# Top

**URL:** https://discuss.elastic.co/top.md?page=450&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 451

---

## [Possible values for 'discovery-type'](https://discuss.elastic.co/t/possible-values-for-discovery-type/234532)

<div class="topic-metadata">

**Author:** [@tmporary](https://discuss.elastic.co/u/tmporary)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 1:05pm UTC](https://discuss.elastic.co/t/possible-values-for-discovery-type/234532 "2020-05-27T13:05:35Z")

</div>

I'm looking through the docs and I can't find it. What are possible values for 'discovery\_type' config property? Why I can only find references to single-node value?

---

## [How to convert binary field's value to string with Painless?](https://discuss.elastic.co/t/how-to-convert-binary-fields-value-to-string-with-painless/222262)

<div class="topic-metadata">

**Author:** [@michalak](https://discuss.elastic.co/u/michalak)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 10:14am UTC](https://discuss.elastic.co/t/how-to-convert-binary-fields-value-to-string-with-painless/222262 "2020-03-05T10:14:20Z")

</div>

I have a binary field, the values are JSON strings, just stored as bytes. I need to look inside and query for specific substring. The values as you query them are base64 strings, so I thought I'd decode them, make string…

---

## [Help with Processors in filebeat modules](https://discuss.elastic.co/t/help-with-processors-in-filebeat-modules/215711)

<div class="topic-metadata">

**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\
**Replies:** 8\
**Last updated:** [February 7, 2020, 12:50pm UTC](https://discuss.elastic.co/t/help-with-processors-in-filebeat-modules/215711 "2020-02-07T12:50:44Z")

</div>

Hi, I'm having a lot of issues trying to figure out how to filter out log lines before they are indexed. After failing using "exclude\_lines" for a couple of times, I quickly moved to the use of processors. The main cons…

---

## [Searching nested objects with parent-child relationship](https://discuss.elastic.co/t/searching-nested-objects-with-parent-child-relationship/191687)

<div class="topic-metadata">

**Author:** [@Slobbard](https://discuss.elastic.co/u/Slobbard)\
**Replies:** 8\
**Last updated:** [July 24, 2019, 1:54pm UTC](https://discuss.elastic.co/t/searching-nested-objects-with-parent-child-relationship/191687 "2019-07-24T13:54:46Z")

</div>

Here's the mapping: { "mappings":{ "\_doc":{ "properties":{ "person":{ "type": "nested", "properties":{ "name": { "type": "text" } } }, "item": { "type": "nested",…

---

## [ES(5.x)-to-JSON logging log4j.properties example/snippet](https://discuss.elastic.co/t/es-5-x-to-json-logging-log4j-properties-example-snippet/97566)

<div class="topic-metadata">

**Author:** [@uschtwill](https://discuss.elastic.co/u/uschtwill)\
**Replies:** 5\
**Last updated:** [August 29, 2017, 12:49pm UTC](https://discuss.elastic.co/t/es-5-x-to-json-logging-log4j-properties-example-snippet/97566 "2017-08-29T12:49:47Z")

</div>

Hello everybody, I am trying to get ES to log to JSON with https://github.com/vy/log4j2-logstash-layout, but can not get it to work. The examples I found are using the deprecated logging.yml. Does anybody have an examp…

---

## [Can we use result from one query as an input to another query in elasticsearch?](https://discuss.elastic.co/t/can-we-use-result-from-one-query-as-an-input-to-another-query-in-elasticsearch/92390)

<div class="topic-metadata">

**Author:** [@Saurab\_Dahal](https://discuss.elastic.co/u/Saurab_Dahal)\
**Replies:** 1\
**Last updated:** [July 9, 2017, 1:06pm UTC](https://discuss.elastic.co/t/can-we-use-result-from-one-query-as-an-input-to-another-query-in-elasticsearch/92390 "2017-07-09T13:06:48Z")

</div>

It sounds silly and it can be done easily using any programming language using looping , but I was wondering if E.S provides such feature.For example consider this query SELECT product\_name FROM sales WHERE brand\_name="…

---

## [Harvester could not be started on new file - access is denied](https://discuss.elastic.co/t/harvester-could-not-be-started-on-new-file-access-is-denied/129695)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 2\
**Last updated:** [April 27, 2018, 1:31pm UTC](https://discuss.elastic.co/t/harvester-could-not-be-started-on-new-file-access-is-denied/129695 "2018-04-27T13:31:41Z")

</div>

Version: 6.2.4 Observations: I have filebeat watch application logs that contain sub-directories with more log files in the sub-directories. Filebeat is running under an account that has read permissions to the log pa…

---

## [Problem with Bulk Indexing](https://discuss.elastic.co/t/problem-with-bulk-indexing/4295)

<div class="topic-metadata">

**Author:** [@Nir\_Rubinstein](https://discuss.elastic.co/u/Nir_Rubinstein)\
**Replies:** 3\
**Last updated:** [April 26, 2011, 12:48pm UTC](https://discuss.elastic.co/t/problem-with-bulk-indexing/4295 "2011-04-26T12:48:23Z")

</div>

Hello I'm very new to ES and I'm trying to come to terms with a problem that I have. I've installed ES on my local machine (Windows 7) and have it running. I'm using .NET to send basic http command to ES on port 920…

---

## [Extracting some JSON fields from the message](https://discuss.elastic.co/t/extracting-some-json-fields-from-the-message/296479)

<div class="topic-metadata">

**Author:** [@hs\_shaikh](https://discuss.elastic.co/u/hs_shaikh)\
**Replies:** 6\
**Last updated:** [February 8, 2022, 5:37pm UTC](https://discuss.elastic.co/t/extracting-some-json-fields-from-the-message/296479 "2022-02-08T17:37:21Z")

</div>

Hello there, I want to extract "applicationOwner" and "proxyResponseCode" JSON fields from my message My message filed look like this: message": "TID: \[-1234\] \[2022-02-07 18:59:15,667\] INFO {org.wso2.am.analytics.pub…

---

## [Best configuration for analysing multiple servers](https://discuss.elastic.co/t/best-configuration-for-analysing-multiple-servers/24046)

<div class="topic-metadata">

**Author:** [@Daz](https://discuss.elastic.co/u/Daz)\
**Replies:** 5\
**Last updated:** [June 22, 2015, 1:12pm UTC](https://discuss.elastic.co/t/best-configuration-for-analysing-multiple-servers/24046 "2015-06-22T13:12:11Z")

</div>

I'm hoping that someone can provide some advice or experience. So far I have a proof of concept working, analysing a single web server. In production we have multiple servers (web, application, DB's) as well as multiple …

---

## [Custom date format on visualizations](https://discuss.elastic.co/t/custom-date-format-on-visualizations/223551)

<div class="topic-metadata">

**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\
**Replies:** 2\
**Last updated:** [March 13, 2020, 10:34pm UTC](https://discuss.elastic.co/t/custom-date-format-on-visualizations/223551 "2020-03-13T22:34:19Z")

</div>

Hello, I' wondering if it's possible to have kibana (currently using 6.7.0 stack) to use the date format specified in "JSON Input"... For example, in a Date Histogram X-Axis aggregation I could set: { "format": "E…

---

## [Stop grok from adding backslash automatically to escape \\](https://discuss.elastic.co/t/stop-grok-from-adding-backslash-automatically-to-escape/121643)

<div class="topic-metadata">

**Author:** [@Vamsi\_Rao](https://discuss.elastic.co/u/Vamsi_Rao)\
**Replies:** 8\
**Last updated:** [March 5, 2018, 11:31am UTC](https://discuss.elastic.co/t/stop-grok-from-adding-backslash-automatically-to-escape/121643 "2018-03-05T11:31:35Z")

</div>

I have the following log: 2018-02-27 04:54 +00:00: {"name":"sails","hostname":"ip-111-11-11-111","pid":256213,"level":30,"res":{"statusCode":200,"header":"HTTP/1.1 200 OK\\r\\nX-Powered-By: Sails \<sailsjs.org\>\\r\\nContent-…

---

## [Can we perform the text search present in the images or pdf files through elasticsearch](https://discuss.elastic.co/t/can-we-perform-the-text-search-present-in-the-images-or-pdf-files-through-elasticsearch/17073)

<div class="topic-metadata">

**Author:** [@Prashant\_Pal](https://discuss.elastic.co/u/Prashant_Pal)\
**Replies:** 8\
**Last updated:** [April 15, 2017, 11:25am UTC](https://discuss.elastic.co/t/can-we-perform-the-text-search-present-in-the-images-or-pdf-files-through-elasticsearch/17073 "2017-04-15T11:25:09Z")

</div>

Hi ES users, Is there anyway we can perform the text search present in the images or pdf files through elasticsearch. I mean to say that suppose I have pdf/image(will be stored in ES as base64 format) file inde…

---

## [Elasticsearch : circuit\_breaking\_exception Data too large, data for \[\<http\_request\>\] would be \[419575260/400.1mb\], which is larger than the limit of \[408420352/389.5mb\], real usage](https://discuss.elastic.co/t/elasticsearch-circuit-breaking-exception-data-too-large-data-for-http-request-would-be-419575260-400-1mb-which-is-larger-than-the-limit-of-408420352-389-5mb-real-usage/260685)

<div class="topic-metadata">

**Author:** [@Sathish\_Shanmugam](https://discuss.elastic.co/u/Sathish_Shanmugam)\
**Replies:** 2\
**Last updated:** [January 12, 2021, 9:18am UTC](https://discuss.elastic.co/t/elasticsearch-circuit-breaking-exception-data-too-large-data-for-http-request-would-be-419575260-400-1mb-which-is-larger-than-the-limit-of-408420352-389-5mb-real-usage/260685 "2021-01-12T09:18:18Z")

</div>

We are experiencing an issue while running elastic search bulk API on to elastic cloud 7.8.1 below is the exception when we get when we increase the batch size \> 100, The stack trace from NodeJS library @elastic/elasti…

---

## [Problem with multiple match query](https://discuss.elastic.co/t/problem-with-multiple-match-query/95713)

<div class="topic-metadata">

**Author:** [@floBoth](https://discuss.elastic.co/u/floBoth)\
**Replies:** 6\
**Last updated:** [August 7, 2017, 1:40pm UTC](https://discuss.elastic.co/t/problem-with-multiple-match-query/95713 "2017-08-07T13:40:30Z")

</div>

Hi everyone ! I think my problem is pretty simple to resolve, I want to do that (in head plugin) : POST /\_all/logs/\_search {“query”:{“match”:{“action”:“reject” OR “action”:“drop” AND “src\_group”:“blacklist”}},“aggreg…

---

## [Search Error The content length (897957165) is bigger than the maximum allowed string (536870888)](https://discuss.elastic.co/t/search-error-the-content-length-897957165-is-bigger-than-the-maximum-allowed-string-536870888/285100)

<div class="topic-metadata">

**Author:** [@vikas1389](https://discuss.elastic.co/u/vikas1389)\
**Replies:** 3\
**Last updated:** [October 18, 2021, 2:31pm UTC](https://discuss.elastic.co/t/search-error-the-content-length-897957165-is-bigger-than-the-maximum-allowed-string-536870888/285100 "2021-10-18T14:31:39Z")

</div>

While filtering through logs we getting error: where it mentions content length is bigger. Where is maximum allowed string (536870888) is set- any suggestions to fix this error.

---

## [Failed to load java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\] and elastic serach certification](https://discuss.elastic.co/t/failed-to-load-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin-and-elastic-serach-certification/148076)

<div class="topic-metadata">

**Author:** [@jyothi\_ca](https://discuss.elastic.co/u/jyothi_ca)\
**Replies:** 3\
**Last updated:** [September 11, 2018, 9:46am UTC](https://discuss.elastic.co/t/failed-to-load-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin-and-elastic-serach-certification/148076 "2018-09-11T09:46:02Z")

</div>

Hello Everyone, Could you please guide me w.r.t to below error message :slight\_smile: , -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=/tmp/elasticsearch.AY33SMYc, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/li…

---

## [Write connection reset by peer - Filebeat \> Logstash](https://discuss.elastic.co/t/write-connection-reset-by-peer-filebeat-logstash/166993)

<div class="topic-metadata">

**Author:** [@IcedGoblin](https://discuss.elastic.co/u/IcedGoblin)\
**Replies:** 0\
**Last updated:** [February 4, 2019, 4:32pm UTC](https://discuss.elastic.co/t/write-connection-reset-by-peer-filebeat-logstash/166993 "2019-02-04T16:32:56Z")

</div>

Hi After some help please with an error sending logs to Logstash using Filebeat. Configuration is working and logs are received however we are receiving the following error: - 2019-02-04T16:13:07.288Z ERROR lo…

---

## [Term aggregation not returning all unique values](https://discuss.elastic.co/t/term-aggregation-not-returning-all-unique-values/174291)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 6\
**Last updated:** [March 29, 2019, 1:50pm UTC](https://discuss.elastic.co/t/term-aggregation-not-returning-all-unique-values/174291 "2019-03-29T13:50:06Z")

</div>

Hi , I am using Term Aggregations to get unique values for fields to show them as filters. however I am not getting all the results from ES. code . GET /\_search { "aggs" : { "genres" : { "terms" : { "field" : "TEST\_Co…

---

## [Update existing and insert new fields on the same index in elastic search using Logstash config](https://discuss.elastic.co/t/update-existing-and-insert-new-fields-on-the-same-index-in-elastic-search-using-logstash-config/97500)

<div class="topic-metadata">

**Author:** [@vreddy](https://discuss.elastic.co/u/vreddy)\
**Replies:** 4\
**Last updated:** [August 18, 2017, 6:22pm UTC](https://discuss.elastic.co/t/update-existing-and-insert-new-fields-on-the-same-index-in-elastic-search-using-logstash-config/97500 "2017-08-18T18:22:33Z")

</div>

Hi, I have scenario where I need to update the document on the elastic search from two different sources, I am creating same document id while processing 2 sources. Lets say at first document has A, B, C fields from fir…

---

## [How to disable multicast zen discovery in elasticsearch 5](https://discuss.elastic.co/t/how-to-disable-multicast-zen-discovery-in-elasticsearch-5/64666)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 2\
**Last updated:** [November 2, 2016, 6:32am UTC](https://discuss.elastic.co/t/how-to-disable-multicast-zen-discovery-in-elasticsearch-5/64666 "2016-11-02T06:32:06Z")

</div>

Hi, I am trying to setup 3 master eligible nodes and the setting discovery.zen.ping.multicast.enabled: false no more exists in elasticsearch 5. In elasticsearch 2.3, it was working fine. How can I do it in elasticsearc…

---

## [How to get data split by columns in Data table visualization while using "filters" in sub-aggregation](https://discuss.elastic.co/t/how-to-get-data-split-by-columns-in-data-table-visualization-while-using-filters-in-sub-aggregation/154040)

<div class="topic-metadata">

**Author:** [@chetang](https://discuss.elastic.co/u/chetang)\
**Replies:** 3\
**Last updated:** [October 29, 2018, 4:55pm UTC](https://discuss.elastic.co/t/how-to-get-data-split-by-columns-in-data-table-visualization-while-using-filters-in-sub-aggregation/154040 "2018-10-29T16:55:40Z")

</div>

Hi, I am trying to build a data table visualization which will provide data with "filters" sub-aggregation in different columns in a single file. When I use "Split Table" within buckets, I get as many files as the numb…

---

## [Setup Authentication and Authorization WITHOUT X-Pack?](https://discuss.elastic.co/t/setup-authentication-and-authorization-without-x-pack/123458)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 3\
**Last updated:** [March 12, 2018, 6:28am UTC](https://discuss.elastic.co/t/setup-authentication-and-authorization-without-x-pack/123458 "2018-03-12T06:28:10Z")

</div>

Am part of a small enterprise and unfortuntely we cannot afford the licensing model to leverage X-PACK. In light of this, I was wondering what is considered a robust open source authentication and authorization setup to…

---

## [Logstash output to kafka server](https://discuss.elastic.co/t/logstash-output-to-kafka-server/197710)

<div class="topic-metadata">

**Author:** [@ELK\_CL](https://discuss.elastic.co/u/ELK_CL)\
**Replies:** 7\
**Last updated:** [September 3, 2019, 12:48pm UTC](https://discuss.elastic.co/t/logstash-output-to-kafka-server/197710 "2019-09-03T12:48:15Z")

</div>

Hello! I'm running Logstash 7.0.0. It is using a filebeat input to read logs from described files and output is going to kafka. I am getting my logs correctly for some time post starting logstash. Then i get below erro…

---

## [Convert Field data type while re-indexing the Index In Elasticsearch](https://discuss.elastic.co/t/convert-field-data-type-while-re-indexing-the-index-in-elasticsearch/224378)

<div class="topic-metadata">

**Author:** [@avinash\_kumawat](https://discuss.elastic.co/u/avinash_kumawat)\
**Replies:** 8\
**Last updated:** [March 23, 2020, 10:07am UTC](https://discuss.elastic.co/t/convert-field-data-type-while-re-indexing-the-index-in-elasticsearch/224378 "2020-03-23T10:07:44Z")

</div>

Hello All, Is there any way to convert string data type into object type or nested type and vice-versa while re-indexing the Index using the POST \_reindex API in Elasticsearch? Regards, Avinash Kumawat

---

## [Watcher mail body formatting](https://discuss.elastic.co/t/watcher-mail-body-formatting/172929)

<div class="topic-metadata">

**Author:** [@Sumanth\_Varma](https://discuss.elastic.co/u/Sumanth_Varma)\
**Replies:** 3\
**Last updated:** [March 20, 2019, 11:50am UTC](https://discuss.elastic.co/t/watcher-mail-body-formatting/172929 "2019-03-20T11:50:16Z")

</div>

I am trying to get the mail of Container which are down through mail with respective the pod name and the namespaces included. I wanted it to be table but not able to get same.I tried few things,by which i was able to ge…

---

## [Multiple pipeline in logstash listening to different beats input ports](https://discuss.elastic.co/t/multiple-pipeline-in-logstash-listening-to-different-beats-input-ports/159500)

<div class="topic-metadata">

**Author:** [@bhharan](https://discuss.elastic.co/u/bhharan)\
**Replies:** 0\
**Last updated:** [December 5, 2018, 9:39am UTC](https://discuss.elastic.co/t/multiple-pipeline-in-logstash-listening-to-different-beats-input-ports/159500 "2018-12-05T09:39:10Z")

</div>

Hi, I am currently using filebeat to ship my app logs from say Server A to logstash server which is listening for beats input on custom port 52001. On the logstash side, I am using certain grok filters to parse the log…

---

## [Mutute Date in CSV](https://discuss.elastic.co/t/mutute-date-in-csv/39524)

<div class="topic-metadata">

**Author:** [@sharan\_jain](https://discuss.elastic.co/u/sharan_jain)\
**Replies:** 5\
**Last updated:** [January 19, 2016, 3:05pm UTC](https://discuss.elastic.co/t/mutute-date-in-csv/39524 "2016-01-19T15:05:17Z")

</div>

Hi team , I have data in CSV File with some column as DATE . Since Mutute Doesnot allow date . How can i set type DATE in Filter. Thanks Sharan

---

## [Mapping definition has unsupported analyzer (upgrade to 2.0)](https://discuss.elastic.co/t/mapping-definition-has-unsupported-analyzer-upgrade-to-2-0/33835)

<div class="topic-metadata">

**Author:** [@David\_Pocivalnik](https://discuss.elastic.co/u/David_Pocivalnik)\
**Replies:** 1\
**Last updated:** [November 5, 2015, 2:24pm UTC](https://discuss.elastic.co/t/mapping-definition-has-unsupported-analyzer-upgrade-to-2-0/33835 "2015-11-05T14:24:47Z")

</div>

I'm upgrading from ES 1.7.1 to ES 2.0.0, before I defined my analyzers in elasticsearch.yml file of ES. The definitions are as below (I also tried index.analysis.analyzer.adefault: instead of indentation): index: an…

---

## [Elasticsearch 5.x and Kopf](https://discuss.elastic.co/t/elasticsearch-5-x-and-kopf/73225)

<div class="topic-metadata">

**Author:** [@sina309](https://discuss.elastic.co/u/sina309)\
**Replies:** 3\
**Last updated:** [January 31, 2017, 8:21am UTC](https://discuss.elastic.co/t/elasticsearch-5-x-and-kopf/73225 "2017-01-31T08:21:15Z")

</div>

How could I use a plugin like Kopf or Marvel in the new 5th version? I read that they are not supported anymore. Is there a suggestion from Elasticsearch for such plugins. Because they help me a lot in administrating and…

---

## [\_id length](https://discuss.elastic.co/t/id-length/182245)

<div class="topic-metadata">

**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\
**Replies:** 6\
**Last updated:** [May 23, 2019, 10:13pm UTC](https://discuss.elastic.co/t/id-length/182245 "2019-05-23T22:13:40Z")

</div>

We are using ES6.4 to index a cache whose values are xml documents. The key of this cache is generated capturing values from the xml document, so it's easy to get ids longer than 512 bytes. Then when we perform an index…

---

## [Pie chart colors change](https://discuss.elastic.co/t/pie-chart-colors-change/184036)

<div class="topic-metadata">

**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\
**Replies:** 2\
**Last updated:** [June 4, 2019, 10:39am UTC](https://discuss.elastic.co/t/pie-chart-colors-change/184036 "2019-06-04T10:39:01Z")

</div>

Hello, I created a pie chart showing according to the available data : available, unavailable and unknown. I want to attach a specific color for each value : let's say for example green for available, yellow for unavai…

---

## [Elasticsearch Task API does not cancel tasks](https://discuss.elastic.co/t/elasticsearch-task-api-does-not-cancel-tasks/157751)

<div class="topic-metadata">

**Author:** [@RockD](https://discuss.elastic.co/u/RockD)\
**Replies:** 3\
**Last updated:** [January 2, 2019, 2:43pm UTC](https://discuss.elastic.co/t/elasticsearch-task-api-does-not-cancel-tasks/157751 "2019-01-02T14:43:25Z")

</div>

Hi I'm currently having problem with my cluster, trying debuging certain documents that where indexed, I made a query with script in it, and queue various request of that search. The problem is that now I'm trying to c…

---

## [Kibana errors during first execution](https://discuss.elastic.co/t/kibana-errors-during-first-execution/124460)

<div class="topic-metadata">

**Author:** [@Jose\_Francisco\_L](https://discuss.elastic.co/u/Jose_Francisco_L)\
**Replies:** 4\
**Last updated:** [March 19, 2018, 6:53pm UTC](https://discuss.elastic.co/t/kibana-errors-during-first-execution/124460 "2018-03-19T18:53:50Z")

</div>

After downloading the last version in my debian: wget https://artifacts.elastic.co/downloads/kibana/kibana-6.2.2-linux-x86\_64.tar.gz When I try to execute, it gives me an error: /kibana-6.2.2-linux-x86\_64# bin/…

---

## [\[Spark Structured streaming\] Elasticsearch sink index name](https://discuss.elastic.co/t/spark-structured-streaming-elasticsearch-sink-index-name/152449)

<div class="topic-metadata">

**Author:** [@VincentL](https://discuss.elastic.co/u/VincentL)\
**Replies:** 7\
**Last updated:** [October 31, 2018, 8:42am UTC](https://discuss.elastic.co/t/spark-structured-streaming-elasticsearch-sink-index-name/152449 "2018-10-31T08:42:48Z")

</div>

Hello, I'm currently working with Spark Structured streaming, reading data from Kafka, and writing the output to an Elasticsearch sink. Everything is working fine, except that I would like the index name to be generated…

---

## [Enterprise Search 7.16.0 Security Update](https://discuss.elastic.co/t/enterprise-search-7-16-0-security-update/291146)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [December 7, 2021, 5:00pm UTC](https://discuss.elastic.co/t/enterprise-search-7-16-0-security-update/291146 "2021-12-07T17:00:36Z")

</div>

Enterprise Search Information Disclosure issue (ESA-2021-28) An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integrat…

---

## [Use threshold to trigger email sending](https://discuss.elastic.co/t/use-threshold-to-trigger-email-sending/35549)

<div class="topic-metadata">

**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Replies:** 5\
**Last updated:** [January 7, 2016, 10:21pm UTC](https://discuss.elastic.co/t/use-threshold-to-trigger-email-sending/35549 "2016-01-07T22:21:08Z")

</div>

Hi, I'm using logstash + elasticsearch + kibana to monitor my logfiles. What i'm doing is sending e-mail each time a field contains a pattern. But it is not usefull as i get a lot of entries with that pattern. I want t…

---

## [Exact match on fields of type "text" (beginning and end "anchored")](https://discuss.elastic.co/t/exact-match-on-fields-of-type-text-beginning-and-end-anchored/238435)

<div class="topic-metadata">

**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\
**Replies:** 2\
**Last updated:** [June 29, 2020, 9:13am UTC](https://discuss.elastic.co/t/exact-match-on-fields-of-type-text-beginning-and-end-anchored/238435 "2020-06-29T09:13:51Z")

</div>

Hi Is there a way to do an exact match on fields of type "text"? I mean ensure that all tokens are matched in the order specified and no additional tokens are contained in search result documents (no partial match)? I k…

---

## [Received ban for the parent](https://discuss.elastic.co/t/received-ban-for-the-parent/204376)

<div class="topic-metadata">

**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\
**Replies:** 1\
**Last updated:** [October 20, 2019, 8:08pm UTC](https://discuss.elastic.co/t/received-ban-for-the-parent/204376 "2019-10-20T20:08:20Z")

</div>

Hi guys, Periodically in debug logs we can see: \[2019-10-20T18:07:48,342\]\[DEBUG\]\[o.e.a.a.c.n.t.c.TransportCancelTasksAction\] \[node-00\] Received ban for the parent \[s8jcicF9TDy\_iIzFgH07zw:10741071\] on the node \[A9AdXLb5…

---

## [Too Many Open Files - Already set max files](https://discuss.elastic.co/t/too-many-open-files-already-set-max-files/64580)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 4\
**Last updated:** [November 1, 2016, 8:44pm UTC](https://discuss.elastic.co/t/too-many-open-files-already-set-max-files/64580 "2016-11-01T20:44:41Z")

</div>

I have followed the guidelines for setting maximum open file descriptors to 65k and verified that they are set that way on my cluster, however after a crash last night where we lost a master node, our cluster will not re…

---

## [Need Info for "es.set.netty.runtime.available.processors"](https://discuss.elastic.co/t/need-info-for-es-set-netty-runtime-available-processors/111322)

<div class="topic-metadata">

**Author:** [@antitech](https://discuss.elastic.co/u/antitech)\
**Replies:** 5\
**Last updated:** [December 13, 2017, 5:08am UTC](https://discuss.elastic.co/t/need-info-for-es-set-netty-runtime-available-processors/111322 "2017-12-13T05:08:24Z")

</div>

Hi, I have upgraded Elastic search from 5.3.1 to 6.0.0. I need some documentation about "es.set.netty.runtime.available.processors" , what is the purpose, or how to use etc. I didn't find much details.

---

## [Role Management - Access to 1 index only](https://discuss.elastic.co/t/role-management-access-to-1-index-only/133763)

<div class="topic-metadata">

**Author:** [@tiagoverissimo](https://discuss.elastic.co/u/tiagoverissimo)\
**Replies:** 8\
**Last updated:** [May 30, 2018, 9:16am UTC](https://discuss.elastic.co/t/role-management-access-to-1-index-only/133763 "2018-05-30T09:16:05Z")

</div>

Hello, I'm using Elastic in a PoC and we are tying the 14-day period of X-Pack. One thing that we want to test is the ability to create users/roles and give them access only to the one index, for example. But I'm facin…

---

## [Mapping a field type as Keyword results in 'java.lang.IllegalStateException: Mixing up field types' error](https://discuss.elastic.co/t/mapping-a-field-type-as-keyword-results-in-java-lang-illegalstateexception-mixing-up-field-types-error/90021)

<div class="topic-metadata">

**Author:** [@mulgar](https://discuss.elastic.co/u/mulgar)\
**Replies:** 4\
**Last updated:** [July 5, 2017, 4:31am UTC](https://discuss.elastic.co/t/mapping-a-field-type-as-keyword-results-in-java-lang-illegalstateexception-mixing-up-field-types-error/90021 "2017-07-05T04:31:44Z")

</div>

I'm pulling some basic data into ElasticSearch via LogStash from an ER database (data on support tickets). I'm still learning about this so configuring mappings for the first time. I have fields which I'm sure should be …

---

## [LogStash runner error: An unexpected error occurred! {:error=\>#\<SocketError: initialize: name or service not known\>](https://discuss.elastic.co/t/logstash-runner-error-an-unexpected-error-occurred-error-socketerror-initialize-name-or-service-not-known/151134)

<div class="topic-metadata">

**Author:** [@bizmate](https://discuss.elastic.co/u/bizmate)\
**Replies:** 3\
**Last updated:** [October 8, 2018, 5:27pm UTC](https://discuss.elastic.co/t/logstash-runner-error-an-unexpected-error-occurred-error-socketerror-initialize-name-or-service-not-known/151134 "2018-10-08T17:27:19Z")

</div>

I am trying to run LogStash on my machine through a docker container. I am setting up the env variables to HTTP\_HOST=https://myawses.us-east-1.es.amazonaws.com:443/ HTTP\_PORT=443 Also all the outputs i have in my con…

---

## [Filebeat with Qradar](https://discuss.elastic.co/t/filebeat-with-qradar/114653)

<div class="topic-metadata">

**Author:** [@atangirala](https://discuss.elastic.co/u/atangirala)\
**Replies:** 0\
**Last updated:** [January 9, 2018, 7:06am UTC](https://discuss.elastic.co/t/filebeat-with-qradar/114653 "2018-01-09T07:06:46Z")

</div>

I want to forward my application logs to qradar SIEM tool using logstash/filebeat. How ever I can forward syslogs without any issue, can anyone help me with the setup?

---

## [Timeline Template see fields other then the fields in the alert](https://discuss.elastic.co/t/timeline-template-see-fields-other-then-the-fields-in-the-alert/352756)

<div class="topic-metadata">

**Author:** [@RoeeKent](https://discuss.elastic.co/u/RoeeKent)\
**Replies:** 4\
**Last updated:** [February 8, 2024, 12:23pm UTC](https://discuss.elastic.co/t/timeline-template-see-fields-other-then-the-fields-in-the-alert/352756 "2024-02-08T12:23:34Z")

</div>

Hi everyone! I would love to know if it is possible to add a timeline template to a detection rule, and use the fields in the template to see logs that are not part of the alert. For example, I have a rule that alerts …

---

## [Setting heap size on JVM.options . still getting heap size problem](https://discuss.elastic.co/t/setting-heap-size-on-jvm-options-still-getting-heap-size-problem/89341)

<div class="topic-metadata">

**Author:** [@Saurab\_Dahal](https://discuss.elastic.co/u/Saurab_Dahal)\
**Replies:** 4\
**Last updated:** [July 9, 2017, 11:07am UTC](https://discuss.elastic.co/t/setting-heap-size-on-jvm-options-still-getting-heap-size-problem/89341 "2017-07-09T11:07:46Z")

</div>

Here is a part of my JVM.options file that sets heap size ## JVM configuration ################################################################ ## IMPORTANT: JVM heap size ##########################################…

---

## [Having issues mapping roles to users in nested LDAP groups](https://discuss.elastic.co/t/having-issues-mapping-roles-to-users-in-nested-ldap-groups/91953)

<div class="topic-metadata">

**Author:** [@jcrichfield](https://discuss.elastic.co/u/jcrichfield)\
**Replies:** 6\
**Last updated:** [July 20, 2017, 3:03pm UTC](https://discuss.elastic.co/t/having-issues-mapping-roles-to-users-in-nested-ldap-groups/91953 "2017-07-20T15:03:11Z")

</div>

Good day, I am having an issue mapping roles to users who belong to nested LDAP groups using the LDAP Realm authentication option in the X-pack plugin. For instance, I have a LDAP group called: elk-users, and inside …

---

## [What is the alternatives to NodeClient(NodeBuilder)](https://discuss.elastic.co/t/what-is-the-alternatives-to-nodeclient-nodebuilder/95926)

<div class="topic-metadata">

**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\
**Replies:** 5\
**Last updated:** [August 24, 2017, 7:44am UTC](https://discuss.elastic.co/t/what-is-the-alternatives-to-nodeclient-nodebuilder/95926 "2017-08-24T07:44:39Z")

</div>

We try to move our ES from 1.7 to 5.4 and I found this article https://www.elastic.co/blog/elasticsearch-the-server It seems to me we cannot use Embedded Elasticsearch anymore like what we used to start our application…

---

## [Include Pattern in Kibana visualization](https://discuss.elastic.co/t/include-pattern-in-kibana-visualization/184220)

<div class="topic-metadata">

**Author:** [@aeljazouli](https://discuss.elastic.co/u/aeljazouli)\
**Replies:** 2\
**Last updated:** [June 7, 2019, 9:46am UTC](https://discuss.elastic.co/t/include-pattern-in-kibana-visualization/184220 "2019-06-07T09:46:56Z")

</div>

Hey everyone, Je veux calculer le nombre de mots contenus dans un champ "word". Dans cet exemple, il m'affiche 8 mots différents qui sont sur un document d'ID=1. I'm trying to calculate the number of words on a dicti…

[Previous page](https://discuss.elastic.co/top.md?page=449&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=451&per_page=50&period=all)
