes: 10 node.name: node-1 node.data: true node.master: true transport.tcp.port: 930… --- ## [\[Marvel\] What does the Search Rate mean?](https://discuss.elastic.co/t/marvel-what-does-the-search-rate-mean/35260)
**Author:** [@Richard\_Leonard](https://discuss.elastic.co/u/Richard_Leonard)\ **Replies:** 7\ **Last updated:** [April 8, 2016, 2:28am UTC](https://discuss.elastic.co/t/marvel-what-does-the-search-rate-mean/35260 "2016-04-08T02:28:14Z")
I am quite confused about this graph shown in marvel... Actually, I don't know which one the Search Rate refers to (considering I have 5 shards, 1 replica, totally 10 shards saved on 2 machines) if I triggered 100 SE… --- ## [X-Pack is not supported and Machine Learning is not available for \[windows-x86\]](https://discuss.elastic.co/t/x-pack-is-not-supported-and-machine-learning-is-not-available-for-windows-x86/85084)
**Author:** [@P\_Charpentier](https://discuss.elastic.co/u/P_Charpentier)\ **Replies:** 4\ **Last updated:** [May 9, 2017, 3:25pm UTC](https://discuss.elastic.co/t/x-pack-is-not-supported-and-machine-learning-is-not-available-for-windows-x86/85084 "2017-05-09T15:25:00Z")
Hi, I'm trying ELK 5.4 on Windows but I have a problem with X-Pack and Machine Learning. When I start Elasticsearch, I have an exception : \[2017-05-09T14:09:59,381\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\]… --- ## [How to find the port where kibana is running?](https://discuss.elastic.co/t/how-to-find-the-port-where-kibana-is-running/230769)
**Author:** [@Pradeep\_Sanjeewa](https://discuss.elastic.co/u/Pradeep_Sanjeewa)\ **Replies:** 4\ **Last updated:** [May 3, 2020, 9:09pm UTC](https://discuss.elastic.co/t/how-to-find-the-port-where-kibana-is-running/230769 "2020-05-03T21:09:33Z")
I have Elastic Stack set up in on-prem servers. It is runnnig fine and querying data is possible without any issue. How can I find the port where kibana is running? --- ## [\[SOLVED\] Grok and split fields](https://discuss.elastic.co/t/solved-grok-and-split-fields/61010)
**Author:** [@Romain\_PZK](https://discuss.elastic.co/u/Romain_PZK)\ **Replies:** 4\ **Last updated:** [September 21, 2016, 12:26pm UTC](https://discuss.elastic.co/t/solved-grok-and-split-fields/61010 "2016-09-21T12:26:33Z")
Hello, I want to put logs from a Fortigate firewall into elasticsearch. My fortigate sends logs to my syslog-ng, and logstash reads the log file. I use a grok to parse my log, but I don't understand how to split the "m… [Previous page](https://discuss.elastic.co/top.md?page=292&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=294&per_page=50&period=all)