# Top **URL:** https://discuss.elastic.co/top.md?page=466&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 467 --- ## [Query string not working with keyword tokenizer](https://discuss.elastic.co/t/query-string-not-working-with-keyword-tokenizer/3778)
**Author:** [@Andrei](https://discuss.elastic.co/u/Andrei)\ **Replies:** 8\ **Last updated:** [January 28, 2011, 8:35pm UTC](https://discuss.elastic.co/t/query-string-not-working-with-keyword-tokenizer/3778 "2011-01-28T20:35:37Z")
I have a custom analyzer that looks like this: eulang\_tags: type: custom tokenizer: keyword filter: \[lowercase, asciifolding\] Then in my mapping, I set the "tags" field to use it like t… --- ## [Watcher index action - how to get all the hits data to index ](https://discuss.elastic.co/t/watcher-index-action-how-to-get-all-the-hits-data-to-index/123174)
**Author:** [@pulgrims](https://discuss.elastic.co/u/pulgrims)\ **Replies:** 4\ **Last updated:** [March 16, 2018, 6:27pm UTC](https://discuss.elastic.co/t/watcher-index-action-how-to-get-all-the-hits-data-to-index/123174 "2018-03-16T18:27:34Z")
Hi, i'm trying to make a watcher which has a condition that input data meet when its count is larger than or equal to 100. and i would like to index result data using Index Action. but i know that count of result data(… --- ## [How to install marvel in elastic (6.1.2) version](https://discuss.elastic.co/t/how-to-install-marvel-in-elastic-6-1-2-version/119896)
**Author:** [@venkat545](https://discuss.elastic.co/u/venkat545)\ **Replies:** 5\ **Last updated:** [February 15, 2018, 10:19am UTC](https://discuss.elastic.co/t/how-to-install-marvel-in-elastic-6-1-2-version/119896 "2018-02-15T10:19:12Z")
Unable to install marvel i am following this link https://www.elastic.co/guide/en/marvel/current/installing-marvel.html... i am facing issue at while installing 'marvel agent' can anyone suggest me how to solve this … --- ## [How to set timezone?](https://discuss.elastic.co/t/how-to-set-timezone/43865)
**Author:** [@ggilat](https://discuss.elastic.co/u/ggilat)\ **Replies:** 5\ **Last updated:** [May 24, 2017, 9:32am UTC](https://discuss.elastic.co/t/how-to-set-timezone/43865 "2017-05-24T09:32:41Z")
Hi, I will be thankful if you'll help me solved this problem: My timezone is UTC + 2 (Red Arrow in the pic) but when i drill down into the event JSON the timestamp is 2 hour erlier (Blue Arrow in the pic): @timestamp"… --- ## [Number\_format\_exception when querying field with long type using string](https://discuss.elastic.co/t/number-format-exception-when-querying-field-with-long-type-using-string/101972)
**Author:** [@fanfilmu](https://discuss.elastic.co/u/fanfilmu)\ **Replies:** 0\ **Last updated:** [September 27, 2017, 11:27am UTC](https://discuss.elastic.co/t/number-format-exception-when-querying-field-with-long-type-using-string/101972 "2017-09-27T11:27:35Z")
Hi! I have a problem with querying one of the fields in my index. It seems to be quite similar to this: Problems with Query\_String and different field types , but it's an old issue so I wanted to create new one. Elast… --- ## [Unassigned replica](https://discuss.elastic.co/t/unassigned-replica/233794)
**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\ **Replies:** 8\ **Last updated:** [May 22, 2020, 5:16pm UTC](https://discuss.elastic.co/t/unassigned-replica/233794 "2020-05-22T17:16:56Z")
Hi, I have unassigned replicas in my cluster. I try allocating them manually but I can't: POST \_cluster/reroute?pretty { "commands": \[ { "allocate\_replica": { "index": "apm-7.6.2-transaction-2020.05.… --- ## [Multiple Condition Watcher](https://discuss.elastic.co/t/multiple-condition-watcher/67707)
**Author:** [@agf](https://discuss.elastic.co/u/agf)\ **Replies:** 4\ **Last updated:** [December 7, 2016, 9:16am UTC](https://discuss.elastic.co/t/multiple-condition-watcher/67707 "2016-12-07T09:16:31Z")
I have a watcher that is configured to monitor 2 inputs. The payload of input 1 is compared with the payload of input 2. I want to set the watch condition such that if the payload of input 1 != payload of input 2, check … --- ## [Very slow cluster restart](https://discuss.elastic.co/t/very-slow-cluster-restart/10556)
**Author:** [@Amit](https://discuss.elastic.co/u/Amit)\ **Replies:** 3\ **Last updated:** [January 31, 2013, 5:45pm UTC](https://discuss.elastic.co/t/very-slow-cluster-restart/10556 "2013-01-31T17:45:07Z")
Hi All, I have an ElasticSearch with following config; - 2 nodes- both are data nodes - Shrads replica- 0 - number of shards -5 The number of \*active\_primary\_shards\* on my cluster is close to 15,000. … --- ## [Elasticsearch cluster ip address](https://discuss.elastic.co/t/elasticsearch-cluster-ip-address/21586)
**Author:** [@Vasu\_Thota1](https://discuss.elastic.co/u/Vasu_Thota1)\ **Replies:** 7\ **Last updated:** [January 13, 2015, 3:02pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-ip-address/21586 "2015-01-13T15:02:13Z")
Hi All, Is there a way to find what's my cluster ip address where i have two node cluster. Thanks in Advance. Thanks, Vasu -- You received this message because you are subscribed to the Google Gro… --- ## [ES Hadoop exception Unsupported/Unknown Elasticsearch version 5.2.2](https://discuss.elastic.co/t/es-hadoop-exception-unsupported-unknown-elasticsearch-version-5-2-2/80284)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 3\ **Last updated:** [April 25, 2017, 6:35am UTC](https://discuss.elastic.co/t/es-hadoop-exception-unsupported-unknown-elasticsearch-version-5-2-2/80284 "2017-04-25T06:35:25Z")
Hi All, I am trying to load data to ElasticSearch in local using "JavaEsSpark.saveToEs" method. and I am using Elasticsearch version 5.2.2 Below is the exception where thrown, 17/03/28 16:33:30 INFO Version: Elasti… --- ## [ILM waiting for allocation](https://discuss.elastic.co/t/ilm-waiting-for-allocation/177538)
**Author:** [@Tripodal](https://discuss.elastic.co/u/Tripodal)\ **Replies:** 4\ **Last updated:** [April 24, 2019, 4:35pm UTC](https://discuss.elastic.co/t/ilm-waiting-for-allocation/177538 "2019-04-24T16:35:22Z")
I have several days of indexes stopped at this step. However I'm unable to determine why exactly ILM won't progress. Advice on where I could look to find the mis-configuration would be appreciated. Excerpt from GET … --- ## [Filebeat compress output to file not working](https://discuss.elastic.co/t/filebeat-compress-output-to-file-not-working/114434)
**Author:** [@Omair\_Khalid](https://discuss.elastic.co/u/Omair_Khalid)\ **Replies:** 4\ **Last updated:** [January 8, 2018, 10:46pm UTC](https://discuss.elastic.co/t/filebeat-compress-output-to-file-not-working/114434 "2018-01-08T22:46:22Z")
Hello, I am reading logs from a log file (as below) and then emitting the output into another file. Note: i am not emitting the output to ES or kafka e.t.c. But another file on some other location. I have been able to … --- ## [Filebeat: Basic HTTP request output plugin](https://discuss.elastic.co/t/filebeat-basic-http-request-output-plugin/80384)
**Author:** [@mcandre](https://discuss.elastic.co/u/mcandre)\ **Replies:** 1\ **Last updated:** [March 29, 2017, 8:42pm UTC](https://discuss.elastic.co/t/filebeat-basic-http-request-output-plugin/80384 "2017-03-29T20:42:51Z")
Could filebeat get a plugin for outputing to REST calls? Instead of trying to retrofit the es output plugin --- ## [How to create Index Every five 5 Minute](https://discuss.elastic.co/t/how-to-create-index-every-five-5-minute/56796)
**Author:** [@sumit\_gupta\_sgt](https://discuss.elastic.co/u/sumit_gupta_sgt)\ **Replies:** 8\ **Last updated:** [August 1, 2016, 2:08pm UTC](https://discuss.elastic.co/t/how-to-create-index-every-five-5-minute/56796 "2016-08-01T14:08:51Z")
Hi All, Basically I am pulling data from SQL Server into ES.I am able to create Index daily, hourly, minute, second etc ..but i want to create every 5 minute new index ..anybody knows how i can do this? Is there any … --- ## [Elasticsearch build-in user changed password](https://discuss.elastic.co/t/elasticsearch-build-in-user-changed-password/276330)
**Author:** [@drewkrrb](https://discuss.elastic.co/u/drewkrrb)\ **Replies:** 5\ **Last updated:** [June 18, 2021, 3:44am UTC](https://discuss.elastic.co/t/elasticsearch-build-in-user-changed-password/276330 "2021-06-18T03:44:53Z")
Hi all Our Elasticsearch environment is deployed on our kubernetes platform using the official helm chart. We only have 2 elasticsearch pods. We are using xpack.security.enabled: true and setup the password for elastic… --- ## [Filebeat's module using Logstash](https://discuss.elastic.co/t/filebeats-module-using-logstash/106049)
**Author:** [@Elezium](https://discuss.elastic.co/u/Elezium)\ **Replies:** 5\ **Last updated:** [November 2, 2017, 2:11am UTC](https://discuss.elastic.co/t/filebeats-module-using-logstash/106049 "2017-11-02T02:11:42Z")
Hi, I'm facing issue with Filebeat's module and Logstash, If I use FileBeat and set the output to Elastic Search, everything seems to run fine. But if I output to LogStash, I do see the data in Elasticsearch but they … --- ## [Map geoip.location to geo\_point by default](https://discuss.elastic.co/t/map-geoip-location-to-geo-point-by-default/35055)
**Author:** [@jonblack](https://discuss.elastic.co/u/jonblack)\ **Replies:** 4\ **Last updated:** [November 19, 2015, 3:50pm UTC](https://discuss.elastic.co/t/map-geoip-location-to-geo-point-by-default/35055 "2015-11-19T15:50:46Z")
I'm trying to visualise geoip location on a tile map in Kibana but am getting the following error: No Compatible Fields: The "\[logstash-nginx-access-\]YYYY.MM.DD" index pattern does not contain any of the following fiel… --- ## [Problem shield - kibana](https://discuss.elastic.co/t/problem-shield-kibana/40954)
**Author:** [@Massimo\_Carro](https://discuss.elastic.co/u/Massimo_Carro)\ **Replies:** 7\ **Last updated:** [June 21, 2016, 3:56pm UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954 "2016-06-21T15:56:26Z")
Hi guys, I've configured elasticsearch to use shields and I'v create correctly a role and user for kibana4 to access to es. Next I've installed shield on Kibana but without ssl enabled, I received a fatal like this: {… --- ## [Out of memory (invoked oom-killer)](https://discuss.elastic.co/t/out-of-memory-invoked-oom-killer/80795)
**Author:** [@simenflatby](https://discuss.elastic.co/u/simenflatby)\ **Replies:** 1\ **Last updated:** [April 25, 2017, 1:20pm UTC](https://discuss.elastic.co/t/out-of-memory-invoked-oom-killer/80795 "2017-04-25T13:20:22Z")
Elasticsearch version: 2.4.0 Plugins installed: \[ "license", "marvel-agent" \] JVM version: 1.8.0\_101 OS version: Ubuntu 16.04.1 LTS Kernel version: 4.4.0-67-generic #88-Ubuntu RAM: 14 GB JVM heap min and max settings: 8G… --- ## [Search API - Is there a way to get position of document in search response hits?](https://discuss.elastic.co/t/search-api-is-there-a-way-to-get-position-of-document-in-search-response-hits/204657)
**Author:** [@yairinot](https://discuss.elastic.co/u/yairinot)\ **Replies:** 7\ **Last updated:** [October 23, 2019, 10:42am UTC](https://discuss.elastic.co/t/search-api-is-there-a-way-to-get-position-of-document-in-search-response-hits/204657 "2019-10-23T10:42:49Z")
Elasticsearch 6.5.4 While this looks a trivial task I did not find an easy way to include document position in search response Sample query { "query":{ "bool":{ "must":\[ { "term… --- ## [X-Pack role cannot be created or modified](https://discuss.elastic.co/t/x-pack-role-cannot-be-created-or-modified/93670)
**Author:** [@mc2000](https://discuss.elastic.co/u/mc2000)\ **Replies:** 7\ **Last updated:** [July 28, 2017, 7:51am UTC](https://discuss.elastic.co/t/x-pack-role-cannot-be-created-or-modified/93670 "2017-07-28T07:51:27Z")
Hi, I'm experiencing issue when creating a new role which results in the following error message: {"error":{"root\_cause":\[{"type":"illegal\_state\_exception","reason":"role cannot be created or modified as service canno… --- ## [Logstash output to https](https://discuss.elastic.co/t/logstash-output-to-https/27946)
**Author:** [@elitzur\_e](https://discuss.elastic.co/u/elitzur_e)\ **Replies:** 8\ **Last updated:** [September 6, 2015, 12:05pm UTC](https://discuss.elastic.co/t/logstash-output-to-https/27946 "2015-09-06T12:05:30Z")
Hi. been looking a while for some answer about this. is there support for output to https? this is my output: } http{ url =\> "https://\*\*\*\*/service.svc/log" http\_method =\>"post" } im running logstash on wi… --- ## [Getting java.nio.file.NoSuchFileException while starting ES](https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165)
**Author:** [@bijender\_kr](https://discuss.elastic.co/u/bijender_kr)\ **Replies:** 4\ **Last updated:** [June 8, 2020, 12:37pm UTC](https://discuss.elastic.co/t/getting-java-nio-file-nosuchfileexception-while-starting-es/236165 "2020-06-08T12:37:16Z")
Hello, I am getting below error while starting ES service after enabling the TLS. I have performed below steps: created a CA certificate. bin/elasticsearch-certutil ca/ Added the certificate password into keysto… --- ## [Discover view is very slow](https://discuss.elastic.co/t/discover-view-is-very-slow/91810)
**Author:** [@foxylion](https://discuss.elastic.co/u/foxylion)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 6:21pm UTC](https://discuss.elastic.co/t/discover-view-is-very-slow/91810 "2017-07-05T18:21:45Z")
Hi, we are using Kibana to browse our logs generated by filebeat and logstash. Currently we have ~120.000.000 log records, indexed with daily indices. Each index has replica=2 and shards=1. An index is about 300-500 mb… --- ## [Adding copy\_to support for copying data from object to nested type](https://discuss.elastic.co/t/adding-copy-to-support-for-copying-data-from-object-to-nested-type/136576)
**Author:** [@kailoofi](https://discuss.elastic.co/u/kailoofi)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 10:20pm UTC](https://discuss.elastic.co/t/adding-copy-to-support-for-copying-data-from-object-to-nested-type/136576 "2018-06-19T22:20:54Z")
tl;dr Looking at the ES code 5.x, it seems possible to support copy\_to from object to nested type. My team is interested in contributing this feature back into ES but before that we want to understand the reason for not… --- ## [GOOGLE cloud ES cluster are not able to access from outside](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085)
**Author:** [@babu.ganesh0708](https://discuss.elastic.co/u/babu.ganesh0708)\ **Replies:** 6\ **Last updated:** [June 30, 2017, 3:12pm UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085 "2017-06-30T15:12:56Z")
Hi All, I have installed ES 2.4.5 in google cloud VM and the ES instances are up and running fine without issues. But i couldn't able to access it from outside and below is the URL i am trying access it in the browser. … --- ## [How to combine suggest query?](https://discuss.elastic.co/t/how-to-combine-suggest-query/55819)
**Author:** [@lessless](https://discuss.elastic.co/u/lessless)\ **Replies:** 2\ **Last updated:** [July 20, 2016, 12:43pm UTC](https://discuss.elastic.co/t/how-to-combine-suggest-query/55819 "2016-07-20T12:43:09Z")
Hello, I have the following mapping for address suggestion: PUT /autocomplete { "mappings": { "address" : { "properties" : { "city": { "type" : "string" }, "district": { "type" : "s… --- ## [How to schedule auto archival of old indices?](https://discuss.elastic.co/t/how-to-schedule-auto-archival-of-old-indices/65582)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [November 15, 2016, 9:40pm UTC](https://discuss.elastic.co/t/how-to-schedule-auto-archival-of-old-indices/65582 "2016-11-15T21:40:57Z")
Hi, I use elastic stack 5.0 GA, and I know (and I use) how to delete old indices using curl like; curl --user elastic:elasticpassword -XDELETE '192.168.1.1:9200/myindex-\*?pretty' I have named my indices in the patte… --- ## [Create multiple type in one index](https://discuss.elastic.co/t/create-multiple-type-in-one-index/191528)
**Author:** [@Abdelmadjid](https://discuss.elastic.co/u/Abdelmadjid)\ **Replies:** 2\ **Last updated:** [July 23, 2019, 10:41am UTC](https://discuss.elastic.co/t/create-multiple-type-in-one-index/191528 "2019-07-23T10:41:26Z")
Hello everyone whene i create a multiple type in the same index in elasticsearch version 7. 2.0 i get these error { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Rejecting mapping … --- ## [Every Night- Elasticsearch. (code=killed, signal=KILL)](https://discuss.elastic.co/t/every-night-elasticsearch-code-killed-signal-kill/294397)
**Author:** [@beohna](https://discuss.elastic.co/u/beohna)\ **Replies:** 8\ **Last updated:** [January 17, 2022, 10:58pm UTC](https://discuss.elastic.co/t/every-night-elasticsearch-code-killed-signal-kill/294397 "2022-01-17T22:58:41Z")
Hey, on my Rasperry Pi with Nextcloud and full text search (powered by Elasticsearch) every night Elasticsearch is killed (code=killed, signal=KILL). ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/s… --- ## [Indexing web pages](https://discuss.elastic.co/t/indexing-web-pages/12518)
**Author:** [@Zoran\_Jeremic](https://discuss.elastic.co/u/Zoran_Jeremic)\ **Replies:** 6\ **Last updated:** [June 23, 2013, 1:15pm UTC](https://discuss.elastic.co/t/indexing-web-pages/12518 "2013-06-23T13:15:01Z")
Hi, I'm trying to provide indexing of Web pages so it can be later searched based on it's content. The problem is that I don't know the appropriate approach to deal with content. I tried to use attachment plugin o… --- ## [What are ilm-history and slm-history indices used for?](https://discuss.elastic.co/t/what-are-ilm-history-and-slm-history-indices-used-for/305711)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 2\ **Last updated:** [November 30, 2024, 9:49pm UTC](https://discuss.elastic.co/t/what-are-ilm-history-and-slm-history-indices-used-for/305711 "2024-11-30T21:49:10Z")
I'm doing some cleanup on my cluster and saw that there are a couple of small system indices that I'm not sure for what they are used. Those indices are mostly ilm-history-\* , .ds-ilm-history-\* , .slm-history-\* and .ds-… --- ## [Parse Logstash message field into multiple field](https://discuss.elastic.co/t/parse-logstash-message-field-into-multiple-field/281425)
**Author:** [@buulq90](https://discuss.elastic.co/u/buulq90)\ **Replies:** 8\ **Last updated:** [August 16, 2021, 2:13pm UTC](https://discuss.elastic.co/t/parse-logstash-message-field-into-multiple-field/281425 "2021-08-16T14:13:24Z")
Hello all, I'm firstly using log stash and got some issue when parsing the JSON log on the message field into multiple field for visualizing in the Kibana dashboard. Below is my message log appear in Elasticsearch me… --- ## [Logstash error for the multiline json file](https://discuss.elastic.co/t/logstash-error-for-the-multiline-json-file/120474)
**Author:** [@uvarisubash](https://discuss.elastic.co/u/uvarisubash)\ **Replies:** 8\ **Last updated:** [February 21, 2018, 12:13pm UTC](https://discuss.elastic.co/t/logstash-error-for-the-multiline-json-file/120474 "2018-02-21T12:13:52Z")
I am getting below logstash error for the multiline json file. Error: \[2018-02-19T19:59:01,332\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :e… --- ## [How to download Discover tab data to a csv or in any other format](https://discuss.elastic.co/t/how-to-download-discover-tab-data-to-a-csv-or-in-any-other-format/35924)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 2\ **Last updated:** [November 30, 2015, 6:11pm UTC](https://discuss.elastic.co/t/how-to-download-discover-tab-data-to-a-csv-or-in-any-other-format/35924 "2015-11-30T18:11:25Z")
Hi Experts, Like we can download panle data to a CSV , can we download discover tab data in a CSV format in kibana 4.If not please suggest what is the best that I can achieve in Kibana for my requirement . Thanks VG … --- ## ["Machine learning permission error" for demo user](https://discuss.elastic.co/t/machine-learning-permission-error-for-demo-user/238713)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 4:11pm UTC](https://discuss.elastic.co/t/machine-learning-permission-error-for-demo-user/238713 "2020-06-25T16:11:59Z")
Hi there, I'm trying to create a user with access to the SIEM application as well as the machine learning detections. However I am incapable of coming up with a privilege combination that would allow this. So far the o… --- ## [Rsyslog and syslog-ng direct logging to Elasticsearch, viable replacement for elastic-agent?](https://discuss.elastic.co/t/rsyslog-and-syslog-ng-direct-logging-to-elasticsearch-viable-replacement-for-elastic-agent/341390)
**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\ **Replies:** 4\ **Last updated:** [August 22, 2023, 4:43pm UTC](https://discuss.elastic.co/t/rsyslog-and-syslog-ng-direct-logging-to-elasticsearch-viable-replacement-for-elastic-agent/341390 "2023-08-22T16:43:26Z")
rsyslog has a module to send directly to Elasticsearch: syslog-ng also has a module for logging directly to Elasticsearch: https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edition/3.22/adminis… --- ## [Elastic Stack Helm Charts](https://discuss.elastic.co/t/elastic-stack-helm-charts/187598)
**Author:** [@LaurentGoderre](https://discuss.elastic.co/u/LaurentGoderre)\ **Replies:** 5\ **Last updated:** [January 17, 2020, 3:29pm UTC](https://discuss.elastic.co/t/elastic-stack-helm-charts/187598 "2020-01-17T15:29:16Z")
I had started an epic to fix the elastic-stack helm chart in helm/stable: https://github.com/helm/charts/issues/14564 I think this work is still desirable because it should be easy to install the stack using helm withou… --- ## [Security index is unavailable. short circuiting retrieval of user with helm chart and letsencrypt](https://discuss.elastic.co/t/security-index-is-unavailable-short-circuiting-retrieval-of-user-with-helm-chart-and-letsencrypt/246497)
**Author:** [@dcanales](https://discuss.elastic.co/u/dcanales)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 6:22pm UTC](https://discuss.elastic.co/t/security-index-is-unavailable-short-circuiting-retrieval-of-user-with-helm-chart-and-letsencrypt/246497 "2020-08-26T18:22:45Z")
Hi, i have a kubernetes cluster and im trying to configure elasticsearch with xpack.security.enabled through the helm template I have the same config from the documentation: https://github.com/elastic/helm-charts/blob/7… --- ## [Grok pattern with multiline management in filebeat](https://discuss.elastic.co/t/grok-pattern-with-multiline-management-in-filebeat/41903)
**Author:** [@michelecappelletti](https://discuss.elastic.co/u/michelecappelletti)\ **Replies:** 6\ **Last updated:** [February 17, 2016, 9:24am UTC](https://discuss.elastic.co/t/grok-pattern-with-multiline-management-in-filebeat/41903 "2016-02-17T09:24:35Z")
HI.. i was used to use grok pattern even in multiline 'pattern' section.. it was very useful.. any tip to compensate this on filebeat multiline side?? --- ## [Value too large to output](https://discuss.elastic.co/t/value-too-large-to-output/72129)
**Author:** [@phillipgibb](https://discuss.elastic.co/u/phillipgibb)\ **Replies:** 5\ **Last updated:** [January 19, 2017, 2:25pm UTC](https://discuss.elastic.co/t/value-too-large-to-output/72129 "2017-01-19T14:25:39Z")
Hi, FileBeat is outputting to logstash text like: Value too large to output (2939 bytes)! First 255 chars are: ... Yes the logline is actually 2939 bytes Yes I do want it sent to logstash I have looked at the max\_… --- ## [Movement of document from one shard to another shard](https://discuss.elastic.co/t/movement-of-document-from-one-shard-to-another-shard/39196)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 8\ **Last updated:** [January 18, 2016, 11:44am UTC](https://discuss.elastic.co/t/movement-of-document-from-one-shard-to-another-shard/39196 "2016-01-18T11:44:45Z")
Hi all, As we are using ES 1.7.3 with Java 1.8 version. Using bulk API we index some documents to es\_item index. It having a document count of nearly 23 millions. I can able to see the a particular document in which sh… --- ## [Loading IBM DB2 data using Logstash into Elasticsearch](https://discuss.elastic.co/t/loading-ibm-db2-data-using-logstash-into-elasticsearch/142003)
**Author:** [@anon98066099](https://discuss.elastic.co/u/anon98066099)\ **Replies:** 1\ **Last updated:** [July 28, 2018, 3:00am UTC](https://discuss.elastic.co/t/loading-ibm-db2-data-using-logstash-into-elasticsearch/142003 "2018-07-28T03:00:03Z")
Hi, I have 56 views to be loaded into elasticsearch. So i created a config file which has 56 jdbc blocks to load 56 views. Everytime it gets loaded but in Kibana i see only one table randomly. Below is my config file. … --- ## [ElasticSearch Monitoring Failing](https://discuss.elastic.co/t/elasticsearch-monitoring-failing/138435)
**Author:** [@tebriel](https://discuss.elastic.co/u/tebriel)\ **Replies:** 3\ **Last updated:** [July 4, 2018, 3:24pm UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-failing/138435 "2018-07-04T15:24:11Z")
Upgraded to 6.3.0, elasticsearch monitoring now fails, stack trace follows. I'm seeing occasional bursts of data showing up in Kibana 6.3.0, but it's got gaps in data. I tried increasing shards to 3 (from the 1 in the te… --- ## [Maxmind mmdb - Logstash geoip](https://discuss.elastic.co/t/maxmind-mmdb-logstash-geoip/27564)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 3\ **Last updated:** [September 22, 2015, 8:15am UTC](https://discuss.elastic.co/t/maxmind-mmdb-logstash-geoip/27564 "2015-09-22T08:15:33Z")
Hi, Is it possible to mention mmdb in logstash geoip section and also Does logstash support mmdb as like below configuration ?. geoip { source =\> "clientip" target =\> "geoip" database =\>"/tmp/geoip.mmdb… --- ## [How to configure ES\_JAVA\_OPTS for ES 5.0 using ansible playbook](https://discuss.elastic.co/t/how-to-configure-es-java-opts-for-es-5-0-using-ansible-playbook/65490)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 5\ **Last updated:** [November 17, 2016, 6:41am UTC](https://discuss.elastic.co/t/how-to-configure-es-java-opts-for-es-5-0-using-ansible-playbook/65490 "2016-11-17T06:41:01Z")
Hi All, I am trying to start Elasticsearch 5.0.0 using ansible playbook and I am getting the below error I tried to by giving ES\_JAVA\_OPTS="-Xms1g -Xmx1g" in elasticsearch.j2 (template) but still unable to resolve the b… --- ## [Exists vs missing performance](https://discuss.elastic.co/t/exists-vs-missing-performance/54420)
**Author:** [@israel](https://discuss.elastic.co/u/israel)\ **Replies:** 5\ **Last updated:** [July 22, 2016, 12:52pm UTC](https://discuss.elastic.co/t/exists-vs-missing-performance/54420 "2016-07-22T12:52:21Z")
Hi, Is there a difference, in terms of performance, between exists query/filter and missing query/filter? Thanks, Israel --- ## [Updating an existing index using spark](https://discuss.elastic.co/t/updating-an-existing-index-using-spark/43201)
**Author:** [@boreal](https://discuss.elastic.co/u/boreal)\ **Replies:** 3\ **Last updated:** [March 3, 2016, 10:22am UTC](https://discuss.elastic.co/t/updating-an-existing-index-using-spark/43201 "2016-03-03T10:22:39Z")
Hi, I am having a problem updating existing index using spark. I followed the Costin's advice per link below. I tried few variations with few existing documents as a start but I am getting either "Field \[\_id\] is a metad… --- ## [Can logstash handle array of nested objects?](https://discuss.elastic.co/t/can-logstash-handle-array-of-nested-objects/53558)
**Author:** [@ChrisR](https://discuss.elastic.co/u/ChrisR)\ **Replies:** 6\ **Last updated:** [June 22, 2016, 12:44pm UTC](https://discuss.elastic.co/t/can-logstash-handle-array-of-nested-objects/53558 "2016-06-22T12:44:44Z")
I am unable to configure logstash to load an array of nested objects as described in the elasticsearch guide. I can map and load the array of nested objects via the elasticsearch REST API (as shown below), but I am una… --- ## [LogStash::Json::GeneratorError when using mutate copy @timestamp](https://discuss.elastic.co/t/logstash-json-generatorerror-when-using-mutate-copy-timestamp/119256)
**Author:** [@timvisher](https://discuss.elastic.co/u/timvisher)\ **Replies:** 0\ **Last updated:** [February 9, 2018, 2:37pm UTC](https://discuss.elastic.co/t/logstash-json-generatorerror-when-using-mutate-copy-timestamp/119256 "2018-02-09T14:37:14Z")
I was attempting to save off the timestamp that logstash saw an event before mutating the event to use the event's parsed timestamp with the date filter. My first attempt was: if \[@timestamp\] { mutate { copy =\> … [Previous page](https://discuss.elastic.co/top.md?page=465&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=467&per_page=50&period=all)