# Top

**URL:** https://discuss.elastic.co/top.md?page=421&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 422

---

## [How to call external web service from Kibana Plugin?](https://discuss.elastic.co/t/how-to-call-external-web-service-from-kibana-plugin/50184)

<div class="topic-metadata">

**Author:** [@Veer\_Shubhranshu\_Shr](https://discuss.elastic.co/u/Veer_Shubhranshu_Shr)\
**Replies:** 5\
**Last updated:** [May 20, 2016, 7:45pm UTC](https://discuss.elastic.co/t/how-to-call-external-web-service-from-kibana-plugin/50184 "2016-05-20T19:45:29Z")

</div>

Hi Kibana Team, I am developing a Kibana plugin. I am trying to make a AJAX call from Kibana Visualization to external web service. Below is my code: $.ajax({ type: "GET", url: 'http://localhost/elasticser…

---

## [ElasticSearch error bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks](https://discuss.elastic.co/t/elasticsearch-error-bound-or-publishing-to-a-non-loopback-or-non-link-local-address-enforcing-bootstrap-checks/87256)

<div class="topic-metadata">

**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\
**Replies:** 3\
**Last updated:** [May 29, 2017, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-error-bound-or-publishing-to-a-non-loopback-or-non-link-local-address-enforcing-bootstrap-checks/87256 "2017-05-29T07:22:42Z")

</div>

I am trying to run Elasticsearch 5.4.0 on CentOS 7 on VM in elasticsearch.yml i have added the below line network.host: \["192.168.X.Y", "localhost"\] The above IP address belongs to VM not of host OS, without adding …

---

## [Filter query is quite slow in 8.11 compared to 7.13](https://discuss.elastic.co/t/filter-query-is-quite-slow-in-8-11-compared-to-7-13/360524)

<div class="topic-metadata">

**Author:** [@vjgorla](https://discuss.elastic.co/u/vjgorla)\
**Replies:** 3\
**Last updated:** [June 5, 2024, 11:55pm UTC](https://discuss.elastic.co/t/filter-query-is-quite-slow-in-8-11-compared-to-7-13/360524 "2024-06-05T23:55:04Z")

</div>

There seems to be a big performance difference for a bool query between 7.13 and 8.11 when there are no matches. The query in question has two terms filters, one of them very selective and the other is very broad. In 7…

---

## [Keyword field that is automatically appended to text field?](https://discuss.elastic.co/t/keyword-field-that-is-automatically-appended-to-text-field/130313)

<div class="topic-metadata">

**Author:** [@David9](https://discuss.elastic.co/u/David9)\
**Replies:** 3\
**Last updated:** [May 3, 2018, 5:26am UTC](https://discuss.elastic.co/t/keyword-field-that-is-automatically-appended-to-text-field/130313 "2018-05-03T05:26:56Z")

</div>

We're relatively new to ES and discovered that after indexing some data, fields that are of type text now have a sub-field 'keyword' of type 'keyword'. Is this there to allow aggregation or other searches that are not a…

---

## [Logstash | Apache Acces log | Parsing](https://discuss.elastic.co/t/logstash-apache-acces-log-parsing/75822)

<div class="topic-metadata">

**Author:** [@aliahsan81](https://discuss.elastic.co/u/aliahsan81)\
**Replies:** 4\
**Last updated:** [February 22, 2017, 9:36am UTC](https://discuss.elastic.co/t/logstash-apache-acces-log-parsing/75822 "2017-02-22T09:36:14Z")

</div>

Hi All, I have custom apache log format, I am struggling to make it parse using logstash. Can any one help me. LogFormat "%{X-Forwarded-For}i %h %l %u %t \\"%r\\" %\>s %b \\"%{Referer}i\\" \\"%{User-Agent}i\\" \\"%{True-Clie…

---

## [Elasticsearch on AWS ECS Fargate](https://discuss.elastic.co/t/elasticsearch-on-aws-ecs-fargate/264596)

<div class="topic-metadata">

**Author:** [@Agron\_Demiraj](https://discuss.elastic.co/u/Agron_Demiraj)\
**Replies:** 6\
**Last updated:** [February 18, 2021, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-on-aws-ecs-fargate/264596 "2021-02-18T15:36:45Z")

</div>

Hi. I apologize if this is a duplicate of another thread, but so far I did not see a similar case. I am trying to deploy ES on ECS with default image from docker.elastic.co/elasticsearch/elasticsearch:7.11.1 but it is f…

---

## [How To Make File Input Read Entire File Every Time?](https://discuss.elastic.co/t/how-to-make-file-input-read-entire-file-every-time/28278)

<div class="topic-metadata">

**Author:** [@TramsWang](https://discuss.elastic.co/u/TramsWang)\
**Replies:** 4\
**Last updated:** [August 30, 2015, 1:26am UTC](https://discuss.elastic.co/t/how-to-make-file-input-read-entire-file-every-time/28278 "2015-08-30T01:26:10Z")

</div>

Hello everyone. I'm now learning to use logstash. And I want to practice a little on the "file" plugin in the input stage. However as the tutorial says, it will ignore the shipped content in an old file that had already …

---

## [All shards being allocated on the same node](https://discuss.elastic.co/t/all-shards-being-allocated-on-the-same-node/52880)

<div class="topic-metadata">

**Author:** [@rkrombho](https://discuss.elastic.co/u/rkrombho)\
**Replies:** 6\
**Last updated:** [June 15, 2016, 4:15pm UTC](https://discuss.elastic.co/t/all-shards-being-allocated-on-the-same-node/52880 "2016-06-15T16:15:56Z")

</div>

Hi All, after quite some time running a cluster with 444 indices I suddenly experience a problem while creating new indices. All Shards get allocated on the same node when I create new indices (replication = 0). It's…

---

## [Custom Date format to searchable in any format for same date value](https://discuss.elastic.co/t/custom-date-format-to-searchable-in-any-format-for-same-date-value/109740)

<div class="topic-metadata">

**Author:** [@sauronx](https://discuss.elastic.co/u/sauronx)\
**Replies:** 8\
**Last updated:** [November 30, 2017, 3:59pm UTC](https://discuss.elastic.co/t/custom-date-format-to-searchable-in-any-format-for-same-date-value/109740 "2017-11-30T15:59:30Z")

</div>

Hi, I am facing following 2 problems, please help if some could :slight\_smile: I have created index with date field of type date with custom format , when i am trying to insert the value its giving error ( but i have …

---

## [Create a rule that alerts on out of hours](https://discuss.elastic.co/t/create-a-rule-that-alerts-on-out-of-hours/326351)

<div class="topic-metadata">

**Author:** [@Alex.W](https://discuss.elastic.co/u/Alex.W)\
**Replies:** 3\
**Last updated:** [February 24, 2023, 2:50pm UTC](https://discuss.elastic.co/t/create-a-rule-that-alerts-on-out-of-hours/326351 "2023-02-24T14:50:11Z")

</div>

Hello, I have just started using Elastic and am trying to create a rule that will alert for role assignment changes in AzureAD out of office hours. Using @timestamp appears to be the option but I cant seem to have it l…

---

## [Elastic Meetup: A New Machine Learning Approach for Troubleshooting with the Elastic Stack](https://discuss.elastic.co/t/elastic-meetup-a-new-machine-learning-approach-for-troubleshooting-with-the-elastic-stack/303782)

<div class="topic-metadata">

**Author:** [@ZeMatt](https://discuss.elastic.co/u/ZeMatt)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 10:12pm UTC](https://discuss.elastic.co/t/elastic-meetup-a-new-machine-learning-approach-for-troubleshooting-with-the-elastic-stack/303782 "2022-05-02T22:12:33Z")

</div>

Hello Everyone, we're having an in-person meetup hosted by Elastic in Mountain View. Food & drink will be provided. A New Machine Learning Approach for Troubleshooting with the Elastic Stack, Wed, May 11, 2022, 5:00 PM |…

---

## [Getting unauthorised saml user error](https://discuss.elastic.co/t/getting-unauthorised-saml-user-error/176605)

<div class="topic-metadata">

**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\
**Replies:** 8\
**Last updated:** [April 23, 2019, 5:20am UTC](https://discuss.elastic.co/t/getting-unauthorised-saml-user-error/176605 "2019-04-23T05:20:29Z")

</div>

I'm implementing SAML for elasticsearch cluster. After hitting kibana url I get redirected to IDP saml page for login but after login I get below error in browser - \< {"statusCode":401,"error":"Unauthorized","message":"…

---

## [Query with multimatch and wildcard](https://discuss.elastic.co/t/query-with-multimatch-and-wildcard/189962)

<div class="topic-metadata">

**Author:** [@tiago](https://discuss.elastic.co/u/tiago)\
**Replies:** 1\
**Last updated:** [July 19, 2019, 2:45pm UTC](https://discuss.elastic.co/t/query-with-multimatch-and-wildcard/189962 "2019-07-19T14:45:56Z")

</div>

I'm trying to execute a query on multi fields but also using a wildcard in the MobileNumber, basically, if a mobile number is for example 3530831112233 if I search by 831122 I want to return this record. This is what I h…

---

## [Blocked by: \[FORBIDDEN/5/index read-only (api)\];](https://discuss.elastic.co/t/blocked-by-forbidden-5-index-read-only-api/175956)

<div class="topic-metadata">

**Author:** [@Gnanendra](https://discuss.elastic.co/u/Gnanendra)\
**Replies:** 3\
**Last updated:** [April 9, 2019, 6:50am UTC](https://discuss.elastic.co/t/blocked-by-forbidden-5-index-read-only-api/175956 "2019-04-09T06:50:44Z")

</div>

Hi, I am marked indices read\_only and after apply force merge operation that same indices. i am getting below error. i am doing below steps. please help me. Step1: GET my\_indices/\_settings { "my\_indices" : { "setti…

---

## [Master node resource requirement](https://discuss.elastic.co/t/master-node-resource-requirement/84609)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [May 4, 2017, 6:41pm UTC](https://discuss.elastic.co/t/master-node-resource-requirement/84609 "2017-05-04T18:41:18Z")

</div>

It is understood that Master node resource specification is lesser that the of the data nodes. Wanted to know how many cpu cores, Memory and Disc space a typical Master node can have, considering 3 dedicated master eligi…

---

## [Reference Kibana dashboards by name in URLs](https://discuss.elastic.co/t/reference-kibana-dashboards-by-name-in-urls/120451)

<div class="topic-metadata">

**Author:** [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Replies:** 7\
**Last updated:** [February 20, 2018, 1:45pm UTC](https://discuss.elastic.co/t/reference-kibana-dashboards-by-name-in-urls/120451 "2018-02-20T13:45:13Z")

</div>

I'm in the process of upgrading one of our systems from ES2.4 to 5.2.2 (latest version of 5 will follow shortly) and have an issue. When using 2.4 I was able to refer to a Dashboard in a URL by it's name, "General Usage…

---

## [How to match string in grok](https://discuss.elastic.co/t/how-to-match-string-in-grok/79101)

<div class="topic-metadata">

**Author:** [@andre22](https://discuss.elastic.co/u/andre22)\
**Replies:** 4\
**Last updated:** [March 17, 2017, 11:59pm UTC](https://discuss.elastic.co/t/how-to-match-string-in-grok/79101 "2017-03-17T23:59:52Z")

</div>

Hi, the last part of my messages looks like these: Beginn Bürgerliche Dämmerung HH:MM:SS,05:56:19 Zustand: Vor Ende Dämmerung,0 Ende Nautische Dämmerung HH:MM:SS,19:39:04 Windgeschwindigkeit km/h,1.1 Beginn Bürgerli…

---

## ["No endpoint or operation" and doc\_count\_error\_upper\_bound" : 0,](https://discuss.elastic.co/t/no-endpoint-or-operation-and-doc-count-error-upper-bound-0/89914)

<div class="topic-metadata">

**Author:** [@Gurram\_Vinay](https://discuss.elastic.co/u/Gurram_Vinay)\
**Replies:** 3\
**Last updated:** [June 20, 2017, 1:35pm UTC](https://discuss.elastic.co/t/no-endpoint-or-operation-and-doc-count-error-upper-bound-0/89914 "2017-06-20T13:35:33Z")

</div>

I was copied whole output since I might miss out any command or something, sorry for long code but I could not understand what is "No endpoint or operation" and second terminal output too. Is it anything wrong with my cu…

---

## [Kibana dashboard with text](https://discuss.elastic.co/t/kibana-dashboard-with-text/102502)

<div class="topic-metadata">

**Author:** [@vijeshkk](https://discuss.elastic.co/u/vijeshkk)\
**Replies:** 3\
**Last updated:** [October 3, 2017, 7:29am UTC](https://discuss.elastic.co/t/kibana-dashboard-with-text/102502 "2017-10-03T07:29:21Z")

</div>

Hi, I have over 1000 servers in my environment and I am collecting 2 kinds of data for creating visualization using kibana, \* first one is a database data pulled by logstash mysql plugin. this data is basically the con…

---

## [Urgent - Incomplete fix for Apache Log4j vulnerability v2.15.0](https://discuss.elastic.co/t/urgent-incomplete-fix-for-apache-log4j-vulnerability-v2-15-0/291893)

<div class="topic-metadata">

**Author:** [@ppafford](https://discuss.elastic.co/u/ppafford)\
**Replies:** 2\
**Last updated:** [December 22, 2021, 4:58am UTC](https://discuss.elastic.co/t/urgent-incomplete-fix-for-apache-log4j-vulnerability-v2-15-0/291893 "2021-12-22T04:58:48Z")

</div>

Looks like there is another issue and another fix And the release of Logstash 7.16.1 Release Notes | Logstash Reference \[7.16\] | Elastic has the incomplete fix. When can this be addressed?

---

## [Can I use X-Pack for free?](https://discuss.elastic.co/t/can-i-use-x-pack-for-free/78678)

<div class="topic-metadata">

**Author:** [@Sibi](https://discuss.elastic.co/u/Sibi)\
**Replies:** 3\
**Last updated:** [March 25, 2017, 8:16am UTC](https://discuss.elastic.co/t/can-i-use-x-pack-for-free/78678 "2017-03-25T08:16:26Z")

</div>

Hi, I would like use ES, Kibana and X-Pack - to disallow user to send some requests to database like DELETE \*. It is possible to use X-Pack for free.

---

## [Receive multiple Logstash inputs with TCP, UDP and Beats](https://discuss.elastic.co/t/receive-multiple-logstash-inputs-with-tcp-udp-and-beats/287020)

<div class="topic-metadata">

**Author:** [@sakshat](https://discuss.elastic.co/u/sakshat)\
**Replies:** 6\
**Last updated:** [October 18, 2021, 9:06pm UTC](https://discuss.elastic.co/t/receive-multiple-logstash-inputs-with-tcp-udp-and-beats/287020 "2021-10-18T21:06:09Z")

</div>

Hi everyone, I am trying to get logs input into logstash using TCP, UDP and Beats. I have applications that drain syslog to logstash using tcp and udp and I also have an application that writes logs to files in a server.…

---

## [How to send logs to filebeat with python logging](https://discuss.elastic.co/t/how-to-send-logs-to-filebeat-with-python-logging/85187)

<div class="topic-metadata">

**Author:** [@Tony\_Wang](https://discuss.elastic.co/u/Tony_Wang)\
**Replies:** 1\
**Last updated:** [May 10, 2017, 11:32am UTC](https://discuss.elastic.co/t/how-to-send-logs-to-filebeat-with-python-logging/85187 "2017-05-10T11:32:00Z")

</div>

The code I used shows below. I want to send logs with python. But What I got from Kibana is : elk\_1 | {"type":"log","@timestamp":"2017-05-10T04:23:51Z","tags":\["connection","client","error"\],"pid":194,"level":"er…

---

## [Filebeat not collecting docker logs](https://discuss.elastic.co/t/filebeat-not-collecting-docker-logs/212568)

<div class="topic-metadata">

**Author:** [@algallagher](https://discuss.elastic.co/u/algallagher)\
**Replies:** 4\
**Last updated:** [December 20, 2019, 7:29pm UTC](https://discuss.elastic.co/t/filebeat-not-collecting-docker-logs/212568 "2019-12-20T19:29:28Z")

</div>

I am running an ELK stack as 3 separate containers running locally (kibana, logstash, elasticsearch). I am running Docker Desktop for Windows (though I plan to migrate this entire setup to AWS). I am also running a java…

---

## [How does the Elasticsearch work internally?](https://discuss.elastic.co/t/how-does-the-elasticsearch-work-internally/342631)

<div class="topic-metadata">

**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\
**Replies:** 1\
**Last updated:** [October 1, 2023, 7:40pm UTC](https://discuss.elastic.co/t/how-does-the-elasticsearch-work-internally/342631 "2023-10-01T19:40:12Z")

</div>

Hi, I am trying to understand how the core Elasticsearch algorithm works, especially how the inverted indexes and other data representations are created and how they are searched on query time. I was unable to find any …

---

## [Schema error: extra keys not allowed @ data\['action'\] using curator for rollover api](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-action-using-curator-for-rollover-api/197072)

<div class="topic-metadata">

**Author:** [@yestoprince](https://discuss.elastic.co/u/yestoprince)\
**Replies:** 8\
**Last updated:** [September 13, 2019, 12:47pm UTC](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-action-using-curator-for-rollover-api/197072 "2019-09-13T12:47:46Z")

</div>

action file action: rollover description: \>- Rollover the index associated with alias 'aliasname', which should be in the form of prefix-YYYY.MM.DD-1. options: name: aliasname new\_indices: "\<logstash-{now/d{YYYY.M…

---

## [Elasticsearch Query Multiple Must Nots](https://discuss.elastic.co/t/elasticsearch-query-multiple-must-nots/349570)

<div class="topic-metadata">

**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\
**Replies:** 7\
**Last updated:** [December 18, 2023, 7:28pm UTC](https://discuss.elastic.co/t/elasticsearch-query-multiple-must-nots/349570 "2023-12-18T19:28:37Z")

</div>

Is it possible to have 2 different must not query strings across two different fields I have this but it doesnt let me have 2 query strings GET winevents/\_search { "query": { "bool": { "must": \[ { …

---

## [Field \[\_id\] is a metadata field and cannot be added inside a document](https://discuss.elastic.co/t/field-id-is-a-metadata-field-and-cannot-be-added-inside-a-document/125898)

<div class="topic-metadata">

**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\
**Replies:** 1\
**Last updated:** [March 28, 2018, 10:42am UTC](https://discuss.elastic.co/t/field-id-is-a-metadata-field-and-cannot-be-added-inside-a-document/125898 "2018-03-28T10:42:28Z")

</div>

Hi Team, I've found some references with no luck to resolve the \_id field error. Please help me with following. Below is complete log trace. And I'm trying to set json source like this while persisting document in ES …

---

## [Nest 6.0.0?](https://discuss.elastic.co/t/nest-6-0-0/108488)

<div class="topic-metadata">

**Author:** [@jxz](https://discuss.elastic.co/u/jxz)\
**Replies:** 7\
**Last updated:** [December 5, 2017, 5:35am UTC](https://discuss.elastic.co/t/nest-6-0-0/108488 "2017-12-05T05:35:25Z")

</div>

I installed Elasticsearch 6.0.0 and Kibana 6.0.0 on a new machine and tried to run a C# project built with NEST 5.5.0 on it. I then got the following error when trying to index a 2nd type against the same index: Rejecti…

---

## [Kibana server is not ready yet - throw er; // Unhandled 'error' event](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-throw-er-unhandled-error-event/175879)

<div class="topic-metadata">

**Author:** [@Milton\_Sam\_Moses](https://discuss.elastic.co/u/Milton_Sam_Moses)\
**Replies:** 7\
**Last updated:** [April 24, 2019, 12:30pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-throw-er-unhandled-error-event/175879 "2019-04-24T12:30:47Z")

</div>

Kibana wont start. Unable to determine the error. -----error logs. root@dev-platops-eng02:/usr/share/kibana/node\_modules# /usr/share/kibana/bin/kibana --verbose events.js:174 throw er; // Unhandled 'error' event ^ E…

---

## [No timepicker shown despite date field is recognized correctly](https://discuss.elastic.co/t/no-timepicker-shown-despite-date-field-is-recognized-correctly/90534)

<div class="topic-metadata">

**Author:** [@tunix](https://discuss.elastic.co/u/tunix)\
**Replies:** 2\
**Last updated:** [June 22, 2017, 10:01pm UTC](https://discuss.elastic.co/t/no-timepicker-shown-despite-date-field-is-recognized-correctly/90534 "2017-06-22T22:01:34Z")

</div>

Hi There, I just imported the sample logstash data in ES' website. It seems like it imported the data just fine and is able to detect @timestamp as a date field: However there is no timepicker shown in Kibana at the …

---

## [Visualization with mulitple save search queries](https://discuss.elastic.co/t/visualization-with-mulitple-save-search-queries/109843)

<div class="topic-metadata">

**Author:** [@Shwetank](https://discuss.elastic.co/u/Shwetank)\
**Replies:** 4\
**Last updated:** [December 13, 2017, 5:46pm UTC](https://discuss.elastic.co/t/visualization-with-mulitple-save-search-queries/109843 "2017-12-13T17:46:19Z")

</div>

Hi, Is there a way to add multiple save search query in a visualization. v 5.4.3 Currently it does only provide one. In my use case, Filter A have one value, Filter B have 4 and Filter C has 38. With current limitati…

---

## [Elastic authentication error](https://discuss.elastic.co/t/elastic-authentication-error/292830)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 6\
**Last updated:** [December 25, 2021, 3:16pm UTC](https://discuss.elastic.co/t/elastic-authentication-error/292830 "2021-12-25T15:16:31Z")

</div>

We are trying to remove Readonly Rest from authentication equation and setup x-pack on ( ES 7.15 ) \[2021-12-23T11:08:27,433\]\[INFO \]\[o.e.x.s.a.AuthenticationService\] \[XXXX\] Authentication of \[elastic\] was terminated by r…

---

## [Dashboard: filter over multiple index patterns](https://discuss.elastic.co/t/dashboard-filter-over-multiple-index-patterns/198423)

<div class="topic-metadata">

**Author:** [@slauth](https://discuss.elastic.co/u/slauth)\
**Replies:** 3\
**Last updated:** [September 16, 2019, 8:53am UTC](https://discuss.elastic.co/t/dashboard-filter-over-multiple-index-patterns/198423 "2019-09-16T08:53:32Z")

</div>

Hi, I have two index patterns, both containing a field "stage". Now in a simple dashboard I'm combining visualizations based on both index patterns. What I would like to achieve now is being able to define a filter for …

---

## [Parse JSON array to flat JSON with filter, or alternative solution](https://discuss.elastic.co/t/parse-json-array-to-flat-json-with-filter-or-alternative-solution/54411)

<div class="topic-metadata">

**Author:** [@webmutation](https://discuss.elastic.co/u/webmutation)\
**Replies:** 3\
**Last updated:** [July 1, 2016, 12:53pm UTC](https://discuss.elastic.co/t/parse-json-array-to-flat-json-with-filter-or-alternative-solution/54411 "2016-07-01T12:53:29Z")

</div>

Hi, Im currently using log4j and kafka to send logs to ELK. I stumbled upon an issue that i am finding a bit strange there is no previous solution, so I am perhaps misusing the system. After reading a few dozen topics i…

---

## [Filter inside of array of objects](https://discuss.elastic.co/t/filter-inside-of-array-of-objects/4641)

<div class="topic-metadata">

**Author:** [@CodingDrunk](https://discuss.elastic.co/u/CodingDrunk)\
**Replies:** 2\
**Last updated:** [June 18, 2011, 5:45am UTC](https://discuss.elastic.co/t/filter-inside-of-array-of-objects/4641 "2011-06-18T05:45:07Z")

</div>

Please help out a ES newbie here. My data looks like obj1 : { foo : \[ { name : "almond", amount : 4 }, {name: "cashew", amount : 5}\] } obj2 : { foo : \[ { name : "almond", amount : 5 }, {name: "ca…

---

## [Packetbeat performance](https://discuss.elastic.co/t/packetbeat-performance/46834)

<div class="topic-metadata">

**Author:** [@ada\_pozo](https://discuss.elastic.co/u/ada_pozo)\
**Replies:** 6\
**Last updated:** [April 11, 2016, 4:57pm UTC](https://discuss.elastic.co/t/packetbeat-performance/46834 "2016-04-11T16:57:07Z")

</div>

Hi, I'm looking into how many packets can packetbeat capture before it starts dropping them doing tcpreplay in loopback, With speeds up to 1 Gbps I only get approximately 50 packets per second. Is this normal? Is there…

---

## [Multiple output in logstash config, pls help!](https://discuss.elastic.co/t/multiple-output-in-logstash-config-pls-help/66615)

<div class="topic-metadata">

**Author:** [@reo7189](https://discuss.elastic.co/u/reo7189)\
**Replies:** 6\
**Last updated:** [November 22, 2016, 7:42am UTC](https://discuss.elastic.co/t/multiple-output-in-logstash-config-pls-help/66615 "2016-11-22T07:42:01Z")

</div>

I managed to put multiple inputs/filters/outputs in one logstash conf, with no error or warning while running elasticsearch and logstash, but there is only one index in elasticsearch, pls help: my con is as below: in…

---

## [Insert into Elastic Search](https://discuss.elastic.co/t/insert-into-elastic-search/33522)

<div class="topic-metadata">

**Author:** [@parthu](https://discuss.elastic.co/u/parthu)\
**Replies:** 6\
**Last updated:** [November 2, 2015, 6:21pm UTC](https://discuss.elastic.co/t/insert-into-elastic-search/33522 "2015-11-02T18:21:41Z")

</div>

While trying to insert into elastic search, this is the code I used. The code executes fine, but doesn't insert anything. When I put a debug point to see what went wrong, I get this error: Method threw 'java.lang.StackOv…

---

## [How to enable special characters search when using simple query string](https://discuss.elastic.co/t/how-to-enable-special-characters-search-when-using-simple-query-string/245972)

<div class="topic-metadata">

**Author:** [@Dpsoniapandey](https://discuss.elastic.co/u/Dpsoniapandey)\
**Replies:** 1\
**Last updated:** [August 22, 2020, 9:58am UTC](https://discuss.elastic.co/t/how-to-enable-special-characters-search-when-using-simple-query-string/245972 "2020-08-22T09:58:07Z")

</div>

Hi Team, I have to enable search for all type of special character when using simple query string. Please help me wit analyzer and tokeniser which is to use.

---

## [Replace empty field with a value](https://discuss.elastic.co/t/replace-empty-field-with-a-value/114723)

<div class="topic-metadata">

**Author:** [@cilzzz](https://discuss.elastic.co/u/cilzzz)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 8:37am UTC](https://discuss.elastic.co/t/replace-empty-field-with-a-value/114723 "2018-01-10T08:37:54Z")

</div>

Hi, I have a log file that contains a field called Status. i have two values: one null and the other OK. by null i mean there are no value. in mu logstash config file i used : mutate { gsub =\> \[ "Status …

---

## [Thread pool size and the cluster settings API](https://discuss.elastic.co/t/thread-pool-size-and-the-cluster-settings-api/249741)

<div class="topic-metadata">

**Author:** [@Pradyumna\_Achar](https://discuss.elastic.co/u/Pradyumna_Achar)\
**Replies:** 4\
**Last updated:** [September 24, 2020, 8:32am UTC](https://discuss.elastic.co/t/thread-pool-size-and-the-cluster-settings-api/249741 "2020-09-24T08:32:37Z")

</div>

Hello, I am a bit confused on the cluster settings API. The thread pool settings seem to be specific to a node. For example, in the same cluster, some nodes have 1 CPU and some have 5 CPUs. When I run the \_cluster/sett…

---

## [Unable to install X-Pack](https://discuss.elastic.co/t/unable-to-install-x-pack/56236)

<div class="topic-metadata">

**Author:** [@gupta.yuvraj](https://discuss.elastic.co/u/gupta.yuvraj)\
**Replies:** 4\
**Last updated:** [August 13, 2016, 5:52pm UTC](https://discuss.elastic.co/t/unable-to-install-x-pack/56236 "2016-08-13T17:52:43Z")

</div>

I am unable to install X-Pack. Initially, I ran the command to remove x-pack without being the super-user for which it gave the following error:- -\> Removing x-pack... Exception in thread "main" java.io.IOException: Cou…

---

## [In Dev Tools Console, \_reindex gets error of Client request timeout](https://discuss.elastic.co/t/in-dev-tools-console-reindex-gets-error-of-client-request-timeout/337920)

<div class="topic-metadata">

**Author:** [@Mike\_Z](https://discuss.elastic.co/u/Mike_Z)\
**Replies:** 4\
**Last updated:** [July 10, 2023, 4:38pm UTC](https://discuss.elastic.co/t/in-dev-tools-console-reindex-gets-error-of-client-request-timeout/337920 "2023-07-10T16:38:04Z")

</div>

When trying to duplicate an index by the \_reindex command, it always gets an error saying "502, Bad Gateway" and "Client request timeout". However, the command GET \_cat/indices/\_all shows, right after the above error, t…

---

## [Handling unique field (Other than the ID)](https://discuss.elastic.co/t/handling-unique-field-other-than-the-id/96034)

<div class="topic-metadata">

**Author:** [@mattkallo](https://discuss.elastic.co/u/mattkallo)\
**Replies:** 2\
**Last updated:** [August 9, 2017, 4:35am UTC](https://discuss.elastic.co/t/handling-unique-field-other-than-the-id/96034 "2017-08-09T04:35:14Z")

</div>

Hi All Need help/suggestions on how to handle this From what I understand reading documentation and previous forum postings, ES supports only the ID field as an unique value field. Pls correct me if I am wrong. We are…

---

## [How to convert my date field to my local timezone](https://discuss.elastic.co/t/how-to-convert-my-date-field-to-my-local-timezone/152263)

<div class="topic-metadata">

**Author:** [@OphyTe](https://discuss.elastic.co/u/OphyTe)\
**Replies:** 2\
**Last updated:** [October 16, 2018, 8:28am UTC](https://discuss.elastic.co/t/how-to-convert-my-date-field-to-my-local-timezone/152263 "2018-10-16T08:28:21Z")

</div>

To be perfectly honest, I'm not really sure to understand my problem properly :grimacing: So here it is. I get events from an Oracle database (with jdbc input). When I query this database (with SQL Developer), I get the…

---

## [Checking if value exists in array (before adding-it)](https://discuss.elastic.co/t/checking-if-value-exists-in-array-before-adding-it/11452)

<div class="topic-metadata">

**Author:** [@Fernando\_Javier\_Mart](https://discuss.elastic.co/u/Fernando_Javier_Mart)\
**Replies:** 4\
**Last updated:** [April 5, 2013, 6:09pm UTC](https://discuss.elastic.co/t/checking-if-value-exists-in-array-before-adding-it/11452 "2013-04-05T18:09:12Z")

</div>

Hi there. I have a "user" document which has an array of friends. I need to add/delete friends from that array. I'm currently being able to add or remove, but problem is that if a user ID already exists gets add…

---

## [Some of built-in watches fails](https://discuss.elastic.co/t/some-of-built-in-watches-fails/117960)

<div class="topic-metadata">

**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\
**Replies:** 8\
**Last updated:** [February 7, 2018, 2:08pm UTC](https://discuss.elastic.co/t/some-of-built-in-watches-fails/117960 "2018-02-07T14:08:19Z")

</div>

Hi, I have a situation where two of the built-in watches fails: Cluster status and Logstash version mismatch. Both Watcher in Kibana and Elasticsearch log file just states that it failed. I have also another issue wit…

---

## [Logstash stuck at 'Fixnum is deprecated'](https://discuss.elastic.co/t/logstash-stuck-at-fixnum-is-deprecated/231164)

<div class="topic-metadata">

**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\
**Replies:** 6\
**Last updated:** [May 6, 2020, 8:04pm UTC](https://discuss.elastic.co/t/logstash-stuck-at-fixnum-is-deprecated/231164 "2020-05-06T20:04:04Z")

</div>

Hi all, I was trying to send data to elasticsearch using scheduler. I want it to run once a day and update new records. But it gets stuck everytime after these outputs. Please suggest any solution, thanks. Sending Logs…

---

## [Setting a "static" secret token](https://discuss.elastic.co/t/setting-a-static-secret-token/227196)

<div class="topic-metadata">

**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\
**Replies:** 3\
**Last updated:** [April 13, 2020, 3:22pm UTC](https://discuss.elastic.co/t/setting-a-static-secret-token/227196 "2020-04-13T15:22:57Z")

</div>

This might be a really stupid question, but I've wasted a lot of time trying to figure this out on my own. I struggle to translate the documentation. I don't speak elastic. I barely speak kubernetes. So I'll apologize …

[Previous page](https://discuss.elastic.co/top.md?page=420&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=422&per_page=50&period=all)
