# Top **URL:** https://discuss.elastic.co/top.md?page=415&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 416 --- ## [Why elasticsearch does not allow snapshot in queue?](https://discuss.elastic.co/t/why-elasticsearch-does-not-allow-snapshot-in-queue/58032)
**Author:** [@DravenJohnson](https://discuss.elastic.co/u/DravenJohnson)\ **Replies:** 2\ **Last updated:** [April 5, 2017, 5:42pm UTC](https://discuss.elastic.co/t/why-elasticsearch-does-not-allow-snapshot-in-queue/58032 "2017-04-05T17:42:02Z")
Cannot queue a snapshot process? What if we have daily snapshot running everyday and monthly snapshot every month but there are some time lap over during this process. Monthly snapshot usually take longer than 24 hours. --- ## [Geo\_point expected issue](https://discuss.elastic.co/t/geo-point-expected-issue/84420)
**Author:** [@met3or](https://discuss.elastic.co/u/met3or)\ **Replies:** 7\ **Last updated:** [May 5, 2017, 11:14am UTC](https://discuss.elastic.co/t/geo-point-expected-issue/84420 "2017-05-05T11:14:22Z")
Hi all, Hitting my head against a wall with a geo\_point issue, I am receiving an error such as the following from Logstash: \[2017-05-03T14:43:22,014\]\[WARN \]\[logstash.outputs.elasticsearch\] Failed action. {:status=\>4… --- ## [Kibana V.7.0 RC 2 - Couldn't find any index patterns with geospatial fields or / No Compatible Fields](https://discuss.elastic.co/t/kibana-v-7-0-rc-2-couldnt-find-any-index-patterns-with-geospatial-fields-or-no-compatible-fields/175728)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 5\ **Last updated:** [April 11, 2019, 4:43am UTC](https://discuss.elastic.co/t/kibana-v-7-0-rc-2-couldnt-find-any-index-patterns-with-geospatial-fields-or-no-compatible-fields/175728 "2019-04-11T04:43:13Z")
Hi Devs and folks, I have successfully installed V.7 RC 2 :=). I have softflowd activated on my pfsense. Now I recieve the results in Kibana and I can see all the field. So far it looks good to me. It's probably a basi… --- ## [Logging of queries for debugging](https://discuss.elastic.co/t/logging-of-queries-for-debugging/13013)
**Author:** [@Oliver\_B\_Fischer](https://discuss.elastic.co/u/Oliver_B_Fischer)\ **Replies:** 7\ **Last updated:** [January 6, 2015, 6:09am UTC](https://discuss.elastic.co/t/logging-of-queries-for-debugging/13013 "2015-01-06T06:09:35Z")
Hi, is it possible to log incomming queries? I have a query which results differ if I execute it via cURL or jQuery. For debugging it would be great to have the possibility to log incoming queries. Best, O… --- ## [\[ES 7.4\] elasticsearch node dont see each other](https://discuss.elastic.co/t/es-7-4-elasticsearch-node-dont-see-each-other/204355)
**Author:** [@JustinLe](https://discuss.elastic.co/u/JustinLe)\ **Replies:** 8\ **Last updated:** [October 21, 2019, 4:54pm UTC](https://discuss.elastic.co/t/es-7-4-elasticsearch-node-dont-see-each-other/204355 "2019-10-21T16:54:52Z")
Hi Im just start in ES about some days I have 3 machine in network ips: machine 1 : 10.255.255.6 ,machine 2 : 10.255.255.7, machine 3: 10.255.255.8 i want to setup a es cluster with machine 1 is a master node and two… --- ## [Timeout issue while creating index](https://discuss.elastic.co/t/timeout-issue-while-creating-index/115327)
**Author:** [@uvarisubash](https://discuss.elastic.co/u/uvarisubash)\ **Replies:** 4\ **Last updated:** [January 12, 2018, 6:34pm UTC](https://discuss.elastic.co/t/timeout-issue-while-creating-index/115327 "2018-01-12T18:34:23Z")
Hi , I am trying to create new index through Dev Tool. i am getting a time out error. Creation procedure: PUT test\_index { "settings" : { "index" : { "number\_of\_shards" : 10, "number\_of\_replicas" : 3 } } } Er… --- ## [Filter search by date in search-ui](https://discuss.elastic.co/t/filter-search-by-date-in-search-ui/258929)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 8\ **Last updated:** [December 18, 2020, 1:53pm UTC](https://discuss.elastic.co/t/filter-search-by-date-in-search-ui/258929 "2020-12-18T13:53:16Z")
My documents have a date field with name published\_timestamp. I would like to provide user possibility to filter search results on specific date (excluding time), for example 2020-12-17. My thought was to add an date in… --- ## [How to properly bulk index while defining a custom id?](https://discuss.elastic.co/t/how-to-properly-bulk-index-while-defining-a-custom-id/5671)
**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\ **Replies:** 3\ **Last updated:** [October 25, 2011, 7:19am UTC](https://discuss.elastic.co/t/how-to-properly-bulk-index-while-defining-a-custom-id/5671 "2011-10-25T07:19:42Z")
I've noticed different behavior when bulk indexing using a custom document id versus not defining a document id. By not defining an id, I get the desire behavior which is all documents are indexed. If I attempt to def… --- ## [Using the Remove processor for ingest node](https://discuss.elastic.co/t/using-the-remove-processor-for-ingest-node/56500)
**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\ **Replies:** 7\ **Last updated:** [July 28, 2016, 10:33am UTC](https://discuss.elastic.co/t/using-the-remove-processor-for-ingest-node/56500 "2016-07-28T10:33:09Z")
Hi, I am trying to remove some fields from the document using the REMOVE processor in the pipeline. I tried: remove { "field"=\>"a", "field"=\>"b", "field"=\>"c", "field"=\>"d", "field"=\>"e", "ignore\_f… --- ## [New index patterns are not created](https://discuss.elastic.co/t/new-index-patterns-are-not-created/246645)
**Author:** [@fuggi](https://discuss.elastic.co/u/fuggi)\ **Replies:** 2\ **Last updated:** [August 28, 2020, 3:52pm UTC](https://discuss.elastic.co/t/new-index-patterns-are-not-created/246645 "2020-08-28T15:52:51Z")
Hi, here is the history of issues I've had with ELK the last days: ELK stopped running out of the blue a few days ago showing errors like org.elasticsearch.action.NoShardAvailableActionException: No shard available … --- ## [ES always responds with HTML](https://discuss.elastic.co/t/es-always-responds-with-html/67094)
**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\ **Replies:** 5\ **Last updated:** [November 24, 2016, 2:37pm UTC](https://discuss.elastic.co/t/es-always-responds-with-html/67094 "2016-11-24T14:37:34Z")
Hey, i just installed ES 5.0 and this is happening: input: curl -XGET 'localhost:9200/?pretty' output: \ \\ \ **Author:** [@scofield](https://discuss.elastic.co/u/scofield)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 5:50am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-create-subquery-with-elasticsearch/231623 "2020-05-14T05:50:46Z") I have an alert that is trigged every time the last record added has the field rabbitmq.queue.name == 'service\_test\_error' and the field rabbitmq.queue.messages.total.count != '0' The sql query below works for my search… --- ## [How to group documents and aggregate on groups](https://discuss.elastic.co/t/how-to-group-documents-and-aggregate-on-groups/132318)
**Author:** [@Markus\_Paaso](https://discuss.elastic.co/u/Markus_Paaso)\ **Replies:** 3\ **Last updated:** [May 21, 2018, 5:59am UTC](https://discuss.elastic.co/t/how-to-group-documents-and-aggregate-on-groups/132318 "2018-05-21T05:59:27Z")
Let's say I have an Elasticsearch index called "item-tag" where each document contains only one itemid (long) and only one tag (keyword). There are multiple documents with same item id and multiple documents with same ta… --- ## [Error in logstash logs: " retrying failed action with response code: 429](https://discuss.elastic.co/t/error-in-logstash-logs-retrying-failed-action-with-response-code-429/199212)
**Author:** [@Ilayda\_Akinalan](https://discuss.elastic.co/u/Ilayda_Akinalan)\ **Replies:** 5\ **Last updated:** [September 17, 2019, 1:04pm UTC](https://discuss.elastic.co/t/error-in-logstash-logs-retrying-failed-action-with-response-code-429/199212 "2019-09-17T13:04:08Z")
Hi, I keep getting the below error in my logstash logs - im assuming the problem is with elasticsearch rather than logstash itself. My understanding of this is that elasticsearch cannot cope with the amount of data that… --- ## [How to query a wildcard ip address?](https://discuss.elastic.co/t/how-to-query-a-wildcard-ip-address/140347)
**Author:** [@bossi6of9](https://discuss.elastic.co/u/bossi6of9)\ **Replies:** 1\ **Last updated:** [July 17, 2018, 10:04pm UTC](https://discuss.elastic.co/t/how-to-query-a-wildcard-ip-address/140347 "2018-07-17T22:04:59Z")
Hi, I am trying to query kibana to grab any up that starts with 1.... i try 1., but it grabs everything that starts with 1, including 10, 100.... How can I specifically grab just 1.? The field is defined as text. --- ## [Writing aggregate with filtering](https://discuss.elastic.co/t/writing-aggregate-with-filtering/200930)
**Author:** [@Dennis\_Monsewicz](https://discuss.elastic.co/u/Dennis_Monsewicz)\ **Replies:** 4\ **Last updated:** [October 2, 2019, 1:04pm UTC](https://discuss.elastic.co/t/writing-aggregate-with-filtering/200930 "2019-10-02T13:04:06Z")
I'm trying to write an ElasticSearch aggregate query that includes filtering where I am wanting to grab all of the tags off a all of the documents where a user id matches the one I specify. I have this code: { "size"… --- ## [Enable CORS ElasticSearch 5.1.1](https://discuss.elastic.co/t/enable-cors-elasticsearch-5-1-1/68783)
**Author:** [@fritzwf](https://discuss.elastic.co/u/fritzwf)\ **Replies:** 4\ **Last updated:** [December 13, 2016, 2:40pm UTC](https://discuss.elastic.co/t/enable-cors-elasticsearch-5-1-1/68783 "2016-12-13T14:40:14Z")
Does the configuration: http.cors.enabled: true http.cors.allow-origin: "\*" work for version 5.1.1? I have these set, and verified using curl: curl -H "User-Agent: Mozilla" -H "Origin: http://test" -i localhost:9… --- ## [Peer certificate cannot be authenticated with known CA certificates](https://discuss.elastic.co/t/peer-certificate-cannot-be-authenticated-with-known-ca-certificates/158832)
**Author:** [@squad](https://discuss.elastic.co/u/squad)\ **Replies:** 3\ **Last updated:** [December 3, 2018, 3:31am UTC](https://discuss.elastic.co/t/peer-certificate-cannot-be-authenticated-with-known-ca-certificates/158832 "2018-12-03T03:31:51Z")
Hi, I'm working on encrypting a dev ELK 5.6 stack on CentOs 6. I have followed the documents and was able to issue certificates and got the communication set between two elasticsearch nodes and kibana. However, I se… --- ## [Array intersect filter?](https://discuss.elastic.co/t/array-intersect-filter/11100)
**Author:** [@Rue](https://discuss.elastic.co/u/Rue)\ **Replies:** 4\ **Last updated:** [March 14, 2013, 8:29am UTC](https://discuss.elastic.co/t/array-intersect-filter/11100 "2013-03-14T08:29:34Z")
I'm trying to filter results based on whether an array field has at least one element from another set. I have a field containing an array of integers eg: \_source: { ... thing\_ids: \[ 21029, 21115,… --- ## [How to disable "Norms" for all field?](https://discuss.elastic.co/t/how-to-disable-norms-for-all-field/27232)
**Author:** [@gin](https://discuss.elastic.co/u/gin)\ **Replies:** 4\ **Last updated:** [December 19, 2016, 8:06am UTC](https://discuss.elastic.co/t/how-to-disable-norms-for-all-field/27232 "2016-12-19T08:06:48Z")
I noticed the doc said the Norms can be disabled for specific field. Can Norms be disabled for all document field? I did a index templete like below { "my\_index" : { "template" : "\*", "mappings" : { … --- ## [How do I get first line from multiline message by using logstash 1.5?](https://discuss.elastic.co/t/how-do-i-get-first-line-from-multiline-message-by-using-logstash-1-5/1817)
**Author:** [@abcfy2](https://discuss.elastic.co/u/abcfy2)\ **Replies:** 6\ **Last updated:** [March 17, 2016, 8:45am UTC](https://discuss.elastic.co/t/how-do-i-get-first-line-from-multiline-message-by-using-logstash-1-5/1817 "2016-03-17T08:45:33Z")
Here is a sample: { "@timestamp" =\> "2015-06-03T11:12:43.776Z", "message" =\> "2015-06-03 16:40:30,356 \[DefaultQuartzScheduler\_Worker-9\] ERROR StackTrace - Full Stack Trace:\\norg.springframework.transacti… --- ## [Monitoring error in Kibana \[closed\]](https://discuss.elastic.co/t/monitoring-error-in-kibana-closed/115144)
**Author:** [@Bruno\_Seznec](https://discuss.elastic.co/u/Bruno_Seznec)\ **Replies:** 5\ **Last updated:** [January 13, 2018, 5:53pm UTC](https://discuss.elastic.co/t/monitoring-error-in-kibana-closed/115144 "2018-01-13T17:53:14Z")
Hi , Following some data ingest, on a single node (dev) on win 10 with ES + Kibana 6 6.0.0 RC2 Regards Bruno Kibana settings { ".kibana": { "settings": { "index": { "number\_of\_shards": "1",… --- ## [Buffer data in Logstash if Elasticsearch is down](https://discuss.elastic.co/t/buffer-data-in-logstash-if-elasticsearch-is-down/29127)
**Author:** [@scaarup](https://discuss.elastic.co/u/scaarup)\ **Replies:** 5\ **Last updated:** [December 3, 2015, 6:56am UTC](https://discuss.elastic.co/t/buffer-data-in-logstash-if-elasticsearch-is-down/29127 "2015-12-03T06:56:37Z")
Is there a buffer in Logstash to keep data in case of Elasticsearch (or any other output-taget) is down? If so, can I configure the size etc.? So I can estimate for how long we can accept elasticsearch is down. --- ## [Average responsetime based on services](https://discuss.elastic.co/t/average-responsetime-based-on-services/80757)
**Author:** [@cnallapati](https://discuss.elastic.co/u/cnallapati)\ **Replies:** 3\ **Last updated:** [March 31, 2017, 9:57pm UTC](https://discuss.elastic.co/t/average-responsetime-based-on-services/80757 "2017-03-31T21:57:48Z")
Please see attachment to see how data on kibana discoverer. I am trying to generate table form report based on average response time. From above information, I want to generate average response time by grouping Test\_A… --- ## [Likely root cause: org.elasticsearch.gateway.CorruptStateException: codec footer mismatch (file truncated?): actual footer=-993495054 vs expected footer=-1071082520](https://discuss.elastic.co/t/likely-root-cause-org-elasticsearch-gateway-corruptstateexception-codec-footer-mismatch-file-truncated-actual-footer-993495054-vs-expected-footer-1071082520/192397)
**Author:** [@pperiketi](https://discuss.elastic.co/u/pperiketi)\ **Replies:** 7\ **Last updated:** [July 26, 2019, 4:02pm UTC](https://discuss.elastic.co/t/likely-root-cause-org-elasticsearch-gateway-corruptstateexception-codec-footer-mismatch-file-truncated-actual-footer-993495054-vs-expected-footer-1071082520/192397 "2019-07-26T16:02:26Z")
Hello, I am getting below error when trying to start the ElasticSearch service. Please let me know if you how to resolve this issue. \[2019-07-26 06:38:15,086\]\[ERROR\]\[bootstrap \] Guice Exception: Elastic… --- ## [Kibana 6 - Query/Highlight Performance](https://discuss.elastic.co/t/kibana-6-query-highlight-performance/108038)
**Author:** [@fenneh](https://discuss.elastic.co/u/fenneh)\ **Replies:** 8\ **Last updated:** [April 24, 2018, 3:10am UTC](https://discuss.elastic.co/t/kibana-6-query-highlight-performance/108038 "2018-04-24T03:10:20Z")
Upgraded from 5.6.4 to 6.0.0 today to find query taking 5x the amount they have previously. These queries are where there is no field specified, e.g. term Digging around GitHub I couldn't find anything too similiar to … --- ## [Failed to parse field \[agent\] of type \[text\]](https://discuss.elastic.co/t/failed-to-parse-field-agent-of-type-text/265361)
**Author:** [@meissen](https://discuss.elastic.co/u/meissen)\ **Replies:** 4\ **Last updated:** [February 26, 2021, 8:55am UTC](https://discuss.elastic.co/t/failed-to-parse-field-agent-of-type-text/265361 "2021-02-26T08:55:56Z")
Hello, ELK stack in version 7.9.2 it has been working fine with filebeat 6.4, but after upgrading filebeat to 7.0 I get the following error in logstash logs : \[2021-02-24T15:24:56,954\]\[WARN \]\[logstash.outputs.elasticse… --- ## [Huge size of log files](https://discuss.elastic.co/t/huge-size-of-log-files/61019)
**Author:** [@Nick\_A](https://discuss.elastic.co/u/Nick_A)\ **Replies:** 4\ **Last updated:** [September 21, 2016, 11:24pm UTC](https://discuss.elastic.co/t/huge-size-of-log-files/61019 "2016-09-21T23:24:20Z")
Hi, I have Elasticsearch installed as Windows Service. I noticed several times during last several days that Elasticsearch log files took whole free disk space. It seems to me it happens every several hours. I do not h… --- ## [A problem: ClusterBlockException : blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\];](https://discuss.elastic.co/t/a-problem-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/23027)
**Author:** [@Sephen\_Xu](https://discuss.elastic.co/u/Sephen_Xu)\ **Replies:** 0\ **Last updated:** [April 1, 2015, 5:17am UTC](https://discuss.elastic.co/t/a-problem-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/23027 "2015-04-01T05:17:05Z")
This error occurred when i restart cluster. Debug log: \[2015-04-01 11:25:09,743\]\[DEBUG\]\[node \] \[es\_node\_4\_1\] using home \[/home/nat/elasticsearch-1.1.2\], config \[/home/nat/elasticsearch-1.1.2/c… --- ## [Error when loading the json file with the curl command](https://discuss.elastic.co/t/error-when-loading-the-json-file-with-the-curl-command/129530)
**Author:** [@Enonimous8](https://discuss.elastic.co/u/Enonimous8)\ **Replies:** 8\ **Last updated:** [April 30, 2018, 4:22pm UTC](https://discuss.elastic.co/t/error-when-loading-the-json-file-with-the-curl-command/129530 "2018-04-30T16:22:57Z")
Hi, I have to analyze some packages captured with wireshark on kibana. To do this I am following the guide: https://www.elastic.co/blog/analyzing-network-packets-with-wireshark-elasticsearch-and-kibana The problem occu… --- ## [Size of document](https://discuss.elastic.co/t/size-of-document/37582)
**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\ **Replies:** 3\ **Last updated:** [January 5, 2016, 2:18pm UTC](https://discuss.elastic.co/t/size-of-document/37582 "2016-01-05T14:18:49Z")
Hello Guys, I have an index and I need get size data of specifyc source, and I executed the following query: curl -XGET http://localhost:9200/graylog2\_62/\_search?pretty -d '{ "query": { "query\_string": {"defaul… --- ## [Filebeat.template.json](https://discuss.elastic.co/t/filebeat-template-json/70902)
**Author:** [@Arnaud\_Domard](https://discuss.elastic.co/u/Arnaud_Domard)\ **Replies:** 3\ **Last updated:** [January 10, 2017, 9:09am UTC](https://discuss.elastic.co/t/filebeat-template-json/70902 "2017-01-10T09:09:47Z")
Hi I am looking for a template matching access .log file (apache log file). I need to parse the message which is the raw apache log in kibana. Where can i find the documentation to build my own filebeat template ? Fiel… --- ## [Multi\_terms aggregation gives me an error](https://discuss.elastic.co/t/multi-terms-aggregation-gives-me-an-error/272328)
**Author:** [@pmsearcher](https://discuss.elastic.co/u/pmsearcher)\ **Replies:** 3\ **Last updated:** [May 18, 2021, 4:13pm UTC](https://discuss.elastic.co/t/multi-terms-aggregation-gives-me-an-error/272328 "2021-05-18T16:13:31Z")
Hello ! I'm trying to use ElasticSearch v. 7.11.1 on Windows 10. I don't know how to make multi\_terms aggregation work. This query: { "aggs": { "test\_agg": { "multi\_terms": { "terms": \[{ "… --- ## [Reporting: Error 500 : An internal server error occurred](https://discuss.elastic.co/t/reporting-error-500-an-internal-server-error-occurred/117130)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [February 1, 2018, 1:11pm UTC](https://discuss.elastic.co/t/reporting-error-500-an-internal-server-error-occurred/117130 "2018-02-01T13:11:45Z")
I tried to do: Reporting -\> Generate CSV in Kibana 6.1.2 and I got following error: Reporting: Error 500 : An internal server error occurred I apologize for posting like this, however due to Body is limited to 7000… --- ## [Search for something that must not contain xxx or xxx or xxx](https://discuss.elastic.co/t/search-for-something-that-must-not-contain-xxx-or-xxx-or-xxx/47926)
**Author:** [@aaronhance](https://discuss.elastic.co/u/aaronhance)\ **Replies:** 2\ **Last updated:** [April 20, 2016, 5:11pm UTC](https://discuss.elastic.co/t/search-for-something-that-must-not-contain-xxx-or-xxx-or-xxx/47926 "2016-04-20T17:11:40Z")
So I'll start off by explaining what I need to do. Users on my site will have an inventory of items, all possible items are stored in a database. The user can then search for "recipes", I want to be able to search for "r… --- ## [Random sort](https://discuss.elastic.co/t/random-sort/70453)
**Author:** [@enp](https://discuss.elastic.co/u/enp)\ **Replies:** 2\ **Last updated:** [January 3, 2017, 8:08pm UTC](https://discuss.elastic.co/t/random-sort/70453 "2017-01-03T20:08:20Z")
Hi, I have index with 25 000 documents which are looks like: GET locations/location/10/\_source { "country\_code": "US", "id": "10", "continent\_code": "NA", "city\_name": "New York" } I need to get some random … --- ## [Error on make setup](https://discuss.elastic.co/t/error-on-make-setup/147473)
**Author:** [@AnZot](https://discuss.elastic.co/u/AnZot)\ **Replies:** 4\ **Last updated:** [September 6, 2018, 1:49pm UTC](https://discuss.elastic.co/t/error-on-make-setup/147473 "2018-09-06T13:49:48Z")
Hi, I'm trying to create a new beat by using this guide - https://www.elastic.co/guide/en/beats/devguide/6.4/new-beat.html After I generated my beat and trying to setup it with 'make setup' command I received this error… --- ## [Is it possible to write to /dev/stdout using file output?](https://discuss.elastic.co/t/is-it-possible-to-write-to-dev-stdout-using-file-output/32935)
**Author:** [@mrkschan](https://discuss.elastic.co/u/mrkschan)\ **Replies:** 7\ **Last updated:** [October 28, 2015, 12:18pm UTC](https://discuss.elastic.co/t/is-it-possible-to-write-to-dev-stdout-using-file-output/32935 "2015-10-28T12:18:52Z")
I was trying to use /dev/stdout as the beats output but failed to do so. The config is like ... ### File as output file: # Enabling file output. enabled: true # Path to the directory where to save the… --- ## [Failed to start watcher. please wait for the cluster to become ready or try to start Watcher manully](https://discuss.elastic.co/t/failed-to-start-watcher-please-wait-for-the-cluster-to-become-ready-or-try-to-start-watcher-manully/61669)
**Author:** [@sahilarora0928](https://discuss.elastic.co/u/sahilarora0928)\ **Replies:** 7\ **Last updated:** [September 29, 2016, 7:24am UTC](https://discuss.elastic.co/t/failed-to-start-watcher-please-wait-for-the-cluster-to-become-ready-or-try-to-start-watcher-manully/61669 "2016-09-29T07:24:35Z")
Hi, I have installed watcher plugin, trying to run elastic search but getting exception. Please help me to resolve this. Its urgent. Thanks, Sahil --- ## [Counting items in a list \[array\] returns (what we think) are incorrect counts via groovy](https://discuss.elastic.co/t/counting-items-in-a-list-array-returns-what-we-think-are-incorrect-counts-via-groovy/21547)
**Author:** [@Jeff\_Steinmetz](https://discuss.elastic.co/u/Jeff_Steinmetz)\ **Replies:** 7\ **Last updated:** [January 9, 2015, 10:37am UTC](https://discuss.elastic.co/t/counting-items-in-a-list-array-returns-what-we-think-are-incorrect-counts-via-groovy/21547 "2015-01-09T10:37:53Z")
Is there a better way to do this? Please see this gist (or even better yet, run the script locally see the issue). https://gist.github.com/jeffsteinmetz/2ea8329c667386c80fae You must have scripting enabled in … --- ## [Delete and re-create an index pattern](https://discuss.elastic.co/t/delete-and-re-create-an-index-pattern/244689)
**Author:** [@leo.hamon](https://discuss.elastic.co/u/leo.hamon)\ **Replies:** 7\ **Last updated:** [August 12, 2020, 1:31pm UTC](https://discuss.elastic.co/t/delete-and-re-create-an-index-pattern/244689 "2020-08-12T13:31:42Z")
Hi everyone, I have an issue with my dashboards. They are built on an index pattern, I wanted to know if I can delete the index safely and re-create another one with the same name ? Will I keep my dashboards safe, or wi… --- ## [Filebeat kept reporting "read: connection reset by peer" error](https://discuss.elastic.co/t/filebeat-kept-reporting-read-connection-reset-by-peer-error/82157)
**Author:** [@Daniel\_Chen](https://discuss.elastic.co/u/Daniel_Chen)\ **Replies:** 2\ **Last updated:** [April 13, 2017, 3:04am UTC](https://discuss.elastic.co/t/filebeat-kept-reporting-read-connection-reset-by-peer-error/82157 "2017-04-13T03:04:13Z")
I am new to ELK, and I have: Elasticsearch 5.3.0 Kibana 5.3.0 Logstash 1:5.3.0 Filebeat 5.3.0 filebeat.yml filebeat: prospectors: - paths: - /${BASEPATH}/nginx-logs/\*.log input\_type: lo… --- ## [nGram filter and relevance score](https://discuss.elastic.co/t/ngram-filter-and-relevance-score/22475)
**Author:** [@Torben](https://discuss.elastic.co/u/Torben)\ **Replies:** 2\ **Last updated:** [March 6, 2015, 8:39am UTC](https://discuss.elastic.co/t/ngram-filter-and-relevance-score/22475 "2015-03-06T08:39:49Z")
Hi everyone, I'm using nGram filter for partial matching and have some problems with relevance scoring in my search results. With multi\_field and the standard analyzer I can boost the exact match e.g. "foo", wh… --- ## [Multiple jdbc SQL Statements ( & schedules, ideally)](https://discuss.elastic.co/t/multiple-jdbc-sql-statements-schedules-ideally/59930)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 2\ **Last updated:** [September 7, 2016, 4:04pm UTC](https://discuss.elastic.co/t/multiple-jdbc-sql-statements-schedules-ideally/59930 "2016-09-07T16:04:49Z")
I'm using the most up to date version of Logstash (1:2.2.4-1) and the associated jdbc logstash plugin. My one SQL statement is configured and operating on schedule as expected, querying a MS SQL instance every minute. Ho… --- ## [Timezone logstash date filter](https://discuss.elastic.co/t/timezone-logstash-date-filter/281791)
**Author:** [@Bigbad](https://discuss.elastic.co/u/Bigbad)\ **Replies:** 4\ **Last updated:** [August 19, 2021, 6:25pm UTC](https://discuss.elastic.co/t/timezone-logstash-date-filter/281791 "2021-08-19T18:25:50Z")
Hello, I want to have another date field in Europe/Paris timezone with logstash date filter. filter { mutate { add\_field =\>{ "my\_date" =\> "%{@timestamp}" } } date { match =\> \["my\_date", "yyyy-… --- ## [Free sigma ui plugin for Kibana is released](https://discuss.elastic.co/t/free-sigma-ui-plugin-for-kibana-is-released/150849)
**Author:** [@Andrew\_Vdovin](https://discuss.elastic.co/u/Andrew_Vdovin)\ **Replies:** 1\ **Last updated:** [October 3, 2018, 4:38pm UTC](https://discuss.elastic.co/t/free-sigma-ui-plugin-for-kibana-is-released/150849 "2018-10-03T16:38:03Z")
Sigma UI plugin for Kibana is available in Threat Detection Marketplace (https://tdm.socprime.com). This is a free open-source application based on the Elastic stack and Sigma Converter (sigmac). It simplifies developmen… --- ## [Condition Filter on Graph to show only value \> 20](https://discuss.elastic.co/t/condition-filter-on-graph-to-show-only-value-20/99897)
**Author:** [@cp\_el](https://discuss.elastic.co/u/cp_el)\ **Replies:** 2\ **Last updated:** [September 11, 2017, 2:47pm UTC](https://discuss.elastic.co/t/condition-filter-on-graph-to-show-only-value-20/99897 "2017-09-11T14:47:58Z")
I was trying to generate graph but having some data points as 0 or very low. So as shown in graph I want to apply filter for value \> 20. So I will get those points only on X axis which has values \>20. Is there any way o… --- ## [Performance of sorting on nested field](https://discuss.elastic.co/t/performance-of-sorting-on-nested-field/2030)
**Author:** [@micpalmia](https://discuss.elastic.co/u/micpalmia)\ **Replies:** 7\ **Last updated:** [February 8, 2016, 6:12am UTC](https://discuss.elastic.co/t/performance-of-sorting-on-nested-field/2030 "2016-02-08T06:12:00Z")
Hi all, on Elasticsearch 1.5.0, I'm dealing with ~50 million documents. My index contains an integer field and a nested object also containing an integer field. { "example":{ "properties":{ "id":{ … --- ## [Multiple pipelines : failed to read pipelines yaml file](https://discuss.elastic.co/t/multiple-pipelines-failed-to-read-pipelines-yaml-file/113603)
**Author:** [@Nonow53](https://discuss.elastic.co/u/Nonow53)\ **Replies:** 2\ **Last updated:** [January 11, 2018, 7:22am UTC](https://discuss.elastic.co/t/multiple-pipelines-failed-to-read-pipelines-yaml-file/113603 "2018-01-11T07:22:17Z")
Hello, I try to use multiple piplelines but I always encounter this error without any log to help me to resolve the problem. PS C:\\Users\\agiffard\\logstash-6.1.1\> bin/logstash Sending Logstash's logs to C:/Users/agiffa… --- ## [Kibana version for ElasticSearch 1.7.5](https://discuss.elastic.co/t/kibana-version-for-elasticsearch-1-7-5/45219)
**Author:** [@Diyal](https://discuss.elastic.co/u/Diyal)\ **Replies:** 2\ **Last updated:** [March 24, 2016, 8:27am UTC](https://discuss.elastic.co/t/kibana-version-for-elasticsearch-1-7-5/45219 "2016-03-24T08:27:03Z")
What kibana Version compatible with ElasticSearch 1.7.5 ? Thanks [Previous page](https://discuss.elastic.co/top.md?page=414&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=416&per_page=50&period=all)