# Top **URL:** https://discuss.elastic.co/top.md?page=704&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 705 --- ## [Custom JacksonJsonpMapper in RestClientTransport](https://discuss.elastic.co/t/custom-jacksonjsonpmapper-in-restclienttransport/336481)
**Author:** [@JaroslavHolan](https://discuss.elastic.co/u/JaroslavHolan)\ **Replies:** 2\ **Last updated:** [June 20, 2023, 2:24pm UTC](https://discuss.elastic.co/t/custom-jacksonjsonpmapper-in-restclienttransport/336481 "2023-06-20T14:24:42Z")
Hi, I need to help with how to pass my instance of JacksonJsonpMapper to RestClientTransport in Spring Java/Kotlin project. I have the following exception com.fasterxml.jackson.databind.exc.InvalidDefinitionException:… --- ## [ERROR: Pipelines YAML file must contain an array of pipeline configs. Found "Hash"](https://discuss.elastic.co/t/error-pipelines-yaml-file-must-contain-an-array-of-pipeline-configs-found-hash/272708)
**Author:** [@andcur](https://discuss.elastic.co/u/andcur)\ **Replies:** 2\ **Last updated:** [May 11, 2021, 3:33pm UTC](https://discuss.elastic.co/t/error-pipelines-yaml-file-must-contain-an-array-of-pipeline-configs-found-hash/272708 "2021-05-11T15:33:10Z")
Windows server: I have the following pipeline.yml file -pipeline.id: policylocalexposurehub path.config: "config/logstash-sample.conf" pipeline.workers: 1 error ERROR: Pipelines YAML file must contain an array of pip… --- ## [Exposing Kibana behind GKE ingress (UNHEALTHY state)](https://discuss.elastic.co/t/exposing-kibana-behind-gke-ingress-unhealthy-state/267684)
**Author:** [@lmes3oud](https://discuss.elastic.co/u/lmes3oud)\ **Replies:** 4\ **Last updated:** [March 22, 2021, 3:49pm UTC](https://discuss.elastic.co/t/exposing-kibana-behind-gke-ingress-unhealthy-state/267684 "2021-03-22T15:49:22Z")
Hi everyone, I'm trying to expose Kibana behind of a GCE ingress, but the ingress reporting the kibana service as UNHEALTHY while it is healthy and ready. Just note that the healthcheck created by the Ingress is still us… --- ## [Minimum should match is not working](https://discuss.elastic.co/t/minimum-should-match-is-not-working/193528)
**Author:** [@sballa](https://discuss.elastic.co/u/sballa)\ **Replies:** 4\ **Last updated:** [August 5, 2019, 8:11pm UTC](https://discuss.elastic.co/t/minimum-should-match-is-not-working/193528 "2019-08-05T20:11:56Z")
I have a query with an array of 'must' clauses. Two of those clauses have array of 'should' clauses in them as follows just providing pseuodocode here): must: \[ { clause 1 }, { clause 2 }, { bool: should: \[ {clause… --- ## [Logstash isn't starting](https://discuss.elastic.co/t/logstash-isnt-starting/45039)
**Author:** [@pierrejnelson](https://discuss.elastic.co/u/pierrejnelson)\ **Replies:** 4\ **Last updated:** [March 21, 2016, 8:20pm UTC](https://discuss.elastic.co/t/logstash-isnt-starting/45039 "2016-03-21T20:20:35Z")
Hello all, Pretty new to logstash but I fhave finally gotten my config to check out as ok with no issues or errors. Problem now is that logstash will not start. Below you will see that I check the config and then st… --- ## [Failed installing 'elasticsearch-service-x64' service 安装失败，为什么？](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service/137890)
**Author:** [@jintian](https://discuss.elastic.co/u/jintian)\ **Replies:** 1\ **Last updated:** [July 7, 2018, 2:36pm UTC](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service/137890 "2018-07-07T14:36:45Z")
D:\\elasticsearch-6.3.0\\bin\>elasticsearch-service install Installing service : "elasticsearch-service-x64" Using JAVA\_HOME (64-bit): "D:\\java\_jdk" -XX:+UseConcMarkSweepGC;-XX:CMSInitiatingOccupancyFraction=75;-X… --- ## [Kibana shuts itseself](https://discuss.elastic.co/t/kibana-shuts-itseself/56121)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 7\ **Last updated:** [July 24, 2016, 4:36pm UTC](https://discuss.elastic.co/t/kibana-shuts-itseself/56121 "2016-07-24T16:36:16Z")
Hi, Why does Kibana shuts itself down after a while even when I start it as a service? I used ./bin/kibana & to run it all times in the background unless shut down by the PID #. I am using linux machine How can I… --- ## [Limitation on Shards](https://discuss.elastic.co/t/limitation-on-shards/71600)
**Author:** [@amin3d](https://discuss.elastic.co/u/amin3d)\ **Replies:** 2\ **Last updated:** [January 16, 2017, 10:14am UTC](https://discuss.elastic.co/t/limitation-on-shards/71600 "2017-01-16T10:14:24Z")
In the name of Allah, Hi, Recently we've lost around 1m records, right now i'm looking for a reason that what happen to our data. I want to ask is there any Limitation on Shards, for example if it reaches to 1m record i… --- ## [How to slow down large amount of data coming from filebeat?](https://discuss.elastic.co/t/how-to-slow-down-large-amount-of-data-coming-from-filebeat/224970)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 5\ **Last updated:** [March 26, 2020, 9:37am UTC](https://discuss.elastic.co/t/how-to-slow-down-large-amount-of-data-coming-from-filebeat/224970 "2020-03-26T09:37:25Z")
Hi Team, How will you slow down large amount of data streaming from filebeat to logstash so that it can be processed accurately in filter section. Thanks and Regards, Sagar Mandal --- ## [Deleted .kibana\_2 index and now kibana stopped running](https://discuss.elastic.co/t/deleted-kibana-2-index-and-now-kibana-stopped-running/216329)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 5\ **Last updated:** [January 25, 2020, 1:31am UTC](https://discuss.elastic.co/t/deleted-kibana-2-index-and-now-kibana-stopped-running/216329 "2020-01-25T01:31:48Z")
I was deleting indexes and deleted .kibana\_2 and after that my kibana stopped running. I have another index .kibana\_1. Should I delete that too an drestart kibana? But how do i delete it? I cant access the dev tools page… --- ## [ElasticSearch indexing events from previous date into current date logstash-\* folder](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177)
**Author:** [@raghu\_ae](https://discuss.elastic.co/u/raghu_ae)\ **Replies:** 5\ **Last updated:** [November 24, 2015, 8:08pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177 "2015-11-24T20:08:31Z")
Elastic search is indexing the events from November 19th 2015, 18:00:00.000 into logstash-2015.11.20. Could you please let us know why events from previous date are getting indexed into current date? --- ## [How to search exact text?](https://discuss.elastic.co/t/how-to-search-exact-text/9950)
**Author:** [@Amy](https://discuss.elastic.co/u/Amy)\ **Replies:** 5\ **Last updated:** [December 5, 2012, 12:38pm UTC](https://discuss.elastic.co/t/how-to-search-exact-text/9950 "2012-12-05T12:38:25Z")
Hi, I've added the following 2 docs to my index: curl -XPUT localhost:9200/testindex/doc/3 -d '{"language":"it"}' curl -XPUT localhost:9200/testindex/doc/4 -d '{"language":"pp"}' I'd like to search for the docs by … --- ## [Installation of Kibana x-pack failed on windows 8.1](https://discuss.elastic.co/t/installation-of-kibana-x-pack-failed-on-windows-8-1/65151)
**Author:** [@mmsood99](https://discuss.elastic.co/u/mmsood99)\ **Replies:** 6\ **Last updated:** [November 11, 2016, 2:12pm UTC](https://discuss.elastic.co/t/installation-of-kibana-x-pack-failed-on-windows-8-1/65151 "2016-11-11T14:12:04Z")
Windows 8,1 From an cmd window with admin privilege: bin\\kibana-plugin.bat install x-pack Fails with: Plugin installation was unsuccessful due to error "EPERM: operation not permitte d, rename 'C:\\ElasticSearch\\kibana-… --- ## [/hostfs/sys/fs/cgroup/io.stat: input does not match format](https://discuss.elastic.co/t/hostfs-sys-fs-cgroup-io-stat-input-does-not-match-format/322837)
**Author:** [@litronics](https://discuss.elastic.co/u/litronics)\ **Replies:** 0\ **Last updated:** [January 10, 2023, 12:48pm UTC](https://discuss.elastic.co/t/hostfs-sys-fs-cgroup-io-stat-input-does-not-match-format/322837 "2023-01-10T12:48:02Z")
Hi, I am getting constantly the following errormessage in my metricbeat logs: \[elastic\_agent.metricbeat\]\[error\] error getting cgroup stats for V2: error fetching stats for controller io: error fetching IO stats: error … --- ## [Filebeat 7.11.1 registry log.json growing wild](https://discuss.elastic.co/t/filebeat-7-11-1-registry-log-json-growing-wild/264982)
**Author:** [@thesn](https://discuss.elastic.co/u/thesn)\ **Replies:** 0\ **Last updated:** [February 21, 2021, 12:27pm UTC](https://discuss.elastic.co/t/filebeat-7-11-1-registry-log-json-growing-wild/264982 "2021-02-21T12:27:31Z")
Hi, I just migrate from filebeat 7.8 (installed in host os) to filebeat 7.11 (installed in docker). I bind the volume in docker-compose for the registry and log files to be processed: version: "2.2" services: fi… --- ## [Terms Aggregation request returning empty Bucket list in Java TransportClient](https://discuss.elastic.co/t/terms-aggregation-request-returning-empty-bucket-list-in-java-transportclient/131963)
**Author:** [@najib](https://discuss.elastic.co/u/najib)\ **Replies:** 0\ **Last updated:** [May 15, 2018, 2:48pm UTC](https://discuss.elastic.co/t/terms-aggregation-request-returning-empty-bucket-list-in-java-transportclient/131963 "2018-05-15T14:48:36Z")
Hey there, I am using ES 6.2.4 with the Java TransportClient to perform a search request (through an inline Script). The search request has a Terms aggregation by field. When I run the search request in Kibana, I properl… --- ## [Delete documents in elasticsearch using logstash](https://discuss.elastic.co/t/delete-documents-in-elasticsearch-using-logstash/159162)
**Author:** [@vsingh](https://discuss.elastic.co/u/vsingh)\ **Replies:** 2\ **Last updated:** [December 4, 2018, 5:30am UTC](https://discuss.elastic.co/t/delete-documents-in-elasticsearch-using-logstash/159162 "2018-12-04T05:30:21Z")
Hello there, I am using elasticsearch 6.4.0 version on a single node windows machine. i am trying to delete documents from elastic search using logstash. delete.csv: id 20 21 logstash configuration file: input { … --- ## [Logstash Data parsing error - \_dateparsefailure](https://discuss.elastic.co/t/logstash-data-parsing-error--dateparsefailure/91492)
**Author:** [@aswinkumart](https://discuss.elastic.co/u/aswinkumart)\ **Replies:** 2\ **Last updated:** [July 6, 2017, 7:13pm UTC](https://discuss.elastic.co/t/logstash-data-parsing-error--dateparsefailure/91492 "2017-07-06T19:13:00Z")
I am trying to parse the Time format "timestamp" =\> "27/06/17 11:19:53:053 EDT" - I tried the following match pattarns in Logstash Filter but I am getting \_dateparsefailure error Filter in Logstash: -------------------… --- ## [Problem creating Watch - unable to parse \[search\] input](https://discuss.elastic.co/t/problem-creating-watch-unable-to-parse-search-input/57799)
**Author:** [@kodkod](https://discuss.elastic.co/u/kodkod)\ **Replies:** 2\ **Last updated:** [August 11, 2016, 12:36pm UTC](https://discuss.elastic.co/t/problem-creating-watch-unable-to-parse-search-input/57799 "2016-08-11T12:36:38Z")
Ahoy hoy everyone, I am unable to create a Watch both using Sense and the REST API as well as using elasticsearch-watcher-py - somehow I can't seem to get the search request right. I've also posted a question on stackove… --- ## [APM server producing errors (mapper\_parsing\_exception) when traces are sent through jaeger-agent](https://discuss.elastic.co/t/apm-server-producing-errors-mapper-parsing-exception-when-traces-are-sent-through-jaeger-agent/248457)
**Author:** [@Amirtheahmed](https://discuss.elastic.co/u/Amirtheahmed)\ **Replies:** 8\ **Last updated:** [September 15, 2020, 2:05am UTC](https://discuss.elastic.co/t/apm-server-producing-errors-mapper-parsing-exception-when-traces-are-sent-through-jaeger-agent/248457 "2020-09-15T02:05:20Z")
Kibana version: 7.9.1 Elasticsearch version: 7.9.1 APM Server version: 7.9.1 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Official docker images Description of the proble… --- ## [No .raw field](https://discuss.elastic.co/t/no-raw-field/49342)
**Author:** [@Andre\_de\_Martini](https://discuss.elastic.co/u/Andre_de_Martini)\ **Replies:** 3\ **Last updated:** [May 8, 2016, 7:45pm UTC](https://discuss.elastic.co/t/no-raw-field/49342 "2016-05-08T19:45:35Z")
Hi people!! Don't know why but my latest logstash/elasticsearch/kibana are not using the .raw fields (I guess that it is true by default isnt?). The real problem is that my string fields are been split by the spaces … --- ## [Filebeat detects file but keeps offset in 0](https://discuss.elastic.co/t/filebeat-detects-file-but-keeps-offset-in-0/66248)
**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\ **Replies:** 4\ **Last updated:** [November 17, 2016, 10:34am UTC](https://discuss.elastic.co/t/filebeat-detects-file-but-keeps-offset-in-0/66248 "2016-11-17T10:34:22Z")
Hey, recently i had a problem with elasticsearch where all shards were with RED flag. So i deleted everything from ES, deleted registry of filebeat and restarted everything. Right now the data is not being indexed in E… --- ## [How to list out / export all the fields along with data types](https://discuss.elastic.co/t/how-to-list-out-export-all-the-fields-along-with-data-types/325975)
**Author:** [@RajuParipelly](https://discuss.elastic.co/u/RajuParipelly)\ **Replies:** 7\ **Last updated:** [February 28, 2023, 10:20am UTC](https://discuss.elastic.co/t/how-to-list-out-export-all-the-fields-along-with-data-types/325975 "2023-02-28T10:20:19Z")
I have an index with 25000 fields and wanted to export all the fields into a csv file along with data type? is there any way to do this? --- ## [When getting a CompletedReindexResponse, I'm receiving an interesting message: Invalid NEST response built from a null ApiCall which is highly exceptional, please open a bug if you see this](https://discuss.elastic.co/t/when-getting-a-completedreindexresponse-im-receiving-an-interesting-message-invalid-nest-response-built-from-a-null-apicall-which-is-highly-exceptional-please-open-a-bug-if-you-see-this/248164)
**Author:** [@CollabcoAndy](https://discuss.elastic.co/u/CollabcoAndy)\ **Replies:** 7\ **Last updated:** [September 14, 2020, 7:59am UTC](https://discuss.elastic.co/t/when-getting-a-completedreindexresponse-im-receiving-an-interesting-message-invalid-nest-response-built-from-a-null-apicall-which-is-highly-exceptional-please-open-a-bug-if-you-see-this/248164 "2020-09-14T07:59:22Z")
Hi all, I'm exploring the NEST client currently and followed the code for ReindexOnServer here: https://www.elastic.co/guide/en/elasticsearch/client/net-api/current/reindexing-documents.html I have followed the code p… --- ## [Synonyms file location](https://discuss.elastic.co/t/synonyms-file-location/44379)
**Author:** [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Replies:** 7\ **Last updated:** [March 18, 2016, 11:19pm UTC](https://discuss.elastic.co/t/synonyms-file-location/44379 "2016-03-18T23:19:55Z")
We have client, master and data nodes in our cluster. Why does synonyms file need to be in each (client, master or data) node of the cluster? Why should the client node care for synonyms file? --- ## [Visual Builder : Time Series adding a static line](https://discuss.elastic.co/t/visual-builder-time-series-adding-a-static-line/187193)
**Author:** [@Johnnycc1](https://discuss.elastic.co/u/Johnnycc1)\ **Replies:** 2\ **Last updated:** [June 26, 2019, 10:40pm UTC](https://discuss.elastic.co/t/visual-builder-time-series-adding-a-static-line/187193 "2019-06-26T22:40:15Z")
Following on from the below question how do I create a static threshold line in visual builder like I would in timelion with .value(value=4.6) I tried to create a scripted field in kibana however that does not seem to… --- ## [Alert when data is missing?](https://discuss.elastic.co/t/alert-when-data-is-missing/307886)
**Author:** [@LionsELK](https://discuss.elastic.co/u/LionsELK)\ **Replies:** 3\ **Last updated:** [June 22, 2022, 2:07pm UTC](https://discuss.elastic.co/t/alert-when-data-is-missing/307886 "2022-06-22T14:07:13Z")
Hi all, Is there some form of functionality built into the ELK stack that can automatically alert me when data is missing? i.e. if we're missing a chunk of time like the image below. Currently, we're only made aware… --- ## [How to count the number of docs indexed per N seconds](https://discuss.elastic.co/t/how-to-count-the-number-of-docs-indexed-per-n-seconds/253631)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 6\ **Last updated:** [October 29, 2020, 6:31am UTC](https://discuss.elastic.co/t/how-to-count-the-number-of-docs-indexed-per-n-seconds/253631 "2020-10-29T06:31:45Z")
Hello, I would like to know how many documents are indexed per N seconds. So, I want to export/get statistics about the Elastic cluster performance. Is there a way to get these numbers? Is there a way to split these … --- ## [Kibana server failed to start](https://discuss.elastic.co/t/kibana-server-failed-to-start/202979)
**Author:** [@alecz](https://discuss.elastic.co/u/alecz)\ **Replies:** 6\ **Last updated:** [October 11, 2019, 8:52am UTC](https://discuss.elastic.co/t/kibana-server-failed-to-start/202979 "2019-10-11T08:52:13Z")
Could you please help check below error? Thank you in advance. LOG {"type":"log","@timestamp":"2019-10-10T08:10:06Z","tags":\["info","migrations"\],"pid":9,"message":"Creating index .kibana\_1."} {"type":"log","@timesta… --- ## [Elasticsearch still writing to same index even After index rollover](https://discuss.elastic.co/t/elasticsearch-still-writing-to-same-index-even-after-index-rollover/124844)
**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\ **Replies:** 6\ **Last updated:** [March 20, 2018, 9:36pm UTC](https://discuss.elastic.co/t/elasticsearch-still-writing-to-same-index-even-after-index-rollover/124844 "2018-03-20T21:36:32Z")
Hello Experts, I am writing data into elastic search using logstash(see below) and using index template to enable some settings and aliases. Logstash output: output { elasticsearch { hosts =\> "10.1.27.6:9200" index… --- ## [Compile rate limit for painless scripts](https://discuss.elastic.co/t/compile-rate-limit-for-painless-scripts/263421)
**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 3:30pm UTC](https://discuss.elastic.co/t/compile-rate-limit-for-painless-scripts/263421 "2021-02-24T15:30:03Z")
Hi team, For one of our update use cases, we were benchmarking painless scripts to check to what extent we can scale them. In our experiments, I had 200 scripts, each with a '\\n' character difference, and each script wa… --- ## [Forcemerge of segments cause cluster to RED status](https://discuss.elastic.co/t/forcemerge-of-segments-cause-cluster-to-red-status/184449)
**Author:** [@Alex\_Doe](https://discuss.elastic.co/u/Alex_Doe)\ **Replies:** 8\ **Last updated:** [June 11, 2019, 1:16pm UTC](https://discuss.elastic.co/t/forcemerge-of-segments-cause-cluster-to-red-status/184449 "2019-06-11T13:16:37Z")
Hi all. I have 7 node cluster with elasticsearch version 7.1.1 which was upgraded from 6.7.2. Each node has 31gb heap size. Cluster contains 75 daily indexes 7 shards each and 1 replica shard. Each index has 500gb data. … --- ## [Extra keys not allowed @ data\['actions'\]. Check configuration file when curator start](https://discuss.elastic.co/t/extra-keys-not-allowed-data-actions-check-configuration-file-when-curator-start/228288)
**Author:** [@Win32Sector](https://discuss.elastic.co/u/Win32Sector)\ **Replies:** 2\ **Last updated:** [April 17, 2020, 5:12am UTC](https://discuss.elastic.co/t/extra-keys-not-allowed-data-actions-check-configuration-file-when-curator-start/228288 "2020-04-17T05:12:29Z")
Hello! I try to setup curator to delete old indices, but I receive error extra keys not allowed @ data\['actions'\]. Check configuration file No handlers could be found for logger "curator.validators.SchemaCheck" … --- ## [Watcher - how to call values out of the aggregation that triggers an alert into xml for a webhook action](https://discuss.elastic.co/t/watcher-how-to-call-values-out-of-the-aggregation-that-triggers-an-alert-into-xml-for-a-webhook-action/67549)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 2\ **Last updated:** [December 2, 2016, 9:08pm UTC](https://discuss.elastic.co/t/watcher-how-to-call-values-out-of-the-aggregation-that-triggers-an-alert-into-xml-for-a-webhook-action/67549 "2016-12-02T21:08:28Z")
Hi elastic community! We have watcher alerts now hooked up to an internal alerting/ticketing system using webhook with an xml body. That is all working. I'm wondering how I can call values from the aggregations that … --- ## [Why auto delete the monitoring data(7 days) about es and kibana how to change it](https://discuss.elastic.co/t/why-auto-delete-the-monitoring-data-7-days-about-es-and-kibana-how-to-change-it/103281)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 3\ **Last updated:** [October 10, 2017, 3:00am UTC](https://discuss.elastic.co/t/why-auto-delete-the-monitoring-data-7-days-about-es-and-kibana-how-to-change-it/103281 "2017-10-10T03:00:47Z")
\[2017-10-10T01:00:00,001\]\[INFO \]\[o.e.x.m.e.l.LocalExporter\] cleaning up \[2\] old indices \[2017-10-10T01:00:00,003\]\[INFO \]\[o.e.c.m.MetaDataDeleteIndexService\] \[xxx.xxx\] \[.monitoring-kibana-2-2017.10.02/ozkaTfbFRb2u35iQclZv… --- ## [Osquery Live queries: windows endpoints not responding 'action undefined'](https://discuss.elastic.co/t/osquery-live-queries-windows-endpoints-not-responding-action-undefined/296087)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 7\ **Last updated:** [February 7, 2022, 2:40pm UTC](https://discuss.elastic.co/t/osquery-live-queries-windows-endpoints-not-responding-action-undefined/296087 "2022-02-07T14:40:39Z")
Hello, I installed Osquery manager integration on my endpoints, for linux it worked like magic, while on the windows I get the following results With no errors reported on log files (elastic-agent, osquerybeat, o… --- ## [I want to get the exact distinct count and the docs in query](https://discuss.elastic.co/t/i-want-to-get-the-exact-distinct-count-and-the-docs-in-query/246330)
**Author:** [@nandalapadu\_shamriya](https://discuss.elastic.co/u/nandalapadu_shamriya)\ **Replies:** 7\ **Last updated:** [August 28, 2020, 5:49pm UTC](https://discuss.elastic.co/t/i-want-to-get-the-exact-distinct-count-and-the-docs-in-query/246330 "2020-08-28T17:49:16Z")
I am new to ES,i have a requirement where i need to get the distinct values and distinct exact count of records till 60000 from elastic search query but my query is always returning the approximate counts only.Can some o… --- ## [RedHat OpenShift fluentd to ECE connection configuration](https://discuss.elastic.co/t/redhat-openshift-fluentd-to-ece-connection-configuration/195230)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 7\ **Last updated:** [August 15, 2019, 3:49pm UTC](https://discuss.elastic.co/t/redhat-openshift-fluentd-to-ece-connection-configuration/195230 "2019-08-15T15:49:38Z")
Does anyone have any experience with getting OpenShift thats using fluentd as an ingest pipeline processor to connect to ECE? Since fluentd is very similar to logstash I have a logstash config that is working, in that i… --- ## [Logstash/rsyslog/json](https://discuss.elastic.co/t/logstash-rsyslog-json/106009)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 7\ **Last updated:** [November 6, 2017, 1:17pm UTC](https://discuss.elastic.co/t/logstash-rsyslog-json/106009 "2017-11-06T13:17:30Z")
Hi All, I was trying to setup rsyslog in elasticstack ,so I was trying to follow this article, my logstash conf looks exactly similar to the article. My logstash conf ,,, input { udp { host =\> "private ip" … --- ## [Snapshot & Restore clarification](https://discuss.elastic.co/t/snapshot-restore-clarification/38866)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 7\ **Last updated:** [June 8, 2017, 9:46am UTC](https://discuss.elastic.co/t/snapshot-restore-clarification/38866 "2017-06-08T09:46:41Z")
Hi all, We are using Elasticsearch 1.7.2 in Prod and having 3 master nodes, 3 data nodes & 1 client node. ES cluster has 3 indices such as, Index name Primary size Shards es\_chr, 2 GB … --- ## [Filebeat modules Threatintel "Exiting: module threatintel is configured but has no enabled filesets"](https://discuss.elastic.co/t/filebeat-modules-threatintel-exiting-module-threatintel-is-configured-but-has-no-enabled-filesets/304100)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 5\ **Last updated:** [May 20, 2022, 12:47am UTC](https://discuss.elastic.co/t/filebeat-modules-threatintel-exiting-module-threatintel-is-configured-but-has-no-enabled-filesets/304100 "2022-05-20T00:47:25Z")
I'm trying to activate the threatintel filebeat module for mining some data of otx alienvault, my module configuration looks like: - module: threatintel otx: enabled: true var.input: httpjson var.url: http… --- ## [Upgrade ES version managed by ECK on terraform - all pods terminated](https://discuss.elastic.co/t/upgrade-es-version-managed-by-eck-on-terraform-all-pods-terminated/320897)
**Author:** [@Roberto\_D\_Arco](https://discuss.elastic.co/u/Roberto_D_Arco)\ **Replies:** 6\ **Last updated:** [December 15, 2022, 11:19am UTC](https://discuss.elastic.co/t/upgrade-es-version-managed-by-eck-on-terraform-all-pods-terminated/320897 "2022-12-15T11:19:36Z")
Hello everyone, Our current Production Elasticsearch cluster for logs collection is manually managed and runs on AWS. I'm creating the same cluster using ECK deployed with Helm under Terraform. I was able to get all t… --- ## [Java Agent: No data has been received from agents yet](https://discuss.elastic.co/t/java-agent-no-data-has-been-received-from-agents-yet/267914)
**Author:** [@Willliam](https://discuss.elastic.co/u/Willliam)\ **Replies:** 6\ **Last updated:** [March 22, 2021, 2:04pm UTC](https://discuss.elastic.co/t/java-agent-no-data-has-been-received-from-agents-yet/267914 "2021-03-22T14:04:48Z")
Kibana version: 7.11.1 Elasticsearch version: 7.11.1 APM Server version: 7.11.2 APM Agent language and version: Java 1.21.0 Browser version: Google Chrome is up to date Version 89.0.4389.90 (Official Build) (64-bit) … --- ## [Appdynamics data into elasticsearch](https://discuss.elastic.co/t/appdynamics-data-into-elasticsearch/136922)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 6\ **Last updated:** [June 25, 2018, 4:50am UTC](https://discuss.elastic.co/t/appdynamics-data-into-elasticsearch/136922 "2018-06-25T04:50:29Z")
Hey Guys, I have been trying to get appdynamics (APM tool) data into elasticsearch through logstash. We are using appdynamics rest api for consuming the data through GET method. Everything looks ok, but when i run the… --- ## [Elasticsearch for small datasets?](https://discuss.elastic.co/t/elasticsearch-for-small-datasets/246139)
**Author:** [@Courtan](https://discuss.elastic.co/u/Courtan)\ **Replies:** 4\ **Last updated:** [August 26, 2020, 8:05am UTC](https://discuss.elastic.co/t/elasticsearch-for-small-datasets/246139 "2020-08-26T08:05:00Z")
I've just implemented an autocomplete suggestion using Elasticsearch which works like a charm. The index-size is just about 100kb, containing about 500 filter-combinations which clients then use to make further requests… --- ## [Reindex keep mapping](https://discuss.elastic.co/t/reindex-keep-mapping/84904)
**Author:** [@rolandgolla](https://discuss.elastic.co/u/rolandgolla)\ **Replies:** 4\ **Last updated:** [May 9, 2017, 8:36am UTC](https://discuss.elastic.co/t/reindex-keep-mapping/84904 "2017-05-09T08:36:32Z")
Hi, when i reindex a index the mapping infos of the fields are lost. So my query on the new index are not working. What can i do? --- ## [Split on multiple fields logstash. Is it possible?](https://discuss.elastic.co/t/split-on-multiple-fields-logstash-is-it-possible/2428)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 4\ **Last updated:** [June 11, 2015, 12:06pm UTC](https://discuss.elastic.co/t/split-on-multiple-fields-logstash-is-it-possible/2428 "2015-06-11T12:06:12Z")
Fields are like: Time\_FV: \[0, 200,300,400\] Progess\_FV: \[10, 20,30,40\] Time\_RV: \[0, 200,300,400, 500\] Progess\_RV: \[10, 20,30,40, 90\] Can I use split {} for multiple fields? if not any possible way out. split { field =\>… --- ## [What is the grok pattern for the IIS Logs](https://discuss.elastic.co/t/what-is-the-grok-pattern-for-the-iis-logs/249492)
**Author:** [@Dubru](https://discuss.elastic.co/u/Dubru)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 7:32am UTC](https://discuss.elastic.co/t/what-is-the-grok-pattern-for-the-iis-logs/249492 "2020-09-25T07:32:06Z")
Hi, What is the grok pattern for the following log, as I am new to grok patterns I would need help in making the them. date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip… --- ## [Unique count on field, not on field.keyword](https://discuss.elastic.co/t/unique-count-on-field-not-on-field-keyword/200417)
**Author:** [@Dani\_Ruse](https://discuss.elastic.co/u/Dani_Ruse)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 1:43pm UTC](https://discuss.elastic.co/t/unique-count-on-field-not-on-field-keyword/200417 "2019-09-23T13:43:13Z")
Hello! I am new to Kibana and I need to make a visualization showing the number of unique logs (with respect to the message). The logs retrieved by my search/query contain a field called "message", all of them having t… --- ## [How to open markdown link in new page](https://discuss.elastic.co/t/how-to-open-markdown-link-in-new-page/84951)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 2\ **Last updated:** [May 9, 2017, 7:05am UTC](https://discuss.elastic.co/t/how-to-open-markdown-link-in-new-page/84951 "2017-05-09T07:05:12Z")
Hi experts, I am using Kibana 5.3 and I want to open link in a new tab using kibana Markdown visualization. This is what I tried google\_link{:target="\_blank"} I also tried HTML (code: googlelink ) but nothing works… [Previous page](https://discuss.elastic.co/top.md?page=703&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=705&per_page=50&period=all)