# Top **URL:** https://discuss.elastic.co/top.md?page=327&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 328 --- ## [Can logstash get the type of field?](https://discuss.elastic.co/t/can-logstash-get-the-type-of-field/61326)
**Author:** [@WangXiangUSTC](https://discuss.elastic.co/u/WangXiangUSTC)\ **Replies:** 6\ **Last updated:** [September 26, 2016, 5:27am UTC](https://discuss.elastic.co/t/can-logstash-get-the-type-of-field/61326 "2016-09-26T05:27:07Z")
I there any way can logstash get the type of field? for example, "age": 1, "name":"jone' the age's type is integer, and the jone's type is string. --- ## [Can't get text on a START\_OBJECT at 1:1043](https://discuss.elastic.co/t/cant-get-text-on-a-start-object-at-1-1043/194387)
**Author:** [@LEK-LD](https://discuss.elastic.co/u/LEK-LD)\ **Replies:** 4\ **Last updated:** [August 8, 2019, 10:22am UTC](https://discuss.elastic.co/t/cant-get-text-on-a-start-object-at-1-1043/194387 "2019-08-08T10:22:28Z")
Hey guys, I'm facing a problem with my elasticsearch-output in Logstash. What I'm trying to archieve is indexing my logs, sent by filebeat, via logstash in elasticsearch. My logs are in json-codec and I'm using version … --- ## [Custom index name does not work on metricbeat](https://discuss.elastic.co/t/custom-index-name-does-not-work-on-metricbeat/188977)
**Author:** [@Thanura\_Kannangara](https://discuss.elastic.co/u/Thanura_Kannangara)\ **Replies:** 2\ **Last updated:** [July 5, 2019, 3:30pm UTC](https://discuss.elastic.co/t/custom-index-name-does-not-work-on-metricbeat/188977 "2019-07-05T15:30:47Z")
I want to keep the indices for my metricbeats unique per project. I have added the custom metricbeats as below Note: running metricbeat 7.2.0 on windows server 2016 ###################### Metricbeat Configuration Exa… --- ## [How to import csv files into Elasticsearch](https://discuss.elastic.co/t/how-to-import-csv-files-into-elasticsearch/46365)
**Author:** [@mros](https://discuss.elastic.co/u/mros)\ **Replies:** 6\ **Last updated:** [April 30, 2017, 2:55pm UTC](https://discuss.elastic.co/t/how-to-import-csv-files-into-elasticsearch/46365 "2017-04-30T14:55:54Z")
I have a csv file exported from a database and can not find correct information on how to do. I want to upload the CSV file to Elasticsearch then display it in Kiwana. I would appreciate help. Regards, Marc --- ## [Unable to start Elasticsearch-YARN (Container is running beyond virtual memory limits)](https://discuss.elastic.co/t/unable-to-start-elasticsearch-yarn-container-is-running-beyond-virtual-memory-limits/26102)
**Author:** [@vivek](https://discuss.elastic.co/u/vivek)\ **Replies:** 6\ **Last updated:** [August 3, 2015, 9:17pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-yarn-container-is-running-beyond-virtual-memory-limits/26102 "2015-08-03T21:17:21Z")
Hello, I am having trouble starting Elasticsearch-YARN on a Hadoop cluster. I am running on a 2 node (m3.large EC2 instances) cluster with hdp-2.1.2.0. I am following the steps described on https://www.elastic.co/gu… --- ## [Aggregates on collapse](https://discuss.elastic.co/t/aggregates-on-collapse/258883)
**Author:** [@Philh-gbg](https://discuss.elastic.co/u/Philh-gbg)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 3:17pm UTC](https://discuss.elastic.co/t/aggregates-on-collapse/258883 "2020-12-16T15:17:33Z")
New user looking for help, I know that aggregates don't work on the collapse results but I can't seem to find a way to achieve the same affect directly. We have a relatively simple dataset that contains multiple entries … --- ## [Workaround for nested objects](https://discuss.elastic.co/t/workaround-for-nested-objects/107108)
**Author:** [@mirek](https://discuss.elastic.co/u/mirek)\ **Replies:** 6\ **Last updated:** [November 14, 2017, 5:59am UTC](https://discuss.elastic.co/t/workaround-for-nested-objects/107108 "2017-11-14T05:59:49Z")
Hi I'm working or reports in Kibana and recently I faced issues with lack of support for querying over nested types ( https://www.elastic.co/guide/en/kibana/current/nested-objects.html ) Let's assume I have following i… --- ## ["NOT Empty" KQL query returns records with empty fields](https://discuss.elastic.co/t/not-empty-kql-query-returns-records-with-empty-fields/320193)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 1\ **Last updated:** [December 7, 2022, 10:02am UTC](https://discuss.elastic.co/t/not-empty-kql-query-returns-records-with-empty-fields/320193 "2022-12-07T10:02:24Z")
My records have a text field called "My Field". For some records these are the empty string and for others they have a value. I want to find all the ones for which "My Field" is not the empty string. In the KQL query bar… --- ## [Query document size](https://discuss.elastic.co/t/query-document-size/21184)
**Author:** [@Jojo\_Juju](https://discuss.elastic.co/u/Jojo_Juju)\ **Replies:** 3\ **Last updated:** [December 10, 2014, 1:26pm UTC](https://discuss.elastic.co/t/query-document-size/21184 "2014-12-10T13:26:34Z")
Hi, I'm fairly new to ES and I wonder if there is a way to query size (in bytes) of a single document, not average. There was similar post https://groups.google.com/d/msg/elasticsearch/N83Q-K\_jK34/gYmbQSRn82kJ … --- ## [Yellow Cluster Health - Missing Replica Shards](https://discuss.elastic.co/t/yellow-cluster-health-missing-replica-shards/285859)
**Author:** [@David\_Reck](https://discuss.elastic.co/u/David_Reck)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 5:43pm UTC](https://discuss.elastic.co/t/yellow-cluster-health-missing-replica-shards/285859 "2021-10-11T17:43:07Z")
Hello everyone, I am continually having new indexes get created with a yellow status. When I do a \_cluster/allocation/explain I get this back { "index" : "vnext-signalrhub-2021.10.05", "shard" : 0, "primary" : f… --- ## [Unable to see the version of Kibana](https://discuss.elastic.co/t/unable-to-see-the-version-of-kibana/75927)
**Author:** [@rudravaram](https://discuss.elastic.co/u/rudravaram)\ **Replies:** 3\ **Last updated:** [February 22, 2017, 2:41pm UTC](https://discuss.elastic.co/t/unable-to-see-the-version-of-kibana/75927 "2017-02-22T14:41:57Z")
Hi All, After installing the Kibana through git I am unable to see the version like (master ).Please some one let me know what vl be the issue. Thanks In Advance --- ## [How to get the IP address of the HTTP request sender using logstash?](https://discuss.elastic.co/t/how-to-get-the-ip-address-of-the-http-request-sender-using-logstash/78891)
**Author:** [@gourab.jtv](https://discuss.elastic.co/u/gourab.jtv)\ **Replies:** 8\ **Last updated:** [March 17, 2017, 9:11am UTC](https://discuss.elastic.co/t/how-to-get-the-ip-address-of-the-http-request-sender-using-logstash/78891 "2017-03-17T09:11:37Z")
I am trying to find the IP address of the HTTP request sender (using Logstash HTTP input plugin) in logstash. curl -XPUT 'http://127.0.0.1:8080/twitter/tweet/1' -d 'hello' My config file for logstash is: input { h… --- ## [Support for Java 11](https://discuss.elastic.co/t/support-for-java-11/149393)
**Author:** [@bsarkar](https://discuss.elastic.co/u/bsarkar)\ **Replies:** 1\ **Last updated:** [October 4, 2018, 9:18am UTC](https://discuss.elastic.co/t/support-for-java-11/149393 "2018-10-04T09:18:45Z")
Support for Java 8 for commercial use will end in Jan 2019. For Java 9 and 10, it will end even before that because they are non-LTS versions. I read https://www.elastic.co/blog/elasticsearch-java-9-and-beyond but it doe… --- ## [Correlation of two log (sources)](https://discuss.elastic.co/t/correlation-of-two-log-sources/41752)
**Author:** [@mr\_rob](https://discuss.elastic.co/u/mr_rob)\ **Replies:** 6\ **Last updated:** [November 16, 2016, 3:38pm UTC](https://discuss.elastic.co/t/correlation-of-two-log-sources/41752 "2016-11-16T15:38:34Z")
Hello Newbie here, can someone help me out please? 2 log servers producing: connection logs (user ip etc) (generated every 10 mins) http logs (user actions) (generated on the fly) the connection logs have username an… --- ## [How to: Elastic Search - Efficient/Compact “Not In” Operator](https://discuss.elastic.co/t/how-to-elastic-search-efficient-compact-not-in-operator/111975)
**Author:** [@menelaosbgr](https://discuss.elastic.co/u/menelaosbgr)\ **Replies:** 1\ **Last updated:** [December 22, 2017, 3:10pm UTC](https://discuss.elastic.co/t/how-to-elastic-search-efficient-compact-not-in-operator/111975 "2017-12-22T15:10:00Z")
So I wanted the equivalent of doing an sql not in query such as this: select \* from test where id not in (1,2,3); Initially I was thinking more in SQL, and it took me an hour to understand the philosophy behind Elastic… --- ## [Hive integration always fail](https://discuss.elastic.co/t/hive-integration-always-fail/2277)
**Author:** [@alvaro](https://discuss.elastic.co/u/alvaro)\ **Replies:** 7\ **Last updated:** [January 22, 2016, 4:32am UTC](https://discuss.elastic.co/t/hive-integration-always-fail/2277 "2016-01-22T04:32:34Z")
Hello everyone! I have a problem I can't solve and I tried everything I found on the internet and I can imagine. I'm triying to integrate elastic search (2.0.2) with cloudera (5.4.0) installed with cloudera manager. … --- ## [How to show max count of yesterday with 1 hour time bucket?](https://discuss.elastic.co/t/how-to-show-max-count-of-yesterday-with-1-hour-time-bucket/108097)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 5\ **Last updated:** [November 22, 2017, 7:51pm UTC](https://discuss.elastic.co/t/how-to-show-max-count-of-yesterday-with-1-hour-time-bucket/108097 "2017-11-22T19:51:28Z")
Hi, I am watching the data of yesterday (complete day). No I have the task to show the max event count per hour for the timespan set. How do I do it? How can I return the max value of multiple buckets? My current wor… --- ## [Logs Export](https://discuss.elastic.co/t/logs-export/41459)
**Author:** [@praveen\_siem](https://discuss.elastic.co/u/praveen_siem)\ **Replies:** 5\ **Last updated:** [February 25, 2016, 6:03pm UTC](https://discuss.elastic.co/t/logs-export/41459 "2016-02-25T18:03:29Z")
Hi, I want to export one week of logs into an .csv or excel file. Is it possible to export the logs from the kibana console. I can see that in a page around 500 events are appearing, couldn't find the option to expor… --- ## [Rejected execution](https://discuss.elastic.co/t/rejected-execution/240984)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 8\ **Last updated:** [July 14, 2020, 2:05pm UTC](https://discuss.elastic.co/t/rejected-execution/240984 "2020-07-14T14:05:58Z")
Hello World! I'm using Elasticsearch 6.8.10 and trying to run a query, yet running into following issue: { "shard" : 3, "node" : "koEOgkkDBhOVfKHA7QXBjj", "reason" : { "reason" : "rejected execution of o… --- ## [Elastic SIEM Rules/Exceptions/Lists in Terraform](https://discuss.elastic.co/t/elastic-siem-rules-exceptions-lists-in-terraform/302628)
**Author:** [@operator-equals](https://discuss.elastic.co/u/operator-equals)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 2:34pm UTC](https://discuss.elastic.co/t/elastic-siem-rules-exceptions-lists-in-terraform/302628 "2022-04-18T14:34:08Z")
Hello people! I created a repo to manage Rules and Exceptions/Lists in Terraform. Working with detection-rules repo \[1\], I needed to somehow keep a source of truth on what is deployed in the SIEM. So I created a Terraf… --- ## [Using your own domain cname to access cloud elastic instance?](https://discuss.elastic.co/t/using-your-own-domain-cname-to-access-cloud-elastic-instance/142024)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 8:34am UTC](https://discuss.elastic.co/t/using-your-own-domain-cname-to-access-cloud-elastic-instance/142024 "2020-04-21T08:34:00Z")
I am using cloud.elastic.co instance but it provides you long URL to access ES like XXXXXXXXXXXXXX.us-east-xx.aws.found.io I tried to set a DNS CNAME like "es.mycompany.com" to mask the name but then trying to access el… --- ## ["PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed"](https://discuss.elastic.co/t/pkix-path-validation-failed-java-security-cert-certpathvalidatorexception-validity-check-failed/368360)
**Author:** [@apal](https://discuss.elastic.co/u/apal)\ **Replies:** 4\ **Last updated:** [October 10, 2024, 8:10pm UTC](https://discuss.elastic.co/t/pkix-path-validation-failed-java-security-cert-certpathvalidatorexception-validity-check-failed/368360 "2024-10-10T20:10:57Z")
Here's the full error: Oct 07 11:57:38 elk.example.com logstash\[3697608\]: \[2024-10-07T11:57:38,571\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Attempted to resurrect connection to dead ES instance, but got an error {:… --- ## [Visualize: Cannot read property 'some' of undefined](https://discuss.elastic.co/t/visualize-cannot-read-property-some-of-undefined/134374)
**Author:** [@Jesus\_Garcia\_Rodrigu](https://discuss.elastic.co/u/Jesus_Garcia_Rodrigu)\ **Replies:** 7\ **Last updated:** [June 12, 2018, 7:57am UTC](https://discuss.elastic.co/t/visualize-cannot-read-property-some-of-undefined/134374 "2018-06-12T07:57:41Z")
When i try to save any visualization i get this error and then . The visualization is stored but is broken . I cant see anything . This happens most simple visualization ( document count ) . I dont have any field ca… --- ## [Nodes not joing cluster](https://discuss.elastic.co/t/nodes-not-joing-cluster/124403)
**Author:** [@igormages](https://discuss.elastic.co/u/igormages)\ **Replies:** 8\ **Last updated:** [March 21, 2018, 11:21am UTC](https://discuss.elastic.co/t/nodes-not-joing-cluster/124403 "2018-03-21T11:21:56Z")
Hello ! I can't make my nodes join the cluster. I get an cluster uuid like na... I don't know if this is because i upgraded to 6.2.2 from 5.X (5.3 or 5.6 i don't remember) { "name" : "md2es", "cluster\_name" : "md2… --- ## [How to route logs to different Indexs](https://discuss.elastic.co/t/how-to-route-logs-to-different-indexs/89852)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 8\ **Last updated:** [June 27, 2017, 9:12am UTC](https://discuss.elastic.co/t/how-to-route-logs-to-different-indexs/89852 "2017-06-27T09:12:27Z")
Hi, I am trying to route certain logs to index 1 and other logs to index 2. I know that this not the best practice but this will solve us many problems. One log looks like: /opt/mod/a.log The other looks like: /opt/… --- ## [XContentBuilder.copyCurrentStructure() fails with .JsonParseException: Unexpected end-of-input expected close marker for OBJECT](https://discuss.elastic.co/t/xcontentbuilder-copycurrentstructure-fails-with-jsonparseexception-unexpected-end-of-input-expected-close-marker-for-object/14025)
**Author:** [@Hendrik](https://discuss.elastic.co/u/Hendrik)\ **Replies:** 3\ **Last updated:** [December 20, 2014, 2:21am UTC](https://discuss.elastic.co/t/xcontentbuilder-copycurrentstructure-fails-with-jsonparseexception-unexpected-end-of-input-expected-close-marker-for-object/14025 "2014-12-20T02:21:45Z")
$ curl -XGET 'http://localhost:9200/\_search' -d '{ "query" : { "term" : { "user" : "kimchy" } } ' public class MyRestFilterDoingSpecialThings extends RestFilter { ... Override public voi… --- ## [Parse json in Log field to get individual fields for visualization](https://discuss.elastic.co/t/parse-json-in-log-field-to-get-individual-fields-for-visualization/291244)
**Author:** [@girija](https://discuss.elastic.co/u/girija)\ **Replies:** 7\ **Last updated:** [December 9, 2021, 12:24pm UTC](https://discuss.elastic.co/t/parse-json-in-log-field-to-get-individual-fields-for-visualization/291244 "2021-12-09T12:24:05Z")
Hello I am new to Kibana and have difficulty reading the logs for visualization. I have pasted a sample of how my log field looks. I need to read the values inside the log for creating visualizations in Kibana, like w… --- ## [Run Filebeat as either service in UNIX or Background Job](https://discuss.elastic.co/t/run-filebeat-as-either-service-in-unix-or-background-job/93314)
**Author:** [@Laker99](https://discuss.elastic.co/u/Laker99)\ **Replies:** 5\ **Last updated:** [July 17, 2017, 11:59pm UTC](https://discuss.elastic.co/t/run-filebeat-as-either-service-in-unix-or-background-job/93314 "2017-07-17T23:59:09Z")
Hello All, Good day :slight\_smile: Hope you're doing fine. May I please take a few minutes of your time? Q. How can I start Filebeat in background mode? Here's what I'm dealing with, filebeat installed in /home//file… --- ## [Mapper \[Id\] cannot be changed from type \[text\] to \[integer\]](https://discuss.elastic.co/t/mapper-id-cannot-be-changed-from-type-text-to-integer/99211)
**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\ **Replies:** 2\ **Last updated:** [September 3, 2017, 7:48am UTC](https://discuss.elastic.co/t/mapper-id-cannot-be-changed-from-type-text-to-integer/99211 "2017-09-03T07:48:08Z")
Hi ! I have deleted my index and want to create a new index for (new map). But I get this error message: { “error”: { “root\_cause”: \[ { “type”: “illegal\_argument\_exception”, “reason”: “mapper \[Id\] cannot be change… --- ## [How to change time zone in Kibana for the Index date field](https://discuss.elastic.co/t/how-to-change-time-zone-in-kibana-for-the-index-date-field/234770)
**Author:** [@manjunathpb](https://discuss.elastic.co/u/manjunathpb)\ **Replies:** 4\ **Last updated:** [May 29, 2020, 11:06am UTC](https://discuss.elastic.co/t/how-to-change-time-zone-in-kibana-for-the-index-date-field/234770 "2020-05-29T11:06:53Z")
We have 3 Date fields which is getting converted to UTC time zone by default, I would like to change the UTC time Zone to America/New\_York timezone. Could you please let me know how to change it. Awaiting your reply, T… --- ## [Connecting to %s using SSL with verify\_certs=False is insecure](https://discuss.elastic.co/t/connecting-to-s-using-ssl-with-verify-certs-false-is-insecure/209776)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 5:17am UTC](https://discuss.elastic.co/t/connecting-to-s-using-ssl-with-verify-certs-false-is-insecure/209776 "2019-11-28T05:17:09Z")
Here is my python code for connecting to Elasticsearch: from elasticsearch import Elasticsearch es = Elasticsearch(\[HOST\], http\_auth = (str(USERNAME), str(PASSWORD)), scheme = "https", port=443) Error: /usr/local/lib… --- ## [Missing a lot of logs sent via filebeats](https://discuss.elastic.co/t/missing-a-lot-of-logs-sent-via-filebeats/61185)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 8\ **Last updated:** [October 7, 2016, 9:56am UTC](https://discuss.elastic.co/t/missing-a-lot-of-logs-sent-via-filebeats/61185 "2016-10-07T09:56:55Z")
We seem to be losing a lot of logs from just a couple of servers that we collect and send via filebeats. This is our basic configuration: filebeat: prospectors: \[\] registry\_file: "/var/lib/filebeat/registry" conf… --- ## [Can Markdown widget display field value - Example Please](https://discuss.elastic.co/t/can-markdown-widget-display-field-value-example-please/134680)
**Author:** [@gregpaskal](https://discuss.elastic.co/u/gregpaskal)\ **Replies:** 5\ **Last updated:** [June 8, 2018, 2:17pm UTC](https://discuss.elastic.co/t/can-markdown-widget-display-field-value-example-please/134680 "2018-06-08T14:17:48Z")
Is there anyway to have a field value return in a markdown widget? --- ## [GeoIP processor / setup?](https://discuss.elastic.co/t/geoip-processor-setup/298227)
**Author:** [@Balu](https://discuss.elastic.co/u/Balu)\ **Replies:** 8\ **Last updated:** [February 25, 2022, 6:27pm UTC](https://discuss.elastic.co/t/geoip-processor-setup/298227 "2022-02-25T18:27:24Z")
My geoip processor doesn't want to download its data? ingest.geoip.downloader.enabled is true by default, otherwise I wouldn't be able to query the following stats, right? I have tried enabling it manually as persistent… --- ## [Kibana queries fail about 80% of the time. Server says upstream timed out](https://discuss.elastic.co/t/kibana-queries-fail-about-80-of-the-time-server-says-upstream-timed-out/1339)
**Author:** [@Jeff\_Silverman](https://discuss.elastic.co/u/Jeff_Silverman)\ **Replies:** 6\ **Last updated:** [August 12, 2015, 11:23pm UTC](https://discuss.elastic.co/t/kibana-queries-fail-about-80-of-the-time-server-says-upstream-timed-out/1339 "2015-08-12T23:23:23Z")
I inherited an ELK system, and I am not sure if it ever worked properly, but I know it is not working now. My system has 4 clusters, for 4 different customers. Each cluster is fronted by an F5 load balancer, so that d… --- ## [Malformed action/metadata line \[1\], expected START\_OBJECT but found \[START\_ARRAY\]](https://discuss.elastic.co/t/malformed-action-metadata-line-1-expected-start-object-but-found-start-array/315528)
**Author:** [@Hemabh\_Ravee\_Fox](https://discuss.elastic.co/u/Hemabh_Ravee_Fox)\ **Replies:** 5\ **Last updated:** [September 30, 2022, 10:56am UTC](https://discuss.elastic.co/t/malformed-action-metadata-line-1-expected-start-object-but-found-start-array/315528 "2022-09-30T10:56:03Z")
I've been trying to use the bulk api to insert a large number of documents to an index. I followed the documentation and came up with the following API call - POST https://localhost:9200/index/\_bulk \[ {"create":{}}… --- ## [Creation\_date in index setteing](https://discuss.elastic.co/t/creation-date-in-index-setteing/23314)
**Author:** [@tao\_hiko](https://discuss.elastic.co/u/tao_hiko)\ **Replies:** 7\ **Last updated:** [April 20, 2015, 2:37pm UTC](https://discuss.elastic.co/t/creation-date-in-index-setteing/23314 "2015-04-20T14:37:05Z")
I query setting information of index and found that have creation\_date field but I cannot understand what is value. Can you explain me more? "settings": { "index": { "creation\_date": "14… --- ## [Creating the document\_id in logstash by combining the two columns coming from the input jdbc filter](https://discuss.elastic.co/t/creating-the-document-id-in-logstash-by-combining-the-two-columns-coming-from-the-input-jdbc-filter/39580)
**Author:** [@Sandeep\_Venkatesh](https://discuss.elastic.co/u/Sandeep_Venkatesh)\ **Replies:** 2\ **Last updated:** [February 17, 2016, 5:54am UTC](https://discuss.elastic.co/t/creating-the-document-id-in-logstash-by-combining-the-two-columns-coming-from-the-input-jdbc-filter/39580 "2016-02-17T05:54:46Z")
Right now this is how it looks, elasticsearch { user =\> "admin" password =\> "elastic" index =\> "customs" manage\_template =\> false template\_name =\> "template1" docum… --- ## [Data generation for Elasticsearch](https://discuss.elastic.co/t/data-generation-for-elasticsearch/34391)
**Author:** [@kucera.jan.cz](https://discuss.elastic.co/u/kucera.jan.cz)\ **Replies:** 7\ **Last updated:** [May 14, 2016, 7:43pm UTC](https://discuss.elastic.co/t/data-generation-for-elasticsearch/34391 "2016-05-14T19:43:07Z")
Hello everyone, I am currently working on document generator for Elasticsearch since I miss such functionality in my previous work. The ideal workflow of using generator is like this: 1) Choose index/type which should … --- ## [Try to run elasticsearch but keeps stopping immediately](https://discuss.elastic.co/t/try-to-run-elasticsearch-but-keeps-stopping-immediately/141886)
**Author:** [@shreym03](https://discuss.elastic.co/u/shreym03)\ **Replies:** 5\ **Last updated:** [July 27, 2018, 9:55am UTC](https://discuss.elastic.co/t/try-to-run-elasticsearch-but-keeps-stopping-immediately/141886 "2018-07-27T09:55:16Z")
I'm using elasticsearch 6.3 on Ubuntu. Whenever I start it up, it runs for a couple of minutes and then immediately fails. I get this error when checking satus Loaded: loaded (/usr/lib/systemd/system/elasticsearch.se… --- ## [How logstash reads a log file from a subfolder](https://discuss.elastic.co/t/how-logstash-reads-a-log-file-from-a-subfolder/29042)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 2\ **Last updated:** [September 10, 2015, 4:57pm UTC](https://discuss.elastic.co/t/how-logstash-reads-a-log-file-from-a-subfolder/29042 "2015-09-10T16:57:31Z")
HI Experts, My logs are placed in the following directory structure logs/ Cust1/2015/Sep-09/cisco.log ................. ................. ........... Cust1/2015/Sep-10/cisco.log Here log is the m… --- ## [Convert UNIX epoch to local time](https://discuss.elastic.co/t/convert-unix-epoch-to-local-time/81754)
**Author:** [@mitabrev](https://discuss.elastic.co/u/mitabrev)\ **Replies:** 5\ **Last updated:** [April 10, 2017, 11:45am UTC](https://discuss.elastic.co/t/convert-unix-epoch-to-local-time/81754 "2017-04-10T11:45:17Z")
Hi, Hope I'm in the right section and will form the right question. So my situation. I'm using logstash+elasticsearch+kibana for parsin some logs, CSV. Parsing works perfectly. I've got two date fieds, submission… --- ## [Java.lang.IllegalArgumentException: cannot change DocValues type from SORTED\_SET to BINARY for field "xxxxxxx" can cause node crash /index corruption](https://discuss.elastic.co/t/java-lang-illegalargumentexception-cannot-change-docvalues-type-from-sorted-set-to-binary-for-field-xxxxxxx-can-cause-node-crash-index-corruption/38873)
**Author:** [@justnj](https://discuss.elastic.co/u/justnj)\ **Replies:** 6\ **Last updated:** [January 21, 2016, 5:15pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-cannot-change-docvalues-type-from-sorted-set-to-binary-for-field-xxxxxxx-can-cause-node-crash-index-corruption/38873 "2016-01-21T17:15:01Z")
\[2016-01-09 04:03:29,518\]\[WARN \]\[index.merge.scheduler \] \[es-xxx-11\] \[xxxxxxxxx\]\[0\] failed to merge java.lang.IllegalArgumentException: cannot change DocValues type from SORTED\_SET to BINARY for field "xxxxxxx" … --- ## [Multiple JDBC Inputs in Single Logstash Config File - Unknown Error](https://discuss.elastic.co/t/multiple-jdbc-inputs-in-single-logstash-config-file-unknown-error/97333)
**Author:** [@r4z0rw1r3666](https://discuss.elastic.co/u/r4z0rw1r3666)\ **Replies:** 6\ **Last updated:** [August 22, 2017, 4:10am UTC](https://discuss.elastic.co/t/multiple-jdbc-inputs-in-single-logstash-config-file-unknown-error/97333 "2017-08-22T04:10:41Z")
Hello, I’ve had limited success in running multiple (4 concurrent) SQL queries from an Oracle Database, and pushing their data across to my Elastic server. When these queries run once a minute, the first 1-2 queries wi… --- ## [Maximum aggregation response limit](https://discuss.elastic.co/t/maximum-aggregation-response-limit/103779)
**Author:** [@kedarsdixit](https://discuss.elastic.co/u/kedarsdixit)\ **Replies:** 4\ **Last updated:** [October 12, 2017, 7:41pm UTC](https://discuss.elastic.co/t/maximum-aggregation-response-limit/103779 "2017-10-12T19:41:53Z")
hi, Do we have any limit on fetching the aggregations limit, like search hits limit which is default set to 10000 ? If so, We use scroll for scrolling over the response, Do we have anything similar to this ? Many Than… --- ## [Sending EXCEL data to Logstash & Kibana - EMC Data Storage - Chat Analysis Project](https://discuss.elastic.co/t/sending-excel-data-to-logstash-kibana-emc-data-storage-chat-analysis-project/29745)
**Author:** [@strikingraghu](https://discuss.elastic.co/u/strikingraghu)\ **Replies:** 5\ **Last updated:** [September 22, 2015, 7:27am UTC](https://discuss.elastic.co/t/sending-excel-data-to-logstash-kibana-emc-data-storage-chat-analysis-project/29745 "2015-09-22T07:27:42Z")
Hello Team, I have installed ELK stack on one of the window server. All 3 products are up and running fine! However, I need to send a simple excel file into logstash & get it displayed in Kibana. I am not sure about th… --- ## [Higher score to (boost) documents carrying a certain field value](https://discuss.elastic.co/t/higher-score-to-boost-documents-carrying-a-certain-field-value/101733)
**Author:** [@ParitoshBh](https://discuss.elastic.co/u/ParitoshBh)\ **Replies:** 4\ **Last updated:** [September 26, 2017, 1:05pm UTC](https://discuss.elastic.co/t/higher-score-to-boost-documents-carrying-a-certain-field-value/101733 "2017-09-26T13:05:35Z")
I am fairly new to ElasticSearch and getting my feet wet so please pardon if I missed any documentation and/or cannot see/understand the usage clearly. Now, on-to the problem. Following is a simple default mapping I am … --- ## [Default IndicesOptions in SearchRequest and disable specific deprecation warnings](https://discuss.elastic.co/t/default-indicesoptions-in-searchrequest-and-disable-specific-deprecation-warnings/299242)
**Author:** [@joschi](https://discuss.elastic.co/u/joschi)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 8:23am UTC](https://discuss.elastic.co/t/default-indicesoptions-in-searchrequest-and-disable-specific-deprecation-warnings/299242 "2022-03-10T08:23:45Z")
Hi folks, this is a follow-up to the automatically closed topic at Disable specific deprecation warnings. We've updated to Elasticsearch 7.16.3 on the servers and for our clients now but still get this deprecation mess… --- ## [At least one primary shard for the index \[.security-7\] is unavailable issue](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-index-security-7-is-unavailable-issue/316149)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 8\ **Last updated:** [November 7, 2022, 12:31pm UTC](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-index-security-7-is-unavailable-issue/316149 "2022-11-07T12:31:23Z")
Hi I have a two-node cluster with IP "0.0.0.1" , "0.0.0.2". One of my VMs "0.0.0.2" suddenly stopped, and when I start it, the cluster health was RED. Then I restart both VMs again and below message has been found in th… --- ## [Installing logstash plugin inside docker container](https://discuss.elastic.co/t/installing-logstash-plugin-inside-docker-container/186477)
**Author:** [@thomas.heuberger](https://discuss.elastic.co/u/thomas.heuberger)\ **Replies:** 4\ **Last updated:** [June 19, 2019, 2:05pm UTC](https://discuss.elastic.co/t/installing-logstash-plugin-inside-docker-container/186477 "2019-06-19T14:05:42Z")
So, when trying to install a logstash plugin inside a docker container (using an interactive shell, or a Dockerfile or docker-compose , doesn't matter), this happens: sh-4.2$ ./logstash-plugin install logstash-codec-sfl… [Previous page](https://discuss.elastic.co/top.md?page=326&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=328&per_page=50&period=all)