# Top **URL:** https://discuss.elastic.co/top.md?page=419&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 420 --- ## [Mmapfs and impact of vm.max\_map\_count?](https://discuss.elastic.co/t/mmapfs-and-impact-of-vm-max-map-count/55568)
**Author:** [@Ankit\_Malpani](https://discuss.elastic.co/u/Ankit_Malpani)\ **Replies:** 4\ **Last updated:** [July 18, 2016, 6:14pm UTC](https://discuss.elastic.co/t/mmapfs-and-impact-of-vm-max-map-count/55568 "2016-07-18T18:14:09Z")
This with reference to https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-configuration.html#vm-max-map-count What are the pros and cons of increasing vm.max\_map\_count from 64k to 256k? Does 64k v… --- ## [Finding "Singular" matches when searching a "Plural" term](https://discuss.elastic.co/t/finding-singular-matches-when-searching-a-plural-term/16826)
**Author:** [@Raja\_Akhtar](https://discuss.elastic.co/u/Raja_Akhtar)\ **Replies:** 4\ **Last updated:** [April 7, 2014, 2:24am UTC](https://discuss.elastic.co/t/finding-singular-matches-when-searching-a-plural-term/16826 "2014-04-07T02:24:37Z")
I am fairly new to Elasticsearch and it's worked brilliantly so far. I'm stuck in this issue of singular and plural terms, and have done quite a bit of research on it too.... and everyone's talking "stemmers", "sn… --- ## [Filebeat Logstash "Invalid version of beats protocol: 69" error](https://discuss.elastic.co/t/filebeat-logstash-invalid-version-of-beats-protocol-69-error/274275)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 9:06am UTC](https://discuss.elastic.co/t/filebeat-logstash-invalid-version-of-beats-protocol-69-error/274275 "2021-05-28T09:06:48Z")
I am hosting the logstash in EC2. And filebeat is running on my windows environment. I consistently see this error in the logs. And what is tripping me is that filebeats is able to send to logstash. There is no loadba… --- ## [Elasticsearch throws error 503 Server Unavailable](https://discuss.elastic.co/t/elasticsearch-throws-error-503-server-unavailable/348896)
**Author:** [@Kalidastate](https://discuss.elastic.co/u/Kalidastate)\ **Replies:** 7\ **Last updated:** [December 12, 2023, 8:13am UTC](https://discuss.elastic.co/t/elasticsearch-throws-error-503-server-unavailable/348896 "2023-12-12T08:13:24Z")
I am facing one issue with the Elasticsearch in the production environment. Elasticsearch stops responding to the API calls and it needs to be restarted. Logs collected from Elasticsearch are as follows When the issue… --- ## [Get org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes failed; tried](https://discuss.elastic.co/t/get-org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes-failed-tried/79509)
**Author:** [@Min\_Qiu](https://discuss.elastic.co/u/Min_Qiu)\ **Replies:** 1\ **Last updated:** [March 22, 2017, 1:56pm UTC](https://discuss.elastic.co/t/get-org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes-failed-tried/79509 "2017-03-22T13:56:42Z")
got org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes failed; error Exception in thread "main" org.apache.spark.SparkException: Job aborted du… --- ## [Failed to start Beats services, including filebeat, topbeat](https://discuss.elastic.co/t/failed-to-start-beats-services-including-filebeat-topbeat/45925)
**Author:** [@usahitya](https://discuss.elastic.co/u/usahitya)\ **Replies:** 5\ **Last updated:** [April 1, 2016, 11:16am UTC](https://discuss.elastic.co/t/failed-to-start-beats-services-including-filebeat-topbeat/45925 "2016-04-01T11:16:16Z")
HI Team, I am working on Beats especially with Topbeat and Filebeat. when I am installing services running successfully, but if I modify in configuration file and restart it, then giving the below error. \[root@Vinee… --- ## [Logstash Cannot Find Java (I know, it's common, but)](https://discuss.elastic.co/t/logstash-cannot-find-java-i-know-its-common-but/160774)
**Author:** [@Aralex](https://discuss.elastic.co/u/Aralex)\ **Replies:** 3\ **Last updated:** [December 14, 2018, 4:33pm UTC](https://discuss.elastic.co/t/logstash-cannot-find-java-i-know-its-common-but/160774 "2018-12-14T16:33:04Z")
Hi, this seems to be a quite common issue many people face. I exhausted every single resource I could find on the topic with all suggested solutions, none worked for me. I probably am missing something tiny in some file… --- ## [Kibana throws error “unable to get issuer certificate” while connecting to ElasticSearch](https://discuss.elastic.co/t/kibana-throws-error-unable-to-get-issuer-certificate-while-connecting-to-elasticsearch/119924)
**Author:** [@jfreeman](https://discuss.elastic.co/u/jfreeman)\ **Replies:** 7\ **Last updated:** [February 15, 2018, 6:54pm UTC](https://discuss.elastic.co/t/kibana-throws-error-unable-to-get-issuer-certificate-while-connecting-to-elasticsearch/119924 "2018-02-15T18:54:37Z")
ES is running in Linux on port 9200 and using firewall rules all incoming request to port 443 are redirected to port 9200 using below commands (It’s because only 443 connections are allowed to this server) firewall-cmd … --- ## [Grok path matching](https://discuss.elastic.co/t/grok-path-matching/51476)
**Author:** [@mightyschwartz](https://discuss.elastic.co/u/mightyschwartz)\ **Replies:** 2\ **Last updated:** [May 31, 2016, 8:07pm UTC](https://discuss.elastic.co/t/grok-path-matching/51476 "2016-05-31T20:07:46Z")
When I define a grok pattern for windows file path matching, I cannot get it to work... even with the default. The log is as follows: { "message" =\> "Prepared StagingJob for spreadsheet 'C:\\\\App\\\\Folder\\\\test… --- ## [Elastic Contributor Program: Tips for creating written content](https://discuss.elastic.co/t/elastic-contributor-program-tips-for-creating-written-content/261185)
**Author:** [@riferrei](https://discuss.elastic.co/u/riferrei)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 10:17pm UTC](https://discuss.elastic.co/t/elastic-contributor-program-tips-for-creating-written-content/261185 "2021-01-14T22:17:47Z")
If you are planning to submit a written content (articles, blogs, tutorials, workshops) for the Elastic Contributor Program but don't know how — I created the resources below to help you with this :partying\_face: :pag… --- ## [Packetbeat support for DB2 database?](https://discuss.elastic.co/t/packetbeat-support-for-db2-database/27886)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 3\ **Last updated:** [March 8, 2016, 3:45pm UTC](https://discuss.elastic.co/t/packetbeat-support-for-db2-database/27886 "2016-03-08T15:45:34Z")
We want packetbeat support for db2 database. Please tell me whether it supports or not? If not is there any chances of supporting db2 in future? --- ## [Add Double quotes for json data in logstash](https://discuss.elastic.co/t/add-double-quotes-for-json-data-in-logstash/157713)
**Author:** [@Sanj](https://discuss.elastic.co/u/Sanj)\ **Replies:** 8\ **Last updated:** [November 21, 2018, 2:48pm UTC](https://discuss.elastic.co/t/add-double-quotes-for-json-data-in-logstash/157713 "2018-11-21T14:48:18Z")
Hi Team, I'm trying to parse a JSON data through logstash. I'm using JSON and split plugins to parse the data. Below is my format of my JSON message. { agentId: "TMS", apiVersion: "v2", entities: \[ { agentId: "S… --- ## [Best Practices for storing and searching text in XML documents](https://discuss.elastic.co/t/best-practices-for-storing-and-searching-text-in-xml-documents/187336)
**Author:** [@ecbrodie](https://discuss.elastic.co/u/ecbrodie)\ **Replies:** 1\ **Last updated:** [June 26, 2019, 4:11pm UTC](https://discuss.elastic.co/t/best-practices-for-storing-and-searching-text-in-xml-documents/187336 "2019-06-26T16:11:58Z")
I would like to know what the best practices are for storing a large text blob field into an Elasticsearch document field and executing text queries against that text. I am particularly concerned with storing the text of… --- ## [Filebeat + zeekmodule to elastic + kibana](https://discuss.elastic.co/t/filebeat-zeekmodule-to-elastic-kibana/205482)
**Author:** [@tmans1991](https://discuss.elastic.co/u/tmans1991)\ **Replies:** 6\ **Last updated:** [November 7, 2019, 4:21pm UTC](https://discuss.elastic.co/t/filebeat-zeekmodule-to-elastic-kibana/205482 "2019-11-07T16:21:45Z")
hi im using a filebeat + zeekmodule machine to send .log files (written in JSON) to an elastic + kibana machine i am sending conn.logg dns.log http.log files.log ssl.log and notice.log but i am not sending : capture… --- ## [How to balance data between nodes by disk disk usage %](https://discuss.elastic.co/t/how-to-balance-data-between-nodes-by-disk-disk-usage/68618)
**Author:** [@WangXiangUSTC](https://discuss.elastic.co/u/WangXiangUSTC)\ **Replies:** 0\ **Last updated:** [December 10, 2016, 10:14am UTC](https://discuss.elastic.co/t/how-to-balance-data-between-nodes-by-disk-disk-usage/68618 "2016-12-10T10:14:43Z")
I have a elasticsearch cluster with four nodes, and the disk usage is not balanced, just like below: | free | total | disk usage % A | 3.2T | 7.5T | 57% B | 1.6T | 7.5T | 78% C | 3.1T | 9.0T … --- ## [Analyzing URLs for regexp queries](https://discuss.elastic.co/t/analyzing-urls-for-regexp-queries/17033)
**Author:** [@matt\_burton](https://discuss.elastic.co/u/matt_burton)\ **Replies:** 3\ **Last updated:** [April 16, 2014, 8:06pm UTC](https://discuss.elastic.co/t/analyzing-urls-for-regexp-queries/17033 "2014-04-16T20:06:16Z")
I have a field in my documents that consists of a URL. {... "url":"http://example.com/2014/04/15/foo-bar-baz/" ...} I would like to use a regexp query/filter to find documents in my index with urls matching a r… --- ## [Get time elapsed between two different documents](https://discuss.elastic.co/t/get-time-elapsed-between-two-different-documents/55935)
**Author:** [@Andre\_Leite](https://discuss.elastic.co/u/Andre_Leite)\ **Replies:** 4\ **Last updated:** [July 23, 2016, 7:09pm UTC](https://discuss.elastic.co/t/get-time-elapsed-between-two-different-documents/55935 "2016-07-23T19:09:16Z")
How can I make a query in Discovery that only show me different documents for different events sharing a common field like Session-Id that the time elapsed between two consecutive events is less than a certain amount of … --- ## [fileBeat isn't harvesting the logs from the last path's](https://discuss.elastic.co/t/filebeat-isnt-harvesting-the-logs-from-the-last-paths/106841)
**Author:** [@shaked571](https://discuss.elastic.co/u/shaked571)\ **Replies:** 8\ **Last updated:** [November 29, 2017, 3:20am UTC](https://discuss.elastic.co/t/filebeat-isnt-harvesting-the-logs-from-the-last-paths/106841 "2017-11-29T03:20:34Z")
We are using ELK for controlling our program logs. In our FileBeat config we are harvesting from 30 different paths which contains files that updates every second (it updates every second only in the prod's machines - i… --- ## [Incorrect HTTP method for URI](https://discuss.elastic.co/t/incorrect-http-method-for-uri/301440)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 4\ **Last updated:** [April 5, 2022, 3:38am UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri/301440 "2022-04-05T03:38:06Z")
Hi guys, PUT /\ PUT /%3Cmy-index-%7Bnow%2Fd%7D%3E I'm getting this error when I run the command above. { "error" : "Incorrect HTTP method for uri \[/%3Cmy-index-%7Bnow/d%7D%3E?pretty=true\] and method… --- ## [Calculation time difference between two document](https://discuss.elastic.co/t/calculation-time-difference-between-two-document/174876)
**Author:** [@Pradyumna\_Jha](https://discuss.elastic.co/u/Pradyumna_Jha)\ **Replies:** 4\ **Last updated:** [April 1, 2019, 11:01pm UTC](https://discuss.elastic.co/t/calculation-time-difference-between-two-document/174876 "2019-04-01T23:01:00Z")
I am collecting log data and putting it into elastic search. Each document has 4 columns containing timestamp, key(not unique), Interface and Message. I need to calculate the time difference between two rows with same va… --- ## [Sending logs to external SIEM via syslog using filebeat](https://discuss.elastic.co/t/sending-logs-to-external-siem-via-syslog-using-filebeat/240816)
**Author:** [@JitenM](https://discuss.elastic.co/u/JitenM)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 8:25am UTC](https://discuss.elastic.co/t/sending-logs-to-external-siem-via-syslog-using-filebeat/240816 "2020-07-13T08:25:35Z")
Hello All, Is it possible to send the logs to a external SIEM server through syslog configuration using filebeat? If yes could you please give me a reference link because i am not able to find a output type as syslog in… --- ## [Getting "parsing\_exception","reason":"\[terms\] unknown token \[END\_ARRAY\] trying to do multiple field filter](https://discuss.elastic.co/t/getting-parsing-exception-reason-terms-unknown-token-end-array-trying-to-do-multiple-field-filter/82489)
**Author:** [@jerolomy](https://discuss.elastic.co/u/jerolomy)\ **Replies:** 1\ **Last updated:** [April 17, 2017, 3:42pm UTC](https://discuss.elastic.co/t/getting-parsing-exception-reason-terms-unknown-token-end-array-trying-to-do-multiple-field-filter/82489 "2017-04-17T15:42:49Z")
I would like to create a query which matches based on a phrase query but also filters based off of multiple fields. I am using PHP API syntax, but its pretty obvious how to translate the syntax. This is my query: $sear… --- ## [Problem binding elasticsearch to host interface](https://discuss.elastic.co/t/problem-binding-elasticsearch-to-host-interface/64507)
**Author:** [@MGG](https://discuss.elastic.co/u/MGG)\ **Replies:** 3\ **Last updated:** [November 1, 2016, 9:20pm UTC](https://discuss.elastic.co/t/problem-binding-elasticsearch-to-host-interface/64507 "2016-11-01T21:20:36Z")
Hi, I recently downloaded 5.0 and started to play with the configuration. I have few hosts on the network with logstash configured to forward messages to my elasticsearch, in the earlier version I configured it to list… --- ## [Kibana Canvas filter groups](https://discuss.elastic.co/t/kibana-canvas-filter-groups/195313)
**Author:** [@gbarnett](https://discuss.elastic.co/u/gbarnett)\ **Replies:** 7\ **Last updated:** [August 19, 2019, 3:50pm UTC](https://discuss.elastic.co/t/kibana-canvas-filter-groups/195313 "2019-08-19T15:50:31Z")
In Kibana Canvas 7.3, it states that the dropdown filter now supports filter groups. It is easy enough to create a new filter group for the dropdown filter. But, how is that filter group name now associated with specif… --- ## [Authentication with Kibana in HTML Iframe](https://discuss.elastic.co/t/authentication-with-kibana-in-html-iframe/186476)
**Author:** [@Nsaneone](https://discuss.elastic.co/u/Nsaneone)\ **Replies:** 2\ **Last updated:** [June 25, 2019, 8:59am UTC](https://discuss.elastic.co/t/authentication-with-kibana-in-html-iframe/186476 "2019-06-25T08:59:27Z")
Good Afternoon. Been trying to get Kibana Visualisation to load into an Iframe (using the link auto generated). This works however there is Kibana login prompt that occurs. I wanted to ask if there is anyway I could pass… --- ## [Vega Image + Link display in Kibana](https://discuss.elastic.co/t/vega-image-link-display-in-kibana/183877)
**Author:** [@AditiKhalatkar](https://discuss.elastic.co/u/AditiKhalatkar)\ **Replies:** 4\ **Last updated:** [June 3, 2019, 6:24pm UTC](https://discuss.elastic.co/t/vega-image-link-display-in-kibana/183877 "2019-06-03T18:24:50Z")
Hi, I am trying to get a visualization in Vega. I am able to get the result in Vega-editor, however not able to achieve the same in Kibana. Kindly guide. The only difference between the two is that when I try to click … --- ## [List indices with shards on a given node](https://discuss.elastic.co/t/list-indices-with-shards-on-a-given-node/215486)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 10:35am UTC](https://discuss.elastic.co/t/list-indices-with-shards-on-a-given-node/215486 "2020-01-20T10:35:50Z")
Elasticsearch 6. Is there a nice way to get a list of indices shards of which are on a given node? The only way I can find is to call \_cat/shards and grep the output for the node name. Node information in Kibana Monitor… --- ## [Compare a string and number in Scripted Field](https://discuss.elastic.co/t/compare-a-string-and-number-in-scripted-field/86807)
**Author:** [@magerRV](https://discuss.elastic.co/u/magerRV)\ **Replies:** 2\ **Last updated:** [May 31, 2017, 1:37pm UTC](https://discuss.elastic.co/t/compare-a-string-and-number-in-scripted-field/86807 "2017-05-31T13:37:19Z")
Hey all, I want to compare a string and an number (integer) inside a scripted field. I know I have to convert the field from string to integer. I just dont know the syntax for that and dont find any result. The charac… --- ## [Match Vs. Term](https://discuss.elastic.co/t/match-vs-term/73020)
**Author:** [@Emrah](https://discuss.elastic.co/u/Emrah)\ **Replies:** 2\ **Last updated:** [January 30, 2017, 6:34am UTC](https://discuss.elastic.co/t/match-vs-term/73020 "2017-01-30T06:34:22Z")
Hey there , I know that this type of question asked before in some other cases but i really need this to be sure if in my case, Match query or Term query is faster. I'm gonna ask the question with an example : T… --- ## [Enterprise Search 7.9.0 security update](https://discuss.elastic.co/t/enterprise-search-7-9-0-security-update/245457)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [August 18, 2020, 3:16pm UTC](https://discuss.elastic.co/t/enterprise-search-7-9-0-security-update/245457 "2020-08-18T15:16:01Z")
Enterprise Search credential exposure flaw (ESA-2020-11) Elastic Enterprise Search versions before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the ‘developer’ role, they will… --- ## [Elastic APM Agent with Docker](https://discuss.elastic.co/t/elastic-apm-agent-with-docker/217862)
**Author:** [@elasticapmuser](https://discuss.elastic.co/u/elasticapmuser)\ **Replies:** 5\ **Last updated:** [February 14, 2020, 8:33am UTC](https://discuss.elastic.co/t/elastic-apm-agent-with-docker/217862 "2020-02-14T08:33:59Z")
Kibana version: 7.3.2 Elasticsearch version: 7.3.2 APM Server version:7.3.2 APM Agent language and version: Java and 1.12.0 I am trying to integrate APM agent with a spring boot application and I could make it work u… --- ## [Difference between "index\_patterns" and "template"](https://discuss.elastic.co/t/difference-between-index-patterns-and-template/184877)
**Author:** [@Adello](https://discuss.elastic.co/u/Adello)\ **Replies:** 3\ **Last updated:** [June 11, 2019, 7:14am UTC](https://discuss.elastic.co/t/difference-between-index-patterns-and-template/184877 "2019-06-11T07:14:06Z")
Hi ((: What is the difference between those keywords when creating a mapping? For instance: curl -XPUT 'localhost:9200/\_template/template1?pretty' -H "Content-Type: application/json" -d '{ "index\_patterns": \["abc\*"\],… --- ## [Logstash not reading file in windows](https://discuss.elastic.co/t/logstash-not-reading-file-in-windows/41723)
**Author:** [@Smitha\_Bipin](https://discuss.elastic.co/u/Smitha_Bipin)\ **Replies:** 2\ **Last updated:** [February 14, 2016, 10:58pm UTC](https://discuss.elastic.co/t/logstash-not-reading-file-in-windows/41723 "2016-02-14T22:58:08Z")
Hi , I am a newbie to logstash and configured the logstash.conf as follows: input { file { path =\> "C:\\log4j\\log.out" start\_position =\> "beginning" } } filter { grok { match =\> { "message" =\> "%{COMBINEDA… --- ## [How to get the full metricbeat data from the elasticsearch](https://discuss.elastic.co/t/how-to-get-the-full-metricbeat-data-from-the-elasticsearch/95878)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 8\ **Last updated:** [August 7, 2017, 5:33am UTC](https://discuss.elastic.co/t/how-to-get-the-full-metricbeat-data-from-the-elasticsearch/95878 "2017-08-07T05:33:35Z")
i need to get the data for the metricbeat from the elasticsearch?? For example: System load,CpuUsage etc… i need evrydata that is stored in the elasticsearch. How can i fetch all data of metricbeat using curl command… --- ## [Date Issue - Invalid format … malformed](https://discuss.elastic.co/t/date-issue-invalid-format-malformed/48391)
**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\ **Replies:** 7\ **Last updated:** [April 27, 2016, 6:19am UTC](https://discuss.elastic.co/t/date-issue-invalid-format-malformed/48391 "2016-04-27T06:19:41Z")
Hi everyone, I've created a template index, looks something like that: { "template" : "te\*", "mappings" : { "msg" : { "date : { "type" : "date, "format" : "date\_optional\_time"} … --- ## [Elasticsearch 起動後のcurlを使った正常性確認でエラー](https://discuss.elastic.co/t/elasticsearch-curl/178141)
**Author:** [@iasenust](https://discuss.elastic.co/u/iasenust)\ **Replies:** 4\ **Last updated:** [April 25, 2019, 2:19am UTC](https://discuss.elastic.co/t/elasticsearch-curl/178141 "2019-04-25T02:19:08Z")
基本的がわかっておらず恐縮ですがご教授ください。 linux(Ubuntu)でbin/elasticsearchでelasticsearchを起動した後、 別のシェルからcurl http://localhost:9200と打つと ERROR ページを表示できません サーバーに接続できません。 サーバーが存在しないか、接続拒否… --- ## [Exiting: resource 'metricbeat-7.4.0' exists, but it is not an alias](https://discuss.elastic.co/t/exiting-resource-metricbeat-7-4-0-exists-but-it-is-not-an-alias/204425)
**Author:** [@LiuGangR](https://discuss.elastic.co/u/LiuGangR)\ **Replies:** 6\ **Last updated:** [October 28, 2019, 6:17am UTC](https://discuss.elastic.co/t/exiting-resource-metricbeat-7-4-0-exists-but-it-is-not-an-alias/204425 "2019-10-28T06:17:53Z")
I update my metricbeat from 7.1.0. It is ok. But today it didn't work. When I input this -'sudo metricbeat setup -e'; 2019-10-21T17:30:15.706+0800 INFO template/load.go:169 Existing template will be overwritten, as ov… --- ## [How Can I Perform a Distinct Query?](https://discuss.elastic.co/t/how-can-i-perform-a-distinct-query/12539)
**Author:** [@Randall\_Degges](https://discuss.elastic.co/u/Randall_Degges)\ **Replies:** 3\ **Last updated:** [June 27, 2013, 5:58am UTC](https://discuss.elastic.co/t/how-can-i-perform-a-distinct-query/12539 "2013-06-27T05:58:46Z")
Hi Guys, I'm a new ElasticSearch user, and need some help selecting only documents with a distinct field. I've got an index of documents which look something like the following: { "last\_name": "Degges", "… --- ## [Elasticsearch index mapping in java](https://discuss.elastic.co/t/elasticsearch-index-mapping-in-java/15591)
**Author:** [@Doru\_Sular](https://discuss.elastic.co/u/Doru_Sular)\ **Replies:** 6\ **Last updated:** [March 13, 2014, 8:50pm UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping-in-java/15591 "2014-03-13T20:50:31Z")
Hi guys, I am trying to create an index with the following code: XContentBuilder source = XContentFactory.jsonBuilder().startObject()// .startObject("settings") .field("number\_of… --- ## [Dec 6th, 2018: \[JP\]\[Elasticsearch\] 検索順位を自在に操る](https://discuss.elastic.co/t/dec-6th-2018-jp-elasticsearch/159442)
**Author:** [@Kosho\_Owa](https://discuss.elastic.co/u/Kosho_Owa)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 12:00am UTC](https://discuss.elastic.co/t/dec-6th-2018-jp-elasticsearch/159442 "2018-12-06T00:00:03Z")
検索順位を自在に操る 検索順位を決める要素 Elasticsearchは、スケーラブルで高速なリアルタイムの検索・分析エンジンです。文字列、数値、日時、地理情報など、指定された条件にしたがってインデックスされたドキュメントを検索し、一致するものを利用者に返します。数値、日時、地理情報であれば、「価格が1000円」以上、「今週入荷した商品」、「東京都庁から100km以内」などといった条件をもとに検索ができ、条件に一致するドキュメントのスコ… --- ## [Problem to update to filebeat 7.7.0 and parser nginx-ingress-controller on Kubernetes](https://discuss.elastic.co/t/problem-to-update-to-filebeat-7-7-0-and-parser-nginx-ingress-controller-on-kubernetes/232461)
**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\ **Replies:** 5\ **Last updated:** [July 14, 2020, 8:33am UTC](https://discuss.elastic.co/t/problem-to-update-to-filebeat-7-7-0-and-parser-nginx-ingress-controller-on-kubernetes/232461 "2020-07-14T08:33:42Z")
Hi! I was using Kubernetes with this version of Filebeat: docker.elastic.co/beats/filebeat:7.3.2 In order to use the new functionalities to parser nginx-ingress-controller I've update to docker.elastic.co/beats/filebea… --- ## [I made a plugin for Chrome & Firefox to format json on Kibana](https://discuss.elastic.co/t/i-made-a-plugin-for-chrome-firefox-to-format-json-on-kibana/168710)
**Author:** [@twskj](https://discuss.elastic.co/u/twskj)\ **Replies:** 1\ **Last updated:** [February 17, 2019, 11:14am UTC](https://discuss.elastic.co/t/i-made-a-plugin-for-chrome-firefox-to-format-json-on-kibana/168710 "2019-02-17T11:14:20Z")
Hello everyone. I often find myself need to format json dump to troubleshoot application bugs in Kibana. My process was like copy the payload to my IDE and format it. I feel like it could be a lot easier if I can format … --- ## [Unable to avoid JSON parsing errors in logstash log-file](https://discuss.elastic.co/t/unable-to-avoid-json-parsing-errors-in-logstash-log-file/84673)
**Author:** [@Marco\_Spadoni](https://discuss.elastic.co/u/Marco_Spadoni)\ **Replies:** 1\ **Last updated:** [May 12, 2017, 9:49am UTC](https://discuss.elastic.co/t/unable-to-avoid-json-parsing-errors-in-logstash-log-file/84673 "2017-05-12T09:49:44Z")
Hi all. I am working with logstash and elasticsearch 5.2.2 version. I had the following pipeline: input { gelf { codec =\> "json" port =\> 12201 } } filter { mutate { gsub =\> \["time… --- ## [Combine Phrases search AND fuzzy matching](https://discuss.elastic.co/t/combine-phrases-search-and-fuzzy-matching/76535)
**Author:** [@parisni](https://discuss.elastic.co/u/parisni)\ **Replies:** 1\ **Last updated:** [February 26, 2017, 7:03pm UTC](https://discuss.elastic.co/t/combine-phrases-search-and-fuzzy-matching/76535 "2017-02-26T19:03:17Z")
Hi, I wonder if there is a way to combine fuzzy match and Phrase search within text. EG of searching pattern: "combime phrases and fuzsy matsh" Would match "combine phrases and fuzzy match" Thanks for your answer … --- ## [Wildcard for Nested object](https://discuss.elastic.co/t/wildcard-for-nested-object/103568)
**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\ **Replies:** 5\ **Last updated:** [October 11, 2017, 5:30pm UTC](https://discuss.elastic.co/t/wildcard-for-nested-object/103568 "2017-10-11T17:30:34Z")
Hello. I have the following mapping (Elasticsearch 5.4.0): { "relatedData": { "properties": { "subject": { "type": "nested", … --- ## [\[Solved\] Improving Snapshot Recovery Speed](https://discuss.elastic.co/t/solved-improving-snapshot-recovery-speed/29547)
**Author:** [@Nathan\_F](https://discuss.elastic.co/u/Nathan_F)\ **Replies:** 4\ **Last updated:** [October 7, 2015, 7:52am UTC](https://discuss.elastic.co/t/solved-improving-snapshot-recovery-speed/29547 "2015-10-07T07:52:32Z")
Hi all, I have a cluster that I am working with on AWS that is 18TB is size and growing daily. Right now I create daily indices which are backed up to s3. I am looking at consolidating the data from several servers i… --- ## [Docker Logstash Error: Cannot assign requested address](https://discuss.elastic.co/t/docker-logstash-error-cannot-assign-requested-address/306711)
**Author:** [@Francesco66](https://discuss.elastic.co/u/Francesco66)\ **Replies:** 2\ **Last updated:** [June 9, 2022, 5:42am UTC](https://discuss.elastic.co/t/docker-logstash-error-cannot-assign-requested-address/306711 "2022-06-09T05:42:23Z")
Hello , I am running a Logstash as Docker container using the following command: .......... docker run --rm -d --name logstash-Casex -p 8080:8080 -p 8081:8081 -v /Logstash\_custom\_configs/config/pipelines.yml:/usr/share/l… --- ## [How load template with logstash using elasticsearch output plugin](https://discuss.elastic.co/t/how-load-template-with-logstash-using-elasticsearch-output-plugin/106325)
**Author:** [@citanionarrei](https://discuss.elastic.co/u/citanionarrei)\ **Replies:** 2\ **Last updated:** [November 6, 2017, 7:49am UTC](https://discuss.elastic.co/t/how-load-template-with-logstash-using-elasticsearch-output-plugin/106325 "2017-11-06T07:49:11Z")
hi friends i want to load my template on the output of logstash to map correctly my json i'm trying this but template is not loaded output { elasticsearch { index =\> "ciao-%{+YYYY.MM.dd}" document\_type =\> "ciao\_… --- ## [Filebeat delay to harvest after restart](https://discuss.elastic.co/t/filebeat-delay-to-harvest-after-restart/236889)
**Author:** [@b0nete](https://discuss.elastic.co/u/b0nete)\ **Replies:** 8\ **Last updated:** [June 18, 2020, 5:42pm UTC](https://discuss.elastic.co/t/filebeat-delay-to-harvest-after-restart/236889 "2020-06-18T17:42:25Z")
Hi, i go to tell about my problem. I have one server with filebeat installed, an this use logstash.output to send logs to graylog. This work, but my problem is that i have a 15/20min delay after apply config changes and… --- ## [Filter by only month of date field in \_search](https://discuss.elastic.co/t/filter-by-only-month-of-date-field-in-search/129902)
**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\ **Replies:** 0\ **Last updated:** [April 28, 2018, 4:52am UTC](https://discuss.elastic.co/t/filter-by-only-month-of-date-field-in-search/129902 "2018-04-28T04:52:38Z")
Hi, I have a case where in I need to find all documents in my index that fall between given set of months irrespective of the year \_search { "query": { "bool": { "filter" : { "range" : { … [Previous page](https://discuss.elastic.co/top.md?page=418&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=420&per_page=50&period=all)