# Top

**URL:** https://discuss.elastic.co/top.md?page=835&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 836

---

## [Security\_exception with curl](https://discuss.elastic.co/t/security-exception-with-curl/85965)

<div class="topic-metadata">

**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\
**Replies:** 1\
**Last updated:** [May 19, 2017, 6:05am UTC](https://discuss.elastic.co/t/security-exception-with-curl/85965 "2017-05-19T06:05:37Z")

</div>

Hi, my first steps with shield 2.3 and some troubles with this plugin. I create an user superadmin3 and all seems OK # ./esusers useradd superadmin3 -r admin --path.conf=/etc/elasticsearch/ Enter new password: Retyp…

---

## [Elastic Cloud can't connect to Kibana](https://discuss.elastic.co/t/elastic-cloud-cant-connect-to-kibana/278818)

<div class="topic-metadata">

**Author:** [@mi\_uber\_alles](https://discuss.elastic.co/u/mi_uber_alles)\
**Replies:** 4\
**Last updated:** [July 19, 2021, 2:42pm UTC](https://discuss.elastic.co/t/elastic-cloud-cant-connect-to-kibana/278818 "2021-07-19T14:42:54Z")

</div>

Hi All, I just started to use a trial version of the Elastic Cloud and created my first deployment. I also created a test VM to provide sample data through Metricbeat. Added the cloud.id and cloud.auth data to the confi…

---

## [Filebeat Error: connect: connection refused](https://discuss.elastic.co/t/filebeat-error-connect-connection-refused/260866)

<div class="topic-metadata">

**Author:** [@haithem899](https://discuss.elastic.co/u/haithem899)\
**Replies:** 4\
**Last updated:** [January 28, 2021, 10:48pm UTC](https://discuss.elastic.co/t/filebeat-error-connect-connection-refused/260866 "2021-01-28T22:48:21Z")

</div>

Hello, i've setup ELK stack with three nodes ( kibana-elasticsearch-logstash) separating however i can't recieve logs and with checking filebeat log i see this error: "connect: connection refused". Even i increased clie…

---

## [Security\_exception: action \[indices:admin/rollover\] is unauthorized for user](https://discuss.elastic.co/t/security-exception-action-indices-admin-rollover-is-unauthorized-for-user/245593)

<div class="topic-metadata">

**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Replies:** 4\
**Last updated:** [September 4, 2020, 2:58am UTC](https://discuss.elastic.co/t/security-exception-action-indices-admin-rollover-is-unauthorized-for-user/245593 "2020-09-04T02:58:16Z")

</div>

Elasticsearch: 7.9.0 Kibana: 7.9.0 I am hitting the issue described in #47500. I believe the same issue has been raised a few times. However, adding manage privilege on the index level for the role does not seem to wo…

---

## [Filter IP addresses by subnet](https://discuss.elastic.co/t/filter-ip-addresses-by-subnet/191663)

<div class="topic-metadata">

**Author:** [@Nadir006](https://discuss.elastic.co/u/Nadir006)\
**Replies:** 4\
**Last updated:** [July 23, 2019, 12:29pm UTC](https://discuss.elastic.co/t/filter-ip-addresses-by-subnet/191663 "2019-07-23T12:29:54Z")

</div>

Hi all, I need to enrich my firewall logs with the subnet address, subnet name and subnet location. I have a csv file with all these informations. Here is a similar case : https://discuss.elastic.co/t/cidr-subnet-relati…

---

## [Changing the timezone of logs written in logging.dest in kibana.yml](https://discuss.elastic.co/t/changing-the-timezone-of-logs-written-in-logging-dest-in-kibana-yml/117564)

<div class="topic-metadata">

**Author:** [@Shwetha\_Mittur](https://discuss.elastic.co/u/Shwetha_Mittur)\
**Replies:** 4\
**Last updated:** [February 1, 2018, 9:33am UTC](https://discuss.elastic.co/t/changing-the-timezone-of-logs-written-in-logging-dest-in-kibana-yml/117564 "2018-02-01T09:33:11Z")

</div>

Hi, This is regarding a query about Kibana logs. The logs mentioned in "logging.dest" field in kibana.yml file are getting written but the time stamps are not matching with the server's timezone. Is there any way to upd…

---

## [Zoom in time range doesnt work](https://discuss.elastic.co/t/zoom-in-time-range-doesnt-work/32695)

<div class="topic-metadata">

**Author:** [@vjyanand](https://discuss.elastic.co/u/vjyanand)\
**Replies:** 4\
**Last updated:** [October 24, 2015, 2:57pm UTC](https://discuss.elastic.co/t/zoom-in-time-range-doesnt-work/32695 "2015-10-24T14:57:40Z")

</div>

Any idea why clicking the graph and selecting a time range doesn't zoom in at this url http://goo.gl/te2qb6 ?

---

## [How to add new item inside Array in elastic search?](https://discuss.elastic.co/t/how-to-add-new-item-inside-array-in-elastic-search/227057)

<div class="topic-metadata">

**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\
**Replies:** 6\
**Last updated:** [April 9, 2020, 9:54am UTC](https://discuss.elastic.co/t/how-to-add-new-item-inside-array-in-elastic-search/227057 "2020-04-09T09:54:52Z")

</div>

Hi Guys, I am new in Elastic Search, I want to add new object inside JArray, How I can achive this? "OrgDetailsLst" : \[ { "EntityId" : 3, "EntityDetailCode" : 0, "EntityName" : "PlantCode", "EntityCode" : "DRES", …

---

## [Update performance - very low indexing rate](https://discuss.elastic.co/t/update-performance-very-low-indexing-rate/103183)

<div class="topic-metadata">

**Author:** [@matw](https://discuss.elastic.co/u/matw)\
**Replies:** 6\
**Last updated:** [October 9, 2017, 2:59pm UTC](https://discuss.elastic.co/t/update-performance-very-low-indexing-rate/103183 "2017-10-09T14:59:15Z")

</div>

We're using a redis -\> logstash -\> elasticsearch pipeline Our test system is a single instance installation with 8CPU, 12 GB RAM, running on VMware Currently we can’t separate the components, so no clustering is possib…

---

## [Prevent logs from appearing in Kibana](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937)

<div class="topic-metadata">

**Author:** [@scosta](https://discuss.elastic.co/u/scosta)\
**Replies:** 6\
**Last updated:** [March 28, 2017, 5:27am UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937 "2017-03-28T05:27:18Z")

</div>

Good Morning. I am a novice in ELK stack. I have problems in my logstash . I get many logs, but I need to keep a log with a specific message to appear on Kibana . How can I keep a log appear in Kibana for your message…

---

## [Sending e-mail - condition expression](https://discuss.elastic.co/t/sending-e-mail-condition-expression/46840)

<div class="topic-metadata">

**Author:** [@rafaellamuniz](https://discuss.elastic.co/u/rafaellamuniz)\
**Replies:** 6\
**Last updated:** [April 12, 2016, 12:33pm UTC](https://discuss.elastic.co/t/sending-e-mail-condition-expression/46840 "2016-04-12T12:33:55Z")

</div>

Hello, I'm using the Topbeat to monitor the server resources. I need to configure the Logstash output to send e-mail when some file system is over than 70%. But I'm not sure about the sintax on the condition expressi…

---

## [Plugin registration error with apm-java-agent 1.18.1 and tomcat with multiple apps](https://discuss.elastic.co/t/plugin-registration-error-with-apm-java-agent-1-18-1-and-tomcat-with-multiple-apps/252687)

<div class="topic-metadata">

**Author:** [@lancer\_enkor](https://discuss.elastic.co/u/lancer_enkor)\
**Replies:** 3\
**Last updated:** [October 29, 2020, 12:40pm UTC](https://discuss.elastic.co/t/plugin-registration-error-with-apm-java-agent-1-18-1-and-tomcat-with-multiple-apps/252687 "2020-10-29T12:40:31Z")

</div>

APM Agent language and version: apm-java-agent 1.18.1 I have a problem with java apm agent and tomcat with multiple apps since version 1.18.0. New migrated plugins to indy aren't loaded correctly. It seems that the issu…

---

## [Curator - Python related error](https://discuss.elastic.co/t/curator-python-related-error/206446)

<div class="topic-metadata">

**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\
**Replies:** 3\
**Last updated:** [November 5, 2019, 10:05am UTC](https://discuss.elastic.co/t/curator-python-related-error/206446 "2019-11-05T10:05:01Z")

</div>

Dear all, just upgraded from yum command line the elasticsearch-curator pkg from 5.6.0 to 5.8.1 on same server CentOS Linux release 7.6.1810 I am not able to run anymore /opt/elasticsearch-curator/curator\_cli --versio…

---

## [How to set log.file.path in dev tools](https://discuss.elastic.co/t/how-to-set-log-file-path-in-dev-tools/198094)

<div class="topic-metadata">

**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\
**Replies:** 3\
**Last updated:** [September 5, 2019, 8:19pm UTC](https://discuss.elastic.co/t/how-to-set-log-file-path-in-dev-tools/198094 "2019-09-05T20:19:36Z")

</div>

GET filebeat-\*/\_search { "size":1000, "log.file.path":"\*logfile.log", "query":{ "bool":{ "must":{ "match":{ "message":"'\[COMMAND:LOG\]' and '\[COMMAND:1\]'" } …

---

## [How to return slightly randomized results?](https://discuss.elastic.co/t/how-to-return-slightly-randomized-results/188482)

<div class="topic-metadata">

**Author:** [@i333](https://discuss.elastic.co/u/i333)\
**Replies:** 3\
**Last updated:** [July 12, 2019, 10:15am UTC](https://discuss.elastic.co/t/how-to-return-slightly-randomized-results/188482 "2019-07-12T10:15:46Z")

</div>

When entering a search term and getting back the results sorted by score, is there a way to get it to return slightly randomized results? I don't mean totally random. I mean maybe a small random multiplier could be adde…

---

## [How to install ingest attachment plugin in windows](https://discuss.elastic.co/t/how-to-install-ingest-attachment-plugin-in-windows/78209)

<div class="topic-metadata">

**Author:** [@mangesh](https://discuss.elastic.co/u/mangesh)\
**Replies:** 3\
**Last updated:** [March 16, 2017, 6:42am UTC](https://discuss.elastic.co/t/how-to-install-ingest-attachment-plugin-in-windows/78209 "2017-03-16T06:42:56Z")

</div>

How to install ingest attachment plugin in windows

---

## [Kibana Alert - No results There were no results because no indices were found that match your selected time span](https://discuss.elastic.co/t/kibana-alert-no-results-there-were-no-results-because-no-indices-were-found-that-match-your-selected-time-span/16752)

<div class="topic-metadata">

**Author:** [@mik12121991](https://discuss.elastic.co/u/mik12121991)\
**Replies:** 3\
**Last updated:** [June 21, 2016, 5:54am UTC](https://discuss.elastic.co/t/kibana-alert-no-results-there-were-no-results-because-no-indices-were-found-that-match-your-selected-time-span/16752 "2016-06-21T05:54:27Z")

</div>

I am using logstash with elasticsearch and kibana . My elestic search : Im beginer user elasticsearch , please help me ... Thanks so much alert :

---

## [Monitoring dead letter queue (DLQ)](https://discuss.elastic.co/t/monitoring-dead-letter-queue-dlq/166715)

<div class="topic-metadata">

**Author:** [@beckjim](https://discuss.elastic.co/u/beckjim)\
**Replies:** 2\
**Last updated:** [February 4, 2019, 8:17am UTC](https://discuss.elastic.co/t/monitoring-dead-letter-queue-dlq/166715 "2019-02-04T08:17:59Z")

</div>

Hello all, I'm wondering is there a proper way to monitor the contents of the dead letter queue? Maybe I missed something ... None of the monitoring APIs seem to yield are data about dlq's. Items of interesst would b…

---

## [\[ERROR\]\[o.e.x.m.c.n.NodeStatsCollector\] \[data02\] collector \[node\_stats\] timed out when collecting data](https://discuss.elastic.co/t/error-o-e-x-m-c-n-nodestatscollector-data02-collector-node-stats-timed-out-when-collecting-data/139404)

<div class="topic-metadata">

**Author:** [@bt\_scotth](https://discuss.elastic.co/u/bt_scotth)\
**Replies:** 2\
**Last updated:** [July 10, 2018, 5:14pm UTC](https://discuss.elastic.co/t/error-o-e-x-m-c-n-nodestatscollector-data02-collector-node-stats-timed-out-when-collecting-data/139404 "2018-07-10T17:14:00Z")

</div>

I am looking to get rid of this error. \[2018-07-10T16:36:42,048\]\[ERROR\]\[o.e.x.m.c.n.NodeStatsCollector\] \[data02\] collector \[node\_stats\] timed out when collecting data \[2018-07-10T16:37:02,049\]\[ERROR\]\[o.e.x.m.c.n.NodeSta…

---

## [Convert String to IP](https://discuss.elastic.co/t/convert-string-to-ip/51527)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 1\
**Last updated:** [June 2, 2016, 12:54am UTC](https://discuss.elastic.co/t/convert-string-to-ip/51527 "2016-06-02T00:54:06Z")

</div>

I have started up packetbeat to send data to logstash and here is part of the logs "answers" =\> \[ \[0\] { "class" =\> "IN", "data" =\> "clients.l.google.com", "name" =\> "c…

---

## [Mapping ignoring field analyzer setting](https://discuss.elastic.co/t/mapping-ignoring-field-analyzer-setting/9864)

<div class="topic-metadata">

**Author:** [@racedo](https://discuss.elastic.co/u/racedo)\
**Replies:** 7\
**Last updated:** [November 29, 2012, 12:17pm UTC](https://discuss.elastic.co/t/mapping-ignoring-field-analyzer-setting/9864 "2012-11-29T12:17:41Z")

</div>

Hi all, I have the following mapping where text has the spanish analyzer: $ curl -XGET 'localhost:9200/haystack/\_mapping?pretty=true' { "haystack" : { "modelresult" : { "properties" : { "co…

---

## ["Doubling down on open" question](https://discuss.elastic.co/t/doubling-down-on-open-question/121916)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 5\
**Last updated:** [March 1, 2018, 3:54am UTC](https://discuss.elastic.co/t/doubling-down-on-open-question/121916 "2018-03-01T03:54:20Z")

</div>

I am just hoping for some clarification: will X-Pack security be free now? Or just open source and we still need to pay for a license?

---

## [Shingles vs phrases for index size](https://discuss.elastic.co/t/shingles-vs-phrases-for-index-size/152137)

<div class="topic-metadata">

**Author:** [@doaks](https://discuss.elastic.co/u/doaks)\
**Replies:** 5\
**Last updated:** [October 15, 2018, 8:54pm UTC](https://discuss.elastic.co/t/shingles-vs-phrases-for-index-size/152137 "2018-10-15T20:54:08Z")

</div>

I am looking at using either shingles or phrases to allow phrase queries, however it seems to me that shingles must have a massive impact on index size. This is acknowledged in the documentation (https://www.elastic.co/b…

---

## [Connection refused on new RHEL7 installation](https://discuss.elastic.co/t/connection-refused-on-new-rhel7-installation/120535)

<div class="topic-metadata">

**Author:** [@pclaudiowsi](https://discuss.elastic.co/u/pclaudiowsi)\
**Replies:** 5\
**Last updated:** [February 23, 2018, 1:09am UTC](https://discuss.elastic.co/t/connection-refused-on-new-rhel7-installation/120535 "2018-02-23T01:09:31Z")

</div>

Hi, I'm new to ELK and just installed elasticsearch on RHEL7 with default configs. I can run curl successfully to http://127.0.0.1:9200 or http://localhost:9200, but not with http://host1:9200: $ curl http://host1 --ve…

---

## [Logstash + X-Pack with disabled security](https://discuss.elastic.co/t/logstash-x-pack-with-disabled-security/91690)

<div class="topic-metadata">

**Author:** [@mario\_wood](https://discuss.elastic.co/u/mario_wood)\
**Replies:** 4\
**Last updated:** [July 4, 2017, 9:36am UTC](https://discuss.elastic.co/t/logstash-x-pack-with-disabled-security/91690 "2017-07-04T09:36:45Z")

</div>

Hi, We're setting up an ELK cluster with X-Pack installed, initially with only monitoring enabled for X-Pack. We've got everything working correctly for elasticsearch and kibana, but logstash is failing to send metrics…

---

## [Write and then Read consistency](https://discuss.elastic.co/t/write-and-then-read-consistency/300785)

<div class="topic-metadata">

**Author:** [@TheGreatBaldOne](https://discuss.elastic.co/u/TheGreatBaldOne)\
**Replies:** 2\
**Last updated:** [March 29, 2022, 1:11pm UTC](https://discuss.elastic.co/t/write-and-then-read-consistency/300785 "2022-03-29T13:11:59Z")

</div>

I am trying to achieve write and then read consistency. In other words, once i update or insert a document, I want to immediately read it correctly. I am getting a a list of a user's posts from ES insert a new pos…

---

## [Java api client to implement a complex query](https://discuss.elastic.co/t/java-api-client-to-implement-a-complex-query/295611)

<div class="topic-metadata">

**Author:** [@colddew](https://discuss.elastic.co/u/colddew)\
**Replies:** 2\
**Last updated:** [February 11, 2022, 9:20pm UTC](https://discuss.elastic.co/t/java-api-client-to-implement-a-complex-query/295611 "2022-02-11T21:20:19Z")

</div>

I spent much time to try the new Elasticsearch Java client 7.16.3, but it is hard for me to use it, such as must , terms , multi\_match , functions , filter and so on. Can someone please help me in building the query as b…

---

## [Index Recovery failed](https://discuss.elastic.co/t/index-recovery-failed/284492)

<div class="topic-metadata">

**Author:** [@anon54150333](https://discuss.elastic.co/u/anon54150333)\
**Replies:** 2\
**Last updated:** [September 20, 2021, 11:38am UTC](https://discuss.elastic.co/t/index-recovery-failed/284492 "2021-09-20T11:38:13Z")

</div>

Hi there, i have a big problem with my elasticsearch installation (7.2.0). I'm having one node and since some weeks (i noticed it today) i have the problem that the index recovery failed. Error Message of the log: fail…

---

## [Logstash JDBC class cannot found](https://discuss.elastic.co/t/logstash-jdbc-class-cannot-found/209807)

<div class="topic-metadata">

**Author:** [@Gunawan\_Kevin](https://discuss.elastic.co/u/Gunawan_Kevin)\
**Replies:** 2\
**Last updated:** [December 10, 2019, 8:39am UTC](https://discuss.elastic.co/t/logstash-jdbc-class-cannot-found/209807 "2019-12-10T08:39:05Z")

</div>

Hi All, Can you help me to solve this problem I'm using elasticsearch-7.4.2 kibana-7.4.2 logstash-7.4.2 windows 10 Error: com.mysql.cj.jdbc.Driver not loaded. Are you sure you've included the correct jdbc driver i…

---

## [Logout/Reset cookie for shield](https://discuss.elastic.co/t/logout-reset-cookie-for-shield/61879)

<div class="topic-metadata">

**Author:** [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\
**Replies:** 2\
**Last updated:** [October 4, 2016, 5:47am UTC](https://discuss.elastic.co/t/logout-reset-cookie-for-shield/61879 "2016-10-04T05:47:05Z")

</div>

I've installed shield 2.4.0 on elasticsearch 2.4.0 but not on kibana. Now when I go to http://localhost:9200/\_count a window prompt out for username and password. I logged in as a normal user with read only access. Lat…

---

## [How can i get from Execbeat if a script successfully executed](https://discuss.elastic.co/t/how-can-i-get-from-execbeat-if-a-script-successfully-executed/152504)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 1\
**Last updated:** [October 16, 2018, 9:13pm UTC](https://discuss.elastic.co/t/how-can-i-get-from-execbeat-if-a-script-successfully-executed/152504 "2018-10-16T21:13:19Z")

</div>

Hello all, I am using execbeat (ttps://github.com/christiangalsterer/execbeat) with ELK 6.3. I would like to know if certain my scripts are successfully executed AND if not i would like to report the issue. actually m…

---

## [Postfix grok patterns not working](https://discuss.elastic.co/t/postfix-grok-patterns-not-working/53741)

<div class="topic-metadata">

**Author:** [@raamee](https://discuss.elastic.co/u/raamee)\
**Replies:** 3\
**Last updated:** [June 24, 2016, 12:49pm UTC](https://discuss.elastic.co/t/postfix-grok-patterns-not-working/53741 "2016-06-24T12:49:09Z")

</div>

Hello, I'm trying to filter postfix logs using the grok patterns posted here: https://github.com/whyscream/postfix-grok-patterns The thing is, its not filtering the postfix logs properly. It is not segregating the me…

---

## [Join between two different sources using Kibana 4](https://discuss.elastic.co/t/join-between-two-different-sources-using-kibana-4/21591)

<div class="topic-metadata">

**Author:** [@Gregory\_Touretsky](https://discuss.elastic.co/u/Gregory_Touretsky)\
**Replies:** 3\
**Last updated:** [January 13, 2015, 8:02pm UTC](https://discuss.elastic.co/t/join-between-two-different-sources-using-kibana-4/21591 "2015-01-13T20:02:31Z")

</div>

Hi, what would be the right way to join between two data sources using Kibana 4 interface? Assume 2 data sources: 1. source=jobs, fields = {jobid, user, host, exitstatus, starttime,finishtime} Sample reco…

---

## [Topbeat doesn't send metrics to Logstash in client-server architecture](https://discuss.elastic.co/t/topbeat-doesnt-send-metrics-to-logstash-in-client-server-architecture/44881)

<div class="topic-metadata">

**Author:** [@jstar](https://discuss.elastic.co/u/jstar)\
**Replies:** 6\
**Last updated:** [March 19, 2016, 5:30pm UTC](https://discuss.elastic.co/t/topbeat-doesnt-send-metrics-to-logstash-in-client-server-architecture/44881 "2016-03-19T17:30:45Z")

</div>

Hi all, I just set up topbeat following the documentation. But I can't have metrics of my cluster in logstash. I use a client-server architecture (i.e a client with Topbeat configured and installed and a server with lo…

---

## [Filebeat don't harvest log](https://discuss.elastic.co/t/filebeat-dont-harvest-log/258234)

<div class="topic-metadata">

**Author:** [@W1nter-3Z](https://discuss.elastic.co/u/W1nter-3Z)\
**Replies:** 7\
**Last updated:** [December 23, 2020, 2:08am UTC](https://discuss.elastic.co/t/filebeat-dont-harvest-log/258234 "2020-12-23T02:08:42Z")

</div>

Filebeat can't harvest log after restart I deploy filebeat with docker , but it can't harvest log after restart while log is still appended to the logFile. the log doesn't show the log path I configued in filebeat.yml. …

---

## [Filebeat harvester picks up files in random order when scanning](https://discuss.elastic.co/t/filebeat-harvester-picks-up-files-in-random-order-when-scanning/86542)

<div class="topic-metadata">

**Author:** [@menezeswayne](https://discuss.elastic.co/u/menezeswayne)\
**Replies:** 7\
**Last updated:** [May 26, 2017, 7:02am UTC](https://discuss.elastic.co/t/filebeat-harvester-picks-up-files-in-random-order-when-scanning/86542 "2017-05-26T07:02:33Z")

</div>

I used the harvester\_limit: 1 option along with close\_inactive option to close a file after 1 min. This works for my use case. However when there are multiple older log files to be harvested, filebeat picks up the files …

---

## [Elastic API query \_grokparsefailure tags](https://discuss.elastic.co/t/elastic-api-query-grokparsefailure-tags/243584)

<div class="topic-metadata">

**Author:** [@alces](https://discuss.elastic.co/u/alces)\
**Replies:** 8\
**Last updated:** [August 7, 2020, 9:21am UTC](https://discuss.elastic.co/t/elastic-api-query-grokparsefailure-tags/243584 "2020-08-07T09:21:12Z")

</div>

Hello, I'm currently trying to get all logs of an index which have a "\_grokparsefailure" tag assigned to it. Next step would be deleting these logs, but I'm not sure if this is going to work anyways: curl -X GET "http:…

---

## [Elasticsearch on CoreOs](https://discuss.elastic.co/t/elasticsearch-on-coreos/34683)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 8\
**Last updated:** [March 23, 2016, 6:42pm UTC](https://discuss.elastic.co/t/elasticsearch-on-coreos/34683 "2016-03-23T18:42:47Z")

</div>

Curious anyone running ES on CoreOs? I have found around some unit files... But how well does CoreOs recovery/HA model work with ES recovery/HA? If you lose a node ES will go into recovery mode, replica shards will be ma…

---

## [Multi-lingual ES](https://discuss.elastic.co/t/multi-lingual-es/13053)

<div class="topic-metadata">

**Author:** [@dantuff](https://discuss.elastic.co/u/dantuff)\
**Replies:** 8\
**Last updated:** [August 5, 2013, 4:32pm UTC](https://discuss.elastic.co/t/multi-lingual-es/13053 "2013-08-05T16:32:01Z")

</div>

A requirement has come in to internationlize our ES index, what will I need to do make sure the ES index supports non-english languages. Here are some things I thought of, are there any more? Text analysis to make…

---

## [How to recover unassigned shards and replica for a index](https://discuss.elastic.co/t/how-to-recover-unassigned-shards-and-replica-for-a-index/242917)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 5\
**Last updated:** [July 29, 2020, 5:46pm UTC](https://discuss.elastic.co/t/how-to-recover-unassigned-shards-and-replica-for-a-index/242917 "2020-07-29T17:46:54Z")

</div>

HI team, I want to know how to recover the red state into Green and when it try to find the reason and im getting below data, xx-logstash-2020.07 0 p INITIALIZING INDEX\_REOPENED xx-logstash-2020.07 0 …

---

## [NEST (C#) Index list of custom, location-like objects - how to map it to index properly?](https://discuss.elastic.co/t/nest-c-index-list-of-custom-location-like-objects-how-to-map-it-to-index-properly/144598)

<div class="topic-metadata">

**Author:** [@ivankarpey](https://discuss.elastic.co/u/ivankarpey)\
**Replies:** 5\
**Last updated:** [August 17, 2018, 8:35am UTC](https://discuss.elastic.co/t/nest-c-index-list-of-custom-location-like-objects-how-to-map-it-to-index-properly/144598 "2018-08-17T08:35:47Z")

</div>

I have a simple Poco class Product { ... public List Adrresses {get; set;} } class GeoItem { public string Address {get; set;} public double Latititude {get; set;} public double Longitude {get; set;} .... …

---

## [Date Parse error Invalid format:](https://discuss.elastic.co/t/date-parse-error-invalid-format/137506)

<div class="topic-metadata">

**Author:** [@ashwinvemula](https://discuss.elastic.co/u/ashwinvemula)\
**Replies:** 5\
**Last updated:** [June 27, 2018, 4:28pm UTC](https://discuss.elastic.co/t/date-parse-error-invalid-format/137506 "2018-06-27T16:28:08Z")

</div>

curl -XPUT "http://localhost:9200/citrix" -H 'Content-Type: application/json' -d' { "mappings" : { "session\_details" : { "properties" : { "ASSOCIATED\_USER" : {"type": "text" }, "MACHINE\_NAME" : {"type": "text" }, …

---

## [Nightly build shows no CPU usage](https://discuss.elastic.co/t/nightly-build-shows-no-cpu-usage/48357)

<div class="topic-metadata">

**Author:** [@renevdm](https://discuss.elastic.co/u/renevdm)\
**Replies:** 4\
**Last updated:** [April 27, 2016, 8:22am UTC](https://discuss.elastic.co/t/nightly-build-shows-no-cpu-usage/48357 "2016-04-27T08:22:13Z")

</div>

I used a nightly build of topbeat from here (ARM architecture) on my Raspberry Pi. It nicely shows the memory usage, however, no CPU usage is being shown. I already played around with toggleing cpu\_per\_core between true …

---

## [Get the entire sub-tree / tree structure for a document based on a field](https://discuss.elastic.co/t/get-the-entire-sub-tree-tree-structure-for-a-document-based-on-a-field/291614)

<div class="topic-metadata">

**Author:** [@olivebranch](https://discuss.elastic.co/u/olivebranch)\
**Replies:** 2\
**Last updated:** [December 13, 2021, 10:30am UTC](https://discuss.elastic.co/t/get-the-entire-sub-tree-tree-structure-for-a-document-based-on-a-field/291614 "2021-12-13T10:30:06Z")

</div>

I have a hierarchical structure (much like categories contained within categories) in my document like following: 1(parent for root category is: -1) / \\ 2 3 …

---

## [Search 1M data in elasticsearch using pagination](https://discuss.elastic.co/t/search-1m-data-in-elasticsearch-using-pagination/91005)

<div class="topic-metadata">

**Author:** [@Tripti](https://discuss.elastic.co/u/Tripti)\
**Replies:** 2\
**Last updated:** [July 2, 2017, 4:16pm UTC](https://discuss.elastic.co/t/search-1m-data-in-elasticsearch-using-pagination/91005 "2017-07-02T16:16:11Z")

</div>

I have loaded around 1TB of data on elasticsearch DB. For searching I tried following ways - 1. "from+size" - It has default value of index.max\_result\_window as 10000, but I wanted to search from 100000, hence I set in…

---

## [Filebeat failed to start: Exiting: error loading config file: yaml: line 31: did not find expected key](https://discuss.elastic.co/t/filebeat-failed-to-start-exiting-error-loading-config-file-yaml-line-31-did-not-find-expected-key/214632)

<div class="topic-metadata">

**Author:** [@lucc](https://discuss.elastic.co/u/lucc)\
**Replies:** 0\
**Last updated:** [January 10, 2020, 4:21pm UTC](https://discuss.elastic.co/t/filebeat-failed-to-start-exiting-error-loading-config-file-yaml-line-31-did-not-find-expected-key/214632 "2020-01-10T16:21:06Z")

</div>

hi, I have an issue to start filebeat...Error message is: failed to start: Exiting: error loading config file: yaml: line 31: did not find expected key filebeat version 7.5.1 (amd64), libbeat 7.5.1 yml file below Tha…

---

## [Unordered results from Elastic search](https://discuss.elastic.co/t/unordered-results-from-elastic-search/122233)

<div class="topic-metadata">

**Author:** [@iamsameer](https://discuss.elastic.co/u/iamsameer)\
**Replies:** 3\
**Last updated:** [March 9, 2018, 3:54am UTC](https://discuss.elastic.co/t/unordered-results-from-elastic-search/122233 "2018-03-09T03:54:54Z")

</div>

Hi, Good Day! I am currently using Elastic search 5.2 upgraded from 0.9 followed by 2.3. Right now working on project which displays the opportunities based on Talent segment, location and career level. I am expecting …

---

## [Or like in and](https://discuss.elastic.co/t/or-like-in-and/104026)

<div class="topic-metadata">

**Author:** [@rishi\_jag](https://discuss.elastic.co/u/rishi_jag)\
**Replies:** 3\
**Last updated:** [October 16, 2017, 6:19am UTC](https://discuss.elastic.co/t/or-like-in-and/104026 "2017-10-16T06:19:35Z")

</div>

Need to convert this query in ElasticSearch WHERE (colD like 'abc%' OR colC like '%abc%') AND (colA IN ('a','b') OR colB IN ('a','b'))

---

## [Getting \_id field in elasticsearch to map to a field in HIVE](https://discuss.elastic.co/t/getting--id-field-in-elasticsearch-to-map-to-a-field-in-hive/18773)

<div class="topic-metadata">

**Author:** [@hiveesuser](https://discuss.elastic.co/u/hiveesuser)\
**Replies:** 3\
**Last updated:** [June 7, 2017, 9:12am UTC](https://discuss.elastic.co/t/getting--id-field-in-elasticsearch-to-map-to-a-field-in-hive/18773 "2017-06-07T09:12:06Z")

</div>

Hi, I am working on a project to integrate hive and elasticsearch and for one of our use case we are loading data from ELASTISCSEARCH --\> HIVE. During this process I want to store the \_id field which is …

---

## [What is the best setup for Beats and ELK stack](https://discuss.elastic.co/t/what-is-the-best-setup-for-beats-and-elk-stack/35827)

<div class="topic-metadata">

**Author:** [@congpine](https://discuss.elastic.co/u/congpine)\
**Replies:** 3\
**Last updated:** [November 30, 2015, 11:35am UTC](https://discuss.elastic.co/t/what-is-the-best-setup-for-beats-and-elk-stack/35827 "2015-11-30T11:35:54Z")

</div>

Hi, This is the setup that I'm currently trying to achieve few months ago with Logstash Forwarder: LF --\> Logstash --\> Redis -\> Logstash Indexer --\> Elasticsearch --\> Kibana However, as Logstash Forwarder will be depreci…

[Previous page](https://discuss.elastic.co/top.md?page=834&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=836&per_page=50&period=all)
