# Top

**URL:** https://discuss.elastic.co/top.md?page=311&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 312

---

## [\[SOLVED\]Getting duplicate entries with Filebeat to Logstash Setup](https://discuss.elastic.co/t/solved-getting-duplicate-entries-with-filebeat-to-logstash-setup/155669)

<div class="topic-metadata">

**Author:** [@plex1030](https://discuss.elastic.co/u/plex1030)\
**Replies:** 6\
**Last updated:** [November 7, 2018, 8:50am UTC](https://discuss.elastic.co/t/solved-getting-duplicate-entries-with-filebeat-to-logstash-setup/155669 "2018-11-07T08:50:14Z")

</div>

Hi, My setup has been working perfectly for a week now but today I noticed that an entire logfile got submitted twice (the whole content was written around the same time so it was probably transmitted as one batch). Th…

---

## [Mutate gsub regex pattern help](https://discuss.elastic.co/t/mutate-gsub-regex-pattern-help/260122)

<div class="topic-metadata">

**Author:** [@S3l3ct3d](https://discuss.elastic.co/u/S3l3ct3d)\
**Replies:** 6\
**Last updated:** [January 4, 2021, 10:27pm UTC](https://discuss.elastic.co/t/mutate-gsub-regex-pattern-help/260122 "2021-01-04T22:27:12Z")

</div>

I am having an issue with the regex pattern in mutate gsub function. My current filter is below filter { # Log types are "SIEM\_EVENTS", "TTP\_EVENTS", "AUDIT\_EVENTS". mutate { gsub =\> \[ "\[message\]", "^\<\\d+\>", "" \] …

---

## [Regarding to add a header " -H 'Content-Type: application/json' "](https://discuss.elastic.co/t/regarding-to-add-a-header-h-content-type-application-json/198363)

<div class="topic-metadata">

**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\
**Replies:** 4\
**Last updated:** [September 9, 2019, 2:56am UTC](https://discuss.elastic.co/t/regarding-to-add-a-header-h-content-type-application-json/198363 "2019-09-09T02:56:12Z")

</div>

Hi Experts, I met an issue during modify a parameter from template. I want to modify a value of parameter which named "total\_fields" in template such like this: I use curl to input several commands to modify it, but…

---

## [Elasticsearch real time data sync with sql server](https://discuss.elastic.co/t/elasticsearch-real-time-data-sync-with-sql-server/244760)

<div class="topic-metadata">

**Author:** [@Coder\_Cub](https://discuss.elastic.co/u/Coder_Cub)\
**Replies:** 8\
**Last updated:** [August 16, 2020, 3:05am UTC](https://discuss.elastic.co/t/elasticsearch-real-time-data-sync-with-sql-server/244760 "2020-08-16T03:05:21Z")

</div>

I am new to Elastic Search and I am trying to figure it out below scenarios How/which tool to sync/insert data into Elastic search when new record is created in SQL Server?(Near Real time) How to transformation for leg…

---

## [Sorting on a date field](https://discuss.elastic.co/t/sorting-on-a-date-field/3542)

<div class="topic-metadata">

**Author:** [@John\_Chang](https://discuss.elastic.co/u/John_Chang)\
**Replies:** 6\
**Last updated:** [November 11, 2010, 6:44pm UTC](https://discuss.elastic.co/t/sorting-on-a-date-field/3542 "2010-11-11T18:44:19Z")

</div>

I need to query docs, having results sorted by a date field. Before using Elastic Search, I cast my date (long of millis since epoc) to a float and then sorted on that. I did the cast because I read that Lucene cou…

---

## [How to confirm CORS is enabled - Elasticsearch 5.x](https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155)

<div class="topic-metadata">

**Author:** [@somerandomguy](https://discuss.elastic.co/u/somerandomguy)\
**Replies:** 4\
**Last updated:** [November 5, 2016, 8:25am UTC](https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155 "2016-11-05T08:25:15Z")

</div>

Hi. Have installed ES 5.0 with everything else. I have put the following in the /etc/elasticsearch/elasticsearch.yml: http.cors.enabled : true http.cors.allow-origin : "\*" http.cors.allow-methods : OPTIONS, HEAD, GET, …

---

## [Log Retention](https://discuss.elastic.co/t/log-retention/106324)

<div class="topic-metadata">

**Author:** [@motts](https://discuss.elastic.co/u/motts)\
**Replies:** 7\
**Last updated:** [November 3, 2017, 9:47pm UTC](https://discuss.elastic.co/t/log-retention/106324 "2017-11-03T21:47:52Z")

</div>

Does Elasticsearch have a default log retention period? If so, how do I change that. If not, what is the best way to go about purging old logs? Many thanks in advance.

---

## [Kibana parsing\_exception on Unknown key for a START\_ARRAY](https://discuss.elastic.co/t/kibana-parsing-exception-on-unknown-key-for-a-start-array/59574)

<div class="topic-metadata">

**Author:** [@zFrith](https://discuss.elastic.co/u/zFrith)\
**Replies:** 8\
**Last updated:** [September 13, 2016, 2:12pm UTC](https://discuss.elastic.co/t/kibana-parsing-exception-on-unknown-key-for-a-start-array/59574 "2016-09-13T14:12:46Z")

</div>

I am running ELK 5.0.0-alpha5 for logging. Everything was running beautifully until I upgraded from alpha1 to alpha 5. Logstash is indexing logs into Elasticsearch and I can view them via the Elasticsearch API. Unfort…

---

## [Calculate Age from DOB field](https://discuss.elastic.co/t/calculate-age-from-dob-field/173647)

<div class="topic-metadata">

**Author:** [@LJB999](https://discuss.elastic.co/u/LJB999)\
**Replies:** 3\
**Last updated:** [March 27, 2019, 2:49pm UTC](https://discuss.elastic.co/t/calculate-age-from-dob-field/173647 "2019-03-27T14:49:57Z")

</div>

Hi Can anyone advise how I can get Age from a dateofbirth datetime field to use in Kibana displays? I have created a couple of scripted fields to get DayofWeek and TimeofDay from another date field so I'm thinking this i…

---

## [Custom module for file beat - parsing a custom log fomat](https://discuss.elastic.co/t/custom-module-for-file-beat-parsing-a-custom-log-fomat/110908)

<div class="topic-metadata">

**Author:** [@john.akash](https://discuss.elastic.co/u/john.akash)\
**Replies:** 4\
**Last updated:** [December 26, 2017, 9:22pm UTC](https://discuss.elastic.co/t/custom-module-for-file-beat-parsing-a-custom-log-fomat/110908 "2017-12-26T21:22:37Z")

</div>

Hi Team, We do have a custom log in one of our infra and we are trying to push the data to ES using filebeat (don't want to use logstash). For better visualisation, we can create custom modules and make it happened. Co…

---

## [Error loading yaml file-did not find expected key](https://discuss.elastic.co/t/error-loading-yaml-file-did-not-find-expected-key/248554)

<div class="topic-metadata">

**Author:** [@vsekvsek](https://discuss.elastic.co/u/vsekvsek)\
**Replies:** 6\
**Last updated:** [September 16, 2020, 1:48pm UTC](https://discuss.elastic.co/t/error-loading-yaml-file-did-not-find-expected-key/248554 "2020-09-16T13:48:45Z")

</div>

.\\filebeat.exe modules enable apache Error initializing beat: error loading config file: yaml line 70: did not find expected key This is on line 70 on the filebeat file. path: "C:\\\\Program Files\\\\filebeat\\\\module\\\\apa…

---

## [No alive nodes found in your cluster](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster/77805)

<div class="topic-metadata">

**Author:** [@warrio4](https://discuss.elastic.co/u/warrio4)\
**Replies:** 4\
**Last updated:** [March 17, 2017, 2:11pm UTC](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster/77805 "2017-03-17T14:11:29Z")

</div>

Hi, I'm using elasticsearch 5.2.2 with Laravel 5.4 and homestead and I get the following error when I browse http://pr3.app:8000 NoNodesAvailableException in StaticNoPingConnectionPool.php line 51: No alive nodes fou…

---

## [{"statusCode":503,"error":"Service Unavailable","message":"License is not available."}](https://discuss.elastic.co/t/statuscode-503-error-service-unavailable-message-license-is-not-available/319150)

<div class="topic-metadata">

**Author:** [@auser](https://discuss.elastic.co/u/auser)\
**Replies:** 6\
**Last updated:** [November 21, 2022, 2:04am UTC](https://discuss.elastic.co/t/statuscode-503-error-service-unavailable-message-license-is-not-available/319150 "2022-11-21T02:04:09Z")

</div>

I recently configured https for kibana running in three different environments. One of them works fine while the other two have issue as mentioned below - 1 - {"statusCode":503,"error":"Service Unavailable","message":"L…

---

## [Aggregation count unique values](https://discuss.elastic.co/t/aggregation-count-unique-values/119567)

<div class="topic-metadata">

**Author:** [@Manuel\_Islas](https://discuss.elastic.co/u/Manuel_Islas)\
**Replies:** 4\
**Last updated:** [February 13, 2018, 6:15pm UTC](https://discuss.elastic.co/t/aggregation-count-unique-values/119567 "2018-02-13T18:15:16Z")

</div>

Hello, I have a requirement in which I need to aggregate over multiple indexes, each being independent from the others and each containing potentially millions of documents. Each index has its own Ids but contains a has…

---

## [Grok patterns for syslog configuration in logstash](https://discuss.elastic.co/t/grok-patterns-for-syslog-configuration-in-logstash/86938)

<div class="topic-metadata">

**Author:** [@elbesraoui\_imane](https://discuss.elastic.co/u/elbesraoui_imane)\
**Replies:** 3\
**Last updated:** [May 28, 2017, 6:56pm UTC](https://discuss.elastic.co/t/grok-patterns-for-syslog-configuration-in-logstash/86938 "2017-05-28T18:56:30Z")

</div>

Hi,I recentely started working with the ELK stack but I have a problem for my syslog logstash configuration. Can you give me hand pleaase ? I don't know what's the problem I'm having in my config file, but when i do th…

---

## [Unable to update in bulk](https://discuss.elastic.co/t/unable-to-update-in-bulk/105685)

<div class="topic-metadata">

**Author:** [@Aisha1990](https://discuss.elastic.co/u/Aisha1990)\
**Replies:** 4\
**Last updated:** [October 30, 2017, 12:09am UTC](https://discuss.elastic.co/t/unable-to-update-in-bulk/105685 "2017-10-30T00:09:28Z")

</div>

curl -X POST -d "{"index":{"\_index":"products","type":"shoes","\_id":"3"}}{"name":"Puma","size":"9","color":"black"}\\n{"index":{"\_index":"products","\_type":"shoes","\_id":"4"}}{"name":"New Balance","size":"8","color":"blac…

---

## [Missing Fields](https://discuss.elastic.co/t/missing-fields/4603)

<div class="topic-metadata">

**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\
**Replies:** 4\
**Last updated:** [June 13, 2011, 5:26pm UTC](https://discuss.elastic.co/t/missing-fields/4603 "2011-06-13T17:26:44Z")

</div>

How will the "missing" filter be applied in the following cases: { "query":{ "constant\_score" : { "filter" : { "missing" :{ "field" :"name" …

---

## [Attempted to send a bulk request to elasticsearch, but no there are no living connections in the connection pool](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-no-there-are-no-living-connections-in-the-connection-pool/132712)

<div class="topic-metadata">

**Author:** [@kimileonis](https://discuss.elastic.co/u/kimileonis)\
**Replies:** 2\
**Last updated:** [May 30, 2018, 2:13am UTC](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-no-there-are-no-living-connections-in-the-connection-pool/132712 "2018-05-30T02:13:26Z")

</div>

\[2018-05-21T07:16:47,046\]\[ERROR\]\[logstash.outputs.elasticsearch\] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: \[http:…

---

## [Using ES as an alternative for a data warehouse](https://discuss.elastic.co/t/using-es-as-an-alternative-for-a-data-warehouse/8486)

<div class="topic-metadata">

**Author:** [@Parikshit\_Samant](https://discuss.elastic.co/u/Parikshit_Samant)\
**Replies:** 3\
**Last updated:** [July 24, 2012, 2:30pm UTC](https://discuss.elastic.co/t/using-es-as-an-alternative-for-a-data-warehouse/8486 "2012-07-24T14:30:22Z")

</div>

Hi, I was investigating over whether we could use elasticsearch as an alternative for a data warehouse. - The following features of ES are useful: Schemaless storage, Fault tolerance, scalability via distrib…

---

## [How to get started for beginners](https://discuss.elastic.co/t/how-to-get-started-for-beginners/253194)

<div class="topic-metadata">

**Author:** [@palash-cj](https://discuss.elastic.co/u/palash-cj)\
**Replies:** 1\
**Last updated:** [October 26, 2020, 12:50am UTC](https://discuss.elastic.co/t/how-to-get-started-for-beginners/253194 "2020-10-26T00:50:21Z")

</div>

Hey There...! It feels really excited to talk about GSOC for beginners. But the graph of excitement tends towards the negative slope when one stucks because of lack of mentorship, proper guidelines to start and the init…

---

## [Elastisearch - Invalid NEST response built from a unsuccessful low level call on POST](https://discuss.elastic.co/t/elastisearch-invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-post/75823)

<div class="topic-metadata">

**Author:** [@kanagaraju](https://discuss.elastic.co/u/kanagaraju)\
**Replies:** 3\
**Last updated:** [February 21, 2017, 2:28pm UTC](https://discuss.elastic.co/t/elastisearch-invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-post/75823 "2017-02-21T14:28:02Z")

</div>

Dear Team, While fetching the data from Elastisearch. we are getting the below issue. could you please help us. Invalid NEST response built from a unsuccessful low level call on POST: /esproxy/\_mtermvectors?term\_stat…

---

## [How use .p12 key for TLS in Kibana](https://discuss.elastic.co/t/how-use-p12-key-for-tls-in-kibana/154917)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 2\
**Last updated:** [November 2, 2018, 12:11pm UTC](https://discuss.elastic.co/t/how-use-p12-key-for-tls-in-kibana/154917 "2018-11-02T12:11:03Z")

</div>

Hi all , I know how to use .key and .rt files for enable TLS in KIbana with ES. Can you explain how use .p12 file in kibana for TLS. My current Kibana working conf mentioning below. xpack.monitoring.enabled: true se…

---

## [Case Insensitive search using match query for keyword](https://discuss.elastic.co/t/case-insensitive-search-using-match-query-for-keyword/85320)

<div class="topic-metadata">

**Author:** [@Rory](https://discuss.elastic.co/u/Rory)\
**Replies:** 5\
**Last updated:** [May 11, 2017, 3:25pm UTC](https://discuss.elastic.co/t/case-insensitive-search-using-match-query-for-keyword/85320 "2017-05-11T15:25:21Z")

</div>

Hi, I have multiple attributes stored in ES with keyword datatype. I was wondering if it is possible to perform a case in-sensitive search using a match query on these keyword fields? Thanks.

---

## [Gauss scoring, missing value "1" is higher then real value](https://discuss.elastic.co/t/gauss-scoring-missing-value-1-is-higher-then-real-value/64354)

<div class="topic-metadata">

**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\
**Replies:** 0\
**Last updated:** [October 29, 2016, 7:45pm UTC](https://discuss.elastic.co/t/gauss-scoring-missing-value-1-is-higher-then-real-value/64354 "2016-10-29T19:45:23Z")

</div>

I'm using Gauss scoring, but it returns 1 if a field is missing. The missing field ends up being scored higher then the real fields. The real fields results are between 0 and 1. I'd like to be able to set "missing: …

---

## [Java::oracle.jdbc.driver.OracleDriver not loaded](https://discuss.elastic.co/t/java-oracle-jdbc-driver-oracledriver-not-loaded/68866)

<div class="topic-metadata">

**Author:** [@Rudolf\_Reddy\_Macejka](https://discuss.elastic.co/u/Rudolf_Reddy_Macejka)\
**Replies:** 1\
**Last updated:** [December 15, 2016, 10:23am UTC](https://discuss.elastic.co/t/java-oracle-jdbc-driver-oracledriver-not-loaded/68866 "2016-12-15T10:23:46Z")

</div>

Hello, since I am trying to use logstash 5 my connection to Oracle stopped to work. On 2.1 it works perfectly with this configuration input { jdbc { jdbc\_driver\_library =\> "/home/tva/prototype/logstash-5.0.…

---

## [Merge Thread busy even when refresh\_interval disabled for indexing](https://discuss.elastic.co/t/merge-thread-busy-even-when-refresh-interval-disabled-for-indexing/27657)

<div class="topic-metadata">

**Author:** [@lisak](https://discuss.elastic.co/u/lisak)\
**Replies:** 8\
**Last updated:** [December 29, 2015, 1:42pm UTC](https://discuss.elastic.co/t/merge-thread-busy-even-when-refresh-interval-disabled-for-indexing/27657 "2015-12-29T13:42:17Z")

</div>

Hi, I'm performing bulk indexing in a scheduled manner and right before each one I disable refresh\_interval to avoid throttling. It used to work perfectly but then I upgraded to 1.6.0 (not 100% sure it caused it) and p…

---

## [{"statusCode":503,"error":"Service Unavailable","message":"License is not available."}](https://discuss.elastic.co/t/statuscode-503-error-service-unavailable-message-license-is-not-available/335741)

<div class="topic-metadata">

**Author:** [@R1d3rBG](https://discuss.elastic.co/u/R1d3rBG)\
**Replies:** 6\
**Last updated:** [June 12, 2023, 1:41pm UTC](https://discuss.elastic.co/t/statuscode-503-error-service-unavailable-message-license-is-not-available/335741 "2023-06-12T13:41:52Z")

</div>

Hello, I have installed Elastic, but after 2-3 days stops working with the following error. {"statusCode":503,"error":"Service Unavailable","message":"License is not available."} Could you help me with investigation w…

---

## [Access Denied to ES](https://discuss.elastic.co/t/access-denied-to-es/61427)

<div class="topic-metadata">

**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\
**Replies:** 6\
**Last updated:** [December 1, 2016, 11:08am UTC](https://discuss.elastic.co/t/access-denied-to-es/61427 "2016-12-01T11:08:23Z")

</div>

I am trying to use logstash beta version 5.0 to parse data. I also installed Xpacks. However, below is the error code. How could i access ES server (beta version): \[2016-09-23T16:44:28,382\]\[INFO \]\[logstash.outputs.elas…

---

## [How to remove certain fields from filebeat index](https://discuss.elastic.co/t/how-to-remove-certain-fields-from-filebeat-index/241597)

<div class="topic-metadata">

**Author:** [@jijo.john](https://discuss.elastic.co/u/jijo.john)\
**Replies:** 5\
**Last updated:** [July 30, 2020, 10:16am UTC](https://discuss.elastic.co/t/how-to-remove-certain-fields-from-filebeat-index/241597 "2020-07-30T10:16:04Z")

</div>

Hi Team, I am new to Elasticsearch and we are running a POC on Elasticsearch. We would like to remove few fields from the index documents which are not relevant. Please help us to remove this from newly creating index …

---

## [KQL regex query](https://discuss.elastic.co/t/kql-regex-query/221943)

<div class="topic-metadata">

**Author:** [@hsdevaraja](https://discuss.elastic.co/u/hsdevaraja)\
**Replies:** 1\
**Last updated:** [March 4, 2020, 10:17am UTC](https://discuss.elastic.co/t/kql-regex-query/221943 "2020-03-04T10:17:22Z")

</div>

Hi, I have Elasticsearch and Kibana setup with 7.5 version installed.I am trying the logs query where I have log filenames /websites/app-name1/202001.txt /websites/app-name1/202002.txt, /websites/app-name1/202003.txt…

---

## [Elastic Cloud APM server - "queue is full"](https://discuss.elastic.co/t/elastic-cloud-apm-server-queue-is-full/258145)

<div class="topic-metadata">

**Author:** [@thomaslundstrom](https://discuss.elastic.co/u/thomaslundstrom)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 4:55pm UTC](https://discuss.elastic.co/t/elastic-cloud-apm-server-queue-is-full/258145 "2020-12-10T16:55:40Z")

</div>

APM Server version: Elastic Cloud - deployment version 7.9.2. APM Agent language and version: APM python agent, version 5.9.0 python 3.7. Description of the problem including expected versus actual behavior. Please …

---

## [Running logstash in the background in production environment](https://discuss.elastic.co/t/running-logstash-in-the-background-in-production-environment/95913)

<div class="topic-metadata">

**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\
**Replies:** 5\
**Last updated:** [August 7, 2017, 6:10pm UTC](https://discuss.elastic.co/t/running-logstash-in-the-background-in-production-environment/95913 "2017-08-07T18:10:47Z")

</div>

Hi, I think i am having difficulty on starting logstash as a service which runs continuously in the background to read all the config files under the directory /etc/logstash/conf.d/ Although when i run it like /usr/sha…

---

## [Unable to remove field form nested object during mutate](https://discuss.elastic.co/t/unable-to-remove-field-form-nested-object-during-mutate/34083)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 3\
**Last updated:** [November 20, 2015, 7:34am UTC](https://discuss.elastic.co/t/unable-to-remove-field-form-nested-object-during-mutate/34083 "2015-11-20T07:34:56Z")

</div>

Hi: I am using logstash 1.5.3 and trying to reindex an existing index to a new index with modified mapping. To test if this works on nested fields, I gave the following config a shot : input { elasticsearch {…

---

## [Disable shield plugin?](https://discuss.elastic.co/t/disable-shield-plugin/28070)

<div class="topic-metadata">

**Author:** [@tarunsapra](https://discuss.elastic.co/u/tarunsapra)\
**Replies:** 8\
**Last updated:** [February 2, 2017, 9:21pm UTC](https://discuss.elastic.co/t/disable-shield-plugin/28070 "2017-02-02T21:21:12Z")

</div>

Hi All, I installed the shield plugin few days back and currently I am evaluating it, is there a way to completely disable the plugin instead of removing it? Thanks,

---

## [High CPU usage with clean Logstash install](https://discuss.elastic.co/t/high-cpu-usage-with-clean-logstash-install/106598)

<div class="topic-metadata">

**Author:** [@Ender](https://discuss.elastic.co/u/Ender)\
**Replies:** 5\
**Last updated:** [November 25, 2017, 4:42pm UTC](https://discuss.elastic.co/t/high-cpu-usage-with-clean-logstash-install/106598 "2017-11-25T16:42:03Z")

</div>

Hi, I'm new on Elastic Stack but there is a problem with my logstash service. Without any configuration (or with a basic configuration), there is a heavy CPU usage when i start logstash, my server hanging: \[logstash\_…

---

## [Painless If doc\['field'\].value in List](https://discuss.elastic.co/t/painless-if-doc-field-value-in-list/126598)

<div class="topic-metadata">

**Author:** [@MPurcell](https://discuss.elastic.co/u/MPurcell)\
**Replies:** 6\
**Last updated:** [April 4, 2018, 3:25pm UTC](https://discuss.elastic.co/t/painless-if-doc-field-value-in-list/126598 "2018-04-04T15:25:39Z")

</div>

Hey quick question. I have a script/painless section in a bool-must section of my code. Basically I want to check if the classification number, which could be = 17, 18, 19, 20, or 21 is either 18, 19, or 20. For some rea…

---

## [Monitoring not working](https://discuss.elastic.co/t/monitoring-not-working/149277)

<div class="topic-metadata">

**Author:** [@kpover](https://discuss.elastic.co/u/kpover)\
**Replies:** 1\
**Last updated:** [September 21, 2018, 8:35am UTC](https://discuss.elastic.co/t/monitoring-not-working/149277 "2018-09-21T08:35:54Z")

</div>

Hi everyone. I'm having an issue with my elastic instance whereby I can't get monitoring working. I've recently upgraded from 5.6 where I had monitor working on a trial xpack licence to 6.4 where I have the standard fre…

---

## [Filebeat Filtering - Drop Event when NOT contain field that equals a value](https://discuss.elastic.co/t/filebeat-filtering-drop-event-when-not-contain-field-that-equals-a-value/274463)

<div class="topic-metadata">

**Author:** [@valhalla](https://discuss.elastic.co/u/valhalla)\
**Replies:** 8\
**Last updated:** [June 5, 2021, 6:20pm UTC](https://discuss.elastic.co/t/filebeat-filtering-drop-event-when-not-contain-field-that-equals-a-value/274463 "2021-06-05T18:20:44Z")

</div>

Hi all, I need your help in order to filter some logs. What I need to do is to drop the events of all my logs that don't have an alert object in them with a severity of 3. I want to save in Elasticsearch only those that…

---

## [Logstash error : Got response code '401' contacting Elasticsearch](https://discuss.elastic.co/t/logstash-error-got-response-code-401-contacting-elasticsearch/120792)

<div class="topic-metadata">

**Author:** [@ryext](https://discuss.elastic.co/u/ryext)\
**Replies:** 2\
**Last updated:** [March 13, 2018, 7:55pm UTC](https://discuss.elastic.co/t/logstash-error-got-response-code-401-contacting-elasticsearch/120792 "2018-03-13T19:55:41Z")

</div>

Hey, so here is my issue: I installed x-pack on elastiic kibana ana logstash the connection kibana elastic works fine. unfortunatly logstash-elasticsearch in not flowing smoothly. here is the error u am getting: :…

---

## [LDAP authentication in Kibana](https://discuss.elastic.co/t/ldap-authentication-in-kibana/18184)

<div class="topic-metadata">

**Author:** [@dharmendra\_pratap\_si](https://discuss.elastic.co/u/dharmendra_pratap_si)\
**Replies:** 4\
**Last updated:** [July 21, 2014, 8:11am UTC](https://discuss.elastic.co/t/ldap-authentication-in-kibana/18184 "2014-07-21T08:11:46Z")

</div>

Hello Friends, Hope yo are doing good. In my application, I want to do the authentication in kibana using LDAP. if anyone has done it before, please help me to come out of this. Appreciate your help. Regards …

---

## [Configuring Input file on Windows](https://discuss.elastic.co/t/configuring-input-file-on-windows/33297)

<div class="topic-metadata">

**Author:** [@Didier](https://discuss.elastic.co/u/Didier)\
**Replies:** 5\
**Last updated:** [October 30, 2015, 8:16pm UTC](https://discuss.elastic.co/t/configuring-input-file-on-windows/33297 "2015-10-30T20:16:07Z")

</div>

Hello, I am trying to use an input file to feed a log file into Logstash on a Windows 2008 machine. However, it doesn't seem to be working properly. My configuration file looks like this: input { file { path =\> …

---

## [Maximum limit for indexes](https://discuss.elastic.co/t/maximum-limit-for-indexes/6828)

<div class="topic-metadata">

**Author:** [@Damian\_Brhel](https://discuss.elastic.co/u/Damian_Brhel)\
**Replies:** 7\
**Last updated:** [April 25, 2013, 11:39pm UTC](https://discuss.elastic.co/t/maximum-limit-for-indexes/6828 "2013-04-25T23:39:13Z")

</div>

Hi, I have a project which provides to brands monitoring their brand names. I want to store data separately into different index for each brand. Is there a limit for number of indexes with the Elastic Search can re…

---

## [ElasticsearchRepository with dynamic elastic index names spring boot](https://discuss.elastic.co/t/elasticsearchrepository-with-dynamic-elastic-index-names-spring-boot/222089)

<div class="topic-metadata">

**Author:** [@srkavay](https://discuss.elastic.co/u/srkavay)\
**Replies:** 0\
**Last updated:** [March 4, 2020, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearchrepository-with-dynamic-elastic-index-names-spring-boot/222089 "2020-03-04T13:44:25Z")

</div>

I have several indices where I save products: product-example1 product-example2 product-example3 product-example4 product-example5 I have the a document in elastic search that has the same structure and it can used fo…

---

## [Issue with High Level Rest Client Api](https://discuss.elastic.co/t/issue-with-high-level-rest-client-api/195853)

<div class="topic-metadata">

**Author:** [@shantanu\_bhardwaj](https://discuss.elastic.co/u/shantanu_bhardwaj)\
**Replies:** 6\
**Last updated:** [August 27, 2019, 12:47pm UTC](https://discuss.elastic.co/t/issue-with-high-level-rest-client-api/195853 "2019-08-27T12:47:35Z")

</div>

RestHighLevelClient restHighLevelClient = new RestHighLevelClient(RestClient.builder(new HttpHost("localhost", 9200))); CreateIndexRequest indexRequest = new CreateIndexRequest("sample-index"); restHighLevel…

---

## [Curl: (6) Could not resolve host: quickstart-es-http” error](https://discuss.elastic.co/t/curl-6-could-not-resolve-host-quickstart-es-http-error/229328)

<div class="topic-metadata">

**Author:** [@ubiquitousdude](https://discuss.elastic.co/u/ubiquitousdude)\
**Replies:** 1\
**Last updated:** [May 9, 2020, 8:47am UTC](https://discuss.elastic.co/t/curl-6-could-not-resolve-host-quickstart-es-http-error/229328 "2020-05-09T08:47:39Z")

</div>

Hi, I'm trying to follow the article here for deploying Elastic Cloud on Kubernetes: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-quickstart.html But I get an error when requesting ElasticSearch endpoint i…

---

## [Delete by id](https://discuss.elastic.co/t/delete-by-id/3582)

<div class="topic-metadata">

**Author:** [@mooky](https://discuss.elastic.co/u/mooky)\
**Replies:** 4\
**Last updated:** [November 18, 2010, 5:01am UTC](https://discuss.elastic.co/t/delete-by-id/3582 "2010-11-18T05:01:29Z")

</div>

Is there simple way to delete a document by id? (without having to build a query)

---

## [Records more than 10,000 with pagination](https://discuss.elastic.co/t/records-more-than-10-000-with-pagination/249398)

<div class="topic-metadata">

**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\
**Replies:** 4\
**Last updated:** [September 22, 2020, 6:58am UTC](https://discuss.elastic.co/t/records-more-than-10-000-with-pagination/249398 "2020-09-22T06:58:10Z")

</div>

Hi Team, Am having more than 10,000 + records under elastic. Now my requirement is i've to show records to user with pagination. Am able to show records upto 10,000 with back end logic like elastic query { "from" : …

---

## [How to debug queries in elastic search](https://discuss.elastic.co/t/how-to-debug-queries-in-elastic-search/12125)

<div class="topic-metadata">

**Author:** [@Deep\_2](https://discuss.elastic.co/u/Deep_2)\
**Replies:** 8\
**Last updated:** [May 29, 2013, 7:14am UTC](https://discuss.elastic.co/t/how-to-debug-queries-in-elastic-search/12125 "2013-05-29T07:14:58Z")

</div>

Hi , I need help to debug my query in elastic search. I have a parent / child relationship. My query is not returning any results. How can I debug issue the issue? Regards, -- You received this message bec…

---

## [Most popular terms searched](https://discuss.elastic.co/t/most-popular-terms-searched/5635)

<div class="topic-metadata">

**Author:** [@John\_Solo](https://discuss.elastic.co/u/John_Solo)\
**Replies:** 7\
**Last updated:** [December 20, 2012, 2:34pm UTC](https://discuss.elastic.co/t/most-popular-terms-searched/5635 "2012-12-20T14:34:36Z")

</div>

Is it possible to get which are the most common phrases and/or terms? Thanks in advance.

---

## [Restart elasticsearch node](https://discuss.elastic.co/t/restart-elasticsearch-node/55486)

<div class="topic-metadata">

**Author:** [@Siddharth](https://discuss.elastic.co/u/Siddharth)\
**Replies:** 4\
**Last updated:** [July 14, 2016, 7:53am UTC](https://discuss.elastic.co/t/restart-elasticsearch-node/55486 "2016-07-14T07:53:21Z")

</div>

How to restart elasticsearch node gracefully in the cluster?

[Previous page](https://discuss.elastic.co/top.md?page=310&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=312&per_page=50&period=all)
