# Top

**URL:** https://discuss.elastic.co/top.md?page=352&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 353

---

## [How to implement elastic search in asp.net with sql server](https://discuss.elastic.co/t/how-to-implement-elastic-search-in-asp-net-with-sql-server/97392)

<div class="topic-metadata">

**Author:** [@Nikunj113](https://discuss.elastic.co/u/Nikunj113)\
**Replies:** 4\
**Last updated:** [August 22, 2017, 10:13am UTC](https://discuss.elastic.co/t/how-to-implement-elastic-search-in-asp-net-with-sql-server/97392 "2017-08-22T10:13:20Z")

</div>

i have created website which is contain large amount of data and i have used asp.net with sql server to build the website , now i want to implement elastic search with sql server database .if anyone knows so please help…

---

## [COMBINEDAPACHELOG did not add any matched fileds?](https://discuss.elastic.co/t/combinedapachelog-did-not-add-any-matched-fileds/66791)

<div class="topic-metadata">

**Author:** [@robertchen117](https://discuss.elastic.co/u/robertchen117)\
**Replies:** 5\
**Last updated:** [November 22, 2016, 8:37pm UTC](https://discuss.elastic.co/t/combinedapachelog-did-not-add-any-matched-fileds/66791 "2016-11-22T20:37:00Z")

</div>

my logstash filter rule is like: if \[type\] == "apache" { grok { match =\> \["message", "%{COMBINEDAPACHELOG}"\] match =\> \["message", "%{HTTPD20\_ERRORLOG}"\] } } COMBINEDAPACHELOG did not add any matched fileds, or it …

---

## [This field is not indexed thus unavailable for visualization and search](https://discuss.elastic.co/t/this-field-is-not-indexed-thus-unavailable-for-visualization-and-search/33374)

<div class="topic-metadata">

**Author:** [@SureshSala](https://discuss.elastic.co/u/SureshSala)\
**Replies:** 2\
**Last updated:** [March 28, 2016, 6:48am UTC](https://discuss.elastic.co/t/this-field-is-not-indexed-thus-unavailable-for-visualization-and-search/33374 "2016-03-28T06:48:01Z")

</div>

How to Solve this Error: This field is not indexed thus unavailable for visualization and search. I am unable to visualize new added index. Need Help.

---

## [ES 6.0 - Scripted Field HourOfDay with Timezone - error](https://discuss.elastic.co/t/es-6-0-scripted-field-hourofday-with-timezone-error/107792)

<div class="topic-metadata">

**Author:** [@mazoutte](https://discuss.elastic.co/u/mazoutte)\
**Replies:** 2\
**Last updated:** [November 17, 2017, 6:42pm UTC](https://discuss.elastic.co/t/es-6-0-scripted-field-hourofday-with-timezone-error/107792 "2017-11-17T18:42:43Z")

</div>

Hello, First Post Here, I will try to do my best to make a clear presentation. I recently upgraded ELK on my UAT node from 5.6 to 6.0 OS : 2012r2 ; single node. ELK : 6.0.0 Java : 1.8.0\_151 I was running a painles…

---

## [Correct way to send data to ES cluster](https://discuss.elastic.co/t/correct-way-to-send-data-to-es-cluster/82102)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 5\
**Last updated:** [April 18, 2017, 7:30am UTC](https://discuss.elastic.co/t/correct-way-to-send-data-to-es-cluster/82102 "2017-04-18T07:30:20Z")

</div>

Hi, How to send logs to the ES if I have 1 master node and two data nodes? Should I send all logs to master or all to data or it doesnt matter? (I was unable to see such information in the master/data node manual) I a…

---

## [ECS and my personal fight](https://discuss.elastic.co/t/ecs-and-my-personal-fight/213875)

<div class="topic-metadata">

**Author:** [@pdeelman](https://discuss.elastic.co/u/pdeelman)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 10:41am UTC](https://discuss.elastic.co/t/ecs-and-my-personal-fight/213875 "2020-01-06T10:41:02Z")

</div>

Hi all, So recently we've started out our journey with Elastic 7.4.x and what a joy it has been. We wanted to implement ECS as it seems the right way forward. However Beats, logstash, kibana and elastic is not a combina…

---

## [Float and integer fields' datatypes](https://discuss.elastic.co/t/float-and-integer-fields-datatypes/96025)

<div class="topic-metadata">

**Author:** [@begemot](https://discuss.elastic.co/u/begemot)\
**Replies:** 4\
**Last updated:** [August 8, 2017, 9:53am UTC](https://discuss.elastic.co/t/float-and-integer-fields-datatypes/96025 "2017-08-08T09:53:30Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/current/number.html and https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-types.html point that the following numeric data types are suppor…

---

## [Fuzzy matching against multiple fields](https://discuss.elastic.co/t/fuzzy-matching-against-multiple-fields/4244)

<div class="topic-metadata">

**Author:** [@pcdinh](https://discuss.elastic.co/u/pcdinh)\
**Replies:** 2\
**Last updated:** [April 19, 2011, 8:30am UTC](https://discuss.elastic.co/t/fuzzy-matching-against-multiple-fields/4244 "2011-04-19T08:30:04Z")

</div>

Hi all, I want to make a fuzzy query that is expected to work on multiple fields. What is the correct way to do it? I made the following queries https://gist.github.com/923848 but it does not work Thanks pc…

---

## [\[terms\_set\] query does not support \[minimum\_should\_match\_script\]](https://discuss.elastic.co/t/terms-set-query-does-not-support-minimum-should-match-script/115732)

<div class="topic-metadata">

**Author:** [@jchannon](https://discuss.elastic.co/u/jchannon)\
**Replies:** 8\
**Last updated:** [February 2, 2018, 11:01pm UTC](https://discuss.elastic.co/t/terms-set-query-does-not-support-minimum-should-match-script/115732 "2018-02-02T23:01:27Z")

</div>

Copying the commands in this document and I get the error in the title when I login as a user and do a search. Anybody know why? https://www.elastic.co/blog/attribute-based-access-control-with-xpack?blade=tw&hulk=social …

---

## [Logstash certificate not trusted](https://discuss.elastic.co/t/logstash-certificate-not-trusted/32701)

<div class="topic-metadata">

**Author:** [@blackBagel](https://discuss.elastic.co/u/blackBagel)\
**Replies:** 6\
**Last updated:** [November 16, 2015, 7:47am UTC](https://discuss.elastic.co/t/logstash-certificate-not-trusted/32701 "2015-11-16T07:47:16Z")

</div>

Hey there, For some reason, I can't seem to be able to get my logstash to send trusted certificates to my secured elasticsearch cluster. My cluster is secured with HTTPS, plus PKI authentication for clients. I've follo…

---

## [Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[A-Za-z0-9\_-\], \[ \\\\t\\\\r\\\\n\]](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-a-za-z0-9-t-r-n/242613)

<div class="topic-metadata">

**Author:** [@abhijeet\_sinha](https://discuss.elastic.co/u/abhijeet_sinha)\
**Replies:** 3\
**Last updated:** [July 26, 2020, 4:40pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-a-za-z0-9-t-r-n/242613 "2020-07-26T16:40:59Z")

</div>

Hi, I'm trying to set up ELK stack and while setting up pipeline in logstash is gave me error: \[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :ex…

---

## [Error: Could not locate that index-pattern-field (id :@timestamp)](https://discuss.elastic.co/t/error-could-not-locate-that-index-pattern-field-id-timestamp/162861)

<div class="topic-metadata">

**Author:** [@shiveshabhishek](https://discuss.elastic.co/u/shiveshabhishek)\
**Replies:** 3\
**Last updated:** [January 7, 2019, 9:09am UTC](https://discuss.elastic.co/t/error-could-not-locate-that-index-pattern-field-id-timestamp/162861 "2019-01-07T09:09:04Z")

</div>

Hey, I am using Kibana 6.4.0 with Elasticsearch and getting the above error. I am using Kibana API to create index-pattern and making timeFieldName as @timestamp . Previously, everything was working fine with the abov…

---

## [Failed to load elasticsearch nodes after installing Shield](https://discuss.elastic.co/t/failed-to-load-elasticsearch-nodes-after-installing-shield/71316)

<div class="topic-metadata">

**Author:** [@rita](https://discuss.elastic.co/u/rita)\
**Replies:** 6\
**Last updated:** [January 18, 2017, 5:23am UTC](https://discuss.elastic.co/t/failed-to-load-elasticsearch-nodes-after-installing-shield/71316 "2017-01-18T05:23:02Z")

</div>

Hi, We have a Java application that connects to elasticSearch 2.4 (standalone) via Spring Data and Spring Boot (1.4.0). The connection settings are: spring.data.elasticsearch.cluster-name= spring.data.elasticsear…

---

## [Upload and parse exported .evtx files to Elasticsearch](https://discuss.elastic.co/t/upload-and-parse-exported-evtx-files-to-elasticsearch/175014)

<div class="topic-metadata">

**Author:** [@jwahlgren](https://discuss.elastic.co/u/jwahlgren)\
**Replies:** 8\
**Last updated:** [April 12, 2019, 4:36pm UTC](https://discuss.elastic.co/t/upload-and-parse-exported-evtx-files-to-elasticsearch/175014 "2019-04-12T16:36:55Z")

</div>

I have a use case scenario where I have to manually upload and parse Windows logs to Elasticsearch by using exported .evtx files. Splunk handles this fine with the "oneshot" command and I was wondering if anyone in this …

---

## [Not able to start Elasticsearch, no matter what I do](https://discuss.elastic.co/t/not-able-to-start-elasticsearch-no-matter-what-i-do/240847)

<div class="topic-metadata">

**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\
**Replies:** 7\
**Last updated:** [July 15, 2020, 2:15pm UTC](https://discuss.elastic.co/t/not-able-to-start-elasticsearch-no-matter-what-i-do/240847 "2020-07-15T14:15:42Z")

</div>

Running Ubuntu 20.04 on Oracle VM. Deployed two Ubuntu instances on AWS. I will list out all the steps I did. Please let me know where I have gone wrong. Copied the pem file to home directory cp ~/Downloads/TetraSear…

---

## [Configuration indices in Filebeat.yaml](https://discuss.elastic.co/t/configuration-indices-in-filebeat-yaml/105636)

<div class="topic-metadata">

**Author:** [@YaroslavN](https://discuss.elastic.co/u/YaroslavN)\
**Replies:** 4\
**Last updated:** [November 2, 2017, 7:30am UTC](https://discuss.elastic.co/t/configuration-indices-in-filebeat-yaml/105636 "2017-11-02T07:30:33Z")

</div>

Hi, I try to setup different index names depends on types specified in different file prospectors. For example: - input\_type: log paths: - /path\_to\_log/application1.log fields: type: "application1" field…

---

## [Elasticsearch ingest performance](https://discuss.elastic.co/t/elasticsearch-ingest-performance/23369)

<div class="topic-metadata">

**Author:** [@bparkison](https://discuss.elastic.co/u/bparkison)\
**Replies:** 8\
**Last updated:** [June 5, 2017, 7:01pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-performance/23369 "2017-06-05T19:01:37Z")

</div>

We are running a 10-node Elasticsearch 1.4.2 cluster, and getting cluster wide throughput of 18161 docs/sec, or about 18MB/sec. We'd like to improve this as much as we can, without impacting query times too much. …

---

## [Login to kibana via API](https://discuss.elastic.co/t/login-to-kibana-via-api/120101)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 3\
**Last updated:** [March 4, 2018, 1:45am UTC](https://discuss.elastic.co/t/login-to-kibana-via-api/120101 "2018-03-04T01:45:56Z")

</div>

Hi I have embedded kibana dashboards in my website by using iframe, now the issue is user has to login 2 times to see his/her data in kibana . one is to website and other is to kibana , i dont want to disable security f…

---

## [How to a emit a value for a runtime field of type geo\_point?](https://discuss.elastic.co/t/how-to-a-emit-a-value-for-a-runtime-field-of-type-geo-point/271889)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 8\
**Last updated:** [May 3, 2021, 12:50pm UTC](https://discuss.elastic.co/t/how-to-a-emit-a-value-for-a-runtime-field-of-type-geo-point/271889 "2021-05-03T12:50:00Z")

</div>

I am trying to execute a query for a geo\_point value with a runtime mapping, which according to the docs should work, but it is failing. keywords and long values work fine. For example... Where src.city.name is a keywor…

---

## [Logstash 8.19.14, 9.2.8, 9.3.3 Security Update (ESA-2026-29)](https://discuss.elastic.co/t/logstash-8-19-14-9-2-8-9-3-3-security-update-esa-2026-29/385816)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [April 8, 2026, 4:32pm UTC](https://discuss.elastic.co/t/logstash-8-19-14-9-2-8-9-3-3-security-update-esa-2026-29/385816 "2026-04-08T16:32:14Z")

</div>

Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write a…

---

## [Bluecoat proxySG log parsing](https://discuss.elastic.co/t/bluecoat-proxysg-log-parsing/55634)

<div class="topic-metadata">

**Author:** [@jpry](https://discuss.elastic.co/u/jpry)\
**Replies:** 8\
**Last updated:** [July 20, 2016, 1:59pm UTC](https://discuss.elastic.co/t/bluecoat-proxysg-log-parsing/55634 "2016-07-20T13:59:28Z")

</div>

Hi, I am facing a problem related to bluecoat proxySG logs; I have my bluecoat log files stored in a server running an instance of logstash, let's call it server 1. The input section of the configuration file is also …

---

## [Ldap authentication failure in es and kibana](https://discuss.elastic.co/t/ldap-authentication-failure-in-es-and-kibana/113922)

<div class="topic-metadata">

**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\
**Replies:** 6\
**Last updated:** [January 5, 2018, 9:58am UTC](https://discuss.elastic.co/t/ldap-authentication-failure-in-es-and-kibana/113922 "2018-01-05T09:58:49Z")

</div>

Hi, I am trying to setup LDAP user authentication.I added the below entries in config file. xpack: security: authc: realms: ldap1: type: ldap order: 0 url: "ldap://vm.sol.st:6888" bind\_dn: "cn=tan,ou=accounts,o…

---

## [Kind of inner join query in Elasticsearch...?](https://discuss.elastic.co/t/kind-of-inner-join-query-in-elasticsearch/10621)

<div class="topic-metadata">

**Author:** [@Marek\_Stachura](https://discuss.elastic.co/u/Marek_Stachura)\
**Replies:** 7\
**Last updated:** [February 8, 2013, 10:11am UTC](https://discuss.elastic.co/t/kind-of-inner-join-query-in-elasticsearch/10621 "2013-02-08T10:11:14Z")

</div>

Hi, please see following gist for sample index setup and sample queries: https://gist.github.com/4710731 I have set up two hotels with rooms - one hotel can have many rooms - classic 1 to many example. Hotel ma…

---

## [Trying to apply filter on scripted field](https://discuss.elastic.co/t/trying-to-apply-filter-on-scripted-field/117743)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 6\
**Last updated:** [February 13, 2018, 6:07pm UTC](https://discuss.elastic.co/t/trying-to-apply-filter-on-scripted-field/117743 "2018-02-13T18:07:15Z")

</div>

Hi team, previously I made a scripted field regarding folr calculcation time difference. Link to previous post: Elasticsearch giving warning for painless script time-diff: new Date().getTime() - doc\['@timestamp'\].val…

---

## [Are not allow to have the same field name in different elastic Types with differents types (string, nested json, number, ...) . What would be the solution with elastic search for this issue?](https://discuss.elastic.co/t/are-not-allow-to-have-the-same-field-name-in-different-elastic-types-with-differents-types-string-nested-json-number-what-would-be-the-solution-with-elastic-search-for-this-issue/73914)

<div class="topic-metadata">

**Author:** [@jjimenezcapi](https://discuss.elastic.co/u/jjimenezcapi)\
**Replies:** 6\
**Last updated:** [February 3, 2017, 11:29pm UTC](https://discuss.elastic.co/t/are-not-allow-to-have-the-same-field-name-in-different-elastic-types-with-differents-types-string-nested-json-number-what-would-be-the-solution-with-elastic-search-for-this-issue/73914 "2017-02-03T23:29:35Z")

</div>

We have to index standards FHIR document which depends on the FHIR resource the same field name could be a string or a nested json. We cannot change the name of the fields neither create an elastic index for each FHIR re…

---

## [Using the %{foo} syntax in ES output - template parameter](https://discuss.elastic.co/t/using-the-foo-syntax-in-es-output-template-parameter/75040)

<div class="topic-metadata">

**Author:** [@kariboe](https://discuss.elastic.co/u/kariboe)\
**Replies:** 5\
**Last updated:** [February 27, 2017, 8:53pm UTC](https://discuss.elastic.co/t/using-the-foo-syntax-in-es-output-template-parameter/75040 "2017-02-27T20:53:49Z")

</div>

Hello all, Using logstash 5.2 .. can I use the %{foo} syntax in the ES output template\_path variable? output { elasticsearch { hosts =\> \["xxxxxx:9200","xxxxxxxx:9200"\] index =\> "%{application}-%{…

---

## [Error when creating Index Template: composable template \[ \] template after composition is invalid](https://discuss.elastic.co/t/error-when-creating-index-template-composable-template-template-after-composition-is-invalid/327948)

<div class="topic-metadata">

**Author:** [@Mark\_S](https://discuss.elastic.co/u/Mark_S)\
**Replies:** 4\
**Last updated:** [March 18, 2023, 5:59pm UTC](https://discuss.elastic.co/t/error-when-creating-index-template-composable-template-template-after-composition-is-invalid/327948 "2023-03-18T17:59:31Z")

</div>

When creating an Index Template, I get this error: Error when creating Template: composable template template after composition is invalid I observe that: This error occurs only when I use the normal index template.…

---

## [Please give me a example about Logstash xml filter](https://discuss.elastic.co/t/please-give-me-a-example-about-logstash-xml-filter/126837)

<div class="topic-metadata">

**Author:** [@seungtae](https://discuss.elastic.co/u/seungtae)\
**Replies:** 4\
**Last updated:** [April 5, 2018, 5:29am UTC](https://discuss.elastic.co/t/please-give-me-a-example-about-logstash-xml-filter/126837 "2018-04-05T05:29:38Z")

</div>

Hello everyone. I'm a newbie using a Elastic Stack. I'd like to use xml filter, so I wish get a result format please give me a easy xml filter sample. My xml source is like this : \<?xml version=\\"1.0\\" encoding=\\"UTF-…

---

## [\[Elasticsearch Docker\] \[Errno 111\] Connection refused when connecting with python script](https://discuss.elastic.co/t/elasticsearch-docker-errno-111-connection-refused-when-connecting-with-python-script/243678)

<div class="topic-metadata">

**Author:** [@Stimmot](https://discuss.elastic.co/u/Stimmot)\
**Replies:** 5\
**Last updated:** [August 12, 2020, 8:13am UTC](https://discuss.elastic.co/t/elasticsearch-docker-errno-111-connection-refused-when-connecting-with-python-script/243678 "2020-08-12T08:13:51Z")

</div>

Hey, I got an issue with a dockerized elasticsearch cluster that I would like to connect with a simple python indexing script. After executing docker-compose up it brings up the cluster, kibana as well, but when it tri…

---

## [Missing field accessing 'path' accessing 'filebeat' (source:'filebeat.yml')](https://discuss.elastic.co/t/missing-field-accessing-path-accessing-filebeat-source-filebeat-yml/112849)

<div class="topic-metadata">

**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Replies:** 5\
**Last updated:** [January 9, 2018, 2:46pm UTC](https://discuss.elastic.co/t/missing-field-accessing-path-accessing-filebeat-source-filebeat-yml/112849 "2018-01-09T14:46:14Z")

</div>

Trying to work out why filebeat 6.1.0 is not shipping logs and ran the following from powershell .\\filebeat -v -e -d "config" and this was returned: PS D:\\Program Files\\filebeat-6.1.0\> .\\filebeat -v -e -d "config" fileb…

---

## [How to parse JSON data in Logstash](https://discuss.elastic.co/t/how-to-parse-json-data-in-logstash/116550)

<div class="topic-metadata">

**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\
**Replies:** 1\
**Last updated:** [January 23, 2018, 10:10am UTC](https://discuss.elastic.co/t/how-to-parse-json-data-in-logstash/116550 "2018-01-23T10:10:32Z")

</div>

I am parsing a .txt file which have json format values . When I try to parse the file using JSON filter the data is not getting parsed. Logstash.config input { beats{ port =\> 7360 codec =\> "json" } } …

---

## [Install Filebeat on Solaris 10](https://discuss.elastic.co/t/install-filebeat-on-solaris-10/106085)

<div class="topic-metadata">

**Author:** [@wako85](https://discuss.elastic.co/u/wako85)\
**Replies:** 5\
**Last updated:** [November 1, 2017, 8:16pm UTC](https://discuss.elastic.co/t/install-filebeat-on-solaris-10/106085 "2017-11-01T20:16:23Z")

</div>

Hello, Has anyone been able to install filebeat on solaris10 and 11? Kindly share how this has been done please Thanks, Wako

---

## [Sort script in painless](https://discuss.elastic.co/t/sort-script-in-painless/81817)

<div class="topic-metadata">

**Author:** [@zajca](https://discuss.elastic.co/u/zajca)\
**Replies:** 3\
**Last updated:** [April 10, 2017, 3:49pm UTC](https://discuss.elastic.co/t/sort-script-in-painless/81817 "2017-04-10T15:49:53Z")

</div>

I'm trying to sort results on query which is run using multiple indexes/type In some types I have nested 'revisions' which have title, in some I don't have revisions just title. Title has raw field. I just want to use…

---

## [Kibana dashboard not showing 'message' field](https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127)

<div class="topic-metadata">

**Author:** [@renansph](https://discuss.elastic.co/u/renansph)\
**Replies:** 4\
**Last updated:** [November 30, 2020, 11:07pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127 "2020-11-30T23:07:00Z")

</div>

Hi. I'm trying to add the 'message' field to a 'Data Table' in Kibana but i can't see the field. In the built-in dashboard from Postgresql filebeat i can see the field without problem: But when i try to build a new…

---

## [\[SOLVED\] Always see "\_dateparsefailure" in the logstash-plain.log](https://discuss.elastic.co/t/solved-always-see-dateparsefailure-in-the-logstash-plain-log/102488)

<div class="topic-metadata">

**Author:** [@praveenmak](https://discuss.elastic.co/u/praveenmak)\
**Replies:** 7\
**Last updated:** [October 5, 2017, 3:37pm UTC](https://discuss.elastic.co/t/solved-always-see-dateparsefailure-in-the-logstash-plain-log/102488 "2017-10-05T15:37:25Z")

</div>

Hello folks, Here is my script , I always see this line in the logstash-plain.log file. PLEASE HELP! \[2017-10-02T16:43:59,750\]\[DEBUG\]\[logstash.filters.date \] config LogStash::Filters::Date/@tag\_on\_failure = \["\_date…

---

## [How to handle "ef" and "num\_candidates" parameters in hnsw search](https://discuss.elastic.co/t/how-to-handle-ef-and-num-candidates-parameters-in-hnsw-search/318681)

<div class="topic-metadata">

**Author:** [@wole](https://discuss.elastic.co/u/wole)\
**Replies:** 1\
**Last updated:** [November 10, 2022, 6:23pm UTC](https://discuss.elastic.co/t/how-to-handle-ef-and-num-candidates-parameters-in-hnsw-search/318681 "2022-11-10T18:23:36Z")

</div>

Hi team, I am in the process of learning how to use ANN search (with HNSW) on Elasticsearch: in order to do so I am comparing the results I obtain with Elasticsearch and the faiss implementation of the algorithm (using …

---

## [Include\_global\_state in snapshot/restore](https://discuss.elastic.co/t/include-global-state-in-snapshot-restore/21158)

<div class="topic-metadata">

**Author:** [@mhughes](https://discuss.elastic.co/u/mhughes)\
**Replies:** 3\
**Last updated:** [July 5, 2016, 10:23pm UTC](https://discuss.elastic.co/t/include-global-state-in-snapshot-restore/21158 "2016-07-05T22:23:58Z")

</div>

Could someone detail exactly what is re(stored) when you set this value to true? Some subset of values returned by /\_cluster/state? Why would you ever want to set this to true? -- You received this message be…

---

## [Multiple Clusters: Replicating data to Another ES Cluster](https://discuss.elastic.co/t/multiple-clusters-replicating-data-to-another-es-cluster/67426)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 2\
**Last updated:** [December 5, 2016, 5:47am UTC](https://discuss.elastic.co/t/multiple-clusters-replicating-data-to-another-es-cluster/67426 "2016-12-05T05:47:35Z")

</div>

Hello, We are planning to use Elasticsearch on production and were wondering what is the suggested practice for HA (High Availability) or BCP (Business Continuity Plan). What is the recommended practice for handlin…

---

## [Kibana says field contains no data, but CURL query shows it does](https://discuss.elastic.co/t/kibana-says-field-contains-no-data-but-curl-query-shows-it-does/80057)

<div class="topic-metadata">

**Author:** [@gjws](https://discuss.elastic.co/u/gjws)\
**Replies:** 7\
**Last updated:** [March 31, 2017, 10:10am UTC](https://discuss.elastic.co/t/kibana-says-field-contains-no-data-but-curl-query-shows-it-does/80057 "2017-03-31T10:10:58Z")

</div>

Hi all, I have an ES 5.1 cluster running on AWS. Initially I only had CloudTrail data streaming to the cluster, and created several visualisations and dashboards, all of which work fine. I then started streaming additio…

---

## [ERROR\]\[logstash.outputs.elasticsearch\] Failed to install template. {:message=\>"Unexpected character ('\<' (code 60))](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-failed-to-install-template-message-unexpected-character-code-60/82049)

<div class="topic-metadata">

**Author:** [@yoshua](https://discuss.elastic.co/u/yoshua)\
**Replies:** 6\
**Last updated:** [April 18, 2017, 12:38pm UTC](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-failed-to-install-template-message-unexpected-character-code-60/82049 "2017-04-18T12:38:14Z")

</div>

Hi, In elastic 5.2.2 and localhost the attach .conf and .json srcipts tun ok But in elastic cloud trial 5.3 Don't work Any suggestion Thanks Luis Logstash output { elasticsearch { user =\> "elastic" …

---

## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-05)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-05/384524)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [January 13, 2026, 8:54pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-05/384524 "2026-01-13T20:54:48Z")

</div>

External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector (ESA-2026-05) External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-9…

---

## [Painless script to add value to array if its exists](https://discuss.elastic.co/t/painless-script-to-add-value-to-array-if-its-exists/174580)

<div class="topic-metadata">

**Author:** [@nicolas\_b](https://discuss.elastic.co/u/nicolas_b)\
**Replies:** 2\
**Last updated:** [March 29, 2019, 6:43pm UTC](https://discuss.elastic.co/t/painless-script-to-add-value-to-array-if-its-exists/174580 "2019-03-29T18:43:49Z")

</div>

Hello, i have an input with ( besides other data) 2 Arrays , event\_type and duration\_ms. i use logstash to update the document with this data. Because i don't want to loose the data from event\_type and duration, i just …

---

## [Autodiscover issue in kubernetes](https://discuss.elastic.co/t/autodiscover-issue-in-kubernetes/234930)

<div class="topic-metadata">

**Author:** [@malcolm666](https://discuss.elastic.co/u/malcolm666)\
**Replies:** 6\
**Last updated:** [June 9, 2020, 10:34pm UTC](https://discuss.elastic.co/t/autodiscover-issue-in-kubernetes/234930 "2020-06-09T22:34:46Z")

</div>

Hi! I have an issue with autodiscover in kubernetes. I have such yaml file: apiVersion: v1 kind: ConfigMap metadata: namespace: kube-logging name: filebeat-config labels: app: filebeat data: filebeat.yml: …

---

## [Failed to parse query error](https://discuss.elastic.co/t/failed-to-parse-query-error/45777)

<div class="topic-metadata">

**Author:** [@Jpuch](https://discuss.elastic.co/u/Jpuch)\
**Replies:** 2\
**Last updated:** [March 31, 2016, 7:50am UTC](https://discuss.elastic.co/t/failed-to-parse-query-error/45777 "2016-03-31T07:50:52Z")

</div>

Hi, I have this kind of data in my ES : i'd like to make more precise research by date : e;g; 2016-06-23 =\> when i try this, the datas don't match the data i took. =\> when i try with the exact time : e.g 2016-06-2…

---

## [NoNodeAvailableException - Java API](https://discuss.elastic.co/t/nonodeavailableexception-java-api/34313)

<div class="topic-metadata">

**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\
**Replies:** 6\
**Last updated:** [November 23, 2015, 4:25pm UTC](https://discuss.elastic.co/t/nonodeavailableexception-java-api/34313 "2015-11-23T16:25:05Z")

</div>

After connecting to the elasticsearch cluster through the Java API 2015-11-11 11:04:36.987 Getting ES Client... Nov 11, 2015 11:04:37 AM org.elasticsearch.plugins.PluginsService INFO: \[Elfqueen\] loaded , sites 201…

---

## [Data Import to Elasticsearch](https://discuss.elastic.co/t/data-import-to-elasticsearch/32789)

<div class="topic-metadata">

**Author:** [@gruccolo](https://discuss.elastic.co/u/gruccolo)\
**Replies:** 7\
**Last updated:** [October 23, 2015, 12:41pm UTC](https://discuss.elastic.co/t/data-import-to-elasticsearch/32789 "2015-10-23T12:41:01Z")

</div>

I'm trying to post data to elasticsearch with curl command. Works fine IF the data is json. But I'm trying to load plain text - specifically log4j logs. Keep getting {"error":"ElasticsearchParseException\[Failed to der…

---

## [Failure with receiving network data - CURLE\_RECV\_ERROR (56)](https://discuss.elastic.co/t/failure-with-receiving-network-data-curle-recv-error-56/169556)

<div class="topic-metadata">

**Author:** [@Dominique\_Fabre](https://discuss.elastic.co/u/Dominique_Fabre)\
**Replies:** 1\
**Last updated:** [February 27, 2019, 10:50am UTC](https://discuss.elastic.co/t/failure-with-receiving-network-data-curle-recv-error-56/169556 "2019-02-27T10:50:13Z")

</div>

Hi, I created a self-signed certificate like this openssl req -subj '/CN=logstash\_hostname/' -x509 -days 3652 -batch -nodes -newkey rsa:2048 -keyout logstash.key -out logstash.crt Then i set the logstash configuration…

---

## [Logstash index failed to create](https://discuss.elastic.co/t/logstash-index-failed-to-create/25882)

<div class="topic-metadata">

**Author:** [@trungmv](https://discuss.elastic.co/u/trungmv)\
**Replies:** 5\
**Last updated:** [July 21, 2015, 8:57am UTC](https://discuss.elastic.co/t/logstash-index-failed-to-create/25882 "2015-07-21T08:57:26Z")

</div>

Hello, I seen the problem when debug elasticsearch: \[2015-07-20 16:09:18,291\]\[INFO \]\[node \] \[Unseen\] started \[2015-07-20 16:09:18,324\]\[INFO \]\[gateway \] \[Unseen\] recovered \[2\] indi…

---

## [Term query with long value field](https://discuss.elastic.co/t/term-query-with-long-value-field/100182)

<div class="topic-metadata">

**Author:** [@seongwon](https://discuss.elastic.co/u/seongwon)\
**Replies:** 5\
**Last updated:** [September 13, 2017, 4:19am UTC](https://discuss.elastic.co/t/term-query-with-long-value-field/100182 "2017-09-13T04:19:33Z")

</div>

I tried to search using term query with long value, but the hits were only part of whole documents. Surprisingly, I tried to search using range query Instead of term query, then I got whole documents that I wanted. The…

---

## [Not starting Elasticsearch for some reason I can't undestand](https://discuss.elastic.co/t/not-starting-elasticsearch-for-some-reason-i-cant-undestand/177092)

<div class="topic-metadata">

**Author:** [@HikariNTB](https://discuss.elastic.co/u/HikariNTB)\
**Replies:** 3\
**Last updated:** [April 17, 2019, 8:59am UTC](https://discuss.elastic.co/t/not-starting-elasticsearch-for-some-reason-i-cant-undestand/177092 "2019-04-17T08:59:11Z")

</div>

Hi, I'm new with this software and I had installed 6.5.0 version months ago, but, when I tried to update I had problems, so I reset the CentOS 7 machine and try it again with this 7.0.0 version. I could make everything …

[Previous page](https://discuss.elastic.co/top.md?page=351&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=353&per_page=50&period=all)
