# Top

**URL:** https://discuss.elastic.co/top.md?page=384&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 385

---

## [Elasticsearch Java API for function\_score query](https://discuss.elastic.co/t/elasticsearch-java-api-for-function-score-query/18011)

<div class="topic-metadata">

**Author:** [@Jayanth\_Inakollu](https://discuss.elastic.co/u/Jayanth_Inakollu)\
**Replies:** 5\
**Last updated:** [September 10, 2014, 5:17pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-for-function-score-query/18011 "2014-09-10T17:17:47Z")

</div>

I need to implement the below function\_score query using Java APIs. I couldn't find any official documentation for function\_score query in the Java API section of elasticsearch "function\_score": { "functions"…

---

## [Upgrading elastic search in spring boot](https://discuss.elastic.co/t/upgrading-elastic-search-in-spring-boot/178918)

<div class="topic-metadata">

**Author:** [@BlueSpirit](https://discuss.elastic.co/u/BlueSpirit)\
**Replies:** 7\
**Last updated:** [April 30, 2019, 11:34am UTC](https://discuss.elastic.co/t/upgrading-elastic-search-in-spring-boot/178918 "2019-04-30T11:34:48Z")

</div>

Hi, I need to use ES 6.7.1 in myproject project, but it is using 6.4.3 only. My project hierarchy: root +-services +-datamanagement +-myproject Contents of the file are: root pom.xml \<project xmlns="htt…

---

## [Offline installation of X-Pack](https://discuss.elastic.co/t/offline-installation-of-x-pack/65316)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 6\
**Last updated:** [November 8, 2016, 9:03am UTC](https://discuss.elastic.co/t/offline-installation-of-x-pack/65316 "2016-11-08T09:03:23Z")

</div>

I have downloaded x-pack-5.0.0.zipand extracted it in a folder like /setup/x-pack-5.0.0.zip. Here https://www.elastic.co/guide/en/x-pack/5.0/installing-xpack.html#xpack-installing-offline I have seen the command; bin/e…

---

## [Does elastic-search's {"acknowledged":true} means actually all of indices are have been "created"?](https://discuss.elastic.co/t/does-elastic-searchs-acknowledged-true-means-actually-all-of-indices-are-have-been-created/216608)

<div class="topic-metadata">

**Author:** [@IC1101Galaxy](https://discuss.elastic.co/u/IC1101Galaxy)\
**Replies:** 7\
**Last updated:** [January 29, 2020, 11:34pm UTC](https://discuss.elastic.co/t/does-elastic-searchs-acknowledged-true-means-actually-all-of-indices-are-have-been-created/216608 "2020-01-29T23:34:53Z")

</div>

When we add some new indices elastic-search and it returns "acknowledged". I just want to know does {"acknowledged":true} means all of indices actually "have been created" or not. If not, even though {"acknowledged":tr…

---

## [java.io.IOException: Page file size is too small to hold elements](https://discuss.elastic.co/t/java-io-ioexception-page-file-size-is-too-small-to-hold-elements/193002)

<div class="topic-metadata">

**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 4:53pm UTC](https://discuss.elastic.co/t/java-io-ioexception-page-file-size-is-too-small-to-hold-elements/193002 "2019-08-01T16:53:50Z")

</div>

I am getting the below message on 7.2.0 logstash. I use the same pipeline i had for 6.x but with 7.2.0 i get the below error. Any ideas? root@d-gp2-es46-4:/var/log/logstash# cat logstash-plain.log \[2019-07-30T22:48:1…

---

## [File input not working](https://discuss.elastic.co/t/file-input-not-working/159016)

<div class="topic-metadata">

**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\
**Replies:** 6\
**Last updated:** [December 5, 2018, 9:53am UTC](https://discuss.elastic.co/t/file-input-not-working/159016 "2018-12-05T09:53:31Z")

</div>

I am looking to use logstash to ingest a csv file that contains some stats and then graph them. I have setup a file input but I am unable to get it to work. My logstash config is input { file { path =\> "C:\\logstash-6…

---

## [Get latest records from index](https://discuss.elastic.co/t/get-latest-records-from-index/117035)

<div class="topic-metadata">

**Author:** [@Avinash1](https://discuss.elastic.co/u/Avinash1)\
**Replies:** 1\
**Last updated:** [February 3, 2018, 9:24pm UTC](https://discuss.elastic.co/t/get-latest-records-from-index/117035 "2018-02-03T21:24:47Z")

</div>

Hi , In mysql i had query like select \* from (select idx,machine,customer,FROM\_UNIXTIME(servertime) from Events where customer='MSP\_NH\_TEST' and machine in ('GERMAN','HFN-ENGINE','HFND100035','HFND100036') order by idx…

---

## [Logstash grok to match the metricbeat type and add field](https://discuss.elastic.co/t/logstash-grok-to-match-the-metricbeat-type-and-add-field/122295)

<div class="topic-metadata">

**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\
**Replies:** 8\
**Last updated:** [March 7, 2018, 2:23pm UTC](https://discuss.elastic.co/t/logstash-grok-to-match-the-metricbeat-type-and-add-field/122295 "2018-03-07T14:23:55Z")

</div>

Hi Logstash Experts, I have metricbeat to logstash to Kibana pipeline. In the logstash, I have the below grok filter to parse java process. But it is not adding the field for the matched pattern. secondly, it is additio…

---

## [Filebeat showing logs older than 24 hrs](https://discuss.elastic.co/t/filebeat-showing-logs-older-than-24-hrs/52668)

<div class="topic-metadata">

**Author:** [@filebeat\_win](https://discuss.elastic.co/u/filebeat_win)\
**Replies:** 5\
**Last updated:** [June 15, 2016, 1:24pm UTC](https://discuss.elastic.co/t/filebeat-showing-logs-older-than-24-hrs/52668 "2016-06-15T13:24:22Z")

</div>

Hi All, On Windows, my filebeat.yml is set to ignore older than 24h, yet when I am running filebeat today, it is actually showing IIS logs from back in May. The IIS logs are configured to rollover each day, so I'm not…

---

## [How To receive a SOAP Response message from web service](https://discuss.elastic.co/t/how-to-receive-a-soap-response-message-from-web-service/114868)

<div class="topic-metadata">

**Author:** [@s1m0ne](https://discuss.elastic.co/u/s1m0ne)\
**Replies:** 5\
**Last updated:** [January 16, 2018, 9:05am UTC](https://discuss.elastic.co/t/how-to-receive-a-soap-response-message-from-web-service/114868 "2018-01-16T09:05:42Z")

</div>

Hi Folks, NOTE: Logstash version 5.6.2 Currently, I receive events in (json format) from apache kafka and I use logstash with HTTP Output plugin for sending SOAP Request message to Web Service, via WSDL. output { …

---

## [Unable to start elasticsearch 5.4.0 in docker](https://discuss.elastic.co/t/unable-to-start-elasticsearch-5-4-0-in-docker/84800)

<div class="topic-metadata">

**Author:** [@abhijat](https://discuss.elastic.co/u/abhijat)\
**Replies:** 7\
**Last updated:** [May 8, 2017, 9:47am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-5-4-0-in-docker/84800 "2017-05-08T09:47:27Z")

</div>

I am unable to start elasticsearch 5.4.0 in docker. When I start I see the following error: Let me know what other information I can provide to help troubleshoot this issue. \[2017-05-06T00:50:34,900\]\[ERROR\]\[o.e.b.Boot…

---

## ["failed to process cluster event (put-mapping) within 30s" for first few requests to ingest into new index](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s-for-first-few-requests-to-ingest-into-new-index/176831)

<div class="topic-metadata">

**Author:** [@markryall](https://discuss.elastic.co/u/markryall)\
**Replies:** 5\
**Last updated:** [April 16, 2019, 5:24am UTC](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s-for-first-few-requests-to-ingest-into-new-index/176831 "2019-04-16T05:24:25Z")

</div>

Hi Everyone! We are ingesting documents into a new elasticsearch index using 40 separate processes. We're experiencing an issue which seems to only occur during the first few requests. We receive the following remote …

---

## [Elastic search (Spring data elastic search)- Date filter(range) not working as expected](https://discuss.elastic.co/t/elastic-search-spring-data-elastic-search-date-filter-range-not-working-as-expected/94055)

<div class="topic-metadata">

**Author:** [@kkvblr](https://discuss.elastic.co/u/kkvblr)\
**Replies:** 1\
**Last updated:** [July 28, 2017, 9:10am UTC](https://discuss.elastic.co/t/elastic-search-spring-data-elastic-search-date-filter-range-not-working-as-expected/94055 "2017-07-28T09:10:04Z")

</div>

I tried to search/filter on field(“timestamp”), but data are not filtered or returned as expected. I wanted to search/filter data’s based on (startDate and endDate) filter. I tried for a single field("timestamp) range …

---

## [Es mapping problem](https://discuss.elastic.co/t/es-mapping-problem/10652)

<div class="topic-metadata">

**Author:** [@andrea\_crotti](https://discuss.elastic.co/u/andrea_crotti)\
**Replies:** 4\
**Last updated:** [February 7, 2013, 7:01pm UTC](https://discuss.elastic.co/t/es-mapping-problem/10652 "2013-02-07T19:01:50Z")

</div>

I copied and slightly modified the example from the official doc, but this fails: $ curl -XPUT 'http://localhost:9200/wk-beta-com/created\_datetime/\_mapping' -d '{ "created\_datetime" : { "properties" …

---

## [Rally can't connect to the remote cluster when install x-pack and is enabled](https://discuss.elastic.co/t/rally-cant-connect-to-the-remote-cluster-when-install-x-pack-and-is-enabled/84891)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 1\
**Last updated:** [May 8, 2017, 10:28am UTC](https://discuss.elastic.co/t/rally-cant-connect-to-the-remote-cluster-when-install-x-pack-and-is-enabled/84891 "2017-05-08T10:28:32Z")

</div>

\[es@8 ~\]$ esrally --pipeline=benchmark-only --target-hosts=11.11.165.61:9200 \[ERROR\] Cannot race. TransportError(401, 'security\_exception', 'missing authentication token for REST request \[/\]') the log file 2017-05-0…

---

## [Python elasticsearch client : TypeError: index() got an unexpected keyword argument 'document'](https://discuss.elastic.co/t/python-elasticsearch-client-typeerror-index-got-an-unexpected-keyword-argument-document/308758)

<div class="topic-metadata">

**Author:** [@Jay\_Urbain](https://discuss.elastic.co/u/Jay_Urbain)\
**Replies:** 1\
**Last updated:** [July 8, 2022, 7:04am UTC](https://discuss.elastic.co/t/python-elasticsearch-client-typeerror-index-got-an-unexpected-keyword-argument-document/308758 "2022-07-08T07:04:34Z")

</div>

elasticsearch: 8.3.1 python 3.9 Mac OS: Montery 12.4, ARM architecture. Running the getting started example from elasticsearch docs (Python Elasticsearch Client — Python Elasticsearch client 8.3.1 documentation) I'm g…

---

## [Job for elasticsearch.service failed because the service did not take the steps required by its unit configuration](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-service-did-not-take-the-steps-required-by-its-unit-configuration/203905)

<div class="topic-metadata">

**Author:** [@bayardk](https://discuss.elastic.co/u/bayardk)\
**Replies:** 3\
**Last updated:** [October 22, 2019, 12:42am UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-service-did-not-take-the-steps-required-by-its-unit-configuration/203905 "2019-10-22T00:42:00Z")

</div>

Hi. I've just installed Elasticsearch 7.4 on three openSuSE LEAP 15.1 machines. Two are fine, one throws this systemd error: $ sudo systemctl start elasticsearch Job for elasticsearch.service failed because the service…

---

## [Kibana: Failed to decrypt "apiKey" attribute: Unsupported state or unable to authenticate data](https://discuss.elastic.co/t/kibana-failed-to-decrypt-apikey-attribute-unsupported-state-or-unable-to-authenticate-data/251236)

<div class="topic-metadata">

**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\
**Replies:** 3\
**Last updated:** [June 15, 2022, 9:49am UTC](https://discuss.elastic.co/t/kibana-failed-to-decrypt-apikey-attribute-unsupported-state-or-unable-to-authenticate-data/251236 "2022-06-15T09:49:58Z")

</div>

Hello everybody, I am facing the error: Kibana: Failed to decrypt "apiKey" attribute: Unsupported state or unable to authenticate data After that I added the line below to Kibana configuration file: xpack.encryptedSa…

---

## [Dead Letter - cannot write event to DLQ: reached maxQueueSize of 2147483648](https://discuss.elastic.co/t/dead-letter-cannot-write-event-to-dlq-reached-maxqueuesize-of-2147483648/239100)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 6\
**Last updated:** [July 3, 2020, 4:24am UTC](https://discuss.elastic.co/t/dead-letter-cannot-write-event-to-dlq-reached-maxqueuesize-of-2147483648/239100 "2020-07-03T04:24:55Z")

</div>

Hi Team, I facing syncing issue in Elasticsearch and when i check my logstash log and i observer the below error "cannot write event to DLQ: reached maxQueueSize of 2147483648". whether its causing the syncing issue …

---

## [DELETE index fails with 403 Forbidden when request goes through proxy](https://discuss.elastic.co/t/delete-index-fails-with-403-forbidden-when-request-goes-through-proxy/72376)

<div class="topic-metadata">

**Author:** [@jammann](https://discuss.elastic.co/u/jammann)\
**Replies:** 6\
**Last updated:** [January 24, 2017, 7:30pm UTC](https://discuss.elastic.co/t/delete-index-fails-with-403-forbidden-when-request-goes-through-proxy/72376 "2017-01-24T19:30:55Z")

</div>

Hi I have a very strange issue with a newly setup 3-node 5.1.1 cluster (with X-Pack basic installed). Normally I access the ES HTTP port through an Apache reverse proxy. This works fine for most actions, I can use Sens…

---

## [Logstash is complaining about the path of the certificates](https://discuss.elastic.co/t/logstash-is-complaining-about-the-path-of-the-certificates/38788)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 2\
**Last updated:** [January 9, 2016, 3:43pm UTC](https://discuss.elastic.co/t/logstash-is-complaining-about-the-path-of-the-certificates/38788 "2016-01-09T15:43:41Z")

</div>

Hello, I am running the latest version of logstash 2.1 and I have configured the certificates as it: beats { port =\> 5044 type =\> "logs" ssl =\> "true" ssl\_certificate =\> "/etc/letsencrypt/live/core.z0z0…

---

## [A plugin had an unrecoverable error LogStash::Inputs::Beats 5.2.1](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-logstash-inputs-beats-5-2-1/96522)

<div class="topic-metadata">

**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 6:13am UTC](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-logstash-inputs-beats-5-2-1/96522 "2017-08-10T06:13:44Z")

</div>

Hi, I am trying to start my Logstash config in one of my server. I am getting the following error which I couldn’t figure out. I am using Logstash and filebeat version 5.2.1. Filebeat is running on remote server. Erro…

---

## [Kibana logging errors after SSl configuration](https://discuss.elastic.co/t/kibana-logging-errors-after-ssl-configuration/180626)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 7\
**Last updated:** [May 15, 2019, 4:55pm UTC](https://discuss.elastic.co/t/kibana-logging-errors-after-ssl-configuration/180626 "2019-05-15T16:55:25Z")

</div>

Hi I have enabled SSL on kibana. I have added the pem certificate and key as suggested in the documentation page. After restart the kibana loads but I see many errors in logs. The only different thing I did here is con…

---

## [Calculate time difference between two logs with unique ID](https://discuss.elastic.co/t/calculate-time-difference-between-two-logs-with-unique-id/82333)

<div class="topic-metadata">

**Author:** [@michaeleino](https://discuss.elastic.co/u/michaeleino)\
**Replies:** 1\
**Last updated:** [April 16, 2017, 12:30am UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-logs-with-unique-id/82333 "2017-04-16T00:30:31Z")

</div>

hello all, I'm in the need to calculate the time difference manually without the elapsed plug-in as my end time varies & may got to 24hour with a very big amount of logs. I managed to get the start time from the old log …

---

## [How to customize beat host name or beat name](https://discuss.elastic.co/t/how-to-customize-beat-host-name-or-beat-name/117968)

<div class="topic-metadata">

**Author:** [@Lory\_Hou](https://discuss.elastic.co/u/Lory_Hou)\
**Replies:** 3\
**Last updated:** [February 1, 2018, 2:06pm UTC](https://discuss.elastic.co/t/how-to-customize-beat-host-name-or-beat-name/117968 "2018-02-01T14:06:54Z")

</div>

I am using metricbeat to collect system performance via docker installation. The beat.name and beat.hostname is the b60271bea7a3 which is not readable. Can I customize it via docker-compose file, like ··· environment: …

---

## [\[script\] query does not support \[params\]](https://discuss.elastic.co/t/script-query-does-not-support-params/116631)

<div class="topic-metadata">

**Author:** [@lbrutti](https://discuss.elastic.co/u/lbrutti)\
**Replies:** 3\
**Last updated:** [January 23, 2018, 9:55am UTC](https://discuss.elastic.co/t/script-query-does-not-support-params/116631 "2018-01-23T09:55:37Z")

</div>

Hello, I'm trying to perform a scripted query: { "query": { "bool": { "must": \[ { "script": { "script": "doc\['@timestamp'\].value.hourOfDay \>= params.startHour && doc\['@timestam…

---

## [Timelion sum metric by month](https://discuss.elastic.co/t/timelion-sum-metric-by-month/68324)

<div class="topic-metadata">

**Author:** [@sjivan](https://discuss.elastic.co/u/sjivan)\
**Replies:** 2\
**Last updated:** [December 8, 2016, 3:43am UTC](https://discuss.elastic.co/t/timelion-sum-metric-by-month/68324 "2016-12-08T03:43:59Z")

</div>

Hi, I'd like to have Timelion use a data points that are a sum total for a given period like a month or a quarter. For example company Profit&Loss is reported monthly or quarterly but underlying data is at the granularit…

---

## [Expected \[START\_OBJECT\] but found \[VALUE\_STRING\]](https://discuss.elastic.co/t/expected-start-object-but-found-value-string/129883)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [April 28, 2018, 11:55am UTC](https://discuss.elastic.co/t/expected-start-object-but-found-value-string/129883 "2018-04-28T11:55:48Z")

</div>

I followed Elasticsearch input plugin | Logstash Reference to implement "Scheduling" of my pipeline: # grep schedule pipeline.cfg schedule =\> '0 \* \* \* \*' # yet logstash produces errors such as this: l…

---

## [Multi\_match with Wildcard?](https://discuss.elastic.co/t/multi-match-with-wildcard/144883)

<div class="topic-metadata">

**Author:** [@Duncan\_Mein](https://discuss.elastic.co/u/Duncan_Mein)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 1:14pm UTC](https://discuss.elastic.co/t/multi-match-with-wildcard/144883 "2018-08-17T13:14:00Z")

</div>

This query is working well for me but I wondered if it's possible to use wildcards on the search term? { "query": { "multi\_match" : { "query": "Jones Mein", "fields": \[ "surname", "person\_number" \], "fuzziness":…

---

## ["\_grokparsefailure" even though the grok pattern matches](https://discuss.elastic.co/t/-grokparsefailure-even-though-the-grok-pattern-matches/96783)

<div class="topic-metadata">

**Author:** [@Hisushi](https://discuss.elastic.co/u/Hisushi)\
**Replies:** 8\
**Last updated:** [August 14, 2017, 7:41am UTC](https://discuss.elastic.co/t/-grokparsefailure-even-though-the-grok-pattern-matches/96783 "2017-08-14T07:41:00Z")

</div>

Hi everyone, I’m encountering the following problem: I’ve been testing my grok filter including my patterns on both Grok Debugger and Grok Constructor which works fine. Also, when running logstash with option -t no erro…

---

## [Mapping definition for \[message\] has unsupported parameters: \[ignore\_above : 1024\]](https://discuss.elastic.co/t/mapping-definition-for-message-has-unsupported-parameters-ignore-above-1024/154455)

<div class="topic-metadata">

**Author:** [@Kieren\_Johnstone](https://discuss.elastic.co/u/Kieren_Johnstone)\
**Replies:** 7\
**Last updated:** [November 1, 2018, 10:46am UTC](https://discuss.elastic.co/t/mapping-definition-for-message-has-unsupported-parameters-ignore-above-1024/154455 "2018-11-01T10:46:10Z")

</div>

It's a new week, and seemingly randomly, this week's log index is failing to be created. Logged from filebeat is: {"type":"mapper\_parsing\_exception","reason":"Failed to parse mapping \[doc\]: Mapping definition for \[mess…

---

## [Elasticsearch Service Fails to create Node Environment (5.5.6)](https://discuss.elastic.co/t/elasticsearch-service-fails-to-create-node-environment-5-5-6/146355)

<div class="topic-metadata">

**Author:** [@tbugbee](https://discuss.elastic.co/u/tbugbee)\
**Replies:** 3\
**Last updated:** [September 26, 2018, 3:07pm UTC](https://discuss.elastic.co/t/elasticsearch-service-fails-to-create-node-environment-5-5-6/146355 "2018-09-26T15:07:58Z")

</div>

Hello, I'm running Elasticsearch 5.5.2 on Windows Server 2012 R2. The service has been working for months with no change to the machine or the service (config, bin, etc.) as far as I know. Here are the log messages gene…

---

## [Filebeat Multiline multiple patterns](https://discuss.elastic.co/t/filebeat-multiline-multiple-patterns/45335)

<div class="topic-metadata">

**Author:** [@moncky](https://discuss.elastic.co/u/moncky)\
**Replies:** 4\
**Last updated:** [June 6, 2017, 1:22pm UTC](https://discuss.elastic.co/t/filebeat-multiline-multiple-patterns/45335 "2017-06-06T13:22:30Z")

</div>

I have a log file that has multiple, multi line events. For example I have: \[24-Mar-2016 03:27:31\] PHP Stack trace: \[24-Mar-2016 03:27:31\] PHP 1. {main}() /home/app/www/myapp.com/feed/feed.php:0 \[24-Mar-2016 03:27:…

---

## [Bulk Index "ElasticsearchParseException Failed to derive xcontent"](https://discuss.elastic.co/t/bulk-index-elasticsearchparseexception-failed-to-derive-xcontent/41748)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 3\
**Last updated:** [February 15, 2016, 5:55pm UTC](https://discuss.elastic.co/t/bulk-index-elasticsearchparseexception-failed-to-derive-xcontent/41748 "2016-02-15T17:55:56Z")

</div>

Hi All, I am trying to index doc using bulk api but I am getting "ElasticsearchParseException\[Failed to derive xcontent\]" Below shell file created for index docs using bulk !/bin/bash for file\_name in non\_std\_item…

---

## [No Index Pattern with Kibana Spaces?](https://discuss.elastic.co/t/no-index-pattern-with-kibana-spaces/195194)

<div class="topic-metadata">

**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\
**Replies:** 3\
**Last updated:** [August 30, 2019, 11:51am UTC](https://discuss.elastic.co/t/no-index-pattern-with-kibana-spaces/195194 "2019-08-30T11:51:35Z")

</div>

Hello, no index patterns are setup by default for Kibana Spaces. To reproduce Create Space & select all features Create a Role, select an index and a permission, assign the role to the Space & select all Space feature…

---

## [Multi search query with spark](https://discuss.elastic.co/t/multi-search-query-with-spark/29193)

<div class="topic-metadata">

**Author:** [@newvalue](https://discuss.elastic.co/u/newvalue)\
**Replies:** 6\
**Last updated:** [March 30, 2017, 10:56pm UTC](https://discuss.elastic.co/t/multi-search-query-with-spark/29193 "2017-03-30T22:56:34Z")

</div>

Hi all! I want to scan documents that match for a list of queries. I want to use spark with elastic. I know that elasticsearch support multi query using endpoint \_msearch, but I don't know to set up this type of query fo…

---

## [How to model a Elasticsearch database for ecommerce](https://discuss.elastic.co/t/how-to-model-a-elasticsearch-database-for-ecommerce/61740)

<div class="topic-metadata">

**Author:** [@algoleigol](https://discuss.elastic.co/u/algoleigol)\
**Replies:** 3\
**Last updated:** [September 29, 2016, 8:11am UTC](https://discuss.elastic.co/t/how-to-model-a-elasticsearch-database-for-ecommerce/61740 "2016-09-29T08:11:11Z")

</div>

I'm developing a ecommerce application and i want to use MySQL database as primary and Elasticsearch for frontend and some features of the admin panel. After spend a lot of time, trying to find the best schema for Ela…

---

## [How to configurate Kibana with client certificate authentication](https://discuss.elastic.co/t/how-to-configurate-kibana-with-client-certificate-authentication/109046)

<div class="topic-metadata">

**Author:** [@timkoers](https://discuss.elastic.co/u/timkoers)\
**Replies:** 7\
**Last updated:** [November 29, 2017, 1:11pm UTC](https://discuss.elastic.co/t/how-to-configurate-kibana-with-client-certificate-authentication/109046 "2017-11-29T13:11:57Z")

</div>

For improved security I want to make the login process use a client certificate that has been generated by using our own root certificate. This also makes sure that when Kibana is loaded, no (probably weak) password need…

---

## [Multiple databases / tables (of similar schema) for one Elasticsearch index?](https://discuss.elastic.co/t/multiple-databases-tables-of-similar-schema-for-one-elasticsearch-index/158091)

<div class="topic-metadata">

**Author:** [@DataSN.io](https://discuss.elastic.co/u/DataSN.io)\
**Replies:** 4\
**Last updated:** [November 27, 2018, 5:34am UTC](https://discuss.elastic.co/t/multiple-databases-tables-of-similar-schema-for-one-elasticsearch-index/158091 "2018-11-27T05:34:33Z")

</div>

We want to create integrated search of similar databases / tables with similar fields and schema, e.g. United States real estate listings search of multiple real estate properties databases such as these: http://n3.dat…

---

## [Custom Logo for Kibana 8.3.3 - Guide](https://discuss.elastic.co/t/custom-logo-for-kibana-8-3-3-guide/312894)

<div class="topic-metadata">

**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\
**Replies:** 0\
**Last updated:** [August 25, 2022, 9:38am UTC](https://discuss.elastic.co/t/custom-logo-for-kibana-8-3-3-guide/312894 "2022-08-25T09:38:34Z")

</div>

I would like to change the header logo in Kibana 8.3.3. :innocent: Change Header Logo and Text Change loading Text and Logo Change login page logo and text Change Page Title I have achieved it by editing f…

---

## [How to filter docs by text field length?](https://discuss.elastic.co/t/how-to-filter-docs-by-text-field-length/242941)

<div class="topic-metadata">

**Author:** [@IlyaEvseev](https://discuss.elastic.co/u/IlyaEvseev)\
**Replies:** 1\
**Last updated:** [August 3, 2020, 10:55am UTC](https://discuss.elastic.co/t/how-to-filter-docs-by-text-field-length/242941 "2020-08-03T10:55:01Z")

</div>

There is an ElasticSearch 7.3.2 instance, with index containing "message" field of text type. I need to get all docs with message length longer than 100000 chars (1million): curl -XPOST -H 'Content-Type: application/js…

---

## [Multiple ES versions in cluster support](https://discuss.elastic.co/t/multiple-es-versions-in-cluster-support/17201)

<div class="topic-metadata">

**Author:** [@Srividhya\_Umashanker](https://discuss.elastic.co/u/Srividhya_Umashanker)\
**Replies:** 5\
**Last updated:** [April 29, 2014, 1:40pm UTC](https://discuss.elastic.co/t/multiple-es-versions-in-cluster-support/17201 "2014-04-29T13:40:06Z")

</div>

I am trying the rolling upgrade, which is expected to be fixed since ES 1.0.0 release. While doing so, - I have 3 Nodes running ES 1.1.1 - I shutdown, one of those, and installed ES 1.0.3 - Un…

---

## [Length filter: array index out of bounds exception](https://discuss.elastic.co/t/length-filter-array-index-out-of-bounds-exception/225261)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 4\
**Last updated:** [March 30, 2020, 3:08pm UTC](https://discuss.elastic.co/t/length-filter-array-index-out-of-bounds-exception/225261 "2020-03-30T15:08:38Z")

</div>

I encountered a strange issue, when a query fails depending on the position of a term and only then the length filter is active (see below): works: GET test/\_search?filter\_path=\*\*.productNumber { "query": { "mat…

---

## [Elasticsearch index went in Read-only mode](https://discuss.elastic.co/t/elasticsearch-index-went-in-read-only-mode/138963)

<div class="topic-metadata">

**Author:** [@Milind\_Khairnar](https://discuss.elastic.co/u/Milind_Khairnar)\
**Replies:** 3\
**Last updated:** [July 6, 2018, 7:19pm UTC](https://discuss.elastic.co/t/elasticsearch-index-went-in-read-only-mode/138963 "2018-07-06T19:19:24Z")

</div>

Hello, we are hitting this exception on index operation. Our Hosts are big machines and have huge SSD. One particular index went in "Read only" mode and hence any further indexing operations failed. I would like to call…

---

## [How to interpret Indexing Latency , Search Latency](https://discuss.elastic.co/t/how-to-interpret-indexing-latency-search-latency/227780)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 7\
**Last updated:** [April 14, 2020, 6:05am UTC](https://discuss.elastic.co/t/how-to-interpret-indexing-latency-search-latency/227780 "2020-04-14T06:05:08Z")

</div>

How to interpret Indexing Latency , Search Latency from Kibana Stack monitoring dashboard I didn't find references about this documentation.

---

## [Loading config file error: YAML config parsing failed on /usr/local/etc/filebeat.yml](https://discuss.elastic.co/t/loading-config-file-error-yaml-config-parsing-failed-on-usr-local-etc-filebeat-yml/58755)

<div class="topic-metadata">

**Author:** [@reo7189](https://discuss.elastic.co/u/reo7189)\
**Replies:** 6\
**Last updated:** [August 24, 2016, 2:03pm UTC](https://discuss.elastic.co/t/loading-config-file-error-yaml-config-parsing-failed-on-usr-local-etc-filebeat-yml/58755 "2016-08-24T14:03:59Z")

</div>

FreeBSD 10.3, filebeat 1.2.3, when trying "service filbert start" I got endless error "Loading config file error: YAML config parsing failed on /usr/local/etc/filebeat.yml: yaml: line 7: found character that cannot start…

---

## [Composite Aggregation Java API?](https://discuss.elastic.co/t/composite-aggregation-java-api/126642)

<div class="topic-metadata">

**Author:** [@jimyoo](https://discuss.elastic.co/u/jimyoo)\
**Replies:** 1\
**Last updated:** [April 5, 2018, 4:51pm UTC](https://discuss.elastic.co/t/composite-aggregation-java-api/126642 "2018-04-05T16:51:05Z")

</div>

I like "Composite Aggregation" - good addition and thanks. :+1: Is there Java API for this? If not, any plan for Transport, Rest Client ... ? For queries, we are using Transport API (with Elasticsearch 5.6) now and pla…

---

## [Filtering Winlogbeat Events](https://discuss.elastic.co/t/filtering-winlogbeat-events/41116)

<div class="topic-metadata">

**Author:** [@renevdm](https://discuss.elastic.co/u/renevdm)\
**Replies:** 6\
**Last updated:** [October 31, 2016, 8:45pm UTC](https://discuss.elastic.co/t/filtering-winlogbeat-events/41116 "2016-10-31T20:45:29Z")

</div>

Is it possible to filter the Windows Event Logs on severity? I couldn't find anything about it in the Winlogbeat documentation. I know I can filter it in logstash, but I'd like to filter before sending it over the wire.

---

## [Index name from log date not from system time](https://discuss.elastic.co/t/index-name-from-log-date-not-from-system-time/96782)

<div class="topic-metadata">

**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\
**Replies:** 4\
**Last updated:** [August 17, 2017, 6:09am UTC](https://discuss.elastic.co/t/index-name-from-log-date-not-from-system-time/96782 "2017-08-17T06:09:27Z")

</div>

Hi, Today i.e on 11-Aug-2017 I am pushing back dated logs into elastic search via logstash via filebeats I want to create index names of log dates not of current date. Back dates logs are from Mar-Jul 2017, but for al…

---

## [Calculate number of replicas](https://discuss.elastic.co/t/calculate-number-of-replicas/169046)

<div class="topic-metadata">

**Author:** [@Raimon\_Bosch](https://discuss.elastic.co/u/Raimon_Bosch)\
**Replies:** 2\
**Last updated:** [February 19, 2019, 5:20pm UTC](https://discuss.elastic.co/t/calculate-number-of-replicas/169046 "2019-02-19T17:20:50Z")

</div>

Hi, We are about to set up a new cluster and we are not sure if with 6 data-nodes of 32 GB of RAM, the system will cope up with 2 replicas for each shard. The index isn't very big only around 800K documents so maybe we …

[Previous page](https://discuss.elastic.co/top.md?page=383&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=385&per_page=50&period=all)
