# Top **URL:** https://discuss.elastic.co/top.md?page=386&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 387 --- ## [Performance Issues and timeouts with Elasticsearch](https://discuss.elastic.co/t/performance-issues-and-timeouts-with-elasticsearch/67008)
**Author:** [@nick.e](https://discuss.elastic.co/u/nick.e)\ **Replies:** 4\ **Last updated:** [December 14, 2016, 6:30am UTC](https://discuss.elastic.co/t/performance-issues-and-timeouts-with-elasticsearch/67008 "2016-12-14T06:30:36Z")
Hello together, I'm facing strange performance issues the last days. Following my development-cluster-setup: Single Node 12GB RAM 4 Cores Spinning Disks a total of 45Million (~40GB of data) Documents spread across 80… --- ## [Multiple group by](https://discuss.elastic.co/t/multiple-group-by/25479)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 4\ **Last updated:** [August 29, 2016, 12:54pm UTC](https://discuss.elastic.co/t/multiple-group-by/25479 "2016-08-29T12:54:05Z")
How to write a efficient ES query for the below SQL query? Select sum(visits) visits from index group by ip, port order by visits desc limit 10 I am using below ES query, but this will order the visit inside port buc… --- ## [Keyboard Shortcuts for Dev Tools](https://discuss.elastic.co/t/keyboard-shortcuts-for-dev-tools/295267)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 12:19am UTC](https://discuss.elastic.co/t/keyboard-shortcuts-for-dev-tools/295267 "2022-01-25T00:19:09Z")
This is a simple one - is there a keyboard shortcut for executing an API call in Dev Tools (rather than clicking the little arrow)? It seems like a small thing, but if it exists, it would save a ton of time. --- ## [Partial update / Python](https://discuss.elastic.co/t/partial-update-python/90291)
**Author:** [@Achi](https://discuss.elastic.co/u/Achi)\ **Replies:** 2\ **Last updated:** [June 26, 2017, 9:16am UTC](https://discuss.elastic.co/t/partial-update-python/90291 "2017-06-26T09:16:56Z")
Hello ! My database contains 500 000 documents in the same index and I need to update some fields of every document every week. I use scrapy to get the data to update for each document. Instead of updating each docum… --- ## [TLS On Elasticsearch REST API For Use With External Clients](https://discuss.elastic.co/t/tls-on-elasticsearch-rest-api-for-use-with-external-clients/209689)
**Author:** [@Jstall](https://discuss.elastic.co/u/Jstall)\ **Replies:** 1\ **Last updated:** [November 28, 2019, 6:14am UTC](https://discuss.elastic.co/t/tls-on-elasticsearch-rest-api-for-use-with-external-clients/209689 "2019-11-28T06:14:01Z")
Hello all, My use case is I would like to secure the Elastic Search REST API with tls so that I can post to it securely from an external client. I am using a ElasticSearch 7.4 cluster that I deployed via the official M… --- ## [Map date as text?](https://discuss.elastic.co/t/map-date-as-text/121375)
**Author:** [@yassinelaz](https://discuss.elastic.co/u/yassinelaz)\ **Replies:** 3\ **Last updated:** [February 25, 2018, 4:34pm UTC](https://discuss.elastic.co/t/map-date-as-text/121375 "2018-02-25T16:34:57Z")
I have json data that has a "product\_ref" field (mapped as text) that can take these values as an example: "product\_ref": "N/A" "product\_ref": "90323" "product\_ref": "SN3005" "product\_ref": "2015-05-23" When pushing… --- ## [Elasticsearch Cloud Client Not Working](https://discuss.elastic.co/t/elasticsearch-cloud-client-not-working/233885)
**Author:** [@Punj\_Shah](https://discuss.elastic.co/u/Punj_Shah)\ **Replies:** 4\ **Last updated:** [May 23, 2020, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-cloud-client-not-working/233885 "2020-05-23T07:04:48Z")
Hello! I am trying to connect Elasticsearch using Springboot since last 3 days but no luck at all. I tried to google and find many codes on the elastic search discussion forum, but nothing worked till now. Many code of … --- ## [Improving Elasticsearch performance on a single node by increasing shards](https://discuss.elastic.co/t/improving-elasticsearch-performance-on-a-single-node-by-increasing-shards/17471)
**Author:** [@Rujuta\_Deshpande](https://discuss.elastic.co/u/Rujuta_Deshpande)\ **Replies:** 3\ **Last updated:** [May 13, 2014, 8:50am UTC](https://discuss.elastic.co/t/improving-elasticsearch-performance-on-a-single-node-by-increasing-shards/17471 "2014-05-13T08:50:07Z")
Hi, I have set up an elasticsearch cluster with 1 shard and 0 replicas. My system has 16 GB RAM and I have allocated 8 GB to the ES Max/Min Heap. We are indexing a large number of logs everyday and the size of … --- ## [Index partition strategy](https://discuss.elastic.co/t/index-partition-strategy/2835)
**Author:** [@Valerio](https://discuss.elastic.co/u/Valerio)\ **Replies:** 3\ **Last updated:** [March 4, 2010, 2:01pm UTC](https://discuss.elastic.co/t/index-partition-strategy/2835 "2010-03-04T14:01:24Z")
Hello, can you provide some technical details about how indexes are partitioned on nodes ? Thanks, Valerio --- ## [Using curl to cat indices](https://discuss.elastic.co/t/using-curl-to-cat-indices/302855)
**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 1:09am UTC](https://discuss.elastic.co/t/using-curl-to-cat-indices/302855 "2022-04-21T01:09:38Z")
I am trying to use curl to pull back a specific set of indexs based on the date. The curl command I try running is below. curl -X GET -u user -k "http://masterIP:9200/\_cat/indices/\*2202-03-30?bytes=mb&v=true&s=index" … --- ## [SELECT DISTINCT documents by a specisific field](https://discuss.elastic.co/t/select-distinct-documents-by-a-specisific-field/212232)
**Author:** [@JohnWhite2000](https://discuss.elastic.co/u/JohnWhite2000)\ **Replies:** 2\ **Last updated:** [December 18, 2019, 12:49pm UTC](https://discuss.elastic.co/t/select-distinct-documents-by-a-specisific-field/212232 "2019-12-18T12:49:41Z")
I have documents with these fields id userId userFirstName userLastName userEmail projectId which is something like a many to many, where multiple documents with the same userId can exist. I need to retrieve all the … --- ## [Highlighting takes long time for large documents](https://discuss.elastic.co/t/highlighting-takes-long-time-for-large-documents/8448)
**Author:** [@Jan\_Kronquist](https://discuss.elastic.co/u/Jan_Kronquist)\ **Replies:** 6\ **Last updated:** [July 19, 2012, 7:41am UTC](https://discuss.elastic.co/t/highlighting-takes-long-time-for-large-documents/8448 "2012-07-19T07:41:16Z")
Hi My index contains objects of various sizes, usually around 1-100 kB. However, sometimes there are documents 10-30 MB. When I get search hits for these objects highlighting takes very long time. Highlighting … --- ## [Logstash 5.0 Alpha kafka input error](https://discuss.elastic.co/t/logstash-5-0-alpha-kafka-input-error/47182)
**Author:** [@zhanght1](https://discuss.elastic.co/u/zhanght1)\ **Replies:** 5\ **Last updated:** [January 24, 2017, 8:13pm UTC](https://discuss.elastic.co/t/logstash-5-0-alpha-kafka-input-error/47182 "2017-01-24T20:13:18Z")
Here is the logstash.conf. input { kafka { zk\_connect =\> "10.120.31.78:2181" topic\_id =\> "elk" reset\_beginning =\> true } } output{ stdout {} } After run the ./logstash -f logstash.conf ,I got this error… --- ## [Failed to parse field \[host\]](https://discuss.elastic.co/t/failed-to-parse-field-host/234079)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 7\ **Last updated:** [May 25, 2020, 7:29am UTC](https://discuss.elastic.co/t/failed-to-parse-field-host/234079 "2020-05-25T07:29:39Z")
I am getting below error. May I know the reason and resolve the issue. Below is the logstash config. ++++++++++++++++++++++++++=== \[2020-05-25T09:35:25,844\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[17dee1c8bb9821d… --- ## [Grok filter to retrieve simple words or character from text/string](https://discuss.elastic.co/t/grok-filter-to-retrieve-simple-words-or-character-from-text-string/109177)
**Author:** [@scch](https://discuss.elastic.co/u/scch)\ **Replies:** 7\ **Last updated:** [December 1, 2017, 8:06am UTC](https://discuss.elastic.co/t/grok-filter-to-retrieve-simple-words-or-character-from-text-string/109177 "2017-12-01T08:06:53Z")
Hi , I have used CSV filter to import data . Can someone share example code to use grok filter to retrieve simple words from fields imported previously through csv filter and add them to new field. up to last dot --- ## [Calculate duration between two events using dates](https://discuss.elastic.co/t/calculate-duration-between-two-events-using-dates/190177)
**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\ **Replies:** 2\ **Last updated:** [July 19, 2019, 9:08pm UTC](https://discuss.elastic.co/t/calculate-duration-between-two-events-using-dates/190177 "2019-07-19T21:08:19Z")
Hello, In our actual logs, we sometimes need to calculate the elapsed time between two events. We don't want to use the "elapsed" function in Logstash because it's not always needed and because elapsed time may ocasion… --- ## [Kibana Plugin error - UI Status red](https://discuss.elastic.co/t/kibana-plugin-error-ui-status-red/128535)
**Author:** [@satkumvnr](https://discuss.elastic.co/u/satkumvnr)\ **Replies:** 6\ **Last updated:** [April 19, 2018, 9:17am UTC](https://discuss.elastic.co/t/kibana-plugin-error-ui-status-red/128535 "2018-04-19T09:17:35Z")
HI, I installed x-pack plugin on Elastic search & Kibana for displaying objects and arrays of objects. URL : https://github.com/istresearch/kibana-object-format. I I am using a single node elasticsearch and have disab… --- ## [Reindex daily indices to weekly indices](https://discuss.elastic.co/t/reindex-daily-indices-to-weekly-indices/193780)
**Author:** [@Praneet\_Khandelwal](https://discuss.elastic.co/u/Praneet_Khandelwal)\ **Replies:** 8\ **Last updated:** [August 8, 2019, 12:01pm UTC](https://discuss.elastic.co/t/reindex-daily-indices-to-weekly-indices/193780 "2019-08-08T12:01:23Z")
I am working on a reindexing problem in which I need to reindex the daily indices to weekly indices. I am using the reindex APi and trying to work with the script processor to make the changes. Can anyone help with what … --- ## [Building OSS release version of Elastic Search 6.3.1](https://discuss.elastic.co/t/building-oss-release-version-of-elastic-search-6-3-1/142041)
**Author:** [@nspatil](https://discuss.elastic.co/u/nspatil)\ **Replies:** 8\ **Last updated:** [July 31, 2018, 6:31pm UTC](https://discuss.elastic.co/t/building-oss-release-version-of-elastic-search-6-3-1/142041 "2018-07-31T18:31:17Z")
Hi, I am new to Elastic Search, I am trying to build OSS release version of 6.3.1 from source code. I followed instructions mentioned in readme, downloaded the code from GIT and ran "gradlew assemble" command. Build is … --- ## [How to set the "ignore\_above" on elasticsearch / using logstash and kibana](https://discuss.elastic.co/t/how-to-set-the-ignore-above-on-elasticsearch-using-logstash-and-kibana/204683)
**Author:** [@Christian\_Lorenz](https://discuss.elastic.co/u/Christian_Lorenz)\ **Replies:** 7\ **Last updated:** [October 23, 2019, 6:27pm UTC](https://discuss.elastic.co/t/how-to-set-the-ignore-above-on-elasticsearch-using-logstash-and-kibana/204683 "2019-10-23T18:27:04Z")
Hi, can anybody tell me where I can find the config, displayed in kibana to set ignore\_above to a higher value? I'm using Ubuntu. The current 256 chars don't fit as we often get longer messages (even after parsing). Cu… --- ## [Failed to execute action](https://discuss.elastic.co/t/failed-to-execute-action/245517)
**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\ **Replies:** 5\ **Last updated:** [August 19, 2020, 7:51pm UTC](https://discuss.elastic.co/t/failed-to-execute-action/245517 "2020-08-19T19:51:19Z")
Recently upgraded Logstash to 7.8.1 and unable to start Logstash. The error message I am getting: \[2020-08-18T22:56:00,488\]\[ERROR\]\[logstash.agent \] Failed to execute action {:id=\>:main, :action\_type=\>LogStash:… --- ## [\[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\];](https://discuss.elastic.co/t/service-unavailable-1-state-not-recovered-initialized/178639)
**Author:** [@mkalinowski](https://discuss.elastic.co/u/mkalinowski)\ **Replies:** 6\ **Last updated:** [April 30, 2019, 2:50pm UTC](https://discuss.elastic.co/t/service-unavailable-1-state-not-recovered-initialized/178639 "2019-04-30T14:50:47Z")
Hello, I have problem with my elasticsearch. I have only one node. For several days elasticsearch does not want to collect data. In logs I see this : \[2019-04-26T13:07:51,242\]\[INFO \]\[o.e.n.Node \] \[BbThy… --- ## [How to create Keystore and Truststore from CA Certificates](https://discuss.elastic.co/t/how-to-create-keystore-and-truststore-from-ca-certificates/224156)
**Author:** [@YaSe](https://discuss.elastic.co/u/YaSe)\ **Replies:** 4\ **Last updated:** [March 20, 2020, 12:25pm UTC](https://discuss.elastic.co/t/how-to-create-keystore-and-truststore-from-ca-certificates/224156 "2020-03-20T12:25:50Z")
Hello folks, I installed ECK on GKE. I retrieved certificate tls.crt with the following command kubectl get secret "hulk-es-http-certs-public" -o go-template='{{index .data "tls.crt" | base64decode }}' \> tls.crt I gen… --- ## [Timestamp in json logs](https://discuss.elastic.co/t/timestamp-in-json-logs/142438)
**Author:** [@PandKing](https://discuss.elastic.co/u/PandKing)\ **Replies:** 8\ **Last updated:** [August 1, 2018, 6:49pm UTC](https://discuss.elastic.co/t/timestamp-in-json-logs/142438 "2018-08-01T18:49:54Z")
Hi, I am using Ossec https://www.ossec.net/docs/ to log alerts locally to alerts.json which already has a timestamp in the log. Can I use this timestamp in the logstash output to elastic ? The input is below. All my … --- ## [Import of huge quantity of csv files in elasticsearch with logstash](https://discuss.elastic.co/t/import-of-huge-quantity-of-csv-files-in-elasticsearch-with-logstash/108092)
**Author:** [@Wills1](https://discuss.elastic.co/u/Wills1)\ **Replies:** 8\ **Last updated:** [November 21, 2017, 7:12pm UTC](https://discuss.elastic.co/t/import-of-huge-quantity-of-csv-files-in-elasticsearch-with-logstash/108092 "2017-11-21T19:12:47Z")
Hi ! I'm new in ELK and have some questions concerning the import of multiple csv-files in elasticsearch via logstash. I have a folder with more than 425 csv-files within and each csv file have different column header;… --- ## [ES Service not loading ES\_PATH\_CONF or CONF\_DIR](https://discuss.elastic.co/t/es-service-not-loading-es-path-conf-or-conf-dir/136942)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 8:24pm UTC](https://discuss.elastic.co/t/es-service-not-loading-es-path-conf-or-conf-dir/136942 "2018-06-27T20:24:56Z")
ES Version Installed 6.1.2 Machine - RHEL 7.5 FILE: es-data0.service \[Unit\] Description=Elasticsearch Documentation=http://www.elastic.co Wants=network-online.target After=n… --- ## [When running Logstash in foreground it works, but logging file it always empty](https://discuss.elastic.co/t/when-running-logstash-in-foreground-it-works-but-logging-file-it-always-empty/57964)
**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\ **Replies:** 5\ **Last updated:** [August 19, 2016, 12:19am UTC](https://discuss.elastic.co/t/when-running-logstash-in-foreground-it-works-but-logging-file-it-always-empty/57964 "2016-08-19T00:19:58Z")
Hi. Just this morning after I have come across an unusual problem with Logstash. When it's running as a service 'ps aux | grep logstash' and 'systemctl status logstash' shows as its running but its not listening on any o… --- ## [Elastic search front end](https://discuss.elastic.co/t/elastic-search-front-end/22479)
**Author:** [@Oranit\_Dror](https://discuss.elastic.co/u/Oranit_Dror)\ **Replies:** 6\ **Last updated:** [March 4, 2015, 8:38am UTC](https://discuss.elastic.co/t/elastic-search-front-end/22479 "2015-03-04T08:38:23Z")
Hi, I am new to ElasticSearch and have a newbie question: I want to have a user-friendly front-end to the data with a free text search bar. In this search bar the user inputs a query string, which I would like … --- ## [Scripted field - "no field found" on field presence check](https://discuss.elastic.co/t/scripted-field-no-field-found-on-field-presence-check/228219)
**Author:** [@philhagen](https://discuss.elastic.co/u/philhagen)\ **Replies:** 4\ **Last updated:** [April 23, 2020, 11:57pm UTC](https://discuss.elastic.co/t/scripted-field-no-field-found-on-field-presence-check/228219 "2020-04-23T23:57:42Z")
With a painless scripted field, the recommended field presence logic itself causes a "No field found" error, but not on all records - in fact just four of ~930k fail with the error (below). { "took": 6, "timed\_out":… --- ## [Settings in Logstash output config file for "template =\>" not applied](https://discuss.elastic.co/t/settings-in-logstash-output-config-file-for-template-not-applied/89732)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 1:32pm UTC](https://discuss.elastic.co/t/settings-in-logstash-output-config-file-for-template-not-applied/89732 "2017-07-05T13:32:50Z")
Hi, I have struggled with this now for a bit over a week and I just can't seem to figure it out. I'm running 3 Elastic Stack setups for logging. In one setup I can't get "ignore\_malformed": "true" set for some reason. … --- ## [The target principal name is incorrect](https://discuss.elastic.co/t/the-target-principal-name-is-incorrect/279113)
**Author:** [@sunilr](https://discuss.elastic.co/u/sunilr)\ **Replies:** 2\ **Last updated:** [July 22, 2021, 9:48pm UTC](https://discuss.elastic.co/t/the-target-principal-name-is-incorrect/279113 "2021-07-22T21:48:38Z")
I am using these below settings and newly created certificate for setting up Transport and HTTP security. My setting in elasticsearch.yml is as below: xpack.security.enabled : True xpack.security.transport.ssl.enabl… --- ## [Search multiple values against multiple fields](https://discuss.elastic.co/t/search-multiple-values-against-multiple-fields/137980)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 1\ **Last updated:** [June 29, 2018, 2:16pm UTC](https://discuss.elastic.co/t/search-multiple-values-against-multiple-fields/137980 "2018-06-29T14:16:16Z")
ES 5.6.3 I've been googling this subject and I've seen some similar discussions, but I have not yet found the exact answer.... I know you can use a terms query to search multiple values against a single field and you c… --- ## [Simultaneous indexing of a two documents with same ID](https://discuss.elastic.co/t/simultaneous-indexing-of-a-two-documents-with-same-id/58025)
**Author:** [@mrvincnezo](https://discuss.elastic.co/u/mrvincnezo)\ **Replies:** 5\ **Last updated:** [August 15, 2016, 2:38pm UTC](https://discuss.elastic.co/t/simultaneous-indexing-of-a-two-documents-with-same-id/58025 "2016-08-15T14:38:53Z")
Suppose I have a cluster with two elasticsearch nodes. What will happen if two INDEX requests of a document with same document ID (but slightly different content) will take place simultaneously, each will arrive to a dif… --- ## [Invalid NEST response built from a successful (404) low level call](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-successful-404-low-level-call/228088)
**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\ **Replies:** 4\ **Last updated:** [April 15, 2020, 12:06pm UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-successful-404-low-level-call/228088 "2020-04-15T12:06:12Z")
Using indexMany mapping, and getting this error: Invalid NEST response built from a successful (404) low level call on POST: /cat/\_bulk Invalid Bulk items: Audit trail of this API call: \[1\] HealthyResponse: Node: http… --- ## [Shards failed in kibana](https://discuss.elastic.co/t/shards-failed-in-kibana/310559)
**Author:** [@OoO](https://discuss.elastic.co/u/OoO)\ **Replies:** 3\ **Last updated:** [August 16, 2022, 4:27pm UTC](https://discuss.elastic.co/t/shards-failed-in-kibana/310559 "2022-08-16T16:27:34Z")
Hello world, Since I upgraded filebeat from 7.x to 8.x ( the version of my ELK and filebeat is 8.2.3 now), I can't see the dashboard anymore, I have encountered this problem on kibana: 1 of 8 shards failed The data y… --- ## [Error- read: connection reset by peer](https://discuss.elastic.co/t/error-read-connection-reset-by-peer/102916)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 7\ **Last updated:** [October 13, 2017, 6:53am UTC](https://discuss.elastic.co/t/error-read-connection-reset-by-peer/102916 "2017-10-13T06:53:21Z")
Hi, I am using filebeat with Logstash output. Please find below config files: filebeat.yml #=========================== Filebeat prospectors ============================= filebeat.prospectors: Each - is a prospector.… --- ## [Kibana Sort order](https://discuss.elastic.co/t/kibana-sort-order/90936)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 6\ **Last updated:** [June 28, 2017, 12:43pm UTC](https://discuss.elastic.co/t/kibana-sort-order/90936 "2017-06-28T12:43:31Z")
Hi All, Is there any way i could get random sort order instead of ascending or descending , i need random datas not based on counts. Please let me know if there is any way to get it.That could really useful for rando… --- ## [Remote Filebeat cannot ship logs to elastic ERROR \[publisher\_pipeline\_output\]](https://discuss.elastic.co/t/remote-filebeat-cannot-ship-logs-to-elastic-error-publisher-pipeline-output/248893)
**Author:** [@Team\_K](https://discuss.elastic.co/u/Team_K)\ **Replies:** 5\ **Last updated:** [September 17, 2020, 7:00pm UTC](https://discuss.elastic.co/t/remote-filebeat-cannot-ship-logs-to-elastic-error-publisher-pipeline-output/248893 "2020-09-17T19:00:46Z")
I have been trying to ship logs from a remote server to my elk. Below is my conf file. I tested my conf file using filebeat -c filebeat.yml test output everything seems fine. Could you please help. Thank you ela… --- ## [Shipping whole file as message?](https://discuss.elastic.co/t/shipping-whole-file-as-message/94609)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 3\ **Last updated:** [July 28, 2017, 4:26am UTC](https://discuss.elastic.co/t/shipping-whole-file-as-message/94609 "2017-07-28T04:26:33Z")
Hello everyone, I am kindly new to ELK and now I want to ship the content of a whole file as message into logstash and elastic. So as I have different files, each file should be a single event with all its content as m… --- ## [Kibana 7.10 login issues](https://discuss.elastic.co/t/kibana-7-10-login-issues/255201)
**Author:** [@KevSex](https://discuss.elastic.co/u/KevSex)\ **Replies:** 4\ **Last updated:** [November 12, 2020, 2:26pm UTC](https://discuss.elastic.co/t/kibana-7-10-login-issues/255201 "2020-11-12T14:26:01Z")
Since upgrading to Elastic stack 7.10, I am now receiving the below error when attempting to POST to /internal/security/login \[root@dev-node-01 ~\]# curl -k 'https://127.0.0.1:5601/internal/security/login' -H 'Content-… --- ## [Invalid index name \[\_xpack\], must not start with '\_', '-', or '+'"](https://discuss.elastic.co/t/invalid-index-name-xpack-must-not-start-with-or/157270)
**Author:** [@pidugusundeep](https://discuss.elastic.co/u/pidugusundeep)\ **Replies:** 4\ **Last updated:** [November 19, 2018, 6:46am UTC](https://discuss.elastic.co/t/invalid-index-name-xpack-must-not-start-with-or/157270 "2018-11-19T06:46:26Z")
Hey i was just trying to use Elasticsearch sql and just installed xpack on my Elasticsearch and using kibana dev tools to query my documents i am unable to use \` GET /\_xpack/sql?format=txt \` it always throws { "… --- ## [Change in elasticsearch.yml for network.host , the service will not restart](https://discuss.elastic.co/t/change-in-elasticsearch-yml-for-network-host-the-service-will-not-restart/205432)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 5\ **Last updated:** [October 29, 2019, 10:43am UTC](https://discuss.elastic.co/t/change-in-elasticsearch-yml-for-network-host-the-service-will-not-restart/205432 "2019-10-29T10:43:44Z")
Hi All, Good afternoon I am installing elasticsearch (7.4.1) , with the default “/etc/elasticsearch/elasticsearch.yml” , when I restart the service it starts and “systemctl status elasticsearch” shows it as running. N… --- ## [Shard initialization stuck on Cluster recovering - SameShardAllocationDecider](https://discuss.elastic.co/t/shard-initialization-stuck-on-cluster-recovering-sameshardallocationdecider/174793)
**Author:** [@chana804](https://discuss.elastic.co/u/chana804)\ **Replies:** 4\ **Last updated:** [April 4, 2019, 2:29pm UTC](https://discuss.elastic.co/t/shard-initialization-stuck-on-cluster-recovering-sameshardallocationdecider/174793 "2019-04-04T14:29:13Z")
Hi, I’m using Elasticsearch 5.4, and have a cluster initialization problem It seems that shards do not manage to finish their initialization for more than 3 days. I keep getting the following exception in the logs for… --- ## [Cannot find mapping for spark/test-1463342115226 - one is required before using Spark SQL](https://discuss.elastic.co/t/cannot-find-mapping-for-spark-test-1463342115226-one-is-required-before-using-spark-sql/50088)
**Author:** [@chris\_snow](https://discuss.elastic.co/u/chris_snow)\ **Replies:** 6\ **Last updated:** [August 23, 2016, 2:20pm UTC](https://discuss.elastic.co/t/cannot-find-mapping-for-spark-test-1463342115226-one-is-required-before-using-spark-sql/50088 "2016-08-23T14:20:21Z")
I'm trying to create a hello world type example that uses spark to save data into elasticsearch (using the es spark package 2.3.1) and then read it back again. The example works ok on spark 1.5, but when I try to run i… --- ## [elasticsearch NoShardAvailableActionException](https://discuss.elastic.co/t/elasticsearch-noshardavailableactionexception/8335)
**Author:** [@Yuhan](https://discuss.elastic.co/u/Yuhan)\ **Replies:** 3\ **Last updated:** [August 1, 2014, 9:21pm UTC](https://discuss.elastic.co/t/elasticsearch-noshardavailableactionexception/8335 "2014-08-01T21:21:28Z")
--- ## [Filebeat memory usage is keep increasing](https://discuss.elastic.co/t/filebeat-memory-usage-is-keep-increasing/313597)
**Author:** [@SeungHyun\_Roh](https://discuss.elastic.co/u/SeungHyun_Roh)\ **Replies:** 5\ **Last updated:** [September 30, 2022, 12:10pm UTC](https://discuss.elastic.co/t/filebeat-memory-usage-is-keep-increasing/313597 "2022-09-30T12:10:12Z")
Hello, community! My colleague's struggling with some issue with filebeat in his project for 5 months, so every engineer in my team decided to help him. He's using filebeat 7.14.2 to collect logs and send it to kafka. … --- ## [Cast exception when trying to fill old data through re-indexing](https://discuss.elastic.co/t/cast-exception-when-trying-to-fill-old-data-through-re-indexing/191490)
**Author:** [@Rajith\_konara](https://discuss.elastic.co/u/Rajith_konara)\ **Replies:** 6\ **Last updated:** [July 23, 2019, 4:03am UTC](https://discuss.elastic.co/t/cast-exception-when-trying-to-fill-old-data-through-re-indexing/191490 "2019-07-23T04:03:21Z")
Hi I am try to fill a new field to my old data through re-indexing, but when i run below it's gives me below error. The status field is set to long from mapping. Please help me to resolve this. "caused\_by": { "… --- ## [Failed to authenticate user with OpenID Connect](https://discuss.elastic.co/t/failed-to-authenticate-user-with-openid-connect/212600)
**Author:** [@firabby](https://discuss.elastic.co/u/firabby)\ **Replies:** 7\ **Last updated:** [February 6, 2020, 9:05am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-with-openid-connect/212600 "2020-02-06T09:05:56Z")
Continuing the discussion from OpenID error after authenticating against AWS Cognito: I am trying to authenticate kibana users using OIDC. When the user is redirected to kibana after logging in, following error occurs. … --- ## [文字列のMapping組み合わせについて\[text or keyword\]](https://discuss.elastic.co/t/mapping-text-or-keyword/167559)
**Author:** [@mukai](https://discuss.elastic.co/u/mukai)\ **Replies:** 3\ **Last updated:** [February 11, 2019, 4:02am UTC](https://discuss.elastic.co/t/mapping-text-or-keyword/167559 "2019-02-11T04:02:18Z")
文字列をMapping登録する場合、それぞれ一長一短はあると思いますが、どのような場合にどの組み合わせで登録しますか？ また、複数の案を採用した場合、文字列がどのデータ型で入っているか利用者には分りづらいと思うのですが、どのように対処されていますか？ (下記のMapping例だと、データ型は下記のようになるが、使う側からすれば分りづらい。) text型「field01」「field02.text」「field03」 keywor… --- ## [Telnet on 9200 doesn't work elasticsearch](https://discuss.elastic.co/t/telnet-on-9200-doesnt-work-elasticsearch/119588)
**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\ **Replies:** 4\ **Last updated:** [February 13, 2018, 8:27am UTC](https://discuss.elastic.co/t/telnet-on-9200-doesnt-work-elasticsearch/119588 "2018-02-13T08:27:46Z")
Hi , I am not able to telnet on the machine having elasticsearch is running using the hostname/ipaddr, while the telnet through localhost is working fine. telnet localhost 9200 Trying 127.0.0.1... Connected to localh… [Previous page](https://discuss.elastic.co/top.md?page=385&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=387&per_page=50&period=all)