# Top

**URL:** https://discuss.elastic.co/top.md?page=334&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 335

---

## [Shard stuck in INITIALIZING state](https://discuss.elastic.co/t/shard-stuck-in-initializing-state/86468)

<div class="topic-metadata">

**Author:** [@dipathak](https://discuss.elastic.co/u/dipathak)\
**Replies:** 1\
**Last updated:** [May 20, 2017, 10:45pm UTC](https://discuss.elastic.co/t/shard-stuck-in-initializing-state/86468 "2017-05-20T22:45:44Z")

</div>

We are using ES 5.2 on12 nodes cluster. Somehow the cluster went into "red" state and some primary shards went into UNASSIGNED state. After long time, 4-5 hours, one shard in still stuck in INITIALIZING state. Can someon…

---

## [Exception while storing data more than 32K](https://discuss.elastic.co/t/exception-while-storing-data-more-than-32k/116444)

<div class="topic-metadata">

**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\
**Replies:** 4\
**Last updated:** [January 22, 2018, 9:47am UTC](https://discuss.elastic.co/t/exception-while-storing-data-more-than-32k/116444 "2018-01-22T09:47:04Z")

</div>

Hi All, We are getting exception while storing data more than 32K in an index field. We just need to store the data without any indexing. Elasticsearch version: 6.0.0 Field Data Type: "type": "keyword" and "index": f…

---

## [GeoIP dosent work on elk stack( filebeat-\>logstash-\>ES-\>kibana) \[FIXED\]](https://discuss.elastic.co/t/geoip-dosent-work-on-elk-stack-filebeat-logstash-es-kibana-fixed/59815)

<div class="topic-metadata">

**Author:** [@dan\_geist](https://discuss.elastic.co/u/dan_geist)\
**Replies:** 1\
**Last updated:** [September 5, 2016, 2:36pm UTC](https://discuss.elastic.co/t/geoip-dosent-work-on-elk-stack-filebeat-logstash-es-kibana-fixed/59815 "2016-09-05T14:36:57Z")

</div>

Hi, I'm used this tutorial to setup my elk stack - How To Install Elasticsearch, Logstash, and Kibana (ELK Stack) on CentOS 7 | DigitalOcean. I cant seem to get geoip to work,. when I creater a tile map visualiztion I …

---

## [Winlogbeat and drop\_event filter](https://discuss.elastic.co/t/winlogbeat-and-drop-event-filter/81990)

<div class="topic-metadata">

**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\
**Replies:** 4\
**Last updated:** [April 11, 2017, 2:59pm UTC](https://discuss.elastic.co/t/winlogbeat-and-drop-event-filter/81990 "2017-04-11T14:59:02Z")

</div>

Hello all, I've configured winlogbeat to collect events from one of our domain controllers, there is a particular service account that generates thousands of successful authentication events each day and we're not intere…

---

## [Filter Search by Scripted field elastic](https://discuss.elastic.co/t/filter-search-by-scripted-field-elastic/218139)

<div class="topic-metadata">

**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\
**Replies:** 8\
**Last updated:** [February 11, 2020, 9:47am UTC](https://discuss.elastic.co/t/filter-search-by-scripted-field-elastic/218139 "2020-02-11T09:47:41Z")

</div>

i have create a scripted field query search and filter it. but the hits i founds is zero. and show the error like : #! Deprecation: Deprecated field \[inline\] used, expected \[source\] instead { "took": 1542, "timed\_out…

---

## [Master not discovered or elected yet, an election requires 2 nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/262205)

<div class="topic-metadata">

**Author:** [@sadff](https://discuss.elastic.co/u/sadff)\
**Replies:** 8\
**Last updated:** [January 27, 2021, 6:59am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/262205 "2021-01-27T06:59:25Z")

</div>

\*\*config file \*\* version: '2.2' services: es03: image: docker.elastic.co/elasticsearch/elasticsearch:7.10.2 container\_name: es03 environment: - node.name=es03 - network.publish\_host=192.168.61.…

---

## [SOLVED: Logstash can not connect to elasticsearch url](https://discuss.elastic.co/t/solved-logstash-can-not-connect-to-elasticsearch-url/65154)

<div class="topic-metadata">

**Author:** [@w0lverine](https://discuss.elastic.co/u/w0lverine)\
**Replies:** 1\
**Last updated:** [November 7, 2016, 1:11am UTC](https://discuss.elastic.co/t/solved-logstash-can-not-connect-to-elasticsearch-url/65154 "2016-11-07T01:11:48Z")

</div>

Every time ./logstash -f sample.conf is run I get this error: The stdin plugin is now waiting for input: \[2016-11-06T19:35:35,739\]\[INFO \]\[logstash.outputs.elasticsearch\] Elasticsearch pool URLs updated {:changes=\>{:re…

---

## [Bulk - insert if not exists, update otherwise?](https://discuss.elastic.co/t/bulk-insert-if-not-exists-update-otherwise/19198)

<div class="topic-metadata">

**Author:** [@Christopher\_Ambler\_2](https://discuss.elastic.co/u/Christopher_Ambler_2)\
**Replies:** 6\
**Last updated:** [August 11, 2014, 8:50pm UTC](https://discuss.elastic.co/t/bulk-insert-if-not-exists-update-otherwise/19198 "2014-08-11T20:50:48Z")

</div>

I have a situation where I have code that does 3000 bulk inserts of data. This works just fine. What I now need to do is 3000 bulk inserts OR updates. Specifically, if the key already exists, I need to UPDATE fie…

---

## [Elasticsearch update mapping from text field to multifield with keyword fails](https://discuss.elastic.co/t/elasticsearch-update-mapping-from-text-field-to-multifield-with-keyword-fails/89651)

<div class="topic-metadata">

**Author:** [@test\_user](https://discuss.elastic.co/u/test_user)\
**Replies:** 3\
**Last updated:** [July 10, 2017, 8:22pm UTC](https://discuss.elastic.co/t/elasticsearch-update-mapping-from-text-field-to-multifield-with-keyword-fails/89651 "2017-07-10T20:22:49Z")

</div>

Hi, I am using Kibana 5.4: ElsaticSearch 5.4: Logstash: 5.4 I want to upgrade on my mapping (index without document delete documents with deleteby\_query) one single filed single field to multifiled. Current Map…

---

## [ActionRequestValidationException](https://discuss.elastic.co/t/actionrequestvalidationexception/6335)

<div class="topic-metadata">

**Author:** [@Frank\_LaRosa](https://discuss.elastic.co/u/Frank_LaRosa)\
**Replies:** 3\
**Last updated:** [January 10, 2012, 5:51pm UTC](https://discuss.elastic.co/t/actionrequestvalidationexception/6335 "2012-01-10T17:51:19Z")

</div>

I am receiving an ActionRequestValidationException when issuing bulk requests through the Java API. The documentation contains no information about this error. Please let me know why I am receiving this exception …

---

## [Dec 4th, 2019: \[FR\] Explorer Elastic Common Schema (ECS) avec Elasticsearch et Kibana](https://discuss.elastic.co/t/dec-4th-2019-fr-explorer-elastic-common-schema-ecs-avec-elasticsearch-et-kibana/209766)

<div class="topic-metadata">

**Author:** [@webmat](https://discuss.elastic.co/u/webmat)\
**Replies:** 1\
**Last updated:** [December 4, 2019, 10:25am UTC](https://discuss.elastic.co/t/dec-4th-2019-fr-explorer-elastic-common-schema-ecs-avec-elasticsearch-et-kibana/209766 "2019-12-04T10:25:51Z")

</div>

Introduction =\> Read the english version Plusieurs ressources existent déjà, pour apprendre ECS. Bien sûr, il y la documentation officielle. Certains utilisateurs utilisent également l'export generated/csv/fields.csv. …

---

## [Search with white space](https://discuss.elastic.co/t/search-with-white-space/3979)

<div class="topic-metadata">

**Author:** [@Alexandre\_Heimburger](https://discuss.elastic.co/u/Alexandre_Heimburger)\
**Replies:** 6\
**Last updated:** [March 2, 2011, 12:41am UTC](https://discuss.elastic.co/t/search-with-white-space/3979 "2011-03-02T00:41:56Z")

</div>

I'm working on a super fast completion engine using ES. I'm using a wildcard term so everything is OK when I type one term. But if I start typing a sentence (like the title of the conversation I want to read), the…

---

## [Passing parameters to Painless script](https://discuss.elastic.co/t/passing-parameters-to-painless-script/74936)

<div class="topic-metadata">

**Author:** [@Leo\_Li](https://discuss.elastic.co/u/Leo_Li)\
**Replies:** 3\
**Last updated:** [February 16, 2017, 10:22pm UTC](https://discuss.elastic.co/t/passing-parameters-to-painless-script/74936 "2017-02-16T22:22:05Z")

</div>

Hi, Can anyone please explain to me how to use painless file script with parameters? I'm using Elasticsearch 5.x. I created a very simple script under config/scripts folder called: calculate\_distance.painless, the co…

---

## [SNMP collection setup](https://discuss.elastic.co/t/snmp-collection-setup/85036)

<div class="topic-metadata">

**Author:** [@script007](https://discuss.elastic.co/u/script007)\
**Replies:** 2\
**Last updated:** [May 10, 2017, 7:50am UTC](https://discuss.elastic.co/t/snmp-collection-setup/85036 "2017-05-10T07:50:58Z")

</div>

I am new to ELK, but trying to setup snmp monitoring using ELK. is there any doc or procedure and how to set this up? I can see many pointers to suggesting to use the snmp plugin. Any suggestion will be appreciated.

---

## [Must\_not boolean query in 7.7](https://discuss.elastic.co/t/must-not-boolean-query-in-7-7/233269)

<div class="topic-metadata">

**Author:** [@marspy](https://discuss.elastic.co/u/marspy)\
**Replies:** 6\
**Last updated:** [May 27, 2020, 5:13pm UTC](https://discuss.elastic.co/t/must-not-boolean-query-in-7-7/233269 "2020-05-27T17:13:56Z")

</div>

After upgrading elasticsearch to 7.7 there is problem with parsing must\_not query: {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"Failed to parse","line":1,"col":104}\],"type":"parsing\_exception","reason":…

---

## [Elasticsearch cluster UUID: \_na\_](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-na/218707)

<div class="topic-metadata">

**Author:** [@AndyGarcia](https://discuss.elastic.co/u/AndyGarcia)\
**Replies:** 2\
**Last updated:** [February 11, 2020, 4:59pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-na/218707 "2020-02-11T16:59:19Z")

</div>

I have multiple elasticsearch nodes, all on seperate machines. For some reason they can't join the cluster. My first node: { "name" : "myNode\_1", "cluster\_name" : "SRT411", "cluster\_uuid" : "7lao\_UsP…

---

## [Elastic Stack 6.4.3 and 5.6.13 security update](https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [November 6, 2018, 6:35pm UTC](https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594 "2018-11-06T18:35:11Z")

</div>

Elasticsearch information disclosure (ESA-2018-16) Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or Fil…

---

## [Difference about the "nested" type and "object" type?](https://discuss.elastic.co/t/difference-about-the-nested-type-and-object-type/15374)

<div class="topic-metadata">

**Author:** [@Ivan\_Ji](https://discuss.elastic.co/u/Ivan_Ji)\
**Replies:** 2\
**Last updated:** [January 24, 2014, 7:00am UTC](https://discuss.elastic.co/t/difference-about-the-nested-type-and-object-type/15374 "2014-01-24T07:00:59Z")

</div>

Hi, all I am wondering what the difference between the two types in the mappings. I know the nested object can be query using nested query. but can the object type field be query using other queries, such as term…

---

## [Filebeat didn't drop some of the fields like agent.\*, ecs.\* etc](https://discuss.elastic.co/t/filebeat-didnt-drop-some-of-the-fields-like-agent-ecs-etc/243911)

<div class="topic-metadata">

**Author:** [@mohanr](https://discuss.elastic.co/u/mohanr)\
**Replies:** 2\
**Last updated:** [August 11, 2020, 11:52am UTC](https://discuss.elastic.co/t/filebeat-didnt-drop-some-of-the-fields-like-agent-ecs-etc/243911 "2020-08-11T11:52:53Z")

</div>

Hi, I am using filebeat with a docker processor. Filebeat generate some fields like agent, ecs etc. I am trying to remove these fields using drop\_fields processor. filebeat.inputs: - type: docker containers.ids: …

---

## [Elasticsearch is throwing bootstrap error and it's unable to load system call filters when i'm trying to run on linux](https://discuss.elastic.co/t/elasticsearch-is-throwing-bootstrap-error-and-its-unable-to-load-system-call-filters-when-im-trying-to-run-on-linux/88517)

<div class="topic-metadata">

**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\
**Replies:** 6\
**Last updated:** [June 7, 2017, 1:03pm UTC](https://discuss.elastic.co/t/elasticsearch-is-throwing-bootstrap-error-and-its-unable-to-load-system-call-filters-when-im-trying-to-run-on-linux/88517 "2017-06-07T13:03:02Z")

</div>

HI Guyz, I'm trying to start elasticsearch with system IP address on remote linux machine by uploading tar file and extract it there. where i set network.host: \<my remote system IP address\> http.port: 9200 and runn…

---

## [Elastic Agent Android](https://discuss.elastic.co/t/elastic-agent-android/357302)

<div class="topic-metadata">

**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\
**Replies:** 1\
**Last updated:** [April 16, 2024, 8:25am UTC](https://discuss.elastic.co/t/elastic-agent-android/357302 "2024-04-16T08:25:32Z")

</div>

Hey there, My name is Martin and I am a security engineer that had a bit too much free time....so I made a thing: It's called it Elastic Agent Android and it's a way to finally add your Android mobile devices into Flee…

---

## [Painless script loop maximum number of statements limit](https://discuss.elastic.co/t/painless-script-loop-maximum-number-of-statements-limit/70895)

<div class="topic-metadata">

**Author:** [@psu](https://discuss.elastic.co/u/psu)\
**Replies:** 4\
**Last updated:** [January 8, 2017, 10:40pm UTC](https://discuss.elastic.co/t/painless-script-loop-maximum-number-of-statements-limit/70895 "2017-01-08T22:40:57Z")

</div>

Hi there I'm using painless script in update\_by\_query to loop through nested array field like this if( !ctx.\_source.containsKey("ARRAY\_FIELD") ){ctx.\_source.ARRAY\_FIELD=\[\];} for( int i = 0; i \< ctx.\_source.ARRAY\_FIE…

---

## [Querying of JSON fields](https://discuss.elastic.co/t/querying-of-json-fields/83688)

<div class="topic-metadata">

**Author:** [@rahul\_surya](https://discuss.elastic.co/u/rahul_surya)\
**Replies:** 7\
**Last updated:** [April 28, 2017, 2:02pm UTC](https://discuss.elastic.co/t/querying-of-json-fields/83688 "2017-04-28T14:02:33Z")

</div>

{"subscriber1": {"Downlink Bytes": "1.47kb", "id": "25.25.25.2", "Uplink Pkts": "8", "Downlink Pkts": "8", "DNS": {"start time": "12:27:27", "Downlink Bytes": "249", "Uplink Pkts": "1", "Downlink Pkts": "1", "Uplink Byte…

---

## [Error logstash.inputs.jdbc Unable to connect to database](https://discuss.elastic.co/t/error-logstash-inputs-jdbc-unable-to-connect-to-database/177091)

<div class="topic-metadata">

**Author:** [@medaly\_ahmed](https://discuss.elastic.co/u/medaly_ahmed)\
**Replies:** 4\
**Last updated:** [April 17, 2019, 10:03am UTC](https://discuss.elastic.co/t/error-logstash-inputs-jdbc-unable-to-connect-to-database/177091 "2019-04-17T10:03:16Z")

</div>

I am a beginner in logstash. I want to load my database "mydb" in the inddex "test". but I find an error with logstash: "error logstash.inputs.jdbc Unable to connect to database" this is my config file: \`input { …

---

## [ES failed to recover from translog corruption](https://discuss.elastic.co/t/es-failed-to-recover-from-translog-corruption/157230)

<div class="topic-metadata">

**Author:** [@nebulae](https://discuss.elastic.co/u/nebulae)\
**Replies:** 5\
**Last updated:** [November 19, 2018, 6:19am UTC](https://discuss.elastic.co/t/es-failed-to-recover-from-translog-corruption/157230 "2018-11-19T06:19:50Z")

</div>

Hi, My ES single node server was forcibly shutdown, and it hasn't recovered from that. Now, ES is stuck in this error mode. How do I recover from this, and start ES? Thanks. I am running Version: 6.3.1, Build: default/…

---

## [Integration of MSSQL](https://discuss.elastic.co/t/integration-of-mssql/40341)

<div class="topic-metadata">

**Author:** [@praveen\_siem](https://discuss.elastic.co/u/praveen_siem)\
**Replies:** 4\
**Last updated:** [June 22, 2016, 6:10am UTC](https://discuss.elastic.co/t/integration-of-mssql/40341 "2016-06-22T06:10:03Z")

</div>

Dear Team, Has anyone at any of the customer environment has integrated Microsoft SQL Database to monitor the logs from the database. If yes, kindly share the necessary steps to perform the same. Best Regards- Pra…

---

## [Elasticsearch is unable to recover](https://discuss.elastic.co/t/elasticsearch-is-unable-to-recover/34839)

<div class="topic-metadata">

**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\
**Replies:** 3\
**Last updated:** [November 19, 2015, 12:44am UTC](https://discuss.elastic.co/t/elasticsearch-is-unable-to-recover/34839 "2015-11-19T00:44:45Z")

</div>

I once had a problem with elastic search exceeding file open limit. After that I have fixed the ulimit. But now the engine is unable to start. It keeps continuously throwing this, never ends: \[2015-11-17 19:21:08,468\]\[…

---

## [SSL for Elasticsearch and Kibana 4 whith Apache as a reverse proxy](https://discuss.elastic.co/t/ssl-for-elasticsearch-and-kibana-4-whith-apache-as-a-reverse-proxy/26685)

<div class="topic-metadata">

**Author:** [@Drewshg312](https://discuss.elastic.co/u/Drewshg312)\
**Replies:** 3\
**Last updated:** [August 2, 2015, 12:37am UTC](https://discuss.elastic.co/t/ssl-for-elasticsearch-and-kibana-4-whith-apache-as-a-reverse-proxy/26685 "2015-08-02T00:37:29Z")

</div>

Hi guys! Could you please point me to the good tutorial how to set up the ELK with apache as a reverse proxy. Doing it on OS X (all installed from Homebrew)? I've found a few but they show different approaches... I'm …

---

## [Anyone have success using Machine Learning to detect Fast or Impossible Travel?](https://discuss.elastic.co/t/anyone-have-success-using-machine-learning-to-detect-fast-or-impossible-travel/288822)

<div class="topic-metadata">

**Author:** [@obsidian](https://discuss.elastic.co/u/obsidian)\
**Replies:** 6\
**Last updated:** [November 16, 2021, 10:43am UTC](https://discuss.elastic.co/t/anyone-have-success-using-machine-learning-to-detect-fast-or-impossible-travel/288822 "2021-11-16T10:43:48Z")

</div>

So far I've seen a built-in job called rare source ip for user, however, it is using auditbeat. Is there a way to detect rare source ips for a user using a different datasource?

---

## [Can we use basic Elasticsearch for commercial use](https://discuss.elastic.co/t/can-we-use-basic-elasticsearch-for-commercial-use/319710)

<div class="topic-metadata">

**Author:** [@lhy507613824](https://discuss.elastic.co/u/lhy507613824)\
**Replies:** 7\
**Last updated:** [November 28, 2022, 9:10am UTC](https://discuss.elastic.co/t/can-we-use-basic-elasticsearch-for-commercial-use/319710 "2022-11-28T09:10:40Z")

</div>

Can we use basic Elasticsearch8.5 for commercial use

---

## [Access denied in accessing the elastic search index files](https://discuss.elastic.co/t/access-denied-in-accessing-the-elastic-search-index-files/39761)

<div class="topic-metadata">

**Author:** [@Landong.Zuo](https://discuss.elastic.co/u/Landong.Zuo)\
**Replies:** 6\
**Last updated:** [August 24, 2016, 4:00pm UTC](https://discuss.elastic.co/t/access-denied-in-accessing-the-elastic-search-index-files/39761 "2016-08-24T16:00:51Z")

</div>

Hi, I am in the process to set up a data analytical project using ELK pipeline over a huge amount of apache log files. One of the required data features is to continuously update the session IDs for every single web…

---

## [RemoteTransportException](https://discuss.elastic.co/t/remotetransportexception/10239)

<div class="topic-metadata">

**Author:** [@Kenneth\_Loafman\_2](https://discuss.elastic.co/u/Kenneth_Loafman_2)\
**Replies:** 5\
**Last updated:** [January 8, 2013, 3:38am UTC](https://discuss.elastic.co/t/remotetransportexception/10239 "2013-01-08T03:38:37Z")

</div>

Hello All, We're on ES 19.8, Ubuntu Server (Lucid). Any idea what causes the following problem? I can successfully scan about 1/3rd of the index, but it dies at this point every time. Is there a way to 1.…

---

## [Filebeat log to multiple outputs like file and syslog](https://discuss.elastic.co/t/filebeat-log-to-multiple-outputs-like-file-and-syslog/335743)

<div class="topic-metadata">

**Author:** [@michaelbu](https://discuss.elastic.co/u/michaelbu)\
**Replies:** 7\
**Last updated:** [June 19, 2023, 2:53pm UTC](https://discuss.elastic.co/t/filebeat-log-to-multiple-outputs-like-file-and-syslog/335743 "2023-06-19T14:53:04Z")

</div>

Hi, I'm using filebeat on Linux in this version: $ rpm -qa | grep filebeat filebeat-8.7.0-1.x86\_64 I would like to log filebeat to logfiles and also to syslog. This is the configuration snippet: logging: to\_files: …

---

## [Aggregation on metric (sum) aggregation](https://discuss.elastic.co/t/aggregation-on-metric-sum-aggregation/2653)

<div class="topic-metadata">

**Author:** [@refaelos](https://discuss.elastic.co/u/refaelos)\
**Replies:** 7\
**Last updated:** [June 15, 2015, 12:00pm UTC](https://discuss.elastic.co/t/aggregation-on-metric-sum-aggregation/2653 "2015-06-15T12:00:30Z")

</div>

I'm trying to filter out results of an aggregation. This is my query: GET \_search { "size": 0, "query": { "match": { "name": "tick\_event" } }, "aggs": { "all\_users": { "terms":…

---

## [Conditional Input based on Regex](https://discuss.elastic.co/t/conditional-input-based-on-regex/110834)

<div class="topic-metadata">

**Author:** [@scch](https://discuss.elastic.co/u/scch)\
**Replies:** 4\
**Last updated:** [December 11, 2017, 5:12am UTC](https://discuss.elastic.co/t/conditional-input-based-on-regex/110834 "2017-12-11T05:12:10Z")

</div>

Hi, can we do conditional input to a "field" based on regex. I am able to achieve same in painless scripting but want to achieve it in Logstash. below is example from painless. if (doc\['Mach.keyword'\].value =~ /^T\\d{4}…

---

## [Getting key value from nested "event" element](https://discuss.elastic.co/t/getting-key-value-from-nested-event-element/107852)

<div class="topic-metadata">

**Author:** [@danielmcquillen](https://discuss.elastic.co/u/danielmcquillen)\
**Replies:** 4\
**Last updated:** [November 22, 2017, 12:42am UTC](https://discuss.elastic.co/t/getting-key-value-from-nested-event-element/107852 "2017-11-22T00:42:29Z")

</div>

This one has me stumped, and I wonder if there's a subtlety I'm missing. I have an (unfortunately structured) log event that records an 'assessment' attempt in our learning management system. It looks something like thi…

---

## [Kibana query for special character in KQL](https://discuss.elastic.co/t/kibana-query-for-special-character-in-kql/224253)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 3\
**Last updated:** [March 20, 2020, 3:10am UTC](https://discuss.elastic.co/t/kibana-query-for-special-character-in-kql/224253 "2020-03-20T03:10:49Z")

</div>

Dear all I have a question using the KQL to query for special char in kibana it is like this, i have 2 data that have 2 field like this "test test" and "TEST+TEST" when i type to query for "test test" it match both th…

---

## [How do I get unique values from a field with a given search in kibana](https://discuss.elastic.co/t/how-do-i-get-unique-values-from-a-field-with-a-given-search-in-kibana/272621)

<div class="topic-metadata">

**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\
**Replies:** 3\
**Last updated:** [May 12, 2021, 10:27pm UTC](https://discuss.elastic.co/t/how-do-i-get-unique-values-from-a-field-with-a-given-search-in-kibana/272621 "2021-05-12T22:27:14Z")

</div>

If I have a given search: eventType:DeviceRequestResponseEvent AND (exists:payload.cattle.name) AND DoorId:1bf35dbc-ce2b-4a2c-b126-7cd531aa84ad AND payload.deviceRequestResponseEvent.payloadType:COMMAND\_REQUEST\_TYPE …

---

## [\[ERROR\]\[logstash.plugins.registry\] Problems loading a plugin with {:type=\>“filter”, :name=\>“CSV”, :path=\>“logstash/filters/CSV”, :error \_message=\>“NameError”](https://discuss.elastic.co/t/error-logstash-plugins-registry-problems-loading-a-plugin-with-type-filter-name-csv-path-logstash-filters-csv-error--message-nameerror/97974)

<div class="topic-metadata">

**Author:** [@vikaskataria](https://discuss.elastic.co/u/vikaskataria)\
**Replies:** 4\
**Last updated:** [August 26, 2017, 9:15am UTC](https://discuss.elastic.co/t/error-logstash-plugins-registry-problems-loading-a-plugin-with-type-filter-name-csv-path-logstash-filters-csv-error--message-nameerror/97974 "2017-08-26T09:15:45Z")

</div>

Hi, I am new to ELK stack. I am using Logstash 5.5.2 and ElasticSearch 5.5.2 and Kibana 5.5.2. I am trying to push data from a CSV file into Elastic search using Logstash. I am getting Syntax Error: Unexpected tLT from …

---

## [How to make a full text-query on date attribute in Elastic Search](https://discuss.elastic.co/t/how-to-make-a-full-text-query-on-date-attribute-in-elastic-search/133278)

<div class="topic-metadata">

**Author:** [@simonepontz](https://discuss.elastic.co/u/simonepontz)\
**Replies:** 1\
**Last updated:** [June 1, 2018, 9:29am UTC](https://discuss.elastic.co/t/how-to-make-a-full-text-query-on-date-attribute-in-elastic-search/133278 "2018-06-01T09:29:09Z")

</div>

I have a document with a date type attribute (like the following) { "releaseDate": { "time": "1990-02-01T00:00:00+0000", } } I'm confident in doing some range query (date-math etc) so that if I'm looking for all…

---

## [java.security.AccessControlException for plugin](https://discuss.elastic.co/t/java-security-accesscontrolexception-for-plugin/96235)

<div class="topic-metadata">

**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\
**Replies:** 7\
**Last updated:** [August 10, 2017, 1:13pm UTC](https://discuss.elastic.co/t/java-security-accesscontrolexception-for-plugin/96235 "2017-08-10T13:13:32Z")

</div>

I build a plugin of my own and the plugin layout is below: ${plugin\_root}/dict(this is a folder) ${plugin\_root}/plugin-descriptor.properties ${plugin\_root}/plugin-security.policy ${plugin\_root}/a.jar ${plugin\_root}/…

---

## [Fix mapping conflict](https://discuss.elastic.co/t/fix-mapping-conflict/114309)

<div class="topic-metadata">

**Author:** [@Dmitry\_Reshetnik](https://discuss.elastic.co/u/Dmitry_Reshetnik)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 7:43pm UTC](https://discuss.elastic.co/t/fix-mapping-conflict/114309 "2018-01-05T19:43:46Z")

</div>

I have a Kibana not owned by me. As of now it contains 1000+ fields (generated from JSON inputs). There are few fields which were (maybe manually configured as String), and few visualizations which used these fields. …

---

## [Decommission of multiple nodes](https://discuss.elastic.co/t/decommission-of-multiple-nodes/21036)

<div class="topic-metadata">

**Author:** [@Noam\_Gazit](https://discuss.elastic.co/u/Noam_Gazit)\
**Replies:** 4\
**Last updated:** [December 17, 2014, 11:10pm UTC](https://discuss.elastic.co/t/decommission-of-multiple-nodes/21036 "2014-12-17T23:10:49Z")

</div>

Hi, I wanted to reduce my cluster size by 3 data nodes (from 27 to 24). I issued 3 decommission API calls one after the other and saw their shards start moving. I waited for all the shards to relocate, but when I …

---

## [ELK with Xpack](https://discuss.elastic.co/t/elk-with-xpack/218343)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 7\
**Last updated:** [February 7, 2020, 5:01pm UTC](https://discuss.elastic.co/t/elk-with-xpack/218343 "2020-02-07T17:01:08Z")

</div>

Hi Team, I have configued elasticsearch statefulset object using official elasticsearch helm chart https://github.com/elastic/helm-charts. I enabeld xpack security feature and created a CA certificate on one of the ela…

---

## [Elasticsearch and Magento 2.4.1 "No mapping found for position category"](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891)

<div class="topic-metadata">

**Author:** [@dani1](https://discuss.elastic.co/u/dani1)\
**Replies:** 5\
**Last updated:** [December 29, 2020, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891 "2020-12-29T11:59:01Z")

</div>

Hello there, I'm facing this issue with Elasticsearch 7.6.2 with Magento 2.4. Anyone have an idea? \[2020-10-31 07:34:29\] main.CRITICAL: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"No mapping found…

---

## [How to converting Lucene Query Parser Syntax to ElasticSearch Query DSL](https://discuss.elastic.co/t/how-to-converting-lucene-query-parser-syntax-to-elasticsearch-query-dsl/6726)

<div class="topic-metadata">

**Author:** [@yin\_weifeng](https://discuss.elastic.co/u/yin_weifeng)\
**Replies:** 4\
**Last updated:** [February 24, 2012, 1:33pm UTC](https://discuss.elastic.co/t/how-to-converting-lucene-query-parser-syntax-to-elasticsearch-query-dsl/6726 "2012-02-24T13:33:36Z")

</div>

I want to use the Lucene Query Parser Syntax to search in the ElasticSearch , how can I do

---

## [Elasticsearch 7.17.7 does not start - "java.security.AccessControlException: access denied"](https://discuss.elastic.co/t/elasticsearch-7-17-7-does-not-start-java-security-accesscontrolexception-access-denied/318013)

<div class="topic-metadata">

**Author:** [@jacotec](https://discuss.elastic.co/u/jacotec)\
**Replies:** 5\
**Last updated:** [November 8, 2022, 2:51pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-7-does-not-start-java-security-accesscontrolexception-access-denied/318013 "2022-11-08T14:51:45Z")

</div>

Hi, I'm despairing with Elasticsearch on one of my Ubuntu 20.04 LTS VM's. I've just installed ES 7.17.7 from the official repo, did no config changes or something else, just did apt install elasticsearch systemctl daem…

---

## [GPG Key](https://discuss.elastic.co/t/gpg-key/261891)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 3\
**Last updated:** [January 31, 2021, 6:52pm UTC](https://discuss.elastic.co/t/gpg-key/261891 "2021-01-31T18:52:29Z")

</div>

hi guys, i wanna ask something about installation elastic and beats, because they need GPG-key and my server can't access public internet. how can i add a GPG Key manually? thanks

---

## [Java Node Client - path.home is not configured](https://discuss.elastic.co/t/java-node-client-path-home-is-not-configured/33653)

<div class="topic-metadata">

**Author:** [@Shawn\_Johnson](https://discuss.elastic.co/u/Shawn_Johnson)\
**Replies:** 3\
**Last updated:** [December 7, 2016, 1:22am UTC](https://discuss.elastic.co/t/java-node-client-path-home-is-not-configured/33653 "2016-12-07T01:22:07Z")

</div>

I am trying to use the Java Node Client and connect to a separate local elasticsearch node, running in a separate JVM. I get the following error when trying to follow the examples provided in the docs (https://www.elast…

---

## [Term query return no document](https://discuss.elastic.co/t/term-query-return-no-document/126170)

<div class="topic-metadata">

**Author:** [@alimardani](https://discuss.elastic.co/u/alimardani)\
**Replies:** 6\
**Last updated:** [April 3, 2018, 5:44pm UTC](https://discuss.elastic.co/t/term-query-return-no-document/126170 "2018-04-03T17:44:34Z")

</div>

Hi, I am trying to load a document by having the value of specific column. It loads the document once I use match query but doesn't load the document when I use term query. GET /keydate/\_search { "query": { "bool": {…

[Previous page](https://discuss.elastic.co/top.md?page=333&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=335&per_page=50&period=all)
