# Top **URL:** https://discuss.elastic.co/top.md?page=844&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 845 --- ## [HA in Kibana](https://discuss.elastic.co/t/ha-in-kibana/41588)
**Author:** [@Guillermo\_Ortiz](https://discuss.elastic.co/u/Guillermo_Ortiz)\ **Replies:** 1\ **Last updated:** [February 12, 2016, 3:11pm UTC](https://discuss.elastic.co/t/ha-in-kibana/41588 "2016-02-12T15:11:57Z")
Hello, is there any way to config HA in Kibana? I didn't see anything in the documentation. --- ## [Deleting old .reporting-\* index](https://discuss.elastic.co/t/deleting-old-reporting-index/273684)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 6:08pm UTC](https://discuss.elastic.co/t/deleting-old-reporting-index/273684 "2021-05-26T18:08:44Z")
Hello, It seems that the .reporting-\* index are created weekly but are not deleted, it is safe to delete it manually? When I create a report I delete it using the Kibana UI after the download, so there is no need to ke… --- ## [Kibana 6.2.1 Discover URL without using index pattern ID](https://discuss.elastic.co/t/kibana-6-2-1-discover-url-without-using-index-pattern-id/126591)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 2\ **Last updated:** [April 6, 2018, 2:04pm UTC](https://discuss.elastic.co/t/kibana-6-2-1-discover-url-without-using-index-pattern-id/126591 "2018-04-06T14:04:42Z")
Hi All, I am trying to construct a deterministic discover URL but index patterns are mapped to UUIDs and the discover URL uses this ID in the URL. Eg: http://kibana.url.domain:9000/app/kibana#/discover?...&\_a=(columns:… --- ## [How to delete index Type from index using java api?](https://discuss.elastic.co/t/how-to-delete-index-type-from-index-using-java-api/7461)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 2\ **Last updated:** [April 25, 2012, 10:58am UTC](https://discuss.elastic.co/t/how-to-delete-index-type-from-index-using-java-api/7461 "2012-04-25T10:58:19Z")
Hi I want to delete index type from index using java. Thanks --- ## [Set indices.fielddata.cache.size without restarting node?](https://discuss.elastic.co/t/set-indices-fielddata-cache-size-without-restarting-node/59365)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 3\ **Last updated:** [August 31, 2016, 8:30pm UTC](https://discuss.elastic.co/t/set-indices-fielddata-cache-size-without-restarting-node/59365 "2016-08-31T20:30:43Z")
Hi there guys. I'm trying to set my indices.fielddata.cache.size to 75% (with a circuit breaker of 60%, so we get alerts before we're close to out of memory), and I just had a couple of questions. First, is that number… --- ## [After I restart ES, some shard remain unassigned](https://discuss.elastic.co/t/after-i-restart-es-some-shard-remain-unassigned/44402)
**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\ **Replies:** 3\ **Last updated:** [March 18, 2016, 3:19pm UTC](https://discuss.elastic.co/t/after-i-restart-es-some-shard-remain-unassigned/44402 "2016-03-18T15:19:42Z")
Hi I have a elasticsearch service running on one node. After I restart the ES. Some shard remain unassigned. \[sflow@ES01 bin\]$ curl -XGET 'ES01:9200/\_cat/shards?pretty' sflow\_51452355200 3 p STARTED 1000660 41… --- ## [Working EsIntegrationTest example](https://discuss.elastic.co/t/working-esintegrationtest-example/108804)
**Author:** [@joel-costigliola](https://discuss.elastic.co/u/joel-costigliola)\ **Replies:** 2\ **Last updated:** [November 23, 2017, 3:35am UTC](https://discuss.elastic.co/t/working-esintegrationtest-example/108804 "2017-11-23T03:35:39Z")
Hi, I really struggled to get a working EsIntegrationTest but finally did it, it would have been great to have that out of the box in ES, here's what I did (it should work with maven and gradle): Hope that helps C… --- ## [Error: Unmet requirement "kibana" for plugin "elasticsearch"](https://discuss.elastic.co/t/error-unmet-requirement-kibana-for-plugin-elasticsearch/117949)
**Author:** [@FareehaNaaz](https://discuss.elastic.co/u/FareehaNaaz)\ **Replies:** 3\ **Last updated:** [February 8, 2018, 3:59am UTC](https://discuss.elastic.co/t/error-unmet-requirement-kibana-for-plugin-elasticsearch/117949 "2018-02-08T03:59:54Z")
Hi, i was trying to create my development environment and when i start kibana this is what i see, couldn't find any solution to overcome this error. \[kibana6.0.0@sgpltrainingdb kibana\]$ npm -g start kibana@7.0.0-alp… --- ## [Unable to get Filebeat setup correctly](https://discuss.elastic.co/t/unable-to-get-filebeat-setup-correctly/251651)
**Author:** [@jonckvanderkogel](https://discuss.elastic.co/u/jonckvanderkogel)\ **Replies:** 7\ **Last updated:** [October 12, 2020, 9:09am UTC](https://discuss.elastic.co/t/unable-to-get-filebeat-setup-correctly/251651 "2020-10-12T09:09:15Z")
Hi everyone, I'm trying to get Filebeat set up on a local Mac Mini so it will ingest log files of a process to Elasticsearch. The log files contain a custom JSON format. I got it sort of working but in Elasticsearch the… --- ## [Bulk index failure](https://discuss.elastic.co/t/bulk-index-failure/39590)
**Author:** [@vinod\_rao](https://discuss.elastic.co/u/vinod_rao)\ **Replies:** 1\ **Last updated:** [January 19, 2016, 9:16pm UTC](https://discuss.elastic.co/t/bulk-index-failure/39590 "2016-01-19T21:16:13Z")
Hi Team, I Can see the below error during the bulk sync. Unable to execute bulk index: failure in bulk execution: Can anyone help me to understand the above error. --- ## [Canvas timelion multiple lines](https://discuss.elastic.co/t/canvas-timelion-multiple-lines/241473)
**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\ **Replies:** 4\ **Last updated:** [August 16, 2020, 2:07pm UTC](https://discuss.elastic.co/t/canvas-timelion-multiple-lines/241473 "2020-08-16T14:07:45Z")
Hello I am trying to use timelion on a canvas line chart, but when I use multiple lines like: .es(index=ict\*,timefield=time\_start\_ts, metric='count'), .es(index=ict\*,timefield=time\_start\_ts, metric='count', offset=-1d)… --- ## [Elastic Search AllPermission security manager issue](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676)
**Author:** [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\ **Replies:** 4\ **Last updated:** [September 15, 2018, 6:01pm UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676 "2018-09-15T18:01:27Z")
I am running elastic search with non loop-back IP (production mode) on Windows. To run ES, I am forking it out (elasticsearch.bat) from a Java app using ProcessBuilder. However, it is giving me following error: \[2018-… --- ## [Elastic Stack: Logging Lab 4 - The second problem](https://discuss.elastic.co/t/elastic-stack-logging-lab-4-the-second-problem/102297)
**Author:** [@Alice](https://discuss.elastic.co/u/Alice)\ **Replies:** 4\ **Last updated:** [October 2, 2017, 2:22pm UTC](https://discuss.elastic.co/t/elastic-stack-logging-lab-4-the-second-problem/102297 "2017-10-02T14:22:32Z")
Hi, I just finished Elastic Stack: Logging Lab 4. However, when I looked at data in Kibana, what I got is different from what is in the tutorial pdf. The following is the screenshot from my Kibana: \[6666\] The lines I … --- ## [Query time synonyms application](https://discuss.elastic.co/t/query-time-synonyms-application/13265)
**Author:** [@kul](https://discuss.elastic.co/u/kul)\ **Replies:** 4\ **Last updated:** [August 22, 2013, 7:31am UTC](https://discuss.elastic.co/t/query-time-synonyms-application/13265 "2013-08-22T07:31:01Z")
Is it possible to apply synonyms at query time? Or any other method to avoid reindexing the whole data again with change in synonym definitions ? for myuse case, typical synonyms looks like camelcase =\> CamelCase… --- ## [Add environment variables on filebeat start](https://discuss.elastic.co/t/add-environment-variables-on-filebeat-start/152855)
**Author:** [@leslie](https://discuss.elastic.co/u/leslie)\ **Replies:** 5\ **Last updated:** [October 22, 2018, 2:53pm UTC](https://discuss.elastic.co/t/add-environment-variables-on-filebeat-start/152855 "2018-10-22T14:53:11Z")
i am using filebeat 6.0.0 which without add\_host\_metadata processor; and my os is Windows. now i hope to add an IP field to the filebeat result of all modules, but i don't want to set an Environment Variable globally. D… --- ## [How to split and filtring xml in LogStash](https://discuss.elastic.co/t/how-to-split-and-filtring-xml-in-logstash/90065)
**Author:** [@mohammed\_cherif](https://discuss.elastic.co/u/mohammed_cherif)\ **Replies:** 8\ **Last updated:** [June 20, 2017, 1:51pm UTC](https://discuss.elastic.co/t/how-to-split-and-filtring-xml-in-logstash/90065 "2017-06-20T13:51:03Z")
I have the following logstash conf file: input { file { path =\> "C:/logstash/data/test.xml" start\_position =\> beginning codec =\> multiline { pattern =\> "^\<\\?provi… --- ## [When Logstash sends ACK to input source(Example- Filebeat)](https://discuss.elastic.co/t/when-logstash-sends-ack-to-input-source-example-filebeat/93147)
**Author:** [@prashant.bajpai](https://discuss.elastic.co/u/prashant.bajpai)\ **Replies:** 2\ **Last updated:** [July 17, 2017, 11:46am UTC](https://discuss.elastic.co/t/when-logstash-sends-ack-to-input-source-example-filebeat/93147 "2017-07-17T11:46:16Z")
I have read about the at-least-once-delivery commitment of filebeat and what I understood is that until the ack of sent logline is not received by filebeat, that line will be sent again (in case of filebeat re-start). N… --- ## [Rule status is always pending](https://discuss.elastic.co/t/rule-status-is-always-pending/312424)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [August 19, 2022, 4:11pm UTC](https://discuss.elastic.co/t/rule-status-is-always-pending/312424 "2022-08-19T16:11:51Z")
Hello World! Via Kibana -\> Management -\> Alerts and Insights -\> Rules and Connectors - all of my rules status is always Pending. per Get Alerting framework health API | Kibana Guide \[7.17\] | Elastic GET /api/alerting… --- ## [Word Count](https://discuss.elastic.co/t/word-count/200753)
**Author:** [@shampoo](https://discuss.elastic.co/u/shampoo)\ **Replies:** 3\ **Last updated:** [September 25, 2019, 3:35pm UTC](https://discuss.elastic.co/t/word-count/200753 "2019-09-25T15:35:54Z")
Hi, I am trying to do the following: Perform a standard search on a series of documents with a given search term. (easy enough) Count the amount of times another series of words appears within that result set. The qu… --- ## [Specify date histogram offset in Kibana](https://discuss.elastic.co/t/specify-date-histogram-offset-in-kibana/83169)
**Author:** [@mandycoston](https://discuss.elastic.co/u/mandycoston)\ **Replies:** 2\ **Last updated:** [April 21, 2017, 10:53am UTC](https://discuss.elastic.co/t/specify-date-histogram-offset-in-kibana/83169 "2017-04-21T10:53:12Z")
Hi, How can I specify the date histogram offset for a data table visualization in Kibana? The week aggregations start are Monday-Monday but I'd like Sunday-Sunday. I tried putting this in the json input { "aggs"… --- ## [Conditional Output Not Working](https://discuss.elastic.co/t/conditional-output-not-working/87477)
**Author:** [@bjmaynard01](https://discuss.elastic.co/u/bjmaynard01)\ **Replies:** 1\ **Last updated:** [May 29, 2017, 7:00pm UTC](https://discuss.elastic.co/t/conditional-output-not-working/87477 "2017-05-29T19:00:38Z")
I have come across an interesting problem that is causing me to bash my head against the wall. I'm trying to parse nginx access logs and eventually dump them into ES. However, for testing purposes, I am using stdout. in … --- ## [How to remove a xml attribute in xml filter?](https://discuss.elastic.co/t/how-to-remove-a-xml-attribute-in-xml-filter/38959)
**Author:** [@Sudeesh](https://discuss.elastic.co/u/Sudeesh)\ **Replies:** 4\ **Last updated:** [January 14, 2016, 9:45am UTC](https://discuss.elastic.co/t/how-to-remove-a-xml-attribute-in-xml-filter/38959 "2016-01-14T09:45:52Z")
XML File: i want to remove the tag test-method which contains attribute is-config=true. This tag is repeated. I only want to get the value of the name=testcaseName from the tag test-method. Conf file: --- ## [ElasticSearch exception: java.lang.IllegalStateException: cannot send more responses than requests](https://discuss.elastic.co/t/elasticsearch-exception-java-lang-illegalstateexception-cannot-send-more-responses-than-requests/5461)
**Author:** [@pcdinh](https://discuss.elastic.co/u/pcdinh)\ **Replies:** 4\ **Last updated:** [November 22, 2011, 12:42pm UTC](https://discuss.elastic.co/t/elasticsearch-exception-java-lang-illegalstateexception-cannot-send-more-responses-than-requests/5461 "2011-11-22T12:42:01Z")
Hi, I got a lot of exceptions in the log file \[2011-09-27 08:39:56,940\]\[WARN \]\[http.netty \] \[Professor X\] Caught exception while handling client http traffic, closing connection java.lang.IllegalSt… --- ## [Error - Invalid or missing build flavor \[oss\] for ES server upgrade to 7.10](https://discuss.elastic.co/t/error-invalid-or-missing-build-flavor-oss-for-es-server-upgrade-to-7-10/359601)
**Author:** [@jdinla](https://discuss.elastic.co/u/jdinla)\ **Replies:** 5\ **Last updated:** [May 18, 2024, 7:28am UTC](https://discuss.elastic.co/t/error-invalid-or-missing-build-flavor-oss-for-es-server-upgrade-to-7-10/359601 "2024-05-18T07:28:02Z")
Hi, I upgraded ES server on AWS from 6.8 to 7.10 (this is the latest offered for now). Until now I have been using Restclient 7.17.x. After upgrading the server I started getting - Note: This works fine on docker local… --- ## [uiExport options](https://discuss.elastic.co/t/uiexport-options/103601)
**Author:** [@havidarou](https://discuss.elastic.co/u/havidarou)\ **Replies:** 5\ **Last updated:** [October 31, 2017, 11:21am UTC](https://discuss.elastic.co/t/uiexport-options/103601 "2017-10-31T11:21:23Z")
Hi, I am developing an app type plugin, and I've been lookint into Kibana code. I've noticed this in the index.js of the Kibana core plugin itself: app: { id: 'kibana', title: 'Kibana', listed… --- ## [Exception installing shield 2.4.0](https://discuss.elastic.co/t/exception-installing-shield-2-4-0/72790)
**Author:** [@sss](https://discuss.elastic.co/u/sss)\ **Replies:** 5\ **Last updated:** [January 30, 2017, 11:52am UTC](https://discuss.elastic.co/t/exception-installing-shield-2-4-0/72790 "2017-01-30T11:52:02Z")
Hi, i get this error while installing shield 2.4.0 Caused by: org.elasticsearch.common.inject.CreationException: Guice creation errors: 1) No implementation for org.elasticsearch.license.plugin.core.LicenseeRegistry… --- ## [Problem when loading CSV file using logstash](https://discuss.elastic.co/t/problem-when-loading-csv-file-using-logstash/187169)
**Author:** [@soufiane1](https://discuss.elastic.co/u/soufiane1)\ **Replies:** 7\ **Last updated:** [June 25, 2019, 9:39am UTC](https://discuss.elastic.co/t/problem-when-loading-csv-file-using-logstash/187169 "2019-06-25T09:39:13Z")
Hello everyone, I am trying to load a CSV file with the following config : ############################################################################################################### input { file { path =\> "C:… --- ## [Logstash high cpu usage when idle](https://discuss.elastic.co/t/logstash-high-cpu-usage-when-idle/111600)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [December 13, 2017, 4:31pm UTC](https://discuss.elastic.co/t/logstash-high-cpu-usage-when-idle/111600 "2017-12-13T16:31:24Z")
I'm running ELK stack: elk & beats: # rpm -q elasticsearch logstash kibana elasticsearch-6.0.1-1.noarch logstash-6.0.1-1.noarch kibana-6.0.1-1.x86\_64 # rpm -q filebeat metricbeat filebeat-6.0.1-1.x86\_64 metricbeat-6.0.… --- ## [Unexpected token \['groovy'\] was expecting one of \[{\, ';'}\]](https://discuss.elastic.co/t/unexpected-token-groovy-was-expecting-one-of-eof/97256)
**Author:** [@JAYALAKSHMI](https://discuss.elastic.co/u/JAYALAKSHMI)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 1:02pm UTC](https://discuss.elastic.co/t/unexpected-token-groovy-was-expecting-one-of-eof/97256 "2017-08-16T13:02:36Z")
We were using the below groovy script in 1.7.3 and now we are upgrading to 5.5.0 and the below groovy script is throwing “unexpected token \[‘groovy’\] was expecting one of \[{, ‘;’}\].” message. Can you please help us in re… --- ## [How to display the data of the percentage that has been written in a row](https://discuss.elastic.co/t/how-to-display-the-data-of-the-percentage-that-has-been-written-in-a-row/51370)
**Author:** [@tak](https://discuss.elastic.co/u/tak)\ **Replies:** 7\ **Last updated:** [June 6, 2016, 4:36am UTC](https://discuss.elastic.co/t/how-to-display-the-data-of-the-percentage-that-has-been-written-in-a-row/51370 "2016-06-06T04:36:52Z")
For example, it has been written with the 50% and 70% in the CSV file. I enter the CVS file in logstash. Do Kibana will now be displayed in the graph as a percentage? --- ## [Sort in Java API client](https://discuss.elastic.co/t/sort-in-java-api-client/305368)
**Author:** [@vishalop0993](https://discuss.elastic.co/u/vishalop0993)\ **Replies:** 0\ **Last updated:** [May 23, 2022, 4:59am UTC](https://discuss.elastic.co/t/sort-in-java-api-client/305368 "2022-05-23T04:59:21Z")
Hi Experts, I am using new java API client to connect with Elasticsearch. My requirement is to search documents in sorted order of given parameters. I have written the below code to search and sort by "customer". … --- ## [How to use greater than operator in Json Input in Kibana visualisation to get the data which is greater than a value](https://discuss.elastic.co/t/how-to-use-greater-than-operator-in-json-input-in-kibana-visualisation-to-get-the-data-which-is-greater-than-a-value/251928)
**Author:** [@Dubru](https://discuss.elastic.co/u/Dubru)\ **Replies:** 3\ **Last updated:** [October 14, 2020, 7:26am UTC](https://discuss.elastic.co/t/how-to-use-greater-than-operator-in-json-input-in-kibana-visualisation-to-get-the-data-which-is-greater-than-a-value/251928 "2020-10-14T07:26:18Z")
My actual requirement is I would like to display the data in kibana visualisation only if the response.time is greater than 10 seconds I've the field response.time and I am using this field to get the average response t… --- ## [Issue with decode\_json\_fields processor](https://discuss.elastic.co/t/issue-with-decode-json-fields-processor/250965)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 8\ **Last updated:** [October 5, 2020, 11:59am UTC](https://discuss.elastic.co/t/issue-with-decode-json-fields-processor/250965 "2020-10-05T11:59:21Z")
Hi, Im shipping aws logs to elastic with the use of functionbeat. I have recently added the following processor to my configuration, so that im able decode the json that is usually in the message field. processors… --- ## [Sometimes beginning of log line is missing resulting in \_jsonparsefailed tag](https://discuss.elastic.co/t/sometimes-beginning-of-log-line-is-missing-resulting-in-jsonparsefailed-tag/209022)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 8\ **Last updated:** [December 12, 2019, 9:12am UTC](https://discuss.elastic.co/t/sometimes-beginning-of-log-line-is-missing-resulting-in-jsonparsefailed-tag/209022 "2019-12-12T09:12:13Z")
Hi, I am on elastic stack 7.4.2 and using following pipeline: log -\> filebeat -\> redis (TLS via stunnel) -\> logstash-\> elasticsearch In logstash I use pipeline to pipeline communication, so that different inputs the s… --- ## [How to filter not\_analyzed index using query\_string](https://discuss.elastic.co/t/how-to-filter-not-analyzed-index-using-query-string/118970)
**Author:** [@Dharmraj](https://discuss.elastic.co/u/Dharmraj)\ **Replies:** 3\ **Last updated:** [February 8, 2018, 8:02am UTC](https://discuss.elastic.co/t/how-to-filter-not-analyzed-index-using-query-string/118970 "2018-02-08T08:02:23Z")
PUT index /\_mapping /type { "entityName": { "type": "string" ,"index": "not\_analyzed" ,"doc\_values": true} } PUT index/doc/1 { \` "entityName": "MML Code"\` } GET/index/\_search{ 'query': { … --- ## [Elasticsearch 1.4.4 Setup Problem](https://discuss.elastic.co/t/elasticsearch-1-4-4-setup-problem/68624)
**Author:** [@ali.q](https://discuss.elastic.co/u/ali.q)\ **Replies:** 8\ **Last updated:** [December 13, 2016, 2:45pm UTC](https://discuss.elastic.co/t/elasticsearch-1-4-4-setup-problem/68624 "2016-12-13T14:45:16Z")
Hi all, I'm totally new here, so please forgive me if I'm posing in the wrong category or ask a newbie question. I've setup Elasticsearch 1.4.4 for a SugarCRM system and I'm not quite sure if it is working fine or no… --- ## [Multiple file input and GROK filters and single ES output](https://discuss.elastic.co/t/multiple-file-input-and-grok-filters-and-single-es-output/51059)
**Author:** [@sukhada369](https://discuss.elastic.co/u/sukhada369)\ **Replies:** 3\ **Last updated:** [May 31, 2016, 11:36am UTC](https://discuss.elastic.co/t/multiple-file-input-and-grok-filters-and-single-es-output/51059 "2016-05-31T11:36:04Z")
I am using a single Logstash config file for multiple file inputs and grok filters and single ES output. The problem is that, it goes in infinite loop and I don't know why. I created separate files to check on if GROK is… --- ## [Bug: memory leak while scrolling over index](https://discuss.elastic.co/t/bug-memory-leak-while-scrolling-over-index/12789)
**Author:** [@Ralf\_Schmitt](https://discuss.elastic.co/u/Ralf_Schmitt)\ **Replies:** 3\ **Last updated:** [July 21, 2013, 8:17pm UTC](https://discuss.elastic.co/t/bug-memory-leak-while-scrolling-over-index/12789 "2013-07-21T20:17:52Z")
Hi all, I'm trying to scroll over all documents of an ElasticSearch Index using a match\_all query. I've set ES\_HEAP\_SIZE to 8G but I'm not able to complete the operation, because elasticsearch runs out of memory (se… --- ## [Saving percolator with query string and wildcard fields search](https://discuss.elastic.co/t/saving-percolator-with-query-string-and-wildcard-fields-search/293991)
**Author:** [@vohanka](https://discuss.elastic.co/u/vohanka)\ **Replies:** 8\ **Last updated:** [March 17, 2022, 1:33pm UTC](https://discuss.elastic.co/t/saving-percolator-with-query-string-and-wildcard-fields-search/293991 "2022-03-17T13:33:20Z")
Hello I am trying to save percolator query with code which looks like this "query": "Content.\\\\\*:apple OR android" but i got error response which looks like this No field mapping can be found for the field with name … --- ## [Message: listener timeout after waiting for \[30000\] ms](https://discuss.elastic.co/t/message-listener-timeout-after-waiting-for-30000-ms/133733)
**Author:** [@NonameGK](https://discuss.elastic.co/u/NonameGK)\ **Replies:** 0\ **Last updated:** [May 29, 2018, 6:19pm UTC](https://discuss.elastic.co/t/message-listener-timeout-after-waiting-for-30000-ms/133733 "2018-05-29T18:19:45Z")
I am trying to implement simple CRUD operation on Elasticsearch using groovy and grails some time i am able to create an index and some time i am getting below mentioned exception that is time out, i have trying some ma… --- ## [Unable to ignore @timestamp in logs](https://discuss.elastic.co/t/unable-to-ignore-timestamp-in-logs/267141)
**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\ **Replies:** 6\ **Last updated:** [March 15, 2021, 4:22pm UTC](https://discuss.elastic.co/t/unable-to-ignore-timestamp-in-logs/267141 "2021-03-15T16:22:59Z")
Hi, We send multiple types of logs to Logstash and one of them uploaded JSON logs with an "@timestamp" field. Logstash tries to parse that field and when it fails it copies the value into "\_@timestamp" and throws a warn… --- ## [Delete .reporting index](https://discuss.elastic.co/t/delete-reporting-index/265417)
**Author:** [@Tiephen](https://discuss.elastic.co/u/Tiephen)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 8:37am UTC](https://discuss.elastic.co/t/delete-reporting-index/265417 "2021-02-26T08:37:48Z")
Hello, I use watcher to generate lots of pdf report. I have automatically many .reporting index each 3 days so too many index in my elastic cluster. I would like try to delete automatically index after some time. Is … --- ## [Filebeat automatically stops](https://discuss.elastic.co/t/filebeat-automatically-stops/134284)
**Author:** [@vschakka](https://discuss.elastic.co/u/vschakka)\ **Replies:** 2\ **Last updated:** [June 4, 2018, 3:21am UTC](https://discuss.elastic.co/t/filebeat-automatically-stops/134284 "2018-06-04T03:21:17Z")
Hi, I am using 6.2.3 version filebeat. Issue is my filebeat service gets automatically down very frequently. But when ever i made it up it will crawl properly and log data into elasticsearch properly for certain durati… --- ## [Get sum value from distinct aggregation query](https://discuss.elastic.co/t/get-sum-value-from-distinct-aggregation-query/93946)
**Author:** [@Tamizh](https://discuss.elastic.co/u/Tamizh)\ **Replies:** 1\ **Last updated:** [July 20, 2017, 8:07pm UTC](https://discuss.elastic.co/t/get-sum-value-from-distinct-aggregation-query/93946 "2017-07-20T20:07:39Z")
Actually, i am trying to implement the following MySQL query in elasticsearch. SELECT SUM(FIELD\_1) FROM (SELECT FIELD\_1 FROM TABLE GROUP BY FIELD\_2) AS UNIQUE\_TABLE I tried the following query in elasticsearch GE… --- ## [Simple? Where's the URL to query elastic cloud instance?](https://discuss.elastic.co/t/simple-wheres-the-url-to-query-elastic-cloud-instance/338318)
**Author:** [@midi-man](https://discuss.elastic.co/u/midi-man)\ **Replies:** 4\ **Last updated:** [July 14, 2023, 6:20pm UTC](https://discuss.elastic.co/t/simple-wheres-the-url-to-query-elastic-cloud-instance/338318 "2023-07-14T18:20:33Z")
A hopefully simple question: Where is the URL to query an elastic cloud instance for a given deployment? The docs say to always use api dot elastic-cloud dot com/api/v1/deployments but this doesn't appear to work for… --- ## [Logstash grok / dissect filter over array](https://discuss.elastic.co/t/logstash-grok-dissect-filter-over-array/151992)
**Author:** [@ftds](https://discuss.elastic.co/u/ftds)\ **Replies:** 4\ **Last updated:** [October 11, 2018, 1:57pm UTC](https://discuss.elastic.co/t/logstash-grok-dissect-filter-over-array/151992 "2018-10-11T13:57:41Z")
Hello, we have a log line that we want to parse with Logstash that looks like this: from=\ to=\ to=\ to=\ To parse this line, we use the Logsta… --- ## [Filebeat for Kubernetes](https://discuss.elastic.co/t/filebeat-for-kubernetes/148152)
**Author:** [@tehho](https://discuss.elastic.co/u/tehho)\ **Replies:** 4\ **Last updated:** [September 12, 2018, 12:07pm UTC](https://discuss.elastic.co/t/filebeat-for-kubernetes/148152 "2018-09-12T12:07:43Z")
Im using Kubernetes and would like to add filebeat to all stdouts. I have followed: https://raw.githubusercontent.com/elastic/beats/master/deploy/kubernetes/filebeat-kubernetes.yaml and have the filebeat running. How e… --- ## [MS SQL Transaction Log Errors](https://discuss.elastic.co/t/ms-sql-transaction-log-errors/194220)
**Author:** [@SvenC56](https://discuss.elastic.co/u/SvenC56)\ **Replies:** 5\ **Last updated:** [August 9, 2019, 11:50am UTC](https://discuss.elastic.co/t/ms-sql-transaction-log-errors/194220 "2019-08-09T11:50:01Z")
Hi, I'm running the MSSQL Beat and I get some error messages. This is my connection string: sqlserver://login:password@localhost:1433/instance\_name In the explorer field I get the following error message in the trans… --- ## [Build plugin for Kibana 6.4.0](https://discuss.elastic.co/t/build-plugin-for-kibana-6-4-0/145884)
**Author:** [@jesusgn90](https://discuss.elastic.co/u/jesusgn90)\ **Replies:** 5\ **Last updated:** [August 24, 2018, 12:57pm UTC](https://discuss.elastic.co/t/build-plugin-for-kibana-6-4-0/145884 "2018-08-24T12:57:07Z")
Hello team, can't make my plugin works at all. My plugin has some typescript files, also it has some imports from Kibana itself. When I use Kibana downloaded from the GitHub branch, my plugin works using --dev and witho… --- ## [INFO Connecting error publishing events (retrying): 403 Forbidden?](https://discuss.elastic.co/t/info-connecting-error-publishing-events-retrying-403-forbidden/60485)
**Author:** [@poper](https://discuss.elastic.co/u/poper)\ **Replies:** 5\ **Last updated:** [September 16, 2016, 4:32am UTC](https://discuss.elastic.co/t/info-connecting-error-publishing-events-retrying-403-forbidden/60485 "2016-09-16T04:32:05Z")
Hi There, I have installed winlogbeat 5.0-alpha5 on my server 2003 64bit running cas role for exchange 2007. I'm install already but when I start the service I got message from winlogbeat said: 2016-09-14T17:14:08+07… [Previous page](https://discuss.elastic.co/top.md?page=843&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=845&per_page=50&period=all)