# Top **URL:** https://discuss.elastic.co/top.md?page=617&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 618 --- ## [Unable to uninstall X-pack](https://discuss.elastic.co/t/unable-to-uninstall-x-pack/167315)
**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\ **Replies:** 4\ **Last updated:** [February 8, 2019, 5:56am UTC](https://discuss.elastic.co/t/unable-to-uninstall-x-pack/167315 "2019-02-08T05:56:31Z")
Hi Team, I have installed X-Pack in a curiosity to know how it works. Now I want to uninstall it. But I cannot uninstall. When I try uninstalling with these commands: bin/elasticsearch-plugin remove x-pack \[root@915… --- ## [Elasticsearch JVM Crashing occasionally](https://discuss.elastic.co/t/elasticsearch-jvm-crashing-occasionally/84517)
**Author:** [@cars10](https://discuss.elastic.co/u/cars10)\ **Replies:** 4\ **Last updated:** [May 9, 2017, 8:26am UTC](https://discuss.elastic.co/t/elasticsearch-jvm-crashing-occasionally/84517 "2017-05-09T08:26:50Z")
Hi, sometimes our elasticsearch just stopps working. It is no longer available via curl and the java processes are no longer running, but sadly the systemd daemon doesn't notice that - so it doesn't automatically restart… --- ## [Bulk Insert error recovery](https://discuss.elastic.co/t/bulk-insert-error-recovery/9919)
**Author:** [@smhdiu](https://discuss.elastic.co/u/smhdiu)\ **Replies:** 2\ **Last updated:** [December 3, 2012, 12:42pm UTC](https://discuss.elastic.co/t/bulk-insert-error-recovery/9919 "2012-12-03T12:42:03Z")
hello all, i am using elastic search bulk java api to insertion of record from legacy db. i am selecting 100 records per poll and inserting to elasticsearch. it is working very well and without any error. but w… --- ## [Monitoring production cluster with Kibana and Metricbeat](https://discuss.elastic.co/t/monitoring-production-cluster-with-kibana-and-metricbeat/207072)
**Author:** [@darefilz](https://discuss.elastic.co/u/darefilz)\ **Replies:** 8\ **Last updated:** [December 19, 2019, 4:21pm UTC](https://discuss.elastic.co/t/monitoring-production-cluster-with-kibana-and-metricbeat/207072 "2019-12-19T16:21:49Z")
Hi there, we run an Elastic Stack version 6.8.0 with a basic licence. Like a few others we have issues monitoring the production cluster in Kibana. As recommended we have set up a separate monitoring cluster including… --- ## [To multi path.data or hardware RAID or not?](https://discuss.elastic.co/t/to-multi-path-data-or-hardware-raid-or-not/40143)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 3\ **Last updated:** [January 27, 2016, 10:22pm UTC](https://discuss.elastic.co/t/to-multi-path-data-or-hardware-raid-or-not/40143 "2016-01-27T22:22:11Z")
So I have my servers with RAID 0 over 6 drives. We lost a disk, no sweat we had replicas in the cluster. Just thinking should I try setting up using multiple paths? Thinking of creating 3 RAID 0 drives and then setti… --- ## [Help identifying large message that is causing a Kafka RecordTooLargeException](https://discuss.elastic.co/t/help-identifying-large-message-that-is-causing-a-kafka-recordtoolargeexception/170961)
**Author:** [@jbehrends](https://discuss.elastic.co/u/jbehrends)\ **Replies:** 2\ **Last updated:** [March 22, 2019, 8:31pm UTC](https://discuss.elastic.co/t/help-identifying-large-message-that-is-causing-a-kafka-recordtoolargeexception/170961 "2019-03-22T20:31:24Z")
Hello! I'm running Logstash 6.6.0 on each node in Kubernetes cluster. The agent is using a file input plugin to read logs from all containers running on the host. I'm then using a Kafka output plugin to send these mes… --- ## [Filtering by event id](https://discuss.elastic.co/t/filtering-by-event-id/137640)
**Author:** [@Astarandel](https://discuss.elastic.co/u/Astarandel)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 3:12pm UTC](https://discuss.elastic.co/t/filtering-by-event-id/137640 "2018-06-27T15:12:54Z")
Hello guys, I m trying the following configuration: winlogbeat.event\_logs: - name: Application level: critical, error, warning ignore\_older: 48h - name: Security event\_id: 500-820 level: critical, e… --- ## [RSS feed for new Elasticsearch versions](https://discuss.elastic.co/t/rss-feed-for-new-elasticsearch-versions/341272)
**Author:** [@jaketw47](https://discuss.elastic.co/u/jaketw47)\ **Replies:** 0\ **Last updated:** [August 21, 2023, 3:13pm UTC](https://discuss.elastic.co/t/rss-feed-for-new-elasticsearch-versions/341272 "2023-08-21T15:13:25Z")
Our company watches a small number of release-only RSS feeds so that we can be quickly notified when new versions of software we depend on are released (at least ones that still require manual upgrades). The Elastic Blog… --- ## [Kibana Views Missing Data](https://discuss.elastic.co/t/kibana-views-missing-data/76956)
**Author:** [@MrShiny](https://discuss.elastic.co/u/MrShiny)\ **Replies:** 6\ **Last updated:** [March 11, 2017, 9:32am UTC](https://discuss.elastic.co/t/kibana-views-missing-data/76956 "2017-03-11T09:32:27Z")
Hi, I've been using Kibana to visualise performance logs, for the last couple of months when visualising data is sometimes missing, as if during aggregation the index doesn't provide data. Normally a reload will fix thi… --- ## [Logstash output to ES via ssl](https://discuss.elastic.co/t/logstash-output-to-es-via-ssl/40404)
**Author:** [@mnhan](https://discuss.elastic.co/u/mnhan)\ **Replies:** 5\ **Last updated:** [January 29, 2016, 8:58pm UTC](https://discuss.elastic.co/t/logstash-output-to-es-via-ssl/40404 "2016-01-29T20:58:36Z")
Hi, Are there docs/example of using the ssl options in the es output plugin? I'm setting LS and ES on different hosts. I want to encrypt output from LS to ES. I can't seem to find an docs on using using ssl from LS… --- ## [Get all watches or search for watches](https://discuss.elastic.co/t/get-all-watches-or-search-for-watches/28056)
**Author:** [@aochsner](https://discuss.elastic.co/u/aochsner)\ **Replies:** 5\ **Last updated:** [August 26, 2015, 6:38pm UTC](https://discuss.elastic.co/t/get-all-watches-or-search-for-watches/28056 "2015-08-26T18:38:16Z")
Is there a way to get a list of all watches? Suppose it would be nice if we could search against /\_watcher/watch as well. --- ## [Shield w/ Logstash Offline Install](https://discuss.elastic.co/t/shield-w-logstash-offline-install/25072)
**Author:** [@Mrc0113](https://discuss.elastic.co/u/Mrc0113)\ **Replies:** 5\ **Last updated:** [July 8, 2015, 12:07am UTC](https://discuss.elastic.co/t/shield-w-logstash-offline-install/25072 "2015-07-08T00:07:29Z")
Hi, I am installing ELK on a network that does not have internet access and am following the instructions at the link below to get Logstash to work with Shield enabled. However, it seems that the instructions require… --- ## [Field value factor ignoring fields with a value less than one](https://discuss.elastic.co/t/field-value-factor-ignoring-fields-with-a-value-less-than-one/30034)
**Author:** [@patrickff](https://discuss.elastic.co/u/patrickff)\ **Replies:** 3\ **Last updated:** [October 6, 2015, 6:44pm UTC](https://discuss.elastic.co/t/field-value-factor-ignoring-fields-with-a-value-less-than-one/30034 "2015-10-06T18:44:31Z")
I'm having difficulty getting function scoring to work when the value is between zero and one (fractional). I want to use a reciprocal/inverse scoring function on these documents where 0.1 would be high and 10+ would be … --- ## [Requiero configurar el siguiente filtro en mis Indices pero no tengo éxito para lograrlo](https://discuss.elastic.co/t/requiero-configurar-el-siguiente-filtro-en-mis-indices-pero-no-tengo-exito-para-lograrlo/129194)
**Author:** [@Juliolopez2018](https://discuss.elastic.co/u/Juliolopez2018)\ **Replies:** 4\ **Last updated:** [April 27, 2018, 11:57pm UTC](https://discuss.elastic.co/t/requiero-configurar-el-siguiente-filtro-en-mis-indices-pero-no-tengo-exito-para-lograrlo/129194 "2018-04-27T23:57:26Z")
Actualmente ya recibo información de los logs pero no tengo éxito en crear los filtros necesarios para obtener el siguiente formato y los datos que requiero: \[scrip\] Estos son mis resultados actuales: \[scrip1\] Este e… --- ## [Quiz for Elastic Users](https://discuss.elastic.co/t/quiz-for-elastic-users/134391)
**Author:** [@Matthew\_Carr](https://discuss.elastic.co/u/Matthew_Carr)\ **Replies:** 7\ **Last updated:** [June 5, 2018, 12:31pm UTC](https://discuss.elastic.co/t/quiz-for-elastic-users/134391 "2018-06-05T12:31:34Z")
We have launched our summer quiz based on #Elasticsearch. If you like to part simply go here and answer these questions for a chance to win a 100 EUR Amazon Voucher: https://goo.gl/vsE6kp How does it work? You have 10… --- ## [Problem with dynamic log update using http\_poller](https://discuss.elastic.co/t/problem-with-dynamic-log-update-using-http-poller/71482)
**Author:** [@karthikeyan](https://discuss.elastic.co/u/karthikeyan)\ **Replies:** 7\ **Last updated:** [January 13, 2017, 12:27pm UTC](https://discuss.elastic.co/t/problem-with-dynamic-log-update-using-http-poller/71482 "2017-01-13T12:27:07Z")
Hi , This is my configuration file input { http\_poller{ urls =\> { url129server =\> "http://xxx.log" } codec =\> "plain" metadata\_target =\> "http\_poller\_metadata" request\_timeout =\> 60 schedule =\> { "every… --- ## [Elasticsearch OSS Image and X-Pack Plugin](https://discuss.elastic.co/t/elasticsearch-oss-image-and-x-pack-plugin/266169)
**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\ **Replies:** 8\ **Last updated:** [March 3, 2021, 10:51pm UTC](https://discuss.elastic.co/t/elasticsearch-oss-image-and-x-pack-plugin/266169 "2021-03-03T22:51:50Z")
Hi All, I am trying to deploy following Elasticsearch OSS image and facing issue while using x-pack security. Is there any possibility that this plugin can be deployed explicitly ? Thanks "docker.elastic.co/elasticsear… --- ## [Update CSV file changes to ELK](https://discuss.elastic.co/t/update-csv-file-changes-to-elk/161219)
**Author:** [@kb2295](https://discuss.elastic.co/u/kb2295)\ **Replies:** 8\ **Last updated:** [December 20, 2018, 5:46pm UTC](https://discuss.elastic.co/t/update-csv-file-changes-to-elk/161219 "2018-12-20T17:46:33Z")
Hello, If I have a CSV file that adds additional rows every 24 hours, is there a way that I can have ELK upload only the additional rows? I need a system in which I can keep changing the CSV file and not have ELK upload… --- ## [Error code 429,Too Many Requests](https://discuss.elastic.co/t/error-code-429-too-many-requests/325332)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 1\ **Last updated:** [February 12, 2023, 4:37pm UTC](https://discuss.elastic.co/t/error-code-429-too-many-requests/325332 "2023-02-12T16:37:31Z")
Hi, What does error code 429,Too Many Requests actually means? Is the coordinator is fully loaded or the cluster is fully loaded? Thanks... --- ## [Showing images in Kibana 6 dashoboard](https://discuss.elastic.co/t/showing-images-in-kibana-6-dashoboard/122563)
**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\ **Replies:** 1\ **Last updated:** [March 5, 2018, 4:45pm UTC](https://discuss.elastic.co/t/showing-images-in-kibana-6-dashoboard/122563 "2018-03-05T16:45:58Z")
I have a type that in one of its fields contains a path to an image file, is there anyway to deal with these images in Kibana 6, for example to show them in a dashboard? I was thinking if this is possible to be done usin… --- ## [Elasticsearch.Net Library for .NET Core with Docker linux container not working](https://discuss.elastic.co/t/elasticsearch-net-library-for-net-core-with-docker-linux-container-not-working/131070)
**Author:** [@Bikash\_Behuria](https://discuss.elastic.co/u/Bikash_Behuria)\ **Replies:** 6\ **Last updated:** [May 28, 2018, 10:57am UTC](https://discuss.elastic.co/t/elasticsearch-net-library-for-net-core-with-docker-linux-container-not-working/131070 "2018-05-28T10:57:21Z")
Hi , I am not sure if anyone reported the following issue. When using ASP.NET Core with Linux Docker container , \_bulk api is not working however same works fine if we run same code using Visual Studio. Below are my … --- ## [How to divide the numbers of a specific field by 100 in Kibana](https://discuss.elastic.co/t/how-to-divide-the-numbers-of-a-specific-field-by-100-in-kibana/127016)
**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\ **Replies:** 2\ **Last updated:** [April 8, 2018, 9:42pm UTC](https://discuss.elastic.co/t/how-to-divide-the-numbers-of-a-specific-field-by-100-in-kibana/127016 "2018-04-08T21:42:53Z")
Hello! I have a field we amounts that have need to divide by 100. For example my field is Amount1 and all the numbers come like this, example: 3,456,890 23,44,950 80,531,865 I want to divide theme by 100 so the amou… --- ## [Match a keyword field containing a newline character](https://discuss.elastic.co/t/match-a-keyword-field-containing-a-newline-character/219867)
**Author:** [@kamiunsu](https://discuss.elastic.co/u/kamiunsu)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 8:31am UTC](https://discuss.elastic.co/t/match-a-keyword-field-containing-a-newline-character/219867 "2020-02-20T08:31:01Z")
I'm able to sort on a nested field using the following params: "sort": \[ { "scores.value": { "mode": "sum", "order": "desc", "nested": { "path": "scores", "filter": … --- ## [Can't Connect to Kibana via Browser on Local VM](https://discuss.elastic.co/t/cant-connect-to-kibana-via-browser-on-local-vm/85662)
**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\ **Replies:** 3\ **Last updated:** [May 17, 2017, 6:15pm UTC](https://discuss.elastic.co/t/cant-connect-to-kibana-via-browser-on-local-vm/85662 "2017-05-17T18:15:57Z")
I am getting a ERR\_CONNECTION\_TIMED\_OUT error when trying to use Chrome to connect to Kibana on a VM on my Windows machine but connecting to ES on the same VM works fine. Both have been updated to the latest versions and… --- ## [Exiting: error loading config file: yaml:](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml/103722)
**Author:** [@prachi1](https://discuss.elastic.co/u/prachi1)\ **Replies:** 1\ **Last updated:** [October 12, 2017, 3:59pm UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml/103722 "2017-10-12T15:59:40Z")
I added this to filebeat.yml file paths: input\_type: log -"C:\\Users\\pjaiswa6\\Documents\\lnl06a\_3403\\\*.csv" document\_type: my\_log and ran the command - .\\filebeat -c filebeat.yml & I get an error as follows - Exiti… --- ## [Elasticsearch CPU usage High](https://discuss.elastic.co/t/elasticsearch-cpu-usage-high/261846)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 4\ **Last updated:** [February 9, 2021, 2:40am UTC](https://discuss.elastic.co/t/elasticsearch-cpu-usage-high/261846 "2021-02-09T02:40:24Z")
I am running a single node ELK stack which is ingesting logs from an Application Load Balancer on AWS. It is a decent sized instance with 8 VCPUs and 32GB RAM. I am seeing a consistently high CPU usage on the instance … --- ## [Wait for yellow status](https://discuss.elastic.co/t/wait-for-yellow-status/17679)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 4\ **Last updated:** [June 23, 2014, 6:53pm UTC](https://discuss.elastic.co/t/wait-for-yellow-status/17679 "2014-06-23T18:53:35Z")
While doing some tests, I thought I uncovered a bug in the cluster-health/wait-for-yellow request. No matter what settings I tried, the request would always return immediately with no timeout. I then realized that the… --- ## [Exposing kibana with istio virtualservice need some extra steps](https://discuss.elastic.co/t/exposing-kibana-with-istio-virtualservice-need-some-extra-steps/185412)
**Author:** [@mohamamd](https://discuss.elastic.co/u/mohamamd)\ **Replies:** 3\ **Last updated:** [June 18, 2019, 12:22pm UTC](https://discuss.elastic.co/t/exposing-kibana-with-istio-virtualservice-need-some-extra-steps/185412 "2019-06-18T12:22:08Z")
I have deployed elasticsearch and Kibana using the ECK operator as explained in https://www.elastic.co/guide/en/cloud-on-k8s/current/index.html When I port-forward to Kibana service everything works fine. But if I expo… --- ## [How to use {{#context.hits}} alert with an INDEX action?](https://discuss.elastic.co/t/how-to-use-context-hits-alert-with-an-index-action/345378)
**Author:** [@jamesarbrown](https://discuss.elastic.co/u/jamesarbrown)\ **Replies:** 0\ **Last updated:** [October 19, 2023, 10:37am UTC](https://discuss.elastic.co/t/how-to-use-context-hits-alert-with-an-index-action/345378 "2023-10-19T10:37:09Z")
Hi, I would like to pass the context.hits information to the index alert connector i have created. The connector all works, but anything re the context.hits and I get an empty result. This is one of the many itteratio… --- ## [Beats on OPNsense](https://discuss.elastic.co/t/beats-on-opnsense/192803)
**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\ **Replies:** 0\ **Last updated:** [July 30, 2019, 1:52am UTC](https://discuss.elastic.co/t/beats-on-opnsense/192803 "2019-07-30T01:52:01Z")
Has anyone been able to configure OPNsense for Beats? I see alot of work on pfsense, but nothing on OPNsense. --- ## [Reindex from ES5 to ES6 Failed](https://discuss.elastic.co/t/reindex-from-es5-to-es6-failed/151680)
**Author:** [@vineeshvraj7](https://discuss.elastic.co/u/vineeshvraj7)\ **Replies:** 0\ **Last updated:** [October 9, 2018, 4:01pm UTC](https://discuss.elastic.co/t/reindex-from-es5-to-es6-failed/151680 "2018-10-09T16:01:08Z")
While re-indexing from elasticsearch v5 to v6 remotely, I am getting an exception: “Caused by: com.fasterxml.jackson.core.JsonParseException: Duplicate field” I was doing re-indexing from V2 =\> V5 =\> V6 V2 = \> V5 re-in… --- ## [Best way to trim results by score?](https://discuss.elastic.co/t/best-way-to-trim-results-by-score/165795)
**Author:** [@jmr317](https://discuss.elastic.co/u/jmr317)\ **Replies:** 2\ **Last updated:** [February 1, 2019, 9:33am UTC](https://discuss.elastic.co/t/best-way-to-trim-results-by-score/165795 "2019-02-01T09:33:29Z")
Some of my search results returns a total of over 10k documents, varying from a high score (in my most recent search, ~75) to a very low score (less than 5). Other queries return a high score of ~20 and a low score of ~1… --- ## [Using GSuite for SAML integration with Elastic Stack (ElasticSearch + Kibana)](https://discuss.elastic.co/t/using-gsuite-for-saml-integration-with-elastic-stack-elasticsearch-kibana/159971)
**Author:** [@chiragsc](https://discuss.elastic.co/u/chiragsc)\ **Replies:** 2\ **Last updated:** [December 7, 2018, 7:28pm UTC](https://discuss.elastic.co/t/using-gsuite-for-saml-integration-with-elastic-stack-elasticsearch-kibana/159971 "2018-12-07T19:28:10Z")
I am trying to use GSuite to integration into my ElasticCloud Stack (Elasticsearch + Kibana) and am stuck at what attribute values to state. According to the documentation: Secure your clusters with SAML | Elasticsearch … --- ## [Transactions tab empty but data with \`transaction.id\` available in \`apm-\*\` indices](https://discuss.elastic.co/t/transactions-tab-empty-but-data-with-transaction-id-available-in-apm-indices/214057)
**Author:** [@Marcin\_Kawa](https://discuss.elastic.co/u/Marcin_Kawa)\ **Replies:** 7\ **Last updated:** [January 15, 2020, 8:32am UTC](https://discuss.elastic.co/t/transactions-tab-empty-but-data-with-transaction-id-available-in-apm-indices/214057 "2020-01-15T08:32:35Z")
Kibana version: 7.4.0 Elasticsearch version: 7.4.0 APM Server version: 7.4.0 APM Agent language and version: Python / 5.3.2 Original install method: Docker Fresh install or upgraded from other version? ELK upgraded … --- ## [Logstash GROK filter query](https://discuss.elastic.co/t/logstash-grok-filter-query/81627)
**Author:** [@cyberwhiz](https://discuss.elastic.co/u/cyberwhiz)\ **Replies:** 7\ **Last updated:** [April 18, 2017, 9:23am UTC](https://discuss.elastic.co/t/logstash-grok-filter-query/81627 "2017-04-18T09:23:17Z")
Hi All, I'm trying to visualise the statusCode in Kibana and try and get it as a filter. So I originally tried setting filters in logstash with json and mutate however that didn't get me the desired filter. Finally I j… --- ## [Failed to put mappings on indices while using java](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-while-using-java/21030)
**Author:** [@stephen\_maina](https://discuss.elastic.co/u/stephen_maina)\ **Replies:** 1\ **Last updated:** [December 2, 2014, 2:39pm UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-while-using-java/21030 "2014-12-02T14:39:02Z")
Hi, Full disclosure im a newb at this: I have been trying to create an index using the below code: private boolean createIndices( ) { String indexName="279" String typeName="badge\_type"; String mapping={\\"bad… --- ## [Scripted Field with parameters](https://discuss.elastic.co/t/scripted-field-with-parameters/58686)
**Author:** [@Shubham\_Agrawal](https://discuss.elastic.co/u/Shubham_Agrawal)\ **Replies:** 3\ **Last updated:** [August 25, 2016, 2:20pm UTC](https://discuss.elastic.co/t/scripted-field-with-parameters/58686 "2016-08-25T14:20:57Z")
Hi, I want to create a new field for every document. the script takes two parameters. and I want to do visualization in kibana(4.x) using this newly created scripted field. I have tried Scripted fields in settings tab of… --- ## [Order by date field (descending): gauss or field\_value\_factor?](https://discuss.elastic.co/t/order-by-date-field-descending-gauss-or-field-value-factor/62633)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 1\ **Last updated:** [October 11, 2016, 4:13pm UTC](https://discuss.elastic.co/t/order-by-date-field-descending-gauss-or-field-value-factor/62633 "2016-10-11T16:13:33Z")
Hi, I have an issue concerning the modification of the score document according to its creation date. I have tried gauss function and field\_value\_factor. The fist one is: gauss:{ date\_… --- ## [CSV Export Automation](https://discuss.elastic.co/t/csv-export-automation/166775)
**Author:** [@resty](https://discuss.elastic.co/u/resty)\ **Replies:** 2\ **Last updated:** [February 4, 2019, 6:31pm UTC](https://discuss.elastic.co/t/csv-export-automation/166775 "2019-02-04T18:31:07Z")
Does Kibana have a scheduler to automatically export CSV and transfer the file to another path or is there a way to automate this backend? Thank you so much! --- ## [How to fix retention log and how to manage data retention time in Elasticsearch](https://discuss.elastic.co/t/how-to-fix-retention-log-and-how-to-manage-data-retention-time-in-elasticsearch/324323)
**Author:** [@Mosa](https://discuss.elastic.co/u/Mosa)\ **Replies:** 6\ **Last updated:** [February 2, 2023, 1:44pm UTC](https://discuss.elastic.co/t/how-to-fix-retention-log-and-how-to-manage-data-retention-time-in-elasticsearch/324323 "2023-02-02T13:44:29Z")
Hi Team, I've configured my retention log in my Elasticsearch and I hope managing my data retention time. But no thing is changed after 3 days in my configuration just to test it. And no data is deleted too after 3 days… --- ## [Function Score Functions with Nested Objects and Score Replace](https://discuss.elastic.co/t/function-score-functions-with-nested-objects-and-score-replace/303081)
**Author:** [@terzano](https://discuss.elastic.co/u/terzano)\ **Replies:** 6\ **Last updated:** [May 3, 2022, 5:31am UTC](https://discuss.elastic.co/t/function-score-functions-with-nested-objects-and-score-replace/303081 "2022-05-03T05:31:01Z")
I have tried various approaches to combine function\_score with a nested field inside "functions" in order to override the relevance \_score. The "query" within the function\_score works perfectly, as intended. However, th… --- ## [Cannot run logstash using cmd please help!](https://discuss.elastic.co/t/cannot-run-logstash-using-cmd-please-help/139426)
**Author:** [@Shraddha\_Srivastav](https://discuss.elastic.co/u/Shraddha_Srivastav)\ **Replies:** 3\ **Last updated:** [July 10, 2018, 9:25pm UTC](https://discuss.elastic.co/t/cannot-run-logstash-using-cmd-please-help/139426 "2018-07-10T21:25:07Z")
Hi, I installed logstash ZIP folder using https://www.elastic.co/downloads/logstash. Also prepared a logstash.conf config file, followed the steps as explained on this: https://www.elastic.co/guide/en/logstash/current/c… --- ## [Is an ingest node compulsory for x-pack, in an ES cluster?](https://discuss.elastic.co/t/is-an-ingest-node-compulsory-for-x-pack-in-an-es-cluster/109183)
**Author:** [@subin](https://discuss.elastic.co/u/subin)\ **Replies:** 3\ **Last updated:** [November 27, 2017, 9:03am UTC](https://discuss.elastic.co/t/is-an-ingest-node-compulsory-for-x-pack-in-an-es-cluster/109183 "2017-11-27T09:03:33Z")
Hi, I've an ES cluster of 3 (data and master-eligible nodes) and 1 (coordinating-only) node. I've installed x-pack on all. When I tried to start two nodes, it started throwing up the below: Caused by: org.elasticsearch… --- ## [Best practice for storing big (~500 MB) files in ES](https://discuss.elastic.co/t/best-practice-for-storing-big-500-mb-files-in-es/72998)
**Author:** [@janpom](https://discuss.elastic.co/u/janpom)\ **Replies:** 1\ **Last updated:** [January 27, 2017, 11:25am UTC](https://discuss.elastic.co/t/best-practice-for-storing-big-500-mb-files-in-es/72998 "2017-01-27T11:25:33Z")
I would like to store binary data chunks of up to ~500 MB in ES. These are not meant to be analyzed and used for searching. I merely want to store them and be able to retrieve them later. The reason for storing in ES is … --- ## [\[ANN\] Elasticsearch RDF Jena Plugin](https://discuss.elastic.co/t/ann-elasticsearch-rdf-jena-plugin/21415)
**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\ **Replies:** 4\ **Last updated:** [December 28, 2014, 9:50pm UTC](https://discuss.elastic.co/t/ann-elasticsearch-rdf-jena-plugin/21415 "2014-12-28T21:50:50Z")
Hi, do you want to turn your Elasticsearch into a SPARQL endpoint? This Elasticsearch plugin stores and retrieves RDF triples by using the Apache Jena API: https://github.com/jprante/elasticsearch-plugin-rdf-je… --- ## [Word count/frequency per field](https://discuss.elastic.co/t/word-count-frequency-per-field/159910)
**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\ **Replies:** 2\ **Last updated:** [December 13, 2018, 4:37pm UTC](https://discuss.elastic.co/t/word-count-frequency-per-field/159910 "2018-12-13T16:37:30Z")
Hi there, is there any convenient way to get the count of words/tokens in some fields of a document? for example: curl -XPUT 'http://localhost:9200/twitter/tweet/1?pretty=true' -d '{ "text1" : "twitter, test, test, t… --- ## [Adding multiple filters at once](https://discuss.elastic.co/t/adding-multiple-filters-at-once/134435)
**Author:** [@I\_like\_dogs](https://discuss.elastic.co/u/I_like_dogs)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 6:52pm UTC](https://discuss.elastic.co/t/adding-multiple-filters-at-once/134435 "2018-06-05T18:52:03Z")
hello, I'm wanting to filter out Alexa top 500 DNS queries for a word cloud. For example: { "query": { "bool": { "should": \[ { "match\_phrase": { "dns\_query.keyword": "google.com" } }, { "match\_phrase": { "dn… --- ## [Sort Order with Matching Values](https://discuss.elastic.co/t/sort-order-with-matching-values/13124)
**Author:** [@Jack\_Pearkes](https://discuss.elastic.co/u/Jack_Pearkes)\ **Replies:** 2\ **Last updated:** [August 8, 2013, 4:24pm UTC](https://discuss.elastic.co/t/sort-order-with-matching-values/13124 "2013-08-08T16:24:55Z")
Hello, I have a document with an attribute called "rating", which is a manually defined attribute created by the end-user. "rating" is indexed by Elasticsearch as an integer. Sometimes, "rating" can be identical i… --- ## [Truncate keyword to specific length and store](https://discuss.elastic.co/t/truncate-keyword-to-specific-length-and-store/96857)
**Author:** [@adyjayex](https://discuss.elastic.co/u/adyjayex)\ **Replies:** 5\ **Last updated:** [August 14, 2017, 2:06pm UTC](https://discuss.elastic.co/t/truncate-keyword-to-specific-length-and-store/96857 "2017-08-14T14:06:50Z")
Hello, I’m trying to retrieve only 128 characters of a text field I’m storing due to the fact that the text field is often extremely large, but for preview purposes I’d still like to retrieve part of that field without … --- ## [Issue with automatic email reporting with Watcher](https://discuss.elastic.co/t/issue-with-automatic-email-reporting-with-watcher/168117)
**Author:** [@brolly759](https://discuss.elastic.co/u/brolly759)\ **Replies:** 6\ **Last updated:** [February 12, 2019, 11:15pm UTC](https://discuss.elastic.co/t/issue-with-automatic-email-reporting-with-watcher/168117 "2019-02-12T23:15:35Z")
I am trying to add a custom watcher to generate a PNG dashboard and email to a custom email but I am having issues. When I simulate the watcher, my simulation results error out with email issues. I am using Elastic Cloud… [Previous page](https://discuss.elastic.co/top.md?page=616&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=618&per_page=50&period=all)