# Top **URL:** https://discuss.elastic.co/top.md?page=574&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 575 --- ## [Searching for abbreviated German street names](https://discuss.elastic.co/t/searching-for-abbreviated-german-street-names/75348)
**Author:** [@singer](https://discuss.elastic.co/u/singer)\ **Replies:** 4\ **Last updated:** [February 17, 2017, 10:51am UTC](https://discuss.elastic.co/t/searching-for-abbreviated-german-street-names/75348 "2017-02-17T10:51:36Z")
I'm looking for an advice which query and/or analyzer settings to use for German street names in the form of "Johann-Sebastian-Bach-Straße" I'm currently using the standard analyzer and a "match\_phrase\_prefix" query. T… --- ## [Message field - How become a valid field?](https://discuss.elastic.co/t/message-field-how-become-a-valid-field/220274)
**Author:** [@Mauricio\_Borges](https://discuss.elastic.co/u/Mauricio_Borges)\ **Replies:** 3\ **Last updated:** [March 2, 2020, 11:40pm UTC](https://discuss.elastic.co/t/message-field-how-become-a-valid-field/220274 "2020-03-02T23:40:27Z")
Hi Team! We have a custom App and are trying define some Log Pattern based on some custom messages. At our Demo App where we type and submit any kind of test message, Filebeat outputs to ES and message appears at messag… --- ## [Filebeat connect kafka failed over ssl](https://discuss.elastic.co/t/filebeat-connect-kafka-failed-over-ssl/116664)
**Author:** [@kevin\_zheng](https://discuss.elastic.co/u/kevin_zheng)\ **Replies:** 3\ **Last updated:** [January 24, 2018, 9:50am UTC](https://discuss.elastic.co/t/filebeat-connect-kafka-failed-over-ssl/116664 "2018-01-24T09:50:28Z")
I have a working Filebeat 6.1.2-linux-x86\_64 and Kafka 0.10 setup. I am trying to set them up to use SSL(TLS) instead of PLAINTEXT. my filebeat.yml ... output.kafka: enabled: true hosts: \["kafkabroker:9092"\] topi… --- ## [Field value Calculation/conversions in Logstash filter plugin](https://discuss.elastic.co/t/field-value-calculation-conversions-in-logstash-filter-plugin/42147)
**Author:** [@Architha](https://discuss.elastic.co/u/Architha)\ **Replies:** 1\ **Last updated:** [February 19, 2016, 6:39am UTC](https://discuss.elastic.co/t/field-value-calculation-conversions-in-logstash-filter-plugin/42147 "2016-02-19T06:39:52Z")
Hi folks, Can we do calculations on the field values like "multiplication or division " Or something like converting the value to percentage in the logstash filter Or rounding of numerical values ? If yes, please let … --- ## [Error from server (InternalError): error when creating "STDIN": Internal error occurred: resource quota evaluates timeout](https://discuss.elastic.co/t/error-from-server-internalerror-error-when-creating-stdin-internal-error-occurred-resource-quota-evaluates-timeout/216539)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [February 14, 2020, 5:36am UTC](https://discuss.elastic.co/t/error-from-server-internalerror-error-when-creating-stdin-internal-error-occurred-resource-quota-evaluates-timeout/216539 "2020-02-14T05:36:14Z")
Hello World! I'm trying to follow Quickstart | Elastic Cloud on Kubernetes \[1.0\] | Elastic, yet running into following error: $ cat \<\ apiVersion: elasticsearch.k8s.elastic.co/v1 \> kind: Elast… --- ## [Fatal Error in thread Elasticsearch](https://discuss.elastic.co/t/fatal-error-in-thread-elasticsearch/214360)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 7\ **Last updated:** [January 10, 2020, 7:42am UTC](https://discuss.elastic.co/t/fatal-error-in-thread-elasticsearch/214360 "2020-01-10T07:42:13Z")
Hi Team, We have 7 node elasticsearch cluster we are facing sometimes facing the same issue in the following topic. Please find our cluster statistics please let us know are we doing something wrong with shard size o… --- ## [Netty4Utils fatal error on the network layer](https://discuss.elastic.co/t/netty4utils-fatal-error-on-the-network-layer/149574)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 1\ **Last updated:** [September 26, 2018, 12:52am UTC](https://discuss.elastic.co/t/netty4utils-fatal-error-on-the-network-layer/149574 "2018-09-26T00:52:58Z")
Hi, I am using Elastic Search 5.6.10 and Jdk 1.8.102, I was doing load testing this got failed and during Load testing(Only Search operation on Index) , below is logs. I read: Its mention to add: -Dio.netty.re… --- ## [Can't restore snapshot in Elasticsearch-2.3.3](https://discuss.elastic.co/t/cant-restore-snapshot-in-elasticsearch-2-3-3/54223)
**Author:** [@Suzuki\_Keita](https://discuss.elastic.co/u/Suzuki_Keita)\ **Replies:** 7\ **Last updated:** [June 30, 2016, 7:24am UTC](https://discuss.elastic.co/t/cant-restore-snapshot-in-elasticsearch-2-3-3/54223 "2016-06-30T07:24:41Z")
I want to upgrade to 2.3.3 from 1.5.1. So I got 1.5.1 snapshot and I want to restore the 1.5.1 snapshot in 2.3.3. By the way, 2.3.3 is newly built. However, the following error occurred. Because maybe snap-posts\_v3\_201… --- ## [Adding a New Protocol under Windows](https://discuss.elastic.co/t/adding-a-new-protocol-under-windows/37247)
**Author:** [@knobli](https://discuss.elastic.co/u/knobli)\ **Replies:** 7\ **Last updated:** [December 17, 2015, 9:29pm UTC](https://discuss.elastic.co/t/adding-a-new-protocol-under-windows/37247 "2015-12-17T21:29:42Z")
I'm trying to add a new protocol to packetbeat under Windows. I noticed that the "Developer Guide: Adding a New Protocol" is not up to date. I read that the git repository and the dependency management changed. I don't… --- ## [Possible causes of Process Cluster Event Timeout Exception](https://discuss.elastic.co/t/possible-causes-of-process-cluster-event-timeout-exception/1560)
**Author:** [@Prakhar\_Mishra](https://discuss.elastic.co/u/Prakhar_Mishra)\ **Replies:** 1\ **Last updated:** [August 12, 2015, 5:59pm UTC](https://discuss.elastic.co/t/possible-causes-of-process-cluster-event-timeout-exception/1560 "2015-08-12T17:59:59Z")
Hello All, We have faced a problem in our live environment, which caused index mapping process to fail. Let me tell you exactly when the exception was coming. We are using 2 node cluster (Elastic 1.4.1, 4 core, 8gb e… --- ## [Can I parse data with Elasticsearch?](https://discuss.elastic.co/t/can-i-parse-data-with-elasticsearch/182499)
**Author:** [@nicks1993](https://discuss.elastic.co/u/nicks1993)\ **Replies:** 4\ **Last updated:** [May 29, 2019, 9:24pm UTC](https://discuss.elastic.co/t/can-i-parse-data-with-elasticsearch/182499 "2019-05-29T21:24:52Z")
I am using the EFK stack at work. Mo one seems to know much about it. I struggled to get script fields working in kibana due to my field not being aggregatable I believe. I couldn't really figure out how to change the … --- ## [Versioning and out-of-order deletes](https://discuss.elastic.co/t/versioning-and-out-of-order-deletes/5386)
**Author:** [@Jan\_Fiedler](https://discuss.elastic.co/u/Jan_Fiedler)\ **Replies:** 8\ **Last updated:** [September 21, 2011, 9:42am UTC](https://discuss.elastic.co/t/versioning-and-out-of-order-deletes/5386 "2011-09-21T09:42:09Z")
\*Background\* I am using ES as a search backend for a DB based 'system of record'. The DB maintains revision numbers for documents (also deletes via a tombstone concept). Indexing is done asynchronously via a messa… --- ## [Roles in role\_mapping.yml not assigned to ad user](https://discuss.elastic.co/t/roles-in-role-mapping-yml-not-assigned-to-ad-user/85426)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [May 15, 2017, 1:29am UTC](https://discuss.elastic.co/t/roles-in-role-mapping-yml-not-assigned-to-ad-user/85426 "2017-05-15T01:29:45Z")
Hello, I'm trying to get Active Directory authentication working with X-Pack. In /etc/elasticsearch/x-pack/role\_mapping.yml I have defined a user and assigned it the monitoring\_user and kibana\_user roles: monitoring\_us… --- ## [Audit all users login to kibana](https://discuss.elastic.co/t/audit-all-users-login-to-kibana/261264)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 4\ **Last updated:** [January 18, 2021, 1:01pm UTC](https://discuss.elastic.co/t/audit-all-users-login-to-kibana/261264 "2021-01-18T13:01:39Z")
Hi All, We are planning to give Kibana access to other users. Now we need to monitor what all activities they are doing, who all logged in to Kibana and also if we can monitor whether same user id is getting user from … --- ## [Event.set and nested filed](https://discuss.elastic.co/t/event-set-and-nested-filed/249684)
**Author:** [@arp220](https://discuss.elastic.co/u/arp220)\ **Replies:** 4\ **Last updated:** [September 23, 2020, 6:47pm UTC](https://discuss.elastic.co/t/event-set-and-nested-filed/249684 "2020-09-23T18:47:24Z")
Hi. I have this config: input { file { path =\> "/opt/logs/sb\_log.json" sincedb\_path =\> "/etc/logstash/.sincedb\_sblog" start\_position =\> "beginning" } } filter{ json { source =\> "message" … --- ## [Cannot start elasticsearch from Docker](https://discuss.elastic.co/t/cannot-start-elasticsearch-from-docker/193853)
**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\ **Replies:** 4\ **Last updated:** [August 5, 2019, 6:12pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-from-docker/193853 "2019-08-05T18:12:27Z")
Hello, I want to install elasticsearch using Docker, this is in docker-compose.yml: version: '2' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:5.6.16 container\_name: elasticsear… --- ## [Metricbeat docker fail to start under not a root user](https://discuss.elastic.co/t/metricbeat-docker-fail-to-start-under-not-a-root-user/174022)
**Author:** [@scripnichenko](https://discuss.elastic.co/u/scripnichenko)\ **Replies:** 1\ **Last updated:** [March 27, 2019, 2:56pm UTC](https://discuss.elastic.co/t/metricbeat-docker-fail-to-start-under-not-a-root-user/174022 "2019-03-27T14:56:16Z")
Hi Team, Task is set-up Docker containers monitoring using Metricbeat container. I am following YAML file as mentioned in this article and trying to use my metricbeat.docker.yml but not able to use --user=root as I am … --- ## [Why does Logstash not clear DLQ after successful fixes?](https://discuss.elastic.co/t/why-does-logstash-not-clear-dlq-after-successful-fixes/113618)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 3\ **Last updated:** [December 29, 2017, 11:22pm UTC](https://discuss.elastic.co/t/why-does-logstash-not-clear-dlq-after-successful-fixes/113618 "2017-12-29T23:22:40Z")
I have a main pipeline that will sometimes send docs to its Dead Letter Queue. I have another fixes pipeline that fixes those issues. However, even though I can see that fixes is fixing and successfully processing the do… --- ## [Using ILM with NetFlow module](https://discuss.elastic.co/t/using-ilm-with-netflow-module/173969)
**Author:** [@Ryne\_Keel](https://discuss.elastic.co/u/Ryne_Keel)\ **Replies:** 6\ **Last updated:** [March 29, 2019, 3:53pm UTC](https://discuss.elastic.co/t/using-ilm-with-netflow-module/173969 "2019-03-29T15:53:25Z")
This is hard to explain, but index life cycle policies do not work with at least the logstash netflow module. The module, or elasticsearch create a new index each day. They use the index template to do so. To get it to … --- ## [SQL DISTINCT Pair of Values in Elasticsearch](https://discuss.elastic.co/t/sql-distinct-pair-of-values-in-elasticsearch/274583)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 9:59am UTC](https://discuss.elastic.co/t/sql-distinct-pair-of-values-in-elasticsearch/274583 "2021-06-03T09:59:49Z")
I want to ask how to use SQL DISTINCT Pair of Values in Elasticsearch . Like below, SELECT distinct username, city from country\_table I can run below query for just one field. In the aggs json, I can only see "username… --- ## [Filebeat multiple path and configs](https://discuss.elastic.co/t/filebeat-multiple-path-and-configs/219230)
**Author:** [@toms130](https://discuss.elastic.co/u/toms130)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 1:29pm UTC](https://discuss.elastic.co/t/filebeat-multiple-path-and-configs/219230 "2020-02-24T13:29:14Z")
Hi, I use filebeat for catching logs from kubernetes. Actual config is - type: container paths: - /var/log/containers/\*.log I want to use a multiline config for some of my logs (/var/log/containers/celery-\*.… --- ## [Limit concurrent Elasticsearch shard relocations](https://discuss.elastic.co/t/limit-concurrent-elasticsearch-shard-relocations/219810)
**Author:** [@rsyne](https://discuss.elastic.co/u/rsyne)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 2:24pm UTC](https://discuss.elastic.co/t/limit-concurrent-elasticsearch-shard-relocations/219810 "2020-02-19T14:24:05Z")
Hello. I'm running Elasticsearch 7.5.2 with Curator 5.8. The cluster consists of some SSD hot-data nodes and some HDD warm-data nodes. Curator is configured to daily move older indices from hot-data nodes to the cold on… --- ## [Td-agent logs stopped working](https://discuss.elastic.co/t/td-agent-logs-stopped-working/219907)
**Author:** [@krushnakantB](https://discuss.elastic.co/u/krushnakantB)\ **Replies:** 2\ **Last updated:** [February 20, 2020, 9:06am UTC](https://discuss.elastic.co/t/td-agent-logs-stopped-working/219907 "2020-02-20T09:06:36Z")
Hi All, Need a guideline for below mentioned issue. In our environment, we are using Elasticsearch to store web logs and we also use td-agent to pass data to elasticsearch. Elasticsearch version is 7.2.0, Kibana versio… --- ## [Send all routers, switches and access points logs to ELK server](https://discuss.elastic.co/t/send-all-routers-switches-and-access-points-logs-to-elk-server/238289)
**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 5:30pm UTC](https://discuss.elastic.co/t/send-all-routers-switches-and-access-points-logs-to-elk-server/238289 "2020-06-23T17:30:18Z")
Hi people, I have several routers, switches and acces points in my network and I want to send all their logs to a syslog service implemented in my ELK server. Is this possible to implement a syslog server listening on … --- ## [DANGLING\_INDEX\_IMPORTED: How to cleanup old deleted indices](https://discuss.elastic.co/t/dangling-index-imported-how-to-cleanup-old-deleted-indices/175526)
**Author:** [@christian\_ha](https://discuss.elastic.co/u/christian_ha)\ **Replies:** 3\ **Last updated:** [April 5, 2019, 7:36am UTC](https://discuss.elastic.co/t/dangling-index-imported-how-to-cleanup-old-deleted-indices/175526 "2019-04-05T07:36:56Z")
Hello together, right now we have a 7 Node Cluster with Version 6.3.0. One Node is only for kibana. Every other Node hast the following options in elasticsearch.yml: node.master: True node.data: True node.ingest: True … --- ## [Maven.elasticsearch.org is not available](https://discuss.elastic.co/t/maven-elasticsearch-org-is-not-available/121180)
**Author:** [@melonCoder](https://discuss.elastic.co/u/melonCoder)\ **Replies:** 6\ **Last updated:** [March 12, 2018, 10:23pm UTC](https://discuss.elastic.co/t/maven-elasticsearch-org-is-not-available/121180 "2018-03-12T22:23:29Z")
I tried to get shield for transport client, but found that maven.elasticsearch.org is available? Anyone have similar problem? --- ## [Convert Number into Time (HH:MM:SS)](https://discuss.elastic.co/t/convert-number-into-time-hhss/235494)
**Author:** [@Thibaut\_M](https://discuss.elastic.co/u/Thibaut_M)\ **Replies:** 3\ **Last updated:** [June 13, 2020, 2:46am UTC](https://discuss.elastic.co/t/convert-number-into-time-hhss/235494 "2020-06-13T02:46:35Z")
Hello, I'm refering to my previous post : https://discuss.elastic.co/t/convert-number-elapsed-time-into-time-hhss/218551/3 I have some issue that i don't understand with the scripted field from angelo response. This ti… --- ## [Data Tables are very slow, any tips what could help?](https://discuss.elastic.co/t/data-tables-are-very-slow-any-tips-what-could-help/160750)
**Author:** [@HenrikT](https://discuss.elastic.co/u/HenrikT)\ **Replies:** 8\ **Last updated:** [December 17, 2018, 2:52pm UTC](https://discuss.elastic.co/t/data-tables-are-very-slow-any-tips-what-could-help/160750 "2018-12-17T14:52:57Z")
Hello, Running on Kibana and elastic 6.4 I know this is very similar to Kibana visualization is too slow but I would like to ask what can be done, what kind of strategy one might have. We have several Tables in a sing… --- ## [Authentication to realm default\_file failed](https://discuss.elastic.co/t/authentication-to-realm-default-file-failed/205237)
**Author:** [@pabloborh](https://discuss.elastic.co/u/pabloborh)\ **Replies:** 4\ **Last updated:** [May 17, 2021, 10:29pm UTC](https://discuss.elastic.co/t/authentication-to-realm-default-file-failed/205237 "2021-05-17T22:29:13Z")
Hi! I have a elasticsearch cluster deployed with ECK. The pods are logging: level": "WARN", "component": "o.e.x.s.a.AuthenticationService", "cluster.name": "elasticsearch", "node.name": "elasticsearch-es-data-6ff4cgt49… --- ## [Failed to publish events caused by: read tcp filebeat:33330-\>logstash:5044: read: connection reset by peer](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-read-tcp-filebeat-33330-logstash-read-connection-reset-by-peer/252615)
**Author:** [@ShadwDrgn](https://discuss.elastic.co/u/ShadwDrgn)\ **Replies:** 4\ **Last updated:** [October 31, 2020, 1:28am UTC](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-read-tcp-filebeat-33330-logstash-read-connection-reset-by-peer/252615 "2020-10-31T01:28:05Z")
my filebeat constantly (1-3 times a second) can't seem to connect to logstash and do it's thing. I'm on the docker images for 7.9.2 Steps i've already taken: confirmed host is resolving. confirmed I can ping logstash … --- ## [Sync Google Cloud SQL to Elasticsearch](https://discuss.elastic.co/t/sync-google-cloud-sql-to-elasticsearch/55138)
**Author:** [@dilucca](https://discuss.elastic.co/u/dilucca)\ **Replies:** 4\ **Last updated:** [July 11, 2016, 12:50pm UTC](https://discuss.elastic.co/t/sync-google-cloud-sql-to-elasticsearch/55138 "2016-07-11T12:50:27Z")
Hi all! I'm planning build a backend on Google App Engine, using the Go lang. I would to use the Google Cloud SQL as my primary DB (a MySQL DB fully managed), and sync some tables to Elasticsearch to take advantages th… --- ## [What ports are used to communicate between Elasticsearch/Logstash/Kibana?](https://discuss.elastic.co/t/what-ports-are-used-to-communicate-between-elasticsearch-logstash-kibana/169703)
**Author:** [@wad11656](https://discuss.elastic.co/u/wad11656)\ **Replies:** 1\ **Last updated:** [February 24, 2019, 6:19am UTC](https://discuss.elastic.co/t/what-ports-are-used-to-communicate-between-elasticsearch-logstash-kibana/169703 "2019-02-24T06:19:49Z")
I'm trying to design a topology diagram indicating with IP:port of how each service is communicating with one another. How would I fix and complete this diagram? I'm sending logs through Logstash I'm using Nginx with… --- ## [Drop Event older than 24 hours](https://discuss.elastic.co/t/drop-event-older-than-24-hours/131569)
**Author:** [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Replies:** 7\ **Last updated:** [May 14, 2018, 7:48pm UTC](https://discuss.elastic.co/t/drop-event-older-than-24-hours/131569 "2018-05-14T19:48:38Z")
Hi All, I am using age filter to drop the event if time stamp is older than 24 hours, perhaps filter is not working properly because i am not able to see any output . Any help regarding this will be appriciated . plea… --- ## [How to get deleted dashboards and visualizations in kibana](https://discuss.elastic.co/t/how-to-get-deleted-dashboards-and-visualizations-in-kibana/130431)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 1\ **Last updated:** [May 3, 2018, 2:00pm UTC](https://discuss.elastic.co/t/how-to-get-deleted-dashboards-and-visualizations-in-kibana/130431 "2018-05-03T14:00:41Z")
hi there! is there anyway to get back deleted dashboards and visualizations in kibana? coz' someone deleted accidentally. my dashboards are gone :disappointed\_relieved: --- ## [How filter OpenLDAP Logs?](https://discuss.elastic.co/t/how-filter-openldap-logs/2492)
**Author:** [@gqs](https://discuss.elastic.co/u/gqs)\ **Replies:** 2\ **Last updated:** [June 12, 2015, 1:17pm UTC](https://discuss.elastic.co/t/how-filter-openldap-logs/2492 "2015-06-12T13:17:49Z")
Hi, Attempting to parse LDAP access logs (sample below): required to be able to find transactions by 'conn' (to relate the IP Address to a BIND) for example. Jun 11 09:53:08 ldapserver slapd\[19329\]: conn=1202229 fd=… --- ## [Error while indexing documents into ES using Fscrawler](https://discuss.elastic.co/t/error-while-indexing-documents-into-es-using-fscrawler/155999)
**Author:** [@Jasmeet](https://discuss.elastic.co/u/Jasmeet)\ **Replies:** 5\ **Last updated:** [November 11, 2018, 8:20pm UTC](https://discuss.elastic.co/t/error-while-indexing-documents-into-es-using-fscrawler/155999 "2018-11-11T20:20:03Z")
Hi, I am using Fscrawler to index a large set of documents kept in varous folders. I have created separate jobs for all the major folders and i run each job in Fscrawler. Some of the folders are quite large (\>180 Gb) and… --- ## [How can I migrate from elasticsearch to postgresql?](https://discuss.elastic.co/t/how-can-i-migrate-from-elasticsearch-to-postgresql/283041)
**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 2:15pm UTC](https://discuss.elastic.co/t/how-can-i-migrate-from-elasticsearch-to-postgresql/283041 "2021-09-08T14:15:01Z")
I have to migrate from elasticsearch to postgresql. What is the best way to do that? I found this plugin: Elasticsearch output plugin | Logstash Reference \[7.14\] | Elastic Is it useful for my purpose? Thanks … --- ## [Cannot use \[sort\] option in conjunction with \[rescore\]](https://discuss.elastic.co/t/cannot-use-sort-option-in-conjunction-with-rescore/115699)
**Author:** [@aslamy1](https://discuss.elastic.co/u/aslamy1)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 8:07am UTC](https://discuss.elastic.co/t/cannot-use-sort-option-in-conjunction-with-rescore/115699 "2018-01-17T08:07:49Z")
Hi ! I updated Elasticsearch 5.6.0 to 6.1.1. Now I get this exception: "reason": { "type": "query\_phase\_execution\_exception", "reason": "Cannot use \[sort\] option in conjunction with \[rescore\]." } In my query I use … --- ## [How can I Parse/Index PST file to elasticsearch?](https://discuss.elastic.co/t/how-can-i-parse-index-pst-file-to-elasticsearch/74689)
**Author:** [@FardinBehboudi](https://discuss.elastic.co/u/FardinBehboudi)\ **Replies:** 3\ **Last updated:** [February 13, 2017, 9:42am UTC](https://discuss.elastic.co/t/how-can-i-parse-index-pst-file-to-elasticsearch/74689 "2017-02-13T09:42:42Z")
I am able to parse json file in elasticsaerch. is there anyway to parse/index Microsoft outlooks PST files to Elasticsearch indexes?? thank you very much --- ## [Is there any APIs to fetch query history?](https://discuss.elastic.co/t/is-there-any-apis-to-fetch-query-history/220131)
**Author:** [@wendy](https://discuss.elastic.co/u/wendy)\ **Replies:** 4\ **Last updated:** [March 2, 2020, 1:08pm UTC](https://discuss.elastic.co/t/is-there-any-apis-to-fetch-query-history/220131 "2020-03-02T13:08:12Z")
Hi all, I'd like to access the query history of users by invoking API for analyzing the user behavior. Does Elastic Search provide such an API for fetching query history? Any comment is greatly appreciated. Best Reg… --- ## [Taking snapshot in Openshift elasticsearch](https://discuss.elastic.co/t/taking-snapshot-in-openshift-elasticsearch/159460)
**Author:** [@afwsl2003](https://discuss.elastic.co/u/afwsl2003)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 8:36am UTC](https://discuss.elastic.co/t/taking-snapshot-in-openshift-elasticsearch/159460 "2018-12-05T08:36:50Z")
Hi, I'm trying to create a repository to take snapshot (https://www.elastic.co/guide/en/elasticsearch/reference/2.4/modules-snapshots.html) When I execute the curl PUT command to create the repository I'm getting repos… --- ## [Crash when es-hadoop access multiple index with dataframe](https://discuss.elastic.co/t/crash-when-es-hadoop-access-multiple-index-with-dataframe/37452)
**Author:** [@jicaiyan](https://discuss.elastic.co/u/jicaiyan)\ **Replies:** 6\ **Last updated:** [December 22, 2015, 1:46am UTC](https://discuss.elastic.co/t/crash-when-es-hadoop-access-multiple-index-with-dataframe/37452 "2015-12-22T01:46:49Z")
I have created two index named "rtyan1" and "rtyan2",and each index has only one type named "rtyan" when i query data with sparksql dataframe, it crash because of OOM. environment: spark 1.5.1 elasticsearch-had… --- ## [How i can show percentage on gauge chart](https://discuss.elastic.co/t/how-i-can-show-percentage-on-gauge-chart/306090)
**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\ **Replies:** 8\ **Last updated:** [June 1, 2022, 10:27am UTC](https://discuss.elastic.co/t/how-i-can-show-percentage-on-gauge-chart/306090 "2022-06-01T10:27:46Z")
I have a column in data which contain 1000 row and values are 0 and 1 , how i can calculate percentage and show on gauge. for example 750 rows have 1 than percentage is 75 --- ## [Incremental or delta snapshot](https://discuss.elastic.co/t/incremental-or-delta-snapshot/31722)
**Author:** [@vinod\_rao](https://discuss.elastic.co/u/vinod_rao)\ **Replies:** 8\ **Last updated:** [February 4, 2016, 8:43pm UTC](https://discuss.elastic.co/t/incremental-or-delta-snapshot/31722 "2016-02-04T20:43:45Z")
Hi Team, How can we perform incremental/delta snapshots? --- ## [Converting time into @timestamp](https://discuss.elastic.co/t/converting-time-into-timestamp/32846)
**Author:** [@zappe](https://discuss.elastic.co/u/zappe)\ **Replies:** 8\ **Last updated:** [October 26, 2015, 9:10am UTC](https://discuss.elastic.co/t/converting-time-into-timestamp/32846 "2015-10-26T09:10:08Z")
I'm trying to get my time into @timestamp but are failing. Lines looks like this "20151012 08:57:43 ..." And I use the following config: grok { match =\> { "message" =\> "(?\\d{1,8}.\\d{1,2}\[:\]?\\d{1,2}\[:\]… --- ## [Incremental Snapshot in Elasticsearch](https://discuss.elastic.co/t/incremental-snapshot-in-elasticsearch/93874)
**Author:** [@Hemant\_Gupta](https://discuss.elastic.co/u/Hemant_Gupta)\ **Replies:** 3\ **Last updated:** [July 20, 2017, 11:56am UTC](https://discuss.elastic.co/t/incremental-snapshot-in-elasticsearch/93874 "2017-07-20T11:56:48Z")
Continuing the discussion from \[ES-1.4.2\] Snapshot FS Repository directory structure: Hi Elasticsearch Champs: I have managed to make a script for Elasticsearch snapshot and restore but I really wanted to override sa… --- ## [Option to send local server timezone using filebeat](https://discuss.elastic.co/t/option-to-send-local-server-timezone-using-filebeat/60081)
**Author:** [@Steve\_McDuff](https://discuss.elastic.co/u/Steve_McDuff)\ **Replies:** 3\ **Last updated:** [September 8, 2016, 11:44pm UTC](https://discuss.elastic.co/t/option-to-send-local-server-timezone-using-filebeat/60081 "2016-09-08T23:44:02Z")
Filebeat version : 5.0.0. Alpha 5. Logstash version : 2.3.2 OS : Red Hat 7.x I'm currently using filebeat to parse log files for an application that writes log entries using this format : \[2016-09-08 08:26:06.242\] ALL… --- ## [Synonyms and Fuzziness conflict](https://discuss.elastic.co/t/synonyms-and-fuzziness-conflict/90376)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 5\ **Last updated:** [July 17, 2017, 2:02pm UTC](https://discuss.elastic.co/t/synonyms-and-fuzziness-conflict/90376 "2017-07-17T14:02:09Z")
Hi, I have an analyzer which contains a synonym filter: analysis: { analyzer: { synonym\_brazilian\_analyzer: { tokenizer: "standard", filter: \[ … --- ## [Unit logstash.service entered failed state](https://discuss.elastic.co/t/unit-logstash-service-entered-failed-state/162804)
**Author:** [@arun5635](https://discuss.elastic.co/u/arun5635)\ **Replies:** 1\ **Last updated:** [January 3, 2019, 4:00pm UTC](https://discuss.elastic.co/t/unit-logstash-service-entered-failed-state/162804 "2019-01-03T16:00:11Z")
I am trying to start logstash via sudo service logstash start Redirecting to /bin/systemctl status logstash.service ● logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.service; disabled; vendo… --- ## [Elasticsearch code=exited, status=1/FAILURE](https://discuss.elastic.co/t/elasticsearch-code-exited-status-1-failure/336595)
**Author:** [@codepan](https://discuss.elastic.co/u/codepan)\ **Replies:** 4\ **Last updated:** [June 21, 2023, 2:23pm UTC](https://discuss.elastic.co/t/elasticsearch-code-exited-status-1-failure/336595 "2023-06-21T14:23:24Z")
Fiz a instalação do Elastic 8 no CentOs, mas o mesmo falha ao iniciar. systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/etc/systemd/system/elasticsearch.service; enabled; vendo… [Previous page](https://discuss.elastic.co/top.md?page=573&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=575&per_page=50&period=all)