# Top

**URL:** https://discuss.elastic.co/top.md?page=660&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 661

---

## [How to configure csp.rules for kibana on docker](https://discuss.elastic.co/t/how-to-configure-csp-rules-for-kibana-on-docker/243025)

<div class="topic-metadata">

**Author:** [@Raja\_SP](https://discuss.elastic.co/u/Raja_SP)\
**Replies:** 2\
**Last updated:** [July 29, 2020, 2:52pm UTC](https://discuss.elastic.co/t/how-to-configure-csp-rules-for-kibana-on-docker/243025 "2020-07-29T14:52:21Z")

</div>

I want to add the following rule to the kibana.yml for kibana on docker, version 7.7.1. I will externalise the kibana.yml filke using the volume mapping. But what is the right syntax ? The below syntax works for the nati…

---

## [Filebeat netflow cant parse netstream from huawei](https://discuss.elastic.co/t/filebeat-netflow-cant-parse-netstream-from-huawei/251534)

<div class="topic-metadata">

**Author:** [@ar4](https://discuss.elastic.co/u/ar4)\
**Replies:** 5\
**Last updated:** [October 17, 2020, 11:47pm UTC](https://discuss.elastic.co/t/filebeat-netflow-cant-parse-netstream-from-huawei/251534 "2020-10-17T23:47:03Z")

</div>

Hi, We using filebeat for collect netflow from Mikrotik. Also its work perfect. Now we need to collect netstream from Huawei AR2240 and it's don't work, flows no seen in kibana. Then i run filebeat at debug mode i see…

---

## [Logstash - Unsupported platform: x86\_64-windows](https://discuss.elastic.co/t/logstash-unsupported-platform-x86-64-windows/105751)

<div class="topic-metadata">

**Author:** [@Sanat\_Sathyan](https://discuss.elastic.co/u/Sanat_Sathyan)\
**Replies:** 2\
**Last updated:** [October 30, 2017, 1:33pm UTC](https://discuss.elastic.co/t/logstash-unsupported-platform-x86-64-windows/105751 "2017-10-30T13:33:00Z")

</div>

Whenever i try to install a plugin through "logstash-plugin", I get this error.. I use Windows 10 - 64 bit, and i have Java 9.0.1 installed. \[image\]

---

## [How to filter certain range of hours for each day in bar chart?](https://discuss.elastic.co/t/how-to-filter-certain-range-of-hours-for-each-day-in-bar-chart/65202)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 1\
**Last updated:** [November 7, 2016, 7:38pm UTC](https://discuss.elastic.co/t/how-to-filter-certain-range-of-hours-for-each-day-in-bar-chart/65202 "2016-11-07T19:38:20Z")

</div>

I have a requirement where I need to filter out the certain hours with in the day with bar chart. So, for example , if I search from 2016.10.01 00:00:00Z to 2016.10.06 00:00:00Z in time filter and if create a filter …

---

## [Logstash don't parse logfile, but don't produce errors](https://discuss.elastic.co/t/logstash-dont-parse-logfile-but-dont-produce-errors/31229)

<div class="topic-metadata">

**Author:** [@roland](https://discuss.elastic.co/u/roland)\
**Replies:** 7\
**Last updated:** [September 30, 2015, 1:55pm UTC](https://discuss.elastic.co/t/logstash-dont-parse-logfile-but-dont-produce-errors/31229 "2015-09-30T13:55:04Z")

</div>

Hi, I have recently installed logstash + kibana + elasticsearch on my laptop. My laptop hosts a Fedora Linux 21 x86\_64 Logstash is version 1.5.4 After configuring logstash and starting it, it was not creating indices…

---

## [Кодировка логов Windows 1251](https://discuss.elastic.co/t/windows-1251/164287)

<div class="topic-metadata">

**Author:** [@Jhonny-2005](https://discuss.elastic.co/u/Jhonny-2005)\
**Replies:** 3\
**Last updated:** [January 15, 2019, 4:41pm UTC](https://discuss.elastic.co/t/windows-1251/164287 "2019-01-15T16:41:15Z")

</div>

Добрый день. Есть проблема, которой бьюсь который день. Лог в виде csv в кодировке Windows 1251. В Kibana отображается кракозябрами. В Filebeat.yml указал - type: log # Change to true to enable this input configu…

---

## [Problem creating percolator - No field mapping can be found for the field with name](https://discuss.elastic.co/t/problem-creating-percolator-no-field-mapping-can-be-found-for-the-field-with-name/41087)

<div class="topic-metadata">

**Author:** [@Ryan\_Ramage](https://discuss.elastic.co/u/Ryan_Ramage)\
**Replies:** 2\
**Last updated:** [February 5, 2016, 9:46pm UTC](https://discuss.elastic.co/t/problem-creating-percolator-no-field-mapping-can-be-found-for-the-field-with-name/41087 "2016-02-05T21:46:30Z")

</div>

I am having a problem creating a percolator. I feel that I am doing everything according to the docs, so help would be appreciated. The root of my issue is I cant create a percolator document. The put is like this: …

---

## [ES not starting : After restarting elasticsearch 7.6.2 throws CorruptIndexException](https://discuss.elastic.co/t/es-not-starting-after-restarting-elasticsearch-7-6-2-throws-corruptindexexception/231648)

<div class="topic-metadata">

**Author:** [@akELK081](https://discuss.elastic.co/u/akELK081)\
**Replies:** 5\
**Last updated:** [May 8, 2020, 4:17pm UTC](https://discuss.elastic.co/t/es-not-starting-after-restarting-elasticsearch-7-6-2-throws-corruptindexexception/231648 "2020-05-08T16:17:46Z")

</div>

I am unable to restart my elasticsearch 7.6.2 as I am getting below exception, Can someone help me out regarding this issue. ELK elasticsearch\[3805\]: OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was depre…

---

## [NEST Client - BULK Method - Insert or update or delete](https://discuss.elastic.co/t/nest-client-bulk-method-insert-or-update-or-delete/184890)

<div class="topic-metadata">

**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\
**Replies:** 4\
**Last updated:** [June 10, 2019, 8:49am UTC](https://discuss.elastic.co/t/nest-client-bulk-method-insert-or-update-or-delete/184890 "2019-06-10T08:49:13Z")

</div>

Hi, I am trying to use Bulk method using c# NEST client. Example Lets say I have indexed 1000 documents first time. Second time I have 800 documents. But I don't know whether these are new or old. I have to replace e…

---

## [Plugin security policies not reliably being automatically loaded?](https://discuss.elastic.co/t/plugin-security-policies-not-reliably-being-automatically-loaded/92869)

<div class="topic-metadata">

**Author:** [@Jason\_Anderson](https://discuss.elastic.co/u/Jason_Anderson)\
**Replies:** 8\
**Last updated:** [August 2, 2017, 3:36pm UTC](https://discuss.elastic.co/t/plugin-security-policies-not-reliably-being-automatically-loaded/92869 "2017-08-02T15:36:12Z")

</div>

We have been having an interesting issue with the repository-hdfs plugin on our Elasticsearch cluster. It seems as though the plugin security policy is not "sticking" - that is the best way I can describe this confusing …

---

## [Error creating snapshot with HDFS plugin, FileSystemClosed](https://discuss.elastic.co/t/error-creating-snapshot-with-hdfs-plugin-filesystemclosed/2243)

<div class="topic-metadata">

**Author:** [@tgreischel](https://discuss.elastic.co/u/tgreischel)\
**Replies:** 6\
**Last updated:** [June 10, 2015, 5:37pm UTC](https://discuss.elastic.co/t/error-creating-snapshot-with-hdfs-plugin-filesystemclosed/2243 "2015-06-10T17:37:46Z")

</div>

ES - 1.5 ES Hadoop plugin - 2.1.0 b4 {"error":"RepositoryVerificationException\[\[esprod-usagetracking-2015-06\] path is not accessible on master node\]; nested: IOException\[Filesystem closed\]; ","status":500} The above…

---

## [How to config aruba wireless controller log to ELK](https://discuss.elastic.co/t/how-to-config-aruba-wireless-controller-log-to-elk/166461)

<div class="topic-metadata">

**Author:** [@guoxinabc](https://discuss.elastic.co/u/guoxinabc)\
**Replies:** 1\
**Last updated:** [January 31, 2019, 9:59am UTC](https://discuss.elastic.co/t/how-to-config-aruba-wireless-controller-log-to-elk/166461 "2019-01-31T09:59:54Z")

</div>

how to config aruba wireless controller log to ELK?

---

## [Can't start elasticsearch after changing default data and log location](https://discuss.elastic.co/t/cant-start-elasticsearch-after-changing-default-data-and-log-location/52944)

<div class="topic-metadata">

**Author:** [@snipervelli](https://discuss.elastic.co/u/snipervelli)\
**Replies:** 2\
**Last updated:** [June 16, 2016, 5:00pm UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-after-changing-default-data-and-log-location/52944 "2016-06-16T17:00:37Z")

</div>

Hi all, After changing my elasticsearch configuration file at /etc/elasticsearch/elasticsearch to point to a different data and log location from the default, my elasticsearch service dies after about 17 seconds. Note…

---

## [Unable to retrieve license information from license server](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server/172583)

<div class="topic-metadata">

**Author:** [@drivera](https://discuss.elastic.co/u/drivera)\
**Replies:** 0\
**Last updated:** [March 15, 2019, 5:20pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server/172583 "2019-03-15T17:20:20Z")

</div>

Here is my exact error: \[2019-03-15T10:09:50,524\]\[ERROR\]\[logstash.licensechecker.licensemanager\] Unable to retrieve license information from license server {:message=\>"Elasticsearch Unreachable: \[http://logstash\_system:…

---

## [How add prefix to the fields using kv filter](https://discuss.elastic.co/t/how-add-prefix-to-the-fields-using-kv-filter/238150)

<div class="topic-metadata">

**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 9:00am UTC](https://discuss.elastic.co/t/how-add-prefix-to-the-fields-using-kv-filter/238150 "2021-11-30T09:00:20Z")

</div>

Hi I am adding prefix to the fields using kv filter, It's working to the some of the fields in the json message. Example: Filed name is resource.network.imageid while adding prefix as aws.datasource using kv filter I …

---

## [HTTP Delete request takes forever](https://discuss.elastic.co/t/http-delete-request-takes-forever/186450)

<div class="topic-metadata">

**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\
**Replies:** 7\
**Last updated:** [June 24, 2019, 10:40am UTC](https://discuss.elastic.co/t/http-delete-request-takes-forever/186450 "2019-06-24T10:40:41Z")

</div>

I am currently using the Insomnia REST client. When I make GET requests to my ElasticSearch server, I receive HTTP responses very promptly. However, DELETE requests take forever, and never actually finish: The index…

---

## [\_grokparsefailure on file parsing](https://discuss.elastic.co/t/-grokparsefailure-on-file-parsing/64816)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 7\
**Last updated:** [November 3, 2016, 2:59pm UTC](https://discuss.elastic.co/t/-grokparsefailure-on-file-parsing/64816 "2016-11-03T14:59:14Z")

</div>

Hi, I have a multi line log file structured something like; \<Aug 02, 2016 11:21:05:049 AM\> \<dataa\> \<datab\> \<datac\> \<datad\> \<datae\> \<dataf\> \<datag\> \<datah\> I have set multiline pattern in filebeat like; multiline.…

---

## [Alternative for Delete By Query or Solution for Performance improvement](https://discuss.elastic.co/t/alternative-for-delete-by-query-or-solution-for-performance-improvement/272298)

<div class="topic-metadata">

**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\
**Replies:** 5\
**Last updated:** [May 7, 2021, 7:06am UTC](https://discuss.elastic.co/t/alternative-for-delete-by-query-or-solution-for-performance-improvement/272298 "2021-05-07T07:06:29Z")

</div>

Hi , We have index in ELK ,where we are storing transaction details ,where we want to delete some records after some time. As quantity of requests is so high ,its taking so much time to complete the execution of the De…

---

## [Unable to run ES5.02 on ubuntu 16.04](https://discuss.elastic.co/t/unable-to-run-es5-02-on-ubuntu-16-04/67753)

<div class="topic-metadata">

**Author:** [@Karma](https://discuss.elastic.co/u/Karma)\
**Replies:** 5\
**Last updated:** [December 6, 2016, 8:00am UTC](https://discuss.elastic.co/t/unable-to-run-es5-02-on-ubuntu-16-04/67753 "2016-12-06T08:00:59Z")

</div>

I'm trying ES on Digital Ocean server, but having a problem when starting up ES. Ubuntu 16.04.1 image (4gb) Java openjdk-8-jre-headless ES ver 5.0.2 (tar.gz) Below is error message: ./bin/elasticsearch 2016-12-01 …

---

## [NEST is much slower than Kibana](https://discuss.elastic.co/t/nest-is-much-slower-than-kibana/66081)

<div class="topic-metadata">

**Author:** [@hhkx](https://discuss.elastic.co/u/hhkx)\
**Replies:** 2\
**Last updated:** [November 16, 2016, 5:33am UTC](https://discuss.elastic.co/t/nest-is-much-slower-than-kibana/66081 "2016-11-16T05:33:45Z")

</div>

Hi people, We have been testing Elastic Search for our logging system. There is 300 thousand data on an index in ElasticSearch cluster. I have installed both Kibana and NEST on my PC. The cluster on a local server. …

---

## [Is it possible to save column width in dashboard?](https://discuss.elastic.co/t/is-it-possible-to-save-column-width-in-dashboard/288126)

<div class="topic-metadata">

**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\
**Replies:** 3\
**Last updated:** [November 1, 2021, 1:18pm UTC](https://discuss.elastic.co/t/is-it-possible-to-save-column-width-in-dashboard/288126 "2021-11-01T13:18:45Z")

</div>

Hi, I'm using 7.15, My dashboard appears with few visuals, in the visual the columns are not width enough... So I've can set new width but the save Dashboard button is disabled. Is there a way to save column width in d…

---

## [How to get MonthYear from DateTime using Painless](https://discuss.elastic.co/t/how-to-get-monthyear-from-datetime-using-painless/264106)

<div class="topic-metadata">

**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\
**Replies:** 3\
**Last updated:** [March 2, 2021, 2:23pm UTC](https://discuss.elastic.co/t/how-to-get-monthyear-from-datetime-using-painless/264106 "2021-03-02T14:23:34Z")

</div>

Hello team, I wrote a script to get month (string) = doc\['@timstamp'\].value.getMonth(). Year=doc\['@timstamp'\].value.getYear(). Used concatenation montheYear=doc\['@timstamp'\].value.getMonth()+doc\['@timstamp'\].value.get…

---

## [Date Mapping Parse Failure after upgrade to 7.1.1](https://discuss.elastic.co/t/date-mapping-parse-failure-after-upgrade-to-7-1-1/184704)

<div class="topic-metadata">

**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\
**Replies:** 3\
**Last updated:** [June 9, 2019, 10:05am UTC](https://discuss.elastic.co/t/date-mapping-parse-failure-after-upgrade-to-7-1-1/184704 "2019-06-09T10:05:31Z")

</div>

We have just upgraded to 7.1.1 (from 6.7) on the Elastic Cloud service. Our previously happy logstash is now erroring out with a date related parsing issue when trying to put a date field into ES. The error we get is: …

---

## [Filebeat - Logstash connection reset by peer](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/81829)

<div class="topic-metadata">

**Author:** [@Jiri\_Petak](https://discuss.elastic.co/u/Jiri_Petak)\
**Replies:** 3\
**Last updated:** [April 11, 2017, 12:51pm UTC](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/81829 "2017-04-11T12:51:21Z")

</div>

Hi, i am facing problem with filebeat sending logs to logstash. My architecture: filebeat (versions: 5.3.0 and 5.2.2 - tried both) -\> logstash-broker (versions: 5.2.2 and 5.3.0) -\> redis-cache -\> logstash-indexer -\> elas…

---

## [ES 7.3 - restarting data node doesn't rejoin cluster](https://discuss.elastic.co/t/es-7-3-restarting-data-node-doesnt-rejoin-cluster/256286)

<div class="topic-metadata">

**Author:** [@charlatan](https://discuss.elastic.co/u/charlatan)\
**Replies:** 5\
**Last updated:** [November 23, 2020, 4:42pm UTC](https://discuss.elastic.co/t/es-7-3-restarting-data-node-doesnt-rejoin-cluster/256286 "2020-11-23T16:42:00Z")

</div>

We have the following cluster: 3 x ES 7.3 on CentOS 7.8 VMs, "master eligible" + coordinating nodes 15 x ES 7.3 on CentOS 7.8 physical nodes, data-only 1 x ES 7.3 on CentOS 7.8 VM, running on the Kibana node purely to…

---

## [Unable to stop filebeat](https://discuss.elastic.co/t/unable-to-stop-filebeat/177210)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 5\
**Last updated:** [April 17, 2019, 5:38pm UTC](https://discuss.elastic.co/t/unable-to-stop-filebeat/177210 "2019-04-17T17:38:23Z")

</div>

Hello, I am unable to stop filebeat from sending the logs My filebeat config is filebeat.prospectors: input\_type: log paths: /var/www/html/hfurpublic\_html/urllog/\*\*/\* fields: service\_id: 347rfnkr multiline: pa…

---

## [Given IP is not an ip literal string](https://discuss.elastic.co/t/given-ip-is-not-an-ip-literal-string/80213)

<div class="topic-metadata">

**Author:** [@Dirkadin](https://discuss.elastic.co/u/Dirkadin)\
**Replies:** 2\
**Last updated:** [March 28, 2017, 2:37pm UTC](https://discuss.elastic.co/t/given-ip-is-not-an-ip-literal-string/80213 "2017-03-28T14:37:21Z")

</div>

I'm sending a CSV file through Filebeat and Logstash to Elasticsearch. I'm trying to get ip address put into the ip datatype so I can use the geoip feature and heat map in Kibana (like in the video tutorial). I'm very …

---

## [While migrating form ES2 to ES6 index is taking more space](https://discuss.elastic.co/t/while-migrating-form-es2-to-es6-index-is-taking-more-space/128799)

<div class="topic-metadata">

**Author:** [@manish\_mitra](https://discuss.elastic.co/u/manish_mitra)\
**Replies:** 7\
**Last updated:** [April 23, 2018, 10:57am UTC](https://discuss.elastic.co/t/while-migrating-form-es2-to-es6-index-is-taking-more-space/128799 "2018-04-23T10:57:44Z")

</div>

Hi, We are upgrading Elastic stack from Elastic search 2.3.4 to elastic search 6.2. When we are migrating index from ES2 to ES6, migrated index are taking more space in ES6 , we migrated thinking that ES6 would take le…

---

## [How to in depth visualize data](https://discuss.elastic.co/t/how-to-in-depth-visualize-data/46065)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 3\
**Last updated:** [April 3, 2016, 2:08am UTC](https://discuss.elastic.co/t/how-to-in-depth-visualize-data/46065 "2016-04-03T02:08:34Z")

</div>

Hi, Recently I have set up ELK to gather syslogs and NETFlow from my router and it's all working fine. It's just so basic and when I try to add visualizations and won't find anything. I don't know what I should be look…

---

## [Install Filebeat on the client side](https://discuss.elastic.co/t/install-filebeat-on-the-client-side/109113)

<div class="topic-metadata">

**Author:** [@joaoantoniopereira](https://discuss.elastic.co/u/joaoantoniopereira)\
**Replies:** 6\
**Last updated:** [November 28, 2017, 1:44pm UTC](https://discuss.elastic.co/t/install-filebeat-on-the-client-side/109113 "2017-11-28T13:44:54Z")

</div>

Hi! I am using the Log (server) -\> Filebeat (server) -\> Logstash (client) -\>Elasticsearch (client) pipeline. Is it possible to install Filebeat on the client side to collect logs from the server? If not is there a sim…

---

## [Understanding RestClient.java and its use of DEFAULT\_MAX\_CONN\_TOTAL](https://discuss.elastic.co/t/understanding-restclient-java-and-its-use-of-default-max-conn-total/258583)

<div class="topic-metadata">

**Author:** [@bdbusches](https://discuss.elastic.co/u/bdbusches)\
**Replies:** 4\
**Last updated:** [December 17, 2020, 6:07am UTC](https://discuss.elastic.co/t/understanding-restclient-java-and-its-use-of-default-max-conn-total/258583 "2020-12-17T06:07:13Z")

</div>

We're having difficulty with RestClient against a large 700 node ES cluster. Under a moderate search load (47 concurrent searches) we see extensive use of I/O Dispatchers (based on the default I/O Recator configs in th…

---

## [How to change index.max\_shingle\_diff?](https://discuss.elastic.co/t/how-to-change-index-max-shingle-diff/220421)

<div class="topic-metadata">

**Author:** [@cgsoratto](https://discuss.elastic.co/u/cgsoratto)\
**Replies:** 3\
**Last updated:** [February 24, 2020, 10:53am UTC](https://discuss.elastic.co/t/how-to-change-index-max-shingle-diff/220421 "2020-02-24T10:53:20Z")

</div>

Hi! I installed ES 7.6.0 but I have the error: "In Shingle TokenFilter the difference between max\_shingle\_size and min\_shingle\_size (and +1 if outputting unigrams) must be less than or equal to: \[3\] but was \[9\]. This l…

---

## [Visual Builder Time Series - Filter Ratio group by Terms](https://discuss.elastic.co/t/visual-builder-time-series-filter-ratio-group-by-terms/213081)

<div class="topic-metadata">

**Author:** [@omerdemb](https://discuss.elastic.co/u/omerdemb)\
**Replies:** 3\
**Last updated:** [December 30, 2019, 6:52pm UTC](https://discuss.elastic.co/t/visual-builder-time-series-filter-ratio-group-by-terms/213081 "2019-12-30T18:52:15Z")

</div>

I want to be able to find the ratio of times each value in a certain field existed. currently to achieve this I have to build a separate series with manual filters on each value. what i would assume should be possible …

---

## [Multiple Filebeat Instances on Windows Hosts](https://discuss.elastic.co/t/multiple-filebeat-instances-on-windows-hosts/149390)

<div class="topic-metadata">

**Author:** [@B4S71](https://discuss.elastic.co/u/B4S71)\
**Replies:** 3\
**Last updated:** [September 21, 2018, 9:08am UTC](https://discuss.elastic.co/t/multiple-filebeat-instances-on-windows-hosts/149390 "2018-09-21T09:08:41Z")

</div>

Hi there, We currently run a number of Hosts, Exchange-Servers at that. For Problem identification, we require two kinds of logs: Exchange Servers generate IIS-Logs, which are useful for getting return codes over user &…

---

## [Fuzzy regexp search](https://discuss.elastic.co/t/fuzzy-regexp-search/27912)

<div class="topic-metadata">

**Author:** [@Andarius](https://discuss.elastic.co/u/Andarius)\
**Replies:** 3\
**Last updated:** [August 24, 2015, 3:34pm UTC](https://discuss.elastic.co/t/fuzzy-regexp-search/27912 "2015-08-24T15:34:35Z")

</div>

Hi, I am trying to find matches between words and there reduced form using Elasticsearch. Let say I have the input word shmp (indexed as shampoo in ES), I generate the following regex s.\*?h.\*?m.\*?p.\*? and execute th…

---

## [Nodes master+data share the same volume and path](https://discuss.elastic.co/t/nodes-master-data-share-the-same-volume-and-path/175570)

<div class="topic-metadata">

**Author:** [@AlfonsoRBJ](https://discuss.elastic.co/u/AlfonsoRBJ)\
**Replies:** 7\
**Last updated:** [April 5, 2019, 11:29am UTC](https://discuss.elastic.co/t/nodes-master-data-share-the-same-volume-and-path/175570 "2019-04-05T11:29:19Z")

</div>

Hello everyone, I have deployed in Kubernetes a Statefulset that creates 3 nodes of Elasticsearch of the master+data type, sharing the same volume. Then I saw this warning. Never run different node types (i.e. master, …

---

## [Elasticsearch health turns red frequently](https://discuss.elastic.co/t/elasticsearch-health-turns-red-frequently/55389)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 7\
**Last updated:** [July 19, 2016, 10:50am UTC](https://discuss.elastic.co/t/elasticsearch-health-turns-red-frequently/55389 "2016-07-19T10:50:28Z")

</div>

Hi, For a while now I have been dealing with an issue with Elasticsearch's health becoming red and not processing data. I tried to troubleshoot it myself, but I don't think I've made any huge progress in determining th…

---

## [Configure Kibana on my Windows Server machine](https://discuss.elastic.co/t/configure-kibana-on-my-windows-server-machine/43475)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 7\
**Last updated:** [March 8, 2016, 6:36am UTC](https://discuss.elastic.co/t/configure-kibana-on-my-windows-server-machine/43475 "2016-03-08T06:36:38Z")

</div>

I am new to ELK world. Read a lot of articles, installed ELK, etc. but i am confused now. Hence, want to start it fresh. I have a requirement to setup Kibana on my Windows Server 2012 R2. I have 22 servers and i need t…

---

## [Shield Plugin installation problem in Solaris OS using putty](https://discuss.elastic.co/t/shield-plugin-installation-problem-in-solaris-os-using-putty/29249)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 7\
**Last updated:** [September 16, 2015, 1:13pm UTC](https://discuss.elastic.co/t/shield-plugin-installation-problem-in-solaris-os-using-putty/29249 "2015-09-16T13:13:25Z")

</div>

Hi, I am started using elastic search server for my application when i am trying to install the shield & license plugins in Solaris OS by using putty, Installation command:- 1. bin/plugin -i elasticsearch/license/lat…

---

## [Announcement: ZooKeeper Discovery Plugin for Elasticsearch](https://discuss.elastic.co/t/announcement-zookeeper-discovery-plugin-for-elasticsearch/8381)

<div class="topic-metadata">

**Author:** [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\
**Replies:** 7\
**Last updated:** [November 7, 2012, 5:55pm UTC](https://discuss.elastic.co/t/announcement-zookeeper-discovery-plugin-for-elasticsearch/8381 "2012-11-07T17:55:59Z")

</div>

Sonian, Inc. has released ZooKeeper Discovery Plugin as open source under Apache 2.0 License. The ZooKeeper plugin is a drop-in replacement for Zen Discovery. It uses Apache ZooKeeper for master election, node fault …

---

## [Understand "enable: false" mapping setting](https://discuss.elastic.co/t/understand-enable-false-mapping-setting/270084)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 6\
**Last updated:** [April 14, 2021, 8:34am UTC](https://discuss.elastic.co/t/understand-enable-false-mapping-setting/270084 "2021-04-14T08:34:55Z")

</div>

Hello all ! I'm trying to understand "enable: false" mapping setting I don't want to index a specific field : syslog\_timestamp To achieve this, I mapped this field with "enabled: false" like this (extract of Index man…

---

## [How to handle unmapped fields](https://discuss.elastic.co/t/how-to-handle-unmapped-fields/345991)

<div class="topic-metadata">

**Author:** [@hta](https://discuss.elastic.co/u/hta)\
**Replies:** 4\
**Last updated:** [October 30, 2023, 2:35pm UTC](https://discuss.elastic.co/t/how-to-handle-unmapped-fields/345991 "2023-10-30T14:35:14Z")

</div>

filter { grok { id =\> "name school grok filter" match =\> { 'message' =\> '^.\*name=\\'%{WORD:student.name}\\'.\*school=\\'%{WORD:student.school}\\''} } } For example, with WORD:student.name I would like to create a…

---

## [Possible bug in elastic causes data loss in a rare scenario](https://discuss.elastic.co/t/possible-bug-in-elastic-causes-data-loss-in-a-rare-scenario/25260)

<div class="topic-metadata">

**Author:** [@Roman\_Margolis](https://discuss.elastic.co/u/Roman_Margolis)\
**Replies:** 4\
**Last updated:** [July 10, 2015, 7:51pm UTC](https://discuss.elastic.co/t/possible-bug-in-elastic-causes-data-loss-in-a-rare-scenario/25260 "2015-07-10T19:51:02Z")

</div>

Hello. Recently, I stumbled unto a situation where all my indices were deleted without a warning. I have a 3 node cluster, with elastic 1.5.2, with oracle jdk 8.45, where all nodes are master eligible and data nodes …

---

## [Search Time (Response Time) for matchAll query](https://discuss.elastic.co/t/search-time-response-time-for-matchall-query/13778)

<div class="topic-metadata">

**Author:** [@Phani](https://discuss.elastic.co/u/Phani)\
**Replies:** 4\
**Last updated:** [September 27, 2013, 7:20am UTC](https://discuss.elastic.co/t/search-time-response-time-for-matchall-query/13778 "2013-09-27T07:20:40Z")

</div>

Hi all, I'm experimenting with ES (version 0.90.5) for indexing/search performance. Below is my cluster setup : 1. Master on separate machine (node.master: true, node.data : false) 2. 4 data nodes on s…

---

## [ES Score](https://discuss.elastic.co/t/es-score/4207)

<div class="topic-metadata">

**Author:** [@prasanna](https://discuss.elastic.co/u/prasanna)\
**Replies:** 4\
**Last updated:** [April 10, 2011, 5:58am UTC](https://discuss.elastic.co/t/es-score/4207 "2011-04-10T05:58:13Z")

</div>

Dear all , I am trying to figure out if there will be any range for the elastic search scores that are given out by the system .Will it be possible for me to contain the scores in a range of 0 to1 . I dont see th…

---

## [Rally 0.3.3 released](https://discuss.elastic.co/t/rally-0-3-3-released/59004)

<div class="topic-metadata">

**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\
**Replies:** 0\
**Last updated:** [August 26, 2016, 6:02am UTC](https://discuss.elastic.co/t/rally-0-3-3-released/59004 "2016-08-26T06:02:56Z")

</div>

We've just released Rally 0.3.3. This release includes a couple of bugfixes and usability improvements. How to...? ... upgrade: pip3 install --upgrade esrally ... install: pip3 install esrally Note: Depending on…

---

## [Import CSV file](https://discuss.elastic.co/t/import-csv-file/15728)

<div class="topic-metadata">

**Author:** [@Bert\_Cauwelier](https://discuss.elastic.co/u/Bert_Cauwelier)\
**Replies:** 3\
**Last updated:** [February 11, 2014, 1:11pm UTC](https://discuss.elastic.co/t/import-csv-file/15728 "2014-02-11T13:11:50Z")

</div>

Hello, i am new to elasticsearch and i am trying to import a csv file. can anyoone help? an example csv file : name comment me hello json file { "type" : "csv", "csv\_file" : { …

---

## [Duplicate Entries in Filebeat Registry File For Kubernetes Pod Restart](https://discuss.elastic.co/t/duplicate-entries-in-filebeat-registry-file-for-kubernetes-pod-restart/242564)

<div class="topic-metadata">

**Author:** [@pulkit007](https://discuss.elastic.co/u/pulkit007)\
**Replies:** 5\
**Last updated:** [July 30, 2020, 3:23pm UTC](https://discuss.elastic.co/t/duplicate-entries-in-filebeat-registry-file-for-kubernetes-pod-restart/242564 "2020-07-30T15:23:07Z")

</div>

Hi, I am running filebeat in a Docker Container on Kubernetes Cluster for Processing Logs of our Application and send them to Logstash. Our Log Data is stored in PV, so I ran only one pod of filebeat that takes logs fro…

---

## [Some problems when running esrally](https://discuss.elastic.co/t/some-problems-when-running-esrally/59091)

<div class="topic-metadata">

**Author:** [@abcCl](https://discuss.elastic.co/u/abcCl)\
**Replies:** 5\
**Last updated:** [October 5, 2016, 7:01pm UTC](https://discuss.elastic.co/t/some-problems-when-running-esrally/59091 "2016-10-05T19:01:12Z")

</div>

when i am running esrally , /usr/local/python34/bin/esrally --pipeline=from-distribution --distribution-version=2.3.0 i get some probelems like: ERROR: Cannot race Reason: Could not fetch source tree from 'https:…

---

## [Getting error in JSON advance for groovy dynamic script?](https://discuss.elastic.co/t/getting-error-in-json-advance-for-groovy-dynamic-script/42836)

<div class="topic-metadata">

**Author:** [@chandni007](https://discuss.elastic.co/u/chandni007)\
**Replies:** 5\
**Last updated:** [March 4, 2016, 4:03pm UTC](https://discuss.elastic.co/t/getting-error-in-json-advance-for-groovy-dynamic-script/42836 "2016-03-04T16:03:06Z")

</div>

HI all, I am getting this error while running groovy script in kibana 4 visualization Visualize: failed to run inline script \[doc\['node.ifs.bytes.used'\].value \* 100 / doc\['node.ifs.bytes.total'\].value\] using l…

[Previous page](https://discuss.elastic.co/top.md?page=659&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=661&per_page=50&period=all)
