# Top

**URL:** https://discuss.elastic.co/top.md?page=318&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 319

---

## [Kibana did not load properly. Check the server output for more information. Kibana in Docker for nginx](https://discuss.elastic.co/t/kibana-did-not-load-properly-check-the-server-output-for-more-information-kibana-in-docker-for-nginx/167856)

<div class="topic-metadata">

**Author:** [@Stanislav\_O](https://discuss.elastic.co/u/Stanislav_O)\
**Replies:** 8\
**Last updated:** [February 21, 2019, 7:18am UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-check-the-server-output-for-more-information-kibana-in-docker-for-nginx/167856 "2019-02-21T07:18:37Z")

</div>

Kibana: 6.5.4 We run Kibana in Docker for nginx. Once you have launched the page, you’ve been receiving a message. "Kibana did not load properly. Check the server output for more information." Follow the link: http:/…

---

## [Endpoint 7.12.x migration to 7.13 Lesson learned with Fleet "On-Prim"](https://discuss.elastic.co/t/endpoint-7-12-x-migration-to-7-13-lesson-learned-with-fleet-on-prim/274244)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 7\
**Last updated:** [June 11, 2021, 4:10pm UTC](https://discuss.elastic.co/t/endpoint-7-12-x-migration-to-7-13-lesson-learned-with-fleet-on-prim/274244 "2021-06-11T16:10:44Z")

</div>

EDIT: Use caution on 7.13 and laptops/tablets. Normal runtime on my test machines are 7 hours. With Endpoint 7.13 its down to 1.5 hours due to excessive CPU utilization. This is AMD and Intel platforms with current Win 1…

---

## [ParsingException\[\[match\] unknown token \[START\_OBJECT\] after \[query\]\]](https://discuss.elastic.co/t/parsingexception-match-unknown-token-start-object-after-query/103918)

<div class="topic-metadata">

**Author:** [@varun\_kumar2](https://discuss.elastic.co/u/varun_kumar2)\
**Replies:** 3\
**Last updated:** [October 18, 2017, 10:32am UTC](https://discuss.elastic.co/t/parsingexception-match-unknown-token-start-object-after-query/103918 "2017-10-18T10:32:18Z")

</div>

Getting error "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "logstash-\*" \],…

---

## [Tiebreaker setup](https://discuss.elastic.co/t/tiebreaker-setup/114028)

<div class="topic-metadata">

**Author:** [@Lafunamor](https://discuss.elastic.co/u/Lafunamor)\
**Replies:** 6\
**Last updated:** [January 10, 2018, 9:22am UTC](https://discuss.elastic.co/t/tiebreaker-setup/114028 "2018-01-10T09:22:44Z")

</div>

Hi Guys ECE automatically deploys a Tiebreaker node when ever 3 zones are available and a cluster of 2 nodes is deployed. According to the UI the deployed Tiebreaker nodes are master eligible and are used for ingest. C…

---

## [Elasticsearch 2.3 as primary data store?](https://discuss.elastic.co/t/elasticsearch-2-3-as-primary-data-store/50265)

<div class="topic-metadata">

**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\
**Replies:** 2\
**Last updated:** [May 18, 2016, 6:21am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-as-primary-data-store/50265 "2016-05-18T06:21:54Z")

</div>

I see several threads in the forums where others are stating ES will lose data, but a lot of the posts are from 2013. Anyone recommend ES 2.3 as the primary data store at this iteration of ES? For my use case we do not…

---

## [How to set the Path.repo](https://discuss.elastic.co/t/how-to-set-the-path-repo/55396)

<div class="topic-metadata">

**Author:** [@sukesh](https://discuss.elastic.co/u/sukesh)\
**Replies:** 2\
**Last updated:** [July 13, 2016, 10:43am UTC](https://discuss.elastic.co/t/how-to-set-the-path-repo/55396 "2016-07-13T10:43:36Z")

</div>

"reason": "\[my\_backup\] location \[D:\\\\elasticsearch-2.3.1\\\\repo\\\\my\_backup\] doesn't match any of the locations specified by path.repo because this setting is empty"

---

## [Elasticsearch-setup-passwords commands with ERROR: Failed to verify bootstrap password](https://discuss.elastic.co/t/elasticsearch-setup-passwords-commands-with-error-failed-to-verify-bootstrap-password/267441)

<div class="topic-metadata">

**Author:** [@Willy](https://discuss.elastic.co/u/Willy)\
**Replies:** 2\
**Last updated:** [March 18, 2021, 4:51am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-commands-with-error-failed-to-verify-bootstrap-password/267441 "2021-03-18T04:51:51Z")

</div>

I am new to ElasticSearch. I followed the steps in this page: Configuring SSL, TLS, and HTTPS to secure Elasticsearch, Kibana, Beats, and Logstash I used bin/elasticsearch-setup-passwords interactive -u 'https://abc.m…

---

## [network.hostでの特定IPアドレスの指定](https://discuss.elastic.co/t/network-host-ip/88947)

<div class="topic-metadata">

**Author:** [@miz21358](https://discuss.elastic.co/u/miz21358)\
**Replies:** 6\
**Last updated:** [June 13, 2017, 2:10pm UTC](https://discuss.elastic.co/t/network-host-ip/88947 "2017-06-13T14:10:31Z")

</div>

いつもお世話になっております。 これまで同一ネットワーク内でelasticsearchへデータを投入し、kibanaを外部に公開する形で運用してきました。 それが、一部データの投入を外部からも行える様にしたいとの要望があり、elasticsearch.ymlに該当IPv4アドレスを追加したのですが、エラーが発生してしまいます。 色々試したのですが、同一ネットワーク内のIPアドレスを指定しても、同様のエラーとなることが分かりました。 ポ…

---

## [Some indices failing with "SearchPhaseExecutionException\[Failed to execute phase \[query\], all shards failed\]"](https://discuss.elastic.co/t/some-indices-failing-with-searchphaseexecutionexception-failed-to-execute-phase-query-all-shards-failed/19749)

<div class="topic-metadata">

**Author:** [@Kevin\_DeLand](https://discuss.elastic.co/u/Kevin_DeLand)\
**Replies:** 4\
**Last updated:** [September 12, 2014, 7:31am UTC](https://discuss.elastic.co/t/some-indices-failing-with-searchphaseexecutionexception-failed-to-execute-phase-query-all-shards-failed/19749 "2014-09-12T07:31:29Z")

</div>

Everything was working fine when all of a sudden some indices started failing. \*GET localhost:9200/logstash-2014.09.11/\_search\* yields response: {"error":"SearchPhaseExecutionException\[Failed to execute phase \[que…

---

## [Logstash starting damn slow](https://discuss.elastic.co/t/logstash-starting-damn-slow/125708)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 8\
**Last updated:** [April 6, 2018, 7:05am UTC](https://discuss.elastic.co/t/logstash-starting-damn-slow/125708 "2018-04-06T07:05:26Z")

</div>

Hi, I need some guidiance to speed up the starting of logstash - or at least I would like to know why it takes so long and if that is really ok. \[2018-03-27T07:18:48,795\]\[WARN \]\[logstash.outputs.elasticsearch\] Restored…

---

## [Clustering data on Elasticsearch index](https://discuss.elastic.co/t/clustering-data-on-elasticsearch-index/53262)

<div class="topic-metadata">

**Author:** [@nfantone](https://discuss.elastic.co/u/nfantone)\
**Replies:** 8\
**Last updated:** [June 21, 2016, 11:25am UTC](https://discuss.elastic.co/t/clustering-data-on-elasticsearch-index/53262 "2016-06-21T11:25:20Z")

</div>

Hi, everyone! I created an account here because having asked a question over at SO, received absolutely no love (I even got the Thumbleweed badge for it - no kidding). Here it is: http://stackoverflow.com/questions/37…

---

## [Beat.hostname & beat.name values](https://discuss.elastic.co/t/beat-hostname-beat-name-values/130925)

<div class="topic-metadata">

**Author:** [@ecc256](https://discuss.elastic.co/u/ecc256)\
**Replies:** 6\
**Last updated:** [May 14, 2018, 5:42pm UTC](https://discuss.elastic.co/t/beat-hostname-beat-name-values/130925 "2018-05-14T17:42:23Z")

</div>

Elastic search shows events posted by my beat with following values in beat.\* fields: beat.hostname hostname beat.name hostname beat.version 7.0.0-alpha1 I guess, this is due to beat.go code. What would be the easie…

---

## ["name cannot be empty string" error if field name starts with](https://discuss.elastic.co/t/name-cannot-be-empty-string-error-if-field-name-starts-with/66808)

<div class="topic-metadata">

**Author:** [@wyukawa](https://discuss.elastic.co/u/wyukawa)\
**Replies:** 3\
**Last updated:** [November 22, 2016, 3:49pm UTC](https://discuss.elastic.co/t/name-cannot-be-empty-string-error-if-field-name-starts-with/66808 "2016-11-22T15:49:36Z")

</div>

Although Elasticsearch 5 allows dots-in-field-names, the following error occured. Is this spec or bug? # curl -XPUT 'localhost:9200/twitter/tweet/1?pretty' -d' \> { \> ".a" : "a" \> } \> ' { "error" : { "root\_c…

---

## [Grokparsefailure tag - what does really it mean?](https://discuss.elastic.co/t/grokparsefailure-tag-what-does-really-it-mean/160266)

<div class="topic-metadata">

**Author:** [@nazgul](https://discuss.elastic.co/u/nazgul)\
**Replies:** 1\
**Last updated:** [December 11, 2018, 7:13pm UTC](https://discuss.elastic.co/t/grokparsefailure-tag-what-does-really-it-mean/160266 "2018-12-11T19:13:11Z")

</div>

Hello, I have next problem. Started to use Filter-\>Grok in my Logstash recently and at the beginning everything was ok. One day I noticed that to all messages from Logstash to Elastic... Logstash started to add a tag=…

---

## [Display a number field that is defined as duration as Minutes:Seconds](https://discuss.elastic.co/t/display-a-number-field-that-is-defined-as-duration-as-minutes-seconds/85135)

<div class="topic-metadata">

**Author:** [@Jeff\_Davis](https://discuss.elastic.co/u/Jeff_Davis)\
**Replies:** 5\
**Last updated:** [May 11, 2017, 4:30pm UTC](https://discuss.elastic.co/t/display-a-number-field-that-is-defined-as-duration-as-minutes-seconds/85135 "2017-05-11T16:30:45Z")

</div>

I have a field that contains the milliseconds it takes a Windows machine to boot. I have changed the format of the field to duration but none of the output formats will display in minutes:seconds. The closest format to…

---

## [Problem with single-quote mark in JSON](https://discuss.elastic.co/t/problem-with-single-quote-mark-in-json/3734)

<div class="topic-metadata">

**Author:** [@searchersteve](https://discuss.elastic.co/u/searchersteve)\
**Replies:** 6\
**Last updated:** [January 5, 2011, 11:41am UTC](https://discuss.elastic.co/t/problem-with-single-quote-mark-in-json/3734 "2011-01-05T11:41:31Z")

</div>

I would think this is a common issue, but I've not been able to find a solution. I am trying to index an item that has an apostrophe (single-quote) character in it. When I execute cURL from the command line, I'm thrown i…

---

## [Does ElasticSearch/Kibana Support Multi Tenancy?](https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627)

<div class="topic-metadata">

**Author:** [@bhutchinson](https://discuss.elastic.co/u/bhutchinson)\
**Replies:** 4\
**Last updated:** [April 6, 2017, 2:12pm UTC](https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627 "2017-04-06T14:12:18Z")

</div>

I am trying to understand how to restrict the elasticsearch data that different user groups can view using Kibana. In other words, I am trying to understand how an elasticsearch/kibana solution can be a multi tenant sol…

---

## [Graylog - Kibana](https://discuss.elastic.co/t/graylog-kibana/81643)

<div class="topic-metadata">

**Author:** [@rohithmen](https://discuss.elastic.co/u/rohithmen)\
**Replies:** 6\
**Last updated:** [April 7, 2017, 8:04pm UTC](https://discuss.elastic.co/t/graylog-kibana/81643 "2017-04-07T20:04:45Z")

</div>

Hi All, I have been working on vendor project helping analyze log data. We have currently setup graylog server for our log management but feel restricted with visualizing some of these data. We were wondering if we cou…

---

## [Json\_parse\_exception Illegal character CTRL-CHAR](https://discuss.elastic.co/t/json-parse-exception-illegal-character-ctrl-char/156790)

<div class="topic-metadata">

**Author:** [@AlexJ](https://discuss.elastic.co/u/AlexJ)\
**Replies:** 6\
**Last updated:** [November 19, 2018, 12:13am UTC](https://discuss.elastic.co/t/json-parse-exception-illegal-character-ctrl-char/156790 "2018-11-19T00:13:11Z")

</div>

Hi, I was trying to set up shipping of a JSON log to Elasticsearch via Filebeat and received this strange error. Now it won't go away. The error is: { "level":"error", "timestamp":"2018-11-15T05:30:08.926Z", "caller":"e…

---

## [Hiding Multi-Field Display In Discover](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 7:24am UTC](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720 "2021-04-12T07:24:46Z")

</div>

Is it possible to hide the display of multi-fields in Discover for Kibana 7.12? I like the capability, but it really clutters up the display of data for regular users.

---

## [OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/304686)

<div class="topic-metadata">

**Author:** [@Onsrm](https://discuss.elastic.co/u/Onsrm)\
**Replies:** 2\
**Last updated:** [May 16, 2022, 2:33am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/304686 "2022-05-16T02:33:23Z")

</div>

hello when i use this command bin/logstash -f /etc/logstash/conf.d/apache.conf i get this error : OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed i…

---

## [How to reindex a Index with new data field types?](https://discuss.elastic.co/t/how-to-reindex-a-index-with-new-data-field-types/192475)

<div class="topic-metadata">

**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\
**Replies:** 1\
**Last updated:** [July 26, 2019, 6:25pm UTC](https://discuss.elastic.co/t/how-to-reindex-a-index-with-new-data-field-types/192475 "2019-07-26T18:25:32Z")

</div>

Hi, I'm trying to change a field type to another type, I've seem that I cannot do that directly in my current Index, so I'm trying to use the REINDEX API. I've tried something like this, I know it's wrong, but it's just…

---

## [Is there a difference between query\_string, wildcard and match?](https://discuss.elastic.co/t/is-there-a-difference-between-query-string-wildcard-and-match/131681)

<div class="topic-metadata">

**Author:** [@randomuser](https://discuss.elastic.co/u/randomuser)\
**Replies:** 4\
**Last updated:** [May 14, 2018, 9:45am UTC](https://discuss.elastic.co/t/is-there-a-difference-between-query-string-wildcard-and-match/131681 "2018-05-14T09:45:18Z")

</div>

Hello guys, I've created a few variations of a query and tried out different searching approaches, I seem to be getting the same results, so it got me wondering are there any differences (e.g. performance wise) between …

---

## [GROK filter for JBOSS](https://discuss.elastic.co/t/grok-filter-for-jboss/26917)

<div class="topic-metadata">

**Author:** [@mgirndt](https://discuss.elastic.co/u/mgirndt)\
**Replies:** 7\
**Last updated:** [August 11, 2015, 2:08pm UTC](https://discuss.elastic.co/t/grok-filter-for-jboss/26917 "2015-08-11T14:08:05Z")

</div>

I'm new to the ELK stack and I'm trying to setup a GROK filter with multi-line pattern but I'm not having any luck. The pattern formatter I am needing is "%d{HH:mm:ss,SSS} %-5p \[%c\] {%t) %s%E%n"/ I am also needing for th…

---

## [How to make all indices Read-only](https://discuss.elastic.co/t/how-to-make-all-indices-read-only/70070)

<div class="topic-metadata">

**Author:** [@chris2016](https://discuss.elastic.co/u/chris2016)\
**Replies:** 4\
**Last updated:** [December 27, 2016, 4:18pm UTC](https://discuss.elastic.co/t/how-to-make-all-indices-read-only/70070 "2016-12-27T16:18:18Z")

</div>

Hi, Does anyone know how to make all indices read-only? I use ELK 5.1.1 and do not want to use XPACK. Is the approach below the right way to do? +++++ PUT your\_index/\_settings { "index": { "blocks.read\_only":…

---

## [Delete fields from Kibana index pattern](https://discuss.elastic.co/t/delete-fields-from-kibana-index-pattern/229428)

<div class="topic-metadata">

**Author:** [@rohitarora275](https://discuss.elastic.co/u/rohitarora275)\
**Replies:** 4\
**Last updated:** [April 23, 2020, 11:19am UTC](https://discuss.elastic.co/t/delete-fields-from-kibana-index-pattern/229428 "2020-04-23T11:19:21Z")

</div>

Earlier I had created few extra fields from logstash, now I don't want these fields in my index pattern. I have deleted this from my logstash and after that I restarted kibana, elasticsearch and logstash I am not seein…

---

## [How do I replace timestamp field with the time stamp field inside my log file?](https://discuss.elastic.co/t/how-do-i-replace-timestamp-field-with-the-time-stamp-field-inside-my-log-file/102625)

<div class="topic-metadata">

**Author:** [@magdieldominguez](https://discuss.elastic.co/u/magdieldominguez)\
**Replies:** 6\
**Last updated:** [October 6, 2017, 9:20pm UTC](https://discuss.elastic.co/t/how-do-i-replace-timestamp-field-with-the-time-stamp-field-inside-my-log-file/102625 "2017-10-06T21:20:39Z")

</div>

Hi i am very new to the elk stack. I have a log file that shows the date and time of when a file was processed but when I send it off to elasticsearch the timestamp field that shows up is the current date and time. How d…

---

## [One large index vs. many smaller indexes](https://discuss.elastic.co/t/one-large-index-vs-many-smaller-indexes/19415)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 4\
**Last updated:** [August 25, 2014, 2:05pm UTC](https://discuss.elastic.co/t/one-large-index-vs-many-smaller-indexes/19415 "2014-08-25T14:05:46Z")

</div>

Hi all, As the subject says, I'm wondering about index size vs. number of indexes. I'm indexing many application log files, currently with an index by day for all logs, which will make a very large index. For jus…

---

## [Elasticsearch Process getting killed](https://discuss.elastic.co/t/elasticsearch-process-getting-killed/205691)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 7\
**Last updated:** [November 4, 2019, 11:57pm UTC](https://discuss.elastic.co/t/elasticsearch-process-getting-killed/205691 "2019-11-04T23:57:33Z")

</div>

Recently we have started seeing that our elastic-search process is getting killed. We are using 5-5-1 version of elasticsearch. Any idea what could be the cause? ● elasticsearch.service - Elasticsearch Loaded: loade…

---

## [What's the price of X-Pack?](https://discuss.elastic.co/t/whats-the-price-of-x-pack/82369)

<div class="topic-metadata">

**Author:** [@ginger](https://discuss.elastic.co/u/ginger)\
**Replies:** 2\
**Last updated:** [April 14, 2017, 3:11am UTC](https://discuss.elastic.co/t/whats-the-price-of-x-pack/82369 "2017-04-14T03:11:37Z")

</div>

Hello. What's the price of X-Pack? Can I only pay for serurity? I can't find any those information on the websit. Any help would be appreciated!

---

## [Watcher Condition "script" : { "script" : ""}}. Not working](https://discuss.elastic.co/t/watcher-condition-script-script-not-working/39710)

<div class="topic-metadata">

**Author:** [@rohitgup14](https://discuss.elastic.co/u/rohitgup14)\
**Replies:** 7\
**Last updated:** [February 23, 2016, 7:52am UTC](https://discuss.elastic.co/t/watcher-condition-script-script-not-working/39710 "2016-02-23T07:52:26Z")

</div>

Tried using the example mentioned in the documents for scripts inside condition block. It is throwing an error. Will appreciate any pointers. "condition" : { "script" : { "script" : "return ctx.payload.hits.…

---

## [Data migration tools](https://discuss.elastic.co/t/data-migration-tools/57215)

<div class="topic-metadata">

**Author:** [@kashk](https://discuss.elastic.co/u/kashk)\
**Replies:** 2\
**Last updated:** [August 7, 2016, 6:29am UTC](https://discuss.elastic.co/t/data-migration-tools/57215 "2016-08-07T06:29:45Z")

</div>

Hi, I'm looking for data migration tool to manage schema changes, something like Liquibase or Flyway. Any recommendations? Thanks.

---

## [Elasticsearch directory permission](https://discuss.elastic.co/t/elasticsearch-directory-permission/268611)

<div class="topic-metadata">

**Author:** [@twilight](https://discuss.elastic.co/u/twilight)\
**Replies:** 8\
**Last updated:** [March 30, 2021, 5:48am UTC](https://discuss.elastic.co/t/elasticsearch-directory-permission/268611 "2021-03-30T05:48:10Z")

</div>

Hello, I just installed elasticsearch 7.12.0 rpm package on AWS Linux AMI, when I try to access the config directory, it says "permission denied". this is the directory detail. $ ls -l drwxr-s--- 3 root elasticsearc…

---

## [Using my own time field instead of the @timestamp automatically added by Filebeat](https://discuss.elastic.co/t/using-my-own-time-field-instead-of-the-timestamp-automatically-added-by-filebeat/265709)

<div class="topic-metadata">

**Author:** [@snowfrogdev](https://discuss.elastic.co/u/snowfrogdev)\
**Replies:** 1\
**Last updated:** [February 28, 2021, 3:52am UTC](https://discuss.elastic.co/t/using-my-own-time-field-instead-of-the-timestamp-automatically-added-by-filebeat/265709 "2021-02-28T03:52:02Z")

</div>

I'm using the http\_endpoint input with Filebeat. I wanna use the timestamp field from my JSON payload instead of the @timestamp that Filebeat seems to add automatically. filebeat.inputs: - type: http\_endpoint ena…

---

## [Query\_string query, forward slash, how to explained?](https://discuss.elastic.co/t/query-string-query-forward-slash-how-to-explained/16637)

<div class="topic-metadata">

**Author:** [@Ivan\_Ji](https://discuss.elastic.co/u/Ivan_Ji)\
**Replies:** 4\
**Last updated:** [March 27, 2014, 3:36pm UTC](https://discuss.elastic.co/t/query-string-query-forward-slash-how-to-explained/16637 "2014-03-27T15:36:56Z")

</div>

Hi, all Assume I have the document: { "id": "/Users/jason/Documents/nose/DS\_Store", "name": "danny", "language": "", "created": "2014-03-26T14:40:17Z", …

---

## [How to get only documents that exact match with array of values?](https://discuss.elastic.co/t/how-to-get-only-documents-that-exact-match-with-array-of-values/133354)

<div class="topic-metadata">

**Author:** [@vasanth\_kumar](https://discuss.elastic.co/u/vasanth_kumar)\
**Replies:** 6\
**Last updated:** [May 26, 2018, 12:32pm UTC](https://discuss.elastic.co/t/how-to-get-only-documents-that-exact-match-with-array-of-values/133354 "2018-05-26T12:32:02Z")

</div>

How to get only documents that exact match with array of values?. for ex: I have a document, doc 1: { "names":\["a","b","c"\] } doc 2: { "names":\["a","c"\] } search query: { "names":\["a","c"\] } from this query…

---

## [How to get average document size in an index?](https://discuss.elastic.co/t/how-to-get-average-document-size-in-an-index/225610)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 2\
**Last updated:** [March 30, 2020, 6:07am UTC](https://discuss.elastic.co/t/how-to-get-average-document-size-in-an-index/225610 "2020-03-30T06:07:29Z")

</div>

HI, I am using Elastic Stack v6.3.0. I have multiple indices. Is is possible to get average document size (the size of a single entry in an index) of a particular index? Thank you

---

## [Configure Kibana to use proxy](https://discuss.elastic.co/t/configure-kibana-to-use-proxy/253419)

<div class="topic-metadata">

**Author:** [@Yustas](https://discuss.elastic.co/u/Yustas)\
**Replies:** 4\
**Last updated:** [November 16, 2020, 2:45pm UTC](https://discuss.elastic.co/t/configure-kibana-to-use-proxy/253419 "2020-11-16T14:45:41Z")

</div>

Hello I have fresh cluster installation from docker images. Docker images version's - 7.9.3 Server work in isolated network. When i try look available plugins from kibana, application try connect directly to https://…

---

## [Failed to find a usable hardware address from the network interfaces; using random bytes: 13:89:cc:a0:f7:2e:cf:b2](https://discuss.elastic.co/t/failed-to-find-a-usable-hardware-address-from-the-network-interfaces-using-random-bytes-13-89-cc-a0-f7-2e-cf-b2/118866)

<div class="topic-metadata">

**Author:** [@khalildiouri](https://discuss.elastic.co/u/khalildiouri)\
**Replies:** 5\
**Last updated:** [February 8, 2018, 12:42pm UTC](https://discuss.elastic.co/t/failed-to-find-a-usable-hardware-address-from-the-network-interfaces-using-random-bytes-13-89-cc-a0-f7-2e-cf-b2/118866 "2018-02-08T12:42:52Z")

</div>

I'm trying to implement elasticsearch to my remote server where I will deploy my application when I start my elasticsearch engine with localhost is started correctly but when I change host in elasticsearch.yml to netwo…

---

## [How to quote/escape esQuery when it contains quotes?](https://discuss.elastic.co/t/how-to-quote-escape-esquery-when-it-contains-quotes/277384)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 2\
**Last updated:** [June 30, 2021, 11:26am UTC](https://discuss.elastic.co/t/how-to-quote-escape-esquery-when-it-contains-quotes/277384 "2021-06-30T11:26:31Z")

</div>

Dear all =) I am using the Create Rule API with the Elasticsearch query action. It works perfectly until I need to query something that includes quotes. Example host:"10.250.11.11". Ideally I would like to write it as …

---

## [Beat for Nginx](https://discuss.elastic.co/t/beat-for-nginx/32687)

<div class="topic-metadata">

**Author:** [@mrkschan](https://discuss.elastic.co/u/mrkschan)\
**Replies:** 1\
**Last updated:** [October 21, 2015, 5:16pm UTC](https://discuss.elastic.co/t/beat-for-nginx/32687 "2015-10-21T17:16:45Z")

</div>

Hey, I just started this beat for Nginx - https://github.com/mrkschan/nginxbeat. Would it be possible to be included on Elastic? And things should I need to do so?

---

## [Some indexes have been deleted, now I see indexes called meow?](https://discuss.elastic.co/t/some-indexes-have-been-deleted-now-i-see-indexes-called-meow/242731)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 2\
**Last updated:** [July 28, 2020, 6:41am UTC](https://discuss.elastic.co/t/some-indexes-have-been-deleted-now-i-see-indexes-called-meow/242731 "2020-07-28T06:41:42Z")

</div>

If you have seen a number of your indices recently "disappear", and then when checking your logs you see they have been deleted, and you can also see other log entries that mention the term meow, like this; \[t19hfzgnp7-…

---

## [Logstash logging options (rotating, removing old logs, etc)](https://discuss.elastic.co/t/logstash-logging-options-rotating-removing-old-logs-etc/28966)

<div class="topic-metadata">

**Author:** [@edouglass](https://discuss.elastic.co/u/edouglass)\
**Replies:** 5\
**Last updated:** [September 10, 2015, 6:48pm UTC](https://discuss.elastic.co/t/logstash-logging-options-rotating-removing-old-logs-etc/28966 "2015-09-10T18:48:39Z")

</div>

Hello! Thanks for any help! When running logstash, I am aware of the --log option that allows you to specify a log directory for logstash to log to. However, I do not know what logstash's settings are for rotating log fi…

---

## [Elasticsearch as an OLAP cube](https://discuss.elastic.co/t/elasticsearch-as-an-olap-cube/13408)

<div class="topic-metadata">

**Author:** [@Julien\_Naour](https://discuss.elastic.co/u/Julien_Naour)\
**Replies:** 4\
**Last updated:** [September 2, 2013, 12:59pm UTC](https://discuss.elastic.co/t/elasticsearch-as-an-olap-cube/13408 "2013-09-02T12:59:39Z")

</div>

Hello everybody, I have several questions. We have a project with two axes: BI (some stats about our aggregated data visualized on graphs with filters and dynamicity between these graphs) and search. At the beg…

---

## [Nested fields as the grok match input](https://discuss.elastic.co/t/nested-fields-as-the-grok-match-input/192502)

<div class="topic-metadata">

**Author:** [@jbrowe](https://discuss.elastic.co/u/jbrowe)\
**Replies:** 3\
**Last updated:** [July 26, 2019, 11:28pm UTC](https://discuss.elastic.co/t/nested-fields-as-the-grok-match-input/192502 "2019-07-26T23:28:21Z")

</div>

I am trying to parse ADFS authentication logs from a winlogbeat data stream. My winlogbeat pre-parses these logs by putting everything unrecognized into fields event\_data.param1, event\_data.param2, etc, which are not mea…

---

## [Org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\];](https://discuss.elastic.co/t/org-elasticsearch-cluster-block-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/1154)

<div class="topic-metadata">

**Author:** [@narsimharaom](https://discuss.elastic.co/u/narsimharaom)\
**Replies:** 2\
**Last updated:** [June 9, 2015, 4:13pm UTC](https://discuss.elastic.co/t/org-elasticsearch-cluster-block-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/1154 "2015-06-09T16:13:25Z")

</div>

Hi Everyone, I am getting below exception in ES when I am trying to querying the data from ES. My Java code :- String localhostname = java.net.InetAddress.getLocalHost().getHostName(); …

---

## [Kuromojiのプラグインがインストールできませんでした。](https://discuss.elastic.co/t/kuromoji/43072)

<div class="topic-metadata">

**Author:** [@hase\_gawa](https://discuss.elastic.co/u/hase_gawa)\
**Replies:** 7\
**Last updated:** [March 1, 2016, 7:52am UTC](https://discuss.elastic.co/t/kuromoji/43072 "2016-03-01T07:52:21Z")

</div>

elasticsearch 2.1.0を使用しております。 kuromojiのプラグインをインストールしようとしたところ以下のようなエラーがでます。 ググっても解決策が見つからなかったため質問させて頂きます。 $ plugin install elasticsearch/elasticsearch-analysis-kuromoji/ Verifying https://github.com/elasticsearch/el…

---

## [Pulling Data from DB(Mysql) to Elastic search for every minute](https://discuss.elastic.co/t/pulling-data-from-db-mysql-to-elastic-search-for-every-minute/24860)

<div class="topic-metadata">

**Author:** [@sivasankar](https://discuss.elastic.co/u/sivasankar)\
**Replies:** 2\
**Last updated:** [July 6, 2015, 9:37am UTC](https://discuss.elastic.co/t/pulling-data-from-db-mysql-to-elastic-search-for-every-minute/24860 "2015-07-06T09:37:16Z")

</div>

Hi All, I am a newbie to ES. So could you please help me on the below. As per my requirement, I need to pull data from MYSQL to Elasticsearch for every minute. From ES I will be generating report by using BI reportin…

---

## [Canvas Time Filter - \[parse\_exception\] failed to parse date field](https://discuss.elastic.co/t/canvas-time-filter-parse-exception-failed-to-parse-date-field/210371)

<div class="topic-metadata">

**Author:** [@Holger](https://discuss.elastic.co/u/Holger)\
**Replies:** 0\
**Last updated:** [December 3, 2019, 2:32pm UTC](https://discuss.elastic.co/t/canvas-time-filter-parse-exception-failed-to-parse-date-field/210371 "2019-12-03T14:32:43Z")

</div>

Hello, I'm using Kibana 6.7.2 Adding a time filter I get a lot of Error Messages like this and a table with only Headers but now content rows: \[parse\_exception\] failed to parse date field \[2019-11-21T23:00:00.000Z\] w…

---

## [Get timestamp from log lines](https://discuss.elastic.co/t/get-timestamp-from-log-lines/117816)

<div class="topic-metadata">

**Author:** [@tkzv](https://discuss.elastic.co/u/tkzv)\
**Replies:** 3\
**Last updated:** [January 31, 2018, 3:38pm UTC](https://discuss.elastic.co/t/get-timestamp-from-log-lines/117816 "2018-01-31T15:38:13Z")

</div>

I'm using Filebeat to read logs in two different formats. Each portion of information is prefixed with timestamp in either "YYYYMMDD-hhmmss" or "MM.DD.YY hh:mm:ss" format. I use 2 different prospectors to merge lines for…

[Previous page](https://discuss.elastic.co/top.md?page=317&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=319&per_page=50&period=all)
