# Top **URL:** https://discuss.elastic.co/top.md?page=780&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 781 --- ## [Line graph visualization bug?](https://discuss.elastic.co/t/line-graph-visualization-bug/49075)
**Author:** [@Fran\_Fabrizio](https://discuss.elastic.co/u/Fran_Fabrizio)\ **Replies:** 5\ **Last updated:** [May 5, 2016, 2:18am UTC](https://discuss.elastic.co/t/line-graph-visualization-bug/49075 "2016-05-05T02:18:45Z")
So, I managed to create this beauty... \[image\] (Sorry I cut off the legend - the individual lines are for different years - explained below). I have documents with field user\_id and then I have scripted fields year … --- ## [Input threads with wild cards](https://discuss.elastic.co/t/input-threads-with-wild-cards/25550)
**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\ **Replies:** 5\ **Last updated:** [July 17, 2015, 2:12am UTC](https://discuss.elastic.co/t/input-threads-with-wild-cards/25550 "2015-07-17T02:12:56Z")
Hi, As I understand, each input section would be run with separate thread. But if I use wild cards in an input section, does this create multiple threads or still a single thread would be created? I ask this because,… --- ## [Curate Unable to connect to Elasticsearch cluster](https://discuss.elastic.co/t/curate-unable-to-connect-to-elasticsearch-cluster/266171)
**Author:** [@Bjen\_Shah](https://discuss.elastic.co/u/Bjen_Shah)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 4:43am UTC](https://discuss.elastic.co/t/curate-unable-to-connect-to-elasticsearch-cluster/266171 "2021-03-05T04:43:28Z")
$ curator\_cli --version curator\_cli, version 5.8.3 $ curator\_cli --loglevel DEBUG --use\_ssl --host 'https://test01.elk.com' --certificate '/etc/pki/www/pams-ca.pem' --port 9200 show\_indices 2021-03-03 16:22:08,053 DEBUG… --- ## [Elastic APM Python - System Metrics don't show process related metrics like memory on Kibana](https://discuss.elastic.co/t/elastic-apm-python-system-metrics-dont-show-process-related-metrics-like-memory-on-kibana/240531)
**Author:** [@Debashish\_BHARALI](https://discuss.elastic.co/u/Debashish_BHARALI)\ **Replies:** 4\ **Last updated:** [July 16, 2020, 10:21pm UTC](https://discuss.elastic.co/t/elastic-apm-python-system-metrics-dont-show-process-related-metrics-like-memory-on-kibana/240531 "2020-07-16T22:21:54Z")
I have a standalone Python application. The python process is not using any framework. And is a simple standalone python process. This has been successfully integrated with Elastic APM (+ElasticSearch +Kibana) for ca… --- ## [Metricbeat installation in HP Unix](https://discuss.elastic.co/t/metricbeat-installation-in-hp-unix/116658)
**Author:** [@rkshprb](https://discuss.elastic.co/u/rkshprb)\ **Replies:** 4\ **Last updated:** [January 25, 2018, 6:54am UTC](https://discuss.elastic.co/t/metricbeat-installation-in-hp-unix/116658 "2018-01-25T06:54:40Z")
HI, I want to install metricbeats HP-unix OS , Is there any other option please let me know. --- ## [Issues with scan and scroll as well as count API](https://discuss.elastic.co/t/issues-with-scan-and-scroll-as-well-as-count-api/29034)
**Author:** [@d\_bharvi](https://discuss.elastic.co/u/d_bharvi)\ **Replies:** 4\ **Last updated:** [September 11, 2015, 5:44am UTC](https://discuss.elastic.co/t/issues-with-scan-and-scroll-as-well-as-count-api/29034 "2015-09-11T05:44:55Z")
Hi, I am using scan\_scroll API for data re-indexing using python client. The total data is of 90 GB which contains 40 Million documents. Since it is query based re-indexing, i usually get less than 10000 documents per qu… --- ## [Kibana URL not accessible](https://discuss.elastic.co/t/kibana-url-not-accessible/149060)
**Author:** [@priyanka1](https://discuss.elastic.co/u/priyanka1)\ **Replies:** 2\ **Last updated:** [September 20, 2018, 6:03am UTC](https://discuss.elastic.co/t/kibana-url-not-accessible/149060 "2018-09-20T06:03:13Z")
I am using 6.4 version for kibana ,elasticsearch and logstash . installed in three different AWS VM's with OS : ubuntu 16.04 My kibana.yml looks like this: #Kibana is served by a back end server. This setting specifi… --- ## [An error while bulk indexing](https://discuss.elastic.co/t/an-error-while-bulk-indexing/69404)
**Author:** [@Ted\_Jung](https://discuss.elastic.co/u/Ted_Jung)\ **Replies:** 1\ **Last updated:** [December 19, 2016, 9:09am UTC](https://discuss.elastic.co/t/an-error-while-bulk-indexing/69404 "2016-12-19T09:09:37Z")
Asking for an advice...what meaning below messgaes have. Thanks in advance. \[2016-12-19 05:13:46,783\]\[DEBUG\]\[action.bulk \] \[doctest02\] \[filebeat-2016.12.19\]\[1\] failed to execute bulk item (index) index {\[f… --- ## [How to recover indices from missing translog file](https://discuss.elastic.co/t/how-to-recover-indices-from-missing-translog-file/52145)
**Author:** [@suhae](https://discuss.elastic.co/u/suhae)\ **Replies:** 1\ **Last updated:** [June 9, 2016, 12:12am UTC](https://discuss.elastic.co/t/how-to-recover-indices-from-missing-translog-file/52145 "2016-06-09T00:12:09Z")
hello. i have something to ask earnestly. my ES version is 2.2.1. i have following error : \[2016-06-08 11:52:55,369\]\[WARN \]\[cluster.action.shard \] \[Nate Grey\] \[lab\]\[4\] received shard failed for target shard \[\[la… --- ## [Changing logstash @timestamp timezone](https://discuss.elastic.co/t/changing-logstash-timestamp-timezone/25711)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 1\ **Last updated:** [July 16, 2015, 10:13am UTC](https://discuss.elastic.co/t/changing-logstash-timestamp-timezone/25711 "2015-07-16T10:13:39Z")
Hi, I am new to logstash and playing around with it. I have a simple set-up in which I am forwarding logs using logstash-forwarder to logstash. Both logstash and logstash-forwarder are in the same machine. My logstas… --- ## [How to start two instances of ES 6.0 as a service?](https://discuss.elastic.co/t/how-to-start-two-instances-of-es-6-0-as-a-service/109328)
**Author:** [@elastic\_paul](https://discuss.elastic.co/u/elastic_paul)\ **Replies:** 3\ **Last updated:** [November 29, 2017, 6:13am UTC](https://discuss.elastic.co/t/how-to-start-two-instances-of-es-6-0-as-a-service/109328 "2017-11-29T06:13:01Z")
As an experiment I would like to run 2 instances of ES on each server - I know this is not normally recommended. My servers has 128GB RAM and 12 processors (24 cores) so I would like to try running two instances. I have… --- ## [Multi-tenancy SIEM](https://discuss.elastic.co/t/multi-tenancy-siem/356108)
**Author:** [@infraendboss](https://discuss.elastic.co/u/infraendboss)\ **Replies:** 4\ **Last updated:** [March 26, 2024, 4:04pm UTC](https://discuss.elastic.co/t/multi-tenancy-siem/356108 "2024-03-26T16:04:31Z")
Hi all! For my research project, I have a problem. I want to set up a SIEM solution within the Elastic Cloud. In the SIEM solution, I aim to establish multi-tenancy for different customers, ensuring that each customer's… --- ## [Lumberjack error: Client write error, trying connect (..syswrite, write\_sync, multi\_receive, output\_batch, worker\_loop, start\_workers)](https://discuss.elastic.co/t/lumberjack-error-client-write-error-trying-connect-syswrite-write-sync-multi-receive-output-batch-worker-loop-start-workers/250557)
**Author:** [@Stanvv](https://discuss.elastic.co/u/Stanvv)\ **Replies:** 4\ **Last updated:** [October 2, 2020, 1:21pm UTC](https://discuss.elastic.co/t/lumberjack-error-client-write-error-trying-connect-syswrite-write-sync-multi-receive-output-batch-worker-loop-start-workers/250557 "2020-10-02T13:21:09Z")
When trying to forward data via the lumberjack protocol, we get the following error: See full error\[2020-09-30T20:23:04,014\]\[ERROR\]\[logstash.outputs.lumberjack\] Client write error, trying connect {:e=\>#\ **Author:** [@geoffcm](https://discuss.elastic.co/u/geoffcm)\ **Replies:** 5\ **Last updated:** [January 16, 2016, 11:14pm UTC](https://discuss.elastic.co/t/how-to-create-a-1-7-snapshot-compatible-with-1-5-2/39387 "2016-01-16T23:14:21Z") We've been running Elasticsearch ourselves (1.7.0) for a while. We want now to use AWS ES which is at version 1.5.2 When generating a snapshot and restoring from it into AWS ES, we receive the following error from AWS … --- ## [Detection Custom Rule not working](https://discuss.elastic.co/t/detection-custom-rule-not-working/269578)
**Author:** [@anaghadeoreofficial](https://discuss.elastic.co/u/anaghadeoreofficial)\ **Replies:** 7\ **Last updated:** [April 29, 2021, 3:41pm UTC](https://discuss.elastic.co/t/detection-custom-rule-not-working/269578 "2021-04-29T15:41:18Z")
We are unable to view custom alerts in the detection module. Showing error as below: --- ## [Not able to read time field from docker logs](https://discuss.elastic.co/t/not-able-to-read-time-field-from-docker-logs/117234)
**Author:** [@shekharupland](https://discuss.elastic.co/u/shekharupland)\ **Replies:** 7\ **Last updated:** [February 6, 2018, 4:42pm UTC](https://discuss.elastic.co/t/not-able-to-read-time-field-from-docker-logs/117234 "2018-02-06T16:42:51Z")
I have configured filebeat on my kubernetes cluster with elastic Search stack to collect all the generated dockers logs. The logs string are in this format : {"log":"Execution time (ms): 4\\n","stream":"stdout","time":… --- ## [Mapping a Product/Category Tree](https://discuss.elastic.co/t/mapping-a-product-category-tree/43816)
**Author:** [@basti](https://discuss.elastic.co/u/basti)\ **Replies:** 1\ **Last updated:** [April 6, 2017, 7:11pm UTC](https://discuss.elastic.co/t/mapping-a-product-category-tree/43816 "2017-04-06T19:11:30Z")
Hello together, i am new to elastic and just creating a new index for my webshop. In this shop i have n categories with n products. Each product can have n categories and the categories can have parent categories. e.g… --- ## [Export/Import index settings?](https://discuss.elastic.co/t/export-import-index-settings/945)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 1\ **Last updated:** [May 20, 2015, 7:41am UTC](https://discuss.elastic.co/t/export-import-index-settings/945 "2015-05-20T07:41:11Z")
I know the 4.1 snapshots have Export/Import available for Kibana objects such as visualizations and dashboards. However, is there any way to export/import index settings ? Specifically any scripted fields and field forma… --- ## [IP Watch List Functionality](https://discuss.elastic.co/t/ip-watch-list-functionality/223583)
**Author:** [@derricksong](https://discuss.elastic.co/u/derricksong)\ **Replies:** 6\ **Last updated:** [April 15, 2020, 5:04am UTC](https://discuss.elastic.co/t/ip-watch-list-functionality/223583 "2020-04-15T05:04:49Z")
Hello, Trying to implement an IP Watch List in SIEM and wondering if there was any guidance/best practices in doing so. I currently have an index where new malicious IP objects are logged on a regular basis, let's say … --- ## [Shield Exception](https://discuss.elastic.co/t/shield-exception/59620)
**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Replies:** 6\ **Last updated:** [October 5, 2016, 1:57pm UTC](https://discuss.elastic.co/t/shield-exception/59620 "2016-10-05T13:57:24Z")
I have integrated Shield with Active directory, i hope i didnt miss any step but still getting below error. ElasticsearchException\[failed to initialize a TrustManagerFactory\]; nested: AccessControlException\[access deni… --- ## [Java API Client Documentation](https://discuss.elastic.co/t/java-api-client-documentation/286132)
**Author:** [@blueJ](https://discuss.elastic.co/u/blueJ)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 11:17am UTC](https://discuss.elastic.co/t/java-api-client-documentation/286132 "2021-10-11T11:17:41Z")
Hey everyone, could You help me to find documentation for Java API Client (this beta solution that replaces Java High Level REST Client)? I mean something like the official oracle java libraries documentation? Kind reg… --- ## [Elasticsearch Relevance Seminar, July 10-11](https://discuss.elastic.co/t/elasticsearch-relevance-seminar-july-10-11/135016)
**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 2:28pm UTC](https://discuss.elastic.co/t/elasticsearch-relevance-seminar-july-10-11/135016 "2018-06-07T14:28:08Z")
I wrote the book Relevant Search, created the Elasticsearch Learning to Rank Plugin. I'll be teaching a small class targeted at Solr & Elasticsearch developers wanting to build smarter search applications. We go from TF\*… --- ## [Logstash cipher fragment error](https://discuss.elastic.co/t/logstash-cipher-fragment-error/314523)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 3\ **Last updated:** [September 15, 2022, 3:41pm UTC](https://discuss.elastic.co/t/logstash-cipher-fragment-error/314523 "2022-09-15T15:41:03Z")
I have an error in a pipeline in logstash, the input is via tcp and ssl. config: input { tcp { port =\> 7771 codec =\> line ssl\_verify =\> false ssl\_enable =\> true ssl\_cert =\> "/etc/logstash/certs/cert.crt… --- ## [Filebeat multiline assistance](https://discuss.elastic.co/t/filebeat-multiline-assistance/160779)
**Author:** [@HelpComputer](https://discuss.elastic.co/u/HelpComputer)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 5:07pm UTC](https://discuss.elastic.co/t/filebeat-multiline-assistance/160779 "2018-12-19T17:07:51Z")
Hello, I am hoping someone might be able to provide some assistance with a Filebeat multiline issue I can't seem to resolve. One server is running Novell Storage Services Auditing Client Logger (VLOG). Filebeat is insta… --- ## [How to search/query on docs that have specific file size](https://discuss.elastic.co/t/how-to-search-query-on-docs-that-have-specific-file-size/153253)
**Author:** [@mohsen](https://discuss.elastic.co/u/mohsen)\ **Replies:** 3\ **Last updated:** [October 21, 2018, 7:55am UTC](https://discuss.elastic.co/t/how-to-search-query-on-docs-that-have-specific-file-size/153253 "2018-10-21T07:55:01Z")
hi, I'm new in elasticsearch and fscrawler. I want to search only files (docs) that have file size greater than n bytes and less than m byte. something like this: GET /\_search { "\_source": \[ "file.filename", "f… --- ## [Graylog vs elasticsearch capacity planning](https://discuss.elastic.co/t/graylog-vs-elasticsearch-capacity-planning/86056)
**Author:** [@kekou](https://discuss.elastic.co/u/kekou)\ **Replies:** 3\ **Last updated:** [May 17, 2017, 8:15am UTC](https://discuss.elastic.co/t/graylog-vs-elasticsearch-capacity-planning/86056 "2017-05-17T08:15:49Z")
Hi, I'm new to elasticsearch :). i'm actually planning to deploy a graylog instance for managing about 100GB / day of log and keep them for a year, so a total of 36/40TB of Log (~5000 msg/s). The main usage of the so… --- ## [Can connect with http, but NOT through Java API](https://discuss.elastic.co/t/can-connect-with-http-but-not-through-java-api/8754)
**Author:** [@phill](https://discuss.elastic.co/u/phill)\ **Replies:** 8\ **Last updated:** [August 20, 2012, 9:24pm UTC](https://discuss.elastic.co/t/can-connect-with-http-but-not-through-java-api/8754 "2012-08-20T21:24:45Z")
Can anyone explain what is going on? Did I code the following Java wrong or did someone move some cables or port configuration on me? 1. I can use http REST from a Firefox browser and get information from an inde… --- ## [ElasticSearch didn't start at first try](https://discuss.elastic.co/t/elasticsearch-didnt-start-at-first-try/258747)
**Author:** [@kae](https://discuss.elastic.co/u/kae)\ **Replies:** 2\ **Last updated:** [December 15, 2020, 9:01pm UTC](https://discuss.elastic.co/t/elasticsearch-didnt-start-at-first-try/258747 "2020-12-15T21:01:10Z")
Hello Everyone, during deployment of my VM in my POD, ElasticSearch didn't start. issue on Journalctl is following : Dec 15 17:33:05 systemd\[1\]: Starting Elasticsearch... -- Subject: Unit elasticsearch.service has be… --- ## [How to prevent truncation of line?](https://discuss.elastic.co/t/how-to-prevent-truncation-of-line/207831)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [November 15, 2019, 10:23am UTC](https://discuss.elastic.co/t/how-to-prevent-truncation-of-line/207831 "2019-11-15T10:23:45Z")
Hi, I have some events in elasticsearch where filebeat sets the log.flag to truncated. From release notes I would say, that the truncation limit is configurable. Add tag "truncated" to "log.flags" if incoming line is… --- ## [An attempt was made to access a socket in a way forbidden by its access permissions error come out](https://discuss.elastic.co/t/an-attempt-was-made-to-access-a-socket-in-a-way-forbidden-by-its-access-permissions-error-come-out/149444)
**Author:** [@sangeetshah](https://discuss.elastic.co/u/sangeetshah)\ **Replies:** 2\ **Last updated:** [September 24, 2018, 5:28am UTC](https://discuss.elastic.co/t/an-attempt-was-made-to-access-a-socket-in-a-way-forbidden-by-its-access-permissions-error-come-out/149444 "2018-09-24T05:28:05Z")
i have signup into elastic cloud and created account and perform crude opetion into c# project that working fine into local pc but it getting stop working when i deploy this code into online or iis. i am using elastic l… --- ## [Python: How to input a string and use it as query match elasticsearch](https://discuss.elastic.co/t/python-how-to-input-a-string-and-use-it-as-query-match-elasticsearch/90707)
**Author:** [@Riccardo\_Spampinato](https://discuss.elastic.co/u/Riccardo_Spampinato)\ **Replies:** 2\ **Last updated:** [June 25, 2017, 9:58am UTC](https://discuss.elastic.co/t/python-how-to-input-a-string-and-use-it-as-query-match-elasticsearch/90707 "2017-06-25T09:58:47Z")
Hi everyone, I'm trying to code a simple python script which should ask for a string to be inserted by shell and use it as "match string" in a match query. I post here the script so the problem can be better understanda… --- ## [Authentication fields used by SIEM vs ECS](https://discuss.elastic.co/t/authentication-fields-used-by-siem-vs-ecs/210882)
**Author:** [@vbr](https://discuss.elastic.co/u/vbr)\ **Replies:** 3\ **Last updated:** [December 6, 2019, 5:04pm UTC](https://discuss.elastic.co/t/authentication-fields-used-by-siem-vs-ecs/210882 "2019-12-06T17:04:23Z")
Hi. We're storing security data in ES. We are not using the beats, but we are formatting data according to ECS. Unfortunately, the different values for fields are so far not well standardized, and working out how to get… --- ## [Kibana canvas change column width](https://discuss.elastic.co/t/kibana-canvas-change-column-width/255101)
**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\ **Replies:** 4\ **Last updated:** [November 18, 2020, 6:12pm UTC](https://discuss.elastic.co/t/kibana-canvas-change-column-width/255101 "2020-11-18T18:12:03Z")
Hello there. I am trying to change the width of a column in kibana. The thing is that when I set column count to something other than 1 here : I end up with something like this: Looks like in fact all we have is … --- ## [Creating custom beat, "make package" fails with "make: \*\*\* No rule to make target 'package'. Stop."](https://discuss.elastic.co/t/creating-custom-beat-make-package-fails-with-make-no-rule-to-make-target-package-stop/175766)
**Author:** [@akankshajpr](https://discuss.elastic.co/u/akankshajpr)\ **Replies:** 4\ **Last updated:** [April 10, 2019, 6:38am UTC](https://discuss.elastic.co/t/creating-custom-beat-make-package-fails-with-make-no-rule-to-make-target-package-stop/175766 "2019-04-10T06:38:33Z")
I am trying to create a custom beat using the guide https://www.elastic.co/guide/en/beats/devguide/current/new-beat.html and am unable to package it. Ideally the command "make package" should do the job but it is failing… --- ## [Kibana Superuser elastic not able to login after X-Pack installation](https://discuss.elastic.co/t/kibana-superuser-elastic-not-able-to-login-after-x-pack-installation/136034)
**Author:** [@Murali\_Krishna](https://discuss.elastic.co/u/Murali_Krishna)\ **Replies:** 5\ **Last updated:** [June 15, 2018, 9:06am UTC](https://discuss.elastic.co/t/kibana-superuser-elastic-not-able-to-login-after-x-pack-installation/136034 "2018-06-15T09:06:47Z")
Hi, I have installed X-Pack on ELK stack version 6.2.4 without any errors. However in Kibana UI console screen ( Management \> Security \> Users or Roles\> I am getting error message as "You do not have permission to manag… --- ## [Logstash to ElasticSearch Throughput](https://discuss.elastic.co/t/logstash-to-elasticsearch-throughput/80361)
**Author:** [@wpearson4](https://discuss.elastic.co/u/wpearson4)\ **Replies:** 5\ **Last updated:** [March 31, 2017, 5:58am UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-throughput/80361 "2017-03-31T05:58:05Z")
I have log stash setup to read my csv files and send them to ES. The csv files are ~6.5 gb each, with ~4.7 million records per csv file and 400 columns per record. I am able to load about 2 million records/hr. Current… --- ## [Kibana cannot connect to Elasticsearch](https://discuss.elastic.co/t/kibana-cannot-connect-to-elasticsearch/34289)
**Author:** [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)\ **Replies:** 5\ **Last updated:** [November 12, 2015, 3:41am UTC](https://discuss.elastic.co/t/kibana-cannot-connect-to-elasticsearch/34289 "2015-11-12T03:41:34Z")
I am unable to connect to elasticsearch with Kibana. I am getting the following on elasticsearch logs. Separate servers... \[2015-11-10 13:16:57,449\]\[INFO \]\[rest.suppressed \] /.kibana/config/\_search Params: {… --- ## [Seeking advice on setting up the ELK Stack](https://discuss.elastic.co/t/seeking-advice-on-setting-up-the-elk-stack/348968)
**Author:** [@Carrier99](https://discuss.elastic.co/u/Carrier99)\ **Replies:** 1\ **Last updated:** [December 12, 2023, 12:30am UTC](https://discuss.elastic.co/t/seeking-advice-on-setting-up-the-elk-stack/348968 "2023-12-12T00:30:36Z")
Hey there. I want to set up the ELK stack, and I'm wondering about a good way to set it up. I'm running Proxmox so I have the options of either VMs or LXCs (was thinking of going with LXCs). My main question is should… --- ## [Error in per bucket doc\_count\_error\_upper\_bound for Term Aggregation?](https://discuss.elastic.co/t/error-in-per-bucket-doc-count-error-upper-bound-for-term-aggregation/294249)
**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\ **Replies:** 7\ **Last updated:** [January 17, 2022, 7:07pm UTC](https://discuss.elastic.co/t/error-in-per-bucket-doc-count-error-upper-bound-for-term-aggregation/294249 "2022-01-17T19:07:47Z")
Below configuration for Elasticsearch: 1 Cluster 1 Node 1 Index 3 Shards (1 Replica shard for each primary, but in UNASSIGNED state as there is only 1 node). I have indexed document and those are spread across 3 Shards… --- ## [Lucene query for =\> current date](https://discuss.elastic.co/t/lucene-query-for-current-date/102466)
**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\ **Replies:** 1\ **Last updated:** [October 3, 2017, 1:45am UTC](https://discuss.elastic.co/t/lucene-query-for-current-date/102466 "2017-10-03T01:45:57Z")
Hi, I'm looking for some info on whether I can query against an index field that contains a date. Essentially I have a "due-by" date in the format: "2017-10-04T18:25:57+01:00". I would like to know if it is possible to … --- ## [Remove \\n Characters in Filebeat](https://discuss.elastic.co/t/remove-n-characters-in-filebeat/94544)
**Author:** [@dmtd](https://discuss.elastic.co/u/dmtd)\ **Replies:** 1\ **Last updated:** [July 26, 2017, 9:06am UTC](https://discuss.elastic.co/t/remove-n-characters-in-filebeat/94544 "2017-07-26T09:06:05Z")
Removing the content of this topic because it is not an elastic issue. But for anyone else who comes across this: Logs should be written to disk with \\n for new lines, not \\\\n, and Kibana will read appropriately. --- ## [Установка собственных сертификатов вместо создаваемых самим эластиком](https://discuss.elastic.co/t/topic/176629)
**Author:** [@pr0b3l](https://discuss.elastic.co/u/pr0b3l)\ **Replies:** 6\ **Last updated:** [April 19, 2019, 8:11am UTC](https://discuss.elastic.co/t/topic/176629 "2019-04-19T08:11:39Z")
Добрый день! Есть необходимость использовать сертификаты, созданные не самим эластиком, а выданные центром сертификации. Пробовал вставить их вместо, ELK стали возникать ошибки в javakeystore. Подскажите, куда копать,… --- ## [Scripted field using painless - creating new field based on multiple fields](https://discuss.elastic.co/t/scripted-field-using-painless-creating-new-field-based-on-multiple-fields/296402)
**Author:** [@iraidalavrovaa](https://discuss.elastic.co/u/iraidalavrovaa)\ **Replies:** 3\ **Last updated:** [February 7, 2022, 5:19am UTC](https://discuss.elastic.co/t/scripted-field-using-painless-creating-new-field-based-on-multiple-fields/296402 "2022-02-07T05:19:30Z")
Hi all, I have multiple fields containing the values of the same type (strings). The underlying structure of the division into these fields has changed. So I want to reorganize these fields for better filtering and vis… --- ## [Elasticsearch service getting aborted](https://discuss.elastic.co/t/elasticsearch-service-getting-aborted/221857)
**Author:** [@Ihjaz](https://discuss.elastic.co/u/Ihjaz)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 1:31pm UTC](https://discuss.elastic.co/t/elasticsearch-service-getting-aborted/221857 "2020-03-03T13:31:42Z")
Hi, I'm running Elasticsearch 6.2.2 on Rhel 7.6 and Java openjdk 1.8.0\_242. When the Elasticsearch is started, it keeps getting aborted with the following error: Mar 03 16:07:15 barnda044 systemd\[1\]: Started Elasticse… --- ## [Elastic search stops after a few minutes](https://discuss.elastic.co/t/elastic-search-stops-after-a-few-minutes/154686)
**Author:** [@Francois\_013](https://discuss.elastic.co/u/Francois_013)\ **Replies:** 2\ **Last updated:** [October 31, 2018, 2:14pm UTC](https://discuss.elastic.co/t/elastic-search-stops-after-a-few-minutes/154686 "2018-10-31T14:14:30Z")
Hi, I'm running an elasticsearch server 6.3 and i've upgraded it to 6.4.2. After the upgrade i'm running into the problem that service after a few minutes stops and fails. I can restart it without a problem When look… --- ## [How to delete only type in elasticsearch 2.4](https://discuss.elastic.co/t/how-to-delete-only-type-in-elasticsearch-2-4/76752)
**Author:** [@Sharon\_wsf](https://discuss.elastic.co/u/Sharon_wsf)\ **Replies:** 2\ **Last updated:** [February 28, 2017, 4:19pm UTC](https://discuss.elastic.co/t/how-to-delete-only-type-in-elasticsearch-2-4/76752 "2017-02-28T16:19:57Z")
Hi team, when insert data to elasticsearch, i have GET /news/testing/ GET /news/trkd/ GET /news/nar/ the type will be different. How to delete the type i need? when i use DELETE news/trkd/ , the error will be show … --- ## [Daily index not created](https://discuss.elastic.co/t/daily-index-not-created/280315)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 8\ **Last updated:** [August 5, 2021, 9:42pm UTC](https://discuss.elastic.co/t/daily-index-not-created/280315 "2021-08-05T21:42:31Z")
Hi Team, On my single test server with 8G of RAM (1955m to JVM) having es v 7.4, I have 12 application indices + few system indices like (.monitoring-es-7-2021.08.02, .monitoring-logstash-7-2021.08.02, .monitoring-kiba… --- ## [Logstash when started using nohup, it is logging too much resulting in huge size](https://discuss.elastic.co/t/logstash-when-started-using-nohup-it-is-logging-too-much-resulting-in-huge-size/276560)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 8\ **Last updated:** [July 2, 2021, 4:50am UTC](https://discuss.elastic.co/t/logstash-when-started-using-nohup-it-is-logging-too-much-resulting-in-huge-size/276560 "2021-07-02T04:50:02Z")
we are running logstash and its output has file and elasticsearch for every opening and closing the file plugin is logging in... resulting the nohup.out file being very huge... How do i avoid so much of logging, or is t… --- ## [How to write sub query in esql](https://discuss.elastic.co/t/how-to-write-sub-query-in-esql/233227)
**Author:** [@arureddy](https://discuss.elastic.co/u/arureddy)\ **Replies:** 1\ **Last updated:** [May 19, 2020, 3:59pm UTC](https://discuss.elastic.co/t/how-to-write-sub-query-in-esql/233227 "2020-05-19T15:59:33Z")
Hi, I am trying to get results from alias index (alias\_index1\_index2 = index1 and index2) if values of two columns from different indexes matches. Looks like joins or sub queries are not support ed completely. Could an… --- ## [Difference between one big and many small indices](https://discuss.elastic.co/t/difference-between-one-big-and-many-small-indices/160909)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 2\ **Last updated:** [December 14, 2018, 5:11pm UTC](https://discuss.elastic.co/t/difference-between-one-big-and-many-small-indices/160909 "2018-12-14T17:11:07Z")
Hello, what would be the main difference (performance and resource usage) between 1 x 100 GB index compared to 100 x 1 GB indices? 4 shards, no replicas. [Previous page](https://discuss.elastic.co/top.md?page=779&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=781&per_page=50&period=all)