# Top

**URL:** https://discuss.elastic.co/top.md?page=536&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 537

---

## [NGram Tokenizerについて](https://discuss.elastic.co/t/ngram-tokenizer/217161)

<div class="topic-metadata">

**Author:** [@Yukie](https://discuss.elastic.co/u/Yukie)\
**Replies:** 4\
**Last updated:** [January 31, 2020, 2:50am UTC](https://discuss.elastic.co/t/ngram-tokenizer/217161 "2020-01-31T02:50:01Z")

</div>

はじめまして。 Elasticsearch初心者です。 日本語・英語・記号など、さまざまな文字が含まれるデータの中より、 単純に指定した文字が含まれる（部分一致）データを抽出しようとしています。 指定する文字は「１文字～」です。 ngram\_tokenizer: { type: "nGram", min\_gram: "1", max\_gram: "2", token\_chars: \["lette…

---

## [How System Index like .monitoring-es-6-2018.02.06 are being deleted automatically](https://discuss.elastic.co/t/how-system-index-like-monitoring-es-6-2018-02-06-are-being-deleted-automatically/119578)

<div class="topic-metadata">

**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\
**Replies:** 3\
**Last updated:** [February 13, 2018, 7:28am UTC](https://discuss.elastic.co/t/how-system-index-like-monitoring-es-6-2018-02-06-are-being-deleted-automatically/119578 "2018-02-13T07:28:23Z")

</div>

We are using basic license of X-PACK. All system indexes like .monitoring-es-6-2018.02.06, .monitoring-kibana-6-2018.02.06 are being deleted after 7 days automatically. I am curious to know how these are being deleted? …

---

## [Grokking the Linux authorization logs](https://discuss.elastic.co/t/grokking-the-linux-authorization-logs/104467)

<div class="topic-metadata">

**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\
**Replies:** 3\
**Last updated:** [October 22, 2017, 1:59am UTC](https://discuss.elastic.co/t/grokking-the-linux-authorization-logs/104467 "2017-10-22T01:59:09Z")

</div>

Attempting to use a syslog pattern to parse ubuntu logs for building auth reports but having issues with syslog-filter.conf file. Below are the config files and error message: Error message: \[2017-10-18T20:34:18,093\]\[…

---

## [Grok comma separated text](https://discuss.elastic.co/t/grok-comma-separated-text/145186)

<div class="topic-metadata">

**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\
**Replies:** 2\
**Last updated:** [August 20, 2018, 3:26pm UTC](https://discuss.elastic.co/t/grok-comma-separated-text/145186 "2018-08-20T15:26:33Z")

</div>

Hi all, I want to grok a message like blablabla: entry\_1, entry\_2, entry\_3 the message has at least 1 entry after the : and CAN HAVE up to x entries, which are separated with ",". I need a grok which matches the firs…

---

## [Alert on SUM of field exeeding certain value?](https://discuss.elastic.co/t/alert-on-sum-of-field-exeeding-certain-value/88654)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 6\
**Last updated:** [June 15, 2017, 1:43am UTC](https://discuss.elastic.co/t/alert-on-sum-of-field-exeeding-certain-value/88654 "2017-06-15T01:43:31Z")

</div>

Hi, I'm new to X-pack and have a question about watches. I'm using ELK to monitor the status of a satellite based internet connection we have at various locations. I would like to know if I can use a watch to sum up …

---

## [Client request error: unable to get local issuer certificate](https://discuss.elastic.co/t/client-request-error-unable-to-get-local-issuer-certificate/46661)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 2\
**Last updated:** [March 14, 2017, 11:22am UTC](https://discuss.elastic.co/t/client-request-error-unable-to-get-local-issuer-certificate/46661 "2017-03-14T11:22:55Z")

</div>

When installing Marvel I hit this issue: /opt/kibana/bin/kibana plugin --install elasticsearch/marvel/latest Installing marvel Attempting to transfer from https://download.elastic.co/elasticsearch/marvel/marvel-latest.…

---

## [Indexing sysstat data from sar and sadf](https://discuss.elastic.co/t/indexing-sysstat-data-from-sar-and-sadf/42044)

<div class="topic-metadata">

**Author:** [@robertws8](https://discuss.elastic.co/u/robertws8)\
**Replies:** 2\
**Last updated:** [February 21, 2016, 4:04pm UTC](https://discuss.elastic.co/t/indexing-sysstat-data-from-sar-and-sadf/42044 "2016-02-21T16:04:38Z")

</div>

I am already collecting syslog data via logstash into elasticsearch. My customer now wants sysstat date as well. So, I created a new index and types (using for example field names and types from sar -d -p 1 1) PUT /m…

---

## [Field collapse - can't sort inner hits to take latest document?](https://discuss.elastic.co/t/field-collapse-cant-sort-inner-hits-to-take-latest-document/117506)

<div class="topic-metadata">

**Author:** [@Thomas\_Millward\_Wrig](https://discuss.elastic.co/u/Thomas_Millward_Wrig)\
**Replies:** 5\
**Last updated:** [January 30, 2018, 11:55am UTC](https://discuss.elastic.co/t/field-collapse-cant-sort-inner-hits-to-take-latest-document/117506 "2018-01-30T11:55:22Z")

</div>

I'm trying to perform a search that returns the most recent document per unique value of field "unique\_hash". I'm using a "field collapse" aggregation, like so: { "query": { "bool": { "filter": \[ { …

---

## [Elasticsearch Java Client Aggregation Exception - all shards failed](https://discuss.elastic.co/t/elasticsearch-java-client-aggregation-exception-all-shards-failed/349860)

<div class="topic-metadata">

**Author:** [@bharath.krishn2](https://discuss.elastic.co/u/bharath.krishn2)\
**Replies:** 7\
**Last updated:** [December 26, 2023, 7:10am UTC](https://discuss.elastic.co/t/elasticsearch-java-client-aggregation-exception-all-shards-failed/349860 "2023-12-26T07:10:28Z")

</div>

Hi, I'm trying to create an aggregation on Elasticsearch through Java client using this below link But I'm getting the exception: co.elastic.clients.elasticsearch.\_types.ElasticsearchException: \[es/search\] failed: \[…

---

## [Facing issues when using java plugin with logstash 7.3.2](https://discuss.elastic.co/t/facing-issues-when-using-java-plugin-with-logstash-7-3-2/202609)

<div class="topic-metadata">

**Author:** [@buch11](https://discuss.elastic.co/u/buch11)\
**Replies:** 1\
**Last updated:** [October 9, 2019, 10:42pm UTC](https://discuss.elastic.co/t/facing-issues-when-using-java-plugin-with-logstash-7-3-2/202609 "2019-10-09T22:42:32Z")

</div>

Hi All, I am trying to write a java filter plugin - following the instructions at - https://www.elastic.co/guide/en/logstash/current/java-filter-plugin.html I am able to compile and install it locally and able to creat…

---

## [Use nested doc\_count in terms aggregation](https://discuss.elastic.co/t/use-nested-doc-count-in-terms-aggregation/79863)

<div class="topic-metadata">

**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\
**Replies:** 1\
**Last updated:** [March 27, 2017, 7:11am UTC](https://discuss.elastic.co/t/use-nested-doc-count-in-terms-aggregation/79863 "2017-03-27T07:11:30Z")

</div>

I have documents of the form { "item": "name", "@timestamp": \<date\>, "category": \[ { "key": "something", "doc\_count": num }, { "key": "otherthing", "doc\_count": num }, { "key": "thirdthing", "doc\_coun…

---

## [Search API vs Count API performance?](https://discuss.elastic.co/t/search-api-vs-count-api-performance/126544)

<div class="topic-metadata">

**Author:** [@gskema](https://discuss.elastic.co/u/gskema)\
**Replies:** 3\
**Last updated:** [April 9, 2018, 6:03am UTC](https://discuss.elastic.co/t/search-api-vs-count-api-performance/126544 "2018-04-09T06:03:32Z")

</div>

Recently we made changes to our code, where we replaced a search request (with aggs, score functions, etc.) with a count request. The problem is that we can't monitor count requests with a stats group. Someone claimed t…

---

## [Connection timeout between nodes](https://discuss.elastic.co/t/connection-timeout-between-nodes/29141)

<div class="topic-metadata">

**Author:** [@calve](https://discuss.elastic.co/u/calve)\
**Replies:** 3\
**Last updated:** [September 18, 2015, 9:33am UTC](https://discuss.elastic.co/t/connection-timeout-between-nodes/29141 "2015-09-18T09:33:43Z")

</div>

I have the following elasticsearch setup : an elasticsearch master node on coruscant (and logstash). In the past this node was a data node, but not anymore, since we have ... two elasticsearch data nodes on jangofett …

---

## [java.io.IOException: java.util.concurrent.TimeoutException: Idle timeout expired](https://discuss.elastic.co/t/java-io-ioexception-java-util-concurrent-timeoutexception-idle-timeout-expired/158167)

<div class="topic-metadata">

**Author:** [@BLZB0B](https://discuss.elastic.co/u/BLZB0B)\
**Replies:** 2\
**Last updated:** [November 26, 2018, 12:10pm UTC](https://discuss.elastic.co/t/java-io-ioexception-java-util-concurrent-timeoutexception-idle-timeout-expired/158167 "2018-11-26T12:10:53Z")

</div>

Whilst updating records in the index this morning, our elastic service decided to spit out it's dummy and come to an abrupt halt. In the logs we can see lots of GC activity, and if I'm understanding the numbers correctl…

---

## [ERR Connecting error publishing events (retrying): dial tcp {remote.logstash.host.ip}:5044: getsockopt: no route to host](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-dial-tcp-remote-logstash-host-ip-5044-getsockopt-no-route-to-host/66030)

<div class="topic-metadata">

**Author:** [@Sergey\_Grigorov](https://discuss.elastic.co/u/Sergey_Grigorov)\
**Replies:** 1\
**Last updated:** [November 15, 2016, 8:13am UTC](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-dial-tcp-remote-logstash-host-ip-5044-getsockopt-no-route-to-host/66030 "2016-11-15T08:13:14Z")

</div>

Hi there! I'm trying to send logs with filebeat to remote logstash host but receive the error on each attempt of filebeat to push to remote logstash host. Both hosts are running on linux. The logstash is up on remote h…

---

## [How to do sequence matching](https://discuss.elastic.co/t/how-to-do-sequence-matching/19378)

<div class="topic-metadata">

**Author:** [@Smitha\_Gowda](https://discuss.elastic.co/u/Smitha_Gowda)\
**Replies:** 4\
**Last updated:** [August 23, 2014, 1:32am UTC](https://discuss.elastic.co/t/how-to-do-sequence-matching/19378 "2014-08-23T01:32:27Z")

</div>

Hello Elastic Search Experts, I have recently started to look at Elastic Search to answer my analytics questions. I am fairly new to ES query, so please excuse me if this a obvious question I have session da…

---

## [Kibana dashboards import failed](https://discuss.elastic.co/t/kibana-dashboards-import-failed/135104)

<div class="topic-metadata">

**Author:** [@l33tname](https://discuss.elastic.co/u/l33tname)\
**Replies:** 5\
**Last updated:** [June 12, 2018, 11:18pm UTC](https://discuss.elastic.co/t/kibana-dashboards-import-failed/135104 "2018-06-12T23:18:34Z")

</div>

Is this a bug or or is it not possible to import the dashboards with this metricbeat version to kibana? metricbeat version 6.2.4 (amd64), libbeat 6.2.4 Exiting: Error importing Kibana dashboards: fail to create the Kib…

---

## [Regex query don't work in kibana but elasticsearch run very well](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727)

<div class="topic-metadata">

**Author:** [@whybangbang](https://discuss.elastic.co/u/whybangbang)\
**Replies:** 6\
**Last updated:** [March 13, 2016, 2:18pm UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727 "2016-03-13T14:18:58Z")

</div>

i run a regex query in kibana ,but no result ,then run the same regex in elasticsearch and run very well i have run \[rf\_tag:/.RFI\_./\] \[rf\_tag:"/.RFI\_./"\] \[rf\_tag:".RFI\_."\] and so on but no one work es regex query h…

---

## [Exclude log messages in logstash](https://discuss.elastic.co/t/exclude-log-messages-in-logstash/322829)

<div class="topic-metadata">

**Author:** [@tejal\_kubde](https://discuss.elastic.co/u/tejal_kubde)\
**Replies:** 7\
**Last updated:** [January 11, 2023, 6:31am UTC](https://discuss.elastic.co/t/exclude-log-messages-in-logstash/322829 "2023-01-11T06:31:50Z")

</div>

I'm picking up data from log files using filebeat and sending it to Elasticsearch via Logstash. I wanted to exclude few log lines. So can I use an if condition in Logstash. If yes, please share me the format and guide me…

---

## [Vega Visualization query](https://discuss.elastic.co/t/vega-visualization-query/209790)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 3\
**Last updated:** [December 9, 2019, 8:14am UTC](https://discuss.elastic.co/t/vega-visualization-query/209790 "2019-12-09T08:14:47Z")

</div>

It might be that I am not using the plugin in the intended way. Essentially I am trying to plot the data which is returned by the query from the Elasticsearch. My pet peeve was my inability (or ignorance!!) to plot the d…

---

## [How can I access kibana outside of the network?](https://discuss.elastic.co/t/how-can-i-access-kibana-outside-of-the-network/180106)

<div class="topic-metadata">

**Author:** [@ahmetkumas1](https://discuss.elastic.co/u/ahmetkumas1)\
**Replies:** 3\
**Last updated:** [May 8, 2019, 8:51am UTC](https://discuss.elastic.co/t/how-can-i-access-kibana-outside-of-the-network/180106 "2019-05-08T08:51:40Z")

</div>

Hello Friends, I want to access my kibana to the outside of the network. I checked many topics about that but no logically answers. I'm using kibana 6.5.1 ı need to edit yml file but I don't know what to change. Can any…

---

## [Logstash using date filter](https://discuss.elastic.co/t/logstash-using-date-filter/105906)

<div class="topic-metadata">

**Author:** [@Guillaume\_B](https://discuss.elastic.co/u/Guillaume_B)\
**Replies:** 3\
**Last updated:** [October 31, 2017, 8:20pm UTC](https://discuss.elastic.co/t/logstash-using-date-filter/105906 "2017-10-31T20:20:10Z")

</div>

Hello everyone, I am using Logstash to parsed the message field in 3 different fields. I am trying to use the date filter to set the type of one of my field to the date type. This is an example of a line from my log fi…

---

## [Visualize: Bad Gateway & Gateway Timeout](https://discuss.elastic.co/t/visualize-bad-gateway-gateway-timeout/52198)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 3\
**Last updated:** [June 9, 2016, 8:03pm UTC](https://discuss.elastic.co/t/visualize-bad-gateway-gateway-timeout/52198 "2016-06-09T20:03:24Z")

</div>

Error info: Error: Bad Gateway ErrorAbstract@http://10.0.11.40/bundles/kibana.bundle.js?v=9732:74982:20 StatusCodeError@http://10.0.11.40/bundles/kibana.bundle.js?v=9732:75122:8 respond@http://10.0.11.40/bundles/kibana…

---

## [Reproducing grafana dashboard on kibana 4.6.1](https://discuss.elastic.co/t/reproducing-grafana-dashboard-on-kibana-4-6-1/66648)

<div class="topic-metadata">

**Author:** [@jstar](https://discuss.elastic.co/u/jstar)\
**Replies:** 2\
**Last updated:** [November 21, 2016, 9:54am UTC](https://discuss.elastic.co/t/reproducing-grafana-dashboard-on-kibana-4-6-1/66648 "2016-11-21T09:54:31Z")

</div>

Hi Everybody, I'm a newbie on kibana. I have installed kibana 4.6.1, elasticsearch 2.4.1, logstash 2.4 and metricbeat 6.0.0. I was able to setup the following architecture metricbeat -\> logstash -\> elasticsearch -\> kiba…

---

## [Creating/updating array of objects in elasticsearch logstash output](https://discuss.elastic.co/t/creating-updating-array-of-objects-in-elasticsearch-logstash-output/59139)

<div class="topic-metadata">

**Author:** [@Nandan\_Phadke](https://discuss.elastic.co/u/Nandan_Phadke)\
**Replies:** 2\
**Last updated:** [August 30, 2016, 4:30am UTC](https://discuss.elastic.co/t/creating-updating-array-of-objects-in-elasticsearch-logstash-output/59139 "2016-08-30T04:30:55Z")

</div>

I am facing an issue using elastic search output with logstash. Here is my sample event { "guid":"someguid", "nestedObject":{ "field1":"val1", "field2":"val2" } } Here is what I want to hav…

---

## [Pointers to Improve indexing performance?](https://discuss.elastic.co/t/pointers-to-improve-indexing-performance/73369)

<div class="topic-metadata">

**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\
**Replies:** 5\
**Last updated:** [January 31, 2017, 7:10pm UTC](https://discuss.elastic.co/t/pointers-to-improve-indexing-performance/73369 "2017-01-31T19:10:09Z")

</div>

Hi There, We are trying to index documents using logstash 2.4.0 to elasticsearch 2.4.0. Currently we are facing performance issue on indexing. 700 MB of data is taking around 30 minutes of time. We have a 10 node clu…

---

## [Kibana increasing memory usage](https://discuss.elastic.co/t/kibana-increasing-memory-usage/272171)

<div class="topic-metadata">

**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\
**Replies:** 4\
**Last updated:** [May 10, 2021, 2:03pm UTC](https://discuss.elastic.co/t/kibana-increasing-memory-usage/272171 "2021-05-10T14:03:05Z")

</div>

Hi, after upgrading to 7.12.0 a strange problem started occuring. Kibana keeps consuming more and more RAM until it goes to swap and then I have to restart kibana service because the performance goes wildly off. We have…

---

## [Any anthing like "cronjob' existing in Elasticsearch?](https://discuss.elastic.co/t/any-anthing-like-cronjob-existing-in-elasticsearch/70418)

<div class="topic-metadata">

**Author:** [@JoeLi](https://discuss.elastic.co/u/JoeLi)\
**Replies:** 3\
**Last updated:** [January 4, 2017, 4:01am UTC](https://discuss.elastic.co/t/any-anthing-like-cronjob-existing-in-elasticsearch/70418 "2017-01-04T04:01:31Z")

</div>

I am facing a case: I have price list (including all kinds of promotion prices) I need to search and get an list with current price The current price will be different depending on which date you are doing the search …

---

## [Changing Map Type (WMS)](https://discuss.elastic.co/t/changing-map-type-wms/82106)

<div class="topic-metadata">

**Author:** [@Bondo](https://discuss.elastic.co/u/Bondo)\
**Replies:** 2\
**Last updated:** [April 14, 2017, 7:51am UTC](https://discuss.elastic.co/t/changing-map-type-wms/82106 "2017-04-14T07:51:42Z")

</div>

Has anyone had success changing the type of map Kibana uses when visualizing geo-locations? Any useful examples? I just can't find any examples of using a different WMS server to change the map type.

---

## [JavaEsSpark.saveToES not using pre-defined mapping fields while posting the data to ES cluster](https://discuss.elastic.co/t/javaesspark-savetoes-not-using-pre-defined-mapping-fields-while-posting-the-data-to-es-cluster/76761)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 8\
**Last updated:** [March 12, 2017, 5:41pm UTC](https://discuss.elastic.co/t/javaesspark-savetoes-not-using-pre-defined-mapping-fields-while-posting-the-data-to-es-cluster/76761 "2017-03-12T17:41:24Z")

</div>

Hello All, We have been trying to push the data to Elasticsearch cluster by using the following method in spark "JavaEsSpark.saveToEs" I have defined the "rd\_innovation\_config1" index mappings and settings in …

---

## [Logstash - how to get yesterday's date](https://discuss.elastic.co/t/logstash-how-to-get-yesterdays-date/109054)

<div class="topic-metadata">

**Author:** [@Pawel\_Piorkowski](https://discuss.elastic.co/u/Pawel_Piorkowski)\
**Replies:** 4\
**Last updated:** [December 13, 2017, 8:56am UTC](https://discuss.elastic.co/t/logstash-how-to-get-yesterdays-date/109054 "2017-12-13T08:56:23Z")

</div>

Hello, I have ELK stack installed and would like to store csv data there. The only problem I am facing is that my data doesn't contain date information (just time). Example message looks something like: aaa;bbb;ccc;23:…

---

## [Elasticsearch high query/fetch time](https://discuss.elastic.co/t/elasticsearch-high-query-fetch-time/91778)

<div class="topic-metadata">

**Author:** [@micsnare](https://discuss.elastic.co/u/micsnare)\
**Replies:** 4\
**Last updated:** [July 21, 2017, 11:40am UTC](https://discuss.elastic.co/t/elasticsearch-high-query-fetch-time/91778 "2017-07-21T11:40:51Z")

</div>

Hello everyone, this is my first post, and I'm slowly finding my way into the Elastic world.... I've just saw this high unusual peak in my Elasticsearch cluster According to the elastic-hq my elasticsearch cluster has …

---

## [Elastic search Cluster indexing](https://discuss.elastic.co/t/elastic-search-cluster-indexing/50518)

<div class="topic-metadata">

**Author:** [@Hitesh\_Chavhan](https://discuss.elastic.co/u/Hitesh_Chavhan)\
**Replies:** 6\
**Last updated:** [May 20, 2016, 12:56pm UTC](https://discuss.elastic.co/t/elastic-search-cluster-indexing/50518 "2016-05-20T12:56:51Z")

</div>

hi, I have a two node ES cluster. I need to index the data on the cluster. Do I need to provide both the ips in my indexing script. I am doing this using python. Thanks.

---

## [Cannot see SNMP trap message in Kibana](https://discuss.elastic.co/t/cannot-see-snmp-trap-message-in-kibana/88833)

<div class="topic-metadata">

**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\
**Replies:** 5\
**Last updated:** [June 12, 2017, 3:36pm UTC](https://discuss.elastic.co/t/cannot-see-snmp-trap-message-in-kibana/88833 "2017-06-12T15:36:26Z")

</div>

Hi, I am running Kibana 4.3.0 logstash 2.0.0 elasticsearch 2.4.5 Here is my logstash config for snmp traps: input { snmptrap { type =\> "snmptrap" host =\> "0.0.0.0" port =\> 162 } } filter{ …

---

## [Where to find "search latency" in the API's?](https://discuss.elastic.co/t/where-to-find-search-latency-in-the-apis/59202)

<div class="topic-metadata">

**Author:** [@frankkoornstra](https://discuss.elastic.co/u/frankkoornstra)\
**Replies:** 3\
**Last updated:** [August 30, 2016, 10:38am UTC](https://discuss.elastic.co/t/where-to-find-search-latency-in-the-apis/59202 "2016-08-30T10:38:07Z")

</div>

On the Marvel screens you can see the "search latency" but I can't seem to find that metric in any of the API's (at least not with that name or something similar), granted that there are quite a lot of them and in turn a…

---

## [Count or Search with size=0](https://discuss.elastic.co/t/count-or-search-with-size-0/69785)

<div class="topic-metadata">

**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\
**Replies:** 2\
**Last updated:** [December 23, 2016, 5:47am UTC](https://discuss.elastic.co/t/count-or-search-with-size-0/69785 "2016-12-23T05:47:00Z")

</div>

I am using ElasticSearch v2.4.0. Which operations out of (Count) or (Search with size=0) will be faster in fetching the response count? Since, count API for Java is deprecated for versions after 2.1.0, Is (Search wit…

---

## [Index significantly larger after reindexing](https://discuss.elastic.co/t/index-significantly-larger-after-reindexing/37381)

<div class="topic-metadata">

**Author:** [@zombie101](https://discuss.elastic.co/u/zombie101)\
**Replies:** 5\
**Last updated:** [December 19, 2015, 12:46am UTC](https://discuss.elastic.co/t/index-significantly-larger-after-reindexing/37381 "2015-12-19T00:46:41Z")

</div>

I've had to reindex some data in order to change the shard count on the index they were in: I went from having one shard on the old index to four shards on the new index. The old index (1 shard) was 38.1GB; the new inde…

---

## ["The quota has been exceeded error" when accessing a dashboard](https://discuss.elastic.co/t/the-quota-has-been-exceeded-error-when-accessing-a-dashboard/257215)

<div class="topic-metadata">

**Author:** [@Craig\_Sharp](https://discuss.elastic.co/u/Craig_Sharp)\
**Replies:** 4\
**Last updated:** [December 11, 2020, 2:03am UTC](https://discuss.elastic.co/t/the-quota-has-been-exceeded-error-when-accessing-a-dashboard/257215 "2020-12-11T02:03:08Z")

</div>

I am receiving the following error when trying to access one of my regularly used dashboards. "The quota has been exceeded" This is a new one for me. I am not finding anything specific on a web search. Any assistance…

---

## [SSL/TLS failed to load, java.io.IOException: extra data given to DerValue constructor](https://discuss.elastic.co/t/ssl-tls-failed-to-load-java-io-ioexception-extra-data-given-to-dervalue-constructor/256711)

<div class="topic-metadata">

**Author:** [@ctan](https://discuss.elastic.co/u/ctan)\
**Replies:** 2\
**Last updated:** [December 2, 2020, 8:21pm UTC](https://discuss.elastic.co/t/ssl-tls-failed-to-load-java-io-ioexception-extra-data-given-to-dervalue-constructor/256711 "2020-12-02T20:21:28Z")

</div>

Hello! We are setting up our first Elasticsearch cluster and hit a problem with using our private CAs. I am able to get a cert and upload it, but every time I start elasticsearch I get errs around this: java.io.IOExcep…

---

## [Report from Kibana connected to Elastic Cloud - Failed to decrypt report job data](https://discuss.elastic.co/t/report-from-kibana-connected-to-elastic-cloud-failed-to-decrypt-report-job-data/272026)

<div class="topic-metadata">

**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\
**Replies:** 5\
**Last updated:** [May 3, 2021, 10:39pm UTC](https://discuss.elastic.co/t/report-from-kibana-connected-to-elastic-cloud-failed-to-decrypt-report-job-data/272026 "2021-05-03T22:39:02Z")

</div>

Hi All, I noticed the following error on a custom Kibana which is connected to Elastic Cloud elasticsearch instance. Reverse proxy exposes port 80 and then Cloudflare provides https connection. Therefore, I have set #…

---

## [Is it possible to redirect the request from one server to another?](https://discuss.elastic.co/t/is-it-possible-to-redirect-the-request-from-one-server-to-another/8374)

<div class="topic-metadata">

**Author:** [@Abhishek\_Jajoria](https://discuss.elastic.co/u/Abhishek_Jajoria)\
**Replies:** 5\
**Last updated:** [July 10, 2012, 12:51pm UTC](https://discuss.elastic.co/t/is-it-possible-to-redirect-the-request-from-one-server-to-another/8374 "2012-07-10T12:51:38Z")

</div>

Here is a problem , I have 3 ES nodes running , if one ES node gets down can we serve request from other ES nodes automatically .

---

## [Error with filtered, date ranged, search query](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271)

<div class="topic-metadata">

**Author:** [@jbendotnet](https://discuss.elastic.co/u/jbendotnet)\
**Replies:** 6\
**Last updated:** [December 13, 2017, 9:55am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271 "2017-12-13T09:55:48Z")

</div>

Hi, Elastic (2.4) is unhappy with this search query, from the docs it looks approx right, any pointers gratefully received :slight\_smile: { "query":{ "query\_string":{ "query":"news", "default…

---

## [Getting unauthorized when doing GET on indices with a read-only user](https://discuss.elastic.co/t/getting-unauthorized-when-doing-get-on-indices-with-a-read-only-user/246129)

<div class="topic-metadata">

**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\
**Replies:** 3\
**Last updated:** [August 26, 2020, 8:07pm UTC](https://discuss.elastic.co/t/getting-unauthorized-when-doing-get-on-indices-with-a-read-only-user/246129 "2020-08-26T20:07:47Z")

</div>

Hello, I am using Kibana/Elasticsearch 7.9.0, and testing enabling security on the stack. I am starting with a test user that gets the following on the GET API call: GET \_cat/indices { "error" : { "root\_cause" …

---

## [DMARC in ElasticStack](https://discuss.elastic.co/t/dmarc-in-elasticstack/120375)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 6\
**Last updated:** [February 19, 2018, 1:48am UTC](https://discuss.elastic.co/t/dmarc-in-elasticstack/120375 "2018-02-19T01:48:45Z")

</div>

I've been on a mission the last few weeks to get ElasticStack to ingest DMARC's aggregate reports that come from remote mail domains as compressed xml files. From the onset, one of the goals I had was to build something…

---

## [Setting up Filebeats, ELK, with Rails + Docker](https://discuss.elastic.co/t/setting-up-filebeats-elk-with-rails-docker/126262)

<div class="topic-metadata">

**Author:** [@superjose](https://discuss.elastic.co/u/superjose)\
**Replies:** 4\
**Last updated:** [April 5, 2018, 4:19pm UTC](https://discuss.elastic.co/t/setting-up-filebeats-elk-with-rails-docker/126262 "2018-04-05T16:19:46Z")

</div>

Hi everybody! Kudos to the @elastic team! It's impressive what this piece of software can do! :smile: I've been going through the docs, and googling through no avail. Hit Stack Overflow, and GitHub. I've studied the rep…

---

## [Documents with german umlauts](https://discuss.elastic.co/t/documents-with-german-umlauts/95513)

<div class="topic-metadata">

**Author:** [@astropanic](https://discuss.elastic.co/u/astropanic)\
**Replies:** 2\
**Last updated:** [August 2, 2017, 5:52pm UTC](https://discuss.elastic.co/t/documents-with-german-umlauts/95513 "2017-08-02T17:52:20Z")

</div>

I have two documents: {“name”: “Drucker”} {“name”: “Drücker”} How I should index it and how the query should be build so I can: a) find both documents querying for "drucker" b) sort the documents according to the se…

---

## [When path.data is changed, elasticsearch is not starting](https://discuss.elastic.co/t/when-path-data-is-changed-elasticsearch-is-not-starting/95991)

<div class="topic-metadata">

**Author:** [@rajesh](https://discuss.elastic.co/u/rajesh)\
**Replies:** 3\
**Last updated:** [August 5, 2017, 9:58pm UTC](https://discuss.elastic.co/t/when-path-data-is-changed-elasticsearch-is-not-starting/95991 "2017-08-05T21:58:39Z")

</div>

Hi, I have installed elasticsearch on Linux-Redhat distribution using RPM package. It runs normally until I change path.data in elasticsearch.yml. I set path.data to /opt/elk/es/data and it started failing with the belo…

---

## [Getting empty response from elastic search even though data is loaded to search server](https://discuss.elastic.co/t/getting-empty-response-from-elastic-search-even-though-data-is-loaded-to-search-server/21177)

<div class="topic-metadata">

**Author:** [@Vijayakumari\_B\_N](https://discuss.elastic.co/u/Vijayakumari_B_N)\
**Replies:** 2\
**Last updated:** [December 11, 2014, 6:56am UTC](https://discuss.elastic.co/t/getting-empty-response-from-elastic-search-even-though-data-is-loaded-to-search-server/21177 "2014-12-11T06:56:08Z")

</div>

Hi, I am getting the empty response from elastic search server. Below is the POC which i had written. For creating index i used client.index(new IndexRequest("incident", "incident", (incident.getIrId()+"")…

---

## [Help with 4 node cluster](https://discuss.elastic.co/t/help-with-4-node-cluster/22234)

<div class="topic-metadata">

**Author:** [@sysads](https://discuss.elastic.co/u/sysads)\
**Replies:** 4\
**Last updated:** [February 19, 2015, 10:47pm UTC](https://discuss.elastic.co/t/help-with-4-node-cluster/22234 "2015-02-19T22:47:32Z")

</div>

Hi I am in need of help on setting up a 4 node elasticsearch servers. I have installed and configured ES on all 4 nodes but I am lost as to what the configuration in elasticsearch.yml will be: - if I want to ha…

---

## [Unable to connect to Elasticsearch server 6.2.2 from spring application](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-server-6-2-2-from-spring-application/240055)

<div class="topic-metadata">

**Author:** [@alexc1](https://discuss.elastic.co/u/alexc1)\
**Replies:** 1\
**Last updated:** [July 7, 2020, 12:07pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-server-6-2-2-from-spring-application/240055 "2020-07-07T12:07:12Z")

</div>

Hello everyone, I am struggling to connect my webapp based on Spring Framework 4.3.13 (not a springboot app) to an Elasticsearch server 6.2.2. I've googling al lot but with no result unfortunally. Here the code I'm ex…

[Previous page](https://discuss.elastic.co/top.md?page=535&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=537&per_page=50&period=all)
