# Top

**URL:** https://discuss.elastic.co/top.md?page=356&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 357

---

## [Mysterious 'offset' and 'count' fields](https://discuss.elastic.co/t/mysterious-offset-and-count-fields/48981)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 3\
**Last updated:** [May 2, 2016, 5:18pm UTC](https://discuss.elastic.co/t/mysterious-offset-and-count-fields/48981 "2016-05-02T17:18:39Z")

</div>

I'm getting these two fields in my data but I don't know where they're coming from. Are they put there by filebeat? How can I get rid of them?

---

## [Apply different tags for different terms in highlight API](https://discuss.elastic.co/t/apply-different-tags-for-different-terms-in-highlight-api/144077)

<div class="topic-metadata">

**Author:** [@dobariya](https://discuss.elastic.co/u/dobariya)\
**Replies:** 0\
**Last updated:** [August 13, 2018, 6:30am UTC](https://discuss.elastic.co/t/apply-different-tags-for-different-terms-in-highlight-api/144077 "2018-08-13T06:30:55Z")

</div>

We have a requirement to highlight different terms with the different color. To achieve the same could you please let us know if Elastic search Highlight API can provide multiple tags for different terms. For example, w…

---

## [Filebeat locks application logs on Windows](https://discuss.elastic.co/t/filebeat-locks-application-logs-on-windows/56307)

<div class="topic-metadata">

**Author:** [@cisconetgineer](https://discuss.elastic.co/u/cisconetgineer)\
**Replies:** 7\
**Last updated:** [July 26, 2016, 6:38pm UTC](https://discuss.elastic.co/t/filebeat-locks-application-logs-on-windows/56307 "2016-07-26T18:38:06Z")

</div>

Hi, I am testing filebeat and it locks application files on Windows 2008. I tried version 1.23, 5.0.0 alpha4 and 5.0.0 apha5. All of them exhibits the same issue. Here are stepsI tested. 1. start filebeat, start appl…

---

## [Split and use the term in sub operation in Timelion](https://discuss.elastic.co/t/split-and-use-the-term-in-sub-operation-in-timelion/117083)

<div class="topic-metadata">

**Author:** [@anthony-o](https://discuss.elastic.co/u/anthony-o)\
**Replies:** 8\
**Last updated:** [January 31, 2018, 3:17pm UTC](https://discuss.elastic.co/t/split-and-use-the-term-in-sub-operation-in-timelion/117083 "2018-01-31T15:17:44Z")

</div>

Here is my index structure: type, from\_host, to\_host, times The "type" field can be either "error" or "valid". I would like to display distinct lines in Timelion corresponding to top 5 "from\_host" keywords, and the y v…

---

## [Unable to delete data older than 7 days from elastic search](https://discuss.elastic.co/t/unable-to-delete-data-older-than-7-days-from-elastic-search/130452)

<div class="topic-metadata">

**Author:** [@pratsy](https://discuss.elastic.co/u/pratsy)\
**Replies:** 5\
**Last updated:** [May 4, 2018, 7:21am UTC](https://discuss.elastic.co/t/unable-to-delete-data-older-than-7-days-from-elastic-search/130452 "2018-05-04T07:21:35Z")

</div>

Unable to delete data older than 7 days from elasticsearch using following command curl -XDELETE 'http://localhost:9200/\*' -d ' { "query": { "range": { "@timestamp": { "lt": "now-7d" } } …

---

## [Why clear method in org.apache.lucene.search.LRUQueryCache not clear uniqueQueries](https://discuss.elastic.co/t/why-clear-method-in-org-apache-lucene-search-lruquerycache-not-clear-uniquequeries/57584)

<div class="topic-metadata">

**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\
**Replies:** 3\
**Last updated:** [August 10, 2016, 9:11am UTC](https://discuss.elastic.co/t/why-clear-method-in-org-apache-lucene-search-lruquerycache-not-clear-uniquequeries/57584 "2016-08-10T09:11:34Z")

</div>

the method is below: public synchronized void clear() { this.cache.clear(); this.mostRecentlyUsedQueries.clear(); this.onClear(); } my question is: why not clear uniqueQueries? since I will make IndicesQue…

---

## [Reindex changing types](https://discuss.elastic.co/t/reindex-changing-types/102808)

<div class="topic-metadata">

**Author:** [@Alejandro\_Arrojo](https://discuss.elastic.co/u/Alejandro_Arrojo)\
**Replies:** 4\
**Last updated:** [October 5, 2017, 8:56am UTC](https://discuss.elastic.co/t/reindex-changing-types/102808 "2017-10-05T08:56:42Z")

</div>

Hello! It's possible to reindex, changing datatype of a field? Or it's not possible and I have to delete bad fields and reindex without them? Thanks so much.

---

## [Reindexing daily indices and maintaining the same index name](https://discuss.elastic.co/t/reindexing-daily-indices-and-maintaining-the-same-index-name/73603)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 3\
**Last updated:** [February 2, 2017, 5:45pm UTC](https://discuss.elastic.co/t/reindexing-daily-indices-and-maintaining-the-same-index-name/73603 "2017-02-02T17:45:26Z")

</div>

Hi, We're using reindex from remote in order to pull indices from a 1.7.2 cluster to a 5.1.2 cluster. We combined the guidance on how to use painless for this scenario and the reindex from remote option from this arti…

---

## [Restore error (repository\_missing\_exception)](https://discuss.elastic.co/t/restore-error-repository-missing-exception/65226)

<div class="topic-metadata">

**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\
**Replies:** 5\
**Last updated:** [November 7, 2016, 2:42pm UTC](https://discuss.elastic.co/t/restore-error-repository-missing-exception/65226 "2016-11-07T14:42:35Z")

</div>

Hi, I did snapshot and restore on CentOS platform with ES 2.4.1. After I installed ES 5.0.0 on windows10. I'm trying to load data: POST /\_snapshot/elastic\_titub\_yedek/snapshot\_elastic\_titub\_yedek/\_restore { "indi…

---

## [Filebeat logs unauthorized when addressing old namespaces](https://discuss.elastic.co/t/filebeat-logs-unauthorized-when-addressing-old-namespaces/243220)

<div class="topic-metadata">

**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\
**Replies:** 7\
**Last updated:** [August 3, 2020, 2:31pm UTC](https://discuss.elastic.co/t/filebeat-logs-unauthorized-when-addressing-old-namespaces/243220 "2020-08-03T14:31:48Z")

</div>

Hi elastic team, I am currently struggling with the following issue. First I am trying to replace fluentd with filebeat in our kubernetes cluster for log collection. So far first tests are looking promessing, since I …

---

## [Delete by query , refresh=wait\_for support?](https://discuss.elastic.co/t/delete-by-query-refresh-wait-for-support/154118)

<div class="topic-metadata">

**Author:** [@Grievoushead](https://discuss.elastic.co/u/Grievoushead)\
**Replies:** 8\
**Last updated:** [November 7, 2018, 12:06pm UTC](https://discuss.elastic.co/t/delete-by-query-refresh-wait-for-support/154118 "2018-11-07T12:06:44Z")

</div>

When I call delete\_by\_query with ?refresh=wait\_for, got this warning: \_delete\_by\_query/?refresh=wait\_for\] returned 1 warnings: \[299 Elasticsearch-5.4.1-2cfe0df "Expected a boolean \[true/false\] for request parameter \[ref…

---

## [Nvidiagpubeat: Monitor Nvidia GPUs using this beat](https://discuss.elastic.co/t/nvidiagpubeat-monitor-nvidia-gpus-using-this-beat/79644)

<div class="topic-metadata">

**Author:** [@deepujain](https://discuss.elastic.co/u/deepujain)\
**Replies:** 3\
**Last updated:** [March 23, 2017, 4:26pm UTC](https://discuss.elastic.co/t/nvidiagpubeat-monitor-nvidia-gpus-using-this-beat/79644 "2017-03-23T16:26:49Z")

</div>

nvidiagpubeat can be used to monitor NVIDIA GPUs. nvidiagpubeat.yml has two configurations query By default, it can query "utilization.gpu,utilization.memory,memory.total,memory.free,memory.used,temperature.gpu,p…

---

## [How to subtract 2 metrics and show the value as 3rd metrics?](https://discuss.elastic.co/t/how-to-subtract-2-metrics-and-show-the-value-as-3rd-metrics/205136)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 7\
**Last updated:** [October 29, 2019, 2:26pm UTC](https://discuss.elastic.co/t/how-to-subtract-2-metrics-and-show-the-value-as-3rd-metrics/205136 "2019-10-29T14:26:10Z")

</div>

I have 2 metrics showing my application disconnects. 1 is the total disconnects of my application and the 2nd is manual disconnects performed by users. The difference between the 2 is expected to be "System/Unknown Disco…

---

## [How to handle data that causes failure while indexing from spark to ES](https://discuss.elastic.co/t/how-to-handle-data-that-causes-failure-while-indexing-from-spark-to-es/99857)

<div class="topic-metadata">

**Author:** [@bricheet](https://discuss.elastic.co/u/bricheet)\
**Replies:** 1\
**Last updated:** [September 12, 2017, 3:34pm UTC](https://discuss.elastic.co/t/how-to-handle-data-that-causes-failure-while-indexing-from-spark-to-es/99857 "2017-09-12T15:34:59Z")

</div>

I'm using pyspark to index 8 TB of data into an elasticsearch index. My code looks something like this: df.write.format("org.elasticsearch.spark.sql").mode( 'append' ).option( "es.mapping.id", "id" ).options( …

---

## [Simple log processing without Logstash](https://discuss.elastic.co/t/simple-log-processing-without-logstash/73249)

<div class="topic-metadata">

**Author:** [@John16](https://discuss.elastic.co/u/John16)\
**Replies:** 6\
**Last updated:** [February 4, 2017, 1:35pm UTC](https://discuss.elastic.co/t/simple-log-processing-without-logstash/73249 "2017-02-04T13:35:45Z")

</div>

Hello, I want to use filebeat to send logs to elasticsearch with simple structure (date in custom format, http code, processing time in ms, query text). So log line should be parsed and these data should go to differen…

---

## [Cannot read properties of undefined (reading 'statusCode')](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-statuscode/285141)

<div class="topic-metadata">

**Author:** [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 7:25am UTC](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-statuscode/285141 "2021-09-28T07:25:03Z")

</div>

Hello everyone currently iam using kibana 7.6.1..i have a index with more than 4k fields and what i need to do is to refresh field list regarding our developer created new fields ..when i do that it takes long time and…

---

## [My /var/log/message is full of kibana's logs](https://discuss.elastic.co/t/my-var-log-message-is-full-of-kibanas-logs/163541)

<div class="topic-metadata">

**Author:** [@lokylax](https://discuss.elastic.co/u/lokylax)\
**Replies:** 2\
**Last updated:** [January 10, 2019, 7:14am UTC](https://discuss.elastic.co/t/my-var-log-message-is-full-of-kibanas-logs/163541 "2019-01-10T07:14:07Z")

</div>

Hi, My /var/log/message is full of kibana's logs. It's impossible to find the line I want. Is it possible to prevent kibana from logging here ? Thanks. Last lines of my /var/log/message 2019-01-09T14:25:19+01:00 host…

---

## [Slack action for elastic cloud](https://discuss.elastic.co/t/slack-action-for-elastic-cloud/196719)

<div class="topic-metadata">

**Author:** [@Denis.topa](https://discuss.elastic.co/u/Denis.topa)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 2:34pm UTC](https://discuss.elastic.co/t/slack-action-for-elastic-cloud/196719 "2019-08-28T14:34:35Z")

</div>

Hi, How to configure slack account for Elasticsearch 7.3 under the elastic.co cloud. Based on documentation editing elasticsearch.yml is disabled in versions higher than 7. In the documentation is specified " You can …

---

## [How to get Elasticsearch running on port 9200?](https://discuss.elastic.co/t/how-to-get-elasticsearch-running-on-port-9200/22981)

<div class="topic-metadata">

**Author:** [@kelnrluierhfeulne](https://discuss.elastic.co/u/kelnrluierhfeulne)\
**Replies:** 3\
**Last updated:** [April 1, 2015, 9:53pm UTC](https://discuss.elastic.co/t/how-to-get-elasticsearch-running-on-port-9200/22981 "2015-04-01T21:53:19Z")

</div>

What do you do to get Elasticsearch running on port 9200? Thanks!! -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiv…

---

## [Daily Average Count visualization help](https://discuss.elastic.co/t/daily-average-count-visualization-help/160831)

<div class="topic-metadata">

**Author:** [@Inammathe\_Inna](https://discuss.elastic.co/u/Inammathe_Inna)\
**Replies:** 2\
**Last updated:** [December 14, 2018, 4:45am UTC](https://discuss.elastic.co/t/daily-average-count-visualization-help/160831 "2018-12-14T04:45:56Z")

</div>

Hi guys, I've only just started visualizing some data for my work and I was hoping someone could advise how to best go about this request: For each error code there is a comparison count of Current Day errors to dail…

---

## [Filebeat - last handler in the pipeline did not handle the exception](https://discuss.elastic.co/t/filebeat-last-handler-in-the-pipeline-did-not-handle-the-exception/147202)

<div class="topic-metadata">

**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\
**Replies:** 3\
**Last updated:** [September 4, 2018, 6:42pm UTC](https://discuss.elastic.co/t/filebeat-last-handler-in-the-pipeline-did-not-handle-the-exception/147202 "2018-09-04T18:42:48Z")

</div>

I am getting below error with filebeat/logstash. \[2018-09-04T12:05:09,164\]\[WARN \]\[io.netty.channel.DefaultChannelPipeline\] An exceptionCaught() event was fired, and it reached at the tail of the pipeline. It usually mea…

---

## [Apache NiFI to Logstash](https://discuss.elastic.co/t/apache-nifi-to-logstash/121066)

<div class="topic-metadata">

**Author:** [@sm00thindian](https://discuss.elastic.co/u/sm00thindian)\
**Replies:** 3\
**Last updated:** [February 22, 2018, 4:12pm UTC](https://discuss.elastic.co/t/apache-nifi-to-logstash/121066 "2018-02-22T16:12:49Z")

</div>

I am looking to securely send data from my dynamic workflow tool Apache NiFi to Logstash. What are effective methods of accomplishing this? -krw

---

## [Very small ES instance consuming too much memory](https://discuss.elastic.co/t/very-small-es-instance-consuming-too-much-memory/4926)

<div class="topic-metadata">

**Author:** [@Rubish\_Gupta](https://discuss.elastic.co/u/Rubish_Gupta)\
**Replies:** 7\
**Last updated:** [July 25, 2011, 4:07pm UTC](https://discuss.elastic.co/t/very-small-es-instance-consuming-too-much-memory/4926 "2011-07-25T16:07:28Z")

</div>

Hi, I have a small application which is growing slowly. I only index user and posts data in ES for now. I haven't configured shrads/index, so probably it is using default of 5 shards/index. I have ~6k users and now.…

---

## [XML Dynamic Parsing](https://discuss.elastic.co/t/xml-dynamic-parsing/126957)

<div class="topic-metadata">

**Author:** [@AloysiusParedes](https://discuss.elastic.co/u/AloysiusParedes)\
**Replies:** 8\
**Last updated:** [April 6, 2018, 8:24am UTC](https://discuss.elastic.co/t/xml-dynamic-parsing/126957 "2018-04-06T08:24:51Z")

</div>

Still new to ELK. I'd like to parse an XML with Logstash and output to Elasticsearch. XML: \<mydata\> \<data1\>O\</data1\> \<data2\>false\</data2\> . . . \<data3 REPEATINGTYPE="Pag…

---

## [Unable to import to ES / Error occurred sending a bulk request to Elasticsearch](https://discuss.elastic.co/t/unable-to-import-to-es-error-occurred-sending-a-bulk-request-to-elasticsearch/197565)

<div class="topic-metadata">

**Author:** [@Alexandre.Bernier](https://discuss.elastic.co/u/Alexandre.Bernier)\
**Replies:** 2\
**Last updated:** [September 3, 2019, 2:44pm UTC](https://discuss.elastic.co/t/unable-to-import-to-es-error-occurred-sending-a-bulk-request-to-elasticsearch/197565 "2019-09-03T14:44:03Z")

</div>

Hello community, I'm desperately trying to import data into Elasticsearch with Logstash from MS SQL Server 2012R2 but it fails all the time with the following error: \[2019-08-30T10:57:11,347\]\[ERROR\]\[logstash.outputs.el…

---

## [Convert string to integer](https://discuss.elastic.co/t/convert-string-to-integer/277915)

<div class="topic-metadata">

**Author:** [@ANKITA\_SAHA](https://discuss.elastic.co/u/ANKITA_SAHA)\
**Replies:** 3\
**Last updated:** [July 9, 2021, 4:31pm UTC](https://discuss.elastic.co/t/convert-string-to-integer/277915 "2021-07-09T16:31:07Z")

</div>

Hello everyone! I need help for converting a string data to integer value. I have an 'Hours' column which consist of numeric data but kibana is reading as string as a result when i try to sort the axis it does not sort…

---

## ["Attempted to resurrect connection to dead ES instance, but got an error." Error, it worked before. What is wrong now?](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-error-it-worked-before-what-is-wrong-now/175721)

<div class="topic-metadata">

**Author:** [@Tony\_Pham](https://discuss.elastic.co/u/Tony_Pham)\
**Replies:** 4\
**Last updated:** [April 7, 2019, 10:25pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-error-it-worked-before-what-is-wrong-now/175721 "2019-04-07T22:25:14Z")

</div>

Hello, I know that the device which is host to Logstash can ping to the device which is host to Kibana and Elasticsearch. I once parsed syslog using logstash to elasticsearch. Now I need to parse json file (suricata d…

---

## [TTL Documents](https://discuss.elastic.co/t/ttl-documents/162712)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 8\
**Last updated:** [January 7, 2019, 4:19pm UTC](https://discuss.elastic.co/t/ttl-documents/162712 "2019-01-07T16:19:51Z")

</div>

Per TTL Documents, Shield and Found | Elastic: Note that in the current version of Elasticsearch, \_ttl is deprecated. What is the approach for modern elasticsearch 6.5+ (in terms of documents that needs to be expire…

---

## [Does snapshot support nfs? always Access Denied](https://discuss.elastic.co/t/does-snapshot-support-nfs-always-access-denied/92607)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 6\
**Last updated:** [July 12, 2017, 3:11am UTC](https://discuss.elastic.co/t/does-snapshot-support-nfs-always-access-denied/92607 "2017-07-12T03:11:26Z")

</div>

es/logstash/kibana version: 5.4.1 https://www.elastic.co/guide/en/elasticsearch/reference/5.5/modules-snapshots.html#modules-snapshots I follow the official guide to create a snapshot with NFS shared file system, but…

---

## [Manticore::ResolutionFailure error in Logstash](https://discuss.elastic.co/t/manticore-resolutionfailure-error-in-logstash/38574)

<div class="topic-metadata">

**Author:** [@usahitya](https://discuss.elastic.co/u/usahitya)\
**Replies:** 5\
**Last updated:** [February 9, 2016, 10:03am UTC](https://discuss.elastic.co/t/manticore-resolutionfailure-error-in-logstash/38574 "2016-02-09T10:03:14Z")

</div>

Hi Community, when I am Running the .conf file in logstash I am getting the error "Address already in use - bind - Address already in use", So I killed the running process and restarted the logstash. once logstas…

---

## [Watcher Kibana : How can i use double condition in a "compare"](https://discuss.elastic.co/t/watcher-kibana-how-can-i-use-double-condition-in-a-compare/170999)

<div class="topic-metadata">

**Author:** [@hmezoughi](https://discuss.elastic.co/u/hmezoughi)\
**Replies:** 6\
**Last updated:** [March 7, 2019, 10:43pm UTC](https://discuss.elastic.co/t/watcher-kibana-how-can-i-use-double-condition-in-a-compare/170999 "2019-03-07T22:43:45Z")

</div>

I want to compare two conditon to send an alert mail My exemple : "query": { "bool": { "must": \[ { "range": { "AUDITTIMESTAMP": { "gte": "now-15m" } …

---

## [How to register a new S3 bucket as a snapshot repository to my existing elastic cloud?](https://discuss.elastic.co/t/how-to-register-a-new-s3-bucket-as-a-snapshot-repository-to-my-existing-elastic-cloud/271093)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 3\
**Last updated:** [April 23, 2021, 10:18pm UTC](https://discuss.elastic.co/t/how-to-register-a-new-s3-bucket-as-a-snapshot-repository-to-my-existing-elastic-cloud/271093 "2021-04-23T22:18:18Z")

</div>

Hello, I want to use my own S3 bucket as a snapshot repository in case we sometime decide to not use elastic cloud for some reason we don't loose the data ingested until that moment. Is there a way to easily add one? In…

---

## [Filebeat, ILM and multiple indices](https://discuss.elastic.co/t/filebeat-ilm-and-multiple-indices/219638)

<div class="topic-metadata">

**Author:** [@corbosman](https://discuss.elastic.co/u/corbosman)\
**Replies:** 6\
**Last updated:** [March 1, 2020, 11:19am UTC](https://discuss.elastic.co/t/filebeat-ilm-and-multiple-indices/219638 "2020-03-01T11:19:33Z")

</div>

Hi all, im having a bit of a hard time understanding the best config for our setup. We are running filebeat to ship several totally different types of logs to elastic that need their own template and index. But at the s…

---

## [ES response limited to 10](https://discuss.elastic.co/t/es-response-limited-to-10/8301)

<div class="topic-metadata">

**Author:** [@saiyan\_2](https://discuss.elastic.co/u/saiyan_2)\
**Replies:** 3\
**Last updated:** [July 18, 2012, 4:47pm UTC](https://discuss.elastic.co/t/es-response-limited-to-10/8301 "2012-07-18T16:47:05Z")

</div>

HI, Once we Index the documents, search on the index is limited to 10. How can we increase the response limit, or fetch the entire resultset ? Thanks saiyan

---

## [Copy\_to not working](https://discuss.elastic.co/t/copy-to-not-working/23211)

<div class="topic-metadata">

**Author:** [@Jaraxal](https://discuss.elastic.co/u/Jaraxal)\
**Replies:** 6\
**Last updated:** [April 13, 2015, 5:24pm UTC](https://discuss.elastic.co/t/copy-to-not-working/23211 "2015-04-13T17:24:33Z")

</div>

I'm having issues getting the "copy\_to" functionality to work. It seems pretty straight forward, so I wasn't expecting any problems. Here is my index creation call: curl -XPUT http://esnode:9200/test\_index -d '{…

---

## [Uninstall X-Pack](https://discuss.elastic.co/t/uninstall-x-pack/72615)

<div class="topic-metadata">

**Author:** [@kalt](https://discuss.elastic.co/u/kalt)\
**Replies:** 3\
**Last updated:** [January 25, 2017, 5:38pm UTC](https://discuss.elastic.co/t/uninstall-x-pack/72615 "2017-01-25T17:38:27Z")

</div>

Hi, I have installed X-Pack on a 5.1.2 cluster with a basic license, and then decided I want to remove it again. Following the instructions at https://www.elastic.co/guide/en/x-pack/current/installing-xpack.html#xpack-…

---

## [Date Range filter is not working in the elasticsearch](https://discuss.elastic.co/t/date-range-filter-is-not-working-in-the-elasticsearch/41969)

<div class="topic-metadata">

**Author:** [@Sandeep\_Venkatesh](https://discuss.elastic.co/u/Sandeep_Venkatesh)\
**Replies:** 5\
**Last updated:** [February 17, 2016, 4:35pm UTC](https://discuss.elastic.co/t/date-range-filter-is-not-working-in-the-elasticsearch/41969 "2016-02-17T16:35:22Z")

</div>

The Query i'm using {"query": { "filtered":{"query":{"match\_all":{}}, "filter":{ "and":\[ { "range": { "created\_date":{"gte":"2010-05-22","lte":"2012- 05-22", "format"…

---

## [I have two corrupted indexes that just won't delete](https://discuss.elastic.co/t/i-have-two-corrupted-indexes-that-just-wont-delete/1882)

<div class="topic-metadata">

**Author:** [@Jeff\_Silverman](https://discuss.elastic.co/u/Jeff_Silverman)\
**Replies:** 6\
**Last updated:** [June 5, 2015, 9:09am UTC](https://discuss.elastic.co/t/i-have-two-corrupted-indexes-that-just-wont-delete/1882 "2015-06-05T09:09:17Z")

</div>

The other day, my servers all ran out of disk space at roughly the same time. That corrupted three indexes. One index I was able to recover, and curl 'n7-z01-0a2a29a5.iaas.starwave.com:9200/\_cat/indices?v' it is green.…

---

## ["type": "parsing\_exception","reason":"unknown query \[aggs\] - Elasticsearch node js client](https://discuss.elastic.co/t/type-parsing-exception-reason-unknown-query-aggs-elasticsearch-node-js-client/281402)

<div class="topic-metadata">

**Author:** [@manojkrishna561994](https://discuss.elastic.co/u/manojkrishna561994)\
**Replies:** 4\
**Last updated:** [September 14, 2021, 2:11pm UTC](https://discuss.elastic.co/t/type-parsing-exception-reason-unknown-query-aggs-elasticsearch-node-js-client/281402 "2021-09-14T14:11:42Z")

</div>

Hi, I want to connect to elasticsearch through elasticsearch node js client. I'm using search api and want to run few aggregation to calculate the total count of docs which passes the given condition. However, im gettin…

---

## [Logstash-input-mongodb configuration file](https://discuss.elastic.co/t/logstash-input-mongodb-configuration-file/129002)

<div class="topic-metadata">

**Author:** [@Nfekih](https://discuss.elastic.co/u/Nfekih)\
**Replies:** 6\
**Last updated:** [April 22, 2018, 10:42pm UTC](https://discuss.elastic.co/t/logstash-input-mongodb-configuration-file/129002 "2018-04-22T22:42:45Z")

</div>

Hi all, I am trying to pull data out of mongodb and to process it with Logstash. Know that I want to pull all the data from a DB named "test" and so I started with the collection named "student". This is my configurati…

---

## [Elastic6.1报错 java.lang.ClassNotFoundException: org.elasticsearch.common.transport.InetSocketTransportAddress](https://discuss.elastic.co/t/elastic6-1-java-lang-classnotfoundexception-org-elasticsearch-common-transport-inetsockettransportaddress/114079)

<div class="topic-metadata">

**Author:** [@b7e5eceffd46f9453deb](https://discuss.elastic.co/u/b7e5eceffd46f9453deb)\
**Replies:** 4\
**Last updated:** [January 29, 2018, 11:45am UTC](https://discuss.elastic.co/t/elastic6-1-java-lang-classnotfoundexception-org-elasticsearch-common-transport-inetsockettransportaddress/114079 "2018-01-29T11:45:35Z")

</div>

新手学习elasticsearch 6.1.0，使用gradle来构建项目 build.gradle： dependencies { compile 'org.springframework.boot:spring-boot-starter-actuator' compile 'org.elasticsearch:elasticsearch:6.1.0' compile 'org.elasticsearch.…

---

## [Stats endpoint for checking a single node health](https://discuss.elastic.co/t/stats-endpoint-for-checking-a-single-node-health/86937)

<div class="topic-metadata">

**Author:** [@joanvila](https://discuss.elastic.co/u/joanvila)\
**Replies:** 2\
**Last updated:** [June 2, 2017, 2:17pm UTC](https://discuss.elastic.co/t/stats-endpoint-for-checking-a-single-node-health/86937 "2017-06-02T14:17:53Z")

</div>

I'm facing an elasticsearch cluster with 6 nodes and a load balancer that sends requests to those nodes. The load balancer needs to query the nodes periodically in order to check their healtcheck (if they are alive ready…

---

## [KOPF plugin for elasticsearch-5.0.0-alpha5](https://discuss.elastic.co/t/kopf-plugin-for-elasticsearch-5-0-0-alpha5/59092)

<div class="topic-metadata">

**Author:** [@Satendrakumar](https://discuss.elastic.co/u/Satendrakumar)\
**Replies:** 5\
**Last updated:** [August 29, 2016, 10:06am UTC](https://discuss.elastic.co/t/kopf-plugin-for-elasticsearch-5-0-0-alpha5/59092 "2016-08-29T10:06:21Z")

</div>

I am doing POC with Spark(2.0.0) streaming and Elasticsearch-5.0.0-alpha5. I need to know my data and cluster health very frequently. I am not able install KOPF plugin with Elasticsearch-5.0.0-alpha5. Can anybody help…

---

## [Gc overhead on startup](https://discuss.elastic.co/t/gc-overhead-on-startup/104064)

<div class="topic-metadata">

**Author:** [@iliasse](https://discuss.elastic.co/u/iliasse)\
**Replies:** 6\
**Last updated:** [October 17, 2017, 7:19am UTC](https://discuss.elastic.co/t/gc-overhead-on-startup/104064 "2017-10-17T07:19:06Z")

</div>

Hi, I'm using Elastic V 5.6.3 on Docker I am using the official Elastic image. I start the process with -Xms31g and -Xmx31g I hava enough RAM on the host machine (256 GB). I have 5TB of data with 1 600 000 000 docs. O…

---

## [Check if logstash is working](https://discuss.elastic.co/t/check-if-logstash-is-working/221281)

<div class="topic-metadata">

**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\
**Replies:** 1\
**Last updated:** [February 27, 2020, 9:47pm UTC](https://discuss.elastic.co/t/check-if-logstash-is-working/221281 "2020-02-27T21:47:11Z")

</div>

I have a filebeat running and I can see in the logs that it is parsing my log files. The check config worked and it stated that everything is ok. I goto logstash and I have a filebeat.conf in the conf.d folder. Inside…

---

## [Prefix query with analyzer](https://discuss.elastic.co/t/prefix-query-with-analyzer/96852)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 3\
**Last updated:** [August 16, 2017, 2:36pm UTC](https://discuss.elastic.co/t/prefix-query-with-analyzer/96852 "2017-08-16T14:36:37Z")

</div>

I want to do a prefix term query against an analyzed field, and use a search analyzer (to lowercase/asciifolding). Here some docs: “Pétanque” “concours de pétanque” Query “petan” should give me only “Pétanque”. Any …

---

## [ElasticSearch 5.4 Nodes unable to join cluster - Troubleshooting](https://discuss.elastic.co/t/elasticsearch-5-4-nodes-unable-to-join-cluster-troubleshooting/86536)

<div class="topic-metadata">

**Author:** [@techpanga](https://discuss.elastic.co/u/techpanga)\
**Replies:** 4\
**Last updated:** [May 20, 2017, 8:36pm UTC](https://discuss.elastic.co/t/elasticsearch-5-4-nodes-unable-to-join-cluster-troubleshooting/86536 "2017-05-20T20:36:05Z")

</div>

Hi There, We are running into some issues post upgrade from 2.3.x to 5.4. OS : RHEL 7 Java : JDK1.8.0\_111 Server (VM) #1: node.name: node-1 network.host: xxx.xxx.197.14 cluster.name: dsinke3 node.master: true no…

---

## [How do you configure Elasticsearch on Ubuntu Bash for Windows 10?](https://discuss.elastic.co/t/how-do-you-configure-elasticsearch-on-ubuntu-bash-for-windows-10/194888)

<div class="topic-metadata">

**Author:** [@zachary\_baker](https://discuss.elastic.co/u/zachary_baker)\
**Replies:** 3\
**Last updated:** [August 15, 2019, 7:15am UTC](https://discuss.elastic.co/t/how-do-you-configure-elasticsearch-on-ubuntu-bash-for-windows-10/194888 "2019-08-15T07:15:56Z")

</div>

Hi everyone! I am relatively new to Elasticsearch and was wondering about configuring it for the Ubuntu bash app for Windows 10. Is it possible and if so, what would I have to configure. I have seen it run on an Ubuntu …

---

## [GET Consistency (and Quorum) in ElasticSearch](https://discuss.elastic.co/t/get-consistency-and-quorum-in-elasticsearch/10201)

<div class="topic-metadata">

**Author:** [@vaidik](https://discuss.elastic.co/u/vaidik)\
**Replies:** 3\
**Last updated:** [December 30, 2012, 11:50am UTC](https://discuss.elastic.co/t/get-consistency-and-quorum-in-elasticsearch/10201 "2012-12-30T11:50:45Z")

</div>

I am new to ElasticSearch and I am evaluating it for a project. In ES, Replication can be sync or async. In case of async, the client is returned success as soon as the document is written to the primary shard. …

---

## [Elasticsearch server is down or unreachable](https://discuss.elastic.co/t/elasticsearch-server-is-down-or-unreachable/20487)

<div class="topic-metadata">

**Author:** [@versneldiemen](https://discuss.elastic.co/u/versneldiemen)\
**Replies:** 3\
**Last updated:** [December 5, 2014, 10:59pm UTC](https://discuss.elastic.co/t/elasticsearch-server-is-down-or-unreachable/20487 "2014-12-05T22:59:20Z")

</div>

Hello there, I keep getting this message when i start Kibana. But if i go look on my server i see that elasticsearch is running perfectly \*root@server:~# service elasticsearch status\* \* \* elasticsearch is runni…

[Previous page](https://discuss.elastic.co/top.md?page=355&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=357&per_page=50&period=all)
