# Top **URL:** https://discuss.elastic.co/top.md?page=422&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 423 --- ## [Query to check if nestedobject contains values or not exist](https://discuss.elastic.co/t/query-to-check-if-nestedobject-contains-values-or-not-exist/239993)
**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\ **Replies:** 8\ **Last updated:** [July 6, 2020, 3:43pm UTC](https://discuss.elastic.co/t/query-to-check-if-nestedobject-contains-values-or-not-exist/239993 "2020-07-06T15:43:05Z")
Hello everyone, I am interested if something like this is possible in elastic search... So, I want to search for documents, which manufacturer.Id is in 1225 or manufacturer object doesn't exist. Manufacturer is a nested… --- ## [Date math in Kibana 5](https://discuss.elastic.co/t/date-math-in-kibana-5/67112)
**Author:** [@aros](https://discuss.elastic.co/u/aros)\ **Replies:** 8\ **Last updated:** [November 24, 2016, 3:25pm UTC](https://discuss.elastic.co/t/date-math-in-kibana-5/67112 "2016-11-24T15:25:48Z")
Hi, probably a classic and simple to answer, but as I found quite different answers to several questions about date math in Kibana I want to ask here if and how date math is supported in the current 5.0 version of kiba… --- ## [How to perform calculations in KIbana 6.5?](https://discuss.elastic.co/t/how-to-perform-calculations-in-kibana-6-5/175432)
**Author:** [@Sonam\_Verma](https://discuss.elastic.co/u/Sonam_Verma)\ **Replies:** 4\ **Last updated:** [April 10, 2019, 6:40am UTC](https://discuss.elastic.co/t/how-to-perform-calculations-in-kibana-6-5/175432 "2019-04-10T06:40:49Z")
I want to calculate the following: Vol(%) - (Total Volunary attrition till the month/avg HC)\*(365/No. of days in the year so far) I am new to kibana and want to know the ways to calculate above. The fields on the righ… --- ## [Filebeat stops sending logs with no reason](https://discuss.elastic.co/t/filebeat-stops-sending-logs-with-no-reason/101130)
**Author:** [@serkin](https://discuss.elastic.co/u/serkin)\ **Replies:** 4\ **Last updated:** [September 25, 2017, 1:53pm UTC](https://discuss.elastic.co/t/filebeat-stops-sending-logs-with-no-reason/101130 "2017-09-25T13:53:06Z")
I have an unusual issue I have server sending logs to elasticsearch using filebeat Everything goes ok until suddenly filebeat stops sending logs. But if I curl to elasticsearch it responds. tcpdump shows that filebeat … --- ## [Loadbalance duplicating the events using logstash](https://discuss.elastic.co/t/loadbalance-duplicating-the-events-using-logstash/61342)
**Author:** [@avinash](https://discuss.elastic.co/u/avinash)\ **Replies:** 7\ **Last updated:** [October 4, 2016, 1:51pm UTC](https://discuss.elastic.co/t/loadbalance-duplicating-the-events-using-logstash/61342 "2016-10-04T13:51:30Z")
I have configuration as filebeat with loadbalance true & two logstash hosts i.e. logstash1 & logstash2 which are input to elasticsearch. The filebeat configurtion for logstash is as below prospectors: - paths… --- ## [\[SOLVED\]Caused by: java.security.AccessControlException: access denied](https://discuss.elastic.co/t/solved-caused-by-java-security-accesscontrolexception-access-denied/154566)
**Author:** [@ironbeast](https://discuss.elastic.co/u/ironbeast)\ **Replies:** 1\ **Last updated:** [October 30, 2018, 8:49am UTC](https://discuss.elastic.co/t/solved-caused-by-java-security-accesscontrolexception-access-denied/154566 "2018-10-30T08:49:07Z")
Hi There, I' ve got this strange issue with my certs.... I know the certs should go in the conf dir (which is the case: \[root@esmaster01dev esmaster01dev\]# echo $ES\_CONF\_DIR /etc/elasticsearch/esmaster01dev Contents … --- ## [Painless:Cannot invoke \\”Object.getClass()\\” because \\”callArgs\[0\]\\” is null](https://discuss.elastic.co/t/painless-cannot-invoke-object-getclass-because-callargs-0-is-null/261506)
**Author:** [@carpeDiem](https://discuss.elastic.co/u/carpeDiem)\ **Replies:** 1\ **Last updated:** [February 1, 2021, 11:44pm UTC](https://discuss.elastic.co/t/painless-cannot-invoke-object-getclass-because-callargs-0-is-null/261506 "2021-02-01T23:44:55Z")
Hello experts, I am using a painless scripting language to query,but the hit of result is empty. This is my query body. POST test\_script-0/\_search { "\_source":true, "aggs":{}, "from":0, … --- ## [Kibana: How to get raw data and aggregate in KQL in a serial fashion?](https://discuss.elastic.co/t/kibana-how-to-get-raw-data-and-aggregate-in-kql-in-a-serial-fashion/239930)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 12:23am UTC](https://discuss.elastic.co/t/kibana-how-to-get-raw-data-and-aggregate-in-kql-in-a-serial-fashion/239930 "2020-07-07T00:23:12Z")
I was looking for equivalent of splunk query (i.e. get raw data , then do aggregation on top of that) index=some\_data | stats count by hostname The above will aggregate all the data by hostname and shows the data in n… --- ## [Expunge Deleted Docs from index](https://discuss.elastic.co/t/expunge-deleted-docs-from-index/12458)
**Author:** [@tarang\_dawer](https://discuss.elastic.co/u/tarang_dawer)\ **Replies:** 4\ **Last updated:** [June 19, 2013, 1:57pm UTC](https://discuss.elastic.co/t/expunge-deleted-docs-from-index/12458 "2013-06-19T13:57:36Z")
Hi I have deleted a mapping from my index. ES , marks the deleted documents in the index as logically deleted, but physical space is relcaimed only by explicitly optimizing with expunge\_deletes=true. Does ES optim… --- ## [Master only node hardware sizing](https://discuss.elastic.co/t/master-only-node-hardware-sizing/20683)
**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\ **Replies:** 5\ **Last updated:** [November 12, 2014, 10:15am UTC](https://discuss.elastic.co/t/master-only-node-hardware-sizing/20683 "2014-11-12T10:15:13Z")
Hello, I'm currently thinking of creating VM nodes for the masters. Today, several nodes have master and data node roles. But I have OOM memory errors and so masters crashed frequently. What would be the correct … --- ## [Search for special characters inside the message](https://discuss.elastic.co/t/search-for-special-characters-inside-the-message/106553)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 2\ **Last updated:** [November 7, 2017, 7:42am UTC](https://discuss.elastic.co/t/search-for-special-characters-inside-the-message/106553 "2017-11-07T07:42:18Z")
Hi all, Is it possible to search for messages that coontains the "\>" character or a secuence of two semicolons? I'm not able to do it in kibana filters. For example I have a set of docs with tag grokparsefailure \_ an… --- ## [Restarting of node taking much time](https://discuss.elastic.co/t/restarting-of-node-taking-much-time/13884)
**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\ **Replies:** 5\ **Last updated:** [October 10, 2013, 10:38am UTC](https://discuss.elastic.co/t/restarting-of-node-taking-much-time/13884 "2013-10-10T10:38:56Z")
Hi All, We have deployed 5 nodes cluster and each node is serving around 200 shards (total number of indices are 200 and each index has 200 shards). While restarting each node is taking around 20 to 30 minutes t… --- ## [Module doesn't exist (but it does)](https://discuss.elastic.co/t/module-doesnt-exist-but-it-does/199116)
**Author:** [@Justin\_Doles](https://discuss.elastic.co/u/Justin_Doles)\ **Replies:** 3\ **Last updated:** [September 12, 2019, 7:14pm UTC](https://discuss.elastic.co/t/module-doesnt-exist-but-it-does/199116 "2019-09-12T19:14:21Z")
Hi, While trying to configure filebeat modules, I keep getting "module doesn't exist". It doesn't matter which module I try. Also the "filebeat modules list" command doesn't any modules. The service does run without … --- ## [\[SOLVED\] Logstash: No output, no logs](https://discuss.elastic.co/t/solved-logstash-no-output-no-logs/46641)
**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\ **Replies:** 2\ **Last updated:** [April 7, 2016, 12:42pm UTC](https://discuss.elastic.co/t/solved-logstash-no-output-no-logs/46641 "2016-04-07T12:42:44Z")
Hi all, My architecture: Equipments --\> syslog-ng --\> redis \<-- logstash --\> elasticsearch \<--kibana I made a lot of tests and I'm sure that syslog-ng received correctly logs, that redis put the logs in a list (key: t… --- ## [Error: Loading chunk 12 failed](https://discuss.elastic.co/t/error-loading-chunk-12-failed/295304)
**Author:** [@zhangbiaozb](https://discuss.elastic.co/u/zhangbiaozb)\ **Replies:** 6\ **Last updated:** [February 10, 2022, 5:54am UTC](https://discuss.elastic.co/t/error-loading-chunk-12-failed/295304 "2022-02-10T05:54:38Z")
I confirm the elistic and kibana are installled correctly in Oracle Linux 7.9. But when I visit the kibana page, the error show: Version: 7.16.3 Build: 46336 Error: Loading chunk 12 failed. (error: http://168.138.163.1… --- ## [Failed to install template: waited for \[30s\]](https://discuss.elastic.co/t/failed-to-install-template-waited-for-30s/38024)
**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\ **Replies:** 6\ **Last updated:** [December 29, 2015, 5:49am UTC](https://discuss.elastic.co/t/failed-to-install-template-waited-for-30s/38024 "2015-12-29T05:49:58Z")
Hi All, My ES (1.7.4) is running well, but when I start logstash (1.5.2), something wrong with my logstash conf? ES Status $curl localhost:9200/\_nodes/process?pretty { "cluster\_name" : "es\_course\_master", "nodes… --- ## [GEM - GUI for Elasticsearch Mappings](https://discuss.elastic.co/t/gem-gui-for-elasticsearch-mappings/68100)
**Author:** [@siddharthlatest](https://discuss.elastic.co/u/siddharthlatest)\ **Replies:** 0\ **Last updated:** [December 5, 2016, 8:18pm UTC](https://discuss.elastic.co/t/gem-gui-for-elasticsearch-mappings/68100 "2016-12-05T20:18:21Z")
I would like to introduce GEM, a GUI for Elasticsearch Mappings. Here is the github link. GEM is at the first step towards true data modeling where it makes the mappings process very accessible. For someone coming from… --- ## [Warning "Unable to acquire permit to use snapshot files during recovery…" when restarting elasticsearch node](https://discuss.elastic.co/t/warning-unable-to-acquire-permit-to-use-snapshot-files-during-recovery-when-restarting-elasticsearch-node/293543)
**Author:** [@Gregor\_Weckbecker](https://discuss.elastic.co/u/Gregor_Weckbecker)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 6:02am UTC](https://discuss.elastic.co/t/warning-unable-to-acquire-permit-to-use-snapshot-files-during-recovery-when-restarting-elasticsearch-node/293543 "2022-01-25T06:02:12Z")
When upgrading our elasticsearch cluster to version 7.16.1, we performing a rolling upgarde as described in the documentation. Before the restart we trigger a synced flush and increase cluster.routing.allocation.node\_con… --- ## [Elastic search Disscursion](https://discuss.elastic.co/t/elastic-search-disscursion/24871)
**Author:** [@kkkoyale](https://discuss.elastic.co/u/kkkoyale)\ **Replies:** 7\ **Last updated:** [July 7, 2015, 10:52am UTC](https://discuss.elastic.co/t/elastic-search-disscursion/24871 "2015-07-07T10:52:16Z")
I am a new learning elastic search API,can you help me guys how i star the reading --- ## [Mapping definition for ... has unsupported parameters: \[index : no\]](https://discuss.elastic.co/t/mapping-definition-for-has-unsupported-parameters-index-no/44911)
**Author:** [@jsbloonix](https://discuss.elastic.co/u/jsbloonix)\ **Replies:** 4\ **Last updated:** [March 20, 2016, 1:51pm UTC](https://discuss.elastic.co/t/mapping-definition-for-has-unsupported-parameters-index-no/44911 "2016-03-20T13:51:33Z")
Hi together, I'm trying to update from ES 1.7 to ES 2.1 and got some errors. "Mapping definition for \[data\] has unsupported parameters: \[index : no\]". "properties": { "data" : { "type" : "object", "index" : "no" … --- ## [Fail to load SSL configuration while using docker image](https://discuss.elastic.co/t/fail-to-load-ssl-configuration-while-using-docker-image/230283)
**Author:** [@x0rcist](https://discuss.elastic.co/u/x0rcist)\ **Replies:** 7\ **Last updated:** [April 30, 2020, 1:18pm UTC](https://discuss.elastic.co/t/fail-to-load-ssl-configuration-while-using-docker-image/230283 "2020-04-30T13:18:14Z")
Hi, Trying to install Elasticsearch latest version via docker. I have created certificate already and pushing it to image like below, excerpt from yml volumes: - ./elastic-stack-ca.p12:/usr/share/elasticsearch/config… --- ## [Not enough free disk space available to allocate persisted queue](https://discuss.elastic.co/t/not-enough-free-disk-space-available-to-allocate-persisted-queue/136149)
**Author:** [@panaman](https://discuss.elastic.co/u/panaman)\ **Replies:** 7\ **Last updated:** [June 20, 2018, 12:10pm UTC](https://discuss.elastic.co/t/not-enough-free-disk-space-available-to-allocate-persisted-queue/136149 "2018-06-20T12:10:18Z")
I am testing out the new logstash 6.3.0 and all it does is error out and crash saying i don't have enough disk space if my queue.max\_bytes: is set to anything higher than about 9400mb. My data dir has 190GB free and I h… --- ## [How to enable \_timestamp by default for all the documents?](https://discuss.elastic.co/t/how-to-enable--timestamp-by-default-for-all-the-documents/43373)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 7\ **Last updated:** [March 3, 2016, 12:18pm UTC](https://discuss.elastic.co/t/how-to-enable--timestamp-by-default-for-all-the-documents/43373 "2016-03-03T12:18:41Z")
Hi Esperts, I want to enable \_timestamp for all the documents in ES 1.7.1, I mean when I index the data timestamp should enable with the document. For now this is what I tried. POST /clust { "mappings" : { "default"… --- ## [Pcap visualization using Kibana](https://discuss.elastic.co/t/pcap-visualization-using-kibana/175379)
**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\ **Replies:** 4\ **Last updated:** [April 12, 2019, 5:10pm UTC](https://discuss.elastic.co/t/pcap-visualization-using-kibana/175379 "2019-04-12T17:10:55Z")
I want to visualize anomalies in data and need some lead on that. Anyone having any prior experience in "visualizing anomalies in pcap using elk stack " kindly let me know. --- ## [6.5.0 NGINX reverse proxy not working anymore](https://discuss.elastic.co/t/6-5-0-nginx-reverse-proxy-not-working-anymore/157299)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 3\ **Last updated:** [November 21, 2018, 12:44am UTC](https://discuss.elastic.co/t/6-5-0-nginx-reverse-proxy-not-working-anymore/157299 "2018-11-21T00:44:40Z")
Hi, Seems 6.5.0 broke my NGINX reverse proxy? sites-available/kibana server { listen 80 default\_server; listen \[::\]:80 default\_server; server\_name 192.168.0.115 (kibana and nginx running on s… --- ## [Aggregation to take the first result for every unique value of a term](https://discuss.elastic.co/t/aggregation-to-take-the-first-result-for-every-unique-value-of-a-term/116513)
**Author:** [@Thomas\_Millward\_Wrig](https://discuss.elastic.co/u/Thomas_Millward_Wrig)\ **Replies:** 3\ **Last updated:** [January 23, 2018, 6:12pm UTC](https://discuss.elastic.co/t/aggregation-to-take-the-first-result-for-every-unique-value-of-a-term/116513 "2018-01-23T18:12:28Z")
Hey. I have a bunch of documents that set an attribute - "unique\_hash". There will be duplicates based on that hash, and I'm looking to return only the first results for a given value of "unique\_hash", but one for every… --- ## [Error when reloading prospectors for filebeat](https://discuss.elastic.co/t/error-when-reloading-prospectors-for-filebeat/83082)
**Author:** [@grantwu](https://discuss.elastic.co/u/grantwu)\ **Replies:** 8\ **Last updated:** [April 27, 2017, 9:50pm UTC](https://discuss.elastic.co/t/error-when-reloading-prospectors-for-filebeat/83082 "2017-04-27T21:50:11Z")
The re-creation of a prospector as a condition for checking whether or not to stop or start a processor in the live reloading path causes prospectors to shut down due to error thrown when trying to load file state. Thi… --- ## [JSON research and filter in array](https://discuss.elastic.co/t/json-research-and-filter-in-array/55080)
**Author:** [@belette](https://discuss.elastic.co/u/belette)\ **Replies:** 5\ **Last updated:** [July 12, 2016, 10:40pm UTC](https://discuss.elastic.co/t/json-research-and-filter-in-array/55080 "2016-07-12T22:40:53Z")
Hi, I am trying to figure out how to filter on some JSON field and display only the corresponding field but it is like because of my JSON format (only one line with everything inside) it is not working. Any idea how c… --- ## [502 Bad Gateway](https://discuss.elastic.co/t/502-bad-gateway/247921)
**Author:** [@Jarek](https://discuss.elastic.co/u/Jarek)\ **Replies:** 3\ **Last updated:** [September 9, 2020, 1:12pm UTC](https://discuss.elastic.co/t/502-bad-gateway/247921 "2020-09-09T13:12:15Z")
Hi, We use Elasticsearch 7.8.0. The problem we have is the "502 Bad Gateway" error that appears very often. The problem seems to occur between ms proxy and Kibana, but there is no information in the Kibana logs what cou… --- ## [ERR Failed to publish events caused by: read tcp (filebeat Version: 5.5.1)](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-read-tcp-filebeat-version-5-5-1/103498)
**Author:** [@Danish\_Bin\_Sofwan](https://discuss.elastic.co/u/Danish_Bin_Sofwan)\ **Replies:** 4\ **Last updated:** [October 16, 2017, 2:44pm UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-read-tcp-filebeat-version-5-5-1/103498 "2017-10-16T14:44:00Z")
This is how my filebeat.yml looks like : output.logstash: # The Logstash hosts hosts: \["55.194.113.9:5043"\] bulk\_max\_size : 1048 The logstash instance transforms and indexes the logs into aws managed Elastic sear… --- ## [Compatibility Kibana/Elasticsearch - Same major version but different minor versions](https://discuss.elastic.co/t/compatibility-kibana-elasticsearch-same-major-version-but-different-minor-versions/295689)
**Author:** [@Sylmarch](https://discuss.elastic.co/u/Sylmarch)\ **Replies:** 2\ **Last updated:** [February 1, 2022, 12:18am UTC](https://discuss.elastic.co/t/compatibility-kibana-elasticsearch-same-major-version-but-different-minor-versions/295689 "2022-02-01T00:18:01Z")
Hello Elastic team! We plan to install Wazuh HIDS. They indicates that it is possible to use Elastic stack solution instead of Open Distro for Elastic solution. So we plan to use our existing Elasticsearch v7.16 clust… --- ## [ElasticSearch painless script to remove all the keys except for a list of keys](https://discuss.elastic.co/t/elasticsearch-painless-script-to-remove-all-the-keys-except-for-a-list-of-keys/116215)
**Author:** [@umbreak](https://discuss.elastic.co/u/umbreak)\ **Replies:** 2\ **Last updated:** [January 20, 2018, 11:00am UTC](https://discuss.elastic.co/t/elasticsearch-painless-script-to-remove-all-the-keys-except-for-a-list-of-keys/116215 "2018-01-20T11:00:27Z")
I want to execute an atomic update operation on a Elasticsearch (6.1) document where I want to remove all the document except for some keys (on the top level, not nested). I know that for removing a specific key (someth… --- ## [Best way to return which field matched](https://discuss.elastic.co/t/best-way-to-return-which-field-matched/4140)
**Author:** [@Andrew1](https://discuss.elastic.co/u/Andrew1)\ **Replies:** 3\ **Last updated:** [March 22, 2011, 5:29pm UTC](https://discuss.elastic.co/t/best-way-to-return-which-field-matched/4140 "2011-03-22T17:29:37Z")
Hi, I have two current ways that I've been returning which field matched from a query: \* Going through the results and doing an in memory search through each result and doing a string contains, \* Creating a named … --- ## [How would you implement date/datetime filtering for a booking application?](https://discuss.elastic.co/t/how-would-you-implement-date-datetime-filtering-for-a-booking-application/5033)
**Author:** [@Andy\_2](https://discuss.elastic.co/u/Andy_2)\ **Replies:** 6\ **Last updated:** [January 30, 2017, 5:07pm UTC](https://discuss.elastic.co/t/how-would-you-implement-date-datetime-filtering-for-a-booking-application/5033 "2017-01-30T17:07:19Z")
Hi, I'm working on a booking application using elasticsearch for search & filtering. Basically each document describes a service, such as an educational class. And each class has multiple date or datetime blocks … --- ## [Documents in elasticsearch getting deleted automatically?](https://discuss.elastic.co/t/documents-in-elasticsearch-getting-deleted-automatically/64248)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 6\ **Last updated:** [October 28, 2016, 7:10am UTC](https://discuss.elastic.co/t/documents-in-elasticsearch-getting-deleted-automatically/64248 "2016-10-28T07:10:06Z")
I'm creating an index though logstash and pushing data to it from a MySQL database. But what I noticed in elasticsearch was once the whole data is uploaded, it starts deleting some of the docs. The total number of docs i… --- ## [Logstash: Calling WebService or a program from filters](https://discuss.elastic.co/t/logstash-calling-webservice-or-a-program-from-filters/37760)
**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\ **Replies:** 5\ **Last updated:** [December 23, 2015, 6:47pm UTC](https://discuss.elastic.co/t/logstash-calling-webservice-or-a-program-from-filters/37760 "2015-12-23T18:47:04Z")
I am working on logstash to extract data from mysql, as existing filters/plugins lack in doing required operations/transformations I think I need to create a program of my own to do this. My question is, Is it possible… --- ## [Log4j on Elasticsearch 7.9.2](https://discuss.elastic.co/t/log4j-on-elasticsearch-7-9-2/292093)
**Author:** [@h4h3hj](https://discuss.elastic.co/u/h4h3hj)\ **Replies:** 8\ **Last updated:** [January 17, 2022, 12:33pm UTC](https://discuss.elastic.co/t/log4j-on-elasticsearch-7-9-2/292093 "2022-01-17T12:33:12Z")
Hi Everyone, As we know the vulnerability (CVE-2021-44228) impacts multiple versions of the Apache Log4j2 I can see Elastic has updated about this Supported versions of Elasticsearch (6.8.9+, 7.8+) used with recent ve… --- ## [Too many open files warning](https://discuss.elastic.co/t/too-many-open-files-warning/11503)
**Author:** [@ovamsikrishna](https://discuss.elastic.co/u/ovamsikrishna)\ **Replies:** 8\ **Last updated:** [April 22, 2013, 5:33am UTC](https://discuss.elastic.co/t/too-many-open-files-warning/11503 "2013-04-22T05:33:46Z")
Getting the below warning messages continuously. Not sure what should be done. Saw some of the relevant posts asking to increase the number of file descriptors. How to do the same? Even if I increase now, Will … --- ## [Index.lifecycle.rollover\_alias does not point to index](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-does-not-point-to-index/250609)
**Author:** [@Zoltan\_Kovacs](https://discuss.elastic.co/u/Zoltan_Kovacs)\ **Replies:** 6\ **Last updated:** [October 13, 2020, 7:51am UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-does-not-point-to-index/250609 "2020-10-13T07:51:00Z")
Hello @warkolm ! I run to this error today. I use NLog to write to ES. I would like to use rollover for not blow up my monthly index more than 50GB. Error: \[2020-10-01T07:54:17,209\]\[ERROR\]\[o.e.x.i.IndexLifecycleRunner… --- ## [Aggregate multiple rows fields data in single data](https://discuss.elastic.co/t/aggregate-multiple-rows-fields-data-in-single-data/100358)
**Author:** [@vinay\_garg](https://discuss.elastic.co/u/vinay_garg)\ **Replies:** 6\ **Last updated:** [September 14, 2017, 6:00am UTC](https://discuss.elastic.co/t/aggregate-multiple-rows-fields-data-in-single-data/100358 "2017-09-14T06:00:43Z")
Hi, Environment: Elasticsearch, Logstash, Kibana(5.6) I have multiple Fields data. Each field is related to JMX. JMX configuration is: "host":"localhost", "port":1099, "url" : "service:jmx:rmi:///jndi/rmi://localh… --- ## [Shards get stuck in RELOCATING state](https://discuss.elastic.co/t/shards-get-stuck-in-relocating-state/9771)
**Author:** [@arta](https://discuss.elastic.co/u/arta)\ **Replies:** 6\ **Last updated:** [November 23, 2012, 1:32pm UTC](https://discuss.elastic.co/t/shards-get-stuck-in-relocating-state/9771 "2012-11-23T13:32:18Z")
Hi, I see two shards are stuck in RELOCATING state, for more than 18 hours as of now. curl localhost:9200/\_status shows something like this: "7" : \[ { "routing" : { "state" : "RELO… --- ## [HOW-TO create an index automatically per-month](https://discuss.elastic.co/t/how-to-create-an-index-automatically-per-month/46027)
**Author:** [@nskalis](https://discuss.elastic.co/u/nskalis)\ **Replies:** 3\ **Last updated:** [April 1, 2016, 11:14am UTC](https://discuss.elastic.co/t/how-to-create-an-index-automatically-per-month/46027 "2016-04-01T11:14:30Z")
Good morning guys, Could you please possibly advise on how to achieve index management on a monthly basis ? For example, if the index alias is configured like { "actions": \[ { "add": { … --- ## [\[ANNOUNCEMENT\] - TestContainers :: elasticsearch 0.1 released](https://discuss.elastic.co/t/announcement-testcontainers-elasticsearch-0-1-released/119129)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [February 8, 2018, 9:59pm UTC](https://discuss.elastic.co/t/announcement-testcontainers-elasticsearch-0-1-released/119129 "2018-02-08T21:59:09Z")
The TestContainers :: elasticsearch team is pleased to announce the testcontainers-elasticsearch-0.1 release! TestContainers :: elasticsearch Dockerized Elasticsearch container for testing under Testcontainers. Usage A… --- ## [Configuring system.filesystem to show useful mount stats](https://discuss.elastic.co/t/configuring-system-filesystem-to-show-useful-mount-stats/136914)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 6\ **Last updated:** [July 4, 2018, 4:59pm UTC](https://discuss.elastic.co/t/configuring-system-filesystem-to-show-useful-mount-stats/136914 "2018-07-04T16:59:17Z")
Hi there, I'm trying to configure metricbeats to show disk usage, particularly for /root /boot /data mount points. I've set up metricbeats.yml like this for system.filesystem module: - module: system enabled: true … --- ## [Kibana remote access on windows](https://discuss.elastic.co/t/kibana-remote-access-on-windows/77815)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 3\ **Last updated:** [March 16, 2017, 4:14pm UTC](https://discuss.elastic.co/t/kibana-remote-access-on-windows/77815 "2017-03-16T16:14:25Z")
whata values do i have to change and to what in the kibana.yml file to get this to work do i have to remove the "#" from the lines that i change, i notice they are there in the original file? my current non-working k… --- ## [OpenAPI / Swagger API Docs?](https://discuss.elastic.co/t/openapi-swagger-api-docs/197071)
**Author:** [@Dave\_Russell](https://discuss.elastic.co/u/Dave_Russell)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 1:48pm UTC](https://discuss.elastic.co/t/openapi-swagger-api-docs/197071 "2019-08-28T13:48:51Z")
I'd like to dig into AppSearch as a potential integration with our SaaS offering, but there is no "back end" documentation available? No clear list of available APIs No Open API / Swagger document. No public sourcecode… --- ## [Does filebeat need java?](https://discuss.elastic.co/t/does-filebeat-need-java/78140)
**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\ **Replies:** 2\ **Last updated:** [March 10, 2017, 12:38pm UTC](https://discuss.elastic.co/t/does-filebeat-need-java/78140 "2017-03-10T12:38:26Z")
Dear all, Does filebeat need java? I would like to install filebeat on every application hosts to transport logs to logstash forwarder. So, i need to get know. Does filebeat installation need java? Should me inst… --- ## [Customize Kibana UI](https://discuss.elastic.co/t/customize-kibana-ui/178133)
**Author:** [@plx](https://discuss.elastic.co/u/plx)\ **Replies:** 1\ **Last updated:** [April 24, 2019, 1:34pm UTC](https://discuss.elastic.co/t/customize-kibana-ui/178133 "2019-04-24T13:34:35Z")
Hey guys, I want to customize Kibana UI like changing logo and other stuffs. How can I create my personal theme and how to implement it? --- ## [Date format parsing exception](https://discuss.elastic.co/t/date-format-parsing-exception/100892)
**Author:** [@swaplogstash](https://discuss.elastic.co/u/swaplogstash)\ **Replies:** 5\ **Last updated:** [September 18, 2017, 7:41pm UTC](https://discuss.elastic.co/t/date-format-parsing-exception/100892 "2017-09-18T19:41:09Z")
I have create\_date column as timestamp in database and need create\_date value in elastic as "MM/DD/YYYY" or "yyyy-MM-dd" . I am getting below error exception while loading data from oracle database using lo… --- ## [Mmapfs vs niofs?](https://discuss.elastic.co/t/mmapfs-vs-niofs/27965)
**Author:** [@lokeshhctm](https://discuss.elastic.co/u/lokeshhctm)\ **Replies:** 2\ **Last updated:** [August 25, 2015, 8:23am UTC](https://discuss.elastic.co/t/mmapfs-vs-niofs/27965 "2015-08-25T08:23:17Z")
How can we increase virtual memory on linux? But if use mmapfs, how it works? In case we have 100 indexes and each of size like 2-3 GB. In case we have memory up to like 20 GB and in such case will elasticsearch handle, … [Previous page](https://discuss.elastic.co/top.md?page=421&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=423&per_page=50&period=all)