# Top

**URL:** https://discuss.elastic.co/top.md?page=856&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 857

---

## [Wmi: cannot load field "CommandLine" into a "string": unsupported type (\<nil\>)](https://discuss.elastic.co/t/wmi-cannot-load-field-commandline-into-a-string-unsupported-type-nil/123931)

<div class="topic-metadata">

**Author:** [@phil.zac](https://discuss.elastic.co/u/phil.zac)\
**Replies:** 7\
**Last updated:** [March 14, 2018, 6:59pm UTC](https://discuss.elastic.co/t/wmi-cannot-load-field-commandline-into-a-string-unsupported-type-nil/123931 "2018-03-14T18:59:58Z")

</div>

Hi, I am using elasticsearch-5.6.1 kibana-5.6.1 logstash-5.6.1 metricbeat-5.6.1 packetbeat-5.6.1 x-pack-5.6.1 for Windows Server 2012 R2 I am working on Metric beats and find this error. 2018/03/14 15:16:48.733…

---

## [LogStash file plugin offline](https://discuss.elastic.co/t/logstash-file-plugin-offline/90511)

<div class="topic-metadata">

**Author:** [@ShashiK](https://discuss.elastic.co/u/ShashiK)\
**Replies:** 7\
**Last updated:** [June 27, 2017, 5:34pm UTC](https://discuss.elastic.co/t/logstash-file-plugin-offline/90511 "2017-06-27T17:34:43Z")

</div>

Hi, I am unable to install the logstash file input plugin. On checking the output i found that I need to provide a proxy with access to Internet. I do not have an Org proxy to download. Is it possible to download the fil…

---

## [Marple, a new Lucene index inspector with REST API & GUI](https://discuss.elastic.co/t/marple-a-new-lucene-index-inspector-with-rest-api-gui/76645)

<div class="topic-metadata">

**Author:** [@Charlie\_Hull](https://discuss.elastic.co/u/Charlie_Hull)\
**Replies:** 1\
**Last updated:** [March 21, 2017, 3:30pm UTC](https://discuss.elastic.co/t/marple-a-new-lucene-index-inspector-with-rest-api-gui/76645 "2017-03-21T15:30:55Z")

</div>

We've just released the first version of Marple, a tool to help you inspect the content of Lucene indexes (which underlie Elasticsearch). Feedback and contributions most welcome! Here's the blog post with pictures and li…

---

## [Elasticsearch api returning empty response (python)](https://discuss.elastic.co/t/elasticsearch-api-returning-empty-response-python/344238)

<div class="topic-metadata">

**Author:** [@Aidan\_Campbell](https://discuss.elastic.co/u/Aidan_Campbell)\
**Replies:** 3\
**Last updated:** [October 12, 2023, 3:10pm UTC](https://discuss.elastic.co/t/elasticsearch-api-returning-empty-response-python/344238 "2023-10-12T15:10:46Z")

</div>

I am trying to retrieve elasticsearch data in python using the elasticsearch rest api. When I attempt to call the search api using the requests python library, the elasticsearch python client, or directly from the comma…

---

## [Elastic Agent (Defender) – Public + On-Prem Deployment Question](https://discuss.elastic.co/t/elastic-agent-defender-public-on-prem-deployment-question/383515)

<div class="topic-metadata">

**Author:** [@Animate4498](https://discuss.elastic.co/u/Animate4498)\
**Replies:** 8\
**Last updated:** [January 5, 2026, 1:08pm UTC](https://discuss.elastic.co/t/elastic-agent-defender-public-on-prem-deployment-question/383515 "2026-01-05T13:08:11Z")

</div>

My goal is to deploy the Elastic Agent with the Defender integration as an XDR solution on our clients and forward all security alerts to our on-prem SIEM. Fleet and the rest of the Elastic components are reachable from …

---

## [Elasticsearch input query with sorting](https://discuss.elastic.co/t/elasticsearch-input-query-with-sorting/229178)

<div class="topic-metadata">

**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\
**Replies:** 0\
**Last updated:** [April 22, 2020, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch-input-query-with-sorting/229178 "2020-04-22T05:53:41Z")

</div>

Hi , On dev tools i am able to see the query working and fetching results as expected. GET index/\_search { "query": { "query\_string": { "query": "FT52402" } }, "sort": \[ { "@timestamp": { …

---

## [Elastic Security Statement for CVE-2024-3094, xz versions 5.6.0 and 5.6.1](https://discuss.elastic.co/t/elastic-security-statement-for-cve-2024-3094-xz-versions-5-6-0-and-5-6-1/357894)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [April 22, 2024, 9:19am UTC](https://discuss.elastic.co/t/elastic-security-statement-for-cve-2024-3094-xz-versions-5-6-0-and-5-6-1/357894 "2024-04-22T09:19:38Z")

</div>

Elastic Products are not affected by this issue. On March 29th, 2024, Elastic became aware of the malicious code planted in the xz package. Elastic has performed an investigation to identify any Elastic Products which …

---

## [Get min value with timestamp](https://discuss.elastic.co/t/get-min-value-with-timestamp/170700)

<div class="topic-metadata">

**Author:** [@itsroot](https://discuss.elastic.co/u/itsroot)\
**Replies:** 3\
**Last updated:** [March 8, 2019, 12:28pm UTC](https://discuss.elastic.co/t/get-min-value-with-timestamp/170700 "2019-03-08T12:28:20Z")

</div>

Hello, I'm quite new to kibana and elasticsearch and I'm currently at creating a dashboard. I have a series of numbers and I want to know the min value of a given period of time. But I need to know at which time the val…

---

## [Elasticsearch Java API update document GetResult is always null](https://discuss.elastic.co/t/elasticsearch-java-api-update-document-getresult-is-always-null/54272)

<div class="topic-metadata">

**Author:** [@VenkateshK](https://discuss.elastic.co/u/VenkateshK)\
**Replies:** 3\
**Last updated:** [June 29, 2016, 1:20pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-update-document-getresult-is-always-null/54272 "2016-06-29T13:20:29Z")

</div>

I am trying to update a document through Java Update API. I am using UpdateRequest to send a request for update. UpdateRequest updateRequest = new UpdateRequest(index, type, id).script( new Script("ctx.\_s…

---

## [Unsupported/Unknown Elasticsearch version 2.1.1](https://discuss.elastic.co/t/unsupported-unknown-elasticsearch-version-2-1-1/40246)

<div class="topic-metadata">

**Author:** [@ni4ni](https://discuss.elastic.co/u/ni4ni)\
**Replies:** 3\
**Last updated:** [January 28, 2016, 8:07am UTC](https://discuss.elastic.co/t/unsupported-unknown-elasticsearch-version-2-1-1/40246 "2016-01-28T08:07:46Z")

</div>

Hello I am trying to integrate ElsticSearch with Hive for the first time (a plain Apache Hadoop). I am able to create an external table in Hive stored by org.elasticsearch.hadoop.hive.EsStorageHandler so I guess the AU…

---

## [Create-or-replace index programmatically](https://discuss.elastic.co/t/create-or-replace-index-programmatically/234344)

<div class="topic-metadata">

**Author:** [@mmu](https://discuss.elastic.co/u/mmu)\
**Replies:** 5\
**Last updated:** [May 29, 2020, 8:01am UTC](https://discuss.elastic.co/t/create-or-replace-index-programmatically/234344 "2020-05-29T08:01:25Z")

</div>

Hi, I have a JAVA web service that uses an ES index for caching. Sometimes the field/index definitions change so the ES index must be re-created. What I am looking for is a solution pattern (or API function) that: Cr…

---

## [ELK stack is not stable on Azure](https://discuss.elastic.co/t/elk-stack-is-not-stable-on-azure/169617)

<div class="topic-metadata">

**Author:** [@Ronak\_Patel1](https://discuss.elastic.co/u/Ronak_Patel1)\
**Replies:** 5\
**Last updated:** [February 26, 2019, 11:02pm UTC](https://discuss.elastic.co/t/elk-stack-is-not-stable-on-azure/169617 "2019-02-26T23:02:06Z")

</div>

I am running ELK stack on Azure using official template. Intermittently, getting this error in kibana: {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"} Also, elastic ser…

---

## [Index Routing Allocation does not move Index](https://discuss.elastic.co/t/index-routing-allocation-does-not-move-index/157503)

<div class="topic-metadata">

**Author:** [@cduong](https://discuss.elastic.co/u/cduong)\
**Replies:** 5\
**Last updated:** [November 22, 2018, 8:46am UTC](https://discuss.elastic.co/t/index-routing-allocation-does-not-move-index/157503 "2018-11-22T08:46:41Z")

</div>

Hi, I'm using Elastic Cloud. I created the cluster with Hot Warm arch for timeseries. I applied the Index Curation in which it will move index after 1 day from Hot node to the Warm node. After 2/3 days, I checked the i…

---

## [Get the input csv file path or filename in email](https://discuss.elastic.co/t/get-the-input-csv-file-path-or-filename-in-email/103929)

<div class="topic-metadata">

**Author:** [@surajbs](https://discuss.elastic.co/u/surajbs)\
**Replies:** 5\
**Last updated:** [October 18, 2017, 3:28pm UTC](https://discuss.elastic.co/t/get-the-input-csv-file-path-or-filename-in-email/103929 "2017-10-18T15:28:44Z")

</div>

Hi, How can we get the input csv file path or filename in email. Below is my config for the input and output: input { file { path =\> "path to file/\*.csv" type =\> "csv" start\_position =\> beginning } file { path …

---

## [Error searching with double quotes: IllegalStateException\[field "title" was indexed without position data; cannot run PhraseQuery](https://discuss.elastic.co/t/error-searching-with-double-quotes-illegalstateexception-field-title-was-indexed-without-position-data-cannot-run-phrasequery/175)

<div class="topic-metadata">

**Author:** [@ponki\_d\_monkey](https://discuss.elastic.co/u/ponki_d_monkey)\
**Replies:** 5\
**Last updated:** [May 5, 2015, 8:01am UTC](https://discuss.elastic.co/t/error-searching-with-double-quotes-illegalstateexception-field-title-was-indexed-without-position-data-cannot-run-phrasequery/175 "2015-05-05T08:01:36Z")

</div>

Hi, I'm quite new to Elasticsearch. I'm trying to do an "exact match" search using double quotes and based on this article it is possible: http://www.elastic.co/guide/en/elasticsearch/reference/1.x/query-dsl-query-stri…

---

## [Rename an index](https://discuss.elastic.co/t/rename-an-index/9491)

<div class="topic-metadata">

**Author:** [@Tarek\_Ziade](https://discuss.elastic.co/u/Tarek_Ziade)\
**Replies:** 5\
**Last updated:** [October 30, 2012, 9:14am UTC](https://discuss.elastic.co/t/rename-an-index/9491 "2012-10-30T09:14:00Z")

</div>

Hey Is there a way to rename (or copy) an index from the APIs ? -- not an alias. Thanks Tarek --

---

## [Programmatic setup for Java agent not reading server URL setting](https://discuss.elastic.co/t/programmatic-setup-for-java-agent-not-reading-server-url-setting/318522)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 2\
**Last updated:** [November 9, 2022, 10:39am UTC](https://discuss.elastic.co/t/programmatic-setup-for-java-agent-not-reading-server-url-setting/318522 "2022-11-09T10:39:23Z")

</div>

I am setting up APM for a Springboot Java application on maven. The APM server is running on ECE. I followed the guide on the Elastic documentation: Programmatic API setup Configuration I put the APM settings inside …

---

## [Kibana Discover - sort by two fields](https://discuss.elastic.co/t/kibana-discover-sort-by-two-fields/150085)

<div class="topic-metadata">

**Author:** [@jenyphur](https://discuss.elastic.co/u/jenyphur)\
**Replies:** 2\
**Last updated:** [September 26, 2018, 9:55pm UTC](https://discuss.elastic.co/t/kibana-discover-sort-by-two-fields/150085 "2018-09-26T21:55:10Z")

</div>

This is such a simple request..is there ANY way to do a multifield sort? { "sort": \[ { "app\_timestamp": "asc" }, { "cf\_offset": "asc" } \] } works in Dev Tools, but NOT in discovery tab or edit query option.

---

## [Kibana not IPv6 ready](https://discuss.elastic.co/t/kibana-not-ipv6-ready/45537)

<div class="topic-metadata">

**Author:** [@sspreitzer](https://discuss.elastic.co/u/sspreitzer)\
**Replies:** 2\
**Last updated:** [October 25, 2016, 2:02pm UTC](https://discuss.elastic.co/t/kibana-not-ipv6-ready/45537 "2016-10-25T14:02:52Z")

</div>

To me it looks like Kibana is not IPv6 ready. The node im running elasticsearch and kibana on only has ipv6 addresses and kibana is failing while all ports are reachable. Error: unhandled courier request error: No L…

---

## [Parsing ip address coming at random places inside logs](https://discuss.elastic.co/t/parsing-ip-address-coming-at-random-places-inside-logs/259177)

<div class="topic-metadata">

**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\
**Replies:** 4\
**Last updated:** [December 20, 2020, 4:05pm UTC](https://discuss.elastic.co/t/parsing-ip-address-coming-at-random-places-inside-logs/259177 "2020-12-20T16:05:12Z")

</div>

hi guys, input log message contains IP address but the occurence of ip is random inside message and also some times the message will not contain any ip ...how can we extract this ip address using grok or other filters. …

---

## [Elasticsearch SQL ODBC Driverの32bit版のドライバーについて](https://discuss.elastic.co/t/elasticsearch-sql-odbc-driver-32bit/164976)

<div class="topic-metadata">

**Author:** [@taku333](https://discuss.elastic.co/u/taku333)\
**Replies:** 4\
**Last updated:** [January 23, 2019, 10:55am UTC](https://discuss.elastic.co/t/elasticsearch-sql-odbc-driver-32bit/164976 "2019-01-23T10:55:27Z")

</div>

Elasticsearch SQL ODBC Driverをインストールして、 https://www.elastic.co/jp/downloads/odbc-client#6x-release 下記サイトをみながら設定したのですが https://www.elastic.co/guide/en/elasticsearch/sql-odbc/6.5/index.html ExcelからODBCを使用したところ、下記のエラーが発…

---

## [Updating node settings](https://discuss.elastic.co/t/updating-node-settings/21057)

<div class="topic-metadata">

**Author:** [@Ernesto\_Reig](https://discuss.elastic.co/u/Ernesto_Reig)\
**Replies:** 4\
**Last updated:** [December 3, 2014, 12:20pm UTC](https://discuss.elastic.co/t/updating-node-settings/21057 "2014-12-03T12:20:49Z")

</div>

Hello, I would like to update the settings of all the nodes in our cluster without having to restart them. The settings are the following: PUT \_cluster/settings { "persistent" : { "gateway.type": "loca…

---

## [How I can fix {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"} in kibana](https://discuss.elastic.co/t/how-i-can-fix-statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred-in-kibana/103794)

<div class="topic-metadata">

**Author:** [@Yolanda](https://discuss.elastic.co/u/Yolanda)\
**Replies:** 1\
**Last updated:** [October 13, 2017, 3:56pm UTC](https://discuss.elastic.co/t/how-i-can-fix-statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred-in-kibana/103794 "2017-10-13T15:56:28Z")

</div>

Hi All, How i can fix the {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"} error in kibana. I was looking information about this error and I found its could be for di…

---

## [Kibana Monitoring Dashboard showing wrong info](https://discuss.elastic.co/t/kibana-monitoring-dashboard-showing-wrong-info/205605)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 8\
**Last updated:** [November 16, 2019, 2:26pm UTC](https://discuss.elastic.co/t/kibana-monitoring-dashboard-showing-wrong-info/205605 "2019-11-16T14:26:43Z")

</div>

The status of every index is being wrongly shown as Deleted / Closed. But all the indices are very much in Green state.

---

## [Configuring LDAP Auth causes status=1/FAILURE](https://discuss.elastic.co/t/configuring-ldap-auth-causes-status-1-failure/137683)

<div class="topic-metadata">

**Author:** [@Jose\_Tobar](https://discuss.elastic.co/u/Jose_Tobar)\
**Replies:** 8\
**Last updated:** [June 28, 2018, 4:56am UTC](https://discuss.elastic.co/t/configuring-ldap-auth-causes-status-1-failure/137683 "2018-06-28T04:56:13Z")

</div>

I've been going through the documentation for setting up authentication with LDAP but I must be missing something because after adding my changes to the file /etc/elasticsearch/elasticsearch.yml the service refuses to st…

---

## [Restoring snapshort to a different cluster](https://discuss.elastic.co/t/restoring-snapshort-to-a-different-cluster/61279)

<div class="topic-metadata">

**Author:** [@Katja](https://discuss.elastic.co/u/Katja)\
**Replies:** 8\
**Last updated:** [September 23, 2016, 7:51pm UTC](https://discuss.elastic.co/t/restoring-snapshort-to-a-different-cluster/61279 "2016-09-23T19:51:57Z")

</div>

Здравсвуйте, помогите, пожалуйста с такой проблемой. Я пыталась восстановить snapshort to a different cluster. В инструкции написано, All that is required is registering the repository containing the snapshot in the new…

---

## [Ready to throw logstash config file out the window -- help please :)](https://discuss.elastic.co/t/ready-to-throw-logstash-config-file-out-the-window-help-please/42951)

<div class="topic-metadata">

**Author:** [@timothybward](https://discuss.elastic.co/u/timothybward)\
**Replies:** 6\
**Last updated:** [February 28, 2016, 3:08pm UTC](https://discuss.elastic.co/t/ready-to-throw-logstash-config-file-out-the-window-help-please/42951 "2016-02-28T15:08:36Z")

</div>

I have the below file and I'm getting the completely useless error message: Error: Expected one of #, =\> at line 85, column 5 (byte 1787) after output { elasticsearch { if \_\_\_\_ File below: input { beats { …

---

## [Error: com.mysql.jdbc.Driver not loaded](https://discuss.elastic.co/t/error-com-mysql-jdbc-driver-not-loaded/181542)

<div class="topic-metadata">

**Author:** [@prabhat](https://discuss.elastic.co/u/prabhat)\
**Replies:** 2\
**Last updated:** [May 18, 2019, 8:39am UTC](https://discuss.elastic.co/t/error-com-mysql-jdbc-driver-not-loaded/181542 "2019-05-18T08:39:35Z")

</div>

i am getting this error \[2019-05-17T12:49:58,687\]\[ERROR\]\[logstash.inputs.jdbc \] Failed to load C:\\Users\\shiwani\\Downloads\\ELK\\mysql-connector-java-5.1.47\\mysql-connector-java-5.1.47-bin.jar {:exception=\>#\<TypeError:…

---

## [Cannot be changed from type \[long\] to \[float\] exception in logstash jdbc plugin using](https://discuss.elastic.co/t/cannot-be-changed-from-type-long-to-float-exception-in-logstash-jdbc-plugin-using/172260)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 2\
**Last updated:** [March 16, 2019, 8:51am UTC](https://discuss.elastic.co/t/cannot-be-changed-from-type-long-to-float-exception-in-logstash-jdbc-plugin-using/172260 "2019-03-16T08:51:43Z")

</div>

Hi all, I am using jdbc plugin to load data from database and merge it with a an created index. my logstash configuration is as following: input { jdbc { jdbc\_driver\_library =\> "sqljdbc42.jar" jdbc\_driver\_class…

---

## [Getting documents having minimum value for a given field](https://discuss.elastic.co/t/getting-documents-having-minimum-value-for-a-given-field/106808)

<div class="topic-metadata">

**Author:** [@jaisharma](https://discuss.elastic.co/u/jaisharma)\
**Replies:** 2\
**Last updated:** [November 8, 2017, 4:01pm UTC](https://discuss.elastic.co/t/getting-documents-having-minimum-value-for-a-given-field/106808 "2017-11-08T16:01:14Z")

</div>

My document structure is as below: {'\_id': 1, '\_type': '2017-01-01',...} --- (1) {'\_id': 1, '\_type': '2017-01-02',...} --- (2) {'\_id': 2, '\_type': '2017-01-01',...} --- (3) {'\_id': 2, '\_type': '2017-01-02',...} ---…

---

## [Match and extract last part of log in pipe delimited log](https://discuss.elastic.co/t/match-and-extract-last-part-of-log-in-pipe-delimited-log/90086)

<div class="topic-metadata">

**Author:** [@Pranav1](https://discuss.elastic.co/u/Pranav1)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 2:54pm UTC](https://discuss.elastic.co/t/match-and-extract-last-part-of-log-in-pipe-delimited-log/90086 "2017-06-21T14:54:19Z")

</div>

Logstash is receving following log - \> Timestamp|Field1|Field2|...|Field n|Log message The number of fields is varaible and not fixed. My goal is to extract just the Timestamp and Log message and add it as a new key v…

---

## [Kibana pointing to ES cluster](https://discuss.elastic.co/t/kibana-pointing-to-es-cluster/77516)

<div class="topic-metadata">

**Author:** [@elk12](https://discuss.elastic.co/u/elk12)\
**Replies:** 2\
**Last updated:** [March 8, 2017, 2:02pm UTC](https://discuss.elastic.co/t/kibana-pointing-to-es-cluster/77516 "2017-03-08T14:02:23Z")

</div>

Hello Folks , Currently our Kibana is pointing to a single ES node( we have 3 nodes). if that single node goes down or put in maintenance kibana will not be able to do anything. So I came across this . Install ES on…

---

## [Accessing array of object in painless script , search query \[ES 6.4\]](https://discuss.elastic.co/t/accessing-array-of-object-in-painless-script-search-query-es-6-4/209559)

<div class="topic-metadata">

**Author:** [@kushal](https://discuss.elastic.co/u/kushal)\
**Replies:** 3\
**Last updated:** [December 2, 2019, 6:35am UTC](https://discuss.elastic.co/t/accessing-array-of-object-in-painless-script-search-query-es-6-4/209559 "2019-12-02T06:35:56Z")

</div>

Documents have an array of objects, which i need to iterate over in order to compute the final score. Basic mapping is following \< { "settings": { "number\_of\_shards": 1, "numbe…

---

## [Is it possible to cast script\_field type to geopoint?](https://discuss.elastic.co/t/is-it-possible-to-cast-script-field-type-to-geopoint/47096)

<div class="topic-metadata">

**Author:** [@Olalekan\_Elesin](https://discuss.elastic.co/u/Olalekan_Elesin)\
**Replies:** 3\
**Last updated:** [April 12, 2016, 1:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-cast-script-field-type-to-geopoint/47096 "2016-04-12T13:00:12Z")

</div>

In a file script, I have this: def locationGeoData = \[:\] locationGeoData\['port'\] = \[4.815554, 7.0498442\] locationGeoData\['harcourt'\] = \[4.815554, 7.0498442\] locationGeoData\[doc\['region'\].value\] Is it possible to conve…

---

## [Getting hit count before post-filter](https://discuss.elastic.co/t/getting-hit-count-before-post-filter/38791)

<div class="topic-metadata">

**Author:** [@Cosmin\_Marginean](https://discuss.elastic.co/u/Cosmin_Marginean)\
**Replies:** 3\
**Last updated:** [January 19, 2016, 3:32pm UTC](https://discuss.elastic.co/t/getting-hit-count-before-post-filter/38791 "2016-01-19T15:32:44Z")

</div>

Hi I'm applying a post-filter (in order to get aggregations only on the original query scope). There is however a need to find/display the hit count before this post-filter was applied (otherwise we have to cache hits/…

---

## [Logstash stops receiving logs](https://discuss.elastic.co/t/logstash-stops-receiving-logs/286897)

<div class="topic-metadata">

**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\
**Replies:** 7\
**Last updated:** [October 18, 2021, 7:38pm UTC](https://discuss.elastic.co/t/logstash-stops-receiving-logs/286897 "2021-10-18T19:38:42Z")

</div>

Hi everyone. I am a beginner in logstash and ELK in general. Lately I have been facing an issue with logstash. I am receiving some logs on port 3014, and this is the second time that this is happening and I identified t…

---

## [Problem with Number of Shards (8 to 5)](https://discuss.elastic.co/t/problem-with-number-of-shards-8-to-5/50003)

<div class="topic-metadata">

**Author:** [@parthu](https://discuss.elastic.co/u/parthu)\
**Replies:** 7\
**Last updated:** [May 13, 2016, 7:25pm UTC](https://discuss.elastic.co/t/problem-with-number-of-shards-8-to-5/50003 "2016-05-13T19:25:46Z")

</div>

I upgraded my elasticsearch 1.3.2 to elasticsearch 2.3.2. All was well, but due to certain reasons I had to downgrade it back to 1.3.2. Now, I get to see only 5 shards per index. It used to be 8 shards per index. I ha…

---

## [Map / grant roles defined in keycloak to elasticsearch](https://discuss.elastic.co/t/map-grant-roles-defined-in-keycloak-to-elasticsearch/313528)

<div class="topic-metadata">

**Author:** [@Giorgi\_Jambazishvili](https://discuss.elastic.co/u/Giorgi_Jambazishvili)\
**Replies:** 5\
**Last updated:** [September 8, 2022, 12:06pm UTC](https://discuss.elastic.co/t/map-grant-roles-defined-in-keycloak-to-elasticsearch/313528 "2022-09-08T12:06:07Z")

</div>

Hello, We've setup the Keycloak Single Sing On (OIDC) integration with Elasticsearch cloud deployment and users are able sign in to the kibana using Keycloak as an authenticator. The problem is that once user is authen…

---

## [Remove \`\_all\` mapping from older indexes](https://discuss.elastic.co/t/remove-all-mapping-from-older-indexes/295263)

<div class="topic-metadata">

**Author:** [@willdennis](https://discuss.elastic.co/u/willdennis)\
**Replies:** 5\
**Last updated:** [January 25, 2022, 1:06am UTC](https://discuss.elastic.co/t/remove-all-mapping-from-older-indexes/295263 "2022-01-25T01:06:50Z")

</div>

Upgraded to v6.8 recently; trying to ensure I can now upgrade to v7.x Having an issue when trying to reindex my old logstash indexes created on v5.6.x - getting this message when the system goes to create the new index (…

---

## [Single input with different filter and output](https://discuss.elastic.co/t/single-input-with-different-filter-and-output/129378)

<div class="topic-metadata">

**Author:** [@mayurshah](https://discuss.elastic.co/u/mayurshah)\
**Replies:** 4\
**Last updated:** [May 7, 2018, 10:22pm UTC](https://discuss.elastic.co/t/single-input-with-different-filter-and-output/129378 "2018-05-07T22:22:01Z")

</div>

Hi, I am using logstash 5.6.3 and am trying to figureout how to configure multiple filter and output for a single input. My setup is filebeat forwarding to logstash and from logstash I want out put to elasticsearch as w…

---

## [JDBC password filepath issue](https://discuss.elastic.co/t/jdbc-password-filepath-issue/90620)

<div class="topic-metadata">

**Author:** [@sanuj5](https://discuss.elastic.co/u/sanuj5)\
**Replies:** 4\
**Last updated:** [July 13, 2017, 2:23pm UTC](https://discuss.elastic.co/t/jdbc-password-filepath-issue/90620 "2017-07-13T14:23:27Z")

</div>

I am getting invalid username/password when I configure my JDBC connection to retrieve password from file. I have provided enough permission to the password file. It works well when I provide password in config itself. B…

---

## [Icon Replacement - Kibana 4.6.1](https://discuss.elastic.co/t/icon-replacement-kibana-4-6-1/63642)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 4\
**Last updated:** [November 2, 2016, 10:59pm UTC](https://discuss.elastic.co/t/icon-replacement-kibana-4-6-1/63642 "2016-11-02T22:59:57Z")

</div>

Has anyone had any luck in changing out the tab icon in Kibana 4.6.1? I was able to update badging in prior version (4.5.x), but it appears this process has changed. I used to be able to replace the elk.ico file in /o…

---

## [Kibana 4.1 automatic axis scaling](https://discuss.elastic.co/t/kibana-4-1-automatic-axis-scaling/27860)

<div class="topic-metadata">

**Author:** [@Fernando\_Gamboa](https://discuss.elastic.co/u/Fernando_Gamboa)\
**Replies:** 4\
**Last updated:** [August 24, 2015, 2:38pm UTC](https://discuss.elastic.co/t/kibana-4-1-automatic-axis-scaling/27860 "2015-08-24T14:38:06Z")

</div>

Hello, In kibana 4.0.2 I used to have a visualization that automatically scale the Y axis. Thus, when the number was 10^6 to #M or 10^12 #T. This functionality seemed not to be working in the same visualization ported…

---

## [Remove duplicate field value](https://discuss.elastic.co/t/remove-duplicate-field-value/107125)

<div class="topic-metadata">

**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\
**Replies:** 3\
**Last updated:** [November 10, 2017, 9:14am UTC](https://discuss.elastic.co/t/remove-duplicate-field-value/107125 "2017-11-10T09:14:13Z")

</div>

In my logstash output I received following output. "log\_name" =\> \[ \[0\] "Authentication", \[1\] "Authentication" \], "log\_level" =\> "info", "session\_id" =\> \[ \[0\] "4280340685", \[1…

---

## [Mock RestHighLevelClient for elasticsearch](https://discuss.elastic.co/t/mock-resthighlevelclient-for-elasticsearch/283465)

<div class="topic-metadata">

**Author:** [@romeoopk](https://discuss.elastic.co/u/romeoopk)\
**Replies:** 1\
**Last updated:** [September 7, 2021, 3:35am UTC](https://discuss.elastic.co/t/mock-resthighlevelclient-for-elasticsearch/283465 "2021-09-07T03:35:06Z")

</div>

HI I would like to test my rest api in quarkus which internally calls elasticsearch using RestHighLevelClient. My problem is that the RestHighLevelClient is not mockable and hence I cannot execute my unit test to test …

---

## [Extending Trial license](https://discuss.elastic.co/t/extending-trial-license/141384)

<div class="topic-metadata">

**Author:** [@vkrishna91](https://discuss.elastic.co/u/vkrishna91)\
**Replies:** 2\
**Last updated:** [July 24, 2018, 9:57pm UTC](https://discuss.elastic.co/t/extending-trial-license/141384 "2018-07-24T21:57:20Z")

</div>

Hi, I wanted to extend the platinum trial license, and i filled the following form and didn't get any response even after 5 days. Is there any support contact that i can reach to get a trial extension. https://www.elas…

---

## [Restore Incremental](https://discuss.elastic.co/t/restore-incremental/129327)

<div class="topic-metadata">

**Author:** [@bitva77](https://discuss.elastic.co/u/bitva77)\
**Replies:** 2\
**Last updated:** [April 24, 2018, 9:47pm UTC](https://discuss.elastic.co/t/restore-incremental/129327 "2018-04-24T21:47:43Z")

</div>

Hi! I'm in the process of migrating our ES cluster from Windows to Docker/Linux. I thought I could do it with Snapshots/Restore. This partially works but not really. Our cluster is like 4TB in size. A snapshot takes…

---

## [How to use Escape key value in query\_string](https://discuss.elastic.co/t/how-to-use-escape-key-value-in-query-string/327972)

<div class="topic-metadata">

**Author:** [@anon55421226](https://discuss.elastic.co/u/anon55421226)\
**Replies:** 6\
**Last updated:** [March 20, 2023, 9:14am UTC](https://discuss.elastic.co/t/how-to-use-escape-key-value-in-query-string/327972 "2023-03-20T09:14:24Z")

</div>

So... according to the elasticsearch/QueryStringQueryBuilder.java at v7.16.3 · elastic/elasticsearch · GitHub code there should exists an escape parameter in the query\_string object, but how do i trigger it to escape my …

---

## [Elasticsearch 1.5.1 Java process 100% plus CPU usage](https://discuss.elastic.co/t/elasticsearch-1-5-1-java-process-100-plus-cpu-usage/72334)

<div class="topic-metadata">

**Author:** [@elbori76](https://discuss.elastic.co/u/elbori76)\
**Replies:** 8\
**Last updated:** [February 15, 2017, 2:44pm UTC](https://discuss.elastic.co/t/elasticsearch-1-5-1-java-process-100-plus-cpu-usage/72334 "2017-02-15T14:44:15Z")

</div>

We have a 8 node ELK cluster in which 5 are data nodes and 3 are logstash nodes. We have been experiencing extremely high CPU usage in which the Java process is taking 100 - 350% of CPU usage. Data nodes are configur…

---

## [Can we use clone filter within ruby code block?](https://discuss.elastic.co/t/can-we-use-clone-filter-within-ruby-code-block/2411)

<div class="topic-metadata">

**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\
**Replies:** 8\
**Last updated:** [June 11, 2015, 10:23am UTC](https://discuss.elastic.co/t/can-we-use-clone-filter-within-ruby-code-block/2411 "2015-06-11T10:23:36Z")

</div>

can we use clone filter within ruby code block?

[Previous page](https://discuss.elastic.co/top.md?page=855&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=857&per_page=50&period=all)
