# Top **URL:** https://discuss.elastic.co/top.md?page=611&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 612 --- ## [Index freeze/unfreeze](https://discuss.elastic.co/t/index-freeze-unfreeze/168903)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [February 18, 2019, 10:49pm UTC](https://discuss.elastic.co/t/index-freeze-unfreeze/168903 "2019-02-18T22:49:52Z")
How do you tell in the api if an index is frozen? Will freeze/unfreeze be added to curator? Thanks --- ## [Attempted to send a bulk request to elasticsearch, but no there are no living connections in the connection pool. Perhaps Elasticsearch is unreachable or down?](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-no-there-are-no-living-connections-in-the-connection-pool-perhaps-elasticsearch-is-unreachable-or-down/345042)
**Author:** [@Yazid\_Abed\_Alqader](https://discuss.elastic.co/u/Yazid_Abed_Alqader)\ **Replies:** 3\ **Last updated:** [October 16, 2023, 12:25pm UTC](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-no-there-are-no-living-connections-in-the-connection-pool-perhaps-elasticsearch-is-unreachable-or-down/345042 "2023-10-16T12:25:35Z")
Hi I have these error messages in logstash logs: \[2023-10-15T08:01:31,446\]\[WARN \]\[logstash.outputs.elasticsearch\] Marking url as dead. Last error: \[LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableErr… --- ## [How to fetch data from elasticsearch without using id](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticsearch-without-using-id/74009)
**Author:** [@srikanth](https://discuss.elastic.co/u/srikanth)\ **Replies:** 4\ **Last updated:** [February 6, 2017, 6:22am UTC](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticsearch-without-using-id/74009 "2017-02-06T06:22:08Z")
I am using java REST client api to fetch data from elasticsearch. Here i am fetching data based on id ie, "twitter/tweet/1", but i want to retrieve all the records of that topic/endpoint. is there any way to get it? --- ## [Query multiple document types](https://discuss.elastic.co/t/query-multiple-document-types/71086)
**Author:** [@JohnG](https://discuss.elastic.co/u/JohnG)\ **Replies:** 4\ **Last updated:** [January 10, 2017, 4:23pm UTC](https://discuss.elastic.co/t/query-multiple-document-types/71086 "2017-01-10T16:23:50Z")
Hi, I'm at the very start with ELK and have a question. I have 1 index that contains 2 document types, the first type contains the main info and the second contains multiple entries that relate to a key value in the … --- ## [JDBC SQL Server connection issue](https://discuss.elastic.co/t/jdbc-sql-server-connection-issue/95844)
**Author:** [@FR-TheS](https://discuss.elastic.co/u/FR-TheS)\ **Replies:** 2\ **Last updated:** [August 4, 2017, 11:07am UTC](https://discuss.elastic.co/t/jdbc-sql-server-connection-issue/95844 "2017-08-04T11:07:55Z")
Hello everyone, Since yesterday, I can't anymore connect to my sql server. I got a problem on method close connection. Logstash 5.4.3 SQL Server JDBC Driver Conf input { jdbc { jdbc\_driver\_library =\> "C:\\sof… --- ## [Kibana 4.2 generates "too small to render ..."](https://discuss.elastic.co/t/kibana-4-2-generates-too-small-to-render/33340)
**Author:** [@xntang](https://discuss.elastic.co/u/xntang)\ **Replies:** 5\ **Last updated:** [November 9, 2015, 1:58pm UTC](https://discuss.elastic.co/t/kibana-4-2-generates-too-small-to-render/33340 "2015-11-09T13:58:52Z")
When I changed to use Kibana 4.2 (from 4.1), index data can be seen through lower window not the top one. I.e, I can search and show data but not the graphs. No matter how I changed the time unit, day/hour/minute/sec… --- ## [Convert NanoSecond Unix timestamp](https://discuss.elastic.co/t/convert-nanosecond-unix-timestamp/324368)
**Author:** [@maskrider1111](https://discuss.elastic.co/u/maskrider1111)\ **Replies:** 8\ **Last updated:** [January 31, 2023, 9:57pm UTC](https://discuss.elastic.co/t/convert-nanosecond-unix-timestamp/324368 "2023-01-31T21:57:29Z")
Hi Folks, Any idea how to convert the nanosecond unix timestamp in logstash filter? date { match =\> \[ "eventtime","UNIX\_MS", "ISO8601" \] target =\> "Epoch" timezone =\> "UT… --- ## [Getting 403 forbidden error while starting service for uptime monitoring](https://discuss.elastic.co/t/getting-403-forbidden-error-while-starting-service-for-uptime-monitoring/310812)
**Author:** [@amseshadri](https://discuss.elastic.co/u/amseshadri)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 8:49am UTC](https://discuss.elastic.co/t/getting-403-forbidden-error-while-starting-service-for-uptime-monitoring/310812 "2022-08-04T08:49:53Z")
Hi, I am trying to setup Uptime Monitoring for our application URL, and trying to setup the Elastic Observability Uptime Monitoring. While executing the below getting 403 Forbidden Error: .\\heartbeat.exe setup Error: … --- ## [APM java agent memory usage](https://discuss.elastic.co/t/apm-java-agent-memory-usage/243759)
**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 4:08am UTC](https://discuss.elastic.co/t/apm-java-agent-memory-usage/243759 "2020-08-05T04:08:04Z")
Hi All, Is there a way to monitor and limit memory usage for the java apm agent? I believe this agent is making my java app to run out of memory. Using: apm java agent version: 1.16.0 apm-server: 7.8 Thanks --- ## [Logstash fails to start input.beats after elk 6.8 to 7.3 upgrade](https://discuss.elastic.co/t/logstash-fails-to-start-input-beats-after-elk-6-8-to-7-3-upgrade/201835)
**Author:** [@anelkuser](https://discuss.elastic.co/u/anelkuser)\ **Replies:** 1\ **Last updated:** [October 2, 2019, 2:52pm UTC](https://discuss.elastic.co/t/logstash-fails-to-start-input-beats-after-elk-6-8-to-7-3-upgrade/201835 "2019-10-02T14:52:17Z")
After 6.8.0 to 7.3.2 upgrade (no issues in 7.0 upgrade assistant in kibana) Elastic fails to start input.beats with the error below: \[2019-10-01T14:30:32,879\]\[WARN \]\[org.logstash.beats.Server\] Exception caught in channe… --- ## [Getting error org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution of org.elasticsearch.transport.TransportService$4@2397ca1d on EsThreadPoolExecutor\[index, queue capacity = 200](https://discuss.elastic.co/t/getting-error-org-elasticsearch-common-util-concurrent-esrejectedexecutionexception-rejected-execution-of-org-elasticsearch-transport-transportservice-4-2397ca1d-on-esthreadpoolexecutor-index-queue-capacity-200/178622)
**Author:** [@pribal](https://discuss.elastic.co/u/pribal)\ **Replies:** 1\ **Last updated:** [April 26, 2019, 7:52pm UTC](https://discuss.elastic.co/t/getting-error-org-elasticsearch-common-util-concurrent-esrejectedexecutionexception-rejected-execution-of-org-elasticsearch-transport-transportservice-4-2397ca1d-on-esthreadpoolexecutor-index-queue-capacity-200/178622 "2019-04-26T19:52:25Z")
We are getting error in elasticsearch org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution of org.elasticsearch.transport.TransportService$4@2397ca1d on EsThreadPoolExecutor\[index, q… --- ## [SSH auth logs not visualized in Kibana](https://discuss.elastic.co/t/ssh-auth-logs-not-visualized-in-kibana/227484)
**Author:** [@ArnimS](https://discuss.elastic.co/u/ArnimS)\ **Replies:** 5\ **Last updated:** [May 19, 2020, 1:34am UTC](https://discuss.elastic.co/t/ssh-auth-logs-not-visualized-in-kibana/227484 "2020-05-19T01:34:03Z")
Hi everyone! I'm relatively new to the Elasticstack and currently trying to set up a centralized dashboard for the logs of all my servers. (And also use the system to replicate all logs to my monitoring server, where I'… --- ## [Problem in Elasticsearch Wildcard filtered Query](https://discuss.elastic.co/t/problem-in-elasticsearch-wildcard-filtered-query/96718)
**Author:** [@shaktigupta200](https://discuss.elastic.co/u/shaktigupta200)\ **Replies:** 5\ **Last updated:** [August 11, 2017, 9:36am UTC](https://discuss.elastic.co/t/problem-in-elasticsearch-wildcard-filtered-query/96718 "2017-08-11T09:36:16Z")
Hi all, I am trying to write elasticsearch wildcard filtered query for aggregation and below is what I have written. It is working fine but taking so long sometime more than a minute. But if I am searching through kiban… --- ## [Нечеткий поиск с учетом минимального процента совпадений](https://discuss.elastic.co/t/topic/133519)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 3\ **Last updated:** [May 29, 2018, 6:41pm UTC](https://discuss.elastic.co/t/topic/133519 "2018-05-29T18:41:50Z")
Добрый день! В своей работе мне приходится делать сравнение строк на основе триграмм, таким образом при сравнении двух строк я могу получить коэффициент схожести строк. Могу ли я как-нибудь в Elasticsearch составить зап… --- ## [Kibana fails to show future date on line chart](https://discuss.elastic.co/t/kibana-fails-to-show-future-date-on-line-chart/68806)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 5\ **Last updated:** [December 13, 2016, 3:04pm UTC](https://discuss.elastic.co/t/kibana-fails-to-show-future-date-on-line-chart/68806 "2016-12-13T15:04:47Z")
I have kibana (v 5.1.1) configured to display future dates on line chart. However, query seems to succeed but I get below error in the browser. commons.bundle.js:38 TypeError: Cannot read property 'orderBucketsBySum' … --- ## [Javascript convert query string to Query DSL](https://discuss.elastic.co/t/javascript-convert-query-string-to-query-dsl/167927)
**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\ **Replies:** 2\ **Last updated:** [February 19, 2019, 11:42pm UTC](https://discuss.elastic.co/t/javascript-convert-query-string-to-query-dsl/167927 "2019-02-19T23:42:02Z")
Hi, is there a way to convert a user input string to Query DSL in Node? I notice that searchBar in ElasticUI framework can convert a string to Query DSL object. I'm wondering whether there is a way to convert an input st… --- ## [NAS / NFS mount - Failed to obtain lock](https://discuss.elastic.co/t/nas-nfs-mount-failed-to-obtain-lock/113838)
**Author:** [@venkii](https://discuss.elastic.co/u/venkii)\ **Replies:** 2\ **Last updated:** [January 15, 2018, 1:31am UTC](https://discuss.elastic.co/t/nas-nfs-mount-failed-to-obtain-lock/113838 "2018-01-15T01:31:17Z")
This ELK stack in build on Docker containers with elasticsearch, logstash and kibana as a service in a docker-compose. ‘There is a issue in mount the data volume of elasticsearch to an external NAS’ When I bind the vol… --- ## [Filter using max value of a column](https://discuss.elastic.co/t/filter-using-max-value-of-a-column/235591)
**Author:** [@monomeric](https://discuss.elastic.co/u/monomeric)\ **Replies:** 4\ **Last updated:** [June 5, 2020, 1:34pm UTC](https://discuss.elastic.co/t/filter-using-max-value-of-a-column/235591 "2020-06-05T13:34:46Z")
Hello! I have an index that collects entries in batches, identified by their build number in a corresponding column, and need to show only the data from the last build on a canvas. While I can filter for an explicitly g… --- ## [クエリ発行でcontains unrecognized parameters](https://discuss.elastic.co/t/contains-unrecognized-parameters/93125)
**Author:** [@mikeda](https://discuss.elastic.co/u/mikeda)\ **Replies:** 4\ **Last updated:** [July 14, 2017, 8:01am UTC](https://discuss.elastic.co/t/contains-unrecognized-parameters/93125 "2017-07-14T08:01:19Z")
javascriptから、以下のようなクエリ発行したのですが、 contains unrecognized parametersと怒られてしまいます。 原因はわかりますでしょうか? ちなみに、curlコマンドで、同じJSONを投げたのですが、問題なく応答が返ってきます。 また、{index}/{type}/\_searchと記述してみたのですが、結果は同じでした。 (エラーの内容) chromeにて実行。 "request \[/$… --- ## [Logstash가 처음엔 실행되었다가 이후에 실행이 안됩니다](https://discuss.elastic.co/t/logstash/243427)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 3:57am UTC](https://discuss.elastic.co/t/logstash/243427 "2020-08-03T03:57:56Z")
ubuntu@ip-10-0-1-50:~$ sudo /usr/share/logstash/bin/logstash -f /etc/logstash/logstash.conf WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the pat… --- ## [Match against blacklist](https://discuss.elastic.co/t/match-against-blacklist/32995)
**Author:** [@zappe](https://discuss.elastic.co/u/zappe)\ **Replies:** 7\ **Last updated:** [October 27, 2015, 2:29pm UTC](https://discuss.elastic.co/t/match-against-blacklist/32995 "2015-10-27T14:29:57Z")
I have DNS logs which I'd like to match against a blacklist. I've imported the dns logs via a grok filter. Can anyone point me in the right direction to match my parsed URL field with a blacklist in some way? --- ## [Apm server not detected](https://discuss.elastic.co/t/apm-server-not-detected/261508)
**Author:** [@L0Gal](https://discuss.elastic.co/u/L0Gal)\ **Replies:** 3\ **Last updated:** [January 19, 2021, 9:47am UTC](https://discuss.elastic.co/t/apm-server-not-detected/261508 "2021-01-19T09:47:43Z")
Kibana version: 7.10.1 Elasticsearch version: 7.10.1 APM Server version: 7.10.1 Original install method and version: Package manager on Ubuntu 20.04 Focal Fossa Fresh install or upgraded from other version?: Fresh H… --- ## [Understanding watermarks](https://discuss.elastic.co/t/understanding-watermarks/201624)
**Author:** [@AvivCohn](https://discuss.elastic.co/u/AvivCohn)\ **Replies:** 5\ **Last updated:** [September 30, 2019, 1:23pm UTC](https://discuss.elastic.co/t/understanding-watermarks/201624 "2019-09-30T13:23:15Z")
Hi, I understand (and please correct me if I'm wrong ), that: When a node reaches low disk watermark, shards will no longer be allocated on it. And when a node reaches high disk watermark, shards will be attempted to … --- ## [Adding visual alerts on my Kibana Dashboards](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161)
**Author:** [@DK1206](https://discuss.elastic.co/u/DK1206)\ **Replies:** 5\ **Last updated:** [July 30, 2018, 6:19pm UTC](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161 "2018-07-30T18:19:10Z")
Dear Elastic Community, I have set-up my ElasticStack with having WinLogbeat and Packetbeat running through my logstash. I custmoized my Sysmon (winlogbeat) dashboard and I used some default templates for Packetbeat one… --- ## [Create json object with logstash](https://discuss.elastic.co/t/create-json-object-with-logstash/158581)
**Author:** [@Shawcs](https://discuss.elastic.co/u/Shawcs)\ **Replies:** 2\ **Last updated:** [November 29, 2018, 10:42am UTC](https://discuss.elastic.co/t/create-json-object-with-logstash/158581 "2018-11-29T10:42:07Z")
Hi I face some trouble with JSON logs. I have a big JSON message comming in my Logstash and I made some parse in my file to create a new clean message. But now I want to create nested JSON field as I can have an array o… --- ## [Is there a concatenation filter?](https://discuss.elastic.co/t/is-there-a-concatenation-filter/6577)
**Author:** [@cole](https://discuss.elastic.co/u/cole)\ **Replies:** 4\ **Last updated:** [February 6, 2012, 10:58pm UTC](https://discuss.elastic.co/t/is-there-a-concatenation-filter/6577 "2012-02-06T22:58:28Z")
Was there any progress in adding the concatenation filter \[1\] to Lucene (and ES) last summer? I can't find any evidence of built-in support for this type of filter. Thanks, Cole \[1\] http://elasticsearch-users.1… --- ## [После обновления ELK Stack до версии 7.4.2 Kibana server is not ready yet](https://discuss.elastic.co/t/elk-stack-7-4-2-kibana-server-is-not-ready-yet/208301)
**Author:** [@mrbig](https://discuss.elastic.co/u/mrbig)\ **Replies:** 6\ **Last updated:** [November 20, 2019, 2:47pm UTC](https://discuss.elastic.co/t/elk-stack-7-4-2-kibana-server-is-not-ready-yet/208301 "2019-11-20T14:47:17Z")
Добрый день! Подскажите пожалуйста что может быть после обновления elk stack появилась ошибка Kibana server is not ready yet. Elasticsearch работает Logstash работает Kibana тоже работает. Что может быть? --- ## [ElasticSerach jvm java.security: file:/dev/urandom OR dev/random](https://discuss.elastic.co/t/elasticserach-jvm-java-security-file-dev-urandom-or-dev-random/110258)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 8\ **Last updated:** [December 12, 2017, 5:24am UTC](https://discuss.elastic.co/t/elasticserach-jvm-java-security-file-dev-urandom-or-dev-random/110258 "2017-12-12T05:24:08Z")
Hi, I am using ElasticSearch + XPack 5.2.2 in production, for some performance issue with database side we are thinking of changing jvm parameter to: java.security: file:/dev/urandom Is this setting… --- ## [Kibana Data is not showing on Date Ranges](https://discuss.elastic.co/t/kibana-data-is-not-showing-on-date-ranges/196103)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 2\ **Last updated:** [August 22, 2019, 4:36am UTC](https://discuss.elastic.co/t/kibana-data-is-not-showing-on-date-ranges/196103 "2019-08-22T04:36:35Z")
I made visualization on kibana when i select show record on last year it show this but when i select date range from 1 nov to 30 dec it shows nothing if you look at the first image data is found in 11-11-2018 but whe… --- ## [Kibana 4.x XSS -- CVE pending](https://discuss.elastic.co/t/kibana-4-x-xss-cve-pending/37523)
**Author:** [@KevinKluge](https://discuss.elastic.co/u/KevinKluge)\ **Replies:** 0\ **Last updated:** [December 18, 2015, 12:53am UTC](https://discuss.elastic.co/t/kibana-4-x-xss-cve-pending/37523 "2015-12-18T00:53:40Z")
Summary Kibana versions up to and including 4.3.0, 4.2.1, and 4.1.3 are vulnerable to a cross-site scripting (XSS) attack. The attack allows execution of arbitrary JavaScript in the context of the user’s browser. We h… --- ## [Watcher email specific field of all hits from the results](https://discuss.elastic.co/t/watcher-email-specific-field-of-all-hits-from-the-results/186489)
**Author:** [@Arnav\_Sengupta](https://discuss.elastic.co/u/Arnav_Sengupta)\ **Replies:** 4\ **Last updated:** [June 20, 2019, 10:52am UTC](https://discuss.elastic.co/t/watcher-email-specific-field-of-all-hits-from-the-results/186489 "2019-06-20T10:52:44Z")
I have the following input for my watcher "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "ccwhaproxy-\*" \], "types": \[\], "body": { "query": { … --- ## [Logstash pipeline example apache.log](https://discuss.elastic.co/t/logstash-pipeline-example-apache-log/41236)
**Author:** [@w0lverine](https://discuss.elastic.co/u/w0lverine)\ **Replies:** 4\ **Last updated:** [February 11, 2016, 11:49pm UTC](https://discuss.elastic.co/t/logstash-pipeline-example-apache-log/41236 "2016-02-11T23:49:42Z")
I am doing my first example of logstash located in the Documents and I am not getting a proper curl output from querying "200" from the apache log tutorial.log file I have configured my config file correctly(tripled che… --- ## [Grok filter and split message](https://discuss.elastic.co/t/grok-filter-and-split-message/128654)
**Author:** [@arkady\_renko](https://discuss.elastic.co/u/arkady_renko)\ **Replies:** 2\ **Last updated:** [April 20, 2018, 8:52pm UTC](https://discuss.elastic.co/t/grok-filter-and-split-message/128654 "2018-04-20T20:52:11Z")
Hello, I want to put my java app logs into elasticsearch. Filebeat sends logs to logstash reads the log file. I checked my grok filter at http://grokdebug.herokuapp.com/ and looks OK. But in elastic search there is onl… --- ## [After restarting the Filebeat service seeing the following exception - Error starting the servererrorlisten tcp 127.0.0.1:514: bind: address already in use](https://discuss.elastic.co/t/after-restarting-the-filebeat-service-seeing-the-following-exception-error-starting-the-servererrorlisten-tcp-127-0-0-1-bind-address-already-in-use/141836)
**Author:** [@Darshan\_Shivashankar](https://discuss.elastic.co/u/Darshan_Shivashankar)\ **Replies:** 3\ **Last updated:** [July 30, 2018, 4:31pm UTC](https://discuss.elastic.co/t/after-restarting-the-filebeat-service-seeing-the-following-exception-error-starting-the-servererrorlisten-tcp-127-0-0-1-bind-address-already-in-use/141836 "2018-07-30T16:31:23Z")
Hi, Our Goal - The goal of the tutorial is to set up Logstash to gather syslogs of multiple servers, and set up Kibana to visualize the gathered logs. When we did the setup for the first time, this whole flow worked… --- ## [Fleet Server keeps crashing](https://discuss.elastic.co/t/fleet-server-keeps-crashing/274444)
**Author:** [@Ameer\_Mukadam](https://discuss.elastic.co/u/Ameer_Mukadam)\ **Replies:** 6\ **Last updated:** [June 8, 2021, 2:54pm UTC](https://discuss.elastic.co/t/fleet-server-keeps-crashing/274444 "2021-06-08T14:54:55Z")
So I wanted to explore the new fleet changes which where introduced lately I dod a complete new setup to get hands on with it. But I am not able to get the fleet server running it keeps crashing with exit code 1 and I am… --- ## [Document error "Recovery Settings"?](https://discuss.elastic.co/t/document-error-recovery-settings/50394)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [May 19, 2016, 5:20am UTC](https://discuss.elastic.co/t/document-error-recovery-settings/50394 "2016-05-19T05:20:17Z")
Hi! I am now studying for elasticsearch and reading the definitive guide on-line. While I was reading the document, I came across to a part where there seems to be a contradiction. In "Production Deployment" -\> "Imp… --- ## [Upgrade to ES 7.15.2 and Kibana not working](https://discuss.elastic.co/t/upgrade-to-es-7-15-2-and-kibana-not-working/291098)
**Author:** [@Frank\_Kuo](https://discuss.elastic.co/u/Frank_Kuo)\ **Replies:** 8\ **Last updated:** [December 8, 2021, 1:39am UTC](https://discuss.elastic.co/t/upgrade-to-es-7-15-2-and-kibana-not-working/291098 "2021-12-08T01:39:02Z")
I have upgraded ES/Kibana/Logstash from v7.62. to v7.15.2. All installations are success but KIBANA services started with error. Can someone help me with the below error? I have no idea how to resolved it. Kibana log … --- ## [How to remove a field from document?](https://discuss.elastic.co/t/how-to-remove-a-field-from-document/246420)
**Author:** [@jake\_hickory](https://discuss.elastic.co/u/jake_hickory)\ **Replies:** 5\ **Last updated:** [August 26, 2020, 9:57am UTC](https://discuss.elastic.co/t/how-to-remove-a-field-from-document/246420 "2020-08-26T09:57:26Z")
Hello, I am new to the forum so hi. I have the old \_type field from previous elasticsearch versions in all my documents and want it removed from my documents. How can I do this? Document: "\_index": "new-index", "\_type… --- ## [Search empty string not working](https://discuss.elastic.co/t/search-empty-string-not-working/219049)
**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 9:59am UTC](https://discuss.elastic.co/t/search-empty-string-not-working/219049 "2020-02-13T09:59:48Z")
hi there, I am searching ES to find empty string field using "must\_not" and exists as follows, but it returns "0" hits. After I change the query to "must" and exists I am getting all hits where the filed having empty va… --- ## [How to index a large dataset](https://discuss.elastic.co/t/how-to-index-a-large-dataset/95526)
**Author:** [@Erates](https://discuss.elastic.co/u/Erates)\ **Replies:** 7\ **Last updated:** [August 2, 2017, 4:23pm UTC](https://discuss.elastic.co/t/how-to-index-a-large-dataset/95526 "2017-08-02T16:23:56Z")
Hello, At the moment, I have a dataset containing over 170 million records and I want to index it in Elasticsearch. But the problem is that the way I need the mapping to be, generates to much datastorage. Our data look… --- ## [Logstash input (kafka) add\_field very slow](https://discuss.elastic.co/t/logstash-input-kafka-add-field-very-slow/28541)
**Author:** [@L8apex32](https://discuss.elastic.co/u/L8apex32)\ **Replies:** 4\ **Last updated:** [February 25, 2016, 10:31pm UTC](https://discuss.elastic.co/t/logstash-input-kafka-add-field-very-slow/28541 "2016-02-25T22:31:00Z")
We are working towards very fast ingest into elastic search and found an unexpected slow spot. We have LS pulling from kafka which it can do very fast (5 consumer threads) - over 50k eps. However, if we add a single "add… --- ## [Does aggregations runs in parallel?](https://discuss.elastic.co/t/does-aggregations-runs-in-parallel/237189)
**Author:** [@jessepeixoto](https://discuss.elastic.co/u/jessepeixoto)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 2:48pm UTC](https://discuss.elastic.co/t/does-aggregations-runs-in-parallel/237189 "2020-06-29T14:48:21Z")
Hi everyone, I have one query \_search with four separated nested terms aggregation and filters in the aggregations, this query is retrieving data in about 2 seconds when a specific term is searched. I splitted the four… --- ## [Change the certificates](https://discuss.elastic.co/t/change-the-certificates/268158)
**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 5\ **Last updated:** [April 23, 2021, 4:39pm UTC](https://discuss.elastic.co/t/change-the-certificates/268158 "2021-04-23T16:39:44Z")
Hello Team, I have an ELK stack running with hot warm architecture. Everything is fine until I was asked to add new nodes to the stack... How am I supposed to add new nodes and how can I create new certificates for the… --- ## [Default user role in Shield doesn't appear to work](https://discuss.elastic.co/t/default-user-role-in-shield-doesnt-appear-to-work/26269)
**Author:** [@rawill](https://discuss.elastic.co/u/rawill)\ **Replies:** 5\ **Last updated:** [July 27, 2015, 3:20pm UTC](https://discuss.elastic.co/t/default-user-role-in-shield-doesnt-appear-to-work/26269 "2015-07-27T15:20:10Z")
We have been looking at Shield in our dev environment for awhile and and thought we would try the latest version to see what changes had been put in place. Just from an initial setup it doesn't appear that the base "use… --- ## [Date range with date histogram (This interval creates too many buckets)](https://discuss.elastic.co/t/date-range-with-date-histogram-this-interval-creates-too-many-buckets/69023)
**Author:** [@celebi](https://discuss.elastic.co/u/celebi)\ **Replies:** 3\ **Last updated:** [December 15, 2016, 9:59am UTC](https://discuss.elastic.co/t/date-range-with-date-histogram-this-interval-creates-too-many-buckets/69023 "2016-12-15T09:59:01Z")
Hi all, I am relatively new to ELK stack and try to use date range with date histogram regardless of time picker tool. But it seems Kibana behaves differently when I select time picker \<= "Last 1 year" compared to \>= "… --- ## [Как делать массовый обход всех записей (scan & bulk)?](https://discuss.elastic.co/t/scan-bulk/24397)
**Author:** [@Stan](https://discuss.elastic.co/u/Stan)\ **Replies:** 8\ **Last updated:** [June 26, 2015, 7:23pm UTC](https://discuss.elastic.co/t/scan-bulk/24397 "2015-06-26T19:23:18Z")
Привет! Возникла задача. Нужно обойти 5 млн. записей в Эластике, в каждую внести изменение, потом сохранить обратно. Пошел стандартным путем. Создал scroll-окно, получил первые 4000 записей, модифицировал их (добавил н… --- ## [Elasticsearch - compound index or discrete indexes?](https://discuss.elastic.co/t/elasticsearch-compound-index-or-discrete-indexes/140970)
**Author:** [@Jose\_Ramierez](https://discuss.elastic.co/u/Jose_Ramierez)\ **Replies:** 7\ **Last updated:** [July 23, 2018, 7:11am UTC](https://discuss.elastic.co/t/elasticsearch-compound-index-or-discrete-indexes/140970 "2018-07-23T07:11:03Z")
Elasticsearch 6.3 (but our ES experience is all from earlier versions) We have a typical multi tenant cloud app. 5,000 accounts on the cloud app. Each account has 500 to 1,000,000 records/documents. When we use a singl… --- ## [X-Pack Basic License Installation](https://discuss.elastic.co/t/x-pack-basic-license-installation/116899)
**Author:** [@elJoeyJojo](https://discuss.elastic.co/u/elJoeyJojo)\ **Replies:** 7\ **Last updated:** [January 24, 2018, 10:30pm UTC](https://discuss.elastic.co/t/x-pack-basic-license-installation/116899 "2018-01-24T22:30:57Z")
Setup X-Pack and only wanna use Basic so I try to follow the instructions but nope, nothing works. Tried with the "elastic" "kibana" and even an "admin" user account I created with "superuser" role inside ElasticSearch a… --- ## [APM not creating aliases](https://discuss.elastic.co/t/apm-not-creating-aliases/212427)
**Author:** [@jmcpherson](https://discuss.elastic.co/u/jmcpherson)\ **Replies:** 4\ **Last updated:** [January 7, 2020, 3:47pm UTC](https://discuss.elastic.co/t/apm-not-creating-aliases/212427 "2020-01-07T15:47:09Z")
Kibana version: 7.5.0 Elasticsearch version: 7.5.0 APM Server version: 7.5.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: ECK Manifest Fresh install or upgraded from othe… --- ## [Filtering for certain Hostname in Lens](https://discuss.elastic.co/t/filtering-for-certain-hostname-in-lens/265478)
**Author:** [@quixter](https://discuss.elastic.co/u/quixter)\ **Replies:** 5\ **Last updated:** [February 25, 2021, 10:57pm UTC](https://discuss.elastic.co/t/filtering-for-certain-hostname-in-lens/265478 "2021-02-25T22:57:10Z")
Been trying to figure out something that I thought would be simple but yet I can't seem to get it to work. I'm working on a lens with y axis is cpu percentage and x axis is host.name. I need it to only return a group of… [Previous page](https://discuss.elastic.co/top.md?page=610&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=612&per_page=50&period=all)