# Top **URL:** https://discuss.elastic.co/top.md?page=336&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 337 --- ## [Return \_source fields within aggregation](https://discuss.elastic.co/t/return-source-fields-within-aggregation/106697)
**Author:** [@Kornelia\_Watson](https://discuss.elastic.co/u/Kornelia_Watson)\ **Replies:** 3\ **Last updated:** [November 9, 2017, 10:47pm UTC](https://discuss.elastic.co/t/return-source-fields-within-aggregation/106697 "2017-11-09T22:47:44Z")
Hi all, In my ES indices I have an order type, which as you can guess stores various data about orders. What I need to do is create a query such that: it splits data using scripted field, and then sums up order values … --- ## [Create index with index-settings](https://discuss.elastic.co/t/create-index-with-index-settings/305161)
**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 2:58pm UTC](https://discuss.elastic.co/t/create-index-with-index-settings/305161 "2022-05-19T14:58:31Z")
We are trying to migrate from Elasticsearch 6.7.1 to Elasticsearch 8.2.0. In Elasticsearch 6.7.1 it was possible to provide index-settings within an CreateIndexRequest as follows { "index": { "mapping": { … --- ## [Case insensitive search on keyword](https://discuss.elastic.co/t/case-insensitive-search-on-keyword/269773)
**Author:** [@Tam2](https://discuss.elastic.co/u/Tam2)\ **Replies:** 3\ **Last updated:** [April 10, 2021, 3:24pm UTC](https://discuss.elastic.co/t/case-insensitive-search-on-keyword/269773 "2021-04-10T15:24:46Z")
My index looks something like this: { "mappings": { "properties": { "id": { "type": "integer" }, "clientId": { "type": "integer"}, "status": { "type": "keyword" }, "r… --- ## [Curl: (7) Failed to connect to localhost port 9200: Connection refused - Docker](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused-docker/180754)
**Author:** [@senthilgsk](https://discuss.elastic.co/u/senthilgsk)\ **Replies:** 3\ **Last updated:** [May 20, 2019, 10:01am UTC](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused-docker/180754 "2019-05-20T10:01:10Z")
I am using Docker. The elasticsearch and kibana containers are running. When I tried curl http://192.168.99.100, I am getting error curl: (7) Failed to connect to localhost port 9200: Connection refused I tried browsi… --- ## [Remove fields with value: nil](https://discuss.elastic.co/t/remove-fields-with-value-nil/42243)
**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\ **Replies:** 8\ **Last updated:** [March 7, 2017, 10:51am UTC](https://discuss.elastic.co/t/remove-fields-with-value-nil/42243 "2017-03-07T10:51:09Z")
Hi, I'm using the csv filter to split my lines up. Working quite well apart from one problem... Some fields are being populated with a value of nil and I'd like to remove those fields:- "SkillGroupSix" =\> nil I have … --- ## [Use Logstash and Syslog-ng server](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901)
**Author:** [@Miguel\_Bessa](https://discuss.elastic.co/u/Miguel_Bessa)\ **Replies:** 7\ **Last updated:** [November 17, 2016, 7:23am UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901 "2016-11-17T07:23:40Z")
Hi, I have in machine logstash and elasticsearch installed and I have in other server configured syslog-ng to collect logs. How I can use logstash to connect syslog-ng server to get logs and parse data locally to ela… --- ## [Treat "Dot" as a normal character in query\_string query](https://discuss.elastic.co/t/treat-dot-as-a-normal-character-in-query-string-query/18730)
**Author:** [@Curt\_Hu](https://discuss.elastic.co/u/Curt_Hu)\ **Replies:** 4\ **Last updated:** [July 18, 2014, 2:52pm UTC](https://discuss.elastic.co/t/treat-dot-as-a-normal-character-in-query-string-query/18730 "2014-07-18T14:52:24Z")
How can I treat the Dot '.' as the normal character in the query\_string, as I want to search "www.google.com" as the whole string in the query\_string, the current results for me are so strange.. --- ## [ES 7.3.0 cluster crashes with error "failed to flush export bulks" after restarting data POD](https://discuss.elastic.co/t/es-7-3-0-cluster-crashes-with-error-failed-to-flush-export-bulks-after-restarting-data-pod/222558)
**Author:** [@praven\_rai](https://discuss.elastic.co/u/praven_rai)\ **Replies:** 3\ **Last updated:** [March 7, 2020, 5:44pm UTC](https://discuss.elastic.co/t/es-7-3-0-cluster-crashes-with-error-failed-to-flush-export-bulks-after-restarting-data-pod/222558 "2020-03-07T17:44:58Z")
Hello Team, I am running into issues with my Elasticsearch cluster v7.3.0 deployed under AWS EKS. I have a 3 node cluster in which 3 PODs configured i.e. ES Master-1, ES Data-1, ES Ingest-1. Persistent Valume and Pers… --- ## [Beats input: the pipeline is blocked, temporary refusing new connection](https://discuss.elastic.co/t/beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection/38764)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 5\ **Last updated:** [July 11, 2016, 3:13pm UTC](https://discuss.elastic.co/t/beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection/38764 "2016-07-11T15:13:06Z")
I am using elasticsearch 1.7.1, logstash 1.5.4, and testing filebeat. It runs perfectly if I use filebeat to scan log files and use filebeat to output log data directly to elasticsearch as follows: logfiles -\> filebeat… --- ## [General Data Protection Regulation (GDPR)](https://discuss.elastic.co/t/general-data-protection-regulation-gdpr/93570)
**Author:** [@sihil](https://discuss.elastic.co/u/sihil)\ **Replies:** 5\ **Last updated:** [February 15, 2018, 5:33pm UTC](https://discuss.elastic.co/t/general-data-protection-regulation-gdpr/93570 "2018-02-15T17:33:59Z")
Hi there, Has anyone done much analysis on the readiness of ElasticSearch for the EU GDPR legislation coming into force next year? As I understand it, GDPR mandates encryption at rest and encryption in transit. The … --- ## [\[ES 7.6\] regular expression has redundant nested repeat operator](https://discuss.elastic.co/t/es-7-6-regular-expression-has-redundant-nested-repeat-operator/220835)
**Author:** [@yurgers](https://discuss.elastic.co/u/yurgers)\ **Replies:** 8\ **Last updated:** [February 4, 2021, 2:54pm UTC](https://discuss.elastic.co/t/es-7-6-regular-expression-has-redundant-nested-repeat-operator/220835 "2021-02-04T14:54:03Z")
good day! I'm new to ELK Noticed that after updating ES to 7.6 a large number of messages started appearing in /var/log/messages Feb 25 13:55:01 elasticsearch elasticsearch\[23298\]: regular expression has redundant ne… --- ## [\[error connecting to Elasticsearch at https:certificate signed by unknown authority](https://discuss.elastic.co/t/error-connecting-to-elasticsearch-at-https-certificate-signed-by-unknown-authority/266678)
**Author:** [@Ana\_11](https://discuss.elastic.co/u/Ana_11)\ **Replies:** 3\ **Last updated:** [March 9, 2021, 1:22pm UTC](https://discuss.elastic.co/t/error-connecting-to-elasticsearch-at-https-certificate-signed-by-unknown-authority/266678 "2021-03-09T13:22:05Z")
Hi I have enabled secure communication in my elasticsearch deployment. https is enabled and elasticsearch and kibana is working as expected. Now when im trying to ingest the winlogbeat logs im getting the following erro… --- ## [How to collect windows event logs using Logstash?](https://discuss.elastic.co/t/how-to-collect-windows-event-logs-using-logstash/89948)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 4\ **Last updated:** [June 19, 2017, 3:20pm UTC](https://discuss.elastic.co/t/how-to-collect-windows-event-logs-using-logstash/89948 "2017-06-19T15:20:34Z")
Hi, I am trying to collect Windows event logs through logstash, but it's giving me an error as, 10:19:40.614 \[LogStash::Runner\] ERROR logstash.agent - Cannot load an invalid configuration {:reason=\>"Couldn't find any … --- ## [How to set the id in elasticsearch](https://discuss.elastic.co/t/how-to-set-the-id-in-elasticsearch/53944)
**Author:** [@chagara](https://discuss.elastic.co/u/chagara)\ **Replies:** 7\ **Last updated:** [March 27, 2017, 12:32am UTC](https://discuss.elastic.co/t/how-to-set-the-id-in-elasticsearch/53944 "2017-03-27T00:32:37Z")
helo, How you set the id when sending files to elasticsearch? I'm using filebeat to send the logs, then to logstash then to elasticsearch. I'm using Kibana and the fields for \_id show up but, I'm not sure how to chang… --- ## [Got response code '401' contacting Elasticsearch at URL](https://discuss.elastic.co/t/got-response-code-401-contacting-elasticsearch-at-url/100548)
**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\ **Replies:** 2\ **Last updated:** [September 15, 2017, 4:35am UTC](https://discuss.elastic.co/t/got-response-code-401-contacting-elasticsearch-at-url/100548 "2017-09-15T04:35:43Z")
Hi, Probably something easy, but i'll try anyway. I had a working ELK-machine running 5.5.2, then i decided to upgrade to 5.6.0 and install X-pack at the same time. I did the following: upgraded ES, installed X-pack … --- ## [Logstash-kafka for multiple topics](https://discuss.elastic.co/t/logstash-kafka-for-multiple-topics/27422)
**Author:** [@gh\_amistry](https://discuss.elastic.co/u/gh_amistry)\ **Replies:** 5\ **Last updated:** [August 19, 2015, 5:25pm UTC](https://discuss.elastic.co/t/logstash-kafka-for-multiple-topics/27422 "2015-08-19T17:25:40Z")
Hi! There's been some interest in the past for logstash to support multple kafka topics as inputs. At the time, the only solution was to have one topic per input. Has there been additional progress on that? Is it possibl… --- ## [Kibana APM Metrics: "CPU usage" and "Memory usage" graphs do not show data when search criteria is active](https://discuss.elastic.co/t/kibana-apm-metrics-cpu-usage-and-memory-usage-graphs-do-not-show-data-when-search-criteria-is-active/180197)
**Author:** [@sammaxwell](https://discuss.elastic.co/u/sammaxwell)\ **Replies:** 8\ **Last updated:** [May 9, 2019, 8:17pm UTC](https://discuss.elastic.co/t/kibana-apm-metrics-cpu-usage-and-memory-usage-graphs-do-not-show-data-when-search-criteria-is-active/180197 "2019-05-09T20:17:10Z")
Kibana version: 6.7.1 Elasticsearch version: 6.7.1 APM Server version: 6.6.1 Browser version: Chrome 74.0.3729.131 (Official Build) (64-bit), user agent: Mozilla/5.0 (iPhone; CPU iPhone OS 11\_0 like Mac OS X) AppleWeb… --- ## [Creating Alert for Disk Space Usage](https://discuss.elastic.co/t/creating-alert-for-disk-space-usage/151474)
**Author:** [@johncam](https://discuss.elastic.co/u/johncam)\ **Replies:** 6\ **Last updated:** [October 10, 2018, 3:51pm UTC](https://discuss.elastic.co/t/creating-alert-for-disk-space-usage/151474 "2018-10-10T15:51:10Z")
I'm trying to create an alert that is triggered when usage for any mount point on any server is in excess of 80%. When creating a threshold alert under Watcher, I'm looking at getting the average of system.filesystem.us… --- ## [Connecting to remote es using local Kibana](https://discuss.elastic.co/t/connecting-to-remote-es-using-local-kibana/152795)
**Author:** [@murali\_krishnam\_raju](https://discuss.elastic.co/u/murali_krishnam_raju)\ **Replies:** 5\ **Last updated:** [October 17, 2018, 1:29pm UTC](https://discuss.elastic.co/t/connecting-to-remote-es-using-local-kibana/152795 "2018-10-17T13:29:55Z")
I have installed kibana 6.3 on my local machine and I have elastic search running in aws remote server I have configured end point in kibana.yml file( elastic search url) but when i run the kibana it was throwing authen… --- ## [Store certificated in keystore](https://discuss.elastic.co/t/store-certificated-in-keystore/299889)
**Author:** [@ginolegigot](https://discuss.elastic.co/u/ginolegigot)\ **Replies:** 2\ **Last updated:** [March 17, 2022, 9:51am UTC](https://discuss.elastic.co/t/store-certificated-in-keystore/299889 "2022-03-17T09:51:26Z")
Hello, If i properly understood this doc and especially this paragraph: The elasticsearch-certutil outputs a PKCS#12 keystore which includes the CA certificate as a trusted certificate entry. This allows for the keyst… --- ## [Logstash not creating (some?) indexes in ES, no error in logs](https://discuss.elastic.co/t/logstash-not-creating-some-indexes-in-es-no-error-in-logs/99450)
**Author:** [@unreal4u](https://discuss.elastic.co/u/unreal4u)\ **Replies:** 3\ **Last updated:** [September 7, 2017, 8:25am UTC](https://discuss.elastic.co/t/logstash-not-creating-some-indexes-in-es-no-error-in-logs/99450 "2017-09-07T08:25:15Z")
Hi all :slight\_smile: I have the following configuration: input { beats { port =\> "5044" host =\> "0.0.0.0" } rabbitmq { host =\> "localhost" port =\> 5672 user =\> "yyyy… --- ## [Listen for MSSQL (1433) traffic?](https://discuss.elastic.co/t/listen-for-mssql-1433-traffic/40409)
**Author:** [@scrom](https://discuss.elastic.co/u/scrom)\ **Replies:** 1\ **Last updated:** [January 28, 2016, 9:42pm UTC](https://discuss.elastic.co/t/listen-for-mssql-1433-traffic/40409 "2016-01-28T21:42:18Z")
I found some older posts saying you planned on supporting MSSQL, but the last update I could find was around October. Is there an ETA yet? Unfortunately I can't get my company to move off MSSQL, which is funny because a… --- ## [How to use if condition in logstash](https://discuss.elastic.co/t/how-to-use-if-condition-in-logstash/209794)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 1\ **Last updated:** [November 28, 2019, 1:51pm UTC](https://discuss.elastic.co/t/how-to-use-if-condition-in-logstash/209794 "2019-11-28T13:51:29Z")
Hi, I want to use if statement in my logstasg config file to get some particular data from a file. but i don't know how exactly we use if statements in its config file. any one can please share me the syntax here. Th… --- ## [GROK pattern for syslogs](https://discuss.elastic.co/t/grok-pattern-for-syslogs/284174)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 12:02pm UTC](https://discuss.elastic.co/t/grok-pattern-for-syslogs/284174 "2021-09-15T12:02:36Z")
"Hello. I have several sources of syslogs that I want to filter with logstash grok, have some issue and questions about this syslog event and how to use grok. {"@version":"1","message":"\<44\> Sep 14 09:01:09 172.24.4.202… --- ## [Error: Expected one of #, input, filter, output at line 1, column 1 (byte 1) after {:level=\>:error}](https://discuss.elastic.co/t/error-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-level-error/51431)
**Author:** [@Diego\_Gomez](https://discuss.elastic.co/u/Diego_Gomez)\ **Replies:** 2\ **Last updated:** [June 1, 2016, 3:20pm UTC](https://discuss.elastic.co/t/error-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-level-error/51431 "2016-06-01T15:20:37Z")
Hi all, I have a problem , run logstash and no problem I could see data Kibana but off to logstash and when I run again pulls me this error. Error: Expected one of #, input, filter, output at line 1, column 1 (byte 1) … --- ## [Elasticsearch not freeing up disk space](https://discuss.elastic.co/t/elasticsearch-not-freeing-up-disk-space/60556)
**Author:** [@srbay](https://discuss.elastic.co/u/srbay)\ **Replies:** 5\ **Last updated:** [September 28, 2016, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-not-freeing-up-disk-space/60556 "2016-09-28T12:27:35Z")
Hi guys, We have a standard ELK stack with three nodes for Elasticsearch. The three nodes have the same amount of disk space. We haven't configured any special options, this install is just using defaults. Initially we… --- ## [Kibana - Canvas](https://discuss.elastic.co/t/kibana-canvas/110653)
**Author:** [@Thorsten\_Nickel](https://discuss.elastic.co/u/Thorsten_Nickel)\ **Replies:** 6\ **Last updated:** [December 15, 2017, 12:17am UTC](https://discuss.elastic.co/t/kibana-canvas/110653 "2017-12-15T00:17:43Z")
Dear Canvas Team, did a quick install on my 6.0.1 Kibana Instance and played around with it a bit. Some points I got so far are: Kinda breaking : If I like to incorporate TimeLion as a datasource, it bails out with … --- ## [Elastic Cluster Red - How to fix!](https://discuss.elastic.co/t/elastic-cluster-red-how-to-fix/181114)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 5\ **Last updated:** [May 16, 2019, 8:23am UTC](https://discuss.elastic.co/t/elastic-cluster-red-how-to-fix/181114 "2019-05-16T08:23:21Z")
Hi all, I have a Elastic Cluster with 6 nodes in 6 different hosts. The elastic cluster status is red. I am using the latest elasticsearch version 7.0.1 to all the nodes. GET \_cluster/health { "cluster\_name" : "xh-e… --- ## [How to configure basic security on elastic stack?](https://discuss.elastic.co/t/how-to-configure-basic-security-on-elastic-stack/286479)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 8\ **Last updated:** [October 28, 2021, 8:03am UTC](https://discuss.elastic.co/t/how-to-configure-basic-security-on-elastic-stack/286479 "2021-10-28T08:03:03Z")
I have elastic stack. I need to configure basic security. When I add xpack.security.enabled: true in elasticsearch.yml it fails to start with message bootstrap check failure \[1\] of \[1\]: Transport SSL must be enabled i… --- ## [How to script export of \> 10,000 records - 5 mil?](https://discuss.elastic.co/t/how-to-script-export-of-10-000-records-5-mil/56029)
**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\ **Replies:** 8\ **Last updated:** [February 13, 2017, 10:17am UTC](https://discuss.elastic.co/t/how-to-script-export-of-10-000-records-5-mil/56029 "2017-02-13T10:17:48Z")
I need to batch export of all record for one hour, one day, etc .. Often record counts are \> 10,000 (Much more than that); I cannot change the 10,000 limit on size parameter for curl - and since this is automated - any … --- ## [How to stop searching on first match?](https://discuss.elastic.co/t/how-to-stop-searching-on-first-match/15507)
**Author:** [@Derf](https://discuss.elastic.co/u/Derf)\ **Replies:** 8\ **Last updated:** [January 30, 2014, 9:15pm UTC](https://discuss.elastic.co/t/how-to-stop-searching-on-first-match/15507 "2014-01-30T21:15:46Z")
Hi, I want to know how can I make a search stop when it find just one document. I have 5million documents and I'm looking for documents that have some numbers. I don't need sorting or scoring. I think I can filt… --- ## [Transport Error 400 (parsing\_exception)](https://discuss.elastic.co/t/transport-error-400-parsing-exception/90407)
**Author:** [@utkgarg](https://discuss.elastic.co/u/utkgarg)\ **Replies:** 3\ **Last updated:** [June 26, 2017, 6:58am UTC](https://discuss.elastic.co/t/transport-error-400-parsing-exception/90407 "2017-06-26T06:58:22Z")
I was able to successfully index my database, but while searching, I get the following error( I searched for the letter 'i'). 'first\_name' is the name of a column in one of the models in PostGresql database in Django pro… --- ## [Why 307 redirects from http -\> https instead of 301?](https://discuss.elastic.co/t/why-307-redirects-from-http-https-instead-of-301/26369)
**Author:** [@russellsavage](https://discuss.elastic.co/u/russellsavage)\ **Replies:** 5\ **Last updated:** [July 28, 2015, 3:27am UTC](https://discuss.elastic.co/t/why-307-redirects-from-http-https-instead-of-301/26369 "2015-07-28T03:27:13Z")
I'm curious about the decision to use 307 redirects from http -\> https instead of 301. Everything that I've read seems to say that a 307 is a temporary redirect, similar to 302. Why not make those redirects to https perm… --- ## [JSON Input - unique\_count](https://discuss.elastic.co/t/json-input-unique-count/130422)
**Author:** [@mIsabelcc](https://discuss.elastic.co/u/mIsabelcc)\ **Replies:** 7\ **Last updated:** [May 7, 2018, 1:17pm UTC](https://discuss.elastic.co/t/json-input-unique-count/130422 "2018-05-07T13:17:24Z")
In a visualization I want to calculate in a Json Input: unique\_count \*5, with groovy { "script": { "inline": "(unique\_count.(doc\['f\_agenda'\].value)\*5", "lang": "groovy" } } But groovy is deprecated and I can't d… --- ## [No mapping found for \[@timestamp\] in order to sort on](https://discuss.elastic.co/t/no-mapping-found-for-timestamp-in-order-to-sort-on/47570)
**Author:** [@byku](https://discuss.elastic.co/u/byku)\ **Replies:** 3\ **Last updated:** [April 17, 2016, 8:10pm UTC](https://discuss.elastic.co/t/no-mapping-found-for-timestamp-in-order-to-sort-on/47570 "2016-04-17T20:10:19Z")
Hi, I have next error on all search queries: \[2016-04-16 21:14:45,049\]\[INFO \]\[rest.suppressed \] /vastuf-vm-containers-/\_search Params: {size=10000, ignore\_unavailable=true, sourceinclude=@timestamp,, index=vas… --- ## [Elastic wont start - java.io.IOException: keystore password was incorrect](https://discuss.elastic.co/t/elastic-wont-start-java-io-ioexception-keystore-password-was-incorrect/204819)
**Author:** [@Sidharth\_Sinha](https://discuss.elastic.co/u/Sidharth_Sinha)\ **Replies:** 4\ **Last updated:** [October 24, 2019, 4:56am UTC](https://discuss.elastic.co/t/elastic-wont-start-java-io-ioexception-keystore-password-was-incorrect/204819 "2019-10-24T04:56:29Z")
I configured elastic to do x-pack security. Followed the documentation to create pkcs12 certs using the certutil, configured the password, and also added keystore entry to match the password. When I start elastic, I ge… --- ## [Joining Two Indexes with common field values](https://discuss.elastic.co/t/joining-two-indexes-with-common-field-values/332861)
**Author:** [@sai\_ravi\_shankar](https://discuss.elastic.co/u/sai_ravi_shankar)\ **Replies:** 8\ **Last updated:** [May 11, 2023, 2:22pm UTC](https://discuss.elastic.co/t/joining-two-indexes-with-common-field-values/332861 "2023-05-11T14:22:30Z")
Hi, I am trying to join two indexes with common field values. Can someone please help me. Here is the example: Index\_1 =\> A column\_1 =\> value\_1 Index\_2 =\> B column\_2 =\> value\_1 How can i join both indexes on the… --- ## [Search for specific symbols like %](https://discuss.elastic.co/t/search-for-specific-symbols-like/97350)
**Author:** [@Arthur\_Kushman](https://discuss.elastic.co/u/Arthur_Kushman)\ **Replies:** 8\ **Last updated:** [August 20, 2017, 12:40pm UTC](https://discuss.elastic.co/t/search-for-specific-symbols-like/97350 "2017-08-20T12:40:11Z")
We are using an ES in our project and can not find the answer or an example, how to search for ints with percent character, ex.: we place in query match “50%” ES found the 50 and 50%, as we thought it would be a special… --- ## [🎉 What’s new in Elastic 8.16](https://discuss.elastic.co/t/what-s-new-in-elastic-8-16/370418)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [November 12, 2024, 5:55pm UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-16/370418 "2024-11-12T17:55:00Z")
:tada: What’s new in Elastic 8.16 Learn about Elastic 8.16 which includes the first release ever of the Better Binary Quantization (BBQ) within a vector database, an updated Kibana experience, cloud assets protection and… --- ## [Cannot see user "id" in slowlogs (X-Opaque-ID)](https://discuss.elastic.co/t/cannot-see-user-id-in-slowlogs-x-opaque-id/239555)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 12:15am UTC](https://discuss.elastic.co/t/cannot-see-user-id-in-slowlogs-x-opaque-id/239555 "2020-07-02T00:15:48Z")
Hello According to this post Identifying search slow log origin It is often useful to identify what triggered a slow running query. If a call was initiated with an X-Opaque-ID header, then the user ID is included i… --- ## [\[ANNOUNCEMENT\] - Elasticsearch File System Crawler 2.3 released](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-3-released/92521)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 2\ **Last updated:** [September 25, 2018, 1:00pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-3-released/92521 "2018-09-25T13:00:13Z")
The Elasticsearch File System Crawler team is pleased to announce the fscrawler-2.3 release! FS Crawler offers a simple way to index local files into elasticsearch. Changes in this version include: New features: f… --- ## [Reason for version downgrade not supported](https://discuss.elastic.co/t/reason-for-version-downgrade-not-supported/245200)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 7\ **Last updated:** [August 19, 2020, 1:04pm UTC](https://discuss.elastic.co/t/reason-for-version-downgrade-not-supported/245200 "2020-08-19T13:04:47Z")
Hi, Elastic documentation states that version downgrade is not supported. https://www.elastic.co/guide/en/elasticsearch/reference/7.8/setup-upgrade.html - In-place downgrades to earlier versions are not supported. To … --- ## [Scrolling and Paging in Elastic/Nest 6+](https://discuss.elastic.co/t/scrolling-and-paging-in-elastic-nest-6/137527)
**Author:** [@Paulo\_Silva](https://discuss.elastic.co/u/Paulo_Silva)\ **Replies:** 5\ **Last updated:** [June 27, 2018, 6:51am UTC](https://discuss.elastic.co/t/scrolling-and-paging-in-elastic-nest-6/137527 "2018-06-27T06:51:14Z")
Hi guys, Intro I'm upgrading the elastic version to 6.3 (previously we were using 5.4. Our app is written in C#, thus we use NEST.NET dll to talk with the Elastic server, so we are also updating it to the version 6.0.… --- ## [Stop Logstash when it has finished to read a csv file](https://discuss.elastic.co/t/stop-logstash-when-it-has-finished-to-read-a-csv-file/26632)
**Author:** [@Adrian0limit](https://discuss.elastic.co/u/Adrian0limit)\ **Replies:** 2\ **Last updated:** [August 3, 2015, 12:34pm UTC](https://discuss.elastic.co/t/stop-logstash-when-it-has-finished-to-read-a-csv-file/26632 "2015-08-03T12:34:20Z")
Hi everybody, I'm using Logstash 1.5.3 and its input "file" in order to index a csv file to Elasticsearch. I want to execute logstash and when it has finished to read my file I want to properly stop Logstash. How can I… --- ## [Filebeat doesn't send data to logstash (?) OR logstash isn't receiving it (?)](https://discuss.elastic.co/t/filebeat-doesnt-send-data-to-logstash-or-logstash-isnt-receiving-it/173544)
**Author:** [@boxclever38](https://discuss.elastic.co/u/boxclever38)\ **Replies:** 6\ **Last updated:** [March 26, 2019, 9:32pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-send-data-to-logstash-or-logstash-isnt-receiving-it/173544 "2019-03-26T21:32:55Z")
I have an Elastic stack working A-OK (afaik). Filebeat runs great on the local machine, sending to logstash, and everything looks good in Kibana. I am now trying to send logs from a remote machine and it does not appear… --- ## [ElasticSearch equivalent query for SQL group by multiple columns](https://discuss.elastic.co/t/elasticsearch-equivalent-query-for-sql-group-by-multiple-columns/86028)
**Author:** [@nkanand](https://discuss.elastic.co/u/nkanand)\ **Replies:** 4\ **Last updated:** [May 19, 2017, 6:08pm UTC](https://discuss.elastic.co/t/elasticsearch-equivalent-query-for-sql-group-by-multiple-columns/86028 "2017-05-19T18:08:15Z")
I have a few million documents with name and version (both of type keyword) as properties in each. What is the equivalent Elastic query for group by name, version? I have tried the following query: { "size":0, … --- ## [How to get nested inner objects total count in elasticsearch query](https://discuss.elastic.co/t/how-to-get-nested-inner-objects-total-count-in-elasticsearch-query/165276)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 2\ **Last updated:** [January 23, 2019, 9:33am UTC](https://discuss.elastic.co/t/how-to-get-nested-inner-objects-total-count-in-elasticsearch-query/165276 "2019-01-23T09:33:56Z")
Hi All, I am trying to get total count of nested inner objects using elasticsearch query and below is the query I tried, POST transaction\*/\_search { "size": 0, "query": { "bool": { "must": \[ { … --- ## [FileBeats with Redis](https://discuss.elastic.co/t/filebeats-with-redis/36009)
**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\ **Replies:** 8\ **Last updated:** [March 22, 2017, 4:44pm UTC](https://discuss.elastic.co/t/filebeats-with-redis/36009 "2017-03-22T16:44:31Z")
Hi My Current setup is - File Beat --\> Log Stash ---\> Elastic Search The expected log volume is say 10 GB per hour to LS (as current version of FB doesn't have regexp feature and ships all logs). Hence would li… --- ## [Index\_closed\_exception](https://discuss.elastic.co/t/index-closed-exception/38424)
**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\ **Replies:** 1\ **Last updated:** [February 1, 2016, 11:03pm UTC](https://discuss.elastic.co/t/index-closed-exception/38424 "2016-02-01T23:03:35Z")
I'm seeing unexpected behavior since upgrading elasticsearch to 2.1 and kibana to 4.3. Looks like the field stats api is now being used by kibana to determine which indices to query. The following request to \_field\_sta… --- ## [Parsing Log4net with Filebeat](https://discuss.elastic.co/t/parsing-log4net-with-filebeat/64180)
**Author:** [@mmehraban](https://discuss.elastic.co/u/mmehraban)\ **Replies:** 7\ **Last updated:** [October 28, 2016, 9:29pm UTC](https://discuss.elastic.co/t/parsing-log4net-with-filebeat/64180 "2016-10-28T21:29:53Z")
Hi guys, I want to pars log4net Files which is shipping from filebeat to Logstash but I have difficulty with multiline in Filebeat? What is the best way to do it? Any help or suggestion would be appreciated [Previous page](https://discuss.elastic.co/top.md?page=335&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=337&per_page=50&period=all)