# Top

**URL:** https://discuss.elastic.co/top.md?page=431&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 432

---

## [Filter documents that contain array with empty string](https://discuss.elastic.co/t/filter-documents-that-contain-array-with-empty-string/296562)

<div class="topic-metadata">

**Author:** [@Muhammad\_Ahmad](https://discuss.elastic.co/u/Muhammad_Ahmad)\
**Replies:** 5\
**Last updated:** [February 8, 2022, 3:54pm UTC](https://discuss.elastic.co/t/filter-documents-that-contain-array-with-empty-string/296562 "2022-02-08T15:54:14Z")

</div>

I've documents in Elasticsearch and I want to filter out the documents that contain an array of only empty strings or have nothing / empty array. #doc 1 { "\_index": "my-index-000001", "\_type": "\_doc", "\_id": "0", …

---

## [Deprecation of filtered in elasticsearch 2.0](https://discuss.elastic.co/t/deprecation-of-filtered-in-elasticsearch-2-0/32917)

<div class="topic-metadata">

**Author:** [@Anirudh\_Modi](https://discuss.elastic.co/u/Anirudh_Modi)\
**Replies:** 5\
**Last updated:** [January 6, 2016, 9:00am UTC](https://discuss.elastic.co/t/deprecation-of-filtered-in-elasticsearch-2-0/32917 "2016-01-06T09:00:15Z")

</div>

With elasticsearch 2.0 filtered will be deprecated. Instead of which we need to use bool.. In filtered it was mentioned that filtered query will run the filter before the query.. How will this work with bool?

---

## [Alerts from Kibana/ES](https://discuss.elastic.co/t/alerts-from-kibana-es/17746)

<div class="topic-metadata">

**Author:** [@NF1](https://discuss.elastic.co/u/NF1)\
**Replies:** 6\
**Last updated:** [June 2, 2014, 8:45pm UTC](https://discuss.elastic.co/t/alerts-from-kibana-es/17746 "2014-06-02T20:45:33Z")

</div>

Hi, We’re using Kibana/Elasticsearch to visualize different kind of logs in our company. Now, we would need a feature that would allow us to send an alert/notification (email or other) when a certain event/trig…

---

## [Elasticsearch/Kibana behind Azure load balancer](https://discuss.elastic.co/t/elasticsearch-kibana-behind-azure-load-balancer/91563)

<div class="topic-metadata">

**Author:** [@stefan2017](https://discuss.elastic.co/u/stefan2017)\
**Replies:** 1\
**Last updated:** [July 3, 2017, 12:42pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-behind-azure-load-balancer/91563 "2017-07-03T12:42:22Z")

</div>

Greetings All, I'm running a 3 node Elastic Stack cluster in Azure. Each server has Elasticsearch and Kibana installed. When I try to hit Kibana using the load balancer IP, logging in fails. It attempts to log in then …

---

## [ODBC connection to ES](https://discuss.elastic.co/t/odbc-connection-to-es/35731)

<div class="topic-metadata">

**Author:** [@joris\_renkens](https://discuss.elastic.co/u/joris_renkens)\
**Replies:** 3\
**Last updated:** [December 29, 2015, 8:22pm UTC](https://discuss.elastic.co/t/odbc-connection-to-es/35731 "2015-12-29T20:22:48Z")

</div>

Hi, I'm trying to get an ODBC connection to ES which pushes down as much as possible to ES. I'm trying to use the spark-sql thrift-server and the es-hadoop spark-sql connection but I'm having a hard time getting it to…

---

## [How to update a single field using the Java API Client?](https://discuss.elastic.co/t/how-to-update-a-single-field-using-the-java-api-client/306679)

<div class="topic-metadata">

**Author:** [@dsc](https://discuss.elastic.co/u/dsc)\
**Replies:** 1\
**Last updated:** [June 8, 2022, 12:33pm UTC](https://discuss.elastic.co/t/how-to-update-a-single-field-using-the-java-api-client/306679 "2022-06-08T12:33:34Z")

</div>

I'm currently using the deprecated Java High Level REST Client to partially update a document using something similar to the guide: Update API | Java REST Client \[7.17\] | Elastic I'm trying to migrate to the latest Elas…

---

## [Redis Cluster vs. Kafka](https://discuss.elastic.co/t/redis-cluster-vs-kafka/45273)

<div class="topic-metadata">

**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\
**Replies:** 2\
**Last updated:** [April 2, 2016, 2:23pm UTC](https://discuss.elastic.co/t/redis-cluster-vs-kafka/45273 "2016-04-02T14:23:40Z")

</div>

I'm looking at building a fully modular, multi-tier ELK stack for my Prod environment. Part of that is to create a buffer layer (either Redis or Kafka), but I would like it to be clustered so that the loss of one buffer…

---

## [How to use the ElasticSearch Java API to build an Aggregation from JSON](https://discuss.elastic.co/t/how-to-use-the-elasticsearch-java-api-to-build-an-aggregation-from-json/70773)

<div class="topic-metadata">

**Author:** [@jonskeet](https://discuss.elastic.co/u/jonskeet)\
**Replies:** 4\
**Last updated:** [April 7, 2018, 3:01am UTC](https://discuss.elastic.co/t/how-to-use-the-elasticsearch-java-api-to-build-an-aggregation-from-json/70773 "2018-04-07T03:01:38Z")

</div>

Hi everyone, My code has an ElasticSearch query and aggregations in JSON format, and wants to call the ElasticSearch Java API. For the Query portion, I can use WrapperQuery to build the query from the JSON as so: v…

---

## [Winlogbeat network port usage](https://discuss.elastic.co/t/winlogbeat-network-port-usage/124306)

<div class="topic-metadata">

**Author:** [@minidan](https://discuss.elastic.co/u/minidan)\
**Replies:** 4\
**Last updated:** [March 16, 2018, 4:41pm UTC](https://discuss.elastic.co/t/winlogbeat-network-port-usage/124306 "2018-03-16T16:41:43Z")

</div>

Hi, maybe daft question, but what protocol port does Winlogbeat use to send from on PCs?

---

## [How to filter only error logs using filebeat](https://discuss.elastic.co/t/how-to-filter-only-error-logs-using-filebeat/216385)

<div class="topic-metadata">

**Author:** [@Anindita\_Chavan](https://discuss.elastic.co/u/Anindita_Chavan)\
**Replies:** 3\
**Last updated:** [January 24, 2020, 10:20am UTC](https://discuss.elastic.co/t/how-to-filter-only-error-logs-using-filebeat/216385 "2020-01-24T10:20:05Z")

</div>

Hello, i have a log file that contains INFO,WARN and ERROR like : \[17:37:17.103\] \[ERROR\] \[...\] \[.....\] these are log4j logs. Using filebeat, I want to filter out only those logs with log level ERROR and send them to …

---

## [Elasticsearch.yml made an error after adding \[bootstrap.mlockall: true\]. The version used was 5.6.3](https://discuss.elastic.co/t/elasticsearch-yml-made-an-error-after-adding-bootstrap-mlockall-true-the-version-used-was-5-6-3/108660)

<div class="topic-metadata">

**Author:** [@648007679](https://discuss.elastic.co/u/648007679)\
**Replies:** 4\
**Last updated:** [November 24, 2017, 5:55am UTC](https://discuss.elastic.co/t/elasticsearch-yml-made-an-error-after-adding-bootstrap-mlockall-true-the-version-used-was-5-6-3/108660 "2017-11-24T05:55:45Z")

</div>

Hi elasticsearch.yml is after adding \[bootstrap.mlockall: true\],An error occurred while the program was started: uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupException: java.lang.IllegalArgum…

---

## [Kibana not showing all data](https://discuss.elastic.co/t/kibana-not-showing-all-data/250525)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 7\
**Last updated:** [October 5, 2020, 7:09pm UTC](https://discuss.elastic.co/t/kibana-not-showing-all-data/250525 "2020-10-05T19:09:56Z")

</div>

Hi guys , recently i injected a 1,7 GB file in elasticsearch using logstash, so when i check the index management i find 9782102 and when i try to make a metric visualization it gives me 9007610 document any idea w…

---

## [\[Solved\] Elasticsearch 7.2.0, Python and Date Range Query](https://discuss.elastic.co/t/solved-elasticsearch-7-2-0-python-and-date-range-query/193891)

<div class="topic-metadata">

**Author:** [@pritchey](https://discuss.elastic.co/u/pritchey)\
**Replies:** 2\
**Last updated:** [August 6, 2019, 12:50am UTC](https://discuss.elastic.co/t/solved-elasticsearch-7-2-0-python-and-date-range-query/193891 "2019-08-06T00:50:55Z")

</div>

I'm really pulling my hair out on something that should be working (I think) but is returning no results. I'm using packetbeats to feed data into my Elasticsearch setup (7.2.0). Data is there - I can see it in Kibana. …

---

## [Error from Beats: Failed to connect: dial tcp 127.0.0.1:5044: getsockopt: connection refused](https://discuss.elastic.co/t/error-from-beats-failed-to-connect-dial-tcp-127-0-0-1-5044-getsockopt-connection-refused/125301)

<div class="topic-metadata">

**Author:** [@Joe\_Law](https://discuss.elastic.co/u/Joe_Law)\
**Replies:** 1\
**Last updated:** [March 23, 2018, 9:51pm UTC](https://discuss.elastic.co/t/error-from-beats-failed-to-connect-dial-tcp-127-0-0-1-5044-getsockopt-connection-refused/125301 "2018-03-23T21:51:11Z")

</div>

Hi Guys. Need input from you all to get my setting right. I am running my ELK stack in docker with sebp/elk. And I have another instance with my Laravel App. Everything goess well until I try to configure filebeat in …

---

## [How to parse IP address from file /var/log/syslog in Logstash 10-syslog-conf](https://discuss.elastic.co/t/how-to-parse-ip-address-from-file-var-log-syslog-in-logstash-10-syslog-conf/35701)

<div class="topic-metadata">

**Author:** [@lewis151](https://discuss.elastic.co/u/lewis151)\
**Replies:** 7\
**Last updated:** [November 28, 2015, 1:53am UTC](https://discuss.elastic.co/t/how-to-parse-ip-address-from-file-var-log-syslog-in-logstash-10-syslog-conf/35701 "2015-11-28T01:53:34Z")

</div>

Time file syslog\_message syslog\_program received\_from November 26th 2015, 18:00:49.000 /var/log/syslog Invalid response packet from host 131.247.30.106. avahi-daemon xen3ubut14dt-0

---

## [Getting "security\_exception: action \[indices:admin/settings/update\] is unauthorized" on indexes with policies updated by a new user](https://discuss.elastic.co/t/getting-security-exception-action-indices-admin-settings-update-is-unauthorized-on-indexes-with-policies-updated-by-a-new-user/258198)

<div class="topic-metadata">

**Author:** [@prolbrakels](https://discuss.elastic.co/u/prolbrakels)\
**Replies:** 2\
**Last updated:** [December 10, 2020, 7:58pm UTC](https://discuss.elastic.co/t/getting-security-exception-action-indices-admin-settings-update-is-unauthorized-on-indexes-with-policies-updated-by-a-new-user/258198 "2020-12-10T19:58:18Z")

</div>

This is for an ES cluster running v7.8.1. I'm trying to automate pushing updates to our ILM policies and (legacy) templates, so I have a shell script that curls the appropriate json via a new ES user called "template\_ma…

---

## [Json Deserialize Exception coming while searching Elastic Search Indexes](https://discuss.elastic.co/t/json-deserialize-exception-coming-while-searching-elastic-search-indexes/180655)

<div class="topic-metadata">

**Author:** [@himanshum](https://discuss.elastic.co/u/himanshum)\
**Replies:** 1\
**Last updated:** [May 17, 2019, 1:55pm UTC](https://discuss.elastic.co/t/json-deserialize-exception-coming-while-searching-elastic-search-indexes/180655 "2019-05-17T13:55:09Z")

</div>

Hi, I am using Elasticsearch.Net and Nest Nuget Packages. version 6.7.0 for both. I have configured the server at localhost:9200/#/ I have also created indexes. Now, while searching I am getting an exception. Elas…

---

## [I have the error (503), No Shard Available Action Exception](https://discuss.elastic.co/t/i-have-the-error-503-no-shard-available-action-exception/157500)

<div class="topic-metadata">

**Author:** [@14b07852ef50bed9e66b](https://discuss.elastic.co/u/14b07852ef50bed9e66b)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 5:53am UTC](https://discuss.elastic.co/t/i-have-the-error-503-no-shard-available-action-exception/157500 "2018-11-21T05:53:06Z")

</div>

"version" : { "number" : "2.3.0", "build\_hash" : "8371be8d5fe5df7fb9c0516c474d77b9feddd888", "build\_timestamp" : "2016-03-29T07:54:48Z", "build\_snapshot" : false, "lucene\_version" : "5.5.0" } When …

---

## [How to sort by a property with NEST when the name is given as string? Please help](https://discuss.elastic.co/t/how-to-sort-by-a-property-with-nest-when-the-name-is-given-as-string-please-help/208696)

<div class="topic-metadata">

**Author:** [@TDev](https://discuss.elastic.co/u/TDev)\
**Replies:** 4\
**Last updated:** [December 5, 2019, 4:08pm UTC](https://discuss.elastic.co/t/how-to-sort-by-a-property-with-nest-when-the-name-is-given-as-string-please-help/208696 "2019-12-05T16:08:55Z")

</div>

This is a C# snippet of what I am trying to do: string MyProperty = "MyPropertyName"; var MyOrder = SortOrder.Ascending; Func\<SortDescriptor\<MyClass\>, Nest.IPromise\<IList\<ISort\>\>\> Sorting; Sorting = sort =\> sort…

---

## [Looking for heavy write optimization](https://discuss.elastic.co/t/looking-for-heavy-write-optimization/17768)

<div class="topic-metadata">

**Author:** [@Zealot\_Yin](https://discuss.elastic.co/u/Zealot_Yin)\
**Replies:** 8\
**Last updated:** [May 30, 2014, 5:10am UTC](https://discuss.elastic.co/t/looking-for-heavy-write-optimization/17768 "2014-05-30T05:10:13Z")

</div>

hi I am writing a real time analytics tool using kafka,storm and elasticsearch and want a elasticsearch that is write optimized for about 80K/sec inserts(7 machine cluster). For the purpose of high perform…

---

## [Multiple config files and filter application](https://discuss.elastic.co/t/multiple-config-files-and-filter-application/32571)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 5\
**Last updated:** [October 20, 2015, 7:50pm UTC](https://discuss.elastic.co/t/multiple-config-files-and-filter-application/32571 "2015-10-20T19:50:48Z")

</div>

I want to pass a directory as the -f argument to load several config files but I'm concerned about filter sequence.The following is a pair of typical config files. Is my usage of conditionals appropriate to have the filt…

---

## [Curator delete\_snapshot always timeout](https://discuss.elastic.co/t/curator-delete-snapshot-always-timeout/147637)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 8\
**Last updated:** [September 7, 2018, 10:07pm UTC](https://discuss.elastic.co/t/curator-delete-snapshot-always-timeout/147637 "2018-09-07T22:07:27Z")

</div>

Background: Elastic Version 6.2.1 + curator 5.5.1 Azure Storage is used for storing snapshots I'm using curator to delete the snapshots. But it keeps failing with timeout error. Below is the log 2018-09-06 20:42:09,…

---

## [Comparing date/time from two different documents](https://discuss.elastic.co/t/comparing-date-time-from-two-different-documents/130933)

<div class="topic-metadata">

**Author:** [@uhaslund](https://discuss.elastic.co/u/uhaslund)\
**Replies:** 8\
**Last updated:** [May 8, 2018, 7:02am UTC](https://discuss.elastic.co/t/comparing-date-time-from-two-different-documents/130933 "2018-05-08T07:02:52Z")

</div>

Hi, The scenario is this: Same index Two different documents A and B Document A contains a log entry for event "Client Requests X" Document B contains a log entry for event "Client Request Accepted" How do I calculat…

---

## [Fetch record from Multiple Table Using Elastic Search Join Query in .net](https://discuss.elastic.co/t/fetch-record-from-multiple-table-using-elastic-search-join-query-in-net/77263)

<div class="topic-metadata">

**Author:** [@Rahul\_Saxena](https://discuss.elastic.co/u/Rahul_Saxena)\
**Replies:** 6\
**Last updated:** [March 3, 2017, 11:13am UTC](https://discuss.elastic.co/t/fetch-record-from-multiple-table-using-elastic-search-join-query-in-net/77263 "2017-03-03T11:13:55Z")

</div>

We are implementing "Elastic Search" in our one of the project in .NET. We have already started the implementing. But somehow between it, we are facing some issues. We have transferred our SQL database to the Elastic S…

---

## [NEST client with BasicAuthentication and SecureString](https://discuss.elastic.co/t/nest-client-with-basicauthentication-and-securestring/69565)

<div class="topic-metadata">

**Author:** [@niaz](https://discuss.elastic.co/u/niaz)\
**Replies:** 1\
**Last updated:** [December 20, 2016, 7:32pm UTC](https://discuss.elastic.co/t/nest-client-with-basicauthentication-and-securestring/69565 "2016-12-20T19:32:47Z")

</div>

Hello, I am currently initializing the ElasticClient like below var settings = new ConnectionSettings(new Uri(mEsQuerySource.Url)); settings.EnableHttpCompression(); settings.BasicAuthentication("user", "…

---

## [Filebeat: Exiting: Failed to start crawler: creating module reloader failed: string value is not set accessing 'connection\_string'](https://discuss.elastic.co/t/filebeat-exiting-failed-to-start-crawler-creating-module-reloader-failed-string-value-is-not-set-accessing-connection-string/276552)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 5\
**Last updated:** [July 6, 2021, 7:27pm UTC](https://discuss.elastic.co/t/filebeat-exiting-failed-to-start-crawler-creating-module-reloader-failed-string-value-is-not-set-accessing-connection-string/276552 "2021-07-06T19:27:14Z")

</div>

Hello Im suddenly getting this error in Filebeat. Im not sure really where to look at I wasnt getting this error before. Any ideas? Thank you

---

## [RangeError: Invalid string length](https://discuss.elastic.co/t/rangeerror-invalid-string-length/201628)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 5\
**Last updated:** [October 1, 2019, 4:29pm UTC](https://discuss.elastic.co/t/rangeerror-invalid-string-length/201628 "2019-10-01T16:29:42Z")

</div>

Hi, when i search for on an index pattern for data through discover tab, the browser waits for some time and then just crashes with 'Aw snap!' message. No error in either Kibana or Elasticsearch logs. This is happening…

---

## [\[SOLVED\] Logstash 5.2.2 - Mutate string value to number](https://discuss.elastic.co/t/solved-logstash-5-2-2-mutate-string-value-to-number/100877)

<div class="topic-metadata">

**Author:** [@D-Sect](https://discuss.elastic.co/u/D-Sect)\
**Replies:** 2\
**Last updated:** [September 21, 2017, 10:25am UTC](https://discuss.elastic.co/t/solved-logstash-5-2-2-mutate-string-value-to-number/100877 "2017-09-21T10:25:48Z")

</div>

I am having an issue with a logstash 5.2.2 filter. I need to convert a string to an integer and it's failing. The approach I am taking may not be ideal. Here's the problem statement: A JMX MBean value reports a "metric\_v…

---

## [Auto mapping a csv file](https://discuss.elastic.co/t/auto-mapping-a-csv-file/44695)

<div class="topic-metadata">

**Author:** [@Croos](https://discuss.elastic.co/u/Croos)\
**Replies:** 7\
**Last updated:** [March 18, 2016, 8:36am UTC](https://discuss.elastic.co/t/auto-mapping-a-csv-file/44695 "2016-03-18T08:36:31Z")

</div>

I'm uploading a csv file to elasticsearch by logstash befor that do the mapping manually. How to automate the mapping when the csv file is uploading?

---

## [Using different mtu value in elasticsearch](https://discuss.elastic.co/t/using-different-mtu-value-in-elasticsearch/20342)

<div class="topic-metadata">

**Author:** [@P\_A\_M](https://discuss.elastic.co/u/P_A_M)\
**Replies:** 0\
**Last updated:** [October 20, 2014, 2:20pm UTC](https://discuss.elastic.co/t/using-different-mtu-value-in-elasticsearch/20342 "2014-10-20T14:20:28Z")

</div>

Hi all, I am setting up an ElasticSearch 1.3.4 cluster with multihomed servers (a corporate network x.x.x.x and a server-only network at 10Gbs on z.z.z.z, each server having two nic). I ran into some problems as I…

---

## [Logstash not creating index on elasticsearch](https://discuss.elastic.co/t/logstash-not-creating-index-on-elasticsearch/82146)

<div class="topic-metadata">

**Author:** [@dbElastic](https://discuss.elastic.co/u/dbElastic)\
**Replies:** 4\
**Last updated:** [April 19, 2017, 12:30pm UTC](https://discuss.elastic.co/t/logstash-not-creating-index-on-elasticsearch/82146 "2017-04-19T12:30:42Z")

</div>

Hello, I have ElasticSearch and Logstash installed on same machine(Ubuntu). I have the below apache\_logs.conf file contents: input { file { path =\> "/var/log/apache\_logs" type =\> "apache\_log" # a type to id…

---

## [Restore of elasticsearch data fails with CorruptIndexException\[checksum failed (hardware problem?)](https://discuss.elastic.co/t/restore-of-elasticsearch-data-fails-with-corruptindexexception-checksum-failed-hardware-problem/261619)

<div class="topic-metadata">

**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\
**Replies:** 5\
**Last updated:** [January 25, 2021, 9:00am UTC](https://discuss.elastic.co/t/restore-of-elasticsearch-data-fails-with-corruptindexexception-checksum-failed-hardware-problem/261619 "2021-01-25T09:00:41Z")

</div>

Hi Team, We trying to restore a backup that we had taken a couple of days ago on a freshly installed elasticsearch cluster. The steps we followed are mentioned below: Installed an elasticsearch chart and pushed some d…

---

## [No existing kibana index found for kibana](https://discuss.elastic.co/t/no-existing-kibana-index-found-for-kibana/33696)

<div class="topic-metadata">

**Author:** [@wjcaitu](https://discuss.elastic.co/u/wjcaitu)\
**Replies:** 5\
**Last updated:** [November 4, 2015, 7:35am UTC](https://discuss.elastic.co/t/no-existing-kibana-index-found-for-kibana/33696 "2015-11-04T07:35:23Z")

</div>

Hi, I am using kibana with elk and logstash. And when i use /bin/kibana, the log shows like: {"name":"Kibana","hostname":"eselnvlx1674","pid":550738,"level":30,"msg":"No existing kibana index found","time":"2015-11-04…

---

## [Help with sum and max query](https://discuss.elastic.co/t/help-with-sum-and-max-query/102941)

<div class="topic-metadata">

**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\
**Replies:** 6\
**Last updated:** [October 11, 2017, 4:03am UTC](https://discuss.elastic.co/t/help-with-sum-and-max-query/102941 "2017-10-11T04:03:09Z")

</div>

Hi experts. I having problem when i want to sum the max value field. My query to take the max value field { "size":0, "query": { "bool": { "must": \[ {"term": {"zone\_id" : "1"…

---

## [Logstash plugin install fails](https://discuss.elastic.co/t/logstash-plugin-install-fails/121700)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 0\
**Last updated:** [February 27, 2018, 5:13pm UTC](https://discuss.elastic.co/t/logstash-plugin-install-fails/121700 "2018-02-27T17:13:55Z")

</div>

I'm trying to install a plugins for logstash 6.1.1. We have configured our f/w to NOT decrypt this traffic as it seems to break the plugin installs. I installed logstash-filter-tld and logstash-filter-rest just fine. …

---

## [Reload the same file from the beginning without restarting logstash](https://discuss.elastic.co/t/reload-the-same-file-from-the-beginning-without-restarting-logstash/68156)

<div class="topic-metadata">

**Author:** [@mehdi-aouadi](https://discuss.elastic.co/u/mehdi-aouadi)\
**Replies:** 4\
**Last updated:** [December 7, 2016, 9:36am UTC](https://discuss.elastic.co/t/reload-the-same-file-from-the-beginning-without-restarting-logstash/68156 "2016-12-07T09:36:29Z")

</div>

I managed to force Logstash reloading the whole file by pointing the sincedb\_path to NUL (Windows environment) and setting the start\_position at the beginning. Here is my file input configuration: input { file {…

---

## [Searching logs by host name](https://discuss.elastic.co/t/searching-logs-by-host-name/316388)

<div class="topic-metadata">

**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\
**Replies:** 7\
**Last updated:** [November 16, 2022, 4:33pm UTC](https://discuss.elastic.co/t/searching-logs-by-host-name/316388 "2022-11-16T16:33:31Z")

</div>

I have a little quandary. I'd like my customers to easily search for logs by host name. ECS has a field, host.name exactly for that information, but it's keyword, and that requires users know the exact capitalization a…

---

## [Filebeats and multiple files](https://discuss.elastic.co/t/filebeats-and-multiple-files/57295)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 4\
**Last updated:** [August 10, 2016, 1:29pm UTC](https://discuss.elastic.co/t/filebeats-and-multiple-files/57295 "2016-08-10T13:29:03Z")

</div>

Hi. I have a requirement to pull in multiple files from the same host, but in Logstash they need to follow different input/filter and output paths. I was going to setup 2 Filebeats on this Unix hosts but that doesn't see…

---

## [How to set include\_type\_name to be true or false by Java rest High client APM](https://discuss.elastic.co/t/how-to-set-include-type-name-to-be-true-or-false-by-java-rest-high-client-apm/270365)

<div class="topic-metadata">

**Author:** [@SomberOfShadow](https://discuss.elastic.co/u/SomberOfShadow)\
**Replies:** 2\
**Last updated:** [April 19, 2021, 1:56am UTC](https://discuss.elastic.co/t/how-to-set-include-type-name-to-be-true-or-false-by-java-rest-high-client-apm/270365 "2021-04-19T01:56:59Z")

</div>

How to set include\_type\_name to be true or false by Java rest High client APM in order to solve follwing issue : Elasticsearch error: Types cannot be provided in get mapping requests, unless include\_type\_name is set…

---

## [Does Filebeat support output to S3?](https://discuss.elastic.co/t/does-filebeat-support-output-to-s3/203499)

<div class="topic-metadata">

**Author:** [@john\_eapen](https://discuss.elastic.co/u/john_eapen)\
**Replies:** 1\
**Last updated:** [October 14, 2019, 5:51pm UTC](https://discuss.elastic.co/t/does-filebeat-support-output-to-s3/203499 "2019-10-14T17:51:43Z")

</div>

Is there an output plugging for AWS S3 ? Need to send container logs to S3. Thanks John

---

## [New Java API Client throws JsonpMappingException](https://discuss.elastic.co/t/new-java-api-client-throws-jsonpmappingexception/360345)

<div class="topic-metadata">

**Author:** [@PodarcisMuralis](https://discuss.elastic.co/u/PodarcisMuralis)\
**Replies:** 8\
**Last updated:** [May 30, 2024, 7:49am UTC](https://discuss.elastic.co/t/new-java-api-client-throws-jsonpmappingexception/360345 "2024-05-30T07:49:08Z")

</div>

Hi, I am currently migrating from High Rest API Client to Java APi Client and I got an error which I can not solve. This is my code: @Override public Optional\<MyClass\> findById(String id, List\<String\> customerIds…

---

## [Elastic Agent Custom Windows Event Logs](https://discuss.elastic.co/t/elastic-agent-custom-windows-event-logs/304485)

<div class="topic-metadata">

**Author:** [@Joshua\_H](https://discuss.elastic.co/u/Joshua_H)\
**Replies:** 4\
**Last updated:** [May 18, 2022, 12:55pm UTC](https://discuss.elastic.co/t/elastic-agent-custom-windows-event-logs/304485 "2022-05-18T12:55:53Z")

</div>

Hello everyone, I am struggling to add custom Windows Event Logs to my Elastic-Agents / my Agent-Policy and make it work. For example I would like to ingest Elasticsearch with Event Logs from the Serverrole Remotedeskt…

---

## [Supported Operating System](https://discuss.elastic.co/t/supported-operating-system/22797)

<div class="topic-metadata">

**Author:** [@Gil\_Peleg](https://discuss.elastic.co/u/Gil_Peleg)\
**Replies:** 2\
**Last updated:** [March 21, 2015, 11:56pm UTC](https://discuss.elastic.co/t/supported-operating-system/22797 "2015-03-21T23:56:48Z")

</div>

Hey, I was wondering if there was any guidelines as to preferred OS for ES? Are there any that are not supported? I currently run Windows Server 2008 R2 on a project I am working on and was wondering if there was…

---

## [Reset Elasticsearch Internal User Password](https://discuss.elastic.co/t/reset-elasticsearch-internal-user-password/313837)

<div class="topic-metadata">

**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\
**Replies:** 8\
**Last updated:** [September 8, 2022, 1:31am UTC](https://discuss.elastic.co/t/reset-elasticsearch-internal-user-password/313837 "2022-09-08T01:31:49Z")

</div>

Hi, Does anyone know how to reset or change Elasticsearch internal user password?

---

## [Elasticsearch 5.1.1 master nodes can't discover each other in AWS](https://discuss.elastic.co/t/elasticsearch-5-1-1-master-nodes-cant-discover-each-other-in-aws/72211)

<div class="topic-metadata">

**Author:** [@donone-apex](https://discuss.elastic.co/u/donone-apex)\
**Replies:** 6\
**Last updated:** [January 20, 2017, 8:05pm UTC](https://discuss.elastic.co/t/elasticsearch-5-1-1-master-nodes-cant-discover-each-other-in-aws/72211 "2017-01-20T20:05:14Z")

</div>

hello all - having a bit of trouble with getting my master ES nodes to discover each other and cluster up. ES 5.1.1 in AWS on Amazon AMIs (CentOS). I've validated that they are all in the same security group, that they …

---

## [Why elasticsearch convert all my field name to lower case?](https://discuss.elastic.co/t/why-elasticsearch-convert-all-my-field-name-to-lower-case/134593)

<div class="topic-metadata">

**Author:** [@ali1](https://discuss.elastic.co/u/ali1)\
**Replies:** 7\
**Last updated:** [June 5, 2018, 2:57pm UTC](https://discuss.elastic.co/t/why-elasticsearch-convert-all-my-field-name-to-lower-case/134593 "2018-06-05T14:57:38Z")

</div>

hello, i create the following index : PUT testindex { "mappings": { "datai": { "properties": { "firsName": { "type": "text" }, "lastName": { "type": "text" }, "phoneNumber":…

---

## [Create custom index using custom mapping field via logstash](https://discuss.elastic.co/t/create-custom-index-using-custom-mapping-field-via-logstash/105757)

<div class="topic-metadata">

**Author:** [@Aner\_Izraeli](https://discuss.elastic.co/u/Aner_Izraeli)\
**Replies:** 7\
**Last updated:** [October 30, 2017, 2:56pm UTC](https://discuss.elastic.co/t/create-custom-index-using-custom-mapping-field-via-logstash/105757 "2017-10-30T14:56:58Z")

</div>

Hello there, im using logstash with matching my custom fields via multigrok.conf. example: match =\> { "message" =\> "(?\<log\_type\>AUTORUN) (?.\*?)|%{IPORHOST:machineName}|%{DATA:userName}|%{DATA:domainname}|%{DATA:os}|%{…

---

## [Join multiple Independent Indices](https://discuss.elastic.co/t/join-multiple-independent-indices/35796)

<div class="topic-metadata">

**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\
**Replies:** 7\
**Last updated:** [November 30, 2015, 2:52pm UTC](https://discuss.elastic.co/t/join-multiple-independent-indices/35796 "2015-11-30T14:52:02Z")

</div>

Environment: File Beat (1.0.0-rc2) --\> Log Stash (2.1.0)--\> Elastic Search (2.1.0)--\> Kibana (4.3) Use Case: Real time application transactions logs metrics analysis & monitoring, Search Domain: Telecom IT Description: T…

---

## [How to set elasticsearch index store?](https://discuss.elastic.co/t/how-to-set-elasticsearch-index-store/57556)

<div class="topic-metadata">

**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\
**Replies:** 3\
**Last updated:** [August 9, 2016, 8:41am UTC](https://discuss.elastic.co/t/how-to-set-elasticsearch-index-store/57556 "2016-08-09T08:41:03Z")

</div>

Hi, All You know, The elasticsearch index can store in memory or in disk. I want to konw which date can store in memory and which date can store in disk? The difference of store in memory and store in disk? How to set th…

---

## [Kibana painless- Difference in dates in days](https://discuss.elastic.co/t/kibana-painless-difference-in-dates-in-days/169201)

<div class="topic-metadata">

**Author:** [@gauravb](https://discuss.elastic.co/u/gauravb)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 8:26pm UTC](https://discuss.elastic.co/t/kibana-painless-difference-in-dates-in-days/169201 "2019-02-20T20:26:11Z")

</div>

I have two date fields - Date1 and Date2, both are in date format I want to calculate days between the two dates. I tried doc\['date2'\].value - doc\['date1'\].value, this is not giving the expect…

[Previous page](https://discuss.elastic.co/top.md?page=430&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=432&per_page=50&period=all)
