# Top **URL:** https://discuss.elastic.co/top.md?page=350&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 351 --- ## [Automatic index alias assigning](https://discuss.elastic.co/t/automatic-index-alias-assigning/7165)
**Author:** [@thiago](https://discuss.elastic.co/u/thiago)\ **Replies:** 8\ **Last updated:** [July 2, 2015, 1:21pm UTC](https://discuss.elastic.co/t/automatic-index-alias-assigning/7165 "2015-07-02T13:21:16Z")
Hello all, Is there any way to automatically assign and index alias upon it's creation, based on a pattern For example, twitter-\* =\> twitter and so upon creation of "twitter-2012-03-28" would be a… --- ## [Filebeat 5.0 output to Kafka multiple topics](https://discuss.elastic.co/t/filebeat-5-0-output-to-kafka-multiple-topics/67934)
**Author:** [@gearoid](https://discuss.elastic.co/u/gearoid)\ **Replies:** 4\ **Last updated:** [December 6, 2016, 1:03pm UTC](https://discuss.elastic.co/t/filebeat-5-0-output-to-kafka-multiple-topics/67934 "2016-12-06T13:03:17Z")
I installed Filebeat 5.0 on my app server and have 3 Filebeat prospectors, each of the prospector are pointing to different log paths and output to one kafka topic called myapp\_applog and everything works fine. My File… --- ## [Is it possible to disable auto adding new field?](https://discuss.elastic.co/t/is-it-possible-to-disable-auto-adding-new-field/76900)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 6\ **Last updated:** [March 1, 2017, 6:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-disable-auto-adding-new-field/76900 "2017-03-01T06:29:28Z")
I know we can disable auto index creation by setting action.auto\_create\_index. If I index a doc with an undefined field, the field will be auto added to the index. Is it possible disable it? That is, if document contain… --- ## [How to POST multiple documents at a time using Elastic RestClient](https://discuss.elastic.co/t/how-to-post-multiple-documents-at-a-time-using-elastic-restclient/135793)
**Author:** [@Suryatejreddy](https://discuss.elastic.co/u/Suryatejreddy)\ **Replies:** 3\ **Last updated:** [June 14, 2018, 3:10pm UTC](https://discuss.elastic.co/t/how-to-post-multiple-documents-at-a-time-using-elastic-restclient/135793 "2018-06-14T15:10:34Z")
I am trying to POST data into elastic search using this below code in java. Response indexResponse = restClient.performRequest("POST", "/myindex/mydoc/", Collections.\emptyMap(), entity); My entity is … --- ## [Elastic Search Behind Apache Reverse Proxy But Kibana Faces Problems Accessing ES](https://discuss.elastic.co/t/elastic-search-behind-apache-reverse-proxy-but-kibana-faces-problems-accessing-es/31801)
**Author:** [@VipulPathak](https://discuss.elastic.co/u/VipulPathak)\ **Replies:** 3\ **Last updated:** [January 26, 2016, 4:36am UTC](https://discuss.elastic.co/t/elastic-search-behind-apache-reverse-proxy-but-kibana-faces-problems-accessing-es/31801 "2016-01-26T04:36:16Z")
Hello Everyone, This is my configuration - \[ Elastic Search 1.6 :9200\] \<--- \[Apache Web Server 2.4 Reverse Proxy :443/es \] \<-- \[Kibana 4.1 HTTPS and Port 5601\] Both Apache Reverse Proxy and Kibana are setup to… --- ## [Start es cluster ,the health status is red](https://discuss.elastic.co/t/start-es-cluster-the-health-status-is-red/78947)
**Author:** [@hexian55](https://discuss.elastic.co/u/hexian55)\ **Replies:** 3\ **Last updated:** [March 17, 2017, 8:19am UTC](https://discuss.elastic.co/t/start-es-cluster-the-health-status-is-red/78947 "2017-03-17T08:19:06Z")
Elasticsearch version: 5.2.1 Plugins installed: \[\] JVM version: jdk:1.8.0\_111 OS version: centos7.0 configuration file as follows cluster.name: tj-es-staging node.master: true node.data: true node.name: ${HOSTNAME} n… --- ## [Long query timeout configuration?](https://discuss.elastic.co/t/long-query-timeout-configuration/1638)
**Author:** [@AlexRRR](https://discuss.elastic.co/u/AlexRRR)\ **Replies:** 2\ **Last updated:** [June 22, 2015, 12:45pm UTC](https://discuss.elastic.co/t/long-query-timeout-configuration/1638 "2015-06-22T12:45:24Z")
Hello! I've just installed the whole ELK stack for my company and now I am running into some problems, mainly if a query takes too long it will just bring my ES servers to their knees likely resource starvation. I s… --- ## [Poor Query Performance using nested document structure](https://discuss.elastic.co/t/poor-query-performance-using-nested-document-structure/130781)
**Author:** [@Jagdish\_agarwal](https://discuss.elastic.co/u/Jagdish_agarwal)\ **Replies:** 6\ **Last updated:** [May 7, 2018, 8:20am UTC](https://discuss.elastic.co/t/poor-query-performance-using-nested-document-structure/130781 "2018-05-07T08:20:23Z")
We are building a search feature for our existing product . The document structure is like { "\_index" : "apr-2018-feed", "\_type" : "product", "\_id" : "8102637039f76d20a0adc1257c14ee08", "\_source" : { "id" : "8102… --- ## [Kibana Discover tab not displaying data for index pattern](https://discuss.elastic.co/t/kibana-discover-tab-not-displaying-data-for-index-pattern/241083)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 8\ **Last updated:** [July 14, 2020, 9:23am UTC](https://discuss.elastic.co/t/kibana-discover-tab-not-displaying-data-for-index-pattern/241083 "2020-07-14T09:23:52Z")
Hello, My Indices showing 8 documents and created index pattern for the same. My discover tab was showing data for same indices("hc-gc-2020.07.14") before. I restarted Elastic stack and post that sometimes data is di… --- ## [Is Kibana 4.x still free to use on Production?](https://discuss.elastic.co/t/is-kibana-4-x-still-free-to-use-on-production/28683)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 4\ **Last updated:** [September 5, 2015, 5:58pm UTC](https://discuss.elastic.co/t/is-kibana-4-x-still-free-to-use-on-production/28683 "2015-09-05T17:58:05Z")
Someone told me that Kibana 4.x is not free to use on production, to use it on product, we need pay for license, Is that true? --- ## [X-Pack Alerting and Kibana 5.6.1 security update](https://discuss.elastic.co/t/x-pack-alerting-and-kibana-5-6-1-security-update/101884)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [September 26, 2017, 4:56pm UTC](https://discuss.elastic.co/t/x-pack-alerting-and-kibana-5-6-1-security-update/101884 "2017-09-26T16:56:25Z")
X-Pack alerting privileged user multiple issues An error was found in the permission model used by X-Pack alerting whereby users mapped to certain built-in roles could create a watch that results in that user gaining el… --- ## [External Docker Volume for Elasticsearch Snapshot](https://discuss.elastic.co/t/external-docker-volume-for-elasticsearch-snapshot/191598)
**Author:** [@alza](https://discuss.elastic.co/u/alza)\ **Replies:** 0\ **Last updated:** [July 22, 2019, 7:46am UTC](https://discuss.elastic.co/t/external-docker-volume-for-elasticsearch-snapshot/191598 "2019-07-22T07:46:22Z")
I'm trying to use snapshot for backup and restore, I added the backup path in elasticsearch.yml as: path.repo: \["/opt/elasticsearch/backup"\] Also in my elasticsearch docker-compose.yml I bind this path to an external v… --- ## [Elastic Search Logs Retention](https://discuss.elastic.co/t/elastic-search-logs-retention/23998)
**Author:** [@sagarshah1983](https://discuss.elastic.co/u/sagarshah1983)\ **Replies:** 5\ **Last updated:** [June 25, 2015, 7:14pm UTC](https://discuss.elastic.co/t/elastic-search-logs-retention/23998 "2015-06-25T19:14:18Z")
Hello everyone, I am using Elastic Search 1.4.2. We see that elastic search has it's own logging configuration file called logging.yml, which by default has daily file rolling appender. Is there any configuration avail… --- ## [How can I rename and reorder fields in Kibana?](https://discuss.elastic.co/t/how-can-i-rename-and-reorder-fields-in-kibana/79914)
**Author:** [@dolanmk](https://discuss.elastic.co/u/dolanmk)\ **Replies:** 6\ **Last updated:** [March 28, 2017, 2:37pm UTC](https://discuss.elastic.co/t/how-can-i-rename-and-reorder-fields-in-kibana/79914 "2017-03-28T14:37:11Z")
Hi. I am wondering if there is a way to rearrange the list of fields as they are presented when a document is expanded like in the picture below. I am also wondering if it is possible to rename the "@timestamp" field… --- ## [Index Lifecycle Error index.lifecycle.rollover\_alias \[\< beat \>-\< version \>\] does not point to index issue](https://discuss.elastic.co/t/index-lifecycle-error-index-lifecycle-rollover-alias-beat-version-does-not-point-to-index-issue/241029)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 4\ **Last updated:** [September 9, 2020, 8:02pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-index-lifecycle-rollover-alias-beat-version-does-not-point-to-index-issue/241029 "2020-09-09T20:02:46Z")
A while back I posted Index Lifecycle Management “does not point to index” error. I never did fully resolve my issue, and thanks to other work priorities, my dev stack I was working on died. Now, on a new stack that's a… --- ## [Lucene Query Language using now date time](https://discuss.elastic.co/t/lucene-query-language-using-now-date-time/275579)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 4:19pm UTC](https://discuss.elastic.co/t/lucene-query-language-using-now-date-time/275579 "2021-06-29T16:19:56Z")
In Lucene for a date range its possible to do date:{\* TO 2012-01-01}, is it possible to use the now date time such as date:{now-60d/d TO now/d} --- ## [Dynamic input file name](https://discuss.elastic.co/t/dynamic-input-file-name/25951)
**Author:** [@Raman\_Saini](https://discuss.elastic.co/u/Raman_Saini)\ **Replies:** 8\ **Last updated:** [June 9, 2017, 5:30am UTC](https://discuss.elastic.co/t/dynamic-input-file-name/25951 "2017-06-09T05:30:24Z")
Hi, I have log file whose name changes as per date. How to set path in the input filter. i have given below path: "/www/redhat/ews-abc-uat/tomcat7/logs/access.date '+%F'.log" Its not working. Please suggest. Rega… --- ## [How to add new field to existing docs](https://discuss.elastic.co/t/how-to-add-new-field-to-existing-docs/114135)
**Author:** [@dh2001](https://discuss.elastic.co/u/dh2001)\ **Replies:** 5\ **Last updated:** [January 5, 2018, 3:07pm UTC](https://discuss.elastic.co/t/how-to-add-new-field-to-existing-docs/114135 "2018-01-05T15:07:50Z")
I tried using \_reindex, but I get an error. I want to add a new field and initialize it to an existing value. I added the new field to the mapping and I created the dest index. curl -s -XPOST 'http://localhost:9200/\_rei… --- ## [Kibana enable cors](https://discuss.elastic.co/t/kibana-enable-cors/118040)
**Author:** [@anton-putau](https://discuss.elastic.co/u/anton-putau)\ **Replies:** 5\ **Last updated:** [February 14, 2018, 5:10pm UTC](https://discuss.elastic.co/t/kibana-enable-cors/118040 "2018-02-14T17:10:18Z")
I have kibana 5.6 and I am unable to enable cors. I've read next thread and found that I needserver.cors : true or server.cors.origin: \['\*'\] setting in kibana .yml config. If I use server.cors : true option, I have res… --- ## [Is there any response.to\_json() method in es python client?](https://discuss.elastic.co/t/is-there-any-response-to-json-method-in-es-python-client/47493)
**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\ **Replies:** 3\ **Last updated:** [April 19, 2016, 6:13am UTC](https://discuss.elastic.co/t/is-there-any-response-to-json-method-in-es-python-client/47493 "2016-04-19T06:13:51Z")
I'm using es python client elasticsearch-dsl-py. def post() query = Search().query(some\_query) response = query.execute() return response The code raised errors because response was a generator, while I … --- ## [How to use a dashboard with a different index pattern](https://discuss.elastic.co/t/how-to-use-a-dashboard-with-a-different-index-pattern/200434)
**Author:** [@salomaoAndrade](https://discuss.elastic.co/u/salomaoAndrade)\ **Replies:** 8\ **Last updated:** [September 20, 2019, 7:00pm UTC](https://discuss.elastic.co/t/how-to-use-a-dashboard-with-a-different-index-pattern/200434 "2019-09-20T19:00:55Z")
I have an index with a dashboard i have set up for it. When i create a new index and create a new user with permissions to only read a second index, i can still see the dashboard i created for the first index, but i can'… --- ## [Problem with logstash: java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/problem-with-logstash-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/238390)
**Author:** [@kase](https://discuss.elastic.co/u/kase)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 6:29am UTC](https://discuss.elastic.co/t/problem-with-logstash-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/238390 "2020-06-24T06:29:53Z")
Hi there, I'm using elastiflow with logstash, I've done these command in this url(https://www.catapultsystems.com/blogs/install-elastiflow-on-ubuntu-18-04-part-3/) And netflow data could came through logstash to elasti… --- ## [Extract string from JSON and put into new value](https://discuss.elastic.co/t/extract-string-from-json-and-put-into-new-value/108808)
**Author:** [@sdndude](https://discuss.elastic.co/u/sdndude)\ **Replies:** 7\ **Last updated:** [November 24, 2017, 12:56pm UTC](https://discuss.elastic.co/t/extract-string-from-json-and-put-into-new-value/108808 "2017-11-24T12:56:05Z")
I am still fairly new to Logstash and I am starting to get on the tips of my skates when comes to understanding how to do what I need to. I am receiving JSON from a device (via HTTP payload) and it is super easy to slap… --- ## [Elastic Stack 6.8.8 and 7.6.2 security update](https://discuss.elastic.co/t/elastic-stack-6-8-8-and-7-6-2-security-update/225920)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 5:08pm UTC](https://discuss.elastic.co/t/elastic-stack-6-8-8-and-7-6-2-security-update/225920 "2020-03-31T17:08:34Z")
Elasticsearch API key privilege escalation (ESA-2020-02) Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is ab… --- ## [How to create tables in Kibana with operation on columns like we do in Excel?](https://discuss.elastic.co/t/how-to-create-tables-in-kibana-with-operation-on-columns-like-we-do-in-excel/110316)
**Author:** [@Shalvin\_Kumar](https://discuss.elastic.co/u/Shalvin_Kumar)\ **Replies:** 6\ **Last updated:** [December 7, 2017, 5:36pm UTC](https://discuss.elastic.co/t/how-to-create-tables-in-kibana-with-operation-on-columns-like-we-do-in-excel/110316 "2017-12-07T17:36:07Z")
Hello Community, I have completed a POC on ELK Stack in my organization and I am currently trying out few use cases that some of the Business users suggested. So I have the data of each Trade that went through us and h… --- ## [Kibana server.host "0.0.0.0" hostname" must be a valid hostname](https://discuss.elastic.co/t/kibana-server-host-0-0-0-0-hostname-must-be-a-valid-hostname/204458)
**Author:** [@Bharath\_venkat](https://discuss.elastic.co/u/Bharath_venkat)\ **Replies:** 3\ **Last updated:** [October 21, 2019, 3:58pm UTC](https://discuss.elastic.co/t/kibana-server-host-0-0-0-0-hostname-must-be-a-valid-hostname/204458 "2019-10-21T15:58:21Z")
I am trying to create SAML SSO authentication and secure elk with TLS/SSL on kubernetes . Following the post. I got stuck while deploying kibana . Part of config file looks as below data: kibana.yml: | server.name: sa… --- ## [SSL certificate | Let's Encrypt or self-signed](https://discuss.elastic.co/t/ssl-certificate-lets-encrypt-or-self-signed/207819)
**Author:** [@Danelicious](https://discuss.elastic.co/u/Danelicious)\ **Replies:** 8\ **Last updated:** [November 14, 2019, 11:36am UTC](https://discuss.elastic.co/t/ssl-certificate-lets-encrypt-or-self-signed/207819 "2019-11-14T11:36:02Z")
Hi there! I am trying to enrypt communication on my elastic server. I followed several tutorials. However, I always fail to succeed, so I am seeking for advise here. Elasticsearch is running fine after a fresh installati… --- ## [Elasticsearch for logging. HOW to configure automatic creation of the new index every day?](https://discuss.elastic.co/t/elasticsearch-for-logging-how-to-configure-automatic-creation-of-the-new-index-every-day/19467)
**Author:** [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)\ **Replies:** 3\ **Last updated:** [August 27, 2014, 11:54pm UTC](https://discuss.elastic.co/t/elasticsearch-for-logging-how-to-configure-automatic-creation-of-the-new-index-every-day/19467 "2014-08-27T23:54:05Z")
Most of the guides I could find recommend creation of \*one index per day\* when Elastic is used to store and query log files. Unfortunately not a single guide dares to explain \*HOW exactly shall I configure freshly i… --- ## [Performance problem in Percolator fetch phase classes](https://discuss.elastic.co/t/performance-problem-in-percolator-fetch-phase-classes/243748)
**Author:** [@apeteri](https://discuss.elastic.co/u/apeteri)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 7:46am UTC](https://discuss.elastic.co/t/performance-problem-in-percolator-fetch-phase-classes/243748 "2020-08-05T07:46:49Z")
Hi, We are using Elasticsearch 7.8.0 and seem to be encountering a performance issue that we traced back to the method PercolatorHighlightSubFetchPhase#locatePercolatorQuery. Lucene 8.6 introduced a change to QueryVisit… --- ## [RestClient java.lang.RuntimeException: error while performing request](https://discuss.elastic.co/t/restclient-java-lang-runtimeexception-error-while-performing-request/81078)
**Author:** [@Hyojoung\_Shin](https://discuss.elastic.co/u/Hyojoung_Shin)\ **Replies:** 4\ **Last updated:** [April 11, 2017, 8:36am UTC](https://discuss.elastic.co/t/restclient-java-lang-runtimeexception-error-while-performing-request/81078 "2017-04-11T08:36:53Z")
Hi, Thank you for the great open source! I am using RestClient(java) to connect elastic cloud for searching. The program is multi thread environment and each thread can call restclient. This is error : java.lang.… --- ## [ELK Stack for Suricata](https://discuss.elastic.co/t/elk-stack-for-suricata/32605)
**Author:** [@sck](https://discuss.elastic.co/u/sck)\ **Replies:** 6\ **Last updated:** [October 21, 2015, 3:43am UTC](https://discuss.elastic.co/t/elk-stack-for-suricata/32605 "2015-10-21T03:43:53Z")
Hello, Looking for some help in configuring ELK to work with Suricata-IDS. My setup is detailed below: elasticsearch-1.7.3.deb kibana-4.1.2-linux-x64.tar.gz logstash\_1.5.4-1\_all.deb logstash-forwarder\_0.4.0\_amd64.… --- ## [Error: ENOENT: no such file or directory, open 'config/kibana-server.key'](https://discuss.elastic.co/t/error-enoent-no-such-file-or-directory-open-config-kibana-server-key/272340)
**Author:** [@ograso](https://discuss.elastic.co/u/ograso)\ **Replies:** 5\ **Last updated:** [May 7, 2021, 3:04pm UTC](https://discuss.elastic.co/t/error-enoent-no-such-file-or-directory-open-config-kibana-server-key/272340 "2021-05-07T15:04:19Z")
I have an issue about setting up basic security for the Elastic Stack plus secured HTTPS traffic when I try to set on kibana.yml. Elastic is working and reachable over https but I receive an error are as follow when I t… --- ## [Elasticsearch stop working suddenly](https://discuss.elastic.co/t/elasticsearch-stop-working-suddenly/179310)
**Author:** [@khergner](https://discuss.elastic.co/u/khergner)\ **Replies:** 7\ **Last updated:** [May 20, 2019, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-stop-working-suddenly/179310 "2019-05-20T08:23:15Z")
Hi, Elasticsearch stop working suddenly. Why is stopping services? I get below log. How can ı fix bellow problem? I use -Xmx10g so 10 GB ram use it. \[2019-05-02T10:11:44,459\]\[WARN \]\[r.suppressed \] \[MasterN… --- ## [Logstash filter : Split plugin doesn't seems to work](https://discuss.elastic.co/t/logstash-filter-split-plugin-doesnt-seems-to-work/58578)
**Author:** [@LetMeR00t](https://discuss.elastic.co/u/LetMeR00t)\ **Replies:** 8\ **Last updated:** [August 22, 2016, 8:11pm UTC](https://discuss.elastic.co/t/logstash-filter-split-plugin-doesnt-seems-to-work/58578 "2016-08-22T20:11:07Z")
Hi everyone, I tried to use the split plugin for splitting an array into multiple events. However, it seems that it's not capable of interpreting field like "%{type\[1\]}". As entry, I use this kind of message (this is … --- ## [Speed up processing of logs](https://discuss.elastic.co/t/speed-up-processing-of-logs/80062)
**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\ **Replies:** 6\ **Last updated:** [March 29, 2017, 5:19am UTC](https://discuss.elastic.co/t/speed-up-processing-of-logs/80062 "2017-03-29T05:19:57Z")
Hi I am using logstash 5.1.1 to parse file size of 2-3G (7-8M records) and there are thousands of them from the S3 bucket. My current speed is barely one file/day (260 logs for sec), in m3-xlarge aws instance(4 cpu, 15G … --- ## [Search as you type with Java API](https://discuss.elastic.co/t/search-as-you-type-with-java-api/25683)
**Author:** [@elasticsearcher1](https://discuss.elastic.co/u/elasticsearcher1)\ **Replies:** 7\ **Last updated:** [July 22, 2015, 7:34am UTC](https://discuss.elastic.co/t/search-as-you-type-with-java-api/25683 "2015-07-22T07:34:52Z")
2 Questions. What is the equivalent of match\_phrase\_prefix in the Java API? I'm unable to find any classes that implement QueryBuilder that correspond to this? I'm trying to set a custom analyzer for an index to also… --- ## [Reflect.metadata is not a function](https://discuss.elastic.co/t/reflect-metadata-is-not-a-function/231856)
**Author:** [@VamsiSama](https://discuss.elastic.co/u/VamsiSama)\ **Replies:** 3\ **Last updated:** [May 19, 2020, 8:56pm UTC](https://discuss.elastic.co/t/reflect-metadata-is-not-a-function/231856 "2020-05-19T20:56:17Z")
Hi Team, I am Using angular 9 Version CLI and Angular Version 9 and when i try to implement the syntax as per your guideliness in the website, When i try to import APMService in the Providers i face the issue as show i… --- ## [How to do log rotation in Elastic Search](https://discuss.elastic.co/t/how-to-do-log-rotation-in-elastic-search/272442)
**Author:** [@german\_83](https://discuss.elastic.co/u/german_83)\ **Replies:** 1\ **Last updated:** [May 9, 2021, 2:34pm UTC](https://discuss.elastic.co/t/how-to-do-log-rotation-in-elastic-search/272442 "2021-05-09T14:34:07Z")
Hi all, I have setup a deployment for elasticsearch and I been able to make it work with winlogbeat to capture specific events, But I'm not sure how to rotate the logs with the index lifecycle management policies I'm no… --- ## [Elastic 6.4.2 will not start "unable to load JNA native support library"](https://discuss.elastic.co/t/elastic-6-4-2-will-not-start-unable-to-load-jna-native-support-library/154360)
**Author:** [@Jose\_Ramierez](https://discuss.elastic.co/u/Jose_Ramierez)\ **Replies:** 2\ **Last updated:** [October 29, 2018, 8:03pm UTC](https://discuss.elastic.co/t/elastic-6-4-2-will-not-start-unable-to-load-jna-native-support-library/154360 "2018-10-29T20:03:28Z")
I have installed ES soooo many times. Every once in awhile, something new pops up. CentOS 7 Elastic 6.4.2 from RPM installer I had it running, but we then needed to go into recovery mode to resize the root file system… --- ## [Grok Parse failure but passing configtest](https://discuss.elastic.co/t/grok-parse-failure-but-passing-configtest/25097)
**Author:** [@Paul\_McClure](https://discuss.elastic.co/u/Paul_McClure)\ **Replies:** 5\ **Last updated:** [July 9, 2015, 9:03pm UTC](https://discuss.elastic.co/t/grok-parse-failure-but-passing-configtest/25097 "2015-07-09T21:03:59Z")
Hey first post here! I'm getting a grok parse failure in my tags field: tags netsyslog, \_grokparsefailure I'm really not sure where I've gone wrong though. The config seems fine and passes the configtest. Fields … --- ## [Node - Bulk indexing not working - Content-Type header \[application/x-ldjson\] is not supported](https://discuss.elastic.co/t/node-bulk-indexing-not-working-content-type-header-application-x-ldjson-is-not-supported/114944)
**Author:** [@venkkiram](https://discuss.elastic.co/u/venkkiram)\ **Replies:** 7\ **Last updated:** [January 14, 2018, 8:01am UTC](https://discuss.elastic.co/t/node-bulk-indexing-not-working-content-type-header-application-x-ldjson-is-not-supported/114944 "2018-01-14T08:01:15Z")
Am new and exploring elasticsearch integration with node and trying to execute the following example in my windows. while trying to import the data from data.json, the 'node index.js' is able to only parse the items i… --- ## [Check empty string in nested attribute](https://discuss.elastic.co/t/check-empty-string-in-nested-attribute/73477)
**Author:** [@dmitriiPopov](https://discuss.elastic.co/u/dmitriiPopov)\ **Replies:** 5\ **Last updated:** [February 1, 2017, 10:31am UTC](https://discuss.elastic.co/t/check-empty-string-in-nested-attribute/73477 "2017-02-01T10:31:08Z")
How can I get all records from index with empty string value ("field":"")? Example of needed document: { "post\_id":"56565656", "data" : { "owner\_id" : "121213123", "text" : … --- ## [Installing ElasticAgent with GPO](https://discuss.elastic.co/t/installing-elasticagent-with-gpo/302250)
**Author:** [@kotvmrc](https://discuss.elastic.co/u/kotvmrc)\ **Replies:** 5\ **Last updated:** [May 11, 2022, 8:01am UTC](https://discuss.elastic.co/t/installing-elasticagent-with-gpo/302250 "2022-05-11T08:01:46Z")
Hi all, I'm looking for installing elastic-agent 7.16 on several Windows PCs with a GPO, EPs could be too many to install it manually. I can't find any guide to do it, so I tried to do it by myself creating a Powershel… --- ## [Timelion 5.0 split is not working for me](https://discuss.elastic.co/t/timelion-5-0-split-is-not-working-for-me/64897)
**Author:** [@srpatatas](https://discuss.elastic.co/u/srpatatas)\ **Replies:** 7\ **Last updated:** [November 4, 2016, 6:39pm UTC](https://discuss.elastic.co/t/timelion-5-0-split-is-not-working-for-me/64897 "2016-11-04T18:39:19Z")
Hi guys, I'm having trouble with the Timelion plugin on Elastic 5.0. I was using Kibana 4.5.4 and had no issues with this query in timelion: .es(q=\*,split="env.prd:2") to split all my documents by the key env.prd (it onl… --- ## [Show cumulative duration between start / stop events](https://discuss.elastic.co/t/show-cumulative-duration-between-start-stop-events/54198)
**Author:** [@Geezer](https://discuss.elastic.co/u/Geezer)\ **Replies:** 4\ **Last updated:** [August 8, 2016, 9:35pm UTC](https://discuss.elastic.co/t/show-cumulative-duration-between-start-stop-events/54198 "2016-08-08T21:35:04Z")
Hello, I am logging firewall events and see a process start and stop throughout the day. I want to show for how much of the day the process was running, by the cumulative sum of: @timestamp (end\_event) - @timestamp (… --- ## [Timelion Time-Series data based on field value](https://discuss.elastic.co/t/timelion-time-series-data-based-on-field-value/93982)
**Author:** [@bwa55221](https://discuss.elastic.co/u/bwa55221)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 3:27pm UTC](https://discuss.elastic.co/t/timelion-time-series-data-based-on-field-value/93982 "2017-07-21T15:27:29Z")
Hello, I am attempting to view a time series plot of data using timelion. I have roughly 2500 samples of a signal strength value (RSSI) taken over a over a 5 day period - for each frequency (roughly 560 different f… --- ## [Converting Node Client to Transport client?](https://discuss.elastic.co/t/converting-node-client-to-transport-client/94844)
**Author:** [@areddy7021](https://discuss.elastic.co/u/areddy7021)\ **Replies:** 6\ **Last updated:** [August 14, 2017, 5:29pm UTC](https://discuss.elastic.co/t/converting-node-client-to-transport-client/94844 "2017-08-14T17:29:39Z")
I am facing an issue while converting the node client to transport client , can any one please guide me on the conversion , It is saying none of the configured nodes available. Do any one has any snippet to create a tr… --- ## [How to clone an index with all it's documents](https://discuss.elastic.co/t/how-to-clone-an-index-with-all-its-documents/20891)
**Author:** [@Ori\_P](https://discuss.elastic.co/u/Ori_P)\ **Replies:** 2\ **Last updated:** [November 23, 2014, 9:12am UTC](https://discuss.elastic.co/t/how-to-clone-an-index-with-all-its-documents/20891 "2014-11-23T09:12:50Z")
I'm looking for a way to clone an entire index with all it's documents into a new index with a different name. What is the fast/efficient/elegant way to do this? Thanks :) -- You received this message because… --- ## [Rally 2.0.3 Released](https://discuss.elastic.co/t/rally-2-0-3-released/261007)
**Author:** [@RickBoyd](https://discuss.elastic.co/u/RickBoyd)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 1:57pm UTC](https://discuss.elastic.co/t/rally-2-0-3-released/261007 "2021-01-13T13:57:03Z")
We have just released Rally 2.0.3. This is a bug fix release but also adds quite a few enhancements. Here are some highlights: The new composite operations support complex hierarchies in tasks. (change) (doc) Added su… --- ## [Use phrase suggester over multiple indices](https://discuss.elastic.co/t/use-phrase-suggester-over-multiple-indices/166956)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 12:34pm UTC](https://discuss.elastic.co/t/use-phrase-suggester-over-multiple-indices/166956 "2019-02-04T12:34:12Z")
Hi, I am trying to understand what happens in the PhraseSuggester. There is something tricky when working with multiple indices. From my experiments, adding more documents to an index can result in missing suggestions. … [Previous page](https://discuss.elastic.co/top.md?page=349&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=351&per_page=50&period=all)