# Top **URL:** https://discuss.elastic.co/top.md?page=724&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 725 --- ## [\[SOLVED\]After upgrade to 7.7.0 in a cluster of 3 nodes. - failed to retrieve password hash for reserved user \[elastic\]](https://discuss.elastic.co/t/solved-after-upgrade-to-7-7-0-in-a-cluster-of-3-nodes-failed-to-retrieve-password-hash-for-reserved-user-elastic/234700)
**Author:** [@Andreas\_Falk](https://discuss.elastic.co/u/Andreas_Falk)\ **Replies:** 1\ **Last updated:** [May 28, 2020, 9:47am UTC](https://discuss.elastic.co/t/solved-after-upgrade-to-7-7-0-in-a-cluster-of-3-nodes-failed-to-retrieve-password-hash-for-reserved-user-elastic/234700 "2020-05-28T09:47:22Z")
Hi, We have a small cluster that we upgraded from 7.6.2 to 7.7.0 with .deb's. Everything went fine with the upgrade. Plugins were updated and all was rainbows and ponies :slight\_smile: Then when I tried to update the… --- ## [Configuration params to address slow node start](https://discuss.elastic.co/t/configuration-params-to-address-slow-node-start/70812)
**Author:** [@fassisrosa](https://discuss.elastic.co/u/fassisrosa)\ **Replies:** 8\ **Last updated:** [January 12, 2017, 5:52pm UTC](https://discuss.elastic.co/t/configuration-params-to-address-slow-node-start/70812 "2017-01-12T17:52:02Z")
Hey there, I am working on a single node cluster that currently has about 700 indexes each with 5 shards. I am seeing slow starts of the Elasticsearch node (up to 4m30s). I have found the following parameter in documen… --- ## [Logstash aggregation filter not working properly](https://discuss.elastic.co/t/logstash-aggregation-filter-not-working-properly/39847)
**Author:** [@nivetha](https://discuss.elastic.co/u/nivetha)\ **Replies:** 2\ **Last updated:** [February 1, 2016, 5:31am UTC](https://discuss.elastic.co/t/logstash-aggregation-filter-not-working-properly/39847 "2016-02-01T05:31:47Z")
I tried aggregating events ,it gets agrregated ,but in my output I get all lines displayed ,aggregatted lines and also the other lines. I want just the aggregated lines alone in my index. input { file { path =\> "/op… --- ## [Use unique count 'metric' visual combined with a filter](https://discuss.elastic.co/t/use-unique-count-metric-visual-combined-with-a-filter/48972)
**Author:** [@Jeremy\_Colton](https://discuss.elastic.co/u/Jeremy_Colton)\ **Replies:** 2\ **Last updated:** [May 3, 2016, 8:09am UTC](https://discuss.elastic.co/t/use-unique-count-metric-visual-combined-with-a-filter/48972 "2016-05-03T08:09:17Z")
Hi, How can I get a number representing a unique count that is filtered by a term.? Eg unique number of users from America... Many thanks. --- ## [Data stream vs index](https://discuss.elastic.co/t/data-stream-vs-index/294202)
**Author:** [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\ **Replies:** 1\ **Last updated:** [January 12, 2022, 10:40pm UTC](https://discuss.elastic.co/t/data-stream-vs-index/294202 "2022-01-12T22:40:45Z")
What are the benefits of using data stream instead of using index for storing data in Elasticsearch. I would like to store continuously generated data. --- ## [Elasticsearch 8.14.0 Security Update (ESA-2024-14)](https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-14/361007)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [June 7, 2024, 4:06am UTC](https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-14/361007 "2024-06-07T04:06:51Z")
Elasticsearch StackOverflow vulnerability (ESA-2024-14) A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type. Under certain c… --- ## [Unable to create mapping in Elasticsearch 6.0](https://discuss.elastic.co/t/unable-to-create-mapping-in-elasticsearch-6-0/109842)
**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\ **Replies:** 3\ **Last updated:** [December 1, 2017, 7:27pm UTC](https://discuss.elastic.co/t/unable-to-create-mapping-in-elasticsearch-6-0/109842 "2017-12-01T19:27:04Z")
Hi, I am getting the following error in the console when I am trying to create an index mapping in Elasticsearch 6.0: { "error": { "root\_cause": \[ { "type": "security\_exception", "reason": "… --- ## [Date can not parse date formated field](https://discuss.elastic.co/t/date-can-not-parse-date-formated-field/105218)
**Author:** [@stevie](https://discuss.elastic.co/u/stevie)\ **Replies:** 3\ **Last updated:** [October 25, 2017, 1:59pm UTC](https://discuss.elastic.co/t/date-can-not-parse-date-formated-field/105218 "2017-10-25T13:59:10Z")
Version: logstash 5.6.3 We have 2 date filters in our logstash config. The first parses the timestamp field we matched in our logs. We want to have always the same timestamp format so we use date to do this. Second da… --- ## [Naming convention for ingest pipelines etc](https://discuss.elastic.co/t/naming-convention-for-ingest-pipelines-etc/339480)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 6\ **Last updated:** [August 1, 2023, 3:32pm UTC](https://discuss.elastic.co/t/naming-convention-for-ingest-pipelines-etc/339480 "2023-08-01T15:32:59Z")
Elastic-Provided Naming Convention :question: Is there a naming convention for ingest pipelines, index templates, component templates, or any other such configuration objects? I see in the docs \[1,2,3,4\] there are examp… --- ## [Filebeat on pfSense (freebsd-386) only reads logs at startup](https://discuss.elastic.co/t/filebeat-on-pfsense-freebsd-386-only-reads-logs-at-startup/58476)
**Author:** [@CleanCut](https://discuss.elastic.co/u/CleanCut)\ **Replies:** 6\ **Last updated:** [August 29, 2016, 10:58pm UTC](https://discuss.elastic.co/t/filebeat-on-pfsense-freebsd-386-only-reads-logs-at-startup/58476 "2016-08-29T22:58:18Z")
On pfSense 2.2 (32-bit), filebeat will only read the log files once when it starts up. It appears everything works correctly for the first read -- everything reaches the stack like I expect. After that, no additional l… --- ## [Filebeat to Logstash Basic Authentication](https://discuss.elastic.co/t/filebeat-to-logstash-basic-authentication/212320)
**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\ **Replies:** 1\ **Last updated:** [December 18, 2019, 12:49pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-basic-authentication/212320 "2019-12-18T12:49:25Z")
Hello, I'm using a typical setup with Filebeat agents running on different Windows clients and Logstash and Elasticsearch setup on a separate server (Windows). I'm using the latest version 7.5. I need to configure basi… --- ## [Problems with flood stage watermark setting](https://discuss.elastic.co/t/problems-with-flood-stage-watermark-setting/172606)
**Author:** [@David9](https://discuss.elastic.co/u/David9)\ **Replies:** 2\ **Last updated:** [March 16, 2019, 12:46am UTC](https://discuss.elastic.co/t/problems-with-flood-stage-watermark-setting/172606 "2019-03-16T00:46:01Z")
I'm doing some experimentation on my Mac. I have no data in ES. I create an index and add a few small documents (using the python elasticsearch\_dsl library). I then get this in the stderr after a few documents success… --- ## [Elasticsearch 6.1.0 settings parser error](https://discuss.elastic.co/t/elasticsearch-6-1-0-settings-parser-error/112805)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 2\ **Last updated:** [December 23, 2017, 10:09am UTC](https://discuss.elastic.co/t/elasticsearch-6-1-0-settings-parser-error/112805 "2017-12-23T10:09:12Z")
It seems that 6.1.0 is more strict in how it parses settings. We're trying to upgrade to 6.1.0 but are blocked because our config file is no longer working. We're using readonlyrest, and with this config, ES refuses to s… --- ## [Search-ui components using Angular](https://discuss.elastic.co/t/search-ui-components-using-angular/272965)
**Author:** [@ksuren](https://discuss.elastic.co/u/ksuren)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 10:27pm UTC](https://discuss.elastic.co/t/search-ui-components-using-angular/272965 "2021-05-13T22:27:41Z")
How can we build a elastic-ui components using Angular? The docs Libraries for developing modern search experiences | Elastic mention: The underlying library powering Search UI can be used with any JavaScript framework… --- ## [Connection error between apache-hive and elasticsearch](https://discuss.elastic.co/t/connection-error-between-apache-hive-and-elasticsearch/119453)
**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\ **Replies:** 5\ **Last updated:** [February 13, 2018, 8:52pm UTC](https://discuss.elastic.co/t/connection-error-between-apache-hive-and-elasticsearch/119453 "2018-02-13T20:52:18Z")
Hello Folks, I'm trying to integrate apache-hive with elasticsearch. In order to achieve same i am following below steps Created Table in hive: CREATE TABLE scadapass (VENDOR string, Device string, Default\_Password s… --- ## [Empty logs on kibana](https://discuss.elastic.co/t/empty-logs-on-kibana/137186)
**Author:** [@Tuxmin](https://discuss.elastic.co/u/Tuxmin)\ **Replies:** 3\ **Last updated:** [June 27, 2018, 6:02am UTC](https://discuss.elastic.co/t/empty-logs-on-kibana/137186 "2018-06-27T06:02:00Z")
Hello, I meet a problem in kibana, on logs that are empty for a device: I don't understand why they are empty, because all the logs for this device are not empty. { "\_index": "securite-2018.06.25", "\_type": "fo… --- ## [Disable On-Click filtering in embedded visualizations](https://discuss.elastic.co/t/disable-on-click-filtering-in-embedded-visualizations/43027)
**Author:** [@Ron\_Pritchett](https://discuss.elastic.co/u/Ron_Pritchett)\ **Replies:** 3\ **Last updated:** [July 7, 2016, 7:24pm UTC](https://discuss.elastic.co/t/disable-on-click-filtering-in-embedded-visualizations/43027 "2016-07-07T19:24:57Z")
Hello All, I'm hoping there's a quick and easy solution for this. I've embedded the memory usage visualization from the topbeats example dashboard into a simple webpage. I don't mind users zooming in the time frame (by… --- ## [ElasticSearch date rangequery affected by TimeZone](https://discuss.elastic.co/t/elasticsearch-date-rangequery-affected-by-timezone/43225)
**Author:** [@sosoda](https://discuss.elastic.co/u/sosoda)\ **Replies:** 3\ **Last updated:** [March 3, 2016, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-date-rangequery-affected-by-timezone/43225 "2016-03-03T08:53:42Z")
I tried for several times,but still confused. At first the mapping of date field is { "createdAt" : { "type" : "date", "format" : "yyyy-MM-dd HH:mm:ss" } } when I query with java, I… --- ## [Logstash Date filter plugin doesn't work with Java 8 after 7.16.1 upgrade](https://discuss.elastic.co/t/logstash-date-filter-plugin-doesnt-work-with-java-8-after-7-16-1-upgrade/291811)
**Author:** [@YuryShupletsov](https://discuss.elastic.co/u/YuryShupletsov)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 7:40pm UTC](https://discuss.elastic.co/t/logstash-date-filter-plugin-doesnt-work-with-java-8-after-7-16-1-upgrade/291811 "2021-12-14T19:40:15Z")
Hello, We have updated Logstash from 7.10.1 to 7.16.1 and cannot start it with the error: \[2021-12-14T15:35:05,385\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/… --- ## [Compound word token filter: only\_longest\_match doesn't work as expected in some scenarios](https://discuss.elastic.co/t/compound-word-token-filter-only-longest-match-doesnt-work-as-expected-in-some-scenarios/195470)
**Author:** [@andrebarthelmes](https://discuss.elastic.co/u/andrebarthelmes)\ **Replies:** 1\ **Last updated:** [August 19, 2019, 11:34am UTC](https://discuss.elastic.co/t/compound-word-token-filter-only-longest-match-doesnt-work-as-expected-in-some-scenarios/195470 "2019-08-19T11:34:09Z")
Hi, I work on a german product search. To make things more clear I "translated" my problem to the following case: lets assume I have four documents each containing one of the following words in my index: "starlight" … --- ## [Different result from search and aggregation of that search](https://discuss.elastic.co/t/different-result-from-search-and-aggregation-of-that-search/32401)
**Author:** [@isaacpm](https://discuss.elastic.co/u/isaacpm)\ **Replies:** 1\ **Last updated:** [October 18, 2015, 11:42am UTC](https://discuss.elastic.co/t/different-result-from-search-and-aggregation-of-that-search/32401 "2015-10-18T11:42:52Z")
Hi, I'm getting different results from a search for documents and the same search done with aggregations. Here are the searches I'm using: Search for documents: { "query": {"multi\_match" : {"query": "whatever", "fie… --- ## [Rsync changing inode numbers causing multiple imports](https://discuss.elastic.co/t/rsync-changing-inode-numbers-causing-multiple-imports/26939)
**Author:** [@jason\_wilson](https://discuss.elastic.co/u/jason_wilson)\ **Replies:** 2\ **Last updated:** [August 2, 2016, 8:44pm UTC](https://discuss.elastic.co/t/rsync-changing-inode-numbers-causing-multiple-imports/26939 "2016-08-02T20:44:21Z")
Hi All, Fairly new to the whole ELK stack and running into an issue. To test things out I am rsync'ing a bunch of logs from various Windows IIS servers back to my host running the ELK software. Things are working f… --- ## [java.lang.UnsupportedOperationException on X-pack enabled ABAC system](https://discuss.elastic.co/t/java-lang-unsupportedoperationexception-on-x-pack-enabled-abac-system/200795)
**Author:** [@soumendra](https://discuss.elastic.co/u/soumendra)\ **Replies:** 6\ **Last updated:** [September 25, 2019, 11:04am UTC](https://discuss.elastic.co/t/java-lang-unsupportedoperationexception-on-x-pack-enabled-abac-system/200795 "2019-09-25T11:04:37Z")
KB/ES version: 7.2 I am trying to build an ABAC security based Multi-Tenant system with X-Pack platinum license. There is an Index which have multiple Client's data. The Admin who has access to all three Client's data … --- ## [Topbeat change settings when to gather stats](https://discuss.elastic.co/t/topbeat-change-settings-when-to-gather-stats/50982)
**Author:** [@vikas\_J](https://discuss.elastic.co/u/vikas_J)\ **Replies:** 6\ **Last updated:** [May 26, 2016, 2:21pm UTC](https://discuss.elastic.co/t/topbeat-change-settings-when-to-gather-stats/50982 "2016-05-26T14:21:51Z")
I find a strange problem in my ELK setup. I have topbeat configured to gather statistics every 3600s using: input: # In seconds, defines how often to read server statistics period: 3600 And it sends output to log s… --- ## [Logstash shipper events stuck at redis](https://discuss.elastic.co/t/logstash-shipper-events-stuck-at-redis/40694)
**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Replies:** 6\ **Last updated:** [February 3, 2016, 6:38am UTC](https://discuss.elastic.co/t/logstash-shipper-events-stuck-at-redis/40694 "2016-02-03T06:38:49Z")
Kindly verify my redis input configuration for logstash indexer, below is the input config details which worked for some time later it is not working. I have upgraded to logstash 2.1.1 from logstash 1.4.2 input{ redis … --- ## [Filebeat panic and exit?](https://discuss.elastic.co/t/filebeat-panic-and-exit/197578)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 7\ **Last updated:** [September 12, 2019, 4:59pm UTC](https://discuss.elastic.co/t/filebeat-panic-and-exit/197578 "2019-09-12T16:59:36Z")
Hello, I got the following from stderr while running filebeat, and filebeat just exited. any idea on why filebeat just dies? thanks! yan goroutine 74 \[select, 1 minutes\]: github.com/elastic/beats/filebeat/channel.(\*… --- ## [Failed to execute search phase](https://discuss.elastic.co/t/failed-to-execute-search-phase/167607)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 3\ **Last updated:** [February 11, 2019, 9:58am UTC](https://discuss.elastic.co/t/failed-to-execute-search-phase/167607 "2019-02-11T09:58:43Z")
We are seeing a lot of warnings in our cluster whenever we use the SCROLL API to search for data. \[2019-02-08T16:03:53,314\]\[DEBUG\]\[o.e.a.s.TransportSearchScrollAction\] \[node01\] \[594681\] Failed to execute query phase org… --- ## [How to try many grok matches, and take only the one that works?](https://discuss.elastic.co/t/how-to-try-many-grok-matches-and-take-only-the-one-that-works/111743)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 3\ **Last updated:** [December 14, 2017, 11:54am UTC](https://discuss.elastic.co/t/how-to-try-many-grok-matches-and-take-only-the-one-that-works/111743 "2017-12-14T11:54:30Z")
Hi everyone! I have 10 types of logs I need to process. They differ from each other but have some similarities, so I built a grok filter that matches each one, and non of the other types. How do I write it into the .con… --- ## [Convert Elasticsearch mapping to JSON or Avro schema](https://discuss.elastic.co/t/convert-elasticsearch-mapping-to-json-or-avro-schema/46545)
**Author:** [@palmerabollo](https://discuss.elastic.co/u/palmerabollo)\ **Replies:** 3\ **Last updated:** [April 24, 2016, 7:44pm UTC](https://discuss.elastic.co/t/convert-elasticsearch-mapping-to-json-or-avro-schema/46545 "2016-04-24T19:44:57Z")
Is it possible to convert the mapping of one of my indexes to a JSON or an Avro schema? I think that's not possible with Elasticsearch, but maybe you know other tools to achieve that conversion. Thank you. --- ## [В чем разница между nested и object?](https://discuss.elastic.co/t/nested-object/196942)
**Author:** [@KaiyrbekSanzhar](https://discuss.elastic.co/u/KaiyrbekSanzhar)\ **Replies:** 5\ **Last updated:** [August 29, 2019, 10:53am UTC](https://discuss.elastic.co/t/nested-object/196942 "2019-08-29T10:53:05Z")
Можете мне помощь в коде у меня нет результат!! всегда не может найти вложенный объект и можете объяснить разница object type и nested type --- ## [Losing log data when forwarding from filebeat nodes](https://discuss.elastic.co/t/losing-log-data-when-forwarding-from-filebeat-nodes/69304)
**Author:** [@himaz.m](https://discuss.elastic.co/u/himaz.m)\ **Replies:** 5\ **Last updated:** [December 21, 2016, 12:55pm UTC](https://discuss.elastic.co/t/losing-log-data-when-forwarding-from-filebeat-nodes/69304 "2016-12-21T12:55:27Z")
Our production environment is setup to have 6 nodes running. We have setup filebeat on all of the 6 nodes. We have an ELK Stack running on a different node and all the filebeats are forwarding the logs to the logstash on… --- ## [Shadow replicas indices](https://discuss.elastic.co/t/shadow-replicas-indices/57763)
**Author:** [@1222kkk](https://discuss.elastic.co/u/1222kkk)\ **Replies:** 5\ **Last updated:** [August 11, 2016, 10:08am UTC](https://discuss.elastic.co/t/shadow-replicas-indices/57763 "2016-08-11T10:08:22Z")
"If you would like to use a shared filesystem, you can use the shadow replicas settings to choose where on disk the data for an index should be kept, as well as how Elasticsearch should replay operations on all the repli… --- ## [Doc Values vs Field Data Questions](https://discuss.elastic.co/t/doc-values-vs-field-data-questions/23666)
**Author:** [@Matt\_Traynham](https://discuss.elastic.co/u/Matt_Traynham)\ **Replies:** 5\ **Last updated:** [May 25, 2015, 4:03pm UTC](https://discuss.elastic.co/t/doc-values-vs-field-data-questions/23666 "2015-05-25T16:03:11Z")
I'm doing some overall testing on my cluster, debating if I should switch to Doc Values. I have about 15 fields for each document, with 83 million documents spread across 60 indices. All the fields are dynamically … --- ## [Getting An issue by Saying Cluster nodes source must not be null or empty after upgrading Spring Boot 2.1.7](https://discuss.elastic.co/t/getting-an-issue-by-saying-cluster-nodes-source-must-not-be-null-or-empty-after-upgrading-spring-boot-2-1-7/196253)
**Author:** [@Shradha\_Bharti](https://discuss.elastic.co/u/Shradha_Bharti)\ **Replies:** 4\ **Last updated:** [August 22, 2019, 10:09am UTC](https://discuss.elastic.co/t/getting-an-issue-by-saying-cluster-nodes-source-must-not-be-null-or-empty-after-upgrading-spring-boot-2-1-7/196253 "2019-08-22T10:09:21Z")
HI I am trying to upgrade my Spring boot application 2.1.7, we have used elastic search over there , while upgrading I am getting below issue Caused by: org.springframework.beans.factory.BeanCreationException: Error cr… --- ## [How to add filter-bar in dashboard](https://discuss.elastic.co/t/how-to-add-filter-bar-in-dashboard/159273)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 4\ **Last updated:** [December 7, 2018, 6:14am UTC](https://discuss.elastic.co/t/how-to-add-filter-bar-in-dashboard/159273 "2018-12-07T06:14:56Z")
hi there I wonder why I can not add filter-bar Add a filter + in timelion visualizations. The plots are timelions only in my specific dashboard. When users use my dashboard, they are not familiar withlucene query. I … --- ## [How can I get data from Filebeat to Flume?](https://discuss.elastic.co/t/how-can-i-get-data-from-filebeat-to-flume/51734)
**Author:** [@ElastiCrank](https://discuss.elastic.co/u/ElastiCrank)\ **Replies:** 2\ **Last updated:** [June 6, 2016, 12:25pm UTC](https://discuss.elastic.co/t/how-can-i-get-data-from-filebeat-to-flume/51734 "2016-06-06T12:25:14Z")
I can't see a simple way to get data from Filebeat into Flume. Any ideas? Maybe due to Filebeat's youth, there just aren't very many generic ways (HTTP, TCP) to get data out of Filebeat? Filebeat looks like a rare co… --- ## [E-commerce products with prices per customer](https://discuss.elastic.co/t/e-commerce-products-with-prices-per-customer/245832)
**Author:** [@dndeus](https://discuss.elastic.co/u/dndeus)\ **Replies:** 8\ **Last updated:** [August 21, 2020, 4:15pm UTC](https://discuss.elastic.co/t/e-commerce-products-with-prices-per-customer/245832 "2020-08-21T16:15:19Z")
Hello there! Let me give you the use case. I need to build this b2b commerce where the prices for each product is different for every logged in customer. One of the functionalities is, the customer should be able to fi… --- ## [How to Stop Logstash in Windows programatically](https://discuss.elastic.co/t/how-to-stop-logstash-in-windows-programatically/77430)
**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\ **Replies:** 1\ **Last updated:** [March 6, 2017, 9:23am UTC](https://discuss.elastic.co/t/how-to-stop-logstash-in-windows-programatically/77430 "2017-03-06T09:23:57Z")
Hi, I am using Logstash 5.1.1. Running logstash in windows command prompt using the command "logstash -f logstash.conf" and stopping it with CTRL+C . But, I want to stop logstash programatically. Any suggestion on… --- ## [How to manually delete indexes with elasticsearch running](https://discuss.elastic.co/t/how-to-manually-delete-indexes-with-elasticsearch-running/256392)
**Author:** [@bshaw](https://discuss.elastic.co/u/bshaw)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 8:38pm UTC](https://discuss.elastic.co/t/how-to-manually-delete-indexes-with-elasticsearch-running/256392 "2020-11-23T20:38:23Z")
Hello, I ran into an issue this morning after leaving a test running over the weekend. The test generated more data then available space in my elasticsearch data partition. I am running 7.7.1 on a single node in a doc… --- ## [Logstash JDBC importer MSSQL2012 is not working](https://discuss.elastic.co/t/logstash-jdbc-importer-mssql2012-is-not-working/45926)
**Author:** [@PascalR](https://discuss.elastic.co/u/PascalR)\ **Replies:** 3\ **Last updated:** [April 1, 2016, 12:00pm UTC](https://discuss.elastic.co/t/logstash-jdbc-importer-mssql2012-is-not-working/45926 "2016-04-01T12:00:58Z")
Hi, I'm completely stuck. I tried to import data from an MSSQL2012 database to elasticsearch, but it's not working. Here are the steps I've done: Started Elasticsearch 2.2.0 Downloaded Logstash-all-plugins-2.2.0 Dow… --- ## [Highlight missing for multi-word text phrase query with non zero slop](https://discuss.elastic.co/t/highlight-missing-for-multi-word-text-phrase-query-with-non-zero-slop/6765)
**Author:** [@alphauser](https://discuss.elastic.co/u/alphauser)\ **Replies:** 6\ **Last updated:** [July 16, 2012, 1:18am UTC](https://discuss.elastic.co/t/highlight-missing-for-multi-word-text-phrase-query-with-non-zero-slop/6765 "2012-07-16T01:18:29Z")
Just noticed a weird issue where highlight for a few search results are missing in case of text phrase query with slop 3(in my case) for a multi-word query(where order of words in query is not same as in document). … --- ## [Logstash -\> Elastic Timeouts](https://discuss.elastic.co/t/logstash-elastic-timeouts/312713)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 5\ **Last updated:** [August 26, 2022, 7:17am UTC](https://discuss.elastic.co/t/logstash-elastic-timeouts/312713 "2022-08-26T07:17:13Z")
I have 2 logstash nodes with about 30 different pipelines sending data to a 6 node elastic cluster. For about half of my pipelines I am seeing a ton of errors like this in the /var/log/logstash/pipeline\_mypipeline.log fi… --- ## [Curl XGET not returning all the documents](https://discuss.elastic.co/t/curl-xget-not-returning-all-the-documents/95637)
**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\ **Replies:** 5\ **Last updated:** [August 3, 2017, 8:41pm UTC](https://discuss.elastic.co/t/curl-xget-not-returning-all-the-documents/95637 "2017-08-03T20:41:46Z")
I have 20 million documents in an index , the \_stats also confirm that and there are 914 distinct toll\_amt\_full field ( confirmed from hive table) . But curl aggregation query is only returning 10 documents ? hive\>… --- ## [Deleting Index and Reclaiming Space](https://discuss.elastic.co/t/deleting-index-and-reclaiming-space/277858)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 5:03pm UTC](https://discuss.elastic.co/t/deleting-index-and-reclaiming-space/277858 "2021-07-05T17:03:53Z")
Good Day, I have an a couple pretty big indexes that I need to delete. I know I can delete an index by using DELETE myindex the question is by simplying using the DELETE myindex command, will that be enough to delete t… --- ## [Expected geo\_point type on field \[geoip.location\], but got \[double\]](https://discuss.elastic.co/t/expected-geo-point-type-on-field-geoip-location-but-got-double/60004)
**Author:** [@dantze](https://discuss.elastic.co/u/dantze)\ **Replies:** 2\ **Last updated:** [September 8, 2016, 3:49pm UTC](https://discuss.elastic.co/t/expected-geo-point-type-on-field-geoip-location-but-got-double/60004 "2016-09-08T15:49:16Z")
I've a Tile Map visualisation that is throwing a "Expected geo\_point type on field \[geoip.location\], but got \[double\]" error. I'm a newbie with the ELK stack. My geoip json object is like the following: geoip": { … --- ## [When does Filebeat lose data?](https://discuss.elastic.co/t/when-does-filebeat-lose-data/129486)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 4\ **Last updated:** [April 26, 2018, 3:23pm UTC](https://discuss.elastic.co/t/when-does-filebeat-lose-data/129486 "2018-04-26T15:23:31Z")
Filebeat 5.6, feeding to Logstash. I'm beginning to suspect that there are scenarios in which lines written to log files do not end up being passed to Logstash, so I'm wanting to check what's expected please. (1) Start … --- ## [Elasticsearch-hdfs snapshot failed: Server IPC version 9 cannot communicate with client version 4](https://discuss.elastic.co/t/elasticsearch-hdfs-snapshot-failed-server-ipc-version-9-cannot-communicate-with-client-version-4/41474)
**Author:** [@Astro-es](https://discuss.elastic.co/u/Astro-es)\ **Replies:** 4\ **Last updated:** [March 3, 2016, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-hdfs-snapshot-failed-server-ipc-version-9-cannot-communicate-with-client-version-4/41474 "2016-03-03T10:00:50Z")
Setup: elasticsearch 2.1.1 hadoop 2.2.0 I have been trying to sapshot elasticsearch to hdfs repository. But it fails. Following this document. This call fails: curl -XPUT 'http://localhost:9200/\_snapshot/my\_backu… --- ## [Kibana as an Android component](https://discuss.elastic.co/t/kibana-as-an-android-component/82486)
**Author:** [@DiegadaDD](https://discuss.elastic.co/u/DiegadaDD)\ **Replies:** 1\ **Last updated:** [April 17, 2017, 4:39pm UTC](https://discuss.elastic.co/t/kibana-as-an-android-component/82486 "2017-04-17T16:39:56Z")
I am ingesting data on elasticsearch, and creating real-time views on Kibana . It exists any way to render these views from an android app on a responsive way ? Thanks. --- ## [Cat indices not working plz help](https://discuss.elastic.co/t/cat-indices-not-working-plz-help/207536)
**Author:** [@shota](https://discuss.elastic.co/u/shota)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 1:52pm UTC](https://discuss.elastic.co/t/cat-indices-not-working-plz-help/207536 "2019-11-12T13:52:38Z")
Hi all I have elasticsearch 6.8.3 and trying to get all indices from dev tools like this: GET \_cat/indices?v but I only get blank page: health status index uuid pri rep docs.count docs.deleted store.size pri.store.si… --- ## [Metrics fail after several hours](https://discuss.elastic.co/t/metrics-fail-after-several-hours/257422)
**Author:** [@DucretJe](https://discuss.elastic.co/u/DucretJe)\ **Replies:** 8\ **Last updated:** [December 7, 2020, 3:20pm UTC](https://discuss.elastic.co/t/metrics-fail-after-several-hours/257422 "2020-12-07T15:20:31Z")
Elasticsearch: Docker version 7.10 Kibana: Docker version 7.10 Metricbeat: Docker version 7.10 Hello, I have a strange issue with my ELK deployment. When I deploy Elasticsearch + Kibana, I get the metrics from the m… [Previous page](https://discuss.elastic.co/top.md?page=723&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=725&per_page=50&period=all)