# Top **URL:** https://discuss.elastic.co/top.md?page=740&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 741 --- ## [Field name contains dots](https://discuss.elastic.co/t/field-name-contains-dots/164898)
**Author:** [@kunliu](https://discuss.elastic.co/u/kunliu)\ **Replies:** 1\ **Last updated:** [January 28, 2019, 11:30am UTC](https://discuss.elastic.co/t/field-name-contains-dots/164898 "2019-01-28T11:30:27Z")
Hi Team, When put the mappings in Index, we have some field name that contains dots, for example: Server.users. PUT my\_index { "mappings": { "\_doc": { "properties": { "Server.users": { "… --- ## [Export template from custom beat based on metricbeat](https://discuss.elastic.co/t/export-template-from-custom-beat-based-on-metricbeat/119250)
**Author:** [@dcroonen](https://discuss.elastic.co/u/dcroonen)\ **Replies:** 7\ **Last updated:** [February 13, 2018, 12:37pm UTC](https://discuss.elastic.co/t/export-template-from-custom-beat-based-on-metricbeat/119250 "2018-02-13T12:37:27Z")
Hi I created my own beat based on metricbeat 6.0 with it's own modules and metricsets. I also created the necessary fields.yml files for the modules and the metricsets and ran successfully make update which gave me a ki… --- ## [ES Constantly reballancing after restart](https://discuss.elastic.co/t/es-constantly-reballancing-after-restart/63956)
**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\ **Replies:** 7\ **Last updated:** [October 27, 2016, 2:44am UTC](https://discuss.elastic.co/t/es-constantly-reballancing-after-restart/63956 "2016-10-27T02:44:26Z")
So, I did a rolling restart freezing the cluster then restarting, but afterwards it has been rebalancing for over 24 hours. where it was stable prior to the restart So some details I have 9 data nodes, with about 30… --- ## [Elasticsearch and Kibana not communicating](https://discuss.elastic.co/t/elasticsearch-and-kibana-not-communicating/55532)
**Author:** [@brandonmcgrath1](https://discuss.elastic.co/u/brandonmcgrath1)\ **Replies:** 7\ **Last updated:** [July 22, 2016, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-not-communicating/55532 "2016-07-22T07:29:18Z")
Our Elastic Searcnd Kibana has suddenly stopped working after two new servers were added to send winlog events. On start up the kibana status is red for a long time saying "Elasticsearch is still initialising the kibana … --- ## [Where is Filestream integration?](https://discuss.elastic.co/t/where-is-filestream-integration/323245)
**Author:** [@Guillaume\_Bouchez](https://discuss.elastic.co/u/Guillaume_Bouchez)\ **Replies:** 1\ **Last updated:** [January 16, 2023, 3:58pm UTC](https://discuss.elastic.co/t/where-is-filestream-integration/323245 "2023-01-16T15:58:25Z")
I'm Using fleet and elastic-agent integration for collecting logs, and I recently discovered a warning from elastic\_agent.filebeat, stating that logs inputs are deprecated and to use filetream inputs instead. Fine with… --- ## [Run two winlogbeat instances on the same machine](https://discuss.elastic.co/t/run-two-winlogbeat-instances-on-the-same-machine/259238)
**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\ **Replies:** 3\ **Last updated:** [December 21, 2020, 9:58pm UTC](https://discuss.elastic.co/t/run-two-winlogbeat-instances-on-the-same-machine/259238 "2020-12-21T21:58:56Z")
Hi, I want to send my winlogbeat data to two different ES clusters. As far as I know, winlogbeat can't have several outputs. Is there a way to run two winlogbeat instances with different configs on the same machine? --- ## [Can't start kibana 5.6.3](https://discuss.elastic.co/t/cant-start-kibana-5-6-3/105529)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 3\ **Last updated:** [October 30, 2017, 3:59pm UTC](https://discuss.elastic.co/t/cant-start-kibana-5-6-3/105529 "2017-10-30T15:59:29Z")
Hi, I have been running Kibana 5.2.2 for a while without problem. Yesterday I decided to upgrade my ELK stack to 5.6.3. I upgraded Elasticsearch and logstash first. They worked will with the older Kibana. But when I… --- ## [Custom routing Java example](https://discuss.elastic.co/t/custom-routing-java-example/13534)
**Author:** [@enoon](https://discuss.elastic.co/u/enoon)\ **Replies:** 3\ **Last updated:** [September 11, 2013, 8:10am UTC](https://discuss.elastic.co/t/custom-routing-java-example/13534 "2013-09-11T08:10:30Z")
Hi, Can anyone provide an example on how custom routing on a path can be achieved via the java API? Here is how I create my index: HashMap settings = new HashMap(); settings.put("number\_of\_shards", noShards);… --- ## [Closed indices do not release shards](https://discuss.elastic.co/t/closed-indices-do-not-release-shards/297142)
**Author:** [@gjulianm](https://discuss.elastic.co/u/gjulianm)\ **Replies:** 4\ **Last updated:** [February 15, 2022, 8:58am UTC](https://discuss.elastic.co/t/closed-indices-do-not-release-shards/297142 "2022-02-15T08:58:06Z")
I am having a problem where closed indices are not releasing shards. I am not sure if this is a configuration problem or a change with respect to previous versions (I am using 7.17.0 right now), because I have been able … --- ## [Using Filebeat to send different logs and differentiating in Kibana](https://discuss.elastic.co/t/using-filebeat-to-send-different-logs-and-differentiating-in-kibana/287580)
**Author:** [@Maduranga](https://discuss.elastic.co/u/Maduranga)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 4:54pm UTC](https://discuss.elastic.co/t/using-filebeat-to-send-different-logs-and-differentiating-in-kibana/287580 "2021-10-25T16:54:06Z")
Hello, I am looking for guidance to get started with ELK stack with Filebeat. I am using Elastic cloud with my servers using Filebeat to send logs directly to the Elastic cloud. I can get the log stream and see the st… --- ## [How to find JSON-Properties from LogFile as Fields in Elasticsearch?](https://discuss.elastic.co/t/how-to-find-json-properties-from-logfile-as-fields-in-elasticsearch/114266)
**Author:** [@awaitJosh](https://discuss.elastic.co/u/awaitJosh)\ **Replies:** 4\ **Last updated:** [January 5, 2018, 6:25pm UTC](https://discuss.elastic.co/t/how-to-find-json-properties-from-logfile-as-fields-in-elasticsearch/114266 "2018-01-05T18:25:39Z")
Hi, I have to create an ELK-Showcase for my team. The task is to take Log(files) from an ASP.NET-Application with Filebeat, forward them via Logstash to Elasticsearch and create a few sample-dashboards in Kibana. I ha… --- ## [Filter Bar filter options](https://discuss.elastic.co/t/filter-bar-filter-options/54848)
**Author:** [@masslive717](https://discuss.elastic.co/u/masslive717)\ **Replies:** 1\ **Last updated:** [July 7, 2016, 6:23pm UTC](https://discuss.elastic.co/t/filter-bar-filter-options/54848 "2016-07-07T18:23:41Z")
Recently I have created a Kibana Custom plugin. It is a funnel plugin. I am trying to add more functionality to the funnel plugin where if I click on any tear of the funnel I would like to add a filter of that tear to th… --- ## [Elastic Search, logstash and filebeat OSS 7.10.2 - Log4j Patch](https://discuss.elastic.co/t/elastic-search-logstash-and-filebeat-oss-7-10-2-log4j-patch/292425)
**Author:** [@marisubu](https://discuss.elastic.co/u/marisubu)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 7:48am UTC](https://discuss.elastic.co/t/elastic-search-logstash-and-filebeat-oss-7-10-2-log4j-patch/292425 "2021-12-20T07:48:56Z")
Hi We are currently using the OSS 7.10.2 version elastic stack in our product. Will there be any Patch(log4j upgrade to latest version) for this version for elastic stack? Thanks --- ## [Anyone succeeded in Logstash output to Clickhouse in some way?](https://discuss.elastic.co/t/anyone-succeeded-in-logstash-output-to-clickhouse-in-some-way/172002)
**Author:** [@paulsbuxton](https://discuss.elastic.co/u/paulsbuxton)\ **Replies:** 1\ **Last updated:** [October 2, 2019, 8:15pm UTC](https://discuss.elastic.co/t/anyone-succeeded-in-logstash-output-to-clickhouse-in-some-way/172002 "2019-10-02T20:15:19Z")
For various reasons, I'm trying to use logstash to push to Clickhouse using the plugin at https://github.com/mikechris/logstash-output-clickhouse, with data being source from a SQLServer input. The SQLServer side is abs… --- ## [Installing "logstash-input-jdbc" I think I'm missing something](https://discuss.elastic.co/t/installing-logstash-input-jdbc-i-think-im-missing-something/29635)
**Author:** [@madCow](https://discuss.elastic.co/u/madCow)\ **Replies:** 1\ **Last updated:** [September 26, 2015, 7:41pm UTC](https://discuss.elastic.co/t/installing-logstash-input-jdbc-i-think-im-missing-something/29635 "2015-09-26T19:41:35Z")
Hi, I'm running logstash 1.4.2 and/or 1.5.0 on windows server 2008. I'm trying to use the logstash-input-jdbc plugin. Running the "bin/plugin install logstash-input-jdbc" leads me to believe that the plugin is not avai… --- ## [ES 5.1.1: Cluster loses a node randomly every few hours. Error: Message not fully read (response) for requestId](https://discuss.elastic.co/t/es-5-1-1-cluster-loses-a-node-randomly-every-few-hours-error-message-not-fully-read-response-for-requestid/71208)
**Author:** [@Emanuele\_Verga](https://discuss.elastic.co/u/Emanuele_Verga)\ **Replies:** 2\ **Last updated:** [January 12, 2017, 10:03am UTC](https://discuss.elastic.co/t/es-5-1-1-cluster-loses-a-node-randomly-every-few-hours-error-message-not-fully-read-response-for-requestid/71208 "2017-01-12T10:03:13Z")
Hi all, I'm wondering if anybody else has seen this, or can help me understand what exactly is going on. We have a 5 data nodes/3 masters/1client node cluster at version 5.1.1. The data nodes are usually fairly busy,… --- ## [Suggester completion with highlight](https://discuss.elastic.co/t/suggester-completion-with-highlight/53104)
**Author:** [@cirot87](https://discuss.elastic.co/u/cirot87)\ **Replies:** 2\ **Last updated:** [June 17, 2016, 7:46am UTC](https://discuss.elastic.co/t/suggester-completion-with-highlight/53104 "2016-06-17T07:46:22Z")
Hi i need to set an highlight into a suggest result...i use the suggester completition field for take my suggest. I see that if i use phrase suggester i have this "check" to set the highlight parameter....but i don't … --- ## [Elasticsearch input plugin size](https://discuss.elastic.co/t/elasticsearch-input-plugin-size/280163)
**Author:** [@JFO\_90](https://discuss.elastic.co/u/JFO_90)\ **Replies:** 7\ **Last updated:** [August 3, 2021, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-size/280163 "2021-08-03T11:15:25Z")
Hi, I have a logstash configuration from which I'm trying to extract elasticsearch information with the elasticsearch input plugin. The problem that i have is that despite indicating a size, it always returns all the do… --- ## [Struggling with filebeat and elasticsearch ingest pipeline for processing custom log file that has weird date/time format](https://discuss.elastic.co/t/struggling-with-filebeat-and-elasticsearch-ingest-pipeline-for-processing-custom-log-file-that-has-weird-date-time-format/243941)
**Author:** [@jrykowski-huron](https://discuss.elastic.co/u/jrykowski-huron)\ **Replies:** 7\ **Last updated:** [August 21, 2020, 12:29am UTC](https://discuss.elastic.co/t/struggling-with-filebeat-and-elasticsearch-ingest-pipeline-for-processing-custom-log-file-that-has-weird-date-time-format/243941 "2020-08-21T00:29:49Z")
Struggling with use of elasticsearch ingest pipeline for custom parsing of a unique flatfile log format. Running into problems. Not sure if there's mix of issues here. Here's the scenerio... Format uses multi-line … --- ## [Fetching runners failed](https://discuss.elastic.co/t/fetching-runners-failed/85415)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 7\ **Last updated:** [June 1, 2017, 8:28pm UTC](https://discuss.elastic.co/t/fetching-runners-failed/85415 "2017-06-01T20:28:10Z")
Hi, After installing ECE beta2 and adding servers to the configuration, I start to get timeouts on the Regions -\> Runners tab saying Fetching runners failed. Initially they come in, then every other refresh of the page … --- ## [Connecting app-search to postman via the REST API](https://discuss.elastic.co/t/connecting-app-search-to-postman-via-the-rest-api/303557)
**Author:** [@Ines\_ZAYANI](https://discuss.elastic.co/u/Ines_ZAYANI)\ **Replies:** 4\ **Last updated:** [April 29, 2022, 10:20pm UTC](https://discuss.elastic.co/t/connecting-app-search-to-postman-via-the-rest-api/303557 "2022-04-29T22:20:53Z")
hello everyone! I'm trying to connect app-search to postman: while using the Dev Tools in kibana i tried with POST and got the following error: Request: GET 'http://localhost:3002/api/as/v1/engines/iot/search.json' \\ … --- ## [How to get my java client to discover an entire cluster](https://discuss.elastic.co/t/how-to-get-my-java-client-to-discover-an-entire-cluster/6623)
**Author:** [@MikeNereson](https://discuss.elastic.co/u/MikeNereson)\ **Replies:** 4\ **Last updated:** [February 7, 2012, 9:00pm UTC](https://discuss.elastic.co/t/how-to-get-my-java-client-to-discover-an-entire-cluster/6623 "2012-02-07T21:00:16Z")
Been using ES for a few days now - replacing compass+lucene embedded into our app toward this distributed model as we rewrite parts of our app to move into AWS EC2. I've just got an EC2 instance setup, backed to S… --- ## [Using Scroll Api causes Out of Memory errors](https://discuss.elastic.co/t/using-scroll-api-causes-out-of-memory-errors/283388)
**Author:** [@lakshmiteja\_salapu](https://discuss.elastic.co/u/lakshmiteja_salapu)\ **Replies:** 8\ **Last updated:** [September 6, 2021, 6:54am UTC](https://discuss.elastic.co/t/using-scroll-api-causes-out-of-memory-errors/283388 "2021-09-06T06:54:06Z")
I am trying to use scroll for getting over 41 million documents (156 GB) but it fails with out of memory error after getting 410000 documents Using batch size of 5000 documents and 30s - scroll time (also tried changing… --- ## [Date Mapping Parse Failure](https://discuss.elastic.co/t/date-mapping-parse-failure/256469)
**Author:** [@nara1](https://discuss.elastic.co/u/nara1)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 11:29pm UTC](https://discuss.elastic.co/t/date-mapping-parse-failure/256469 "2020-11-25T23:29:50Z")
Hello there, I am trying to send a date in the format 2020-10-29T05:36:06.143Z\[UTC\]. My mapping looks like this: "timeStamp": { "type": "date" } And I am getting the following error: Elasticsearch excep… --- ## [Repository-s3 bucket sub-folder for snapshots](https://discuss.elastic.co/t/repository-s3-bucket-sub-folder-for-snapshots/129754)
**Author:** [@the.tyler.farr](https://discuss.elastic.co/u/the.tyler.farr)\ **Replies:** 2\ **Last updated:** [April 27, 2018, 3:06am UTC](https://discuss.elastic.co/t/repository-s3-bucket-sub-folder-for-snapshots/129754 "2018-04-27T03:06:22Z")
Is it possible to tell Elasticsearch to snapshot an index into a sub-folder of an s3 bucket? Or, is the only way to logically separate different indices to create separate s3 buckets for each grouping/type of index? --- ## [How to get borders in Kibana 5.x dashboards?](https://discuss.elastic.co/t/how-to-get-borders-in-kibana-5-x-dashboards/102205)
**Author:** [@rajesh](https://discuss.elastic.co/u/rajesh)\ **Replies:** 5\ **Last updated:** [September 30, 2017, 5:45am UTC](https://discuss.elastic.co/t/how-to-get-borders-in-kibana-5-x-dashboards/102205 "2017-09-30T05:45:30Z")
Hi, Is there any way where I can put borders between dashboards in Kibana 5.x dashboards? Thanks --- ## [Filter by time range in visual builder](https://discuss.elastic.co/t/filter-by-time-range-in-visual-builder/132157)
**Author:** [@Zareh\_Vazquez](https://discuss.elastic.co/u/Zareh_Vazquez)\ **Replies:** 6\ **Last updated:** [June 4, 2018, 7:15pm UTC](https://discuss.elastic.co/t/filter-by-time-range-in-visual-builder/132157 "2018-06-04T19:15:41Z")
Hi, I am trying to create visualization in visual builder which allows me to have multiple metrics from different time frames which I can compare. I was expecting to do is by the use of filters where I can use time time… --- ## [Problem to define multiples propsector with filebeat](https://discuss.elastic.co/t/problem-to-define-multiples-propsector-with-filebeat/36918)
**Author:** [@aaroy428](https://discuss.elastic.co/u/aaroy428)\ **Replies:** 6\ **Last updated:** [April 18, 2017, 2:20pm UTC](https://discuss.elastic.co/t/problem-to-define-multiples-propsector-with-filebeat/36918 "2017-04-18T14:20:25Z")
Hi everybody, I am new to filebeat. I do have some issues to properly format filebeat to use multiples prospector. My goal is to separate my file type with a separate prospector to add selector fields used after … --- ## [Relationship between nodes count, shard count and shard size](https://discuss.elastic.co/t/relationship-between-nodes-count-shard-count-and-shard-size/61561)
**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\ **Replies:** 6\ **Last updated:** [September 27, 2016, 7:19am UTC](https://discuss.elastic.co/t/relationship-between-nodes-count-shard-count-and-shard-size/61561 "2016-09-27T07:19:27Z")
Hi is there any guide line for above topic, I've read many posts and people are saying different thing. some says each shard size is better not to exceed heap size which is around 30 to 32gb and some says not to exceed… --- ## [Kibana is late showing results from some hosts](https://discuss.elastic.co/t/kibana-is-late-showing-results-from-some-hosts/36106)
**Author:** [@MikeC](https://discuss.elastic.co/u/MikeC)\ **Replies:** 6\ **Last updated:** [December 3, 2015, 8:18pm UTC](https://discuss.elastic.co/t/kibana-is-late-showing-results-from-some-hosts/36106 "2015-12-03T20:18:02Z")
Hi, i have an elastic cloud with 4 hosts and one dummy node (that is not a data nor a master node, as advised here. my logstash config sends data in a round robin way, elasticsearch { hosts =\> \['m003', 'm004', 'm0… --- ## [\[Elasticsearch 5.4\] リストアのステータス(進行状況)について](https://discuss.elastic.co/t/elasticsearch-5-4/86629)
**Author:** [@yopya](https://discuss.elastic.co/u/yopya)\ **Replies:** 3\ **Last updated:** [May 26, 2017, 5:24am UTC](https://discuss.elastic.co/t/elasticsearch-5-4/86629 "2017-05-26T05:24:04Z")
お世話になります。 リストアのステータスを確認するリクエストはありますでしょうか。 スナップショット作成時の以下のようなリクエストでリストアの際もステータスを確認したいのですが、 どうにも見つからなかったため質問させていただきました。 GET /\_snapshot/\_status GET /\_snapshot/my\_backup/\_status GET /\_snapshot/my\_backup/snapshot\_1/\_statu… --- ## [Elasticsearch gives execption while report download\["message":"Request cannot be executed; I/O reactor status: STOPPED","errorstacktrace":"java.lang.RuntimeException\]](https://discuss.elastic.co/t/elasticsearch-gives-execption-while-report-download-message-request-cannot-be-executed-i-o-reactor-status-stopped-errorstacktrace-java-lang-runtimeexception/322825)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [January 11, 2023, 12:03pm UTC](https://discuss.elastic.co/t/elasticsearch-gives-execption-while-report-download-message-request-cannot-be-executed-i-o-reactor-status-stopped-errorstacktrace-java-lang-runtimeexception/322825 "2023-01-11T12:03:13Z")
Hello All, I'm getting following exception while downloading report by query elastic.Unable to understand resolution for this.Tried increasing the jvm heap to 12 gb ,still same exception. Exception: {"statusCode":"REP… --- ## [Is elasticsearch client is thread safe?](https://discuss.elastic.co/t/is-elasticsearch-client-is-thread-safe/151745)
**Author:** [@rohit\_kumar\_Jain](https://discuss.elastic.co/u/rohit_kumar_Jain)\ **Replies:** 2\ **Last updated:** [October 15, 2018, 7:29pm UTC](https://discuss.elastic.co/t/is-elasticsearch-client-is-thread-safe/151745 "2018-10-15T19:29:34Z")
Hi Geeks, My question is if elasticsearch client (or es go client) is thread-safe or not? I mean say suppose I have one es instance is running on 127.0.0.1:9200 and I have multiple indexes and multiple queries to fetch… --- ## [Replacing values of fields by regex](https://discuss.elastic.co/t/replacing-values-of-fields-by-regex/105434)
**Author:** [@srv](https://discuss.elastic.co/u/srv)\ **Replies:** 2\ **Last updated:** [October 30, 2017, 5:04pm UTC](https://discuss.elastic.co/t/replacing-values-of-fields-by-regex/105434 "2017-10-30T17:04:20Z")
Hi there, I'm fairly new to whole ES world and currently evaluating an ELK Setup. I parsed several Logmessages via Logstash into Elasticsearch. So far so good. However some of theses logmessages contain a field with use… --- ## [Logstash-jdbc-input Oracle SQL issue](https://discuss.elastic.co/t/logstash-jdbc-input-oracle-sql-issue/82219)
**Author:** [@s58smith](https://discuss.elastic.co/u/s58smith)\ **Replies:** 4\ **Last updated:** [April 14, 2017, 4:04pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-oracle-sql-issue/82219 "2017-04-14T16:04:27Z")
I'm having trouble trying to figure out why my SQL statement is not working. I've tested enough combinations that I have it narrowed down to a single line causing issue. "AND collection\_system\_date \>= SYSDATE - 300/86400… --- ## [Problems with match\_phrase](https://discuss.elastic.co/t/problems-with-match-phrase/306934)
**Author:** [@Nicolai\_Jee](https://discuss.elastic.co/u/Nicolai_Jee)\ **Replies:** 7\ **Last updated:** [June 13, 2022, 4:12am UTC](https://discuss.elastic.co/t/problems-with-match-phrase/306934 "2022-06-13T04:12:43Z")
Hi I have a query that looks like this: { "query": { "bool": { "must": \[ { "match\_phrase": { "fullAddress": "To-Bjerg 2" } } \] } }, "from": 0, … --- ## [Air-Gap-Systems: Running with private docker registry?](https://discuss.elastic.co/t/air-gap-systems-running-with-private-docker-registry/186392)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 7\ **Last updated:** [February 10, 2020, 2:51pm UTC](https://discuss.elastic.co/t/air-gap-systems-running-with-private-docker-registry/186392 "2020-02-10T14:51:44Z")
Hi, can I configure ECK to use a private docker registry? Target infrastructure will be a bare-metal kubernetes cluster which is air-gap, so the elastic registry will not be available for me. Thanks, Andreas --- ## [Can you change you profile name?](https://discuss.elastic.co/t/can-you-change-you-profile-name/138804)
**Author:** [@ThickFreeze](https://discuss.elastic.co/u/ThickFreeze)\ **Replies:** 7\ **Last updated:** [July 7, 2018, 7:16am UTC](https://discuss.elastic.co/t/can-you-change-you-profile-name/138804 "2018-07-07T07:16:00Z")
My real name was added through google sign up and I can't change it. I don't like it being available. Can this be changed? --- ## [Limit in fetching documents through rest API](https://discuss.elastic.co/t/limit-in-fetching-documents-through-rest-api/263551)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 10:32am UTC](https://discuss.elastic.co/t/limit-in-fetching-documents-through-rest-api/263551 "2021-02-08T10:32:10Z")
Hi All, I'm trying to fetch documents from elasticsearch using rest api but it looks like i can pull down only limited set of documents, below is the query i'm using and i'm getting very limited documents eventhough my … --- ## [Want to give only specific Webservice or API logs](https://discuss.elastic.co/t/want-to-give-only-specific-webservice-or-api-logs/79204)
**Author:** [@Raja1](https://discuss.elastic.co/u/Raja1)\ **Replies:** 8\ **Last updated:** [April 24, 2017, 4:23am UTC](https://discuss.elastic.co/t/want-to-give-only-specific-webservice-or-api-logs/79204 "2017-04-24T04:23:07Z")
Hi All, I have a requirement like below. Please help me to make the configuration accordingly. Collect the logs and index user based APIs. I am trying to integrate Layer 7 API Gateway logs where i could see many AP… --- ## [Results with unique value in field?](https://discuss.elastic.co/t/results-with-unique-value-in-field/78422)
**Author:** [@jaddison](https://discuss.elastic.co/u/jaddison)\ **Replies:** 3\ **Last updated:** [March 13, 2017, 11:26pm UTC](https://discuss.elastic.co/t/results-with-unique-value-in-field/78422 "2017-03-13T23:26:17Z")
Using ES 5.2. I've indexed activities (classes, local events, etc) that are put on by businesses. Along these lines: { "name": "Johnny's BBQ Fundraiser", "price": "$15/plate", "date": "2016-04-28 12:00:00", … --- ## [Delete index after backup](https://discuss.elastic.co/t/delete-index-after-backup/22097)
**Author:** [@Yarden\_Bar](https://discuss.elastic.co/u/Yarden_Bar)\ **Replies:** 3\ **Last updated:** [February 12, 2015, 1:58pm UTC](https://discuss.elastic.co/t/delete-index-after-backup/22097 "2015-02-12T13:58:15Z")
HI all, Is there any procedure to \*archive\* index to HDFS (or other repo) and delete it? I've looked into the 'Snapshot/Restore' docs and understood that if I execute "snapshot -\> delete index -\> snapshot" the … --- ## [Parallel scans to speed up scrolling](https://discuss.elastic.co/t/parallel-scans-to-speed-up-scrolling/13614)
**Author:** [@rockbobsta](https://discuss.elastic.co/u/rockbobsta)\ **Replies:** 3\ **Last updated:** [September 18, 2013, 10:03am UTC](https://discuss.elastic.co/t/parallel-scans-to-speed-up-scrolling/13614 "2013-09-18T10:03:25Z")
Hi, apologies if this is a double post, I also added this question in response to another question but I'm posting it here as I think it's actually a new topic: https://groups.google.com/forum/?fromgroups#!starre… --- ## [Bucket-key=custom, value=array(\_ids) aggregation?](https://discuss.elastic.co/t/bucket-key-custom-value-array--ids-aggregation/48682)
**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\ **Replies:** 5\ **Last updated:** [May 4, 2016, 11:25pm UTC](https://discuss.elastic.co/t/bucket-key-custom-value-array--ids-aggregation/48682 "2016-05-04T23:25:41Z")
Hi!, I have a mapping with fields "a string,b string,c string,t timestamp". Can I make bucket aggregations, where I can specify the key to be for example:: key=t(yymmdd):a:b (generate the key from script) Each buck… --- ## [Loogstash is not parsing the message correctly to kibana](https://discuss.elastic.co/t/loogstash-is-not-parsing-the-message-correctly-to-kibana/108344)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 6\ **Last updated:** [November 22, 2017, 3:58pm UTC](https://discuss.elastic.co/t/loogstash-is-not-parsing-the-message-correctly-to-kibana/108344 "2017-11-22T15:58:33Z")
hi,my sample log {"LogLevel":"ERROR","LogMsg":"{\\"itemId\\":0,\\"module\\":\\"/curie/encounter\\",\\"action\\":\\"/addToken\\",\\"errorMessage\\":\\"java.lang.RuntimeException: org.apache.ibatis.exceptions.PersistenceException: \\\\n#… --- ## [Automated Report Failing](https://discuss.elastic.co/t/automated-report-failing/83093)
**Author:** [@banderson](https://discuss.elastic.co/u/banderson)\ **Replies:** 6\ **Last updated:** [April 20, 2017, 9:59pm UTC](https://discuss.elastic.co/t/automated-report-failing/83093 "2017-04-20T21:59:47Z")
I configured a notification email elasticsearch: xpack.notification.email: smtp\_account: profile: standard smtp: host: momail.mo.gov user: bill.anderson@oa.mo.gov from: kibana@… --- ## [Match sur plusieurs valeurs](https://discuss.elastic.co/t/match-sur-plusieurs-valeurs/66101)
**Author:** [@Olivier\_Murciano](https://discuss.elastic.co/u/Olivier_Murciano)\ **Replies:** 6\ **Last updated:** [November 15, 2016, 2:21pm UTC](https://discuss.elastic.co/t/match-sur-plusieurs-valeurs/66101 "2016-11-15T14:21:06Z")
Bonjour, Je suis nouveau sur EL et je travaille a faire des queries EL via un site web. en parcourant la doc, j'ai trouve le terme TERM pour une recherche d'un terme exact. Si on doit chercher plusiers termes sur un … --- ## [Best Match & Exact Match](https://discuss.elastic.co/t/best-match-exact-match/58675)
**Author:** [@uppaljs](https://discuss.elastic.co/u/uppaljs)\ **Replies:** 6\ **Last updated:** [August 24, 2016, 8:07pm UTC](https://discuss.elastic.co/t/best-match-exact-match/58675 "2016-08-24T20:07:26Z")
Hi, I have input coming in from a database , specifically call detail records , I need to parse the calling party number to identify the country from a dictionary file. The problem I am facing is that unless the inpu… --- ## [EQL query to alert 1 alert per each user](https://discuss.elastic.co/t/eql-query-to-alert-1-alert-per-each-user/339539)
**Author:** [@yzaritskyi](https://discuss.elastic.co/u/yzaritskyi)\ **Replies:** 2\ **Last updated:** [August 8, 2023, 1:15pm UTC](https://discuss.elastic.co/t/eql-query-to-alert-1-alert-per-each-user/339539 "2023-08-08T13:15:08Z")
Hello all! I'd like to create a Rule based on the EQL query that will trigger an alert only once per user. For example: The input list of logs is user1 ip1 user1 ip1 user2 ip2 user5 ip5 user4 ip4 user4 ip4 user… --- ## [Elastic Cloud - Not able to Update indices.query.bool.max\_clause\_count](https://discuss.elastic.co/t/elastic-cloud-not-able-to-update-indices-query-bool-max-clause-count/265428)
**Author:** [@iscorpio23](https://discuss.elastic.co/u/iscorpio23)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 6:44am UTC](https://discuss.elastic.co/t/elastic-cloud-not-able-to-update-indices-query-bool-max-clause-count/265428 "2021-02-25T06:44:35Z")
HI, Im using elastic cloud and need to update "indices.query.bool.max\_clause\_count: 2048" in the elasticsearch.yml, but having below error. Anyone have the same experience and how we solve this ? Thanks, Usman [Previous page](https://discuss.elastic.co/top.md?page=739&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=741&per_page=50&period=all)