# Top

**URL:** https://discuss.elastic.co/top.md?page=427&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 428

---

## [K8 pod -\> stdout -\>?](https://discuss.elastic.co/t/k8-pod-stdout/158604)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 5\
**Last updated:** [December 27, 2018, 6:12pm UTC](https://discuss.elastic.co/t/k8-pod-stdout/158604 "2018-12-27T18:12:51Z")

</div>

I have a simple deployment to a k8 cluster. One pod sending info to stdout and I'd like to pass it along to elastic. (I can see the output in the k8 log). K8 cluster in question has both metricbeat and filebeat daemonse…

---

## [Searching for non English text](https://discuss.elastic.co/t/searching-for-non-english-text/143349)

<div class="topic-metadata">

**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\
**Replies:** 2\
**Last updated:** [August 7, 2018, 5:46pm UTC](https://discuss.elastic.co/t/searching-for-non-english-text/143349 "2018-08-07T17:46:18Z")

</div>

Designed and implemented full text search, proximity search, match, match phrase, MLT, wildcard for english language. Now i am trying to identify what all the features will be missed when we have other languages like fr…

---

## [\[warning\]Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/warning-error-request-timeout-after-30000ms/240199)

<div class="topic-metadata">

**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\
**Replies:** 3\
**Last updated:** [July 7, 2020, 10:08pm UTC](https://discuss.elastic.co/t/warning-error-request-timeout-after-30000ms/240199 "2020-07-07T22:08:37Z")

</div>

Hi, Can Someone help me with this issue, I have been trying to fix it from the last 24hours. Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms ➜ bin kibana log \[16:52:47.938\] \[wa…

---

## [Uptime: \`Error GraphQL error: \[too\_many\_buckets\_exception\] Trying to create too many buckets. Must be less than or equal to: \[10000\] but was \[10001\]\`](https://discuss.elastic.co/t/uptime-error-graphql-error-too-many-buckets-exception-trying-to-create-too-many-buckets-must-be-less-than-or-equal-to-10000-but-was-10001/179432)

<div class="topic-metadata">

**Author:** [@phillhocking](https://discuss.elastic.co/u/phillhocking)\
**Replies:** 8\
**Last updated:** [May 3, 2019, 11:48pm UTC](https://discuss.elastic.co/t/uptime-error-graphql-error-too-many-buckets-exception-trying-to-create-too-many-buckets-must-be-less-than-or-equal-to-10000-but-was-10001/179432 "2019-05-03T23:48:20Z")

</div>

Hey Elastic friends! I recently set up my Elastic cluster with the new 7.0.0 for the purpose of using the Uptime visualizations. I got everything working well, but now when I look at the Uptime tab I receive this error u…

---

## [Too many Lucene merge threads while indexing](https://discuss.elastic.co/t/too-many-lucene-merge-threads-while-indexing/186822)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 6\
**Last updated:** [June 21, 2019, 10:55am UTC](https://discuss.elastic.co/t/too-many-lucene-merge-threads-while-indexing/186822 "2019-06-21T10:55:16Z")

</div>

We are doing indexing on 2 indices with one shard and a replica each. Avg size of document is 15Kb. Total documents=35million ES version 7.1.1 2 data nodes, 3 master and 2 coord nodes. refresh\_interval is disabled. …

---

## [How do you get all aliases (and their respective indices) in ES on 2.X?](https://discuss.elastic.co/t/how-do-you-get-all-aliases-and-their-respective-indices-in-es-on-2-x/53824)

<div class="topic-metadata">

**Author:** [@Shadoninja](https://discuss.elastic.co/u/Shadoninja)\
**Replies:** 6\
**Last updated:** [June 27, 2016, 6:51pm UTC](https://discuss.elastic.co/t/how-do-you-get-all-aliases-and-their-respective-indices-in-es-on-2-x/53824 "2016-06-27T18:51:16Z")

</div>

I need to be able to query all of the aliases in my ES database. I can easily do this through the REST API using this: curl 'localhost:9200/\_cat/aliases?v' This is the code that was used to pull all aliases in our …

---

## [More Examples of 'search\_after'?](https://discuss.elastic.co/t/more-examples-of-search-after/171553)

<div class="topic-metadata">

**Author:** [@avocado](https://discuss.elastic.co/u/avocado)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 8:33pm UTC](https://discuss.elastic.co/t/more-examples-of-search-after/171553 "2019-03-08T20:33:17Z")

</div>

Please excuse me for being obtuse, but the explanation of how the 'search\_after' query works is completely confusing to me https://www.elastic.co/guide/en/elasticsearch/reference/current/search-request-search-after.html …

---

## [Match log.file.path in Grok](https://discuss.elastic.co/t/match-log-file-path-in-grok/177682)

<div class="topic-metadata">

**Author:** [@Gelinski](https://discuss.elastic.co/u/Gelinski)\
**Replies:** 2\
**Last updated:** [April 20, 2019, 4:31pm UTC](https://discuss.elastic.co/t/match-log-file-path-in-grok/177682 "2019-04-20T16:31:48Z")

</div>

How can i get info from log.file.path on grok to input in other custom field? log.file.path /app/prd1bea/logs/domselftst1prd/mng7node/access.log Grok (don't working): match =\> { "log.file.path" =\> "%{GREEDYDATA:teste}…

---

## [Upgrade時の注意事項について](https://discuss.elastic.co/t/upgrade/140421)

<div class="topic-metadata">

**Author:** [@yamamotoh](https://discuss.elastic.co/u/yamamotoh)\
**Replies:** 8\
**Last updated:** [July 31, 2018, 4:23am UTC](https://discuss.elastic.co/t/upgrade/140421 "2018-07-31T04:23:12Z")

</div>

最近触り始めた初心者です。 v6.3.0からv6.3.1にUpgradeする際に、何も考えずapt upgradeもしくはyum updateでインストールしたところ、うまくデータ移行がなされず再インストールすることとなってしまいました。 次回に活かしたいため、Upgrade時の注意点などありましたらご教授ください。 サービスは停止した状態でUpgradeしたほうがよいなど。 よろしくお願いします。

---

## [How to understand "registry" file in filebeat](https://discuss.elastic.co/t/how-to-understand-registry-file-in-filebeat/157271)

<div class="topic-metadata">

**Author:** [@luxiaoxun](https://discuss.elastic.co/u/luxiaoxun)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 2:36am UTC](https://discuss.elastic.co/t/how-to-understand-registry-file-in-filebeat/157271 "2018-11-21T02:36:02Z")

</div>

I know that "registry" is for "tracking files that filebeat is harvesting or is harvested", but for details, how to understand it. Take following as example, what does "timestamp" and "ttl" mean ? { "source": "D:\\aaaa…

---

## [Elasticsearch 6.6.0 docker container Error: failed to read \[id:143, file:/usr/share/elasticsearch/data/nodes/0/\_state/global-143.st\]](https://discuss.elastic.co/t/elasticsearch-6-6-0-docker-container-error-failed-to-read-id-143-file-usr-share-elasticsearch-data-nodes-0-state-global-143-st/187203)

<div class="topic-metadata">

**Author:** [@ShwetaP](https://discuss.elastic.co/u/ShwetaP)\
**Replies:** 6\
**Last updated:** [July 10, 2019, 8:08am UTC](https://discuss.elastic.co/t/elasticsearch-6-6-0-docker-container-error-failed-to-read-id-143-file-usr-share-elasticsearch-data-nodes-0-state-global-143-st/187203 "2019-07-10T08:08:13Z")

</div>

I tried upgrading elasticsearch from 6.6.0 to 7.1.1. Due to some issues I reverted back to 6.6.0 and now the elasticsearch container is having issues in starting up. Any help in troubleshooting this would be appreciated…

---

## [Kibana: command not found](https://discuss.elastic.co/t/kibana-command-not-found/56578)

<div class="topic-metadata">

**Author:** [@goofansu](https://discuss.elastic.co/u/goofansu)\
**Replies:** 6\
**Last updated:** [July 31, 2016, 5:23pm UTC](https://discuss.elastic.co/t/kibana-command-not-found/56578 "2016-07-31T17:23:32Z")

</div>

I installed kibana with apt-get in ubuntu 14.04 Then I want to install sense, but there is no kibana command. Where is it installed?

---

## [Config: Request failed with status code: 403](https://discuss.elastic.co/t/config-request-failed-with-status-code-403/151673)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 10:39am UTC](https://discuss.elastic.co/t/config-request-failed-with-status-code-403/151673 "2018-10-11T10:39:25Z")

</div>

Hi, While trying to define the default index I get the following error in kibana: Config: Request failed with status code: 403 Error: Request failed with status code: 403 at \_callee$ (http://192.168.96.178/bundles/co…

---

## [Count bytes by user](https://discuss.elastic.co/t/count-bytes-by-user/47968)

<div class="topic-metadata">

**Author:** [@Andre\_de\_Martini](https://discuss.elastic.co/u/Andre_de_Martini)\
**Replies:** 5\
**Last updated:** [April 25, 2016, 4:34pm UTC](https://discuss.elastic.co/t/count-bytes-by-user/47968 "2016-04-25T16:34:18Z")

</div>

Hi guys, I am new to kibana and I am having some trouble with a new dashboard. What i need to create: A dashboard showing the top 10 data received by user (under a chosen period). The problem is that i cant do math w…

---

## [Customize Java security manager settings?](https://discuss.elastic.co/t/customize-java-security-manager-settings/72255)

<div class="topic-metadata">

**Author:** [@Li\_Xu](https://discuss.elastic.co/u/Li_Xu)\
**Replies:** 6\
**Last updated:** [January 20, 2017, 8:24am UTC](https://discuss.elastic.co/t/customize-java-security-manager-settings/72255 "2017-01-20T08:24:59Z")

</div>

I'l writing a plugin that calls Jackson to deserialize a json string into a Java object. I understand that in ES 5+ access is pretty much locked down. So is there a way to enable Jackson to do its thing? I'm getting this…

---

## [How to search for special characters](https://discuss.elastic.co/t/how-to-search-for-special-characters/41453)

<div class="topic-metadata">

**Author:** [@Harish\_Ramanathan](https://discuss.elastic.co/u/Harish_Ramanathan)\
**Replies:** 1\
**Last updated:** [February 11, 2016, 3:20pm UTC](https://discuss.elastic.co/t/how-to-search-for-special-characters/41453 "2016-02-11T15:20:19Z")

</div>

I am using Elasticsearch 2.1.1 and have fields with special characters - $, %, ., :, ;, @,&,+,- I tried using bool, match, match phrase, query string, multi match query. None of the queries return back the documents cont…

---

## [Not enough master nodes discovered during pinging (found \[\[\]\], but needed \[1\]), pinging again](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging-found-but-needed-1-pinging-again/152043)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 4\
**Last updated:** [October 12, 2018, 11:05am UTC](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging-found-but-needed-1-pinging-again/152043 "2018-10-12T11:05:51Z")

</div>

HI Team, I have 5 server and i want to form cluster. Initially i'm working around 2 server cluster formation. my idea is 1 master and 4 data node. when i try to form cluster formation between 2 server i'm getting mast…

---

## [Ingest-attachment using CBOR example](https://discuss.elastic.co/t/ingest-attachment-using-cbor-example/79626)

<div class="topic-metadata">

**Author:** [@markbaumgarten](https://discuss.elastic.co/u/markbaumgarten)\
**Replies:** 4\
**Last updated:** [March 24, 2017, 10:46am UTC](https://discuss.elastic.co/t/ingest-attachment-using-cbor-example/79626 "2017-03-24T10:46:57Z")

</div>

Hello, sorry for repeating this question which IMO was left unanswered...: https://discuss.elastic.co/t/example-for-ingest-attachment-plug-in-with-cbor-format-for-indexing-documents/66443 I too would really like to see…

---

## [Filebeat Rabbitmq plugin](https://discuss.elastic.co/t/filebeat-rabbitmq-plugin/55189)

<div class="topic-metadata">

**Author:** [@Dan2](https://discuss.elastic.co/u/Dan2)\
**Replies:** 3\
**Last updated:** [July 11, 2016, 12:37pm UTC](https://discuss.elastic.co/t/filebeat-rabbitmq-plugin/55189 "2016-07-11T12:37:57Z")

</div>

Hi, I'm trying to configure Filebeat to send logs to rabbitmq. I saw there is a Rabbitmq plugin for Filebeat but I can't figure out how to integrate it. Is there a guide on how to integrate/install a Filebeat plugin? t…

---

## [How do we replace OLAP in elastic search?](https://discuss.elastic.co/t/how-do-we-replace-olap-in-elastic-search/46810)

<div class="topic-metadata">

**Author:** [@bujjibabup](https://discuss.elastic.co/u/bujjibabup)\
**Replies:** 0\
**Last updated:** [April 8, 2016, 1:32pm UTC](https://discuss.elastic.co/t/how-do-we-replace-olap-in-elastic-search/46810 "2016-04-08T13:32:00Z")

</div>

Dear All, As we are processing 10 millions of data every day and our system is going to support 4 years of data. Where business will do pivoting of fields using specific metrics. And they will see the reports in graphs…

---

## [Parse the logs with FileBeat-ElasticSearch and Display on Kibana](https://discuss.elastic.co/t/parse-the-logs-with-filebeat-elasticsearch-and-display-on-kibana/107802)

<div class="topic-metadata">

**Author:** [@Shreyas\_Gade](https://discuss.elastic.co/u/Shreyas_Gade)\
**Replies:** 7\
**Last updated:** [November 16, 2017, 1:45pm UTC](https://discuss.elastic.co/t/parse-the-logs-with-filebeat-elasticsearch-and-display-on-kibana/107802 "2017-11-16T13:45:25Z")

</div>

I'm very new to the forums of Elastic. I have gone through these tools and few videos some hours ago and setup Kibana, Logstash and Elasticsearch on my local windows machine (on a private network). I managed to parse th…

---

## [How to recover deleted documents in Elasticsearch?](https://discuss.elastic.co/t/how-to-recover-deleted-documents-in-elasticsearch/103913)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 2\
**Last updated:** [October 13, 2017, 2:49pm UTC](https://discuss.elastic.co/t/how-to-recover-deleted-documents-in-elasticsearch/103913 "2017-10-13T14:49:01Z")

</div>

Hi, Is there anyway to recover deleted documents in ES index? Thanks

---

## [Write queue increasing](https://discuss.elastic.co/t/write-queue-increasing/302153)

<div class="topic-metadata">

**Author:** [@elephant](https://discuss.elastic.co/u/elephant)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 7:45pm UTC](https://discuss.elastic.co/t/write-queue-increasing/302153 "2022-04-11T19:45:17Z")

</div>

Hi, We have upgraded our cluster to the latest Elastic 8 version but have hit a strange bug twice in two weeks; The write queue is filling up and write tasks are very slow to complete. This monitoring screenshots clear…

---

## [Elasticsearch Indexing Rate](https://discuss.elastic.co/t/elasticsearch-indexing-rate/60732)

<div class="topic-metadata">

**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\
**Replies:** 8\
**Last updated:** [September 21, 2016, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-rate/60732 "2016-09-21T07:43:58Z")

</div>

I am trying to do some performance tuning on my environment. Some initial details: 5 Node cluster - VMs Each VM has 8 cores Each VM has 16GB of RAM One Elasticsearch node per VM. Each ES node has 8GB of RAM allocated…

---

## [How to filter nested objects in nested aggregation](https://discuss.elastic.co/t/how-to-filter-nested-objects-in-nested-aggregation/296669)

<div class="topic-metadata">

**Author:** [@jstone\_b3insight](https://discuss.elastic.co/u/jstone_b3insight)\
**Replies:** 2\
**Last updated:** [February 9, 2022, 2:25pm UTC](https://discuss.elastic.co/t/how-to-filter-nested-objects-in-nested-aggregation/296669 "2022-02-09T14:25:39Z")

</div>

Hello, I am having a minor issue with an "aggregation" query I have been using for a couple years. My scenario: I have an index of documents that have a "searchByName" nested property. The "searchByName" property is …

---

## [Nodes, Output and Sync](https://discuss.elastic.co/t/nodes-output-and-sync/87105)

<div class="topic-metadata">

**Author:** [@setshocker](https://discuss.elastic.co/u/setshocker)\
**Replies:** 4\
**Last updated:** [May 25, 2017, 4:08pm UTC](https://discuss.elastic.co/t/nodes-output-and-sync/87105 "2017-05-25T16:08:30Z")

</div>

Hi everyone, In my deployment I have a cluster with two machines with an Elasticsearch installation. I have created one node on every machine so, at the end I have one cluster with two nodes and 10 shards (5 primary an…

---

## [Grok terminating Logstash 5.0](https://discuss.elastic.co/t/grok-terminating-logstash-5-0/64307)

<div class="topic-metadata">

**Author:** [@sjivan](https://discuss.elastic.co/u/sjivan)\
**Replies:** 4\
**Last updated:** [November 24, 2016, 10:02pm UTC](https://discuss.elastic.co/t/grok-terminating-logstash-5-0/64307 "2016-11-24T22:02:45Z")

</div>

Hi, I'm upgrading from LS 2.2.2 to LS 5.0 and as part of the upgrade moved the multiline filter to the file input codec but the grok filter remained unchanged. The grok pattern worked fine with LS 2.2.2 however when run…

---

## [Setting \[index.lifecycle.rollover\_alias\] for index \[y\] is empty or not defined](https://discuss.elastic.co/t/setting-index-lifecycle-rollover-alias-for-index-y-is-empty-or-not-defined/289053)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 1\
**Last updated:** [November 16, 2021, 7:13am UTC](https://discuss.elastic.co/t/setting-index-lifecycle-rollover-alias-for-index-y-is-empty-or-not-defined/289053 "2021-11-16T07:13:12Z")

</div>

I have read the documentation, and the solution to this error is that I need to set an alias for the index. But this index is at the system level, that is, I did not build it. Why do I need to manually set aliases? Sett…

---

## [Grok patterns for BIND DNS server](https://discuss.elastic.co/t/grok-patterns-for-bind-dns-server/48203)

<div class="topic-metadata">

**Author:** [@icb](https://discuss.elastic.co/u/icb)\
**Replies:** 4\
**Last updated:** [April 24, 2016, 6:44pm UTC](https://discuss.elastic.co/t/grok-patterns-for-bind-dns-server/48203 "2016-04-24T18:44:54Z")

</div>

Does anyone have a set of good grok patterns for the BIND DNS server query logs? The messages I'm interested in look like this: Apr 22 15:40:26 ns.example.com named\[1351\]: queries: info: client 192.0.2.215#53591: query…

---

## [Security\_exception: action \[indices:admin/create\] is unauthorized for user \[elasticsearch\] with effective roles \[superuser\] on restricted indices \[.kibana\_analytics\_8.13.4\_001\], this action is granted by the index privileges \[create\_index,manage,all\]'](https://discuss.elastic.co/t/security-exception-action-indices-admin-create-is-unauthorized-for-user-elasticsearch-with-effective-roles-superuser-on-restricted-indices-kibana-analytics-8-13-4-001-this-action-is-granted-by-the-index-privileges-create-index-manage-all/363865)

<div class="topic-metadata">

**Author:** [@ppagano91](https://discuss.elastic.co/u/ppagano91)\
**Replies:** 2\
**Last updated:** [August 1, 2024, 2:29pm UTC](https://discuss.elastic.co/t/security-exception-action-indices-admin-create-is-unauthorized-for-user-elasticsearch-with-effective-roles-superuser-on-restricted-indices-kibana-analytics-8-13-4-001-this-action-is-granted-by-the-index-privileges-create-index-manage-all/363865 "2024-08-01T14:29:54Z")

</div>

Hi there, I have been looking at similar topics, but I haven't been able to resolve this error. First of all, I wanted to mention that I faced some problems when I installed Elasticsearch, because the default user "elas…

---

## [Elasticsearch 5.3 java api appends ^1.0 as field weight for multi\_match query, cannot override it](https://discuss.elastic.co/t/elasticsearch-5-3-java-api-appends-1-0-as-field-weight-for-multi-match-query-cannot-override-it/82233)

<div class="topic-metadata">

**Author:** [@saurabh.jaluka](https://discuss.elastic.co/u/saurabh.jaluka)\
**Replies:** 1\
**Last updated:** [April 13, 2017, 12:33am UTC](https://discuss.elastic.co/t/elasticsearch-5-3-java-api-appends-1-0-as-field-weight-for-multi-match-query-cannot-override-it/82233 "2017-04-13T00:33:08Z")

</div>

I have a query that does a multi\_match search with custom field boost, but ES 5.3 java client also appends the default field weight. So, I expect something to be like title^10, 10 is custom weight that I want, but I se…

---

## [Filebeat extremely slow startup for large number of files](https://discuss.elastic.co/t/filebeat-extremely-slow-startup-for-large-number-of-files/240746)

<div class="topic-metadata">

**Author:** [@serant](https://discuss.elastic.co/u/serant)\
**Replies:** 0\
**Last updated:** [July 10, 2020, 6:52pm UTC](https://discuss.elastic.co/t/filebeat-extremely-slow-startup-for-large-number-of-files/240746 "2020-07-10T18:52:42Z")

</div>

We use Filebeat to tail hundreds of directories, each containing up to a few thousand log files. Whenever we need to restart Filebeat, it often takes days for Filebeat to being sending logs to Logstash again. I am confi…

---

## [Migrating master & data node to just a data node & some general advice on setting up our clsuter](https://discuss.elastic.co/t/migrating-master-data-node-to-just-a-data-node-some-general-advice-on-setting-up-our-clsuter/208034)

<div class="topic-metadata">

**Author:** [@John\_Swift](https://discuss.elastic.co/u/John_Swift)\
**Replies:** 2\
**Last updated:** [November 15, 2019, 10:19am UTC](https://discuss.elastic.co/t/migrating-master-data-node-to-just-a-data-node-some-general-advice-on-setting-up-our-clsuter/208034 "2019-11-15T10:19:13Z")

</div>

Looking for some advice on rejigging my elastic cluster. Currently have 7 nodes with 3 set to masters & data nodes & 5 set to just Data nodes. The cluster is used for monitoing of applications so very much log entry or…

---

## [TTL Value for Documents Under the Indices](https://discuss.elastic.co/t/ttl-value-for-documents-under-the-indices/345194)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 8\
**Last updated:** [October 18, 2023, 11:54am UTC](https://discuss.elastic.co/t/ttl-value-for-documents-under-the-indices/345194 "2023-10-18T11:54:09Z")

</div>

Hi Team, We had one requirement to set the TTL value for the documents present in a index. Could you please help me how to achieve the same. Thanks, Debasis

---

## [How to set the timeout for every search](https://discuss.elastic.co/t/how-to-set-the-timeout-for-every-search/290477)

<div class="topic-metadata">

**Author:** [@gpribi](https://discuss.elastic.co/u/gpribi)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 8:05am UTC](https://discuss.elastic.co/t/how-to-set-the-timeout-for-every-search/290477 "2021-11-30T08:05:37Z")

</div>

Hello, how can I set the timeout for the searches? Sometimes the server takes too long to respond, way after the timeout of my webserver, so it has no sense that the ELK keeps working on that query I have a single node …

---

## [Kibana on docker : Discover: connect ECONNREFUSED](https://discuss.elastic.co/t/kibana-on-docker-discover-connect-econnrefused/112376)

<div class="topic-metadata">

**Author:** [@vincenttouzet](https://discuss.elastic.co/u/vincenttouzet)\
**Replies:** 2\
**Last updated:** [December 19, 2017, 3:08pm UTC](https://discuss.elastic.co/t/kibana-on-docker-discover-connect-econnrefused/112376 "2017-12-19T15:08:27Z")

</div>

Hi, I set up an environment with ES 5.6 and Kibana 5.6 under Docker. Here is the docker-compose services : elasticsearch: build: ./docker/elasticsearch volumes: - es\_data:/usr/share/elasticsearch/data …

---

## [Index template not being applied](https://discuss.elastic.co/t/index-template-not-being-applied/204277)

<div class="topic-metadata">

**Author:** [@John\_Doe3](https://discuss.elastic.co/u/John_Doe3)\
**Replies:** 6\
**Last updated:** [October 20, 2019, 12:13pm UTC](https://discuss.elastic.co/t/index-template-not-being-applied/204277 "2019-10-20T12:13:49Z")

</div>

To achieve my goal - map geo location data from nginx logs to a map - I added a index template to ES with command like this: PUT \_template/nginx-default { "template": "nginx-\*", "order": 0, "index\_patterns" : \[ "nginx…

---

## [Maybe I missed something: FIlebeat prospectors seems to randomly stop harvesting 'some' files](https://discuss.elastic.co/t/maybe-i-missed-something-filebeat-prospectors-seems-to-randomly-stop-harvesting-some-files/37499)

<div class="topic-metadata">

**Author:** [@Matthew\_Prinvale](https://discuss.elastic.co/u/Matthew_Prinvale)\
**Replies:** 6\
**Last updated:** [December 27, 2015, 8:58am UTC](https://discuss.elastic.co/t/maybe-i-missed-something-filebeat-prospectors-seems-to-randomly-stop-harvesting-some-files/37499 "2015-12-27T08:58:15Z")

</div>

This is the 2nd time this has happened now. I have a prospector setup to read /var/log/myapp/\*.log and it brings up about 5 or 6 harvesters as intended. Things run smooth for a while but what seems to be randomly it just…

---

## [How to get cluster health using python API?](https://discuss.elastic.co/t/how-to-get-cluster-health-using-python-api/25431)

<div class="topic-metadata">

**Author:** [@tobmei05](https://discuss.elastic.co/u/tobmei05)\
**Replies:** 1\
**Last updated:** [July 14, 2015, 4:57am UTC](https://discuss.elastic.co/t/how-to-get-cluster-health-using-python-api/25431 "2015-07-14T04:57:41Z")

</div>

Hi all I want to get the health of an elasticsearch cluster similar to the command curl -XGET 'http://localhost:9200/\_cluster/health?pretty=true' but using python. I did the following from elasticsearch.client imp…

---

## [Retrieving Copy\_to/Stored fields](https://discuss.elastic.co/t/retrieving-copy-to-stored-fields/203948)

<div class="topic-metadata">

**Author:** [@vkandiva](https://discuss.elastic.co/u/vkandiva)\
**Replies:** 4\
**Last updated:** [December 18, 2019, 12:31am UTC](https://discuss.elastic.co/t/retrieving-copy-to-stored-fields/203948 "2019-12-18T00:31:08Z")

</div>

I noticed that copy\_to fields work for aggregations but don't get show up in a Match all query or any similar query. Upon further searching I figured setting "store": true in the Field mappings should help but I still wa…

---

## [Is it possible to count each term of a text instead of the complete text to display in Kibana?](https://discuss.elastic.co/t/is-it-possible-to-count-each-term-of-a-text-instead-of-the-complete-text-to-display-in-kibana/73715)

<div class="topic-metadata">

**Author:** [@DrBatoon](https://discuss.elastic.co/u/DrBatoon)\
**Replies:** 4\
**Last updated:** [February 3, 2017, 11:04am UTC](https://discuss.elastic.co/t/is-it-possible-to-count-each-term-of-a-text-instead-of-the-complete-text-to-display-in-kibana/73715 "2017-02-03T11:04:04Z")

</div>

Hi! Im completely new to ES. I have the time and text of tweets stored in a CSV file. I'am using logstash to get them over ES. When I'm using Kibana's Tag Cloud to display the most common words in the tweets, every tweet…

---

## [RE: creating an index using Python?](https://discuss.elastic.co/t/re-creating-an-index-using-python/10688)

<div class="topic-metadata">

**Author:** [@Elastic\_Noob](https://discuss.elastic.co/u/Elastic_Noob)\
**Replies:** 4\
**Last updated:** [February 12, 2013, 9:49am UTC](https://discuss.elastic.co/t/re-creating-an-index-using-python/10688 "2013-02-12T09:49:24Z")

</div>

Hi good day, I have a question regarding creating an ElasticSearch index using Python Requests Library ( http://docs.python-requests.org/en/latest/ ) I'm not too sure if the issue I am having is with ElasticSea…

---

## [Elasticsearch 7.1.x fails to start with security enabled](https://discuss.elastic.co/t/elasticsearch-7-1-x-fails-to-start-with-security-enabled/183542)

<div class="topic-metadata">

**Author:** [@nobound](https://discuss.elastic.co/u/nobound)\
**Replies:** 7\
**Last updated:** [June 4, 2019, 5:20pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1-x-fails-to-start-with-security-enabled/183542 "2019-06-04T17:20:52Z")

</div>

Trying to follow the instructions from After editing the config/elasticsearch.yaml xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate …

---

## [Update /Upsert with document AND script](https://discuss.elastic.co/t/update-upsert-with-document-and-script/32095)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 2\
**Last updated:** [October 13, 2015, 2:54pm UTC](https://discuss.elastic.co/t/update-upsert-with-document-and-script/32095 "2015-10-13T14:54:59Z")

</div>

Hi: The problem I have is as follows: Index may or may not have the document, If the document does not exist, index(INSERT) the document, Else, Update the existing document using an INLINE script. (the script take…

---

## [Help in Parsing date from timestamp using painless](https://discuss.elastic.co/t/help-in-parsing-date-from-timestamp-using-painless/157233)

<div class="topic-metadata">

**Author:** [@Dhana](https://discuss.elastic.co/u/Dhana)\
**Replies:** 4\
**Last updated:** [November 19, 2018, 10:29pm UTC](https://discuss.elastic.co/t/help-in-parsing-date-from-timestamp-using-painless/157233 "2018-11-19T22:29:38Z")

</div>

Hi, Could any one please help me getting the date from the timestamp using painless in the scripted field and group the data-set based on date, doc\['timestamp'\].date.monthOfYear + '/' + doc\['timestamp'\].date.dayOfMonth …

---

## [Example of dot\_product similarity on dense\_vector field index document](https://discuss.elastic.co/t/example-of-dot-product-similarity-on-dense-vector-field-index-document/332396)

<div class="topic-metadata">

**Author:** [@adrian-arapiles](https://discuss.elastic.co/u/adrian-arapiles)\
**Replies:** 2\
**Last updated:** [May 8, 2023, 3:22am UTC](https://discuss.elastic.co/t/example-of-dot-product-similarity-on-dense-vector-field-index-document/332396 "2023-05-08T03:22:32Z")

</div>

Hi, I'm trying to benchmark different possibilities with dense\_vector and knn search. I want to test cosine similarity vs dot\_produce similarity because in documentation says that dot\_product is a optimized way to perf…

---

## [Feature Request for more robust vector graphics (Vega not enough) so I can generate good looking network maps (non-geographic)](https://discuss.elastic.co/t/feature-request-for-more-robust-vector-graphics-vega-not-enough-so-i-can-generate-good-looking-network-maps-non-geographic/328286)

<div class="topic-metadata">

**Author:** [@J\_Todd](https://discuss.elastic.co/u/J_Todd)\
**Replies:** 2\
**Last updated:** [March 23, 2023, 2:15pm UTC](https://discuss.elastic.co/t/feature-request-for-more-robust-vector-graphics-vega-not-enough-so-i-can-generate-good-looking-network-maps-non-geographic/328286 "2023-03-23T14:15:15Z")

</div>

I want to be able to generate, within Kibana and / or Elastic Security, non-geographic, good looking network maps like these: Currently there doesn't seem to be any way to do this in any Elastic product no matter…

---

## [NoClassDefFoundError exception with SearchSourceBuilder (6.0) in GWT server side](https://discuss.elastic.co/t/noclassdeffounderror-exception-with-searchsourcebuilder-6-0-in-gwt-server-side/108281)

<div class="topic-metadata">

**Author:** [@wassx](https://discuss.elastic.co/u/wassx)\
**Replies:** 6\
**Last updated:** [November 22, 2017, 8:19pm UTC](https://discuss.elastic.co/t/noclassdeffounderror-exception-with-searchsourcebuilder-6-0-in-gwt-server-side/108281 "2017-11-22T20:19:39Z")

</div>

Hi! I try to query my local elastic search instance via high level rest client with: SearchRequest searchRequest = new SearchRequest("jobs"); searchRequest.types("job"); SearchSourceBuilder ssb = new SearchSourceBuil…

---

## [Convert date from string to datetime format](https://discuss.elastic.co/t/convert-date-from-string-to-datetime-format/112774)

<div class="topic-metadata">

**Author:** [@vuxuanlai](https://discuss.elastic.co/u/vuxuanlai)\
**Replies:** 3\
**Last updated:** [December 21, 2017, 9:48am UTC](https://discuss.elastic.co/t/convert-date-from-string-to-datetime-format/112774 "2017-12-21T09:48:00Z")

</div>

Hi there, I have logstash filter with date as below: date { match =\> \["date","MMM dd yyyy HH:mm:ss", "MMM d yyyy HH:mm:ss"\] target =\> "date" } but when i visualize data on kibana, i got "date" field which still g…

---

## [First steps troubleshooting ES cluster crashes?](https://discuss.elastic.co/t/first-steps-troubleshooting-es-cluster-crashes/118129)

<div class="topic-metadata">

**Author:** [@rrue](https://discuss.elastic.co/u/rrue)\
**Replies:** 8\
**Last updated:** [February 3, 2018, 1:09am UTC](https://discuss.elastic.co/t/first-steps-troubleshooting-es-cluster-crashes/118129 "2018-02-03T01:09:09Z")

</div>

Hi All, We've been running a three-node ELK cluster since last fall, running elasticsearch 5.5.2, with no trouble until last week. Then Friday evening two nodes dumped their heap, which filled the root volume and locked…

[Previous page](https://discuss.elastic.co/top.md?page=426&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=428&per_page=50&period=all)
