# Top **URL:** https://discuss.elastic.co/top.md?page=514&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 515 --- ## [Elasticsearch garbage collection - is this a worry?](https://discuss.elastic.co/t/elasticsearch-garbage-collection-is-this-a-worry/92552)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 1\ **Last updated:** [July 11, 2017, 7:27am UTC](https://discuss.elastic.co/t/elasticsearch-garbage-collection-is-this-a-worry/92552 "2017-07-11T07:27:08Z")
We are running Elasticsearch 5.2 in Docker containers. It's somewhat slow. It's running on not-particularly-fast hardware, which doesn't help, but I was wondering if the garbage collection messages in the log are indicat… --- ## [ES Rest High Level Client throws SocketTimeoutException after being idle for sometime](https://discuss.elastic.co/t/es-rest-high-level-client-throws-sockettimeoutexception-after-being-idle-for-sometime/188188)
**Author:** [@0b3d953a632983bedb48](https://discuss.elastic.co/u/0b3d953a632983bedb48)\ **Replies:** 1\ **Last updated:** [July 1, 2019, 11:25am UTC](https://discuss.elastic.co/t/es-rest-high-level-client-throws-sockettimeoutexception-after-being-idle-for-sometime/188188 "2019-07-01T11:25:17Z")
RestHighLevelClient is used to connect to ES 6.4(hosted on AWS) in a spring-boot app. When the app goes idle for some time, and request arrives, then the RestHighLevelClient throws SocketTimeoutException: \[Request proce… --- ## [Leading wildcard search handling](https://discuss.elastic.co/t/leading-wildcard-search-handling/81181)
**Author:** [@bkerrigan](https://discuss.elastic.co/u/bkerrigan)\ **Replies:** 2\ **Last updated:** [April 4, 2017, 5:07pm UTC](https://discuss.elastic.co/t/leading-wildcard-search-handling/81181 "2017-04-04T17:07:17Z")
We need to allow leading wildcard searches on our Elasticsearch installation and I'm looking for the best way to handle them. We currently have one large index (~600Gb) and create aliases with a filter for our differen… --- ## [Advice on how to log or see the elasticsearch queries Kibana makes](https://discuss.elastic.co/t/advice-on-how-to-log-or-see-the-elasticsearch-queries-kibana-makes/73626)
**Author:** [@dlam](https://discuss.elastic.co/u/dlam)\ **Replies:** 2\ **Last updated:** [February 3, 2017, 7:54am UTC](https://discuss.elastic.co/t/advice-on-how-to-log-or-see-the-elasticsearch-queries-kibana-makes/73626 "2017-02-03T07:54:53Z")
sort-of Kibana / ELK stack noob here I just wanna see how Kibana queries elasticsearch to learn how a little more on how it works internally to make all the cool charts and stuff. Timelion too. is there a way to dis… --- ## [Need help using Include Pattern in Kibana visualization](https://discuss.elastic.co/t/need-help-using-include-pattern-in-kibana-visualization/40520)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 2\ **Last updated:** [January 30, 2016, 3:48am UTC](https://discuss.elastic.co/t/need-help-using-include-pattern-in-kibana-visualization/40520 "2016-01-30T03:48:19Z")
Kibana 4.3, ES 2.1 I have logs with a field name details that store file paths from a private cloud storage server. Examples of data: /path/to/myfile1.docx /path/to/myfile2.docx /path/to/myfile1.pdf /path/to/myfile… --- ## [Updating doc using update API](https://discuss.elastic.co/t/updating-doc-using-update-api/177858)
**Author:** [@gued](https://discuss.elastic.co/u/gued)\ **Replies:** 4\ **Last updated:** [April 24, 2019, 12:47pm UTC](https://discuss.elastic.co/t/updating-doc-using-update-api/177858 "2019-04-24T12:47:04Z")
Hello. I am trying to append a list inside Elasticsearch using the python API. However the data incoming is in JSON-format. My query can take a single string item such as 'Blue' or 'Gimli: Dwarf' however it throws an exc… --- ## [Quotes are not converted correctly](https://discuss.elastic.co/t/quotes-are-not-converted-correctly/286994)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 7\ **Last updated:** [October 21, 2021, 7:15pm UTC](https://discuss.elastic.co/t/quotes-are-not-converted-correctly/286994 "2021-10-21T19:15:53Z")
Dear all =) When creating Create Rule over the API, and want to search for host:"10.250.11.11", then I run into problems. This is invalid JSON: "esQuery": '{ "query": { "query\_string": { "query": "host:"10.250.11.11" … --- ## [APM server is not available (connection refused)](https://discuss.elastic.co/t/apm-server-is-not-available-connection-refused/240718)
**Author:** [@himanshuk467](https://discuss.elastic.co/u/himanshuk467)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 5:35am UTC](https://discuss.elastic.co/t/apm-server-is-not-available-connection-refused/240718 "2020-07-13T05:35:12Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.8.… --- ## [Not sure how to enable painless regex](https://discuss.elastic.co/t/not-sure-how-to-enable-painless-regex/231806)
**Author:** [@skazan](https://discuss.elastic.co/u/skazan)\ **Replies:** 2\ **Last updated:** [May 9, 2020, 12:00pm UTC](https://discuss.elastic.co/t/not-sure-how-to-enable-painless-regex/231806 "2020-05-09T12:00:33Z")
Hi, I want to enable regex for painless script as it is not enabled by default and hence my scripted field is failing to create. I added "script.painless.regex.enabled" under env section of elasticsearch.yaml file (plea… --- ## [Status changed from yellow to red - Request Timeout after 1500ms](https://discuss.elastic.co/t/status-changed-from-yellow-to-red-request-timeout-after-1500ms/124542)
**Author:** [@Rajeev\_Gaurav](https://discuss.elastic.co/u/Rajeev_Gaurav)\ **Replies:** 8\ **Last updated:** [March 20, 2018, 7:08am UTC](https://discuss.elastic.co/t/status-changed-from-yellow-to-red-request-timeout-after-1500ms/124542 "2018-03-20T07:08:55Z")
Hi, I am using Kibana 4.4.2 and Elasticsearch 2.2.1. It was all working fine but now suddenly getting Kiaban is showing heap error. - " Status changed from yellow to red - Request Timeout after 1500ms". Can anyone pl… --- ## [Problem with send log from pfsense 2.2 to ELK](https://discuss.elastic.co/t/problem-with-send-log-from-pfsense-2-2-to-elk/27892)
**Author:** [@mega\_robo](https://discuss.elastic.co/u/mega_robo)\ **Replies:** 4\ **Last updated:** [August 24, 2015, 7:34am UTC](https://discuss.elastic.co/t/problem-with-send-log-from-pfsense-2-2-to-elk/27892 "2015-08-24T07:34:18Z")
hi i install ELK with elasticsearch 1.7.1 and logstash 1.5.4 and kibana 3 and try to send my firewal logs to ELK i use pfsense 2.2.3 and i config all but have difrent error in start logstash and i got this damn error man… --- ## [Unable to start process](https://discuss.elastic.co/t/unable-to-start-process/144637)
**Author:** [@warhol](https://discuss.elastic.co/u/warhol)\ **Replies:** 1\ **Last updated:** [August 16, 2018, 9:44am UTC](https://discuss.elastic.co/t/unable-to-start-process/144637 "2018-08-16T09:44:46Z")
Hi, I have installed elasticsearch on a computer running CentOS. When I try to start it I get the following output: \[root@localhost ~\]# sudo systemctl start elasticsearch Job for elasticsearch.service failed because th… --- ## [How to generate OAUTH2 token and use REST API to pull logs from Cloud?](https://discuss.elastic.co/t/how-to-generate-oauth2-token-and-use-rest-api-to-pull-logs-from-cloud/166624)
**Author:** [@Mohan\_K](https://discuss.elastic.co/u/Mohan_K)\ **Replies:** 3\ **Last updated:** [January 31, 2019, 8:08pm UTC](https://discuss.elastic.co/t/how-to-generate-oauth2-token-and-use-rest-api-to-pull-logs-from-cloud/166624 "2019-01-31T20:08:33Z")
Hi Experts, I have below requirements . Could you please help me to configure it. In short: I am trying to use OAUTH2 to generate token ,use that token to establish connection with SAAS portal to pull logs using REST … --- ## [\[SOLVED\] Doing conversion byte to mega byte with logstash](https://discuss.elastic.co/t/solved-doing-conversion-byte-to-mega-byte-with-logstash/54002)
**Author:** [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\ **Replies:** 3\ **Last updated:** [June 29, 2016, 3:09pm UTC](https://discuss.elastic.co/t/solved-doing-conversion-byte-to-mega-byte-with-logstash/54002 "2016-06-29T15:09:41Z")
Hello all. I m doing a real time monitor for fortinet bandwith but sent and received packets are in byte. I make a sum of all but it's not easy readable in byte. So i need to convert all bytes in megabytes. Here's my… --- ## [Kibana maximum results capped at 10000](https://discuss.elastic.co/t/kibana-maximum-results-capped-at-10000/267196)
**Author:** [@shamzeer](https://discuss.elastic.co/u/shamzeer)\ **Replies:** 6\ **Last updated:** [April 1, 2021, 6:58am UTC](https://discuss.elastic.co/t/kibana-maximum-results-capped-at-10000/267196 "2021-04-01T06:58:37Z")
We are using Elastic and Kibana version on 7.10. As per the documentations, the maximum results returned would be 10000. However this causes a real issue for us in the metric visualization where we use visualization to … --- ## [Elasticsearch wich SAN storage?](https://discuss.elastic.co/t/elasticsearch-wich-san-storage/190240)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 6\ **Last updated:** [July 12, 2019, 2:28pm UTC](https://discuss.elastic.co/t/elasticsearch-wich-san-storage/190240 "2019-07-12T14:28:22Z")
Hi, is it supported to run elaticsearch against a mounted SAN storage? Thanks, Andreas --- ## [Curator: possible to "reindex by query"?](https://discuss.elastic.co/t/curator-possible-to-reindex-by-query/125081)
**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\ **Replies:** 2\ **Last updated:** [March 22, 2018, 3:45pm UTC](https://discuss.elastic.co/t/curator-possible-to-reindex-by-query/125081 "2018-03-22T15:45:42Z")
So the reindex api lets you reindex a subset of your data using a search query: POST \_reindex { "source": { "index": "twitter", "type": "tweet", "query": { "term": { "user": "kimchy" } … --- ## [S3 Input Plugin Choking on Glacier Files](https://discuss.elastic.co/t/s3-input-plugin-choking-on-glacier-files/28119)
**Author:** [@zwalls](https://discuss.elastic.co/u/zwalls)\ **Replies:** 4\ **Last updated:** [August 28, 2015, 1:27pm UTC](https://discuss.elastic.co/t/s3-input-plugin-choking-on-glacier-files/28119 "2015-08-28T13:27:49Z")
Up-front info: Distro - Amazon Linux Logstash - yum-installed ElasticSearch - yum-installed These are on the same box, at present. I am currently using the s3 input plugin to ingest .gz'ed catalina log files. Recently… --- ## [Fatal Error starting Logstash 6.1.1](https://discuss.elastic.co/t/fatal-error-starting-logstash-6-1-1/114497)
**Author:** [@danielePerri](https://discuss.elastic.co/u/danielePerri)\ **Replies:** 7\ **Last updated:** [January 24, 2018, 5:51am UTC](https://discuss.elastic.co/t/fatal-error-starting-logstash-6-1-1/114497 "2018-01-24T05:51:07Z")
Hi all, I have installed Elasticsearch, Logstash and Kibana with X-packs, in version 6.1.1 During the start of Logstash, I receive this FATAL: \[FATAL\] 2018-01-08 10:49:01.377 \[main\] runner - An unexpected error occurr… --- ## [Query to compare two fields within a doc?](https://discuss.elastic.co/t/query-to-compare-two-fields-within-a-doc/1971)
**Author:** [@elastic\_paul](https://discuss.elastic.co/u/elastic_paul)\ **Replies:** 1\ **Last updated:** [June 6, 2015, 9:56am UTC](https://discuss.elastic.co/t/query-to-compare-two-fields-within-a-doc/1971 "2015-06-06T09:56:30Z")
Hi, Can I compare two fields in a doc and show all results? eg; show all docs where field\_1 == field\_2 Any ideas? --- ## [Problem with "docker" prospector and "error decoding json" logs](https://discuss.elastic.co/t/problem-with-docker-prospector-and-error-decoding-json-logs/132828)
**Author:** [@LollerAgent](https://discuss.elastic.co/u/LollerAgent)\ **Replies:** 4\ **Last updated:** [June 12, 2018, 5:32pm UTC](https://discuss.elastic.co/t/problem-with-docker-prospector-and-error-decoding-json-logs/132828 "2018-06-12T17:32:00Z")
When using the docker prospector and specifying containers.ids: \* my logs are constantly spammed with: 2018-05-21T17:39:31.019Z ERROR reader/json.go:32 Error decoding JSON: json: cannot unmarshal number into Go value of… --- ## [REST vs JAVA API](https://discuss.elastic.co/t/rest-vs-java-api/5761)
**Author:** [@achaayan](https://discuss.elastic.co/u/achaayan)\ **Replies:** 4\ **Last updated:** [November 3, 2011, 12:46pm UTC](https://discuss.elastic.co/t/rest-vs-java-api/5761 "2011-11-03T12:46:29Z")
We are building a Spring based application which will eventually reside in the cloud. I am confused if I should use REST or ES Java API to connect to my ES cluster. I am inclined towards using REST, because (1) the … --- ## [Calculate term co-occurrence matrix](https://discuss.elastic.co/t/calculate-term-co-occurrence-matrix/21287)
**Author:** [@Aeneas\_Wiener](https://discuss.elastic.co/u/Aeneas_Wiener)\ **Replies:** 2\ **Last updated:** [May 2, 2017, 7:09am UTC](https://discuss.elastic.co/t/calculate-term-co-occurrence-matrix/21287 "2017-05-02T07:09:31Z")
Hi, Is there an efficient way to calculate a term co-occurrence matrix (i.e. a matrix showing how often a pair of terms of occurred in the same document.) I tried fetching a list of relevant terms using a te… --- ## [Logstash JDBC Input table data not in sync with Kibana Index](https://discuss.elastic.co/t/logstash-jdbc-input-table-data-not-in-sync-with-kibana-index/153395)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 8\ **Last updated:** [October 25, 2018, 7:48am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-table-data-not-in-sync-with-kibana-index/153395 "2018-10-25T07:48:12Z")
Hello All, I want an create a Dashboard with Visualization based on data from an Oracle Database. Since i want it to be real time means if new row is inserted in the table the same to be reflected back in the index in … --- ## [C# NEST Client Elasticsearch 7.x DeleteIndex](https://discuss.elastic.co/t/c-nest-client-elasticsearch-7-x-deleteindex/207772)
**Author:** [@codyspeck](https://discuss.elastic.co/u/codyspeck)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 8:06pm UTC](https://discuss.elastic.co/t/c-nest-client-elasticsearch-7-x-deleteindex/207772 "2019-11-14T20:06:54Z")
According to the NEST breaking change list in version 7.0.0, the DeleteIndex method is no longer available. Does anyone know if the same behavior (deleting an index or clearing all documents in an index) is able to be pe… --- ## [Wildcard for source.ip field](https://discuss.elastic.co/t/wildcard-for-source-ip-field/295613)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 4\ **Last updated:** [January 28, 2022, 7:04pm UTC](https://discuss.elastic.co/t/wildcard-for-source-ip-field/295613 "2022-01-28T19:04:51Z")
Hi there, I would like to know how to fix this search (if is possible of course): (winlog.channel:"Security" AND (winlog.event\_id:"4624" AND winlog.event\_data.LogonType:"10") AND (NOT (source.ip:(10.\* OR 192.168.\* OR 1… --- ## [Get stored nested field](https://discuss.elastic.co/t/get-stored-nested-field/69719)
**Author:** [@lukasSirhal1](https://discuss.elastic.co/u/lukasSirhal1)\ **Replies:** 7\ **Last updated:** [December 29, 2016, 12:58pm UTC](https://discuss.elastic.co/t/get-stored-nested-field/69719 "2016-12-29T12:58:56Z")
Hello, because i don't find any helpfull answear. I have to ask you how can i get store nested field from search. I have this mapping { "spm\_1.1": { "mappings": { "order": { "properties": { "dateCreated": {… --- ## [Example needed for Perl Search::Elasticsearch](https://discuss.elastic.co/t/example-needed-for-perl-search-elasticsearch/19248)
**Author:** [@Log\_Muncher](https://discuss.elastic.co/u/Log_Muncher)\ **Replies:** 7\ **Last updated:** [August 21, 2014, 1:35pm UTC](https://discuss.elastic.co/t/example-needed-for-perl-search-elasticsearch/19248 "2014-08-21T13:35:56Z")
Hi, Simple question, but there seems to be a lack of detailed examples for using the otherwise very useful Search::Elasticsearch CPAN module ! I'm getting syslog data into elasticsearch via fluentd. What I'd l… --- ## [\[again\] Endpoint security immediately degraded](https://discuss.elastic.co/t/again-endpoint-security-immediately-degraded/318765)
**Author:** [@CrazyDumpling](https://discuss.elastic.co/u/CrazyDumpling)\ **Replies:** 8\ **Last updated:** [November 29, 2022, 3:35pm UTC](https://discuss.elastic.co/t/again-endpoint-security-immediately-degraded/318765 "2022-11-29T15:35:46Z")
Hello. I know this has been asked a million times here, but i've tried everything i know and i still can't get it to work. I have an Agent Policies with Network Packet Capture, Elastic Defend, and System integrations. … --- ## [ELK cluster disk space usage optimization](https://discuss.elastic.co/t/elk-cluster-disk-space-usage-optimization/33135)
**Author:** [@nkoleff](https://discuss.elastic.co/u/nkoleff)\ **Replies:** 8\ **Last updated:** [October 28, 2015, 3:59pm UTC](https://discuss.elastic.co/t/elk-cluster-disk-space-usage-optimization/33135 "2015-10-28T15:59:52Z")
Hello, As a Newbie in elasticsearch I'm wondering what could be your tips of optimizing my indexes in order to lower down their maximum size. My setup: 3 nodes, 3 shards 1 replica. At the moment I'm documenting … --- ## [Failed opening... too many open files](https://discuss.elastic.co/t/failed-opening-too-many-open-files/38045)
**Author:** [@Adam\_Bozsik](https://discuss.elastic.co/u/Adam_Bozsik)\ **Replies:** 6\ **Last updated:** [March 22, 2017, 1:37pm UTC](https://discuss.elastic.co/t/failed-opening-too-many-open-files/38045 "2017-03-22T13:37:45Z")
Hi, I'd like to send my logfiles (about 5000 files) from a syslog server but I get error messages like this: /usr/bin/filebeat\[8209\]: log.go:197: Failed opening /var/log/remote/cts/daemon.log: open /var/log/remote/c… --- ## [What is the method to create Index Pattern in Python](https://discuss.elastic.co/t/what-is-the-method-to-create-index-pattern-in-python/289121)
**Author:** [@ElnurHello](https://discuss.elastic.co/u/ElnurHello)\ **Replies:** 4\ **Last updated:** [November 14, 2021, 4:14pm UTC](https://discuss.elastic.co/t/what-is-the-method-to-create-index-pattern-in-python/289121 "2021-11-14T16:14:20Z")
Hello, All In Python, I use let say "es.indices.put\_index\_template()" method to create Index Template, "es.indices.create()" to create index but what method should be used to create Index Pattern ? --- ## [Help with webhook action body format](https://discuss.elastic.co/t/help-with-webhook-action-body-format/95077)
**Author:** [@devans](https://discuss.elastic.co/u/devans)\ **Replies:** 4\ **Last updated:** [August 8, 2017, 3:01pm UTC](https://discuss.elastic.co/t/help-with-webhook-action-body-format/95077 "2017-08-08T15:01:22Z")
I’m having problems formatting the json correctly in the body of a webhook action. I’m trying to index a new document into a different index. { "trigger": { "schedule": { "interval": "5m" } }, "inpu… --- ## [Reloading the Index Field list automatically](https://discuss.elastic.co/t/reloading-the-index-field-list-automatically/116687)
**Author:** [@sanek64](https://discuss.elastic.co/u/sanek64)\ **Replies:** 2\ **Last updated:** [January 23, 2018, 2:50pm UTC](https://discuss.elastic.co/t/reloading-the-index-field-list-automatically/116687 "2018-01-23T14:50:14Z")
Hi, i have got another question: Is it a way to reload (refresh) Index field list that is in Management-\>Index Patterns-\>Refresh Fields list using API or smthg else automatic? Hope about api. Thanks --- ## [Search date in query string query](https://discuss.elastic.co/t/search-date-in-query-string-query/117838)
**Author:** [@Hayk\_Hovhanisyan](https://discuss.elastic.co/u/Hayk_Hovhanisyan)\ **Replies:** 4\ **Last updated:** [January 31, 2018, 5:44pm UTC](https://discuss.elastic.co/t/search-date-in-query-string-query/117838 "2018-01-31T17:44:08Z")
ElasticSearch "2.4.4" Java "1.8.0\_151" Hi there, I am using query string query, and I need to have matching: Data: "text" : "8 Derailed 2017-07-17 user user Dermot Mac Ateer 2017-07-03 2017-07-11" User Input: 2017-0… --- ## [Completion suggester suggesting full document](https://discuss.elastic.co/t/completion-suggester-suggesting-full-document/75048)
**Author:** [@Zaid\_Amir](https://discuss.elastic.co/u/Zaid_Amir)\ **Replies:** 4\ **Last updated:** [February 16, 2017, 12:40pm UTC](https://discuss.elastic.co/t/completion-suggester-suggesting-full-document/75048 "2017-02-16T12:40:36Z")
Hi, I am migrating from ES 1.7 to 5.2 and as I am testing I noticed that the new completion suggester does not work as it used to in 1.7. In 1.7 when I invoke the \_suggest API the response returned a set of options m… --- ## [Filebeat close\_inactive while file is still active](https://discuss.elastic.co/t/filebeat-close-inactive-while-file-is-still-active/196305)
**Author:** [@hlamsc](https://discuss.elastic.co/u/hlamsc)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 7:59pm UTC](https://discuss.elastic.co/t/filebeat-close-inactive-while-file-is-still-active/196305 "2019-08-22T19:59:09Z")
Hey there, currently we have a problem with our filebeat version 6.3.2 on windows server 2016. We have an application that logs massivly in one logfile. After the logfile size reached 20MB it gets rotated. The problem… --- ## [Logstash mutate filter, rename - "Exception in filterworker", "exception"=\>#\](https://discuss.elastic.co/t/logstash-mutate-filter-rename-exception-in-filterworker-exception-indexerror-string-not-matched/33438)
**Author:** [@bgow](https://discuss.elastic.co/u/bgow)\ **Replies:** 5\ **Last updated:** [November 20, 2015, 8:45pm UTC](https://discuss.elastic.co/t/logstash-mutate-filter-rename-exception-in-filterworker-exception-indexerror-string-not-matched/33438 "2015-11-20T20:45:15Z")
I'm trying to import CSV files into a nested structure in Elasticsearch (v.1.7.3), on a Windows 7 Professional machine. When I use the mutate filter with rename in Logstash (v.1.5.4) I get an: {:timestamp=\>"2015-10-26… --- ## [Invalid term order aggregation path](https://discuss.elastic.co/t/invalid-term-order-aggregation-path/104536)
**Author:** [@SJLG](https://discuss.elastic.co/u/SJLG)\ **Replies:** 1\ **Last updated:** [October 27, 2017, 3:30pm UTC](https://discuss.elastic.co/t/invalid-term-order-aggregation-path/104536 "2017-10-27T15:30:14Z")
Hi In our software we use the following terms aggregation to group the records by the field sGroup. Each record has a timestamp lTsRequest, which we use to retrieve the most recent / latest values of some other field fo… --- ## [Parse json with filebeat](https://discuss.elastic.co/t/parse-json-with-filebeat/105292)
**Author:** [@mbvelo](https://discuss.elastic.co/u/mbvelo)\ **Replies:** 7\ **Last updated:** [October 27, 2017, 2:08pm UTC](https://discuss.elastic.co/t/parse-json-with-filebeat/105292 "2017-10-27T14:08:19Z")
please assist with this config using Filebeat -\> Elasticsearch , My Json is not being decomposed. other fields are populating correctly, i want the message to be decomposed as well filebeat.prospectors: - input… --- ## [Environment variable for setting logstash CA file for xpack monitoring](https://discuss.elastic.co/t/environment-variable-for-setting-logstash-ca-file-for-xpack-monitoring/200879)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 3\ **Last updated:** [September 30, 2019, 2:38am UTC](https://discuss.elastic.co/t/environment-variable-for-setting-logstash-ca-file-for-xpack-monitoring/200879 "2019-09-30T02:38:28Z")
I am trying to setup Docker Logstash with xpack monitoring, however I am not able to get the environment variable for specifying the CA file location. xpack.monitoring.elasticsearch.ssl.certificate\_authority Here is th… --- ## [Shards skip on range query](https://discuss.elastic.co/t/shards-skip-on-range-query/148680)
**Author:** [@jimyoo](https://discuss.elastic.co/u/jimyoo)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 9:09pm UTC](https://discuss.elastic.co/t/shards-skip-on-range-query/148680 "2018-09-14T21:09:04Z")
Based on this thread, I am testing range queries to see skipping shards but the result is not I expected. I have 2 indices (5 shards each with 0 replica); "event-1" and "event-2" where "event-1" has 4 documents whose "c… --- ## [Default Route for specific spaces](https://discuss.elastic.co/t/default-route-for-specific-spaces/266702)
**Author:** [@Lambo1971](https://discuss.elastic.co/u/Lambo1971)\ **Replies:** 5\ **Last updated:** [March 10, 2021, 12:21pm UTC](https://discuss.elastic.co/t/default-route-for-specific-spaces/266702 "2021-03-10T12:21:31Z")
Hi, I read somewhere that each space can now have its own default route via the advanced settings page. However, i only appear to be able to see an advanced settings option under the kibana menu item for the Default spac… --- ## [Filtering a date field by month](https://discuss.elastic.co/t/filtering-a-date-field-by-month/6792)
**Author:** [@Paco\_Guzman](https://discuss.elastic.co/u/Paco_Guzman)\ **Replies:** 5\ **Last updated:** [April 4, 2017, 10:45pm UTC](https://discuss.elastic.co/t/filtering-a-date-field-by-month/6792 "2017-04-04T22:45:18Z")
Hi everyone, I'm not find a way to retrieve all documents that have a release date (a field indexed like a date) where its month is one specific. I'm only find range queries or gt, lt, filters Thanks in advance … --- ## [Double to long conversion](https://discuss.elastic.co/t/double-to-long-conversion/297179)
**Author:** [@makudu](https://discuss.elastic.co/u/makudu)\ **Replies:** 7\ **Last updated:** [February 16, 2022, 1:38pm UTC](https://discuss.elastic.co/t/double-to-long-conversion/297179 "2022-02-16T13:38:51Z")
Hi, How to convert (default) double type value returned by aggregation( Sum). I am receiving this exception while trying to explicitly convert to long type. Appreciate any advice. thank you. ==========================… --- ## [Columns width in tables](https://discuss.elastic.co/t/columns-width-in-tables/233806)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 2\ **Last updated:** [May 26, 2020, 12:47pm UTC](https://discuss.elastic.co/t/columns-width-in-tables/233806 "2020-05-26T12:47:46Z")
Hi, Using ELK 6.8.8 on premises Is there a way to set the width of the columns in the Kibana tables manually? If the table has many columns, the content is truncated and part of it goes to a second line. This proble… --- ## [Ruby: no implicit conversion of String into Integer](https://discuss.elastic.co/t/ruby-no-implicit-conversion-of-string-into-integer/181054)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [May 14, 2019, 5:58pm UTC](https://discuss.elastic.co/t/ruby-no-implicit-conversion-of-string-into-integer/181054 "2019-05-14T17:58:41Z")
This is my code First I am changing them to integer then if they are nil assign them 0 and then do calculation. mutate { convert =\> { "killo" =\> "integer" } convert =\> { "trace" =\> "integer" } } if !\[… --- ## [Timelion-style queries](https://discuss.elastic.co/t/timelion-style-queries/46399)
**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\ **Replies:** 6\ **Last updated:** [April 7, 2016, 6:05am UTC](https://discuss.elastic.co/t/timelion-style-queries/46399 "2016-04-07T06:05:13Z")
I want to calculate the ratio of two counts, per minute, over a longer period. I can do this in timelion easily '.es("myquery").divide(.es())' But I'm stuck on how I can generate a query to display this data. I can… --- ## [CircuitBreakingException: \[parent\] Data too large](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/260792)
**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\ **Replies:** 4\ **Last updated:** [January 18, 2021, 3:00pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/260792 "2021-01-18T15:00:34Z")
Hi, I am using Elasticsearch 7.8.0 in k8s environment. I have 3 master, 2 data and 3 ingest nodes. I am getting circuit breaker exception on one of the data node. Below are the details: java -version openjdk version… --- ## [Elasticsearch only binds to localhost but not IP / hostname / fqdn hostname - WHY?](https://discuss.elastic.co/t/elasticsearch-only-binds-to-localhost-but-not-ip-hostname-fqdn-hostname-why/265198)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 7\ **Last updated:** [February 23, 2021, 12:20pm UTC](https://discuss.elastic.co/t/elasticsearch-only-binds-to-localhost-but-not-ip-hostname-fqdn-hostname-why/265198 "2021-02-23T12:20:55Z")
Hi there, I am wondering: build a multinode stack. On a stack I would llike to to a: curl -s -k -u elastic:changeme -XGET https://SOMETHING:9200/\_cat/health If SOMETHING is: 127.0.0.1 or localhost it works machine i… [Previous page](https://discuss.elastic.co/top.md?page=513&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=515&per_page=50&period=all)