# Top

**URL:** https://discuss.elastic.co/top.md?page=661&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 662

---

## [Merticbeat Error dialing x509: certificate is valid for 127.0.0.1, not 172.16.0.204](https://discuss.elastic.co/t/merticbeat-error-dialing-x509-certificate-is-valid-for-127-0-0-1-not-172-16-0-204/299323)

<div class="topic-metadata">

**Author:** [@Spyros\_Agriopoulos](https://discuss.elastic.co/u/Spyros_Agriopoulos)\
**Replies:** 2\
**Last updated:** [March 10, 2022, 3:19pm UTC](https://discuss.elastic.co/t/merticbeat-error-dialing-x509-certificate-is-valid-for-127-0-0-1-not-172-16-0-204/299323 "2022-03-10T15:19:18Z")

</div>

Metricbeat has stopped working and is giving me Error dialing x509: certificate is valid for 127.0.0.1, not x.x.x.x after a yum update. Other instances that are using the exact same certificate are working fine. Any i…

---

## [Curl via script: Content-Type header \[application/x-www-form-urlencoded\] is not supported","status":406}curl: (6) Could not resolve host: application](https://discuss.elastic.co/t/curl-via-script-content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406-curl-6-could-not-resolve-host-application/112426)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [December 19, 2017, 1:49pm UTC](https://discuss.elastic.co/t/curl-via-script-content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406-curl-6-could-not-resolve-host-application/112426 "2017-12-19T13:49:17Z")

</div>

Hi there, I upgraded to 6.1.0 - coming from 5.1.2. My script was running fine on 5.1.2 but I have problems with using scripted curl with 6.1.0. Maybe there is sth. wrong on my dev environment. Haven't reverted to 5.1.2…

---

## [Kibana Lens - Drop partial buckets](https://discuss.elastic.co/t/kibana-lens-drop-partial-buckets/277244)

<div class="topic-metadata">

**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\
**Replies:** 7\
**Last updated:** [June 28, 2021, 9:29pm UTC](https://discuss.elastic.co/t/kibana-lens-drop-partial-buckets/277244 "2021-06-28T21:29:37Z")

</div>

Is there planned work to include the option to drop partial buckets in Kibana Lens visualizations? We are currently trying to display data aggregations grouped by year, but when we select a specific year, the data from …

---

## [Kibana Visualization Field Formatting and Ordering](https://discuss.elastic.co/t/kibana-visualization-field-formatting-and-ordering/91783)

<div class="topic-metadata">

**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\
**Replies:** 4\
**Last updated:** [July 4, 2017, 3:43pm UTC](https://discuss.elastic.co/t/kibana-visualization-field-formatting-and-ordering/91783 "2017-07-04T15:43:50Z")

</div>

So i have 2 Requirements:- There is a date histogram with monthly interval and on X-Axis, i am getting intervals like :- 2017-02-01, 2017-03-01 but i want them to be February 2017, March 2017. Any idea? If i am to dev…

---

## [Elasticsearch Can't load filebeat.template.json!](https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198)

<div class="topic-metadata">

**Author:** [@shaonbean](https://discuss.elastic.co/u/shaonbean)\
**Replies:** 4\
**Last updated:** [May 9, 2017, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198 "2017-05-09T11:48:36Z")

</div>

Elasticsearch Can't load filebeat.template.json! I follow this guide:https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html use the command load filebeat.template.json: curl -XPUT -u elastic:chan…

---

## [Filebeat in windows 2008 r2 - not sending data to logstash](https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878)

<div class="topic-metadata">

**Author:** [@vishnu.music](https://discuss.elastic.co/u/vishnu.music)\
**Replies:** 4\
**Last updated:** [January 25, 2016, 6:31pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878 "2016-01-25T18:31:02Z")

</div>

Hello, I installed filebeat 1.0.1 in my windows 2008 r2 server. I have configured the below path and logstash server output paths: - C:\\Documentum\\dba\\\*.log logstash: # The Logstash hosts hosts: \["10…

---

## [\[Heartbeat\] Checking multiple http response codes](https://discuss.elastic.co/t/heartbeat-checking-multiple-http-response-codes/214959)

<div class="topic-metadata">

**Author:** [@seblg](https://discuss.elastic.co/u/seblg)\
**Replies:** 5\
**Last updated:** [January 30, 2020, 6:20pm UTC](https://discuss.elastic.co/t/heartbeat-checking-multiple-http-response-codes/214959 "2020-01-30T18:20:13Z")

</div>

Hi, We've started using heartbeat agents (6.8.2) and uptime monitoring for monitoring api endpoints. We'd like to attribute all http reponse codes which are not 500 or 503 as being "up", going through documentation thi…

---

## [How to run rspec tests in Logstash 5.0.0](https://discuss.elastic.co/t/how-to-run-rspec-tests-in-logstash-5-0-0/64895)

<div class="topic-metadata">

**Author:** [@rcanzanese](https://discuss.elastic.co/u/rcanzanese)\
**Replies:** 2\
**Last updated:** [June 23, 2017, 2:29pm UTC](https://discuss.elastic.co/t/how-to-run-rspec-tests-in-logstash-5-0-0/64895 "2017-06-23T14:29:44Z")

</div>

In Logstash 2.4.0, I had ran rpspec tests by installing the development plugins: ./bin/logstash-plugin install --development And then running rspec: ./bin/rspec In Logstash 5.0.0 installing the development plugins …

---

## [Confused about ignore\_above and how to update](https://discuss.elastic.co/t/confused-about-ignore-above-and-how-to-update/245962)

<div class="topic-metadata">

**Author:** [@gswartz](https://discuss.elastic.co/u/gswartz)\
**Replies:** 2\
**Last updated:** [August 24, 2020, 2:12pm UTC](https://discuss.elastic.co/t/confused-about-ignore-above-and-how-to-update/245962 "2020-08-24T14:12:30Z")

</div>

I have an index that I created simply by importing a bunch of docs, so elasticsearch created all the mappings by default. One of the fields is a potentially large text field that we need the whole thing to be keyword se…

---

## [Ruby exception occurred: undefined method \`unpack1' for nil:NilClass](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-unpack1-for-nil-nilclass/191134)

<div class="topic-metadata">

**Author:** [@Nagesh\_Kumar](https://discuss.elastic.co/u/Nagesh_Kumar)\
**Replies:** 2\
**Last updated:** [July 18, 2019, 1:24pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-unpack1-for-nil-nilclass/191134 "2019-07-18T13:24:54Z")

</div>

Hi, I am trying with below logstash (7.0 version) conf file to decode base64 logs to send elasticsearch but its throwing below error - \[2019-07-17T19:01:36,791\]\[ERROR\]\[logstash.filters.ruby \] Ruby exception occurred: …

---

## [Don't binding name index on Elasticsearch when using RabbitMQ](https://discuss.elastic.co/t/dont-binding-name-index-on-elasticsearch-when-using-rabbitmq/37971)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 5\
**Last updated:** [December 28, 2015, 8:28am UTC](https://discuss.elastic.co/t/dont-binding-name-index-on-elasticsearch-when-using-rabbitmq/37971 "2015-12-28T08:28:54Z")

</div>

Hi, I using Message queue RabbitMQ : Client (Using Beat) -\>Logstash (forwarder) -\> RabbitMQ -\> Logstash (Indexer) -\> ES I got errror when i config on Logstash Indexer, Out is ES. But when i see all my indices, new name…

---

## [Problem when creating an index not analyzed, to perform term searches in texts](https://discuss.elastic.co/t/problem-when-creating-an-index-not-analyzed-to-perform-term-searches-in-texts/173056)

<div class="topic-metadata">

**Author:** [@Elvis\_Goncalves](https://discuss.elastic.co/u/Elvis_Goncalves)\
**Replies:** 1\
**Last updated:** [March 19, 2019, 9:14pm UTC](https://discuss.elastic.co/t/problem-when-creating-an-index-not-analyzed-to-perform-term-searches-in-texts/173056 "2019-03-19T21:14:45Z")

</div>

Try to create an index with a field that is not analyzed in order to perform a string search. But when I try to create the index it generates errors. In this way I create the index: PUT / contents { "mappings": { "c…

---

## [Object mapping \[event\_tags\] can't be changed from nested to non-nested](https://discuss.elastic.co/t/object-mapping-event-tags-cant-be-changed-from-nested-to-non-nested/71906)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 1\
**Last updated:** [January 18, 2017, 7:32am UTC](https://discuss.elastic.co/t/object-mapping-event-tags-cant-be-changed-from-nested-to-non-nested/71906 "2017-01-18T07:32:58Z")

</div>

Hi, I have events indexed with logstash I have a template defined in elasticsearch Indexing only works sometimes after a new installation of my ELK. Most of the times ES complains that mapping can't change from nested …

---

## [Why is search\_after preferred over Scroll API?](https://discuss.elastic.co/t/why-is-search-after-preferred-over-scroll-api/292989)

<div class="topic-metadata">

**Author:** [@dandago](https://discuss.elastic.co/u/dandago)\
**Replies:** 1\
**Last updated:** [December 28, 2021, 11:13am UTC](https://discuss.elastic.co/t/why-is-search-after-preferred-over-scroll-api/292989 "2021-12-28T11:13:26Z")

</div>

I've read that "We no longer recommend using the scroll API for deep pagination. If you need to preserve the index state while paging through more than 10,000 hits, use the search\_after parameter with a point in time (…

---

## [Elasticsearch stop indexing with custom timestamp](https://discuss.elastic.co/t/elasticsearch-stop-indexing-with-custom-timestamp/56710)

<div class="topic-metadata">

**Author:** [@fantaghost](https://discuss.elastic.co/u/fantaghost)\
**Replies:** 8\
**Last updated:** [August 5, 2016, 10:26am UTC](https://discuss.elastic.co/t/elasticsearch-stop-indexing-with-custom-timestamp/56710 "2016-08-05T10:26:18Z")

</div>

Hi All, I'm processing two different log type using elasticsearch (each log type is stored in different index). I have a problem processing the timestamp field only with one log type. I would like to create @timestamp st…

---

## [On watcher installation, watcher\_state status is stopped](https://discuss.elastic.co/t/on-watcher-installation-watcher-state-status-is-stopped/25419)

<div class="topic-metadata">

**Author:** [@Shubham\_Bhartiya](https://discuss.elastic.co/u/Shubham_Bhartiya)\
**Replies:** 7\
**Last updated:** [July 13, 2015, 3:42pm UTC](https://discuss.elastic.co/t/on-watcher-installation-watcher-state-status-is-stopped/25419 "2015-07-13T15:42:37Z")

</div>

I have a two node cluster having ElasticSearch version 1.5.2 on which I have installed watcher plugin. After installation, there is nothing mentioned in the logs but still the cluster health appeared red. Also, if I use…

---

## [Running logstash in docker, not outputting to file or console :](https://discuss.elastic.co/t/running-logstash-in-docker-not-outputting-to-file-or-console/50400)

<div class="topic-metadata">

**Author:** [@Sergey\_Manukyan](https://discuss.elastic.co/u/Sergey_Manukyan)\
**Replies:** 4\
**Last updated:** [May 24, 2016, 6:05am UTC](https://discuss.elastic.co/t/running-logstash-in-docker-not-outputting-to-file-or-console/50400 "2016-05-24T06:05:35Z")

</div>

Running logstash 2.3 with the following conf file : input { file { path =\> "/var/log/logstash/access\_nginx.log" codec =\> "line" sincedb\_path =\> "null" start\_position =\> "beginning" …

---

## [Do we have two phase commit in Elastic Search](https://discuss.elastic.co/t/do-we-have-two-phase-commit-in-elastic-search/27385)

<div class="topic-metadata">

**Author:** [@nitin1](https://discuss.elastic.co/u/nitin1)\
**Replies:** 3\
**Last updated:** [August 24, 2015, 7:35am UTC](https://discuss.elastic.co/t/do-we-have-two-phase-commit-in-elastic-search/27385 "2015-08-24T07:35:23Z")

</div>

Our application was earlier using lucene which provides APIs for two phase commit (i.e prepareCommit() and commit()). Recently, we have started using ES instead of Lucene. Do we have APIs for two phase commit in ES. If…

---

## [Mirror index of one server to another server](https://discuss.elastic.co/t/mirror-index-of-one-server-to-another-server/90431)

<div class="topic-metadata">

**Author:** [@Sunil\_M](https://discuss.elastic.co/u/Sunil_M)\
**Replies:** 2\
**Last updated:** [June 23, 2017, 6:24am UTC](https://discuss.elastic.co/t/mirror-index-of-one-server-to-another-server/90431 "2017-06-23T06:24:57Z")

</div>

Hi, I have 2 servers. Server1 the index is updated every second. So data is increasing tremendously. Now i need to backup this index to another server that is server2. Can i sync all the data(mirror) from server…

---

## [Understanding the role of fields.yml](https://discuss.elastic.co/t/understanding-the-role-of-fields-yml/157854)

<div class="topic-metadata">

**Author:** [@Martin\_H\_Andersen](https://discuss.elastic.co/u/Martin_H_Andersen)\
**Replies:** 1\
**Last updated:** [November 22, 2018, 1:30pm UTC](https://discuss.elastic.co/t/understanding-the-role-of-fields-yml/157854 "2018-11-22T13:30:24Z")

</div>

My setup is this: filebeat -\> logstash -\> elasticsearch I don't understand why filebeat is responsible for defining the fields mapping in elasticsearch. Fields can be altered in logstash? Giving new names. We have a v…

---

## [Unable to set defaultIndex in Kibana](https://discuss.elastic.co/t/unable-to-set-defaultindex-in-kibana/137679)

<div class="topic-metadata">

**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\
**Replies:** 6\
**Last updated:** [July 2, 2018, 3:29pm UTC](https://discuss.elastic.co/t/unable-to-set-defaultindex-in-kibana/137679 "2018-07-02T15:29:33Z")

</div>

I installed ELK 6.3 today. One of my servers was sending metricbeat data to Elasticsearch under the index metricbeat-{date}. When i login Kibana, it displayed a warning to set defaultIndex. When i created metricbeat-\* a…

---

## [Parsing repeated patterns](https://discuss.elastic.co/t/parsing-repeated-patterns/29287)

<div class="topic-metadata">

**Author:** [@mparthas](https://discuss.elastic.co/u/mparthas)\
**Replies:** 6\
**Last updated:** [September 18, 2016, 7:07pm UTC](https://discuss.elastic.co/t/parsing-repeated-patterns/29287 "2016-09-18T19:07:31Z")

</div>

Hi, I have a log line that has patterns repeating multiple times and the number of times could be varying from line to line. Is there a recipe for this ? For example, abc.com 300 IN CNAME xyz.com xyz.com 300 IN CNA…

---

## [Top Hits Aggregation support in Jest SearchResult](https://discuss.elastic.co/t/top-hits-aggregation-support-in-jest-searchresult/78979)

<div class="topic-metadata">

**Author:** [@prashant.bajpai](https://discuss.elastic.co/u/prashant.bajpai)\
**Replies:** 0\
**Last updated:** [March 17, 2017, 8:01am UTC](https://discuss.elastic.co/t/top-hits-aggregation-support-in-jest-searchresult/78979 "2017-03-17T08:01:48Z")

</div>

I am using below function to make aggregation query: private TermsBuilder getAggregations(String\[\] outputFields) { TermsBuilder topLevelAggr = AggregationBuilders.terms("level1").field("field1").size(0); …

---

## [Command line to generate URL to embed kibana's dashboard](https://discuss.elastic.co/t/command-line-to-generate-url-to-embed-kibanas-dashboard/44070)

<div class="topic-metadata">

**Author:** [@rheng](https://discuss.elastic.co/u/rheng)\
**Replies:** 3\
**Last updated:** [March 18, 2016, 12:48am UTC](https://discuss.elastic.co/t/command-line-to-generate-url-to-embed-kibanas-dashboard/44070 "2016-03-18T00:48:51Z")

</div>

Is there a way to generate the URL to embed the dashboard to a website without having to go to Kibana's UI and clicking on the "generate short URL" button?

---

## [Install elasticsearch-mapper-attachments plugin failed](https://discuss.elastic.co/t/install-elasticsearch-mapper-attachments-plugin-failed/42511)

<div class="topic-metadata">

**Author:** [@carlosq](https://discuss.elastic.co/u/carlosq)\
**Replies:** 7\
**Last updated:** [December 12, 2016, 2:15am UTC](https://discuss.elastic.co/t/install-elasticsearch-mapper-attachments-plugin-failed/42511 "2016-12-12T02:15:48Z")

</div>

when I try to install elasticsearch/elasticsearch-mapper-attachments/3.1.2 for elasticsearch version 2.2.0, I got following error: ERROR: Plugin \[mapper-attachments\] is incompatible with Elasticsearch \[2.2.0\]. Was design…

---

## [Determine when Logstash is done parsing](https://discuss.elastic.co/t/determine-when-logstash-is-done-parsing/92305)

<div class="topic-metadata">

**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\
**Replies:** 5\
**Last updated:** [July 12, 2017, 12:33pm UTC](https://discuss.elastic.co/t/determine-when-logstash-is-done-parsing/92305 "2017-07-12T12:33:27Z")

</div>

I want to know when Logstash is done parsing. I know that information can be found in this link: But am unsure of where I put the code in the logstash.conf file? Also, in the comment states this: Unfortunately when …

---

## [Available data in Groovy script\_score/script\_fields?](https://discuss.elastic.co/t/available-data-in-groovy-script-score-script-fields/25483)

<div class="topic-metadata">

**Author:** [@David\_Thompson](https://discuss.elastic.co/u/David_Thompson)\
**Replies:** 3\
**Last updated:** [August 5, 2015, 3:07pm UTC](https://discuss.elastic.co/t/available-data-in-groovy-script-score-script-fields/25483 "2015-08-05T15:07:00Z")

</div>

Hi all, I'm trying to get started in using Groovy scripts, and I'm having some trouble understanding scope/limitations of the Groovy "API." At a high level, I'm trying to build queries that return what could be called…

---

## [java.lang.NullPointerException: Cannot invoke "java.util.List.stream()"](https://discuss.elastic.co/t/java-lang-nullpointerexception-cannot-invoke-java-util-list-stream/274937)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 3\
**Last updated:** [June 5, 2021, 4:08pm UTC](https://discuss.elastic.co/t/java-lang-nullpointerexception-cannot-invoke-java-util-list-stream/274937 "2021-06-05T16:08:39Z")

</div>

I don't know what's going on. Can the elastic team explain this error report? \[2021-06-04T09:00:01,713\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[es-node01\] collector \[cluster\_stats\] failed to collect data java.lang.N…

---

## [How to allow bulk create only (disallow index, delete and update)](https://discuss.elastic.co/t/how-to-allow-bulk-create-only-disallow-index-delete-and-update/74912)

<div class="topic-metadata">

**Author:** [@amano](https://discuss.elastic.co/u/amano)\
**Replies:** 3\
**Last updated:** [March 29, 2017, 1:14am UTC](https://discuss.elastic.co/t/how-to-allow-bulk-create-only-disallow-index-delete-and-update/74912 "2017-03-29T01:14:16Z")

</div>

Hello, I'm currently evaluating X-Pack for my company and as a requirement we need: \* any user can write data to elasticsearch using bulk API; \* disallow any other bulk operation (index, delete and update); Looking a…

---

## [Send Tomcat8 (catalina.out) log to show in kibana](https://discuss.elastic.co/t/send-tomcat8-catalina-out-log-to-show-in-kibana/154239)

<div class="topic-metadata">

**Author:** [@debsdaniel](https://discuss.elastic.co/u/debsdaniel)\
**Replies:** 2\
**Last updated:** [October 29, 2018, 7:35pm UTC](https://discuss.elastic.co/t/send-tomcat8-catalina-out-log-to-show-in-kibana/154239 "2018-10-29T19:35:47Z")

</div>

Hi. This is my first post here. I hope be in the right way. I have installed Full Stack Elastic (Elasticsearch, Kibana, Logstash) in a ubuntu 18.04 server, all is ok. Then I have installed filebeat 6.4.2 in each serv…

---

## ["Restored connection to ES Instance" warning at startup](https://discuss.elastic.co/t/restored-connection-to-es-instance-warning-at-startup/281752)

<div class="topic-metadata">

**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\
**Replies:** 4\
**Last updated:** [August 18, 2021, 9:11pm UTC](https://discuss.elastic.co/t/restored-connection-to-es-instance-warning-at-startup/281752 "2021-08-18T21:11:29Z")

</div>

At logstash startup i get these weird warnings. Here are the warning: \[2021-08-17T21:33:03,732\]\[WARN \]\[logstash.outputs.elasticsearch\]\[straight-es\] Restored connection to ES instance {:url=\>"https://logstash\_internal:x…

---

## [Error when multiple calls to writeToES](https://discuss.elastic.co/t/error-when-multiple-calls-to-writetoes/87737)

<div class="topic-metadata">

**Author:** [@pchanas](https://discuss.elastic.co/u/pchanas)\
**Replies:** 4\
**Last updated:** [June 2, 2017, 6:26am UTC](https://discuss.elastic.co/t/error-when-multiple-calls-to-writetoes/87737 "2017-06-02T06:26:04Z")

</div>

Hi Using : elastic 5.4.0, spark-2.1.1-bin-hadoop2.7 and elasticsearch-hadoop-5.4.0 on MacOS, I need to write 3 Dataset in my ES. I use the writeToES method, 3 times... If I write only 1 of the 3 Datasets, everything if f…

---

## [Is it possible for something like a stored procedure in Elasticsearch?](https://discuss.elastic.co/t/is-it-possible-for-something-like-a-stored-procedure-in-elasticsearch/83561)

<div class="topic-metadata">

**Author:** [@Origin\_Jing](https://discuss.elastic.co/u/Origin_Jing)\
**Replies:** 4\
**Last updated:** [April 26, 2017, 4:24am UTC](https://discuss.elastic.co/t/is-it-possible-for-something-like-a-stored-procedure-in-elasticsearch/83561 "2017-04-26T04:24:34Z")

</div>

Say if I have stories and articles obout stars in the sky, and I also have the position of the stars. If I want to get the stories of stars in one area of the sky, one approach would be using geo query to find starts in …

---

## [Parsing Text file with Pipe(|) separated fields](https://discuss.elastic.co/t/parsing-text-file-with-pipe-separated-fields/171024)

<div class="topic-metadata">

**Author:** [@RaTheDev](https://discuss.elastic.co/u/RaTheDev)\
**Replies:** 2\
**Last updated:** [March 6, 2019, 10:55pm UTC](https://discuss.elastic.co/t/parsing-text-file-with-pipe-separated-fields/171024 "2019-03-06T22:55:30Z")

</div>

I am a newbie and started with Logstash I have raw text file with data in the below format, with first row as Column headers and following with data separated with Pipe as delimiter. I was trying to read the data and f…

---

## [Elasticsearch 8.7, "master\_not\_discovered\_exception" error](https://discuss.elastic.co/t/elasticsearch-8-7-master-not-discovered-exception-error/329495)

<div class="topic-metadata">

**Author:** [@Jyotsna\_Bhati](https://discuss.elastic.co/u/Jyotsna_Bhati)\
**Replies:** 6\
**Last updated:** [April 12, 2023, 6:32am UTC](https://discuss.elastic.co/t/elasticsearch-8-7-master-not-discovered-exception-error/329495 "2023-04-12T06:32:54Z")

</div>

Upgraded elasticsearch from 7.17 to 8.7. Elasticsearch service is running but not able to discover other nodes. Ran: curl -XGET "localhost:9200/\_cluster/state?filter\_path=version,nodes,metadata.cluster\_coordination&p…

---

## [How to replace string without regexp inside Painless inline script for AWS ElasticSearch?](https://discuss.elastic.co/t/how-to-replace-string-without-regexp-inside-painless-inline-script-for-aws-elasticsearch/110707)

<div class="topic-metadata">

**Author:** [@KIVagant](https://discuss.elastic.co/u/KIVagant)\
**Replies:** 0\
**Last updated:** [December 7, 2017, 3:37pm UTC](https://discuss.elastic.co/t/how-to-replace-string-without-regexp-inside-painless-inline-script-for-aws-elasticsearch/110707 "2017-12-07T15:37:34Z")

</div>

This is a copy from the StackOverflow question: The type of the "level" field in the document was changed from "keyword" to "short" and I'm trying to reindex exist data to be able to use it in Kibana charts. Old data c…

---

## [Elasticsearch 5 official release date](https://discuss.elastic.co/t/elasticsearch-5-official-release-date/47259)

<div class="topic-metadata">

**Author:** [@farnoodma](https://discuss.elastic.co/u/farnoodma)\
**Replies:** 3\
**Last updated:** [September 29, 2016, 12:16am UTC](https://discuss.elastic.co/t/elasticsearch-5-official-release-date/47259 "2016-09-29T00:16:22Z")

</div>

Hi, We have just released our first version of product. The official version will be released in June, until then we want to improve our search mechanism and for this purpose we would like to use Elasticsearch. I read th…

---

## [Configuring XML into ElasticSearch Using Filebeat](https://discuss.elastic.co/t/configuring-xml-into-elasticsearch-using-filebeat/95156)

<div class="topic-metadata">

**Author:** [@adikadashrieq](https://discuss.elastic.co/u/adikadashrieq)\
**Replies:** 4\
**Last updated:** [July 31, 2017, 9:49am UTC](https://discuss.elastic.co/t/configuring-xml-into-elasticsearch-using-filebeat/95156 "2017-07-31T09:49:40Z")

</div>

Hai Everyone, i want to transfer the list of file from xml into elasticsearch using Filebeat. I don’t know where to start its is because when i read the documentation be default filebeat load recommended files which in j…

---

## [ElasticSearch synonym and word delimiter analyzer are not compatible](https://discuss.elastic.co/t/elasticsearch-synonym-and-word-delimiter-analyzer-are-not-compatible/2387)

<div class="topic-metadata">

**Author:** [@sivamurugan](https://discuss.elastic.co/u/sivamurugan)\
**Replies:** 4\
**Last updated:** [June 15, 2015, 6:14pm UTC](https://discuss.elastic.co/t/elasticsearch-synonym-and-word-delimiter-analyzer-are-not-compatible/2387 "2015-06-15T18:14:45Z")

</div>

I have a below mapping document, which to be precise does apply word delimiter analyzer at index and search time specifically only to model field and synonym analyzer which does a search time analysis on search string. …

---

## [Elasticsearch&Logstash Log4j Vulnerabilities](https://discuss.elastic.co/t/elasticsearch-logstash-log4j-vulnerabilities/304640)

<div class="topic-metadata">

**Author:** [@kyarali](https://discuss.elastic.co/u/kyarali)\
**Replies:** 5\
**Last updated:** [May 16, 2022, 5:08am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-log4j-vulnerabilities/304640 "2022-05-16T05:08:26Z")

</div>

Hello, We have log4j vulnerabilities for Elasticsearch and Logstash in the following paths: Path : /usr/share/Elasticsearch/lib/log4j-core-2.11.1.jar Path : /usr/share/logstash/logstash-core/lib/jars/log4j-core-2.14.0…

---

## [Elasticsearch 8.9.1 - How to extract the self-signed CA and server cert](https://discuss.elastic.co/t/elasticsearch-8-9-1-how-to-extract-the-self-signed-ca-and-server-cert/341304)

<div class="topic-metadata">

**Author:** [@saltspreader](https://discuss.elastic.co/u/saltspreader)\
**Replies:** 2\
**Last updated:** [August 22, 2023, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-8-9-1-how-to-extract-the-self-signed-ca-and-server-cert/341304 "2023-08-22T15:06:46Z")

</div>

Hi there, Elasticsearch v 8.9.1 installed via ES apt repo on ubuntu 22.04. I need to extract the self-signed CA and https cert from my elasticsearch 8.9.1 setup to copy to a gitlab instance for https connections. I've …

---

## [Authorization exception when trying to import model to Elasticsearch cluster](https://discuss.elastic.co/t/authorization-exception-when-trying-to-import-model-to-elasticsearch-cluster/309840)

<div class="topic-metadata">

**Author:** [@green12](https://discuss.elastic.co/u/green12)\
**Replies:** 2\
**Last updated:** [July 21, 2022, 2:04am UTC](https://discuss.elastic.co/t/authorization-exception-when-trying-to-import-model-to-elasticsearch-cluster/309840 "2022-07-21T02:04:51Z")

</div>

Hi all. This is my first time using Elasticsearch. Currently I've just deployed a cluster consisted of 3 nodes in my localhost. I'm trying to import a NER NLP model using eland based on https://www.elastic.co/guide/en/e…

---

## [Logical expression in pipeline](https://discuss.elastic.co/t/logical-expression-in-pipeline/112621)

<div class="topic-metadata">

**Author:** [@bodi4](https://discuss.elastic.co/u/bodi4)\
**Replies:** 2\
**Last updated:** [December 20, 2017, 11:38am UTC](https://discuss.elastic.co/t/logical-expression-in-pipeline/112621 "2017-12-20T11:38:07Z")

</div>

Hi could someone explain logical expression in pipeline? The case is, for example Output section: output { if "C" in \[tags\] and \[filed\_A\] = A or "C" in \[tags\] and \[filed\_B\] = B elasticsearch {} } Second match grou…

---

## [What is the difference between Snowball & Stemming?](https://discuss.elastic.co/t/what-is-the-difference-between-snowball-stemming/9481)

<div class="topic-metadata">

**Author:** [@Eric\_GeLo](https://discuss.elastic.co/u/Eric_GeLo)\
**Replies:** 1\
**Last updated:** [October 26, 2012, 11:53pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-snowball-stemming/9481 "2012-10-26T23:53:11Z")

</div>

Hey! I'm implementing a search process using ElasticSearch which currently use the snowball token filter (French). I have take a look to the Stemmer token filter which seems to do the same. Someone can explain wha…

---

## [Object mapping cant be changed from nested to Non nested](https://discuss.elastic.co/t/object-mapping-cant-be-changed-from-nested-to-non-nested/61558)

<div class="topic-metadata">

**Author:** [@SindhujaM](https://discuss.elastic.co/u/SindhujaM)\
**Replies:** 3\
**Last updated:** [September 28, 2016, 3:23pm UTC](https://discuss.elastic.co/t/object-mapping-cant-be-changed-from-nested-to-non-nested/61558 "2016-09-28T15:23:30Z")

</div>

Hi my sample file { "@graph" : \[ { "@id" : "http://www.abc.com/1234567890", "PageId" : "1234567890", "PostDetails" : "http://www.abc.com/1234567890\_542839079235084", "PostId" : "http://www.abc.com/…

---

## [Parsing Console Logs](https://discuss.elastic.co/t/parsing-console-logs/48380)

<div class="topic-metadata">

**Author:** [@maher](https://discuss.elastic.co/u/maher)\
**Replies:** 1\
**Last updated:** [April 26, 2016, 5:34am UTC](https://discuss.elastic.co/t/parsing-console-logs/48380 "2016-04-26T05:34:02Z")

</div>

Hi, i need to parse some logs from a console. and as it is shown next the log message is not uniforme. and what i need to grok is the last message for example: " --\> Wrapper Started as Console". STATUS | wrapper |…

---

## [Filebeat has to be restarted to send logs to elasticsearch](https://discuss.elastic.co/t/filebeat-has-to-be-restarted-to-send-logs-to-elasticsearch/87330)

<div class="topic-metadata">

**Author:** [@sasanka\_mourya](https://discuss.elastic.co/u/sasanka_mourya)\
**Replies:** 7\
**Last updated:** [May 27, 2017, 7:10pm UTC](https://discuss.elastic.co/t/filebeat-has-to-be-restarted-to-send-logs-to-elasticsearch/87330 "2017-05-27T19:10:21Z")

</div>

I can see that logs are added only after i restart filebeat in client machine. Everytime I have to restart to get the logs updated. Need help in figuring out where the fault is. Thanks in advance.

---

## [Extreme memory pressure](https://discuss.elastic.co/t/extreme-memory-pressure/51073)

<div class="topic-metadata">

**Author:** [@slackday](https://discuss.elastic.co/u/slackday)\
**Replies:** 7\
**Last updated:** [May 31, 2016, 11:52am UTC](https://discuss.elastic.co/t/extreme-memory-pressure/51073 "2016-05-31T11:52:52Z")

</div>

Hello I've started importing documents to my server. I will be close to 400.000 when finished. While importing using the Bulk-api (batches of 10000). Memory goes up to 99%. I manage to do a few of these bulk imports a…

---

## [You should be able to use the saved searches in .kibana to do direct queries to ES](https://discuss.elastic.co/t/you-should-be-able-to-use-the-saved-searches-in-kibana-to-do-direct-queries-to-es/138803)

<div class="topic-metadata">

**Author:** [@ThickFreeze](https://discuss.elastic.co/u/ThickFreeze)\
**Replies:** 4\
**Last updated:** [July 6, 2018, 2:10pm UTC](https://discuss.elastic.co/t/you-should-be-able-to-use-the-saved-searches-in-kibana-to-do-direct-queries-to-es/138803 "2018-07-06T14:10:12Z")

</div>

I'm referencing this closed topic by @eebee and @tsullivan here regarding using the data in the .kibana saved searches to query elasticsearch directly. Get data from saved objects through REST I honestly think the give…

---

## [\[Feature Request\] Add link on row table to external application #363](https://discuss.elastic.co/t/feature-request-add-link-on-row-table-to-external-application-363/38490)

<div class="topic-metadata">

**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\
**Replies:** 4\
**Last updated:** [January 8, 2016, 4:40am UTC](https://discuss.elastic.co/t/feature-request-add-link-on-row-table-to-external-application-363/38490 "2016-01-08T04:40:57Z")

</div>

Hi All, \[Feature Request\] Add link on row table to external application #363. I would like to use this feature in kibana. But this ticket closed by giving this solution i am not able to find this folders and f…

[Previous page](https://discuss.elastic.co/top.md?page=660&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=662&per_page=50&period=all)
