# Top **URL:** https://discuss.elastic.co/top.md?page=671&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 672 --- ## [Runtime Fields](https://discuss.elastic.co/t/runtime-fields/285142)
**Author:** [@Swapnadeep\_Mondal](https://discuss.elastic.co/u/Swapnadeep_Mondal)\ **Replies:** 4\ **Last updated:** [September 26, 2021, 4:27pm UTC](https://discuss.elastic.co/t/runtime-fields/285142 "2021-09-26T16:27:01Z")
According to documentation runtime fields are not indexed. Now if one field is not indexed then it will not searchable or queryable. but then I query on a runtime field it returned me results instead showing "Cannot sear… --- ## [Limit for shard size?](https://discuss.elastic.co/t/limit-for-shard-size/40032)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 1\ **Last updated:** [January 26, 2016, 1:52am UTC](https://discuss.elastic.co/t/limit-for-shard-size/40032 "2016-01-26T01:52:19Z")
My ES cluster has grown over the past few months. My drives are now 90% full, so I am adding more, while I am on the topic of managing-my-es-cluster I was wondering about maximum shard sizes. The biggest index is repor… --- ## [Importing MySQL column into Elasticsearch as nested field with jdbc plugin](https://discuss.elastic.co/t/importing-mysql-column-into-elasticsearch-as-nested-field-with-jdbc-plugin/96162)
**Author:** [@Ricky\_Jenkins](https://discuss.elastic.co/u/Ricky_Jenkins)\ **Replies:** 5\ **Last updated:** [August 9, 2017, 5:34am UTC](https://discuss.elastic.co/t/importing-mysql-column-into-elasticsearch-as-nested-field-with-jdbc-plugin/96162 "2017-08-09T05:34:18Z")
Hi, I am new to elasticsearch and have spent the last two weeks trying to learn everything i can to the best of my ability but as one can imagine it is somewhat overwhelming from a new-coming standpoint. I am trying to … --- ## [NoNodeAvailableException problem](https://discuss.elastic.co/t/nonodeavailableexception-problem/91382)
**Author:** [@torj](https://discuss.elastic.co/u/torj)\ **Replies:** 5\ **Last updated:** [June 30, 2017, 11:48am UTC](https://discuss.elastic.co/t/nonodeavailableexception-problem/91382 "2017-06-30T11:48:59Z")
Hi, I'm having trouble getting the Java TransportClient to connect to any nodes. I have gone through numerous other topics for similar issues in this forum and on stackoverflow but have so far not been able to figure o… --- ## [Dec 14th, 2024: \[EN\] Top 5 Prompts to Maximize Your Observability AI Assistant Experience](https://discuss.elastic.co/t/dec-14th-2024-en-top-5-prompts-to-maximize-your-observability-ai-assistant-experience/370215)
**Author:** [@Zoia\_AUBRY](https://discuss.elastic.co/u/Zoia_AUBRY)\ **Replies:** 0\ **Last updated:** [December 14, 2024, 8:00am UTC](https://discuss.elastic.co/t/dec-14th-2024-en-top-5-prompts-to-maximize-your-observability-ai-assistant-experience/370215 "2024-12-14T08:00:06Z")
Top 5 Prompts to Maximize Your Observability AI Assistant Experience Over the past three years as a Customer Engineer, I’ve met hundreds of customers, and one of the most frequently asked questions has been: "I have my … --- ## [Index Sorting and terminate\_after combination](https://discuss.elastic.co/t/index-sorting-and-terminate-after-combination/198233)
**Author:** [@HenriqueLimao](https://discuss.elastic.co/u/HenriqueLimao)\ **Replies:** 2\ **Last updated:** [January 21, 2020, 3:25pm UTC](https://discuss.elastic.co/t/index-sorting-and-terminate-after-combination/198233 "2020-01-21T15:25:04Z")
I have an index in ES 6.6 used to search regular content that should be scored differently based on the user. Today we have more than 50 fields that can be used to calculate this score. In order to speed up the query, I… --- ## [Deleteing index times out](https://discuss.elastic.co/t/deleteing-index-times-out/18111)
**Author:** [@Kiran\_Koduru1](https://discuss.elastic.co/u/Kiran_Koduru1)\ **Replies:** 2\ **Last updated:** [June 15, 2014, 1:10am UTC](https://discuss.elastic.co/t/deleteing-index-times-out/18111 "2014-06-15T01:10:03Z")
I am trying to delete an index called \*dataenvironmentalmarkets \*through a curl request. curl -XDELETE 'http://myurl.com:9200/dataenvironmentalmarkets/' The requests times out with an exception {"error":"Pro… --- ## [Identifying Duplicate Records Based on Multiple Fields in Elasticsearch](https://discuss.elastic.co/t/identifying-duplicate-records-based-on-multiple-fields-in-elasticsearch/352115)
**Author:** [@Bikash\_Hutait](https://discuss.elastic.co/u/Bikash_Hutait)\ **Replies:** 7\ **Last updated:** [February 9, 2024, 12:13pm UTC](https://discuss.elastic.co/t/identifying-duplicate-records-based-on-multiple-fields-in-elasticsearch/352115 "2024-02-09T12:13:36Z")
I have a dataset in Elasticsearch containing records related to users and their assistants. I need to identify duplicate records for a specific file\_id. A record should be considered a duplicate if the fields FirstName, L… --- ## [Getting Started with 7.9.2 on Debian 10](https://discuss.elastic.co/t/getting-started-with-7-9-2-on-debian-10/250411)
**Author:** [@epretorious](https://discuss.elastic.co/u/epretorious)\ **Replies:** 7\ **Last updated:** [September 30, 2020, 4:56pm UTC](https://discuss.elastic.co/t/getting-started-with-7-9-2-on-debian-10/250411 "2020-09-30T16:56:06Z")
Hello, All! I've installed Elasticsearch using the .tar.gz method onto my Debian 10 host. But when I attempt to verify that Elasticsearch is listening and responding to inquiries by sending an HTTP request to port 9200 … --- ## [Grok Parsing an Internal JSON Part (IMAP Plugin)](https://discuss.elastic.co/t/grok-parsing-an-internal-json-part-imap-plugin/49471)
**Author:** [@m0tek](https://discuss.elastic.co/u/m0tek)\ **Replies:** 7\ **Last updated:** [May 9, 2016, 9:47pm UTC](https://discuss.elastic.co/t/grok-parsing-an-internal-json-part-imap-plugin/49471 "2016-05-09T21:47:07Z")
I Am familiar with Grok and Regexes , I Have the following Logstash Conf file : Basically it uses the IMAP Plugin in order to read Emails that are sent into the mailbox , As you can see - it tries to parse out (grok) a… --- ## [Unique Count Conditions](https://discuss.elastic.co/t/unique-count-conditions/225377)
**Author:** [@Oggy](https://discuss.elastic.co/u/Oggy)\ **Replies:** 5\ **Last updated:** [April 6, 2020, 9:00am UTC](https://discuss.elastic.co/t/unique-count-conditions/225377 "2020-04-06T09:00:53Z")
Hello, I need to do an unique count of items that are duplicates, let me explain. We use customer.id , it is unique for every customer. What we would like to visualize is only the customer.id's that are logged more than… --- ## [Partial update in Index bulk](https://discuss.elastic.co/t/partial-update-in-index-bulk/212965)
**Author:** [@anas-hossam](https://discuss.elastic.co/u/anas-hossam)\ **Replies:** 3\ **Last updated:** [December 24, 2019, 9:20pm UTC](https://discuss.elastic.co/t/partial-update-in-index-bulk/212965 "2019-12-24T21:20:21Z")
when using index in bulk API, Is there away for partial update in case of document already exists ? --- ## [X-Forwarded Headers with IIS Module](https://discuss.elastic.co/t/x-forwarded-headers-with-iis-module/139233)
**Author:** [@rlindner](https://discuss.elastic.co/u/rlindner)\ **Replies:** 3\ **Last updated:** [July 19, 2018, 8:40pm UTC](https://discuss.elastic.co/t/x-forwarded-headers-with-iis-module/139233 "2018-07-19T20:40:07Z")
Hi there, In 6.2 I was parsing IIS logs with Filebeat to Elasticsearch using a pipeline with grok filters, and modifying the filebeat.yml file to use the setup.template.name and setup.template.pattern. I was able to con… --- ## [Java High Level Rest Client to Elasicsearch](https://discuss.elastic.co/t/java-high-level-rest-client-to-elasicsearch/250929)
**Author:** [@pathfinder225](https://discuss.elastic.co/u/pathfinder225)\ **Replies:** 4\ **Last updated:** [October 6, 2020, 2:17pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client-to-elasicsearch/250929 "2020-10-06T14:17:18Z")
Hi I am using Java High Level Rest client on Spring boot to perform Search API operations. Our Elasticsearch is protected with https and basic(user/pwd) authentication. I'm receiving below exception , javax.net.ssl.S… --- ## [Logstash X-Pack monitoring troubles](https://discuss.elastic.co/t/logstash-x-pack-monitoring-troubles/73578)
**Author:** [@Slurpgeit](https://discuss.elastic.co/u/Slurpgeit)\ **Replies:** 4\ **Last updated:** [February 8, 2017, 9:02pm UTC](https://discuss.elastic.co/t/logstash-x-pack-monitoring-troubles/73578 "2017-02-08T21:02:06Z")
Hello, I'm trying to setup monitoring of some logstash machines, but I'm running into a few issues: The documentation (https://www.elastic.co/guide/en/x-pack/5.2/monitoring-logstash.html) states that the "xpack.monit… --- ## [Flush and clear cache unexpected behavior](https://discuss.elastic.co/t/flush-and-clear-cache-unexpected-behavior/24007)
**Author:** [@orenor](https://discuss.elastic.co/u/orenor)\ **Replies:** 4\ **Last updated:** [June 21, 2015, 9:57am UTC](https://discuss.elastic.co/t/flush-and-clear-cache-unexpected-behavior/24007 "2015-06-21T09:57:50Z")
Hello, for a long time now I've been trying to tune the heap size of our elasticsearch cluster. I'm loading ~200g on a 2 node cluster , each with 8 cores + 60g Ram (heap size set to 30g). ES version 1.6.0 While loa… --- ## [How to make the Elasticsearch crud operation to be reflected in mysql database](https://discuss.elastic.co/t/how-to-make-the-elasticsearch-crud-operation-to-be-reflected-in-mysql-database/137114)
**Author:** [@suchetacateina](https://discuss.elastic.co/u/suchetacateina)\ **Replies:** 6\ **Last updated:** [June 26, 2018, 2:50pm UTC](https://discuss.elastic.co/t/how-to-make-the-elasticsearch-crud-operation-to-be-reflected-in-mysql-database/137114 "2018-06-26T14:50:13Z")
HI Folks, I have installed ELK 6.2.3 on ubuntu 16.04. I have connected my sql database with ELK. I am able to see all the changes which have been done in mysql on ElasticSearch through search query . But when i am try… --- ## [ES-5.0.0 with php client query error](https://discuss.elastic.co/t/es-5-0-0-with-php-client-query-error/65961)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 6\ **Last updated:** [November 14, 2016, 12:29pm UTC](https://discuss.elastic.co/t/es-5-0-0-with-php-client-query-error/65961 "2016-11-14T12:29:47Z")
Hi I indexed mysql data on ES-5.0.0 and I did query PHP: unset($AlimSekli); if(isset($\_GET\['AlimSekli'\])){ $AlimSekli\['match\_phrase'\]\['AlimSekli'\]=$\_GET\['AlimSekli'\]; } if(is\_array($AlimSekli)){ $s… --- ## [Uneven node load](https://discuss.elastic.co/t/uneven-node-load/46245)
**Author:** [@akshat](https://discuss.elastic.co/u/akshat)\ **Replies:** 6\ **Last updated:** [April 8, 2016, 1:36pm UTC](https://discuss.elastic.co/t/uneven-node-load/46245 "2016-04-08T13:36:54Z")
I have a 8 node cluster (3 master and 5 data nodes). There are 5 shards and 4 replicas, so each of the data nodes have identical shard information. There is one particular node which always shows high CPU usage. I have l… --- ## [Aggregations issue](https://discuss.elastic.co/t/aggregations-issue/28654)
**Author:** [@Cristi\_Boariu](https://discuss.elastic.co/u/Cristi_Boariu)\ **Replies:** 6\ **Last updated:** [September 8, 2015, 7:22am UTC](https://discuss.elastic.co/t/aggregations-issue/28654 "2015-09-08T07:22:18Z")
I am using ES 1.5.2 both on client and server. Following query works fine when run from REST call manually: { "size" : 0, "aggregations" : { "favorite" : { "filter" : { "and" : { … --- ## [Elastic is not running on port 9200](https://discuss.elastic.co/t/elastic-is-not-running-on-port-9200/193960)
**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 9:09am UTC](https://discuss.elastic.co/t/elastic-is-not-running-on-port-9200/193960 "2019-08-06T09:09:14Z")
Hello, l started Elasticsearch using docker-compose.yml: version: '2' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:5.6.16 container\_name: elasticsearch restart: unless-stop… --- ## [Syslog Cisco ASA](https://discuss.elastic.co/t/syslog-cisco-asa/74220)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 2\ **Last updated:** [February 18, 2017, 4:26pm UTC](https://discuss.elastic.co/t/syslog-cisco-asa/74220 "2017-02-18T16:26:09Z")
Hello, I need some help, I have ELK on Windows and I'd like to collect logs from Cisco ASA, how shoud I configure my ELK? elasticsearch - 2.2.1 logstash - 2.2.2 kibana - 4.4.1 --- ## [Documentation download?](https://discuss.elastic.co/t/documentation-download/8114)
**Author:** [@calc](https://discuss.elastic.co/u/calc)\ **Replies:** 2\ **Last updated:** [June 15, 2012, 10:31am UTC](https://discuss.elastic.co/t/documentation-download/8114 "2012-06-15T10:31:22Z")
Hi there, is it possible to have all ES documentation in a tar ball so I can download and access the documentation when I'm offline? When I typed "elasticsearch documentation" on google, it auto-suggested "elasticsea… --- ## [Opentelemetry nodejs: cannot set language nor service.environment](https://discuss.elastic.co/t/opentelemetry-nodejs-cannot-set-language-nor-service-environment/287227)
**Author:** [@ccontini](https://discuss.elastic.co/u/ccontini)\ **Replies:** 7\ **Last updated:** [October 26, 2021, 6:25pm UTC](https://discuss.elastic.co/t/opentelemetry-nodejs-cannot-set-language-nor-service-environment/287227 "2021-10-26T18:25:07Z")
Kibana version: 7.14.1 Elasticsearch version: 7.14.1 APM Server version: 7.14.1 Open-telemetry collector version: 0.36 Description of the problem including expected versus actual behavior: I am using opentelemetry t… --- ## [Winlogbeat can't ingest archived .evtx files](https://discuss.elastic.co/t/winlogbeat-cant-ingest-archived-evtx-files/179851)
**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\ **Replies:** 8\ **Last updated:** [May 9, 2019, 11:08am UTC](https://discuss.elastic.co/t/winlogbeat-cant-ingest-archived-evtx-files/179851 "2019-05-09T11:08:18Z")
Hi I tried to ingest an archived evtx files. I set my configuration file like this guide https://www.elastic.co/guide/en/beats/winlogbeat/master/faq.html#reading-from-evtx I create the file winlogbeat-evtx.yml like t… --- ## [Create nested field with XPath](https://discuss.elastic.co/t/create-nested-field-with-xpath/98230)
**Author:** [@cadoman](https://discuss.elastic.co/u/cadoman)\ **Replies:** 3\ **Last updated:** [August 30, 2017, 8:08am UTC](https://discuss.elastic.co/t/create-nested-field-with-xpath/98230 "2017-08-30T08:08:49Z")
I have an XML structure \ \ \ \ \ \ \… --- ## [Multiple Elastic Search Instances on one machine](https://discuss.elastic.co/t/multiple-elastic-search-instances-on-one-machine/3880)
**Author:** [@Christopher\_Hunter](https://discuss.elastic.co/u/Christopher_Hunter)\ **Replies:** 3\ **Last updated:** [February 7, 2011, 6:15pm UTC](https://discuss.elastic.co/t/multiple-elastic-search-instances-on-one-machine/3880 "2011-02-07T18:15:35Z")
Hi, We're just starting to use ElasticSearch in our application, and so far it's working great, so thanks for all the hard work on it, its really good out of the box. We had no problem getting the service up and ru… --- ## [Kibana Dev Tools: How to execute multiple statements in one shot?](https://discuss.elastic.co/t/kibana-dev-tools-how-to-execute-multiple-statements-in-one-shot/245682)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 4:12am UTC](https://discuss.elastic.co/t/kibana-dev-tools-how-to-execute-multiple-statements-in-one-shot/245682 "2020-08-20T04:12:49Z")
hi We don't have access to ssh/backend/elastic-port directly. So the only interaction we have is with Kibana's DEV console to update and retrieve data So i've around 60 commands (mainly deleting and creating watchers)… --- ## [Sorting multiple indices with different fields](https://discuss.elastic.co/t/sorting-multiple-indices-with-different-fields/301315)
**Author:** [@marten1](https://discuss.elastic.co/u/marten1)\ **Replies:** 5\ **Last updated:** [April 6, 2022, 2:27pm UTC](https://discuss.elastic.co/t/sorting-multiple-indices-with-different-fields/301315 "2022-04-06T14:27:34Z")
Hi there, I'm having a sorting issue. I have 2 indexes which I search. I want to sort on a date field, but they have different names in each index: index01 has a datefield: publishedDate index02 has a datefield: pos… --- ## [Extremely slow writing to replicas](https://discuss.elastic.co/t/extremely-slow-writing-to-replicas/142254)
**Author:** [@sambodhi](https://discuss.elastic.co/u/sambodhi)\ **Replies:** 5\ **Last updated:** [August 2, 2018, 11:39am UTC](https://discuss.elastic.co/t/extremely-slow-writing-to-replicas/142254 "2018-08-02T11:39:45Z")
Hi, Cluster details: 7 node x r4.2xlarge (8 vCPU, 61 GB - 32 assigned to ES) on AWS I have 650 GiB volume per node so around 4.5 TB disk space. Index size: 1.7b documents / 1.8 TB / 28 Shards, 1 replica We had to som… --- ## [Unassigned primary \*and\* replica shards](https://discuss.elastic.co/t/unassigned-primary-and-replica-shards/11267)
**Author:** [@Matthias\_Johnson](https://discuss.elastic.co/u/Matthias_Johnson)\ **Replies:** 5\ **Last updated:** [March 27, 2013, 6:25pm UTC](https://discuss.elastic.co/t/unassigned-primary-and-replica-shards/11267 "2013-03-27T18:25:18Z")
Greetings, I have an 8 node cluster with 4 nodes each in different data centers. Recently the cluster became partitioned (i.e. couldn't see each other) due to firewalls. I have removed the firewall issue and all n… --- ## [Performance impact of deleting large index in Elasticsearch](https://discuss.elastic.co/t/performance-impact-of-deleting-large-index-in-elasticsearch/219503)
**Author:** [@the123saurav](https://discuss.elastic.co/u/the123saurav)\ **Replies:** 1\ **Last updated:** [February 16, 2020, 9:59am UTC](https://discuss.elastic.co/t/performance-impact-of-deleting-large-index-in-elasticsearch/219503 "2020-02-16T09:59:10Z")
We are using Elasticsearch 6.0 with 2 indices both of size 200gb(primary shards store) and 3 primary shards and 2 replicas. We want to delete one index fully. The cluster has 3 dedicated master nodes(1core, 4gb) and 5 da… --- ## [@timestamp range - searching across indices](https://discuss.elastic.co/t/timestamp-range-searching-across-indices/52290)
**Author:** [@stesey19](https://discuss.elastic.co/u/stesey19)\ **Replies:** 4\ **Last updated:** [June 10, 2016, 9:54am UTC](https://discuss.elastic.co/t/timestamp-range-searching-across-indices/52290 "2016-06-10T09:54:38Z")
Hi all, I am new to Elasticsearch and would like to know if it's possible to retrieve all logs over the last 24 hours while searching across all indices? I am running the below queries using Sense. When I run the fir… --- ## [Unable to delete the documents when the index is full](https://discuss.elastic.co/t/unable-to-delete-the-documents-when-the-index-is-full/260201)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 4:21pm UTC](https://discuss.elastic.co/t/unable-to-delete-the-documents-when-the-index-is-full/260201 "2021-01-05T16:21:43Z")
I am unable to delete the documents from an index having the maximum number of documents (2147483519). getting the below exception. Please help me to get this resolved. "cause" : { "type" : "illegal\_argument\_ex… --- ## [Logstash pipeline systax errors after upgrading from 7.1.1. to 7.7.0](https://discuss.elastic.co/t/logstash-pipeline-systax-errors-after-upgrading-from-7-1-1-to-7-7-0/236479)
**Author:** [@bhavesh.vasoya](https://discuss.elastic.co/u/bhavesh.vasoya)\ **Replies:** 6\ **Last updated:** [June 10, 2020, 11:40am UTC](https://discuss.elastic.co/t/logstash-pipeline-systax-errors-after-upgrading-from-7-1-1-to-7-7-0/236479 "2020-06-10T11:40:28Z")
\------------------- Some information ------------------- we have running ELK stack 7.1.1. logstash parser written in multiple files under "/etc/logstash/conf.d" directory Now i have upgrade ELK stack 7.1.1 to 7.7.0 and… --- ## [JVM heap usage is high](https://discuss.elastic.co/t/jvm-heap-usage-is-high/209784)
**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\ **Replies:** 6\ **Last updated:** [November 28, 2019, 10:20am UTC](https://discuss.elastic.co/t/jvm-heap-usage-is-high/209784 "2019-11-28T10:20:55Z")
Hi, We have 7 nodes cluster with 3 masters and 4 data nodes. We have one index with, 4 shards, 1 replica size - 3.5GB 12894 documents which is getting 100/s search requests normally and indexing rate is very low. B… --- ## [System logs with ISO8601 timestamps](https://discuss.elastic.co/t/system-logs-with-iso8601-timestamps/131094)
**Author:** [@Dave\_H](https://discuss.elastic.co/u/Dave_H)\ **Replies:** 6\ **Last updated:** [May 12, 2018, 3:31am UTC](https://discuss.elastic.co/t/system-logs-with-iso8601-timestamps/131094 "2018-05-12T03:31:36Z")
when using ISO8601 timestamps with filebeat, I am getting this error: Provided Grok expressions do not match field value: \[2018-05-08T22:50:15.322108-05:00 webhost sshd\[24868\]: Failed password for root from XX.7.26.60 p… --- ## [No Kibana plugins working when login over https](https://discuss.elastic.co/t/no-kibana-plugins-working-when-login-over-https/49428)
**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Replies:** 6\ **Last updated:** [May 9, 2016, 7:20pm UTC](https://discuss.elastic.co/t/no-kibana-plugins-working-when-login-over-https/49428 "2016-05-09T19:20:42Z")
We just installed Kibana 4.5.0 with the license, sense, marvel and graph plugins. All plugins worked until we turned on browser-Kibana access over https (following https://www.elastic.co/guide/en/shield/current/kibana.ht… --- ## [Http.publish\_host not publishing the host I want](https://discuss.elastic.co/t/http-publish-host-not-publishing-the-host-i-want/28038)
**Author:** [@EliasGoldberg](https://discuss.elastic.co/u/EliasGoldberg)\ **Replies:** 6\ **Last updated:** [August 28, 2015, 1:11pm UTC](https://discuss.elastic.co/t/http-publish-host-not-publishing-the-host-i-want/28038 "2015-08-28T13:11:12Z")
Hi y'all, I'm developing a web app with Elasticsearch (1.7.1) on the back-end protected by Apache (2.4) running as a reverse proxy and the Elasticsearch angularJS module (6.1.0) providing connectivity for my angularJS … --- ## [Logstash error from Beats JSON input](https://discuss.elastic.co/t/logstash-error-from-beats-json-input/92028)
**Author:** [@Renz\_Rollon](https://discuss.elastic.co/u/Renz_Rollon)\ **Replies:** 1\ **Last updated:** [July 9, 2017, 5:05pm UTC](https://discuss.elastic.co/t/logstash-error-from-beats-json-input/92028 "2017-07-09T17:05:00Z")
Here's the log from beats' publish: { "@timestamp": "2017-07-06T07:12:12.629Z", "beat": { "hostname": "test", "name": "test", "version": "5.4.3" }, "input\_type": "log", … --- ## [Highlight issue in nested objects](https://discuss.elastic.co/t/highlight-issue-in-nested-objects/120463)
**Author:** [@anjireddy543](https://discuss.elastic.co/u/anjireddy543)\ **Replies:** 2\ **Last updated:** [February 24, 2018, 8:14am UTC](https://discuss.elastic.co/t/highlight-issue-in-nested-objects/120463 "2018-02-24T08:14:12Z")
Hi, I am facing some problem with highlighting nested values Mapping "acts" : { "type" : "nested", "include\_in\_parent" : true, "properties" : { "value" : { … --- ## [Unable to find data in Kibana](https://discuss.elastic.co/t/unable-to-find-data-in-kibana/47573)
**Author:** [@bkish1](https://discuss.elastic.co/u/bkish1)\ **Replies:** 2\ **Last updated:** [April 17, 2016, 2:40pm UTC](https://discuss.elastic.co/t/unable-to-find-data-in-kibana/47573 "2016-04-17T14:40:38Z")
This is a new setup, unable to find any data in Kibana, However I could find in elastic. though could see following error in /kibana stderror file in /var/log/kibana/ can you please help me curl http://localhost:9200/… --- ## [Aggregation Pagination Composite VS Include Partion](https://discuss.elastic.co/t/aggregation-pagination-composite-vs-include-partion/160700)
**Author:** [@Gary\_Harpaz](https://discuss.elastic.co/u/Gary_Harpaz)\ **Replies:** 3\ **Last updated:** [December 13, 2018, 12:25pm UTC](https://discuss.elastic.co/t/aggregation-pagination-composite-vs-include-partion/160700 "2018-12-13T12:25:24Z")
Hi, At my company we use a terms aggregation with include: partition number to paginate the results. I noticed that in newer versions you have a composite aggregation which also allows pagination. Which do you think i… --- ## [Warning Message : \[o.e.m.j.JvmGcMonitorService\]](https://discuss.elastic.co/t/warning-message-o-e-m-j-jvmgcmonitorservice/94976)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 3\ **Last updated:** [July 29, 2017, 5:48am UTC](https://discuss.elastic.co/t/warning-message-o-e-m-j-jvmgcmonitorservice/94976 "2017-07-29T05:48:21Z")
All of sudden, I started to see this message on Elasticsearch log file and also unable to view the logs on Kibana frequent timedout error. \[2017-07-28T10:31:07,902\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[itels1\] \[gc\]\[2449… --- ## [How do i add my font style in kibana code](https://discuss.elastic.co/t/how-do-i-add-my-font-style-in-kibana-code/82138)
**Author:** [@ranjansaga](https://discuss.elastic.co/u/ranjansaga)\ **Replies:** 3\ **Last updated:** [April 13, 2017, 2:01pm UTC](https://discuss.elastic.co/t/how-do-i-add-my-font-style-in-kibana-code/82138 "2017-04-13T14:01:14Z")
I want to use a different font style for my kibana code. 1. Usually we download the font and keep it in a particular location in the code repo 2. Using @font-face we define the path to the font. 3. Use the name define… --- ## [Parse Modsecurity json logs](https://discuss.elastic.co/t/parse-modsecurity-json-logs/195609)
**Author:** [@mattia\_conversano](https://discuss.elastic.co/u/mattia_conversano)\ **Replies:** 5\ **Last updated:** [August 19, 2019, 8:19am UTC](https://discuss.elastic.co/t/parse-modsecurity-json-logs/195609 "2019-08-19T08:19:49Z")
Hi team, First of all thanks for this awesome tool. I have a problem: I'm trying to send Modsecurity's (JSON) logs to Elasticsearch through Filebeat and Logstash. Log example: { ... "audit\_data":{ "message… --- ## [Could not index event to Elasticsearch reason failed to parse field \[rule\] of type \[text\] in document](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-reason-failed-to-parse-field-rule-of-type-text-in-document/207470)
**Author:** [@nghia\_huynh](https://discuss.elastic.co/u/nghia_huynh)\ **Replies:** 1\ **Last updated:** [November 12, 2019, 11:25am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-reason-failed-to-parse-field-rule-of-type-text-in-document/207470 "2019-11-12T11:25:38Z")
Hi everyone, Today, I check log from logstash-plain.log and I see many event was spam from one error like that: \[2019-11-12T16:03:53,696\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {… --- ## [Sending logging data to ES using tcp input plugin, no use of file](https://discuss.elastic.co/t/sending-logging-data-to-es-using-tcp-input-plugin-no-use-of-file/188159)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 7\ **Last updated:** [July 2, 2019, 5:56pm UTC](https://discuss.elastic.co/t/sending-logging-data-to-es-using-tcp-input-plugin-no-use-of-file/188159 "2019-07-02T17:56:48Z")
Hi All We get very good log file in LS, but i want to mute this file logging and send the logging data directly to ES I am using following configuration, but it is not working. It does not show anything in console and … --- ## [Assign a value if field has no value present](https://discuss.elastic.co/t/assign-a-value-if-field-has-no-value-present/193578)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 8\ **Last updated:** [August 27, 2019, 3:47pm UTC](https://discuss.elastic.co/t/assign-a-value-if-field-has-no-value-present/193578 "2019-08-27T15:47:17Z")
I am gone a read a csv formated file which has more then 50 field, by default I want to assign a value "UNKNOWN" to any blank field. how do I easily do it ? on smaller files I have done if !\[var1\] { mutate {update....… --- ## [Elastic Stack 5.3.2 released](https://discuss.elastic.co/t/elastic-stack-5-3-2-released/83896)
**Author:** [@tudor](https://discuss.elastic.co/u/tudor)\ **Replies:** 0\ **Last updated:** [April 27, 2017, 4:00pm UTC](https://discuss.elastic.co/t/elastic-stack-5-3-2-released/83896 "2017-04-27T16:00:29Z")
Hi all, We've just released version 5.3.2 of the Elastic Stack. This is a bug fix release; please see the release notes/blogs for each product to get the details. You can find the individual blog posts here: https://… [Previous page](https://discuss.elastic.co/top.md?page=670&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=672&per_page=50&period=all)