# Top **URL:** https://discuss.elastic.co/top.md?page=379&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 380 --- ## [Update mapping](https://discuss.elastic.co/t/update-mapping/7517)
**Author:** [@Gaurav\_Vijayvargiya](https://discuss.elastic.co/u/Gaurav_Vijayvargiya)\ **Replies:** 4\ **Last updated:** [March 14, 2013, 10:59am UTC](https://discuss.elastic.co/t/update-mapping/7517 "2013-03-14T10:59:53Z")
Hi I have mapping with 'lat' and 'lon' defined as double "location" : { "dynamic" : "true", "properties" : { ... ... "lon\_lat" : { "dynamic" : "true", … --- ## [Forward slashes not matching in regexp query](https://discuss.elastic.co/t/forward-slashes-not-matching-in-regexp-query/119283)
**Author:** [@Simon\_Leighton](https://discuss.elastic.co/u/Simon_Leighton)\ **Replies:** 3\ **Last updated:** [February 9, 2018, 8:51pm UTC](https://discuss.elastic.co/t/forward-slashes-not-matching-in-regexp-query/119283 "2018-02-09T20:51:28Z")
I've created a mapping and regexp query to search urls but these are failing when I add a forward slash to the regex query "mappings":{ "document":{ "properties":{ "url":{ "type":"text", "analyzer":"keyword" } } … --- ## [Logstash timestamp error when CEST is at the end](https://discuss.elastic.co/t/logstash-timestamp-error-when-cest-is-at-the-end/27843)
**Author:** [@michaelzoet](https://discuss.elastic.co/u/michaelzoet)\ **Replies:** 5\ **Last updated:** [August 2, 2016, 12:14pm UTC](https://discuss.elastic.co/t/logstash-timestamp-error-when-cest-is-at-the-end/27843 "2016-08-02T12:14:13Z")
Hi all, I have a weird timestamp problem and maybe someone can help on this: The PostgreSQL logs are in CSV format and I get a fixed date string from Postgres with CEST at the end. How do I need to set the timestamp … --- ## [Discovery.zen.ping.unicast.hosts in elasticsearch.yml](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-in-elasticsearch-yml/155951)
**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\ **Replies:** 6\ **Last updated:** [November 8, 2018, 9:02pm UTC](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-in-elasticsearch-yml/155951 "2018-11-08T21:02:07Z")
Hi, I have totally 4 nodes running under my Azure scaleset, all 4 machines can be talk to each other. it means pingable each other and telnet using port 22 and 9200 each other. installed elasticsearch 6.x on all the 4… --- ## [Delete processed log entries](https://discuss.elastic.co/t/delete-processed-log-entries/75960)
**Author:** [@f-w](https://discuss.elastic.co/u/f-w)\ **Replies:** 1\ **Last updated:** [February 24, 2017, 9:51am UTC](https://discuss.elastic.co/t/delete-processed-log-entries/75960 "2017-02-24T09:51:58Z")
Hi, Does filebeat support deleting processed log entries to make a regular log file behave like a named pipe in order to avoid filling up disk? If not, seems to be a good candidate for enhancement. --- ## [Using Logstash to analyse log4j log files](https://discuss.elastic.co/t/using-logstash-to-analyse-log4j-log-files/44914)
**Author:** [@Jemli\_Fathi](https://discuss.elastic.co/u/Jemli_Fathi)\ **Replies:** 5\ **Last updated:** [March 22, 2016, 2:28pm UTC](https://discuss.elastic.co/t/using-logstash-to-analyse-log4j-log-files/44914 "2016-03-22T14:28:49Z")
Hi, Can you give me a basic example on how to configure logstash to handle log4j files as input including how to give an entire directory to look into. Thank you. --- ## [How to increase byte size in processing in logstash?](https://discuss.elastic.co/t/how-to-increase-byte-size-in-processing-in-logstash/71327)
**Author:** [@Shweta](https://discuss.elastic.co/u/Shweta)\ **Replies:** 4\ **Last updated:** [January 12, 2017, 12:00pm UTC](https://discuss.elastic.co/t/how-to-increase-byte-size-in-processing-in-logstash/71327 "2017-01-12T12:00:57Z")
Hi, While filtering logs in logstash we came across an error which states reason as: "reason"=\>"max\_bytes\_length\_exceeded\_exception: bytes can be at most 32766 in length; got 56665"}}}} We cannot tokenize our mess… --- ## [Copy field and gsub it](https://discuss.elastic.co/t/copy-field-and-gsub-it/105141)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 7\ **Last updated:** [October 26, 2017, 9:21am UTC](https://discuss.elastic.co/t/copy-field-and-gsub-it/105141 "2017-10-26T09:21:46Z")
I am trying to remove the translate filter to get this going, the original type is number so I'm not sure if i need the convert section, I have used gsub with strings without a problem. Can this be done? The new field i… --- ## [Elasticsearch 1.7.5 から 2.3.3 へのアップデート後に Kibana でエラーが発生する](https://discuss.elastic.co/t/elasticsearch-1-7-5-2-3-3-kibana/52742)
**Author:** [@masutaka](https://discuss.elastic.co/u/masutaka)\ **Replies:** 4\ **Last updated:** [June 18, 2016, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-1-7-5-2-3-3-kibana/52742 "2016-06-18T13:18:17Z")
先日 Elasticsearch を 1.7.5 から 2.3.3 に、Kibana を 4.1.2 から 4.5.1 にアップデートしました。 現在のところ、Kibana にアクセスすると plugin:elasticsearch: Elasticsearch is still initializing the kibana index. とのエラーが発生しており、馴染みの画面に進めません。 どんな原因が考えられるでしょうか？ … --- ## [Failed to start Elasticsearch, error code status 143](https://discuss.elastic.co/t/failed-to-start-elasticsearch-error-code-status-143/298303)
**Author:** [@shiva1](https://discuss.elastic.co/u/shiva1)\ **Replies:** 2\ **Last updated:** [February 26, 2022, 11:42am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-error-code-status-143/298303 "2022-02-26T11:42:42Z")
Hi, I am new to installing Elasticsearch, I did install Elasticsearch in debian buster 10, and when trying to start the Elasticsearch have the issue, it fails to start with (code=exited, status=143) Output : root@ip… --- ## [Replica Shards Much Larger Than Primaries](https://discuss.elastic.co/t/replica-shards-much-larger-than-primaries/126744)
**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\ **Replies:** 6\ **Last updated:** [April 8, 2018, 12:56pm UTC](https://discuss.elastic.co/t/replica-shards-much-larger-than-primaries/126744 "2018-04-08T12:56:49Z")
Hi, I've been seeing some strange behaviour in 6.2.3 with replica shards being x2/3/4 bigger than their corresponding primaries (Replicas: 1): \[53\] An example from /\_cat/shards: applicationlogs-2018.04.04 2 p STARTED… --- ## [Visualization from two indexes](https://discuss.elastic.co/t/visualization-from-two-indexes/210308)
**Author:** [@ugi.bugi](https://discuss.elastic.co/u/ugi.bugi)\ **Replies:** 5\ **Last updated:** [December 15, 2019, 2:15pm UTC](https://discuss.elastic.co/t/visualization-from-two-indexes/210308 "2019-12-15T14:15:22Z")
Hello ElasticTeam, I have two indexes and I want to make one visualization from it. First index looks like: Id, Timespan, Date, LineType. Second index looks like: Id, Timespan, Date, LineType, Genre, Descrip… --- ## [Having same document id for different document types](https://discuss.elastic.co/t/having-same-document-id-for-different-document-types/2513)
**Author:** [@bvnagaraju](https://discuss.elastic.co/u/bvnagaraju)\ **Replies:** 8\ **Last updated:** [June 23, 2015, 11:59pm UTC](https://discuss.elastic.co/t/having-same-document-id-for-different-document-types/2513 "2015-06-23T23:59:12Z")
My application has a document structure , parts of its changes frequently and others remains same through out document life cycle . As under hood elastic search update is delete and create new document as lucene segmen… --- ## [Filebeat-god description?](https://discuss.elastic.co/t/filebeat-god-description/57281)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 3\ **Last updated:** [August 4, 2016, 10:54pm UTC](https://discuss.elastic.co/t/filebeat-god-description/57281 "2016-08-04T22:54:34Z")
Hi, Can anyone point me at a description of what filebeat-god does and a link to its github repo ? Thanks, --- ## [How to match multiple field,use multiple field or multiple match or multiple grok](https://discuss.elastic.co/t/how-to-match-multiple-field-use-multiple-field-or-multiple-match-or-multiple-grok/164875)
**Author:** [@hjfeng1988](https://discuss.elastic.co/u/hjfeng1988)\ **Replies:** 2\ **Last updated:** [January 21, 2019, 2:13am UTC](https://discuss.elastic.co/t/how-to-match-multiple-field-use-multiple-field-or-multiple-match-or-multiple-grok/164875 "2019-01-21T02:13:02Z")
Logs file to analyze: GET /login.html?user=hjfeng1988 HTTP/1.1 multiple field filter { grok { match =\> { "message" =\> \["%{WORD:method} %{DATA:request\_uri} HTTP/%{NUMBER:http\_version}"\] "request\_uri… --- ## [Can I change default port of Filebeat "5044" to someother port](https://discuss.elastic.co/t/can-i-change-default-port-of-filebeat-5044-to-someother-port/197039)
**Author:** [@priya94](https://discuss.elastic.co/u/priya94)\ **Replies:** 4\ **Last updated:** [August 28, 2019, 9:35am UTC](https://discuss.elastic.co/t/can-i-change-default-port-of-filebeat-5044-to-someother-port/197039 "2019-08-28T09:35:32Z")
Hi All, I am new to ELK I am trying to run multiple filebeat instances on same machine to send different logs to logstash,then i am sending the logs to elasticserach with different index name. But Logstash is not reco… --- ## [Watcher - Webhook action iterate through aggregated results and show it in json format](https://discuss.elastic.co/t/watcher-webhook-action-iterate-through-aggregated-results-and-show-it-in-json-format/74597)
**Author:** [@meenu74](https://discuss.elastic.co/u/meenu74)\ **Replies:** 7\ **Last updated:** [February 24, 2017, 7:54am UTC](https://discuss.elastic.co/t/watcher-webhook-action-iterate-through-aggregated-results-and-show-it-in-json-format/74597 "2017-02-24T07:54:33Z")
I am creating a watch which queries and aggregates the output. How do I loop through the aggregated results and create a json format and send through web hook. Tried various solutions but still stuck it. Any help will b… --- ## [I have added SSL certificate ti single node cluster and I'm ended up with this error?](https://discuss.elastic.co/t/i-have-added-ssl-certificate-ti-single-node-cluster-and-im-ended-up-with-this-error/230823)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 1\ **Last updated:** [May 2, 2020, 7:35pm UTC](https://discuss.elastic.co/t/i-have-added-ssl-certificate-ti-single-node-cluster-and-im-ended-up-with-this-error/230823 "2020-05-02T19:35:06Z")
I have successfully installed SSL certificate and restarted the elasticsearch instance. Then while I'm running this query curl -k http://localhost:9200?pretty -u elastic I'm getting this error curl: (35) error:… --- ## [\[Solved\] Compile error when searching in discover, unexpected token \['\'\] was expecting one of \['}'\]](https://discuss.elastic.co/t/solved-compile-error-when-searching-in-discover-unexpected-token-eof-was-expecting-one-of/84156)
**Author:** [@chris03](https://discuss.elastic.co/u/chris03)\ **Replies:** 4\ **Last updated:** [May 5, 2017, 12:40pm UTC](https://discuss.elastic.co/t/solved-compile-error-when-searching-in-discover-unexpected-token-eof-was-expecting-one-of/84156 "2017-05-05T12:40:44Z")
Kibana was working just fine but now the below error appears each time I search in the "Discover" panel. It appeard on version 5.3.0, I upgraded to 5.3.1 but still got the error. Looking at the "script" in the error it… --- ## [Avoid split brain with new Elasticsearch 7.0 after discovery.zen.minimum\_master\_nodes removal](https://discuss.elastic.co/t/avoid-split-brain-with-new-elasticsearch-7-0-after-discovery-zen-minimum-master-nodes-removal/176877)
**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\ **Replies:** 5\ **Last updated:** [April 18, 2019, 7:58am UTC](https://discuss.elastic.co/t/avoid-split-brain-with-new-elasticsearch-7-0-after-discovery-zen-minimum-master-nodes-removal/176877 "2019-04-18T07:58:46Z")
Hi everybody, In the current release of Elasticsearch, the dicovery.zen.minimum\_master\_nodes settings have been removed. I have a cluster of 5 nodes cross data center (yes I KNOW it's not a good idea but I don't really … --- ## [Exclude archive files from filebeat processing](https://discuss.elastic.co/t/exclude-archive-files-from-filebeat-processing/83147)
**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\ **Replies:** 3\ **Last updated:** [April 26, 2017, 11:52am UTC](https://discuss.elastic.co/t/exclude-archive-files-from-filebeat-processing/83147 "2017-04-26T11:52:58Z")
Dear all, I need exclude archive files from filebeat processing. My archive exstensions: \*.gz, \*.bz2 Currently i have configured exclusion of such type of files, but it is not working. exclude\_files: \[".gz$",".ou… --- ## [Multiple requests in one query](https://discuss.elastic.co/t/multiple-requests-in-one-query/11569)
**Author:** [@Abhishek\_Andhavarapu](https://discuss.elastic.co/u/Abhishek_Andhavarapu)\ **Replies:** 2\ **Last updated:** [April 15, 2013, 6:44am UTC](https://discuss.elastic.co/t/multiple-requests-in-one-query/11569 "2013-04-15T06:44:34Z")
Hi all, I was wondering if I can pass multiple queries in single requests. I'm trying to compute a table using elastic search. I have to execute 100 queries separately to fill up the table. Thats lots of network I… --- ## [Bin/elasticsearch-certutil ca command is not working](https://discuss.elastic.co/t/bin-elasticsearch-certutil-ca-command-is-not-working/221016)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 3\ **Last updated:** [February 26, 2020, 11:26am UTC](https://discuss.elastic.co/t/bin-elasticsearch-certutil-ca-command-is-not-working/221016 "2020-02-26T11:26:04Z")
I install elasticsearch 7.3 using this command wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.3.2-amd64.deb wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.3.2-amd64.… --- ## [Nxlog and elasticsearch](https://discuss.elastic.co/t/nxlog-and-elasticsearch/46541)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 7\ **Last updated:** [April 7, 2016, 3:32pm UTC](https://discuss.elastic.co/t/nxlog-and-elasticsearch/46541 "2016-04-07T15:32:18Z")
Hello, to send logs I use winlogbeat and it works, but I want to try to send logs from Windows machine to ELK installed on Windows with nxlog and it doesn't work, here is my nxlog.conf, maybe someone will correct it, d… --- ## [Sending a post to ES](https://discuss.elastic.co/t/sending-a-post-to-es/78029)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 5\ **Last updated:** [March 10, 2017, 1:39pm UTC](https://discuss.elastic.co/t/sending-a-post-to-es/78029 "2017-03-10T13:39:06Z")
I'm trying to design a custom button on my dashboard that will make a watch for a specific query. Going into the API and editing watches based off of data I have in the dashboard is a bit slow and I'm in the process of … --- ## [Problem with multiple mapping types in 6.0. Not sure why](https://discuss.elastic.co/t/problem-with-multiple-mapping-types-in-6-0-not-sure-why/108231)
**Author:** [@mbsj](https://discuss.elastic.co/u/mbsj)\ **Replies:** 6\ **Last updated:** [November 18, 2017, 10:05am UTC](https://discuss.elastic.co/t/problem-with-multiple-mapping-types-in-6-0-not-sure-why/108231 "2017-11-18T10:05:00Z")
I have previously commented on another topic with a similar issue, but as that was beats related, and fixed by updates there, and mine is not, i a, creating this topic. I am getting errors due to multiple mapping types,… --- ## [Logstash Could not index event to Elasticsearch, mapper\_parsing\_exception, illegal\_argument\_exception](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch-mapper-parsing-exception-illegal-argument-exception/149876)
**Author:** [@Simon\_Becker](https://discuss.elastic.co/u/Simon_Becker)\ **Replies:** 5\ **Last updated:** [September 26, 2018, 7:08pm UTC](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch-mapper-parsing-exception-illegal-argument-exception/149876 "2018-09-26T19:08:01Z")
Hi there, I try to get a JSON Formatted Datastream from Kafka processed by logstash towards Elasticsearch. My Json Stream has multiple Arrays filled with objects. All of the arrays except of one are working perfectly f… --- ## [Expected numeric type on field \[timestamp\], but got \[string\]](https://discuss.elastic.co/t/expected-numeric-type-on-field-timestamp-but-got-string/101031)
**Author:** [@Radhakrishnan](https://discuss.elastic.co/u/Radhakrishnan)\ **Replies:** 4\ **Last updated:** [September 25, 2017, 3:17pm UTC](https://discuss.elastic.co/t/expected-numeric-type-on-field-timestamp-but-got-string/101031 "2017-09-25T15:17:46Z")
\[DEBUG\]\[action.search \] \[Hit-Maker\] All shards failed for phase: \[query\] RemoteTransportException\[\[Hit-Maker\]\[127.0.0.1:9300\]\[indices:data/read/search\[phase/query\]\]\]; nested: IllegalArgumentException\[Expected… --- ## [Received plaintext http traffic on an https channel, closing connection](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel-closing-connection/271380)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 1\ **Last updated:** [April 28, 2021, 12:32pm UTC](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel-closing-connection/271380 "2021-04-28T12:32:58Z")
I have deployed ECK (using helm) on my k8s cluster and i am attempting to install elasticsearch following the docs. Deploy an Elasticsearch cluster | Elastic Cloud on Kubernetes \[2.10\] | Elastic I have externally expose… --- ## [View raw log data by clicking on Kibana visualization?](https://discuss.elastic.co/t/view-raw-log-data-by-clicking-on-kibana-visualization/104942)
**Author:** [@elk\_of\_the\_forest](https://discuss.elastic.co/u/elk_of_the_forest)\ **Replies:** 1\ **Last updated:** [October 24, 2017, 6:06pm UTC](https://discuss.elastic.co/t/view-raw-log-data-by-clicking-on-kibana-visualization/104942 "2017-10-24T18:06:08Z")
Hi there, is there a way to be able to view or be redirected to raw log data by just clicking on a Visualization in Kibana? For example in this chart: \[40 AM\] If I were to click the last vertical bar on the chart (201… --- ## [Error related to scripted fields](https://discuss.elastic.co/t/error-related-to-scripted-fields/84164)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 8\ **Last updated:** [May 3, 2017, 1:42pm UTC](https://discuss.elastic.co/t/error-related-to-scripted-fields/84164 "2017-05-03T13:42:07Z")
Hi ......all here is my code for scripted field when i save this script in kibana it throws compiler error is my script is correct......? Thanks in advance filter : { "nested": { "path": "ConfigRules… --- ## [Email sending failed on my watcher alert](https://discuss.elastic.co/t/email-sending-failed-on-my-watcher-alert/221501)
**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\ **Replies:** 6\ **Last updated:** [March 3, 2020, 1:46pm UTC](https://discuss.elastic.co/t/email-sending-failed-on-my-watcher-alert/221501 "2020-03-03T13:46:24Z")
Hi, I have configured my watcher in my ELK stack 7.6.0 installed that in my Ubuntu 18.04 LTS. my elasticsearch.yml config. xpack.watcher.enabled: true xpack.notification.email.account: gmail\_account: prof… --- ## [Pull logs via ssh - push not possible](https://discuss.elastic.co/t/pull-logs-via-ssh-push-not-possible/48102)
**Author:** [@Thomas-Guettler](https://discuss.elastic.co/u/Thomas-Guettler)\ **Replies:** 4\ **Last updated:** [October 23, 2016, 9:03am UTC](https://discuss.elastic.co/t/pull-logs-via-ssh-push-not-possible/48102 "2016-10-23T09:03:10Z")
We have some servers in remote data centers where we can open a ssh from our central server to the remote-server. But the remote-server (where the logs get created) can't push the logs to our central server. What is th… --- ## [Reporting - Generate CSV maximum limit](https://discuss.elastic.co/t/reporting-generate-csv-maximum-limit/134692)
**Author:** [@SandyKWill](https://discuss.elastic.co/u/SandyKWill)\ **Replies:** 1\ **Last updated:** [June 6, 2018, 3:13pm UTC](https://discuss.elastic.co/t/reporting-generate-csv-maximum-limit/134692 "2018-06-06T15:13:18Z")
What is the limit on the logs downloaded using the "Generate CSV" report feature? The first time I ran it, I successfully downloaded all 13,550 records that were shown in Discover. Today, I ran the same search (24 hour… --- ## [How to keep an ES cluster happy during a K8s(!) node update](https://discuss.elastic.co/t/how-to-keep-an-es-cluster-happy-during-a-k8s-node-update/293736)
**Author:** [@jugosag](https://discuss.elastic.co/u/jugosag)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 5:17am UTC](https://discuss.elastic.co/t/how-to-keep-an-es-cluster-happy-during-a-k8s-node-update/293736 "2022-01-17T05:17:43Z")
Hi all, I am looking for general guidance on how to keep an Elasticsearch cluster on K8s happy while doing a K8s node update. Motivation We are running an HA microservice-based SaaS application on Kubernetes, we have i… --- ## [Curator with multiple actions isn't deleting all specified indices](https://discuss.elastic.co/t/curator-with-multiple-actions-isnt-deleting-all-specified-indices/70432)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 7\ **Last updated:** [January 4, 2017, 5:06pm UTC](https://discuss.elastic.co/t/curator-with-multiple-actions-isnt-deleting-all-specified-indices/70432 "2017-01-04T17:06:02Z")
I am using Curator 4.0.0 to manage a bunch of indices, and when I try to specify several filters in a single actions.yml, it seems to do something odd. I have four things going into ES: WinLogBeat, FileBeat, MetricBeat… --- ## [Error importing Kibana dashboards](https://discuss.elastic.co/t/error-importing-kibana-dashboards/120336)
**Author:** [@Gaurav\_Vijayvergia](https://discuss.elastic.co/u/Gaurav_Vijayvergia)\ **Replies:** 3\ **Last updated:** [February 25, 2018, 1:36am UTC](https://discuss.elastic.co/t/error-importing-kibana-dashboards/120336 "2018-02-25T01:36:34Z")
Error message : instance/beat.go:667 Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: can not convert 'object' into 'string' accessing 'setup.kibana.hos… --- ## [How to set @timestamp with my timezone?](https://discuss.elastic.co/t/how-to-set-timestamp-with-my-timezone/82457)
**Author:** [@Bazum](https://discuss.elastic.co/u/Bazum)\ **Replies:** 2\ **Last updated:** [April 18, 2017, 5:39am UTC](https://discuss.elastic.co/t/how-to-set-timestamp-with-my-timezone/82457 "2017-04-18T05:39:50Z")
Hi, Hey guys I woud like to know if it is possible to change the @timezone from logstash to my timezone (Brazil/East). I need to change the timezone because I am using the -%{+YYYY-MM-dd} to create index with its proce… --- ## [Ctx.payload.hits.total.value in condition not working](https://discuss.elastic.co/t/ctx-payload-hits-total-value-in-condition-not-working/195578)
**Author:** [@maria1](https://discuss.elastic.co/u/maria1)\ **Replies:** 6\ **Last updated:** [August 22, 2019, 11:18am UTC](https://discuss.elastic.co/t/ctx-payload-hits-total-value-in-condition-not-working/195578 "2019-08-22T11:18:08Z")
hello, I'm trying to configure a watch that get eventologs from winlogbeat, in my condition I compare "ctx.payload.hits.total.value" in order to make actions when is greater than 10, but my condition is always false, I h… --- ## [Elastic Stack 7.11.0 and 6.8.14 Security Update](https://discuss.elastic.co/t/elastic-stack-7-11-0-and-6-8-14-security-update/263915)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [February 10, 2021, 5:50pm UTC](https://discuss.elastic.co/t/elastic-stack-7-11-0-and-6-8-14-security-update/263915 "2021-02-10T17:50:33Z")
Elasticsearch information disclosure (ESA-2021-03) Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit\_request\_body option is enabled. The Elasticsearch a… --- ## [\[scripted field\] convert String date to timestamp](https://discuss.elastic.co/t/scripted-field-convert-string-date-to-timestamp/94885)
**Author:** [@Hyojoung\_Shin](https://discuss.elastic.co/u/Hyojoung_Shin)\ **Replies:** 1\ **Last updated:** [July 28, 2017, 3:32pm UTC](https://discuss.elastic.co/t/scripted-field-convert-string-date-to-timestamp/94885 "2017-07-28T15:32:37Z")
Hi. I am trying to calculate dates in scripted field. If I want to calculated between elasticsearch field and date string, what should I do? I think I need to convert string type date to timestamp. What is the way to… --- ## [Elastic 5.0 rejects "non-caching" underscore (\_) parameter in query string of Ajax request URL](https://discuss.elastic.co/t/elastic-5-0-rejects-non-caching-underscore---parameter-in-query-string-of-ajax-request-url/66961)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 5\ **Last updated:** [November 24, 2016, 9:54am UTC](https://discuss.elastic.co/t/elastic-5-0-rejects-non-caching-underscore---parameter-in-query-string-of-ajax-request-url/66961 "2016-11-24T09:54:50Z")
I've developed a tiny web UI for the Elasticsearch HTTP REST API that displays a table of indices, and then lets you delete indices. I find it useful for testing. I call it "Lackygun". :grin: I originally wrote Lackygun… --- ## [How elasticsearch encodes strings with special characters before storing](https://discuss.elastic.co/t/how-elasticsearch-encodes-strings-with-special-characters-before-storing/20595)
**Author:** [@Shobana\_Neelakantan](https://discuss.elastic.co/u/Shobana_Neelakantan)\ **Replies:** 4\ **Last updated:** [February 14, 2017, 2:49pm UTC](https://discuss.elastic.co/t/how-elasticsearch-encodes-strings-with-special-characters-before-storing/20595 "2017-02-14T14:49:23Z")
Hi We have input documents with special characters like % and \_ as values. When it gets stored in elasticsearch these special characters are replaced with hex code equivalent. eg. X3dPVA9%252bZZjFLd864e7U1udCbH… --- ## [How to share visualizations for public access in Kibana?](https://discuss.elastic.co/t/how-to-share-visualizations-for-public-access-in-kibana/72648)
**Author:** [@kokojumbo](https://discuss.elastic.co/u/kokojumbo)\ **Replies:** 4\ **Last updated:** [February 1, 2017, 9:37am UTC](https://discuss.elastic.co/t/how-to-share-visualizations-for-public-access-in-kibana/72648 "2017-02-01T09:37:32Z")
How can I share dashboards and visualizations using a share link and block access to the Kibana (5.1.1) management panel? When I use X-pack for security then all users have to type login and password to access charts. I … --- ## [Final mapping would have more than 1 type: \[\_doc, doc\]](https://discuss.elastic.co/t/final-mapping-would-have-more-than-1-type-doc-doc/184580)
**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\ **Replies:** 3\ **Last updated:** [June 6, 2019, 3:14pm UTC](https://discuss.elastic.co/t/final-mapping-would-have-more-than-1-type-doc-doc/184580 "2019-06-06T15:14:26Z")
I am getting below error in my logstash logs: \[2019-06-06T01:06:27,503\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"winlogbeat-2… --- ## [The bulk API becomes much slower once I have indexed 300,000 documents into elasticsearch?](https://discuss.elastic.co/t/the-bulk-api-becomes-much-slower-once-i-have-indexed-300-000-documents-into-elasticsearch/30008)
**Author:** [@jinshui.tang](https://discuss.elastic.co/u/jinshui.tang)\ **Replies:** 8\ **Last updated:** [September 28, 2015, 7:02am UTC](https://discuss.elastic.co/t/the-bulk-api-becomes-much-slower-once-i-have-indexed-300-000-documents-into-elasticsearch/30008 "2015-09-28T07:02:33Z")
I have setup an elasticsearch cluster on the AWS, the cluster has 2 shards each with 1 replicate, so I have 4 VMs in total for the cluster. My goal is to use the mongo-connector to dump 1 million documents from my mong… --- ## [Clear scroll clarification](https://discuss.elastic.co/t/clear-scroll-clarification/76596)
**Author:** [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\ **Replies:** 1\ **Last updated:** [February 27, 2017, 10:20am UTC](https://discuss.elastic.co/t/clear-scroll-clarification/76596 "2017-02-27T10:20:29Z")
Hi all, Question about scroll and clear scroll: Ref: https://www.elastic.co/guide/en/elasticsearch/reference/2.4/search-request-scroll.html The documentation says that The initial search request and each subse… --- ## [Docker | ERROR: no log4j2.properties found; tried \[/usr/share/elasticsearch/config\] and its subdirectories](https://discuss.elastic.co/t/docker-error-no-log4j2-properties-found-tried-usr-share-elasticsearch-config-and-its-subdirectories/81444)
**Author:** [@nskalis](https://discuss.elastic.co/u/nskalis)\ **Replies:** 3\ **Last updated:** [April 6, 2017, 2:03pm UTC](https://discuss.elastic.co/t/docker-error-no-log4j2-properties-found-tried-usr-share-elasticsearch-config-and-its-subdirectories/81444 "2017-04-06T14:03:25Z")
Hi guys, Could you please advise on the following: I would like to run elasticsearch 5.3.0, and this is the command of how I am doing it: docker -D run -d --env "ES\_JAVA\_OPTS=-Xms2G -Xmx2G" --name="IP-spotlight.e… --- ## [Kafka connect (elasticsearch connector) vs Logstash](https://discuss.elastic.co/t/kafka-connect-elasticsearch-connector-vs-logstash/71005)
**Author:** [@venkat\_venkat](https://discuss.elastic.co/u/venkat_venkat)\ **Replies:** 8\ **Last updated:** [January 10, 2017, 6:37am UTC](https://discuss.elastic.co/t/kafka-connect-elasticsearch-connector-vs-logstash/71005 "2017-01-10T06:37:31Z")
HI, Thanks in advance!! We are building a new pipe line, we want to use kafka connect (elasticsearch connector) instead of logstash, for one of theEnvoirnment, i want to know which one is better. Please advice me. --- ## [EsHadoopInvalidRequest](https://discuss.elastic.co/t/eshadoopinvalidrequest/26903)
**Author:** [@drippel](https://discuss.elastic.co/u/drippel)\ **Replies:** 5\ **Last updated:** [November 9, 2015, 9:30am UTC](https://discuss.elastic.co/t/eshadoopinvalidrequest/26903 "2015-11-09T09:30:52Z")
When we run: { "from" : 0, "size" : 2147483647, "query" : { "bool" : { "should" : { "match" : { "\_all" : { "query" : "News", "type" : "boolean", "an… [Previous page](https://discuss.elastic.co/top.md?page=378&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=380&per_page=50&period=all)