# Top

**URL:** https://discuss.elastic.co/top.md?page=297&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 298

---

## [Multiple values match query in Update by query](https://discuss.elastic.co/t/multiple-values-match-query-in-update-by-query/262757)

<div class="topic-metadata">

**Author:** [@sarvendras](https://discuss.elastic.co/u/sarvendras)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 5:16pm UTC](https://discuss.elastic.co/t/multiple-values-match-query-in-update-by-query/262757 "2021-01-31T17:16:30Z")

</div>

Hi All, I have to update one field based on match of multiple values of a field.I want to update field amt as 9000 based on query of multiple values of RRN but multiple values are not supported and giving error. Is the…

---

## [Unable to connect remothly to elasticsearch 5.1.1](https://discuss.elastic.co/t/unable-to-connect-remothly-to-elasticsearch-5-1-1/71108)

<div class="topic-metadata">

**Author:** [@yoavb](https://discuss.elastic.co/u/yoavb)\
**Replies:** 1\
**Last updated:** [January 10, 2017, 4:23pm UTC](https://discuss.elastic.co/t/unable-to-connect-remothly-to-elasticsearch-5-1-1/71108 "2017-01-10T16:23:34Z")

</div>

Hello, I have successfully installed ELK version 5.1.1 The Elastic , kibana and logstash are up and running #service elasticsearch start Starting elasticsearch: \[ OK \] # curl -XGET 'localhost:9200/?pretty' { "na…

---

## [Filebeat file-god stopped and No modules or prospectors enabled and configuration reloading disabled](https://discuss.elastic.co/t/filebeat-file-god-stopped-and-no-modules-or-prospectors-enabled-and-configuration-reloading-disabled/129145)

<div class="topic-metadata">

**Author:** [@caoimhe](https://discuss.elastic.co/u/caoimhe)\
**Replies:** 6\
**Last updated:** [April 25, 2018, 9:08am UTC](https://discuss.elastic.co/t/filebeat-file-god-stopped-and-no-modules-or-prospectors-enabled-and-configuration-reloading-disabled/129145 "2018-04-25T09:08:26Z")

</div>

Service featbeat start exits with message "Exiting: No modules or prospectors enabled and configuration reloading disabled. What files do you want me to watch?" Service filebeat status returns filebeat-god has stopped. …

---

## [Best way to add a new field in existing index](https://discuss.elastic.co/t/best-way-to-add-a-new-field-in-existing-index/175314)

<div class="topic-metadata">

**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\
**Replies:** 3\
**Last updated:** [April 5, 2019, 8:40am UTC](https://discuss.elastic.co/t/best-way-to-add-a-new-field-in-existing-index/175314 "2019-04-05T08:40:57Z")

</div>

My scenario is that I have 5 fields in an existing index "emp\_data" in elasticsearch. One of these field is employee\_name. I have to add two new sixth & seventh fields "department", "company" to which this employee belon…

---

## [Ignoring the 'pipelines.yml' file because modules or command line options are specified - RPM](https://discuss.elastic.co/t/ignoring-the-pipelines-yml-file-because-modules-or-command-line-options-are-specified-rpm/183795)

<div class="topic-metadata">

**Author:** [@Bhargav\_Ram\_Reddy](https://discuss.elastic.co/u/Bhargav_Ram_Reddy)\
**Replies:** 5\
**Last updated:** [May 31, 2019, 11:02pm UTC](https://discuss.elastic.co/t/ignoring-the-pipelines-yml-file-because-modules-or-command-line-options-are-specified-rpm/183795 "2019-05-31T23:02:37Z")

</div>

i have installed logstash through RPM on my ec2 instance and started \< ./logstash --path.settings /etc/logstash/ --path.config /etc/logstash/ /\> but i see below error. Can someone help out here? \[root@ip-10-1-1-133 bi…

---

## [Why should I upgrade to 5.0?](https://discuss.elastic.co/t/why-should-i-upgrade-to-5-0/64597)

<div class="topic-metadata">

**Author:** [@dprao](https://discuss.elastic.co/u/dprao)\
**Replies:** 5\
**Last updated:** [November 1, 2016, 8:57pm UTC](https://discuss.elastic.co/t/why-should-i-upgrade-to-5-0/64597 "2016-11-01T20:57:07Z")

</div>

We have large installation of ES 1.6.0 and are happy with it. Are there any benefits I will be getting of upgrading to V5.0?

---

## [Error on index template creation: "composable template \[...\] template after composition is invalid"](https://discuss.elastic.co/t/error-on-index-template-creation-composable-template-template-after-composition-is-invalid/291076)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 8:07pm UTC](https://discuss.elastic.co/t/error-on-index-template-creation-composable-template-template-after-composition-is-invalid/291076 "2021-12-06T20:07:57Z")

</div>

Subject really says it all. version 7.14 The cluster is new and has just one node for testing and this is the first datastream I have tried to create. One thing that is puzzling me is what does it mean by "composable …

---

## [Receiving the "index\_not\_found\_exception" message](https://discuss.elastic.co/t/receiving-the-index-not-found-exception-message/235467)

<div class="topic-metadata">

**Author:** [@keishi\_suematsu](https://discuss.elastic.co/u/keishi_suematsu)\
**Replies:** 2\
**Last updated:** [June 3, 2020, 6:30am UTC](https://discuss.elastic.co/t/receiving-the-index-not-found-exception-message/235467 "2020-06-03T06:30:59Z")

</div>

When I send a request to Elastic Search, I get the following error. In "index name" is the name of the index I created. { "error" : { "root\_cause" : \[ { "type" : "index\_not\_found\_exception", …

---

## [Elasticsearch exited with code 78](https://discuss.elastic.co/t/elasticsearch-exited-with-code-78/181247)

<div class="topic-metadata">

**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-exited-with-code-78/181247 "2019-05-15T17:33:58Z")

</div>

I run the docker-compose up the code I downloaded from repo now I get the error exited with 78. ERROR: \[1\] bootstrap checks failed elasticsearch | \[1\]: max virtual memory areas vm.max\_map\_count \[65530\] is too low, i…

---

## ["reason": "Invalid index name \[\_watcher\], must not start with '\_'",](https://discuss.elastic.co/t/reason-invalid-index-name--watcher-must-not-start-with--/68568)

<div class="topic-metadata">

**Author:** [@djvidov](https://discuss.elastic.co/u/djvidov)\
**Replies:** 6\
**Last updated:** [December 12, 2016, 2:39pm UTC](https://discuss.elastic.co/t/reason-invalid-index-name--watcher-must-not-start-with--/68568 "2016-12-12T14:39:32Z")

</div>

Hi, I have created an development environment to test Watcher with stack: - Elasticsearch 2.4.2 - Kibana 4.6.3 - Sense 2.0.0-beta7 - licence 2.4.2 - Watcher 2.4.2 For watcher I follow this steps: https://www.elastic.co…

---

## [How to drop a message](https://discuss.elastic.co/t/how-to-drop-a-message/69548)

<div class="topic-metadata">

**Author:** [@houfan](https://discuss.elastic.co/u/houfan)\
**Replies:** 8\
**Last updated:** [December 21, 2016, 8:31am UTC](https://discuss.elastic.co/t/how-to-drop-a-message/69548 "2016-12-21T08:31:34Z")

</div>

the logstash give me three message: "message" =\> "# administrator command: Prepare;" "message" =\> "# User@Host: gcenter\[gcenter\] @ \[192.168.168.100\] Id: 4882345700\\n# Schema: gcenter Last\_errno: 0 Killed: 0\\n# Q…

---

## [How can I Exclude indices from elasticsearch snapshots](https://discuss.elastic.co/t/how-can-i-exclude-indices-from-elasticsearch-snapshots/184317)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 5\
**Last updated:** [June 5, 2019, 10:04am UTC](https://discuss.elastic.co/t/how-can-i-exclude-indices-from-elasticsearch-snapshots/184317 "2019-06-05T10:04:30Z")

</div>

I need to exclude a few indices from an elastic snapshot, in the documentation for snapshots , they mention you can include what indices you need, but I need it another way around because I need to snapshot all indices e…

---

## [Random sorting](https://discuss.elastic.co/t/random-sorting/5795)

<div class="topic-metadata">

**Author:** [@1114](https://discuss.elastic.co/u/1114)\
**Replies:** 7\
**Last updated:** [December 14, 2011, 5:24pm UTC](https://discuss.elastic.co/t/random-sorting/5795 "2011-12-14T17:24:14Z")

</div>

Hello! Is it possible to set up sorting to return items at random based on one of the field? Something like : { "sort" : { { "post\_date" : {"order" : "RANDOM"} }, "user" : { }, "…

---

## [Read data from Elasticsearh into Tableau](https://discuss.elastic.co/t/read-data-from-elasticsearh-into-tableau/92123)

<div class="topic-metadata">

**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\
**Replies:** 3\
**Last updated:** [August 8, 2017, 3:29am UTC](https://discuss.elastic.co/t/read-data-from-elasticsearh-into-tableau/92123 "2017-08-08T03:29:38Z")

</div>

I was looking for how to connect elasticsearch with Tableau? Thanks

---

## [Rest Client listener timeout after waiting for \[30000\] ms](https://discuss.elastic.co/t/rest-client-listener-timeout-after-waiting-for-30000-ms/101326)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 5\
**Last updated:** [September 25, 2017, 6:35am UTC](https://discuss.elastic.co/t/rest-client-listener-timeout-after-waiting-for-30000-ms/101326 "2017-09-25T06:35:39Z")

</div>

I am using RestClient bulk api to push excel data to elasticsearch but I am getting listener timeout after waiting for \[30000\] ms. my jar version are httpasyncclient-4.1.2.jar httpclient-4.5.2.jar httpcore-4.4.5.jar …

---

## [What is the fastest way to index 1 Billion Documents into ES](https://discuss.elastic.co/t/what-is-the-fastest-way-to-index-1-billion-documents-into-es/43593)

<div class="topic-metadata">

**Author:** [@Aravindh\_S](https://discuss.elastic.co/u/Aravindh_S)\
**Replies:** 6\
**Last updated:** [March 7, 2016, 11:29am UTC](https://discuss.elastic.co/t/what-is-the-fastest-way-to-index-1-billion-documents-into-es/43593 "2016-03-07T11:29:07Z")

</div>

For a sample document of my requirement, it take 250 seconds to index 1 million docs in my mac (8GB Ram, 512GB HDD).I use java bulk processor API. Leaving aside the hardware, what is the fastest way that I can index 1 B…

---

## [How can I filter with multiple condition in aggregation bucket?](https://discuss.elastic.co/t/how-can-i-filter-with-multiple-condition-in-aggregation-bucket/189883)

<div class="topic-metadata">

**Author:** [@hangu\_choi](https://discuss.elastic.co/u/hangu_choi)\
**Replies:** 4\
**Last updated:** [July 11, 2019, 3:50am UTC](https://discuss.elastic.co/t/how-can-i-filter-with-multiple-condition-in-aggregation-bucket/189883 "2019-07-11T03:50:57Z")

</div>

I want agg bucket which filtered multiple condition like below. but It is returning Expected \[START\_OBJECT\] error {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"Expected \[START\_OBJECT\] under \[filter\], …

---

## [Nginx on ES/Kibana machine](https://discuss.elastic.co/t/nginx-on-es-kibana-machine/123168)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 0\
**Last updated:** [March 9, 2018, 12:30am UTC](https://discuss.elastic.co/t/nginx-on-es-kibana-machine/123168 "2018-03-09T00:30:26Z")

</div>

Hi guys, I've been trying every combination to make this work and after many hours, I've come here to post my config for anyone in the future because it was hard to find any documentation about it. I'm setting up nginx…

---

## [Kibana showing status error red](https://discuss.elastic.co/t/kibana-showing-status-error-red/70467)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 7\
**Last updated:** [January 7, 2017, 2:21am UTC](https://discuss.elastic.co/t/kibana-showing-status-error-red/70467 "2017-01-07T02:21:58Z")

</div>

Hi, I am using Kibana version 4.6.3. ES version 2.4.3 I have a twitter index and another index called logdev for a different application. Each of the logdev indices have 63.5Mi data each day starting 12.15.2016 to 12.…

---

## [AccessDeniedException when trying to startup ElasticSearch](https://discuss.elastic.co/t/accessdeniedexception-when-trying-to-startup-elasticsearch/174484)

<div class="topic-metadata">

**Author:** [@ordner](https://discuss.elastic.co/u/ordner)\
**Replies:** 4\
**Last updated:** [March 29, 2019, 9:27am UTC](https://discuss.elastic.co/t/accessdeniedexception-when-trying-to-startup-elasticsearch/174484 "2019-03-29T09:27:54Z")

</div>

I am following this tutorial here: https://www.elastic.co/blog/elasticsearch-security-configure-tls-ssl-pki-authentication After generating the certs and moving them to config/certs and adding this to elasticsearch.yml: …

---

## [Grouping and displaying of results?](https://discuss.elastic.co/t/grouping-and-displaying-of-results/27400)

<div class="topic-metadata">

**Author:** [@tarunsapra](https://discuss.elastic.co/u/tarunsapra)\
**Replies:** 4\
**Last updated:** [February 16, 2016, 11:20pm UTC](https://discuss.elastic.co/t/grouping-and-displaying-of-results/27400 "2016-02-16T23:20:18Z")

</div>

Hi , Is it possible to group and display results in Kibana? For example - I am generating a Bar chart of Top 10 destinations, now I want to group these 10 destinations into 3 groups - Most popular, popular and season…

---

## [How to calculate the timestamp difference between two actions?](https://discuss.elastic.co/t/how-to-calculate-the-timestamp-difference-between-two-actions/133310)

<div class="topic-metadata">

**Author:** [@maedamaeda](https://discuss.elastic.co/u/maedamaeda)\
**Replies:** 3\
**Last updated:** [June 8, 2018, 5:47pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-timestamp-difference-between-two-actions/133310 "2018-06-08T17:47:16Z")

</div>

Hello, I'd like to calculate the timestamp difference between two actions. But I can't find a way to do it. Log example is below. @timestamp action May 20th 2018, 15:41:32.111 login May 21th 2018, 10:39:01.…

---

## [Logstash JDBC input released](https://discuss.elastic.co/t/logstash-jdbc-input-released/26027)

<div class="topic-metadata">

**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Replies:** 1\
**Last updated:** [July 22, 2015, 4:57am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-released/26027 "2015-07-22T04:57:54Z")

</div>

We are pleased to announce the first release of Logstash JDBC Input Plugin. This plugin brings the functionality of importing data from your favorite database into Logstash and output to any of the numerous output plu…

---

## [How to join fields from multi events into single event?](https://discuss.elastic.co/t/how-to-join-fields-from-multi-events-into-single-event/106364)

<div class="topic-metadata">

**Author:** [@djgerhab](https://discuss.elastic.co/u/djgerhab)\
**Replies:** 4\
**Last updated:** [November 10, 2017, 8:48pm UTC](https://discuss.elastic.co/t/how-to-join-fields-from-multi-events-into-single-event/106364 "2017-11-10T20:48:13Z")

</div>

Hi, I feel like my issue should be a common one, however I have spent days trying to find the answer to no avail... Here is what I am trying to accomplish: I have data from 2 separate databases that share a common prima…

---

## [Failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure/134330)

<div class="topic-metadata">

**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\
**Replies:** 7\
**Last updated:** [June 19, 2018, 6:00am UTC](https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure/134330 "2018-06-19T06:00:33Z")

</div>

I get the following error ERROR pipeline/output.go:92 c when trying to add the following to the packetbeat.yml processors: include\_fields.fields: \["http.request.body"\] connection to elasticsearch is ok 2018-06-03T…

---

## [How to collect elasticsearch logs in docker](https://discuss.elastic.co/t/how-to-collect-elasticsearch-logs-in-docker/207448)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 2\
**Last updated:** [November 29, 2019, 8:50am UTC](https://discuss.elastic.co/t/how-to-collect-elasticsearch-logs-in-docker/207448 "2019-11-29T08:50:02Z")

</div>

I need to access elasticsearch logs of elasticsearch cluster running within docker containers. Volumes: - /mnt/ssd1/eslog1:/var/log/elasticsearch is not the option , all logs are by default send to stdout and a…

---

## [Welcome Opbeat to the Elastic Family!](https://discuss.elastic.co/t/welcome-opbeat-to-the-elastic-family/90433)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [June 22, 2017, 10:39am UTC](https://discuss.elastic.co/t/welcome-opbeat-to-the-elastic-family/90433 "2017-06-22T10:39:05Z")

</div>

We are super excited to announce today that Elastic is joining forces with Opbeat, an application performance monitoring (APM) company. Opbeat has built a highly curated application-level monitoring experience, focusin…

---

## [PHP APM Agent and Laravel Support](https://discuss.elastic.co/t/php-apm-agent-and-laravel-support/139101)

<div class="topic-metadata">

**Author:** [@philkra](https://discuss.elastic.co/u/philkra)\
**Replies:** 4\
**Last updated:** [July 31, 2018, 4:59pm UTC](https://discuss.elastic.co/t/php-apm-agent-and-laravel-support/139101 "2018-07-31T16:59:42Z")

</div>

Hi everyone, I wanted to notify that the latest version of the APM PHP Agent is ready for production use and marked as GA. https://github.com/philkra/elastic-apm-php-agent Furthermore, a Laravel middleware exists which…

---

## [Illegal\_argument\_exception: index.lifecycle.rollover\_alias does not point to index](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-does-not-point-to-index/247089)

<div class="topic-metadata">

**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\
**Replies:** 5\
**Last updated:** [September 3, 2020, 11:50pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-does-not-point-to-index/247089 "2020-09-03T23:50:17Z")

</div>

Hi there, I am getting ILM errors on all of my indexes. For example: illegal\_argument\_exception: index.lifecycle.rollover\_alias \[ucv-voice-events-cube\] does not point to index \[ucv-voice-events-cube-2020.08.28\] In my…

---

## [Custom LABEL of Visualization](https://discuss.elastic.co/t/custom-label-of-visualization/27923)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 3\
**Last updated:** [August 25, 2015, 6:39am UTC](https://discuss.elastic.co/t/custom-label-of-visualization/27923 "2015-08-25T06:39:09Z")

</div>

Hi All, Is it possible custom label of visualization? I am using kibana 4.1 (I found an post, as the post said, it would be support in Kibana 4.1) , I cannot find out how to custom label in Kibana Thanks Jason

---

## [How to use multiple filters and multiple Grok filters](https://discuss.elastic.co/t/how-to-use-multiple-filters-and-multiple-grok-filters/127723)

<div class="topic-metadata">

**Author:** [@rakeshroshan](https://discuss.elastic.co/u/rakeshroshan)\
**Replies:** 4\
**Last updated:** [April 12, 2018, 8:37am UTC](https://discuss.elastic.co/t/how-to-use-multiple-filters-and-multiple-grok-filters/127723 "2018-04-12T08:37:52Z")

</div>

Before adding filter it works fine. But after adding filter, it is not working fine. It is showing an exception. I mentioned that logstash-simple config file below. Actually i want to use multiple grok filter. How t…

---

## [What permissions/roles should I assign to create a read-only Kibana user?](https://discuss.elastic.co/t/what-permissions-roles-should-i-assign-to-create-a-read-only-kibana-user/97108)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 1\
**Last updated:** [August 15, 2017, 2:17pm UTC](https://discuss.elastic.co/t/what-permissions-roles-should-i-assign-to-create-a-read-only-kibana-user/97108 "2017-08-15T14:17:32Z")

</div>

One who can read all my indices, see all my visualisations and dashboards, but not be able to change any visualisations or dashboards? The built-in kibana\_user role doesn’t do it, because that lets the user destroy thin…

---

## [Kibana fleet - Error connecting to package registry](https://discuss.elastic.co/t/kibana-fleet-error-connecting-to-package-registry/257956)

<div class="topic-metadata">

**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\
**Replies:** 7\
**Last updated:** [December 9, 2020, 7:54pm UTC](https://discuss.elastic.co/t/kibana-fleet-error-connecting-to-package-registry/257956 "2020-12-09T19:54:58Z")

</div>

Hi! Did anyone encounter a problem like this? {"type":"log","@timestamp":"2020-12-08T08:52:46Z","tags":\["error","plugins","ingestManager"\],"pid":54293,"message":"Error connecting to package registry: request to https:/…

---

## [Unable to load SSL configuration for Elasticsearch](https://discuss.elastic.co/t/unable-to-load-ssl-configuration-for-elasticsearch/268087)

<div class="topic-metadata">

**Author:** [@runchranda](https://discuss.elastic.co/u/runchranda)\
**Replies:** 4\
**Last updated:** [March 24, 2021, 6:20am UTC](https://discuss.elastic.co/t/unable-to-load-ssl-configuration-for-elasticsearch/268087 "2021-03-24T06:20:57Z")

</div>

Hi, I am trying to Encrypt communications in Elasticsearch between nodes. I refer to this, \[Encrypting communications in Elasticsearch\] (Encrypting communications in Elasticsearch | Elasticsearch Reference \[7.11\] | Ela…

---

## [How to setup a basic authentication for Elasticsearch?](https://discuss.elastic.co/t/how-to-setup-a-basic-authentication-for-elasticsearch/210286)

<div class="topic-metadata">

**Author:** [@amandamlmia14](https://discuss.elastic.co/u/amandamlmia14)\
**Replies:** 4\
**Last updated:** [December 3, 2019, 12:19pm UTC](https://discuss.elastic.co/t/how-to-setup-a-basic-authentication-for-elasticsearch/210286 "2019-12-03T12:19:06Z")

</div>

I have a docker image of elasticsearch, version=7.0.1, I used the command to run the image docker run -d -p 9200:9200 -p 9301:9301 --name elastic\_search -e "discovery.type=single-node" -e "xpack.security.enabled=true" -…

---

## [No mapping found for \[index\]](https://discuss.elastic.co/t/no-mapping-found-for-index/80132)

<div class="topic-metadata">

**Author:** [@manopmk](https://discuss.elastic.co/u/manopmk)\
**Replies:** 7\
**Last updated:** [March 29, 2017, 8:57am UTC](https://discuss.elastic.co/t/no-mapping-found-for-index/80132 "2017-03-29T08:57:46Z")

</div>

in es log org.elasticsearch.search.SearchParseException: \[logstash-2016.10.21\]\[4\]: from\[-1\],size\[500\]: Parse Failure \[Failed to parse source \[{"size":500,"sort":{"tstamp":"asc"},"query":{"filtered":{"query":{"query\_stri…

---

## [How to enable Garbage Collector logging in an elastic search nodes](https://discuss.elastic.co/t/how-to-enable-garbage-collector-logging-in-an-elastic-search-nodes/22487)

<div class="topic-metadata">

**Author:** [@Anil\_Karaka](https://discuss.elastic.co/u/Anil_Karaka)\
**Replies:** 7\
**Last updated:** [April 2, 2015, 11:46pm UTC](https://discuss.elastic.co/t/how-to-enable-garbage-collector-logging-in-an-elastic-search-nodes/22487 "2015-04-02T23:46:12Z")

</div>

Some of the nodes are leaving the cluster from time to time.. I un commented the GC Logging options in elasticsearch.yml file as shown and restarted my node. ################################## GC Logging #####…

---

## [Elasticsearch compare two indices](https://discuss.elastic.co/t/elasticsearch-compare-two-indices/126181)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 7\
**Last updated:** [April 24, 2018, 12:12pm UTC](https://discuss.elastic.co/t/elasticsearch-compare-two-indices/126181 "2018-04-24T12:12:37Z")

</div>

How does one go about comparing two (or more) indices in elasticsearch? especially based on specific fields (not entire document).

---

## [Is it possible to get older versions of any document](https://discuss.elastic.co/t/is-it-possible-to-get-older-versions-of-any-document/7019)

<div class="topic-metadata">

**Author:** [@canavar](https://discuss.elastic.co/u/canavar)\
**Replies:** 2\
**Last updated:** [March 15, 2012, 10:13pm UTC](https://discuss.elastic.co/t/is-it-possible-to-get-older-versions-of-any-document/7019 "2012-03-15T22:13:19Z")

</div>

Hi all, I am definitely a newbie. I searched the group but could not find an answer to my question. There is the cool Update API. Every update increases the version number of the document by 1. I wonder if it is p…

---

## [Partial update and nested type](https://discuss.elastic.co/t/partial-update-and-nested-type/7549)

<div class="topic-metadata">

**Author:** [@avasilenko](https://discuss.elastic.co/u/avasilenko)\
**Replies:** 4\
**Last updated:** [February 3, 2015, 10:47pm UTC](https://discuss.elastic.co/t/partial-update-and-nested-type/7549 "2015-02-03T22:47:15Z")

</div>

Hello, How can I append values to nested document, using partial update http://www.elasticsearch.org/guide/reference/api/update.html ? My tries: https://gist.github.com/2585300 . And it doesn't work Thanks, Alex…

---

## [How doc\_as\_upsert works](https://discuss.elastic.co/t/how-doc-as-upsert-works/89240)

<div class="topic-metadata">

**Author:** [@mohigup](https://discuss.elastic.co/u/mohigup)\
**Replies:** 2\
**Last updated:** [June 13, 2017, 11:07pm UTC](https://discuss.elastic.co/t/how-doc-as-upsert-works/89240 "2017-06-13T23:07:24Z")

</div>

I tried creating document (id=1) using PUT to /\_update with "doc\_as\_upsert" : true and doc field. The response "result" attribute had value "created" and "version" attribute had value "1". Again, I updated the same doc…

---

## [Logstash not allowed to talk with elasticsearch (Manticore::SocketException\]](https://discuss.elastic.co/t/logstash-not-allowed-to-talk-with-elasticsearch-manticore-socketexception/128556)

<div class="topic-metadata">

**Author:** [@skaldenmet](https://discuss.elastic.co/u/skaldenmet)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 3:39pm UTC](https://discuss.elastic.co/t/logstash-not-allowed-to-talk-with-elasticsearch-manticore-socketexception/128556 "2018-04-18T15:39:11Z")

</div>

Hi, Im using docker-elk with version 6.2.2 on my 16.04 Ubuntu Server with X-Pack. The issue is when i start my docker containers logstash keeps spamming: \[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect …

---

## [Set length limit and bottom scroll bar in Exceptions table](https://discuss.elastic.co/t/set-length-limit-and-bottom-scroll-bar-in-exceptions-table/292713)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 1\
**Last updated:** [January 7, 2022, 7:36pm UTC](https://discuss.elastic.co/t/set-length-limit-and-bottom-scroll-bar-in-exceptions-table/292713 "2022-01-07T19:36:41Z")

</div>

Version: Elasticsearch 7.16.2 & Kibana 7.16.2 Hi, everyone In the case of creating a rule with a long name may hinder exceptions workflow. For instance, if I create a rule with the name: Lorem Ipsum is simply dummy …

---

## [Auto Refresh Kibana Dashboards](https://discuss.elastic.co/t/auto-refresh-kibana-dashboards/294185)

<div class="topic-metadata">

**Author:** [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 7:11pm UTC](https://discuss.elastic.co/t/auto-refresh-kibana-dashboards/294185 "2022-01-12T19:11:17Z")

</div>

We have 30-40 Dashboard in Kibana which we use to monitor different applications. The problem is we have to refresh the dashboard frequently to see the latest results. Is there any global settings through which we can au…

---

## [No route to host error with new ES cluster](https://discuss.elastic.co/t/no-route-to-host-error-with-new-es-cluster/63636)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 3\
**Last updated:** [October 24, 2016, 2:37pm UTC](https://discuss.elastic.co/t/no-route-to-host-error-with-new-es-cluster/63636 "2016-10-24T14:37:23Z")

</div>

I'm trying to spin up a new 5 node cluster, and I'm not getting anywhere. All 5 nodes are running a version of this same config file, with the variations being in IP addresses of the other nodes and the hostname, as wel…

---

## [Why elasticsearch still check the length of a keyword field, even if it's not indexed?](https://discuss.elastic.co/t/why-elasticsearch-still-check-the-length-of-a-keyword-field-even-if-its-not-indexed/134604)

<div class="topic-metadata">

**Author:** [@esnewbie](https://discuss.elastic.co/u/esnewbie)\
**Replies:** 6\
**Last updated:** [June 6, 2018, 7:45am UTC](https://discuss.elastic.co/t/why-elasticsearch-still-check-the-length-of-a-keyword-field-even-if-its-not-indexed/134604 "2018-06-06T07:45:44Z")

</div>

Hi all, I'm new to Elasticsearch, using version 5.3. As i understand, the length of keyword field is limited to about 32K due to the limitation of Lucene's term byte-length limit of 32766. But, the thing I don't unde…

---

## [Throttling log output from Filebeat directly?](https://discuss.elastic.co/t/throttling-log-output-from-filebeat-directly/168862)

<div class="topic-metadata">

**Author:** [@georgejdli](https://discuss.elastic.co/u/georgejdli)\
**Replies:** 7\
**Last updated:** [March 11, 2019, 3:03pm UTC](https://discuss.elastic.co/t/throttling-log-output-from-filebeat-directly/168862 "2019-03-11T15:03:08Z")

</div>

I'm working with a multi-tenant Kubernetes cluster and we're seeing issues where certain apps running as Docker containers are writing to log files at a really fast rate, such as spikes in app activity or some apps loggi…

---

## [Basic Authentication not working via python client](https://discuss.elastic.co/t/basic-authentication-not-working-via-python-client/301435)

<div class="topic-metadata">

**Author:** [@tfinan](https://discuss.elastic.co/u/tfinan)\
**Replies:** 2\
**Last updated:** [April 3, 2022, 9:55pm UTC](https://discuss.elastic.co/t/basic-authentication-not-working-via-python-client/301435 "2022-04-03T21:55:12Z")

</div>

I have been experimenting with some very simply python code to interact with Elasticsearch. Up until a couple of days ago, everything was working great. I could add data to an index, read from the index, search, etc...…

---

## [Visualizing parent-child relations](https://discuss.elastic.co/t/visualizing-parent-child-relations/23804)

<div class="topic-metadata">

**Author:** [@amos](https://discuss.elastic.co/u/amos)\
**Replies:** 7\
**Last updated:** [December 14, 2016, 11:34pm UTC](https://discuss.elastic.co/t/visualizing-parent-child-relations/23804 "2016-12-14T23:34:43Z")

</div>

Hi , I have created an index with parent/child relations (following this example: https://www.elastic.co/guide/en/elasticsearch/guide/current/indexing-parent-child.html ) POST /company/branch/\_bulk { "index": { "\_id…

---

## [How to remove old indices and old logs after specific duration?](https://discuss.elastic.co/t/how-to-remove-old-indices-and-old-logs-after-specific-duration/79220)

<div class="topic-metadata">

**Author:** [@Sharath\_Vutpala](https://discuss.elastic.co/u/Sharath_Vutpala)\
**Replies:** 2\
**Last updated:** [March 20, 2017, 9:24am UTC](https://discuss.elastic.co/t/how-to-remove-old-indices-and-old-logs-after-specific-duration/79220 "2017-03-20T09:24:44Z")

</div>

Hi, In my current setup, logs are being generated at 10 GB/day from different applications. Log cycle is Filebeat-\> Logstash-\>Elasticsearch-\>Kibana. After doing research, i found that we can delete the old indices u…

[Previous page](https://discuss.elastic.co/top.md?page=296&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=298&per_page=50&period=all)
