# Top **URL:** https://discuss.elastic.co/top.md?page=435&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 436 --- ## [Too many open files in shards allocation](https://discuss.elastic.co/t/too-many-open-files-in-shards-allocation/145347)
**Author:** [@Edouard\_Fazenda](https://discuss.elastic.co/u/Edouard_Fazenda)\ **Replies:** 5\ **Last updated:** [August 21, 2018, 11:52am UTC](https://discuss.elastic.co/t/too-many-open-files-in-shards-allocation/145347 "2018-08-21T11:52:29Z")
Dear Community, I have the following issue since few days i have some unassigned shards due to allocation faillure, so the cluster goes to yellow and sometimes the cluster go to red as the elasticsearch service goes dow… --- ## [Indices.fielddata.cache.expire](https://discuss.elastic.co/t/indices-fielddata-cache-expire/1183)
**Author:** [@Asimov4](https://discuss.elastic.co/u/Asimov4)\ **Replies:** 1\ **Last updated:** [May 23, 2015, 7:27am UTC](https://discuss.elastic.co/t/indices-fielddata-cache-expire/1183 "2015-05-23T07:27:09Z")
Based on https://www.elastic.co/guide/en/elasticsearch/reference/current/index-modules-fielddata.html and the indices.fielddata.cache.expire setting is experimental. In this article: Limiting Memory Usage | Elasticsearc… --- ## [Head Plugin for Elasticsearch 5.0.1](https://discuss.elastic.co/t/head-plugin-for-elasticsearch-5-0-1/66696)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 3\ **Last updated:** [November 21, 2016, 11:43am UTC](https://discuss.elastic.co/t/head-plugin-for-elasticsearch-5-0-1/66696 "2016-11-21T11:43:13Z")
I upgraded my elasticsearch form 2.4.1 to 5.0.1 It seems that my head plugin isn’t working anymore. I am getting the following error: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"No endpoi… --- ## [Truncate part of an existing field value to a new field using painless?](https://discuss.elastic.co/t/truncate-part-of-an-existing-field-value-to-a-new-field-using-painless/70350)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 6\ **Last updated:** [January 5, 2017, 4:43am UTC](https://discuss.elastic.co/t/truncate-part-of-an-existing-field-value-to-a-new-field-using-painless/70350 "2017-01-05T04:43:33Z")
I'm having a timestamp field which has a value something like this , where pretty much all the values would be in the same format: January 1st 2017, 05:29:59.000 What I need is to trim part of the above which should… --- ## [How to push data from Hadoop to ES?](https://discuss.elastic.co/t/how-to-push-data-from-hadoop-to-es/90272)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 5\ **Last updated:** [June 23, 2017, 5:58pm UTC](https://discuss.elastic.co/t/how-to-push-data-from-hadoop-to-es/90272 "2017-06-23T17:58:57Z")
I've already gone through the guide proposed by ES but then i'm still quite uncertain on how this works. I'm trying to send data from hadoop to my ES index. Is this possible? So this is what I have tried so far: I… --- ## [Getting multiple average aggregations](https://discuss.elastic.co/t/getting-multiple-average-aggregations/93604)
**Author:** [@SamA](https://discuss.elastic.co/u/SamA)\ **Replies:** 1\ **Last updated:** [July 18, 2017, 2:55pm UTC](https://discuss.elastic.co/t/getting-multiple-average-aggregations/93604 "2017-07-18T14:55:32Z")
I have a query where I'm grouping by smartphone and then by carrier. Inside these nested aggregations, I want to find the avg price, rating, and speed of each carrier for that particular smartphone. This is my current qu… --- ## [Index Management](https://discuss.elastic.co/t/index-management/246979)
**Author:** [@Pierrelaurent](https://discuss.elastic.co/u/Pierrelaurent)\ **Replies:** 8\ **Last updated:** [September 1, 2020, 1:16pm UTC](https://discuss.elastic.co/t/index-management/246979 "2020-09-01T13:16:46Z")
Hi There I keep getting this error when i try to start metricbeat. I have got the newest version of Logstash Elasticsearch and Kibana running on centos 7 ERROR instance/beat.go:951 Exiting: Index management requested b… --- ## [Elasticsearch java api field extracting](https://discuss.elastic.co/t/elasticsearch-java-api-field-extracting/48457)
**Author:** [@maher](https://discuss.elastic.co/u/maher)\ **Replies:** 3\ **Last updated:** [April 27, 2016, 8:55am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-field-extracting/48457 "2016-04-27T08:55:10Z")
Hi, I am trying to retrieve some data from elasticsearch using java api. SearchResponse response = client.prepareSearch("dashboard") .setTypes("logs") .setFetchSource(new String\[\]{"aggregations"}, null… --- ## [How to show data without "Aggregation"](https://discuss.elastic.co/t/how-to-show-data-without-aggregation/108359)
**Author:** [@ahmedcharef](https://discuss.elastic.co/u/ahmedcharef)\ **Replies:** 2\ **Last updated:** [November 20, 2017, 6:13pm UTC](https://discuss.elastic.co/t/how-to-show-data-without-aggregation/108359 "2017-11-20T18:13:31Z")
Hello, I have inserted more than 300.000 data line in ElasticSearch, This is an example of my data: \[Screenshot-2017-11-20 Smart Urbanization\] I would like to show my data in line chart, here is my chart \[Screenshot-… --- ## [Filebeat stopped working](https://discuss.elastic.co/t/filebeat-stopped-working/41401)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 5\ **Last updated:** [February 10, 2016, 6:28pm UTC](https://discuss.elastic.co/t/filebeat-stopped-working/41401 "2016-02-10T18:28:43Z")
Hey guys, I noticed that I stopped receiving logs in logstash from the one host I have running filebeat. If I tail the logs for filebeat and I'm seeing these messages repeating over and over again: 2016-02-10T11… --- ## [Filebeat rename processor with conditions](https://discuss.elastic.co/t/filebeat-rename-processor-with-conditions/153371)
**Author:** [@havlan](https://discuss.elastic.co/u/havlan)\ **Replies:** 7\ **Last updated:** [October 26, 2018, 1:33pm UTC](https://discuss.elastic.co/t/filebeat-rename-processor-with-conditions/153371 "2018-10-26T13:33:28Z")
Hi! I'm trying to rename some fields from kubernetes annotations based on an when conditions, due to not finding any good resources, I was wondering if someone of you could help me with this. My goal is to rename events… --- ## [How to set watcher alerts, on aggregations](https://discuss.elastic.co/t/how-to-set-watcher-alerts-on-aggregations/95196)
**Author:** [@dinaWork](https://discuss.elastic.co/u/dinaWork)\ **Replies:** 1\ **Last updated:** [July 31, 2017, 2:14pm UTC](https://discuss.elastic.co/t/how-to-set-watcher-alerts-on-aggregations/95196 "2017-07-31T14:14:36Z")
I would like to monitor my errors on elasticsearch. I would like to get a notification if a certain error occurred more than a certain number of times (lets say 2 times) in a time period of one hour. For example if the… --- ## [Decimal in elastic](https://discuss.elastic.co/t/decimal-in-elastic/170493)
**Author:** [@Suren](https://discuss.elastic.co/u/Suren)\ **Replies:** 3\ **Last updated:** [March 1, 2019, 4:46pm UTC](https://discuss.elastic.co/t/decimal-in-elastic/170493 "2019-03-01T16:46:27Z")
if i have float field in elastic and give value 9999999.9999999 it rounds it to 10000000 how can i put decimal value without rounding ? --- ## [Unable to set heap size via LS\_HEAP\_SIZE on logstash 5.1.1](https://discuss.elastic.co/t/unable-to-set-heap-size-via-ls-heap-size-on-logstash-5-1-1/71085)
**Author:** [@Marco\_Spadoni](https://discuss.elastic.co/u/Marco_Spadoni)\ **Replies:** 3\ **Last updated:** [January 13, 2017, 9:06am UTC](https://discuss.elastic.co/t/unable-to-set-heap-size-via-ls-heap-size-on-logstash-5-1-1/71085 "2017-01-13T09:06:36Z")
I am currently using logstash 5.1.1 on CentOS 7 sending it into execution from a bash shell. When using logstash 2.3.4 I was able to run several instances each one with a different maximum heap size, by making use of the… --- ## [How To delete snapshots older than 20 days](https://discuss.elastic.co/t/how-to-delete-snapshots-older-than-20-days/194801)
**Author:** [@Pottendla\_Nagma](https://discuss.elastic.co/u/Pottendla_Nagma)\ **Replies:** 5\ **Last updated:** [August 12, 2019, 9:40am UTC](https://discuss.elastic.co/t/how-to-delete-snapshots-older-than-20-days/194801 "2019-08-12T09:40:46Z")
Hi, I am looking for any API for deleting the snapshots older than 20 days. Right now DELETE api doing deletion only for particular snapshot given with the name. Please help me. Thank you. Regards, Nagma P. --- ## [Elastic Agent (Fleet Deployment) behind a proxy](https://discuss.elastic.co/t/elastic-agent-fleet-deployment-behind-a-proxy/254183)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 7:42am UTC](https://discuss.elastic.co/t/elastic-agent-fleet-deployment-behind-a-proxy/254183 "2020-11-04T07:42:02Z")
Hi, I'm testing the generic elastic agent with the endpoint security integration. I had some problems because I'm using a custom CA, but luckily the tips in https://github.com/elastic/kibana/issues/73483 helped me and … --- ## [Convert my address book into Geohash to display data in Kibana Tile Map Visualization](https://discuss.elastic.co/t/convert-my-address-book-into-geohash-to-display-data-in-kibana-tile-map-visualization/1988)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 5\ **Last updated:** [May 20, 2016, 12:00pm UTC](https://discuss.elastic.co/t/convert-my-address-book-into-geohash-to-display-data-in-kibana-tile-map-visualization/1988 "2016-05-20T12:00:45Z")
Hi All I have a Elastic Data store which hold the mapping like this Address1, Address2, City,POSTAL\_CODE, Country Now I want to show this data in Kibana Tile Map, how can i convert my Address database to Geohash co… --- ## [Master-slave configuration setting](https://discuss.elastic.co/t/master-slave-configuration-setting/161614)
**Author:** [@aabababba](https://discuss.elastic.co/u/aabababba)\ **Replies:** 8\ **Last updated:** [December 21, 2018, 1:58am UTC](https://discuss.elastic.co/t/master-slave-configuration-setting/161614 "2018-12-21T01:58:58Z")
Master-slave configuration setting, how to set slave automatic change to the main ,when the main hang up. --- ## [Embed Dashboard on external web page with search](https://discuss.elastic.co/t/embed-dashboard-on-external-web-page-with-search/242972)
**Author:** [@Jana](https://discuss.elastic.co/u/Jana)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 8:17pm UTC](https://discuss.elastic.co/t/embed-dashboard-on-external-web-page-with-search/242972 "2020-07-30T20:17:25Z")
Hi, I want to embed a kibana dashboard on an external html page. To do this I took the dashboard as iframe code via 'Share' and created the following simple page: \ \ \ \ **Author:** [@fernandofot](https://discuss.elastic.co/u/fernandofot)\ **Replies:** 1\ **Last updated:** [October 5, 2017, 11:30pm UTC](https://discuss.elastic.co/t/logstash-5-6-2-attempted-to-resurrect-connection-to-dead-es-instance/102911 "2017-10-05T23:30:11Z") Hi Experts, I'm newbie in Elasticsearch. I installed ElasticSearch, Kibana and even Logstash. And there is a problem. I am using all components in version 5.6.2. I know that there are many topics about my issue, and bel… --- ## [Logstash and ILM - rollover not working](https://discuss.elastic.co/t/logstash-and-ilm-rollover-not-working/253530)
**Author:** [@BBQigniter](https://discuss.elastic.co/u/BBQigniter)\ **Replies:** 6\ **Last updated:** [November 3, 2020, 12:33pm UTC](https://discuss.elastic.co/t/logstash-and-ilm-rollover-not-working/253530 "2020-11-03T12:33:39Z")
I please need help to understand ILM in combination with Logstash. My current setup somehow seems not to work as expected. Using ELK 7.9.1 - My configuration looks like: ILM policy - logstash-syslog-compliance { - "l… --- ## [ElasticSearch 2.3 installation with apt fails 404](https://discuss.elastic.co/t/elasticsearch-2-3-installation-with-apt-fails-404/45848)
**Author:** [@petermeter](https://discuss.elastic.co/u/petermeter)\ **Replies:** 6\ **Last updated:** [April 1, 2016, 1:07pm UTC](https://discuss.elastic.co/t/elasticsearch-2-3-installation-with-apt-fails-404/45848 "2016-04-01T13:07:09Z")
Hi there It seems that the url from (current reference) for the debian repository is not working. cat /etc/apt/sources.list.d/elasticsearch-2.3.list deb http://packages.elastic.co/elasticsearch/2.3/debian stable main … --- ## [Convert relational schema to elasticsearch mapping](https://discuss.elastic.co/t/convert-relational-schema-to-elasticsearch-mapping/72291)
**Author:** [@jagan](https://discuss.elastic.co/u/jagan)\ **Replies:** 3\ **Last updated:** [January 20, 2017, 1:40pm UTC](https://discuss.elastic.co/t/convert-relational-schema-to-elasticsearch-mapping/72291 "2017-01-20T13:40:58Z")
Hi All, I am trying to convert the below relational schema to elasticsearch mapping. please correct me if it is the correct approach or suggest me for best mapping model. POST /empdb/empdata/ { "mappings": { "… --- ## [Field \[location\] is defined as a field in mapping \[places\] but this name is already used for an object in other types](https://discuss.elastic.co/t/field-location-is-defined-as-a-field-in-mapping-places-but-this-name-is-already-used-for-an-object-in-other-types/68038)
**Author:** [@minniek](https://discuss.elastic.co/u/minniek)\ **Replies:** 2\ **Last updated:** [December 5, 2016, 1:06pm UTC](https://discuss.elastic.co/t/field-location-is-defined-as-a-field-in-mapping-places-but-this-name-is-already-used-for-an-object-in-other-types/68038 "2016-12-05T13:06:57Z")
Hello , I am getting this error : Field \[location\] is defined as a field in mapping \[places\] but this name is already used for an object in other types. and I dont know what is going on. I only have one location fiel… --- ## [How to reduce snapshot sizes](https://discuss.elastic.co/t/how-to-reduce-snapshot-sizes/151143)
**Author:** [@Jianzhou\_Z](https://discuss.elastic.co/u/Jianzhou_Z)\ **Replies:** 7\ **Last updated:** [October 5, 2018, 6:42am UTC](https://discuss.elastic.co/t/how-to-reduce-snapshot-sizes/151143 "2018-10-05T06:42:03Z")
Backup repository size is much bigger than indices size discusses a problem that snapshots can be too large. I do not think removing old snapshots is the solution because if the old snapshot has segments that newer snap… --- ## [How does logstash generate '\_id' when the outputting to elastic search?](https://discuss.elastic.co/t/how-does-logstash-generate--id-when-the-outputting-to-elastic-search/53722)
**Author:** [@Matthew\_Laue](https://discuss.elastic.co/u/Matthew_Laue)\ **Replies:** 1\ **Last updated:** [June 23, 2016, 4:49am UTC](https://discuss.elastic.co/t/how-does-logstash-generate--id-when-the-outputting-to-elastic-search/53722 "2016-06-23T04:49:30Z")
The elasticsearch \_id parameter is set to some hash value. e.g. "\_id": "AVVpVdoIEU8QqcRWkA9P", How is this calculated? And where? matt@elk:~$ cat /etc/logstash/conf.d/apache.conf input { file { path =\>… --- ## [Python - Update nested object](https://discuss.elastic.co/t/python-update-nested-object/94875)
**Author:** [@Achi](https://discuss.elastic.co/u/Achi)\ **Replies:** 0\ **Last updated:** [July 27, 2017, 10:50pm UTC](https://discuss.elastic.co/t/python-update-nested-object/94875 "2017-07-27T22:50:46Z")
Hello, I would like to use a Nested file for comments, but I can’t find a way to update it as soon as someone post a comment. Here is my mapping (using elasticsearch-dsl) m = Mapping('comments'') comments = Nested() … --- ## [How to use the http.p12, http\_ca.crt and transport.p12 generated by elasticsearch when run as a single node](https://discuss.elastic.co/t/how-to-use-the-http-p12-http-ca-crt-and-transport-p12-generated-by-elasticsearch-when-run-as-a-single-node/323913)
**Author:** [@Raja\_Muneer](https://discuss.elastic.co/u/Raja_Muneer)\ **Replies:** 3\ **Last updated:** [January 25, 2023, 12:51pm UTC](https://discuss.elastic.co/t/how-to-use-the-http-p12-http-ca-crt-and-transport-p12-generated-by-elasticsearch-when-run-as-a-single-node/323913 "2023-01-25T12:51:25Z")
I am trying to enable HTTPS on my elk-stack. While I am able to do so using the following link. Configuring ssl,tls and https However, When we run elasticsearch as a single node it generates some default certificates w… --- ## [Using /\_cluster/settings -\> cluster.routing.allocation.exclude works for only one node?](https://discuss.elastic.co/t/using-cluster-settings-cluster-routing-allocation-exclude-works-for-only-one-node/179224)
**Author:** [@preddy75](https://discuss.elastic.co/u/preddy75)\ **Replies:** 3\ **Last updated:** [May 4, 2019, 2:32pm UTC](https://discuss.elastic.co/t/using-cluster-settings-cluster-routing-allocation-exclude-works-for-only-one-node/179224 "2019-05-04T14:32:14Z")
Hi, I am running ELK on large Kubernetes environment, and it is common case to bring nodes in and out of environment. Right now we have mixed sized disks and need to route away from small nodes to large nodes. I am iss… --- ## [UpdateRequest upsert with retryOnConflict using BulkProcessor failed](https://discuss.elastic.co/t/updaterequest-upsert-with-retryonconflict-using-bulkprocessor-failed/182455)
**Author:** [@edumucelli](https://discuss.elastic.co/u/edumucelli)\ **Replies:** 7\ **Last updated:** [June 19, 2019, 10:15am UTC](https://discuss.elastic.co/t/updaterequest-upsert-with-retryonconflict-using-bulkprocessor-failed/182455 "2019-06-19T10:15:32Z")
Althought ES documentation and staff suggests using retry\_on\_conflict to mitigate version conflict, this feature is broken. I am using High Level Client 6.6.1 and here is the way I am building the request: IndexRequest… --- ## [EsHadoopInvalidRequest: An HTTP line is larger than 4096 bytes](https://discuss.elastic.co/t/eshadoopinvalidrequest-an-http-line-is-larger-than-4096-bytes/136572)
**Author:** [@yoramd](https://discuss.elastic.co/u/yoramd)\ **Replies:** 4\ **Last updated:** [July 25, 2018, 2:51pm UTC](https://discuss.elastic.co/t/eshadoopinvalidrequest-an-http-line-is-larger-than-4096-bytes/136572 "2018-07-25T14:51:16Z")
Hi We're trying to use spark-elasticsearch to load data from an Elasticsearch index into Spark for processing. We load the data using: sparkSession .read .format("es") .option("pushdown", "false") … --- ## [Elastic search book recommendation 2020](https://discuss.elastic.co/t/elastic-search-book-recommendation-2020/219007)
**Author:** [@raghavan20](https://discuss.elastic.co/u/raghavan20)\ **Replies:** 2\ **Last updated:** [February 13, 2020, 2:32pm UTC](https://discuss.elastic.co/t/elastic-search-book-recommendation-2020/219007 "2020-02-13T14:32:08Z")
Hi, I do use the online documentation for reference. At the same time, I would like to read book(s) which help understand Elastic Search (not LK) in-depth. Hope the book would cover following areas in-depth indexes cl… --- ## [Update By Query Limitation](https://discuss.elastic.co/t/update-by-query-limitation/105058)
**Author:** [@Tamizh](https://discuss.elastic.co/u/Tamizh)\ **Replies:** 1\ **Last updated:** [October 28, 2017, 10:49pm UTC](https://discuss.elastic.co/t/update-by-query-limitation/105058 "2017-10-28T22:49:01Z")
Got error when try to update the documents using update\_by\_query \[script\] Too many dynamic script compilations within one minute, max: \[15/min\]; please use on-disk, indexed, or scripts with parameters instead; this lim… --- ## [Spark Bulk Import Performance Benchmarks](https://discuss.elastic.co/t/spark-bulk-import-performance-benchmarks/75110)
**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\ **Replies:** 8\ **Last updated:** [March 31, 2017, 8:23am UTC](https://discuss.elastic.co/t/spark-bulk-import-performance-benchmarks/75110 "2017-03-31T08:23:39Z")
I've been using the es hadoop package for Spark over the past 6 months and I've never been able to sustain a bulk indexing rate over 70k doc per second. Six months ago with Spark 1.6 and ES 2.4 we had an indexing rate f… --- ## [Is it possible change creation\_date on reindexed Indexes to get Life cycle Management to work on old indexes](https://discuss.elastic.co/t/is-it-possible-change-creation-date-on-reindexed-indexes-to-get-life-cycle-management-to-work-on-old-indexes/183773)
**Author:** [@lmrc1r0](https://discuss.elastic.co/u/lmrc1r0)\ **Replies:** 5\ **Last updated:** [May 31, 2019, 8:43pm UTC](https://discuss.elastic.co/t/is-it-possible-change-creation-date-on-reindexed-indexes-to-get-life-cycle-management-to-work-on-old-indexes/183773 "2019-05-31T20:43:16Z")
Thanks in advance for any help. I just created and new setup of 6.7.2 ES / logstash / kibana. I used the reindex option to import the old data from the old 5.X cluster. Problem is I would like to start using the ILM o… --- ## [Упал эластик в процессе работы с ошибкой all shards failed](https://discuss.elastic.co/t/all-shards-failed/256816)
**Author:** [@111311](https://discuss.elastic.co/u/111311)\ **Replies:** 4\ **Last updated:** [November 29, 2020, 11:37pm UTC](https://discuss.elastic.co/t/all-shards-failed/256816 "2020-11-29T23:37:25Z")
Здравствуйте, помогите разобраться с проблемкой. У нас эластик используется для определения категории, сейчас он работал около 6 часов и вечером упал с ошибкой Elasticsearch\\Common\\Exceptions\\ServerErrorResponseExceptio… --- ## [Wrong doc\_count on Aggregations](https://discuss.elastic.co/t/wrong-doc-count-on-aggregations/57315)
**Author:** [@joora](https://discuss.elastic.co/u/joora)\ **Replies:** 6\ **Last updated:** [August 5, 2016, 9:35am UTC](https://discuss.elastic.co/t/wrong-doc-count-on-aggregations/57315 "2016-08-05T09:35:28Z")
Request: { "query": { "bool": { "should": \[ { "match\_all": {} } \], "must": \[ { "nested": { "path": "invitations", "query": { … --- ## [Kibana server is not ready yet ~ missing authentication credentials for REST request](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-missing-authentication-credentials-for-rest-request/302249)
**Author:** [@frankmehlhop](https://discuss.elastic.co/u/frankmehlhop)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 5:43pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-missing-authentication-credentials-for-rest-request/302249 "2022-04-13T17:43:56Z")
I installed Elasticsearch and Kibana 8.1.2 locally with standard configurations and without Docker on Windows 11. I just changed the passwords for all systems and bootstrap. Elasticsearch is starting fine (using the bat… --- ## [Unknown mimetype unable to deserialize](https://discuss.elastic.co/t/unknown-mimetype-unable-to-deserialize/108820)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 4\ **Last updated:** [November 28, 2017, 7:12am UTC](https://discuss.elastic.co/t/unknown-mimetype-unable-to-deserialize/108820 "2017-11-28T07:12:16Z")
Hi , I am just playing around with python elasticsearch module. But seems like i am unable to make it work. Right now i am just setting up the connection so no complex coding yet. Below is what i see: Traceback (most r… --- ## [Lucene syntax for match all docs](https://discuss.elastic.co/t/lucene-syntax-for-match-all-docs/10631)
**Author:** [@hanafy\_ash](https://discuss.elastic.co/u/hanafy_ash)\ **Replies:** 8\ **Last updated:** [February 6, 2013, 3:15pm UTC](https://discuss.elastic.co/t/lucene-syntax-for-match-all-docs/10631 "2013-02-06T15:15:03Z")
I believe the Lucene query parser translates the query "\*:\*" into a MatchAllDocsQuery, whereas our ES cluster is returning 0 documents for the query: { "query": { "query\_string": "\*.\*" } } I know we can do: {… --- ## [Occasionally "failed to get node info" and "no node available" error](https://discuss.elastic.co/t/occasionally-failed-to-get-node-info-and-no-node-available-error/6836)
**Author:** [@xiaofeng](https://discuss.elastic.co/u/xiaofeng)\ **Replies:** 6\ **Last updated:** [March 1, 2012, 12:34pm UTC](https://discuss.elastic.co/t/occasionally-failed-to-get-node-info-and-no-node-available-error/6836 "2012-03-01T12:34:59Z")
Our ES system works fine most of the time, but occasionally see exceptions as follows: 2012-02-29 12:33:53 INFO \[org.elasticsearch.client.transport\]:109 Line - \[Ezekiel\] failed to get node info for \[Ani-Mator\]\[q4e… --- ## [Updated to 2.2.0 and now seeing "Message not fully read (request)"](https://discuss.elastic.co/t/updated-to-2-2-0-and-now-seeing-message-not-fully-read-request/41105)
**Author:** [@polloelastico](https://discuss.elastic.co/u/polloelastico)\ **Replies:** 5\ **Last updated:** [February 6, 2016, 8:10am UTC](https://discuss.elastic.co/t/updated-to-2-2-0-and-now-seeing-message-not-fully-read-request/41105 "2016-02-06T08:10:38Z")
I have 5 nodes in a cluster on AWS and am using the cloud-aws plugin, there are 3 data nodes and 2 non-data nodes. The logs in the non-data nodes are filling up with the following: \[2016-02-05 23:51:18,055\]\[WARN \]\[tra… --- ## [Do Grok patterns have a place in the if =~ conditional matching?](https://discuss.elastic.co/t/do-grok-patterns-have-a-place-in-the-if-conditional-matching/45138)
**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\ **Replies:** 2\ **Last updated:** [March 22, 2016, 6:34pm UTC](https://discuss.elastic.co/t/do-grok-patterns-have-a-place-in-the-if-conditional-matching/45138 "2016-03-22T18:34:32Z")
I have the case where.. Sometimes my log has a block of JSON. Sometimes that block of JSON has a field (Lets call it "IPAddress") Sometimes the field "IPAddress" has a valid IP, other times, I've seen it with the value… --- ## [Elasticsearch for Apache Hadoop doesn't work](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-doesnt-work/163971)
**Author:** [@Arthur\_Luz](https://discuss.elastic.co/u/Arthur_Luz)\ **Replies:** 7\ **Last updated:** [January 28, 2019, 9:07am UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-doesnt-work/163971 "2019-01-28T09:07:59Z")
Hello, guys. I need some help with Elasticsearch for Apache Hadoop connector. I have on my environment a hortonworks hdp cluster and with hive. I need to create a external table for elasticsearch to move data from my h… --- ## [How to find filebeat log files](https://discuss.elastic.co/t/how-to-find-filebeat-log-files/57939)
**Author:** [@daiyue](https://discuss.elastic.co/u/daiyue)\ **Replies:** 1\ **Last updated:** [August 12, 2016, 3:20pm UTC](https://discuss.elastic.co/t/how-to-find-filebeat-log-files/57939 "2016-08-12T15:20:48Z")
Hi, I am wondering where does fileabeat store its log files? I have tried search something like filebeat.log, but couldn't find anything on Arch Linux. cheers --- ## [Date Field not properly recognised by Kibana 4](https://discuss.elastic.co/t/date-field-not-properly-recognised-by-kibana-4/72082)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 5\ **Last updated:** [January 19, 2017, 7:51am UTC](https://discuss.elastic.co/t/date-field-not-properly-recognised-by-kibana-4/72082 "2017-01-19T07:51:41Z")
I have two date fields in index, record\_time and @timestamp, the values of these two fields should be the same, and their format is different. record\_time is generated by php code, and @timestamp is generated by logsta… --- ## [RollingFileAppender Error while starting elasticsearch](https://discuss.elastic.co/t/rollingfileappender-error-while-starting-elasticsearch/100630)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 2\ **Last updated:** [September 21, 2017, 7:06am UTC](https://discuss.elastic.co/t/rollingfileappender-error-while-starting-elasticsearch/100630 "2017-09-21T07:06:00Z")
I am getting the following error while starting Elasticsearch. Sep 15 10:46:35 cbtbilevtmtr01 elasticsearch: 2017-09-15 10:46:35,367 main ERROR Unable to invoke factory method in class class org.apache.logging.log4j.co… --- ## [ELK - Snapshot timeout](https://discuss.elastic.co/t/elk-snapshot-timeout/284396)
**Author:** [@X\_T](https://discuss.elastic.co/u/X_T)\ **Replies:** 7\ **Last updated:** [September 20, 2021, 9:11am UTC](https://discuss.elastic.co/t/elk-snapshot-timeout/284396 "2021-09-20T09:11:29Z")
Hi team, I'm trying to create a snapshot from the cluster but i'm getting some timeout errors: PUT /\_snapshot/my\_backup { "type": "fs", "settings": { "compress" : true, "location": "/etc/e… --- ## [Group aggregates by field value](https://discuss.elastic.co/t/group-aggregates-by-field-value/1692)
**Author:** [@redserpent7](https://discuss.elastic.co/u/redserpent7)\ **Replies:** 1\ **Last updated:** [June 2, 2015, 11:59am UTC](https://discuss.elastic.co/t/group-aggregates-by-field-value/1692 "2015-06-02T11:59:43Z")
Hi, I am trying to group multiple field values as a single aggregate. My Index consists of file records, each record contains a file extension field. I need to aggregate the index in a way such that I can group all W… --- ## [Index not appearing in Kibana via logstash](https://discuss.elastic.co/t/index-not-appearing-in-kibana-via-logstash/244255)
**Author:** [@Umang\_Mahant](https://discuss.elastic.co/u/Umang_Mahant)\ **Replies:** 6\ **Last updated:** [August 22, 2020, 1:50pm UTC](https://discuss.elastic.co/t/index-not-appearing-in-kibana-via-logstash/244255 "2020-08-22T13:50:41Z")
Hello once again... Being new to ELK, i cannot see the index "truck" in Kibana. There is no error in logstash, i dont know if its going to elastic search, if yes i dont know y its not reaching kibana... pleasee help! … [Previous page](https://discuss.elastic.co/top.md?page=434&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=436&per_page=50&period=all)