# Top **URL:** https://discuss.elastic.co/top.md?page=520&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 521 --- ## [How to handle nil or null values within mutate add field](https://discuss.elastic.co/t/how-to-handle-nil-or-null-values-within-mutate-add-field/236160)
**Author:** [@genehunter29009](https://discuss.elastic.co/u/genehunter29009)\ **Replies:** 6\ **Last updated:** [June 8, 2020, 11:38pm UTC](https://discuss.elastic.co/t/how-to-handle-nil-or-null-values-within-mutate-add-field/236160 "2020-06-08T23:38:09Z")
So I have my data being parsed , transformed correctly however I have this issue where null or nil values cause me problems. "userActions.cdnBusyTime" =\> "%{\[userActions\]\[cdnBusyTime\]}" output ends up looking like this … --- ## [Filebeat + Windows: Spaces in directories](https://discuss.elastic.co/t/filebeat-windows-spaces-in-directories/102584)
**Author:** [@Roger\_Keulen](https://discuss.elastic.co/u/Roger_Keulen)\ **Replies:** 6\ **Last updated:** [October 5, 2017, 6:37am UTC](https://discuss.elastic.co/t/filebeat-windows-spaces-in-directories/102584 "2017-10-05T06:37:10Z")
I'm trying to setup filebeat on a windows machine The dir of apache logs = C:/Program Files (x86)/EasyPHP/binaries/apache/logs/error\* The error i get is: Exiting: Error getting config for fielset apache2/error: Error … --- ## [Script to create indexes](https://discuss.elastic.co/t/script-to-create-indexes/87266)
**Author:** [@michael2017](https://discuss.elastic.co/u/michael2017)\ **Replies:** 3\ **Last updated:** [May 26, 2017, 4:25pm UTC](https://discuss.elastic.co/t/script-to-create-indexes/87266 "2017-05-26T16:25:05Z")
Hi Is there any option to create some initial objects, e.g. indexes in ES? Similar task in RDMS world is usually done by DDL scripts to create tables, etc. Is there a similar practice for ES? Like before I place somethi… --- ## [Prioritising matches in specific field](https://discuss.elastic.co/t/prioritising-matches-in-specific-field/41897)
**Author:** [@basiclaser](https://discuss.elastic.co/u/basiclaser)\ **Replies:** 3\ **Last updated:** [February 19, 2016, 2:27pm UTC](https://discuss.elastic.co/t/prioritising-matches-in-specific-field/41897 "2016-02-19T14:27:36Z")
Hi all. Im trying to clarify what the current standard for prioritising document matches with matches from a certain field. Questions ( I don't expect answers to them all, just wanted to get my different lines of enqu… --- ## [ES\_HEAP\_SIZE above 32g?](https://discuss.elastic.co/t/es-heap-size-above-32g/47212)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 6\ **Last updated:** [April 13, 2016, 12:01pm UTC](https://discuss.elastic.co/t/es-heap-size-above-32g/47212 "2016-04-13T12:01:11Z")
Hi, I have a two-node ELK cluster, each having about 250G RAM, and ES\_HEAP\_SIZE is set to 32G, with below circuit breaker settings: indices.fielddata.cache.size: 75% indices.breaker.fielddata.limit: 85% the cluster … --- ## [Update API - how to remove inner fields from objects via script?](https://discuss.elastic.co/t/update-api-how-to-remove-inner-fields-from-objects-via-script/22296)
**Author:** [@daflookie](https://discuss.elastic.co/u/daflookie)\ **Replies:** 1\ **Last updated:** [February 22, 2015, 1:54pm UTC](https://discuss.elastic.co/t/update-api-how-to-remove-inner-fields-from-objects-via-script/22296 "2015-02-22T13:54:51Z")
I have an index that supports dynamic mappings under a field of type Object that we named custom. My doc also has other objects properties with inner props. I attached an abbreviated mapping - notice my object for … --- ## [Use cases Elasticsearch and Spark](https://discuss.elastic.co/t/use-cases-elasticsearch-and-spark/29746)
**Author:** [@Alex\_Budniy](https://discuss.elastic.co/u/Alex_Budniy)\ **Replies:** 4\ **Last updated:** [September 28, 2015, 9:07am UTC](https://discuss.elastic.co/t/use-cases-elasticsearch-and-spark/29746 "2015-09-28T09:07:43Z")
Hello, In our company we want to add analytics to the company's product to show different kind of reports to customers. Currently we store such kind of data in elasticsearch in separate indexes: 1. small info about co… --- ## [Elastic Network Drive Connector 8.12.1 Security Update (ESA-2024-02)](https://discuss.elastic.co/t/elastic-network-drive-connector-8-12-1-security-update-esa-2024-02/352687)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [February 6, 2024, 10:23pm UTC](https://discuss.elastic.co/t/elastic-network-drive-connector-8-12-1-security-update-esa-2024-02/352687 "2024-02-06T22:23:10Z")
Elastic Network Drive Connector Improper Access Control (ESA-2024-02) An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allo… --- ## [Elasticsearch service won't start, nested elasticsearch node state exception](https://discuss.elastic.co/t/elasticsearch-service-wont-start-nested-elasticsearch-node-state-exception/255376)
**Author:** [@penguinairlines](https://discuss.elastic.co/u/penguinairlines)\ **Replies:** 3\ **Last updated:** [November 13, 2020, 10:01pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start-nested-elasticsearch-node-state-exception/255376 "2020-11-13T22:01:48Z")
Hello, I noticed one of my elasticsearch nodes is down and started digging into the issue. I found the service won't start and notice a couple of key errors: ElasticsearchException\[failed to bind service\]; nested: Corr… --- ## [Array of objects max value](https://discuss.elastic.co/t/array-of-objects-max-value/116481)
**Author:** [@arkkanoid](https://discuss.elastic.co/u/arkkanoid)\ **Replies:** 3\ **Last updated:** [February 3, 2018, 10:06pm UTC](https://discuss.elastic.co/t/array-of-objects-max-value/116481 "2018-02-03T22:06:52Z")
For a set of documents like this: { name: "php", related:\[ { "count": 6806, "name": "c#" }, { "count": 4080, "name": "c" }, { "count": 9745, "name": "java" }, { "count": 9141, "name": "javascript" } \] … --- ## [Elastic Stack 5.4.3 Security update](https://discuss.elastic.co/t/elastic-stack-5-4-3-security-update/91006)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [June 27, 2017, 5:16pm UTC](https://discuss.elastic.co/t/elastic-stack-5-4-3-security-update/91006 "2017-06-27T17:16:27Z")
Kibana X-Pack Security user credentials disclosure (ESA-2017-11) In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized… --- ## [Suricata module not working as expected](https://discuss.elastic.co/t/suricata-module-not-working-as-expected/175734)
**Author:** [@Greg\_1990](https://discuss.elastic.co/u/Greg_1990)\ **Replies:** 7\ **Last updated:** [April 29, 2019, 1:44am UTC](https://discuss.elastic.co/t/suricata-module-not-working-as-expected/175734 "2019-04-29T01:44:14Z")
I'm trying to use the Filebeat's Suricata module to send logs to Logstash (and then to Kibana) but I'm not receiving them in the correct format. All fields are hava "json." before them. And the logs are tagged as "beats\_… --- ## [ERROR metrics/metrics.go:376 error getting cgroup stats: error fetching stats for controller io: error fetching IO stats: error fetching io.pressure for path /sys/fs/cgroup:: open /sys/fs/cgroup/io.pressure: no such file or directory](https://discuss.elastic.co/t/error-metrics-metrics-go-376-error-getting-cgroup-stats-error-fetching-stats-for-controller-io-error-fetching-io-stats-error-fetching-io-pressure-for-path-sys-fs-cgroup-open-sys-fs-cgroup-io-pressure-no-such-file-or-directory/307804)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [June 22, 2022, 2:51pm UTC](https://discuss.elastic.co/t/error-metrics-metrics-go-376-error-getting-cgroup-stats-error-fetching-stats-for-controller-io-error-fetching-io-stats-error-fetching-io-pressure-for-path-sys-fs-cgroup-open-sys-fs-cgroup-io-pressure-no-such-file-or-directory/307804 "2022-06-22T14:51:21Z")
Hello World! I'm following Run Filebeat on Docker | Filebeat Reference \[7.17\] | Elastic, yet seeing following ERROR in my logs (over and over): filebeat | 2022-06-21T21:08:17.932Z ERROR metrics/metrics.go:376 er… --- ## [Unable to load xml file in logstash](https://discuss.elastic.co/t/unable-to-load-xml-file-in-logstash/151318)
**Author:** [@balumurari1](https://discuss.elastic.co/u/balumurari1)\ **Replies:** 4\ **Last updated:** [October 24, 2018, 10:21am UTC](https://discuss.elastic.co/t/unable-to-load-xml-file-in-logstash/151318 "2018-10-24T10:21:17Z")
Hello, can you please provide a sample example to upload xml file using logstash. I have tried a lot but unable to upload an xml file in logstash in windows machine. Waiting for the response. Ex: My XML file is as foll… --- ## [TimeStamp based sorting is not working in ES](https://discuss.elastic.co/t/timestamp-based-sorting-is-not-working-in-es/10094)
**Author:** [@Prab](https://discuss.elastic.co/u/Prab)\ **Replies:** 2\ **Last updated:** [December 18, 2012, 4:36am UTC](https://discuss.elastic.co/t/timestamp-based-sorting-is-not-working-in-es/10094 "2012-12-18T04:36:32Z")
Hi All, I have a field timeStamp (which is not be confused \_timestamp), where i store date\_time format date (yyyy-MM-dd'T'HH:mm:ss.SSSZ). I have pushed a couple of documents with different timestamp. http://loca… --- ## [I can't get the S3 Snapshot Repository Plugin to work with MinIO](https://discuss.elastic.co/t/i-cant-get-the-s3-snapshot-repository-plugin-to-work-with-minio/223668)
**Author:** [@Guerteltier](https://discuss.elastic.co/u/Guerteltier)\ **Replies:** 7\ **Last updated:** [March 16, 2020, 4:10pm UTC](https://discuss.elastic.co/t/i-cant-get-the-s3-snapshot-repository-plugin-to-work-with-minio/223668 "2020-03-16T16:10:01Z")
PUT \_snapshot/MinIO { "type": "s3", "settings": { "client": "minio", "bucket": "asozial-private", "base\_path": "elasticsearch", "compress": true } } It causes the following error message: { "err… --- ## [Curl command : localhost connection refused](https://discuss.elastic.co/t/curl-command-localhost-connection-refused/38462)
**Author:** [@Dilip\_Dwivedi](https://discuss.elastic.co/u/Dilip_Dwivedi)\ **Replies:** 1\ **Last updated:** [January 6, 2016, 5:36am UTC](https://discuss.elastic.co/t/curl-command-localhost-connection-refused/38462 "2016-01-06T05:36:21Z")
I am trying to health check using curl commands in 2 diff ways .I am getting connection refused in 2nd way.Please advise why it is not working for 2nd option. dilip@ubuntu:~/Desktop/ELK2/e/bin$ curl http://localhost:92… --- ## [How to pretty-print response of a curl request of information?](https://discuss.elastic.co/t/how-to-pretty-print-response-of-a-curl-request-of-information/163151)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 4\ **Last updated:** [January 7, 2019, 7:51am UTC](https://discuss.elastic.co/t/how-to-pretty-print-response-of-a-curl-request-of-information/163151 "2019-01-07T07:51:22Z")
When I execute curl host IP:9200/\_nodes?filter\_path=\*\*.bootstrap, it returns with the following: {"nodes":{"idI\_aGgSRpuwcFXfQ2UrUA":{"settings":{"bootstrap":{"memory\_lock":"true"}}}}} How can I pretty-print it? --- ## [Logstash replace string problem](https://discuss.elastic.co/t/logstash-replace-string-problem/103401)
**Author:** [@Arkadiusz](https://discuss.elastic.co/u/Arkadiusz)\ **Replies:** 6\ **Last updated:** [October 11, 2017, 7:35am UTC](https://discuss.elastic.co/t/logstash-replace-string-problem/103401 "2017-10-11T07:35:13Z")
Hi I'm new to the logstash and don't know if what I want to do is even possible. I need to replace some information in logs provided by an application. My example input is: 2017-09-18 10:45:25,404 ERROR some variable… --- ## [Logstash 7.12.0 High CPU usage](https://discuss.elastic.co/t/logstash-7-12-0-high-cpu-usage/269851)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 5\ **Last updated:** [April 12, 2021, 7:41pm UTC](https://discuss.elastic.co/t/logstash-7-12-0-high-cpu-usage/269851 "2021-04-12T19:41:21Z")
Hi All, I know that there are several open discussions on the topic already but nothing in there helped me resolving my situation. #1 I installed Logstash on Ubuntu 20.04 for testing purposes and enabling it to run with… --- ## [Having a hard time getting daysOfWeek in scripted field](https://discuss.elastic.co/t/having-a-hard-time-getting-daysofweek-in-scripted-field/180644)
**Author:** [@geriberi](https://discuss.elastic.co/u/geriberi)\ **Replies:** 2\ **Last updated:** [May 14, 2019, 4:30pm UTC](https://discuss.elastic.co/t/having-a-hard-time-getting-daysofweek-in-scripted-field/180644 "2019-05-14T16:30:54Z")
Hi, I kind of have a hard time getting daysOfWeek work in scripted fields as also described in Date Field API. I tried to look for similar problems, but i haven't found anything related in the forum. Sample data {"dat… --- ## [Static lookup](https://discuss.elastic.co/t/static-lookup/280182)
**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\ **Replies:** 4\ **Last updated:** [August 3, 2021, 1:06pm UTC](https://discuss.elastic.co/t/static-lookup/280182 "2021-08-03T13:06:04Z")
Hi ELK Users, I was working on static look up table on index pattern. As you can observe that, I have two keys which I am mapping to the same value I can see in the Discover section, that these values are getting re… --- ## [Странное количество шардов в одной ноде в кластере](https://discuss.elastic.co/t/topic/29574)
**Author:** [@olegbragin](https://discuss.elastic.co/u/olegbragin)\ **Replies:** 4\ **Last updated:** [September 21, 2015, 12:12pm UTC](https://discuss.elastic.co/t/topic/29574 "2015-09-21T12:12:03Z")
Привет, Есть кластер, в нем две ноды. Используя плагин head, вижу на одной ноде, что количество шардов на одной ноде растет (что верно во время индекса). На другой ноде количество шардов застряло где-то на половине и … --- ## [Action \[indices:admin/flush\[s\]\] is unauthorized for user \[admin\] with roles \[superuser\] on restricted indices \[.kibana\_task\_manager\_7.17.5\_001\], this action is granted by the index privileges \[maintenance,manage,all\]](https://discuss.elastic.co/t/action-indices-admin-flush-s-is-unauthorized-for-user-admin-with-roles-superuser-on-restricted-indices-kibana-task-manager-7-17-5-001-this-action-is-granted-by-the-index-privileges-maintenance-manage-all/315291)
**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Replies:** 1\ **Last updated:** [September 27, 2022, 5:27pm UTC](https://discuss.elastic.co/t/action-indices-admin-flush-s-is-unauthorized-for-user-admin-with-roles-superuser-on-restricted-indices-kibana-task-manager-7-17-5-001-this-action-is-granted-by-the-index-privileges-maintenance-manage-all/315291 "2022-09-27T17:27:40Z")
Hello, guys! I am running a rolling upgrade in a cluster 7.17.5 to 8.3.2. When I try to run the GET /\_flush I am receiving this error as return { "\_shards" : { "total" : 148, "successful" : 77, "failed" … --- ## [Copy a field without making it a hash value?](https://discuss.elastic.co/t/copy-a-field-without-making-it-a-hash-value/60342)
**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\ **Replies:** 6\ **Last updated:** [September 13, 2016, 7:51pm UTC](https://discuss.elastic.co/t/copy-a-field-without-making-it-a-hash-value/60342 "2016-09-13T19:51:13Z")
Hi I have an array field. And i want to copy it without turning it to a hash data type, which is what "add\_field" does. Is there any ideas? Tks! PS: the reason i want to do it is because i now have field search\_terms =… --- ## [MS Office 365 beat](https://discuss.elastic.co/t/ms-office-365-beat/105860)
**Author:** [@saif](https://discuss.elastic.co/u/saif)\ **Replies:** 2\ **Last updated:** [November 2, 2017, 7:57am UTC](https://discuss.elastic.co/t/ms-office-365-beat/105860 "2017-11-02T07:57:15Z")
Hello, I'm trying to find a scenario to get logs(audit, security) from Office365. O365 have an API called : Office365 Management Logs so how to collect these logs and send it to logstash via filebeat i resume O365 A… --- ## [Can't run APM Java agent in Alfresco cluster environment](https://discuss.elastic.co/t/cant-run-apm-java-agent-in-alfresco-cluster-environment/172962)
**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\ **Replies:** 3\ **Last updated:** [March 19, 2019, 2:46pm UTC](https://discuss.elastic.co/t/cant-run-apm-java-agent-in-alfresco-cluster-environment/172962 "2019-03-19T14:46:40Z")
Hi, I'm running Alfresco development environment on two windows 2012 servers in cluster. I was able to configure filebeat, logstash, elastic, kibana for my logs. Now I want to add APM server and APM Java agent for moni… --- ## [Create label for existing data](https://discuss.elastic.co/t/create-label-for-existing-data/171465)
**Author:** [@muralasandeep](https://discuss.elastic.co/u/muralasandeep)\ **Replies:** 2\ **Last updated:** [March 11, 2019, 4:43am UTC](https://discuss.elastic.co/t/create-label-for-existing-data/171465 "2019-03-11T04:43:26Z")
Hi every one , This is Sandeep, i am new at kibana , i have one field Error\_types ,in that field i have 3 types of errors like Table Syntax Failed based on this i created pie chart like this metrics Slice Size: … --- ## [Grok Patterns? for OpenVPN](https://discuss.elastic.co/t/grok-patterns-for-openvpn/52265)
**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\ **Replies:** 2\ **Last updated:** [June 12, 2016, 7:45pm UTC](https://discuss.elastic.co/t/grok-patterns-for-openvpn/52265 "2016-06-12T19:45:02Z")
Hi, I Have been trying for many months and no luck on getting this to work to filter the logs from pfSense and Send them to ELK. I am not sure where i should be looking at? This is what I have filter{ if \[type\] == "O… --- ## [How to bind the public IP?](https://discuss.elastic.co/t/how-to-bind-the-public-ip/207318)
**Author:** [@Pinno\_Lin](https://discuss.elastic.co/u/Pinno_Lin)\ **Replies:** 3\ **Last updated:** [November 12, 2019, 9:58am UTC](https://discuss.elastic.co/t/how-to-bind-the-public-ip/207318 "2019-11-12T09:58:45Z")
Hi All, I have 4 node prepare to 1 master (172.20.9.45, 192.168.1.1) and 3 data node (192.168.1.11 ~13). The 172.20.9.x is public LAN, 192.168.1.x is private LAN by hub. The ES version : 7.4.0 these is my elasticsearch… --- ## [Indexing taking a lot of time due to GC overhead](https://discuss.elastic.co/t/indexing-taking-a-lot-of-time-due-to-gc-overhead/82943)
**Author:** [@ChitraP](https://discuss.elastic.co/u/ChitraP)\ **Replies:** 6\ **Last updated:** [April 20, 2017, 9:15pm UTC](https://discuss.elastic.co/t/indexing-taking-a-lot-of-time-due-to-gc-overhead/82943 "2017-04-20T21:15:25Z")
Issue: Indexing time drastically increased from 15 mins to 8 hrs for the same amount of data in past few weeks. We didn't really make any changes in particular to any of the nodes in the cluster. GC is taking a lot of ti… --- ## [No handler found for uri\*\*\*\*\*\*\*\*\*and method \[PUT\]](https://discuss.elastic.co/t/no-handler-found-for-uri-and-method-put/78014)
**Author:** [@Arun\_Singh1](https://discuss.elastic.co/u/Arun_Singh1)\ **Replies:** 3\ **Last updated:** [March 10, 2017, 9:56pm UTC](https://discuss.elastic.co/t/no-handler-found-for-uri-and-method-put/78014 "2017-03-10T21:56:46Z")
Hello, I started with Elastic Search couple of hours back and now I'm stuck while creating a sample document as per the startup guidelines: https://www.elastic.co/guide/en/elasticsearch/guide/current/\_indexing\_emplo… --- ## [How to create a snapshot only for previous day index using curator](https://discuss.elastic.co/t/how-to-create-a-snapshot-only-for-previous-day-index-using-curator/187237)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 6\ **Last updated:** [June 26, 2019, 1:54pm UTC](https://discuss.elastic.co/t/how-to-create-a-snapshot-only-for-previous-day-index-using-curator/187237 "2019-06-26T13:54:20Z")
HI , i want to create a snapshot daily of my previous day index but the snapshot indices are incremental. i need help to solve it ,is there any way we can configure to snapshot only previous day indices or delete the u… --- ## [Forbidden error when connnecting after setting up SAML on Elastic Cloud](https://discuss.elastic.co/t/forbidden-error-when-connnecting-after-setting-up-saml-on-elastic-cloud/234140)
**Author:** [@Yannis\_Psarras](https://discuss.elastic.co/u/Yannis_Psarras)\ **Replies:** 8\ **Last updated:** [May 26, 2020, 8:32am UTC](https://discuss.elastic.co/t/forbidden-error-when-connnecting-after-setting-up-saml-on-elastic-cloud/234140 "2020-05-26T08:32:51Z")
Hi all, I am trying to setup SAML via Azure Active Directory on an Elastic Cloud cluster. Before I go into the details about the error, I just wanted to say that I ve read pretty much anything I could find on the inter… --- ## [How to re fetch data from Kafka, from the beginning of topic, without changing consumer group? (resetting consumer group offset)](https://discuss.elastic.co/t/how-to-re-fetch-data-from-kafka-from-the-beginning-of-topic-without-changing-consumer-group-resetting-consumer-group-offset/84492)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [May 12, 2017, 9:13am UTC](https://discuss.elastic.co/t/how-to-re-fetch-data-from-kafka-from-the-beginning-of-topic-without-changing-consumer-group-resetting-consumer-group-offset/84492 "2017-05-12T09:13:56Z")
Hi, I am using ELK GA 5.0.0. I have a logstash instance to pull data from a kafka topic, like below; kafka{ group\_id =\> "kafkagroupA" topics =\> \["kafkatopicA"\] bootstrap\_servers =\> "192.168.0.1:9091,192.168.0.2:90… --- ## [\[ANN\] Kibana 4.2.0-beta2 is released](https://discuss.elastic.co/t/ann-kibana-4-2-0-beta2-is-released/30010)
**Author:** [@tbragin](https://discuss.elastic.co/u/tbragin)\ **Replies:** 5\ **Last updated:** [September 26, 2015, 5:23am UTC](https://discuss.elastic.co/t/ann-kibana-4-2-0-beta2-is-released/30010 "2015-09-26T05:23:44Z")
We are excited to announce the release of Kibana 4.2.0-beta2! This release brings additional enhancements and bug fixes on top of Kibana 4.2.0-beta1, including the dark theme, which was the highest-requested feature on G… --- ## [View/debug the queries made on ElasticSearch backend](https://discuss.elastic.co/t/view-debug-the-queries-made-on-elasticsearch-backend/49566)
**Author:** [@Paul\_Bormans](https://discuss.elastic.co/u/Paul_Bormans)\ **Replies:** 6\ **Last updated:** [May 18, 2016, 6:49am UTC](https://discuss.elastic.co/t/view-debug-the-queries-made-on-elasticsearch-backend/49566 "2016-05-18T06:49:29Z")
We have a test ES cluster on AWS (the managed service) and would like to now run a spark job using filtered data from the cluster. I expect that df filtering is done on the backend (the so called pushdown), and i was loo… --- ## [Need help with this curl command for bulk uploading](https://discuss.elastic.co/t/need-help-with-this-curl-command-for-bulk-uploading/186074)
**Author:** [@KathyTheGreat](https://discuss.elastic.co/u/KathyTheGreat)\ **Replies:** 2\ **Last updated:** [June 18, 2019, 1:08am UTC](https://discuss.elastic.co/t/need-help-with-this-curl-command-for-bulk-uploading/186074 "2019-06-18T01:08:13Z")
I'm doing this under windows. Here is my curl command: curl -X POST -H "Content-Type:application/x-ndjson" "http://localhost:9200/myindex/logentry/\_bulk?pretty" --data-binary @05312019.txt I'm getting the following err… --- ## [Error: "type" : "json\_parse\_exception"](https://discuss.elastic.co/t/error-type-json-parse-exception/134395)
**Author:** [@nasos](https://discuss.elastic.co/u/nasos)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 8:11am UTC](https://discuss.elastic.co/t/error-type-json-parse-exception/134395 "2018-06-05T08:11:23Z")
Hi all, I am new in Elastic and I want to visualize data in Kibana from csv file. the Data (kibana\_test1.csv) are in the following form: user\_id,item\_id,event\_type,user\_location,user\_favorite\_brand,item\_brand 278673,… --- ## [Function score and nested document](https://discuss.elastic.co/t/function-score-and-nested-document/68582)
**Author:** [@Silvestre\_Losada](https://discuss.elastic.co/u/Silvestre_Losada)\ **Replies:** 2\ **Last updated:** [December 9, 2016, 6:03pm UTC](https://discuss.elastic.co/t/function-score-and-nested-document/68582 "2016-12-09T18:03:46Z")
HI, I have a nested object on my mappings with multiple values. Every user has a set of capacities each capacity has a number of points that describes the level of the user in that capacity. { "userId": "1", "usert… --- ## [Failed with exception java.io.IOException:java.lang.ClassCastException: org.elasticsearch.hadoop.mr.WritableArrayWritable cannot be cast to org.apache.hadoop.io.Text](https://discuss.elastic.co/t/failed-with-exception-java-io-ioexception-java-lang-classcastexception-org-elasticsearch-hadoop-mr-writablearraywritable-cannot-be-cast-to-org-apache-hadoop-io-text/43661)
**Author:** [@mohan\_p](https://discuss.elastic.co/u/mohan_p)\ **Replies:** 2\ **Last updated:** [March 11, 2016, 9:54am UTC](https://discuss.elastic.co/t/failed-with-exception-java-io-ioexception-java-lang-classcastexception-org-elasticsearch-hadoop-mr-writablearraywritable-cannot-be-cast-to-org-apache-hadoop-io-text/43661 "2016-03-11T09:54:56Z")
Continuing the discussion from ElasticSearch 2.1.2 JAR for Hadoop Integration is not working: CREATE EXTERNAL TABLE TestTable(key STRING,msgtype STRING,app\_log\_ts STRING) STORED BY 'org.elasticsearch.hadoop.hive.EsStor… --- ## [Winlogbeat MSI create service](https://discuss.elastic.co/t/winlogbeat-msi-create-service/227267)
**Author:** [@bernhard.fluehmann](https://discuss.elastic.co/u/bernhard.fluehmann)\ **Replies:** 6\ **Last updated:** [April 9, 2020, 3:19pm UTC](https://discuss.elastic.co/t/winlogbeat-msi-create-service/227267 "2020-04-09T15:19:36Z")
I have installed Winlogbeat 7.6.2 with the new MSI installer. The installer works very well and simplifies installation and maintenance of beats on Windows hosts. The only problem is that the installer does not contain a… --- ## [Filebeat errors on setup - Apache ingest pipelines failing to load](https://discuss.elastic.co/t/filebeat-errors-on-setup-apache-ingest-pipelines-failing-to-load/265134)
**Author:** [@QueenAmidala](https://discuss.elastic.co/u/QueenAmidala)\ **Replies:** 7\ **Last updated:** [February 23, 2021, 10:24pm UTC](https://discuss.elastic.co/t/filebeat-errors-on-setup-apache-ingest-pipelines-failing-to-load/265134 "2021-02-23T22:24:50Z")
So here is my problem it seems filbeats setup is failing for me. I get a bunch of empty error messages \*\*"Exiting: 1 error: Error setting up ML for apache\_ecs: 17 errors: ; ; ; ; ; ; ; ; ; ; error while".\*\* I'm thinkin… --- ## [High cardinality multi bucket terms aggregation - huge memory consumption](https://discuss.elastic.co/t/high-cardinality-multi-bucket-terms-aggregation-huge-memory-consumption/235530)
**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\ **Replies:** 1\ **Last updated:** [June 15, 2020, 8:44am UTC](https://discuss.elastic.co/t/high-cardinality-multi-bucket-terms-aggregation-huge-memory-consumption/235530 "2020-06-15T08:44:45Z")
Hi all, I' m pretty new to the elastic stack but I'm facing an issue which I don't understand. I tried to reproduce it with the easiest example: My documents look like this: { "a1" : "3abcdefghi", "a2" : "3ab… --- ## [Does not exist\]; nested: NoSuchFileException \[/usr/share/elasticsearch/config/certificates/ca/ca.crt\]](https://discuss.elastic.co/t/does-not-exist-nested-nosuchfileexception-usr-share-elasticsearch-config-certificates-ca-ca-crt/229501)
**Author:** [@Teed](https://discuss.elastic.co/u/Teed)\ **Replies:** 4\ **Last updated:** [April 23, 2020, 4:15pm UTC](https://discuss.elastic.co/t/does-not-exist-nested-nosuchfileexception-usr-share-elasticsearch-config-certificates-ca-ca-crt/229501 "2020-04-23T16:15:17Z")
I have a docker-compose with several Elasticsearch nodes, I need to put them auth and ssl. But it sends me an error like this: ElasticsearchSecurityException \[failed to load SSL configuration \[xpack.security.http.ssl\]\]… --- ## [How to calculate disk space needed for a cluster?](https://discuss.elastic.co/t/how-to-calculate-disk-space-needed-for-a-cluster/213445)
**Author:** [@tortillla](https://discuss.elastic.co/u/tortillla)\ **Replies:** 4\ **Last updated:** [January 1, 2020, 4:30pm UTC](https://discuss.elastic.co/t/how-to-calculate-disk-space-needed-for-a-cluster/213445 "2020-01-01T16:30:46Z")
I would like to have a rough estimate on how much disk space is required for a cluster. I found a paper that includes the following equation for calculating disk space: I am trying to find any Elastic documentation on… --- ## [Permission denied when installing plugin](https://discuss.elastic.co/t/permission-denied-when-installing-plugin/208100)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 9:17pm UTC](https://discuss.elastic.co/t/permission-denied-when-installing-plugin/208100 "2019-12-05T21:17:03Z")
I have my own plugin that I want to install into a new ubuntu system. I have installed everything using standard settings. When I run bin/kibana-plugin install file://\ I get the error: Plugin installatio… --- ## [Elastic-Agent healthy but sends no logs](https://discuss.elastic.co/t/elastic-agent-healthy-but-sends-no-logs/289742)
**Author:** [@jobr97](https://discuss.elastic.co/u/jobr97)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 5:04pm UTC](https://discuss.elastic.co/t/elastic-agent-healthy-but-sends-no-logs/289742 "2021-11-23T17:04:24Z")
Hi, Im trying to use Elastic Agent on my Windows 10 machine. I have sucessfully enrolled the machine and can see it marked as healty in the agent overview. However there is no log data delivered from the agent and also … --- ## [How I can install plugin elasticsearch-head](https://discuss.elastic.co/t/how-i-can-install-plugin-elasticsearch-head/137818)
**Author:** [@Win32Sector](https://discuss.elastic.co/u/Win32Sector)\ **Replies:** 2\ **Last updated:** [June 28, 2018, 4:47pm UTC](https://discuss.elastic.co/t/how-i-can-install-plugin-elasticsearch-head/137818 "2018-06-28T16:47:27Z")
Hello! How I can install elasticsearch-plugin on elasticsearch latest version on ubuntu xenial? I made clean installation of elasticsearch with ansible and it's works, but, If I Install elasticsearch-plugin with this i… --- ## [No handler for type \[dense\_vector\] for version 7.4.2](https://discuss.elastic.co/t/no-handler-for-type-dense-vector-for-version-7-4-2/223819)
**Author:** [@Vitalik](https://discuss.elastic.co/u/Vitalik)\ **Replies:** 3\ **Last updated:** [March 17, 2020, 5:03pm UTC](https://discuss.elastic.co/t/no-handler-for-type-dense-vector-for-version-7-4-2/223819 "2020-03-17T17:03:49Z")
Hi, I'm trying to load the data stored in index with a 6.7.0 version to the new index with a 7.4.2 version adding field with 'dense\_vector' type. But got the next error: RequestError(400, 'mapper\_parsing\_exception', 'No… [Previous page](https://discuss.elastic.co/top.md?page=519&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=521&per_page=50&period=all)