# Top **URL:** https://discuss.elastic.co/top.md?page=497&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 498 --- ## [Kibana 6.5.1 won't start up after enabling xpack security in elasticsearch](https://discuss.elastic.co/t/kibana-6-5-1-wont-start-up-after-enabling-xpack-security-in-elasticsearch/159332)
**Author:** [@Wietse](https://discuss.elastic.co/u/Wietse)\ **Replies:** 2\ **Last updated:** [December 4, 2018, 10:43am UTC](https://discuss.elastic.co/t/kibana-6-5-1-wont-start-up-after-enabling-xpack-security-in-elasticsearch/159332 "2018-12-04T10:43:54Z")
Hi I installed the Elasticsearch 6.5.1 trial platinum version because I want to use the X-Pack security functionality. By default this is what I receive when running // GET /\_xpack/ "security" : { "description"… --- ## [How to Kibana filter by percentile](https://discuss.elastic.co/t/how-to-kibana-filter-by-percentile/28435)
**Author:** [@RDPanek](https://discuss.elastic.co/u/RDPanek)\ **Replies:** 4\ **Last updated:** [September 11, 2015, 2:40am UTC](https://discuss.elastic.co/t/how-to-kibana-filter-by-percentile/28435 "2015-09-11T02:40:58Z")
Hello everybody, please help my with settings visualise for percentile aggregations. I have Kibana 4.1.2 and I aggregation by 90% percentile by duration all my data in data table visualize. Results: Headers: filter… --- ## [404 from jolokia module](https://discuss.elastic.co/t/404-from-jolokia-module/147716)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 6\ **Last updated:** [October 1, 2018, 7:07am UTC](https://discuss.elastic.co/t/404-from-jolokia-module/147716 "2018-10-01T07:07:23Z")
I had a working setup with cassandra + jmx + jolokia + metricbeat not too long ago. Lately Im only getting the message : "HTTP Error 404 in jmx: 404 not found". Presently runnign 6.4. Have tried downgrading to 6.3 to no… --- ## [Unable to install x-pack plugin on Ubuntu 16](https://discuss.elastic.co/t/unable-to-install-x-pack-plugin-on-ubuntu-16/88615)
**Author:** [@skunkwerk](https://discuss.elastic.co/u/skunkwerk)\ **Replies:** 6\ **Last updated:** [June 10, 2017, 1:44am UTC](https://discuss.elastic.co/t/unable-to-install-x-pack-plugin-on-ubuntu-16/88615 "2017-06-10T01:44:30Z")
I was able to install x-pack inside Kibana just fine. But for ElasticSearch, I first got this error: ubuntu@server:/usr/share/elasticsearch$ sudo bin/plugin install x-pack Exception in thread "main" org.elasticsearch.… --- ## [Logstash does not start; says "could not find jruby in ..."](https://discuss.elastic.co/t/logstash-does-not-start-says-could-not-find-jruby-in/113500)
**Author:** [@enrique3000](https://discuss.elastic.co/u/enrique3000)\ **Replies:** 2\ **Last updated:** [December 29, 2017, 8:06pm UTC](https://discuss.elastic.co/t/logstash-does-not-start-says-could-not-find-jruby-in/113500 "2017-12-29T20:06:36Z")
Best regard. I would like to know why it does not start the Logstash (version 6.1.1) that I have installed locally. After locating in DOS in the directory where I have it installed ("c: \\ Elastic Stack \\ logstash-6.1.1")… --- ## [How do I read nested JSON?](https://discuss.elastic.co/t/how-do-i-read-nested-json/1775)
**Author:** [@John\_Yeuk\_Hon\_Wong](https://discuss.elastic.co/u/John_Yeuk_Hon_Wong)\ **Replies:** 2\ **Last updated:** [September 3, 2015, 8:37pm UTC](https://discuss.elastic.co/t/how-do-i-read-nested-json/1775 "2015-09-03T20:37:28Z")
Hi. Here is part of the JSON doc in Kibana after I use JSON filter to process incoming log. "OldStateValue": "INSUFFICIENT\_DATA", "Trigger": { "MetricName": "CPUUtilization", "Namespace": "AWS/EC2", "Statis… --- ## [Logstash 6.3 Installation Failure](https://discuss.elastic.co/t/logstash-6-3-installation-failure/164876)
**Author:** [@Manoj\_Hettiarachchi](https://discuss.elastic.co/u/Manoj_Hettiarachchi)\ **Replies:** 4\ **Last updated:** [January 22, 2019, 8:56am UTC](https://discuss.elastic.co/t/logstash-6-3-installation-failure/164876 "2019-01-22T08:56:56Z")
Hi All, I needed to install logstash -6.3 in my centos 7 VM. I have downloaded the setup (logstash-6.3.0.rpm) from https://www.elastic.co/downloads/past-releases/logstash-6-3-0 location. I have used the followin… --- ## [Help with elapsed time](https://discuss.elastic.co/t/help-with-elapsed-time/31571)
**Author:** [@Greppy](https://discuss.elastic.co/u/Greppy)\ **Replies:** 5\ **Last updated:** [October 18, 2016, 12:22am UTC](https://discuss.elastic.co/t/help-with-elapsed-time/31571 "2016-10-18T00:22:44Z")
For some reason, I can't get the Elapsed time filter to work just right. From the debug log it with logstash 1.5.4 it appears that my start and end event are getting picked up correctly along with the timestamps but the … --- ## [Logstash for Mainframes](https://discuss.elastic.co/t/logstash-for-mainframes/58378)
**Author:** [@elkuser](https://discuss.elastic.co/u/elkuser)\ **Replies:** 1\ **Last updated:** [March 22, 2017, 4:02am UTC](https://discuss.elastic.co/t/logstash-for-mainframes/58378 "2017-03-22T04:02:24Z")
Is there a version of Logstash for Z/OS Unix for Mainframes? --- ## [Installing elasticsearch on red hat linux - error command not found](https://discuss.elastic.co/t/installing-elasticsearch-on-red-hat-linux-error-command-not-found/16289)
**Author:** [@Preeti\_Jain](https://discuss.elastic.co/u/Preeti_Jain)\ **Replies:** 7\ **Last updated:** [March 12, 2014, 9:59am UTC](https://discuss.elastic.co/t/installing-elasticsearch-on-red-hat-linux-error-command-not-found/16289 "2014-03-12T09:59:35Z")
Hi all, I'm installing elasticsearch version 1.0.1 on red hat linux. I have placed elastic search in directory /opt so the path till bin looks like /opt/elasticsearch-1.0.1/bin when I'm trying to start elasticsear… --- ## [How to compare date in Logstash?](https://discuss.elastic.co/t/how-to-compare-date-in-logstash/32250)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 3\ **Last updated:** [May 5, 2017, 5:01pm UTC](https://discuss.elastic.co/t/how-to-compare-date-in-logstash/32250 "2017-05-05T17:01:12Z")
Hi All, There is one requirement where i need to compare log date with some constant date. and then perform indexing in ES. is there any way where i can compare two dates in logstash? Thanks, Rohan --- ## [Cutoff Frequency alternatives](https://discuss.elastic.co/t/cutoff-frequency-alternatives/221257)
**Author:** [@enthousiast](https://discuss.elastic.co/u/enthousiast)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 2:30pm UTC](https://discuss.elastic.co/t/cutoff-frequency-alternatives/221257 "2020-02-27T14:30:56Z")
Hello, I'm using Elasticsearch as a search engine for several web applications. I was using cutoff\_frequency to ensure good relevance in different cases : for most of our query, it's used for deleveraging high frequen… --- ## [Access Denied error with s3 plugin](https://discuss.elastic.co/t/access-denied-error-with-s3-plugin/95233)
**Author:** [@desai.amogh](https://discuss.elastic.co/u/desai.amogh)\ **Replies:** 0\ **Last updated:** [July 31, 2017, 7:26pm UTC](https://discuss.elastic.co/t/access-denied-error-with-s3-plugin/95233 "2017-07-31T19:26:57Z")
I am trying to use the s3 plugin and I get below error: \[\[main\]\"xxxxxx", access\_key… --- ## [Long GC pauses on data nodes](https://discuss.elastic.co/t/long-gc-pauses-on-data-nodes/173251)
**Author:** [@arvind297](https://discuss.elastic.co/u/arvind297)\ **Replies:** 8\ **Last updated:** [March 21, 2019, 4:30pm UTC](https://discuss.elastic.co/t/long-gc-pauses-on-data-nodes/173251 "2019-03-21T16:30:22Z")
Hi, We are seeing hot nodes going out frequently(atleast once in a day) with the below error and we need to restart the services manually to add the node back to the cluster. We have 8 hot nodes and Most of the time no… --- ## [How to maintain ES connection in web application](https://discuss.elastic.co/t/how-to-maintain-es-connection-in-web-application/59925)
**Author:** [@Yongyao\_Jiang](https://discuss.elastic.co/u/Yongyao_Jiang)\ **Replies:** 8\ **Last updated:** [September 7, 2016, 3:19am UTC](https://discuss.elastic.co/t/how-to-maintain-es-connection-in-web-application/59925 "2016-09-07T03:19:44Z")
Hey guys, I am using ES as the back end of my search application. When my web application starts, I start a new transport client and keep it alive. It works well in the first few hours/days. But after a while, it would… --- ## [Curl created visualization is not visible in Kibana](https://discuss.elastic.co/t/curl-created-visualization-is-not-visible-in-kibana/52287)
**Author:** [@abhi.kedari](https://discuss.elastic.co/u/abhi.kedari)\ **Replies:** 8\ **Last updated:** [June 11, 2016, 1:32pm UTC](https://discuss.elastic.co/t/curl-created-visualization-is-not-visible-in-kibana/52287 "2016-06-11T13:32:47Z")
Hi, I can create new visualization using curl command. After executing curl command to create visualization, I got this message - {"index":".kibana-4","type":"visualization","id":"v66","version":1,"created":true} … --- ## [Javascript query builder?](https://discuss.elastic.co/t/javascript-query-builder/3532)
**Author:** [@tomer\_doron](https://discuss.elastic.co/u/tomer_doron)\ **Replies:** 5\ **Last updated:** [November 16, 2010, 3:32am UTC](https://discuss.elastic.co/t/javascript-query-builder/3532 "2010-11-16T03:32:53Z")
to implement something like google's "advanced" search page i thought it would make sense to use a client side javascript query builder (i.e. create the json query on the client side using javascript). anyone knows … --- ## [Allow Automatic Fullscreen Mode upon Canvas Load via URL Parameter](https://discuss.elastic.co/t/allow-automatic-fullscreen-mode-upon-canvas-load-via-url-parameter/163966)
**Author:** [@sharkeyryan](https://discuss.elastic.co/u/sharkeyryan)\ **Replies:** 2\ **Last updated:** [January 29, 2019, 6:08pm UTC](https://discuss.elastic.co/t/allow-automatic-fullscreen-mode-upon-canvas-load-via-url-parameter/163966 "2019-01-29T18:08:02Z")
It would be nice to be able to target a specific Canvas URL and have it automatically go into "Fullscreen" mode. There is a button for this in the current 6.5 version of Kibana Canvas, but there is no way for it to go in… --- ## [Aggregate/visualize based on substring or regex query](https://discuss.elastic.co/t/aggregate-visualize-based-on-substring-or-regex-query/215524)
**Author:** [@sdberts](https://discuss.elastic.co/u/sdberts)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 4:41pm UTC](https://discuss.elastic.co/t/aggregate-visualize-based-on-substring-or-regex-query/215524 "2020-01-20T16:41:55Z")
Hey all - I have a use case where I need to query for a substring or regex pattern from a field, then visualize it in Kibana. I have a field called "description" in an index, in which various data is stored. The data … --- ## [Combining multi\_match with boosting](https://discuss.elastic.co/t/combining-multi-match-with-boosting/24058)
**Author:** [@madmuffin](https://discuss.elastic.co/u/madmuffin)\ **Replies:** 6\ **Last updated:** [June 23, 2015, 4:57pm UTC](https://discuss.elastic.co/t/combining-multi-match-with-boosting/24058 "2015-06-23T16:57:18Z")
Hi, I'm new to elasticsearch and still trying to figure out the query dsl. What a lot a features! I need to look for two strings in two fields, I found this to be working pretty well: {"multi\_match":{"query":"keywo… --- ## [Field.keyword is empty, yet something is shown under field](https://discuss.elastic.co/t/field-keyword-is-empty-yet-something-is-shown-under-field/174113)
**Author:** [@Ebisu](https://discuss.elastic.co/u/Ebisu)\ **Replies:** 5\ **Last updated:** [April 1, 2019, 6:30pm UTC](https://discuss.elastic.co/t/field-keyword-is-empty-yet-something-is-shown-under-field/174113 "2019-04-01T18:30:09Z")
My field msg is a result of using grok with %{GREEDYDATA}. If I apply the following filter in Kibana's "Disover": NOT msg.keyword: "exists", roughly half of all events match. But for those msg is not empty. Can somebody … --- ## [Kibana 4.x Discover URL Parameters Documentation](https://discuss.elastic.co/t/kibana-4-x-discover-url-parameters-documentation/24346)
**Author:** [@justenwalker](https://discuss.elastic.co/u/justenwalker)\ **Replies:** 2\ **Last updated:** [June 26, 2015, 1:55pm UTC](https://discuss.elastic.co/t/kibana-4-x-discover-url-parameters-documentation/24346 "2015-06-26T13:55:02Z")
I notice that the format of the discover URL parameters is RISON, but there is no documentation around the structure of this object. It doesn't appear to be a raw ES query object converted from JSON to RISON. Aside from… --- ## [Metricbeat not loading in ES indices](https://discuss.elastic.co/t/metricbeat-not-loading-in-es-indices/108274)
**Author:** [@Alaric](https://discuss.elastic.co/u/Alaric)\ **Replies:** 8\ **Last updated:** [November 20, 2017, 7:05pm UTC](https://discuss.elastic.co/t/metricbeat-not-loading-in-es-indices/108274 "2017-11-20T19:05:25Z")
I end up here after several hours of pain. I setup a Elasticsearch / Kibana (no Logstash) installation to monitor RAM/CPU/and so on on a ubuntu VM. I installed metricbeat but I do not manage to have the MB indice loade… --- ## [We couldn't activate monitoring - No monitoring data found](https://discuss.elastic.co/t/we-couldnt-activate-monitoring-no-monitoring-data-found/190539)
**Author:** [@manosmustang](https://discuss.elastic.co/u/manosmustang)\ **Replies:** 4\ **Last updated:** [July 16, 2019, 3:27pm UTC](https://discuss.elastic.co/t/we-couldnt-activate-monitoring-no-monitoring-data-found/190539 "2019-07-16T15:27:50Z")
Hello, we receive the below error after installation of a cluster without xpack \[root@elastic1 metricbeat\]# curl localhost:9200/\_cat/nodes?v ip heap.percent ram.percent cpu load\_1m load\_5m load\_15m node… --- ## [Elasticsearch 5.2.2 X-Pack: Failed to load plugin class \[org.elasticsearch.xpack.XPackPlugin\]](https://discuss.elastic.co/t/elasticsearch-5-2-2-x-pack-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/96174)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 4\ **Last updated:** [August 8, 2017, 10:27pm UTC](https://discuss.elastic.co/t/elasticsearch-5-2-2-x-pack-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/96174 "2017-08-08T22:27:03Z")
Hi, I have installed X-Pack 5.2.2 on Elasticsearch 5.2.2. I connect from java code to Elastic Search cluster, with none SSL connection. JDK is 1.8.102, I have all X-Pack jars at client classpath. I have use… --- ## [Elasticsearch Wildcard fieldtype has slow performance for wildcard queries](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662)
**Author:** [@Chris\_Doman](https://discuss.elastic.co/u/Chris_Doman)\ **Replies:** 4\ **Last updated:** [December 29, 2020, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662 "2020-12-29T09:31:42Z")
I'm testing the new ElasticSearch WildCard field type (https://www.elastic.co/blog/find-strings-within-strings-faster-with-the-new-elasticsearch-wildcard-field) that is supposed to offer better wildcard queries. Strange… --- ## [Aggregate counting/sum query](https://discuss.elastic.co/t/aggregate-counting-sum-query/164951)
**Author:** [@ninesalt](https://discuss.elastic.co/u/ninesalt)\ **Replies:** 4\ **Last updated:** [February 3, 2019, 4:33pm UTC](https://discuss.elastic.co/t/aggregate-counting-sum-query/164951 "2019-02-03T16:33:34Z")
I'm trying to figure out how to sum up many different counts in an elasticsearch index. A document in the index looks like this: { '\_source': { 'my\_field': 'Robert and Alex went with Robert to play in London and t… --- ## [SSL from filebeat to Kafka](https://discuss.elastic.co/t/ssl-from-filebeat-to-kafka/98105)
**Author:** [@venky1987](https://discuss.elastic.co/u/venky1987)\ **Replies:** 1\ **Last updated:** [August 24, 2017, 12:34pm UTC](https://discuss.elastic.co/t/ssl-from-filebeat-to-kafka/98105 "2017-08-24T12:34:03Z")
I could see the below note in the link: https://www.elastic.co/guide/en/beats/filebeat/current/securing-communication-elasticsearch.html For any given connection, the SSL/TLS certificates must have a subject that matche… --- ## [Integration elasticsearch in laravel app](https://discuss.elastic.co/t/integration-elasticsearch-in-laravel-app/356804)
**Author:** [@Yemboaro](https://discuss.elastic.co/u/Yemboaro)\ **Replies:** 3\ **Last updated:** [April 5, 2024, 3:57pm UTC](https://discuss.elastic.co/t/integration-elasticsearch-in-laravel-app/356804 "2024-04-05T15:57:38Z")
Hello Elastic community, I'm a beginner and I'm looking to integrate Elasticsearch into a Laravel application with a relational database. I'm seeking guidance on the process to follow in order to understand how Elastics… --- ## [How to aggregate a unique count in Kibana if the count is under a threshold](https://discuss.elastic.co/t/how-to-aggregate-a-unique-count-in-kibana-if-the-count-is-under-a-threshold/136128)
**Author:** [@mwstandlee](https://discuss.elastic.co/u/mwstandlee)\ **Replies:** 3\ **Last updated:** [June 18, 2018, 7:43pm UTC](https://discuss.elastic.co/t/how-to-aggregate-a-unique-count-in-kibana-if-the-count-is-under-a-threshold/136128 "2018-06-18T19:43:10Z")
I'm a new user to Kibana and I'm putting together a demo to get it purchased and I have a requirement for sensitive data: "Do not show the exact count if it is below 10". For example: I have a bar chart that shows the… --- ## [Logstash failed to parse timestamp field, Invalid format, malformed (grok, date filter, add\_field)](https://discuss.elastic.co/t/logstash-failed-to-parse-timestamp-field-invalid-format-malformed-grok-date-filter-add-field/117135)
**Author:** [@thirusama](https://discuss.elastic.co/u/thirusama)\ **Replies:** 3\ **Last updated:** [January 26, 2018, 6:10pm UTC](https://discuss.elastic.co/t/logstash-failed-to-parse-timestamp-field-invalid-format-malformed-grok-date-filter-add-field/117135 "2018-01-26T18:10:17Z")
Hello, I am getting the error "failed to parse \[logdate\]","reason"=\>"failed to parse \[logdate\]", "caused\_by"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Invalid format: "2018-Jan-16T11:07:42" is malformed at "-Ja… --- ## [Mapper\_parsing\_exception for timestamp field](https://discuss.elastic.co/t/mapper-parsing-exception-for-timestamp-field/87159)
**Author:** [@Dee](https://discuss.elastic.co/u/Dee)\ **Replies:** 6\ **Last updated:** [June 7, 2017, 11:27am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-for-timestamp-field/87159 "2017-06-07T11:27:58Z")
Hi, For some reason logstash can't parse a field called timestamp in my json events in some environments (on other environments it works fine) This is the error I see in logstash logs: "error"=\>{"type"=\>"mapper\_parsing… --- ## [Ends with operator in elastic search](https://discuss.elastic.co/t/ends-with-operator-in-elastic-search/139352)
**Author:** [@ivar](https://discuss.elastic.co/u/ivar)\ **Replies:** 2\ **Last updated:** [July 10, 2018, 9:12pm UTC](https://discuss.elastic.co/t/ends-with-operator-in-elastic-search/139352 "2018-07-10T21:12:48Z")
I'm using elastic search 5.6 is there an ends with operator ? is wildcard:"\*suffix" the only option to search for a field ending with suffix ? --- ## [Filebeat include\_lines and decode\_json can't work](https://discuss.elastic.co/t/filebeat-include-lines-and-decode-json-cant-work/131383)
**Author:** [@Qing](https://discuss.elastic.co/u/Qing)\ **Replies:** 2\ **Last updated:** [May 11, 2018, 7:44am UTC](https://discuss.elastic.co/t/filebeat-include-lines-and-decode-json-cant-work/131383 "2018-05-11T07:44:53Z")
Hi I meet problem: "Exiting: Error in initing prospector: When using the JSON decoder and line filtering together, you need to specify a message\_key value accessing 'filebeat.prospectors.0' (source:'filebeat.yml') Exi… --- ## [How to generate ssl certificate for new node in existing cluster](https://discuss.elastic.co/t/how-to-generate-ssl-certificate-for-new-node-in-existing-cluster/265689)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [February 28, 2021, 11:56am UTC](https://discuss.elastic.co/t/how-to-generate-ssl-certificate-for-new-node-in-existing-cluster/265689 "2021-02-28T11:56:14Z")
I have 7 node cluster and now i want to add another node for previous nodes i have master\_node1.crt and master\_node1.key master\_node2.crt and master\_node2.key master\_node3.crt and master\_node3.key data\_node1.crt and da… --- ## [How to change snapshot base path without modifying the repository?](https://discuss.elastic.co/t/how-to-change-snapshot-base-path-without-modifying-the-repository/235706)
**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\ **Replies:** 2\ **Last updated:** [June 4, 2020, 10:46am UTC](https://discuss.elastic.co/t/how-to-change-snapshot-base-path-without-modifying-the-repository/235706 "2020-06-04T10:46:02Z")
Hi everyone, I want to make snapshots of my cluster to be stored in a different base path or different folder without changing the base path of the repository that I'm making the snapshot. I use the azure repository pl… --- ## [Config alerts and actions email connector](https://discuss.elastic.co/t/config-alerts-and-actions-email-connector/249501)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 7\ **Last updated:** [September 24, 2020, 10:05am UTC](https://discuss.elastic.co/t/config-alerts-and-actions-email-connector/249501 "2020-09-24T10:05:35Z")
Hi all I wanted to try to config the mail sending feature for the SIEM, when i config the connector for email 2 encounter 2 problems: the username and password part every time i try to add new to it, when i save it t… --- ## [{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"}](https://discuss.elastic.co/t/statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred/141330)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 7\ **Last updated:** [July 24, 2018, 9:26am UTC](https://discuss.elastic.co/t/statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred/141330 "2018-07-24T09:26:32Z")
Hi, Please I don't know what's happening, everything was good and today when I connect my kibana I found this error : {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"} --- ## [Elasticsearch- highlighting on both “.keyword” and text fields](https://discuss.elastic.co/t/elasticsearch-highlighting-on-both-keyword-and-text-fields/157325)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 5\ **Last updated:** [November 21, 2018, 5:49am UTC](https://discuss.elastic.co/t/elasticsearch-highlighting-on-both-keyword-and-text-fields/157325 "2018-11-21T05:49:50Z")
I am finding issues with highlighting when searching on fields using its complete data.I have used custom analyzers and each field is stored as text and keyword. I am using whitespace as search analyzer. My custom anal… --- ## [Swapping primary and replica shard allocations in two node clusters](https://discuss.elastic.co/t/swapping-primary-and-replica-shard-allocations-in-two-node-clusters/181016)
**Author:** [@vigyas](https://discuss.elastic.co/u/vigyas)\ **Replies:** 4\ **Last updated:** [May 14, 2019, 9:32pm UTC](https://discuss.elastic.co/t/swapping-primary-and-replica-shard-allocations-in-two-node-clusters/181016 "2019-05-14T21:32:27Z")
Suppose there is a two node cluster and indices have 1 replica. Initial shard allocation distributes primaries and replicas across both nodes. node-1: \[p0, p2, p4, p6, p8, r1, r3, r5, r7, r9\] node-2: \[p1, p3, p5, p7, p9… --- ## [X-pack license troubles](https://discuss.elastic.co/t/x-pack-license-troubles/168016)
**Author:** [@Pablo\_Repolles](https://discuss.elastic.co/u/Pablo_Repolles)\ **Replies:** 4\ **Last updated:** [February 19, 2019, 4:15pm UTC](https://discuss.elastic.co/t/x-pack-license-troubles/168016 "2019-02-19T16:15:23Z")
hi every one, im new over here I just spend a few days - weeks yet - to learn how works ELK solution. Seems a revolucionary concept - for my at all. (i was probing "splunk", "graylog" and similar solutions long time ago… --- ## [How can i keep the fields case sensitive using logstash jdbc](https://discuss.elastic.co/t/how-can-i-keep-the-fields-case-sensitive-using-logstash-jdbc/62957)
**Author:** [@saisn](https://discuss.elastic.co/u/saisn)\ **Replies:** 3\ **Last updated:** [October 19, 2016, 6:28pm UTC](https://discuss.elastic.co/t/how-can-i-keep-the-fields-case-sensitive-using-logstash-jdbc/62957 "2016-10-19T18:28:11Z")
Hi , I want the field name to be exactly same when importing from logstash instead of default lowercase conversion For eg: 'FirstName' field in SQL should be imported exactly as 'FirstName' in elasticsearch not 'firs… --- ## [Logstash default document type from logs to doc](https://discuss.elastic.co/t/logstash-default-document-type-from-logs-to-doc/217998)
**Author:** [@alessandro](https://discuss.elastic.co/u/alessandro)\ **Replies:** 2\ **Last updated:** [February 6, 2020, 3:26pm UTC](https://discuss.elastic.co/t/logstash-default-document-type-from-logs-to-doc/217998 "2020-02-06T15:26:08Z")
Hi forum, I would like to ask an advice for a smooth transition from Logstash version 5.6.4 to 6.8.6, given that I have recently updated succesfully both Elasticsearch and Kibana. My main doubts are about the breaking … --- ## [Pass raw json string query to Elastic Search using java](https://discuss.elastic.co/t/pass-raw-json-string-query-to-elastic-search-using-java/219154)
**Author:** [@Smack\_Alpha](https://discuss.elastic.co/u/Smack_Alpha)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 6:41am UTC](https://discuss.elastic.co/t/pass-raw-json-string-query-to-elastic-search-using-java/219154 "2020-02-14T06:41:47Z")
I have got the data from Elasticsearch index by using the below code: SearchRequest request = new SearchRequest("football\_sum\_csv").scroll(new TimeValue(60000)); SearchSourceBuilder searchSourceBuilder = new SearchSourc… --- ## [When will Elasticsearch SQL be released?](https://discuss.elastic.co/t/when-will-elasticsearch-sql-be-released/93928)
**Author:** [@christophe\_spielmann](https://discuss.elastic.co/u/christophe_spielmann)\ **Replies:** 4\ **Last updated:** [July 28, 2017, 10:55pm UTC](https://discuss.elastic.co/t/when-will-elasticsearch-sql-be-released/93928 "2017-07-28T22:55:18Z")
I am looking for the Elasticsearch SQL that was introduced during last Elastic{ON}17. Is it already available ? It has been a while since the show demo. I see that there are community alternatives but what I am looking f… --- ## [ElasticSearch synchronization with OrientDB](https://discuss.elastic.co/t/elasticsearch-synchronization-with-orientdb/22362)
**Author:** [@Michalis\_Michaelidis](https://discuss.elastic.co/u/Michalis_Michaelidis)\ **Replies:** 6\ **Last updated:** [February 24, 2017, 8:20am UTC](https://discuss.elastic.co/t/elasticsearch-synchronization-with-orientdb/22362 "2017-02-24T08:20:23Z")
Hello, I would like some guidelines about how to approach ElasticSearch synchronization with OrientDB: Doing some search I have found those approaches: 1) Dedicated River plugin - Like this one: https://gith… --- ## [Logstash group authorization error in Kafka Input](https://discuss.elastic.co/t/logstash-group-authorization-error-in-kafka-input/106669)
**Author:** [@Suresh\_Nataraj](https://discuss.elastic.co/u/Suresh_Nataraj)\ **Replies:** 4\ **Last updated:** [November 8, 2017, 6:14pm UTC](https://discuss.elastic.co/t/logstash-group-authorization-error-in-kafka-input/106669 "2017-11-08T18:14:50Z")
Hi All, I am getting the below error while trying to connect to Kafka from Logstash . Exception in thread "Ruby-0-Thread-20: /Users/sn2/Desktop/logstash-5.6.1/vendor/bundle/jruby/1.9/gems/logstash-input-kafka-5.1.11/li… --- ## [Not part of cluster](https://discuss.elastic.co/t/not-part-of-cluster/5585)
**Author:** [@dominik\_symonowicz](https://discuss.elastic.co/u/dominik_symonowicz)\ **Replies:** 4\ **Last updated:** [December 30, 2013, 1:43pm UTC](https://discuss.elastic.co/t/not-part-of-cluster/5585 "2013-12-30T13:43:38Z")
Hello folks. So i have problem i see warning... "WARNING: \[Johnny Ohm\] Node \[Smuggler II\]\[4rNtWrqJSLKKkOB0uhXntg\] \[inet\[/10.0.5.69:9300\]\] not part of the cluster Cluster \[dom\], ignoring... 13-Oct-2011 10:57:27 or… --- ## [Export From elasticsearch to S3](https://discuss.elastic.co/t/export-from-elasticsearch-to-s3/134112)
**Author:** [@praveen.vemuri](https://discuss.elastic.co/u/praveen.vemuri)\ **Replies:** 5\ **Last updated:** [June 4, 2018, 5:36pm UTC](https://discuss.elastic.co/t/export-from-elasticsearch-to-s3/134112 "2018-06-04T17:36:23Z")
Hi, What is the best way to export raw data from elasticsearch to s3? i read about elasticdump and there we have to download to local filesystem and then copy to s3? --- ## [Anyone using IPFIX?](https://discuss.elastic.co/t/anyone-using-ipfix/25366)
**Author:** [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Replies:** 5\ **Last updated:** [July 15, 2016, 4:50am UTC](https://discuss.elastic.co/t/anyone-using-ipfix/25366 "2016-07-15T04:50:16Z")
I'm attempting to setup logstash(1.5.2) to accept netflow(ipfix) data from a Barracuda Network Gateway (F280). When i fire up logstash, I get the following warnings over and over. ←\[33mIgnoring Netflow version v10 {:l… [Previous page](https://discuss.elastic.co/top.md?page=496&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=498&per_page=50&period=all)