# Top **URL:** https://discuss.elastic.co/top.md?page=420&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 421 --- ## [Are there size limits for indexing and bulk indexing?](https://discuss.elastic.co/t/are-there-size-limits-for-indexing-and-bulk-indexing/156278)
**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\ **Replies:** 3\ **Last updated:** [November 13, 2018, 6:04am UTC](https://discuss.elastic.co/t/are-there-size-limits-for-indexing-and-bulk-indexing/156278 "2018-11-13T06:04:50Z")
Hello, is there a hard limit or recommended size ceiling when it comes to bulk indexing? For indexing one document at a time, is there also a limit to how large file each document can be? --- ## [X-pack logstash authentication issues (response code 401)](https://discuss.elastic.co/t/x-pack-logstash-authentication-issues-response-code-401/135987)
**Author:** [@snewman](https://discuss.elastic.co/u/snewman)\ **Replies:** 4\ **Last updated:** [June 15, 2018, 2:25pm UTC](https://discuss.elastic.co/t/x-pack-logstash-authentication-issues-response-code-401/135987 "2018-06-15T14:25:18Z")
I've read a number of forum posts on this subject, but none seem to hold the answer for me. I have x-pack installed on elasticsearch and kibana, and I have them both running. I can start logstash and see it appear in the… --- ## [Unable to install beats plugin for logstash](https://discuss.elastic.co/t/unable-to-install-beats-plugin-for-logstash/50021)
**Author:** [@Srinivasan](https://discuss.elastic.co/u/Srinivasan)\ **Replies:** 5\ **Last updated:** [March 15, 2017, 1:03pm UTC](https://discuss.elastic.co/t/unable-to-install-beats-plugin-for-logstash/50021 "2017-03-15T13:03:24Z")
Hi, I am trying to install ELK module on a test environment. Windows Server 2008 R2 -x64 box I have successfully installed Elasticsearch, kibana and Logstash along with filebeat and winlogbeat as well.. Everything … --- ## [When to use Coordinating vs Data Node](https://discuss.elastic.co/t/when-to-use-coordinating-vs-data-node/134125)
**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\ **Replies:** 5\ **Last updated:** [June 13, 2018, 1:43am UTC](https://discuss.elastic.co/t/when-to-use-coordinating-vs-data-node/134125 "2018-06-13T01:43:24Z")
As a matter of best practice, if I have an ideal configuration: Should queries be directed to coordinating nodes or data nodes? Should index writes/deletes/updates be directed to coordinating nodes or data nodes? Than… --- ## [Scripted field for Matching Substring](https://discuss.elastic.co/t/scripted-field-for-matching-substring/147013)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 2\ **Last updated:** [September 4, 2018, 12:13pm UTC](https://discuss.elastic.co/t/scripted-field-for-matching-substring/147013 "2018-09-04T12:13:40Z")
Hi, My setup: Kibana 5.6.2 ES 5.6.2 Need some help to extract the SIM number from the path field in a document The field value: C:/HWM/Apps/CAR/Export/971XXXXXX231\_20180903.CSV I need to fetch only the value 971XX… --- ## [Understanding continous transforms syncing](https://discuss.elastic.co/t/understanding-continous-transforms-syncing/252827)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 4\ **Last updated:** [October 22, 2020, 2:17pm UTC](https://discuss.elastic.co/t/understanding-continous-transforms-syncing/252827 "2020-10-22T14:17:45Z")
Hi all, recently I played a bit with the Transforms feature on Elasticsearch. I started by creating this test continuous transform { "description": "Create summary transaction entities", "frequency": "1m", "source"… --- ## [Red Index](https://discuss.elastic.co/t/red-index/172986)
**Author:** [@Flamecube667](https://discuss.elastic.co/u/Flamecube667)\ **Replies:** 2\ **Last updated:** [March 20, 2019, 12:48pm UTC](https://discuss.elastic.co/t/red-index/172986 "2019-03-20T12:48:08Z")
Hello, i use Elasticsearch version 6.3.2. I do not understand why some indexes are red and i don't know how to fix it. I tried to re-assign thoose index or set replica to a specific value as i saw in multiple discussio… --- ## [Logstash jdbc input checkpoint](https://discuss.elastic.co/t/logstash-jdbc-input-checkpoint/168837)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 7\ **Last updated:** [February 26, 2019, 10:06am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-checkpoint/168837 "2019-02-26T10:06:51Z")
hi all, I am using logstash to select data from a database and index them. my logstash configuration is as following: input { jdbc { jdbc\_driver\_library =\> "/home/srahimi/ojdbc6.jar" jdbc\_driver\_class =\> "Java::orac… --- ## [Query shard exeption - all shards failed](https://discuss.elastic.co/t/query-shard-exeption-all-shards-failed/138494)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 7\ **Last updated:** [July 7, 2018, 3:55pm UTC](https://discuss.elastic.co/t/query-shard-exeption-all-shards-failed/138494 "2018-07-07T15:55:59Z")
Hi, I'm encountering a problem while indexing some data. At the end of the post you can find the error message I can see from Logstash logs. It seems that Logstash (which is using a Elasticsearch filter plugin to enrich… --- ## [Elasticsearch get rid of yellow status](https://discuss.elastic.co/t/elasticsearch-get-rid-of-yellow-status/261141)
**Author:** [@first100](https://discuss.elastic.co/u/first100)\ **Replies:** 6\ **Last updated:** [February 4, 2021, 2:20am UTC](https://discuss.elastic.co/t/elasticsearch-get-rid-of-yellow-status/261141 "2021-02-04T02:20:00Z")
Hi I have Elasticsearch that I installed as a single node at the beginning and then the indices were created this configuration, after I added two other nodes and restarted elastic, and I always have the health status y… --- ## [How to set source from input stream during creation of new indexes](https://discuss.elastic.co/t/how-to-set-source-from-input-stream-during-creation-of-new-indexes/29520)
**Author:** [@pmukherji](https://discuss.elastic.co/u/pmukherji)\ **Replies:** 6\ **Last updated:** [September 18, 2015, 8:20pm UTC](https://discuss.elastic.co/t/how-to-set-source-from-input-stream-during-creation-of-new-indexes/29520 "2015-09-18T20:20:40Z")
While creating new index is there any way to set the source from an input stream instead of currently supported types like string/byte array/ByteReference and so on. I tried building IndexRequest as follows but ended up … --- ## [I need help! Elasticsearch does not match my regexp, wildcard, or query\_string queries](https://discuss.elastic.co/t/i-need-help-elasticsearch-does-not-match-my-regexp-wildcard-or-query-string-queries/239473)
**Author:** [@Simon\_Moller](https://discuss.elastic.co/u/Simon_Moller)\ **Replies:** 4\ **Last updated:** [July 1, 2020, 2:29pm UTC](https://discuss.elastic.co/t/i-need-help-elasticsearch-does-not-match-my-regexp-wildcard-or-query-string-queries/239473 "2020-07-01T14:29:57Z")
I use elasticsearch version: "7.8.0, Build: default/deb/757314695644ea9a1dc2fecd26d1a43856725e65/2020-06-14T19:35:50.234439Z, JVM: 14.0.1" and I have the following document according to the packetbeat index (I have cut i… --- ## [How to aggregate data by an field?](https://discuss.elastic.co/t/how-to-aggregate-data-by-an-field/64296)
**Author:** [@djvidov](https://discuss.elastic.co/u/djvidov)\ **Replies:** 4\ **Last updated:** [October 28, 2016, 3:20pm UTC](https://discuss.elastic.co/t/how-to-aggregate-data-by-an-field/64296 "2016-10-28T15:20:05Z")
Hello, I'm using kibana 4.4.1 and in elasticsearch I store the status of PC, only when PC status is changed (open, closed, warings, etc) My data into Elasticsearch looks like: { "status\_id":1 , "pc":"lpt001" , "date":… --- ## [Transport.publish\_address was printed as \[ip:port\] instead of \[hostname/ip:port\]](https://discuss.elastic.co/t/transport-publish-address-was-printed-as-ip-port-instead-of-hostname-ip-port/202519)
**Author:** [@dsosunov](https://discuss.elastic.co/u/dsosunov)\ **Replies:** 5\ **Last updated:** [October 7, 2019, 12:04pm UTC](https://discuss.elastic.co/t/transport-publish-address-was-printed-as-ip-port-instead-of-hostname-ip-port/202519 "2019-10-07T12:04:46Z")
We recently deploy a new cluster v7.4 and receiving very strange deprecation warnings. \[2019-10-07T07:08:33,504\]\[WARN \]\[o.e.d.t.TransportInfo \] \[node-01.example.com\] transport.publish\_address was printed as \[ip:port\]… --- ## [Filebeat exclude and include lines](https://discuss.elastic.co/t/filebeat-exclude-and-include-lines/181458)
**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\ **Replies:** 5\ **Last updated:** [May 17, 2019, 3:00pm UTC](https://discuss.elastic.co/t/filebeat-exclude-and-include-lines/181458 "2019-05-17T15:00:44Z")
Hello Experts, Before sending my logs to logstash I would like remove some lines which is not needed, and I also know which exact lines I need to send to my logstash to further process my logs using groks. Which option… --- ## [Specify Mappings while creating index using python client](https://discuss.elastic.co/t/specify-mappings-while-creating-index-using-python-client/292433)
**Author:** [@sunny3794.ad](https://discuss.elastic.co/u/sunny3794.ad)\ **Replies:** 3\ **Last updated:** [January 11, 2022, 10:18am UTC](https://discuss.elastic.co/t/specify-mappings-while-creating-index-using-python-client/292433 "2022-01-11T10:18:09Z")
As far as I know, Elasticsearch by default takes in data and stores it as string (except for date). So, I have been using the body parameter in the create function of the Elasticsearch python client to specify the field … --- ## [Logstash stop working due to FFI not available: null](https://discuss.elastic.co/t/logstash-stop-working-due-to-ffi-not-available-null/343174)
**Author:** [@lalchand\_rajak](https://discuss.elastic.co/u/lalchand_rajak)\ **Replies:** 2\ **Last updated:** [September 18, 2023, 5:37am UTC](https://discuss.elastic.co/t/logstash-stop-working-due-to-ffi-not-available-null/343174 "2023-09-18T05:37:38Z")
Logstash stopped working due to FFI not available: null . I have already provided the tmp path in Jvm.options # set the I/O temp directory #-Djava.io.tmpdir=$HOME -Djava.io.tmpdir=/home/apmuser/tmp drwxrwxr-x. 2 logsta… --- ## [Metricbeat not working when elasticsearch is upgraded from 7.4.0 to 7.5.0](https://discuss.elastic.co/t/metricbeat-not-working-when-elasticsearch-is-upgraded-from-7-4-0-to-7-5-0/210443)
**Author:** [@sharmila.dev](https://discuss.elastic.co/u/sharmila.dev)\ **Replies:** 7\ **Last updated:** [December 11, 2019, 4:16pm UTC](https://discuss.elastic.co/t/metricbeat-not-working-when-elasticsearch-is-upgraded-from-7-4-0-to-7-5-0/210443 "2019-12-11T16:16:58Z")
Hi, Im unable to set up monitoring for elastic search using metricbeat. It was working with version 7.4.0 but broke when upgraded to 7.5.0. I was sending metrics using metricbeat to separate monitoring cluster. Metricbe… --- ## [Kibana Monitoring Elasticsearch nodes doesn't show CPU usage](https://discuss.elastic.co/t/kibana-monitoring-elasticsearch-nodes-doesnt-show-cpu-usage/86505)
**Author:** [@jaquisar1](https://discuss.elastic.co/u/jaquisar1)\ **Replies:** 2\ **Last updated:** [May 23, 2017, 9:38pm UTC](https://discuss.elastic.co/t/kibana-monitoring-elasticsearch-nodes-doesnt-show-cpu-usage/86505 "2017-05-23T21:38:57Z")
I'm having an issue with CPU stats shown for Elasticsearch nodes in Kibana Monitoring. The problem is that CPU Usage is always 0. Kibana and Elasticsearch both run as docker containers and version 5.3.2. Checking th… --- ## [Logstash snort implementation](https://discuss.elastic.co/t/logstash-snort-implementation/32386)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 8:00pm UTC](https://discuss.elastic.co/t/logstash-snort-implementation/32386 "2017-02-14T20:00:29Z")
have anyone made or heard of a snort plugin for logstash i found this and will try it out sometime next week but if anyone have succeded in getting snort alerts parsed and into ELK I would really like to hear about how… --- ## [ES gradle check error](https://discuss.elastic.co/t/es-gradle-check-error/141051)
**Author:** [@aaronoah](https://discuss.elastic.co/u/aaronoah)\ **Replies:** 8\ **Last updated:** [July 31, 2018, 12:00am UTC](https://discuss.elastic.co/t/es-gradle-check-error/141051 "2018-07-31T00:00:52Z")
Hi community members, I'm trying to contribute to ES but when I run ./gradlew check to validate tests before writing any codes, I have the following error: To honour the JVM settings for this build a new JVM will be fo… --- ## [Sanitize querystring query](https://discuss.elastic.co/t/sanitize-querystring-query/78144)
**Author:** [@Garito](https://discuss.elastic.co/u/Garito)\ **Replies:** 8\ **Last updated:** [March 11, 2017, 11:32am UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144 "2017-03-11T11:32:15Z")
Hi! Could you, please, help me on sanitizing the query? I prefer python Thanks! --- ## [Timestamp processor - parsing milliseconds with comma](https://discuss.elastic.co/t/timestamp-processor-parsing-milliseconds-with-comma/225068)
**Author:** [@dcamozzato](https://discuss.elastic.co/u/dcamozzato)\ **Replies:** 2\ **Last updated:** [March 27, 2020, 2:24pm UTC](https://discuss.elastic.co/t/timestamp-processor-parsing-milliseconds-with-comma/225068 "2020-03-27T14:24:13Z")
Hi, I am trying to use Filebeat 7.5.1 to parse a timestamp with the following format: '2020-01-17 06:37:17,849' My layout is this: '2006-01-02 15:04:05,999' Unfortunately, the above does not work. According to Golang… --- ## [How to handle error and retry/recovery](https://discuss.elastic.co/t/how-to-handle-error-and-retry-recovery/3655)
**Author:** [@Alois\_Cochard](https://discuss.elastic.co/u/Alois_Cochard)\ **Replies:** 5\ **Last updated:** [January 12, 2011, 2:10pm UTC](https://discuss.elastic.co/t/how-to-handle-error-and-retry-recovery/3655 "2011-01-12T14:10:34Z")
Greetings, I have some questions about error handling in ElasticSearch and didn't found the answers in the online documentation. When I index a document, how can I be sure that the document was indexed ? If a … --- ## [Can I use json input for metrics in a table?](https://discuss.elastic.co/t/can-i-use-json-input-for-metrics-in-a-table/199595)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 3\ **Last updated:** [September 17, 2019, 2:15pm UTC](https://discuss.elastic.co/t/can-i-use-json-input-for-metrics-in-a-table/199595 "2019-09-17T14:15:18Z")
Can I use json input for metrics in a table? I want to indicate whether or not to check, depending on the value of the state field. For example, if the state value is 1, I want ok, and if the state value is 0, I wan… --- ## [ElasticSearch “Can't get text on a VALUE\_NULL at 1:60”](https://discuss.elastic.co/t/elasticsearch-cant-get-text-on-a-value-null-at-1-60/48021)
**Author:** [@srdealx](https://discuss.elastic.co/u/srdealx)\ **Replies:** 8\ **Last updated:** [April 21, 2016, 4:10pm UTC](https://discuss.elastic.co/t/elasticsearch-cant-get-text-on-a-value-null-at-1-60/48021 "2016-04-21T16:10:25Z")
When running queries on one of my indexes I get an error on Elastic. { "error" : { "root\_cause" : \[ { "type" : "illegal\_state\_exception", "reason" : "Can't get text on a VALUE\_NULL at 1:60" } \], … --- ## [Cannot register snapshot repository in Elasticsearch](https://discuss.elastic.co/t/cannot-register-snapshot-repository-in-elasticsearch/17560)
**Author:** [@Fred\_Ducrot](https://discuss.elastic.co/u/Fred_Ducrot)\ **Replies:** 4\ **Last updated:** [November 25, 2014, 7:23am UTC](https://discuss.elastic.co/t/cannot-register-snapshot-repository-in-elasticsearch/17560 "2014-11-25T07:23:04Z")
Hello ES community, I am trying to create a snapshot for ES and I am following the steps at: http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-snapshots.html . Unfortunately the repos… --- ## [Query string doesn't work correctly](https://discuss.elastic.co/t/query-string-doesnt-work-correctly/78690)
**Author:** [@Grigorios\_Loukidis](https://discuss.elastic.co/u/Grigorios_Loukidis)\ **Replies:** 6\ **Last updated:** [March 17, 2017, 9:59am UTC](https://discuss.elastic.co/t/query-string-doesnt-work-correctly/78690 "2017-03-17T09:59:40Z")
Hello! I am new to elastic. I am trying to search with the following code, but when I want to get back the word "house", if I type "hou" I can find it , but if I type "ouse" it doesn't work.Also, the analyzer doesn't wor… --- ## [Unable to parse my Fortigate Logs](https://discuss.elastic.co/t/unable-to-parse-my-fortigate-logs/138882)
**Author:** [@Kaviarasan](https://discuss.elastic.co/u/Kaviarasan)\ **Replies:** 7\ **Last updated:** [July 23, 2018, 3:27pm UTC](https://discuss.elastic.co/t/unable-to-parse-my-fortigate-logs/138882 "2018-07-23T15:27:56Z")
Hi Team, I am new to ELK. I have been trying to parse my Fortigate firewall logs with my my RegEx. I have Fortigate logs saved in my machine I have created a patterns directory in which I have my whole regex stuff I h… --- ## [How to parse a dynamic CSV file regularly](https://discuss.elastic.co/t/how-to-parse-a-dynamic-csv-file-regularly/2408)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 7\ **Last updated:** [June 11, 2015, 9:11am UTC](https://discuss.elastic.co/t/how-to-parse-a-dynamic-csv-file-regularly/2408 "2015-06-11T09:11:50Z")
Hi Experts, I am parsing a csv file which keeps on updated .I mean it is not static new data is added to CSV after every 30 min or so . My question is how I can handle this situation. I cannot afford to create a new in… --- ## [Help with grok filter \[ipv4\]](https://discuss.elastic.co/t/help-with-grok-filter-ipv4/210426)
**Author:** [@raged](https://discuss.elastic.co/u/raged)\ **Replies:** 2\ **Last updated:** [December 4, 2019, 8:48pm UTC](https://discuss.elastic.co/t/help-with-grok-filter-ipv4/210426 "2019-12-04T20:48:28Z")
Afternoon all, We are utilizing metricbeat to send host info by using the metadata that is described in this article. It eventually gives me a field that is populated with IPs from all of the network adapters: "host":… --- ## [Show latest values for every unique value](https://discuss.elastic.co/t/show-latest-values-for-every-unique-value/140747)
**Author:** [@d\_s](https://discuss.elastic.co/u/d_s)\ **Replies:** 4\ **Last updated:** [July 19, 2018, 10:01pm UTC](https://discuss.elastic.co/t/show-latest-values-for-every-unique-value/140747 "2018-07-19T22:01:43Z")
Hello! I have information for a set of machines and I am trying to display only the latest values for various fields for each unique serial number. So for ex if I have: serial# 1, temp: 100, color: red, date: 7/1/2018 … --- ## [Getting a "No data nodes with HTTP-enabled available" error when writing from Spark to elasticsearch on Google Dataproc](https://discuss.elastic.co/t/getting-a-no-data-nodes-with-http-enabled-available-error-when-writing-from-spark-to-elasticsearch-on-google-dataproc/96631)
**Author:** [@bw2](https://discuss.elastic.co/u/bw2)\ **Replies:** 6\ **Last updated:** [September 8, 2017, 12:30pm UTC](https://discuss.elastic.co/t/getting-a-no-data-nodes-with-http-enabled-available-error-when-writing-from-spark-to-elasticsearch-on-google-dataproc/96631 "2017-09-08T12:30:13Z")
I’m trying to export data from Spark =\> elasticsearch cluster running on Google Container Engine (GKE). I’ve deployed an ES cluster using configs from https://github.com/pires/kubernetes-elasticsearch-cluster/tree/mast… --- ## [Number Format Exception?](https://discuss.elastic.co/t/number-format-exception/3334)
**Author:** [@bailey](https://discuss.elastic.co/u/bailey)\ **Replies:** 6\ **Last updated:** [September 20, 2010, 6:23pm UTC](https://discuss.elastic.co/t/number-format-exception/3334 "2010-09-20T18:23:45Z")
Hi All- I have a couple basic queries that use a field to sort desc or asc. The query based on views and works great: {"query":{"match\_all":{}},"sort":\[{"views":"desc"}\],"size":1} The query based on likes is th… --- ## [Can we integrate Watcher with Kibana](https://discuss.elastic.co/t/can-we-integrate-watcher-with-kibana/26839)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 4\ **Last updated:** [August 6, 2015, 6:27am UTC](https://discuss.elastic.co/t/can-we-integrate-watcher-with-kibana/26839 "2015-08-06T06:27:39Z")
Hi Experts, I have couple of queries and if you can provide some references that would be great --\> Is it possible to integrate Watcher with Kibana. --\> Can I see alerts in kibana ? --\> Is it possible to send alerts… --- ## [Replace ES master node](https://discuss.elastic.co/t/replace-es-master-node/222987)
**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\ **Replies:** 7\ **Last updated:** [March 21, 2020, 1:11pm UTC](https://discuss.elastic.co/t/replace-es-master-node/222987 "2020-03-21T13:11:49Z")
Hi, we use a 3-node master-eligible ES6 cluster, and we need to replace one of the nodes. I'm trying to follow the official doc here: https://www.elastic.co/guide/en/elasticsearch/reference/master/modules-discovery-addin… --- ## [How to share a Kibana dashboard using permanent link](https://discuss.elastic.co/t/how-to-share-a-kibana-dashboard-using-permanent-link/183948)
**Author:** [@Diego\_Benito](https://discuss.elastic.co/u/Diego_Benito)\ **Replies:** 7\ **Last updated:** [June 5, 2019, 3:03pm UTC](https://discuss.elastic.co/t/how-to-share-a-kibana-dashboard-using-permanent-link/183948 "2019-06-05T15:03:51Z")
Hi, i am trying to share a kibana dashboard, I need to know how to share a dashboard in kibana to see it from other machines, whether or not in the network of the machine where kibana is installed --- ## [java.lang.OutOfMemoryError: Java heap space - Bulk Indexing](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-bulk-indexing/87757)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 7\ **Last updated:** [June 1, 2017, 7:32am UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-bulk-indexing/87757 "2017-06-01T07:32:21Z")
Single Node ES Cluster ES version 2.3.2 ES\_HEAP\_SIZE=6G From our application using multi curl api we are sending parallel bulk request to ES. Size of each bulk request is 10-15MB. Parallel requests send to ES are 100 … --- ## [Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/hadoop/hive/ql/metadata/DefaultStorageHandler](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-noclassdeffounderror-org-apache-hadoop-hive-ql-metadata-defaultstoragehandler/40346)
**Author:** [@vyas](https://discuss.elastic.co/u/vyas)\ **Replies:** 6\ **Last updated:** [September 2, 2016, 8:22am UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-noclassdeffounderror-org-apache-hadoop-hive-ql-metadata-defaultstoragehandler/40346 "2016-09-02T08:22:13Z")
Hi All, Trying to integrate the elasticsearch-2.1.1 with Cloudera (Hadoop 2.6.0-cdh5.5.1) using the elasticsearch-hadoop-2.1.1. Basically it’s for elasticsearch to hadoop integration While starting the elasticsearch am g… --- ## [What is best indexing strategy for multitenant data?](https://discuss.elastic.co/t/what-is-best-indexing-strategy-for-multitenant-data/4353)
**Author:** [@Ellery\_Crane\_2](https://discuss.elastic.co/u/Ellery_Crane_2)\ **Replies:** 6\ **Last updated:** [May 6, 2011, 4:43pm UTC](https://discuss.elastic.co/t/what-is-best-indexing-strategy-for-multitenant-data/4353 "2011-05-06T16:43:02Z")
I'm attempting to integrate elasticsearch into a multitenant web application. I have data segmented into tens of thousands of 'tenants', and then further subdivided by user within a tenant. I'd like to make it so that… --- ## [Query for sum of two nested object fields of a document](https://discuss.elastic.co/t/query-for-sum-of-two-nested-object-fields-of-a-document/127750)
**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\ **Replies:** 7\ **Last updated:** [April 14, 2018, 6:33am UTC](https://discuss.elastic.co/t/query-for-sum-of-two-nested-object-fields-of-a-document/127750 "2018-04-14T06:33:27Z")
Hi All, Could any one help me for a ES query for sum of two nested object fields of a document, for example, "\_source": { "Identification": { "PAYL\_HDR": { "DUNS\_NBR": "212003857", "GEO\_REF\_ID": "1067", "GSRL\_DT"… --- ## [Query can return negative score? I couldn't find any spec on documentation. The minimum value of score is not 0?](https://discuss.elastic.co/t/query-can-return-negative-score-i-couldnt-find-any-spec-on-documentation-the-minimum-value-of-score-is-not-0/191307)
**Author:** [@hangu\_choi](https://discuss.elastic.co/u/hangu_choi)\ **Replies:** 8\ **Last updated:** [July 23, 2019, 12:12am UTC](https://discuss.elastic.co/t/query-can-return-negative-score-i-couldnt-find-any-spec-on-documentation-the-minimum-value-of-score-is-not-0/191307 "2019-07-23T00:12:50Z")
I got some negative score for document -1.0910728 I didn't expect this, query can return negative score? Should I use min\_score? or is this just a bug? Update: min\_score seems not helped, because I want use function… --- ## [No endpoint or operation is available at \[\_bulk\]](https://discuss.elastic.co/t/no-endpoint-or-operation-is-available-at--bulk/76319)
**Author:** [@hellothisisedward](https://discuss.elastic.co/u/hellothisisedward)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 10:07pm UTC](https://discuss.elastic.co/t/no-endpoint-or-operation-is-available-at--bulk/76319 "2017-02-23T22:07:54Z")
Hi Community, I've recently installed elasticsearch/ kibana 5.2.1 on a linux vm and was able to stream data from my application. I've then shutdown my vm and restarted it the following day. Now I can no longer stream… --- ## [Processors drop\_event not correct (AND/OR)](https://discuss.elastic.co/t/processors-drop-event-not-correct-and-or/84580)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 4\ **Last updated:** [May 4, 2017, 5:09pm UTC](https://discuss.elastic.co/t/processors-drop-event-not-correct-and-or/84580 "2017-05-04T17:09:16Z")
Hi, I was trying to use this configuration but it's not dropping events: processors: - drop\_event: when: and: - not: equals: dest.ip: "1.2.3.4.5" - not: … --- ## [Watcher chain input example, use case](https://discuss.elastic.co/t/watcher-chain-input-example-use-case/37688)
**Author:** [@mcku](https://discuss.elastic.co/u/mcku)\ **Replies:** 3\ **Last updated:** [December 21, 2015, 4:22pm UTC](https://discuss.elastic.co/t/watcher-chain-input-example-use-case/37688 "2015-12-21T16:22:43Z")
Hi All, I am interested in evaluating watches from multiple inputs, as described in chain input approach on \[watcher input ref\]. (https://www.elastic.co/guide/en/watcher/current/input.html#input-chain). I am wonderi… --- ## [Error No matching indices found: No indices match pattern "filebeat-\*"](https://discuss.elastic.co/t/error-no-matching-indices-found-no-indices-match-pattern-filebeat/133787)
**Author:** [@cro](https://discuss.elastic.co/u/cro)\ **Replies:** 4\ **Last updated:** [June 4, 2018, 3:12am UTC](https://discuss.elastic.co/t/error-no-matching-indices-found-no-indices-match-pattern-filebeat/133787 "2018-06-04T03:12:10Z")
Filebeat not creating an index. Any ideas? \_cat/indices \[58\] filebeat.yml ###################### Filebeat Configuration Example ######################### #=========================== Filebeat prospectors ===========… --- ## [Logstash starts but doesn't do anything](https://discuss.elastic.co/t/logstash-starts-but-doesnt-do-anything/184381)
**Author:** [@LogstashRookie](https://discuss.elastic.co/u/LogstashRookie)\ **Replies:** 6\ **Last updated:** [June 25, 2019, 1:28pm UTC](https://discuss.elastic.co/t/logstash-starts-but-doesnt-do-anything/184381 "2019-06-25T13:28:57Z")
Hi , im new too ELK . Im trying to get some data in my logstash but my service doesn't seem to work properly. Im running on an ubuntu 14 vm. When i check my logstash status i get the following: logstash.service - logs… --- ## [How to replicate(copy) search +visualization+dashboards from one cluster to another?](https://discuss.elastic.co/t/how-to-replicate-copy-search-visualization-dashboards-from-one-cluster-to-another/32385)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 2\ **Last updated:** [October 16, 2015, 1:34pm UTC](https://discuss.elastic.co/t/how-to-replicate-copy-search-visualization-dashboards-from-one-cluster-to-another/32385 "2015-10-16T13:34:16Z")
How to replicate charts and dashboards from one cluster to another ? tried copying .kibana index folder from one cluster other but it didnt work. Thanks in advance ! --- ## ["no initial state was set by discovery" when running multiple instances of elasticsearch in same machine](https://discuss.elastic.co/t/no-initial-state-was-set-by-discovery-when-running-multiple-instances-of-elasticsearch-in-same-machine/16098)
**Author:** [@soumya\_sengupta](https://discuss.elastic.co/u/soumya_sengupta)\ **Replies:** 7\ **Last updated:** [March 5, 2014, 8:03am UTC](https://discuss.elastic.co/t/no-initial-state-was-set-by-discovery-when-running-multiple-instances-of-elasticsearch-in-same-machine/16098 "2014-03-05T08:03:06Z")
I am trying to run 5 elasticsearch instances in a single machine each having its own port and elasticsearch.yml files When I start NodeA, I get the following warning of \*no initial state was set by discovery\* \] \[… --- ## [How to revert back to basic license?](https://discuss.elastic.co/t/how-to-revert-back-to-basic-license/88697)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 4\ **Last updated:** [June 8, 2017, 10:33am UTC](https://discuss.elastic.co/t/how-to-revert-back-to-basic-license/88697 "2017-06-08T10:33:29Z")
Hi, I was given a trial license by the elastic team and now it has expired and I would like to revert back to the basic license to use the monitoring feature as it seems after the trial license expired the monitoring a… [Previous page](https://discuss.elastic.co/top.md?page=419&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=421&per_page=50&period=all)