# Top **URL:** https://discuss.elastic.co/top.md?page=595&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 596 --- ## [Curator cannot find existing Repository](https://discuss.elastic.co/t/curator-cannot-find-existing-repository/109833)
**Author:** [@ccampbell](https://discuss.elastic.co/u/ccampbell)\ **Replies:** 3\ **Last updated:** [December 1, 2017, 4:07pm UTC](https://discuss.elastic.co/t/curator-cannot-find-existing-repository/109833 "2017-12-01T16:07:57Z")
Trying to setup Curator to run automatic snapshots of old indices in my cluster, but I cannot get it to recognize an existing repository to start the snapshot process. On my test cluster, I have successfully created a r… --- ## [Do too many indexes (like .monitoring-kibana-6-2017.09.11 or .monitoring-es-6-2017.09.11) slow down the index and search?](https://discuss.elastic.co/t/do-too-many-indexes-like-monitoring-kibana-6-2017-09-11-or-monitoring-es-6-2017-09-11-slow-down-the-index-and-search/100181)
**Author:** [@shijiebei2009](https://discuss.elastic.co/u/shijiebei2009)\ **Replies:** 8\ **Last updated:** [September 12, 2017, 9:45am UTC](https://discuss.elastic.co/t/do-too-many-indexes-like-monitoring-kibana-6-2017-09-11-or-monitoring-es-6-2017-09-11-slow-down-the-index-and-search/100181 "2017-09-12T09:45:04Z")
these indexes are auto created by monitoring in x-pack. --- ## [How to filter between a particular id range](https://discuss.elastic.co/t/how-to-filter-between-a-particular-id-range/69875)
**Author:** [@haozy](https://discuss.elastic.co/u/haozy)\ **Replies:** 1\ **Last updated:** [December 23, 2016, 5:29pm UTC](https://discuss.elastic.co/t/how-to-filter-between-a-particular-id-range/69875 "2016-12-23T17:29:41Z")
Before Elasticsearch 5, we were able to filter { "query": { "bool": { "filter": \[ { "range" : { "\_uid" : { … --- ## [Install problem -- kibana-plugin appears to hang](https://discuss.elastic.co/t/install-problem-kibana-plugin-appears-to-hang/134355)
**Author:** [@tewok](https://discuss.elastic.co/u/tewok)\ **Replies:** 5\ **Last updated:** [June 27, 2018, 4:05pm UTC](https://discuss.elastic.co/t/install-problem-kibana-plugin-appears-to-hang/134355 "2018-06-27T16:05:19Z")
Installing: elasticsearch-6.2.4 kibana-6.2.4-linux-x86\_64 on Linux 7.4 running on VirtualBox, which is running on OSX 10.13.4 I've been trying to install elasticsearch and have been having problems. I've been through… --- ## [Any examples to use Elastic Search as Graph Database?](https://discuss.elastic.co/t/any-examples-to-use-elastic-search-as-graph-database/320997)
**Author:** [@Shraddha29](https://discuss.elastic.co/u/Shraddha29)\ **Replies:** 2\ **Last updated:** [December 12, 2022, 8:20am UTC](https://discuss.elastic.co/t/any-examples-to-use-elastic-search-as-graph-database/320997 "2022-12-12T08:20:25Z")
Any examples to use Elastic Search as Graph Database? --- ## [ES indexing strategy](https://discuss.elastic.co/t/es-indexing-strategy/58413)
**Author:** [@cgswong](https://discuss.elastic.co/u/cgswong)\ **Replies:** 3\ **Last updated:** [August 19, 2016, 3:50am UTC](https://discuss.elastic.co/t/es-indexing-strategy/58413 "2016-08-19T03:50:56Z")
Hi all! I'm curious as to how others are doing, or would recommend doing indexing. Specifically, we have several indexes based on document structure such as for syslog, audit logs (two here since the document structures … --- ## [Rebalance primary shards](https://discuss.elastic.co/t/rebalance-primary-shards/14470)
**Author:** [@Andrew\_Ochsner](https://discuss.elastic.co/u/Andrew_Ochsner)\ **Replies:** 3\ **Last updated:** [November 21, 2013, 9:47am UTC](https://discuss.elastic.co/t/rebalance-primary-shards/14470 "2013-11-21T09:47:20Z")
Hello: I've got a setup where I have 3 nodes and each index has 3 shards + 1 replica. I'm really memory constrained so sorting is thrashing my fielddata cache. I'm working to get more memory, but in the meantime… --- ## [How to change a message into multiple key and value in logstash filter](https://discuss.elastic.co/t/how-to-change-a-message-into-multiple-key-and-value-in-logstash-filter/97199)
**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\ **Replies:** 7\ **Last updated:** [August 18, 2017, 4:32am UTC](https://discuss.elastic.co/t/how-to-change-a-message-into-multiple-key-and-value-in-logstash-filter/97199 "2017-08-18T04:32:05Z")
original data : except field in kibana : (I also want to remove message field) agent： metricbeat env: production dc: fr4 pgpool\_activite: 20 pgpool\_idle:8 pgpool\_waiting:100 ... ... .... --- ## [How does kibana displays available fields?](https://discuss.elastic.co/t/how-does-kibana-displays-available-fields/53849)
**Author:** [@aravind\_ram](https://discuss.elastic.co/u/aravind_ram)\ **Replies:** 1\ **Last updated:** [June 24, 2016, 9:14pm UTC](https://discuss.elastic.co/t/how-does-kibana-displays-available-fields/53849 "2016-06-24T21:14:23Z")
I am a newbie to ES. I am developing a small tool in my organisation to enable Querying the elastic search from a UI. I need to get all the fields available in the index. And I know kibana is fetching those fields from t… --- ## [How to Aggregate Log Content](https://discuss.elastic.co/t/how-to-aggregate-log-content/25833)
**Author:** [@Dilip2610](https://discuss.elastic.co/u/Dilip2610)\ **Replies:** 7\ **Last updated:** [July 20, 2015, 4:51pm UTC](https://discuss.elastic.co/t/how-to-aggregate-log-content/25833 "2015-07-20T16:51:46Z")
Hi, I have few log entries as below. Thu Jul 09 2015 15:00:39 \[serviceout\]\[0x8060015e\]\[crypto\]\[info\] mpgw(mpgwService): tid(6440055)\[request\]\[255.255.215.129\] gtid(6440055): Data encryption succeeded Thu Jul 09 2015 … --- ## [Storage type in Elasticsearch](https://discuss.elastic.co/t/storage-type-in-elasticsearch/18262)
**Author:** [@Prashant\_Pal](https://discuss.elastic.co/u/Prashant_Pal)\ **Replies:** 2\ **Last updated:** [June 24, 2014, 5:36am UTC](https://discuss.elastic.co/t/storage-type-in-elasticsearch/18262 "2014-06-24T05:36:03Z")
Hi All, We are using ES for indexing bulk data which may go in terms of TB. So just looking for which file system would be more suitable in terms of efficiency, performance, indexing time , searching time out of E… --- ## [Logstash mutate add\_field](https://discuss.elastic.co/t/logstash-mutate-add-field/54459)
**Author:** [@Sridhar\_Yadav\_Manoha](https://discuss.elastic.co/u/Sridhar_Yadav_Manoha)\ **Replies:** 8\ **Last updated:** [June 30, 2016, 7:37pm UTC](https://discuss.elastic.co/t/logstash-mutate-add-field/54459 "2016-06-30T19:37:47Z")
I have an xml which I have an attached I am parsing this xml using xml filters in logstash. I have a field t ="296" in my xml. This represents response time. And logstash is parsing each field as an array like "respo… --- ## [Example for remote path in logstash conf file](https://discuss.elastic.co/t/example-for-remote-path-in-logstash-conf-file/49260)
**Author:** [@vadimso](https://discuss.elastic.co/u/vadimso)\ **Replies:** 8\ **Last updated:** [May 5, 2016, 9:54am UTC](https://discuss.elastic.co/t/example-for-remote-path-in-logstash-conf-file/49260 "2016-05-05T09:54:21Z")
Hello All, Can someone give me pls example how to specify remote path in logstash conf file? i mean in section :input { file { path =\> REMOTE PATH (to other server in linux environment) Tnx Vadim --- ## [Error when i will start logstash](https://discuss.elastic.co/t/error-when-i-will-start-logstash/131664)
**Author:** [@TheOnlyOne](https://discuss.elastic.co/u/TheOnlyOne)\ **Replies:** 5\ **Last updated:** [May 14, 2018, 3:55pm UTC](https://discuss.elastic.co/t/error-when-i-will-start-logstash/131664 "2018-05-14T15:55:29Z")
Hello, im new at Elastic Stack. When i will start logstash i get a error Message: Logstash, Kibana, Elasticsearch everything on the newest Version. PS C:\\ELK-Stack\\logstash\> C:\\ELK-Stack\\logstash\\bin\\logstash.bat Se… --- ## [Getting mutate\_error while trying to use ECS schema](https://discuss.elastic.co/t/getting-mutate-error-while-trying-to-use-ecs-schema/240707)
**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\ **Replies:** 4\ **Last updated:** [July 11, 2020, 5:24pm UTC](https://discuss.elastic.co/t/getting-mutate-error-while-trying-to-use-ecs-schema/240707 "2020-07-11T17:24:25Z")
I was trying to ingest Fortigate firewall logs and under ECS schema. Here is my configuration: input { udp { host =\> "0.0.0.0" port =\> 10514 type =\> "log" } } filter { if \[type\] == "log" { kv { … --- ## [Unknown setting \[archived.xpack.monitoring.collection.enabled\]](https://discuss.elastic.co/t/unknown-setting-archived-xpack-monitoring-collection-enabled/155979)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 4\ **Last updated:** [December 3, 2018, 12:53am UTC](https://discuss.elastic.co/t/unknown-setting-archived-xpack-monitoring-collection-enabled/155979 "2018-12-03T00:53:38Z")
Hi, We have installed ELK 6.2.1 using Docker.When we tried to disable the shards allocation using we are getting following erro.How can we resolve this..? PUT \_cluster/settings { "persistent": { "cluster.routing.all… --- ## [Bucket Selector Aggregation Script- access doc index field value](https://discuss.elastic.co/t/bucket-selector-aggregation-script-access-doc-index-field-value/35516)
**Author:** [@Hemrajsinh\_Gharia](https://discuss.elastic.co/u/Hemrajsinh_Gharia)\ **Replies:** 2\ **Last updated:** [November 25, 2015, 11:07am UTC](https://discuss.elastic.co/t/bucket-selector-aggregation-script-access-doc-index-field-value/35516 "2015-11-25T11:07:24Z")
Hello, I am trying to provide a solution for this stackoverflow question. \`PUT http://localhost:9200/test\_index/test/\_mapping/\` { "test": { "properties": { "date": { "type": "date", … --- ## [Logstash not writing data to Elasticsearch data streams](https://discuss.elastic.co/t/logstash-not-writing-data-to-elasticsearch-data-streams/292541)
**Author:** [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\ **Replies:** 3\ **Last updated:** [December 27, 2021, 7:09am UTC](https://discuss.elastic.co/t/logstash-not-writing-data-to-elasticsearch-data-streams/292541 "2021-12-27T07:09:54Z")
We are using logstash version 7.4.2 currently. For mitigating threats of log4j vulnerability, I have upgraded the Logstash version to 7.16.1 as advised by the Elastic team. I have also changed the Elasticsearch output p… --- ## [java.sql.SQLException: Server sent bad type \[illegal\_argument\_exception\]. Original type was \[request \[/\_xpack/sql\] contains unrecognized parameter](https://discuss.elastic.co/t/java-sql-sqlexception-server-sent-bad-type-illegal-argument-exception-original-type-was-request-xpack-sql-contains-unrecognized-parameter/142190)
**Author:** [@agrawal](https://discuss.elastic.co/u/agrawal)\ **Replies:** 3\ **Last updated:** [July 31, 2018, 4:45am UTC](https://discuss.elastic.co/t/java-sql-sqlexception-server-sent-bad-type-illegal-argument-exception-original-type-was-request-xpack-sql-contains-unrecognized-parameter/142190 "2018-07-31T04:45:16Z")
Hi, I am indexing some data and trying to fetch out using JDBCDataSource connection. ES server version: 6.2.4 ( Docker container) ES elasticsearch.plugin: 6.3.0 ES rest-high-level-client: 6.3.2 Getting an error: ja… --- ## [Date math index pattern](https://discuss.elastic.co/t/date-math-index-pattern/110842)
**Author:** [@INDRANIL\_BISWAS](https://discuss.elastic.co/u/INDRANIL_BISWAS)\ **Replies:** 3\ **Last updated:** [December 8, 2017, 9:29pm UTC](https://discuss.elastic.co/t/date-math-index-pattern/110842 "2017-12-08T21:29:22Z")
Hi , I am very new to kibana and elasticsearch My indexes in elasticsearch are in format syslog-YYYY.MM.dd I am trying to create a index pattern using date math,that matches all indexes over the 30days This following… --- ## [Embed a webpage in Kibana dashboard](https://discuss.elastic.co/t/embed-a-webpage-in-kibana-dashboard/104290)
**Author:** [@RSundareswaran](https://discuss.elastic.co/u/RSundareswaran)\ **Replies:** 3\ **Last updated:** [October 23, 2017, 1:49pm UTC](https://discuss.elastic.co/t/embed-a-webpage-in-kibana-dashboard/104290 "2017-10-23T13:49:45Z")
Hi, We have java ESB running and the application logs are ingested into ELK. The ESB has its own console to display app status which we would like to bring it inside the Dashboard (may be an iframe) which we have built… --- ## [Collectd monitoring of ElasticSearch with CURL\_JSON plugin failing](https://discuss.elastic.co/t/collectd-monitoring-of-elasticsearch-with-curl-json-plugin-failing/26920)
**Author:** [@diranged](https://discuss.elastic.co/u/diranged)\ **Replies:** 3\ **Last updated:** [December 8, 2015, 8:22pm UTC](https://discuss.elastic.co/t/collectd-monitoring-of-elasticsearch-with-curl-json-plugin-failing/26920 "2015-12-08T20:22:20Z")
In our environment, we're using Collectd 4.10.1 (I know ... old as dirt, but its a requirement of RightScale) and we are trying to leverage the curl\_json plugin to pull metrics from our ElasticSearch cluster. We have the… --- ## [Logstash grok pattern for Wowza](https://discuss.elastic.co/t/logstash-grok-pattern-for-wowza/25641)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 3\ **Last updated:** [July 16, 2015, 4:14pm UTC](https://discuss.elastic.co/t/logstash-grok-pattern-for-wowza/25641 "2015-07-16T16:14:04Z")
Can someone please share me the grok pattern for Wowza?. I have tried with below one. The pattern shows Ok on http://grokdebug.herokuapp.com/ site. But in logstash log , it went to "grokfailure section". I referred t… --- ## [Best java to run ElasticSearch](https://discuss.elastic.co/t/best-java-to-run-elasticsearch/10840)
**Author:** [@Kazimieras\_Aliulis](https://discuss.elastic.co/u/Kazimieras_Aliulis)\ **Replies:** 3\ **Last updated:** [February 21, 2013, 4:11pm UTC](https://discuss.elastic.co/t/best-java-to-run-elasticsearch/10840 "2013-02-21T16:11:35Z")
Hi, I wanted to ask which java version is best to run ElasticSearch on. I am running ES on JRockit 1.6. Maybe it would be more stable on OpenJDK or HotSpot or 1.7? -- Sincerely Kazimieras Aliulis -- You … --- ## [Handling 1d date\_histogram queries that span Daylight Saving Time (Nov 6th 2 am)](https://discuss.elastic.co/t/handling-1d-date-histogram-queries-that-span-daylight-saving-time-nov-6th-2-am/69623)
**Author:** [@yeppers](https://discuss.elastic.co/u/yeppers)\ **Replies:** 3\ **Last updated:** [December 27, 2016, 7:26pm UTC](https://discuss.elastic.co/t/handling-1d-date-histogram-queries-that-span-daylight-saving-time-nov-6th-2-am/69623 "2016-12-27T19:26:27Z")
I store all my documents with date/times in GMT. Then at query time I use the "time\_zone" property of a date\_histogram to choose which timezone to localize it to (we have users in multiple time zones). This works grea… --- ## [Deploying elasticsearch cluster on kubernetes issue](https://discuss.elastic.co/t/deploying-elasticsearch-cluster-on-kubernetes-issue/258474)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 8\ **Last updated:** [December 13, 2020, 10:24am UTC](https://discuss.elastic.co/t/deploying-elasticsearch-cluster-on-kubernetes-issue/258474 "2020-12-13T10:24:44Z")
Hello, I am trying to deploy elasticsearch 7.7.1 on kubernetes into a 3 node cluster. I have tried following the documentation for it and when I run kubectl apply -f \.yaml I am getting the following error: … --- ## [Populate field Static Lookup data programmatically](https://discuss.elastic.co/t/populate-field-static-lookup-data-programmatically/174246)
**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\ **Replies:** 3\ **Last updated:** [March 29, 2019, 5:14pm UTC](https://discuss.elastic.co/t/populate-field-static-lookup-data-programmatically/174246 "2019-03-29T17:14:56Z")
Using the Static Lookup field formatter (https://github.com/elastic/kibana/pull/19637).. Is there a recommended way to populate the static lookup field programmatically, with a largeish table? I want to convert mlcatego… --- ## [External versioning (external or external\_gte)](https://discuss.elastic.co/t/external-versioning-external-or-external-gte/106289)
**Author:** [@piotr.dela](https://discuss.elastic.co/u/piotr.dela)\ **Replies:** 1\ **Last updated:** [November 9, 2017, 9:23pm UTC](https://discuss.elastic.co/t/external-versioning-external-or-external-gte/106289 "2017-11-09T21:23:42Z")
Hi folks, I'm currently working on a project which has a "projection" storage implemented using Elasticsearch. I have a few questions about external versioning. First of all in general, in documentation it is said Bl… --- ## [Difference between Delete All indices and Close All indices](https://discuss.elastic.co/t/difference-between-delete-all-indices-and-close-all-indices/23535)
**Author:** [@Ruben\_Ortiz](https://discuss.elastic.co/u/Ruben_Ortiz)\ **Replies:** 1\ **Last updated:** [May 4, 2015, 10:32am UTC](https://discuss.elastic.co/t/difference-between-delete-all-indices-and-close-all-indices/23535 "2015-05-04T10:32:56Z")
Hi I'm learning how to maintain clean my ES and I found this article today http://www.elastic.co/guide/en/elasticsearch/client/curator/current/examples.html The first example is "Delete all indices older than". … --- ## [Non stacked bars in Timelion (Kibana 5 - rc1)](https://discuss.elastic.co/t/non-stacked-bars-in-timelion-kibana-5-rc1/63862)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 4\ **Last updated:** [January 18, 2017, 1:11pm UTC](https://discuss.elastic.co/t/non-stacked-bars-in-timelion-kibana-5-rc1/63862 "2017-01-18T13:11:08Z")
Hi, I am trying out Timelion and I want two different queries each represented as a bar. I am doing the following query: .es(index=raw\_events-\*, timefield=createDate, q='name:execute\_search', kibana=true).label('… --- ## [Create a visualization that ignores currently selected time range](https://discuss.elastic.co/t/create-a-visualization-that-ignores-currently-selected-time-range/55949)
**Author:** [@mrvincnezo](https://discuss.elastic.co/u/mrvincnezo)\ **Replies:** 4\ **Last updated:** [August 2, 2016, 7:20am UTC](https://discuss.elastic.co/t/create-a-visualization-that-ignores-currently-selected-time-range/55949 "2016-08-02T07:20:21Z")
Is it possible to create a visualization that ignores the currently selected time range in a time based index? --- ## [Elastic 2.2.0 how to find the query](https://discuss.elastic.co/t/elastic-2-2-0-how-to-find-the-query/102555)
**Author:** [@jeannot](https://discuss.elastic.co/u/jeannot)\ **Replies:** 6\ **Last updated:** [October 5, 2017, 7:44am UTC](https://discuss.elastic.co/t/elastic-2-2-0-how-to-find-the-query/102555 "2017-10-05T07:44:41Z")
Hi all, When looking to slow query logs, I found some binary. I try to find in documentation how to make a link between a query and this binary. Any idea? regards Jean-Luc Example: \[2016-12-22 08:53:35,630\]\[TRACE\]… --- ## [Issue Using the Connector from PySpark in 7.17.3](https://discuss.elastic.co/t/issue-using-the-connector-from-pyspark-in-7-17-3/304084)
**Author:** [@ito](https://discuss.elastic.co/u/ito)\ **Replies:** 3\ **Last updated:** [May 7, 2022, 12:18am UTC](https://discuss.elastic.co/t/issue-using-the-connector-from-pyspark-in-7-17-3/304084 "2022-05-07T00:18:45Z")
I have Elasticsearch 7.17.3 running on localhost:9200, so I downloaded Elasticsearch for Apache Hadoop 7.17.3. Then I copied Elasticsearch-spark-20\_2.11-7.17.3.jar to my jar folder. I read "Using the connector from PySp… --- ## [Filebeat load old data](https://discuss.elastic.co/t/filebeat-load-old-data/82493)
**Author:** [@santhosh244](https://discuss.elastic.co/u/santhosh244)\ **Replies:** 5\ **Last updated:** [April 24, 2017, 7:40am UTC](https://discuss.elastic.co/t/filebeat-load-old-data/82493 "2017-04-24T07:40:15Z")
Team, We have 40 instances running filebeat and centralized logstash. Our application rotates the log files based on size and deleted after 5 files. So during high volume peak hours. Logs gets queued in our servers… --- ## [Smart search](https://discuss.elastic.co/t/smart-search/72263)
**Author:** [@Umar\_Memon](https://discuss.elastic.co/u/Umar_Memon)\ **Replies:** 5\ **Last updated:** [February 3, 2017, 4:18am UTC](https://discuss.elastic.co/t/smart-search/72263 "2017-02-03T04:18:59Z")
Can elastic search has the feature of smart search, For example if i searches for the computer search result also retrive the content having laptop. Is it possible with elastic search, if so any refrence. I am using ES 5… --- ## [Best Practices for Combining Fleet, Elastic Agent, Logstash, and Redis?](https://discuss.elastic.co/t/best-practices-for-combining-fleet-elastic-agent-logstash-and-redis/380419)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 6\ **Last updated:** [August 4, 2025, 1:20pm UTC](https://discuss.elastic.co/t/best-practices-for-combining-fleet-elastic-agent-logstash-and-redis/380419 "2025-08-04T13:20:42Z")
Hi everyone, I’ve been working with the Elastic Stack for several years and recently started exploring Fleet Server and Elastic Agent. While I appreciate the modern approach and prebuilt integrations, I’m struggling wit… --- ## [Clarification of the query\_total metric in the cluster nodes stats api](https://discuss.elastic.co/t/clarification-of-the-query-total-metric-in-the-cluster-nodes-stats-api/10529)
**Author:** [@colinsurprenant](https://discuss.elastic.co/u/colinsurprenant)\ **Replies:** 2\ **Last updated:** [January 30, 2013, 5:07pm UTC](https://discuss.elastic.co/t/clarification-of-the-query-total-metric-in-the-cluster-nodes-stats-api/10529 "2013-01-30T17:07:01Z")
Hi, In \_cluster/nodes/stats what exactly does the nodes/\[node\]/indices/search/query\_total metric represent? Is it: - the elasticsearch queries count as submitted by the http or java interface for that node? -… --- ## [Analyzer unassigned when using 'integer' type](https://discuss.elastic.co/t/analyzer-unassigned-when-using-integer-type/32007)
**Author:** [@missinglink](https://discuss.elastic.co/u/missinglink)\ **Replies:** 3\ **Last updated:** [October 12, 2015, 3:17pm UTC](https://discuss.elastic.co/t/analyzer-unassigned-when-using-integer-type/32007 "2015-10-12T15:17:43Z")
When assigning an analyzer to an integer field, the analyzer definition is removed from the mapping. In the example below I would like to remove non-numeric characters from a house number and store the results as integ… --- ## [How does replication works in detail?](https://discuss.elastic.co/t/how-does-replication-works-in-detail/24809)
**Author:** [@achimweigel](https://discuss.elastic.co/u/achimweigel)\ **Replies:** 3\ **Last updated:** [July 3, 2015, 1:56pm UTC](https://discuss.elastic.co/t/how-does-replication-works-in-detail/24809 "2015-07-03T13:56:35Z")
Hello! Assume we have an Elasticsearch cluster with 3 nodes n1, n2 and n3. We have created an index on this cluster with one shard and two replicas with a significant amount of data in (one shard of the index is on eac… --- ## [WAZUH OSSEC Plugin / intgeration with ELK](https://discuss.elastic.co/t/wazuh-ossec-plugin-intgeration-with-elk/161974)
**Author:** [@Ganngadaran](https://discuss.elastic.co/u/Ganngadaran)\ **Replies:** 4\ **Last updated:** [December 24, 2018, 10:05am UTC](https://discuss.elastic.co/t/wazuh-ossec-plugin-intgeration-with-elk/161974 "2018-12-24T10:05:26Z")
Hi Team, I deployed ELK (Single Server Architecture) on Ubuntu and currently exploring the steps for integration WAZUS OSSEC framework. Can anyone please share the steps or documentation for the same. Thanks. --- ## [Create index in elasticsearch for a file in S3 bucket](https://discuss.elastic.co/t/create-index-in-elasticsearch-for-a-file-in-s3-bucket/38073)
**Author:** [@Bharath\_Varre](https://discuss.elastic.co/u/Bharath_Varre)\ **Replies:** 4\ **Last updated:** [December 28, 2015, 8:41pm UTC](https://discuss.elastic.co/t/create-index-in-elasticsearch-for-a-file-in-s3-bucket/38073 "2015-12-28T20:41:13Z")
Hello, Is it possible to create an index just for one file in a S3 bucket? Also,is it possible to change the type or tag based on the file name in the bucket. Thank you. Sai --- ## [Recommended way to add a field](https://discuss.elastic.co/t/recommended-way-to-add-a-field/64962)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 3\ **Last updated:** [November 4, 2016, 4:09am UTC](https://discuss.elastic.co/t/recommended-way-to-add-a-field/64962 "2016-11-04T04:09:34Z")
What is the recommended way to add a field after the log is collected into elasticsearch? Situation is that lets say at first you are unsure which fields you want to use in the visualize but just want to collect logs. … --- ## [TransportClient.builder() hang indefinitely](https://discuss.elastic.co/t/transportclient-builder-hang-indefinitely/51088)
**Author:** [@Gautam\_S\_Thakur](https://discuss.elastic.co/u/Gautam_S_Thakur)\ **Replies:** 8\ **Last updated:** [May 27, 2016, 2:42pm UTC](https://discuss.elastic.co/t/transportclient-builder-hang-indefinitely/51088 "2016-05-27T14:42:41Z")
I am trying to use Java 2.3 client API (ES 2.3 is installed on a Linux RH 7 Machine) to connect to ElasticSearch just a single node configuration. However its stuck at the TransportClient.builder().settings(settings).bui… --- ## [Snapshot is taking too long](https://discuss.elastic.co/t/snapshot-is-taking-too-long/218262)
**Author:** [@pinakinab](https://discuss.elastic.co/u/pinakinab)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 8:25am UTC](https://discuss.elastic.co/t/snapshot-is-taking-too-long/218262 "2020-02-07T08:25:28Z")
We are using Elasticsearch 7.2.0 We are trying to create a snapshot for one of our indices. The index size is 30 GB. It took around 1 hour to create this snapshot. There were no previously created snapshots. Our elastic… --- ## [Fetch data from oracle database using logstash](https://discuss.elastic.co/t/fetch-data-from-oracle-database-using-logstash/103134)
**Author:** [@Sumit\_Gupta1](https://discuss.elastic.co/u/Sumit_Gupta1)\ **Replies:** 1\ **Last updated:** [October 8, 2017, 9:05am UTC](https://discuss.elastic.co/t/fetch-data-from-oracle-database-using-logstash/103134 "2017-10-08T09:05:47Z")
I'm using following config file: input { jdbc { jdbc\_validate\_connection =\> true jdbc\_driver\_library =\> "/app/logstash-5.6.2/lib/ojdbc7.jar" jdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver" jdbc\_connect… --- ## [Convert field type String to geo\_point](https://discuss.elastic.co/t/convert-field-type-string-to-geo-point/49452)
**Author:** [@Olalekan\_Elesin](https://discuss.elastic.co/u/Olalekan_Elesin)\ **Replies:** 5\ **Last updated:** [November 6, 2016, 12:16am UTC](https://discuss.elastic.co/t/convert-field-type-string-to-geo-point/49452 "2016-11-06T00:16:08Z")
I use es\_hadoop\_hive to save data into elasticsearch. But I have a field which I formatted as string in hive but the mapping is geo\_point in ES. How can save the data such that the mapping auto generated by hive does not… --- ## [How to restart Kibana automatically?](https://discuss.elastic.co/t/how-to-restart-kibana-automatically/49460)
**Author:** [@Libfy](https://discuss.elastic.co/u/Libfy)\ **Replies:** 5\ **Last updated:** [May 10, 2016, 7:13am UTC](https://discuss.elastic.co/t/how-to-restart-kibana-automatically/49460 "2016-05-10T07:13:29Z")
Hey guys, I'm looking for a way to restart Kibana through a script and to make sure that Kibana will use the good Index Pattern and the good Time-field name. For the moment, each time I restart Kibana, I need to do thi… --- ## [Several matching dynamic\_templates?](https://discuss.elastic.co/t/several-matching-dynamic-templates/5007)
**Author:** [@Joel\_Abrahamsson](https://discuss.elastic.co/u/Joel_Abrahamsson)\ **Replies:** 5\ **Last updated:** [July 31, 2011, 3:09pm UTC](https://discuss.elastic.co/t/several-matching-dynamic-templates/5007 "2011-07-31T15:09:08Z")
Is it possible to somehow configure dynamic\_templates so that multiple matching templates will be applied? It seems to me that only the first matching template is used. I can see why that is, but if there's a workarou… --- ## [Connection refused error from logstash.log](https://discuss.elastic.co/t/connection-refused-error-from-logstash-log/64330)
**Author:** [@rai](https://discuss.elastic.co/u/rai)\ **Replies:** 6\ **Last updated:** [October 31, 2016, 6:08pm UTC](https://discuss.elastic.co/t/connection-refused-error-from-logstash-log/64330 "2016-10-31T18:08:13Z")
I am getting following error on elk server and not able to see the log on Kibana. {:timestamp=\>"2016-10-28T21:52:02.243000+0000", :message=\>"Connection refused", :class=\>"Manticore::SocketException", {:timestamp=\>"201… --- ## [During Logstash forwarder startup throws "Failed to tls handshake EOF" Error](https://discuss.elastic.co/t/during-logstash-forwarder-startup-throws-failed-to-tls-handshake-eof-error/28816)
**Author:** [@vino](https://discuss.elastic.co/u/vino)\ **Replies:** 6\ **Last updated:** [September 8, 2015, 9:03am UTC](https://discuss.elastic.co/t/during-logstash-forwarder-startup-throws-failed-to-tls-handshake-eof-error/28816 "2015-09-08T09:03:50Z")
I have a 7 node setup where we have 3 logstash, 3 elastic search and 1 logstash-forwarder. I have both the logstash-forwarder and load balancer (haproxy) running in the same VM. All the three logstash communicates wi… [Previous page](https://discuss.elastic.co/top.md?page=594&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=596&per_page=50&period=all)