# Top **URL:** https://discuss.elastic.co/top.md?page=470&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 471 --- ## [Accessing first element after executing split](https://discuss.elastic.co/t/accessing-first-element-after-executing-split/152282)
**Author:** [@lucas.alvarez](https://discuss.elastic.co/u/lucas.alvarez)\ **Replies:** 3\ **Last updated:** [October 16, 2018, 4:52pm UTC](https://discuss.elastic.co/t/accessing-first-element-after-executing-split/152282 "2018-10-16T16:52:55Z")
Hello everybody!. I cannot find a solution for the following thing. I'm splitting a hostname that is composed by a "name", a "." and a "domain". I would like to get only the name. I.e: lucas.google =\> lucas I've read a… --- ## [Elasticsearch multi search api is not working properly](https://discuss.elastic.co/t/elasticsearch-multi-search-api-is-not-working-properly/310429)
**Author:** [@sheiks2m](https://discuss.elastic.co/u/sheiks2m)\ **Replies:** 5\ **Last updated:** [July 24, 2022, 11:40pm UTC](https://discuss.elastic.co/t/elasticsearch-multi-search-api-is-not-working-properly/310429 "2022-07-24T23:40:51Z")
Hi, Im using elasticsearch 8.3.2. Im facing the issue while using multi search api. API: https://elasticrunningserver:9200/myindex/\_msearch Payload: { } {"query" : {"match" : { "message": "this is a test"}}} {"query"… --- ## [Multiple data directories -\>parallel search of shards on same instance?](https://discuss.elastic.co/t/multiple-data-directories-parallel-search-of-shards-on-same-instance/56446)
**Author:** [@hokiegeek2](https://discuss.elastic.co/u/hokiegeek2)\ **Replies:** 5\ **Last updated:** [July 27, 2016, 5:54pm UTC](https://discuss.elastic.co/t/multiple-data-directories-parallel-search-of-shards-on-same-instance/56446 "2016-07-27T17:54:34Z")
Hi Everyone, I understand from the ES docs that having multiple shards from the same index on the same ES instance can slow queries down because the 2..n shards from the same index on the same ES instance will be queri… --- ## [Sum nested values while applying match conditions](https://discuss.elastic.co/t/sum-nested-values-while-applying-match-conditions/108032)
**Author:** [@Rory](https://discuss.elastic.co/u/Rory)\ **Replies:** 2\ **Last updated:** [November 17, 2017, 1:24pm UTC](https://discuss.elastic.co/t/sum-nested-values-while-applying-match-conditions/108032 "2017-11-17T13:24:59Z")
Hi, I have a document which looks like: { "comments\_by\_day" : \[ { "dateofcomment" : "2017-09-20", "numberofcomments" : 10 }, { "dateofcomment" : "2017-09-24", "numberofcomments" : 5 }, { … --- ## [Using custom search\_analyzer produces: "analyzer \[\] not found for field \[\]" error](https://discuss.elastic.co/t/using-custom-search-analyzer-produces-analyzer-not-found-for-field-error/37344)
**Author:** [@Alexey\_Danilov](https://discuss.elastic.co/u/Alexey_Danilov)\ **Replies:** 1\ **Last updated:** [December 16, 2015, 1:34pm UTC](https://discuss.elastic.co/t/using-custom-search-analyzer-produces-analyzer-not-found-for-field-error/37344 "2015-12-16T13:34:36Z")
Hi guys! I've been trying to follow this example to implement searching by post codes: Index-Time Search-as-You-Type | Elasticsearch: The Definitive Guide \[2.x\] | Elastic I use Java client to create index and mappings: … --- ## [Elasticsearch cluster status RED and not responding](https://discuss.elastic.co/t/elasticsearch-cluster-status-red-and-not-responding/73758)
**Author:** [@pkumar](https://discuss.elastic.co/u/pkumar)\ **Replies:** 5\ **Last updated:** [February 3, 2017, 6:25pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-status-red-and-not-responding/73758 "2017-02-03T18:25:00Z")
Hi friends, My Elastic search cluster is not responding and status is RED from last few days. It is not able to allocate the shards which are unassigned. This issue started when I first restart the primary instance an… --- ## [Query string with wildcards not working as (I) expect](https://discuss.elastic.co/t/query-string-with-wildcards-not-working-as-i-expect/5541)
**Author:** [@Hakan\_Lindestaf](https://discuss.elastic.co/u/Hakan_Lindestaf)\ **Replies:** 8\ **Last updated:** [May 2, 2012, 9:54pm UTC](https://discuss.elastic.co/t/query-string-with-wildcards-not-working-as-i-expect/5541 "2012-05-02T21:54:17Z")
Hi, I have some documents that have a field like this: trackingid: Api23-82199996 I would like to query on this, but only on the Api23 part. If possible I want to ignore cases (to pick up both api23 and Api23). I… --- ## [Logstash - shutdown process appears to be stalled](https://discuss.elastic.co/t/logstash-shutdown-process-appears-to-be-stalled/84916)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 0\ **Last updated:** [May 8, 2017, 10:22am UTC](https://discuss.elastic.co/t/logstash-shutdown-process-appears-to-be-stalled/84916 "2017-05-08T10:22:26Z")
I am getting this error out of nowhere. Logstash was running correctly and then this error occured, \[2017-05-08T10:16:43,819\]\[WARN \]\[logstash.agent \] stopping pipeline {:id=\>"main"} \[2017-05-08T10:16:49,190\]\[… --- ## [Change Timelion Color](https://discuss.elastic.co/t/change-timelion-color/101069)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 4\ **Last updated:** [September 19, 2017, 8:22pm UTC](https://discuss.elastic.co/t/change-timelion-color/101069 "2017-09-19T20:22:03Z")
Hi, I have developed dashboard using Timelion. I want to change color of timelion. Please suggest how can we change color. Thanks! --- ## [Using Kibana to add data to elasticsearch from forms](https://discuss.elastic.co/t/using-kibana-to-add-data-to-elasticsearch-from-forms/105043)
**Author:** [@Samuel\_Momanyi](https://discuss.elastic.co/u/Samuel_Momanyi)\ **Replies:** 3\ **Last updated:** [November 13, 2017, 6:15pm UTC](https://discuss.elastic.co/t/using-kibana-to-add-data-to-elasticsearch-from-forms/105043 "2017-11-13T18:15:33Z")
I have a couple of things i don't understand. 1 I am trying to create a connection to elasticsearch so that i can access a specific index and then i can add data to it via a form. my index.js looks like this since i re… --- ## [Machine Learning Analytics Job error](https://discuss.elastic.co/t/machine-learning-analytics-job-error/239884)
**Author:** [@MisterLamp](https://discuss.elastic.co/u/MisterLamp)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 4:55pm UTC](https://discuss.elastic.co/t/machine-learning-analytics-job-error/239884 "2020-07-06T16:55:56Z")
Hi everyone, I have a question concerning Machine Learning Analytics Jobs. I have already created an auditbeat index and data in it. Created also Machine Learning Jobs which I can browse within the Anomaly Detection. We… --- ## [RUBY Filter to event.set each entity in an Array](https://discuss.elastic.co/t/ruby-filter-to-event-set-each-entity-in-an-array/277749)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 2\ **Last updated:** [July 21, 2021, 12:42am UTC](https://discuss.elastic.co/t/ruby-filter-to-event-set-each-entity-in-an-array/277749 "2021-07-21T00:42:44Z")
I am stuck on how to use a Ruby script to manipulate a field with in an array. If anyone can help with this I need to take the Field "\[body\]\[entities\]\[sentiment\]\[confidence\]" and \* 100 and add that as another Field "\[bod… --- ## [Error: Get "http://unix/": dial unix /opt/Elastic/Agent/data/tmp/default/endpoint-security/endpoint-security.sock: connect: no such file or directory](https://discuss.elastic.co/t/error-get-http-unix-dial-unix-opt-elastic-agent-data-tmp-default-endpoint-security-endpoint-security-sock-connect-no-such-file-or-directory/303448)
**Author:** [@Tryp](https://discuss.elastic.co/u/Tryp)\ **Replies:** 4\ **Last updated:** [May 2, 2022, 2:03pm UTC](https://discuss.elastic.co/t/error-get-http-unix-dial-unix-opt-elastic-agent-data-tmp-default-endpoint-security-endpoint-security-sock-connect-no-such-file-or-directory/303448 "2022-05-02T14:03:43Z")
I've been digging into this for a few days now and I feel I've reached a wall. elastic-agent connects to both elastic and fleet and I can see the logs coming in. elastic-endpoint connects to fleet but refuses to conn… --- ## [Cannot DELETE Index with Superuser](https://discuss.elastic.co/t/cannot-delete-index-with-superuser/303249)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 2\ **Last updated:** [May 10, 2022, 2:08pm UTC](https://discuss.elastic.co/t/cannot-delete-index-with-superuser/303249 "2022-05-10T14:08:22Z")
Hello, I have a problem on my Elasticsearch, i cannot delete an index with a superuser : I have some .reporting index, and i want to apply an ILM to this index because i dont need the old .reportng index. After changi… --- ## [How to change mapping and reindex to new index using mapping with Python Elasticsearch client API?](https://discuss.elastic.co/t/how-to-change-mapping-and-reindex-to-new-index-using-mapping-with-python-elasticsearch-client-api/51015)
**Author:** [@timogoosen](https://discuss.elastic.co/u/timogoosen)\ **Replies:** 3\ **Last updated:** [May 26, 2016, 8:20am UTC](https://discuss.elastic.co/t/how-to-change-mapping-and-reindex-to-new-index-using-mapping-with-python-elasticsearch-client-api/51015 "2016-05-26T08:20:42Z")
Hi I'd like to use the client API to do the following. 1. Set mapping for new index to reindex data to. Let's call our new index "new-index" 2. Reindex data from let's say "old-index" to new-index, but keep the mapping t… --- ## ["No space left of device" mitigation plan?](https://discuss.elastic.co/t/no-space-left-of-device-mitigation-plan/116645)
**Author:** [@eugene\_pirogov](https://discuss.elastic.co/u/eugene_pirogov)\ **Replies:** 2\ **Last updated:** [January 23, 2018, 8:47pm UTC](https://discuss.elastic.co/t/no-space-left-of-device-mitigation-plan/116645 "2018-01-23T20:47:16Z")
I have Elasticsearch cluster with two nodes: a two-master setup. It is used to store logs. Suddenly one of the masters went down, and refuses to go up. The logs reveal the following error: Suppressed: java.io.IOExcepti… --- ## [Controls input shows max 10 items](https://discuss.elastic.co/t/controls-input-shows-max-10-items/157680)
**Author:** [@Cyber\_Bobak](https://discuss.elastic.co/u/Cyber_Bobak)\ **Replies:** 6\ **Last updated:** [November 30, 2018, 5:14pm UTC](https://discuss.elastic.co/t/controls-input-shows-max-10-items/157680 "2018-11-30T17:14:45Z")
Hi, the input shows maximum 10 items, I changed in advanced settings "fields:popularLimit" to 100, restarted Kibana but no luck. How can I disable the limit ? --- ## [Kibana Static Lookup](https://discuss.elastic.co/t/kibana-static-lookup/236309)
**Author:** [@Anton91](https://discuss.elastic.co/u/Anton91)\ **Replies:** 8\ **Last updated:** [June 22, 2020, 11:57am UTC](https://discuss.elastic.co/t/kibana-static-lookup/236309 "2020-06-22T11:57:57Z")
Hello, I am faced with the following problem: I'm getting two fields A and B. For example, field A contains a 6 and field B should now contain Ethernet. Both fields are already stored in the index pattern and I have a… --- ## [How to restore deleted index in ES which has no snapshot or backup](https://discuss.elastic.co/t/how-to-restore-deleted-index-in-es-which-has-no-snapshot-or-backup/136817)
**Author:** [@davis](https://discuss.elastic.co/u/davis)\ **Replies:** 1\ **Last updated:** [June 21, 2018, 9:51am UTC](https://discuss.elastic.co/t/how-to-restore-deleted-index-in-es-which-has-no-snapshot-or-backup/136817 "2018-06-21T09:51:01Z")
hi all... I deleted an index by mistake :cry: ... It was more than 150G data in '/var/lib/es/nodes/0/indices/MY\_INDEX/ '... and it is empty now! ...I don't have any snapshot or backup to restore it!!! And the data are s… --- ## [Issue with double quotes being escaped](https://discuss.elastic.co/t/issue-with-double-quotes-being-escaped/53064)
**Author:** [@elliottcf](https://discuss.elastic.co/u/elliottcf)\ **Replies:** 5\ **Last updated:** [June 17, 2016, 2:46pm UTC](https://discuss.elastic.co/t/issue-with-double-quotes-being-escaped/53064 "2016-06-17T14:46:50Z")
I'm having an issue with my Filebeat 1.2.3. install. I am trying to read Nginx logs and output them to Redis. I had this system working (at least in a testing capacity) for a week and recently I noticed that I am getti… --- ## [Delete log4j-api-2.11.1.jar - CVE-2021-44228 - ESA-2021-31](https://discuss.elastic.co/t/delete-log4j-api-2-11-1-jar-cve-2021-44228-esa-2021-31/291711)
**Author:** [@Rnx](https://discuss.elastic.co/u/Rnx)\ **Replies:** 3\ **Last updated:** [December 16, 2021, 6:18pm UTC](https://discuss.elastic.co/t/delete-log4j-api-2-11-1-jar-cve-2021-44228-esa-2021-31/291711 "2021-12-16T18:18:16Z")
Hi, yes, the vulnurability... Shell I delete file "log4j-api-2.11.1.jar" from Elasticsearch folder in Linux installation after the package was updated to 7.16.1? The reason to ask is, the server will get several securi… --- ## [Pipeline/output.go:180 failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/pipeline-output-go-180-failed-to-publish-events-temporary-bulk-send-failure/299453)
**Author:** [@anubisg1](https://discuss.elastic.co/u/anubisg1)\ **Replies:** 6\ **Last updated:** [April 5, 2022, 4:58pm UTC](https://discuss.elastic.co/t/pipeline-output-go-180-failed-to-publish-events-temporary-bulk-send-failure/299453 "2022-04-05T16:58:00Z")
i have defined the following pipeline called "suzieq" and tested it against 2 documents PUT \_ingest/pipeline/suzieq { "version": 2, "processors": \[ { "dissect": { "field": "message", "patte… --- ## [Filebeat Setup isn't working after update to 7.9.0](https://discuss.elastic.co/t/filebeat-setup-isnt-working-after-update-to-7-9-0/245564)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 6\ **Last updated:** [September 11, 2020, 7:46am UTC](https://discuss.elastic.co/t/filebeat-setup-isnt-working-after-update-to-7-9-0/245564 "2020-09-11T07:46:49Z")
Hello there, we just upgraded our testsite (elastic, kibana, metricbeat, auditbeat and filebeat) to version 7.9.0. After the update filebeat setup fails with the following message: \[root@ELASTIC99004 ~\]# filebeat setup… --- ## [Elasticsearch cpu/load high with search thread pool queues high](https://discuss.elastic.co/t/elasticsearch-cpu-load-high-with-search-thread-pool-queues-high/158264)
**Author:** [@orivera](https://discuss.elastic.co/u/orivera)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 1:54am UTC](https://discuss.elastic.co/t/elasticsearch-cpu-load-high-with-search-thread-pool-queues-high/158264 "2018-11-30T01:54:46Z")
Elasticsearch cluster queues spike constanly, cpu/load increasing and mostly looking for advice on optimization, not looking for a single answer though. Main indices constantly being updated (bulk) with 300s refresh int… --- ## [License on Filebeats](https://discuss.elastic.co/t/license-on-filebeats/88873)
**Author:** [@amarc](https://discuss.elastic.co/u/amarc)\ **Replies:** 1\ **Last updated:** [June 10, 2017, 12:17am UTC](https://discuss.elastic.co/t/license-on-filebeats/88873 "2017-06-10T00:17:50Z")
Hi, I am hoping to find what is the license with Filebeats (and ELK). The Github page and documentation just says that its open-source. --- ## [Expected fields not available in kibana visualation](https://discuss.elastic.co/t/expected-fields-not-available-in-kibana-visualation/144256)
**Author:** [@KZ\_Win](https://discuss.elastic.co/u/KZ_Win)\ **Replies:** 4\ **Last updated:** [August 16, 2018, 2:15pm UTC](https://discuss.elastic.co/t/expected-fields-not-available-in-kibana-visualation/144256 "2018-08-16T14:15:52Z")
I can perform a search on index pattern with range queries on certain fields and I wanted to do visualization on the same set of fields. However these fields are not available in any kind of visualization. Any idea of … --- ## [Searching email address](https://discuss.elastic.co/t/searching-email-address/6188)
**Author:** [@Jack\_4](https://discuss.elastic.co/u/Jack_4)\ **Replies:** 3\ **Last updated:** [December 18, 2011, 10:11pm UTC](https://discuss.elastic.co/t/searching-email-address/6188 "2011-12-18T22:11:40Z")
Hi All, I was trying to use ES to for syslog searching of mail server logs. The fields are not split into an address field. just 1 field per syslog line . Tried several combinations but can't seem to find a way to … --- ## [Define Parent-Child Relationship in Logstash](https://discuss.elastic.co/t/define-parent-child-relationship-in-logstash/51467)
**Author:** [@Alaska](https://discuss.elastic.co/u/Alaska)\ **Replies:** 2\ **Last updated:** [August 5, 2016, 4:24am UTC](https://discuss.elastic.co/t/define-parent-child-relationship-in-logstash/51467 "2016-08-05T04:24:00Z")
Hi, According to https://github.com/logstash-plugins/logstash-output-elasticsearch/issues/129, this seems possible to do now. I'm trying to index two different sources (2 sql tables), and then correlate a parent-chil… --- ## [SSL using X-pack : Invalid security certificate](https://discuss.elastic.co/t/ssl-using-x-pack-invalid-security-certificate/76639)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 6\ **Last updated:** [March 4, 2017, 9:24pm UTC](https://discuss.elastic.co/t/ssl-using-x-pack-invalid-security-certificate/76639 "2017-03-04T21:24:53Z")
Hi, I successfully configured ssl on my cluster. However when I open the url in firefox I get a big warning. Is there any way I can change the certificate generation to make this warning go away? PS: I did not provi… --- ## [Adding objects to an Array filed in Elastic Search index using Java High level Rest Client](https://discuss.elastic.co/t/adding-objects-to-an-array-filed-in-elastic-search-index-using-java-high-level-rest-client/268418)
**Author:** [@dekay14](https://discuss.elastic.co/u/dekay14)\ **Replies:** 7\ **Last updated:** [April 2, 2021, 8:14am UTC](https://discuss.elastic.co/t/adding-objects-to-an-array-filed-in-elastic-search-index-using-java-high-level-rest-client/268418 "2021-04-02T08:14:27Z")
I am trying to add a list or a single object to a Array field on a Elastic Search Index, the index is as shown below: "\_index" : "class\_index", "\_id" : "1234", "\_source" : { "externalId" : … --- ## [Gateway TimeOut Errors in Kibana](https://discuss.elastic.co/t/gateway-timeout-errors-in-kibana/111099)
**Author:** [@poojajoshi](https://discuss.elastic.co/u/poojajoshi)\ **Replies:** 1\ **Last updated:** [December 11, 2017, 7:47pm UTC](https://discuss.elastic.co/t/gateway-timeout-errors-in-kibana/111099 "2017-12-11T19:47:46Z")
I am getting Gateway timeout errors when trying to get data tables Visualizations in Kibana. Have set the elasticsearch request timeout to : elasticsearch.requestTimeout: 300000 still facing same issue. How can i trou… --- ## [Kafka Input - avro https schema\_registry\_url: unable to find valid certification path to requested target](https://discuss.elastic.co/t/kafka-input-avro-https-schema-registry-url-unable-to-find-valid-certification-path-to-requested-target/278438)
**Author:** [@Malec](https://discuss.elastic.co/u/Malec)\ **Replies:** 5\ **Last updated:** [July 26, 2021, 3:09pm UTC](https://discuss.elastic.co/t/kafka-input-avro-https-schema-registry-url-unable-to-find-valid-certification-path-to-requested-target/278438 "2021-07-26T15:09:48Z")
Hi friends, Logstash version is 7.11.1 I am having trouble consuming messages from a kafka that uses confluent avro. I can't seem to connect to an https schema registry. Here is my config : input { kafka { … --- ## [Logstash JSON Parse error.... With valid JSON data](https://discuss.elastic.co/t/logstash-json-parse-error-with-valid-json-data/50455)
**Author:** [@jstmatt](https://discuss.elastic.co/u/jstmatt)\ **Replies:** 4\ **Last updated:** [May 28, 2017, 10:29am UTC](https://discuss.elastic.co/t/logstash-json-parse-error-with-valid-json-data/50455 "2017-05-28T10:29:23Z")
Hi All, We have an issue where data from Filebeat (1.2.2) is being read from files, sent to Logstash (2.3.1). We are receiving, regularly, errors stating that the data can not be parsed. I verified that the JSON is, … --- ## [Using TermsQuery in Java API Client \[7.17\]](https://discuss.elastic.co/t/using-termsquery-in-java-api-client-7-17/304904)
**Author:** [@Vipul\_Kumar](https://discuss.elastic.co/u/Vipul_Kumar)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 5:37pm UTC](https://discuss.elastic.co/t/using-termsquery-in-java-api-client-7-17/304904 "2022-05-17T17:37:30Z")
I'm using Java API Client \[7.17\] in my project. I'm able to do most of the queries, but I'm trying to figure out how to search for multiple values in a particular fields and return values containing any of the values pro… --- ## [Elasticsearch no longer works under systemd (7.4.0 on CentOS 7.7.1908)?](https://discuss.elastic.co/t/elasticsearch-no-longer-works-under-systemd-7-4-0-on-centos-7-7-1908/201846)
**Author:** [@IanC](https://discuss.elastic.co/u/IanC)\ **Replies:** 2\ **Last updated:** [October 1, 2019, 5:22pm UTC](https://discuss.elastic.co/t/elasticsearch-no-longer-works-under-systemd-7-4-0-on-centos-7-7-1908/201846 "2019-10-01T17:22:58Z")
I'm at a loss here. I have a WHM-managed CentOS 7.7 that's regularly applying patches in the background. I did a reboot today to have a kernel update take effect and when the system came back up ElasticSearch failed to s… --- ## [Start elasticsearch with debug option](https://discuss.elastic.co/t/start-elasticsearch-with-debug-option/56600)
**Author:** [@ttjslbz](https://discuss.elastic.co/u/ttjslbz)\ **Replies:** 2\ **Last updated:** [July 29, 2016, 2:39am UTC](https://discuss.elastic.co/t/start-elasticsearch-with-debug-option/56600 "2016-07-29T02:39:54Z")
Hi everyone i just start my elasticsearch with the following command bin/elasticsearch -D "-Xdebug -Xrunjdwp:transport=dt\_socket,server=y,suspend=y,address=5005" it starts successfully, by when i try to connect it wit… --- ## [Load kibana dashboard in iframe with API KEY authentication](https://discuss.elastic.co/t/load-kibana-dashboard-in-iframe-with-api-key-authentication/242970)
**Author:** [@Muhammad\_Umair\_Baig](https://discuss.elastic.co/u/Muhammad_Umair_Baig)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 10:27pm UTC](https://discuss.elastic.co/t/load-kibana-dashboard-in-iframe-with-api-key-authentication/242970 "2020-07-28T22:27:39Z")
Hi Team, I am wondering if we can achieve this. I did not find any topic related to this on which we are using api key authentication mechanism and load kibana dashboard in iframe Kibana and elastic search version i am… --- ## [Can you reindex to the same index](https://discuss.elastic.co/t/can-you-reindex-to-the-same-index/223911)
**Author:** [@guibvieira](https://discuss.elastic.co/u/guibvieira)\ **Replies:** 3\ **Last updated:** [March 17, 2020, 5:35pm UTC](https://discuss.elastic.co/t/can-you-reindex-to-the-same-index/223911 "2020-03-17T17:35:38Z")
I have an existing indice and want to multiply this data with a small modification to it, simply increment a few fields, but the rest of the data can remain the same. Hence, I am not looking to actually change the mappin… --- ## [Error starting Metricbeat](https://discuss.elastic.co/t/error-starting-metricbeat/142088)
**Author:** [@markt277](https://discuss.elastic.co/u/markt277)\ **Replies:** 3\ **Last updated:** [July 30, 2018, 8:43pm UTC](https://discuss.elastic.co/t/error-starting-metricbeat/142088 "2018-07-30T20:43:00Z")
Hi there I'm having trouble getting Metricbeat running on a Linux VM. Filebeat was installed six months ago by a colleague and works perfectly fine. We are only using the Elasticsearch and Filebeat parts of the stack. W… --- ## [Removing Logstash logs from syslog](https://discuss.elastic.co/t/removing-logstash-logs-from-syslog/202466)
**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\ **Replies:** 5\ **Last updated:** [October 8, 2019, 11:35pm UTC](https://discuss.elastic.co/t/removing-logstash-logs-from-syslog/202466 "2019-10-08T23:35:20Z")
Hi. My logstash is sending logs to /var/log/syslog, which is causing the disk to fill up pretty quick. How can I disable it? My logstash.yml: log.level: info path.logs: /var/log/logstash syslog: root@elk:/etc/logs… --- ## [Logstash can't convert boolean into boolean, it crash](https://discuss.elastic.co/t/logstash-cant-convert-boolean-into-boolean-it-crash/164015)
**Author:** [@Sebastian\_Treu](https://discuss.elastic.co/u/Sebastian_Treu)\ **Replies:** 4\ **Last updated:** [January 13, 2019, 10:54pm UTC](https://discuss.elastic.co/t/logstash-cant-convert-boolean-into-boolean-it-crash/164015 "2019-01-13T22:54:22Z")
Hi, I'm moving data from 1 elasticsearch to another and I'm using logstash for that. The thing is that logstash is randomly crashing in this procedure. I've monitored the heap, the queues and cpu, and so far the were OK… --- ## [Logstash cannot find mongodb output plugin](https://discuss.elastic.co/t/logstash-cannot-find-mongodb-output-plugin/69697)
**Author:** [@Jimmy\_Kang](https://discuss.elastic.co/u/Jimmy_Kang)\ **Replies:** 7\ **Last updated:** [December 21, 2016, 11:52pm UTC](https://discuss.elastic.co/t/logstash-cannot-find-mongodb-output-plugin/69697 "2016-12-21T23:52:11Z")
output { mongodb { uri =\> "url" collection =\> "test" database =\> "test"} Above is my logstash conf file. I have also installed the mongo output plugin and confirmed it is installed. Edit, so the plugin … --- ## [Dateでmatchするフォーマットについて](https://discuss.elastic.co/t/date-match/162041)
**Author:** [@hogehuga](https://discuss.elastic.co/u/hogehuga)\ **Replies:** 2\ **Last updated:** [December 25, 2018, 6:12am UTC](https://discuss.elastic.co/t/date-match/162041 "2018-12-25T06:12:53Z")
logstashでログを取り込もうとしていて、以下のような日付フォーマットのものが date{match=\>}できずに困っています。 Mon Dec 17 12:23:34 JST 2018 これを "datetime"=\>"Mon Dec 17 12:23:34 JST 2018" のように取り込んだのですが、 date{match}でマッチングさせる方法がわからないです。 "JST"表記は ZやZZZ に該当しないので、d… --- ## [Webhook and SSL issue](https://discuss.elastic.co/t/webhook-and-ssl-issue/198786)
**Author:** [@petedells](https://discuss.elastic.co/u/petedells)\ **Replies:** 6\ **Last updated:** [September 11, 2019, 1:17pm UTC](https://discuss.elastic.co/t/webhook-and-ssl-issue/198786 "2019-09-11T13:17:12Z")
I am generating a https webhook and receive the error below (I am using self-assigned certificates and added them already to the keystore) "actions": \[ { "id": "my\_webhook", "type": "webhook", "status": "failure", … --- ## [Min and Max condition in Kibana](https://discuss.elastic.co/t/min-and-max-condition-in-kibana/64860)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 3\ **Last updated:** [November 4, 2016, 5:31pm UTC](https://discuss.elastic.co/t/min-and-max-condition-in-kibana/64860 "2016-11-04T17:31:11Z")
Hi Team, Could you please let me know the query for printing the logs which have min field value in discov er. --- ## [Filebeat JSON message](https://discuss.elastic.co/t/filebeat-json-message/106349)
**Author:** [@darrenthomas](https://discuss.elastic.co/u/darrenthomas)\ **Replies:** 2\ **Last updated:** [November 3, 2017, 7:00pm UTC](https://discuss.elastic.co/t/filebeat-json-message/106349 "2017-11-03T19:00:36Z")
Hi, I'm trying to get a basic Fliebeat example working and I am unable to get the message contents decomposed as JSON. I'll try and explain. I have a simple Node application writing to a log file. The log file output… --- ## [Elasticsearch insert triggers](https://discuss.elastic.co/t/elasticsearch-insert-triggers/84860)
**Author:** [@priyaraj](https://discuss.elastic.co/u/priyaraj)\ **Replies:** 4\ **Last updated:** [May 18, 2017, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-insert-triggers/84860 "2017-05-18T15:36:30Z")
Hi, I have a use case where when a certain document is indexed, based on the fields in the newly inserted document, I would like to index another document in a different index. The expected behavior is somewhat similar … --- ## [Should I disable scoring somehow for performance reasons?](https://discuss.elastic.co/t/should-i-disable-scoring-somehow-for-performance-reasons/19594)
**Author:** [@Andre\_Hansel](https://discuss.elastic.co/u/Andre_Hansel)\ **Replies:** 4\ **Last updated:** [September 3, 2014, 5:47pm UTC](https://discuss.elastic.co/t/should-i-disable-scoring-somehow-for-performance-reasons/19594 "2014-09-03T17:47:14Z")
I have an index with about a million entries with a rather dynamic structure. The queries I want to perform are of the kind: "give me exactly the entries that contain '\*abc\*' and '\*def\*' in any two fields". The res… --- ## [How to use filter in logstash for particular field with dynamic query string value?](https://discuss.elastic.co/t/how-to-use-filter-in-logstash-for-particular-field-with-dynamic-query-string-value/36883)
**Author:** [@Aravinthan\_Asokan](https://discuss.elastic.co/u/Aravinthan_Asokan)\ **Replies:** 5\ **Last updated:** [March 20, 2017, 6:14am UTC](https://discuss.elastic.co/t/how-to-use-filter-in-logstash-for-particular-field-with-dynamic-query-string-value/36883 "2017-03-20T06:14:48Z")
I just able to search to my index using below query xx:9200/myindex/\_search?q=keyword for above search i can able to get results .. how to do another dynamic value in the url and search into particular field dynamica… --- ## [Reindexing a document of size \> 100mb](https://discuss.elastic.co/t/reindexing-a-document-of-size-100mb/203765)
**Author:** [@daso](https://discuss.elastic.co/u/daso)\ **Replies:** 2\ **Last updated:** [October 17, 2019, 7:10am UTC](https://discuss.elastic.co/t/reindexing-a-document-of-size-100mb/203765 "2019-10-17T07:10:30Z")
Hi, I am trying to do a remote reindex a document which is of size \>100mb but it is failing with the below exception error={type=illegal\_argument\_exception, reason=Remote responded with a chunk that was too large. Use … [Previous page](https://discuss.elastic.co/top.md?page=469&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=471&per_page=50&period=all)