# Top **URL:** https://discuss.elastic.co/top.md?page=474&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 475 --- ## [3 master + data node setup](https://discuss.elastic.co/t/3-master-data-node-setup/124023)
**Author:** [@zidane28](https://discuss.elastic.co/u/zidane28)\ **Replies:** 4\ **Last updated:** [March 15, 2018, 7:25am UTC](https://discuss.elastic.co/t/3-master-data-node-setup/124023 "2018-03-15T07:25:50Z")
This question may asked before, but I can't find a definitive answer here... My boss currently ask me to design a ES cluster, but with budget constrain... So a default 3 master-dedicated node and also 5 data-dedicated … --- ## [Multiple ES clusters in SparkSQL](https://discuss.elastic.co/t/multiple-es-clusters-in-sparksql/35523)
**Author:** [@ludonara](https://discuss.elastic.co/u/ludonara)\ **Replies:** 8\ **Last updated:** [January 11, 2016, 9:01am UTC](https://discuss.elastic.co/t/multiple-es-clusters-in-sparksql/35523 "2016-01-11T09:01:03Z")
Hi all, is there a way to handle multipe ES clusters in a Spark application? For example, use sparkSQL to query data from two ES clusters. For now, i've just seen configuration of "es.nodes" in sparkConf. Is it po… --- ## [Fleet Server 8.15.0 Security Update ( ESA-2024-31)](https://discuss.elastic.co/t/fleet-server-8-15-0-security-update-esa-2024-31/373522)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [January 22, 2025, 3:09pm UTC](https://discuss.elastic.co/t/fleet-server-8-15-0-security-update-esa-2024-31/373522 "2025-01-22T15:09:01Z")
Fleet Server sensitive information exposure via logs (ESA-2024-31) An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The natur… --- ## [🎉 Elastic Stack 7.4.0 released](https://discuss.elastic.co/t/elastic-stack-7-4-0-released/201861)
**Author:** [@vidamon](https://discuss.elastic.co/u/vidamon)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 8:12pm UTC](https://discuss.elastic.co/t/elastic-stack-7-4-0-released/201861 "2019-10-01T20:12:41Z")
We're excited to announce that version 7.4 of the Elastic Stack is here, and it's another good one! How to score in Elastic Stack 7.4: Snapshot lifecycle management, automatic query cancellation and result pinning in #… --- ## [Filebeat crashing on JSON decoder and multiline together specifying a message\_key value error](https://discuss.elastic.co/t/filebeat-crashing-on-json-decoder-and-multiline-together-specifying-a-message-key-value-error/176132)
**Author:** [@Tharun](https://discuss.elastic.co/u/Tharun)\ **Replies:** 0\ **Last updated:** [April 10, 2019, 4:07am UTC](https://discuss.elastic.co/t/filebeat-crashing-on-json-decoder-and-multiline-together-specifying-a-message-key-value-error/176132 "2019-04-10T04:07:02Z")
Filebeat Version: 6.5.4 and Logstash Version: 6.5.4 Hello, here is the Filebeat configuration I'm using - type: log paths: - /var/lib/docker/containers/\*/\*.log symlinks: true multiline: pattern: ^\[\[:spac… --- ## [What does “docCount” and "docFreq" mean in the Explain API?](https://discuss.elastic.co/t/what-does-doccount-and-docfreq-mean-in-the-explain-api/163850)
**Author:** [@Masanori\_Ohnishi](https://discuss.elastic.co/u/Masanori_Ohnishi)\ **Replies:** 7\ **Last updated:** [January 15, 2019, 8:37am UTC](https://discuss.elastic.co/t/what-does-doccount-and-docfreq-mean-in-the-explain-api/163850 "2019-01-15T08:37:23Z")
Here's the sample of mapping, register, and search query. mapping curl -X PUT "es:9200/english1" -H 'Content-Type: application/json' -d' { "mappings": { "\_doc": { "properties": { "header" : { … --- ## [How to replace special characters to another character](https://discuss.elastic.co/t/how-to-replace-special-characters-to-another-character/111232)
**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\ **Replies:** 4\ **Last updated:** [January 4, 2018, 7:35am UTC](https://discuss.elastic.co/t/how-to-replace-special-characters-to-another-character/111232 "2018-01-04T07:35:21Z")
Hello! I want to replace below string hello\>\>\>\>hiii\>huha special characters to , and I achieve by the following way.. filter{ mutate { gsub =\> \[ "title", "\[\>/\]", "," \] } } It works but it replace every single … --- ## [Filebeat setup not work](https://discuss.elastic.co/t/filebeat-setup-not-work/140897)
**Author:** [@weyderfs](https://discuss.elastic.co/u/weyderfs)\ **Replies:** 3\ **Last updated:** [July 23, 2018, 7:50pm UTC](https://discuss.elastic.co/t/filebeat-setup-not-work/140897 "2018-07-23T19:50:02Z")
Hi guys, I'm trying monitoring syslogs in my ELK server, but when try run filebeat setup happens the error bellow: Loaded index template Loading dashboards (Kibana must be running and reachable) Exiting: Error importin… --- ## [Monotoring Apache tomcat server with ELK APM](https://discuss.elastic.co/t/monotoring-apache-tomcat-server-with-elk-apm/134425)
**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Replies:** 3\ **Last updated:** [June 6, 2018, 6:55am UTC](https://discuss.elastic.co/t/monotoring-apache-tomcat-server-with-elk-apm/134425 "2018-06-06T06:55:41Z")
Hello team, I have elk setup with x-pack features and I am using filebeat as data shipper. is it possible to enable monitoring in Apache- Tomcat (which is running my java app) with elk APM? if yes which agent shou… --- ## [Periodic CPU spikes](https://discuss.elastic.co/t/periodic-cpu-spikes/6569)
**Author:** [@Hao\_Lian](https://discuss.elastic.co/u/Hao_Lian)\ **Replies:** 8\ **Last updated:** [February 7, 2012, 10:09am UTC](https://discuss.elastic.co/t/periodic-cpu-spikes/6569 "2012-02-07T10:09:06Z")
Hi! We've been load-testing Elastic Search before we release to production (and we love it!) and we've been noticing periodic CPU spikes: http://i.imgur.com/PIbNb.png We have two indices, both with the same m… --- ## [Querying and sorting using painless script and nested fields](https://discuss.elastic.co/t/querying-and-sorting-using-painless-script-and-nested-fields/249408)
**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\ **Replies:** 2\ **Last updated:** [September 22, 2020, 12:26pm UTC](https://discuss.elastic.co/t/querying-and-sorting-using-painless-script-and-nested-fields/249408 "2020-09-22T12:26:10Z")
Hi, I am querying an index in my ES cluster 7.9.1: { "query": { "multi\_match": { "query": "Ciudad Boli", "fields": \[ "name.\*.single" \], "type": "phrase\_prefix" … --- ## [ELK truncates microseconds (nanoseconds) precision from RFC 3339 timestamps](https://discuss.elastic.co/t/elk-truncates-microseconds-nanoseconds-precision-from-rfc-3339-timestamps/43619)
**Author:** [@Standa](https://discuss.elastic.co/u/Standa)\ **Replies:** 2\ **Last updated:** [April 15, 2016, 8:49am UTC](https://discuss.elastic.co/t/elk-truncates-microseconds-nanoseconds-precision-from-rfc-3339-timestamps/43619 "2016-04-15T08:49:33Z")
Hi, I am fully aware that the issue i am going to write about was already discussed multiple times (e.g. see https://github.com/elastic/elasticsearch/issues/10005 , https://github.com/elastic/logstash/issues/3530 etc). … --- ## [Compare fields of different documents in the same index](https://discuss.elastic.co/t/compare-fields-of-different-documents-in-the-same-index/219756)
**Author:** [@JamieUnix](https://discuss.elastic.co/u/JamieUnix)\ **Replies:** 4\ **Last updated:** [February 20, 2020, 6:59am UTC](https://discuss.elastic.co/t/compare-fields-of-different-documents-in-the-same-index/219756 "2020-02-20T06:59:10Z")
There are a lot of discussions around this topic but haven't found a solution for my problem. I am trying to compare fields of different documents in the same index. For example,let's say i have three documents as below… --- ## [How do I index hierarchical data?](https://discuss.elastic.co/t/how-do-i-index-hierarchical-data/55643)
**Author:** [@caddala](https://discuss.elastic.co/u/caddala)\ **Replies:** 2\ **Last updated:** [July 17, 2016, 1:56am UTC](https://discuss.elastic.co/t/how-do-i-index-hierarchical-data/55643 "2016-07-17T01:56:23Z")
I have data similar to file paths that I would like to index. (basically list of tokens separated by delimiter) \> Ex data: \> a/b/c/d/e \> a/b/c/ \> a/m/n \> x/y/z Once I index, I should be able to query to get the immedi… --- ## [Recommended way to force date fields to be UTC](https://discuss.elastic.co/t/recommended-way-to-force-date-fields-to-be-utc/193404)
**Author:** [@jcaballero](https://discuss.elastic.co/u/jcaballero)\ **Replies:** 8\ **Last updated:** [August 3, 2019, 12:54am UTC](https://discuss.elastic.co/t/recommended-way-to-force-date-fields-to-be-utc/193404 "2019-08-03T00:54:53Z")
Hello, using LogStash and ElasticSearch 5.6.10. My documents have a few fields of type "date", besides @timestamp. The template includes, for each one of them, a section like this "my\_datefield\_1": { "type": "date",… --- ## [Day of week changes during the day based on timezone](https://discuss.elastic.co/t/day-of-week-changes-during-the-day-based-on-timezone/96875)
**Author:** [@Ricardo\_Jorge](https://discuss.elastic.co/u/Ricardo_Jorge)\ **Replies:** 8\ **Last updated:** [August 16, 2017, 6:42pm UTC](https://discuss.elastic.co/t/day-of-week-changes-during-the-day-based-on-timezone/96875 "2017-08-16T18:42:17Z")
I have a log from where I want to extract week day ( just the number ). It works as I expect up to the hour that timezone is reached. I live at UTC -0300 so before 9 PM week day is OK but after 9 PM week day changes to… --- ## [Remove a value in grok filter](https://discuss.elastic.co/t/remove-a-value-in-grok-filter/26943)
**Author:** [@Bharath\_Paruchuri](https://discuss.elastic.co/u/Bharath_Paruchuri)\ **Replies:** 8\ **Last updated:** [September 21, 2015, 1:18pm UTC](https://discuss.elastic.co/t/remove-a-value-in-grok-filter/26943 "2015-09-21T13:18:47Z")
Hi All, I have Prepared Logstash configuration code filter { multiline { pattern =\> "^####" negate =\> true what =\> "previous" } grok { pattern =\> \["####\<%{DATA:Timestamp}\> \<%{WORD:Severity}\> %{GR… --- ## [Zen discovery 관련 이슈 공유(AWS 환경)](https://discuss.elastic.co/t/zen-discovery-aws/76164)
**Author:** [@111157](https://discuss.elastic.co/u/111157)\ **Replies:** 0\ **Last updated:** [February 23, 2017, 7:17am UTC](https://discuss.elastic.co/t/zen-discovery-aws/76164 "2017-02-23T07:17:44Z")
안녕하세요. 음.. 현재 AWS 환경에서 Elasticsearch 클러스터를 구성해서 열심히 개발 중인 개발자입니다. 다름이 아니라 최근에 zen discovery 와 관련해서 이슈가 발생해서 해결 방법을 공유하고 원인을 같이 생각해보고자 글을 올립니다. 운영환경 일단 운영환경을 먼저 공유해드리면, 리전: 서울 리전 클러스터 구성 Master node(3): M4.large … --- ## [Error with filebeat log type that was working on different machine](https://discuss.elastic.co/t/error-with-filebeat-log-type-that-was-working-on-different-machine/187435)
**Author:** [@aviationfan](https://discuss.elastic.co/u/aviationfan)\ **Replies:** 2\ **Last updated:** [June 26, 2019, 1:01pm UTC](https://discuss.elastic.co/t/error-with-filebeat-log-type-that-was-working-on-different-machine/187435 "2019-06-26T13:01:29Z")
I was working with a Filebeat setup on my laptop and decided to move it to my server for more permanent use. I keep getting this error: Exiting: 1 error: setting 'filebeat.prospectors' has been removed The contents of … --- ## [Failed to install template](https://discuss.elastic.co/t/failed-to-install-template/91918)
**Author:** [@erion](https://discuss.elastic.co/u/erion)\ **Replies:** 2\ **Last updated:** [July 7, 2017, 10:06am UTC](https://discuss.elastic.co/t/failed-to-install-template/91918 "2017-07-07T10:06:57Z")
Hi, I use two different machine: one with filebeat and other with logstash. Elasticsearch is on web service. I configure filebeat.yml like this: filebeat.prospectors: -input\_type: log path: - /mnt/analisilog/www.a… --- ## [Getting " No cached mapping for this field " in KIBANA 4](https://discuss.elastic.co/t/getting-no-cached-mapping-for-this-field-in-kibana-4/31302)
**Author:** [@Bharath\_Paruchuri](https://discuss.elastic.co/u/Bharath_Paruchuri)\ **Replies:** 1\ **Last updated:** [September 29, 2015, 12:38pm UTC](https://discuss.elastic.co/t/getting-no-cached-mapping-for-this-field-in-kibana-4/31302 "2015-09-29T12:38:15Z")
Hi, I'm getting " No cached mapping for this field " for field Error\_Code. Sample Log entry ####\ \ \<\> \<000… --- ## [Logstash-jdbc-input plugin issue when time reverts from Daylight Savings to Standard Time](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-issue-when-time-reverts-from-daylight-savings-to-standard-time/288365)
**Author:** [@AlexandrosPan](https://discuss.elastic.co/u/AlexandrosPan)\ **Replies:** 1\ **Last updated:** [November 3, 2021, 9:25pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-issue-when-time-reverts-from-daylight-savings-to-standard-time/288365 "2021-11-03T21:25:58Z")
Hello, I use logstash with jdbc input plugin to create an Elasticsearch index and keep it synced with a Database table. My database's timezone is Asia/Nicosia and so I've set jdbc\_default\_timezone accordingly. The date… --- ## [Kibana API for automatic Export all](https://discuss.elastic.co/t/kibana-api-for-automatic-export-all/201243)
**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\ **Replies:** 6\ **Last updated:** [September 30, 2019, 1:46pm UTC](https://discuss.elastic.co/t/kibana-api-for-automatic-export-all/201243 "2019-09-30T13:46:36Z")
Hi all, Thanks in advance for your time, I'm trying to develop a shell script to automatize backups of my Kibana saved objects (dashboards+all related objects) Running : curl -k -XGET 'https://xx.xx.xx.x:5601/api/kib… --- ## [JSON Parsing failure on logstash](https://discuss.elastic.co/t/json-parsing-failure-on-logstash/158156)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 6\ **Last updated:** [November 26, 2018, 1:03pm UTC](https://discuss.elastic.co/t/json-parsing-failure-on-logstash/158156 "2018-11-26T13:03:21Z")
HI, I have json when i try to index those logs into elasticsearch. When i apply json filter some logs are omitted to get index on ES. when i command those json filter i can index those event into ES. i have validated th… --- ## [Adding mode nodes to cluster slow down search performance](https://discuss.elastic.co/t/adding-mode-nodes-to-cluster-slow-down-search-performance/160272)
**Author:** [@okproject](https://discuss.elastic.co/u/okproject)\ **Replies:** 8\ **Last updated:** [December 11, 2018, 6:25pm UTC](https://discuss.elastic.co/t/adding-mode-nodes-to-cluster-slow-down-search-performance/160272 "2018-12-11T18:25:40Z")
Hi, Summary I have 2 questions When i add more nodes to the cluster, simple search performance slow down. Can you please help to achieve this problem ? I shared details at the bottom. I want to know that elasticsear… --- ## [How to push same document into multiple indexes?](https://discuss.elastic.co/t/how-to-push-same-document-into-multiple-indexes/145121)
**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\ **Replies:** 6\ **Last updated:** [August 22, 2018, 12:17pm UTC](https://discuss.elastic.co/t/how-to-push-same-document-into-multiple-indexes/145121 "2018-08-22T12:17:31Z")
Hello, I collecting logs via TCP input and I want specific log to be in logstash index and also in monitoring index. But logs with "time" in \[tags\] are only in monitoring index, not logstash. Why? My Logstash output co… --- ## [Connect a new node via SSH tunnel](https://discuss.elastic.co/t/connect-a-new-node-via-ssh-tunnel/26109)
**Author:** [@codebeef](https://discuss.elastic.co/u/codebeef)\ **Replies:** 6\ **Last updated:** [July 22, 2015, 9:10pm UTC](https://discuss.elastic.co/t/connect-a-new-node-via-ssh-tunnel/26109 "2015-07-22T21:10:01Z")
I'm attempting to move data from one cluster to a new cluster without downtime. So far, I have one node on the old cluster (this is a test setup) that's on a private subnet. I have a bastion host on that network that I… --- ## [EPOCH Parsing | Logstash](https://discuss.elastic.co/t/epoch-parsing-logstash/220132)
**Author:** [@deeshu](https://discuss.elastic.co/u/deeshu)\ **Replies:** 6\ **Last updated:** [February 26, 2020, 3:05am UTC](https://discuss.elastic.co/t/epoch-parsing-logstash/220132 "2020-02-26T03:05:30Z")
Hi techs.... Does anyone have grok pattern available to convert epoch timings to date time format. If yes, could any one do the noble cause and share here.. Have seen couple of posts as below for this where Grok UNIX\_M… --- ## [Scripted fields backup](https://discuss.elastic.co/t/scripted-fields-backup/78975)
**Author:** [@dkspace](https://discuss.elastic.co/u/dkspace)\ **Replies:** 6\ **Last updated:** [March 23, 2017, 6:50am UTC](https://discuss.elastic.co/t/scripted-fields-backup/78975 "2017-03-23T06:50:08Z")
Dear colleagues. i have index pattern with 20 scripted fields - each one is painless script formula. Is there some method to save all of them kind of backup or to move to other ELStack 5.2.0 platform ? or it is not K… --- ## [Big gaps in recorded logs](https://discuss.elastic.co/t/big-gaps-in-recorded-logs/27266)
**Author:** [@bschopman](https://discuss.elastic.co/u/bschopman)\ **Replies:** 7\ **Last updated:** [August 25, 2015, 3:27pm UTC](https://discuss.elastic.co/t/big-gaps-in-recorded-logs/27266 "2015-08-25T15:27:19Z")
We're running Logstash on a single server to compare its performance to Heka and decide if we want to use one or the other. We have some high-traffic web servers of which the log lines are sent to a Kafka cluster consist… --- ## [Syncing Elasticsearch with MySQL database](https://discuss.elastic.co/t/syncing-elasticsearch-with-mysql-database/72076)
**Author:** [@Jette\_Thrane](https://discuss.elastic.co/u/Jette_Thrane)\ **Replies:** 1\ **Last updated:** [February 15, 2017, 4:46pm UTC](https://discuss.elastic.co/t/syncing-elasticsearch-with-mysql-database/72076 "2017-02-15T16:46:51Z")
Hi all :slight\_smile: I am new to Elasticsearch and currently trying to plan the best setup and avoid driving into a corner. I have read most of the documentation, and this very informative blogpost: https://www.elasti… --- ## [Elasticsearch Helm chart clarification](https://discuss.elastic.co/t/elasticsearch-helm-chart-clarification/205665)
**Author:** [@Benoit\_Martin](https://discuss.elastic.co/u/Benoit_Martin)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-helm-chart-clarification/205665 "2019-10-29T13:12:49Z")
Hello, I need help to understand a little better the Elasticsearch helm chart. I used it to deploy a simple cluster of 3 nodes. I specified wanting a persistent volume of 30 gig per node. Everything seems well deployed … --- ## [How to find out if document was deleted](https://discuss.elastic.co/t/how-to-find-out-if-document-was-deleted/68308)
**Author:** [@Ejmon](https://discuss.elastic.co/u/Ejmon)\ **Replies:** 2\ **Last updated:** [December 8, 2016, 8:24am UTC](https://discuss.elastic.co/t/how-to-find-out-if-document-was-deleted/68308 "2016-12-08T08:24:26Z")
Hello, I wonder how to find out if the the document was already deleted from the ES, not just marked as deleted. I have a pack of data that consist of multiple documents that I want to be indexed by the fulltext. I u… --- ## [Sliced scroll with sort](https://discuss.elastic.co/t/sliced-scroll-with-sort/284874)
**Author:** [@Burak](https://discuss.elastic.co/u/Burak)\ **Replies:** 4\ **Last updated:** [September 30, 2021, 7:05am UTC](https://discuss.elastic.co/t/sliced-scroll-with-sort/284874 "2021-09-30T07:05:05Z")
Hello guys. How does actually Elasticsearch perform sorting under the hood for shard and for index? I can find it neither in documentation or books. I am going to use a sliced scroll with sort but in some cases, I have… --- ## [Not seeing the logs data in Kibana](https://discuss.elastic.co/t/not-seeing-the-logs-data-in-kibana/99664)
**Author:** [@Narasimha\_Gajje](https://discuss.elastic.co/u/Narasimha_Gajje)\ **Replies:** 4\ **Last updated:** [September 12, 2017, 4:24am UTC](https://discuss.elastic.co/t/not-seeing-the-logs-data-in-kibana/99664 "2017-09-12T04:24:39Z")
HI All, I am newbie to ElasticSearch and Kibana. I had set up the configuration as FileBeat --\> ElasticSearch --\> Kiabana. All the 3 instances are started properly and pointed FileBeat to log file in one of the folder … --- ## [\[netfow codec\] Can't (yet) decode flowset](https://discuss.elastic.co/t/netfow-codec-cant-yet-decode-flowset/102655)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 5\ **Last updated:** [November 8, 2017, 11:47pm UTC](https://discuss.elastic.co/t/netfow-codec-cant-yet-decode-flowset/102655 "2017-11-08T23:47:56Z")
Another day another something strange happening. Copied a VM running 5.4, upgraded to 5.6.1 =\> 5.6.2. No problem. Same VM, upgraded 5.4 directly to 5.6.2. Now netflow can't decode the flowset and no the problem is not … --- ## [Stop phrases rather words](https://discuss.elastic.co/t/stop-phrases-rather-words/108058)
**Author:** [@AmitG](https://discuss.elastic.co/u/AmitG)\ **Replies:** 1\ **Last updated:** [November 24, 2017, 9:35pm UTC](https://discuss.elastic.co/t/stop-phrases-rather-words/108058 "2017-11-24T21:35:39Z")
Hi, I am sure this would have been discussed earlier but not able to find much. We have a requirement to exclude phrase rather than individual word e.g. if name is 'Big Elephant', it should be excluded but it is either '… --- ## [Receiving data via HTTPs or Ingest Pipelines](https://discuss.elastic.co/t/receiving-data-via-https-or-ingest-pipelines/289849)
**Author:** [@sc12](https://discuss.elastic.co/u/sc12)\ **Replies:** 6\ **Last updated:** [November 23, 2021, 11:44am UTC](https://discuss.elastic.co/t/receiving-data-via-https-or-ingest-pipelines/289849 "2021-11-23T11:44:53Z")
Hello, I've been searching on the forums and haven't been able to find an answer to the problem I'm facing. The issue I'm facing: I am trying to send data via REST Api to an Elastic Cloud instance, in my head, I am su… --- ## [Delete the data in Elasticsearch index based on a date/timestamp column in that index using python](https://discuss.elastic.co/t/delete-the-data-in-elasticsearch-index-based-on-a-date-timestamp-column-in-that-index-using-python/254775)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 4\ **Last updated:** [November 11, 2020, 6:42am UTC](https://discuss.elastic.co/t/delete-the-data-in-elasticsearch-index-based-on-a-date-timestamp-column-in-that-index-using-python/254775 "2020-11-11T06:42:35Z")
I have several indexes which has a column named "date" or "timestamp", I want to delete only the data from that index which older than certain days/weeks. I do not want to delete the entire index. In fact I want to do i… --- ## [I want to set up sending notifications about errors](https://discuss.elastic.co/t/i-want-to-set-up-sending-notifications-about-errors/283287)
**Author:** [@sasha198407](https://discuss.elastic.co/u/sasha198407)\ **Replies:** 8\ **Last updated:** [September 15, 2021, 6:13am UTC](https://discuss.elastic.co/t/i-want-to-set-up-sending-notifications-about-errors/283287 "2021-09-15T06:13:27Z")
Hello. I want to set up sending notifications about errors (errors in the operation of Apache, MySQL, Nginx, as well as if the server is not available) from logstesh to e-mail. Wrote at ./logstash/pipeline/logstash.conf … --- ## [Problem in converting string to ip](https://discuss.elastic.co/t/problem-in-converting-string-to-ip/72562)
**Author:** [@satishsnv](https://discuss.elastic.co/u/satishsnv)\ **Replies:** 8\ **Last updated:** [January 25, 2017, 7:08am UTC](https://discuss.elastic.co/t/problem-in-converting-string-to-ip/72562 "2017-01-25T07:08:07Z")
Hi i tried to convert string to ip by following the steps provided in the threads but its not working for me. I am getting following error on starting kibana. 08:24:50.444 \[\[main\]-pipeline-manager\] INFO logstash.outp… --- ## [How to change the text color in kibana dashboard widgets?](https://discuss.elastic.co/t/how-to-change-the-text-color-in-kibana-dashboard-widgets/246334)
**Author:** [@DSMilestone](https://discuss.elastic.co/u/DSMilestone)\ **Replies:** 4\ **Last updated:** [August 26, 2020, 7:14pm UTC](https://discuss.elastic.co/t/how-to-change-the-text-color-in-kibana-dashboard-widgets/246334 "2020-08-26T19:14:24Z")
How to change the text color in kibana dashboard widgets. In the below screenshot, there are three different lens widgets in the dashboard. I want to change the text color of Passed count to green and failed count to… --- ## [The method builder() is undefined for the type TransportClient](https://discuss.elastic.co/t/the-method-builder-is-undefined-for-the-type-transportclient/83081)
**Author:** [@lorenzo.lucioni](https://discuss.elastic.co/u/lorenzo.lucioni)\ **Replies:** 1\ **Last updated:** [April 20, 2017, 4:08pm UTC](https://discuss.elastic.co/t/the-method-builder-is-undefined-for-the-type-transportclient/83081 "2017-04-20T16:08:57Z")
My code is: ... settings = org.elasticsearch.common.settings.Settings.builder().put("cluster.name","es01t").build(); client = org.elasticsearch.client.transport.TransportClient.builder().settings(settings).build().addTra… --- ## [Is unsafe-eval required for script-src in the content-security-policy for Kibana 6.7.1?](https://discuss.elastic.co/t/is-unsafe-eval-required-for-script-src-in-the-content-security-policy-for-kibana-6-7-1/226298)
**Author:** [@cjin62](https://discuss.elastic.co/u/cjin62)\ **Replies:** 5\ **Last updated:** [April 17, 2020, 1:00am UTC](https://discuss.elastic.co/t/is-unsafe-eval-required-for-script-src-in-the-content-security-policy-for-kibana-6-7-1/226298 "2020-04-17T01:00:38Z")
When loading the Kibana dashboard home page, unsafe-eval shows up for script-src: content-security-policy: script-src 'unsafe-eval' 'self' Is unsafe-eval required for Kibana dashboard to work? Or only needed for cert… --- ## [Should I store user id or name in logging?](https://discuss.elastic.co/t/should-i-store-user-id-or-name-in-logging/288460)
**Author:** [@buaaytt](https://discuss.elastic.co/u/buaaytt)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 12:23am UTC](https://discuss.elastic.co/t/should-i-store-user-id-or-name-in-logging/288460 "2021-11-08T00:23:10Z")
A common scenario in logging is the need to store the backend user performing the logging action. So using ES should I store the user id or its username in the document? After all, when retrieving logs, I need to return … --- ## [I've been getting "retrying failed action with response code: 403" can someone help me fix this?](https://discuss.elastic.co/t/ive-been-getting-retrying-failed-action-with-response-code-403-can-someone-help-me-fix-this/194230)
**Author:** [@bharatwaj](https://discuss.elastic.co/u/bharatwaj)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 12:36pm UTC](https://discuss.elastic.co/t/ive-been-getting-retrying-failed-action-with-response-code-403-can-someone-help-me-fix-this/194230 "2019-08-07T12:36:19Z")
I'm getting the following error "retrying failed action with response code: 403 ({"type"=\>"cluster\_block\_exception", "reason"=\>"index \[es\_attorney\] blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];"})" C… --- ## [High CPU load (3-4) and 50% CPU utilization](https://discuss.elastic.co/t/high-cpu-load-3-4-and-50-cpu-utilization/25390)
**Author:** [@Nir\_Reuveny](https://discuss.elastic.co/u/Nir_Reuveny)\ **Replies:** 4\ **Last updated:** [July 12, 2015, 3:49pm UTC](https://discuss.elastic.co/t/high-cpu-load-3-4-and-50-cpu-utilization/25390 "2015-07-12T15:49:06Z")
Hi, We're running a test bulk indexing with about 10-15K documents per second on 2 node cluster of c4.xlarge instances. The bulk indexing is the only operations that we're running on the ES. (We use the latest 1.6.0 ES… --- ## [Elasticsearch stuck with cluster\_uuid NA](https://discuss.elastic.co/t/elasticsearch-stuck-with-cluster-uuid-na/271870)
**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\ **Replies:** 6\ **Last updated:** [May 4, 2021, 2:46pm UTC](https://discuss.elastic.co/t/elasticsearch-stuck-with-cluster-uuid-na/271870 "2021-05-04T14:46:21Z")
We have a production elastic cluster with a 1.0.1 operator version. We planned to upgrade the version to the latest 1.5 so that we can opt for the dynamic storage changes. When we ran upgrade of the operator; pods in th… --- ## [How to set multiple hosts in elasticsearch-output via environment variable?](https://discuss.elastic.co/t/how-to-set-multiple-hosts-in-elasticsearch-output-via-environment-variable/214802)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [January 13, 2020, 10:47am UTC](https://discuss.elastic.co/t/how-to-set-multiple-hosts-in-elasticsearch-output-via-environment-variable/214802 "2020-01-13T10:47:48Z")
Hi, I am trying to configure elasticsearch hosts via environment variable to be used in elasticsearch-output plugin. I want to set them as array for loadbalancing in the multi node cluster without the need for an extern… --- ## [AJAX Preflight Authentication for Kibana dashboard in an iframe](https://discuss.elastic.co/t/ajax-preflight-authentication-for-kibana-dashboard-in-an-iframe/204267)
**Author:** [@druffner](https://discuss.elastic.co/u/druffner)\ **Replies:** 1\ **Last updated:** [October 28, 2019, 5:45pm UTC](https://discuss.elastic.co/t/ajax-preflight-authentication-for-kibana-dashboard-in-an-iframe/204267 "2019-10-28T17:45:03Z")
Hey everyone, I am working on a webpage that will show my Kibana dashboard in an iframe, and I want to send a preflight AJAX request to login to the dashboard before setting the iframe's source. I have been following se… [Previous page](https://discuss.elastic.co/top.md?page=473&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=475&per_page=50&period=all)