# Top **URL:** https://discuss.elastic.co/top.md?page=307&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 308 --- ## [License could not be determined error](https://discuss.elastic.co/t/license-could-not-be-determined-error/55184)
**Author:** [@mrvincnezo](https://discuss.elastic.co/u/mrvincnezo)\ **Replies:** 6\ **Last updated:** [November 9, 2016, 9:46am UTC](https://discuss.elastic.co/t/license-could-not-be-determined-error/55184 "2016-11-09T09:46:44Z")
After installing X-Pack into elasticsearch & kibana (both are alpha4), when I ran kibana for the first time (after X-Pack installation) I get a login screen but it is disabled! Below the login screen there is a message s… --- ## [Action \[indices:admin/delete\] is unauthorized for user](https://discuss.elastic.co/t/action-indices-admin-delete-is-unauthorized-for-user/85744)
**Author:** [@vijayramachandran](https://discuss.elastic.co/u/vijayramachandran)\ **Replies:** 3\ **Last updated:** [May 15, 2017, 2:11pm UTC](https://discuss.elastic.co/t/action-indices-admin-delete-is-unauthorized-for-user/85744 "2017-05-15T14:11:43Z")
Hi Team, I don't quite get this, what's causing this issue, roles.yml \> hello: \> cluster: \> - all \> indices: \> - names: 'twitter' \> privileges: \> - all x-pack\]$./users list test :… --- ## [Kibana doesn't start](https://discuss.elastic.co/t/kibana-doesnt-start/83809)
**Author:** [@raghuvarma](https://discuss.elastic.co/u/raghuvarma)\ **Replies:** 7\ **Last updated:** [May 3, 2017, 1:44pm UTC](https://discuss.elastic.co/t/kibana-doesnt-start/83809 "2017-05-03T13:44:56Z")
when i start the service it doesn't start and below are stderror &stdoutput file for reference In kibana.yml file apart from server.host: "localhost" everything was commented. Please help me resolve it. stderror file… --- ## [Filebeat error failed to publish events caused connection reset by peer](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-connection-reset-by-peer/268400)
**Author:** [@aneeshansari](https://discuss.elastic.co/u/aneeshansari)\ **Replies:** 5\ **Last updated:** [March 30, 2021, 7:31am UTC](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-connection-reset-by-peer/268400 "2021-03-30T07:31:26Z")
Hello Everyone, Need help for following error in filebeat with logstash. error failed to publish events caused by: write tcp 127.0.0.1:random\_port-\>127.0.0.1:5044 write: connection reset by peer I already increased … --- ## [Script on aggregation value](https://discuss.elastic.co/t/script-on-aggregation-value/52184)
**Author:** [@lore6673](https://discuss.elastic.co/u/lore6673)\ **Replies:** 0\ **Last updated:** [June 8, 2016, 9:37am UTC](https://discuss.elastic.co/t/script-on-aggregation-value/52184 "2016-06-08T09:37:07Z")
Hello I need to calculate a ratio between 2 aggregation. This is my request { "query": { "filtered": { "query": { "query\_string": { "query": "MERCH\_YEAR:2016", "analyze\_wildc… --- ## [Date\_time parsing error in Elastic Stack 7.0. Worked fine in 6.7](https://discuss.elastic.co/t/date-time-parsing-error-in-elastic-stack-7-0-worked-fine-in-6-7/185658)
**Author:** [@Paul\_14](https://discuss.elastic.co/u/Paul_14)\ **Replies:** 7\ **Last updated:** [June 20, 2019, 3:02pm UTC](https://discuss.elastic.co/t/date-time-parsing-error-in-elastic-stack-7-0-worked-fine-in-6-7/185658 "2019-06-20T15:02:31Z")
Hello, Bit of a strange problem. I was using Elastic Stack 6.7 and have recently created a new 7.0 cluster. From Filebeat I feed the below log line into both of these versions of Logstash Log line: \[INFO \] \[2019-06-… --- ## [Logstash sincedb files](https://discuss.elastic.co/t/logstash-sincedb-files/95297)
**Author:** [@sreepatch](https://discuss.elastic.co/u/sreepatch)\ **Replies:** 6\ **Last updated:** [August 3, 2017, 12:09pm UTC](https://discuss.elastic.co/t/logstash-sincedb-files/95297 "2017-08-03T12:09:44Z")
Hi, I have a logstash running in unix host and since db files are getting created in so many numbers. Can you please clarify below questions 1.How often will these sincedb files be created 2.Will sincedb file be crea… --- ## [How to update multiple documents in ElasticSearch with conditions?](https://discuss.elastic.co/t/how-to-update-multiple-documents-in-elasticsearch-with-conditions/221387)
**Author:** [@ndhcoder](https://discuss.elastic.co/u/ndhcoder)\ **Replies:** 4\ **Last updated:** [March 5, 2020, 2:01am UTC](https://discuss.elastic.co/t/how-to-update-multiple-documents-in-elasticsearch-with-conditions/221387 "2020-03-05T02:01:53Z")
Hello, I'm a newbie in ElasticSearch, I have a problems, I want tagging documents stored in ElasticSearch with specific conditions, Ex: I want to add new attributes tags = "hight" for any document have height attribute… --- ## [Check existence of a field and checking null value in field](https://discuss.elastic.co/t/check-existence-of-a-field-and-checking-null-value-in-field/24968)
**Author:** [@DavidL](https://discuss.elastic.co/u/DavidL)\ **Replies:** 3\ **Last updated:** [April 5, 2016, 8:28pm UTC](https://discuss.elastic.co/t/check-existence-of-a-field-and-checking-null-value-in-field/24968 "2016-04-05T20:28:18Z")
I have different types of logs generated by the software we user in one big file. I am trying to assign "log\_type" to different types of logs in my file. Since they have different number of columns(I used csv plugin to p… --- ## [Indexes creation by date issue](https://discuss.elastic.co/t/indexes-creation-by-date-issue/92233)
**Author:** [@alonsosanchezd](https://discuss.elastic.co/u/alonsosanchezd)\ **Replies:** 7\ **Last updated:** [November 7, 2017, 11:02am UTC](https://discuss.elastic.co/t/indexes-creation-by-date-issue/92233 "2017-11-07T11:02:15Z")
Hi all! Firstly, let me thank you all for your help! I have an strange behaviour of filebeat/logstash and elasticsearch. Let me explain: I have to index log files of last month and I'm forcing logstash to replace proce… --- ## [Parse filename before sending to ElasticSearch](https://discuss.elastic.co/t/parse-filename-before-sending-to-elasticsearch/177670)
**Author:** [@rahulnathan](https://discuss.elastic.co/u/rahulnathan)\ **Replies:** 8\ **Last updated:** [April 30, 2019, 5:20am UTC](https://discuss.elastic.co/t/parse-filename-before-sending-to-elasticsearch/177670 "2019-04-30T05:20:13Z")
I am trying to parse the filename to extract certain information. Is this possible today or need to send the data to LogStash to process further ? Thanks, Rahul --- ## [What exactly does sincedb\_path do?](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504)
**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 8:09pm UTC](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504 "2021-12-20T20:09:50Z")
I'm having little trouble understanding Logstash a bit. I've already imported a file using Logstash and I've tried to update the index but it updates it only if I set sincedb\_path to NUL. Can someone explain? Thanks. --- ## [Kibana RAM allocation](https://discuss.elastic.co/t/kibana-ram-allocation/265286)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 8\ **Last updated:** [February 24, 2021, 2:05pm UTC](https://discuss.elastic.co/t/kibana-ram-allocation/265286 "2021-02-24T14:05:19Z")
Hi there Despite of 8G RAM, my Kibana uses only 1G of RAM... How can I allocate more RAM to Kibana? What should I write in kibana.yml to determine more RAM for Kibana? --- ## [JSON latitude/longitude to geo\_point](https://discuss.elastic.co/t/json-latitude-longitude-to-geo-point/1883)
**Author:** [@kchiappone](https://discuss.elastic.co/u/kchiappone)\ **Replies:** 4\ **Last updated:** [July 11, 2016, 8:44pm UTC](https://discuss.elastic.co/t/json-latitude-longitude-to-geo-point/1883 "2016-07-11T20:44:06Z")
I'm looking for some guidance or an example on creating a geo\_point from JSON latitude and longitude fields which I can then visualize in Kibana 4 on a Tile Map. I'm in control of the data output so I can format it any … --- ## [Logstash - File output error - permission denied](https://discuss.elastic.co/t/logstash-file-output-error-permission-denied/173954)
**Author:** [@HaranKumar](https://discuss.elastic.co/u/HaranKumar)\ **Replies:** 7\ **Last updated:** [April 1, 2019, 12:47pm UTC](https://discuss.elastic.co/t/logstash-file-output-error-permission-denied/173954 "2019-04-01T12:47:08Z")
Hello Team, I am trying to collect a set of data from a URL and save it in a file as json format. below is my logstash configuration file . Kindly help me with troubleshooting where and what i am missing. I am gettin… --- ## [Max number of indices](https://discuss.elastic.co/t/max-number-of-indices/97932)
**Author:** [@gchen](https://discuss.elastic.co/u/gchen)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 7:07pm UTC](https://discuss.elastic.co/t/max-number-of-indices/97932 "2017-08-22T19:07:40Z")
We’re heavily reliant on doc-types now, but i know doc-types is going away in 6.x. So i’m exploring idea of creating one index of each of the doc types. Would a few hundred indices cause problem? Around 500 indices? … --- ## [Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.19.0.3:9200](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-172-19-0-3-9200/294182)
**Author:** [@Spyros\_Agriopoulos](https://discuss.elastic.co/u/Spyros_Agriopoulos)\ **Replies:** 6\ **Last updated:** [January 13, 2022, 1:22pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-172-19-0-3-9200/294182 "2022-01-13T13:22:14Z")
Hello guys, I am trying to setup an ELK stack with docker compose and TLS, and I get this message from kibana's logs. Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.19.0.3:920… --- ## [Multi\_match/query string with nested and "non-nested" fields](https://discuss.elastic.co/t/multi-match-query-string-with-nested-and-non-nested-fields/118652)
**Author:** [@YeeP](https://discuss.elastic.co/u/YeeP)\ **Replies:** 5\ **Last updated:** [February 6, 2018, 3:50pm UTC](https://discuss.elastic.co/t/multi-match-query-string-with-nested-and-non-nested-fields/118652 "2018-02-06T15:50:13Z")
EDIT: This setup is using Elasticsearch 6.1.3 Can this be done? I am trying to set up a front-end search that looks through several fields, so the multi-match and or query-string. I would like to search in both the "nu… --- ## [Filebeat error connecting to Elasticsearch](https://discuss.elastic.co/t/filebeat-error-connecting-to-elasticsearch/213079)
**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\ **Replies:** 6\ **Last updated:** [December 30, 2019, 8:04pm UTC](https://discuss.elastic.co/t/filebeat-error-connecting-to-elasticsearch/213079 "2019-12-30T20:04:06Z")
I have Filebeat on a Windows 10 machine sending log data to Elasticsearch on a Windows Server 2016. The services are running correctly. As I'd posted earlier, I'm using basic authentication. I've created a user named fi… --- ## [Search string with space](https://discuss.elastic.co/t/search-string-with-space/5068)
**Author:** [@ElasticUser](https://discuss.elastic.co/u/ElasticUser)\ **Replies:** 2\ **Last updated:** [August 6, 2011, 7:29pm UTC](https://discuss.elastic.co/t/search-string-with-space/5068 "2011-08-06T19:29:36Z")
In my raw message, I have apache directory text. I am using term query as below .setQuery(termQuery("message", "\\"apache directory\\"")) But get 0 hits. Can someone let me know the API for matching strings separated… --- ## [Restarting nodes with allocation disabled](https://discuss.elastic.co/t/restarting-nodes-with-allocation-disabled/100)
**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\ **Replies:** 1\ **Last updated:** [June 7, 2015, 2:56pm UTC](https://discuss.elastic.co/t/restarting-nodes-with-allocation-disabled/100 "2015-06-07T14:56:17Z")
When you are intentionally restarting nodes, such as during a rolling restart while upgrading Elasticsearch, you should generally disable allocation to prevent the rest of the cluster from reacting to the loss of nodes. … --- ## [MS Excel plugin for Elasticsearch](https://discuss.elastic.co/t/ms-excel-plugin-for-elasticsearch/12027)
**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\ **Replies:** 5\ **Last updated:** [March 8, 2017, 5:21pm UTC](https://discuss.elastic.co/t/ms-excel-plugin-for-elasticsearch/12027 "2017-03-08T17:21:49Z")
Hi , Is there any plugin point already worked on for MS Excel. I just wanted to run the query from MS Excel and fetch the results in MS Excel. Is that possible using any current work ? Thanks Vineeth… --- ## [Underlying file changed by an external force](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/137555)
**Author:** [@xiaomage](https://discuss.elastic.co/u/xiaomage)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 1:50pm UTC](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/137555 "2018-06-27T13:50:19Z")
Using elasticsearch cluster( 3 servers) with kubernetes, but elasticsearch cluster can not wrok fine and log show as below: \[2018-06-27T05:48:31,798\]\[WARN \]\[o.e.c.r.a.AllocationService\] \[sBJEWnS\] failing shard \[failed … --- ## [Unable to send json data to elastic search](https://discuss.elastic.co/t/unable-to-send-json-data-to-elastic-search/143506)
**Author:** [@srdat](https://discuss.elastic.co/u/srdat)\ **Replies:** 5\ **Last updated:** [August 8, 2018, 6:03pm UTC](https://discuss.elastic.co/t/unable-to-send-json-data-to-elastic-search/143506 "2018-08-08T18:03:14Z")
I'm able to read data from mysql and print in json format but unable to send json data to elastic search. Below is my piece of code in python def exportTable(table\_name): query = "SELECT \* FROM "+table\_name data = ru… --- ## [I wrote a book with practical Elasticsearch examples](https://discuss.elastic.co/t/i-wrote-a-book-with-practical-elasticsearch-examples/268910)
**Author:** [@JoeSorocin](https://discuss.elastic.co/u/JoeSorocin)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 1:09pm UTC](https://discuss.elastic.co/t/i-wrote-a-book-with-practical-elasticsearch-examples/268910 "2021-03-31T13:09:16Z")
Hey guys! After hundreds of hours spent on answering questions on Stackoverflow, I observed a few barriers of entry that ES newbies struggle with. It's first and foremost the formidable query language. Now, most of us … --- ## [Running Elasticsearch completely in memory](https://discuss.elastic.co/t/running-elasticsearch-completely-in-memory/78190)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 4\ **Last updated:** [March 14, 2017, 5:15am UTC](https://discuss.elastic.co/t/running-elasticsearch-completely-in-memory/78190 "2017-03-14T05:15:36Z")
hi, I am trying to find if I can run Elasticsearch completely from physical RAM like a in-memory DB. My index size is relatively small (lets says ~10GB) and is more or less constant size and does not change that freque… --- ## [Index Alias in Elastic Security (Network Map) \[7.9.2\]](https://discuss.elastic.co/t/index-alias-in-elastic-security-network-map-7-9-2/271605)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 11:16am UTC](https://discuss.elastic.co/t/index-alias-in-elastic-security-network-map-7-9-2/271605 "2021-04-30T11:16:04Z")
Hi, everyone I have a SonicWall index (firewall device) that has the index alias Elastic Security. In Kibana --\> Advanced Settings --\> Elasticsearch indices -\> securitySolution:defaultIndex However, it does not wor… --- ## [Change kibana port from 5601 to 80 got errors](https://discuss.elastic.co/t/change-kibana-port-from-5601-to-80-got-errors/57196)
**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\ **Replies:** 7\ **Last updated:** [August 18, 2016, 9:03am UTC](https://discuss.elastic.co/t/change-kibana-port-from-5601-to-80-got-errors/57196 "2016-08-18T09:03:18Z")
kibana version using is 4.5 but when I start it up, it shows below error in log file: {"type":"log","@timestamp":"2016-08-04T08:58:53+00:00","tags":\["fatal"\],"pid":10459,"level":"fatal","message":"listen EACCES 10.19… --- ## [Exiting: No paths were defined for input accessing config](https://discuss.elastic.co/t/exiting-no-paths-were-defined-for-input-accessing-config/139687)
**Author:** [@vkoul](https://discuss.elastic.co/u/vkoul)\ **Replies:** 8\ **Last updated:** [July 18, 2018, 8:10am UTC](https://discuss.elastic.co/t/exiting-no-paths-were-defined-for-input-accessing-config/139687 "2018-07-18T08:10:01Z")
Hello, Here is the problem. When I run filebeat command on command prompt, it starts writing to the logs instantly. However, if I execute "filebeat modules enable system" command and then run "filebeat" command, it giv… --- ## [Error 500 on kibana startup - Unable to connect to Elasticsearch](https://discuss.elastic.co/t/error-500-on-kibana-startup-unable-to-connect-to-elasticsearch/211782)
**Author:** [@sezio](https://discuss.elastic.co/u/sezio)\ **Replies:** 6\ **Last updated:** [December 27, 2019, 7:47am UTC](https://discuss.elastic.co/t/error-500-on-kibana-startup-unable-to-connect-to-elasticsearch/211782 "2019-12-27T07:47:28Z")
Hello, I've not been able to find a similar problem or a working answer so I'm opening a new topic. I've installed Kibana through the apt repository to see what happens in my elastic search database. I've been using ES… --- ## [How to normalize score when combining regular query and function\_score?](https://discuss.elastic.co/t/how-to-normalize-score-when-combining-regular-query-and-function-score/19323)
**Author:** [@JohnnyM](https://discuss.elastic.co/u/JohnnyM)\ **Replies:** 0\ **Last updated:** [August 18, 2014, 1:52pm UTC](https://discuss.elastic.co/t/how-to-normalize-score-when-combining-regular-query-and-function-score/19323 "2014-08-18T13:52:51Z")
First of all kudos on the awesome job everyone here is doing! I was wondering if you guys can help me solve this puzzle: Also available on stack overflow: http://stackoverflow.com/questions/25361795/elasticsearch… --- ## [How do we enable slow search queries logging in Elasticsearch?](https://discuss.elastic.co/t/how-do-we-enable-slow-search-queries-logging-in-elasticsearch/94)
**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\ **Replies:** 2\ **Last updated:** [July 12, 2016, 10:23am UTC](https://discuss.elastic.co/t/how-do-we-enable-slow-search-queries-logging-in-elasticsearch/94 "2016-07-12T10:23:04Z")
The slow log settings are node settings and not index settings, so you can't change these settings via the update index settings api. You can change these settings via the cluster update api: PUT /\_cluster/settings… --- ## [Elastic change ip](https://discuss.elastic.co/t/elastic-change-ip/156426)
**Author:** [@nandha\_88](https://discuss.elastic.co/u/nandha_88)\ **Replies:** 5\ **Last updated:** [November 26, 2018, 4:49pm UTC](https://discuss.elastic.co/t/elastic-change-ip/156426 "2018-11-26T16:49:31Z")
Hi Team, The ELK setup running fine for past 1 years without any issue I tried to change elasticsearch ip from localhost to the public IP XX:XX:XX:XX but it is unsuccessfull. The logstash is not taking up the new ip … --- ## [Elastic search won't start after fresh install on Debian](https://discuss.elastic.co/t/elastic-search-wont-start-after-fresh-install-on-debian/52517)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 4\ **Last updated:** [June 13, 2016, 8:50am UTC](https://discuss.elastic.co/t/elastic-search-wont-start-after-fresh-install-on-debian/52517 "2016-06-13T08:50:50Z")
$ uname -a 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt25-2 (2016-04-08) x86\_64 GNU/Linux I installed Java like to /opt/jdk/jdk1.8.0\_91 Then installed elastic: Imported key wget -qO - https://packages.elastic.co/GPG-KEY-… --- ## [Timelion points "greater than count 0" condition](https://discuss.elastic.co/t/timelion-points-greater-than-count-0-condition/72680)
**Author:** [@Dreadlocked](https://discuss.elastic.co/u/Dreadlocked)\ **Replies:** 2\ **Last updated:** [January 25, 2017, 11:09am UTC](https://discuss.elastic.co/t/timelion-points-greater-than-count-0-condition/72680 "2017-01-25T11:09:48Z")
Hi, I need to visualize some points related to specific Windows events on Timelion, the problem is that there are so many points over 0.00: This is the expression I've used: .es(event\_id:4624).points(radius=6).label("S… --- ## [Ailed to start Elasticsearch. (code=killed, signal=KILL)](https://discuss.elastic.co/t/ailed-to-start-elasticsearch-code-killed-signal-kill/278827)
**Author:** [@Tealk](https://discuss.elastic.co/u/Tealk)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 10:38pm UTC](https://discuss.elastic.co/t/ailed-to-start-elasticsearch-code-killed-signal-kill/278827 "2021-07-16T22:38:48Z")
hello i just want to move my mastodon server and i just installed Elasticsearch on a new server but i get the following error when i start it: systemctl start elasticsearch Job for elasticsearch.service failed because a… --- ## [Elasticsearch filter multiple fields](https://discuss.elastic.co/t/elasticsearch-filter-multiple-fields/25855)
**Author:** [@Sivaprakash\_Shanmuga](https://discuss.elastic.co/u/Sivaprakash_Shanmuga)\ **Replies:** 5\ **Last updated:** [July 21, 2015, 7:13pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-multiple-fields/25855 "2015-07-21T19:13:13Z")
I have following data set indexed in my elasticsearch { "title": "Professor", "class": \[6001, 6015, 6018\], "subject": \[5010, 5012, 5013\], "salary": 12500 } { "title": "Professor", "class": \[6012, 6013, 6014\], … --- ## [Logstash: ruby filter: how to create empty event?](https://discuss.elastic.co/t/logstash-ruby-filter-how-to-create-empty-event/123271)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [March 23, 2018, 1:53pm UTC](https://discuss.elastic.co/t/logstash-ruby-filter-how-to-create-empty-event/123271 "2018-03-23T13:53:15Z")
Hi, Is it possible to create additional empty events in ruby filter plugin? Only option I found in documentation https://www.elastic.co/guide/en/logstash/current/plugins-filters-ruby.html is to clone the current event. … --- ## [Timestamp range query](https://discuss.elastic.co/t/timestamp-range-query/41557)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 8\ **Last updated:** [February 13, 2016, 7:22am UTC](https://discuss.elastic.co/t/timestamp-range-query/41557 "2016-02-13T07:22:06Z")
My latest data is February 5th 2016, 13:18:10.036 to February 10th 2016, 20:00:19.590. This query doesnt work: curl -XGET http://localhost:9200/member\_type\_history -d '{"query":{"filter":{"range":{"@timestamp":{"gt":"… --- ## [Fields with date type not showing up in time-field drop down in Kibana](https://discuss.elastic.co/t/fields-with-date-type-not-showing-up-in-time-field-drop-down-in-kibana/54935)
**Author:** [@shrewn](https://discuss.elastic.co/u/shrewn)\ **Replies:** 8\ **Last updated:** [July 18, 2016, 2:40pm UTC](https://discuss.elastic.co/t/fields-with-date-type-not-showing-up-in-time-field-drop-down-in-kibana/54935 "2016-07-18T14:40:56Z")
Is there any specific format for time-field in Kibana? I have an index containing some fields with name matching regex .time. or .\*ts (for e.g. createtime, feed\_ts) having their type as date and format as dateOptionalT… --- ## [Terms Aggregation With Script Field](https://discuss.elastic.co/t/terms-aggregation-with-script-field/108584)
**Author:** [@harshanarayana](https://discuss.elastic.co/u/harshanarayana)\ **Replies:** 2\ **Last updated:** [November 22, 2017, 11:21am UTC](https://discuss.elastic.co/t/terms-aggregation-with-script-field/108584 "2017-11-22T11:21:45Z")
Hi, I'm using Elasticsearch JAVA DSL library with Version 5.6 I am trying to create an Elasticsearch Query that is similar to the one mentioned below. { "aggs": { "aggName": { "terms": { … --- ## [Azure event hub input](https://discuss.elastic.co/t/azure-event-hub-input/271415)
**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\ **Replies:** 2\ **Last updated:** [May 7, 2021, 12:03pm UTC](https://discuss.elastic.co/t/azure-event-hub-input/271415 "2021-05-07T12:03:53Z")
I have an azure event hub i want to use the azure event input plugin to grab the data....I’ve gotten Logstash to connect in to the hub.. but im getting a strange error when the conf is running.... hoping someone has an i… --- ## [Geo\_point](https://discuss.elastic.co/t/geo-point/48215)
**Author:** [@echua](https://discuss.elastic.co/u/echua)\ **Replies:** 5\ **Last updated:** [September 13, 2016, 4:39pm UTC](https://discuss.elastic.co/t/geo-point/48215 "2016-09-13T16:39:31Z")
I am trying to use the mapping portion of Kibana to map all the points that I have in my database for a given time period. I just started ELK so I don't know a lot. I have been struggling to insert geo\_point type of da… --- ## [Documents Not Indexed](https://discuss.elastic.co/t/documents-not-indexed/65941)
**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\ **Replies:** 8\ **Last updated:** [November 14, 2016, 11:45am UTC](https://discuss.elastic.co/t/documents-not-indexed/65941 "2016-11-14T11:45:53Z")
Hi I got an issue, all the data is written into elastic documents but they are not indexed which we can't search.. can any one advise how do i reindex them all at once thanks in advance --- ## [Aggregation across multiple indices](https://discuss.elastic.co/t/aggregation-across-multiple-indices/271350)
**Author:** [@ice2021](https://discuss.elastic.co/u/ice2021)\ **Replies:** 8\ **Last updated:** [May 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/aggregation-across-multiple-indices/271350 "2021-05-20T15:07:36Z")
I have 2 indices and they store data of the same mappings on different dates - t1 and t2. I have a multi term aggregation below which works on a single index. How can I get elasticsearch to return the same aggregation a… --- ## [Query with wildcard and space not working](https://discuss.elastic.co/t/query-with-wildcard-and-space-not-working/208106)
**Author:** [@Niels\_Brunsgaard](https://discuss.elastic.co/u/Niels_Brunsgaard)\ **Replies:** 2\ **Last updated:** [November 16, 2019, 8:59pm UTC](https://discuss.elastic.co/t/query-with-wildcard-and-space-not-working/208106 "2019-11-16T20:59:31Z")
How do I combine wildcard and spaces in a search? A KQL search for log.message:Core API Request returns expected matches. But log.message:Core API\* does not. I'm happy to use either KQL or Lucene. --- ## [ERR Failed to publish events caused by: read tcp IP:40634-\>IP:5044: i/o timeout](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-read-tcp-ip-40634-ip-5044-i-o-timeout/90355)
**Author:** [@cazyfunlover](https://discuss.elastic.co/u/cazyfunlover)\ **Replies:** 6\ **Last updated:** [June 25, 2017, 4:40pm UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-read-tcp-ip-40634-ip-5044-i-o-timeout/90355 "2017-06-25T16:40:11Z")
Hello , I am seeing error -- ERR Failed to publish events caused by: read tcp INFO Error publishing events (retrying): read tcp filebeat.prospectors: - input\_type: log # Paths that should be crawled and fetched.… --- ## [Context suggestor in elastic search applied on the nested fields](https://discuss.elastic.co/t/context-suggestor-in-elastic-search-applied-on-the-nested-fields/44946)
**Author:** [@hemraj-sharma](https://discuss.elastic.co/u/hemraj-sharma)\ **Replies:** 1\ **Last updated:** [April 18, 2017, 8:11am UTC](https://discuss.elastic.co/t/context-suggestor-in-elastic-search-applied-on-the-nested-fields/44946 "2017-04-18T08:11:15Z")
I came across a problem to implement the context suggester of elastic search for the auto-complete search. In my case i have the index document as: explained bellow--\>\> I need to get the document which should have stat… --- ## [Update/Upsert Performance Improvements](https://discuss.elastic.co/t/update-upsert-performance-improvements/29477)
**Author:** [@strfx](https://discuss.elastic.co/u/strfx)\ **Replies:** 7\ **Last updated:** [September 17, 2015, 4:21pm UTC](https://discuss.elastic.co/t/update-upsert-performance-improvements/29477 "2015-09-17T16:21:14Z")
Hi you all I'm having data that is very frequently updated, so I use bulk updates (50k documents, ~25MB) to update the data in elasticsearch. If a document is already present, I use scripted updates (to increase a co… --- ## [When to use PUT versus POST?](https://discuss.elastic.co/t/when-to-use-put-versus-post/68550)
**Author:** [@amit\_saxena](https://discuss.elastic.co/u/amit_saxena)\ **Replies:** 4\ **Last updated:** [December 12, 2016, 10:57am UTC](https://discuss.elastic.co/t/when-to-use-put-versus-post/68550 "2016-12-12T10:57:45Z")
Hi all, I have just started learning Elasticsearch. While going through the online documentation which talks about use of REST APIs, I have observed that whenever a create / modify / delete action is required, sometime… [Previous page](https://discuss.elastic.co/top.md?page=306&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=308&per_page=50&period=all)