# Top **URL:** https://discuss.elastic.co/top.md?page=622&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 623 --- ## [API changes report for Elasticsearch](https://discuss.elastic.co/t/api-changes-report-for-elasticsearch/102647)
**Author:** [@lvc](https://discuss.elastic.co/u/lvc)\ **Replies:** 4\ **Last updated:** [October 5, 2017, 7:35am UTC](https://discuss.elastic.co/t/api-changes-report-for-elasticsearch/102647 "2017-10-05T07:35:48Z")
Hi, I'd like to share my results on API changes analysis for the library: https://abi-laboratory.pro/java/tracker/timeline/elasticsearch/ The report is generated by the https://github.com/lvc/japi-compliance-checker to… --- ## [Error from \_cat APIs: Values less than -1 bytes are not supported](https://discuss.elastic.co/t/error-from-cat-apis-values-less-than-1-bytes-are-not-supported/220071)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 3\ **Last updated:** [February 20, 2020, 9:11am UTC](https://discuss.elastic.co/t/error-from-cat-apis-values-less-than-1-bytes-are-not-supported/220071 "2020-02-20T09:11:10Z")
Elasticsearch cluster running 7.1.1. I was adding/removing some nodes to the cluster, but no other config changes took place. The \_cat/nodes and \_cat/indices API started returning an error as below $ curl localhost:9200… --- ## [Set default value for a field in Logstash if the field is null or if it doesn't exist](https://discuss.elastic.co/t/set-default-value-for-a-field-in-logstash-if-the-field-is-null-or-if-it-doesnt-exist/152770)
**Author:** [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)\ **Replies:** 2\ **Last updated:** [October 18, 2018, 2:12pm UTC](https://discuss.elastic.co/t/set-default-value-for-a-field-in-logstash-if-the-field-is-null-or-if-it-doesnt-exist/152770 "2018-10-18T14:12:47Z")
Hello, I would like to know if it would be possible to set default value for a field in Logstash if the field is null or if it doesn't exist. In my example, I have a "dead\_letter\_queue" input where I can have one, two … --- ## [How to add certificates to java keystore](https://discuss.elastic.co/t/how-to-add-certificates-to-java-keystore/223546)
**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 8:30am UTC](https://discuss.elastic.co/t/how-to-add-certificates-to-java-keystore/223546 "2020-04-14T08:30:54Z")
I need to connect to S3 repo from elasticsearch to store snapshots. Our S3 endpoint has mutual ssl authentication. I have ca.crt, client.key, client.crt. How to add these certs to java keystore, so that I can connect … --- ## [How to use document id to avoid duplication of logs?](https://discuss.elastic.co/t/how-to-use-document-id-to-avoid-duplication-of-logs/234644)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 7\ **Last updated:** [May 29, 2020, 2:56am UTC](https://discuss.elastic.co/t/how-to-use-document-id-to-avoid-duplication-of-logs/234644 "2020-05-29T02:56:41Z")
Hi, I'm using logstash file input to index various log files available in the input location. These logfiles are generated by log4j in various systems and are fetched using a cron job to the input location. Is there a… --- ## [How to improve io performance in elasticsearch](https://discuss.elastic.co/t/how-to-improve-io-performance-in-elasticsearch/65449)
**Author:** [@Evgeny\_Rachlenko](https://discuss.elastic.co/u/Evgeny_Rachlenko)\ **Replies:** 6\ **Last updated:** [November 14, 2016, 7:08am UTC](https://discuss.elastic.co/t/how-to-improve-io-performance-in-elasticsearch/65449 "2016-11-14T07:08:09Z")
Всем привет. пытаюсь улучшить скорость записи в elasticsearch по этому документу. https://www.elastic.co/guide/en/elasticsearch/guide/current/indexing-performance.html попутно возникла идея создать несколько машинок… --- ## [Logstash environment plugin doesn't seem to work](https://discuss.elastic.co/t/logstash-environment-plugin-doesnt-seem-to-work/38872)
**Author:** [@schmorgs](https://discuss.elastic.co/u/schmorgs)\ **Replies:** 6\ **Last updated:** [February 17, 2016, 3:44pm UTC](https://discuss.elastic.co/t/logstash-environment-plugin-doesnt-seem-to-work/38872 "2016-02-17T15:44:13Z")
I want to use an environment variable in my logstash config and see there is an "environment" input community plugin which has a function called add\_metadata\_from\_env. I've installed the plugin (under Logstash 2.1.0) a… --- ## [Single Logout using Kibana and Keycloak](https://discuss.elastic.co/t/single-logout-using-kibana-and-keycloak/216094)
**Author:** [@Dennis\_Rietvink](https://discuss.elastic.co/u/Dennis_Rietvink)\ **Replies:** 5\ **Last updated:** [January 26, 2020, 1:18pm UTC](https://discuss.elastic.co/t/single-logout-using-kibana-and-keycloak/216094 "2020-01-26T13:18:48Z")
We are integrating Kibana in our Keycloak identity management solution but have problems getting ‘single logout’ working when triggered from another client. This is the scenario: User enters the portal but has to logi… --- ## [Serching requested files in Kibana which ends in a number and the file extension](https://discuss.elastic.co/t/serching-requested-files-in-kibana-which-ends-in-a-number-and-the-file-extension/78906)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 5\ **Last updated:** [March 16, 2017, 8:02pm UTC](https://discuss.elastic.co/t/serching-requested-files-in-kibana-which-ends-in-a-number-and-the-file-extension/78906 "2017-03-16T20:02:12Z")
I bumped into a strange issue. When I tried to look for the most requested documents (pdf) on one of the analyzed sites, I saw that there are some docs definitely missing. First I used "request:\*.pdf" then I checked "req… --- ## [Alternative BI Reporting visualization tool for Kibana](https://discuss.elastic.co/t/alternative-bi-reporting-visualization-tool-for-kibana/20033)
**Author:** [@Petr\_Lazecky](https://discuss.elastic.co/u/Petr_Lazecky)\ **Replies:** 2\ **Last updated:** [October 1, 2014, 10:52pm UTC](https://discuss.elastic.co/t/alternative-bi-reporting-visualization-tool-for-kibana/20033 "2014-10-01T22:52:05Z")
Hi guys, I have following question for you. Let's say that I would like to use alternative reporting tool to display aggregated data and documents from Elasticsearch instead of Kibana. There is nothing wrong w… --- ## [Elastic 6.6.0: Windows server 2016 service not starting](https://discuss.elastic.co/t/elastic-6-6-0-windows-server-2016-service-not-starting/172283)
**Author:** [@Sheppie](https://discuss.elastic.co/u/Sheppie)\ **Replies:** 3\ **Last updated:** [April 10, 2019, 7:10am UTC](https://discuss.elastic.co/t/elastic-6-6-0-windows-server-2016-service-not-starting/172283 "2019-04-10T07:10:47Z")
The topic has been discussed earlier here and here about not being able to start the ElasticSearch service under a Domain Service account. I know the account does not have sufficient privileges "somewhere", but I'm havi… --- ## [Elasticsearch Azure cloud plugin 2.8.0 released](https://discuss.elastic.co/t/elasticsearch-azure-cloud-plugin-2-8-0-released/25897)
**Author:** [@tanguy](https://discuss.elastic.co/u/tanguy)\ **Replies:** 0\ **Last updated:** [July 20, 2015, 11:07am UTC](https://discuss.elastic.co/t/elasticsearch-azure-cloud-plugin-2-8-0-released/25897 "2015-07-20T11:07:43Z")
Hi, We are pleased to announce the release of the Elasticsearch Azure cloud plugin, version 2.8.0. The Azure Cloud plugin allows to use Azure API for the unicast discovery mechanism and add Azure storage repositories… --- ## [Unable to preserve special characters in search results of ElasticSearch](https://discuss.elastic.co/t/unable-to-preserve-special-characters-in-search-results-of-elasticsearch/22820)
**Author:** [@Anusha](https://discuss.elastic.co/u/Anusha)\ **Replies:** 4\ **Last updated:** [March 26, 2015, 12:18pm UTC](https://discuss.elastic.co/t/unable-to-preserve-special-characters-in-search-results-of-elasticsearch/22820 "2015-03-26T12:18:31Z")
Hi, I want to preserve the special characters like -, /, (, ) in search results. Ex: Abc/def a(bc)def a-bcd response: If I enter Abc/ the records containing abc/ need to come, similarly for abc/def records… --- ## [How does Elasticsearch calculate the field-length norm?](https://discuss.elastic.co/t/how-does-elasticsearch-calculate-the-field-length-norm/22913)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 2\ **Last updated:** [March 30, 2015, 3:47am UTC](https://discuss.elastic.co/t/how-does-elasticsearch-calculate-the-field-length-norm/22913 "2015-03-30T03:47:41Z")
Per this post "theory behind relevance scoring" http://www.elastic.co/guide/en/elasticsearch/guide/current/scoring-theory.html Elasticsearch calculate the field-length norm as follows: norm(d) = 1 / √numTerms … --- ## [Sum aggregation on distinct values of field](https://discuss.elastic.co/t/sum-aggregation-on-distinct-values-of-field/105088)
**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\ **Replies:** 1\ **Last updated:** [October 27, 2017, 4:41pm UTC](https://discuss.elastic.co/t/sum-aggregation-on-distinct-values-of-field/105088 "2017-10-27T16:41:11Z")
Hi, I want to make a query that returns my wanted documents. from those documents i need to sum aggregate field1 on all the distinct values of field2 small example: i have index that has 500 documents with fiel… --- ## [APM-server connecting to elasticsearch even though my output is only enabled for kafka](https://discuss.elastic.co/t/apm-server-connecting-to-elasticsearch-even-though-my-output-is-only-enabled-for-kafka/195614)
**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\ **Replies:** 5\ **Last updated:** [August 19, 2019, 4:43pm UTC](https://discuss.elastic.co/t/apm-server-connecting-to-elasticsearch-even-though-my-output-is-only-enabled-for-kafka/195614 "2019-08-19T16:43:11Z")
Hi , I'm using APM-server 7.1.2 . I have only enabled output.kafka and rest all output is disabled. Its running in kubernetes. APM-server is restarting every few minutes and i see following logs ' 2019-07-04T16:49:56.… --- ## [Which type to use to just monitor TCP traffic/flows](https://discuss.elastic.co/t/which-type-to-use-to-just-monitor-tcp-traffic-flows/114839)
**Author:** [@londonx](https://discuss.elastic.co/u/londonx)\ **Replies:** 5\ **Last updated:** [January 11, 2018, 12:25pm UTC](https://discuss.elastic.co/t/which-type-to-use-to-just-monitor-tcp-traffic-flows/114839 "2018-01-11T12:25:58Z")
Hi all, I am keen to monitor tcp network flows between two servers. Happens to be Tibco EMS traffic and I understand that the selection of protocol types is limited in Packetbeat but it also infers that you can just capt… --- ## [What triggers regular merges?](https://discuss.elastic.co/t/what-triggers-regular-merges/329773)
**Author:** [@Emma\_Vaiserfirov](https://discuss.elastic.co/u/Emma_Vaiserfirov)\ **Replies:** 3\ **Last updated:** [April 12, 2023, 3:58pm UTC](https://discuss.elastic.co/t/what-triggers-regular-merges/329773 "2023-04-12T15:58:46Z")
Hi there, we're trying to decide if we need to trigger force merges on a regular basis. To do that, I was trying to understand how (and how often) merges are triggered by default. The piece of public documentation on mer… --- ## [How to change certificate's CN](https://discuss.elastic.co/t/how-to-change-certificates-cn/189317)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 4\ **Last updated:** [July 10, 2019, 6:30am UTC](https://discuss.elastic.co/t/how-to-change-certificates-cn/189317 "2019-07-10T06:30:47Z")
Hi everyone, I generated the CA and Certs as suggested by the docs: bin/elasticsearch-certutil ca bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 I found that the CN of the certificate is "instance". My ho… --- ## [Curiousty about http asynchronous](https://discuss.elastic.co/t/curiousty-about-http-asynchronous/36685)
**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Replies:** 4\ **Last updated:** [December 10, 2015, 2:53am UTC](https://discuss.elastic.co/t/curiousty-about-http-asynchronous/36685 "2015-12-10T02:53:50Z")
es reference doc has this sentence: The http mechanism is completely asynchronous in nature, meaning that there is no blocking thread waiting for a response. but when I use http bulk index API, it will wait for each doc … --- ## [Solution to Elasticsearch is still initializing the kibana index?](https://discuss.elastic.co/t/solution-to-elasticsearch-is-still-initializing-the-kibana-index/89874)
**Author:** [@enod](https://discuss.elastic.co/u/enod)\ **Replies:** 1\ **Last updated:** [July 9, 2017, 3:55am UTC](https://discuss.elastic.co/t/solution-to-elasticsearch-is-still-initializing-the-kibana-index/89874 "2017-07-09T03:55:48Z")
Hi there, I have 3 data ES nodes and it was running just fine until I restart the cluster and run ES again. Then my kibana stopped working. As other similar issue thread suggested, I've deleted .kibana index and rest… --- ## [Use Bind-Mounted Setting for Local Config File?](https://discuss.elastic.co/t/use-bind-mounted-setting-for-local-config-file/238500)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 5\ **Last updated:** [June 29, 2020, 8:27pm UTC](https://discuss.elastic.co/t/use-bind-mounted-setting-for-local-config-file/238500 "2020-06-29T20:27:31Z")
Hello Logstash Wizards, I’m struggling to understand how I can spin up a Logstash Docker container using bind-mounted settings (see here) to run the container with a config file on the local host. To explain: Let’s say… --- ## [Aggregation on multiple fields with millions of buckets](https://discuss.elastic.co/t/aggregation-on-multiple-fields-with-millions-of-buckets/227502)
**Author:** [@Manish\_Kukreja](https://discuss.elastic.co/u/Manish_Kukreja)\ **Replies:** 5\ **Last updated:** [April 15, 2020, 5:03pm UTC](https://discuss.elastic.co/t/aggregation-on-multiple-fields-with-millions-of-buckets/227502 "2020-04-15T17:03:10Z")
Hi I have a requirement where in i need to aggregate over multiple fields which can result in millions of buckets. We have data with millions of records, and here i need to get average number of records for each unique… --- ## [Why is housekeeping not built into elasticsearch?](https://discuss.elastic.co/t/why-is-housekeeping-not-built-into-elasticsearch/83951)
**Author:** [@ThomasB](https://discuss.elastic.co/u/ThomasB)\ **Replies:** 3\ **Last updated:** [April 28, 2017, 7:57pm UTC](https://discuss.elastic.co/t/why-is-housekeeping-not-built-into-elasticsearch/83951 "2017-04-28T19:57:05Z")
Hi, I have a (hopefully) quick question, regarding index management and deleting time based indices. What is the reason, that there is no built-in support to delete all indices older than X days? I know there is curato… --- ## [FIlebeat on PfSense](https://discuss.elastic.co/t/filebeat-on-pfsense/169877)
**Author:** [@daniel.gutierrez](https://discuss.elastic.co/u/daniel.gutierrez)\ **Replies:** 1\ **Last updated:** [February 25, 2019, 5:21pm UTC](https://discuss.elastic.co/t/filebeat-on-pfsense/169877 "2019-02-25T17:21:35Z")
Hello everyone! I have installed 2 ElasticStack on different servers, one for windows and one for linux and everythings works perfectly but I want to install FIlebeat on Pfsense Firewall the question in here is, how ca… --- ## [Graylog2 & ElsaticSearch connection problem](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383)
**Author:** [@setevo\_\_](https://discuss.elastic.co/u/setevo__)\ **Replies:** 7\ **Last updated:** [April 1, 2013, 8:12am UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383 "2013-04-01T08:12:56Z")
Hi. I'm absolutely new with \*Graylog2\* - so sorry if anything wrong. After I installed it with thatand that instructions - I got error when start it: $ 2013-03-29 15:09:49,654 WARN : org.elasticsearch.dis… --- ## [ElasticSearch curator CLI: how to delete an index by name?](https://discuss.elastic.co/t/elasticsearch-curator-cli-how-to-delete-an-index-by-name/172858)
**Author:** [@ljak](https://discuss.elastic.co/u/ljak)\ **Replies:** 4\ **Last updated:** [March 18, 2019, 9:03pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-cli-how-to-delete-an-index-by-name/172858 "2019-03-18T21:03:44Z")
Hello everyone, Simple question: with Curator (the singleton CLI: https://www.elastic.co/guide/en/elasticsearch/client/curator/current/singleton-cli.html), I'm interesting on deleting an index by using just the name. I … --- ## [Shield problems "Transport response handler not found"](https://discuss.elastic.co/t/shield-problems-transport-response-handler-not-found/60854)
**Author:** [@sergiolr100](https://discuss.elastic.co/u/sergiolr100)\ **Replies:** 4\ **Last updated:** [September 19, 2016, 1:14pm UTC](https://discuss.elastic.co/t/shield-problems-transport-response-handler-not-found/60854 "2016-09-19T13:14:35Z")
Hello everyone, I have a problem with the Shield installation when I upgrade to 2.4.0. I follow this link: https://www.elastic.co/guide/en/shield/current/getting-started.html but when I submit a request without a usern… --- ## [Filebeat ssl connection fail with CERT using Subject Alternative Name](https://discuss.elastic.co/t/filebeat-ssl-connection-fail-with-cert-using-subject-alternative-name/47616)
**Author:** [@Jakub\_Juraszek](https://discuss.elastic.co/u/Jakub_Juraszek)\ **Replies:** 4\ **Last updated:** [April 18, 2016, 9:23pm UTC](https://discuss.elastic.co/t/filebeat-ssl-connection-fail-with-cert-using-subject-alternative-name/47616 "2016-04-18T21:23:39Z")
Hello. I am using filebeat version 1.2.1 (amd64). I've setup logstash with input beats and ssl (ssl\_verify\_mode =\> force\_peer) and self signed certificate containing additional Subject Alternative Name. I am able to conn… --- ## [Problem with shingles as an autocomplete solution](https://discuss.elastic.co/t/problem-with-shingles-as-an-autocomplete-solution/15484)
**Author:** [@chuck](https://discuss.elastic.co/u/chuck)\ **Replies:** 4\ **Last updated:** [April 23, 2014, 7:38pm UTC](https://discuss.elastic.co/t/problem-with-shingles-as-an-autocomplete-solution/15484 "2014-04-23T19:38:47Z")
Hi All, Still fairly new to Elasticsearch, but very impressed so far. Right now I'm working on a place finder service that will access a repository of place names. I'm attempting to build in some autocomplete fu… --- ## [How can i get auto increment id by using elasticsearch.js API?](https://discuss.elastic.co/t/how-can-i-get-auto-increment-id-by-using-elasticsearch-js-api/125130)
**Author:** [@4497d9976cc97681c349](https://discuss.elastic.co/u/4497d9976cc97681c349)\ **Replies:** 1\ **Last updated:** [March 22, 2018, 8:48am UTC](https://discuss.elastic.co/t/how-can-i-get-auto-increment-id-by-using-elasticsearch-js-api/125130 "2018-03-22T08:48:19Z")
The JS create API must set id, and how can i do like follow?Is there any other API I can use? The JS create API: client.create({ index: 'myindex', type: 'mytype', id: '1', body: { title: 'Test 1', tags: \['y', 'z'… --- ## [Elastic Backpressure on Logstash?](https://discuss.elastic.co/t/elastic-backpressure-on-logstash/191696)
**Author:** [@Jitendra\_Kumhar](https://discuss.elastic.co/u/Jitendra_Kumhar)\ **Replies:** 3\ **Last updated:** [July 23, 2019, 7:07am UTC](https://discuss.elastic.co/t/elastic-backpressure-on-logstash/191696 "2019-07-23T07:07:15Z")
I am sending data from various filebeats to two logstash machines and these machines send to ElasticSearch. When I monitored network it shows 12 MiB/minute receiving and 5 MiB/minute(because I am using http\_compression … --- ## [Logstash --configtest & stdout](https://discuss.elastic.co/t/logstash-configtest-stdout/56548)
**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\ **Replies:** 3\ **Last updated:** [July 27, 2016, 5:49pm UTC](https://discuss.elastic.co/t/logstash-configtest-stdout/56548 "2016-07-27T17:49:24Z")
Hi, I have an annoying little problem on a logstash 2.3.4 installed (from the repo) on a Linux Mint development box May be this problem is more linux oriented. I would like to catch the result of a configtest command … --- ## [Delete Monitoring's old indices](https://discuss.elastic.co/t/delete-monitorings-old-indices/76328)
**Author:** [@mnozawa](https://discuss.elastic.co/u/mnozawa)\ **Replies:** 5\ **Last updated:** [February 24, 2017, 6:22am UTC](https://discuss.elastic.co/t/delete-monitorings-old-indices/76328 "2017-02-24T06:22:27Z")
Hi, Is there any smart way to delete old indices of Monitoring(Marvel)? Simply delete indices, using elasticsearch-curator or any other way? thanks --- ## [Gsub remove square bracket](https://discuss.elastic.co/t/gsub-remove-square-bracket/226508)
**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\ **Replies:** 2\ **Last updated:** [April 4, 2020, 4:23pm UTC](https://discuss.elastic.co/t/gsub-remove-square-bracket/226508 "2020-04-04T16:23:43Z")
I'm trying to remove square bracket from my string using gsub filter. The string is something like this: '\["/path/to/1","/path/to/2"\]' I tried different ways to remove the square bracket "\[" and "\]" in order to get a … --- ## [Configuration parameter syntax for nodeSelector?](https://discuss.elastic.co/t/configuration-parameter-syntax-for-nodeselector/222528)
**Author:** [@danielP1](https://discuss.elastic.co/u/danielP1)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 5:17pm UTC](https://discuss.elastic.co/t/configuration-parameter-syntax-for-nodeselector/222528 "2020-03-11T17:17:13Z")
Greetings, I'm attempting to deploy elasticsearch onto k8s with the elasticsearch helm chart: I would like to constrain on which nodes the elastisearch components run. I see in the documentation there is a configur… --- ## [Elasticsearch exception: Unexpected error while indexing monitoring document](https://discuss.elastic.co/t/elasticsearch-exception-unexpected-error-while-indexing-monitoring-document/139817)
**Author:** [@Shraddha\_Srivastav](https://discuss.elastic.co/u/Shraddha_Srivastav)\ **Replies:** 2\ **Last updated:** [July 13, 2018, 4:47am UTC](https://discuss.elastic.co/t/elasticsearch-exception-unexpected-error-while-indexing-monitoring-document/139817 "2018-07-13T04:47:49Z")
Hi, When i run ES it gives me an exception of Unexpected error while indexing monitoring document org.elasticsearch.xpack.monitoring My ES config file is as following: ======================== Elasticsearch Configura… --- ## [No mapping found for \[@timestamp\]](https://discuss.elastic.co/t/no-mapping-found-for-timestamp/141586)
**Author:** [@gur79](https://discuss.elastic.co/u/gur79)\ **Replies:** 8\ **Last updated:** [July 31, 2018, 8:12am UTC](https://discuss.elastic.co/t/no-mapping-found-for-timestamp/141586 "2018-07-31T08:12:39Z")
I'm real sorry if I'm asking newbie question, i have been introduced to ELK sack last 2 weeks here's my story, i have this internal network of 10 different servers and I'm collecting logs from all of them (using filebea… --- ## [How to check client\_ip ipv4 or ipv6?](https://discuss.elastic.co/t/how-to-check-client-ip-ipv4-or-ipv6/240654)
**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\ **Replies:** 7\ **Last updated:** [July 14, 2020, 3:30am UTC](https://discuss.elastic.co/t/how-to-check-client-ip-ipv4-or-ipv6/240654 "2020-07-14T03:30:59Z")
how to use mutate add\_field check client\_ip version v4 or v6? if \['client\_ip'\].length \>15 { mutate{ add\_field =\> { "ip\_type" =\> "ipv6" } } } else { mutate{ add\_field =\> { "ip\_type" =\> "ipv4" } }… --- ## [Elasticsearch5.2.1 install plugin by local failure](https://discuss.elastic.co/t/elasticsearch5-2-1-install-plugin-by-local-failure/79546)
**Author:** [@hexian55](https://discuss.elastic.co/u/hexian55)\ **Replies:** 3\ **Last updated:** [March 22, 2017, 8:03am UTC](https://discuss.elastic.co/t/elasticsearch5-2-1-install-plugin-by-local-failure/79546 "2017-03-22T08:03:19Z")
Elasticsearch version: 5.2.1 Plugins installed: \[search-guard-5-5.2.1-11,analysis-smartcn-5.2.1\] JVM version: 1.8 OS version: centos7.0 Description of the problem including expected versus actual behavior: bin/elastics… --- ## [Painless terms script aggregations](https://discuss.elastic.co/t/painless-terms-script-aggregations/103686)
**Author:** [@knights](https://discuss.elastic.co/u/knights)\ **Replies:** 2\ **Last updated:** [October 13, 2017, 9:11am UTC](https://discuss.elastic.co/t/painless-terms-script-aggregations/103686 "2017-10-13T09:11:52Z")
Hello, everyone. I have a problem regarding a scripted terms aggregation that no longer works since ES 5.X. I need a terms aggregation on two multivalued fields. In groovy, I used to do this : doc\['field1'\].values +… --- ## [Comparing to null in logstash](https://discuss.elastic.co/t/comparing-to-null-in-logstash/128008)
**Author:** [@snewman](https://discuss.elastic.co/u/snewman)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 3:49pm UTC](https://discuss.elastic.co/t/comparing-to-null-in-logstash/128008 "2018-04-13T15:49:30Z")
I have a beats\>logstash\>elasticearch\>kibana pipeline to parse logfiles, some lines of which contain location data, but they all have a field for location data. Attempting to convert the empty fields to a geo\_point gives … --- ## [How to change the index for an already created data table?](https://discuss.elastic.co/t/how-to-change-the-index-for-an-already-created-data-table/53051)
**Author:** [@keya](https://discuss.elastic.co/u/keya)\ **Replies:** 1\ **Last updated:** [June 17, 2016, 5:21pm UTC](https://discuss.elastic.co/t/how-to-change-the-index-for-an-already-created-data-table/53051 "2016-06-17T17:21:44Z")
Hi, I have created a couple graphs and data-table for a particular index. Now I want to use the same visualizations for a different index which has similar data. This is because I am getting the logs from different sourc… --- ## [How to delete the data in index on timestamp basis](https://discuss.elastic.co/t/how-to-delete-the-data-in-index-on-timestamp-basis/50935)
**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\ **Replies:** 5\ **Last updated:** [May 26, 2016, 5:40am UTC](https://discuss.elastic.co/t/how-to-delete-the-data-in-index-on-timestamp-basis/50935 "2016-05-26T05:40:09Z")
Hi, I am having index in the following format logstash-system.info and the index contains last 5 years of data. I want to purge only last 1 year of data in that index. Is it possible to delete it using any other tool… --- ## [Expected Heap Memory Requirements for node.data==false, node.master==false](https://discuss.elastic.co/t/expected-heap-memory-requirements-for-node-data-false-node-master-false/25472)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 5\ **Last updated:** [November 26, 2015, 8:34pm UTC](https://discuss.elastic.co/t/expected-heap-memory-requirements-for-node-data-false-node-master-false/25472 "2015-11-26T20:34:43Z")
Good Day! I have a cluster with 3billion records, 2T data, 24 shards, and 1 replica. It is split into two zones: Zone 1 has a single machine, as the master node, with all 24 shards. Zone 2 has multiple nodes (usuall… --- ## [Xpack without SSL/Certificates](https://discuss.elastic.co/t/xpack-without-ssl-certificates/264773)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 4\ **Last updated:** [February 19, 2021, 12:51pm UTC](https://discuss.elastic.co/t/xpack-without-ssl-certificates/264773 "2021-02-19T12:51:48Z")
Hi gang, with upgrading our environments to 7.11 I tackled an old issue of mine: Trying to get our dev. cluster running with the xpack features active but without the need for those pesky certificates all the time. The… --- ## [Can not be updated Lostash plugin if it is via a proxy](https://discuss.elastic.co/t/can-not-be-updated-lostash-plugin-if-it-is-via-a-proxy/166334)
**Author:** [@taku333](https://discuss.elastic.co/u/taku333)\ **Replies:** 6\ **Last updated:** [February 1, 2019, 1:27am UTC](https://discuss.elastic.co/t/can-not-be-updated-lostash-plugin-if-it-is-via-a-proxy/166334 "2019-02-01T01:27:20Z")
I try Logstash update 6.5.4 → 6.6.0.(Via proxy) The following error message will fail and fail. ErrorMessage Error Bundler::HTTPError, retrying 1/10 Could not fetch specs from https://rubygems.org/ But It will succee… --- ## [Possibility of modifying "reindex.remote.whitelist" via API call?](https://discuss.elastic.co/t/possibility-of-modifying-reindex-remote-whitelist-via-api-call/74693)
**Author:** [@hartfordfive](https://discuss.elastic.co/u/hartfordfive)\ **Replies:** 1\ **Last updated:** [February 10, 2017, 6:29pm UTC](https://discuss.elastic.co/t/possibility-of-modifying-reindex-remote-whitelist-via-api-call/74693 "2017-02-10T18:29:52Z")
Would it be possible to have the "reindex.remote.whitelist" setting modifiable via the HTTP API instead of having to specify it in the elasticsearch.yml config? I realize this setting currently most likely requires a cl… --- ## [リフレッシュインターバルの変更方法について](https://discuss.elastic.co/t/topic/168914)
**Author:** [@masa](https://discuss.elastic.co/u/masa)\ **Replies:** 2\ **Last updated:** [February 20, 2019, 6:07am UTC](https://discuss.elastic.co/t/topic/168914 "2019-02-20T06:07:42Z")
はじめて質問させて頂きます。Elasticsearch 6.6 を使用しています。 既存のIndexのリフレッシュインターバル(index.refresh\_interval)を変更するには、 curl -XPUT http://localhost:9200//\_settings { "index.refresh\_interval": "30s" } のようにすれば可能だということは判りましたが、毎日新たなインデックスが作成さ… --- ## [Performance Tips For Logstash And Monitoring Its Queue](https://discuss.elastic.co/t/performance-tips-for-logstash-and-monitoring-its-queue/72141)
**Author:** [@Nitz](https://discuss.elastic.co/u/Nitz)\ **Replies:** 2\ **Last updated:** [January 19, 2017, 9:55am UTC](https://discuss.elastic.co/t/performance-tips-for-logstash-and-monitoring-its-queue/72141 "2017-01-19T09:55:45Z")
Hi, We have logs infrastructure, built in this form: 1. Filebeat agents consume logs and output them to one topic in Kafka. We are talking about ~50k messages per sec. This part of the architecture works great. 2. We h… [Previous page](https://discuss.elastic.co/top.md?page=621&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=623&per_page=50&period=all)