# Top **URL:** https://discuss.elastic.co/top.md?page=543&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 544 --- ## [How to use group clause in search query?](https://discuss.elastic.co/t/how-to-use-group-clause-in-search-query/60019)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 4\ **Last updated:** [November 10, 2016, 12:20am UTC](https://discuss.elastic.co/t/how-to-use-group-clause-in-search-query/60019 "2016-11-10T00:20:00Z")
I am trying to search for a record which has Internal Server Error, the match URL, and session ID. Is there a way that I can get only session ID's that are matching ? --- ## [Where to find default stopword lists?](https://discuss.elastic.co/t/where-to-find-default-stopword-lists/43617)
**Author:** [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\ **Replies:** 4\ **Last updated:** [March 7, 2016, 11:49am UTC](https://discuss.elastic.co/t/where-to-find-default-stopword-lists/43617 "2016-03-07T11:49:11Z")
Hi, Is there a single place where we can find the default stopwords used by ES/Lucene for every single language available? I've found bits and pieces here and there but I can't locate a single place where the implement… --- ## [Auditbeat vs Winlogbeat](https://discuss.elastic.co/t/auditbeat-vs-winlogbeat/189406)
**Author:** [@Jan\_Kaspar](https://discuss.elastic.co/u/Jan_Kaspar)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 8:46am UTC](https://discuss.elastic.co/t/auditbeat-vs-winlogbeat/189406 "2019-07-11T08:46:50Z")
Hi There, Today i tested install auditbeat on windows with default configuration. It seem like it works with few questions and notes. delivered dashboards are not so usable. I foud that user related audits are comple… --- ## [How are the documents selected by the Sampler Aggregation](https://discuss.elastic.co/t/how-are-the-documents-selected-by-the-sampler-aggregation/46420)
**Author:** [@Dominik\_Stadler](https://discuss.elastic.co/u/Dominik_Stadler)\ **Replies:** 4\ **Last updated:** [April 6, 2016, 12:24pm UTC](https://discuss.elastic.co/t/how-are-the-documents-selected-by-the-sampler-aggregation/46420 "2016-04-06T12:24:14Z")
Hi, we are looking at using the https://www.elastic.co/guide/en/elasticsearch/reference/2.1/search-aggregations-bucket-sampler-aggregation.html for limiting the run-time of aggregations on large data sets. What we … --- ## [Caused by: java.lang.IllegalStateException: jar hell!](https://discuss.elastic.co/t/caused-by-java-lang-illegalstateexception-jar-hell/158748)
**Author:** [@afeef1915](https://discuss.elastic.co/u/afeef1915)\ **Replies:** 1\ **Last updated:** [November 30, 2018, 6:15am UTC](https://discuss.elastic.co/t/caused-by-java-lang-illegalstateexception-jar-hell/158748 "2018-11-30T06:15:45Z")
After Installing Pom.xml of High Level Client i was not able to start elastic search in local machine. i tried to run localhost:9200 it's giving error Caused by: java.lang.IllegalStateException: jar hell! class: org… --- ## [Sum score in multi match](https://discuss.elastic.co/t/sum-score-in-multi-match/122547)
**Author:** [@a.korshunov](https://discuss.elastic.co/u/a.korshunov)\ **Replies:** 3\ **Last updated:** [March 8, 2018, 10:17am UTC](https://discuss.elastic.co/t/sum-score-in-multi-match/122547 "2018-03-08T10:17:36Z")
Hi, guys. I want to sum score in multi match query with cross\_field type and set tie\_breaker to 1.0. I test two versions of Elasticsearch: 5.4.0 and 6.2.1. Version 5.4.0 works as expected, but in 6.2.1 occurs maximum in… --- ## [How to solve java.lang.NoSuchFieldError: LUCENE\_7\_7\_2](https://discuss.elastic.co/t/how-to-solve-java-lang-nosuchfielderror-lucene-7-7-2/235533)
**Author:** [@apar](https://discuss.elastic.co/u/apar)\ **Replies:** 2\ **Last updated:** [June 4, 2020, 1:38pm UTC](https://discuss.elastic.co/t/how-to-solve-java-lang-nosuchfielderror-lucene-7-7-2/235533 "2020-06-04T13:38:24Z")
Hi, I'm using the elasticsearch 7.6.2 and I'm trying to create an index and update the mappings in a second step. The index gets successfully created, however the mapping update fails with the following error: nested ex… --- ## [Explicación por qué el rendimiento de Elastic con un(1) nodo de datos es mejor que dos?](https://discuss.elastic.co/t/explicacion-por-que-el-rendimiento-de-elastic-con-un-1-nodo-de-datos-es-mejor-que-dos/110188)
**Author:** [@pinky.floyano](https://discuss.elastic.co/u/pinky.floyano)\ **Replies:** 6\ **Last updated:** [December 21, 2017, 6:44pm UTC](https://discuss.elastic.co/t/explicacion-por-que-el-rendimiento-de-elastic-con-un-1-nodo-de-datos-es-mejor-que-dos/110188 "2017-12-21T18:44:39Z")
Saludos a toda esta comunidad de Elastic, tengo una grande incertidumbre la cual espero poder resolver con la ayuda de sus conocimientos, y la cual paso a exponer a continuación. Tengan en cuenta que hago esta consulta p… --- ## [Grok "?" operator](https://discuss.elastic.co/t/grok-operator/68653)
**Author:** [@sancroth](https://discuss.elastic.co/u/sancroth)\ **Replies:** 7\ **Last updated:** [December 16, 2016, 7:35am UTC](https://discuss.elastic.co/t/grok-operator/68653 "2016-12-16T07:35:18Z")
Hello. I am using a grok filter on certain logs that give me a problem. A small part of them come out with one less field than the others. example given : input log 1 num=10 event=attack source=mach1 input log 2 … --- ## [Circuit\_breaking\_exception when creating an ingest pipeline](https://discuss.elastic.co/t/circuit-breaking-exception-when-creating-an-ingest-pipeline/125630)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 1\ **Last updated:** [March 27, 2018, 3:51am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-when-creating-an-ingest-pipeline/125630 "2018-03-27T03:51:51Z")
I'm trying to create an ingest pipeline with a simple remove processor that contains a lot of field names to remove from the document (\> 100) prior to indexing. There is no script processor in the pipeline and I have lef… --- ## [Kibana - No Instances Running](https://discuss.elastic.co/t/kibana-no-instances-running/204263)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 7\ **Last updated:** [October 24, 2019, 8:08pm UTC](https://discuss.elastic.co/t/kibana-no-instances-running/204263 "2019-10-24T20:08:29Z")
Hi, All of a sudden my kibana deployment disappeared. There's not much info in the UI - has anyone seen this before? Any tips on resolution? I have terminated the deployment, re-created it, tried scaling up to more nod… --- ## [Sending text log files using Logstash to Kafka](https://discuss.elastic.co/t/sending-text-log-files-using-logstash-to-kafka/138333)
**Author:** [@serozhka](https://discuss.elastic.co/u/serozhka)\ **Replies:** 7\ **Last updated:** [July 4, 2018, 8:31am UTC](https://discuss.elastic.co/t/sending-text-log-files-using-logstash-to-kafka/138333 "2018-07-04T08:31:32Z")
Hi! I have a question about correct setup of logstash in order to be able to send plain text log files in json format to Kafka clusters. In my logstash.conf I have: input { file { path =\> "/app/server/default/logs/a… --- ## [Best practice to backup index daily?](https://discuss.elastic.co/t/best-practice-to-backup-index-daily/18511)
**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\ **Replies:** 2\ **Last updated:** [July 8, 2014, 6:14pm UTC](https://discuss.elastic.co/t/best-practice-to-backup-index-daily/18511 "2014-07-08T18:14:29Z")
I am able to take a snapshot of the index and back it up to AWS S3. What is the best way to automate this approach and have it done daily say every days at 12 midnight? I am aware that I can probably do it with cro… --- ## [Elastic Community Slack](https://discuss.elastic.co/t/elastic-community-slack/214925)
**Author:** [@aravindputrevu](https://discuss.elastic.co/u/aravindputrevu)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 3:19am UTC](https://discuss.elastic.co/t/elastic-community-slack/214925 "2020-01-14T03:19:29Z")
We're pleased to announce our Community Slack instance, a space for real time discussions between community members on topics relating to the Elastic Stack. Please note: Discuss.elastic.co will remain the primary techni… --- ## [Calculate Difference between 2 Dates in Scipted Field](https://discuss.elastic.co/t/calculate-difference-between-2-dates-in-scipted-field/245087)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 8\ **Last updated:** [August 18, 2020, 9:23am UTC](https://discuss.elastic.co/t/calculate-difference-between-2-dates-in-scipted-field/245087 "2020-08-18T09:23:51Z")
Hi , i try to create a new scripted field by calculating the difference(in minitues) between 2 dates in the following format : bookingStatus.confirmed :Jan 22, 2020 @ 12:20:00.000 bookingStatus.wating :Jan 20, 2020 @… --- ## [Logstash can not consume messages from kafka](https://discuss.elastic.co/t/logstash-can-not-consume-messages-from-kafka/664)
**Author:** [@wivernband](https://discuss.elastic.co/u/wivernband)\ **Replies:** 4\ **Last updated:** [May 16, 2016, 10:03am UTC](https://discuss.elastic.co/t/logstash-can-not-consume-messages-from-kafka/664 "2016-05-16T10:03:44Z")
We configured logstash to use "kafka" as input and "elasticsearch" as output. But it seems that the logstash instance can not consume the messages from kafka. Kindly check the logstash version and its configuration as b… --- ## [Include logs on the dashboard](https://discuss.elastic.co/t/include-logs-on-the-dashboard/92243)
**Author:** [@annizaki](https://discuss.elastic.co/u/annizaki)\ **Replies:** 3\ **Last updated:** [July 7, 2017, 1:25pm UTC](https://discuss.elastic.co/t/include-logs-on-the-dashboard/92243 "2017-07-07T13:25:34Z")
Hi everyone, I was looking through some sample dashboards and i came across this picture: I was wondering if anyone knows how i can include the logs that i can see on the discover page on the dashboard like this exam… --- ## [Bug in docs with upsert and script file](https://discuss.elastic.co/t/bug-in-docs-with-upsert-and-script-file/35162)
**Author:** [@PeterC](https://discuss.elastic.co/u/PeterC)\ **Replies:** 4\ **Last updated:** [August 15, 2016, 11:38pm UTC](https://discuss.elastic.co/t/bug-in-docs-with-upsert-and-script-file/35162 "2016-08-15T23:38:59Z")
Trying to do an upsert with a script file (inline scripting kept off). Simple use case (simplified further): == mappings === "mappings":{ "sometype":{ "\_source":{"enabled": true}, "\_ttl":… --- ## [Spark/Hadoop batch build shards/Lucene indices](https://discuss.elastic.co/t/spark-hadoop-batch-build-shards-lucene-indices/26441)
**Author:** [@msukmanowsky](https://discuss.elastic.co/u/msukmanowsky)\ **Replies:** 7\ **Last updated:** [August 6, 2015, 9:33am UTC](https://discuss.elastic.co/t/spark-hadoop-batch-build-shards-lucene-indices/26441 "2015-08-06T09:33:44Z")
Is it possible to use Spark/Hadoop to write a Lucene index direct to disk that could be "imported" into ES as a shard instead of relying on ES to perform the indexing itself? In production environments, an ES cluster i… --- ## [Parsing syslog messages with Different Network equipment providers](https://discuss.elastic.co/t/parsing-syslog-messages-with-different-network-equipment-providers/37401)
**Author:** [@gaurav1424](https://discuss.elastic.co/u/gaurav1424)\ **Replies:** 4\ **Last updated:** [December 16, 2015, 10:37pm UTC](https://discuss.elastic.co/t/parsing-syslog-messages-with-different-network-equipment-providers/37401 "2015-12-16T22:37:57Z")
Hello All, I am currently working on problem which involves setting up pipeline with Logstash for syslog events. Here are the requirements 1: I need to parse syslog events , without identifying / marking them as syslo… --- ## [Unable to bind elasticsearch server from distant machine](https://discuss.elastic.co/t/unable-to-bind-elasticsearch-server-from-distant-machine/32266)
**Author:** [@kruelah](https://discuss.elastic.co/u/kruelah)\ **Replies:** 4\ **Last updated:** [October 19, 2015, 11:22am UTC](https://discuss.elastic.co/t/unable-to-bind-elasticsearch-server-from-distant-machine/32266 "2015-10-19T11:22:59Z")
Hi folks, My problem must have been discussed on million times but I am unable to bind my Elasticsearch server from another computer on the same network. Server IP adress is 10.80.93.112, and I try to access using http… --- ## [Convert DSL Query to NEST.net](https://discuss.elastic.co/t/convert-dsl-query-to-nest-net/93527)
**Author:** [@takcy1980](https://discuss.elastic.co/u/takcy1980)\ **Replies:** 3\ **Last updated:** [July 28, 2017, 7:25am UTC](https://discuss.elastic.co/t/convert-dsl-query-to-nest-net/93527 "2017-07-28T07:25:05Z")
How can I translate the below query, so it is matching Nest.net GET /consolidated-capacity/\_search { "query": { "constant\_score" : { "filter" : { "bool" : { … --- ## [Indexing is being throttled](https://discuss.elastic.co/t/indexing-is-being-throttled/19859)
**Author:** [@bob\_webman](https://discuss.elastic.co/u/bob_webman)\ **Replies:** 6\ **Last updated:** [September 18, 2014, 9:28pm UTC](https://discuss.elastic.co/t/indexing-is-being-throttled/19859 "2014-09-18T21:28:39Z")
Setup: 4 nodes Replication = 0 ES\_HEAP\_SIZE = 75GB Number of Indices = 59 (using logstash one index per month) Total shards = 234 (each index is 4 hards, one per node) Total docs … --- ## [Duplicate documents in Elasticsearch?](https://discuss.elastic.co/t/duplicate-documents-in-elasticsearch/99165)
**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\ **Replies:** 5\ **Last updated:** [September 3, 2017, 4:16pm UTC](https://discuss.elastic.co/t/duplicate-documents-in-elasticsearch/99165 "2017-09-03T16:16:37Z")
I am sending one document to Elastic 5.5 from Logstash. But I am getting duplicate documents, two documents with different IDs but same fields. Below I am showing only index , type and id. "hits": { "total": 2, … --- ## [Elasticsearch 8.19.17, 9.3.6, 9.4.3 Security Update (ESA-2026-42)](https://discuss.elastic.co/t/elasticsearch-8-19-17-9-3-6-9-4-3-security-update-esa-2026-42/387439)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 1:50pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-17-9-3-6-9-4-3-security-update-esa-2026-42/387439 "2026-07-01T13:50:07Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can subm… --- ## [Winlogbeat output to Graylog](https://discuss.elastic.co/t/winlogbeat-output-to-graylog/104533)
**Author:** [@justas](https://discuss.elastic.co/u/justas)\ **Replies:** 4\ **Last updated:** [October 24, 2017, 12:55pm UTC](https://discuss.elastic.co/t/winlogbeat-output-to-graylog/104533 "2017-10-24T12:55:44Z")
Hi All, I have an issue. My winlogbeat sends duplicate and even in one event I found x150 same messages in graylog where in windows event logs there is only 1 message. Winlogbeat: 5.5.2 Graylog: 2.3.0 Elasticsearch: … --- ## [Elasticsearch query to find occurrences of some word in message](https://discuss.elastic.co/t/elasticsearch-query-to-find-occurrences-of-some-word-in-message/49384)
**Author:** [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\ **Replies:** 4\ **Last updated:** [May 10, 2016, 6:55am UTC](https://discuss.elastic.co/t/elasticsearch-query-to-find-occurrences-of-some-word-in-message/49384 "2016-05-10T06:55:01Z")
"hits": \[ { "\_index": "filebeat-2016.05.06", "\_type": "log", "\_id": "AVSFCkQD9VvAndW3DfOv", "\_score": 1, "\_source": { "message": "javax… --- ## [Is elastic docs page down](https://discuss.elastic.co/t/is-elastic-docs-page-down/200858)
**Author:** [@Riddhesh](https://discuss.elastic.co/u/Riddhesh)\ **Replies:** 2\ **Last updated:** [September 24, 2019, 12:39pm UTC](https://discuss.elastic.co/t/is-elastic-docs-page-down/200858 "2019-09-24T12:39:50Z")
Hi, The docs page for elastic is timing out, e.g. https://www.elastic.co/guide/en/elasticsearch/reference/current/docs.html with following message: An error occurred. Sorry, the page you are looking for is currently un… --- ## [Kibana shows only one hit - latest log entry](https://discuss.elastic.co/t/kibana-shows-only-one-hit-latest-log-entry/152895)
**Author:** [@sud](https://discuss.elastic.co/u/sud)\ **Replies:** 5\ **Last updated:** [October 22, 2018, 12:00pm UTC](https://discuss.elastic.co/t/kibana-shows-only-one-hit-latest-log-entry/152895 "2018-10-22T12:00:04Z")
I have setup ELK. Looks like it is working fine as it is shipping logs from all four files which I am reading from using filebeat. However in Kibana, it only shows last entry. The previous entry gets replaced from the… --- ## [Upsert nested fields with Spark](https://discuss.elastic.co/t/upsert-nested-fields-with-spark/128813)
**Author:** [@cluengo](https://discuss.elastic.co/u/cluengo)\ **Replies:** 6\ **Last updated:** [April 26, 2018, 7:27pm UTC](https://discuss.elastic.co/t/upsert-nested-fields-with-spark/128813 "2018-04-26T19:27:51Z")
I'm trying to update a nested field using Spark and a scripted update. The code I'm using is: update\_params = "new\_samples: samples" update\_script = "ctx.\_source.samples += new\_samples" es\_conf = { "es.mapping.id": "… --- ## [Beat name from file](https://discuss.elastic.co/t/beat-name-from-file/65707)
**Author:** [@lendoly](https://discuss.elastic.co/u/lendoly)\ **Replies:** 6\ **Last updated:** [November 14, 2016, 1:14pm UTC](https://discuss.elastic.co/t/beat-name-from-file/65707 "2016-11-14T13:14:44Z")
Hello to all, I already see that is possible to configure the beat name with Environment Variables, but I want to know if is possible to configure the beat name from a file. Explanation: I have 2 machines running on … --- ## [File input not working despite all efforts in both Windows and Linux](https://discuss.elastic.co/t/file-input-not-working-despite-all-efforts-in-both-windows-and-linux/47039)
**Author:** [@Jerry\_Hatchett](https://discuss.elastic.co/u/Jerry_Hatchett)\ **Replies:** 6\ **Last updated:** [April 13, 2016, 5:36am UTC](https://discuss.elastic.co/t/file-input-not-working-despite-all-efforts-in-both-windows-and-linux/47039 "2016-04-13T05:36:23Z")
Right now I'm working with an instance in Ubuntu 14.04, but I've also tried with the SIFT Workstation embodiment of 14.04, Windows 10, and Ubuntu 15. No matter what, and despite days tinkering, I still cannot get logstas… --- ## [Json payload masking using logstash](https://discuss.elastic.co/t/json-payload-masking-using-logstash/118158)
**Author:** [@Suman\_Reddy1](https://discuss.elastic.co/u/Suman_Reddy1)\ **Replies:** 4\ **Last updated:** [March 1, 2018, 7:03am UTC](https://discuss.elastic.co/t/json-payload-masking-using-logstash/118158 "2018-03-01T07:03:08Z")
Team, I am a newbie here, we are using ELK stack for log-management. We configured logstash such that it will read log messages from our logs and push them to Elastisearch. We are good till this part, now the issue came… --- ## [Dealing with multiple timezones](https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145)
**Author:** [@SuperBuster](https://discuss.elastic.co/u/SuperBuster)\ **Replies:** 4\ **Last updated:** [December 14, 2015, 7:34pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145 "2015-12-14T19:34:24Z")
Hi, i use the elk stack and i have machines in utc time, machines in pst time and some in eastern time. I wanted to know how you guys deal with this with your elk stack. (btw, i can't put everything in utc) Even when i… --- ## [Handling updates from multiple sources](https://discuss.elastic.co/t/handling-updates-from-multiple-sources/17309)
**Author:** [@Michal\_Zgliczynski](https://discuss.elastic.co/u/Michal_Zgliczynski)\ **Replies:** 5\ **Last updated:** [May 4, 2014, 1:56am UTC](https://discuss.elastic.co/t/handling-updates-from-multiple-sources/17309 "2014-05-04T01:56:42Z")
Hi, I am building a system in which I will have two sources of updates: 1) Bulk updating from the source of truth(db) documents(complete docs) 2) Live updates Also, lets assume that each insert/update has a timest… --- ## [Problem in Kibana 4.2.1](https://discuss.elastic.co/t/problem-in-kibana-4-2-1/36121)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 6\ **Last updated:** [May 18, 2016, 6:39am UTC](https://discuss.elastic.co/t/problem-in-kibana-4-2-1/36121 "2016-05-18T06:39:32Z")
Hi Experts, I have seen many folks asking the same question but nowhere we found the solution . I have recently downloaded Kibana 4.2.1 along with ES 2.1.0 . I do not have any index so just tried to check the look and … --- ## [Another question: unable to authenticate user \[admin\] for REST request, please advise](https://discuss.elastic.co/t/another-question-unable-to-authenticate-user-admin-for-rest-request-please-advise/112834)
**Author:** [@Derrick](https://discuss.elastic.co/u/Derrick)\ **Replies:** 2\ **Last updated:** [January 4, 2018, 9:04pm UTC](https://discuss.elastic.co/t/another-question-unable-to-authenticate-user-admin-for-rest-request-please-advise/112834 "2018-01-04T21:04:56Z")
Hi, I just setup ssl in ES5.6, and use highlevelrestclient to query data, but I got this error, anyone knows the reason? is my user:admin setup wrong. {"error":{"root\_cause":\[{"type":"security\_exception","reason":"unab… --- ## [TooManyClauses\[maxClauseCount is set to 1024\]](https://discuss.elastic.co/t/toomanyclauses-maxclausecount-is-set-to-1024/3528)
**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\ **Replies:** 2\ **Last updated:** [November 8, 2010, 9:08pm UTC](https://discuss.elastic.co/t/toomanyclauses-maxclausecount-is-set-to-1024/3528 "2010-11-08T21:08:30Z")
Hey, Running a freakishly large query that is bounded by the number of companies someone is watching or has holdings in and am hitting this error: TooManyClauses\[maxClauseCount is set to 1024\] Is there any setti… --- ## [S3 Repo plugin failing certificate validation with MiniO, already added cert to Jdk truststore](https://discuss.elastic.co/t/s3-repo-plugin-failing-certificate-validation-with-minio-already-added-cert-to-jdk-truststore/269069)
**Author:** [@R.L](https://discuss.elastic.co/u/R.L)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 10:38am UTC](https://discuss.elastic.co/t/s3-repo-plugin-failing-certificate-validation-with-minio-already-added-cert-to-jdk-truststore/269069 "2021-04-06T10:38:36Z")
I want to take snapshots of my ElasticSearch Index and use MiniO instance running on a remote machine as storage. My ES instance (7.6.0) is ran locally, using JDK 13. I can access the miniO storage through my browser ju… --- ## [Using doc\_value returns error with update and \_update\_by\_query in elasticsearch :: ScriptException\[runtime error\]; nested: NullPointerException (Elasticsearch 6.4)](https://discuss.elastic.co/t/using-doc-value-returns-error-with-update-and-update-by-query-in-elasticsearch-scriptexception-runtime-error-nested-nullpointerexception-elasticsearch-6-4/149958)
**Author:** [@Rahul\_Ranjan1](https://discuss.elastic.co/u/Rahul_Ranjan1)\ **Replies:** 5\ **Last updated:** [September 26, 2018, 5:39pm UTC](https://discuss.elastic.co/t/using-doc-value-returns-error-with-update-and-update-by-query-in-elasticsearch-scriptexception-runtime-error-nested-nullpointerexception-elasticsearch-6-4/149958 "2018-09-26T17:39:33Z")
The update gets committed when I use this query. POST my\_collegues\_names/\_update\_by\_query?error\_trace=true { "script": { "lang": "painless", "source": "ctx.\_source.age +=params.last", "params": { "last": 5 } }, … --- ## [Kibana no longer finds @timestamp in logstash-\*](https://discuss.elastic.co/t/kibana-no-longer-finds-timestamp-in-logstash/77584)
**Author:** [@Grizzly](https://discuss.elastic.co/u/Grizzly)\ **Replies:** 5\ **Last updated:** [March 9, 2017, 5:03pm UTC](https://discuss.elastic.co/t/kibana-no-longer-finds-timestamp-in-logstash/77584 "2017-03-09T17:03:52Z")
I have a dashboard that states "Could not locate that index-pattern-field (id: @timestamp)" for my logstash-\* index pattern. I have tried the following troubleshooting: I had a problematic index that was creating mas… --- ## [Nginx proxy can not start](https://discuss.elastic.co/t/nginx-proxy-can-not-start/25845)
**Author:** [@trungmv](https://discuss.elastic.co/u/trungmv)\ **Replies:** 2\ **Last updated:** [July 20, 2015, 1:31am UTC](https://discuss.elastic.co/t/nginx-proxy-can-not-start/25845 "2015-07-20T01:31:48Z")
Hello, I just created kibana.conf on /etc/nginx/conf.d as recommended with content below: server { listen 80; server\_name localhost; auth\_basic "Restricted Access"; auth\_basic\_user\_file /etc/nginx/h… --- ## [Logstash Dead Letter Queue, send raw message to ElasticSearch](https://discuss.elastic.co/t/logstash-dead-letter-queue-send-raw-message-to-elasticsearch/190781)
**Author:** [@Joe\_Still](https://discuss.elastic.co/u/Joe_Still)\ **Replies:** 6\ **Last updated:** [July 16, 2019, 5:28pm UTC](https://discuss.elastic.co/t/logstash-dead-letter-queue-send-raw-message-to-elasticsearch/190781 "2019-07-16T17:28:56Z")
Hello, I am running into an issue where I am sending incorrectly formatted JSON to my logstash such that logstash throws errors about being unable to parse it. I learned about Dead Letter Queue, and now I am hoping some… --- ## [Ruby filter in Logstash, how to pass parameters to external Ruby script](https://discuss.elastic.co/t/ruby-filter-in-logstash-how-to-pass-parameters-to-external-ruby-script/120333)
**Author:** [@Heckler\_GlobalOperat](https://discuss.elastic.co/u/Heckler_GlobalOperat)\ **Replies:** 2\ **Last updated:** [February 19, 2018, 3:09pm UTC](https://discuss.elastic.co/t/ruby-filter-in-logstash-how-to-pass-parameters-to-external-ruby-script/120333 "2018-02-19T15:09:04Z")
Hi everyone, I'm preparing a Logstash configuration which use Grok to extract fields from incoming messages and Ruby to process those fields. Below is a simple version of my configuration, I want to extract the Timesta… --- ## [Kibana OSS support for EC 5.6](https://discuss.elastic.co/t/kibana-oss-support-for-ec-5-6/111463)
**Author:** [@john.akash](https://discuss.elastic.co/u/john.akash)\ **Replies:** 5\ **Last updated:** [December 21, 2017, 7:44pm UTC](https://discuss.elastic.co/t/kibana-oss-support-for-ec-5-6/111463 "2017-12-21T19:44:25Z")
Hi Team, We have configured ES 5.6 for our internal use and we are planning to run the kibana from a docker container. While going through the documentation we can see that OSS is available only for 6.0.1. Could you p… --- ## [Redirect users to a default page](https://discuss.elastic.co/t/redirect-users-to-a-default-page/189395)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 4\ **Last updated:** [July 8, 2019, 6:14pm UTC](https://discuss.elastic.co/t/redirect-users-to-a-default-page/189395 "2019-07-08T18:14:41Z")
Hi I have setup dashboards on ELK 7.2. All my users in the organization are not aware of the tool. So I don't expect them to know how to search and add filters etc. So, I want to create a default dashboard main page … --- ## [Document exist check](https://discuss.elastic.co/t/document-exist-check/45789)
**Author:** [@raunak](https://discuss.elastic.co/u/raunak)\ **Replies:** 4\ **Last updated:** [March 31, 2016, 1:55am UTC](https://discuss.elastic.co/t/document-exist-check/45789 "2016-03-31T01:55:00Z")
Given the scenario where the index contains documents with ids 1,2,3,4,5,6,7. A user saves document 1, 3, and 7 in their session, and sometime later, document 3 is removed from the index. What query can I use against … --- ## [Elasticsearch memory usage](https://discuss.elastic.co/t/elasticsearch-memory-usage/16350)
**Author:** [@codebird](https://discuss.elastic.co/u/codebird)\ **Replies:** 3\ **Last updated:** [June 11, 2014, 8:33am UTC](https://discuss.elastic.co/t/elasticsearch-memory-usage/16350 "2014-06-11T08:33:52Z")
Hello, I have been using elasticsearch on a ubuntu server for a year now, and everything was going great. I had an index of 150,000,000 entries of domain names, running small queries on it, just filtering by 1 term … --- ## [Issues with Audit Log](https://discuss.elastic.co/t/issues-with-audit-log/108322)
**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\ **Replies:** 7\ **Last updated:** [December 7, 2017, 12:27pm UTC](https://discuss.elastic.co/t/issues-with-audit-log/108322 "2017-12-07T12:27:38Z")
Hi, I was reading about some problems with auditing already in spring and was hoping that it would be fixed by now, but no cigar. Because we are running Elastic stack as a log management / SIEM system, it is extremely … --- ## [Certificate issues lumberjack as output plugin](https://discuss.elastic.co/t/certificate-issues-lumberjack-as-output-plugin/72836)
**Author:** [@abhinigam](https://discuss.elastic.co/u/abhinigam)\ **Replies:** 7\ **Last updated:** [February 2, 2017, 6:31am UTC](https://discuss.elastic.co/t/certificate-issues-lumberjack-as-output-plugin/72836 "2017-02-02T06:31:58Z")
I am using a self signed client certificate and configuring the same in my lumberjack output plugin. However, when my logstash forwarder on the client machines tries to talk to the logstash aggregator I am getting the fo… [Previous page](https://discuss.elastic.co/top.md?page=542&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=544&per_page=50&period=all)