# Top **URL:** https://discuss.elastic.co/top.md?page=839&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 840 --- ## [Filter outliers elastic 5](https://discuss.elastic.co/t/filter-outliers-elastic-5/71947)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 2\ **Last updated:** [January 18, 2017, 9:00pm UTC](https://discuss.elastic.co/t/filter-outliers-elastic-5/71947 "2017-01-18T21:00:21Z")
whats is the best way to do the following query in elastic 5.x: find the average of a field, after removing the top 5% highest values (\> 95th percentile) ? I'm looking a single query solution thanks! --- ## [Update Existing document through logstash](https://discuss.elastic.co/t/update-existing-document-through-logstash/329077)
**Author:** [@rubhamra](https://discuss.elastic.co/u/rubhamra)\ **Replies:** 4\ **Last updated:** [March 31, 2023, 8:40pm UTC](https://discuss.elastic.co/t/update-existing-document-through-logstash/329077 "2023-03-31T20:40:21Z")
logstash pipeline is not updating existing document for the same id, I have couples of fields which got updated frequestly for example Last Modified Date. I have below logstash config. output { elasticsearch { … --- ## [Compile Error | Watcher Condition](https://discuss.elastic.co/t/compile-error-watcher-condition/195897)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 4\ **Last updated:** [August 20, 2019, 1:15pm UTC](https://discuss.elastic.co/t/compile-error-watcher-condition/195897 "2019-08-20T13:15:48Z")
Hi, I am trying to create a loop where all the arrays are searched to find any have more than one value for "doc\_count". Once the loop finishes, and all the fields are identified, I wish to put these in a separate array… --- ## [Can I turn off kibana search highlight?](https://discuss.elastic.co/t/can-i-turn-off-kibana-search-highlight/23018)
**Author:** [@Lincoln\_Xiong](https://discuss.elastic.co/u/Lincoln_Xiong)\ **Replies:** 1\ **Last updated:** [February 15, 2016, 1:54pm UTC](https://discuss.elastic.co/t/can-i-turn-off-kibana-search-highlight/23018 "2016-02-15T13:54:59Z")
The search highlight is somehow very useful. But is there a setting or a configuration that allow me to turn the search highlight off? -- You received this message because you are subscribed to the Google Groups "… --- ## [Replica Selection in Elasticsearch](https://discuss.elastic.co/t/replica-selection-in-elasticsearch/28783)
**Author:** [@mbbce](https://discuss.elastic.co/u/mbbce)\ **Replies:** 7\ **Last updated:** [September 11, 2015, 10:51am UTC](https://discuss.elastic.co/t/replica-selection-in-elasticsearch/28783 "2015-09-11T10:51:59Z")
What is the replica selection mechanism used in elastic search? I tried to look it up and search in the documentation but couldn't find it. Thanks \[smile\] --- ## [Elasticsearch JAVA version and JDK version?](https://discuss.elastic.co/t/elasticsearch-java-version-and-jdk-version/20879)
**Author:** [@Thong\_Bui](https://discuss.elastic.co/u/Thong_Bui)\ **Replies:** 1\ **Last updated:** [November 21, 2014, 12:26am UTC](https://discuss.elastic.co/t/elasticsearch-java-version-and-jdk-version/20879 "2014-11-21T00:26:06Z")
Hi all, I am new to elasticsearch java API and have some questions? 1) What is the minimum JDK to be used with elasticsearch java API version 1.4.0? 2) Is there a version of elasticsearch java API that works with … --- ## [VM Warnings UseConcMarkSweepGC](https://discuss.elastic.co/t/vm-warnings-useconcmarksweepgc/235284)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 7:06am UTC](https://discuss.elastic.co/t/vm-warnings-useconcmarksweepgc/235284 "2020-06-02T07:06:40Z")
Elasticsearch 7.7 on Windows Server JAVA\_HOME=path\\to\\elasticsearch\\jdk openjdk version "14" 2020-03-17 OpenJDK Runtime Environment AdoptOpenJDK (build 14+36) OpenJDK 64-Bit Server VM AdoptOpenJDK (build 14+36, mixed m… --- ## [Query for all indices in a cluster](https://discuss.elastic.co/t/query-for-all-indices-in-a-cluster/137481)
**Author:** [@TwoDragon](https://discuss.elastic.co/u/TwoDragon)\ **Replies:** 3\ **Last updated:** [June 26, 2018, 9:08pm UTC](https://discuss.elastic.co/t/query-for-all-indices-in-a-cluster/137481 "2018-06-26T21:08:01Z")
Hi, In Elasticsearch 6.x, there is a call to es.indices.get\_alias to get all the indices in a given alias. Is there a method to get all indices that are not associated with any alias. My purpose is to clean up those in… --- ## [After upgrade from 19.6 to 90.5 we get this: java.lang.NoSuchMethodError: org.elasticsearch.client.Client.prepareBulk()](https://discuss.elastic.co/t/after-upgrade-from-19-6-to-90-5-we-get-this-java-lang-nosuchmethoderror-org-elasticsearch-client-client-preparebulk/14124)
**Author:** [@Dennis](https://discuss.elastic.co/u/Dennis)\ **Replies:** 3\ **Last updated:** [February 28, 2015, 1:20am UTC](https://discuss.elastic.co/t/after-upgrade-from-19-6-to-90-5-we-get-this-java-lang-nosuchmethoderror-org-elasticsearch-client-client-preparebulk/14124 "2015-02-28T01:20:31Z")
Is prepareBulk() deprecated? Here is the exception report during integration testing: Handler processing failed; nested exception is java.lang.NoSuchMethodError: org.elasticsearch.client.Client.prepareBulk()Lorg… --- ## [全文検索でヒットしないケースについて](https://discuss.elastic.co/t/topic/307615)
**Author:** [@zaru](https://discuss.elastic.co/u/zaru)\ **Replies:** 2\ **Last updated:** [June 20, 2022, 8:00am UTC](https://discuss.elastic.co/t/topic/307615 "2022-06-20T08:00:14Z")
Elasticsearch v7 を利用しています。 kuromoji を使った日本語の全文検索を使っているのですが、特定のキーワードだとヒットしない状況です。なにか改善方法があるかアドバイス頂けると嬉しいです。 登録テキスト : 新松戸 (実際はこのワードを含む長文) データ型 : text kuromoji 設定 : デフォルトのまま 形態素解析 : 新松戸 (分割されない) 検索キーワード 新松戸 … --- ## [How to authorize heartbeat http urls](https://discuss.elastic.co/t/how-to-authorize-heartbeat-http-urls/192237)
**Author:** [@Priya2](https://discuss.elastic.co/u/Priya2)\ **Replies:** 2\ **Last updated:** [July 26, 2019, 4:55am UTC](https://discuss.elastic.co/t/how-to-authorize-heartbeat-http-urls/192237 "2019-07-26T04:55:05Z")
Hi, I have installed and configured http url on my heartbeat.yml (Heartbeat version6.3.2). My urls are working fine. Getting the login page. But heartbeat is trying to authorize those urls. I am not getting why? Below i… --- ## [Multiple format of date to single target](https://discuss.elastic.co/t/multiple-format-of-date-to-single-target/126709)
**Author:** [@Sridhar](https://discuss.elastic.co/u/Sridhar)\ **Replies:** 2\ **Last updated:** [April 4, 2018, 2:36pm UTC](https://discuss.elastic.co/t/multiple-format-of-date-to-single-target/126709 "2018-04-04T14:36:32Z")
Hi, I have the input with 2 date format in same column of csv file. 3-Mar-18 and Mar-18 below is the config file I created. -- date { match =\> \["rdate", "d-MMM-yy"\] target =\> "rdate" } date { match =\> \["rdate",… --- ## [ElasticSearch Filter by Aggregation Result](https://discuss.elastic.co/t/elasticsearch-filter-by-aggregation-result/25847)
**Author:** [@elm](https://discuss.elastic.co/u/elm)\ **Replies:** 2\ **Last updated:** [July 20, 2015, 9:12am UTC](https://discuss.elastic.co/t/elasticsearch-filter-by-aggregation-result/25847 "2015-07-20T09:12:27Z")
Hello, I don't want to cross post, but since this just launched and moved from the Google Groups I am not sure what's the best place to ask questions is at the moment. I posted on StackOverflow one http://stackoverflow.c… --- ## [Event.ingested huge time difference](https://discuss.elastic.co/t/event-ingested-huge-time-difference/333975)
**Author:** [@AnkurYogi](https://discuss.elastic.co/u/AnkurYogi)\ **Replies:** 6\ **Last updated:** [May 22, 2023, 11:06am UTC](https://discuss.elastic.co/t/event-ingested-huge-time-difference/333975 "2023-05-22T11:06:23Z")
Hello All, While investigating on an event I noticed there was a huge difference between event.created and event.ingested which created a confusion on the real event time. Later digging in docs resulted event.ingested… --- ## [How to sync elasticsearch data between DC, DR](https://discuss.elastic.co/t/how-to-sync-elasticsearch-data-between-dc-dr/293651)
**Author:** [@banf](https://discuss.elastic.co/u/banf)\ **Replies:** 6\ **Last updated:** [January 10, 2022, 1:41pm UTC](https://discuss.elastic.co/t/how-to-sync-elasticsearch-data-between-dc-dr/293651 "2022-01-10T13:41:24Z")
Hi Team, We have elasticsearch running on our DC side so standalone as of now. We would like to know how can we sync elasticsearch data to DR side so that if DR happens, we can still see data in kibana. It is installe… --- ## [Logstash missing records in elastic search](https://discuss.elastic.co/t/logstash-missing-records-in-elastic-search/121842)
**Author:** [@vinaygarg30](https://discuss.elastic.co/u/vinaygarg30)\ **Replies:** 0\ **Last updated:** [February 28, 2018, 11:33am UTC](https://discuss.elastic.co/t/logstash-missing-records-in-elastic-search/121842 "2018-02-28T11:33:12Z")
Hi, I have used the configration for logstash to dump data from MYSQL 5.5 to Elastic Search 6.1.2. input { jdbc { jdbc\_driver\_library =\> "/home/ubuntu/mysql-connector-java-5.1.45/mysql-connector-java-5.1.45-bin.jar" … --- ## [Elastic and LocalStack](https://discuss.elastic.co/t/elastic-and-localstack/263804)
**Author:** [@Sergiodive](https://discuss.elastic.co/u/Sergiodive)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 2:42pm UTC](https://discuss.elastic.co/t/elastic-and-localstack/263804 "2021-02-10T14:42:30Z")
Hello I am running Elasticsearch 7.10 with a localstack s3 instance. The issue is when i try to register a repository. If i do this curl -X PUT "localhost:9200/\_snapshot/repo1?pretty" -H 'Content-Type: application/… --- ## [NLP based question answering system](https://discuss.elastic.co/t/nlp-based-question-answering-system/84125)
**Author:** [@aerokite](https://discuss.elastic.co/u/aerokite)\ **Replies:** 1\ **Last updated:** [May 1, 2017, 5:02am UTC](https://discuss.elastic.co/t/nlp-based-question-answering-system/84125 "2017-05-01T05:02:30Z")
I was wondering as elasticsearch is very good at natural language processing, Is there any way to use it for question answering system? Suppose I have a story following: My name is Shahriar and I have a cat. Its na… --- ## [Regexp in Timelion/Kibana query](https://discuss.elastic.co/t/regexp-in-timelion-kibana-query/72762)
**Author:** [@Dreadlocked](https://discuss.elastic.co/u/Dreadlocked)\ **Replies:** 1\ **Last updated:** [January 25, 2017, 4:38pm UTC](https://discuss.elastic.co/t/regexp-in-timelion-kibana-query/72762 "2017-01-25T16:38:38Z")
Hi, I need to find logs whit specific text inside the "message" field. For example, I need to do something like: .es(q='event\_id=XXXX AND message:"/WORD1|WORD2|WORD3|WORD4/") I only find examples for doing thins like… --- ## [Logstash for cyberoam filtering](https://discuss.elastic.co/t/logstash-for-cyberoam-filtering/75644)
**Author:** [@Ibrahim](https://discuss.elastic.co/u/Ibrahim)\ **Replies:** 8\ **Last updated:** [February 20, 2017, 7:16am UTC](https://discuss.elastic.co/t/logstash-for-cyberoam-filtering/75644 "2017-02-20T07:16:35Z")
Dear All I have an elk stack used with cyberoam, and I want to parse this message with logstash can you help me please: "\<30\>date=2017-02-19 time=21:59:15 timezone=\\"IST\\" device\_name=\\"CR200iNG\\" device\_id=C20313272882… --- ## [Routing not working for ES](https://discuss.elastic.co/t/routing-not-working-for-es/18248)
**Author:** [@satishmallik](https://discuss.elastic.co/u/satishmallik)\ **Replies:** 8\ **Last updated:** [July 1, 2014, 7:52am UTC](https://discuss.elastic.co/t/routing-not-working-for-es/18248 "2014-07-01T07:52:03Z")
I have following ES mapping defined, curl "localhost:9200/codeindexroute/filecontracts/\_mapping" { "codeindexroute":{ "mappings":{ "filecontracts":{ "\_routing":{ "required":true }, "\_source":{ "compress":fa… --- ## [How to delete event data in elastic search](https://discuss.elastic.co/t/how-to-delete-event-data-in-elastic-search/41871)
**Author:** [@michelecappelletti](https://discuss.elastic.co/u/michelecappelletti)\ **Replies:** 5\ **Last updated:** [February 16, 2016, 12:12pm UTC](https://discuss.elastic.co/t/how-to-delete-event-data-in-elastic-search/41871 "2016-02-16T12:12:18Z")
Hi, i tried various ways to delete event data in elasticsearch, like: curl -XDELETE 'http://localhost:9200/\_all/\_search' -d {...} then i tried this way, but i don't understand the usage, i mean: which tool or plugi… --- ## [Cutoff\_frequency](https://discuss.elastic.co/t/cutoff-frequency/27387)
**Author:** [@111](https://discuss.elastic.co/u/111)\ **Replies:** 5\ **Last updated:** [November 24, 2015, 10:59am UTC](https://discuss.elastic.co/t/cutoff-frequency/27387 "2015-11-24T10:59:44Z")
Доброго времени суток! У меня в индексе есть две записи: "hits": \[ { "\_index": "test", "\_type": "test", "\_id": "1", "\_score": 1, "\_source": { "text": "Quick and… --- ## [elastic\_transport.ConnectionError: Connection error caused by: ConnectionError(Connection error caused by: NewConnectionError(\: Failed to establish a new connection: \[Errno 111\] Connection refuse](https://discuss.elastic.co/t/elastic-transport-connectionerror-connection-error-caused-by-connectionerror-connection-error-caused-by-newconnectionerror-urllib3-connection-httpconnection-object-at-0x7fab5b67c950-failed-to-establish-a-new-connection-errno-111-connection-refuse/361545)
**Author:** [@red\_beast](https://discuss.elastic.co/u/red_beast)\ **Replies:** 2\ **Last updated:** [June 17, 2024, 10:40am UTC](https://discuss.elastic.co/t/elastic-transport-connectionerror-connection-error-caused-by-connectionerror-connection-error-caused-by-newconnectionerror-urllib3-connection-httpconnection-object-at-0x7fab5b67c950-failed-to-establish-a-new-connection-errno-111-connection-refuse/361545 "2024-06-17T10:40:25Z")
Hello , I am trying to connect to Elasticsearch using docker but I keep getting connection refused error while elasticsearch is running on localhost:9200 This is my docker-compose file version: '3.8' services: api:… --- ## [How to setup basic authentication in kibana?](https://discuss.elastic.co/t/how-to-setup-basic-authentication-in-kibana/138811)
**Author:** [@Learn\_Hadoop](https://discuss.elastic.co/u/Learn_Hadoop)\ **Replies:** 2\ **Last updated:** [July 6, 2018, 6:33am UTC](https://discuss.elastic.co/t/how-to-setup-basic-authentication-in-kibana/138811 "2018-07-06T06:33:44Z")
i am new to Elasticsearch and kiban. We created an index and dashboard with graph. We would like to introduce basic user authentication which helps end customers couldn't see left hand side menus(discover,Visualizer ,dev… --- ## [Error handling in rest api](https://discuss.elastic.co/t/error-handling-in-rest-api/15213)
**Author:** [@Jettro\_Coenradie](https://discuss.elastic.co/u/Jettro_Coenradie)\ **Replies:** 2\ **Last updated:** [January 12, 2014, 4:06pm UTC](https://discuss.elastic.co/t/error-handling-in-rest-api/15213 "2014-01-12T16:06:07Z")
Hi, I am trying out the elasticsearch javascript connection driver. It is working fine, but I am facing a problem with the error handling. To me it seems to be an elasticsearch rest api problem. I am creating a r… --- ## [New index\_options vs term\_vector?](https://discuss.elastic.co/t/new-index-options-vs-term-vector/9470)
**Author:** [@Tanguy1](https://discuss.elastic.co/u/Tanguy1)\ **Replies:** 2\ **Last updated:** [October 25, 2012, 9:38am UTC](https://discuss.elastic.co/t/new-index-options-vs-term-vector/9470 "2012-10-25T09:38:04Z")
Hi, Can someone be kind enough to explain the difference between term\_vector and the new index\_options (0.20) parameter? Not sure to understand what docs, freqs and positions means. Thanks, -- Tanguy Twitte… --- ## [Elasticsearch S3 backup with custom KMS key encryption](https://discuss.elastic.co/t/elasticsearch-s3-backup-with-custom-kms-key-encryption/102807)
**Author:** [@sukanta](https://discuss.elastic.co/u/sukanta)\ **Replies:** 4\ **Last updated:** [October 6, 2017, 10:21am UTC](https://discuss.elastic.co/t/elasticsearch-s3-backup-with-custom-kms-key-encryption/102807 "2017-10-06T10:21:51Z")
When can we expect support for Elasticsearch S3 backup with custom KMS key encryption --- ## [Unable to use sub-fields of event\_data](https://discuss.elastic.co/t/unable-to-use-sub-fields-of-event-data/91480)
**Author:** [@ccampbell](https://discuss.elastic.co/u/ccampbell)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 6:37pm UTC](https://discuss.elastic.co/t/unable-to-use-sub-fields-of-event-data/91480 "2017-07-05T18:37:14Z")
I'm trying to replicate some of the examples found in this blog piece: But I can't enter sub-fields of event\_data as terms in a Kibana visualization -- To be clear, I can definitely create a filter or perform a sa… --- ## [Plotting raw data on a graph](https://discuss.elastic.co/t/plotting-raw-data-on-a-graph/177097)
**Author:** [@skiefer](https://discuss.elastic.co/u/skiefer)\ **Replies:** 3\ **Last updated:** [April 16, 2019, 8:35pm UTC](https://discuss.elastic.co/t/plotting-raw-data-on-a-graph/177097 "2019-04-16T20:35:40Z")
I've seen this question a few times, but not too recently. Hoping something has changed since the answers I've seen. I'm trying to plot actual data on a line graph, not a avg/count/max, etc. My use case is medical lab… --- ## [Manual Install of Plugins](https://discuss.elastic.co/t/manual-install-of-plugins/5372)
**Author:** [@Aradon](https://discuss.elastic.co/u/Aradon)\ **Replies:** 3\ **Last updated:** [September 13, 2011, 2:22pm UTC](https://discuss.elastic.co/t/manual-install-of-plugins/5372 "2011-09-13T14:22:56Z")
Hello, I'm trying to manually install the river-couchdb plugin. For whatever reason I can wget the zip file but I cannot get it to download by doing the 'plugin -install river-couchdb' command. As such I wen… --- ## [Winlogbeat Service won't start error 1067](https://discuss.elastic.co/t/winlogbeat-service-wont-start-error-1067/236688)
**Author:** [@richard.andersson](https://discuss.elastic.co/u/richard.andersson)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 9:24pm UTC](https://discuss.elastic.co/t/winlogbeat-service-wont-start-error-1067/236688 "2020-06-18T21:24:42Z")
Hi, Version we have tested with winlogbeat-7.7.1 and winlogbeat-6.8.10 and winlogbeat-7.6.0 and winlogbeat-6.5.0 OS: Windows Server 2016. We have problem to start winlogbeat Service with error 1067 We have test start… --- ## [Connection Failed : Your elasticsearch server is down or unreachable](https://discuss.elastic.co/t/connection-failed-your-elasticsearch-server-is-down-or-unreachable/43636)
**Author:** [@Lawinn](https://discuss.elastic.co/u/Lawinn)\ **Replies:** 1\ **Last updated:** [March 7, 2016, 12:45pm UTC](https://discuss.elastic.co/t/connection-failed-your-elasticsearch-server-is-down-or-unreachable/43636 "2016-03-07T12:45:54Z")
Hello there, I am currently doing an internship in which I need to have my VM installed with specific versions of ELK products. I got Kibana 3.1.2, Nginx, Elasticsearch 1.7.3, and Logstash 2.1.0 installed by myself, and… --- ## [Shard rebalancing is slow after network failure on any node](https://discuss.elastic.co/t/shard-rebalancing-is-slow-after-network-failure-on-any-node/164716)
**Author:** [@Ninad\_Pradhan](https://discuss.elastic.co/u/Ninad_Pradhan)\ **Replies:** 6\ **Last updated:** [January 22, 2019, 9:45pm UTC](https://discuss.elastic.co/t/shard-rebalancing-is-slow-after-network-failure-on-any-node/164716 "2019-01-22T21:45:14Z")
we are using elastic search 6.3.1, we have a 3 node cluster 1 tb ssd, 30 gb ram on the machine, 8gb allocated to es, 2 masters minimum, in our testing if one of the es node's network goes down, elastic takes about 7 to 1… --- ## [Please correct the analyzer to not produce such terms](https://discuss.elastic.co/t/please-correct-the-analyzer-to-not-produce-such-terms/59618)
**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\ **Replies:** 1\ **Last updated:** [September 2, 2016, 3:35am UTC](https://discuss.elastic.co/t/please-correct-the-analyzer-to-not-produce-such-terms/59618 "2016-09-02T03:35:17Z")
I am getting this error from logstash, any idea how to fix it? Is there a limit how many bytes a string field can contain? "CONTENT\_BODY" : { "index" : "not\_analyzed", "type" : "string" … --- ## [How to expose elasticsearch via http://my-domain.com:9200](https://discuss.elastic.co/t/how-to-expose-elasticsearch-via-http-my-domain-com-9200/166878)
**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\ **Replies:** 5\ **Last updated:** [February 4, 2019, 6:34am UTC](https://discuss.elastic.co/t/how-to-expose-elasticsearch-via-http-my-domain-com-9200/166878 "2019-02-04T06:34:12Z")
Hi, A few days ago, i installed elasticsearch. it is working well with localhost:9200 with curl command showing as - { "name" : "2Ui6lx9", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "kBm0cR\_tTmG3vl3R4sd2eg… --- ## [Duplicate records when scaling logstash](https://discuss.elastic.co/t/duplicate-records-when-scaling-logstash/43252)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 5\ **Last updated:** [December 28, 2016, 5:03pm UTC](https://discuss.elastic.co/t/duplicate-records-when-scaling-logstash/43252 "2016-12-28T17:03:26Z")
Hi, I am using ELK stack like below LSF==\> logstash-Shipper--\>Redis--\>Indexer--\>nGinx--\>ES I have scaled shipper and indexers as below 1) CASE1 for all logs shipper.conf output { redis { … --- ## [Getting Repeated mail for same record in elasticsearch while am using watcher](https://discuss.elastic.co/t/getting-repeated-mail-for-same-record-in-elasticsearch-while-am-using-watcher/43854)
**Author:** [@Gaurav\_Harsola](https://discuss.elastic.co/u/Gaurav_Harsola)\ **Replies:** 5\ **Last updated:** [March 13, 2016, 10:40pm UTC](https://discuss.elastic.co/t/getting-repeated-mail-for-same-record-in-elasticsearch-while-am-using-watcher/43854 "2016-03-13T22:40:23Z")
Hi, I have created an index using command http://localhost:9200/event PUT { "settings" : { "number\_of\_shards" : 1 }, "mappings" :{ "event": { "properties": { "eventId": { … --- ## [How does geoIP for private IPaddresses work?](https://discuss.elastic.co/t/how-does-geoip-for-private-ipaddresses-work/199699)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 4\ **Last updated:** [September 20, 2019, 4:58pm UTC](https://discuss.elastic.co/t/how-does-geoip-for-private-ipaddresses-work/199699 "2019-09-20T16:58:39Z")
Hi I want to understand how does the GeoIP work. I want to use it to track employees: If 1 of my private IPs is out of town then an alarm must be set. My first idea (as I am a newbie in Elastic) was of correlating the… --- ## [Grok Stops Reading at a Backslash?](https://discuss.elastic.co/t/grok-stops-reading-at-a-backslash/194085)
**Author:** [@jakecramer17](https://discuss.elastic.co/u/jakecramer17)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 6:28pm UTC](https://discuss.elastic.co/t/grok-stops-reading-at-a-backslash/194085 "2019-08-07T18:28:04Z")
This is an extension to a previously solved topic. I have this log here (as it appears in the console) 2019-08-05 08:55:15 - jcramer(Software Programmer) - Successfully updated profile that I've successfully been able… --- ## [Elasticsearch 5.4.0 - not like operation](https://discuss.elastic.co/t/elasticsearch-5-4-0-not-like-operation/86982)
**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\ **Replies:** 4\ **Last updated:** [May 24, 2017, 8:51pm UTC](https://discuss.elastic.co/t/elasticsearch-5-4-0-not-like-operation/86982 "2017-05-24T20:51:49Z")
Hello. I am new to new version. I used 2.0.0 and it was possible to make a request 'NOT LIKE': QueryBuilder qb = notQuery( wildcardQuery( "user", "k?mc\*" ) ); But in new version I can't find how to make this request … --- ## [Logstash.conf error "Cannot get new connection from pool"](https://discuss.elastic.co/t/logstash-conf-error-cannot-get-new-connection-from-pool/62357)
**Author:** [@lduriez](https://discuss.elastic.co/u/lduriez)\ **Replies:** 4\ **Last updated:** [October 7, 2016, 6:20am UTC](https://discuss.elastic.co/t/logstash-conf-error-cannot-get-new-connection-from-pool/62357 "2016-10-07T06:20:37Z")
Hi, I'm trying to parse a log file with logstash to put it in an elasticsearch database, but I have the following error: Elasticsearch::Transport::Transport::Error: Cannot get new connection from pool. I'm using elast… --- ## [CORS problem when using self hosted tile map server](https://discuss.elastic.co/t/cors-problem-when-using-self-hosted-tile-map-server/289102)
**Author:** [@mehrdad22](https://discuss.elastic.co/u/mehrdad22)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 3:03pm UTC](https://discuss.elastic.co/t/cors-problem-when-using-self-hosted-tile-map-server/289102 "2021-11-16T15:03:14Z")
Hi there. I'm ran a self hosted OSM tile server with this repo. map is working well and functional and accessible with leaflet demo. when I use tile map link ( http://map.company.org:8080/tile/{z}/{x}/{y}.png) for serv… --- ## [ParseMemcache(UDP) exception: invalid memory address or nil pointer dereference](https://discuss.elastic.co/t/parsememcache-udp-exception-invalid-memory-address-or-nil-pointer-dereference/57956)
**Author:** [@codekoala](https://discuss.elastic.co/u/codekoala)\ **Replies:** 7\ **Last updated:** [August 19, 2016, 2:39pm UTC](https://discuss.elastic.co/t/parsememcache-udp-exception-invalid-memory-address-or-nil-pointer-dereference/57956 "2016-08-19T14:39:40Z")
Using packetbeat version 1.2.3 (amd64) on Arch Linux with the default configuration, I received the following output: 2016/08/12 20:00:46.305470 log.go:113: ERR ParseMemcache(UDP) exception. Recovering, but please repo… --- ## [Découverte de Elasticsearch](https://discuss.elastic.co/t/decouverte-de-elasticsearch/46213)
**Author:** [@Cafa](https://discuss.elastic.co/u/Cafa)\ **Replies:** 7\ **Last updated:** [April 4, 2016, 11:38am UTC](https://discuss.elastic.co/t/decouverte-de-elasticsearch/46213 "2016-04-04T11:38:11Z")
Bonjour, Je découvre actuellement Elasticsearch, il me parait être une solution excellente dans mon projet actuel ! Je voudrais héberger Elasticsearch sur des postes de travail pour créer des "petits" noeuds. Chacun … --- ## [Problem with FileBeat and Windows Server 2012 R2](https://discuss.elastic.co/t/problem-with-filebeat-and-windows-server-2012-r2/100029)
**Author:** [@Jack37](https://discuss.elastic.co/u/Jack37)\ **Replies:** 6\ **Last updated:** [September 12, 2017, 7:20am UTC](https://discuss.elastic.co/t/problem-with-filebeat-and-windows-server-2012-r2/100029 "2017-09-12T07:20:45Z")
Hi All, I have a problem with FileBeat and Windows Server 2012 R2 I use FileBeat to read remote IIS logs from 4 webservers; in the windows event viewer's I have this error: {Delayed Write Failed} Windows was unable to… --- ## [Spatial query against indexed bounding boxes](https://discuss.elastic.co/t/spatial-query-against-indexed-bounding-boxes/6477)
**Author:** [@djcoin\_Simon\_Thepot](https://discuss.elastic.co/u/djcoin_Simon_Thepot)\ **Replies:** 6\ **Last updated:** [January 30, 2012, 1:07pm UTC](https://discuss.elastic.co/t/spatial-query-against-indexed-bounding-boxes/6477 "2012-01-30T13:07:52Z")
Hi, I noticed only a few days ago that the only "spatial" type available is a geo\_point (which is already good!). Yet, that makes spatial query quite limited. Are there some plan about making a bouding box or a p… --- ## [ILM - index already exists error](https://discuss.elastic.co/t/ilm-index-already-exists-error/193541)
**Author:** [@ollyw](https://discuss.elastic.co/u/ollyw)\ **Replies:** 3\ **Last updated:** [August 19, 2019, 8:45am UTC](https://discuss.elastic.co/t/ilm-index-already-exists-error/193541 "2019-08-19T08:45:19Z")
I am new to the ILM side of things and have got over a number of hurdles but now stuck! I have a set of indexes which include the date in their name e.g. logs-20190708, logs-20190709 My ILM policy has a rollover\_alias … --- ## [Failed to ADD xpack.security.http.ssl.enabled](https://discuss.elastic.co/t/failed-to-add-xpack-security-http-ssl-enabled/152360)
**Author:** [@rmadoori](https://discuss.elastic.co/u/rmadoori)\ **Replies:** 3\ **Last updated:** [October 14, 2018, 12:40pm UTC](https://discuss.elastic.co/t/failed-to-add-xpack-security-http-ssl-enabled/152360 "2018-10-14T12:40:08Z")
Hi , I am trying to make elastic search http endpoints and HTTPS endpoints I generated certs from cert manager \[2018-10-13T21:07:50,096\]\[DEBUG\]\[o.e.x.c.s.SSLService \] \[es-coordinating\] using ssl settings \[SSLConfi… --- ## [User Management on Kibana](https://discuss.elastic.co/t/user-management-on-kibana/82808)
**Author:** [@mathew](https://discuss.elastic.co/u/mathew)\ **Replies:** 3\ **Last updated:** [April 19, 2017, 4:09pm UTC](https://discuss.elastic.co/t/user-management-on-kibana/82808 "2017-04-19T16:09:50Z")
ClusterId: c05357 Hi, We are setting up Kibana User Access. Is there a way i can hide the Management tab for read only users? I created below role for Read only users. I want to restrict them deleting my indices. w… [Previous page](https://discuss.elastic.co/top.md?page=838&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=840&per_page=50&period=all)