# Top **URL:** https://discuss.elastic.co/top.md?page=408&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 409 --- ## [Problem with cipher in beat input](https://discuss.elastic.co/t/problem-with-cipher-in-beat-input/67841)
**Author:** [@clemh78](https://discuss.elastic.co/u/clemh78)\ **Replies:** 5\ **Last updated:** [December 15, 2016, 9:22am UTC](https://discuss.elastic.co/t/problem-with-cipher-in-beat-input/67841 "2016-12-15T09:22:11Z")
Hello, I have a problem with the beat input in logstash. When i starting logstash, the beat input has an error with the cipher. This is the error in log : Pipeline aborted due to error {:exception=\>#LogStash::Con… --- ## [How to change default the time range in Kibana?](https://discuss.elastic.co/t/how-to-change-default-the-time-range-in-kibana/232791)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 2\ **Last updated:** [May 15, 2020, 6:51pm UTC](https://discuss.elastic.co/t/how-to-change-default-the-time-range-in-kibana/232791 "2020-05-15T18:51:31Z")
The default the time range in Kibana is set to the last 15 minutes in any dashboard. Is there any way to change this default? 1- I try to change in file src\\legacy\\core\_plugins\\kibana\\ui\_setting\_defaults.js "from": "n… --- ## [Logstash only listens on IPv6 port](https://discuss.elastic.co/t/logstash-only-listens-on-ipv6-port/57507)
**Author:** [@Lonck](https://discuss.elastic.co/u/Lonck)\ **Replies:** 1\ **Last updated:** [August 9, 2016, 2:51am UTC](https://discuss.elastic.co/t/logstash-only-listens-on-ipv6-port/57507 "2016-08-09T02:51:14Z")
Hi for All, I installed the Elastic Stack in Debian 8.5 by repositories.The Logstash do not listen on udp port setting in the conf file (port =\> 9878) for IPv4, but IPv6 only. I found the solution to fix the problem (JAV… --- ## [Spring-data-elasticsearch “nested query throws \[nested\] failed to find nested object under path” Exception](https://discuss.elastic.co/t/spring-data-elasticsearch-nested-query-throws-nested-failed-to-find-nested-object-under-path-exception/173586)
**Author:** [@SManorathna](https://discuss.elastic.co/u/SManorathna)\ **Replies:** 5\ **Last updated:** [March 23, 2019, 1:25pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-nested-query-throws-nested-failed-to-find-nested-object-under-path-exception/173586 "2019-03-23T13:25:45Z")
I am trying to query nested object in elasticsearch using spring-boot I have 2 POJOs (Person and Car) where one is referred by the other @Document(indexName = "person", type = "user") public class Person { @Id … --- ## [Sort ascending with null values last](https://discuss.elastic.co/t/sort-ascending-with-null-values-last/5884)
**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\ **Replies:** 3\ **Last updated:** [November 16, 2011, 7:56pm UTC](https://discuss.elastic.co/t/sort-ascending-with-null-values-last/5884 "2011-11-16T19:56:25Z")
Ahoy. When sorting on a string field in ascending order, is there a way to move the documents with a null value for the sort-field to the end of the results? For example, with the setup below, we sort by ascending… --- ## [Multiple metricbeat modules each with different output index](https://discuss.elastic.co/t/multiple-metricbeat-modules-each-with-different-output-index/99757)
**Author:** [@jruzicka](https://discuss.elastic.co/u/jruzicka)\ **Replies:** 6\ **Last updated:** [October 4, 2017, 11:23am UTC](https://discuss.elastic.co/t/multiple-metricbeat-modules-each-with-different-output-index/99757 "2017-10-04T11:23:51Z")
Is it possible to have different modules within a single metricbeat send to different output index location? Like this in theory: -module1 metricset output index1 -module2 metricset output index2 --- ## [Parse date and time to timestamp using grok pattern](https://discuss.elastic.co/t/parse-date-and-time-to-timestamp-using-grok-pattern/308481)
**Author:** [@zain.jutt](https://discuss.elastic.co/u/zain.jutt)\ **Replies:** 5\ **Last updated:** [June 30, 2022, 7:42am UTC](https://discuss.elastic.co/t/parse-date-and-time-to-timestamp-using-grok-pattern/308481 "2022-06-30T07:42:39Z")
Hi, i am trying to extract the information to timestamp from the following log event for that I tried it as 20220628 11:44:29.887 - DEBUG - Trying to connect to the target: I created the pattern this way %{YEAR}%{MONT… --- ## [Service account token elastic/kibana problemKibana not accessible from browser](https://discuss.elastic.co/t/service-account-token-elastic-kibana-problemkibana-not-accessible-from-browser/317333)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 4\ **Last updated:** [October 24, 2022, 6:19pm UTC](https://discuss.elastic.co/t/service-account-token-elastic-kibana-problemkibana-not-accessible-from-browser/317333 "2022-10-24T18:19:52Z")
Hello, I was trying to start Kibana as a service, but I noticed that after a few seconds from the start Kibana goes down. In the /var/log/syslog file I saw this error: Oct 24 17:24:18 ubuntu-linux-22-04-desktop kibana… --- ## [Illegal quoting in line (When i use " in csv file)](https://discuss.elastic.co/t/illegal-quoting-in-line-when-i-use-in-csv-file/90908)
**Author:** [@Yimjunhyeok](https://discuss.elastic.co/u/Yimjunhyeok)\ **Replies:** 3\ **Last updated:** [July 6, 2017, 10:52am UTC](https://discuss.elastic.co/t/illegal-quoting-in-line-when-i-use-in-csv-file/90908 "2017-07-06T10:52:07Z")
I use Logstash 5.4.1 This is my log 1498530290428|172.16.110.65|119.205.238.31|55081|80||||10|1|0|1|0|0|0|HTTP/1.1|www.dreamsearch.or.kr|/servlet/nateWebServlet?s=8375|Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWe… --- ## [Dates in epoch.milliseconds and ingest node](https://discuss.elastic.co/t/dates-in-epoch-milliseconds-and-ingest-node/60124)
**Author:** [@Larry\_Schrader](https://discuss.elastic.co/u/Larry_Schrader)\ **Replies:** 6\ **Last updated:** [June 23, 2017, 1:47am UTC](https://discuss.elastic.co/t/dates-in-epoch-milliseconds-and-ingest-node/60124 "2017-06-23T01:47:46Z")
I am using 5.0 alpha5 with an ingest node and I am trying to get a timestamp field that is in epoch.milliseconds (ie. 1473371994.193595) to be formatted as a time field. The field is processed without errors if I allow … --- ## [Which is faster GetAsync or SearchAsync in elastic search NEST?](https://discuss.elastic.co/t/which-is-faster-getasync-or-searchasync-in-elastic-search-nest/189005)
**Author:** [@SudevPK](https://discuss.elastic.co/u/SudevPK)\ **Replies:** 1\ **Last updated:** [July 5, 2019, 6:43am UTC](https://discuss.elastic.co/t/which-is-faster-getasync-or-searchasync-in-elastic-search-nest/189005 "2019-07-05T06:43:16Z")
var response = elasticClient .SearchAsync\(a =\> a .Index("item") .AllTypes() .Size(1) .Query(q =\> … --- ## [Update is not Working in Logstash JDBC Input](https://discuss.elastic.co/t/update-is-not-working-in-logstash-jdbc-input/112356)
**Author:** [@Sahul\_Hameed\_B](https://discuss.elastic.co/u/Sahul_Hameed_B)\ **Replies:** 5\ **Last updated:** [December 20, 2017, 8:36am UTC](https://discuss.elastic.co/t/update-is-not-working-in-logstash-jdbc-input/112356 "2017-12-20T08:36:17Z")
Hi I am working on Elastic Search using logstash conf file using sql query. I am connecting Sql Database using Logstash conf File. This is my Conf file input { jdbc { jdbc\_driver\_library =\> "D:\\Elastic\\elasticsearch-… --- ## [Tracking User Logins and Activity](https://discuss.elastic.co/t/tracking-user-logins-and-activity/153068)
**Author:** [@tylers](https://discuss.elastic.co/u/tylers)\ **Replies:** 2\ **Last updated:** [October 19, 2018, 3:15pm UTC](https://discuss.elastic.co/t/tracking-user-logins-and-activity/153068 "2018-10-19T15:15:04Z")
Hello, I'm aware of xpack and the access logs as described in elasticsearch.yml ( https://www.elastic.co/guide/en/x-pack/5.6/auditing.html ). But are there any other logs that track user usage within kibana (i.e. which… --- ## [How to automatically delete documents older than 3 months](https://discuss.elastic.co/t/how-to-automatically-delete-documents-older-than-3-months/265851)
**Author:** [@kate\_yxy](https://discuss.elastic.co/u/kate_yxy)\ **Replies:** 7\ **Last updated:** [March 9, 2021, 10:22pm UTC](https://discuss.elastic.co/t/how-to-automatically-delete-documents-older-than-3-months/265851 "2021-03-09T22:22:06Z")
Hey, I want to delete documents older than 3 months in my index. And I have read the doc here about using ILM to create time-based indices and apply ILM policies. However, this doesn't seem to fit our use case. We're us… --- ## [OpenJDK 64-Bit Server VM warning: INFO: os::commit\_memory(0x000000058a6c0000, 10388504576, 0) failed; error='Cannot allocate memory' (errno=12)](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-info-os-commit-memory-0x000000058a6c0000-10388504576-0-failed-error-cannot-allocate-memory-errno-12/318160)
**Author:** [@shristy](https://discuss.elastic.co/u/shristy)\ **Replies:** 8\ **Last updated:** [November 4, 2022, 8:06am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-info-os-commit-memory-0x000000058a6c0000-10388504576-0-failed-error-cannot-allocate-memory-errno-12/318160 "2022-11-04T08:06:33Z")
OpenJDK 64-Bit Server VM warning: INFO: os::commit\_memory(0x000000058a6c0000, 10388504576, 0) failed; error='Cannot allocate memory' (errno=12) There is insufficient memory for the Java Runtime Environment to continue. … --- ## [Featured results / Pinned query](https://discuss.elastic.co/t/featured-results-pinned-query/207391)
**Author:** [@fsh](https://discuss.elastic.co/u/fsh)\ **Replies:** 2\ **Last updated:** [November 12, 2019, 12:15pm UTC](https://discuss.elastic.co/t/featured-results-pinned-query/207391 "2019-11-12T12:15:15Z")
Hi, I'm stuck with a concept of 2 sets of search results combined into 1 set (that would make paginating simple). My simplified mapping looks like this: 'properties' =\> \[ 'featured' =\> \['type' =\> 'boolean'\]… --- ## [Restrictions on the Code block in Ruby filter](https://discuss.elastic.co/t/restrictions-on-the-code-block-in-ruby-filter/28366)
**Author:** [@rishi](https://discuss.elastic.co/u/rishi)\ **Replies:** 2\ **Last updated:** [September 2, 2015, 12:45pm UTC](https://discuss.elastic.co/t/restrictions-on-the-code-block-in-ruby-filter/28366 "2015-09-02T12:45:43Z")
The code that can be put into the ruby filter \[1\] - are there restrictions on it in any way, such as say it should be relatively simple/short? Can I put multi line ruby code in there? How do I require other gems in the c… --- ## [Logstash using vulnerable JDK](https://discuss.elastic.co/t/logstash-using-vulnerable-jdk/282623)
**Author:** [@Aditya931](https://discuss.elastic.co/u/Aditya931)\ **Replies:** 6\ **Last updated:** [August 31, 2021, 4:50am UTC](https://discuss.elastic.co/t/logstash-using-vulnerable-jdk/282623 "2021-08-31T04:50:14Z")
Hi, The latest logstash (7.14.0) is using a vulnerable jdk, and we've got number of security issues because of that. Below is the version of logstash and the jdk used by it. Any update on when will this be resolved? an… --- ## [Log4j w/ Filebeats + Logstash - best practice(s)?](https://discuss.elastic.co/t/log4j-w-filebeats-logstash-best-practice-s/108171)
**Author:** [@seanleblanc](https://discuss.elastic.co/u/seanleblanc)\ **Replies:** 1\ **Last updated:** [November 20, 2017, 10:53pm UTC](https://discuss.elastic.co/t/log4j-w-filebeats-logstash-best-practice-s/108171 "2017-11-20T22:53:02Z")
I have just set up an ELK stack (on Centos 6.7). I have Filebeat set up to harvest files from an application server, but I'm trying to figure out what the current best practices are for shipping/parsing/searching on log4… --- ## [Problem with logstash config](https://discuss.elastic.co/t/problem-with-logstash-config/77275)
**Author:** [@Artyom\_Davydov](https://discuss.elastic.co/u/Artyom_Davydov)\ **Replies:** 5\ **Last updated:** [March 3, 2017, 8:00am UTC](https://discuss.elastic.co/t/problem-with-logstash-config/77275 "2017-03-03T08:00:57Z")
Hi all. We have trying to migrate our config (1.5) to newer (5.2) version of logstash . And we have some problem with multiline plugin. so here is an example of our config and log error. filter { if \[type\] == "osb\_ser… --- ## [Custom Domain Name](https://discuss.elastic.co/t/custom-domain-name/276056)
**Author:** [@andremarzo](https://discuss.elastic.co/u/andremarzo)\ **Replies:** 3\ **Last updated:** [June 28, 2021, 3:45pm UTC](https://discuss.elastic.co/t/custom-domain-name/276056 "2021-06-28T15:45:03Z")
I am using cloud.elastic.co instance but it provides you long URL to access ES like XXXXXXXXXXXXXX.us-east-xx.aws.found.io How is possible to use your own domain name with elastic cloud instance? --- ## [Duplicate Entries of Log data](https://discuss.elastic.co/t/duplicate-entries-of-log-data/98894)
**Author:** [@nktvys](https://discuss.elastic.co/u/nktvys)\ **Replies:** 5\ **Last updated:** [September 1, 2017, 8:38am UTC](https://discuss.elastic.co/t/duplicate-entries-of-log-data/98894 "2017-09-01T08:38:36Z")
Hi, I have multiple copies for a single entry of a log file in Elasticsearch. For eg. In my original log file, for a timestamp 12:55:03:234 there is a log entry X. In Elasticsearch for that timestamp, I have duplicates … --- ## [How to debug elasticsearch plugin using eclipse](https://discuss.elastic.co/t/how-to-debug-elasticsearch-plugin-using-eclipse/11551)
**Author:** [@kiruba](https://discuss.elastic.co/u/kiruba)\ **Replies:** 8\ **Last updated:** [October 29, 2013, 5:15pm UTC](https://discuss.elastic.co/t/how-to-debug-elasticsearch-plugin-using-eclipse/11551 "2013-10-29T17:15:22Z")
Hi all, i need to debug elasticsearch plugin from eclipse IDE. how can i do this? i searched lot but didn't get any solution. can any one tell me how to configure debugging for elasticsearch plugin. \*… --- ## [Monitoring: Error 400 Bad Request: Cannot read property 'type' of null](https://discuss.elastic.co/t/monitoring-error-400-bad-request-cannot-read-property-type-of-null/89509)
**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\ **Replies:** 6\ **Last updated:** [June 30, 2017, 12:14pm UTC](https://discuss.elastic.co/t/monitoring-error-400-bad-request-cannot-read-property-type-of-null/89509 "2017-06-30T12:14:30Z")
After installing the x-pack for ES and Kibana, i have restarted the ES and Kibana. Able to login successfully but when i click on the "Monitoring" link i am getting the following error: Monitoring: Error 400 Bad Reques… --- ## [Can we use Elasticsearch on mobile device for offline search?](https://discuss.elastic.co/t/can-we-use-elasticsearch-on-mobile-device-for-offline-search/27189)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 2\ **Last updated:** [August 12, 2015, 6:34am UTC](https://discuss.elastic.co/t/can-we-use-elasticsearch-on-mobile-device-for-offline-search/27189 "2015-08-12T06:34:09Z")
Hi , Can i install elasticsearch on mobile devices and use it to index the docs available on mobile...offline? If yes, could you please provide me the steps? else any pointers for alternate mobile search tool or mobi… --- ## [Is it inefficient to index PDF files in Elasticsearch](https://discuss.elastic.co/t/is-it-inefficient-to-index-pdf-files-in-elasticsearch/94833)
**Author:** [@aniketkk](https://discuss.elastic.co/u/aniketkk)\ **Replies:** 7\ **Last updated:** [July 28, 2017, 11:02am UTC](https://discuss.elastic.co/t/is-it-inefficient-to-index-pdf-files-in-elasticsearch/94833 "2017-07-28T11:02:50Z")
I want to index PDF file into elastic search. I saw that there is a plugin available to do that task. https://www.elastic.co/guide/en/elasticsearch/plugins/master/ingest-attachment.html But I want to know is indexing… --- ## [Getting \_score 0 with Function Score Query, with explain](https://discuss.elastic.co/t/getting--score-0-with-function-score-query-with-explain/35561)
**Author:** [@thiagolocatelli](https://discuss.elastic.co/u/thiagolocatelli)\ **Replies:** 7\ **Last updated:** [December 3, 2015, 12:30am UTC](https://discuss.elastic.co/t/getting--score-0-with-function-score-query-with-explain/35561 "2015-12-03T00:30:53Z")
Hi All, I am trying to understand the reason as to why ElasticSearch would return me a hit with \_score 0 even though my search caused the document to be matched. I also have a custom score function that would not allow… --- ## [Getting documents from an index with more than 10,000 records](https://discuss.elastic.co/t/getting-documents-from-an-index-with-more-than-10-000-records/264069)
**Author:** [@vastevenson](https://discuss.elastic.co/u/vastevenson)\ **Replies:** 4\ **Last updated:** [February 12, 2021, 8:59pm UTC](https://discuss.elastic.co/t/getting-documents-from-an-index-with-more-than-10-000-records/264069 "2021-02-12T20:59:39Z")
I am trying to get a list of the ids of all document in my index. The index has about 50k documents in it, however I cannot use the from parameter to see any ids once "from" + "size" \> 10,000. I know there's the scroll a… --- ## [How to show data in discover based on EPOCH time](https://discuss.elastic.co/t/how-to-show-data-in-discover-based-on-epoch-time/43378)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 6\ **Last updated:** [March 3, 2016, 6:50pm UTC](https://discuss.elastic.co/t/how-to-show-data-in-discover-based-on-epoch-time/43378 "2016-03-03T18:50:02Z")
Hi Experts. I am feeding following data from ES 1.7.1 using bulk API. \> POST /clust/clust/\_bulk {"index": {"\_index": "clust", "\_type": "clust"}} {"name": "VG", "rollno": "12", "time": "1457005581"} My time filed ha… --- ## [Where license data is stored?](https://discuss.elastic.co/t/where-license-data-is-stored/38736)
**Author:** [@Karzmu](https://discuss.elastic.co/u/Karzmu)\ **Replies:** 5\ **Last updated:** [January 8, 2016, 4:27pm UTC](https://discuss.elastic.co/t/where-license-data-is-stored/38736 "2016-01-08T16:27:31Z")
Hi! Where license data is stored in Elasticsearch 1.7.3? I am looking for the directory which keeps this information. We are using Elasticsearch with Shield inside Docker container and we want to keep our license upd… --- ## [Filebeat processing docker json-file logs](https://discuss.elastic.co/t/filebeat-processing-docker-json-file-logs/104590)
**Author:** [@evansj](https://discuss.elastic.co/u/evansj)\ **Replies:** 2\ **Last updated:** [October 24, 2017, 11:32am UTC](https://discuss.elastic.co/t/filebeat-processing-docker-json-file-logs/104590 "2017-10-24T11:32:32Z")
Hi I'm trying to configure filebeat, in a docker container, to process docker container logs and send them to graylog. The docker log files are structured with a json message per line, like this: {"log":"Starting conta… --- ## [Unable to import saved objects in Kibana](https://discuss.elastic.co/t/unable-to-import-saved-objects-in-kibana/243020)
**Author:** [@leo.hamon](https://discuss.elastic.co/u/leo.hamon)\ **Replies:** 7\ **Last updated:** [July 30, 2020, 7:42am UTC](https://discuss.elastic.co/t/unable-to-import-saved-objects-in-kibana/243020 "2020-07-30T07:42:56Z")
Hi all, I'm looking for some help to import saved objects on Kibana. I have about 75 visualizations and 10 dashboards on my computer and I want to export and import them in Kibana on a server. But when I drop my .ndjso… --- ## [First level filtering with Filebeat](https://discuss.elastic.co/t/first-level-filtering-with-filebeat/92212)
**Author:** [@Sarfaraz\_Ahmad](https://discuss.elastic.co/u/Sarfaraz_Ahmad)\ **Replies:** 2\ **Last updated:** [July 7, 2017, 10:15am UTC](https://discuss.elastic.co/t/first-level-filtering-with-filebeat/92212 "2017-07-07T10:15:17Z")
Hi, Is it possible to use processors and fields from Filebeat modules and write the filtered out events through the output.file module ? I am hoping filebeat should be flexible enough to do this. I don't want to displa… --- ## [How to apply index templates by using config/templates dir](https://discuss.elastic.co/t/how-to-apply-index-templates-by-using-config-templates-dir/181668)
**Author:** [@codequokka](https://discuss.elastic.co/u/codequokka)\ **Replies:** 6\ **Last updated:** [May 22, 2019, 12:46am UTC](https://discuss.elastic.co/t/how-to-apply-index-templates-by-using-config-templates-dir/181668 "2019-05-22T00:46:43Z")
Hi community! I want to apply index templates in config/templates dir in es docker container. I tried it in following way , but it did not works well. Please tell me how to do this. Mount local templates dir to es c… --- ## [Mixing split series and split charts visualisation](https://discuss.elastic.co/t/mixing-split-series-and-split-charts-visualisation/152247)
**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\ **Replies:** 2\ **Last updated:** [October 16, 2018, 10:57am UTC](https://discuss.elastic.co/t/mixing-split-series-and-split-charts-visualisation/152247 "2018-10-16T10:57:32Z")
Hello, I am a Splunk user migrating to Elastic Stack. In Splunk I use to choose the "split series mode" when I wanted to show multi charts on a visualisation, with a common legend (see capture 1) In Kibana, when i cho… --- ## [Retrieve duplicate data using Kibana search bar](https://discuss.elastic.co/t/retrieve-duplicate-data-using-kibana-search-bar/74229)
**Author:** [@mmbtenorio](https://discuss.elastic.co/u/mmbtenorio)\ **Replies:** 1\ **Last updated:** [February 9, 2017, 4:32pm UTC](https://discuss.elastic.co/t/retrieve-duplicate-data-using-kibana-search-bar/74229 "2017-02-09T16:32:29Z")
I've been working on retrieving duplicate data from Elasticsearch. However the duplicate filter query I have is not working as expected. I tried the query on KIBANA's search tab but its always showing an error message. … --- ## [Custom Analyzer \[my\_analyzer\] failed to find tokenizer under name \[whitespace\]](https://discuss.elastic.co/t/custom-analyzer-my-analyzer-failed-to-find-tokenizer-under-name-whitespace/217743)
**Author:** [@amit.nema](https://discuss.elastic.co/u/amit.nema)\ **Replies:** 6\ **Last updated:** [February 7, 2020, 2:06pm UTC](https://discuss.elastic.co/t/custom-analyzer-my-analyzer-failed-to-find-tokenizer-under-name-whitespace/217743 "2020-02-07T14:06:23Z")
Hello Team, I'm using elasticsearch version 6.7.2. While testing with elasticsearch test framework, getting following error. java.lang.IllegalArgumentException: Custom Analyzer \[my\_analyzer\] failed to find tokenizer un… --- ## ["LogStash::ConfigurationError", :message=\>"Expected one of #](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of/152367)
**Author:** [@idrees](https://discuss.elastic.co/u/idrees)\ **Replies:** 1\ **Last updated:** [October 14, 2018, 10:00am UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of/152367 "2018-10-14T10:00:53Z")
Dear all, i am using elasticsearch 6.4 with logstash and searchguard with ssl enabled on centos 7. my logstash configuration file is below input { file { path =\>"/root/logstashProjects/studentwithdraw/student\_withd… --- ## [Auto generated id](https://discuss.elastic.co/t/auto-generated-id/4062)
**Author:** [@jason](https://discuss.elastic.co/u/jason)\ **Replies:** 2\ **Last updated:** [March 9, 2011, 8:44am UTC](https://discuss.elastic.co/t/auto-generated-id/4062 "2011-03-09T08:44:52Z")
Hi everyone, I went over the Java code examples, and I saw that whenver IndexResponse is created, the id value is always code-generated, i.e. for (int j = 0; j counter++; reque… --- ## [Can't install x-pcak on elasticsearch](https://discuss.elastic.co/t/cant-install-x-pcak-on-elasticsearch/98984)
**Author:** [@irtizaur](https://discuss.elastic.co/u/irtizaur)\ **Replies:** 5\ **Last updated:** [September 7, 2017, 4:57am UTC](https://discuss.elastic.co/t/cant-install-x-pcak-on-elasticsearch/98984 "2017-09-07T04:57:52Z")
Hi, i am using Elasticsearch 5.5.2 and Kibana 5.5.2 on ubuntu 16.04 version. for both i have followed the Debian package installation. Now i am trying to install x-pack on both elasticsearch and kibana. but getting belo… --- ## [How to delete multiple documents by id in specific txt file or json using CURL command](https://discuss.elastic.co/t/how-to-delete-multiple-documents-by-id-in-specific-txt-file-or-json-using-curl-command/176601)
**Author:** [@ali1](https://discuss.elastic.co/u/ali1)\ **Replies:** 1\ **Last updated:** [April 12, 2019, 12:45pm UTC](https://discuss.elastic.co/t/how-to-delete-multiple-documents-by-id-in-specific-txt-file-or-json-using-curl-command/176601 "2019-04-12T12:45:01Z")
Hello, i have a txt file that contains some documents id and i want to execute a curl XDELETE to delete all this documents from my index at once. my txt file contains ids like this : 12 24 33 48 do you have any su… --- ## [Epoch\_millis has a maximum of 13 digits - Joda time accepts a long](https://discuss.elastic.co/t/epoch-millis-has-a-maximum-of-13-digits-joda-time-accepts-a-long/50508)
**Author:** [@rbellamy](https://discuss.elastic.co/u/rbellamy)\ **Replies:** 1\ **Last updated:** [May 24, 2016, 6:27am UTC](https://discuss.elastic.co/t/epoch-millis-has-a-maximum-of-13-digits-joda-time-accepts-a-long/50508 "2016-05-24T06:27:44Z")
In the documentation for date formats, epoch\_millis has a maximum char length of 13 (year range of 1653 and 2286). Also true for epoch\_seconds. Elasticsearch uses DateTime(millis, DateTimeZone.UTC) to construct an im… --- ## [EXCEPTION : java.lang.OutOfMemoryError: GC overhead limit exceeded](https://discuss.elastic.co/t/exception-java-lang-outofmemoryerror-gc-overhead-limit-exceeded/58954)
**Author:** [@sanju1323](https://discuss.elastic.co/u/sanju1323)\ **Replies:** 8\ **Last updated:** [September 2, 2016, 10:15am UTC](https://discuss.elastic.co/t/exception-java-lang-outofmemoryerror-gc-overhead-limit-exceeded/58954 "2016-09-02T10:15:24Z")
Hi, I'm indexing data from sql server to Elasticsearch using JDBC plugin. While running a particular query, I'm facing this issue. Have tried increasing ES\_MIN\_MEM to 10g, ES\_MAX\_MEM to 10g, ES\_HEAP\_SIZE to 10g. But … --- ## [How do I logout of Kibana](https://discuss.elastic.co/t/how-do-i-logout-of-kibana/299015)
**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\ **Replies:** 8\ **Last updated:** [March 10, 2022, 11:18pm UTC](https://discuss.elastic.co/t/how-do-i-logout-of-kibana/299015 "2022-03-10T23:18:39Z")
I know this is incredibly basic and I'm not trolling, I can't find a logout button --- ## [How can I do a full backup?](https://discuss.elastic.co/t/how-can-i-do-a-full-backup/264486)
**Author:** [@Solknaar](https://discuss.elastic.co/u/Solknaar)\ **Replies:** 6\ **Last updated:** [February 16, 2021, 11:31pm UTC](https://discuss.elastic.co/t/how-can-i-do-a-full-backup/264486 "2021-02-16T23:31:00Z")
Hi everyone !!! I use Elasticsearch 7.9.2, with Kibana and Beats, (lucene\_version = 8.6.2) in a Linux server (Red Hat Enterprise Linux Server 7.4), with a single node. I got help to make a full backup, but, if possible… --- ## [Getting a no\_viable\_alt\_exception only when trying to filter using a scripted field](https://discuss.elastic.co/t/getting-a-no-viable-alt-exception-only-when-trying-to-filter-using-a-scripted-field/183145)
**Author:** [@ebalmeida](https://discuss.elastic.co/u/ebalmeida)\ **Replies:** 6\ **Last updated:** [June 11, 2019, 2:39pm UTC](https://discuss.elastic.co/t/getting-a-no-viable-alt-exception-only-when-trying-to-filter-using-a-scripted-field/183145 "2019-06-11T14:39:44Z")
TL/DR: Big script works fine for calculating on documents but throws exception when filtering I've built a quite involved scripted field to deal with a count in a list of strings, it also dealt with parsing dates in tho… --- ## [Could not load plugin descriptor for existing plugin \[repository-hdfs\]. Was the plugin built before 2.0?](https://discuss.elastic.co/t/could-not-load-plugin-descriptor-for-existing-plugin-repository-hdfs-was-the-plugin-built-before-2-0/61779)
**Author:** [@Jesus](https://discuss.elastic.co/u/Jesus)\ **Replies:** 6\ **Last updated:** [September 30, 2016, 10:46am UTC](https://discuss.elastic.co/t/could-not-load-plugin-descriptor-for-existing-plugin-repository-hdfs-was-the-plugin-built-before-2-0/61779 "2016-09-30T10:46:23Z")
Hi, I installed the repository-hdfs plugin but I have an error when I run Elasticsearch. This is the error: ./elasticsearch \[2016-09-29 09:37:33,169\]\[WARN \]\[bootstrap \] unable to install syscall filter… --- ## [Prune plugin cannot be found by systems after being installed](https://discuss.elastic.co/t/prune-plugin-cannot-be-found-by-systems-after-being-installed/134453)
**Author:** [@Mr\_BAU](https://discuss.elastic.co/u/Mr_BAU)\ **Replies:** 0\ **Last updated:** [June 4, 2018, 3:37pm UTC](https://discuss.elastic.co/t/prune-plugin-cannot-be-found-by-systems-after-being-installed/134453 "2018-06-04T15:37:02Z")
Hi, maybe I'm looking at this all wrong, but I can't find what I"m doing wrong here. I installed the prune filter, with this command: bin/logstash-plugin install logstash-filter-prune which was successful and I can l… --- ## [Correct src\_ip field datatype to 'ip'](https://discuss.elastic.co/t/correct-src-ip-field-datatype-to-ip/154100)
**Author:** [@CamTheMan](https://discuss.elastic.co/u/CamTheMan)\ **Replies:** 7\ **Last updated:** [November 19, 2018, 2:29am UTC](https://discuss.elastic.co/t/correct-src-ip-field-datatype-to-ip/154100 "2018-11-19T02:29:56Z")
Hello, I have only recently discovered the field datatype 'ip' I have most of the my IP addresses labeled as 'src\_ip' looking at the current data type it's a 'string'. Can i force the change somehow? How do i fix it? … --- ## [How to return more than one field in a result of aggregations](https://discuss.elastic.co/t/how-to-return-more-than-one-field-in-a-result-of-aggregations/54825)
**Author:** [@samuelr](https://discuss.elastic.co/u/samuelr)\ **Replies:** 2\ **Last updated:** [July 6, 2016, 4:19pm UTC](https://discuss.elastic.co/t/how-to-return-more-than-one-field-in-a-result-of-aggregations/54825 "2016-07-06T16:19:05Z")
hello, I need a help to know how to do, and if possible, return more than one field in a result of aggregation. i have this agg: { "size": 0, "aggs" : { "bairros" : { … [Previous page](https://discuss.elastic.co/top.md?page=407&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=409&per_page=50&period=all)