# Top **URL:** https://discuss.elastic.co/top.md?page=539&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 540 --- ## [Version conflict for bulk index - do the all the docs included into the bulk index fail?](https://discuss.elastic.co/t/version-conflict-for-bulk-index-do-the-all-the-docs-included-into-the-bulk-index-fail/278951)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 3\ **Last updated:** [July 17, 2021, 10:07am UTC](https://discuss.elastic.co/t/version-conflict-for-bulk-index-do-the-all-the-docs-included-into-the-bulk-index-fail/278951 "2021-07-17T10:07:14Z")
From time to time, I’ve seen bulk index fails because of version conflicts. Because of how things are, I’m ok with some docs failing to index because it exists already. However, in these cases, do all the documents get r… --- ## [HowTo: Integer comparison in logstash filter](https://discuss.elastic.co/t/howto-integer-comparison-in-logstash-filter/175675)
**Author:** [@arberg](https://discuss.elastic.co/u/arberg)\ **Replies:** 2\ **Last updated:** [April 10, 2019, 10:51am UTC](https://discuss.elastic.co/t/howto-integer-comparison-in-logstash-filter/175675 "2019-04-10T10:51:14Z")
I cannot get integer comparisons to work in logstash filter, using logstash 6.4.2. input { beats { port =\> 5044 } } filter { mutate { add\_field =\> { "\[@metadata\]\[myLogLevel\]" =\> 1 } add\_fiel… --- ## [Deploy Elastic Search with Kubernetes StatefulSet cannot persist the index data](https://discuss.elastic.co/t/deploy-elastic-search-with-kubernetes-statefulset-cannot-persist-the-index-data/126484)
**Author:** [@Bai](https://discuss.elastic.co/u/Bai)\ **Replies:** 2\ **Last updated:** [April 6, 2018, 5:15pm UTC](https://discuss.elastic.co/t/deploy-elastic-search-with-kubernetes-statefulset-cannot-persist-the-index-data/126484 "2018-04-06T17:15:29Z")
Hi All, I'm deploying Elastic Search as StatefulSet in Kubernetes, but cannot make the persistent volume working properly. (Reference: https://github.com/pires/kubernetes-elasticsearch-cluster/tree/master/stateful, I do… --- ## [Format for multi-level aggregation in Vega](https://discuss.elastic.co/t/format-for-multi-level-aggregation-in-vega/127193)
**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\ **Replies:** 2\ **Last updated:** [October 15, 2018, 8:41pm UTC](https://discuss.elastic.co/t/format-for-multi-level-aggregation-in-vega/127193 "2018-10-15T20:41:35Z")
If I have an ES query that returns JSON like: "aggregations": { "per\_buyer": { "doc\_count\_error\_upper\_bound": 0, "sum\_other\_doc\_count": 0, "buckets": \[ { "key": "Example-buyer", "doc\_count": … --- ## [Need help in understanding Elasticsearch configuration with TLS/SSL](https://discuss.elastic.co/t/need-help-in-understanding-elasticsearch-configuration-with-tls-ssl/263998)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 5\ **Last updated:** [February 12, 2021, 9:58am UTC](https://discuss.elastic.co/t/need-help-in-understanding-elasticsearch-configuration-with-tls-ssl/263998 "2021-02-12T09:58:51Z")
Hi Team, We have a EFK cluster (7.4.x) which was setup more than a year ago with x-pack enabled. At that I followed official document and created self-signed certificates using elastisearch-certutil and that was workin… --- ## [Config file ownership and permissions- Filebeat](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889)
**Author:** [@Shatakshi\_Shukla](https://discuss.elastic.co/u/Shatakshi_Shukla)\ **Replies:** 5\ **Last updated:** [May 16, 2018, 7:14pm UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889 "2018-05-16T19:14:14Z")
Filebeat Configuration shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$ vi filebeat.yml shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$ sudo ./filebeat -e -c filebeat.yml -d "pub… --- ## [Calculate age](https://discuss.elastic.co/t/calculate-age/89837)
**Author:** [@shaharz](https://discuss.elastic.co/u/shaharz)\ **Replies:** 5\ **Last updated:** [June 19, 2017, 5:30am UTC](https://discuss.elastic.co/t/calculate-age/89837 "2017-06-19T05:30:00Z")
HI, i have a birthday field. what is the best practice to calculate age to be able to search on and for doing some visualization in kibana also? thanks, Shahar --- ## [Even Shard Distribution?](https://discuss.elastic.co/t/even-shard-distribution/18821)
**Author:** [@michael\_4](https://discuss.elastic.co/u/michael_4)\ **Replies:** 6\ **Last updated:** [July 24, 2014, 8:41pm UTC](https://discuss.elastic.co/t/even-shard-distribution/18821 "2014-07-24T20:41:01Z")
Hey guys, We've recently set up a 5 node ES cluster, serving our 6-shards / 1-replica index (we chose 6 back when we only had 3 nodes). We sometimes find a highly uneven distribution of shards across the nodes. Fo… --- ## [How do I query last 1 hour of data and order it based on time?](https://discuss.elastic.co/t/how-do-i-query-last-1-hour-of-data-and-order-it-based-on-time/143069)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 1\ **Last updated:** [August 6, 2018, 5:02pm UTC](https://discuss.elastic.co/t/how-do-i-query-last-1-hour-of-data-and-order-it-based-on-time/143069 "2018-08-06T17:02:36Z")
Hello, I have data in ES such as: @timestamp --\> Timestamp field record.hostIP record.destIP record.port record.application etc... I would like to plot this on a graph in js and hence need time on the X axis and coun… --- ## [KIBANA: This field is present in your elasticsearch mapping but not in any documents in the search results. You may still be able to visualize or search on it](https://discuss.elastic.co/t/kibana-this-field-is-present-in-your-elasticsearch-mapping-but-not-in-any-documents-in-the-search-results-you-may-still-be-able-to-visualize-or-search-on-it/68847)
**Author:** [@pjhu](https://discuss.elastic.co/u/pjhu)\ **Replies:** 2\ **Last updated:** [December 14, 2016, 2:05am UTC](https://discuss.elastic.co/t/kibana-this-field-is-present-in-your-elasticsearch-mapping-but-not-in-any-documents-in-the-search-results-you-may-still-be-able-to-visualize-or-search-on-it/68847 "2016-12-14T02:05:34Z")
Please help me. --- ## [Config Help with SSL between Logstash and Elasticsearch](https://discuss.elastic.co/t/config-help-with-ssl-between-logstash-and-elasticsearch/49876)
**Author:** [@Aljaz\_Gantar](https://discuss.elastic.co/u/Aljaz_Gantar)\ **Replies:** 1\ **Last updated:** [May 13, 2016, 1:29pm UTC](https://discuss.elastic.co/t/config-help-with-ssl-between-logstash-and-elasticsearch/49876 "2016-05-13T13:29:35Z")
Okei so i have this case: I have tree server which are running the whole stack, and they are set up so: Filebeat =\> Logstash =\> Elasticsearch/Kibana And I successfully configured that the Filebeat sends logs from his s… --- ## [Setting the Elastic User Password with Dockerfile](https://discuss.elastic.co/t/setting-the-elastic-user-password-with-dockerfile/182651)
**Author:** [@leobaiano](https://discuss.elastic.co/u/leobaiano)\ **Replies:** 2\ **Last updated:** [May 24, 2019, 1:45pm UTC](https://discuss.elastic.co/t/setting-the-elastic-user-password-with-dockerfile/182651 "2019-05-24T13:45:50Z")
I created a docker-compose.yml with: build: context:. dockerfile: ./Dockerfile The problem is that when I use Dockerfile for the image it does not accept the environment so I can not set the password o… --- ## ["document\_type" on filebeat & "if" and "type" on logstash are not working](https://discuss.elastic.co/t/document-type-on-filebeat-if-and-type-on-logstash-are-not-working/78636)
**Author:** [@yoshifuji\_tokyo](https://discuss.elastic.co/u/yoshifuji_tokyo)\ **Replies:** 2\ **Last updated:** [March 15, 2017, 2:09pm UTC](https://discuss.elastic.co/t/document-type-on-filebeat-if-and-type-on-logstash-are-not-working/78636 "2017-03-15T14:09:51Z")
Trouble I set "document\_type" on filebeat, and set "if" and "type" on logstash conf. I've confirmed these logs are on AWS S3 bucket, however all logs are combined into one bucket "web-app" without separation. It seem… --- ## [Converting milliseconds into seconds](https://discuss.elastic.co/t/converting-milliseconds-into-seconds/71837)
**Author:** [@bini](https://discuss.elastic.co/u/bini)\ **Replies:** 2\ **Last updated:** [January 18, 2017, 4:02am UTC](https://discuss.elastic.co/t/converting-milliseconds-into-seconds/71837 "2017-01-18T04:02:23Z")
Hi, I have captured a field Response time from the log file, but it is in milliseconds, is there a way to convert it in seconds in logstash using any plugin. I tried using mutate but it won't work. Kindly help me out. --- ## [Correct way of Logstash persisted queue performance testing](https://discuss.elastic.co/t/correct-way-of-logstash-persisted-queue-performance-testing/169113)
**Author:** [@alexpanas](https://discuss.elastic.co/u/alexpanas)\ **Replies:** 5\ **Last updated:** [February 20, 2019, 9:16pm UTC](https://discuss.elastic.co/t/correct-way-of-logstash-persisted-queue-performance-testing/169113 "2019-02-20T21:16:26Z")
Hello, I am trying to measure Logstash 6.6 performance to find the performance impact of enabling persisted queues on Logstash 6.6. To eliminate any influence of elasticsearch environment - all tests are being output… --- ## [Invalid internal transport message format-while initializing Search-Guard](https://discuss.elastic.co/t/invalid-internal-transport-message-format-while-initializing-search-guard/188176)
**Author:** [@madhu2103](https://discuss.elastic.co/u/madhu2103)\ **Replies:** 6\ **Last updated:** [June 30, 2019, 9:17pm UTC](https://discuss.elastic.co/t/invalid-internal-transport-message-format-while-initializing-search-guard/188176 "2019-06-30T21:17:46Z")
We have installed elasticsearch 6.4 and working fine.But when we are are trying to install search-Guard with keystore certs on same node we facing below issue. sudo chmod +x ./sgadmin.sh && sudo ./sgadmin.sh -h ...\[IP a… --- ## [Cluster settings from elasticsearch.yml are not working](https://discuss.elastic.co/t/cluster-settings-from-elasticsearch-yml-are-not-working/650)
**Author:** [@emptyemail](https://discuss.elastic.co/u/emptyemail)\ **Replies:** 7\ **Last updated:** [May 14, 2015, 5:45pm UTC](https://discuss.elastic.co/t/cluster-settings-from-elasticsearch-yml-are-not-working/650 "2015-05-14T17:45:38Z")
Hi, I could be doing something wrong. But for some reason the following properties in elasticsearch.yml are not applying to a new cluster. threadpool.bulk.queue\_size : 500 routing.allocation.awareness.attributes: rack… --- ## [Kibana correlation with threat intelligence feed?](https://discuss.elastic.co/t/kibana-correlation-with-threat-intelligence-feed/77258)
**Author:** [@zacesa](https://discuss.elastic.co/u/zacesa)\ **Replies:** 4\ **Last updated:** [March 6, 2017, 3:43am UTC](https://discuss.elastic.co/t/kibana-correlation-with-threat-intelligence-feed/77258 "2017-03-06T03:43:37Z")
I was wondering if it's possible to correlate data captured using packetbeat with threat intelligence feeds? --- ## [Org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution (shutting down) on org.elasticsearch.transport.TransportService](https://discuss.elastic.co/t/org-elasticsearch-common-util-concurrent-esrejectedexecutionexception-rejected-execution-shutting-down-on-org-elasticsearch-transport-transportservice/29660)
**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\ **Replies:** 0\ **Last updated:** [September 20, 2015, 3:33pm UTC](https://discuss.elastic.co/t/org-elasticsearch-common-util-concurrent-esrejectedexecutionexception-rejected-execution-shutting-down-on-org-elasticsearch-transport-transportservice/29660 "2015-09-20T15:33:21Z")
Hi, During indexing I got this exception : org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution (shutting down) on org.elasticsearch.transport.TransportService. Why it saying (shutti… --- ## [Convert timestamps to UTC(UNIX) from PST,IST](https://discuss.elastic.co/t/convert-timestamps-to-utc-unix-from-pst-ist/193386)
**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\ **Replies:** 8\ **Last updated:** [August 1, 2019, 8:25pm UTC](https://discuss.elastic.co/t/convert-timestamps-to-utc-unix-from-pst-ist/193386 "2019-08-01T20:25:17Z")
Hello, How can I convert my timestamps in UNIX from different timezones such as EDT, PST/IST to UTC in Logstash filters? --- ## [Visualize specific string from field](https://discuss.elastic.co/t/visualize-specific-string-from-field/229012)
**Author:** [@Jose\_H](https://discuss.elastic.co/u/Jose_H)\ **Replies:** 6\ **Last updated:** [April 27, 2020, 7:48am UTC](https://discuss.elastic.co/t/visualize-specific-string-from-field/229012 "2020-04-27T07:48:45Z")
Hi all. We are trying to visualize the count of users connected to our VPN from the event.original field (Cisco FirePower syslogs collected through filebeat) but are unsure how to strip and only show users instead of the… --- ## [Found duplicate records in elasticsearch](https://discuss.elastic.co/t/found-duplicate-records-in-elasticsearch/109071)
**Author:** [@nsphaniraj](https://discuss.elastic.co/u/nsphaniraj)\ **Replies:** 7\ **Last updated:** [November 27, 2017, 5:46pm UTC](https://discuss.elastic.co/t/found-duplicate-records-in-elasticsearch/109071 "2017-11-27T17:46:53Z")
Hello, We have setup logs pipeline as below filebeat -\> kafka -\> logstash -\> elasticsearch filebeat is running on many servers which will send to centralized kafka server one topic and 20 partitions. We have 2 logsta… --- ## [Group by function in Discover](https://discuss.elastic.co/t/group-by-function-in-discover/305922)
**Author:** [@temp\_account](https://discuss.elastic.co/u/temp_account)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 8:10am UTC](https://discuss.elastic.co/t/group-by-function-in-discover/305922 "2022-06-01T08:10:28Z")
i used a lot of Kibana/Discover in work. As you know, in the query result of Discover, in each log record, there may be many fields included, eg. userid, flowid, userip, username, userAction, etc. Several log record ma… --- ## [Hash function for routing in ES 5.5](https://discuss.elastic.co/t/hash-function-for-routing-in-es-5-5/102865)
**Author:** [@jmartinter](https://discuss.elastic.co/u/jmartinter)\ **Replies:** 8\ **Last updated:** [October 6, 2017, 12:56pm UTC](https://discuss.elastic.co/t/hash-function-for-routing-in-es-5-5/102865 "2017-10-06T12:56:11Z")
Hi, all, I'd like to order a long list of doc ids according to the shard each document is stored in. I paginate this list and run a query by id per page so, if most of the ids in page correspond to a same shard, system … --- ## [登録済みの templateの一部を変更することは可能でしょうか](https://discuss.elastic.co/t/template/162100)
**Author:** [@tsukahara](https://discuss.elastic.co/u/tsukahara)\ **Replies:** 2\ **Last updated:** [January 7, 2019, 12:16am UTC](https://discuss.elastic.co/t/template/162100 "2019-01-07T00:16:31Z")
現在 Elasticsearch6.2.2を使用しております。 登録済みの templateのうち一部変更したいのですが 上書きで templateを定義しなおすのではなく 変更箇所のみ指定する方法はありますでしょうか。 登録例 PUT \_template/t\_aa { "index\_patterns": \[ "aa" \], "settings": { "index": { … --- ## [Count a specific value of a field as metric](https://discuss.elastic.co/t/count-a-specific-value-of-a-field-as-metric/119718)
**Author:** [@Diego\_Nogueira](https://discuss.elastic.co/u/Diego_Nogueira)\ **Replies:** 2\ **Last updated:** [February 14, 2018, 11:00pm UTC](https://discuss.elastic.co/t/count-a-specific-value-of-a-field-as-metric/119718 "2018-02-14T23:00:49Z")
hi everyone, i'm trying count a specific value of a field, as a metric at data table visualization, but i don't known as do it. Could anyone help? Thanks. --- ## [Run multiple logstash replicas in Docker](https://discuss.elastic.co/t/run-multiple-logstash-replicas-in-docker/168595)
**Author:** [@chmodrs](https://discuss.elastic.co/u/chmodrs)\ **Replies:** 7\ **Last updated:** [February 15, 2019, 3:31pm UTC](https://discuss.elastic.co/t/run-multiple-logstash-replicas-in-docker/168595 "2019-02-15T15:31:05Z")
Hi, I have an ELK cluster running in Docker Swarm mode. The cluster meed my needs because i have two replicas of elastic, but i have a problem with logstash running multiple instances. When i send amount of logs to log… --- ## [Elastic search ignoring refresh\_interval setting from elasticsearch.yml](https://discuss.elastic.co/t/elastic-search-ignoring-refresh-interval-setting-from-elasticsearch-yml/12856)
**Author:** [@Arjit\_Gupta](https://discuss.elastic.co/u/Arjit_Gupta)\ **Replies:** 7\ **Last updated:** [April 24, 2014, 1:03pm UTC](https://discuss.elastic.co/t/elastic-search-ignoring-refresh-interval-setting-from-elasticsearch-yml/12856 "2014-04-24T13:03:48Z")
Hi, We have made an entry in elasticsearch.yml for refresh\_interval as \*index.refresh\_interval: 1s\* But its not honouring the setting . When I get setting to cluster to it. curl -XGET 'http://localhost:920… --- ## [Failed Shard Recovery](https://discuss.elastic.co/t/failed-shard-recovery/22073)
**Author:** [@Mario\_Rodriguez](https://discuss.elastic.co/u/Mario_Rodriguez)\ **Replies:** 4\ **Last updated:** [February 17, 2015, 11:37am UTC](https://discuss.elastic.co/t/failed-shard-recovery/22073 "2015-02-17T11:37:30Z")
I have 7 indices in our ES cluster, and one of the indices has an issue that is preventing recovery. Here is what I am seeing in the log: \[2015-02-10 00:00:02,483\]\[WARN \]\[indices.recovery \] \[ES\_Server1\] … --- ## [Search string with special characters](https://discuss.elastic.co/t/search-string-with-special-characters/141576)
**Author:** [@Ayala](https://discuss.elastic.co/u/Ayala)\ **Replies:** 3\ **Last updated:** [July 25, 2018, 2:25pm UTC](https://discuss.elastic.co/t/search-string-with-special-characters/141576 "2018-07-25T14:25:48Z")
Hi, I am using ES 5.1.2. I would like to store emails (or any other string with special characters for that matter), and enable ngram search. For example: Store "carlos.santana.1925@yat.co.tod". Return the document w… --- ## [How to find largest size document?](https://discuss.elastic.co/t/how-to-find-largest-size-document/287405)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 2\ **Last updated:** [October 22, 2021, 11:11am UTC](https://discuss.elastic.co/t/how-to-find-largest-size-document/287405 "2021-10-22T11:11:47Z")
Hello dear friends, you have helped me in many ways before, thank you very much for this. Again I am facing a problem. The problem is that I want to find the largest size document in my index. Is it possible for me to do… --- ## [Disk configuration recommendations](https://discuss.elastic.co/t/disk-configuration-recommendations/52910)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 6\ **Last updated:** [June 17, 2016, 9:44pm UTC](https://discuss.elastic.co/t/disk-configuration-recommendations/52910 "2016-06-17T21:44:17Z")
Hello, At the moment we have we have 3.3TB disk that hosts OS and ElasticSearch. Lately we are experiencing alot of issues with the filesystem. Host goes into fdisk, and until it's done can't access the OS. We are goin… --- ## [Tshark output support](https://discuss.elastic.co/t/tshark-output-support/226372)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 7\ **Last updated:** [April 13, 2020, 2:15pm UTC](https://discuss.elastic.co/t/tshark-output-support/226372 "2020-04-13T14:15:12Z")
Which versions of Tshark json for ES are supported? Looks like old version (v2) is working fine when in new (v3) output didn't get parsed in latest ES (accually why, because it have no sense because this output is dedica… --- ## [Inject front end code into Discover from custom plugin](https://discuss.elastic.co/t/inject-front-end-code-into-discover-from-custom-plugin/72871)
**Author:** [@ccrecana](https://discuss.elastic.co/u/ccrecana)\ **Replies:** 7\ **Last updated:** [February 7, 2017, 9:15pm UTC](https://discuss.elastic.co/t/inject-front-end-code-into-discover-from-custom-plugin/72871 "2017-02-07T21:15:31Z")
It is possible to add custom functionality to kibana 5 discover within a custom plugin? I want to add new buttons in the table view and add logic for that button. --- ## [Cannot invoke \\"String.length()\\" because \\"str\\" is null](https://discuss.elastic.co/t/cannot-invoke-string-length-because-str-is-null/305752)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 3\ **Last updated:** [May 27, 2022, 12:54am UTC](https://discuss.elastic.co/t/cannot-invoke-string-length-because-str-is-null/305752 "2022-05-27T00:54:38Z")
Working on migrating Windows DNS logs to data stream and seeing a lot of errors. \[2022-05-26T13:43:37,457\]\[INFO \]\[logstash.outputs.elasticsearch\]\[filebeat-dns-dhcp\]\[7fe0474f97756847637aa742a5ac38f62e0e1460d0c70da893dabe… --- ## [Failed to execute bulk item (index)](https://discuss.elastic.co/t/failed-to-execute-bulk-item-index/209700)
**Author:** [@mital\_sm](https://discuss.elastic.co/u/mital_sm)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 9:12am UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-index/209700 "2019-11-28T09:12:13Z")
I am trying to import a excel file into elasticSearch and have done that fine. But there are some documents (rows in excel) which are not included in the data injest. I digged into the issue with this and found that ther… --- ## [\[Kibana Enhanced Table\] Request for Docs and Tutorials for Scripting Language](https://discuss.elastic.co/t/kibana-enhanced-table-request-for-docs-and-tutorials-for-scripting-language/186615)
**Author:** [@Zany](https://discuss.elastic.co/u/Zany)\ **Replies:** 5\ **Last updated:** [June 25, 2019, 9:56am UTC](https://discuss.elastic.co/t/kibana-enhanced-table-request-for-docs-and-tutorials-for-scripting-language/186615 "2019-06-25T09:56:59Z")
First of all, I would like to thank @fbaligand for creating the awesome Kibana Enhanced Table plugin, it is really useful. I understand that I can use col\[n\] to reference existing columns in the data table to derive a n… --- ## [How to migrate old elastic search index to new version of elastic search?](https://discuss.elastic.co/t/how-to-migrate-old-elastic-search-index-to-new-version-of-elastic-search/7877)
**Author:** [@Sumit\_Guptaa](https://discuss.elastic.co/u/Sumit_Guptaa)\ **Replies:** 5\ **Last updated:** [May 29, 2012, 10:59am UTC](https://discuss.elastic.co/t/how-to-migrate-old-elastic-search-index-to-new-version-of-elastic-search/7877 "2012-05-29T10:59:47Z")
hi all, Essentially I cannot find documents or resources that explains the procedure of upgrading a running Elastic search instance into the current version. Please help me out in a few scenarios:- 1… --- ## [Cold storage nodes config](https://discuss.elastic.co/t/cold-storage-nodes-config/43121)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 8\ **Last updated:** [March 1, 2016, 9:02pm UTC](https://discuss.elastic.co/t/cold-storage-nodes-config/43121 "2016-03-01T21:02:12Z")
Hi, I want to have some "cold storage" nodes in my ES cluster, where i will move nodes that are old and rarely searched. (And also never indexed anymore). I already setup the cluster to have 4 hot servers and 3 cold … --- ## [Grok everything until a character and include that character in a field](https://discuss.elastic.co/t/grok-everything-until-a-character-and-include-that-character-in-a-field/122122)
**Author:** [@pdna](https://discuss.elastic.co/u/pdna)\ **Replies:** 1\ **Last updated:** [March 1, 2018, 8:02pm UTC](https://discuss.elastic.co/t/grok-everything-until-a-character-and-include-that-character-in-a-field/122122 "2018-03-01T20:02:37Z")
{"level":"error","message":"Token Generation Failed {\\"error\\":{}}","timestamp":"2017-11-15T17:58:00.402Z"} In the message field, I want to extract everything until { character as message\_type and store everything start… --- ## [Having issue with DNS filter](https://discuss.elastic.co/t/having-issue-with-dns-filter/115940)
**Author:** [@amb1s1](https://discuss.elastic.co/u/amb1s1)\ **Replies:** 7\ **Last updated:** [January 17, 2018, 10:34pm UTC](https://discuss.elastic.co/t/having-issue-with-dns-filter/115940 "2018-01-17T22:34:56Z")
I'm using logstash as a NetFlow collector, and it is working well for a start. I'm getting all the flow, and I want to use filters to be able to resolve ips. I create a simple filter (my first one, but it is not working… --- ## [Elastic Server automatically shutdown](https://discuss.elastic.co/t/elastic-server-automatically-shutdown/29363)
**Author:** [@dobariya](https://discuss.elastic.co/u/dobariya)\ **Replies:** 7\ **Last updated:** [November 23, 2015, 6:21pm UTC](https://discuss.elastic.co/t/elastic-server-automatically-shutdown/29363 "2015-11-23T18:21:39Z")
I have three elastic servers all masters having total 32 GB ram each,16 GB allocated to elastic servers. From last few days any one of three servers randomly automatically goes down and the java.exe is killed automatical… --- ## [java.lang.NoSuchFieldError: LUCENE\_8\_0\_0](https://discuss.elastic.co/t/java-lang-nosuchfielderror-lucene-8-0-0/169959)
**Author:** [@liuxyshcn](https://discuss.elastic.co/u/liuxyshcn)\ **Replies:** 2\ **Last updated:** [February 26, 2019, 10:16am UTC](https://discuss.elastic.co/t/java-lang-nosuchfielderror-lucene-8-0-0/169959 "2019-02-26T10:16:02Z")
I am just starting to learn to use elasticsearch and trying to get some documents from elasticsearch server using java rest client in the first picture. An error occured when I ran the code as an application.Here is t… --- ## [Check if logstash running](https://discuss.elastic.co/t/check-if-logstash-running/98383)
**Author:** [@henrilabarre](https://discuss.elastic.co/u/henrilabarre)\ **Replies:** 2\ **Last updated:** [August 26, 2017, 10:47am UTC](https://discuss.elastic.co/t/check-if-logstash-running/98383 "2017-08-26T10:47:33Z")
I need to be sure that logstash is running and my logstash process too. Do you know if I can build a cron (or something like that) in order to verify the well running? Thanks a lot --- ## [Incorrect Doc Count vs index total returns in ES](https://discuss.elastic.co/t/incorrect-doc-count-vs-index-total-returns-in-es/222182)
**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\ **Replies:** 4\ **Last updated:** [March 5, 2020, 2:13pm UTC](https://discuss.elastic.co/t/incorrect-doc-count-vs-index-total-returns-in-es/222182 "2020-03-05T14:13:59Z")
Hi team, Using ES 7.1.1 and noticing a weird count of documents shown in Kibana vs the reporting totals from ES APIs and Elastic HQ. Specifically, I have an index pattern created daily for Jaeger spans. This is showing… --- ## [No events in DLQ](https://discuss.elastic.co/t/no-events-in-dlq/94309)
**Author:** [@AndreAga](https://discuss.elastic.co/u/AndreAga)\ **Replies:** 6\ **Last updated:** [July 26, 2017, 2:52pm UTC](https://discuss.elastic.co/t/no-events-in-dlq/94309 "2017-07-26T14:52:19Z")
Hi all, I'm working with Logstash 5.5 and the new Feature DQL. I've installed the plugin version 1.0.5 for LS 5.5: /usr/share/logstash/bin/logstash-plugin list --verbose ... logstash-input-dead\_letter\_queue (1.0.5) l… --- ## [Using cosineSimilarity function inside aggregation scripts](https://discuss.elastic.co/t/using-cosinesimilarity-function-inside-aggregation-scripts/308046)
**Author:** [@lonewolf](https://discuss.elastic.co/u/lonewolf)\ **Replies:** 2\ **Last updated:** [July 12, 2022, 5:10pm UTC](https://discuss.elastic.co/t/using-cosinesimilarity-function-inside-aggregation-scripts/308046 "2022-07-12T17:10:16Z")
I am trying to use cosineSimilarity function inside in aggregation script but getting Unknown call \[cosine Similarity\] with \[2\] arguments { "query": { "match\_all": {} }, "aggs": { "group":… --- ## [Creation of indexes fail with a 404 because a PUT happens \_too soon\_ #36336](https://discuss.elastic.co/t/creation-of-indexes-fail-with-a-404-because-a-put-happens-too-soon-36336/160020)
**Author:** [@AlexisWilke](https://discuss.elastic.co/u/AlexisWilke)\ **Replies:** 8\ **Last updated:** [December 11, 2018, 7:39am UTC](https://discuss.elastic.co/t/creation-of-indexes-fail-with-a-404-because-a-put-happens-too-soon-36336/160020 "2018-12-11T07:39:18Z")
I have problems creating indexes using express-cassandra. It runs the CREATE INDEX alright, however, it then tries to add the mapping with a second PUT and that fails with a 404, saying that the index doesn't exist (yet)… --- ## [Unable to create a monitoring\_user in Kibana using X-Pack](https://discuss.elastic.co/t/unable-to-create-a-monitoring-user-in-kibana-using-x-pack/65351)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 5\ **Last updated:** [November 9, 2016, 6:15am UTC](https://discuss.elastic.co/t/unable-to-create-a-monitoring-user-in-kibana-using-x-pack/65351 "2016-11-09T06:15:13Z")
Hi, I have installed X-Pack and I created a user with roles kibana\_user, monitoring\_user set. When I login using the created credentials, I am getting the error below. You are not authorized to access Monitoring. To… --- ## [No spaces match search criteria](https://discuss.elastic.co/t/no-spaces-match-search-criteria/222792)
**Author:** [@Be1](https://discuss.elastic.co/u/Be1)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 3:41pm UTC](https://discuss.elastic.co/t/no-spaces-match-search-criteria/222792 "2020-03-12T15:41:43Z")
Hi Experts, I have installed kibana.But when I open the url localhost:5601 I get the below issue: Select your space You can change your space at anytime No spaces match search criteria When i start the Kibana Servi… [Previous page](https://discuss.elastic.co/top.md?page=538&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=540&per_page=50&period=all)