# Top

**URL:** https://discuss.elastic.co/top.md?page=326&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 327

---

## [Elasticsearch Error "EsRejectedExecutionException"](https://discuss.elastic.co/t/elasticsearch-error-esrejectedexecutionexception/48022)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 6\
**Last updated:** [April 21, 2016, 12:09pm UTC](https://discuss.elastic.co/t/elasticsearch-error-esrejectedexecutionexception/48022 "2016-04-21T12:09:24Z")

</div>

Hi Experts, My ES1.7.1 logs are full with the following error , and due to this I am not able to open Kibana Page it is hang forever. \[2016-04-21 03:51:55,334\]\[DEBUG\]\[action.search.type \] \[Tarantula\] \[cef-2016-0…

---

## [Is possible Exact match substring in kibana?](https://discuss.elastic.co/t/is-possible-exact-match-substring-in-kibana/200062)

<div class="topic-metadata">

**Author:** [@smerzlyakov](https://discuss.elastic.co/u/smerzlyakov)\
**Replies:** 4\
**Last updated:** [September 27, 2019, 5:27pm UTC](https://discuss.elastic.co/t/is-possible-exact-match-substring-in-kibana/200062 "2019-09-27T17:27:14Z")

</div>

Hello. Is it possible to exact match substring of text field in kibana? I try to search "Get-System", but i get results like What ways are possible to solve the problem? I know, that it is possible to write a DSL q…

---

## [Send JSON formatted logs directly to elasticsearch](https://discuss.elastic.co/t/send-json-formatted-logs-directly-to-elasticsearch/77470)

<div class="topic-metadata">

**Author:** [@Wojter](https://discuss.elastic.co/u/Wojter)\
**Replies:** 4\
**Last updated:** [March 7, 2017, 12:34pm UTC](https://discuss.elastic.co/t/send-json-formatted-logs-directly-to-elasticsearch/77470 "2017-03-07T12:34:02Z")

</div>

Hi there, I have modules that ships JSON formatted logs to ELK stack. I'd like to omit logstash, because I don't really need to parse them additionally. I use jsonevent-layout for java and logstashFormatter for python …

---

## [Kibana Cross-site Request Forgery CVE-2015-8131](https://discuss.elastic.co/t/kibana-cross-site-request-forgery-cve-2015-8131/35002)

<div class="topic-metadata">

**Author:** [@KevinKluge](https://discuss.elastic.co/u/KevinKluge)\
**Replies:** 0\
**Last updated:** [November 18, 2015, 10:46pm UTC](https://discuss.elastic.co/t/kibana-cross-site-request-forgery-cve-2015-8131/35002 "2015-11-18T22:46:50Z")

</div>

CVE: CVE-2015-8131 Affected versions: All versions up to and including 4.1.2 and 4.2.0. The vulnerability is a cross-site request forgery (CSRF or XSRF) that could allow an attacker to read and write changes to the .…

---

## [How to turn off index management in filebeat.yml](https://discuss.elastic.co/t/how-to-turn-off-index-management-in-filebeat-yml/188930)

<div class="topic-metadata">

**Author:** [@werowe](https://discuss.elastic.co/u/werowe)\
**Replies:** 6\
**Last updated:** [July 4, 2019, 8:42pm UTC](https://discuss.elastic.co/t/how-to-turn-off-index-management-in-filebeat-yml/188930 "2019-07-04T20:42:26Z")

</div>

Using version 7.2.2. Getting error message: ERROR instance/beat.go:877 Exiting: Index management requested but the Elasticsearch output is not configured/enabled But not able to disable index management using setup…

---

## [Grok pattern DATA vs GREEDYDATA mismatch](https://discuss.elastic.co/t/grok-pattern-data-vs-greedydata-mismatch/225300)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 3\
**Last updated:** [April 11, 2020, 4:45pm UTC](https://discuss.elastic.co/t/grok-pattern-data-vs-greedydata-mismatch/225300 "2020-04-11T16:45:52Z")

</div>

In one log file, I have two different formats of log lines as below. Why does %{GREEDYDATA:loglevel} and %{DATA:loglevel} make a huge difference in loglevel output? 2020-03-26 11:31:10,324 \[Thread-40\] INFO …

---

## [Index lifecycle error illegal\_argument\_exception: index.lifecycle.rollover\_alias \[\] does not point to index \[\]](https://discuss.elastic.co/t/index-lifecycle-error-illegal-argument-exception-index-lifecycle-rollover-alias-does-not-point-to-index/221068)

<div class="topic-metadata">

**Author:** [@Erich\_King](https://discuss.elastic.co/u/Erich_King)\
**Replies:** 2\
**Last updated:** [March 25, 2020, 8:45pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-illegal-argument-exception-index-lifecycle-rollover-alias-does-not-point-to-index/221068 "2020-03-25T20:45:56Z")

</div>

Hi there. I am getting this error when trying to implement ILM on my indexes. Here is my ILM config PUT \_ilm/policy/rollover\_policy { "policy": { "phases": { "hot": { "actions…

---

## [Top N Visual Builder Count Not Working](https://discuss.elastic.co/t/top-n-visual-builder-count-not-working/122357)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 7\
**Last updated:** [March 4, 2018, 2:15am UTC](https://discuss.elastic.co/t/top-n-visual-builder-count-not-working/122357 "2018-03-04T02:15:44Z")

</div>

I've had various issues with the Top N displaying properly for the Visual Builder. On versions previous to 6.2.2, it would count the total instances but not always sort them in descending order. Currently, this is what…

---

## [Installation seems to hang](https://discuss.elastic.co/t/installation-seems-to-hang/281116)

<div class="topic-metadata">

**Author:** [@D-Groenewegen](https://discuss.elastic.co/u/D-Groenewegen)\
**Replies:** 4\
**Last updated:** [September 6, 2021, 11:12am UTC](https://discuss.elastic.co/t/installation-seems-to-hang/281116 "2021-09-06T11:12:31Z")

</div>

Dear all, I hope you'll forgive me for my utter noobness. With the help of Install Elasticsearch from archive on Linux or MacOS | Elasticsearch Guide \[7.14\] | Elastic, I tried installing ES for Linux. When I got to step…

---

## [Restore snapshot not working](https://discuss.elastic.co/t/restore-snapshot-not-working/17987)

<div class="topic-metadata">

**Author:** [@Hermanto\_Phang](https://discuss.elastic.co/u/Hermanto_Phang)\
**Replies:** 2\
**Last updated:** [June 9, 2014, 7:53am UTC](https://discuss.elastic.co/t/restore-snapshot-not-working/17987 "2014-06-09T07:53:52Z")

</div>

Hi All, I try to restore my backup snapshot using command curl -XPOST "localhost:9200/\_snapshot/my\_backup/snapshot\_1/\_restore" But it was come up error {"error":"SnapshotRestoreException\[\[my\_backup:snapshot\_1…

---

## [SearchQuery vs CriteriaQuery in spring data elasticsearch](https://discuss.elastic.co/t/searchquery-vs-criteriaquery-in-spring-data-elasticsearch/46792)

<div class="topic-metadata">

**Author:** [@Visva\_Ram](https://discuss.elastic.co/u/Visva_Ram)\
**Replies:** 6\
**Last updated:** [April 13, 2016, 1:21pm UTC](https://discuss.elastic.co/t/searchquery-vs-criteriaquery-in-spring-data-elasticsearch/46792 "2016-04-13T13:21:18Z")

</div>

Hi, I totally confused in elasticsearch query method. Actually Here i hearing the words Query,Filtered and Search while i tried to learn through terminal and also i confused in spring data elastic search with SearchQuery…

---

## [Unable to write kibana uuid file](https://discuss.elastic.co/t/unable-to-write-kibana-uuid-file/226788)

<div class="topic-metadata">

**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\
**Replies:** 7\
**Last updated:** [April 9, 2020, 12:03am UTC](https://discuss.elastic.co/t/unable-to-write-kibana-uuid-file/226788 "2020-04-09T00:03:42Z")

</div>

I am trying to install ELK stack on Centos7 server using this: https://www.elastic.co/guide/en/elastic-stack-get-started/current/get-started-elastic-stack.html I had older version of ELK on the same server which I have r…

---

## [NoNodesAvailableException: No alive nodes found in your cluster](https://discuss.elastic.co/t/nonodesavailableexception-no-alive-nodes-found-in-your-cluster/268647)

<div class="topic-metadata">

**Author:** [@sewox](https://discuss.elastic.co/u/sewox)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 4:15pm UTC](https://discuss.elastic.co/t/nonodesavailableexception-no-alive-nodes-found-in-your-cluster/268647 "2021-04-06T16:15:20Z")

</div>

Hi everyone, I tried different ways this issue but I can't fix it. Elasticsearch service is running. this is throws exception Fatal error: Uncaught Elasticsearch\\Common\\Exceptions\\NoNodesAvailableException: No alive …

---

## [Enable logstash to read on port number](https://discuss.elastic.co/t/enable-logstash-to-read-on-port-number/174934)

<div class="topic-metadata">

**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\
**Replies:** 7\
**Last updated:** [April 2, 2019, 2:50pm UTC](https://discuss.elastic.co/t/enable-logstash-to-read-on-port-number/174934 "2019-04-02T14:50:50Z")

</div>

Hi There, I need some help in testing this. Below is the logstash config file\[logstash-6.5.4/config/logstash-sample-4.conf\]. I would like to feed the logstash with elasticsearch logs, which runs on port 9200. input { …

---

## [Not to add 'host', 'path' field](https://discuss.elastic.co/t/not-to-add-host-path-field/49889)

<div class="topic-metadata">

**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\
**Replies:** 4\
**Last updated:** [May 12, 2016, 2:52pm UTC](https://discuss.elastic.co/t/not-to-add-host-path-field/49889 "2016-05-12T14:52:21Z")

</div>

Hi. With this configuration, input { file { path =\> ... } } output { elasticsearch { ... } } logstash add files 'host' and 'path' to the document. "\_source": { ... "p…

---

## [Insert vs. Update](https://discuss.elastic.co/t/insert-vs-update/69346)

<div class="topic-metadata">

**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\
**Replies:** 2\
**Last updated:** [December 18, 2016, 3:20am UTC](https://discuss.elastic.co/t/insert-vs-update/69346 "2016-12-18T03:20:09Z")

</div>

Quick question, is there any performance difference between updating an existing record vice just reinserting into an index once the index has been deleted to clean out all records? Right now when we want to do a refresh…

---

## [New plugin for Kibana that exposes data for Mobile apps](https://discuss.elastic.co/t/new-plugin-for-kibana-that-exposes-data-for-mobile-apps/219792)

<div class="topic-metadata">

**Author:** [@tsvet](https://discuss.elastic.co/u/tsvet)\
**Replies:** 1\
**Last updated:** [February 19, 2020, 6:01am UTC](https://discuss.elastic.co/t/new-plugin-for-kibana-that-exposes-data-for-mobile-apps/219792 "2020-02-19T06:01:33Z")

</div>

Hello, I wanted to share with you one new plugin which might be useful for you in case you wanted to use Kibana on your mobile phone. It requires 2 components: Kibana Go plugin - https://github.com/OctagonMobile/Kib…

---

## [Is not a configured index pattern ID](https://discuss.elastic.co/t/is-not-a-configured-index-pattern-id/147494)

<div class="topic-metadata">

**Author:** [@linuxwiz](https://discuss.elastic.co/u/linuxwiz)\
**Replies:** 4\
**Last updated:** [September 24, 2018, 1:02pm UTC](https://discuss.elastic.co/t/is-not-a-configured-index-pattern-id/147494 "2018-09-24T13:02:48Z")

</div>

Hi Friends, I ran into an issue today on my test rigg with latest versions of Kibana and ES. All of the sudden, kibana stopped displaying logs but all the connectivity is intact. I removed all patterns and tried readdin…

---

## [Kibana 4.2 beta release and Elastic 2.0 beta pipeline aggregations?](https://discuss.elastic.co/t/kibana-4-2-beta-release-and-elastic-2-0-beta-pipeline-aggregations/28383)

<div class="topic-metadata">

**Author:** [@tarunsapra](https://discuss.elastic.co/u/tarunsapra)\
**Replies:** 4\
**Last updated:** [June 16, 2016, 9:56am UTC](https://discuss.elastic.co/t/kibana-4-2-beta-release-and-elastic-2-0-beta-pipeline-aggregations/28383 "2016-06-16T09:56:18Z")

</div>

Hi, Does the new Kibana 4.2 beta release support the display of pipeline aggregation present in ES 2.0 beta? Thanks,

---

## [Cannot create pipeline, expected one of #](https://discuss.elastic.co/t/cannot-create-pipeline-expected-one-of/85723)

<div class="topic-metadata">

**Author:** [@avdnowhere](https://discuss.elastic.co/u/avdnowhere)\
**Replies:** 4\
**Last updated:** [May 18, 2017, 2:21am UTC](https://discuss.elastic.co/t/cannot-create-pipeline-expected-one-of/85723 "2017-05-18T02:21:15Z")

</div>

Dear All, I am trying to follow instructions from this website: https://github.com/elastic/examples/tree/master/ElasticStack\_apache However, I have got this error when I run this command: logstash -f apache\_logstash.co…

---

## [Can't connect to localhost:9200](https://discuss.elastic.co/t/cant-connect-to-localhost-9200/158744)

<div class="topic-metadata">

**Author:** [@tomthecat](https://discuss.elastic.co/u/tomthecat)\
**Replies:** 4\
**Last updated:** [November 29, 2018, 2:07pm UTC](https://discuss.elastic.co/t/cant-connect-to-localhost-9200/158744 "2018-11-29T14:07:21Z")

</div>

I hope someone could point out a solution for my problem, I am at my wit's end. I am running a VPS (CentOS 7.5, WHM) with elasticsearch.noarch installed from the repo (6.5.1-1) and the latest ingest-attachment-plugin. T…

---

## [Has anyone made a "serverless" elasticsearch?](https://discuss.elastic.co/t/has-anyone-made-a-serverless-elasticsearch/168468)

<div class="topic-metadata">

**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\
**Replies:** 4\
**Last updated:** [January 18, 2023, 2:08am UTC](https://discuss.elastic.co/t/has-anyone-made-a-serverless-elasticsearch/168468 "2023-01-18T02:08:00Z")

</div>

hello, I'm a big fan of ES and have been using it for years now. Just wondering if anyone has made an attempt to make a serverless approach to ES? Let me expand on what I mean: I personally use Elasticsearch for a pr…

---

## [Centralized Syslog management for Cisco Switches](https://discuss.elastic.co/t/centralized-syslog-management-for-cisco-switches/216253)

<div class="topic-metadata">

**Author:** [@xkazuuma](https://discuss.elastic.co/u/xkazuuma)\
**Replies:** 5\
**Last updated:** [January 24, 2020, 1:48pm UTC](https://discuss.elastic.co/t/centralized-syslog-management-for-cisco-switches/216253 "2020-01-24T13:48:35Z")

</div>

Hello everyone! I set up an ELK-Stack which is already running, receiving some logs and also showing everything in kibana. But I have problems with the filtering and properly use of the data because everything is just i…

---

## [Connection Exception: "An existing connection was forcibly closed by the remote host"](https://discuss.elastic.co/t/connection-exception-an-existing-connection-was-forcibly-closed-by-the-remote-host/152952)

<div class="topic-metadata">

**Author:** [@marpa](https://discuss.elastic.co/u/marpa)\
**Replies:** 6\
**Last updated:** [October 19, 2018, 4:16pm UTC](https://discuss.elastic.co/t/connection-exception-an-existing-connection-was-forcibly-closed-by-the-remote-host/152952 "2018-10-19T16:16:09Z")

</div>

I'm using the RestHighLevelClient to create indices and mappings on the ES cluster. The problem is that when I attempt to connect to the cluster after a period of inactivity, the first call throws the following: "Elast…

---

## [Role Granted Documents Query example](https://discuss.elastic.co/t/role-granted-documents-query-example/260652)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 2\
**Last updated:** [January 11, 2021, 12:06am UTC](https://discuss.elastic.co/t/role-granted-documents-query-example/260652 "2021-01-11T00:06:14Z")

</div>

Hey all! What I am trying to accomplish is to grant access to my Kibana indexes for a certain user BUT limit them to only data being ingested where agent.hostame matches a certain host. I thought I could easily accompl…

---

## [Make a value field in Kibana 4 clickable to follow link](https://discuss.elastic.co/t/make-a-value-field-in-kibana-4-clickable-to-follow-link/56207)

<div class="topic-metadata">

**Author:** [@secumind](https://discuss.elastic.co/u/secumind)\
**Replies:** 4\
**Last updated:** [July 23, 2016, 4:14am UTC](https://discuss.elastic.co/t/make-a-value-field-in-kibana-4-clickable-to-follow-link/56207 "2016-07-23T04:14:59Z")

</div>

I have a large number of webserver logs in elasticsearch and am using kibana 4 to explore them and look for different referral URLs. I occasionally want to click on the URL's. Right now I have to copy and paste them into…

---

## [How to customize a filebeat to parse a log?](https://discuss.elastic.co/t/how-to-customize-a-filebeat-to-parse-a-log/249049)

<div class="topic-metadata">

**Author:** [@icaruswu](https://discuss.elastic.co/u/icaruswu)\
**Replies:** 2\
**Last updated:** [September 18, 2020, 10:45am UTC](https://discuss.elastic.co/t/how-to-customize-a-filebeat-to-parse-a-log/249049 "2020-09-18T10:45:51Z")

</div>

I read a the formal docs and wanna build my own filebeat module to parse my log. But there's little essays which could be helpful to me. For example, my log is : 2020-09-17T15:48:56.998+0800 INFO chain chain/sync.go:70…

---

## [Speed of dense vector search with 512 or more dimensions](https://discuss.elastic.co/t/speed-of-dense-vector-search-with-512-or-more-dimensions/307121)

<div class="topic-metadata">

**Author:** [@telunyang](https://discuss.elastic.co/u/telunyang)\
**Replies:** 7\
**Last updated:** [July 29, 2022, 5:43pm UTC](https://discuss.elastic.co/t/speed-of-dense-vector-search-with-512-or-more-dimensions/307121 "2022-07-29T17:43:37Z")

</div>

Hi Team, Reading the article Introducing approximate nearest neighbor search in Elasticsearch 8.0 is very useful to our lab for building an Elasticsearch service, so I would like to consult you on how to speed up our qu…

---

## [Snakeyaml vulnerability (CVE-2022-1471) on latest ES version](https://discuss.elastic.co/t/snakeyaml-vulnerability-cve-2022-1471-on-latest-es-version/327854)

<div class="topic-metadata">

**Author:** [@Aviv\_Nevo](https://discuss.elastic.co/u/Aviv_Nevo)\
**Replies:** 1\
**Last updated:** [March 16, 2023, 3:02pm UTC](https://discuss.elastic.co/t/snakeyaml-vulnerability-cve-2022-1471-on-latest-es-version/327854 "2023-03-16T15:02:50Z")

</div>

Hi Need help regarding CVE-2022-1471 (snakeyaml): Is there any fix for that in any ES version? AFAIK, in the latest version, this package hasn't been updated. Is there any plan to update the damaged package of snakey…

---

## [Rally 2.4.0 released](https://discuss.elastic.co/t/rally-2-4-0-released/301236)

<div class="topic-metadata">

**Author:** [@RickBoyd](https://discuss.elastic.co/u/RickBoyd)\
**Replies:** 0\
**Last updated:** [March 31, 2022, 5:26pm UTC](https://discuss.elastic.co/t/rally-2-4-0-released/301236 "2022-03-31T17:26:47Z")

</div>

We have just released Rally 2.4.0. Highlights: Rally has dropped support for Elasticsearch \< 6.8.0. We now allow tracks to declare additional dependencies For the full list of changes please see the changelog . Quick…

---

## [Installing Elasticsearch on Openshift](https://discuss.elastic.co/t/installing-elasticsearch-on-openshift/126332)

<div class="topic-metadata">

**Author:** [@neodjandre](https://discuss.elastic.co/u/neodjandre)\
**Replies:** 4\
**Last updated:** [April 3, 2018, 3:16pm UTC](https://discuss.elastic.co/t/installing-elasticsearch-on-openshift/126332 "2018-04-03T15:16:02Z")

</div>

Hi, Is it possible to install elasticsearch on openshift? I am a newbie in both platforms and couldn't find any working tutorials. Any help would be much appreciated. Many thanks, Andrew

---

## [Ignore field on mapping and indexing using ElasticSearch and java API](https://discuss.elastic.co/t/ignore-field-on-mapping-and-indexing-using-elasticsearch-and-java-api/28428)

<div class="topic-metadata">

**Author:** [@Achraf\_Lahlou](https://discuss.elastic.co/u/Achraf_Lahlou)\
**Replies:** 5\
**Last updated:** [September 3, 2015, 11:16am UTC](https://discuss.elastic.co/t/ignore-field-on-mapping-and-indexing-using-elasticsearch-and-java-api/28428 "2015-09-03T11:16:55Z")

</div>

I'm developing an application using ElasticSearch, I want to index a document but ignoring some field. @Document(indexName = "my\_index", type = "user") public class User{ @Id private Long userId; private …

---

## [SOLVED: \[query\_shard\_exception failed to create query with index](https://discuss.elastic.co/t/solved-query-shard-exception-failed-to-create-query-with-index/153972)

<div class="topic-metadata">

**Author:** [@Dave\_Clissold](https://discuss.elastic.co/u/Dave_Clissold)\
**Replies:** 1\
**Last updated:** [October 25, 2018, 10:38am UTC](https://discuss.elastic.co/t/solved-query-shard-exception-failed-to-create-query-with-index/153972 "2018-10-25T10:38:37Z")

</div>

I have just started getting a strange failed to create query error, I am running the query though elasticsearch.js. When is tried searching across multiple indexes \['gin','wine','whisky','beer'\] it worked as soon as I li…

---

## [What would cause refresh=wait\_for to regularly take 2-5 seconds?](https://discuss.elastic.co/t/what-would-cause-refresh-wait-for-to-regularly-take-2-5-seconds/106369)

<div class="topic-metadata">

**Author:** [@Rod\_Howarth](https://discuss.elastic.co/u/Rod_Howarth)\
**Replies:** 8\
**Last updated:** [November 28, 2017, 6:53am UTC](https://discuss.elastic.co/t/what-would-cause-refresh-wait-for-to-regularly-take-2-5-seconds/106369 "2017-11-28T06:53:25Z")

</div>

Hi, I am facing a bit of trouble with something we're trying to do in our system and was hoping someone could give me some advice! We've been using elastic search quite heavily in our architecture, for text search but …

---

## [How to make a table report by grouped aggregation count?](https://discuss.elastic.co/t/how-to-make-a-table-report-by-grouped-aggregation-count/124977)

<div class="topic-metadata">

**Author:** [@kora](https://discuss.elastic.co/u/kora)\
**Replies:** 3\
**Last updated:** [March 21, 2018, 1:40pm UTC](https://discuss.elastic.co/t/how-to-make-a-table-report-by-grouped-aggregation-count/124977 "2018-03-21T13:40:26Z")

</div>

Hi all. This seems similar as How to make histogram by grouped aggregation count? to me that is nicely answered by @timroes. I have a data that I think has the same structure, although no integers here: { "action": "…

---

## [Day of Week](https://discuss.elastic.co/t/day-of-week/33295)

<div class="topic-metadata">

**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\
**Replies:** 6\
**Last updated:** [October 31, 2016, 2:31pm UTC](https://discuss.elastic.co/t/day-of-week/33295 "2016-10-31T14:31:30Z")

</div>

I'm able to define scripted field like so in Kibana 4.2 and Elasticsearch 2.0: doc\['@timestamp'\].getDayOfMonth() doc\['@timestamp'\].getHourOfDay() but can't figure out how to get the day of the week. I've tried: doc…

---

## [How to trim zero or more leading and trailing spaces from key-value pairs?](https://discuss.elastic.co/t/how-to-trim-zero-or-more-leading-and-trailing-spaces-from-key-value-pairs/117933)

<div class="topic-metadata">

**Author:** [@jainbhavya53](https://discuss.elastic.co/u/jainbhavya53)\
**Replies:** 7\
**Last updated:** [February 1, 2018, 6:51am UTC](https://discuss.elastic.co/t/how-to-trim-zero-or-more-leading-and-trailing-spaces-from-key-value-pairs/117933 "2018-02-01T06:51:22Z")

</div>

I have used kv filter to extract key-value pairs using field\_split and have used default\_keys to provide default keys in case no value is present corresponding to that field.I have used strip of mutate filter to trim all…

---

## [Http client did not trust this server's certificate from the browser](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-from-the-browser/200254)

<div class="topic-metadata">

**Author:** [@NNN](https://discuss.elastic.co/u/NNN)\
**Replies:** 2\
**Last updated:** [September 23, 2019, 10:27am UTC](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-from-the-browser/200254 "2019-09-23T10:27:20Z")

</div>

Hello, SSL does not work when I try to access https://localhost:9200 from the browser I get : http client did not trust this server's certificate, closing connection my elasticsearch.yml xpack.security.enabled : tru…

---

## [Unexpected end-of-input within/between Object entries](https://discuss.elastic.co/t/unexpected-end-of-input-within-between-object-entries/198077)

<div class="topic-metadata">

**Author:** [@S\_Chase](https://discuss.elastic.co/u/S_Chase)\
**Replies:** 4\
**Last updated:** [September 4, 2019, 6:50pm UTC](https://discuss.elastic.co/t/unexpected-end-of-input-within-between-object-entries/198077 "2019-09-04T18:50:30Z")

</div>

This is the message i'm getting in the logstash log. JSON parse error, original data now in message field {:error=\>#\<LogStash::Json::ParserError: Unexpected end-of-input within/between Object entries at \[Source: (Stri…

---

## [How to Ingest data from MongoDB database into ElasticSearch using Logstash](https://discuss.elastic.co/t/how-to-ingest-data-from-mongodb-database-into-elasticsearch-using-logstash/216245)

<div class="topic-metadata">

**Author:** [@jskishor](https://discuss.elastic.co/u/jskishor)\
**Replies:** 7\
**Last updated:** [February 7, 2020, 4:49am UTC](https://discuss.elastic.co/t/how-to-ingest-data-from-mongodb-database-into-elasticsearch-using-logstash/216245 "2020-02-07T04:49:14Z")

</div>

Hello Logstash/ES Gurus, I am new to ES and logstash, I need help on ingesting a user collection data from a mongo database into elastic search. I have used logstash-input-mongodb plugin and started the logstash and i…

---

## [Requesting background info on \`search.max\_buckets\` change](https://discuss.elastic.co/t/requesting-background-info-on-search-max-buckets-change/130334)

<div class="topic-metadata">

**Author:** [@steven-collins-omega](https://discuss.elastic.co/u/steven-collins-omega)\
**Replies:** 4\
**Last updated:** [May 3, 2018, 4:59pm UTC](https://discuss.elastic.co/t/requesting-background-info-on-search-max-buckets-change/130334 "2018-05-03T16:59:23Z")

</div>

So the default value of search.max\_buckets is -1 currently (6.x), which means there is no limit. We've been starting to get warnings that the default value will change to 10,000 in future versions (we currently have a te…

---

## [Cluster.max\_shards\_per\_node](https://discuss.elastic.co/t/cluster-max-shards-per-node/157263)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [November 19, 2018, 6:12am UTC](https://discuss.elastic.co/t/cluster-max-shards-per-node/157263 "2018-11-19T06:12:11Z")

</div>

I see following message through Dev Tools in Kibana: #! Deprecation: In a future major version, this request will fail because this action would add \[10\] total shards, but this cluster currently has \[9556\]/\[5000\] maxim…

---

## [Lack of help](https://discuss.elastic.co/t/lack-of-help/203108)

<div class="topic-metadata">

**Author:** [@hursto75](https://discuss.elastic.co/u/hursto75)\
**Replies:** 2\
**Last updated:** [October 11, 2019, 6:50pm UTC](https://discuss.elastic.co/t/lack-of-help/203108 "2019-10-11T18:50:17Z")

</div>

To the elasticsearch professionals, While I appreciate the links to your published documentation, most people that ask a question in these forums have already read the docs. Frequently the question are "answered" with a…

---

## [Way to list reason shard is unassigned or unallocated?](https://discuss.elastic.co/t/way-to-list-reason-shard-is-unassigned-or-unallocated/50368)

<div class="topic-metadata">

**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\
**Replies:** 2\
**Last updated:** [May 18, 2016, 7:33pm UTC](https://discuss.elastic.co/t/way-to-list-reason-shard-is-unassigned-or-unallocated/50368 "2016-05-18T19:33:30Z")

</div>

I can't find a way to enumerate the reason(s) why a shard can't be assigned or allocated other than attempting a reroute: $ curl -X POST https://$HOSTNAME/es/\_cluster/reroute?pretty -d '{"commands":\[{"allocate":{"ind…

---

## [Machine Learning & Elastic Cloud](https://discuss.elastic.co/t/machine-learning-elastic-cloud/97916)

<div class="topic-metadata">

**Author:** [@Druidmk1](https://discuss.elastic.co/u/Druidmk1)\
**Replies:** 2\
**Last updated:** [September 1, 2017, 9:15am UTC](https://discuss.elastic.co/t/machine-learning-elastic-cloud/97916 "2017-09-01T09:15:59Z")

</div>

Hello, Is subject available on Cloud? I see that existing version now 5.5.2 but can't find machine learning button in Kibana. It will be great to have it. Max

---

## [Update ops: doc\_as\_upsert vs upsert properties](https://discuss.elastic.co/t/update-ops-doc-as-upsert-vs-upsert-properties/14108)

<div class="topic-metadata">

**Author:** [@TheDeveloper](https://discuss.elastic.co/u/TheDeveloper)\
**Replies:** 2\
**Last updated:** [October 25, 2013, 12:41pm UTC](https://discuss.elastic.co/t/update-ops-doc-as-upsert-vs-upsert-properties/14108 "2013-10-25T12:41:38Z")

</div>

What's the difference between doc\_as\_upsert and upsert properties for updates? Documentation at http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/docs-update.html seems to describe the same b…

---

## [ElasticSearch PORT 9300 connection refused](https://discuss.elastic.co/t/elasticsearch-port-9300-connection-refused/77391)

<div class="topic-metadata">

**Author:** [@Mohan\_Ghimire](https://discuss.elastic.co/u/Mohan_Ghimire)\
**Replies:** 0\
**Last updated:** [March 4, 2017, 5:11pm UTC](https://discuss.elastic.co/t/elasticsearch-port-9300-connection-refused/77391 "2017-03-04T17:11:27Z")

</div>

I've deployed Elasticsearch 5.1.2 in docker version 1.12.6. When i run telnet to 9200 and 9300 port of the server using localhost then it says the connection is successful. But when i run telnet to 9300 port of the serve…

---

## [Does elastic have a healthcheck endpoint that does not require username and password](https://discuss.elastic.co/t/does-elastic-have-a-healthcheck-endpoint-that-does-not-require-username-and-password/217090)

<div class="topic-metadata">

**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\
**Replies:** 5\
**Last updated:** [June 30, 2021, 11:48am UTC](https://discuss.elastic.co/t/does-elastic-have-a-healthcheck-endpoint-that-does-not-require-username-and-password/217090 "2021-06-30T11:48:17Z")

</div>

Problem description: AWS ALB health check does not take in username and password. For elastic search container to attach to ALB and pass its health check, I have to enable the anonymous user in elastic and assign it th…

---

## [GROK filter for multi-line Postgresql log](https://discuss.elastic.co/t/grok-filter-for-multi-line-postgresql-log/39854)

<div class="topic-metadata">

**Author:** [@EugeneBorshch](https://discuss.elastic.co/u/EugeneBorshch)\
**Replies:** 7\
**Last updated:** [March 12, 2018, 2:52pm UTC](https://discuss.elastic.co/t/grok-filter-for-multi-line-postgresql-log/39854 "2018-03-12T14:52:47Z")

</div>

Hi All, I am having hard times trying to merge multi-line Postgresql logs with GROK into one Logstash event. My log file look like this: Jan 22 09:45:01 myhost postgres\[19015\]: \[2-1\] postgres postgres 19015 ::1 ERROR…

---

## [Matching integers in an array](https://discuss.elastic.co/t/matching-integers-in-an-array/96534)

<div class="topic-metadata">

**Author:** [@umairmarif](https://discuss.elastic.co/u/umairmarif)\
**Replies:** 4\
**Last updated:** [August 16, 2017, 7:18pm UTC](https://discuss.elastic.co/t/matching-integers-in-an-array/96534 "2017-08-16T19:18:25Z")

</div>

My project is mainly focused on comparing the results of past queries with the current query. Each query returns a list (array) of IDs (alphanumeric values). The number of IDs depends upon the type of the query. Since t…

[Previous page](https://discuss.elastic.co/top.md?page=325&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=327&per_page=50&period=all)
