# Top

**URL:** https://discuss.elastic.co/top.md?page=302&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 303

---

## [Kql wildcard doesn't seem to work](https://discuss.elastic.co/t/kql-wildcard-doesnt-seem-to-work/273216)

<div class="topic-metadata">

**Author:** [@k1ng87](https://discuss.elastic.co/u/k1ng87)\
**Replies:** 1\
**Last updated:** [May 17, 2021, 9:06pm UTC](https://discuss.elastic.co/t/kql-wildcard-doesnt-seem-to-work/273216 "2021-05-17T21:06:22Z")

</div>

I'm trying to use a wildcard for the message field but it doesn't seem to work. I'm trying to look for anything that starts with async and filter them out. In the message field, it can look like this: async.channel.pool…

---

## [Read timeout error after setting the request\_timeout](https://discuss.elastic.co/t/read-timeout-error-after-setting-the-request-timeout/128626)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 3\
**Last updated:** [April 20, 2018, 3:09am UTC](https://discuss.elastic.co/t/read-timeout-error-after-setting-the-request-timeout/128626 "2018-04-20T03:09:38Z")

</div>

Hi , I am feteching the data via python script and getting the following error: elasticsearch.exceptions.ConnectionTimeout: ConnectionTimeout caused by - ReadTimeoutError(HTTPConnectionPool(host='hnode07', port=9200): …

---

## [Providing weight to individual fields](https://discuss.elastic.co/t/providing-weight-to-individual-fields/63081)

<div class="topic-metadata">

**Author:** [@Josh\_Harrison](https://discuss.elastic.co/u/Josh_Harrison)\
**Replies:** 3\
**Last updated:** [October 27, 2016, 11:00pm UTC](https://discuss.elastic.co/t/providing-weight-to-individual-fields/63081 "2016-10-27T23:00:22Z")

</div>

I have a nested document structure like {"mystaff":\[{"name":"bob", "value":0.375}, {"name":"fred", "value":0.8537}\]} Is it possible to use the value associated with bob or fred as a weight value in a query when determ…

---

## [Mailing list woes](https://discuss.elastic.co/t/mailing-list-woes/41449)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 8\
**Last updated:** [February 16, 2016, 10:16pm UTC](https://discuss.elastic.co/t/mailing-list-woes/41449 "2016-02-16T22:16:18Z")

</div>

Like many others, I strongly prefer to interact via email instead of a web interface. I have subscribed to numerous mailing lists over the years, and I feel comfortable with the format. Myself and others have lamented i…

---

## [Run Python Script from Kibana interface using a Variable](https://discuss.elastic.co/t/run-python-script-from-kibana-interface-using-a-variable/213321)

<div class="topic-metadata">

**Author:** [@jorj](https://discuss.elastic.co/u/jorj)\
**Replies:** 1\
**Last updated:** [December 30, 2019, 10:56am UTC](https://discuss.elastic.co/t/run-python-script-from-kibana-interface-using-a-variable/213321 "2019-12-30T10:56:07Z")

</div>

Hello there, Is there any possible way to run a Python Script placed in the Kibana node Server, from the Kibana Interface? My scenario is this: User Search for a Specific IP Address from an index When IP is selected,…

---

## [RAM Usage](https://discuss.elastic.co/t/ram-usage/116972)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 5\
**Last updated:** [January 25, 2018, 11:28am UTC](https://discuss.elastic.co/t/ram-usage/116972 "2018-01-25T11:28:48Z")

</div>

Hi Is there any command or way to know about the total RAM usage by elastic client? Thanks Aneesh

---

## [org.springframework.web.util.NestedServletException: Handler dispatch failed; nested exception is java.lang.NoSuchMethodError: org.elasticsearch.action.index.IndexRequest.ifSeqNo()J](https://discuss.elastic.co/t/org-springframework-web-util-nestedservletexception-handler-dispatch-failed-nested-exception-is-java-lang-nosuchmethoderror-org-elasticsearch-action-index-indexrequest-ifseqno-j/176627)

<div class="topic-metadata">

**Author:** [@shash4243](https://discuss.elastic.co/u/shash4243)\
**Replies:** 4\
**Last updated:** [April 15, 2019, 7:25am UTC](https://discuss.elastic.co/t/org-springframework-web-util-nestedservletexception-handler-dispatch-failed-nested-exception-is-java-lang-nosuchmethoderror-org-elasticsearch-action-index-indexrequest-ifseqno-j/176627 "2019-04-15T07:25:08Z")

</div>

Hi, I am trying out RestHighLevelClient with spring boot. My current version is 2.1.1.RELEASE and these are my dependencies \<dependency\> \<groupId\>org.elasticsearch.client\</groupId\> \<artifactId\>elasticsearch-rest-h…

---

## [Could not index event to Elasticsearch. {:status=\>400, :action=\> #\<LogStash::Event:0x458fc470\>\], :response=\>{"index"=\>ception", "reason"=\>"failed to parse date field](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-400-action-logstash-0x458fc470-response-index-ception-reason-failed-to-parse-date-field/233313)

<div class="topic-metadata">

**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 4:01pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-400-action-logstash-0x458fc470-response-index-ception-reason-failed-to-parse-date-field/233313 "2020-05-20T16:01:09Z")

</div>

\[2020-05-18T09:02:52,095\]\[WARN \]\[logstash.outputs.amazonelasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"gppepo-epo-govpp-scheduler-2020.05.18", :\_type=\>"\_doc…

---

## [How does sincedb work for a Logstash reading multiple files from a single directory?](https://discuss.elastic.co/t/how-does-sincedb-work-for-a-logstash-reading-multiple-files-from-a-single-directory/99456)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 5\
**Last updated:** [September 9, 2017, 11:36pm UTC](https://discuss.elastic.co/t/how-does-sincedb-work-for-a-logstash-reading-multiple-files-from-a-single-directory/99456 "2017-09-09T23:36:01Z")

</div>

Hi, I am wondering how sincedb file works for multiple files in a single directory. When I start Logstash and once it process all the files sincedb file has only one line(probably just the information of a single file).…

---

## [What happens to \>5GB segments?](https://discuss.elastic.co/t/what-happens-to-5gb-segments/322460)

<div class="topic-metadata">

**Author:** [@sezuan](https://discuss.elastic.co/u/sezuan)\
**Replies:** 0\
**Last updated:** [January 4, 2023, 12:33pm UTC](https://discuss.elastic.co/t/what-happens-to-5gb-segments/322460 "2023-01-04T12:33:43Z")

</div>

Hello, I'm wondering what happens to segments that are larger than 5gb (index.merge.policy.max\_merged\_segment ) and the index has more than 33% deleted documents (index.merge.policy.deletes\_pct\_allowed) and it's no poss…

---

## [Elastic Stack 6.0.0-alpha2 released](https://discuss.elastic.co/t/elastic-stack-6-0-0-alpha2-released/88446)

<div class="topic-metadata">

**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Replies:** 0\
**Last updated:** [June 6, 2017, 4:17pm UTC](https://discuss.elastic.co/t/elastic-stack-6-0-0-alpha2-released/88446 "2017-06-06T16:17:01Z")

</div>

Hi all, we are happy to announce 6.0.0-alpha2 for the entire Elastic Stack has been released. Please note that alpha releases should not be deployed in production. They are for evaluation only. Blog: https://www.elasti…

---

## [Logstash don't read conf.d settings file when running as daemon](https://discuss.elastic.co/t/logstash-dont-read-conf-d-settings-file-when-running-as-daemon/50423)

<div class="topic-metadata">

**Author:** [@Giulio](https://discuss.elastic.co/u/Giulio)\
**Replies:** 7\
**Last updated:** [February 20, 2017, 11:22am UTC](https://discuss.elastic.co/t/logstash-dont-read-conf-d-settings-file-when-running-as-daemon/50423 "2017-02-20T11:22:29Z")

</div>

I have alredy read all the previous thread that I found about this problem but they didn't help me so much. Until now, I have always used the -f option to launch logstash but now I must use it as daemon so I have copie…

---

## [Master Node vs. Data Node Architecture](https://discuss.elastic.co/t/master-node-vs-data-node-architecture/22134)

<div class="topic-metadata">

**Author:** [@Eric\_Luellen](https://discuss.elastic.co/u/Eric_Luellen)\
**Replies:** 6\
**Last updated:** [February 16, 2015, 8:03am UTC](https://discuss.elastic.co/t/master-node-vs-data-node-architecture/22134 "2015-02-16T08:03:29Z")

</div>

Hello, Currently I have a 3 node ElasticSearch cluster. Each node is a RHEL VM with 16 gig RAM. The basic config is: - All nodes can be master and are data nodes. - 3 shards and 1 replica - 6 different indexes …

---

## [Count total records in elasticsearch](https://discuss.elastic.co/t/count-total-records-in-elasticsearch/50366)

<div class="topic-metadata">

**Author:** [@Stuart\_Cracraft1](https://discuss.elastic.co/u/Stuart_Cracraft1)\
**Replies:** 4\
**Last updated:** [May 19, 2016, 2:16pm UTC](https://discuss.elastic.co/t/count-total-records-in-elasticsearch/50366 "2016-05-19T14:16:36Z")

</div>

Hi, Is there a simple command-line to count total records in elasticsearch? Thanks.

---

## [Mapping Error in Kibana 5.6.x](https://discuss.elastic.co/t/mapping-error-in-kibana-5-6-x/101356)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 7\
**Last updated:** [September 25, 2017, 6:18am UTC](https://discuss.elastic.co/t/mapping-error-in-kibana-5-6-x/101356 "2017-09-25T06:18:16Z")

</div>

Hi everyone, We have a problem after an upgrade from Elasticsearch and Kibana 5.4.2 to 5.6.0. We updated kibana index in order to have compatibility with Elastic 6.x by the new utility in Kibana. After that, we got the…

---

## [Group By and Sum the values in each group](https://discuss.elastic.co/t/group-by-and-sum-the-values-in-each-group/58517)

<div class="topic-metadata">

**Author:** [@Thirunavukkarasu\_Rav](https://discuss.elastic.co/u/Thirunavukkarasu_Rav)\
**Replies:** 2\
**Last updated:** [August 22, 2016, 6:00pm UTC](https://discuss.elastic.co/t/group-by-and-sum-the-values-in-each-group/58517 "2016-08-22T18:00:33Z")

</div>

Hi, I need get the sum of each item quantity? My data: { "took": 3, "timed\_out": false, "\_shards": { "total": 21, "successful": 21, "failed": 0 }, "hits": { "total": 2, "max\_score": 1, …

---

## [Kibana visualization without aggregation](https://discuss.elastic.co/t/kibana-visualization-without-aggregation/23870)

<div class="topic-metadata">

**Author:** [@chaitanyavvs](https://discuss.elastic.co/u/chaitanyavvs)\
**Replies:** 5\
**Last updated:** [June 18, 2015, 5:05pm UTC](https://discuss.elastic.co/t/kibana-visualization-without-aggregation/23870 "2015-06-18T17:05:29Z")

</div>

Hi , I have a data that is indexed in elasticSearch which is taken from log file through logstash. My log file has certain data, like the various steps in a batch process with the associated time taken for each step…

---

## [Match\_all query -- differences between the two queries?](https://discuss.elastic.co/t/match-all-query-differences-between-the-two-queries/27352)

<div class="topic-metadata">

**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\
**Replies:** 8\
**Last updated:** [August 18, 2015, 1:57am UTC](https://discuss.elastic.co/t/match-all-query-differences-between-the-two-queries/27352 "2015-08-18T01:57:51Z")

</div>

Hello everyone, I am studying the two queries, and tried but cannot find what are the differences with and without match\_all part? https://www.elastic.co/guide/en/elasticsearch/guide/current/\_finding\_exact\_values.ht…

---

## [Kibana port 5601 connection refused: kibana keeps restarting](https://discuss.elastic.co/t/kibana-port-5601-connection-refused-kibana-keeps-restarting/126625)

<div class="topic-metadata">

**Author:** [@lorrainegray](https://discuss.elastic.co/u/lorrainegray)\
**Replies:** 5\
**Last updated:** [April 19, 2018, 4:38pm UTC](https://discuss.elastic.co/t/kibana-port-5601-connection-refused-kibana-keeps-restarting/126625 "2018-04-19T16:38:44Z")

</div>

I've tried the suggestions that several have posted for this related issue. I am running version 6.2.3 on linux. When I first bring up Kibana using the systemctl command and the /etc/systemd/system/kibana.service file,…

---

## [Java.lang.NullPointerException SparkContext: Error initializing SparkContext](https://discuss.elastic.co/t/java-lang-nullpointerexception-sparkcontext-error-initializing-sparkcontext/28028)

<div class="topic-metadata">

**Author:** [@Rodrigo\_Rezende](https://discuss.elastic.co/u/Rodrigo_Rezende)\
**Replies:** 3\
**Last updated:** [July 7, 2016, 7:32pm UTC](https://discuss.elastic.co/t/java-lang-nullpointerexception-sparkcontext-error-initializing-sparkcontext/28028 "2016-07-07T19:32:44Z")

</div>

Hi, I'm getting errors using both spark-shell or pyspark. With pyspark I get at launch, but spark-shell only when I try to save to ES. Here is what I'm getting: Starting pyspark (Spark 1.4.0) (windows) $ pyspark …

---

## [How to take backup of dashboards in Kibana](https://discuss.elastic.co/t/how-to-take-backup-of-dashboards-in-kibana/131416)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 3\
**Last updated:** [May 15, 2018, 3:03pm UTC](https://discuss.elastic.co/t/how-to-take-backup-of-dashboards-in-kibana/131416 "2018-05-15T15:03:39Z")

</div>

Hi, We want to backup the dashboards. How can we do it? When I removed license, and the x-pack, I lost all my dashboards created by metric. Please guide. br, Sunil.

---

## [Logstash got response code 401 contacting elasticsearch url](https://discuss.elastic.co/t/logstash-got-response-code-401-contacting-elasticsearch-url/317081)

<div class="topic-metadata">

**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\
**Replies:** 6\
**Last updated:** [October 21, 2022, 8:06am UTC](https://discuss.elastic.co/t/logstash-got-response-code-401-contacting-elasticsearch-url/317081 "2022-10-21T08:06:38Z")

</div>

Hi everyone, i configured logstash pipeline and yml, from logs I can see that I receive something but when logstash tries to connect to elasticsearch it fails giving me \[2022-10-20T08:26:09,740\]\[WARN \]\[logstash.licensec…

---

## [Elastic Install and Run - Root or Not?](https://discuss.elastic.co/t/elastic-install-and-run-root-or-not/151323)

<div class="topic-metadata">

**Author:** [@teej](https://discuss.elastic.co/u/teej)\
**Replies:** 2\
**Last updated:** [October 8, 2018, 12:16pm UTC](https://discuss.elastic.co/t/elastic-install-and-run-root-or-not/151323 "2018-10-08T12:16:45Z")

</div>

I am a little confused. I have read you need to install Elastic as root and others say you must not. Some say install as root but run as another user. The docs aren't entire clear on this. I have to do this for versions…

---

## [Logstash (Center) connection refused (solved)](https://discuss.elastic.co/t/logstash-center-connection-refused-solved/27557)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 4\
**Last updated:** [August 19, 2015, 1:26am UTC](https://discuss.elastic.co/t/logstash-center-connection-refused-solved/27557 "2015-08-19T01:26:15Z")

</div>

Hi All, My logstash conf (center) setting as following, is it incorrect? input { redis { host =\> "redis" port =\> 6379 type =\> "redis-input" data…

---

## [Field maxlength?](https://discuss.elastic.co/t/field-maxlength/45357)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 5\
**Last updated:** [March 29, 2016, 5:11pm UTC](https://discuss.elastic.co/t/field-maxlength/45357 "2016-03-29T17:11:27Z")

</div>

I have a java log with some entries having stacktraces. I'm using the multiline option in filebeat and a grok filter in logstash with the pattern ending in GREEDYDATA, i.e.: SNIP%{GREEDYDATA:logmessage} This works fi…

---

## [Scroll vs Search API](https://discuss.elastic.co/t/scroll-vs-search-api/28294)

<div class="topic-metadata">

**Author:** [@ElasticKid](https://discuss.elastic.co/u/ElasticKid)\
**Replies:** 6\
**Last updated:** [August 30, 2015, 1:57pm UTC](https://discuss.elastic.co/t/scroll-vs-search-api/28294 "2015-08-30T13:57:44Z")

</div>

I'm running filters (so I do not care for scoring or sorting at all), and I would like to get all the results as fast as possible. The results are varied from a few to tens of thousands. ElasticSearch does not provide …

---

## [Unable to start Kibana:](https://discuss.elastic.co/t/unable-to-start-kibana/280114)

<div class="topic-metadata">

**Author:** [@Arkapravo\_Das](https://discuss.elastic.co/u/Arkapravo_Das)\
**Replies:** 1\
**Last updated:** [August 1, 2021, 3:30am UTC](https://discuss.elastic.co/t/unable-to-start-kibana/280114 "2021-08-01T03:30:23Z")

</div>

I simply downloaded and now trying to start elastic search and Kibana. Kibana getting one error like below: log \[02:42:07.019\] \[info\]\[plugins-service\] Plugin "timelines" is disabled. log \[02:42:07.117\] \[warning\]…

---

## [LogStash::ConfigurationError", :message=\>"Expected one of #, {, ,, \] at line](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-at-line/128999)

<div class="topic-metadata">

**Author:** [@binnzafar](https://discuss.elastic.co/u/binnzafar)\
**Replies:** 4\
**Last updated:** [April 25, 2018, 6:35am UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-at-line/128999 "2018-04-25T06:35:43Z")

</div>

Dear all, i am uploading a csv file with the following code input { file { path =\>"C:/Users/welcome/Dropbox/IT\_Department/ElasticSearchProjects/ResultAnalysis/Data/Semester\*.csv" start\_position =\> "beginning" sinc…

---

## [Elasticsearch java RestClient SocketTimeoutException: 12,000 milliseconds timeout on connection http-outgoing-12](https://discuss.elastic.co/t/elasticsearch-java-restclient-sockettimeoutexception-12-000-milliseconds-timeout-on-connection-http-outgoing-12/222193)

<div class="topic-metadata">

**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\
**Replies:** 1\
**Last updated:** [March 9, 2020, 1:45am UTC](https://discuss.elastic.co/t/elasticsearch-java-restclient-sockettimeoutexception-12-000-milliseconds-timeout-on-connection-http-outgoing-12/222193 "2020-03-09T01:45:11Z")

</div>

When I use es client to connect es, the following errors often occur： 2020-01-20 17:48:12.330 \[http-nio-8080-exec-10\] INFO c.j.logsearch.aspect.ServiceTimeConsumeAspect - Service：ESClients.getInstance(..)，cost：0ms java…

---

## [Regex search where a string field ends with $](https://discuss.elastic.co/t/regex-search-where-a-string-field-ends-with/49919)

<div class="topic-metadata">

**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\
**Replies:** 3\
**Last updated:** [May 13, 2016, 9:08am UTC](https://discuss.elastic.co/t/regex-search-where-a-string-field-ends-with/49919 "2016-05-13T09:08:31Z")

</div>

I'm trying to exclude computer accounts from a query, they are always identified with a $ sign at the end. SubjectUserName:SERVER01$ works but turning this into a regex search does not, SubjectUserName:/SERVER01$/ Does…

---

## [List of issues we ran into while adopting Kibana (missing features, bugs)](https://discuss.elastic.co/t/list-of-issues-we-ran-into-while-adopting-kibana-missing-features-bugs/78716)

<div class="topic-metadata">

**Author:** [@Tommi\_Kiviniemi](https://discuss.elastic.co/u/Tommi_Kiviniemi)\
**Replies:** 8\
**Last updated:** [March 31, 2017, 12:08pm UTC](https://discuss.elastic.co/t/list-of-issues-we-ran-into-while-adopting-kibana-missing-features-bugs/78716 "2017-03-31T12:08:35Z")

</div>

Hi, and thanks for the wonderful Kibana. Our company started to use it for analysing our users' behaviours so here's a list of issues that were near showstoppers (or minor annoyances) while starting to use Kibana. Is the…

---

## [Filebeat 7.13 not compatible with elasticsearch-oss 7.10.2](https://discuss.elastic.co/t/filebeat-7-13-not-compatible-with-elasticsearch-oss-7-10-2/274037)

<div class="topic-metadata">

**Author:** [@confuseduser](https://discuss.elastic.co/u/confuseduser)\
**Replies:** 3\
**Last updated:** [May 28, 2021, 8:58am UTC](https://discuss.elastic.co/t/filebeat-7-13-not-compatible-with-elasticsearch-oss-7-10-2/274037 "2021-05-28T08:58:40Z")

</div>

Filebeat 7.13 is not compatible with elastichsearch-oss 7.10.2. May 26 10:21:39 server1 filebeat\[24814\]: 2021-05-26T10:21:39.231+0200 ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 …

---

## [No matching indices found: No indices match pattern \* - even when indices exist](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-even-when-indices-exist/124376)

<div class="topic-metadata">

**Author:** [@stcleezy](https://discuss.elastic.co/u/stcleezy)\
**Replies:** 4\
**Last updated:** [March 19, 2018, 9:14pm UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-even-when-indices-exist/124376 "2018-03-19T21:14:03Z")

</div>

Using version 5.6.4 of Elasticsearch and Kibana. Everything is setup on my localhost I have uploaded my data and confirmed the indices exist, per the instructions here: https://www.elastic.co/guide/en/kibana/5.4/tutoria…

---

## [Filebeat no more working - Can not index event (status=400)](https://discuss.elastic.co/t/filebeat-no-more-working-can-not-index-event-status-400/61227)

<div class="topic-metadata">

**Author:** [@toasti](https://discuss.elastic.co/u/toasti)\
**Replies:** 8\
**Last updated:** [September 23, 2016, 1:50pm UTC](https://discuss.elastic.co/t/filebeat-no-more-working-can-not-index-event-status-400/61227 "2016-09-23T13:50:31Z")

</div>

Hello there, Since today at 2am my filebat was working well, now I got no more data and the following error messages: 2016-09-22T11:53:04+02:00 WARN Can not index event (status=400): "MapperParsingException\[mapping \[…

---

## [Compression ratio](https://discuss.elastic.co/t/compression-ratio/164603)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 7\
**Last updated:** [January 21, 2019, 12:18pm UTC](https://discuss.elastic.co/t/compression-ratio/164603 "2019-01-21T12:18:37Z")

</div>

Is there any way of getting the current compression ratio of an index?

---

## [Deleting all document from an index type](https://discuss.elastic.co/t/deleting-all-document-from-an-index-type/43111)

<div class="topic-metadata">

**Author:** [@chalapathi](https://discuss.elastic.co/u/chalapathi)\
**Replies:** 2\
**Last updated:** [March 3, 2016, 6:48am UTC](https://discuss.elastic.co/t/deleting-all-document-from-an-index-type/43111 "2016-03-03T06:48:37Z")

</div>

How to delete all documents from an indextype, i have tried multiple options of DELETE using sense tool. I can delete record by record specifying id, but not all, can anyone tell me is this requires any plugin for ES 2…

---

## [NPX is giving npm ERR! cb.apply is not a function when making gz and br files](https://discuss.elastic.co/t/npx-is-giving-npm-err-cb-apply-is-not-a-function-when-making-gz-and-br-files/275285)

<div class="topic-metadata">

**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\
**Replies:** 3\
**Last updated:** [June 11, 2021, 5:18am UTC](https://discuss.elastic.co/t/npx-is-giving-npm-err-cb-apply-is-not-a-function-when-making-gz-and-br-files/275285 "2021-06-11T05:18:43Z")

</div>

Whenever I try to run the following command to customize ELK 7.10.0 npx gzip-cli /usr/share/kibana/x-pack/plugins/security/target/public/security.chunk.4.js -e=gz -e=b I got the following error. npm ERR! cb.apply is n…

---

## ["Validation Failed: 1: template is missing;](https://discuss.elastic.co/t/validation-failed-1-template-is-missing/70180)

<div class="topic-metadata">

**Author:** [@aliahsan81](https://discuss.elastic.co/u/aliahsan81)\
**Replies:** 2\
**Last updated:** [December 29, 2016, 9:34am UTC](https://discuss.elastic.co/t/validation-failed-1-template-is-missing/70180 "2016-12-29T09:34:30Z")

</div>

I am new to ELK, I am copying existing logstash-\* template and making new one with an other name. After changing template name when i PUT template back it give me following error I am using ELK 5.1.1 curl -XPUT l…

---

## [Need to get the list of hosts sending the logs to kibana](https://discuss.elastic.co/t/need-to-get-the-list-of-hosts-sending-the-logs-to-kibana/142435)

<div class="topic-metadata">

**Author:** [@nandha\_88](https://discuss.elastic.co/u/nandha_88)\
**Replies:** 2\
**Last updated:** [August 1, 2018, 3:01pm UTC](https://discuss.elastic.co/t/need-to-get-the-list-of-hosts-sending-the-logs-to-kibana/142435 "2018-08-01T15:01:06Z")

</div>

Hi All, I need to setup a new visualize to get the list of hosts forwarding the logs to logstash. We have around 50 server and filebeat is the only plugin installed in all the server. I dont want the count , I want th…

---

## [Count length of field / number of characters in a field and add the result into a new field](https://discuss.elastic.co/t/count-length-of-field-number-of-characters-in-a-field-and-add-the-result-into-a-new-field/157705)

<div class="topic-metadata">

**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\
**Replies:** 8\
**Last updated:** [December 4, 2018, 2:01pm UTC](https://discuss.elastic.co/t/count-length-of-field-number-of-characters-in-a-field-and-add-the-result-into-a-new-field/157705 "2018-12-04T14:01:29Z")

</div>

hi im trying to port the answer given here \`\`\` filter { ruby { code =\> " event\['indexname'\] = event\['somefield'\].length \> 10 ? 'long-fields' : 'short-fields' " } } \`\`\` and here ruby { code =\> "…

---

## [Basic Authentication of ES without X-Pack](https://discuss.elastic.co/t/basic-authentication-of-es-without-x-pack/94840)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 4\
**Last updated:** [July 28, 2017, 3:20pm UTC](https://discuss.elastic.co/t/basic-authentication-of-es-without-x-pack/94840 "2017-07-28T15:20:54Z")

</div>

I was told that it is possible to do basic authentication of ElasticSearch without installing X-Pack, but I don’t see an option for it. Can you let me know how I can set it up with a simple u/p combo? Thanks!

---

## [Managing kibana for multiple users](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 8\
**Last updated:** [February 15, 2018, 9:11am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160 "2018-02-15T09:11:36Z")

</div>

Hi , How could i manage kibana when multiple user's are there, like i am the admin user and i should get full access to kibana, like wise there will another user which is Normal user he should have limited access in kib…

---

## [How to get the json for a searchrequest?](https://discuss.elastic.co/t/how-to-get-the-json-for-a-searchrequest/16126)

<div class="topic-metadata">

**Author:** [@Tebring\_Daly](https://discuss.elastic.co/u/Tebring_Daly)\
**Replies:** 6\
**Last updated:** [September 19, 2014, 5:58pm UTC](https://discuss.elastic.co/t/how-to-get-the-json-for-a-searchrequest/16126 "2014-09-19T17:58:06Z")

</div>

Is there a way to get the json string from a SearchRequest object? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiv…

---

## [Dynamic field creation using regex and scripted fields](https://discuss.elastic.co/t/dynamic-field-creation-using-regex-and-scripted-fields/312)

<div class="topic-metadata">

**Author:** [@esiegel](https://discuss.elastic.co/u/esiegel)\
**Replies:** 6\
**Last updated:** [August 2, 2016, 9:42am UTC](https://discuss.elastic.co/t/dynamic-field-creation-using-regex-and-scripted-fields/312 "2016-08-02T09:42:44Z")

</div>

I'm wondering if scripted fields could help me with dynamically generating kibana fields. A small subset of my logs follows the format: message: "My awesome thing that I just did (10ms)" I'd like to query for all l…

---

## [Failed to connect to backoff(elasticsearch(http://es01:9200)): Connection marked as failed because the onConnect callback failed: resource 'apm-7.5.2-error' exists, but it is not an alias](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-es01-9200-connection-marked-as-failed-because-the-onconnect-callback-failed-resource-apm-7-5-2-error-exists-but-it-is-not-an-alias/236088)

<div class="topic-metadata">

**Author:** [@mac\_71128](https://discuss.elastic.co/u/mac_71128)\
**Replies:** 4\
**Last updated:** [June 9, 2020, 5:16pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-es01-9200-connection-marked-as-failed-because-the-onconnect-callback-failed-resource-apm-7-5-2-error-exists-but-it-is-not-an-alias/236088 "2020-06-09T17:16:24Z")

</div>

Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: 7.5.2 APM Agent language and version: python elastic-apm 5.5.2 elasticsearch 7.5.1 I have two server machines. One of them is for elastic a…

---

## [Invalid format for timestamp field](https://discuss.elastic.co/t/invalid-format-for-timestamp-field/34793)

<div class="topic-metadata">

**Author:** [@alex22](https://discuss.elastic.co/u/alex22)\
**Replies:** 6\
**Last updated:** [February 2, 2016, 3:37pm UTC](https://discuss.elastic.co/t/invalid-format-for-timestamp-field/34793 "2016-02-02T15:37:44Z")

</div>

Hi there, i'm currently facing an issue with the timestamp field after upgrading logstash from 1.5 to 2.0. The data i try to parse is: "timestamp"=\>"14/Nov/2015:10:47:15 +0100", And the date filter looks like t…

---

## [How to create an alerting using the ELK stack(email alerting only)](https://discuss.elastic.co/t/how-to-create-an-alerting-using-the-elk-stack-email-alerting-only/48662)

<div class="topic-metadata">

**Author:** [@ashutosh25apr](https://discuss.elastic.co/u/ashutosh25apr)\
**Replies:** 5\
**Last updated:** [May 1, 2016, 6:22pm UTC](https://discuss.elastic.co/t/how-to-create-an-alerting-using-the-elk-stack-email-alerting-only/48662 "2016-05-01T18:22:13Z")

</div>

Please provide me with steps to add email alerting in ELK . Alerting with Logstash.

---

## [Kibana Visualization with "filters" on metric](https://discuss.elastic.co/t/kibana-visualization-with-filters-on-metric/196725)

<div class="topic-metadata">

**Author:** [@zbawio](https://discuss.elastic.co/u/zbawio)\
**Replies:** 7\
**Last updated:** [August 26, 2019, 10:48am UTC](https://discuss.elastic.co/t/kibana-visualization-with-filters-on-metric/196725 "2019-08-26T10:48:51Z")

</div>

hi , i have 4m documents on my kibana and i want to visualise some with "metric count" , all fields of my document have "string" values. I have a CS-Method field and it returns GET or POST string value. I tried to do a…

---

## [Get pre-filter raw message](https://discuss.elastic.co/t/get-pre-filter-raw-message/33533)

<div class="topic-metadata">

**Author:** [@raffis](https://discuss.elastic.co/u/raffis)\
**Replies:** 4\
**Last updated:** [November 3, 2015, 10:59am UTC](https://discuss.elastic.co/t/get-pre-filter-raw-message/33533 "2015-11-03T10:59:45Z")

</div>

How can I get the original raw message? I got two outputs, the first one should log the original raw log message and the second one the whole filtered stuff. But I can't do input -\> output -\> filter -\> output right? S…

---

## [Is it possible to rename a field in ES?](https://discuss.elastic.co/t/is-it-possible-to-rename-a-field-in-es/5397)

<div class="topic-metadata">

**Author:** [@datadev](https://discuss.elastic.co/u/datadev)\
**Replies:** 4\
**Last updated:** [April 2, 2015, 9:55pm UTC](https://discuss.elastic.co/t/is-it-possible-to-rename-a-field-in-es/5397 "2015-04-02T21:55:00Z")

</div>

Suppose I create an index X with type Y and add 100,000 documents containing a field 'foo'. Is there a command I can use to atomically rename the field name from 'foo' to 'bar', or would I have to reindex all 100,…

[Previous page](https://discuss.elastic.co/top.md?page=301&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=303&per_page=50&period=all)
