# Top **URL:** https://discuss.elastic.co/top.md?page=353&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 354 --- ## [Logstash if condition regex](https://discuss.elastic.co/t/logstash-if-condition-regex/223141)
**Author:** [@ash2](https://discuss.elastic.co/u/ash2)\ **Replies:** 4\ **Last updated:** [March 11, 2020, 8:00pm UTC](https://discuss.elastic.co/t/logstash-if-condition-regex/223141 "2020-03-11T20:00:29Z")
I want to write an if condition which takes regex for file path of window directory in logstash. Please help me with the regex pattern of C:\\Windows\\System32\\logs\\\*.log . e.g. output{ if \[log\]\[file\]\[path\] =~ /C:\\Windo… --- ## [Join between two indices is possible in elasticsearch](https://discuss.elastic.co/t/join-between-two-indices-is-possible-in-elasticsearch/212170)
**Author:** [@Amit\_Chauhan](https://discuss.elastic.co/u/Amit_Chauhan)\ **Replies:** 4\ **Last updated:** [December 19, 2019, 11:29am UTC](https://discuss.elastic.co/t/join-between-two-indices-is-possible-in-elasticsearch/212170 "2019-12-19T11:29:39Z")
I want to perform join between two indecis in elasticsearch. --- ## [Filebeat Configuration On excluding files](https://discuss.elastic.co/t/filebeat-configuration-on-excluding-files/157314)
**Author:** [@Miguel\_Leite](https://discuss.elastic.co/u/Miguel_Leite)\ **Replies:** 1\ **Last updated:** [November 20, 2018, 1:55pm UTC](https://discuss.elastic.co/t/filebeat-configuration-on-excluding-files/157314 "2018-11-20T13:55:38Z")
Hello guys! I've been trying to fetch some logs from a specific directory, with enumerous logs files... So I tried the following config: - type: log enabled: true paths: - /base/log/\*.log tags: \["root\_log"\] T… --- ## [How to Correlate Data?](https://discuss.elastic.co/t/how-to-correlate-data/128547)
**Author:** [@Christoph\_Kiefer](https://discuss.elastic.co/u/Christoph_Kiefer)\ **Replies:** 4\ **Last updated:** [April 27, 2018, 10:52am UTC](https://discuss.elastic.co/t/how-to-correlate-data/128547 "2018-04-27T10:52:40Z")
Dear All Are there ways to mimic somehow the following SQL statement in Kibana / ES? // SELECT \* FROM network\_table // WHERE connection\_id IN ( // SELECT connection\_id FROM connection\_table // WHERE user\_id = "k… --- ## [How does Elasticsearch process a query?](https://discuss.elastic.co/t/how-does-elasticsearch-process-a-query/191181)
**Author:** [@Sourav\_Paul](https://discuss.elastic.co/u/Sourav_Paul)\ **Replies:** 6\ **Last updated:** [July 20, 2019, 2:04pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-process-a-query/191181 "2019-07-20T14:04:45Z")
I want to have understanding on how search is being performed at Elasticsearch, when we place a query? I know, this is elaborative, but would appreciate if any expert shares deep insight on query processing. FYI, setup… --- ## [How to recover deleted index in elasticsearch](https://discuss.elastic.co/t/how-to-recover-deleted-index-in-elasticsearch/48631)
**Author:** [@dhanabalanb](https://discuss.elastic.co/u/dhanabalanb)\ **Replies:** 1\ **Last updated:** [May 2, 2016, 7:12am UTC](https://discuss.elastic.co/t/how-to-recover-deleted-index-in-elasticsearch/48631 "2016-05-02T07:12:10Z")
Hello, An update. When the data is pushed, it created the new index. But we would like to merge the old data. Thank you, Dhanabalan --- ## [Logstash agent stopped due to error "Don't know how to handle \`Java::JavaLang::IllegalStateException\` for \`PipelineAction::Create\\`"](https://discuss.elastic.co/t/logstash-agent-stopped-due-to-error-dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction-create-main/299168)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [March 9, 2022, 6:43am UTC](https://discuss.elastic.co/t/logstash-agent-stopped-due-to-error-dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction-create-main/299168 "2022-03-09T06:43:41Z")
Hi, I am new to ELK stack and have installed the three components on my SUSE linux 12 server. Running java 17.0.2. My logstash-plain.log repeats the java error for the agent which stops with below error: \[2022-03-09T0… --- ## [Multiple aggregation in one request vs one aggregation per request performance](https://discuss.elastic.co/t/multiple-aggregation-in-one-request-vs-one-aggregation-per-request-performance/81768)
**Author:** [@Mukolajko25](https://discuss.elastic.co/u/Mukolajko25)\ **Replies:** 2\ **Last updated:** [April 10, 2017, 10:13am UTC](https://discuss.elastic.co/t/multiple-aggregation-in-one-request-vs-one-aggregation-per-request-performance/81768 "2017-04-10T10:13:38Z")
Hi. Im using aggregations to compute data analysis. I use query to filter results and then a lot of aggregations to get data i want. For example "query": { "filtered": { "filter": { "bool": { "must": \[… --- ## [Want a Logstash Filter to Parse the Agent Field in Apache Access Log Files](https://discuss.elastic.co/t/want-a-logstash-filter-to-parse-the-agent-field-in-apache-access-log-files/28387)
**Author:** [@bhutchinson](https://discuss.elastic.co/u/bhutchinson)\ **Replies:** 5\ **Last updated:** [September 1, 2015, 7:49pm UTC](https://discuss.elastic.co/t/want-a-logstash-filter-to-parse-the-agent-field-in-apache-access-log-files/28387 "2015-09-01T19:49:04Z")
Windows 7 Elasticsearch v1.7.0 Logstash v1.5.4 Kibana v4.1.1 I need help defining a filter that I can use to parse the "Agent" Field in an Apache Access Log. My Apache Access Logs are using the Combined Apache Log F… --- ## [ES Aggregation as Logstash Input](https://discuss.elastic.co/t/es-aggregation-as-logstash-input/106927)
**Author:** [@chetan\_vartak](https://discuss.elastic.co/u/chetan_vartak)\ **Replies:** 0\ **Last updated:** [November 8, 2017, 8:04pm UTC](https://discuss.elastic.co/t/es-aggregation-as-logstash-input/106927 "2017-11-08T20:04:41Z")
I found 2 topics on this topic with no clear solution. I eventually got it working. How to get ES aggregation data as Logstash input? Aggregation Query possible input ES plugin I basically used the curl to output ES a… --- ## [Filebeats getsockopt: connection refused](https://discuss.elastic.co/t/filebeats-getsockopt-connection-refused/83032)
**Author:** [@mkorayem](https://discuss.elastic.co/u/mkorayem)\ **Replies:** 8\ **Last updated:** [April 25, 2017, 11:25am UTC](https://discuss.elastic.co/t/filebeats-getsockopt-connection-refused/83032 "2017-04-25T11:25:06Z")
Hi, I have an ELK setup which is working find for all filebeats, winlogbeats and other inputs But on one server Linux SERVERNAME 2.6.18-164.11.1.el5 #1 SMP Wed Jan 20 07:39:04 EST 2010 i686 i686 i386 GNU/Linux I do… --- ## [Logstash config with cisco asa and filebeat problem](https://discuss.elastic.co/t/logstash-config-with-cisco-asa-and-filebeat-problem/47542)
**Author:** [@navox19](https://discuss.elastic.co/u/navox19)\ **Replies:** 7\ **Last updated:** [April 19, 2016, 8:28pm UTC](https://discuss.elastic.co/t/logstash-config-with-cisco-asa-and-filebeat-problem/47542 "2016-04-19T20:28:41Z")
Hello I need to get a configuration code for the config file of logstash for filebeat and firewall cisco asa at the same time please i need help thanks --- ## [Metricbeat vs Telegraf](https://discuss.elastic.co/t/metricbeat-vs-telegraf/93365)
**Author:** [@mahadevaprasadap](https://discuss.elastic.co/u/mahadevaprasadap)\ **Replies:** 6\ **Last updated:** [July 20, 2017, 9:20pm UTC](https://discuss.elastic.co/t/metricbeat-vs-telegraf/93365 "2017-07-20T21:20:32Z")
I have a requirement to collect system and application metrics from servers. But before that any one please let me know Metricbeat vs Telegraf to understand better. --- ## [Kibana log in is currently disabled. administrators should consult the kibana logs for more details](https://discuss.elastic.co/t/kibana-log-in-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/110234)
**Author:** [@hoangkhac](https://discuss.elastic.co/u/hoangkhac)\ **Replies:** 1\ **Last updated:** [December 5, 2017, 7:14am UTC](https://discuss.elastic.co/t/kibana-log-in-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/110234 "2017-12-05T07:14:26Z")
I have installed x-pack on kibana and elasticsearch. Elasticsearch works fine but on the kibana i can not log in. This picture shows the condition: \[Screenshot from 2017-12-05 01-34-46\] I have changed my password and … --- ## [How is possible to combine indexes in a visualization?](https://discuss.elastic.co/t/how-is-possible-to-combine-indexes-in-a-visualization/64882)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 5\ **Last updated:** [November 4, 2016, 6:18am UTC](https://discuss.elastic.co/t/how-is-possible-to-combine-indexes-in-a-visualization/64882 "2016-11-04T06:18:23Z")
Hello, I have two different types of events: EventA has: idA data\_arrayA other fields EventB has: idA (the same as EventA) idB other fields I would like to obtain a visualization which shows: If idB is equa… --- ## [How to use a loop to keep adding terms to a boolQuery in JAVA](https://discuss.elastic.co/t/how-to-use-a-loop-to-keep-adding-terms-to-a-boolquery-in-java/65114)
**Author:** [@nisamponery](https://discuss.elastic.co/u/nisamponery)\ **Replies:** 2\ **Last updated:** [November 10, 2016, 3:17am UTC](https://discuss.elastic.co/t/how-to-use-a-loop-to-keep-adding-terms-to-a-boolquery-in-java/65114 "2016-11-10T03:17:15Z")
Hi, i am trying to see if whether i can use a for loop to to construct a boolQuery in order to dynamically add as many terms i want for example i have some Java code like this : QueryBuilder qb = QueryBui… --- ## [Kibana 4 and 5: sensible URL parameters](https://discuss.elastic.co/t/kibana-4-and-5-sensible-url-parameters/40145)
**Author:** [@kmoe](https://discuss.elastic.co/u/kmoe)\ **Replies:** 4\ **Last updated:** [March 10, 2017, 5:36am UTC](https://discuss.elastic.co/t/kibana-4-and-5-sensible-url-parameters/40145 "2017-03-10T05:36:40Z")
A typical URL in Kibana \> 3 has a lot of rison in it. This isn't easily human-readable or constructable (see https://discuss.elastic.co/t/kibana-4-x-discover-url-parameters-documentation/24346). I need to be able to prov… --- ## [Problems With configure Multi Pipelines Logtash V6.1.2](https://discuss.elastic.co/t/problems-with-configure-multi-pipelines-logtash-v6-1-2/121146)
**Author:** [@agonex](https://discuss.elastic.co/u/agonex)\ **Replies:** 8\ **Last updated:** [February 27, 2018, 2:28pm UTC](https://discuss.elastic.co/t/problems-with-configure-multi-pipelines-logtash-v6-1-2/121146 "2018-02-27T14:28:28Z")
Hi, I trying configure logstash with multipipelines and cannot makes works, i follow the documentations and is doesnt work... I comment the path.config in the logstash.yml and add the path's of the each pipeline in pipel… --- ## [Filter an array of objects to return only matching values](https://discuss.elastic.co/t/filter-an-array-of-objects-to-return-only-matching-values/136086)
**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\ **Replies:** 3\ **Last updated:** [June 15, 2018, 12:46pm UTC](https://discuss.elastic.co/t/filter-an-array-of-objects-to-return-only-matching-values/136086 "2018-06-15T12:46:46Z")
Hi, I have a set of data which are simply key value pairs, of type string. eg: key : Name1, Value : Value1 key : Name2, Value : Value2 key : Name3, Value : Value3 key : Name3, … --- ## [Kibana server is not ready yet with V 7.1](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-v-7-1/184701)
**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\ **Replies:** 4\ **Last updated:** [June 17, 2019, 7:51am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-v-7-1/184701 "2019-06-17T07:51:51Z")
Hi Team I know this topic is already there but still did not found valid solution or remedy for fix this issue I installed Elasticsearch and Kinaba 7.1.1 on CentOS 7 machine and configure elasticsearch.yml and kibana.… --- ## [Create Dynamic Index in Elasticsearch](https://discuss.elastic.co/t/create-dynamic-index-in-elasticsearch/106579)
**Author:** [@Ferdous\_Shibly](https://discuss.elastic.co/u/Ferdous_Shibly)\ **Replies:** 6\ **Last updated:** [November 7, 2017, 10:20pm UTC](https://discuss.elastic.co/t/create-dynamic-index-in-elasticsearch/106579 "2017-11-07T22:20:39Z")
I am trying to configure logstash to create dynamic indexes in Elasticsearch. Here are my configuration input{ kafka { bootstrap\_servers =\> \["192.168.56.2:9092,192.168.56.23:9092,192.168.56.24:9092"\] topics … --- ## [Upgrade from 6.2 to 6.4 gives "Authentication of \[elastic\] was terminated by realm \[reserved\]](https://discuss.elastic.co/t/upgrade-from-6-2-to-6-4-gives-authentication-of-elastic-was-terminated-by-realm-reserved/152845)
**Author:** [@yannis\_despotopoulos](https://discuss.elastic.co/u/yannis_despotopoulos)\ **Replies:** 6\ **Last updated:** [October 18, 2018, 11:18am UTC](https://discuss.elastic.co/t/upgrade-from-6-2-to-6-4-gives-authentication-of-elastic-was-terminated-by-realm-reserved/152845 "2018-10-18T11:18:36Z")
Hello, after upgrading to elastic 6.4 I am getting the following INFO and ERROR messages when elasticsearch starts. \[2018-10-17T14:51:08,064\]\[INFO \]\[o.e.x.s.a.AuthenticationService\] \[\_qmypXi\] Authentication of \[elastic\]… --- ## ["Successfully start Logstash API endpoint {:port =\>9600}" Stuck](https://discuss.elastic.co/t/successfully-start-logstash-api-endpoint-port-9600-stuck/170258)
**Author:** [@rb6](https://discuss.elastic.co/u/rb6)\ **Replies:** 4\ **Last updated:** [February 28, 2019, 10:13am UTC](https://discuss.elastic.co/t/successfully-start-logstash-api-endpoint-port-9600-stuck/170258 "2019-02-28T10:13:33Z")
Hi everyone, currently stuck trying to setup Logstash to accept iis logs. I'm on a windows 10 workstation with the logs being copied from external servers. At the moment when logstash is ran, it starts, then stops on the… --- ## [\[WARN \]\[o.e.c.r.a.DiskThresholdMonitor\] \[jSjxvbp\] flood stage disk watermark \[95%\] exceeded on](https://discuss.elastic.co/t/warn-o-e-c-r-a-diskthresholdmonitor-jsjxvbp-flood-stage-disk-watermark-95-exceeded-on/182373)
**Author:** [@idris](https://discuss.elastic.co/u/idris)\ **Replies:** 3\ **Last updated:** [May 23, 2019, 12:55pm UTC](https://discuss.elastic.co/t/warn-o-e-c-r-a-diskthresholdmonitor-jsjxvbp-flood-stage-disk-watermark-95-exceeded-on/182373 "2019-05-23T12:55:22Z")
i ve got a problem when i need to create an index for elasticsearch . Here is the error: {"error":{"root\_cause":\[{"type":"cluster\_block\_exception","reason":"blocked by: \[FORBIDDEN/12/index read-only / allow delete (ap… --- ## [Problem in DateRange query in C#](https://discuss.elastic.co/t/problem-in-daterange-query-in-c/135239)
**Author:** [@r1go](https://discuss.elastic.co/u/r1go)\ **Replies:** 7\ **Last updated:** [June 14, 2018, 12:34am UTC](https://discuss.elastic.co/t/problem-in-daterange-query-in-c/135239 "2018-06-14T00:34:48Z")
Hi there! im very new to Elastic Search and just need some help. Im trying to performe an complex query in c# with my own list of "Indexes", "Dateranges" and "Terms" as well but with out success.. result = client.Searc… --- ## [Unexpected error while indexing monitoring document](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document/86259)
**Author:** [@dodegaard](https://discuss.elastic.co/u/dodegaard)\ **Replies:** 3\ **Last updated:** [May 22, 2017, 4:51pm UTC](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document/86259 "2017-05-22T16:51:50Z")
Yesterday I installed X-Pack on an existing one node dev install on OSX (es 5.4.0, kibana 5.4.0, ls 5.4.0). Worked wonderfully until this morning my machine froze and had to hard boot it. After the reboot (ES was runni… --- ## [Webhook https , ignoring verification of certificate](https://discuss.elastic.co/t/webhook-https-ignoring-verification-of-certificate/25874)
**Author:** [@micjaesc](https://discuss.elastic.co/u/micjaesc)\ **Replies:** 6\ **Last updated:** [November 27, 2017, 11:27pm UTC](https://discuss.elastic.co/t/webhook-https-ignoring-verification-of-certificate/25874 "2017-11-27T23:27:25Z")
Hi, Is there any way to skip SSL validation when sending notification? Presently I have "actions": \[ { "id": "SLACK\_notify", "type": "webhook", … --- ## [All my indexes "read\_only\_allow\_delete" were set to true](https://discuss.elastic.co/t/all-my-indexes-read-only-allow-delete-were-set-to-true/181788)
**Author:** [@i333](https://discuss.elastic.co/u/i333)\ **Replies:** 1\ **Last updated:** [May 20, 2019, 10:51am UTC](https://discuss.elastic.co/t/all-my-indexes-read-only-allow-delete-were-set-to-true/181788 "2019-05-20T10:51:21Z")
My system almost ran out of disk space so elasticsearch put itself into that offline mode or whatever it is. But when I cleared up the disk space and restarted elasticsearch, it started fine but I found that all my index… --- ## [Kibana index pattern not saved](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 7\ **Last updated:** [February 15, 2021, 4:09pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321 "2021-02-15T16:09:29Z")
I have an ELK stack running on the Kubernetes cluster with security enabled. Everything is running fine and I am able to push data to an index. After logging in to Kibana as an admin user, and I to "Discover" it asks me … --- ## [Frequent timeout when using elasticsearch-py 8.1.0](https://discuss.elastic.co/t/frequent-timeout-when-using-elasticsearch-py-8-1-0/300831)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 7:51am UTC](https://discuss.elastic.co/t/frequent-timeout-when-using-elasticsearch-py-8-1-0/300831 "2022-03-29T07:51:23Z")
We have recently upgraded our Elasticsearch to 8.1.0. We have a some Python scripts which perform some searching/computations on data in the Elasticsearch cluster which use elasticsearch-py. Due to systems loads, during… --- ## [Java::oracle.jdbc.driver.OracleDriver not loaded in logstash-7.2.0](https://discuss.elastic.co/t/java-oracle-jdbc-driver-oracledriver-not-loaded-in-logstash-7-2-0/213522)
**Author:** [@Pramod\_Thakur](https://discuss.elastic.co/u/Pramod_Thakur)\ **Replies:** 1\ **Last updated:** [January 2, 2020, 4:02pm UTC](https://discuss.elastic.co/t/java-oracle-jdbc-driver-oracledriver-not-loaded-in-logstash-7-2-0/213522 "2020-01-02T16:02:08Z")
Hi, I am using logstash-7.2.0. I want to export data from oracle to ES. I am having following configuration. input { jdbc{ jdbc\_driver\_library =\> "C:/Pramod/rnd/ElasticSearch/logstash-7.2.0/ojdbc7.jar" jdbc\_driver\_cl… --- ## [How can I use "minimum\_should\_match" correctly?](https://discuss.elastic.co/t/how-can-i-use-minimum-should-match-correctly/284466)
**Author:** [@bigwang](https://discuss.elastic.co/u/bigwang)\ **Replies:** 6\ **Last updated:** [September 17, 2021, 2:44pm UTC](https://discuss.elastic.co/t/how-can-i-use-minimum-should-match-correctly/284466 "2021-09-17T14:44:19Z")
Are these two syntaxes not equivalent? first GET doc\_data/\_search { "query": { "match": { "title": { "query": "农村信用银行", "minimum\_should\_match": 2 } } } } second: GET doc\_data… --- ## [Ruby exception occurred: undefined method \`+' for nil:NilClass](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass/86437)
**Author:** [@Pierre\_Vincent\_Ledou](https://discuss.elastic.co/u/Pierre_Vincent_Ledou)\ **Replies:** 1\ **Last updated:** [May 19, 2017, 2:18pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass/86437 "2017-05-19T14:18:18Z")
I have the following ruby filter: mutate { convert =\> \["body\_size", "integer"\] convert =\> \["header\_size", "integer"\] } # Sum of body and header size ruby { code =\> "event.set('bytes', (event.get('body\_size') + ev… --- ## [How to fix " Failed starting 'elasticsearch-service-x64' service"](https://discuss.elastic.co/t/how-to-fix-failed-starting-elasticsearch-service-x64-service/177367)
**Author:** [@benqxf](https://discuss.elastic.co/u/benqxf)\ **Replies:** 3\ **Last updated:** [April 21, 2019, 10:30pm UTC](https://discuss.elastic.co/t/how-to-fix-failed-starting-elasticsearch-service-x64-service/177367 "2019-04-21T22:30:25Z")
Trying to install the Elasticsearch + logstash + Kibana + Beats in Windows 10 64bit --.1 Installed Java Jdk 12 ok. --.2 Downloaded 'Windows sha' from Download Elasticsearch | Elastic --.3 Unzipped elasticsearch-7.0.… --- ## [Kibana menus not working (showing blank screen)](https://discuss.elastic.co/t/kibana-menus-not-working-showing-blank-screen/107045)
**Author:** [@BMV](https://discuss.elastic.co/u/BMV)\ **Replies:** 6\ **Last updated:** [November 15, 2017, 1:19pm UTC](https://discuss.elastic.co/t/kibana-menus-not-working-showing-blank-screen/107045 "2017-11-15T13:19:14Z")
Hi all, I have set up a 3 node cluster with ES, Kibana and X-Pack (version 5.4.0) which is retrieving Winlogbeats (5.6.4) data from a few servers. I am experiencing an issue where only the "monitoring" menu in Kibana i… --- ## [Kibana 5.0.0: \_missing\_ is not working anymore](https://discuss.elastic.co/t/kibana-5-0-0--missing--is-not-working-anymore/64336)
**Author:** [@Marten](https://discuss.elastic.co/u/Marten)\ **Replies:** 4\ **Last updated:** [October 31, 2016, 9:32pm UTC](https://discuss.elastic.co/t/kibana-5-0-0--missing--is-not-working-anymore/64336 "2016-10-31T21:32:38Z")
Hi, When using Kibana 4.6 I used \_missing\_:@somefield to find documents with an empty value in @somefield. In Kibana 5.0.0 this doesn't work anymore. I can't find anywhere that this was changed or how to search for emt… --- ## [Dynamic index name](https://discuss.elastic.co/t/dynamic-index-name/2490)
**Author:** [@maran](https://discuss.elastic.co/u/maran)\ **Replies:** 3\ **Last updated:** [June 1, 2017, 1:08pm UTC](https://discuss.elastic.co/t/dynamic-index-name/2490 "2017-06-01T13:08:43Z")
Hi! I'm trying to dynamically set index names with if-cases in my logstash.conf file. Basically if file name is A then indexname should be A. But for some reason my variable (type) is not set or accessible when I get t… --- ## [Set "number\_of\_replicas" to 0 permanently](https://discuss.elastic.co/t/set-number-of-replicas-to-0-permanently/356754)
**Author:** [@DaddyYusk](https://discuss.elastic.co/u/DaddyYusk)\ **Replies:** 6\ **Last updated:** [April 4, 2024, 11:24pm UTC](https://discuss.elastic.co/t/set-number-of-replicas-to-0-permanently/356754 "2024-04-04T23:24:40Z")
Hi, Because of my current Elasticsearch cluster deployment (only one Hot node, not best practice, I know), I need to set the "number\_of\_replicas" of all my already an newly created indexes to 0. As I use a Fleet Server… --- ## [Read only user setup](https://discuss.elastic.co/t/read-only-user-setup/588)
**Author:** [@rawill](https://discuss.elastic.co/u/rawill)\ **Replies:** 2\ **Last updated:** [May 13, 2015, 8:20pm UTC](https://discuss.elastic.co/t/read-only-user-setup/588 "2015-05-13T20:20:40Z")
I'm attempting to setup a read only user, but keep running into this error: Error: Unable to check for Kibana index ".kibana". When attempting to use these read only userids with Kibana. Userids that I have associated … --- ## [Get 403 error response while trying to open http://localhost:5601/ from local development environment](https://discuss.elastic.co/t/get-403-error-response-while-trying-to-open-http-localhost-5601-from-local-development-environment/184069)
**Author:** [@seraphjiang](https://discuss.elastic.co/u/seraphjiang)\ **Replies:** 1\ **Last updated:** [June 4, 2019, 12:16am UTC](https://discuss.elastic.co/t/get-403-error-response-while-trying-to-open-http-localhost-5601-from-local-development-environment/184069 "2019-06-04T00:16:51Z")
I'm trying to follow wiki https://github.com/elastic/kibana/blob/7.1/CONTRIBUTING.md#setting-up-your-development-environment to setup kibana development environment i'm able to run elasticsearch locally with yarn es sn… --- ## [Ingest processor failure when accessing nested field](https://discuss.elastic.co/t/ingest-processor-failure-when-accessing-nested-field/144194)
**Author:** [@bukem](https://discuss.elastic.co/u/bukem)\ **Replies:** 8\ **Last updated:** [August 14, 2018, 9:57am UTC](https://discuss.elastic.co/t/ingest-processor-failure-when-accessing-nested-field/144194 "2018-08-14T09:57:26Z")
Hello, I'm facing the following problem: accessing nested field within ingest processor fails with an error. Simple example on how to reproduce the problem: Create 'nest\_test' index with mapping containing nested fie… --- ## [Issue with NoNodeAvailableException\[None of the configured nodes are available:](https://discuss.elastic.co/t/issue-with-nonodeavailableexception-none-of-the-configured-nodes-are-available/57314)
**Author:** [@cachito](https://discuss.elastic.co/u/cachito)\ **Replies:** 8\ **Last updated:** [August 8, 2016, 9:28am UTC](https://discuss.elastic.co/t/issue-with-nonodeavailableexception-none-of-the-configured-nodes-are-available/57314 "2016-08-08T09:28:08Z")
Hi I am developing my first Java client to access ES but got the NoNodeAvailableException\[None of the configured nodes are available: error when try it and the issue is driving me crazy. What I am doing is: Settin… --- ## [Count Distinct field query](https://discuss.elastic.co/t/count-distinct-field-query/93661)
**Author:** [@takcy1980](https://discuss.elastic.co/u/takcy1980)\ **Replies:** 1\ **Last updated:** [July 18, 2017, 9:30pm UTC](https://discuss.elastic.co/t/count-distinct-field-query/93661 "2017-07-18T21:30:30Z")
Hi I would like to find out how I can do a count distinct on a field where some other field match the condition. In SQL I do run the below code and I do get the result I want. SELECT COUNT(Distinct RevisionNumber) FRO… --- ## [Run curl/shell script with arguments in Logstash config file](https://discuss.elastic.co/t/run-curl-shell-script-with-arguments-in-logstash-config-file/156599)
**Author:** [@dx123](https://discuss.elastic.co/u/dx123)\ **Replies:** 0\ **Last updated:** [November 14, 2018, 8:04am UTC](https://discuss.elastic.co/t/run-curl-shell-script-with-arguments-in-logstash-config-file/156599 "2018-11-14T08:04:52Z")
Here I have a bash shell script containing a curl command that runs an Elasticsearch query. curl -XGET "http://localhost:9200/index\_name/\_search?" -H 'Content-Type: application/json' -d' { "size": 0, "aggs": { "… --- ## [Send mail failed with "UnsupportedDataTypeException"](https://discuss.elastic.co/t/send-mail-failed-with-unsupporteddatatypeexception/33144)
**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\ **Replies:** 7\ **Last updated:** [December 21, 2015, 10:36am UTC](https://discuss.elastic.co/t/send-mail-failed-with-unsupporteddatatypeexception/33144 "2015-12-21T10:36:36Z")
ES log: \[2015-10-28 19:01:01,161\]\[ERROR\]\[watcher.actions.email \] \[crawler\_service\_001\] failed to execute action \[error-watch/alert\_email\] javax.mail.MessagingException: failed to send email with subject \[some error\]… --- ## [Clear deleted docs](https://discuss.elastic.co/t/clear-deleted-docs/22652)
**Author:** [@Christophe\_Rosko](https://discuss.elastic.co/u/Christophe_Rosko)\ **Replies:** 5\ **Last updated:** [November 6, 2015, 10:20pm UTC](https://discuss.elastic.co/t/clear-deleted-docs/22652 "2015-11-06T22:20:57Z")
Hi ! I have many deleted documents in my index and I'd like to clear them so that df/ttf statistics aren't skewed by these deleted docs. I try the following command : curl -XPOST ' http://localhost:9200/myindex… --- ## [Math.round in painless script](https://discuss.elastic.co/t/math-round-in-painless-script/223607)
**Author:** [@David\_Han](https://discuss.elastic.co/u/David_Han)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 12:15pm UTC](https://discuss.elastic.co/t/math-round-in-painless-script/223607 "2020-03-19T12:15:47Z")
I have to create a aggs like below: 'conversions\_rate' =\> \[ 'avg' =\> \[ 'field' =\> 'conversions\_rate', 'script' =\> \[ 'lang' =\> 'painless', 'inline' =\> 'Math.round(\_value \* params.ten)', 'params' =\> \[ 'ten' =\> 100 … --- ## [Where to set destructive\_requires\_name](https://discuss.elastic.co/t/where-to-set-destructive-requires-name/84821)
**Author:** [@snigdha](https://discuss.elastic.co/u/snigdha)\ **Replies:** 4\ **Last updated:** [May 6, 2017, 2:26pm UTC](https://discuss.elastic.co/t/where-to-set-destructive-requires-name/84821 "2017-05-06T14:26:28Z")
Hi All, I am new to Elasticsearch. I am currently trying to disable delete\* and I read in the documentation that in order to do that I need to set destructive\_requires\_name to true. I wrote the following code using Nes… --- ## [Possible to run modules and pipelines on one server?](https://discuss.elastic.co/t/possible-to-run-modules-and-pipelines-on-one-server/108496)
**Author:** [@dison4linux](https://discuss.elastic.co/u/dison4linux)\ **Replies:** 7\ **Last updated:** [January 22, 2018, 7:01pm UTC](https://discuss.elastic.co/t/possible-to-run-modules-and-pipelines-on-one-server/108496 "2018-01-22T19:01:28Z")
I've seen several mentions to "..when 6.0 comes out you can do multiple pipelines" but can we use modules and pipelines? I successfully enabled the netflow module but now when Logstash starts up I see this message print… --- ## [Filter by \_version and show \_version in elasticsearch query](https://discuss.elastic.co/t/filter-by--version-and-show--version-in-elasticsearch-query/22024)
**Author:** [@es5z](https://discuss.elastic.co/u/es5z)\ **Replies:** 2\ **Last updated:** [February 16, 2015, 5:48pm UTC](https://discuss.elastic.co/t/filter-by--version-and-show--version-in-elasticsearch-query/22024 "2015-02-16T17:48:01Z")
How can I filter by the \`\_version\` field in elasticsearch? I tried to run the following query (using YAML instead of JSON) to get documents with \_version greater than or equal to 4, but nothing is getting returned ev… [Previous page](https://discuss.elastic.co/top.md?page=352&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=354&per_page=50&period=all)