# Top **URL:** https://discuss.elastic.co/top.md?page=456&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 457 --- ## [Java High Level Rest Client is not releasing connection although timeout is set](https://discuss.elastic.co/t/java-high-level-rest-client-is-not-releasing-connection-although-timeout-is-set/213478)
**Author:** [@KULDEEP\_SINGH](https://discuss.elastic.co/u/KULDEEP_SINGH)\ **Replies:** 3\ **Last updated:** [January 2, 2020, 10:35am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-is-not-releasing-connection-although-timeout-is-set/213478 "2020-01-02T10:35:51Z")
Hi, We are dealing in querying large amount of data from our elastic search server. However, in random scenarios the connection created by the High Level Rest client is not getting released and it's blocking our code fl… --- ## [Fixing snakeyaml vulnerability (CVE-2022-1471) on older ES versions](https://discuss.elastic.co/t/fixing-snakeyaml-vulnerability-cve-2022-1471-on-older-es-versions/327571)
**Author:** [@Aviv\_Nevo](https://discuss.elastic.co/u/Aviv_Nevo)\ **Replies:** 5\ **Last updated:** [March 16, 2023, 3:02pm UTC](https://discuss.elastic.co/t/fixing-snakeyaml-vulnerability-cve-2022-1471-on-older-es-versions/327571 "2023-03-16T15:02:45Z")
I'm using ES version 5.6.X, and I would like to change snakeyaml package version to the one with the fix to CVE-2022-1471 - Meaning, I need to change the package version from 1.33 (I guess..) to 2.0 . How can I do that? … --- ## [Field \[\_id\] is defined twice in \[type\]](https://discuss.elastic.co/t/field--id-is-defined-twice-in-type/73565)
**Author:** [@herix](https://discuss.elastic.co/u/herix)\ **Replies:** 1\ **Last updated:** [February 2, 2017, 4:38am UTC](https://discuss.elastic.co/t/field--id-is-defined-twice-in-type/73565 "2017-02-02T04:38:10Z")
Hello, I'm trying to give my \_id a default data type so I'm defining a custom mapping for it. PUT /test\_index { "mappings": { "product": { "properties": { "\_id": { … --- ## [Shards failed on a specific index after reducing number of primary shards](https://discuss.elastic.co/t/shards-failed-on-a-specific-index-after-reducing-number-of-primary-shards/295207)
**Author:** [@Michou\_Robert](https://discuss.elastic.co/u/Michou_Robert)\ **Replies:** 6\ **Last updated:** [January 27, 2022, 9:23am UTC](https://discuss.elastic.co/t/shards-failed-on-a-specific-index-after-reducing-number-of-primary-shards/295207 "2022-01-27T09:23:59Z")
I have a 4 nodes ES cluster running on Elasticsearch 6.8.4. We recently had some issues with ELK restarting and having too many shards on them resulting in our nodes going crazy everytime it restarted. (Which happen pret… --- ## [Difference between \`index.refresh\_interval\` vs \`es.batch.write.refresh\`](https://discuss.elastic.co/t/difference-between-index-refresh-interval-vs-es-batch-write-refresh/197950)
**Author:** [@danielyahn](https://discuss.elastic.co/u/danielyahn)\ **Replies:** 4\ **Last updated:** [September 12, 2019, 9:30pm UTC](https://discuss.elastic.co/t/difference-between-index-refresh-interval-vs-es-batch-write-refresh/197950 "2019-09-12T21:30:58Z")
I see two similar settings one in ES-Hadoop and the other in index configuration. Is it recommended to set index.refresh\_interval to -1, when es.batch.write.refresh=true? When running Spark job, how often does refresh … --- ## [Logstash 7.0.1 Centos 7 persistent queue vm held lock error](https://discuss.elastic.co/t/logstash-7-0-1-centos-7-persistent-queue-vm-held-lock-error/181083)
**Author:** [@JeremyC](https://discuss.elastic.co/u/JeremyC)\ **Replies:** 1\ **Last updated:** [May 15, 2019, 10:38pm UTC](https://discuss.elastic.co/t/logstash-7-0-1-centos-7-persistent-queue-vm-held-lock-error/181083 "2019-05-15T22:38:04Z")
Hello, I am trying to add Persistent queues to logstash, however i am getting the below error. And i not sure how it resolve it. I am not sure if issue with config or logstash itself. What i have done: I have stopped … --- ## [Docker unix socket i/o timeout error despite correctly working](https://discuss.elastic.co/t/docker-unix-socket-i-o-timeout-error-despite-correctly-working/103333)
**Author:** [@kwaio](https://discuss.elastic.co/u/kwaio)\ **Replies:** 7\ **Last updated:** [November 2, 2017, 8:43am UTC](https://discuss.elastic.co/t/docker-unix-socket-i-o-timeout-error-despite-correctly-working/103333 "2017-11-02T08:43:31Z")
OS: CentOS 7, kernel 3.10 Docker version : 1.12.6 Elastic version : 5.6.2 Metricbeat version : 5.6.2 Hi, I'm trying to run metricbeat as a docker container to monitor other docker containers. As I don't have the sa… --- ## [Split command in ruby by new line](https://discuss.elastic.co/t/split-command-in-ruby-by-new-line/118999)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 4\ **Last updated:** [February 8, 2018, 1:11pm UTC](https://discuss.elastic.co/t/split-command-in-ruby-by-new-line/118999 "2018-02-08T13:11:18Z")
Hi, I am trying to split the message where ever a new line exist by ruby filter. The command in the ruby code I use: message\_array = event.get('message').split("\\n") But the logstash doesn't start because of it. It … --- ## [Deleting Indexs that are X day old](https://discuss.elastic.co/t/deleting-indexs-that-are-x-day-old/26811)
**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\ **Replies:** 4\ **Last updated:** [August 4, 2015, 10:28pm UTC](https://discuss.elastic.co/t/deleting-indexs-that-are-x-day-old/26811 "2015-08-04T22:28:34Z")
As a requirement I am trying to delete indexes that are, lets say 2 or 3 days old. I think it would just be simple to write a cron job to simply do this type of task. But is there anything ES provides that can delete ind… --- ## [125: SSL client failed to connect with: dial tcp 192.168.37.147:5044: getsockopt: connection refused](https://discuss.elastic.co/t/125-ssl-client-failed-to-connect-with-dial-tcp-192-168-37-147-getsockopt-connection-refused/145161)
**Author:** [@rituraj](https://discuss.elastic.co/u/rituraj)\ **Replies:** 8\ **Last updated:** [August 21, 2018, 6:53am UTC](https://discuss.elastic.co/t/125-ssl-client-failed-to-connect-with-dial-tcp-192-168-37-147-getsockopt-connection-refused/145161 "2018-08-21T06:53:20Z")
Hi Team, I am getting below errro while fetching logs by using filebeat . Details are mentioned below \[root@nagios-core ~\]# systemctl status filebeat ● filebeat.service - filebeat Loaded: loaded (/usr/lib/systemd/sy… --- ## [Cannot install local plugin without internet connection](https://discuss.elastic.co/t/cannot-install-local-plugin-without-internet-connection/130673)
**Author:** [@smbullet](https://discuss.elastic.co/u/smbullet)\ **Replies:** 7\ **Last updated:** [May 16, 2018, 3:12pm UTC](https://discuss.elastic.co/t/cannot-install-local-plugin-without-internet-connection/130673 "2018-05-16T15:12:27Z")
I'm trying to install a locally built plugin but for some reason it's trying to connect to artifacts.elastic.co: $ sudo bin/logstash-plugin install /path/to/my/plugin-1.0.0-java.gem ERROR: Something went wrong when inst… --- ## [Timestamp sort ends up reversed](https://discuss.elastic.co/t/timestamp-sort-ends-up-reversed/69825)
**Author:** [@sancroth](https://discuss.elastic.co/u/sancroth)\ **Replies:** 4\ **Last updated:** [December 22, 2016, 5:41pm UTC](https://discuss.elastic.co/t/timestamp-sort-ends-up-reversed/69825 "2016-12-22T17:41:39Z")
As the title says. Making Data tables with aggregation based on Date histogram-\>Timestamp ends up in reversed order. Why is this happening?Anyone met this before? edit : I think that because it is not used as an Ax… --- ## [Kibana Dashboard Filter on field](https://discuss.elastic.co/t/kibana-dashboard-filter-on-field/170750)
**Author:** [@Arnav\_Sengupta](https://discuss.elastic.co/u/Arnav_Sengupta)\ **Replies:** 2\ **Last updated:** [March 5, 2019, 5:53pm UTC](https://discuss.elastic.co/t/kibana-dashboard-filter-on-field/170750 "2019-03-05T17:53:58Z")
Hi, I have created a set of visualizations on one index pattern. I have added all of them into one dashboard. There are more than 10 visualizations. I want to be able to filter the dashboard based on a field in the inde… --- ## [Painless: check length field in each object of array](https://discuss.elastic.co/t/painless-check-length-field-in-each-object-of-array/161699)
**Author:** [@ErikvdVen](https://discuss.elastic.co/u/ErikvdVen)\ **Replies:** 1\ **Last updated:** [December 20, 2018, 1:09pm UTC](https://discuss.elastic.co/t/painless-check-length-field-in-each-object-of-array/161699 "2018-12-20T13:09:39Z")
I want to filter my search results by using a script filter, to make sure all documents with a specific phonenumber field length are not showed up in the results: "query": { "bool": { "filter": { … --- ## [Filebeat will not start CentOS 7](https://discuss.elastic.co/t/filebeat-will-not-start-centos-7/74460)
**Author:** [@Ben\_Hoffman](https://discuss.elastic.co/u/Ben_Hoffman)\ **Replies:** 2\ **Last updated:** [February 9, 2017, 5:20am UTC](https://discuss.elastic.co/t/filebeat-will-not-start-centos-7/74460 "2017-02-09T05:20:50Z")
So I am having a pretty big problem... Filebeat will not start as a service at all. It passes the config test so I know that my filebeat.yml is set up correctly. Here is weird part: I am running this in a VM, and if I r… --- ## [Filebeat to Logstash I/O Timeouts through AWS ELB](https://discuss.elastic.co/t/filebeat-to-logstash-i-o-timeouts-through-aws-elb/100374)
**Author:** [@LollerAgent](https://discuss.elastic.co/u/LollerAgent)\ **Replies:** 5\ **Last updated:** [October 4, 2017, 10:45am UTC](https://discuss.elastic.co/t/filebeat-to-logstash-i-o-timeouts-through-aws-elb/100374 "2017-10-04T10:45:46Z")
Hi all, I am running Filebeat (6.0.0-beta2) on my Docker hosts to collect Docker logs (via the json-files driver) and sending them to a group of Logstash 5.5 instances for aggregation. I currently have several Logstash… --- ## [How to get distinct terms from multiple fields](https://discuss.elastic.co/t/how-to-get-distinct-terms-from-multiple-fields/166955)
**Author:** [@sesha](https://discuss.elastic.co/u/sesha)\ **Replies:** 4\ **Last updated:** [February 4, 2019, 7:39pm UTC](https://discuss.elastic.co/t/how-to-get-distinct-terms-from-multiple-fields/166955 "2019-02-04T19:39:05Z")
I need to get distinct cities from multiple fields using aggregations. { "originCity": "Moscow" "destCity": "Stockholm" } Thanks --- ## [Scoring based on the number of matches in the field](https://discuss.elastic.co/t/scoring-based-on-the-number-of-matches-in-the-field/23219)
**Author:** [@Andre\_Dantas\_Rocha](https://discuss.elastic.co/u/Andre_Dantas_Rocha)\ **Replies:** 7\ **Last updated:** [April 16, 2015, 7:39pm UTC](https://discuss.elastic.co/t/scoring-based-on-the-number-of-matches-in-the-field/23219 "2015-04-16T19:39:57Z")
Hi there, I have the following query: "query": { "multi\_match": { "operator": "and", "type": "cross\_fields", "query": "john smith", "fields": \["name", "address"\] } } That will match th… --- ## [Effect of increasing index.mapping.nested\_objects.limit](https://discuss.elastic.co/t/effect-of-increasing-index-mapping-nested-objects-limit/299608)
**Author:** [@csdev](https://discuss.elastic.co/u/csdev)\ **Replies:** 3\ **Last updated:** [March 15, 2022, 5:37am UTC](https://discuss.elastic.co/t/effect-of-increasing-index-mapping-nested-objects-limit/299608 "2022-03-15T05:37:01Z")
Hi Everyone, As per Elasticsearch documentation available at link Mapping limit settings | Elasticsearch Guide \[8.1\] | Elastic, the limit of 10k on index.mapping.nested\_objects.limit is kept to prevent out of memory err… --- ## [Short Url Copy Link Under Paramalink not working](https://discuss.elastic.co/t/short-url-copy-link-under-paramalink-not-working/230740)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 8\ **Last updated:** [May 7, 2020, 9:09pm UTC](https://discuss.elastic.co/t/short-url-copy-link-under-paramalink-not-working/230740 "2020-05-07T21:09:34Z")
Hi Team, After observing the calls of localhost kibana setup on pasting Copy link short url from paramalinks in another tab , i found out a redirection is happening with status code 302. Even the response is containin… --- ## [Uncaught Error: \[$injector:modulerr\] Failed to instantiate module kibana due to: Error: \[$injector:unpr\] Unknown provider: $tooltipProvider](https://discuss.elastic.co/t/uncaught-error-injector-modulerr-failed-to-instantiate-module-kibana-due-to-error-injector-unpr-unknown-provider-tooltipprovider/83556)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 6\ **Last updated:** [April 25, 2017, 3:50pm UTC](https://discuss.elastic.co/t/uncaught-error-injector-modulerr-failed-to-instantiate-module-kibana-due-to-error-injector-unpr-unknown-provider-tooltipprovider/83556 "2017-04-25T15:50:08Z")
Kibana Version: 5.2.0 Question: Uncaught Error: \[$injector:modulerr\] Failed to instantiate module kibana due to: Error: \[$injector:unpr\] Unknown provider: $tooltipProvider --- ## [Startup error with springboot and elasticsearch 5.4.1 ClassNotFoundException: org.elasticsearch.action.count.CountRequestBuilder](https://discuss.elastic.co/t/startup-error-with-springboot-and-elasticsearch-5-4-1-classnotfoundexception-org-elasticsearch-action-count-countrequestbuilder/90482)
**Author:** [@soarhu](https://discuss.elastic.co/u/soarhu)\ **Replies:** 4\ **Last updated:** [June 23, 2017, 9:16am UTC](https://discuss.elastic.co/t/startup-error-with-springboot-and-elasticsearch-5-4-1-classnotfoundexception-org-elasticsearch-action-count-countrequestbuilder/90482 "2017-06-23T09:16:22Z")
i'm new to es,it errors when i start up my app with springboot .here are my settings: @Bean public Client client() throws Exception { Settings esSettings = Settings.builder() .put("cluster.name", EsClusterName) .p… --- ## [Connection marked as failed because the onConnect callback failed](https://discuss.elastic.co/t/connection-marked-as-failed-because-the-onconnect-callback-failed/71224)
**Author:** [@Sebastian\_Busek](https://discuss.elastic.co/u/Sebastian_Busek)\ **Replies:** 2\ **Last updated:** [January 12, 2017, 8:03am UTC](https://discuss.elastic.co/t/connection-marked-as-failed-because-the-onconnect-callback-failed/71224 "2017-01-12T08:03:34Z")
Hello, I'm trying use Filebeat to send json log to elasticsearch, but without success. By Structured logging with Filebeat blog post, I'd saved sample json and used following configuration in filebeat.yml filebeat.pros… --- ## [Basic Auth without SSL](https://discuss.elastic.co/t/basic-auth-without-ssl/251323)
**Author:** [@aaaaahaaaaa](https://discuss.elastic.co/u/aaaaahaaaaa)\ **Replies:** 3\ **Last updated:** [October 8, 2020, 4:25am UTC](https://discuss.elastic.co/t/basic-auth-without-ssl/251323 "2020-10-08T04:25:23Z")
Hi. Is it possible to enable Basic Auth on ES without SSL? I couldn't find that info. We're configuring SSL at the edge of our cluster and enabling SSL beyond that between services is not a requirement for us. --- ## [Systemctl status logstash](https://discuss.elastic.co/t/systemctl-status-logstash/121552)
**Author:** [@alfastep](https://discuss.elastic.co/u/alfastep)\ **Replies:** 1\ **Last updated:** [February 27, 2018, 3:23am UTC](https://discuss.elastic.co/t/systemctl-status-logstash/121552 "2018-02-27T03:23:49Z")
When I run: systemctl start logstash and then I run: systemctl status logstash I get the following message: logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.service; disabled; vendor preset:… --- ## [TCP backlog overload on 9200](https://discuss.elastic.co/t/tcp-backlog-overload-on-9200/63749)
**Author:** [@vizl](https://discuss.elastic.co/u/vizl)\ **Replies:** 8\ **Last updated:** [October 31, 2016, 8:13pm UTC](https://discuss.elastic.co/t/tcp-backlog-overload-on-9200/63749 "2016-10-31T20:13:22Z")
Hello I expect stange issues with my ElasticSearch cluster with 3 nodes. I have 24G indicies, and ES\_HEAP\_SIZE=32G So when resident memory (RSS) of Java process of ElasticSearch increased to 32G - my TCP backlog o… --- ## [Rebalancing of shards](https://discuss.elastic.co/t/rebalancing-of-shards/13306)
**Author:** [@Felipe\_Hummel](https://discuss.elastic.co/u/Felipe_Hummel)\ **Replies:** 6\ **Last updated:** [August 23, 2013, 5:53pm UTC](https://discuss.elastic.co/t/rebalancing-of-shards/13306 "2013-08-23T17:53:57Z")
Is there a way to force ES to balance shards considering the indices individually instead of all the shards in the cluster? I have an index per month scheme (that goes all the way to ~2009). Some months are ver… --- ## [Terms Aggregation on Array of String](https://discuss.elastic.co/t/terms-aggregation-on-array-of-string/195775)
**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\ **Replies:** 1\ **Last updated:** [August 20, 2019, 7:24am UTC](https://discuss.elastic.co/t/terms-aggregation-on-array-of-string/195775 "2019-08-20T07:24:53Z")
POST /test/log { "msg": \["text","text"\] } I have indexed the above document and tried term aggregation GET /test/\_search { "aggs": { "NAME": { "terms": { "field": … --- ## [Indexing arrays](https://discuss.elastic.co/t/indexing-arrays/3584)
**Author:** [@IvanBrusic](https://discuss.elastic.co/u/IvanBrusic)\ **Replies:** 4\ **Last updated:** [November 18, 2010, 12:26am UTC](https://discuss.elastic.co/t/indexing-arrays/3584 "2010-11-18T00:26:43Z")
It seems like I am getting stuck on the simple tasks. How can I index an array via the Java API? Some simple Java code: val builder = jsonBuilder.startObject ... ArrayList\[String\] list = new java.util.ArrayList… --- ## [Parsing logs from audit.log from /var/log/audit/audit.log](https://discuss.elastic.co/t/parsing-logs-from-audit-log-from-var-log-audit-audit-log/225577)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 5\ **Last updated:** [March 30, 2020, 11:05am UTC](https://discuss.elastic.co/t/parsing-logs-from-audit-log-from-var-log-audit-audit-log/225577 "2020-03-30T11:05:52Z")
Logfile contents type=USER\_END msg=audit(1585509001.049:14007): pid=15642 uid=0 auid=0 ses=1100 msg='op=PAM:session\_close grantors=pam\_loginuid,pam\_keyinit,pam\_limits,pam\_systemd acct="root" exe="/usr/sbin/crond" hostnam… --- ## [Connect Kibana to Nginx load balancer to Elasticsearch](https://discuss.elastic.co/t/connect-kibana-to-nginx-load-balancer-to-elasticsearch/128028)
**Author:** [@whiranpat](https://discuss.elastic.co/u/whiranpat)\ **Replies:** 5\ **Last updated:** [April 20, 2018, 4:21pm UTC](https://discuss.elastic.co/t/connect-kibana-to-nginx-load-balancer-to-elasticsearch/128028 "2018-04-20T16:21:55Z")
I have set up a nginx docker container to act as a load balancer for the elasticsearch cluster. Each elasticsearch node is within their own container on separate vms. When I curl to the nginx container I can see that the… --- ## [Kibana User Guide Download in PDF](https://discuss.elastic.co/t/kibana-user-guide-download-in-pdf/143674)
**Author:** [@waqark3389](https://discuss.elastic.co/u/waqark3389)\ **Replies:** 1\ **Last updated:** [August 9, 2018, 7:39pm UTC](https://discuss.elastic.co/t/kibana-user-guide-download-in-pdf/143674 "2018-08-09T19:39:52Z")
Is there a way I can download the Kibana user guide in PDF (or any similar output). https://www.elastic.co/guide/en/kibana/current/index.html - I basically need all of this so I can use this offline in a sense for train… --- ## [No default index pattern. You must select or create one to continue](https://discuss.elastic.co/t/no-default-index-pattern-you-must-select-or-create-one-to-continue/94896)
**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\ **Replies:** 3\ **Last updated:** [July 28, 2017, 4:32pm UTC](https://discuss.elastic.co/t/no-default-index-pattern-you-must-select-or-create-one-to-continue/94896 "2017-07-28T16:32:47Z")
Hi, I have installed ELK stack on a single server and also filebeat on the same box. Configured filebeat.yml to send the sample log files . below is the fields: Paths that should be crawled and fetched. Glob based path… --- ## [Delete documents from index based on timestamp](https://discuss.elastic.co/t/delete-documents-from-index-based-on-timestamp/71209)
**Author:** [@sari.reach](https://discuss.elastic.co/u/sari.reach)\ **Replies:** 6\ **Last updated:** [January 11, 2017, 5:41pm UTC](https://discuss.elastic.co/t/delete-documents-from-index-based-on-timestamp/71209 "2017-01-11T17:41:33Z")
I have a huge index and I want to delete/archive documents from a huge index based on timestamp. --- ## [Unable to fetch data from rollups collector](https://discuss.elastic.co/t/unable-to-fetch-data-from-rollups-collector/165760)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 4\ **Last updated:** [January 25, 2019, 4:36pm UTC](https://discuss.elastic.co/t/unable-to-fetch-data-from-rollups-collector/165760 "2019-01-25T16:36:36Z")
HI All, My kibana logs are flooded with the following error messages: {"type":"error","@timestamp":"2019-01-25T11:22:34Z","tags":\["warning","stats-collection"\],"pid":31913,"level":"error","error":{"message":"Request Ti… --- ## [Using https to login to Kibana](https://discuss.elastic.co/t/using-https-to-login-to-kibana/227328)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 6\ **Last updated:** [April 9, 2020, 3:38pm UTC](https://discuss.elastic.co/t/using-https-to-login-to-kibana/227328 "2020-04-09T15:38:31Z")
Hi All, I'm trying to use TLS (https) to secure login to kibana in my testing environment. My environment worked correctly before setting security, I used to login to Kibana http://192.168.2.213:5610 and used to work. … --- ## [Indexes failing to auto create from filebeat](https://discuss.elastic.co/t/indexes-failing-to-auto-create-from-filebeat/74785)
**Author:** [@funtimes\_ninja](https://discuss.elastic.co/u/funtimes_ninja)\ **Replies:** 7\ **Last updated:** [February 13, 2017, 3:25pm UTC](https://discuss.elastic.co/t/indexes-failing-to-auto-create-from-filebeat/74785 "2017-02-13T15:25:57Z")
I've have an issue with an indexes not being created anymore on more than one occasion. Previously I thought maybe it was because I upgrade from 4.x to 5.x, and installed x-pack(monitoring). Last night/this morning I sto… --- ## [How to properly parse multi line json?](https://discuss.elastic.co/t/how-to-properly-parse-multi-line-json/182464)
**Author:** [@ck1](https://discuss.elastic.co/u/ck1)\ **Replies:** 5\ **Last updated:** [May 23, 2019, 5:45pm UTC](https://discuss.elastic.co/t/how-to-properly-parse-multi-line-json/182464 "2019-05-23T17:45:21Z")
Hello all, I am having trouble parsing the following json input in tpc { "color": { "pixel": "152", "shade": "grey" }, "color": { "pixel": "157", "shade": "dark" } } Result I want : 2 documents into Elas… --- ## [Failed to start elasticsearch 7.16.2 after upgrade from 6.8.8](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-16-2-after-upgrade-from-6-8-8/301192)
**Author:** [@msoufiyan](https://discuss.elastic.co/u/msoufiyan)\ **Replies:** 3\ **Last updated:** [March 31, 2022, 2:17pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-16-2-after-upgrade-from-6-8-8/301192 "2022-03-31T14:17:44Z")
hi, i'm new at ELK, i installed the Elasticsearch version 7.16.2 on centos 8 but i get this error so i disabled machine learning functionality with(xpack.ml.enabled: false) org.elasticsearch.ElasticsearchException: Fai… --- ## [Error in indexing document in elasticsearch](https://discuss.elastic.co/t/error-in-indexing-document-in-elasticsearch/10144)
**Author:** [@rahulg](https://discuss.elastic.co/u/rahulg)\ **Replies:** 4\ **Last updated:** [June 7, 2013, 9:07am UTC](https://discuss.elastic.co/t/error-in-indexing-document-in-elasticsearch/10144 "2013-06-07T09:07:52Z")
When I try to index this document, I am getting an exception. stack trace is given below. curl -XPOST localhost:9200/index1/talk?pretty=1 -d ' { "\_id" : ObjectId("503b29efe4b032e338f0581b"), "\_oid"… --- ## [How to send Json logs to Elastic Search using File Beats without extra fields](https://discuss.elastic.co/t/how-to-send-json-logs-to-elastic-search-using-file-beats-without-extra-fields/239972)
**Author:** [@Ashish\_kapoor](https://discuss.elastic.co/u/Ashish_kapoor)\ **Replies:** 4\ **Last updated:** [July 9, 2020, 4:50am UTC](https://discuss.elastic.co/t/how-to-send-json-logs-to-elastic-search-using-file-beats-without-extra-fields/239972 "2020-07-09T04:50:16Z")
Hi there, I am trying to send JSON logs to Elastic Search using file beats. My logs file looks like this {"timestamp":1581386084780,"message":"User 'Test' connected","eventId":107,"metadata":{"userID":"Test","serviceID… --- ## [Python Elasticsearch query not returning the expected results when running subsequent calls](https://discuss.elastic.co/t/python-elasticsearch-query-not-returning-the-expected-results-when-running-subsequent-calls/15218)
**Author:** [@G\_Kerekes](https://discuss.elastic.co/u/G_Kerekes)\ **Replies:** 7\ **Last updated:** [January 13, 2014, 3:04pm UTC](https://discuss.elastic.co/t/python-elasticsearch-query-not-returning-the-expected-results-when-running-subsequent-calls/15218 "2014-01-13T15:04:01Z")
Hello, I am querying an elasticsearch index from python. Issue 1 is that when I change my query and rerun it, my objects in Python don't get refreshed according to my modified query. Issue 2 is that even if I s… --- ## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-08)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-08/384523)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:47pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-08/384523 "2026-01-13T20:47:35Z")
Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation (ESA-2026-08) Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (C… --- ## [Integration testing in Java, carrotsearch thread leaks & severe errors](https://discuss.elastic.co/t/integration-testing-in-java-carrotsearch-thread-leaks-severe-errors/26831)
**Author:** [@nomlaran](https://discuss.elastic.co/u/nomlaran)\ **Replies:** 3\ **Last updated:** [October 1, 2015, 6:46pm UTC](https://discuss.elastic.co/t/integration-testing-in-java-carrotsearch-thread-leaks-severe-errors/26831 "2015-10-01T18:46:46Z")
Every time I run my integration test (which extends ElasticsearchIntegrationTest) I get a thread leak severe log message from carrotsearch. What I've found in googling for a resolution to this suggests that this was fixe… --- ## [Monitor Remote Server](https://discuss.elastic.co/t/monitor-remote-server/157935)
**Author:** [@ELE](https://discuss.elastic.co/u/ELE)\ **Replies:** 6\ **Last updated:** [November 29, 2018, 7:58pm UTC](https://discuss.elastic.co/t/monitor-remote-server/157935 "2018-11-29T19:58:44Z")
Hi, I just install on single VM elastic & metricbeat I'm able to view the host overview in Kibana dashboard, but I have two questions: Is there metricbeat view per process (not host), like dashboard which showing th… --- ## [How to unnest - flatten this answer](https://discuss.elastic.co/t/how-to-unnest-flatten-this-answer/261419)
**Author:** [@brunet](https://discuss.elastic.co/u/brunet)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 3:48pm UTC](https://discuss.elastic.co/t/how-to-unnest-flatten-this-answer/261419 "2021-01-18T15:48:09Z")
Dear community, I need to transform the ES response to flatten the received data, i would like to make a radar type viz but i'm not able to unnest / flatten it. I have this answer (cleaned it a bit)... "aggregations"… --- ## [Error while finding translate plugin](https://discuss.elastic.co/t/error-while-finding-translate-plugin/49377)
**Author:** [@harshafrnd4u](https://discuss.elastic.co/u/harshafrnd4u)\ **Replies:** 3\ **Last updated:** [January 26, 2017, 5:20pm UTC](https://discuss.elastic.co/t/error-while-finding-translate-plugin/49377 "2017-01-26T17:20:40Z")
The error reported is: Couldn't find any filter plugin named 'translate'. Are you sure this is correct? Trying to load the translate filter plugin resulted in this error: no such file to load -- logstash/filters/trans… --- ## [How to generate \_id field manually](https://discuss.elastic.co/t/how-to-generate-id-field-manually/240302)
**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\ **Replies:** 8\ **Last updated:** [July 9, 2020, 12:06pm UTC](https://discuss.elastic.co/t/how-to-generate-id-field-manually/240302 "2020-07-09T12:06:32Z")
I have imported a data of 3.5 crore documents in elasticsearch by using logstash. After I found that the unique field "\_id" is not generated. Now, I want to generate the unique field as "\_id" on all the documents. Can a… --- ## [Cluster state has not been recovered yet, cannot write to the \[null\] index](https://discuss.elastic.co/t/cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index/315945)
**Author:** [@iLucas.Bechlte.exe](https://discuss.elastic.co/u/iLucas.Bechlte.exe)\ **Replies:** 1\ **Last updated:** [October 7, 2022, 1:00pm UTC](https://discuss.elastic.co/t/cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index/315945 "2022-10-07T13:00:24Z")
Hi, i try to run an elastic stack with the localhost as the only node. I followed the official installation guide, but when I get to the running check it shows me this error after entering the password: {"error":{"root… --- ## [How to transform values of field?](https://discuss.elastic.co/t/how-to-transform-values-of-field/63483)
**Author:** [@gandhi](https://discuss.elastic.co/u/gandhi)\ **Replies:** 7\ **Last updated:** [October 24, 2016, 9:24am UTC](https://discuss.elastic.co/t/how-to-transform-values-of-field/63483 "2016-10-24T09:24:19Z")
Hello, guys! 'doctype' field's type is String. I'd like to transform this field values like '0.0' to 'content', '1.0' to 'reply'. I checked 'Setting \> Indices' controls button. There is no option to work for me. … [Previous page](https://discuss.elastic.co/top.md?page=455&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=457&per_page=50&period=all)