# Top

**URL:** https://discuss.elastic.co/top.md?page=448&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 449

---

## [Elastic 7.5 S3 plugin install warning message](https://discuss.elastic.co/t/elastic-7-5-s3-plugin-install-warning-message/211875)

<div class="topic-metadata">

**Author:** [@sfgroups1](https://discuss.elastic.co/u/sfgroups1)\
**Replies:** 2\
**Last updated:** [December 16, 2019, 3:15pm UTC](https://discuss.elastic.co/t/elastic-7-5-s3-plugin-install-warning-message/211875 "2019-12-16T15:15:18Z")

</div>

on my 7.5 cluster when install s3 plugin its giving below warning. Any idea what permission needed for java # bin/elasticsearch-plugin install repository-s3 -\> Downloading repository-s3 from elastic \[==================…

---

## [Delete by date range fails](https://discuss.elastic.co/t/delete-by-date-range-fails/15905)

<div class="topic-metadata">

**Author:** [@thealy](https://discuss.elastic.co/u/thealy)\
**Replies:** 6\
**Last updated:** [February 20, 2014, 5:46pm UTC](https://discuss.elastic.co/t/delete-by-date-range-fails/15905 "2014-02-20T17:46:38Z")

</div>

Hello, relatively new to ES and struggling to delete old records from an index("iron") , all of which are the same type ("email"). The idea is to purge old data that is no longer of interest. In the examples below, …

---

## [Filebeat config error (YAML error)](https://discuss.elastic.co/t/filebeat-config-error-yaml-error/179580)

<div class="topic-metadata">

**Author:** [@basitmohammad](https://discuss.elastic.co/u/basitmohammad)\
**Replies:** 6\
**Last updated:** [May 14, 2019, 8:37pm UTC](https://discuss.elastic.co/t/filebeat-config-error-yaml-error/179580 "2019-05-14T20:37:33Z")

</div>

I keep on getting this error when I try to configure Filebeat and/or Metricbeat. ERROR instance/beat.go:802 Exiting: 1 error: error loading config file: invalid config: yaml: line 9: could not find expected ':' E…

---

## [Match text ending in a word](https://discuss.elastic.co/t/match-text-ending-in-a-word/9329)

<div class="topic-metadata">

**Author:** [@Mike](https://discuss.elastic.co/u/Mike)\
**Replies:** 6\
**Last updated:** [October 22, 2012, 9:22pm UTC](https://discuss.elastic.co/t/match-text-ending-in-a-word/9329 "2012-10-22T21:22:44Z")

</div>

Is there a way to search for text that ends with a word? For example, if I wanted to match text that ended in "control", "pollution control" would match but "control price" would not. --

---

## [Elasticsearch service doesn't start upon system reboot](https://discuss.elastic.co/t/elasticsearch-service-doesnt-start-upon-system-reboot/96994)

<div class="topic-metadata">

**Author:** [@Ravi\_Bhushan](https://discuss.elastic.co/u/Ravi_Bhushan)\
**Replies:** 3\
**Last updated:** [August 16, 2017, 2:16am UTC](https://discuss.elastic.co/t/elasticsearch-service-doesnt-start-upon-system-reboot/96994 "2017-08-16T02:16:42Z")

</div>

Hi, My environement is below Elastic Version - "2.3.5" OS - RHEL 7 JAVA Version openjdk version "1.8.0\_141" OpenJDK Runtime Environment (build 1.8.0\_141-b16) Command to start ES - Systemctl start elasticsearch Is…

---

## [How to remplace my bash script by logstash?](https://discuss.elastic.co/t/how-to-remplace-my-bash-script-by-logstash/70797)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 7\
**Last updated:** [January 10, 2017, 12:54pm UTC](https://discuss.elastic.co/t/how-to-remplace-my-bash-script-by-logstash/70797 "2017-01-10T12:54:59Z")

</div>

Hello, (Ah before all, excuse me for my bad english !) Currently : I developed many many many BASH scripts to check text files, manipulate with zcat, awk, grep, sum... Results are send into a stats file. My Cacti…

---

## [Help with Filebeat RegEx Match](https://discuss.elastic.co/t/help-with-filebeat-regex-match/48494)

<div class="topic-metadata">

**Author:** [@gcherneski](https://discuss.elastic.co/u/gcherneski)\
**Replies:** 3\
**Last updated:** [May 3, 2016, 9:34pm UTC](https://discuss.elastic.co/t/help-with-filebeat-regex-match/48494 "2016-05-03T21:34:17Z")

</div>

Version: Filebeat 1.2.0-x86-64 I'm new to ELK and Filebeat and read online that it is preferable to do your multiline parsing in Filebeat as opposed to Logstash. I could use help with a RegEx parsing match for Filebeat m…

---

## [Xpack basic license terms](https://discuss.elastic.co/t/xpack-basic-license-terms/135706)

<div class="topic-metadata">

**Author:** [@shailesh.nandwana](https://discuss.elastic.co/u/shailesh.nandwana)\
**Replies:** 6\
**Last updated:** [June 15, 2018, 8:54pm UTC](https://discuss.elastic.co/t/xpack-basic-license-terms/135706 "2018-06-15T20:54:40Z")

</div>

Hello, What rights Elasticsearch has if I use xpack plugin with basic license for any of my application for my company. Does Elasticsearch have full rights to use my company name for any of its promotion activity? If y…

---

## [Non-zero metrics in the last 30s](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s/78255)

<div class="topic-metadata">

**Author:** [@korsdecaying](https://discuss.elastic.co/u/korsdecaying)\
**Replies:** 4\
**Last updated:** [March 27, 2017, 5:15pm UTC](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s/78255 "2017-03-27T17:15:35Z")

</div>

Non-zero metrics in the last 30s: libbeat.es.call\_count.PublishEvents=4 libbeat.es.published\_and\_acked\_events=61 libbeat.publisher.messages\_in\_worker\_queues=4 libbeat.es.publish.write\_bytes=37185 libbeat.es.publish.read…

---

## [Logstash failed to send logs to elasticsearch](https://discuss.elastic.co/t/logstash-failed-to-send-logs-to-elasticsearch/151039)

<div class="topic-metadata">

**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\
**Replies:** 8\
**Last updated:** [October 11, 2018, 11:54am UTC](https://discuss.elastic.co/t/logstash-failed-to-send-logs-to-elasticsearch/151039 "2018-10-11T11:54:02Z")

</div>

Hello, I am new to ELK and I just installed ELK Stack 6.4.2. I am trying to send windows Events to ELK. I installed Elasticsearch and Kibana and then Logstash. I installed winlogbeat in a windows server and configured …

---

## [Elastic stack + nginx installation bash script](https://discuss.elastic.co/t/elastic-stack-nginx-installation-bash-script/148524)

<div class="topic-metadata">

**Author:** [@derekmizak](https://discuss.elastic.co/u/derekmizak)\
**Replies:** 0\
**Last updated:** [September 13, 2018, 10:07pm UTC](https://discuss.elastic.co/t/elastic-stack-nginx-installation-bash-script/148524 "2018-09-13T22:07:35Z")

</div>

To save yourself time when setting up Elasticstac lab machines you can use this bash script which install JDK -Elasticsearch -Kibana -Logstash Tested on Ubuntu 18.04 - it is worth to notice that it doesn't work wit…

---

## [No data has been received from this module yet](https://discuss.elastic.co/t/no-data-has-been-received-from-this-module-yet/221372)

<div class="topic-metadata">

**Author:** [@vijay.nageswaran](https://discuss.elastic.co/u/vijay.nageswaran)\
**Replies:** 2\
**Last updated:** [March 18, 2020, 6:52pm UTC](https://discuss.elastic.co/t/no-data-has-been-received-from-this-module-yet/221372 "2020-03-18T18:52:13Z")

</div>

Team, I have installed and configured Elasticsearch, Kibana, logstash, Filebeat in centos 7.7. I have configured the reverse proxy to load the kibana dashboard. The configurations which is showed in the logging for ngi…

---

## [Possible to create elasticsearch indices on specific nodes?](https://discuss.elastic.co/t/possible-to-create-elasticsearch-indices-on-specific-nodes/253021)

<div class="topic-metadata">

**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\
**Replies:** 1\
**Last updated:** [October 22, 2020, 3:15pm UTC](https://discuss.elastic.co/t/possible-to-create-elasticsearch-indices-on-specific-nodes/253021 "2020-10-22T15:15:13Z")

</div>

Hi, Use case : We create daily indices. We want to reserve certain nodes only for some specific indices. Cluster size : 200 nodes Clients : 100+ We want to reserve 40 nodes only for important clients and leave 160 no…

---

## [C# How simply delete by id or query with c#](https://discuss.elastic.co/t/c-how-simply-delete-by-id-or-query-with-c/73405)

<div class="topic-metadata">

**Author:** [@rookie](https://discuss.elastic.co/u/rookie)\
**Replies:** 4\
**Last updated:** [February 2, 2017, 10:41am UTC](https://discuss.elastic.co/t/c-how-simply-delete-by-id-or-query-with-c/73405 "2017-02-02T10:41:10Z")

</div>

Hello Not a question this time, but just a share of code. But if someone have better, I take :slight\_smile: My problem is how delete document with query in Elasticsearch.NET I read a lot of subjets, but I definitely …

---

## [Failed to parse, document is empty](https://discuss.elastic.co/t/failed-to-parse-document-is-empty/76650)

<div class="topic-metadata">

**Author:** [@jtgajda](https://discuss.elastic.co/u/jtgajda)\
**Replies:** 6\
**Last updated:** [February 27, 2017, 8:27pm UTC](https://discuss.elastic.co/t/failed-to-parse-document-is-empty/76650 "2017-02-27T20:27:02Z")

</div>

I an new to Elasticsearch and am having some start-up problems. I've successfully installed it and am able to connect to the server and create an index. However when I attempt to load data either via curl or the Perl Sea…

---

## [(EDIT) Can Elasticsearch Scale to 1 LAC QPS (Query Per Sec)?](https://discuss.elastic.co/t/edit-can-elasticsearch-scale-to-1-lac-qps-query-per-sec/28993)

<div class="topic-metadata">

**Author:** [@N\_M\_10](https://discuss.elastic.co/u/N_M_10)\
**Replies:** 6\
**Last updated:** [September 14, 2015, 8:35am UTC](https://discuss.elastic.co/t/edit-can-elasticsearch-scale-to-1-lac-qps-query-per-sec/28993 "2015-09-14T08:35:46Z")

</div>

Hi, All. We are using 3 node (master+data) cluster AWS LoadBalancer (Hardware Machine) in front of our 3 node cluster. Nodes Configuration: Ram: 32 GB (50% to ES and remaining 50% to OS) Cores: 16 for each node Sh…

---

## [Running filebeat on windows](https://discuss.elastic.co/t/running-filebeat-on-windows/141039)

<div class="topic-metadata">

**Author:** [@AmirBL](https://discuss.elastic.co/u/AmirBL)\
**Replies:** 5\
**Last updated:** [July 30, 2018, 2:28pm UTC](https://discuss.elastic.co/t/running-filebeat-on-windows/141039 "2018-07-30T14:28:50Z")

</div>

I want to run filebeat on windows 10 with Goland IDE. I download filebeat from https://github.com/elastic/beats then after editing the configuration file(filebeat.yml) filebeat.prospectors: - type: log enabled: true…

---

## [\[action.admin.indices.stats\] failed to execute operation for shard](https://discuss.elastic.co/t/action-admin-indices-stats-failed-to-execute-operation-for-shard/36010)

<div class="topic-metadata">

**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\
**Replies:** 4\
**Last updated:** [July 13, 2016, 6:53am UTC](https://discuss.elastic.co/t/action-admin-indices-stats-failed-to-execute-operation-for-shard/36010 "2016-07-13T06:53:09Z")

</div>

I saw a lot of that error on my Elasticsearch logs: \[2015-12-01 17:27:03,663\]\[DEBUG\]\[action.admin.indices.stats\] \[crawler\_service\_001\] \[indices:monitor/stats\] failed to execute operation for shard \[\[carrier-2015.12.01\]…

---

## [Elasticsearch X-Pack plugin breaks elasticsearch](https://discuss.elastic.co/t/elasticsearch-x-pack-plugin-breaks-elasticsearch/82051)

<div class="topic-metadata">

**Author:** [@banderson](https://discuss.elastic.co/u/banderson)\
**Replies:** 5\
**Last updated:** [April 12, 2017, 7:27am UTC](https://discuss.elastic.co/t/elasticsearch-x-pack-plugin-breaks-elasticsearch/82051 "2017-04-12T07:27:56Z")

</div>

I installed elasticsearch 5.3 and kibana 5.3 using the RPM repository on a Red Hat Enterprise Server running version 7. Then I installed the x-pack plugins using the "bin/kibana-plugin install x-pack" and "bin/kibana-pl…

---

## [Filter nested objects from a document](https://discuss.elastic.co/t/filter-nested-objects-from-a-document/96327)

<div class="topic-metadata">

**Author:** [@santrod](https://discuss.elastic.co/u/santrod)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 8:55am UTC](https://discuss.elastic.co/t/filter-nested-objects-from-a-document/96327 "2017-08-09T08:55:30Z")

</div>

Hi all, I'm starting with ES, I'm doing some tests and right now I have a doubt, I explain it: in my example each document are a shoes and each one has a nested object (items) which contains the color, the sizes and a …

---

## [Failed to flush outgoing items](https://discuss.elastic.co/t/failed-to-flush-outgoing-items/2215)

<div class="topic-metadata">

**Author:** [@msgre](https://discuss.elastic.co/u/msgre)\
**Replies:** 3\
**Last updated:** [July 30, 2015, 6:50am UTC](https://discuss.elastic.co/t/failed-to-flush-outgoing-items/2215 "2015-07-30T06:50:51Z")

</div>

Hello, I tried set up ELB stack in single Vagrant machine based on Ubuntu 14.04 amd64 box. Whole stack was functional (ES 1.5.2, LS 1.5.0-1\_all, Kibana 4.0.2-linux-x64) until I install Watcher plugin. It seems that Logst…

---

## [Setting the value of variable in ruby logstash](https://discuss.elastic.co/t/setting-the-value-of-variable-in-ruby-logstash/95130)

<div class="topic-metadata">

**Author:** [@deepanshu\_mittal](https://discuss.elastic.co/u/deepanshu_mittal)\
**Replies:** 3\
**Last updated:** [August 2, 2017, 12:54pm UTC](https://discuss.elastic.co/t/setting-the-value-of-variable-in-ruby-logstash/95130 "2017-08-02T12:54:47Z")

</div>

I am trying to set the value in ruby logstash variable but it is saying me undefined variable. if “el5” in \[message\] { ruby { init =\> "@@linuxversion=‘5’" code =\> “event.set(‘linux’,’(@@linuxversion)’) puts linux” …

---

## [Increase Top values aggregation limit above 1000](https://discuss.elastic.co/t/increase-top-values-aggregation-limit-above-1000/305652)

<div class="topic-metadata">

**Author:** [@lerignoux](https://discuss.elastic.co/u/lerignoux)\
**Replies:** 5\
**Last updated:** [May 28, 2022, 2:22pm UTC](https://discuss.elastic.co/t/increase-top-values-aggregation-limit-above-1000/305652 "2022-05-28T14:22:20Z")

</div>

Hello I am trying to generate a graph with a lot of records (~10k) and get the top values in an horizontal bar chart. It works well but the Top Values: Number of values is limited to 1000 entries meaning I cant see all…

---

## [Is it safe to run Elasticsearch 5.6 with OpenJDK 10?](https://discuss.elastic.co/t/is-it-safe-to-run-elasticsearch-5-6-with-openjdk-10/130329)

<div class="topic-metadata">

**Author:** [@Jong\_Kim](https://discuss.elastic.co/u/Jong_Kim)\
**Replies:** 4\
**Last updated:** [May 3, 2018, 2:07am UTC](https://discuss.elastic.co/t/is-it-safe-to-run-elasticsearch-5-6-with-openjdk-10/130329 "2018-05-03T02:07:14Z")

</div>

I have an application that uses Elasticsearch 5.5.1 and Oracle Java 8. We plan to upgrade to Elasticsearch 5.6.7 and OpenJDK 10 soon. To check compatibility, I ran ES 5.5.1 with OpenJDK 10, and the startup failed due to…

---

## [Elk on Docker Swarm and glusterFS crash](https://discuss.elastic.co/t/elk-on-docker-swarm-and-glusterfs-crash/127940)

<div class="topic-metadata">

**Author:** [@faustf](https://discuss.elastic.co/u/faustf)\
**Replies:** 3\
**Last updated:** [April 17, 2018, 2:44pm UTC](https://discuss.elastic.co/t/elk-on-docker-swarm-and-glusterfs-crash/127940 "2018-04-17T14:44:16Z")

</div>

Hi, I'm trying to deploy an ELK stack on docker swarm. If I bind the elastic dir data to a Docker volume there is no problem. The problems comes as soon as I try to bind the elstastic data dir to a glusterFS volume. …

---

## [Postfix logs not forwarding to ELK](https://discuss.elastic.co/t/postfix-logs-not-forwarding-to-elk/83125)

<div class="topic-metadata">

**Author:** [@seag33k](https://discuss.elastic.co/u/seag33k)\
**Replies:** 6\
**Last updated:** [April 27, 2017, 6:24pm UTC](https://discuss.elastic.co/t/postfix-logs-not-forwarding-to-elk/83125 "2017-04-27T18:24:50Z")

</div>

I thought I had this fixed, but had my "exclude\_files" line commented out. I moved the input up to the top and it still does not work. I am getting data from the other two inputs so I am thinking it has to do with this…

---

## [Cannot auto reload config , logstash-6.2.4](https://discuss.elastic.co/t/cannot-auto-reload-config-logstash-6-2-4/133374)

<div class="topic-metadata">

**Author:** [@w14569](https://discuss.elastic.co/u/w14569)\
**Replies:** 5\
**Last updated:** [May 30, 2018, 11:39am UTC](https://discuss.elastic.co/t/cannot-auto-reload-config-logstash-6-2-4/133374 "2018-05-30T11:39:46Z")

</div>

Hello, I start logstash with command line ./bin/logstash -f ./config/std.conf -r --config.reload.interval 2s when change the config std.conf , logstash cannot reload config automatic , it report error ： \[2018-05-…

---

## [ES doesn't start](https://discuss.elastic.co/t/es-doesnt-start/139573)

<div class="topic-metadata">

**Author:** [@master1](https://discuss.elastic.co/u/master1)\
**Replies:** 3\
**Last updated:** [July 12, 2018, 8:27am UTC](https://discuss.elastic.co/t/es-doesnt-start/139573 "2018-07-12T08:27:29Z")

</div>

Hello i'am a new user of ES, i installed it few days ago and it was runnig very well untill i tried to do this command that i've found on the ES website. ./bin/elasticsearch -d -Ecluster.name=my\_cluster -Enode.name=nod…

---

## [Drop logs when there is a jsonparsefailure](https://discuss.elastic.co/t/drop-logs-when-there-is-a-jsonparsefailure/28655)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 3\
**Last updated:** [September 4, 2015, 7:35am UTC](https://discuss.elastic.co/t/drop-logs-when-there-is-a-jsonparsefailure/28655 "2015-09-04T07:35:00Z")

</div>

Hi, I am trying to push some of our logs to elasticsearch via logstash. Can some one let me know how can I drop the logs in logstash itself if the logs are not in proper json format , before they are being pushed to el…

---

## [Unable to upload json file via Kibana Dashboard](https://discuss.elastic.co/t/unable-to-upload-json-file-via-kibana-dashboard/160179)

<div class="topic-metadata">

**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Replies:** 4\
**Last updated:** [December 14, 2018, 12:23am UTC](https://discuss.elastic.co/t/unable-to-upload-json-file-via-kibana-dashboard/160179 "2018-12-14T00:23:47Z")

</div>

Hi All, I am unable to upload default beat dashboards/visualization json file via Kibana dashboard. Error message : Sorry, there was an error Saved objects file format is invalid and cannot be imported. I have downl…

---

## [How to create a graph from sum differences?](https://discuss.elastic.co/t/how-to-create-a-graph-from-sum-differences/118268)

<div class="topic-metadata">

**Author:** [@joconner](https://discuss.elastic.co/u/joconner)\
**Replies:** 5\
**Last updated:** [February 6, 2018, 12:08am UTC](https://discuss.elastic.co/t/how-to-create-a-graph-from-sum-differences/118268 "2018-02-06T00:08:57Z")

</div>

How do I create a graph from calculations? I have an index of documents containing the following information: id begin\_event (keyword) end\_event (keyword) duration (float) And here's an example of some of those docs …

---

## [Geo point as string](https://discuss.elastic.co/t/geo-point-as-string/50637)

<div class="topic-metadata">

**Author:** [@Suran\_Kularatna](https://discuss.elastic.co/u/Suran_Kularatna)\
**Replies:** 7\
**Last updated:** [May 27, 2016, 2:05am UTC](https://discuss.elastic.co/t/geo-point-as-string/50637 "2016-05-27T02:05:47Z")

</div>

I have created a python tweepy script and it's all working fine loading data into elastic search. I recentyl added functionality to get coordinates from tweets and am having a struggle trying to add it to my map here…

---

## [When to use Coordinating only node](https://discuss.elastic.co/t/when-to-use-coordinating-only-node/317774)

<div class="topic-metadata">

**Author:** [@Balesh\_Kumar](https://discuss.elastic.co/u/Balesh_Kumar)\
**Replies:** 6\
**Last updated:** [November 1, 2022, 1:39am UTC](https://discuss.elastic.co/t/when-to-use-coordinating-only-node/317774 "2022-11-01T01:39:19Z")

</div>

Hi All, I have read this recommendation Coordinating only nodes can benefit large clusters by offloading the coordinating node role from data and master-eligible nodes.. What is considered a "large cluster"? Do you hav…

---

## [Iterating over all data](https://discuss.elastic.co/t/iterating-over-all-data/13610)

<div class="topic-metadata">

**Author:** [@benmccann](https://discuss.elastic.co/u/benmccann)\
**Replies:** 3\
**Last updated:** [September 15, 2013, 4:13am UTC](https://discuss.elastic.co/t/iterating-over-all-data/13610 "2013-09-15T04:13:26Z")

</div>

Hi, Is there a good way to iterate over all data for an ElasticSearch type? Is there any support for doing a map reduce against a large ES deployment? Thanks, Ben -- You received this message because you a…

---

## [Filter: use kibana timepicker as "now" value?](https://discuss.elastic.co/t/filter-use-kibana-timepicker-as-now-value/156373)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 3\
**Last updated:** [November 27, 2018, 8:22pm UTC](https://discuss.elastic.co/t/filter-use-kibana-timepicker-as-now-value/156373 "2018-11-27T20:22:01Z")

</div>

Hi, I was wondering whether its somehow possible to use the current "now" value of the Kibana timepicker in filters? I want to limit a visualization to 7 days of data while other visualizations can display a longer ran…

---

## [Can't (yet) decode flowset id 256 from source id 0, because no template to decode it with has been received](https://discuss.elastic.co/t/cant-yet-decode-flowset-id-256-from-source-id-0-because-no-template-to-decode-it-with-has-been-received/186465)

<div class="topic-metadata">

**Author:** [@thirty2](https://discuss.elastic.co/u/thirty2)\
**Replies:** 4\
**Last updated:** [June 26, 2019, 10:34am UTC](https://discuss.elastic.co/t/cant-yet-decode-flowset-id-256-from-source-id-0-because-no-template-to-decode-it-with-has-been-received/186465 "2019-06-26T10:34:53Z")

</div>

Hi, my conf file for logstash looks like: input { udp { port =\> 9995 codec =\> netflow { versions =\> \[5, 9\] } type =\> netflow tags =\> "port\_9995" } } output { if "port\_9995" in \[tags\] {…

---

## [Illegal pattern component: t when matching date from filebeat system module](https://discuss.elastic.co/t/illegal-pattern-component-t-when-matching-date-from-filebeat-system-module/92042)

<div class="topic-metadata">

**Author:** [@lcorsini](https://discuss.elastic.co/u/lcorsini)\
**Replies:** 4\
**Last updated:** [July 12, 2017, 10:55am UTC](https://discuss.elastic.co/t/illegal-pattern-component-t-when-matching-date-from-filebeat-system-module/92042 "2017-07-12T10:55:07Z")

</div>

hi there, I'm using filebeat system module to send logfiles to elastic by using logstash. I've used the configurations listed here: but it's not working on the date filter giving me the Illegal pattern component:…

---

## [Elastic APM intake/v2/rum/events requests cancelled](https://discuss.elastic.co/t/elastic-apm-intake-v2-rum-events-requests-cancelled/315137)

<div class="topic-metadata">

**Author:** [@bluestar](https://discuss.elastic.co/u/bluestar)\
**Replies:** 5\
**Last updated:** [September 29, 2022, 4:23pm UTC](https://discuss.elastic.co/t/elastic-apm-intake-v2-rum-events-requests-cancelled/315137 "2022-09-29T16:23:03Z")

</div>

I have elastic apm setup for an angular 13 application (using npm package @elastic/apm-rum). I can see https://\*\*\*.com/intake/v2/rum/events request going responding 202 and being cancelled after 10 secs. In chrome conso…

---

## [Future Licenses](https://discuss.elastic.co/t/future-licenses/50318)

<div class="topic-metadata">

**Author:** [@Maher\_Ben\_Taleb\_Ali](https://discuss.elastic.co/u/Maher_Ben_Taleb_Ali)\
**Replies:** 1\
**Last updated:** [May 18, 2016, 2:59pm UTC](https://discuss.elastic.co/t/future-licenses/50318 "2016-05-18T14:59:47Z")

</div>

Hi, Elasticsearch is an open source Text Search engine, released under apache License. you are upgrading your products frequently, wich is extreamly good! the question is, will you ever release an upgrade of elastics…

---

## [Maximum Score](https://discuss.elastic.co/t/maximum-score/3863)

<div class="topic-metadata">

**Author:** [@Arulkumar](https://discuss.elastic.co/u/Arulkumar)\
**Replies:** 7\
**Last updated:** [February 2, 2011, 12:17pm UTC](https://discuss.elastic.co/t/maximum-score/3863 "2011-02-02T12:17:12Z")

</div>

Hi, May i know the maximum value of \_score field...?

---

## [Post bulk Json -Error](https://discuss.elastic.co/t/post-bulk-json-error/91761)

<div class="topic-metadata">

**Author:** [@Tals](https://discuss.elastic.co/u/Tals)\
**Replies:** 2\
**Last updated:** [July 13, 2017, 9:15am UTC](https://discuss.elastic.co/t/post-bulk-json-error/91761 "2017-07-13T09:15:34Z")

</div>

Hi I tried to post this Json: POST /Sky/external/\_bulk?pretty {"Index":{"ID":1}} { "altitde": 11887.2, "callsign": "ABX2040 ", "heading": 75.43, "icao24": "aa5b9f", "latitde": 40.0233, "longitde": -…

---

## [How can I change the type with the reindex api](https://discuss.elastic.co/t/how-can-i-change-the-type-with-the-reindex-api/121639)

<div class="topic-metadata">

**Author:** [@T3rm11](https://discuss.elastic.co/u/T3rm11)\
**Replies:** 3\
**Last updated:** [February 27, 2018, 2:38pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-type-with-the-reindex-api/121639 "2018-02-27T14:38:59Z")

</div>

I need to reindex some indices because of the update to version 6. The new index needs to be of the type "doc" because Logstash is writing to it. How can I do this when the type is different in the source index? I norma…

---

## [Shards failure - recovery possible?](https://discuss.elastic.co/t/shards-failure-recovery-possible/231834)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 6\
**Last updated:** [May 9, 2020, 3:10pm UTC](https://discuss.elastic.co/t/shards-failure-recovery-possible/231834 "2020-05-09T15:10:19Z")

</div>

Hi, Unfortunately, there was a problem on my cluster when the power was switched off. Cluster has RED status - a few shards do not want to get up. I've tried using reroute: POST /\_cluster/reroute?retry\_failed=true b…

---

## [Could not find the main class: org.elasticsearch.bootstrap.Elasticsearch](https://discuss.elastic.co/t/could-not-find-the-main-class-org-elasticsearch-bootstrap-elasticsearch/51218)

<div class="topic-metadata">

**Author:** [@yoavb](https://discuss.elastic.co/u/yoavb)\
**Replies:** 2\
**Last updated:** [May 28, 2016, 11:43am UTC](https://discuss.elastic.co/t/could-not-find-the-main-class-org-elasticsearch-bootstrap-elasticsearch/51218 "2016-05-28T11:43:17Z")

</div>

Hello , I have download Elasticsearch 2.3.3 and tried to install it on my laptop Windows7 - 64bit. C:\\Elastic\\elasticsearch-2.3.3\\bin\>java -version java version "1.7.0\_80" Java(TM) SE Runtime Environment (build 1.7.0\_…

---

## [Why the synonym filter change in 6.0?](https://discuss.elastic.co/t/why-the-synonym-filter-change-in-6-0/133740)

<div class="topic-metadata">

**Author:** [@Justin\_Treher](https://discuss.elastic.co/u/Justin_Treher)\
**Replies:** 7\
**Last updated:** [May 30, 2018, 3:22pm UTC](https://discuss.elastic.co/t/why-the-synonym-filter-change-in-6-0/133740 "2018-05-30T15:22:54Z")

</div>

RE: https://github.com/elastic/elasticsearch/issues/27481 My company has been using Elasticsearch since 2013 to power site search. Our content editors have maintained a synonym configuration for ages via an admin UI tha…

---

## [Elasticsearch not generating password when started for the first time](https://discuss.elastic.co/t/elasticsearch-not-generating-password-when-started-for-the-first-time/306403)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 3\
**Last updated:** [July 1, 2022, 6:33am UTC](https://discuss.elastic.co/t/elasticsearch-not-generating-password-when-started-for-the-first-time/306403 "2022-07-01T06:33:10Z")

</div>

Hi, I have installed a fresh instance of Elasticsearch 8.1.0. Configurations I added: cluster.name: elasticsearch-8\_1\_0\_windows\_local\_2 network.host: localhost http.port: 29200 I open cmd on windows machine as an adm…

---

## [Filebeat sends garbled messages \\u0000](https://discuss.elastic.co/t/filebeat-sends-garbled-messages-u0000/68871)

<div class="topic-metadata">

**Author:** [@Alexik](https://discuss.elastic.co/u/Alexik)\
**Replies:** 4\
**Last updated:** [December 14, 2016, 3:06pm UTC](https://discuss.elastic.co/t/filebeat-sends-garbled-messages-u0000/68871 "2016-12-14T15:06:41Z")

</div>

Filebeat sends garbled messages \\u0000 Hi guys, I'm having problem with Filebeat. From time to time I'm receiving an event which looks like this: { "\_index": "uat1-access-ws", "\_type": "log", "\_id": "AVj4Nau7dy5nH…

---

## [Kibana displays boolean data true as 1 and false as 0 while visualizing](https://discuss.elastic.co/t/kibana-displays-boolean-data-true-as-1-and-false-as-0-while-visualizing/53746)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 3\
**Last updated:** [August 1, 2016, 5:51pm UTC](https://discuss.elastic.co/t/kibana-displays-boolean-data-true-as-1-and-false-as-0-while-visualizing/53746 "2016-08-01T17:51:19Z")

</div>

Dear Users, I have an index named as fc. It has two types db and iis. Under type iis, I have one field status\[boolean datatype\] whose value is true/false. While Visualizing data in kibana it displays true as 1 and…

---

## [Lumberjack input: the pipeline is blocked, temporary refusing new connection](https://discuss.elastic.co/t/lumberjack-input-the-pipeline-is-blocked-temporary-refusing-new-connection/39829)

<div class="topic-metadata">

**Author:** [@daq](https://discuss.elastic.co/u/daq)\
**Replies:** 7\
**Last updated:** [January 26, 2016, 6:57am UTC](https://discuss.elastic.co/t/lumberjack-input-the-pipeline-is-blocked-temporary-refusing-new-connection/39829 "2016-01-26T06:57:49Z")

</div>

We have a simple setup with 4 servers: Logstash (Log receiver) | \\/ Redis (Queue) | \\/ ElasticSearch (Storage) | \\/ Kibana (Viewer) Receiver log is full of similar messages {:timestamp=\>"2016-01-21T15:17:49.408000-08…

---

## [Pending tasks queue](https://discuss.elastic.co/t/pending-tasks-queue/61915)

<div class="topic-metadata">

**Author:** [@ankush\_goswami](https://discuss.elastic.co/u/ankush_goswami)\
**Replies:** 7\
**Last updated:** [October 4, 2016, 1:04pm UTC](https://discuss.elastic.co/t/pending-tasks-queue/61915 "2016-10-04T13:04:51Z")

</div>

Hi Team, Below os my cluster health and I am not able to ingest any logs into ES because as soon as Logstash consumer starts to use Auto bulk api of elasticsearch. Documents are not getting indexed and my pending tasks…

[Previous page](https://discuss.elastic.co/top.md?page=447&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=449&per_page=50&period=all)
