# Top **URL:** https://discuss.elastic.co/top.md?page=609&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 610 --- ## [Removing nested fields with empty field names](https://discuss.elastic.co/t/removing-nested-fields-with-empty-field-names/138406)
**Author:** [@Mugen](https://discuss.elastic.co/u/Mugen)\ **Replies:** 3\ **Last updated:** [July 4, 2018, 7:41am UTC](https://discuss.elastic.co/t/removing-nested-fields-with-empty-field-names/138406 "2018-07-04T07:41:48Z")
Hi guys, I've got the following problem: Some of my events somehow get sent to logstash with a field consisiting of an empty name and an empty value (\[records\]\[conditions\]\[""\]). Of course Elasticsearch doesn't like thi… --- ## [ClassCastException in ESTestCase + SLF4J](https://discuss.elastic.co/t/classcastexception-in-estestcase-slf4j/69040)
**Author:** [@iref](https://discuss.elastic.co/u/iref)\ **Replies:** 2\ **Last updated:** [December 14, 2016, 5:09pm UTC](https://discuss.elastic.co/t/classcastexception-in-estestcase-slf4j/69040 "2016-12-14T17:09:22Z")
Hi, I tried to use ESSingleNodeTestCase (Elasticsearch v5.0.1) in my project, but tests throw following exception: java.lang.ClassCastException: org.apache.logging.slf4j.SLF4JLoggerContext cannot be cast to org.apach… --- ## [Multi\_match with type phrase\_prefix and fuzziness](https://discuss.elastic.co/t/multi-match-with-type-phrase-prefix-and-fuzziness/16908)
**Author:** [@chimpsarehungry](https://discuss.elastic.co/u/chimpsarehungry)\ **Replies:** 0\ **Last updated:** [April 9, 2014, 9:32pm UTC](https://discuss.elastic.co/t/multi-match-with-type-phrase-prefix-and-fuzziness/16908 "2014-04-09T21:32:26Z")
It seems to me that a multimatch query with type phrase\_prefix does not support fuzziness ... but a multimatch query with type match\_phrase\_prefix does. I like the results from phrase\_prefix better than match\_phra… --- ## [Why does action.destructive\_requires\_name doesn't work for](https://discuss.elastic.co/t/why-does-action-destructive-requires-name-doesnt-work-for/16252)
**Author:** [@theGhost](https://discuss.elastic.co/u/theGhost)\ **Replies:** 0\ **Last updated:** [March 9, 2014, 11:20am UTC](https://discuss.elastic.co/t/why-does-action-destructive-requires-name-doesnt-work-for/16252 "2014-03-09T11:20:19Z")
I accidentally deleted all indexes, due to this serious interface flaw of elasticsearch. I issued a CURL delete request on http://:9200 & all my indexes were lost. Why would elasticsearch entertain such a destruct… --- ## [Plugin installation was unsuccessful due to error "No valid url specified." on SOC Workflow App](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-no-valid-url-specified-on-soc-workflow-app/225007)
**Author:** [@proxx](https://discuss.elastic.co/u/proxx)\ **Replies:** 5\ **Last updated:** [March 25, 2020, 6:23pm UTC](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-no-valid-url-specified-on-soc-workflow-app/225007 "2020-03-25T18:23:58Z")
Hello, As anyone encounter this error while install the SOC Workflow app \[root@elk1 ~\]# /usr/share/kibana/bin/./kibana-plugin install /usr/share/kibana/soc\_workflow\_app\_ce/dist/soc\_workflow\_ce-master.zip Kibana should … --- ## [Delete document in elastic in ingest based on condition](https://discuss.elastic.co/t/delete-document-in-elastic-in-ingest-based-on-condition/110838)
**Author:** [@vivekthangathurai](https://discuss.elastic.co/u/vivekthangathurai)\ **Replies:** 5\ **Last updated:** [December 11, 2017, 2:34pm UTC](https://discuss.elastic.co/t/delete-document-in-elastic-in-ingest-based-on-condition/110838 "2017-12-11T14:34:14Z")
my requirement is that I need to drop the records which are matching a condition. I am able to delete the records once it is indexed. but i would like to delete the documents using the ingest pipeline or filebeat filter. … --- ## [ProblemChild Getting Started question](https://discuss.elastic.co/t/problemchild-getting-started-question/273338)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [May 18, 2021, 9:51pm UTC](https://discuss.elastic.co/t/problemchild-getting-started-question/273338 "2021-05-18T21:51:32Z")
Hello, Just read through ProblemChild: Detecting living-off-the-land attacks using the Elastic Stack | Elastic Blog which all seems super interesting. So.. Forgive me for my noobish questions.. But I was wondering how… --- ## [Week of the year / sunday of the week](https://discuss.elastic.co/t/week-of-the-year-sunday-of-the-week/267529)
**Author:** [@lachlann562](https://discuss.elastic.co/u/lachlann562)\ **Replies:** 1\ **Last updated:** [March 30, 2021, 9:58am UTC](https://discuss.elastic.co/t/week-of-the-year-sunday-of-the-week/267529 "2021-03-30T09:58:53Z")
Week of the year is challenging when handling year rolling, etc. a previous article was: Week of the year aggregations using Painless - Elastic Stack / Elasticsearch - Discuss the Elastic Stack I found a simple solutio… --- ## [Elastic Search Pagination](https://discuss.elastic.co/t/elastic-search-pagination/240141)
**Author:** [@ankitkothana](https://discuss.elastic.co/u/ankitkothana)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 12:36am UTC](https://discuss.elastic.co/t/elastic-search-pagination/240141 "2020-07-08T00:36:11Z")
I am using elastic search with composite aggregation for pagination. Response does provide me an after\_key attribute for getting to next page. Is there any way/attribute for getting to previous page from current page? I… --- ## [Filter by index in ES/Kibana 5.3](https://discuss.elastic.co/t/filter-by-index-in-es-kibana-5-3/102467)
**Author:** [@mstaudinger](https://discuss.elastic.co/u/mstaudinger)\ **Replies:** 4\ **Last updated:** [October 5, 2017, 9:12pm UTC](https://discuss.elastic.co/t/filter-by-index-in-es-kibana-5-3/102467 "2017-10-05T21:12:21Z")
Hi Folks, I'm currently running a production server with Kibana 4.5.0 on FreeBSD (10.3) I'm also evaluating on a test box Elastic 5.3 / Kibana 5.3 on FreeBSD (11.0) I'm pretty jazzed about the possibilities with the t… --- ## [What is the allocation process when a primary shard goes down?](https://discuss.elastic.co/t/what-is-the-allocation-process-when-a-primary-shard-goes-down/36838)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 4\ **Last updated:** [December 10, 2015, 12:57pm UTC](https://discuss.elastic.co/t/what-is-the-allocation-process-when-a-primary-shard-goes-down/36838 "2015-12-10T12:57:04Z")
I've seen lots of people that talk about wanting primary shard evenly distributed - or not to be on certain nodes and the general answer given is "why - it doesn't matter - the replica does the same work as the primary". … --- ## [Filtering on beats fields issue](https://discuss.elastic.co/t/filtering-on-beats-fields-issue/96028)
**Author:** [@Puk](https://discuss.elastic.co/u/Puk)\ **Replies:** 6\ **Last updated:** [August 8, 2017, 8:19pm UTC](https://discuss.elastic.co/t/filtering-on-beats-fields-issue/96028 "2017-08-08T20:19:51Z")
Fairly new to ELK Stack so please bear with me :slight\_smile: I have a single beats.conf file in Logstash at the moment for a new deployment and I thought it was all working fine, however when trying to make some change… --- ## [Does Elastic APM support Quarkus?](https://discuss.elastic.co/t/does-elastic-apm-support-quarkus/284167)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [September 14, 2021, 9:40am UTC](https://discuss.elastic.co/t/does-elastic-apm-support-quarkus/284167 "2021-09-14T09:40:22Z")
Hello, Does Elastic APM support Quarkus? Grtz Willem --- ## [Find & Separately Store Array Duplicates](https://discuss.elastic.co/t/find-separately-store-array-duplicates/108175)
**Author:** [@kbarresi](https://discuss.elastic.co/u/kbarresi)\ **Replies:** 4\ **Last updated:** [November 27, 2017, 5:16pm UTC](https://discuss.elastic.co/t/find-separately-store-array-duplicates/108175 "2017-11-27T17:16:10Z")
Hello, I have a large set of documents, each with an item\_ids array of integers, like such: { "item\_ids" : \[ 1, 2, 3, 3, 4 5, 5 \] } What I would like to do is filter a search by finding documents where the same ite… --- ## [Fatal error when Kibana (4.1.0) with ES (1.6.0) on X86\_64](https://discuss.elastic.co/t/fatal-error-when-kibana-4-1-0-with-es-1-6-0-on-x86-64/24817)
**Author:** [@samding](https://discuss.elastic.co/u/samding)\ **Replies:** 4\ **Last updated:** [July 3, 2015, 5:19pm UTC](https://discuss.elastic.co/t/fatal-error-when-kibana-4-1-0-with-es-1-6-0-on-x86-64/24817 "2015-07-03T17:19:43Z")
Hi I started Elasticsseach (1.6.0) and Kibana (4.1.0) on RHEL 6 (x86\_64), but form browser got following error msg: Error: This version of Kibana requires Elasticsearch 1.4.4 or higher on all nodes. I found the fol… --- ## [Question about "Rollover" in Index Lifecycle Policy](https://discuss.elastic.co/t/question-about-rollover-in-index-lifecycle-policy/284005)
**Author:** [@vp096](https://discuss.elastic.co/u/vp096)\ **Replies:** 8\ **Last updated:** [September 16, 2021, 6:01am UTC](https://discuss.elastic.co/t/question-about-rollover-in-index-lifecycle-policy/284005 "2021-09-16T06:01:13Z")
Hello to all, I have a question when I configure my first "Index Lifecycle Policy". I am given the following option: Is this a problem or a risk of data loss if I don't enable it? Because I want to keep my data for … --- ## [Search API returns zero hits](https://discuss.elastic.co/t/search-api-returns-zero-hits/185963)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 3\ **Last updated:** [June 17, 2019, 9:47pm UTC](https://discuss.elastic.co/t/search-api-returns-zero-hits/185963 "2019-06-17T21:47:57Z")
Hi, I have been witnessing a weird behavior when trying to query elasticsearch. Ex: GET my\_logs\*/\_search { "query": {"bool": {"must": \[ {"range": {"timestamp": {"gt": "now-1M"… --- ## [Event Caching?](https://discuss.elastic.co/t/event-caching/109668)
**Author:** [@BrandonF](https://discuss.elastic.co/u/BrandonF)\ **Replies:** 8\ **Last updated:** [November 30, 2017, 7:06pm UTC](https://discuss.elastic.co/t/event-caching/109668 "2017-11-30T19:06:09Z")
Brand new to beats and really loving it so far. Just getting starting with optimizations and am not seeing anything for any type of event caching. I see the parameters for retries on publishing events: # The number of t… --- ## [Elasticsearch php client range and search](https://discuss.elastic.co/t/elasticsearch-php-client-range-and-search/96951)
**Author:** [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)\ **Replies:** 2\ **Last updated:** [August 21, 2017, 11:54am UTC](https://discuss.elastic.co/t/elasticsearch-php-client-range-and-search/96951 "2017-08-21T11:54:12Z")
I am using the following query : $params = \[‘index’ =\> ‘201706’, ‘type’ =\> ‘youtube’,‘body’ =\> \[‘query’ =\> \[ ‘bool’ =\> \[ ‘filter’ =\> \[‘range’ =\> \[‘created\_at’ =\> \[ ‘gte’=\> ‘2017-06-25 00:00:00’,‘lte’ =\> ‘2017-09-30 00… --- ## [Filebeat not picking logs when run as service](https://discuss.elastic.co/t/filebeat-not-picking-logs-when-run-as-service/93632)
**Author:** [@pavanssetty](https://discuss.elastic.co/u/pavanssetty)\ **Replies:** 5\ **Last updated:** [August 2, 2017, 3:18pm UTC](https://discuss.elastic.co/t/filebeat-not-picking-logs-when-run-as-service/93632 "2017-08-02T15:18:15Z")
I am using Filebeat 5.4 version on Windows Server 2012. When I run filebeat from PowerShell or Command Prompt it is shipping logs successfully to my logstash instance running on Command Prompt. But when I try installing … --- ## [Elasticsearch startup error with 0.0.0.0](https://discuss.elastic.co/t/elasticsearch-startup-error-with-0-0-0-0/185635)
**Author:** [@Imrankhan\_Patan](https://discuss.elastic.co/u/Imrankhan_Patan)\ **Replies:** 3\ **Last updated:** [June 13, 2019, 1:27pm UTC](https://discuss.elastic.co/t/elasticsearch-startup-error-with-0-0-0-0/185635 "2019-06-13T13:27:18Z")
I am trying to set up single node elasticsearch on RHEL virtual machine. It is running fine with default configuration of 127.0.0.1, but its not available outside the VM. when I changed the network.host "0.0.0.0" its not… --- ## [Force logstash+FILEBEAT to reindex csv file](https://discuss.elastic.co/t/force-logstash-filebeat-to-reindex-csv-file/166219)
**Author:** [@Aralex](https://discuss.elastic.co/u/Aralex)\ **Replies:** 7\ **Last updated:** [February 7, 2019, 10:42am UTC](https://discuss.elastic.co/t/force-logstash-filebeat-to-reindex-csv-file/166219 "2019-02-07T10:42:33Z")
Hi, I'm trying to do the same as in this post: except a big difference: the solution in the post above is using only logstash, while my pipeline ships data using filebeat to logstash. The file input plugin of logstash… --- ## [Jdbc Input error cause : no sqljdbc\_auth in java.library.path](https://discuss.elastic.co/t/jdbc-input-error-cause-no-sqljdbc-auth-in-java-library-path/49698)
**Author:** [@Alejandro\_Valdes\_Arc](https://discuss.elastic.co/u/Alejandro_Valdes_Arc)\ **Replies:** 1\ **Last updated:** [May 11, 2016, 9:51pm UTC](https://discuss.elastic.co/t/jdbc-input-error-cause-no-sqljdbc-auth-in-java-library-path/49698 "2016-05-11T21:51:35Z")
Hello everyone Im trying to connect to a Sql Server database with integrated authentication, i tried with 3 differents drivers sqljdbc4.jar, sqljdbc.jar, sqljdbc41.jar and differents conections strings jdbc\_connecti… --- ## [Run elasticsearch code source without docker](https://discuss.elastic.co/t/run-elasticsearch-code-source-without-docker/243060)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 4\ **Last updated:** [July 31, 2020, 10:03am UTC](https://discuss.elastic.co/t/run-elasticsearch-code-source-without-docker/243060 "2020-07-31T10:03:30Z")
Hello everybody, I am trying to run elasticsearch code source, and when I try to run the command ./gradlew assemble I am getting this exception: ======================================= Elasticsearch Build Hamster says… --- ## [How to store a byte array? How to reference a stored field in a Filter implementation?](https://discuss.elastic.co/t/how-to-store-a-byte-array-how-to-reference-a-stored-field-in-a-filter-implementation/10058)
**Author:** [@Jeffrey\_Gerard](https://discuss.elastic.co/u/Jeffrey_Gerard)\ **Replies:** 4\ **Last updated:** [December 13, 2012, 11:48pm UTC](https://discuss.elastic.co/t/how-to-store-a-byte-array-how-to-reference-a-stored-field-in-a-filter-implementation/10058 "2012-12-13T23:48:11Z")
Greetings! I'm trying to implement a custom mapping where a byte array field is stored (but not indexed for searching), and the byte array is available as side data to a custom filter. However I run into two chal… --- ## ["Could not index event" due to "field already exists"](https://discuss.elastic.co/t/could-not-index-event-due-to-field-already-exists/281229)
**Author:** [@looknleap](https://discuss.elastic.co/u/looknleap)\ **Replies:** 8\ **Last updated:** [August 13, 2021, 9:24pm UTC](https://discuss.elastic.co/t/could-not-index-event-due-to-field-already-exists/281229 "2021-08-13T21:24:22Z")
Data path: Windows Sysmon --\> Winlogbeat --\> Logstash --\> Elasticsearch Problem: Certain new events are unable to be indexed: "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"field \[process.pe.… --- ## [Performance capped - low events received rate](https://discuss.elastic.co/t/performance-capped-low-events-received-rate/167287)
**Author:** [@stef97](https://discuss.elastic.co/u/stef97)\ **Replies:** 8\ **Last updated:** [February 7, 2019, 2:17pm UTC](https://discuss.elastic.co/t/performance-capped-low-events-received-rate/167287 "2019-02-07T14:17:13Z")
I have a logstash 5.6.9 that seems to have its performance capped and/or very low events received rate It is a Virtual machine so event throughing resources at it ( doubling CPU, RAM ) does not help I also tried play… --- ## [Filebeat Nginx Module with Dockerized Nginx](https://discuss.elastic.co/t/filebeat-nginx-module-with-dockerized-nginx/179589)
**Author:** [@tpurcell](https://discuss.elastic.co/u/tpurcell)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 1:39pm UTC](https://discuss.elastic.co/t/filebeat-nginx-module-with-dockerized-nginx/179589 "2019-05-06T13:39:41Z")
Hello I'm running the ELK stack with all components at version 7.0.1 in an Ubuntu 18.04 environment. I want to process logs from an nginx docker container that is setup to send access logs to stdout and error logs to s… --- ## [Fleet server lose agents at restart](https://discuss.elastic.co/t/fleet-server-lose-agents-at-restart/325477)
**Author:** [@K8pl3r](https://discuss.elastic.co/u/K8pl3r)\ **Replies:** 5\ **Last updated:** [February 15, 2023, 1:13pm UTC](https://discuss.elastic.co/t/fleet-server-lose-agents-at-restart/325477 "2023-02-15T13:13:52Z")
Hello I'm a student who's getting started with Elastic, I have configured my stack with elasticsearch and Kibana. I have an issue when I reboot my fleet server, all of my elastic-agents are offline (I have enabled the … --- ## [Analyzer, mapping et apostrophe](https://discuss.elastic.co/t/analyzer-mapping-et-apostrophe/25235)
**Author:** [@spawnInt](https://discuss.elastic.co/u/spawnInt)\ **Replies:** 5\ **Last updated:** [July 9, 2015, 3:02pm UTC](https://discuss.elastic.co/t/analyzer-mapping-et-apostrophe/25235 "2015-07-09T15:02:39Z")
Bonjour, Je suis en train de monter en compétence sur elasticsearch. Je m’intéresse maintenant aux analyzer et aux mapping afin d'avoir un moteur de recherche pertinent. A ce sujet, j'ai lu pas mal d'article en plus de… --- ## [Elasticsearch init script for centos or rhel?](https://discuss.elastic.co/t/elasticsearch-init-script-for-centos-or-rhel/16376)
**Author:** [@Dominic\_Nicholas](https://discuss.elastic.co/u/Dominic_Nicholas)\ **Replies:** 5\ **Last updated:** [July 16, 2014, 7:44am UTC](https://discuss.elastic.co/t/elasticsearch-init-script-for-centos-or-rhel/16376 "2014-07-16T07:44:59Z")
Hi - can someone please point me to an /etc/init.d script for elasticsearch 1.0.1 for CentOS or RHEL ? Thanks -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. … --- ## [Kibana plugin, hack file](https://discuss.elastic.co/t/kibana-plugin-hack-file/144810)
**Author:** [@ytzlax](https://discuss.elastic.co/u/ytzlax)\ **Replies:** 7\ **Last updated:** [August 17, 2018, 1:14pm UTC](https://discuss.elastic.co/t/kibana-plugin-hack-file/144810 "2018-08-17T13:14:19Z")
Hi, I have kibana plugin, and I want to listen to specific changes in the store,my question is how can I subscribe to specific selectors in the hack file? Can you give me example? Thanks --- ## [Parsing CSV =\> columns semicolon separated =\> values with commas](https://discuss.elastic.co/t/parsing-csv-columns-semicolon-separated-values-with-commas/131612)
**Author:** [@jiona](https://discuss.elastic.co/u/jiona)\ **Replies:** 3\ **Last updated:** [May 13, 2018, 10:53am UTC](https://discuss.elastic.co/t/parsing-csv-columns-semicolon-separated-values-with-commas/131612 "2018-05-13T10:53:53Z")
Hi all, I am trying to parse a csv files with logstash. The csv contains semicolon separated columns and values contain commas. That's my csv-file: Study number;Series description;Value1;Value2;Value3 5870;Text Inf… --- ## [Gelf with log4j 1.2](https://discuss.elastic.co/t/gelf-with-log4j-1-2/121131)
**Author:** [@Mouglou](https://discuss.elastic.co/u/Mouglou)\ **Replies:** 3\ **Last updated:** [February 28, 2018, 4:59pm UTC](https://discuss.elastic.co/t/gelf-with-log4j-1-2/121131 "2018-02-28T16:59:17Z")
Hi all, First post on this forum, so hi all ! And long life to elastic ! :vulcan\_salute: I'm here cause I need some advice about GELF and log4j. As for now, we used "log4j" input to receive data from app using log4j 1… --- ## [Kibana 6.5.3 javax.net.ssl.SSLHandshakeException: null cert chain](https://discuss.elastic.co/t/kibana-6-5-3-javax-net-ssl-sslhandshakeexception-null-cert-chain/161375)
**Author:** [@totsugeki](https://discuss.elastic.co/u/totsugeki)\ **Replies:** 4\ **Last updated:** [December 21, 2018, 3:04pm UTC](https://discuss.elastic.co/t/kibana-6-5-3-javax-net-ssl-sslhandshakeexception-null-cert-chain/161375 "2018-12-21T15:04:28Z")
Hello everyone. I have an elastic cluster in 6.2.4, with the x-pack plugin, a licence, and full ssl required (http, transports) A kibana is also installed and is authenticated with signed certificates I am trying to i… --- ## [If condition, with csv filter not working](https://discuss.elastic.co/t/if-condition-with-csv-filter-not-working/99283)
**Author:** [@vipinkumar](https://discuss.elastic.co/u/vipinkumar)\ **Replies:** 4\ **Last updated:** [September 8, 2017, 10:11am UTC](https://discuss.elastic.co/t/if-condition-with-csv-filter-not-working/99283 "2017-09-08T10:11:02Z")
i am trying to apply ‘if’ condition on the bases of field which i have defined in filebeat.yml file, and inside ‘if’ condition i have placed a csv filter which is supposed to filter the data and those data should be d… --- ## [Logstash & Beat :index\_not\_found\_exception](https://discuss.elastic.co/t/logstash-beat-index-not-found-exception/137137)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 7\ **Last updated:** [June 24, 2018, 9:20am UTC](https://discuss.elastic.co/t/logstash-beat-index-not-found-exception/137137 "2018-06-24T09:20:52Z")
Hello, I am following theLogstash tutorial . This Command curl -XGET 'localhost:9200/logstash-2018.06.24/\_search?q=response=200' returns the following error, instead of the data shown in the tutorial: { "error" : { "… --- ## [\[6.0.0alpha\] Packetbeat - multiple types](https://discuss.elastic.co/t/6-0-0alpha-packetbeat-multiple-types/87220)
**Author:** [@Oozza](https://discuss.elastic.co/u/Oozza)\ **Replies:** 7\ **Last updated:** [May 29, 2017, 3:14pm UTC](https://discuss.elastic.co/t/6-0-0alpha-packetbeat-multiple-types/87220 "2017-05-29T15:14:52Z")
While running fresh Elastic stack version 6.0.0 alpha, most Packetbeat events cannot be indexed. I have loaded Packetbeat template into Elasticsearch before running Logstash and Packetbeat. Logstash only indexes even… --- ## [How long does it take to expunge deleted documents?](https://discuss.elastic.co/t/how-long-does-it-take-to-expunge-deleted-documents/40678)
**Author:** [@hwang251](https://discuss.elastic.co/u/hwang251)\ **Replies:** 7\ **Last updated:** [February 29, 2016, 7:51pm UTC](https://discuss.elastic.co/t/how-long-does-it-take-to-expunge-deleted-documents/40678 "2016-02-29T19:51:53Z")
I'm trying to expunge deleted documents from our cluster. When I try to use the optimize API through curl, I usually get a 504 gateway timeout. And after the call, I usually see my store size grows in size. How long shou… --- ## [Filebeat Multiline Docker Log](https://discuss.elastic.co/t/filebeat-multiline-docker-log/167153)
**Author:** [@shauryagarg2006](https://discuss.elastic.co/u/shauryagarg2006)\ **Replies:** 6\ **Last updated:** [February 7, 2019, 3:48pm UTC](https://discuss.elastic.co/t/filebeat-multiline-docker-log/167153 "2019-02-07T15:48:35Z")
filebeat.inputs: - type: log paths: - "/var/lib/docker/containers/\*/\*.log" json.keys\_under\_root: true json.add\_error\_key: true json.message\_key: log processors: - rename: fields: … --- ## [Failed to connect to console's backend](https://discuss.elastic.co/t/failed-to-connect-to-consoles-backend/75945)
**Author:** [@franc\_right](https://discuss.elastic.co/u/franc_right)\ **Replies:** 6\ **Last updated:** [February 23, 2017, 10:02pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-consoles-backend/75945 "2017-02-23T22:02:51Z")
i am getting this error failed to connect to console's backend, please check the server is up and running. any assistance is appreciated --- ## [Logstash WARN: Could not index event to Elasticsearch .... Can't get text on a START\_OBJECT](https://discuss.elastic.co/t/logstash-warn-could-not-index-event-to-elasticsearch-cant-get-text-on-a-start-object/311910)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 1:32pm UTC](https://discuss.elastic.co/t/logstash-warn-could-not-index-event-to-elasticsearch-cant-get-text-on-a-start-object/311910 "2022-08-11T13:32:46Z")
Dears, I have some problem with json. When I send json log to logstash there are many errors like this: Could not index event to Elasticsearch .... Can't get text on a START\_OBJECT at 1:670 My json log looks like: {… --- ## [How to check if a document exists for a specified Id and alias name](https://discuss.elastic.co/t/how-to-check-if-a-document-exists-for-a-specified-id-and-alias-name/276464)
**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 3:00am UTC](https://discuss.elastic.co/t/how-to-check-if-a-document-exists-for-a-specified-id-and-alias-name/276464 "2021-06-21T03:00:42Z")
Iam trying to check if a document exists for the specified ID and alias using the search Api, In the response I just need the index name if the document exists. Adding to this, is there any api to check if the returned … --- ## [Transform date field (timeStamp) "failed to parse field"](https://discuss.elastic.co/t/transform-date-field-timestamp-failed-to-parse-field/228192)
**Author:** [@Cain310](https://discuss.elastic.co/u/Cain310)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 3:26pm UTC](https://discuss.elastic.co/t/transform-date-field-timestamp-failed-to-parse-field/228192 "2020-04-16T15:26:32Z")
Hi I am having trouble with transforming a timeStamp date field for ml. I am getting this error in the logs failed to parse field \[doc.timeStamp.min\] of type \[date\] in document with id 'xxx'. Preview of field's value:… --- ## [Filebeat Load Balancing to Docker Logstash Containers](https://discuss.elastic.co/t/filebeat-load-balancing-to-docker-logstash-containers/134266)
**Author:** [@Krog](https://discuss.elastic.co/u/Krog)\ **Replies:** 8\ **Last updated:** [June 6, 2018, 12:20pm UTC](https://discuss.elastic.co/t/filebeat-load-balancing-to-docker-logstash-containers/134266 "2018-06-06T12:20:18Z")
Greetings: I have filebeat configured to load balance to 12 logstash docker containers on a different server. They all share the same IP address but utilize different ports. I only ever see one instance that is proces… --- ## [Read\_timeout setting for LDAP doesn't seem to change the read timeout](https://discuss.elastic.co/t/read-timeout-setting-for-ldap-doesnt-seem-to-change-the-read-timeout/41820)
**Author:** [@wnagy](https://discuss.elastic.co/u/wnagy)\ **Replies:** 3\ **Last updated:** [February 16, 2016, 9:22pm UTC](https://discuss.elastic.co/t/read-timeout-setting-for-ldap-doesnt-seem-to-change-the-read-timeout/41820 "2016-02-16T21:22:40Z")
I encountered a timeout with the LDAP server that I'm using when Shield is attempting to fetch the groups (the user lookup functions properly.) I attempted to increase the timeout to see if that would fix my issue, but … --- ## [Unable to write to avro file from logstash](https://discuss.elastic.co/t/unable-to-write-to-avro-file-from-logstash/42410)
**Author:** [@sdaruna](https://discuss.elastic.co/u/sdaruna)\ **Replies:** 5\ **Last updated:** [February 22, 2016, 6:54pm UTC](https://discuss.elastic.co/t/unable-to-write-to-avro-file-from-logstash/42410 "2016-02-22T18:54:49Z")
Hi, I am trying to write the file using avro codel in logstash. Below is my simple configuration: === input { file { path =\> "/Users/srini/Downloads/imp/2016-01-22/\*.json" … --- ## [Count per minute in Y axis](https://discuss.elastic.co/t/count-per-minute-in-y-axis/59161)
**Author:** [@minnal\_velli](https://discuss.elastic.co/u/minnal_velli)\ **Replies:** 1\ **Last updated:** [August 29, 2016, 5:25pm UTC](https://discuss.elastic.co/t/count-per-minute-in-y-axis/59161 "2016-08-29T17:25:35Z")
I am new to kibana. while trying some exercises, I am trying to create throughput chart for some application. In X axis I have time stamp(hourly), in Y axis i want to give response count per minute. is there any way(scri… --- ## [Export/import dashboard](https://discuss.elastic.co/t/export-import-dashboard/202594)
**Author:** [@SirJune](https://discuss.elastic.co/u/SirJune)\ **Replies:** 4\ **Last updated:** [October 8, 2019, 7:35pm UTC](https://discuss.elastic.co/t/export-import-dashboard/202594 "2019-10-08T19:35:00Z")
I am trying to move a dashboard from the default space to another. following this blog (https://www.elastic.co/blog/how-to-migrate-to-kibana-spaces) \[root@vm21:/etc/kibana \] $ curl -k -u elastic:somepassword https://vm… --- ## [SAML Authentication error](https://discuss.elastic.co/t/saml-authentication-error/150522)
**Author:** [@drjackal](https://discuss.elastic.co/u/drjackal)\ **Replies:** 4\ **Last updated:** [October 2, 2018, 12:31pm UTC](https://discuss.elastic.co/t/saml-authentication-error/150522 "2018-10-02T12:31:53Z")
I am trying to configure SAML authentication together with our Windows 2016 ADFS server but whatever I try I am running into the following error: Authentication to realm saml1 failed - SAML Attribute \[nameid:persistent\]… [Previous page](https://discuss.elastic.co/top.md?page=608&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=610&per_page=50&period=all)