# Top

**URL:** https://discuss.elastic.co/top.md?page=606&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 607

---

## ["Unable to lock JVM Memory: error=12, reason=Cannot allocate memory"](https://discuss.elastic.co/t/unable-to-lock-jvm-memory-error-12-reason-cannot-allocate-memory/306000)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 7\
**Last updated:** [June 10, 2022, 3:40pm UTC](https://discuss.elastic.co/t/unable-to-lock-jvm-memory-error-12-reason-cannot-allocate-memory/306000 "2022-06-10T15:40:37Z")

</div>

I have enabled bootstrap.memory\_lock: true ERROR: \[1\] bootstrap checks failed. You must address the points described in the following \[1\] lines before starting Elasticsearch. bootstrap check failure \[1\] of \[1\]: memory…

---

## [Best practice](https://discuss.elastic.co/t/best-practice/106559)

<div class="topic-metadata">

**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\
**Replies:** 7\
**Last updated:** [November 14, 2017, 6:57am UTC](https://discuss.elastic.co/t/best-practice/106559 "2017-11-14T06:57:09Z")

</div>

I wan to parse logfile(which is at client side) and and display content to kibana(which is hosted in offshore). I am planning to use logstash at client side and elastic search and kibana both locally. I had heard abou…

---

## [Filter performance difference (Bool vs Terms)](https://discuss.elastic.co/t/filter-performance-difference-bool-vs-terms/59928)

<div class="topic-metadata">

**Author:** [@EuclideanSearch](https://discuss.elastic.co/u/EuclideanSearch)\
**Replies:** 1\
**Last updated:** [September 6, 2016, 11:23pm UTC](https://discuss.elastic.co/t/filter-performance-difference-bool-vs-terms/59928 "2016-09-06T23:23:05Z")

</div>

I have a terms filter (over multiple fields) and an equivalent boolean query; but the terms query is faster. Is some optimization performed when the terms filter is applied (which thereby allows it to perform better than…

---

## [How to whitelist cloud endpoint on my office network](https://discuss.elastic.co/t/how-to-whitelist-cloud-endpoint-on-my-office-network/188815)

<div class="topic-metadata">

**Author:** [@Thanura\_Kannangara](https://discuss.elastic.co/u/Thanura_Kannangara)\
**Replies:** 4\
**Last updated:** [July 4, 2019, 4:49pm UTC](https://discuss.elastic.co/t/how-to-whitelist-cloud-endpoint-on-my-office-network/188815 "2019-07-04T16:49:41Z")

</div>

My beats are having trouble with the connectivity to elastic cloud endpoints Kibana: https://7e4XXXXXXXXXXXXXXXXX949.us-east-1.aws.found.io:9243 ElasticSearch : https://1049XXXXXXXXXXXXXXXXe3.us-east-1.aws.found.io:9243…

---

## [Changing timezone](https://discuss.elastic.co/t/changing-timezone/204240)

<div class="topic-metadata">

**Author:** [@Necus](https://discuss.elastic.co/u/Necus)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 11:21am UTC](https://discuss.elastic.co/t/changing-timezone/204240 "2019-10-20T11:21:31Z")

</div>

Hi, I'm trying to change timezone for time logs, but for some reason after configuration nothing has changed. What I have done: copying default date/time field: mutate { copy =\> {"time" =\> "new\_time"} } changin…

---

## [Logstash is not loading data to elasticsearch](https://discuss.elastic.co/t/logstash-is-not-loading-data-to-elasticsearch/55772)

<div class="topic-metadata">

**Author:** [@kuntzit](https://discuss.elastic.co/u/kuntzit)\
**Replies:** 2\
**Last updated:** [April 12, 2017, 1:24pm UTC](https://discuss.elastic.co/t/logstash-is-not-loading-data-to-elasticsearch/55772 "2017-04-12T13:24:06Z")

</div>

I'm trying to upload data from redshift into elastic search. I exported some data from redshift, so now it's just a CSV file, so I thought using logstash with the CSV filter will work. It looks like it's working, the sin…

---

## [How to acess search bar query string in kibana custom plugin](https://discuss.elastic.co/t/how-to-acess-search-bar-query-string-in-kibana-custom-plugin/72864)

<div class="topic-metadata">

**Author:** [@tarun\_kumar](https://discuss.elastic.co/u/tarun_kumar)\
**Replies:** 5\
**Last updated:** [February 13, 2017, 12:17pm UTC](https://discuss.elastic.co/t/how-to-acess-search-bar-query-string-in-kibana-custom-plugin/72864 "2017-02-13T12:17:29Z")

</div>

Hi to all, I have been learning kibana visualization development from @timroes and @JuanCarniglia blogs and plugin. I am currently developing kibana-4.4.1 visualization plugin and i need to apply big search bar (at the …

---

## [LDAPS causing "com.unboundid.ldap.sdk.LDAPSearchException: time limit exceeded"](https://discuss.elastic.co/t/ldaps-causing-com-unboundid-ldap-sdk-ldapsearchexception-time-limit-exceeded/49164)

<div class="topic-metadata">

**Author:** [@fgimian](https://discuss.elastic.co/u/fgimian)\
**Replies:** 5\
**Last updated:** [June 24, 2016, 12:25am UTC](https://discuss.elastic.co/t/ldaps-causing-com-unboundid-ldap-sdk-ldapsearchexception-time-limit-exceeded/49164 "2016-06-24T00:25:55Z")

</div>

Hey guys, hope you're all doing well \[:smile:\] I'm facing an extremely strange issue with my LDAP configuration for Shield. This only occurs when I attempt to connect to my LDAP server using SSL (i.e .LDAPS) and it oc…

---

## [Couchdb vs elasticsearch](https://discuss.elastic.co/t/couchdb-vs-elasticsearch/3324)

<div class="topic-metadata">

**Author:** [@fede\_2](https://discuss.elastic.co/u/fede_2)\
**Replies:** 3\
**Last updated:** [September 13, 2010, 9:57am UTC](https://discuss.elastic.co/t/couchdb-vs-elasticsearch/3324 "2010-09-13T09:57:19Z")

</div>

This might be a stupid question, but I do not see differences with couchdb and elastic search. They could solve the same problem , but I see a great advantage of elastic search over couchdb if you want to search …

---

## [Elastic agent is unhealthy](https://discuss.elastic.co/t/elastic-agent-is-unhealthy/320664)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 2\
**Last updated:** [December 8, 2022, 2:40am UTC](https://discuss.elastic.co/t/elastic-agent-is-unhealthy/320664 "2022-12-08T02:40:43Z")

</div>

Hi all, I have a case when after i enroll the fleet server to Elasticsearch. It become health for a while then became unhealthy. I checked the log then it said this: {"@timestamp":"2022-12-07T08:58:09.831566388Z","ag…

---

## [Formatting a date in an alert email](https://discuss.elastic.co/t/formatting-a-date-in-an-alert-email/332312)

<div class="topic-metadata">

**Author:** [@ppic](https://discuss.elastic.co/u/ppic)\
**Replies:** 6\
**Last updated:** [May 4, 2023, 4:44pm UTC](https://discuss.elastic.co/t/formatting-a-date-in-an-alert-email/332312 "2023-05-04T16:44:43Z")

</div>

Hi, I use Kibana 7.17. In "Rules and Connectors", I created an alert generating an email. In this email, I display a date (value of a field) like : 2023-04-28T17:23:23.943Z The user would like a date like 28/04/…

---

## [\[plugin-development\] Custom transport actions and X-Pack integration](https://discuss.elastic.co/t/plugin-development-custom-transport-actions-and-x-pack-integration/110805)

<div class="topic-metadata">

**Author:** [@dcausse](https://discuss.elastic.co/u/dcausse)\
**Replies:** 6\
**Last updated:** [December 19, 2017, 8:26am UTC](https://discuss.elastic.co/t/plugin-development-custom-transport-actions-and-x-pack-integration/110805 "2017-12-19T08:26:20Z")

</div>

Hi, I just received a bug report concerning a plugin we wrote. The user reports that despite being the superuser it receives: {"error":{"root\_cause":\[{"type":"security\_exception","reason":"action \[ltr:featurestore/data…

---

## [Using an array as parameter for update script](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/202998)

<div class="topic-metadata">

**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\
**Replies:** 1\
**Last updated:** [October 10, 2019, 12:12pm UTC](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/202998 "2019-10-10T12:12:21Z")

</div>

I am using ElasticSearch 6.5, invoking commands by Kibana 6.5. My documents have user field which is an array of user structures. I want to construct a script, that will update some of the structures in this array based…

---

## [Error while loading shared libraries: libjli.so](https://discuss.elastic.co/t/error-while-loading-shared-libraries-libjli-so/177319)

<div class="topic-metadata">

**Author:** [@m\_tothe\_c](https://discuss.elastic.co/u/m_tothe_c)\
**Replies:** 1\
**Last updated:** [April 17, 2019, 6:40pm UTC](https://discuss.elastic.co/t/error-while-loading-shared-libraries-libjli-so/177319 "2019-04-17T18:40:10Z")

</div>

When I try to start an instance of Elasticsearch 7, I get this error. Some backstory, I am running on port 443 instead of 9200. Previous versions worked fine after running sudo setcap 'CAP\_NET\_BIND\_SERVICE=+eip' /usr/l…

---

## [Error "Failed to derive xcontent"](https://discuss.elastic.co/t/error-failed-to-derive-xcontent/17833)

<div class="topic-metadata">

**Author:** [@shashankg](https://discuss.elastic.co/u/shashankg)\
**Replies:** 1\
**Last updated:** [May 30, 2014, 6:19pm UTC](https://discuss.elastic.co/t/error-failed-to-derive-xcontent/17833 "2014-05-30T18:19:02Z")

</div>

I am a newbie to ElasticSearch and tried this first one via curl curl -XPUT "http://localhost:9200/movies/movie/1" -d' { "title": "The Godfather", "director": "Francis Ford Coppola", "year": 1972, …

---

## [Convert decimal IP to ipv4 dotted decimal](https://discuss.elastic.co/t/convert-decimal-ip-to-ipv4-dotted-decimal/68109)

<div class="topic-metadata">

**Author:** [@Geezer](https://discuss.elastic.co/u/Geezer)\
**Replies:** 1\
**Last updated:** [December 5, 2016, 10:56pm UTC](https://discuss.elastic.co/t/convert-decimal-ip-to-ipv4-dotted-decimal/68109 "2016-12-05T22:56:51Z")

</div>

Hello, I am reading data from an SQL table which contains IP addresses in decimal format, and I need to convert these to dotted decimal. e.g. convert this: 1978211278 to this: 117.233.27.206 I am trying …

---

## [Does logstash 2.2.2-1 has backward compatibility with ES-1.5?](https://discuss.elastic.co/t/does-logstash-2-2-2-1-has-backward-compatibility-with-es-1-5/43158)

<div class="topic-metadata">

**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\
**Replies:** 8\
**Last updated:** [March 1, 2016, 9:45pm UTC](https://discuss.elastic.co/t/does-logstash-2-2-2-1-has-backward-compatibility-with-es-1-5/43158 "2016-03-01T21:45:34Z")

</div>

Hi, I installed logstash-2.2.2-1.noarch.rpm and trying to connect managed Elastic Search cluster (version: 1.5.2), it failing with error: \[408\] {:class=\>"Elasticsearch::Transport::Transport::Errors::RequestTimeout", :le…

---

## [ElasticSearch 6.2.4 java.lang.IllegalArgumentException: Document contains at least one immense term](https://discuss.elastic.co/t/elasticsearch-6-2-4-java-lang-illegalargumentexception-document-contains-at-least-one-immense-term/154122)

<div class="topic-metadata">

**Author:** [@Prateek\_Gupta](https://discuss.elastic.co/u/Prateek_Gupta)\
**Replies:** 2\
**Last updated:** [October 26, 2018, 8:06am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-4-java-lang-illegalargumentexception-document-contains-at-least-one-immense-term/154122 "2018-10-26T08:06:09Z")

</div>

I am using Elasticsearch 6.2.4 and I am trying to index data in elasticsearch. Here is the template that I am using: { "order": 0, "template": "logs-\*", "settings": { "index": { "analysis": { …

---

## [Filebeat kubernetes autodiscover Multiple conditions](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscover-multiple-conditions/161145)

<div class="topic-metadata">

**Author:** [@icoolchn](https://discuss.elastic.co/u/icoolchn)\
**Replies:** 2\
**Last updated:** [December 19, 2018, 3:06am UTC](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscover-multiple-conditions/161145 "2018-12-19T03:06:07Z")

</div>

The problem is When the condition has “kubernetes.labels.log-index” ，fields:log\_topic: 'labels-{data.kubernetes.labels.log-index}', otherwise fields: log\_topic: 'aip-{data.kubernetes.namespace}-${data.kubernetes.pod.na…

---

## [Support Diagnostic tool](https://discuss.elastic.co/t/support-diagnostic-tool/130598)

<div class="topic-metadata">

**Author:** [@Rahul\_Pm](https://discuss.elastic.co/u/Rahul_Pm)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 10:00am UTC](https://discuss.elastic.co/t/support-diagnostic-tool/130598 "2018-05-04T10:00:04Z")

</div>

Hi, I'm trying to run the support diagnostic tool on my ELK node. The JAVA\_HOME variable is set. But i get an error that says: " Could not find or load main com.elastic.support.diagnostics.diagnosticapp " Please help…

---

## [Adding new node and resharding](https://discuss.elastic.co/t/adding-new-node-and-resharding/26951)

<div class="topic-metadata">

**Author:** [@aeryaguzov](https://discuss.elastic.co/u/aeryaguzov)\
**Replies:** 3\
**Last updated:** [August 7, 2015, 7:53am UTC](https://discuss.elastic.co/t/adding-new-node-and-resharding/26951 "2015-08-07T07:53:30Z")

</div>

Hi! I planned to use 4 nodes for index, but when I created index I had only 2 nodes for start and planned to buy other nodes when I need more storage space for index. So I created an index with 40 shards with "index.…

---

## [Protect some words when tokenizing](https://discuss.elastic.co/t/protect-some-words-when-tokenizing/10710)

<div class="topic-metadata">

**Author:** [@pdesoyres](https://discuss.elastic.co/u/pdesoyres)\
**Replies:** 7\
**Last updated:** [February 18, 2013, 4:43pm UTC](https://discuss.elastic.co/t/protect-some-words-when-tokenizing/10710 "2013-02-18T16:43:33Z")

</div>

Hi, I use for some fields the standard tokenizer and I would like to know if there is a way to prevent strings such as "c++", "c#" or ".net" to be tokenized as "c", "c" or "net" but to be kept unmodified. Thank…

---

## [Fleet Server Agent not listening](https://discuss.elastic.co/t/fleet-server-agent-not-listening/328388)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 4\
**Last updated:** [March 29, 2023, 4:17pm UTC](https://discuss.elastic.co/t/fleet-server-agent-not-listening/328388 "2023-03-29T16:17:17Z")

</div>

I'm trying to add a fleet server agent to my stack so I can get rid of the one living on old hardware. I've re-installed the fleet server agent (after running into Adding a Fleet Server integration to an agent that was …

---

## [Transform Object mapping to String mapping](https://discuss.elastic.co/t/transform-object-mapping-to-string-mapping/271)

<div class="topic-metadata">

**Author:** [@SimonM](https://discuss.elastic.co/u/SimonM)\
**Replies:** 4\
**Last updated:** [May 6, 2015, 5:26pm UTC](https://discuss.elastic.co/t/transform-object-mapping-to-string-mapping/271 "2015-05-06T17:26:11Z")

</div>

Hello, I'm quite new to ES and I'd like to know if it's possible to "convert" a field in a JSON document query represented as a JSON Object to a String. Here is my JSON : { "basketId": { "value": "myBasket" }, …

---

## [Unable to create elasticsearch index from logstash.conf file](https://discuss.elastic.co/t/unable-to-create-elasticsearch-index-from-logstash-conf-file/225693)

<div class="topic-metadata">

**Author:** [@sachinarora](https://discuss.elastic.co/u/sachinarora)\
**Replies:** 6\
**Last updated:** [April 3, 2020, 1:37pm UTC](https://discuss.elastic.co/t/unable-to-create-elasticsearch-index-from-logstash-conf-file/225693 "2020-04-03T13:37:30Z")

</div>

I am trying to create index of elasticsearch using logstash.conf file but I am not able to create index. There is not any error in logs of elasticsearch and logstash. After starting the logstash whenever I do url/\_cat/in…

---

## [Updating documents with excluded fields](https://discuss.elastic.co/t/updating-documents-with-excluded-fields/2644)

<div class="topic-metadata">

**Author:** [@Stefano\_Parmesan](https://discuss.elastic.co/u/Stefano_Parmesan)\
**Replies:** 2\
**Last updated:** [June 16, 2015, 6:18am UTC](https://discuss.elastic.co/t/updating-documents-with-excluded-fields/2644 "2015-06-16T06:18:11Z")

</div>

Hello everybody, I hope my question is not too trivial: I have an ES index with a mapping similar to the following (only the relevant part is shown): { "mappings": { "person": { "\_source": { "exc…

---

## [Elastic Stack 6.8.7 and 7.6.1 security update](https://discuss.elastic.co/t/elastic-stack-6-8-7-and-7-6-1-security-update/222136)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [March 4, 2020, 6:01pm UTC](https://discuss.elastic.co/t/elastic-stack-6-8-7-and-7-6-1-security-update/222136 "2020-03-04T18:01:20Z")

</div>

Kibana Node.js security flaws (ESA-2020-01) The version of Node.js shipped in all versions of Kibana prior to 7.6.1 and 6.8.7 contain three security flaws. CVE-2019-15604 describes a Denial of Service (DoS) flaw in the…

---

## [\[CH\] ES Meetup in Fribourg - Switzerland - 18th January 2017](https://discuss.elastic.co/t/ch-es-meetup-in-fribourg-switzerland-18th-january-2017/70765)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 0\
**Last updated:** [January 6, 2017, 9:45am UTC](https://discuss.elastic.co/t/ch-es-meetup-in-fribourg-switzerland-18th-january-2017/70765 "2017-01-06T09:45:29Z")

</div>

Here is the first 2017 ES meetup in Western Switzerland. We're happy to announce a great line-up: Philippe Cudré-Mauroux (from Scigility, eXascale, Uni Fribourg) will explain how they leveraged Logstash and Neo4J to …

---

## [Need to get Elastic Search current highest id](https://discuss.elastic.co/t/need-to-get-elastic-search-current-highest-id/17038)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 1\
**Last updated:** [September 28, 2015, 12:39pm UTC](https://discuss.elastic.co/t/need-to-get-elastic-search-current-highest-id/17038 "2015-09-28T12:39:44Z")

</div>

Hi All, I am new to elastic search. I am working on river jdbc mysql concepts I have a scenario like I need to get highest value for field "id" that is inserted in to elastic search.please suggest me how to bui…

---

## [Create index pattern from C# Nest](https://discuss.elastic.co/t/create-index-pattern-from-c-nest/249113)

<div class="topic-metadata">

**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 1:09pm UTC](https://discuss.elastic.co/t/create-index-pattern-from-c-nest/249113 "2020-10-06T13:09:22Z")

</div>

Hello everyone. I need to create an index pattern using C # Nest, without using kibana. I searched the Nest API but didn't find it. Is possible create index pattern using the Nest API? Regards, Alder

---

## [WARN exception caught on transport layer 1.4.2](https://discuss.elastic.co/t/warn-exception-caught-on-transport-layer-1-4-2/21984)

<div class="topic-metadata">

**Author:** [@Felix\_Kutscher](https://discuss.elastic.co/u/Felix_Kutscher)\
**Replies:** 2\
**Last updated:** [December 28, 2015, 6:05pm UTC](https://discuss.elastic.co/t/warn-exception-caught-on-transport-layer-1-4-2/21984 "2015-12-28T18:05:21Z")

</div>

Hello, we set up a new cluster with RHEL 7 2 Data Nodes 3 Master Nodes 5 Shards So we use elasticsearch-kopf (https://github.com/lmenezes/elasticsearch-kopf), but it do not work. elasticserach.log…

---

## [No Throughput result in the summary report](https://discuss.elastic.co/t/no-throughput-result-in-the-summary-report/76906)

<div class="topic-metadata">

**Author:** [@loganw](https://discuss.elastic.co/u/loganw)\
**Replies:** 8\
**Last updated:** [March 3, 2017, 7:01am UTC](https://discuss.elastic.co/t/no-throughput-result-in-the-summary-report/76906 "2017-03-03T07:01:17Z")

</div>

Hi, There is no result for following 3 metrics: ... | All | Min Throughput | index-append | | docs/s | | All | Median Throughput | index-append | | docs/s | | All | …

---

## [Request Body is Required](https://discuss.elastic.co/t/request-body-is-required/321139)

<div class="topic-metadata">

**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\
**Replies:** 6\
**Last updated:** [December 13, 2022, 3:24pm UTC](https://discuss.elastic.co/t/request-body-is-required/321139 "2022-12-13T15:24:23Z")

</div>

Hello, every time i try to use the Kibana Dev Tools, if the request has a body it fails with this: Yes, there are no newlines and also the request body is there: I saw many similar threads, but all without soluti…

---

## [Need help with a NOT in if statement, is it "not" or "!"?](https://discuss.elastic.co/t/need-help-with-a-not-in-if-statement-is-it-not-or/299486)

<div class="topic-metadata">

**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\
**Replies:** 1\
**Last updated:** [March 11, 2022, 6:58pm UTC](https://discuss.elastic.co/t/need-help-with-a-not-in-if-statement-is-it-not-or/299486 "2022-03-11T18:58:41Z")

</div>

\# filter out local ips if !(\[http\]\[request\]\[headers\]\[CF-Connecting-IP\] =~ "^10.0.\*" or \[http\]\[request\]\[headers\]\[CF-Connecting-IP\] =~ "^127.0.\*" or \[http\]\[request\]\[headers\]\[CF-Connecting-IP\] == "0.0.0.0") …

---

## [Integration](https://discuss.elastic.co/t/integration/326744)

<div class="topic-metadata">

**Author:** [@bex](https://discuss.elastic.co/u/bex)\
**Replies:** 7\
**Last updated:** [March 3, 2023, 6:46am UTC](https://discuss.elastic.co/t/integration/326744 "2023-03-03T06:46:36Z")

</div>

I would like to clarify, what is the difference between "EndPoint Security" and "Elastic Defend" integrations? But there is only "Elastic Defend" in "integration" tab. But in "rules", it is asked to add "Endpoint securi…

---

## [Not getting index in Discover section](https://discuss.elastic.co/t/not-getting-index-in-discover-section/91294)

<div class="topic-metadata">

**Author:** [@raghvendra](https://discuss.elastic.co/u/raghvendra)\
**Replies:** 2\
**Last updated:** [June 30, 2017, 6:19am UTC](https://discuss.elastic.co/t/not-getting-index-in-discover-section/91294 "2017-06-30T06:19:18Z")

</div>

Hey.. i have created new index named "check" and "check-new " by adding index name in config file of logstash . Other than these two indices , I had left everything on default. I am dealing with apache access log data .…

---

## [Curator Snapshot and S3 file name](https://discuss.elastic.co/t/curator-snapshot-and-s3-file-name/87185)

<div class="topic-metadata">

**Author:** [@\_sar](https://discuss.elastic.co/u/_sar)\
**Replies:** 5\
**Last updated:** [May 26, 2017, 4:37pm UTC](https://discuss.elastic.co/t/curator-snapshot-and-s3-file-name/87185 "2017-05-26T16:37:55Z")

</div>

I have curator configured and working properly by taking snapshots and sending them to a bucket in S3. What I can't seem to understand is how to have the filename in S3 match the snapshot name specified in the config fil…

---

## [Repeated delimiters with dissect , how to handle?](https://discuss.elastic.co/t/repeated-delimiters-with-dissect-how-to-handle/90888)

<div class="topic-metadata">

**Author:** [@Grigory\_Shamov1](https://discuss.elastic.co/u/Grigory_Shamov1)\
**Replies:** 4\
**Last updated:** [June 29, 2017, 9:09am UTC](https://discuss.elastic.co/t/repeated-delimiters-with-dissect-how-to-handle/90888 "2017-06-29T09:09:56Z")

</div>

Hi, Is there a way to change the default behaviour of dissect filter that takes repeated delimiters for single one? It causes problem with empty fields between same delimiters, like for its comma delimited string A…

---

## [Logstash to ES with postgres](https://discuss.elastic.co/t/logstash-to-es-with-postgres/45080)

<div class="topic-metadata">

**Author:** [@Jpuch](https://discuss.elastic.co/u/Jpuch)\
**Replies:** 4\
**Last updated:** [March 23, 2016, 9:22am UTC](https://discuss.elastic.co/t/logstash-to-es-with-postgres/45080 "2016-03-23T09:22:46Z")

</div>

Hi there, I'm trying to set up an ELK system to have a better overview over some data. I have to flash code scanne which fill up a PostgreSQL database (Date - Hour - ID ect) So i installed ELK follywing a random tuto…

---

## [Mint Linux Service (running Elasticsearch as a service on Mint Linux)](https://discuss.elastic.co/t/mint-linux-service-running-elasticsearch-as-a-service-on-mint-linux/44169)

<div class="topic-metadata">

**Author:** [@Mithel](https://discuss.elastic.co/u/Mithel)\
**Replies:** 4\
**Last updated:** [March 11, 2016, 4:29pm UTC](https://discuss.elastic.co/t/mint-linux-service-running-elasticsearch-as-a-service-on-mint-linux/44169 "2016-03-11T16:29:03Z")

</div>

Could someone help me get Elasticsearch set up as a service on Mint Linux? Running Elasticsearch on Windows is no problem, running Elasticsearch manually on Mint is no problem. But I need help combining two tidbits o…

---

## [Safely deleting indices](https://discuss.elastic.co/t/safely-deleting-indices/162525)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 3\
**Last updated:** [December 31, 2018, 5:50pm UTC](https://discuss.elastic.co/t/safely-deleting-indices/162525 "2018-12-31T17:50:46Z")

</div>

I wanted to clean up old indices so I deleted them. Now, I have started seeing the following exceptions. \[2018-12-31T07:22:02,260\]\[WARN \]\[o.e.i.s.GlobalCheckpointSyncAction\] \[elkelastic01.host1\] unexpected error during …

---

## [Nginx module is trying to parsing each log entry as access and error log](https://discuss.elastic.co/t/nginx-module-is-trying-to-parsing-each-log-entry-as-access-and-error-log/193631)

<div class="topic-metadata">

**Author:** [@Mawalu](https://discuss.elastic.co/u/Mawalu)\
**Replies:** 8\
**Last updated:** [August 12, 2019, 3:13am UTC](https://discuss.elastic.co/t/nginx-module-is-trying-to-parsing-each-log-entry-as-access-and-error-log/193631 "2019-08-12T03:13:20Z")

</div>

I've setup filebeat in docker with hints to collect logs of my nginx container. In ES all log entries appear twice, once parsed by the correct fileset (access or error) and once unparsed with a grok error by the other fi…

---

## [Logstash jdbc plugin - nested data](https://discuss.elastic.co/t/logstash-jdbc-plugin-nested-data/33908)

<div class="topic-metadata">

**Author:** [@jrizzi1](https://discuss.elastic.co/u/jrizzi1)\
**Replies:** 8\
**Last updated:** [September 7, 2016, 5:25pm UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-nested-data/33908 "2016-09-07T17:25:31Z")

</div>

I am in process of attempting to migrate from using the old jdbc river plugin to using logstash 1.5 / logstash jdbc plugin I am however running into some difficulty, if i previously had 50 rows with 20 having unique id…

---

## [Logstash is stuck?](https://discuss.elastic.co/t/logstash-is-stuck/141571)

<div class="topic-metadata">

**Author:** [@emanresu](https://discuss.elastic.co/u/emanresu)\
**Replies:** 4\
**Last updated:** [July 25, 2018, 2:41pm UTC](https://discuss.elastic.co/t/logstash-is-stuck/141571 "2018-07-25T14:41:26Z")

</div>

I'd like to load a csv into Elastic using Logstash. This is the output of my run: / C:\\Users...\\Documents\\logstash-6.3.1\\logstash-6.3.1\\bin\>logstash -f logstash\_rplim3.config Sending Logstash's logs to C:/Users/.../Doc…

---

## [How to connect two servers to Filebeat?](https://discuss.elastic.co/t/how-to-connect-two-servers-to-filebeat/180162)

<div class="topic-metadata">

**Author:** [@zenimagine](https://discuss.elastic.co/u/zenimagine)\
**Replies:** 5\
**Last updated:** [May 9, 2019, 1:57pm UTC](https://discuss.elastic.co/t/how-to-connect-two-servers-to-filebeat/180162 "2019-05-09T13:57:45Z")

</div>

I have 2 servers HTTPS with let's Encrypt : monitoring.example.com with ELK (IP: 11.11.111.111) www.example.com with my site in production (IP: 22.22.222.222) To install and configure ELK, I followed this tutorial : …

---

## [Changing field type in Kibana UI](https://discuss.elastic.co/t/changing-field-type-in-kibana-ui/129896)

<div class="topic-metadata">

**Author:** [@cactus](https://discuss.elastic.co/u/cactus)\
**Replies:** 3\
**Last updated:** [April 30, 2018, 12:39am UTC](https://discuss.elastic.co/t/changing-field-type-in-kibana-ui/129896 "2018-04-30T00:39:31Z")

</div>

Hello, I need to change field type from string to text, can I do it via Kibana in index patterns-\>fields or should it be done via static mapping in elasticsearch default template. What is the difference? Thanks Kibana…

---

## [Agent binary download source location not working](https://discuss.elastic.co/t/agent-binary-download-source-location-not-working/316925)

<div class="topic-metadata">

**Author:** [@andrisarkameru](https://discuss.elastic.co/u/andrisarkameru)\
**Replies:** 0\
**Last updated:** [October 18, 2022, 5:09pm UTC](https://discuss.elastic.co/t/agent-binary-download-source-location-not-working/316925 "2022-10-18T17:09:40Z")

</div>

Hello, I'm using elasticsearch/kibana version 8.4.2 on windows containers. It seems that Kibana fleet binary download source setting does not work, or does not get taken into account. i'm following the air-gapped inst…

---

## [Logback support-library for JSON-logging](https://discuss.elastic.co/t/logback-support-library-for-json-logging/113799)

<div class="topic-metadata">

**Author:** [@skjolber](https://discuss.elastic.co/u/skjolber)\
**Replies:** 0\
**Last updated:** [January 2, 2018, 3:10pm UTC](https://discuss.elastic.co/t/logback-support-library-for-json-logging/113799 "2018-01-02T15:10:59Z")

</div>

Hi, I've written a simple library designed to help with JSON-logging for Java projects using Logback. In a nutshell, a Maven plugin generates Java helper code from a simple YAML file (think master dictionary). Elastic c…

---

## [Document level security: placeholders for USERNAME and ROLE in the role's query](https://discuss.elastic.co/t/document-level-security-placeholders-for-username-and-role-in-the-roles-query/71953)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 7\
**Last updated:** [January 23, 2017, 9:23pm UTC](https://discuss.elastic.co/t/document-level-security-placeholders-for-username-and-role-in-the-roles-query/71953 "2017-01-23T21:23:18Z")

</div>

Hello All, I'm wondering if it is possible to use placeholders (like {USERNAME} or {ROLENAME} in the "Edit Role" query for restricting access to some documents? Let's say, we'd have the following ACL field in a docume…

---

## [Aggregation: Removing empty buckets from the response](https://discuss.elastic.co/t/aggregation-removing-empty-buckets-from-the-response/2594)

<div class="topic-metadata">

**Author:** [@jdh2550](https://discuss.elastic.co/u/jdh2550)\
**Replies:** 1\
**Last updated:** [June 13, 2015, 5:03am UTC](https://discuss.elastic.co/t/aggregation-removing-empty-buckets-from-the-response/2594 "2015-06-13T05:03:39Z")

</div>

I'm using nested aggregations to find duplicates in a nested array. I only expect there to be few duplicates (say 3 duplicates out of 500 possible values across 10,000 documents). The response I get back from my query…

[Previous page](https://discuss.elastic.co/top.md?page=605&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=607&per_page=50&period=all)
