# Top **URL:** https://discuss.elastic.co/top.md?page=866&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 867 --- ## [Visualization missing data from saved search](https://discuss.elastic.co/t/visualization-missing-data-from-saved-search/175463)
**Author:** [@EricFeldbauer](https://discuss.elastic.co/u/EricFeldbauer)\ **Replies:** 3\ **Last updated:** [April 8, 2019, 1:38pm UTC](https://discuss.elastic.co/t/visualization-missing-data-from-saved-search/175463 "2019-04-08T13:38:19Z")
Hello! I am more of an end-user of Kibana and not an IT expert. Therefore I don't have much knowledge on JSON or SQL or any other type of coding. I'm working with a pre-existing saved search and linked visualization. I r… --- ## [Data replication from one ES to another using Logstash](https://discuss.elastic.co/t/data-replication-from-one-es-to-another-using-logstash/149690)
**Author:** [@Dolph\_2709](https://discuss.elastic.co/u/Dolph_2709)\ **Replies:** 3\ **Last updated:** [September 25, 2018, 9:54pm UTC](https://discuss.elastic.co/t/data-replication-from-one-es-to-another-using-logstash/149690 "2018-09-25T21:54:22Z")
Hello, I need to replicate data from old ES (ver. 1.1) instance to latest ELK. The older ES is part of IBM Mobile First solution, I can access it through REST API. This is a Logstash's config script I use on destinati… --- ## [Geoip not working while taking input from lumberjack](https://discuss.elastic.co/t/geoip-not-working-while-taking-input-from-lumberjack/42390)
**Author:** [@shivam\_singh](https://discuss.elastic.co/u/shivam_singh)\ **Replies:** 4\ **Last updated:** [February 24, 2016, 7:44am UTC](https://discuss.elastic.co/t/geoip-not-working-while-taking-input-from-lumberjack/42390 "2016-02-24T07:44:23Z")
Hi, When i send nginx logs using logstash-forwarder i am getting following in response \`172.10.6.182 - - \[22/Feb/2016:02:06:53 -0500\] "GET /analytics.js HTTP/1.1" 301 184 "http://www.hjhjhjkk.com/searchResult" "Mozi… --- ## [Cost of Watcher and Marvel](https://discuss.elastic.co/t/cost-of-watcher-and-marvel/35664)
**Author:** [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)\ **Replies:** 4\ **Last updated:** [November 27, 2015, 9:32am UTC](https://discuss.elastic.co/t/cost-of-watcher-and-marvel/35664 "2015-11-27T09:32:38Z")
Hi there! I wanted to know what kind of cost I can expect with Watcher and Marvel. I recall reading somewhere that these are not open source like Elasticsearch, Logstash and Kibana. Thanks for the help! --- ## [Daily index with static mapping](https://discuss.elastic.co/t/daily-index-with-static-mapping/23600)
**Author:** [@Mohamed\_TEYEB](https://discuss.elastic.co/u/Mohamed_TEYEB)\ **Replies:** 4\ **Last updated:** [May 14, 2015, 10:57pm UTC](https://discuss.elastic.co/t/daily-index-with-static-mapping/23600 "2015-05-14T22:57:14Z")
Hi, Right now, I have only one index which does contain 1 type. So I did create the mapping and place under the config/mapping as explained by the documentation : http://www.elastic.co/guide/en/elasticsearch/ref… --- ## [Netflow - Flow data reaching server, Logstash zero output](https://discuss.elastic.co/t/netflow-flow-data-reaching-server-logstash-zero-output/144774)
**Author:** [@taking-care-of-busin](https://discuss.elastic.co/u/taking-care-of-busin)\ **Replies:** 6\ **Last updated:** [August 17, 2018, 7:09pm UTC](https://discuss.elastic.co/t/netflow-flow-data-reaching-server-logstash-zero-output/144774 "2018-08-17T19:09:21Z")
Hello, I have installed an ELK Stack on a Ubuntu 18.04 LXC/Container. I am sending Netflow v9 flows from a Cisco ASR9000 node to Logstash (end purpose is to use Elastiflow), and the flows are getting to the server (con… --- ## [Can't make conditionnal filtering to work](https://discuss.elastic.co/t/cant-make-conditionnal-filtering-to-work/65191)
**Author:** [@Houss](https://discuss.elastic.co/u/Houss)\ **Replies:** 6\ **Last updated:** [November 7, 2016, 11:30am UTC](https://discuss.elastic.co/t/cant-make-conditionnal-filtering-to-work/65191 "2016-11-07T11:30:15Z")
Hello, I plan on migrating to logstash (from graylog) and I'm facing a problem with the conditionnal filtering. Without the condition, the grok pattern works fine and as expected. However, if I put the condition, it wi… --- ## ['IElasticClient' does not contain a definition for 'CreateIndex' Error](https://discuss.elastic.co/t/ielasticclient-does-not-contain-a-definition-for-createindex-error/191472)
**Author:** [@Ilyoskhuja](https://discuss.elastic.co/u/Ilyoskhuja)\ **Replies:** 1\ **Last updated:** [July 21, 2019, 11:12pm UTC](https://discuss.elastic.co/t/ielasticclient-does-not-contain-a-definition-for-createindex-error/191472 "2019-07-21T23:12:46Z")
I removed my nest 6.5 from asp.net core project , and add nest 7.1.0 ( package "Elasticsearch.Net/7.1.0")but i have error like ( 'IElasticClient' does not contain a definition for 'CreateIndex' ) . How Fix this error? --- ## [How to test application with multiple mapping types after their deprecation?](https://discuss.elastic.co/t/how-to-test-application-with-multiple-mapping-types-after-their-deprecation/113740)
**Author:** [@Kornelia\_Watson](https://discuss.elastic.co/u/Kornelia_Watson)\ **Replies:** 8\ **Last updated:** [January 11, 2018, 2:50pm UTC](https://discuss.elastic.co/t/how-to-test-application-with-multiple-mapping-types-after-their-deprecation/113740 "2018-01-11T14:50:06Z")
Hi, We have some ruby scripts that aggregate and re-index data in ES. Whenever we make changes to these scripts we first run them locally to make sure we didn't break anything and that data is correctly indexed. I somet… --- ## [Kibana is not loading on 5601](https://discuss.elastic.co/t/kibana-is-not-loading-on-5601/168561)
**Author:** [@soumrock123](https://discuss.elastic.co/u/soumrock123)\ **Replies:** 2\ **Last updated:** [February 18, 2019, 8:37pm UTC](https://discuss.elastic.co/t/kibana-is-not-loading-on-5601/168561 "2019-02-18T20:37:32Z")
I am using docker-compose to bring up the elastic stack. Everything was working fine till yesterday. I decided to push bulk size database query data, so Kibana started throwing timeout errors. Hence I customized the kiba… --- ## [Query top 5 from multiple indices](https://discuss.elastic.co/t/query-top-5-from-multiple-indices/85777)
**Author:** [@RobinL](https://discuss.elastic.co/u/RobinL)\ **Replies:** 2\ **Last updated:** [May 16, 2017, 1:27pm UTC](https://discuss.elastic.co/t/query-top-5-from-multiple-indices/85777 "2017-05-16T13:27:46Z")
The title says it all really, I need to write a query which will search multiple indices and returns the top 5 results for each index. What can i use to do this? Thx --- ## [Cluster.info.update.interval what the default time](https://discuss.elastic.co/t/cluster-info-update-interval-what-the-default-time/100435)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 1\ **Last updated:** [September 15, 2017, 4:34pm UTC](https://discuss.elastic.co/t/cluster-info-update-interval-what-the-default-time/100435 "2017-09-15T16:34:12Z")
cluster.info.update.interval what the default time, what time about "cluster.info.update.interval " settings in a large cluster as 500T data 200 nodes. --- ## [Scripted Field creation based on subtraction of time](https://discuss.elastic.co/t/scripted-field-creation-based-on-subtraction-of-time/73667)
**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\ **Replies:** 1\ **Last updated:** [February 2, 2017, 5:39pm UTC](https://discuss.elastic.co/t/scripted-field-creation-based-on-subtraction-of-time/73667 "2017-02-02T17:39:07Z")
Hi All, Please suggest how to create the scripted field to have the difference of the time based on specific condition? Problem statement- The message with unique message ID traverses to 4 states during batch execution … --- ## [How to set field names to lowercase while creating an index using NEST?](https://discuss.elastic.co/t/how-to-set-field-names-to-lowercase-while-creating-an-index-using-nest/67756)
**Author:** [@hhkx](https://discuss.elastic.co/u/hhkx)\ **Replies:** 1\ **Last updated:** [December 1, 2016, 2:12pm UTC](https://discuss.elastic.co/t/how-to-set-field-names-to-lowercase-while-creating-an-index-using-nest/67756 "2016-12-01T14:12:46Z")
Hi, I have been creating a repository with c# for elastic search. Get function is like that: var response = client.Search\(s =\> s .From(0) .Size(10) .Index(\_indexName) .Type(\_typeName) … --- ## [\[OutOfMemoryError\[Java heap space\]\]](https://discuss.elastic.co/t/outofmemoryerror-java-heap-space/1414)
**Author:** [@benmccann](https://discuss.elastic.co/u/benmccann)\ **Replies:** 1\ **Last updated:** [May 28, 2015, 9:12am UTC](https://discuss.elastic.co/t/outofmemoryerror-java-heap-space/1414 "2015-05-28T09:12:10Z")
I'm getting lots of errors in my logs today with messages like: \[OutOfMemoryError\[Java heap space\]\] And: org.elasticsearch.transport.NodeNotConnectedException I'm guessing the NodeNotConnectedException is probably … --- ## [Exiting: 2 errors: metricset 'system/load' not found; error connecting to dbus: dial tcp 127.0.0.1:12434: connectex: No connection could be made because the target machine actively refused it](https://discuss.elastic.co/t/exiting-2-errors-metricset-system-load-not-found-error-connecting-to-dbus-dial-tcp-127-0-0-1-connectex-no-connection-could-be-made-because-the-target-machine-actively-refused-it/248781)
**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\ **Replies:** 3\ **Last updated:** [October 6, 2020, 11:24am UTC](https://discuss.elastic.co/t/exiting-2-errors-metricset-system-load-not-found-error-connecting-to-dbus-dial-tcp-127-0-0-1-connectex-no-connection-could-be-made-because-the-target-machine-actively-refused-it/248781 "2020-10-06T11:24:43Z")
I am getting above error when i am trying to start metricbeat. please help to resolve this issue --- ## [Filebeat how to autodiscover kubernetes service and fetch pod log?](https://discuss.elastic.co/t/filebeat-how-to-autodiscover-kubernetes-service-and-fetch-pod-log/237997)
**Author:** [@chanjarster](https://discuss.elastic.co/u/chanjarster)\ **Replies:** 3\ **Last updated:** [June 22, 2020, 8:18am UTC](https://discuss.elastic.co/t/filebeat-how-to-autodiscover-kubernetes-service-and-fetch-pod-log/237997 "2020-06-22T08:18:21Z")
I've deploy filebeat on kubernetes cluster following the doc. And set resource: service in the config file: filebeat.autodiscover: providers: - type: kubernetes resource: service no… --- ## [The write bulk is stuck for a long time, causing the node load to rise and the cluster cannot be written](https://discuss.elastic.co/t/the-write-bulk-is-stuck-for-a-long-time-causing-the-node-load-to-rise-and-the-cluster-cannot-be-written/151971)
**Author:** [@linyy](https://discuss.elastic.co/u/linyy)\ **Replies:** 3\ **Last updated:** [October 18, 2018, 1:58am UTC](https://discuss.elastic.co/t/the-write-bulk-is-stuck-for-a-long-time-causing-the-node-load-to-rise-and-the-cluster-cannot-be-written/151971 "2018-10-18T01:58:37Z")
Elasticsearch version: 6.4.1 JVM version: openjdk 1.8.0\_45 system: redhat 6.9 this task caused several nodes to load very high, and then the cluster could not write. Restart the node with high load to recover. Is ther… --- ## [Spark sql query for empty string](https://discuss.elastic.co/t/spark-sql-query-for-empty-string/141588)
**Author:** [@wangqinghuan](https://discuss.elastic.co/u/wangqinghuan)\ **Replies:** 3\ **Last updated:** [July 27, 2018, 3:02pm UTC](https://discuss.elastic.co/t/spark-sql-query-for-empty-string/141588 "2018-07-27T15:02:18Z")
I am using spark sql to query for an empty string . Documents are returned exactly when I use elasticsearch dsl as following: user/\_search { "query": { "term": { "type": "" } } } But in spark sql, I written a s… --- ## [Document editor](https://discuss.elastic.co/t/document-editor/72723)
**Author:** [@PandKing](https://discuss.elastic.co/u/PandKing)\ **Replies:** 0\ **Last updated:** [January 25, 2017, 4:41am UTC](https://discuss.elastic.co/t/document-editor/72723 "2017-01-25T04:41:37Z")
Are there any visual document editors out there for ES documents yet ? In terms of documents that are a few thousand entities, like an server asset document ? Might have make, model, owner, etc where a simple visu… --- ## [Remove buckets from being returned in Aggregation](https://discuss.elastic.co/t/remove-buckets-from-being-returned-in-aggregation/287107)
**Author:** [@EricPSU](https://discuss.elastic.co/u/EricPSU)\ **Replies:** 4\ **Last updated:** [October 19, 2021, 3:44pm UTC](https://discuss.elastic.co/t/remove-buckets-from-being-returned-in-aggregation/287107 "2021-10-19T15:44:58Z")
Is there a way to prevent the buckets array from being returned as a part of the aggregation result? I am using a sum\_bucket to total all of the buckets and I don't need all of the buckets to be returned. I'm just usin… --- ## [Error: Curl with Elasticsearch 6](https://discuss.elastic.co/t/error-curl-with-elasticsearch-6/144620)
**Author:** [@ebolanos137](https://discuss.elastic.co/u/ebolanos137)\ **Replies:** 4\ **Last updated:** [August 16, 2018, 8:47pm UTC](https://discuss.elastic.co/t/error-curl-with-elasticsearch-6/144620 "2018-08-16T20:47:35Z")
I'm trying to do curl -X PUT -d @'/home/cuckoo/.cuckoo/elasticsearch/template.json' 'http://localhost:9200/\_template/cuckoo' but, I have this error: {"error":"Content-Type header \[application/x-www-form-urlencoded\] is… --- ## [Ingest pipeline error - ailed to parse with all enclosed parsers](https://discuss.elastic.co/t/ingest-pipeline-error-ailed-to-parse-with-all-enclosed-parsers/263809)
**Author:** [@Glenn\_Glashagen](https://discuss.elastic.co/u/Glenn_Glashagen)\ **Replies:** 5\ **Last updated:** [February 10, 2021, 9:12pm UTC](https://discuss.elastic.co/t/ingest-pipeline-error-ailed-to-parse-with-all-enclosed-parsers/263809 "2021-02-10T21:12:04Z")
Hello everybody, I'm recently encountering problem with my ingestion pipeline, where part of if tries to parse a date. If it fails to do so, it should continue and not create the fields time\_log and rest\_message. This … --- ## [High fetch times](https://discuss.elastic.co/t/high-fetch-times/15244)
**Author:** [@Arik\_Gaisler](https://discuss.elastic.co/u/Arik_Gaisler)\ **Replies:** 5\ **Last updated:** [January 15, 2014, 4:03pm UTC](https://discuss.elastic.co/t/high-fetch-times/15244 "2014-01-15T16:03:15Z")
Im using ElasticHQ to monitor our cluster and I am noticing that our Search Fetch times are about 5X more then query times, which seems unreasonable (20ms vs ~4ms) Im also noticing a 1.44 mb swap space on one of t… --- ## [Elasticsearch Postings highlighter Error - cannot highlight](https://discuss.elastic.co/t/elasticsearch-postings-highlighter-error-cannot-highlight/112537)
**Author:** [@anggiaj](https://discuss.elastic.co/u/anggiaj)\ **Replies:** 3\ **Last updated:** [January 3, 2018, 6:24am UTC](https://discuss.elastic.co/t/elasticsearch-postings-highlighter-error-cannot-highlight/112537 "2018-01-03T06:24:57Z")
I got the following errors when trying to search with posting highlighter: { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "field 'author\_name' was indexed with… --- ## [Limit the max document size after ingest pipeline](https://discuss.elastic.co/t/limit-the-max-document-size-after-ingest-pipeline/265892)
**Author:** [@Crazedpeanut](https://discuss.elastic.co/u/Crazedpeanut)\ **Replies:** 6\ **Last updated:** [March 2, 2021, 4:32am UTC](https://discuss.elastic.co/t/limit-the-max-document-size-after-ingest-pipeline/265892 "2021-03-02T04:32:05Z")
Is there way way to limit the size of a document after an ingest pipeline has processed it? For example, I want to limit the size of indexed documents to 1mb. A 4mb PDF might be uploaded, the attachment processor extrac… --- ## [Whitespace analyzer (char-filter And token-filter)](https://discuss.elastic.co/t/whitespace-analyzer-char-filter-and-token-filter/205664)
**Author:** [@Irakli](https://discuss.elastic.co/u/Irakli)\ **Replies:** 6\ **Last updated:** [October 30, 2019, 12:12pm UTC](https://discuss.elastic.co/t/whitespace-analyzer-char-filter-and-token-filter/205664 "2019-10-30T12:12:56Z")
Hi there, As I know we have 3 steps on text field when document with text field is indexed in elasticsearch. First - Char-filter process, Second - Tokenizing process, Third - Token filtering process I have the follo… --- ## [Installation documentation 1.7 faulty](https://discuss.elastic.co/t/installation-documentation-1-7-faulty/29716)
**Author:** [@mos](https://discuss.elastic.co/u/mos)\ **Replies:** 6\ **Last updated:** [September 23, 2015, 7:22am UTC](https://discuss.elastic.co/t/installation-documentation-1-7-faulty/29716 "2015-09-23T07:22:26Z")
Just installed elasticsearch 1.7.2 on windows. Running: elasticsearch.bat works! But elasticsearch --cluster.name my\_cluster\_name failed with Unrecognized option: --cluster.name Error: Could not create the J… --- ## [How to show percentage column in table lens](https://discuss.elastic.co/t/how-to-show-percentage-column-in-table-lens/326825)
**Author:** [@PappuSingh](https://discuss.elastic.co/u/PappuSingh)\ **Replies:** 2\ **Last updated:** [March 2, 2023, 11:20am UTC](https://discuss.elastic.co/t/how-to-show-percentage-column-in-table-lens/326825 "2023-03-02T11:20:13Z")
Hi, How we can calculate and add a percentage column in the below snap --- ## [Logtash dont capture Logger.error logs using logback](https://discuss.elastic.co/t/logtash-dont-capture-logger-error-logs-using-logback/116976)
**Author:** [@SawyerFord](https://discuss.elastic.co/u/SawyerFord)\ **Replies:** 2\ **Last updated:** [January 27, 2018, 9:32pm UTC](https://discuss.elastic.co/t/logtash-dont-capture-logger-error-logs-using-logback/116976 "2018-01-27T21:32:04Z")
Below is the configuration of logback.xml I tried many ways but it does not encode or print Logger.error statements \ \ \ **Author:** [@mbone](https://discuss.elastic.co/u/mbone)\ **Replies:** 2\ **Last updated:** [December 29, 2016, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-not-creatng-logstash-or-packetbeat-indexes/70079 "2016-12-29T13:55:13Z") I have set up elasticsearch, kibana, logstash, and packetbeat. I have an issue with elasticsearch not creating indexes, and therefore no data is getting to it. The flows I am testing are: - packetbeat-\> elasticsearch -… --- ## [How do I insert a token into Kibana client HTTP request header](https://discuss.elastic.co/t/how-do-i-insert-a-token-into-kibana-client-http-request-header/53898)
**Author:** [@Danny\_Lieberman](https://discuss.elastic.co/u/Danny_Lieberman)\ **Replies:** 2\ **Last updated:** [June 25, 2016, 6:15pm UTC](https://discuss.elastic.co/t/how-do-i-insert-a-token-into-kibana-client-http-request-header/53898 "2016-06-25T18:15:21Z")
I want to set a custom HTTP header with a token that will be sent to the Kibana server. I've been reading the code the past couple days and I see that there is a file in ui/public/chrome/api/xsrf.js that sets a XHR re… --- ## [Undefined method \`each' for nil:NilClass](https://discuss.elastic.co/t/undefined-method-each-for-nil-nilclass/180976)
**Author:** [@souf\_el\_badraoui](https://discuss.elastic.co/u/souf_el_badraoui)\ **Replies:** 1\ **Last updated:** [May 14, 2019, 12:32pm UTC](https://discuss.elastic.co/t/undefined-method-each-for-nil-nilclass/180976 "2019-05-14T12:32:16Z")
Hi, We are trying to flatten a json array with the following ruby code in Logstash ruby { init =\> '@ignore = \[ "@metadata", "@version" , "beat", "type", "tags"\]' code =\> ' event.get("\[EventData\]").each { | k, v… --- ## [Aliasing fields in visualizations](https://discuss.elastic.co/t/aliasing-fields-in-visualizations/97650)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 1\ **Last updated:** [August 21, 2017, 7:16am UTC](https://discuss.elastic.co/t/aliasing-fields-in-visualizations/97650 "2017-08-21T07:16:24Z")
I have a Data Table visualization. The statuses have there own values, 1 - Net Banking 2 - Cash On delivery 3 - Mobile payment Is there any way I can alias these values to their meaning in this data table ? --- ## [Indexing Hierarchical Couchbase Documents](https://discuss.elastic.co/t/indexing-hierarchical-couchbase-documents/70400)
**Author:** [@Dogugun\_Ozkaya](https://discuss.elastic.co/u/Dogugun_Ozkaya)\ **Replies:** 1\ **Last updated:** [January 3, 2017, 9:19am UTC](https://discuss.elastic.co/t/indexing-hierarchical-couchbase-documents/70400 "2017-01-03T09:19:53Z")
Hi Everyone, I'm quite a newbie in elasticsearch. I have a problem regarding indexing referenced documents. I'm using couchbase as the db of my project. And most of the documents are linked to each other hierarchically. … --- ## [\[ANN\] Logstash HTTP Poller Input Released!](https://discuss.elastic.co/t/ann-logstash-http-poller-input-released/26522)
**Author:** [@andrewvc](https://discuss.elastic.co/u/andrewvc)\ **Replies:** 2\ **Last updated:** [September 16, 2015, 3:35pm UTC](https://discuss.elastic.co/t/ann-logstash-http-poller-input-released/26522 "2015-09-16T15:35:52Z")
Hi all, we've just released a new logstash input plugin: HTTP Poller. This plugin makes it easy to repeatedly hit URLs and turn their output into events, as well as provide performance and other data about URLs. Full A… --- ## [Logstash cannot find filter Alter](https://discuss.elastic.co/t/logstash-cannot-find-filter-alter/156558)
**Author:** [@motts](https://discuss.elastic.co/u/motts)\ **Replies:** 3\ **Last updated:** [November 14, 2018, 7:05pm UTC](https://discuss.elastic.co/t/logstash-cannot-find-filter-alter/156558 "2018-11-14T19:05:07Z")
Hello, I am using Logstash 6.4 and I am trying to install the Alter plugin. I navigated to "/usr/share/logstash/bin" and then ran ./logstash-plugin install logstash-filter-alter Everything seemed to go OK. It found t… --- ## [Kibana Region Maps in AWS EC2](https://discuss.elastic.co/t/kibana-region-maps-in-aws-ec2/130157)
**Author:** [@georgezoto](https://discuss.elastic.co/u/georgezoto)\ **Replies:** 8\ **Last updated:** [May 3, 2018, 9:18pm UTC](https://discuss.elastic.co/t/kibana-region-maps-in-aws-ec2/130157 "2018-05-03T21:18:26Z")
Hello Kibana team, This might be a question right on the boundary of Kibana and AWS but I am not able to find any guidance online. I am hosting Elasticsearch and Kibana 6.2.4 on a 3 node EC2 cluster for the whole purpos… --- ## [Using alias from spark SQL](https://discuss.elastic.co/t/using-alias-from-spark-sql/114239)
**Author:** [@frederic.boissiere](https://discuss.elastic.co/u/frederic.boissiere)\ **Replies:** 3\ **Last updated:** [January 29, 2018, 4:41am UTC](https://discuss.elastic.co/t/using-alias-from-spark-sql/114239 "2018-01-29T04:41:05Z")
Hello, I'm using spark SQL in order to extract data from elastic into csv files. used software versions : elastic 5.5.2 spark SQL 2.1.1 elasticsearch-spark-20\_2.11 5.5.2 scala 2.11.8 I query elastic using alias. Whe… --- ## [Problem to start filebeat](https://discuss.elastic.co/t/problem-to-start-filebeat/37053)
**Author:** [@Sangheon](https://discuss.elastic.co/u/Sangheon)\ **Replies:** 3\ **Last updated:** [December 14, 2015, 6:33am UTC](https://discuss.elastic.co/t/problem-to-start-filebeat/37053 "2015-12-14T06:33:10Z")
Hello II set a ELK Server(172.16.223.19) and I installed a filebeat (172.16.28.153) using the shipper for apache logs. When i run a filebeat, normally transfer a access log for a few seconds, then I got an error mess… --- ## [Full-Text Search in Visualization-Filter?](https://discuss.elastic.co/t/full-text-search-in-visualization-filter/26630)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 3\ **Last updated:** [August 3, 2015, 7:52am UTC](https://discuss.elastic.co/t/full-text-search-in-visualization-filter/26630 "2015-08-03T07:52:46Z")
Hey, we created and saved quite a bit of visualizations in the new shiny kibana4 and we came to the point where clicking through all the rows when opening a visualization is quite an effort, so we tried using the filte… --- ## [Heartbeat mappings missing](https://discuss.elastic.co/t/heartbeat-mappings-missing/299220)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 12:16pm UTC](https://discuss.elastic.co/t/heartbeat-mappings-missing/299220 "2022-03-10T12:16:57Z")
Hello, I'm using ELK 7.17.0 with Heartbeat 7.17 on Linux. Before starting Heartbeat, I ran the setup command to load index template for Heartbeat and tested the configuration successfully. After starting the Heartbeat … --- ## [Investigating high disk usage](https://discuss.elastic.co/t/investigating-high-disk-usage/243992)
**Author:** [@gfeher](https://discuss.elastic.co/u/gfeher)\ **Replies:** 4\ **Last updated:** [August 11, 2020, 9:09pm UTC](https://discuss.elastic.co/t/investigating-high-disk-usage/243992 "2020-08-11T21:09:15Z")
I am running Elastic App Search on https://cloud.elastic.co/ (GCP). I have about 40000 documents and I have multiple deployments with these same sets of documents. What I have noticed is that the disk usage is very diffe… --- ## [Unable to setup Elasticsearch python instance on https](https://discuss.elastic.co/t/unable-to-setup-elasticsearch-python-instance-on-https/311018)
**Author:** [@Edinpain](https://discuss.elastic.co/u/Edinpain)\ **Replies:** 7\ **Last updated:** [August 2, 2022, 5:05pm UTC](https://discuss.elastic.co/t/unable-to-setup-elasticsearch-python-instance-on-https/311018 "2022-08-02T17:05:27Z")
Sweet lord it's been a long day. Ubuntu newb, ~0 zero knowledge in cryptography certificates. Creating a flask project and want to follow this tutorial to use elastic to index my postgres + sqlalchemy database. Python: … --- ## [Best way to parse multiple message patterns](https://discuss.elastic.co/t/best-way-to-parse-multiple-message-patterns/304836)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 7\ **Last updated:** [May 18, 2022, 3:59pm UTC](https://discuss.elastic.co/t/best-way-to-parse-multiple-message-patterns/304836 "2022-05-18T15:59:02Z")
Hello, I want to ask if it is possible to have multiple dissect patterns? I know i can create conditionals based on the "\_dissectfailure" and create another dissect to parse other patterns, but this doesn't prevent the… --- ## [7.16.2 triggering Google Cloud security alert](https://discuss.elastic.co/t/7-16-2-triggering-google-cloud-security-alert/292618)
**Author:** [@gehgerds](https://discuss.elastic.co/u/gehgerds)\ **Replies:** 7\ **Last updated:** [December 23, 2021, 11:16pm UTC](https://discuss.elastic.co/t/7-16-2-triggering-google-cloud-security-alert/292618 "2021-12-23T23:16:53Z")
After bumping the docker image version to elasticsearch:7.16.2 in GKE, whenever I start elasticsearch pod, it immediately triggers a security alert Added Library Loaded Added\_Library\_Fullpath: /tmp/twIW2T (deleted) de… --- ## [I Cant snapshot to s3](https://discuss.elastic.co/t/i-cant-snapshot-to-s3/220336)
**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\ **Replies:** 7\ **Last updated:** [March 6, 2020, 6:17am UTC](https://discuss.elastic.co/t/i-cant-snapshot-to-s3/220336 "2020-03-06T06:17:26Z")
Hi, I'm getting this error once i ran the curator snaphots to s3 "{"error":{"root\_cause":\[{"type":"multi\_object\_delete\_exception","reason":"One or more objects could not be deleted (Service: null; Status Code: 200; Err… --- ## [Why 9 hour long shard reallocs when restarting one node in 2-node cluster?](https://discuss.elastic.co/t/why-9-hour-long-shard-reallocs-when-restarting-one-node-in-2-node-cluster/41514)
**Author:** [@vhj](https://discuss.elastic.co/u/vhj)\ **Replies:** 7\ **Last updated:** [March 3, 2016, 7:14pm UTC](https://discuss.elastic.co/t/why-9-hour-long-shard-reallocs-when-restarting-one-node-in-2-node-cluster/41514 "2016-03-03T19:14:04Z")
Hi, We've got about 8000 shards, and 10Gb of analytics data in our two-node cluster. We have one replica. The nodes are in separate datacenters (I know - not recommended) with 120ms network latency. If we reboot on… --- ## [Get results into array with JAVA](https://discuss.elastic.co/t/get-results-into-array-with-java/50520)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 1\ **Last updated:** [May 27, 2016, 4:34am UTC](https://discuss.elastic.co/t/get-results-into-array-with-java/50520 "2016-05-27T04:34:18Z")
I try to using JAVA API to query elasticsearch , but return results not include @timestamp value , and i found the result is shown "message" SearchResponse response = client.prepareSearch("logstash-\*") .setTypes("log") … --- ## [Unable to automatically index nested json as nested type elastic search](https://discuss.elastic.co/t/unable-to-automatically-index-nested-json-as-nested-type-elastic-search/270627)
**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\ **Replies:** 5\ **Last updated:** [April 20, 2021, 7:20am UTC](https://discuss.elastic.co/t/unable-to-automatically-index-nested-json-as-nested-type-elastic-search/270627 "2021-04-20T07:20:05Z")
I am trying to index a nested json into elastic search using the bulk api. When i pass a nested json to the bulk api method, es was able to automatically identify the nested structure. Here is the json i passed - em… [Previous page](https://discuss.elastic.co/top.md?page=865&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=867&per_page=50&period=all)