# Top **URL:** https://discuss.elastic.co/top.md?page=330&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 331 --- ## [Filebeat configuration - i/o errors and connection resets](https://discuss.elastic.co/t/filebeat-configuration-i-o-errors-and-connection-resets/73222)
**Author:** [@Arthur\_Francis](https://discuss.elastic.co/u/Arthur_Francis)\ **Replies:** 6\ **Last updated:** [February 2, 2017, 4:33pm UTC](https://discuss.elastic.co/t/filebeat-configuration-i-o-errors-and-connection-resets/73222 "2017-02-02T16:33:18Z")
I am using filebeat to send huge numbers of logs from 2 log servers to logstash machines. My POC basically has a 24 hour window to process all the logs for one 24 hour period, 2 days in arrears. Filebeat seems to be th… --- ## [Fields aggregation or field formatter?](https://discuss.elastic.co/t/fields-aggregation-or-field-formatter/87023)
**Author:** [@Chris\_Clifton](https://discuss.elastic.co/u/Chris_Clifton)\ **Replies:** 2\ **Last updated:** [May 26, 2017, 5:33pm UTC](https://discuss.elastic.co/t/fields-aggregation-or-field-formatter/87023 "2017-05-26T17:33:03Z")
Hi, wondering how to combine a text search field for easier searching through our cloudtrail logs in our ELK stack (5.3.0), We'd like to have a search field called IAM-User = userIdentity.userName or userIdentity.session… --- ## [Another Kibana instance appears to be migrating the index](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index/165708)
**Author:** [@walkexk](https://discuss.elastic.co/u/walkexk)\ **Replies:** 2\ **Last updated:** [January 28, 2019, 2:41am UTC](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index/165708 "2019-01-28T02:41:20Z")
i restart kibana,and i got the error log:"Another Kibana instance appears to be migrating the index. Waiting for that migration to complete. If no other Kibana instance is attempting migrations, you can get past this mes… --- ## [Issues with Fleet Server (Elastic Agent Setup) in local Elasticsearch deployment with self signed certificates](https://discuss.elastic.co/t/issues-with-fleet-server-elastic-agent-setup-in-local-elasticsearch-deployment-with-self-signed-certificates/276151)
**Author:** [@SMT\_Mas](https://discuss.elastic.co/u/SMT_Mas)\ **Replies:** 1\ **Last updated:** [June 18, 2021, 12:52pm UTC](https://discuss.elastic.co/t/issues-with-fleet-server-elastic-agent-setup-in-local-elasticsearch-deployment-with-self-signed-certificates/276151 "2021-06-18T12:52:37Z")
Hello, I'm trying to install Elastic Agent with a local ELK Environment and have no luck because of Fleet Server issues. Server Info: ELK on version 7.13.1 with self-signed certificates running in Docker containers o… --- ## [X509: cannot validate certificate for xx.xx.xx.xxbecause it doesn't contain any IP SANs](https://discuss.elastic.co/t/x509-cannot-validate-certificate-for-xx-xx-xx-xxbecause-it-doesnt-contain-any-ip-sans/226706)
**Author:** [@Daud\_Ahmed](https://discuss.elastic.co/u/Daud_Ahmed)\ **Replies:** 5\ **Last updated:** [April 7, 2020, 10:24am UTC](https://discuss.elastic.co/t/x509-cannot-validate-certificate-for-xx-xx-xx-xxbecause-it-doesnt-contain-any-ip-sans/226706 "2020-04-07T10:24:59Z")
I am able to curl my elasticsearch API successfully curl -k --verbose https://username:password@x.x.x.x:9900 But when i'm trying to connect my filebeat to elasticsearch i'm getting the error x509: cannot validate certi… --- ## [Encrypt the index data?](https://discuss.elastic.co/t/encrypt-the-index-data/85181)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 4\ **Last updated:** [May 10, 2017, 7:43am UTC](https://discuss.elastic.co/t/encrypt-the-index-data/85181 "2017-05-10T07:43:02Z")
We are providing search service to one of our customer who requires that the index data on our cluster must be encrypted because the index contains many secrete data which they don't want anyone know the content unless h… --- ## [Logstash stopped processing because of an error: (SystemExit) exit org.jruby.exceptions.SystemExit: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit-org-jruby-exceptions-systemexit-systemexit-exit/292432)
**Author:** [@tobias.greis](https://discuss.elastic.co/u/tobias.greis)\ **Replies:** 4\ **Last updated:** [December 21, 2021, 5:20pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit-org-jruby-exceptions-systemexit-systemexit-exit/292432 "2021-12-21T17:20:08Z")
Hi, I have a problem with my Logstash Component. When starting I get the following failure and can't find helpful information online. I use a SLES 15 with Logstash 7.16.1 and OpenJDK11. \[2021-12-20T07:56:23,219\]\[INFO \]… --- ## [How about Force change cluster's elected master node](https://discuss.elastic.co/t/how-about-force-change-clusters-elected-master-node/198648)
**Author:** [@luyuncheng](https://discuss.elastic.co/u/luyuncheng)\ **Replies:** 6\ **Last updated:** [September 11, 2019, 8:58am UTC](https://discuss.elastic.co/t/how-about-force-change-clusters-elected-master-node/198648 "2019-09-11T08:58:55Z")
When i see the issues: When talk about force change cluster's elected master node, if there is a master leave but cluster settings not changed, what if changed the cluster block level into METADATA\_WRITE? not BLOC… --- ## [Elasticsearch 7.3 logging hierarchies and levels](https://discuss.elastic.co/t/elasticsearch-7-3-logging-hierarchies-and-levels/199483)
**Author:** [@gdamico](https://discuss.elastic.co/u/gdamico)\ **Replies:** 2\ **Last updated:** [September 17, 2019, 9:49pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-logging-hierarchies-and-levels/199483 "2019-09-17T21:49:07Z")
Hi, I'd like to get a greater detail on discovery process when a node starts. I found this: ES 7.3 Logging configuration So, I think this is the best approach: ./bin/elasticsearch -E \=\… --- ## [IllegalArgumentException: invalid version format](https://discuss.elastic.co/t/illegalargumentexception-invalid-version-format/26324)
**Author:** [@Ashok](https://discuss.elastic.co/u/Ashok)\ **Replies:** 5\ **Last updated:** [May 3, 2017, 4:14am UTC](https://discuss.elastic.co/t/illegalargumentexception-invalid-version-format/26324 "2017-05-03T04:14:55Z")
Getting elasticsearch log eeroras Caught exception while handling client http traffic, closing connection java.lang.IllegalArgumentException: invalid version format: while running logstash.conf file. And getting logst… --- ## [5.0 alpha 5 Java API: PreBuiltTransportClient class missing](https://discuss.elastic.co/t/5-0-alpha-5-java-api-prebuilttransportclient-class-missing/58205)
**Author:** [@Celio\_Nogueira\_de\_Fa](https://discuss.elastic.co/u/Celio_Nogueira_de_Fa)\ **Replies:** 7\ **Last updated:** [October 28, 2016, 10:39am UTC](https://discuss.elastic.co/t/5-0-alpha-5-java-api-prebuilttransportclient-class-missing/58205 "2016-10-28T10:39:01Z")
Hi, I'm trying to use the ES 5.0 alpha 5 Java API (maven dependency), but cannot find the PreBuiltTransportClient class (as described in https://www.elastic.co/guide/en/elasticsearch/client/java-api/master/transport-cl… --- ## [Canvas conditional text](https://discuss.elastic.co/t/canvas-conditional-text/241432)
**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 1:50pm UTC](https://discuss.elastic.co/t/canvas-conditional-text/241432 "2020-07-16T13:50:21Z")
Hello I've been working with conditional formatting of metrics. But I would like also to conditional show an up or down arrow according to the sign of variation. Is that possible? Thank you Hugo --- ## [\_grokparsefailure Tag when parsing logs via logstash](https://discuss.elastic.co/t/-grokparsefailure-tag-when-parsing-logs-via-logstash/46224)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 5\ **Last updated:** [April 6, 2016, 11:03am UTC](https://discuss.elastic.co/t/-grokparsefailure-tag-when-parsing-logs-via-logstash/46224 "2016-04-06T11:03:12Z")
I have the following log:- 2016-03-31 12:40:40 INFO SmartAppUtils:981 - Organization: AppsTwo 2016-03-31 12:40:40 INFO SmartAppUtils:988 - Brand organization: AppsTwo 2016-03-31 12:40:51 INFO SmartAppUtils:981 - Org… --- ## [Exclude pattern for position](https://discuss.elastic.co/t/exclude-pattern-for-position/89011)
**Author:** [@erion](https://discuss.elastic.co/u/erion)\ **Replies:** 7\ **Last updated:** [June 14, 2017, 7:57am UTC](https://discuss.elastic.co/t/exclude-pattern-for-position/89011 "2017-06-14T07:57:06Z")
I have request value like this /index.php?id=1375&type=9. I want to exclude all values that end with 9. After this i want to exclude all values that start with "rec". I try to use the lucene regex but nothing go. only t… --- ## [Logstash + sincedb\_path and start\_position](https://discuss.elastic.co/t/logstash-sincedb-path-and-start-position/52890)
**Author:** [@sarthak2016](https://discuss.elastic.co/u/sarthak2016)\ **Replies:** 1\ **Last updated:** [June 15, 2016, 10:40pm UTC](https://discuss.elastic.co/t/logstash-sincedb-path-and-start-position/52890 "2016-06-15T22:40:30Z")
Hello All, If possible, can someone please help me to undestand sincedb\_path =\> '/dev/null' and start\_position =\> beginning or start\_position =\> end, In which scenario we need to use sincedb\_path or start\_position in… --- ## [Failed to tls handshake i/o timeout](https://discuss.elastic.co/t/failed-to-tls-handshake-i-o-timeout/24475)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 8\ **Last updated:** [August 19, 2015, 3:51pm UTC](https://discuss.elastic.co/t/failed-to-tls-handshake-i-o-timeout/24475 "2015-08-19T15:51:29Z")
Hey all, Well I was able to get logstash 1.5.1 working with elasticsearch 1.6.0 and kibana 4 sitting behind nxginx! It's a pretty sweet setup. Except for the fact that I can't seem to get logstash-forwarder to connect t… --- ## [Filtering based on @timestamp in Discover](https://discuss.elastic.co/t/filtering-based-on-timestamp-in-discover/141372)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 3\ **Last updated:** [July 24, 2018, 12:32pm UTC](https://discuss.elastic.co/t/filtering-based-on-timestamp-in-discover/141372 "2018-07-24T12:32:58Z")
Trying query @timestamp\>=2018-07-23 12:47:04.720 AND @timestamp\<=2018-07-23 12:47:04.920 I see the below exception Discover: Expected "\*", "", \[\\ \\t\\r\\n\] or end of input but ":" found. What is wrong with my query. --- ## [Failed to create query - maxClauseCount is set to 1024](https://discuss.elastic.co/t/failed-to-create-query-maxclausecount-is-set-to-1024/302898)
**Author:** [@Sowmiya](https://discuss.elastic.co/u/Sowmiya)\ **Replies:** 3\ **Last updated:** [April 22, 2022, 1:39pm UTC](https://discuss.elastic.co/t/failed-to-create-query-maxclausecount-is-set-to-1024/302898 "2022-04-22T13:39:39Z")
Hi Team, I am using Elasticsearch version 7.16.2. Have set up the search on the domain-specific data around 20k records. When I am searching for a particular query, I am getting the below error. RequestError(400, 'sear… --- ## [How to write must and must not range query in Highlevel client](https://discuss.elastic.co/t/how-to-write-must-and-must-not-range-query-in-highlevel-client/114526)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 8\ **Last updated:** [January 13, 2018, 3:04pm UTC](https://discuss.elastic.co/t/how-to-write-must-and-must-not-range-query-in-highlevel-client/114526 "2018-01-13T15:04:19Z")
Hi i write a aggregation query in new java api using HighLevelClient. I need help to add must and must not range query for filtering the data. How can i add it ? Is it possible to add json query with query builder ? M… --- ## [Как настроить поиск русских слов?](https://discuss.elastic.co/t/topic/103999)
**Author:** [@FilimonovAP](https://discuss.elastic.co/u/FilimonovAP)\ **Replies:** 8\ **Last updated:** [November 4, 2017, 7:29pm UTC](https://discuss.elastic.co/t/topic/103999 "2017-11-04T19:29:33Z")
Здравствуйте, Есть вопросы по работе и настройке поиска в ES. Сам я в нём не как рыба в воде, так что нужна помощь. К сути. Использую ES 5.4.0 Создал следующую модель: PUT http://localhost:9200/test\_search { "mapp… --- ## [Search string in a text](https://discuss.elastic.co/t/search-string-in-a-text/135348)
**Author:** [@ElGreco1520](https://discuss.elastic.co/u/ElGreco1520)\ **Replies:** 7\ **Last updated:** [June 13, 2018, 8:47am UTC](https://discuss.elastic.co/t/search-string-in-a-text/135348 "2018-06-13T08:47:42Z")
I have a bar display. I want to add a filter to separate into two groups, depending on whether the text contains a word or not. If I put in the filter: SERVICE LIKE '% environment%'. Yes that works, but I would like the… --- ## [Update API can't find document](https://discuss.elastic.co/t/update-api-cant-find-document/325777)
**Author:** [@friaca](https://discuss.elastic.co/u/friaca)\ **Replies:** 1\ **Last updated:** [February 16, 2023, 9:37pm UTC](https://discuss.elastic.co/t/update-api-cant-find-document/325777 "2023-02-16T21:37:25Z")
I'm trying to update a document field but had no success doing it. I can do a GET by ID with ticket-2/ticketelastic/134532 so that clarifies that the ID is valid and the document exists. { "\_index" : "ticket-2", "\_… --- ## [How to design Drill Down chart and Dashboard using Kibana](https://discuss.elastic.co/t/how-to-design-drill-down-chart-and-dashboard-using-kibana/101124)
**Author:** [@Arun\_Raj](https://discuss.elastic.co/u/Arun_Raj)\ **Replies:** 6\ **Last updated:** [September 21, 2017, 11:24am UTC](https://discuss.elastic.co/t/how-to-design-drill-down-chart-and-dashboard-using-kibana/101124 "2017-09-21T11:24:55Z")
Hello how we can design drill down Charts using kibana ? Is there any plugin available for the same ? any kind of pointers would be appreciated Thanks in Advance Arun --- ## [CVE-2021-44228 - Logstahs - ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath](https://discuss.elastic.co/t/cve-2021-44228-logstahs-error-statuslogger-log4j2-could-not-find-a-logging-implementation-please-add-log4j-core-to-the-classpath/291798)
**Author:** [@prajyodh](https://discuss.elastic.co/u/prajyodh)\ **Replies:** 3\ **Last updated:** [December 21, 2021, 6:41am UTC](https://discuss.elastic.co/t/cve-2021-44228-logstahs-error-statuslogger-log4j2-could-not-find-a-logging-implementation-please-add-log4j-core-to-the-classpath/291798 "2021-12-21T06:41:37Z")
Hi I was checking on impact of CVE-2021-44228 on ELK stack and came across the link When i tried the solution mentioned for logstash to remove the JNDI Class zip -q -d \/logstash-core/lib/jars/log4j-c… --- ## [Help adding field if a condition exists](https://discuss.elastic.co/t/help-adding-field-if-a-condition-exists/85134)
**Author:** [@Tim\_Flowers](https://discuss.elastic.co/u/Tim_Flowers)\ **Replies:** 4\ **Last updated:** [May 9, 2017, 6:36pm UTC](https://discuss.elastic.co/t/help-adding-field-if-a-condition-exists/85134 "2017-05-09T18:36:38Z")
Noob to logstash here, I am trying to do something that I thought would be easy but I am having trouble. I just want to add a field if the syslog\_hostname equals a string or ip address. Here is what I have and when i us… --- ## [Kibana can't connect to elasticsearch using self signed certificates](https://discuss.elastic.co/t/kibana-cant-connect-to-elasticsearch-using-self-signed-certificates/294255)
**Author:** [@proxymoxy](https://discuss.elastic.co/u/proxymoxy)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 6:31am UTC](https://discuss.elastic.co/t/kibana-cant-connect-to-elasticsearch-using-self-signed-certificates/294255 "2022-02-09T06:31:40Z")
Hi, I have enabled TLS certificates for connection between Kibana and Elasticsearch as described here: Set up basic security for the Elastic Stack plus secured HTTPS traffic | Elasticsearch Guide \[7.16\] | Elastic I use … --- ## [Field for http response times](https://discuss.elastic.co/t/field-for-http-response-times/272742)
**Author:** [@Sergii\_Ovcharenko](https://discuss.elastic.co/u/Sergii_Ovcharenko)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 5:04pm UTC](https://discuss.elastic.co/t/field-for-http-response-times/272742 "2021-05-12T17:04:44Z")
Hey, Our app logs HTTP response times for the APIs we provide. What would be the best standard field to put this data in to follow ECS standard and best practices? There is no http.response.latency or similar field and e… --- ## [How to get only exact matches for GUID via Nest 6.5](https://discuss.elastic.co/t/how-to-get-only-exact-matches-for-guid-via-nest-6-5/169946)
**Author:** [@ArtVandelay101](https://discuss.elastic.co/u/ArtVandelay101)\ **Replies:** 2\ **Last updated:** [February 27, 2019, 2:00am UTC](https://discuss.elastic.co/t/how-to-get-only-exact-matches-for-guid-via-nest-6-5/169946 "2019-02-27T02:00:19Z")
Hello, I have following index, in which I labeled the 'Id' as 'Keyword': \[ElasticsearchType(IdProperty = nameof(Id))\] public class MyIndexModel { \[Keyword\] public Guid Id { get; set; } \[Text\] public st… --- ## [No living connections in the connection pool - Logstash Elasticsearch connectivity issue](https://discuss.elastic.co/t/no-living-connections-in-the-connection-pool-logstash-elasticsearch-connectivity-issue/175457)
**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\ **Replies:** 0\ **Last updated:** [April 4, 2019, 5:49pm UTC](https://discuss.elastic.co/t/no-living-connections-in-the-connection-pool-logstash-elasticsearch-connectivity-issue/175457 "2019-04-04T17:49:05Z")
Hello, We have 10+ logstash nodes (6.2.4) behind AWS Classic Loadbalancer. Everything was working fine and we started seeing these errors on the nodes. These errors first appeared on some of the nodes while other were w… --- ## [\[terms\] malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]](https://discuss.elastic.co/t/terms-malformed-query-expected-end-object-but-found-field-name/128765)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 2\ **Last updated:** [April 20, 2018, 3:50pm UTC](https://discuss.elastic.co/t/terms-malformed-query-expected-end-object-but-found-field-name/128765 "2018-04-20T15:50:44Z")
Here is my mapping { "mappings": { "movie": { "properties": { "film\_to\_franchise": { "type": "join", "relations": { "franchise": "film", "film":"cast" … --- ## [Transactional ACID features in ES](https://discuss.elastic.co/t/transactional-acid-features-in-es/5357)
**Author:** [@Steff](https://discuss.elastic.co/u/Steff)\ **Replies:** 4\ **Last updated:** [September 13, 2011, 10:23am UTC](https://discuss.elastic.co/t/transactional-acid-features-in-es/5357 "2011-09-13T10:23:39Z")
Extracted from http://groups.google.com/group/elasticsearch/browse\_thread/thread/cbd2cc71c407e435 and modified to be more concrete What kind of transactional ACID features does ES support? It would be nice to ha… --- ## [NEST and Bulk operations of parital Updates (specifically UpdateMany)](https://discuss.elastic.co/t/nest-and-bulk-operations-of-parital-updates-specifically-updatemany/140947)
**Author:** [@cscorley](https://discuss.elastic.co/u/cscorley)\ **Replies:** 5\ **Last updated:** [July 25, 2018, 5:41pm UTC](https://discuss.elastic.co/t/nest-and-bulk-operations-of-parital-updates-specifically-updatemany/140947 "2018-07-25T17:41:28Z")
The current implementation of UpdateMany\ operates on objects of type T instead of type TPartialDocument. This seems wrong to me, following the implementation of Update\, which o… --- ## [ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console](https://discuss.elastic.co/t/error-statuslogger-no-log4j2-configuration-file-found-using-default-configuration-logging-only-errors-to-the-console/98672)
**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\ **Replies:** 6\ **Last updated:** [September 6, 2017, 2:38am UTC](https://discuss.elastic.co/t/error-statuslogger-no-log4j2-configuration-file-found-using-default-configuration-logging-only-errors-to-the-console/98672 "2017-09-06T02:38:13Z")
Logstash version : 5.5.2 Elasticsearch version:5.5.2 When I use the command line(bin/logstash -f /etc/logstash/hello\_es.conf), it throws a such error: ERROR StatusLogger No log4j2 configuration file found. Using defau… --- ## [ES Docker Container :: How to restart the ES service?](https://discuss.elastic.co/t/es-docker-container-how-to-restart-the-es-service/194316)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 2:06am UTC](https://discuss.elastic.co/t/es-docker-container-how-to-restart-the-es-service/194316 "2019-08-09T02:06:52Z")
Hi all, I have what is a Elasticsearch 101 question for those of us using the ES Docker Container. I've recently pulled and spun up the latest ES Docker container. (ver 7.3.0) Following the instructions on docker hub… --- ## [How to Move existing Index data to warm nodes](https://discuss.elastic.co/t/how-to-move-existing-index-data-to-warm-nodes/246077)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 5\ **Last updated:** [August 26, 2020, 4:56am UTC](https://discuss.elastic.co/t/how-to-move-existing-index-data-to-warm-nodes/246077 "2020-08-26T04:56:41Z")
Currently I have a 6 node cluster (4 hot nodes and 2 warm nodes). hot nodes contain less disk space and warm nodes are almost free.. The indexes are currently active and data ingestion is going on. below are my doubt: … --- ## [Elastic APM for .NET core](https://discuss.elastic.co/t/elastic-apm-for-net-core/152359)
**Author:** [@micco](https://discuss.elastic.co/u/micco)\ **Replies:** 2\ **Last updated:** [November 1, 2018, 11:55am UTC](https://discuss.elastic.co/t/elastic-apm-for-net-core/152359 "2018-11-01T11:55:10Z")
I am interested in the roadmap for an Elastic APM agent for .NET core. Right now I am just looking for any information on it, and possibly ways our team could help contribute to the development of it. Or if there is an … --- ## [Adding a field to all documents](https://discuss.elastic.co/t/adding-a-field-to-all-documents/86698)
**Author:** [@henrilabarre](https://discuss.elastic.co/u/henrilabarre)\ **Replies:** 1\ **Last updated:** [May 25, 2017, 10:04am UTC](https://discuss.elastic.co/t/adding-a-field-to-all-documents/86698 "2017-05-25T10:04:13Z")
Hi I have an index of 10 millions documents but I notice that I need a new field for each doc. The question is How can I batch update the all documents where this field doesn't exist? The idea is to check if the field … --- ## [Node Validation Exception Bootstrap Checks Failed](https://discuss.elastic.co/t/node-validation-exception-bootstrap-checks-failed/195913)
**Author:** [@Bidhan\_Bastola](https://discuss.elastic.co/u/Bidhan_Bastola)\ **Replies:** 1\ **Last updated:** [August 20, 2019, 12:29pm UTC](https://discuss.elastic.co/t/node-validation-exception-bootstrap-checks-failed/195913 "2019-08-20T12:29:47Z")
\[2019-08-20T17:28:28,212\]\[INFO \]\[o.e.p.PluginsService \] \[k8s-master.citytech.global\] loaded module \[x-pack-security\] \[2019-08-20T17:28:28,212\]\[INFO \]\[o.e.p.PluginsService \] \[k8s-master.citytech.global\] loade… --- ## [Best way to export elastic index to json / local file format](https://discuss.elastic.co/t/best-way-to-export-elastic-index-to-json-local-file-format/206560)
**Author:** [@tom\_es](https://discuss.elastic.co/u/tom_es)\ **Replies:** 1\ **Last updated:** [November 5, 2019, 9:43am UTC](https://discuss.elastic.co/t/best-way-to-export-elastic-index-to-json-local-file-format/206560 "2019-11-05T09:43:42Z")
Hi, we would like to export elastic index into local file (or by rest), to some kind of format (for example, json). our index contains million of documents (~1 GB size). is there a recommended way for doing this using… --- ## [Count of Records vs Count using formula](https://discuss.elastic.co/t/count-of-records-vs-count-using-formula/286914)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 9:29am UTC](https://discuss.elastic.co/t/count-of-records-vs-count-using-formula/286914 "2021-11-01T09:29:47Z")
Hi, I'm using version 7.15 I have data that each record is a test results. I'm trying to build this table, that contain failed tests only: Test Name Fail Tests Count Success Rate (%) Test 1 … --- ## [Object mapping for \[host\] tried to parse field \[host\] as object, but found a concrete value](https://discuss.elastic.co/t/object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/184200)
**Author:** [@Luis\_Alejandro\_Galan](https://discuss.elastic.co/u/Luis_Alejandro_Galan)\ **Replies:** 5\ **Last updated:** [June 14, 2019, 8:25am UTC](https://discuss.elastic.co/t/object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/184200 "2019-06-14T08:25:42Z")
We have just upgraded Kibana, Logstash, Filebeat and Elasticseach from 6.3 to 7.1.1 and I have been trying to solve the issue in the following logs /var/log/elasticsearch/elasticsearch.log: \[2019-06-04T09:33:31,761\]\[DEB… --- ## [Date Range for Array fields](https://discuss.elastic.co/t/date-range-for-array-fields/28378)
**Author:** [@Kathy](https://discuss.elastic.co/u/Kathy)\ **Replies:** 5\ **Last updated:** [September 1, 2015, 12:57am UTC](https://discuss.elastic.co/t/date-range-for-array-fields/28378 "2015-09-01T00:57:29Z")
I am looking for how to filter date range from an array. Sample Data looks like below "airings":\[{ "startTime":"2015-08-29T10:00:00+0000", "endTime":"2015-08-30T21:30:00+0000" },{ "startTime":"2015-08-29… --- ## [In logstash Replace elasticsearch's @timestamp with log's time](https://discuss.elastic.co/t/in-logstash-replace-elasticsearchs-timestamp-with-logs-time/140848)
**Author:** [@Haitianisgood](https://discuss.elastic.co/u/Haitianisgood)\ **Replies:** 7\ **Last updated:** [July 24, 2018, 3:59am UTC](https://discuss.elastic.co/t/in-logstash-replace-elasticsearchs-timestamp-with-logs-time/140848 "2018-07-24T03:59:27Z")
Hi , I want to replace @timestash of elasticsearch with my project log file! flilebeat Logstash Elasticsearch all are 6.2 My log format: 2018-07-20 11:40:41.196 WARN 20671 --- \[DiscoveryClient-InstanceInfoReplicato… --- ## [How to create index automatically by logstash conf](https://discuss.elastic.co/t/how-to-create-index-automatically-by-logstash-conf/27468)
**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\ **Replies:** 5\ **Last updated:** [August 17, 2015, 5:18am UTC](https://discuss.elastic.co/t/how-to-create-index-automatically-by-logstash-conf/27468 "2015-08-17T05:18:04Z")
Hi all, when I call $curl -XPUT -u es\_admin:iiiiii 'http://localhost:9200/franky/json/1' -d '{ "ismb.miki.host":"192.168.10.53" }' the result is {"\_index":"franky","\_type":"json","\_id":"1","\_version":2,"created":… --- ## [Partial word match with singular and plurals: Elasticsearch](https://discuss.elastic.co/t/partial-word-match-with-singular-and-plurals-elasticsearch/17296)
**Author:** [@Kruti\_Shukla](https://discuss.elastic.co/u/Kruti_Shukla)\ **Replies:** 6\ **Last updated:** [May 5, 2014, 11:48am UTC](https://discuss.elastic.co/t/partial-word-match-with-singular-and-plurals-elasticsearch/17296 "2014-05-05T11:48:29Z")
\*My final goal is to have following search precedence:\* 1. Exact phrase match 2. Exact word match with incremental distance 3. Plurals 4. Substring \*Suppose I have following documents:\* i. men’s shaver ii. men’s… --- ## [List the active users using login and logged out events](https://discuss.elastic.co/t/list-the-active-users-using-login-and-logged-out-events/96724)
**Author:** [@Hari17785](https://discuss.elastic.co/u/Hari17785)\ **Replies:** 5\ **Last updated:** [August 11, 2017, 9:16am UTC](https://discuss.elastic.co/t/list-the-active-users-using-login-and-logged-out-events/96724 "2017-08-11T09:16:54Z")
I want to list the number of active users in our web application using elastic search. Right now we are creating new documents whenever on login and logout event. using this document i want to derive number of active u… --- ## [Logstash Configuration - filepath from remote machine](https://discuss.elastic.co/t/logstash-configuration-filepath-from-remote-machine/132461)
**Author:** [@Sunillinus](https://discuss.elastic.co/u/Sunillinus)\ **Replies:** 6\ **Last updated:** [May 21, 2018, 9:21am UTC](https://discuss.elastic.co/t/logstash-configuration-filepath-from-remote-machine/132461 "2018-05-21T09:21:32Z")
Hi, My logstash configuration file contents is shown below: input { file { path =\> \["D:/Sample/\*"\] start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } output { elasticsearch { hosts =\> \["localhos… --- ## [How do we generate reports in Kibana on daily or weekly or monthly basis?](https://discuss.elastic.co/t/how-do-we-generate-reports-in-kibana-on-daily-or-weekly-or-monthly-basis/24836)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 4\ **Last updated:** [February 7, 2017, 4:17am UTC](https://discuss.elastic.co/t/how-do-we-generate-reports-in-kibana-on-daily-or-weekly-or-monthly-basis/24836 "2017-02-07T04:17:57Z")
Hello Everyone , Hope you are doing good. Need help here, How do we generate reports in Kibana on daily or weekly or monthly basis automatically? Thanks, Rohan --- ## [Filebeat multiple index + ilm + index\_template](https://discuss.elastic.co/t/filebeat-multiple-index-ilm-index-template/296638)
**Author:** [@cedricHA](https://discuss.elastic.co/u/cedricHA)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 4:52pm UTC](https://discuss.elastic.co/t/filebeat-multiple-index-ilm-index-template/296638 "2022-02-08T16:52:40Z")
Hello, In filebeat I use several indexes depending on the module. I use the basic filebeat model based on the indexes to keep the field architecture. filebeat-7.16.2-\* setup.template.enabled: true setup.template.nam… --- ## [Kibana LDAP integration](https://discuss.elastic.co/t/kibana-ldap-integration/151511)
**Author:** [@rmadoori](https://discuss.elastic.co/u/rmadoori)\ **Replies:** 4\ **Last updated:** [October 9, 2018, 6:34am UTC](https://discuss.elastic.co/t/kibana-ldap-integration/151511 "2018-10-09T06:34:37Z")
Hi , I have installed trial license in elastic search. We are trying to secure kibana dashboard using ldap integration. Is this the documentation i should be following https://www.elastic.co/guide/en/x-pack/current/l… [Previous page](https://discuss.elastic.co/top.md?page=329&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=331&per_page=50&period=all)