# Top

**URL:** https://discuss.elastic.co/top.md?page=324&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 325

---

## [Metricbeat MSSQL module How to configure SQL server connection on other TCP listening ports](https://discuss.elastic.co/t/metricbeat-mssql-module-how-to-configure-sql-server-connection-on-other-tcp-listening-ports/179936)

<div class="topic-metadata">

**Author:** [@Jerome\_Cabaret](https://discuss.elastic.co/u/Jerome_Cabaret)\
**Replies:** 4\
**Last updated:** [May 23, 2019, 6:13pm UTC](https://discuss.elastic.co/t/metricbeat-mssql-module-how-to-configure-sql-server-connection-on-other-tcp-listening-ports/179936 "2019-05-23T18:13:34Z")

</div>

How to configure the hosts with a different tcp listen port ========================================================= module: mssql metricsets: "transaction\_log" "performance" hosts: \["sqlserver:user:password@tcp…

---

## [Opentelemetry agent unable to connect APM Server over secure connection](https://discuss.elastic.co/t/opentelemetry-agent-unable-to-connect-apm-server-over-secure-connection/280150)

<div class="topic-metadata">

**Author:** [@nitin194](https://discuss.elastic.co/u/nitin194)\
**Replies:** 8\
**Last updated:** [August 3, 2021, 10:57am UTC](https://discuss.elastic.co/t/opentelemetry-agent-unable-to-connect-apm-server-over-secure-connection/280150 "2021-08-03T10:57:10Z")

</div>

Kibana version: 7.13.4 Elasticsearch version: 7.13.4 APM Server version: 7.13.4 APM Agent language and version: NA Browser version: NA Original install method (e.g. download page, yum, deb, from source, etc.) a…

---

## [Exception Handling](https://discuss.elastic.co/t/exception-handling/38989)

<div class="topic-metadata">

**Author:** [@matteocremolini](https://discuss.elastic.co/u/matteocremolini)\
**Replies:** 1\
**Last updated:** [January 12, 2016, 6:47pm UTC](https://discuss.elastic.co/t/exception-handling/38989 "2016-01-12T18:47:01Z")

</div>

Hi all !!!! I'm using this filter: date { match =\> \["My field","dd-MM-YYYY HH.mm.ss","ISO8601"\] target =\> \["My field"\] } I would like handle the runtime exception that can occur. For example a code structur…

---

## [Export data from Elasticsearch to Azure Blob](https://discuss.elastic.co/t/export-data-from-elasticsearch-to-azure-blob/225845)

<div class="topic-metadata">

**Author:** [@JimG](https://discuss.elastic.co/u/JimG)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 11:48am UTC](https://discuss.elastic.co/t/export-data-from-elasticsearch-to-azure-blob/225845 "2020-03-31T11:48:53Z")

</div>

Hi everyone Is there anyway that it is possible to export data from multiple Indices to Azure Blob? We got a large environment with 800 millions documents, but we wanted to store all that are 3 months old in a Azure bl…

---

## [Visualize split on boolean valued fields?](https://discuss.elastic.co/t/visualize-split-on-boolean-valued-fields/50312)

<div class="topic-metadata">

**Author:** [@sundar](https://discuss.elastic.co/u/sundar)\
**Replies:** 3\
**Last updated:** [May 18, 2016, 9:14am UTC](https://discuss.elastic.co/t/visualize-split-on-boolean-valued-fields/50312 "2016-05-18T09:14:04Z")

</div>

I have a field called allowAnonymous which I extract with a KV filter in logstash, and mutate into a boolean value with convert like below. It is extracted just fine and I can see it in Discover that it has been extracte…

---

## [Dec 24th, 2025: \[EN\] BBQ for Christmas Dinner](https://discuss.elastic.co/t/dec-24th-2025-en-bbq-for-christmas-dinner/384022)

<div class="topic-metadata">

**Author:** [@Ugo\_Sangiorgi](https://discuss.elastic.co/u/Ugo_Sangiorgi)\
**Replies:** 0\
**Last updated:** [December 24, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-24th-2025-en-bbq-for-christmas-dinner/384022 "2025-12-24T08:00:14Z")

</div>

What is VectorFaces? Since today is December 24th, how about some BBQ for Christmas Dinner? VectorFaces is a face recognition demo I developed to showcase Elasticsearch vector capabilities at conferences. It searches th…

---

## [Filebeat CrashLoopBackOff](https://discuss.elastic.co/t/filebeat-crashloopbackoff/320830)

<div class="topic-metadata">

**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\
**Replies:** 8\
**Last updated:** [January 6, 2023, 7:32pm UTC](https://discuss.elastic.co/t/filebeat-crashloopbackoff/320830 "2023-01-06T19:32:57Z")

</div>

After installing filebeat from the new Helm 8.5 in our cluster k8s, 5 of the pods are stuck in CrashLoopBackOff: {"log.level":"error","@timestamp":"2022-12-08T21:13:19.258Z","log.origin":{"file.name":"instance/beat.go",…

---

## [Support for TCP/UDP Unknown Packets](https://discuss.elastic.co/t/support-for-tcp-udp-unknown-packets/28259)

<div class="topic-metadata">

**Author:** [@thehybridtech](https://discuss.elastic.co/u/thehybridtech)\
**Replies:** 2\
**Last updated:** [September 11, 2015, 7:04pm UTC](https://discuss.elastic.co/t/support-for-tcp-udp-unknown-packets/28259 "2015-09-11T19:04:22Z")

</div>

Hi all... We are using packetbeat to review pcaps from multiple environments and like how it is setup. I realize that the primary focus of packetbeat is to review the protocol and streams. Is there plans in the future …

---

## [Dec 1st, 2021: \[fr\] L'impact du filtrage de champs sur les performances d'Elasticsearch](https://discuss.elastic.co/t/dec-1st-2021-fr-limpact-du-filtrage-de-champs-sur-les-performances-delasticsearch/290560)

<div class="topic-metadata">

**Author:** [@Quentin\_Pradet](https://discuss.elastic.co/u/Quentin_Pradet)\
**Replies:** 0\
**Last updated:** [December 1, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2021-fr-limpact-du-filtrage-de-champs-sur-les-performances-delasticsearch/290560 "2021-12-01T08:00:43Z")

</div>

:information\_source: This post is also available in English: Dec 1st, 2021: \[en\] The impact of Elasticsearch source filtering on performance Il y a quelques années, je voulais récupérer de nombreux documents d'Elasticse…

---

## [Must condition with OR condition](https://discuss.elastic.co/t/must-condition-with-or-condition/164654)

<div class="topic-metadata">

**Author:** [@Chaitanya1](https://discuss.elastic.co/u/Chaitanya1)\
**Replies:** 4\
**Last updated:** [January 21, 2019, 4:53am UTC](https://discuss.elastic.co/t/must-condition-with-or-condition/164654 "2019-01-21T04:53:20Z")

</div>

Hi Team, I want to optimize the watcher scripts created. I created almost 21 scripts with different message patterns. My aim is to reduce the number of scripts. I want to change the must match pattern with OR conditio…

---

## [本番環境でのshardとreplica数について](https://discuss.elastic.co/t/shard-replica/141128)

<div class="topic-metadata">

**Author:** [@mukai](https://discuss.elastic.co/u/mukai)\
**Replies:** 4\
**Last updated:** [July 30, 2018, 3:34am UTC](https://discuss.elastic.co/t/shard-replica/141128 "2018-07-30T03:34:50Z")

</div>

システム本番環境でのシャード(shard)数とレプリカ(replica)数を決める必要があるのですが、参考になるドキュメントやベストプラクティスはありますか？ (1) サーバ構成 3ノード構成 ※当システムの集約(Terms Aggregation)時は誤差が発生してはいけないので、shard数は1にした方が良い？。 (2) 今回決めたい設定 "settings" : { "number\_of\_shards" : ◯, …

---

## [Logstash 6.5.2 "Could not index event to Elasticsearch", Status = 400, reason failed to parse field \[host\] of type \[text\]](https://discuss.elastic.co/t/logstash-6-5-2-could-not-index-event-to-elasticsearch-status-400-reason-failed-to-parse-field-host-of-type-text/159908)

<div class="topic-metadata">

**Author:** [@MrFrost](https://discuss.elastic.co/u/MrFrost)\
**Replies:** 3\
**Last updated:** [December 10, 2018, 8:27am UTC](https://discuss.elastic.co/t/logstash-6-5-2-could-not-index-event-to-elasticsearch-status-400-reason-failed-to-parse-field-host-of-type-text/159908 "2018-12-10T08:27:32Z")

</div>

Hello, After updating ELK Stack from 6.3.0 to 6.5.2 some of my pipeline ceased to work correctly. No idea what may be wrong with this one, so some help would be great. pipeline: # Defines inputs for logs input { b…

---

## [Trying to Grok a field from String to Int](https://discuss.elastic.co/t/trying-to-grok-a-field-from-string-to-int/78736)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 5\
**Last updated:** [March 16, 2017, 8:23am UTC](https://discuss.elastic.co/t/trying-to-grok-a-field-from-string-to-int/78736 "2017-03-16T08:23:17Z")

</div>

Hi, I have a log as such: { "recordType":"MT", "callingNumber":"5555555", "callingImsi":"", "callingMsc":"", "billable":"", "calledNumber":"5555555", "calledImsi":"425240787504111", "calledMsc":"972723800111", …

---

## [Using Ceph with Elasticsearch](https://discuss.elastic.co/t/using-ceph-with-elasticsearch/34309)

<div class="topic-metadata">

**Author:** [@rtoma](https://discuss.elastic.co/u/rtoma)\
**Replies:** 6\
**Last updated:** [November 11, 2015, 10:55am UTC](https://discuss.elastic.co/t/using-ceph-with-elasticsearch/34309 "2015-11-11T10:55:00Z")

</div>

Does anyone have experience with using Ceph as storage for Elasticsearch? I am looking for a way to make the storage part more fault tolerant on OS level. I know you can use multiple replicas for this, but I am investi…

---

## [PreBuiltTransportClient cannot be resolved to a type](https://discuss.elastic.co/t/prebuilttransportclient-cannot-be-resolved-to-a-type/70184)

<div class="topic-metadata">

**Author:** [@Earl](https://discuss.elastic.co/u/Earl)\
**Replies:** 3\
**Last updated:** [January 3, 2017, 5:52am UTC](https://discuss.elastic.co/t/prebuilttransportclient-cannot-be-resolved-to-a-type/70184 "2017-01-03T05:52:40Z")

</div>

Hi guys, I'm trying to use elasticsearch in java following the docs, only problem is the PreBuiltTransportClient cannot be found. I've already added all the jars in elasticsearch lib folder to my project. Maybe I'm miss…

---

## [Elasticsearch start ：failed to resolve host \[host1\]](https://discuss.elastic.co/t/elasticsearch-start-failed-to-resolve-host-host1/136399)

<div class="topic-metadata">

**Author:** [@SimpleCC](https://discuss.elastic.co/u/SimpleCC)\
**Replies:** 1\
**Last updated:** [June 19, 2018, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch-start-failed-to-resolve-host-host1/136399 "2018-06-19T05:53:30Z")

</div>

I deploy my project on the cloud server.My OS is Linux. I launch the Elasticsearch and recieve the log: \[2018-06-19T10:57:01,485\]\[INFO \]\[o.e.t.TransportService \] \[OYN0im5\] publish\_address {172.18.183.220:9300}, boun…

---

## [Java classloader not able to load - Error: Could not find or load main class](https://discuss.elastic.co/t/java-classloader-not-able-to-load-error-could-not-find-or-load-main-class/25016)

<div class="topic-metadata">

**Author:** [@ChickenWing24](https://discuss.elastic.co/u/ChickenWing24)\
**Replies:** 8\
**Last updated:** [August 3, 2016, 4:36am UTC](https://discuss.elastic.co/t/java-classloader-not-able-to-load-error-could-not-find-or-load-main-class/25016 "2016-08-03T04:36:14Z")

</div>

I've been following both the short and long version of the documentation in installing Shield. However, I can't seem to be able to add any users as I'm getting the below error. Error: Could not find or load main class …

---

## [Kibana Reporting Max Attempts reached (3) error](https://discuss.elastic.co/t/kibana-reporting-max-attempts-reached-3-error/124583)

<div class="topic-metadata">

**Author:** [@Sohal](https://discuss.elastic.co/u/Sohal)\
**Replies:** 5\
**Last updated:** [March 27, 2018, 7:01am UTC](https://discuss.elastic.co/t/kibana-reporting-max-attempts-reached-3-error/124583 "2018-03-27T07:01:58Z")

</div>

I am using bitnami ELK stack and have installed x-pack both on elasticsearch and kibana When I am generating reports from a visualization it gives me the following error \[image\] I have following properties in kibana.y…

---

## [New User Problem -- empty reply from server (curl)](https://discuss.elastic.co/t/new-user-problem-empty-reply-from-server-curl/302033)

<div class="topic-metadata">

**Author:** [@KatePearce](https://discuss.elastic.co/u/KatePearce)\
**Replies:** 4\
**Last updated:** [April 12, 2022, 12:36am UTC](https://discuss.elastic.co/t/new-user-problem-empty-reply-from-server-curl/302033 "2022-04-12T00:36:52Z")

</div>

Today, I was trying to run Elasticsearch for the first time, but I've been running into some issues with the tutorial (Getting started with the Elastic Stack | Getting Started \[8.1\] | Elastic). When I check whether Elast…

---

## [Mapping Properties : Index : false](https://discuss.elastic.co/t/mapping-properties-index-false/134706)

<div class="topic-metadata">

**Author:** [@Clems](https://discuss.elastic.co/u/Clems)\
**Replies:** 4\
**Last updated:** [June 6, 2018, 6:25am UTC](https://discuss.elastic.co/t/mapping-properties-index-false/134706 "2018-06-06T06:25:01Z")

</div>

Hi everyone, In my mapping properties, for one of the fields, I added "index : false" , but ElasticSearch is still indexing it and this field is still searchable. However, when I ask for the mapping, I do have: "name" …

---

## [Using logstash elasticsearch output over HTTPS](https://discuss.elastic.co/t/using-logstash-elasticsearch-output-over-https/51319)

<div class="topic-metadata">

**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\
**Replies:** 1\
**Last updated:** [May 31, 2016, 11:26am UTC](https://discuss.elastic.co/t/using-logstash-elasticsearch-output-over-https/51319 "2016-05-31T11:26:37Z")

</div>

Hello, I've set up elasticsearch with shield, and I am now using HTTPS to access the REST API. I've also set up Kibana, and I am connecting via HTTPS to elasticsearch. I'm having some trouble with the Logstash part tho…

---

## [Elasticsearch : query does not support \[filter\]\];](https://discuss.elastic.co/t/elasticsearch-query-does-not-support-filter/36554)

<div class="topic-metadata">

**Author:** [@Dilip\_Dwivedi](https://discuss.elastic.co/u/Dilip_Dwivedi)\
**Replies:** 3\
**Last updated:** [December 7, 2015, 4:49pm UTC](https://discuss.elastic.co/t/elasticsearch-query-does-not-support-filter/36554 "2015-12-07T16:49:04Z")

</div>

$ curl -XPOST 'localhost:9200/tindices/\_search?pretty' -d ' { "query": { "bool": { "must": { "match\_all": {} }, "filter": { "range": { "balance": { "gte": 20000, "lte": 30000 } } } } } }' { "error" : "S…

---

## [How to maintain the order of logs](https://discuss.elastic.co/t/how-to-maintain-the-order-of-logs/53397)

<div class="topic-metadata">

**Author:** [@mattgolding](https://discuss.elastic.co/u/mattgolding)\
**Replies:** 8\
**Last updated:** [April 15, 2017, 6:36pm UTC](https://discuss.elastic.co/t/how-to-maintain-the-order-of-logs/53397 "2017-04-15T18:36:20Z")

</div>

Hi I have a script which is bringing in log files and I am pushing them into Elasticsearch via Logstash and it all appears fine. However when searching over these logs I am finding it difficult to keep them in the order…

---

## [Reserved field names](https://discuss.elastic.co/t/reserved-field-names/51575)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 7\
**Last updated:** [July 1, 2016, 1:49pm UTC](https://discuss.elastic.co/t/reserved-field-names/51575 "2016-07-01T13:49:08Z")

</div>

We have been planning to upgrade from 1.7.1 to 2.3 but we do not seem to pass the Migration Checker I am having two issues marked as Red and I do not know how to address them yet. Please help. Some of the indices are fla…

---

## [How to increase the Shards limit in Elasticsearch 7.1](https://discuss.elastic.co/t/how-to-increase-the-shards-limit-in-elasticsearch-7-1/204865)

<div class="topic-metadata">

**Author:** [@rbrodrigues](https://discuss.elastic.co/u/rbrodrigues)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 5:22pm UTC](https://discuss.elastic.co/t/how-to-increase-the-shards-limit-in-elasticsearch-7-1/204865 "2019-10-23T17:22:28Z")

</div>

Our application is indexing content and is passing the Elasticsearch 7.1 Shards limit of 1000. What setting in elasticsearch.yml should we do to increase this limit?

---

## [Unavailable\_shards\_exception reason=\> filebeat primary shard is not active](https://discuss.elastic.co/t/unavailable-shards-exception-reason-filebeat-primary-shard-is-not-active/99526)

<div class="topic-metadata">

**Author:** [@Swaroop\_Chandre](https://discuss.elastic.co/u/Swaroop_Chandre)\
**Replies:** 3\
**Last updated:** [September 6, 2017, 8:32am UTC](https://discuss.elastic.co/t/unavailable-shards-exception-reason-filebeat-primary-shard-is-not-active/99526 "2017-09-06T08:32:02Z")

</div>

Hello can anyone help me with this. Getting following error in logstash logs \[2017-09-05T23:47:53,660\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 503 ({"type"=\>"unavailable\_shards\_e…

---

## [Kibana healthcheck page](https://discuss.elastic.co/t/kibana-healthcheck-page/70959)

<div class="topic-metadata">

**Author:** [@danielmotaleite](https://discuss.elastic.co/u/danielmotaleite)\
**Replies:** 3\
**Last updated:** [January 9, 2017, 8:31pm UTC](https://discuss.elastic.co/t/kibana-healthcheck-page/70959 "2017-01-09T20:31:36Z")

</div>

Hi! In previous kibana versions, we could reach the kibana healthcheck page via the kibana config page... but in kibana 5.x i do not find it. I need it to show some users when system is green or yellow so they stop ask…

---

## [Logstash date parse failure error](https://discuss.elastic.co/t/logstash-date-parse-failure-error/47566)

<div class="topic-metadata">

**Author:** [@shan](https://discuss.elastic.co/u/shan)\
**Replies:** 4\
**Last updated:** [April 22, 2016, 1:00pm UTC](https://discuss.elastic.co/t/logstash-date-parse-failure-error/47566 "2016-04-22T13:00:17Z")

</div>

Hi , I'm getting the date parse failure error., Please help me on this {:timestamp=\>"2016-04-16T15:21:57.639000-0400", :message=\>"Failed parsing date from field", :field=\>"timestamp", :value=\>"2016-04-16 19:21:54", :…

---

## [Failed to join cluster](https://discuss.elastic.co/t/failed-to-join-cluster/187511)

<div class="topic-metadata">

**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\
**Replies:** 4\
**Last updated:** [June 27, 2019, 2:03am UTC](https://discuss.elastic.co/t/failed-to-join-cluster/187511 "2019-06-27T02:03:00Z")

</div>

Hi, I removed a node (logs-data-2) and upgraded Elasticsearch to 7.2.0 and encountered this issue. Master node: \[2019-06-26T07:46:39,403\]\[WARN \]\[o.e.c.c.Coordinator \] \[logs-master-1\] failed to validate incoming jo…

---

## [Multi match query and nested object](https://discuss.elastic.co/t/multi-match-query-and-nested-object/55416)

<div class="topic-metadata">

**Author:** [@ayblanchet](https://discuss.elastic.co/u/ayblanchet)\
**Replies:** 7\
**Last updated:** [May 24, 2017, 11:08pm UTC](https://discuss.elastic.co/t/multi-match-query-and-nested-object/55416 "2017-05-24T23:08:00Z")

</div>

Hi, Do you know how use multi match query with nested object in cross\_fields type, by example i wouldlike to get one document with "shakespeare romeo" with this document: { "title": "romero & juliette", "auth…

---

## [Objects in array not well supported](https://discuss.elastic.co/t/objects-in-array-not-well-supported/48709)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 1\
**Last updated:** [April 28, 2016, 5:39pm UTC](https://discuss.elastic.co/t/objects-in-array-not-well-supported/48709 "2016-04-28T17:39:38Z")

</div>

I'm using Kibana 4 and one of my fields is a array of objects. On the Discover page I can't add fields within an array as columns cause "Objects in arrays are not well supported". I'm using kibana:4.5.0. Will array …

---

## [Add new field in existing index and template](https://discuss.elastic.co/t/add-new-field-in-existing-index-and-template/270679)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 6\
**Last updated:** [April 20, 2021, 1:10pm UTC](https://discuss.elastic.co/t/add-new-field-in-existing-index-and-template/270679 "2021-04-20T13:10:59Z")

</div>

Hi, I want to add an new field in exiting index and corresponding to it's template. Could you pls help me on this ? This is current template: curl -XPUT 'vl-dev01:9200/\_template/latesttmpl-farm-qusage-mon?pretty' -H …

---

## [Determining Size of A Document](https://discuss.elastic.co/t/determining-size-of-a-document/176594)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 5\
**Last updated:** [April 12, 2019, 10:19am UTC](https://discuss.elastic.co/t/determining-size-of-a-document/176594 "2019-04-12T10:19:13Z")

</div>

Hi all, How am I supposed to determine the size of an individual document? Can I use dev tools in some way to query the size of a document with a specific \_id? I know I can get the size of the entire index with a: GE…

---

## [How do I fix TLS Error when connecting with Python?](https://discuss.elastic.co/t/how-do-i-fix-tls-error-when-connecting-with-python/307922)

<div class="topic-metadata">

**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\
**Replies:** 1\
**Last updated:** [June 23, 2022, 6:08am UTC](https://discuss.elastic.co/t/how-do-i-fix-tls-error-when-connecting-with-python/307922 "2022-06-23T06:08:09Z")

</div>

When I try to connect to Elasticsearch with Python Client, I get this error: elastic\_transport.TlsError: TLS error caused by: TlsError(TLS error caused by: SSLError(\[SSL: WRONG\_VERSION\_NUMBER\] wrong version number (\_ssl.…

---

## [Beats Survey: modules, data sources and ingestion experience](https://discuss.elastic.co/t/beats-survey-modules-data-sources-and-ingestion-experience/101006)

<div class="topic-metadata">

**Author:** [@monica](https://discuss.elastic.co/u/monica)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 10:37am UTC](https://discuss.elastic.co/t/beats-survey-modules-data-sources-and-ingestion-experience/101006 "2017-09-19T10:37:43Z")

</div>

Beats modules are built on the premise that simple things should be simple. They let you go from raw data to dashboards for common data sources in literally minutes. Run 1 command and instantly start exploring your data …

---

## [Http request curl: (52) Empty reply from server](https://discuss.elastic.co/t/http-request-curl-52-empty-reply-from-server/320750)

<div class="topic-metadata">

**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\
**Replies:** 6\
**Last updated:** [December 8, 2022, 8:48am UTC](https://discuss.elastic.co/t/http-request-curl-52-empty-reply-from-server/320750 "2022-12-08T08:48:09Z")

</div>

We started a new Elasticsearch instance of 8.4.3 and the ES is up and running but when i am trying to send an HTTP request to the server I get a reply of curl: (52) Empty reply from server but when I pass the certificate…

---

## [Log4j Critical Vulnerability](https://discuss.elastic.co/t/log4j-critical-vulnerability/291452)

<div class="topic-metadata">

**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\
**Replies:** 1\
**Last updated:** [December 10, 2021, 6:04pm UTC](https://discuss.elastic.co/t/log4j-critical-vulnerability/291452 "2021-12-10T18:04:28Z")

</div>

Are there any recommendations from Elastic regarding NVD - CVE-2021-44228), a very serious log4j vulnerability announced today?

---

## [Any way to show different kibana view to different users?](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 8\
**Last updated:** [April 21, 2017, 7:28pm UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342 "2017-04-21T19:28:55Z")

</div>

Hi Experts, Is there any way to show two different view of kibana to two separate users. So something like if I prepare 2 dashboards one is for management view/dashboard and other is for operations team. Now I want to …

---

## [Fixed: Cannot yum install Filebeat, broken repo](https://discuss.elastic.co/t/fixed-cannot-yum-install-filebeat-broken-repo/42675)

<div class="topic-metadata">

**Author:** [@fadzhli](https://discuss.elastic.co/u/fadzhli)\
**Replies:** 7\
**Last updated:** [February 24, 2017, 3:16pm UTC](https://discuss.elastic.co/t/fixed-cannot-yum-install-filebeat-broken-repo/42675 "2017-02-24T15:16:39Z")

</div>

Hi, I try to yum install filebeat but I think the repo is not working. The repo I'm using is \[beats\] name=Elastic Beats Repository baseurl=https://packages.elastic.co/beats/yum/el/$basearch enabled=1 gpgkey=https:/…

---

## [Status=403): {"type":"security\_exception","reason":"action \[indices:data/write/bulk\[s\]](https://discuss.elastic.co/t/status-403-type-security-exception-reason-action-indices-data-write-bulk-s/240299)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 8\
**Last updated:** [July 22, 2020, 6:24pm UTC](https://discuss.elastic.co/t/status-403-type-security-exception-reason-action-indices-data-write-bulk-s/240299 "2020-07-22T18:24:34Z")

</div>

Hello, It took me the whole day and I still cant work it out. Please see below what is wrong My Kibana user setting: metricbeat.yml: metricbeat.config.modules: path: ${path.config}/modules.d/\*.yml reload.enab…

---

## [Attempted to resurrect connection to dead ES instance - but wrong host?](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-wrong-host/77282)

<div class="topic-metadata">

**Author:** [@guenther](https://discuss.elastic.co/u/guenther)\
**Replies:** 1\
**Last updated:** [March 4, 2017, 2:50pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-wrong-host/77282 "2017-03-04T14:50:53Z")

</div>

Hi, we are using logstash (version 5.2.2) and ES (version 5.2.2) in a docker swarm. The logstash instance is only for metricbeats and works very well. input { beats { port =\> "5044" } } filter { } output…

---

## [Filter based on the doc\_count with aggregations (2)](https://discuss.elastic.co/t/filter-based-on-the-doc-count-with-aggregations-2/147734)

<div class="topic-metadata">

**Author:** [@caub](https://discuss.elastic.co/u/caub)\
**Replies:** 1\
**Last updated:** [September 7, 2018, 3:03pm UTC](https://discuss.elastic.co/t/filter-based-on-the-doc-count-with-aggregations-2/147734 "2018-09-07T15:03:22Z")

</div>

I'd like to continue Filter based on the doc\_count with aggregations I made the following query: GET heartbeat\*/\_search?size=0 { "size": 200, "query": { "bool": { "filter": \[ { "match": …

---

## [Rollover alias with date](https://discuss.elastic.co/t/rollover-alias-with-date/192308)

<div class="topic-metadata">

**Author:** [@abaullosa](https://discuss.elastic.co/u/abaullosa)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 8:10pm UTC](https://discuss.elastic.co/t/rollover-alias-with-date/192308 "2019-08-13T20:10:56Z")

</div>

Hi. I need some help with the Rollover API. I need to have a new index every day with the name + datetime (index-YYYYMMDD) This is what I have now so far.. My app is sending the data to an an alias called alias\_1 t…

---

## [Aggregation of two fields in single query](https://discuss.elastic.co/t/aggregation-of-two-fields-in-single-query/200803)

<div class="topic-metadata">

**Author:** [@rgranit](https://discuss.elastic.co/u/rgranit)\
**Replies:** 5\
**Last updated:** [September 26, 2019, 7:01am UTC](https://discuss.elastic.co/t/aggregation-of-two-fields-in-single-query/200803 "2019-09-26T07:01:21Z")

</div>

Hello, I have aמ index with documents that contain several fields, among these are: grade person\_id I wish to create an aggregation that count the number of documents found for each person\_id and for each person sum …

---

## [Wildcard query with second condition on other field](https://discuss.elastic.co/t/wildcard-query-with-second-condition-on-other-field/121671)

<div class="topic-metadata">

**Author:** [@michele](https://discuss.elastic.co/u/michele)\
**Replies:** 5\
**Last updated:** [February 27, 2018, 6:39pm UTC](https://discuss.elastic.co/t/wildcard-query-with-second-condition-on-other-field/121671 "2018-02-27T18:39:44Z")

</div>

I would execute a query like this (sql like): SELECT \* FROM MYINDEX WHERE SUGGEST LIKE %FOO% AND YEAR=1999 How can I do in Elastic Search? I write a query with wild card but I don't know how to combine it with and cla…

---

## [HTTP parse error, malformed request (): #\<Puma::HttpParserError: Invalid HTTP format, parsing fails](https://discuss.elastic.co/t/http-parse-error-malformed-request-puma-invalid-http-format-parsing-fails/146184)

<div class="topic-metadata">

**Author:** [@krpatel19](https://discuss.elastic.co/u/krpatel19)\
**Replies:** 0\
**Last updated:** [August 27, 2018, 1:39pm UTC](https://discuss.elastic.co/t/http-parse-error-malformed-request-puma-invalid-http-format-parsing-fails/146184 "2018-08-27T13:39:33Z")

</div>

Hi , I am getting error logs in logstash 5.2.1 with below error. 2018-08-27 15:36:01 +0200: HTTP parse error, malformed request (): #\<Puma::HttpParserError: Invalid HTTP format, parsing fails.\> 2018-08-27 15:36:01 +02…

---

## [ERROR: Failed to set password for user \[apm\_system\] yet again](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system-yet-again/233836)

<div class="topic-metadata">

**Author:** [@zippycup](https://discuss.elastic.co/u/zippycup)\
**Replies:** 1\
**Last updated:** [May 29, 2020, 2:21pm UTC](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system-yet-again/233836 "2020-05-29T14:21:23Z")

</div>

Im running elasticsearch 7.6.2 Basic license 3 master nodes cluster: name: dev node: master: true data: false ingest: false network.host: "0.0.0.0" cluster.initial\_master\_nodes: "es-master-0,es-master-1,es-mas…

---

## [Dashborad Export Import](https://discuss.elastic.co/t/dashborad-export-import/58599)

<div class="topic-metadata">

**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\
**Replies:** 7\
**Last updated:** [August 23, 2016, 8:37pm UTC](https://discuss.elastic.co/t/dashborad-export-import/58599 "2016-08-23T20:37:41Z")

</div>

Dear Team, I am trying to export dashboards and visualizations to move on a new setup, from Kibana console. But, while importing the Json file, i am getting below erro: "Saved Objects: The file could not be processed." …

---

## [Blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)](https://discuss.elastic.co/t/blocked-by-forbidden-12-index-read-only-allow-delete-api/121091)

<div class="topic-metadata">

**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\
**Replies:** 4\
**Last updated:** [February 22, 2018, 5:15pm UTC](https://discuss.elastic.co/t/blocked-by-forbidden-12-index-read-only-allow-delete-api/121091 "2018-02-22T17:15:14Z")

</div>

I keep getting the following error in my cluster. What causes this error and how do I fix it? Caused by: org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[FORBIDDEN/12/index read-only / allow delete (…

---

## [SearchHits.totalHits() vs. SearchHits.getHits().length](https://discuss.elastic.co/t/searchhits-totalhits-vs-searchhits-gethits-length/14059)

<div class="topic-metadata">

**Author:** [@Alexander\_Kley](https://discuss.elastic.co/u/Alexander_Kley)\
**Replies:** 4\
**Last updated:** [October 23, 2013, 9:10am UTC](https://discuss.elastic.co/t/searchhits-totalhits-vs-searchhits-gethits-length/14059 "2013-10-23T09:10:36Z")

</div>

Hi guys, im feeling strange, because query my test index deliver different amount of results. I have an index A with three types A1, A2 and A3. All entries have the same source -\> FIELD01:"This is a smal text".…

[Previous page](https://discuss.elastic.co/top.md?page=323&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=325&per_page=50&period=all)
