# Top

**URL:** https://discuss.elastic.co/top.md?page=86&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 87

---

## [ES5.1 JavaAPI deletebyqueryRequestBuilder](https://discuss.elastic.co/t/es5-1-javaapi-deletebyqueryrequestbuilder/70500)

<div class="topic-metadata">

**Author:** [@AmazoneWebService](https://discuss.elastic.co/u/AmazoneWebService)\
**Replies:** 9\
**Last updated:** [January 10, 2017, 6:50am UTC](https://discuss.elastic.co/t/es5-1-javaapi-deletebyqueryrequestbuilder/70500 "2017-01-10T06:50:48Z")

</div>

Elasticsearch version: 5.1.1 OS version: centos 7 Description of the problem including expected versus actual behavior: ES 5.1 version does not support delete-by-query plugin. so i need to change the javaAPI code. T…

---

## [Cluster state update task](https://discuss.elastic.co/t/cluster-state-update-task/175372)

<div class="topic-metadata">

**Author:** [@yahuu](https://discuss.elastic.co/u/yahuu)\
**Replies:** 19\
**Last updated:** [April 25, 2019, 3:07pm UTC](https://discuss.elastic.co/t/cluster-state-update-task/175372 "2019-04-25T15:07:03Z")

</div>

Hello everyone, when i start up my docker containers for my ELK-Stack my Elasticsearch does take some time for some cluster state update tasks. What are these tasks doing? I only have one node and no cluster. Are they…

---

## [Disable built-in users](https://discuss.elastic.co/t/disable-built-in-users/215002)

<div class="topic-metadata">

**Author:** [@Riieccoala](https://discuss.elastic.co/u/Riieccoala)\
**Replies:** 14\
**Last updated:** [January 17, 2020, 2:44pm UTC](https://discuss.elastic.co/t/disable-built-in-users/215002 "2020-01-17T14:44:42Z")

</div>

Hey all, I have set up SSO with OKTA to be able to enforce MFA. Using OKTA as my IDP did however not disable the built-in users such as 'elastic' I want to disable the elastic user to enforce principle of least privil…

---

## [How to make a custom grok filter](https://discuss.elastic.co/t/how-to-make-a-custom-grok-filter/120765)

<div class="topic-metadata">

**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\
**Replies:** 11\
**Last updated:** [February 21, 2018, 9:17am UTC](https://discuss.elastic.co/t/how-to-make-a-custom-grok-filter/120765 "2018-02-21T09:17:35Z")

</div>

Hello I have to create a custom grok filter for my logs so please let me know the procedure to do that as in the pattern which I want where it should be saved the extension of the file in which i write my custom pattern…

---

## [Kibana slow work with x-pack](https://discuss.elastic.co/t/kibana-slow-work-with-x-pack/67372)

<div class="topic-metadata">

**Author:** [@111126](https://discuss.elastic.co/u/111126)\
**Replies:** 20\
**Last updated:** [December 7, 2016, 1:56pm UTC](https://discuss.elastic.co/t/kibana-slow-work-with-x-pack/67372 "2016-12-07T13:56:08Z")

</div>

Hello I install x-pack and my kibana update dashboard working slow. Earlier data for the last hour loaded in 2 seconds and now it takes at least 15 seconds. I disable monitoring module and etc. I have only security modu…

---

## [Can someone please help me with nginx logstash filter](https://discuss.elastic.co/t/can-someone-please-help-me-with-nginx-logstash-filter/98377)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 10\
**Last updated:** [September 2, 2017, 1:00pm UTC](https://discuss.elastic.co/t/can-someone-please-help-me-with-nginx-logstash-filter/98377 "2017-09-02T13:00:54Z")

</div>

Hi Guys, Can someone please help me to identify the issue with this filter, I am trying to parse the nginx logs with file input and getting below error. can somone please help me to rectify the error? file { { type …

---

## [Elasticsearch 3 nodes cluster not joining with each other](https://discuss.elastic.co/t/elasticsearch-3-nodes-cluster-not-joining-with-each-other/277060)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 16\
**Last updated:** [July 2, 2021, 3:04pm UTC](https://discuss.elastic.co/t/elasticsearch-3-nodes-cluster-not-joining-with-each-other/277060 "2021-07-02T15:04:44Z")

</div>

Hi I have 3 nodes cluster with below config Node 1 :: cluster.name: "as\_elasticsearch" node.name: "node-1" node.data: true path.repo: "/var/elasticsearch/snapshot/" path.data: "/var/lib/elasticsearch" network.…

---

## [How to configure Java agent with Apache tomcat](https://discuss.elastic.co/t/how-to-configure-java-agent-with-apache-tomcat/149127)

<div class="topic-metadata">

**Author:** [@Aftab\_Ali](https://discuss.elastic.co/u/Aftab_Ali)\
**Replies:** 9\
**Last updated:** [September 20, 2018, 1:38pm UTC](https://discuss.elastic.co/t/how-to-configure-java-agent-with-apache-tomcat/149127 "2018-09-20T13:38:39Z")

</div>

Dear Team, I just install apm-server in ubuntu 16.04 and pointed es ip and I have configured java agent with tomcat bin files like vim /opt/tomcat/bin/setenv.sh export CATALINA\_OPTS="$CATALINA\_OPTS -Xms1048m" export…

---

## [Elasticsearch high availability across availability zones](https://discuss.elastic.co/t/elasticsearch-high-availability-across-availability-zones/232079)

<div class="topic-metadata">

**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\
**Replies:** 11\
**Last updated:** [May 25, 2020, 7:01pm UTC](https://discuss.elastic.co/t/elasticsearch-high-availability-across-availability-zones/232079 "2020-05-25T19:01:59Z")

</div>

Hi Team, I am planning to test implement my ES cluster in cloud so thought to get some best practices from you. My most requirement is to have High Availability of ELK all 3 services as well as index data. I have 10 no…

---

## [ILM not rolling over at correct size](https://discuss.elastic.co/t/ilm-not-rolling-over-at-correct-size/190160)

<div class="topic-metadata">

**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\
**Replies:** 10\
**Last updated:** [July 15, 2019, 12:44pm UTC](https://discuss.elastic.co/t/ilm-not-rolling-over-at-correct-size/190160 "2019-07-15T12:44:20Z")

</div>

Hi I have created an ILM policy and applied it to my Index - { "policy": "my\_logs\_policy", "phase\_definition": { "min\_age": "0ms", "actions": { "rollover": { "max\_size": "30gb" } } }, I have also set the belo…

---

## [Question shard allocation awareness?](https://discuss.elastic.co/t/question-shard-allocation-awareness/201565)

<div class="topic-metadata">

**Author:** [@CJ1](https://discuss.elastic.co/u/CJ1)\
**Replies:** 15\
**Last updated:** [October 17, 2019, 10:26am UTC](https://discuss.elastic.co/t/question-shard-allocation-awareness/201565 "2019-10-17T10:26:07Z")

</div>

Enabled shard allocation awareness/forced-awareness in the cluster, right now enabled for two zones "cluster.routing.allocation.awareness.attributes" : "rack\_id" "cluster.routing.allocation.awareness.force.rack\_id.value…

---

## [How to add a for loop and if condition in logstash input plugin](https://discuss.elastic.co/t/how-to-add-a-for-loop-and-if-condition-in-logstash-input-plugin/154888)

<div class="topic-metadata">

**Author:** [@Bharath\_Pusuluri](https://discuss.elastic.co/u/Bharath_Pusuluri)\
**Replies:** 9\
**Last updated:** [October 31, 2018, 6:02pm UTC](https://discuss.elastic.co/t/how-to-add-a-for-loop-and-if-condition-in-logstash-input-plugin/154888 "2018-10-31T18:02:25Z")

</div>

My requirement is sa follows: I am running the following python script in input field. The Python script contains a curl command and outputting that data as input (JSON format). input { exec { type =\> "apps" command…

---

## [Please help - ES 2.1.1 cluster randomly crashing](https://discuss.elastic.co/t/please-help-es-2-1-1-cluster-randomly-crashing/38861)

<div class="topic-metadata">

**Author:** [@plonka2000](https://discuss.elastic.co/u/plonka2000)\
**Replies:** 17\
**Last updated:** [January 15, 2016, 10:04am UTC](https://discuss.elastic.co/t/please-help-es-2-1-1-cluster-randomly-crashing/38861 "2016-01-15T10:04:12Z")

</div>

Hi, I have an Elasticsearch cluster of 2 nodes, both running ES2.1.1, but I have had random crashes where the master node will fail, then sometime after the second node will also fail. All nodes are clean ES2.1.1 ins…

---

## [Unable to see logs on Kibana](https://discuss.elastic.co/t/unable-to-see-logs-on-kibana/228939)

<div class="topic-metadata">

**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\
**Replies:** 12\
**Last updated:** [April 30, 2020, 4:50pm UTC](https://discuss.elastic.co/t/unable-to-see-logs-on-kibana/228939 "2020-04-30T16:50:46Z")

</div>

I have set up elasticsearch , kibana and filebeat on the same CentOS VM. I want to view the logs of a single file(apache\_access.log) saved at the root file system on Kibana. My log file has logs specifically from 3rd to …

---

## [Elasticsearch index MUCH larger then similar lucene index](https://discuss.elastic.co/t/elasticsearch-index-much-larger-then-similar-lucene-index/12056)

<div class="topic-metadata">

**Author:** [@shlomivaknin](https://discuss.elastic.co/u/shlomivaknin)\
**Replies:** 53\
**Last updated:** [June 11, 2013, 12:09pm UTC](https://discuss.elastic.co/t/elasticsearch-index-much-larger-then-similar-lucene-index/12056 "2013-06-11T12:09:39Z")

</div>

Hey, We have some old java code that uses lucene and grizzly to serve queries over text. we have two field, a string field and a numeric (long) field. the indexing code is pretty straight forward. I was trying …

---

## [Sankey Chart](https://discuss.elastic.co/t/sankey-chart/270335)

<div class="topic-metadata">

**Author:** [@Ashvin\_Bhutekar](https://discuss.elastic.co/u/Ashvin_Bhutekar)\
**Replies:** 9\
**Last updated:** [April 29, 2021, 6:58am UTC](https://discuss.elastic.co/t/sankey-chart/270335 "2021-04-29T06:58:03Z")

</div>

Is it possible to create 4 level (or more ) sankey chart?

---

## [Metricbeat service is not starting after adding metricbeat keystore](https://discuss.elastic.co/t/metricbeat-service-is-not-starting-after-adding-metricbeat-keystore/284223)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 20\
**Last updated:** [September 15, 2021, 4:59pm UTC](https://discuss.elastic.co/t/metricbeat-service-is-not-starting-after-adding-metricbeat-keystore/284223 "2021-09-15T16:59:58Z")

</div>

Hi Team, I am following below link for metricbeat keystore setup on v7.14.0. I created the keystore as, /usr/share/metricbeat/bin/metricbeat keystore --path.config /etc/metricbeat create Created the key cat es\_p…

---

## [Running cardinality for more than 10000 buckets](https://discuss.elastic.co/t/running-cardinality-for-more-than-10000-buckets/192717)

<div class="topic-metadata">

**Author:** [@divyang](https://discuss.elastic.co/u/divyang)\
**Replies:** 13\
**Last updated:** [July 31, 2019, 4:07pm UTC](https://discuss.elastic.co/t/running-cardinality-for-more-than-10000-buckets/192717 "2019-07-31T16:07:25Z")

</div>

Hi, I am making a project to get the unique number of userids per url in in our index . Index has more than 5000 urls and far more number of users ids. To the get the unique number if user ids i am using cardinality o…

---

## [ES 2.3 -\> 5.x metricbeat index field limit](https://discuss.elastic.co/t/es-2-3-5-x-metricbeat-index-field-limit/66821)

<div class="topic-metadata">

**Author:** [@gregoryo](https://discuss.elastic.co/u/gregoryo)\
**Replies:** 11\
**Last updated:** [December 6, 2016, 8:44am UTC](https://discuss.elastic.co/t/es-2-3-5-x-metricbeat-index-field-limit/66821 "2016-12-06T08:44:55Z")

</div>

I'm migrating ES 2.3 -\> 5.x. Using the migration plugin I get a Cluster Checkup warning for my logstash-metricbeat-\* indices (all from metricbeat): "New indices may not have more than 1000 fields. This index has 1719." …

---

## [Unable to create an index with parent child relationship using .net NEST](https://discuss.elastic.co/t/unable-to-create-an-index-with-parent-child-relationship-using-net-nest/116057)

<div class="topic-metadata">

**Author:** [@raja11](https://discuss.elastic.co/u/raja11)\
**Replies:** 15\
**Last updated:** [February 6, 2018, 8:55am UTC](https://discuss.elastic.co/t/unable-to-create-an-index-with-parent-child-relationship-using-net-nest/116057 "2018-02-06T08:55:36Z")

</div>

I m trying to run the following code in .net var descriptor = new CreateIndexDescriptor("raja") .Mappings(ms =\> ms .Map("employee", m =\> m.AutoMap()) .Map("employeeskillset", m =\> m.AutoMap().Parent())); client.Crea…

---

## [Filebeat still scanning files, but not finding new log entries](https://discuss.elastic.co/t/filebeat-still-scanning-files-but-not-finding-new-log-entries/55424)

<div class="topic-metadata">

**Author:** [@Todd\_Ruch](https://discuss.elastic.co/u/Todd_Ruch)\
**Replies:** 11\
**Last updated:** [July 20, 2016, 12:56pm UTC](https://discuss.elastic.co/t/filebeat-still-scanning-files-but-not-finding-new-log-entries/55424 "2016-07-20T12:56:33Z")

</div>

Hello! I'm using filebeat-1.2.3-1.x86\_64 on a CentOS 6.5 host. The problem I'm having is that after I start filebeat through the init process, it runs for a short period (what seems like the initial batch) and then ant…

---

## [How can I input data from java to ES in real time?](https://discuss.elastic.co/t/how-can-i-input-data-from-java-to-es-in-real-time/21523)

<div class="topic-metadata">

**Author:** [@Marian\_Valero](https://discuss.elastic.co/u/Marian_Valero)\
**Replies:** 21\
**Last updated:** [January 13, 2015, 10:08pm UTC](https://discuss.elastic.co/t/how-can-i-input-data-from-java-to-es-in-real-time/21523 "2015-01-13T22:08:03Z")

</div>

I'm reading data from my oracle database to java with JDBC but I want to know how can I input the data that I'm getting in Elasticsearch in real time. Thanks. -- You received this message because you are subs…

---

## [Trobling with HTTPS configuration](https://discuss.elastic.co/t/trobling-with-https-configuration/187557)

<div class="topic-metadata">

**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\
**Replies:** 28\
**Last updated:** [July 2, 2019, 1:51am UTC](https://discuss.elastic.co/t/trobling-with-https-configuration/187557 "2019-07-02T01:51:59Z")

</div>

First: My versión is 6.6.1. My enviroment: 3 nodes in 3 servers (all local) Node Master: 192.168.1.142 Node Slave1: 192.168.1.144 Node Slave2: 192.168.1.146 I have been following this Guide from Elastic Doc, everyth…

---

## [Kibana field\_stats request takes 20000 ms if number of Indices and shards are more](https://discuss.elastic.co/t/kibana-field-stats-request-takes-20000-ms-if-number-of-indices-and-shards-are-more/43468)

<div class="topic-metadata">

**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\
**Replies:** 16\
**Last updated:** [January 8, 2017, 9:02pm UTC](https://discuss.elastic.co/t/kibana-field-stats-request-takes-20000-ms-if-number-of-indices-and-shards-are-more/43468 "2017-01-08T21:02:38Z")

</div>

Hi Team , i am getting high response times for the field stats request , if i am having around 240 shards with daily indices . Can you please suggest how can i reduce these response times with that many number of open sh…

---

## [Read timeout warning when Follow referrals is true](https://discuss.elastic.co/t/read-timeout-warning-when-follow-referrals-is-true/123814)

<div class="topic-metadata">

**Author:** [@jfreeman](https://discuss.elastic.co/u/jfreeman)\
**Replies:** 9\
**Last updated:** [March 14, 2018, 5:50am UTC](https://discuss.elastic.co/t/read-timeout-warning-when-follow-referrals-is-true/123814 "2018-03-14T05:50:25Z")

</div>

First time AD authentication using https://elasticsearchurl/\_xpack/security/\_authenticate takes around 3 mins to return a successful result. I am using x-pack 6.0 and below is the realms setting in elasticsearch.yml file …

---

## [Connect to Cloud Elastic / Cloud Elasticsearch instance with ssh](https://discuss.elastic.co/t/connect-to-cloud-elastic-cloud-elasticsearch-instance-with-ssh/111266)

<div class="topic-metadata">

**Author:** [@Milad\_Hamid](https://discuss.elastic.co/u/Milad_Hamid)\
**Replies:** 9\
**Last updated:** [December 13, 2017, 8:53am UTC](https://discuss.elastic.co/t/connect-to-cloud-elastic-cloud-elasticsearch-instance-with-ssh/111266 "2017-12-13T08:53:08Z")

</div>

Hi, How i can connect to my Cloud Elastic trial with ssh or WinSCP? so i can install Logstash and manage directories.

---

## [Logstash not listening port 5044 even when we configured the beats](https://discuss.elastic.co/t/logstash-not-listening-port-5044-even-when-we-configured-the-beats/310792)

<div class="topic-metadata">

**Author:** [@KALAVATHI\_YALAMANCHA](https://discuss.elastic.co/u/KALAVATHI_YALAMANCHA)\
**Replies:** 17\
**Last updated:** [July 28, 2022, 5:34am UTC](https://discuss.elastic.co/t/logstash-not-listening-port-5044-even-when-we-configured-the-beats/310792 "2022-07-28T05:34:16Z")

</div>

input { beats { type =\> beats host =\> "localhost" port =\> 5044 }

---

## [Group values of specific field into some categories](https://discuss.elastic.co/t/group-values-of-specific-field-into-some-categories/227108)

<div class="topic-metadata">

**Author:** [@sai\_16](https://discuss.elastic.co/u/sai_16)\
**Replies:** 19\
**Last updated:** [April 20, 2020, 7:48am UTC](https://discuss.elastic.co/t/group-values-of-specific-field-into-some-categories/227108 "2020-04-20T07:48:51Z")

</div>

I'm using area chart for visualization of process names to the total cpu pct,but i want name some of the process to one group and some other process to another group ,is there a way to do it? like :java,app -process nam…

---

## [Detect DNS tunneling](https://discuss.elastic.co/t/detect-dns-tunneling/56587)

<div class="topic-metadata">

**Author:** [@pfe](https://discuss.elastic.co/u/pfe)\
**Replies:** 12\
**Last updated:** [August 22, 2016, 3:54pm UTC](https://discuss.elastic.co/t/detect-dns-tunneling/56587 "2016-08-22T15:54:59Z")

</div>

It\`s the first time that i used Packetbeat, and I wanted to know How can we use packetbeat ,elasticsearch to capture DNS traffic and to detect DNS tunneling from my iodine ? Thank you Regards

---

## [Searching Does not Return Results - Challenge](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832)

<div class="topic-metadata">

**Author:** [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\
**Replies:** 29\
**Last updated:** [May 12, 2021, 2:56pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832 "2021-05-12T14:56:59Z")

</div>

I have this log message in Elastic: ExtendedProperties \[{"Name":"UserAgent","Value":"Microsoft Office/16.0 (Windows NT 10.0; Microsoft Outlook 16.0.13426; Pro)"} {"Name":"UserAuthenticationMethod","Value":"1"} {"Name":…

---

## [\[SOLVED\] Elasticsearch python API and reindex module](https://discuss.elastic.co/t/solved-elasticsearch-python-api-and-reindex-module/63105)

<div class="topic-metadata">

**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\
**Replies:** 10\
**Last updated:** [October 31, 2016, 4:13pm UTC](https://discuss.elastic.co/t/solved-elasticsearch-python-api-and-reindex-module/63105 "2016-10-31T16:13:27Z")

</div>

Hi all, I have created a python script able to reindex based on list of index. My problem is the timeout and wait\_for\_completion option. When my script launch a reindexation I have to wait until is finished otherwi…

---

## [Passing Multiple Arguments while Logstash startup](https://discuss.elastic.co/t/passing-multiple-arguments-while-logstash-startup/47805)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 14\
**Last updated:** [April 26, 2016, 1:12am UTC](https://discuss.elastic.co/t/passing-multiple-arguments-while-logstash-startup/47805 "2016-04-26T01:12:42Z")

</div>

I have more than 5 logstash conf files. I need to start all the conf files all together. How can I pass all the files names together ? logstash -f Logstash-ES1.conf logstash -f Logstash-ES2.conf logstash -f Logstash-E…

---

## [Parsing Emails with logstash](https://discuss.elastic.co/t/parsing-emails-with-logstash/128567)

<div class="topic-metadata">

**Author:** [@M\_B\_I](https://discuss.elastic.co/u/M_B_I)\
**Replies:** 9\
**Last updated:** [April 20, 2018, 12:16pm UTC](https://discuss.elastic.co/t/parsing-emails-with-logstash/128567 "2018-04-20T12:16:29Z")

</div>

Hi, everyone! I'm newest in ELK, so I need help =) Could some one help me? I try to search some data from my email message. I used imap input plugin , but what should I use in filter? For example if i use rubydebug in…

---

## [Logstash failing to parse json](https://discuss.elastic.co/t/logstash-failing-to-parse-json/44471)

<div class="topic-metadata">

**Author:** [@narengorla1](https://discuss.elastic.co/u/narengorla1)\
**Replies:** 20\
**Last updated:** [March 18, 2016, 9:12am UTC](https://discuss.elastic.co/t/logstash-failing-to-parse-json/44471 "2016-03-18T09:12:22Z")

</div>

Hi - I have been trying to parse a json string and i get jasonpraseer error.. below is the json string.. . "{reportSuite=geometrixxapibeta, timeGMT=1457955198, receivedTimeGMT=1457955198, hitIdHigh=3130934947308273664,…

---

## [Date fields are not working](https://discuss.elastic.co/t/date-fields-are-not-working/161497)

<div class="topic-metadata">

**Author:** [@Nusrath](https://discuss.elastic.co/u/Nusrath)\
**Replies:** 10\
**Last updated:** [December 20, 2018, 11:28am UTC](https://discuss.elastic.co/t/date-fields-are-not-working/161497 "2018-12-20T11:28:42Z")

</div>

Hello everyone, As I am trying to populate area chart with my date fields. It is not working in kibana, when i check with elasticsearch query its working there. My elasticsearch query : which is showing results …

---

## [Double CPU usage after 1.4.5 to 2.0](https://discuss.elastic.co/t/double-cpu-usage-after-1-4-5-to-2-0/35147)

<div class="topic-metadata">

**Author:** [@jveldboom](https://discuss.elastic.co/u/jveldboom)\
**Replies:** 13\
**Last updated:** [November 28, 2015, 11:28pm UTC](https://discuss.elastic.co/t/double-cpu-usage-after-1-4-5-to-2-0/35147 "2015-11-28T23:28:19Z")

</div>

Is anyone else experiencing higher CPU usage after upgrading to 2.0? We were planing to migrate to 2.0 over the weekend but our initial tests show 2.0 is using at least twice the CPU - sometimes much more - than our no…

---

## [Security Error on scheduled watches](https://discuss.elastic.co/t/security-error-on-scheduled-watches/128433)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 27\
**Last updated:** [May 9, 2018, 9:04pm UTC](https://discuss.elastic.co/t/security-error-on-scheduled-watches/128433 "2018-05-09T21:04:25Z")

</div>

I'm able to sucessfully execute the watch with http input via enforced execution. POST \_xpack/watcher/watch/\<\>/\_execute NOTE: http input is another Elastic search. But if the same is scheduled, getting security except…

---

## [Datatypes are not updated on Kibana](https://discuss.elastic.co/t/datatypes-are-not-updated-on-kibana/93065)

<div class="topic-metadata">

**Author:** [@shyamalaponnada](https://discuss.elastic.co/u/shyamalaponnada)\
**Replies:** 18\
**Last updated:** [July 24, 2017, 7:51pm UTC](https://discuss.elastic.co/t/datatypes-are-not-updated-on-kibana/93065 "2017-07-24T19:51:07Z")

</div>

Hi team, I am new to Elasticsearch. I am sending the Purelytics data from Dynatrace to ES and can see the data on Kibana. we have observed that data.startTime and data.endTime of JSON documents are mapped to Number d…

---

## [Limiting the relevancy score of all the searched documents](https://discuss.elastic.co/t/limiting-the-relevancy-score-of-all-the-searched-documents/48123)

<div class="topic-metadata">

**Author:** [@divyanshu\_marwah](https://discuss.elastic.co/u/divyanshu_marwah)\
**Replies:** 10\
**Last updated:** [April 25, 2016, 7:44pm UTC](https://discuss.elastic.co/t/limiting-the-relevancy-score-of-all-the-searched-documents/48123 "2016-04-25T19:44:04Z")

</div>

I want to limit the score of all the searched documents within 0 and 1.Please suggest a way to do this.

---

## [Cannot find geolocation in Kibana Visualization](https://discuss.elastic.co/t/cannot-find-geolocation-in-kibana-visualization/105879)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 11\
**Last updated:** [November 9, 2017, 1:51am UTC](https://discuss.elastic.co/t/cannot-find-geolocation-in-kibana-visualization/105879 "2017-11-09T01:51:39Z")

</div>

Hi I am parsing IIS logs - I am using logstash 5.6.3 Edit: apparently this is known? https://github.com/logstash-plugins/logstash-filter-geoip/issues/123 How to go about using location as an array and not a hash? I h…

---

## [Error while querying elasticsearch](https://discuss.elastic.co/t/error-while-querying-elasticsearch/100634)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 10\
**Last updated:** [October 17, 2017, 1:44pm UTC](https://discuss.elastic.co/t/error-while-querying-elasticsearch/100634 "2017-10-17T13:44:05Z")

</div>

Ho to overcome the following issue? Whether increasing the search queue capacity or any other config parameter will help? Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[\],"type":"search\_phase\_execution\_…

---

## [Elasticsearch service getting failed on Ubuntu 20.4](https://discuss.elastic.co/t/elasticsearch-service-getting-failed-on-ubuntu-20-4/317677)

<div class="topic-metadata">

**Author:** [@BJawaid](https://discuss.elastic.co/u/BJawaid)\
**Replies:** 37\
**Last updated:** [November 1, 2022, 7:07am UTC](https://discuss.elastic.co/t/elasticsearch-service-getting-failed-on-ubuntu-20-4/317677 "2022-11-01T07:07:59Z")

</div>

Hi, I have installed elasticsearch 7.1.0 on Ubuntu 20.4 with java-11-openjdk-amd64. Since I am not a developer hence I expect respect for this post. Elasticsearch service is getting started successfully whenever I run; …

---

## [Hi guys I have problem with elasticsearch Java its stopping, please see logs below](https://discuss.elastic.co/t/hi-guys-i-have-problem-with-elasticsearch-java-its-stopping-please-see-logs-below/123417)

<div class="topic-metadata">

**Author:** [@mabialakienda](https://discuss.elastic.co/u/mabialakienda)\
**Replies:** 17\
**Last updated:** [March 12, 2018, 7:38am UTC](https://discuss.elastic.co/t/hi-guys-i-have-problem-with-elasticsearch-java-its-stopping-please-see-logs-below/123417 "2018-03-12T07:38:51Z")

</div>

org.apache.lucene.codecs.blocktree.BlockTreeTermsWriter$TermsWriter.write(BlockTreeTermsWriter.java:869) ~\[lucene-core-7.2.1.jar:7.2.1 b2b6438b37073bee1fca40374e85bf91aa457c0b - ubuntu - 2018-01-10 00:48:43\] at org.apac…

---

## [Logstash monitoring help not seeing in Kibana](https://discuss.elastic.co/t/logstash-monitoring-help-not-seeing-in-kibana/303689)

<div class="topic-metadata">

**Author:** [@Mary2022](https://discuss.elastic.co/u/Mary2022)\
**Replies:** 14\
**Last updated:** [May 17, 2022, 2:54pm UTC](https://discuss.elastic.co/t/logstash-monitoring-help-not-seeing-in-kibana/303689 "2022-05-17T14:54:40Z")

</div>

Hi, I am new to ELK and I have been trying to follow the guides and so far I have been abled to install version 7.17 in our 2 kibana nodes and our 3 elasticsearch nodes. If I go to Kibana and look under Cluster Over…

---

## [Error: Could not find or load main class org.elasticsearch.shield.authc.esusers.tool.ESUsersTool](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-shield-authc-esusers-tool-esuserstool/56374)

<div class="topic-metadata">

**Author:** [@Jenny](https://discuss.elastic.co/u/Jenny)\
**Replies:** 16\
**Last updated:** [August 1, 2016, 7:37am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-shield-authc-esusers-tool-esuserstool/56374 "2016-08-01T07:37:19Z")

</div>

Hi, I am installing shield and get error when I want to add a user like below. I searched and found some answers, however none of them helped me solved this. Anybody help ? root@iZ28opsxl5dZ:\[/data/elk/elasticsearch-2…

---

## [Compressing and forcemerging past time-based indices](https://discuss.elastic.co/t/compressing-and-forcemerging-past-time-based-indices/256060)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 28\
**Last updated:** [December 10, 2020, 8:32pm UTC](https://discuss.elastic.co/t/compressing-and-forcemerging-past-time-based-indices/256060 "2020-12-10T20:32:45Z")

</div>

I have a bunch of past monthly indices that are read-only since no data is being indexed to them. I was thinking of applying best\_compression on them and then invoke the \_forcemerge api to reduce the num\_segments to 1. I…

---

## [Kibana search multiple elasticsearch instances](https://discuss.elastic.co/t/kibana-search-multiple-elasticsearch-instances/31740)

<div class="topic-metadata">

**Author:** [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)\
**Replies:** 10\
**Last updated:** [October 16, 2015, 7:28am UTC](https://discuss.elastic.co/t/kibana-search-multiple-elasticsearch-instances/31740 "2015-10-16T07:28:06Z")

</div>

I currently have the following environment setup with ELK. 2 elasticsearch servers 2 logstash servers 2 kibana servers logstash 1 is sending to elasticsearch 1 and kibana 1 is pointing at the elasticsearch 1 server I…

---

## [Big differences between tcpdump and packetbeat](https://discuss.elastic.co/t/big-differences-between-tcpdump-and-packetbeat/126082)

<div class="topic-metadata">

**Author:** [@Aner\_Izraeli1](https://discuss.elastic.co/u/Aner_Izraeli1)\
**Replies:** 9\
**Last updated:** [April 4, 2018, 7:24am UTC](https://discuss.elastic.co/t/big-differences-between-tcpdump-and-packetbeat/126082 "2018-04-04T07:24:05Z")

</div>

Hello, im sniffing my mirrored traffic with packetbeat and see little amout of data on kibana. to compare - i tcpdumped my traffic, chose a string to grep - 'quattroruote' while running grep on tcpdump pcap file (more…

---

## [How to split a pure string like YYYYMMDDHHmm and convert into timestamp?](https://discuss.elastic.co/t/how-to-split-a-pure-string-like-yyyymmddhhmm-and-convert-into-timestamp/93379)

<div class="topic-metadata">

**Author:** [@TaurusD](https://discuss.elastic.co/u/TaurusD)\
**Replies:** 9\
**Last updated:** [July 20, 2017, 1:35am UTC](https://discuss.elastic.co/t/how-to-split-a-pure-string-like-yyyymmddhhmm-and-convert-into-timestamp/93379 "2017-07-20T01:35:57Z")

</div>

Hi, I'm currently using logstash to get some string which in a format of YYYYMMDDHHmm. That's a kind of pure "time" string which seems hardly to map by grok filter. I have searched solution for a long time but none of …

---

## [Greek tones problem](https://discuss.elastic.co/t/greek-tones-problem/76732)

<div class="topic-metadata">

**Author:** [@Grigorios\_Loukidis](https://discuss.elastic.co/u/Grigorios_Loukidis)\
**Replies:** 17\
**Last updated:** [February 28, 2017, 12:04pm UTC](https://discuss.elastic.co/t/greek-tones-problem/76732 "2017-02-28T12:04:40Z")

</div>

Hello! I am using elasticsearch mainly for greek words searching. My main problem is that i can't find a solution in greek accents when I make a search.For example when I search the word παιδια I want to get back παιδια …

[Previous page](https://discuss.elastic.co/top.md?page=85&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=87&per_page=50&period=all)
