# Top **URL:** https://discuss.elastic.co/top.md?page=756&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 757 --- ## [Elastic search : Replacing BoolFilterBuilder from v0.9 to v6](https://discuss.elastic.co/t/elastic-search-replacing-boolfilterbuilder-from-v0-9-to-v6/112148)
**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\ **Replies:** 8\ **Last updated:** [December 18, 2017, 11:43am UTC](https://discuss.elastic.co/t/elastic-search-replacing-boolfilterbuilder-from-v0-9-to-v6/112148 "2017-12-18T11:43:09Z")
Hi Team, Can you please help me if the below code(es v0.9) can be replaced BoolFilterBuilder filter = FilterBuilders.boolFilter().filterName("compositeFilter"); filterBuilder.must(FilterBuilders.termsFilter("keyword", … --- ## [Metricbeat -\> redis -\> logstash -\> elasticsearch: failed to parse field \[kubernetes.labels.app\]](https://discuss.elastic.co/t/metricbeat-redis-logstash-elasticsearch-failed-to-parse-field-kubernetes-labels-app/194992)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 12:01pm UTC](https://discuss.elastic.co/t/metricbeat-redis-logstash-elasticsearch-failed-to-parse-field-kubernetes-labels-app/194992 "2019-09-09T12:01:00Z")
Hi, not sure if this issue is better be posted here or in metricbeat section. I have deployed metricbeat in kubernetes using this manual: https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-kubernetes.… --- ## [Kibana SAML authentication error](https://discuss.elastic.co/t/kibana-saml-authentication-error/183379)
**Author:** [@leobaiano](https://discuss.elastic.co/u/leobaiano)\ **Replies:** 5\ **Last updated:** [May 30, 2019, 2:12pm UTC](https://discuss.elastic.co/t/kibana-saml-authentication-error/183379 "2019-05-30T14:12:51Z")
I'm using elastic cloud and I followed the link tutorial below to enable SAML authentication on Kibana, but I'm having a problem. Documentation I have followed: https://www.elastic.co/guide/en/cloud/current/ec-securing-… --- ## [Error While Installing Elastic search plugins](https://discuss.elastic.co/t/error-while-installing-elastic-search-plugins/243170)
**Author:** [@WaseemSiddiqui](https://discuss.elastic.co/u/WaseemSiddiqui)\ **Replies:** 4\ **Last updated:** [August 4, 2020, 10:28am UTC](https://discuss.elastic.co/t/error-while-installing-elastic-search-plugins/243170 "2020-08-04T10:28:23Z")
Installing the ICU analysis 7.3.1. for Elastic Search 7.3.1 unfortunately I am getting a java error .C:\\Program Files\\Elastic\\Elasticsearch\\7.3.1\\bin\>elasticsearch-plugin.bat instal l path\\analysis-icu-7.3.1.zip -\> … --- ## [Error using date match filter](https://discuss.elastic.co/t/error-using-date-match-filter/45740)
**Author:** [@Wolls013](https://discuss.elastic.co/u/Wolls013)\ **Replies:** 4\ **Last updated:** [March 24, 2017, 6:10pm UTC](https://discuss.elastic.co/t/error-using-date-match-filter/45740 "2017-03-24T18:10:15Z")
Hi everyone, I keep getting an error while trying to make my timestamp ("time") field from my MS SQL database the @timestamp field using the date match filter in logstash. This is my input i'm using for my timestam… --- ## [Scroll returns inconsistent number of results](https://discuss.elastic.co/t/scroll-returns-inconsistent-number-of-results/118018)
**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\ **Replies:** 3\ **Last updated:** [February 8, 2018, 6:58am UTC](https://discuss.elastic.co/t/scroll-returns-inconsistent-number-of-results/118018 "2018-02-08T06:58:13Z")
We are using ElasticSearch 5.4.0 and noticed a strange behavior of the scroll API on a very specific index. The behavior we are seeing is that when scrolling with a simple match\_all query, the number of returned results… --- ## [Msearch speed](https://discuss.elastic.co/t/msearch-speed/117149)
**Author:** [@jdgenio](https://discuss.elastic.co/u/jdgenio)\ **Replies:** 3\ **Last updated:** [February 7, 2018, 6:32am UTC](https://discuss.elastic.co/t/msearch-speed/117149 "2018-02-07T06:32:42Z")
Hi, we're using elasticsearch 5.3.0 and noticed something weird. Here are my queries using \_msearch and \_search: \_msearch (/\_msearch) { "index": "us\_import", "type": "shipment", "preference": "\_replica\_first" } { "que… --- ## [Can not decode Citrix Netscaler IPFIX messages](https://discuss.elastic.co/t/can-not-decode-citrix-netscaler-ipfix-messages/244654)
**Author:** [@tkuronen](https://discuss.elastic.co/u/tkuronen)\ **Replies:** 7\ **Last updated:** [October 30, 2020, 7:17pm UTC](https://discuss.elastic.co/t/can-not-decode-citrix-netscaler-ipfix-messages/244654 "2020-10-30T19:17:17Z")
Is anyone here successfully decoded a IPFIX data send by Citrix Netscaler ? Version: Logstash (7.7.1) / logstash-codec-netflow (4.2.1) Operating System: RHEL 7.8 Logstash Input config: input { udp { id =\> … --- ## [Logstash only starts on 127.0.0.1](https://discuss.elastic.co/t/logstash-only-starts-on-127-0-0-1/203716)
**Author:** [@fabricioraphael](https://discuss.elastic.co/u/fabricioraphael)\ **Replies:** 7\ **Last updated:** [October 16, 2019, 9:45pm UTC](https://discuss.elastic.co/t/logstash-only-starts-on-127-0-0-1/203716 "2019-10-16T21:45:32Z")
I'am using Logstash 7.3 installed locally on server with: sudo apt-get update && sudo apt-get install logstash The goal is use filebeat to send logs to Elastic from Logstash but when I run Logstash, they starts on 127.… --- ## [SIEM not ingesting Windows logs from servers](https://discuss.elastic.co/t/siem-not-ingesting-windows-logs-from-servers/188653)
**Author:** [@sc1](https://discuss.elastic.co/u/sc1)\ **Replies:** 7\ **Last updated:** [July 3, 2019, 1:48pm UTC](https://discuss.elastic.co/t/siem-not-ingesting-windows-logs-from-servers/188653 "2019-07-03T13:48:36Z")
Hello, I've been testing the new SIEM function, I've got 2 domain controllers/servers sending through logs via Winlogbeat and 4 client PCs sending logs again through the same method. When I check via dashboards or even … --- ## [Simple Function Score Query Shows Very Poor Performance](https://discuss.elastic.co/t/simple-function-score-query-shows-very-poor-performance/274)
**Author:** [@Yosi\_Haran](https://discuss.elastic.co/u/Yosi_Haran)\ **Replies:** 2\ **Last updated:** [June 7, 2016, 6:30am UTC](https://discuss.elastic.co/t/simple-function-score-query-shows-very-poor-performance/274 "2016-06-07T06:30:44Z")
Hi all, I'm running a query that looks like the following, only with many Filters: { "size": 30, "query": { "function\_score": { "query": { "filtered": { "query": { "match\_a… --- ## [Is Elasticsearch paid?](https://discuss.elastic.co/t/is-elasticsearch-paid/329759)
**Author:** [@adzik](https://discuss.elastic.co/u/adzik)\ **Replies:** 6\ **Last updated:** [April 11, 2023, 5:52pm UTC](https://discuss.elastic.co/t/is-elasticsearch-paid/329759 "2023-04-11T17:52:54Z")
Hello, I have an ecommerce app and I would like to utilize Elasticsearch to search my products by customers. Do I need to buy a license in this case? I just want to make sure --- ## [Filter\_path support in Java Client](https://discuss.elastic.co/t/filter-path-support-in-java-client/303258)
**Author:** [@Fabrizio\_Fortino](https://discuss.elastic.co/u/Fabrizio_Fortino)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 12:07pm UTC](https://discuss.elastic.co/t/filter-path-support-in-java-client/303258 "2022-04-26T12:07:02Z")
We would like to reduce the response size of search requests by removing stuff we don't need (eg: index name since we are pointing to a single index or score). Elastic supports this through filter\_path. Both RHLC and EJ… --- ## [How can i zero pad a string in painless](https://discuss.elastic.co/t/how-can-i-zero-pad-a-string-in-painless/101914)
**Author:** [@danaronson](https://discuss.elastic.co/u/danaronson)\ **Replies:** 4\ **Last updated:** [October 7, 2017, 10:51pm UTC](https://discuss.elastic.co/t/how-can-i-zero-pad-a-string-in-painless/101914 "2017-10-07T22:51:01Z")
I am adding a scripted field to create a URL and I need to zero pad some date values (since data.date.dayOfMonth and related functions don't). Any pointers to how I can do this? --dan --- ## [Allocate Shards from status unassigned 5.6.2](https://discuss.elastic.co/t/allocate-shards-from-status-unassigned-5-6-2/118320)
**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\ **Replies:** 3\ **Last updated:** [February 3, 2018, 10:17pm UTC](https://discuss.elastic.co/t/allocate-shards-from-status-unassigned-5-6-2/118320 "2018-02-03T22:17:52Z")
I am working up a system with elasticsearch 5.6.2, I did a rolling update to elasticsearch 6.1.3 but something went wrong with the existing applications, so i reverted back to v5.6.2. The Issue I am facing is, my cluster… --- ## [Passing data from file through Logstash to Kibana](https://discuss.elastic.co/t/passing-data-from-file-through-logstash-to-kibana/113515)
**Author:** [@Jeff\_Haynes](https://discuss.elastic.co/u/Jeff_Haynes)\ **Replies:** 3\ **Last updated:** [December 30, 2017, 9:20pm UTC](https://discuss.elastic.co/t/passing-data-from-file-through-logstash-to-kibana/113515 "2017-12-30T21:20:58Z")
Hello, I am new to ELK and have been trying for a few weeks to get things to work. I am using Elasticsearch 6. I have JSON files being added to /var/local/ that have been structured for elasticsearch sample JSON file \[… --- ## [Beats Field Data](https://discuss.elastic.co/t/beats-field-data/38179)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 8\ **Last updated:** [January 4, 2016, 11:15am UTC](https://discuss.elastic.co/t/beats-field-data/38179 "2016-01-04T11:15:22Z")
Hi, In the "fields" defintions of filebeat.yml is nesting permitted as follows: fields: field\_type: sub\_type1: value sub\_type2: value ...which I would then reference in logstash as \[fields\]\[field\_type\]\[sub\_… --- ## [Java Client Bulk API performance settings ES 5.x](https://discuss.elastic.co/t/java-client-bulk-api-performance-settings-es-5-x/99112)
**Author:** [@Eduard\_Kubanda](https://discuss.elastic.co/u/Eduard_Kubanda)\ **Replies:** 5\ **Last updated:** [September 7, 2017, 9:38am UTC](https://discuss.elastic.co/t/java-client-bulk-api-performance-settings-es-5-x/99112 "2017-09-07T09:38:05Z")
Hi there, I am writing Java application to perform bulk update to Elasticsearch. I need to reach the best possible indexing performance. I understand complexity of cluster and hardware settings, but in this thread I wa… --- ## [Creating Custom elasticsearch templates](https://discuss.elastic.co/t/creating-custom-elasticsearch-templates/65483)
**Author:** [@setlem](https://discuss.elastic.co/u/setlem)\ **Replies:** 5\ **Last updated:** [November 10, 2016, 9:57am UTC](https://discuss.elastic.co/t/creating-custom-elasticsearch-templates/65483 "2016-11-10T09:57:37Z")
Hi all, i am trying to create custom elasticsearch template. after i create a template and update it in .conf am not getting any output. My template is: my conf file is: is this the correct way to do it? or am doi… --- ## [New Basic or (temporary) Trial license not being accepted](https://discuss.elastic.co/t/new-basic-or-temporary-trial-license-not-being-accepted/78624)
**Author:** [@Nick\_Dub](https://discuss.elastic.co/u/Nick_Dub)\ **Replies:** 2\ **Last updated:** [March 15, 2017, 3:26pm UTC](https://discuss.elastic.co/t/new-basic-or-temporary-trial-license-not-being-accepted/78624 "2017-03-15T15:26:48Z")
Our trial license for commercial plug-ins expired a few weeks ago. All commercial plug-ins were either uninstalled or disabled at that time. When trying to re-start the cluster with a new configuration just now, we fir… --- ## [Logstash HA with VIP?](https://discuss.elastic.co/t/logstash-ha-with-vip/42563)
**Author:** [@Kevin\_Ross](https://discuss.elastic.co/u/Kevin_Ross)\ **Replies:** 2\ **Last updated:** [February 29, 2016, 9:19am UTC](https://discuss.elastic.co/t/logstash-ha-with-vip/42563 "2016-02-29T09:19:54Z")
Hi, When I started I had 1 node with entire ELK stack on it which worked well for my security logging. Now I have a few though and what I have right now ELK is effectively on one node and there is other nodes in the ES… --- ## [No information in the "Metrics" module of the "APM" screen](https://discuss.elastic.co/t/no-information-in-the-metrics-module-of-the-apm-screen/279346)
**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 8:04am UTC](https://discuss.elastic.co/t/no-information-in-the-metrics-module-of-the-apm-screen/279346 "2021-07-26T08:04:49Z")
APM Server version 7.13.3 elasticSearch: 7.13.3 kibana: 7.13.3 No information in the "Metrics" module of the "APM" screen 1.run apm,es,kibana: docker network create -d bridge my-jaeger-net docker run --name elasticsea… --- ## [Convert Hexadecimal value to ASCII](https://discuss.elastic.co/t/convert-hexadecimal-value-to-ascii/222408)
**Author:** [@ankitsynX](https://discuss.elastic.co/u/ankitsynX)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 2:59pm UTC](https://discuss.elastic.co/t/convert-hexadecimal-value-to-ascii/222408 "2020-03-12T14:59:15Z")
Hi, I am trying to parse some events from Auditd, the values have been extracted but the commands executed are coming in hexadecimal format. Can anyone help how to convert it to ASCII in a logstash pipeline using mutat… --- ## [S3 Output - Minio Connection Error](https://discuss.elastic.co/t/s3-output-minio-connection-error/156360)
**Author:** [@bitva77](https://discuss.elastic.co/u/bitva77)\ **Replies:** 2\ **Last updated:** [November 13, 2018, 5:14pm UTC](https://discuss.elastic.co/t/s3-output-minio-connection-error/156360 "2018-11-13T17:14:57Z")
Hi! We're trying to output to Minio via the S3 output plugin. We specify the name of the server via endpoint: and we're getting this error: \[ERROR\]\[logstash.outputs.s3 \] Uploading failed, retrying. {:exception=\>S… --- ## [Filebeat can't exclude HTTP200](https://discuss.elastic.co/t/filebeat-cant-exclude-http200/135061)
**Author:** [@marcandre](https://discuss.elastic.co/u/marcandre)\ **Replies:** 6\ **Last updated:** [June 12, 2018, 10:04pm UTC](https://discuss.elastic.co/t/filebeat-cant-exclude-http200/135061 "2018-06-12T22:04:20Z")
Hello, I am trying to exclude HTTP 200 code from the logs sent to elasticsearch by filebeat Here an example of the message: IP- - \[07/Jun/2018:22:39:23 +0000\] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86\_6… --- ## [Date Filter Not working parsing IIS logs](https://discuss.elastic.co/t/date-filter-not-working-parsing-iis-logs/83071)
**Author:** [@Peter\_Dwyer](https://discuss.elastic.co/u/Peter_Dwyer)\ **Replies:** 6\ **Last updated:** [April 20, 2017, 3:19pm UTC](https://discuss.elastic.co/t/date-filter-not-working-parsing-iis-logs/83071 "2017-04-20T15:19:36Z")
I'm having trouble with the date filter. it doesn't seem to be updating the timestamp correctly. filter { if \[type\] == "iis" { grok { match =\> {"message" =\> "%{TIMESTAMP\_ISO8601:log\_timestamp} %{WORD:servic… --- ## [Problem with loaded Dashboards & Visualizations](https://discuss.elastic.co/t/problem-with-loaded-dashboards-visualizations/33363)
**Author:** [@vmcano](https://discuss.elastic.co/u/vmcano)\ **Replies:** 4\ **Last updated:** [November 2, 2015, 8:57am UTC](https://discuss.elastic.co/t/problem-with-loaded-dashboards-visualizations/33363 "2015-11-02T08:57:48Z")
I'm using Chef to manage my ELK. Something important for me is being able to import automatically dashboards and visualizations and I found a nice way to do this: Create "manually" the dashboard/visualization. Export … --- ## [IIndexing PDF and Image documents](https://discuss.elastic.co/t/iindexing-pdf-and-image-documents/327988)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [March 19, 2023, 8:19pm UTC](https://discuss.elastic.co/t/iindexing-pdf-and-image-documents/327988 "2023-03-19T20:19:09Z")
Would like to know whether PDF and Image documents (Stored in local file system/ AWS S3) can be indexed to enable the search on key entities depending on the nature of the documents (School Admission form, Examination Fo… --- ## [Duplicate results with alias and multiple(?) indices](https://discuss.elastic.co/t/duplicate-results-with-alias-and-multiple-indices/80743)
**Author:** [@gjost](https://discuss.elastic.co/u/gjost)\ **Replies:** 1\ **Last updated:** [March 31, 2017, 12:39am UTC](https://discuss.elastic.co/t/duplicate-results-with-alias-and-multiple-indices/80743 "2017-03-31T00:39:58Z")
I have a dataset that I've fed into Elasticsearch several times and I'm getting strange results. Yesterday I fed the data in to index "mydb-20170329" and then created an alias "mydb-dev" pointing to it. Everything wor… --- ## [Error while loading RDDOperationScope, Missing dependency 'bad symbolic reference](https://discuss.elastic.co/t/error-while-loading-rddoperationscope-missing-dependency-bad-symbolic-reference/36935)
**Author:** [@kyunam](https://discuss.elastic.co/u/kyunam)\ **Replies:** 1\ **Last updated:** [December 13, 2015, 11:50pm UTC](https://discuss.elastic.co/t/error-while-loading-rddoperationscope-missing-dependency-bad-symbolic-reference/36935 "2015-12-13T23:50:12Z")
My POM has org.apache.spark.spark-core\_2.10.1.5.1 org.elasticsearchsearch.elasticsearch-spark\_2.10.2.1.0.Beta1 org.scalatest.scalatest\_2.10.2.2.3 If I try to use anything higher than elasticsearch-spark\_2.10.2.1.… --- ## [Increasing Rows per Page Limit in Kibana 8.6.2](https://discuss.elastic.co/t/increasing-rows-per-page-limit-in-kibana-8-6-2/336780)
**Author:** [@7a6b6f](https://discuss.elastic.co/u/7a6b6f)\ **Replies:** 5\ **Last updated:** [June 28, 2023, 10:55am UTC](https://discuss.elastic.co/t/increasing-rows-per-page-limit-in-kibana-8-6-2/336780 "2023-06-28T10:55:33Z")
Hello fellow forum members, I have been using Kibana version 8.6.2 for my data analysis needs and have come across a query regarding the "Rows per Page" limit in the Discover category of the advanced settings. By def… --- ## [Snapshots not showing in a timely manner](https://discuss.elastic.co/t/snapshots-not-showing-in-a-timely-manner/287778)
**Author:** [@chrisgg](https://discuss.elastic.co/u/chrisgg)\ **Replies:** 8\ **Last updated:** [November 11, 2021, 11:35am UTC](https://discuss.elastic.co/t/snapshots-not-showing-in-a-timely-manner/287778 "2021-11-11T11:35:26Z")
Hi all I will preface this by saying that I know that CCR would do what we want, but we requested a quote for this and the company said no way, the cost was just too high! We are only using ES very lightly and it is not… --- ## [Question about Heartbeat not being able to communicate with Elastic/Kibana server](https://discuss.elastic.co/t/question-about-heartbeat-not-being-able-to-communicate-with-elastic-kibana-server/200589)
**Author:** [@hacbobross](https://discuss.elastic.co/u/hacbobross)\ **Replies:** 8\ **Last updated:** [September 22, 2019, 3:29pm UTC](https://discuss.elastic.co/t/question-about-heartbeat-not-being-able-to-communicate-with-elastic-kibana-server/200589 "2019-09-22T15:29:55Z")
Hello everyone, I am trying to get familiar with the ELK stack and right now I am encountering a problem. I am using VMare Workstation 15 Pro and have set up an Elastic VM that contains Elasticsearch, Kibana, and Logsta… --- ## [Elasticsearch match\_all default sort?](https://discuss.elastic.co/t/elasticsearch-match-all-default-sort/129910)
**Author:** [@Atif\_Abdul\_Ghafoor](https://discuss.elastic.co/u/Atif_Abdul_Ghafoor)\ **Replies:** 8\ **Last updated:** [April 29, 2018, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-match-all-default-sort/129910 "2018-04-29T12:35:27Z")
How elaticsearch sort in case of match\_all query when the \_score is 1 of all the documents available in an index? --- ## [NPE on scrolled queries](https://discuss.elastic.co/t/npe-on-scrolled-queries/60234)
**Author:** [@Marco\_Fago](https://discuss.elastic.co/u/Marco_Fago)\ **Replies:** 8\ **Last updated:** [September 12, 2016, 10:30am UTC](https://discuss.elastic.co/t/npe-on-scrolled-queries/60234 "2016-09-12T10:30:06Z")
Hi, I have a problme with a cluster of 4 nodes with ES 2.4.0 upgraded from 2.3.4. Currently I have 8 indexes, called url-0,url-1,...,url-8 with around 1B documents. The template for each index is { "template" : … --- ## [Unable to search for text](https://discuss.elastic.co/t/unable-to-search-for-text/9275)
**Author:** [@shannu](https://discuss.elastic.co/u/shannu)\ **Replies:** 8\ **Last updated:** [October 12, 2012, 10:03am UTC](https://discuss.elastic.co/t/unable-to-search-for-text/9275 "2012-10-12T10:03:54Z")
Hello All, I am trying to create a query to filter based on the date range provided, search for specific ID and also with some "search text or some search keywords" I am able to fetch the records with the date … --- ## [Trying to query on length of the nested field](https://discuss.elastic.co/t/trying-to-query-on-length-of-the-nested-field/343853)
**Author:** [@Anand\_Konagala](https://discuss.elastic.co/u/Anand_Konagala)\ **Replies:** 7\ **Last updated:** [October 3, 2023, 1:41pm UTC](https://discuss.elastic.co/t/trying-to-query-on-length-of-the-nested-field/343853 "2023-10-03T13:41:07Z")
Hi, i have a mapping for an index of field resume.profile.locations, which is an nested field Here, I need to perform a scripting query... I am getting error call no mapping for that field but, I gave a mapping for … --- ## [Elasticsearch Timeout issue (Attempted to send a bulk request to elasticsearch)](https://discuss.elastic.co/t/elasticsearch-timeout-issue-attempted-to-send-a-bulk-request-to-elasticsearch/227315)
**Author:** [@Afsal](https://discuss.elastic.co/u/Afsal)\ **Replies:** 1\ **Last updated:** [April 9, 2020, 3:12pm UTC](https://discuss.elastic.co/t/elasticsearch-timeout-issue-attempted-to-send-a-bulk-request-to-elasticsearch/227315 "2020-04-09T15:12:45Z")
Hi guys, We are using Elasticsearch and Logstash 6.8.2 and we are facing the below issue intermittent in the logstash logs. \[2020-04-05T11:33:06,492\]\[ERROR\]\[logstash.outputs.elasticsearch\] Attempted to send a bulk requ… --- ## [Elasticsearch Update query high level rest client java api](https://discuss.elastic.co/t/elasticsearch-update-query-high-level-rest-client-java-api/200060)
**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\ **Replies:** 7\ **Last updated:** [September 25, 2019, 11:43am UTC](https://discuss.elastic.co/t/elasticsearch-update-query-high-level-rest-client-java-api/200060 "2019-09-25T11:43:13Z")
I am using elasticsearch high level rest client, i need to update the document in elasticsearch i have seen the document to update the single document but i need to update more than one document using condition how to d… --- ## [Create Hyperlink in kibana 6.2](https://discuss.elastic.co/t/create-hyperlink-in-kibana-6-2/134208)
**Author:** [@anupghoshal1985](https://discuss.elastic.co/u/anupghoshal1985)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 3:14pm UTC](https://discuss.elastic.co/t/create-hyperlink-in-kibana-6-2/134208 "2018-06-01T15:14:44Z")
Hi All I am using kibana-6.2.4-x86\_64.rpm My Use case is as follows I have one data field as below log\_url = http:/xx.yy.zz/dir/result/output.log Using the above filed I could create a scripted field using painles… --- ## [Courier Fetch: 5 of 5 shards failed on Kibana](https://discuss.elastic.co/t/courier-fetch-5-of-5-shards-failed-on-kibana/44766)
**Author:** [@nazmul.ayla](https://discuss.elastic.co/u/nazmul.ayla)\ **Replies:** 1\ **Last updated:** [March 17, 2016, 11:27pm UTC](https://discuss.elastic.co/t/courier-fetch-5-of-5-shards-failed-on-kibana/44766 "2016-03-17T23:27:28Z")
Hi , I am running a 3 node elastic search cluster with replica 1 . I am also running two node logstash HA. Problem is that recently i have seen this error "courier fetch : X of X shards failed " . But if i look at my cl… --- ## [How to take data from old server and \*merge\* it with data on new server](https://discuss.elastic.co/t/how-to-take-data-from-old-server-and-merge-it-with-data-on-new-server/27658)
**Author:** [@John\_Thornborrow](https://discuss.elastic.co/u/John_Thornborrow)\ **Replies:** 7\ **Last updated:** [August 19, 2015, 3:57pm UTC](https://discuss.elastic.co/t/how-to-take-data-from-old-server-and-merge-it-with-data-on-new-server/27658 "2015-08-19T15:57:30Z")
Hi, We've recently upgraded our hardware, and have now got a replacement ES cluster. I want to restore the indices on our old cluster into/onto the new cluster without losing what is currently on the new cluster. I.e… --- ## [How to centre the text in the dashboard visualisation? I am really struggling to center the text without the top white portion](https://discuss.elastic.co/t/how-to-centre-the-text-in-the-dashboard-visualisation-i-am-really-struggling-to-center-the-text-without-the-top-white-portion/246828)
**Author:** [@krishnendu](https://discuss.elastic.co/u/krishnendu)\ **Replies:** 2\ **Last updated:** [September 1, 2020, 1:07am UTC](https://discuss.elastic.co/t/how-to-centre-the-text-in-the-dashboard-visualisation-i-am-really-struggling-to-center-the-text-without-the-top-white-portion/246828 "2020-09-01T01:07:21Z")
--- ## ['Kibana server is not ready' after 7.7.1-7.8.1](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-7-7-1-7-8-1/243937)
**Author:** [@Gavin\_Clark](https://discuss.elastic.co/u/Gavin_Clark)\ **Replies:** 2\ **Last updated:** [August 6, 2020, 2:34am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-7-7-1-7-8-1/243937 "2020-08-06T02:34:07Z")
After experiencing slowness in the Kibana UI from the jump from 6.8.9 to 7.7.1, I was told on the forums I should upgrade to 7.8 as that had a number of UI performance improvements. All elasticsearch nodes were upgraded… --- ## [Elastic Agent Integration: File Integrity Monitoring (FIM)](https://discuss.elastic.co/t/elastic-agent-integration-file-integrity-monitoring-fim/290448)
**Author:** [@morgan.atwood](https://discuss.elastic.co/u/morgan.atwood)\ **Replies:** 3\ **Last updated:** [December 8, 2021, 3:10am UTC](https://discuss.elastic.co/t/elastic-agent-integration-file-integrity-monitoring-fim/290448 "2021-12-08T03:10:10Z")
Will the elastic agent/endpoint eventually have file integrity monitoring like Auditbeat in the future? Looking for options to replace TrendMicro but it looks like I'll have to use auditbeat or osquery with the elastic a… --- ## [Using http output plugin for multi-form rest api call and attaching message as a file](https://discuss.elastic.co/t/using-http-output-plugin-for-multi-form-rest-api-call-and-attaching-message-as-a-file/36214)
**Author:** [@SKing](https://discuss.elastic.co/u/SKing)\ **Replies:** 3\ **Last updated:** [December 3, 2015, 5:20pm UTC](https://discuss.elastic.co/t/using-http-output-plugin-for-multi-form-rest-api-call-and-attaching-message-as-a-file/36214 "2015-12-03T17:20:44Z")
Hi guys, first time poster. I've started using logstash to collect event data. The requirement I have is to send this information as a file attachment using a rest api. Now, I'd rather not go to the "expense" of hav… --- ## [How can I get a list of users, roles, spaces, etc](https://discuss.elastic.co/t/how-can-i-get-a-list-of-users-roles-spaces-etc/261370)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 4\ **Last updated:** [January 18, 2021, 3:37am UTC](https://discuss.elastic.co/t/how-can-i-get-a-list-of-users-roles-spaces-etc/261370 "2021-01-18T03:37:01Z")
Hello, Is there a way to list all users, their roles, assigned spaces, etc? Also, in a table format (CSV)? I know Get User API, but it is limited and showing in JSON only. Thanks! --- ## [How to print all the hits from a bucket array of results](https://discuss.elastic.co/t/how-to-print-all-the-hits-from-a-bucket-array-of-results/220044)
**Author:** [@Chop](https://discuss.elastic.co/u/Chop)\ **Replies:** 4\ **Last updated:** [February 20, 2020, 8:32pm UTC](https://discuss.elastic.co/t/how-to-print-all-the-hits-from-a-bucket-array-of-results/220044 "2020-02-20T20:32:55Z")
I am using Watcher/Alerts to send some emails but it dont seem to find out how to get all keys from an array with out all the array: {{ctx.payload.aggregations.host.buckets.\*.key}} \<-- this is what my logic said it s… --- ## [Logstash stops with error: can't convert Array into String](https://discuss.elastic.co/t/logstash-stops-with-error-cant-convert-array-into-string/92974)
**Author:** [@desai.amogh](https://discuss.elastic.co/u/desai.amogh)\ **Replies:** 4\ **Last updated:** [July 13, 2017, 10:20am UTC](https://discuss.elastic.co/t/logstash-stops-with-error-cant-convert-array-into-string/92974 "2017-07-13T10:20:59Z")
Logstast stops in few minutes with following error: Sudo -u logstash /opt/logstash/bin/logstash -f /etc/logstash/conf.d/ slack plugin is using the 'milestone' method to declare the version of the plugin this metho… --- ## [Handling exception: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 69](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-69/238253)
**Author:** [@priyashree](https://discuss.elastic.co/u/priyashree)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 4:38am UTC](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-69/238253 "2020-06-25T04:38:14Z")
I have 2 logstash machines and both the machines shows the following error in /var/log/logstash. \[2020-06-23T12:12:08,031\]\[INFO \]\[org.logstash.beats.BeatsHandler\]\[main\] \[local: logstash\_machine\_ip:5044, remote: filebeat… [Previous page](https://discuss.elastic.co/top.md?page=755&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=757&per_page=50&period=all)