# Top **URL:** https://discuss.elastic.co/top.md?page=764&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 765 --- ## [Deleting all documents inside an engine](https://discuss.elastic.co/t/deleting-all-documents-inside-an-engine/200634)
**Author:** [@rajithsam](https://discuss.elastic.co/u/rajithsam)\ **Replies:** 3\ **Last updated:** [September 26, 2019, 5:55am UTC](https://discuss.elastic.co/t/deleting-all-documents-inside-an-engine/200634 "2019-09-26T05:55:19Z")
Is it possible to delete all the documents inside an engine at once? --- ## [Multiline breaks on empty line \\n\\n restarts new line](https://discuss.elastic.co/t/multiline-breaks-on-empty-line-n-n-restarts-new-line/59717)
**Author:** [@Tim\_Burt](https://discuss.elastic.co/u/Tim_Burt)\ **Replies:** 3\ **Last updated:** [September 6, 2016, 11:52am UTC](https://discuss.elastic.co/t/multiline-breaks-on-empty-line-n-n-restarts-new-line/59717 "2016-09-06T11:52:09Z")
The multiline filter in filebeats works well with the default config is used: multiline: pattern: ^\\\[ negate: true match: after And the log lines are consecutive following the pattern. However, if t… --- ## [Watch json error "Unknown key for a START\_OBJECT in \["](https://discuss.elastic.co/t/watch-json-error-unknown-key-for-a-start-object-in/250546)
**Author:** [@hubbardgd](https://discuss.elastic.co/u/hubbardgd)\ **Replies:** 5\ **Last updated:** [October 6, 2020, 7:36am UTC](https://discuss.elastic.co/t/watch-json-error-unknown-key-for-a-start-object-in/250546 "2020-10-06T07:36:55Z")
Trying to define a watch alert in ELK to trigger when a file system reaches more than 87% full. I need to aggregate on host, files system and percent full for the FS. With the script below, I'm getting the error "Unknown… --- ## [Logstash doesn't read changes in file and need to start from bin every time](https://discuss.elastic.co/t/logstash-doesnt-read-changes-in-file-and-need-to-start-from-bin-every-time/172247)
**Author:** [@sukarn001](https://discuss.elastic.co/u/sukarn001)\ **Replies:** 5\ **Last updated:** [March 14, 2019, 9:33am UTC](https://discuss.elastic.co/t/logstash-doesnt-read-changes-in-file-and-need-to-start-from-bin-every-time/172247 "2019-03-14T09:33:42Z")
Hello, I have installed Logstash 6.6.1 in rhel 7, from RPM. Now I have created a file under /etc/logstash/conf.d/apache.conf . This file keeps updating itself. I ran following command to send logs to elasticsearch: .… --- ## [Slow index creation and indexing when many indices must be created at once](https://discuss.elastic.co/t/slow-index-creation-and-indexing-when-many-indices-must-be-created-at-once/95521)
**Author:** [@imehl](https://discuss.elastic.co/u/imehl)\ **Replies:** 5\ **Last updated:** [August 3, 2017, 11:08am UTC](https://discuss.elastic.co/t/slow-index-creation-and-indexing-when-many-indices-must-be-created-at-once/95521 "2017-08-03T11:08:39Z")
Hi, I'm using daily indices and index templates in my Elasticsearch environment. The time is based on a field in the document. Now I have I problem with bulk indexing: For example if I import data from 1 year, 365 ind… --- ## [How to use transport client (or something else) to search in ES indices on another system?](https://discuss.elastic.co/t/how-to-use-transport-client-or-something-else-to-search-in-es-indices-on-another-system/52688)
**Author:** [@Vicky2000](https://discuss.elastic.co/u/Vicky2000)\ **Replies:** 8\ **Last updated:** [June 21, 2016, 9:26am UTC](https://discuss.elastic.co/t/how-to-use-transport-client-or-something-else-to-search-in-es-indices-on-another-system/52688 "2016-06-21T09:26:57Z")
I searched and found that transport client should do the job. However, I don't know the settings I need to do for the same, both on the another system and my own. Further, it seems that I just can't access any system … --- ## [Indices.store.throttle.max\_bytes\_per\_sec config setting and 2.2](https://discuss.elastic.co/t/indices-store-throttle-max-bytes-per-sec-config-setting-and-2-2/44771)
**Author:** [@asharif](https://discuss.elastic.co/u/asharif)\ **Replies:** 2\ **Last updated:** [March 18, 2016, 1:07am UTC](https://discuss.elastic.co/t/indices-store-throttle-max-bytes-per-sec-config-setting-and-2-2/44771 "2016-03-18T01:07:21Z")
So I didn't see indices.store.throttle.max\_bytes\_per\_sec in the new 2.2 documentation (or I missed it cause I suck). I did however see index.merge.scheduler.max\_thread\_count by lowering or increasing the merge … --- ## [Input-jdbc : Error to connect to DB](https://discuss.elastic.co/t/input-jdbc-error-to-connect-to-db/29349)
**Author:** [@Kiranpatil](https://discuss.elastic.co/u/Kiranpatil)\ **Replies:** 2\ **Last updated:** [September 26, 2015, 7:44pm UTC](https://discuss.elastic.co/t/input-jdbc-error-to-connect-to-db/29349 "2015-09-26T19:44:05Z")
Hi, I am using jdbc input plugin (version : 1.0.0) to push the data from postgres to elastic. But I get an error as: Java::OrgPostgresqlUtil::PSQLException: The server requested password-based authentication, but n… --- ## [Unique values with sort request](https://discuss.elastic.co/t/unique-values-with-sort-request/127563)
**Author:** [@mrbushid0](https://discuss.elastic.co/u/mrbushid0)\ **Replies:** 1\ **Last updated:** [April 18, 2018, 6:54am UTC](https://discuss.elastic.co/t/unique-values-with-sort-request/127563 "2018-04-18T06:54:22Z")
Hi everyone, I currently have a query with the purpose being to only retrieve documents with a unique "Object ID" And then order the documents by the date they were created It'd be the equivalent to "SELECT DISTINCT i… --- ## [Релевантность по частоте фраз \[РЕШЕНО\]](https://discuss.elastic.co/t/topic/57578)
**Author:** [@viktorm](https://discuss.elastic.co/u/viktorm)\ **Replies:** 6\ **Last updated:** [August 9, 2016, 6:30pm UTC](https://discuss.elastic.co/t/topic/57578 "2016-08-09T18:30:38Z")
Уважаемые коллеги, Клиент хочет поиск документов по фразам и определять релевантность по частоте фраз. Стандартные средства match\_phrase, как я их понял, не решают задачу полностью. Решение "в лоб" — делать custom s… --- ## [How can i add a field with 2.3.3?](https://discuss.elastic.co/t/how-can-i-add-a-field-with-2-3-3/53117)
**Author:** [@Yang\_Long](https://discuss.elastic.co/u/Yang_Long)\ **Replies:** 6\ **Last updated:** [June 24, 2016, 7:31am UTC](https://discuss.elastic.co/t/how-can-i-add-a-field-with-2-3-3/53117 "2016-06-24T07:31:47Z")
the demo document: curl -XPUT http://localhost:9200/blog/article/1 -d '{"title": "New version of Elasticsearch released!", "content": "Version 1.0 released today!", "tags": \["announce","elasticsearch", "release"\]}' the… --- ## [Filtering on missing field not working](https://discuss.elastic.co/t/filtering-on-missing-field-not-working/27716)
**Author:** [@richardking](https://discuss.elastic.co/u/richardking)\ **Replies:** 3\ **Last updated:** [August 20, 2015, 8:33pm UTC](https://discuss.elastic.co/t/filtering-on-missing-field-not-working/27716 "2015-08-20T20:33:43Z")
In our document "Product" mapping, we have a field object called "codes"- example: "codes" : \[ { "code" : "1234", "place\_id" : null }, { "code" : "4504", "place\_id" : 29 } \] We are trying to write a query to retrieve… --- ## [Parsing JSON data](https://discuss.elastic.co/t/parsing-json-data/313217)
**Author:** [@Pukar](https://discuss.elastic.co/u/Pukar)\ **Replies:** 4\ **Last updated:** [September 1, 2022, 12:54pm UTC](https://discuss.elastic.co/t/parsing-json-data/313217 "2022-09-01T12:54:58Z")
Hi Team, New to ELK environment so please bear with me. I'm trying to ingest data from json file and visualise in kibana. The ingest itself is working but the message is coming as: "message" =\> " "totalCount": … --- ## [Bulk Request java.lang.InterruptedException concurrency issue](https://discuss.elastic.co/t/bulk-request-java-lang-interruptedexception-concurrency-issue/253850)
**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 4:40am UTC](https://discuss.elastic.co/t/bulk-request-java-lang-interruptedexception-concurrency-issue/253850 "2020-11-04T04:40:51Z")
Hello, Context: We have a simple Flink job (v1.11.2 in Scala) from Kafka to ES using the Table api with just 2 joins before writing to ES. It uses the Flink Elasticsearch Connector which under the hood uses the Java ES… --- ## [Import CSV with Long and Lat](https://discuss.elastic.co/t/import-csv-with-long-and-lat/59488)
**Author:** [@amran1](https://discuss.elastic.co/u/amran1)\ **Replies:** 4\ **Last updated:** [September 1, 2016, 3:49pm UTC](https://discuss.elastic.co/t/import-csv-with-long-and-lat/59488 "2016-09-01T15:49:06Z")
Hello, How to show Tile Map with load CSV file include Longitude and Latitude? And how to show out each split field in Kibana I have write this script, It couldn't run well. input { file { path =\> "/tmp/earthqu… --- ## [Customize watch and/or watch\_history index template](https://discuss.elastic.co/t/customize-watch-and-or-watch-history-index-template/28539)
**Author:** [@aochsner](https://discuss.elastic.co/u/aochsner)\ **Replies:** 4\ **Last updated:** [December 2, 2015, 9:34pm UTC](https://discuss.elastic.co/t/customize-watch-and-or-watch-history-index-template/28539 "2015-12-02T21:34:26Z")
Is there a reason why these templates have an order set to Integer.MAX? I'd like to customize these a little bit. Specifically would like to index certain fields in the input.payload so that I can later search on them … --- ## [Unknown key \[productid\] for create index](https://discuss.elastic.co/t/unknown-key-productid-for-create-index/236581)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 11:36pm UTC](https://discuss.elastic.co/t/unknown-key-productid-for-create-index/236581 "2020-06-10T23:36:26Z")
Hi following are my mapping { "dynamic" : "true", "\_meta" : { }, "\_source" : { "includes" : \[ \], "excludes" : \[ \] }, "dynamic\_date\_formats" : \[ "strict\_date\_optional\_time", "yyyy/MM/dd HH:mm:s… --- ## [Parse ISO 8601 duration format (PT(n)H(n)M(n)S)](https://discuss.elastic.co/t/parse-iso-8601-duration-format-pt-n-h-n-m-n-s/306605)
**Author:** [@Iss](https://discuss.elastic.co/u/Iss)\ **Replies:** 5\ **Last updated:** [June 8, 2022, 5:53pm UTC](https://discuss.elastic.co/t/parse-iso-8601-duration-format-pt-n-h-n-m-n-s/306605 "2022-06-08T17:53:03Z")
Hi! I have a ISO 8601 duration format P(n)Y(n)M(n)DT(n)H(n)M(n)S fields as "duration"=\>"PT0H0M0S" I have to parse it to get time duration in seconds or in format HH:MM:SS. How can I do it with logstash filter? Than… --- ## [ELK setup for Apache Application Logs](https://discuss.elastic.co/t/elk-setup-for-apache-application-logs/132697)
**Author:** [@rdurai](https://discuss.elastic.co/u/rdurai)\ **Replies:** 5\ **Last updated:** [May 31, 2018, 3:42am UTC](https://discuss.elastic.co/t/elk-setup-for-apache-application-logs/132697 "2018-05-31T03:42:01Z")
Hello, another newbie here. I am bit confused about setting up the ELK for Apache2 application log aggregation. My setup is as follows, all components are version 6.2.3; Apache Logs(3X) --\> Filebeat --\> Logstash --\> El… --- ## [Possible To Have Multiple Simultaneous Bulk Inserts?](https://discuss.elastic.co/t/possible-to-have-multiple-simultaneous-bulk-inserts/119525)
**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\ **Replies:** 5\ **Last updated:** [February 14, 2018, 3:48am UTC](https://discuss.elastic.co/t/possible-to-have-multiple-simultaneous-bulk-inserts/119525 "2018-02-14T03:48:34Z")
I want to run multiple clients that will be doing bulk inserts into the same Elasticsearch index. Is that OK, or do I run the risk of some sort of clash/lock issue(s)? Any info would be appreciated. Thanks. Kevin --- ## [Kibana Dashboard login with Nginx reverse proxy](https://discuss.elastic.co/t/kibana-dashboard-login-with-nginx-reverse-proxy/156130)
**Author:** [@Shahid\_Chaudhary](https://discuss.elastic.co/u/Shahid_Chaudhary)\ **Replies:** 2\ **Last updated:** [November 10, 2018, 10:24am UTC](https://discuss.elastic.co/t/kibana-dashboard-login-with-nginx-reverse-proxy/156130 "2018-11-10T10:24:22Z")
I installed the ELK on single server node for the login dahboard i user nginx bases auth but i am unable to login on the dashboard , when i check the nginx error logs i am getting these. root@ip-172-31-50-xxx:/home/ubu… --- ## [Null pointer exception in logstash filter](https://discuss.elastic.co/t/null-pointer-exception-in-logstash-filter/231446)
**Author:** [@sajjad0927](https://discuss.elastic.co/u/sajjad0927)\ **Replies:** 3\ **Last updated:** [May 13, 2020, 1:24am UTC](https://discuss.elastic.co/t/null-pointer-exception-in-logstash-filter/231446 "2020-05-13T01:24:02Z")
/Server/home/user/itbox/tools/logstash-7.6.2/vendor/bundle/jruby/2.5.0/gems/awesome\_print-1.7.0/lib/awesome\_print/formatters/base\_formatter.rb:31: warning: constant ::Fixnum is deprecated warning: thread "\[main\]\>worker1"… --- ## [Importing Dashboard via CURL fails with 500 error](https://discuss.elastic.co/t/importing-dashboard-via-curl-fails-with-500-error/230421)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 6\ **Last updated:** [April 29, 2020, 10:50pm UTC](https://discuss.elastic.co/t/importing-dashboard-via-curl-fails-with-500-error/230421 "2020-04-29T22:50:15Z")
On my old dev stack I used the beats setup feature to install the example dashboards. That ended up with a bunch I will never use. So now that I'm building an actual test stack, I want to pick and choose which dashboards… --- ## [Congestion issues in Redis coming from Logstash](https://discuss.elastic.co/t/congestion-issues-in-redis-coming-from-logstash/167921)
**Author:** [@drivera](https://discuss.elastic.co/u/drivera)\ **Replies:** 6\ **Last updated:** [February 23, 2019, 12:35am UTC](https://discuss.elastic.co/t/congestion-issues-in-redis-coming-from-logstash/167921 "2019-02-23T00:35:14Z")
Hello, I am running LS 5.3 with 5 nodes load balanced and ES 5.3, using Redis to throttle events. I am receiving the error message below within Redis, I believe this is coming from Logstash but I'm not sure how to resolv… --- ## [Elasticsearch exception: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/elasticsearch-exception-root-mapping-definition-has-unsupported-parameters/234630)
**Author:** [@Cat](https://discuss.elastic.co/u/Cat)\ **Replies:** 7\ **Last updated:** [July 7, 2020, 5:50pm UTC](https://discuss.elastic.co/t/elasticsearch-exception-root-mapping-definition-has-unsupported-parameters/234630 "2020-07-07T17:50:27Z")
When I used curl to create my template, it works fine. But when I used High Level REST it gave me the exception: org.elasticsearch.ElasticsearchException: Elasticsearch exception \[type=mapper\_parsing\_exception, reason=… --- ## [Doc Variable not defined in Painless Script](https://discuss.elastic.co/t/doc-variable-not-defined-in-painless-script/132136)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 1\ **Last updated:** [May 16, 2018, 4:42pm UTC](https://discuss.elastic.co/t/doc-variable-not-defined-in-painless-script/132136 "2018-05-16T16:42:34Z")
Using script to generate data and using a doc variable, it generates the error "doc \[column\] is not defined". This error occurs in ElasticSearch 6.2.4 (production environment), when I use 6.2.3 in Docker (developer envi… --- ## [Erorr: "\[query\_shard\_exception\] failed to find geo\_point field (in node js application)](https://discuss.elastic.co/t/erorr-query-shard-exception-failed-to-find-geo-point-field-in-node-js-application/114228)
**Author:** [@thealitahir](https://discuss.elastic.co/u/thealitahir)\ **Replies:** 1\ **Last updated:** [January 7, 2018, 1:08pm UTC](https://discuss.elastic.co/t/erorr-query-shard-exception-failed-to-find-geo-point-field-in-node-js-application/114228 "2018-01-07T13:08:52Z")
I'm working on node js (version 6.1.0 ) application and using elasticsearch (version 5.0.1) in it. But I'm having issues in geo\_point query. I'm doing mapping like this client.indices.putMapping({ index: 'newtestin… --- ## [Changed Mapping but field is still Analyzed?](https://discuss.elastic.co/t/changed-mapping-but-field-is-still-analyzed/44960)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 7\ **Last updated:** [March 21, 2016, 9:42am UTC](https://discuss.elastic.co/t/changed-mapping-but-field-is-still-analyzed/44960 "2016-03-21T09:42:55Z")
Hi Experts , Please clear my doubt , I had an index and "alertmsg" field had following mapping "alertmsg": {"type": "string","analyzer":"analyzer\_keyword"} I was not happy the way kibana showing it in table as the … --- ## [Similarity field in KNN](https://discuss.elastic.co/t/similarity-field-in-knn/348552)
**Author:** [@Sai\_Krishna\_D](https://discuss.elastic.co/u/Sai_Krishna_D)\ **Replies:** 4\ **Last updated:** [December 4, 2023, 2:30pm UTC](https://discuss.elastic.co/t/similarity-field-in-knn/348552 "2023-12-04T14:30:06Z")
When using the Similarity field in KNN Query, The response is not expected, The similarity value I gave was 0.6 and the boost as 1. Even though there are more than 30 documents which have score greater than 0.7 only one … --- ## [Prefix Query on Custom \_id Field](https://discuss.elastic.co/t/prefix-query-on-custom-id-field/234226)
**Author:** [@TheTechromancer](https://discuss.elastic.co/u/TheTechromancer)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 1:52am UTC](https://discuss.elastic.co/t/prefix-query-on-custom-id-field/234226 "2020-05-26T01:52:06Z")
Greetings, I am looking for a way to perform a prefix query on \_id without duplicating its value to another field. I am overriding \_id with a custom string value as a "primary key" to prevent duplicates. Is it possibl… --- ## [Reindex data streams "in place"](https://discuss.elastic.co/t/reindex-data-streams-in-place/304365)
**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\ **Replies:** 1\ **Last updated:** [May 10, 2022, 10:20pm UTC](https://discuss.elastic.co/t/reindex-data-streams-in-place/304365 "2022-05-10T22:20:59Z")
Hi, I have many data streams totaling... a lot... of space and I need to change the mapping of a few existing fields. What would be a decent strategy for re-indexing several dozen data streams consisting of several hun… --- ## [Rename field name in saved search](https://discuss.elastic.co/t/rename-field-name-in-saved-search/270205)
**Author:** [@thenoobert](https://discuss.elastic.co/u/thenoobert)\ **Replies:** 3\ **Last updated:** [April 15, 2021, 11:37am UTC](https://discuss.elastic.co/t/rename-field-name-in-saved-search/270205 "2021-04-15T11:37:20Z")
Hi, I am currently trying to visualize a result based on saved search. However, the result field name is too distracting/displeasing so would like to rename it to something simple. I know this can be achieved through da… --- ## [Using Custom Sort with Track Scores set to True is still showing score as null](https://discuss.elastic.co/t/using-custom-sort-with-track-scores-set-to-true-is-still-showing-score-as-null/196012)
**Author:** [@andres\_512](https://discuss.elastic.co/u/andres_512)\ **Replies:** 3\ **Last updated:** [August 22, 2019, 11:49am UTC](https://discuss.elastic.co/t/using-custom-sort-with-track-scores-set-to-true-is-still-showing-score-as-null/196012 "2019-08-22T11:49:52Z")
So I'm setting a default query in my React Native app. Essentially I'm trying to set a sortOrder based on the elementOrder values. My partner used this same piece of code in his web app and it works for him. It doesn't s… --- ## [CPU footprint of packetbeat is high](https://discuss.elastic.co/t/cpu-footprint-of-packetbeat-is-high/31553)
**Author:** [@5uraj](https://discuss.elastic.co/u/5uraj)\ **Replies:** 3\ **Last updated:** [May 13, 2016, 3:41pm UTC](https://discuss.elastic.co/t/cpu-footprint-of-packetbeat-is-high/31553 "2016-05-13T15:41:52Z")
I am using packetbeat in af\_paket traffic capturing mode, which give me about 30% CPU footprint on single core instance when I go for http and mysql monitoring only. As soon as I increase more header and cookie capture i… --- ## [Upgrade to elasticsearch 1.6.0 - JVM incompatibility](https://discuss.elastic.co/t/upgrade-to-elasticsearch-1-6-0-jvm-incompatibility/25279)
**Author:** [@kkomv](https://discuss.elastic.co/u/kkomv)\ **Replies:** 3\ **Last updated:** [July 14, 2015, 7:00pm UTC](https://discuss.elastic.co/t/upgrade-to-elasticsearch-1-6-0-jvm-incompatibility/25279 "2015-07-14T19:00:25Z")
Installation is failing with the below error , {1.6.0}: Initialization Failed ... - RuntimeException\[Java version: 1.7.0\_51 suffers from critical bug https://bugs.openjdk.java.net/browse/JDK-8024830 which can cause da… --- ## [How to make Kibana Terms panel to count complete string frequencies, rather than separate words frequencies?](https://discuss.elastic.co/t/how-to-make-kibana-terms-panel-to-count-complete-string-frequencies-rather-than-separate-words-frequencies/20099)
**Author:** [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)\ **Replies:** 3\ **Last updated:** [October 7, 2014, 7:37am UTC](https://discuss.elastic.co/t/how-to-make-kibana-terms-panel-to-count-complete-string-frequencies-rather-than-separate-words-frequencies/20099 "2014-10-07T07:37:56Z")
I have documents in ES with the field "Message", which normally represents some multi word text string. Trying to query it with Kibana to see which strings are in this property most frequently. What I actually get ba… --- ## [Filebeat to Logstash resending last message](https://discuss.elastic.co/t/filebeat-to-logstash-resending-last-message/216813)
**Author:** [@d3mak](https://discuss.elastic.co/u/d3mak)\ **Replies:** 1\ **Last updated:** [January 31, 2020, 8:12pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-resending-last-message/216813 "2020-01-31T20:12:41Z")
I have a simple test-setup where I send data to Logstash via Filebeat. Both are in Version 7.5.2. All processes run on the localhost. On Logstash I pipe the output to stdout. I am sending contents of log-files via Fileb… --- ## [Filebeat not steaming the sar logs](https://discuss.elastic.co/t/filebeat-not-steaming-the-sar-logs/43305)
**Author:** [@vgupta](https://discuss.elastic.co/u/vgupta)\ **Replies:** 4\ **Last updated:** [March 11, 2016, 2:45pm UTC](https://discuss.elastic.co/t/filebeat-not-steaming-the-sar-logs/43305 "2016-03-11T14:45:09Z")
I am getting following error when streaming the system sar log file 2016-03-01T00:24:08Z INFO Read line error: file inactive 2016-03-01T23:53:02Z INFO Harvester started for file: /var/log/sa/sar01 2016-03-02T00:23:07Z … --- ## [Error when creating a template](https://discuss.elastic.co/t/error-when-creating-a-template/49871)
**Author:** [@Giulio](https://discuss.elastic.co/u/Giulio)\ **Replies:** 2\ **Last updated:** [May 13, 2016, 8:08am UTC](https://discuss.elastic.co/t/error-when-creating-a-template/49871 "2016-05-13T08:08:02Z")
Hi I have a problem when I create a new template. As I wrote in the previous post I must create a simple template whit a different tokenizer because the standard one delete some character that I need. so I create this… --- ## [Analyzer for special characters](https://discuss.elastic.co/t/analyzer-for-special-characters/13291)
**Author:** [@Juan](https://discuss.elastic.co/u/Juan)\ **Replies:** 2\ **Last updated:** [August 22, 2013, 9:05pm UTC](https://discuss.elastic.co/t/analyzer-for-special-characters/13291 "2013-08-22T21:05:47Z")
Hi, I want to be able to search on special characters e.g. # and $ using the query\_string on multiple fields. I have used the default standard analyzer, which caused some issues (es exceptions) when using for inst… --- ## [Kibana login disabled](https://discuss.elastic.co/t/kibana-login-disabled/184693)
**Author:** [@kjh](https://discuss.elastic.co/u/kjh)\ **Replies:** 6\ **Last updated:** [June 7, 2019, 2:20pm UTC](https://discuss.elastic.co/t/kibana-login-disabled/184693 "2019-06-07T14:20:26Z")
Login is currently disabled. Administrators should consult the Kibana logs for more details. i am using docker compose file and getting error for kibana not able to login --- ## [Logstash not working, but says configuration ok](https://discuss.elastic.co/t/logstash-not-working-but-says-configuration-ok/83367)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 6\ **Last updated:** [April 24, 2017, 10:17am UTC](https://discuss.elastic.co/t/logstash-not-working-but-says-configuration-ok/83367 "2017-04-24T10:17:56Z")
Logstash is creating problems, I am using it with filebeat to send logs to elastic. When I start it, it says every thing is ok, luvpreet@DHARI-Inspiron-3542:/usr/share/logstash$ sudo bin/logstash --path.settings /etc/l… --- ## [Multi-tenancy performance](https://discuss.elastic.co/t/multi-tenancy-performance/3732)
**Author:** [@recht](https://discuss.elastic.co/u/recht)\ **Replies:** 6\ **Last updated:** [January 4, 2011, 10:21pm UTC](https://discuss.elastic.co/t/multi-tenancy-performance/3732 "2011-01-04T22:21:31Z")
Hi It seems that performance degrades pretty quickly when adding indexes, although the twitter example would suggest that it's possible to create a large number of indexes. Is there any way of speeding up multiple … --- ## [Add parameter "include\_type\_name":true in index settings block](https://discuss.elastic.co/t/add-parameter-include-type-name-true-in-index-settings-block/256078)
**Author:** [@Tamil\_Selvan](https://discuss.elastic.co/u/Tamil_Selvan)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 6:52pm UTC](https://discuss.elastic.co/t/add-parameter-include-type-name-true-in-index-settings-block/256078 "2020-11-20T18:52:07Z")
In ES version 7.9.3, the include\_type\_name is defaulted to false, need to make it true, Need to pass include\_type\_name=true in request URL Is there is another way without passing in the request url --- ## [Logstash (5.4.2) / Winlogbeat / SSL - File does not contain valid private key](https://discuss.elastic.co/t/logstash-5-4-2-winlogbeat-ssl-file-does-not-contain-valid-private-key/95183)
**Author:** [@jaypalexa](https://discuss.elastic.co/u/jaypalexa)\ **Replies:** 1\ **Last updated:** [August 3, 2017, 3:30pm UTC](https://discuss.elastic.co/t/logstash-5-4-2-winlogbeat-ssl-file-does-not-contain-valid-private-key/95183 "2017-08-03T15:30:17Z")
Hello -- We are attempting to implement SSL for Logstash (5.4.2) / Winlogbeat as per Securing Communication With Logstash by Using SSL. Just focusing on the server-side SSL for now; client-side / mutual authentication i… --- ## [ECK SSO with google cloud OpenID: Error \[security\_exception\] unable to authenticate user \[\\]](https://discuss.elastic.co/t/eck-sso-with-google-cloud-openid-error-security-exception-unable-to-authenticate-user-oidc-token/270101)
**Author:** [@lmes3oud](https://discuss.elastic.co/u/lmes3oud)\ **Replies:** 5\ **Last updated:** [April 15, 2021, 10:17am UTC](https://discuss.elastic.co/t/eck-sso-with-google-cloud-openid-error-security-exception-unable-to-authenticate-user-oidc-token/270101 "2021-04-15T10:17:56Z")
Hi all, I'm trying to enable SSO to Kibana version 7.11.0 created using ECK version 1.4.1. I followed this tutorial for Setup with Google Cloud OAuth Credential. token.enabled: true realms.oidc: oi… --- ## [Reindex api and date field](https://discuss.elastic.co/t/reindex-api-and-date-field/144943)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 5\ **Last updated:** [August 21, 2018, 12:43pm UTC](https://discuss.elastic.co/t/reindex-api-and-date-field/144943 "2018-08-21T12:43:55Z")
Dear all, I've used \_reindex and all the date fields were changed to "type": "text". In the source index, they are all declared as follow: my\_date\_field": { "type": "date", "format": "yyyy-MM-dd HH:mm:ss" } The reinde… --- ## [Json\_encode returns null](https://discuss.elastic.co/t/json-encode-returns-null/114728)
**Author:** [@Sebastian\_Fratini](https://discuss.elastic.co/u/Sebastian_Fratini)\ **Replies:** 5\ **Last updated:** [January 9, 2018, 7:07pm UTC](https://discuss.elastic.co/t/json-encode-returns-null/114728 "2018-01-09T19:07:56Z")
I am parsing data from the pm2 manager for node and it works fine, however some of my data ends in a text field instead of an structure. This is my logstash configuration: if \[fields\]\[type\] == "pm2" { json { … --- ## [No results found for none of filebeat modules in Kibana Dashboard](https://discuss.elastic.co/t/no-results-found-for-none-of-filebeat-modules-in-kibana-dashboard/111343)
**Author:** [@yan](https://discuss.elastic.co/u/yan)\ **Replies:** 5\ **Last updated:** [December 14, 2017, 9:06am UTC](https://discuss.elastic.co/t/no-results-found-for-none-of-filebeat-modules-in-kibana-dashboard/111343 "2017-12-14T09:06:26Z")
Hello all, I am using Kibana-elasticsearch-filebeat 6.0.0. After the installation and configuration I manage to enter Kibana and I can perfectly see all the desired logs in the "Discover" tab. But, for some reason I can… --- ## [PUT vs POST when adding documents in elastic search](https://discuss.elastic.co/t/put-vs-post-when-adding-documents-in-elastic-search/187486)
**Author:** [@Vishwajeet\_singh](https://discuss.elastic.co/u/Vishwajeet_singh)\ **Replies:** 3\ **Last updated:** [June 26, 2019, 8:51am UTC](https://discuss.elastic.co/t/put-vs-post-when-adding-documents-in-elastic-search/187486 "2019-06-26T08:51:44Z")
Hi, I am new to Elasticsearch and trying to add documents in elastic index. I have got confused between PUT and POST here as both are producing same results in below scenario: curl -H "Content-Type: application/json" … [Previous page](https://discuss.elastic.co/top.md?page=763&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=765&per_page=50&period=all)