# Top

**URL:** https://discuss.elastic.co/top.md?page=757&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 758

---

## [\[ElasticSearch 7.6.2\] Client requested protocol TLSv1 is not enabled or supported in server context](https://discuss.elastic.co/t/elasticsearch-7-6-2-client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/230547)

<div class="topic-metadata">

**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\
**Replies:** 1\
**Last updated:** [April 30, 2020, 1:16pm UTC](https://discuss.elastic.co/t/elasticsearch-7-6-2-client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/230547 "2020-04-30T13:16:03Z")

</div>

Good Day, are there a way to force elastic search use TLSV1 when negotiating with client the client is a web application running under IIS web server. Error Log: javax.net.ssl.SSLHandshakeException: Client requeste…

---

## [Autodiscover, docker, and nginx; "Fileset nginx/log is configured but doesn't exist"](https://discuss.elastic.co/t/autodiscover-docker-and-nginx-fileset-nginx-log-is-configured-but-doesnt-exist/136692)

<div class="topic-metadata">

**Author:** [@vputz](https://discuss.elastic.co/u/vputz)\
**Replies:** 1\
**Last updated:** [June 20, 2018, 10:25pm UTC](https://discuss.elastic.co/t/autodiscover-docker-and-nginx-fileset-nginx-log-is-configured-but-doesnt-exist/136692 "2018-06-20T22:25:43Z")

</div>

Okay, almost there! I have autodiscover running correctly and trying to parse logs from my docker containers, including nginx, using this filebeat.yml snippet: filebeat.config.modules.path: /usr/share/filebeat/modules.…

---

## [Kibana visualize dashboard error](https://discuss.elastic.co/t/kibana-visualize-dashboard-error/108072)

<div class="topic-metadata">

**Author:** [@hsiuming](https://discuss.elastic.co/u/hsiuming)\
**Replies:** 1\
**Last updated:** [November 17, 2017, 4:25pm UTC](https://discuss.elastic.co/t/kibana-visualize-dashboard-error/108072 "2017-11-17T16:25:25Z")

</div>

Hello We now create a dashboard which is consist of four visualize data tables. When I set the dashboard page auto-refresh,it will show a error log after refresh several times. The message is: Error: Request to Elast…

---

## [Filebeat vs log4j TCP vs logstash as a shipper](https://discuss.elastic.co/t/filebeat-vs-log4j-tcp-vs-logstash-as-a-shipper/68925)

<div class="topic-metadata">

**Author:** [@Fuzzy66](https://discuss.elastic.co/u/Fuzzy66)\
**Replies:** 1\
**Last updated:** [December 13, 2016, 8:02pm UTC](https://discuss.elastic.co/t/filebeat-vs-log4j-tcp-vs-logstash-as-a-shipper/68925 "2016-12-13T20:02:06Z")

</div>

Our team is discussing what what method to send files to a Data Buffer like Redis or Kafka. What is the pros/cons for using Filebeat vs log4j socketappender vs logstash?? I know filebeat is a light weight log shipper…

---

## [Max query length allowed in elasticsearch](https://discuss.elastic.co/t/max-query-length-allowed-in-elasticsearch/8128)

<div class="topic-metadata">

**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\
**Replies:** 0\
**Last updated:** [June 16, 2012, 8:37am UTC](https://discuss.elastic.co/t/max-query-length-allowed-in-elasticsearch/8128 "2012-06-16T08:37:53Z")

</div>

Hi there, I need to send a large bunch of ids in terms query, and i tried with approx 2000 guids, but I found that the data is not being posted to elasticseach. Json array was empty. Is there any limit to …

---

## [How logstash is working?](https://discuss.elastic.co/t/how-logstash-is-working/149143)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 2\
**Last updated:** [September 27, 2018, 5:35pm UTC](https://discuss.elastic.co/t/how-logstash-is-working/149143 "2018-09-27T17:35:28Z")

</div>

I try lo load 500 thousands MySQL rows into Elasticsearch. It takes 10h to do that. 16GB memory, i7 processor; enough resources to fly. All components on one server (no LAN network between). It takes huuuuge amount of …

---

## [Kibana 5.5.0 - Maps do not work](https://discuss.elastic.co/t/kibana-5-5-0-maps-do-not-work/95455)

<div class="topic-metadata">

**Author:** [@Chriss](https://discuss.elastic.co/u/Chriss)\
**Replies:** 2\
**Last updated:** [August 2, 2017, 4:25pm UTC](https://discuss.elastic.co/t/kibana-5-5-0-maps-do-not-work/95455 "2017-08-02T16:25:07Z")

</div>

Hello, I do have a fresh setup of ELK but I am not able to build a Coordinate/Region Map. If I am creating the Visualization, the error “Coordinate Map: Could not retrieve manifest from the tile service: status -1” wil…

---

## [Filebeats plugin - failed to download out of all possible locations](https://discuss.elastic.co/t/filebeats-plugin-failed-to-download-out-of-all-possible-locations/35977)

<div class="topic-metadata">

**Author:** [@Raggyman](https://discuss.elastic.co/u/Raggyman)\
**Replies:** 2\
**Last updated:** [December 1, 2015, 4:36am UTC](https://discuss.elastic.co/t/filebeats-plugin-failed-to-download-out-of-all-possible-locations/35977 "2015-12-01T04:36:50Z")

</div>

Any idea what is causing the error below : -\> Installing logstash-input-beats... Trying https://download.elastic.co/elasticsearch/release/org/elasticsearch/plugin/logstash-input-beats/2.1.0/logstash-input-beats-2.1.0.…

---

## [Source.ip.keyword insted of source.ip](https://discuss.elastic.co/t/source-ip-keyword-insted-of-source-ip/251803)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 3\
**Last updated:** [October 22, 2020, 2:09pm UTC](https://discuss.elastic.co/t/source-ip-keyword-insted-of-source-ip/251803 "2020-10-22T14:09:47Z")

</div>

Hello, I have recently updated my elastic stack from 7.8 to 7.9.2 I had to make something wrong because when I try to do some data visualization when I choose Field for aggregation i see source.ip.keyword instead of sou…

---

## [Division operation in script field is tooooooo slow](https://discuss.elastic.co/t/division-operation-in-script-field-is-tooooooo-slow/38964)

<div class="topic-metadata">

**Author:** [@zhangke](https://discuss.elastic.co/u/zhangke)\
**Replies:** 3\
**Last updated:** [January 14, 2016, 6:45am UTC](https://discuss.elastic.co/t/division-operation-in-script-field-is-tooooooo-slow/38964 "2016-01-14T06:45:22Z")

</div>

Hi, Different operations in script field lead to quite different performance. In my environment, the below query cost about 400ms. GET es/\_search { "size": 0, "aggs": { "by\_cluster": { "terms": { …

---

## [Backup and Restore issue](https://discuss.elastic.co/t/backup-and-restore-issue/40659)

<div class="topic-metadata">

**Author:** [@sombilat](https://discuss.elastic.co/u/sombilat)\
**Replies:** 7\
**Last updated:** [February 2, 2016, 1:52pm UTC](https://discuss.elastic.co/t/backup-and-restore-issue/40659 "2016-02-02T13:52:21Z")

</div>

Hello Guys, I am having an error in creating a backup for my restore point in Elasticsearch. I keep getting this error: when I run this command: curl -XPUT 'localhost:9200/\_snapshot/my\_backup' -d ' "my\_backup": { …

---

## [Force delete snapshot](https://discuss.elastic.co/t/force-delete-snapshot/84211)

<div class="topic-metadata">

**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\
**Replies:** 4\
**Last updated:** [May 2, 2017, 11:03am UTC](https://discuss.elastic.co/t/force-delete-snapshot/84211 "2017-05-02T11:03:41Z")

</div>

My snapshot repo has filled up and I don't seem to be able to force delete any old snapshots. When I try to delete an old snapshot, I get this: { "error": { "root\_cause": \[ { "type": "re…

---

## [Expose logstash API to host](https://discuss.elastic.co/t/expose-logstash-api-to-host/130067)

<div class="topic-metadata">

**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\
**Replies:** 2\
**Last updated:** [April 30, 2018, 10:08pm UTC](https://discuss.elastic.co/t/expose-logstash-api-to-host/130067 "2018-04-30T22:08:07Z")

</div>

I am running Logstash 5.5 in a docker container. Since Logstash API binds to port 9600, i expose the port in the container hoping to access API endpoints from the host. Also, i am running metricbeat on the host to collec…

---

## [Custom labels on the Right side panel](https://discuss.elastic.co/t/custom-labels-on-the-right-side-panel/199288)

<div class="topic-metadata">

**Author:** [@eemtzc](https://discuss.elastic.co/u/eemtzc)\
**Replies:** 5\
**Last updated:** [September 13, 2019, 8:29pm UTC](https://discuss.elastic.co/t/custom-labels-on-the-right-side-panel/199288 "2019-09-13T20:29:21Z")

</div>

Hello everyone, I am trying to custom the labels on the right-side panel in Kibana in order to have a custom name instead of the IP address, that way its easier to get an exact location instead of memorizing all the IP …

---

## [Filebeat Service fails with no error in log file](https://discuss.elastic.co/t/filebeat-service-fails-with-no-error-in-log-file/56592)

<div class="topic-metadata">

**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\
**Replies:** 5\
**Last updated:** [August 2, 2016, 2:30pm UTC](https://discuss.elastic.co/t/filebeat-service-fails-with-no-error-in-log-file/56592 "2016-08-02T14:30:19Z")

</div>

Hi, I have Filebeat installed on Windows Servers. After a while the Service starts to fail, with Registry file of 70MB(+) I am using the log level of debug, and did not receive any error message. Do you know of any l…

---

## [How to check the result of a query to elasticsearch into the filter plugin](https://discuss.elastic.co/t/how-to-check-the-result-of-a-query-to-elasticsearch-into-the-filter-plugin/123096)

<div class="topic-metadata">

**Author:** [@mirkomirko](https://discuss.elastic.co/u/mirkomirko)\
**Replies:** 3\
**Last updated:** [March 12, 2018, 10:47am UTC](https://discuss.elastic.co/t/how-to-check-the-result-of-a-query-to-elasticsearch-into-the-filter-plugin/123096 "2018-03-12T10:47:28Z")

</div>

Hi all, I've a problem when trying to check if a query, done inside the elasticsearch filter plugin, returns me a document. How can i check this situation? Currently I'm using the fields attribute to map old event inside…

---

## [Kibana URL Formatting](https://discuss.elastic.co/t/kibana-url-formatting/198670)

<div class="topic-metadata">

**Author:** [@ashish\_kumar1490](https://discuss.elastic.co/u/ashish_kumar1490)\
**Replies:** 4\
**Last updated:** [September 11, 2019, 3:52am UTC](https://discuss.elastic.co/t/kibana-url-formatting/198670 "2019-09-11T03:52:23Z")

</div>

I am working on URL Formatting of filed for Dashboard - #/dashboard/564a56f0-3502-11e9-b608-1b55d134c69d?\_g=(refreshInterval:(pause:!f,value:30000),time:(from:now-7d,mode:quick,to:now))&\_a=(description:'',filters:!(('$s…

---

## [How To?: Visualizations with a lot of dimensions](https://discuss.elastic.co/t/how-to-visualizations-with-a-lot-of-dimensions/59316)

<div class="topic-metadata">

**Author:** [@Bullwinkle](https://discuss.elastic.co/u/Bullwinkle)\
**Replies:** 2\
**Last updated:** [August 31, 2016, 1:25pm UTC](https://discuss.elastic.co/t/how-to-visualizations-with-a-lot-of-dimensions/59316 "2016-08-31T13:25:39Z")

</div>

I've been trying and failing do a good job visualizing data with Kibana, so I'm looking for advice. First, all my indices on which I produce visualizations have two important properties that I often want to group by in…

---

## [Plot values for a single field over time](https://discuss.elastic.co/t/plot-values-for-a-single-field-over-time/337914)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 8\
**Last updated:** [July 20, 2023, 7:02pm UTC](https://discuss.elastic.co/t/plot-values-for-a-single-field-over-time/337914 "2023-07-20T19:02:01Z")

</div>

All I'm looking to do is create a line visualization where the 5\_sec\_eps field displays its values. 5\_sec\_eps on the Y axis and time on the bottom. Thats all I need, thank you.

---

## [Java API: how to access sub aggregations from FilterAggregate objects](https://discuss.elastic.co/t/java-api-how-to-access-sub-aggregations-from-filteraggregate-objects/301936)

<div class="topic-metadata">

**Author:** [@Tim\_Harbers](https://discuss.elastic.co/u/Tim_Harbers)\
**Replies:** 8\
**Last updated:** [May 12, 2022, 8:46pm UTC](https://discuss.elastic.co/t/java-api-how-to-access-sub-aggregations-from-filteraggregate-objects/301936 "2022-05-12T20:46:34Z")

</div>

I am in the process of migrating from the High Level REST API to the Java API. Although it is going ok despite not having many examples in the docs, there is one problem I can't figure out. When you send a search reques…

---

## [Contributing to Logstash](https://discuss.elastic.co/t/contributing-to-logstash/120290)

<div class="topic-metadata">

**Author:** [@hvardhan](https://discuss.elastic.co/u/hvardhan)\
**Replies:** 8\
**Last updated:** [March 26, 2018, 6:15am UTC](https://discuss.elastic.co/t/contributing-to-logstash/120290 "2018-03-26T06:15:40Z")

</div>

Hello everyone, I would like to contribute to the logstash project. But, I can't find any ideas related to Logstash on the list. Some of the high hanging open issues, I found were here. Are there any other ideas related…

---

## [SSL Connection in watcher using Teams](https://discuss.elastic.co/t/ssl-connection-in-watcher-using-teams/250129)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 7\
**Last updated:** [August 16, 2022, 9:51am UTC](https://discuss.elastic.co/t/ssl-connection-in-watcher-using-teams/250129 "2022-08-16T09:51:15Z")

</div>

Good morning, I'm using watcher to send messages using the application "TEAMS" connected by a webhook, but when if I execute the action run perfectly, but when it is fire I have the next message: "actions": \[ { …

---

## [Number of Transport addresses to configure with Transport Client](https://discuss.elastic.co/t/number-of-transport-addresses-to-configure-with-transport-client/55027)

<div class="topic-metadata">

**Author:** [@vinayakshukre](https://discuss.elastic.co/u/vinayakshukre)\
**Replies:** 7\
**Last updated:** [July 28, 2016, 7:11am UTC](https://discuss.elastic.co/t/number-of-transport-addresses-to-configure-with-transport-client/55027 "2016-07-28T07:11:46Z")

</div>

Hello All, I am new to Elastic Search and writing a Java code to filter some data based on exact match. I am using below code to open a connection to ES cluster. Client client = TransportClient.builder().bui…

---

## [N00b trying to set up on Windows](https://discuss.elastic.co/t/n00b-trying-to-set-up-on-windows/197514)

<div class="topic-metadata">

**Author:** [@jhmariscal](https://discuss.elastic.co/u/jhmariscal)\
**Replies:** 5\
**Last updated:** [September 24, 2019, 12:00pm UTC](https://discuss.elastic.co/t/n00b-trying-to-set-up-on-windows/197514 "2019-09-24T12:00:20Z")

</div>

Hello- Setting up and trying to learn ELK. I have it all set up and working on a win2016 server from localhost. I also got Kibana to work from laptop using 0.0.0.0 in the kibana.yml file. For elasticsearch, I have tried…

---

## [Whats the time lapse for updates to get indexed on Elastic Search](https://discuss.elastic.co/t/whats-the-time-lapse-for-updates-to-get-indexed-on-elastic-search/97476)

<div class="topic-metadata">

**Author:** [@sbuddhi](https://discuss.elastic.co/u/sbuddhi)\
**Replies:** 5\
**Last updated:** [August 30, 2017, 9:43pm UTC](https://discuss.elastic.co/t/whats-the-time-lapse-for-updates-to-get-indexed-on-elastic-search/97476 "2017-08-30T21:43:10Z")

</div>

We are trying to Implement Elastic Search on our WordPress site. So far it looks great but we couldn’t find anywhere about the time lapse for new updates on the WordPress site to get indexed. Does the new updates get i…

---

## [Message not splitting into events on new line](https://discuss.elastic.co/t/message-not-splitting-into-events-on-new-line/249399)

<div class="topic-metadata">

**Author:** [@kbrisso](https://discuss.elastic.co/u/kbrisso)\
**Replies:** 3\
**Last updated:** [September 23, 2020, 5:24pm UTC](https://discuss.elastic.co/t/message-not-splitting-into-events-on-new-line/249399 "2020-09-23T17:24:27Z")

</div>

Hello- I have a message that looks like below: \[INFO\] 2020-09-21 09:40:21,476\[ajp-nio-9031-exec-1\] com.gts.ci.jws.filter.ValidationFilter - Validation Filter URL /jsp\_web/access/app\_logout.jsp\\n\[DEBUG\] 2020-09-21 09:4…

---

## [Has anyone bundled ELK as an OVA VMware?](https://discuss.elastic.co/t/has-anyone-bundled-elk-as-an-ova-vmware/212297)

<div class="topic-metadata">

**Author:** [@Namlovely\_Smile](https://discuss.elastic.co/u/Namlovely_Smile)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 5:45pm UTC](https://discuss.elastic.co/t/has-anyone-bundled-elk-as-an-ova-vmware/212297 "2019-12-19T17:45:32Z")

</div>

I see only virtualbox and import into vmware. It can't do it. Help me. i what Elasticsearch, Logstash and Kibana instances. thaank you :grinning:

---

## [Compare data from multiple rows](https://discuss.elastic.co/t/compare-data-from-multiple-rows/194252)

<div class="topic-metadata">

**Author:** [@krattan](https://discuss.elastic.co/u/krattan)\
**Replies:** 3\
**Last updated:** [August 8, 2019, 4:52pm UTC](https://discuss.elastic.co/t/compare-data-from-multiple-rows/194252 "2019-08-08T16:52:32Z")

</div>

is it possible in kibana scripted fields to compare data from multiple rows. I have two search results 1. message = "abs" timestamp="hh.mm.ss" source="xyz" 2. message = "bsa" timestamp="hh.mm.ss" source="xyz" source …

---

## [Logstash - Glok and stdout -\> rubydebug doesn't work](https://discuss.elastic.co/t/logstash-glok-and-stdout-rubydebug-doesnt-work/206631)

<div class="topic-metadata">

**Author:** [@Andrii\_Fon](https://discuss.elastic.co/u/Andrii_Fon)\
**Replies:** 6\
**Last updated:** [November 5, 2019, 4:34pm UTC](https://discuss.elastic.co/t/logstash-glok-and-stdout-rubydebug-doesnt-work/206631 "2019-11-05T16:34:49Z")

</div>

Hi everyone, I'm pacing days on the ELK + filebeat to make it work with my Glok filter. I have started installing ELK + filebeat, then defined logstash.conf: input { file { path =\> "D:\\ElisticLogs\\MyLog.log…

---

## [Indexing in elastic search using NEST returns 403 error](https://discuss.elastic.co/t/indexing-in-elastic-search-using-nest-returns-403-error/125158)

<div class="topic-metadata">

**Author:** [@rezajp](https://discuss.elastic.co/u/rezajp)\
**Replies:** 2\
**Last updated:** [March 26, 2018, 9:56am UTC](https://discuss.elastic.co/t/indexing-in-elastic-search-using-nest-returns-403-error/125158 "2018-03-26T09:56:20Z")

</div>

I have recently started learning/using elasticsearch and I am trying to index some documents using NEST (c# client) but after I index one document or run a bulk index the read\_only\_allow\_delete is set to true in the inde…

---

## [Can't create index externally? - 400 error](https://discuss.elastic.co/t/cant-create-index-externally-400-error/13403)

<div class="topic-metadata">

**Author:** [@Matt\_Schoen](https://discuss.elastic.co/u/Matt_Schoen)\
**Replies:** 2\
**Last updated:** [August 30, 2013, 6:32pm UTC](https://discuss.elastic.co/t/cant-create-index-externally-400-error/13403 "2013-08-30T18:32:21Z")

</div>

Hi there, I'm building a game in Unity and using Elasticsearch as a rather basic datastore, leveraging its ability to scale for high-volume insertion. I've become somewhat familiar with the software over the past…

---

## [Conditional updates with Update API](https://discuss.elastic.co/t/conditional-updates-with-update-api/80909)

<div class="topic-metadata">

**Author:** [@btucker](https://discuss.elastic.co/u/btucker)\
**Replies:** 1\
**Last updated:** [April 2, 2017, 10:52am UTC](https://discuss.elastic.co/t/conditional-updates-with-update-api/80909 "2017-04-02T10:52:24Z")

</div>

Here's the situation I'm trying to solve for: I have documents getting upserted by multiple processes using the Bulk API. They look like this: { "ver": 1, "foo": 3 } { "ver": 2, "foo": 4 } { "ver": 4,…

---

## [Unable to configure cluster.indices.tombstones.size](https://discuss.elastic.co/t/unable-to-configure-cluster-indices-tombstones-size/90393)

<div class="topic-metadata">

**Author:** [@joeyanglx](https://discuss.elastic.co/u/joeyanglx)\
**Replies:** 0\
**Last updated:** [June 22, 2017, 6:00am UTC](https://discuss.elastic.co/t/unable-to-configure-cluster-indices-tombstones-size/90393 "2017-06-22T06:00:27Z")

</div>

Hi, I am fairly new to Elasticsearch, in fact I have just started playing with it this week, and I have been looking into an issue relating to dangling indexes. I have been looking into an issue where it is potentially…

---

## [Terms Aggregation, but over a time period?](https://discuss.elastic.co/t/terms-aggregation-but-over-a-time-period/217275)

<div class="topic-metadata">

**Author:** [@erin\_verbeck](https://discuss.elastic.co/u/erin_verbeck)\
**Replies:** 4\
**Last updated:** [February 12, 2020, 8:33pm UTC](https://discuss.elastic.co/t/terms-aggregation-but-over-a-time-period/217275 "2020-02-12T20:33:11Z")

</div>

Hi everyone! I am trying to create a query that searches and identifies when a specific term reaches a threshold over a given period of time. My first thought is to construct a search that will, for example, bring back t…

---

## [Elasticsearch on Docker](https://discuss.elastic.co/t/elasticsearch-on-docker/52371)

<div class="topic-metadata">

**Author:** [@Michael1](https://discuss.elastic.co/u/Michael1)\
**Replies:** 3\
**Last updated:** [June 10, 2016, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearch-on-docker/52371 "2016-06-10T14:31:35Z")

</div>

We are building a new Elasticsearch cluster and trying to figure out one thing - is running Elasticsearch in a Docker Container on each node adding another level of I/O impact? Not only is there I/O impact due to runni…

---

## [Java api fails to create index](https://discuss.elastic.co/t/java-api-fails-to-create-index/24030)

<div class="topic-metadata">

**Author:** [@Harish\_Kulkarni](https://discuss.elastic.co/u/Harish_Kulkarni)\
**Replies:** 3\
**Last updated:** [June 20, 2015, 6:17pm UTC](https://discuss.elastic.co/t/java-api-fails-to-create-index/24030 "2015-06-20T18:17:07Z")

</div>

I am able to add a document to an index using curl. But trying to add document using java api gives below error Primary shard is not active or isn't assigned to a known node. Timeout: \[1m\], Here is my client code Node…

---

## [Has no parent query](https://discuss.elastic.co/t/has-no-parent-query/10973)

<div class="topic-metadata">

**Author:** [@snmaynard](https://discuss.elastic.co/u/snmaynard)\
**Replies:** 3\
**Last updated:** [August 29, 2013, 11:59am UTC](https://discuss.elastic.co/t/has-no-parent-query/10973 "2013-08-29T11:59:44Z")

</div>

Is there any way of querying for documents of a certain type for those that have no parent, or whose parent has been deleted? I have a parent/child relationship in my system, and some parents have been deleted, an…

---

## [How to use BulkProcessor in synchronous processing?](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-synchronous-processing/283968)

<div class="topic-metadata">

**Author:** [@avocato](https://discuss.elastic.co/u/avocato)\
**Replies:** 7\
**Last updated:** [September 13, 2021, 7:50am UTC](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-synchronous-processing/283968 "2021-09-13T07:50:38Z")

</div>

Hello, I am trying to figure out how to use BulkProcessor \[Bulk API | Java REST Client \[7.14\] | Elastic\] during synchronous processing (bulk method) so that I could write something like this: val processor = BulkPr…

---

## [TooLongFrameException: HTTP content length exceeded 104857600 bytes](https://discuss.elastic.co/t/toolongframeexception-http-content-length-exceeded-104857600-bytes/10513)

<div class="topic-metadata">

**Author:** [@roytmana](https://discuss.elastic.co/u/roytmana)\
**Replies:** 1\
**Last updated:** [January 26, 2013, 4:29pm UTC](https://discuss.elastic.co/t/toolongframeexception-http-content-length-exceeded-104857600-bytes/10513 "2013-01-26T16:29:54Z")

</div>

Does ES has a limit on size of \_bulk POST? Looks like no more than 103M curl -XPOST -o Z:\\projects\\demo\\elasticsearch\\demo\\out\\output.json --data-binary @Z:\\projects\\demo\\elasticsearch\\demo\\out\\es-mods.txt http:…

---

## [Kibana Distinct Count](https://discuss.elastic.co/t/kibana-distinct-count/360727)

<div class="topic-metadata">

**Author:** [@dfir](https://discuss.elastic.co/u/dfir)\
**Replies:** 5\
**Last updated:** [June 4, 2024, 7:42am UTC](https://discuss.elastic.co/t/kibana-distinct-count/360727 "2024-06-04T07:42:48Z")

</div>

I am using Elastic with Kibana. What is the best way to get a Distinct count ? I want effectively a "distinct count of IP by Account"

---

## [Tooltip in Vega](https://discuss.elastic.co/t/tooltip-in-vega/263886)

<div class="topic-metadata">

**Author:** [@Pranath](https://discuss.elastic.co/u/Pranath)\
**Replies:** 5\
**Last updated:** [February 11, 2021, 5:27pm UTC](https://discuss.elastic.co/t/tooltip-in-vega/263886 "2021-02-11T17:27:38Z")

</div>

Here I wanted to show distinct 'd' field values for each 'a' field in tooltip. For text it's giving correct but A and B are overlapping and in tooltip it's giving only B. { "$schema": "https://vega.github.io/schema/ve…

---

## [Logstash stuck](https://discuss.elastic.co/t/logstash-stuck/229494)

<div class="topic-metadata">

**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\
**Replies:** 5\
**Last updated:** [April 23, 2020, 8:13pm UTC](https://discuss.elastic.co/t/logstash-stuck/229494 "2020-04-23T20:13:17Z")

</div>

Guys need your help I'm desperate, I'm trying to configure pipelines on logstash server , but it doesn't work , please take a look I'll be grateful to get some advice how to make it work when I start logstash in the l…

---

## [Sending files in chronological order](https://discuss.elastic.co/t/sending-files-in-chronological-order/79873)

<div class="topic-metadata">

**Author:** [@mario.schaefer](https://discuss.elastic.co/u/mario.schaefer)\
**Replies:** 5\
**Last updated:** [March 28, 2017, 7:41am UTC](https://discuss.elastic.co/t/sending-files-in-chronological-order/79873 "2017-03-28T07:41:56Z")

</div>

Hi, we have a running ELK stack, actually: 16 Mailappliances -\> syslogserver -\> to file -\> filebeat -\> logstash -\> redis -\> some magic script -\> ES Syslogserver + Filebeat is one machine. Logstash, Redis and the magic …

---

## [1Fieldに複数datatypeが存在する場合の対処](https://discuss.elastic.co/t/1field-datatype/200627)

<div class="topic-metadata">

**Author:** [@mukai](https://discuss.elastic.co/u/mukai)\
**Replies:** 2\
**Last updated:** [September 24, 2019, 1:33am UTC](https://discuss.elastic.co/t/1field-datatype/200627 "2019-09-24T01:33:51Z")

</div>

こんにちは、現在下記の1フィールドに入っている、数値型と文字列型を含むデータを取り込もうとしています。 ・データの例 \[数値型\] 99.338053 \[文字列型\] jenkins-test データ型を数値型に指定すると、下記のエラーが発生します。 \[2019-09-23T14:23:53,594\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event…

---

## [APM server doesn't start](https://discuss.elastic.co/t/apm-server-doesnt-start/170332)

<div class="topic-metadata">

**Author:** [@Costi](https://discuss.elastic.co/u/Costi)\
**Replies:** 2\
**Last updated:** [March 1, 2019, 8:43am UTC](https://discuss.elastic.co/t/apm-server-doesnt-start/170332 "2019-03-01T08:43:32Z")

</div>

Hi, I install apm server on my local machine and i configure the output to elastic cloud instance. I also enabled rum agent. When i try to start the apm service i am getting an error that windows couldn't start the serv…

---

## [Best way to prevent add\_fields with %{} when field does not exist](https://discuss.elastic.co/t/best-way-to-prevent-add-fields-with-when-field-does-not-exist/74444)

<div class="topic-metadata">

**Author:** [@djhart](https://discuss.elastic.co/u/djhart)\
**Replies:** 2\
**Last updated:** [February 9, 2017, 9:33pm UTC](https://discuss.elastic.co/t/best-way-to-prevent-add-fields-with-when-field-does-not-exist/74444 "2017-02-09T21:33:42Z")

</div>

I have a lot of csv fields that i'm using a csv filter to parse and sometimes the fields are blank. Right after parsing them, I assign the results to new fields using mutate's add\_field. Here is a sample csv { sepa…

---

## [Newbie Question - Settings Page Blank](https://discuss.elastic.co/t/newbie-question-settings-page-blank/52993)

<div class="topic-metadata">

**Author:** [@brodden](https://discuss.elastic.co/u/brodden)\
**Replies:** 6\
**Last updated:** [June 20, 2016, 4:54pm UTC](https://discuss.elastic.co/t/newbie-question-settings-page-blank/52993 "2016-06-20T16:54:15Z")

</div>

Hello, I'm working on settings up ELK on Windows via this tutorial: https://www.ulyaoth.net/resources/tutorial-install-logstash-and-kibana-on-a-windows-server.34/. I have everything setup and running and the Kibana w…

---

## [Using ES as a primary data store for eBay web services](https://discuss.elastic.co/t/using-es-as-a-primary-data-store-for-ebay-web-services/29376)

<div class="topic-metadata">

**Author:** [@sebaherrera](https://discuss.elastic.co/u/sebaherrera)\
**Replies:** 6\
**Last updated:** [September 16, 2015, 6:55pm UTC](https://discuss.elastic.co/t/using-es-as-a-primary-data-store-for-ebay-web-services/29376 "2015-09-16T18:55:21Z")

</div>

Hi and thanks in advance, business case: I need to create an ecommerce frontend with ES using facets (aggregations) to replicate this functionality: My idea is to consume ebay web services directly to ES in order to …

---

## [How to Create New User in Kibana](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana/265826)

<div class="topic-metadata">

**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\
**Replies:** 4\
**Last updated:** [March 5, 2021, 2:37pm UTC](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana/265826 "2021-03-05T14:37:35Z")

</div>

Hi, I have created the new user in Kibana via kibana UI. But i am unable to login with that id. Getting Error as:- {"statusCode":403,"error":"Forbidden","message":"Forbidden"} Note:- I am able to login with System use…

---

## [Issue with outputting binary files](https://discuss.elastic.co/t/issue-with-outputting-binary-files/224191)

<div class="topic-metadata">

**Author:** [@mikehwang](https://discuss.elastic.co/u/mikehwang)\
**Replies:** 1\
**Last updated:** [March 23, 2020, 11:17pm UTC](https://discuss.elastic.co/t/issue-with-outputting-binary-files/224191 "2020-03-23T23:17:24Z")

</div>

I'm trying to use Logstash to ingest emails and write the messages into Elasticsearch and write attachments onto the filesystem (maybe S3 later). My issue is that the files are not getting written correctly so not reada…

[Previous page](https://discuss.elastic.co/top.md?page=756&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=758&per_page=50&period=all)
