# Top

**URL:** https://discuss.elastic.co/top.md?page=637&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 638

---

## [Boolean field](https://discuss.elastic.co/t/boolean-field/16071)

<div class="topic-metadata">

**Author:** [@sidpao](https://discuss.elastic.co/u/sidpao)\
**Replies:** 7\
**Last updated:** [March 3, 2014, 10:23am UTC](https://discuss.elastic.co/t/boolean-field/16071 "2014-03-03T10:23:38Z")

</div>

When updating a field with a script, ES allows me to set a field mapped as boolean with any string. So far, this seems to be the only scenario where is possible to update a field with a different type than the one …

---

## [Kibana Logs are not getting created/captured](https://discuss.elastic.co/t/kibana-logs-are-not-getting-created-captured/175531)

<div class="topic-metadata">

**Author:** [@Hazoopr](https://discuss.elastic.co/u/Hazoopr)\
**Replies:** 4\
**Last updated:** [April 11, 2019, 5:41pm UTC](https://discuss.elastic.co/t/kibana-logs-are-not-getting-created-captured/175531 "2019-04-11T17:41:38Z")

</div>

Kibana Service Logs are not getting created/captured for both kibana.stderr and kibana.stdout \[abc@abc log\]$ ll | grep kibana drwxrwxrwx 2 kibana kibana 48 Jan 30 13:09 kibana \[abc@abc log\]$ cd ki…

---

## [StatusLogger error while starting Logstash 5, but indexting working](https://discuss.elastic.co/t/statuslogger-error-while-starting-logstash-5-but-indexting-working/64686)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 4\
**Last updated:** [November 2, 2016, 11:17am UTC](https://discuss.elastic.co/t/statuslogger-error-while-starting-logstash-5-but-indexting-working/64686 "2016-11-02T11:17:08Z")

</div>

Hi, When I start logstash using the command; ./logstash --path.settings=../config/ -f ../logstash.conf I am getting the error; ERROR StatusLogger Unable to access file://../config/log4j2.properties But after some…

---

## [Error - No handler for type \[wildcard\]](https://discuss.elastic.co/t/error-no-handler-for-type-wildcard/251157)

<div class="topic-metadata">

**Author:** [@ojoaquin](https://discuss.elastic.co/u/ojoaquin)\
**Replies:** 5\
**Last updated:** [October 7, 2020, 4:54pm UTC](https://discuss.elastic.co/t/error-no-handler-for-type-wildcard/251157 "2020-10-07T16:54:56Z")

</div>

Hi, I'm trying to experiment with the wildcard field since i'm trying to perform queries over text fields that seem to fit perfectly with the description in this article: https://www.elastic.co/blog/find-strings-within-s…

---

## [AutoScaling using HPA](https://discuss.elastic.co/t/autoscaling-using-hpa/232588)

<div class="topic-metadata">

**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\
**Replies:** 5\
**Last updated:** [August 18, 2020, 3:37pm UTC](https://discuss.elastic.co/t/autoscaling-using-hpa/232588 "2020-08-18T15:37:02Z")

</div>

Hi We are looking for scaling up and down Kibana/ES nodes automatically at runtime. I am aware about nodeSet feature in elasticsearch. Please let me know if HPA can be used as well ? ECK Version in use: 1.1.0 Regards …

---

## [Problem deleting fields or renaming (from filebeat)](https://discuss.elastic.co/t/problem-deleting-fields-or-renaming-from-filebeat/41512)

<div class="topic-metadata">

**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Replies:** 6\
**Last updated:** [February 15, 2016, 11:29am UTC](https://discuss.elastic.co/t/problem-deleting-fields-or-renaming-from-filebeat/41512 "2016-02-15T11:29:00Z")

</div>

Hello there, I'm configuring filebeat. before i used logstashforwarder. In logstash i'm getting logs BUT, if i set filebeat to add a new fields, i receive it like field.nameIchoose If i use mutate filter to rename tha…

---

## [Kibana/ES not showing kube pod metrics](https://discuss.elastic.co/t/kibana-es-not-showing-kube-pod-metrics/208913)

<div class="topic-metadata">

**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\
**Replies:** 4\
**Last updated:** [November 22, 2019, 4:31pm UTC](https://discuss.elastic.co/t/kibana-es-not-showing-kube-pod-metrics/208913 "2019-11-22T16:31:49Z")

</div>

I have ES-Beats-Kibana setup running in Kubernetes. In Kibana under Infrastructure App on Host Tab I can see all metrics (CPU, Memory, Load, In/Out Traffic & Log Rate) for all Kubernetes nodes. But On Kubernetes Tab, I …

---

## [Trying to work out the best memory setup for my cluster](https://discuss.elastic.co/t/trying-to-work-out-the-best-memory-setup-for-my-cluster/199907)

<div class="topic-metadata">

**Author:** [@matthew.whill](https://discuss.elastic.co/u/matthew.whill)\
**Replies:** 4\
**Last updated:** [September 18, 2019, 7:08am UTC](https://discuss.elastic.co/t/trying-to-work-out-the-best-memory-setup-for-my-cluster/199907 "2019-09-18T07:08:06Z")

</div>

Hi All, BACKGROUND I have a 6 node cluster setup (3 x data nodes and 3 x master nodes). The cluster is running 6.8.0 on each node with x-pack enabled for SSL communication and security. Each node is running on Ubunt…

---

## [Aggregation on last element](https://discuss.elastic.co/t/aggregation-on-last-element/20432)

<div class="topic-metadata">

**Author:** [@Michael\_Gallego\_2](https://discuss.elastic.co/u/Michael_Gallego_2)\
**Replies:** 3\
**Last updated:** [October 26, 2014, 7:22pm UTC](https://discuss.elastic.co/t/aggregation-on-last-element/20432 "2014-10-26T19:22:20Z")

</div>

Hi, I have a type whose data looks like this: { "date": "2014-01-01" "element": "abc", "type": "A" }, { "date": "2014-01-02" "element": "abc", "type": "B" }, { "date": "2014-0…

---

## [Curator Failed to verify all nodes have repository access](https://discuss.elastic.co/t/curator-failed-to-verify-all-nodes-have-repository-access/144953)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 7:45pm UTC](https://discuss.elastic.co/t/curator-failed-to-verify-all-nodes-have-repository-access/144953 "2018-08-17T19:45:18Z")

</div>

Hello community, Curator stopped working after upgrading ELK stack from 6.2 to 6.3. Here is the error I am getting, 2018-08-17 18:54:34,115 DEBUG curator.utils parse\_date\_pattern:1349 Fully rendered n…

---

## [Max length for \_id type](https://discuss.elastic.co/t/max-length-for-id-type/106825)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 2\
**Last updated:** [November 8, 2017, 9:51am UTC](https://discuss.elastic.co/t/max-length-for-id-type/106825 "2017-11-08T09:51:11Z")

</div>

There're a limit for \_id type? I think that in the past I read some limitation for \_id and I put a limit for my docs with 20 digits, but I like use usually format for UUID in my ORM

---

## [How to remove lines with specifics information from text files](https://discuss.elastic.co/t/how-to-remove-lines-with-specifics-information-from-text-files/173479)

<div class="topic-metadata">

**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\
**Replies:** 3\
**Last updated:** [March 22, 2019, 1:05pm UTC](https://discuss.elastic.co/t/how-to-remove-lines-with-specifics-information-from-text-files/173479 "2019-03-22T13:05:00Z")

</div>

Hello, I'm using filebeat to redirect dns log to logstash, then elasticsearch. Here my configuration : filter { if "windows\_dnslog" in \[tags\] { grok { match =\> { "message" =\> "%{DATESTAMP:dns\_time} %{GREEDYDA…

---

## [Handling running time duration format "ddd:hh:mm:ss"](https://discuss.elastic.co/t/handling-running-time-duration-format-ddd-hh-mm-ss/80395)

<div class="topic-metadata">

**Author:** [@bigtoerag](https://discuss.elastic.co/u/bigtoerag)\
**Replies:** 3\
**Last updated:** [March 30, 2017, 12:23am UTC](https://discuss.elastic.co/t/handling-running-time-duration-format-ddd-hh-mm-ss/80395 "2017-03-30T00:23:37Z")

</div>

Has anyone needed to handle a custom duration field from servers showing running time? I am just starting out and trying to get a handle on the best way to handle it without creating a grok mutate mess to convert to sec…

---

## [Failed to read local state, exiting... java.lang.IllegalStateException: ES 2.3.4 upgrade](https://discuss.elastic.co/t/failed-to-read-local-state-exiting-java-lang-illegalstateexception-es-2-3-4-upgrade/56386)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 3\
**Last updated:** [July 27, 2016, 11:24am UTC](https://discuss.elastic.co/t/failed-to-read-local-state-exiting-java-lang-illegalstateexception-es-2-3-4-upgrade/56386 "2016-07-27T11:24:58Z")

</div>

Hi, I have upgraded ES cluster with ES 2.3.4. When I start the same, I get following error. failed to read local state, exiting... java.lang.IllegalStateException: unable to upgrade the mappings for the index I read s…

---

## [Unable to join two nodes in cluster](https://discuss.elastic.co/t/unable-to-join-two-nodes-in-cluster/191390)

<div class="topic-metadata">

**Author:** [@enVolt](https://discuss.elastic.co/u/enVolt)\
**Replies:** 4\
**Last updated:** [July 22, 2019, 6:32am UTC](https://discuss.elastic.co/t/unable-to-join-two-nodes-in-cluster/191390 "2019-07-22T06:32:45Z")

</div>

Hello, I'm trying to set up two ES node in cluster nodes, and has absolutely given up as I'm posting this. I've two instance running, with following configs - # es-01 cluster.name: dc-world node.name: smallville path.…

---

## [Schema-less records support](https://discuss.elastic.co/t/schema-less-records-support/239714)

<div class="topic-metadata">

**Author:** [@dobes\_gf](https://discuss.elastic.co/u/dobes_gf)\
**Replies:** 5\
**Last updated:** [July 3, 2020, 6:17pm UTC](https://discuss.elastic.co/t/schema-less-records-support/239714 "2020-07-03T18:17:58Z")

</div>

Hi, I use elasticsearch to store logs collected by fluentd within Kubernetes. One of the pain points I keep hitting time and time again is elasticsearch rejecting logs because the field types change between log message…

---

## [Field content shown in json but not in table](https://discuss.elastic.co/t/field-content-shown-in-json-but-not-in-table/46656)

<div class="topic-metadata">

**Author:** [@devjr](https://discuss.elastic.co/u/devjr)\
**Replies:** 6\
**Last updated:** [April 11, 2016, 7:17am UTC](https://discuss.elastic.co/t/field-content-shown-in-json-but-not-in-table/46656 "2016-04-11T07:17:15Z")

</div>

Hello, I have a weird problem : my facility field is shown as empty in kibana. But when I display the JSON, it seem OK. Am I doing something wrong or is this a bug ? Elasticsearch version 2.2.1 and kibana version…

---

## [Dot prefix in index name gives me an error (?)](https://discuss.elastic.co/t/dot-prefix-in-index-name-gives-me-an-error/180675)

<div class="topic-metadata">

**Author:** [@David\_Martins](https://discuss.elastic.co/u/David_Martins)\
**Replies:** 3\
**Last updated:** [May 13, 2019, 8:37pm UTC](https://discuss.elastic.co/t/dot-prefix-in-index-name-gives-me-an-error/180675 "2019-05-13T20:37:51Z")

</div>

Hey guys, I've a quick question about a behavior of elasticsearch indexes. So, I use logstash to import data into my AWS elasticsearch cluster. When I create a normal index and insert, lets say, 10 rows, everything wo…

---

## [How to use GROK pattern for JSON Object](https://discuss.elastic.co/t/how-to-use-grok-pattern-for-json-object/149959)

<div class="topic-metadata">

**Author:** [@Teja](https://discuss.elastic.co/u/Teja)\
**Replies:** 3\
**Last updated:** [September 26, 2018, 9:12am UTC](https://discuss.elastic.co/t/how-to-use-grok-pattern-for-json-object/149959 "2018-09-26T09:12:58Z")

</div>

Hi Folks, I want to apply grok for one JSON object\[field\] and extract values from the field. Sample Json Message: {"event.created":"1537941675000","isoTimeFormat":"yyyy-MM-dd'T'HH:mm:ss.SSSZ","event.payload":"dstintf=…

---

## [CreateSnapshotRequest in High Level Rest Client has a problem](https://discuss.elastic.co/t/createsnapshotrequest-in-high-level-rest-client-has-a-problem/236273)

<div class="topic-metadata">

**Author:** [@TheDevLuffy](https://discuss.elastic.co/u/TheDevLuffy)\
**Replies:** 1\
**Last updated:** [June 9, 2020, 7:22am UTC](https://discuss.elastic.co/t/createsnapshotrequest-in-high-level-rest-client-has-a-problem/236273 "2020-06-09T07:22:58Z")

</div>

Hello, Now, I'm using Amazon Elasticsearch Service with High Level Rest Client. Firstable, I tried to create snapshot with CreateSnapshotRequest. This trial has request body (following code block) according to http lo…

---

## [Logstash JDBC error java.lang.IllegalStateException](https://discuss.elastic.co/t/logstash-jdbc-error-java-lang-illegalstateexception/128096)

<div class="topic-metadata">

**Author:** [@kundavaram](https://discuss.elastic.co/u/kundavaram)\
**Replies:** 4\
**Last updated:** [April 16, 2018, 7:57pm UTC](https://discuss.elastic.co/t/logstash-jdbc-error-java-lang-illegalstateexception/128096 "2018-04-16T19:57:40Z")

</div>

Im running on Elastic 6.2.3 Logstash 6.2.3 Kibana 6.2.3 JDBC : sqljdbc\_6.4 My logstash thew below error while reading from SQL server table \[ERROR\] 2018-04-15 21:39:26.275 \[main\] Logstash - java.lang.IllegalStateExce…

---

## [Domain name missing in Http fields in packetbeat](https://discuss.elastic.co/t/domain-name-missing-in-http-fields-in-packetbeat/31421)

<div class="topic-metadata">

**Author:** [@tarunsapra](https://discuss.elastic.co/u/tarunsapra)\
**Replies:** 3\
**Last updated:** [March 7, 2016, 3:35pm UTC](https://discuss.elastic.co/t/domain-name-missing-in-http-fields-in-packetbeat/31421 "2016-03-07T15:35:52Z")

</div>

Hi, I am using packetbeat for network monitoring, in the JSON o/p of http requests I noticed that in the Http sniffing, the fields only contain the json data like - "method": "GET", "params": "…

---

## [How to add\_field and covert field type while parsing nested xml](https://discuss.elastic.co/t/how-to-add-field-and-covert-field-type-while-parsing-nested-xml/2134)

<div class="topic-metadata">

**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\
**Replies:** 5\
**Last updated:** [June 9, 2015, 6:13am UTC](https://discuss.elastic.co/t/how-to-add-field-and-covert-field-type-while-parsing-nested-xml/2134 "2015-06-09T06:13:59Z")

</div>

\<?root\> \<?fields1\> \<?fields1.1\> \<?fields1.1.1\> \<?fielda\>...\<?/fielda\> \<?fieldb\>...\<?/fieldb\> ..... Requirement is something like i would like add field with custom name add\_field =\> { …

---

## [Elasticsearch in docker container keeps enabling xpack even if explicitely disabled](https://discuss.elastic.co/t/elasticsearch-in-docker-container-keeps-enabling-xpack-even-if-explicitely-disabled/108465)

<div class="topic-metadata">

**Author:** [@perrohunter](https://discuss.elastic.co/u/perrohunter)\
**Replies:** 2\
**Last updated:** [November 24, 2017, 9:34am UTC](https://discuss.elastic.co/t/elasticsearch-in-docker-container-keeps-enabling-xpack-even-if-explicitely-disabled/108465 "2017-11-24T09:34:11Z")

</div>

I'm running elasticsearch for local development in a docker container and disabling xpack explicitely, yet, every x days the container locks itself because the xpack license exprires, elastic stops working I'm disabling…

---

## [Logstash class display "?"](https://discuss.elastic.co/t/logstash-class-display/63269)

<div class="topic-metadata">

**Author:** [@slowlizard](https://discuss.elastic.co/u/slowlizard)\
**Replies:** 1\
**Last updated:** [November 8, 2016, 4:51am UTC](https://discuss.elastic.co/t/logstash-class-display/63269 "2016-11-08T04:51:48Z")

</div>

"\_index": "meipianapp-2016.10.18", "\_type": "log4j", "\_id": "AVfXDMl1egLz1PD\_qnMm", "\_score": null, "\_source": { "message": "用户查询时光祭异常:MjController.userMjActivityPast: aMapCityCode:010", "@version": "1"…

---

## [Unable to sync repo in Red Hat Satellite](https://discuss.elastic.co/t/unable-to-sync-repo-in-red-hat-satellite/233092)

<div class="topic-metadata">

**Author:** [@Morrisong](https://discuss.elastic.co/u/Morrisong)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 7:54am UTC](https://discuss.elastic.co/t/unable-to-sync-repo-in-red-hat-satellite/233092 "2020-05-20T07:54:47Z")

</div>

Hi, I wasn't sure where to post this. I'm new to elastic and I'm a bit stuck. I'm unable to sync the repository at https://artifacts.elastic.co/packages/7.x/yum to the channel our Satellite 5 server. There seems to be …

---

## [Time Series Visual Builder (TSVB) Table: How do I apply options to a Bucket Script computed field?](https://discuss.elastic.co/t/time-series-visual-builder-tsvb-table-how-do-i-apply-options-to-a-bucket-script-computed-field/213381)

<div class="topic-metadata">

**Author:** [@anelson-edge](https://discuss.elastic.co/u/anelson-edge)\
**Replies:** 3\
**Last updated:** [January 2, 2020, 3:22pm UTC](https://discuss.elastic.co/t/time-series-visual-builder-tsvb-table-how-do-i-apply-options-to-a-bucket-script-computed-field/213381 "2020-01-02T15:22:13Z")

</div>

I have for one of my columns in the TSVB table a bucket script that look like "params.numerator/params.denominator \* 100". I wish to select a color based on that computed value, but I only see the raw values in the dro…

---

## [How to install JDBC Driver on Windows Server](https://discuss.elastic.co/t/how-to-install-jdbc-driver-on-windows-server/151784)

<div class="topic-metadata">

**Author:** [@TheOnlyOne](https://discuss.elastic.co/u/TheOnlyOne)\
**Replies:** 6\
**Last updated:** [October 10, 2018, 3:20pm UTC](https://discuss.elastic.co/t/how-to-install-jdbc-driver-on-windows-server/151784 "2018-10-10T15:20:31Z")

</div>

Hello everyone, i will install the JDBC Driver on a Windows Server 2016 SQL. I cant found any Installation Guide to do this. This Guide: https://www.elastic.co/guide/en/elasticsearch/reference/current/sql-jdbc.html …

---

## [Shield Elasticsearch & logstash cluster health monitor security exception](https://discuss.elastic.co/t/shield-elasticsearch-logstash-cluster-health-monitor-security-exception/48802)

<div class="topic-metadata">

**Author:** [@helper](https://discuss.elastic.co/u/helper)\
**Replies:** 4\
**Last updated:** [May 3, 2016, 1:46pm UTC](https://discuss.elastic.co/t/shield-elasticsearch-logstash-cluster-health-monitor-security-exception/48802 "2016-05-03T13:46:28Z")

</div>

Hi there, I am trying to test the shield configuration with in elasticsearch facing an issue. License and Shield have been installed on elasticsearch host. LDAP user created as "logstash" LDAP realm has been updated …

---

## [Watcher - Email Sending Failure - SSLHandshakeException](https://discuss.elastic.co/t/watcher-email-sending-failure-sslhandshakeexception/2514)

<div class="topic-metadata">

**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\
**Replies:** 2\
**Last updated:** [June 12, 2015, 6:01pm UTC](https://discuss.elastic.co/t/watcher-email-sending-failure-sslhandshakeexception/2514 "2015-06-12T18:01:56Z")

</div>

Hi, I am trying to send an email using watcher. But getting the following error: \[2015-06-11 14:49:04,837\]\[ERROR\]\[watcher.actions.email \] \[PVR-MASTER\] failed to execute action \[enabler\_component\_watch/email\_admin…

---

## [Running elasticsearch from Intellij IDEA](https://discuss.elastic.co/t/running-elasticsearch-from-intellij-idea/32070)

<div class="topic-metadata">

**Author:** [@cterron](https://discuss.elastic.co/u/cterron)\
**Replies:** 1\
**Last updated:** [October 14, 2015, 1:01pm UTC](https://discuss.elastic.co/t/running-elasticsearch-from-intellij-idea/32070 "2015-10-14T13:01:10Z")

</div>

I'm trying to learn about Elasticsearch internals. I have imported the code from github in idea using the pom.xml. After reading the elastichsearch start script and the elasticsearch.in.sh file. After see it, I understan…

---

## [APM Agent does not start](https://discuss.elastic.co/t/apm-agent-does-not-start/252054)

<div class="topic-metadata">

**Author:** [@MfuentesG](https://discuss.elastic.co/u/MfuentesG)\
**Replies:** 3\
**Last updated:** [October 26, 2020, 4:01pm UTC](https://discuss.elastic.co/t/apm-agent-does-not-start/252054 "2020-10-26T16:01:08Z")

</div>

HI, Kibana version: 7.9 Elasticsearch version: 7.9 APM Server version: 7.9.2 APM Agent language and version: elastic-apm-agent-1.18.1.jar Browser version: Chrome Versión 86.0.4240.75 (Build oficial) (64 bits) Origi…

---

## [How to do partial matching (including space) in a phrase](https://discuss.elastic.co/t/how-to-do-partial-matching-including-space-in-a-phrase/89906)

<div class="topic-metadata">

**Author:** [@ChelseaCao](https://discuss.elastic.co/u/ChelseaCao)\
**Replies:** 3\
**Last updated:** [June 19, 2017, 10:04am UTC](https://discuss.elastic.co/t/how-to-do-partial-matching-including-space-in-a-phrase/89906 "2017-06-19T10:04:56Z")

</div>

Hey , I have a trouble for a following requirements: SELECT Name from Contacts where name like 'FIRST\_WORDS%SECOND\_WORDS%' e.g. if I intput "Hen Mi", it should return the result including 'Henry Michael'. However,…

---

## [Not able to load template file, Invoke-WebRequest is not recognized command](https://discuss.elastic.co/t/not-able-to-load-template-file-invoke-webrequest-is-not-recognized-command/39664)

<div class="topic-metadata">

**Author:** [@jayaram](https://discuss.elastic.co/u/jayaram)\
**Replies:** 4\
**Last updated:** [January 22, 2016, 7:38pm UTC](https://discuss.elastic.co/t/not-able-to-load-template-file-invoke-webrequest-is-not-recognized-command/39664 "2016-01-22T19:38:15Z")

</div>

Hello, I am trying to install Topbeat on windows machine, As per https://www.elastic.co/guide/en/beats/topbeat/current/topbeat-getting-started.html I have downloaded and executed …

---

## [Cluster goes into red, some shards in initializing state](https://discuss.elastic.co/t/cluster-goes-into-red-some-shards-in-initializing-state/37691)

<div class="topic-metadata">

**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\
**Replies:** 7\
**Last updated:** [December 23, 2015, 8:31pm UTC](https://discuss.elastic.co/t/cluster-goes-into-red-some-shards-in-initializing-state/37691 "2015-12-23T20:31:49Z")

</div>

My cluster goes into red several times a day, while shards are initializing on existing index. I have 3 Node EC cluster, replication 1. Here's an example of a shard which is in initializing state: "id": 0, "typ…

---

## [Struggling to get elasticsearch.esplugin to work](https://discuss.elastic.co/t/struggling-to-get-elasticsearch-esplugin-to-work/42453)

<div class="topic-metadata">

**Author:** [@thiago](https://discuss.elastic.co/u/thiago)\
**Replies:** 2\
**Last updated:** [September 19, 2016, 9:03pm UTC](https://discuss.elastic.co/t/struggling-to-get-elasticsearch-esplugin-to-work/42453 "2016-09-19T21:03:45Z")

</div>

Hello, Is elasticsearch.esplugin already usable? I've just setup a small plugin project based on it with the following build.gradle: buildscript { repositories { mavenCentral() maven { …

---

## [Date Filter - \_dateparsefailure](https://discuss.elastic.co/t/date-filter-dateparsefailure/307199)

<div class="topic-metadata">

**Author:** [@yquirion](https://discuss.elastic.co/u/yquirion)\
**Replies:** 8\
**Last updated:** [June 15, 2022, 6:11pm UTC](https://discuss.elastic.co/t/date-filter-dateparsefailure/307199 "2022-06-15T18:11:46Z")

</div>

Dear all, I'm running into a strange problem converting syslogtimestamp field into @timestamp. After reading the thread: https://discuss.elastic.co/t/date-filter--dateparsefailure-solved/64692, I can't make it to work.…

---

## [Binding to Public / Private IPs](https://discuss.elastic.co/t/binding-to-public-private-ips/15570)

<div class="topic-metadata">

**Author:** [@Olu](https://discuss.elastic.co/u/Olu)\
**Replies:** 3\
**Last updated:** [February 3, 2014, 10:00pm UTC](https://discuss.elastic.co/t/binding-to-public-private-ips/15570 "2014-02-03T22:00:57Z")

</div>

ElasticSearch noob here. How do I specify the IP address that ES binds to?? I have an EC2 instance that runs ES on it. curling localhost:9200 on that machine provides me with ES data. However, trying to query ES …

---

## [Custom analyzer on match\_phrase](https://discuss.elastic.co/t/custom-analyzer-on-match-phrase/123846)

<div class="topic-metadata">

**Author:** [@bunch\_of\_bytes](https://discuss.elastic.co/u/bunch_of_bytes)\
**Replies:** 5\
**Last updated:** [March 26, 2018, 1:13pm UTC](https://discuss.elastic.co/t/custom-analyzer-on-match-phrase/123846 "2018-03-26T13:13:00Z")

</div>

Hi, I am quite puzzled by using analyzer on one of my search fields. Here is the mapping: {"settings": { "analysis": { "filter": { "filter\_shingle":{ "type":"shingle", "m…

---

## [Monitoring画面でのLogStashの表示](https://discuss.elastic.co/t/monitoring-logstash/195675)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 4\
**Last updated:** [August 20, 2019, 1:44am UTC](https://discuss.elastic.co/t/monitoring-logstash/195675 "2019-08-20T01:44:33Z")

</div>

KibanaのMonitoring画面にて、Logstashを監視する設定の方法をご教示ください。 Kibanaバージョン：7.1 Logstashバージョン：7.1 ■マニュアル参照箇所 https://www.elastic.co/guide/en/logstash/current/configuring-logstash.html ■logstash.yml追加設定内容 xpack.monitoring.enabled…

---

## [Curator 5.5 ERROR Singleton action failed due to empty index lis](https://discuss.elastic.co/t/curator-5-5-error-singleton-action-failed-due-to-empty-index-lis/145883)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 4\
**Last updated:** [August 24, 2018, 7:29pm UTC](https://discuss.elastic.co/t/curator-5-5-error-singleton-action-failed-due-to-empty-index-lis/145883 "2018-08-24T19:29:45Z")

</div>

Hi. I can not understand the operation in the curator 5.5 command line # curator\_cli --host kvm487 --port 9200 show\_indices --verbose .kibana open 50.4KB 10 1 1 2017-08-17T08:40:19Z excellenting ope…

---

## [Unable to make snapshots to NFS filesystem](https://discuss.elastic.co/t/unable-to-make-snapshots-to-nfs-filesystem/19997)

<div class="topic-metadata">

**Author:** [@Alex\_Harvey](https://discuss.elastic.co/u/Alex_Harvey)\
**Replies:** 4\
**Last updated:** [October 8, 2014, 7:05am UTC](https://discuss.elastic.co/t/unable-to-make-snapshots-to-nfs-filesystem/19997 "2014-10-08T07:05:29Z")

</div>

Hi all, I have been struggling to put together a backup solution for my ES cluster. As far as I understand the documentation at http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-snapsho…

---

## [java.net.SocketTimeoutException: Read timed out](https://discuss.elastic.co/t/java-net-sockettimeoutexception-read-timed-out/79322)

<div class="topic-metadata">

**Author:** [@lemmy.be](https://discuss.elastic.co/u/lemmy.be)\
**Replies:** 0\
**Last updated:** [March 20, 2017, 10:42pm UTC](https://discuss.elastic.co/t/java-net-sockettimeoutexception-read-timed-out/79322 "2017-03-20T22:42:14Z")

</div>

Hi All, I moved from 2.2 to 5.2.2 of ES. I've been running some tests and have been getting two errors (one from logger and one from ES) Logger: java.net.SocketTimeoutException: Read timed out at java.net.SocketInpu…

---

## [Is it possible to use query\_string as filter?](https://discuss.elastic.co/t/is-it-possible-to-use-query-string-as-filter/43590)

<div class="topic-metadata">

**Author:** [@Vicente\_de\_Rivera\_II](https://discuss.elastic.co/u/Vicente_de_Rivera_II)\
**Replies:** 6\
**Last updated:** [March 16, 2016, 6:25am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-query-string-as-filter/43590 "2016-03-16T06:25:18Z")

</div>

I use query string but I actually only use it for boolean operations like, 1. is this field exist? 2. is this field contain this value or range of int values? 3. this field field contain exactly this string? 4. i…

---

## [Split row data to fields](https://discuss.elastic.co/t/split-row-data-to-fields/42586)

<div class="topic-metadata">

**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\
**Replies:** 6\
**Last updated:** [February 25, 2016, 6:11am UTC](https://discuss.elastic.co/t/split-row-data-to-fields/42586 "2016-02-25T06:11:29Z")

</div>

Hi , When I load Json file to ElasticSearch , I sea the data in 1 column (message ). For example: {"Group": "abi", "ExTime": "", "LastSuccess": "", "PadDG%": "", "TestName": "PT\_FOTA/abi/SUPPORT/test132", "WI": "", "T…

---

## [Elasticsearch : we need to run on elasticsearch it will giving error](https://discuss.elastic.co/t/elasticsearch-we-need-to-run-on-elasticsearch-it-will-giving-error/81473)

<div class="topic-metadata">

**Author:** [@bvnages](https://discuss.elastic.co/u/bvnages)\
**Replies:** 8\
**Last updated:** [April 11, 2017, 7:08pm UTC](https://discuss.elastic.co/t/elasticsearch-we-need-to-run-on-elasticsearch-it-will-giving-error/81473 "2017-04-11T19:08:25Z")

</div>

org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:125) ~\[elasticsearch-5.2.0.jar:5.2.…

---

## [Make future prediction on current cpu usage data with logstash](https://discuss.elastic.co/t/make-future-prediction-on-current-cpu-usage-data-with-logstash/52347)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 8\
**Last updated:** [July 4, 2016, 10:59am UTC](https://discuss.elastic.co/t/make-future-prediction-on-current-cpu-usage-data-with-logstash/52347 "2016-07-04T10:59:57Z")

</div>

I have written a conf file to collect log file data about cpu usage. Is there anyway to do prediction of my cpu usage in the future 30 days with my current cpu usage data in the logstash conf file?

---

## [Will deletion on a parent document also delete the children document?](https://discuss.elastic.co/t/will-deletion-on-a-parent-document-also-delete-the-children-document/567)

<div class="topic-metadata">

**Author:** [@yangou](https://discuss.elastic.co/u/yangou)\
**Replies:** 2\
**Last updated:** [May 15, 2015, 3:35am UTC](https://discuss.elastic.co/t/will-deletion-on-a-parent-document-also-delete-the-children-document/567 "2015-05-15T03:35:31Z")

</div>

Hi, As the subject title, will deletion on a parent document also delete the children document? If not, since we manually delete the parent document and set the ttl on the children documents. Will those children be a…

---

## [Heatmap color scales](https://discuss.elastic.co/t/heatmap-color-scales/91084)

<div class="topic-metadata">

**Author:** [@\_jake](https://discuss.elastic.co/u/_jake)\
**Replies:** 5\
**Last updated:** [June 29, 2017, 3:09pm UTC](https://discuss.elastic.co/t/heatmap-color-scales/91084 "2017-06-29T15:09:31Z")

</div>

How can I show a 3 colour heatmap, centred on zero, like this.. The closest I have managed to get is this, which is far from ideal. Thanks!

---

## [Add field in logstash config](https://discuss.elastic.co/t/add-field-in-logstash-config/25513)

<div class="topic-metadata">

**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Replies:** 5\
**Last updated:** [July 14, 2015, 12:37pm UTC](https://discuss.elastic.co/t/add-field-in-logstash-config/25513 "2015-07-14T12:37:13Z")

</div>

Hi!!! I have logs like this: GetLoginGata: login: 'G:59423457'; deviceId: 'FF7567DE-8822-4D0F-9E2E-651A202B6B58' And I want to get fields with grok filter in my config: grok { match =\> \[ "message", " login: %{WORD:…

[Previous page](https://discuss.elastic.co/top.md?page=636&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=638&per_page=50&period=all)
