# Top **URL:** https://discuss.elastic.co/top.md?page=542&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 543 --- ## [Trace Event Logs](https://discuss.elastic.co/t/trace-event-logs/75537)
**Author:** [@Dan\_Cook1](https://discuss.elastic.co/u/Dan_Cook1)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 5:43pm UTC](https://discuss.elastic.co/t/trace-event-logs/75537 "2017-02-21T17:43:27Z")
The vast majority of useful logging on Windows is now in the ETW style trace logs. These are visible in Event Viewer under the "Applications and Service Logs". Can Heartbeat gather and ship these logs? I ask because th… --- ## [Downloading plugins behind a proxy](https://discuss.elastic.co/t/downloading-plugins-behind-a-proxy/25661)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 2\ **Last updated:** [July 15, 2015, 6:35pm UTC](https://discuss.elastic.co/t/downloading-plugins-behind-a-proxy/25661 "2015-07-15T18:35:16Z")
Hey all, I'm having some trouble downloading elasticsearch plugins from within a heavily firewalled environment. This is what happens: \[root@aoaapld00135la ~\]# /usr/share/elasticsearch/bin/plugin -i elasticsearch/… --- ## [Retrieve unique key names from "property" field](https://discuss.elastic.co/t/retrieve-unique-key-names-from-property-field/237268)
**Author:** [@mashuma](https://discuss.elastic.co/u/mashuma)\ **Replies:** 8\ **Last updated:** [June 16, 2020, 7:18pm UTC](https://discuss.elastic.co/t/retrieve-unique-key-names-from-property-field/237268 "2020-06-16T19:18:44Z")
Hello everyone, Quick question.. I've got following documents. \[ { "aid": 1, "ameta": { "City": "Brussels", "Fleet": "", "Works": "Building", "Status"… --- ## [Logstash consuming lot of CPU](https://discuss.elastic.co/t/logstash-consuming-lot-of-cpu/113131)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 7\ **Last updated:** [January 3, 2018, 9:50am UTC](https://discuss.elastic.co/t/logstash-consuming-lot-of-cpu/113131 "2018-01-03T09:50:38Z")
I am using Logstash 2.4 to process multiple files, therefore to process all files at time; launching multiple logstash instances using "logstash -f file.conf \< file1" on a Windows Server. I don't need to tail and these f… --- ## [License basic inactive](https://discuss.elastic.co/t/license-basic-inactive/156163)
**Author:** [@epchelkin](https://discuss.elastic.co/u/epchelkin)\ **Replies:** 2\ **Last updated:** [November 11, 2018, 12:37pm UTC](https://discuss.elastic.co/t/license-basic-inactive/156163 "2018-11-11T12:37:57Z")
Hello! After today upgrade of elastic and kibana i've got that basic license is inactive and I cannot re-activate it even through api below is screenshot when tried to activate basic, I've got the following: Block… --- ## [Logstash Grep and Drop](https://discuss.elastic.co/t/logstash-grep-and-drop/35313)
**Author:** [@Jackal9301](https://discuss.elastic.co/u/Jackal9301)\ **Replies:** 3\ **Last updated:** [November 24, 2015, 6:52am UTC](https://discuss.elastic.co/t/logstash-grep-and-drop/35313 "2015-11-24T06:52:25Z")
I have an old conf file my predecessor made with grep in it for logstash. Under that is the Drop command. What can I use as the equivalent to make it still work the same way? if \[SourceModuleName\] == 'eftxferlogs' { … --- ## [Accessing API Without User Credentials](https://discuss.elastic.co/t/accessing-api-without-user-credentials/259528)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 6\ **Last updated:** [January 7, 2021, 6:30am UTC](https://discuss.elastic.co/t/accessing-api-without-user-credentials/259528 "2021-01-07T06:30:56Z")
I am trying to build a service monitor and am at the point where I would be making a call to change an index setting in Elasticsearch. Elasticsearch 7.10.0 running and secured with HTTPS. I have the following running: … --- ## [Inconsistent results when search\_after is used for pagination sorted by score and id](https://discuss.elastic.co/t/inconsistent-results-when-search-after-is-used-for-pagination-sorted-by-score-and-id/286554)
**Author:** [@vjgorla](https://discuss.elastic.co/u/vjgorla)\ **Replies:** 3\ **Last updated:** [October 26, 2021, 7:14pm UTC](https://discuss.elastic.co/t/inconsistent-results-when-search-after-is-used-for-pagination-sorted-by-score-and-id/286554 "2021-10-26T19:14:28Z")
We have implemented pagination using search\_after and sorting the results by \_score and a unique id field as a tie-breaker. However sometimes we are getting duplicate results across pages, and other times matches do not … --- ## [Help with ASCIIfolding](https://discuss.elastic.co/t/help-with-asciifolding/42306)
**Author:** [@basiclaser](https://discuss.elastic.co/u/basiclaser)\ **Replies:** 4\ **Last updated:** [March 10, 2016, 4:55pm UTC](https://discuss.elastic.co/t/help-with-asciifolding/42306 "2016-03-10T16:55:32Z")
I'm attempting to add an 'asciifolding' field to my title field, and have tried various examples, signatures and syntaxes, but they all seem to fail. Is asciifolding deprecated or something? thanks. PUT /my\_index { … --- ## [Search returning only hits with complete word match](https://discuss.elastic.co/t/search-returning-only-hits-with-complete-word-match/41293)
**Author:** [@phpMick](https://discuss.elastic.co/u/phpMick)\ **Replies:** 5\ **Last updated:** [February 12, 2016, 10:25am UTC](https://discuss.elastic.co/t/search-returning-only-hits-with-complete-word-match/41293 "2016-02-12T10:25:42Z")
Hi, I am new to Elastic, using Laravel and AWS. I am trying to use Elastic Search in a Twitter Typeahead. I have built my index and searches are working but they only return matches for the complete word. Eg: sear… --- ## [Index/shard API Unresponsive](https://discuss.elastic.co/t/index-shard-api-unresponsive/81104)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 6\ **Last updated:** [April 6, 2017, 8:44am UTC](https://discuss.elastic.co/t/index-shard-api-unresponsive/81104 "2017-04-06T08:44:57Z")
Hi, We have an old cluster running at version 1.3.2 with 6 data nodes and 2 masters. Aim, the cluster is red with two shards in an initialising state and two unassigned: { "cluster\_name" : "elasticsearch", "status"… --- ## [Kibana page unresponsive after cluster version upgrade](https://discuss.elastic.co/t/kibana-page-unresponsive-after-cluster-version-upgrade/47889)
**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\ **Replies:** 8\ **Last updated:** [May 10, 2016, 10:18am UTC](https://discuss.elastic.co/t/kibana-page-unresponsive-after-cluster-version-upgrade/47889 "2016-05-10T10:18:25Z")
hi, I encounter a performance issue after cluster upgrade: version before upgrade: logstash 2.2.2 elasticsearch 2.2.1 kibana 4.4.2 version after upgrade: logstash 2.3.1 elasticsearch 2.3.1 kibana 4.5.0 after upgrade, i… --- ## [How to use JSON query with RestHighLevelClient API](https://discuss.elastic.co/t/how-to-use-json-query-with-resthighlevelclient-api/133267)
**Author:** [@Mai\_3n](https://discuss.elastic.co/u/Mai_3n)\ **Replies:** 2\ **Last updated:** [May 28, 2018, 5:09am UTC](https://discuss.elastic.co/t/how-to-use-json-query-with-resthighlevelclient-api/133267 "2018-05-28T05:09:01Z")
Hi, Now I'm using "org.elasticsearch.client:elasticsearch-rest-high-level-client:6.2.4" in my java application. I know that TransportClient will be deprecated in 7.0, so I'm trying to use RestHighLevelClient instead. B… --- ## [Logstash smtp configuration](https://discuss.elastic.co/t/logstash-smtp-configuration/28862)
**Author:** [@jalen\_wang](https://discuss.elastic.co/u/jalen_wang)\ **Replies:** 2\ **Last updated:** [September 8, 2015, 7:17pm UTC](https://discuss.elastic.co/t/logstash-smtp-configuration/28862 "2015-09-08T19:17:14Z")
Hi I want to config logstash output to email by smtp,but it always goes wrong,this is my configuration: email { to =\> "xxx@xxx.com.cn" codec =\> "plain" contenttype =\> "text/html; charset=UTF-8" options =\> … --- ## [APM server recommendations](https://discuss.elastic.co/t/apm-server-recommendations/145447)
**Author:** [@kd5dbl](https://discuss.elastic.co/u/kd5dbl)\ **Replies:** 3\ **Last updated:** [September 4, 2018, 12:51pm UTC](https://discuss.elastic.co/t/apm-server-recommendations/145447 "2018-09-04T12:51:37Z")
I'm going to setup an APM server in AWS and was wondering if there were any recommendations on the resource requirements for this server? I know it's a little vague as I can't give you full details as to how much stuff … --- ## [Logstash output syslog : how to remove added {host} field?](https://discuss.elastic.co/t/logstash-output-syslog-how-to-remove-added-host-field/260246)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 5\ **Last updated:** [January 6, 2021, 5:48pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-how-to-remove-added-host-field/260246 "2021-01-06T17:48:45Z")
Hello there ! I have to forward kafka logs to syslog relay. I know it's weird but I have to. Here is logstash conf : #kafka input input { kafka { topics =\> \["test"\] codec =\> json bootstrap\_servers =\> "ka… --- ## [What if my storage is full?](https://discuss.elastic.co/t/what-if-my-storage-is-full/95658)
**Author:** [@gauravbhutani30](https://discuss.elastic.co/u/gauravbhutani30)\ **Replies:** 6\ **Last updated:** [August 4, 2017, 10:23am UTC](https://discuss.elastic.co/t/what-if-my-storage-is-full/95658 "2017-08-04T10:23:52Z")
Hi Everyone, We are running a elastisearch cluster of 3 nodes and we have mounted our storage on SAN. I was just wandering if the storage is full, what will happen to our cluster? We wanted to test this scenario. Plea… --- ## [Data too large circuit\_breaking\_exception](https://discuss.elastic.co/t/data-too-large-circuit-breaking-exception/186082)
**Author:** [@Nikhil\_Khekade](https://discuss.elastic.co/u/Nikhil_Khekade)\ **Replies:** 2\ **Last updated:** [June 18, 2019, 9:14am UTC](https://discuss.elastic.co/t/data-too-large-circuit-breaking-exception/186082 "2019-06-18T09:14:53Z")
Hi We are new to ES. We want to use it to power our hotel search feature. We have close to 80000 hotels/homes. After a lot of internal discussion, we decided to create date based indexes to properly handle our date avai… --- ## [Elastalert on windows](https://discuss.elastic.co/t/elastalert-on-windows/113632)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 3\ **Last updated:** [December 30, 2017, 10:17pm UTC](https://discuss.elastic.co/t/elastalert-on-windows/113632 "2017-12-30T22:17:46Z")
hi i've installed all the needed python files etc but when i do a pip install elastalert i get this, I suspect this is because the python environment can not "see" the visual c ++ installation ? how do i fix this (EA2… --- ## [Encount a java.lang.ClassCastException: org.elasticsearch.index.fielddata.plain.PagedBytesIndexFieldData cannot be cast to org.elasticsearch.index.fielddata.IndexNumericFieldData](https://discuss.elastic.co/t/encount-a-java-lang-classcastexception-org-elasticsearch-index-fielddata-plain-pagedbytesindexfielddata-cannot-be-cast-to-org-elasticsearch-index-fielddata-indexnumericfielddata/12431)
**Author:** [@11121](https://discuss.elastic.co/u/11121)\ **Replies:** 8\ **Last updated:** [June 17, 2013, 6:26am UTC](https://discuss.elastic.co/t/encount-a-java-lang-classcastexception-org-elasticsearch-index-fielddata-plain-pagedbytesindexfielddata-cannot-be-cast-to-org-elasticsearch-index-fielddata-indexnumericfielddata/12431 "2013-06-17T06:26:29Z")
This is business log stat app in development. I used version of elasticsearch is 0.90.1 $curl -XGET 'http://192.168.11.107:9200/' { "ok" : true, "status" : 200, "name" : "Ape", "version" : { "number" : "0.90.1"… --- ## [Can't delete dashboards and visualizations from Kibana](https://discuss.elastic.co/t/cant-delete-dashboards-and-visualizations-from-kibana/153674)
**Author:** [@ridwan](https://discuss.elastic.co/u/ridwan)\ **Replies:** 1\ **Last updated:** [October 24, 2018, 12:49pm UTC](https://discuss.elastic.co/t/cant-delete-dashboards-and-visualizations-from-kibana/153674 "2018-10-24T12:49:42Z")
Hi, I am using Kibana version 6.2.3 and Elasticsearch version 6.2.3. I am trying to delete some dashboards and visualizations from Kibana UI (Management \> Kibana\>Saved Objects), but failing to do so. I see the followin… --- ## [How to find number of characters in a text field](https://discuss.elastic.co/t/how-to-find-number-of-characters-in-a-text-field/310189)
**Author:** [@nestor1](https://discuss.elastic.co/u/nestor1)\ **Replies:** 2\ **Last updated:** [July 20, 2022, 7:56pm UTC](https://discuss.elastic.co/t/how-to-find-number-of-characters-in-a-text-field/310189 "2022-07-20T19:56:13Z")
I have an application that is writing many documents in Elasticsearch. After a year or two, I figured out that some of these documents are scams because they contain large strings (more than 10000 characters). E.g. one d… --- ## [Filebeat fails to connect because template](https://discuss.elastic.co/t/filebeat-fails-to-connect-because-template/188038)
**Author:** [@acematrix](https://discuss.elastic.co/u/acematrix)\ **Replies:** 1\ **Last updated:** [June 28, 2019, 11:36am UTC](https://discuss.elastic.co/t/filebeat-fails-to-connect-because-template/188038 "2019-06-28T11:36:34Z")
Hi elastic community, I have a elasticsearch cluster running version "number": "7.1.1" I have followed the instructions to install filebeat found here: https://www.elastic.co/docker-kubernetes-container-monitoring ^ t… --- ## [Update Nested object using painless script](https://discuss.elastic.co/t/update-nested-object-using-painless-script/169873)
**Author:** [@Venkata\_Naresh](https://discuss.elastic.co/u/Venkata_Naresh)\ **Replies:** 1\ **Last updated:** [March 1, 2019, 4:30pm UTC](https://discuss.elastic.co/t/update-nested-object-using-painless-script/169873 "2019-03-01T16:30:57Z")
Hi, I have an ES nested object in the below format "campaigns": \[ { "campaignId": 110, "clickedCount": 1, "openedCount": 2 }, { "campaignId": 1322, "clickedCount": 1, "openedCount": 0 } … --- ## [Incorrect logs format in Kibana](https://discuss.elastic.co/t/incorrect-logs-format-in-kibana/83486)
**Author:** [@John\_06](https://discuss.elastic.co/u/John_06)\ **Replies:** 8\ **Last updated:** [May 9, 2017, 6:12am UTC](https://discuss.elastic.co/t/incorrect-logs-format-in-kibana/83486 "2017-05-09T06:12:16Z")
Hi. I use Filebeat, Kafka and Logstash to forward logs to Elasticsearch. I receive logs in Kibana in the following format: April 24th 2017, 20:20:04.218 2017-01-16 19:11:28.114 STDIO \[INFO\] SystemOut: read April 24th 2… --- ## [Elasticsearch 6.3: elasticsearch-keystore add not accepting stdin](https://discuss.elastic.co/t/elasticsearch-6-3-elasticsearch-keystore-add-not-accepting-stdin/136577)
**Author:** [@Justin\_Wells](https://discuss.elastic.co/u/Justin_Wells)\ **Replies:** 2\ **Last updated:** [June 20, 2018, 2:36pm UTC](https://discuss.elastic.co/t/elasticsearch-6-3-elasticsearch-keystore-add-not-accepting-stdin/136577 "2018-06-20T14:36:49Z")
We had some Ansible automation break when going to Elasticsearch 6.3. The ./elasticsearch-keystore add command now prompts before overwriting a value. I've attempted to suppress this using the --stdin and --silent flags … --- ## [Get the maximum and average values after Count](https://discuss.elastic.co/t/get-the-maximum-and-average-values-after-count/196765)
**Author:** [@peropero](https://discuss.elastic.co/u/peropero)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 3:13am UTC](https://discuss.elastic.co/t/get-the-maximum-and-average-values-after-count/196765 "2019-08-28T03:13:41Z")
The following log is output. @timestamp status\_code 2019/08/25 20:00 200 2019/08/25 20:00 200 2019/08/25 20:00 200 2019/08/25 20:01 300 2019/08/25 20:02 400 ・ ・ ・ 08/26/2019 02:02 400 What I want to express in … --- ## [If Else condition based on input log lines in logstash](https://discuss.elastic.co/t/if-else-condition-based-on-input-log-lines-in-logstash/277336)
**Author:** [@sudo-ranjith](https://discuss.elastic.co/u/sudo-ranjith)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 8:22am UTC](https://discuss.elastic.co/t/if-else-condition-based-on-input-log-lines-in-logstash/277336 "2021-06-30T08:22:52Z")
Hi There, I would like to write a logstash config file with an if else condition. line 1: "Severity","ThreadID","Date","Time","Application","Message" GROK for Line 1: %{DATA:Severity}","%{DATA:ThreadID}","%{DATA:Dat… --- ## [Link in Markdown panel to dashboard with specific time and refresh interval?](https://discuss.elastic.co/t/link-in-markdown-panel-to-dashboard-with-specific-time-and-refresh-interval/274985)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 5\ **Last updated:** [August 9, 2021, 2:55pm UTC](https://discuss.elastic.co/t/link-in-markdown-panel-to-dashboard-with-specific-time-and-refresh-interval/274985 "2021-08-09T14:55:05Z")
I'm using TSVB Markdown panels to present links to dashboards, like this: \[Dashboard title\](#/dashboard/88da11e0-9c58-11eb-b38d-7b8e5ab9c930) Such links are independent of the current space, which is how I like them. T… --- ## [How to make custom Logstash start parameters / arguments](https://discuss.elastic.co/t/how-to-make-custom-logstash-start-parameters-arguments/65165)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 5\ **Last updated:** [November 9, 2016, 6:41am UTC](https://discuss.elastic.co/t/how-to-make-custom-logstash-start-parameters-arguments/65165 "2016-11-09T06:41:56Z")
Hi, Logstash takes a lot of file parameters while starting like; --path.settings=/logstash-5.0.0/config/ I want to pass something like, for example, I have a jdbc input in logstash and how can I pass it through comm… --- ## [Differences between with .raw and without .raw](https://discuss.elastic.co/t/differences-between-with-raw-and-without-raw/125579)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 1\ **Last updated:** [March 26, 2018, 10:23am UTC](https://discuss.elastic.co/t/differences-between-with-raw-and-without-raw/125579 "2018-03-26T10:23:32Z")
hi does anyone explain differences between with .raw and without .raw? eg: { "query": { "bool": { "must": \[ { "term": { "project\_type.raw": "TEST" } } \] } } } { "query": { "bool": { "must": \[ { "te… --- ## [Keyword aggregation returns empty](https://discuss.elastic.co/t/keyword-aggregation-returns-empty/110480)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 7\ **Last updated:** [December 6, 2017, 1:25pm UTC](https://discuss.elastic.co/t/keyword-aggregation-returns-empty/110480 "2017-12-06T13:25:51Z")
Hi everyone! I have a problem with elasticsearch. I get data via filebeat and logstash to kibana. I add mapping as keyword to certien words in the data, and even though I see thous keyword under "message" field in kiba… --- ## [Logstash consuming huge amount of CPU - mem leak? garbage collector?](https://discuss.elastic.co/t/logstash-consuming-huge-amount-of-cpu-mem-leak-garbage-collector/49310)
**Author:** [@Eduard\_Camaj](https://discuss.elastic.co/u/Eduard_Camaj)\ **Replies:** 7\ **Last updated:** [May 17, 2016, 9:58am UTC](https://discuss.elastic.co/t/logstash-consuming-huge-amount-of-cpu-mem-leak-garbage-collector/49310 "2016-05-17T09:58:46Z")
Details: dockerized environment, isolated, only ELK logstash version 2.3.1 (Apr 4, 2016) logstash-input-kafka-2.0.6 elasticsearch output 200 records/second 8 cores, 8GB of RAM, 2GB logstash heap (cpu consumation ("ni"… --- ## [Replace Log4j from 2.x to 2.17.0 or later](https://discuss.elastic.co/t/replace-log4j-from-2-x-to-2-17-0-or-later/292897)
**Author:** [@marisubu](https://discuss.elastic.co/u/marisubu)\ **Replies:** 4\ **Last updated:** [January 24, 2022, 1:16pm UTC](https://discuss.elastic.co/t/replace-log4j-from-2-x-to-2-17-0-or-later/292897 "2022-01-24T13:16:53Z")
Our oldest products includes Elastic stack versions 5.2, 6.2.2 and 7.10.2. We're in situation that we can not perform elastic versions uplift to the latest/fixed versions. Can we replace Log4j 2.x versions with 2.17.x o… --- ## [How to use ESIntegTestCase in elasticsearch 6.6.1](https://discuss.elastic.co/t/how-to-use-esintegtestcase-in-elasticsearch-6-6-1/174646)
**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\ **Replies:** 8\ **Last updated:** [April 3, 2019, 12:27am UTC](https://discuss.elastic.co/t/how-to-use-esintegtestcase-in-elasticsearch-6-6-1/174646 "2019-04-03T00:27:52Z")
Hi, When I run the source code: import org.elasticsearch.common.settings.Settings; import org.elasticsearch.plugins.Plugin; import org.elasticsearch.test.ESIntegTestCase; import org.elasticsearch.test.ESIntegTestCase.C… --- ## [Bad indexing performance of elasticsearch](https://discuss.elastic.co/t/bad-indexing-performance-of-elasticsearch/37962)
**Author:** [@111110](https://discuss.elastic.co/u/111110)\ **Replies:** 6\ **Last updated:** [December 25, 2015, 5:05am UTC](https://discuss.elastic.co/t/bad-indexing-performance-of-elasticsearch/37962 "2015-12-25T05:05:03Z")
Currently, I'm using elastic search to store and query some logs. We set up a five node elastic search cluster. Among them two indexing nodes and three query nodes. In the indexing node, we have redis, logstash and el… --- ## [Confused about \_doc as document type](https://discuss.elastic.co/t/confused-about-doc-as-document-type/209694)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 2\ **Last updated:** [November 29, 2019, 3:06pm UTC](https://discuss.elastic.co/t/confused-about-doc-as-document-type/209694 "2019-11-29T15:06:51Z")
Elasticsearch 6.8.5. I'm confused about the use of \_doc as a type. It's possible to create an index with one type of \_doc but it also seems like \_doc has special meaning in some contexts, including in templates. Can so… --- ## [Logstash jdbc input for multiple queries](https://discuss.elastic.co/t/logstash-jdbc-input-for-multiple-queries/171804)
**Author:** [@rorixrebel](https://discuss.elastic.co/u/rorixrebel)\ **Replies:** 4\ **Last updated:** [March 13, 2019, 1:26pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-for-multiple-queries/171804 "2019-03-13T13:26:12Z")
Got 5+ queries that i need to run every X minutes so instead of creating multiple inputs i was thinking of using statement\_filepath to read all of them but seems like it doesn't quite accept wildcards (/my/queries/path/\*… --- ## [Visualization for nested aggregations](https://discuss.elastic.co/t/visualization-for-nested-aggregations/211642)
**Author:** [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\ **Replies:** 1\ **Last updated:** [December 12, 2019, 4:24pm UTC](https://discuss.elastic.co/t/visualization-for-nested-aggregations/211642 "2019-12-12T16:24:45Z")
I am trying to create a visualization in Kibana from a Nested Aggregation but I am not finding the way. What I did now was to adapt another aggregation to be able to add a nested field and it brings me the desired resul… --- ## [Visualize: java.lang.IllegalStateException: Field data loading is forbidden](https://discuss.elastic.co/t/visualize-java-lang-illegalstateexception-field-data-loading-is-forbidden/39012)
**Author:** [@itracing](https://discuss.elastic.co/u/itracing)\ **Replies:** 1\ **Last updated:** [January 12, 2016, 5:16pm UTC](https://discuss.elastic.co/t/visualize-java-lang-illegalstateexception-field-data-loading-is-forbidden/39012 "2016-01-12T17:16:54Z")
hi, I am using Kibana (Version 4.3.1) for the first time. I have this error message when i try to visualize analyzed fields. Visualize: java.lang.IllegalStateException: Field data loading is forbidden on dstip Err… --- ## [Integer cannot be casted to long bis](https://discuss.elastic.co/t/integer-cannot-be-casted-to-long-bis/257799)
**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 1:20am UTC](https://discuss.elastic.co/t/integer-cannot-be-casted-to-long-bis/257799 "2020-12-08T01:20:32Z")
Hi, Following this topic that had no replies: I made more tests against several available version of elastic I have. Using this code: POST \_ingest/pipeline/\_simulate { "pipeline" : { "description": "test", … --- ## [Read file from beginning always](https://discuss.elastic.co/t/read-file-from-beginning-always/146212)
**Author:** [@vshankara](https://discuss.elastic.co/u/vshankara)\ **Replies:** 5\ **Last updated:** [August 28, 2018, 1:56pm UTC](https://discuss.elastic.co/t/read-file-from-beginning-always/146212 "2018-08-28T13:56:56Z")
I have a file which gets overwritten every 15 minutes, the filename does not change and remains the same. The scan frequency is set at 10s and currently the filebeat only reads the file every 1 hour and misses the previo… --- ## [How to Ignore some messages from Kafka topic when consuming using Logstash](https://discuss.elastic.co/t/how-to-ignore-some-messages-from-kafka-topic-when-consuming-using-logstash/151505)
**Author:** [@deeps](https://discuss.elastic.co/u/deeps)\ **Replies:** 7\ **Last updated:** [October 9, 2018, 6:48pm UTC](https://discuss.elastic.co/t/how-to-ignore-some-messages-from-kafka-topic-when-consuming-using-logstash/151505 "2018-10-09T18:48:59Z")
I have ten's of different messages in a kafka topic. I need to just consume messages that has only "America" in it. I have tried some suggestions available on the blog but no luck, could anyone help? Flow is App -\> Kafk… --- ## [Very inconsistent "No results found" Kibana 4.3.0](https://discuss.elastic.co/t/very-inconsistent-no-results-found-kibana-4-3-0/36430)
**Author:** [@aethos](https://discuss.elastic.co/u/aethos)\ **Replies:** 3\ **Last updated:** [December 18, 2015, 8:27pm UTC](https://discuss.elastic.co/t/very-inconsistent-no-results-found-kibana-4-3-0/36430 "2015-12-18T20:27:50Z")
Hey all, having a very frustrating issue with an upgraded install and Kibana 4.3.0. I frequently get: There's a lot of documents in the logstash index and if I refresh the window results come up. But if I try to do a … --- ## [Reindex api op\_type options](https://discuss.elastic.co/t/reindex-api-op-type-options/54304)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 2\ **Last updated:** [June 29, 2016, 10:14pm UTC](https://discuss.elastic.co/t/reindex-api-op-type-options/54304 "2016-06-29T22:14:18Z")
In the docs for the reindex api (https://www.elastic.co/guide/en/elasticsearch/reference/2.3/docs-reindex.html) there is a reference to an option called "op\_type" which is always the "create" in the examples. Are there … --- ## [Single execution of logstash pipeline on demand](https://discuss.elastic.co/t/single-execution-of-logstash-pipeline-on-demand/306769)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 5\ **Last updated:** [June 27, 2022, 3:57pm UTC](https://discuss.elastic.co/t/single-execution-of-logstash-pipeline-on-demand/306769 "2022-06-27T15:57:01Z")
Hello, i have a logstash 8.2 instance running with multiple scheduled pipelines. What is the best way to start another logstash pipeline on demand for a single execution on the same logstash instance without restarting… --- ## [Last 12 hours indexing size elasticsearch](https://discuss.elastic.co/t/last-12-hours-indexing-size-elasticsearch/186994)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 7\ **Last updated:** [June 23, 2019, 2:34pm UTC](https://discuss.elastic.co/t/last-12-hours-indexing-size-elasticsearch/186994 "2019-06-23T14:34:06Z")
Hi, How do i get the total size of data received at my elasticsearch cluster for last 12 hours? \_stats API give total size of the cluster, but i need to filter out for only last 12 hours data received by elasticsearch … --- ## [Sqlserver logstash configration](https://discuss.elastic.co/t/sqlserver-logstash-configration/71029)
**Author:** [@ElsayedAwd](https://discuss.elastic.co/u/ElsayedAwd)\ **Replies:** 7\ **Last updated:** [January 10, 2017, 10:01am UTC](https://discuss.elastic.co/t/sqlserver-logstash-configration/71029 "2017-01-10T10:01:16Z")
I have windows as well as Elasticsearch 5.1.1 , I made these configuration with sqlserver and logstash . please what is the error of these configurations . input { jdbc { jdbc\_driver\_library =\> "D:\\Usefull\_Jars\\sq… --- ## [What is equivalent query as SQL LIKE clause?](https://discuss.elastic.co/t/what-is-equivalent-query-as-sql-like-clause/69258)
**Author:** [@tanimoto](https://discuss.elastic.co/u/tanimoto)\ **Replies:** 1\ **Last updated:** [December 16, 2016, 8:28am UTC](https://discuss.elastic.co/t/what-is-equivalent-query-as-sql-like-clause/69258 "2016-12-16T08:28:46Z")
I'm comparing ES search results with SQL. ES version is 2.4.2. Is there exactly same query with SQL LIKE clause? I use wildcatd with \* but it returns lots of similar words, not only exact partial match. I'm using… --- ## [How to execute a stored script in a search query](https://discuss.elastic.co/t/how-to-execute-a-stored-script-in-a-search-query/265514)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [February 27, 2021, 12:48pm UTC](https://discuss.elastic.co/t/how-to-execute-a-stored-script-in-a-search-query/265514 "2021-02-27T12:48:41Z")
hey there, I created a stored script that should add a new field to all the docs into an index. POST \_scripts/set\_new\_field { "script": { "lang": "painless", "source": """ if (ctx.\_source.speaker == "TED… [Previous page](https://discuss.elastic.co/top.md?page=541&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=543&per_page=50&period=all)