# Top

**URL:** https://discuss.elastic.co/top.md?page=452&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 453

---

## [Parsing plain text with Logstash filter](https://discuss.elastic.co/t/parsing-plain-text-with-logstash-filter/89085)

<div class="topic-metadata">

**Author:** [@John\_06](https://discuss.elastic.co/u/John_06)\
**Replies:** 5\
**Last updated:** [June 15, 2017, 3:03am UTC](https://discuss.elastic.co/t/parsing-plain-text-with-logstash-filter/89085 "2017-06-15T03:03:30Z")

</div>

The log file is one line of plain text. There is part of text like this: ...there is some text here, Results: 0, Errors: 0, there is some text here... The goal is to create new fields results and errors and assign pr…

---

## [cURL - Could not get simple GET to work](https://discuss.elastic.co/t/curl-could-not-get-simple-get-to-work/126831)

<div class="topic-metadata">

**Author:** [@Aravind](https://discuss.elastic.co/u/Aravind)\
**Replies:** 4\
**Last updated:** [April 5, 2018, 10:10pm UTC](https://discuss.elastic.co/t/curl-could-not-get-simple-get-to-work/126831 "2018-04-05T22:10:39Z")

</div>

Sorry this could be a basic question as I'm getting started. I'm performing a simple match all type query via Kibana which just works fine. Then I just did "Copy as cURL" from kibana which looks likes this - curl -XGE…

---

## [GROK multiple MATCH filters](https://discuss.elastic.co/t/grok-multiple-match-filters/27940)

<div class="topic-metadata">

**Author:** [@Sunny\_Advani](https://discuss.elastic.co/u/Sunny_Advani)\
**Replies:** 2\
**Last updated:** [August 24, 2015, 1:33pm UTC](https://discuss.elastic.co/t/grok-multiple-match-filters/27940 "2015-08-24T13:33:39Z")

</div>

Apologies if this has been asked repetitively, however I have a hard time understanding multiple MATCH filters using GROK. Here is my config: filter { grok { break\_on\_match =\> false keep\_empty\_captures =\> true …

---

## [Creating Array in Logstash](https://discuss.elastic.co/t/creating-array-in-logstash/93801)

<div class="topic-metadata">

**Author:** [@jacoblemperle](https://discuss.elastic.co/u/jacoblemperle)\
**Replies:** 3\
**Last updated:** [July 20, 2017, 10:28am UTC](https://discuss.elastic.co/t/creating-array-in-logstash/93801 "2017-07-20T10:28:49Z")

</div>

I am looking to create an array in Logstash right now with an object inside of it. Something that looks like this is what I am trying right now I am getting the error Ruby exception occurred: can't convert Array into S…

---

## [Logstash silently stops processing events and does not respond to SIGTERM](https://discuss.elastic.co/t/logstash-silently-stops-processing-events-and-does-not-respond-to-sigterm/1720)

<div class="topic-metadata">

**Author:** [@robinpblanchard](https://discuss.elastic.co/u/robinpblanchard)\
**Replies:** 5\
**Last updated:** [June 12, 2015, 3:19pm UTC](https://discuss.elastic.co/t/logstash-silently-stops-processing-events-and-does-not-respond-to-sigterm/1720 "2015-06-12T15:19:56Z")

</div>

Logstash happily plows along for an indeterminate amount of time (sometimes a couple days, sometimes a couple hours) and then nothing else is passed through to ES. At this point, the system is nearly idle (the only way I…

---

## [Search perfomance using many indices with one alias](https://discuss.elastic.co/t/search-perfomance-using-many-indices-with-one-alias/115665)

<div class="topic-metadata">

**Author:** [@Jul](https://discuss.elastic.co/u/Jul)\
**Replies:** 6\
**Last updated:** [January 18, 2018, 8:55am UTC](https://discuss.elastic.co/t/search-perfomance-using-many-indices-with-one-alias/115665 "2018-01-18T08:55:41Z")

</div>

Hey there, we run into following problem, maybe you can give us some adivce or best practice: We use many indices (80) and for search we use one alias to query all of them at the same time as search results can be in f…

---

## [Need to stop all Pending jobs in reporting](https://discuss.elastic.co/t/need-to-stop-all-pending-jobs-in-reporting/233125)

<div class="topic-metadata">

**Author:** [@kolli\_dilip](https://discuss.elastic.co/u/kolli_dilip)\
**Replies:** 4\
**Last updated:** [May 21, 2020, 6:00am UTC](https://discuss.elastic.co/t/need-to-stop-all-pending-jobs-in-reporting/233125 "2020-05-21T06:00:45Z")

</div>

Hi Experts, I have reporting enabled, but getting the below response in the reporting status Pending - waiting for job to be processed can i have any suggestion to stop all the pending jobs so that I run a new report …

---

## [Elastic Study Material](https://discuss.elastic.co/t/elastic-study-material/163307)

<div class="topic-metadata">

**Author:** [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\
**Replies:** 2\
**Last updated:** [January 8, 2019, 7:46am UTC](https://discuss.elastic.co/t/elastic-study-material/163307 "2019-01-08T07:46:05Z")

</div>

Hi I have done the elasticsearch engineer 1 and 2 training and I am planning on doing it again this year to refresh my memory. I will attempt the exams as well. My question is: Is there any study material that can give …

---

## [Replica shard does not get assigned to nodes after cluster recovery](https://discuss.elastic.co/t/replica-shard-does-not-get-assigned-to-nodes-after-cluster-recovery/74862)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 6\
**Last updated:** [February 13, 2017, 10:20pm UTC](https://discuss.elastic.co/t/replica-shard-does-not-get-assigned-to-nodes-after-cluster-recovery/74862 "2017-02-13T22:20:58Z")

</div>

Hello, I had the elasticsearch cluster down because the nodes lost connectivity to eachother. After successfully recovering all the unassigned shards and got the cluster back in green status. I started to bring up the…

---

## [Move shards from one host to another](https://discuss.elastic.co/t/move-shards-from-one-host-to-another/118945)

<div class="topic-metadata">

**Author:** [@fhalde](https://discuss.elastic.co/u/fhalde)\
**Replies:** 4\
**Last updated:** [February 8, 2018, 2:37am UTC](https://discuss.elastic.co/t/move-shards-from-one-host-to-another/118945 "2018-02-08T02:37:32Z")

</div>

Hello Elastic We have a cluster of 30 machines and each index has 1 replica. So we can tolerate 1 VM taken down. But we have to repair 2 VMs now. We have a day ahead of us. Is there a way to move all shards from the 2 V…

---

## [Kibana with Hadoop directly?](https://discuss.elastic.co/t/kibana-with-hadoop-directly/22628)

<div class="topic-metadata">

**Author:** [@KRRK2015](https://discuss.elastic.co/u/KRRK2015)\
**Replies:** 4\
**Last updated:** [March 13, 2015, 4:51pm UTC](https://discuss.elastic.co/t/kibana-with-hadoop-directly/22628 "2015-03-13T16:51:03Z")

</div>

Hello, has anyone tried to get Kibana work directly with Hadoop (without elasticsearch in the middle)? If yes, how? Any references would help. Thanks. -- You received this message because you are subscribed to t…

---

## [How to convert string to date using kibana painless script](https://discuss.elastic.co/t/how-to-convert-string-to-date-using-kibana-painless-script/164169)

<div class="topic-metadata">

**Author:** [@mouli632](https://discuss.elastic.co/u/mouli632)\
**Replies:** 2\
**Last updated:** [January 17, 2019, 6:39pm UTC](https://discuss.elastic.co/t/how-to-convert-string-to-date-using-kibana-painless-script/164169 "2019-01-17T18:39:15Z")

</div>

I have string fields in my index like "repliedTs": "2018-12-27T10:58:28.423-05:00", "receivedTs": "2018-12-27T10:58:27.168-05:00" i am trying to write kibana painless script to convert string type to date and find the…

---

## [How to fill keystore via ansible script](https://discuss.elastic.co/t/how-to-fill-keystore-via-ansible-script/212117)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [December 18, 2019, 9:08am UTC](https://discuss.elastic.co/t/how-to-fill-keystore-via-ansible-script/212117 "2019-12-18T09:08:02Z")

</div>

Hi, I am trying to add a key to kibana-keystore via (ansible) script. I have same issue when running via bash directly or via ansible script. For elasicsearch-keystore this works awesome: echo mypassword | ./elastics…

---

## [Clear index before update](https://discuss.elastic.co/t/clear-index-before-update/111837)

<div class="topic-metadata">

**Author:** [@anne.lhote](https://discuss.elastic.co/u/anne.lhote)\
**Replies:** 2\
**Last updated:** [January 12, 2018, 11:06am UTC](https://discuss.elastic.co/t/clear-index-before-update/111837 "2018-01-12T11:06:32Z")

</div>

Hello, I use Logstash to feed my ES from a MysQL database. Everything seems to work so far but the update. When a row is deleted on the MySQL database, the record is still present on the ES side. Is there any solution l…

---

## [Extract the value from CSV field and add new field](https://discuss.elastic.co/t/extract-the-value-from-csv-field-and-add-new-field/89974)

<div class="topic-metadata">

**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\
**Replies:** 6\
**Last updated:** [June 21, 2017, 10:57am UTC](https://discuss.elastic.co/t/extract-the-value-from-csv-field-and-add-new-field/89974 "2017-06-21T10:57:34Z")

</div>

Dear Team Wondering if you can help please . We are parsing the CSV using the below code , One of the field (exec) in CSV file can have either one of below values (T= some integer value |D= some integer value |N=s…

---

## [Wildcards in Phrases and Proximity searches](https://discuss.elastic.co/t/wildcards-in-phrases-and-proximity-searches/6798)

<div class="topic-metadata">

**Author:** [@Christian\_von\_Wendt\_](https://discuss.elastic.co/u/Christian_von_Wendt_)\
**Replies:** 6\
**Last updated:** [March 14, 2012, 12:18pm UTC](https://discuss.elastic.co/t/wildcards-in-phrases-and-proximity-searches/6798 "2012-03-14T12:18:39Z")

</div>

Hi, I was wondering if it is possible to specify wildcards in a phrase/ proximity search such as: "elastic\* searchengine" which would search for any two words where the first starts with "elastic" and the other i…

---

## [Filebeat with Logstash and Elasticsearch failed to create Index in ES](https://discuss.elastic.co/t/filebeat-with-logstash-and-elasticsearch-failed-to-create-index-in-es/72167)

<div class="topic-metadata">

**Author:** [@sezanawa](https://discuss.elastic.co/u/sezanawa)\
**Replies:** 4\
**Last updated:** [January 23, 2017, 10:50am UTC](https://discuss.elastic.co/t/filebeat-with-logstash-and-elasticsearch-failed-to-create-index-in-es/72167 "2017-01-23T10:50:59Z")

</div>

Hallo Everbody I have installed ELK and FIlebeat on my local machine. ELK is working fine with Fileinput and filter but Filebeat is not working properly. Filebeat configurations are working fine and it send data to Log…

---

## [Map nested fields of object from Logstash to Elasticsearch](https://discuss.elastic.co/t/map-nested-fields-of-object-from-logstash-to-elasticsearch/163869)

<div class="topic-metadata">

**Author:** [@kejsi](https://discuss.elastic.co/u/kejsi)\
**Replies:** 8\
**Last updated:** [January 11, 2019, 11:55am UTC](https://discuss.elastic.co/t/map-nested-fields-of-object-from-logstash-to-elasticsearch/163869 "2019-01-11T11:55:34Z")

</div>

I have an object which looks like this: "dummyObj":"{"id":6,"nrs":\[1,2,3,4\]}" I supply this object from Log4j2 using JsonLayout. Moreover, I have created an index in Elasticsearch like this: { "mappings": { …

---

## [Grok to parse CEF extension fields](https://discuss.elastic.co/t/grok-to-parse-cef-extension-fields/114328)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 5\
**Last updated:** [January 12, 2018, 8:04pm UTC](https://discuss.elastic.co/t/grok-to-parse-cef-extension-fields/114328 "2018-01-12T20:04:30Z")

</div>

Hello, I'm trying to create a grok pattern to parse the extension fields in CEF message from an antivirus server. My problem right now is that the same field can have different types of data, sometimes it is an intenge…

---

## [Certificate Error in File Beat connecting to Logstash](https://discuss.elastic.co/t/certificate-error-in-file-beat-connecting-to-logstash/38503)

<div class="topic-metadata">

**Author:** [@RickH](https://discuss.elastic.co/u/RickH)\
**Replies:** 3\
**Last updated:** [January 7, 2016, 7:50am UTC](https://discuss.elastic.co/t/certificate-error-in-file-beat-connecting-to-logstash/38503 "2016-01-07T07:50:17Z")

</div>

We are running a proof of concept on our network to establish whether we can configure filebeat (installed on Windows 2012) to connect to Logstash (on RHEL). unfortunately we are getting a certificate error when we attem…

---

## [Filebeat for zip files](https://discuss.elastic.co/t/filebeat-for-zip-files/254385)

<div class="topic-metadata">

**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\
**Replies:** 1\
**Last updated:** [November 5, 2020, 6:23pm UTC](https://discuss.elastic.co/t/filebeat-for-zip-files/254385 "2020-11-05T18:23:55Z")

</div>

Hi all, Is there any way to read a zipped file directly using filebeat? Thank you.

---

## [Role that would allow a user to create index in ES](https://discuss.elastic.co/t/role-that-would-allow-a-user-to-create-index-in-es/274534)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 4\
**Last updated:** [May 31, 2021, 9:05pm UTC](https://discuss.elastic.co/t/role-that-would-allow-a-user-to-create-index-in-es/274534 "2021-05-31T21:05:02Z")

</div>

Hi, I am looking for a role that would allow a user to create indices in ES. Basically I want to avoid assigning "superuser" role. Please guide on what role can I assign? My configuration for ELK7.6.2 stack looks li…

---

## [How install multiple service ES on the same server](https://discuss.elastic.co/t/how-install-multiple-service-es-on-the-same-server/36192)

<div class="topic-metadata">

**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\
**Replies:** 5\
**Last updated:** [December 2, 2015, 5:07pm UTC](https://discuss.elastic.co/t/how-install-multiple-service-es-on-the-same-server/36192 "2015-12-02T17:07:49Z")

</div>

Hi, I use ES 2.1 and CentOS 7. I want to install multiple nodes on one server. I used to create multiple elasticsearch file in /usr/lib/systemd/system, to create multiple services ES, but in 2.1 that doesn't work. …

---

## [Jdbc mysql input plugin, Communication link failure](https://discuss.elastic.co/t/jdbc-mysql-input-plugin-communication-link-failure/78047)

<div class="topic-metadata">

**Author:** [@gusDuarte](https://discuss.elastic.co/u/gusDuarte)\
**Replies:** 0\
**Last updated:** [March 9, 2017, 7:59pm UTC](https://discuss.elastic.co/t/jdbc-mysql-input-plugin-communication-link-failure/78047 "2017-03-09T19:59:34Z")

</div>

Hi, we are facing a problem with JDBC INPUT plugin connection to DB. When Logstash service start, the following error is logged: \[2017-03-09T16:44:15,061\]\[ERROR\]\[logstash.pipeline \] Error registering plugin {:…

---

## [How to complete disable TF-IDF?](https://discuss.elastic.co/t/how-to-complete-disable-tf-idf/70570)

<div class="topic-metadata">

**Author:** [@Alex\_Sudakov](https://discuss.elastic.co/u/Alex_Sudakov)\
**Replies:** 3\
**Last updated:** [January 9, 2017, 7:49pm UTC](https://discuss.elastic.co/t/how-to-complete-disable-tf-idf/70570 "2017-01-09T19:49:56Z")

</div>

Hello community, how to complete disable TF-IDF? and replace it by best match. We use ES for music identification, thanks.

---

## [Deduplication filter?](https://discuss.elastic.co/t/deduplication-filter/21452)

<div class="topic-metadata">

**Author:** [@Kshitij\_Gupta](https://discuss.elastic.co/u/Kshitij_Gupta)\
**Replies:** 3\
**Last updated:** [January 2, 2015, 12:20pm UTC](https://discuss.elastic.co/t/deduplication-filter/21452 "2015-01-02T12:20:40Z")

</div>

Hi, I am working on a system where I index multiple versions of objects by timestamp. I am including timestamp in the document id so that each version gets a different document id and is searchable by itself. This…

---

## [Convert utc format to local time](https://discuss.elastic.co/t/convert-utc-format-to-local-time/164237)

<div class="topic-metadata">

**Author:** [@wangqinghuan](https://discuss.elastic.co/u/wangqinghuan)\
**Replies:** 4\
**Last updated:** [January 15, 2019, 8:21am UTC](https://discuss.elastic.co/t/convert-utc-format-to-local-time/164237 "2019-01-15T08:21:09Z")

</div>

hi I am using logstash to output data from elasticsearch to file. A field named 'snapTime' in elasticsearch is represented by utc format '2018-09-10T15:05:43.000Z' and logstash outputs this field in utc format to file …

---

## [Hourly Time based indices reducing shard segments](https://discuss.elastic.co/t/hourly-time-based-indices-reducing-shard-segments/92909)

<div class="topic-metadata">

**Author:** [@pfremm](https://discuss.elastic.co/u/pfremm)\
**Replies:** 8\
**Last updated:** [July 28, 2017, 1:20pm UTC](https://discuss.elastic.co/t/hourly-time-based-indices-reducing-shard-segments/92909 "2017-07-28T13:20:26Z")

</div>

We are using fluentd, elastic, and kibana for logging aggregation. The amount we log has steadily grown so we've switched to hourly time based indices to try and keep our indice size under 50GB as when we did daily indi…

---

## [Visualization time lookup table or "join" possible?](https://discuss.elastic.co/t/visualization-time-lookup-table-or-join-possible/768)

<div class="topic-metadata">

**Author:** [@RVN\_BR](https://discuss.elastic.co/u/RVN_BR)\
**Replies:** 6\
**Last updated:** [February 16, 2016, 10:01pm UTC](https://discuss.elastic.co/t/visualization-time-lookup-table-or-join-possible/768 "2016-02-16T22:01:15Z")

</div>

Hi Everyone, I'm looking for a way (best practice) to implement a sort of join or lookup of different IDs in Kibana visualizations. Basically, using ELK we will send events with certain fields, such as IDs for catego…

---

## [Can't connect from fluentd: NotSslRecordException error](https://discuss.elastic.co/t/cant-connect-from-fluentd-notsslrecordexception-error/199221)

<div class="topic-metadata">

**Author:** [@Paul\_F](https://discuss.elastic.co/u/Paul_F)\
**Replies:** 7\
**Last updated:** [July 10, 2020, 2:46pm UTC](https://discuss.elastic.co/t/cant-connect-from-fluentd-notsslrecordexception-error/199221 "2020-07-10T14:46:08Z")

</div>

I have deployed Elastic stack on k8s \[running with kops on AWS\] with almost default configuration \[just different namespace\]. I have deployed a fluentd daemonset in the same namespace and I am trying to connect to Elast…

---

## [400 Bad Request - Unexpected close marker '}': expected '\]'](https://discuss.elastic.co/t/400-bad-request-unexpected-close-marker-expected/81156)

<div class="topic-metadata">

**Author:** [@amolfuke1](https://discuss.elastic.co/u/amolfuke1)\
**Replies:** 3\
**Last updated:** [April 4, 2017, 2:32pm UTC](https://discuss.elastic.co/t/400-bad-request-unexpected-close-marker-expected/81156 "2017-04-04T14:32:22Z")

</div>

Hi All , We are new to ES and trying very small search functionality through mustache template.We have created a index in local ES and inserted one sample record. We created a mustache template - {"query":{"template":{"…

---

## [Input plugin issue in maintaining JDBC connections](https://discuss.elastic.co/t/input-plugin-issue-in-maintaining-jdbc-connections/53967)

<div class="topic-metadata">

**Author:** [@KiranG](https://discuss.elastic.co/u/KiranG)\
**Replies:** 6\
**Last updated:** [June 30, 2016, 9:45am UTC](https://discuss.elastic.co/t/input-plugin-issue-in-maintaining-jdbc-connections/53967 "2016-06-30T09:45:00Z")

</div>

Hi, I am using JDBC input plugin for a connection to oracle database. There are several sql files one for each jdbc input config file. Now, the issue is, logstash is successfully establishing a connection to oracle …

---

## [Finding execution time from kibana search queries](https://discuss.elastic.co/t/finding-execution-time-from-kibana-search-queries/70186)

<div class="topic-metadata">

**Author:** [@gauravbhutani30](https://discuss.elastic.co/u/gauravbhutani30)\
**Replies:** 4\
**Last updated:** [January 3, 2017, 9:04am UTC](https://discuss.elastic.co/t/finding-execution-time-from-kibana-search-queries/70186 "2017-01-03T09:04:40Z")

</div>

Hi, I have the following pattern of tomcat logs: INFO \>2016-12-20 04:03:58,123 com.pkg.test.controller.JavaClassName\[abc-0123-123\]: Some text. Time taken:17 INFO \>2016-12-20 04:04:19,123 com.pkg.test.controller.JavaCla…

---

## [APM-Agent not connecting to APM-Server over HTTPS](https://discuss.elastic.co/t/apm-agent-not-connecting-to-apm-server-over-https/155756)

<div class="topic-metadata">

**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\
**Replies:** 6\
**Last updated:** [November 9, 2018, 1:55pm UTC](https://discuss.elastic.co/t/apm-agent-not-connecting-to-apm-server-over-https/155756 "2018-11-09T13:55:55Z")

</div>

I have my Elasticsearch server and my APM-Server on in the same server. My APM-Agent is installed on a separate server, where my application is. The problem is that where the agent is installed the application enforces…

---

## [Kibana's Discover JSON and search not showing all data](https://discuss.elastic.co/t/kibanas-discover-json-and-search-not-showing-all-data/157586)

<div class="topic-metadata">

**Author:** [@SDL](https://discuss.elastic.co/u/SDL)\
**Replies:** 5\
**Last updated:** [November 22, 2018, 9:37am UTC](https://discuss.elastic.co/t/kibanas-discover-json-and-search-not-showing-all-data/157586 "2018-11-22T09:37:52Z")

</div>

Hello, I have Filebeats, Logstash, Elasticsearch and Kibana running on a VM - I have created a template with a mapping and built visualizations and dashboards with this data. The data is there and accessible. However, …

---

## [Beats for Solaris Platform](https://discuss.elastic.co/t/beats-for-solaris-platform/44722)

<div class="topic-metadata">

**Author:** [@techrawther](https://discuss.elastic.co/u/techrawther)\
**Replies:** 7\
**Last updated:** [March 22, 2016, 2:39pm UTC](https://discuss.elastic.co/t/beats-for-solaris-platform/44722 "2016-03-22T14:39:08Z")

</div>

I am trying to install beats for Solaris and some ARM platforms so I am compiling from source code. As first step I tried to compile from source code for Solaris platform . Following are the steps I followed. Instal…

---

## [How do I do conditional processing based on input](https://discuss.elastic.co/t/how-do-i-do-conditional-processing-based-on-input/107621)

<div class="topic-metadata">

**Author:** [@sdussin](https://discuss.elastic.co/u/sdussin)\
**Replies:** 2\
**Last updated:** [November 14, 2017, 8:44pm UTC](https://discuss.elastic.co/t/how-do-i-do-conditional-processing-based-on-input/107621 "2017-11-14T20:44:17Z")

</div>

I have a case where my pipeline contains inputs from two different JDBC sources. In my filter, I want to run some things but not others. My input config looks like this: input { jdbc { jdbc\_connection\_strin…

---

## [Boosting documents where more than one field matches terms](https://discuss.elastic.co/t/boosting-documents-where-more-than-one-field-matches-terms/294059)

<div class="topic-metadata">

**Author:** [@tensor](https://discuss.elastic.co/u/tensor)\
**Replies:** 0\
**Last updated:** [January 11, 2022, 4:13pm UTC](https://discuss.elastic.co/t/boosting-documents-where-more-than-one-field-matches-terms/294059 "2022-01-11T16:13:34Z")

</div>

Hi We have a question regarding how to do some ranking on our queries, which may also fall back on to how to best index our data. Our scenario is that we have documents something along the lines of a Model, which then …

---

## [LoadError: no such file to load -- bundler/dep\_proxy](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-bundler-dep-proxy/62666)

<div class="topic-metadata">

**Author:** [@lyxhaven](https://discuss.elastic.co/u/lyxhaven)\
**Replies:** 0\
**Last updated:** [October 10, 2016, 9:15pm UTC](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-bundler-dep-proxy/62666 "2016-10-10T21:15:40Z")

</div>

I have installed logstash-2.4.0 and logstash-input-jdbc plugin When I was trying to run logstash by: bin/logstash -f jdbc\_oracle.conf or bin/logstash --configtest -f jdbc\_oracle.conf I got this error: LoadError: no s…

---

## [Run metricbeat in docker](https://discuss.elastic.co/t/run-metricbeat-in-docker/148522)

<div class="topic-metadata">

**Author:** [@bertolis](https://discuss.elastic.co/u/bertolis)\
**Replies:** 5\
**Last updated:** [September 21, 2018, 4:08pm UTC](https://discuss.elastic.co/t/run-metricbeat-in-docker/148522 "2018-09-21T16:08:38Z")

</div>

Hi, i am running elk with docker-compose, i get status green in elasticsearch and i can also login to kibana. When i run "sudo ./metricbeat -e -c metricbeat.yml" from the tar.gz i downloaded, i get an index in elastics…

---

## [Plugin-descriptor.properties for Elastic Search Plugin JDBC-2.0.0.0 2.2.0](https://discuss.elastic.co/t/plugin-descriptor-properties-for-elastic-search-plugin-jdbc-2-0-0-0-2-2-0/45482)

<div class="topic-metadata">

**Author:** [@sreeramg](https://discuss.elastic.co/u/sreeramg)\
**Replies:** 5\
**Last updated:** [March 27, 2016, 9:07pm UTC](https://discuss.elastic.co/t/plugin-descriptor-properties-for-elastic-search-plugin-jdbc-2-0-0-0-2-2-0/45482 "2016-03-27T21:07:56Z")

</div>

Can anybody got lucky with JDBC-2.0.0.0 plug in descriptor file ? I am using ES 2.2.0 and JDBC Importer 2.0.0.0 in a windows environment? Anyone has similar setup and successful in running this with connection to SQL …

---

## [Kibana stuck in loading screen](https://discuss.elastic.co/t/kibana-stuck-in-loading-screen/249499)

<div class="topic-metadata">

**Author:** [@radragar](https://discuss.elastic.co/u/radragar)\
**Replies:** 4\
**Last updated:** [September 24, 2020, 7:33am UTC](https://discuss.elastic.co/t/kibana-stuck-in-loading-screen/249499 "2020-09-24T07:33:45Z")

</div>

Hello, I'm just starting using ELK. I have done installed elasticsearch and no error but when I install Kibana I get stuck in loading screen here is the kibana log: ./kibana log \[10:15:10.023\] \[warning\]\[plugins-…

---

## [ERROR Bootstrap {node validation exceptio}](https://discuss.elastic.co/t/error-bootstrap-node-validation-exceptio/179426)

<div class="topic-metadata">

**Author:** [@jcesar\_key](https://discuss.elastic.co/u/jcesar_key)\
**Replies:** 4\
**Last updated:** [May 14, 2019, 6:50pm UTC](https://discuss.elastic.co/t/error-bootstrap-node-validation-exceptio/179426 "2019-05-14T18:50:45Z")

</div>

I'm having a problem installing my Elastic for the first time, I've already run it before in the lab, but when I try again on other machines I get this message below: \[ERROR\] \[o.e.b.Bootstrap\] \[\[$ jarvis\]\] node validati…

---

## [Excessive RAM usage, gets OOM killed](https://discuss.elastic.co/t/excessive-ram-usage-gets-oom-killed/157539)

<div class="topic-metadata">

**Author:** [@cy\_lir](https://discuss.elastic.co/u/cy_lir)\
**Replies:** 6\
**Last updated:** [December 4, 2018, 1:40pm UTC](https://discuss.elastic.co/t/excessive-ram-usage-gets-oom-killed/157539 "2018-12-04T13:40:20Z")

</div>

Hi ! I'm running 4 basic pipelines on logstash with persisted queue. Everything ran smoothly, but the output went down for a certain amount of time, and the queue filled up, up to the 1GB limit. When the output went bac…

---

## [Sample setting with elasticsearch input plugin doesn't work](https://discuss.elastic.co/t/sample-setting-with-elasticsearch-input-plugin-doesnt-work/84764)

<div class="topic-metadata">

**Author:** [@shin0higuchi](https://discuss.elastic.co/u/shin0higuchi)\
**Replies:** 1\
**Last updated:** [May 23, 2017, 3:58pm UTC](https://discuss.elastic.co/t/sample-setting-with-elasticsearch-input-plugin-doesnt-work/84764 "2017-05-23T15:58:43Z")

</div>

A sample setting on https://www.elastic.co/guide/en/logstash/current/plugins-inputs-elasticsearch.html may not work. Sample input { elasticsearch { hosts =\> "es.production.mysite.org" index =\> "mydata-2018.0…

---

## [Logstash s3 input plugin with dynamic prefix](https://discuss.elastic.co/t/logstash-s3-input-plugin-with-dynamic-prefix/126631)

<div class="topic-metadata">

**Author:** [@vikas-prabhakar](https://discuss.elastic.co/u/vikas-prabhakar)\
**Replies:** 3\
**Last updated:** [April 4, 2018, 10:47pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-with-dynamic-prefix/126631 "2018-04-04T22:47:30Z")

</div>

Hello, we have a special requirement where we have to read data from s3 bucket in which folders are dynamic(e.g s3bucket/2018/04/04)

---

## [Complete DNS activity coverage in endpoint](https://discuss.elastic.co/t/complete-dns-activity-coverage-in-endpoint/288259)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 1\
**Last updated:** [November 23, 2021, 5:00pm UTC](https://discuss.elastic.co/t/complete-dns-activity-coverage-in-endpoint/288259 "2021-11-23T17:00:16Z")

</div>

Hey, I've noticed that the rule DNS Activity to the Internet does not work with Elastic Endpoint data, even when I explicitly contact an external DNS server from my machines that are covered by Elastic Endpoint. I dug …

---

## [Delete records within a timerange](https://discuss.elastic.co/t/delete-records-within-a-timerange/32672)

<div class="topic-metadata">

**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\
**Replies:** 5\
**Last updated:** [October 27, 2015, 4:52pm UTC](https://discuss.elastic.co/t/delete-records-within-a-timerange/32672 "2015-10-27T16:52:47Z")

</div>

Hi, I want to delete all the records within a timestamp range from a single index. I am running Elasticsearch version 1.7.0 but not able to follow the examples. If anyone can help readily with this, I would be very gra…

---

## [How convert timestamp in date](https://discuss.elastic.co/t/how-convert-timestamp-in-date/133383)

<div class="topic-metadata">

**Author:** [@itsgood2bebad](https://discuss.elastic.co/u/itsgood2bebad)\
**Replies:** 4\
**Last updated:** [May 27, 2018, 3:56pm UTC](https://discuss.elastic.co/t/how-convert-timestamp-in-date/133383 "2018-05-27T15:56:43Z")

</div>

Hello,Im new user for logstash and i need help . i want use 'timestamp' column in my csv but its not work . If you can help me . Thanks input { file{ path =\>"/Users/itsgood/Desktop/money/coins\_btc.csv" start\_posit…

---

## [Best way to delete large number of documents](https://discuss.elastic.co/t/best-way-to-delete-large-number-of-documents/246402)

<div class="topic-metadata">

**Author:** [@landport](https://discuss.elastic.co/u/landport)\
**Replies:** 3\
**Last updated:** [August 31, 2020, 11:40am UTC](https://discuss.elastic.co/t/best-way-to-delete-large-number-of-documents/246402 "2020-08-31T11:40:40Z")

</div>

About 10 months ago we investigated adding Elasticsearch logging to a range of consumer electronics products to track which features were being used. I used a simplistic approach with a single index and wrote to it via t…

[Previous page](https://discuss.elastic.co/top.md?page=451&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=453&per_page=50&period=all)
