# Top

**URL:** https://discuss.elastic.co/top.md?page=708&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 709

---

## [RegEx / RegExp NOT Condition Help](https://discuss.elastic.co/t/regex-regexp-not-condition-help/153588)

<div class="topic-metadata">

**Author:** [@Phil\_Halford](https://discuss.elastic.co/u/Phil_Halford)\
**Replies:** 1\
**Last updated:** [October 25, 2018, 8:17am UTC](https://discuss.elastic.co/t/regex-regexp-not-condition-help/153588 "2018-10-25T08:17:52Z")

</div>

Hi everyone, I'm struggling to figure this out having spent many hours looking at it. Essentially, I have a winlogbeat.yml configuration to drop multiple events. This has been working fine for months. I wanted to add an…

---

## [Mutate converts integer to string](https://discuss.elastic.co/t/mutate-converts-integer-to-string/123092)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 4\
**Last updated:** [March 10, 2018, 8:38pm UTC](https://discuss.elastic.co/t/mutate-converts-integer-to-string/123092 "2018-03-10T20:38:32Z")

</div>

We have the following filter (Logstash 6.2 Windows): if \[category\] == "hybrisserver" and \[raw\] =~ "Starting up hybris server" { mutate { update =\> {"priority" =\> 2 "category" =\> "ServerStart" } } } The incoming events…

---

## [Sending data from CSV to Elasticsearch](https://discuss.elastic.co/t/sending-data-from-csv-to-elasticsearch/92405)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 4\
**Last updated:** [July 11, 2017, 2:24am UTC](https://discuss.elastic.co/t/sending-data-from-csv-to-elasticsearch/92405 "2017-07-11T02:24:55Z")

</div>

I have several logs in my windows machine which must be send to my elasticsearch server. Right now I am using nxlog and td-agent for transporting data. But I want to learn on Beats. I already installed beats with def…

---

## [Windows log visualization for a number of events per day](https://discuss.elastic.co/t/windows-log-visualization-for-a-number-of-events-per-day/207044)

<div class="topic-metadata">

**Author:** [@forestgump](https://discuss.elastic.co/u/forestgump)\
**Replies:** 2\
**Last updated:** [November 11, 2019, 2:56am UTC](https://discuss.elastic.co/t/windows-log-visualization-for-a-number-of-events-per-day/207044 "2019-11-11T02:56:30Z")

</div>

Hi, I am new to Kibana and I am trying to visualize on how many times a particular windows event happened per day. For an example lets say I want to count the number of successful logons for a server per day. The relev…

---

## [EDIT query as DSL in Kibana](https://discuss.elastic.co/t/edit-query-as-dsl-in-kibana/214541)

<div class="topic-metadata">

**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\
**Replies:** 1\
**Last updated:** [January 10, 2020, 6:51pm UTC](https://discuss.elastic.co/t/edit-query-as-dsl-in-kibana/214541 "2020-01-10T18:51:14Z")

</div>

Hi i want to write queries directly in DSL to add filters in kibana vizualisations. for eg below screen shot talks about a query which is phrase type. i achieved this by just creating one filter using the default opti…

---

## [Setup-passwords runs multiple times. It's not supposed to?](https://discuss.elastic.co/t/setup-passwords-runs-multiple-times-its-not-supposed-to/109497)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 7\
**Last updated:** [November 29, 2017, 11:37pm UTC](https://discuss.elastic.co/t/setup-passwords-runs-multiple-times-its-not-supposed-to/109497 "2017-11-29T23:37:55Z")

</div>

In the documentation on https://www.elastic.co/guide/en/x-pack/current/setting-up-authentication.html, it says, "After you set a password for the elastic user, the bootstrap password is no longer valid; you cannot run th…

---

## [\*noob\* is this the correct usage of bool?](https://discuss.elastic.co/t/noob-is-this-the-correct-usage-of-bool/40451)

<div class="topic-metadata">

**Author:** [@basiclaser](https://discuss.elastic.co/u/basiclaser)\
**Replies:** 7\
**Last updated:** [February 5, 2016, 8:05pm UTC](https://discuss.elastic.co/t/noob-is-this-the-correct-usage-of-bool/40451 "2016-02-05T20:05:24Z")

</div>

Hi guys! First post. http://hastebin.com/ufasuxudel.vhdl I’m trying to check for almost-matching phrases, followed by almost-matching words - is that a correct way of using bool ? thanks. My main confusion is s…

---

## [Formal Grammar of Query DSL?](https://discuss.elastic.co/t/formal-grammar-of-query-dsl/17133)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 2\
**Last updated:** [April 22, 2014, 8:50pm UTC](https://discuss.elastic.co/t/formal-grammar-of-query-dsl/17133 "2014-04-22T20:50:28Z")

</div>

Hi, is there available any formal grammar of Query DSL for Elasticsearch? (may be a PEG one \[1\] could be a good fit?) Regards, Lukas \[1\] http://en.wikipedia.org/wiki/Parsing\_expression\_grammar -- You rece…

---

## [Transform - can I "group by" splitting values in one row?](https://discuss.elastic.co/t/transform-can-i-group-by-splitting-values-in-one-row/231383)

<div class="topic-metadata">

**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\
**Replies:** 8\
**Last updated:** [May 14, 2020, 12:26pm UTC](https://discuss.elastic.co/t/transform-can-i-group-by-splitting-values-in-one-row/231383 "2020-05-14T12:26:32Z")

</div>

I'd like to add a dimension (a single field in each document with values, "buy" or "sell") to create 2 values in a single output record/row. So in Excel, this would look like splitting a value into 2 columns. Is this p…

---

## [Showing Values on a graph/chart](https://discuss.elastic.co/t/showing-values-on-a-graph-chart/24296)

<div class="topic-metadata">

**Author:** [@pickett](https://discuss.elastic.co/u/pickett)\
**Replies:** 3\
**Last updated:** [April 27, 2017, 3:53pm UTC](https://discuss.elastic.co/t/showing-values-on-a-graph-chart/24296 "2017-04-27T15:53:59Z")

</div>

New to kibana - how do I get a value to show on each slice - current image I searched and found this example that shows what I mean - values in both the legend and on the actual chart:

---

## [No result found in Kibana dashboard](https://discuss.elastic.co/t/no-result-found-in-kibana-dashboard/70535)

<div class="topic-metadata">

**Author:** [@OucemaBellagha](https://discuss.elastic.co/u/OucemaBellagha)\
**Replies:** 3\
**Last updated:** [January 5, 2017, 2:39pm UTC](https://discuss.elastic.co/t/no-result-found-in-kibana-dashboard/70535 "2017-01-05T14:39:00Z")

</div>

4.1.1\*\*\*\*Centos 7.3: Centralized logging for IPA https://www.freeipa.org/page/Centralized\_Logging Docker container for REK stack pschiffe/rsyslog-elasticsearch-kibana Log forwarding confgiuration on IPA server S…

---

## [Protocol for ISO messages](https://discuss.elastic.co/t/protocol-for-iso-messages/52685)

<div class="topic-metadata">

**Author:** [@Julian\_3](https://discuss.elastic.co/u/Julian_3)\
**Replies:** 3\
**Last updated:** [June 14, 2016, 1:11pm UTC](https://discuss.elastic.co/t/protocol-for-iso-messages/52685 "2016-06-14T13:11:42Z")

</div>

has anyone started work on an a parser for ISO messages, more specifically ISO8583 ? im interested to use packetBeat for realtime transaction statistics and monitoring, just didn't want to re-invent the wheel if its alre…

---

## [Timeseries data aggregation](https://discuss.elastic.co/t/timeseries-data-aggregation/86527)

<div class="topic-metadata">

**Author:** [@Soumitra](https://discuss.elastic.co/u/Soumitra)\
**Replies:** 5\
**Last updated:** [May 23, 2017, 1:14pm UTC](https://discuss.elastic.co/t/timeseries-data-aggregation/86527 "2017-05-23T13:14:40Z")

</div>

Hello, I have timeseries metrics about memory usage by processes. Here are the fields: - timestamp when the sample was taken - userid - process id - memory of process id at time Here are few samples in CSV for…

---

## [Head & KOPF Plugin](https://discuss.elastic.co/t/head-kopf-plugin/198583)

<div class="topic-metadata">

**Author:** [@tpngx](https://discuss.elastic.co/u/tpngx)\
**Replies:** 4\
**Last updated:** [September 13, 2019, 6:26am UTC](https://discuss.elastic.co/t/head-kopf-plugin/198583 "2019-09-13T06:26:53Z")

</div>

I've installed Elasticsearch 7.3 on a Ubuntu box with Kibana. Each time I run elastic I get this error, "\[elasticsearch.version\] is missing for plugin \[head\]". I had the same error for KOPF which lead down a rabbit hole …

---

## [Elastic Search 5.6.x : index.mapping.single\_type](https://discuss.elastic.co/t/elastic-search-5-6-x-index-mapping-single-type/137364)

<div class="topic-metadata">

**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\
**Replies:** 4\
**Last updated:** [June 26, 2018, 6:59pm UTC](https://discuss.elastic.co/t/elastic-search-5-6-x-index-mapping-single-type/137364 "2018-06-26T18:59:09Z")

</div>

Hi, I am migrating to 5.6.10 from 5.2.2, what is Default value for: index.mapping.single\_type Thanks. Amit Sinha.

---

## [Undefined method \`close' for nil:NilClass](https://discuss.elastic.co/t/undefined-method-close-for-nil-nilclass/45564)

<div class="topic-metadata">

**Author:** [@KiraHort](https://discuss.elastic.co/u/KiraHort)\
**Replies:** 4\
**Last updated:** [March 28, 2016, 1:50pm UTC](https://discuss.elastic.co/t/undefined-method-close-for-nil-nilclass/45564 "2016-03-28T13:50:24Z")

</div>

Hi everyone. I'm a beginner in Logstash and I have some problem with it. It's, returning "The error reported is: undefined method \`close' for nil:NilClass". The full report is: The error reported is: undefined method…

---

## [Kibana-keystore password view option in Elastic 7.13.1](https://discuss.elastic.co/t/kibana-keystore-password-view-option-in-elastic-7-13-1/285539)

<div class="topic-metadata">

**Author:** [@tsahoo43](https://discuss.elastic.co/u/tsahoo43)\
**Replies:** 2\
**Last updated:** [September 30, 2021, 10:56pm UTC](https://discuss.elastic.co/t/kibana-keystore-password-view-option-in-elastic-7-13-1/285539 "2021-09-30T22:56:30Z")

</div>

Hi Team, I have created the "kibana-keystore" file and stored the Elasticsearch username and Elasticsearch password in it . Could anyone please explain the process to view the stored password from the keystore . Thank…

---

## [Dealing with multiple date fields](https://discuss.elastic.co/t/dealing-with-multiple-date-fields/250795)

<div class="topic-metadata">

**Author:** [@79g](https://discuss.elastic.co/u/79g)\
**Replies:** 6\
**Last updated:** [October 5, 2020, 10:59am UTC](https://discuss.elastic.co/t/dealing-with-multiple-date-fields/250795 "2020-10-05T10:59:46Z")

</div>

Hello, We are dealing with an index that contains multiple date type fields. The structure, summarized, is below: ... "entry\_date": { "type": "date", "ignore\_malformed": false, "format": "yyy…

---

## [grok/KV filter for multiple values](https://discuss.elastic.co/t/grok-kv-filter-for-multiple-values/206109)

<div class="topic-metadata">

**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\
**Replies:** 6\
**Last updated:** [November 1, 2019, 4:17pm UTC](https://discuss.elastic.co/t/grok-kv-filter-for-multiple-values/206109 "2019-11-01T16:17:15Z")

</div>

For the nginx extended logs, I am using below grok pattern and KV pattern. But the value sometimes comes as '-' , some time real values and hypen + value. %{GREEDYDATA:\[nginx\]\[access\]\[message\]}' Log - 3 types rt=0.006 …

---

## [Running X-Pack on Cluster in an Enclave](https://discuss.elastic.co/t/running-x-pack-on-cluster-in-an-enclave/91949)

<div class="topic-metadata">

**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\
**Replies:** 7\
**Last updated:** [July 6, 2017, 2:24pm UTC](https://discuss.elastic.co/t/running-x-pack-on-cluster-in-an-enclave/91949 "2017-07-06T14:24:29Z")

</div>

I have an ES Cluster that is in an enclave with a private network and no internet access. Can I request the basic license, transfer that license file to the cluster in the enclave and then install the license and be goo…

---

## [Unable to get HTTPS working on Kibana](https://discuss.elastic.co/t/unable-to-get-https-working-on-kibana/134283)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 3\
**Last updated:** [June 7, 2018, 6:24am UTC](https://discuss.elastic.co/t/unable-to-get-https-working-on-kibana/134283 "2018-06-07T06:24:38Z")

</div>

Hi. Trying to get Kibana accessible via HTTPS but it's not working. I have a Platinum license. I have certs configured on my ES nodes and they are communicating via SSL. When I try to enable the HTTPS config in Kibana …

---

## [Java API to create index with date](https://discuss.elastic.co/t/java-api-to-create-index-with-date/53044)

<div class="topic-metadata">

**Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\
**Replies:** 2\
**Last updated:** [June 17, 2016, 7:11am UTC](https://discuss.elastic.co/t/java-api-to-create-index-with-date/53044 "2016-06-17T07:11:55Z")

</div>

If I want to have my index rotated daily, so I would need to pass the date as part of the index name? Is there an option for that or do I have to append it to the name manually? I'm using the example below from the Java …

---

## [Can Elastic work with Windows certificates?](https://discuss.elastic.co/t/can-elastic-work-with-windows-certificates/263964)

<div class="topic-metadata">

**Author:** [@lachezar.uzunov](https://discuss.elastic.co/u/lachezar.uzunov)\
**Replies:** 4\
**Last updated:** [February 17, 2021, 2:32am UTC](https://discuss.elastic.co/t/can-elastic-work-with-windows-certificates/263964 "2021-02-17T02:32:22Z")

</div>

Hello everyone. I created elastic stack of 3 nodes and it was working pretty fine until I have to replace the elastic generated certificate with one from windows server CA. I do not seem to find information of rather it…

---

## [Create index pattern](https://discuss.elastic.co/t/create-index-pattern/132506)

<div class="topic-metadata">

**Author:** [@roshannk](https://discuss.elastic.co/u/roshannk)\
**Replies:** 4\
**Last updated:** [May 22, 2018, 8:49am UTC](https://discuss.elastic.co/t/create-index-pattern/132506 "2018-05-22T08:49:01Z")

</div>

Hello, this is my first time using ELK. When I try to make an index pattern I get the following; SummaryCreate index pattern Kibana uses index patterns to retrieve data from Elasticsearch indices for things like visu…

---

## [How to setup and test node on different server?](https://discuss.elastic.co/t/how-to-setup-and-test-node-on-different-server/123986)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [March 15, 2018, 9:45am UTC](https://discuss.elastic.co/t/how-to-setup-and-test-node-on-different-server/123986 "2018-03-15T09:45:21Z")

</div>

Hi, I would like to run a loadtest with esrally. I have 2 servers, one for generating the load, the other should run elasticsearch as single instance. How do I let esrally create the cluster / node on a different machi…

---

## [Markdown dashboard url](https://discuss.elastic.co/t/markdown-dashboard-url/157435)

<div class="topic-metadata">

**Author:** [@Cyber\_Bobak](https://discuss.elastic.co/u/Cyber_Bobak)\
**Replies:** 5\
**Last updated:** [November 20, 2018, 9:47am UTC](https://discuss.elastic.co/t/markdown-dashboard-url/157435 "2018-11-20T09:47:45Z")

</div>

Hello, I'm unable to figure out how to set up url to be opened in same window, it's always opening in new. Kibana ver. 6.4.3

---

## [Only specific output from logstash](https://discuss.elastic.co/t/only-specific-output-from-logstash/42245)

<div class="topic-metadata">

**Author:** [@lucifer](https://discuss.elastic.co/u/lucifer)\
**Replies:** 5\
**Last updated:** [February 23, 2016, 6:28am UTC](https://discuss.elastic.co/t/only-specific-output-from-logstash/42245 "2016-02-23T06:28:08Z")

</div>

Is there a way I can send only certain parts of a log to elasticsearch. I don't want to remove some logs, I want to remove some parts of a log. For eg. I want to remove \[INFO\] from my log, and only send the rest of it to…

---

## [Strange limits when using Java API (SOLVED)](https://discuss.elastic.co/t/strange-limits-when-using-java-api-solved/32914)

<div class="topic-metadata">

**Author:** [@ane18s](https://discuss.elastic.co/u/ane18s)\
**Replies:** 5\
**Last updated:** [October 28, 2015, 10:31pm UTC](https://discuss.elastic.co/t/strange-limits-when-using-java-api-solved/32914 "2015-10-28T22:31:44Z")

</div>

Hi, I'm using Java API to index a lot of large documents. However, some documents are not indexed (or maybe partially indexed). After a lot of tests, I have found that when a field is too large, the document is not …

---

## [Kibana 8.18.8, 8.19.5, 9.0.8, and 9.1.5 Security Update (ESA-2025-20)](https://discuss.elastic.co/t/kibana-8-18-8-8-19-5-9-0-8-and-9-1-5-security-update-esa-2025-20/382449)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [October 6, 2025, 4:20pm UTC](https://discuss.elastic.co/t/kibana-8-18-8-8-19-5-9-0-8-and-9-1-5-security-update-esa-2025-20/382449 "2025-10-06T16:20:21Z")

</div>

Kibana Cross-Site Scripting (XSS) (ESA-2025-20) Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload. Affected Versions: 7.x: All versions prior to and inc…

---

## [How to add MikroTik router in ELK v7](https://discuss.elastic.co/t/how-to-add-mikrotik-router-in-elk-v7/200507)

<div class="topic-metadata">

**Author:** [@lokmanopt](https://discuss.elastic.co/u/lokmanopt)\
**Replies:** 0\
**Last updated:** [September 21, 2019, 2:29am UTC](https://discuss.elastic.co/t/how-to-add-mikrotik-router-in-elk-v7/200507 "2019-09-21T02:29:17Z")

</div>

Hello Dear, Hope you are well, I want to add MikroTik router all event log in to the ELK v7, already i added some Linux machine, They are working fine. Please give me some advice how to add MikroTik router in ELK v7. …

---

## [JVM options file vs. ES\_JAVA\_OPTS on ECK for setting heap size](https://discuss.elastic.co/t/jvm-options-file-vs-es-java-opts-on-eck-for-setting-heap-size/324051)

<div class="topic-metadata">

**Author:** [@Thomas\_Antonio](https://discuss.elastic.co/u/Thomas_Antonio)\
**Replies:** 0\
**Last updated:** [January 26, 2023, 5:25pm UTC](https://discuss.elastic.co/t/jvm-options-file-vs-es-java-opts-on-eck-for-setting-heap-size/324051 "2023-01-26T17:25:51Z")

</div>

ECK documentation says to configure heap size using ES\_JAVA\_OPTS environment variable. But Elasticsearch docs say to not use ES\_JAVA\_OPTS in production and instead use an options file. Is this a gap in ECK documentation…

---

## [Multiple pipelines using Logstash 6.0.0 docker image on kubernetes](https://discuss.elastic.co/t/multiple-pipelines-using-logstash-6-0-0-docker-image-on-kubernetes/108479)

<div class="topic-metadata">

**Author:** [@troy](https://discuss.elastic.co/u/troy)\
**Replies:** 0\
**Last updated:** [November 21, 2017, 12:45am UTC](https://discuss.elastic.co/t/multiple-pipelines-using-logstash-6-0-0-docker-image-on-kubernetes/108479 "2017-11-21T00:45:00Z")

</div>

In order to get multiple pipelines working w/ the official Logstash 6.0.0 docker image, I set the PATH\_CONFIG environment variable to "", which sets path.config: null in /usr/share/logstash/config/logstash.yml. Since pat…

---

## [How to mass-migrate from string to keyword/text](https://discuss.elastic.co/t/how-to-mass-migrate-from-string-to-keyword-text/75506)

<div class="topic-metadata">

**Author:** [@LaszloHont](https://discuss.elastic.co/u/LaszloHont)\
**Replies:** 0\
**Last updated:** [February 17, 2017, 2:11pm UTC](https://discuss.elastic.co/t/how-to-mass-migrate-from-string-to-keyword-text/75506 "2017-02-17T14:11:44Z")

</div>

I just upgraded from 2.x to 5.2.1 and I'd like to explicitly convert my existing string types into keyword or text. I understand that I cannot make this change to an existing index, so I would like to dump/change/load ea…

---

## [Problem in the configuaration file of topbeat.yml](https://discuss.elastic.co/t/problem-in-the-configuaration-file-of-topbeat-yml/49853)

<div class="topic-metadata">

**Author:** [@preehana](https://discuss.elastic.co/u/preehana)\
**Replies:** 6\
**Last updated:** [October 6, 2016, 8:45am UTC](https://discuss.elastic.co/t/problem-in-the-configuaration-file-of-topbeat-yml/49853 "2016-10-06T08:45:13Z")

</div>

I am new to topbeat and had made the following changes in the configuration file of topbeat. input: # In seconds, defines how often to read server statistics period: 1 # Regular expression to match the processe…

---

## [Kibana to read logfile](https://discuss.elastic.co/t/kibana-to-read-logfile/111035)

<div class="topic-metadata">

**Author:** [@nivedita\_singh](https://discuss.elastic.co/u/nivedita_singh)\
**Replies:** 2\
**Last updated:** [December 11, 2017, 10:27am UTC](https://discuss.elastic.co/t/kibana-to-read-logfile/111035 "2017-12-11T10:27:41Z")

</div>

Hi , I am trying to use kibana in windows environment to read logfiles without using logstash. Wherever I have searched I got either curl command to run the log file in elasticsearch but i have no clue where to run it …

---

## [There is insufficient memory for the Java Runtime Environment in elasticsearch](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-in-elasticsearch/48405)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 2\
**Last updated:** [April 27, 2016, 6:51am UTC](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-in-elasticsearch/48405 "2016-04-27T06:51:08Z")

</div>

HI, I'm facing following issue while starting my elasticsearch, can any one help me to resolve my issue. Elastisearch version 2.2.1 java version 1.8 There is insufficient memory for the Java Runtime Environment to co…

---

## [How to map MySQL query to elasticsearch in node.js?](https://discuss.elastic.co/t/how-to-map-mysql-query-to-elasticsearch-in-node-js/154299)

<div class="topic-metadata">

**Author:** [@Tushar\_Mudgal](https://discuss.elastic.co/u/Tushar_Mudgal)\
**Replies:** 3\
**Last updated:** [October 27, 2018, 9:13pm UTC](https://discuss.elastic.co/t/how-to-map-mysql-query-to-elasticsearch-in-node-js/154299 "2018-10-27T21:13:56Z")

</div>

I am facing an issue with querying. Precisely, I want to extract the results that match my query (astro-ph). How can I query this? It exists in \<primary\_category\> col name in SQL. Column may contain (astro-ph, astro-ph.G…

---

## [Term vector of all documents](https://discuss.elastic.co/t/term-vector-of-all-documents/60128)

<div class="topic-metadata">

**Author:** [@tyka](https://discuss.elastic.co/u/tyka)\
**Replies:** 3\
**Last updated:** [September 12, 2016, 6:06pm UTC](https://discuss.elastic.co/t/term-vector-of-all-documents/60128 "2016-09-12T18:06:42Z")

</div>

I have a corpus of documents indexed . I also stored the term vectors when indexing. Now I want to retrieve term vectors of all documents satisfying some filtering options. I was able to get term vector for a single doc…

---

## [Issue removing index with index.blocks.read\_only set to true](https://discuss.elastic.co/t/issue-removing-index-with-index-blocks-read-only-set-to-true/21899)

<div class="topic-metadata">

**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\
**Replies:** 3\
**Last updated:** [April 2, 2015, 3:42pm UTC](https://discuss.elastic.co/t/issue-removing-index-with-index-blocks-read-only-set-to-true/21899 "2015-04-02T15:42:38Z")

</div>

Hi, I was trying the settings to block data writes and also metadat writes to an index applying this: curl -XPUT 'http://testserver:9200/test\_index/\_settings' -d '{ "index.blocks.read\_only" : "true" }' …

---

## [Detecting end of Scroll](https://discuss.elastic.co/t/detecting-end-of-scroll/18134)

<div class="topic-metadata">

**Author:** [@mooky](https://discuss.elastic.co/u/mooky)\
**Replies:** 3\
**Last updated:** [June 16, 2014, 4:59pm UTC](https://discuss.elastic.co/t/detecting-end-of-scroll/18134 "2014-06-16T16:59:06Z")

</div>

According to the documentation, you know when you have reached the end of the scroll results when you receive zero hits in the response. However, if your SearchType is SCAN, then you receive zero hits in the \*first\*…

---

## [Elasticsearch exclude bool “term” from getting highlighted](https://discuss.elastic.co/t/elasticsearch-exclude-bool-term-from-getting-highlighted/13258)

<div class="topic-metadata">

**Author:** [@vinamar](https://discuss.elastic.co/u/vinamar)\
**Replies:** 3\
**Last updated:** [August 20, 2013, 7:31pm UTC](https://discuss.elastic.co/t/elasticsearch-exclude-bool-term-from-getting-highlighted/13258 "2013-08-20T19:31:46Z")

</div>

I have the following elastic search query with query string that should match all the fields and term query should match the respective fields given below. I want only the query\_string to be part of the highlight. …

---

## [Transport Port?](https://discuss.elastic.co/t/transport-port/6226)

<div class="topic-metadata">

**Author:** [@Edward\_Giardina](https://discuss.elastic.co/u/Edward_Giardina)\
**Replies:** 3\
**Last updated:** [December 22, 2011, 11:58pm UTC](https://discuss.elastic.co/t/transport-port/6226 "2011-12-22T23:58:59Z")

</div>

Does anyone know what the port(s) used for the transport client connections? Our client is in Java and we are receiving the following stack trace. We have ports 9200 and 9300 open, but we dont know if there are othe…

---

## [How to output to multiple http endpoints](https://discuss.elastic.co/t/how-to-output-to-multiple-http-endpoints/109549)

<div class="topic-metadata">

**Author:** [@Kasun\_Siyambalapitiy](https://discuss.elastic.co/u/Kasun_Siyambalapitiy)\
**Replies:** 4\
**Last updated:** [November 29, 2017, 11:00am UTC](https://discuss.elastic.co/t/how-to-output-to-multiple-http-endpoints/109549 "2017-11-29T11:00:27Z")

</div>

Hi, Folllowing is the output section of my config file, output { if \[type\] == "product\_log" { http { url =\> "https://xxxxxxxxxx.com/endpoints/nginx\_product\_receiver" http\_method =\> "post" format =\> "json" header…

---

## [Filter aggregation alias setting](https://discuss.elastic.co/t/filter-aggregation-alias-setting/26231)

<div class="topic-metadata">

**Author:** [@joiceedattel](https://discuss.elastic.co/u/joiceedattel)\
**Replies:** 4\
**Last updated:** [July 28, 2015, 4:47am UTC](https://discuss.elastic.co/t/filter-aggregation-alias-setting/26231 "2015-07-28T04:47:52Z")

</div>

Hi Is there any method to set alias for the filters . As shown in the screen shot, the filter pattern is showing in the graphs and it is difficult to identify for long filter patterns .

---

## [Getting 400 "request does not support \[aggs\]" Error](https://discuss.elastic.co/t/getting-400-request-does-not-support-aggs-error/279253)

<div class="topic-metadata">

**Author:** [@thejusjose-mindcurv](https://discuss.elastic.co/u/thejusjose-mindcurv)\
**Replies:** 2\
**Last updated:** [July 21, 2021, 5:47pm UTC](https://discuss.elastic.co/t/getting-400-request-does-not-support-aggs-error/279253 "2021-07-21T17:47:25Z")

</div>

Hi all, Getting a 400 Error while trying to fetch the total count of IP connecting to our system and then sort the IP list based on the top 5. We have Kibana version 7.8 installed. Requirement :: Get the list of top …

---

## [How to avoid outputting filebeat logs to /var/log/messages](https://discuss.elastic.co/t/how-to-avoid-outputting-filebeat-logs-to-var-log-messages/272642)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 2\
**Last updated:** [May 17, 2021, 7:31am UTC](https://discuss.elastic.co/t/how-to-avoid-outputting-filebeat-logs-to-var-log-messages/272642 "2021-05-17T07:31:54Z")

</div>

I do not want to output filebeat logs to /var/log/messages. So, I configured to\_syslog and Environment, referring to the following article. However, they do not work. Can you please tell me how to do it correctly? H…

---

## [Could not find java; set JAVA\_HOME or ensure java is in PATH in ubuntu](https://discuss.elastic.co/t/could-not-find-java-set-java-home-or-ensure-java-is-in-path-in-ubuntu/172931)

<div class="topic-metadata">

**Author:** [@jiantao\_wu](https://discuss.elastic.co/u/jiantao_wu)\
**Replies:** 2\
**Last updated:** [March 20, 2019, 1:54am UTC](https://discuss.elastic.co/t/could-not-find-java-set-java-home-or-ensure-java-is-in-path-in-ubuntu/172931 "2019-03-20T01:54:09Z")

</div>

How to resolve it.

---

## [当前的discuss 论坛是用什么软件实现的？有没有开源代码？](https://discuss.elastic.co/t/discuss/52936)

<div class="topic-metadata">

**Author:** [@moryaden](https://discuss.elastic.co/u/moryaden)\
**Replies:** 2\
**Last updated:** [June 27, 2016, 12:11pm UTC](https://discuss.elastic.co/t/discuss/52936 "2016-06-27T12:11:59Z")

</div>

当前的discuss 论坛是用什么软件实现的？有没有开源代码？

---

## [Multiple Y-axis with Vega](https://discuss.elastic.co/t/multiple-y-axis-with-vega/190274)

<div class="topic-metadata">

**Author:** [@Paulo64](https://discuss.elastic.co/u/Paulo64)\
**Replies:** 2\
**Last updated:** [July 15, 2019, 1:28pm UTC](https://discuss.elastic.co/t/multiple-y-axis-with-vega/190274 "2019-07-15T13:28:20Z")

</div>

Hello, Is there a way to create a graph with Vega using multiple Y axis, just like this one : Thanks, Paul

---

## [Reindex remote-Received Error "socket\_exception" & "Connection reset"](https://discuss.elastic.co/t/reindex-remote-received-error-socket-exception-connection-reset/272538)

<div class="topic-metadata">

**Author:** [@Ragul\_R](https://discuss.elastic.co/u/Ragul_R)\
**Replies:** 6\
**Last updated:** [May 10, 2021, 10:55am UTC](https://discuss.elastic.co/t/reindex-remote-received-error-socket-exception-connection-reset/272538 "2021-05-10T10:55:54Z")

</div>

I'm Copying index remotely cluster1 to Cluster2.\[Received Error "socket\_exception" & "Connection reset"\] i haved tried Type 1& 2 configuration, im facing same error elasticsearch.yml Type1: reindex.remote.whitelist:…

[Previous page](https://discuss.elastic.co/top.md?page=707&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=709&per_page=50&period=all)
