# Top

**URL:** https://discuss.elastic.co/top.md?page=401&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 402

---

## [How to pretty print json of a string field](https://discuss.elastic.co/t/how-to-pretty-print-json-of-a-string-field/98653)

<div class="topic-metadata">

**Author:** [@ea1987](https://discuss.elastic.co/u/ea1987)\
**Replies:** 5\
**Last updated:** [August 30, 2017, 4:02pm UTC](https://discuss.elastic.co/t/how-to-pretty-print-json-of-a-string-field/98653 "2017-08-30T16:02:32Z")

</div>

Hi all, is there a way to pretty print a json which is stored inside a string field? Right now Kibana visualize it in a 1 row, like this: payload: { “name”:“John”, “age”:30, “car”:null } This is what I would like to h…

---

## [429 error](https://discuss.elastic.co/t/429-error/149237)

<div class="topic-metadata">

**Author:** [@af615dbd55cac2cacf32](https://discuss.elastic.co/u/af615dbd55cac2cacf32)\
**Replies:** 1\
**Last updated:** [September 20, 2018, 7:12am UTC](https://discuss.elastic.co/t/429-error/149237 "2018-09-20T07:12:34Z")

</div>

My Logstash nodes started logging "retrying failed action with response code: 429" error lines. I attached part of my logs below. Q1. There are lines as below. "Retrying indivisual bulk ctions that failed or were rejec…

---

## [Logstash could not find any input plugin named 'journald', NameError](https://discuss.elastic.co/t/logstash-could-not-find-any-input-plugin-named-journald-nameerror/97471)

<div class="topic-metadata">

**Author:** [@f9atanzh](https://discuss.elastic.co/u/f9atanzh)\
**Replies:** 7\
**Last updated:** [September 6, 2017, 5:23pm UTC](https://discuss.elastic.co/t/logstash-could-not-find-any-input-plugin-named-journald-nameerror/97471 "2017-09-06T17:23:48Z")

</div>

Hello Logstash Community, I’m looking for some help resolving a NameError problem when trying to run the journald input plugin. More specifically - I’m building a docker image for Logstash 5.5.1 and installing the jour…

---

## [Поиск по части слова в кириллице php](https://discuss.elastic.co/t/php/70531)

<div class="topic-metadata">

**Author:** [@folt](https://discuss.elastic.co/u/folt)\
**Replies:** 0\
**Last updated:** [January 4, 2017, 9:32am UTC](https://discuss.elastic.co/t/php/70531 "2017-01-04T09:32:56Z")

</div>

Такая проблема: Добавил в индекс элементы Пытаюсь найти по части слава, но приходит пустой массив. Но когда ищу по полному слову - приходят все данные с ним. require $\_SERVER\['DOCUMENT\_ROOT'\] . '/vendor/autoload.ph…

---

## [Heartbeat TCP DNS Query](https://discuss.elastic.co/t/heartbeat-tcp-dns-query/296180)

<div class="topic-metadata">

**Author:** [@rhysh](https://discuss.elastic.co/u/rhysh)\
**Replies:** 1\
**Last updated:** [February 3, 2022, 5:59pm UTC](https://discuss.elastic.co/t/heartbeat-tcp-dns-query/296180 "2022-02-03T17:59:04Z")

</div>

Hi everyone, I am looking to monitor a DNS server (or multiple) through heartbeat. Now it appears this isn't supported out of the box but it is possible to submit TCP requests. Is it at all possible to set up the follow…

---

## [Upgrade Elasticsearch from 7.8.1 to 7.14.2](https://discuss.elastic.co/t/upgrade-elasticsearch-from-7-8-1-to-7-14-2/285217)

<div class="topic-metadata">

**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\
**Replies:** 4\
**Last updated:** [September 27, 2021, 10:33am UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-7-8-1-to-7-14-2/285217 "2021-09-27T10:33:23Z")

</div>

Hello, I am having two issues with the upgrade from 7.8.1 to 7.14.2 I downloaded the tar.gz file for 7.14.2 and launched the Elasticsearch instance by running /bin/Elasticsearch. The instance updates existing indices a…

---

## [Could not login: Login is currently disabled. Administrators should consult the Kibana logs for more details](https://discuss.elastic.co/t/could-not-login-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/142488)

<div class="topic-metadata">

**Author:** [@Shree](https://discuss.elastic.co/u/Shree)\
**Replies:** 5\
**Last updated:** [August 6, 2018, 4:24pm UTC](https://discuss.elastic.co/t/could-not-login-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/142488 "2018-08-06T16:24:35Z")

</div>

I am having this Issue, also I am new for ELK field Please someone could help me out from this , it will be great. I am using Elasticsearch 6.3.2, kibana 6.3.2 and I did not use/install xpack my kibana logs: Aug 01 …

---

## [TypeError: Cannot read property 'message' of null](https://discuss.elastic.co/t/typeerror-cannot-read-property-message-of-null/110196)

<div class="topic-metadata">

**Author:** [@g-vamp](https://discuss.elastic.co/u/g-vamp)\
**Replies:** 4\
**Last updated:** [December 6, 2017, 2:10pm UTC](https://discuss.elastic.co/t/typeerror-cannot-read-property-message-of-null/110196 "2017-12-06T14:10:12Z")

</div>

I have recently upgraded the ELK stack from 5.4.2 to 6.0.0 and I have an issue in kibana where in the Discover tab or Management \> Index Patterns tab I have an ajax error saying: "Cannot read property 'message' of null"…

---

## [How to deal with nested fields limit](https://discuss.elastic.co/t/how-to-deal-with-nested-fields-limit/163544)

<div class="topic-metadata">

**Author:** [@alex\_b](https://discuss.elastic.co/u/alex_b)\
**Replies:** 2\
**Last updated:** [January 9, 2019, 2:15pm UTC](https://discuss.elastic.co/t/how-to-deal-with-nested-fields-limit/163544 "2019-01-09T14:15:29Z")

</div>

Hi, ES sets 50 as a limit of nested fields, as explained here: https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html#mapping-limit-settings As we plan to store potentially large objects in ES, we…

---

## [Elasticsearch6.2.1 remove field](https://discuss.elastic.co/t/elasticsearch6-2-1-remove-field/232558)

<div class="topic-metadata">

**Author:** [@jerry-chen-315](https://discuss.elastic.co/u/jerry-chen-315)\
**Replies:** 3\
**Last updated:** [May 15, 2020, 9:36am UTC](https://discuss.elastic.co/t/elasticsearch6-2-1-remove-field/232558 "2020-05-15T09:36:43Z")

</div>

Is there any method remove field from some docs when don't know doc id or don't specified doc id? Like higher version provide delete\_by\_query API.

---

## [Is it possible to convert a string into an int, in Kibana?](https://discuss.elastic.co/t/is-it-possible-to-convert-a-string-into-an-int-in-kibana/63645)

<div class="topic-metadata">

**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\
**Replies:** 2\
**Last updated:** [October 22, 2016, 2:45pm UTC](https://discuss.elastic.co/t/is-it-possible-to-convert-a-string-into-an-int-in-kibana/63645 "2016-10-22T14:45:22Z")

</div>

I'm trying to create a data table using kibana for a set of data in an index. I'm having a field in my database which is a String, and I have to convert it to an int so that I could use it for the sum aggregation in Kiba…

---

## [EsRejectedExecutionException: rejected execution (queue capacity 1000)](https://discuss.elastic.co/t/esrejectedexecutionexception-rejected-execution-queue-capacity-1000/19168)

<div class="topic-metadata">

**Author:** [@James\_4](https://discuss.elastic.co/u/James_4)\
**Replies:** 6\
**Last updated:** [November 3, 2014, 3:18am UTC](https://discuss.elastic.co/t/esrejectedexecutionexception-rejected-execution-queue-capacity-1000/19168 "2014-11-03T03:18:28Z")

</div>

So I've seen a few posts on this, but I've not seen any solutions posted. I've been log monitoring and I was trying to determine how to fix the below...any information would be great thank you. \[2014-08-08 19:14…

---

## [How to get the max timestamp of an elastic search index?](https://discuss.elastic.co/t/how-to-get-the-max-timestamp-of-an-elastic-search-index/133513)

<div class="topic-metadata">

**Author:** [@ranganath\_nangineni](https://discuss.elastic.co/u/ranganath_nangineni)\
**Replies:** 3\
**Last updated:** [May 28, 2018, 2:16pm UTC](https://discuss.elastic.co/t/how-to-get-the-max-timestamp-of-an-elastic-search-index/133513 "2018-05-28T14:16:25Z")

</div>

Hi, I have this requirement to verify the gap between logstash and elasticsearch processing . For this , I need to get the max timestamp of the recent index entry. Any input from the community regrading this ?

---

## [Direct buffer memory problems with RestHighlevelClient](https://discuss.elastic.co/t/direct-buffer-memory-problems-with-resthighlevelclient/106647)

<div class="topic-metadata">

**Author:** [@Slomo](https://discuss.elastic.co/u/Slomo)\
**Replies:** 3\
**Last updated:** [November 14, 2017, 11:07am UTC](https://discuss.elastic.co/t/direct-buffer-memory-problems-with-resthighlevelclient/106647 "2017-11-14T11:07:35Z")

</div>

Hello We are currently running elasticsearch 5.6.2. We connect to the nodes with the Java TransportClient. With the RestHighlevelClient reaching a state where a good amount of our use-cases are covered, we tried switchi…

---

## [Multiple ingest pipelines - docs going to the wrong pipeline](https://discuss.elastic.co/t/multiple-ingest-pipelines-docs-going-to-the-wrong-pipeline/80339)

<div class="topic-metadata">

**Author:** [@jbarlow](https://discuss.elastic.co/u/jbarlow)\
**Replies:** 4\
**Last updated:** [March 29, 2017, 5:06pm UTC](https://discuss.elastic.co/t/multiple-ingest-pipelines-docs-going-to-the-wrong-pipeline/80339 "2017-03-29T17:06:37Z")

</div>

Hello, I've got three ES master/data nodes, and one ingest node running kibana. All servers in the environment are running filebeat for log shipping. I'm seeing a lot of pipeline errors in the elasticsearch logs abou…

---

## [Compare two periods in Kibana](https://discuss.elastic.co/t/compare-two-periods-in-kibana/109937)

<div class="topic-metadata">

**Author:** [@Hannah](https://discuss.elastic.co/u/Hannah)\
**Replies:** 2\
**Last updated:** [December 4, 2017, 11:12am UTC](https://discuss.elastic.co/t/compare-two-periods-in-kibana/109937 "2017-12-04T11:12:21Z")

</div>

Hi there, I'm new to Kibana and would like to compare two periods in a line. Role model for this chart is the Audience Overview in Google Analytics where you can compare two periods (see screenshot) on a time axis. On x-…

---

## [Unable to install logstash-core gem](https://discuss.elastic.co/t/unable-to-install-logstash-core-gem/126619)

<div class="topic-metadata">

**Author:** [@annk](https://discuss.elastic.co/u/annk)\
**Replies:** 5\
**Last updated:** [April 5, 2018, 5:43pm UTC](https://discuss.elastic.co/t/unable-to-install-logstash-core-gem/126619 "2018-04-05T17:43:28Z")

</div>

Hi , I am trying to install xpack on logstash server , but it complained about missing logstash-core gem. Tried to install logstash-core-6.2.2 after installing all dependencies . $ gem list \*\*\* LOCAL GEMS \*\*\* jar-de…

---

## [Bulk indexing document without providing id using php api](https://discuss.elastic.co/t/bulk-indexing-document-without-providing-id-using-php-api/25521)

<div class="topic-metadata">

**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\
**Replies:** 7\
**Last updated:** [July 20, 2015, 2:04pm UTC](https://discuss.elastic.co/t/bulk-indexing-document-without-providing-id-using-php-api/25521 "2015-07-20T14:04:18Z")

</div>

Bulk indexing document without providing id using php api?

---

## [Cat indices docs.count is way above actual document count](https://discuss.elastic.co/t/cat-indices-docs-count-is-way-above-actual-document-count/81934)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 4\
**Last updated:** [April 11, 2017, 9:21am UTC](https://discuss.elastic.co/t/cat-indices-docs-count-is-way-above-actual-document-count/81934 "2017-04-11T09:21:40Z")

</div>

Hello. I would like to get help with number of documents. I have a indice which contains about 30M docs. cat indices shows as below. curl -XGET 10.0.1.5:9200/\_cat/indices/sonested?v health status index uuid …

---

## [How to login automatically with request header](https://discuss.elastic.co/t/how-to-login-automatically-with-request-header/155104)

<div class="topic-metadata">

**Author:** [@wujiaxin159](https://discuss.elastic.co/u/wujiaxin159)\
**Replies:** 3\
**Last updated:** [November 2, 2018, 2:57pm UTC](https://discuss.elastic.co/t/how-to-login-automatically-with-request-header/155104 "2018-11-02T14:57:14Z")

</div>

The gateway actively writes user information to the header, and I want to know how to log in directly through this header information. For example: Request Headers: userID: admin userName: admin

---

## [DNS lookup failure "elasticsearch"](https://discuss.elastic.co/t/dns-lookup-failure-elasticsearch/305939)

<div class="topic-metadata">

**Author:** [@kosmylo](https://discuss.elastic.co/u/kosmylo)\
**Replies:** 6\
**Last updated:** [June 1, 2022, 3:41am UTC](https://discuss.elastic.co/t/dns-lookup-failure-elasticsearch/305939 "2022-06-01T03:41:36Z")

</div>

I have a simple express app with Nginx and I use Filebeat with ELK stack. Filebeat takes in charge of streaming log file from Nginx to Logstash then processing it and visualize to Kibana. This pipeline works fine. Howeve…

---

## [Aggregate by sum and avg in visualization](https://discuss.elastic.co/t/aggregate-by-sum-and-avg-in-visualization/328534)

<div class="topic-metadata">

**Author:** [@Toaster2-0](https://discuss.elastic.co/u/Toaster2-0)\
**Replies:** 8\
**Last updated:** [March 30, 2023, 12:28am UTC](https://discuss.elastic.co/t/aggregate-by-sum-and-avg-in-visualization/328534 "2023-03-30T00:28:14Z")

</div>

Hello, I am having multiple Docker compose projects of which I collect metrics. I want to see the CPU of the Projects over Time. That means I need to add the amount of cpu ticks of every document with the same docker.c…

---

## [Delete old index offline when disk is full](https://discuss.elastic.co/t/delete-old-index-offline-when-disk-is-full/129113)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 2\
**Last updated:** [April 24, 2018, 12:15am UTC](https://discuss.elastic.co/t/delete-old-index-offline-when-disk-is-full/129113 "2018-04-24T00:15:09Z")

</div>

How can i delete old index offline when disk is full and i cant use API because elasticsearch API doesnt work and refuse connection because data disk is full? /dev/sdb1 100% /mnt/elastic\_data elasticsearch will no…

---

## [FSCrawler not able to connect to elastic search](https://discuss.elastic.co/t/fscrawler-not-able-to-connect-to-elastic-search/283530)

<div class="topic-metadata">

**Author:** [@Reghu\_Shanker](https://discuss.elastic.co/u/Reghu_Shanker)\
**Replies:** 6\
**Last updated:** [September 7, 2021, 1:38pm UTC](https://discuss.elastic.co/t/fscrawler-not-able-to-connect-to-elastic-search/283530 "2021-09-07T13:38:05Z")

</div>

Hi, I have an AWS Elastic Search Instance. I am trying to us FSCrawler along with it. My elastic search version is 7.10 and FSCrawler is fscrawler-es7-2.7.zip I am getting the following error: 17:51:21,439 e\[33mWARN e…

---

## [Elastic Stack 6.2.3 security update](https://discuss.elastic.co/t/elastic-stack-6-2-3-security-update/124848)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [March 20, 2018, 7:30pm UTC](https://discuss.elastic.co/t/elastic-stack-6-2-3-security-update/124848 "2018-03-20T19:30:16Z")

</div>

X-Pack Security SAML vulnerability (ESA-2018-07) X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML canonicalization and DOM traversal. An attacker might hav…

---

## [Example with spring](https://discuss.elastic.co/t/example-with-spring/72313)

<div class="topic-metadata">

**Author:** [@kodo83](https://discuss.elastic.co/u/kodo83)\
**Replies:** 3\
**Last updated:** [January 24, 2017, 10:51am UTC](https://discuss.elastic.co/t/example-with-spring/72313 "2017-01-24T10:51:18Z")

</div>

Hello, can you tell me where i can find an example with spring data and elasticsearch. i use elasticsearch 5.1.2 and Spring 4. i found an example, but when i tried it, exceptions are produced : Main Classe for tests :…

---

## [Is Cross-Cluster Searching Available in Free (Open Source / Basic) License?](https://discuss.elastic.co/t/is-cross-cluster-searching-available-in-free-open-source-basic-license/178341)

<div class="topic-metadata">

**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\
**Replies:** 2\
**Last updated:** [April 25, 2019, 7:36am UTC](https://discuss.elastic.co/t/is-cross-cluster-searching-available-in-free-open-source-basic-license/178341 "2019-04-25T07:36:58Z")

</div>

Do you need a paid x-pack license to run cross cluster search? Or is it possible to use this feature on the free license? The Elasticsearch documentation on cross cluster search and security indicates that to do cross c…

---

## [File/Packet/Metric beat on Raspi Centos 7 (armhf/armv7l)](https://discuss.elastic.co/t/file-packet-metric-beat-on-raspi-centos-7-armhf-armv7l/184048)

<div class="topic-metadata">

**Author:** [@m.pers](https://discuss.elastic.co/u/m.pers)\
**Replies:** 5\
**Last updated:** [June 6, 2019, 1:02am UTC](https://discuss.elastic.co/t/file-packet-metric-beat-on-raspi-centos-7-armhf-armv7l/184048 "2019-06-06T01:02:18Z")

</div>

Is there a build of packetbeat and filebeat for centos 7(armhf/armv7l arch) on the raspberry pi 3B+? I know raspbian has one but I am looking specifically for a build on Centos 7 with armv7l architecture or one close eno…

---

## [Feed Elasticsearch directly from a web service URL?](https://discuss.elastic.co/t/feed-elasticsearch-directly-from-a-web-service-url/24424)

<div class="topic-metadata">

**Author:** [@Marius\_Mathisen](https://discuss.elastic.co/u/Marius_Mathisen)\
**Replies:** 7\
**Last updated:** [June 27, 2015, 11:02am UTC](https://discuss.elastic.co/t/feed-elasticsearch-directly-from-a-web-service-url/24424 "2015-06-27T11:02:08Z")

</div>

Hello, Can I somehow feed Elasticsearch with the json file my web service produce? Like : nameofserver/api/thejsonfile ? Or do I have to download it and feed it manually?

---

## [Kibana connection refused](https://discuss.elastic.co/t/kibana-connection-refused/183135)

<div class="topic-metadata">

**Author:** [@George\_Smiley](https://discuss.elastic.co/u/George_Smiley)\
**Replies:** 3\
**Last updated:** [May 28, 2019, 4:15pm UTC](https://discuss.elastic.co/t/kibana-connection-refused/183135 "2019-05-28T16:15:47Z")

</div>

Hi everyone, Can anyone help me with my kibana connection refused? My kibana is running. When I try curl -X GET http://localhost:5601, it gave me error: curl: (7) Failed connect to localhost:5601; Connection refused c…

---

## [Setting up elasticsearch 6.0.1](https://discuss.elastic.co/t/setting-up-elasticsearch-6-0-1/111280)

<div class="topic-metadata">

**Author:** [@Rahul\_Pm](https://discuss.elastic.co/u/Rahul_Pm)\
**Replies:** 4\
**Last updated:** [December 13, 2017, 9:09pm UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-6-0-1/111280 "2017-12-13T21:09:25Z")

</div>

Hi, Im trying to install Elasticsearch 6 on windows using .zip file. I unzipped the file, tried running it from cmd using elasticsearch.bat and initially got an error with JAVA\_HOME. So downloaded JDK 9 ,pointed the loc…

---

## [Calculate time using timestamp!](https://discuss.elastic.co/t/calculate-time-using-timestamp/24123)

<div class="topic-metadata">

**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Replies:** 5\
**Last updated:** [June 24, 2015, 2:04am UTC](https://discuss.elastic.co/t/calculate-time-using-timestamp/24123 "2015-06-24T02:04:32Z")

</div>

Hi, guys!!! I want to calculate how much time a user has spent in the game. I have my documents with fields: timestamp, message. Message field can be 2 different types: "log in" and "log out". Difference in time between …

---

## [Year over year, month over month, Year to date this year versus last](https://discuss.elastic.co/t/year-over-year-month-over-month-year-to-date-this-year-versus-last/24080)

<div class="topic-metadata">

**Author:** [@Robin\_Patel](https://discuss.elastic.co/u/Robin_Patel)\
**Replies:** 1\
**Last updated:** [June 22, 2015, 6:37pm UTC](https://discuss.elastic.co/t/year-over-year-month-over-month-year-to-date-this-year-versus-last/24080 "2015-06-22T18:37:51Z")

</div>

Hi All, I'm relatively new to Kibana and my knowledge of it is quite limited. I am trying to create dashboards that display simple Month to date, year to date (YTD) stats on the same dash board. I would also like to…

---

## [Fuzziness parameter disables cutoff\_frequency in match query](https://discuss.elastic.co/t/fuzziness-parameter-disables-cutoff-frequency-in-match-query/60934)

<div class="topic-metadata">

**Author:** [@francesconero](https://discuss.elastic.co/u/francesconero)\
**Replies:** 0\
**Last updated:** [September 19, 2016, 6:59pm UTC](https://discuss.elastic.co/t/fuzziness-parameter-disables-cutoff-frequency-in-match-query/60934 "2016-09-19T18:59:29Z")

</div>

As in the title, setting a value to fuzziness (even 0) will make the match query ignore the cutoff\_frequency parameter. In fact setting fuzziness to 0 and a cutoff\_frequency, will return the same results of a match que…

---

## [Filebeat in docker doesn't send logs to logstash in another docker](https://discuss.elastic.co/t/filebeat-in-docker-doesnt-send-logs-to-logstash-in-another-docker/136199)

<div class="topic-metadata">

**Author:** [@bronweg](https://discuss.elastic.co/u/bronweg)\
**Replies:** 5\
**Last updated:** [June 21, 2018, 4:09am UTC](https://discuss.elastic.co/t/filebeat-in-docker-doesnt-send-logs-to-logstash-in-another-docker/136199 "2018-06-21T04:09:29Z")

</div>

Hi all, I'm newbie with elastic and also with docker. I have created four containers with FileBeat, Logstash, Elasticsearch and Kibana. I start FileBeat with -d "\*" to see DEBUG logs and I see a lot of "inputs" but no…

---

## [Parent-Child или plain документ](https://discuss.elastic.co/t/parent-child-plain/66066)

<div class="topic-metadata">

**Author:** [@griand](https://discuss.elastic.co/u/griand)\
**Replies:** 2\
**Last updated:** [November 18, 2016, 6:45pm UTC](https://discuss.elastic.co/t/parent-child-plain/66066 "2016-11-18T18:45:56Z")

</div>

Добрый день. Помогите определиться с оптимальной структурой для хранения документов. Структура следующая Set\<Company\>-\>Set\<Branch\>-\>Set\<Customer\>. Компании имеют филиалы, в которых есть сотрудники. Основная задача это …

---

## [Filebeat config is OK, but Not Started & Not Working](https://discuss.elastic.co/t/filebeat-config-is-ok-but-not-started-not-working/117301)

<div class="topic-metadata">

**Author:** [@omid](https://discuss.elastic.co/u/omid)\
**Replies:** 7\
**Last updated:** [January 29, 2018, 11:19am UTC](https://discuss.elastic.co/t/filebeat-config-is-ok-but-not-started-not-working/117301 "2018-01-29T11:19:31Z")

</div>

im installed a filebeat on server Which is to send nginx log to logstash im download filebeat .deb package (x64) and install "dpkg --install filebeat ... .deb" and successfully install . But service filebeat not work…

---

## [500 Error: Synonym file can't be read](https://discuss.elastic.co/t/500-error-synonym-file-cant-be-read/62345)

<div class="topic-metadata">

**Author:** [@Lee\_Gee](https://discuss.elastic.co/u/Lee_Gee)\
**Replies:** 4\
**Last updated:** [October 19, 2016, 10:37am UTC](https://discuss.elastic.co/t/500-error-synonym-file-cant-be-read/62345 "2016-10-19T10:37:13Z")

</div>

With latest ES on OSX Yosemite, Java 1.8.0\_91, all process run by the same user, I'm getting a 500 error on index creation, with a message that my synonym file cannot be read due to permissions error: lee:nodejs lee$ l…

---

## [How can I visualize aggregation buckets using vega (not vega-lite)](https://discuss.elastic.co/t/how-can-i-visualize-aggregation-buckets-using-vega-not-vega-lite/194336)

<div class="topic-metadata">

**Author:** [@anelson-edge](https://discuss.elastic.co/u/anelson-edge)\
**Replies:** 7\
**Last updated:** [August 22, 2019, 6:10pm UTC](https://discuss.elastic.co/t/how-can-i-visualize-aggregation-buckets-using-vega-not-vega-lite/194336 "2019-08-22T18:10:51Z")

</div>

Elasticsearch queries return an array named "buckets". All the examples I found for vega assume that the array is named "values. Try this gist:

---

## [Too complex to determinize exception: "Determinizing automaton with 13186 states and 23192 transitions would result in more than 10000 states"](https://discuss.elastic.co/t/too-complex-to-determinize-exception-determinizing-automaton-with-13186-states-and-23192-transitions-would-result-in-more-than-10000-states/81808)

<div class="topic-metadata">

**Author:** [@lcokru](https://discuss.elastic.co/u/lcokru)\
**Replies:** 1\
**Last updated:** [April 10, 2017, 3:57pm UTC](https://discuss.elastic.co/t/too-complex-to-determinize-exception-determinizing-automaton-with-13186-states-and-23192-transitions-would-result-in-more-than-10000-states/81808 "2017-04-10T15:57:34Z")

</div>

Hi, there. I perform searching in the index that contains several documents with long string inside (about 3 thousand chars). And get the exception if my query contains symbols of the Cyrillic and Latin symbols. Query: …

---

## [Kibana and Elasticsearch Keep crashing](https://discuss.elastic.co/t/kibana-and-elasticsearch-keep-crashing/62826)

<div class="topic-metadata">

**Author:** [@upendra](https://discuss.elastic.co/u/upendra)\
**Replies:** 7\
**Last updated:** [October 15, 2016, 2:30am UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-keep-crashing/62826 "2016-10-15T02:30:49Z")

</div>

HI, Our elastic search cluster and Kibana keep crashing when we execute reports. The following are the product versions: Logstash: 2.4.0 Elasticsearch: 2.4.0 Kibana: 4.6.1 Java: 1.8.0 The following is the error that …

---

## [Monitor Size of Single Directory?](https://discuss.elastic.co/t/monitor-size-of-single-directory/56038)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 7\
**Last updated:** [July 22, 2016, 10:09pm UTC](https://discuss.elastic.co/t/monitor-size-of-single-directory/56038 "2016-07-22T22:09:51Z")

</div>

Is there any way to configure Topbeat to monitor the size of one directory? I am considering just writing a script that does: 'du -h \> dirsize.txt' and tailing that file, but I'd prefer something more elegant..

---

## [Failed to find geo\_point field](https://discuss.elastic.co/t/failed-to-find-geo-point-field/26475)

<div class="topic-metadata">

**Author:** [@jcapde87](https://discuss.elastic.co/u/jcapde87)\
**Replies:** 7\
**Last updated:** [July 31, 2015, 3:09pm UTC](https://discuss.elastic.co/t/failed-to-find-geo-point-field/26475 "2015-07-31T15:09:18Z")

</div>

Hi there, I am trying to perform a search with geo\_distance in Kibana 4 and I get the following exception: "org.elasticsearch.index.query.QueryParsingException: \[.kibana\] failed to find geo\_point field \[geolocation\]" …

---

## [How to build charts from Elasticsearch query](https://discuss.elastic.co/t/how-to-build-charts-from-elasticsearch-query/54697)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 8\
**Last updated:** [July 5, 2016, 10:03am UTC](https://discuss.elastic.co/t/how-to-build-charts-from-elasticsearch-query/54697 "2016-07-05T10:03:22Z")

</div>

I have a command which is able to run in Elasticsearch following something similar to Moving average aggregation | Elasticsearch Guide \[8.11\] | Elastic GET linux\_cpu\*/\_search?search\_type=count { "aggs": { "my\_date\_h…

---

## [Logging Action Watcher](https://discuss.elastic.co/t/logging-action-watcher/80606)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 5\
**Last updated:** [March 30, 2017, 9:44am UTC](https://discuss.elastic.co/t/logging-action-watcher/80606 "2017-03-30T09:44:02Z")

</div>

Hi everyone, I am using Elasticsearch, Kibana and Watcher with Shield. I am trying to create a watch in order to notify me in the Elastic's log if it finds an ip. In the Watcher History (index), I observe that the watch…

---

## [How to Integrate Elasticsearch with MS SQL Server](https://discuss.elastic.co/t/how-to-integrate-elasticsearch-with-ms-sql-server/94922)

<div class="topic-metadata">

**Author:** [@amitshri05](https://discuss.elastic.co/u/amitshri05)\
**Replies:** 3\
**Last updated:** [July 31, 2017, 11:47pm UTC](https://discuss.elastic.co/t/how-to-integrate-elasticsearch-with-ms-sql-server/94922 "2017-07-31T23:47:34Z")

</div>

Hi Currently i am trying to integrate Elasticsearch 5.1 with MS SQL 2014, I have gone through the following blog (http://www.j2eebrain.com/java-J2ee-how-to-use-elasticsearch-with-sql-server.html) but i wont help me much…

---

## [Aggregating inner\_hits data](https://discuss.elastic.co/t/aggregating-inner-hits-data/69455)

<div class="topic-metadata">

**Author:** [@mohitjain](https://discuss.elastic.co/u/mohitjain)\
**Replies:** 3\
**Last updated:** [December 20, 2016, 10:57am UTC](https://discuss.elastic.co/t/aggregating-inner-hits-data/69455 "2016-12-20T10:57:07Z")

</div>

Hi, I am naive to Elastic Search. I found there is some problem with array of objects: https://www.elastic.co/guide/en/elasticsearch/guide/current/complex-core-fields.html#object-arrays The solution for this problem …

---

## [How to increase indexing speed?](https://discuss.elastic.co/t/how-to-increase-indexing-speed/79250)

<div class="topic-metadata">

**Author:** [@Sambit\_Kabi](https://discuss.elastic.co/u/Sambit_Kabi)\
**Replies:** 4\
**Last updated:** [March 21, 2017, 6:33am UTC](https://discuss.elastic.co/t/how-to-increase-indexing-speed/79250 "2017-03-21T06:33:18Z")

</div>

I have a specific requirement where I need to index a large amount of data in Elasticsearch. Every document has 3 fields. My requirement is that I need to index up to 20 Million such documents in 5 mins. I am hitting 10 …

---

## [No handler found for uri \[/my\_store/products/\] and method \[PUT\]](https://discuss.elastic.co/t/no-handler-found-for-uri-my-store-products-and-method-put/100623)

<div class="topic-metadata">

**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\
**Replies:** 1\
**Last updated:** [September 15, 2017, 1:45am UTC](https://discuss.elastic.co/t/no-handler-found-for-uri-my-store-products-and-method-put/100623 "2017-09-15T01:45:06Z")

</div>

Elasticsearch version: 5.5.2 OS: Linux When I create a index named my\_store of products type with the command like this: curl -XPUT 'http://10.62.179.32:9200/my\_store/products/' But it throws a error as follow: No …

---

## [Getting started with ELK catalina.out login](https://discuss.elastic.co/t/getting-started-with-elk-catalina-out-login/51077)

<div class="topic-metadata">

**Author:** [@CValor](https://discuss.elastic.co/u/CValor)\
**Replies:** 8\
**Last updated:** [May 31, 2016, 8:41pm UTC](https://discuss.elastic.co/t/getting-started-with-elk-catalina-out-login/51077 "2016-05-31T20:41:58Z")

</div>

Hey there, i'm getting started with elk solution my catalina.out is login in the follow format: "Mar 23, 2016 11:33:14 AM" . I parse the log using grok as follow %{MONTH} +%{MONTHDAY}, %{YEAR} %{TIME} %{WORD} %{JAVAC…

[Previous page](https://discuss.elastic.co/top.md?page=400&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=402&per_page=50&period=all)
