# Top **URL:** https://discuss.elastic.co/top.md?page=377&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 378 --- ## [Ruby exception occurred: event\['field'\]) have been disabled](https://discuss.elastic.co/t/ruby-exception-occurred-event-field-have-been-disabled/76270)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 5\ **Last updated:** [March 9, 2017, 10:10am UTC](https://discuss.elastic.co/t/ruby-exception-occurred-event-field-have-been-disabled/76270 "2017-03-09T10:10:15Z")
Hello, I use this pattern to convert hexadecimal fields to decimal fields : mutate { convert =\> { "hexa\_value" =\> "integer" } } ruby { code =\> 'event\["hexa\_value"\] = event\["hexa\_value"\].hex' … --- ## [Elasticsearch not working due to flood stage disk watermark \[95%\] exceeded on](https://discuss.elastic.co/t/elasticsearch-not-working-due-to-flood-stage-disk-watermark-95-exceeded-on/183000)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 1\ **Last updated:** [May 28, 2019, 7:49am UTC](https://discuss.elastic.co/t/elasticsearch-not-working-due-to-flood-stage-disk-watermark-95-exceeded-on/183000 "2019-05-28T07:49:35Z")
Hi , I have installed elasticsearch version 6.6.7. \[2019-05-28T12:28:36,597\]\[WARN \]\[o.e.c.r.a.DiskThresholdMonitor\] \[node-1\] flood stage disk watermark \[95%\] exceeded on \[LFHtUIe6T8uyaoTfS1jjeg\]\[node-1\]\[/home/oes\_setup… --- ## [Deploying on EC2: cannot connect remotely to port 9300](https://discuss.elastic.co/t/deploying-on-ec2-cannot-connect-remotely-to-port-9300/34899)
**Author:** [@Alexey\_Danilov](https://discuss.elastic.co/u/Alexey_Danilov)\ **Replies:** 2\ **Last updated:** [November 18, 2015, 1:01pm UTC](https://discuss.elastic.co/t/deploying-on-ec2-cannot-connect-remotely-to-port-9300/34899 "2015-11-18T13:01:46Z")
Hi. Not sure if this is the right forum to ask, but I'll give it a try. I have installed ES on Amazon's EC2 instance. Set security group to allow all protocols and all ports - both inbound and outbound (for now, just to… --- ## [Replace the kibana logo in version 7.4](https://discuss.elastic.co/t/replace-the-kibana-logo-in-version-7-4/204161)
**Author:** [@stanzin\_kadol](https://discuss.elastic.co/u/stanzin_kadol)\ **Replies:** 8\ **Last updated:** [October 23, 2019, 1:18pm UTC](https://discuss.elastic.co/t/replace-the-kibana-logo-in-version-7-4/204161 "2019-10-23T13:18:54Z")
/src/ui/public/images/kibana.svg This path does'nt exist in kibana version 7.4. There is a file named commons.style.css in /usr/share/kibana/optimize/bundles in which def : src image - url of mapbox is there but not of k… --- ## [Export CSV limited to 500 records](https://discuss.elastic.co/t/export-csv-limited-to-500-records/197420)
**Author:** [@russellpetrichsophos](https://discuss.elastic.co/u/russellpetrichsophos)\ **Replies:** 4\ **Last updated:** [August 30, 2019, 9:12pm UTC](https://discuss.elastic.co/t/export-csv-limited-to-500-records/197420 "2019-08-30T21:12:22Z")
Hello Kibana Team, I'm using Kibana 6.3.2 and I'm trying to export the results of a saved search with over 200k hits. However, when I click "Export" only the first 500 hits are included in the exported CSV:Kibana\_Expor… --- ## [Logstash change port](https://discuss.elastic.co/t/logstash-change-port/285895)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 8\ **Last updated:** [October 11, 2021, 1:06am UTC](https://discuss.elastic.co/t/logstash-change-port/285895 "2021-10-11T01:06:54Z")
Logstash is running on 9600 by default and I want to run another logstash on same system Is there opion to change default port for logstash I don't want to use beats for this. beacuse I want to run two logstash with d… --- ## [Low @timestamp precision cause wrong order of events with docker input](https://discuss.elastic.co/t/low-timestamp-precision-cause-wrong-order-of-events-with-docker-input/137051)
**Author:** [@smamontov](https://discuss.elastic.co/u/smamontov)\ **Replies:** 6\ **Last updated:** [July 10, 2018, 2:56pm UTC](https://discuss.elastic.co/t/low-timestamp-precision-cause-wrong-order-of-events-with-docker-input/137051 "2018-07-10T14:56:58Z")
Hi! I'm using Filebeat 6.3.0 and Docker 18.0.05-ce. Docker stores timestamps with nanoseconds, but elasticsearch date format precision is a millisecond. Looks like this issue never be fixed. Is there any elegant solu… --- ## [I am not getting the logs in Kibana](https://discuss.elastic.co/t/i-am-not-getting-the-logs-in-kibana/129079)
**Author:** [@siva1](https://discuss.elastic.co/u/siva1)\ **Replies:** 3\ **Last updated:** [April 23, 2018, 11:44am UTC](https://discuss.elastic.co/t/i-am-not-getting-the-logs-in-kibana/129079 "2018-04-23T11:44:36Z")
Hi..Guys.. ==\> /var/log/logstash/logstash-plain.log \<== elk\_1 | \[2018-04-23T10:04:15,350\]\[INFO \]\[logstash.modules.scaffold\] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"/opt/logstash/modules/fb\_apache/… --- ## [Elasticsearch unreachable from Logstash](https://discuss.elastic.co/t/elasticsearch-unreachable-from-logstash/149698)
**Author:** [@raphael\_d](https://discuss.elastic.co/u/raphael_d)\ **Replies:** 2\ **Last updated:** [September 25, 2018, 8:21am UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-from-logstash/149698 "2018-09-25T08:21:38Z")
Hello everyone, I have searched for a long time for a solutios, but found none yet. When I run Logstash to connect to Elasticsearch through the local network, it is not working. I get the following message: Sep 24 12:… --- ## [Kibana 8.11.1 - ClamAV Infected file -\> security\_detection\_engine-8.11.1.zip](https://discuss.elastic.co/t/kibana-8-11-1-clamav-infected-file-security-detection-engine-8-11-1-zip/347939)
**Author:** [@RafaelE](https://discuss.elastic.co/u/RafaelE)\ **Replies:** 3\ **Last updated:** [December 4, 2023, 12:49pm UTC](https://discuss.elastic.co/t/kibana-8-11-1-clamav-infected-file-security-detection-engine-8-11-1-zip/347939 "2023-12-04T12:49:12Z")
Hello everyone, I'm creating this topic to report a situation where the antivirus ClamAV have identified a possible infected file on your Debian package ClamAV report /usr/share/kibana/node\_modules/@kbn/fleet-plugin/t… --- ## [Elasticsearch-plugin and proxies](https://discuss.elastic.co/t/elasticsearch-plugin-and-proxies/64857)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 3\ **Last updated:** [January 5, 2017, 11:03am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-and-proxies/64857 "2017-01-05T11:03:32Z")
Hi, I am trying to install the analysis-icu plugin but am having problems with the installation. In ES 4, it worked fine but now I try: ./elasticsearch-plugin --noproxy install analysis-icu or: ./elasticsearch-pl… --- ## [Upgrade to ES 6.0, ElasticSearch wont start](https://discuss.elastic.co/t/upgrade-to-es-6-0-elasticsearch-wont-start/109047)
**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\ **Replies:** 7\ **Last updated:** [November 29, 2017, 9:06am UTC](https://discuss.elastic.co/t/upgrade-to-es-6-0-elasticsearch-wont-start/109047 "2017-11-29T09:06:42Z")
I have upgraded from ElasticSearch 5.6.2 to 6.0.0 on Centos 7 and am getting the following error when trying to start the service: Nov 24 16:18:37 desktopoli systemd: Starting Elasticsearch... Nov 24 16:18:37 desktopol… --- ## [Customize legend](https://discuss.elastic.co/t/customize-legend/124866)
**Author:** [@JozefPaulisin](https://discuss.elastic.co/u/JozefPaulisin)\ **Replies:** 2\ **Last updated:** [March 21, 2018, 8:17pm UTC](https://discuss.elastic.co/t/customize-legend/124866 "2018-03-21T20:17:17Z")
Hey there, is it possible to change the values in legend? My visualization looks like: \[image\] Records are grouped by date and layout of them (in each day) is by ID - because I need to show order at which occurs. Vi… --- ## [Unable to retrieve version information from Elasticsearch nodes. socket hang up](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/297070)
**Author:** [@EliWallic](https://discuss.elastic.co/u/EliWallic)\ **Replies:** 3\ **Last updated:** [February 13, 2022, 9:18pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/297070 "2022-02-13T21:18:35Z")
Hello, I am new at this topic and trying to install an ELK as described in the installation docs. It seems to be all fine except that Kibana cannot connect to Elasticsearch. I am getting the error message in the Kiba … --- ## [Filebeat:aws:cloudtrail](https://discuss.elastic.co/t/filebeatcloudtrail/261190)
**Author:** [@mdrdannyr](https://discuss.elastic.co/u/mdrdannyr)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 11:13pm UTC](https://discuss.elastic.co/t/filebeatcloudtrail/261190 "2021-01-14T23:13:59Z")
Hi all, Had a question about the filebeat aws module - specifically the cloudtrail set. I've managed to get this up and running, and as far as i understand, the process used for the above can be broken down into the … --- ## [No cached mapping](https://discuss.elastic.co/t/no-cached-mapping/170210)
**Author:** [@mroell](https://discuss.elastic.co/u/mroell)\ **Replies:** 8\ **Last updated:** [February 27, 2019, 11:32pm UTC](https://discuss.elastic.co/t/no-cached-mapping/170210 "2019-02-27T23:32:34Z")
I've been having an issue with a few fields that have the "No cached mapping for this ...." warning message. I asked about this issue in the logstash (I wanted to make sure the config wasn't the problem) forum and was to… --- ## [Filebeat Pre-requisite & CPU , memory utilization](https://discuss.elastic.co/t/filebeat-pre-requisite-cpu-memory-utilization/133477)
**Author:** [@priti](https://discuss.elastic.co/u/priti)\ **Replies:** 2\ **Last updated:** [May 28, 2018, 10:11am UTC](https://discuss.elastic.co/t/filebeat-pre-requisite-cpu-memory-utilization/133477 "2018-05-28T10:11:28Z")
Hi, I have some questions regarding filebeat. To deploy filebeat , we need to have java on same system ? How much memory & CPU Utilized by filebeat? If there is heavy log file, memory & CPU utlization also increased ?… --- ## [ELK Limits, config tips, high CPU usage, cluster (newbie)](https://discuss.elastic.co/t/elk-limits-config-tips-high-cpu-usage-cluster-newbie/116410)
**Author:** [@Sylvain-69](https://discuss.elastic.co/u/Sylvain-69)\ **Replies:** 4\ **Last updated:** [January 23, 2018, 5:07am UTC](https://discuss.elastic.co/t/elk-limits-config-tips-high-cpu-usage-cluster-newbie/116410 "2018-01-23T05:07:42Z")
Hello Everybody ! I started to use ELK in my company, at first to be able to get a look at windows logon informations then members of security groups activity, etc... I installed one node on Centos 7 (VM) with 2 CPUs (… --- ## [Error on: Unable to bulk upload the stats payload to the local cluster](https://discuss.elastic.co/t/error-on-unable-to-bulk-upload-the-stats-payload-to-the-local-cluster/192663)
**Author:** [@jrplus](https://discuss.elastic.co/u/jrplus)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 5:54pm UTC](https://discuss.elastic.co/t/error-on-unable-to-bulk-upload-the-stats-payload-to-the-local-cluster/192663 "2019-07-29T17:54:50Z")
Faced the below problem: log \[09:42:06.246\] \[warning\]\[kibana-monitoring\]\[monitoring-ui\] \[export\_exception\] failed to flush export bulks :: {"path":"/\_monitoring/bulk","query":{"system\_id":"kibana","system\_api\_version… --- ## [Unable to find any unassigned shards](https://discuss.elastic.co/t/unable-to-find-any-unassigned-shards/190294)
**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\ **Replies:** 6\ **Last updated:** [July 15, 2019, 6:48pm UTC](https://discuss.elastic.co/t/unable-to-find-any-unassigned-shards/190294 "2019-07-15T18:48:33Z")
Hi, I am getting below error while accessing the cluster allocation through dev console with below command GET \_cluster/allocation/explain?pretty I tried many forum solutions but still i am getting the same. Elk versi… --- ## [Filebeat -\> Kafka How to best define list of hosts (IPs vs DNS vs Zookeeper)](https://discuss.elastic.co/t/filebeat-kafka-how-to-best-define-list-of-hosts-ips-vs-dns-vs-zookeeper/51492)
**Author:** [@Jaren](https://discuss.elastic.co/u/Jaren)\ **Replies:** 4\ **Last updated:** [June 11, 2016, 12:31am UTC](https://discuss.elastic.co/t/filebeat-kafka-how-to-best-define-list-of-hosts-ips-vs-dns-vs-zookeeper/51492 "2016-06-11T00:31:18Z")
After a quick look into the open issues, it doesn't look like there is any direction of having Filebeat talk directly to Zookeeper instead of listing all IPs to the cluster. (Since Zookeeper is the source of truth for ho… --- ## [Custom query to create Kibana data table](https://discuss.elastic.co/t/custom-query-to-create-kibana-data-table/267919)
**Author:** [@venkat\_swaminathan](https://discuss.elastic.co/u/venkat_swaminathan)\ **Replies:** 7\ **Last updated:** [March 22, 2021, 4:01pm UTC](https://discuss.elastic.co/t/custom-query-to-create-kibana-data-table/267919 "2021-03-22T16:01:26Z")
Team, How to create a Kibana custom graph (\*in my case data table), the guidance here will be helpful. Query:: "aggs": { "group\_by\_name": { "terms": { "field": "Dimensions.keyword", … --- ## [Kibana with other back-end engines?](https://discuss.elastic.co/t/kibana-with-other-back-end-engines/78628)
**Author:** [@kirolos-kaldas](https://discuss.elastic.co/u/kirolos-kaldas)\ **Replies:** 1\ **Last updated:** [March 15, 2017, 3:37pm UTC](https://discuss.elastic.co/t/kibana-with-other-back-end-engines/78628 "2017-03-15T15:37:22Z")
Hi, I was wondering if its possible to integrate engines other than Elasticsearch with Kibana which use REST API. And if possible then will it require a lot of the back-end code to be changed? And if it takes a lot of ch… --- ## [How to change the data type of my index pattern?](https://discuss.elastic.co/t/how-to-change-the-data-type-of-my-index-pattern/234218)
**Author:** [@kercio](https://discuss.elastic.co/u/kercio)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 12:03am UTC](https://discuss.elastic.co/t/how-to-change-the-data-type-of-my-index-pattern/234218 "2020-05-26T00:03:30Z")
I would like to change the UploadTimestamp from string to date. It's grayed-out. --- ## [Shipping CSV file using Filebeat to Logstash and then from logstash to Elasticsearch](https://discuss.elastic.co/t/shipping-csv-file-using-filebeat-to-logstash-and-then-from-logstash-to-elasticsearch/48921)
**Author:** [@gauravkb](https://discuss.elastic.co/u/gauravkb)\ **Replies:** 2\ **Last updated:** [November 4, 2016, 2:01pm UTC](https://discuss.elastic.co/t/shipping-csv-file-using-filebeat-to-logstash-and-then-from-logstash-to-elasticsearch/48921 "2016-11-04T14:01:25Z")
hi , Im trying to ship csv file using filebeat to logstash and then to elasticsearch but nothing is feeding into logstash or elasticsearch This is how my filebeat.yml looks like.. filebeat: # List of prospectors … --- ## [Subtract two doc counts from one another](https://discuss.elastic.co/t/subtract-two-doc-counts-from-one-another/52865)
**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\ **Replies:** 1\ **Last updated:** [June 21, 2016, 10:56am UTC](https://discuss.elastic.co/t/subtract-two-doc-counts-from-one-another/52865 "2016-06-21T10:56:16Z")
Hi, I'm currently trying to find out how large the difference between the number of two seperate events is. This is the response I get when I search for my events: "aggregations": { "aggname": { "buckets": … --- ## [Dashboard error "Unexpected token \< in JSON at position 0"](https://discuss.elastic.co/t/dashboard-error-unexpected-token-in-json-at-position-0/225258)
**Author:** [@Katherinne\_Quintero](https://discuss.elastic.co/u/Katherinne_Quintero)\ **Replies:** 7\ **Last updated:** [March 31, 2020, 8:09am UTC](https://discuss.elastic.co/t/dashboard-error-unexpected-token-in-json-at-position-0/225258 "2020-03-31T08:09:09Z")
Hi I am having errors seeing the dashboard in kibana, I am getting several frames with the error "unexpected token \ **Author:** [@HARSHAL\_CHAUDHARI](https://discuss.elastic.co/u/HARSHAL_CHAUDHARI)\ **Replies:** 5\ **Last updated:** [November 13, 2018, 3:38pm UTC](https://discuss.elastic.co/t/error-while-copying-content-to-a-stream/153637 "2018-11-13T15:38:11Z") I am trying to push 80mb document to elasticsearch cluster and getting "Error while copying content to a stream". I have also increase heap size as -Xms6g, -Xmx6g still getting an error. Error details as below Origin… --- ## [How to update log4j jar in logstash installed in ubuntu VM](https://discuss.elastic.co/t/how-to-update-log4j-jar-in-logstash-installed-in-ubuntu-vm/291830)
**Author:** [@Rughma\_Sussan\_Renji](https://discuss.elastic.co/u/Rughma_Sussan_Renji)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 5:47pm UTC](https://discuss.elastic.co/t/how-to-update-log4j-jar-in-logstash-installed-in-ubuntu-vm/291830 "2021-12-14T17:47:38Z")
how will I upgrade my logstash version in ubuntu to 2.15.0, currently it is 2.14.0, but due to the vulnerability issue I need to update it to 2.15.0. can anyone tell me the command to update it to the latest version --- ## [Kibana User Roles, kibana\_dashboard\_only and Limit Spaces?](https://discuss.elastic.co/t/kibana-user-roles-kibana-dashboard-only-and-limit-spaces/161905)
**Author:** [@avocado](https://discuss.elastic.co/u/avocado)\ **Replies:** 4\ **Last updated:** [January 2, 2019, 6:57pm UTC](https://discuss.elastic.co/t/kibana-user-roles-kibana-dashboard-only-and-limit-spaces/161905 "2019-01-02T18:57:14Z")
How can I limit a user's permissions to kibana\_dashboard\_only and also restrict the user to read only within a single space? If I assign a user to two roles, one is the kibana\_dashboard\_only and the second custom role l… --- ## [Using "terms" on a nested field](https://discuss.elastic.co/t/using-terms-on-a-nested-field/103383)
**Author:** [@Marcelo-Theodoro](https://discuss.elastic.co/u/Marcelo-Theodoro)\ **Replies:** 2\ **Last updated:** [October 13, 2017, 2:23pm UTC](https://discuss.elastic.co/t/using-terms-on-a-nested-field/103383 "2017-10-13T14:23:53Z")
Hello. I'm using a "term" filter on a nested field, it's working fine. But I'm getting an error when I try to do the same query with "terms" on ES 2.4. Any tips here? # Working: {'query': {'filtered': {'filter': {'bool'… --- ## [Is the hits.total number in a search response accurate (ES 5,6)?](https://discuss.elastic.co/t/is-the-hits-total-number-in-a-search-response-accurate-es-5-6/190779)
**Author:** [@wboult](https://discuss.elastic.co/u/wboult)\ **Replies:** 4\ **Last updated:** [July 18, 2019, 8:56am UTC](https://discuss.elastic.co/t/is-the-hits-total-number-in-a-search-response-accurate-es-5-6/190779 "2019-07-18T08:56:16Z")
Hi All, In elasticsearch v5/6 - there is a field on a search response hits.total. Is this field intended to be completely accurate (i.e. with a healthy cluster + no changing data should we always be able to retrieve exa… --- ## [Kibana's error](https://discuss.elastic.co/t/kibanas-error/39480)
**Author:** [@OscarCrespo](https://discuss.elastic.co/u/OscarCrespo)\ **Replies:** 5\ **Last updated:** [February 12, 2016, 6:28pm UTC](https://discuss.elastic.co/t/kibanas-error/39480 "2016-02-12T18:28:04Z")
elasticsearch is localhost, now marks the following error Kibana Error: listen EADDRINUSE at exports.\_errnoException (util.js:746:11) at Server.\_listen2 (net.js:1156:14) at listen (net.js:1182:10) at n… --- ## [New index is not created](https://discuss.elastic.co/t/new-index-is-not-created/215091)
**Author:** [@Wojciech\_Gomola](https://discuss.elastic.co/u/Wojciech_Gomola)\ **Replies:** 6\ **Last updated:** [January 17, 2020, 8:56am UTC](https://discuss.elastic.co/t/new-index-is-not-created/215091 "2020-01-17T08:56:19Z")
Hi. I have Filebeat + ELK stack. My Logstash has a pretty standard configuration: input { beats { port =\> 5044 } } filter { grok { match =\> { "message" =\> "^(?\\\d{4}-\\d\\d-\\d\\d \\d\\d:\\d\\d:\\d\\d.\\… --- ## [How can I fix yellow state cluster?](https://discuss.elastic.co/t/how-can-i-fix-yellow-state-cluster/196644)
**Author:** [@hurryup](https://discuss.elastic.co/u/hurryup)\ **Replies:** 3\ **Last updated:** [August 25, 2019, 5:16am UTC](https://discuss.elastic.co/t/how-can-i-fix-yellow-state-cluster/196644 "2019-08-25T05:16:18Z")
Hello. I have to reboot one of my 3 node cluster node and now one index is in the yellow state . curl -XGET localhost:9200/\_cluster/health/my\_index | jq '.' { "cluster\_name": "cl1", "status": "yellow", "timed\_out… --- ## [Deprecation warnings since the upgrade to 7.4.0](https://discuss.elastic.co/t/deprecation-warnings-since-the-upgrade-to-7-4-0/201917)
**Author:** [@Yakir\_Gibraltar](https://discuss.elastic.co/u/Yakir_Gibraltar)\ **Replies:** 7\ **Last updated:** [October 20, 2019, 9:59am UTC](https://discuss.elastic.co/t/deprecation-warnings-since-the-upgrade-to-7-4-0/201917 "2019-10-20T09:59:36Z")
Hi, since the upgrade from 7.3.2 to 7.4.0, i see many errors of: \[WARN \]\[o.e.d.t.TransportInfo \] \[es-data001.tab.com\] transport.publish\_address was printed as \[ip:port\] instead of \[hostname/ip:port\]. This format is d… --- ## [I can't find elastic log](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557)
**Author:** [@yuluopiaoyang](https://discuss.elastic.co/u/yuluopiaoyang)\ **Replies:** 7\ **Last updated:** [January 31, 2018, 2:15am UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557 "2018-01-31T02:15:54Z")
I just config path.logs in elasticsearch.yml, the path was generated,but the path is empty, I can't find the log file. Why the log file is empty? Below is my config: cluster.name: mushroomcluster node.name: node01 pat… --- ## [Is the Shield free to use？](https://discuss.elastic.co/t/is-the-shield-free-to-use/40597)
**Author:** [@tianzongqi](https://discuss.elastic.co/u/tianzongqi)\ **Replies:** 8\ **Last updated:** [October 11, 2016, 12:52pm UTC](https://discuss.elastic.co/t/is-the-shield-free-to-use/40597 "2016-10-11T12:52:27Z")
Maverl is free now for the ES where above the 2.x version, but i do not know whether Shield is free now ? thank you ! --- ## [Wrong dynamic mapping in Elasticsearch 8.11 prevents indexation of arrays of more than 127 strings](https://discuss.elastic.co/t/wrong-dynamic-mapping-in-elasticsearch-8-11-prevents-indexation-of-arrays-of-more-than-127-strings/346803)
**Author:** [@JulienCarnec](https://discuss.elastic.co/u/JulienCarnec)\ **Replies:** 4\ **Last updated:** [November 9, 2023, 2:24pm UTC](https://discuss.elastic.co/t/wrong-dynamic-mapping-in-elasticsearch-8-11-prevents-indexation-of-arrays-of-more-than-127-strings/346803 "2023-11-09T14:24:54Z")
Since 8.11.0, when using dynamic mapping, there is a defect preventing the indexation of documents with an array field containing more than 127 strings. Here is how to reproduce: 1- start Elasticsearch 8.11.0: docker … --- ## [List logs from all indices in Discover (Kibana)](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801)
**Author:** [@mjm](https://discuss.elastic.co/u/mjm)\ **Replies:** 8\ **Last updated:** [September 5, 2017, 6:13am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801 "2017-09-05T06:13:01Z")
Problem: Not able to list/visualize logs from all indices at once in Discover (Kibana) I tried to list logs from all indices by selecting the “" index, which i have set as default index. Not happening. I am able to see … --- ## [Does filebeat handles .gz zipped log files?](https://discuss.elastic.co/t/does-filebeat-handles-gz-zipped-log-files/83031)
**Author:** [@Sharath\_Vutpala](https://discuss.elastic.co/u/Sharath_Vutpala)\ **Replies:** 1\ **Last updated:** [April 21, 2017, 8:58am UTC](https://discuss.elastic.co/t/does-filebeat-handles-gz-zipped-log-files/83031 "2017-04-21T08:58:45Z")
I am interested in sending logs of an Elastic Map Reduce instance to Elasticsearch. But these are logged as .gz extension files. When i see the logs in Kibana, i am getting non-readable characters. Can we send .gz forma… --- ## [Logstash problem with disabling ecs\_compatibility](https://discuss.elastic.co/t/logstash-problem-with-disabling-ecs-compatibility/321740)
**Author:** [@Anonym123](https://discuss.elastic.co/u/Anonym123)\ **Replies:** 2\ **Last updated:** [December 21, 2022, 12:18pm UTC](https://discuss.elastic.co/t/logstash-problem-with-disabling-ecs-compatibility/321740 "2022-12-21T12:18:06Z")
logstash image is: 7.17.3 with the prune plugin This is my logstash.conf pipeline.ecs\_compatibility: disabled input { beats { port =\> "XXXXXX" ecs\_compatibility =\> disabled } } … --- ## [Extract certain fields from Oracle listener log](https://discuss.elastic.co/t/extract-certain-fields-from-oracle-listener-log/31992)
**Author:** [@oravirt](https://discuss.elastic.co/u/oravirt)\ **Replies:** 8\ **Last updated:** [February 3, 2016, 10:52pm UTC](https://discuss.elastic.co/t/extract-certain-fields-from-oracle-listener-log/31992 "2016-02-03T22:52:31Z")
Hi, First off, I'm new to logstash so I appreciate any help I can get with this problem. I'm trying to get some information from the Oracle listener log into logstash but I'm not entirely sure how do that. Logstash r… --- ## [JDBC Input Error after upgrading to 7.10.0 on Windows](https://discuss.elastic.co/t/jdbc-input-error-after-upgrading-to-7-10-0-on-windows/256902)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 1\ **Last updated:** [December 11, 2020, 4:41pm UTC](https://discuss.elastic.co/t/jdbc-input-error-after-upgrading-to-7-10-0-on-windows/256902 "2020-12-11T16:41:19Z")
Hi All, I updated my Windows DEV environment to 7.10.0 from 7.9.2 earlier today. When I try to run my existing Logstash configurations in 7.10.0 (which worked fine under 7.9.2) I see the following error: \[2020-11-27T12… --- ## [Painless - how to access "@timestamp" field in script](https://discuss.elastic.co/t/painless-how-to-access-timestamp-field-in-script/130263)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 3\ **Last updated:** [May 3, 2018, 2:04pm UTC](https://discuss.elastic.co/t/painless-how-to-access-timestamp-field-in-script/130263 "2018-05-03T14:04:00Z")
Hi All, I have an index with a mapping for the field "@timestamp": { "format": "epoch\_millis", "type": "date" } Using painless i want to update it. However when i try to access this field in the script it throws an… --- ## [Using search\_after for pagination where you sort by score](https://discuss.elastic.co/t/using-search-after-for-pagination-where-you-sort-by-score/146233)
**Author:** [@i333](https://discuss.elastic.co/u/i333)\ **Replies:** 2\ **Last updated:** [August 12, 2019, 8:28am UTC](https://discuss.elastic.co/t/using-search-after-for-pagination-where-you-sort-by-score/146233 "2019-08-12T08:28:17Z")
In my query I sort by score, so the most relevant results are first. I'd like to be able to paginate this, and search\_after is apparently the best way for my use case. But search\_after doesn't seem to let you use \_score … --- ## [How can we update multiple documents using callwithrequest](https://discuss.elastic.co/t/how-can-we-update-multiple-documents-using-callwithrequest/187578)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 6\ **Last updated:** [July 19, 2019, 5:21pm UTC](https://discuss.elastic.co/t/how-can-we-update-multiple-documents-using-callwithrequest/187578 "2019-07-19T17:21:42Z")
Hello Team, I am working on a use case where I need to update multiple documents. I have created a custom Kibana plugin and I am able to update single document using callwithrequest by passing document. Could you plea… --- ## [Default ingest pipeline for index?](https://discuss.elastic.co/t/default-ingest-pipeline-for-index/123511)
**Author:** [@Fluorescence](https://discuss.elastic.co/u/Fluorescence)\ **Replies:** 6\ **Last updated:** [March 12, 2018, 11:41am UTC](https://discuss.elastic.co/t/default-ingest-pipeline-for-index/123511 "2018-03-12T11:41:34Z")
Hi there, about a year ago there was a topic raised in this forum for getting a default ingest pipeline option as described here: Does someone has any news on this or any alternative? Background on this question is,… --- ## [Mapper\_parsing\_exception", "reason"=\>"\[include\_in\_all - is not allowed for indices created on or after version 6.0.0](https://discuss.elastic.co/t/mapper-parsing-exception-reason-include-in-all-is-not-allowed-for-indices-created-on-or-after-version-6-0-0/109586)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 6\ **Last updated:** [November 29, 2017, 1:45pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-reason-include-in-all-is-not-allowed-for-indices-created-on-or-after-version-6-0-0/109586 "2017-11-29T13:45:29Z")
Hi, I get the following error: \[2017-11-29T12:43:23,143\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index eve… --- ## [\[SOLVED\] Painless parameters passing from Java code](https://discuss.elastic.co/t/solved-painless-parameters-passing-from-java-code/117079)
**Author:** [@cbismuth](https://discuss.elastic.co/u/cbismuth)\ **Replies:** 5\ **Last updated:** [March 3, 2018, 12:28pm UTC](https://discuss.elastic.co/t/solved-painless-parameters-passing-from-java-code/117079 "2018-03-03T12:28:41Z")
Hi, We can't manage to pass parameters from Java to Painless runtime (Elasticsearch 6.1.2 - client and server). The error we got is: {"error":{"root\_cause":\[{"type":"script\_exception","reason":"runtime error","to\_stri… [Previous page](https://discuss.elastic.co/top.md?page=376&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=378&per_page=50&period=all)