# Top **URL:** https://discuss.elastic.co/top.md?page=451&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 452 --- ## [java.lang.IllegalArgumentException: unknown setting \[path.conf\] please check that any required plugins are installed, or check the breaking changes documentation for removed settings](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-path-conf-please-check-that-any-required-plugins-are-installed-or-check-the-breaking-changes-documentation-for-removed-settings/248438)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 2\ **Last updated:** [September 13, 2020, 2:53pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-path-conf-please-check-that-any-required-plugins-are-installed-or-check-the-breaking-changes-documentation-for-removed-settings/248438 "2020-09-13T14:53:49Z")
Hi All, Greeting !! I am creating the new setup of ELK, and now i am unable to start ES service. Logs are below for reference. ES Version: 7.9 elasticsearch.yml config:- cluster.name: BPOConnectElasticSearch 2 node… --- ## [Drop if message contains text from a List of Strings](https://discuss.elastic.co/t/drop-if-message-contains-text-from-a-list-of-strings/142102)
**Author:** [@Waleed\_Malik](https://discuss.elastic.co/u/Waleed_Malik)\ **Replies:** 1\ **Last updated:** [August 7, 2018, 4:30pm UTC](https://discuss.elastic.co/t/drop-if-message-contains-text-from-a-list-of-strings/142102 "2018-08-07T16:30:09Z")
Hi, I have a pre-defined set of Strings that i want to hard code in the conf file. if "some text " in \[message\] or "some text" in \[message\] { drop {} } I want to create an array of strings and loop through them a… --- ## [Search for hashtags - Find exact matches only](https://discuss.elastic.co/t/search-for-hashtags-find-exact-matches-only/15103)
**Author:** [@joa](https://discuss.elastic.co/u/joa)\ **Replies:** 2\ **Last updated:** [January 4, 2014, 5:36pm UTC](https://discuss.elastic.co/t/search-for-hashtags-find-exact-matches-only/15103 "2014-01-04T17:36:50Z")
Hi, I am using analyzer and filters described at http://www.fullscale.co/blog/2013/03/04/preserving\_specific\_characters\_during\_tokenizing\_in\_elasticsearch.html to preserve # chars. See mapping blow: curl -XPUT… --- ## [Remove nested fields by query and/or by \_reindex](https://discuss.elastic.co/t/remove-nested-fields-by-query-and-or-by-reindex/184432)
**Author:** [@Chris\_Denneen](https://discuss.elastic.co/u/Chris_Denneen)\ **Replies:** 8\ **Last updated:** [June 6, 2019, 6:38pm UTC](https://discuss.elastic.co/t/remove-nested-fields-by-query-and-or-by-reindex/184432 "2019-06-06T18:38:31Z")
I currently was using dynamic\_mapping to create .raw fields for all strings but want to remove those in favor of a .keyword field. Trying to figure out the proper ctx.\_source syntax for update\_by\_query or \_reindex to re… --- ## [Searching IP Address Range Using CIDR Mask](https://discuss.elastic.co/t/searching-ip-address-range-using-cidr-mask/22114)
**Author:** [@Ed\_Brown](https://discuss.elastic.co/u/Ed_Brown)\ **Replies:** 3\ **Last updated:** [February 13, 2015, 9:13pm UTC](https://discuss.elastic.co/t/searching-ip-address-range-using-cidr-mask/22114 "2015-02-13T21:13:38Z")
Hi, I have an ip type defined in my index mapping. I would like to search the IP addresses using CIDR notation. I see IP range for aggregations using CIDR masks, but nothing else. Is what I want to do currently po… --- ## [Copy dashboards from one kibana space to another space](https://discuss.elastic.co/t/copy-dashboards-from-one-kibana-space-to-another-space/345311)
**Author:** [@israel\_teran](https://discuss.elastic.co/u/israel_teran)\ **Replies:** 1\ **Last updated:** [October 18, 2023, 8:10pm UTC](https://discuss.elastic.co/t/copy-dashboards-from-one-kibana-space-to-another-space/345311 "2023-10-18T20:10:35Z")
I´m on Elastic Stack v8.6.2, I want to know if there is a procedure to copy a complete dashboard from my default space to a new kibana space. --- ## [elasticsearch.exceptions.RequestError: RequestError(400, 'illegal\_argument\_exception', 'Limit of total fields \[1000\] in index \[pv3\] has been exceeded')](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-illegal-argument-exception-limit-of-total-fields-1000-in-index-pv3-has-been-exceeded/146691)
**Author:** [@Nikita\_Duggal](https://discuss.elastic.co/u/Nikita_Duggal)\ **Replies:** 1\ **Last updated:** [September 7, 2018, 11:49am UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-illegal-argument-exception-limit-of-total-fields-1000-in-index-pv3-has-been-exceeded/146691 "2018-09-07T11:49:13Z")
I am indexing around 80000 documents with 2 GB of data size from mongodb to elastic search index using Python. After indexing 16000 documents i receive this error. Note : I have been using elasticsearch locally on my co… --- ## [Split arrays of keys and values](https://discuss.elastic.co/t/split-arrays-of-keys-and-values/90736)
**Author:** [@Khaled](https://discuss.elastic.co/u/Khaled)\ **Replies:** 3\ **Last updated:** [June 26, 2017, 5:58am UTC](https://discuss.elastic.co/t/split-arrays-of-keys-and-values/90736 "2017-06-26T05:58:31Z")
I'm using Amazon SQS input plugin to get bounced & delivery reports from Amazon SES (Simple Email Service). One of the fields (mail.headers) is an array of keys and values, like the following: { "name": "Message… --- ## [Issue shipping Winlogbeat 5.x to Elasticsearch 2.x](https://discuss.elastic.co/t/issue-shipping-winlogbeat-5-x-to-elasticsearch-2-x/47301)
**Author:** [@Ethan](https://discuss.elastic.co/u/Ethan)\ **Replies:** 6\ **Last updated:** [April 14, 2016, 6:19pm UTC](https://discuss.elastic.co/t/issue-shipping-winlogbeat-5-x-to-elasticsearch-2-x/47301 "2016-04-14T18:19:07Z")
This is a really basic question, but I have done some googling with no positive results. I just spun up an install of winlogbeat using the instructions in the configuration documentation. It was all fine and dandy, and… --- ## [How do I parse json term query using TermQueryBuilder.fromXContent()?](https://discuss.elastic.co/t/how-do-i-parse-json-term-query-using-termquerybuilder-fromxcontent/112552)
**Author:** [@lks21c](https://discuss.elastic.co/u/lks21c)\ **Replies:** 5\ **Last updated:** [December 21, 2017, 3:09am UTC](https://discuss.elastic.co/t/how-do-i-parse-json-term-query-using-termquerybuilder-fromxcontent/112552 "2017-12-21T03:09:31Z")
Hi, I'm trying to parse "term query" as JSON string into TermQueryBuilder using TermQueryBuilder.fromXContent(); I looked up Java codes and tried to figure out the way I can parse Json string into TermQueryBuilder. My … --- ## [How to re-run cluster with different cluster uuid](https://discuss.elastic.co/t/how-to-re-run-cluster-with-different-cluster-uuid/317431)
**Author:** [@qksjdhi1212](https://discuss.elastic.co/u/qksjdhi1212)\ **Replies:** 3\ **Last updated:** [October 31, 2022, 11:57pm UTC](https://discuss.elastic.co/t/how-to-re-run-cluster-with-different-cluster-uuid/317431 "2022-10-31T23:57:57Z")
using version 8.4 When I ran es in single-node-cluster on ec2 instance I got this message Fully-formed clusters do not attempt to discover other nodes, and nodes with different cluster UUIDs cannot belong to the same c… --- ## [Fielddata is disabled on text fields by default. Set fielddata=true on \[beat.name\]](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-beat-name/60283)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 4\ **Last updated:** [September 12, 2016, 9:19pm UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-beat-name/60283 "2016-09-12T21:19:12Z")
Hi. I have imported dashboard template using import\_dashboards.sh for metricbeat. But below errors appears when I select any of the imported dashhboard. My Environemnt metricbeat-5.0.0 alpha5 kibana-5.0.0 alpha5 D… --- ## [Kibana full text search](https://discuss.elastic.co/t/kibana-full-text-search/50930)
**Author:** [@Ajay\_Singh\_Chouhan](https://discuss.elastic.co/u/Ajay_Singh_Chouhan)\ **Replies:** 2\ **Last updated:** [May 31, 2016, 7:07am UTC](https://discuss.elastic.co/t/kibana-full-text-search/50930 "2016-05-31T07:07:37Z")
Hi I have recently ingested apache logs to ES through logstash and I am analyzing them through Kibana . Few of the log lines contains the phrase- java.lang.outofmemory.....but when I search for the word "memory" in the k… --- ## [Elasticsearch reached the limit of ongoing initial primary recoveries](https://discuss.elastic.co/t/elasticsearch-reached-the-limit-of-ongoing-initial-primary-recoveries/289390)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 8\ **Last updated:** [November 17, 2021, 8:58am UTC](https://discuss.elastic.co/t/elasticsearch-reached-the-limit-of-ongoing-initial-primary-recoveries/289390 "2021-11-17T08:58:40Z")
Hello, I've been monitoring my cluster performance and I found my cluster health turned into red when I check with GET \_cluster/allocation/explain?pretty I got this result "node\_allocation\_decisions" : \[ { "n… --- ## [What are the research papers that ES relies on?](https://discuss.elastic.co/t/what-are-the-research-papers-that-es-relies-on/22974)
**Author:** [@MrBu](https://discuss.elastic.co/u/MrBu)\ **Replies:** 7\ **Last updated:** [March 31, 2015, 6:03pm UTC](https://discuss.elastic.co/t/what-are-the-research-papers-that-es-relies-on/22974 "2015-03-31T18:03:42Z")
Other than Lucene's own research papers, what are the research papers or special algorithms that is being used by Elastic? I couldn't find a list it in the documents. Are the special algorithms used (and which one… --- ## [/var/lib/elasticsearch/nodes/0/indices/](https://discuss.elastic.co/t/var-lib-elasticsearch-nodes-0-indices/287462)
**Author:** [@marcio\_lima](https://discuss.elastic.co/u/marcio_lima)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 1:25pm UTC](https://discuss.elastic.co/t/var-lib-elasticsearch-nodes-0-indices/287462 "2021-10-27T13:25:32Z")
I have the need to free up disk space by consuming elastic, the files are being generated in / var / lib / Elasticsearch / nodes / 0 / indices / how can i delete the indices? --- ## [ES Rest Client - trust all certificates](https://discuss.elastic.co/t/es-rest-client-trust-all-certificates/236080)
**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\ **Replies:** 6\ **Last updated:** [June 9, 2020, 3:06pm UTC](https://discuss.elastic.co/t/es-rest-client-trust-all-certificates/236080 "2020-06-09T15:06:30Z")
Hello! For Dev-Ops testing we want to make a untrusted connection. I found a self-side soulution here, but will be glad to avoid the key part. RestClientBuilder restHttp; // .... restHttp.setHttpClientConfigCallback(h… --- ## [Optimal number of documents in an index](https://discuss.elastic.co/t/optimal-number-of-documents-in-an-index/120748)
**Author:** [@Bkt](https://discuss.elastic.co/u/Bkt)\ **Replies:** 1\ **Last updated:** [February 21, 2018, 2:29am UTC](https://discuss.elastic.co/t/optimal-number-of-documents-in-an-index/120748 "2018-02-21T02:29:49Z")
Hello, Is there some optimal number of documents to be present in an index? for example the indexes are created daily and go as foo-2018-02-20 and so on. Some of the indexes are really small (\<100 documents with average… --- ## [Schedule Trigger TimeZone](https://discuss.elastic.co/t/schedule-trigger-timezone/43427)
**Author:** [@gracineux](https://discuss.elastic.co/u/gracineux)\ **Replies:** 3\ **Last updated:** [April 5, 2017, 7:21am UTC](https://discuss.elastic.co/t/schedule-trigger-timezone/43427 "2017-04-05T07:21:04Z")
Hi I am trying to setup a watcher with a daily schedule trigger. Is it possible to set a timezone for the trigger ? This page states that times are specified in UTC time, but is also warning against daylight saving … --- ## [How to check per day logs size?](https://discuss.elastic.co/t/how-to-check-per-day-logs-size/272638)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 2:19am UTC](https://discuss.elastic.co/t/how-to-check-per-day-logs-size/272638 "2021-05-13T02:19:10Z")
I want to check per day log size.It was very easy earlier because logstash created index on daily basis,but now we are using ILM policy , so it create new index when an index reaches to specific gb or it create new index… --- ## [Elasticsearch upgrade from 5.5 to 7](https://discuss.elastic.co/t/elasticsearch-upgrade-from-5-5-to-7/174163)
**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\ **Replies:** 4\ **Last updated:** [March 27, 2019, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-5-5-to-7/174163 "2019-03-27T16:40:02Z")
Hi everybody, We are using an old version of Elastic Stack (Elasticsearch, Logstash, Filebeat and Kibana) that we wanted to upgrade to lastest version (6.7) released yesterday (26/03). But we were wondering if we wouldn… --- ## [How to search multiple indexes with the JAVA Client when the index names are known only at runtime](https://discuss.elastic.co/t/how-to-search-multiple-indexes-with-the-java-client-when-the-index-names-are-known-only-at-runtime/10598)
**Author:** [@Paul\_Sabou](https://discuss.elastic.co/u/Paul_Sabou)\ **Replies:** 2\ **Last updated:** [February 2, 2013, 11:26am UTC](https://discuss.elastic.co/t/how-to-search-multiple-indexes-with-the-java-client-when-the-index-names-are-known-only-at-runtime/10598 "2013-02-02T11:26:30Z")
I'm having some issues with the limitations of the Java Client API when dealing with search requests across multiple indexes. \*What works:\* - I have two indexes "myIndex\_one" and "myIndex\_two". - I can execute a… --- ## [Create daily indices based on local timezone](https://discuss.elastic.co/t/create-daily-indices-based-on-local-timezone/204330)
**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\ **Replies:** 8\ **Last updated:** [October 29, 2019, 1:08am UTC](https://discuss.elastic.co/t/create-daily-indices-based-on-local-timezone/204330 "2019-10-29T01:08:05Z")
While trying to figure out how to make indices rollover at midnight local time, I found a bunch of people asking how to do it but no clear solution. The ruby code below generates a YYYY.MM.dd formatted string based on @… --- ## [Account name not showing in windows event\_id 4732](https://discuss.elastic.co/t/account-name-not-showing-in-windows-event-id-4732/213177)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 5\ **Last updated:** [January 16, 2020, 3:56am UTC](https://discuss.elastic.co/t/account-name-not-showing-in-windows-event-id-4732/213177 "2020-01-16T03:56:42Z")
I am trying to track users added to Administrators group. But in the event viewer log shows local username and group, but in the event which i am receiving has only the SID. I check the Friendly View and XML View, both a… --- ## [Kibana 3.x version compatibility with elasticsearch 2.x](https://discuss.elastic.co/t/kibana-3-x-version-compatibility-with-elasticsearch-2-x/36162)
**Author:** [@tejus](https://discuss.elastic.co/u/tejus)\ **Replies:** 5\ **Last updated:** [February 9, 2016, 1:17am UTC](https://discuss.elastic.co/t/kibana-3-x-version-compatibility-with-elasticsearch-2-x/36162 "2016-02-09T01:17:36Z")
can some one tell me which version of kibana 3.x works with elasticsearch 2.x. elastic doc page says that kibana 3 is compatible with es 1.x and above. what is the above limit??? --- ## [Indexing Mysql Database with elasticsearch - Newbie](https://discuss.elastic.co/t/indexing-mysql-database-with-elasticsearch-newbie/6229)
**Author:** [@Mohit](https://discuss.elastic.co/u/Mohit)\ **Replies:** 5\ **Last updated:** [August 7, 2012, 1:34pm UTC](https://discuss.elastic.co/t/indexing-mysql-database-with-elasticsearch-newbie/6229 "2012-08-07T13:34:27Z")
I recently started looking ElasticSearch to implement search in my application. I have my database in Mysql which have approx. \>2 mn records. I know in sphinx we could create an index directly on any mysql table colum… --- ## [Getting no results with match\_all Query](https://discuss.elastic.co/t/getting-no-results-with-match-all-query/25078)
**Author:** [@travagini](https://discuss.elastic.co/u/travagini)\ **Replies:** 7\ **Last updated:** [July 8, 2015, 2:20pm UTC](https://discuss.elastic.co/t/getting-no-results-with-match-all-query/25078 "2015-07-08T14:20:59Z")
I have this structure: { "\_id": "001", "information": "Free Books", "date": "2015-07-06", "books": \[ { "title": "New Era", "author": "David Smith" }, { … --- ## [Workers option logstash input](https://discuss.elastic.co/t/workers-option-logstash-input/43358)
**Author:** [@Python\_Coder](https://discuss.elastic.co/u/Python_Coder)\ **Replies:** 8\ **Last updated:** [March 10, 2016, 2:26pm UTC](https://discuss.elastic.co/t/workers-option-logstash-input/43358 "2016-03-10T14:26:46Z")
Does the option "workers" works with redis input???? input { redis { host =\> "172.16.122.120" data\_type =\> "list" type =\> "redis-input" key =\> "lo… --- ## [Hive -\> ES - Too Many Requests(429)](https://discuss.elastic.co/t/hive-es-too-many-requests-429/35456)
**Author:** [@Rasmus\_Aveskogh](https://discuss.elastic.co/u/Rasmus_Aveskogh)\ **Replies:** 7\ **Last updated:** [December 8, 2015, 2:07pm UTC](https://discuss.elastic.co/t/hive-es-too-many-requests-429/35456 "2015-12-08T14:07:18Z")
Hi, We've been running a Hadoop/Hive (Apache 2.7.0) -\> ES (1.5) integration for a while and things have worked reasonable well. One thing we've had to keep in mind when setting up scheduled batch jobs has been not to "… --- ## [Nodes Out of Sync](https://discuss.elastic.co/t/nodes-out-of-sync/110545)
**Author:** [@Bruce\_Carey](https://discuss.elastic.co/u/Bruce_Carey)\ **Replies:** 6\ **Last updated:** [December 8, 2017, 9:08pm UTC](https://discuss.elastic.co/t/nodes-out-of-sync/110545 "2017-12-08T21:08:01Z")
Hi, We have several different clusters of ES5.02 running. Most are two nodes. On one, there's a large index with three shards, one replica. What I've noticed is that when queried, I'm getting different search results… --- ## [How to extract timestamp from app logs](https://discuss.elastic.co/t/how-to-extract-timestamp-from-app-logs/121745)
**Author:** [@proximator](https://discuss.elastic.co/u/proximator)\ **Replies:** 4\ **Last updated:** [February 28, 2018, 10:57am UTC](https://discuss.elastic.co/t/how-to-extract-timestamp-from-app-logs/121745 "2018-02-28T10:57:02Z")
Hello All my app logs start with a timestamp having this format: yyyy-MM-dd HH:mm:SS Z Log messages can have a different format and I have some grok pattern to parse some of them, but what I want is to always extract t… --- ## [How to store video/audio files in elasticsearch](https://discuss.elastic.co/t/how-to-store-video-audio-files-in-elasticsearch/78965)
**Author:** [@Akshay\_Parab](https://discuss.elastic.co/u/Akshay_Parab)\ **Replies:** 6\ **Last updated:** [March 17, 2017, 6:29am UTC](https://discuss.elastic.co/t/how-to-store-video-audio-files-in-elasticsearch/78965 "2017-03-17T06:29:16Z")
how to store video/audio files in elasticsearch --- ## [Metric Beat No PostgreSQL Dashboard Found](https://discuss.elastic.co/t/metric-beat-no-postgresql-dashboard-found/84324)
**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\ **Replies:** 4\ **Last updated:** [May 3, 2017, 4:58pm UTC](https://discuss.elastic.co/t/metric-beat-no-postgresql-dashboard-found/84324 "2017-05-03T16:58:32Z")
Hi there guys I configured metricbeat to monitor a postgresql database, but I noticed that there is no metricbeat dashboard by default, only for MongoDB, is that correct? is there any template out there that I missed t… --- ## [Multiple inputs and multiple outputs](https://discuss.elastic.co/t/multiple-inputs-and-multiple-outputs/87788)
**Author:** [@jgarbora](https://discuss.elastic.co/u/jgarbora)\ **Replies:** 3\ **Last updated:** [September 2, 2018, 1:09pm UTC](https://discuss.elastic.co/t/multiple-inputs-and-multiple-outputs/87788 "2018-09-02T13:09:56Z")
Hi there, I'm trying to set multiple inputs and multiple outputs to different elasticsearch indexes ... and something I am doing wrong because everything is going to the else. Here is my config: input { jdbc … --- ## [Combine strings from array into field](https://discuss.elastic.co/t/combine-strings-from-array-into-field/63520)
**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\ **Replies:** 2\ **Last updated:** [October 21, 2016, 5:54am UTC](https://discuss.elastic.co/t/combine-strings-from-array-into-field/63520 "2016-10-21T05:54:53Z")
Hi all, I'm working with manipulating some data from a logstash filter and haven't had any luck in figuring out how to do one specific action. I'm parsing a string and am pulling all the needed data where in my field c… --- ## [Remove duplicate documents from a search in kibana4](https://discuss.elastic.co/t/remove-duplicate-documents-from-a-search-in-kibana4/26453)
**Author:** [@vincentTulip](https://discuss.elastic.co/u/vincentTulip)\ **Replies:** 1\ **Last updated:** [July 30, 2015, 4:17am UTC](https://discuss.elastic.co/t/remove-duplicate-documents-from-a-search-in-kibana4/26453 "2015-07-30T04:17:32Z")
I have an index with a lot of paper with the same value for the same field. I have one deduplication on this field. Aggregators will come to me as counters. I would like a list of documents. My index : Doc 1 {domai… --- ## [What to do to show aggregations doc\_count 0, for graphics, when result dont exists](https://discuss.elastic.co/t/what-to-do-to-show-aggregations-doc-count-0-for-graphics-when-result-dont-exists/55410)
**Author:** [@samuelr](https://discuss.elastic.co/u/samuelr)\ **Replies:** 5\ **Last updated:** [July 14, 2016, 12:55pm UTC](https://discuss.elastic.co/t/what-to-do-to-show-aggregations-doc-count-0-for-graphics-when-result-dont-exists/55410 "2016-07-14T12:55:51Z")
hello, I have this sample search where the result I want to use in a highchart chart. \`GET \_search { "query": { "filtered": { "query": { "bool": { "must": \[ … --- ## [Error fetching fields for index pattern metricbeat-\* (ID: metricbeat-\*) Request Timeout](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-metricbeat-id-metricbeat-request-timeout/241313)
**Author:** [@Peter\_Kasper](https://discuss.elastic.co/u/Peter_Kasper)\ **Replies:** 1\ **Last updated:** [July 31, 2020, 9:01am UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-metricbeat-id-metricbeat-request-timeout/241313 "2020-07-31T09:01:52Z")
Kibana, Elastic are 7.8, using Centos 7.7 and sending VM is Centos is 8.0, non secure single node. Whenever I run metricbeat setup, it loads the items but when i view the index pattern i get the error. It seems to load … --- ## [Seperate email alerts per detection?](https://discuss.elastic.co/t/seperate-email-alerts-per-detection/302112)
**Author:** [@Josh\_G](https://discuss.elastic.co/u/Josh_G)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 8:58am UTC](https://discuss.elastic.co/t/seperate-email-alerts-per-detection/302112 "2022-05-17T08:58:23Z")
Hi Everyone, I've been doing some testing with the Email Alerts, to alert us when a specific event code is generated. I've done this under Security \> Rules, and it runs every 5 minutes. It works absolutely fine but the… --- ## [샤드 및 레플리카 개수 세팅](https://discuss.elastic.co/t/topic/74996)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 2\ **Last updated:** [February 17, 2017, 12:33pm UTC](https://discuss.elastic.co/t/topic/74996 "2017-02-17T12:33:45Z")
안녕하세요. 엘라스틱서치로 클러스터를 구성했는데요. 샤드와 레플리카 개수를 몇 개로 지정해야 할 지 잘 모르겠습니다. 몇 개가 적당한지 개수와 이유를 알 수 있을까요? 현재 클러스터 환경은 서버는 2대이고 노드는 4개(마스터노드 1개, 데이터노드 3개)이며, 각 노드의 용량은 8G 입니다. --- ## [How to attach Index Lifecycle Policy to indices created by Logstash?](https://discuss.elastic.co/t/how-to-attach-index-lifecycle-policy-to-indices-created-by-logstash/301657)
**Author:** [@pritster5](https://discuss.elastic.co/u/pritster5)\ **Replies:** 5\ **Last updated:** [April 21, 2022, 9:40pm UTC](https://discuss.elastic.co/t/how-to-attach-index-lifecycle-policy-to-indices-created-by-logstash/301657 "2022-04-21T21:40:05Z")
I have a Logstash Config file that looks like this: input { s3 { bucket =\> "testbucket" region =\> "us-east-1" codec =\> "json" additional\_settings =\> { force\_path\_style =\> … --- ## [Elasticsearch fails to start on ubuntu 20.04](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-20-04/262684)
**Author:** [@josephthejoe](https://discuss.elastic.co/u/josephthejoe)\ **Replies:** 6\ **Last updated:** [January 30, 2021, 6:28pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-20-04/262684 "2021-01-30T18:28:58Z")
There seems to be a lot of these types of posts ive gone through a ton of them and havent been able to find one spitting out similar errors to what I have. No logs just the output from systemctl status. lab@siem:~$ syst… --- ## [Filebeat could not connect to logstash on SSL](https://discuss.elastic.co/t/filebeat-could-not-connect-to-logstash-on-ssl/152723)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 5\ **Last updated:** [November 2, 2018, 2:12pm UTC](https://discuss.elastic.co/t/filebeat-could-not-connect-to-logstash-on-ssl/152723 "2018-11-02T14:12:34Z")
Hello there, I set up the SSL on all our ELK nodes (2 Elastinodes, L&K on another node), all work fine. Without setting up SSL on Beat hosts, everything worked fine. Now we were requested to set up the SSL/TLS between… --- ## [Kibana Server is not ready yet 2020](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-2020/231864)
**Author:** [@Henrial](https://discuss.elastic.co/u/Henrial)\ **Replies:** 4\ **Last updated:** [May 12, 2020, 12:46pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-2020/231864 "2020-05-12T12:46:03Z")
Hello, I am having always the same issue with the kibana webpage. I am trying to install kibana and elasticsearch in a Xubuntu (Ubuntu 20.04 LTS)VM on VirtualBox. I have 2 CPUs and 5GB of RAM. I have checked for all t… --- ## [Query filter not working](https://discuss.elastic.co/t/query-filter-not-working/99771)
**Author:** [@sunmesiav](https://discuss.elastic.co/u/sunmesiav)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 1:00am UTC](https://discuss.elastic.co/t/query-filter-not-working/99771 "2017-09-08T01:00:01Z")
Hi Team, Iam trying to build a simple query and filter but its not working. { "query": { "bool": { "must": \[ { "match": { "some\_entry": "Not in" }} \], "filter": \[ { "term": { "some\_area": "XXX\_YY" }} … --- ## [Update only if exist](https://discuss.elastic.co/t/update-only-if-exist/138059)
**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\ **Replies:** 1\ **Last updated:** [June 30, 2018, 1:03pm UTC](https://discuss.elastic.co/t/update-only-if-exist/138059 "2018-06-30T13:03:42Z")
Hey, Some of the events sent to my ElasticSearch cluster aren't relevant in case they are related to a document which doesn't exist. I know I could just make a regular update request, and then get exception about faili… --- ## [Is it possible to ignore failure while using the Reindex API?](https://discuss.elastic.co/t/is-it-possible-to-ignore-failure-while-using-the-reindex-api/327120)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 5\ **Last updated:** [March 6, 2023, 10:01pm UTC](https://discuss.elastic.co/t/is-it-possible-to-ignore-failure-while-using-the-reindex-api/327120 "2023-03-06T22:01:40Z")
Hello, I'm trying to run some reindex on an index and got a failure related to a mapping parsing exception, which is kinda of expected as on this data the field can change from object to text. For this reason, the dest… --- ## [Vertical Bar Chart Order by Percentage](https://discuss.elastic.co/t/vertical-bar-chart-order-by-percentage/32585)
**Author:** [@mhuguenin](https://discuss.elastic.co/u/mhuguenin)\ **Replies:** 3\ **Last updated:** [October 23, 2015, 5:41am UTC](https://discuss.elastic.co/t/vertical-bar-chart-order-by-percentage/32585 "2015-10-23T05:41:26Z")
I've created a vertical bar chart with Bar Mode=Percentage that aggregates 2 metrics and displays the results as a percentage. For my buckets I'm using Terms Aggregation. And I want to get the top 10 terms ordered by … --- ## [Creating and Deleting Indexes || Watcher](https://discuss.elastic.co/t/creating-and-deleting-indexes-watcher/119275)
**Author:** [@mpandey](https://discuss.elastic.co/u/mpandey)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 9:04am UTC](https://discuss.elastic.co/t/creating-and-deleting-indexes-watcher/119275 "2018-02-12T09:04:24Z")
Hi Everyone, I am working on purging the old data in elasticsearch. I was wondering what is the best way to implement such a job. I have to delete all the documents which are older than 3 months and this has to repeated… --- ## [Term query (max) timestamp question](https://discuss.elastic.co/t/term-query-max-timestamp-question/160804)
**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\ **Replies:** 6\ **Last updated:** [December 19, 2018, 5:38pm UTC](https://discuss.elastic.co/t/term-query-max-timestamp-question/160804 "2018-12-19T17:38:49Z")
Is this kind of query possible? GET /logstash\*/\_search { "query": { "term": {"@timestamp": \} } } some kind of inline process that gets the value for @timesta… [Previous page](https://discuss.elastic.co/top.md?page=450&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=452&per_page=50&period=all)