# Top **URL:** https://discuss.elastic.co/top.md?page=843&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 844 --- ## [Disabling geoip downloader is not working (elastic 7.16.2 and java 11)](https://discuss.elastic.co/t/disabling-geoip-downloader-is-not-working-elastic-7-16-2-and-java-11/302523)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 5\ **Last updated:** [April 17, 2022, 4:31pm UTC](https://discuss.elastic.co/t/disabling-geoip-downloader-is-not-working-elastic-7-16-2-and-java-11/302523 "2022-04-17T16:31:13Z")
RHEL release 7.9 jdk-11.0.14 (not bundled) Elasticsearch with x-pack security multi hosts/nodes cluster has been setup from Elasticsearch-7.16.2-linux-x86\_64.tar.gz. It is fully functional. I tried to disable geoip d… --- ## [kibana.autocompleteTerminateAfter': is not allowed](https://discuss.elastic.co/t/kibana-autocompleteterminateafter-is-not-allowed/291279)
**Author:** [@lifeowl](https://discuss.elastic.co/u/lifeowl)\ **Replies:** 5\ **Last updated:** [January 5, 2022, 2:34am UTC](https://discuss.elastic.co/t/kibana-autocompleteterminateafter-is-not-allowed/291279 "2022-01-05T02:34:04Z")
Hi there, Have there been any recent changes or deprecations with kibana.autocompleteTerminateAfter? I recently had this value configured in my kibana.yml file (using 7.14 on Elastic Cloud) but now, when I try to update… --- ## [Document Preview in elasticsearch](https://discuss.elastic.co/t/document-preview-in-elasticsearch/259242)
**Author:** [@sagar.pattnayak](https://discuss.elastic.co/u/sagar.pattnayak)\ **Replies:** 5\ **Last updated:** [December 22, 2020, 11:16am UTC](https://discuss.elastic.co/t/document-preview-in-elasticsearch/259242 "2020-12-22T11:16:40Z")
Hi There, I am new to Elasticsearch. I do have 10 years of experience in SharePoint search. I wanted to know if there is any OOB feature availabe to preview documents those appear in search results in stead of really op… --- ## [Filebeat, Kibana and ElasticSearch are configured, but not reading log files](https://discuss.elastic.co/t/filebeat-kibana-and-elasticsearch-are-configured-but-not-reading-log-files/241344)
**Author:** [@byc-art](https://discuss.elastic.co/u/byc-art)\ **Replies:** 5\ **Last updated:** [July 17, 2020, 11:30am UTC](https://discuss.elastic.co/t/filebeat-kibana-and-elasticsearch-are-configured-but-not-reading-log-files/241344 "2020-07-17T11:30:08Z")
Hi there, I'm setting up filebeats to read log files from Ubuntu machine and send them to ElasticSearch/ Kibana. I made a few changes to .yml settings after reading through previous posts https://github.com/elastic/beat… --- ## [How to check if a field value of a tag is present in the field value of other tags](https://discuss.elastic.co/t/how-to-check-if-a-field-value-of-a-tag-is-present-in-the-field-value-of-other-tags/194393)
**Author:** [@madhan8](https://discuss.elastic.co/u/madhan8)\ **Replies:** 5\ **Last updated:** [August 12, 2019, 7:51am UTC](https://discuss.elastic.co/t/how-to-check-if-a-field-value-of-a-tag-is-present-in-the-field-value-of-other-tags/194393 "2019-08-12T07:51:47Z")
Hi, I want to identify if an IP address(field A) is present in the list of IP addresses(field B). How will I be able to do this check? How should I convert the IP addresses present in a field B into a list first? Onc… --- ## [Search DSL Query value with '(single quote) and space in elastic 6.8](https://discuss.elastic.co/t/search-dsl-query-value-with-single-quote-and-space-in-elastic-6-8/281091)
**Author:** [@joseph-l.amalraj](https://discuss.elastic.co/u/joseph-l.amalraj)\ **Replies:** 6\ **Last updated:** [September 7, 2021, 5:02pm UTC](https://discuss.elastic.co/t/search-dsl-query-value-with-single-quote-and-space-in-elastic-6-8/281091 "2021-09-07T17:02:10Z")
Hi, Actually, i am trying to do Search DSL Query value with '(single quote) like below query (1) and some times with single space Query (2) below, i am not getting expected results, Could you please suggest me for that.… --- ## [Grok filter logstash config](https://discuss.elastic.co/t/grok-filter-logstash-config/45306)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 6\ **Last updated:** [March 25, 2016, 10:09am UTC](https://discuss.elastic.co/t/grok-filter-logstash-config/45306 "2016-03-25T10:09:37Z")
Hi, Can somebody help me out here? So i am trying to use grok filter on a particular log file and I am having some trouble. I used http://grokdebug.herokuapp.com/ to make a pattern, but I am having trouble with it so… --- ## [Spark write parquet record to elasticsearch too slowly](https://discuss.elastic.co/t/spark-write-parquet-record-to-elasticsearch-too-slowly/42444)
**Author:** [@lizhenmxcz](https://discuss.elastic.co/u/lizhenmxcz)\ **Replies:** 3\ **Last updated:** [March 8, 2016, 7:44am UTC](https://discuss.elastic.co/t/spark-write-parquet-record-to-elasticsearch-too-slowly/42444 "2016-03-08T07:44:52Z")
I want to write the parquet record to es use spark, 10 excutors and 7 billion records. In the beginning i submit the application , the write speed is 20000+ per second , but the speed change small with time. After 12 hou… --- ## [Spreading expensive aggregations over a multi search, is it faster?](https://discuss.elastic.co/t/spreading-expensive-aggregations-over-a-multi-search-is-it-faster/39161)
**Author:** [@andricDu](https://discuss.elastic.co/u/andricDu)\ **Replies:** 3\ **Last updated:** [January 14, 2016, 9:53pm UTC](https://discuss.elastic.co/t/spreading-expensive-aggregations-over-a-multi-search-is-it-faster/39161 "2016-01-14T21:53:40Z")
Hi! I was wondering if there is any benefit in spreading aggregations into their individual searches as part of a multi search as opposed to bundling them up as part of a single query? More precisely, will all the quer… --- ## [Frequent updates to documents](https://discuss.elastic.co/t/frequent-updates-to-documents/21231)
**Author:** [@Jinal\_Shah\_2](https://discuss.elastic.co/u/Jinal_Shah_2)\ **Replies:** 3\ **Last updated:** [December 15, 2014, 5:11am UTC](https://discuss.elastic.co/t/frequent-updates-to-documents/21231 "2014-12-15T05:11:39Z")
Hi, We are using ES 1.0.3. In our application we do frequent updates to the documents and this is causes delete count to increase quickly and frequent merges. Due to Lucene version issues with our application a… --- ## [Help with monitoring MBeans with jmx plugin of logstash](https://discuss.elastic.co/t/help-with-monitoring-mbeans-with-jmx-plugin-of-logstash/63624)
**Author:** [@harperkej](https://discuss.elastic.co/u/harperkej)\ **Replies:** 2\ **Last updated:** [February 17, 2017, 2:12pm UTC](https://discuss.elastic.co/t/help-with-monitoring-mbeans-with-jmx-plugin-of-logstash/63624 "2017-02-17T14:12:46Z")
Hi everyone :slight\_smile: I am using logstash input jmx plugin to retrieve some parameters from a Java application. The idea it to get two or more attributes from on MBean through jmx plugin and to show those attribu… --- ## [Can REST API \_msearch support new feature response filter?](https://discuss.elastic.co/t/can-rest-api--msearch-support-new-feature-response-filter/25598)
**Author:** [@JoshuaZe](https://discuss.elastic.co/u/JoshuaZe)\ **Replies:** 2\ **Last updated:** [July 20, 2015, 6:39am UTC](https://discuss.elastic.co/t/can-rest-api--msearch-support-new-feature-response-filter/25598 "2015-07-20T06:39:23Z")
I used the new feature (JSON response body filtering) under elasticsearch1.6.0, but failed with API \_msearch. I tried \_search api, it works (the URL filter\_path is the same as \_msearch URL). But when i use \_msearch, it o… --- ## [2 node elasticsearch cluster for production like environment](https://discuss.elastic.co/t/2-node-elasticsearch-cluster-for-production-like-environment/280595)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 4\ **Last updated:** [August 6, 2021, 7:26am UTC](https://discuss.elastic.co/t/2-node-elasticsearch-cluster-for-production-like-environment/280595 "2021-08-06T07:26:18Z")
Hi Team, From below document, I am trying to find if I can use 2 node cluster for production like environment. I know 3 node cluster is always better choice. link above says, if you create 2 node es cluster, then mak… --- ## [Including data from SQL tables to Elasticsearch](https://discuss.elastic.co/t/including-data-from-sql-tables-to-elasticsearch/271611)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 2:27pm UTC](https://discuss.elastic.co/t/including-data-from-sql-tables-to-elasticsearch/271611 "2021-04-29T14:27:39Z")
Good morning. I would like to know if it would be possible, in order to increase the performance of queries in a SQL database, to perform a data dump from the SQL database to elasticsearch, is that possible, or is it onl… --- ## [Slow query in python](https://discuss.elastic.co/t/slow-query-in-python/156715)
**Author:** [@Artem\_Sh](https://discuss.elastic.co/u/Artem_Sh)\ **Replies:** 4\ **Last updated:** [November 14, 2018, 5:47pm UTC](https://discuss.elastic.co/t/slow-query-in-python/156715 "2018-11-14T17:47:28Z")
Hello. I start Elasticsearch in local machine. Index "wbtm\_cities" Documents: 1.8k Data: 66.3 MB Total Shards: 1 Unassigned Shards: 0 Fields: http://take.ms/0haXq http://take.ms/am2mS I do query: GET wbtm\_… --- ## [Curator snapshots error: Failed to verify all nodes have repository access](https://discuss.elastic.co/t/curator-snapshots-error-failed-to-verify-all-nodes-have-repository-access/31885)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 2\ **Last updated:** [October 9, 2015, 12:58am UTC](https://discuss.elastic.co/t/curator-snapshots-error-failed-to-verify-all-nodes-have-repository-access/31885 "2015-10-09T00:58:31Z")
Hey guys, I'm trying to snapshot my ES indexes using curator and I'm getting the following error: /usr/bin/curator snapshot --repository jf\_backup --prefix jokefire- --ignore\_unavailable --partial indices --all-indi… --- ## [Elasticsearch Cluster can't join new node](https://discuss.elastic.co/t/elasticsearch-cluster-cant-join-new-node/126964)
**Author:** [@souf\_el\_badraoui](https://discuss.elastic.co/u/souf_el_badraoui)\ **Replies:** 1\ **Last updated:** [April 5, 2018, 3:57pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-cant-join-new-node/126964 "2018-04-05T15:57:57Z")
i'm getting the below warn continuously after installing x-pack 6.2 failed to validate incoming join request from node org.elasticsearch.transport.RemoteTransportException: \[internal:discovery/zen/join/validate\] Caus… --- ## [Users data flow](https://discuss.elastic.co/t/users-data-flow/23372)
**Author:** [@redserpent7](https://discuss.elastic.co/u/redserpent7)\ **Replies:** 7\ **Last updated:** [April 23, 2015, 12:46pm UTC](https://discuss.elastic.co/t/users-data-flow/23372 "2015-04-23T12:46:55Z")
Hi, I am trying to figure out the best way to design my ES cluster. Currently my search service is subscription based and each user can only search his own data. So looking around I found several examples abou… --- ## [Ingest data from salesforce to elasticsearch using Logstash](https://discuss.elastic.co/t/ingest-data-from-salesforce-to-elasticsearch-using-logstash/252921)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 6\ **Last updated:** [October 23, 2020, 7:45pm UTC](https://discuss.elastic.co/t/ingest-data-from-salesforce-to-elasticsearch-using-logstash/252921 "2020-10-23T19:45:12Z")
Hi, I am trying to ingest data from salesforce to elasticsearch using logstash in Macbook Pro (macOS Mojave Version 10.14.2). But it's not working and gives the below error in my terminal: \*\[2020-10-22T08:37:06,130\]\[IN… --- ## [Cluster state often in yellow: data node and master are running but failed to ping each other](https://discuss.elastic.co/t/cluster-state-often-in-yellow-data-node-and-master-are-running-but-failed-to-ping-each-other/127440)
**Author:** [@MarkDai](https://discuss.elastic.co/u/MarkDai)\ **Replies:** 2\ **Last updated:** [April 13, 2018, 6:03am UTC](https://discuss.elastic.co/t/cluster-state-often-in-yellow-data-node-and-master-are-running-but-failed-to-ping-each-other/127440 "2018-04-13T06:03:05Z")
Hello Guys! Would anyone please help on the strange problem I have worked for few days? Question in short: I have a 10 nodes ElasticSearch cluster, running ES 5.1.1. Recently, almost everyday, cluster is often in yel… --- ## [Windows 7 Logstash JRUBY Error](https://discuss.elastic.co/t/windows-7-logstash-jruby-error/124152)
**Author:** [@AloysiusParedes](https://discuss.elastic.co/u/AloysiusParedes)\ **Replies:** 2\ **Last updated:** [April 12, 2018, 2:00pm UTC](https://discuss.elastic.co/t/windows-7-logstash-jruby-error/124152 "2018-04-12T14:00:05Z")
Hi, I am new to the entire ELK Stack, and I am trying to set up Logstash. I followed all of the instructions (unzipping, setting up config file, starting Logstash). My setup is Windows 7, and my java version is 1.8.0\_51. … --- ## [There are no external requests known to support wildcards that don't support replacing their indices](https://discuss.elastic.co/t/there-are-no-external-requests-known-to-support-wildcards-that-dont-support-replacing-their-indices/261207)
**Author:** [@tianhao](https://discuss.elastic.co/u/tianhao)\ **Replies:** 3\ **Last updated:** [January 15, 2021, 11:31am UTC](https://discuss.elastic.co/t/there-are-no-external-requests-known-to-support-wildcards-that-dont-support-replacing-their-indices/261207 "2021-01-15T11:31:10Z")
Hello, I perform the following operations, and prompt There are no external requests known to support wildcards that don't support replacing their indices elasticsearch version: 7.8.1 POST /\*:.monitoring-es-7-\*,.monit… --- ## [Jenkins logs via logstash](https://discuss.elastic.co/t/jenkins-logs-via-logstash/215122)
**Author:** [@whoatemyjam](https://discuss.elastic.co/u/whoatemyjam)\ **Replies:** 3\ **Last updated:** [January 15, 2020, 1:52pm UTC](https://discuss.elastic.co/t/jenkins-logs-via-logstash/215122 "2020-01-15T13:52:46Z")
Hi we are trying to send Jenkins build logs logs to ES via logstash and filebeat. We have tried Jenkins logstash plugin but it doesnot work with pipelines. Our filebeat config is like filebeat.inputs: - type: log e… --- ## [Curator python-urllib3 from elasticsearch repo conflict with rhel7 package](https://discuss.elastic.co/t/curator-python-urllib3-from-elasticsearch-repo-conflict-with-rhel7-package/55826)
**Author:** [@Felix\_Kutscher](https://discuss.elastic.co/u/Felix_Kutscher)\ **Replies:** 3\ **Last updated:** [July 19, 2016, 9:14pm UTC](https://discuss.elastic.co/t/curator-python-urllib3-from-elasticsearch-repo-conflict-with-rhel7-package/55826 "2016-07-19T21:14:43Z")
Hello, we get some transaction error caused by elasticsearch python-urllib3. Transaction check error: file /usr/lib/python2.7/site-packages/urllib3/packages/ssl\_match\_hostname/\_\_init\_\_.py from install of python-url… --- ## [\_grokparsefailure Tag in all parsed logs with multiple grok filter](https://discuss.elastic.co/t/grokparsefailure-tag-in-all-parsed-logs-with-multiple-grok-filter/247200)
**Author:** [@mohammadamin75](https://discuss.elastic.co/u/mohammadamin75)\ **Replies:** 5\ **Last updated:** [September 2, 2020, 5:22pm UTC](https://discuss.elastic.co/t/grokparsefailure-tag-in-all-parsed-logs-with-multiple-grok-filter/247200 "2020-09-02T17:22:34Z")
I am trying to parse minecraft log with Elastic Stack and I'v faced a very strange problem (likely strange for me!) all line of my log get parsed correctly but I got \_grokparsefailure tag in everyone of them. my logsta… --- ## [Netflow v9 not being recieved over UDP](https://discuss.elastic.co/t/netflow-v9-not-being-recieved-over-udp/101103)
**Author:** [@djluko](https://discuss.elastic.co/u/djluko)\ **Replies:** 5\ **Last updated:** [October 4, 2017, 5:02am UTC](https://discuss.elastic.co/t/netflow-v9-not-being-recieved-over-udp/101103 "2017-10-04T05:02:19Z")
Having a very strange problem I'm hoping the logstash/Elastic community will have some guidance on. I'm trying to get logstash 5.6.1 to process Netflow v9 records, then send to a remote Elasticsearch instance, also v5.6… --- ## [Query string operators seem to not be working correctly](https://discuss.elastic.co/t/query-string-operators-seem-to-not-be-working-correctly/17422)
**Author:** [@Erich\_Lin](https://discuss.elastic.co/u/Erich_Lin)\ **Replies:** 5\ **Last updated:** [May 12, 2014, 8:16pm UTC](https://discuss.elastic.co/t/query-string-operators-seem-to-not-be-working-correctly/17422 "2014-05-12T20:16:39Z")
My query is in this format: { "query": { "query\_string": { "default\_field": "\_all", "query": "QUERY", "default\_operator": "AND" } } } Here are the different outputs for QUERY… --- ## [Ingest Node, Multiline, Glassfish Logs](https://discuss.elastic.co/t/ingest-node-multiline-glassfish-logs/70086)
**Author:** [@iamkelvinloke](https://discuss.elastic.co/u/iamkelvinloke)\ **Replies:** 1\ **Last updated:** [December 29, 2016, 9:41am UTC](https://discuss.elastic.co/t/ingest-node-multiline-glassfish-logs/70086 "2016-12-29T09:41:12Z")
This is purely a sharing thread that I hope I can help the beginner like me when they need to figure how to make Multiline works in Ingest Node, for Glassfish logs. PUT \_ingest/pipeline/test { "description": "test"… --- ## [Unknown host exception while using Java APIs to index documents (RestHighLevelClient)](https://discuss.elastic.co/t/unknown-host-exception-while-using-java-apis-to-index-documents-resthighlevelclient/124261)
**Author:** [@RishuK](https://discuss.elastic.co/u/RishuK)\ **Replies:** 1\ **Last updated:** [March 16, 2018, 1:50pm UTC](https://discuss.elastic.co/t/unknown-host-exception-while-using-java-apis-to-index-documents-resthighlevelclient/124261 "2018-03-16T13:50:11Z")
I am using the vpc endpoint for elastic search to index my documents using RestHighLevelClient. I am using java high level rest client v6.2.2 to connect Elasticsearch version 6.0 I am able to access my cluster endpoint… --- ## [Kibana 6.1.1](https://discuss.elastic.co/t/kibana-6-1-1/115923)
**Author:** [@Charles\_Lassiter](https://discuss.elastic.co/u/Charles_Lassiter)\ **Replies:** 6\ **Last updated:** [January 24, 2018, 7:57pm UTC](https://discuss.elastic.co/t/kibana-6-1-1/115923 "2018-01-24T19:57:05Z")
Issue loading Kibana UI. Chrome shows the following error: TypeError {stack: (...), message: "undefined is not a function"} Firefox loads but Discover shows the following: Discover: Content-Type header \[application/x-… --- ## [Stuck at Creating index pattern (6.4.1)](https://discuss.elastic.co/t/stuck-at-creating-index-pattern-6-4-1/153280)
**Author:** [@qiulang](https://discuss.elastic.co/u/qiulang)\ **Replies:** 2\ **Last updated:** [October 23, 2018, 10:08am UTC](https://discuss.elastic.co/t/stuck-at-creating-index-pattern-6-4-1/153280 "2018-10-23T10:08:45Z")
But if I run \_search I can get the result GET records/\_search { "query": { "match\_all": {} } } I tried 6.4.2, same. On a test machine I delete all curl -XDELETE localhost:9200/\* and the problem goes away b… --- ## [FATAL Error : error: 0907B068:PEM routines PEM\_READ\_BIO\_PRIVATEKEY bad password read](https://discuss.elastic.co/t/fatal-error-error-0907b068-pem-routines-pem-read-bio-privatekey-bad-password-read/127900)
**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\ **Replies:** 2\ **Last updated:** [April 16, 2018, 4:12am UTC](https://discuss.elastic.co/t/fatal-error-error-0907b068-pem-routines-pem-read-bio-privatekey-bad-password-read/127900 "2018-04-16T04:12:12Z")
Hi All I am getting this error while executing Kibana.bat Please tell how to resolve it FATAL Error: error:0907B068:PEM routines:PEM\_READ\_BIO\_PRIVATEKEY:bad password read at Error (native) at Object.createSecureCont… --- ## [Field reference failure on HTTP output plugin (message option) \[SOLVED\]](https://discuss.elastic.co/t/field-reference-failure-on-http-output-plugin-message-option-solved/64724)
**Author:** [@kosfar](https://discuss.elastic.co/u/kosfar)\ **Replies:** 2\ **Last updated:** [November 3, 2016, 11:54am UTC](https://discuss.elastic.co/t/field-reference-failure-on-http-output-plugin-message-option-solved/64724 "2016-11-03T11:54:52Z")
Hello, I am failing to send events to an HTTP endpoint using field reference on the "message" setting. If I use the same configuration to send a hardcoded base64 encoded string (and not reference to a field), everything … --- ## [Processing metric sets to reduce data amount](https://discuss.elastic.co/t/processing-metric-sets-to-reduce-data-amount/63372)
**Author:** [@heilaaks](https://discuss.elastic.co/u/heilaaks)\ **Replies:** 2\ **Last updated:** [October 27, 2016, 11:44am UTC](https://discuss.elastic.co/t/processing-metric-sets-to-reduce-data-amount/63372 "2016-10-27T11:44:08Z")
Has anyone succeeded to filter out metricbeat events with metricbeat-5.0.0-rc1-x86\_64.rpm? What I try to do is to get the memory and CPU load statistics only from few selected processes. How ever, I am not able to get th… --- ## [Is it possible to make interactive visualization in KIbana?](https://discuss.elastic.co/t/is-it-possible-to-make-interactive-visualization-in-kibana/211683)
**Author:** [@Coder\_HK](https://discuss.elastic.co/u/Coder_HK)\ **Replies:** 7\ **Last updated:** [December 13, 2019, 10:09am UTC](https://discuss.elastic.co/t/is-it-possible-to-make-interactive-visualization-in-kibana/211683 "2019-12-13T10:09:01Z")
I want to make interactive visualizations in Kibana. Like Suppose you click one visualization or a specific point of a visualization and it opens or takes you to another visualization etc. --- ## [Regex elasticsearch python API](https://discuss.elastic.co/t/regex-elasticsearch-python-api/94383)
**Author:** [@diegoorellanaga](https://discuss.elastic.co/u/diegoorellanaga)\ **Replies:** 1\ **Last updated:** [August 4, 2017, 11:04am UTC](https://discuss.elastic.co/t/regex-elasticsearch-python-api/94383 "2017-08-04T11:04:11Z")
Hi, I have been trying to make a regex ES search using the python API but I have not been able to. In my regex I'm trying to detect 8 consecutive digits: ".(^|\[^\\d\])\\d{8}($|\[^\\d\])." the app in https://regex101.com/ te… --- ## [Kibana logs](https://discuss.elastic.co/t/kibana-logs/312915)
**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\ **Replies:** 8\ **Last updated:** [September 13, 2022, 7:03am UTC](https://discuss.elastic.co/t/kibana-logs/312915 "2022-09-13T07:03:51Z")
Hi, I have been trying for a while to configure a logrotate file to rotate my kibana logs(version 7.16.3),without success. I need my logs to rotate daily and delete logs older than 7 days. The configuration file I am us… --- ## [How make a master node in a 3 node cluster?](https://discuss.elastic.co/t/how-make-a-master-node-in-a-3-node-cluster/324656)
**Author:** [@H\_K7](https://discuss.elastic.co/u/H_K7)\ **Replies:** 5\ **Last updated:** [February 3, 2023, 7:26pm UTC](https://discuss.elastic.co/t/how-make-a-master-node-in-a-3-node-cluster/324656 "2023-02-03T19:26:52Z")
Current 3 node cluster setup I have setup 3 node cluster { "cluster\_name" : "DEMOCLUSTER", "status" : "green", "timed\_out" : false, "number\_of\_nodes" : 3, "number\_of\_data\_nodes" : 3, "active\_primary\_shards"… --- ## [Canvas: preview shows data, elements don't](https://discuss.elastic.co/t/canvas-preview-shows-data-elements-dont/193246)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 5\ **Last updated:** [August 3, 2019, 4:15am UTC](https://discuss.elastic.co/t/canvas-preview-shows-data-elements-dont/193246 "2019-08-03T04:15:25Z")
My first time trying out Canvas and I'm feeling lost. Amazingly lost. No matter what I try, I can get data showing up on preview just fine, even a simple metric shows up nicely on preview... but when I save, I get nothi… --- ## [Logstash 6.3 requires x-pack security?](https://discuss.elastic.co/t/logstash-6-3-requires-x-pack-security/136326)
**Author:** [@Hermann.Hans](https://discuss.elastic.co/u/Hermann.Hans)\ **Replies:** 5\ **Last updated:** [June 19, 2018, 6:13am UTC](https://discuss.elastic.co/t/logstash-6-3-requires-x-pack-security/136326 "2018-06-19T06:13:14Z")
Hey everyone, So I just upgraded our ES cluster to version 6.3. All nodes are up and running, as well as Kibana. Unfortunately our logstash instances refuse to connect to elasticsearch now, claiming that X-Pack Security… --- ## [Wild card queries do not work after normalization](https://discuss.elastic.co/t/wild-card-queries-do-not-work-after-normalization/91386)
**Author:** [@Nazar\_Dzepchuk](https://discuss.elastic.co/u/Nazar_Dzepchuk)\ **Replies:** 5\ **Last updated:** [June 30, 2017, 11:35am UTC](https://discuss.elastic.co/t/wild-card-queries-do-not-work-after-normalization/91386 "2017-06-30T11:35:00Z")
I have next model for elastic: { "dev-dzep": { "aliases": {}, "mappings": { "usersearchmodel": { "properties": { "firstName": { "type": "string", "analyzer": "lo… --- ## [Didnt get the output of cisco router syslog in logstash server](https://discuss.elastic.co/t/didnt-get-the-output-of-cisco-router-syslog-in-logstash-server/58532)
**Author:** [@shamimreza](https://discuss.elastic.co/u/shamimreza)\ **Replies:** 5\ **Last updated:** [March 26, 2017, 9:46am UTC](https://discuss.elastic.co/t/didnt-get-the-output-of-cisco-router-syslog-in-logstash-server/58532 "2017-03-26T09:46:05Z")
OS is CentOS 7.. Packages: logstash-2.2.4-1, elasticsearch-2.3.5-1, kibana-4.4.2-1 Logstash configuration is bellow: input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/log… --- ## [Does logstash support zip format logs from s3 bucket](https://discuss.elastic.co/t/does-logstash-support-zip-format-logs-from-s3-bucket/316877)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 7\ **Last updated:** [October 18, 2022, 6:20pm UTC](https://discuss.elastic.co/t/does-logstash-support-zip-format-logs-from-s3-bucket/316877 "2022-10-18T18:20:38Z")
Hi Team, Just want to know does logstash support the integration of logs from s3 bucket which are in .zip format? Regards --- ## [ElasticSearch pagination - from/size vs Search After for number of hits less than 10k](https://discuss.elastic.co/t/elasticsearch-pagination-from-size-vs-search-after-for-number-of-hits-less-than-10k/305855)
**Author:** [@ano](https://discuss.elastic.co/u/ano)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 3:16pm UTC](https://discuss.elastic.co/t/elasticsearch-pagination-from-size-vs-search-after-for-number-of-hits-less-than-10k/305855 "2022-06-01T15:16:52Z")
Hi, I'm using Elasticsearch, and for paginating the search results, should I use the simple from/size, or should I go with search after. I've read that if the number of hits is less than 10k, then from/size is acceptabl… --- ## [To refresh or not to refresh](https://discuss.elastic.co/t/to-refresh-or-not-to-refresh/139003)
**Author:** [@spalme77](https://discuss.elastic.co/u/spalme77)\ **Replies:** 4\ **Last updated:** [July 7, 2018, 10:33pm UTC](https://discuss.elastic.co/t/to-refresh-or-not-to-refresh/139003 "2018-07-07T22:33:28Z")
Hi all, I am quite new to ElasticSearch and currently in the process of reading the docs and playing with it in parallel. I have a question to an (inconsistent?) part of the documentation: https://www.elastic.co/guide/… --- ## [How do you make geo\_points in Elasticsearch 6.x?](https://discuss.elastic.co/t/how-do-you-make-geo-points-in-elasticsearch-6-x/112729)
**Author:** [@tehowe](https://discuss.elastic.co/u/tehowe)\ **Replies:** 4\ **Last updated:** [December 22, 2017, 4:30pm UTC](https://discuss.elastic.co/t/how-do-you-make-geo-points-in-elasticsearch-6-x/112729 "2017-12-22T16:30:26Z")
Hello, so I think I so far have a pretty good basic foundation for my central logging project set up. I have a number of hosts running filebeat, shipping syslogs, apache2 logs, and the apt history log to one of two iden… --- ## [Can't connect to Kibana install on sandbox hdp with port forwarding](https://discuss.elastic.co/t/cant-connect-to-kibana-install-on-sandbox-hdp-with-port-forwarding/100308)
**Author:** [@SFinaxys](https://discuss.elastic.co/u/SFinaxys)\ **Replies:** 4\ **Last updated:** [September 13, 2017, 9:34am UTC](https://discuss.elastic.co/t/cant-connect-to-kibana-install-on-sandbox-hdp-with-port-forwarding/100308 "2017-09-13T09:34:37Z")
Hello everyone, here is my problem. I want to connect locally to Kibana on localhost:5601 with port forwarding, but it doesn't work. Anybody know how to resolve this ? I already try many things such try to access throu… --- ## [Dec 5th, 2025: \[EN\] You know, for hybrid search](https://discuss.elastic.co/t/dec-5th-2025-en-you-know-for-hybrid-search/383218)
**Author:** [@Kathleen\_DeRusso](https://discuss.elastic.co/u/Kathleen_DeRusso)\ **Replies:** 0\ **Last updated:** [December 5, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-5th-2025-en-you-know-for-hybrid-search/383218 "2025-12-05T08:00:16Z")
If you’ve tried setting up a hybrid search experience, then you know there can be a steep learning curve. This is especially true when combining text search with semantic search results, because the scores returned fr… --- ## [Vector databases with LlamaIndex & Elastic](https://discuss.elastic.co/t/vector-databases-with-llamaindex-elastic/369014)
**Author:** [@Maysen\_Holder](https://discuss.elastic.co/u/Maysen_Holder)\ **Replies:** 0\ **Last updated:** [October 17, 2024, 4:28pm UTC](https://discuss.elastic.co/t/vector-databases-with-llamaindex-elastic/369014 "2024-10-17T16:28:48Z")
Hey there everyone! We are starting a thread to discuss a recent webinar we hosted with LlamaIndex on vector databases. Add in your questions for Elastic and LlamaIndex here! --- ## [Defining "valueType" in Kibana 5.0 script](https://discuss.elastic.co/t/defining-valuetype-in-kibana-5-0-script/56970)
**Author:** [@mrvincnezo](https://discuss.elastic.co/u/mrvincnezo)\ **Replies:** 6\ **Last updated:** [November 15, 2016, 9:48am UTC](https://discuss.elastic.co/t/defining-valuetype-in-kibana-5-0-script/56970 "2016-11-15T09:48:01Z")
How can I define valueType in Kibana 5.0 script? I am trying to define the following script: { "script": { "lang": "painless", "inline": "doc\['someField'\].value", "valueType": "string" } } Similar to this thread Tryi… [Previous page](https://discuss.elastic.co/top.md?page=842&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=844&per_page=50&period=all)