# Top

**URL:** https://discuss.elastic.co/top.md?page=561&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 562

---

## [\[SOLVED\] Python's ES Module: Getting Connection Refused on Local VM but not the Servers](https://discuss.elastic.co/t/solved-pythons-es-module-getting-connection-refused-on-local-vm-but-not-the-servers/28869)

<div class="topic-metadata">

**Author:** [@zylo47](https://discuss.elastic.co/u/zylo47)\
**Replies:** 0\
**Last updated:** [September 8, 2015, 9:01pm UTC](https://discuss.elastic.co/t/solved-pythons-es-module-getting-connection-refused-on-local-vm-but-not-the-servers/28869 "2015-09-08T21:01:02Z")

</div>

I am using the Elasticsearch Python module to develop some code to create and restore snapshots. I have been doing most of the initial coding by connecting to the servers but I need to do the rest on a local VM. The s…

---

## [How to sends logs from remote machine to Logstash or Elastic Search](https://discuss.elastic.co/t/how-to-sends-logs-from-remote-machine-to-logstash-or-elastic-search/239791)

<div class="topic-metadata">

**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\
**Replies:** 5\
**Last updated:** [July 6, 2020, 7:23am UTC](https://discuss.elastic.co/t/how-to-sends-logs-from-remote-machine-to-logstash-or-elastic-search/239791 "2020-07-06T07:23:13Z")

</div>

Hi There, I have installed Elasticsearch, Logstash, and Kibana (Elastic Stack) on Ubuntu 18.04 as suggested in the below article and everything configured correctly.. But I have installed metric beat on the remote wi…

---

## [Unable to create index in Elasticsearch 7.5.0](https://discuss.elastic.co/t/unable-to-create-index-in-elasticsearch-7-5-0/212592)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 5\
**Last updated:** [December 22, 2019, 11:36pm UTC](https://discuss.elastic.co/t/unable-to-create-index-in-elasticsearch-7-5-0/212592 "2019-12-22T23:36:46Z")

</div>

This is related to the issue I raised before. While investigating I found that I am having issues in creating a simple index also. And it seems that the install is messed up in some way. The local install does not creat…

---

## [Got response code '403' contacting Elasticsearch at URL 'http://localhost:9200/](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200/308067)

<div class="topic-metadata">

**Author:** [@paulohperes](https://discuss.elastic.co/u/paulohperes)\
**Replies:** 2\
**Last updated:** [June 27, 2022, 4:04am UTC](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200/308067 "2022-06-27T04:04:38Z")

</div>

Hi, My pipeline not working with ouput elasticsearch, I created user and role like this: root@logserver:/home/g0004830# curl -k -u admin:my\_password -XGET "http://localhost:9200/\_security/user/syslog?pretty" { "sysl…

---

## [Message size added as Attribute](https://discuss.elastic.co/t/message-size-added-as-attribute/89922)

<div class="topic-metadata">

**Author:** [@raisinpit](https://discuss.elastic.co/u/raisinpit)\
**Replies:** 2\
**Last updated:** [June 19, 2017, 12:20pm UTC](https://discuss.elastic.co/t/message-size-added-as-attribute/89922 "2017-06-19T12:20:52Z")

</div>

Hi, I want to add the size in Bytes of a message to as an attribute of that message, is this possible? I have seen a some try this before with the ruby plugin, but I have been unable to get this to work. Thanks in ad…

---

## [Kibana Alert for Pod frequently bounded](https://discuss.elastic.co/t/kibana-alert-for-pod-frequently-bounded/243940)

<div class="topic-metadata">

**Author:** [@jinkim59](https://discuss.elastic.co/u/jinkim59)\
**Replies:** 5\
**Last updated:** [August 24, 2020, 3:20pm UTC](https://discuss.elastic.co/t/kibana-alert-for-pod-frequently-bounded/243940 "2020-08-24T15:20:17Z")

</div>

I noticed some of pods are getting goes down and new one is created. What is the most suitable way to detect and set an alert for any K8s deployment that one or more of pods get frequently go down and new one created. …

---

## [How to do a self-join type of query](https://discuss.elastic.co/t/how-to-do-a-self-join-type-of-query/164391)

<div class="topic-metadata">

**Author:** [@tchung](https://discuss.elastic.co/u/tchung)\
**Replies:** 4\
**Last updated:** [January 17, 2019, 6:56pm UTC](https://discuss.elastic.co/t/how-to-do-a-self-join-type-of-query/164391 "2019-01-17T18:56:31Z")

</div>

This is kinda a followup question to this. I'm now indexing individual events and each event has a user field. Say I have these three docs: { "user":"abc", "event":"foo" } { "user":"abc", "event":"bar" } { "user":"d…

---

## [No log4j2 configuration file found: logging only errors to the console](https://discuss.elastic.co/t/no-log4j2-configuration-file-found-logging-only-errors-to-the-console/101295)

<div class="topic-metadata">

**Author:** [@karan\_singh](https://discuss.elastic.co/u/karan_singh)\
**Replies:** 4\
**Last updated:** [September 25, 2017, 6:16am UTC](https://discuss.elastic.co/t/no-log4j2-configuration-file-found-logging-only-errors-to-the-console/101295 "2017-09-25T06:16:03Z")

</div>

Elasticsearch and kibana are running perfectly fine but whenver i try to run my logstash configuration file it throws me the following error: C:\\Users\\Dell -\\Desktop\\ELK\\logstash-5.5.2\\bin\>logstash -f logstash-simple.co…

---

## [Authentication is not working after it got enabled](https://discuss.elastic.co/t/authentication-is-not-working-after-it-got-enabled/257611)

<div class="topic-metadata">

**Author:** [@luok0](https://discuss.elastic.co/u/luok0)\
**Replies:** 7\
**Last updated:** [December 10, 2020, 9:53am UTC](https://discuss.elastic.co/t/authentication-is-not-working-after-it-got-enabled/257611 "2020-12-10T09:53:48Z")

</div>

I enabled the authentication in elasticsearch.yml as below: # http.enabled: false xpack.security.enabled: true It worked well with below: curl -u elastic:xxoo 'http://localhost:9200/?pretty' { "name" : "kkj6-5Y", …

---

## [Debugging Kibana plugin server-side](https://discuss.elastic.co/t/debugging-kibana-plugin-server-side/100895)

<div class="topic-metadata">

**Author:** [@sivasamyk](https://discuss.elastic.co/u/sivasamyk)\
**Replies:** 3\
**Last updated:** [September 21, 2017, 4:01pm UTC](https://discuss.elastic.co/t/debugging-kibana-plugin-server-side/100895 "2017-09-21T16:01:48Z")

</div>

Added NODE\_OPTIONS="--debug-brk --inspect' and started kibana using npm start from my plugin source dir. After launching chrome://inspect, I can see Kibana server code listed in sources but not my plugin source code. Ho…

---

## [Why Kibana shoes incomplete message field](https://discuss.elastic.co/t/why-kibana-shoes-incomplete-message-field/96519)

<div class="topic-metadata">

**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\
**Replies:** 5\
**Last updated:** [August 11, 2017, 1:30am UTC](https://discuss.elastic.co/t/why-kibana-shoes-incomplete-message-field/96519 "2017-08-11T01:30:35Z")

</div>

I am not sure why Kibana shoes incomplete message field when logstash shoes full message on the termincal at STDOUT? Any setting i need to change ?

---

## [How to start over - Help](https://discuss.elastic.co/t/how-to-start-over-help/40021)

<div class="topic-metadata">

**Author:** [@MrMSilvey](https://discuss.elastic.co/u/MrMSilvey)\
**Replies:** 5\
**Last updated:** [January 26, 2016, 10:18am UTC](https://discuss.elastic.co/t/how-to-start-over-help/40021 "2016-01-26T10:18:09Z")

</div>

I need help I am still a beginner, and I did the following: I am trying to load a large amount of data for comparison test. I have created a simple PHP program to read MySQL data and load it into ES. I have created an …

---

## [Logstash is throwing errors](https://discuss.elastic.co/t/logstash-is-throwing-errors/100155)

<div class="topic-metadata">

**Author:** [@Narasimha\_Gajje](https://discuss.elastic.co/u/Narasimha_Gajje)\
**Replies:** 6\
**Last updated:** [September 12, 2017, 6:02pm UTC](https://discuss.elastic.co/t/logstash-is-throwing-errors/100155 "2017-09-12T18:02:51Z")

</div>

Hi Team, I have downloaded LogStash and configured to push logs to ElasticSearch. When I start the LogStash with command logstash -f ../conf/logstash.yml but getting below error. Even I tried to start Logstash with co…

---

## [Required Object but found string](https://discuss.elastic.co/t/required-object-but-found-string/183543)

<div class="topic-metadata">

**Author:** [@KWBrandenWagner](https://discuss.elastic.co/u/KWBrandenWagner)\
**Replies:** 2\
**Last updated:** [May 30, 2019, 3:56pm UTC](https://discuss.elastic.co/t/required-object-but-found-string/183543 "2019-05-30T15:56:37Z")

</div>

I know this has to be something simple, but im staring at it and cant figure it out, so im posting here for some extra eyes to tell me what i did wrong. ERROR Exiting: Error while initializing input: required 'object',…

---

## [¿Cómo calcular un ratio desde 2 campos?](https://discuss.elastic.co/t/como-calcular-un-ratio-desde-2-campos/54906)

<div class="topic-metadata">

**Author:** [@Carlos\_Gutierrez](https://discuss.elastic.co/u/Carlos_Gutierrez)\
**Replies:** 2\
**Last updated:** [July 29, 2016, 7:49pm UTC](https://discuss.elastic.co/t/como-calcular-un-ratio-desde-2-campos/54906 "2016-07-29T19:49:05Z")

</div>

Hola a todos y encantado de conocer y participar en este foro :stuck\_out\_tongue\_winking\_eye: Soy nuevo en ELK y estamos haciendo una prueba de concepto en la que tenemos ventas, objetivos, stocks, etc. Lo que necesito …

---

## [Advice on Index and Cluster Structure?](https://discuss.elastic.co/t/advice-on-index-and-cluster-structure/56791)

<div class="topic-metadata">

**Author:** [@peter\_rietzler](https://discuss.elastic.co/u/peter_rietzler)\
**Replies:** 3\
**Last updated:** [July 30, 2016, 5:13pm UTC](https://discuss.elastic.co/t/advice-on-index-and-cluster-structure/56791 "2016-07-30T17:13:53Z")

</div>

Hi. I'm pretty new to Elasticsearch and I'm wondering if anyone could give me an advice on the following two use cases. Use Case 1: Storing catalog data I've got a few thousand product catalogs, each of them containi…

---

## [Index not taken - Timelion](https://discuss.elastic.co/t/index-not-taken-timelion/80849)

<div class="topic-metadata">

**Author:** [@pavithrakc](https://discuss.elastic.co/u/pavithrakc)\
**Replies:** 7\
**Last updated:** [April 12, 2017, 6:54pm UTC](https://discuss.elastic.co/t/index-not-taken-timelion/80849 "2017-04-12T18:54:23Z")

</div>

Hello All, I have ingested some data inside elastic search and trying to visualize using Kibana Timelion. .es(index="fx\_twofour\_outbound",q='\*') But it is not reflecting any output in my graph. I crossed verified…

---

## [Data Type Conversion for bytes](https://discuss.elastic.co/t/data-type-conversion-for-bytes/63061)

<div class="topic-metadata">

**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\
**Replies:** 5\
**Last updated:** [October 16, 2016, 9:00pm UTC](https://discuss.elastic.co/t/data-type-conversion-for-bytes/63061 "2016-10-16T21:00:39Z")

</div>

Hi, I am importing a csv file and need to convert the fields that contain numbers to float to compute them in Kibana. However the bytes fields that contain volume of data should in Kibana be recognized as such. How can I…

---

## [Processing solr logs using logstash](https://discuss.elastic.co/t/processing-solr-logs-using-logstash/36241)

<div class="topic-metadata">

**Author:** [@Maddy](https://discuss.elastic.co/u/Maddy)\
**Replies:** 5\
**Last updated:** [December 14, 2015, 8:24am UTC](https://discuss.elastic.co/t/processing-solr-logs-using-logstash/36241 "2015-12-14T08:24:22Z")

</div>

Hi, I am using solr which has multiple collections in it. Solr dumps the log of all collections into a single file(solr.log) and I want the logs of one particular collection. Here is a sample log structure, INFO…

---

## [Add IP-addresses and MAC-addresses to event](https://discuss.elastic.co/t/add-ip-addresses-and-mac-addresses-to-event/103465)

<div class="topic-metadata">

**Author:** [@hypp](https://discuss.elastic.co/u/hypp)\
**Replies:** 8\
**Last updated:** [October 19, 2017, 7:52am UTC](https://discuss.elastic.co/t/add-ip-addresses-and-mac-addresses-to-event/103465 "2017-10-19T07:52:36Z")

</div>

Hi, I would like to dynamically add all IP-addresses and all MAC-addresses of the sender host to each event sent by filebeat. Is there a way to do that? If not, I would be happy to contribute a new processor, similar to…

---

## [How to specify authorization in python client?](https://discuss.elastic.co/t/how-to-specify-authorization-in-python-client/181123)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 3\
**Last updated:** [May 16, 2019, 5:35am UTC](https://discuss.elastic.co/t/how-to-specify-authorization-in-python-client/181123 "2019-05-16T05:35:57Z")

</div>

Hi, I am looking for a way to specify the authorization token in python requests for elasticsearch. For example, es=Elasticsearch(\['http://localhost:8080'\],http\_auth=('user', 'pass')) in above example just like you sp…

---

## [Count the latest records in Kibana visualization?](https://discuss.elastic.co/t/count-the-latest-records-in-kibana-visualization/320669)

<div class="topic-metadata">

**Author:** [@Maruthappan\_Muthu](https://discuss.elastic.co/u/Maruthappan_Muthu)\
**Replies:** 6\
**Last updated:** [December 7, 2022, 6:28pm UTC](https://discuss.elastic.co/t/count-the-latest-records-in-kibana-visualization/320669 "2022-12-07T18:28:04Z")

</div>

I have document like as below Every two minutes once the "status" field records will get change and I want to count only the recent status records in Kibana visualization. Ex., The total count of status value 1 is 3 & …

---

## [Average metric values round off](https://discuss.elastic.co/t/average-metric-values-round-off/47440)

<div class="topic-metadata">

**Author:** [@Praveen\_Shilavantar](https://discuss.elastic.co/u/Praveen_Shilavantar)\
**Replies:** 2\
**Last updated:** [April 15, 2016, 5:05pm UTC](https://discuss.elastic.co/t/average-metric-values-round-off/47440 "2016-04-15T17:05:59Z")

</div>

Is there a way to round off "Average TotalUsers" value?

---

## [Is case-insensitive sort on keyword aggregation possible ? (ES 6.4)](https://discuss.elastic.co/t/is-case-insensitive-sort-on-keyword-aggregation-possible-es-6-4/153003)

<div class="topic-metadata">

**Author:** [@mmaury](https://discuss.elastic.co/u/mmaury)\
**Replies:** 5\
**Last updated:** [October 19, 2018, 9:04am UTC](https://discuss.elastic.co/t/is-case-insensitive-sort-on-keyword-aggregation-possible-es-6-4/153003 "2018-10-19T09:04:28Z")

</div>

Hi all ! I want to set up a case-insensitive sort order in an aggregation, made from a keyword field. Apparently, it wasn't possible with ES 5.2 (see Keyword type: aggregation case insensitive). I tried to deal with i…

---

## [Out Elastic Search got crashed and seeing Exception QueryParsingException is having no \_parent field configured](https://discuss.elastic.co/t/out-elastic-search-got-crashed-and-seeing-exception-queryparsingexception-is-having-no--parent-field-configured/88925)

<div class="topic-metadata">

**Author:** [@sbalusu](https://discuss.elastic.co/u/sbalusu)\
**Replies:** 7\
**Last updated:** [June 12, 2017, 7:34am UTC](https://discuss.elastic.co/t/out-elastic-search-got-crashed-and-seeing-exception-queryparsingexception-is-having-no--parent-field-configured/88925 "2017-06-12T07:34:55Z")

</div>

Intiialially we were seeing this issue of OutOfMemory \[2017-05-31 09:59:55,166\]\[WARN \]\[cluster.action.shard \] \[lsprap001\] \[ise\]\[3\] received shard failed for \[ise\]\[3\], node\[k9q640DcTemqjl2d05RwSw\], \[P\], v\[277762\], s…

---

## [Kibana Dashboard Error -- Set fielddata=true on fieldname](https://discuss.elastic.co/t/kibana-dashboard-error-set-fielddata-true-on-fieldname/76775)

<div class="topic-metadata">

**Author:** [@taurs](https://discuss.elastic.co/u/taurs)\
**Replies:** 4\
**Last updated:** [March 3, 2017, 9:26am UTC](https://discuss.elastic.co/t/kibana-dashboard-error-set-fielddata-true-on-fieldname/76775 "2017-03-03T09:26:39Z")

</div>

I am getting docker performance data using metricbeat and I am trying to produce Dashboards out of Docker Performance Data. Errors I am getting In Kibana Dashboard: Visualize: Fielddata is disabled on text fields by…

---

## [Filebeat выдает ошибки при попытке отправить логи на Logstash](https://discuss.elastic.co/t/filebeat-logstash/86498)

<div class="topic-metadata">

**Author:** [@Bob04](https://discuss.elastic.co/u/Bob04)\
**Replies:** 8\
**Last updated:** [May 24, 2017, 1:28am UTC](https://discuss.elastic.co/t/filebeat-logstash/86498 "2017-05-24T01:28:54Z")

</div>

Кто-нибудь сталкивался с похожей проблемой: Filebeat выдает ошибки при попытке отправить логи на Logstash: 2017-05-19T18:14:25-05:00 INFO Non-zero metrics in the last 30s: libbeat.logstash.publish.read\_bytes=140 libb…

---

## [Go Agent - Survey](https://discuss.elastic.co/t/go-agent-survey/124887)

<div class="topic-metadata">

**Author:** [@axw](https://discuss.elastic.co/u/axw)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 1:57am UTC](https://discuss.elastic.co/t/go-agent-survey/124887 "2018-03-21T01:57:24Z")

</div>

Hi folks, We've recently started working on support for Go applications: https://github.com/elastic/apm-agent-go. Although the Go support is fully functional, it's still very early in development -- we're calling it "p…

---

## [Can I use CSS or change colours/fonts of text displayed in VISUALIZATION other than Canvas?](https://discuss.elastic.co/t/can-i-use-css-or-change-colours-fonts-of-text-displayed-in-visualization-other-than-canvas/194122)

<div class="topic-metadata">

**Author:** [@jrplus](https://discuss.elastic.co/u/jrplus)\
**Replies:** 2\
**Last updated:** [August 8, 2019, 12:24pm UTC](https://discuss.elastic.co/t/can-i-use-css-or-change-colours-fonts-of-text-displayed-in-visualization-other-than-canvas/194122 "2019-08-08T12:24:46Z")

</div>

would like to ask if there is any way to change colours and fonts of text in kibana's Visualization instead of Canvas?

---

## [Error parsing csv - NoMethodError](https://discuss.elastic.co/t/error-parsing-csv-nomethoderror/98226)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 2\
**Last updated:** [September 7, 2017, 8:35am UTC](https://discuss.elastic.co/t/error-parsing-csv-nomethoderror/98226 "2017-09-07T08:35:05Z")

</div>

Hello, I have lots of following message in logstash’s logs : \[WARN \]\[logstash.filters.csv \] Error parsing csv {:field=\>"message", :source=\>"", :exception=\>#\<NoMethodError: undefined method \`each\_index' for nil:NilC…

---

## [Kibana missing time-field name option](https://discuss.elastic.co/t/kibana-missing-time-field-name-option/42968)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 8\
**Last updated:** [February 29, 2016, 8:26am UTC](https://discuss.elastic.co/t/kibana-missing-time-field-name-option/42968 "2016-02-29T08:26:42Z")

</div>

So i set up Kibana on my windows machine and I don't see the Time-field name option. is it not suppose to be there on the newest version? FYI: I installed Elasticsearch, logstash and kibana on windows

---

## [How to configure logstash to read only new entries from database but not using "sql\_last\_start"](https://discuss.elastic.co/t/how-to-configure-logstash-to-read-only-new-entries-from-database-but-not-using-sql-last-start/29140)

<div class="topic-metadata">

**Author:** [@IgorG](https://discuss.elastic.co/u/IgorG)\
**Replies:** 3\
**Last updated:** [August 3, 2016, 8:23pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-to-read-only-new-entries-from-database-but-not-using-sql-last-start/29140 "2016-08-03T20:23:55Z")

</div>

Is it possible to query database like: "SELECT \* FROM TABLE\_NAME where id \> : last\_saved\_id" and not by using built-in parameter "sql\_last\_start" e.g. "SELECT \* FROM TABLE\_NAME where timestamp \> : sql\_last\_start". I don'…

---

## [MasterNotDiscoveredException for all queries](https://discuss.elastic.co/t/masternotdiscoveredexception-for-all-queries/38360)

<div class="topic-metadata">

**Author:** [@AndreKR](https://discuss.elastic.co/u/AndreKR)\
**Replies:** 3\
**Last updated:** [January 8, 2016, 4:58am UTC](https://discuss.elastic.co/t/masternotdiscoveredexception-for-all-queries/38360 "2016-01-08T04:58:45Z")

</div>

I am running ELasticsearch 2.1.0 on Windows. I have one node and I have configured discovery.zen.minimum\_master\_nodes: 2. I haven't configured discovery.zen.no\_master\_block at all, so it should have its default write. E…

---

## [Why I am getting this error when using JDBC input plugin of Logstash](https://discuss.elastic.co/t/why-i-am-getting-this-error-when-using-jdbc-input-plugin-of-logstash/237988)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 7\
**Last updated:** [June 22, 2020, 1:42pm UTC](https://discuss.elastic.co/t/why-i-am-getting-this-error-when-using-jdbc-input-plugin-of-logstash/237988 "2020-06-22T13:42:01Z")

</div>

Here is the query I had put in the logstash conf file: select a.ID, a.TransactionID, b.Result from MyDB.Result a inner join MyDB.ResultData b on a.ID=b.ID where a.ID \< :sql\_last\_value and a.CreatedOn \> '2020-01-01' o…

---

## [Datastream gets no data](https://discuss.elastic.co/t/datastream-gets-no-data/250516)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 2\
**Last updated:** [September 30, 2020, 2:22pm UTC](https://discuss.elastic.co/t/datastream-gets-no-data/250516 "2020-09-30T14:22:18Z")

</div>

Hi, Being new to the datastream subject, I tried setting up a datastream using the documentation here: https://www.elastic.co/guide/en/elasticsearch/reference/current/set-up-a-data-stream.html and index towards it. …

---

## [Magento 2 + Elasticsearch indexing error](https://discuss.elastic.co/t/magento-2-elasticsearch-indexing-error/355466)

<div class="topic-metadata">

**Author:** [@alexglvr](https://discuss.elastic.co/u/alexglvr)\
**Replies:** 6\
**Last updated:** [March 17, 2024, 12:31pm UTC](https://discuss.elastic.co/t/magento-2-elasticsearch-indexing-error/355466 "2024-03-17T12:31:33Z")

</div>

Hello, My Magento 2 website (2.4.6) was working with Elasticsearch until I installed a payment module from Adobe and its dependencies: I now have an error while indexing : Catalog Search index process error during in…

---

## [Logstash not receiving beats input](https://discuss.elastic.co/t/logstash-not-receiving-beats-input/138652)

<div class="topic-metadata">

**Author:** [@bobbytan](https://discuss.elastic.co/u/bobbytan)\
**Replies:** 6\
**Last updated:** [July 12, 2018, 9:15am UTC](https://discuss.elastic.co/t/logstash-not-receiving-beats-input/138652 "2018-07-12T09:15:44Z")

</div>

Hello, i have no issues importing data from beats to elasticsearch, however after changing output to logstash in the beats config, logstash do not import data to elasticsearch. No stdout is printed in the shell running …

---

## [Unable to delete snapshot - no space left on device - Solved?](https://discuss.elastic.co/t/unable-to-delete-snapshot-no-space-left-on-device-solved/261675)

<div class="topic-metadata">

**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 7:50pm UTC](https://discuss.elastic.co/t/unable-to-delete-snapshot-no-space-left-on-device-solved/261675 "2021-01-20T19:50:14Z")

</div>

Hi all, Using 7.10.2 Basic licence After let my snapshot file system run out of space (100% full), I face the error were no more daily snapshots could run. This file system has nothing but snapshots, so I couldn't del…

---

## [Multipolygon support for elastic search](https://discuss.elastic.co/t/multipolygon-support-for-elastic-search/223042)

<div class="topic-metadata">

**Author:** [@tamil5ag](https://discuss.elastic.co/u/tamil5ag)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 12:31pm UTC](https://discuss.elastic.co/t/multipolygon-support-for-elastic-search/223042 "2020-03-12T12:31:00Z")

</div>

Hi, Elastic search support multipolygon query? If yes, how to form a query to get coordinates under different polygon(An array of separate polygons - multipolygon). And also which type need to define to create schema i…

---

## [Cannot list snapshots in S3 repository (previously working fine)](https://discuss.elastic.co/t/cannot-list-snapshots-in-s3-repository-previously-working-fine/104249)

<div class="topic-metadata">

**Author:** [@joelittlejohn](https://discuss.elastic.co/u/joelittlejohn)\
**Replies:** 4\
**Last updated:** [October 19, 2017, 8:35am UTC](https://discuss.elastic.co/t/cannot-list-snapshots-in-s3-repository-previously-working-fine/104249 "2017-10-19T08:35:11Z")

</div>

Hi I've been using the repository-s3 plugin with Elasticsearch 5.3.3 happily for months. A couple of days ago, our regular snapshot restore process started failing. It shows a timeout attempting to read the list of snap…

---

## [Query from json to java api](https://discuss.elastic.co/t/query-from-json-to-java-api/91517)

<div class="topic-metadata">

**Author:** [@Chris\_Dimitriou](https://discuss.elastic.co/u/Chris_Dimitriou)\
**Replies:** 4\
**Last updated:** [July 1, 2017, 8:46pm UTC](https://discuss.elastic.co/t/query-from-json-to-java-api/91517 "2017-07-01T20:46:36Z")

</div>

Hello everyone, i am new to elastic and i am currently trying to make my java api return SearchResponse from a query but i get an exception whose message doesn't print anything so i can't understand what is going on.…

---

## [Capture\_body is ignored](https://discuss.elastic.co/t/capture-body-is-ignored/140757)

<div class="topic-metadata">

**Author:** [@chris\_krosk](https://discuss.elastic.co/u/chris_krosk)\
**Replies:** 5\
**Last updated:** [July 24, 2018, 6:55am UTC](https://discuss.elastic.co/t/capture-body-is-ignored/140757 "2018-07-24T06:55:46Z")

</div>

Hello Elastic Team, I testing javaAgent and I trying to log "context.request.body" in APM. Withe these configuration : elastic.apm.capture\_body=transactions or elastic.apm.capture\_body=all The context.request.body…

---

## [Elasticsearch.yml automatically reloaded?](https://discuss.elastic.co/t/elasticsearch-yml-automatically-reloaded/97313)

<div class="topic-metadata">

**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\
**Replies:** 5\
**Last updated:** [August 18, 2017, 12:25am UTC](https://discuss.elastic.co/t/elasticsearch-yml-automatically-reloaded/97313 "2017-08-18T00:25:58Z")

</div>

Are changes done in elasticsearch.yml automatically applied to the respective node (in other words: Is elasticsearch.yml watched by the elasticsearch process and reloaded upon change?) Wondering if i can change network,…

---

## [Gsub replace based on pattern](https://discuss.elastic.co/t/gsub-replace-based-on-pattern/256352)

<div class="topic-metadata">

**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\
**Replies:** 7\
**Last updated:** [November 24, 2020, 7:53am UTC](https://discuss.elastic.co/t/gsub-replace-based-on-pattern/256352 "2020-11-24T07:53:59Z")

</div>

i have log in below format , i need to replace ":" from 17:18:12 to 17-18-12 ...as this colon is also present at other places in line , how to match this mutate { gsub =\> \[ "message", "\\d\\d:\\d\\d:\\d\\d", "\\d\\d-\\d\\d-\\d\\d" …

---

## [Elasticsearch with large amount of data](https://discuss.elastic.co/t/elasticsearch-with-large-amount-of-data/22648)

<div class="topic-metadata">

**Author:** [@Jeferson\_Martins](https://discuss.elastic.co/u/Jeferson_Martins)\
**Replies:** 1\
**Last updated:** [March 13, 2015, 12:35am UTC](https://discuss.elastic.co/t/elasticsearch-with-large-amount-of-data/22648 "2015-03-13T00:35:21Z")

</div>

Hi, I have 5 nodes of ElasticSearch with 4 CPUs, 8 Mbs of RAM. My Index today have 1TB of data and my index have about 100GBs By day and i configure 3 primary shards and 1 replica but my elasticsearch gets OutO…

---

## [What is the best practice for periodic snapshotting with awc-cloud+s3](https://discuss.elastic.co/t/what-is-the-best-practice-for-periodic-snapshotting-with-awc-cloud-s3/20630)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 7\
**Last updated:** [December 3, 2014, 12:27pm UTC](https://discuss.elastic.co/t/what-is-the-best-practice-for-periodic-snapshotting-with-awc-cloud-s3/20630 "2014-12-03T12:27:22Z")

</div>

I want to backup the data every 15-30 min. I will be storing the snapshots in S3. DELETE old and then PUT new snapshot many not be the best practice as you may end up with nothing if something goes wrong. Usin…

---

## ["Result window is too large" http response depends on the presence of the sort field](https://discuss.elastic.co/t/result-window-is-too-large-http-response-depends-on-the-presence-of-the-sort-field/284738)

<div class="topic-metadata">

**Author:** [@franck.valentin](https://discuss.elastic.co/u/franck.valentin)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 5:14pm UTC](https://discuss.elastic.co/t/result-window-is-too-large-http-response-depends-on-the-presence-of-the-sort-field/284738 "2021-09-21T17:14:04Z")

</div>

Hi, I'm facing a strange behaviour on Elasticsearch 7.7 when I perform a search on several indexes and the result window is too large. If the query is: GET /\_search { "size": 500, "from": 10000, "query": { "…

---

## [ElasticSearch fails to backup certain indices](https://discuss.elastic.co/t/elasticsearch-fails-to-backup-certain-indices/63295)

<div class="topic-metadata">

**Author:** [@covidium](https://discuss.elastic.co/u/covidium)\
**Replies:** 6\
**Last updated:** [October 25, 2016, 9:12am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-backup-certain-indices/63295 "2016-10-25T09:12:00Z")

</div>

Hi there, Before posting this message, I've searched the forum but didn't find anything relevant for the issue I've encountered. But if anyone thinks that the forum has a similar post, please point me to that post, othe…

---

## [How to find which shard got corrupt](https://discuss.elastic.co/t/how-to-find-which-shard-got-corrupt/13387)

<div class="topic-metadata">

**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\
**Replies:** 4\
**Last updated:** [August 31, 2013, 7:32pm UTC](https://discuss.elastic.co/t/how-to-find-which-shard-got-corrupt/13387 "2013-08-31T19:32:06Z")

</div>

Hi Is there any way to find out which shard got corrupt. Using elasticsearch cluster state we can determine which shard is unassigned. But shards may be in unassigned state when any node is down or any shard got …

---

## [How to search by date using elasticsearch](https://discuss.elastic.co/t/how-to-search-by-date-using-elasticsearch/88440)

<div class="topic-metadata">

**Author:** [@nano](https://discuss.elastic.co/u/nano)\
**Replies:** 2\
**Last updated:** [June 6, 2017, 3:20pm UTC](https://discuss.elastic.co/t/how-to-search-by-date-using-elasticsearch/88440 "2017-06-06T15:20:59Z")

</div>

Hello, i have some data stored in elasticsearch and what i want is to make an URL fix to search only for past 30 minutes data for example i have a field named date "Date" : "2017-04-04T23:42:40.081Z" my goal is to retu…

[Previous page](https://discuss.elastic.co/top.md?page=560&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=562&per_page=50&period=all)
