# Top

**URL:** https://discuss.elastic.co/top.md?page=802&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 803

---

## [Kibana failing to query elasticsearch](https://discuss.elastic.co/t/kibana-failing-to-query-elasticsearch/89299)

<div class="topic-metadata">

**Author:** [@Darshan\_Parab](https://discuss.elastic.co/u/Darshan_Parab)\
**Replies:** 3\
**Last updated:** [June 14, 2017, 5:30pm UTC](https://discuss.elastic.co/t/kibana-failing-to-query-elasticsearch/89299 "2017-06-14T17:30:52Z")

</div>

Hi All, I'm getting an error while using a dashboard. Not able to figure out what is going wrong. Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"circuit\_breaking\_exception","reason":"\[requ…

---

## [Better understanding Lucene/Shard overheads](https://discuss.elastic.co/t/better-understanding-lucene-shard-overheads/21786)

<div class="topic-metadata">

**Author:** [@Drew\_Kutcharian](https://discuss.elastic.co/u/Drew_Kutcharian)\
**Replies:** 3\
**Last updated:** [January 24, 2015, 4:53pm UTC](https://discuss.elastic.co/t/better-understanding-lucene-shard-overheads/21786 "2015-01-24T16:53:29Z")

</div>

Hi, I just came across this blog post: http://blog.mikemccandless.com/2010/07/lucenes-ram-usage-for-searching.html Seems like there has been a lot of work done on Lucene to reduce its memory requirements and even …

---

## [Getting "1 of 2 shards failed"](https://discuss.elastic.co/t/getting-1-of-2-shards-failed/229781)

<div class="topic-metadata">

**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 6:06pm UTC](https://discuss.elastic.co/t/getting-1-of-2-shards-failed/229781 "2020-04-27T18:06:30Z")

</div>

When i opened the dashboard on kibana, I am getting 1 of 2 shards failed The data you are seeing might be incomplete or wrong.

---

## [Solved :Java High Level RestClient 6.1.3 NoClassDefFoundError](https://discuss.elastic.co/t/solved-java-high-level-restclient-6-1-3-noclassdeffounderror/118436)

<div class="topic-metadata">

**Author:** [@Christian\_Foerster](https://discuss.elastic.co/u/Christian_Foerster)\
**Replies:** 2\
**Last updated:** [February 14, 2018, 8:17am UTC](https://discuss.elastic.co/t/solved-java-high-level-restclient-6-1-3-noclassdeffounderror/118436 "2018-02-14T08:17:12Z")

</div>

Hi, I'm trying to create a very simple Rest Client, as described in the docs. I'm using maven with this dependency: \<dependency\> \<groupId\>org.elasticsearch.client\</groupId\> \<artifactId\>elasticsearch-re…

---

## [Kibana font/resize query](https://discuss.elastic.co/t/kibana-font-resize-query/29900)

<div class="topic-metadata">

**Author:** [@achakrab22](https://discuss.elastic.co/u/achakrab22)\
**Replies:** 2\
**Last updated:** [September 26, 2015, 5:26am UTC](https://discuss.elastic.co/t/kibana-font-resize-query/29900 "2015-09-26T05:26:56Z")

</div>

I am using Kibana 4.0.1 I had couple of questions: 1\> How do I get the black theme which was there in older Kibana 2\> I am showing a simple dashboard showing the log lines How can I resize the font/height of a row t…

---

## [Health check failed](https://discuss.elastic.co/t/health-check-failed/259430)

<div class="topic-metadata">

**Author:** [@sukumar.koganti](https://discuss.elastic.co/u/sukumar.koganti)\
**Replies:** 5\
**Last updated:** [December 23, 2020, 4:31pm UTC](https://discuss.elastic.co/t/health-check-failed/259430 "2020-12-23T16:31:33Z")

</div>

I am trying to install Elasticserver in Linux, after I ran the server I am facing the below issue. Can you please help me to resolve this? \[2020-12-22T00:02:31,363\]\[ERROR\]\[o.e.m.f.FsHealthService \] \[GTHYJDEV01.pneus.to…

---

## [Does logstash drop Events](https://discuss.elastic.co/t/does-logstash-drop-events/144236)

<div class="topic-metadata">

**Author:** [@saad](https://discuss.elastic.co/u/saad)\
**Replies:** 5\
**Last updated:** [August 14, 2018, 1:54pm UTC](https://discuss.elastic.co/t/does-logstash-drop-events/144236 "2018-08-14T13:54:01Z")

</div>

How I will make sure that all events that are coming to logstash is going out and there is no dropping events in logstash queue? I mean I am not losing events in logstash and all events are successfully emitted to elast…

---

## [Extract data specific field and visualise in time (from logs)](https://discuss.elastic.co/t/extract-data-specific-field-and-visualise-in-time-from-logs/234512)

<div class="topic-metadata">

**Author:** [@AlexandruRepede](https://discuss.elastic.co/u/AlexandruRepede)\
**Replies:** 1\
**Last updated:** [June 4, 2020, 10:59am UTC](https://discuss.elastic.co/t/extract-data-specific-field-and-visualise-in-time-from-logs/234512 "2020-06-04T10:59:16Z")

</div>

i have some logfiles available in kibana and would like to extract values of a field and see them according to their timestamps i have field called 'logger' that basically contains the java classes from which the log en…

---

## [What does "Could not write all entries for bulk operation" mean when I add two more data nodes into the cluster](https://discuss.elastic.co/t/what-does-could-not-write-all-entries-for-bulk-operation-mean-when-i-add-two-more-data-nodes-into-the-cluster/202280)

<div class="topic-metadata">

**Author:** [@yuecong](https://discuss.elastic.co/u/yuecong)\
**Replies:** 1\
**Last updated:** [October 4, 2019, 5:15am UTC](https://discuss.elastic.co/t/what-does-could-not-write-all-entries-for-bulk-operation-mean-when-i-add-two-more-data-nodes-into-the-cluster/202280 "2019-10-04T05:15:03Z")

</div>

I added two more data nodes into the cluster, but I got the exception as follows only for these two nodes, but not from other existing nodes. org.elasticsearch.hadoop.EsHadoopException: Could not write all entries for …

---

## [How to create a line chart featuring an average as line and max and min as bubbles?](https://discuss.elastic.co/t/how-to-create-a-line-chart-featuring-an-average-as-line-and-max-and-min-as-bubbles/81825)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [April 10, 2017, 7:17pm UTC](https://discuss.elastic.co/t/how-to-create-a-line-chart-featuring-an-average-as-line-and-max-and-min-as-bubbles/81825 "2017-04-10T19:17:30Z")

</div>

Hi, I am using ELK GA 5.0.0. In my Elasticsearch, I have an index containing some number data. I am able to plot a line graph using the Average in Y-Axis aggregation, and date histogram in X-Axis. I managed to create 2…

---

## [Main problem with garbage collector](https://discuss.elastic.co/t/main-problem-with-garbage-collector/277656)

<div class="topic-metadata">

**Author:** [@angelogabeira](https://discuss.elastic.co/u/angelogabeira)\
**Replies:** 8\
**Last updated:** [July 5, 2021, 3:17pm UTC](https://discuss.elastic.co/t/main-problem-with-garbage-collector/277656 "2021-07-05T15:17:02Z")

</div>

guys, I really need help. I've researched a lot on the internet but I couldn't help myself. I have an ELK stack with an elasticsearch 6.5 server, running for 3 years. lately i have had a lot of problem with ingesting da…

---

## [How to show fields value on Data table Columns?](https://discuss.elastic.co/t/how-to-show-fields-value-on-data-table-columns/255964)

<div class="topic-metadata">

**Author:** [@rmrodrigues](https://discuss.elastic.co/u/rmrodrigues)\
**Replies:** 2\
**Last updated:** [November 20, 2020, 11:11am UTC](https://discuss.elastic.co/t/how-to-show-fields-value-on-data-table-columns/255964 "2020-11-20T11:11:05Z")

</div>

Hi there, I'm a newbie here on Elastic. Just to give you some context about my journey here, I'm trying elastic to build a business analytics system. I have an index where the document is something like this: { …

---

## [Term Agregation in Kibana: Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/term-agregation-in-kibana-fielddata-is-disabled-on-text-fields-by-default/206370)

<div class="topic-metadata">

**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\
**Replies:** 2\
**Last updated:** [November 8, 2019, 3:22pm UTC](https://discuss.elastic.co/t/term-agregation-in-kibana-fielddata-is-disabled-on-text-fields-by-default/206370 "2019-11-08T15:22:07Z")

</div>

HI, In a ESS cluster, Im sending log with Filebeat, and with kibana im trying to create a visualization, Pie Chart by host.hostname. Then I create a Term agregation by hostname and when i execute the visualization i ge…

---

## [API backward compatibility policy?](https://discuss.elastic.co/t/api-backward-compatibility-policy/8853)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 2\
**Last updated:** [August 27, 2012, 8:36am UTC](https://discuss.elastic.co/t/api-backward-compatibility-policy/8853 "2012-08-27T08:36:33Z")

</div>

Hello, What is the policy on ES client-server compatibility when it comes to upgrades? Example: \* I have ES cluster version X.0.0 and am using its Java API to talk to it \* There is a new version of ES out, versio…

---

## [Windows service on Server 2003 does not log to mybeat.log](https://discuss.elastic.co/t/windows-service-on-server-2003-does-not-log-to-mybeat-log/47177)

<div class="topic-metadata">

**Author:** [@jstmatt](https://discuss.elastic.co/u/jstmatt)\
**Replies:** 4\
**Last updated:** [April 14, 2016, 1:17am UTC](https://discuss.elastic.co/t/windows-service-on-server-2003-does-not-log-to-mybeat-log/47177 "2016-04-14T01:17:27Z")

</div>

Hi, new-ish user here... I am able to get Filebeat 1.2.1 (same effect on 1.1.1) running on a Windows 2003 server from the console, no problem. It reads the logs, writes to its own log files, and places the registry fil…

---

## [Aggregation comparison mongoDB vs ES](https://discuss.elastic.co/t/aggregation-comparison-mongodb-vs-es/54938)

<div class="topic-metadata">

**Author:** [@Hitesh\_Chavhan](https://discuss.elastic.co/u/Hitesh_Chavhan)\
**Replies:** 3\
**Last updated:** [July 7, 2016, 1:43pm UTC](https://discuss.elastic.co/t/aggregation-comparison-mongodb-vs-es/54938 "2016-07-07T13:43:49Z")

</div>

Hi, Can someone give a opinion on aggregation performance in mongoDB vs Elastic search. Thanks already.

---

## [Elastic search using a lot of memory, GC thrashing](https://discuss.elastic.co/t/elastic-search-using-a-lot-of-memory-gc-thrashing/48695)

<div class="topic-metadata">

**Author:** [@PeteyPabPro](https://discuss.elastic.co/u/PeteyPabPro)\
**Replies:** 3\
**Last updated:** [May 2, 2016, 1:06pm UTC](https://discuss.elastic.co/t/elastic-search-using-a-lot-of-memory-gc-thrashing/48695 "2016-05-02T13:06:09Z")

</div>

Hi, My ES instance is using 97% of its heap, and is thus garbage collecting almost constantly, and preventing any requests from being successful. Thing is, I can't figure out what is eating up all the memory. There is n…

---

## [Facet\`s feature with NEST and aggregation api](https://discuss.elastic.co/t/facet-s-feature-with-nest-and-aggregation-api/126228)

<div class="topic-metadata">

**Author:** [@rdcm](https://discuss.elastic.co/u/rdcm)\
**Replies:** 2\
**Last updated:** [April 2, 2018, 9:05am UTC](https://discuss.elastic.co/t/facet-s-feature-with-nest-and-aggregation-api/126228 "2018-04-02T09:05:37Z")

</div>

At this moment my UI has 4 groups with searching checkboxes: 1) text input (full text search and exact matches) 2) grades (list of checkboxes) 3) subjects (list of checkboxes) 4) types (list of checkboxes) Between grou…

---

## [StackOverflowError triggering cluster crash](https://discuss.elastic.co/t/stackoverflowerror-triggering-cluster-crash/285550)

<div class="topic-metadata">

**Author:** [@bhargava\_kovi](https://discuss.elastic.co/u/bhargava_kovi)\
**Replies:** 7\
**Last updated:** [October 15, 2021, 1:43pm UTC](https://discuss.elastic.co/t/stackoverflowerror-triggering-cluster-crash/285550 "2021-10-15T13:43:36Z")

</div>

The cluster was suddenly crashed mentioning the below stack trace. we are using version ES 7.10.1. I tried to look for a similar issue on StackOverflowError in Lucene but couldnt find much on it. Can anyone help to un…

---

## [Optimize grok filter](https://discuss.elastic.co/t/optimize-grok-filter/194906)

<div class="topic-metadata">

**Author:** [@JeanM](https://discuss.elastic.co/u/JeanM)\
**Replies:** 7\
**Last updated:** [August 16, 2019, 12:49pm UTC](https://discuss.elastic.co/t/optimize-grok-filter/194906 "2019-08-16T12:49:48Z")

</div>

Hello, I search some help in order to optimize grok filter. Actually, i have 100% CPU used. Have you some tricks ? Sincerely

---

## [Elastic Store](https://discuss.elastic.co/t/elastic-store/145610)

<div class="topic-metadata">

**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\
**Replies:** 7\
**Last updated:** [August 24, 2018, 1:12am UTC](https://discuss.elastic.co/t/elastic-store/145610 "2018-08-24T01:12:13Z")

</div>

I wanted to purchase some Elastic Swag, so I can follow my dream of shameless promotion of Elasticsearch. I was dismayed to find that I could not get through the cart without having to pick the $10 up sell of the Gift w…

---

## [SIEM not detecting ASA success failure logins](https://discuss.elastic.co/t/siem-not-detecting-asa-success-failure-logins/203754)

<div class="topic-metadata">

**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\
**Replies:** 5\
**Last updated:** [October 19, 2019, 5:31am UTC](https://discuss.elastic.co/t/siem-not-detecting-asa-success-failure-logins/203754 "2019-10-19T05:31:59Z")

</div>

SIEM not detecting success and failure logins from ASA syslog messages. and also it detect filebeat hostname as the host in SIEM app. What can i do? ASA Syslog message parsing could be better from filebeat 7.4 to popula…

---

## [Elastic Cloud forum](https://discuss.elastic.co/t/elastic-cloud-forum/134098)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 5\
**Last updated:** [June 1, 2018, 3:16pm UTC](https://discuss.elastic.co/t/elastic-cloud-forum/134098 "2018-06-01T15:16:25Z")

</div>

How does one access the Elastic Cloud forum? Was it removed or simply hidden from public view? The restore from "other" cluster option was removed, and deleted from the docs as well, and I would love to know why.

---

## [Configure Kibana for a Google Cloud Compute Engine Bitnami Elasticsearch](https://discuss.elastic.co/t/configure-kibana-for-a-google-cloud-compute-engine-bitnami-elasticsearch/110896)

<div class="topic-metadata">

**Author:** [@ChetHarrison](https://discuss.elastic.co/u/ChetHarrison)\
**Replies:** 5\
**Last updated:** [December 8, 2017, 10:06pm UTC](https://discuss.elastic.co/t/configure-kibana-for-a-google-cloud-compute-engine-bitnami-elasticsearch/110896 "2017-12-08T22:06:39Z")

</div>

Hi I am unable to launch Kibana Here is my config.yml and the subsequent logs ... perhaps it is a lack of ssl config? # Kibana is served by a back end server. This setting specifies the port to use. #server.port: 5601…

---

## [Java-Spring Boot org.elasticsearch.client.ResponseException: method \[PUT\], host \[http://localhost:9200\], URI \[/x\], status line \[HTTP/1.1 406 Not Acceptable\] {"error":"Content-Type header \[application/vnd.elasticsearch+json;compatible-with=8\] is not suppor](https://discuss.elastic.co/t/java-spring-boot-org-elasticsearch-client-responseexception-method-put-host-http-localhost-9200-uri-x-status-line-http-1-1-406-not-acceptable-error-content-type-header-application-vnd-elasticsearch-json-compatible-with-8-is-not-suppor/359372)

<div class="topic-metadata">

**Author:** [@fsk](https://discuss.elastic.co/u/fsk)\
**Replies:** 6\
**Last updated:** [May 13, 2024, 1:50pm UTC](https://discuss.elastic.co/t/java-spring-boot-org-elasticsearch-client-responseexception-method-put-host-http-localhost-9200-uri-x-status-line-http-1-1-406-not-acceptable-error-content-type-header-application-vnd-elasticsearch-json-compatible-with-8-is-not-suppor/359372 "2024-05-13T13:50:08Z")

</div>

Hello, I am developing a project using postgresql elasticsearch and spring boot. When i run my code, i get an error like below. Caused by: org.springframework.dao.DataAccessResourceFailureException: method \[PUT\], host …

---

## [Finding Heap Memory Circuit Breaker hard to predict](https://discuss.elastic.co/t/finding-heap-memory-circuit-breaker-hard-to-predict/37398)

<div class="topic-metadata">

**Author:** [@jelliott](https://discuss.elastic.co/u/jelliott)\
**Replies:** 6\
**Last updated:** [December 18, 2015, 3:08pm UTC](https://discuss.elastic.co/t/finding-heap-memory-circuit-breaker-hard-to-predict/37398 "2015-12-18T15:08:19Z")

</div>

Hi folks, I'm running into a lot of heap circuitbreakers based on fielddata size. I've been reading through advice on how to improve performance, but I still don't have a good mental model to predict when I'm going to…

---

## [Kubernetes API permission error log of Fleet server pod](https://discuss.elastic.co/t/kubernetes-api-permission-error-log-of-fleet-server-pod/296261)

<div class="topic-metadata">

**Author:** [@duclm2609](https://discuss.elastic.co/u/duclm2609)\
**Replies:** 2\
**Last updated:** [August 17, 2022, 9:40am UTC](https://discuss.elastic.co/t/kubernetes-api-permission-error-log-of-fleet-server-pod/296261 "2022-08-17T09:40:22Z")

</div>

I'm trying to deploy Fleet server as a deployment on Kubernetes. The server agent enrolls successfully to fleet but the log pod keep flooding with the following error: E0204 14:39:51.873097 8 leaderelection.go:325…

---

## [One or more required cgroup files not found of cgroup](https://discuss.elastic.co/t/one-or-more-required-cgroup-files-not-found-of-cgroup/163054)

<div class="topic-metadata">

**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\
**Replies:** 2\
**Last updated:** [January 6, 2019, 11:11am UTC](https://discuss.elastic.co/t/one-or-more-required-cgroup-files-not-found-of-cgroup/163054 "2019-01-06T11:11:02Z")

</div>

hello, I am using elasticsearch and kibana and logstash windows version without docker. whenever I want to load a file to elasticsearch I get endless loop of this error \[DEBUG\]\[logstash.instrument.periodicpoller.cgroup\]…

---

## [Failed to verify minimum version \[5.0.0-beta1\] on the \[xpack.monitoring.exporters.id1\] monitoring cluster](https://discuss.elastic.co/t/failed-to-verify-minimum-version-5-0-0-beta1-on-the-xpack-monitoring-exporters-id1-monitoring-cluster/95186)

<div class="topic-metadata">

**Author:** [@sgarap](https://discuss.elastic.co/u/sgarap)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 10:25am UTC](https://discuss.elastic.co/t/failed-to-verify-minimum-version-5-0-0-beta1-on-the-xpack-monitoring-exporters-id1-monitoring-cluster/95186 "2017-08-01T10:25:00Z")

</div>

Hi, I want to send the elasticsearch monitoring data to a separate monitoring cluster. Both the cluster have Elasticsearch 5.2.0. In the actual cluster, in elasticsearch.yml I added the following configuration. Note: Pa…

---

## [Which is the proper way to check Logstash activity?](https://discuss.elastic.co/t/which-is-the-proper-way-to-check-logstash-activity/63057)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 2\
**Last updated:** [October 31, 2016, 3:40pm UTC](https://discuss.elastic.co/t/which-is-the-proper-way-to-check-logstash-activity/63057 "2016-10-31T15:40:30Z")

</div>

Hello, I'm using Logstash on a docker container (see \[https://hub.docker.com/\_/logstash/\]) which I'm starting with the detach (-d) option. The thing is working fine, however now that I'm parsing a lot of logs I would lik…

---

## [Detecting and Alerting on Log Loss from Logstash or beats](https://discuss.elastic.co/t/detecting-and-alerting-on-log-loss-from-logstash-or-beats/214482)

<div class="topic-metadata">

**Author:** [@ciphee](https://discuss.elastic.co/u/ciphee)\
**Replies:** 3\
**Last updated:** [January 16, 2020, 5:04pm UTC](https://discuss.elastic.co/t/detecting-and-alerting-on-log-loss-from-logstash-or-beats/214482 "2020-01-16T17:04:22Z")

</div>

Hello, I was trying to be able to detect/alert when either logstash or a beats product stops sendings logs. The problem in the past we have had is when a specific logstash server goes down, or is up but not sending any…

---

## [RegEx in Logstash Conf File: loop through/retrieve all matches](https://discuss.elastic.co/t/regex-in-logstash-conf-file-loop-through-retrieve-all-matches/194020)

<div class="topic-metadata">

**Author:** [@dundundundun](https://discuss.elastic.co/u/dundundundun)\
**Replies:** 8\
**Last updated:** [August 7, 2019, 8:48pm UTC](https://discuss.elastic.co/t/regex-in-logstash-conf-file-loop-through-retrieve-all-matches/194020 "2019-08-07T20:48:34Z")

</div>

Let's suppose my log messages are as following: GroupName::Cars: mileage=19274 ~ year=2000 GroupName::school: students = 10000 ~ location = USA ~ classes = 50 ~ staff = 75 How can I pattern match both of these l…

---

## [How to edit kibana filters options text?](https://discuss.elastic.co/t/how-to-edit-kibana-filters-options-text/173117)

<div class="topic-metadata">

**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\
**Replies:** 3\
**Last updated:** [March 22, 2019, 10:41am UTC](https://discuss.elastic.co/t/how-to-edit-kibana-filters-options-text/173117 "2019-03-22T10:41:50Z")

</div>

Hi i am using elasticsearch 6.6 and kibana 6.6. How can i edit the options text coming in filters.

---

## [Can I create a ServiceNow ticket from Watcher](https://discuss.elastic.co/t/can-i-create-a-servicenow-ticket-from-watcher/124243)

<div class="topic-metadata">

**Author:** [@Umer\_Munir](https://discuss.elastic.co/u/Umer_Munir)\
**Replies:** 3\
**Last updated:** [March 17, 2018, 3:20pm UTC](https://discuss.elastic.co/t/can-i-create-a-servicenow-ticket-from-watcher/124243 "2018-03-17T15:20:15Z")

</div>

Hi, Can I create a ServiceNow ticket from Watcher? Regards, Umer

---

## [Calculate session time](https://discuss.elastic.co/t/calculate-session-time/50201)

<div class="topic-metadata">

**Author:** [@Wesley\_Smekens](https://discuss.elastic.co/u/Wesley_Smekens)\
**Replies:** 3\
**Last updated:** [August 4, 2016, 9:08am UTC](https://discuss.elastic.co/t/calculate-session-time/50201 "2016-08-04T09:08:55Z")

</div>

Hey all, I'm new to ELK but i have a working stack running with a decent filtered log. We are logging our application and something we want to see is the time a user is using a session. We are sending the session id a…

---

## [Using my log timestamp in logstash sample log (first-pipeline.conf)](https://discuss.elastic.co/t/using-my-log-timestamp-in-logstash-sample-log-first-pipeline-conf/83854)

<div class="topic-metadata">

**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\
**Replies:** 4\
**Last updated:** [May 2, 2017, 11:37am UTC](https://discuss.elastic.co/t/using-my-log-timestamp-in-logstash-sample-log-first-pipeline-conf/83854 "2017-05-02T11:37:28Z")

</div>

I have just successfully completed first example (first-pipeline.conf) from Logstash tutorial by uploading logs from FileBeat to Logstash to ElasticSearch In Kibana while creating new Index "logstash-\*" I am not gettin…

---

## [Elasticsearch terms aggregation based on id field need name field as a display](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-based-on-id-field-need-name-field-as-a-display/61808)

<div class="topic-metadata">

**Author:** [@raja\_augstin](https://discuss.elastic.co/u/raja_augstin)\
**Replies:** 4\
**Last updated:** [November 14, 2016, 12:55pm UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-based-on-id-field-need-name-field-as-a-display/61808 "2016-11-14T12:55:27Z")

</div>

is there anyway that we can buckets based on id and display based on Name? { "aggs" : { "topAdvisors" : { "terms" : { "field" : "advRepNum" } } } } Output : "buckets": …

---

## [NEST Search and return most recent document?](https://discuss.elastic.co/t/nest-search-and-return-most-recent-document/62938)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 4\
**Last updated:** [October 13, 2016, 9:48pm UTC](https://discuss.elastic.co/t/nest-search-and-return-most-recent-document/62938 "2016-10-13T21:48:07Z")

</div>

I am indexing documents using NEST, they dont have a timestamp, is there any way to retrieve/search for the most recent inserted document? or do i have to add a timestamp to my docs when indexing and then sort by that an…

---

## [Inner\_hits queries break from 1.7 to 2.3 in Elasticsearch](https://discuss.elastic.co/t/inner-hits-queries-break-from-1-7-to-2-3-in-elasticsearch/54242)

<div class="topic-metadata">

**Author:** [@siddharthgoel88](https://discuss.elastic.co/u/siddharthgoel88)\
**Replies:** 4\
**Last updated:** [June 29, 2016, 10:40am UTC](https://discuss.elastic.co/t/inner-hits-queries-break-from-1-7-to-2-3-in-elasticsearch/54242 "2016-06-29T10:40:58Z")

</div>

I have my question on stackoverflow at http://stackoverflow.com/questions/38091130/inner-hit-definition-with-the-name-typename-already-exists-use-a-different-in but for completeness I will put the details of my query her…

---

## [ES 1.7.3 Java API error when I close Node](https://discuss.elastic.co/t/es-1-7-3-java-api-error-when-i-close-node/32968)

<div class="topic-metadata">

**Author:** [@kruelah](https://discuss.elastic.co/u/kruelah)\
**Replies:** 4\
**Last updated:** [October 28, 2015, 8:18am UTC](https://discuss.elastic.co/t/es-1-7-3-java-api-error-when-i-close-node/32968 "2015-10-28T08:18:16Z")

</div>

Hi folks, I have an error when I close my node using Java API. oct. 26, 2015 10:06:59 AM org.elasticsearch.node.internal.InternalNode stop INFOS: \[Melody Guthrie\] stopping ... oct. 26, 2015 10:06:59 AM org.elasticsea…

---

## [Persistent queue not fully emptied after ES output unavailable](https://discuss.elastic.co/t/persistent-queue-not-fully-emptied-after-es-output-unavailable/192445)

<div class="topic-metadata">

**Author:** [@rbayet](https://discuss.elastic.co/u/rbayet)\
**Replies:** 0\
**Last updated:** [July 26, 2019, 1:06pm UTC](https://discuss.elastic.co/t/persistent-queue-not-fully-emptied-after-es-output-unavailable/192445 "2019-07-26T13:06:08Z")

</div>

Hi, I have a setup with a JMS input which subs to a durable topic on a message broker. Events contain log data in JSON format, so in my filters, I have a json, split and a bit of ruby code. The single output is ES. A…

---

## [Migration of elasticsearch java Client from 1.4.2 to 7.2 (problem in filteredQuery method)](https://discuss.elastic.co/t/migration-of-elasticsearch-java-client-from-1-4-2-to-7-2-problem-in-filteredquery-method/189688)

<div class="topic-metadata">

**Author:** [@youssef\_elhayani](https://discuss.elastic.co/u/youssef_elhayani)\
**Replies:** 5\
**Last updated:** [July 10, 2019, 12:32pm UTC](https://discuss.elastic.co/t/migration-of-elasticsearch-java-client-from-1-4-2-to-7-2-problem-in-filteredquery-method/189688 "2019-07-10T12:32:50Z")

</div>

Hi, Currently i am running elasticsearch in 1.4.2 and I trying to make it run in 7.2 , the problem that i found is in The method filteredQuery(MatchAllQueryBuilder, String, String) and filteredQuery(MatchAllQueryBuilder…

---

## [Timelion sheets exports for reuse on another Kibana instance](https://discuss.elastic.co/t/timelion-sheets-exports-for-reuse-on-another-kibana-instance/49053)

<div class="topic-metadata">

**Author:** [@Lou](https://discuss.elastic.co/u/Lou)\
**Replies:** 5\
**Last updated:** [April 5, 2017, 3:28pm UTC](https://discuss.elastic.co/t/timelion-sheets-exports-for-reuse-on-another-kibana-instance/49053 "2017-04-05T15:28:54Z")

</div>

Hello, everything is in the title \[:yum:\] I have some saved sheets in my Kibana instance, and would like to find a way to take them (where are them saved ??) and put them in another Kibana installation on another PC…

---

## [Archiving old records in elastic search](https://discuss.elastic.co/t/archiving-old-records-in-elastic-search/51285)

<div class="topic-metadata">

**Author:** [@akhilkumars](https://discuss.elastic.co/u/akhilkumars)\
**Replies:** 5\
**Last updated:** [June 1, 2016, 4:10am UTC](https://discuss.elastic.co/t/archiving-old-records-in-elastic-search/51285 "2016-06-01T04:10:06Z")

</div>

Hi , I am new to elastic search. I am using elastic search to persist order related data. My requirement is archive all completed orders after a certain period of time. For example if an ecomm order is completed, I wa…

---

## [Confusing DateHistogram behavior: buckets starts not from min bound date](https://discuss.elastic.co/t/confusing-datehistogram-behavior-buckets-starts-not-from-min-bound-date/87343)

<div class="topic-metadata">

**Author:** [@Guchman](https://discuss.elastic.co/u/Guchman)\
**Replies:** 4\
**Last updated:** [June 2, 2017, 6:34am UTC](https://discuss.elastic.co/t/confusing-datehistogram-behavior-buckets-starts-not-from-min-bound-date/87343 "2017-06-02T06:34:33Z")

</div>

I'd already create bug-report But maybe someone already know that issue workarounds. Merge days by 7days intervals in code is the last thing I want to do. But still doesn't find any other solution.

---

## [Query super slow whenever first time on an index](https://discuss.elastic.co/t/query-super-slow-whenever-first-time-on-an-index/111643)

<div class="topic-metadata">

**Author:** [@akirafei](https://discuss.elastic.co/u/akirafei)\
**Replies:** 7\
**Last updated:** [December 13, 2017, 8:59pm UTC](https://discuss.elastic.co/t/query-super-slow-whenever-first-time-on-an-index/111643 "2017-12-13T20:59:09Z")

</div>

Similar query first time: 19.301 s second time: 0.314 s index status after the first query

---

## [Best way to disable only one stopword in Elastic search](https://discuss.elastic.co/t/best-way-to-disable-only-one-stopword-in-elastic-search/99605)

<div class="topic-metadata">

**Author:** [@Ramchandram](https://discuss.elastic.co/u/Ramchandram)\
**Replies:** 7\
**Last updated:** [September 7, 2017, 6:44am UTC](https://discuss.elastic.co/t/best-way-to-disable-only-one-stopword-in-elastic-search/99605 "2017-09-07T06:44:32Z")

</div>

HI Team, As we know ‘AN’ is stopword in Elastic search. I have executed the below query. { “from”: 0, “size”: 100, “query”: { “bool”: { “must”: \[ { “match”: { “receiver”: { “query”: “AN”, “type”: “boolean” } …

---

## [Node null not part of the cluster Cluster - v0.20.2](https://discuss.elastic.co/t/node-null-not-part-of-the-cluster-cluster-v0-20-2/11586)

<div class="topic-metadata">

**Author:** [@snowmonkey](https://discuss.elastic.co/u/snowmonkey)\
**Replies:** 1\
**Last updated:** [April 15, 2013, 1:36pm UTC](https://discuss.elastic.co/t/node-null-not-part-of-the-cluster-cluster-v0-20-2/11586 "2013-04-15T13:36:28Z")

</div>

I'm seeing this warning in my elastic client thousands of times over. What's causing it? "node null not part of the cluster Cluster \[some cluster name\], ignoring..." I've checked using elastic head that the node…

---

## [Can you have multiple actions in one single mutate block?](https://discuss.elastic.co/t/can-you-have-multiple-actions-in-one-single-mutate-block/258913)

<div class="topic-metadata">

**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\
**Replies:** 2\
**Last updated:** [December 16, 2020, 9:10pm UTC](https://discuss.elastic.co/t/can-you-have-multiple-actions-in-one-single-mutate-block/258913 "2020-12-16T21:10:15Z")

</div>

Can you have multiple actions in one single mutate block or do you need a mutate block for each: mutate { copy =\> { "server\_name" =\> "syslog\_hostname" } replace =\> { "syslog\_program" =\> "\_geoip\_lookup\_failure" } } o…

---

## [Mutate convert not working](https://discuss.elastic.co/t/mutate-convert-not-working/42995)

<div class="topic-metadata">

**Author:** [@Rohan\_Jain](https://discuss.elastic.co/u/Rohan_Jain)\
**Replies:** 2\
**Last updated:** [March 1, 2016, 6:11am UTC](https://discuss.elastic.co/t/mutate-convert-not-working/42995 "2016-03-01T06:11:58Z")

</div>

I am trying to convert a field named " sf\_query\_time" from string to integer field using mutate convert in filters in logstash.conf. But its not getting converted Here is the code (filter in logstash) input { bea…

[Previous page](https://discuss.elastic.co/top.md?page=801&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=803&per_page=50&period=all)
