# Top **URL:** https://discuss.elastic.co/top.md?page=299&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 300 --- ## [Controls do not show all possible values](https://discuss.elastic.co/t/controls-do-not-show-all-possible-values/158943)
**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\ **Replies:** 5\ **Last updated:** [December 13, 2018, 6:12pm UTC](https://discuss.elastic.co/t/controls-do-not-show-all-possible-values/158943 "2018-12-13T18:12:54Z")
Hello, I'm trying to create filters to apply to my dashboards. However, in this version of Kibana (6.5), when we create the controls, in some fields of type keyword the size that we define (in the Dynamic Options) is no… --- ## [One query thread per Shard?](https://discuss.elastic.co/t/one-query-thread-per-shard/71744)
**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\ **Replies:** 5\ **Last updated:** [January 16, 2017, 4:41pm UTC](https://discuss.elastic.co/t/one-query-thread-per-shard/71744 "2017-01-16T16:41:40Z")
When a query hits a shard, is it true it is handled by a single thread ? If so, is it worth to assign as many shard per cpu core on a node to increase concurrency and reduce the overall query execution time ? Is such opt… --- ## [How to parse the json field with grok](https://discuss.elastic.co/t/how-to-parse-the-json-field-with-grok/155103)
**Author:** [@talon](https://discuss.elastic.co/u/talon)\ **Replies:** 2\ **Last updated:** [November 2, 2018, 7:04am UTC](https://discuss.elastic.co/t/how-to-parse-the-json-field-with-grok/155103 "2018-11-02T07:04:45Z")
HI here is my message {"@timestamp":"2018-11-01T03:05:28.391Z","records":\[{"properties":{"Keywords":0,"Message":"w3wp.exe Information: 0 :\\r\\n| 2018-10-31 02:43:16.396 | AuthorizeActivityAttributeBase:IsAuthorizedAsync… --- ## [Sizing master-only nodes](https://discuss.elastic.co/t/sizing-master-only-nodes/24997)
**Author:** [@lucien](https://discuss.elastic.co/u/lucien)\ **Replies:** 7\ **Last updated:** [November 5, 2016, 9:02pm UTC](https://discuss.elastic.co/t/sizing-master-only-nodes/24997 "2016-11-05T21:02:38Z")
We are planning to shift from an architecture where all nodes are node.data=true and node.master=true to a system with dedicated data and master nodes. Is there any rule of thumb for sizing the master nodes? What I can f… --- ## [One Kibana to multiple elasticsearch cluster](https://discuss.elastic.co/t/one-kibana-to-multiple-elasticsearch-cluster/233057)
**Author:** [@Taewoo](https://discuss.elastic.co/u/Taewoo)\ **Replies:** 4\ **Last updated:** [May 25, 2020, 6:58am UTC](https://discuss.elastic.co/t/one-kibana-to-multiple-elasticsearch-cluster/233057 "2020-05-25T06:58:03Z")
Hi I'm newbie to ELK. We have multi elasticsearch cluster. And I found that there is 'Remote Cluster' setting in Kibana\>Management\>Elasticsearch\>Remote Clusters. Is possible to control multi cluster elasticsearch on o… --- ## [Apply filter only if field exists](https://discuss.elastic.co/t/apply-filter-only-if-field-exists/80087)
**Author:** [@zajca](https://discuss.elastic.co/u/zajca)\ **Replies:** 6\ **Last updated:** [March 27, 2017, 1:09pm UTC](https://discuss.elastic.co/t/apply-filter-only-if-field-exists/80087 "2017-03-27T13:09:26Z")
Hi, I'm searching across multiple index and multiple types. But some of my types needs to be filtered by field which is not existing in all types. my query looks like this: curl -XGET 'http://esdb:9200/index1,index2/… --- ## [Adding an index to Kibana](https://discuss.elastic.co/t/adding-an-index-to-kibana/46085)
**Author:** [@michele\_crudele](https://discuss.elastic.co/u/michele_crudele)\ **Replies:** 4\ **Last updated:** [May 15, 2016, 10:35am UTC](https://discuss.elastic.co/t/adding-an-index-to-kibana/46085 "2016-05-15T10:35:56Z")
Actually adding an index to kibana is a manual operation: Settings -\> Configure an index pattern. I would like to provide to my end users an already configured Kibana installation, with all the indexes they need avoiding… --- ## [Logstash date filtering and event @timestamp](https://discuss.elastic.co/t/logstash-date-filtering-and-event-timestamp/88513)
**Author:** [@mulgar](https://discuss.elastic.co/u/mulgar)\ **Replies:** 3\ **Last updated:** [June 13, 2017, 3:08am UTC](https://discuss.elastic.co/t/logstash-date-filtering-and-event-timestamp/88513 "2017-06-13T03:08:49Z")
I'm pulling data in from an ERD database, in short ticket records which can be updated so I'm using sql\_last\_date on an "updated\_date" field to check for new and updated data, and assigning a PK identifier to the ID to u… --- ## [Metricbeat vs Topbeat](https://discuss.elastic.co/t/metricbeat-vs-topbeat/53569)
**Author:** [@dhollinger](https://discuss.elastic.co/u/dhollinger)\ **Replies:** 1\ **Last updated:** [June 21, 2016, 10:37pm UTC](https://discuss.elastic.co/t/metricbeat-vs-topbeat/53569 "2016-06-21T22:37:00Z")
Reading through the Metricbeat alpha, can someone summarize the differences between Topbeat and the Metricbeat System Module? Would you use them both on one system or not? If they both provide the same/similar feature … --- ## [Setup high availability env using elasticsearch cluster](https://discuss.elastic.co/t/setup-high-availability-env-using-elasticsearch-cluster/82994)
**Author:** [@Newbie111985](https://discuss.elastic.co/u/Newbie111985)\ **Replies:** 8\ **Last updated:** [April 20, 2017, 12:03pm UTC](https://discuss.elastic.co/t/setup-high-availability-env-using-elasticsearch-cluster/82994 "2017-04-20T12:03:58Z")
I want to setup an elasticsearch cluster consisting of 3 nodes. Each node is master eligible and can contain the data. I also need to achieve high availability with this elastic search cluster. Hence would like to know … --- ## [Elasticsearch not coming up after restart](https://discuss.elastic.co/t/elasticsearch-not-coming-up-after-restart/310718)
**Author:** [@samee\_alam](https://discuss.elastic.co/u/samee_alam)\ **Replies:** 4\ **Last updated:** [August 20, 2022, 11:51pm UTC](https://discuss.elastic.co/t/elasticsearch-not-coming-up-after-restart/310718 "2022-08-20T23:51:34Z")
After deleting elasticsearch pod, it is not able to come up. (Ready state 0/1) Cluster health is yellow. fluentd is not able to connect to ES. elasticsearch@elasticsearch-master-0:~$ curl -XGET 'http://localhost:9200/… --- ## [Multiple range filters](https://discuss.elastic.co/t/multiple-range-filters/4483)
**Author:** [@vinny](https://discuss.elastic.co/u/vinny)\ **Replies:** 7\ **Last updated:** [June 10, 2011, 3:43am UTC](https://discuss.elastic.co/t/multiple-range-filters/4483 "2011-06-10T03:43:20Z")
Hi, I am trying to get a query similar to the one below working. The ranges may not necessarily be consecutive so I need to be able to retrieve all of the documents that satisify this requirement. Also, potential… --- ## [Winlogbeat can't start the service (Solved)](https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687)
**Author:** [@suresh](https://discuss.elastic.co/u/suresh)\ **Replies:** 4\ **Last updated:** [June 2, 2016, 6:10pm UTC](https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687 "2016-06-02T18:10:25Z")
i am getting the following error PS C:\\Program Files\\winlogbeat\> Start-Service winlogbeat Start-Service : Service 'winlogbeat (winlogbeat)' cannot be started due to the following error: Cannot start service winlogbeat … --- ## [Send logs to 2 logstash servers simultaneously](https://discuss.elastic.co/t/send-logs-to-2-logstash-servers-simultaneously/133249)
**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\ **Replies:** 5\ **Last updated:** [May 28, 2018, 9:05am UTC](https://discuss.elastic.co/t/send-logs-to-2-logstash-servers-simultaneously/133249 "2018-05-28T09:05:17Z")
My requirement is to configure filebeat output as two logstash servers and I need to send logs to defined 2 servers simultaneously. It is not load balance scenario. Both logstash servers should received same data. I do … --- ## [Updating nested field with update\_by\_query API](https://discuss.elastic.co/t/updating-nested-field-with-update-by-query-api/53910)
**Author:** [@diegos](https://discuss.elastic.co/u/diegos)\ **Replies:** 1\ **Last updated:** [September 26, 2016, 7:00pm UTC](https://discuss.elastic.co/t/updating-nested-field-with-update-by-query-api/53910 "2016-09-26T19:00:57Z")
Hello, I'm trying to update a nested field of my document through the update\_by\_query API, but I"m getting a casting error: \[class\_cast\_exception\] java.lang.String cannot be cast to java.util.Map This is the body of my… --- ## [Same field name with different data types in the same index](https://discuss.elastic.co/t/same-field-name-with-different-data-types-in-the-same-index/63758)
**Author:** [@fabiocatalao](https://discuss.elastic.co/u/fabiocatalao)\ **Replies:** 5\ **Last updated:** [October 26, 2016, 9:29am UTC](https://discuss.elastic.co/t/same-field-name-with-different-data-types-in-the-same-index/63758 "2016-10-26T09:29:45Z")
Hi! I'm starting to work with Elasticsearch and I'm having some issues designing a schema that enables the possibility of having different data types on the same field name. I’m planning to save my documents at index\_n… --- ## [What is this java\_pid%pid\_number%.hprof and can it be deleted](https://discuss.elastic.co/t/what-is-this-java-pid-pid-number-hprof-and-can-it-be-deleted/283907)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 1:50am UTC](https://discuss.elastic.co/t/what-is-this-java-pid-pid-number-hprof-and-can-it-be-deleted/283907 "2021-09-13T01:50:29Z")
I have my ES data and ES Logs going to another location, but in my /var/lib/elasticsearch I have a file named java\_pid%pid\_number%.hprof that has cause my OS drive to be out of space. which is now causing me issues. Wha… --- ## [Error INFO No non-zero metrics in the last 30s](https://discuss.elastic.co/t/error-info-no-non-zero-metrics-in-the-last-30s/96600)
**Author:** [@hadivarp](https://discuss.elastic.co/u/hadivarp)\ **Replies:** 7\ **Last updated:** [August 16, 2017, 1:22pm UTC](https://discuss.elastic.co/t/error-info-no-non-zero-metrics-in-the-last-30s/96600 "2017-08-16T13:22:15Z")
I know this error is repeated a lot but I am really confused . I need to run file beat and ELK on two different server witch one of the is client and the other sever . I follow all the steps that comes in instruction .… --- ## [What does "adjust\_pure\_negative" flag do?](https://discuss.elastic.co/t/what-does-adjust-pure-negative-flag-do/92348)
**Author:** [@Nickolay\_Kondratyev](https://discuss.elastic.co/u/Nickolay_Kondratyev)\ **Replies:** 1\ **Last updated:** [July 8, 2017, 11:59am UTC](https://discuss.elastic.co/t/what-does-adjust-pure-negative-flag-do/92348 "2017-07-08T11:59:45Z")
I am using Boolean query builder which when looking at the query being run has 'adjust\_pure\_negative' flag set to true when doing google searching the documentation for this flag doesn't come up. What exactly does 'adjus… --- ## [Filtering by Number of Nested Objects](https://discuss.elastic.co/t/filtering-by-number-of-nested-objects/72375)
**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\ **Replies:** 7\ **Last updated:** [January 26, 2017, 7:12pm UTC](https://discuss.elastic.co/t/filtering-by-number-of-nested-objects/72375 "2017-01-26T19:12:21Z")
I am trying to find all documents in an index where at least one nested object (segments.entities) has more than one value and here is the relevant snippet from the mapping: .......... "segments" : { "typ… --- ## [Logstash is failing with response code 403 (index\_closed\_exception)](https://discuss.elastic.co/t/logstash-is-failing-with-response-code-403-index-closed-exception/113231)
**Author:** [@Yuri\_Sibirski](https://discuss.elastic.co/u/Yuri_Sibirski)\ **Replies:** 8\ **Last updated:** [December 28, 2017, 3:56pm UTC](https://discuss.elastic.co/t/logstash-is-failing-with-response-code-403-index-closed-exception/113231 "2017-12-28T15:56:13Z")
Dear ELK stack specialists i am having a weird behavior with my ELK stack system. The way i set up retention policy is that all the indexes older than 14 days are being closed and all the indexes older than 3 months are … --- ## [Mapper\_parsing\_exception](https://discuss.elastic.co/t/mapper-parsing-exception/244695)
**Author:** [@venugrd](https://discuss.elastic.co/u/venugrd)\ **Replies:** 6\ **Last updated:** [August 13, 2020, 7:38am UTC](https://discuss.elastic.co/t/mapper-parsing-exception/244695 "2020-08-13T07:38:02Z")
Hi I am facing mapper parsing exception, when i store data in elastic index. please help me to fix this issue Error: Log: 2020-08-11 20:50:31,423 ERROR SQL elastic insert error: ('7 document(s) failed to index.', \[{'i… --- ## [Plugin:elasticsearch@6.2.4 - Status changed from yellow to red](https://discuss.elastic.co/t/plugin-elasticsearch-6-2-4-status-changed-from-yellow-to-red/132863)
**Author:** [@Rubens\_Zimbres](https://discuss.elastic.co/u/Rubens_Zimbres)\ **Replies:** 7\ **Last updated:** [May 29, 2018, 3:14pm UTC](https://discuss.elastic.co/t/plugin-elasticsearch-6-2-4-status-changed-from-yellow-to-red/132863 "2018-05-29T15:14:16Z")
I created a pipeline in AWS where Elasticsearch sends JSON data from AWS IoT to Kibana. I configured the kibana.yml file as follows: server.port: 5601 server.host: "localhost" elasticsearch.url: "https://search-domain… --- ## [Convert string field in number using painless script in existing index kibana](https://discuss.elastic.co/t/convert-string-field-in-number-using-painless-script-in-existing-index-kibana/114685)
**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\ **Replies:** 1\ **Last updated:** [January 10, 2018, 12:33am UTC](https://discuss.elastic.co/t/convert-string-field-in-number-using-painless-script-in-existing-index-kibana/114685 "2018-01-10T00:33:07Z")
Hi Team,I have one index in which I have one string field that I want to convert in int type using painless script in kibana tool. How I can do it.Please let me know. --- ## [Missing Converter handling for full class Error](https://discuss.elastic.co/t/missing-converter-handling-for-full-class-error/113630)
**Author:** [@nickl1](https://discuss.elastic.co/u/nickl1)\ **Replies:** 2\ **Last updated:** [January 2, 2018, 3:20pm UTC](https://discuss.elastic.co/t/missing-converter-handling-for-full-class-error/113630 "2018-01-02T15:20:42Z")
Hi all, I'm trying to use the Logstash JDBC plugin to sync my Postgres database. For some reason, midway through the data transfer, I get this error: Exception when executing JDBC query {:exception=\>#\ **Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 1\ **Last updated:** [January 11, 2019, 11:33am UTC](https://discuss.elastic.co/t/elasticsearch-escape-character/163216 "2019-01-11T11:33:46Z") How I escape Unicode characters using a quer\_string query? For example, my documents consist the following data: { "title":"@Sachin#$Tendular%^^\*bestplayer\*(tiger)!god~~ofcricket" } I am using the query\_strin… --- ## [Start up Error on Kibana 6.x with Elastic x-Pack - Plugin is RED](https://discuss.elastic.co/t/start-up-error-on-kibana-6-x-with-elastic-x-pack-plugin-is-red/103947)
**Author:** [@Ricigliano](https://discuss.elastic.co/u/Ricigliano)\ **Replies:** 8\ **Last updated:** [October 18, 2017, 10:08am UTC](https://discuss.elastic.co/t/start-up-error-on-kibana-6-x-with-elastic-x-pack-plugin-is-red/103947 "2017-10-18T10:08:42Z")
I get this error when starting up Kibana 6.x with Elasticsearch 6.x + X-PACK. I modified the kibana config file with suggestions from an older post but maybe some things have changed. This was the old post I used: He… --- ## [Common error - Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/common-error-root-mapping-definition-has-unsupported-parameters/63300)
**Author:** [@Antarktika](https://discuss.elastic.co/u/Antarktika)\ **Replies:** 1\ **Last updated:** [October 19, 2016, 5:55am UTC](https://discuss.elastic.co/t/common-error-root-mapping-definition-has-unsupported-parameters/63300 "2016-10-19T05:55:29Z")
I try to make index for Apache access logs. curl -XPUT '172.16.1.136:9200/apache\_access' -d '{ "settings": { "number\_of\_replicas": "1", "number\_of\_shards": "1" }, "mappings": { "properties": { "clientip": { "ty… --- ## [How to submit multiline cURL commands on Windows 10](https://discuss.elastic.co/t/how-to-submit-multiline-curl-commands-on-windows-10/46194)
**Author:** [@seeni](https://discuss.elastic.co/u/seeni)\ **Replies:** 4\ **Last updated:** [December 16, 2016, 4:40pm UTC](https://discuss.elastic.co/t/how-to-submit-multiline-curl-commands-on-windows-10/46194 "2016-12-16T16:40:43Z")
I am able to successfully install ELK stack and test. I can successfully submit cURL commands on windows 10 command prompt. But facing issues when I have to submit multi line commands. I could not install sense as I … --- ## ["Failed to install template... contact Elasticsearch"](https://discuss.elastic.co/t/failed-to-install-template-contact-elasticsearch/64687)
**Author:** [@bme](https://discuss.elastic.co/u/bme)\ **Replies:** 7\ **Last updated:** [November 8, 2016, 9:50am UTC](https://discuss.elastic.co/t/failed-to-install-template-contact-elasticsearch/64687 "2016-11-08T09:50:17Z")
I am testing elastic search with logstash and filebeats, trying to import our IIS log for analysing and viewing in Kibana. All latest version (5.0). I have run into a problem during the startup of logstash where it say… --- ## [Filebeat: Excessive disk usage ( ~15M/s) when no line is matched in the input log file](https://discuss.elastic.co/t/filebeat-excessive-disk-usage-15m-s-when-no-line-is-matched-in-the-input-log-file/121482)
**Author:** [@RishiSingh](https://discuss.elastic.co/u/RishiSingh)\ **Replies:** 5\ **Last updated:** [March 2, 2018, 1:23am UTC](https://discuss.elastic.co/t/filebeat-excessive-disk-usage-15m-s-when-no-line-is-matched-in-the-input-log-file/121482 "2018-03-02T01:23:03Z")
Hi, I am using filebeat 6.2.0 vesrion. In one of my run I found filebeat is writing to the disk (~15Mbps) when there is no matching line found in the log file (size of file = 500 MB). filebeat.prospectors: - type: log… --- ## [Logstash didn't show at index pattern on kibana. \[SOLVED\]](https://discuss.elastic.co/t/logstash-didnt-show-at-index-pattern-on-kibana-solved/94725)
**Author:** [@Amity4](https://discuss.elastic.co/u/Amity4)\ **Replies:** 7\ **Last updated:** [July 31, 2017, 12:41am UTC](https://discuss.elastic.co/t/logstash-didnt-show-at-index-pattern-on-kibana-solved/94725 "2017-07-31T00:41:34Z")
so, i have an assignment. to make a dashboard using elk stack elasticsearch, logstasg , kibana, and i must catching log data from port 10514. i've tried a few things to set up like input { udp = 10514 or input { … --- ## [Insufficient memory - OpenJDK 64-Bit Server VM warning](https://discuss.elastic.co/t/insufficient-memory-openjdk-64-bit-server-vm-warning/43567)
**Author:** [@gabe](https://discuss.elastic.co/u/gabe)\ **Replies:** 4\ **Last updated:** [March 7, 2016, 7:09pm UTC](https://discuss.elastic.co/t/insufficient-memory-openjdk-64-bit-server-vm-warning/43567 "2016-03-07T19:09:32Z")
Topbeat Logstash Elasticsearch seem to be working okay. Started the configuration of Logstash syslog (rsyslog) input using the example file: https://www.elastic.co/guide/en/logstash/current/config-examples.html#\_proces… --- ## [Creating alerts with aggregation and query filter](https://discuss.elastic.co/t/creating-alerts-with-aggregation-and-query-filter/319842)
**Author:** [@solange.sonaglio](https://discuss.elastic.co/u/solange.sonaglio)\ **Replies:** 2\ **Last updated:** [December 7, 2022, 8:03pm UTC](https://discuss.elastic.co/t/creating-alerts-with-aggregation-and-query-filter/319842 "2022-12-07T20:03:13Z")
With the current data that we have in APM, we felt the need to create an alert based on an aggregated value, as the "Index threshold" type allows, however, we needed to include some filters in the data, as the "Elasticse… --- ## [Substring in painless](https://discuss.elastic.co/t/substring-in-painless/88660)
**Author:** [@raghvendra](https://discuss.elastic.co/u/raghvendra)\ **Replies:** 2\ **Last updated:** [June 10, 2017, 1:11pm UTC](https://discuss.elastic.co/t/substring-in-painless/88660 "2017-06-10T13:11:05Z")
hi ..I am new to ELK stack . I want to create a new filed from a existing field created by logstash at the time of parising , by painless scripting. this is my "request" field =\> "/gameserver\_pkr?websocket=1&&action=u… --- ## [Why does installation of x-pack take so long time?](https://discuss.elastic.co/t/why-does-installation-of-x-pack-take-so-long-time/66122)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 2\ **Last updated:** [November 15, 2016, 6:13pm UTC](https://discuss.elastic.co/t/why-does-installation-of-x-pack-take-so-long-time/66122 "2016-11-15T18:13:26Z")
Hi, It takes more than 15 minutes to install x-pack in Kibana. Is that normal? Is there a debug option to see what is going on during installation phase? Running on Ubuntu 16.04. Elastic stack 5.0.0 Br Mat --- ## [Filebeat locks the file rotation for log4j causing the files to grow enormously](https://discuss.elastic.co/t/filebeat-locks-the-file-rotation-for-log4j-causing-the-files-to-grow-enormously/164428)
**Author:** [@CaptainAye](https://discuss.elastic.co/u/CaptainAye)\ **Replies:** 0\ **Last updated:** [January 16, 2019, 9:38am UTC](https://discuss.elastic.co/t/filebeat-locks-the-file-rotation-for-log4j-causing-the-files-to-grow-enormously/164428 "2019-01-16T09:38:37Z")
Hello, Sometimes the logs in my application are not rolled as they should be and they grow in size (the limit is 10mb) I receive an exception if Filebeat logs: Err: error setting up harvester: Harvester setup failed. … --- ## [Aggregation with null values](https://discuss.elastic.co/t/aggregation-with-null-values/65867)
**Author:** [@Shashi-GS](https://discuss.elastic.co/u/Shashi-GS)\ **Replies:** 2\ **Last updated:** [November 14, 2016, 5:58pm UTC](https://discuss.elastic.co/t/aggregation-with-null-values/65867 "2016-11-14T17:58:31Z")
Is there any way I can get the aggregation with null values? My Data look like this. {"system": "aaa"}, {"system": "bbb"}, {"system": null} My aggregation query looks like this { "aggs" : { "myAggrs" … --- ## [Query String Query escaping spaces in V2.3](https://discuss.elastic.co/t/query-string-query-escaping-spaces-in-v2-3/81254)
**Author:** [@jasw](https://discuss.elastic.co/u/jasw)\ **Replies:** 1\ **Last updated:** [April 13, 2017, 8:06am UTC](https://discuss.elastic.co/t/query-string-query-escaping-spaces-in-v2-3/81254 "2017-04-13T08:06:24Z")
Hi there, I am trying to match on search values with spaces, such as "a b c". I found in v5 ES you can unset the splitOnWhitespace flag but I am using 2.3.5. According to this document: Query String Query | Elasticsear… --- ## [Catching exceptions from saveToEs (elasticsearch-spark)](https://discuss.elastic.co/t/catching-exceptions-from-savetoes-elasticsearch-spark/53745)
**Author:** [@nvitucci](https://discuss.elastic.co/u/nvitucci)\ **Replies:** 4\ **Last updated:** [March 31, 2017, 8:32am UTC](https://discuss.elastic.co/t/catching-exceptions-from-savetoes-elasticsearch-spark/53745 "2017-03-31T08:32:18Z")
Hello, I am writing an RDD to Elasticsearch using the saveToEs method from elasticsearch-spark. The RDD might contain documents that Elasticsearch rejects with a org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest exc… --- ## [Kibana is unable to start with all shards failed message](https://discuss.elastic.co/t/kibana-is-unable-to-start-with-all-shards-failed-message/227046)
**Author:** [@brb44](https://discuss.elastic.co/u/brb44)\ **Replies:** 5\ **Last updated:** [April 9, 2020, 7:15pm UTC](https://discuss.elastic.co/t/kibana-is-unable-to-start-with-all-shards-failed-message/227046 "2020-04-09T19:15:45Z")
After encrypting elasticsearch and changing the ALB from HTTP to https for ES and Kibana. I'm getting below error. Also, metricbeat is also in a failed state. kibana: {"type":"error","@timestamp":"2020-04-08T03:33:47Z",… --- ## [Integrating elasticseach and kibana in custom app](https://discuss.elastic.co/t/integrating-elasticseach-and-kibana-in-custom-app/24688)
**Author:** [@Thomas\_Crook\_Kindy](https://discuss.elastic.co/u/Thomas_Crook_Kindy)\ **Replies:** 5\ **Last updated:** [April 7, 2016, 5:11pm UTC](https://discuss.elastic.co/t/integrating-elasticseach-and-kibana-in-custom-app/24688 "2016-04-07T17:11:45Z")
Hi all, I'm building an app which need to store some grocery products and order track information. Now i would like to implement this using elasticsearch and for some reporting purpose i would like to use kibana. Ca… --- ## [Best Elkstack setup and system requirements](https://discuss.elastic.co/t/best-elkstack-setup-and-system-requirements/101844)
**Author:** [@FRoodt](https://discuss.elastic.co/u/FRoodt)\ **Replies:** 2\ **Last updated:** [September 27, 2017, 7:54am UTC](https://discuss.elastic.co/t/best-elkstack-setup-and-system-requirements/101844 "2017-09-27T07:54:46Z")
Hi there, I'm running a Elkstack (Elastic,Llogstash and Kibana) on one VM to process large log files. The resources are shared with another VM but that VM does not use a lot of the server resources. I constantly run in… --- ## [🎉 Elastic Stack 6.6.0 released](https://discuss.elastic.co/t/elastic-stack-6-6-0-released/166246)
**Author:** [@vidamon](https://discuss.elastic.co/u/vidamon)\ **Replies:** 0\ **Last updated:** [January 29, 2019, 11:56pm UTC](https://discuss.elastic.co/t/elastic-stack-6-6-0-released/166246 "2019-01-29T23:56:53Z")
Hi everyone, We’ve just released version 6.6.0 of the Elastic Stack. This release introduces index lifecycle management, frozen indices, Bkd-backed geoshapes, SQL enhancements, new UIs in Kibana, anomaly annotations for… --- ## [Apache Reverse Proxy for Kibana 5](https://discuss.elastic.co/t/apache-reverse-proxy-for-kibana-5/88815)
**Author:** [@dilemoverflow](https://discuss.elastic.co/u/dilemoverflow)\ **Replies:** 3\ **Last updated:** [June 9, 2017, 9:32pm UTC](https://discuss.elastic.co/t/apache-reverse-proxy-for-kibana-5/88815 "2017-06-09T21:32:10Z")
Hi there, First of all, sorry for my English. I'm working on a POC for a futur project. I'm testing different solutions like Kibana, Graylog and some others. Kibana is very great, really. But unfortunately, I have… --- ## [How to save elasticsearch date type in spring data?](https://discuss.elastic.co/t/how-to-save-elasticsearch-date-type-in-spring-data/240249)
**Author:** [@kase](https://discuss.elastic.co/u/kase)\ **Replies:** 4\ **Last updated:** [July 10, 2020, 10:30am UTC](https://discuss.elastic.co/t/how-to-save-elasticsearch-date-type-in-spring-data/240249 "2020-07-10T10:30:54Z")
Hi there, I want to use spring data to get elasticsearch documents, but encountered some problems with get data. Here is my code. Entity: @Id private String id; @Field(name = "@timestamp", type = FieldTy… --- ## [How to get the timestamp of the log event and assign it to a new date field?](https://discuss.elastic.co/t/how-to-get-the-timestamp-of-the-log-event-and-assign-it-to-a-new-date-field/58721)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 6\ **Last updated:** [August 24, 2016, 6:12am UTC](https://discuss.elastic.co/t/how-to-get-the-timestamp-of-the-log-event-and-assign-it-to-a-new-date-field/58721 "2016-08-24T06:12:41Z")
I have the following filter criteria of logstash conf file and my customized pattern in the patterns file: Pattern: LOGTIMESTAMP %{YEAR}%{MONTHNUM}%{MONTHDAY} Filter in logstash: filter { grok { patterns\_dir … --- ## [\[TOO\_MANY\_REQUESTS/12/index read-only / allow delete (api)\]](https://discuss.elastic.co/t/too-many-requests-12-index-read-only-allow-delete-api/236718)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 4\ **Last updated:** [July 2, 2020, 9:00am UTC](https://discuss.elastic.co/t/too-many-requests-12-index-read-only-allow-delete-api/236718 "2020-07-02T09:00:57Z")
Hi, I too am receiving this error like others. I know that I can fix it via the \_settings endpoint: PUT /\_all/\_settings {"index.blocks.read\_only\_allow\_delete": false} But, I have not run out of diskspace. I have lots … --- ## [VMware and syslog](https://discuss.elastic.co/t/vmware-and-syslog/65479)
**Author:** [@dmcn\_es](https://discuss.elastic.co/u/dmcn_es)\ **Replies:** 4\ **Last updated:** [November 15, 2016, 10:10am UTC](https://discuss.elastic.co/t/vmware-and-syslog/65479 "2016-11-15T10:10:26Z")
Hi, we have a VMware infrastructure and have been using loginsight to process and visualize logs. However as we move forward we want to use the functionality of ELK stack to collect, parse and display VMware syslog e… --- ## [Howto eas{y|ier} debug grok parse failures](https://discuss.elastic.co/t/howto-eas-y-ier-debug-grok-parse-failures/36466)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 4\ **Last updated:** [December 6, 2015, 9:30pm UTC](https://discuss.elastic.co/t/howto-eas-y-ier-debug-grok-parse-failures/36466 "2015-12-06T21:30:11Z")
Trying to find a grok parse failure for hours now, though I seem to get my wanted fields and wondering how people go about debugging such failures other than the old interpreted language method of inserting print stateme… [Previous page](https://discuss.elastic.co/top.md?page=298&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=300&per_page=50&period=all)