# Top **URL:** https://discuss.elastic.co/top.md?page=298&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 299 --- ## [How to do a NOT IN like query in Elastic?](https://discuss.elastic.co/t/how-to-do-a-not-in-like-query-in-elastic/142793)
**Author:** [@Sewalita\_Duara](https://discuss.elastic.co/u/Sewalita_Duara)\ **Replies:** 3\ **Last updated:** [August 8, 2018, 10:19pm UTC](https://discuss.elastic.co/t/how-to-do-a-not-in-like-query-in-elastic/142793 "2018-08-08T22:19:10Z")
Hello Is NOT-IN like query doable in Elastic? Example, index has the following fields & data \_id, job\_id, transaction, data\_source 1, 123, read, RDBMS 2, 123, read, File 3, 123, write,… --- ## [Missing Snapshot Error](https://discuss.elastic.co/t/missing-snapshot-error/134485)
**Author:** [@MPurcell](https://discuss.elastic.co/u/MPurcell)\ **Replies:** 7\ **Last updated:** [June 5, 2018, 2:20pm UTC](https://discuss.elastic.co/t/missing-snapshot-error/134485 "2018-06-05T14:20:11Z")
I'm trying to use curator to delete all snapshots older then a 100 days in my repository. I noticed it was failing with the error message: Failed to complete action: delete\_snapshots. \ **Author:** [@gperez](https://discuss.elastic.co/u/gperez)\ **Replies:** 4\ **Last updated:** [January 19, 2017, 5:36pm UTC](https://discuss.elastic.co/t/elasticsearch-with-realtime-ingestion/72023 "2017-01-19T17:36:59Z") Hi. I read an article about elasticsearch data ingestion. Clearly, I should post new docs all the time because each new doc will force to reindex the whole thing, right? But what about logs and kibana? What about "r… --- ## [GC spending too much time](https://discuss.elastic.co/t/gc-spending-too-much-time/71853)
**Author:** [@mvleandro](https://discuss.elastic.co/u/mvleandro)\ **Replies:** 6\ **Last updated:** [January 18, 2017, 4:23am UTC](https://discuss.elastic.co/t/gc-spending-too-much-time/71853 "2017-01-18T04:23:29Z")
Hello everyone! I am running Elasticsearch at version 5.1.1. I observed that him is spending too much time with garbage collector task, as you can see bellow: \[2017-01-17T11:18:50,156\]\[INFO \]\[o.e.m.j.JvmGcMonitorServ… --- ## [Exclude empty-string, null and non-existant](https://discuss.elastic.co/t/exclude-empty-string-null-and-non-existant/181140)
**Author:** [@Pictor](https://discuss.elastic.co/u/Pictor)\ **Replies:** 1\ **Last updated:** [May 15, 2019, 7:36pm UTC](https://discuss.elastic.co/t/exclude-empty-string-null-and-non-existant/181140 "2019-05-15T19:36:20Z")
How does one query for all documents having a field with non empty value? (aka mandatory value) I can exclude the null values or non existing fields via the exists (negated) query, but I also need to ensure that the val… --- ## [Document\_type deprecated elasticsearch output logstash](https://discuss.elastic.co/t/document-type-deprecated-elasticsearch-output-logstash/112822)
**Author:** [@Amouzigh\_Driss](https://discuss.elastic.co/u/Amouzigh_Driss)\ **Replies:** 6\ **Last updated:** [December 23, 2017, 8:24pm UTC](https://discuss.elastic.co/t/document-type-deprecated-elasticsearch-output-logstash/112822 "2017-12-23T20:24:31Z")
Hello guys, I'm using logstash 6.1.0. The output section is configured for ElasticSearch as following: output { elasticsearch { hosts =\> "http://localhost:9200" index =\> "Data" document\_type =\> "MyType" } stdou… --- ## [ES java api for multiple aggregations at same level](https://discuss.elastic.co/t/es-java-api-for-multiple-aggregations-at-same-level/142289)
**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\ **Replies:** 1\ **Last updated:** [July 31, 2018, 7:08am UTC](https://discuss.elastic.co/t/es-java-api-for-multiple-aggregations-at-same-level/142289 "2018-07-31T07:08:06Z")
Hi All, Could you please help me on how to convert below dsl to java api using aggregationbuilders, { "aggs": { "status\_aggr": { "terms": { "field": "status", "size": 15, "order": { "\_count": "de… --- ## [Filebeat as sidecar deployment in K8 cluster](https://discuss.elastic.co/t/filebeat-as-sidecar-deployment-in-k8-cluster/114796)
**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\ **Replies:** 5\ **Last updated:** [January 15, 2018, 10:54am UTC](https://discuss.elastic.co/t/filebeat-as-sidecar-deployment-in-k8-cluster/114796 "2018-01-15T10:54:23Z")
HI , So am using spinnaker for deployment of our microservices to Kubernetes cluster. How to use filebeat as a sidecar pattern with other application to deploy simultaneously? --- ## [Aggregation sum return long value as double](https://discuss.elastic.co/t/aggregation-sum-return-long-value-as-double/25584)
**Author:** [@CHI\_WAI\_HO](https://discuss.elastic.co/u/CHI_WAI_HO)\ **Replies:** 1\ **Last updated:** [July 15, 2015, 8:08am UTC](https://discuss.elastic.co/t/aggregation-sum-return-long-value-as-double/25584 "2015-07-15T08:08:23Z")
I have tested the below query on ECHead plugin and results were returned perfectly. However, when I come to the Java API (Transport client), the result only give me the value in double format. May I ask how I can get the… --- ## [Contains() function in Scripted field of Kibana](https://discuss.elastic.co/t/contains-function-in-scripted-field-of-kibana/146311)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 1\ **Last updated:** [August 28, 2018, 12:25pm UTC](https://discuss.elastic.co/t/contains-function-in-scripted-field-of-kibana/146311 "2018-08-28T12:25:23Z")
Hi, I am trying to create a scripted field(Painless) based on the if condition on the present Field. The criteria is if a field(suppose "Name") contains "sammy" as a value. I want to check if the value contains "am" a… --- ## [Filebeat sending a json file to stdout but filebeat errors "Error decoding JSON: invalid character" for the stdout logs](https://discuss.elastic.co/t/filebeat-sending-a-json-file-to-stdout-but-filebeat-errors-error-decoding-json-invalid-character-for-the-stdout-logs/305989)
**Author:** [@Adrian\_Romero](https://discuss.elastic.co/u/Adrian_Romero)\ **Replies:** 1\ **Last updated:** [May 31, 2022, 1:54pm UTC](https://discuss.elastic.co/t/filebeat-sending-a-json-file-to-stdout-but-filebeat-errors-error-decoding-json-invalid-character-for-the-stdout-logs/305989 "2022-05-31T13:54:31Z")
Hi people! here is the deal, I using k8s, my apps write down thier logs into a json formatted file, so I decided to send this file to the stdout (with a soft link kind of how nginx does it), so now if you check the stdou… --- ## [How to fix Filebeat mapper parsing error - tried to parse field\[x\] as object, but found a concrete value?](https://discuss.elastic.co/t/how-to-fix-filebeat-mapper-parsing-error-tried-to-parse-field-x-as-object-but-found-a-concrete-value/162370)
**Author:** [@ddregalo](https://discuss.elastic.co/u/ddregalo)\ **Replies:** 5\ **Last updated:** [February 6, 2019, 3:48pm UTC](https://discuss.elastic.co/t/how-to-fix-filebeat-mapper-parsing-error-tried-to-parse-field-x-as-object-but-found-a-concrete-value/162370 "2019-02-06T15:48:56Z")
I am using filebeat 6.2.1 to pick up logs, parse as JSON and send them to elasticsearch 6.5.4 and I am getting the following error: WARN elasticsearch/client.go:520 Cannot index event publisher.Event{Content:beat… --- ## [Logstash 2.1 fails to start after logstash-output-elasticsearch update](https://discuss.elastic.co/t/logstash-2-1-fails-to-start-after-logstash-output-elasticsearch-update/38330)
**Author:** [@techcheez](https://discuss.elastic.co/u/techcheez)\ **Replies:** 6\ **Last updated:** [January 14, 2016, 5:55am UTC](https://discuss.elastic.co/t/logstash-2-1-fails-to-start-after-logstash-output-elasticsearch-update/38330 "2016-01-14T05:55:39Z")
I just ran a bin/plugin update and the logstash-output-elasticsearch plugin was upgraded from 2.3.0 to 2.3.1. When I tried restarting logstash I get the following error: The error reported is: you might need to rein… --- ## [\[SOLVED\] Elasticsearch output filter by tags... now failing when on new indices](https://discuss.elastic.co/t/solved-elasticsearch-output-filter-by-tags-now-failing-when-on-new-indices/31884)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 1\ **Last updated:** [October 9, 2015, 2:44pm UTC](https://discuss.elastic.co/t/solved-elasticsearch-output-filter-by-tags-now-failing-when-on-new-indices/31884 "2015-10-09T14:44:13Z")
Hi forum... I'm puzzled by several issues here... but this one is notably strange: Im injecting to elasticsearch different indices filtering by tag... This has been working well (till now) heres my output filter file t… --- ## [Filebeat Index Issue - template pattern / name](https://discuss.elastic.co/t/filebeat-index-issue-template-pattern-name/133738)
**Author:** [@docmur](https://discuss.elastic.co/u/docmur)\ **Replies:** 2\ **Last updated:** [June 1, 2018, 2:10pm UTC](https://discuss.elastic.co/t/filebeat-index-issue-template-pattern-name/133738 "2018-06-01T14:10:04Z")
Hey Guys I'm trying to set my index, in filebeat, this is my current config: output.elasticsearch: # Array of hosts to connect to. hosts: \["192.168.1.199:9200"\] setup.template.name: "desktop" setup.template.pat… --- ## [Reverse proxy with nginx](https://discuss.elastic.co/t/reverse-proxy-with-nginx/80244)
**Author:** [@gmmurugan](https://discuss.elastic.co/u/gmmurugan)\ **Replies:** 7\ **Last updated:** [March 29, 2017, 5:14am UTC](https://discuss.elastic.co/t/reverse-proxy-with-nginx/80244 "2017-03-29T05:14:31Z")
do i need to config reverse proxy even for kibana 5? why its been a manual task? any better cookbook available? its not working anyway.. getting 404 --- ## [Convert string to numeric?](https://discuss.elastic.co/t/convert-string-to-numeric/97449)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 2\ **Last updated:** [August 17, 2017, 3:43pm UTC](https://discuss.elastic.co/t/convert-string-to-numeric/97449 "2017-08-17T15:43:01Z")
I’ve got data being ingested into Elasticsearch which arrives in the incoming JSON as a string containing a floating point number, eg “myfield”: “1234.56” So I’ve set a mapping for it “myfield”: { “type”: “double” } … --- ## [Cannot start bin/logstash](https://discuss.elastic.co/t/cannot-start-bin-logstash/93143)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 7\ **Last updated:** [July 14, 2017, 9:42am UTC](https://discuss.elastic.co/t/cannot-start-bin-logstash/93143 "2017-07-14T09:42:19Z")
I installed logstash through yum repo. After installation I make config file in /etc/logstash/conf.d when i started bin/logstash -f it outputs "No such file or directory" --- ## [If \_jsonparsefailure in \[tags\]](https://discuss.elastic.co/t/if--jsonparsefailure-in-tags/73062)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 3\ **Last updated:** [January 29, 2017, 7:01pm UTC](https://discuss.elastic.co/t/if--jsonparsefailure-in-tags/73062 "2017-01-29T19:01:03Z")
My filter: filter { json { source =\> "message" } } sometimes, I see events tagged as "\_jsonparsefailure", however some events (NON-JSON) are being dropped completely. How do I output events to elasticsearch with… --- ## [Group by data in data table kibana \[Solved\]](https://discuss.elastic.co/t/group-by-data-in-data-table-kibana-solved/92465)
**Author:** [@Chemse](https://discuss.elastic.co/u/Chemse)\ **Replies:** 4\ **Last updated:** [July 11, 2017, 3:52pm UTC](https://discuss.elastic.co/t/group-by-data-in-data-table-kibana-solved/92465 "2017-07-11T15:52:23Z")
hello, I need some help please how can I group data in this table to show them just in one row group by \_type my filter configuration is the following filter { mutate { add\_field =\> { "heureDeDebut" =\> ""… --- ## [How to use the ruby{} filter to loop through k,v pairs after use the kv{} filter?](https://discuss.elastic.co/t/how-to-use-the-ruby-filter-to-loop-through-k-v-pairs-after-use-the-kv-filter/147665)
**Author:** [@sun\_changlong](https://discuss.elastic.co/u/sun_changlong)\ **Replies:** 6\ **Last updated:** [September 14, 2018, 1:31am UTC](https://discuss.elastic.co/t/how-to-use-the-ruby-filter-to-loop-through-k-v-pairs-after-use-the-kv-filter/147665 "2018-09-14T01:31:14Z")
After I use the kv plugin to parse the log, I want to filter the value further. What should I do? my data look like below: level="2" treatment="3" cmd1="\\"D:\\Program Files (x86)\\a\\safe\\modules\\setup.exe\\" /s /smartsile… --- ## [Logstash vs Filebeat in server farm](https://discuss.elastic.co/t/logstash-vs-filebeat-in-server-farm/35881)
**Author:** [@dorr](https://discuss.elastic.co/u/dorr)\ **Replies:** 7\ **Last updated:** [June 12, 2017, 1:34pm UTC](https://discuss.elastic.co/t/logstash-vs-filebeat-in-server-farm/35881 "2017-06-12T13:34:21Z")
Hello. I am currently examining how to deploy log shipping within my server farm, and trying to understand when is it right to use Logstash on the application servers and when it is right to use Filebeat. As you can unde… --- ## [What is network.host](https://discuss.elastic.co/t/what-is-network-host/274426)
**Author:** [@surya3](https://discuss.elastic.co/u/surya3)\ **Replies:** 3\ **Last updated:** [June 5, 2021, 3:19pm UTC](https://discuss.elastic.co/t/what-is-network-host/274426 "2021-06-05T15:19:51Z")
Hello Everyone i am new to elastic search while configuring i found one parameter network.host in elasticsearch.yml file while exploring abt this some one said use 0.0.0.0 to make ur elastic search accessible to publi… --- ## [Can't see all fields when Visualize-\>Aggregation-\>Terms is selected in Kibana](https://discuss.elastic.co/t/cant-see-all-fields-when-visualize-aggregation-terms-is-selected-in-kibana/78010)
**Author:** [@anupam](https://discuss.elastic.co/u/anupam)\ **Replies:** 2\ **Last updated:** [March 10, 2017, 8:20am UTC](https://discuss.elastic.co/t/cant-see-all-fields-when-visualize-aggregation-terms-is-selected-in-kibana/78010 "2017-03-10T08:20:58Z")
I am using Kibana 5.2.2. I love how easy it was to setup. I have spent some time in figuring out the issue that I am facing but without any luck yet. I have a very simple index with a few string and number values in i… --- ## [When does ES free up disk space?](https://discuss.elastic.co/t/when-does-es-free-up-disk-space/4000)
**Author:** [@Petri\_Lehtinen](https://discuss.elastic.co/u/Petri_Lehtinen)\ **Replies:** 4\ **Last updated:** [March 2, 2011, 9:34am UTC](https://discuss.elastic.co/t/when-does-es-free-up-disk-space/4000 "2011-03-02T09:34:14Z")
Hi! I have a single node with zero configuration (the default). It takes about 20GB of disk space and had 45M documents. I removed approximately half of the documents, but no disk space was freed. I also ran the "o… --- ## [Combining two aggregations to get term percentage](https://discuss.elastic.co/t/combining-two-aggregations-to-get-term-percentage/22201)
**Author:** [@jarib](https://discuss.elastic.co/u/jarib)\ **Replies:** 4\ **Last updated:** [February 17, 2015, 12:11pm UTC](https://discuss.elastic.co/t/combining-two-aggregations-to-get-term-percentage/22201 "2015-02-17T12:11:45Z")
Hi, I'm looking for a way to have Elasticsearch calculate the percentage of docs that match a query \*within\* a terms aggregation. That is, given two aggregations where one is filtered and the other is not: { … --- ## [How to solve json\_e\_o\_f\_exception on \_msearch /template](https://discuss.elastic.co/t/how-to-solve-json-e-o-f-exception-on-msearch-template/163514)
**Author:** [@Nico92](https://discuss.elastic.co/u/Nico92)\ **Replies:** 2\ **Last updated:** [January 9, 2019, 1:00pm UTC](https://discuss.elastic.co/t/how-to-solve-json-e-o-f-exception-on-msearch-template/163514 "2019-01-09T13:00:39Z")
Hey guys, I'm trying so use Multisearch API. But I got an bad json eof exception. Here is my case: How I build my template: POST \_scripts/t1 { "script": { "lang": "mustache", "source": { "query": { … --- ## [Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create\, action\_result: false", :backtrace=\>nil}](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/245372)
**Author:** [@joel.ng](https://discuss.elastic.co/u/joel.ng)\ **Replies:** 5\ **Last updated:** [August 24, 2020, 3:29am UTC](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/245372 "2020-08-24T03:29:12Z")
Trying out logstash for the first time, but I'm getting this error on a very basic localhost:5044 to S3 configuration: \[2020-08-18T08:15:53,638\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"… --- ## [FileBeat6.2.4 ERROR logstash/async.go:235 Failed to publish events caused by: write tcp 192.168.1.2:19616-\>192.168.1.3:5044: write: connection reset by peer](https://discuss.elastic.co/t/filebeat6-2-4-error-logstash-async-go-235-failed-to-publish-events-caused-by-write-tcp-192-168-1-2-19616-192-168-1-3-write-connection-reset-by-peer/147503)
**Author:** [@xiaozuo](https://discuss.elastic.co/u/xiaozuo)\ **Replies:** 7\ **Last updated:** [September 6, 2018, 9:06am UTC](https://discuss.elastic.co/t/filebeat6-2-4-error-logstash-async-go-235-failed-to-publish-events-caused-by-write-tcp-192-168-1-2-19616-192-168-1-3-write-connection-reset-by-peer/147503 "2018-09-06T09:06:29Z")
Hello. I'm using the filebeat 6.2.4, but I get this error when I run filebeat, how to solve? 2018-09-06T14:00:09.729+0800 DEBUG \[harvester\] log/log.go:85 End of file reached: /var/log/messages; Backoff now. 2018-09-06T… --- ## [Recommended File System Settings for Elasticsearch](https://discuss.elastic.co/t/recommended-file-system-settings-for-elasticsearch/18733)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 3\ **Last updated:** [July 18, 2014, 2:03pm UTC](https://discuss.elastic.co/t/recommended-file-system-settings-for-elasticsearch/18733 "2014-07-18T14:03:31Z")
Hey Guys, we are going to expand our development ES-System to an productive environment and we got fresh new storage which waits to be formatted. In order to get the best performance for elasticsearch, we´d like… --- ## ["Rejected execution of coordinating operation" exception after upgrade from 8.2.2 to 8.6.0?](https://discuss.elastic.co/t/rejected-execution-of-coordinating-operation-exception-after-upgrade-from-8-2-2-to-8-6-0/323430)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 7\ **Last updated:** [February 13, 2023, 1:11pm UTC](https://discuss.elastic.co/t/rejected-execution-of-coordinating-operation-exception-after-upgrade-from-8-2-2-to-8-6-0/323430 "2023-02-13T13:11:15Z")
Hi! We just upgraded from 8.2.2 to 8.6.0 and suddenly our bulk inserts fails with this exception: es\_rejected\_execution\_exception Reason: "rejected execution of coordinating operation \[coordinating\_and\_primary\_bytes=20… --- ## [Unable to start elasticsearch as service](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-service/178440)
**Author:** [@Kajol\_Nimesh](https://discuss.elastic.co/u/Kajol_Nimesh)\ **Replies:** 6\ **Last updated:** [April 26, 2019, 5:53am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-service/178440 "2019-04-26T05:53:44Z")
Elasticsearch is unable to start: these are the elasticsearch logs: at org.apache.lucene.store.BaseDirectory.obtainLock(BaseDirectory.java:45) ~\[lucene-core-8.0.0.jar:8.0.0 2ae4746365c1ee72a0047ced7610b2096… --- ## [Is wildcard queries not supporting in kibana discovery search ? want to search the all pods/container names in particular namespace](https://discuss.elastic.co/t/is-wildcard-queries-not-supporting-in-kibana-discovery-search-want-to-search-the-all-pods-container-names-in-particular-namespace/226847)
**Author:** [@vikas4cloud](https://discuss.elastic.co/u/vikas4cloud)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 9:00am UTC](https://discuss.elastic.co/t/is-wildcard-queries-not-supporting-in-kibana-discovery-search-want-to-search-the-all-pods-container-names-in-particular-namespace/226847 "2020-04-07T09:00:01Z")
Want to search the all pods/container names in particular namespace in kibana discovery search expection :- should display all available resources as per query/wildcard Search qurie :- kubernetes.namespace\_name.key… --- ## [Updating an Object field](https://discuss.elastic.co/t/updating-an-object-field/110735)
**Author:** [@kabcampbell](https://discuss.elastic.co/u/kabcampbell)\ **Replies:** 2\ **Last updated:** [December 8, 2017, 10:52pm UTC](https://discuss.elastic.co/t/updating-an-object-field/110735 "2017-12-08T22:52:23Z")
I'm trying to figure out how to use the Update API to update an object field in my document. Let's say my \_source field looks like this: { "documentID": 123, "originalFilename": "Build a Better Post.pdf", "modDate… --- ## [ERROR: Failed to determine the health of the cluster](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/303772)
**Author:** [@hernani33](https://discuss.elastic.co/u/hernani33)\ **Replies:** 4\ **Last updated:** [May 3, 2022, 3:07pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/303772 "2022-05-03T15:07:11Z")
hello, i have Elasticsearch-8.1.3.tar.gz and kibana-8.1.3.tar.gz they are work but when i make this command line ----\> bin/Elasticsearch-create-enrollment-token -s kibana give me error ---\> ERROR: Failed to determin… --- ## [Filebeat Firewall requirements](https://discuss.elastic.co/t/filebeat-firewall-requirements/38399)
**Author:** [@bibikmik](https://discuss.elastic.co/u/bibikmik)\ **Replies:** 6\ **Last updated:** [January 11, 2016, 12:45pm UTC](https://discuss.elastic.co/t/filebeat-firewall-requirements/38399 "2016-01-11T12:45:29Z")
Hi, community. I have: - 1 host with application which writes logs in the file and filebeat reads it and send to logstash - logstash cluster of 3 nodes Firewall rules are opened only as follows: filebeat (port numbe… --- ## [How to change the datatype of field in elastic search](https://discuss.elastic.co/t/how-to-change-the-datatype-of-field-in-elastic-search/1718)
**Author:** [@elk\_2015](https://discuss.elastic.co/u/elk_2015)\ **Replies:** 8\ **Last updated:** [June 11, 2015, 3:34am UTC](https://discuss.elastic.co/t/how-to-change-the-datatype-of-field-in-elastic-search/1718 "2015-06-11T03:34:57Z")
How to change the datatype of field in elastic search, example, string to date etc. --- ## [Kibana Dark Theme Now Blue?](https://discuss.elastic.co/t/kibana-dark-theme-now-blue/377919)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 4\ **Last updated:** [September 21, 2026, 9:26am UTC](https://discuss.elastic.co/t/kibana-dark-theme-now-blue/377919 "2026-09-21T09:26:32Z")
In Kibana versions up to 8.18.1, the dark theme was black, just as with almost all other software I have used that offers a dark theme. I just upgraded my company's DEV cluster, as well as my home cluster, to 9.0.1, and … --- ## [How to avoid timestamp field getting appeared in Output](https://discuss.elastic.co/t/how-to-avoid-timestamp-field-getting-appeared-in-output/37512)
**Author:** [@gaurav1424](https://discuss.elastic.co/u/gaurav1424)\ **Replies:** 7\ **Last updated:** [January 23, 2016, 4:26pm UTC](https://discuss.elastic.co/t/how-to-avoid-timestamp-field-getting-appeared-in-output/37512 "2016-01-23T16:26:19Z")
Here is my Configuration file: input { tcp { port =\> 5000 #type =\> syslog } udp { port =\> 5000 #type =\> syslog } } filter { grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:syslog\_tim… --- ## [Merge multiple input into one document](https://discuss.elastic.co/t/merge-multiple-input-into-one-document/127084)
**Author:** [@Tiago\_Pinto](https://discuss.elastic.co/u/Tiago_Pinto)\ **Replies:** 5\ **Last updated:** [April 9, 2018, 1:32pm UTC](https://discuss.elastic.co/t/merge-multiple-input-into-one-document/127084 "2018-04-09T13:32:08Z")
How can I run two sql queries and merge the info into one single document? I'm trying to use the jdbc input plugin to make a data merge into one document, the data comes from two diferent databases. In one database I h… --- ## [Can´t reach localhost:9200 - Received Plaintext http - Windows](https://discuss.elastic.co/t/can-t-reach-localhost-9200-received-plaintext-http-windows/298674)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 4\ **Last updated:** [March 3, 2022, 1:19pm UTC](https://discuss.elastic.co/t/can-t-reach-localhost-9200-received-plaintext-http-windows/298674 "2022-03-03T13:19:32Z")
Did anyone experience the same or has a soluation, what I am doing wrong? I am pretty new to elastic and propably it is easy to solve, but I am kind of at a loss here. I am unable to connect to http://localhost:9200 in t… --- ## [Compare two date/timestamp in Kibana](https://discuss.elastic.co/t/compare-two-date-timestamp-in-kibana/88908)
**Author:** [@Gurveer\_Singh](https://discuss.elastic.co/u/Gurveer_Singh)\ **Replies:** 4\ **Last updated:** [June 13, 2017, 6:41pm UTC](https://discuss.elastic.co/t/compare-two-date-timestamp-in-kibana/88908 "2017-06-13T18:41:26Z")
Hello, Is it possible to create a new scripted field by subtracting a date from current time? for example: current timestamp - doc\['OpenTime'\].value I tried following code but didn't work. doc\['@timestamp'\].valu… --- ## [ElasticSearch: can't connect via curl](https://discuss.elastic.co/t/elasticsearch-cant-connect-via-curl/24254)
**Author:** [@Nilesh\_Date](https://discuss.elastic.co/u/Nilesh_Date)\ **Replies:** 7\ **Last updated:** [March 23, 2016, 3:04pm UTC](https://discuss.elastic.co/t/elasticsearch-cant-connect-via-curl/24254 "2016-03-23T15:04:01Z")
I am not able to connect via curl in elasticsearch. Currently I am using single node which has everything(graylog apps, MongoDB, Elasticsearch). Please assist. root@node1:~# curl -XGET 'http://127.0.0.1:9200/\_cluster… --- ## [Replace Kibana logo and loading icon in Kibana 7.0](https://discuss.elastic.co/t/replace-kibana-logo-and-loading-icon-in-kibana-7-0/177854)
**Author:** [@Rahul\_Tandon](https://discuss.elastic.co/u/Rahul_Tandon)\ **Replies:** 7\ **Last updated:** [June 6, 2019, 11:01am UTC](https://discuss.elastic.co/t/replace-kibana-logo-and-loading-icon-in-kibana-7-0/177854 "2019-06-06T11:01:50Z")
How can we change kibana logo and loading icon in Kibana 7.0? --- ## [Can't create indices](https://discuss.elastic.co/t/cant-create-indices/254204)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 10:08am UTC](https://discuss.elastic.co/t/cant-create-indices/254204 "2020-11-04T10:08:37Z")
setup elk version 7.9.3 cannot create index logstash show me warning \[logstash.outputs.elasticsearch\]\[main\]\[27fb9d77028509eff9b3e4ec584ce0c8528c70f76c962e4e94e144a725a5b964\] Could not index event to Elasticsearch. {:st… --- ## [Changing Analyzer behavior for hyphens - suggestions?](https://discuss.elastic.co/t/changing-analyzer-behavior-for-hyphens-suggestions/20841)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 6\ **Last updated:** [September 2, 2016, 2:43pm UTC](https://discuss.elastic.co/t/changing-analyzer-behavior-for-hyphens-suggestions/20841 "2016-09-02T14:43:42Z")
Hey guys, after working with the ELK stack for a while now, we still got an very annoying problem regarding the behavior of the standard analyzer - it splits terms into tokens using hyphens or dots as delimiters. … --- ## [Iteration in Logstash](https://discuss.elastic.co/t/iteration-in-logstash/26123)
**Author:** [@jasonct05](https://discuss.elastic.co/u/jasonct05)\ **Replies:** 4\ **Last updated:** [April 7, 2017, 5:02am UTC](https://discuss.elastic.co/t/iteration-in-logstash/26123 "2017-04-07T05:02:07Z")
I have a string data in Logstash that has been parsed as that looks like "id": "0,3,10" "value": "100,200,300" I would like to match the individual "id" to the corresponding "value" with respect to their order in the … --- ## [Autocomplete across multiple fields](https://discuss.elastic.co/t/autocomplete-across-multiple-fields/54604)
**Author:** [@lessless](https://discuss.elastic.co/u/lessless)\ **Replies:** 4\ **Last updated:** [July 16, 2016, 8:08am UTC](https://discuss.elastic.co/t/autocomplete-across-multiple-fields/54604 "2016-07-16T08:08:18Z")
Hello, I read about two search-as-you-type technics, one from "Definitive Guide" with edge-ngrams and another with Prefix Suggester at https://www.elastic.co/guide/en/elasticsearch/reference/current/search-suggesters… --- ## [Controls do not show all possible values](https://discuss.elastic.co/t/controls-do-not-show-all-possible-values/158943)
**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\ **Replies:** 5\ **Last updated:** [December 13, 2018, 6:12pm UTC](https://discuss.elastic.co/t/controls-do-not-show-all-possible-values/158943 "2018-12-13T18:12:54Z")
Hello, I'm trying to create filters to apply to my dashboards. However, in this version of Kibana (6.5), when we create the controls, in some fields of type keyword the size that we define (in the Dynamic Options) is no… --- ## [One query thread per Shard?](https://discuss.elastic.co/t/one-query-thread-per-shard/71744)
**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\ **Replies:** 5\ **Last updated:** [January 16, 2017, 4:41pm UTC](https://discuss.elastic.co/t/one-query-thread-per-shard/71744 "2017-01-16T16:41:40Z")
When a query hits a shard, is it true it is handled by a single thread ? If so, is it worth to assign as many shard per cpu core on a node to increase concurrency and reduce the overall query execution time ? Is such opt… [Previous page](https://discuss.elastic.co/top.md?page=297&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=299&per_page=50&period=all)