# Top

**URL:** https://discuss.elastic.co/top.md?page=387&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 388

---

## [ERROR: Failed to determine the health of the cluster. , with exit code 69](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/365522)

<div class="topic-metadata">

**Author:** [@17HungLe02](https://discuss.elastic.co/u/17HungLe02)\
**Replies:** 7\
**Last updated:** [August 26, 2024, 4:56pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/365522 "2024-08-26T16:56:55Z")

</div>

I run the command to create token but the result is like this, what should I do?

---

## [Not able to detect ES version](https://discuss.elastic.co/t/not-able-to-detect-es-version/142340)

<div class="topic-metadata">

**Author:** [@sheryl](https://discuss.elastic.co/u/sheryl)\
**Replies:** 1\
**Last updated:** [August 14, 2018, 3:55am UTC](https://discuss.elastic.co/t/not-able-to-detect-es-version/142340 "2018-08-14T03:55:58Z")

</div>

Exception in thread "main" org.elasticsearch.hadoop.EsHadoopIllegalArgumentException: Cannot detect ES version - typically this happens if the network/Elasticsearch cluster is not accessible or when targeting a WAN/Cloud…

---

## [ERR Connecting error publishing events (retrying)](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying/82625)

<div class="topic-metadata">

**Author:** [@Steve\_1](https://discuss.elastic.co/u/Steve_1)\
**Replies:** 4\
**Last updated:** [April 19, 2017, 12:13am UTC](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying/82625 "2017-04-19T00:13:41Z")

</div>

Hi. I have a problem when Beats connecting to Logstash: 2017-04-17T14:53:22-05:00 INFO Harvester started for file: /var/elk/logFile.log 2017-04-17T14:53:22-05:00 ERR Connecting error publishing events (retrying): dial …

---

## [Filebeat config prospectors not working in 6.0](https://discuss.elastic.co/t/filebeat-config-prospectors-not-working-in-6-0/108007)

<div class="topic-metadata">

**Author:** [@Warren\_Turner](https://discuss.elastic.co/u/Warren_Turner)\
**Replies:** 6\
**Last updated:** [November 23, 2017, 9:47am UTC](https://discuss.elastic.co/t/filebeat-config-prospectors-not-working-in-6-0/108007 "2017-11-23T09:47:36Z")

</div>

Hey everybody, So I upgraded filebeat to version 6.0.0 and I saw this message in the logs: WARN DEPRECATED: config\_dir is deprecated. Use filebeat.config.prospectors instead. Will be removed in version: 7.0.0 So I wen…

---

## [9 out of 42 shards failed](https://discuss.elastic.co/t/9-out-of-42-shards-failed/157442)

<div class="topic-metadata">

**Author:** [@Timshs](https://discuss.elastic.co/u/Timshs)\
**Replies:** 6\
**Last updated:** [November 20, 2018, 12:54am UTC](https://discuss.elastic.co/t/9-out-of-42-shards-failed/157442 "2018-11-20T00:54:09Z")

</div>

Have setup a dashboard but when loading this dashboard or the visualizations I get 9 out of 42 shards failed .. shortly as a popup in ELKSTACK 6.4.2. But the dashboard as well as the visualizations still shows fine. I H…

---

## [Unable to write index pattern](https://discuss.elastic.co/t/unable-to-write-index-pattern/146167)

<div class="topic-metadata">

**Author:** [@KBuev](https://discuss.elastic.co/u/KBuev)\
**Replies:** 6\
**Last updated:** [September 14, 2018, 4:43pm UTC](https://discuss.elastic.co/t/unable-to-write-index-pattern/146167 "2018-09-14T16:43:45Z")

</div>

Hi, all. We've updated our stack to version 6.4.0 and we're now seeing a weird new issue with Kibana's Discover app. Steps to reproduce: Open Discover app, open any index (the document count doesn't seem to matter). S…

---

## [Generating the password hash](https://discuss.elastic.co/t/generating-the-password-hash/262432)

<div class="topic-metadata">

**Author:** [@mchudinov](https://discuss.elastic.co/u/mchudinov)\
**Replies:** 7\
**Last updated:** [February 25, 2021, 2:05pm UTC](https://discuss.elastic.co/t/generating-the-password-hash/262432 "2021-02-25T14:05:28Z")

</div>

How to generate a hash for file realm? as described here: I use Elasticsearch in K8S ECK and use this document for define users: kind: Secret apiVersion: v1 metadata: name: my-filerealm-secret…

---

## [Curl XPOST errors not supported 406](https://discuss.elastic.co/t/curl-xpost-errors-not-supported-406/225509)

<div class="topic-metadata">

**Author:** [@Ketan\_Chachad](https://discuss.elastic.co/u/Ketan_Chachad)\
**Replies:** 3\
**Last updated:** [March 30, 2020, 3:10pm UTC](https://discuss.elastic.co/t/curl-xpost-errors-not-supported-406/225509 "2020-03-30T15:10:29Z")

</div>

I have installed elasticsearch 7.6.1 on an AWS EC2 instance. When I give the following curl command from Windows I get a valid JSON response: curl -XGET "http://\<EC2-IP\>:9200" However when I give the following command…

---

## [Finding duplicate documents or its count based on some field names](https://discuss.elastic.co/t/finding-duplicate-documents-or-its-count-based-on-some-field-names/15041)

<div class="topic-metadata">

**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\
**Replies:** 4\
**Last updated:** [January 1, 2014, 8:20pm UTC](https://discuss.elastic.co/t/finding-duplicate-documents-or-its-count-based-on-some-field-names/15041 "2014-01-01T20:20:39Z")

</div>

Hi All, I need to know, if Elasticsearch has some feature to find the duplicate documents or documents counts if I want to see how many documents are having same values against two or more fields. I can do…

---

## [Visualization of Data table in Kibana cannot show all the records](https://discuss.elastic.co/t/visualization-of-data-table-in-kibana-cannot-show-all-the-records/227049)

<div class="topic-metadata">

**Author:** [@Echo\_yu](https://discuss.elastic.co/u/Echo_yu)\
**Replies:** 4\
**Last updated:** [April 8, 2020, 1:17pm UTC](https://discuss.elastic.co/t/visualization-of-data-table-in-kibana-cannot-show-all-the-records/227049 "2020-04-08T13:17:39Z")

</div>

Hi, I made a data table visualization in Kibana, but I found it cannot show all the records by date. For example: I want to check the data with the date: 2020-04-07, but the table shows only part of the data.Pic1 shows t…

---

## [How to change the background color](https://discuss.elastic.co/t/how-to-change-the-background-color/49291)

<div class="topic-metadata">

**Author:** [@sinto\_paulson](https://discuss.elastic.co/u/sinto_paulson)\
**Replies:** 4\
**Last updated:** [March 24, 2017, 7:19am UTC](https://discuss.elastic.co/t/how-to-change-the-background-color/49291 "2017-03-24T07:19:41Z")

</div>

I am new to Kibana, i want to change the black background color of kibana dashboard. the portion which i am talking about will come on the right side of the kibana logo. Here the background style is specified as inlin…

---

## [Pipeline.yml not working](https://discuss.elastic.co/t/pipeline-yml-not-working/117120)

<div class="topic-metadata">

**Author:** [@davehs30](https://discuss.elastic.co/u/davehs30)\
**Replies:** 3\
**Last updated:** [January 29, 2018, 7:09pm UTC](https://discuss.elastic.co/t/pipeline-yml-not-working/117120 "2018-01-29T19:09:16Z")

</div>

on logstash 6.1.2 , I have commented out the path.config in logstash.yml as well as remove the --path-settings from the systemd service file. I get no error messages in the log, even when I have no pipelines.yml files…

---

## [Parsing a pretty formatted JSON file using Logstash](https://discuss.elastic.co/t/parsing-a-pretty-formatted-json-file-using-logstash/224224)

<div class="topic-metadata">

**Author:** [@Noushad\_Aslam](https://discuss.elastic.co/u/Noushad_Aslam)\
**Replies:** 7\
**Last updated:** [March 22, 2020, 4:24pm UTC](https://discuss.elastic.co/t/parsing-a-pretty-formatted-json-file-using-logstash/224224 "2020-03-22T16:24:45Z")

</div>

Hi, I am pretty new to Elastic stack. I have a need to index a JSON file data. Below is my JSON file format. \[ { "metricId" : 1776736, "metricName" : "Hardware Resources|Memory|Used %", "metricPath" : "Application I…

---

## [Problems working with Cluster](https://discuss.elastic.co/t/problems-working-with-cluster/188352)

<div class="topic-metadata">

**Author:** [@khaiolopes](https://discuss.elastic.co/u/khaiolopes)\
**Replies:** 5\
**Last updated:** [July 2, 2019, 6:49pm UTC](https://discuss.elastic.co/t/problems-working-with-cluster/188352 "2019-07-02T18:49:31Z")

</div>

Guys, I'm having trouble working in Cluster with Elastic. I'm a beginner. I have some outputs in my logs, I've already looked into the solution but so far none has come up in my solution. Below the configuration of my …

---

## [Returning Search Results as JSON](https://discuss.elastic.co/t/returning-search-results-as-json/6082)

<div class="topic-metadata">

**Author:** [@James\_Cook\_3](https://discuss.elastic.co/u/James_Cook_3)\
**Replies:** 4\
**Last updated:** [December 7, 2011, 4:18pm UTC](https://discuss.elastic.co/t/returning-search-results-as-json/6082 "2011-12-07T16:18:07Z")

</div>

I work in SSJS, so JS access to elasticsearch is pretty much second nature: var searchResponse = getClient().search(request).actionGet(); var searchHits = searchResponse.hits().hits(); return searchHits.map(functi…

---

## [Kibana to search IP address prefix?](https://discuss.elastic.co/t/kibana-to-search-ip-address-prefix/149697)

<div class="topic-metadata">

**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\
**Replies:** 1\
**Last updated:** [September 25, 2018, 5:50am UTC](https://discuss.elastic.co/t/kibana-to-search-ip-address-prefix/149697 "2018-09-25T05:50:45Z")

</div>

I have hits for SourceIP:"10.191.33.200" but not for SourceIP:"10.191.33.\*" What is the correct syntax assuming field is string type not ip\_addr?

---

## [Elastic Search and webmethods Integration](https://discuss.elastic.co/t/elastic-search-and-webmethods-integration/73465)

<div class="topic-metadata">

**Author:** [@ravi.techie2010](https://discuss.elastic.co/u/ravi.techie2010)\
**Replies:** 7\
**Last updated:** [February 1, 2017, 1:45pm UTC](https://discuss.elastic.co/t/elastic-search-and-webmethods-integration/73465 "2017-02-01T13:45:24Z")

</div>

Hi All, I am trying to integrate elastic search with webmethods. In order to achieve that, I have created a maven java project and downloaded all the dependent jars. After that, I created the a sample class to index a …

---

## [The default discovery settings are unsuitable for production use;](https://discuss.elastic.co/t/the-default-discovery-settings-are-unsuitable-for-production-use/181009)

<div class="topic-metadata">

**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Replies:** 2\
**Last updated:** [May 14, 2019, 3:44pm UTC](https://discuss.elastic.co/t/the-default-discovery-settings-are-unsuitable-for-production-use/181009 "2019-05-14T15:44:06Z")

</div>

{ "type": "server", "timestamp": "2019-05-14T13:15:27,972+0000", "level": "DEBUG", "component": "o.e.a.ActionModule", "cluster.name": "docker-cluster", "node.name": "309a9b4e906e", "message": "Using REST wrapper from plu…

---

## [Multi-core support for elasticsearch](https://discuss.elastic.co/t/multi-core-support-for-elasticsearch/14073)

<div class="topic-metadata">

**Author:** [@Ashish\_Nigam\_3](https://discuss.elastic.co/u/Ashish_Nigam_3)\
**Replies:** 5\
**Last updated:** [March 13, 2015, 5:48pm UTC](https://discuss.elastic.co/t/multi-core-support-for-elasticsearch/14073 "2015-03-13T17:48:31Z")

</div>

I have been using 0.19.8 version for last 1+ year. For last two weeks, I have been running into lot of stability issues with the cluster - unassigned shards, CPU \> 100% etc. I am planning to migrate to latest ES versi…

---

## [FIlebeat with services inside of docker compose via autodiscover](https://discuss.elastic.co/t/filebeat-with-services-inside-of-docker-compose-via-autodiscover/154886)

<div class="topic-metadata">

**Author:** [@krainboltgreene](https://discuss.elastic.co/u/krainboltgreene)\
**Replies:** 8\
**Last updated:** [October 31, 2018, 6:41pm UTC](https://discuss.elastic.co/t/filebeat-with-services-inside-of-docker-compose-via-autodiscover/154886 "2018-10-31T18:41:09Z")

</div>

Alright, so lets say I have these services: services: redis: ... filebeat: ... And this filebeat configuration: filebeat.autodiscover: providers: - type: docker templates: - config: …

---

## [Wildcard \* is not working on the kibana discover search](https://discuss.elastic.co/t/wildcard-is-not-working-on-the-kibana-discover-search/58751)

<div class="topic-metadata">

**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\
**Replies:** 2\
**Last updated:** [August 24, 2016, 7:44pm UTC](https://discuss.elastic.co/t/wildcard-is-not-working-on-the-kibana-discover-search/58751 "2016-08-24T19:44:23Z")

</div>

for example: source: "/var/log/containers/greyhound-segment\*.log", using kibana 4. Anyone is experiencing the same frustrating issue\>? I also noticed this error on the Kibana page This field is present in your elasti…

---

## [Parse a Json Field in a visualization](https://discuss.elastic.co/t/parse-a-json-field-in-a-visualization/116913)

<div class="topic-metadata">

**Author:** [@Kharma](https://discuss.elastic.co/u/Kharma)\
**Replies:** 4\
**Last updated:** [February 23, 2018, 12:58am UTC](https://discuss.elastic.co/t/parse-a-json-field-in-a-visualization/116913 "2018-02-23T00:58:17Z")

</div>

I have a large group of data in Kibana that takes the form of below: // C:\\Users\*\\AppData\\Local\\FluxSoftware\\Flux\\flux.exe // C:\\Users\*\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe Where \* is a usern…

---

## [Multiple statements in logstash JDBC Input](https://discuss.elastic.co/t/multiple-statements-in-logstash-jdbc-input/249450)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 5\
**Last updated:** [September 23, 2020, 7:20am UTC](https://discuss.elastic.co/t/multiple-statements-in-logstash-jdbc-input/249450 "2020-09-23T07:20:29Z")

</div>

Hello, I have configured jdbc input plugin with 3 statements as below ( providing just an example ) input { jdbc { statement =\> "select from DATABASE1 where TRANSACTION\_DATE \> :sql\_last\_value" use\_column\_valu…

---

## [Config Redis - Logstash - ElasticSearch](https://discuss.elastic.co/t/config-redis-logstash-elasticsearch/33006)

<div class="topic-metadata">

**Author:** [@Brian\_KITHEN](https://discuss.elastic.co/u/Brian_KITHEN)\
**Replies:** 5\
**Last updated:** [October 30, 2015, 4:13pm UTC](https://discuss.elastic.co/t/config-redis-logstash-elasticsearch/33006 "2015-10-30T16:13:04Z")

</div>

Hello, After testing the Logstash output for PacketBeat, I went to try the Redis output. I think the Redis output might still be the best option for production since it can give a lot of buffering. I could integrate pa…

---

## [How to dispaly the top 10 WARN/INFO/ERROR levels in Kibana visualization?](https://discuss.elastic.co/t/how-to-dispaly-the-top-10-warn-info-error-levels-in-kibana-visualization/93487)

<div class="topic-metadata">

**Author:** [@SandhyaRani](https://discuss.elastic.co/u/SandhyaRani)\
**Replies:** 5\
**Last updated:** [July 18, 2017, 9:06pm UTC](https://discuss.elastic.co/t/how-to-dispaly-the-top-10-warn-info-error-levels-in-kibana-visualization/93487 "2017-07-18T21:06:05Z")

</div>

Hi there! How to dispaly the top 10 WARN/INFO/ERROR levels in Kibana visualization? Thanks!

---

## [External versioning for create](https://discuss.elastic.co/t/external-versioning-for-create/67499)

<div class="topic-metadata">

**Author:** [@Ejmon](https://discuss.elastic.co/u/Ejmon)\
**Replies:** 6\
**Last updated:** [December 2, 2016, 3:15pm UTC](https://discuss.elastic.co/t/external-versioning-for-create/67499 "2016-12-02T15:15:42Z")

</div>

Hello, I would like to ask about bulk commands with external version. I am trying to use the Bulk API to send the set of document requests to the server and I am using the external versioning. While the index, update a…

---

## [关于es聚合查询指标过滤并限制返回结果数量的问题](https://discuss.elastic.co/t/es/237379)

<div class="topic-metadata">

**Author:** [@NiFeng](https://discuss.elastic.co/u/NiFeng)\
**Replies:** 7\
**Last updated:** [June 30, 2020, 5:47am UTC](https://discuss.elastic.co/t/es/237379 "2020-06-30T05:47:29Z")

</div>

{ "size": 0, "query": { "bool": { "filter": } }, "track\_total\_hits": false, "aggregations": { "my\_buckets": { "composite": { "size": 5, "sources": \[ { "eventTime.keyword": { "terms": { "field": "eventTim…

---

## [Elasticsearch Snapshot repository size estimates](https://discuss.elastic.co/t/elasticsearch-snapshot-repository-size-estimates/198774)

<div class="topic-metadata">

**Author:** [@awhelan](https://discuss.elastic.co/u/awhelan)\
**Replies:** 3\
**Last updated:** [September 10, 2019, 8:10pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repository-size-estimates/198774 "2019-09-10T20:10:37Z")

</div>

Hello, I have a size question concerning the Elasticsearch \[Snapshot/Restore\] API capabilities Let’s, say I am only backing up one index. An example call to the snapshot API is shown below for an index called myindex. …

---

## [Kibana did not load properly. Check the server output for more information upon trying with curl](https://discuss.elastic.co/t/kibana-did-not-load-properly-check-the-server-output-for-more-information-upon-trying-with-curl/158278)

<div class="topic-metadata">

**Author:** [@sandhyaks](https://discuss.elastic.co/u/sandhyaks)\
**Replies:** 0\
**Last updated:** [November 27, 2018, 6:28am UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-check-the-server-output-for-more-information-upon-trying-with-curl/158278 "2018-11-27T06:28:19Z")

</div>

Upon trying to load kibana with curl command , getting below error message. "Kibana did not load properly. Check the server output for more information "

---

## [Kibana4: Set label text for Metric Visualisation](https://discuss.elastic.co/t/kibana4-set-label-text-for-metric-visualisation/1614)

<div class="topic-metadata">

**Author:** [@mathiasrichter](https://discuss.elastic.co/u/mathiasrichter)\
**Replies:** 3\
**Last updated:** [November 18, 2015, 1:59am UTC](https://discuss.elastic.co/t/kibana4-set-label-text-for-metric-visualisation/1614 "2015-11-18T01:59:10Z")

</div>

Hi there I am coming from Kibana 3 and trying to find my way around Kibana 4. How do I change the default label text for the Metric visualisation. It always seems to use the aggregation type concatenated with the selec…

---

## [\[ERROR\]\[o.e.x.m.c.n.NodeStatsCollector\] collector \[node\_stats\] timed out when collecting data](https://discuss.elastic.co/t/error-o-e-x-m-c-n-nodestatscollector-collector-node-stats-timed-out-when-collecting-data/244194)

<div class="topic-metadata">

**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\
**Replies:** 6\
**Last updated:** [August 9, 2020, 5:32pm UTC](https://discuss.elastic.co/t/error-o-e-x-m-c-n-nodestatscollector-collector-node-stats-timed-out-when-collecting-data/244194 "2020-08-09T17:32:49Z")

</div>

Hi Guys , we just have an issue with part of the logs haven't been indexed , in almost all elastic nodes logs I see error : \[ERROR\]\[o.e.x.m.c.n.NodeStatsCollector\] collector \[node\_stats\] timed out when collecting …

---

## [Painless scripted field values not returning on only two of the values in my docs but all other values even nested values return in kibana 6.4.2](https://discuss.elastic.co/t/painless-scripted-field-values-not-returning-on-only-two-of-the-values-in-my-docs-but-all-other-values-even-nested-values-return-in-kibana-6-4-2/168298)

<div class="topic-metadata">

**Author:** [@gzukel](https://discuss.elastic.co/u/gzukel)\
**Replies:** 5\
**Last updated:** [February 22, 2019, 5:18pm UTC](https://discuss.elastic.co/t/painless-scripted-field-values-not-returning-on-only-two-of-the-values-in-my-docs-but-all-other-values-even-nested-values-return-in-kibana-6-4-2/168298 "2019-02-22T17:18:26Z")

</div>

Hello I am trying to do some data manipulation on a scripted field in Kibana. I'm having an issue where I can return all other key values in the log except the message and error.message keys. They return 0 results even w…

---

## [ILM settings not working](https://discuss.elastic.co/t/ilm-settings-not-working/190060)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 7\
**Last updated:** [July 24, 2019, 5:19am UTC](https://discuss.elastic.co/t/ilm-settings-not-working/190060 "2019-07-24T05:19:44Z")

</div>

Hi I am using filebeat and metric beat 7.2 and installing them on different windows and linux server. I want my beat agent to use existing ILM setting on elasticsearch but its overwriting it every time it is installed o…

---

## [How to set Content-type header to application/x-ndjson?](https://discuss.elastic.co/t/how-to-set-content-type-header-to-application-x-ndjson/109781)

<div class="topic-metadata">

**Author:** [@saii](https://discuss.elastic.co/u/saii)\
**Replies:** 4\
**Last updated:** [December 5, 2017, 3:21pm UTC](https://discuss.elastic.co/t/how-to-set-content-type-header-to-application-x-ndjson/109781 "2017-12-05T15:21:45Z")

</div>

Hi..I am using \_bulk for sending bulk requests to rest api..But when I run the code, I find the warning "Content type detection for rest requests is deprecated. Specify the content type using the \[Content-Type\] header.De…

---

## [Include\_in\_root deprecated](https://discuss.elastic.co/t/include-in-root-deprecated/91508)

<div class="topic-metadata">

**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\
**Replies:** 8\
**Last updated:** [July 17, 2017, 10:25pm UTC](https://discuss.elastic.co/t/include-in-root-deprecated/91508 "2017-07-17T22:25:36Z")

</div>

Hello, I understand that include\_in\_root / include\_in\_parent is now deprecated for the use of copy\_to. How can I use copy\_to for this purpose? This is my guess: PUT orders { "mappings" : { "Order" : { "proper…

---

## [Is it possible to search on replica node ONLY?](https://discuss.elastic.co/t/is-it-possible-to-search-on-replica-node-only/64829)

<div class="topic-metadata">

**Author:** [@Eugene\_Gwon](https://discuss.elastic.co/u/Eugene_Gwon)\
**Replies:** 6\
**Last updated:** [November 3, 2016, 11:36am UTC](https://discuss.elastic.co/t/is-it-possible-to-search-on-replica-node-only/64829 "2016-11-03T11:36:31Z")

</div>

Hello all, I'm using Grafana for visualization. the problem is, If I make too many graphs on single dashboard, It caused to ES freeze - and of course, I can't insert any data to ES. the only solution for this proble…

---

## [Unable to generate CSV](https://discuss.elastic.co/t/unable-to-generate-csv/132183)

<div class="topic-metadata">

**Author:** [@Diego\_Auza](https://discuss.elastic.co/u/Diego_Auza)\
**Replies:** 4\
**Last updated:** [May 29, 2018, 12:06pm UTC](https://discuss.elastic.co/t/unable-to-generate-csv/132183 "2018-05-29T12:06:54Z")

</div>

Hi, I seem to be having an issue while generating reports for large amounts of data for export on CSV. I wanted to confirm if I'm hitting some kind of max size or if this is some kind of configuration issue. Currently, …

---

## [Segments memory\_in\_bytes excessively large with allot of open indices](https://discuss.elastic.co/t/segments-memory-in-bytes-excessively-large-with-allot-of-open-indices/40622)

<div class="topic-metadata">

**Author:** [@wvl0](https://discuss.elastic.co/u/wvl0)\
**Replies:** 3\
**Last updated:** [February 1, 2016, 12:37pm UTC](https://discuss.elastic.co/t/segments-memory-in-bytes-excessively-large-with-allot-of-open-indices/40622 "2016-02-01T12:37:04Z")

</div>

Hi, Ever since we moved to keeping all indices open on our ES 1.7 ELK cluster we've had a large increase in GC runs. We have 1000+ indices, mostly with 3 shards 16408 segments in total Index buffer is configured to …

---

## [Count based on condition (not just simple aggregate)](https://discuss.elastic.co/t/count-based-on-condition-not-just-simple-aggregate/113792)

<div class="topic-metadata">

**Author:** [@Jonathan\_Dick](https://discuss.elastic.co/u/Jonathan_Dick)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 9:12am UTC](https://discuss.elastic.co/t/count-based-on-condition-not-just-simple-aggregate/113792 "2018-01-04T09:12:03Z")

</div>

Hello, I need to produce a line graph which counts the number of patients who are active in care in a given month. A patient is deemed active within a given month if they have a "return to clinic" date \< 90 days from the…

---

## [Exclude Include options syntax in Kibana visualization](https://discuss.elastic.co/t/exclude-include-options-syntax-in-kibana-visualization/241609)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 3\
**Last updated:** [July 17, 2020, 1:32pm UTC](https://discuss.elastic.co/t/exclude-include-options-syntax-in-kibana-visualization/241609 "2020-07-17T13:32:46Z")

</div>

I am creating a visualization. On x-axis I am doing a terms aggregation. What is the right way for provide a series of values to be included. This works. This does not. As per the documentation, a series of terms…

---

## [ILM issue](https://discuss.elastic.co/t/ilm-issue/274507)

<div class="topic-metadata">

**Author:** [@Saishantan\_goli](https://discuss.elastic.co/u/Saishantan_goli)\
**Replies:** 3\
**Last updated:** [June 14, 2021, 8:25am UTC](https://discuss.elastic.co/t/ilm-issue/274507 "2021-06-14T08:25:31Z")

</div>

Hi, I am trying to set up an ILM policy for the data I am having in my ES. I am getting the below exception. illegal\_argument\_exception: index name \[logstash\] does not match pattern '^.\*-\\d+$'. when I do GET /\_alias…

---

## [Timelion and watcher](https://discuss.elastic.co/t/timelion-and-watcher/141119)

<div class="topic-metadata">

**Author:** [@chrillebile](https://discuss.elastic.co/u/chrillebile)\
**Replies:** 2\
**Last updated:** [July 23, 2018, 11:43am UTC](https://discuss.elastic.co/t/timelion-and-watcher/141119 "2018-07-23T11:43:13Z")

</div>

Hey, Is it possible to combine timelion and watcher in some way? Do timelion store its result in an index, so that we can create a watcher from that? Can you use timelion as a language in JSON queries/scripts? Becaus…

---

## [Loading large table from mysql into ES with logstash](https://discuss.elastic.co/t/loading-large-table-from-mysql-into-es-with-logstash/67905)

<div class="topic-metadata">

**Author:** [@inancarin](https://discuss.elastic.co/u/inancarin)\
**Replies:** 3\
**Last updated:** [December 7, 2016, 6:43am UTC](https://discuss.elastic.co/t/loading-large-table-from-mysql-into-es-with-logstash/67905 "2016-12-07T06:43:31Z")

</div>

Hi guys, I have a large table in mysql which contains 58 millions of tweet records and it's size is continuously increasing as I am streaming from twitter. The schema of the table as follows: CREATE TABLE IF NOT EXIS…

---

## [Get Index ID](https://discuss.elastic.co/t/get-index-id/116529)

<div class="topic-metadata">

**Author:** [@vanian](https://discuss.elastic.co/u/vanian)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 11:25am UTC](https://discuss.elastic.co/t/get-index-id/116529 "2018-01-24T11:25:27Z")

</div>

I've recreated an index and would like to fix my searches to point to the new version; however, I have no idea how to find the ID of this new index. Can anyone help? Thank you. \[Capture\]

---

## [Kibana unable to connect to local Elasticsearch: plugin:elasticsearch: Service Unavailable](https://discuss.elastic.co/t/kibana-unable-to-connect-to-local-elasticsearch-plugin-elasticsearch-service-unavailable/38761)

<div class="topic-metadata">

**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\
**Replies:** 4\
**Last updated:** [May 10, 2016, 8:08pm UTC](https://discuss.elastic.co/t/kibana-unable-to-connect-to-local-elasticsearch-plugin-elasticsearch-service-unavailable/38761 "2016-05-10T20:08:34Z")

</div>

I have an instance of Kibana that I am trying to connect to a Elasticsearch cluster. The Kibana server has a non-master and non-data instance of Elasticsearch configured as connected to the cluster. Here is the output of…

---

## [Sorting aggregation results with Java API](https://discuss.elastic.co/t/sorting-aggregation-results-with-java-api/224486)

<div class="topic-metadata">

**Author:** [@mrbarret](https://discuss.elastic.co/u/mrbarret)\
**Replies:** 7\
**Last updated:** [March 26, 2020, 2:43pm UTC](https://discuss.elastic.co/t/sorting-aggregation-results-with-java-api/224486 "2020-03-26T14:43:06Z")

</div>

I have below query that buckets results and sorts them in the order I want, but I am unable to translate this to the Java API. GET /my\_data\_set/\_search { "size": 0, "aggregations": { "toBeOrdered": { "term…

---

## [Udp input is crashing](https://discuss.elastic.co/t/udp-input-is-crashing/128485)

<div class="topic-metadata">

**Author:** [@tobstone](https://discuss.elastic.co/u/tobstone)\
**Replies:** 6\
**Last updated:** [May 17, 2018, 12:08am UTC](https://discuss.elastic.co/t/udp-input-is-crashing/128485 "2018-05-17T00:08:18Z")

</div>

\[2018-04-18T10:33:55,772\]\[INFO \]\[logstash.inputs.udp \] Starting UDP listener {:address=\>"0.0.0.0:9988"} \[2018-04-18T10:33:55,773\]\[WARN \]\[logstash.inputs.udp \] UDP listener died {:exception=\>#\<NameError: uninitialized con…

---

## [To compute ingestion rate to elasticsearch cluster](https://discuss.elastic.co/t/to-compute-ingestion-rate-to-elasticsearch-cluster/293843)

<div class="topic-metadata">

**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\
**Replies:** 6\
**Last updated:** [January 10, 2022, 12:18pm UTC](https://discuss.elastic.co/t/to-compute-ingestion-rate-to-elasticsearch-cluster/293843 "2022-01-10T12:18:12Z")

</div>

Hi Team, We are using fluentd to send data to Elasticsearch and fluentd is transmitting data to Elasticsearch using the HTTP layer. We want to compute the ingestion rate to the Elasticsearch cluster, but there are no me…

---

## [Getting "Login is currently disabled because the license could not be determined." in Kibana](https://discuss.elastic.co/t/getting-login-is-currently-disabled-because-the-license-could-not-be-determined-in-kibana/105421)

<div class="topic-metadata">

**Author:** [@sanju1323](https://discuss.elastic.co/u/sanju1323)\
**Replies:** 4\
**Last updated:** [October 30, 2017, 5:07am UTC](https://discuss.elastic.co/t/getting-login-is-currently-disabled-because-the-license-could-not-be-determined-in-kibana/105421 "2017-10-30T05:07:04Z")

</div>

Hi, I have installed Elasticsearch and Kibana along with X-Pack. Everything was working fine until I change the default password in Kibana. All of a sudden, "Login is currently disabled because the license could not be …

---

## [Edge ngram with phrase matching](https://discuss.elastic.co/t/edge-ngram-with-phrase-matching/57580)

<div class="topic-metadata">

**Author:** [@trex](https://discuss.elastic.co/u/trex)\
**Replies:** 6\
**Last updated:** [August 11, 2016, 10:38am UTC](https://discuss.elastic.co/t/edge-ngram-with-phrase-matching/57580 "2016-08-11T10:38:22Z")

</div>

I need to autocomplete phrases. For example, when I search "dementia in alz", I want to get "dementia in alzheimer's". For this, I configured Edge NGram tokenizer. I tried both edge\_ngram\_analyzer and standard as the a…

[Previous page](https://discuss.elastic.co/top.md?page=386&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=388&per_page=50&period=all)
