# Top

**URL:** https://discuss.elastic.co/top.md?page=655&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 656

---

## [Ingest pipeline not finding field](https://discuss.elastic.co/t/ingest-pipeline-not-finding-field/344144)

<div class="topic-metadata">

**Author:** [@emi\_rose](https://discuss.elastic.co/u/emi_rose)\
**Replies:** 7\
**Last updated:** [September 29, 2023, 10:08pm UTC](https://discuss.elastic.co/t/ingest-pipeline-not-finding-field/344144 "2023-09-29T22:08:26Z")

</div>

Hi there, When I test my ingest pipeline, which replaces a delimiter with a whitespace, with a document that has the exact field I'm trying to transform, I keep getting this error: \[Field \[field\] not present as part of …

---

## [DSL query : How to parse message contain slash](https://discuss.elastic.co/t/dsl-query-how-to-parse-message-contain-slash/300216)

<div class="topic-metadata">

**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\
**Replies:** 7\
**Last updated:** [April 1, 2022, 6:27am UTC](https://discuss.elastic.co/t/dsl-query-how-to-parse-message-contain-slash/300216 "2022-04-01T06:27:56Z")

</div>

Hi, How can i parse a message field wich contain slashes ? I'm trying with query regexp, but without result. Thanks all

---

## [ResizeObserver loop limit exceeded](https://discuss.elastic.co/t/resizeobserver-loop-limit-exceeded/147988)

<div class="topic-metadata">

**Author:** [@Lynnic](https://discuss.elastic.co/u/Lynnic)\
**Replies:** 5\
**Last updated:** [September 12, 2018, 3:01am UTC](https://discuss.elastic.co/t/resizeobserver-loop-limit-exceeded/147988 "2018-09-12T03:01:51Z")

</div>

hi, guys, I came across this error when clicking on a video fullscreen button in kibana This only happens on Chrome browser , how can I get rid of it ?

---

## [Bulk insert HTTP 504 Gateway Timeout](https://discuss.elastic.co/t/bulk-insert-http-504-gateway-timeout/181833)

<div class="topic-metadata">

**Author:** [@lonzodc](https://discuss.elastic.co/u/lonzodc)\
**Replies:** 2\
**Last updated:** [May 21, 2019, 6:03am UTC](https://discuss.elastic.co/t/bulk-insert-http-504-gateway-timeout/181833 "2019-05-21T06:03:03Z")

</div>

I have been experiencing a HTTP 504 Gateway Timeout from Elasticsearch during a bulk insert. We are using Amazon Elasticsearch Service and I've read that there is a default 60 second timeout and if there are too many re…

---

## [Failed to create index..Please help](https://discuss.elastic.co/t/failed-to-create-index-please-help/56003)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 2\
**Last updated:** [July 20, 2016, 5:16pm UTC](https://discuss.elastic.co/t/failed-to-create-index-please-help/56003 "2016-07-20T17:16:50Z")

</div>

\[2016-07-20 16:18:08,400\]\[DEBUG\]\[action.admin.indices.create\] \[ElasticSearch-14\] \[content\] failed to create org.elasticsearch.index.mapper.MapperParsingException: mapping \[logs\] at org.elasticsearch.cluster.metadata.Met…

---

## [How to install logstash-input-jdbc in Off-line environment(windows)](https://discuss.elastic.co/t/how-to-install-logstash-input-jdbc-in-off-line-environment-windows/26456)

<div class="topic-metadata">

**Author:** [@kikuchan](https://discuss.elastic.co/u/kikuchan)\
**Replies:** 2\
**Last updated:** [July 31, 2015, 5:25am UTC](https://discuss.elastic.co/t/how-to-install-logstash-input-jdbc-in-off-line-environment-windows/26456 "2015-07-31T05:25:05Z")

</div>

hello. I tried to use logstash-input-jdbc using followed command :plugin install C:/local/logstash-input-jdbc-1.0.0.gem. But it is showing following error, Validating C:/local/logstash-input-jdbc-1.0.0.gem Installin…

---

## [Index shard got corrupted](https://discuss.elastic.co/t/index-shard-got-corrupted/22465)

<div class="topic-metadata">

**Author:** [@Sukanta\_Saha](https://discuss.elastic.co/u/Sukanta_Saha)\
**Replies:** 2\
**Last updated:** [March 4, 2015, 8:30pm UTC](https://discuss.elastic.co/t/index-shard-got-corrupted/22465 "2015-03-04T20:30:30Z")

</div>

Hi in all our elasticsearch cluster we use this elasticsearch-cloud-aws plugin to create the snapshots on s3 on a regular basis. Some times we saw the shard got corrupted for an index in our elasticsearch lo…

---

## [Search without field name](https://discuss.elastic.co/t/search-without-field-name/257495)

<div class="topic-metadata">

**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\
**Replies:** 4\
**Last updated:** [December 3, 2020, 1:57pm UTC](https://discuss.elastic.co/t/search-without-field-name/257495 "2020-12-03T13:57:54Z")

</div>

Hi, I'm with Kibana 7.10, and in discover, I try to just search without the field name. It seems to me for some fields, this works, for others, not. For example, I have a string field fields.log\_type: "log-type" In Ki…

---

## ["Your trial license is expired"](https://discuss.elastic.co/t/your-trial-license-is-expired/217361)

<div class="topic-metadata">

**Author:** [@yoavb](https://discuss.elastic.co/u/yoavb)\
**Replies:** 4\
**Last updated:** [February 21, 2020, 6:17pm UTC](https://discuss.elastic.co/t/your-trial-license-is-expired/217361 "2020-02-21T18:17:54Z")

</div>

I am getting the following message : \[2020-01-31T11:42:39,671\]\[ERROR\]\[o.e.x.s.a.f.SecurityActionFilter\] \[elk74\] blocking \[cluster:monitor/stats\] operation due to expired license. I have run : curl -uelastic -XPOST 'h…

---

## [Use of Kibana for displaying text contents](https://discuss.elastic.co/t/use-of-kibana-for-displaying-text-contents/82223)

<div class="topic-metadata">

**Author:** [@jobyjohny](https://discuss.elastic.co/u/jobyjohny)\
**Replies:** 4\
**Last updated:** [April 14, 2017, 2:42pm UTC](https://discuss.elastic.co/t/use-of-kibana-for-displaying-text-contents/82223 "2017-04-14T14:42:02Z")

</div>

I have set of fact table in hive which are related to data of customers,transactions. I can move those Hive tables into Elastic search and view the text contents in kibana. Please find the example below Case C1 contain…

---

## [Куда писать логи что бы облегчить работу logstash?](https://discuss.elastic.co/t/logstash/27760)

<div class="topic-metadata">

**Author:** [@y3g0r](https://discuss.elastic.co/u/y3g0r)\
**Replies:** 4\
**Last updated:** [March 15, 2017, 12:18pm UTC](https://discuss.elastic.co/t/logstash/27760 "2017-03-15T12:18:12Z")

</div>

Всем привет. Я разрабатываю приложения и хочу собирать логи из них с помощью Logstash, что бы хранить их в Elasticsearch и использовать Kibana для поиска и анализа событий. Logstash имеет большое количество входных пла…

---

## [Marvel index rate maybe high](https://discuss.elastic.co/t/marvel-index-rate-maybe-high/39051)

<div class="topic-metadata">

**Author:** [@whybangbang](https://discuss.elastic.co/u/whybangbang)\
**Replies:** 4\
**Last updated:** [January 14, 2016, 2:27am UTC](https://discuss.elastic.co/t/marvel-index-rate-maybe-high/39051 "2016-01-14T02:27:26Z")

</div>

we put data into es by logstash from kafka, kafka consume rate is about 300message/s and logstash metrics plugin calculate is about same with kafka ,but es index rate is 675.2/s our index is 2 shard 1 replicas e…

---

## [Unable to configure Index Lifecycle Management (ILM) with Logstash Elasticsearch output](https://discuss.elastic.co/t/unable-to-configure-index-lifecycle-management-ilm-with-logstash-elasticsearch-output/208564)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [November 19, 2019, 7:01pm UTC](https://discuss.elastic.co/t/unable-to-configure-index-lifecycle-management-ilm-with-logstash-elasticsearch-output/208564 "2019-11-19T19:01:37Z")

</div>

I'm simply trying to get ILM to work at the moment with Logstash, Elasticsearch, and Filebeat. Or any other beat. This is my elasticsearch output block: output { elasticsearch { hosts =\> \["localhost:9200"\] …

---

## [Elastic Stack 5.5.3 released](https://discuss.elastic.co/t/elastic-stack-5-5-3-released/100098)

<div class="topic-metadata">

**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Replies:** 0\
**Last updated:** [September 11, 2017, 4:47pm UTC](https://discuss.elastic.co/t/elastic-stack-5-5-3-released/100098 "2017-09-11T16:47:34Z")

</div>

Hi all, We’ve just released version 5.5.3 of the Elastic Stack. This is a bug fix release; please see the release notes/blogs for each product to get the details. You can find the individual blog posts here: https://ww…

---

## [Configuration of client node](https://discuss.elastic.co/t/configuration-of-client-node/102331)

<div class="topic-metadata">

**Author:** [@sivakaran](https://discuss.elastic.co/u/sivakaran)\
**Replies:** 3\
**Last updated:** [September 30, 2017, 10:42am UTC](https://discuss.elastic.co/t/configuration-of-client-node/102331 "2017-09-30T10:42:18Z")

</div>

Hi, I have to try configuring the client node in elasticsearch-1.3.7. It does not work for my setup. I have 6 data nodes, 2 master nodes. and also attached my client node configuration file.please suggest me what can I d…

---

## [Elasticsearch update index NoSuchElementException error](https://discuss.elastic.co/t/elasticsearch-update-index-nosuchelementexception-error/25226)

<div class="topic-metadata">

**Author:** [@Sandeep\_Verma](https://discuss.elastic.co/u/Sandeep_Verma)\
**Replies:** 3\
**Last updated:** [July 9, 2015, 1:07pm UTC](https://discuss.elastic.co/t/elasticsearch-update-index-nosuchelementexception-error/25226 "2015-07-09T13:07:20Z")

</div>

Hi, I am updating user document with mvel. It works fine for few minutes and after some time es starts giving below issue "ElasticsearchIllegalArgumentException\[failed to execute script\]; nested: NoSuchElementExcep…

---

## [Ingest pipeline - How to stores the split values into separate new fields?](https://discuss.elastic.co/t/ingest-pipeline-how-to-stores-the-split-values-into-separate-new-fields/200567)

<div class="topic-metadata">

**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\
**Replies:** 2\
**Last updated:** [September 23, 2019, 9:45am UTC](https://discuss.elastic.co/t/ingest-pipeline-how-to-stores-the-split-values-into-separate-new-fields/200567 "2019-09-23T09:45:32Z")

</div>

How to stores the split values (using split processor) into three new fields? here is my pipeline but need to store split values to separate 3 fields. I have tried set array list on target\_field parameter but look likes…

---

## [JDBC plugin to ingest data in to elastic search 5.0](https://discuss.elastic.co/t/jdbc-plugin-to-ingest-data-in-to-elastic-search-5-0/69340)

<div class="topic-metadata">

**Author:** [@btom](https://discuss.elastic.co/u/btom)\
**Replies:** 2\
**Last updated:** [December 17, 2016, 12:35pm UTC](https://discuss.elastic.co/t/jdbc-plugin-to-ingest-data-in-to-elastic-search-5-0/69340 "2016-12-17T12:35:29Z")

</div>

Hi, I am planning to use elastic search 5.0 and needs to ingest data using JDBC to elastic search. I found a plugin JDBC importer created by jprante but it seems that this does not support elastic search 5.0 till yet. …

---

## [3 nodes cluster schema / Split Brain](https://discuss.elastic.co/t/3-nodes-cluster-schema-split-brain/33154)

<div class="topic-metadata">

**Author:** [@zokratez](https://discuss.elastic.co/u/zokratez)\
**Replies:** 4\
**Last updated:** [October 28, 2015, 9:48pm UTC](https://discuss.elastic.co/t/3-nodes-cluster-schema-split-brain/33154 "2015-10-28T21:48:53Z")

</div>

Hi! I want to know if with this current schema I'm safe from split brain error... Node1: master and data Node2: slave and data Node3: dedicated master Node1 unicast point to Node2 Node2 unicast point to Node3 Node…

---

## [Filebeat - Non-zero metrics in the last 30s](https://discuss.elastic.co/t/filebeat-non-zero-metrics-in-the-last-30s/241216)

<div class="topic-metadata">

**Author:** [@saravananveera](https://discuss.elastic.co/u/saravananveera)\
**Replies:** 2\
**Last updated:** [July 15, 2020, 11:14am UTC](https://discuss.elastic.co/t/filebeat-non-zero-metrics-in-the-last-30s/241216 "2020-07-15T11:14:16Z")

</div>

Apparently logs are transferred from Filebeat to logstash, however the filebeat logs continiously show this message: 2020-07-15T01:18:20.789Z INFO \[monitoring\] log/log.go:124 Non-zero metrics in the last 30s {"monitorin…

---

## [Aggregation on specific object in an array](https://discuss.elastic.co/t/aggregation-on-specific-object-in-an-array/327533)

<div class="topic-metadata">

**Author:** [@Vivek\_Burman](https://discuss.elastic.co/u/Vivek_Burman)\
**Replies:** 3\
**Last updated:** [March 13, 2023, 1:27pm UTC](https://discuss.elastic.co/t/aggregation-on-specific-object-in-an-array/327533 "2023-03-13T13:27:33Z")

</div>

Hi, So my document has a structure as below. I would like to aggregate based on \*\*value\*\*, but only on the object with {"label": "Business Priority"}. Can you help how I can achieve this?

---

## [Fleet Server - Filebeat Using HTTP instead of HTTPS](https://discuss.elastic.co/t/fleet-server-filebeat-using-http-instead-of-https/325657)

<div class="topic-metadata">

**Author:** [@pritchey](https://discuss.elastic.co/u/pritchey)\
**Replies:** 8\
**Last updated:** [February 21, 2023, 1:38pm UTC](https://discuss.elastic.co/t/fleet-server-filebeat-using-http-instead-of-https/325657 "2023-02-21T13:38:59Z")

</div>

I have a self-hosted elastic stack running 8.6.1. I'm trying to get fleet running but I'm hitting a wall on one part. The fleet server and any agents show as "healthy" but no data every shows up. Digging into things I…

---

## [Unable to see application logs which are added to a Opentelemetry span in APM](https://discuss.elastic.co/t/unable-to-see-application-logs-which-are-added-to-a-opentelemetry-span-in-apm/316794)

<div class="topic-metadata">

**Author:** [@User28](https://discuss.elastic.co/u/User28)\
**Replies:** 8\
**Last updated:** [November 11, 2022, 5:52pm UTC](https://discuss.elastic.co/t/unable-to-see-application-logs-which-are-added-to-a-opentelemetry-span-in-apm/316794 "2022-11-11T17:52:57Z")

</div>

Kibana version: 7.17.4 Elasticsearch version: 7.17.4 APM Server version: 7.17.4 APM Agent language and version: OpenTelemetry agent v1.18.0 Browser version: Chrome Original install method (e.g. download page, yum, d…

---

## [Sorting out TLS for ELK, using Helm Chart, in AKS](https://discuss.elastic.co/t/sorting-out-tls-for-elk-using-helm-chart-in-aks/286080)

<div class="topic-metadata">

**Author:** [@dcarlet](https://discuss.elastic.co/u/dcarlet)\
**Replies:** 3\
**Last updated:** [October 25, 2021, 11:24pm UTC](https://discuss.elastic.co/t/sorting-out-tls-for-elk-using-helm-chart-in-aks/286080 "2021-10-25T23:24:55Z")

</div>

So, I am trying to set up the following configuration: 3 node elastic cluster 1 node logstash 1 node kibana I am utilizing the Helm Charts (GitHub - elastic/helm-charts: You know, for Kubernetes); and specifically …

---

## [Kibana Dev tool history wiped out](https://discuss.elastic.co/t/kibana-dev-tool-history-wiped-out/137701)

<div class="topic-metadata">

**Author:** [@sunny1](https://discuss.elastic.co/u/sunny1)\
**Replies:** 3\
**Last updated:** [July 3, 2018, 8:22pm UTC](https://discuss.elastic.co/t/kibana-dev-tool-history-wiped-out/137701 "2018-07-03T20:22:43Z")

</div>

Hello, i had many commands in dev tool. I cleared firefox cookies and cache and now entire history for DEV tool is wiped out. Is it possible to recover it ? Any help really appreciate.

---

## [Related Searches](https://discuss.elastic.co/t/related-searches/9465)

<div class="topic-metadata">

**Author:** [@Aaron\_Rosenthal](https://discuss.elastic.co/u/Aaron_Rosenthal)\
**Replies:** 8\
**Last updated:** [October 31, 2012, 11:53pm UTC](https://discuss.elastic.co/t/related-searches/9465 "2012-10-31T23:53:41Z")

</div>

How is it best to offer our users related search suggestions based on related query. Does elastic have features like this built in our would re have to build our own. Any suggestions would be great. We are trying to …

---

## [Kibana Alerts - Action on Recovered contains no context.group](https://discuss.elastic.co/t/kibana-alerts-action-on-recovered-contains-no-context-group/268946)

<div class="topic-metadata">

**Author:** [@JMisset88](https://discuss.elastic.co/u/JMisset88)\
**Replies:** 3\
**Last updated:** [April 1, 2021, 7:20pm UTC](https://discuss.elastic.co/t/kibana-alerts-action-on-recovered-contains-no-context-group/268946 "2021-04-01T19:20:19Z")

</div>

Hi, We recently upgraded from Elastic 7.10.0 to 7.12.0. Mainly because I saw the new Alerting/Action functionality to only send an Alert on a Status Change (instead of on an interval). This is a very nice feature, howev…

---

## [Sizing/Capacity for ELK in Production](https://discuss.elastic.co/t/sizing-capacity-for-elk-in-production/118679)

<div class="topic-metadata">

**Author:** [@venkii](https://discuss.elastic.co/u/venkii)\
**Replies:** 1\
**Last updated:** [February 6, 2018, 4:46pm UTC](https://discuss.elastic.co/t/sizing-capacity-for-elk-in-production/118679 "2018-02-06T16:46:46Z")

</div>

Is there sizing/capacity calculators for ELK? Considering raw value, we are talking data ingestion of 280GB/per day. To get a high hourly rate, we are probably at 280/8=35GB per hour…Maybe 50 GB at our peak? And we ne…

---

## [Does Kibana has public roadmap? (Drill Down on dashboards)](https://discuss.elastic.co/t/does-kibana-has-public-roadmap-drill-down-on-dashboards/77674)

<div class="topic-metadata">

**Author:** [@Ranieri\_Mazili\_de\_Ol](https://discuss.elastic.co/u/Ranieri_Mazili_de_Ol)\
**Replies:** 2\
**Last updated:** [March 7, 2017, 7:25pm UTC](https://discuss.elastic.co/t/does-kibana-has-public-roadmap-drill-down-on-dashboards/77674 "2017-03-07T19:25:57Z")

</div>

Hello, I was looking for a roadmap for Kibana and couldn't find it. I'm really interested in use Kibana to create dashboards but without drilldown feature it's almost useless for business dashboards and I would like if…

---

## [Access nested/children doc values with Lucene from FilterScript plugin](https://discuss.elastic.co/t/access-nested-children-doc-values-with-lucene-from-filterscript-plugin/124833)

<div class="topic-metadata">

**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\
**Replies:** 4\
**Last updated:** [March 23, 2018, 7:59pm UTC](https://discuss.elastic.co/t/access-nested-children-doc-values-with-lucene-from-filterscript-plugin/124833 "2018-03-23T19:59:13Z")

</div>

Hi, I'm actually trying to prototype some filter plugin. The objectives are : Optimize access to the nested documents. Actually (in a painless script for example) the only way to process nested entities is to proces…

---

## [Bulk API does not work in 5.6.1](https://discuss.elastic.co/t/bulk-api-does-not-work-in-5-6-1/102692)

<div class="topic-metadata">

**Author:** [@fillic2002](https://discuss.elastic.co/u/fillic2002)\
**Replies:** 6\
**Last updated:** [October 16, 2017, 5:13am UTC](https://discuss.elastic.co/t/bulk-api-does-not-work-in-5-6-1/102692 "2017-10-16T05:13:37Z")

</div>

I tried using the \_bulk api with the data provided in sample data section. However the bulk API always throwing error. I know earlier it was working like charm. I used fiddler to call \_bulk api and attached the file. Th…

---

## [Run Elastic Search and Logstash on different servers](https://discuss.elastic.co/t/run-elastic-search-and-logstash-on-different-servers/216246)

<div class="topic-metadata">

**Author:** [@amanpradhan](https://discuss.elastic.co/u/amanpradhan)\
**Replies:** 5\
**Last updated:** [January 24, 2020, 12:27am UTC](https://discuss.elastic.co/t/run-elastic-search-and-logstash-on-different-servers/216246 "2020-01-24T00:27:00Z")

</div>

Hello everyone, I am using logstash on a linux based server . I am collecting the logs on this server and after processing the logs with logstash i want to send these logs to elastic search which is on an amazon ec-2 in…

---

## [Trouble installing Elasticsearch plugin](https://discuss.elastic.co/t/trouble-installing-elasticsearch-plugin/24670)

<div class="topic-metadata">

**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\
**Replies:** 4\
**Last updated:** [July 1, 2015, 5:09pm UTC](https://discuss.elastic.co/t/trouble-installing-elasticsearch-plugin/24670 "2015-07-01T17:09:26Z")

</div>

Hi, Everytime I try to install plugin from zip file, it fails with different errors. So, I manually extract plugin to plugins folder. I am trying to use readonlyrest plugin: https://github.com/sscarduzio/elasticsearc…

---

## [Using translate plugin to speed up grok?](https://discuss.elastic.co/t/using-translate-plugin-to-speed-up-grok/39436)

<div class="topic-metadata">

**Author:** [@Gilad\_Pellaeon](https://discuss.elastic.co/u/Gilad_Pellaeon)\
**Replies:** 7\
**Last updated:** [January 19, 2016, 12:06pm UTC](https://discuss.elastic.co/t/using-translate-plugin-to-speed-up-grok/39436 "2016-01-19T12:06:37Z")

</div>

Hi all, I'm trying to get grok to perform better for our firewall logs. Unfortunately, they are ASA firewalls, which means that there are dozens of patterns that every message needs to be matched to - even though the m…

---

## [Create field if it's not equal "Undefined"](https://discuss.elastic.co/t/create-field-if-its-not-equal-undefined/25718)

<div class="topic-metadata">

**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Replies:** 1\
**Last updated:** [July 16, 2015, 11:48am UTC](https://discuss.elastic.co/t/create-field-if-its-not-equal-undefined/25718 "2015-07-16T11:48:44Z")

</div>

Hi! I have logs: days\_in\_game: 198; pvp\_rating: 63; provider: Undefined; And i want to crete field "provider" in documents when it's not equal "Undefined". Can you write me filter config for this? THX!

---

## [How to install a plugin from a jar file](https://discuss.elastic.co/t/how-to-install-a-plugin-from-a-jar-file/22528)

<div class="topic-metadata">

**Author:** [@Oranit\_Dror](https://discuss.elastic.co/u/Oranit_Dror)\
**Replies:** 3\
**Last updated:** [March 6, 2015, 7:16am UTC](https://discuss.elastic.co/t/how-to-install-a-plugin-from-a-jar-file/22528 "2015-03-06T07:16:01Z")

</div>

Hi, I have written a plugin, but I cannot make ElasticSearch 1.4.4 to use it. Specifically, I packed the plugin as a jar file and placed the jar file under my ELASTIC\_SEARCH\_DIR/plugins/ directory. However, when …

---

## [How can I fetch in between documents using Java API?](https://discuss.elastic.co/t/how-can-i-fetch-in-between-documents-using-java-api/111245)

<div class="topic-metadata">

**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\
**Replies:** 8\
**Last updated:** [December 13, 2017, 5:08am UTC](https://discuss.elastic.co/t/how-can-i-fetch-in-between-documents-using-java-api/111245 "2017-12-13T05:08:40Z")

</div>

I want to fetch documents from 200 to 300 using search query of JAVA API implementation but unable to find any option How to do this? Thanks

---

## [TTL for documents](https://discuss.elastic.co/t/ttl-for-documents/4967)

<div class="topic-metadata">

**Author:** [@Benjamin\_Deveze](https://discuss.elastic.co/u/Benjamin_Deveze)\
**Replies:** 8\
**Last updated:** [July 28, 2011, 6:12am UTC](https://discuss.elastic.co/t/ttl-for-documents/4967 "2011-07-28T06:12:03Z")

</div>

A lot of documents naturally come with an expiration date. I think it would be nice to have a built-in support for a TTL/doc (with eventually default TTLs configurable per types/indices). I know disks are not expensiv…

---

## [Error: com.microsoft.sqlserver.jdbc.SQLServerDriver not loaded. Are you sure you've included the correct jdbc driver in :jdbc\_driver\_library?](https://discuss.elastic.co/t/error-com-microsoft-sqlserver-jdbc-sqlserverdriver-not-loaded-are-you-sure-youve-included-the-correct-jdbc-driver-in-jdbc-driver-library/204440)

<div class="topic-metadata">

**Author:** [@adarsh-c](https://discuss.elastic.co/u/adarsh-c)\
**Replies:** 1\
**Last updated:** [October 21, 2019, 12:01pm UTC](https://discuss.elastic.co/t/error-com-microsoft-sqlserver-jdbc-sqlserverdriver-not-loaded-are-you-sure-youve-included-the-correct-jdbc-driver-in-jdbc-driver-library/204440 "2019-10-21T12:01:55Z")

</div>

I am using logstash-7.4.0 , jdk-11.0.5 and Microsoft JDBC Driver 7.4 for SQL Server. I am getting an jdbc connection issue . Any idea ? batch.delay"=\>50, "pipeline.max\_inflight"=\>500, :thread=\>"#\<Thread:0x2dcedb2a run\>…

---

## [Failed to parse date field error](https://discuss.elastic.co/t/failed-to-parse-date-field-error/194445)

<div class="topic-metadata">

**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\
**Replies:** 1\
**Last updated:** [August 8, 2019, 2:38pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field-error/194445 "2019-08-08T14:38:35Z")

</div>

hi i get these errors with one of the indexes (microsoft defender ATP data) \[2019-08-08T15:57:01,663\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_i…

---

## [Winlogbeat logging.level does not level properly](https://discuss.elastic.co/t/winlogbeat-logging-level-does-not-level-properly/98036)

<div class="topic-metadata">

**Author:** [@g4nj4wizard](https://discuss.elastic.co/u/g4nj4wizard)\
**Replies:** 2\
**Last updated:** [August 23, 2017, 1:55pm UTC](https://discuss.elastic.co/t/winlogbeat-logging-level-does-not-level-properly/98036 "2017-08-23T13:55:14Z")

</div>

Hello everyone, i’ve set logging.level to warning. So this should only collect events with level = critical, error, warning. But i am still receiving a massive amount of Information messages. I already restarted the se…

---

## [Elasticsearch index mapping parameter ignore\_malformed setting](https://discuss.elastic.co/t/elasticsearch-index-mapping-parameter-ignore-malformed-setting/51745)

<div class="topic-metadata">

**Author:** [@pwang](https://discuss.elastic.co/u/pwang)\
**Replies:** 2\
**Last updated:** [June 6, 2016, 1:23pm UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping-parameter-ignore-malformed-setting/51745 "2016-06-06T13:23:55Z")

</div>

We are using Elasticsearch 2.1.1 with a 3-node cluster. Recently we see Elasticsearch constantly initializing many shards in multiple indexes and stuck in that mode. The cluster health stays red with no obvious methods t…

---

## [Anything similar to PIPE, REX to create custom Fields](https://discuss.elastic.co/t/anything-similar-to-pipe-rex-to-create-custom-fields/94952)

<div class="topic-metadata">

**Author:** [@vivek.pr.mi](https://discuss.elastic.co/u/vivek.pr.mi)\
**Replies:** 0\
**Last updated:** [July 28, 2017, 12:16pm UTC](https://discuss.elastic.co/t/anything-similar-to-pipe-rex-to-create-custom-fields/94952 "2017-07-28T12:16:57Z")

</div>

Hi Team, First I want to thank you all for such an awesome product. I wanted to evaluate Elasticsearch and Splunk features. I had few queries in this regard and this is my first post to the Forum: I was wondering wh…

---

## [Connection pooling in elasticsearch](https://discuss.elastic.co/t/connection-pooling-in-elasticsearch/41463)

<div class="topic-metadata">

**Author:** [@Anusha](https://discuss.elastic.co/u/Anusha)\
**Replies:** 0\
**Last updated:** [February 11, 2016, 9:26am UTC](https://discuss.elastic.co/t/connection-pooling-in-elasticsearch/41463 "2016-02-11T09:26:04Z")

</div>

Hello Team, I would like to know about connection pool for transport client using java API in ES, how to achieve connection pool for Transport client in ES?? If ES Transport client supports connection pool by default,…

---

## [Elastic wacher painlless script and mustache template](https://discuss.elastic.co/t/elastic-wacher-painlless-script-and-mustache-template/220755)

<div class="topic-metadata">

**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\
**Replies:** 6\
**Last updated:** [March 19, 2020, 6:15pm UTC](https://discuss.elastic.co/t/elastic-wacher-painlless-script-and-mustache-template/220755 "2020-03-19T18:15:33Z")

</div>

hi I have created following watcher by following https://cinhtau.net/2017/06/19/es-nodes-mem\_watch/ I had to edit few stuff to make it work for ELK 7 { "trigger": { "schedule": { "interval": "6h" } }…

---

## [Windows Event Log filtering](https://discuss.elastic.co/t/windows-event-log-filtering/53448)

<div class="topic-metadata">

**Author:** [@brandonmcgrath1](https://discuss.elastic.co/u/brandonmcgrath1)\
**Replies:** 6\
**Last updated:** [June 22, 2016, 11:01pm UTC](https://discuss.elastic.co/t/windows-event-log-filtering/53448 "2016-06-22T23:01:17Z")

</div>

So, I'm trying to upgrade my logstash conf file to filter the windows event logs and make them more useful. At the moment the log dumps loads of information into one field called "message", like so: {"EventTime":"2016-…

---

## [Encountered monitor.jvm warning](https://discuss.elastic.co/t/encountered-monitor-jvm-warning/22848)

<div class="topic-metadata">

**Author:** [@Abid\_Hussain](https://discuss.elastic.co/u/Abid_Hussain)\
**Replies:** 4\
**Last updated:** [March 26, 2015, 10:38am UTC](https://discuss.elastic.co/t/encountered-monitor-jvm-warning/22848 "2015-03-26T10:38:53Z")

</div>

Hi all, we today got (for the first time) warning messages which seem to indicate a memory problem: \[2015-03-24 09:08:12,960\]\[WARN \]\[monitor.jvm \] \[Danger\] \[gc\]\[young\]\[413224\]\[18109\] duration \[5m\], c…

---

## [Logstash node is missing from Monitoring in Kibana](https://discuss.elastic.co/t/logstash-node-is-missing-from-monitoring-in-kibana/244789)

<div class="topic-metadata">

**Author:** [@ELK\_User\_Arun](https://discuss.elastic.co/u/ELK_User_Arun)\
**Replies:** 5\
**Last updated:** [August 19, 2020, 6:13pm UTC](https://discuss.elastic.co/t/logstash-node-is-missing-from-monitoring-in-kibana/244789 "2020-08-19T18:13:26Z")

</div>

Hi All, We have two logstash nodes running in our DEV cluster and only one is visible in Kibana under monitoring. I compared the logstash.yml file of both the nodes side-by-side but I could not find any differences bet…

---

## [How to run multiple logstash conf file in single machine using logstash 6.2.4](https://discuss.elastic.co/t/how-to-run-multiple-logstash-conf-file-in-single-machine-using-logstash-6-2-4/145492)

<div class="topic-metadata">

**Author:** [@priti](https://discuss.elastic.co/u/priti)\
**Replies:** 3\
**Last updated:** [August 22, 2018, 6:59am UTC](https://discuss.elastic.co/t/how-to-run-multiple-logstash-conf-file-in-single-machine-using-logstash-6-2-4/145492 "2018-08-22T06:59:50Z")

</div>

I have downloaded and extract logstash 6.2.4 on linux machine on /opt/mount1 drive . Created 5 conf files in bin directory. When i give path.data: /opt/mount1/logstash6.2.4/data in logstash.yml fiel i am able to run 2 …

---

## [Logstash breaks when disabling certain X-pack features](https://discuss.elastic.co/t/logstash-breaks-when-disabling-certain-x-pack-features/89511)

<div class="topic-metadata">

**Author:** [@bjorn](https://discuss.elastic.co/u/bjorn)\
**Replies:** 3\
**Last updated:** [June 16, 2017, 1:44pm UTC](https://discuss.elastic.co/t/logstash-breaks-when-disabling-certain-x-pack-features/89511 "2017-06-16T13:44:43Z")

</div>

When installing x-pack on a fresh Ubuntu 17.04 install, (Logstash 5.4.1, Elasticsearch 5.4.1, Kibana 5.4.1 from Elastic repo), Logstash breaks when disabling monitoring (xpack.monitoring.enabled: false in elasticsearch.y…

[Previous page](https://discuss.elastic.co/top.md?page=654&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=656&per_page=50&period=all)
