# Top

**URL:** https://discuss.elastic.co/top.md?page=550&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 551

---

## [Maps not loading... some sort of CSP issue](https://discuss.elastic.co/t/maps-not-loading-some-sort-of-csp-issue/220187)

<div class="topic-metadata">

**Author:** [@markbgale](https://discuss.elastic.co/u/markbgale)\
**Replies:** 6\
**Last updated:** [February 25, 2020, 10:22am UTC](https://discuss.elastic.co/t/maps-not-loading-some-sort-of-csp-issue/220187 "2020-02-25T10:22:26Z")

</div>

Hi all I'm using the elastic supplied dockerised version of Kibana, version 7.5.2 which is working fine for general elastic management. I'm having issues with the Map functions. When I try and use/create a map I get a …

---

## [I have written a query in oracle. i want to convert this query in elastic search](https://discuss.elastic.co/t/i-have-written-a-query-in-oracle-i-want-to-convert-this-query-in-elastic-search/46171)

<div class="topic-metadata">

**Author:** [@furqan](https://discuss.elastic.co/u/furqan)\
**Replies:** 6\
**Last updated:** [April 12, 2016, 5:43am UTC](https://discuss.elastic.co/t/i-have-written-a-query-in-oracle-i-want-to-convert-this-query-in-elastic-search/46171 "2016-04-12T05:43:50Z")

</div>

Below is the query i have written in Oracle i need to write same in Elastic search. select sum(total\_count),datasource from (select distinct faspdf\_os\_id,FASPDF\_CUST\_ID,FASPDF\_PROD\_ID,FASPDF\_TIME\_ID,total\_count,dataso…

---

## [Manual labeling data in Elasticsearch / Kibana](https://discuss.elastic.co/t/manual-labeling-data-in-elasticsearch-kibana/143628)

<div class="topic-metadata">

**Author:** [@pettersoderlund](https://discuss.elastic.co/u/pettersoderlund)\
**Replies:** 0\
**Last updated:** [August 9, 2018, 4:40am UTC](https://discuss.elastic.co/t/manual-labeling-data-in-elasticsearch-kibana/143628 "2018-08-09T04:40:34Z")

</div>

In my organization we're using ELK to present collected and categorized data. Our analysts are really pleased with navigating and exploring data in Kibana. However our analysts would like a way to manually label data thr…

---

## [Failed to join a cluster because of time-out](https://discuss.elastic.co/t/failed-to-join-a-cluster-because-of-time-out/238360)

<div class="topic-metadata">

**Author:** [@dasolyn](https://discuss.elastic.co/u/dasolyn)\
**Replies:** 5\
**Last updated:** [June 26, 2020, 2:56pm UTC](https://discuss.elastic.co/t/failed-to-join-a-cluster-because-of-time-out/238360 "2020-06-26T14:56:44Z")

</div>

I'm trying to build ElasticSearch cluster but it cause an error. Log for master node (All IPs and comments were omitted due to privacy) \[2020-06-23T16:33:47,361\]\[WARN \]\[o.e.c.c.Coordinator \] \[kn-log-01\] failed to …

---

## [Codec footer mismatch - elasticsearch 1.7.5 won't start after RAID failure](https://discuss.elastic.co/t/codec-footer-mismatch-elasticsearch-1-7-5-wont-start-after-raid-failure/62274)

<div class="topic-metadata">

**Author:** [@unknownunknown](https://discuss.elastic.co/u/unknownunknown)\
**Replies:** 5\
**Last updated:** [October 7, 2016, 2:53pm UTC](https://discuss.elastic.co/t/codec-footer-mismatch-elasticsearch-1-7-5-wont-start-after-raid-failure/62274 "2016-10-07T14:53:22Z")

</div>

This system encountered a RAID disk failure. After the disk was replaced, errors like this have been observed on several indices in the cluster. The array reports no further errors and appears to have been rebuilt. Thi…

---

## [High OS Cpu usage on 7.7.1](https://discuss.elastic.co/t/high-os-cpu-usage-on-7-7-1/238301)

<div class="topic-metadata">

**Author:** [@chakragod](https://discuss.elastic.co/u/chakragod)\
**Replies:** 5\
**Last updated:** [July 16, 2020, 6:20am UTC](https://discuss.elastic.co/t/high-os-cpu-usage-on-7-7-1/238301 "2020-07-16T06:20:50Z")

</div>

Hello, We recently upgraded our ELK stack from v 7.4.0 to 7.7.1 and now we noticed that the OS CPU is 100% on our hot data nodes which do the indexing. The OS CPU is almost always at 100%, the process CPU is close to 45…

---

## [Sharding hot vs warm Nodes](https://discuss.elastic.co/t/sharding-hot-vs-warm-nodes/245960)

<div class="topic-metadata">

**Author:** [@fvegaucr1](https://discuss.elastic.co/u/fvegaucr1)\
**Replies:** 7\
**Last updated:** [September 18, 2020, 8:22am UTC](https://discuss.elastic.co/t/sharding-hot-vs-warm-nodes/245960 "2020-09-18T08:22:43Z")

</div>

Hi, hope you all doing good, I will like to see if someone can help me with this. I have a cluster of 35 nodes running version 7.4.2 3 x of them are master nodes 2 x coordinators 8 x hot 2 x cold 20 x Warm We get …

---

## [Xpack File realm user cant login](https://discuss.elastic.co/t/xpack-file-realm-user-cant-login/90266)

<div class="topic-metadata">

**Author:** [@Jerry\_Huang](https://discuss.elastic.co/u/Jerry_Huang)\
**Replies:** 4\
**Last updated:** [June 22, 2017, 3:40am UTC](https://discuss.elastic.co/t/xpack-file-realm-user-cant-login/90266 "2017-06-22T03:40:27Z")

</div>

HI i saw some of the similar question like but still cant work so please help LOL i use file realm to add a new user and in ./users list i have then i go to check my users and users roles file they both look…

---

## [Flatten nested aggregation](https://discuss.elastic.co/t/flatten-nested-aggregation/125602)

<div class="topic-metadata">

**Author:** [@denismaciel](https://discuss.elastic.co/u/denismaciel)\
**Replies:** 1\
**Last updated:** [March 26, 2018, 6:47pm UTC](https://discuss.elastic.co/t/flatten-nested-aggregation/125602 "2018-03-26T18:47:14Z")

</div>

Hi, I am trying to flatten out the aggregation below: GET \_search { "size": 0, "aggs": { "ACTION": { "terms": { "field": "action.keyword" }, "aggs": { "MONTH": { "date…

---

## [Failed to start Elasticsearch.7.15.2](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-15-2/289361)

<div class="topic-metadata">

**Author:** [@tranha31](https://discuss.elastic.co/u/tranha31)\
**Replies:** 6\
**Last updated:** [November 17, 2021, 4:52pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-15-2/289361 "2021-11-17T16:52:57Z")

</div>

I want to start Elasticsearch v7.12.1. But it is not working. I don't know what is wrong. Someone help me, please!!!!!!!! elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.se…

---

## [Logstash doesn't read an input file :/](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231)

<div class="topic-metadata">

**Author:** [@abed85](https://discuss.elastic.co/u/abed85)\
**Replies:** 6\
**Last updated:** [August 3, 2017, 6:30pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231 "2017-08-03T18:30:50Z")

</div>

Hello , I am trying to use Docker ELK stack to visualize the log of openvswitch. My problem with logstash that it doesn’t read the log file. in the /logstash/pipeline/logstash.conf I added input { file { path =\> …

---

## [Stop words are not working](https://discuss.elastic.co/t/stop-words-are-not-working/53149)

<div class="topic-metadata">

**Author:** [@ramz](https://discuss.elastic.co/u/ramz)\
**Replies:** 6\
**Last updated:** [June 21, 2016, 4:37am UTC](https://discuss.elastic.co/t/stop-words-are-not-working/53149 "2016-06-21T04:37:16Z")

</div>

Hello EveryOne, I just started with elastic search. Its quite interesting and joy to learn. However i have been stuck implementing the stopwords. Here's my index: url -XPUT 'http://localhost:9200/my\_indice' -d' { …

---

## [Extracting data from documents stored in HDFS to index in Elasticsearch](https://discuss.elastic.co/t/extracting-data-from-documents-stored-in-hdfs-to-index-in-elasticsearch/46391)

<div class="topic-metadata">

**Author:** [@Sachin054](https://discuss.elastic.co/u/Sachin054)\
**Replies:** 6\
**Last updated:** [April 8, 2016, 9:46am UTC](https://discuss.elastic.co/t/extracting-data-from-documents-stored-in-hdfs-to-index-in-elasticsearch/46391 "2016-04-08T09:46:24Z")

</div>

I have a HDFS archive to store variety of documents like pdf,ms word file,ppt,csv etc. I would like to build a platform using elasticsearch to search the file or text contents. I know I can use the es-hadoop plugin to in…

---

## [Kibana 6.3 has Error 404 / X-Pack-Index not found after upgrade](https://discuss.elastic.co/t/kibana-6-3-has-error-404-x-pack-index-not-found-after-upgrade/136329)

<div class="topic-metadata">

**Author:** [@creaticious](https://discuss.elastic.co/u/creaticious)\
**Replies:** 5\
**Last updated:** [July 2, 2018, 9:30am UTC](https://discuss.elastic.co/t/kibana-6-3-has-error-404-x-pack-index-not-found-after-upgrade/136329 "2018-07-02T09:30:10Z")

</div>

Hey guys, today i've upgraded Elastic & Kibana to 6.3. Elastic is working but Kibana shows 404 with: {"statusCode":404,"error":"Not Found","message":"\[index\_not\_found\_exception\] no such index, with { resource.type=\\"in…

---

## [Unable to login to Elastic Cloud using Microsoft login](https://discuss.elastic.co/t/unable-to-login-to-elastic-cloud-using-microsoft-login/368393)

<div class="topic-metadata">

**Author:** [@cpua](https://discuss.elastic.co/u/cpua)\
**Replies:** 7\
**Last updated:** [October 8, 2024, 10:10am UTC](https://discuss.elastic.co/t/unable-to-login-to-elastic-cloud-using-microsoft-login/368393 "2024-10-08T10:10:51Z")

</div>

For the past weeks I am able to login to Elastic cloud to configure the server and indices. But today I am unable to login to my Elastic cloud. I have provision it using Azure Elasticsearch. Is there any changes or maint…

---

## [What is the minimum number of servers necessary for healthy elastic search cluster?](https://discuss.elastic.co/t/what-is-the-minimum-number-of-servers-necessary-for-healthy-elastic-search-cluster/244977)

<div class="topic-metadata">

**Author:** [@Ankitha\_Sathya](https://discuss.elastic.co/u/Ankitha_Sathya)\
**Replies:** 1\
**Last updated:** [August 14, 2020, 9:22am UTC](https://discuss.elastic.co/t/what-is-the-minimum-number-of-servers-necessary-for-healthy-elastic-search-cluster/244977 "2020-08-14T09:22:30Z")

</div>

Hi all, I am new to Elastic search and trying to understand what is the minimum requirement for a ES cluster keeping availability in mind. Note that I am considering all the nodes are master-eligible and data node and …

---

## [ERR SSL client failed to connect with: read tcp -\>:5044: i/o timeout in kubernetes](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-with-read-tcp-5044-i-o-timeout-in-kubernetes/85712)

<div class="topic-metadata">

**Author:** [@rohan89](https://discuss.elastic.co/u/rohan89)\
**Replies:** 7\
**Last updated:** [May 23, 2017, 12:54pm UTC](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-with-read-tcp-5044-i-o-timeout-in-kubernetes/85712 "2017-05-23T12:54:40Z")

</div>

Hi, I have created a one filebeat docker image. which i am using in kubernetes cluster. I am getting the below error. transport.go:125: ERR SSL client failed to connect with: dial tcp 172.35.5.125:5044: getsockopt: con…

---

## [Getting relevant information from CDATA of XML file with Grok](https://discuss.elastic.co/t/getting-relevant-information-from-cdata-of-xml-file-with-grok/37155)

<div class="topic-metadata">

**Author:** [@Omer\_Uludag](https://discuss.elastic.co/u/Omer_Uludag)\
**Replies:** 7\
**Last updated:** [December 15, 2015, 6:56am UTC](https://discuss.elastic.co/t/getting-relevant-information-from-cdata-of-xml-file-with-grok/37155 "2015-12-15T06:56:41Z")

</div>

Hello together, I try to parse an XML document and get some relevant information about it. The document looks like this: \<log level="INFO" time="Tue Sep 08 11:42:39 EDT 2015" timel="1441726959272" id="1234567890" cat="CO…

---

## [How to export/import an ES snapshot to/from an external harddrive](https://discuss.elastic.co/t/how-to-export-import-an-es-snapshot-to-from-an-external-harddrive/290796)

<div class="topic-metadata">

**Author:** [@dancing\_ghosts](https://discuss.elastic.co/u/dancing_ghosts)\
**Replies:** 4\
**Last updated:** [December 2, 2021, 6:11pm UTC](https://discuss.elastic.co/t/how-to-export-import-an-es-snapshot-to-from-an-external-harddrive/290796 "2021-12-02T18:11:09Z")

</div>

We have our customers Filebeat/Winlogbeat data stored on our Elasticsearch instance. The customer has an Elasticsearch instance at their physical location which is the same version as ours. They wish to import this data …

---

## [Trying to find duplicates in a nested array](https://discuss.elastic.co/t/trying-to-find-duplicates-in-a-nested-array/2377)

<div class="topic-metadata">

**Author:** [@jdh2550](https://discuss.elastic.co/u/jdh2550)\
**Replies:** 2\
**Last updated:** [June 10, 2015, 8:34pm UTC](https://discuss.elastic.co/t/trying-to-find-duplicates-in-a-nested-array/2377 "2015-06-10T20:34:25Z")

</div>

I have a document type "foo" with an array of nested documents called "properties". I want to find any "foo"s that have duplicate entries in the "properties" array. e.g. given two "foos": "foo1": { "properties", \[ {…

---

## [Delete by query on alias or multiple indexes](https://discuss.elastic.co/t/delete-by-query-on-alias-or-multiple-indexes/43102)

<div class="topic-metadata">

**Author:** [@ogauchard](https://discuss.elastic.co/u/ogauchard)\
**Replies:** 3\
**Last updated:** [March 1, 2016, 2:35pm UTC](https://discuss.elastic.co/t/delete-by-query-on-alias-or-multiple-indexes/43102 "2016-03-01T14:35:06Z")

</div>

I am trying to delete documents by query on multiple indexes. The plugin seems to fail on aliases with the following error : Alias \[xxx\] has more than one indices associated with it I also tried to delete using \_a…

---

## [Filebeat to logstash: Failed to publish events caused by: read tcp 192.168.155.177:55376-\>47.102.46.68:5045:wsarecv:An existing connection was forcibly closed by the remote host](https://discuss.elastic.co/t/filebeat-to-logstash-failed-to-publish-events-caused-by-read-tcp-192-168-155-177-55376-47-102-46-68wsarecv-an-existing-connection-was-forcibly-closed-by-the-remote-host/213657)

<div class="topic-metadata">

**Author:** [@cheninnocent](https://discuss.elastic.co/u/cheninnocent)\
**Replies:** 6\
**Last updated:** [January 8, 2020, 8:03am UTC](https://discuss.elastic.co/t/filebeat-to-logstash-failed-to-publish-events-caused-by-read-tcp-192-168-155-177-55376-47-102-46-68wsarecv-an-existing-connection-was-forcibly-closed-by-the-remote-host/213657 "2020-01-08T08:03:29Z")

</div>

As I said above, the above bug appears on several computers, but is normal on others. Even logstash only have input and output. The above bug still appears on several computers.

---

## [Kibana login page customization](https://discuss.elastic.co/t/kibana-login-page-customization/310167)

<div class="topic-metadata">

**Author:** [@abaltan](https://discuss.elastic.co/u/abaltan)\
**Replies:** 5\
**Last updated:** [July 25, 2022, 11:33am UTC](https://discuss.elastic.co/t/kibana-login-page-customization/310167 "2022-07-25T11:33:29Z")

</div>

Hello, I'm using Elastic&Kibana 8.3 and trying to change the logo and text in kibana login page below. any idea how to change it? Thanks in advance :slight\_smile:

---

## [BulkProcessor deadlock on cluster failure](https://discuss.elastic.co/t/bulkprocessor-deadlock-on-cluster-failure/110526)

<div class="topic-metadata">

**Author:** [@cwinkler](https://discuss.elastic.co/u/cwinkler)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 2:31pm UTC](https://discuss.elastic.co/t/bulkprocessor-deadlock-on-cluster-failure/110526 "2017-12-06T14:31:36Z")

</div>

BulkProcessor goes into dead-lock situation when ES (5.5.1) cluster fails during bulk-processing. If the bulk response gets lost due to failing cluster, the async bulk request handler gets stuck while waiting for the pr…

---

## [Kibana 6.2 fails to start, ValidationError, child xpack, child security fails because “http” is not allowed](https://discuss.elastic.co/t/kibana-6-2-fails-to-start-validationerror-child-xpack-child-security-fails-because-http-is-not-allowed/121899)

<div class="topic-metadata">

**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\
**Replies:** 2\
**Last updated:** [March 7, 2018, 11:22am UTC](https://discuss.elastic.co/t/kibana-6-2-fails-to-start-validationerror-child-xpack-child-security-fails-because-http-is-not-allowed/121899 "2018-03-07T11:22:38Z")

</div>

Have little to no Linux nor ELK knowledge and am moving into the position of owning ELK. The previous owner is helping me, and I'm trying to figure this out on my own. This one has me stumped? I believe that I have setu…

---

## [Collect files from remote machine or install multiple Filebeat or remote](https://discuss.elastic.co/t/collect-files-from-remote-machine-or-install-multiple-filebeat-or-remote/75173)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 2\
**Last updated:** [February 15, 2017, 12:10pm UTC](https://discuss.elastic.co/t/collect-files-from-remote-machine-or-install-multiple-filebeat-or-remote/75173 "2017-02-15T12:10:57Z")

</div>

Hi, From what I understand, if I need Filebeat to collect logs from remote machine, I need to have shared file system with the remote mschine, so the Filebeat will be able to reach the files as if they where local, jus…

---

## [Field \[\] used in expression does not exist in mappings, even after creating…?](https://discuss.elastic.co/t/field-used-in-expression-does-not-exist-in-mappings-even-after-creating/73515)

<div class="topic-metadata">

**Author:** [@informatico](https://discuss.elastic.co/u/informatico)\
**Replies:** 5\
**Last updated:** [February 15, 2017, 4:40pm UTC](https://discuss.elastic.co/t/field-used-in-expression-does-not-exist-in-mappings-even-after-creating/73515 "2017-02-15T16:40:38Z")

</div>

Hi, I am very new to both Elasticsearch and Kibana, which I am using for a current project. I have data coming in from an external source, and one of the fields I have in Discover of Kibana is 'clearancetime'. This fi…

---

## [Elastic http securing: access denied ("java.io.FilePermission" "/etc/pki/tls/private" "read")](https://discuss.elastic.co/t/elastic-http-securing-access-denied-java-io-filepermission-etc-pki-tls-private-read/266202)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 10:09am UTC](https://discuss.elastic.co/t/elastic-http-securing-access-denied-java-io-filepermission-etc-pki-tls-private-read/266202 "2021-03-04T10:09:41Z")

</div>

Hi Elastic 7.11.1 I am trying to secure http protcol. But I am getting 2021-03-04T11:15:13,050\]\[ERROR\]\[o.e.b.Bootstrap \] \[dev-dc2-rk\] Exception java.security.AccessControlException: access denied ("java.io.F…

---

## [Nginx json logs + filebeat + elasticsearch but unwanted key: value order](https://discuss.elastic.co/t/nginx-json-logs-filebeat-elasticsearch-but-unwanted-key-value-order/70471)

<div class="topic-metadata">

**Author:** [@cmartear](https://discuss.elastic.co/u/cmartear)\
**Replies:** 2\
**Last updated:** [January 4, 2017, 5:35pm UTC](https://discuss.elastic.co/t/nginx-json-logs-filebeat-elasticsearch-but-unwanted-key-value-order/70471 "2017-01-04T17:35:52Z")

</div>

Hello everyone... I'm using json config on my nginx logs, that's parsed ans shipped by filebeat to elasticshearch and works very fine. log\_format json '{ "time": "$time\_local", ' '"remo…

---

## [Elasticsearch 8.11.1 Security Update (ESA-2024-05)](https://discuss.elastic.co/t/elasticsearch-8-11-1-security-update-esa-2024-05/356458)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [March 29, 2024, 11:12am UTC](https://discuss.elastic.co/t/elasticsearch-8-11-1-security-update-esa-2024-05/356458 "2024-03-29T11:12:33Z")

</div>

Elasticsearch Uncaught Exception (ESA-2024-05) An uncaught exception in Elasticsearch \>= 8.4.0 and \< 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch inges…

---

## [Logstash - Invalid version of beats error](https://discuss.elastic.co/t/logstash-invalid-version-of-beats-error/361698)

<div class="topic-metadata">

**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\
**Replies:** 7\
**Last updated:** [June 23, 2024, 7:41am UTC](https://discuss.elastic.co/t/logstash-invalid-version-of-beats-error/361698 "2024-06-23T07:41:44Z")

</div>

Hello everyone, I have a Logstash server that receives data from Elastic agents and writes it to Elasticsearch. For testing purposes, I have one standalone agent running on a Linux server and one agent managed by a flee…

---

## [Data node calculation based on "Number of shards per node below 20 per GB heap it has configured"](https://discuss.elastic.co/t/data-node-calculation-based-on-number-of-shards-per-node-below-20-per-gb-heap-it-has-configured/311534)

<div class="topic-metadata">

**Author:** [@sree\_sk](https://discuss.elastic.co/u/sree_sk)\
**Replies:** 7\
**Last updated:** [August 9, 2022, 7:17pm UTC](https://discuss.elastic.co/t/data-node-calculation-based-on-number-of-shards-per-node-below-20-per-gb-heap-it-has-configured/311534 "2022-08-09T19:17:46Z")

</div>

I have the following scenario where, Data volume of an index is 85GB/day with a daily index rotation and retention of 90 days. Similarly I have 14 other indices with the same data volume per day. I have a system which…

---

## [Suite à installation x-pack - problème création des index journalier logstash dans elasticsearch](https://discuss.elastic.co/t/suite-a-installation-x-pack-probleme-creation-des-index-journalier-logstash-dans-elasticsearch/77608)

<div class="topic-metadata">

**Author:** [@rouxp](https://discuss.elastic.co/u/rouxp)\
**Replies:** 7\
**Last updated:** [April 3, 2017, 8:32am UTC](https://discuss.elastic.co/t/suite-a-installation-x-pack-probleme-creation-des-index-journalier-logstash-dans-elasticsearch/77608 "2017-04-03T08:32:18Z")

</div>

Bonjour, J'ai mis à jour mon environnement en installant la partie x-pack. Suite à cela tout à fonctionné correctement la première journée. Après la première journée j'ai trouvé des log d'erreur "status 404" dans mes l…

---

## [RAM and Data size](https://discuss.elastic.co/t/ram-and-data-size/239904)

<div class="topic-metadata">

**Author:** [@jigsm\_shah](https://discuss.elastic.co/u/jigsm_shah)\
**Replies:** 5\
**Last updated:** [July 26, 2020, 11:59pm UTC](https://discuss.elastic.co/t/ram-and-data-size/239904 "2020-07-26T23:59:25Z")

</div>

Hello, I am a newbie exploring Elastic Search and having hard time understanding how does Elastic Search handle data which is larger than the RAM size. I am going through the documentations and it says to allocate 50% …

---

## [Fixing Mapping for Objects in Array (objects in arrays are not well supported)](https://discuss.elastic.co/t/fixing-mapping-for-objects-in-array-objects-in-arrays-are-not-well-supported/191717)

<div class="topic-metadata">

**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\
**Replies:** 5\
**Last updated:** [July 24, 2019, 5:06am UTC](https://discuss.elastic.co/t/fixing-mapping-for-objects-in-array-objects-in-arrays-are-not-well-supported/191717 "2019-07-24T05:06:53Z")

</div>

I started ingesting audit logs from Google Cloud, and I'm getting "Objects in arrays are not well supported" notifications in Kibana for all arrays found in logs. What would be the best solution to fix the issue? Chan…

---

## [Date histogram based on two date-type variables](https://discuss.elastic.co/t/date-histogram-based-on-two-date-type-variables/194323)

<div class="topic-metadata">

**Author:** [@jcaballero](https://discuss.elastic.co/u/jcaballero)\
**Replies:** 6\
**Last updated:** [August 20, 2019, 2:42pm UTC](https://discuss.elastic.co/t/date-histogram-based-on-two-date-type-variables/194323 "2019-08-20T14:42:35Z")

</div>

My apologies in advance if title of this topic is obscure, and I am not using right nomenclature. I am quite new to Kibana... Using Kibana 5.4 I have in ElasticSearch some data, representing some type of events. Eac…

---

## [Parsing repeated patterns in logstash](https://discuss.elastic.co/t/parsing-repeated-patterns-in-logstash/51882)

<div class="topic-metadata">

**Author:** [@Deepak\_Patnaik](https://discuss.elastic.co/u/Deepak_Patnaik)\
**Replies:** 6\
**Last updated:** [June 11, 2016, 1:55pm UTC](https://discuss.elastic.co/t/parsing-repeated-patterns-in-logstash/51882 "2016-06-11T13:55:16Z")

</div>

Continuing the discussion from Parsing repeated patterns: In my log file i have the following pattern: 2014-02-19 19:13:12|oAmwic|20140219190348\_rmzXR|20140219190348\_rmzXR|ADR\_TST|Dim\_State\_Trade|Default|6|Java Excepti…

---

## [\[solved\] \[accuracy\] randomly missing events](https://discuss.elastic.co/t/solved-accuracy-randomly-missing-events/34813)

<div class="topic-metadata">

**Author:** [@vgm](https://discuss.elastic.co/u/vgm)\
**Replies:** 3\
**Last updated:** [November 23, 2015, 9:46am UTC](https://discuss.elastic.co/t/solved-accuracy-randomly-missing-events/34813 "2015-11-23T09:46:19Z")

</div>

Hi all, I'm wondering whether I can use logstash for ensuring accuracy during log collection (i.e. that no events will be skipped during input or output). For instance, let's consider the following configuration: inpu…

---

## [ELK on Virtual machine](https://discuss.elastic.co/t/elk-on-virtual-machine/219630)

<div class="topic-metadata">

**Author:** [@Rockk](https://discuss.elastic.co/u/Rockk)\
**Replies:** 1\
**Last updated:** [February 17, 2020, 2:28pm UTC](https://discuss.elastic.co/t/elk-on-virtual-machine/219630 "2020-02-17T14:28:07Z")

</div>

Hello Team, Can the ELK Stack(3 nodes - Elastic Search, Logstash and Kibana) be installed on the Virtual machines(Vmware or Hyper-V), Please advise. Also, what is the procedure to install and configure ELK Stack(3nodes…

---

## [Load Json to Elasticsearch](https://discuss.elastic.co/t/load-json-to-elasticsearch/195235)

<div class="topic-metadata">

**Author:** [@mkajdos](https://discuss.elastic.co/u/mkajdos)\
**Replies:** 4\
**Last updated:** [August 15, 2019, 2:34pm UTC](https://discuss.elastic.co/t/load-json-to-elasticsearch/195235 "2019-08-15T14:34:45Z")

</div>

I am new to Elasticseach and I am on the 7.3.0 release. On the documentation page: https://www.elastic.co/guide/en/elasticsearch/reference/current/getting-started-explore-data.html there is command to load the "account…

---

## [Stopping pipeline {:id=\>"main"}](https://discuss.elastic.co/t/stopping-pipeline-id-main/134260)

<div class="topic-metadata">

**Author:** [@Pavan\_Kumar1](https://discuss.elastic.co/u/Pavan_Kumar1)\
**Replies:** 4\
**Last updated:** [June 4, 2018, 1:41pm UTC](https://discuss.elastic.co/t/stopping-pipeline-id-main/134260 "2018-06-04T13:41:38Z")

</div>

Hi, I am having an issue when starting logstash. I have checked the other solutions in the forum but they dont seem to be related to the issue I am having. Can someone please help? Thank you. \[2018-06-01T12:32:23,733\]\[…

---

## [Get only latest version of document](https://discuss.elastic.co/t/get-only-latest-version-of-document/186403)

<div class="topic-metadata">

**Author:** [@nitin.anand](https://discuss.elastic.co/u/nitin.anand)\
**Replies:** 3\
**Last updated:** [June 19, 2019, 12:58pm UTC](https://discuss.elastic.co/t/get-only-latest-version-of-document/186403 "2019-06-19T12:58:13Z")

</div>

i experience an issue where the search returns all versions of a document randomly. Can this be controlled somehow, that i only get the latest version of document.

---

## [No matching indices found](https://discuss.elastic.co/t/no-matching-indices-found/116649)

<div class="topic-metadata">

**Author:** [@Hari\_Baskar](https://discuss.elastic.co/u/Hari_Baskar)\
**Replies:** 3\
**Last updated:** [January 25, 2018, 1:11pm UTC](https://discuss.elastic.co/t/no-matching-indices-found/116649 "2018-01-25T13:11:15Z")

</div>

Hi, I'm getting this error when discovering the data in Kibana for Metricbeat. No matching indices found: No indices match pattern "metricbeat-\*"

---

## [Elastic Stack 7.5.0 security update](https://discuss.elastic.co/t/elastic-stack-7-5-0-security-update/210217)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [December 2, 2019, 4:39pm UTC](https://discuss.elastic.co/t/elastic-stack-7-5-0-security-update/210217 "2019-12-02T16:39:13Z")

</div>

Metricbeat and Filebeat DSA public key panic (ESA-2019-15) A denial of service flaw when parsing malformed DSA public keys was discovered in Go, the language used to implement Beats. If Metricbeat or Filebeat are config…

---

## [SQL "join" in Elasticsearch? Yes you can](https://discuss.elastic.co/t/sql-join-in-elasticsearch-yes-you-can/38632)

<div class="topic-metadata">

**Author:** [@rtkmhart](https://discuss.elastic.co/u/rtkmhart)\
**Replies:** 2\
**Last updated:** [January 7, 2016, 8:26pm UTC](https://discuss.elastic.co/t/sql-join-in-elasticsearch-yes-you-can/38632 "2016-01-07T20:26:36Z")

</div>

My colleagues put this tool together as part of a hackathon, and after cleaning it up our company has graciously allowed us to make it open source. Announcing "PostgreSQL foreign data wrapper for Elasticsearch" available…

---

## [Elasticsearch 8 Java Client ResponseException status line \[HTTP/1.1 404 Not Found\] {"statusCode":404,"error":"Not Found","message":"Not Found"}](https://discuss.elastic.co/t/elasticsearch-8-java-client-responseexception-status-line-http-1-1-404-not-found-statuscode-404-error-not-found-message-not-found/316019)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 3\
**Last updated:** [October 7, 2022, 2:44pm UTC](https://discuss.elastic.co/t/elasticsearch-8-java-client-responseexception-status-line-http-1-1-404-not-found-statuscode-404-error-not-found-message-not-found/316019 "2022-10-07T14:44:11Z")

</div>

Hello, this is Michael from germany and i am reaching out to you because i have to finish my master thesis before 31.10.2022. I had working code in july 2022 which i didn't touch since then. I used the online 2 weeks t…

---

## [Kubernetes, Filebeat, and Kafka connection issues](https://discuss.elastic.co/t/kubernetes-filebeat-and-kafka-connection-issues/150751)

<div class="topic-metadata">

**Author:** [@grant.moz](https://discuss.elastic.co/u/grant.moz)\
**Replies:** 5\
**Last updated:** [October 12, 2018, 11:55pm UTC](https://discuss.elastic.co/t/kubernetes-filebeat-and-kafka-connection-issues/150751 "2018-10-12T23:55:14Z")

</div>

I am working on getting logs out of Kubernetes using the "stable/filebeat" Helm chart. Everything is running on Ubuntu 16.04 servers. There seems to be a change between two versions of the filebeat-oss Docker container …

---

## [Deletion of logstash-\* index pattern and re-creation](https://discuss.elastic.co/t/deletion-of-logstash-index-pattern-and-re-creation/109780)

<div class="topic-metadata">

**Author:** [@Paul\_Cadd](https://discuss.elastic.co/u/Paul_Cadd)\
**Replies:** 5\
**Last updated:** [December 5, 2017, 10:56pm UTC](https://discuss.elastic.co/t/deletion-of-logstash-index-pattern-and-re-creation/109780 "2017-12-05T22:56:57Z")

</div>

Hi first post here and new to the ELK stack, so bear with me please... maybe long..... We have 2 environments that have a three node cluster (prod) and a 2 node cluster (test) which are normally build via ansible. I've…

---

## [Representing URL data in kibana dashboard](https://discuss.elastic.co/t/representing-url-data-in-kibana-dashboard/101654)

<div class="topic-metadata">

**Author:** [@Sourav\_Choudhary](https://discuss.elastic.co/u/Sourav_Choudhary)\
**Replies:** 5\
**Last updated:** [October 5, 2017, 5:20am UTC](https://discuss.elastic.co/t/representing-url-data-in-kibana-dashboard/101654 "2017-10-05T05:20:02Z")

</div>

Hi, I am completely new to Kibana ,elasticsearch etc. I followed a tutorial and set up kibana , elastic search logtash etc. My requirement is as following : 1.I have some json data which loads when i open a url. I wa…

---

## [Search geo-point with polygon across dateline?](https://discuss.elastic.co/t/search-geo-point-with-polygon-across-dateline/39103)

<div class="topic-metadata">

**Author:** [@zhangdong92](https://discuss.elastic.co/u/zhangdong92)\
**Replies:** 4\
**Last updated:** [January 17, 2016, 6:17am UTC](https://discuss.elastic.co/t/search-geo-point-with-polygon-across-dateline/39103 "2016-01-17T06:17:56Z")

</div>

How to search geo-point with polygon across dateline(International Date Line,or 180 and -180 longitude) use java api? Hello Everyone: I use Elasticsearch 2.1 and its java api, I want to search documents with polygon ge…

[Previous page](https://discuss.elastic.co/top.md?page=549&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=551&per_page=50&period=all)
