# Top

**URL:** https://discuss.elastic.co/top.md?page=675&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 676

---

## [WARN Two requests without a Response](https://discuss.elastic.co/t/warn-two-requests-without-a-response/34553)

<div class="topic-metadata">

**Author:** [@jderieg](https://discuss.elastic.co/u/jderieg)\
**Replies:** 7\
**Last updated:** [November 20, 2015, 12:16am UTC](https://discuss.elastic.co/t/warn-two-requests-without-a-response/34553 "2015-11-20T00:16:27Z")

</div>

Getting the following message from the packetbeat log repeatedly (about every second or so): "WARN Two requests without a Response. Dropping old request" Just looking for a little clarification as to what this means.…

---

## [Kibana OIDC Keycloak 401 Unauthorized](https://discuss.elastic.co/t/kibana-oidc-keycloak-401-unauthorized/281739)

<div class="topic-metadata">

**Author:** [@cawwot](https://discuss.elastic.co/u/cawwot)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 12:58pm UTC](https://discuss.elastic.co/t/kibana-oidc-keycloak-401-unauthorized/281739 "2021-08-18T12:58:49Z")

</div>

Trying to integrate Keycloak OIDC with Kibana to allow logins from keycloak users. Upon selecting the "login with keycloak" icon, I am correctly redirected to keycloak to login. after entering the credentials of a keyclo…

---

## [Indexing Buffer Settings per Index](https://discuss.elastic.co/t/indexing-buffer-settings-per-index/60488)

<div class="topic-metadata">

**Author:** [@shashank\_moengage](https://discuss.elastic.co/u/shashank_moengage)\
**Replies:** 2\
**Last updated:** [September 14, 2016, 3:34pm UTC](https://discuss.elastic.co/t/indexing-buffer-settings-per-index/60488 "2016-09-14T15:34:12Z")

</div>

Context - I want to increase the performance of indexing. We have implemented a logstash kind of architecture where the indices are split per week. So at a time we have some indices where we write data but we have a lot …

---

## [Date format](https://discuss.elastic.co/t/date-format/3202)

<div class="topic-metadata">

**Author:** [@Andrew\_Degtiariov](https://discuss.elastic.co/u/Andrew_Degtiariov)\
**Replies:** 3\
**Last updated:** [August 9, 2010, 3:29pm UTC](https://discuss.elastic.co/t/date-format/3202 "2010-08-09T15:29:34Z")

</div>

I have dates like this '2010-08-09T11:13:04+0300' and trying to add ones to mapping: ... "created" : { "type" : "date", "format": "date\_time\_no\_millis" } ... But elasti…

---

## [ECK Fleet Server Behind Ingress - elastic agents becoming unhealthy](https://discuss.elastic.co/t/eck-fleet-server-behind-ingress-elastic-agents-becoming-unhealthy/313234)

<div class="topic-metadata">

**Author:** [@sanju\_techie](https://discuss.elastic.co/u/sanju_techie)\
**Replies:** 4\
**Last updated:** [September 3, 2022, 5:27am UTC](https://discuss.elastic.co/t/eck-fleet-server-behind-ingress-elastic-agents-becoming-unhealthy/313234 "2022-09-03T05:27:40Z")

</div>

Hi All, Brief Fact: We have deployed ECK in Azure AKS. The whole thing is behind an Ingress as seen in the below Diagram. The requirement is to connect elastic agents which are residing outside of the ECK cluster to fl…

---

## [Change port for cloud.elastic.co instance](https://discuss.elastic.co/t/change-port-for-cloud-elastic-co-instance/141951)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 4\
**Last updated:** [July 27, 2018, 4:21pm UTC](https://discuss.elastic.co/t/change-port-for-cloud-elastic-co-instance/141951 "2018-07-27T16:21:36Z")

</div>

I am running cloud instance in cloud.elastic.co but elasticsearch port is on 9243, i need to change this port to be 443. how is it possible to do such a change?

---

## [NGINX harvester finds and loads log files, but no publish output](https://discuss.elastic.co/t/nginx-harvester-finds-and-loads-log-files-but-no-publish-output/130657)

<div class="topic-metadata">

**Author:** [@Steven\_K](https://discuss.elastic.co/u/Steven_K)\
**Replies:** 4\
**Last updated:** [May 8, 2018, 7:55am UTC](https://discuss.elastic.co/t/nginx-harvester-finds-and-loads-log-files-but-no-publish-output/130657 "2018-05-08T07:55:30Z")

</div>

I've scoured the internet for the next step, but I'm just stumped. I am unable to get my NGINX logs back to the elastic cloud hosted Kibana instance, I am running Ubuntu and the deb install of Filebeat - No docker, all i…

---

## [Custom log file not getting pushed to Elasticsearch via logstash](https://discuss.elastic.co/t/custom-log-file-not-getting-pushed-to-elasticsearch-via-logstash/85469)

<div class="topic-metadata">

**Author:** [@amit.karir](https://discuss.elastic.co/u/amit.karir)\
**Replies:** 4\
**Last updated:** [May 15, 2017, 8:21pm UTC](https://discuss.elastic.co/t/custom-log-file-not-getting-pushed-to-elasticsearch-via-logstash/85469 "2017-05-15T20:21:23Z")

</div>

Hi, I am trying to push a custom log file generated by my program into elasticsearch(5.3.2) via logstash(5.3.2). I dont get any error but index is also not getting created... Am I missing something? I am pretty new t…

---

## [Why use multiple ElasticSearch indices for one web application?](https://discuss.elastic.co/t/why-use-multiple-elasticsearch-indices-for-one-web-application/27092)

<div class="topic-metadata">

**Author:** [@bdb](https://discuss.elastic.co/u/bdb)\
**Replies:** 4\
**Last updated:** [August 11, 2015, 11:00pm UTC](https://discuss.elastic.co/t/why-use-multiple-elasticsearch-indices-for-one-web-application/27092 "2015-08-11T23:00:27Z")

</div>

Being new to ES, i would like some advice on the following, please... In asking a questions relating to using ES for web applications, suggestions have been made to have one index for things like user profiles, another…

---

## [Unable to export csv](https://discuss.elastic.co/t/unable-to-export-csv/316362)

<div class="topic-metadata">

**Author:** [@rivermigue](https://discuss.elastic.co/u/rivermigue)\
**Replies:** 1\
**Last updated:** [October 14, 2022, 1:58pm UTC](https://discuss.elastic.co/t/unable-to-export-csv/316362 "2022-10-14T13:58:28Z")

</div>

I have recently enabled the xpack plugin for native basic authentication, once I did that, the export csv within kibana stopped working and displaying the following error message: Failed to create report Sorry, you don'…

---

## [Logstash JDBC Input vs ElasticSearch JDBC Importer](https://discuss.elastic.co/t/logstash-jdbc-input-vs-elasticsearch-jdbc-importer/77727)

<div class="topic-metadata">

**Author:** [@matt40413](https://discuss.elastic.co/u/matt40413)\
**Replies:** 2\
**Last updated:** [March 8, 2017, 2:16pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-vs-elasticsearch-jdbc-importer/77727 "2017-03-08T14:16:14Z")

</div>

So I got a working example working using a Postgres Database and Logstash/ElasticSearch and Kibana. It's basic....but it works. Im very new to this, so I don't think I truly understand what Logstash does vs ElasticSear…

---

## [Can not build Kibana 4.3.1 or start elasticsearch](https://discuss.elastic.co/t/can-not-build-kibana-4-3-1-or-start-elasticsearch/44747)

<div class="topic-metadata">

**Author:** [@paulbarr](https://discuss.elastic.co/u/paulbarr)\
**Replies:** 5\
**Last updated:** [November 18, 2016, 1:18pm UTC](https://discuss.elastic.co/t/can-not-build-kibana-4-3-1-or-start-elasticsearch/44747 "2016-11-18T13:18:17Z")

</div>

Hey guys, I am trying to develop with Kibana 4.3.1. I cloned the kibana repository and then switched to the 4.3.1 branch with this command: git checkout 4.3.1 I did my "npm install" and all looks good However when I …

---

## [Get file's last modification date](https://discuss.elastic.co/t/get-files-last-modification-date/83234)

<div class="topic-metadata">

**Author:** [@ogauchard](https://discuss.elastic.co/u/ogauchard)\
**Replies:** 7\
**Last updated:** [May 2, 2017, 7:18am UTC](https://discuss.elastic.co/t/get-files-last-modification-date/83234 "2017-05-02T07:18:07Z")

</div>

Hi all, Is there anyway to retrieve and output file's last modification date with filebeat ? Thank you.

---

## [After updating Apm Agent from 1.1.2 to 1.2 transactions are empty](https://discuss.elastic.co/t/after-updating-apm-agent-from-1-1-2-to-1-2-transactions-are-empty/211081)

<div class="topic-metadata">

**Author:** [@insanity13](https://discuss.elastic.co/u/insanity13)\
**Replies:** 8\
**Last updated:** [December 11, 2019, 10:52am UTC](https://discuss.elastic.co/t/after-updating-apm-agent-from-1-1-2-to-1-2-transactions-are-empty/211081 "2019-12-11T10:52:24Z")

</div>

Kibana version: 7.5.0 (Cloud) Elasticsearch version: 7.5.0 (Cloud) APM Server version: 7.5.0 (Local) APM Agent language and version: 1.2 .Net (Full) Browser version: - Original install method (e.g. download page, …

---

## [Change to policy around discussion Q/A?](https://discuss.elastic.co/t/change-to-policy-around-discussion-q-a/238712)

<div class="topic-metadata">

**Author:** [@slmingol](https://discuss.elastic.co/u/slmingol)\
**Replies:** 0\
**Last updated:** [June 25, 2020, 3:44pm UTC](https://discuss.elastic.co/t/change-to-policy-around-discussion-q-a/238712 "2020-06-25T15:44:59Z")

</div>

I've been trying to use the discussion site for some time but have grown more and more frustrated with the policy that auto closes Q's after 28 days. This makes it difficult to participate in this community for several r…

---

## [Saving Results from Millions of Documents of varying sizes with Python Elasticsearch Client](https://discuss.elastic.co/t/saving-results-from-millions-of-documents-of-varying-sizes-with-python-elasticsearch-client/80421)

<div class="topic-metadata">

**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\
**Replies:** 0\
**Last updated:** [March 29, 2017, 7:20am UTC](https://discuss.elastic.co/t/saving-results-from-millions-of-documents-of-varying-sizes-with-python-elasticsearch-client/80421 "2017-03-29T07:20:58Z")

</div>

Hi everyone, I'm trying to get feedback on the best approach for querying my elasticsearch cluster, I have: 6 billion documents in one index documents of varying sizes, of the format: { "domain" : "website1.com", …

---

## [Logstash is not load-balanced properly](https://discuss.elastic.co/t/logstash-is-not-load-balanced-properly/230021)

<div class="topic-metadata">

**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\
**Replies:** 4\
**Last updated:** [April 29, 2020, 7:49pm UTC](https://discuss.elastic.co/t/logstash-is-not-load-balanced-properly/230021 "2020-04-29T19:49:21Z")

</div>

Hi, We are using logstash version: 7.6.1, from the helm chart - https://github.com/elastic/helm-charts/tree/master/logstash. resources: requests: cpu: "2" memory: "6Gi" limits: cpu: "2" memory: "6G…

---

## [Docker image doesn't expose ports in custom image](https://discuss.elastic.co/t/docker-image-doesnt-expose-ports-in-custom-image/156479)

<div class="topic-metadata">

**Author:** [@Rafael\_Simonelli](https://discuss.elastic.co/u/Rafael_Simonelli)\
**Replies:** 6\
**Last updated:** [November 16, 2018, 7:02pm UTC](https://discuss.elastic.co/t/docker-image-doesnt-expose-ports-in-custom-image/156479 "2018-11-16T19:02:18Z")

</div>

I'm working with a custom image and I want to expose some of container's ports. But when I run my image in Rancher and execute "nmap " from another service in the same host, it reaches the service but no ports are avaibl…

---

## [How to extract nested json objects in to new fields in kibana](https://discuss.elastic.co/t/how-to-extract-nested-json-objects-in-to-new-fields-in-kibana/282626)

<div class="topic-metadata">

**Author:** [@sandhya1](https://discuss.elastic.co/u/sandhya1)\
**Replies:** 2\
**Last updated:** [August 30, 2021, 9:08pm UTC](https://discuss.elastic.co/t/how-to-extract-nested-json-objects-in-to-new-fields-in-kibana/282626 "2021-08-30T21:08:29Z")

</div>

Hi, I have one field which is having nested j son object format, i need to extract into new fields. The field is mapped to the "text" data type and from the below format i need the count of unique first name and need t…

---

## [Is there a way to parse country names to Geospatial Coordinates?](https://discuss.elastic.co/t/is-there-a-way-to-parse-country-names-to-geospatial-coordinates/268716)

<div class="topic-metadata">

**Author:** [@caitlyn.carlisle](https://discuss.elastic.co/u/caitlyn.carlisle)\
**Replies:** 4\
**Last updated:** [March 30, 2021, 6:12pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-parse-country-names-to-geospatial-coordinates/268716 "2021-03-30T18:12:23Z")

</div>

I am attempting to create a map using Kibana. I currently only have the country name as one of my data points but was wondering if there was a way to easily convert it to the Geospatial Coordinates? I am using a Logstash…

---

## [Filebeat: read allways from beginning, even if no update](https://discuss.elastic.co/t/filebeat-read-allways-from-beginning-even-if-no-update/87702)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [May 31, 2017, 9:31am UTC](https://discuss.elastic.co/t/filebeat-read-allways-from-beginning-even-if-no-update/87702 "2017-05-31T09:31:28Z")

</div>

Hi, when developing new filters usually do it locally on my machine. In my current setup I allways need to add new lines to a sample logfile. Is it also possible to configure filebeat this way, that it ships the conf…

---

## [Filebeats to read locked file](https://discuss.elastic.co/t/filebeats-to-read-locked-file/102826)

<div class="topic-metadata">

**Author:** [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)\
**Replies:** 3\
**Last updated:** [October 6, 2017, 3:57pm UTC](https://discuss.elastic.co/t/filebeats-to-read-locked-file/102826 "2017-10-06T15:57:44Z")

</div>

Hi, I have an application which continuously writes to a log file and locks it while it is writing the data. I need to use filebeats to get the logs from the file to ElasticSearch in Real Time. Can filebeat ship such da…

---

## [Takes a long time to index](https://discuss.elastic.co/t/takes-a-long-time-to-index/36633)

<div class="topic-metadata">

**Author:** [@Yzord](https://discuss.elastic.co/u/Yzord)\
**Replies:** 3\
**Last updated:** [December 9, 2015, 2:37pm UTC](https://discuss.elastic.co/t/takes-a-long-time-to-index/36633 "2015-12-09T14:37:57Z")

</div>

We are using ELK for logging (of course) but when we don't use the server for several weeks and we start it up again in the browser it takes a very long time before it shows some info. We have it also that it doesn't sho…

---

## [Disable swap on Linux?](https://discuss.elastic.co/t/disable-swap-on-linux/283266)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 5\
**Last updated:** [September 9, 2021, 3:04pm UTC](https://discuss.elastic.co/t/disable-swap-on-linux/283266 "2021-09-09T15:04:22Z")

</div>

Hello Reading this Disable swapping | Elasticsearch Guide \[master\] | Elastic it seems the general advice is to disable swap completely....That being said, I have Elastic, Logstash and Kibana all installed on the same se…

---

## [Customize the default Kibana logo,header and title](https://discuss.elastic.co/t/customize-the-default-kibana-logo-header-and-title/236845)

<div class="topic-metadata">

**Author:** [@Matish\_Bhuyan](https://discuss.elastic.co/u/Matish_Bhuyan)\
**Replies:** 4\
**Last updated:** [June 12, 2020, 9:11am UTC](https://discuss.elastic.co/t/customize-the-default-kibana-logo-header-and-title/236845 "2020-06-12T09:11:26Z")

</div>

Hi @yhy900211 I have tried your above steps to customize the logo .welcome title and the favicon value but it doesn't seem to work in my case I am using kibana version 7.2. and also to change the kibana logo on left s…

---

## [How to See Kibana Requests to ES](https://discuss.elastic.co/t/how-to-see-kibana-requests-to-es/55351)

<div class="topic-metadata">

**Author:** [@mitchswaldman](https://discuss.elastic.co/u/mitchswaldman)\
**Replies:** 4\
**Last updated:** [July 13, 2016, 6:44pm UTC](https://discuss.elastic.co/t/how-to-see-kibana-requests-to-es/55351 "2016-07-13T18:44:49Z")

</div>

Hello! Is there a way to see the requests that Kibana makes to ES to check if a plugin is installed? I'm currently having issues with Kibana saying that the x-pack plugin is not installed on my ES cluster. I've found …

---

## [ConnectionTimeout caused by - ReadTimeoutError, master not discovered yet](https://discuss.elastic.co/t/connectiontimeout-caused-by-readtimeouterror-master-not-discovered-yet/207420)

<div class="topic-metadata">

**Author:** [@dstromberg](https://discuss.elastic.co/u/dstromberg)\
**Replies:** 2\
**Last updated:** [November 12, 2019, 7:38pm UTC](https://discuss.elastic.co/t/connectiontimeout-caused-by-readtimeouterror-master-not-discovered-yet/207420 "2019-11-12T19:38:37Z")

</div>

Hi folks. I'm getting this error in a python3 program trying to talk to elasticsearch: elasticsearch.exceptions.ConnectionTimeout: ConnectionTimeout caused by - ReadTimeoutError(HTTPConnectionPool(host='localhost', po…

---

## [This driver is not configured for integrated authentication](https://discuss.elastic.co/t/this-driver-is-not-configured-for-integrated-authentication/135940)

<div class="topic-metadata">

**Author:** [@Sourav\_Saha](https://discuss.elastic.co/u/Sourav_Saha)\
**Replies:** 2\
**Last updated:** [June 14, 2018, 5:59pm UTC](https://discuss.elastic.co/t/this-driver-is-not-configured-for-integrated-authentication/135940 "2018-06-14T17:59:16Z")

</div>

I am trying to connect SQL SERVER in window authentication mode from logstash and my connection string is given below: input { jdbc { jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriver" jdbc\_driver\_li…

---

## [Kibana startup fails for kibana-4.4.1-1.x86\_64](https://discuss.elastic.co/t/kibana-startup-fails-for-kibana-4-4-1-1-x86-64/42765)

<div class="topic-metadata">

**Author:** [@carlosq](https://discuss.elastic.co/u/carlosq)\
**Replies:** 6\
**Last updated:** [February 26, 2016, 8:05pm UTC](https://discuss.elastic.co/t/kibana-startup-fails-for-kibana-4-4-1-1-x86-64/42765 "2016-02-26T20:05:17Z")

</div>

Hi, After installing, run Kibana from the install directory: bin/kibana and I got following error: Error: Cannot find module '/opt/kibana/src/src/utils/packageJson' you can see it has double /src in the path. Ple…

---

## [Character support in Document Id](https://discuss.elastic.co/t/character-support-in-document-id/61682)

<div class="topic-metadata">

**Author:** [@Ankitnaudiyal](https://discuss.elastic.co/u/Ankitnaudiyal)\
**Replies:** 3\
**Last updated:** [September 29, 2016, 5:14am UTC](https://discuss.elastic.co/t/character-support-in-document-id/61682 "2016-09-29T05:14:55Z")

</div>

Hi Team, I'm trying to index a tweet with author name as the Document Id. We have a requirement which requires us to have some names with special characters like @ symbol. After some trials it seems that it is not poss…

---

## [Packetbeat have problems with sniffer.go:297: DBG Interrupted](https://discuss.elastic.co/t/packetbeat-have-problems-with-sniffer-go-297-dbg-interrupted/44054)

<div class="topic-metadata">

**Author:** [@daguero](https://discuss.elastic.co/u/daguero)\
**Replies:** 5\
**Last updated:** [March 17, 2016, 9:25pm UTC](https://discuss.elastic.co/t/packetbeat-have-problems-with-sniffer-go-297-dbg-interrupted/44054 "2016-03-17T21:25:08Z")

</div>

I tried to use Packetbeat for network monitoring and have problems. I followed the recommended configuration on the official site, but when you run: ok@ok-VirtualBox1:~/Desktop/packetbeat$ packetbeat -e -c packetbeat.y…

---

## [Kibana user without password](https://discuss.elastic.co/t/kibana-user-without-password/234981)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [May 30, 2020, 9:07pm UTC](https://discuss.elastic.co/t/kibana-user-without-password/234981 "2020-05-30T21:07:10Z")

</div>

I am trying to setup user which has no password problem this user will only have read access to dashboard goal here is that I can send this link to anyone and they should be able to see dashboard. is it possible? cur…

---

## [Spring elastic search and configuration for Mappings and \_settings files](https://discuss.elastic.co/t/spring-elastic-search-and-configuration-for-mappings-and--settings-files/15100)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 8\
**Last updated:** [January 9, 2014, 12:45pm UTC](https://discuss.elastic.co/t/spring-elastic-search-and-configuration-for-mappings-and--settings-files/15100 "2014-01-09T12:45:58Z")

</div>

Hi All: I am trying to index a set of documents with the following mapping : { "NewTitles": { "properties": { "DOC\_ID": { "type":"string" }, "TI…

---

## [Can't merge a non object mapping](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping/101901)

<div class="topic-metadata">

**Author:** [@valdemar.pavesi](https://discuss.elastic.co/u/valdemar.pavesi)\
**Replies:** 1\
**Last updated:** [September 26, 2017, 8:41pm UTC](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping/101901 "2017-09-26T20:41:43Z")

</div>

Hello, I am getting this error 2017/09/26 20:31:28.110247 client.go:465: WARN Can not index event (status=400): {"type":"illegal\_argument\_exception","reason":"Can't merge a non object mapping \[cmm.pm.ipds0.VS.NbrRexmit…

---

## [Kibana login with Shield](https://discuss.elastic.co/t/kibana-login-with-shield/44978)

<div class="topic-metadata">

**Author:** [@rohitkumars](https://discuss.elastic.co/u/rohitkumars)\
**Replies:** 7\
**Last updated:** [March 22, 2016, 3:10pm UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978 "2016-03-22T15:10:37Z")

</div>

Hi I have created a user with roles kibana4 and marvel\_user. While doing login in kibana using shield it redirects me to the login page again after it verifies the username and password. There is no error which is prom…

---

## [Beautifier for Logstash .conf files](https://discuss.elastic.co/t/beautifier-for-logstash-conf-files/136335)

<div class="topic-metadata">

**Author:** [@james\_mtl](https://discuss.elastic.co/u/james_mtl)\
**Replies:** 0\
**Last updated:** [June 18, 2018, 3:53pm UTC](https://discuss.elastic.co/t/beautifier-for-logstash-conf-files/136335 "2018-06-18T15:53:52Z")

</div>

Is there a logstash .conf beautifier utility online?

---

## [Multiline not reading all lines?](https://discuss.elastic.co/t/multiline-not-reading-all-lines/36762)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 2\
**Last updated:** [December 9, 2015, 7:07pm UTC](https://discuss.elastic.co/t/multiline-not-reading-all-lines/36762 "2015-12-09T19:07:25Z")

</div>

I have some logs all starting with a timestamp, javaclass, log level and then a message, some of them multiline. I'm just starting with a couple single-line events first. I have two of them in a file and I have the foll…

---

## [How to perform math formula in Elasticsearch script score based on field value conditions?](https://discuss.elastic.co/t/how-to-perform-math-formula-in-elasticsearch-script-score-based-on-field-value-conditions/287034)

<div class="topic-metadata">

**Author:** [@Mariusz\_Liksza](https://discuss.elastic.co/u/Mariusz_Liksza)\
**Replies:** 6\
**Last updated:** [October 22, 2021, 12:10pm UTC](https://discuss.elastic.co/t/how-to-perform-math-formula-in-elasticsearch-script-score-based-on-field-value-conditions/287034 "2021-10-22T12:10:44Z")

</div>

I would like to apply a simple math formula to all documents in Elasticsearch DB. The tricky thing is that each variables consists of multiply values which are at the same time person attributes. { "\_id" : "1",…

---

## [How do I ensure 'stop' word are not picked up in my searches](https://discuss.elastic.co/t/how-do-i-ensure-stop-word-are-not-picked-up-in-my-searches/108533)

<div class="topic-metadata">

**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\
**Replies:** 6\
**Last updated:** [November 21, 2017, 2:35pm UTC](https://discuss.elastic.co/t/how-do-i-ensure-stop-word-are-not-picked-up-in-my-searches/108533 "2017-11-21T14:35:26Z")

</div>

HI All, I have created the following index: put newsindex { "settings" : { "number\_of\_shards":3, "number\_of\_replicas":2, "analysis": { "filter": { "my\_stop": { "type": "stop", …

---

## [Update\_all\_type not working](https://discuss.elastic.co/t/update-all-type-not-working/61425)

<div class="topic-metadata">

**Author:** [@thinkabout](https://discuss.elastic.co/u/thinkabout)\
**Replies:** 6\
**Last updated:** [September 29, 2016, 12:23am UTC](https://discuss.elastic.co/t/update-all-type-not-working/61425 "2016-09-29T00:23:26Z")

</div>

Hi, I am using ElasticSearch and Kibana 5.0.0-alpha5. I have a "logevent" type which contains a "level" field. I want to update the field's "fielddata" to true. I tried the following statement PUT \*/\_mapping/logeve…

---

## [Not able to access 9200 and 5601 but connection with 9100 is fine](https://discuss.elastic.co/t/not-able-to-access-9200-and-5601-but-connection-with-9100-is-fine/192594)

<div class="topic-metadata">

**Author:** [@pchoix](https://discuss.elastic.co/u/pchoix)\
**Replies:** 2\
**Last updated:** [July 29, 2019, 11:05am UTC](https://discuss.elastic.co/t/not-able-to-access-9200-and-5601-but-connection-with-9100-is-fine/192594 "2019-07-29T11:05:02Z")

</div>

I am new to ELK and this forum, if my first post should be posted somewhere else, please feel free to do so and thank you in advance. I installed the following on a CentOS guest within my vmware in my desktop: elastics…

---

## [Scripted Field substring error](https://discuss.elastic.co/t/scripted-field-substring-error/186424)

<div class="topic-metadata">

**Author:** [@Chris4](https://discuss.elastic.co/u/Chris4)\
**Replies:** 2\
**Last updated:** [June 25, 2019, 6:42am UTC](https://discuss.elastic.co/t/scripted-field-substring-error/186424 "2019-06-25T06:42:20Z")

</div>

Iam trying to create a an scripted field "MatID" which should contain a substring of another field "epc.keyword" - if this exists. Most of the time this works fine but from time to time i get the following error alert a…

---

## [ES (2 nodes) in Docker: Setup + connection](https://discuss.elastic.co/t/es-2-nodes-in-docker-setup-connection/99189)

<div class="topic-metadata">

**Author:** [@dencowboy](https://discuss.elastic.co/u/dencowboy)\
**Replies:** 5\
**Last updated:** [September 6, 2017, 9:19pm UTC](https://discuss.elastic.co/t/es-2-nodes-in-docker-setup-connection/99189 "2017-09-06T21:19:56Z")

</div>

I’ve setup an ES cluster inside docker like described here: version: '2' services: elasticsearch1: image: docker.elastic.co/elasticsearch/elasticsearch:5.5.2 container\_name: elasticsearch1 environment: …

---

## [Index is not moving to warm phase](https://discuss.elastic.co/t/index-is-not-moving-to-warm-phase/325677)

<div class="topic-metadata">

**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\
**Replies:** 1\
**Last updated:** [February 16, 2023, 5:56am UTC](https://discuss.elastic.co/t/index-is-not-moving-to-warm-phase/325677 "2023-02-16T05:56:09Z")

</div>

I have an index, i have implemented ILM on that. I am not seeing index is not moving to warm phase after reaching out 8 days old. There are no errors to. { "emailer-lifecycle-policy" : { "version" : 1, "modifi…

---

## [Interacting with elasticsearch on EC2 via Java API](https://discuss.elastic.co/t/interacting-with-elasticsearch-on-ec2-via-java-api/28818)

<div class="topic-metadata">

**Author:** [@supernovae](https://discuss.elastic.co/u/supernovae)\
**Replies:** 3\
**Last updated:** [September 8, 2015, 8:17am UTC](https://discuss.elastic.co/t/interacting-with-elasticsearch-on-ec2-via-java-api/28818 "2015-09-08T08:17:35Z")

</div>

Hi, I wrote a program for deleting records according to their timestamp from an elasticsearch node running on an EC2 machine. When I run the program from my local machine, I can connect to the ES node via public IP addre…

---

## [Expected database \[GeoLite2-ASN.mmdb\] to not exist in](https://discuss.elastic.co/t/expected-database-geolite2-asn-mmdb-to-not-exist-in/183999)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 2\
**Last updated:** [June 4, 2019, 6:13pm UTC](https://discuss.elastic.co/t/expected-database-geolite2-asn-mmdb-to-not-exist-in/183999 "2019-06-04T18:13:15Z")

</div>

HI All, Is it me or is this a very confusing error message? Caused by: java.lang.RuntimeException: java.io.IOException: expected database \[GeoLite2-ASN.mmdb\] to not exist in \[/etc/elasticsearch/ingest-geoip\] Should th…

---

## [Failed to use SQLite input. \[SQLITE\_ERROR\] SQL error or missing database (no such table: since\_table)](https://discuss.elastic.co/t/failed-to-use-sqlite-input-sqlite-error-sql-error-or-missing-database-no-such-table-since-table/149039)

<div class="topic-metadata">

**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\
**Replies:** 2\
**Last updated:** [September 19, 2018, 2:54pm UTC](https://discuss.elastic.co/t/failed-to-use-sqlite-input-sqlite-error-sql-error-or-missing-database-no-such-table-since-table/149039 "2018-09-19T14:54:45Z")

</div>

So I used SQLite input to read my sqlite db. This is my configuration: input { sqlite { path =\> "/home/elk/data/dionaea.sqlite" type =\> dionaea-sqlite } } output { elasticsearch { hosts =\> \["10.33.…

---

## [Split series by object keys](https://discuss.elastic.co/t/split-series-by-object-keys/244941)

<div class="topic-metadata">

**Author:** [@Sebastian\_Stehle](https://discuss.elastic.co/u/Sebastian_Stehle)\
**Replies:** 1\
**Last updated:** [August 18, 2020, 8:38am UTC](https://discuss.elastic.co/t/split-series-by-object-keys/244941 "2020-08-18T08:38:33Z")

</div>

Hello, I do not use kibana that often, therefore sorry in advance for me stupid question. I am analyzing logs from an application. These logs sometimes contains profiler information, structure like this. { "logLev…

---

## [Multiple beats 1 input port with multiple index output](https://discuss.elastic.co/t/multiple-beats-1-input-port-with-multiple-index-output/171504)

<div class="topic-metadata">

**Author:** [@Pedro\_Cabral](https://discuss.elastic.co/u/Pedro_Cabral)\
**Replies:** 7\
**Last updated:** [March 8, 2019, 11:20pm UTC](https://discuss.elastic.co/t/multiple-beats-1-input-port-with-multiple-index-output/171504 "2019-03-08T23:20:04Z")

</div>

Hello does anyone knows if is it possible to have multiple beats pointing to the same input port and then having multiple index output. Basically I need to identify which beat arrives and then add a tag to then have a pr…

---

## [Connect to remote elasticsearch cluster](https://discuss.elastic.co/t/connect-to-remote-elasticsearch-cluster/160753)

<div class="topic-metadata">

**Author:** [@ichiban88](https://discuss.elastic.co/u/ichiban88)\
**Replies:** 7\
**Last updated:** [December 13, 2018, 10:29pm UTC](https://discuss.elastic.co/t/connect-to-remote-elasticsearch-cluster/160753 "2018-12-13T22:29:55Z")

</div>

I have an elasticsearch cluster running on an EC2 server. I get a variety of different error mesages when I try to connect. Currently, in the elasticsearch.yml file all the transport items are commented out but I have t…

[Previous page](https://discuss.elastic.co/top.md?page=674&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=676&per_page=50&period=all)
