# Top

**URL:** https://discuss.elastic.co/top.md?page=425&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 426

---

## [Elasticsearch read timed out](https://discuss.elastic.co/t/elasticsearch-read-timed-out/59917)

<div class="topic-metadata">

**Author:** [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\
**Replies:** 1\
**Last updated:** [September 6, 2016, 9:14pm UTC](https://discuss.elastic.co/t/elasticsearch-read-timed-out/59917 "2016-09-06T21:14:05Z")

</div>

I have a 4 nodes elasticsearch cluster and they're some m4.2xlarge machines. I have processes indexing while some processes querying the index. And I got a read timed out error from elasticsearch. I'm using the elastic…

---

## [Can a scheduler be setup for filebeat to push logs only at midnight](https://discuss.elastic.co/t/can-a-scheduler-be-setup-for-filebeat-to-push-logs-only-at-midnight/128286)

<div class="topic-metadata">

**Author:** [@Kamal\_Raj](https://discuss.elastic.co/u/Kamal_Raj)\
**Replies:** 2\
**Last updated:** [April 17, 2018, 11:19am UTC](https://discuss.elastic.co/t/can-a-scheduler-be-setup-for-filebeat-to-push-logs-only-at-midnight/128286 "2018-04-17T11:19:07Z")

</div>

Wanted to try ES on one of our servers, where the load/CPU utilization is already high. Hence, can I schedule Filebeat to push logs only at midnight I am aware that scan\_frequency:86400 setting in Filebeat config, will …

---

## [Eliminate duplicates from Kibana dashboard from a particular column](https://discuss.elastic.co/t/eliminate-duplicates-from-kibana-dashboard-from-a-particular-column/52054)

<div class="topic-metadata">

**Author:** [@gaurav\_anand](https://discuss.elastic.co/u/gaurav_anand)\
**Replies:** 1\
**Last updated:** [June 7, 2016, 8:06pm UTC](https://discuss.elastic.co/t/eliminate-duplicates-from-kibana-dashboard-from-a-particular-column/52054 "2016-06-07T20:06:22Z")

</div>

I have a ELK Dashboard which consumes data from kafka. There are 4 columns in the inputted JSON data. For example columns are col1,col2,col3,col4. There are 100 records which are fed to elastic search everyday. Suppo…

---

## [Search using complex regex is not working on Kibana 6](https://discuss.elastic.co/t/search-using-complex-regex-is-not-working-on-kibana-6/119636)

<div class="topic-metadata">

**Author:** [@Ayman\_2](https://discuss.elastic.co/u/Ayman_2)\
**Replies:** 3\
**Last updated:** [February 14, 2018, 7:55pm UTC](https://discuss.elastic.co/t/search-using-complex-regex-is-not-working-on-kibana-6/119636 "2018-02-14T19:55:23Z")

</div>

Hi, I'm trying to get the count the hits of an url pattern on Kibana, i have regex to catch urls in arabic and english. i tried this request\_url: /(en|ar|fr)/files/(\[\\-\_%A-Z0-9؀-ۿ=a-z\\s\].\*)\[0-9\]+/$/ but it didn't work …

---

## [Error pulling image configuration: download failed after attempts=6: net/http: TLS handshake timeout](https://discuss.elastic.co/t/error-pulling-image-configuration-download-failed-after-attempts-6-net-http-tls-handshake-timeout/339341)

<div class="topic-metadata">

**Author:** [@ppafford](https://discuss.elastic.co/u/ppafford)\
**Replies:** 5\
**Last updated:** [August 15, 2023, 2:01am UTC](https://discuss.elastic.co/t/error-pulling-image-configuration-download-failed-after-attempts-6-net-http-tls-handshake-timeout/339341 "2023-08-15T02:01:25Z")

</div>

Running docker pull logstash:8.8.1 works but running docker pull docker.elastic.co/logstash/logstash:8.8.1 does not Is there a redirect on Elastic side that I'm missing, I've whitelisted a few but feel like I'm still mi…

---

## [Failed to create alias: \<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"\>](https://discuss.elastic.co/t/failed-to-create-alias-doctype-html-public-ietf-dtd-html-2-0-en/200226)

<div class="topic-metadata">

**Author:** [@jaiganesh06](https://discuss.elastic.co/u/jaiganesh06)\
**Replies:** 0\
**Last updated:** [September 19, 2019, 2:18pm UTC](https://discuss.elastic.co/t/failed-to-create-alias-doctype-html-public-ietf-dtd-html-2-0-en/200226 "2019-09-19T14:18:23Z")

</div>

Hi All, Version - 7.3.x I have ES behind Apache 2.4 reverse proxy. At first instance, when no index is created in ES, I am getting below error from filebeat 2019-09-19T19:35:53.281+0530 ERROR pipeline/output.go:100 Fa…

---

## [How can I have "auto" interval option for all the date type fields](https://discuss.elastic.co/t/how-can-i-have-auto-interval-option-for-all-the-date-type-fields/39484)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 5\
**Last updated:** [May 25, 2016, 7:07pm UTC](https://discuss.elastic.co/t/how-can-i-have-auto-interval-option-for-all-the-date-type-fields/39484 "2016-05-25T19:07:34Z")

</div>

I am using Kibana 4.0.1. I noticed that when I generate Date Histogram, the chosen date type fields common interval values only have the options like minutes, hourly, daily, etc. But when I choose the date type field …

---

## [Horizontal scaling of indexing](https://discuss.elastic.co/t/horizontal-scaling-of-indexing/31962)

<div class="topic-metadata">

**Author:** [@octal](https://discuss.elastic.co/u/octal)\
**Replies:** 7\
**Last updated:** [March 28, 2016, 3:57pm UTC](https://discuss.elastic.co/t/horizontal-scaling-of-indexing/31962 "2016-03-28T15:57:37Z")

</div>

Hey folks. We have been doing some ES benchmarks focused on indexing large amounts of small documents. These tests have been done on single nodes and with small clusters of just two or three nodes, and one thing we are a…

---

## [java.lang.IllegalArgumentException: unknown setting \[node.data\] please check that any required plugins are installed, or check the breaking changes documentation for removed settings](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-node-data-please-check-that-any-required-plugins-are-installed-or-check-the-breaking-changes-documentation-for-removed-settings/333558)

<div class="topic-metadata">

**Author:** [@tungnx1](https://discuss.elastic.co/u/tungnx1)\
**Replies:** 2\
**Last updated:** [May 17, 2023, 2:55am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-node-data-please-check-that-any-required-plugins-are-installed-or-check-the-breaking-changes-documentation-for-removed-settings/333558 "2023-05-17T02:55:06Z")

</div>

help !!! i setup Cluster Elasticsearch. After config file elasticsearch.yml node.name: es-data-1 node.data: true Log: java.lang.IllegalArgumentException: unknown setting \[node.data\] please check that any required pl…

---

## [Missing authentication credentials for REST request when using sniffing](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-when-using-sniffing/216114)

<div class="topic-metadata">

**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\
**Replies:** 1\
**Last updated:** [January 28, 2020, 4:47pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-when-using-sniffing/216114 "2020-01-28T16:47:31Z")

</div>

I just upgraded ELK from 7.1.0 to 7.5.0 and Kibana fails to start with {"type":"log","@timestamp":"2020-01-22T17:27:54Z","tags":\["error","elasticsearch","data"\],"pid":23107,"message":"Request error, retrying\\nGET http:/…

---

## [Elastic Cloud Enterprise 3.1.1 Security Update](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-1-1-security-update/315317)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [September 28, 2022, 4:15am UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-1-1-security-update/315317 "2022-09-28T04:15:37Z")

</div>

Elastic Cloud Enterprise Sensitive information disclosure issue (ESA-2022-11) A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in de…

---

## [Scaling my cluster back down](https://discuss.elastic.co/t/scaling-my-cluster-back-down/4701)

<div class="topic-metadata">

**Author:** [@Karl\_Baum](https://discuss.elastic.co/u/Karl_Baum)\
**Replies:** 6\
**Last updated:** [June 24, 2011, 4:32pm UTC](https://discuss.elastic.co/t/scaling-my-cluster-back-down/4701 "2011-06-24T16:32:03Z")

</div>

In an attempt to index 200 million documents as quickly as possible, i scaled my elasticsearch cluster up to 31 instances and my index consists of 20 shards and 1 replica. Everything is going well but my question is can…

---

## [APM Quick Start Produces "No data found"](https://discuss.elastic.co/t/apm-quick-start-produces-no-data-found/113624)

<div class="topic-metadata">

**Author:** [@paperreduction](https://discuss.elastic.co/u/paperreduction)\
**Replies:** 5\
**Last updated:** [January 3, 2018, 6:13pm UTC](https://discuss.elastic.co/t/apm-quick-start-produces-no-data-found/113624 "2018-01-03T18:13:09Z")

</div>

I tried to follow the "Just Four Lines of Code Will Get You Started" install directions here: https://www.elastic.co/solutions/apm But I've hit a roadblock in Kibana when I try to see the APM data. I get a "No data fou…

---

## [Kafka Input Tutorial for Logstash 5.1.1](https://discuss.elastic.co/t/kafka-input-tutorial-for-logstash-5-1-1/70762)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 5\
**Last updated:** [January 9, 2017, 5:30pm UTC](https://discuss.elastic.co/t/kafka-input-tutorial-for-logstash-5-1-1/70762 "2017-01-09T17:30:21Z")

</div>

Is there any third party documentation on how to use the Kafka plugin. Below is my logstash script input { kafka { bootstrap\_servers =\> \["192.168.31.55:9092,192.168.31.54:9092"\] topics =\> "test-beat33" } } fil…

---

## [Parse json Array input](https://discuss.elastic.co/t/parse-json-array-input/70194)

<div class="topic-metadata">

**Author:** [@mehdi-aouadi](https://discuss.elastic.co/u/mehdi-aouadi)\
**Replies:** 2\
**Last updated:** [January 2, 2017, 1:51pm UTC](https://discuss.elastic.co/t/parse-json-array-input/70194 "2017-01-02T13:51:03Z")

</div>

I am retrieving some json data from a REST API ussing the http\_poller input pluging : http\_poller { urls =\> { "myurl" =\> "https://myAPI" } interval =\> 30 type =\> "myType" add\_field =\> { "tag" =\>…

---

## [Tile Map not showing map - just blank background](https://discuss.elastic.co/t/tile-map-not-showing-map-just-blank-background/40260)

<div class="topic-metadata">

**Author:** [@LeeSyd](https://discuss.elastic.co/u/LeeSyd)\
**Replies:** 3\
**Last updated:** [February 11, 2016, 6:44pm UTC](https://discuss.elastic.co/t/tile-map-not-showing-map-just-blank-background/40260 "2016-02-11T18:44:09Z")

</div>

I'm trying to create my first tile map and have setup Logstash to pass in GeoIP data. Lat, Long and Location fields are showing within the Elasticsearch documents and I created a Tile Map. I am getting the markers show…

---

## [What "Cumulative Time" exactly means?](https://discuss.elastic.co/t/what-cumulative-time-exactly-means/299679)

<div class="topic-metadata">

**Author:** [@Seo](https://discuss.elastic.co/u/Seo)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 4:59pm UTC](https://discuss.elastic.co/t/what-cumulative-time-exactly-means/299679 "2022-03-15T16:59:40Z")

</div>

Hello, It's my first time using Elasticsearch, and I measured the ES performance with rally. I have some quick questions about interpreting the results. My purpose is to compare the performance of ES in different envir…

---

## [Multiple data nodes with different storage size](https://discuss.elastic.co/t/multiple-data-nodes-with-different-storage-size/244885)

<div class="topic-metadata">

**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\
**Replies:** 2\
**Last updated:** [August 13, 2020, 5:01pm UTC](https://discuss.elastic.co/t/multiple-data-nodes-with-different-storage-size/244885 "2020-08-13T17:01:32Z")

</div>

Hi, I will reach soon my maximum cluster data size. I would like to add a temporary data node until I received a new one. This node has less storage than others but I wonder what will happened if I add it into my clus…

---

## [Global ordinals performance and size on-heap](https://discuss.elastic.co/t/global-ordinals-performance-and-size-on-heap/158320)

<div class="topic-metadata">

**Author:** [@Itamar\_Syn\_Hershko](https://discuss.elastic.co/u/Itamar_Syn_Hershko)\
**Replies:** 8\
**Last updated:** [February 6, 2019, 7:10pm UTC](https://discuss.elastic.co/t/global-ordinals-performance-and-size-on-heap/158320 "2019-02-06T19:10:45Z")

</div>

Hi Elastic folks, We are seeing significant performance hit stemming from the usage of global ordinals (CPU, heap, GC). All background on our specific situation is below, points in question are: Loading of global ordi…

---

## [Curator issue - No actionable item](https://discuss.elastic.co/t/curator-issue-no-actionable-item/97234)

<div class="topic-metadata">

**Author:** [@xon](https://discuss.elastic.co/u/xon)\
**Replies:** 7\
**Last updated:** [August 17, 2017, 4:10pm UTC](https://discuss.elastic.co/t/curator-issue-no-actionable-item/97234 "2017-08-17T16:10:08Z")

</div>

Hi All, I am running ES 5.x.x and I am having the following action file actions: 1: action: snapshot description: \>- Snapshot logstash- prefixed indices older than 100 day (based on index creation\_date) with the d…

---

## [Bulk API update by query](https://discuss.elastic.co/t/bulk-api-update-by-query/93822)

<div class="topic-metadata">

**Author:** [@seanlaff](https://discuss.elastic.co/u/seanlaff)\
**Replies:** 1\
**Last updated:** [July 20, 2017, 8:57pm UTC](https://discuss.elastic.co/t/bulk-api-update-by-query/93822 "2017-07-20T20:57:38Z")

</div>

Is it possible to use update\_by\_query with the bulk api? I'm constantly polling data from mysql and updating the relevant ES documents- however since I don't match on the document IDs (I match on various keys of a doc…

---

## [Privileges to create index patterns](https://discuss.elastic.co/t/privileges-to-create-index-patterns/235109)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 8\
**Last updated:** [June 30, 2020, 11:01pm UTC](https://discuss.elastic.co/t/privileges-to-create-index-patterns/235109 "2020-06-30T23:01:00Z")

</div>

Hi, I have a role that I would like to give the option to create index patterns. How is that possible? The role already have to all (\*) indices in the cluster. What am I missing? Thanks!

---

## [For Windows how do we calculate required RAM for memory mapped files?](https://discuss.elastic.co/t/for-windows-how-do-we-calculate-required-ram-for-memory-mapped-files/26805)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 8\
**Last updated:** [August 12, 2015, 5:17pm UTC](https://discuss.elastic.co/t/for-windows-how-do-we-calculate-required-ram-for-memory-mapped-files/26805 "2015-08-12T17:17:05Z")

</div>

Using 1.6.0 So we tested both Linux and Windows and we noticed with Windows memory mapped files vs the Linux hybrid approach that windows uses full OS RAM. So if the box has 128GB, 30 allocated to Elasticsearch and 98G…

---

## [Query profile - too much time spent in build\_scorer?](https://discuss.elastic.co/t/query-profile-too-much-time-spent-in-build-scorer/199145)

<div class="topic-metadata">

**Author:** [@brianelliott](https://discuss.elastic.co/u/brianelliott)\
**Replies:** 4\
**Last updated:** [September 13, 2019, 4:52pm UTC](https://discuss.elastic.co/t/query-profile-too-much-time-spent-in-build-scorer/199145 "2019-09-13T16:52:40Z")

</div>

Hello, I am using the profile API to try and debug a slow query (3-7s). From what I can tell, the operation to build scorers for the geo\_shapes in the query are particularly slow and nearly all of the query time is spe…

---

## [Introducing mysqlbeat](https://discuss.elastic.co/t/introducing-mysqlbeat/48890)

<div class="topic-metadata">

**Author:** [@adi.b](https://discuss.elastic.co/u/adi.b)\
**Replies:** 5\
**Last updated:** [May 2, 2016, 9:25am UTC](https://discuss.elastic.co/t/introducing-mysqlbeat/48890 "2016-05-02T09:25:17Z")

</div>

Hi Guys, I looked for something to expand the MySQL packetbeat dashboard with no luck so I decided to do it myself :grin: I wrote a new beat that can connect to a MySQL server and ship any result from the queries define…

---

## [Filebeat on Windows xp forcibly closed by the remote host](https://discuss.elastic.co/t/filebeat-on-windows-xp-forcibly-closed-by-the-remote-host/58270)

<div class="topic-metadata">

**Author:** [@pjhu](https://discuss.elastic.co/u/pjhu)\
**Replies:** 4\
**Last updated:** [August 19, 2016, 1:52am UTC](https://discuss.elastic.co/t/filebeat-on-windows-xp-forcibly-closed-by-the-remote-host/58270 "2016-08-19T01:52:07Z")

</div>

I am using Filebeat on windows xp ship log to logstash Filebeat DEBUG log 2016-08-17T19:34:31+08:00 DBG output worker: publish 1 events 2016-08-17T19:34:31+08:00 DBG Try to publish 1 events to logstash with window s…

---

## [log4j:WARN No appenders could be found for logger](https://discuss.elastic.co/t/log4j-warn-no-appenders-could-be-found-for-logger/44578)

<div class="topic-metadata">

**Author:** [@steveh](https://discuss.elastic.co/u/steveh)\
**Replies:** 4\
**Last updated:** [March 17, 2016, 8:23pm UTC](https://discuss.elastic.co/t/log4j-warn-no-appenders-could-be-found-for-logger/44578 "2016-03-17T20:23:12Z")

</div>

So. I finally decided it was time to set up my production server. New install using yum as per the instructions. I did an uninstall and re-install just now to make sure my fiddling hadn't messed things up. Version 2.2.…

---

## [How to enable the security option on kibana under management](https://discuss.elastic.co/t/how-to-enable-the-security-option-on-kibana-under-management/159750)

<div class="topic-metadata">

**Author:** [@karthick\_tgi](https://discuss.elastic.co/u/karthick_tgi)\
**Replies:** 7\
**Last updated:** [December 11, 2018, 5:47am UTC](https://discuss.elastic.co/t/how-to-enable-the-security-option-on-kibana-under-management/159750 "2018-12-11T05:47:48Z")

</div>

Hi Team, I am using version details as ., ElasticSearch - 6.4.2 and Kibana - 6.4.2 Unable to see the security option on kibana under management which allows us to create users and roles How is possible to enable such …

---

## [Inner\_hits in has parent giving error-"Couldn't find nested source for path currentCompany"](https://discuss.elastic.co/t/inner-hits-in-has-parent-giving-error-couldnt-find-nested-source-for-path-currentcompany/318232)

<div class="topic-metadata">

**Author:** [@Venkat\_Koushik](https://discuss.elastic.co/u/Venkat_Koushik)\
**Replies:** 0\
**Last updated:** [November 5, 2022, 10:18am UTC](https://discuss.elastic.co/t/inner-hits-in-has-parent-giving-error-couldnt-find-nested-source-for-path-currentcompany/318232 "2022-11-05T10:18:28Z")

</div>

Hello We are migrating to Elasticsearch 8 and when we are trying to fetch the data of parent document inner hits using has parent query it is returning exception but the reverse scenario is working good.Elasticsearch re…

---

## [Field\_value\_factor on a nested field value](https://discuss.elastic.co/t/field-value-factor-on-a-nested-field-value/29928)

<div class="topic-metadata">

**Author:** [@el\_cristobal](https://discuss.elastic.co/u/el_cristobal)\
**Replies:** 1\
**Last updated:** [September 24, 2015, 10:24pm UTC](https://discuss.elastic.co/t/field-value-factor-on-a-nested-field-value/29928 "2015-09-24T22:24:35Z")

</div>

Hi - I have an index with a nested array of objects that represent how tenants (in a multitenant app) relate to each item, and I want to boost (I'm thinking via field\_value\_factor?) using values in those fields. So, exam…

---

## [How many clauses can go in a bool filter by default?](https://discuss.elastic.co/t/how-many-clauses-can-go-in-a-bool-filter-by-default/62732)

<div class="topic-metadata">

**Author:** [@afaraone](https://discuss.elastic.co/u/afaraone)\
**Replies:** 3\
**Last updated:** [October 11, 2016, 5:42pm UTC](https://discuss.elastic.co/t/how-many-clauses-can-go-in-a-bool-filter-by-default/62732 "2016-10-11T17:42:06Z")

</div>

^ Trying to track down a bug and i think it's related. I have a query that may be creating up to 2200 clauses within the "should" block of a bool query.

---

## [Elasticsearch unable to find scripts in the script folder](https://discuss.elastic.co/t/elasticsearch-unable-to-find-scripts-in-the-script-folder/29889)

<div class="topic-metadata">

**Author:** [@vaibhavy](https://discuss.elastic.co/u/vaibhavy)\
**Replies:** 3\
**Last updated:** [January 14, 2016, 4:03pm UTC](https://discuss.elastic.co/t/elasticsearch-unable-to-find-scripts-in-the-script-folder/29889 "2016-01-14T16:03:11Z")

</div>

Hi, I am trying to do scripted metric aggregation by following the example given at: https://www.elastic.co/guide/en/elasticsearch/reference/2.0/search-aggregations-metrics-scripted-metric-aggregation.html The issue I …

---

## [Elasticsearch - Java insufficient memory](https://discuss.elastic.co/t/elasticsearch-java-insufficient-memory/194655)

<div class="topic-metadata">

**Author:** [@David04](https://discuss.elastic.co/u/David04)\
**Replies:** 2\
**Last updated:** [August 9, 2019, 4:55pm UTC](https://discuss.elastic.co/t/elasticsearch-java-insufficient-memory/194655 "2019-08-09T16:55:28Z")

</div>

Hello, When I run "/usr/share/elasticsearch/bin/elasticsearch --version" I get the following Java error: Java HotSpot(TM) 64-Bit Server VM warning: INFO: os::commit\_memory(0x0000000614cc0000, 7167279104, 0) failed; er…

---

## [Unable to access Kibana with "License is not available."](https://discuss.elastic.co/t/unable-to-access-kibana-with-license-is-not-available/274175)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 5\
**Last updated:** [June 3, 2021, 8:52am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-with-license-is-not-available/274175 "2021-06-03T08:52:11Z")

</div>

Kibana, which was working fine until now, can no longer be accessed. The cause is that I added x-pack configuration to elasticsearch in order to introduce Workplace Search. Using the basic license of x-pack, I want to …

---

## [Spark RDD.saveToES](https://discuss.elastic.co/t/spark-rdd-savetoes/26527)

<div class="topic-metadata">

**Author:** [@pferrel](https://discuss.elastic.co/u/pferrel)\
**Replies:** 3\
**Last updated:** [August 18, 2015, 9:39am UTC](https://discuss.elastic.co/t/spark-rdd-savetoes/26527 "2015-08-18T09:39:23Z")

</div>

The Spark writing of an index works well if you construct the entire dataset with all fields before you write using rdd.saveToES. Is there a way to use this mechanism for upserting to change an existing field? I want to …

---

## [ILM not executing DELETE phase](https://discuss.elastic.co/t/ilm-not-executing-delete-phase/254776)

<div class="topic-metadata">

**Author:** [@radw](https://discuss.elastic.co/u/radw)\
**Replies:** 1\
**Last updated:** [November 9, 2020, 4:38pm UTC](https://discuss.elastic.co/t/ilm-not-executing-delete-phase/254776 "2020-11-09T16:38:36Z")

</div>

Hi all! I'm using ELK stack v7.6.2 and v7.4.0. The same behaviour is happening on both versions. I've created an ILM policy together with timeseries indices and a template for an index. My ILM is rolling over my index…

---

## [Date\_time\_parse\_exception - Elasticsearch version 7.3.2](https://discuss.elastic.co/t/date-time-parse-exception-elasticsearch-version-7-3-2/202652)

<div class="topic-metadata">

**Author:** [@lmariselvam](https://discuss.elastic.co/u/lmariselvam)\
**Replies:** 4\
**Last updated:** [October 8, 2019, 4:13pm UTC](https://discuss.elastic.co/t/date-time-parse-exception-elasticsearch-version-7-3-2/202652 "2019-10-08T16:13:41Z")

</div>

I have the mapping defined for "timestamp" field on ES as follows: "timestamp": { "type": "date", "format": "yyyy-MM-dd HH:mm:ss Z" } and I'm trying to index the following document, { "account":"170/170/78202", "times…

---

## [Elasticsearch disaster recovery setup](https://discuss.elastic.co/t/elasticsearch-disaster-recovery-setup/152646)

<div class="topic-metadata">

**Author:** [@flalar](https://discuss.elastic.co/u/flalar)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 7:31am UTC](https://discuss.elastic.co/t/elasticsearch-disaster-recovery-setup/152646 "2018-10-17T07:31:00Z")

</div>

We’re running our ES cluster on a local VMware setup, which works fine. Now that this solution is becoming increasingly business critical. We’re looking to also include this in our disaster recovery as a service setup. …

---

## [Migrate Elasticsearch Java API to version 5.\* in Spring IO Platform application](https://discuss.elastic.co/t/migrate-elasticsearch-java-api-to-version-5-in-spring-io-platform-application/72661)

<div class="topic-metadata">

**Author:** [@kjussakov](https://discuss.elastic.co/u/kjussakov)\
**Replies:** 0\
**Last updated:** [January 24, 2017, 3:41pm UTC](https://discuss.elastic.co/t/migrate-elasticsearch-java-api-to-version-5-in-spring-io-platform-application/72661 "2017-01-24T15:41:36Z")

</div>

Hi all, I just want to share my experience migrating a Spring IO app to Elasticsearch version 5.1.1 and maybe get some ideas how to do things in a better way. The application is using Spring Platform version Athens-SR…

---

## [Wildcards search in exact phrase in query\_string search](https://discuss.elastic.co/t/wildcards-search-in-exact-phrase-in-query-string-search/13883)

<div class="topic-metadata">

**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\
**Replies:** 2\
**Last updated:** [October 14, 2013, 12:02pm UTC](https://discuss.elastic.co/t/wildcards-search-in-exact-phrase-in-query-string-search/13883 "2013-10-14T12:02:39Z")

</div>

Hi All, We would want to include a wildcards in a query\_string query when looking for a phrase. When we search with following query: { "query":{ "query\_string":{ "default\_operator" : "AND" "analyze\_…

---

## [Update/rename nested field](https://discuss.elastic.co/t/update-rename-nested-field/198057)

<div class="topic-metadata">

**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\
**Replies:** 3\
**Last updated:** [September 4, 2019, 3:08pm UTC](https://discuss.elastic.co/t/update-rename-nested-field/198057 "2019-09-04T15:08:14Z")

</div>

Hello All, What is the best way to rename a nested field? I would like to do the following: if \[filed\]\[subfield\] rename it to \[field\] Would it make sense to add a temporary field with the value of the original, drop…

---

## [Kibana server is not ready yet 에러가 뜹니다.](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/243524)

<div class="topic-metadata">

**Author:** [@111372](https://discuss.elastic.co/u/111372)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 8:39am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/243524 "2020-08-05T08:39:49Z")

</div>

설정은 아래와 같습니다. etc/elasticsearch/elasticsearch.yml cluster.name: test1 node.name: ${HOSTNAME} path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch network.host : 0.0.0.0 http.port: 9200 cluster.init…

---

## [Change default time range in Kibana 6.3](https://discuss.elastic.co/t/change-default-time-range-in-kibana-6-3/144293)

<div class="topic-metadata">

**Author:** [@koko191](https://discuss.elastic.co/u/koko191)\
**Replies:** 1\
**Last updated:** [August 14, 2018, 5:21pm UTC](https://discuss.elastic.co/t/change-default-time-range-in-kibana-6-3/144293 "2018-08-14T17:21:40Z")

</div>

The workaround I found at Change the default time range? doesn't work for Kibana 6.3.

---

## [Searching for multiple values in array using wildcards](https://discuss.elastic.co/t/searching-for-multiple-values-in-array-using-wildcards/117349)

<div class="topic-metadata">

**Author:** [@arieltk](https://discuss.elastic.co/u/arieltk)\
**Replies:** 2\
**Last updated:** [January 28, 2018, 2:55pm UTC](https://discuss.elastic.co/t/searching-for-multiple-values-in-array-using-wildcards/117349 "2018-01-28T14:55:58Z")

</div>

Hi all, I have an array with several values. For example, in these two documents I have the following arrays: 1 - tags: \["Apple TV", "TV"\] 2 - tags: \["Apple", "TV"\] If I want to search for "Apple TV", I can send a qu…

---

## [Filebeat scan frequency](https://discuss.elastic.co/t/filebeat-scan-frequency/251138)

<div class="topic-metadata">

**Author:** [@gizem](https://discuss.elastic.co/u/gizem)\
**Replies:** 3\
**Last updated:** [October 19, 2020, 12:11pm UTC](https://discuss.elastic.co/t/filebeat-scan-frequency/251138 "2020-10-19T12:11:09Z")

</div>

Hi, In filebeat configuration file, there is scan\_frequency option. But I am confused about is scan frequency define the scanning new files in the path or scanning updates(new lines) in a file. If the scan frequency ch…

---

## [How to check Filebeat is running properly](https://discuss.elastic.co/t/how-to-check-filebeat-is-running-properly/199024)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 3\
**Last updated:** [September 13, 2019, 9:22pm UTC](https://discuss.elastic.co/t/how-to-check-filebeat-is-running-properly/199024 "2019-09-13T21:22:22Z")

</div>

Hi I notice that after I ran the service for logstash the run time will restart some times after a few second. And there are no logs recorded on the /var/log/logstash. If is properly running, will it produce log files a…

---

## [Change url base path in browser URL from](https://discuss.elastic.co/t/change-url-base-path-in-browser-url-from/174773)

<div class="topic-metadata">

**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\
**Replies:** 5\
**Last updated:** [April 3, 2019, 11:21pm UTC](https://discuss.elastic.co/t/change-url-base-path-in-browser-url-from/174773 "2019-04-03T23:21:27Z")

</div>

hi team, is it possible to change "kibana" in "http://myurl:5601/app/kibana" when entering to the kibana?

---

## [Elastic Stack on OpenShift](https://discuss.elastic.co/t/elastic-stack-on-openshift/190490)

<div class="topic-metadata">

**Author:** [@vivek14](https://discuss.elastic.co/u/vivek14)\
**Replies:** 5\
**Last updated:** [July 16, 2019, 6:12am UTC](https://discuss.elastic.co/t/elastic-stack-on-openshift/190490 "2019-07-16T06:12:34Z")

</div>

Hi, I want to install the Elastic Stack on OpenShift Container Platform. To start with Elasticsearch, I deployed the official elasticsearch:7.2.0 image from docker hub on OCP but the pod does not start successfully. G…

---

## [Bucket query results | top hits performance](https://discuss.elastic.co/t/bucket-query-results-top-hits-performance/21511)

<div class="topic-metadata">

**Author:** [@Michael\_Irani](https://discuss.elastic.co/u/Michael_Irani)\
**Replies:** 7\
**Last updated:** [January 8, 2015, 10:53am UTC](https://discuss.elastic.co/t/bucket-query-results-top-hits-performance/21511 "2015-01-08T10:53:21Z")

</div>

Hello, I'm working on a corpus of size approximately 10 million documents. The issue I'm running into right now is that the top scoring documents that come back from my query are essentially all the same result. I'm…

---

## [Send Kibana Dashboard Screenshot as HTML Email](https://discuss.elastic.co/t/send-kibana-dashboard-screenshot-as-html-email/43730)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 5\
**Last updated:** [March 9, 2016, 8:54pm UTC](https://discuss.elastic.co/t/send-kibana-dashboard-screenshot-as-html-email/43730 "2016-03-09T20:54:13Z")

</div>

I have a use case which is to have a watcher check for things to alert and upon alert it will display the details on Kibana and a screenshot of the kibana dashboard will be automatically captured and sent to a user via h…

[Previous page](https://discuss.elastic.co/top.md?page=424&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=426&per_page=50&period=all)
