# Top

**URL:** https://discuss.elastic.co/top.md?page=619&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 620

---

## [Multiple ranges on x axis](https://discuss.elastic.co/t/multiple-ranges-on-x-axis/51888)

<div class="topic-metadata">

**Author:** [@S\_Roy](https://discuss.elastic.co/u/S_Roy)\
**Replies:** 7\
**Last updated:** [August 2, 2016, 2:34am UTC](https://discuss.elastic.co/t/multiple-ranges-on-x-axis/51888 "2016-08-02T02:34:38Z")

</div>

How do I display multiple ranges on x axis on a Kibana Graph?

---

## [Bloom filter codec?](https://discuss.elastic.co/t/bloom-filter-codec/18717)

<div class="topic-metadata">

**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Replies:** 5\
**Last updated:** [May 13, 2016, 3:28pm UTC](https://discuss.elastic.co/t/bloom-filter-codec/18717 "2016-05-13T15:28:02Z")

</div>

Has anyone had success adding a bloom filter to the codec for any of their fields? http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/index-modules-codec.html#bloom-postings I imagine it'd help …

---

## [Could not find any executable java binary elasticsearch windows](https://discuss.elastic.co/t/could-not-find-any-executable-java-binary-elasticsearch-windows/90698)

<div class="topic-metadata">

**Author:** [@jay\_panchali](https://discuss.elastic.co/u/jay_panchali)\
**Replies:** 1\
**Last updated:** [June 24, 2017, 8:46pm UTC](https://discuss.elastic.co/t/could-not-find-any-executable-java-binary-elasticsearch-windows/90698 "2017-06-24T20:46:49Z")

</div>

Hi Team , I am seeing above error while run this command from extracted files "C:\\Users\\admin\\Downloads\\Compressed\\elasticsearch-5.4.2\\elasticsearch-5.4.2\\bin\\elasticsearch " I have reinstall Java 8 or above. an…

---

## [Disabling default analyzer](https://discuss.elastic.co/t/disabling-default-analyzer/4392)

<div class="topic-metadata">

**Author:** [@Greg](https://discuss.elastic.co/u/Greg)\
**Replies:** 3\
**Last updated:** [April 9, 2013, 9:35pm UTC](https://discuss.elastic.co/t/disabling-default-analyzer/4392 "2013-04-09T21:35:06Z")

</div>

Hi all A bit of a newbie question: I don't want elasticsearch to tokenize any of my fields. What is the best way to disable the default analyzer? Alternatively, is it possible to have the automatic mapping default…

---

## [Send J-flow(Net-flow) to my Logstash to visualize on Kibana](https://discuss.elastic.co/t/send-j-flow-net-flow-to-my-logstash-to-visualize-on-kibana/45198)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 2\
**Last updated:** [April 1, 2016, 12:56pm UTC](https://discuss.elastic.co/t/send-j-flow-net-flow-to-my-logstash-to-visualize-on-kibana/45198 "2016-04-01T12:56:12Z")

</div>

Hi, I have set up an ELK server along with a Client Server that are working fine. I configured the client to send Syslogs to Logstash and can visualize it on Kibana and it works fine. I'm not done yet! I decided to …

---

## [Does ctx.trigger.scheduled\_time and ctx.execution\_time parse correctly in the watch query?](https://discuss.elastic.co/t/does-ctx-trigger-scheduled-time-and-ctx-execution-time-parse-correctly-in-the-watch-query/31896)

<div class="topic-metadata">

**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\
**Replies:** 2\
**Last updated:** [October 9, 2015, 9:42am UTC](https://discuss.elastic.co/t/does-ctx-trigger-scheduled-time-and-ctx-execution-time-parse-correctly-in-the-watch-query/31896 "2015-10-09T09:42:09Z")

</div>

I run, curl -XGET 'http://localhost:9200/.watch\_history\*/\_search?pretty' -d '{ "sort" : \[ { "result.execution\_time" : "desc" } \] }' and get: { "took" : 2, "timed\_out" : false, "\_shards" : { "total"…

---

## [AutoDiscover - can't ship docker container logs by image name](https://discuss.elastic.co/t/autodiscover-cant-ship-docker-container-logs-by-image-name/113110)

<div class="topic-metadata">

**Author:** [@Asaf\_Shabat](https://discuss.elastic.co/u/Asaf_Shabat)\
**Replies:** 7\
**Last updated:** [December 28, 2017, 6:37am UTC](https://discuss.elastic.co/t/autodiscover-cant-ship-docker-container-logs-by-image-name/113110 "2017-12-28T06:37:45Z")

</div>

I'm trying to set up the AutoDiscover component in the Filebeat.yml. I'm using it in order to take logs from specific containers which generated by a specific Docker image. When I'm working with the "filebeat.autodisco…

---

## [Shipping logs to a remote server](https://discuss.elastic.co/t/shipping-logs-to-a-remote-server/44864)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 7\
**Last updated:** [March 23, 2016, 1:23am UTC](https://discuss.elastic.co/t/shipping-logs-to-a-remote-server/44864 "2016-03-23T01:23:28Z")

</div>

How can I ship logs to another remote server and display on kibana dashboard? I tried to install logstash on the server i want to ship logs from and sent to the server I want to receive the logs on though redis queue..…

---

## [Problem with Transport client and elasticsearch cluster behind load balancer](https://discuss.elastic.co/t/problem-with-transport-client-and-elasticsearch-cluster-behind-load-balancer/34989)

<div class="topic-metadata">

**Author:** [@tanjok](https://discuss.elastic.co/u/tanjok)\
**Replies:** 2\
**Last updated:** [May 26, 2017, 12:51pm UTC](https://discuss.elastic.co/t/problem-with-transport-client-and-elasticsearch-cluster-behind-load-balancer/34989 "2017-05-26T12:51:14Z")

</div>

Hallo, I try to use elasticsearch for "search suggestion" in a java-webapplication. There are 2 nodes in the cluster behind a load balancer. I use elasticsearch 1.5 My problem is, if I use Transport Client with node …

---

## [Bypass null\_pointer\_exception when sorting Scripted Fields Painless](https://discuss.elastic.co/t/bypass-null-pointer-exception-when-sorting-scripted-fields-painless/161059)

<div class="topic-metadata">

**Author:** [@vkandiva](https://discuss.elastic.co/u/vkandiva)\
**Replies:** 5\
**Last updated:** [December 18, 2018, 11:48pm UTC](https://discuss.elastic.co/t/bypass-null-pointer-exception-when-sorting-scripted-fields-painless/161059 "2018-12-18T23:48:43Z")

</div>

Hi All, I am using NEST to generate the following request to Elastic Search 6.3: { "from": 0, "size": 14, "sort": \[ { "\_script": { "order": "asc", "type": "number" "script": { "source": "if( (doc\['1'\].value-doc…

---

## [TCP input and http output plugin configuration is not working](https://discuss.elastic.co/t/tcp-input-and-http-output-plugin-configuration-is-not-working/130907)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 5\
**Last updated:** [May 8, 2018, 7:24pm UTC](https://discuss.elastic.co/t/tcp-input-and-http-output-plugin-configuration-is-not-working/130907 "2018-05-08T19:24:49Z")

</div>

Hi, I am running logstash with tcp input and http output plugin(which is sending to another logstash from which it would be to ES) and I don't see any logs in ES. But when I replace tcp plugin with udp, I see logs in ES…

---

## [Settings Log traceId](https://discuss.elastic.co/t/settings-log-traceid/246665)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 6:50am UTC](https://discuss.elastic.co/t/settings-log-traceid/246665 "2020-09-02T06:50:21Z")

</div>

Good morning, I don't know if it is a bug but I would like confirm it. I have a configuration of Logs where I added one pattern more. With this change I can see all the logs, but if i want see the trace of a transact…

---

## [\[Announcement\] ElasticUtils for simplified Access to the Elasticsearch Java API](https://discuss.elastic.co/t/announcement-elasticutils-for-simplified-access-to-the-elasticsearch-java-api/65882)

<div class="topic-metadata">

**Author:** [@bytefish](https://discuss.elastic.co/u/bytefish)\
**Replies:** 0\
**Last updated:** [November 12, 2016, 4:21pm UTC](https://discuss.elastic.co/t/announcement-elasticutils-for-simplified-access-to-the-elasticsearch-java-api/65882 "2016-11-12T16:21:38Z")

</div>

I would like to announce ElasticUtils, which is a Java library for Elasticsearch 2.3 and 5.0.0: https://github.com/bytefish/ElasticUtils The library provides easy access to the Elasticsearch Mapping and Bulk API in El…

---

## [Kibana not showing all data for an Elasticsearch index](https://discuss.elastic.co/t/kibana-not-showing-all-data-for-an-elasticsearch-index/66812)

<div class="topic-metadata">

**Author:** [@roopendra](https://discuss.elastic.co/u/roopendra)\
**Replies:** 1\
**Last updated:** [November 22, 2016, 6:25am UTC](https://discuss.elastic.co/t/kibana-not-showing-all-data-for-an-elasticsearch-index/66812 "2016-11-22T06:25:10Z")

</div>

I came across very strange issue in Kibana. Kibana is not showing all indexed data for an elasticsearch index. Total Document in Elasticsearch: 3441012 (Stopped logstash , hence no indexing is going on since 21-Nov) Do…

---

## [Warnings after patching from 7.4.0 to 7.4.1](https://discuss.elastic.co/t/warnings-after-patching-from-7-4-0-to-7-4-1/205340)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 5\
**Last updated:** [November 22, 2019, 4:27pm UTC](https://discuss.elastic.co/t/warnings-after-patching-from-7-4-0-to-7-4-1/205340 "2019-11-22T16:27:31Z")

</div>

Just patched kibana as the last component after patching hole cluster from 7.4.0 to 7.4.1 and find these kibana warnings when launched: {"type":"log","@timestamp":"2019-10-26T07:31:24Z","tags":\["warning","plugins","sec…

---

## [java.nio.file.FileSystemException](https://discuss.elastic.co/t/java-nio-file-filesystemexception/138160)

<div class="topic-metadata">

**Author:** [@piingluo](https://discuss.elastic.co/u/piingluo)\
**Replies:** 5\
**Last updated:** [July 2, 2018, 12:27pm UTC](https://discuss.elastic.co/t/java-nio-file-filesystemexception/138160 "2018-07-02T12:27:37Z")

</div>

after i delete an indices, the log keeps getting the follow error: \[2018-07-02T17:24:30,396\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[node-2\] failed to list dangling indices java.nio.file.FileSystemException: /elasticsearch/…

---

## [Need to generate UUID in painless script](https://discuss.elastic.co/t/need-to-generate-uuid-in-painless-script/165318)

<div class="topic-metadata">

**Author:** [@Oliver\_Henlich](https://discuss.elastic.co/u/Oliver_Henlich)\
**Replies:** 4\
**Last updated:** [February 15, 2019, 12:32am UTC](https://discuss.elastic.co/t/need-to-generate-uuid-in-painless-script/165318 "2019-02-15T00:32:09Z")

</div>

Hi, I am trying to use the reindex api to create a copy of a set of documents. One of the fields (productId) of the document is a UUID. I need the copied documents to have new UUIDs for the productId field. Please note…

---

## [Cannot restore index](https://discuss.elastic.co/t/cannot-restore-index/34533)

<div class="topic-metadata">

**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\
**Replies:** 4\
**Last updated:** [January 5, 2016, 10:56pm UTC](https://discuss.elastic.co/t/cannot-restore-index/34533 "2016-01-05T22:56:07Z")

</div>

Hello guys, 18 index has been migrated as well from old cluster with ES 1.7 to a new cluster with ES 2.0, but I have a problem with 1 index, here is the message: curl -XPOST http://cviadpzl01:9200/\_snapshot/m…

---

## [No configuration found in the configured sources](https://discuss.elastic.co/t/no-configuration-found-in-the-configured-sources/135420)

<div class="topic-metadata">

**Author:** [@mrahim](https://discuss.elastic.co/u/mrahim)\
**Replies:** 1\
**Last updated:** [June 12, 2018, 6:43am UTC](https://discuss.elastic.co/t/no-configuration-found-in-the-configured-sources/135420 "2018-06-12T06:43:58Z")

</div>

I am looking to create a simple logstash configuration in the Linux command line according to the first example shown here Logstash Configuration Examples | Logstash Reference \[6.3\] | Elastic . Here is all that is uncom…

---

## [Too many dynamic script compilations](https://discuss.elastic.co/t/too-many-dynamic-script-compilations/120149)

<div class="topic-metadata">

**Author:** [@sunil129](https://discuss.elastic.co/u/sunil129)\
**Replies:** 1\
**Last updated:** [February 16, 2018, 6:00pm UTC](https://discuss.elastic.co/t/too-many-dynamic-script-compilations/120149 "2018-02-16T18:00:29Z")

</div>

Hi, when i select a dashboard, i am getting the below error in Kibana. Visualize: \[script\] Too many dynamic script compilations within, max: \[75/5m\]; please use indexed, or scripts with parameters instead; this limit c…

---

## [Importing language analyzers](https://discuss.elastic.co/t/importing-language-analyzers/4903)

<div class="topic-metadata">

**Author:** [@Pawel\_Konieczny](https://discuss.elastic.co/u/Pawel_Konieczny)\
**Replies:** 7\
**Last updated:** [July 24, 2011, 2:17am UTC](https://discuss.elastic.co/t/importing-language-analyzers/4903 "2011-07-24T02:17:09Z")

</div>

Hey! Is it possible to import language analyzers from Lucene since ES is built on top of it (and Lucene has definitely more languages supported out of box)? The list of languages supported by EA is pretty extensiv…

---

## [Visualizing API endpoint hit counts in Kibana](https://discuss.elastic.co/t/visualizing-api-endpoint-hit-counts-in-kibana/89778)

<div class="topic-metadata">

**Author:** [@afcooper](https://discuss.elastic.co/u/afcooper)\
**Replies:** 3\
**Last updated:** [June 19, 2017, 5:55pm UTC](https://discuss.elastic.co/t/visualizing-api-endpoint-hit-counts-in-kibana/89778 "2017-06-19T17:55:04Z")

</div>

Hi, I'm new to Kibana and ELS. I'm working on a python app that uses Flask. The api endpoint logs are being dumped into a generic "log" field that is not cleanly parseable. I should be able to search for endpoints, and t…

---

## [Ingest of data hammering one node only](https://discuss.elastic.co/t/ingest-of-data-hammering-one-node-only/216341)

<div class="topic-metadata">

**Author:** [@Philip\_Brown](https://discuss.elastic.co/u/Philip_Brown)\
**Replies:** 7\
**Last updated:** [January 24, 2020, 10:05pm UTC](https://discuss.elastic.co/t/ingest-of-data-hammering-one-node-only/216341 "2020-01-24T22:05:24Z")

</div>

We have a 14-datanode elastic cluster running version (censored for embarassment), and 3 master nodes We have a bunch of machines sending logfile output, into the cluster, via filebeat and logstash. logstash is pointed…

---

## [Suspicious memory leak due to netty PoolThreadCache](https://discuss.elastic.co/t/suspicious-memory-leak-due-to-netty-poolthreadcache/163730)

<div class="topic-metadata">

**Author:** [@howardhuang](https://discuss.elastic.co/u/howardhuang)\
**Replies:** 7\
**Last updated:** [January 15, 2019, 7:57am UTC](https://discuss.elastic.co/t/suspicious-memory-leak-due-to-netty-poolthreadcache/163730 "2019-01-15T07:57:32Z")

</div>

Hi, We have 10 nodes based on ES 5.6.4, and each node 8Core, 8GB memory. The cluster only have one index with 10 shards 1 replica. Each shard has around 180GB data (single big shard is a history issue). One day, cluste…

---

## [Watcher with slack using proxy](https://discuss.elastic.co/t/watcher-with-slack-using-proxy/82360)

<div class="topic-metadata">

**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Replies:** 7\
**Last updated:** [April 17, 2017, 8:00am UTC](https://discuss.elastic.co/t/watcher-with-slack-using-proxy/82360 "2017-04-17T08:00:56Z")

</div>

Hi, We have given the condition for cluster health monitoring. We are behind the proxy. So we have seen the error, "sent\_messages": \[ { "status": "failure", "reason": "UnknownHostException\[hooks.slack.com\]", Now…

---

## [Cannot run elasticsearch-plugin -install mobz/elasticsearch-head](https://discuss.elastic.co/t/cannot-run-elasticsearch-plugin-install-mobz-elasticsearch-head/67936)

<div class="topic-metadata">

**Author:** [@Gora\_LEYE](https://discuss.elastic.co/u/Gora_LEYE)\
**Replies:** 1\
**Last updated:** [December 3, 2016, 11:40pm UTC](https://discuss.elastic.co/t/cannot-run-elasticsearch-plugin-install-mobz-elasticsearch-head/67936 "2016-12-03T23:40:06Z")

</div>

Hi, I have elasticsearch-5.0.1 I cannot run elastic search command elasticsearch-plugin -install mobz/elasticsearch-head. When I try to run the command elasticsearch-plugin -install mobz/elasticsearch-head I obtain the…

---

## [Make: \*\*\* No rule to make target \`setup'. Stop.- Custom beat](https://discuss.elastic.co/t/make-no-rule-to-make-target-setup-stop-custom-beat/229231)

<div class="topic-metadata">

**Author:** [@visasimbu](https://discuss.elastic.co/u/visasimbu)\
**Replies:** 2\
**Last updated:** [May 5, 2020, 8:51pm UTC](https://discuss.elastic.co/t/make-no-rule-to-make-target-setup-stop-custom-beat/229231 "2020-05-05T20:51:29Z")

</div>

I am able to create custom beat and build (mage build) as per the documentation. But I am getting below error while executing make setup. Documentation is here. \[user@machineName test3\]$ make setup make: \*\*\* No rule to …

---

## [Can't filter Unicode logs at all](https://discuss.elastic.co/t/cant-filter-unicode-logs-at-all/146701)

<div class="topic-metadata">

**Author:** [@yolt](https://discuss.elastic.co/u/yolt)\
**Replies:** 2\
**Last updated:** [August 31, 2018, 9:32am UTC](https://discuss.elastic.co/t/cant-filter-unicode-logs-at-all/146701 "2018-08-31T09:32:17Z")

</div>

Hello, I need help to find out how to set Filebeat or Logstash or both... to be able successfully filter logs by message from files which have set encoding as Unicode I will provide screenshots to describe problem as…

---

## [Negative Filter - Not getting expected results](https://discuss.elastic.co/t/negative-filter-not-getting-expected-results/143778)

<div class="topic-metadata">

**Author:** [@Elastastic](https://discuss.elastic.co/u/Elastastic)\
**Replies:** 2\
**Last updated:** [August 13, 2018, 3:29pm UTC](https://discuss.elastic.co/t/negative-filter-not-getting-expected-results/143778 "2018-08-13T15:29:24Z")

</div>

Hello all, You'll have to excuse me as I'm quite new to the ELK stack and so, I might not be using proper terminology when describing my problem so please forgive me in advance. I'm running a new installation of ELK on…

---

## [Kibana Query Timeout - Cancel in-process query](https://discuss.elastic.co/t/kibana-query-timeout-cancel-in-process-query/96356)

<div class="topic-metadata">

**Author:** [@bal](https://discuss.elastic.co/u/bal)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 7:38pm UTC](https://discuss.elastic.co/t/kibana-query-timeout-cancel-in-process-query/96356 "2017-08-10T19:38:11Z")

</div>

Hi, Kibana (5.x version) times out and changes status to RED for some time if a user submits any query taking long time like searching across all indexes with query starting with \*. Kibana recovers automatically but its…

---

## [Winlogbeat - Event Tagging and Overriding 'type' in Logstash](https://discuss.elastic.co/t/winlogbeat-event-tagging-and-overriding-type-in-logstash/42539)

<div class="topic-metadata">

**Author:** [@cord\_thomas](https://discuss.elastic.co/u/cord_thomas)\
**Replies:** 2\
**Last updated:** [February 24, 2016, 2:20am UTC](https://discuss.elastic.co/t/winlogbeat-event-tagging-and-overriding-type-in-logstash/42539 "2016-02-24T02:20:12Z")

</div>

I have setup winlogbeat to forward windows events to logstash. I am quite new to ELK / Beats, but finding it quite intuitive and well documented - really enjoying it all. Problem - my data was not getting indexed as …

---

## [Display a visualization in an App Plugin](https://discuss.elastic.co/t/display-a-visualization-in-an-app-plugin/81849)

<div class="topic-metadata">

**Author:** [@Kikketer](https://discuss.elastic.co/u/Kikketer)\
**Replies:** 8\
**Last updated:** [April 14, 2017, 3:58pm UTC](https://discuss.elastic.co/t/display-a-visualization-in-an-app-plugin/81849 "2017-04-14T15:58:51Z")

</div>

So I have an app plugin where I would like to show a visualization. After I type it, it seems very simple but I'm not even really sure where to start. More detailed I'm trying to create a plugin that will have a filte…

---

## [ERROR Failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/error-failed-to-publish-events-temporary-bulk-send-failure/235175)

<div class="topic-metadata">

**Author:** [@afonsoavr](https://discuss.elastic.co/u/afonsoavr)\
**Replies:** 3\
**Last updated:** [June 2, 2020, 6:59pm UTC](https://discuss.elastic.co/t/error-failed-to-publish-events-temporary-bulk-send-failure/235175 "2020-06-02T18:59:32Z")

</div>

I create the my apm server in ECS on AWS. This APM Server is with 256 CPU and 1024 MiB per task with 5 tasks. And eventualy I receive this errors: 2020-05-27T01:38:37.929Z ERROR elasticsearch/client.go:333 Failed to p…

---

## [How to use filter\_path in java api?](https://discuss.elastic.co/t/how-to-use-filter-path-in-java-api/42844)

<div class="topic-metadata">

**Author:** [@laigood](https://discuss.elastic.co/u/laigood)\
**Replies:** 3\
**Last updated:** [June 10, 2016, 1:20pm UTC](https://discuss.elastic.co/t/how-to-use-filter-path-in-java-api/42844 "2016-06-10T13:20:15Z")

</div>

I found in the doc that "All REST APIs accept a filter\_path parameter that can be used to reduce the response returned by elasticsearch". But I can't find this parameters in SearchRequestBuilder like other parameters.Ho…

---

## [Sort alphanumeric values of a field](https://discuss.elastic.co/t/sort-alphanumeric-values-of-a-field/96505)

<div class="topic-metadata">

**Author:** [@jth1](https://discuss.elastic.co/u/jth1)\
**Replies:** 0\
**Last updated:** [August 9, 2017, 8:20pm UTC](https://discuss.elastic.co/t/sort-alphanumeric-values-of-a-field/96505 "2017-08-09T20:20:09Z")

</div>

When applied sort ascending the values bp1, bp3, bp20, bp2, bp31, bp10, the order returned is bp1, bp10, bp2, bp20, bp3, bp31. I wanted it to be ordered like bp1, bp2, bp2, bp10, bp20, bp31. How can I achieve this?

---

## [Logstash add\_field not working](https://discuss.elastic.co/t/logstash-add-field-not-working/104510)

<div class="topic-metadata">

**Author:** [@VidyVideni](https://discuss.elastic.co/u/VidyVideni)\
**Replies:** 2\
**Last updated:** [October 20, 2017, 3:23am UTC](https://discuss.elastic.co/t/logstash-add-field-not-working/104510 "2017-10-20T03:23:45Z")

</div>

I add a field named request using following filter, however it doesn't use url\_path and 'query\_string' values, I tried to change logstash config as "request" =\> "%{\[uri\_path\]}%{\[query\_string\]}" why the add\_f…

---

## [Get Elasticsearch Version with Java Api](https://discuss.elastic.co/t/get-elasticsearch-version-with-java-api/14599)

<div class="topic-metadata">

**Author:** [@Stefan\_Meiwald](https://discuss.elastic.co/u/Stefan_Meiwald)\
**Replies:** 2\
**Last updated:** [November 26, 2013, 3:06pm UTC](https://discuss.elastic.co/t/get-elasticsearch-version-with-java-api/14599 "2013-11-26T15:06:09Z")

</div>

I am looking for the Java API pendant to curl -XGET http://localhost:9200 With a Result like: { "ok" : true, "status" : 200, "name" : "Kierrok", "version" : { "number" : "0.…

---

## [Watcher alerts, customizing message from Kibana Ui](https://discuss.elastic.co/t/watcher-alerts-customizing-message-from-kibana-ui/141670)

<div class="topic-metadata">

**Author:** [@palace](https://discuss.elastic.co/u/palace)\
**Replies:** 4\
**Last updated:** [July 27, 2018, 1:55pm UTC](https://discuss.elastic.co/t/watcher-alerts-customizing-message-from-kibana-ui/141670 "2018-07-27T13:55:54Z")

</div>

Hello all, I am able to send notifications of possible anomalies to my slack space. However, I am trying to customize the message to include information surrounding the anomaly such as the \[ID, timestamp, typical, actua…

---

## [Aggregating related log events with a common field](https://discuss.elastic.co/t/aggregating-related-log-events-with-a-common-field/73138)

<div class="topic-metadata">

**Author:** [@Myles](https://discuss.elastic.co/u/Myles)\
**Replies:** 4\
**Last updated:** [February 4, 2017, 11:21pm UTC](https://discuss.elastic.co/t/aggregating-related-log-events-with-a-common-field/73138 "2017-02-04T23:21:48Z")

</div>

TLDR: How do I make the empty cells in the table below show the same data as the non-empty cells when the value shown in the first column is the same. I am ingesting audit logs from my enterprise CAS stack witch handles…

---

## [Master not discovered exception happening randomly in self hosted AWS](https://discuss.elastic.co/t/master-not-discovered-exception-happening-randomly-in-self-hosted-aws/99659)

<div class="topic-metadata">

**Author:** [@mujtabahussain](https://discuss.elastic.co/u/mujtabahussain)\
**Replies:** 5\
**Last updated:** [September 12, 2017, 10:57pm UTC](https://discuss.elastic.co/t/master-not-discovered-exception-happening-randomly-in-self-hosted-aws/99659 "2017-09-12T22:57:38Z")

</div>

Hello all. Setup: Configurable number of data nodes (3 at the moment), one dedicated master node and configurable number of ingest nodes (based on load) that exist in the same private subnet inside a VPC. The master no…

---

## [Watcher time filter problem](https://discuss.elastic.co/t/watcher-time-filter-problem/34690)

<div class="topic-metadata">

**Author:** [@zokratez](https://discuss.elastic.co/u/zokratez)\
**Replies:** 5\
**Last updated:** [January 1, 2016, 5:36am UTC](https://discuss.elastic.co/t/watcher-time-filter-problem/34690 "2016-01-01T05:36:26Z")

</div>

I have a watcher checking if somebody is making ssh bruteforce... I run the Hydra to generate some logs... and the watcher find it and send me emails correctly. The problem is that it's never stop sending me emails... So…

---

## [Silence deprecation log without restarting the cluster](https://discuss.elastic.co/t/silence-deprecation-log-without-restarting-the-cluster/232715)

<div class="topic-metadata">

**Author:** [@Khoa\_Le](https://discuss.elastic.co/u/Khoa_Le)\
**Replies:** 7\
**Last updated:** [May 16, 2020, 6:09pm UTC](https://discuss.elastic.co/t/silence-deprecation-log-without-restarting-the-cluster/232715 "2020-05-16T18:09:06Z")

</div>

Hi, We had a log4j settings that has set the logging level of org.elasticsearch.deprecation to ERROR that we set from the \_cluster/settings endpoint. Ever since we upgraded to 6.8.6, that settings stopped working and th…

---

## [Scripted fields throwing error](https://discuss.elastic.co/t/scripted-fields-throwing-error/194555)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 7\
**Last updated:** [August 9, 2019, 10:11am UTC](https://discuss.elastic.co/t/scripted-fields-throwing-error/194555 "2019-08-09T10:11:34Z")

</div>

I have few scripted fields which are causing error post migrations from 5x to 7.0.0. Then i noticed in breaking changes that i need to include a check like below to confirm if the fields exist: A document doesn't have …

---

## [Create river error (no such index) index\_not\_found\_exception](https://discuss.elastic.co/t/create-river-error-no-such-index-index-not-found-exception/92054)

<div class="topic-metadata">

**Author:** [@ines\_ben\_kraiem](https://discuss.elastic.co/u/ines_ben_kraiem)\
**Replies:** 8\
**Last updated:** [July 8, 2017, 5:35pm UTC](https://discuss.elastic.co/t/create-river-error-no-such-index-index-not-found-exception/92054 "2017-07-08T17:35:55Z")

</div>

I keep getting an error when i wrote this url http://localhost:9200/capteur/\_search error root\_cause 0 type "index\_not\_found\_exception" reason "no such index" resource.type "index\_or\_alias" resource.id "capteur" ind…

---

## [Logstash filter jdbc\_streaming: how to get the target value](https://discuss.elastic.co/t/logstash-filter-jdbc-streaming-how-to-get-the-target-value/102959)

<div class="topic-metadata">

**Author:** [@ras\_dvt](https://discuss.elastic.co/u/ras_dvt)\
**Replies:** 2\
**Last updated:** [October 6, 2017, 10:19am UTC](https://discuss.elastic.co/t/logstash-filter-jdbc-streaming-how-to-get-the-target-value/102959 "2017-10-06T10:19:08Z")

</div>

Hello, I use jdbc\_streaming filter to get data from an Oracle database and have something like this: filter { ... jdbc\_streaming { jdbc\_driver\_library =\> "..." jdbc\_driver\_class =\> "..." jdbc\_connection\_string =\>…

---

## [Upgrade Elasticsearch from 6.8.23 to 8.4.1](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-8-23-to-8-4-1/314126)

<div class="topic-metadata">

**Author:** [@Taby](https://discuss.elastic.co/u/Taby)\
**Replies:** 4\
**Last updated:** [September 12, 2022, 3:07pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-8-23-to-8-4-1/314126 "2022-09-12T15:07:41Z")

</div>

Hi. I've few questions regarding a possible upgrade of Elasticsearch from 6.8.23 to 8.4.1. Our application is based on Java 8 build using SBT play framework, currently running and using Elasticsearch 6.8.23 on Mac, Red…

---

## [ECK Operator stuck in ApplyingChanges state after upgrade to 1.4.0](https://discuss.elastic.co/t/eck-operator-stuck-in-applyingchanges-state-after-upgrade-to-1-4-0/265726)

<div class="topic-metadata">

**Author:** [@barracuda-charles](https://discuss.elastic.co/u/barracuda-charles)\
**Replies:** 4\
**Last updated:** [March 4, 2021, 8:25am UTC](https://discuss.elastic.co/t/eck-operator-stuck-in-applyingchanges-state-after-upgrade-to-1-4-0/265726 "2021-03-04T08:25:52Z")

</div>

I recently upgraded to 1.4.0 and the operator is stuck in the ApplyingChanges state. I expanded a few volumes on data nodes which caused the cluster to enter a yellow state temporarily however the operator stayed green t…

---

## [What does Output Errors mean in Beats monitoring in Kibana?](https://discuss.elastic.co/t/what-does-output-errors-mean-in-beats-monitoring-in-kibana/283365)

<div class="topic-metadata">

**Author:** [@tterranigma](https://discuss.elastic.co/u/tterranigma)\
**Replies:** 5\
**Last updated:** [September 6, 2021, 11:56am UTC](https://discuss.elastic.co/t/what-does-output-errors-mean-in-beats-monitoring-in-kibana/283365 "2021-09-06T11:56:16Z")

</div>

Hello, In the Stack Monitoring page in Kibana, in the beats section, there is a column called Output Errors. What is this about? I can't see errors in the logs of the remote beats that are being monitored. If it is abo…

---

## [Forward logs to a new instance of Elasticsearch](https://discuss.elastic.co/t/forward-logs-to-a-new-instance-of-elasticsearch/181916)

<div class="topic-metadata">

**Author:** [@Camilo\_Diaz](https://discuss.elastic.co/u/Camilo_Diaz)\
**Replies:** 3\
**Last updated:** [May 22, 2019, 12:37am UTC](https://discuss.elastic.co/t/forward-logs-to-a-new-instance-of-elasticsearch/181916 "2019-05-22T00:37:43Z")

</div>

Hi, I am fairly new to Elasticsearch and I am seeking some advice. I have inherited an ELK stack which is processing logs from several sources and I am looking into forwarding some of those logs to another instance of …

---

## [AWS Version of Elasticsearch, issue with GeoIP with Lambda Function](https://discuss.elastic.co/t/aws-version-of-elasticsearch-issue-with-geoip-with-lambda-function/89241)

<div class="topic-metadata">

**Author:** [@wali\_raheem](https://discuss.elastic.co/u/wali_raheem)\
**Replies:** 3\
**Last updated:** [June 14, 2017, 4:03pm UTC](https://discuss.elastic.co/t/aws-version-of-elasticsearch-issue-with-geoip-with-lambda-function/89241 "2017-06-14T16:03:42Z")

</div>

Hi All, I'm very new to Elasticsearch and I'm trying to get it to load some data from our AWS application load balancer with some geoip data. Well to be precise, I haven't even gotten to the Lambda converting the ip to…

[Previous page](https://discuss.elastic.co/top.md?page=618&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=620&per_page=50&period=all)
