# Top **URL:** https://discuss.elastic.co/top.md?page=428&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 429 --- ## [Multiple tables in csv file](https://discuss.elastic.co/t/multiple-tables-in-csv-file/155547)
**Author:** [@kalyani](https://discuss.elastic.co/u/kalyani)\ **Replies:** 6\ **Last updated:** [November 10, 2018, 6:38pm UTC](https://discuss.elastic.co/t/multiple-tables-in-csv-file/155547 "2018-11-10T18:38:49Z")
Hello, I have a csv file for a order management system . How do I write the filter in the conf file for this data? I tried separating using ",,,,,,,,,,,,,,,,,,,,,,,," , but cant form proper json in the output.\\ Plea… --- ## [Only String and Array types are splittable. field:splitedJson is of type = NilClass](https://discuss.elastic.co/t/only-string-and-array-types-are-splittable-field-splitedjson-is-of-type-nilclass/191725)
**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\ **Replies:** 2\ **Last updated:** [July 24, 2019, 1:53am UTC](https://discuss.elastic.co/t/only-string-and-array-types-are-splittable-field-splitedjson-is-of-type-nilclass/191725 "2019-07-24T01:53:09Z")
Hello, I have an array of JSON and i can parse them out nicely with logstash. However, i realized that the logs are flooded with \[2019-07-23T10:35:06,859\]\[WARN \]\[logstash.filters.split \] Only String and Array types … --- ## [Excluding field which return null in Kibana](https://discuss.elastic.co/t/excluding-field-which-return-null-in-kibana/26882)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 1\ **Last updated:** [August 11, 2015, 11:19pm UTC](https://discuss.elastic.co/t/excluding-field-which-return-null-in-kibana/26882 "2015-08-11T23:19:03Z")
I am retriving field1 on x-axis and which returns null and values. I want to show only those which has some value than which return null. I see Exclude Pattern in Advance. Can it be excluded from there? --- ## [Search multiple words using wildcard query](https://discuss.elastic.co/t/search-multiple-words-using-wildcard-query/272648)
**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\ **Replies:** 5\ **Last updated:** [May 11, 2021, 3:32pm UTC](https://discuss.elastic.co/t/search-multiple-words-using-wildcard-query/272648 "2021-05-11T15:32:59Z")
I have documents indexed to elastic search in the following structure - \[{ "firstname" : "john", "lastname" : "cena" } , { "firstname" : "peter", "lastname" : "parker" }\] I am trying to use a bool query that contains… --- ## [Issue with my template creation](https://discuss.elastic.co/t/issue-with-my-template-creation/9734)
**Author:** [@Praveen\_Kariyanahall](https://discuss.elastic.co/u/Praveen_Kariyanahall)\ **Replies:** 6\ **Last updated:** [November 19, 2012, 6:44pm UTC](https://discuss.elastic.co/t/issue-with-my-template-creation/9734 "2012-11-19T18:44:26Z")
This used to work great when I went through pyes and was creating index. But when I try convert it into template PUT, I see the following error. There seems to be some issue with the "search\_analyzer" too. Any idea, … --- ## [Is there solution for collect frontend log](https://discuss.elastic.co/t/is-there-solution-for-collect-frontend-log/321024)
**Author:** [@Allen\_Wei](https://discuss.elastic.co/u/Allen_Wei)\ **Replies:** 8\ **Last updated:** [November 5, 2024, 2:30pm UTC](https://discuss.elastic.co/t/is-there-solution-for-collect-frontend-log/321024 "2024-11-05T14:30:48Z")
Is there solution send frontend log from browser to Elastic? The only thing I found is fleet custom http server. --- ## [Web Server Generic XSS](https://discuss.elastic.co/t/web-server-generic-xss/172488)
**Author:** [@Nishant\_Suman](https://discuss.elastic.co/u/Nishant_Suman)\ **Replies:** 1\ **Last updated:** [March 15, 2019, 9:32am UTC](https://discuss.elastic.co/t/web-server-generic-xss/172488 "2019-03-15T09:32:22Z")
We have hosted a dockerized elastic stack in AWS ec2 instance and ran nessus scan on that instance. In the report of nessus scan, Web Server Generic XSS vulnerability is detected in elasticsearch. Currently we are using … --- ## [Ids Query VS Multi Get API](https://discuss.elastic.co/t/ids-query-vs-multi-get-api/42388)
**Author:** [@luk](https://discuss.elastic.co/u/luk)\ **Replies:** 1\ **Last updated:** [February 22, 2016, 6:33pm UTC](https://discuss.elastic.co/t/ids-query-vs-multi-get-api/42388 "2016-02-22T18:33:08Z")
I need to fetch a bunch of documents by \_id. "Multi Get API" should be faster but "Ids Query" is more flexible (works with aliases for example). I'm doing some simple tests: fetch 1000 ids from elasticsearch using… --- ## [How to count the number of occurrence of fields with data in a given index of douments](https://discuss.elastic.co/t/how-to-count-the-number-of-occurrence-of-fields-with-data-in-a-given-index-of-douments/82570)
**Author:** [@sandesh\_patil](https://discuss.elastic.co/u/sandesh_patil)\ **Replies:** 1\ **Last updated:** [April 18, 2017, 11:14pm UTC](https://discuss.elastic.co/t/how-to-count-the-number-of-occurrence-of-fields-with-data-in-a-given-index-of-douments/82570 "2017-04-18T23:14:11Z")
I am trying to count the number of occurrence of fields with data in search bar so that after finding the count i can use in metric visualization. These fields are with in array object (data) for ex Below is JSON for … --- ## [Elasticsearch active is running but port 9200 doesn't listen](https://discuss.elastic.co/t/elasticsearch-active-is-running-but-port-9200-doesnt-listen/178745)
**Author:** [@Nguyen\_Hieu](https://discuss.elastic.co/u/Nguyen_Hieu)\ **Replies:** 8\ **Last updated:** [April 28, 2019, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-active-is-running-but-port-9200-doesnt-listen/178745 "2019-04-28T08:32:04Z")
Hi everyone, I start elasticsearch and check status, it's running. But when I use curl to access, I receive an message: Connection refused. Here is my code when I check in command line: root@hieu: ser… --- ## [Elastic search + Shield instance is not authenticating logstash user](https://discuss.elastic.co/t/elastic-search-shield-instance-is-not-authenticating-logstash-user/34891)
**Author:** [@robertranjan](https://discuss.elastic.co/u/robertranjan)\ **Replies:** 8\ **Last updated:** [December 7, 2015, 9:56pm UTC](https://discuss.elastic.co/t/elastic-search-shield-instance-is-not-authenticating-logstash-user/34891 "2015-12-07T21:56:10Z")
I'm sending events from logstash 2.0 to ES 2.0 with shield. ES is not accepting any events/logs/requests for logstash user though roles are seems correct. Here is my roles.yml setting: logstash: cluster: indices:adm… --- ## [Grok Filter Pattern Hostname OR IP](https://discuss.elastic.co/t/grok-filter-pattern-hostname-or-ip/200768)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 2\ **Last updated:** [September 24, 2019, 12:40am UTC](https://discuss.elastic.co/t/grok-filter-pattern-hostname-or-ip/200768 "2019-09-24T00:40:50Z")
Newb question. Parsing a Cisco ASA log. I've noticed some of my logs don't match the built in parsers. Here is one in particular, 305011. This is the default pattern. CISCOFW305011 %{CISCO\_ACTION:action} %{CISCO\_XLATE… --- ## [What is the best way to query first and last name?](https://discuss.elastic.co/t/what-is-the-best-way-to-query-first-and-last-name/136142)
**Author:** [@undefinedman](https://discuss.elastic.co/u/undefinedman)\ **Replies:** 2\ **Last updated:** [June 16, 2018, 12:56pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-query-first-and-last-name/136142 "2018-06-16T12:56:54Z")
I am trying to setup search analysis in Elasticsearch to get as close as possible to the following scenario: I have 4 users: Karolina Abc (karolinaabc@example.com) Karolina Def (karolinadef@example.com) Karol Abc (kar… --- ## [Sending Squid Logs with Filebeat and manipulate with logstash](https://discuss.elastic.co/t/sending-squid-logs-with-filebeat-and-manipulate-with-logstash/167298)
**Author:** [@sdvincent](https://discuss.elastic.co/u/sdvincent)\ **Replies:** 5\ **Last updated:** [February 7, 2019, 4:40am UTC](https://discuss.elastic.co/t/sending-squid-logs-with-filebeat-and-manipulate-with-logstash/167298 "2019-02-07T04:40:29Z")
Hello, This might be a newbish question but I haven't been able to find what I've been looking for elsewhere online. I am trying to learn how to send logs that don't have pre-built modules to logstash and have logstash … --- ## [Filter empty terms buckets after aggregation](https://discuss.elastic.co/t/filter-empty-terms-buckets-after-aggregation/127039)
**Author:** [@aurimas](https://discuss.elastic.co/u/aurimas)\ **Replies:** 4\ **Last updated:** [April 6, 2018, 9:00am UTC](https://discuss.elastic.co/t/filter-empty-terms-buckets-after-aggregation/127039 "2018-04-06T09:00:54Z")
I am trying to run a query which returns only network device and interface which have specific utilization. I am using bucket\_selector to filter out value aggregations which does not meat criteria and it almost gives me… --- ## [Generate PDF Report missing](https://discuss.elastic.co/t/generate-pdf-report-missing/190492)
**Author:** [@Snuffsis](https://discuss.elastic.co/u/Snuffsis)\ **Replies:** 2\ **Last updated:** [July 16, 2019, 7:45am UTC](https://discuss.elastic.co/t/generate-pdf-report-missing/190492 "2019-07-16T07:45:33Z")
Hello there, Been looking through various posts already, but no one seem to be about the same issue i have, or contain any solution. So, as for my problem. For generating the reports in kibana, my only option is CSV. T… --- ## [Logstash Not Receiving TCP Data](https://discuss.elastic.co/t/logstash-not-receiving-tcp-data/128402)
**Author:** [@clannadqs](https://discuss.elastic.co/u/clannadqs)\ **Replies:** 6\ **Last updated:** [May 3, 2018, 12:36pm UTC](https://discuss.elastic.co/t/logstash-not-receiving-tcp-data/128402 "2018-05-03T12:36:09Z")
I am shipping monitored data as JSON from Python. I have tested whether the data is actually being sent outside of Logstash and it is successfully sending and being received. With Logstash the input is showing no signs o… --- ## [SSLHandshakeException: Empty server certificate chain](https://discuss.elastic.co/t/sslhandshakeexception-empty-server-certificate-chain/287628)
**Author:** [@porscheme](https://discuss.elastic.co/u/porscheme)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 9:14am UTC](https://discuss.elastic.co/t/sslhandshakeexception-empty-server-certificate-chain/287628 "2021-10-26T09:14:48Z")
ES version: 7.12 I'm getting this error...any help is really appreciated. "Caused by: javax.net.ssl.SSLHandshakeException: Empty server certificate chain", "at sun.security.ssl.Alert.createSSLException(Alert.java:131) … --- ## [Create a region map based on country code](https://discuss.elastic.co/t/create-a-region-map-based-on-country-code/100338)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 3\ **Last updated:** [September 13, 2017, 3:09pm UTC](https://discuss.elastic.co/t/create-a-region-map-based-on-country-code/100338 "2017-09-13T15:09:42Z")
Continuing the discussion from Kibana dashboard of "Elastic for Operational Analytics" webinar: I have tried to create a region map using the requestCountry attribute containing the request's country. That attribute hol… --- ## [Compare Dates in Script Query](https://discuss.elastic.co/t/compare-dates-in-script-query/125761)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 1\ **Last updated:** [March 27, 2018, 1:38pm UTC](https://discuss.elastic.co/t/compare-dates-in-script-query/125761 "2018-03-27T13:38:55Z")
I'm using Painless to create a filter, but when i use two dates this error happens: "script": "doc\['creation\_date'\].value \> doc\['update\_date'\].value", "lang": "painless", "caused\_by": { "type": "class\_cast\_exception… --- ## [Get all unique values of a field across documents](https://discuss.elastic.co/t/get-all-unique-values-of-a-field-across-documents/203882)
**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\ **Replies:** 6\ **Last updated:** [October 18, 2019, 1:02pm UTC](https://discuss.elastic.co/t/get-all-unique-values-of-a-field-across-documents/203882 "2019-10-18T13:02:55Z")
so i have a field named subjects, it is an array. so I want to get all the values of subjects field in a particular index. should be about 300-400. Can someone suggest how to achieve this. I am doing this: GET /index/\_… --- ## [How to run multiple client nodes on one host](https://discuss.elastic.co/t/how-to-run-multiple-client-nodes-on-one-host/41059)
**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\ **Replies:** 8\ **Last updated:** [February 6, 2016, 7:17pm UTC](https://discuss.elastic.co/t/how-to-run-multiple-client-nodes-on-one-host/41059 "2016-02-06T19:17:42Z")
Hello All, Could someone explain how to run multiple client nodes on a single host? Is this documented somewhere? I have been leafing through the docs without luck. Thanks in advance, --- ## [Background count in significant\_terms not consistent?](https://discuss.elastic.co/t/background-count-in-significant-terms-not-consistent/55824)
**Author:** [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\ **Replies:** 7\ **Last updated:** [July 20, 2016, 1:05pm UTC](https://discuss.elastic.co/t/background-count-in-significant-terms-not-consistent/55824 "2016-07-20T13:05:10Z")
Hi, I'm wondering if there is any reason why the background count of a significant terms aggregation would be inconsistent depending on the query filter (not a background filter). I've run the following aggregations/… --- ## [Elasticsearch AWS availability zone awareness](https://discuss.elastic.co/t/elasticsearch-aws-availability-zone-awareness/13902)
**Author:** [@nicktgr15](https://discuss.elastic.co/u/nicktgr15)\ **Replies:** 3\ **Last updated:** [October 11, 2013, 6:16pm UTC](https://discuss.elastic.co/t/elasticsearch-aws-availability-zone-awareness/13902 "2013-10-11T18:16:07Z")
Hello, I have a question regarding elasticsearch AWS availability zone awareness which I will attempt to describe with an example. Let's suppose that we have an elasticsearch cluster running on eu-west-1 with 2 … --- ## [Unable to run ElasticSearch after setting up SSL certificate](https://discuss.elastic.co/t/unable-to-run-elasticsearch-after-setting-up-ssl-certificate/312774)
**Author:** [@RonH8](https://discuss.elastic.co/u/RonH8)\ **Replies:** 2\ **Last updated:** [August 25, 2022, 9:34am UTC](https://discuss.elastic.co/t/unable-to-run-elasticsearch-after-setting-up-ssl-certificate/312774 "2022-08-25T09:34:09Z")
Hey I've followed the following guide to setup the SSL certificate for my Elasticsearch which is running on Ubuntu 22.04.1 LTS: https://www.elastic.co/guide/en/elasticsearch/reference/current/security-basic-setup.html … --- ## [Request Circuit Breaker keeps tripping; how is the estimate calculated?](https://discuss.elastic.co/t/request-circuit-breaker-keeps-tripping-how-is-the-estimate-calculated/77185)
**Author:** [@spltscreen](https://discuss.elastic.co/u/spltscreen)\ **Replies:** 3\ **Last updated:** [March 6, 2017, 6:30pm UTC](https://discuss.elastic.co/t/request-circuit-breaker-keeps-tripping-how-is-the-estimate-calculated/77185 "2017-03-06T18:30:12Z")
We have an ES cluster that is having issues with the circuit breaker. Initially, it seemed tied to our field data. As an experiment, we migrated our index over to a copy with field data turned off. Now, we are still trip… --- ## [Maven couldn't transfer "elasticsearch-watcher:pom:2.0.0-rc1" due to authorization](https://discuss.elastic.co/t/maven-couldnt-transfer-elasticsearch-watcher-pom-2-0-0-rc1-due-to-authorization/33030)
**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\ **Replies:** 8\ **Last updated:** [January 14, 2017, 3:39pm UTC](https://discuss.elastic.co/t/maven-couldnt-transfer-elasticsearch-watcher-pom-2-0-0-rc1-due-to-authorization/33030 "2017-01-14T15:39:40Z")
In official doc of watcher, it claims one should add this maven dependency to pom.xml to use watcher plugin: \ \org.elasticsearch.plugin\ \elasticsearch-watc… --- ## [Validation Failed: 1: type is missing error](https://discuss.elastic.co/t/validation-failed-1-type-is-missing-error/39708)
**Author:** [@tesseract](https://discuss.elastic.co/u/tesseract)\ **Replies:** 0\ **Last updated:** [January 20, 2016, 10:04pm UTC](https://discuss.elastic.co/t/validation-failed-1-type-is-missing-error/39708 "2016-01-20T22:04:08Z")
Hey guys, We are using Elasticsearch in production, and we start seeing this issue as soon as we start doing updates to our document. Here is an extract of the mapping we use: { "default": { "\_ttl": { … --- ## [Visualize "unkown" data fields](https://discuss.elastic.co/t/visualize-unkown-data-fields/118682)
**Author:** [@sbeee](https://discuss.elastic.co/u/sbeee)\ **Replies:** 2\ **Last updated:** [February 8, 2018, 9:08am UTC](https://discuss.elastic.co/t/visualize-unkown-data-fields/118682 "2018-02-08T09:08:19Z")
hi guys, i've installed the syslog\_pri plugin to display syslog facility & severity. i also added a field for translation of severity numbers into strings like critical, warning etc.. this field is called "severity". t… --- ## [Heartbeat: Ignore SSL errors](https://discuss.elastic.co/t/heartbeat-ignore-ssl-errors/79477)
**Author:** [@dosera](https://discuss.elastic.co/u/dosera)\ **Replies:** 3\ **Last updated:** [March 22, 2017, 8:18am UTC](https://discuss.elastic.co/t/heartbeat-ignore-ssl-errors/79477 "2017-03-22T08:18:06Z")
Input heartbeat.monitors - type: 'http' schedule: '@every60s' urls: - https://someurl.com:443/path/ timeout: 20 status: 200 Now, when the certifcate cannot be validated, I get an error: Outp… --- ## [JDBC Input plugin, Communication link failure in Logstash version 6.5.4 (latest)](https://discuss.elastic.co/t/jdbc-input-plugin-communication-link-failure-in-logstash-version-6-5-4-latest/164983)
**Author:** [@Abhishek\_Wahi](https://discuss.elastic.co/u/Abhishek_Wahi)\ **Replies:** 7\ **Last updated:** [January 23, 2019, 10:28am UTC](https://discuss.elastic.co/t/jdbc-input-plugin-communication-link-failure-in-logstash-version-6-5-4-latest/164983 "2019-01-23T10:28:13Z")
Hi, I am facing this issue with JDBC input plugin. Sometime my logstash script throw this error : \[2019-01-21T00:59:25,984\]\[ERROR\]\[logstash.inputs.jdbc \] Unable to connect to database. Tried 1 times {:error\_messag… --- ## [Custom field for visualization](https://discuss.elastic.co/t/custom-field-for-visualization/213419)
**Author:** [@Aadarsh\_Mahala](https://discuss.elastic.co/u/Aadarsh_Mahala)\ **Replies:** 4\ **Last updated:** [January 11, 2020, 11:06pm UTC](https://discuss.elastic.co/t/custom-field-for-visualization/213419 "2020-01-11T23:06:33Z")
Is it possible to create the visualization in the kibana using the custom field like eventcount value from json data? \<{ "eventcount" : 302932229, "file" : "confidential" }/\> --- ## [GROK Pattern to split string to multiple values](https://discuss.elastic.co/t/grok-pattern-to-split-string-to-multiple-values/178636)
**Author:** [@Mohanraj](https://discuss.elastic.co/u/Mohanraj)\ **Replies:** 4\ **Last updated:** [April 29, 2019, 6:07am UTC](https://discuss.elastic.co/t/grok-pattern-to-split-string-to-multiple-values/178636 "2019-04-29T06:07:38Z")
I am getting a string ".." in the logs and would like to split this using grok pattern. is there any method to do so ? example: input log string : java-app.ABCD.win-service-test Output should be app\_name: java-app o… --- ## [Why the bulk api (python) has low efficiency in this way?](https://discuss.elastic.co/t/why-the-bulk-api-python-has-low-efficiency-in-this-way/69970)
**Author:** [@a943013827](https://discuss.elastic.co/u/a943013827)\ **Replies:** 4\ **Last updated:** [December 28, 2016, 12:21pm UTC](https://discuss.elastic.co/t/why-the-bulk-api-python-has-low-efficiency-in-this-way/69970 "2016-12-28T12:21:21Z")
Hi: I am testing the BULK insert(index) efficiency. the python code as follow: from elasticsearch import Elasticsearch from elasticsearch import helpers import time es = Elasticsearch("127.0.0.1") i = 0 data\_list=\[\] f… --- ## [Getting repository verification exception](https://discuss.elastic.co/t/getting-repository-verification-exception/234811)
**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\ **Replies:** 5\ **Last updated:** [May 31, 2020, 2:03pm UTC](https://discuss.elastic.co/t/getting-repository-verification-exception/234811 "2020-05-31T14:03:28Z")
I am trying to create snapshots of my ealsticsearch in s3 bucket. i had created an s3 bucket with public access and created an user with the following permission { "Statement": \[ { "Action": \[ … --- ## [Increase query performance for many OR clauses](https://discuss.elastic.co/t/increase-query-performance-for-many-or-clauses/63425)
**Author:** [@Hormoz\_Tarevern](https://discuss.elastic.co/u/Hormoz_Tarevern)\ **Replies:** 3\ **Last updated:** [October 21, 2016, 1:43pm UTC](https://discuss.elastic.co/t/increase-query-performance-for-many-or-clauses/63425 "2016-10-21T13:43:24Z")
We are hitting into performance issue when there are too many OR clauses. We needed to change the default max\_clause\_count from 1024 to a large number. Our query takes about 9 to 12 second to return with large query stri… --- ## [Using Ruby to count the number of fields in a message, then apply CSV depending on the count?](https://discuss.elastic.co/t/using-ruby-to-count-the-number-of-fields-in-a-message-then-apply-csv-depending-on-the-count/177880)
**Author:** [@sdberts](https://discuss.elastic.co/u/sdberts)\ **Replies:** 1\ **Last updated:** [April 22, 2019, 4:48pm UTC](https://discuss.elastic.co/t/using-ruby-to-count-the-number-of-fields-in-a-message-then-apply-csv-depending-on-the-count/177880 "2019-04-22T16:48:53Z")
I have logs coming from dozens of servers, and two different appliance versions, both of which are in comma-separated format. In one version, there are 73 fields; in the other, there are 93 fields. I need to be able to… --- ## [Elastic Stack 7.13.0 and 6.8.16 Security Update](https://discuss.elastic.co/t/elastic-stack-7-13-0-and-6-8-16-security-update/273964)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 3:17pm UTC](https://discuss.elastic.co/t/elastic-stack-7-13-0-and-6-8-16-security-update/273964 "2021-05-25T15:17:07Z")
Kibana url redirection flaw (ESA-2021-12) An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user… --- ## [Move subarrays to document root](https://discuss.elastic.co/t/move-subarrays-to-document-root/143876)
**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\ **Replies:** 7\ **Last updated:** [August 13, 2018, 3:06pm UTC](https://discuss.elastic.co/t/move-subarrays-to-document-root/143876 "2018-08-13T15:06:03Z")
Greetings My incoming messages contain subarrays in the following format: com.openexchange.ajax.action com.openexchange.ajax.module com.openexchange.database.schema com.openexchange.grizzly.method com.openexchange.griz… --- ## [Help with GROK pattern - Cisco ASA CX](https://discuss.elastic.co/t/help-with-grok-pattern-cisco-asa-cx/50126)
**Author:** [@Mark\_Collins](https://discuss.elastic.co/u/Mark_Collins)\ **Replies:** 7\ **Last updated:** [June 30, 2016, 2:40pm UTC](https://discuss.elastic.co/t/help-with-grok-pattern-cisco-asa-cx/50126 "2016-06-30T14:40:22Z")
Hi All I have a new ELK installation and all is going well, have a couple of windows servers and firewall sending logs. Once I had told the installation to use more RAM all is running really good. Trying to send logs f… --- ## [Multiple Synonym Lists?](https://discuss.elastic.co/t/multiple-synonym-lists/26493)
**Author:** [@ronchalant](https://discuss.elastic.co/u/ronchalant)\ **Replies:** 3\ **Last updated:** [July 30, 2015, 8:13am UTC](https://discuss.elastic.co/t/multiple-synonym-lists/26493 "2015-07-30T08:13:30Z")
We're currently on 1.6 with plans to move to 1.7 soon. We want to incorporate a synonym token filter, but I was hoping to have a combination of sources - for example using the Wordnet synonym file as a baseline (englis… --- ## [Elasticsearch “ends with” word in phrases](https://discuss.elastic.co/t/elasticsearch-ends-with-word-in-phrases/60473)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 2\ **Last updated:** [September 14, 2016, 12:23pm UTC](https://discuss.elastic.co/t/elasticsearch-ends-with-word-in-phrases/60473 "2016-09-14T12:23:10Z")
Hi All, I try to implement a query from my content with Elasticsearch 2.4 What I need, is displaying all results which ends with e.g. 154, 024... etc. I've tried: GET rd\_product\_lpv1/\_search { "query": { … --- ## [Elasticsearch 6.8.6 \_bulk API does not recognize parameter include\_type\_name](https://discuss.elastic.co/t/elasticsearch-6-8-6-bulk-api-does-not-recognize-parameter-include-type-name/228872)
**Author:** [@nverrill](https://discuss.elastic.co/u/nverrill)\ **Replies:** 6\ **Last updated:** [April 24, 2020, 3:26pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-6-bulk-api-does-not-recognize-parameter-include-type-name/228872 "2020-04-24T15:26:25Z")
We have an application that can send \_bulk requests to elasticsearch(I cannot modify what it sends), but is failing because the type is missing and it appears that \[include\_type\_name\] is not supported by the \_bulk API. W… --- ## [Error creating runner from config: failed to create input: Can only start an input when all related states are finished:](https://discuss.elastic.co/t/error-creating-runner-from-config-failed-to-create-input-can-only-start-an-input-when-all-related-states-are-finished/281328)
**Author:** [@lilyyy](https://discuss.elastic.co/u/lilyyy)\ **Replies:** 2\ **Last updated:** [August 17, 2021, 4:34am UTC](https://discuss.elastic.co/t/error-creating-runner-from-config-failed-to-create-input-can-only-start-an-input-when-all-related-states-are-finished/281328 "2021-08-17T04:34:50Z")
Hi all I get the logs from suricata(eve.json) so I've enabled suricata module in filebeat. But whenever I start filebeat, I got this error. 2021-08-13T18:11:18.650+0900 ERROR \[reload\] cfgfile/list.go:99 Error creating… --- ## [Unit Test Case for the High Level Rest Client?](https://discuss.elastic.co/t/unit-test-case-for-the-high-level-rest-client/195253)
**Author:** [@Clark\_Wright](https://discuss.elastic.co/u/Clark_Wright)\ **Replies:** 5\ **Last updated:** [April 9, 2020, 3:58pm UTC](https://discuss.elastic.co/t/unit-test-case-for-the-high-level-rest-client/195253 "2020-04-09T15:58:43Z")
I am in the process of moving our applications search functionality from Elasticsearch 1.x to 7.x, and from the TransportClient to the HighLevelRestClient, while trying to avoid using all the deprecated (or known to bec… --- ## [Is it possible to detect when filebeat is finished harvesting a file](https://discuss.elastic.co/t/is-it-possible-to-detect-when-filebeat-is-finished-harvesting-a-file/187932)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 5\ **Last updated:** [July 1, 2019, 1:10pm UTC](https://discuss.elastic.co/t/is-it-possible-to-detect-when-filebeat-is-finished-harvesting-a-file/187932 "2019-07-01T13:10:58Z")
We are in the process of designing a system in AWS that automatically creates and stands up a new instance of an application server and after a configured amount of time tear it down and rebuild a new one. We're doing th… --- ## [Not able to create index pattern in 6.2.2](https://discuss.elastic.co/t/not-able-to-create-index-pattern-in-6-2-2/121403)
**Author:** [@Arnaud\_Jaspart](https://discuss.elastic.co/u/Arnaud_Jaspart)\ **Replies:** 4\ **Last updated:** [February 27, 2018, 6:37pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-pattern-in-6-2-2/121403 "2018-02-27T18:37:44Z")
Hello Kibana team, Even after following index creation documentations (link provided on kibana interface and on the web) I'm not able to access the ES data on kibana. I keep having "Warning No default index pattern. You… --- ## [Проблема с шардами после аварийного завершения работы](https://discuss.elastic.co/t/topic/98337)
**Author:** [@Drnoise8989](https://discuss.elastic.co/u/Drnoise8989)\ **Replies:** 1\ **Last updated:** [August 28, 2017, 7:26am UTC](https://discuss.elastic.co/t/topic/98337 "2017-08-28T07:26:36Z")
Добрый день. Elasticsearch 5.5.0 одна нода( 8 CPU, 16 GB RAM, 8 Tb HDD), вчера при попытке выполнить запрос он упал и перестал отвечать, через systemctl остановить не получилось, пришлось убить процессы через kill -9 и … --- ## [Elasticsearch 8 disable BEGIN SECURITY AUTO CONFIGURATION](https://discuss.elastic.co/t/elasticsearch-8-disable-begin-security-auto-configuration/299507)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 7:52am UTC](https://discuss.elastic.co/t/elasticsearch-8-disable-begin-security-auto-configuration/299507 "2022-03-14T07:52:00Z")
Is there a way to disable this during install? or even have a yes and no option I'm trying to create an automated install with my own certificates and sometimes during testing I don't want to have user authentication en… --- ## [Why elect a leader?](https://discuss.elastic.co/t/why-elect-a-leader/94357)
**Author:** [@olalonde](https://discuss.elastic.co/u/olalonde)\ **Replies:** 2\ **Last updated:** [July 24, 2017, 9:53pm UTC](https://discuss.elastic.co/t/why-elect-a-leader/94357 "2017-07-24T21:53:49Z")
Hi everyone, I've been reading ES's code and was wondering about an architectural decision. If I understand correctly, an ES cluster first elects a leader which is then in charge of managing the cluster state. I am gue… [Previous page](https://discuss.elastic.co/top.md?page=427&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=429&per_page=50&period=all)