# Top **URL:** https://discuss.elastic.co/top.md?page=685&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 686 --- ## [Logstash AWS GeoIP Issue?](https://discuss.elastic.co/t/logstash-aws-geoip-issue/29274)
**Author:** [@russK](https://discuss.elastic.co/u/russK)\ **Replies:** 7\ **Last updated:** [September 14, 2015, 10:46pm UTC](https://discuss.elastic.co/t/logstash-aws-geoip-issue/29274 "2015-09-14T22:46:11Z")
Hello, We're running an ELK cluster on AWS. We also run a single box with all of ELK on it to verify changes locally before pushing to the cloud. We're running into an issue where the local box can run the GeoIP2-City.… --- ## [cURL POST to Elasticsearch using AD credentials](https://discuss.elastic.co/t/curl-post-to-elasticsearch-using-ad-credentials/206036)
**Author:** [@Ty9000](https://discuss.elastic.co/u/Ty9000)\ **Replies:** 6\ **Last updated:** [October 31, 2019, 2:44pm UTC](https://discuss.elastic.co/t/curl-post-to-elasticsearch-using-ad-credentials/206036 "2019-10-31T14:44:05Z")
Elasticsearch and Kibana version 7.4.1 (same machine) Build type RPM Hello! Just some background - I have gotten Active Directory authentication working for Kibana, I can log in using AD username/password. I have also … --- ## [How to delete before 24 hours elasticsearch document](https://discuss.elastic.co/t/how-to-delete-before-24-hours-elasticsearch-document/118799)
**Author:** [@omid](https://discuss.elastic.co/u/omid)\ **Replies:** 6\ **Last updated:** [February 8, 2018, 2:20pm UTC](https://discuss.elastic.co/t/how-to-delete-before-24-hours-elasticsearch-document/118799 "2018-02-08T14:20:23Z")
hello Im would delete before 24 hours elasticsearch document And put this inside the cron what is the query " delete before 24 hours elasticsearch document" ?? --- ## [How to perform the mathematical operation on data from elasticsearch](https://discuss.elastic.co/t/how-to-perform-the-mathematical-operation-on-data-from-elasticsearch/122051)
**Author:** [@kish](https://discuss.elastic.co/u/kish)\ **Replies:** 4\ **Last updated:** [March 2, 2018, 12:35pm UTC](https://discuss.elastic.co/t/how-to-perform-the-mathematical-operation-on-data-from-elasticsearch/122051 "2018-03-02T12:35:13Z")
I need to have average of cpuload on specific nodetype. My data in elastic search is below. i.e if i give nodetype as 'tpt' it should give the average of cpuload of nodetype's of all tpt available. I tried different met… --- ## [Transport Clientによる検索を維持しつつノードを再起動したい](https://discuss.elastic.co/t/transport-client/941)
**Author:** [@bigwheel](https://discuss.elastic.co/u/bigwheel)\ **Replies:** 5\ **Last updated:** [May 21, 2015, 10:31am UTC](https://discuss.elastic.co/t/transport-client/941 "2015-05-21T10:31:47Z")
シチュエーション 3台のノードからなるクラスタにJavaのTransport Clientで接続（接続先IPアドレスに3つのノードすべてを列挙） 1台のノードをシャットダウン・起動 20%前後の確率で https://github.com/elastic/elasticsearch/issues/11202 のエラーがJava Client側で発生 概要 Javaアプリケーションを起動したまま、検索できる状態を維持しつ… --- ## [Continuously copy specific documents to another index?](https://discuss.elastic.co/t/continuously-copy-specific-documents-to-another-index/255765)
**Author:** [@Thomas\_D1](https://discuss.elastic.co/u/Thomas_D1)\ **Replies:** 8\ **Last updated:** [November 18, 2020, 9:28pm UTC](https://discuss.elastic.co/t/continuously-copy-specific-documents-to-another-index/255765 "2020-11-18T21:28:16Z")
Hi All, we're using Elasticsearch for storing our application logs using daily indexes, which we delete after two weeks. Now we would like to keep all logs with the loglevel "error" for another 2 months. We thought abo… --- ## [How to setup external remote cluster?](https://discuss.elastic.co/t/how-to-setup-external-remote-cluster/222016)
**Author:** [@Matthieu\_Paret](https://discuss.elastic.co/u/Matthieu_Paret)\ **Replies:** 8\ **Last updated:** [March 21, 2020, 6:19am UTC](https://discuss.elastic.co/t/how-to-setup-external-remote-cluster/222016 "2020-03-21T06:19:12Z")
Hello here, ECK added support to local remote cluster but how to manually add a remote cluster ? (both are running through ECK) How should we retrieve certificate and inject these into the other cluster ? Thanks if som… --- ## [Spatial queries with multiple locations per document](https://discuss.elastic.co/t/spatial-queries-with-multiple-locations-per-document/9387)
**Author:** [@marian](https://discuss.elastic.co/u/marian)\ **Replies:** 8\ **Last updated:** [October 18, 2012, 11:48am UTC](https://discuss.elastic.co/t/spatial-queries-with-multiple-locations-per-document/9387 "2012-10-18T11:48:41Z")
Hi! I'd like to store documents with multiple geo\_point properties in ElasticSearch. Then I want to query the documents so that only those documents are returned which have at least one geo\_point within a defined … --- ## [Decode json logs filebeat docker hints-based autodiscover](https://discuss.elastic.co/t/decode-json-logs-filebeat-docker-hints-based-autodiscover/185953)
**Author:** [@goekboet](https://discuss.elastic.co/u/goekboet)\ **Replies:** 3\ **Last updated:** [June 21, 2019, 8:09pm UTC](https://discuss.elastic.co/t/decode-json-logs-filebeat-docker-hints-based-autodiscover/185953 "2019-06-21T20:09:31Z")
TL;DR; Can I have filebeat via hint-based autodiscover ship my json-formatted logs like: { "@timestamp": "2019-06-15T19:48:04.963Z", "foo": "bar" } instead of: { "@timestamp": "2019-… --- ## [How to call elastic search API from custom Kibana Plugin](https://discuss.elastic.co/t/how-to-call-elastic-search-api-from-custom-kibana-plugin/166402)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 3\ **Last updated:** [February 3, 2019, 4:15pm UTC](https://discuss.elastic.co/t/how-to-call-elastic-search-api-from-custom-kibana-plugin/166402 "2019-02-03T16:15:09Z")
Hello Team, I have created a custom plugin (using plugin generator) and added control like textbox ( I am using elastic UI framework). I am able to read the data from these UI controls. I want to execute a search requ… --- ## [How to search with synonym analyzer](https://discuss.elastic.co/t/how-to-search-with-synonym-analyzer/67770)
**Author:** [@prasad\_kp](https://discuss.elastic.co/u/prasad_kp)\ **Replies:** 3\ **Last updated:** [December 1, 2016, 3:23pm UTC](https://discuss.elastic.co/t/how-to-search-with-synonym-analyzer/67770 "2016-12-01T15:23:08Z")
Here are my index setting and mapping M using the synonym analyzer over the fields and in search i want to search in all the fields of an index. analysis": { "filter": { "synonym": { "type": "synonym", … --- ## [Marketplace and dev center?](https://discuss.elastic.co/t/marketplace-and-dev-center/120124)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 0\ **Last updated:** [February 16, 2018, 8:47am UTC](https://discuss.elastic.co/t/marketplace-and-dev-center/120124 "2018-02-16T08:47:04Z")
I am using lot of community plugins, and it's always hard to deal with elasticsearch (or Kibana) version. Most of the time, we must change the version on the plugin code-source, and rebuild everything, and make the relea… --- ## [Logstash filters and booleans](https://discuss.elastic.co/t/logstash-filters-and-booleans/2333)
**Author:** [@efreedom](https://discuss.elastic.co/u/efreedom)\ **Replies:** 0\ **Last updated:** [June 10, 2015, 2:23pm UTC](https://discuss.elastic.co/t/logstash-filters-and-booleans/2333 "2015-06-10T14:23:59Z")
So, this works: filter { if \[type\] == "test" { grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:timestamp} %{LOGLEVEL:loglevel}%{SPACE}%{NOTSPACE:\\ classname}%{SPACE}%{NOTSPACE:pool} - %{GREEDYDATA:logms… --- ## [Metricbeat with AWS EFS](https://discuss.elastic.co/t/metricbeat-with-aws-efs/75950)
**Author:** [@Joey\_Coleman](https://discuss.elastic.co/u/Joey_Coleman)\ **Replies:** 6\ **Last updated:** [February 28, 2017, 7:31am UTC](https://discuss.elastic.co/t/metricbeat-with-aws-efs/75950 "2017-02-28T07:31:19Z")
Hey, has anyone configured metricbeat on a system with a AWS EFS share mounted? Because AWS shows that the volume has 9223372036854775808 bytes (8 Exabytes) free, I'm getting warnings like below showing up in the log. … --- ## [Hive select from ES on dynamic index failing: all nodes failed](https://discuss.elastic.co/t/hive-select-from-es-on-dynamic-index-failing-all-nodes-failed/49140)
**Author:** [@Keith.Hinde](https://discuss.elastic.co/u/Keith.Hinde)\ **Replies:** 6\ **Last updated:** [May 24, 2016, 9:58am UTC](https://discuss.elastic.co/t/hive-select-from-es-on-dynamic-index-failing-all-nodes-failed/49140 "2016-05-24T09:58:00Z")
Hive: v1.2.1.2.3.2.0-2950 ES-Hadoop: velasticsearch-hadoop-2.3.0.jar ES: v2.1.1 So, we have a three node cluster with a dynamically named index - e.g. 001, 002, 003 - each of which holds data related to a subset of cus… --- ## [How to use Logbook handler?](https://discuss.elastic.co/t/how-to-use-logbook-handler/146209)
**Author:** [@fr0der1c](https://discuss.elastic.co/u/fr0der1c)\ **Replies:** 7\ **Last updated:** [September 5, 2018, 3:20pm UTC](https://discuss.elastic.co/t/how-to-use-logbook-handler/146209 "2018-09-05T15:20:26Z")
I have a flask app and I'm using ElasticAPM to monitor it. There is only an example of LoggingHandler and no example of Logbook handler on the page: https://www.elastic.co/guide/en/apm/agent/python/current/flask-support… --- ## [Is there any way to do data sampling at client side?](https://discuss.elastic.co/t/is-there-any-way-to-do-data-sampling-at-client-side/50428)
**Author:** [@harshafrnd4u](https://discuss.elastic.co/u/harshafrnd4u)\ **Replies:** 7\ **Last updated:** [May 24, 2016, 8:41pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-do-data-sampling-at-client-side/50428 "2016-05-24T20:41:05Z")
Hi, Packetbeat is sending too much data to server, Is there any way to reduce data transmission to server either by aggregation or some sampling techniques in packebeat itself? Any suggestions or pointers will be he… --- ## [Exception in pipelineworker, the pipeline stopped processing new events](https://discuss.elastic.co/t/exception-in-pipelineworker-the-pipeline-stopped-processing-new-events/149082)
**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\ **Replies:** 1\ **Last updated:** [October 15, 2018, 4:45pm UTC](https://discuss.elastic.co/t/exception-in-pipelineworker-the-pipeline-stopped-processing-new-events/149082 "2018-10-15T16:45:38Z")
Hello, I have 50 pipes, and I get this error: \[2018-09-19T10:30:12,824\]\[ERROR\]\[logstash.pipeline \] Exception in pipelineworker, the pipeline stopped processing new events, please check your filter configuration… --- ## [Multiget (mget) API performance](https://discuss.elastic.co/t/multiget-mget-api-performance/289813)
**Author:** [@jon\_cabrera](https://discuss.elastic.co/u/jon_cabrera)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 2:02pm UTC](https://discuss.elastic.co/t/multiget-mget-api-performance/289813 "2021-11-23T14:02:22Z")
Hello! I am working on a search engine and I have introduced the use of the mget API to obtain a series of documents from a series of ids. My question is related to a series of issues that I have been able to observe i… --- ## [ES 7.8 X-Pack not returning whole cert chain root ca, intermediate and server cert](https://discuss.elastic.co/t/es-7-8-x-pack-not-returning-whole-cert-chain-root-ca-intermediate-and-server-cert/243475)
**Author:** [@mankuuuuu](https://discuss.elastic.co/u/mankuuuuu)\ **Replies:** 4\ **Last updated:** [August 5, 2020, 4:27am UTC](https://discuss.elastic.co/t/es-7-8-x-pack-not-returning-whole-cert-chain-root-ca-intermediate-and-server-cert/243475 "2020-08-05T04:27:56Z")
I am trying to enable TLS on the elasticsearch http layer but not able to get all the certificates in the certificate chain. Settings - xpack.security.enabled: true xpack.security.http.ssl.enabled: true xpa… --- ## [Multiple aggregate filter with same task\_id pattern doesn't share map](https://discuss.elastic.co/t/multiple-aggregate-filter-with-same-task-id-pattern-doesnt-share-map/171713)
**Author:** [@Andrey\_Tomilin](https://discuss.elastic.co/u/Andrey_Tomilin)\ **Replies:** 4\ **Last updated:** [March 11, 2019, 2:02pm UTC](https://discuss.elastic.co/t/multiple-aggregate-filter-with-same-task-id-pattern-doesnt-share-map/171713 "2019-03-11T14:02:53Z")
Here are events: Id: 0, Source: a, Status: 0 Id: 1, Source: a, Status: 1 Id: 2, Source: a, Status: 0 Id: 3, Source: a, Status: 1 Id: 4, Source: a, Status: 1 Id: 5, Source: a, Status: 0 Id: 6, Source: a, Status: 1 … --- ## [Kibana Visualization of bucket aggregation data](https://discuss.elastic.co/t/kibana-visualization-of-bucket-aggregation-data/320554)
**Author:** [@jos\_nubel007](https://discuss.elastic.co/u/jos_nubel007)\ **Replies:** 3\ **Last updated:** [December 13, 2022, 9:33am UTC](https://discuss.elastic.co/t/kibana-visualization-of-bucket-aggregation-data/320554 "2022-12-13T09:33:05Z")
I created an index that collects metrics for different applications and I visualize these metrics in Kibana. However, there is a field that contains bucket aggregation datas (something like that: Variable width histogram… --- ## [Not able to create an index of Metric beat in elasticsearch](https://discuss.elastic.co/t/not-able-to-create-an-index-of-metric-beat-in-elasticsearch/54648)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 3\ **Last updated:** [July 4, 2016, 3:05pm UTC](https://discuss.elastic.co/t/not-able-to-create-an-index-of-metric-beat-in-elasticsearch/54648 "2016-07-04T15:05:58Z")
Hi Experts, I have metricbeat-5.0.0-alpha4-linux-x86\_64 elasticsearch-2.3.3 kibana-4.5.1-linux-x64 Ubuntu So as suggested by the guide I have downloaded and configure metricbeat but unfortunately I am not able to c… --- ## [Logstashing windows event log](https://discuss.elastic.co/t/logstashing-windows-event-log/82705)
**Author:** [@rayback](https://discuss.elastic.co/u/rayback)\ **Replies:** 2\ **Last updated:** [April 19, 2017, 1:35pm UTC](https://discuss.elastic.co/t/logstashing-windows-event-log/82705 "2017-04-19T13:35:50Z")
I have a, event\_data.AccessMask : 0x1 in kibana. i want the value 0x1 to be stashed in a condition. however the field has a dot, (".") which I believe is frustrating me from getting the output that I need. I t… --- ## [Es\_rejected\_execution - elasticsearch not indexing or processing data](https://discuss.elastic.co/t/es-rejected-execution-elasticsearch-not-indexing-or-processing-data/87335)
**Author:** [@msvechla](https://discuss.elastic.co/u/msvechla)\ **Replies:** 6\ **Last updated:** [May 28, 2017, 9:27am UTC](https://discuss.elastic.co/t/es-rejected-execution-elasticsearch-not-indexing-or-processing-data/87335 "2017-05-28T09:27:47Z")
Hello, we are using elasticsearch to create daily indices of our logfiles. This means every night at 00:00 UTC all new indices are being created for the day. Since two days we are having issues in one of our clusters… --- ## [Index not refreshed. Query count result not accurate](https://discuss.elastic.co/t/index-not-refreshed-query-count-result-not-accurate/12081)
**Author:** [@garcimouche](https://discuss.elastic.co/u/garcimouche)\ **Replies:** 6\ **Last updated:** [November 13, 2014, 4:50pm UTC](https://discuss.elastic.co/t/index-not-refreshed-query-count-result-not-accurate/12081 "2014-11-13T16:50:22Z")
If anybody can shed a light on the following strange behavior: My index is updated every minute using a bulk processor with tens of documents per cycle. After 40 cycles or so, I noticed that my query doesn't count t… --- ## [Garbage collector issues](https://discuss.elastic.co/t/garbage-collector-issues/14407)
**Author:** [@vincent\_miszczak](https://discuss.elastic.co/u/vincent_miszczak)\ **Replies:** 6\ **Last updated:** [December 9, 2013, 1:39pm UTC](https://discuss.elastic.co/t/garbage-collector-issues/14407 "2013-12-09T13:39:22Z")
Hi, We are running Elasticsearch 0.90.2 on Debian 7.0/OpenJDK7u3 (2 nodes cluster). From time to time, Elasticsearch stop responding and the issue looks related to the Garbage Collector. Here are the informati… --- ## [Add a Calender to Dashboard](https://discuss.elastic.co/t/add-a-calender-to-dashboard/122527)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 4\ **Last updated:** [March 11, 2018, 6:11pm UTC](https://discuss.elastic.co/t/add-a-calender-to-dashboard/122527 "2018-03-11T18:11:13Z")
In some Kibana dashboard on the net, i see that 's possible to add a Calender to filter data by date. However i didn't find this option in the last version of kibana ? --- ## [Anyone using SystemD to ensure Elasticsearch is restarted if it crashes?](https://discuss.elastic.co/t/anyone-using-systemd-to-ensure-elasticsearch-is-restarted-if-it-crashes/98080)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 4\ **Last updated:** [August 23, 2017, 3:05pm UTC](https://discuss.elastic.co/t/anyone-using-systemd-to-ensure-elasticsearch-is-restarted-if-it-crashes/98080 "2017-08-23T15:05:00Z")
Hello all, not sure how good of an idea it is but I'm thinking of adding a few lines to the SystemD unit file for Elasticsearch so the service will automatically restart if it dies. Something like Restart ... \[Servi… --- ## [Filter winlogbeat by eventID](https://discuss.elastic.co/t/filter-winlogbeat-by-eventid/128770)
**Author:** [@PandKing](https://discuss.elastic.co/u/PandKing)\ **Replies:** 7\ **Last updated:** [April 30, 2018, 8:34pm UTC](https://discuss.elastic.co/t/filter-winlogbeat-by-eventid/128770 "2018-04-30T20:34:17Z")
Hi, I am sending wineventlogs to logstash at about 60k/m and we need to send about 100 matching eventID's to an output. It would be ugly to add 100 or statements to this filter and just wondering what the best way migh… --- ## [ELK-5.3.1 Kibana Tile map - No Compatable Fields: geo\_point](https://discuss.elastic.co/t/elk-5-3-1-kibana-tile-map-no-compatable-fields-geo-point/83288)
**Author:** [@lewis15](https://discuss.elastic.co/u/lewis15)\ **Replies:** 7\ **Last updated:** [May 18, 2017, 11:51am UTC](https://discuss.elastic.co/t/elk-5-3-1-kibana-tile-map-no-compatable-fields-geo-point/83288 "2017-05-18T11:51:28Z")
Running ELK Stack 5.3.1 I am unable to create a Tile map because Kibana is defaulting to Field geo-point. I have not been able to fine anything in the logs that makes any sense to me about what is wrong. Sorry, no pro… --- ## [Kibana connection failed](https://discuss.elastic.co/t/kibana-connection-failed/234419)
**Author:** [@murgocimark](https://discuss.elastic.co/u/murgocimark)\ **Replies:** 1\ **Last updated:** [May 28, 2020, 7:53am UTC](https://discuss.elastic.co/t/kibana-connection-failed/234419 "2020-05-28T07:53:42Z")
Hi. I'm using docker with a 3 nodes cluster with ES. I try to add kibana in docker.yml, but I cannot make it run. cluster state: { "name" : "elasticsearch-1", "cluster\_name" : "docker-cluster", "cluster\_uuid" : "kb… --- ## [Mapping definition for \[fields\] has unsupported parameters: \[analyzer : not\_standard\]](https://discuss.elastic.co/t/mapping-definition-for-fields-has-unsupported-parameters-analyzer-not-standard/204782)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 1\ **Last updated:** [October 23, 2019, 6:42am UTC](https://discuss.elastic.co/t/mapping-definition-for-fields-has-unsupported-parameters-analyzer-not-standard/204782 "2019-10-23T06:42:30Z")
Hi, "givenName": { "analyzer": "my\_analyzer", "type": "text", "fields": { "keyword": { "type": "keyword", … --- ## [How to find duplicate documents containing super long text fields?](https://discuss.elastic.co/t/how-to-find-duplicate-documents-containing-super-long-text-fields/154575)
**Author:** [@app-leks](https://discuss.elastic.co/u/app-leks)\ **Replies:** 3\ **Last updated:** [October 30, 2018, 8:42am UTC](https://discuss.elastic.co/t/how-to-find-duplicate-documents-containing-super-long-text-fields/154575 "2018-10-30T08:42:18Z")
Hi, the main question is in the title. Elasticsearch version: 6.2 I want to say that I've already tried to find information for this task, and actually I've found some, but for one or another reason it doesn't work for … --- ## [Detect when a Logstash pipeline is ready for input?](https://discuss.elastic.co/t/detect-when-a-logstash-pipeline-is-ready-for-input/285813)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 5\ **Last updated:** [October 6, 2021, 11:57am UTC](https://discuss.elastic.co/t/detect-when-a-logstash-pipeline-is-ready-for-input/285813 "2021-10-06T11:57:52Z")
Until recently, using Elastic 7.11.2, I've been using the following curl command line, in a Linux shell script, to detect whether Logstash is ready to ingest data: curl localhost:9600 2\> /dev/null (In a previous edit o… --- ## [Performance degradation when writing to AWS elasticsearch using elasticsearch-hadoop library](https://discuss.elastic.co/t/performance-degradation-when-writing-to-aws-elasticsearch-using-elasticsearch-hadoop-library/50298)
**Author:** [@manc](https://discuss.elastic.co/u/manc)\ **Replies:** 5\ **Last updated:** [July 28, 2016, 6:55pm UTC](https://discuss.elastic.co/t/performance-degradation-when-writing-to-aws-elasticsearch-using-elasticsearch-hadoop-library/50298 "2016-07-28T18:55:06Z")
Hi, I am using the es-hadoop library to write data to AWS elasticsearch through EMR. The input data is around 4 GB and the input split size is 64MB. I am using a map only job to write to ESOutputFormat. I can see that … --- ## [How do I query using Wildcard](https://discuss.elastic.co/t/how-do-i-query-using-wildcard/2654)
**Author:** [@Drammy](https://discuss.elastic.co/u/Drammy)\ **Replies:** 5\ **Last updated:** [June 17, 2015, 11:02am UTC](https://discuss.elastic.co/t/how-do-i-query-using-wildcard/2654 "2015-06-17T11:02:41Z")
Hi all, I have a query that I've got working nicely but returns no data if I use a wildcard. Do I have to enable wildcards somewhere or should I be using the wildcard query instead? If I need to use the wildcard qu… --- ## [How to delete all available Documents from index Type?](https://discuss.elastic.co/t/how-to-delete-all-available-documents-from-index-type/7453)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 5\ **Last updated:** [January 20, 2013, 1:37am UTC](https://discuss.elastic.co/t/how-to-delete-all-available-documents-from-index-type/7453 "2013-01-20T01:37:04Z")
Hi My index contain many index Type,I want to delete all document from given index type, i have try on following query: TermQueryBuilder termQueryBuilder = new TermQueryBuilder("\_type", indexType); … --- ## [Why .monitoring-es-7-mb-\* size is increasing?](https://discuss.elastic.co/t/why-monitoring-es-7-mb-size-is-increasing/285988)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [October 6, 2021, 10:08am UTC](https://discuss.elastic.co/t/why-monitoring-es-7-mb-size-is-increasing/285988 "2021-10-06T10:08:38Z")
Using metricbeat version 7.13.2 and elk version 7.13.2 I've installed and setup metricbeat in master nodes only Here is metricbeat.yml file ###################### Metricbeat Configuration Example #####################… --- ## [Exclude node from cluster routing allocation](https://discuss.elastic.co/t/exclude-node-from-cluster-routing-allocation/222242)
**Author:** [@qiratnahraf](https://discuss.elastic.co/u/qiratnahraf)\ **Replies:** 0\ **Last updated:** [March 5, 2020, 9:13am UTC](https://discuss.elastic.co/t/exclude-node-from-cluster-routing-allocation/222242 "2020-03-05T09:13:54Z")
Hi , for a maintenance activity we exclude a node from cluster routing allocation. When a node get back UP, we were not sure how to remove it from exclusion so we simply include it by using following command PUT /\_clus… --- ## [Translate filter plugin](https://discuss.elastic.co/t/translate-filter-plugin/167971)
**Author:** [@Michael.Swiss](https://discuss.elastic.co/u/Michael.Swiss)\ **Replies:** 5\ **Last updated:** [February 26, 2019, 4:55pm UTC](https://discuss.elastic.co/t/translate-filter-plugin/167971 "2019-02-26T16:55:54Z")
Dear colleagues I am using many translate filter plugins to mutate data in logstash. The filter requires me to create a dictionary file (.yaml) that contains 2 columns. That way I need lots of .yaml files. For me it wo… --- ## [Keeping a Constant variable across Log events?](https://discuss.elastic.co/t/keeping-a-constant-variable-across-log-events/35693)
**Author:** [@inderjeet26](https://discuss.elastic.co/u/inderjeet26)\ **Replies:** 6\ **Last updated:** [November 30, 2015, 3:43pm UTC](https://discuss.elastic.co/t/keeping-a-constant-variable-across-log-events/35693 "2015-11-30T15:43:40Z")
Hello, I want to have a constant value available for all the events getting processed by Logstash. So for example, I want to calculate the unique session IDs based on the Epoch time of the first event. Then subsequent … --- ## [🎉 Elastic 8.0: A new era of speed, scale, relevance, and simplicity](https://discuss.elastic.co/t/elastic-8-0-a-new-era-of-speed-scale-relevance-and-simplicity/297028)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 11:21pm UTC](https://discuss.elastic.co/t/elastic-8-0-a-new-era-of-speed-scale-relevance-and-simplicity/297028 "2022-02-11T23:21:12Z")
:tada: Elastic 8.0 is here: A new era of speed, scale, relevance, and simplicity We are pleased to announce the general availability of Elastic 8.0. With enhancements to Elasticsearch’s vector search capabilities, nativ… --- ## [Canvas Timefilter not allowing me to select a time range](https://discuss.elastic.co/t/canvas-timefilter-not-allowing-me-to-select-a-time-range/287165)
**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\ **Replies:** 8\ **Last updated:** [November 23, 2021, 4:05pm UTC](https://discuss.elastic.co/t/canvas-timefilter-not-allowing-me-to-select-a-time-range/287165 "2021-11-23T16:05:12Z")
Hi, This is an issue that has just happened recently and I am on v7.9.1. When I try and select a time range on my canvas workpad using the Timefilter, the dropdown with the range of values does not appear. All I can do … --- ## [Nest client not retrying with other nodes when master node abruptly crashes](https://discuss.elastic.co/t/nest-client-not-retrying-with-other-nodes-when-master-node-abruptly-crashes/273131)
**Author:** [@Johan\_Lindberg](https://discuss.elastic.co/u/Johan_Lindberg)\ **Replies:** 8\ **Last updated:** [May 24, 2021, 1:04pm UTC](https://discuss.elastic.co/t/nest-client-not-retrying-with-other-nodes-when-master-node-abruptly-crashes/273131 "2021-05-24T13:04:51Z")
We're using a three node Elasticsearch cluster v6.5.4 which seems to work fine. All master eligible. The clients use NEST for communication. But when our at the time master node died because of power shortage all clie… --- ## [Tune Kibana 4.4 to run on a t2 micro AWS EC2](https://discuss.elastic.co/t/tune-kibana-4-4-to-run-on-a-t2-micro-aws-ec2/41945)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 3\ **Last updated:** [March 6, 2016, 3:04am UTC](https://discuss.elastic.co/t/tune-kibana-4-4-to-run-on-a-t2-micro-aws-ec2/41945 "2016-03-06T03:04:25Z")
Hi all, I've been operating my Kibana on the same node as my first ES node for a while now. So the first node of ES is running all 3 components of ELK on the same machine. Recently I wanted to split off Kibana and L… --- ## [Updating data in elasticsearch from urllib2 (Python)](https://discuss.elastic.co/t/updating-data-in-elasticsearch-from-urllib2-python/16869)
**Author:** [@Josep\_Floriach\_Vento](https://discuss.elastic.co/u/Josep_Floriach_Vento)\ **Replies:** 3\ **Last updated:** [April 9, 2014, 2:15am UTC](https://discuss.elastic.co/t/updating-data-in-elasticsearch-from-urllib2-python/16869 "2014-04-09T02:15:15Z")
Hi everyone, I'm trying to do a simple update. With curl simply I put following command in console. curl -XPOST http://localhost:9200/peticiones-2014.04.08/logs/pJ\_T-Lt1QW6u3luxVrI\_ZQ/\_update -d '{"doc": { "… --- ## [Logstash-output-s3](https://discuss.elastic.co/t/logstash-output-s3/83545)
**Author:** [@ticktockhouse](https://discuss.elastic.co/u/ticktockhouse)\ **Replies:** 1\ **Last updated:** [April 28, 2017, 2:02pm UTC](https://discuss.elastic.co/t/logstash-output-s3/83545 "2017-04-28T14:02:44Z")
I'm seeing an issue with the above plugin, version 5.2. I'm running it in a docker container on kubernetes. It works for about 5 hours before crashing the container with errors like this: 09:51:44.250 \[\[main\]-pipeline-… --- ## [No Logstash init script - RHEL 6.10](https://discuss.elastic.co/t/no-logstash-init-script-rhel-6-10/139726)
**Author:** [@andrew\_michael](https://discuss.elastic.co/u/andrew_michael)\ **Replies:** 5\ **Last updated:** [July 16, 2018, 2:05pm UTC](https://discuss.elastic.co/t/no-logstash-init-script-rhel-6-10/139726 "2018-07-16T14:05:43Z")
Hi. We are running logstash version 5.5.0 on a RHEL 6.10 fully patched host. Oddly when I deploy the ELK stack all the other applications get init scripts put in /etc/init.d however logstash seems to put it's script in… --- ## [Logstash and flexlm log](https://discuss.elastic.co/t/logstash-and-flexlm-log/29766)
**Author:** [@el\_tunisiano38](https://discuss.elastic.co/u/el_tunisiano38)\ **Replies:** 4\ **Last updated:** [September 24, 2015, 2:05pm UTC](https://discuss.elastic.co/t/logstash-and-flexlm-log/29766 "2015-09-24T14:05:05Z")
Hi everyone, I am newbie at logstash and would like to parse a flexlm log file. The problem is the log is not easy to parse. (lmgrd) FlexNet Licensing blabla TIMESTAMP 06/12/2015 09:25:48 (MLM) OUT: "MATLAB" USER2@M… [Previous page](https://discuss.elastic.co/top.md?page=684&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=686&per_page=50&period=all)